Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\KRoMX2011.exe
|
"C:\Users\user\Desktop\KRoMX2011.exe"
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
136B000
|
heap
|
page read and write
|
||
1293000
|
heap
|
page read and write
|
||
8213000
|
direct allocation
|
page read and write
|
||
1311000
|
heap
|
page read and write
|
||
137A000
|
heap
|
page read and write
|
||
110000
|
heap
|
page read and write
|
||
71C0000
|
direct allocation
|
page read and write
|
||
140B000
|
heap
|
page read and write
|
||
1285000
|
heap
|
page read and write
|
||
3945000
|
direct allocation
|
page read and write
|
||
1298000
|
heap
|
page read and write
|
||
3277000
|
direct allocation
|
page read and write
|
||
129B000
|
heap
|
page read and write
|
||
1295000
|
heap
|
page read and write
|
||
1419000
|
heap
|
page read and write
|
||
1373000
|
heap
|
page read and write
|
||
80ED000
|
direct allocation
|
page read and write
|
||
A9F000
|
unkown
|
page read and write
|
||
69E0000
|
direct allocation
|
page read and write
|
||
3286000
|
direct allocation
|
page read and write
|
||
860E000
|
direct allocation
|
page read and write
|
||
130B000
|
heap
|
page read and write
|
||
13CD000
|
heap
|
page read and write
|
||
1289000
|
heap
|
page read and write
|
||
1296000
|
heap
|
page read and write
|
||
9A99000
|
heap
|
page read and write
|
||
753F000
|
direct allocation
|
page read and write
|
||
126E000
|
heap
|
page read and write
|
||
33E0000
|
heap
|
page read and write
|
||
12D7000
|
heap
|
page read and write
|
||
13C6000
|
heap
|
page read and write
|
||
95E0000
|
direct allocation
|
page read and write
|
||
12B2000
|
heap
|
page read and write
|
||
13DD000
|
heap
|
page read and write
|
||
13D2000
|
heap
|
page read and write
|
||
12A9000
|
heap
|
page read and write
|
||
8ED0000
|
direct allocation
|
page read and write
|
||
9AA1000
|
heap
|
page read and write
|
||
699F000
|
direct allocation
|
page read and write
|
||
1279000
|
heap
|
page read and write
|
||
1360000
|
heap
|
page read and write
|
||
8320000
|
direct allocation
|
page read and write
|
||
12B7000
|
heap
|
page read and write
|
||
328D000
|
direct allocation
|
page read and write
|
||
960B000
|
direct allocation
|
page read and write
|
||
1375000
|
heap
|
page read and write
|
||
12F5000
|
heap
|
page read and write
|
||
B8C000
|
unkown
|
page read and write
|
||
1290000
|
heap
|
page read and write
|
||
12B7000
|
heap
|
page read and write
|
||
960D000
|
direct allocation
|
page read and write
|
||
1336000
|
heap
|
page read and write
|
||
1393000
|
heap
|
page read and write
|
||
1382000
|
heap
|
page read and write
|
||
1283000
|
heap
|
page read and write
|
||
9B89000
|
direct allocation
|
page read and write
|
||
76EF000
|
direct allocation
|
page read and write
|
||
13D2000
|
heap
|
page read and write
|
||
129C000
|
heap
|
page read and write
|
||
9A50000
|
heap
|
page read and write
|
||
1370000
|
heap
|
page read and write
|
||
7322000
|
direct allocation
|
page read and write
|
||
12C9000
|
heap
|
page read and write
|
||
129B000
|
heap
|
page read and write
|
||
9DAD000
|
direct allocation
|
page read and write
|
||
1272000
|
heap
|
page read and write
|
||
9A76000
|
heap
|
page read and write
|
||
3260000
|
direct allocation
|
page read and write
|
||
13D2000
|
heap
|
page read and write
|
||
133B000
|
heap
|
page read and write
|
||
1384000
|
heap
|
page read and write
|
||
73FF000
|
direct allocation
|
page read and write
|
||
1369000
|
heap
|
page read and write
|
||
39B3000
|
direct allocation
|
page read and write
|
||
12A4000
|
heap
|
page read and write
|
||
93AB000
|
direct allocation
|
page read and write
|
||
1357000
|
heap
|
page read and write
|
||
9350000
|
direct allocation
|
page read and write
|
||
BDF000
|
unkown
|
page readonly
|
||
1303000
|
heap
|
page read and write
|
||
1376000
|
heap
|
page read and write
|
||
130E000
|
heap
|
page read and write
|
||
1407000
|
heap
|
page read and write
|
||
12C3000
|
heap
|
page read and write
|
||
95FB000
|
direct allocation
|
page read and write
|
||
7775000
|
direct allocation
|
page read and write
|
||
12C3000
|
heap
|
page read and write
|
||
784E000
|
stack
|
page read and write
|
||
69EF000
|
direct allocation
|
page read and write
|
||
76C0000
|
direct allocation
|
page read and write
|
||
9D88000
|
direct allocation
|
page read and write
|
||
81E0000
|
direct allocation
|
page read and write
|
||
7FB4000
|
direct allocation
|
page read and write
|
||
1369000
|
heap
|
page read and write
|
||
140B000
|
heap
|
page read and write
|
||
77E3000
|
direct allocation
|
page read and write
|
||
12E5000
|
heap
|
page read and write
|
||
133B000
|
heap
|
page read and write
|
||
1410000
|
heap
|
page read and write
|
||
7A8E000
|
stack
|
page read and write
|
||
13CE000
|
heap
|
page read and write
|
||
6D35000
|
direct allocation
|
page read and write
|
||
71D4000
|
direct allocation
|
page read and write
|
||
13F9000
|
heap
|
page read and write
|
||
98A8000
|
direct allocation
|
page read and write
|
||
12F5000
|
heap
|
page read and write
|
||
1316000
|
heap
|
page read and write
|
||
9BCF000
|
direct allocation
|
page read and write
|
||
12A6000
|
heap
|
page read and write
|
||
1370000
|
heap
|
page read and write
|
||
70D1000
|
direct allocation
|
page read and write
|
||
8F4C000
|
direct allocation
|
page read and write
|
||
131D000
|
heap
|
page read and write
|
||
12BB000
|
heap
|
page read and write
|
||
8FFA000
|
direct allocation
|
page read and write
|
||
9B90000
|
direct allocation
|
page read and write
|
||
9520000
|
direct allocation
|
page read and write
|
||
9AB1000
|
heap
|
page read and write
|
||
9C1F000
|
direct allocation
|
page read and write
|
||
9B3B000
|
direct allocation
|
page read and write
|
||
9A68000
|
heap
|
page read and write
|
||
12CC000
|
heap
|
page read and write
|
||
12AA000
|
heap
|
page read and write
|
||
12FF000
|
heap
|
page read and write
|
||
12C1000
|
heap
|
page read and write
|
||
1384000
|
heap
|
page read and write
|
||
65E5000
|
direct allocation
|
page read and write
|
||
118E000
|
stack
|
page read and write
|
||
BA4000
|
unkown
|
page read and write
|
||
98F0000
|
direct allocation
|
page read and write
|
||
9DA2000
|
direct allocation
|
page read and write
|
||
9634000
|
direct allocation
|
page read and write
|
||
9DB4000
|
direct allocation
|
page read and write
|
||
1374000
|
heap
|
page read and write
|
||
114E000
|
stack
|
page read and write
|
||
12EA000
|
heap
|
page read and write
|
||
1324000
|
heap
|
page read and write
|
||
961F000
|
direct allocation
|
page read and write
|
||
9A82000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
9D9B000
|
direct allocation
|
page read and write
|
||
1271000
|
heap
|
page read and write
|
||
9C17000
|
direct allocation
|
page read and write
|
||
12C3000
|
heap
|
page read and write
|
||
1295000
|
heap
|
page read and write
|
||
9DAB000
|
direct allocation
|
page read and write
|
||
9A4F000
|
heap
|
page read and write
|
||
1370000
|
heap
|
page read and write
|
||
3D20000
|
direct allocation
|
page read and write
|
||
5140000
|
trusted library allocation
|
page read and write
|
||
9010000
|
direct allocation
|
page read and write
|
||
125B000
|
heap
|
page read and write
|
||
134D000
|
heap
|
page read and write
|
||
12CB000
|
heap
|
page read and write
|
||
80A0000
|
direct allocation
|
page read and write
|
||
5C40000
|
heap
|
page read and write
|
||
68A0000
|
direct allocation
|
page read and write
|
||
1414000
|
heap
|
page read and write
|
||
12DC000
|
heap
|
page read and write
|
||
3960000
|
direct allocation
|
page read and write
|
||
13F8000
|
heap
|
page read and write
|
||
1C00000
|
heap
|
page read and write
|
||
12FD000
|
heap
|
page read and write
|
||
9AAC000
|
heap
|
page read and write
|
||
7580000
|
direct allocation
|
page read and write
|
||
7659000
|
direct allocation
|
page read and write
|
||
9A72000
|
heap
|
page read and write
|
||
9A82000
|
heap
|
page read and write
|
||
6FA5000
|
direct allocation
|
page read and write
|
||
BD7000
|
unkown
|
page read and write
|
||
8396000
|
direct allocation
|
page read and write
|
||
84DD000
|
direct allocation
|
page read and write
|
||
9A5C000
|
heap
|
page read and write
|
||
1392000
|
heap
|
page read and write
|
||
12D9000
|
heap
|
page read and write
|
||
130E000
|
heap
|
page read and write
|
||
12E6000
|
heap
|
page read and write
|
||
12B1000
|
heap
|
page read and write
|
||
9A6D000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
905F000
|
direct allocation
|
page read and write
|
||
141B000
|
heap
|
page read and write
|
||
3AED000
|
direct allocation
|
page read and write
|
||
8264000
|
direct allocation
|
page read and write
|
||
7080000
|
direct allocation
|
page read and write
|
||
7300000
|
direct allocation
|
page read and write
|
||
1C05000
|
heap
|
page read and write
|
||
9601000
|
direct allocation
|
page read and write
|
||
124D000
|
heap
|
page read and write
|
||
161F000
|
stack
|
page read and write
|
||
137F000
|
heap
|
page read and write
|
||
8F45000
|
direct allocation
|
page read and write
|
||
9B30000
|
direct allocation
|
page read and write
|
||
12B7000
|
heap
|
page read and write
|
||
110E000
|
stack
|
page read and write
|
||
9A99000
|
heap
|
page read and write
|
||
6CAA000
|
direct allocation
|
page read and write
|
||
13E2000
|
heap
|
page read and write
|
||
12C3000
|
heap
|
page read and write
|
||
9AB0000
|
heap
|
page read and write
|
||
69F1000
|
direct allocation
|
page read and write
|
||
90A7000
|
direct allocation
|
page read and write
|
||
BE3000
|
unkown
|
page write copy
|
||
BB8000
|
unkown
|
page read and write
|
||
95000
|
stack
|
page read and write
|
||
8AF0000
|
heap
|
page read and write
|
||
B95000
|
unkown
|
page read and write
|
||
5EC8000
|
direct allocation
|
page read and write
|
||
6E7E000
|
direct allocation
|
page read and write
|
||
BE4000
|
unkown
|
page readonly
|
||
9D7F000
|
direct allocation
|
page read and write
|
||
919F000
|
direct allocation
|
page read and write
|
||
1404000
|
heap
|
page read and write
|
||
6520000
|
direct allocation
|
page read and write
|
||
6AD0000
|
direct allocation
|
page read and write
|
||
9A30000
|
heap
|
page read and write
|
||
12A3000
|
heap
|
page read and write
|
||
10CB000
|
stack
|
page read and write
|
||
9A89000
|
heap
|
page read and write
|
||
13EE000
|
heap
|
page read and write
|
||
9E83000
|
direct allocation
|
page read and write
|
||
97B0000
|
direct allocation
|
page read and write
|
||
BB1000
|
unkown
|
page read and write
|
||
13C6000
|
heap
|
page read and write
|
||
91F5000
|
direct allocation
|
page read and write
|
||
848C000
|
direct allocation
|
page read and write
|
||
6060000
|
direct allocation
|
page execute and read and write
|
||
9A71000
|
heap
|
page read and write
|
||
91A6000
|
direct allocation
|
page read and write
|
||
1383000
|
heap
|
page read and write
|
||
1286000
|
heap
|
page read and write
|
||
141B000
|
heap
|
page read and write
|
||
1BE0000
|
heap
|
page read and write
|
||
9A84000
|
heap
|
page read and write
|
||
1338000
|
heap
|
page read and write
|
||
1269000
|
heap
|
page read and write
|
||
1347000
|
heap
|
page read and write
|
||
6F40000
|
direct allocation
|
page read and write
|
||
9D91000
|
direct allocation
|
page read and write
|
||
13CE000
|
heap
|
page read and write
|
||
68AE000
|
direct allocation
|
page read and write
|
||
9DC6000
|
direct allocation
|
page read and write
|
||
12A6000
|
heap
|
page read and write
|
||
1373000
|
heap
|
page read and write
|
||
A9F000
|
unkown
|
page write copy
|
||
9E15000
|
direct allocation
|
page read and write
|
||
3B45000
|
direct allocation
|
page read and write
|
||
1311000
|
heap
|
page read and write
|
||
97BD000
|
direct allocation
|
page read and write
|
||
68B000
|
unkown
|
page execute read
|
||
1200000
|
heap
|
page read and write
|
||
B9F000
|
unkown
|
page read and write
|
||
13F2000
|
heap
|
page read and write
|
||
9A5F000
|
heap
|
page read and write
|
||
3BE0000
|
direct allocation
|
page read and write
|
||
128F000
|
heap
|
page read and write
|
||
1A1F000
|
stack
|
page read and write
|
||
3909000
|
direct allocation
|
page read and write
|
||
7C8F000
|
stack
|
page read and write
|
||
923F000
|
direct allocation
|
page read and write
|
||
140B000
|
heap
|
page read and write
|
||
1404000
|
heap
|
page read and write
|
||
9E1C000
|
direct allocation
|
page read and write
|
||
6F0A000
|
direct allocation
|
page read and write
|
||
140E000
|
heap
|
page read and write
|
||
128D000
|
heap
|
page read and write
|
||
9AAA000
|
heap
|
page read and write
|
||
1413000
|
heap
|
page read and write
|
||
1318000
|
heap
|
page read and write
|
||
395D000
|
direct allocation
|
page read and write
|
||
7440000
|
direct allocation
|
page read and write
|
||
8820000
|
direct allocation
|
page execute and read and write
|
||
129E000
|
heap
|
page read and write
|
||
1386000
|
heap
|
page read and write
|
||
9A6E000
|
heap
|
page read and write
|
||
128B000
|
heap
|
page read and write
|
||
9AAA000
|
heap
|
page read and write
|
||
3D5E000
|
direct allocation
|
page read and write
|
||
BDF000
|
unkown
|
page readonly
|
||
1336000
|
heap
|
page read and write
|
||
1278000
|
heap
|
page read and write
|
||
12F5000
|
heap
|
page read and write
|
||
9A8E000
|
heap
|
page read and write
|
||
9A4D000
|
heap
|
page read and write
|
||
3A0B000
|
direct allocation
|
page read and write
|
||
1351000
|
heap
|
page read and write
|
||
C36000
|
unkown
|
page readonly
|
||
9E73000
|
direct allocation
|
page read and write
|
||
6CA0000
|
direct allocation
|
page read and write
|
||
7810000
|
trusted library allocation
|
page read and write
|
||
1293000
|
heap
|
page read and write
|
||
1293000
|
heap
|
page read and write
|
||
72F1000
|
direct allocation
|
page read and write
|
||
3C77000
|
direct allocation
|
page read and write
|
||
962D000
|
direct allocation
|
page read and write
|
||
1412000
|
heap
|
page read and write
|
||
12C1000
|
heap
|
page read and write
|
||
9A7C000
|
heap
|
page read and write
|
||
94D0000
|
direct allocation
|
page execute and read and write
|
||
135B000
|
heap
|
page read and write
|
||
9E0E000
|
direct allocation
|
page read and write
|
||
135E000
|
heap
|
page read and write
|
||
99EF000
|
direct allocation
|
page read and write
|
||
8022000
|
direct allocation
|
page read and write
|
||
100000
|
heap
|
page read and write
|
||
1313000
|
heap
|
page read and write
|
||
9A71000
|
heap
|
page read and write
|
||
12AF000
|
heap
|
page read and write
|
||
122E000
|
heap
|
page read and write
|
||
97DA000
|
direct allocation
|
page read and write
|
||
86E0000
|
direct allocation
|
page read and write
|
||
1379000
|
heap
|
page read and write
|
||
1419000
|
heap
|
page read and write
|
||
33E3000
|
heap
|
page read and write
|
||
9DBD000
|
direct allocation
|
page read and write
|
||
128E000
|
heap
|
page read and write
|
||
13E6000
|
heap
|
page read and write
|
||
1343000
|
heap
|
page read and write
|
||
6C30000
|
direct allocation
|
page execute and read and write
|
||
7ECF000
|
stack
|
page read and write
|
||
1378000
|
heap
|
page read and write
|
||
3DB6000
|
direct allocation
|
page read and write
|
||
9A89000
|
heap
|
page read and write
|
||
9A85000
|
heap
|
page read and write
|
||
127D000
|
heap
|
page read and write
|
||
7A4F000
|
stack
|
page read and write
|
||
339E000
|
stack
|
page read and write
|
||
BAE000
|
unkown
|
page read and write
|
||
13F2000
|
heap
|
page read and write
|
||
13F4000
|
heap
|
page read and write
|
||
134A000
|
heap
|
page read and write
|
||
9A7D000
|
heap
|
page read and write
|
||
1220000
|
heap
|
page read and write
|
||
8169000
|
direct allocation
|
page read and write
|
||
12A9000
|
heap
|
page read and write
|
||
12FE000
|
heap
|
page read and write
|
||
38C6000
|
direct allocation
|
page read and write
|
||
9AA5000
|
heap
|
page read and write
|
||
9E6B000
|
direct allocation
|
page read and write
|
||
127D000
|
heap
|
page read and write
|
||
13E2000
|
heap
|
page read and write
|
||
9E4F000
|
direct allocation
|
page read and write
|
||
1340000
|
heap
|
page read and write
|
||
9A5C000
|
heap
|
page read and write
|
||
1257000
|
heap
|
page read and write
|
||
1391000
|
heap
|
page read and write
|
||
9540000
|
direct allocation
|
page read and write
|
||
50C0000
|
trusted library allocation
|
page read and write
|
||
1407000
|
heap
|
page read and write
|
||
38A4000
|
direct allocation
|
page read and write
|
||
181F000
|
stack
|
page read and write
|
||
3949000
|
direct allocation
|
page read and write
|
||
140B000
|
heap
|
page read and write
|
||
9E91000
|
direct allocation
|
page read and write
|
||
9A4B000
|
heap
|
page read and write
|
||
13CE000
|
heap
|
page read and write
|
||
130B000
|
heap
|
page read and write
|
||
3220000
|
direct allocation
|
page read and write
|
||
12C5000
|
heap
|
page read and write
|
||
9AB2000
|
heap
|
page read and write
|
||
85A0000
|
direct allocation
|
page read and write
|
||
12C9000
|
heap
|
page read and write
|
||
1352000
|
heap
|
page read and write
|
||
1287000
|
heap
|
page read and write
|
||
1299000
|
heap
|
page read and write
|
||
9A78000
|
heap
|
page read and write
|
||
38DD000
|
direct allocation
|
page read and write
|
||
9A99000
|
heap
|
page read and write
|
||
11C0000
|
heap
|
page read and write
|
||
13F1000
|
heap
|
page read and write
|
||
139C000
|
heap
|
page read and write
|
||
6E00000
|
direct allocation
|
page read and write
|
||
76B8000
|
direct allocation
|
page read and write
|
||
6510000
|
direct allocation
|
page read and write
|
||
9A9A000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
137E000
|
heap
|
page read and write
|
||
6998000
|
direct allocation
|
page read and write
|
||
9E7A000
|
direct allocation
|
page read and write
|
||
9A82000
|
heap
|
page read and write
|
||
128D000
|
heap
|
page read and write
|
||
1417000
|
heap
|
page read and write
|
||
129F000
|
heap
|
page read and write
|
||
1317000
|
heap
|
page read and write
|
||
139B000
|
heap
|
page read and write
|
||
1251000
|
heap
|
page read and write
|
||
115000
|
heap
|
page read and write
|
||
3820000
|
direct allocation
|
page read and write
|
||
9A51000
|
heap
|
page read and write
|
||
9A51000
|
heap
|
page read and write
|
||
12A6000
|
heap
|
page read and write
|
||
9614000
|
direct allocation
|
page read and write
|
||
13D9000
|
heap
|
page read and write
|
||
5EA1000
|
direct allocation
|
page read and write
|
||
1327000
|
heap
|
page read and write
|
||
1381000
|
heap
|
page read and write
|
||
1278000
|
heap
|
page read and write
|
||
9123000
|
direct allocation
|
page read and write
|
||
8345000
|
direct allocation
|
page read and write
|
||
9412000
|
direct allocation
|
page read and write
|
||
8FA2000
|
direct allocation
|
page read and write
|
||
13FC000
|
heap
|
page read and write
|
||
12BD000
|
heap
|
page read and write
|
||
8460000
|
direct allocation
|
page read and write
|
||
1381000
|
heap
|
page read and write
|
||
3343000
|
direct allocation
|
page read and write
|
||
129E000
|
heap
|
page read and write
|
||
13B5000
|
heap
|
page read and write
|
||
9150000
|
direct allocation
|
page read and write
|
||
3B5F000
|
stack
|
page read and write
|
||
13FE000
|
heap
|
page read and write
|
||
5D94000
|
direct allocation
|
page read and write
|
||
1392000
|
heap
|
page read and write
|
||
137A000
|
heap
|
page read and write
|
||
1357000
|
heap
|
page read and write
|
||
6800000
|
direct allocation
|
page execute and read and write
|
||
13C6000
|
heap
|
page read and write
|
||
1210000
|
direct allocation
|
page execute and read and write
|
||
1362000
|
heap
|
page read and write
|
||
7F60000
|
direct allocation
|
page read and write
|
||
12D6000
|
heap
|
page read and write
|
||
136D000
|
heap
|
page read and write
|
||
9A4C000
|
heap
|
page read and write
|
||
134A000
|
heap
|
page read and write
|
||
9AAC000
|
heap
|
page read and write
|
||
1296000
|
heap
|
page read and write
|
||
124A000
|
heap
|
page read and write
|
||
3C2D000
|
direct allocation
|
page read and write
|
||
9A7C000
|
heap
|
page read and write
|
||
1363000
|
heap
|
page read and write
|
||
13D2000
|
heap
|
page read and write
|
||
BBA000
|
unkown
|
page read and write
|
||
BC1000
|
unkown
|
page read and write
|
||
13CE000
|
heap
|
page read and write
|
||
1417000
|
heap
|
page read and write
|
||
1302000
|
heap
|
page read and write
|
||
1C0A000
|
heap
|
page read and write
|
||
9A71000
|
heap
|
page read and write
|
||
1347000
|
heap
|
page read and write
|
||
9A76000
|
heap
|
page read and write
|
||
9A7E000
|
heap
|
page read and write
|
||
3AA0000
|
direct allocation
|
page read and write
|
||
1261000
|
heap
|
page read and write
|
||
6CD6000
|
direct allocation
|
page read and write
|
||
12A4000
|
heap
|
page read and write
|
||
7CCE000
|
stack
|
page read and write
|
||
9A6C000
|
heap
|
page read and write
|
||
129E000
|
heap
|
page read and write
|
||
1311000
|
heap
|
page read and write
|
||
132F000
|
heap
|
page read and write
|
||
5D91000
|
direct allocation
|
page read and write
|
||
BBE000
|
unkown
|
page read and write
|
||
9DBF000
|
direct allocation
|
page read and write
|
||
1417000
|
heap
|
page read and write
|
There are 444 hidden memdumps, click here to show them.