Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_00401E86 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C884B3 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8D3CE |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C880CC |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C88CCE |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C860C1 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C804D3 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C868E8 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86CE3 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C804E6 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C890E6 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C884F4 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C894A0 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C884B6 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86C56 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86069 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86878 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8587D |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8647E |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C88C06 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86014 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C865D8 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C805DA |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C865DE |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C869D6 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C865E9 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86580 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C80584 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86985 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86D95 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C869A0 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C861BE |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C89154 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86501 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8051E |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C88D15 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86928 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8613F |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C862E2 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C866F5 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C88AF5 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C88A8F |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8C285 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C88297 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C85EB9 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86249 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C85A55 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86661 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86A65 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86E28 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C85E2C |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C85A31 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C863F6 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86B84 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C85FA4 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C88BBA |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86BB1 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8674D |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C85F46 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8637E |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C86B09 |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C884B3 NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C880CC NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C884F4 NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C884B6 NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C885B2 NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8855C NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C886AA NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C88631 NtAllocateVirtualMemory, |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_00406A78 push ebp; ret |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_004081F5 push eax; ret |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C89595 push es; ret |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8B11A push FFFFFFB9h; retf |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8293C push ebp; iretd |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C83EA4 push ebx; ret |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8A906 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C87AD4 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8C285 mov eax, dword ptr fs:[00000030h] |
Source: C:\Users\user\Desktop\PKO_TRANS_DETAILS_20211216_0809521.exe | Code function: 0_2_04C8B397 mov eax, dword ptr fs:[00000030h] |
Source: PKO_TRANS_DETAILS_20211216_0809521.exe, 00000000.00000002.803824263.0000000000C50000.00000002.00020000.sdmp | Binary or memory string: Program Manager |
Source: PKO_TRANS_DETAILS_20211216_0809521.exe, 00000000.00000002.803824263.0000000000C50000.00000002.00020000.sdmp | Binary or memory string: Shell_TrayWnd |
Source: PKO_TRANS_DETAILS_20211216_0809521.exe, 00000000.00000002.803824263.0000000000C50000.00000002.00020000.sdmp | Binary or memory string: Progman |
Source: PKO_TRANS_DETAILS_20211216_0809521.exe, 00000000.00000002.803824263.0000000000C50000.00000002.00020000.sdmp | Binary or memory string: Progmanlock |