Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Proforma Invoice.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Proforma Invoice.exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
'C:\Users\user\Desktop\Proforma Invoice.exe'
|
|
|
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
|
|
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
|
|
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
|
|
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
|
|
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
C:\Users\user\Desktop\Proforma Invoice.exe
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://schemas.m
|
unknown
|
 |
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2D41000
|
unkown
|
page read and write
|
|
|
|
2D84000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
7DF55DB52000
|
unkown image
|
page readonly
|
|
|
|
1088000
|
unkown
|
page read and write
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
180000
|
unkown image
|
page readonly
|
|
|
|
80000
|
unkown image
|
page readonly
|
|
|
|
D90000
|
unkown image
|
page readonly
|
|
|
|
5DF3000
|
unkown
|
page read and write
|
|
|
|
9A0000
|
unkown image
|
page readonly
|
|
|
|
7F5A2000
|
unkown image
|
page readonly
|
|
|
|
1068000
|
heap default
|
page read and write
|
|
|
|
5850277000
|
unkown
|
page read and write
|
|
|
|
7FF553C9F000
|
unkown image
|
page readonly
|
|
|
|
13A0000
|
unkown image
|
page readonly
|
|
|
|
584FFFC000
|
unkown
|
page read and write
|
|
|
|
990000
|
unkown image
|
page readonly
|
|
|
|
82000
|
unkown image
|
page readonly
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
109E000
|
unkown
|
page read and write
|
|
|
|
5DD4000
|
unkown
|
page read and write
|
|
|
|
5410000
|
unkown
|
page read and write
|
|
|
|
190000
|
unkown image
|
page readonly
|
|
|
|
1094000
|
unkown
|
page read and write
|
|
|
|
7FC92000
|
unkown image
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
5F00000
|
unkown
|
page execute and read and write
|
|
|
|
7FE30000
|
unkown image
|
page readonly
|
|
|
|
7FCA0000
|
unkown image
|
page readonly
|
|
|
|
5DA0000
|
unkown
|
page read and write
|
|
|
|
3280000
|
unkown
|
page read and write
|
|
|
|
5CF0000
|
unkown
|
page read and write
|
|
|
|
1EFAEF40000
|
unkown
|
page read and write
|
|
|
|
408F000
|
unkown
|
page read and write
|
|
|
|
1EFAE802000
|
unkown
|
page read and write
|
|
|
|
5240000
|
unkown
|
page read and write
|
|
|
|
5F11000
|
unkown
|
page read and write
|
|
|
|
5270000
|
heap private
|
page execute and read and write
|
|
|
|
5F11000
|
unkown
|
page read and write
|
|
|
|
9A2000
|
unkown image
|
page readonly
|
|
|
|
7F450000
|
unkown image
|
page readonly
|
|
|
|
CB2000
|
unkown image
|
page readonly
|
|
|
|
5E10000
|
unkown
|
page read and write
|
|
|
|
105C000
|
heap default
|
page read and write
|
|
|
|
51E0000
|
heap private
|
page read and write
|
|
|
|
2B2000
|
unkown image
|
page readonly
|
|
|
|
7F270000
|
unkown image
|
page readonly
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
584FBCC000
|
unkown
|
page read and write
|
|
|
|
108A000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
5DA0000
|
unkown
|
page read and write
|
|
|
|
10A1000
|
unkown
|
page read and write
|
|
|
|
1EFAE850000
|
unkown
|
page read and write
|
|
|
|
5260000
|
unkown
|
page read and write
|
|
|
|
9A0000
|
unkown image
|
page readonly
|
|
|
|
E35000
|
unkown
|
page execute and read and write
|
|
|
|
1096000
|
unkown
|
page read and write
|
|
|
|
7F5A2000
|
unkown image
|
page readonly
|
|
|
|
109E000
|
unkown
|
page read and write
|
|
|
|
5D71000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
1088000
|
unkown
|
page read and write
|
|
|
|
7FF553D54000
|
unkown image
|
page readonly
|
|
|
|
5F10000
|
unkown
|
page read and write
|
|
|
|
7F442000
|
unkown image
|
page readonly
|
|
|
|
AAA000
|
unkown
|
page read and write
|
|
|
|
7FF553BB5000
|
unkown image
|
page readonly
|
|
|
|
137E000
|
unkown
|
page read and write
|
|
|
|
408F000
|
unkown
|
page read and write
|
|
|
|
51A5000
|
unkown
|
page read and write
|
|
|
|
5F10000
|
unkown
|
page read and write
|
|
|
|
1028000
|
heap default
|
page read and write
|
|
|
|
3C0000
|
unkown image
|
page readonly
|
|
|
|
AA4000
|
unkown
|
page read and write
|
|
|
|
7F590000
|
unkown image
|
page readonly
|
|
|
|
7FF553CED000
|
unkown image
|
page readonly
|
|
|
|
1320000
|
unkown
|
page read and write
|
|
|
|
5410000
|
unkown
|
page read and write
|
|
|
|
585047E000
|
unkown
|
page read and write
|
|
|
|
56AE000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
5BF0000
|
unkown
|
page read and write
|
|
|
|
5DF0000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
FCD000
|
unkown
|
page execute and read and write
|
|
|
|
1EFAE7B0000
|
unkown image
|
page readonly
|
|
|
|
7FF553BE8000
|
unkown image
|
page readonly
|
|
|
|
2B0000
|
unkown image
|
page readonly
|
|
|
|
5DC0000
|
unkown
|
page read and write
|
|
|
|
1EFAE800000
|
unkown
|
page read and write
|
|
|
|
EC0000
|
unkown
|
page read and write
|
|
|
|
7F592000
|
unkown image
|
page readonly
|
|
|
|
7FE20000
|
unkown image
|
page readonly
|
|
|
|
110B000
|
unkown
|
page read and write
|
|
|
|
7F272000
|
unkown image
|
page readonly
|
|
|
|
7F090000
|
unkown image
|
page readonly
|
|
|
|
585037E000
|
unkown
|
page read and write
|
|
|
|
408F000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
5F11000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
C8B000
|
unkown
|
page read and write
|
|
|
|
1EFAE813000
|
unkown
|
page read and write
|
|
|
|
7FF553CBD000
|
unkown image
|
page readonly
|
|
|
|
7DF55DB60000
|
unkown image
|
page readonly
|
|
|
|
7F270000
|
unkown image
|
page readonly
|
|
|
|
7FF553C25000
|
unkown image
|
page readonly
|
|
|
|
7FF553CF9000
|
unkown image
|
page readonly
|
|
|
|
7FE22000
|
unkown image
|
page readonly
|
|
|
|
5E30000
|
unkown
|
page read and write
|
|
|
|
7FF553DA7000
|
unkown image
|
page readonly
|
|
|
|
7FF553C1E000
|
unkown image
|
page readonly
|
|
|
|
1EFAF002000
|
unkown
|
page read and write
|
|
|
|
5ED0000
|
unkown
|
page read and write
|
|
|
|
107C000
|
unkown
|
page read and write
|
|
|
|
604E000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
1EFAE770000
|
unkown image
|
page read and write
|
|
|
|
5DC0000
|
unkown
|
page read and write
|
|
|
|
51C5000
|
unkown
|
page read and write
|
|
|
|
7F5B0000
|
unkown image
|
page readonly
|
|
|
|
9A0000
|
unkown image
|
page readonly
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
5F11000
|
unkown
|
page read and write
|
|
|
|
5D30000
|
unkown
|
page read and write
|
|
|
|
7DF55DB42000
|
unkown image
|
page readonly
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
7FF553DA2000
|
unkown image
|
page readonly
|
|
|
|
54FC000
|
unkown
|
page read and write
|
|
|
|
1EFAE84E000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
5DFA000
|
unkown
|
page read and write
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
FEB000
|
unkown
|
page execute and read and write
|
|
|
|
82000
|
unkown image
|
page readonly
|
|
|
|
1EFAE855000
|
unkown
|
page read and write
|
|
|
|
109E000
|
unkown
|
page read and write
|
|
|
|
131E000
|
unkown
|
page read and write
|
|
|
|
5180000
|
unkown
|
page read and write
|
|
|
|
1051000
|
heap default
|
page read and write
|
|
|
|
FB0000
|
heap private
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
5E2F000
|
unkown
|
page read and write
|
|
|
|
7DF55DB42000
|
unkown image
|
page readonly
|
|
|
|
7FC80000
|
unkown image
|
page readonly
|
|
|
|
5DD0000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
7F092000
|
unkown image
|
page readonly
|
|
|
|
51E3000
|
heap private
|
page read and write
|
|
|
|
10A1000
|
unkown
|
page read and write
|
|
|
|
1EFAEE50000
|
unkown image
|
page readonly
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
7FE32000
|
unkown image
|
page readonly
|
|
|
|
7F5A0000
|
unkown image
|
page readonly
|
|
|
|
5E60000
|
unkown
|
page read and write
|
|
|
|
7DF45BA10000
|
unkown image
|
page readonly
|
|
|
|
7FE40000
|
unkown image
|
page readonly
|
|
|
|
1010000
|
unkown
|
page execute and read and write
|
|
|
|
1094000
|
unkown
|
page read and write
|
|
|
|
5D30000
|
unkown
|
page read and write
|
|
|
|
5F50000
|
unkown
|
page read and write
|
|
|
|
5400000
|
unkown
|
page read and write
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
7FF553B77000
|
unkown image
|
page readonly
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
5240000
|
unkown
|
page read and write
|
|
|
|
F00000
|
heap default
|
page read and write
|
|
|
|
1EFAE87F000
|
unkown
|
page read and write
|
|
|
|
7FF553D57000
|
unkown image
|
page readonly
|
|
|
|
7DF55DB50000
|
unkown image
|
page readonly
|
|
|
|
350000
|
unkown image
|
page readonly
|
|
|
|
7DF55DB50000
|
unkown image
|
page readonly
|
|
|
|
C30000
|
unkown image
|
page readonly
|
|
|
|
7FF553D51000
|
unkown image
|
page readonly
|
|
|
|
CB2000
|
unkown image
|
page readonly
|
|
|
|
7FF553D67000
|
unkown image
|
page readonly
|
|
|
|
7F092000
|
unkown image
|
page readonly
|
|
|
|
120000
|
unkown image
|
page readonly
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
110B000
|
unkown
|
page read and write
|
|
|
|
5D70000
|
unkown
|
page read and write
|
|
|
|
5EF0000
|
unkown
|
page read and write
|
|
|
|
5200000
|
unkown
|
page read and write
|
|
|
|
2D82000
|
unkown
|
page read and write
|
|
|
|
1EFAECD0000
|
unkown image
|
page readonly
|
|
|
|
5CF0000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
51F0000
|
unkown image
|
page readonly
|
|
|
|
7F490000
|
unkown image
|
page readonly
|
|
|
|
2B2000
|
unkown image
|
page readonly
|
|
|
|
D50000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown image
|
page readonly
|
|
|
|
10A1000
|
unkown
|
page read and write
|
|
|
|
CB0000
|
unkown image
|
page readonly
|
|
|
|
7FF553CB3000
|
unkown image
|
page readonly
|
|
|
|
7F590000
|
unkown image
|
page readonly
|
|
|
|
1EFAE829000
|
unkown
|
page read and write
|
|
|
|
1330000
|
heap private
|
page execute and read and write
|
|
|
|
110F000
|
unkown
|
page read and write
|
|
|
|
7F5A0000
|
unkown image
|
page readonly
|
|
|
|
5D70000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
10A1000
|
unkown
|
page read and write
|
|
|
|
1088000
|
unkown
|
page read and write
|
|
|
|
2C48000
|
unkown
|
page read and write
|
|
|
|
51D0000
|
unkown
|
page read and write
|
|
|
|
7FF553CA1000
|
unkown image
|
page readonly
|
|
|
|
5D70000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
A97000
|
unkown
|
page read and write
|
|
|
|
1EFAE7F0000
|
unkown image
|
page readonly
|
|
|
|
F05000
|
unkown
|
page read and write
|
|
|
|
5DA0000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
5CF0000
|
unkown
|
page read and write
|
|
|
|
9A2000
|
unkown image
|
page readonly
|
|
|
|
5210000
|
unkown
|
page read and write
|
|
|
|
3DA3000
|
unkown
|
page read and write
|
|
|
|
FDA000
|
unkown
|
page execute and read and write
|
|
|
|
7FF553CCA000
|
unkown image
|
page readonly
|
|
|
|
5E06000
|
unkown
|
page read and write
|
|
|
|
5211000
|
unkown
|
page read and write
|
|
|
|
1135000
|
unkown
|
page execute and read and write
|
|
|
|
1EFAE7E0000
|
heap default
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
5EC0000
|
unkown image
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
53F0000
|
unkown
|
page read and write
|
|
|
|
7FF553B67000
|
unkown image
|
page readonly
|
|
|
|
AB0000
|
unkown
|
page read and write
|
|
|
|
1EFAE88A000
|
unkown
|
page read and write
|
|
|
|
1094000
|
unkown
|
page read and write
|
|
|
|
518B000
|
unkown
|
page read and write
|
|
|
|
1099000
|
unkown
|
page read and write
|
|
|
|
7F592000
|
unkown image
|
page readonly
|
|
|
|
585007E000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
AA7000
|
unkown
|
page read and write
|
|
|
|
5240000
|
unkown
|
page read and write
|
|
|
|
10BB000
|
unkown
|
page read and write
|
|
|
|
C30000
|
unkown image
|
page readonly
|
|
|
|
535000
|
unkown
|
page execute and read and write
|
|
|
|
15A0000
|
unkown image
|
page readonly
|
|
|
|
7FF553CC6000
|
unkown image
|
page readonly
|
|
|
|
ED0000
|
unkown image
|
page readonly
|
|
|
|
7F450000
|
unkown image
|
page readonly
|
|
|
|
2D2E000
|
unkown
|
page read and write
|
|
|
|
1EFAE84B000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
1EFAE83C000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
4E3C000
|
unkown
|
page read and write
|
|
|
|
7FF553D5D000
|
unkown image
|
page readonly
|
|
|
|
5DA0000
|
unkown
|
page read and write
|
|
|
|
F8E000
|
unkown
|
page read and write
|
|
|
|
7FC92000
|
unkown image
|
page readonly
|
|
|
|
7FC80000
|
unkown image
|
page readonly
|
|
|
|
5D30000
|
unkown image
|
page read and write
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
3D41000
|
unkown
|
page read and write
|
|
|
|
51B1000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
7FE30000
|
unkown image
|
page readonly
|
|
|
|
5F60000
|
unkown
|
page read and write
|
|
|
|
5F20000
|
unkown
|
page read and write
|
|
|
|
7FE40000
|
unkown image
|
page readonly
|
|
|
|
1092000
|
unkown
|
page read and write
|
|
|
|
FA3000
|
unkown
|
page execute and read and write
|
|
|
|
7FF553BB8000
|
unkown image
|
page readonly
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
5D76000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
7F272000
|
unkown image
|
page readonly
|
|
|
|
BA0000
|
unkown image
|
page readonly
|
|
|
|
7F090000
|
unkown image
|
page readonly
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
5F28000
|
unkown
|
page read and write
|
|
|
|
1096000
|
unkown
|
page read and write
|
|
|
|
5D00000
|
unkown
|
page read and write
|
|
|
|
5230000
|
unkown
|
page read and write
|
|
|
|
2B0000
|
unkown image
|
page readonly
|
|
|
|
5DB0000
|
heap private
|
page read and write
|
|
|
|
5220000
|
unkown
|
page read and write
|
|
|
|
628F000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
7FE32000
|
unkown image
|
page readonly
|
|
|
|
7FF553D6B000
|
unkown image
|
page readonly
|
|
|
|
7FF553DA7000
|
unkown image
|
page readonly
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
109F000
|
unkown
|
page read and write
|
|
|
|
7DF55DB40000
|
unkown image
|
page readonly
|
|
|
|
7FCA0000
|
unkown image
|
page readonly
|
|
|
|
1EFAE780000
|
heap private
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
5E20000
|
unkown
|
page read and write
|
|
|
|
7DF55DB40000
|
unkown image
|
page readonly
|
|
|
|
5EE0000
|
unkown
|
page read and write
|
|
|
|
110A000
|
unkown
|
page read and write
|
|
|
|
1094000
|
unkown
|
page read and write
|
|
|
|
2D20000
|
unkown
|
page read and write
|
|
|
|
1380000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
CB0000
|
unkown image
|
page readonly
|
|
|
|
7FC82000
|
unkown image
|
page readonly
|
|
|
|
1390000
|
heap private
|
page read and write
|
|
|
|
5D70000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
7F452000
|
unkown image
|
page readonly
|
|
|
|
1EFAE900000
|
unkown
|
page read and write
|
|
|
|
1110000
|
unkown
|
page read and write
|
|
|
|
5EC0000
|
unkown
|
page read and write
|
|
|
|
585017B000
|
unkown
|
page read and write
|
|
|
|
1092000
|
unkown
|
page read and write
|
|
|
|
408F000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
5F00000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
2C3E000
|
unkown
|
page read and write
|
|
|
|
132000
|
unkown image
|
page readonly
|
|
|
|
7F460000
|
unkown image
|
page readonly
|
|
|
|
584FE7E000
|
unkown
|
page read and write
|
|
|
|
F90000
|
unkown
|
page read and write
|
|
|
|
5260000
|
unkown
|
page read and write
|
|
|
|
1EFAE881000
|
unkown
|
page read and write
|
|
|
|
53F0000
|
unkown
|
page read and write
|
|
|
|
5430000
|
unkown
|
page read and write
|
|
|
|
7FF553D64000
|
unkown image
|
page readonly
|
|
|
|
53F0000
|
unkown
|
page read and write
|
|
|
|
5184000
|
unkown
|
page read and write
|
|
|
|
A9B000
|
unkown
|
page read and write
|
|
|
|
7F5B0000
|
unkown image
|
page readonly
|
|
|
|
1EFAE7C0000
|
unkown image
|
page readonly
|
|
|
|
5E50000
|
unkown
|
page read and write
|
|
|
|
130000
|
unkown image
|
page readonly
|
|
|
|
7DF55DB60000
|
unkown image
|
page readonly
|
|
|
|
132000
|
unkown image
|
page readonly
|
|
|
|
408F000
|
unkown
|
page read and write
|
|
|
|
1EFAE913000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
5DC4000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
56B0000
|
unkown
|
page read and write
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
1020000
|
heap default
|
page read and write
|
|
|
|
5D10000
|
unkown
|
page read and write
|
|
|
|
7F440000
|
unkown image
|
page readonly
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
130000
|
unkown image
|
page readonly
|
|
|
|
7FF553D96000
|
unkown image
|
page readonly
|
|
|
|
7FF553CE6000
|
unkown image
|
page readonly
|
|
|
|
120000
|
unkown image
|
page readonly
|
|
|
|
7FF553D93000
|
unkown image
|
page readonly
|
|
|
|
7F460000
|
unkown image
|
page readonly
|
|
|
|
FE7000
|
unkown
|
page execute and read and write
|
|
|
|
1088000
|
unkown
|
page read and write
|
|
|
|
1EFAE902000
|
unkown
|
page read and write
|
|
|
|
3D49000
|
unkown
|
page read and write
|
|
|
|
32CE000
|
unkown
|
page read and write
|
|
|
|
7FF553B3A000
|
unkown image
|
page readonly
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
130000
|
unkown image
|
page readonly
|
|
|
|
5E70000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown image
|
page readonly
|
|
|
|
10A7000
|
unkown
|
page read and write
|
|
|
|
618E000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
1094000
|
unkown
|
page read and write
|
|
|
|
109A000
|
unkown
|
page read and write
|
|
|
|
7FF553CF7000
|
unkown image
|
page readonly
|
|
|
|
5F40000
|
unkown
|
page read and write
|
|
|
|
D87000
|
unkown
|
page read and write
|
|
|
|
105F000
|
heap default
|
page read and write
|
|
|
|
108B000
|
unkown
|
page read and write
|
|
|
|
5CF0000
|
unkown
|
page read and write
|
|
|
|
350000
|
unkown image
|
page readonly
|
|
|
|
5DF3000
|
unkown
|
page read and write
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
1EFAE790000
|
unkown image
|
page readonly
|
|
|
|
7F440000
|
unkown image
|
page readonly
|
|
|
|
53F0000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
992000
|
unkown image
|
page readonly
|
|
|
|
519A000
|
unkown
|
page read and write
|
|
|
|
CB0000
|
unkown image
|
page readonly
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
595000
|
unkown
|
page execute and read and write
|
|
|
|
519D000
|
unkown
|
page read and write
|
|
|
|
51AC000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
5F11000
|
unkown
|
page read and write
|
|
|
|
7FF553A11000
|
unkown image
|
page readonly
|
|
|
|
1EFAE86C000
|
unkown
|
page read and write
|
|
|
|
5EC9000
|
unkown
|
page read and write
|
|
|
|
7FE22000
|
unkown image
|
page readonly
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
1088000
|
unkown
|
page read and write
|
|
|
|
110F000
|
unkown
|
page read and write
|
|
|
|
5220000
|
unkown
|
page read and write
|
|
|
|
5E40000
|
unkown
|
page read and write
|
|
|
|
7F452000
|
unkown image
|
page readonly
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
2B0000
|
unkown image
|
page readonly
|
|
|
|
C20000
|
unkown image
|
page read and write
|
|
|
|
53F0000
|
unkown image
|
page read and write
|
|
|
|
5200000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
AAD000
|
unkown
|
page read and write
|
|
|
|
5280000
|
unkown
|
page execute and read and write
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
5500000
|
heap private
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
5197000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
1084000
|
unkown
|
page read and write
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
2D1D000
|
unkown
|
page read and write
|
|
|
|
992000
|
unkown image
|
page readonly
|
|
|
|
53F0000
|
unkown
|
page read and write
|
|
|
|
7FF553857000
|
unkown image
|
page readonly
|
|
|
|
1094000
|
unkown
|
page read and write
|
|
|
|
5F70000
|
unkown
|
page read and write
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
54A0000
|
unkown
|
page read and write
|
|
|
|
108A000
|
unkown
|
page read and write
|
|
|
|
BB0000
|
unkown image
|
page readonly
|
|
|
|
FD6000
|
unkown
|
page execute and read and write
|
|
|
|
614E000
|
unkown
|
page read and write
|
|
|
|
DB0000
|
unkown image
|
page readonly
|
|
|
|
7FF553B96000
|
unkown image
|
page readonly
|
|
|
|
7FF553851000
|
unkown image
|
page readonly
|
|
|
|
F4E000
|
unkown
|
page read and write
|
|
|
|
5194000
|
unkown
|
page read and write
|
|
|
|
1EFAE908000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
5E80000
|
unkown
|
page read and write
|
|
|
|
5DFD000
|
unkown
|
page read and write
|
|
|
|
990000
|
unkown image
|
page readonly
|
|
|
|
5D30000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
heap private
|
page read and write
|
|
|
|
7FE20000
|
unkown image
|
page readonly
|
|
|
|
121E000
|
unkown
|
page read and write
|
|
|
|
7FC82000
|
unkown image
|
page readonly
|
|
|
|
735000
|
unkown
|
page execute and read and write
|
|
|
|
7DF55DB52000
|
unkown image
|
page readonly
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
51C0000
|
unkown
|
page read and write
|
|
|
|
1EFAEAD0000
|
unkown image
|
page readonly
|
|
|
|
FAD000
|
unkown
|
page execute and read and write
|
|
|
|
FE2000
|
unkown
|
page read and write
|
|
|
|
5240000
|
unkown
|
page read and write
|
|
|
|
7FF553CD2000
|
unkown image
|
page readonly
|
|
|
|
584FEFE000
|
unkown
|
page read and write
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
5F30000
|
unkown
|
page read and write
|
|
|
|
110A000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
10B5000
|
unkown
|
page read and write
|
|
|
|
7FF553BB0000
|
unkown image
|
page readonly
|
|
|
|
51A0000
|
unkown
|
page read and write
|
|
|
|
5D90000
|
unkown
|
page execute and read and write
|
|
|
|
7F442000
|
unkown image
|
page readonly
|
|
|
|
5200000
|
unkown
|
page read and write
|
|
|
|
5430000
|
unkown
|
page read and write
|
|
|
|
D50000
|
unkown image
|
page readonly
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
5210000
|
unkown image
|
page readonly
|
|
|
|
DC0000
|
unkown image
|
page readonly
|
|
|
|
7FF553CAF000
|
unkown image
|
page readonly
|
|
|
|
1720000
|
unkown image
|
page readonly
|
|
|
|
80000
|
unkown image
|
page readonly
|
|
|
|
5210000
|
unkown
|
page read and write
|
|
|
|
53F0000
|
unkown
|
page read and write
|
|
|
|
5259000
|
unkown
|
page read and write
|
|
|
|
5F11000
|
unkown
|
page read and write
|
|
|
|
5DE8000
|
unkown
|
page read and write
|
|
|
|
7FF553D7A000
|
unkown image
|
page readonly
|
|
|
|
F04000
|
unkown
|
page read and write
|
|
|
|
5330000
|
unkown image
|
page readonly
|
|
|
|
5EF9000
|
unkown
|
page read and write
|
|
|
|
1094000
|
unkown
|
page read and write
|
|
|
|
5DF1000
|
unkown
|
page read and write
|
|
|
|
5F10000
|
unkown
|
page read and write
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
990000
|
unkown image
|
page readonly
|
|
|
|
1EFAE790000
|
unkown image
|
page readonly
|
|
There are 491 hidden memdumps, click here to show them.