Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
PO#38595.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\Melber
|
ASCII text, with very long lines (57348), with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\aut3804.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\aut3843.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\harrowment
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\PO#38595.exe
|
"C:\Users\user\Desktop\PO#38595.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\PO#38595.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
400000
|
system
|
page execute and read and write
|
|
|
|
3440000
|
direct allocation
|
page read and write
|
|
|
|
2E00000
|
heap
|
page read and write
|
||
|
158F000
|
heap
|
page read and write
|
||
|
168F000
|
heap
|
page read and write
|
||
|
1416000
|
heap
|
page read and write
|
||
|
1610000
|
heap
|
page read and write
|
||
|
171D000
|
heap
|
page read and write
|
||
|
3F10000
|
direct allocation
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
140D000
|
heap
|
page read and write
|
||
|
1686000
|
heap
|
page read and write
|
||
|
3005000
|
heap
|
page read and write
|
||
|
A81000
|
unkown
|
page execute read
|
||
|
16DC000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
3E43000
|
direct allocation
|
page read and write
|
||
|
161B000
|
heap
|
page read and write
|
||
|
14DD000
|
heap
|
page read and write
|
||
|
1633000
|
heap
|
page read and write
|
||
|
40AE000
|
direct allocation
|
page read and write
|
||
|
16F3000
|
heap
|
page read and write
|
||
|
147E000
|
heap
|
page read and write
|
||
|
B96000
|
unkown
|
page readonly
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
16A7000
|
heap
|
page read and write
|
||
|
146E000
|
heap
|
page read and write
|
||
|
166D000
|
heap
|
page read and write
|
||
|
B88000
|
unkown
|
page readonly
|
||
|
1554000
|
heap
|
page read and write
|
||
|
3980000
|
heap
|
page read and write
|
||
|
3F10000
|
direct allocation
|
page read and write
|
||
|
B44000
|
unkown
|
page readonly
|
||
|
13DE000
|
heap
|
page read and write
|
||
|
38D1000
|
direct allocation
|
page execute and read and write
|
||
|
15DD000
|
heap
|
page read and write
|
||
|
14FA000
|
heap
|
page read and write
|
||
|
16FD000
|
heap
|
page read and write
|
||
|
3017000
|
heap
|
page read and write
|
||
|
16AF000
|
heap
|
page read and write
|
||
|
405E000
|
direct allocation
|
page read and write
|
||
|
A80000
|
unkown
|
page readonly
|
||
|
1609000
|
heap
|
page read and write
|
||
|
333E000
|
stack
|
page read and write
|
||
|
156E000
|
heap
|
page read and write
|
||
|
1432000
|
heap
|
page read and write
|
||
|
13DA000
|
heap
|
page read and write
|
||
|
3D70000
|
direct allocation
|
page read and write
|
||
|
155F000
|
heap
|
page read and write
|
||
|
146E000
|
heap
|
page read and write
|
||
|
158F000
|
heap
|
page read and write
|
||
|
15EF000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
166E000
|
heap
|
page read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
155F000
|
heap
|
page read and write
|
||
|
140C000
|
heap
|
page read and write
|
||
|
166D000
|
heap
|
page read and write
|
||
|
2C70000
|
heap
|
page read and write
|
||
|
3017000
|
heap
|
page read and write
|
||
|
3490000
|
direct allocation
|
page read and write
|
||
|
145B000
|
heap
|
page read and write
|
||
|
4039000
|
direct allocation
|
page read and write
|
||
|
3490000
|
direct allocation
|
page read and write
|
||
|
1564000
|
heap
|
page read and write
|
||
|
40AE000
|
direct allocation
|
page read and write
|
||
|
166D000
|
heap
|
page read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
4039000
|
direct allocation
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
3E43000
|
direct allocation
|
page read and write
|
||
|
3EC0000
|
direct allocation
|
page read and write
|
||
|
15BC000
|
heap
|
page read and write
|
||
|
403D000
|
direct allocation
|
page read and write
|
||
|
166D000
|
heap
|
page read and write
|
||
|
3490000
|
direct allocation
|
page read and write
|
||
|
38CD000
|
direct allocation
|
page execute and read and write
|
||
|
1550000
|
heap
|
page read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
16D3000
|
heap
|
page read and write
|
||
|
3FE9000
|
direct allocation
|
page read and write
|
||
|
3490000
|
direct allocation
|
page read and write
|
||
|
B44000
|
unkown
|
page readonly
|
||
|
3E43000
|
direct allocation
|
page read and write
|
||
|
163E000
|
heap
|
page read and write
|
||
|
1416000
|
heap
|
page read and write
|
||
|
1440000
|
heap
|
page read and write
|
||
|
13AE000
|
stack
|
page read and write
|
||
|
3950000
|
heap
|
page read and write
|
||
|
2C50000
|
heap
|
page read and write
|
||
|
167F000
|
heap
|
page read and write
|
||
|
16A7000
|
heap
|
page read and write
|
||
|
1330000
|
heap
|
page read and write
|
||
|
15C3000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
A81000
|
unkown
|
page execute read
|
||
|
3970000
|
direct allocation
|
page execute and read and write
|
||
|
1360000
|
heap
|
page read and write
|
||
|
379E000
|
direct allocation
|
page execute and read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
172E000
|
heap
|
page read and write
|
||
|
1686000
|
heap
|
page read and write
|
||
|
2C3C000
|
stack
|
page read and write
|
||
|
3A01000
|
heap
|
page read and write
|
||
|
3E93000
|
direct allocation
|
page read and write
|
||
|
1250000
|
heap
|
page read and write
|
||
|
3FED000
|
direct allocation
|
page read and write
|
||
|
3529000
|
heap
|
page read and write
|
||
|
2D80000
|
heap
|
page read and write
|
||
|
B3A000
|
unkown
|
page write copy
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
156C000
|
heap
|
page read and write
|
||
|
1432000
|
heap
|
page read and write
|
||
|
B0D000
|
unkown
|
page readonly
|
||
|
16F3000
|
heap
|
page read and write
|
||
|
167F000
|
heap
|
page read and write
|
||
|
4039000
|
direct allocation
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
11BB000
|
stack
|
page read and write
|
||
|
40AE000
|
direct allocation
|
page read and write
|
||
|
200E000
|
stack
|
page read and write
|
||
|
3FED000
|
direct allocation
|
page read and write
|
||
|
A80000
|
unkown
|
page readonly
|
||
|
343F000
|
stack
|
page read and write
|
||
|
A6A000
|
stack
|
page read and write
|
||
|
1461000
|
heap
|
page read and write
|
||
|
B88000
|
unkown
|
page readonly
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
3729000
|
direct allocation
|
page execute and read and write
|
||
|
1543000
|
heap
|
page read and write
|
||
|
163D000
|
heap
|
page read and write
|
||
|
405E000
|
direct allocation
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
1680000
|
heap
|
page read and write
|
||
|
16FD000
|
heap
|
page read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
15D3000
|
heap
|
page read and write
|
||
|
B96000
|
unkown
|
page readonly
|
||
|
165F000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
1543000
|
heap
|
page read and write
|
||
|
1633000
|
heap
|
page read and write
|
||
|
3D70000
|
direct allocation
|
page read and write
|
||
|
13D0000
|
heap
|
page read and write
|
||
|
3000000
|
heap
|
page read and write
|
||
|
B3F000
|
unkown
|
page write copy
|
||
|
147D000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
3FE9000
|
direct allocation
|
page read and write
|
||
|
3CD0000
|
direct allocation
|
page read and write
|
||
|
1475000
|
heap
|
page read and write
|
||
|
171E000
|
heap
|
page read and write
|
||
|
B4C000
|
unkown
|
page readonly
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
1609000
|
heap
|
page read and write
|
||
|
1BCE000
|
stack
|
page read and write
|
||
|
1414000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
11DB000
|
stack
|
page read and write
|
||
|
1609000
|
heap
|
page read and write
|
||
|
2CA0000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
3D20000
|
direct allocation
|
page read and write
|
||
|
3984000
|
heap
|
page read and write
|
||
|
B2E000
|
unkown
|
page readonly
|
||
|
3D70000
|
direct allocation
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
1661000
|
heap
|
page read and write
|
||
|
1535000
|
heap
|
page read and write
|
||
|
1554000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
157F000
|
heap
|
page read and write
|
||
|
3F10000
|
direct allocation
|
page read and write
|
||
|
1726000
|
heap
|
page read and write
|
||
|
146E000
|
heap
|
page read and write
|
||
|
16AF000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
156E000
|
heap
|
page read and write
|
||
|
1698000
|
heap
|
page read and write
|
||
|
405E000
|
direct allocation
|
page read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
3600000
|
direct allocation
|
page execute and read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
170D000
|
heap
|
page read and write
|
||
|
B85000
|
unkown
|
page readonly
|
||
|
359E000
|
heap
|
page read and write
|
||
|
2E02000
|
heap
|
page read and write
|
||
|
3323000
|
heap
|
page read and write
|
||
|
156C000
|
heap
|
page read and write
|
||
|
B3A000
|
unkown
|
page read and write
|
||
|
3D20000
|
direct allocation
|
page read and write
|
||
|
11FC000
|
stack
|
page read and write
|
||
|
3EC0000
|
direct allocation
|
page read and write
|
||
|
16BA000
|
heap
|
page read and write
|
||
|
15A3000
|
heap
|
page read and write
|
||
|
15AC000
|
heap
|
page read and write
|
||
|
29DD000
|
stack
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
1634000
|
heap
|
page read and write
|
||
|
403D000
|
direct allocation
|
page read and write
|
||
|
3490000
|
direct allocation
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
16D3000
|
heap
|
page read and write
|
||
|
168F000
|
heap
|
page read and write
|
||
|
372D000
|
direct allocation
|
page execute and read and write
|
||
|
1535000
|
heap
|
page read and write
|
||
|
1416000
|
heap
|
page read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
3E93000
|
direct allocation
|
page read and write
|
||
|
B4C000
|
unkown
|
page readonly
|
||
|
161C000
|
heap
|
page read and write
|
||
|
1414000
|
heap
|
page read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
3012000
|
heap
|
page read and write
|
||
|
3FED000
|
direct allocation
|
page read and write
|
||
|
16B9000
|
heap
|
page read and write
|
||
|
B85000
|
unkown
|
page readonly
|
||
|
16D3000
|
heap
|
page read and write
|
||
|
158F000
|
heap
|
page read and write
|
||
|
158F000
|
heap
|
page read and write
|
||
|
11CF000
|
stack
|
page read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
2D90000
|
direct allocation
|
page read and write
|
||
|
3101000
|
heap
|
page read and write
|
||
|
21B0000
|
heap
|
page read and write
|
||
|
15F8000
|
heap
|
page read and write
|
||
|
1C0E000
|
stack
|
page read and write
|
||
|
3EC0000
|
direct allocation
|
page read and write
|
||
|
B2E000
|
unkown
|
page readonly
|
||
|
15E7000
|
heap
|
page read and write
|
||
|
3D20000
|
direct allocation
|
page read and write
|
||
|
147D000
|
heap
|
page read and write
|
||
|
B0D000
|
unkown
|
page readonly
|
||
|
15B3000
|
heap
|
page read and write
|
||
|
403D000
|
direct allocation
|
page read and write
|
||
|
352D000
|
heap
|
page read and write
|
||
|
15CE000
|
heap
|
page read and write
|
||
|
32FF000
|
stack
|
page read and write
|
||
|
15C3000
|
heap
|
page read and write
|
||
|
3005000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
3490000
|
direct allocation
|
page read and write
|
||
|
1676000
|
heap
|
page read and write
|
||
|
149D000
|
heap
|
page read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
3FE9000
|
direct allocation
|
page read and write
|
||
|
3942000
|
direct allocation
|
page execute and read and write
|
||
|
2E13000
|
heap
|
page read and write
|
||
|
1600000
|
heap
|
page read and write
|
||
|
1564000
|
heap
|
page read and write
|
||
|
2DCE000
|
stack
|
page read and write
|
||
|
1588000
|
heap
|
page read and write
|
||
|
3E93000
|
direct allocation
|
page read and write
|
||
|
3400000
|
heap
|
page read and write
|
||
|
1594000
|
heap
|
page read and write
|
There are 251 hidden memdumps, click here to show them.