Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
RFQ No3756368.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck
|
very short file (no magic)
|
dropped
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\bc49718863ee53e026d805ec372039e9_d06ed635-68f6-4e9a-955c-4899f5f57b9a
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\RFQ No3756368.exe
|
'C:\Users\user\Desktop\RFQ No3756368.exe'
|
|
|
|
C:\Users\user\Desktop\RFQ No3756368.exe
|
'C:\Users\user\Desktop\RFQ No3756368.exe'
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://63.141.228.141/32.php/nuldTOn9SBn3G
|
63.141.228.141
|
|
|
|
https://doc-14-7g-docs.googleusercontent.com/ytq
|
unknown
|
|
|
|
http://pki.goog/gsr2/GTS1O1.crt0
|
unknown
|
|
|
|
http://crl.pki.goog/gsr2/gsr2.crl0?
|
unknown
|
|
|
|
https://doc-14-7g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/9u2nstv2
|
unknown
|
|
|
|
https://pki.goog/repository/0
|
unknown
|
|
|
|
https://doc-14-7g-docs.googleusercontent.com/
|
unknown
|
|
|
|
http://crl.pki.goog/GTS1O1core.crl0
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
googlehosted.l.googleusercontent.com
|
142.250.201.193
|
|
|
|
doc-14-7g-docs.googleusercontent.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
63.141.228.141
|
unknown
|
United States
|
|
|
|
142.250.201.193
|
googlehosted.l.googleusercontent.com
|
United States
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3D82000
|
unkown
|
page readonly
|
|
|
|
7FF5CA6C9000
|
unkown
|
page readonly
|
|
|
|
2B1D5010000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
unkown
|
page read and write
|
|
|
|
2B1D45D0000
|
unkown
|
page read and write
|
|
|
|
2200000
|
unkown
|
page readonly
|
|
|
|
3BA0000
|
unkown
|
page readonly
|
|
|
|
35E9000
|
unkown
|
page readonly
|
|
|
|
520000
|
heap default
|
page read and write
|
|
|
|
7FF5CAB66000
|
unkown
|
page readonly
|
|
|
|
7FF5CAABF000
|
unkown
|
page readonly
|
|
|
|
3D86000
|
unkown
|
page readonly
|
|
|
|
3D8D000
|
unkown
|
page readonly
|
|
|
|
60000
|
unkown
|
page read and write
|
|
|
|
2B1D4500000
|
unkown
|
page read and write
|
|
|
|
7FF550343000
|
unkown
|
page readonly
|
|
|
|
2B1D45E6000
|
unkown
|
page read and write
|
|
|
|
3C70000
|
unkown
|
page readonly
|
|
|
|
1E18F000
|
unkown
|
page read and write
|
|
|
|
BDC99FA000
|
unkown
|
page read and write
|
|
|
|
7FF5CAAF5000
|
unkown
|
page readonly
|
|
|
|
7FF5CA7BA000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB58000
|
unkown
|
page readonly
|
|
|
|
7FF550283000
|
unkown
|
page readonly
|
|
|
|
419F000
|
unkown
|
page read and write
|
|
|
|
75F000
|
unkown
|
page read and write
|
|
|
|
7FF5503AF000
|
unkown
|
page readonly
|
|
|
|
13A9A1D0000
|
unkown
|
page readonly
|
|
|
|
2B1E000
|
unkown
|
page read and write
|
|
|
|
7FF5CA3F1000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB61000
|
unkown
|
page readonly
|
|
|
|
7FF5503DE000
|
unkown
|
page readonly
|
|
|
|
2B1D5610000
|
unkown
|
page read and write
|
|
|
|
3A25000
|
unkown
|
page readonly
|
|
|
|
41C000
|
unkown image
|
page execute read
|
|
|
|
7FF5CAB07000
|
unkown
|
page readonly
|
|
|
|
BDC9D7B000
|
unkown
|
page read and write
|
|
|
|
30E4000
|
unkown
|
page readonly
|
|
|
|
7FF5503E8000
|
unkown
|
page readonly
|
|
|
|
2B1D4783000
|
unkown
|
page read and write
|
|
|
|
7FF550472000
|
unkown
|
page readonly
|
|
|
|
7FF5CAABB000
|
unkown
|
page readonly
|
|
|
|
8BF000
|
unkown
|
page read and write
|
|
|
|
7FF5CABD4000
|
unkown
|
page readonly
|
|
|
|
3AF0000
|
unkown
|
page readonly
|
|
|
|
41C000
|
unkown image
|
page execute read
|
|
|
|
2B1D5510000
|
unkown
|
page read and write
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
99C000
|
heap default
|
page read and write
|
|
|
|
7FF5CAAC4000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB44000
|
unkown
|
page readonly
|
|
|
|
3F30000
|
unkown
|
page readonly
|
|
|
|
37D5000
|
unkown
|
page readonly
|
|
|
|
2B1D45A2000
|
unkown
|
page read and write
|
|
|
|
2B1D4534000
|
unkown
|
page read and write
|
|
|
|
2B1D252B000
|
unkown
|
page read and write
|
|
|
|
900000
|
heap default
|
page read and write
|
|
|
|
2B1D4A00000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2B1D3EB0000
|
unkown
|
page readonly
|
|
|
|
7FF55004F000
|
unkown
|
page readonly
|
|
|
|
2B1D245F000
|
unkown
|
page read and write
|
|
|
|
2B1D45B4000
|
unkown
|
page read and write
|
|
|
|
948000
|
heap default
|
page read and write
|
|
|
|
409E000
|
unkown
|
page read and write
|
|
|
|
965000
|
heap default
|
page read and write
|
|
|
|
2B1D4240000
|
unkown
|
page read and write
|
|
|
|
BDC9A7B000
|
unkown
|
page read and write
|
|
|
|
7FF550464000
|
unkown
|
page readonly
|
|
|
|
7FF55037A000
|
unkown
|
page readonly
|
|
|
|
7FF5CA924000
|
unkown
|
page readonly
|
|
|
|
2B1D450D000
|
unkown
|
page read and write
|
|
|
|
2B1D2468000
|
unkown
|
page read and write
|
|
|
|
3BA2000
|
unkown
|
page readonly
|
|
|
|
2B1D2470000
|
unkown
|
page read and write
|
|
|
|
3419000
|
unkown
|
page readonly
|
|
|
|
7FF5CAA92000
|
unkown
|
page readonly
|
|
|
|
7FF5CAA82000
|
unkown
|
page readonly
|
|
|
|
2B1D255C000
|
unkown
|
page read and write
|
|
|
|
7FF5CA8B6000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB3A000
|
unkown
|
page readonly
|
|
|
|
1E211000
|
unkown
|
page read and write
|
|
|
|
907000
|
heap default
|
page read and write
|
|
|
|
3D10000
|
unkown
|
page readonly
|
|
|
|
1DDB0000
|
unkown
|
page readonly
|
|
|
|
2B1D463E000
|
unkown
|
page read and write
|
|
|
|
2B1D5510000
|
unkown
|
page read and write
|
|
|
|
7FF550471000
|
unkown
|
page readonly
|
|
|
|
BDC9DFA000
|
unkown
|
page read and write
|
|
|
|
2B1D4568000
|
unkown
|
page read and write
|
|
|
|
39E2000
|
unkown
|
page readonly
|
|
|
|
2B1D255D000
|
unkown
|
page read and write
|
|
|
|
2B1D4578000
|
unkown
|
page read and write
|
|
|
|
3BBB000
|
unkown
|
page readonly
|
|
|
|
405000
|
unkown image
|
page execute read
|
|
|
|
3AF2000
|
unkown
|
page readonly
|
|
|
|
430000
|
unkown
|
page readonly
|
|
|
|
2B1D5110000
|
unkown
|
page read and write
|
|
|
|
7FF5CAADA000
|
unkown
|
page readonly
|
|
|
|
98F000
|
heap default
|
page read and write
|
|
|
|
34C5000
|
unkown
|
page readonly
|
|
|
|
7FF55003C000
|
unkown
|
page readonly
|
|
|
|
BDC9E7B000
|
unkown
|
page read and write
|
|
|
|
2B1D5110000
|
unkown
|
page read and write
|
|
|
|
3442000
|
unkown
|
page readonly
|
|
|
|
3E40000
|
unkown
|
page readonly
|
|
|
|
344267F000
|
unkown
|
page read and write
|
|
|
|
7FF550380000
|
unkown
|
page readonly
|
|
|
|
2B20000
|
heap private
|
page read and write
|
|
|
|
7FF5CA9EB000
|
unkown
|
page readonly
|
|
|
|
2B1D4250000
|
unkown
|
page readonly
|
|
|
|
2B1D5710000
|
unkown
|
page read and write
|
|
|
|
2B1D4600000
|
unkown
|
page read and write
|
|
|
|
3E60000
|
unkown
|
page readonly
|
|
|
|
381B000
|
unkown
|
page readonly
|
|
|
|
8DE000
|
unkown
|
page read and write
|
|
|
|
30D2000
|
unkown
|
page readonly
|
|
|
|
1D9FF000
|
unkown
|
page read and write
|
|
|
|
2B1D4210000
|
unkown
|
page read and write
|
|
|
|
7FF5CA7BF000
|
unkown
|
page readonly
|
|
|
|
2B1D24E9000
|
unkown
|
page read and write
|
|
|
|
7FF5CA915000
|
unkown
|
page readonly
|
|
|
|
8C0000
|
unkown
|
page readonly
|
|
|
|
7FF550385000
|
unkown
|
page readonly
|
|
|
|
2B1D4612000
|
unkown
|
page read and write
|
|
|
|
7FF550057000
|
unkown
|
page readonly
|
|
|
|
52A000
|
heap default
|
page read and write
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
3EB0000
|
unkown
|
page readonly
|
|
|
|
41C000
|
unkown image
|
page execute read
|
|
|
|
4460000
|
unkown
|
page read and write
|
|
|
|
2270000
|
unkown
|
page read and write
|
|
|
|
7FF5CAA3D000
|
unkown
|
page readonly
|
|
|
|
39F5000
|
unkown
|
page readonly
|
|
|
|
22A0000
|
unkown
|
page read and write
|
|
|
|
7FF5CAA8C000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2230000
|
unkown
|
page read and write
|
|
|
|
35EF000
|
unkown
|
page readonly
|
|
|
|
2B1D256D000
|
unkown
|
page read and write
|
|
|
|
1E205000
|
unkown
|
page read and write
|
|
|
|
9E0000
|
unkown
|
page readonly
|
|
|
|
2B1D249A000
|
unkown
|
page read and write
|
|
|
|
572000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5CABDA000
|
unkown
|
page readonly
|
|
|
|
2B1D4743000
|
unkown
|
page read and write
|
|
|
|
2B1D4743000
|
unkown
|
page read and write
|
|
|
|
2B1D4280000
|
unkown
|
page read and write
|
|
|
|
7FF5CA7C7000
|
unkown
|
page readonly
|
|
|
|
7FF5CA9F8000
|
unkown
|
page readonly
|
|
|
|
33E9000
|
unkown
|
page readonly
|
|
|
|
3A97000
|
unkown
|
page readonly
|
|
|
|
3B60000
|
unkown
|
page readonly
|
|
|
|
2280000
|
unkown
|
page readonly
|
|
|
|
2B1D5010000
|
unkown
|
page read and write
|
|
|
|
3E02000
|
unkown
|
page readonly
|
|
|
|
7FF5CA8C8000
|
unkown
|
page readonly
|
|
|
|
3F10000
|
unkown
|
page readonly
|
|
|
|
7FF55013B000
|
unkown
|
page readonly
|
|
|
|
3DB000
|
unkown
|
page read and write
|
|
|
|
1DF00000
|
unkown
|
page readonly
|
|
|
|
2B1D5000000
|
unkown
|
page read and write
|
|
|
|
3E70000
|
unkown
|
page readonly
|
|
|
|
7FF5CAAF0000
|
unkown
|
page readonly
|
|
|
|
3A99000
|
unkown
|
page readonly
|
|
|
|
1DC3F000
|
unkown
|
page read and write
|
|
|
|
3449000
|
unkown
|
page readonly
|
|
|
|
1DF4D000
|
unkown
|
page read and write
|
|
|
|
7FF5503EE000
|
unkown
|
page readonly
|
|
|
|
7FF5CA949000
|
unkown
|
page readonly
|
|
|
|
2B1D2518000
|
unkown
|
page read and write
|
|
|
|
32E7000
|
unkown
|
page readonly
|
|
|
|
13A9A23F000
|
unkown
|
page read and write
|
|
|
|
405F000
|
unkown
|
page read and write
|
|
|
|
19E000
|
unkown
|
page read and write
|
|
|
|
37F000
|
unkown
|
page read and write
|
|
|
|
7FF5501A1000
|
unkown
|
page readonly
|
|
|
|
3A67000
|
unkown
|
page readonly
|
|
|
|
BDC9C7B000
|
unkown
|
page read and write
|
|
|
|
2B1D2502000
|
unkown
|
page read and write
|
|
|
|
37DC000
|
unkown
|
page readonly
|
|
|
|
89E000
|
unkown
|
page read and write
|
|
|
|
BDC9879000
|
unkown
|
page read and write
|
|
|
|
BDCA17F000
|
unkown
|
page read and write
|
|
|
|
7FF5CA941000
|
unkown
|
page readonly
|
|
|
|
2190000
|
unkown
|
page execute read
|
|
|
|
1DDC0000
|
unkown
|
page read and write
|
|
|
|
3B14000
|
unkown
|
page readonly
|
|
|
|
BDC9B7A000
|
unkown
|
page read and write
|
|
|
|
1E050000
|
unkown
|
page read and write
|
|
|
|
2D04000
|
heap private
|
page read and write
|
|
|
|
32B7000
|
unkown
|
page readonly
|
|
|
|
7FF5503C4000
|
unkown
|
page readonly
|
|
|
|
2B1D2462000
|
unkown
|
page read and write
|
|
|
|
1D8FA000
|
unkown
|
page read and write
|
|
|
|
7FF5CABE2000
|
unkown
|
page readonly
|
|
|
|
3BFB000
|
unkown
|
page readonly
|
|
|
|
7FF5501A5000
|
unkown
|
page readonly
|
|
|
|
1E1F7000
|
unkown
|
page read and write
|
|
|
|
1E057000
|
unkown
|
page read and write
|
|
|
|
1E08E000
|
unkown
|
page read and write
|
|
|
|
3A55000
|
unkown
|
page readonly
|
|
|
|
7FF550320000
|
unkown
|
page readonly
|
|
|
|
B00000
|
unkown
|
page readonly
|
|
|
|
13A9A200000
|
unkown
|
page read and write
|
|
|
|
1DDFE000
|
unkown
|
page read and write
|
|
|
|
2B1D2270000
|
heap default
|
page read and write
|
|
|
|
7FF5CAB69000
|
unkown
|
page readonly
|
|
|
|
BDC96FF000
|
unkown
|
page read and write
|
|
|
|
65E000
|
unkown
|
page read and write
|
|
|
|
3DD2000
|
unkown
|
page readonly
|
|
|
|
7FF5CA8CF000
|
unkown
|
page readonly
|
|
|
|
770000
|
heap default
|
page read and write
|
|
|
|
3442779000
|
unkown
|
page read and write
|
|
|
|
98000
|
unkown
|
page read and write
|
|
|
|
3D7000
|
unkown
|
page read and write
|
|
|
|
2B1D4800000
|
unkown
|
page read and write
|
|
|
|
2B1D42B0000
|
unkown
|
page readonly
|
|
|
|
2B1D46A4000
|
unkown
|
page read and write
|
|
|
|
7FF55046A000
|
unkown
|
page readonly
|
|
|
|
13A9A400000
|
unkown
|
page readonly
|
|
|
|
7FF5CA9D1000
|
unkown
|
page readonly
|
|
|
|
1E1B0000
|
unkown
|
page read and write
|
|
|
|
2B1D5410000
|
unkown
|
page read and write
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
3D89000
|
unkown
|
page readonly
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
7FF5CA911000
|
unkown
|
page readonly
|
|
|
|
2B1D24AE000
|
unkown
|
page read and write
|
|
|
|
2B1D23F0000
|
heap private
|
page read and write
|
|
|
|
7FF55004A000
|
unkown
|
page readonly
|
|
|
|
1E04C000
|
unkown
|
page read and write
|
|
|
|
2B1D2600000
|
unkown
|
page readonly
|
|
|
|
2B1D5110000
|
unkown
|
page read and write
|
|
|
|
2B1D4591000
|
unkown
|
page read and write
|
|
|
|
2B1D4653000
|
unkown
|
page read and write
|
|
|
|
730000
|
unkown
|
page readonly
|
|
|
|
2D00000
|
heap private
|
page read and write
|
|
|
|
1E1FB000
|
unkown
|
page read and write
|
|
|
|
2B1D4A82000
|
unkown
|
page read and write
|
|
|
|
ABE000
|
unkown
|
page read and write
|
|
|
|
7FF5CA34D000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
3BD4000
|
unkown
|
page readonly
|
|
|
|
21B0000
|
heap private
|
page read and write
|
|
|
|
3EA0000
|
unkown
|
page readonly
|
|
|
|
2B1D251A000
|
unkown
|
page read and write
|
|
|
|
7FF5CAAEE000
|
unkown
|
page readonly
|
|
|
|
BDC977F000
|
unkown
|
page read and write
|
|
|
|
7BE000
|
unkown
|
page read and write
|
|
|
|
366C000
|
unkown
|
page readonly
|
|
|
|
2B1D4559000
|
unkown
|
page read and write
|
|
|
|
BDC9EFA000
|
unkown
|
page read and write
|
|
|
|
7FF5CA8AB000
|
unkown
|
page readonly
|
|
|
|
2B29000
|
heap private
|
page read and write
|
|
|
|
2B1D2460000
|
unkown
|
page read and write
|
|
|
|
13A9BD70000
|
unkown
|
page readonly
|
|
|
|
7FF5CAAFB000
|
unkown
|
page readonly
|
|
|
|
2B1D2429000
|
unkown
|
page read and write
|
|
|
|
7FF5503F9000
|
unkown
|
page readonly
|
|
|
|
BDC98FF000
|
unkown
|
page read and write
|
|
|
|
2B1D45DE000
|
unkown
|
page read and write
|
|
|
|
7FF5CAB4E000
|
unkown
|
page readonly
|
|
|
|
2B1D4290000
|
unkown
|
page read and write
|
|
|
|
3AA0000
|
unkown
|
page readonly
|
|
|
|
2B1D4B00000
|
unkown
|
page read and write
|
|
|
|
30EB000
|
unkown
|
page readonly
|
|
|
|
7FF550397000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB27000
|
unkown
|
page readonly
|
|
|
|
3A07000
|
unkown
|
page readonly
|
|
|
|
BDC9FF9000
|
unkown
|
page read and write
|
|
|
|
7FF55038B000
|
unkown
|
page readonly
|
|
|
|
1E1CE000
|
unkown
|
page read and write
|
|
|
|
2B1D2400000
|
unkown
|
page read and write
|
|
|
|
3495000
|
unkown
|
page readonly
|
|
|
|
2B1D2350000
|
unkown
|
page write copy
|
|
|
|
BDC97FB000
|
unkown
|
page read and write
|
|
|
|
3357000
|
unkown
|
page readonly
|
|
|
|
2290000
|
heap private
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
3E90000
|
unkown
|
page readonly
|
|
|
|
3F07000
|
unkown
|
page readonly
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
1DD7E000
|
unkown
|
page read and write
|
|
|
|
344287A000
|
unkown
|
page read and write
|
|
|
|
2B1D255E000
|
unkown
|
page read and write
|
|
|
|
7FF550261000
|
unkown
|
page readonly
|
|
|
|
BDC9BFB000
|
unkown
|
page read and write
|
|
|
|
13A9A170000
|
heap default
|
page read and write
|
|
|
|
3362000
|
unkown
|
page readonly
|
|
|
|
A3E000
|
unkown
|
page read and write
|
|
|
|
239F000
|
unkown
|
page read and write
|
|
|
|
775000
|
heap default
|
page read and write
|
|
|
|
3435000
|
unkown
|
page readonly
|
|
|
|
3EE2000
|
unkown
|
page readonly
|
|
|
|
3B12000
|
unkown
|
page readonly
|
|
|
|
2B1D4684000
|
unkown
|
page read and write
|
|
|
|
3B10000
|
unkown
|
page readonly
|
|
|
|
2B1D24A8000
|
unkown
|
page read and write
|
|
|
|
3BC2000
|
unkown
|
page readonly
|
|
|
|
32C2000
|
unkown
|
page readonly
|
|
|
|
34426F9000
|
unkown
|
page read and write
|
|
|
|
7FF5CAADC000
|
unkown
|
page readonly
|
|
|
|
9DF000
|
unkown
|
page read and write
|
|
|
|
3412000
|
unkown
|
page readonly
|
|
|
|
2180000
|
unkown
|
page read and write
|
|
|
|
7FF5503CA000
|
unkown
|
page readonly
|
|
|
|
3405000
|
unkown
|
page readonly
|
|
|
|
2B1D4636000
|
unkown
|
page read and write
|
|
|
|
3104000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB34000
|
unkown
|
page readonly
|
|
|
|
2B1D5210000
|
unkown
|
page read and write
|
|
|
|
1DB3E000
|
unkown
|
page read and write
|
|
|
|
542000
|
heap default
|
page read and write
|
|
|
|
7FF550288000
|
unkown
|
page readonly
|
|
|
|
99A000
|
heap default
|
page read and write
|
|
|
|
2B1D4230000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page readonly
|
|
|
|
3CC0000
|
unkown
|
page readonly
|
|
|
|
7FF5503D4000
|
unkown
|
page readonly
|
|
|
|
7FF5CABE1000
|
unkown
|
page readonly
|
|
|
|
3BB4000
|
unkown
|
page readonly
|
|
|
|
7FF5CA9F3000
|
unkown
|
page readonly
|
|
|
|
2B1D45D4000
|
unkown
|
page read and write
|
|
|
|
2D10000
|
unkown
|
page readonly
|
|
|
|
2B1D4240000
|
unkown
|
page read and write
|
|
|
|
BDC997A000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5503B8000
|
unkown
|
page readonly
|
|
|
|
2B1D4802000
|
unkown
|
page read and write
|
|
|
|
13A9A302000
|
unkown
|
page read and write
|
|
|
|
BDCA07C000
|
unkown
|
page read and write
|
|
|
|
1D4C0000
|
unkown
|
page readonly
|
|
|
|
7FF550146000
|
unkown
|
page readonly
|
|
|
|
2B1D3DB0000
|
unkown
|
page read and write
|
|
|
|
26A0000
|
unkown
|
page readonly
|
|
|
|
510000
|
heap default
|
page read and write
|
|
|
|
2250000
|
unkown
|
page execute and read and write
|
|
|
|
2B1D23A0000
|
unkown
|
page readonly
|
|
|
|
1DC7E000
|
unkown
|
page read and write
|
|
|
|
2B1D45C2000
|
unkown
|
page read and write
|
|
|
|
2B30000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB1C000
|
unkown
|
page readonly
|
|
|
|
3EB2000
|
unkown
|
page readonly
|
|
|
|
2D30000
|
unkown
|
page readonly
|
|
|
|
2B1D2498000
|
unkown
|
page read and write
|
|
|
|
3F50000
|
unkown
|
page readonly
|
|
|
|
3ED7000
|
unkown
|
page readonly
|
|
|
|
BDC9F7D000
|
unkown
|
page read and write
|
|
|
|
2B1D2280000
|
unkown
|
page readonly
|
|
|
|
3E7000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
1DEFF000
|
unkown
|
page read and write
|
|
|
|
3666000
|
unkown
|
page readonly
|
|
|
|
2B1D4743000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5CA652000
|
unkown
|
page readonly
|
|
|
|
7FF5CA931000
|
unkown
|
page readonly
|
|
|
|
3C00000
|
unkown
|
page readonly
|
|
|
|
992000
|
heap default
|
page read and write
|
|
|
|
3D70000
|
unkown
|
page readonly
|
|
|
|
310B000
|
unkown
|
page readonly
|
|
|
|
7FF5CA926000
|
unkown
|
page readonly
|
|
|
|
2B1D5210000
|
unkown
|
page read and write
|
|
|
|
2240000
|
heap private
|
page read and write
|
|
|
|
2B1D4240000
|
unkown
|
page read and write
|
|
|
|
500000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB5E000
|
unkown
|
page readonly
|
|
|
|
3EE0000
|
unkown
|
page readonly
|
|
|
|
21E0000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB1F000
|
unkown
|
page readonly
|
|
|
|
33E2000
|
unkown
|
page readonly
|
|
|
|
BDC9CFB000
|
unkown
|
page read and write
|
|
|
|
13A9A4D0000
|
unkown
|
page readonly
|
|
|
|
13A9BC70000
|
unkown
|
page read and write
|
|
|
|
2B1D5110000
|
unkown
|
page read and write
|
|
|
|
79E000
|
unkown
|
page read and write
|
|
|
|
2B1D4700000
|
unkown
|
page read and write
|
|
|
|
2298000
|
heap private
|
page read and write
|
|
|
|
344231B000
|
unkown
|
page read and write
|
|
|
|
2B1D253B000
|
unkown
|
page read and write
|
|
|
|
7FF5CAAEA000
|
unkown
|
page readonly
|
|
|
|
2B1D4A02000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown
|
page readonly
|
|
|
|
2B1D23E0000
|
unkown
|
page readonly
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
3BE2000
|
unkown
|
page readonly
|
|
|
|
2B1D2463000
|
unkown
|
page read and write
|
|
|
|
13A9A110000
|
heap private
|
page read and write
|
|
|
|
344239E000
|
unkown
|
page read and write
|
|
|
|
34A2000
|
unkown
|
page readonly
|
|
|
|
2B1D4511000
|
unkown
|
page read and write
|
|
|
|
7FF5503FD000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
3A72000
|
unkown
|
page readonly
|
|
|
|
2B1D4513000
|
unkown
|
page read and write
|
|
|
|
3292000
|
unkown
|
page readonly
|
|
|
|
13A9A180000
|
unkown
|
page write copy
|
|
|
|
2B1D4A42000
|
unkown
|
page read and write
|
|
|
|
13A9A213000
|
unkown
|
page read and write
|
|
|
|
405000
|
unkown image
|
page execute read
|
|
|
|
3387000
|
unkown
|
page readonly
|
|
|
|
13A9A255000
|
unkown
|
page read and write
|
|
|
|
30F2000
|
unkown
|
page readonly
|
|
|
|
2B1D4240000
|
unkown
|
page read and write
|
|
|
|
7FF5501D9000
|
unkown
|
page readonly
|
|
|
|
7FF5CAA36000
|
unkown
|
page readonly
|
|
|
|
8E0000
|
unkown
|
page read and write
|
|
|
|
7FF5503F6000
|
unkown
|
page readonly
|
|
|
|
2B1D454B000
|
unkown
|
page read and write
|
|
|
|
7FF55037E000
|
unkown
|
page readonly
|
|
|
|
BDC967B000
|
unkown
|
page read and write
|
|
|
|
34427FF000
|
unkown
|
page read and write
|
|
|
|
3A12000
|
unkown
|
page readonly
|
|
|
|
2B1D245F000
|
unkown
|
page read and write
|
|
|
|
2B1D4B02000
|
unkown
|
page read and write
|
|
|
|
3BE0000
|
unkown
|
page readonly
|
|
|
|
3BDB000
|
unkown
|
page readonly
|
|
|
|
7FF5CAAB3000
|
unkown
|
page readonly
|
|
|
|
3479000
|
unkown
|
page readonly
|
|
|
|
2295000
|
heap private
|
page read and write
|
|
|
|
2B1D5710000
|
unkown
|
page read and write
|
|
|
|
2B1D5310000
|
unkown
|
page read and write
|
|
|
|
2B1D24CA000
|
unkown
|
page read and write
|
|
|
|
3BF4000
|
unkown
|
page readonly
|
|
|
|
3332000
|
unkown
|
page readonly
|
|
|
|
2B1D2490000
|
unkown
|
page read and write
|
|
|
|
405000
|
unkown image
|
page execute read
|
|
|
|
3AF4000
|
unkown
|
page readonly
|
|
|
|
2B1D5310000
|
unkown
|
page read and write
|
|
|
|
1DDC0000
|
unkown
|
page read and write
|
|
|
|
2B1D243F000
|
unkown
|
page read and write
|
|
|
|
3472000
|
unkown
|
page readonly
|
|
|
|
2B1D251A000
|
unkown
|
page read and write
|
|
|
|
7FF5CA7AC000
|
unkown
|
page readonly
|
|
|
|
2B1D42A0000
|
unkown
|
page readonly
|
|
|
|
3AD2000
|
unkown
|
page readonly
|
|
|
|
3E20000
|
unkown
|
page readonly
|
|
|
|
1E1A2000
|
unkown
|
page read and write
|
|
|
|
3DA0000
|
unkown
|
page readonly
|
|
|
|
3E1D000
|
unkown
|
page readonly
|
|
|
|
1E203000
|
unkown
|
page read and write
|
|
|
|
2B1D5510000
|
unkown
|
page read and write
|
|
|
|
1E1AC000
|
unkown
|
page read and write
|
|
|
|
2210000
|
unkown
|
page read and write
|
|
|
|
2B1D251C000
|
unkown
|
page read and write
|
|
|
|
2B1D5410000
|
unkown
|
page read and write
|
|
|
|
9A8000
|
heap default
|
page read and write
|
|
|
|
7FF5CAACF000
|
unkown
|
page readonly
|
|
|
|
21D0000
|
unkown
|
page read and write
|
|
|
|
1DAFE000
|
unkown
|
page read and write
|
|
|
|
7FF55027B000
|
unkown
|
page readonly
|
|
|
|
421000
|
unkown image
|
page read and write
|
|
|
|
13A9A202000
|
unkown
|
page read and write
|
|
|
|
21F0000
|
unkown
|
page readonly
|
|
|
|
3465000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5503F1000
|
unkown
|
page readonly
|
|
|
|
A7D000
|
unkown
|
page read and write
|
|
|
|
2B1D24FB000
|
unkown
|
page read and write
|
|
|
|
2B1D4270000
|
unkown
|
page read and write
|
|
|
|
1DDC0000
|
unkown
|
page read and write
|
|
|
|
23A0000
|
heap private
|
page read and write
|
|
|
|
2B1D2465000
|
unkown
|
page read and write
|
|
|
|
7FF550322000
|
unkown
|
page readonly
|
|
|
|
3AD4000
|
unkown
|
page readonly
|
|
|
|
13A9A229000
|
unkown
|
page read and write
|
|
|
|
2B1D5410000
|
unkown
|
page read and write
|
|
|
|
7FF54FBDD000
|
unkown
|
page readonly
|
|
|
|
3A85000
|
unkown
|
page readonly
|
|
|
|
8D0000
|
unkown
|
page read and write
|
|
|
|
7FF5CAA90000
|
unkown
|
page readonly
|
|
|
|
2B1D45EA000
|
unkown
|
page read and write
|
|
|
|
2B1D454D000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
3A37000
|
unkown
|
page readonly
|
|
|
|
2B1D4402000
|
unkown
|
page read and write
|
|
|
|
AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5503AC000
|
unkown
|
page readonly
|
|
|
|
BDCA0FC000
|
unkown
|
page read and write
|
|
|
|
2B1D5510000
|
unkown
|
page read and write
|
|
|
|
2B1D463A000
|
unkown
|
page read and write
|
|
|
|
3A42000
|
unkown
|
page readonly
|
|
|
|
2B1D2457000
|
unkown
|
page read and write
|
|
|
|
BDC9AFB000
|
unkown
|
page read and write
|
|
|
|
2B1D2413000
|
unkown
|
page read and write
|
|
|
|
2B1D2210000
|
heap private
|
page read and write
|
|
|
|
3D30000
|
unkown
|
page readonly
|
|
|
|
34A9000
|
unkown
|
page readonly
|
|
|
|
944000
|
heap default
|
page read and write
|
|
|
|
2B1D2513000
|
unkown
|
page read and write
|
|
|
|
3D50000
|
unkown
|
page readonly
|
|
There are 482 hidden memdumps, click here to show them.