IOC Report
upd-ps-x64-6.0.0.18849.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\upd-ps-x64-6.0.0.18849.exe
"C:\Users\user\Desktop\upd-ps-x64-6.0.0.18849.exe"

URLs

Name
IP
Malicious
http://schemas.mi
unknown
http://www.hp.com/schemas/imaging/con/dictionaries/1.0
unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing
unknown
http://crl.thawte.com/ThawteTimestampingCA.crl0
unknown
http://schemas.xmlsoap.org/soap/encoding/
unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
unknown
http://schemas.xmlsoap.org/ws/2005/04/discovery/Resolve
unknown
http://www.hp.com/schemas/imaging/con/discovery/2006/09/19hpdpIWSDiscoveryProvider-
unknown
http://www.hp.com/schemas/imaging/con/pwg/sm/1.0
unknown
http://ocsp.thawte.com0
unknown
http://printserver/userlist.asp
unknown
http://schemas.xmlsoap.org/soap/envelope/
unknown
http://www.hp.com/schemas/imaging/con/discovery/2006/09/19
unknown
http://www.winzip.com
unknown
http://schemas.xmlsoap.org/ws/2005/04/discovery/Probe
unknown
http://schemas.xmlsoap.org/soap/envelope/http://schemas.xmlsoap.org/soap/encoding/
unknown
http://printserver/cgi-bin/getUserMPL.cgi?computerName=%%COMPUTERNAME%%&userName=%%USERNAME%%&userDo
unknown
http://schemas.xmlsoap.org/ws/2005/04/discoverywsdhttp://www.hp.com/schemas/imaging/con/discovery/20
unknown
http://schemas.xmlsoap.org/soap/actor/next
unknown
http://schemas.xmlsoap.org/ws/2005/04/discovery
unknown
There are 10 hidden URLs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
Browse For Folder Width
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
Browse For Folder Height

Memdumps

Base Address
Regiontype
Protect
Malicious
18E2000
heap
page read and write
18C6000
heap
page read and write
5A9A000
heap
page read and write
1903000
heap
page read and write
586C000
stack
page read and write
43DC000
stack
page read and write
5AC2000
heap
page read and write
1903000
heap
page read and write
5A51000
heap
page read and write
413000
unkown
page readonly
5ABD000
heap
page read and write
18AA000
heap
page read and write
5AA6000
heap
page read and write
5AC6000
heap
page read and write
58B0000
heap
page read and write
5A8F000
heap
page read and write
190B000
heap
page read and write
5AB2000
heap
page read and write
1904000
heap
page read and write
401000
unkown
page execute read
18D2000
heap
page read and write
5AB6000
heap
page read and write
5ABC000
heap
page read and write
96000
stack
page read and write
5A99000
heap
page read and write
1903000
heap
page read and write
5A8E000
heap
page read and write
1903000
heap
page read and write
5AAA000
heap
page read and write
18FA000
heap
page read and write
42EB000
stack
page read and write
18E8000
heap
page read and write
5A90000
heap
page read and write
18A0000
heap
page read and write
1903000
heap
page read and write
5AB2000
heap
page read and write
323A000
heap
page read and write
18C1000
heap
page read and write
18D8000
heap
page read and write
18D2000
heap
page read and write
5A41000
heap
page read and write
59BB000
stack
page read and write
18AC000
heap
page read and write
426000
unkown
page readonly
5A9C000
heap
page read and write
633E000
stack
page read and write
5A41000
heap
page read and write
18D5000
heap
page read and write
18C6000
heap
page read and write
18C6000
heap
page read and write
18E4000
heap
page read and write
406F000
stack
page read and write
18E8000
heap
page read and write
18F0000
heap
page read and write
5A97000
heap
page read and write
5A85000
heap
page read and write
18E8000
heap
page read and write
18E2000
heap
page read and write
5A97000
heap
page read and write
18D7000
heap
page read and write
18C4000
heap
page read and write
401000
unkown
page execute read
18EF000
heap
page read and write
18FA000
heap
page read and write
18FA000
heap
page read and write
1905000
heap
page read and write
18E8000
heap
page read and write
18E8000
heap
page read and write
1903000
heap
page read and write
18E4000
heap
page read and write
18E4000
heap
page read and write
18E2000
heap
page read and write
18ED000
heap
page read and write
5AAC000
heap
page read and write
18D7000
heap
page read and write
18E2000
heap
page read and write
18AC000
heap
page read and write
400000
unkown
page readonly
18EF000
heap
page read and write
18D3000
heap
page read and write
18D7000
heap
page read and write
5A41000
heap
page read and write
185A000
heap
page read and write
18E8000
heap
page read and write
1919000
heap
page read and write
18D2000
heap
page read and write
18D7000
heap
page read and write
5A93000
heap
page read and write
18E8000
heap
page read and write
18E2000
heap
page read and write
423000
unkown
page read and write
18D7000
heap
page read and write
18E4000
heap
page read and write
18EC000
heap
page read and write
1905000
heap
page read and write
18F5000
heap
page read and write
417000
unkown
page write copy
18D5000
heap
page read and write
18EE000
heap
page read and write
5ABC000
heap
page read and write
18E1000
heap
page read and write
18E8000
heap
page read and write
5AB2000
heap
page read and write
18F5000
heap
page read and write
18E8000
heap
page read and write
E26000
unkown
page readonly
18EF000
heap
page read and write
18C1000
heap
page read and write
5D40000
heap
page read and write
1880000
heap
page read and write
5A42000
heap
page read and write
1903000
heap
page read and write
18E2000
heap
page read and write
1904000
heap
page read and write
18FA000
heap
page read and write
18D7000
heap
page read and write
5E9F000
stack
page read and write
18D8000
heap
page read and write
5AAC000
heap
page read and write
18FA000
heap
page read and write
18E4000
heap
page read and write
5A45000
heap
page read and write
190B000
heap
page read and write
1903000
heap
page read and write
18E4000
heap
page read and write
3770000
trusted library allocation
page read and write
190B000
heap
page read and write
1903000
heap
page read and write
18C6000
heap
page read and write
18E4000
heap
page read and write
18D5000
heap
page read and write
18D5000
heap
page read and write
18D5000
heap
page read and write
18E8000
heap
page read and write
42FA000
stack
page read and write
5AA2000
heap
page read and write
5AA2000
heap
page read and write
18E2000
heap
page read and write
5AA2000
heap
page read and write
1AF0000
heap
page read and write
18E4000
heap
page read and write
18A0000
heap
page read and write
31D0000
heap
page read and write
18D7000
heap
page read and write
18F0000
heap
page read and write
5A42000
heap
page read and write
18E2000
heap
page read and write
18E9000
heap
page read and write
18C6000
heap
page read and write
5AB2000
heap
page read and write
18D7000
heap
page read and write
18D8000
heap
page read and write
D8000
stack
page read and write
160000
heap
page read and write
18FA000
heap
page read and write
1903000
heap
page read and write
18E4000
heap
page read and write
5A90000
heap
page read and write
5AC2000
heap
page read and write
446B000
stack
page read and write
18E2000
heap
page read and write
5A51000
heap
page read and write
18EC000
heap
page read and write
190A000
heap
page read and write
18C3000
heap
page read and write
116000
heap
page read and write
18FA000
heap
page read and write
5A93000
heap
page read and write
18C1000
heap
page read and write
5A86000
heap
page read and write
18E9000
heap
page read and write
18AC000
heap
page read and write
5A51000
heap
page read and write
18D5000
heap
page read and write
18C3000
heap
page read and write
18E2000
heap
page read and write
5A51000
heap
page read and write
18FA000
heap
page read and write
E26000
unkown
page readonly
5ABC000
heap
page read and write
1834000
heap
page read and write
E26000
unkown
page readonly
3210000
heap
page read and write
18B7000
heap
page read and write
18FA000
heap
page read and write
18E2000
heap
page read and write
18E8000
heap
page read and write
18E2000
heap
page read and write
18FA000
heap
page read and write
31E0000
heap
page read and write
18C6000
heap
page read and write
439C000
stack
page read and write
18C3000
heap
page read and write
18E2000
heap
page read and write
18E9000
heap
page read and write
5AC2000
heap
page read and write
18D7000
heap
page read and write
5ACC000
heap
page read and write
5AB2000
heap
page read and write
18C6000
heap
page read and write
582C000
stack
page read and write
1903000
heap
page read and write
18F0000
heap
page read and write
5A8D000
heap
page read and write
1905000
heap
page read and write
1903000
heap
page read and write
18C6000
heap
page read and write
426000
unkown
page readonly
1AF9000
heap
page read and write
5A9C000
heap
page read and write
5A90000
heap
page read and write
1903000
heap
page read and write
18E9000
heap
page read and write
5A8E000
heap
page read and write
5AA2000
heap
page read and write
5AA0000
heap
page read and write
18D7000
heap
page read and write
18FA000
heap
page read and write
5A9B000
heap
page read and write
5AB2000
heap
page read and write
18C6000
heap
page read and write
58A0000
heap
page read and write
18E9000
heap
page read and write
1AF5000
heap
page read and write
3214000
heap
page read and write
5880000
heap
page read and write
18ED000
heap
page read and write
18BA000
heap
page read and write
5A88000
heap
page read and write
18E8000
heap
page read and write
5A99000
heap
page read and write
5AB7000
heap
page read and write
150000
heap
page read and write
5AA2000
heap
page read and write
5AB2000
heap
page read and write
18E4000
heap
page read and write
5A90000
heap
page read and write
413000
unkown
page readonly
5A8D000
heap
page read and write
5A93000
heap
page read and write
5AC2000
heap
page read and write
18E4000
heap
page read and write
18E4000
heap
page read and write
18D2000
heap
page read and write
18C3000
heap
page read and write
18A0000
heap
page read and write
18D7000
heap
page read and write
5E8C000
stack
page read and write
18D5000
heap
page read and write
18E1000
heap
page read and write
18D5000
heap
page read and write
5A42000
heap
page read and write
18E4000
heap
page read and write
18E2000
heap
page read and write
183C000
heap
page read and write
18E2000
heap
page read and write
18E2000
heap
page read and write
5AAC000
heap
page read and write
5AAC000
heap
page read and write
18F5000
heap
page read and write
18E4000
heap
page read and write
18E2000
heap
page read and write
5A93000
heap
page read and write
18D7000
heap
page read and write
1903000
heap
page read and write
18E4000
heap
page read and write
18AC000
heap
page read and write
5AC2000
heap
page read and write
18D5000
heap
page read and write
18E4000
heap
page read and write
18E8000
heap
page read and write
435E000
stack
page read and write
1D0000
heap
page read and write
1905000
heap
page read and write
5A86000
heap
page read and write
1830000
heap
page read and write
18E9000
heap
page read and write
3220000
heap
page read and write
110000
heap
page read and write
18E2000
heap
page read and write
18EC000
heap
page read and write
5A9D000
heap
page read and write
426000
unkown
page readonly
18C1000
heap
page read and write
18D5000
heap
page read and write
18BA000
heap
page read and write
5AC2000
heap
page read and write
18E8000
heap
page read and write
18E4000
heap
page read and write
5A61000
heap
page read and write
18D7000
heap
page read and write
5A40000
heap
page read and write
1903000
heap
page read and write
18E4000
heap
page read and write
5A61000
heap
page read and write
5A88000
heap
page read and write
1903000
heap
page read and write
18E4000
heap
page read and write
18FA000
heap
page read and write
18E2000
heap
page read and write
1903000
heap
page read and write
1903000
heap
page read and write
5AAC000
heap
page read and write
18C3000
heap
page read and write
18E4000
heap
page read and write
18FA000
heap
page read and write
18D2000
heap
page read and write
1903000
heap
page read and write
18D7000
heap
page read and write
5A42000
heap
page read and write
1903000
heap
page read and write
5AA2000
heap
page read and write
18E2000
heap
page read and write
5ABC000
heap
page read and write
18E4000
heap
page read and write
18EE000
heap
page read and write
5D49000
heap
page read and write
18F3000
heap
page read and write
18D8000
heap
page read and write
18C4000
heap
page read and write
587B000
stack
page read and write
5A92000
heap
page read and write
5AA7000
heap
page read and write
18C4000
heap
page read and write
417000
unkown
page read and write
5A45000
heap
page read and write
18E8000
heap
page read and write
400000
unkown
page readonly
1903000
heap
page read and write
18E2000
heap
page read and write
18D5000
heap
page read and write
1903000
heap
page read and write
There are 322 hidden memdumps, click here to show them.