Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
#Ud55c#Ub77c#Uc0b0#Uc5c5#Uac1c#Ubc1c(2021.04.12).exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\#Ud55c#Ub77c#Uc0b0#Uc5c5#Uac1c#Ubc1c(2021.04.12).exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\#Ud55c#Ub77c#Uc0b0#Uc5c5#Uac1c#Ubc1c(2021.04.12).exe
|
'C:\Users\user\Desktop\#Ud55c#Ub77c#Uc0b0#Uc5c5#Uac1c#Ubc1c(2021.04.12).exe'
|
|
|
|
C:\Users\user\Desktop\#Ud55c#Ub77c#Uc0b0#Uc5c5#Uac1c#Ubc1c(2021.04.12).exe
|
{path}
|
|
|
|
C:\Users\user\Desktop\#Ud55c#Ub77c#Uc0b0#Uc5c5#Uac1c#Ubc1c(2021.04.12).exe
|
{path}
|
|
|
|
C:\Users\user\Desktop\#Ud55c#Ub77c#Uc0b0#Uc5c5#Uac1c#Ubc1c(2021.04.12).exe
|
{path}
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
www.visitmatchgo.com/duy/
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
4249000
|
unkown
|
page read and write
|
|
|
|
56A0000
|
unkown
|
page read and write
|
 |
|
|
573C000
|
unkown
|
page read and write
|
|
|
|
188D000
|
unkown
|
page read and write
|
|
|
|
7FF5181AA000
|
unkown
|
page readonly
|
|
|
|
16A0000
|
unkown
|
page execute and read and write
|
|
|
|
5BA0000
|
unkown
|
page read and write
|
|
|
|
7FF542DC1000
|
unkown
|
page readonly
|
|
|
|
7FF598965000
|
unkown
|
page readonly
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
59CE000
|
unkown
|
page read and write
|
|
|
|
17D0000
|
unkown
|
page read and write
|
|
|
|
1474000
|
unkown
|
page read and write
|
|
|
|
568C000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
D50000
|
unkown image
|
page readonly
|
|
|
|
72A1000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
1D2000
|
unkown image
|
page readonly
|
|
|
|
7FF517FE8000
|
unkown
|
page readonly
|
|
|
|
5660000
|
unkown
|
page read and write
|
|
|
|
2E62D3F0000
|
unkown
|
page read and write
|
|
|
|
1D386855000
|
unkown
|
page read and write
|
|
|
|
E29000
|
unkown
|
page read and write
|
|
|
|
1820000
|
unkown
|
page read and write
|
|
|
|
2E62BA55000
|
unkown
|
page read and write
|
|
|
|
1334000
|
unkown
|
page read and write
|
|
|
|
1464000
|
unkown
|
page read and write
|
|
|
|
145F000
|
unkown
|
page read and write
|
|
|
|
7FF518184000
|
unkown
|
page readonly
|
|
|
|
182D000
|
unkown
|
page read and write
|
|
|
|
7FF517DA6000
|
unkown
|
page readonly
|
|
|
|
5680000
|
unkown
|
page read and write
|
|
|
|
7FF518087000
|
unkown
|
page readonly
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
7FF517D98000
|
unkown
|
page readonly
|
|
|
|
1EA825C0000
|
unkown
|
page readonly
|
|
|
|
1D38684D000
|
unkown
|
page read and write
|
|
|
|
145F000
|
unkown
|
page read and write
|
|
|
|
17E0000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
1D386908000
|
unkown
|
page read and write
|
|
|
|
1810000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
5740000
|
unkown
|
page read and write
|
|
|
|
5660000
|
unkown
|
page read and write
|
|
|
|
7FF5180EE000
|
unkown
|
page readonly
|
|
|
|
7FF598AB7000
|
unkown
|
page readonly
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
56A0000
|
unkown
|
page read and write
|
|
|
|
31E0000
|
unkown
|
page read and write
|
|
|
|
133E000
|
unkown
|
page read and write
|
|
|
|
12C0000
|
unkown
|
page read and write
|
|
|
|
7FF518102000
|
unkown
|
page readonly
|
|
|
|
6A732FF000
|
unkown
|
page read and write
|
|
|
|
2E62BA3F000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
7FF54321F000
|
unkown
|
page readonly
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
7FF5181D7000
|
unkown
|
page readonly
|
|
|
|
1860000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
18A1000
|
unkown
|
page read and write
|
|
|
|
7FF5988C0000
|
unkown
|
page readonly
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
1EA82640000
|
unkown
|
page read and write
|
|
|
|
1474000
|
unkown
|
page read and write
|
|
|
|
2E62BA67000
|
unkown
|
page read and write
|
|
|
|
7FF5989DA000
|
unkown
|
page readonly
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
16B0000
|
heap private
|
page read and write
|
|
|
|
7FF543195000
|
unkown
|
page readonly
|
|
|
|
7FF5432DB000
|
unkown
|
page readonly
|
|
|
|
13A3000
|
unkown
|
page execute and read and write
|
|
|
|
7FF598A74000
|
unkown
|
page readonly
|
|
|
|
7FF5987DB000
|
unkown
|
page readonly
|
|
|
|
56A0000
|
unkown
|
page read and write
|
|
|
|
1476000
|
unkown
|
page read and write
|
|
|
|
1820000
|
unkown
|
page read and write
|
|
|
|
1D386770000
|
unkown
|
page readonly
|
|
|
|
2E62BA67000
|
unkown
|
page read and write
|
|
|
|
5B90000
|
heap private
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
7FF5181D2000
|
unkown
|
page readonly
|
|
|
|
D1D000
|
unkown
|
page read and write
|
|
|
|
1EA825B0000
|
heap default
|
page read and write
|
|
|
|
1445000
|
unkown
|
page read and write
|
|
|
|
7FF59882F000
|
unkown
|
page readonly
|
|
|
|
7FF543223000
|
unkown
|
page readonly
|
|
|
|
1850000
|
unkown
|
page read and write
|
|
|
|
FD5237F000
|
unkown
|
page read and write
|
|
|
|
7FF5432CD000
|
unkown
|
page readonly
|
|
|
|
7FF517EFB000
|
unkown
|
page readonly
|
|
|
|
7FF543269000
|
unkown
|
page readonly
|
|
|
|
1850000
|
unkown
|
page read and write
|
|
|
|
1910000
|
unkown
|
page readonly
|
|
|
|
2E62B9E0000
|
unkown
|
page readonly
|
|
|
|
13DB000
|
unkown
|
page execute and read and write
|
|
|
|
145E000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
5750000
|
unkown
|
page read and write
|
|
|
|
1EA82713000
|
unkown
|
page read and write
|
|
|
|
CDDE000
|
stack
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
1464000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
E2D000
|
unkown
|
page read and write
|
|
|
|
144B000
|
unkown
|
page read and write
|
|
|
|
1EA828D0000
|
unkown
|
page write copy
|
|
|
|
13C0000
|
unkown
|
page read and write
|
|
|
|
2E62B8A0000
|
heap private
|
page read and write
|
|
|
|
7FF517FC6000
|
unkown
|
page readonly
|
|
|
|
2E62BA6B000
|
unkown
|
page read and write
|
|
|
|
1820000
|
unkown
|
page read and write
|
|
|
|
7FF5180F6000
|
unkown
|
page readonly
|
|
|
|
7FF5432EA000
|
unkown
|
page readonly
|
|
|
|
7FF543125000
|
unkown
|
page readonly
|
|
|
|
7FF518187000
|
unkown
|
page readonly
|
|
|
|
7FF5987DF000
|
unkown
|
page readonly
|
|
|
|
7FF518127000
|
unkown
|
page readonly
|
|
|
|
BE2000
|
unkown image
|
page readonly
|
|
|
|
31B0000
|
unkown
|
page readonly
|
|
|
|
7FF5430AA000
|
unkown
|
page readonly
|
|
|
|
1D386902000
|
unkown
|
page read and write
|
|
|
|
1D2000
|
unkown image
|
page readonly
|
|
|
|
1D38683C000
|
unkown
|
page read and write
|
|
|
|
1EA8266D000
|
unkown
|
page read and write
|
|
|
|
5320000
|
unkown
|
page readonly
|
|
|
|
13EB000
|
heap default
|
page read and write
|
|
|
|
1330000
|
heap default
|
page read and write
|
|
|
|
1840000
|
unkown
|
page read and write
|
|
|
|
133F000
|
unkown
|
page read and write
|
|
|
|
5660000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
5660000
|
unkown
|
page read and write
|
|
|
|
7FF5432C1000
|
unkown
|
page readonly
|
|
|
|
10FE000
|
stack
|
page read and write
|
|
|
|
13B0000
|
unkown
|
page read and write
|
|
|
|
1474000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
1EA840C0000
|
unkown
|
page read and write
|
|
|
|
7FF543303000
|
unkown
|
page readonly
|
|
|
|
1EA8266B000
|
unkown
|
page read and write
|
|
|
|
CEEA17D000
|
unkown
|
page read and write
|
|
|
|
1810000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
FD521FA000
|
unkown
|
page read and write
|
|
|
|
1450000
|
unkown
|
page read and write
|
|
|
|
1455000
|
unkown
|
page read and write
|
|
|
|
15DF000
|
stack
|
page read and write
|
|
|
|
1803000
|
unkown
|
page read and write
|
|
|
|
56C0000
|
unkown
|
page read and write
|
|
|
|
4221000
|
unkown
|
page read and write
|
|
|
|
56A0000
|
unkown
|
page read and write
|
|
|
|
13A4000
|
unkown
|
page read and write
|
|
|
|
1D386870000
|
unkown
|
page read and write
|
|
|
|
FC3000
|
unkown
|
page read and write
|
|
|
|
17D0000
|
unkown
|
page read and write
|
|
|
|
2E62BA02000
|
unkown
|
page read and write
|
|
|
|
56B0000
|
unkown
|
page read and write
|
|
|
|
17D0000
|
unkown
|
page read and write
|
|
|
|
18D0000
|
unkown
|
page read and write
|
|
|
|
18B0000
|
heap private
|
page execute and read and write
|
|
|
|
7FF543267000
|
unkown
|
page readonly
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
2E62BC50000
|
unkown
|
page readonly
|
|
|
|
1887000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown image
|
page readonly
|
|
|
|
5750000
|
unkown
|
page read and write
|
|
|
|
7FF598AB7000
|
unkown
|
page readonly
|
|
|
|
2E62BB13000
|
unkown
|
page read and write
|
|
|
|
6A72BEE000
|
unkown
|
page read and write
|
|
|
|
489D000
|
unkown
|
page read and write
|
|
|
|
B89C000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
7FF5989BF000
|
unkown
|
page readonly
|
|
|
|
1D38688D000
|
unkown
|
page read and write
|
|
|
|
1D387200000
|
unkown
|
page readonly
|
|
|
|
7FF598987000
|
unkown
|
page readonly
|
|
|
|
1EA82920000
|
unkown
|
page readonly
|
|
|
|
2E62D4F0000
|
unkown
|
page readonly
|
|
|
|
163E000
|
unkown
|
page read and write
|
|
|
|
7FF517EAF000
|
unkown
|
page readonly
|
|
|
|
1D386913000
|
unkown
|
page read and write
|
|
|
|
2E62BC00000
|
unkown
|
page write copy
|
|
|
|
CEE9EFE000
|
unkown
|
page read and write
|
|
|
|
31AF000
|
stack
|
page read and write
|
|
|
|
17D0000
|
unkown
|
page read and write
|
|
|
|
136E000
|
unkown
|
page read and write
|
|
|
|
7FF5181D7000
|
unkown
|
page readonly
|
|
|
|
167C000
|
unkown
|
page read and write
|
|
|
|
5681000
|
unkown
|
page read and write
|
|
|
|
12D0000
|
unkown
|
page readonly
|
|
|
|
6A730FE000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
7FF518116000
|
unkown
|
page readonly
|
|
|
|
7FF5180E3000
|
unkown
|
page readonly
|
|
|
|
145B000
|
unkown
|
page read and write
|
|
|
|
E45000
|
unkown
|
page read and write
|
|
|
|
7FF518197000
|
unkown
|
page readonly
|
|
|
|
7FF5180DF000
|
unkown
|
page readonly
|
|
|
|
2E62BA67000
|
unkown
|
page read and write
|
|
|
|
6A7307B000
|
unkown
|
page read and write
|
|
|
|
5940000
|
heap private
|
page execute and read and write
|
|
|
|
1455000
|
unkown
|
page read and write
|
|
|
|
56A0000
|
unkown
|
page read and write
|
|
|
|
1D38684A000
|
unkown
|
page read and write
|
|
|
|
FD522FE000
|
unkown
|
page read and write
|
|
|
|
1810000
|
unkown
|
page read and write
|
|
|
|
17F0000
|
unkown
|
page read and write
|
|
|
|
7FF598A67000
|
unkown
|
page readonly
|
|
|
|
2E62BA67000
|
unkown
|
page read and write
|
|
|
|
3221000
|
unkown
|
page read and write
|
|
|
|
1EA8266D000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
146A000
|
unkown
|
page read and write
|
|
|
|
D52000
|
unkown image
|
page readonly
|
|
|
|
7FF542F81000
|
unkown
|
page readonly
|
|
|
|
E3F000
|
unkown
|
page read and write
|
|
|
|
E42000
|
unkown
|
page read and write
|
|
|
|
1EA82613000
|
unkown
|
page read and write
|
|
|
|
7FF598967000
|
unkown
|
page readonly
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
1466000
|
unkown
|
page read and write
|
|
|
|
1870000
|
unkown
|
page read and write
|
|
|
|
72A0000
|
unkown
|
page read and write
|
|
|
|
7FF598A64000
|
unkown
|
page readonly
|
|
|
|
1474000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
7FF543242000
|
unkown
|
page readonly
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
7FF543256000
|
unkown
|
page readonly
|
|
|
|
17D0000
|
unkown
|
page read and write
|
|
|
|
1EA82700000
|
unkown
|
page read and write
|
|
|
|
1EA8266D000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page readonly
|
|
|
|
11F0000
|
unkown
|
page readonly
|
|
|
|
141E000
|
heap default
|
page read and write
|
|
|
|
1D386800000
|
unkown
|
page read and write
|
|
|
|
1450000
|
heap default
|
page read and write
|
|
|
|
144B000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
1D3866F0000
|
heap private
|
page read and write
|
|
|
|
1455000
|
unkown
|
page read and write
|
|
|
|
D80000
|
unkown
|
page read and write
|
|
|
|
5760000
|
heap private
|
page read and write
|
|
|
|
1EA82600000
|
unkown
|
page read and write
|
|
|
|
5660000
|
unkown
|
page read and write
|
|
|
|
189C000
|
unkown
|
page read and write
|
|
|
|
7FF598AA6000
|
unkown
|
page readonly
|
|
|
|
7FF543158000
|
unkown
|
page readonly
|
|
|
|
1812000
|
unkown
|
page read and write
|
|
|
|
188B000
|
unkown
|
page execute and read and write
|
|
|
|
7FF54322D000
|
unkown
|
page readonly
|
|
|
|
17F0000
|
unkown
|
page read and write
|
|
|
|
1850000
|
unkown
|
page read and write
|
|
|
|
7FF5988C8000
|
unkown
|
page readonly
|
|
|
|
7FF5988A6000
|
unkown
|
page readonly
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
1454000
|
unkown
|
page read and write
|
|
|
|
145B000
|
unkown
|
page read and write
|
|
|
|
12E5000
|
heap default
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
5680000
|
unkown
|
page read and write
|
|
|
|
7FF517FE0000
|
unkown
|
page readonly
|
|
|
|
7FF543211000
|
unkown
|
page readonly
|
|
|
|
1451000
|
unkown
|
page read and write
|
|
|
|
3210000
|
heap private
|
page read and write
|
|
|
|
1D387540000
|
unkown
|
page readonly
|
|
|
|
7FF518194000
|
unkown
|
page readonly
|
|
|
|
7FF54320F000
|
unkown
|
page readonly
|
|
|
|
17D0000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
6736000
|
unkown
|
page read and write
|
|
|
|
17E0000
|
unkown
|
page read and write
|
|
|
|
1431000
|
unkown
|
page read and write
|
|
|
|
146D000
|
unkown
|
page read and write
|
|
|
|
1456000
|
unkown
|
page read and write
|
|
|
|
6A72B6C000
|
unkown
|
page read and write
|
|
|
|
62A1000
|
unkown
|
page read and write
|
|
|
|
132E000
|
unkown
|
page read and write
|
|
|
|
1680000
|
unkown
|
page read and write
|
|
|
|
E3C000
|
unkown
|
page read and write
|
|
|
|
1EA82656000
|
unkown
|
page read and write
|
|
|
|
7FF5982A7000
|
unkown
|
page readonly
|
|
|
|
1830000
|
unkown
|
page read and write
|
|
|
|
1900000
|
heap private
|
page read and write
|
|
|
|
1EA82550000
|
heap private
|
page read and write
|
|
|
|
18C0000
|
unkown
|
page read and write
|
|
|
|
1456000
|
unkown
|
page read and write
|
|
|
|
7FF542DC7000
|
unkown
|
page readonly
|
|
|
|
7FF598AA3000
|
unkown
|
page readonly
|
|
|
|
7FF542ED5000
|
unkown
|
page readonly
|
|
|
|
7FF518085000
|
unkown
|
page readonly
|
|
|
|
7FF598785000
|
unkown
|
page readonly
|
|
|
|
7FF5180FA000
|
unkown
|
page readonly
|
|
|
|
FD5217F000
|
unkown
|
page read and write
|
|
|
|
CEE9E7B000
|
unkown
|
page read and write
|
|
|
|
7FF598A6D000
|
unkown
|
page readonly
|
|
|
|
531C000
|
stack
|
page read and write
|
|
|
|
148A000
|
unkown
|
page read and write
|
|
|
|
2E62BA67000
|
unkown
|
page read and write
|
|
|
|
7FF5179C7000
|
unkown
|
page readonly
|
|
|
|
31D0000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
7FF543106000
|
unkown
|
page readonly
|
|
|
|
145A000
|
unkown
|
page read and write
|
|
|
|
1EA82702000
|
unkown
|
page read and write
|
|
|
|
2E62BA00000
|
unkown
|
page read and write
|
|
|
|
7FF543236000
|
unkown
|
page readonly
|
|
|
|
5680000
|
unkown
|
page read and write
|
|
|
|
13D2000
|
unkown
|
page read and write
|
|
|
|
7FF5432D4000
|
unkown
|
page readonly
|
|
|
|
1D386750000
|
heap default
|
page read and write
|
|
|
|
1411000
|
heap default
|
page read and write
|
|
|
|
5810000
|
unkown
|
page readonly
|
|
|
|
17C4000
|
unkown
|
page read and write
|
|
|
|
1EA8266D000
|
unkown
|
page read and write
|
|
|
|
1339000
|
unkown
|
page read and write
|
|
|
|
CEE9FFA000
|
unkown
|
page read and write
|
|
|
|
7FF5989C3000
|
unkown
|
page readonly
|
|
|
|
1455000
|
unkown
|
page read and write
|
|
|
|
184D000
|
unkown
|
page read and write
|
|
|
|
145D000
|
unkown
|
page read and write
|
|
|
|
7FF518129000
|
unkown
|
page readonly
|
|
|
|
1465000
|
unkown
|
page read and write
|
|
|
|
1EA82602000
|
unkown
|
page read and write
|
|
|
|
1D386A00000
|
unkown
|
page readonly
|
|
|
|
2A0000
|
unkown image
|
page readonly
|
|
|
|
2E62BA34000
|
unkown
|
page read and write
|
|
|
|
1850000
|
unkown
|
page read and write
|
|
|
|
13BD000
|
unkown
|
page execute and read and write
|
|
|
|
188F000
|
unkown
|
page execute and read and write
|
|
|
|
7FF517EA5000
|
unkown
|
page readonly
|
|
|
|
5660000
|
unkown
|
page read and write
|
|
|
|
11B0000
|
heap default
|
page read and write
|
|
|
|
1430000
|
unkown
|
page read and write
|
|
|
|
1D386900000
|
unkown
|
page read and write
|
|
|
|
1D386813000
|
unkown
|
page read and write
|
|
|
|
2A2000
|
unkown image
|
page readonly
|
|
|
|
7FF51818D000
|
unkown
|
page readonly
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
72B0000
|
unkown
|
page read and write
|
|
|
|
17C8000
|
unkown
|
page read and write
|
|
|
|
145E000
|
unkown
|
page read and write
|
|
|
|
1EA8266D000
|
unkown
|
page read and write
|
|
|
|
12E0000
|
heap default
|
page read and write
|
|
|
|
1895000
|
unkown
|
page read and write
|
|
|
|
344C000
|
unkown
|
page read and write
|
|
|
|
2E62BA67000
|
unkown
|
page read and write
|
|
|
|
7FF59868A000
|
unkown
|
page readonly
|
|
|
|
5660000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5989D6000
|
unkown
|
page readonly
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
13D7000
|
unkown
|
page execute and read and write
|
|
|
|
2E62BB00000
|
unkown
|
page read and write
|
|
|
|
7FF517DAA000
|
unkown
|
page readonly
|
|
|
|
758E000
|
stack
|
page read and write
|
|
|
|
1390000
|
unkown
|
page read and write
|
|
|
|
5670000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown image
|
page readonly
|
|
|
|
1D386780000
|
unkown
|
page read and write
|
|
|
|
1874000
|
unkown
|
page read and write
|
|
|
|
5763000
|
heap private
|
page read and write
|
|
|
|
1D386850000
|
unkown
|
page read and write
|
|
|
|
7FF5432C7000
|
unkown
|
page readonly
|
|
|
|
17BE000
|
stack
|
page read and write
|
|
|
|
7FF59878F000
|
unkown
|
page readonly
|
|
|
|
7FF5432D7000
|
unkown
|
page readonly
|
|
|
|
1810000
|
unkown
|
page read and write
|
|
|
|
7FF517EFF000
|
unkown
|
page readonly
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
6724000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
1830000
|
unkown
|
page read and write
|
|
|
|
7FF5989FD000
|
unkown
|
page readonly
|
|
|
|
1476000
|
heap default
|
page read and write
|
|
|
|
2A2000
|
unkown image
|
page readonly
|
|
|
|
108B000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
1474000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
1810000
|
unkown
|
page read and write
|
|
|
|
1D387002000
|
unkown
|
page read and write
|
|
|
|
7FF598AB2000
|
unkown
|
page readonly
|
|
|
|
97E0000
|
unkown
|
page read and write
|
|
|
|
1EA841C0000
|
unkown
|
page readonly
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
31D0000
|
unkown
|
page readonly
|
|
|
|
13D0000
|
unkown
|
page read and write
|
|
|
|
7FF598A09000
|
unkown
|
page readonly
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
1455000
|
unkown
|
page read and write
|
|
|
|
5B8D000
|
stack
|
page read and write
|
|
|
|
2E62BA67000
|
unkown
|
page read and write
|
|
|
|
1187000
|
stack
|
page read and write
|
|
|
|
5750000
|
unkown
|
page read and write
|
|
|
|
1465000
|
unkown
|
page read and write
|
|
|
|
17D0000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
1476000
|
unkown
|
page read and write
|
|
|
|
1447000
|
unkown
|
page read and write
|
|
|
|
73D0000
|
unkown
|
page read and write
|
|
|
|
31E0000
|
unkown
|
page read and write
|
|
|
|
7FF517F4F000
|
unkown
|
page readonly
|
|
|
|
7FF54323A000
|
unkown
|
page readonly
|
|
|
|
133F000
|
unkown
|
page read and write
|
|
|
|
18DE000
|
unkown
|
page read and write
|
|
|
|
1A1B000
|
unkown
|
page execute and read and write
|
|
|
|
626E000
|
stack
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
FD520FE000
|
unkown
|
page read and write
|
|
|
|
18E5000
|
unkown
|
page read and write
|
|
|
|
11B4000
|
unkown
|
page read and write
|
|
|
|
2E62BB02000
|
unkown
|
page read and write
|
|
|
|
7FF51819B000
|
unkown
|
page readonly
|
|
|
|
6A733FF000
|
unkown
|
page read and write
|
|
|
|
D50000
|
unkown image
|
page readonly
|
|
|
|
CEE9F7E000
|
unkown
|
page read and write
|
|
|
|
6722000
|
unkown
|
page read and write
|
|
|
|
7FF5432C4000
|
unkown
|
page readonly
|
|
|
|
18F0000
|
unkown
|
page read and write
|
|
|
|
5980000
|
unkown
|
page execute and read and write
|
|
|
|
7FF543120000
|
unkown
|
page readonly
|
|
|
|
2E62B900000
|
heap default
|
page read and write
|
|
|
|
BE2000
|
unkown image
|
page readonly
|
|
|
|
1480000
|
unkown
|
page read and write
|
|
|
|
58D0000
|
unkown
|
page readonly
|
|
|
|
187B000
|
unkown
|
page read and write
|
|
|
|
7FF51811D000
|
unkown
|
page readonly
|
|
|
|
7FF598A77000
|
unkown
|
page readonly
|
|
|
|
17FE000
|
unkown
|
page read and write
|
|
|
|
1EA82629000
|
unkown
|
page read and write
|
|
|
|
1D386829000
|
unkown
|
page read and write
|
|
|
|
1D386AD0000
|
unkown
|
page readonly
|
|
|
|
1D386881000
|
unkown
|
page read and write
|
|
|
|
FD5207B000
|
unkown
|
page read and write
|
|
|
|
182D000
|
unkown
|
page read and write
|
|
|
|
7FF5180A7000
|
unkown
|
page readonly
|
|
|
|
1EA8266D000
|
unkown
|
page read and write
|
|
|
|
E36000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
2E62B910000
|
unkown
|
page readonly
|
|
|
|
56A0000
|
unkown
|
page read and write
|
|
|
|
7FF598A7B000
|
unkown
|
page readonly
|
|
|
|
FD52279000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
B890000
|
unkown
|
page read and write
|
|
|
|
56F0000
|
heap private
|
page read and write
|
|
|
|
13AD000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5181C3000
|
unkown
|
page readonly
|
|
|
|
31D0000
|
unkown
|
page read and write
|
|
|
|
7FF543128000
|
unkown
|
page readonly
|
|
|
|
7FF5989F6000
|
unkown
|
page readonly
|
|
|
|
7FF543317000
|
unkown
|
page readonly
|
|
|
|
72A1000
|
unkown
|
page read and write
|
|
|
|
CEEA0FE000
|
unkown
|
page read and write
|
|
|
|
13CA000
|
unkown
|
page execute and read and write
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
1800000
|
unkown
|
page read and write
|
|
|
|
1D386760000
|
unkown
|
page readonly
|
|
|
|
CEEA07A000
|
unkown
|
page read and write
|
|
|
|
7FF543317000
|
unkown
|
page readonly
|
|
|
|
146D000
|
unkown
|
page read and write
|
|
|
|
D52000
|
unkown image
|
page readonly
|
|
|
|
1890000
|
unkown
|
page read and write
|
|
|
|
1850000
|
unkown
|
page read and write
|
|
|
|
672F000
|
unkown
|
page read and write
|
|
|
|
7FF5989CE000
|
unkown
|
page readonly
|
|
|
|
7FF5181C6000
|
unkown
|
page readonly
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
145F000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
7FF598A07000
|
unkown
|
page readonly
|
|
|
|
2E62BA13000
|
unkown
|
page read and write
|
|
|
|
1A1F000
|
unkown
|
page execute and read and write
|
|
|
|
13E0000
|
heap default
|
page read and write
|
|
|
|
144B000
|
unkown
|
page read and write
|
|
|
|
31D0000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
18E0000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page read and write
|
|
|
|
1472000
|
unkown
|
page read and write
|
|
|
|
7FF54325D000
|
unkown
|
page readonly
|
|
|
|
13C6000
|
unkown
|
page execute and read and write
|
|
|
|
6A731F7000
|
unkown
|
page read and write
|
|
|
|
144D000
|
unkown
|
page read and write
|
|
|
|
1474000
|
unkown
|
page read and write
|
|
|
|
4229000
|
unkown
|
page read and write
|
|
|
|
7FF598678000
|
unkown
|
page readonly
|
|
|
|
56D0000
|
unkown
|
page read and write
|
|
|
|
7FF543306000
|
unkown
|
page readonly
|
|
|
|
1EA8266D000
|
unkown
|
page read and write
|
|
|
|
6A72E7E000
|
unkown
|
page read and write
|
|
|
|
7FF598A8A000
|
unkown
|
page readonly
|
|
|
|
2E62BA67000
|
unkown
|
page read and write
|
|
|
|
1810000
|
unkown
|
page read and write
|
|
|
|
56A0000
|
unkown
|
page read and write
|
|
|
|
7FF5430D7000
|
unkown
|
page readonly
|
|
|
|
1457000
|
unkown
|
page read and write
|
|
|
|
1468000
|
unkown
|
page read and write
|
|
|
|
7FF5989E2000
|
unkown
|
page readonly
|
|
|
|
1770000
|
unkown
|
page execute and read and write
|
|
|
|
72BC000
|
unkown
|
page read and write
|
|
|
|
7FF598686000
|
unkown
|
page readonly
|
|
|
|
1EA82800000
|
unkown
|
page readonly
|
|
|
|
15F0000
|
unkown
|
page read and write
|
|
|
|
7FF543312000
|
unkown
|
page readonly
|
|
|
|
474C000
|
unkown
|
page read and write
|
|
|
|
144D000
|
unkown
|
page read and write
|
|
|
|
D50000
|
unkown image
|
page readonly
|
|
|
|
32C7000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
unkown
|
page read and write
|
|
|
|
2E62BA29000
|
unkown
|
page read and write
|
|
There are 517 hidden memdumps, click here to show them.