| File name: | SyncAppvPublishingServer.vbs |
| Full analysis: | https://app.any.run/tasks/dca464e9-f466-4f60-b471-d9bc58701517 |
| Verdict: | No threats detected |
| Analysis date: | January 14, 2020, 13:49:14 |
| OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
| MIME: | text/plain |
| File info: | ASCII text, with CRLF line terminators |
| MD5: | 20C4FE2B130D9F0C92D7629E71AFBB66 |
| SHA1: | F01DE532969553083CF7906B2709940F0A41B083 |
| SHA256: | B8A5C42BF6F7A14BA73660BE29F5C061D30B41C6D14E42B880A4EA522F43CE66 |
| SSDEEP: | 24:oDJ0iM9D6opZ9HP20c3AreKJvV164bhTbXGV+oWE/N8IwdeLVcHH8o:oDupD6uLHO0gAreKJvf669Cn/NEdemnB |
MALICIOUS
No malicious indicators.SUSPICIOUS
No suspicious indicators.INFO
No info indicators.
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
Total processes
33
Monitored processes
1
Malicious processes
0
Suspicious processes
0
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1016 | "C:\Windows\System32\WScript.exe" "C:\Users\admin\AppData\Local\Temp\SyncAppvPublishingServer.vbs" | C:\Windows\System32\WScript.exe | — | explorer.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Microsoft ® Windows Based Script Host Exit code: 0 Version: 5.8.7600.16385 Modules
| |||||||||||||||
Total events
10
Read events
10
Write events
0
Delete events
0
Modification events
Executable files
0
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
0
DNS requests
0
Threats
0
HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report