IOCReport

loading gif

Files

File Path
Type
Category
Malicious
plan-1637276620.xlsm
Microsoft Excel 2007+
initial sample
 malicious
C:\Users\user\Desktop\~$plan-1637276620.xlsm
data
dropped
 malicious
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 60080 bytes, 1 file
dropped
 clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
data
dropped
 clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
dropped
 clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F9EDFDD2.png
PNG image data, 1133 x 589, 8-bit/color RGB, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\4ECE0000
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\CabDAC6.tmp
Microsoft Cabinet archive data, 60080 bytes, 1 file
dropped
 clean
C:\Users\user\AppData\Local\Temp\TarDAC7.tmp
data
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Tue Oct 17 10:04:00 2017, mtime=Tue Jun 22 19:26:38 2021, atime=Tue Jun 22 19:26:38 2021, length=8192, window=hide
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\plan-1637276620.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:13 2020, mtime=Tue Jun 22 19:26:38 2021, atime=Tue Jun 22 19:26:38 2021, length=93153, window=hide
dropped
 clean
C:\Users\user\Desktop\DFCE0000
data
dropped
 clean
There are 4 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
 malicious
C:\Windows\System32\regsvr32.exe
regsvr32 ..\wail1.dll
 malicious
C:\Windows\System32\regsvr32.exe
regsvr32 ..\wail2.dll
 malicious

URLs

Name
IP
Malicious
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
 clean
http://www.windows.com/pctv.
unknown
 clean
http://investor.msn.com
unknown
 clean
http://www.msnbc.com/news/ticker.txt
unknown
 clean
http://www.%s.comPA
unknown
 clean
http://www.icra.org/vocabulary/.
unknown
 clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
 clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
 clean
http://www.hotmail.com/oe
unknown
 clean
http://servername/isapibackend.dll
unknown
 clean
http://investor.msn.com/
unknown
 clean
There are 1 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
iliknaturals.com
103.50.160.62
 clean
ieronymou.com
192.185.21.116
 clean

IPs

IP
Domain
Country
Malicious
192.185.21.116
ieronymou.com
United States
clean
103.50.160.62
iliknaturals.com
India
clean

Registry

Path
Value
Malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
3.3
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
MTTT
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ReviewToken
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EC5DE
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
VBAFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DefaultSheetR2L
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
UseSystemSeparators
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ThousandsSeparator
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DecimalSeparator
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EC9C5
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ECA61
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ECB5A
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ECC25
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ECD4E
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ECDEA
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ECF9E
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED00C
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
3=3
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\system32\qagentrt.dll,-10
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\System32\fveui.dll,-843
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\System32\fveui.dll,-844
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\System32\wuaueng.dll,-400
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F8749
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F88CF
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
LastPurgeTime
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EXCELFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SavedLegacySettings
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
 clean
There are 113 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
460000
heap private
page read and write
 clean
4522000
unkown
page readonly
 clean
3F0000
unkown
page read and write
 clean
1DD000
heap default
page read and write
 clean
48A0000
unkown
page readonly
 clean
A8F000
unkown
page read and write
 clean
4546000
unkown
page readonly
 clean
4900000
unkown
page readonly
 clean
4645000
unkown
page readonly
 clean
44C4000
unkown
page readonly
 clean
136000
unkown
page read and write
 clean
F0000
unkown
page read and write
 clean
3F6000
unkown
page read and write
 clean
1D6000
heap default
page read and write
 clean
3FF0000
unkown
page readonly
 clean
3E2000
unkown
page read and write
 clean
466000
unkown
page read and write
 clean
550000
heap private
page read and write
 clean
170000
unkown
page write copy
 clean
4CAE000
unkown
page read and write
 clean
4830000
unkown
page readonly
 clean
289000
unkown
page read and write
 clean
122000
unkown
page read and write
 clean
136000
unkown
page read and write
 clean
3BC000
unkown
page read and write
 clean
40B000
unkown
page read and write
 clean
456000
unkown
page read and write
 clean
70000
heap default
page read and write
 clean
45F6000
unkown
page readonly
 clean
246000
unkown
page read and write
 clean
170000
unkown
page readonly
 clean
5D4000
heap private
page read and write
 clean
6D0000
unkown
page readonly
 clean
4535000
unkown
page readonly
 clean
15D000
unkown
page read and write
 clean
205B000
heap private
page read and write
 clean
4576000
unkown
page readonly
 clean
464000
heap private
page read and write
 clean
4532000
unkown
page readonly
 clean
2C6000
unkown
page read and write
 clean
3EA9000
heap private
page read and write
 clean
C3000
heap default
page read and write
 clean
3B5000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
4505000
unkown
page readonly
 clean
420000
unkown
page read and write
 clean
46A2000
unkown
page readonly
 clean
4629000
unkown
page readonly
 clean
330000
heap default
page read and write
 clean
130000
unkown
page read and write
 clean
3FD0000
unkown
page readonly
 clean
1F40000
unkown
page readonly
 clean
2B0000
unkown
page readonly
 clean
4472000
unkown
page readonly
 clean
4672000
unkown
page readonly
 clean
300000
unkown
page write copy
 clean
47B2000
unkown
page readonly
 clean
1F0000
heap private
page read and write
 clean
414000
unkown
page read and write
 clean
554000
heap private
page read and write
 clean
314000
heap private
page read and write
 clean
41F000
unkown
page read and write
 clean
136000
unkown
page read and write
 clean
DA000
unkown
page read and write
 clean
11D000
unkown
page read and write
 clean
356000
unkown
page read and write
 clean
200000
unkown
page read and write
 clean
5D0000
heap private
page read and write
 clean
3EA0000
heap private
page read and write
 clean
4552000
unkown
page readonly
 clean
3C7000
unkown
page read and write
 clean
39B0000
unkown
page readonly
 clean
45F2000
unkown
page readonly
 clean
2170000
unkown
page read and write
 clean
3F6000
unkown
page read and write
 clean
2030000
heap private
page read and write
 clean
130000
unkown
page read and write
 clean
46F5000
unkown
page readonly
 clean
45C6000
unkown
page readonly
 clean
2380000
unkown
page readonly
 clean
45D2000
unkown
page readonly
 clean
1E0000
unkown
page read and write
 clean
56E000
unkown
page read and write
 clean
47F0000
unkown
page readonly
 clean
154000
unkown
page read and write
 clean
61F000
unkown
page read and write
 clean
44A2000
unkown
page readonly
 clean
4595000
unkown
page readonly
 clean
107000
unkown
page read and write
 clean
20000
unkown
page readonly
 clean
4484000
unkown
page readonly
 clean
4582000
unkown
page readonly
 clean
4482000
unkown
page readonly
 clean
46D2000
unkown
page readonly
 clean
130000
unkown
page read and write
 clean
120000
unkown
page readonly
 clean
4659000
unkown
page readonly
 clean
45AD000
unkown
page readonly
 clean
4862000
unkown
page readonly
 clean
45C9000
unkown
page readonly
 clean
4565000
unkown
page readonly
 clean
AE000
heap default
page read and write
 clean
209000
unkown
page read and write
 clean
77000
heap default
page read and write
 clean
5E0000
unkown
page readonly
 clean
F5000
unkown
page read and write
 clean
1D00000
unkown
page readonly
 clean
1C40000
unkown
page readonly
 clean
39E000
unkown
page read and write
 clean
CA000
heap default
page read and write
 clean
197000
heap default
page read and write
 clean
4378000
unkown
page readonly
 clean
233E000
unkown
page read and write
 clean
130000
unkown
page read and write
 clean
70000
unkown
page readonly
 clean
2180000
unkown
page write copy
 clean
20000
unkown
page readonly
 clean
11E000
unkown
page read and write
 clean
14D000
unkown
page read and write
 clean
2350000
unkown
page read and write
 clean
3F59000
heap private
page read and write
 clean
2450000
unkown
page readonly
 clean
38A000
heap default
page read and write
 clean
20B0000
unkown
page write copy
 clean
1F4000
heap private
page read and write
 clean
48C0000
unkown
page readonly
 clean
130000
unkown
page read and write
 clean
520000
unkown
page readonly
 clean
39A000
unkown
page read and write
 clean
45C2000
unkown
page readonly
 clean
110000
unkown
page execute and read and write
 clean
48E0000
unkown
page readonly
 clean
42C8000
unkown
page readonly
 clean
45E5000
unkown
page readonly
 clean
4372000
unkown
page readonly
 clean
44A4000
unkown
page readonly
 clean
45A6000
unkown
page readonly
 clean
4572000
unkown
page readonly
 clean
3F20000
unkown
page readonly
 clean
4552000
unkown
page readonly
 clean
DE000
unkown
page read and write
 clean
3B5000
unkown
page read and write
 clean
4626000
unkown
page readonly
 clean
45A9000
unkown
page readonly
 clean
3DE000
unkown
page read and write
 clean
4615000
unkown
page readonly
 clean
43C2000
unkown
page readonly
 clean
3F40000
unkown
page readonly
 clean
136000
unkown
page read and write
 clean
6A0000
unkown
page readonly
 clean
124000
unkown
page read and write
 clean
190000
heap default
page read and write
 clean
45B5000
unkown
page readonly
 clean
320000
unkown
page read and write
 clean
3EA5000
heap private
page read and write
 clean
14B000
unkown
page read and write
 clean
F2000
unkown
page read and write
 clean
1CD000
heap default
page read and write
 clean
3F55000
heap private
page read and write
 clean
4695000
unkown
page readonly
 clean
4534000
unkown
page readonly
 clean
4645000
unkown
page readonly
 clean
4810000
unkown
page readonly
 clean
4AE7000
unkown
page readonly
 clean
44F2000
unkown
page readonly
 clean
F5000
unkown
page read and write
 clean
4A37000
unkown
page readonly
 clean
3DD000
unkown
page read and write
 clean
3E4000
unkown
page read and write
 clean
465D000
unkown
page readonly
 clean
2025000
heap private
page read and write
 clean
4679000
unkown
page readonly
 clean
4656000
unkown
page readonly
 clean
2035000
heap private
page read and write
 clean
46A9000
unkown
page readonly
 clean
20A0000
unkown
page readonly
 clean
45E5000
unkown
page readonly
 clean
290000
unkown
page read and write
 clean
337000
heap default
page read and write
 clean
4622000
unkown
page readonly
 clean
210000
unkown
page read and write
 clean
3F50000
heap private
page read and write
 clean
60000
unkown
page readonly
 clean
103000
unkown
page read and write
 clean
3F6000
unkown
page read and write
 clean
3C3000
unkown
page read and write
 clean
FC000
unkown
page read and write
 clean
310000
heap private
page read and write
 clean
4602000
unkown
page readonly
 clean
E0000
unkown
page read and write
 clean
3A80000
unkown
page readonly
 clean
4615000
unkown
page readonly
 clean
4554000
unkown
page readonly
 clean
36E000
heap default
page read and write
 clean
3B2000
unkown
page read and write
 clean
760000
unkown
page readonly
 clean
40D000
unkown
page read and write
 clean
4850000
unkown
page readonly
 clean
4632000
unkown
page readonly
 clean
2A0000
unkown
page execute and read and write
 clean
430000
unkown
page read and write
 clean
46C5000
unkown
page readonly
 clean
4574000
unkown
page readonly
 clean
45A2000
unkown
page readonly
 clean
46D9000
unkown
page readonly
 clean
3F0000
unkown
page read and write
 clean
3F6000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
2C0000
unkown
page read and write
 clean
44C2000
unkown
page readonly
 clean
383000
heap default
page read and write
 clean
206B000
heap private
page read and write
 clean
45F9000
unkown
page readonly
 clean
4516000
unkown
page readonly
 clean
42C2000
unkown
page readonly
 clean
2020000
heap private
page read and write
 clean
There are 206 hidden memdumps, click here to show them.