Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\5a866993_by_Libranalysis.dll',#1
|
||
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\5a866993_by_Libranalysis.dll'
|
||
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\5a866993_by_Libranalysis.dll',#1
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
172.93.133.123
|
unknown
|
United States
|
||
107.172.227.10
|
unknown
|
United States
|
||
108.168.61.147
|
unknown
|
Canada
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
73621000
|
unkown image
|
page execute read
|
||
7FF5DA984000
|
unkown
|
page readonly
|
||
25F63130000
|
unkown
|
page read and write
|
||
25F5E903000
|
unkown
|
page read and write
|
||
A8B7E7E000
|
unkown
|
page read and write
|
||
30C4000
|
unkown
|
page readonly
|
||
7FF5D1E13000
|
unkown
|
page readonly
|
||
25F63400000
|
unkown
|
page readonly
|
||
207BE470000
|
unkown
|
page readonly
|
||
7FF5D1B26000
|
unkown
|
page readonly
|
||
6355B79000
|
unkown
|
page read and write
|
||
73620000
|
unkown image
|
page readonly
|
||
3011000
|
unkown
|
page readonly
|
||
7FF5D15B2000
|
unkown
|
page readonly
|
||
25F5EB10000
|
unkown
|
page readonly
|
||
25F5EEA0000
|
unkown
|
page read and write
|
||
2FE7000
|
unkown
|
page readonly
|
||
7362B000
|
unkown image
|
page write copy
|
||
113D000
|
unkown
|
page read and write
|
||
7FF5DA259000
|
unkown
|
page readonly
|
||
207BDDF0000
|
unkown
|
page readonly
|
||
3099000
|
unkown
|
page readonly
|
||
346A000
|
heap default
|
page read and write
|
||
1240000
|
unkown
|
page readonly
|
||
207BEAC0000
|
unkown
|
page read and write
|
||
25F5D950000
|
heap private
|
page read and write
|
||
25F63292000
|
unkown
|
page read and write
|
||
6355AFE000
|
unkown
|
page read and write
|
||
7FF5DA888000
|
unkown
|
page readonly
|
||
30AE000
|
unkown
|
page readonly
|
||
A8B6F9E000
|
unkown
|
page read and write
|
||
207BDE40000
|
unkown
|
page read and write
|
||
7FF5D19EA000
|
unkown
|
page readonly
|
||
207BEB40000
|
unkown
|
page read and write
|
||
25F63018000
|
unkown
|
page read and write
|
||
3560000
|
unkown
|
page readonly
|
||
7FF5DA96F000
|
unkown
|
page readonly
|
||
207BDEC9000
|
heap private
|
page read and write
|
||
73627000
|
unkown image
|
page execute read
|
||
4B39B000
|
unkown
|
page read and write
|
||
25F63200000
|
unkown
|
page read and write
|
||
3380000
|
unkown
|
page read and write
|
||
7FF5DAA4A000
|
unkown
|
page readonly
|
||
7FF5D1D7E000
|
unkown
|
page readonly
|
||
7FF5D199C000
|
unkown
|
page readonly
|
||
7FF5DA8B1000
|
unkown
|
page readonly
|
||
207BDED0000
|
unkown
|
page read and write
|
||
25F6321D000
|
unkown
|
page read and write
|
||
301B000
|
unkown
|
page readonly
|
||
7FF5D1DFA000
|
unkown
|
page readonly
|
||
10CB000
|
unkown
|
page read and write
|
||
25F5DAAC000
|
unkown
|
page read and write
|
||
A8B767F000
|
unkown
|
page read and write
|
||
73620000
|
unkown image
|
page readonly
|
||
7FF5D1C61000
|
unkown
|
page readonly
|
||
2FDE000
|
unkown
|
page readonly
|
||
2FC8000
|
unkown
|
page readonly
|
||
7FF5DAA77000
|
unkown
|
page readonly
|
||
25F5E318000
|
unkown
|
page read and write
|
||
25F5E060000
|
unkown
|
page readonly
|
||
7FF5DA7FC000
|
unkown
|
page readonly
|
||
25F63160000
|
unkown
|
page read and write
|
||
25F5E910000
|
unkown
|
page read and write
|
||
25F63010000
|
unkown
|
page read and write
|
||
207BEAF0000
|
unkown
|
page read and write
|
||
7FF5D1B84000
|
unkown
|
page readonly
|
||
4FB0000
|
heap private
|
page read and write
|
||
25F5EB50000
|
unkown
|
page readonly
|
||
3460000
|
heap default
|
page read and write
|
||
25F63010000
|
unkown
|
page read and write
|
||
6355A79000
|
unkown
|
page read and write
|
||
25F63170000
|
unkown
|
page readonly
|
||
25F6310C000
|
unkown
|
page readonly
|
||
7FF5D1D21000
|
unkown
|
page readonly
|
||
7FF5D1AD3000
|
unkown
|
page readonly
|
||
25F62EC0000
|
unkown
|
page readonly
|
||
7FF5D1BCD000
|
unkown
|
page readonly
|
||
7FF5D1D1F000
|
unkown
|
page readonly
|
||
25F5E358000
|
unkown
|
page read and write
|
||
30E0000
|
unkown
|
page readonly
|
||
25F5DA6E000
|
unkown
|
page read and write
|
||
308D000
|
unkown
|
page readonly
|
||
7FF5DAA27000
|
unkown
|
page readonly
|
||
4DE0000
|
heap private
|
page read and write
|
||
73620000
|
unkown image
|
page readonly
|
||
25F63120000
|
unkown
|
page read and write
|
||
25F631F0000
|
unkown
|
page readonly
|
||
16A0000
|
heap default
|
page read and write
|
||
7FF5D1ACD000
|
unkown
|
page readonly
|
||
7362A000
|
unkown image
|
page readonly
|
||
25F5E359000
|
unkown
|
page read and write
|
||
1400000
|
unkown
|
page readonly
|
||
25F5E302000
|
unkown
|
page read and write
|
||
1165000
|
heap default
|
page read and write
|
||
A8B78FE000
|
unkown
|
page read and write
|
||
207BE0E0000
|
unkown
|
page readonly
|
||
7FF5DAA66000
|
unkown
|
page readonly
|
||
1150000
|
unkown
|
page readonly
|
||
25F5DB02000
|
unkown
|
page read and write
|
||
103D000
|
unkown
|
page read and write
|
||
30B2000
|
unkown
|
page readonly
|
||
207BE880000
|
unkown
|
page read and write
|
||
7FF5D1DD7000
|
unkown
|
page readonly
|
||
25F5E300000
|
unkown
|
page read and write
|
||
A8B727E000
|
unkown
|
page read and write
|
||
7FF5D1CD5000
|
unkown
|
page readonly
|
||
25F5EB20000
|
unkown
|
page readonly
|
||
25F5D9C0000
|
unkown
|
page readonly
|
||
7FF5D15B6000
|
unkown
|
page readonly
|
||
A8B7A7F000
|
unkown
|
page read and write
|
||
3061000
|
unkown
|
page readonly
|
||
300A000
|
unkown
|
page readonly
|
||
25F62F10000
|
unkown
|
page read and write
|
||
7FF5D1BEE000
|
unkown
|
page readonly
|
||
25F63031000
|
unkown
|
page read and write
|
||
7FF5DA9B6000
|
unkown
|
page readonly
|
||
207BDCF8000
|
heap default
|
page read and write
|
||
25F63170000
|
unkown
|
page read and write
|
||
7FF5DAA21000
|
unkown
|
page readonly
|
||
7FF5D1D6D000
|
unkown
|
page readonly
|
||
7FF5D1B24000
|
unkown
|
page readonly
|
||
7FF5D1D79000
|
unkown
|
page readonly
|
||
A8B757B000
|
unkown
|
page read and write
|
||
7FF5D1B60000
|
unkown
|
page readonly
|
||
1130000
|
unkown
|
page read and write
|
||
207BDD3E000
|
unkown
|
page read and write
|
||
3002000
|
unkown
|
page readonly
|
||
25F631C0000
|
unkown
|
page readonly
|
||
30A8000
|
unkown
|
page readonly
|
||
30BE000
|
unkown
|
page readonly
|
||
25F63214000
|
unkown
|
page read and write
|
||
7FF5D159A000
|
unkown
|
page readonly
|
||
25F63034000
|
unkown
|
page read and write
|
||
25F5DAFC000
|
unkown
|
page read and write
|
||
30E8000
|
unkown
|
page readonly
|
||
25F5E318000
|
unkown
|
page read and write
|
||
25F63297000
|
unkown
|
page read and write
|
||
207BDCD0000
|
unkown
|
page read and write
|
||
33D0000
|
heap private
|
page read and write
|
||
7FF5D19BB000
|
unkown
|
page readonly
|
||
25F63490000
|
unkown
|
page readonly
|
||
25F63150000
|
unkown
|
page read and write
|
||
25F632AE000
|
unkown
|
page read and write
|
||
300D000
|
unkown
|
page readonly
|
||
7FF5D19A9000
|
unkown
|
page readonly
|
||
7FF5D1B30000
|
unkown
|
page readonly
|
||
207BDE00000
|
unkown
|
page readonly
|
||
25F63054000
|
unkown
|
page read and write
|
||
7FF5D1AFF000
|
unkown
|
page readonly
|
||
25F6329C000
|
unkown
|
page read and write
|
||
635597E000
|
unkown
|
page read and write
|
||
25F63030000
|
unkown
|
page read and write
|
||
25F5DA9B000
|
unkown
|
page read and write
|
||
25F631B0000
|
unkown
|
page readonly
|
||
25F6322B000
|
unkown
|
page read and write
|
||
7FF5D1BE3000
|
unkown
|
page readonly
|
||
25F63040000
|
unkown
|
page read and write
|
||
25F63170000
|
unkown
|
page read and write
|
||
7FF5D1C68000
|
unkown
|
page readonly
|
||
63558FE000
|
unkown
|
page read and write
|
||
7FF5DA9C7000
|
unkown
|
page readonly
|
||
7FF5DA8A1000
|
unkown
|
page readonly
|
||
7FF5D1BCF000
|
unkown
|
page readonly
|
||
30E8000
|
unkown
|
page readonly
|
||
207BDD58000
|
heap default
|
page read and write
|
||
207BDD3E000
|
unkown
|
page read and write
|
||
A8B7C7C000
|
unkown
|
page read and write
|
||
7363A000
|
unkown image
|
page readonly
|
||
7FF5D1952000
|
unkown
|
page readonly
|
||
A8B747A000
|
unkown
|
page read and write
|
||
25F5D9D0000
|
unkown
|
page readonly
|
||
25F5E202000
|
unkown
|
page read and write
|
||
7FF5D15FD000
|
unkown
|
page readonly
|
||
25F5DA76000
|
unkown
|
page read and write
|
||
F68000
|
unkown
|
page read and write
|
||
2FEE000
|
unkown
|
page readonly
|
||
25F63470000
|
unkown
|
page readonly
|
||
207BDD53000
|
heap default
|
page read and write
|
||
207BDEB0000
|
unkown
|
page read and write
|
||
25F632B2000
|
unkown
|
page read and write
|
||
25F5E1E1000
|
unkown
|
page read and write
|
||
A8B787E000
|
unkown
|
page read and write
|
||
7FF5D1CA5000
|
unkown
|
page readonly
|
||
309E000
|
unkown
|
page readonly
|
||
207BDD3E000
|
unkown
|
page read and write
|
||
7FF5D1982000
|
unkown
|
page readonly
|
||
25F5DA58000
|
unkown
|
page read and write
|
||
7FF5D1CE8000
|
unkown
|
page readonly
|
||
25F5DA13000
|
unkown
|
page read and write
|
||
7FF5D1B19000
|
unkown
|
page readonly
|
||
7FF5DA27D000
|
unkown
|
page readonly
|
||
25F5EB60000
|
unkown
|
page readonly
|
||
A8B7AFF000
|
unkown
|
page read and write
|
||
108C000
|
unkown
|
page read and write
|
||
2E83000
|
unkown
|
page readonly
|
||
7FF5D1D77000
|
unkown
|
page readonly
|
||
11D0000
|
unkown
|
page read and write
|
||
A8B7377000
|
unkown
|
page read and write
|
||
25F5DA40000
|
unkown
|
page read and write
|
||
7FF5D1BBA000
|
unkown
|
page readonly
|
||
2E79000
|
unkown
|
page readonly
|
||
7FF5D17DF000
|
unkown
|
page readonly
|
||
7FF5BF91B000
|
unkown
|
page readonly
|
||
25F63050000
|
unkown
|
page read and write
|
||
7FF5D1D09000
|
unkown
|
page readonly
|
||
4FB4000
|
heap private
|
page read and write
|
||
7FF5DA281000
|
unkown
|
page readonly
|
||
7FF5D1B5E000
|
unkown
|
page readonly
|
||
4B280000
|
unkown
|
page read and write
|
||
25F5DA78000
|
unkown
|
page read and write
|
||
25F5D9E0000
|
unkown
|
page read and write
|
||
25F630E0000
|
unkown
|
page read and write
|
||
3310000
|
unkown
|
page read and write
|
||
7FF5D1D52000
|
unkown
|
page readonly
|
||
25F63170000
|
unkown
|
page read and write
|
||
33B0000
|
unkown
|
page read and write
|
||
25F5E313000
|
unkown
|
page read and write
|
||
7FF5DA996000
|
unkown
|
page readonly
|
||
7FF5DAA63000
|
unkown
|
page readonly
|
||
25F63140000
|
unkown
|
page read and write
|
||
25F5E900000
|
unkown
|
page read and write
|
||
7FF5D1BC7000
|
unkown
|
page readonly
|
||
207BDCF0000
|
heap default
|
page read and write
|
||
F64000
|
unkown
|
page read and write
|
||
25F5DA73000
|
unkown
|
page read and write
|
||
25F5DC00000
|
unkown
|
page readonly
|
||
4B39F000
|
unkown
|
page read and write
|
||
25F63170000
|
unkown
|
page read and write
|
||
25F5E501000
|
unkown
|
page read and write
|
||
7FF5DA2F1000
|
unkown
|
page readonly
|
||
25F630F0000
|
unkown
|
page readonly
|
||
25F630F4000
|
unkown
|
page readonly
|
||
7FF5D1D00000
|
unkown
|
page readonly
|
||
73620000
|
unkown image
|
page readonly
|
||
7FF5DAA34000
|
unkown
|
page readonly
|
||
4DF0000
|
unkown
|
page read and write
|
||
4FD0000
|
unkown
|
page read and write
|
||
25F63247000
|
unkown
|
page read and write
|
||
A8B7F7B000
|
unkown
|
page read and write
|
||
38F0000
|
unkown
|
page readonly
|
||
12E2000
|
unkown
|
page read and write
|
||
30A3000
|
unkown
|
page readonly
|
||
339F000
|
unkown
|
page read and write
|
||
7FF5D1AF5000
|
unkown
|
page readonly
|
||
A8B6F1B000
|
unkown
|
page read and write
|
||
12E6000
|
unkown
|
page read and write
|
||
7FF5D1BD3000
|
unkown
|
page readonly
|
||
25F63040000
|
unkown
|
page read and write
|
||
4FC0000
|
unkown
|
page read and write
|
||
207BDD36000
|
unkown
|
page read and write
|
||
7FF5DA1A3000
|
unkown
|
page readonly
|
||
7FF5D19E7000
|
unkown
|
page readonly
|
||
7FF5D17D8000
|
unkown
|
page readonly
|
||
7FF5D1E16000
|
unkown
|
page readonly
|
||
25F5D9F0000
|
unkown
|
page read and write
|
||
25F62EF0000
|
unkown
|
page read and write
|
||
3300000
|
unkown
|
page readonly
|
||
25F5DCD0000
|
unkown
|
page readonly
|
||
7FF5D1BF7000
|
unkown
|
page readonly
|
||
7FF5D1DDD000
|
unkown
|
page readonly
|
||
25F5DB13000
|
unkown
|
page read and write
|
||
7FF5D1B12000
|
unkown
|
page readonly
|
||
7FF5BF91B000
|
unkown
|
page readonly
|
||
3410000
|
unkown
|
page readonly
|
||
7FF5D1C91000
|
unkown
|
page readonly
|
||
7FF5D1E22000
|
unkown
|
page readonly
|
||
7FF5D1D66000
|
unkown
|
page readonly
|
||
7FF5DAA37000
|
unkown
|
page readonly
|
||
7FF5D1DD4000
|
unkown
|
page readonly
|
||
7FF5DAA3B000
|
unkown
|
page readonly
|
||
32F0000
|
unkown
|
page readonly
|
||
7363D000
|
unkown image
|
page read and write
|
||
7364C000
|
unkown image
|
page readonly
|
||
A8B7B7F000
|
unkown
|
page read and write
|
||
7FF5DA9BD000
|
unkown
|
page readonly
|
||
33A0000
|
unkown
|
page execute and read and write
|
||
308B000
|
unkown
|
page readonly
|
||
25F5E200000
|
unkown
|
page read and write
|
||
16AB000
|
heap default
|
page read and write
|
||
25F632B5000
|
unkown
|
page read and write
|
||
A8B77FF000
|
unkown
|
page read and write
|
||
7FF5DAA2D000
|
unkown
|
page readonly
|
||
207BDEC0000
|
heap private
|
page read and write
|
||
4D00000
|
unkown
|
page readonly
|
||
30CD000
|
unkown
|
page readonly
|
||
207BEAD0000
|
unkown
|
page readonly
|
||
7FF5DAA77000
|
unkown
|
page readonly
|
||
25F5EA20000
|
unkown
|
page read and write
|
||
207BDE50000
|
unkown
|
page read and write
|
||
25F6301E000
|
unkown
|
page read and write
|
||
3078000
|
unkown
|
page readonly
|
||
25F5EB00000
|
unkown
|
page readonly
|
||
7FF5D1D04000
|
unkown
|
page readonly
|
||
207BDCB0000
|
unkown
|
page read and write
|
||
1160000
|
heap default
|
page read and write
|
||
25F5D9B0000
|
heap default
|
page read and write
|
||
25F5E920000
|
unkown
|
page read and write
|
||
3075000
|
unkown
|
page readonly
|
||
7FF5D1D4A000
|
unkown
|
page readonly
|
||
7363F000
|
unkown image
|
page readonly
|
||
25F63108000
|
unkown
|
page write copy
|
||
7FF5D1D2F000
|
unkown
|
page readonly
|
||
25F5DA90000
|
unkown
|
page read and write
|
||
207BDEC5000
|
heap private
|
page read and write
|
||
25F5EB30000
|
unkown
|
page readonly
|
||
A8B79FB000
|
unkown
|
page read and write
|
||
7FF5D1E27000
|
unkown
|
page readonly
|
||
7FF5D1D46000
|
unkown
|
page readonly
|
||
7FF5D1CF4000
|
unkown
|
page readonly
|
||
7FF5D1D14000
|
unkown
|
page readonly
|
||
7FF5D1B6B000
|
unkown
|
page readonly
|
||
7FF5D17DA000
|
unkown
|
page readonly
|
||
25F62F00000
|
unkown
|
page read and write
|
||
7FF5D1AE8000
|
unkown
|
page readonly
|
||
25F5DA54000
|
unkown
|
page read and write
|
||
1170000
|
unkown
|
page readonly
|
||
7FF5D1DD1000
|
unkown
|
page readonly
|
||
207BDBE0000
|
unkown
|
page readonly
|
||
1530000
|
heap default
|
page read and write
|
||
A8B777B000
|
unkown
|
page read and write
|
||
7FF5D1DE4000
|
unkown
|
page readonly
|
||
7FF5DAA24000
|
unkown
|
page readonly
|
||
7FF5D1B2A000
|
unkown
|
page readonly
|
||
25F5DA29000
|
unkown
|
page read and write
|
||
2F15000
|
unkown
|
page readonly
|
||
25F5EB40000
|
unkown
|
page readonly
|
||
25F5E940000
|
unkown
|
page read and write
|
||
7FF5D1D33000
|
unkown
|
page readonly
|
||
25F630E0000
|
unkown
|
page write copy
|
||
7FF5DA9C9000
|
unkown
|
page readonly
|
||
7FF5DA19C000
|
unkown
|
page readonly
|
||
7FF5D1D3D000
|
unkown
|
page readonly
|
||
25F5DA8A000
|
unkown
|
page read and write
|
||
25F6325F000
|
unkown
|
page read and write
|
||
7FF5D1CF7000
|
unkown
|
page readonly
|
||
25F5DA00000
|
unkown
|
page read and write
|
||
25F6323A000
|
unkown
|
page read and write
|
||
25F632B4000
|
unkown
|
page read and write
|
||
207BDB80000
|
unkown
|
page read and write
|
||
25F5E215000
|
unkown
|
page read and write
|
||
207BEAE0000
|
unkown
|
page read and write
|
||
7FF5DA8B8000
|
unkown
|
page readonly
|
||
3320000
|
unkown
|
page read and write
|
||
207BE540000
|
unkown
|
page readonly
|
||
7FF5D1590000
|
unkown
|
page readonly
|
||
207BDD00000
|
heap default
|
page read and write
|
||
63559F9000
|
unkown
|
page read and write
|
||
2FF1000
|
unkown
|
page readonly
|
||
3015000
|
unkown
|
page readonly
|
||
7FF5D1DE7000
|
unkown
|
page readonly
|
||
635587C000
|
unkown
|
page read and write
|
||
73621000
|
unkown image
|
page execute read
|
||
25F630E4000
|
unkown
|
page readonly
|
There are 343 hidden memdumps, click here to show them.