| File name: | telemetryCache.otc.session |
| Full analysis: | https://app.any.run/tasks/1c5a2bcb-bd0b-4246-9c9b-562687ffe214 |
| Verdict: | No threats detected |
| Analysis date: | October 08, 2019, 14:57:51 |
| OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
| MIME: | application/x-sqlite3 |
| File info: | SQLite 3.x database, last written using SQLite version 3019003 |
| MD5: | 484094530DE560854CF4EEA6D86FEC0E |
| SHA1: | 2F7F0636446A7792847D0B9DB1596C1110B7F3A8 |
| SHA256: | D440020E121BDAF465650270C3B5FDC70CEEADC5B70AB95BACB87ACC0BA6199B |
| SSDEEP: | 12:TLVlb/+/Tdiw3CgApztZFUY5xXn0yF/KsfoMqZNk5wc+NOleOzcINOM:TLqwx7f5R0ggY5aYLR |
| .sqlite/sqlite3 | | | SQLite 3.x database (100) |
|---|
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2724 | "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\admin\AppData\Local\Temp\telemetryCache.otc.session.sqlite | C:\Windows\system32\rundll32.exe | — | explorer.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows host process (Rundll32) Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) Modules
| |||||||||||||||