Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\wscript.exe
|
C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\download.js"
|
 |
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
28527B16000
|
heap
|
page read and write
|
||
|
28527D40000
|
heap
|
page read and write
|
||
|
28527B03000
|
heap
|
page read and write
|
||
|
28527B0D000
|
heap
|
page read and write
|
||
|
9E50AFE000
|
stack
|
page read and write
|
||
|
28527B03000
|
heap
|
page read and write
|
||
|
28527B12000
|
heap
|
page read and write
|
||
|
28527B03000
|
heap
|
page read and write
|
||
|
28527AD0000
|
heap
|
page read and write
|
||
|
28527B03000
|
heap
|
page read and write
|
||
|
9E50DFE000
|
stack
|
page read and write
|
||
|
28527B0D000
|
heap
|
page read and write
|
||
|
28527B0D000
|
heap
|
page read and write
|
||
|
9E508FE000
|
stack
|
page read and write
|
||
|
28527A98000
|
heap
|
page read and write
|
||
|
28527940000
|
heap
|
page read and write
|
||
|
28529830000
|
heap
|
page read and write
|
||
|
28527ADC000
|
heap
|
page read and write
|
||
|
28527B17000
|
heap
|
page read and write
|
||
|
28527A90000
|
heap
|
page read and write
|
||
|
2852B1E0000
|
trusted library allocation
|
page read and write
|
||
|
28527D45000
|
heap
|
page read and write
|
||
|
28527B09000
|
heap
|
page read and write
|
||
|
28527A40000
|
heap
|
page read and write
|
||
|
28527B0D000
|
heap
|
page read and write
|
||
|
9E506FA000
|
stack
|
page read and write
|
||
|
28527A20000
|
heap
|
page read and write
|
||
|
28527AAC000
|
heap
|
page read and write
|
||
|
9E50BFF000
|
stack
|
page read and write
|
||
|
28527B1D000
|
heap
|
page read and write
|
||
|
28527AEA000
|
heap
|
page read and write
|
||
|
28527ACF000
|
heap
|
page read and write
|
||
|
28527D49000
|
heap
|
page read and write
|
||
|
28527AB7000
|
heap
|
page read and write
|
||
|
285294E4000
|
heap
|
page read and write
|
||
|
9E50CFE000
|
stack
|
page read and write
|
||
|
28527AB1000
|
heap
|
page read and write
|
||
|
28527AEA000
|
heap
|
page read and write
|
||
|
28527AB7000
|
heap
|
page read and write
|
||
|
28527ADC000
|
heap
|
page read and write
|
||
|
9E507FE000
|
stack
|
page read and write
|
||
|
28527AF0000
|
heap
|
page read and write
|
||
|
28527AE6000
|
heap
|
page read and write
|
||
|
28527AB1000
|
heap
|
page read and write
|
||
|
285294C0000
|
heap
|
page read and write
|
||
|
28527AB7000
|
heap
|
page read and write
|
||
|
28527AD2000
|
heap
|
page read and write
|
||
|
28527D4C000
|
heap
|
page read and write
|
||
|
28529831000
|
heap
|
page read and write
|
||
|
28527B0D000
|
heap
|
page read and write
|
||
|
28527B0D000
|
heap
|
page read and write
|
||
|
285294E0000
|
heap
|
page read and write
|
There are 42 hidden memdumps, click here to show them.