Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
1iO53raUh69l6nV.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1iO53raUh69l6nV.exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\1iO53raUh69l6nV.exe
|
"C:\Users\user\Desktop\1iO53raUh69l6nV.exe"
|
|
|
|
C:\Users\user\Desktop\1iO53raUh69l6nV.exe
|
"C:\Users\user\Desktop\1iO53raUh69l6nV.exe"
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://account.dyn.com/
|
unknown
|
||
|
http://us2.smtp.mailhostbox.com
|
unknown
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
us2.smtp.mailhostbox.com
|
208.91.199.224
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
208.91.198.143
|
unknown
|
United States
|
||
|
208.91.199.225
|
unknown
|
United States
|
||
|
208.91.199.223
|
unknown
|
United States
|
||
|
208.91.199.224
|
us2.smtp.mailhostbox.com
|
United States
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3F13000
|
trusted library allocation
|
page read and write
|
|
|
|
2A9E000
|
trusted library allocation
|
page read and write
|
|
|
|
3479000
|
trusted library allocation
|
page read and write
|
|
|
|
402000
|
remote allocation
|
page execute and read and write
|
|
|
|
2A51000
|
trusted library allocation
|
page read and write
|
|
|
|
7FD0000
|
trusted library section
|
page read and write
|
||
|
9B3000
|
trusted library allocation
|
page execute and read and write
|
||
|
3A79000
|
trusted library allocation
|
page read and write
|
||
|
3A59000
|
trusted library allocation
|
page read and write
|
||
|
BA0E000
|
stack
|
page read and write
|
||
|
9086000
|
trusted library allocation
|
page read and write
|
||
|
2740000
|
trusted library allocation
|
page read and write
|
||
|
C34000
|
heap
|
page read and write
|
||
|
9080000
|
trusted library allocation
|
page read and write
|
||
|
2453000
|
heap
|
page read and write
|
||
|
2310000
|
trusted library allocation
|
page read and write
|
||
|
4F0E000
|
stack
|
page read and write
|
||
|
26F0000
|
trusted library allocation
|
page read and write
|
||
|
454C000
|
stack
|
page read and write
|
||
|
5F7E000
|
stack
|
page read and write
|
||
|
294E000
|
stack
|
page read and write
|
||
|
D50000
|
heap
|
page read and write
|
||
|
45A000
|
stack
|
page read and write
|
||
|
57D0000
|
trusted library allocation
|
page read and write
|
||
|
4994000
|
trusted library allocation
|
page read and write
|
||
|
7B7B000
|
stack
|
page read and write
|
||
|
582E000
|
stack
|
page read and write
|
||
|
4A00000
|
trusted library allocation
|
page read and write
|
||
|
4BE0000
|
heap
|
page read and write
|
||
|
29D1000
|
trusted library allocation
|
page read and write
|
||
|
49D0000
|
trusted library allocation
|
page read and write
|
||
|
2703000
|
trusted library allocation
|
page read and write
|
||
|
4A50000
|
trusted library allocation
|
page read and write
|
||
|
49B6000
|
trusted library allocation
|
page read and write
|
||
|
B30000
|
heap
|
page read and write
|
||
|
B80000
|
heap
|
page read and write
|
||
|
2460000
|
heap
|
page read and write
|
||
|
4D8D000
|
heap
|
page read and write
|
||
|
5060000
|
trusted library allocation
|
page read and write
|
||
|
2716000
|
trusted library allocation
|
page execute and read and write
|
||
|
DD0000
|
heap
|
page read and write
|
||
|
29E5000
|
trusted library allocation
|
page read and write
|
||
|
3D8C000
|
trusted library allocation
|
page read and write
|
||
|
5280000
|
heap
|
page execute and read and write
|
||
|
2722000
|
trusted library allocation
|
page read and write
|
||
|
7A8000
|
heap
|
page read and write
|
||
|
61E000
|
stack
|
page read and write
|
||
|
B1E000
|
stack
|
page read and write
|
||
|
2710000
|
trusted library allocation
|
page read and write
|
||
|
780000
|
heap
|
page read and write
|
||
|
9060000
|
trusted library allocation
|
page execute and read and write
|
||
|
5FBE000
|
stack
|
page read and write
|
||
|
2AA6000
|
trusted library allocation
|
page read and write
|
||
|
57E0000
|
trusted library allocation
|
page execute and read and write
|
||
|
CF0000
|
trusted library allocation
|
page read and write
|
||
|
7E9000
|
stack
|
page read and write
|
||
|
2720000
|
trusted library allocation
|
page read and write
|
||
|
504E000
|
stack
|
page read and write
|
||
|
464C000
|
stack
|
page read and write
|
||
|
2798000
|
trusted library allocation
|
page read and write
|
||
|
7FE000
|
heap
|
page read and write
|
||
|
7F0F0000
|
trusted library allocation
|
page execute and read and write
|
||
|
4F21000
|
trusted library allocation
|
page read and write
|
||
|
A10000
|
heap
|
page read and write
|
||
|
2450000
|
heap
|
page read and write
|
||
|
29CE000
|
trusted library allocation
|
page read and write
|
||
|
2471000
|
trusted library allocation
|
page read and write
|
||
|
400000
|
remote allocation
|
page execute and read and write
|
||
|
680000
|
heap
|
page read and write
|
||
|
DC0000
|
heap
|
page read and write
|
||
|
2320000
|
heap
|
page execute and read and write
|
||
|
538C000
|
stack
|
page read and write
|
||
|
3DDA000
|
trusted library allocation
|
page read and write
|
||
|
3E28000
|
trusted library allocation
|
page read and write
|
||
|
278E000
|
stack
|
page read and write
|
||
|
520E000
|
stack
|
page read and write
|
||
|
499B000
|
trusted library allocation
|
page read and write
|
||
|
2A00000
|
trusted library allocation
|
page read and write
|
||
|
4B90000
|
trusted library allocation
|
page read and write
|
||
|
500E000
|
stack
|
page read and write
|
||
|
CE0000
|
trusted library allocation
|
page execute and read and write
|
||
|
49AE000
|
trusted library allocation
|
page read and write
|
||
|
2830000
|
trusted library allocation
|
page execute and read and write
|
||
|
29F4000
|
trusted library allocation
|
page read and write
|
||
|
7CCD000
|
stack
|
page read and write
|
||
|
569E000
|
stack
|
page read and write
|
||
|
C13000
|
heap
|
page read and write
|
||
|
557000
|
stack
|
page read and write
|
||
|
29C2000
|
trusted library allocation
|
page read and write
|
||
|
BD8000
|
heap
|
page read and write
|
||
|
5068000
|
trusted library allocation
|
page read and write
|
||
|
2712000
|
trusted library allocation
|
page read and write
|
||
|
57D6000
|
trusted library allocation
|
page read and write
|
||
|
9E7000
|
trusted library allocation
|
page execute and read and write
|
||
|
760000
|
heap
|
page read and write
|
||
|
558F000
|
stack
|
page read and write
|
||
|
2725000
|
trusted library allocation
|
page execute and read and write
|
||
|
272B000
|
trusted library allocation
|
page execute and read and write
|
||
|
244F000
|
trusted library allocation
|
page read and write
|
||
|
BD6000
|
heap
|
page read and write
|
||
|
7B5000
|
heap
|
page read and write
|
||
|
568E000
|
stack
|
page read and write
|
||
|
834000
|
heap
|
page read and write
|
||
|
620000
|
heap
|
page read and write
|
||
|
49B1000
|
trusted library allocation
|
page read and write
|
||
|
4F30000
|
trusted library allocation
|
page execute and read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
29E2000
|
trusted library allocation
|
page read and write
|
||
|
6344000
|
heap
|
page read and write
|
||
|
E2000
|
unkown
|
page readonly
|
||
|
B58E000
|
stack
|
page read and write
|
||
|
49BD000
|
trusted library allocation
|
page read and write
|
||
|
6340000
|
heap
|
page read and write
|
||
|
5083000
|
heap
|
page read and write
|
||
|
7D60000
|
trusted library allocation
|
page read and write
|
||
|
D07000
|
trusted library allocation
|
page read and write
|
||
|
26FD000
|
trusted library allocation
|
page execute and read and write
|
||
|
270D000
|
trusted library allocation
|
page execute and read and write
|
||
|
9C3000
|
trusted library allocation
|
page read and write
|
||
|
29B0000
|
trusted library allocation
|
page read and write
|
||
|
685000
|
heap
|
page read and write
|
||
|
D00000
|
trusted library allocation
|
page read and write
|
||
|
788000
|
heap
|
page read and write
|
||
|
A50000
|
heap
|
page read and write
|
||
|
6E9000
|
stack
|
page read and write
|
||
|
26C6000
|
trusted library allocation
|
page read and write
|
||
|
DF0000
|
heap
|
page read and write
|
||
|
617E000
|
stack
|
page read and write
|
||
|
29DD000
|
trusted library allocation
|
page read and write
|
||
|
2A40000
|
heap
|
page execute and read and write
|
||
|
66E000
|
stack
|
page read and write
|
||
|
29BB000
|
trusted library allocation
|
page read and write
|
||
|
BA0000
|
heap
|
page read and write
|
||
|
29D6000
|
trusted library allocation
|
page read and write
|
||
|
7A0000
|
heap
|
page read and write
|
||
|
4A40000
|
heap
|
page read and write
|
||
|
22FE000
|
stack
|
page read and write
|
||
|
29A0000
|
trusted library allocation
|
page read and write
|
||
|
4D7D000
|
heap
|
page read and write
|
||
|
9A0000
|
trusted library allocation
|
page read and write
|
||
|
4BDE000
|
stack
|
page read and write
|
||
|
9B4000
|
trusted library allocation
|
page read and write
|
||
|
9DA000
|
trusted library allocation
|
page execute and read and write
|
||
|
B35000
|
heap
|
page read and write
|
||
|
5070000
|
trusted library allocation
|
page read and write
|
||
|
507C000
|
trusted library allocation
|
page read and write
|
||
|
579F000
|
stack
|
page read and write
|
||
|
D20000
|
trusted library allocation
|
page read and write
|
||
|
242E000
|
stack
|
page read and write
|
||
|
E0000
|
unkown
|
page readonly
|
||
|
9EB000
|
trusted library allocation
|
page execute and read and write
|
||
|
B8CE000
|
stack
|
page read and write
|
||
|
4D73000
|
heap
|
page read and write
|
||
|
5D0000
|
heap
|
page read and write
|
||
|
49D5000
|
trusted library allocation
|
page read and write
|
||
|
2A9C000
|
trusted library allocation
|
page read and write
|
||
|
9D6000
|
trusted library allocation
|
page execute and read and write
|
||
|
4B4D000
|
stack
|
page read and write
|
||
|
4FCC000
|
stack
|
page read and write
|
||
|
2440000
|
trusted library allocation
|
page read and write
|
||
|
97F000
|
stack
|
page read and write
|
||
|
B5CE000
|
stack
|
page read and write
|
||
|
820000
|
heap
|
page read and write
|
||
|
7F3F0000
|
trusted library allocation
|
page execute and read and write
|
||
|
5C0000
|
heap
|
page read and write
|
||
|
6382000
|
heap
|
page read and write
|
||
|
5080000
|
heap
|
page read and write
|
||
|
49E0000
|
trusted library allocation
|
page read and write
|
||
|
4E90000
|
heap
|
page read and write
|
||
|
9E2000
|
trusted library allocation
|
page read and write
|
||
|
298C000
|
stack
|
page read and write
|
||
|
26F4000
|
trusted library allocation
|
page read and write
|
||
|
26F3000
|
trusted library allocation
|
page execute and read and write
|
||
|
9C0000
|
trusted library allocation
|
page read and write
|
||
|
B88E000
|
stack
|
page read and write
|
||
|
4B70000
|
trusted library section
|
page read and write
|
||
|
4B6E000
|
stack
|
page read and write
|
||
|
9BD000
|
trusted library allocation
|
page execute and read and write
|
||
|
B9CF000
|
stack
|
page read and write
|
||
|
2700000
|
trusted library allocation
|
page read and write
|
||
|
82B000
|
heap
|
page read and write
|
||
|
4C10000
|
heap
|
page execute and read and write
|
||
|
4A60000
|
trusted library allocation
|
page execute and read and write
|
||
|
7B80000
|
trusted library allocation
|
page read and write
|
||
|
4990000
|
trusted library allocation
|
page read and write
|
||
|
4D30000
|
heap
|
page read and write
|
||
|
29F0000
|
trusted library allocation
|
page read and write
|
||
|
BB0E000
|
stack
|
page read and write
|
||
|
2727000
|
trusted library allocation
|
page execute and read and write
|
||
|
4F10000
|
trusted library section
|
page read and write
|
||
|
29B6000
|
trusted library allocation
|
page read and write
|
||
|
A00000
|
trusted library allocation
|
page read and write
|
||
|
D10000
|
trusted library allocation
|
page read and write
|
||
|
29CA000
|
trusted library allocation
|
page read and write
|
||
|
7CD0000
|
trusted library allocation
|
page read and write
|
||
|
9CD000
|
trusted library allocation
|
page execute and read and write
|
||
|
9B0000
|
trusted library allocation
|
page read and write
|
||
|
66E0000
|
heap
|
page read and write
|
||
|
4478000
|
trusted library allocation
|
page read and write
|
||
|
3A51000
|
trusted library allocation
|
page read and write
|
||
|
BCB000
|
heap
|
page read and write
|
||
|
2300000
|
trusted library allocation
|
page execute and read and write
|
||
|
43E000
|
remote allocation
|
page execute and read and write
|
||
|
7C2000
|
heap
|
page read and write
|
||
|
3471000
|
trusted library allocation
|
page read and write
|
||
|
4D10000
|
heap
|
page read and write
|
||
|
C92000
|
heap
|
page read and write
|
||
|
49C2000
|
trusted library allocation
|
page read and write
|
||
|
271A000
|
trusted library allocation
|
page execute and read and write
|
||
|
2430000
|
trusted library allocation
|
page read and write
|
||
|
B78E000
|
stack
|
page read and write
|
||
|
4D70000
|
heap
|
page read and write
|
||
|
D60000
|
trusted library allocation
|
page execute and read and write
|
||
|
4A52000
|
trusted library allocation
|
page read and write
|
||
|
2840000
|
heap
|
page read and write
|
||
|
7BC0000
|
heap
|
page read and write
|
||
|
26E0000
|
trusted library allocation
|
page read and write
|
||
|
BA8000
|
heap
|
page read and write
|
||
|
29BE000
|
trusted library allocation
|
page read and write
|
||
|
4C00000
|
trusted library section
|
page read and write
|
||
|
78E000
|
heap
|
page read and write
|
||
|
3ABD000
|
trusted library allocation
|
page read and write
|
||
|
565F000
|
stack
|
page read and write
|
||
|
548E000
|
stack
|
page read and write
|
There are 214 hidden memdumps, click here to show them.