Benign Download

webserver-whoami.cmd

Temp or Tmp path segment
SHA-256d9ead4d30f84ca71ce36c6f42c246edfd9892f8f1b9151ca53c0b4231b0daea2
MaleculeH₂(F₂Po₂)

Evidence

Temp or Tmp path segment line 1
1cmd.exe /s /c "whoami > C:\php\xampp-windows-x64-8.2.12-0-VS16\xampp\tmp\edr_proof_win.txt"

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.