Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\Downloads\Unconfirmed 806031.crdownload
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
 |
|
|
C:\Users\user\Downloads\free-barcode-6.8.10-installer_c-RQoW1.exe (copy)
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
Chrome Cache Entry: 44
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\is-VUMNN.tmp\free-barcode-6.8.10-installer_c-RQoW1.tmp
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\Downloads\5acd5e57-60dc-40cb-8ab4-5615a88e4ecf.tmp
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2208,i,4406949674789423698,2697958066234429667,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://d1isumqvmnq7jz.cloudfront.net/build/pl/v4.397.63.30.34"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US
--service-sandbox-type=icon_reader --mojo-platform-channel-handle=5480 --field-trial-handle=2208,i,4406949674789423698,2697958066234429667,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Users\user\Downloads\free-barcode-6.8.10-installer_c-RQoW1.exe
|
"C:\Users\user\Downloads\free-barcode-6.8.10-installer_c-RQoW1.exe"
|
||
|
C:\Users\user\AppData\Local\Temp\is-VUMNN.tmp\free-barcode-6.8.10-installer_c-RQoW1.tmp
|
"C:\Users\user\AppData\Local\Temp\is-VUMNN.tmp\free-barcode-6.8.10-installer_c-RQoW1.tmp" /SL5="$A0076,837550,832512,C:\Users\user\Downloads\free-barcode-6.8.10-installer_c-RQoW1.exe"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://d1isumqvmnq7jz.cloudfront.net/build/pl/v4.397.63.30.34
|
|
||
|
https://risecodes.com/privacy
|
unknown
|
||
|
https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
|
unknown
|
||
|
https://risecodes.com/terms
|
unknown
|
||
|
https://d2cxd1qpd0dh21.cloudfront.net/o
|
unknown
|
||
|
https://d2cxd1qpd0dh21.cloudfront.net/f/
|
unknown
|
||
|
https://www.remobjects.com/ps
|
unknown
|
||
|
https://d2cxd1qpd0dh21.cloudfront.net/zbd
|
unknown
|
||
|
http://d1isumqvmnq7jz.cloudfront.net/build/pl/v4.397.63.30.34
|
108.139.9.151
|
||
|
https://www.innosetup.com/
|
unknown
|
||
|
http://www.dk-soft.org/
|
unknown
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
d1isumqvmnq7jz.cloudfront.net
|
108.139.9.151
|
||
|
www.google.com
|
142.250.101.147
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
108.139.9.151
|
d1isumqvmnq7jz.cloudfront.net
|
United States
|
||
|
142.250.101.147
|
www.google.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
192.168.2.4
|
unknown
|
unknown
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
76E4000
|
direct allocation
|
page read and write
|
||
|
9E0000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
25F8000
|
direct allocation
|
page read and write
|
||
|
2231000
|
direct allocation
|
page read and write
|
||
|
2690000
|
direct allocation
|
page read and write
|
||
|
2288000
|
direct allocation
|
page read and write
|
||
|
26CB000
|
direct allocation
|
page read and write
|
||
|
4C0000
|
unkown
|
page read and write
|
||
|
76CF000
|
direct allocation
|
page read and write
|
||
|
C1E000
|
stack
|
page read and write
|
||
|
28B0000
|
heap
|
page read and write
|
||
|
2714000
|
direct allocation
|
page read and write
|
||
|
2731000
|
direct allocation
|
page read and write
|
||
|
9EB000
|
heap
|
page read and write
|
||
|
6D9000
|
unkown
|
page write copy
|
||
|
28B3000
|
heap
|
page read and write
|
||
|
ADE000
|
stack
|
page read and write
|
||
|
262D000
|
direct allocation
|
page read and write
|
||
|
7FE35000
|
direct allocation
|
page read and write
|
||
|
3669000
|
direct allocation
|
page read and write
|
||
|
7684000
|
direct allocation
|
page read and write
|
||
|
21A0000
|
direct allocation
|
page read and write
|
||
|
7FB40000
|
direct allocation
|
page read and write
|
||
|
371F000
|
stack
|
page read and write
|
||
|
271C000
|
direct allocation
|
page read and write
|
||
|
83E000
|
stack
|
page read and write
|
||
|
7678000
|
direct allocation
|
page read and write
|
||
|
367B000
|
direct allocation
|
page read and write
|
||
|
22AD000
|
direct allocation
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
9A0000
|
heap
|
page read and write
|
||
|
76C1000
|
direct allocation
|
page read and write
|
||
|
97000
|
stack
|
page read and write
|
||
|
22B4000
|
direct allocation
|
page read and write
|
||
|
E30000
|
heap
|
page read and write
|
||
|
4C4000
|
unkown
|
page readonly
|
||
|
76B9000
|
direct allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
6C7000
|
unkown
|
page read and write
|
||
|
2281000
|
direct allocation
|
page read and write
|
||
|
76EC000
|
direct allocation
|
page read and write
|
||
|
9E6000
|
heap
|
page read and write
|
||
|
272A000
|
direct allocation
|
page read and write
|
||
|
26E8000
|
direct allocation
|
page read and write
|
||
|
6CE000
|
unkown
|
page read and write
|
||
|
22C3000
|
direct allocation
|
page read and write
|
||
|
6DD000
|
unkown
|
page read and write
|
||
|
2626000
|
direct allocation
|
page read and write
|
||
|
2958000
|
direct allocation
|
page read and write
|
||
|
E50000
|
heap
|
page read and write
|
||
|
21CB000
|
direct allocation
|
page read and write
|
||
|
76AB000
|
direct allocation
|
page read and write
|
||
|
76B2000
|
direct allocation
|
page read and write
|
||
|
21AC000
|
direct allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
76C8000
|
direct allocation
|
page read and write
|
||
|
600000
|
heap
|
page read and write
|
||
|
2520000
|
direct allocation
|
page read and write
|
||
|
6A0000
|
heap
|
page read and write
|
||
|
2740000
|
heap
|
page read and write
|
||
|
269F000
|
direct allocation
|
page read and write
|
||
|
26DA000
|
direct allocation
|
page read and write
|
||
|
2298000
|
direct allocation
|
page read and write
|
||
|
21C4000
|
direct allocation
|
page read and write
|
||
|
26F8000
|
direct allocation
|
page read and write
|
||
|
270D000
|
direct allocation
|
page read and write
|
||
|
690000
|
heap
|
page read and write
|
||
|
22CA000
|
direct allocation
|
page read and write
|
||
|
2738000
|
direct allocation
|
page read and write
|
||
|
26FF000
|
direct allocation
|
page read and write
|
||
|
97F000
|
stack
|
page read and write
|
||
|
5FE000
|
stack
|
page read and write
|
||
|
2643000
|
direct allocation
|
page read and write
|
||
|
6DE000
|
unkown
|
page readonly
|
||
|
76A4000
|
direct allocation
|
page read and write
|
||
|
2658000
|
direct allocation
|
page read and write
|
||
|
4B7000
|
unkown
|
page read and write
|
||
|
2660000
|
direct allocation
|
page read and write
|
||
|
21B5000
|
direct allocation
|
page read and write
|
||
|
35C0000
|
direct allocation
|
page read and write
|
||
|
26B4000
|
direct allocation
|
page read and write
|
||
|
4B9000
|
unkown
|
page read and write
|
||
|
7695000
|
direct allocation
|
page read and write
|
||
|
26E1000
|
direct allocation
|
page read and write
|
||
|
E40000
|
direct allocation
|
page execute and read and write
|
||
|
6D6000
|
unkown
|
page read and write
|
||
|
D1F000
|
stack
|
page read and write
|
||
|
9DC000
|
heap
|
page read and write
|
||
|
361E000
|
stack
|
page read and write
|
||
|
22D8000
|
direct allocation
|
page read and write
|
||
|
703000
|
unkown
|
page readonly
|
||
|
708000
|
heap
|
page read and write
|
||
|
261F000
|
direct allocation
|
page read and write
|
||
|
2261000
|
direct allocation
|
page read and write
|
||
|
4C2000
|
unkown
|
page write copy
|
||
|
263C000
|
direct allocation
|
page read and write
|
||
|
22D1000
|
direct allocation
|
page read and write
|
||
|
26D2000
|
direct allocation
|
page read and write
|
||
|
35D0000
|
direct allocation
|
page read and write
|
||
|
229F000
|
direct allocation
|
page read and write
|
||
|
66E000
|
stack
|
page read and write
|
||
|
219F000
|
stack
|
page read and write
|
||
|
21BC000
|
direct allocation
|
page read and write
|
||
|
720000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3672000
|
direct allocation
|
page read and write
|
||
|
9A8000
|
heap
|
page read and write
|
||
|
22BC000
|
direct allocation
|
page read and write
|
||
|
700000
|
heap
|
page read and write
|
||
|
2DC0000
|
trusted library allocation
|
page read and write
|
||
|
6D1000
|
unkown
|
page read and write
|
||
|
76D6000
|
direct allocation
|
page read and write
|
||
|
76F3000
|
direct allocation
|
page read and write
|
||
|
22A6000
|
direct allocation
|
page read and write
|
||
|
7655000
|
direct allocation
|
page read and write
|
||
|
76DD000
|
direct allocation
|
page read and write
|
||
|
767A000
|
direct allocation
|
page read and write
|
||
|
2684000
|
direct allocation
|
page read and write
|
||
|
BDF000
|
stack
|
page read and write
|
||
|
4C6000
|
unkown
|
page readonly
|
||
|
368E000
|
direct allocation
|
page read and write
|
||
|
2610000
|
direct allocation
|
page read and write
|
||
|
19D000
|
stack
|
page read and write
|
||
|
4E0000
|
heap
|
page read and write
|
||
|
21A5000
|
direct allocation
|
page read and write
|
||
|
2618000
|
direct allocation
|
page read and write
|
||
|
2706000
|
direct allocation
|
page read and write
|
||
|
26A6000
|
direct allocation
|
page read and write
|
||
|
264A000
|
direct allocation
|
page read and write
|
||
|
870000
|
heap
|
page read and write
|
||
|
26BD000
|
direct allocation
|
page read and write
|
||
|
9E9000
|
heap
|
page read and write
|
||
|
6C7000
|
unkown
|
page write copy
|
||
|
2651000
|
direct allocation
|
page read and write
|
||
|
19C000
|
stack
|
page read and write
|
||
|
227A000
|
direct allocation
|
page read and write
|
||
|
2600000
|
direct allocation
|
page read and write
|
||
|
4B7000
|
unkown
|
page write copy
|
||
|
8FF000
|
stack
|
page read and write
|
||
|
769D000
|
direct allocation
|
page read and write
|
||
|
610000
|
heap
|
page read and write
|
||
|
E59000
|
heap
|
page read and write
|
||
|
840000
|
heap
|
page read and write
|
||
|
28A0000
|
heap
|
page read and write
|
||
|
9D8000
|
heap
|
page read and write
|
||
|
2723000
|
direct allocation
|
page read and write
|
||
|
35D0000
|
direct allocation
|
page read and write
|
||
|
2634000
|
direct allocation
|
page read and write
|
||
|
269C000
|
direct allocation
|
page read and write
|
||
|
E55000
|
heap
|
page read and write
|
||
|
6E0000
|
unkown
|
page readonly
|
||
|
26C4000
|
direct allocation
|
page read and write
|
||
|
2689000
|
direct allocation
|
page read and write
|
||
|
35C0000
|
direct allocation
|
page read and write
|
||
|
26AD000
|
direct allocation
|
page read and write
|
||
|
6C9000
|
unkown
|
page read and write
|
||
|
7702000
|
direct allocation
|
page read and write
|
There are 148 hidden memdumps, click here to show them.