Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
5678909764.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\Maianthemum
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\5678909764.exe
|
"C:\Users\user\Desktop\5678909764.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\5678909764.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
630000
|
system
|
page execute and read and write
|
|
|
|
27A0000
|
direct allocation
|
page read and write
|
|
|
|
2ED0000
|
direct allocation
|
page read and write
|
||
|
49F9000
|
direct allocation
|
page read and write
|
||
|
48D0000
|
direct allocation
|
page read and write
|
||
|
9F0000
|
heap
|
page read and write
|
||
|
2802000
|
heap
|
page read and write
|
||
|
17B0000
|
heap
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
33D1000
|
direct allocation
|
page execute and read and write
|
||
|
36FE000
|
stack
|
page read and write
|
||
|
40D3000
|
heap
|
page read and write
|
||
|
680000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
3FF5000
|
heap
|
page read and write
|
||
|
76E000
|
stack
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4A6E000
|
direct allocation
|
page read and write
|
||
|
2E85000
|
heap
|
page read and write
|
||
|
2A24000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
49FD000
|
direct allocation
|
page read and write
|
||
|
49F9000
|
direct allocation
|
page read and write
|
||
|
4A6E000
|
direct allocation
|
page read and write
|
||
|
2A05000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3601000
|
heap
|
page read and write
|
||
|
2FB0000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2A17000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
49F9000
|
direct allocation
|
page read and write
|
||
|
48D0000
|
direct allocation
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
302D000
|
heap
|
page read and write
|
||
|
4853000
|
direct allocation
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
9EE000
|
stack
|
page read and write
|
||
|
4214000
|
heap
|
page read and write
|
||
|
49FD000
|
direct allocation
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
6A0000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
49F9000
|
direct allocation
|
page read and write
|
||
|
1C5000
|
heap
|
page read and write
|
||
|
2A05000
|
heap
|
page read and write
|
||
|
322D000
|
direct allocation
|
page execute and read and write
|
||
|
49F9000
|
direct allocation
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4853000
|
direct allocation
|
page read and write
|
||
|
4039000
|
heap
|
page execute and read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
49FD000
|
direct allocation
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
9FA000
|
heap
|
page read and write
|
||
|
4853000
|
direct allocation
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
8B4000
|
stack
|
page read and write
|
||
|
2D00000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
49F9000
|
direct allocation
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3D70000
|
heap
|
page read and write
|
||
|
15EF000
|
stack
|
page read and write
|
||
|
4A6E000
|
direct allocation
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
3100000
|
direct allocation
|
page execute and read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3FAE000
|
heap
|
page read and write
|
||
|
3BD000
|
stack
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
4A6E000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
1C0000
|
heap
|
page read and write
|
||
|
403A000
|
heap
|
page read and write
|
||
|
3FDE000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
4213000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
41AC000
|
heap
|
page read and write
|
||
|
1B0000
|
heap
|
page read and write
|
||
|
4478000
|
heap
|
page read and write
|
||
|
329E000
|
direct allocation
|
page execute and read and write
|
||
|
4070000
|
heap
|
page read and write
|
||
|
41FA000
|
heap
|
page read and write
|
||
|
4A6E000
|
direct allocation
|
page read and write
|
||
|
2E23000
|
heap
|
page read and write
|
||
|
8AF000
|
stack
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
A25000
|
heap
|
page read and write
|
||
|
3442000
|
direct allocation
|
page execute and read and write
|
||
|
3CB7000
|
heap
|
page read and write
|
||
|
4A6E000
|
direct allocation
|
page read and write
|
||
|
3B09000
|
heap
|
page read and write
|
||
|
420A000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4853000
|
direct allocation
|
page read and write
|
||
|
4853000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
2E20000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4590000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
4A6E000
|
direct allocation
|
page read and write
|
||
|
2A00000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
403A000
|
heap
|
page read and write
|
||
|
15E000
|
stack
|
page read and write
|
||
|
2F00000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
49FD000
|
direct allocation
|
page read and write
|
||
|
2A12000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4853000
|
direct allocation
|
page read and write
|
||
|
19E000
|
stack
|
page read and write
|
||
|
490000
|
unkown
|
page read and write
|
||
|
4A7000
|
unkown
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2ED0000
|
direct allocation
|
page read and write
|
||
|
2E0E000
|
stack
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
6D0000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
2ED0000
|
direct allocation
|
page read and write
|
||
|
3F51000
|
heap
|
page read and write
|
||
|
2B01000
|
heap
|
page read and write
|
||
|
2ED0000
|
direct allocation
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
48D0000
|
direct allocation
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
2ED0000
|
direct allocation
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
309E000
|
heap
|
page read and write
|
||
|
33CD000
|
direct allocation
|
page execute and read and write
|
||
|
2FB4000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
3029000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
3229000
|
direct allocation
|
page execute and read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2ED0000
|
direct allocation
|
page read and write
|
||
|
49FD000
|
direct allocation
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
40E1000
|
heap
|
page read and write
|
||
|
9FE000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page write copy
|
||
|
2A17000
|
heap
|
page read and write
|
||
|
420A000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
403A000
|
heap
|
page read and write
|
||
|
3FD000
|
stack
|
page read and write
|
||
|
3C76000
|
heap
|
page read and write
|
||
|
3AFF000
|
stack
|
page read and write
|
||
|
2DCE000
|
stack
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
2ECF000
|
stack
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
48D0000
|
direct allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
2813000
|
heap
|
page read and write
|
||
|
4059000
|
heap
|
page read and write
|
||
|
2E90000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
4133000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
A2C000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
A2C000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4853000
|
direct allocation
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
89F000
|
stack
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
100000
|
heap
|
page read and write
|
||
|
6F0000
|
direct allocation
|
page read and write
|
||
|
4134000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
40D2000
|
heap
|
page read and write
|
||
|
2E80000
|
heap
|
page read and write
|
||
|
990000
|
heap
|
page read and write
|
||
|
A2E000
|
heap
|
page read and write
|
||
|
4059000
|
heap
|
page read and write
|
||
|
403E000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
72E000
|
stack
|
page read and write
|
||
|
110000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
41FA000
|
heap
|
page read and write
|
||
|
48D0000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
4071000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
6E0000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
4134000
|
heap
|
page read and write
|
||
|
48D0000
|
direct allocation
|
page read and write
|
||
|
49FD000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
48D0000
|
direct allocation
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
2800000
|
heap
|
page read and write
|
||
|
2E30000
|
direct allocation
|
page read and write
|
||
|
11EE000
|
stack
|
page read and write
|
||
|
49F9000
|
direct allocation
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
2813000
|
heap
|
page read and write
|
||
|
41AD000
|
heap
|
page read and write
|
||
|
49FD000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3E70000
|
heap
|
page read and write
|
There are 232 hidden memdumps, click here to show them.