| Name | 3a255c0024916f19_590aee7bdd69b59b.customdestinations-ms |
|---|---|
| Filepath | c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms |
| Size | 7.8KB |
| Processes | 2124 (powershell.exe) |
| Type | data |
| MD5 | 6fd29def73b2779e0ae71c4eecd304f7 |
| SHA1 | 4ba660e4db856e04eb93a01c59ee764259ec55e7 |
| SHA256 | 3a255c0024916f19c5b3f5d4aa5cde453cc5d90b0784a15f0456e57e71a764b6 |
| CRC32 | 1F966CD8 |
| ssdeep | 96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:ctvXo5tvbHnorxTyQ |
| Yara |
|
| VirusTotal | Search for analysis |
| Name | 07abb4c76feea1bc_rocktrainings.bat |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\IXP000.TMP\rocktrainings.bat |
| Size | 3.1KB |
| Processes | 1932 (rocktrainingss.exe) |
| Type | Little-endian UTF-16 Unicode text, with very long lines, with no line terminators |
| MD5 | df70e1e15e998a308e9ef99b54156508 |
| SHA1 | d9f428fc56ca6c13acb416f299914f86e74e2b70 |
| SHA256 | 07abb4c76feea1bc39c914e929825f2fe7a1cadb3e2d8f0e93a1bb63f590956f |
| CRC32 | BC1F1864 |
| ssdeep | 48:mR+YIhW1tpXxstKsW98w1cw+yv2ScmoxTl0ItnK526XKSxG+jL5:mIYo4pXxs4sWGm+3Zrhysn85XKoGY5 |
| Yara | None matched |
| VirusTotal | Search for analysis |