Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
UnDqKnghuz.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Temp\645238\Itunes.pif
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
modified
|
||
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\RegAsm.exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\645238\RegAsm.exe
|
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\645238\p
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Animals
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Apollo
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Arg
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Barbara
|
DIY-Thermocam raw data (Lepton 3.x), scale 25675-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale
bar, calibration: offset 28924494707576576933888.000000, slope 30105255213280014630912.000000
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Blonde
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Cemetery
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Coding
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Cornwall
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Defense
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Donald
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Examined
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Fake
|
ASCII text, with very long lines (1680), with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Fake.cmd
|
ASCII text, with very long lines (1680), with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\File
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Howto
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Mild
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Offered
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Paper
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Picks
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Punk
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Sofa
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Spending
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Sticky
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Takes
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Tar
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Tears
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Thereof
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Threatened
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Till
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Times
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Ultra
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Visitor
|
PCX ver. 2.5 image data bounding box [63573, 17803] - [35788, 62541], 106 planes each of 139-bit uncompressed
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Weblogs
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Worship
|
data
|
dropped
|
There are 29 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\UnDqKnghuz.exe
|
"C:\Users\user\Desktop\UnDqKnghuz.exe"
|
||
C:\Windows\SysWOW64\cmd.exe
|
"C:\Windows\System32\cmd.exe" /k copy Fake Fake.cmd & Fake.cmd & exit
|
||
C:\Windows\SysWOW64\findstr.exe
|
findstr /I "wrsa.exe opssvc.exe"
|
||
C:\Windows\SysWOW64\findstr.exe
|
findstr /I "avastui.exe avgui.exe bdservicehost.exe nswscsvc.exe sophoshealth.exe"
|
||
C:\Windows\SysWOW64\cmd.exe
|
cmd /c md 645238
|
||
C:\Windows\SysWOW64\findstr.exe
|
findstr /V "AxisDevicesTwikiIntimate" Paper
|
||
C:\Windows\SysWOW64\cmd.exe
|
cmd /c copy /b Coding + Offered + Howto + Threatened + Mild + Blonde + Sticky 645238\p
|
||
C:\Users\user\AppData\Local\Temp\645238\Itunes.pif
|
645238\Itunes.pif 645238\p
|
||
C:\Users\user\AppData\Local\Temp\645238\RegAsm.exe
|
C:\Users\user\AppData\Local\Temp\645238\RegAsm.exe
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\SysWOW64\tasklist.exe
|
tasklist
|
||
C:\Windows\SysWOW64\tasklist.exe
|
tasklist
|
||
C:\Windows\SysWOW64\timeout.exe
|
timeout 5
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
There are 4 hidden processes, click here to show them.
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://www.autoitscript.com/autoit3/J
|
unknown
|
||
http://www.apache.org/licenses/LICENSE-2.0
|
unknown
|
||
http://www.fontbureau.com
|
unknown
|
||
http://www.fontbureau.com/designersG
|
unknown
|
||
https://api.ip.sb/ip
|
unknown
|
||
http://www.fontbureau.com/designers/?
|
unknown
|
||
http://www.founder.com.cn/cn/bThe
|
unknown
|
||
http://www.fontbureau.com/designers?
|
unknown
|
||
http://www.tiro.com
|
unknown
|
||
https://api.ip.s
|
unknown
|
||
http://www.fontbureau.com/designers
|
unknown
|
||
http://nsis.sf.net/NSIS_ErrorError
|
unknown
|
||
http://www.goodfont.co.kr
|
unknown
|
||
http://www.carterandcone.coml
|
unknown
|
||
http://www.sajatypeworks.com
|
unknown
|
||
http://www.typography.netD
|
unknown
|
||
http://www.fontbureau.com/designers/cabarga.htmlN
|
unknown
|
||
http://www.founder.com.cn/cn/cThe
|
unknown
|
||
http://www.galapagosdesign.com/staff/dennis.htm
|
unknown
|
||
http://fontfabrik.com
|
unknown
|
||
http://www.founder.com.cn/cn
|
unknown
|
||
http://www.fontbureau.com/designers/frere-user.html
|
unknown
|
||
http://www.autoitscript.com/autoit3/0
|
unknown
|
||
http://www.jiyu-kobo.co.jp/
|
unknown
|
||
https://discord.com/api/v9/users/
|
unknown
|
||
http://www.galapagosdesign.com/DPlease
|
unknown
|
||
http://www.fontbureau.com/designers8
|
unknown
|
||
https://www.dropbox.com/0
|
unknown
|
||
http://www.fonts.com
|
unknown
|
||
http://www.sandoll.co.kr
|
unknown
|
||
http://www.urwpp.deDPlease
|
unknown
|
||
http://www.zhongyicts.com.cn
|
unknown
|
||
http://www.sakkal.com
|
unknown
|
There are 23 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
15.164.165.52.in-addr.arpa
|
unknown
|
||
XEbQlQkPmiulZVUpDZeaIqpGloWqu.XEbQlQkPmiulZVUpDZeaIqpGloWqu
|
unknown
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
1322000
|
remote allocation
|
page execute and read and write
|
||
1966000
|
trusted library allocation
|
page execute and read and write
|
||
31F7000
|
heap
|
page read and write
|
||
1970000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
196B000
|
trusted library allocation
|
page read and write
|
||
1547000
|
trusted library allocation
|
page read and write
|
||
31D0000
|
heap
|
page read and write
|
||
65A000
|
heap
|
page read and write
|
||
157B000
|
trusted library allocation
|
page read and write
|
||
B27000
|
heap
|
page read and write
|
||
325D000
|
heap
|
page read and write
|
||
1968000
|
trusted library allocation
|
page read and write
|
||
18D2000
|
trusted library allocation
|
page read and write
|
||
152A000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
5A50000
|
heap
|
page read and write
|
||
ABE000
|
stack
|
page read and write
|
||
15A2000
|
trusted library allocation
|
page read and write
|
||
1990000
|
trusted library allocation
|
page read and write
|
||
18D6000
|
trusted library allocation
|
page read and write
|
||
5840000
|
heap
|
page read and write
|
||
B29000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
4241000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
541C000
|
stack
|
page read and write
|
||
18DC000
|
trusted library allocation
|
page read and write
|
||
59F0000
|
trusted library allocation
|
page read and write
|
||
5760000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
198D000
|
trusted library allocation
|
page read and write
|
||
1987000
|
trusted library allocation
|
page read and write
|
||
3250000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
34BC000
|
stack
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
1000000
|
trusted library allocation
|
page read and write
|
||
2D0F000
|
stack
|
page read and write
|
||
5D9E000
|
stack
|
page read and write
|
||
970000
|
heap
|
page read and write
|
||
18D2000
|
trusted library allocation
|
page read and write
|
||
92E000
|
stack
|
page read and write
|
||
FAF000
|
stack
|
page read and write
|
||
AE8000
|
heap
|
page read and write
|
||
18D7000
|
trusted library allocation
|
page read and write
|
||
3258000
|
heap
|
page read and write
|
||
3230000
|
heap
|
page read and write
|
||
1970000
|
trusted library allocation
|
page read and write
|
||
296A000
|
heap
|
page read and write
|
||
F40000
|
unkown
|
page readonly
|
||
15B3000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
196A000
|
trusted library allocation
|
page execute and read and write
|
||
199E000
|
trusted library allocation
|
page read and write
|
||
6B73000
|
heap
|
page read and write
|
||
14FB000
|
heap
|
page read and write
|
||
18D9000
|
trusted library allocation
|
page read and write
|
||
18D9000
|
trusted library allocation
|
page read and write
|
||
18D2000
|
trusted library allocation
|
page read and write
|
||
18DB000
|
trusted library allocation
|
page read and write
|
||
1595000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
155D000
|
heap
|
page read and write
|
||
57D0000
|
trusted library allocation
|
page read and write
|
||
712F000
|
stack
|
page read and write
|
||
145000
|
unkown
|
page readonly
|
||
195D000
|
trusted library allocation
|
page execute and read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
1E0000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
B29000
|
heap
|
page read and write
|
||
337E000
|
stack
|
page read and write
|
||
18DE000
|
trusted library allocation
|
page read and write
|
||
1A0B000
|
trusted library allocation
|
page read and write
|
||
1977000
|
trusted library allocation
|
page execute and read and write
|
||
5C20000
|
trusted library allocation
|
page execute and read and write
|
||
FF4000
|
heap
|
page read and write
|
||
2967000
|
heap
|
page read and write
|
||
F1B000
|
heap
|
page read and write
|
||
1978000
|
trusted library allocation
|
page read and write
|
||
1A17000
|
trusted library allocation
|
page read and write
|
||
296C000
|
heap
|
page read and write
|
||
2969000
|
heap
|
page read and write
|
||
3D01000
|
trusted library allocation
|
page read and write
|
||
18D5000
|
trusted library allocation
|
page read and write
|
||
18D1000
|
trusted library allocation
|
page read and write
|
||
18D1000
|
trusted library allocation
|
page read and write
|
||
162C000
|
trusted library allocation
|
page read and write
|
||
3390000
|
trusted library allocation
|
page read and write
|
||
15C1000
|
trusted library allocation
|
page read and write
|
||
E5C000
|
stack
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
18D4000
|
trusted library allocation
|
page read and write
|
||
275E000
|
stack
|
page read and write
|
||
1597000
|
trusted library allocation
|
page read and write
|
||
153F000
|
trusted library allocation
|
page read and write
|
||
1532000
|
trusted library allocation
|
page read and write
|
||
6E5B000
|
heap
|
page read and write
|
||
5D50000
|
heap
|
page read and write
|
||
B00000
|
heap
|
page read and write
|
||
145E000
|
stack
|
page read and write
|
||
3253000
|
heap
|
page read and write
|
||
1981000
|
trusted library allocation
|
page read and write
|
||
296C000
|
heap
|
page read and write
|
||
1538000
|
heap
|
page read and write
|
||
1663000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
408000
|
unkown
|
page readonly
|
||
2962000
|
heap
|
page read and write
|
||
6B6C000
|
heap
|
page read and write
|
||
198A000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
59C0000
|
heap
|
page execute and read and write
|
||
492E000
|
stack
|
page read and write
|
||
2310000
|
heap
|
page read and write
|
||
18D3000
|
trusted library allocation
|
page read and write
|
||
309E000
|
stack
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
15E5000
|
trusted library allocation
|
page read and write
|
||
1732000
|
trusted library allocation
|
page read and write
|
||
1979000
|
trusted library allocation
|
page read and write
|
||
AE0000
|
heap
|
page read and write
|
||
970000
|
heap
|
page read and write
|
||
5820000
|
trusted library allocation
|
page read and write
|
||
1528000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
1498000
|
heap
|
page read and write
|
||
3258000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
13E0000
|
heap
|
page read and write
|
||
19A000
|
stack
|
page read and write
|
||
3186000
|
heap
|
page read and write
|
||
326A000
|
heap
|
page read and write
|
||
408000
|
unkown
|
page readonly
|
||
16B7000
|
trusted library allocation
|
page read and write
|
||
6AA0000
|
heap
|
page read and write
|
||
162D000
|
trusted library allocation
|
page read and write
|
||
2969000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
65A000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
18D8000
|
trusted library allocation
|
page read and write
|
||
92E000
|
stack
|
page read and write
|
||
1586000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
654D000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
196B000
|
trusted library allocation
|
page read and write
|
||
19FE000
|
trusted library allocation
|
page read and write
|
||
B03000
|
heap
|
page read and write
|
||
1966000
|
trusted library allocation
|
page read and write
|
||
3241000
|
trusted library allocation
|
page read and write
|
||
96F000
|
stack
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
18D9000
|
trusted library allocation
|
page read and write
|
||
1A00000
|
heap
|
page read and write
|
||
3258000
|
heap
|
page read and write
|
||
197B000
|
trusted library allocation
|
page execute and read and write
|
||
170F000
|
trusted library allocation
|
page read and write
|
||
B2B000
|
heap
|
page read and write
|
||
1953000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
64DE000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
2961000
|
heap
|
page read and write
|
||
15C0000
|
trusted library allocation
|
page read and write
|
||
1993000
|
trusted library allocation
|
page read and write
|
||
B22000
|
heap
|
page read and write
|
||
9C6000
|
heap
|
page read and write
|
||
1A3A000
|
trusted library allocation
|
page read and write
|
||
198B000
|
trusted library allocation
|
page read and write
|
||
1971000
|
trusted library allocation
|
page read and write
|
||
3D37000
|
trusted library allocation
|
page read and write
|
||
1987000
|
trusted library allocation
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
3D31000
|
trusted library allocation
|
page read and write
|
||
2960000
|
heap
|
page read and write
|
||
326A000
|
heap
|
page read and write
|
||
296B000
|
heap
|
page read and write
|
||
3D8C000
|
trusted library allocation
|
page read and write
|
||
305E000
|
stack
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
61E000
|
heap
|
page read and write
|
||
169A000
|
trusted library allocation
|
page read and write
|
||
15B2000
|
trusted library allocation
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
17A7000
|
trusted library allocation
|
page read and write
|
||
A30000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
1984000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
6C62000
|
heap
|
page read and write
|
||
1A2A000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
197A000
|
trusted library allocation
|
page read and write
|
||
5940000
|
trusted library allocation
|
page read and write
|
||
15A2000
|
trusted library allocation
|
page read and write
|
||
1320000
|
remote allocation
|
page execute and read and write
|
||
3310000
|
trusted library allocation
|
page read and write
|
||
59D0000
|
trusted library allocation
|
page execute and read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
18D9000
|
trusted library allocation
|
page read and write
|
||
579E000
|
trusted library allocation
|
page read and write
|
||
64B0000
|
heap
|
page read and write
|
||
15A1000
|
trusted library allocation
|
page read and write
|
||
18DA000
|
trusted library allocation
|
page read and write
|
||
702E000
|
stack
|
page read and write
|
||
1593000
|
trusted library allocation
|
page read and write
|
||
2D60000
|
heap
|
page read and write
|
||
B1A000
|
heap
|
page read and write
|
||
504E000
|
stack
|
page read and write
|
||
9C0000
|
heap
|
page read and write
|
||
285F000
|
stack
|
page read and write
|
||
18D1000
|
trusted library allocation
|
page read and write
|
||
56C000
|
stack
|
page read and write
|
||
88E000
|
stack
|
page read and write
|
||
15C1000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
311E000
|
stack
|
page read and write
|
||
5AC000
|
stack
|
page read and write
|
||
152C000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
5D55000
|
heap
|
page read and write
|
||
1590000
|
heap
|
page read and write
|
||
10F4000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
18DC000
|
trusted library allocation
|
page read and write
|
||
67A000
|
heap
|
page read and write
|
||
163A000
|
trusted library allocation
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
508F000
|
stack
|
page read and write
|
||
33C9000
|
trusted library allocation
|
page read and write
|
||
65A000
|
heap
|
page read and write
|
||
681000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
4F4000
|
unkown
|
page readonly
|
||
1A20000
|
heap
|
page read and write
|
||
313F000
|
stack
|
page read and write
|
||
65A0000
|
heap
|
page read and write
|
||
2963000
|
heap
|
page read and write
|
||
158D000
|
trusted library allocation
|
page execute and read and write
|
||
153000
|
unkown
|
page write copy
|
||
18D3000
|
trusted library allocation
|
page read and write
|
||
1A10000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
82C000
|
stack
|
page read and write
|
||
6E3A000
|
heap
|
page read and write
|
||
1A27000
|
heap
|
page read and write
|
||
19F0000
|
trusted library allocation
|
page execute and read and write
|
||
197C000
|
trusted library allocation
|
page read and write
|
||
3D40000
|
trusted library allocation
|
page read and write
|
||
1587000
|
trusted library allocation
|
page read and write
|
||
3272000
|
heap
|
page read and write
|
||
461000
|
unkown
|
page read and write
|
||
1570000
|
trusted library allocation
|
page read and write
|
||
6ACE000
|
heap
|
page read and write
|
||
326A000
|
heap
|
page read and write
|
||
5833000
|
heap
|
page read and write
|
||
18DA000
|
trusted library allocation
|
page read and write
|
||
3DA5000
|
trusted library allocation
|
page read and write
|
||
167D000
|
trusted library allocation
|
page read and write
|
||
1981000
|
trusted library allocation
|
page read and write
|
||
3D01000
|
trusted library allocation
|
page read and write
|
||
B1A000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
98F000
|
stack
|
page read and write
|
||
3715000
|
heap
|
page read and write
|
||
1972000
|
trusted library allocation
|
page read and write
|
||
500F000
|
stack
|
page read and write
|
||
162D000
|
trusted library allocation
|
page read and write
|
||
18D4000
|
trusted library allocation
|
page read and write
|
||
169B000
|
trusted library allocation
|
page read and write
|
||
3E04000
|
trusted library allocation
|
page read and write
|
||
6E8E000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
18D5000
|
trusted library allocation
|
page read and write
|
||
2968000
|
heap
|
page read and write
|
||
327D000
|
heap
|
page read and write
|
||
6E76000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
2D68000
|
heap
|
page read and write
|
||
65A000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
323F000
|
stack
|
page read and write
|
||
5A4B000
|
stack
|
page read and write
|
||
649D000
|
stack
|
page read and write
|
||
16B7000
|
trusted library allocation
|
page read and write
|
||
57B1000
|
trusted library allocation
|
page read and write
|
||
18DB000
|
trusted library allocation
|
page read and write
|
||
296F000
|
heap
|
page read and write
|
||
18D6000
|
trusted library allocation
|
page read and write
|
||
3D01000
|
trusted library allocation
|
page read and write
|
||
B0B000
|
heap
|
page read and write
|
||
1787000
|
trusted library allocation
|
page read and write
|
||
B29000
|
heap
|
page read and write
|
||
15A2000
|
trusted library allocation
|
page read and write
|
||
5990000
|
trusted library allocation
|
page execute and read and write
|
||
3D01000
|
trusted library allocation
|
page read and write
|
||
B2B000
|
heap
|
page read and write
|
||
5A60000
|
heap
|
page read and write
|
||
6C06000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
1E5000
|
heap
|
page read and write
|
||
5DDE000
|
stack
|
page read and write
|
||
6E83000
|
heap
|
page read and write
|
||
5CDE000
|
stack
|
page read and write
|
||
1663000
|
trusted library allocation
|
page read and write
|
||
296F000
|
heap
|
page read and write
|
||
15C1000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
173A000
|
trusted library allocation
|
page read and write
|
||
14F000
|
unkown
|
page write copy
|
||
18D4000
|
trusted library allocation
|
page read and write
|
||
48EF000
|
stack
|
page read and write
|
||
B08000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
162D000
|
trusted library allocation
|
page read and write
|
||
18DE000
|
trusted library allocation
|
page read and write
|
||
1991000
|
trusted library allocation
|
page read and write
|
||
1840000
|
heap
|
page read and write
|
||
326A000
|
heap
|
page read and write
|
||
1587000
|
trusted library allocation
|
page read and write
|
||
5780000
|
trusted library allocation
|
page read and write
|
||
1540000
|
trusted library allocation
|
page read and write
|
||
1997000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
B1A000
|
heap
|
page read and write
|
||
40B000
|
unkown
|
page write copy
|
||
B08000
|
heap
|
page read and write
|
||
1468000
|
heap
|
page read and write
|
||
1972000
|
trusted library allocation
|
page read and write
|
||
1587000
|
trusted library allocation
|
page read and write
|
||
160E000
|
trusted library allocation
|
page read and write
|
||
197C000
|
trusted library allocation
|
page read and write
|
||
296F000
|
heap
|
page read and write
|
||
15B3000
|
trusted library allocation
|
page read and write
|
||
8A0000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
1663000
|
trusted library allocation
|
page read and write
|
||
1A24000
|
trusted library allocation
|
page read and write
|
||
66A0000
|
trusted library allocation
|
page read and write
|
||
173B000
|
trusted library allocation
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
120000
|
unkown
|
page readonly
|
||
18DB000
|
trusted library allocation
|
page read and write
|
||
2965000
|
heap
|
page read and write
|
||
B29000
|
heap
|
page read and write
|
||
496F000
|
stack
|
page read and write
|
||
18DC000
|
trusted library allocation
|
page read and write
|
||
B1A000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
57B6000
|
trusted library allocation
|
page read and write
|
||
13A1000
|
remote allocation
|
page execute and read and write
|
||
13F0000
|
heap
|
page read and write
|
||
E9C000
|
stack
|
page read and write
|
||
1A2E000
|
trusted library allocation
|
page read and write
|
||
327A000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
1962000
|
trusted library allocation
|
page read and write
|
||
221E000
|
stack
|
page read and write
|
||
6EAC000
|
heap
|
page read and write
|
||
84F000
|
stack
|
page read and write
|
||
19DE000
|
stack
|
page read and write
|
||
296E000
|
heap
|
page read and write
|
||
57BD000
|
trusted library allocation
|
page read and write
|
||
90000
|
unkown
|
page readonly
|
||
16CD000
|
trusted library allocation
|
page read and write
|
||
B0C000
|
heap
|
page read and write
|
||
1531000
|
trusted library allocation
|
page read and write
|
||
1968000
|
trusted library allocation
|
page read and write
|
||
3388000
|
trusted library allocation
|
page read and write
|
||
65A000
|
heap
|
page read and write
|
||
510000
|
heap
|
page read and write
|
||
3273000
|
heap
|
page read and write
|
||
327D000
|
heap
|
page read and write
|
||
57C2000
|
trusted library allocation
|
page read and write
|
||
1990000
|
trusted library allocation
|
page read and write
|
||
FE0000
|
heap
|
page read and write
|
||
296F000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
1966000
|
trusted library allocation
|
page read and write
|
||
2860000
|
heap
|
page read and write
|
||
B08000
|
heap
|
page read and write
|
||
1583000
|
trusted library allocation
|
page execute and read and write
|
||
364F000
|
heap
|
page read and write
|
||
18DD000
|
trusted library allocation
|
page read and write
|
||
327D000
|
heap
|
page read and write
|
||
3210000
|
heap
|
page read and write
|
||
2140000
|
heap
|
page read and write
|
||
2966000
|
heap
|
page read and write
|
||
59E0000
|
trusted library allocation
|
page read and write
|
||
6EA1000
|
heap
|
page read and write
|
||
A0E000
|
stack
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
5830000
|
heap
|
page read and write
|
||
B23000
|
heap
|
page read and write
|
||
17B0000
|
trusted library allocation
|
page read and write
|
||
3370000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
3180000
|
heap
|
page read and write
|
||
1000000
|
trusted library allocation
|
page read and write
|
||
1971000
|
trusted library allocation
|
page read and write
|
||
12F7000
|
stack
|
page read and write
|
||
1971000
|
trusted library allocation
|
page read and write
|
||
326D000
|
heap
|
page read and write
|
||
325C000
|
heap
|
page read and write
|
||
199C000
|
trusted library allocation
|
page read and write
|
||
18DC000
|
trusted library allocation
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
18D2000
|
trusted library allocation
|
page read and write
|
||
158000
|
unkown
|
page readonly
|
||
15B3000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
296B000
|
heap
|
page read and write
|
||
65A000
|
heap
|
page read and write
|
||
B25000
|
heap
|
page read and write
|
||
1597000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
1580000
|
trusted library allocation
|
page read and write
|
||
1597000
|
trusted library allocation
|
page read and write
|
||
3EB4000
|
trusted library allocation
|
page read and write
|
||
64B000
|
heap
|
page read and write
|
||
FEA000
|
stack
|
page read and write
|
||
5794000
|
trusted library allocation
|
page read and write
|
||
3D34000
|
trusted library allocation
|
page read and write
|
||
2962000
|
heap
|
page read and write
|
||
6E8B000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
1A2B000
|
trusted library allocation
|
page read and write
|
||
1982000
|
trusted library allocation
|
page read and write
|
||
14E4000
|
heap
|
page read and write
|
||
57F7000
|
trusted library allocation
|
page read and write
|
||
531C000
|
stack
|
page read and write
|
||
18D4000
|
trusted library allocation
|
page read and write
|
||
1534000
|
heap
|
page read and write
|
||
6EA3000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
31CE000
|
stack
|
page read and write
|
||
3238000
|
heap
|
page read and write
|
||
B2B000
|
heap
|
page read and write
|
||
3E39000
|
trusted library allocation
|
page read and write
|
||
296F000
|
heap
|
page read and write
|
||
B29000
|
heap
|
page read and write
|
||
199E000
|
trusted library allocation
|
page read and write
|
||
29EE000
|
stack
|
page read and write
|
||
3D01000
|
trusted library allocation
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
198C000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
2964000
|
heap
|
page read and write
|
||
1460000
|
heap
|
page read and write
|
||
296F000
|
heap
|
page read and write
|
||
21DE000
|
stack
|
page read and write
|
||
16E9000
|
trusted library allocation
|
page read and write
|
||
31F0000
|
heap
|
page read and write
|
||
2966000
|
heap
|
page read and write
|
||
18DA000
|
trusted library allocation
|
page read and write
|
||
1994000
|
trusted library allocation
|
page read and write
|
||
3277000
|
heap
|
page read and write
|
||
15FB000
|
trusted library allocation
|
page read and write
|
||
33B3000
|
trusted library allocation
|
page read and write
|
||
FF4000
|
heap
|
page read and write
|
||
66C2000
|
trusted library allocation
|
page read and write
|
||
F42000
|
unkown
|
page readonly
|
||
197F000
|
trusted library allocation
|
page read and write
|
||
4720000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
18D5000
|
trusted library allocation
|
page read and write
|
||
FEE000
|
stack
|
page read and write
|
||
169B000
|
trusted library allocation
|
page read and write
|
||
17B1000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
326E000
|
heap
|
page read and write
|
||
91000
|
unkown
|
page execute read
|
||
4F4000
|
unkown
|
page readonly
|
||
3A51000
|
heap
|
page read and write
|
||
19E0000
|
heap
|
page execute and read and write
|
||
324E000
|
heap
|
page read and write
|
||
8BDE000
|
stack
|
page read and write
|
||
59A0000
|
trusted library allocation
|
page execute and read and write
|
||
3D01000
|
trusted library allocation
|
page read and write
|
||
96F000
|
stack
|
page read and write
|
||
1646000
|
trusted library allocation
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
64BA000
|
heap
|
page read and write
|
||
AFF000
|
heap
|
page read and write
|
||
183E000
|
stack
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
1625000
|
trusted library allocation
|
page read and write
|
||
1960000
|
trusted library allocation
|
page read and write
|
||
18D2000
|
trusted library allocation
|
page read and write
|
||
35BC000
|
stack
|
page read and write
|
||
65A000
|
heap
|
page read and write
|
||
16B6000
|
trusted library allocation
|
page read and write
|
||
5C70000
|
trusted library allocation
|
page read and write
|
||
14E8000
|
heap
|
page read and write
|
||
1972000
|
trusted library allocation
|
page read and write
|
||
5C90000
|
heap
|
page read and write
|
||
296C000
|
heap
|
page read and write
|
||
14A4000
|
heap
|
page read and write
|
||
4FCE000
|
stack
|
page read and write
|
||
14B1000
|
heap
|
page read and write
|
||
6569000
|
heap
|
page read and write
|
||
A37000
|
heap
|
page read and write
|
||
296E000
|
heap
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
194F000
|
stack
|
page read and write
|
||
1A0E000
|
trusted library allocation
|
page read and write
|
||
1392000
|
remote allocation
|
page execute and read and write
|
||
64E000
|
heap
|
page read and write
|
||
1999000
|
trusted library allocation
|
page read and write
|
||
327D000
|
heap
|
page read and write
|
||
1974000
|
trusted library allocation
|
page read and write
|
||
18D1000
|
trusted library allocation
|
page read and write
|
||
1A3F000
|
trusted library allocation
|
page read and write
|
||
2190000
|
heap
|
page read and write
|
||
296D000
|
heap
|
page read and write
|
||
6520000
|
heap
|
page read and write
|
||
40B000
|
unkown
|
page read and write
|
||
1596000
|
trusted library allocation
|
page read and write
|
||
5800000
|
trusted library allocation
|
page read and write
|
||
3D01000
|
trusted library allocation
|
page read and write
|
||
3276000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
4970000
|
heap
|
page read and write
|
||
1965000
|
trusted library allocation
|
page read and write
|
||
1786000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
F00000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
86C000
|
stack
|
page read and write
|
||
579B000
|
trusted library allocation
|
page read and write
|
||
697000
|
heap
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
57E0000
|
trusted library allocation
|
page read and write
|
||
3D01000
|
trusted library allocation
|
page read and write
|
||
1508000
|
heap
|
page read and write
|
||
32F5000
|
trusted library allocation
|
page read and write
|
||
F4E000
|
unkown
|
page readonly
|
||
610000
|
heap
|
page read and write
|
||
197C000
|
trusted library allocation
|
page read and write
|
||
1105000
|
heap
|
page read and write
|
||
2968000
|
heap
|
page read and write
|
||
65A000
|
heap
|
page read and write
|
||
8E0000
|
heap
|
page read and write
|
||
3D89000
|
trusted library allocation
|
page read and write
|
||
1995000
|
trusted library allocation
|
page read and write
|
||
1984000
|
trusted library allocation
|
page read and write
|
||
41F000
|
unkown
|
page read and write
|
||
296C000
|
heap
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
182E000
|
trusted library allocation
|
page read and write
|
||
15AF000
|
trusted library allocation
|
page read and write
|
||
347F000
|
stack
|
page read and write
|
||
18D1000
|
trusted library allocation
|
page read and write
|
||
3E1E000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
810000
|
heap
|
page read and write
|
||
64A0000
|
heap
|
page read and write
|
||
296D000
|
heap
|
page read and write
|
||
1000000
|
trusted library allocation
|
page read and write
|
||
2968000
|
heap
|
page read and write
|
||
3D3A000
|
trusted library allocation
|
page read and write
|
||
18DF000
|
trusted library allocation
|
page read and write
|
||
18DE000
|
trusted library allocation
|
page read and write
|
||
61A000
|
heap
|
page read and write
|
||
3D99000
|
trusted library allocation
|
page read and write
|
||
64E000
|
heap
|
page read and write
|
||
6E6C000
|
heap
|
page read and write
|
||
1587000
|
trusted library allocation
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
1662000
|
trusted library allocation
|
page read and write
|
||
14D1000
|
trusted library allocation
|
page read and write
|
||
6E30000
|
heap
|
page read and write
|
||
3D3D000
|
trusted library allocation
|
page read and write
|
||
18D0000
|
trusted library allocation
|
page read and write
|
||
5F0000
|
heap
|
page read and write
|
||
197A000
|
trusted library allocation
|
page read and write
|
||
6593000
|
heap
|
page read and write
|
||
AFF000
|
heap
|
page read and write
|
||
6EAE000
|
heap
|
page read and write
|
||
18D0000
|
trusted library allocation
|
page read and write
|
||
57AE000
|
trusted library allocation
|
page read and write
|
||
2969000
|
heap
|
page read and write
|
||
18D7000
|
trusted library allocation
|
page read and write
|
||
6506000
|
heap
|
page read and write
|
||
18D5000
|
trusted library allocation
|
page read and write
|
||
3A51000
|
heap
|
page read and write
|
||
168A000
|
trusted library allocation
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
18D4000
|
trusted library allocation
|
page read and write
|
||
1584000
|
trusted library allocation
|
page read and write
|
||
1972000
|
trusted library allocation
|
page read and write
|
||
FF0000
|
heap
|
page read and write
|
||
65A000
|
heap
|
page read and write
|
||
8ADF000
|
stack
|
page read and write
|
||
1964000
|
trusted library allocation
|
page read and write
|
||
18D5000
|
trusted library allocation
|
page read and write
|
||
199D000
|
trusted library allocation
|
page read and write
|
||
22B0000
|
heap
|
page read and write
|
||
B1A000
|
heap
|
page read and write
|
||
B2B000
|
heap
|
page read and write
|
||
196E000
|
trusted library allocation
|
page read and write
|
||
2965000
|
heap
|
page read and write
|
||
5C10000
|
trusted library allocation
|
page read and write
|
||
3249000
|
heap
|
page read and write
|
||
4F8F000
|
stack
|
page read and write
|
||
2964000
|
heap
|
page read and write
|
||
57F0000
|
trusted library allocation
|
page read and write
|
||
6586000
|
heap
|
page read and write
|
||
659E000
|
heap
|
page read and write
|
||
17FD000
|
trusted library allocation
|
page read and write
|
||
74E000
|
stack
|
page read and write
|
||
30DE000
|
stack
|
page read and write
|
||
5980000
|
heap
|
page read and write
|
||
5D1E000
|
stack
|
page read and write
|
||
6E99000
|
heap
|
page read and write
|
||
A7F000
|
stack
|
page read and write
|
||
3D7F000
|
trusted library allocation
|
page read and write
|
||
1538000
|
trusted library allocation
|
page read and write
|
||
15A2000
|
trusted library allocation
|
page read and write
|
||
14E0000
|
heap
|
page read and write
|
||
324E000
|
heap
|
page read and write
|
||
5790000
|
trusted library allocation
|
page read and write
|
||
296A000
|
heap
|
page read and write
|
There are 630 hidden memdumps, click here to show them.