Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\server.exe
|
C:\Users\user\Desktop\server.exe
|
 |
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://62.173.142.81/drew/jYbXWzWzJZxMu/0bg7r4Fu/6FNvR8ClwgmU3K9eRFHwCZL/V4EUt2dyR_/2FQulKxQ_2Fze8eK3/SMO5Yl_2BPuQ/_2B49snui7_/2FLOe3Ko6as8fp/MUgDOSfZU6Dpa1I7o0j5G/VqQD_2Bumqn4Myfm/_2BQL_2BhR1HszY/TocLn3p8sVmtowm_2B/6OTZGgFfO/9qQJL2OyxO9xGC6r3J84/1Hw_2BXN3URNn_2FRiR/XmeYSNTVgprtLxVnjmtt4h/zq1_2FWGL3ouV/wUq7EqUY/xzZwPH0P8XChlht1ulV1_2F/xZqgBgTuj5/XO.jlk
|
62.173.142.81
|
|
|
|
http://checklist.skype.com/drew/atXnm1oMbB5L4Ntl5FgyfO/iEVslQ74abg_2/FW6J1whk/ejMAXerGRdbDd_2FjU9B8H
|
unknown
|
||
|
http://62.173.142.81/drew/jYbXWzWzJZxMu/0bg7r4Fu/6FNvR8ClwgmU3K9eRFHwCZL/V4EUt2dyR_/2FQulKxQ_2Fze8eK
|
unknown
|
||
|
http://62.173.142.81/
|
unknown
|
||
|
http://62.173
|
unknown
|
||
|
http://checklist.skype.com/
|
unknown
|
||
|
http://checklist.skype.com/drew/atXnm1oMbB5L4Ntl5Fgy
|
unknown
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
checklist.skype.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
62.173.142.81
|
unknown
|
Russian Federation
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2D28000
|
heap
|
page read and write
|
|
|
|
2D28000
|
heap
|
page read and write
|
|
|
|
2D28000
|
heap
|
page read and write
|
|
|
|
2D28000
|
heap
|
page read and write
|
|
|
|
2D28000
|
heap
|
page read and write
|
|
|
|
2D28000
|
heap
|
page read and write
|
|
|
|
2D28000
|
heap
|
page read and write
|
|
|
|
2D28000
|
heap
|
page read and write
|
|
|
|
2D28000
|
heap
|
page read and write
|
|
|
|
225E000
|
stack
|
page read and write
|
||
|
21EB222E000
|
heap
|
page read and write
|
||
|
FCF3AAC000
|
stack
|
page read and write
|
||
|
21EB1FA0000
|
heap
|
page read and write
|
||
|
22DD000
|
stack
|
page read and write
|
||
|
8DEDAFC000
|
stack
|
page read and write
|
||
|
FCF44FD000
|
stack
|
page read and write
|
||
|
49F000
|
unkown
|
page readonly
|
||
|
F9946FF000
|
stack
|
page read and write
|
||
|
1A2AEE92000
|
heap
|
page read and write
|
||
|
376F000
|
stack
|
page read and write
|
||
|
21EB226B000
|
heap
|
page read and write
|
||
|
27078E00000
|
heap
|
page read and write
|
||
|
1A465802000
|
heap
|
page read and write
|
||
|
21EB2264000
|
heap
|
page read and write
|
||
|
21EB2249000
|
heap
|
page read and write
|
||
|
23FA0550000
|
heap
|
page read and write
|
||
|
2C74F845000
|
heap
|
page read and write
|
||
|
1A2AF76F000
|
heap
|
page read and write
|
||
|
18977E67000
|
heap
|
page read and write
|
||
|
1A2AF722000
|
heap
|
page read and write
|
||
|
1A2AF823000
|
heap
|
page read and write
|
||
|
23FA0658000
|
heap
|
page read and write
|
||
|
1A465813000
|
heap
|
page read and write
|
||
|
21EB2244000
|
heap
|
page read and write
|
||
|
257BF112000
|
heap
|
page read and write
|
||
|
257BE660000
|
heap
|
page read and write
|
||
|
2E3F000
|
stack
|
page read and write
|
||
|
5C0FE7E000
|
stack
|
page read and write
|
||
|
257BE800000
|
heap
|
page read and write
|
||
|
23FA0702000
|
heap
|
page read and write
|
||
|
18977E13000
|
heap
|
page read and write
|
||
|
23FA0602000
|
heap
|
page read and write
|
||
|
2C74F82E000
|
heap
|
page read and write
|
||
|
1A2AED80000
|
trusted library allocation
|
page read and write
|
||
|
18977E00000
|
heap
|
page read and write
|
||
|
2F20000
|
heap
|
page read and write
|
||
|
21EB2255000
|
heap
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
2C74F740000
|
heap
|
page read and write
|
||
|
2748000
|
heap
|
page read and write
|
||
|
23FA0666000
|
heap
|
page read and write
|
||
|
C6633CE000
|
stack
|
page read and write
|
||
|
C66387E000
|
stack
|
page read and write
|
||
|
1A2AF791000
|
heap
|
page read and write
|
||
|
873000
|
heap
|
page read and write
|
||
|
7C81B7C000
|
stack
|
page read and write
|
||
|
23FA062A000
|
heap
|
page read and write
|
||
|
18977E02000
|
heap
|
page read and write
|
||
|
346F000
|
stack
|
page read and write
|
||
|
27078C30000
|
heap
|
page read and write
|
||
|
680000
|
heap
|
page read and write
|
||
|
285C000
|
stack
|
page read and write
|
||
|
23FA2070000
|
trusted library allocation
|
page read and write
|
||
|
21EB2802000
|
trusted library allocation
|
page read and write
|
||
|
386E000
|
stack
|
page read and write
|
||
|
21EB2267000
|
heap
|
page read and write
|
||
|
21EB223A000
|
heap
|
page read and write
|
||
|
21EB223D000
|
heap
|
page read and write
|
||
|
87F000
|
heap
|
page read and write
|
||
|
1A2AEF8E000
|
heap
|
page read and write
|
||
|
2280000
|
heap
|
page read and write
|
||
|
1A2AEE69000
|
heap
|
page read and write
|
||
|
7C8217C000
|
stack
|
page read and write
|
||
|
257BE889000
|
heap
|
page read and write
|
||
|
28DE000
|
stack
|
page read and write
|
||
|
790000
|
unclassified section
|
page read and write
|
||
|
1A2AF827000
|
heap
|
page read and write
|
||
|
1A2AF7CA000
|
heap
|
page read and write
|
||
|
21EB2274000
|
heap
|
page read and write
|
||
|
5C0FB7B000
|
stack
|
page read and write
|
||
|
356A000
|
stack
|
page read and write
|
||
|
21EB2240000
|
heap
|
page read and write
|
||
|
1A2AEE75000
|
heap
|
page read and write
|
||
|
1A465650000
|
heap
|
page read and write
|
||
|
7C8267E000
|
stack
|
page read and write
|
||
|
80A000
|
heap
|
page read and write
|
||
|
23FA0649000
|
heap
|
page read and write
|
||
|
21EB2230000
|
heap
|
page read and write
|
||
|
1A4657E0000
|
remote allocation
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
21EB224D000
|
heap
|
page read and write
|
||
|
23FA0718000
|
heap
|
page read and write
|
||
|
2C74F7C0000
|
trusted library allocation
|
page read and write
|
||
|
21EB2241000
|
heap
|
page read and write
|
||
|
23FA0580000
|
trusted library allocation
|
page read and write
|
||
|
18977C40000
|
heap
|
page read and write
|
||
|
23FA2202000
|
trusted library allocation
|
page read and write
|
||
|
1A2AECD0000
|
heap
|
page read and write
|
||
|
18978402000
|
trusted library allocation
|
page read and write
|
||
|
F9949FE000
|
stack
|
page read and write
|
||
|
23FA05D0000
|
remote allocation
|
page read and write
|
||
|
21EB21E0000
|
trusted library allocation
|
page read and write
|
||
|
9D000
|
stack
|
page read and write
|
||
|
21EB2229000
|
heap
|
page read and write
|
||
|
18977BD0000
|
heap
|
page read and write
|
||
|
846000
|
heap
|
page read and write
|
||
|
FCF43FB000
|
stack
|
page read and write
|
||
|
5C0FD7B000
|
stack
|
page read and write
|
||
|
18977F13000
|
heap
|
page read and write
|
||
|
C66377F000
|
stack
|
page read and write
|
||
|
21EB224F000
|
heap
|
page read and write
|
||
|
F99437C000
|
stack
|
page read and write
|
||
|
1A2AF813000
|
heap
|
page read and write
|
||
|
27078E5A000
|
heap
|
page read and write
|
||
|
7C8207F000
|
stack
|
page read and write
|
||
|
1A46583D000
|
heap
|
page read and write
|
||
|
F9948FC000
|
stack
|
page read and write
|
||
|
23FA0713000
|
heap
|
page read and write
|
||
|
620000
|
heap
|
page read and write
|
||
|
1A2AED60000
|
trusted library allocation
|
page read and write
|
||
|
1A2AF7B0000
|
heap
|
page read and write
|
||
|
257BE7D0000
|
trusted library allocation
|
page read and write
|
||
|
2C74F790000
|
heap
|
page read and write
|
||
|
1A4657E0000
|
remote allocation
|
page read and write
|
||
|
23FA0659000
|
heap
|
page read and write
|
||
|
21EB2276000
|
heap
|
page read and write
|
||
|
189783A0000
|
trusted library allocation
|
page read and write
|
||
|
FCF47FE000
|
stack
|
page read and write
|
||
|
D35D47E000
|
stack
|
page read and write
|
||
|
21EB227C000
|
heap
|
page read and write
|
||
|
21EB2262000
|
heap
|
page read and write
|
||
|
F9944FF000
|
stack
|
page read and write
|
||
|
8DEE1FE000
|
stack
|
page read and write
|
||
|
816000
|
heap
|
page execute and read and write
|
||
|
405000
|
unkown
|
page execute and read and write
|
||
|
257BE670000
|
heap
|
page read and write
|
||
|
1A2AEF13000
|
heap
|
page read and write
|
||
|
2C74F829000
|
heap
|
page read and write
|
||
|
1A2AEFB9000
|
heap
|
page read and write
|
||
|
26C9000
|
heap
|
page read and write
|
||
|
23FA0648000
|
heap
|
page read and write
|
||
|
F9947FD000
|
stack
|
page read and write
|
||
|
18977BE0000
|
heap
|
page read and write
|
||
|
257BE8BB000
|
heap
|
page read and write
|
||
|
289E000
|
stack
|
page read and write
|
||
|
2C750002000
|
trusted library allocation
|
page read and write
|
||
|
27078E29000
|
heap
|
page read and write
|
||
|
FCF46FC000
|
stack
|
page read and write
|
||
|
F994AFD000
|
stack
|
page read and write
|
||
|
FCF427C000
|
stack
|
page read and write
|
||
|
49F000
|
unkown
|
page readonly
|
||
|
23FA05D0000
|
remote allocation
|
page read and write
|
||
|
1A2AF800000
|
heap
|
page read and write
|
||
|
27078E75000
|
heap
|
page read and write
|
||
|
18977E55000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
1A2AEE8A000
|
heap
|
page read and write
|
||
|
40F000
|
unkown
|
page write copy
|
||
|
23FA0613000
|
heap
|
page read and write
|
||
|
27078E41000
|
heap
|
page read and write
|
||
|
2C74F83C000
|
heap
|
page read and write
|
||
|
D35D679000
|
stack
|
page read and write
|
||
|
1A2AF602000
|
heap
|
page read and write
|
||
|
403000
|
unkown
|
page execute and read and write
|
||
|
8DEE0FF000
|
stack
|
page read and write
|
||
|
257BE8C3000
|
heap
|
page read and write
|
||
|
21EB2248000
|
heap
|
page read and write
|
||
|
1A2AEE3C000
|
heap
|
page read and write
|
||
|
1A2AEE29000
|
heap
|
page read and write
|
||
|
1A2AF702000
|
heap
|
page read and write
|
||
|
F9945FF000
|
stack
|
page read and write
|
||
|
21EB2213000
|
heap
|
page read and write
|
||
|
FCF41FF000
|
stack
|
page read and write
|
||
|
5C0F87B000
|
stack
|
page read and write
|
||
|
7C8257F000
|
stack
|
page read and write
|
||
|
257BE829000
|
heap
|
page read and write
|
||
|
18977F00000
|
heap
|
page read and write
|
||
|
231E000
|
stack
|
page read and write
|
||
|
2C74F802000
|
heap
|
page read and write
|
||
|
7C823FF000
|
stack
|
page read and write
|
||
|
1A2AEE92000
|
heap
|
page read and write
|
||
|
1A465829000
|
heap
|
page read and write
|
||
|
8DEE2FE000
|
stack
|
page read and write
|
||
|
24C21FE000
|
stack
|
page read and write
|
||
|
24C1CFE000
|
stack
|
page read and write
|
||
|
1A2AEE13000
|
heap
|
page read and write
|
||
|
1A465902000
|
heap
|
page read and write
|
||
|
D35D77F000
|
stack
|
page read and write
|
||
|
21EB2263000
|
heap
|
page read and write
|
||
|
407000
|
unkown
|
page execute and read and write
|
||
|
1A2AEE78000
|
heap
|
page read and write
|
||
|
1A2AF830000
|
heap
|
page read and write
|
||
|
257BE83E000
|
heap
|
page read and write
|
||
|
1A2AF7D2000
|
heap
|
page read and write
|
||
|
257BE86C000
|
heap
|
page read and write
|
||
|
21EB2247000
|
heap
|
page read and write
|
||
|
21EB1FB0000
|
heap
|
page read and write
|
||
|
21EB2246000
|
heap
|
page read and write
|
||
|
23FA04F0000
|
heap
|
page read and write
|
||
|
23FA20B0000
|
trusted library allocation
|
page read and write
|
||
|
41F000
|
unkown
|
page read and write
|
||
|
27078F02000
|
heap
|
page read and write
|
||
|
1A2AECC0000
|
heap
|
page read and write
|
||
|
791000
|
unclassified section
|
page execute read
|
||
|
21EB224B000
|
heap
|
page read and write
|
||
|
1A4656B0000
|
heap
|
page read and write
|
||
|
D35D57F000
|
stack
|
page read and write
|
||
|
23FA0649000
|
heap
|
page read and write
|
||
|
1A465800000
|
heap
|
page read and write
|
||
|
21EB2200000
|
heap
|
page read and write
|
||
|
1A2AEFE5000
|
heap
|
page read and write
|
||
|
829000
|
heap
|
page read and write
|
||
|
24C178B000
|
stack
|
page read and write
|
||
|
D35D27C000
|
stack
|
page read and write
|
||
|
27078E13000
|
heap
|
page read and write
|
||
|
FCF437C000
|
stack
|
page read and write
|
||
|
18977E75000
|
heap
|
page read and write
|
||
|
610000
|
direct allocation
|
page execute and read and write
|
||
|
23FA0659000
|
heap
|
page read and write
|
||
|
7C822FA000
|
stack
|
page read and write
|
||
|
366E000
|
stack
|
page read and write
|
||
|
8DED97B000
|
stack
|
page read and write
|
||
|
2930000
|
heap
|
page read and write
|
||
|
1A2AEE86000
|
heap
|
page read and write
|
||
|
1A2AEE43000
|
heap
|
page read and write
|
||
|
8DEDBFF000
|
stack
|
page read and write
|
||
|
18977E79000
|
heap
|
page read and write
|
||
|
C6632CC000
|
stack
|
page read and write
|
||
|
1A4657E0000
|
remote allocation
|
page read and write
|
||
|
24C1DFE000
|
stack
|
page read and write
|
||
|
2290000
|
heap
|
page read and write
|
||
|
79A000
|
unclassified section
|
page read and write
|
||
|
1A4657B0000
|
trusted library allocation
|
page read and write
|
||
|
21EB2261000
|
heap
|
page read and write
|
||
|
8DEDFFE000
|
stack
|
page read and write
|
||
|
24C1F7F000
|
stack
|
page read and write
|
||
|
630000
|
direct allocation
|
page read and write
|
||
|
400000
|
unkown
|
page execute and read and write
|
||
|
8DEDDFD000
|
stack
|
page read and write
|
||
|
1A2AEE6A000
|
heap
|
page read and write
|
||
|
1A2AF7BC000
|
heap
|
page read and write
|
||
|
257BF132000
|
heap
|
page read and write
|
||
|
24C1C7F000
|
stack
|
page read and write
|
||
|
8DED54B000
|
stack
|
page read and write
|
||
|
24C207D000
|
stack
|
page read and write
|
||
|
23FA0672000
|
heap
|
page read and write
|
||
|
257BE6D0000
|
heap
|
page read and write
|
||
|
66C000
|
stack
|
page read and write
|
||
|
7C821F9000
|
stack
|
page read and write
|
||
|
21EB224E000
|
heap
|
page read and write
|
||
|
221E000
|
stack
|
page read and write
|
||
|
2C74F836000
|
heap
|
page read and write
|
||
|
23FA0700000
|
heap
|
page read and write
|
||
|
1A2AF700000
|
heap
|
page read and write
|
||
|
1A46581F000
|
heap
|
page read and write
|
||
|
1A2AF743000
|
heap
|
page read and write
|
||
|
8DEDCFF000
|
stack
|
page read and write
|
||
|
1A2AF754000
|
heap
|
page read and write
|
||
|
C66334E000
|
stack
|
page read and write
|
||
|
257BF100000
|
heap
|
page read and write
|
||
|
C663A7F000
|
stack
|
page read and write
|
||
|
5C0FC7E000
|
stack
|
page read and write
|
||
|
21EB2010000
|
heap
|
page read and write
|
||
|
257BE813000
|
heap
|
page read and write
|
||
|
23FA068A000
|
heap
|
page read and write
|
||
|
799000
|
unclassified section
|
page readonly
|
||
|
21EB2302000
|
heap
|
page read and write
|
||
|
21EB2282000
|
heap
|
page read and write
|
||
|
21EB225F000
|
heap
|
page read and write
|
||
|
27079602000
|
trusted library allocation
|
page read and write
|
||
|
2350000
|
heap
|
page read and write
|
||
|
21EB227A000
|
heap
|
page read and write
|
||
|
24C217D000
|
stack
|
page read and write
|
||
|
2C74F730000
|
heap
|
page read and write
|
||
|
21EB2245000
|
heap
|
page read and write
|
||
|
2C74F854000
|
heap
|
page read and write
|
||
|
2D2B000
|
heap
|
page read and write
|
||
|
2C74F800000
|
heap
|
page read and write
|
||
|
21EB222D000
|
heap
|
page read and write
|
||
|
19B000
|
stack
|
page read and write
|
||
|
18977F02000
|
heap
|
page read and write
|
||
|
257BE913000
|
heap
|
page read and write
|
||
|
1A2AF802000
|
heap
|
page read and write
|
||
|
27078C90000
|
heap
|
page read and write
|
||
|
30000
|
heap
|
page read and write
|
||
|
23FA04E0000
|
heap
|
page read and write
|
||
|
1A2AEE58000
|
heap
|
page read and write
|
||
|
2D2B000
|
heap
|
page read and write
|
||
|
7C824FE000
|
stack
|
page read and write
|
||
|
C66397E000
|
stack
|
page read and write
|
||
|
FCF3EFC000
|
stack
|
page read and write
|
||
|
336F000
|
stack
|
page read and write
|
||
|
27078C20000
|
heap
|
page read and write
|
||
|
18977E28000
|
heap
|
page read and write
|
||
|
21EB2242000
|
heap
|
page read and write
|
||
|
21EB2273000
|
heap
|
page read and write
|
||
|
257BE902000
|
heap
|
page read and write
|
||
|
27078E77000
|
heap
|
page read and write
|
||
|
8DEDEFE000
|
stack
|
page read and write
|
||
|
23FA05A0000
|
trusted library allocation
|
page read and write
|
||
|
21EB2260000
|
heap
|
page read and write
|
||
|
1A465640000
|
heap
|
page read and write
|
||
|
40D000
|
unkown
|
page write copy
|
||
|
800000
|
heap
|
page read and write
|
||
|
21EB2239000
|
heap
|
page read and write
|
||
|
27078F13000
|
heap
|
page read and write
|
||
|
1A2AF722000
|
heap
|
page read and write
|
||
|
7C81F7B000
|
stack
|
page read and write
|
||
|
23FA0600000
|
heap
|
page read and write
|
||
|
1A2AED30000
|
heap
|
page read and write
|
||
|
1A2AEE00000
|
heap
|
page read and write
|
||
|
2C74F813000
|
heap
|
page read and write
|
||
|
18977E3C000
|
heap
|
page read and write
|
||
|
1A46585C000
|
heap
|
page read and write
|
||
|
1A466002000
|
trusted library allocation
|
page read and write
|
||
|
23FA05D0000
|
remote allocation
|
page read and write
|
||
|
257BE8CC000
|
heap
|
page read and write
|
||
|
27078D90000
|
trusted library allocation
|
page read and write
|
||
|
23FA063D000
|
heap
|
page read and write
|
||
|
21DE000
|
stack
|
page read and write
|
||
|
2C74F902000
|
heap
|
page read and write
|
||
|
27078E54000
|
heap
|
page read and write
|
||
|
FCF40FE000
|
stack
|
page read and write
|
||
|
24C1EFD000
|
stack
|
page read and write
|
||
|
1A2AEE43000
|
heap
|
page read and write
|
||
|
21EB2279000
|
heap
|
page read and write
|
||
|
79C000
|
unclassified section
|
page readonly
|
||
|
F993F6B000
|
stack
|
page read and write
|
||
|
257BF002000
|
heap
|
page read and write
|
||
|
FCF45FF000
|
stack
|
page read and write
|
||
|
27078E02000
|
heap
|
page read and write
|
There are 321 hidden memdumps, click here to show them.