gatherNetworkInfo.vbs

  • File Path: C:\Windows\system32\gatherNetworkInfo.vbs

Hashes

Type Hash
MD5 2E6AF4D5BF6E31E728F409984C3045D4
SHA1 757BF5310F40A69D883F11E75F220E02FBAA0127
SHA256 D906D6126A1E9C9569EF81605D02F03EF94AA57B3AB9CBD56C996BAF22FA461B
SHA384 83C001CE29C85A306C37B2BCA4D32F839678E5B3D9B30875673A3F03EED4AD51F2160AC7571431D723F3CE7CE0082B19
SHA512 2FF376BEE712A61CB4A6FF8F0F3AC0AC9778ACDAF0CB767D9D085502CB8E9365458292266E994A3D973494759B43181511AAF050EC0D48BFA7E51B07A3B56BFA
SSDEEP 1536:sImNGeeGUJIgZf/A+qfwkgKo9kNxyJ3OOjPl68fef0qIbIE5ToGdKTYL7TBHQ/8S:sImNGXGUJtx/A+qfol6yqZs8J
PESHA1 757BF5310F40A69D883F11E75F220E02FBAA0127
PE256 D906D6126A1E9C9569EF81605D02F03EF94AA57B3AB9CBD56C996BAF22FA461B

Runtime Data

Child Processes:

conhost.exe cmd.exe cmd.exe

Open Handles:

Path Type
(R-D) C:\Windows\System32\cscript.exe File
(R-D) C:\Windows\System32\en-US\cscript.exe.mui File
(R-D) C:\Windows\System32\en-US\propsys.dll.mui File
(R-D) C:\Windows\System32\scrrun.dll File
(R-D) C:\Windows\System32\stdole2.tlb File
(R-D) C:\Windows\System32\wbem\wbemdisp.tlb File
(R-D) C:\Windows\System32\wshom.ocx File
(RW-) C:\Users\user File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\BaseNamedObjects\UrlZonesSM_user Section
\Sessions\1\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\Windows\Theme3205582532 Section
\Windows\Theme3800351183 Section

Loaded Modules:

Path
C:\Windows\SYSTEM32\cscript.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename:
  • Product Name:
  • Company Name:
  • File Version:
  • Product Version:
  • Language:
  • Legal Copyright:

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/d906d6126a1e9c9569ef81605d02f03ef94aa57b3ab9cbd56c996baf22fa461b/detection

MIT License. Copyright (c) 2020-2021 Strontic.