Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe "C:\Users\user\Desktop\e.dll"
|
 |
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\e.dll",#1
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\e.dll",#1
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://w0t.lol/S2wueuBWcKItxJBxaKQWGAqL7hMS3sfSm3IIJcJI-UnDuhqZF3FZYmhcdfYjgTH9ls8toERqLL6uvqWxks5TXG7p4KTZE3NtE0QUExXonRRsVxuWAUUUBfY4OBn0j6WOD9WysDP09mb9Mw2zw25E4216qfUiBb1_-f0hXmBwm-5V3zs05mClVySIs4Q2owQXkeB3urgLrouGFuJF9ZudjP54bzXceldzNx2o8pCLFM6WK1vNqyQJ4ZGEs5wabg119exWDBy_U0fDfIKkmquk4nx095rTVG61p-61BBPfkxzOTkQYmZHX6uOiApQ41hZ0OE5yH5VhrRws_4Dk7blD-zRqQGci0UruB3OYd7fIEanuxbGDB6PoPMh8nJxhyUjELjSu3EwICQdnYkBbiVs2LkVCWKmmn2lIaQTzB-OoNpw-dg1CW7D5qiS6SoaepRg
|
104.21.69.9
|
|
|
|
https://w0t.lol/S2wueuBWcKItxJBxaKQWGAqL7hMS3sfSm3IIJcJI-UnDuhqZF3FZYmhcdfYjgTH9ls8toERqLL6uvqWxks5T
|
unknown
|
||
|
http://www.quovadis.bm0
|
unknown
|
||
|
https://w0t.lol/
|
unknown
|
||
|
https://ocsp.quovadisoffshore.com0
|
unknown
|
||
|
https://w0t.lol/v
|
unknown
|
||
|
https://w0t.lol/T
|
unknown
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
w0t.lol
|
104.21.69.9
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
104.21.69.9
|
w0t.lol
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MediaPlayer
|
COMPUTERNAME
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
52AF000
|
direct allocation
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
40F000
|
unkown
|
page readonly
|
||
|
2EF0000
|
heap
|
page read and write
|
||
|
3276000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3276000
|
heap
|
page read and write
|
||
|
533E000
|
stack
|
page read and write
|
||
|
33B7000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
1390000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
32E0000
|
direct allocation
|
page execute and read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
27AC1000
|
direct allocation
|
page execute read
|
||
|
6836000
|
direct allocation
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
59AF000
|
stack
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3270000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
33C7000
|
heap
|
page read and write
|
||
|
6931000
|
direct allocation
|
page execute read
|
||
|
3277000
|
heap
|
page read and write
|
||
|
58C0000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3394000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
433000
|
unkown
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3290000
|
direct allocation
|
page execute read
|
||
|
435000
|
unkown
|
page write copy
|
||
|
5A4F000
|
stack
|
page read and write
|
||
|
557C000
|
stack
|
page read and write
|
||
|
33B7000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3275000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3276000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3275000
|
heap
|
page read and write
|
||
|
410000
|
unkown
|
page write copy
|
||
|
5AFF000
|
stack
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3276000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
52FE000
|
stack
|
page read and write
|
||
|
33AF000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
139B000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
5B60000
|
remote allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
5B60000
|
remote allocation
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
533D000
|
direct allocation
|
page execute read
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
40B000
|
unkown
|
page execute read
|
||
|
3277000
|
heap
|
page read and write
|
||
|
5A0E000
|
stack
|
page read and write
|
||
|
3330000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
4D60000
|
direct allocation
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
10FD000
|
stack
|
page read and write
|
||
|
1250000
|
heap
|
page read and write
|
||
|
32F0000
|
heap
|
page read and write
|
||
|
60F000
|
unkown
|
page readonly
|
||
|
5091000
|
direct allocation
|
page execute read
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
51BB000
|
direct allocation
|
page readonly
|
||
|
6831000
|
direct allocation
|
page execute read
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
6A2C000
|
direct allocation
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
D40000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
CCC000
|
stack
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
5441000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
27AC0000
|
direct allocation
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
33CE000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
33C7000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
33CE000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
53FA000
|
stack
|
page read and write
|
||
|
333A000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
33B0000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
C60000
|
heap
|
page read and write
|
||
|
5445000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
33B7000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
339C000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
51B1000
|
direct allocation
|
page execute read
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
33C7000
|
heap
|
page read and write
|
||
|
DA0000
|
unclassified section
|
page readonly
|
||
|
4F31000
|
direct allocation
|
page read and write
|
||
|
5096000
|
direct allocation
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
5B9E000
|
stack
|
page read and write
|
||
|
27AC2000
|
direct allocation
|
page readonly
|
||
|
3276000
|
heap
|
page read and write
|
||
|
D90000
|
unclassified section
|
page readonly
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
5BDF000
|
stack
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3352000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
5B60000
|
remote allocation
|
page read and write
|
||
|
D80000
|
unclassified section
|
page readonly
|
||
|
3277000
|
heap
|
page read and write
|
||
|
543B000
|
stack
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3412000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
698C000
|
direct allocation
|
page readonly
|
||
|
3277000
|
heap
|
page read and write
|
||
|
5A50000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
5ABE000
|
stack
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
339D000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
139E000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3276000
|
heap
|
page read and write
|
||
|
596E000
|
stack
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3276000
|
heap
|
page read and write
|
||
|
3276000
|
heap
|
page read and write
|
||
|
53BB000
|
stack
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
13AD000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
3276000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
33CA000
|
heap
|
page read and write
|
||
|
3274000
|
heap
|
page read and write
|
||
|
3277000
|
heap
|
page read and write
|
||
|
5440000
|
heap
|
page read and write
|
There are 246 hidden memdumps, click here to show them.