Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Singhben2.exe
|
'C:\Users\user\Desktop\Singhben2.exe'
|
 |
|
|
C:\Users\user\Desktop\Singhben2.exe
|
'C:\Users\user\Desktop\Singhben2.exe'
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://glamorouspk.com/cv/bin_KNwExaqm29.bin
|
95.217.77.40
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
glamorouspk.com
|
95.217.77.40
|
 |
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
95.217.77.40
|
glamorouspk.com
|
Germany
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF52A3E4000
|
unkown
|
page readonly
|
|
|
|
196CE11D000
|
unkown
|
page read and write
|
|
|
|
196CFE60000
|
unkown
|
page readonly
|
|
|
|
4C0000
|
heap default
|
page read and write
|
|
|
|
196D02CB000
|
unkown
|
page read and write
|
|
|
|
2270000
|
heap private
|
page read and write
|
|
|
|
196D023F000
|
unkown
|
page read and write
|
|
|
|
196CE095000
|
unkown
|
page read and write
|
|
|
|
7FF52A0BB000
|
unkown
|
page readonly
|
|
|
|
196CFEE0000
|
unkown
|
page read and write
|
|
|
|
408F9F9000
|
unkown
|
page read and write
|
|
|
|
196D0120000
|
unkown
|
page read and write
|
|
|
|
196CFEE0000
|
unkown
|
page read and write
|
|
|
|
196CE1A1000
|
unkown
|
page read and write
|
|
|
|
7FF52A121000
|
unkown
|
page readonly
|
|
|
|
7FF52A2EA000
|
unkown
|
page readonly
|
|
|
|
408EE7A000
|
unkown
|
page read and write
|
|
|
|
196D0127000
|
unkown
|
page read and write
|
|
|
|
196D1110000
|
unkown
|
page read and write
|
|
|
|
7FF52A376000
|
unkown
|
page readonly
|
|
|
|
196D1010000
|
unkown
|
page read and write
|
|
|
|
196D01F3000
|
unkown
|
page read and write
|
|
|
|
408F17B000
|
unkown
|
page read and write
|
|
|
|
196D0131000
|
unkown
|
page read and write
|
|
|
|
7FF529E62000
|
unkown
|
page readonly
|
|
|
|
196D0239000
|
unkown
|
page read and write
|
|
|
|
7FF52A354000
|
unkown
|
page readonly
|
|
|
|
7FF52A1FB000
|
unkown
|
page readonly
|
|
|
|
7FF52A337000
|
unkown
|
page readonly
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
7FF529FCA000
|
unkown
|
page readonly
|
|
|
|
7FF52A300000
|
unkown
|
page readonly
|
|
|
|
196D0179000
|
unkown
|
page read and write
|
|
|
|
196D0382000
|
unkown
|
page read and write
|
|
|
|
7FF52A3F2000
|
unkown
|
page readonly
|
|
|
|
196D013E000
|
unkown
|
page read and write
|
|
|
|
1DDBF000
|
stack
|
page read and write
|
|
|
|
196D1110000
|
unkown
|
page read and write
|
|
|
|
196D1110000
|
unkown
|
page read and write
|
|
|
|
196D0100000
|
unkown
|
page read and write
|
|
|
|
196D0266000
|
unkown
|
page read and write
|
|
|
|
7FF52A24D000
|
unkown
|
page readonly
|
|
|
|
243D000
|
unkown
|
page read and write
|
|
|
|
7FF52A32C000
|
unkown
|
page readonly
|
|
|
|
196D1313000
|
unkown
|
page read and write
|
|
|
|
408F2FA000
|
unkown
|
page read and write
|
|
|
|
196CE11E000
|
unkown
|
page read and write
|
|
|
|
196D0502000
|
unkown
|
page read and write
|
|
|
|
1DB1E000
|
unkown
|
page read and write
|
|
|
|
196CDFF0000
|
unkown
|
page readonly
|
|
|
|
7FF52A344000
|
unkown
|
page readonly
|
|
|
|
196D0400000
|
unkown
|
page read and write
|
|
|
|
7FF52A35E000
|
unkown
|
page readonly
|
|
|
|
7FF52A3EA000
|
unkown
|
page readonly
|
|
|
|
408F57B000
|
unkown
|
page read and write
|
|
|
|
196CE102000
|
unkown
|
page read and write
|
|
|
|
196D1310000
|
unkown
|
page read and write
|
|
|
|
196CE029000
|
unkown
|
page read and write
|
|
|
|
7FF529FCF000
|
unkown
|
page readonly
|
|
|
|
196CE0A8000
|
unkown
|
page read and write
|
|
|
|
196CE0D8000
|
unkown
|
page read and write
|
|
|
|
196D0136000
|
unkown
|
page read and write
|
|
|
|
737000
|
heap default
|
page read and write
|
|
|
|
196D0294000
|
unkown
|
page read and write
|
|
|
|
196D0118000
|
unkown
|
page read and write
|
|
|
|
7FF52A36E000
|
unkown
|
page readonly
|
|
|
|
196D0168000
|
unkown
|
page read and write
|
|
|
|
196CFE70000
|
heap private
|
page read and write
|
|
|
|
196CE0EB000
|
unkown
|
page read and write
|
|
|
|
6A0000
|
unkown
|
page readonly
|
|
|
|
196CFF10000
|
unkown
|
page read and write
|
|
|
|
7FF52A2A0000
|
unkown
|
page readonly
|
|
|
|
7FF529C01000
|
unkown
|
page readonly
|
|
|
|
196D0402000
|
unkown
|
page read and write
|
|
|
|
196CE11E000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
4B0000
|
unkown
|
page read and write
|
|
|
|
408F07A000
|
unkown
|
page read and write
|
|
|
|
7FF52A0DF000
|
unkown
|
page readonly
|
|
|
|
196D02C5000
|
unkown
|
page read and write
|
|
|
|
2210000
|
heap private
|
page read and write
|
|
|
|
413000
|
unkown image
|
page readonly
|
|
|
|
7FF52A1E1000
|
unkown
|
page readonly
|
|
|
|
830000
|
unkown
|
page readonly
|
|
|
|
408F1FB000
|
unkown
|
page read and write
|
|
|
|
7FF52A379000
|
unkown
|
page readonly
|
|
|
|
196D0124000
|
unkown
|
page read and write
|
|
|
|
196CE200000
|
unkown
|
page write copy
|
|
|
|
196CDF20000
|
unkown
|
page readonly
|
|
|
|
196CE11C000
|
unkown
|
page read and write
|
|
|
|
196D0232000
|
unkown
|
page read and write
|
|
|
|
910000
|
unkown
|
page readonly
|
|
|
|
7FF52A2CF000
|
unkown
|
page readonly
|
|
|
|
1DED0000
|
unkown
|
page readonly
|
|
|
|
408F87B000
|
unkown
|
page read and write
|
|
|
|
196CE082000
|
unkown
|
page read and write
|
|
|
|
19C000
|
stack
|
page read and write
|
|
|
|
196CFF20000
|
unkown
|
page readonly
|
|
|
|
54A000
|
heap default
|
page read and write
|
|
|
|
196D0442000
|
unkown
|
page read and write
|
|
|
|
7FF52A2C3000
|
unkown
|
page readonly
|
|
|
|
7FF52A305000
|
unkown
|
page readonly
|
|
|
|
408F8FB000
|
unkown
|
page read and write
|
|
|
|
196D1010000
|
unkown
|
page read and write
|
|
|
|
196CE086000
|
unkown
|
page read and write
|
|
|
|
7FF52A292000
|
unkown
|
page readonly
|
|
|
|
196D1000000
|
unkown
|
page read and write
|
|
|
|
7FF529FBC000
|
unkown
|
page readonly
|
|
|
|
408F5FA000
|
unkown
|
page read and write
|
|
|
|
196CE170000
|
unkown
|
page read and write
|
|
|
|
196CFEF0000
|
unkown
|
page readonly
|
|
|
|
420000
|
unkown
|
page execute and read and write
|
|
|
|
7FF52A317000
|
unkown
|
page readonly
|
|
|
|
196D1410000
|
unkown
|
page read and write
|
|
|
|
408F97A000
|
unkown
|
page read and write
|
|
|
|
80F000
|
stack
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF52A134000
|
unkown
|
page readonly
|
|
|
|
411000
|
unkown image
|
page read and write
|
|
|
|
196D0188000
|
unkown
|
page read and write
|
|
|
|
196CE119000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page readonly
|
|
|
|
196CE12E000
|
unkown
|
page read and write
|
|
|
|
196CE15F000
|
unkown
|
page read and write
|
|
|
|
196D0263000
|
unkown
|
page read and write
|
|
|
|
196D1410000
|
unkown
|
page read and write
|
|
|
|
7FF52A2A2000
|
unkown
|
page readonly
|
|
|
|
7FF52A141000
|
unkown
|
page readonly
|
|
|
|
196CE250000
|
unkown
|
page readonly
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF52A2FE000
|
unkown
|
page readonly
|
|
|
|
196D023C000
|
unkown
|
page read and write
|
|
|
|
196D1510000
|
unkown
|
page read and write
|
|
|
|
520000
|
heap private
|
page read and write
|
|
|
|
196CDF10000
|
heap default
|
page read and write
|
|
|
|
730000
|
heap default
|
page read and write
|
|
|
|
23E0000
|
unkown
|
page read and write
|
|
|
|
196D0582000
|
unkown
|
page read and write
|
|
|
|
196D01EB000
|
unkown
|
page read and write
|
|
|
|
196D01D2000
|
unkown
|
page read and write
|
|
|
|
7FF52A136000
|
unkown
|
page readonly
|
|
|
|
196D0300000
|
unkown
|
page read and write
|
|
|
|
196D01E6000
|
unkown
|
page read and write
|
|
|
|
408FAFD000
|
unkown
|
page read and write
|
|
|
|
7FF52A125000
|
unkown
|
page readonly
|
|
|
|
2C9000
|
unkown
|
page read and write
|
|
|
|
6B0000
|
heap default
|
page read and write
|
|
|
|
196D0243000
|
unkown
|
page read and write
|
|
|
|
196D1410000
|
unkown
|
page read and write
|
|
|
|
196D014D000
|
unkown
|
page read and write
|
|
|
|
196CE11A000
|
unkown
|
page read and write
|
|
|
|
196D01AF000
|
unkown
|
page read and write
|
|
|
|
196D0600000
|
unkown
|
page readonly
|
|
|
|
408EEFF000
|
unkown
|
page read and write
|
|
|
|
196D1510000
|
unkown
|
page read and write
|
|
|
|
196CE12D000
|
unkown
|
page read and write
|
|
|
|
2470000
|
unkown
|
page read and write
|
|
|
|
196D1110000
|
unkown
|
page read and write
|
|
|
|
2480000
|
heap private
|
page read and write
|
|
|
|
408F0F9000
|
unkown
|
page read and write
|
|
|
|
1DD9E000
|
unkown
|
page read and write
|
|
|
|
30B000
|
unkown
|
page read and write
|
|
|
|
196D0273000
|
unkown
|
page read and write
|
|
|
|
196D1210000
|
unkown
|
page read and write
|
|
|
|
196D0115000
|
unkown
|
page read and write
|
|
|
|
7FF529B5D000
|
unkown
|
page readonly
|
|
|
|
196D0200000
|
unkown
|
page read and write
|
|
|
|
196CE03F000
|
unkown
|
page read and write
|
|
|
|
2280000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
586000
|
heap default
|
page read and write
|
|
|
|
7FF52A30B000
|
unkown
|
page readonly
|
|
|
|
7FF52A32F000
|
unkown
|
page readonly
|
|
|
|
196CE11C000
|
unkown
|
page read and write
|
|
|
|
196D0342000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page execute and read and write
|
|
|
|
196CE12D000
|
unkown
|
page read and write
|
|
|
|
2130000
|
unkown
|
page readonly
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
408F77B000
|
unkown
|
page read and write
|
|
|
|
413000
|
unkown image
|
page readonly
|
|
|
|
247E000
|
unkown
|
page read and write
|
|
|
|
196CFB00000
|
unkown
|
page readonly
|
|
|
|
779000
|
heap default
|
page read and write
|
|
|
|
196CE170000
|
unkown
|
page read and write
|
|
|
|
196D1210000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1DADF000
|
unkown
|
page read and write
|
|
|
|
FD0000
|
unkown
|
page readonly
|
|
|
|
408F7FB000
|
unkown
|
page read and write
|
|
|
|
196D0002000
|
unkown
|
page read and write
|
|
|
|
196CE11D000
|
unkown
|
page read and write
|
|
|
|
408F4FB000
|
unkown
|
page read and write
|
|
|
|
196D1310000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
196CFEC0000
|
unkown
|
page read and write
|
|
|
|
7FF52A0D8000
|
unkown
|
page readonly
|
|
|
|
408F3FB000
|
unkown
|
page read and write
|
|
|
|
196CE07E000
|
unkown
|
page read and write
|
|
|
|
196D014F000
|
unkown
|
page read and write
|
|
|
|
408EFFF000
|
unkown
|
page read and write
|
|
|
|
196D018A000
|
unkown
|
page read and write
|
|
|
|
7FF52A2CB000
|
unkown
|
page readonly
|
|
|
|
196CE15E000
|
unkown
|
page read and write
|
|
|
|
7FF52A3F1000
|
unkown
|
page readonly
|
|
|
|
2460000
|
heap private
|
page read and write
|
|
|
|
196CFEE0000
|
unkown
|
page read and write
|
|
|
|
196CE054000
|
unkown
|
page read and write
|
|
|
|
2CD000
|
unkown
|
page read and write
|
|
|
|
2129000
|
heap private
|
page read and write
|
|
|
|
196D1210000
|
unkown
|
page read and write
|
|
|
|
408EBDF000
|
unkown
|
page read and write
|
|
|
|
7FF52A34A000
|
unkown
|
page readonly
|
|
|
|
84E000
|
unkown
|
page read and write
|
|
|
|
196D01F1000
|
unkown
|
page read and write
|
|
|
|
196D01C2000
|
unkown
|
page read and write
|
|
|
|
196D0502000
|
unkown
|
page read and write
|
|
|
|
196D011D000
|
unkown
|
page read and write
|
|
|
|
196D0163000
|
unkown
|
page read and write
|
|
|
|
196D0302000
|
unkown
|
page read and write
|
|
|
|
196CE0B4000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
307000
|
unkown
|
page read and write
|
|
|
|
196CE113000
|
unkown
|
page read and write
|
|
|
|
408F67C000
|
unkown
|
page read and write
|
|
|
|
7FF52A2D4000
|
unkown
|
page readonly
|
|
|
|
7FF529ED9000
|
unkown
|
page readonly
|
|
|
|
1D5A0000
|
unkown
|
page readonly
|
|
|
|
7FF52A208000
|
unkown
|
page readonly
|
|
|
|
7FF52A0C6000
|
unkown
|
page readonly
|
|
|
|
640000
|
unkown
|
page readonly
|
|
|
|
196CE13D000
|
unkown
|
page read and write
|
|
|
|
7FF52A368000
|
unkown
|
page readonly
|
|
|
|
2870000
|
unkown
|
page readonly
|
|
|
|
7FF52A2EC000
|
unkown
|
page readonly
|
|
|
|
196CFEE0000
|
unkown
|
page read and write
|
|
|
|
7FF529FD7000
|
unkown
|
page readonly
|
|
|
|
7FF52A151000
|
unkown
|
page readonly
|
|
|
|
408F27A000
|
unkown
|
page read and write
|
|
|
|
196CE11D000
|
unkown
|
page read and write
|
|
|
|
7FF52A159000
|
unkown
|
page readonly
|
|
|
|
1DE9E000
|
unkown
|
page read and write
|
|
|
|
408EB5B000
|
unkown
|
page read and write
|
|
|
|
196CE0F4000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown
|
page execute read
|
|
|
|
196CFED0000
|
unkown
|
page readonly
|
|
|
|
196CE084000
|
unkown
|
page read and write
|
|
|
|
7FF52A2DF000
|
unkown
|
page readonly
|
|
|
|
1DD5F000
|
unkown
|
page read and write
|
|
|
|
C40000
|
unkown
|
page readonly
|
|
|
|
2380000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
408F47B000
|
unkown
|
page read and write
|
|
|
|
196D01FB000
|
unkown
|
page read and write
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
1DC1F000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
573000
|
unkown
|
page read and write
|
|
|
|
47E000
|
unkown
|
page read and write
|
|
|
|
196D0500000
|
unkown
|
page read and write
|
|
|
|
561000
|
heap default
|
page read and write
|
|
|
|
7FF52A203000
|
unkown
|
page readonly
|
|
|
|
6B5000
|
heap default
|
page read and write
|
|
|
|
7FF52A371000
|
unkown
|
page readonly
|
|
|
|
530000
|
unkown
|
page readonly
|
|
|
|
1DEE0000
|
unkown
|
page readonly
|
|
|
|
196CE013000
|
unkown
|
page read and write
|
|
|
|
408FA7C000
|
unkown
|
page read and write
|
|
|
|
408F37B000
|
unkown
|
page read and write
|
|
|
|
196CDEB0000
|
heap private
|
page read and write
|
|
|
|
196D01F1000
|
unkown
|
page read and write
|
|
|
|
196D0109000
|
unkown
|
page read and write
|
|
|
|
1DC5E000
|
unkown
|
page read and write
|
|
|
|
408FB7E000
|
unkown
|
page read and write
|
|
|
|
196CE160000
|
unkown
|
page read and write
|
|
|
|
24A0000
|
unkown
|
page read and write
|
|
|
|
413000
|
unkown image
|
page readonly
|
|
|
|
7FF52A29C000
|
unkown
|
page readonly
|
|
|
|
430000
|
unkown
|
page readonly
|
|
|
|
2120000
|
heap private
|
page read and write
|
|
|
|
540000
|
heap default
|
page read and write
|
|
|
|
196CE000000
|
unkown
|
page read and write
|
|
|
|
1D9DA000
|
unkown
|
page read and write
|
|
|
|
196D1110000
|
unkown
|
page read and write
|
|
|
|
408F6FD000
|
unkown
|
page read and write
|
|
|
|
408EF7B000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
196CE163000
|
unkown
|
page read and write
|
|
|
|
196D1210000
|
unkown
|
page read and write
|
|
|
|
510000
|
unkown
|
page readonly
|
|
|
|
7FF52A2FA000
|
unkown
|
page readonly
|
|
|
|
196CFA00000
|
unkown
|
page read and write
|
|
|
|
7FF52A246000
|
unkown
|
page readonly
|
|
There are 285 hidden memdumps, click here to show them.