Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Original Invoice.vbs
|
ASCII text, with very long lines (65536), with no line terminators
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\Original Invoice.vbs.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\wscript.exe
|
C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\Original Invoice.vbs"
|
|
|
|
C:\Windows\System32\cmd.exe
|
cmd /c copy "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" "C:\Users\user\Desktop\Original Invoice.vbs.exe" /Y
|
||
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
25CF6E33000
|
heap
|
page read and write
|
||
|
25CF95CB000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF9EDD000
|
heap
|
page read and write
|
||
|
25CF4F62000
|
heap
|
page read and write
|
||
|
25CFA0D6000
|
heap
|
page read and write
|
||
|
25CF949E000
|
heap
|
page read and write
|
||
|
25CF999A000
|
heap
|
page read and write
|
||
|
25CFA10D000
|
heap
|
page read and write
|
||
|
25CF94A1000
|
heap
|
page read and write
|
||
|
25CF500E000
|
heap
|
page read and write
|
||
|
25CF4F31000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF9DDC000
|
heap
|
page read and write
|
||
|
25CFA3E4000
|
heap
|
page read and write
|
||
|
25CF4FC6000
|
heap
|
page read and write
|
||
|
25CFA0D6000
|
heap
|
page read and write
|
||
|
25CF6DFF000
|
heap
|
page read and write
|
||
|
25CF4F91000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF94C9000
|
heap
|
page read and write
|
||
|
25CF9F9A000
|
heap
|
page read and write
|
||
|
25CF52D8000
|
heap
|
page read and write
|
||
|
25CF96E5000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF9BDE000
|
heap
|
page read and write
|
||
|
25CF6DEF000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF979F000
|
heap
|
page read and write
|
||
|
25CFA0D6000
|
heap
|
page read and write
|
||
|
25CF969E000
|
heap
|
page read and write
|
||
|
E6B24FE000
|
stack
|
page read and write
|
||
|
25CF6DBB000
|
heap
|
page read and write
|
||
|
25CF4F2C000
|
heap
|
page read and write
|
||
|
25CF4F10000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF9473000
|
heap
|
page read and write
|
||
|
25CFA0CA000
|
heap
|
page read and write
|
||
|
25CF9650000
|
heap
|
page read and write
|
||
|
25CFA0D0000
|
heap
|
page read and write
|
||
|
25CF9BDF000
|
heap
|
page read and write
|
||
|
25CF6DA3000
|
heap
|
page read and write
|
||
|
25CF9D2D000
|
heap
|
page read and write
|
||
|
25CF4FBB000
|
heap
|
page read and write
|
||
|
25CF8098000
|
heap
|
page read and write
|
||
|
25CF949E000
|
heap
|
page read and write
|
||
|
25CF949E000
|
heap
|
page read and write
|
||
|
25CF94A0000
|
heap
|
page read and write
|
||
|
25CF6EA0000
|
heap
|
page read and write
|
||
|
25CF6E0F000
|
heap
|
page read and write
|
||
|
25CF955B000
|
heap
|
page read and write
|
||
|
25CF949E000
|
heap
|
page read and write
|
||
|
25CF949B000
|
heap
|
page read and write
|
||
|
25CF9CDE000
|
heap
|
page read and write
|
||
|
25CF6E6B000
|
heap
|
page read and write
|
||
|
25CF963D000
|
heap
|
page read and write
|
||
|
25CFA0D6000
|
heap
|
page read and write
|
||
|
25CF94B4000
|
heap
|
page read and write
|
||
|
25CF6DA9000
|
heap
|
page read and write
|
||
|
25CF6DD7000
|
heap
|
page read and write
|
||
|
25CF6DA1000
|
heap
|
page read and write
|
||
|
25CF6EAD000
|
heap
|
page read and write
|
||
|
25CF4F60000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CFA0B9000
|
heap
|
page read and write
|
||
|
25CF52D0000
|
heap
|
page read and write
|
||
|
25CF9E9B000
|
heap
|
page read and write
|
||
|
25CF9642000
|
heap
|
page read and write
|
||
|
25CF6E4B000
|
heap
|
page read and write
|
||
|
25CF96A1000
|
heap
|
page read and write
|
||
|
25CF9AD6000
|
heap
|
page read and write
|
||
|
25CF790D000
|
heap
|
page read and write
|
||
|
25CF4F3F000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF4F4C000
|
heap
|
page read and write
|
||
|
E6B2AFD000
|
stack
|
page read and write
|
||
|
25CF963D000
|
heap
|
page read and write
|
||
|
25CF6EB0000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF80A2000
|
heap
|
page read and write
|
||
|
25CF52D5000
|
heap
|
page read and write
|
||
|
25CF9E9B000
|
heap
|
page read and write
|
||
|
25CF979F000
|
heap
|
page read and write
|
||
|
25CF9ADF000
|
heap
|
page read and write
|
||
|
25CF4FBB000
|
heap
|
page read and write
|
||
|
25CFA09B000
|
heap
|
page read and write
|
||
|
25CFA0C6000
|
heap
|
page read and write
|
||
|
25CF6EB1000
|
heap
|
page read and write
|
||
|
25CF6DF8000
|
heap
|
page read and write
|
||
|
25CF52D8000
|
heap
|
page read and write
|
||
|
25CF6DF8000
|
heap
|
page read and write
|
||
|
25CF6DC3000
|
heap
|
page read and write
|
||
|
25CF969E000
|
heap
|
page read and write
|
||
|
25CF93A1000
|
heap
|
page read and write
|
||
|
25CF4F94000
|
heap
|
page read and write
|
||
|
25CF969E000
|
heap
|
page read and write
|
||
|
25CF999F000
|
heap
|
page read and write
|
||
|
25CF4F3F000
|
heap
|
page read and write
|
||
|
25CF6DBF000
|
heap
|
page read and write
|
||
|
25CF9AE0000
|
heap
|
page read and write
|
||
|
25CF9ADB000
|
heap
|
page read and write
|
||
|
25CF8BFA000
|
heap
|
page read and write
|
||
|
25CF4FB6000
|
heap
|
page read and write
|
||
|
25CF4F67000
|
heap
|
page read and write
|
||
|
25CF9A9D000
|
heap
|
page read and write
|
||
|
25CF4F38000
|
heap
|
page read and write
|
||
|
25CF9DE1000
|
heap
|
page read and write
|
||
|
25CF97E9000
|
heap
|
page read and write
|
||
|
25CF989F000
|
heap
|
page read and write
|
||
|
25CF6DC9000
|
heap
|
page read and write
|
||
|
25CFA0AA000
|
heap
|
page read and write
|
||
|
25CF6DD8000
|
heap
|
page read and write
|
||
|
25CFA0D0000
|
heap
|
page read and write
|
||
|
25CFA0D6000
|
heap
|
page read and write
|
||
|
25CF4F83000
|
heap
|
page read and write
|
||
|
25CF6DDF000
|
heap
|
page read and write
|
||
|
25CFA0EE000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF500E000
|
heap
|
page read and write
|
||
|
25CF9CDD000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF4FDB000
|
heap
|
page read and write
|
||
|
25CF717C000
|
heap
|
page read and write
|
||
|
25CF6DD8000
|
heap
|
page read and write
|
||
|
25CF969E000
|
heap
|
page read and write
|
||
|
25CF6DFE000
|
heap
|
page read and write
|
||
|
25CF6E7B000
|
heap
|
page read and write
|
||
|
25CF50E0000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
E6B25FE000
|
stack
|
page read and write
|
||
|
25CF4FE0000
|
heap
|
page read and write
|
||
|
25CF9DDC000
|
heap
|
page read and write
|
||
|
25CF4F4A000
|
heap
|
page read and write
|
||
|
25CFA0F4000
|
heap
|
page read and write
|
||
|
25CF4FDE000
|
heap
|
page read and write
|
||
|
25CF52DE000
|
heap
|
page read and write
|
||
|
25CFA0CA000
|
heap
|
page read and write
|
||
|
25CF953F000
|
heap
|
page read and write
|
||
|
25CF9590000
|
heap
|
page read and write
|
||
|
25CF6DC7000
|
heap
|
page read and write
|
||
|
25CF93B6000
|
heap
|
page read and write
|
||
|
25CF963D000
|
heap
|
page read and write
|
||
|
25CF6DD8000
|
heap
|
page read and write
|
||
|
25CF6DF8000
|
heap
|
page read and write
|
||
|
25CF4F3E000
|
heap
|
page read and write
|
||
|
25CF4FF2000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF9737000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF953E000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF4FBB000
|
heap
|
page read and write
|
||
|
25CF6DA7000
|
heap
|
page read and write
|
||
|
25CF9609000
|
heap
|
page read and write
|
||
|
25CF94B1000
|
heap
|
page read and write
|
||
|
25CF6EB3000
|
heap
|
page read and write
|
||
|
25CF4F93000
|
heap
|
page read and write
|
||
|
25CF9F9B000
|
heap
|
page read and write
|
||
|
25CF9697000
|
heap
|
page read and write
|
||
|
25CFA0B3000
|
heap
|
page read and write
|
||
|
25CF999E000
|
heap
|
page read and write
|
||
|
25CF4EE0000
|
heap
|
page read and write
|
||
|
25CF6DF8000
|
heap
|
page read and write
|
||
|
25CF94F7000
|
heap
|
page read and write
|
||
|
25CFA10E000
|
heap
|
page read and write
|
||
|
25CFA0A7000
|
heap
|
page read and write
|
||
|
25CF4FBC000
|
heap
|
page read and write
|
||
|
25CF999E000
|
heap
|
page read and write
|
||
|
25CF6DAF000
|
heap
|
page read and write
|
||
|
25CF953E000
|
heap
|
page read and write
|
||
|
25CF949E000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF9BDE000
|
heap
|
page read and write
|
||
|
25CF93D1000
|
heap
|
page read and write
|
||
|
25CF52DB000
|
heap
|
page read and write
|
||
|
25CF949E000
|
heap
|
page read and write
|
||
|
25CF9527000
|
heap
|
page read and write
|
||
|
25CF7140000
|
heap
|
page read and write
|
||
|
25CF6EB1000
|
heap
|
page read and write
|
||
|
25CF500E000
|
heap
|
page read and write
|
||
|
25CF52DB000
|
heap
|
page read and write
|
||
|
25CFA0B4000
|
heap
|
page read and write
|
||
|
25CF6E3F000
|
heap
|
page read and write
|
||
|
25CFA0D0000
|
heap
|
page read and write
|
||
|
25CF4F64000
|
heap
|
page read and write
|
||
|
25CF93ED000
|
heap
|
page read and write
|
||
|
25CF999E000
|
heap
|
page read and write
|
||
|
25CFA112000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF6DAA000
|
heap
|
page read and write
|
||
|
25CF6DD8000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CFA0CA000
|
heap
|
page read and write
|
||
|
25CF9AA1000
|
heap
|
page read and write
|
||
|
25CF979F000
|
heap
|
page read and write
|
||
|
25CF6E5B000
|
heap
|
page read and write
|
||
|
25CF9C7C000
|
heap
|
page read and write
|
||
|
25CF4FB9000
|
heap
|
page read and write
|
||
|
25CF9B3B000
|
heap
|
page read and write
|
||
|
25CF98B2000
|
heap
|
page read and write
|
||
|
25CFA0A0000
|
heap
|
page read and write
|
||
|
25CFA09A000
|
heap
|
page read and write
|
||
|
25CF6DF8000
|
heap
|
page read and write
|
||
|
25CF6EA6000
|
heap
|
page read and write
|
||
|
25CF6E1B000
|
heap
|
page read and write
|
||
|
25CF6DF8000
|
heap
|
page read and write
|
||
|
25CF6DB0000
|
heap
|
page read and write
|
||
|
25CF52DA000
|
heap
|
page read and write
|
||
|
25CF4FBB000
|
heap
|
page read and write
|
||
|
25CFA0DE000
|
heap
|
page read and write
|
||
|
25CFA0B4000
|
heap
|
page read and write
|
||
|
25CF6EB0000
|
heap
|
page read and write
|
||
|
25CF963D000
|
heap
|
page read and write
|
||
|
25CF969E000
|
heap
|
page read and write
|
||
|
25CF9BD6000
|
heap
|
page read and write
|
||
|
25CF500E000
|
heap
|
page read and write
|
||
|
25CF953E000
|
heap
|
page read and write
|
||
|
25CF6EA1000
|
heap
|
page read and write
|
||
|
25CF9DEE000
|
heap
|
page read and write
|
||
|
25CF4F19000
|
heap
|
page read and write
|
||
|
25CF989F000
|
heap
|
page read and write
|
||
|
25CF4FBB000
|
heap
|
page read and write
|
||
|
25CFA0E0000
|
heap
|
page read and write
|
||
|
25CF942B000
|
heap
|
page read and write
|
||
|
25CF9ADF000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF9AD6000
|
heap
|
page read and write
|
||
|
25CF953E000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
E6B2BFE000
|
stack
|
page read and write
|
||
|
25CFA0CA000
|
heap
|
page read and write
|
||
|
25CF944D000
|
heap
|
page read and write
|
||
|
E6B28FF000
|
stack
|
page read and write
|
||
|
25CF4FBB000
|
heap
|
page read and write
|
||
|
25CF4FBB000
|
heap
|
page read and write
|
||
|
25CFA0B1000
|
heap
|
page read and write
|
||
|
25CF9A9D000
|
heap
|
page read and write
|
||
|
25CF9A1A000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CFA0E7000
|
heap
|
page read and write
|
||
|
25CF9AA0000
|
heap
|
page read and write
|
||
|
25CF963D000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CFA09A000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF4FA5000
|
heap
|
page read and write
|
||
|
25CF5009000
|
heap
|
page read and write
|
||
|
25CF6E27000
|
heap
|
page read and write
|
||
|
25CFA0F5000
|
heap
|
page read and write
|
||
|
25CF6DD0000
|
heap
|
page read and write
|
||
|
25CF9922000
|
heap
|
page read and write
|
||
|
25CF949E000
|
heap
|
page read and write
|
||
|
25CFA0D0000
|
heap
|
page read and write
|
||
|
25CF4FDE000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF6DF9000
|
heap
|
page read and write
|
||
|
25CF52DB000
|
heap
|
page read and write
|
||
|
25CF6960000
|
heap
|
page read and write
|
||
|
25CF953E000
|
heap
|
page read and write
|
||
|
25CFA0B7000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CFA0B4000
|
heap
|
page read and write
|
||
|
25CF963E000
|
heap
|
page read and write
|
||
|
25CF6DF7000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF6DCF000
|
heap
|
page read and write
|
||
|
25CF6DE7000
|
heap
|
page read and write
|
||
|
25CF4F39000
|
heap
|
page read and write
|
||
|
25CF6DA0000
|
heap
|
page read and write
|
||
|
25CF52DA000
|
heap
|
page read and write
|
||
|
25CF6E8B000
|
heap
|
page read and write
|
||
|
E6B27FE000
|
stack
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF984C000
|
heap
|
page read and write
|
||
|
25CFA0E1000
|
heap
|
page read and write
|
||
|
25CF6964000
|
heap
|
page read and write
|
||
|
25CF6DAB000
|
heap
|
page read and write
|
||
|
25CFA0CA000
|
heap
|
page read and write
|
||
|
25CF93A3000
|
heap
|
page read and write
|
||
|
25CF949E000
|
heap
|
page read and write
|
||
|
25CF500E000
|
heap
|
page read and write
|
||
|
25CF949E000
|
heap
|
page read and write
|
||
|
E6B29FF000
|
stack
|
page read and write
|
||
|
25CF949E000
|
heap
|
page read and write
|
||
|
25CF4F75000
|
heap
|
page read and write
|
||
|
25CF9AA5000
|
heap
|
page read and write
|
||
|
25CF97A0000
|
heap
|
page read and write
|
||
|
25CF790B000
|
heap
|
page read and write
|
||
|
25CFA0D0000
|
heap
|
page read and write
|
||
|
25CF6DA1000
|
heap
|
page read and write
|
||
|
25CF6E07000
|
heap
|
page read and write
|
||
|
25CF93A0000
|
heap
|
page read and write
|
||
|
25CF4FDE000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF4FBB000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF6DB3000
|
heap
|
page read and write
|
||
|
25CFA0D6000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF500E000
|
heap
|
page read and write
|
||
|
25CF96A0000
|
heap
|
page read and write
|
||
|
25CF6DC0000
|
heap
|
page read and write
|
||
|
25CF6DCB000
|
heap
|
page read and write
|
||
|
25CF6EAE000
|
heap
|
page read and write
|
||
|
25CF940C000
|
heap
|
page read and write
|
||
|
25CF6DFF000
|
heap
|
page read and write
|
||
|
25CFBDE0000
|
trusted library allocation
|
page read and write
|
||
|
25CF4ED0000
|
heap
|
page read and write
|
||
|
25CF6DB7000
|
heap
|
page read and write
|
||
|
25CF9E9C000
|
heap
|
page read and write
|
||
|
25CF98A0000
|
heap
|
page read and write
|
||
|
25CF500E000
|
heap
|
page read and write
|
||
|
25CF6E9E000
|
heap
|
page read and write
|
||
|
25CF978D000
|
heap
|
page read and write
|
||
|
25CFA0C4000
|
heap
|
page read and write
|
||
|
25CF6DB9000
|
heap
|
page read and write
|
||
|
25CF9FC2000
|
heap
|
page read and write
|
||
|
E6B2184000
|
stack
|
page read and write
|
There are 309 hidden memdumps, click here to show them.