Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Proforma #U2013 SMWD5043.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Temp\intemeration
|
data
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\Proforma #U2013 SMWD5043.exe
|
"C:\Users\user\Desktop\Proforma #U2013 SMWD5043.exe"
|
||
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\Proforma #U2013 SMWD5043.exe"
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
E80000
|
direct allocation
|
page read and write
|
||
670000
|
system
|
page execute and read and write
|
||
3000000
|
heap
|
page read and write
|
||
8B4000
|
stack
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
319E000
|
heap
|
page read and write
|
||
3F80000
|
heap
|
page read and write
|
||
C00000
|
direct allocation
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
40A1000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
4025000
|
heap
|
page read and write
|
||
18E4000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
178F000
|
stack
|
page read and write
|
||
4890000
|
direct allocation
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
B80000
|
heap
|
page read and write
|
||
BC3000
|
heap
|
page read and write
|
||
49BD000
|
direct allocation
|
page read and write
|
||
1E0000
|
heap
|
page read and write
|
||
40DA000
|
heap
|
page execute and read and write
|
||
44AC000
|
heap
|
page read and write
|
||
8FE000
|
stack
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
D7E000
|
stack
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
46F0000
|
direct allocation
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
800000
|
heap
|
page read and write
|
||
4890000
|
direct allocation
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
46F0000
|
direct allocation
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
3200000
|
direct allocation
|
page execute and read and write
|
||
49BD000
|
direct allocation
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
49B9000
|
direct allocation
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
9B5000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
A75000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
BD1000
|
heap
|
page read and write
|
||
8AF000
|
stack
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
3DA0000
|
heap
|
page read and write
|
||
4A2E000
|
direct allocation
|
page read and write
|
||
4134000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
4813000
|
direct allocation
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
412C000
|
heap
|
page read and write
|
||
100000
|
heap
|
page read and write
|
||
3001000
|
heap
|
page read and write
|
||
46F0000
|
direct allocation
|
page read and write
|
||
C3E000
|
stack
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
4A2E000
|
direct allocation
|
page read and write
|
||
4813000
|
direct allocation
|
page read and write
|
||
A17000
|
heap
|
page read and write
|
||
3FB1000
|
heap
|
page read and write
|
||
4A2E000
|
direct allocation
|
page read and write
|
||
312D000
|
heap
|
page read and write
|
||
49B9000
|
direct allocation
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
A05000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
A3E000
|
stack
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
490000
|
unkown
|
page write copy
|
||
40A1000
|
heap
|
page read and write
|
||
4AB000
|
unkown
|
page readonly
|
||
4813000
|
direct allocation
|
page read and write
|
||
40A0000
|
heap
|
page read and write
|
||
4025000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
40DE000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
3F82000
|
heap
|
page read and write
|
||
940000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
4094000
|
heap
|
page read and write
|
||
339E000
|
direct allocation
|
page execute and read and write
|
||
40A1000
|
heap
|
page read and write
|
||
4AB000
|
unkown
|
page readonly
|
||
4813000
|
direct allocation
|
page read and write
|
||
ED0000
|
direct allocation
|
page read and write
|
||
970000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
49B9000
|
direct allocation
|
page read and write
|
||
3FA9000
|
heap
|
page read and write
|
||
49BD000
|
direct allocation
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
6E0000
|
heap
|
page read and write
|
||
EE0000
|
direct allocation
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
3FAB000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
1910000
|
heap
|
page read and write
|
||
A00000
|
heap
|
page read and write
|
||
332D000
|
direct allocation
|
page execute and read and write
|
||
4102000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
4A2E000
|
direct allocation
|
page read and write
|
||
4176000
|
heap
|
page read and write
|
||
46F0000
|
direct allocation
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
3BFF000
|
stack
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
34CD000
|
direct allocation
|
page execute and read and write
|
||
D3F000
|
stack
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
4A7000
|
unkown
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
49BD000
|
direct allocation
|
page read and write
|
||
46F0000
|
direct allocation
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
E7F000
|
stack
|
page read and write
|
||
EE0000
|
direct allocation
|
page read and write
|
||
D23000
|
heap
|
page read and write
|
||
4A2E000
|
direct allocation
|
page read and write
|
||
18E0000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
3129000
|
heap
|
page read and write
|
||
412C000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
482000
|
unkown
|
page readonly
|
||
400000
|
unkown
|
page readonly
|
||
4102000
|
heap
|
page read and write
|
||
3329000
|
direct allocation
|
page execute and read and write
|
||
40B1000
|
heap
|
page read and write
|
||
490000
|
unkown
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
46F0000
|
direct allocation
|
page read and write
|
||
3C86000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
4025000
|
heap
|
page read and write
|
||
49B9000
|
direct allocation
|
page read and write
|
||
63D000
|
stack
|
page read and write
|
||
C00000
|
heap
|
page read and write
|
||
34D1000
|
direct allocation
|
page execute and read and write
|
||
49B9000
|
direct allocation
|
page read and write
|
||
B9E000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
49B9000
|
direct allocation
|
page read and write
|
||
802000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
89F000
|
stack
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
4890000
|
direct allocation
|
page read and write
|
||
4596000
|
heap
|
page read and write
|
||
A17000
|
heap
|
page read and write
|
||
ED0000
|
direct allocation
|
page read and write
|
||
4890000
|
direct allocation
|
page read and write
|
||
4890000
|
direct allocation
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
49BD000
|
direct allocation
|
page read and write
|
||
4A2E000
|
direct allocation
|
page read and write
|
||
4890000
|
direct allocation
|
page read and write
|
||
93E000
|
stack
|
page read and write
|
||
A80000
|
heap
|
page read and write
|
||
A12000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
4A2E000
|
direct allocation
|
page read and write
|
||
B9A000
|
heap
|
page read and write
|
||
710000
|
heap
|
page read and write
|
||
4890000
|
direct allocation
|
page read and write
|
||
40E1000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
37FE000
|
stack
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
46F0000
|
direct allocation
|
page read and write
|
||
4813000
|
direct allocation
|
page read and write
|
||
EE0000
|
direct allocation
|
page read and write
|
||
482000
|
unkown
|
page readonly
|
||
9FE000
|
stack
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
49BD000
|
direct allocation
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
138E000
|
stack
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
3FA4000
|
heap
|
page read and write
|
||
9A000
|
stack
|
page read and write
|
||
3542000
|
direct allocation
|
page execute and read and write
|
||
BC6000
|
heap
|
page read and write
|
||
B01000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
3C03000
|
heap
|
page read and write
|
||
49BD000
|
direct allocation
|
page read and write
|
||
3FD000
|
stack
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
EE0000
|
direct allocation
|
page read and write
|
||
40E3000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
1880000
|
direct allocation
|
page read and write
|
||
A05000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
3FAF000
|
heap
|
page read and write
|
||
49B9000
|
direct allocation
|
page read and write
|
||
7F0000
|
heap
|
page read and write
|
||
4813000
|
direct allocation
|
page read and write
|
||
B90000
|
heap
|
page read and write
|
||
3EA0000
|
heap
|
page read and write
|
||
40CA000
|
heap
|
page read and write
|
||
6C0000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
||
179A000
|
heap
|
page read and write
|
||
9B0000
|
heap
|
page read and write
|
||
4813000
|
direct allocation
|
page read and write
|
||
813000
|
heap
|
page read and write
|
||
A70000
|
heap
|
page read and write
|
||
4102000
|
heap
|
page read and write
|
||
40A1000
|
heap
|
page read and write
|
There are 244 hidden memdumps, click here to show them.