Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe "C:\Users\user\Desktop\Ua58ViPBl3.dll"
|
||
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\Ua58ViPBl3.dll",#1
|
||
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\Ua58ViPBl3.dll,CheckPwd
|
||
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\Ua58ViPBl3.dll",#1
|
||
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\Ua58ViPBl3.dll,GetKey
|
||
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\Ua58ViPBl3.dll,GetPwd
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
198.187.3.20.in-addr.arpa
|
unknown
|
||
|
197.87.175.4.in-addr.arpa
|
unknown
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
28CB000
|
heap
|
page read and write
|
||
|
28E8000
|
heap
|
page read and write
|
||
|
303C000
|
stack
|
page read and write
|
||
|
6784000
|
heap
|
page read and write
|
||
|
3346000
|
heap
|
page read and write
|
||
|
5AA0000
|
trusted library allocation
|
page read and write
|
||
|
EAF000
|
stack
|
page read and write
|
||
|
28D6000
|
heap
|
page read and write
|
||
|
332A000
|
heap
|
page read and write
|
||
|
36A0000
|
heap
|
page read and write
|
||
|
30C3000
|
heap
|
page read and write
|
||
|
28AA000
|
heap
|
page read and write
|
||
|
5AE0000
|
trusted library allocation
|
page read and write
|
||
|
4320000
|
heap
|
page read and write
|
||
|
30C2000
|
heap
|
page read and write
|
||
|
4B4D000
|
stack
|
page read and write
|
||
|
4B0E000
|
stack
|
page read and write
|
||
|
7DE000
|
stack
|
page read and write
|
||
|
333F000
|
heap
|
page read and write
|
||
|
2877000
|
heap
|
page read and write
|
||
|
30B8000
|
heap
|
page read and write
|
||
|
287A000
|
heap
|
page read and write
|
||
|
4CFE000
|
stack
|
page read and write
|
||
|
6720000
|
heap
|
page read and write
|
||
|
28AA000
|
heap
|
page read and write
|
||
|
417F000
|
stack
|
page read and write
|
||
|
31A0000
|
heap
|
page read and write
|
||
|
43B0000
|
heap
|
page read and write
|
||
|
28C3000
|
heap
|
page read and write
|
||
|
43C4000
|
heap
|
page read and write
|
||
|
64E0000
|
heap
|
page read and write
|
||
|
2870000
|
heap
|
page read and write
|
||
|
3310000
|
heap
|
page read and write
|
||
|
30D8000
|
heap
|
page read and write
|
||
|
28CF000
|
heap
|
page read and write
|
||
|
28C8000
|
heap
|
page read and write
|
||
|
28C3000
|
heap
|
page read and write
|
||
|
4EFE000
|
stack
|
page read and write
|
||
|
D7F000
|
stack
|
page read and write
|
||
|
4F3F000
|
stack
|
page read and write
|
||
|
B3E000
|
stack
|
page read and write
|
||
|
3349000
|
heap
|
page read and write
|
||
|
6780000
|
heap
|
page read and write
|
||
|
3280000
|
heap
|
page read and write
|
||
|
30BE000
|
heap
|
page read and write
|
||
|
31C0000
|
heap
|
page read and write
|
||
|
267C000
|
stack
|
page read and write
|
||
|
64F0000
|
heap
|
page read and write
|
||
|
43C4000
|
heap
|
page read and write
|
||
|
28CB000
|
heap
|
page read and write
|
||
|
26E0000
|
heap
|
page read and write
|
||
|
41BE000
|
stack
|
page read and write
|
||
|
28C3000
|
heap
|
page read and write
|
||
|
36AA000
|
heap
|
page read and write
|
||
|
4B8E000
|
stack
|
page read and write
|
||
|
3327000
|
heap
|
page read and write
|
||
|
28C6000
|
heap
|
page read and write
|
||
|
26B0000
|
heap
|
page read and write
|
||
|
4330000
|
heap
|
page read and write
|
||
|
780000
|
heap
|
page read and write
|
||
|
28E8000
|
heap
|
page read and write
|
||
|
26F0000
|
heap
|
page read and write
|
||
|
2887000
|
heap
|
page read and write
|
||
|
44BF000
|
stack
|
page read and write
|
||
|
28CB000
|
heap
|
page read and write
|
||
|
DA0000
|
heap
|
page read and write
|
||
|
3336000
|
heap
|
page read and write
|
||
|
3332000
|
heap
|
page read and write
|
||
|
2DF9000
|
stack
|
page read and write
|
||
|
6520000
|
heap
|
page read and write
|
||
|
43C0000
|
heap
|
page read and write
|
||
|
284E000
|
stack
|
page read and write
|
||
|
2FBA000
|
stack
|
page read and write
|
||
|
28D0000
|
heap
|
page read and write
|
||
|
28CB000
|
heap
|
page read and write
|
||
|
2639000
|
stack
|
page read and write
|
||
|
28A0000
|
heap
|
page read and write
|
||
|
3357000
|
heap
|
page read and write
|
||
|
335C000
|
heap
|
page read and write
|
||
|
3340000
|
heap
|
page read and write
|
||
|
31B0000
|
heap
|
page read and write
|
||
|
30B8000
|
heap
|
page read and write
|
||
|
30B8000
|
heap
|
page read and write
|
||
|
27C0000
|
heap
|
page read and write
|
||
|
3090000
|
heap
|
page read and write
|
||
|
3250000
|
heap
|
page read and write
|
||
|
28D2000
|
heap
|
page read and write
|
||
|
FAB000
|
heap
|
page read and write
|
||
|
28C3000
|
heap
|
page read and write
|
||
|
28CC000
|
heap
|
page read and write
|
||
|
333C000
|
heap
|
page read and write
|
||
|
28BF000
|
heap
|
page read and write
|
||
|
36A7000
|
heap
|
page read and write
|
||
|
30B4000
|
heap
|
page read and write
|
||
|
28CB000
|
heap
|
page read and write
|
||
|
2FFC000
|
stack
|
page read and write
|
||
|
3336000
|
heap
|
page read and write
|
||
|
FA0000
|
heap
|
page read and write
|
||
|
28D5000
|
heap
|
page read and write
|
||
|
417E000
|
stack
|
page read and write
|
||
|
447D000
|
stack
|
page read and write
|
||
|
32FE000
|
stack
|
page read and write
|
||
|
281E000
|
stack
|
page read and write
|
||
|
3339000
|
heap
|
page read and write
|
||
|
3270000
|
heap
|
page read and write
|
||
|
28A0000
|
heap
|
page read and write
|
||
|
335C000
|
heap
|
page read and write
|
||
|
30C2000
|
heap
|
page read and write
|
||
|
267C000
|
stack
|
page read and write
|
||
|
4BCD000
|
stack
|
page read and write
|
||
|
331A000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
28BF000
|
heap
|
page read and write
|
||
|
2880000
|
heap
|
page read and write
|
||
|
3320000
|
heap
|
page read and write
|
||
|
30B4000
|
heap
|
page read and write
|
||
|
4C0E000
|
stack
|
page read and write
|
||
|
6710000
|
heap
|
page read and write
|
||
|
AFC000
|
stack
|
page read and write
|
||
|
FBE000
|
heap
|
page read and write
|
||
|
6A20000
|
trusted library allocation
|
page read and write
|
||
|
2639000
|
stack
|
page read and write
|
||
|
43C0000
|
heap
|
page read and write
|
||
|
43D0000
|
heap
|
page read and write
|
||
|
333F000
|
heap
|
page read and write
|
||
|
333F000
|
heap
|
page read and write
|
||
|
288A000
|
heap
|
page read and write
|
||
|
2700000
|
heap
|
page read and write
|
||
|
30E0000
|
heap
|
page read and write
|
||
|
4D7E000
|
stack
|
page read and write
|
||
|
28CB000
|
heap
|
page read and write
|
||
|
28C6000
|
heap
|
page read and write
|
||
|
30BC000
|
heap
|
page read and write
|
||
|
285E000
|
stack
|
page read and write
|
||
|
4D3D000
|
stack
|
page read and write
|
||
|
6524000
|
heap
|
page read and write
|
||
|
2790000
|
heap
|
page read and write
|
||
|
28CC000
|
heap
|
page read and write
|
||
|
30B0000
|
heap
|
page read and write
|
||
|
28D2000
|
heap
|
page read and write
|
||
|
790000
|
heap
|
page read and write
|
||
|
28CB000
|
heap
|
page read and write
|
||
|
6B50000
|
trusted library allocation
|
page read and write
|
||
|
309A000
|
heap
|
page read and write
|
||
|
333F000
|
heap
|
page read and write
|
||
|
28E4000
|
heap
|
page read and write
|
||
|
FAF000
|
heap
|
page read and write
|
||
|
71D000
|
stack
|
page read and write
|
||
|
330E000
|
stack
|
page read and write
|
||
|
30B8000
|
heap
|
page read and write
|
There are 140 hidden memdumps, click here to show them.