Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
epht1Y3TGZ.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Temp\fsfj
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\iikbjmsy
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\mtdwpx
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Roaming\Ruy_driverv2\DZIPR.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Roaming\Ruy_driverv2\DZIPR.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\DZIPR.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\DZIPR.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\a1ba81aa
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\ae0a7065
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\b8f7a7f7
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\oahisshhqlvln
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 25 13:06:17
2024, mtime=Wed Sep 25 13:06:18 2024, atime=Wed Sep 25 10:50:28 2024, length=8767704, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Ruy_driverv2\ekqqtq
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Ruy_driverv2\ipqtwm
|
data
|
dropped
|
||
C:\Users\user\ekqqtq
|
data
|
dropped
|
||
C:\Users\user\ipqtwm
|
data
|
dropped
|
||
C:\Windows\Tasks\lnfast_x64.job
|
data
|
dropped
|
There are 7 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\epht1Y3TGZ.exe
|
"C:\Users\user\Desktop\epht1Y3TGZ.exe"
|
||
C:\Users\user\DZIPR.exe
|
"C:\Users\user\DZIPR.exe"
|
||
C:\Users\user\AppData\Roaming\Ruy_driverv2\DZIPR.exe
|
C:\Users\user\AppData\Roaming\Ruy_driverv2\DZIPR.exe
|
||
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\SysWOW64\cmd.exe
|
||
C:\Users\user\AppData\Roaming\Ruy_driverv2\DZIPR.exe
|
C:\Users\user\AppData\Roaming\Ruy_driverv2\DZIPR.exe
|
||
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\SysWOW64\cmd.exe
|
||
C:\Windows\SysWOW64\explorer.exe
|
C:\Windows\SysWOW64\explorer.exe
|
||
C:\Windows\SysWOW64\explorer.exe
|
C:\Windows\SysWOW64\explorer.exe
|
||
C:\Users\user\AppData\Roaming\Ruy_driverv2\DZIPR.exe
|
"C:\Users\user\AppData\Roaming\Ruy_driverv2\DZIPR.exe"
|
||
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\SysWOW64\cmd.exe
|
||
C:\Windows\SysWOW64\explorer.exe
|
C:\Windows\SysWOW64\explorer.exe
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
There are 4 hidden processes, click here to show them.
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
fullimmersion777.com
|
|||
http://www.vmware.com/0/
|
unknown
|
||
https://www.digicert.c
|
unknown
|
||
http://www.vmware.com/0
|
unknown
|
||
https://www.datanumen.com/zip-repair/
|
unknown
|
||
http://c0rl.m%L
|
unknown
|
||
http://www.repairfile.com
|
unknown
|
||
http://www.symauth.com/cps0(
|
unknown
|
||
http://www.symauth.com/rpa00
|
unknown
|
||
http://support.datanumen.com
|
unknown
|
||
http://www.info-zip.org/
|
unknown
|
There are 1 hidden URLs, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
5156000
|
trusted library allocation
|
page read and write
|
||
353F000
|
heap
|
page read and write
|
||
5C30000
|
direct allocation
|
page read and write
|
||
5700000
|
direct allocation
|
page read and write
|
||
51CE000
|
trusted library allocation
|
page read and write
|
||
3099000
|
unkown
|
page readonly
|
||
4FD0000
|
trusted library allocation
|
page read and write
|
||
510A000
|
trusted library allocation
|
page read and write
|
||
56C0000
|
direct allocation
|
page read and write
|
||
45D2000
|
trusted library allocation
|
page read and write
|
||
4856000
|
trusted library allocation
|
page read and write
|
||
26F9000
|
unkown
|
page readonly
|
||
2799000
|
unkown
|
page readonly
|
||
4477000
|
heap
|
page read and write
|
||
6CCB1000
|
unkown
|
page read and write
|
||
531D000
|
direct allocation
|
page read and write
|
||
C70000
|
heap
|
page read and write
|
||
2C70000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
298A000
|
heap
|
page read and write
|
||
29E5000
|
unkown
|
page read and write
|
||
2C50000
|
heap
|
page read and write
|
||
6F8C1000
|
unkown
|
page read and write
|
||
E50000
|
heap
|
page read and write
|
||
51E9000
|
direct allocation
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2926000
|
heap
|
page read and write
|
||
2F60000
|
heap
|
page read and write
|
||
30C0000
|
direct allocation
|
page read and write
|
||
34CC000
|
heap
|
page read and write
|
||
52C0000
|
direct allocation
|
page read and write
|
||
538E000
|
direct allocation
|
page read and write
|
||
E3A000
|
heap
|
page read and write
|
||
4A69000
|
direct allocation
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
3170000
|
heap
|
page read and write
|
||
35C6000
|
heap
|
page read and write
|
||
2F7E000
|
unkown
|
page read and write
|
||
41C1000
|
unkown
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
95F000
|
stack
|
page read and write
|
||
29B7000
|
heap
|
page read and write
|
||
E1F000
|
heap
|
page read and write
|
||
6C8C5000
|
unkown
|
page read and write
|
||
2D50000
|
unkown
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
2D14000
|
unkown
|
page read and write
|
||
2D40000
|
heap
|
page read and write
|
||
2A47000
|
heap
|
page read and write
|
||
610000
|
heap
|
page read and write
|
||
2EC7000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2C30000
|
unkown
|
page readonly
|
||
CF0000
|
heap
|
page read and write
|
||
29F5000
|
heap
|
page read and write
|
||
53ED000
|
direct allocation
|
page read and write
|
||
E22000
|
heap
|
page read and write
|
||
2A67000
|
heap
|
page read and write
|
||
CA4000
|
heap
|
page read and write
|
||
32B9000
|
heap
|
page read and write
|
||
5185000
|
trusted library allocation
|
page read and write
|
||
2D7C000
|
heap
|
page read and write
|
||
3CFD000
|
unkown
|
page read and write
|
||
D36000
|
heap
|
page read and write
|
||
4640000
|
heap
|
page read and write
|
||
2A57000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
2EC6000
|
unkown
|
page read and write
|
||
B00000
|
heap
|
page read and write
|
||
29A0000
|
heap
|
page read and write
|
||
2F75000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
313F000
|
unkown
|
page read and write
|
||
8A2000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2F3F000
|
unkown
|
page read and write
|
||
33BE000
|
heap
|
page read and write
|
||
413000
|
unkown
|
page readonly
|
||
29E4000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
1DC000
|
stack
|
page read and write
|
||
5A5E000
|
stack
|
page read and write
|
||
31B1000
|
heap
|
page read and write
|
||
29EA000
|
stack
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
C80000
|
heap
|
page read and write
|
||
2C6E000
|
unkown
|
page read and write
|
||
E37000
|
heap
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
6CC81000
|
unkown
|
page execute read
|
||
401000
|
unkown
|
page execute read
|
||
8C8000
|
unkown
|
page read and write
|
||
C70000
|
heap
|
page read and write
|
||
3180000
|
unkown
|
page read and write
|
||
5671000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
E9D000
|
heap
|
page read and write
|
||
27B1000
|
unkown
|
page write copy
|
||
6F8C5000
|
unkown
|
page read and write
|
||
D1E000
|
stack
|
page read and write
|
||
31E1000
|
heap
|
page read and write
|
||
3300000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
6CCB9000
|
unkown
|
page readonly
|
||
29E4000
|
unkown
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
3204000
|
unkown
|
page read and write
|
||
E80000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
417000
|
unkown
|
page execute read
|
||
E10000
|
heap
|
page read and write
|
||
2EC7000
|
unkown
|
page read and write
|
||
53E9000
|
direct allocation
|
page read and write
|
||
252D000
|
heap
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2BB0000
|
heap
|
page read and write
|
||
660000
|
heap
|
page read and write
|
||
3F35000
|
unkown
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
31E1000
|
heap
|
page read and write
|
||
D16000
|
heap
|
page read and write
|
||
CA4000
|
heap
|
page read and write
|
||
2CE0000
|
unkown
|
page read and write
|
||
420A000
|
unkown
|
page read and write
|
||
34E8000
|
heap
|
page read and write
|
||
2520000
|
heap
|
page read and write
|
||
5369000
|
direct allocation
|
page read and write
|
||
3333000
|
heap
|
page read and write
|
||
2A99000
|
heap
|
page read and write
|
||
417000
|
unkown
|
page write copy
|
||
29E4000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
EEA000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2D70000
|
heap
|
page read and write
|
||
D13000
|
heap
|
page read and write
|
||
56E000
|
stack
|
page read and write
|
||
34B9000
|
heap
|
page read and write
|
||
570000
|
heap
|
page read and write
|
||
2961000
|
heap
|
page read and write
|
||
2A0C000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
D74000
|
heap
|
page read and write
|
||
2A31000
|
heap
|
page read and write
|
||
101E000
|
stack
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
CF4000
|
heap
|
page read and write
|
||
2760000
|
heap
|
page read and write
|
||
2CF7000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
EAF000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
4B9D000
|
direct allocation
|
page read and write
|
||
3171000
|
unkown
|
page read and write
|
||
CF4000
|
heap
|
page read and write
|
||
5240000
|
direct allocation
|
page read and write
|
||
27B8000
|
unkown
|
page readonly
|
||
2D30000
|
unkown
|
page readonly
|
||
5AFE000
|
stack
|
page read and write
|
||
2E3C000
|
stack
|
page read and write
|
||
E10000
|
heap
|
page read and write
|
||
2994000
|
heap
|
page read and write
|
||
E7C000
|
heap
|
page read and write
|
||
EB9000
|
heap
|
page read and write
|
||
307F000
|
unkown
|
page read and write
|
||
2A97000
|
heap
|
page read and write
|
||
29E5000
|
unkown
|
page read and write
|
||
297E000
|
stack
|
page read and write
|
||
CC0000
|
heap
|
page read and write
|
||
2A90000
|
heap
|
page read and write
|
||
29E5000
|
unkown
|
page read and write
|
||
E1F000
|
heap
|
page read and write
|
||
40C0000
|
unkown
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
2510000
|
heap
|
page read and write
|
||
2796000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
440000
|
heap
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
3EA0000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
D16000
|
heap
|
page read and write
|
||
30C2000
|
unkown
|
page write copy
|
||
CF4000
|
heap
|
page read and write
|
||
31A4000
|
unkown
|
page read and write
|
||
104E000
|
stack
|
page read and write
|
||
2A00000
|
heap
|
page read and write
|
||
2950000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
459A000
|
heap
|
page read and write
|
||
2A31000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
2EC6000
|
unkown
|
page read and write
|
||
283E000
|
stack
|
page read and write
|
||
8C8000
|
unkown
|
page write copy
|
||
8C8000
|
unkown
|
page read and write
|
||
536D000
|
direct allocation
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
50C0000
|
direct allocation
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
280F000
|
heap
|
page read and write
|
||
3430000
|
heap
|
page read and write
|
||
545E000
|
direct allocation
|
page read and write
|
||
575000
|
heap
|
page read and write
|
||
33ED000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
C70000
|
heap
|
page read and write
|
||
6F8C5000
|
unkown
|
page read and write
|
||
E80000
|
heap
|
page read and write
|
||
2D72000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
E81000
|
heap
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
6C2000
|
heap
|
page read and write
|
||
E1C000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
4E25000
|
heap
|
page read and write
|
||
30B8000
|
unkown
|
page readonly
|
||
2791000
|
heap
|
page read and write
|
||
3FC0000
|
unkown
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
29DF000
|
heap
|
page read and write
|
||
66E000
|
heap
|
page read and write
|
||
2741000
|
unkown
|
page execute read
|
||
4C0E000
|
direct allocation
|
page read and write
|
||
3FD2000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
55A1000
|
unkown
|
page read and write
|
||
85E000
|
stack
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
CA0000
|
heap
|
page read and write
|
||
2D60000
|
direct allocation
|
page read and write
|
||
55F0000
|
unkown
|
page read and write
|
||
3200000
|
unkown
|
page read and write
|
||
3FC0000
|
unkown
|
page read and write
|
||
309D000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
6F8C1000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
4837000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
2A20000
|
heap
|
page read and write
|
||
2C10000
|
unkown
|
page readonly
|
||
E9A000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
E98000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
317A000
|
heap
|
page read and write
|
||
4F48000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
D36000
|
heap
|
page read and write
|
||
D36000
|
heap
|
page read and write
|
||
CF4000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2721000
|
heap
|
page read and write
|
||
32B0000
|
heap
|
page read and write
|
||
30E0000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
33A0000
|
heap
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
2A4D000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
293F000
|
stack
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
DF7000
|
heap
|
page read and write
|
||
2D20000
|
unkown
|
page readonly
|
||
E11000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
33BB000
|
heap
|
page read and write
|
||
C80000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
26A1000
|
unkown
|
page execute read
|
||
262C000
|
heap
|
page read and write
|
||
2920000
|
heap
|
page read and write
|
||
29E0000
|
heap
|
page read and write
|
||
3190000
|
unkown
|
page read and write
|
||
D18000
|
heap
|
page read and write
|
||
D16000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
8D0000
|
unkown
|
page readonly
|
||
2960000
|
heap
|
page read and write
|
||
581D000
|
unkown
|
page read and write
|
||
2D10000
|
unkown
|
page readonly
|
||
D2E000
|
heap
|
page read and write
|
||
E3E000
|
stack
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2D10000
|
heap
|
page read and write
|
||
E9C000
|
heap
|
page read and write
|
||
3AB9000
|
trusted library allocation
|
page read and write
|
||
2940000
|
heap
|
page read and write
|
||
4A6D000
|
direct allocation
|
page read and write
|
||
110F000
|
stack
|
page read and write
|
||
2521000
|
heap
|
page read and write
|
||
2BB0000
|
heap
|
page read and write
|
||
3164000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2521000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
3702000
|
heap
|
page read and write
|
||
6C890000
|
unkown
|
page readonly
|
||
2D14000
|
unkown
|
page read and write
|
||
2CFA000
|
stack
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
2460000
|
direct allocation
|
page read and write
|
||
98B000
|
unkown
|
page readonly
|
||
2CF0000
|
direct allocation
|
page read and write
|
||
4D6D000
|
heap
|
page read and write
|
||
27FE000
|
stack
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
31B0000
|
heap
|
page read and write
|
||
3ABD000
|
trusted library allocation
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2BA0000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
2A30000
|
heap
|
page read and write
|
||
69F000
|
heap
|
page read and write
|
||
29DC000
|
stack
|
page read and write
|
||
4D44000
|
heap
|
page read and write
|
||
303F000
|
unkown
|
page read and write
|
||
6C8C1000
|
unkown
|
page read and write
|
||
520000
|
heap
|
page read and write
|
||
296F000
|
stack
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
3499000
|
heap
|
page read and write
|
||
6C8B8000
|
unkown
|
page readonly
|
||
D30000
|
heap
|
page read and write
|
||
51F0000
|
direct allocation
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
55A0000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2D70000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2EC7000
|
unkown
|
page read and write
|
||
29AA000
|
stack
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
480D000
|
trusted library allocation
|
page read and write
|
||
C70000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
6CCB5000
|
unkown
|
page read and write
|
||
317F000
|
unkown
|
page read and write
|
||
270D000
|
stack
|
page read and write
|
||
CA4000
|
heap
|
page read and write
|
||
4589000
|
trusted library allocation
|
page read and write
|
||
2C20000
|
heap
|
page read and write
|
||
31D8000
|
heap
|
page read and write
|
||
3172000
|
unkown
|
page read and write
|
||
D16000
|
heap
|
page read and write
|
||
EB3000
|
heap
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
4940000
|
direct allocation
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
28AB000
|
stack
|
page read and write
|
||
2CFF000
|
stack
|
page read and write
|
||
8A2000
|
unkown
|
page write copy
|
||
CF4000
|
heap
|
page read and write
|
||
CF0000
|
heap
|
page read and write
|
||
2C20000
|
unkown
|
page readonly
|
||
31A4000
|
unkown
|
page read and write
|
||
E7C000
|
heap
|
page read and write
|
||
525E000
|
direct allocation
|
page read and write
|
||
6CCA8000
|
unkown
|
page readonly
|
||
29E4000
|
unkown
|
page read and write
|
||
51ED000
|
direct allocation
|
page read and write
|
||
D10000
|
heap
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
510D000
|
trusted library allocation
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
D6F000
|
heap
|
page read and write
|
||
53DE000
|
direct allocation
|
page read and write
|
||
CA4000
|
heap
|
page read and write
|
||
28B0000
|
heap
|
page read and write
|
||
55A1000
|
unkown
|
page read and write
|
||
E9A000
|
heap
|
page read and write
|
||
3333000
|
heap
|
page read and write
|
||
2BA6000
|
heap
|
page read and write
|
||
34BE000
|
heap
|
page read and write
|
||
41C000
|
unkown
|
page execute read
|
||
2988000
|
heap
|
page read and write
|
||
432000
|
unkown
|
page readonly
|
||
29E4000
|
unkown
|
page read and write
|
||
26CC000
|
stack
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
3EC0000
|
unkown
|
page read and write
|
||
104F000
|
stack
|
page read and write
|
||
CA4000
|
heap
|
page read and write
|
||
2ABE000
|
stack
|
page read and write
|
||
2EC8000
|
heap
|
page read and write
|
||
4DA3000
|
heap
|
page read and write
|
||
DF0000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
6C891000
|
unkown
|
page execute read
|
||
2B00000
|
heap
|
page read and write
|
||
6CC80000
|
unkown
|
page readonly
|
||
19A000
|
stack
|
page read and write
|
||
595E000
|
stack
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
2961000
|
heap
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
FDF000
|
stack
|
page read and write
|
||
3E17000
|
unkown
|
page read and write
|
||
56B0000
|
unkown
|
page read and write
|
||
32E8000
|
heap
|
page read and write
|
||
2521000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
600000
|
heap
|
page read and write
|
||
6F891000
|
unkown
|
page execute read
|
||
5671000
|
unkown
|
page read and write
|
||
111E000
|
stack
|
page read and write
|
||
4EC6000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
32A8000
|
heap
|
page read and write
|
||
2C9E000
|
unkown
|
page read and write
|
||
3160000
|
heap
|
page read and write
|
||
DFB000
|
heap
|
page read and write
|
||
2BB8000
|
heap
|
page read and write
|
||
D36000
|
heap
|
page read and write
|
||
5319000
|
direct allocation
|
page read and write
|
||
D36000
|
heap
|
page read and write
|
||
E1F000
|
heap
|
page read and write
|
||
30B1000
|
unkown
|
page write copy
|
||
29E4000
|
unkown
|
page read and write
|
||
CBE000
|
stack
|
page read and write
|
||
40C0000
|
unkown
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
E29000
|
heap
|
page read and write
|
||
D16000
|
heap
|
page read and write
|
||
6F8B8000
|
unkown
|
page readonly
|
||
5A60000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
114F000
|
stack
|
page read and write
|
||
E32000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
D36000
|
heap
|
page read and write
|
||
3FA0000
|
unkown
|
page read and write
|
||
E35000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
B05000
|
heap
|
page read and write
|
||
3D46000
|
unkown
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
3041000
|
unkown
|
page execute read
|
||
2B50000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
360D000
|
heap
|
page read and write
|
||
2DCC000
|
stack
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
3165000
|
unkown
|
page read and write
|
||
D36000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
CF4000
|
heap
|
page read and write
|
||
D36000
|
heap
|
page read and write
|
||
100F000
|
stack
|
page read and write
|
||
CEE000
|
stack
|
page read and write
|
||
3F13000
|
unkown
|
page read and write
|
||
31E0000
|
heap
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
375A000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
55F1000
|
unkown
|
page read and write
|
||
2D84000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2C00000
|
unkown
|
page readonly
|
||
4037000
|
unkown
|
page read and write
|
||
3080000
|
unkown
|
page read and write
|
||
2E50000
|
heap
|
page read and write
|
||
2AA6000
|
heap
|
page read and write
|
||
57C0000
|
heap
|
page read and write
|
||
26FE000
|
unkown
|
page read and write
|
||
6F890000
|
unkown
|
page readonly
|
||
CF4000
|
heap
|
page read and write
|
||
EB0000
|
heap
|
page read and write
|
||
2B50000
|
heap
|
page read and write
|
||
55F1000
|
unkown
|
page read and write
|
||
27C2000
|
unkown
|
page write copy
|
||
E58000
|
heap
|
page read and write
|
||
31D0000
|
heap
|
page read and write
|
||
C80000
|
heap
|
page read and write
|
||
2722000
|
unkown
|
page write copy
|
||
2EC6000
|
unkown
|
page read and write
|
||
100F000
|
stack
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
31A0000
|
unkown
|
page read and write
|
||
29F0000
|
unkown
|
page readonly
|
||
66A000
|
heap
|
page read and write
|
||
28EB000
|
stack
|
page read and write
|
||
2B70000
|
heap
|
page read and write
|
||
303D000
|
stack
|
page read and write
|
||
31A4000
|
unkown
|
page read and write
|
||
2985000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
5BFF000
|
stack
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
40AF000
|
unkown
|
page read and write
|
||
2A7F000
|
stack
|
page read and write
|
||
41A000
|
unkown
|
page readonly
|
||
2EC0000
|
heap
|
page read and write
|
||
E3B000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
330C000
|
unkown
|
page read and write
|
||
29E5000
|
unkown
|
page read and write
|
||
3164000
|
unkown
|
page read and write
|
||
413000
|
unkown
|
page readonly
|
||
2EAE000
|
unkown
|
page read and write
|
||
CF4000
|
heap
|
page read and write
|
||
5BE000
|
stack
|
page read and write
|
||
CCE000
|
stack
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2EC7000
|
unkown
|
page read and write
|
||
3B2E000
|
trusted library allocation
|
page read and write
|
||
4B99000
|
direct allocation
|
page read and write
|
||
31A0000
|
heap
|
page read and write
|
||
267D000
|
stack
|
page read and write
|
||
E3A000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
3FB2000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
D10000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
2EC7000
|
unkown
|
page read and write
|
||
31B1000
|
heap
|
page read and write
|
||
2718000
|
unkown
|
page readonly
|
||
D16000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
35B8000
|
heap
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
4C21000
|
heap
|
page read and write
|
||
5C20000
|
unkown
|
page read and write
|
||
CA4000
|
heap
|
page read and write
|
||
32BB000
|
heap
|
page read and write
|
||
4E90000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page readonly
|
||
2BBF000
|
stack
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
DAB000
|
heap
|
page read and write
|
||
2D7C000
|
heap
|
page read and write
|
||
CA4000
|
heap
|
page read and write
|
||
4ADE000
|
direct allocation
|
page read and write
|
||
D36000
|
heap
|
page read and write
|
||
E1C000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
CCE000
|
stack
|
page read and write
|
||
4A70000
|
direct allocation
|
page read and write
|
||
591E000
|
unkown
|
page read and write
|
||
D16000
|
heap
|
page read and write
|
||
4714000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
3470000
|
heap
|
page read and write
|
||
34A7000
|
heap
|
page read and write
|
||
2D3C000
|
stack
|
page read and write
|
||
31DE000
|
unkown
|
page read and write
|
||
2C7C000
|
heap
|
page read and write
|
||
E2D000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2C40000
|
unkown
|
page readonly
|
||
298C000
|
heap
|
page read and write
|
||
50C1000
|
trusted library allocation
|
page read and write
|
||
4700000
|
heap
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
2CDE000
|
unkown
|
page read and write
|
||
432000
|
unkown
|
page readonly
|
||
3110000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
3160000
|
unkown
|
page read and write
|
||
3204000
|
unkown
|
page read and write
|
||
E22000
|
heap
|
page read and write
|
||
4F87000
|
trusted library allocation
|
page read and write
|
||
30DE000
|
unkown
|
page read and write
|
||
2724000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
277A000
|
heap
|
page read and write
|
||
2A9B000
|
heap
|
page read and write
|
||
8C9000
|
unkown
|
page read and write
|
||
35E3000
|
heap
|
page read and write
|
||
DF9000
|
heap
|
page read and write
|
||
2BFE000
|
stack
|
page read and write
|
||
3637000
|
heap
|
page read and write
|
||
CA4000
|
heap
|
page read and write
|
||
2711000
|
unkown
|
page write copy
|
||
D16000
|
heap
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
||
2EC6000
|
unkown
|
page read and write
|
||
3990000
|
trusted library allocation
|
page read and write
|
||
2770000
|
heap
|
page read and write
|
||
2D14000
|
unkown
|
page read and write
|
||
3D14000
|
unkown
|
page read and write
|
||
417000
|
unkown
|
page read and write
|
||
29E4000
|
unkown
|
page read and write
|
There are 602 hidden memdumps, click here to show them.