questioneer-pdf.js

Queries for the computername (10 events)

Time & API	Arguments	Status	Return	Repeated
GetComputerNameW Oct. 18, 2021, 9:59 a.m.	computer_name: TEST22-PC	1	1	0
GetComputerNameW Oct. 18, 2021, 9:59 a.m.	computer_name: TEST22-PC	1	1	0
GetComputerNameW Oct. 18, 2021, 9:59 a.m.	computer_name: TEST22-PC	1	1	0
GetComputerNameW Oct. 18, 2021, 9:59 a.m.	computer_name: TEST22-PC	1	1	0
GetComputerNameW Oct. 18, 2021, 9:59 a.m.	computer_name: TEST22-PC	1	1	0
GetComputerNameW Oct. 18, 2021, 9:59 a.m.	computer_name: TEST22-PC	1	1	0
GetComputerNameW Oct. 18, 2021, 9:59 a.m.	computer_name: TEST22-PC	1	1	0
GetComputerNameW Oct. 18, 2021, 9:59 a.m.	computer_name: TEST22-PC	1	1	0
GetComputerNameW Oct. 18, 2021, 9:59 a.m.	computer_name: TEST22-PC	1	1	0
GetComputerNameW Oct. 18, 2021, 9:59 a.m.	computer_name: TEST22-PC	1	1	0

Executes one or more WMI queries (5 events)

wmi	select * from win32_VideoController
wmi	select * from win32_ComputerSystemProduct
wmi	select * from win32_Processor
wmi	select * from win32_ComputerSystem
wmi	select * from win32_LogicalDisk

Executes one or more WMI queries which can be used to identify virtual machines (4 events)

wmi	select * from win32_Processor
wmi	select * from win32_LogicalDisk
wmi	select * from win32_ComputerSystemProduct
wmi	select * from win32_ComputerSystem

File has been identified by 15 AntiVirus engines on VirusTotal as malicious (15 events)

Lionic	Trojan.Script.Startup.4!c
Arcabit	Trojan.Generic.D2D02B51
Cyren	JS/Agent.AUK!Eldorado
Symantec	ISB.Downloader!gen52
TrendMicro-HouseCall	TROJ_FRS.VSNTJH21
Kaspersky	HEUR:Trojan.Script.Startup.gen
BitDefender	Trojan.GenericKD.47197009
MicroWorld-eScan	Trojan.GenericKD.47197009
Ad-Aware	Trojan.GenericKD.47197009
Comodo	.UnclassifiedMalware@0
FireEye	Trojan.GenericKD.47197009
Emsisoft	Trojan.GenericKD.47197009 (B)
MAX	malware (ai score=81)
Microsoft	Trojan:JS/Tnega.AL!MTB
GData	Trojan.GenericKD.47197009