Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
FAKTURA 9502461485.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Temp\~DFA25EEA5CBC5E729F.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\FAKTURA 9502461485.exe
|
"C:\Users\user\Desktop\FAKTURA 9502461485.exe"
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ministerstormens\Confabulatory
|
Finansierings
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
22B0000
|
unkown
|
page execute and read and write
|
||
29318647000
|
unkown
|
page read and write
|
||
264057CC000
|
unkown
|
page read and write
|
||
26404DD0000
|
unkown image
|
page readonly
|
||
7FF5E0B7A000
|
unkown image
|
page readonly
|
||
29318708000
|
unkown
|
page read and write
|
||
1C544A00000
|
unkown image
|
page readonly
|
||
7FF5E0B7C000
|
unkown image
|
page readonly
|
||
7DF46E3D0000
|
unkown image
|
page readonly
|
||
21535E8D000
|
unkown
|
page read and write
|
||
26A335E2000
|
unkown
|
page read and write
|
||
7FF5CFB23000
|
unkown image
|
page readonly
|
||
26A335C6000
|
unkown
|
page read and write
|
||
1C544630000
|
unkown image
|
page readonly
|
||
7FF5E0C0D000
|
unkown image
|
page readonly
|
||
7FF573499000
|
unkown image
|
page readonly
|
||
2CA0000
|
unkown image
|
page read and write
|
||
7FF5D02C7000
|
unkown image
|
page readonly
|
||
26405C02000
|
unkown
|
page read and write
|
||
26405717000
|
unkown
|
page read and write
|
||
26405602000
|
unkown
|
page read and write
|
||
7FF573496000
|
unkown image
|
page readonly
|
||
7FF5E03FD000
|
unkown image
|
page readonly
|
||
7FF5E0A8E000
|
unkown image
|
page readonly
|
||
26A33350000
|
unkown image
|
page read and write
|
||
7FF5732C3000
|
unkown image
|
page readonly
|
||
7FF55B3D4000
|
unkown image
|
page readonly
|
||
98B0CFF000
|
stack
|
page read and write
|
||
26405C02000
|
unkown
|
page read and write
|
||
7FF5D03A1000
|
unkown image
|
page readonly
|
||
7FF5D02E7000
|
unkown image
|
page readonly
|
||
7FF55B481000
|
unkown image
|
page readonly
|
||
7FF52D985000
|
unkown image
|
page readonly
|
||
7FF573437000
|
unkown image
|
page readonly
|
||
7DF5885A2000
|
unkown image
|
page readonly
|
||
7DF570512000
|
unkown image
|
page readonly
|
||
B1E527F000
|
stack
|
page read and write
|
||
157FD45B000
|
unkown
|
page read and write
|
||
7FF52DD50000
|
unkown image
|
page readonly
|
||
7DF5ABFB2000
|
unkown image
|
page readonly
|
||
7FFD0000
|
unkown image
|
page readonly
|
||
21535E48000
|
unkown
|
page read and write
|
||
7FF596EAD000
|
unkown image
|
page readonly
|
||
7FF5E0BBC000
|
unkown image
|
page readonly
|
||
7DF5E5432000
|
unkown image
|
page readonly
|
||
29318A00000
|
unkown image
|
page readonly
|
||
7FF55B3E4000
|
unkown image
|
page readonly
|
||
7FF5E0BF8000
|
unkown image
|
page readonly
|
||
26405792000
|
unkown
|
page read and write
|
||
7FF52DD7F000
|
unkown image
|
page readonly
|
||
264057AC000
|
unkown
|
page read and write
|
||
7FF5E0B8E000
|
unkown image
|
page readonly
|
||
26405781000
|
unkown
|
page read and write
|
||
7FF5732E1000
|
unkown image
|
page readonly
|
||
7FFC0000
|
unkown image
|
page readonly
|
||
2560000
|
unkown
|
page read and write
|
||
7FF5D02AA000
|
unkown image
|
page readonly
|
||
2640578C000
|
unkown
|
page read and write
|
||
7DF570512000
|
unkown image
|
page readonly
|
||
21535E49000
|
unkown
|
page read and write
|
||
26404C50000
|
unkown image
|
page readonly
|
||
21535C60000
|
heap default
|
page read and write
|
||
7FF5E0BBF000
|
unkown image
|
page readonly
|
||
7FF5E0BA7000
|
unkown image
|
page readonly
|
||
7DF570500000
|
unkown image
|
page readonly
|
||
7FF5D03A2000
|
unkown image
|
page readonly
|
||
26404C40000
|
heap private
|
page read and write
|
||
2640579C000
|
unkown
|
page read and write
|
||
D1AD5F8000
|
stack
|
page read and write
|
||
26404EA6000
|
unkown
|
page read and write
|
||
98B0BF7000
|
stack
|
page read and write
|
||
7FF596787000
|
unkown image
|
page readonly
|
||
7FF5D0318000
|
unkown image
|
page readonly
|
||
264054D0000
|
unkown image
|
page read and write
|
||
7FF5E0C7A000
|
unkown image
|
page readonly
|
||
157FD47B000
|
unkown
|
page read and write
|
||
7DF440DF0000
|
unkown image
|
page readonly
|
||
7FF52DDE7000
|
unkown image
|
page readonly
|
||
264057A0000
|
unkown
|
page read and write
|
||
1C544913000
|
unkown
|
page read and write
|
||
7FF57344C000
|
unkown image
|
page readonly
|
||
26405C00000
|
unkown
|
page read and write
|
||
2640577E000
|
unkown
|
page read and write
|
||
7FF57336D000
|
unkown image
|
page readonly
|
||
34E4C7B000
|
unkown
|
page read and write
|
||
29318654000
|
unkown
|
page read and write
|
||
7FFB2000
|
unkown image
|
page readonly
|
||
26404E3C000
|
unkown
|
page read and write
|
||
1F0000
|
unkown
|
page read and write
|
||
7FF5E0BEF000
|
unkown image
|
page readonly
|
||
7DF5ABFA2000
|
unkown image
|
page readonly
|
||
7FF52DCAE000
|
unkown image
|
page readonly
|
||
21535C10000
|
unkown image
|
page readonly
|
||
7FF57342B000
|
unkown image
|
page readonly
|
||
7FF596E3B000
|
unkown image
|
page readonly
|
||
7FF52DE18000
|
unkown image
|
page readonly
|
||
7FF52DDB5000
|
unkown image
|
page readonly
|
||
26405798000
|
unkown
|
page read and write
|
||
21536200000
|
unkown image
|
page readonly
|
||
7FF5D030F000
|
unkown image
|
page readonly
|
||
21535C40000
|
unkown image
|
page readonly
|
||
2640578F000
|
unkown
|
page read and write
|
||
30A0000
|
unkown image
|
page readonly
|
||
26405786000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
7FF5D0061000
|
unkown image
|
page readonly
|
||
21535D60000
|
unkown
|
page read and write
|
||
22A0000
|
heap private
|
page read and write
|
||
157FD1F0000
|
unkown image
|
page readonly
|
||
26404EFA000
|
unkown
|
page read and write
|
||
7DF570502000
|
unkown image
|
page readonly
|
||
7FF5D031E000
|
unkown image
|
page readonly
|
||
26404CA0000
|
heap default
|
page read and write
|
||
7FF5E0756000
|
unkown image
|
page readonly
|
||
7DF5F5D02000
|
unkown image
|
page readonly
|
||
1C54484A000
|
unkown
|
page read and write
|
||
157FD2F0000
|
unkown image
|
page readonly
|
||
26404E88000
|
unkown
|
page read and write
|
||
7FF5D01FD000
|
unkown image
|
page readonly
|
||
7FF572C93000
|
unkown image
|
page readonly
|
||
29318602000
|
unkown
|
page read and write
|
||
7FF55B40D000
|
unkown image
|
page readonly
|
||
7FF55AF65000
|
unkown image
|
page readonly
|
||
7DF5ABFB2000
|
unkown image
|
page readonly
|
||
21E0000
|
unkown image
|
page read and write
|
||
2640576E000
|
unkown
|
page read and write
|
||
1C544C00000
|
unkown image
|
page readonly
|
||
C34267B000
|
stack
|
page read and write
|
||
7DF4E32F0000
|
unkown image
|
page readonly
|
||
293183F0000
|
heap private
|
page read and write
|
||
2640579C000
|
unkown
|
page read and write
|
||
233E000
|
stack
|
page read and write
|
||
2640577A000
|
unkown
|
page read and write
|
||
7FF52DD1C000
|
unkown image
|
page readonly
|
||
7FFC0000
|
unkown image
|
page readonly
|
||
26404E13000
|
unkown
|
page read and write
|
||
7FF55B2DD000
|
unkown image
|
page readonly
|
||
21535E4B000
|
unkown
|
page read and write
|
||
3160000
|
unkown
|
page read and write
|
||
26A338A0000
|
unkown image
|
page readonly
|
||
7FF5E0B90000
|
unkown image
|
page readonly
|
||
7FF5D01AE000
|
unkown image
|
page readonly
|
||
D1ACD1F000
|
stack
|
page read and write
|
||
26405460000
|
unkown image
|
page write copy
|
||
26A335CF000
|
unkown
|
page read and write
|
||
7FF596F22000
|
unkown image
|
page readonly
|
||
26405796000
|
unkown
|
page read and write
|
||
26A33370000
|
unkown image
|
page readonly
|
||
7FF5D02B5000
|
unkown image
|
page readonly
|
||
7FF596E84000
|
unkown image
|
page readonly
|
||
7FFC2000
|
unkown image
|
page readonly
|
||
1C544600000
|
unkown image
|
page readonly
|
||
157FD1C0000
|
unkown image
|
page readonly
|
||
26405769000
|
unkown
|
page read and write
|
||
7DF5885A0000
|
unkown image
|
page readonly
|
||
7DF486460000
|
unkown image
|
page readonly
|
||
26A335A0000
|
heap default
|
page read and write
|
||
264057C1000
|
unkown
|
page read and write
|
||
21536000000
|
unkown image
|
page readonly
|
||
1C54484B000
|
unkown
|
page read and write
|
||
C3421CF000
|
stack
|
page read and write
|
||
2640578B000
|
unkown
|
page read and write
|
||
424000
|
unkown image
|
page readonly
|
||
7DF542F30000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
21535E4F000
|
unkown
|
page read and write
|
||
7FF55B38E000
|
unkown image
|
page readonly
|
||
3ADF000
|
stack
|
page read and write
|
||
7DF5ABFC0000
|
unkown image
|
page readonly
|
||
2931863C000
|
unkown
|
page read and write
|
||
497867C000
|
unkown
|
page read and write
|
||
26404F08000
|
unkown
|
page read and write
|
||
D1ACD9F000
|
stack
|
page read and write
|
||
7DF5E5432000
|
unkown image
|
page readonly
|
||
D1AD4FF000
|
stack
|
page read and write
|
||
7DF5ABFA2000
|
unkown image
|
page readonly
|
||
700000
|
heap default
|
page read and write
|
||
7FF52D922000
|
unkown image
|
page readonly
|
||
34E4D7F000
|
stack
|
page read and write
|
||
7FF52DDFA000
|
unkown image
|
page readonly
|
||
1C544800000
|
unkown
|
page read and write
|
||
422000
|
unkown image
|
page read and write
|
||
2640577C000
|
unkown
|
page read and write
|
||
B1E507F000
|
stack
|
page read and write
|
||
7FF596F14000
|
unkown image
|
page readonly
|
||
7FF5E0A51000
|
unkown image
|
page readonly
|
||
26404C70000
|
unkown image
|
page readonly
|
||
1C544883000
|
unkown
|
page read and write
|
||
2640577D000
|
unkown
|
page read and write
|
||
5D0000
|
heap default
|
page read and write
|
||
7DF588590000
|
unkown image
|
page readonly
|
||
7FF5E0750000
|
unkown image
|
page readonly
|
||
7FF5D0101000
|
unkown image
|
page readonly
|
||
7FF573457000
|
unkown image
|
page readonly
|
||
7FF52DD9A000
|
unkown image
|
page readonly
|
||
2380000
|
unkown
|
page read and write
|
||
21535BF0000
|
unkown image
|
page read and write
|
||
29318702000
|
unkown
|
page read and write
|
||
7FF52D707000
|
unkown image
|
page readonly
|
||
26A335E1000
|
unkown
|
page read and write
|
||
21535E82000
|
unkown
|
page read and write
|
||
7FF52DBF1000
|
unkown image
|
page readonly
|
||
7DF570502000
|
unkown image
|
page readonly
|
||
7FEB0000
|
unkown image
|
page readonly
|
||
7FF5E0907000
|
unkown image
|
page readonly
|
||
1C544902000
|
unkown
|
page read and write
|
||
7FF596E74000
|
unkown image
|
page readonly
|
||
30000
|
unkown image
|
page read and write
|
||
34E527E000
|
stack
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
7DF542F32000
|
unkown image
|
page readonly
|
||
264057B0000
|
unkown
|
page read and write
|
||
7DF542F40000
|
unkown image
|
page readonly
|
||
7DF5885A2000
|
unkown image
|
page readonly
|
||
7FF52DE9A000
|
unkown image
|
page readonly
|
||
7FF5D02DC000
|
unkown image
|
page readonly
|
||
7FF5E0AF4000
|
unkown image
|
page readonly
|
||
7DF570500000
|
unkown image
|
page readonly
|
||
26405792000
|
unkown
|
page read and write
|
||
1A0000
|
unkown image
|
page readonly
|
||
34E5077000
|
stack
|
page read and write
|
||
26405C02000
|
unkown
|
page read and write
|
||
2640577D000
|
unkown
|
page read and write
|
||
7FF5D0203000
|
unkown image
|
page readonly
|
||
B1E52FA000
|
stack
|
page read and write
|
||
1C544900000
|
unkown
|
page read and write
|
||
2640577E000
|
unkown
|
page read and write
|
||
29318400000
|
unkown image
|
page readonly
|
||
7FF5E0C82000
|
unkown image
|
page readonly
|
||
98B05DF000
|
stack
|
page read and write
|
||
1C544620000
|
unkown image
|
page readonly
|
||
21535C00000
|
heap private
|
page read and write
|
||
29318550000
|
unkown
|
page read and write
|
||
7FF55B38A000
|
unkown image
|
page readonly
|
||
26404E4D000
|
unkown
|
page read and write
|
||
157FD460000
|
unkown
|
page read and write
|
||
7FF57346A000
|
unkown image
|
page readonly
|
||
7FF52DD63000
|
unkown image
|
page readonly
|
||
7FF52DCFD000
|
unkown image
|
page readonly
|
||
7FF55B406000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
26404C50000
|
unkown image
|
page readonly
|
||
7FF55B47A000
|
unkown image
|
page readonly
|
||
7FF52DCAB000
|
unkown image
|
page readonly
|
||
29318629000
|
unkown
|
page read and write
|
||
26A335CF000
|
unkown
|
page read and write
|
||
7DF5F5D10000
|
unkown image
|
page readonly
|
||
26405779000
|
unkown
|
page read and write
|
||
34E4CFE000
|
stack
|
page read and write
|
||
7FF5D032D000
|
unkown image
|
page readonly
|
||
2640579C000
|
unkown
|
page read and write
|
||
157FD210000
|
heap default
|
page read and write
|
||
2375000
|
heap private
|
page read and write
|
||
1C545002000
|
unkown
|
page read and write
|
||
21535F08000
|
unkown
|
page read and write
|
||
26405780000
|
unkown
|
page read and write
|
||
7FFC2000
|
unkown image
|
page readonly
|
||
7FF5CFE76000
|
unkown image
|
page readonly
|
||
7FF52DDDC000
|
unkown image
|
page readonly
|
||
7FF52DDBB000
|
unkown image
|
page readonly
|
||
29318800000
|
unkown image
|
page readonly
|
||
7FF55B3C7000
|
unkown image
|
page readonly
|
||
29318530000
|
unkown image
|
page readonly
|
||
7FF52DE1E000
|
unkown image
|
page readonly
|
||
7FF5731D1000
|
unkown image
|
page readonly
|
||
26405C02000
|
unkown
|
page read and write
|
||
2640578B000
|
unkown
|
page read and write
|
||
7FF52DB6B000
|
unkown image
|
page readonly
|
||
D1AD1F8000
|
stack
|
page read and write
|
||
29318B80000
|
unkown image
|
page readonly
|
||
29318450000
|
heap default
|
page read and write
|
||
1C544849000
|
unkown
|
page read and write
|
||
1C544829000
|
unkown
|
page read and write
|
||
26404E4C000
|
unkown
|
page read and write
|
||
7FF5D0214000
|
unkown image
|
page readonly
|
||
7DF5E5430000
|
unkown image
|
page readonly
|
||
7FF5CFE85000
|
unkown image
|
page readonly
|
||
4978A7F000
|
stack
|
page read and write
|
||
7FF55AF56000
|
unkown image
|
page readonly
|
||
21535E4C000
|
unkown
|
page read and write
|
||
7FF5E0A33000
|
unkown image
|
page readonly
|
||
7FF52D88E000
|
unkown image
|
page readonly
|
||
7FF5D0304000
|
unkown image
|
page readonly
|
||
21C0000
|
heap private
|
page read and write
|
||
B1E4DEA000
|
unkown
|
page read and write
|
||
7FF52DBE4000
|
unkown image
|
page readonly
|
||
2260000
|
unkown image
|
page readonly
|
||
7FF55B251000
|
unkown image
|
page readonly
|
||
7FF52D6B2000
|
unkown image
|
page readonly
|
||
7FF52D9C7000
|
unkown image
|
page readonly
|
||
26405771000
|
unkown
|
page read and write
|
||
264057A0000
|
unkown
|
page read and write
|
||
7FF52DD8F000
|
unkown image
|
page readonly
|
||
7FF573425000
|
unkown image
|
page readonly
|
||
7FF5E0C81000
|
unkown image
|
page readonly
|
||
157FD800000
|
unkown image
|
page readonly
|
||
2640578F000
|
unkown
|
page read and write
|
||
1C54484E000
|
unkown
|
page read and write
|
||
7FF52DD14000
|
unkown image
|
page readonly
|
||
26405C6A000
|
unkown
|
page read and write
|
||
7FF573301000
|
unkown image
|
page readonly
|
||
26404E55000
|
unkown
|
page read and write
|
||
29318420000
|
unkown image
|
page readonly
|
||
29318700000
|
unkown
|
page read and write
|
||
2640578B000
|
unkown
|
page read and write
|
||
5C0000
|
unkown image
|
page readonly
|
||
26A33370000
|
unkown image
|
page readonly
|
||
29318430000
|
unkown image
|
page readonly
|
||
2640579D000
|
unkown
|
page read and write
|
||
6E0000
|
unkown
|
page read and write
|
||
4978B77000
|
stack
|
page read and write
|
||
497897B000
|
stack
|
page read and write
|
||
7FF55B3FE000
|
unkown image
|
page readonly
|
||
7FF55B482000
|
unkown image
|
page readonly
|
||
7FF52DCB3000
|
unkown image
|
page readonly
|
||
26405769000
|
unkown
|
page read and write
|
||
7FFB0000
|
unkown image
|
page readonly
|
||
7FF52D912000
|
unkown image
|
page readonly
|
||
26404E4F000
|
unkown
|
page read and write
|
||
7FF52DDDF000
|
unkown image
|
page readonly
|
||
2640574A000
|
unkown
|
page read and write
|
||
26404F02000
|
unkown
|
page read and write
|
||
7FF5E0A71000
|
unkown image
|
page readonly
|
||
264057B1000
|
unkown
|
page read and write
|
||
7FF5E0BDA000
|
unkown image
|
page readonly
|
||
7DF542F40000
|
unkown image
|
page readonly
|
||
D1ACC9B000
|
unkown
|
page read and write
|
||
26405200000
|
unkown image
|
page readonly
|
||
7FF5E0941000
|
unkown image
|
page readonly
|
||
26A334C0000
|
heap private
|
page read and write
|
||
29318679000
|
unkown
|
page read and write
|
||
7FF5D0171000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
1C54484F000
|
unkown
|
page read and write
|
||
26405779000
|
unkown
|
page read and write
|
||
26A335B6000
|
heap default
|
page read and write
|
||
C34247F000
|
stack
|
page read and write
|
||
7DF588590000
|
unkown image
|
page readonly
|
||
7FF52DE26000
|
unkown image
|
page readonly
|
||
7FF5E0A8B000
|
unkown image
|
page readonly
|
||
7FF5D0191000
|
unkown image
|
page readonly
|
||
7FF52DDAE000
|
unkown image
|
page readonly
|
||
26404E00000
|
unkown
|
page read and write
|
||
157FD47B000
|
unkown
|
page read and write
|
||
7FF573512000
|
unkown image
|
page readonly
|
||
7FF5E0765000
|
unkown image
|
page readonly
|
||
21536602000
|
unkown
|
page read and write
|
||
26404E5C000
|
unkown
|
page read and write
|
||
7DF5ABFA0000
|
unkown image
|
page readonly
|
||
157FD600000
|
unkown image
|
page readonly
|
||
21D0000
|
unkown
|
page read and write
|
||
360000
|
unkown
|
page read and write
|
||
2640577D000
|
unkown
|
page read and write
|
||
7DF5885B0000
|
unkown image
|
page readonly
|
||
7FF596E9E000
|
unkown image
|
page readonly
|
||
7FF5D0329000
|
unkown image
|
page readonly
|
||
7DF5ABFA0000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
7DF5F5D10000
|
unkown image
|
page readonly
|
||
7FF52DBB0000
|
unkown image
|
page readonly
|
||
7DF5ABFB0000
|
unkown image
|
page readonly
|
||
1C544730000
|
unkown image
|
page readonly
|
||
264057B3000
|
unkown
|
page read and write
|
||
26405779000
|
unkown
|
page read and write
|
||
7FF55B271000
|
unkown image
|
page readonly
|
||
7DF5E5420000
|
unkown image
|
page readonly
|
||
7FF52D91E000
|
unkown image
|
page readonly
|
||
26405758000
|
unkown
|
page read and write
|
||
7FF55B3EF000
|
unkown image
|
page readonly
|
||
7FF55B2E3000
|
unkown image
|
page readonly
|
||
26405757000
|
unkown
|
page read and write
|
||
7FF596E5C000
|
unkown image
|
page readonly
|
||
26A33A20000
|
unkown image
|
page readonly
|
||
C34287F000
|
stack
|
page read and write
|
||
264057AF000
|
unkown
|
page read and write
|
||
7FF57331B000
|
unkown image
|
page readonly
|
||
21535F02000
|
unkown
|
page read and write
|
||
26404E59000
|
unkown
|
page read and write
|
||
26404D80000
|
unkown image
|
page readonly
|
||
1C54484C000
|
unkown
|
page read and write
|
||
C34214B000
|
unkown
|
page read and write
|
||
364000
|
unkown
|
page read and write
|
||
9FF000
|
stack
|
page read and write
|
||
7DF542F32000
|
unkown image
|
page readonly
|
||
1C544650000
|
heap default
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
7FF596EA9000
|
unkown image
|
page readonly
|
||
7DF5E5422000
|
unkown image
|
page readonly
|
||
D1AD3F7000
|
stack
|
page read and write
|
||
26A334E0000
|
unkown image
|
page readonly
|
||
7FF57350A000
|
unkown image
|
page readonly
|
||
7FF55AF50000
|
unkown image
|
page readonly
|
||
26405798000
|
unkown
|
page read and write
|
||
29318600000
|
unkown
|
page read and write
|
||
7FF596E98000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
7DF588592000
|
unkown image
|
page readonly
|
||
7DF5ABFB0000
|
unkown image
|
page readonly
|
||
7FF57347F000
|
unkown image
|
page readonly
|
||
1C544813000
|
unkown
|
page read and write
|
||
34E517E000
|
stack
|
page read and write
|
||
7FF5D02B0000
|
unkown image
|
page readonly
|
||
26404E21000
|
unkown
|
page read and write
|
||
7DF5F5D12000
|
unkown image
|
page readonly
|
||
26405C02000
|
unkown
|
page read and write
|
||
7FF5D0153000
|
unkown image
|
page readonly
|
||
2550000
|
heap private
|
page read and write
|
||
2640578B000
|
unkown
|
page read and write
|
||
26405700000
|
unkown
|
page read and write
|
||
7FF5E0C06000
|
unkown image
|
page readonly
|
||
26A335C7000
|
unkown
|
page read and write
|
||
7FF52DE29000
|
unkown image
|
page readonly
|
||
7FF55B2F4000
|
unkown image
|
page readonly
|
||
7FF55B1E1000
|
unkown image
|
page readonly
|
||
7FF572FF5000
|
unkown image
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
7FF5E0403000
|
unkown image
|
page readonly
|
||
21535E51000
|
unkown
|
page read and write
|
||
264057A0000
|
unkown
|
page read and write
|
||
D90000
|
unkown image
|
page readonly
|
||
26404F16000
|
unkown
|
page read and write
|
||
7FF5D029C000
|
unkown image
|
page readonly
|
||
2640574C000
|
unkown
|
page read and write
|
||
293183E0000
|
unkown image
|
page read and write
|
||
7FF5E0BC7000
|
unkown image
|
page readonly
|
||
157FD43C000
|
unkown
|
page read and write
|
||
157FD457000
|
unkown
|
page read and write
|
||
7FF55B395000
|
unkown image
|
page readonly
|
||
26A335CF000
|
unkown
|
page read and write
|
||
26405796000
|
unkown
|
page read and write
|
||
7DF5F5D20000
|
unkown image
|
page readonly
|
||
26405783000
|
unkown
|
page read and write
|
||
7DF542F22000
|
unkown image
|
page readonly
|
||
7FF57348E000
|
unkown image
|
page readonly
|
||
7FF573488000
|
unkown image
|
page readonly
|
||
C342A7F000
|
stack
|
page read and write
|
||
157FD47C000
|
unkown
|
page read and write
|
||
7FF5E0ADD000
|
unkown image
|
page readonly
|
||
29318400000
|
unkown image
|
page readonly
|
||
D1AD2F7000
|
stack
|
page read and write
|
||
157FD513000
|
unkown
|
page read and write
|
||
5BE000
|
stack
|
page read and write
|
||
157FD413000
|
unkown
|
page read and write
|
||
7DF4A9E70000
|
unkown image
|
page readonly
|
||
2640578C000
|
unkown
|
page read and write
|
||
21535F00000
|
unkown
|
page read and write
|
||
1C544851000
|
unkown
|
page read and write
|
||
7DF542F20000
|
unkown image
|
page readonly
|
||
26405773000
|
unkown
|
page read and write
|
||
7DF5E5440000
|
unkown image
|
page readonly
|
||
7FF5E0C74000
|
unkown image
|
page readonly
|
||
34E4F7B000
|
stack
|
page read and write
|
||
21535E13000
|
unkown
|
page read and write
|
||
7DF570510000
|
unkown image
|
page readonly
|
||
7FF57341E000
|
unkown image
|
page readonly
|
||
26A334C5000
|
heap private
|
page read and write
|
||
157FD463000
|
unkown
|
page read and write
|
||
7FFD0000
|
unkown image
|
page readonly
|
||
7DF5E5422000
|
unkown image
|
page readonly
|
||
2640577B000
|
unkown
|
page read and write
|
||
7FF52D703000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
26405796000
|
unkown
|
page read and write
|
||
7FF55B3DA000
|
unkown image
|
page readonly
|
||
7FF5E0BD4000
|
unkown image
|
page readonly
|
||
7FF57349D000
|
unkown image
|
page readonly
|
||
7FF5E0B8A000
|
unkown image
|
page readonly
|
||
7FF52DD84000
|
unkown image
|
page readonly
|
||
C00000
|
unkown image
|
page readonly
|
||
7FF52DEA1000
|
unkown image
|
page readonly
|
||
7FF52D623000
|
unkown image
|
page readonly
|
||
7FF5E09E1000
|
unkown image
|
page readonly
|
||
7FF52D970000
|
unkown image
|
page readonly
|
||
7FF55B141000
|
unkown image
|
page readonly
|
||
26404E57000
|
unkown
|
page read and write
|
||
7FF57331E000
|
unkown image
|
page readonly
|
||
7FF55B107000
|
unkown image
|
page readonly
|
||
7DF5F5D20000
|
unkown image
|
page readonly
|
||
7FF52DD7B000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
98B04DB000
|
unkown
|
page read and write
|
||
7FF55B3A7000
|
unkown image
|
page readonly
|
||
7FF52DCB8000
|
unkown image
|
page readonly
|
||
7FF596BE0000
|
unkown image
|
page readonly
|
||
21535E70000
|
unkown
|
page read and write
|
||
7DF5E5420000
|
unkown image
|
page readonly
|
||
1C544870000
|
unkown
|
page read and write
|
||
22F0000
|
heap private
|
page read and write
|
||
26A334A0000
|
unkown
|
page read and write
|
||
7DF542F30000
|
unkown image
|
page readonly
|
||
7FF57344F000
|
unkown image
|
page readonly
|
||
264054C0000
|
unkown
|
page read and write
|
||
7FF573197000
|
unkown image
|
page readonly
|
||
7FF52DC01000
|
unkown image
|
page readonly
|
||
29318713000
|
unkown
|
page read and write
|
||
21535F13000
|
unkown
|
page read and write
|
||
157FD429000
|
unkown
|
page read and write
|
||
7FF5D02F4000
|
unkown image
|
page readonly
|
||
21C9000
|
heap private
|
page read and write
|
||
26404EA7000
|
unkown
|
page read and write
|
||
7FF52DB27000
|
unkown image
|
page readonly
|
||
26404EEA000
|
unkown
|
page read and write
|
||
26405722000
|
unkown
|
page read and write
|
||
2640578E000
|
unkown
|
page read and write
|
||
7FFB2000
|
unkown image
|
page readonly
|
||
7FF55B3BF000
|
unkown image
|
page readonly
|
||
26404C30000
|
unkown image
|
page read and write
|
||
2640578F000
|
unkown
|
page read and write
|
||
2640578B000
|
unkown
|
page read and write
|
||
7FF5D02FA000
|
unkown image
|
page readonly
|
||
7FF572FE0000
|
unkown image
|
page readonly
|
||
7FF52D61D000
|
unkown image
|
page readonly
|
||
2640578F000
|
unkown
|
page read and write
|
||
98B055F000
|
stack
|
page read and write
|
||
7FF596E30000
|
unkown image
|
page readonly
|
||
7FF573511000
|
unkown image
|
page readonly
|
||
7FF573464000
|
unkown image
|
page readonly
|
||
157FD1B0000
|
heap private
|
page read and write
|
||
7DF5F5D00000
|
unkown image
|
page readonly
|
||
722000
|
heap default
|
page read and write
|
||
26404E5B000
|
unkown
|
page read and write
|
||
7FF5E0C09000
|
unkown image
|
page readonly
|
||
157FD502000
|
unkown
|
page read and write
|
||
264057CC000
|
unkown
|
page read and write
|
||
26404EBE000
|
unkown
|
page read and write
|
||
7FF55B474000
|
unkown image
|
page readonly
|
||
157FD980000
|
unkown image
|
page readonly
|
||
1C544908000
|
unkown
|
page read and write
|
||
1C544D80000
|
unkown image
|
page readonly
|
||
C342777000
|
stack
|
page read and write
|
||
157FD461000
|
unkown
|
page read and write
|
||
1C54488E000
|
unkown
|
page read and write
|
||
7DF5F5D12000
|
unkown image
|
page readonly
|
||
7FF55B3BC000
|
unkown image
|
page readonly
|
||
6F0000
|
unkown
|
page execute read
|
||
4978C7F000
|
stack
|
page read and write
|
||
29318613000
|
unkown
|
page read and write
|
||
7DF5885A0000
|
unkown image
|
page readonly
|
||
7FF572FE6000
|
unkown image
|
page readonly
|
||
7FF596E7A000
|
unkown image
|
page readonly
|
||
1C544802000
|
unkown
|
page read and write
|
||
424000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
2480000
|
unkown
|
page read and write
|
||
7FF52DEA2000
|
unkown image
|
page readonly
|
||
7FF596F21000
|
unkown image
|
page readonly
|
||
7FF57341A000
|
unkown image
|
page readonly
|
||
7DF542F20000
|
unkown image
|
page readonly
|
||
7FF5E0B9B000
|
unkown image
|
page readonly
|
||
C34297E000
|
stack
|
page read and write
|
||
26404F13000
|
unkown
|
page read and write
|
||
7FF52DE94000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
2280000
|
unkown
|
page read and write
|
||
7FF5D021C000
|
unkown image
|
page readonly
|
||
B1E5179000
|
stack
|
page read and write
|
||
7FF5D02BB000
|
unkown image
|
page readonly
|
||
264054C0000
|
unkown
|
page read and write
|
||
26405380000
|
unkown image
|
page readonly
|
||
26404EB0000
|
unkown
|
page read and write
|
||
264057B0000
|
unkown
|
page read and write
|
||
21536380000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
2931864E000
|
unkown
|
page read and write
|
||
7FF52DC71000
|
unkown image
|
page readonly
|
||
26404E82000
|
unkown
|
page read and write
|
||
7FF55B233000
|
unkown image
|
page readonly
|
||
26404EE0000
|
unkown
|
page read and write
|
||
7FF5D029A000
|
unkown image
|
page readonly
|
||
7DF542F22000
|
unkown image
|
page readonly
|
||
7DF5885B0000
|
unkown image
|
page readonly
|
||
7FF55B390000
|
unkown image
|
page readonly
|
||
7FF5E0B95000
|
unkown image
|
page readonly
|
||
7FF52DD9C000
|
unkown image
|
page readonly
|
||
21535E4E000
|
unkown
|
page read and write
|
||
7FF52DDF4000
|
unkown image
|
page readonly
|
||
7FF55B28E000
|
unkown image
|
page readonly
|
||
26A33390000
|
unkown image
|
page readonly
|
||
401000
|
unkown image
|
page execute read
|
||
2640578B000
|
unkown
|
page read and write
|
||
7FF5D02DF000
|
unkown image
|
page readonly
|
||
7FF573384000
|
unkown image
|
page readonly
|
||
7FF57340A000
|
unkown image
|
page readonly
|
||
26405769000
|
unkown
|
page read and write
|
||
264054C0000
|
unkown
|
page read and write
|
||
7DF588592000
|
unkown image
|
page readonly
|
||
29318626000
|
unkown
|
page read and write
|
||
157FDA02000
|
unkown
|
page read and write
|
||
7FF55B37C000
|
unkown image
|
page readonly
|
||
157FD400000
|
unkown
|
page read and write
|
||
7DF5E5440000
|
unkown image
|
page readonly
|
||
7FF52D9C5000
|
unkown image
|
page readonly
|
||
26404E52000
|
unkown
|
page read and write
|
||
9B000
|
unkown
|
page read and write
|
||
7FFB0000
|
unkown image
|
page readonly
|
||
7FF55B3F8000
|
unkown image
|
page readonly
|
||
1C544600000
|
unkown image
|
page readonly
|
||
497877F000
|
stack
|
page read and write
|
||
7FF573474000
|
unkown image
|
page readonly
|
||
21535C10000
|
unkown image
|
page readonly
|
||
26404E4B000
|
unkown
|
page read and write
|
||
264057AD000
|
unkown
|
page read and write
|
||
21535D40000
|
unkown image
|
page readonly
|
||
26405C02000
|
unkown
|
page read and write
|
||
2640578B000
|
unkown
|
page read and write
|
||
26A335B1000
|
unkown
|
page read and write
|
||
26A33480000
|
unkown
|
page read and write
|
||
1C54483C000
|
unkown
|
page read and write
|
||
D80000
|
unkown image
|
page readonly
|
||
26A336A0000
|
unkown image
|
page readonly
|
||
2370000
|
heap private
|
page read and write
|
||
157FD1E0000
|
unkown image
|
page readonly
|
||
7FF52DBE6000
|
unkown image
|
page readonly
|
||
21535C30000
|
unkown image
|
page readonly
|
||
2640576F000
|
unkown
|
page read and write
|
||
26405C63000
|
unkown
|
page read and write
|
||
7FF55B28B000
|
unkown image
|
page readonly
|
||
21535E29000
|
unkown
|
page read and write
|
||
A00000
|
unkown image
|
page readonly
|
||
7FF5D0027000
|
unkown image
|
page readonly
|
||
7FF52DB76000
|
unkown image
|
page readonly
|
||
7FF5D0394000
|
unkown image
|
page readonly
|
||
7FF52DC91000
|
unkown image
|
page readonly
|
||
7FF596783000
|
unkown image
|
page readonly
|
||
157FD508000
|
unkown
|
page read and write
|
||
157FD486000
|
unkown
|
page read and write
|
||
157FD3E0000
|
unkown
|
page read and write
|
||
2640578E000
|
unkown
|
page read and write
|
||
21535E4A000
|
unkown
|
page read and write
|
||
7FF573504000
|
unkown image
|
page readonly
|
||
29318E02000
|
unkown
|
page read and write
|
||
B1E51FE000
|
stack
|
page read and write
|
||
7FF52DE04000
|
unkown image
|
page readonly
|
||
401000
|
unkown image
|
page execute read
|
||
157FD500000
|
unkown
|
page read and write
|
||
26A334F0000
|
unkown image
|
page readonly
|
||
7FF55B39B000
|
unkown image
|
page readonly
|
||
7FF5E0BE4000
|
unkown image
|
page readonly
|
||
7FF5CFE70000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
7FF573420000
|
unkown image
|
page readonly
|
||
21535E00000
|
unkown
|
page read and write
|
||
7FF55ABFD000
|
unkown image
|
page readonly
|
||
7FF5E0AFC000
|
unkown image
|
page readonly
|
||
7FF5D039A000
|
unkown image
|
page readonly
|
||
1C5445E0000
|
unkown image
|
page read and write
|
||
7FF55AC03000
|
unkown image
|
page readonly
|
||
21535E3C000
|
unkown
|
page read and write
|
||
7FF573373000
|
unkown image
|
page readonly
|
||
2640579C000
|
unkown
|
page read and write
|
||
2640578F000
|
unkown
|
page read and write
|
||
7FF5D01AB000
|
unkown image
|
page readonly
|
||
21535E02000
|
unkown
|
page read and write
|
||
26404C80000
|
unkown image
|
page readonly
|
||
157FD45E000
|
unkown
|
page read and write
|
||
19C000
|
unkown
|
page read and write
|
||
7FF596E5F000
|
unkown image
|
page readonly
|
||
157FD1A0000
|
unkown image
|
page read and write
|
||
7DF5F5D00000
|
unkown image
|
page readonly
|
||
2640578C000
|
unkown
|
page read and write
|
||
157FD1C0000
|
unkown image
|
page readonly
|
||
7FF52DD52000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
26404E50000
|
unkown
|
page read and write
|
||
2640576D000
|
unkown
|
page read and write
|
||
264057A0000
|
unkown
|
page read and write
|
||
70A000
|
heap default
|
page read and write
|
||
7FF5D02AE000
|
unkown image
|
page readonly
|
||
7DF570520000
|
unkown image
|
page readonly
|
||
26404DA0000
|
unkown
|
page read and write
|
||
98B09FB000
|
stack
|
page read and write
|
||
7FF52DC5A000
|
unkown image
|
page readonly
|
||
7FF596F1A000
|
unkown image
|
page readonly
|
||
7FF55B2FC000
|
unkown image
|
page readonly
|
||
7FF52DDAA000
|
unkown image
|
page readonly
|
||
7FF52DDC7000
|
unkown image
|
page readonly
|
||
7FF52DD03000
|
unkown image
|
page readonly
|
||
157FD45D000
|
unkown
|
page read and write
|
||
29318688000
|
unkown
|
page read and write
|
||
7FF52DDB0000
|
unkown image
|
page readonly
|
||
7FF5E0AE3000
|
unkown image
|
page readonly
|
||
7FF57340C000
|
unkown image
|
page readonly
|
||
26404EC5000
|
unkown
|
page read and write
|
||
7FF52D976000
|
unkown image
|
page readonly
|
||
26405000000
|
unkown image
|
page readonly
|
||
7FF55B37A000
|
unkown image
|
page readonly
|
||
7DF5ABFC0000
|
unkown image
|
page readonly
|
||
26404E54000
|
unkown
|
page read and write
|
||
7FF573271000
|
unkown image
|
page readonly
|
||
7DF5E5430000
|
unkown image
|
page readonly
|
||
264057B3000
|
unkown
|
page read and write
|
||
7FF596E8E000
|
unkown image
|
page readonly
|
||
7DF570510000
|
unkown image
|
page readonly
|
||
2640578F000
|
unkown
|
page read and write
|
||
7DF570520000
|
unkown image
|
page readonly
|
||
7FF5E0BFE000
|
unkown image
|
page readonly
|
||
B1E50FF000
|
stack
|
page read and write
|
||
7FF572C8D000
|
unkown image
|
page readonly
|
||
7FF52DB60000
|
unkown image
|
page readonly
|
||
26404E70000
|
unkown
|
page read and write
|
||
D1AD67F000
|
stack
|
page read and write
|
||
7DF5F5D02000
|
unkown image
|
page readonly
|
||
2640578F000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
98B0AFF000
|
stack
|
page read and write
|
||
7FF596E35000
|
unkown image
|
page readonly
|
||
1C544750000
|
unkown
|
page read and write
|
||
2378000
|
heap private
|
page read and write
|
||
2640577E000
|
unkown
|
page read and write
|
||
1C5445F0000
|
heap private
|
page read and write
|
||
2640577F000
|
unkown
|
page read and write
|
||
7FF55B409000
|
unkown image
|
page readonly
|
||
26405781000
|
unkown
|
page read and write
|
||
7FF596E68000
|
unkown image
|
page readonly
|
||
2640578B000
|
unkown
|
page read and write
|
||
7FF52DE0F000
|
unkown image
|
page readonly
|
||
29318648000
|
unkown
|
page read and write
|
||
29318670000
|
unkown
|
page read and write
|
||
7FF5D0326000
|
unkown image
|
page readonly
|
||
7FF52DC53000
|
unkown image
|
page readonly
|
||
7FF57338C000
|
unkown image
|
page readonly
|
||
49786FF000
|
stack
|
page read and write
|
||
26404E29000
|
unkown
|
page read and write
|
||
7DF4F3BD0000
|
unkown image
|
page readonly
|
There are 715 hidden memdumps, click here to show them.