Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
T31597760-Confirm-20210507-100016-Email-1574401.PDF.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\T31597760-Confirm-20210507-100016-Email-1574401.PDF.exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\T31597760-Confirm-20210507-100016-Email-1574401.PDF.exe
|
'C:\Users\user\Desktop\T31597760-Confirm-20210507-100016-Email-1574401.PDF.exe'
|
||
C:\Users\user\Desktop\T31597760-Confirm-20210507-100016-Email-1574401.PDF.exe
|
C:\Users\user\Desktop\T31597760-Confirm-20210507-100016-Email-1574401.PDF.exe
|
||
C:\Users\user\Desktop\T31597760-Confirm-20210507-100016-Email-1574401.PDF.exe
|
C:\Users\user\Desktop\T31597760-Confirm-20210507-100016-Email-1574401.PDF.exe
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
www.rogegalmish.com/a8si/
|
|||
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
||
https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
|
unknown
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
400000
|
unkown
|
page execute and read and write
|
||
2E06000
|
unkown
|
page read and write
|
||
3DB9000
|
unkown
|
page read and write
|
||
4DD0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
2C40000
|
unkown
|
page execute and read and write
|
||
5310000
|
heap private
|
page read and write
|
||
163673E000
|
unkown
|
page read and write
|
||
53B0000
|
unkown
|
page read and write
|
||
5490000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
860000
|
unkown image
|
page readonly
|
||
5680000
|
unkown
|
page read and write
|
||
5930000
|
unkown
|
page read and write
|
||
1D77384E000
|
unkown
|
page read and write
|
||
1283000
|
unkown
|
page read and write
|
||
5480000
|
unkown
|
page read and write
|
||
1283000
|
unkown
|
page read and write
|
||
2D0000
|
unkown image
|
page readonly
|
||
1278000
|
unkown
|
page read and write
|
||
5490000
|
unkown
|
page read and write
|
||
862000
|
unkown image
|
page readonly
|
||
5370000
|
unkown
|
page read and write
|
||
1636D77000
|
unkown
|
page read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
ECE000
|
unkown
|
page read and write
|
||
4E00000
|
unkown
|
page read and write
|
||
7FF5BC1B6000
|
unkown
|
page readonly
|
||
7FF5BC2CF000
|
unkown
|
page readonly
|
||
B760000
|
unkown
|
page read and write
|
||
B2A000
|
unkown image
|
page readonly
|
||
7FF5BC38B000
|
unkown
|
page readonly
|
||
5380000
|
unkown
|
page read and write
|
||
12C2000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
163707F000
|
unkown
|
page read and write
|
||
38A000
|
unkown image
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
10A0000
|
unkown
|
page read and write
|
||
6220000
|
unkown
|
page read and write
|
||
7FF5BC3C7000
|
unkown
|
page readonly
|
||
1040000
|
heap private
|
page read and write
|
||
2DFC000
|
unkown
|
page read and write
|
||
B18000
|
unkown image
|
page readonly
|
||
1274000
|
unkown
|
page read and write
|
||
1276000
|
unkown
|
page read and write
|
||
B770000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
602B000
|
heap private
|
page read and write
|
||
3DB1000
|
unkown
|
page read and write
|
||
DB0000
|
unkown
|
page readonly
|
||
38A000
|
unkown image
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
1D77388E000
|
unkown
|
page read and write
|
||
5490000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5380000
|
unkown
|
page read and write
|
||
5380000
|
unkown
|
page readonly
|
||
53B0000
|
unkown
|
page read and write
|
||
133B000
|
unkown
|
page execute and read and write
|
||
5670000
|
unkown
|
page read and write
|
||
1D773813000
|
unkown
|
page read and write
|
||
B7A0000
|
unkown
|
page read and write
|
||
1283000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5470000
|
unkown
|
page read and write
|
||
5910000
|
unkown
|
page read and write
|
||
1D7736A0000
|
heap private
|
page read and write
|
||
1337000
|
unkown
|
page execute and read and write
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BC1D5000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5ECA000
|
unkown
|
page read and write
|
||
1D7737E0000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
52E0000
|
unkown
|
page read and write
|
||
4E2E000
|
unkown
|
page read and write
|
||
1D77384D000
|
unkown
|
page read and write
|
||
148E000
|
unkown
|
page read and write
|
||
126F000
|
unkown
|
page read and write
|
||
1636B7E000
|
unkown
|
page read and write
|
||
860000
|
unkown image
|
page readonly
|
||
5680000
|
unkown
|
page read and write
|
||
5370000
|
unkown
|
page read and write
|
||
D48000
|
unkown
|
page read and write
|
||
91A000
|
unkown image
|
page readonly
|
||
132A000
|
unkown
|
page execute and read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
8760000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
FC1000
|
unkown
|
page read and write
|
||
5370000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
12A3000
|
unkown
|
page read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
D54000
|
unkown
|
page read and write
|
||
7FF5BC377000
|
unkown
|
page readonly
|
||
1330000
|
unkown
|
page read and write
|
||
2CA0000
|
heap private
|
page execute and read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
B7D0000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
1320000
|
unkown
|
page read and write
|
||
7F080000
|
unkown
|
page execute and read and write
|
||
D4E000
|
unkown
|
page read and write
|
||
1285000
|
unkown
|
page read and write
|
||
126E000
|
unkown
|
page read and write
|
||
4E8C000
|
unkown
|
page read and write
|
||
16366BB000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BC2C1000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
12A4000
|
unkown
|
page read and write
|
||
1D773700000
|
heap default
|
page read and write
|
||
7FF5BC371000
|
unkown
|
page readonly
|
||
2C30000
|
unkown
|
page read and write
|
||
A72000
|
unkown image
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
A70000
|
unkown image
|
page readonly
|
||
567B000
|
unkown
|
page read and write
|
||
7FF5BC319000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5FF0000
|
unkown
|
page read and write
|
||
1283000
|
unkown
|
page read and write
|
||
5370000
|
unkown
|
page read and write
|
||
53B0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
B7D6000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
908000
|
unkown image
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BBF5B000
|
unkown
|
page readonly
|
||
DA4000
|
unkown
|
page read and write
|
||
52D0000
|
unkown
|
page read and write
|
||
131D000
|
unkown
|
page execute and read and write
|
||
5FE5000
|
unkown
|
page read and write
|
||
1283000
|
unkown
|
page read and write
|
||
2DB1000
|
unkown
|
page read and write
|
||
126A000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
12B4000
|
unkown
|
page read and write
|
||
1271000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
1D77384F000
|
unkown
|
page read and write
|
||
7FF5BC387000
|
unkown
|
page readonly
|
||
1380000
|
heap private
|
page read and write
|
||
B770000
|
unkown
|
page execute and read and write
|
||
12B5000
|
unkown
|
page read and write
|
||
1D773829000
|
unkown
|
page read and write
|
||
5490000
|
unkown
|
page read and write
|
||
56A0000
|
unkown
|
page read and write
|
||
6022000
|
heap private
|
page read and write
|
||
5910000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BC306000
|
unkown
|
page readonly
|
||
862000
|
unkown image
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
B7E0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
1D773800000
|
unkown
|
page read and write
|
||
7FF5BC39A000
|
unkown
|
page readonly
|
||
B8E1000
|
unkown
|
page read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
1310000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
2D0000
|
unkown image
|
page readonly
|
||
5480000
|
unkown
|
page read and write
|
||
BDB000
|
unkown
|
page read and write
|
||
1384000
|
heap private
|
page read and write
|
||
4DF0000
|
unkown
|
page read and write
|
||
1279000
|
unkown
|
page read and write
|
||
908000
|
unkown image
|
page readonly
|
||
D3B000
|
unkown
|
page read and write
|
||
B790000
|
unkown
|
page read and write
|
||
4F8B000
|
unkown
|
page read and write
|
||
7FF5BC187000
|
unkown
|
page readonly
|
||
6020000
|
heap private
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5910000
|
unkown
|
page read and write
|
||
1D773827000
|
unkown
|
page read and write
|
||
5910000
|
unkown
|
page read and write
|
||
5360000
|
unkown
|
page read and write
|
||
5480000
|
unkown
|
page read and write
|
||
B760000
|
unkown
|
page read and write
|
||
1D773913000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
53B0000
|
unkown
|
page read and write
|
||
639E000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BC1D8000
|
unkown
|
page readonly
|
||
2DF8000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
860000
|
unkown image
|
page readonly
|
||
1D773A00000
|
unkown
|
page readonly
|
||
123A000
|
heap default
|
page read and write
|
||
5E60000
|
unkown
|
page read and write
|
||
7FF5BC317000
|
unkown
|
page readonly
|
||
4DB0000
|
unkown
|
page read and write
|
||
7FF5BC2EA000
|
unkown
|
page readonly
|
||
7FF5BC1D0000
|
unkown
|
page readonly
|
||
5680000
|
unkown
|
page read and write
|
||
D30000
|
unkown
|
page read and write
|
||
5910000
|
unkown
|
page read and write
|
||
11BF000
|
unkown
|
page read and write
|
||
5351000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5390000
|
unkown
|
page read and write
|
||
1299000
|
unkown
|
page read and write
|
||
5F60000
|
unkown
|
page read and write
|
||
1283000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BC3C7000
|
unkown
|
page readonly
|
||
52FF000
|
unkown
|
page read and write
|
||
5480000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5480000
|
unkown
|
page read and write
|
||
1020000
|
unkown
|
page readonly
|
||
56F0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5FE0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
130D000
|
unkown
|
page execute and read and write
|
||
B18000
|
unkown image
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
7FF5BC37D000
|
unkown
|
page readonly
|
||
B780000
|
unkown
|
page read and write
|
||
1300000
|
unkown
|
page execute and read and write
|
||
8770000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
595E000
|
unkown
|
page read and write
|
||
5490000
|
unkown
|
page read and write
|
||
128C000
|
unkown
|
page read and write
|
||
1D77384B000
|
unkown
|
page read and write
|
||
1360000
|
unkown
|
page read and write
|
||
1636C79000
|
unkown
|
page read and write
|
||
D51000
|
unkown
|
page read and write
|
||
57A0000
|
unkown
|
page readonly
|
||
1636AF5000
|
unkown
|
page read and write
|
||
4DF0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
6000000
|
unkown
|
page read and write
|
||
126A000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
126A000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
1283000
|
unkown
|
page read and write
|
||
52F0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
55A0000
|
unkown
|
page readonly
|
||
1277000
|
unkown
|
page read and write
|
||
6023000
|
heap private
|
page read and write
|
||
1295000
|
unkown
|
page read and write
|
||
5370000
|
unkown
|
page read and write
|
||
5920000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
1D774002000
|
unkown
|
page read and write
|
||
1295000
|
unkown
|
page read and write
|
||
5490000
|
unkown
|
page read and write
|
||
2D2000
|
unkown image
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
1636F7D000
|
unkown
|
page read and write
|
||
7FF5BC384000
|
unkown
|
page readonly
|
||
7FF5BC30D000
|
unkown
|
page readonly
|
||
5910000
|
unkown
|
page read and write
|
||
108E000
|
unkown
|
page read and write
|
||
5460000
|
unkown
|
page read and write
|
||
12A2000
|
heap default
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5490000
|
unkown
|
page read and write
|
||
4DEE000
|
unkown
|
page read and write
|
||
D57000
|
unkown
|
page read and write
|
||
2C50000
|
heap private
|
page read and write
|
||
15AF000
|
unkown
|
page execute and read and write
|
||
5680000
|
unkown
|
page read and write
|
||
B2A000
|
unkown image
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BC3C2000
|
unkown
|
page readonly
|
||
7FF5BC374000
|
unkown
|
page readonly
|
||
12B4000
|
unkown
|
page read and write
|
||
12BB000
|
unkown
|
page read and write
|
||
1D773E60000
|
unkown
|
page read and write
|
||
4DC0000
|
unkown
|
page read and write
|
||
1283000
|
unkown
|
page read and write
|
||
127B000
|
unkown
|
page read and write
|
||
5390000
|
unkown
|
page read and write
|
||
A72000
|
unkown image
|
page readonly
|
||
1D773908000
|
unkown
|
page read and write
|
||
1D773849000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5313000
|
heap private
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
56E0000
|
unkown
|
page execute and read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
1292000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
1636E7F000
|
unkown
|
page read and write
|
||
1D773900000
|
unkown
|
page read and write
|
||
7FF5BC15A000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
141B000
|
unkown
|
page execute and read and write
|
||
91A000
|
unkown image
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
B7C0000
|
unkown
|
page read and write
|
||
54FC000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BBE77000
|
unkown
|
page readonly
|
||
532B000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BC3B3000
|
unkown
|
page readonly
|
||
5480000
|
unkown
|
page read and write
|
||
DA0000
|
heap default
|
page read and write
|
||
7FF5BC208000
|
unkown
|
page readonly
|
||
1D77384A000
|
unkown
|
page read and write
|
||
BBDE000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
40B3000
|
unkown
|
page read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
1285000
|
unkown
|
page read and write
|
||
378000
|
unkown image
|
page readonly
|
||
5480000
|
unkown
|
page readonly
|
||
1D77383C000
|
unkown
|
page read and write
|
||
1281000
|
unkown
|
page read and write
|
||
9CD000
|
unkown
|
page read and write
|
||
B7E1000
|
unkown
|
page read and write
|
||
12B4000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5380000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
5337000
|
unkown
|
page read and write
|
||
2C9E000
|
unkown
|
page read and write
|
||
7FF5BC3B6000
|
unkown
|
page readonly
|
||
A70000
|
unkown image
|
page readonly
|
||
5680000
|
unkown
|
page read and write
|
||
7FF5BC2F2000
|
unkown
|
page readonly
|
||
4DD0000
|
unkown
|
page read and write
|
||
5910000
|
unkown
|
page read and write
|
||
5380000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
1326000
|
unkown
|
page execute and read and write
|
||
5491000
|
unkown
|
page read and write
|
||
5490000
|
unkown
|
page read and write
|
||
1490000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5FE0000
|
unkown
|
page read and write
|
||
5490000
|
unkown
|
page read and write
|
||
2D2000
|
unkown image
|
page readonly
|
||
15AB000
|
unkown
|
page execute and read and write
|
||
126C000
|
unkown
|
page read and write
|
||
5671000
|
unkown
|
page read and write
|
||
EC0000
|
heap default
|
page read and write
|
||
123C000
|
heap default
|
page read and write
|
||
B760000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
ECF000
|
unkown
|
page read and write
|
||
D3F000
|
unkown
|
page read and write
|
||
5ECA000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
2DAE000
|
unkown
|
page read and write
|
||
1D773710000
|
unkown
|
page readonly
|
||
56F0000
|
unkown
|
page read and write
|
||
5910000
|
unkown
|
page read and write
|
||
5460000
|
unkown
|
page read and write
|
||
A70000
|
unkown image
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
4F90000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
5660000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
B7B0000
|
unkown
|
page read and write
|
||
5370000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
120B000
|
heap default
|
page read and write
|
||
7FF5BC031000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
126B000
|
unkown
|
page read and write
|
||
5480000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
EC9000
|
unkown
|
page read and write
|
||
1010000
|
unkown
|
page read and write
|
||
5380000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BC2E6000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
FC0000
|
unkown
|
page read and write
|
||
1383000
|
unkown
|
page read and write
|
||
1D77386F000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5490000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
378000
|
unkown image
|
page readonly
|
||
5480000
|
unkown
|
page read and write
|
||
5910000
|
unkown
|
page read and write
|
||
5E61000
|
unkown
|
page read and write
|
||
5345000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
12B4000
|
unkown
|
page read and write
|
||
8503000
|
unkown
|
page read and write
|
||
B77F000
|
unkown
|
page read and write
|
||
5910000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
533D000
|
unkown
|
page read and write
|
||
D4B000
|
unkown
|
page read and write
|
||
12C2000
|
unkown
|
page read and write
|
||
1D773851000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
54A0000
|
unkown
|
page execute and read and write
|
||
5324000
|
unkown
|
page read and write
|
||
1D7737F0000
|
unkown
|
page readonly
|
||
126D000
|
unkown
|
page read and write
|
||
2D0000
|
unkown image
|
page readonly
|
||
BADF000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5460000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5460000
|
unkown
|
page read and write
|
||
12B5000
|
unkown
|
page read and write
|
||
12A2000
|
unkown
|
page read and write
|
||
ECF000
|
unkown
|
page read and write
|
||
EC4000
|
unkown
|
page read and write
|
||
CFE000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
4DE0000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
B760000
|
unkown
|
page read and write
|
||
5690000
|
heap private
|
page read and write
|
||
12A4000
|
unkown
|
page read and write
|
||
5340000
|
unkown
|
page read and write
|
||
10B0000
|
heap default
|
page read and write
|
||
1332000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
1303000
|
unkown
|
page execute and read and write
|
||
5490000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
1350000
|
unkown
|
page read and write
|
||
F40000
|
unkown
|
page readonly
|
||
7FF5BC2BF000
|
unkown
|
page readonly
|
||
B8E0000
|
unkown
|
page read and write
|
||
7FF5BC245000
|
unkown
|
page readonly
|
||
5910000
|
unkown
|
page read and write
|
||
1304000
|
unkown
|
page read and write
|
||
1285000
|
unkown
|
page read and write
|
||
5334000
|
unkown
|
page read and write
|
||
5FE0000
|
unkown
|
page read and write
|
||
5390000
|
unkown
|
page read and write
|
||
5320000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
54B0000
|
unkown
|
page read and write
|
||
534C000
|
unkown
|
page read and write
|
||
5370000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
1D774200000
|
unkown
|
page readonly
|
||
5910000
|
unkown
|
page read and write
|
||
5300000
|
unkown
|
page read and write
|
||
1200000
|
heap default
|
page read and write
|
||
5790000
|
heap private
|
page execute and read and write
|
||
6030000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
5480000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
6031000
|
unkown
|
page read and write
|
||
53A0000
|
unkown
|
page read and write
|
||
4DB8000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
EF7000
|
unkown
|
page read and write
|
||
7FF5BC2DD000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
12B4000
|
unkown
|
page read and write
|
||
4DF0000
|
unkown
|
page read and write
|
||
11FE000
|
unkown
|
page read and write
|
||
1D773902000
|
unkown
|
page read and write
|
||
4DF0000
|
unkown
|
page read and write
|
||
16367BD000
|
unkown
|
page read and write
|
||
5463000
|
unkown
|
page read and write
|
||
7FF5BBE71000
|
unkown
|
page readonly
|
||
5671000
|
unkown
|
page read and write
|
||
5370000
|
unkown
|
page read and write
|
||
BB0000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
7FF5BC2D3000
|
unkown
|
page readonly
|
||
5910000
|
unkown
|
page read and write
|
||
602B000
|
heap private
|
page read and write
|
||
4DB0000
|
unkown
|
page read and write
|
||
10B5000
|
heap default
|
page read and write
|
||
5EC9000
|
unkown
|
page read and write
|
||
56F0000
|
unkown
|
page read and write
|
||
1D773881000
|
unkown
|
page read and write
|
||
12AD000
|
unkown
|
page read and write
|
||
590E000
|
unkown
|
page read and write
|
||
1D773EB0000
|
unkown
|
page readonly
|
||
5670000
|
unkown
|
page read and write
|
||
5670000
|
unkown
|
page read and write
|
||
141F000
|
unkown
|
page execute and read and write
|
||
4DC0000
|
unkown
|
page read and write
|
There are 521 hidden memdumps, click here to show them.