Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
7RsDGpyOQk.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Temp\0o3656j
|
SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie
0x24, schema 4, UTF-8, version-valid-for 2
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Sancha
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\autE71E.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\autE77D.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\pensum
|
ASCII text, with very long lines (28756), with no line terminators
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\7RsDGpyOQk.exe
|
"C:\Users\user\Desktop\7RsDGpyOQk.exe"
|
||
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\7RsDGpyOQk.exe"
|
||
C:\Program Files (x86)\ptvgYRELOxXEnkVTYfeWiOcLZYZnRRRQwCwybEFTKeWJvTAPtIEqzYqrGpJfBZEigygpiAIp\UJCHZIamnVz.exe
|
"C:\Program Files (x86)\ptvgYRELOxXEnkVTYfeWiOcLZYZnRRRQwCwybEFTKeWJvTAPtIEqzYqrGpJfBZEigygpiAIp\UJCHZIamnVz.exe"
|
||
C:\Windows\SysWOW64\subst.exe
|
"C:\Windows\SysWOW64\subst.exe"
|
||
C:\Program Files (x86)\ptvgYRELOxXEnkVTYfeWiOcLZYZnRRRQwCwybEFTKeWJvTAPtIEqzYqrGpJfBZEigygpiAIp\UJCHZIamnVz.exe
|
"C:\Program Files (x86)\ptvgYRELOxXEnkVTYfeWiOcLZYZnRRRQwCwybEFTKeWJvTAPtIEqzYqrGpJfBZEigygpiAIp\UJCHZIamnVz.exe"
|
||
C:\Program Files\Mozilla Firefox\firefox.exe
|
"C:\Program Files\Mozilla Firefox\Firefox.exe"
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://www.eoghenluire.com/i3r0/?TvpPfhGp=2wwNf3uh0L74coHFwFoEwJLZZncz0eUv2PDbuROkov9Y0f520r30B60Dc6sw70wr8VqsfcnHqRGaEDIOfEcEM+xuD/kdVb8f6u/HqHihPox78cRvPoIrzf8=&Y664G=SttDen986
|
76.223.105.230
|
||
http://www.eoghenluire.com/i3r0/
|
76.223.105.230
|
||
https://duckduckgo.com/chrome_newtab
|
unknown
|
||
https://g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js
|
unknown
|
||
https://duckduckgo.com/ac/?q=
|
unknown
|
||
https://js.users.51.la/21879113.js
|
unknown
|
||
http://www.n-ambu.com/2gp2/?TvpPfhGp=Y99li2SS0jFkeE2dW5fsIsqznCbyzAVNDcc+JEah7Ezrvxte8MpPDgExvKgilbZfLMJ3frvQmAcJOgkNzzn64tqjGSAfcd+mGzUUslxnkGXz4OyUxuBjmso=&Y664G=SttDen986
|
46.30.211.38
|
||
http://www.qrdinamicos.com/ndwb/?TvpPfhGp=/qyS5uFMStFKGiC7gxlopLbluV61vu+RjDYXbeo3nHi2h/5APNXwWrEdkOsmqUKqQbrnCVB7EyQd8x04JYqB6drGuaM8rj1nd0RRI3hUZH7sElvU+ZecVtI=&Y664G=SttDen986
|
217.160.0.119
|
||
https://g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js
|
unknown
|
||
http://www.costmoon.com/8g7d/
|
74.208.236.38
|
||
https://cdn.jqueryscdns.net/jquery-3.7.1.min.js
|
unknown
|
||
http://www.n-ambu.com/2gp2/
|
46.30.211.38
|
||
https://track.uc.cn/collect
|
unknown
|
||
http://www.114lala.net/ixzv/
|
154.23.7.170
|
||
http://www.dudapolicarpo.online/8pbu/
|
162.240.81.18
|
||
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
|
unknown
|
||
http://push.zhanzhang.baidu.com/push.js
|
unknown
|
||
http://www.immedu.website/p5xb/?TvpPfhGp=gZSYabCnKqSr1J4TudILkU7OUr6zW8quS0K3SSEWSlTvQpNCKBnGards6ZD8X7yXO9b/F0Vh3EPZ273HAe14Zo8L5xIdhoBu33QGrF37ZE8rNfV+CMbs4i4=&Y664G=SttDen986
|
185.106.178.60
|
||
http://nginx.net/
|
unknown
|
||
http://www.shabygreen.top/4n8t/
|
203.161.41.205
|
||
http://fedoraproject.org/
|
unknown
|
||
http://vendasnaweb1.com/j5qz/?TvpPfhGp=wDVhqh7/L6S0ssmI
|
unknown
|
||
http://www.costmoon.com/8g7d/?TvpPfhGp=rWbbvp+cwrqQgazA9nOhlKpoIaKdpvX3NtKjwAvzyCJ08CtHZWjUKOIyI7s4v/dodflG0NuedqdGjOxv5Uk5GEd+1aRY1dG/6xJxc0ee/cBS07/9XhY/WVk=&Y664G=SttDen986
|
74.208.236.38
|
||
https://hm.baidu.com/hm.js?
|
unknown
|
||
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
|
unknown
|
||
http://www.vendasnaweb1.com/j5qz/
|
162.241.2.92
|
||
https://g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js
|
unknown
|
||
http://www.g2m-os.com/42ua/?TvpPfhGp=666AcZt0vqUScrmitGmo0Sn7ionns3Mbllq+uEGn7nXx6ARBAUIN9tdRik4SosB3sd2YOi8W6KuCii1PvQhz+VFeXf3qlNf5sD8BLIsMKCpTeSvGwI45HLM=&Y664G=SttDen986
|
3.33.130.190
|
||
http://www.rodotest2.pro/50i6/
|
3.33.130.190
|
||
https://image.uc.cn/s/uae/g/3o/berg/static/index.c4bc5b38d870fecd8a1f.css
|
unknown
|
||
http://www.ajjmamlllqqq.xyz/5uz4/
|
35.244.172.47
|
||
http://www.rodotest2.pro
|
unknown
|
||
https://download.quark.cn/download/quarkpc?platform=android&ch=pcquark
|
unknown
|
||
http://www.shabygreen.top/4n8t/?TvpPfhGp=ghFc6znRteN4Ja3nQE93pb+klyhhNrAgC93ynk4+Lc8v1BQxlwgw+LzLUcq3fIz0ommJFFyvB0Z1ghBSVa+hRbhXI8cuWBtdWYqwziEG2BzJAupp88dDv3U=&Y664G=SttDen986
|
203.161.41.205
|
||
https://www.google.com/images/branding/product/ico/googleg_lodp.ico
|
unknown
|
||
http://www.ajjmamlllqqq.xyz/5uz4/?TvpPfhGp=dL4clO0CJrDMcIxu4IdYSuD/cDaqSVWvuwN44KEfTTu0on3tmzTjREisTNIHlk2ZlqA7xyFr2WD4XoYfHF4eAi4rK2PJMwuiV4L1panftdceIKli3LKULfU=&Y664G=SttDen986
|
35.244.172.47
|
||
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
|
unknown
|
||
https://zz.bdstatic.com/linksubmit/push.js
|
unknown
|
||
http://www.rodotest2.pro/50i6/?TvpPfhGp=qitUcqUffP2yk+NlTcn0cnkOyWQfzTGozjE+fkR+cpfvqRoRQe0JJpYteZO1ejUj8Zcre8jv6/KV+/CxNuPp0r5bf+UIe/RIppbsiuOOAOzLhzD7OHcJ9fs=&Y664G=SttDen986
|
3.33.130.190
|
||
https://www.ecosia.org/newtab/
|
unknown
|
||
http://www.qrdinamicos.com/ndwb/
|
217.160.0.119
|
||
https://image.uc.cn/s/uae/g/3o/berg/static/archer_index.e96dc6dc6863835f4ad0.js
|
unknown
|
||
https://ac.ecosia.org/autocomplete?q=
|
unknown
|
||
http://www.dudapolicarpo.online/8pbu/?TvpPfhGp=kNNnEV5wtfMTk7EsKDdqofuXk+Rn8vJj2yYB/JV+5cekMazgA8cmAYXSGgFhL+XbvnxEPdo1Vtw1uTcXwhetC6FtU7s9g1m4smEVJIuSZwU+vhX8ycfAGhs=&Y664G=SttDen986
|
162.240.81.18
|
||
http://www.077551.xyz/4ogj/
|
104.21.84.69
|
||
http://www.w25dn.top/axxb/
|
38.47.232.185
|
||
http://www.114lala.net/ixzv/?TvpPfhGp=3oi8oJRBwbk3Fv7B4wkBwCYPdwSnFCWHmnvM7LB8bGn5gZyL3DPz3/FGAD+hTQwo1cQLx9Xf6C04wJsqCrUqebqL9pABwbW+sBk+bBPfLH9pAE6bRw2vg/E=&Y664G=SttDen986
|
154.23.7.170
|
||
http://www.vendasnaweb1.com/j5qz/?TvpPfhGp=wDVhqh7/L6S0ssmI+gpm/LVbhI65FVShh/tgBI/y9RfM7r0s9qzU65mo6yF4gvL+0acj1h9sdpnc2oWt6mPPUzfC6i0Cm604hOcmgozNJQF0xWBsyGELgFo=&Y664G=SttDen986
|
162.241.2.92
|
||
https://f385xw.com/register
|
unknown
|
||
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
|
unknown
|
||
http://www.w25dn.top/axxb/?TvpPfhGp=Tomi9JcGHwU5W62uuIED6rgr9HvHoI2i1WV2/yOG5tMyELYD9gbQrdSRvly679CAlYQP7KMM3mPFOKjE9n3WDNNFNlS8pk0/g6E2kBMo21yRC+YJoIsNK7I=&Y664G=SttDen986
|
38.47.232.185
|
||
http://www.g2m-os.com/42ua/
|
3.33.130.190
|
There are 42 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
www.077551.xyz
|
104.21.84.69
|
||
eoghenluire.com
|
76.223.105.230
|
||
www.eoghenluire.com
|
unknown
|
||
www.dudapolicarpo.online
|
unknown
|
||
www.voupeclients.com
|
unknown
|
||
www.vendasnaweb1.com
|
unknown
|
||
www.w25dn.top
|
unknown
|
||
www.indotop77.art
|
unknown
|
||
www.rodotest2.pro
|
unknown
|
||
www.g2m-os.com
|
unknown
|
||
www.qrdinamicos.com
|
217.160.0.119
|
||
dudapolicarpo.online
|
162.240.81.18
|
||
rodotest2.pro
|
3.33.130.190
|
||
www.114lala.net
|
154.23.7.170
|
||
www.shabygreen.top
|
203.161.41.205
|
||
vendasnaweb1.com
|
162.241.2.92
|
||
www.ajjmamlllqqq.xyz
|
35.244.172.47
|
||
w25dn.top
|
38.47.232.185
|
||
g2m-os.com
|
3.33.130.190
|
||
www.immedu.website
|
185.106.178.60
|
||
www.n-ambu.com
|
46.30.211.38
|
||
www.costmoon.com
|
74.208.236.38
|
||
pixie.porkbun.com
|
44.227.65.245
|
There are 13 hidden domains, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
76.223.105.230
|
eoghenluire.com
|
United States
|
||
104.21.84.69
|
www.077551.xyz
|
United States
|
||
154.23.7.170
|
www.114lala.net
|
United States
|
||
162.240.81.18
|
dudapolicarpo.online
|
United States
|
||
35.244.172.47
|
www.ajjmamlllqqq.xyz
|
United States
|
||
217.160.0.119
|
www.qrdinamicos.com
|
Germany
|
||
162.241.2.92
|
vendasnaweb1.com
|
United States
|
||
185.106.178.60
|
www.immedu.website
|
United Kingdom
|
||
38.47.232.185
|
w25dn.top
|
United States
|
||
203.161.41.205
|
www.shabygreen.top
|
Malaysia
|
||
74.208.236.38
|
www.costmoon.com
|
United States
|
||
46.30.211.38
|
www.n-ambu.com
|
Denmark
|
||
3.33.130.190
|
rodotest2.pro
|
United States
|
There are 3 hidden IPs, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
5600000
|
unclassified section
|
page execute and read and write
|
||
2D70000
|
trusted library allocation
|
page read and write
|
||
830000
|
system
|
page execute and read and write
|
||
400000
|
system
|
page execute and read and write
|
||
38D0000
|
unclassified section
|
page execute and read and write
|
||
45E0000
|
unkown
|
page execute and read and write
|
||
2BE0000
|
trusted library allocation
|
page read and write
|
||
1460000
|
heap
|
page read and write
|
||
2C8C000
|
heap
|
page read and write
|
||
4DBC000
|
unclassified section
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1286000
|
heap
|
page read and write
|
||
CAE000
|
heap
|
page read and write
|
||
2D1E000
|
heap
|
page read and write
|
||
B4E000
|
unkown
|
page readonly
|
||
3580000
|
direct allocation
|
page read and write
|
||
37F9000
|
direct allocation
|
page read and write
|
||
1830000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2D24000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
324C000
|
unkown
|
page read and write
|
||
3530000
|
direct allocation
|
page read and write
|
||
D38000
|
heap
|
page read and write
|
||
3060000
|
unkown
|
page read and write
|
||
3823000
|
heap
|
page read and write
|
||
C03000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1150000
|
unkown
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
30D0000
|
direct allocation
|
page execute and read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1410000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
38BE000
|
direct allocation
|
page read and write
|
||
2EC0000
|
unkown
|
page read and write
|
||
38BE000
|
direct allocation
|
page read and write
|
||
7BCE000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
412C000
|
unclassified section
|
page read and write
|
||
7F40000
|
heap
|
page read and write
|
||
309A000
|
stack
|
page read and write
|
||
3A29000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3AEA000
|
unkown
|
page read and write
|
||
2CF0000
|
heap
|
page read and write
|
||
268000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
10FC000
|
stack
|
page read and write
|
||
2D0D000
|
heap
|
page read and write
|
||
2E60000
|
trusted library allocation
|
page execute and read and write
|
||
18CEB51E000
|
heap
|
page read and write
|
||
1210000
|
unkown
|
page readonly
|
||
2D90000
|
unkown
|
page readonly
|
||
BC2000
|
heap
|
page read and write
|
||
38D0000
|
direct allocation
|
page read and write
|
||
2F10000
|
trusted library allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
13B0000
|
unkown
|
page readonly
|
||
3213000
|
heap
|
page read and write
|
||
7B9B000
|
heap
|
page read and write
|
||
18CED0B1000
|
trusted library allocation
|
page read and write
|
||
D48000
|
heap
|
page read and write
|
||
378E000
|
stack
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC0000
|
heap
|
page read and write
|
||
3C06DFB000
|
stack
|
page read and write
|
||
4200000
|
unclassified section
|
page execute and read and write
|
||
18CECDD0000
|
trusted library allocation
|
page read and write
|
||
1430000
|
unkown
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3417000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
42BE000
|
unclassified section
|
page read and write
|
||
18CEB509000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
BC2000
|
heap
|
page read and write
|
||
3202000
|
heap
|
page read and write
|
||
117F000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
149F000
|
stack
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
4A9E000
|
unkown
|
page read and write
|
||
3720000
|
direct allocation
|
page read and write
|
||
2DA0000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
3653000
|
direct allocation
|
page read and write
|
||
268000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
13F0000
|
unkown
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
B41000
|
unkown
|
page execute read
|
||
2C8C000
|
heap
|
page read and write
|
||
3080000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1468000
|
heap
|
page read and write
|
||
2DB0000
|
unkown
|
page readonly
|
||
18CECF00000
|
trusted library allocation
|
page read and write
|
||
B41000
|
unkown
|
page execute read
|
||
2AC1000
|
heap
|
page read and write
|
||
3FA000
|
stack
|
page read and write
|
||
305C000
|
stack
|
page read and write
|
||
BB5000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
7BC7000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2DB0000
|
unkown
|
page readonly
|
||
7BD7000
|
heap
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3057000
|
heap
|
page read and write
|
||
2D56000
|
heap
|
page read and write
|
||
56ED000
|
system
|
page execute and read and write
|
||
D60000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
890000
|
heap
|
page read and write
|
||
1261000
|
unkown
|
page readonly
|
||
1110000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
1130000
|
unkown
|
page readonly
|
||
7BBA000
|
heap
|
page read and write
|
||
894000
|
heap
|
page read and write
|
||
C20000
|
heap
|
page read and write
|
||
2F4E000
|
stack
|
page read and write
|
||
18CECF0F000
|
trusted library allocation
|
page read and write
|
||
1150000
|
unkown
|
page read and write
|
||
1770000
|
unkown
|
page readonly
|
||
2B4DC000
|
system
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1A1000
|
unkown
|
page execute read
|
||
3419000
|
heap
|
page read and write
|
||
386E000
|
direct allocation
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
25F000
|
unkown
|
page read and write
|
||
2DB0000
|
trusted library allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
6160000
|
trusted library allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1140000
|
heap
|
page read and write
|
||
255000
|
unkown
|
page readonly
|
||
1770000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
9DB000
|
stack
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
137C000
|
stack
|
page read and write
|
||
3849000
|
direct allocation
|
page read and write
|
||
13B0000
|
unkown
|
page readonly
|
||
13C0000
|
unkown
|
page readonly
|
||
1140000
|
heap
|
page read and write
|
||
37FD000
|
direct allocation
|
page read and write
|
||
3DD1000
|
direct allocation
|
page execute and read and write
|
||
B57000
|
unkown
|
page readonly
|
||
18CEB440000
|
heap
|
page read and write
|
||
2C77000
|
heap
|
page read and write
|
||
5F8000
|
stack
|
page read and write
|
||
384D000
|
direct allocation
|
page read and write
|
||
18CED0CE000
|
trusted library allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3BE0000
|
unkown
|
page execute and read and write
|
||
31F9000
|
direct allocation
|
page execute and read and write
|
||
1168000
|
heap
|
page read and write
|
||
18CECDC0000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2C8E000
|
stack
|
page read and write
|
||
576A000
|
system
|
page execute and read and write
|
||
30D0000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
C2F000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
B4E000
|
unkown
|
page readonly
|
||
5707000
|
system
|
page execute and read and write
|
||
3580000
|
direct allocation
|
page read and write
|
||
2C80000
|
heap
|
page read and write
|
||
2F8E000
|
stack
|
page read and write
|
||
2D32000
|
heap
|
page read and write
|
||
7C90000
|
trusted library allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
4C00000
|
unclassified section
|
page execute and read and write
|
||
36FC000
|
unclassified section
|
page read and write
|
||
2CDE000
|
heap
|
page read and write
|
||
8B0000
|
heap
|
page read and write
|
||
1430000
|
unkown
|
page read and write
|
||
3C085FE000
|
stack
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
1A0000
|
unkown
|
page readonly
|
||
1120000
|
unkown
|
page readonly
|
||
3213000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3A9E000
|
heap
|
page read and write
|
||
38BE000
|
direct allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
CE8000
|
heap
|
page read and write
|
||
34D0000
|
direct allocation
|
page execute and read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
7BE5000
|
heap
|
page read and write
|
||
3F9A000
|
unclassified section
|
page read and write
|
||
2F60000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
894000
|
heap
|
page read and write
|
||
2C30000
|
heap
|
page read and write
|
||
13D0000
|
unkown
|
page readonly
|
||
7BA8000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
127A000
|
stack
|
page read and write
|
||
FF1000
|
unkown
|
page read and write
|
||
30E0000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2D03000
|
heap
|
page read and write
|
||
166E000
|
stack
|
page read and write
|
||
607C000
|
unclassified section
|
page execute and read and write
|
||
1410000
|
heap
|
page read and write
|
||
B40000
|
unkown
|
page readonly
|
||
13C0000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
1160000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2F2C000
|
unkown
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
C2E000
|
heap
|
page read and write
|
||
2D1B000
|
heap
|
page read and write
|
||
18CECF0C000
|
trusted library allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
18CED0C4000
|
trusted library allocation
|
page read and write
|
||
C20000
|
heap
|
page read and write
|
||
2CE3000
|
heap
|
page read and write
|
||
18CEB360000
|
heap
|
page read and write
|
||
14A0000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
A70000
|
heap
|
page read and write
|
||
2CF7000
|
heap
|
page read and write
|
||
B41000
|
unkown
|
page execute read
|
||
2AC1000
|
heap
|
page read and write
|
||
2F10000
|
trusted library allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1482000
|
heap
|
page read and write
|
||
36D0000
|
direct allocation
|
page read and write
|
||
2EB0000
|
unkown
|
page read and write
|
||
388F000
|
stack
|
page read and write
|
||
D4C000
|
heap
|
page read and write
|
||
2F64000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
A90000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3720000
|
direct allocation
|
page read and write
|
||
3120000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
A60000
|
heap
|
page read and write
|
||
2FCE000
|
stack
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1A0000
|
unkown
|
page readonly
|
||
18CEB480000
|
heap
|
page read and write
|
||
2CED000
|
heap
|
page read and write
|
||
1210000
|
unkown
|
page readonly
|
||
22F000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
3501000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3400000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2D50000
|
heap
|
page read and write
|
||
2B8C4000
|
system
|
page read and write
|
||
2AA0000
|
heap
|
page read and write
|
||
31E0000
|
unkown
|
page execute and read and write
|
||
56F7000
|
system
|
page execute and read and write
|
||
2DA0000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3700000
|
heap
|
page read and write
|
||
386E000
|
direct allocation
|
page read and write
|
||
1B01000
|
unkown
|
page readonly
|
||
3B00000
|
direct allocation
|
page execute and read and write
|
||
18CEB2CF000
|
system
|
page execute and read and write
|
||
1820000
|
heap
|
page read and write
|
||
34E0000
|
direct allocation
|
page read and write
|
||
139E000
|
stack
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
37F9000
|
direct allocation
|
page read and write
|
||
3412000
|
heap
|
page read and write
|
||
3412000
|
direct allocation
|
page execute and read and write
|
||
2EB0000
|
unkown
|
page read and write
|
||
3C075FE000
|
stack
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
D60000
|
unkown
|
page readonly
|
||
36A3000
|
direct allocation
|
page read and write
|
||
18CEB2CC000
|
system
|
page execute and read and write
|
||
C2E000
|
heap
|
page read and write
|
||
477A000
|
unkown
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
18CECDD0000
|
trusted library allocation
|
page read and write
|
||
3958000
|
unkown
|
page read and write
|
||
18CEB500000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3E08000
|
unclassified section
|
page read and write
|
||
D70000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
B40000
|
unkown
|
page readonly
|
||
384D000
|
direct allocation
|
page read and write
|
||
18CECE00000
|
trusted library allocation
|
page read and write
|
||
1450000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
37FD000
|
direct allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
B40000
|
unkown
|
page readonly
|
||
3610000
|
direct allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
45E8000
|
unkown
|
page read and write
|
||
4C2A000
|
unclassified section
|
page read and write
|
||
1450000
|
unkown
|
page readonly
|
||
2C86000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
C1F000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3FA0000
|
unkown
|
page read and write
|
||
2BC0000
|
trusted library allocation
|
page read and write
|
||
1110000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
18CEB511000
|
heap
|
page read and write
|
||
7BAD000
|
heap
|
page read and write
|
||
2D8F000
|
stack
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
1468000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3600000
|
heap
|
page read and write
|
||
2D90000
|
unkown
|
page readonly
|
||
30E0000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3C9E000
|
direct allocation
|
page execute and read and write
|
||
3060000
|
unkown
|
page read and write
|
||
2CD2000
|
heap
|
page read and write
|
||
BB3000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
C2E000
|
heap
|
page read and write
|
||
2C7A000
|
heap
|
page read and write
|
||
30E4000
|
heap
|
page read and write
|
||
2CED000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
DDA000
|
stack
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
C4E000
|
heap
|
page read and write
|
||
B4E000
|
unkown
|
page readonly
|
||
3DCD000
|
direct allocation
|
page execute and read and write
|
||
4450000
|
unclassified section
|
page read and write
|
||
3900000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3C7C000
|
unkown
|
page read and write
|
||
386E000
|
direct allocation
|
page read and write
|
||
2F64000
|
heap
|
page read and write
|
||
D18000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1270000
|
unkown
|
page read and write
|
||
36D0000
|
direct allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
894000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
30F0000
|
heap
|
page read and write
|
||
3200000
|
heap
|
page read and write
|
||
7C80000
|
trusted library allocation
|
page read and write
|
||
31FD000
|
direct allocation
|
page execute and read and write
|
||
3053000
|
heap
|
page read and write
|
||
B88000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3405000
|
heap
|
page read and write
|
||
BC2000
|
heap
|
page read and write
|
||
FF0000
|
unkown
|
page readonly
|
||
50E0000
|
unclassified section
|
page read and write
|
||
C21000
|
heap
|
page read and write
|
||
2F10000
|
trusted library allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
374F000
|
stack
|
page read and write
|
||
3890000
|
direct allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
FBE000
|
stack
|
page read and write
|
||
4C30000
|
unkown
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
2D03000
|
heap
|
page read and write
|
||
38D0000
|
direct allocation
|
page read and write
|
||
3032000
|
unkown
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2F60000
|
heap
|
page read and write
|
||
339D000
|
direct allocation
|
page execute and read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2F72000
|
unkown
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3C07DFE000
|
stack
|
page read and write
|
||
3580000
|
direct allocation
|
page read and write
|
||
7BAF000
|
heap
|
page read and write
|
||
326E000
|
direct allocation
|
page execute and read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
36A3000
|
direct allocation
|
page read and write
|
||
18CECF21000
|
trusted library allocation
|
page read and write
|
||
30E4000
|
heap
|
page read and write
|
||
1460000
|
heap
|
page read and write
|
||
18CEB507000
|
heap
|
page read and write
|
||
1168000
|
heap
|
page read and write
|
||
B4E000
|
unkown
|
page readonly
|
||
17FE000
|
stack
|
page read and write
|
||
7BAB000
|
heap
|
page read and write
|
||
18CEB532000
|
heap
|
page read and write
|
||
3653000
|
direct allocation
|
page read and write
|
||
22F000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
505C000
|
unkown
|
page execute and read and write
|
||
B40000
|
unkown
|
page readonly
|
||
36A3000
|
direct allocation
|
page read and write
|
||
4001000
|
heap
|
page read and write
|
||
1B00000
|
unkown
|
page readonly
|
||
3C29000
|
direct allocation
|
page execute and read and write
|
||
B80000
|
heap
|
page read and write
|
||
3E42000
|
direct allocation
|
page execute and read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
C2E000
|
heap
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
7F0E000
|
stack
|
page read and write
|
||
2C87000
|
heap
|
page read and write
|
||
255000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
176F000
|
stack
|
page read and write
|
||
2C9E000
|
heap
|
page read and write
|
||
139E000
|
stack
|
page read and write
|
||
34E2000
|
unclassified section
|
page read and write
|
||
1401000
|
unkown
|
page readonly
|
||
13D0000
|
unkown
|
page readonly
|
||
18CEB535000
|
heap
|
page read and write
|
||
B55000
|
unkown
|
page read and write
|
||
37F9000
|
direct allocation
|
page read and write
|
||
1200000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2F72000
|
unkown
|
page read and write
|
||
D50000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
18CEB270000
|
system
|
page execute and read and write
|
||
D70000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
1280000
|
heap
|
page read and write
|
||
5BB000
|
stack
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
7BA1000
|
heap
|
page read and write
|
||
10FC000
|
stack
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
B41000
|
unkown
|
page execute read
|
||
2AC1000
|
heap
|
page read and write
|
||
1200000
|
unkown
|
page readonly
|
||
38D0000
|
direct allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
5713000
|
system
|
page execute and read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2C7D000
|
heap
|
page read and write
|
||
2C82000
|
heap
|
page read and write
|
||
D29000
|
heap
|
page read and write
|
||
7BA6000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
304F000
|
stack
|
page read and write
|
||
3417000
|
heap
|
page read and write
|
||
3A2D000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3530000
|
direct allocation
|
page read and write
|
||
1160000
|
heap
|
page read and write
|
||
3C76000
|
unclassified section
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2CF7000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
589C000
|
unkown
|
page read and write
|
||
2ED0000
|
unkown
|
page read and write
|
||
7B8F000
|
heap
|
page read and write
|
||
B57000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
341E000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
D50000
|
unkown
|
page readonly
|
||
3084000
|
heap
|
page read and write
|
||
A0F000
|
stack
|
page read and write
|
||
18CED000000
|
trusted library allocation
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2BC0000
|
heap
|
page read and write
|
||
2B2C2000
|
system
|
page read and write
|
||
384D000
|
direct allocation
|
page read and write
|
||
5680000
|
system
|
page execute and read and write
|
||
2D4C000
|
heap
|
page read and write
|
||
7BDB000
|
heap
|
page read and write
|
||
4A98000
|
unclassified section
|
page read and write
|
||
CD5000
|
heap
|
page read and write
|
||
B55000
|
unkown
|
page read and write
|
||
33A1000
|
direct allocation
|
page execute and read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1270000
|
unkown
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2C7B000
|
heap
|
page read and write
|
||
D28000
|
heap
|
page read and write
|
||
37C6000
|
unkown
|
page read and write
|
||
B55000
|
unkown
|
page read and write
|
||
13F0000
|
unkown
|
page read and write
|
||
7B91000
|
heap
|
page read and write
|
||
2F2A000
|
heap
|
page read and write
|
||
3720000
|
direct allocation
|
page read and write
|
||
2D71000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3E0E000
|
unkown
|
page read and write
|
||
C2E000
|
heap
|
page read and write
|
||
7B96000
|
heap
|
page read and write
|
||
2D46000
|
heap
|
page read and write
|
||
FF0000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
263000
|
unkown
|
page write copy
|
||
2C86000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
18CEB52D000
|
heap
|
page read and write
|
||
B57000
|
unkown
|
page readonly
|
||
364E000
|
stack
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3C2D000
|
direct allocation
|
page execute and read and write
|
||
30C8000
|
heap
|
page read and write
|
||
490C000
|
unkown
|
page read and write
|
||
14A0000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
137C000
|
stack
|
page read and write
|
||
3070000
|
heap
|
page read and write
|
||
2CF0000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3405000
|
heap
|
page read and write
|
||
DDA000
|
stack
|
page read and write
|
||
C2E000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
7BD2000
|
heap
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
149F000
|
stack
|
page read and write
|
||
4456000
|
unkown
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
4906000
|
unclassified section
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
127A000
|
stack
|
page read and write
|
||
1130000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
30F0000
|
unkown
|
page readonly
|
||
18CED0BE000
|
trusted library allocation
|
page read and write
|
||
2E94000
|
heap
|
page read and write
|
||
1830000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
2C7B000
|
heap
|
page read and write
|
||
3213000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
1280000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
D38000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3634000
|
unkown
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
13BE000
|
stack
|
page read and write
|
||
9CF000
|
stack
|
page read and write
|
||
1120000
|
unkown
|
page readonly
|
||
2C86000
|
heap
|
page read and write
|
||
D48000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
9CE000
|
stack
|
page read and write
|
||
2C70000
|
heap
|
page read and write
|
||
324C000
|
unkown
|
page read and write
|
||
82CF000
|
stack
|
page read and write
|
||
4132000
|
unkown
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
18CED001000
|
trusted library allocation
|
page read and write
|
||
30F0000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
B57000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3AE4000
|
unclassified section
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3653000
|
direct allocation
|
page read and write
|
||
1420000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
37FD000
|
direct allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
45E2000
|
unclassified section
|
page read and write
|
||
25F000
|
unkown
|
page write copy
|
||
1261000
|
unkown
|
page readonly
|
||
1A1000
|
unkown
|
page execute read
|
||
3213000
|
heap
|
page read and write
|
||
13E0000
|
heap
|
page read and write
|
||
18CECF03000
|
trusted library allocation
|
page read and write
|
||
1420000
|
heap
|
page read and write
|
||
13E0000
|
heap
|
page read and write
|
||
2B202000
|
system
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3849000
|
direct allocation
|
page read and write
|
||
13FE000
|
stack
|
page read and write
|
||
36D0000
|
direct allocation
|
page read and write
|
||
BBC000
|
heap
|
page read and write
|
||
9FC000
|
stack
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
18CECF12000
|
trusted library allocation
|
page read and write
|
||
3849000
|
direct allocation
|
page read and write
|
||
9BF000
|
stack
|
page read and write
|
||
B55000
|
unkown
|
page read and write
|
||
C2E000
|
heap
|
page read and write
|
||
4F4E000
|
unclassified section
|
page read and write
|
||
1401000
|
unkown
|
page readonly
|
||
2AC1000
|
heap
|
page read and write
|
||
D18000
|
heap
|
page read and write
|
||
3530000
|
direct allocation
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
2AC1000
|
heap
|
page read and write
|
||
3422000
|
unclassified section
|
page read and write
|
There are 656 hidden memdumps, click here to show them.