Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
6YmCyBvw73.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\Anglophile
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\aut4211.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\aut4280.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\cacostomia
|
FGDC-STD-001-1998
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\6YmCyBvw73.exe
|
"C:\Users\user\Desktop\6YmCyBvw73.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\6YmCyBvw73.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
30F0000
|
direct allocation
|
page read and write
|
|
|
|
400000
|
system
|
page execute and read and write
|
|
|
|
13E3000
|
heap
|
page read and write
|
||
|
960000
|
heap
|
page read and write
|
||
|
3FDD000
|
direct allocation
|
page read and write
|
||
|
3140000
|
direct allocation
|
page read and write
|
||
|
3D10000
|
direct allocation
|
page read and write
|
||
|
3FD9000
|
direct allocation
|
page read and write
|
||
|
CEE000
|
stack
|
page read and write
|
||
|
2FEF000
|
stack
|
page read and write
|
||
|
900000
|
heap
|
page read and write
|
||
|
145A000
|
heap
|
page read and write
|
||
|
C05000
|
heap
|
page read and write
|
||
|
3FDD000
|
direct allocation
|
page read and write
|
||
|
349E000
|
direct allocation
|
page execute and read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
DD4000
|
unkown
|
page readonly
|
||
|
121B000
|
stack
|
page read and write
|
||
|
3DE3000
|
direct allocation
|
page read and write
|
||
|
C17000
|
heap
|
page read and write
|
||
|
1479000
|
heap
|
page read and write
|
||
|
950000
|
heap
|
page read and write
|
||
|
920000
|
heap
|
page read and write
|
||
|
1537000
|
heap
|
page read and write
|
||
|
9EE000
|
stack
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
30EF000
|
stack
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
DC2000
|
unkown
|
page readonly
|
||
|
A13000
|
heap
|
page read and write
|
||
|
3F8D000
|
direct allocation
|
page read and write
|
||
|
D01000
|
unkown
|
page execute read
|
||
|
1536000
|
heap
|
page read and write
|
||
|
3140000
|
direct allocation
|
page read and write
|
||
|
1459000
|
heap
|
page read and write
|
||
|
3801000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
3FD9000
|
direct allocation
|
page read and write
|
||
|
3D10000
|
direct allocation
|
page read and write
|
||
|
13EC000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
3924000
|
heap
|
page read and write
|
||
|
D9C000
|
unkown
|
page readonly
|
||
|
3920000
|
heap
|
page read and write
|
||
|
DCC000
|
unkown
|
page write copy
|
||
|
1459000
|
heap
|
page read and write
|
||
|
C3A000
|
stack
|
page read and write
|
||
|
322D000
|
heap
|
page read and write
|
||
|
DD4000
|
unkown
|
page readonly
|
||
|
1527000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
3E33000
|
direct allocation
|
page read and write
|
||
|
3023000
|
heap
|
page read and write
|
||
|
9AE000
|
stack
|
page read and write
|
||
|
3FFE000
|
direct allocation
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
123F000
|
stack
|
page read and write
|
||
|
35D1000
|
direct allocation
|
page execute and read and write
|
||
|
3229000
|
heap
|
page read and write
|
||
|
C17000
|
heap
|
page read and write
|
||
|
35CD000
|
direct allocation
|
page execute and read and write
|
||
|
3EB0000
|
direct allocation
|
page read and write
|
||
|
1FAF000
|
stack
|
page read and write
|
||
|
3CC0000
|
direct allocation
|
page read and write
|
||
|
3F89000
|
direct allocation
|
page read and write
|
||
|
144D000
|
heap
|
page read and write
|
||
|
3140000
|
direct allocation
|
page read and write
|
||
|
3CC0000
|
direct allocation
|
page read and write
|
||
|
D9C000
|
unkown
|
page readonly
|
||
|
3DE3000
|
direct allocation
|
page read and write
|
||
|
3F8D000
|
direct allocation
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
38F0000
|
direct allocation
|
page execute and read and write
|
||
|
1450000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
88D000
|
stack
|
page read and write
|
||
|
DD0000
|
unkown
|
page write copy
|
||
|
A13000
|
heap
|
page read and write
|
||
|
13EB000
|
heap
|
page read and write
|
||
|
3FD9000
|
direct allocation
|
page read and write
|
||
|
3140000
|
direct allocation
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
122F000
|
stack
|
page read and write
|
||
|
3100000
|
heap
|
page read and write
|
||
|
970000
|
direct allocation
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
D00000
|
unkown
|
page readonly
|
||
|
3FFE000
|
direct allocation
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
3140000
|
direct allocation
|
page read and write
|
||
|
144C000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
11FF000
|
stack
|
page read and write
|
||
|
3E33000
|
direct allocation
|
page read and write
|
||
|
3D10000
|
direct allocation
|
page read and write
|
||
|
3CC0000
|
direct allocation
|
page read and write
|
||
|
404E000
|
direct allocation
|
page read and write
|
||
|
342D000
|
direct allocation
|
page execute and read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
A02000
|
heap
|
page read and write
|
||
|
13EC000
|
heap
|
page read and write
|
||
|
3E60000
|
direct allocation
|
page read and write
|
||
|
C12000
|
heap
|
page read and write
|
||
|
13B8000
|
heap
|
page read and write
|
||
|
3EB0000
|
direct allocation
|
page read and write
|
||
|
3300000
|
direct allocation
|
page execute and read and write
|
||
|
1556000
|
heap
|
page read and write
|
||
|
404E000
|
direct allocation
|
page read and write
|
||
|
3E60000
|
direct allocation
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
3F8D000
|
direct allocation
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
1546000
|
heap
|
page read and write
|
||
|
1BAE000
|
stack
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
CF0000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
D00000
|
unkown
|
page readonly
|
||
|
A13000
|
heap
|
page read and write
|
||
|
13E4000
|
heap
|
page read and write
|
||
|
13A0000
|
heap
|
page read and write
|
||
|
D01000
|
heap
|
page read and write
|
||
|
2F00000
|
heap
|
page read and write
|
||
|
13B0000
|
heap
|
page read and write
|
||
|
38E0000
|
heap
|
page read and write
|
||
|
3E60000
|
direct allocation
|
page read and write
|
||
|
3DE3000
|
direct allocation
|
page read and write
|
||
|
3C70000
|
direct allocation
|
page read and write
|
||
|
13EB000
|
heap
|
page read and write
|
||
|
14D3000
|
heap
|
page read and write
|
||
|
120F000
|
stack
|
page read and write
|
||
|
1459000
|
heap
|
page read and write
|
||
|
3642000
|
direct allocation
|
page execute and read and write
|
||
|
3429000
|
direct allocation
|
page execute and read and write
|
||
|
1390000
|
heap
|
page read and write
|
||
|
8CD000
|
stack
|
page read and write
|
||
|
CA0000
|
heap
|
page read and write
|
||
|
1546000
|
heap
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
C05000
|
heap
|
page read and write
|
||
|
404E000
|
direct allocation
|
page read and write
|
||
|
1507000
|
heap
|
page read and write
|
||
|
1459000
|
heap
|
page read and write
|
||
|
134E000
|
stack
|
page read and write
|
||
|
329E000
|
heap
|
page read and write
|
||
|
3E33000
|
direct allocation
|
page read and write
|
||
|
C00000
|
heap
|
page read and write
|
||
|
3EB0000
|
direct allocation
|
page read and write
|
||
|
3FFE000
|
direct allocation
|
page read and write
|
||
|
3140000
|
direct allocation
|
page read and write
|
||
|
1544000
|
heap
|
page read and write
|
||
|
1553000
|
heap
|
page read and write
|
||
|
3FDD000
|
direct allocation
|
page read and write
|
||
|
1556000
|
heap
|
page read and write
|
||
|
3F89000
|
direct allocation
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
DCC000
|
unkown
|
page read and write
|
||
|
A13000
|
heap
|
page read and write
|
||
|
A00000
|
heap
|
page read and write
|
||
|
DC2000
|
unkown
|
page readonly
|
||
|
3F89000
|
direct allocation
|
page read and write
|
||
|
1527000
|
heap
|
page read and write
|
||
|
1519000
|
heap
|
page read and write
|
||
|
D01000
|
unkown
|
page execute read
|
There are 158 hidden memdumps, click here to show them.