Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
TreeSizeFreeSetup.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
|
C:\Users\user\AppData\Local\Temp\is-B6GD7.tmp\TreeSizeFreeSetup.tmp
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\TreeSizeFreeSetup.exe
|
"C:\Users\user\Desktop\TreeSizeFreeSetup.exe"
|
||
|
C:\Users\user\AppData\Local\Temp\is-B6GD7.tmp\TreeSizeFreeSetup.tmp
|
"C:\Users\user\AppData\Local\Temp\is-B6GD7.tmp\TreeSizeFreeSetup.tmp" /SL5="$402BC,12766924,857088,C:\Users\user\Desktop\TreeSizeFreeSetup.exe"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.jam-software.de/treesize/
|
unknown
|
||
|
https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
|
unknown
|
||
|
https://www.jam-software.com/TreeSize/surumler.shtml
|
unknown
|
||
|
https://www.jam-software.de/TreeSize/editions.shtml
|
unknown
|
||
|
https://www.jam-software.com/TreeSize/editions.shtml
|
unknown
|
||
|
https://www.jam-software.de/freeware/?language=
|
unknown
|
||
|
https://www.remobjects.com/ps
|
unknown
|
||
|
https://www.jam-software.com/company/help-us-translate.shtml?language=EN
|
unknown
|
||
|
https://www.jam-software.com0
|
unknown
|
||
|
https://www.innosetup.com/
|
unknown
|
||
|
https://www.jam-software.com/company/privacy.shtml
|
unknown
|
||
|
https://www.jam-software.de/TreeSize/editions.shtmlPqY
|
unknown
|
||
|
https://www.jam-software.com/treesize/
|
unknown
|
||
|
https://www.jam-software.de/company/privacy.shtml
|
unknown
|
||
|
https://customers.jam-software.de/survey.php
|
unknown
|
||
|
https://jam-software.upvoty.com/TreeSize
|
unknown
|
||
|
http://www.dk-soft.org/
|
unknown
|
There are 7 hidden URLs, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3A10000
|
direct allocation
|
page read and write
|
||
|
2865000
|
direct allocation
|
page read and write
|
||
|
2763000
|
direct allocation
|
page read and write
|
||
|
25C9000
|
direct allocation
|
page read and write
|
||
|
2913000
|
heap
|
page read and write
|
||
|
6C4000
|
unkown
|
page write copy
|
||
|
3A45000
|
direct allocation
|
page read and write
|
||
|
97000
|
stack
|
page read and write
|
||
|
22F9000
|
direct allocation
|
page read and write
|
||
|
6D7000
|
heap
|
page read and write
|
||
|
2731000
|
direct allocation
|
page read and write
|
||
|
39BE000
|
direct allocation
|
page read and write
|
||
|
2378000
|
direct allocation
|
page read and write
|
||
|
2612000
|
direct allocation
|
page read and write
|
||
|
2722000
|
direct allocation
|
page read and write
|
||
|
239D000
|
direct allocation
|
page read and write
|
||
|
2654000
|
direct allocation
|
page read and write
|
||
|
366A000
|
direct allocation
|
page read and write
|
||
|
2671000
|
direct allocation
|
page read and write
|
||
|
2703000
|
direct allocation
|
page read and write
|
||
|
2347000
|
direct allocation
|
page read and write
|
||
|
6D6000
|
unkown
|
page write copy
|
||
|
908000
|
heap
|
page read and write
|
||
|
710000
|
heap
|
page read and write
|
||
|
23C1000
|
direct allocation
|
page read and write
|
||
|
4B9000
|
unkown
|
page read and write
|
||
|
3620000
|
direct allocation
|
page read and write
|
||
|
6C4000
|
unkown
|
page read and write
|
||
|
39B7000
|
direct allocation
|
page read and write
|
||
|
2931000
|
direct allocation
|
page read and write
|
||
|
39F3000
|
direct allocation
|
page read and write
|
||
|
3B9F000
|
stack
|
page read and write
|
||
|
3676000
|
direct allocation
|
page read and write
|
||
|
2678000
|
direct allocation
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
D30000
|
direct allocation
|
page execute and read and write
|
||
|
6DB000
|
unkown
|
page readonly
|
||
|
401000
|
unkown
|
page execute read
|
||
|
25DC000
|
direct allocation
|
page read and write
|
||
|
25BD000
|
direct allocation
|
page read and write
|
||
|
7E0000
|
heap
|
page read and write
|
||
|
275C000
|
direct allocation
|
page read and write
|
||
|
3A33000
|
direct allocation
|
page read and write
|
||
|
2650000
|
direct allocation
|
page read and write
|
||
|
39C3000
|
direct allocation
|
page read and write
|
||
|
2779000
|
direct allocation
|
page read and write
|
||
|
2746000
|
direct allocation
|
page read and write
|
||
|
399B000
|
direct allocation
|
page read and write
|
||
|
4B7000
|
unkown
|
page read and write
|
||
|
7FB50000
|
direct allocation
|
page read and write
|
||
|
2663000
|
direct allocation
|
page read and write
|
||
|
23BA000
|
direct allocation
|
page read and write
|
||
|
6CE000
|
unkown
|
page read and write
|
||
|
2860000
|
direct allocation
|
page read and write
|
||
|
276A000
|
direct allocation
|
page read and write
|
||
|
39E4000
|
direct allocation
|
page read and write
|
||
|
6DD000
|
unkown
|
page readonly
|
||
|
3A61000
|
direct allocation
|
page read and write
|
||
|
2771000
|
direct allocation
|
page read and write
|
||
|
2910000
|
heap
|
page read and write
|
||
|
6CB000
|
unkown
|
page read and write
|
||
|
2755000
|
direct allocation
|
page read and write
|
||
|
2290000
|
direct allocation
|
page read and write
|
||
|
6DA000
|
unkown
|
page read and write
|
||
|
916000
|
heap
|
page read and write
|
||
|
3985000
|
direct allocation
|
page read and write
|
||
|
D20000
|
heap
|
page read and write
|
||
|
4C6000
|
unkown
|
page readonly
|
||
|
29A0000
|
direct allocation
|
page read and write
|
||
|
369E000
|
stack
|
page read and write
|
||
|
2ED0000
|
heap
|
page read and write
|
||
|
91B000
|
heap
|
page read and write
|
||
|
3A53000
|
direct allocation
|
page read and write
|
||
|
2540000
|
direct allocation
|
page read and write
|
||
|
2388000
|
direct allocation
|
page read and write
|
||
|
39CE000
|
direct allocation
|
page read and write
|
||
|
3A1E000
|
direct allocation
|
page read and write
|
||
|
4C4000
|
unkown
|
page readonly
|
||
|
3994000
|
direct allocation
|
page read and write
|
||
|
3692000
|
direct allocation
|
page read and write
|
||
|
6D3000
|
unkown
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
23B3000
|
direct allocation
|
page read and write
|
||
|
25C2000
|
direct allocation
|
page read and write
|
||
|
D70000
|
heap
|
page read and write
|
||
|
3620000
|
direct allocation
|
page read and write
|
||
|
379F000
|
stack
|
page read and write
|
||
|
25F4000
|
direct allocation
|
page read and write
|
||
|
919000
|
heap
|
page read and write
|
||
|
3A01000
|
direct allocation
|
page read and write
|
||
|
25B1000
|
direct allocation
|
page read and write
|
||
|
910000
|
heap
|
page read and write
|
||
|
3671000
|
direct allocation
|
page read and write
|
||
|
4C2000
|
unkown
|
page write copy
|
||
|
3A4C000
|
direct allocation
|
page read and write
|
||
|
2738000
|
direct allocation
|
page read and write
|
||
|
D95000
|
heap
|
page read and write
|
||
|
263F000
|
direct allocation
|
page read and write
|
||
|
2604000
|
direct allocation
|
page read and write
|
||
|
39D5000
|
direct allocation
|
page read and write
|
||
|
271B000
|
direct allocation
|
page read and write
|
||
|
2780000
|
direct allocation
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
238F000
|
direct allocation
|
page read and write
|
||
|
39FA000
|
direct allocation
|
page read and write
|
||
|
3A08000
|
direct allocation
|
page read and write
|
||
|
4B7000
|
unkown
|
page write copy
|
||
|
C70000
|
heap
|
page read and write
|
||
|
2638000
|
direct allocation
|
page read and write
|
||
|
261A000
|
direct allocation
|
page read and write
|
||
|
19C000
|
stack
|
page read and write
|
||
|
600000
|
heap
|
page read and write
|
||
|
2371000
|
direct allocation
|
page read and write
|
||
|
3A17000
|
direct allocation
|
page read and write
|
||
|
8C0000
|
heap
|
page read and write
|
||
|
3998000
|
direct allocation
|
page read and write
|
||
|
4E0000
|
heap
|
page read and write
|
||
|
2E20000
|
trusted library allocation
|
page read and write
|
||
|
3A3E000
|
direct allocation
|
page read and write
|
||
|
25FD000
|
direct allocation
|
page read and write
|
||
|
3A2C000
|
direct allocation
|
page read and write
|
||
|
3990000
|
direct allocation
|
page read and write
|
||
|
2628000
|
direct allocation
|
page read and write
|
||
|
37DE000
|
stack
|
page read and write
|
||
|
274D000
|
direct allocation
|
page read and write
|
||
|
D80000
|
direct allocation
|
page read and write
|
||
|
650000
|
heap
|
page read and write
|
||
|
4C0000
|
unkown
|
page read and write
|
||
|
19D000
|
stack
|
page read and write
|
||
|
39EB000
|
direct allocation
|
page read and write
|
||
|
259E000
|
direct allocation
|
page read and write
|
||
|
25D0000
|
direct allocation
|
page read and write
|
||
|
39DC000
|
direct allocation
|
page read and write
|
||
|
2788000
|
direct allocation
|
page read and write
|
||
|
3820000
|
direct allocation
|
page read and write
|
||
|
3A25000
|
direct allocation
|
page read and write
|
||
|
25DF000
|
direct allocation
|
page read and write
|
||
|
23C8000
|
direct allocation
|
page read and write
|
||
|
2621000
|
direct allocation
|
page read and write
|
||
|
6D0000
|
heap
|
page read and write
|
||
|
2396000
|
direct allocation
|
page read and write
|
||
|
90C000
|
heap
|
page read and write
|
||
|
8D8000
|
heap
|
page read and write
|
||
|
23A4000
|
direct allocation
|
page read and write
|
||
|
D99000
|
heap
|
page read and write
|
||
|
8D0000
|
heap
|
page read and write
|
||
|
D80000
|
direct allocation
|
page read and write
|
||
|
260B000
|
direct allocation
|
page read and write
|
||
|
25ED000
|
direct allocation
|
page read and write
|
||
|
2729000
|
direct allocation
|
page read and write
|
||
|
6C6000
|
unkown
|
page read and write
|
||
|
38C6000
|
direct allocation
|
page read and write
|
||
|
3996000
|
direct allocation
|
page read and write
|
||
|
273F000
|
direct allocation
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
25E6000
|
direct allocation
|
page read and write
|
||
|
39CC000
|
direct allocation
|
page read and write
|
||
|
23AC000
|
direct allocation
|
page read and write
|
||
|
236A000
|
direct allocation
|
page read and write
|
||
|
D90000
|
heap
|
page read and write
|
There are 150 hidden memdumps, click here to show them.