Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\XDPT5mgIBO.exe
|
"C:\Users\user\Desktop\XDPT5mgIBO.exe"
|
 |
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://185.215.113.37/e2b1563c6670f193.phpO9
|
unknown
|
|
|
|
http://185.215.113.37/e2b1563c6670f193.php.G
|
unknown
|
|
|
|
http://185.215.113.37/e2b1563c6670f193.php09
|
unknown
|
|
|
|
http://185.215.113.37/
|
185.215.113.37
|
|
|
|
http://185.215.113.37/e9
|
unknown
|
|
|
|
http://185.215.113.37
|
unknown
|
|
|
|
http://185.215.113.37/e2b1563c6670f193.php
|
185.215.113.37
|
|
|
|
http://185.215.113.37/ws
|
unknown
|
|
|
|
http://185.215.113.37/e2b1563c6670f193.php&F
|
unknown
|
|
|
|
http://185.215.113.37d
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
185.215.113.37
|
unknown
|
Portugal
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
13BE000
|
heap
|
page read and write
|
|
|
|
5010000
|
direct allocation
|
page read and write
|
|
|
|
641000
|
unkown
|
page execute and read and write
|
|
|
|
4B91000
|
heap
|
page read and write
|
||
|
4B90000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
1434000
|
heap
|
page read and write
|
||
|
1D08F000
|
stack
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
314F000
|
stack
|
page read and write
|
||
|
418F000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
B28000
|
unkown
|
page execute and read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
1D0CE000
|
stack
|
page read and write
|
||
|
1205000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
1406000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
430E000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
CDE000
|
unkown
|
page execute and write copy
|
||
|
444E000
|
stack
|
page read and write
|
||
|
46CE000
|
stack
|
page read and write
|
||
|
1D33F000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
364F000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
408E000
|
stack
|
page read and write
|
||
|
37CE000
|
stack
|
page read and write
|
||
|
640000
|
unkown
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
2DB0000
|
direct allocation
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
CDE000
|
unkown
|
page execute and write copy
|
||
|
368E000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
10F5000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B8F000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4A4F000
|
stack
|
page read and write
|
||
|
1D5BF000
|
stack
|
page read and write
|
||
|
1419000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
1CF4F000
|
stack
|
page read and write
|
||
|
2DC7000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
38CF000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
15AE000
|
stack
|
page read and write
|
||
|
3C8F000
|
stack
|
page read and write
|
||
|
480E000
|
stack
|
page read and write
|
||
|
B3F000
|
unkown
|
page execute and write copy
|
||
|
440F000
|
stack
|
page read and write
|
||
|
518E000
|
stack
|
page read and write
|
||
|
1200000
|
heap
|
page read and write
|
||
|
1D47C000
|
stack
|
page read and write
|
||
|
11F0000
|
heap
|
page read and write
|
||
|
641000
|
unkown
|
page execute and write copy
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
2DC0000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
B30000
|
unkown
|
page execute and read and write
|
||
|
504E000
|
stack
|
page read and write
|
||
|
6F1000
|
unkown
|
page execute and read and write
|
||
|
1390000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
124D000
|
stack
|
page read and write
|
||
|
5180000
|
direct allocation
|
page execute and read and write
|
||
|
468F000
|
stack
|
page read and write
|
||
|
378F000
|
stack
|
page read and write
|
||
|
32CE000
|
stack
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
300F000
|
stack
|
page read and write
|
||
|
722000
|
unkown
|
page execute and read and write
|
||
|
390E000
|
stack
|
page read and write
|
||
|
404F000
|
stack
|
page read and write
|
||
|
1D4BE000
|
stack
|
page read and write
|
||
|
490F000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
454F000
|
stack
|
page read and write
|
||
|
340E000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
3A0F000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
3F4E000
|
stack
|
page read and write
|
||
|
1D1CF000
|
stack
|
page read and write
|
||
|
328F000
|
stack
|
page read and write
|
||
|
2DCB000
|
heap
|
page read and write
|
||
|
A25000
|
unkown
|
page execute and read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4BA0000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
304E000
|
stack
|
page read and write
|
||
|
51A0000
|
direct allocation
|
page execute and read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
134E000
|
stack
|
page read and write
|
||
|
5190000
|
direct allocation
|
page execute and read and write
|
||
|
CDC000
|
unkown
|
page execute and read and write
|
||
|
5160000
|
direct allocation
|
page execute and read and write
|
||
|
2D8E000
|
stack
|
page read and write
|
||
|
458E000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
41CD000
|
stack
|
page read and write
|
||
|
1CF8E000
|
stack
|
page read and write
|
||
|
354E000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
3B4F000
|
stack
|
page read and write
|
||
|
D6C000
|
stack
|
page read and write
|
||
|
DD0000
|
heap
|
page read and write
|
||
|
4A8E000
|
stack
|
page read and write
|
||
|
5170000
|
direct allocation
|
page execute and read and write
|
||
|
1D23E000
|
stack
|
page read and write
|
||
|
DC0000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
AFF000
|
unkown
|
page execute and read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
3DCF000
|
stack
|
page read and write
|
||
|
138E000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
350F000
|
stack
|
page read and write
|
||
|
42CF000
|
stack
|
page read and write
|
||
|
5180000
|
direct allocation
|
page execute and read and write
|
||
|
1D37D000
|
stack
|
page read and write
|
||
|
2DB0000
|
direct allocation
|
page read and write
|
||
|
3B8E000
|
stack
|
page read and write
|
||
|
3E0E000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
13BA000
|
heap
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
33CF000
|
stack
|
page read and write
|
||
|
640000
|
unkown
|
page readonly
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
318E000
|
stack
|
page read and write
|
||
|
47CF000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
B3E000
|
unkown
|
page execute and write copy
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
3CCE000
|
stack
|
page read and write
|
||
|
4C90000
|
trusted library allocation
|
page read and write
|
||
|
3A4E000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4BB0000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
494E000
|
stack
|
page read and write
|
||
|
2F0C000
|
stack
|
page read and write
|
||
|
B3E000
|
unkown
|
page execute and read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
88A000
|
unkown
|
page execute and read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
51B0000
|
direct allocation
|
page execute and read and write
|
||
|
6FD000
|
unkown
|
page execute and read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
514F000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
13B0000
|
heap
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
5150000
|
direct allocation
|
page execute and read and write
|
||
|
1402000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
89E000
|
unkown
|
page execute and read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
2ECF000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
10FE000
|
stack
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
4B91000
|
heap
|
page read and write
|
||
|
3F0F000
|
stack
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
There are 196 hidden memdumps, click here to show them.