Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
PGHPC-10-0033-FZB-001.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\epistemology
|
data
|
modified
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\PGHPC-10-0033-FZB-001.exe
|
"C:\Users\user\Desktop\PGHPC-10-0033-FZB-001.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\PGHPC-10-0033-FZB-001.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
490000
|
unkown
|
page write copy
|
||
|
400000
|
unkown
|
page readonly
|
||
|
30B0000
|
heap
|
page read and write
|
||
|
403D000
|
heap
|
page read and write
|
||
|
32A0000
|
direct allocation
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
160E000
|
stack
|
page read and write
|
||
|
3E97000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
15CE000
|
stack
|
page read and write
|
||
|
32A0000
|
direct allocation
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
4040000
|
heap
|
page read and write
|
||
|
2901000
|
heap
|
page read and write
|
||
|
F0000
|
heap
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
9DE000
|
heap
|
page read and write
|
||
|
309E000
|
direct allocation
|
page execute and read and write
|
||
|
3F00000
|
heap
|
page read and write
|
||
|
2C23000
|
heap
|
page read and write
|
||
|
4309000
|
heap
|
page read and write
|
||
|
30B4000
|
heap
|
page read and write
|
||
|
3EEC000
|
heap
|
page execute and read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
3DF9000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
3EBD000
|
heap
|
page read and write
|
||
|
32A0000
|
direct allocation
|
page read and write
|
||
|
3ED1000
|
heap
|
page read and write
|
||
|
259E000
|
stack
|
page read and write
|
||
|
2540000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
2E2D000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
3F01000
|
heap
|
page read and write
|
||
|
9DA000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2B00000
|
heap
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
93E000
|
stack
|
page read and write
|
||
|
2FD0000
|
direct allocation
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
31CD000
|
direct allocation
|
page execute and read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
3BFF000
|
stack
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
89F000
|
stack
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
3EDC000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
3D00000
|
heap
|
page read and write
|
||
|
3F01000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
32A0000
|
direct allocation
|
page read and write
|
||
|
9D0000
|
heap
|
page read and write
|
||
|
1730000
|
heap
|
page read and write
|
||
|
302D000
|
direct allocation
|
page execute and read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
8AF000
|
stack
|
page read and write
|
||
|
1640000
|
heap
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2EFF000
|
stack
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
2510000
|
heap
|
page read and write
|
||
|
3DFC000
|
heap
|
page read and write
|
||
|
32A0000
|
direct allocation
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
1645000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
3E82000
|
heap
|
page read and write
|
||
|
3ED1000
|
heap
|
page read and write
|
||
|
2817000
|
heap
|
page read and write
|
||
|
25DE000
|
stack
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
2812000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
3F01000
|
heap
|
page read and write
|
||
|
2805000
|
heap
|
page read and write
|
||
|
4412000
|
heap
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
2602000
|
heap
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
3250000
|
direct allocation
|
page read and write
|
||
|
37FE000
|
stack
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
2560000
|
direct allocation
|
page read and write
|
||
|
3E2F000
|
heap
|
page read and write
|
||
|
247D000
|
stack
|
page read and write
|
||
|
2817000
|
heap
|
page read and write
|
||
|
2550000
|
heap
|
page read and write
|
||
|
3DD8000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
A0E000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
31D1000
|
direct allocation
|
page execute and read and write
|
||
|
2E29000
|
heap
|
page read and write
|
||
|
9BE000
|
stack
|
page read and write
|
||
|
11CF000
|
stack
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
24A0000
|
system
|
page execute and read and write
|
||
|
4A7000
|
unkown
|
page read and write
|
||
|
8FE000
|
stack
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2805000
|
heap
|
page read and write
|
||
|
2FD9000
|
heap
|
page read and write
|
||
|
110000
|
heap
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
3E8C000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
3C00000
|
heap
|
page read and write
|
||
|
3DF1000
|
heap
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
32A0000
|
direct allocation
|
page read and write
|
||
|
2D00000
|
heap
|
page read and write
|
||
|
24F0000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
950000
|
heap
|
page read and write
|
||
|
2800000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
3FC4000
|
heap
|
page read and write
|
||
|
243D000
|
stack
|
page read and write
|
||
|
165B000
|
heap
|
page read and write
|
||
|
3DED000
|
heap
|
page read and write
|
||
|
2C01000
|
heap
|
page read and write
|
||
|
3EAF000
|
heap
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
8B4000
|
stack
|
page read and write
|
||
|
3E22000
|
heap
|
page read and write
|
||
|
2600000
|
heap
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
2F00000
|
direct allocation
|
page execute and read and write
|
||
|
16E0000
|
heap
|
page read and write
|
||
|
2BCF000
|
stack
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
3242000
|
direct allocation
|
page execute and read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
2EE9000
|
heap
|
page read and write
|
||
|
2E9E000
|
heap
|
page read and write
|
||
|
2613000
|
heap
|
page read and write
|
||
|
3FC3000
|
heap
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
3E01000
|
heap
|
page read and write
|
||
|
3029000
|
direct allocation
|
page execute and read and write
|
There are 173 hidden memdumps, click here to show them.