Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
PGHPC-10-0033-FZB-001.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Temp\epistemology
|
data
|
modified
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\PGHPC-10-0033-FZB-001.exe
|
"C:\Users\user\Desktop\PGHPC-10-0033-FZB-001.exe"
|
||
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\PGHPC-10-0033-FZB-001.exe"
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
490000
|
unkown
|
page write copy
|
||
400000
|
unkown
|
page readonly
|
||
30B0000
|
heap
|
page read and write
|
||
403D000
|
heap
|
page read and write
|
||
32A0000
|
direct allocation
|
page read and write
|
||
485D000
|
direct allocation
|
page read and write
|
||
160E000
|
stack
|
page read and write
|
||
3E97000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
15CE000
|
stack
|
page read and write
|
||
32A0000
|
direct allocation
|
page read and write
|
||
4AB000
|
unkown
|
page readonly
|
||
46B3000
|
direct allocation
|
page read and write
|
||
4040000
|
heap
|
page read and write
|
||
2901000
|
heap
|
page read and write
|
||
F0000
|
heap
|
page read and write
|
||
485D000
|
direct allocation
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
9DE000
|
heap
|
page read and write
|
||
309E000
|
direct allocation
|
page execute and read and write
|
||
3F00000
|
heap
|
page read and write
|
||
2C23000
|
heap
|
page read and write
|
||
4309000
|
heap
|
page read and write
|
||
30B4000
|
heap
|
page read and write
|
||
3EEC000
|
heap
|
page execute and read and write
|
||
48CE000
|
direct allocation
|
page read and write
|
||
3DF9000
|
heap
|
page read and write
|
||
4730000
|
direct allocation
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
3EBD000
|
heap
|
page read and write
|
||
32A0000
|
direct allocation
|
page read and write
|
||
3ED1000
|
heap
|
page read and write
|
||
259E000
|
stack
|
page read and write
|
||
2540000
|
heap
|
page read and write
|
||
4730000
|
direct allocation
|
page read and write
|
||
482000
|
unkown
|
page readonly
|
||
2E2D000
|
heap
|
page read and write
|
||
4730000
|
direct allocation
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
4730000
|
direct allocation
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
3F01000
|
heap
|
page read and write
|
||
9DA000
|
heap
|
page read and write
|
||
490000
|
unkown
|
page read and write
|
||
46B3000
|
direct allocation
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2B00000
|
heap
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
93E000
|
stack
|
page read and write
|
||
2FD0000
|
direct allocation
|
page read and write
|
||
4859000
|
direct allocation
|
page read and write
|
||
31CD000
|
direct allocation
|
page execute and read and write
|
||
48CE000
|
direct allocation
|
page read and write
|
||
4859000
|
direct allocation
|
page read and write
|
||
3BFF000
|
stack
|
page read and write
|
||
4730000
|
direct allocation
|
page read and write
|
||
485D000
|
direct allocation
|
page read and write
|
||
4AB000
|
unkown
|
page readonly
|
||
89F000
|
stack
|
page read and write
|
||
46B3000
|
direct allocation
|
page read and write
|
||
48CE000
|
direct allocation
|
page read and write
|
||
3EDC000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
3D00000
|
heap
|
page read and write
|
||
3F01000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
4859000
|
direct allocation
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
32A0000
|
direct allocation
|
page read and write
|
||
9D0000
|
heap
|
page read and write
|
||
1730000
|
heap
|
page read and write
|
||
302D000
|
direct allocation
|
page execute and read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
4859000
|
direct allocation
|
page read and write
|
||
8AF000
|
stack
|
page read and write
|
||
1640000
|
heap
|
page read and write
|
||
48CE000
|
direct allocation
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2EFF000
|
stack
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
4730000
|
direct allocation
|
page read and write
|
||
2510000
|
heap
|
page read and write
|
||
3DFC000
|
heap
|
page read and write
|
||
32A0000
|
direct allocation
|
page read and write
|
||
48CE000
|
direct allocation
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
1645000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
3E82000
|
heap
|
page read and write
|
||
3ED1000
|
heap
|
page read and write
|
||
2817000
|
heap
|
page read and write
|
||
25DE000
|
stack
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
4590000
|
direct allocation
|
page read and write
|
||
2812000
|
heap
|
page read and write
|
||
4730000
|
direct allocation
|
page read and write
|
||
3F01000
|
heap
|
page read and write
|
||
2805000
|
heap
|
page read and write
|
||
4412000
|
heap
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
2602000
|
heap
|
page read and write
|
||
46B3000
|
direct allocation
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
3250000
|
direct allocation
|
page read and write
|
||
37FE000
|
stack
|
page read and write
|
||
3F17000
|
heap
|
page read and write
|
||
2560000
|
direct allocation
|
page read and write
|
||
3E2F000
|
heap
|
page read and write
|
||
247D000
|
stack
|
page read and write
|
||
2817000
|
heap
|
page read and write
|
||
2550000
|
heap
|
page read and write
|
||
3DD8000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
A0E000
|
heap
|
page read and write
|
||
482000
|
unkown
|
page readonly
|
||
485D000
|
direct allocation
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
31D1000
|
direct allocation
|
page execute and read and write
|
||
2E29000
|
heap
|
page read and write
|
||
9BE000
|
stack
|
page read and write
|
||
11CF000
|
stack
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
24A0000
|
system
|
page execute and read and write
|
||
4A7000
|
unkown
|
page read and write
|
||
8FE000
|
stack
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2805000
|
heap
|
page read and write
|
||
2FD9000
|
heap
|
page read and write
|
||
110000
|
heap
|
page read and write
|
||
485D000
|
direct allocation
|
page read and write
|
||
3E8C000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
46B3000
|
direct allocation
|
page read and write
|
||
3C00000
|
heap
|
page read and write
|
||
3DF1000
|
heap
|
page read and write
|
||
46B3000
|
direct allocation
|
page read and write
|
||
48CE000
|
direct allocation
|
page read and write
|
||
46B3000
|
direct allocation
|
page read and write
|
||
4859000
|
direct allocation
|
page read and write
|
||
32A0000
|
direct allocation
|
page read and write
|
||
2D00000
|
heap
|
page read and write
|
||
24F0000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
950000
|
heap
|
page read and write
|
||
2800000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
48CE000
|
direct allocation
|
page read and write
|
||
3FC4000
|
heap
|
page read and write
|
||
243D000
|
stack
|
page read and write
|
||
165B000
|
heap
|
page read and write
|
||
3DED000
|
heap
|
page read and write
|
||
2C01000
|
heap
|
page read and write
|
||
3EAF000
|
heap
|
page read and write
|
||
485D000
|
direct allocation
|
page read and write
|
||
8B4000
|
stack
|
page read and write
|
||
3E22000
|
heap
|
page read and write
|
||
2600000
|
heap
|
page read and write
|
||
485D000
|
direct allocation
|
page read and write
|
||
2F00000
|
direct allocation
|
page execute and read and write
|
||
16E0000
|
heap
|
page read and write
|
||
2BCF000
|
stack
|
page read and write
|
||
9A000
|
stack
|
page read and write
|
||
3242000
|
direct allocation
|
page execute and read and write
|
||
4859000
|
direct allocation
|
page read and write
|
||
2EE9000
|
heap
|
page read and write
|
||
2E9E000
|
heap
|
page read and write
|
||
2613000
|
heap
|
page read and write
|
||
3FC3000
|
heap
|
page read and write
|
||
4859000
|
direct allocation
|
page read and write
|
||
3E01000
|
heap
|
page read and write
|
||
3029000
|
direct allocation
|
page execute and read and write
|
There are 173 hidden memdumps, click here to show them.