9/8/2023 0 Comments Supremo exe![]() ![]() HTTP traffic detected: POST /$rdg ate?ACTION =HELLO&ID= NEW HTTP/1. May check the online IP address of the machine Source: C:\Windows\Temp\SupremoRemoteDesktop\SupremoHelper.exeĬode function: 5_2_0040E8 E4 FindFir stFileW,Fi ndClose,Ĭode function: 5_2_0046E6 E4 GetVers ion,GetFil eAttribute sW,FindFir stFileW,De leteFileW, FindNextFi leW,FindCl ose,Remove DirectoryW ,GetFileAt tributesA, FindFirstF ileA,Delet eFileA,Fin dNextFileA ,FindClose ,RemoveDir ectoryA,Ĭode function: 5_2_0040E3 18 GetModu leHandleW, GetProcAdd ress,FindF irstFileW, FindClose, lstrlenW,l strlenW,Ĭode function: 6_2_0040E8 E4 FindFir stFileW,Fi ndClose,Ĭode function: 6_2_0046E6 E4 GetVers ion,GetFil eAttribute sW,FindFir stFileW,De leteFileW, FindNextFi leW,FindCl ose,Remove DirectoryW ,GetFileAt tributesA, FindFirstF ileA,Delet eFileA,Fin dNextFileA ,FindClose ,RemoveDir ectoryA,Ĭode function: 6_2_0040E3 18 GetModu leHandleW, GetProcAdd ress,FindF irstFileW, FindClose, lstrlenW,l strlenW, ![]() Source: C:\Users\user\AppData\Local\Temp\SupremoRemoteDesktop\SupremoSystem.exeĬode function: 2_2_004098 84 FindFir stFileW,Fi ndClose,Ĭode function: 2_2_004093 1C GetModu leHandleW, GetProcAdd ress,lstrc pynW,lstrc pynW,lstrc pynW,FindF irstFileW, FindClose, lstrlenW,l strcpynW,l strlenW,ls trcpynW,Ĭode function: 3_2_004098 84 FindFir stFileW,Fi ndClose,Ĭode function: 3_2_004093 1C GetModu leHandleW, GetProcAdd ress,lstrc pynW,lstrc pynW,lstrc pynW,FindF irstFileW, FindClose, lstrlenW,l strcpynW,l strlenW,ls trcpynW,Ĭode function: 3_1_004098 84 FindFir stFileW,Fi ndClose,Ĭode function: 3_1_004093 1C GetModu leHandleW, GetProcAdd ress,lstrc pynW,lstrc pynW,lstrc pynW,FindF irstFileW, FindClose, lstrlenW,l strcpynW,l strlenW,ls trcpynW, exeĬontains functionality to enumerate / list files inside a directory Found application associated with file extension.Successful, ratio: 63.5% (good quality ratio 58.9%).Number of analysed new started processes analysed: Windows 7 SP1 (with Office 2010 SP2, IE 11, FF 54, Chrome 60, Acrobat Reader DC 17, Flash 26, Java. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |