MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ab5342d9033898270f8671b88d03182e3cc5a1f3cef2c2b3f1ebbbff0af8da68. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ab5342d9033898270f8671b88d03182e3cc5a1f3cef2c2b3f1ebbbff0af8da68
SHA3-384 hash:	5c57c0c40c3974556ec4e359f850d15d90b7fe8dc18081f1fc552510db5667880aef1f99829fc25e6fc4107677848dea
SHA1 hash:	6a9e3f0acf6d7c432104627ea96b026c99c0f7e3
MD5 hash:	118a4a38666b652b4648f5b2e6a8a351
humanhash:	uniform-wisconsin-undress-california
File name:	USERENV.zip
Download:	download sample
File size:	86'729'364 bytes
First seen:	2026-05-27 11:18:23 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	1572864:ZfA6qZBqsTxdkfCjzEKYC1mSHaAR8d53JFcSUiTJ25X8IXNUZJQ/9v9zYBvcXZ0F:9gBtTxGYTXMl5ZDQ5X8KNX/9luO0jmp2
TLSH	T1891833AF82DBBDDD12946D820CA35FBA8F14B49519F71498AC13217EE204F4233DDDA6
Magika	zip
Reporter	JAMESWT_WT
Tags:	dll sharedrivedocuments-com zip zipped

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

263

Origin country :

IT

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Potential files of interest 1

File name:	USERENV.dll
File size:	104'857'600 bytes
SHA256 hash:	37defe4f6bf4f1ae62eda25f06dae43d337fd2fb3939e531246814d7ff405536
MD5 hash:	9de2797c8ca6180b99e06f452188a3bf
MIME type:	application/x-dosexec

Vendor Threat Intelligence

ACCE Zip_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/22a93d64-3d0e-4f25-a3cb-e59a71aa44f7/

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a16d2a85d76862ef9483f8b

Tags:

n/a

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

ZIP File - Malicious

Link:

https://app.docguard.net/ab5342d9033898270f8671b88d03182e3cc5a1f3cef2c2b3f1ebbbff0af8da68/results/dashboard

Behaviour

SuspiciousEmbeddedObjects detected

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

anti-debug fingerprint microsoft_visual_cc overlay reconnaissance

Link:

https://www.filescan.io/uploads/6a16d31612da0d249c59e8a5/reports/0d9b9378-41e5-4ae0-9fb6-ece5dedd2d17/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/ab5342d9033898270f8671b88d03182e3cc5a1f3cef2c2b3f1ebbbff0af8da68

Nucleon Malprob Benign

Score:

7%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/ab5342d9033898270f8671b88d03182e3cc5a1f3cef2c2b3f1ebbbff0af8da68

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win64.Trojan.Generic

Threat name:

Win64.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-05-27 11:22:37 UTC

File Type:

Binary (Archive)

Extracted files:

3

AV detection:

9 of 36 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vnjufwidhcmcod4gog4i2ayyfy6mliptz3zmfm7r5o576cxy3jua._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260527-rm6yfshx4t/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.