Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
PO#001498.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\cerecloths
|
data
|
modified
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\PO#001498.exe
|
"C:\Users\user\Desktop\PO#001498.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\PO#001498.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
400000
|
system
|
page execute and read and write
|
|
|
|
3550000
|
direct allocation
|
page read and write
|
|
|
|
4720000
|
direct allocation
|
page read and write
|
||
|
3DC9000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
397E000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
42E1000
|
heap
|
page read and write
|
||
|
2870000
|
heap
|
page read and write
|
||
|
3E14000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
2EFF000
|
stack
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
2C17000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
3EDA000
|
heap
|
page execute and read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
2C12000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3DE2000
|
heap
|
page read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page read and write
|
||
|
29DE000
|
stack
|
page read and write
|
||
|
3EE0000
|
heap
|
page read and write
|
||
|
89F000
|
stack
|
page read and write
|
||
|
2950000
|
heap
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
A35000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
955000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3BE0000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page write copy
|
||
|
8FE000
|
stack
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
970000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
356E000
|
stack
|
page read and write
|
||
|
980000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
3EF4000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
2A00000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3DD4000
|
heap
|
page read and write
|
||
|
15FF000
|
stack
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3000000
|
heap
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
35A0000
|
direct allocation
|
page read and write
|
||
|
319E000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
2C24000
|
heap
|
page read and write
|
||
|
3200000
|
direct allocation
|
page execute and read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
A0E000
|
heap
|
page read and write
|
||
|
3329000
|
direct allocation
|
page execute and read and write
|
||
|
2FFF000
|
stack
|
page read and write
|
||
|
3DFA000
|
heap
|
page read and write
|
||
|
3B05000
|
heap
|
page read and write
|
||
|
3AF0000
|
heap
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
3EDB000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
A32000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3F63000
|
heap
|
page read and write
|
||
|
93E000
|
stack
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
4A7000
|
unkown
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
2C05000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3EEA000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
35A0000
|
direct allocation
|
page read and write
|
||
|
332D000
|
direct allocation
|
page execute and read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
2960000
|
direct allocation
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3DD7000
|
heap
|
page read and write
|
||
|
A0A000
|
heap
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
3B25000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3129000
|
heap
|
page read and write
|
||
|
34D1000
|
direct allocation
|
page execute and read and write
|
||
|
2D01000
|
heap
|
page read and write
|
||
|
A3E000
|
heap
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
1F5000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
1E0000
|
heap
|
page read and write
|
||
|
2A02000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
5DC000
|
stack
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
59D000
|
stack
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
8AF000
|
stack
|
page read and write
|
||
|
35A0000
|
direct allocation
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
35A0000
|
direct allocation
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3001000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
100000
|
heap
|
page read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3E8C000
|
heap
|
page read and write
|
||
|
9FE000
|
stack
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3F19000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3F10000
|
heap
|
page read and write
|
||
|
2E00000
|
heap
|
page read and write
|
||
|
9A0000
|
heap
|
page read and write
|
||
|
A00000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
2C00000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3542000
|
direct allocation
|
page execute and read and write
|
||
|
396F000
|
stack
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
8B4000
|
stack
|
page read and write
|
||
|
3EDB000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
35A0000
|
direct allocation
|
page read and write
|
||
|
35A0000
|
direct allocation
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
339E000
|
direct allocation
|
page execute and read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
2F23000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
950000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3CE0000
|
heap
|
page read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
34CD000
|
direct allocation
|
page execute and read and write
|
||
|
312D000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
11FF000
|
stack
|
page read and write
|
||
|
2DEE000
|
stack
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
3E21000
|
heap
|
page read and write
|
||
|
2C05000
|
heap
|
page read and write
|
||
|
830000
|
heap
|
page read and write
|
||
|
43F3000
|
heap
|
page read and write
|
||
|
3DDC000
|
heap
|
page read and write
|
||
|
299E000
|
stack
|
page read and write
|
||
|
3B00000
|
direct allocation
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
2E24000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
810000
|
heap
|
page read and write
|
||
|
3F19000
|
heap
|
page read and write
|
||
|
2E20000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3F69000
|
heap
|
page read and write
|
||
|
2C17000
|
heap
|
page read and write
|
||
|
2A13000
|
heap
|
page read and write
|
There are 234 hidden memdumps, click here to show them.