| Name | b1cb4604b5e11878_w_x_c.vbs |
|---|---|
| Filepath | C:\Windows\W_X_C.vbs |
| Size | 198.0B |
| Processes | 696 (7d0cd34c2af9d6d911083c8fb878820e46e3a9dfdbc8c847838b18efc7c1a93b.exe) |
| Type | ASCII text, with CRLF line terminators |
| MD5 | 8cf3dc56c9c0067663b1a99f2c6144aa |
| SHA1 | ef555501a3f2568ae0fadff5544e0b0183c07611 |
| SHA256 | b1cb4604b5e118788b95241e42e307f18e579f2ec5fa200fb75adb8383f78ad1 |
| CRC32 | 89584A7C |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | b35b2d0b6032a3e1_avscan.exe |
|---|---|
| Filepath | C:\Users\Administrator\AppData\Local\Temp\avscan.exe |
| Size | 15.4MB |
| Processes | 696 (7d0cd34c2af9d6d911083c8fb878820e46e3a9dfdbc8c847838b18efc7c1a93b.exe) |
| Type | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed |
| MD5 | 711aa4fba483aad35833e69073b6678c |
| SHA1 | de378966ff9fd02f3f67f7317113aa4a25a0725b |
| SHA256 | b35b2d0b6032a3e1b22f0dbb7ada57283c0fb25eea35550cb64ceef656020569 |
| CRC32 | A50BE1DD |
| ssdeep | None |
| Yara |
|
| VirusTotal | Search for analysis |