Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
vXVHRRGG7c.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\browDownload3D\vXVHRRGG7c.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\browDownload3D\cmd01.bat
|
ASCII text, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\browDownload3D\settings.ini
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\vXVHRRGG7c.exe
|
'C:\Users\user\Desktop\vXVHRRGG7c.exe'
|
|
|
|
C:\Windows\System32\wermgr.exe
|
C:\Windows\system32\wermgr.exe
|
|
|
|
C:\Users\user\AppData\Local\browDownload3D\vXVHRRGG7c.exe
|
C:\Users\user\AppData\Local\browDownload3D\vXVHRRGG7c.exe
|
|
|
|
C:\Windows\System32\wermgr.exe
|
C:\Windows\system32\wermgr.exe
|
|
|
|
C:\Windows\System32\cmd.exe
|
C:\Windows\system32\cmd.exe
|
|
|
|
C:\Windows\System32\cmd.exe
|
C:\Windows\SYSTEM32\cmd.exe /c 'C:\Users\user\AppData\Local\browDownload3D\cmd01.bat'
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\System32\cmd.exe
|
C:\Windows\system32\cmd.exe
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://icanhazip.com/
|
104.18.7.156
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
icanhazip.com
|
104.18.7.156
|
|
|
|
9.52.17.84.dnsbl-1.uceprotect.net
|
unknown
|
|
|
|
9.52.17.84.zen.spamhaus.org
|
unknown
|
|
|
|
9.52.17.84.cbl.abuseat.org
|
unknown
|
|
|
|
9.52.17.84.b.barracudacentral.org
|
unknown
|
|
|
|
9.52.17.84.spam.dnsbl.sorbs.net
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
179.42.137.102
|
unknown
|
unknown
|
|
|
|
179.42.137.105
|
unknown
|
unknown
|
|
|
|
59.4.68.75
|
unknown
|
Korea Republic of
|
|
|
|
171.103.189.118
|
unknown
|
Thailand
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
104.18.7.156
|
icanhazip.com
|
United States
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
24A1000
|
unkown
|
page execute and read and write
|
|
|
|
FB0000
|
unkown
|
page execute and read and write
|
|
|
|
2464000
|
unkown
|
page read and write
|
|
|
|
FF4000
|
unkown
|
page read and write
|
|
|
|
1261000
|
unkown
|
page execute and read and write
|
|
|
|
23E0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF534960000
|
unkown image
|
page readonly
|
|
|
|
7FF52520C000
|
unkown image
|
page readonly
|
|
|
|
27551470000
|
unkown image
|
page readonly
|
|
|
|
275515C0000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
26EB8DA0000
|
unkown
|
page read and write
|
|
|
|
3F2F37E000
|
unkown
|
page read and write
|
|
|
|
7FF5252AD000
|
unkown image
|
page readonly
|
|
|
|
27551600000
|
unkown
|
page read and write
|
|
|
|
D8E80FE000
|
unkown
|
page read and write
|
|
|
|
E00000
|
unkown image
|
page readonly
|
|
|
|
7FF5342B1000
|
unkown image
|
page readonly
|
|
|
|
1260000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
27551613000
|
unkown
|
page read and write
|
|
|
|
2BD7EC58000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
26EB8E02000
|
unkown
|
page read and write
|
|
|
|
7AC000
|
heap default
|
page read and write
|
|
|
|
26EB8C00000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF524F45000
|
unkown image
|
page readonly
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
26EB883D000
|
unkown
|
page read and write
|
|
|
|
275514A0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown image
|
page readonly
|
|
|
|
7FF534949000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4517000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF53490E000
|
unkown image
|
page readonly
|
|
|
|
7FF5253A1000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC69000
|
unkown
|
page read and write
|
|
|
|
7FF594D3A000
|
unkown image
|
page readonly
|
|
|
|
7FF5349B7000
|
unkown image
|
page readonly
|
|
|
|
D01307E000
|
unkown
|
page read and write
|
|
|
|
26EB8D80000
|
unkown image
|
page readonly
|
|
|
|
2420000
|
unkown
|
page execute and read and write
|
|
|
|
23D000
|
unkown
|
page read and write
|
|
|
|
95B49BB000
|
unkown
|
page read and write
|
|
|
|
2755165B000
|
unkown
|
page read and write
|
|
|
|
7FF594C70000
|
unkown image
|
page readonly
|
|
|
|
95E000
|
unkown
|
page read and write
|
|
|
|
7DF5426A2000
|
unkown image
|
page readonly
|
|
|
|
91E000
|
unkown
|
page read and write
|
|
|
|
7DF533002000
|
unkown image
|
page readonly
|
|
|
|
95B557F000
|
unkown
|
page read and write
|
|
|
|
2BD7EC6A000
|
unkown
|
page read and write
|
|
|
|
D8E7DFE000
|
unkown
|
page read and write
|
|
|
|
26EB8813000
|
unkown
|
page read and write
|
|
|
|
27551470000
|
unkown image
|
page readonly
|
|
|
|
D8E79CE000
|
unkown
|
page read and write
|
|
|
|
2BD7EAD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E44F3000
|
unkown image
|
page readonly
|
|
|
|
7FF5349BD000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
2755163F000
|
unkown
|
page read and write
|
|
|
|
2450000
|
heap private
|
page read and write
|
|
|
|
7FF594C77000
|
unkown image
|
page readonly
|
|
|
|
7FF525372000
|
unkown image
|
page readonly
|
|
|
|
7FF534963000
|
unkown image
|
page readonly
|
|
|
|
7FF594C63000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E44AA000
|
unkown image
|
page readonly
|
|
|
|
770000
|
unkown image
|
page readonly
|
|
|
|
2460000
|
unkown
|
page read and write
|
|
|
|
2BD7ED02000
|
unkown
|
page read and write
|
|
|
|
7FF594C87000
|
unkown image
|
page readonly
|
|
|
|
7FF5253A1000
|
unkown image
|
page readonly
|
|
|
|
2BD7EB20000
|
heap default
|
page read and write
|
|
|
|
1A046263000
|
heap default
|
page read and write
|
|
|
|
1A046549000
|
heap private
|
page read and write
|
|
|
|
7FF534902000
|
unkown image
|
page readonly
|
|
|
|
19F000
|
unkown
|
page read and write
|
|
|
|
26EB9000000
|
unkown
|
page read and write
|
|
|
|
3F2F1FF000
|
unkown
|
page read and write
|
|
|
|
7FF594CCA000
|
unkown image
|
page readonly
|
|
|
|
26EB85C0000
|
unkown image
|
page readonly
|
|
|
|
D0131FF000
|
unkown
|
page read and write
|
|
|
|
2BD7EAC0000
|
heap private
|
page read and write
|
|
|
|
7FF5E4497000
|
unkown image
|
page readonly
|
|
|
|
62A000
|
heap default
|
page read and write
|
|
|
|
7FF525395000
|
unkown image
|
page readonly
|
|
|
|
1A046E72000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1A046E7A000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5E438B000
|
unkown image
|
page readonly
|
|
|
|
7DF5F2202000
|
unkown image
|
page readonly
|
|
|
|
42F000
|
unkown image
|
page read and write
|
|
|
|
1A046ED0000
|
unkown
|
page read and write
|
|
|
|
2BD7EC2F000
|
unkown
|
page read and write
|
|
|
|
7DF533012000
|
unkown image
|
page readonly
|
|
|
|
7FF594CCD000
|
unkown image
|
page readonly
|
|
|
|
FF1000
|
unkown
|
page execute read
|
|
|
|
3F2F0FD000
|
unkown
|
page read and write
|
|
|
|
7DF5426B0000
|
unkown image
|
page readonly
|
|
|
|
7FF594D34000
|
unkown image
|
page readonly
|
|
|
|
1A046ED6000
|
unkown
|
page read and write
|
|
|
|
1A046540000
|
heap private
|
page read and write
|
|
|
|
2BD7EC7D000
|
unkown
|
page read and write
|
|
|
|
7FF534967000
|
unkown image
|
page readonly
|
|
|
|
7FF5945C9000
|
unkown image
|
page readonly
|
|
|
|
97F000
|
unkown
|
page read and write
|
|
|
|
1A046E76000
|
unkown
|
page read and write
|
|
|
|
7FF534A12000
|
unkown image
|
page readonly
|
|
|
|
1A047130000
|
unkown
|
page read and write
|
|
|
|
2463000
|
unkown
|
page readonly
|
|
|
|
7DF5F2210000
|
unkown image
|
page readonly
|
|
|
|
1A046E60000
|
unkown
|
page read and write
|
|
|
|
7FF5E451A000
|
unkown image
|
page readonly
|
|
|
|
1A047190000
|
unkown
|
page read and write
|
|
|
|
95B577E000
|
unkown
|
page read and write
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7DF430ED0000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC66000
|
unkown
|
page read and write
|
|
|
|
7FF525379000
|
unkown image
|
page readonly
|
|
|
|
7FF524F4A000
|
unkown image
|
page readonly
|
|
|
|
7FF534A2A000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC62000
|
unkown
|
page read and write
|
|
|
|
1A04628F000
|
unkown
|
page read and write
|
|
|
|
2BD7EC3B000
|
unkown
|
page read and write
|
|
|
|
620000
|
unkown image
|
page readonly
|
|
|
|
26EB86F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E45A0000
|
unkown image
|
page readonly
|
|
|
|
7FF534A41000
|
unkown image
|
page readonly
|
|
|
|
7DF5A29B2000
|
unkown image
|
page readonly
|
|
|
|
7DF5A29B2000
|
unkown image
|
page readonly
|
|
|
|
27551E02000
|
unkown
|
page read and write
|
|
|
|
2BD7EC2D000
|
unkown
|
page read and write
|
|
|
|
7FF5E42FF000
|
unkown image
|
page readonly
|
|
|
|
7DF533010000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
heap default
|
page read and write
|
|
|
|
7FF5252AF000
|
unkown image
|
page readonly
|
|
|
|
F80000
|
unkown
|
page execute and read and write
|
|
|
|
7FF534937000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
EC0000
|
unkown
|
page read and write
|
|
|
|
7DF5F2212000
|
unkown image
|
page readonly
|
|
|
|
7DF4F00D0000
|
unkown image
|
page readonly
|
|
|
|
3CB000
|
unkown
|
page read and write
|
|
|
|
7FF594CC7000
|
unkown image
|
page readonly
|
|
|
|
7A4000
|
heap default
|
page read and write
|
|
|
|
7DF5F2220000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC5A000
|
unkown
|
page read and write
|
|
|
|
27551800000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC00000
|
unkown
|
page read and write
|
|
|
|
D8E7C7E000
|
unkown
|
page read and write
|
|
|
|
7FF594C73000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5251B7000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4326000
|
unkown image
|
page readonly
|
|
|
|
7FF5252F2000
|
unkown image
|
page readonly
|
|
|
|
7FF5252B6000
|
unkown image
|
page readonly
|
|
|
|
7FF534924000
|
unkown image
|
page readonly
|
|
|
|
1A046E50000
|
unkown
|
page read and write
|
|
|
|
7DF440570000
|
unkown image
|
page readonly
|
|
|
|
27551450000
|
unkown image
|
page read and write
|
|
|
|
1A0461D0000
|
unkown
|
page read and write
|
|
|
|
427000
|
unkown image
|
page readonly
|
|
|
|
7DF5A29D0000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
650000
|
heap default
|
page read and write
|
|
|
|
1A046230000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4572000
|
unkown image
|
page readonly
|
|
|
|
7FF5E458A000
|
unkown image
|
page readonly
|
|
|
|
7FF52502B000
|
unkown image
|
page readonly
|
|
|
|
7DF533020000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC4A000
|
unkown
|
page read and write
|
|
|
|
7FF534A41000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4267000
|
unkown image
|
page readonly
|
|
|
|
7FF525391000
|
unkown image
|
page readonly
|
|
|
|
7FF525029000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC3D000
|
unkown
|
page read and write
|
|
|
|
7FF594C47000
|
unkown image
|
page readonly
|
|
|
|
1A0461C0000
|
unkown image
|
page read and write
|
|
|
|
26EB8A00000
|
unkown image
|
page readonly
|
|
|
|
19F000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
26C0000
|
unkown
|
page execute and read and write
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
26EB8802000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
heap private
|
page read and write
|
|
|
|
7FF594D4A000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC29000
|
unkown
|
page read and write
|
|
|
|
2BD7F402000
|
unkown
|
page read and write
|
|
|
|
2461000
|
unkown
|
page execute read
|
|
|
|
1A046960000
|
unkown image
|
page readonly
|
|
|
|
7FF594C7E000
|
unkown image
|
page readonly
|
|
|
|
490000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4591000
|
unkown image
|
page readonly
|
|
|
|
61E000
|
unkown
|
page read and write
|
|
|
|
27551602000
|
unkown
|
page read and write
|
|
|
|
7FF594D51000
|
unkown image
|
page readonly
|
|
|
|
27551666000
|
unkown
|
page read and write
|
|
|
|
27551669000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF5948E8000
|
unkown image
|
page readonly
|
|
|
|
26EB85B0000
|
heap private
|
page read and write
|
|
|
|
7FF5E44B3000
|
unkown image
|
page readonly
|
|
|
|
A7F000
|
unkown
|
page read and write
|
|
|
|
1A046430000
|
unkown
|
page read and write
|
|
|
|
7FF594B0C000
|
unkown image
|
page readonly
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
59E000
|
unkown
|
page read and write
|
|
|
|
2BD7EC42000
|
unkown
|
page read and write
|
|
|
|
1A046550000
|
unkown
|
page read and write
|
|
|
|
275514C0000
|
heap default
|
page read and write
|
|
|
|
27551A00000
|
unkown image
|
page readonly
|
|
|
|
26EB8902000
|
unkown
|
page read and write
|
|
|
|
7FF5E44C7000
|
unkown image
|
page readonly
|
|
|
|
26EB8DA0000
|
unkown
|
page read and write
|
|
|
|
1A0461E0000
|
unkown image
|
page readonly
|
|
|
|
2350000
|
heap private
|
page read and write
|
|
|
|
66F000
|
heap default
|
page read and write
|
|
|
|
7FF5E44C3000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
D01317D000
|
unkown
|
page read and write
|
|
|
|
275515A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A29C2000
|
unkown image
|
page readonly
|
|
|
|
1A0461E0000
|
unkown image
|
page readonly
|
|
|
|
1A046545000
|
heap private
|
page read and write
|
|
|
|
7FF53494D000
|
unkown image
|
page readonly
|
|
|
|
27551490000
|
unkown image
|
page readonly
|
|
|
|
7FF5112B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5E44D7000
|
unkown image
|
page readonly
|
|
|
|
3F2ED4B000
|
unkown
|
page read and write
|
|
|
|
26EB8858000
|
unkown
|
page read and write
|
|
|
|
DE0000
|
unkown image
|
page readonly
|
|
|
|
27551713000
|
unkown
|
page read and write
|
|
|
|
7DF533002000
|
unkown image
|
page readonly
|
|
|
|
7FF53498B000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC45000
|
unkown
|
page read and write
|
|
|
|
1050000
|
heap private
|
page read and write
|
|
|
|
2BD7F000000
|
unkown image
|
page readonly
|
|
|
|
3C7000
|
unkown
|
page read and write
|
|
|
|
27551B80000
|
unkown image
|
page readonly
|
|
|
|
1A046200000
|
unkown image
|
page readonly
|
|
|
|
7DF533012000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5E44FE000
|
unkown image
|
page readonly
|
|
|
|
95B4DFB000
|
unkown
|
page read and write
|
|
|
|
26EB8829000
|
unkown
|
page read and write
|
|
|
|
7FF52531A000
|
unkown image
|
page readonly
|
|
|
|
1A046EC0000
|
unkown
|
page read and write
|
|
|
|
2755162A000
|
unkown
|
page read and write
|
|
|
|
7FF5346F7000
|
unkown image
|
page readonly
|
|
|
|
7FF5949D5000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
26EB85E0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A29C0000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC46000
|
unkown
|
page read and write
|
|
|
|
5DE000
|
unkown
|
page read and write
|
|
|
|
620000
|
heap default
|
page read and write
|
|
|
|
2360000
|
unkown
|
page read and write
|
|
|
|
1A046E70000
|
unkown
|
page read and write
|
|
|
|
7FF5E44C0000
|
unkown image
|
page readonly
|
|
|
|
C60000
|
unkown image
|
page readonly
|
|
|
|
7FF594D51000
|
unkown image
|
page readonly
|
|
|
|
7FF534993000
|
unkown image
|
page readonly
|
|
|
|
7DF5A29C2000
|
unkown image
|
page readonly
|
|
|
|
D0132FD000
|
unkown
|
page read and write
|
|
|
|
1A046AE0000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC83000
|
unkown
|
page read and write
|
|
|
|
7FF534A24000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC41000
|
unkown
|
page read and write
|
|
|
|
7DF533010000
|
unkown image
|
page readonly
|
|
|
|
630000
|
unkown
|
page read and write
|
|
|
|
2BD7EC5F000
|
unkown
|
page read and write
|
|
|
|
7DF5F2220000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4483000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4471000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC79000
|
unkown
|
page read and write
|
|
|
|
26EB8800000
|
unkown
|
page read and write
|
|
|
|
D012EFC000
|
unkown
|
page read and write
|
|
|
|
FA0000
|
heap private
|
page read and write
|
|
|
|
C80000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4584000
|
unkown image
|
page readonly
|
|
|
|
7FF5112B1000
|
unkown image
|
page readonly
|
|
|
|
1A047140000
|
unkown
|
page read and write
|
|
|
|
7DF5426A0000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC6C000
|
unkown
|
page read and write
|
|
|
|
95B4F7F000
|
unkown
|
page read and write
|
|
|
|
7FF53496E000
|
unkown image
|
page readonly
|
|
|
|
7DF5426B2000
|
unkown image
|
page readonly
|
|
|
|
95B567E000
|
unkown
|
page read and write
|
|
|
|
197000
|
unkown
|
page read and write
|
|
|
|
7DF5A29D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E441C000
|
unkown image
|
page readonly
|
|
|
|
197000
|
unkown
|
page read and write
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
26EB85C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5347C6000
|
unkown image
|
page readonly
|
|
|
|
64A000
|
heap default
|
page read and write
|
|
|
|
7FF5E415D000
|
unkown image
|
page readonly
|
|
|
|
24A0000
|
unkown
|
page read and write
|
|
|
|
7FF5252FE000
|
unkown image
|
page readonly
|
|
|
|
432000
|
unkown image
|
page read and write
|
|
|
|
2BD7EC5C000
|
unkown
|
page read and write
|
|
|
|
42F000
|
unkown image
|
page write copy
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
26EB85F0000
|
unkown image
|
page readonly
|
|
|
|
7DF4A0880000
|
unkown image
|
page readonly
|
|
|
|
24F0000
|
heap private
|
page read and write
|
|
|
|
1A046410000
|
unkown
|
page read and write
|
|
|
|
7DF533020000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2BD7F010000
|
unkown image
|
page readonly
|
|
|
|
78A000
|
heap default
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF53475A000
|
unkown image
|
page readonly
|
|
|
|
7DF5426B2000
|
unkown image
|
page readonly
|
|
|
|
42F000
|
unkown image
|
page write copy
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC02000
|
unkown
|
page read and write
|
|
|
|
7DF5F2200000
|
unkown image
|
page readonly
|
|
|
|
10001000
|
unkown
|
page execute and read and write
|
|
|
|
1A046760000
|
unkown image
|
page readonly
|
|
|
|
7FF5252C0000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
D012F7E000
|
unkown
|
page read and write
|
|
|
|
4B0000
|
heap private
|
page read and write
|
|
|
|
1A046210000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC32000
|
unkown
|
page read and write
|
|
|
|
95B507D000
|
unkown
|
page read and write
|
|
|
|
7FF5251B2000
|
unkown image
|
page readonly
|
|
|
|
7FF53494F000
|
unkown image
|
page readonly
|
|
|
|
7DF5F2212000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4284000
|
unkown image
|
page readonly
|
|
|
|
427000
|
unkown image
|
page readonly
|
|
|
|
7DF5F2202000
|
unkown image
|
page readonly
|
|
|
|
427000
|
unkown image
|
page readonly
|
|
|
|
D8E7EFE000
|
unkown
|
page read and write
|
|
|
|
1160000
|
unkown
|
page read and write
|
|
|
|
7FF5E433F000
|
unkown image
|
page readonly
|
|
|
|
7DF5A29C0000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC40000
|
unkown
|
page read and write
|
|
|
|
27551666000
|
unkown
|
page read and write
|
|
|
|
7FF534998000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC59000
|
unkown
|
page read and write
|
|
|
|
3F2EDCE000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
644000
|
heap private
|
page read and write
|
|
|
|
427000
|
unkown image
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
D01347E000
|
unkown
|
page read and write
|
|
|
|
7DF5426C0000
|
unkown image
|
page readonly
|
|
|
|
3F2F2F9000
|
unkown
|
page read and write
|
|
|
|
95B547E000
|
unkown
|
page read and write
|
|
|
|
7FF525384000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
2BD7F190000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
75E000
|
unkown
|
page read and write
|
|
|
|
7FF594C9B000
|
unkown image
|
page readonly
|
|
|
|
D012C7B000
|
unkown
|
page read and write
|
|
|
|
2BD7EE00000
|
unkown image
|
page readonly
|
|
|
|
7FF534A3A000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7DF5426B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E448E000
|
unkown image
|
page readonly
|
|
|
|
7FF594D22000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4296000
|
unkown image
|
page readonly
|
|
|
|
2BD7EAF0000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF534700000
|
unkown image
|
page readonly
|
|
|
|
7FF534A19000
|
unkown image
|
page readonly
|
|
|
|
7DF5F2210000
|
unkown image
|
page readonly
|
|
|
|
1A0470F0000
|
unkown image
|
page read and write
|
|
|
|
3F2F179000
|
unkown
|
page read and write
|
|
|
|
26EB8DA0000
|
unkown
|
page read and write
|
|
|
|
2755166F000
|
unkown
|
page read and write
|
|
|
|
7FF5E44EB000
|
unkown image
|
page readonly
|
|
|
|
7FF5252EB000
|
unkown image
|
page readonly
|
|
|
|
7FF524BB8000
|
unkown image
|
page readonly
|
|
|
|
7FF594AD6000
|
unkown image
|
page readonly
|
|
|
|
102E000
|
unkown
|
page readonly
|
|
|
|
95B527D000
|
unkown
|
page read and write
|
|
|
|
2BD7F280000
|
unkown
|
page read and write
|
|
|
|
1A047160000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1A047110000
|
unkown
|
page read and write
|
|
|
|
1A04628F000
|
unkown
|
page read and write
|
|
|
|
7FF594CA3000
|
unkown image
|
page readonly
|
|
|
|
7FF5252B3000
|
unkown image
|
page readonly
|
|
|
|
D8E7FFE000
|
unkown
|
page read and write
|
|
|
|
2BD7EC64000
|
unkown
|
page read and write
|
|
|
|
7FF52531D000
|
unkown image
|
page readonly
|
|
|
|
2BD7EAB0000
|
unkown image
|
page read and write
|
|
|
|
2BD7EB00000
|
unkown image
|
page readonly
|
|
|
|
7DF5426A0000
|
unkown image
|
page readonly
|
|
|
|
95B537F000
|
unkown
|
page read and write
|
|
|
|
A5F000
|
unkown
|
page read and write
|
|
|
|
7FF594D41000
|
unkown image
|
page readonly
|
|
|
|
7FF5349BA000
|
unkown image
|
page readonly
|
|
|
|
7FF594C5D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4367000
|
unkown image
|
page readonly
|
|
|
|
7DF533000000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4579000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC13000
|
unkown
|
page read and write
|
|
|
|
5DE000
|
unkown
|
page read and write
|
|
|
|
FF0000
|
unkown
|
page read and write
|
|
|
|
7FF534A35000
|
unkown image
|
page readonly
|
|
|
|
7DF5426A2000
|
unkown image
|
page readonly
|
|
|
|
3F2F27E000
|
unkown
|
page read and write
|
|
|
|
61E000
|
unkown
|
page read and write
|
|
|
|
2BD7EC7A000
|
unkown
|
page read and write
|
|
|
|
1A046E74000
|
unkown
|
page read and write
|
|
|
|
7DF5F2200000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4361000
|
unkown image
|
page readonly
|
|
|
|
10001000
|
unkown
|
page execute and read and write
|
|
|
|
D8E794B000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC44000
|
unkown
|
page read and write
|
|
|
|
26EB87E0000
|
unkown
|
page read and write
|
|
|
|
7FF5E44AF000
|
unkown image
|
page readonly
|
|
|
|
7FF534953000
|
unkown image
|
page readonly
|
|
|
|
7FF525098000
|
unkown image
|
page readonly
|
|
|
|
7FF524F43000
|
unkown image
|
page readonly
|
|
|
|
26EB8700000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7DF5A29B0000
|
unkown image
|
page readonly
|
|
|
|
7FF594CAE000
|
unkown image
|
page readonly
|
|
|
|
7FF5252A6000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC76000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
4C0000
|
heap default
|
page read and write
|
|
|
|
7FF5E44CE000
|
unkown image
|
page readonly
|
|
|
|
7FF52539A000
|
unkown image
|
page readonly
|
|
|
|
7FF5E44AD000
|
unkown image
|
page readonly
|
|
|
|
7DF5A29B0000
|
unkown image
|
page readonly
|
|
|
|
7FF534A31000
|
unkown image
|
page readonly
|
|
|
|
7FF524C2E000
|
unkown image
|
page readonly
|
|
|
|
780000
|
heap default
|
page read and write
|
|
|
|
7FF52513A000
|
unkown image
|
page readonly
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
27551677000
|
unkown
|
page read and write
|
|
|
|
432000
|
unkown image
|
page read and write
|
|
|
|
239000
|
unkown
|
page read and write
|
|
|
|
7FF52538A000
|
unkown image
|
page readonly
|
|
|
|
1A047120000
|
unkown
|
page readonly
|
|
|
|
1A046240000
|
heap default
|
page read and write
|
|
|
|
2BD7EC57000
|
unkown
|
page read and write
|
|
|
|
7FF53499E000
|
unkown image
|
page readonly
|
|
|
|
249E000
|
unkown
|
page readonly
|
|
|
|
7FF524C29000
|
unkown image
|
page readonly
|
|
|
|
1A046247000
|
heap default
|
page read and write
|
|
|
|
7FF5E4163000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5E459A000
|
unkown image
|
page readonly
|
|
|
|
7FF5E451D000
|
unkown image
|
page readonly
|
|
|
|
FF3000
|
unkown
|
page readonly
|
|
|
|
3F2F07E000
|
unkown
|
page read and write
|
|
|
|
7FF5E4272000
|
unkown image
|
page readonly
|
|
|
|
27551670000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5E45A1000
|
unkown image
|
page readonly
|
|
|
|
2500000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC61000
|
unkown
|
page read and write
|
|
|
|
26EB85A0000
|
unkown image
|
page read and write
|
|
|
|
25C0000
|
unkown
|
page read and write
|
|
|
|
1060000
|
unkown
|
page read and write
|
|
|
|
1A046287000
|
unkown
|
page read and write
|
|
|
|
27551460000
|
heap private
|
page read and write
|
|
|
|
7DF533000000
|
unkown image
|
page readonly
|
|
|
|
1A04628F000
|
unkown
|
page read and write
|
|
|
|
26EB8610000
|
heap default
|
page read and write
|
|
|
|
27551B90000
|
unkown image
|
page readonly
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
81E000
|
unkown
|
page read and write
|
|
|
|
27551702000
|
unkown
|
page read and write
|
|
|
|
1A046450000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
2BD7EAD0000
|
unkown image
|
page readonly
|
|
|
|
7DF5426C0000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC5E000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page read and write
|
|
|
|
42F000
|
unkown image
|
page read and write
|
|
|
|
7FF5252C3000
|
unkown image
|
page readonly
|
|
|
|
2BD7EC4E000
|
unkown
|
page read and write
|
|
|
|
12A0000
|
unkown
|
page execute and read and write
|
|
|
|
640000
|
heap private
|
page read and write
|
|
|
|
7FF594C5F000
|
unkown image
|
page readonly
|
|
There are 486 hidden memdumps, click here to show them.