Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
SCAN_7295943480515097.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$SCAN_7295943480515097.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\GSCXBEVV.htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2FADF20A.png
|
PNG image data, 1714 x 241, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CBD7.tmp
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFDF944FEFD380A8E6.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\besta.ocx
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWow64\rundll32.exe ..\besta.ocx,44532.4280415509
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://standoutglobal.com/2/MWpqeVgZ/Softwa
|
unknown
|
|
|
|
http://standoutglobal.com/2/MWpqeVgZ/1-48FD
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/ecommerce/conversion-rate-optimization/
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/happy-elementor-addons/assets/fonts/style.min.css?ver=3.
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/10/framer.svg
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/elementor/css/post-1522.css?ver=1638212153
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital-en-cdmx/
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.svg?5.10.0#eico
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.4.8
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/e-commerce-efectivo/conversion-rate-optimizati
|
unknown
|
|
|
|
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
|
unknown
|
|
|
|
http://www.diginotar.nl/cps/pkioverheid0
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/11/logo-VNDSmkt-final-300x102.png
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-creativos/diseno-web-ux/
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-de-marketing-digital/creacion-de-con
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/10/anuncios-300x270.png
|
unknown
|
|
|
|
http://schemas.open
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-de-marketing-digital/estrategias-en-
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/e-commerce-efectivo/pagos-online/
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-creativos/branding/
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/images/comentario1.jpg
|
unknown
|
|
|
|
https://vendes.marketing/
|
107.180.46.229
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-creativos/fotografia-y-edicion/
|
unknown
|
|
|
|
https://connect.facebook.net/en_US/fbevents.js
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?
|
unknown
|
|
|
|
http://standoutglobal.c
|
unknown
|
|
|
|
https://vendes.marketing/blog/
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/10/visual-Studio.svg
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-de-marketing-digital/publicidad-digi
|
unknown
|
|
|
|
https://vendes.marketing/comments/feed/
|
unknown
|
|
|
|
https://vendes.marketing/wp-includes/js/wp-embed.min.js?ver=5.8.2
|
unknown
|
|
|
|
http://vendes.marketing/transmigrant/Wplzr/
|
107.180.46.229
|
|
|
|
https://s.w.org/images/core/emoji/13.1.0/svg/1f609.svg
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.mi
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/e-commerce-efectivo/tienda-online-con-magento/
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/consultorias/marketing-para-el-sector-salud/
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.cs
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/11/logo-VNDSmkt-final-1536x522.png
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
https://vendes.marketing/wp-includes/wlwmanifest.xml
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-de-desarrollo-web/automatizacion-de-
|
unknown
|
|
|
|
http://schemas.openformatrg/drawml/2006/spreadsheetD
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.4.8
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/10/figma.svg
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/10/marketing-digital-con-instagram.png
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.0.2
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital-en-monterrey/
|
unknown
|
|
|
|
https://vendes.marketing/nY
|
unknown
|
|
|
|
https://schema.org
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/consultorias/consultoria-en-marketing-basado-e
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/consultorias/auditorias-y-optimizacion-de-camp
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-de-desarrollo-web/desarrollo-de-mega
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/elementor/css/post-2157.css?ver=1638212282
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/themes/twentytwentyone/assets/js/responsive-embeds.js?ver=1.4
|
unknown
|
|
|
|
http://standoutglobal.co
|
unknown
|
|
|
|
https://connect.facebook.net/es_LA/sdk/xfbml.customerchat.js
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor-pro/assets/lib/lottie/lottie.min.js?ver=5.6.6
|
unknown
|
|
|
|
https://vendes.marketing/wp-includes/css/dist/block-library/style.min.css?ver=5.8.2
|
unknown
|
|
|
|
http://schemas.openformatrg/package/2006/r
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/consultorias/digital-partner-incubadora-de-neg
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3
|
unknown
|
|
|
|
https://vendes.marketing/wp-includes/js/imagesloaded.min.js?ver=4.1.4
|
unknown
|
|
|
|
https://vendes.marketing/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fvendes.marketing%2F
|
unknown
|
|
|
|
https://vendes.marketing/xmlrpc.php?rsd
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/10/elementor.svg
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-de-marketing-digital/inbound-marketi
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.4.8
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/themes/twentytwentyone/assets/css/ie.css?ver=1.4
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver
|
unknown
|
|
|
|
https://www.thinkwithgoogle.com/intl/es-419/futuro-del-marketing/transformacion-digital/tiendas-omni
|
unknown
|
|
|
|
https://vendes.marketing/feed/
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/images/caso-exito1.png
|
unknown
|
|
|
|
http://crl.entrust.net/2048ca.crl0
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/consultorias/consultoria-para-adsense/
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0)
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/10/apple_android.svg
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/ecommerce/emailing/
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-creativos/produccion-audiovisual/
|
unknown
|
|
|
|
http://ocsp.entrust.net03
|
unknown
|
|
|
|
http://schemas.openformatrg/package/2006/content-t
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/10/anuncios.png
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/e-commerce-efectivo/tiendas-en-facebook-e-inst
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/ecommerce/
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/10/marketing-digital-con-facebook.png
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.4.8
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/ecommerce/pagos-online/
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/elementor/css/post-2017.css?ver=1638212282
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-de-desarrollo-web/
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/2021/10/marketing-digital-con-youtube.png
|
unknown
|
|
|
|
https://vendes.marketing/wp-content/uploads/images/comentario5-m.jpg
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/e-commerce-efectivo/tienda-online-con-shopify/
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/consultorias/
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/consultorias/marketing-para-inmobiliarias-cons
|
unknown
|
|
|
|
https://vendes.marketing/agencia-de-marketing-digital/servicios-creativos/diseno-grafico/
|
unknown
|
|
|
|
https://vendes.marketing/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
standoutglobal.com
|
162.240.9.126
|
|
|
|
vendes.marketing
|
107.180.46.229
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
162.240.9.126
|
standoutglobal.com
|
United States
|
|
|
|
107.180.46.229
|
vendes.marketing
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
-e$
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2E907
|
2E907
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
oq$
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3D7B9
|
3D7B9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3E5CD
|
3E5CD
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
There are 59 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
5780000
|
unkown
|
page read and write
|
|
|
|
7F5C000
|
stack
|
page read and write
|
|
|
|
7FC5000
|
unkown
|
page read and write
|
|
|
|
5A50000
|
unkown
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
4330000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
7FC5000
|
unkown
|
page read and write
|
|
|
|
57CA000
|
unkown
|
page read and write
|
|
|
|
3530000
|
unkown
|
page read and write
|
|
|
|
7A30000
|
heap private
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
5040000
|
unkown
|
page read and write
|
|
|
|
3550000
|
unkown
|
page read and write
|
|
|
|
24A9000
|
heap private
|
page read and write
|
|
|
|
6E90000
|
unkown
|
page read and write
|
|
|
|
3E60000
|
unkown
|
page read and write
|
|
|
|
1DA8000
|
unkown
|
page read and write
|
|
|
|
78E0000
|
unkown
|
page read and write
|
|
|
|
BFF000
|
unkown
|
page read and write
|
|
|
|
484000
|
heap default
|
page read and write
|
|
|
|
1E0000
|
unkown image
|
page readonly
|
|
|
|
2FA0000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
4D6F000
|
stack
|
page read and write
|
|
|
|
57C6000
|
unkown
|
page read and write
|
|
|
|
6E90000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
7290000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
5BB1000
|
unkown
|
page read and write
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
2F30000
|
unkown image
|
page readonly
|
|
|
|
331F000
|
stack
|
page read and write
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
464000
|
unkown
|
page read and write
|
|
|
|
5BB2000
|
unkown
|
page read and write
|
|
|
|
978000
|
heap private
|
page read and write
|
|
|
|
4480000
|
unkown
|
page read and write
|
|
|
|
6F20000
|
unkown
|
page read and write
|
|
|
|
5762000
|
unkown
|
page read and write
|
|
|
|
974000
|
heap private
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
5790000
|
unkown
|
page read and write
|
|
|
|
430000
|
heap private
|
page read and write
|
|
|
|
4140000
|
unkown
|
page read and write
|
|
|
|
2120000
|
unkown
|
page read and write
|
|
|
|
321000
|
unkown
|
page read and write
|
|
|
|
4135000
|
unkown
|
page read and write
|
|
|
|
52D7000
|
unkown image
|
page readonly
|
|
|
|
7F80000
|
unkown
|
page read and write
|
|
|
|
8130000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
heap private
|
page read and write
|
|
|
|
30D0000
|
heap private
|
page read and write
|
|
|
|
7FC5000
|
unkown
|
page read and write
|
|
|
|
73BC000
|
stack
|
page read and write
|
|
|
|
8155000
|
unkown
|
page read and write
|
|
|
|
57E0000
|
unkown
|
page read and write
|
|
|
|
6F0000
|
unkown image
|
page readonly
|
|
|
|
348F000
|
stack
|
page read and write
|
|
|
|
446F000
|
stack
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
326000
|
unkown
|
page read and write
|
|
|
|
2F4000
|
unkown
|
page read and write
|
|
|
|
50D000
|
heap default
|
page read and write
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
57F0000
|
unkown
|
page read and write
|
|
|
|
7FA8000
|
unkown
|
page read and write
|
|
|
|
577E000
|
unkown
|
page read and write
|
|
|
|
45B000
|
heap default
|
page read and write
|
|
|
|
497000
|
heap default
|
page read and write
|
|
|
|
880000
|
unkown image
|
page readonly
|
|
|
|
8120000
|
unkown
|
page read and write
|
|
|
|
2F50000
|
unkown
|
page read and write
|
|
|
|
307000
|
unkown
|
page read and write
|
|
|
|
460000
|
unkown
|
page read and write
|
|
|
|
4AE000
|
heap default
|
page read and write
|
|
|
|
56B0000
|
unkown
|
page read and write
|
|
|
|
4B2C000
|
unkown
|
page read and write
|
|
|
|
34F0000
|
unkown
|
page read and write
|
|
|
|
503F000
|
unkown
|
page read and write
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
6E30000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
4020000
|
heap private
|
page read and write
|
|
|
|
56CB000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
1CC000
|
unkown
|
page read and write
|
|
|
|
1D97000
|
unkown
|
page read and write
|
|
|
|
410000
|
heap default
|
page read and write
|
|
|
|
110000
|
heap default
|
page read and write
|
|
|
|
5BB8000
|
unkown
|
page read and write
|
|
|
|
278000
|
unkown
|
page read and write
|
|
|
|
7DD0000
|
heap private
|
page read and write
|
|
|
|
79AB000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
56B9000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
3340000
|
unkown
|
page read and write
|
|
|
|
79D0000
|
unkown
|
page read and write
|
|
|
|
1F10000
|
unkown image
|
page readonly
|
|
|
|
456000
|
heap default
|
page read and write
|
|
|
|
6F50000
|
heap private
|
page read and write
|
|
|
|
4B30000
|
unkown
|
page read and write
|
|
|
|
5BC0000
|
unkown
|
page read and write
|
|
|
|
6FD0000
|
unkown
|
page read and write
|
|
|
|
3210000
|
unkown
|
page read and write
|
|
|
|
2F20000
|
unkown image
|
page readonly
|
|
|
|
56E0000
|
heap private
|
page read and write
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
100000
|
heap private
|
page read and write
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
5770000
|
unkown
|
page read and write
|
|
|
|
73D0000
|
heap private
|
page read and write
|
|
|
|
6E04000
|
unkown
|
page read and write
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
200000
|
heap private
|
page read and write
|
|
|
|
190000
|
unkown
|
page read and write
|
|
|
|
8592000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
8134000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
7F80000
|
unkown
|
page read and write
|
|
|
|
890000
|
unkown image
|
page readonly
|
|
|
|
78D0000
|
unkown
|
page read and write
|
|
|
|
5944000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
7FA8000
|
unkown
|
page read and write
|
|
|
|
3490000
|
unkown
|
page read and write
|
|
|
|
2F0000
|
unkown
|
page read and write
|
|
|
|
3540000
|
unkown
|
page read and write
|
|
|
|
455000
|
unkown
|
page read and write
|
|
|
|
503A000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
34A0000
|
unkown
|
page read and write
|
|
|
|
79B0000
|
unkown
|
page read and write
|
|
|
|
3F60000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
2145000
|
heap private
|
page read and write
|
|
|
|
56C3000
|
unkown
|
page read and write
|
|
|
|
570000
|
unkown image
|
page readonly
|
|
|
|
352D000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
5790000
|
unkown
|
page read and write
|
|
|
|
5767000
|
unkown
|
page read and write
|
|
|
|
2D14000
|
heap private
|
page read and write
|
|
|
|
4030000
|
unkown
|
page read and write
|
|
|
|
414F000
|
unkown
|
page read and write
|
|
|
|
26A000
|
unkown
|
page read and write
|
|
|
|
6F20000
|
unkown
|
page read and write
|
|
|
|
352B000
|
unkown
|
page read and write
|
|
|
|
44E0000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
4132000
|
unkown
|
page read and write
|
|
|
|
7900000
|
heap private
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
4ED6000
|
unkown
|
page read and write
|
|
|
|
3D0000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown image
|
page read and write
|
|
|
|
5A58000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
212D000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
44D0000
|
unkown image
|
page readonly
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
8520000
|
unkown
|
page read and write
|
|
|
|
6D50000
|
unkown
|
page read and write
|
|
|
|
6D30000
|
unkown image
|
page read and write
|
|
|
|
5AE5000
|
unkown
|
page read and write
|
|
|
|
7090000
|
unkown
|
page read and write
|
|
|
|
307000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown
|
page read and write
|
|
|
|
44B0000
|
unkown
|
page read and write
|
|
|
|
8520000
|
unkown
|
page read and write
|
|
|
|
7F80000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
30C8000
|
unkown
|
page read and write
|
|
|
|
7FC5000
|
unkown
|
page read and write
|
|
|
|
4024000
|
heap private
|
page read and write
|
|
|
|
5055000
|
unkown
|
page read and write
|
|
|
|
4137000
|
unkown
|
page read and write
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
7084000
|
heap private
|
page read and write
|
|
|
|
78F0000
|
unkown
|
page read and write
|
|
|
|
470E000
|
stack
|
page read and write
|
|
|
|
7FA8000
|
unkown
|
page read and write
|
|
|
|
4C80000
|
unkown
|
page read and write
|
|
|
|
3350000
|
unkown
|
page read and write
|
|
|
|
413A000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5910000
|
unkown
|
page read and write
|
|
|
|
576A000
|
unkown
|
page read and write
|
|
|
|
5BB1000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
9D0000
|
heap private
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
6E520000
|
unkown image
|
page readonly
|
|
|
|
306000
|
unkown
|
page read and write
|
|
|
|
65300000
|
unkown image
|
page readonly
|
|
|
|
58FC000
|
stack
|
page read and write
|
|
|
|
6D53000
|
unkown
|
page read and write
|
|
|
|
79A0000
|
unkown
|
page read and write
|
|
|
|
4160000
|
heap private
|
page execute and read and write
|
|
|
|
6E848000
|
unkown image
|
page write copy
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
106000
|
unkown
|
page read and write
|
|
|
|
5B56000
|
unkown
|
page read and write
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
7D3F000
|
stack
|
page read and write
|
|
|
|
60000
|
unkown image
|
page readonly
|
|
|
|
440000
|
unkown
|
page read and write
|
|
|
|
4150000
|
unkown
|
page read and write
|
|
|
|
34B0000
|
unkown
|
page read and write
|
|
|
|
2E90000
|
unkown
|
page read and write
|
|
|
|
2D32000
|
heap private
|
page read and write
|
|
|
|
5B56000
|
unkown
|
page read and write
|
|
|
|
5C50000
|
unkown image
|
page read and write
|
|
|
|
8520000
|
unkown
|
page read and write
|
|
|
|
4B2F000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
3360000
|
unkown
|
page read and write
|
|
|
|
7AE1000
|
unkown
|
page read and write
|
|
|
|
6FF0000
|
unkown
|
page read and write
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
69F000
|
stack
|
page read and write
|
|
|
|
5AF000
|
stack
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
6E74000
|
unkown image
|
page readonly
|
|
|
|
477000
|
heap default
|
page read and write
|
|
|
|
2F80000
|
unkown
|
page read and write
|
|
|
|
100000
|
unkown
|
page read and write
|
|
|
|
54F7000
|
unkown
|
page read and write
|
|
|
|
7ACD000
|
unkown
|
page read and write
|
|
|
|
57E0000
|
unkown
|
page read and write
|
|
|
|
503F000
|
unkown
|
page read and write
|
|
|
|
54F0000
|
unkown
|
page read and write
|
|
|
|
5900000
|
unkown
|
page read and write
|
|
|
|
26D000
|
unkown
|
page read and write
|
|
|
|
6F20000
|
unkown
|
page read and write
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
5051000
|
unkown
|
page read and write
|
|
|
|
3FAD000
|
unkown
|
page read and write
|
|
|
|
4FF0000
|
unkown
|
page read and write
|
|
|
|
72B0000
|
unkown
|
page read and write
|
|
|
|
8121000
|
unkown
|
page read and write
|
|
|
|
423000
|
unkown
|
page read and write
|
|
|
|
5505000
|
heap private
|
page read and write
|
|
|
|
1CC6000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
2F60000
|
unkown
|
page read and write
|
|
|
|
6E83B000
|
unkown image
|
page read and write
|
|
|
|
5760000
|
unkown
|
page read and write
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
3529000
|
unkown
|
page read and write
|
|
|
|
70C6000
|
unkown
|
page read and write
|
|
|
|
4FEE000
|
stack
|
page read and write
|
|
|
|
413000
|
unkown
|
page read and write
|
|
|
|
20F7000
|
unkown image
|
page readonly
|
|
|
|
7996000
|
unkown
|
page read and write
|
|
|
|
6E70000
|
unkown image
|
page readonly
|
|
|
|
5B39000
|
unkown
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
5940000
|
unkown
|
page read and write
|
|
|
|
72A2000
|
unkown
|
page read and write
|
|
|
|
5B9C000
|
unkown
|
page read and write
|
|
|
|
5037000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
3180000
|
unkown
|
page read and write
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
97B000
|
heap private
|
page read and write
|
|
|
|
D0000
|
unkown
|
page read and write
|
|
|
|
6F40000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
30C0000
|
unkown
|
page read and write
|
|
|
|
450000
|
unkown
|
page read and write
|
|
|
|
7FA8000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
148000
|
unkown
|
page read and write
|
|
|
|
24A5000
|
heap private
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
266000
|
unkown
|
page read and write
|
|
|
|
110000
|
unkown image
|
page readonly
|
|
|
|
350E000
|
unkown
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
7ABC000
|
unkown
|
page read and write
|
|
|
|
970000
|
heap private
|
page read and write
|
|
|
|
550E000
|
heap private
|
page read and write
|
|
|
|
7005000
|
unkown
|
page read and write
|
|
|
|
2124000
|
unkown
|
page read and write
|
|
|
|
3358000
|
unkown
|
page read and write
|
|
|
|
6D53000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
5500000
|
heap private
|
page read and write
|
|
|
|
3525000
|
unkown
|
page read and write
|
|
|
|
5684000
|
stack
|
page read and write
|
|
|
|
50F0000
|
unkown image
|
page readonly
|
|
|
|
2130000
|
unkown
|
page read and write
|
|
|
|
54FC000
|
unkown
|
page read and write
|
|
|
|
105000
|
heap private
|
page read and write
|
|
|
|
57A4000
|
unkown
|
page read and write
|
|
|
|
45EE000
|
stack
|
page read and write
|
|
|
|
57C0000
|
unkown
|
page read and write
|
|
|
|
56DB000
|
unkown
|
page read and write
|
|
|
|
3388000
|
unkown
|
page read and write
|
|
|
|
5B9C000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
6D50000
|
unkown
|
page read and write
|
|
|
|
470000
|
heap default
|
page read and write
|
|
|
|
5058000
|
unkown
|
page read and write
|
|
|
|
434000
|
heap private
|
page read and write
|
|
|
|
E0000
|
unkown
|
page read and write
|
|
|
|
56AD000
|
unkown
|
page read and write
|
|
|
|
6E90000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown image
|
page readonly
|
|
|
|
7FDC000
|
unkown
|
page read and write
|
|
|
|
5051000
|
unkown
|
page read and write
|
|
|
|
6F22000
|
unkown
|
page read and write
|
|
|
|
57D0000
|
unkown
|
page read and write
|
|
|
|
1DAE000
|
unkown
|
page read and write
|
|
|
|
2110000
|
unkown
|
page read and write
|
|
|
|
7A10000
|
unkown
|
page read and write
|
|
|
|
460000
|
heap default
|
page read and write
|
|
|
|
6E36000
|
unkown
|
page read and write
|
|
|
|
31D5000
|
unkown
|
page read and write
|
|
|
|
79F0000
|
unkown
|
page read and write
|
|
|
|
5BB4000
|
unkown
|
page read and write
|
|
|
|
44A2000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown image
|
page readonly
|
|
|
|
44D000
|
heap default
|
page read and write
|
|
|
|
7090000
|
unkown
|
page read and write
|
|
|
|
56D0000
|
unkown
|
page read and write
|
|
|
|
5050000
|
unkown
|
page read and write
|
|
|
|
72A6000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7990000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5580000
|
unkown
|
page read and write
|
|
|
|
3520000
|
unkown
|
page read and write
|
|
|
|
7042000
|
unkown
|
page read and write
|
|
|
|
44B8000
|
unkown
|
page read and write
|
|
|
|
7ABC000
|
unkown
|
page read and write
|
|
|
|
7000000
|
heap private
|
page read and write
|
|
|
|
5055000
|
unkown
|
page read and write
|
|
|
|
217B000
|
heap private
|
page read and write
|
|
|
|
3370000
|
unkown
|
page read and write
|
|
|
|
6FD0000
|
unkown
|
page read and write
|
|
|
|
7F80000
|
unkown
|
page read and write
|
|
|
|
317000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
7FDC000
|
unkown
|
page read and write
|
|
|
|
6EA0000
|
heap private
|
page read and write
|
|
|
|
5A6A000
|
unkown
|
page read and write
|
|
|
|
6E84F000
|
unkown image
|
page readonly
|
|
|
|
5A9A000
|
unkown
|
page read and write
|
|
|
|
467000
|
heap default
|
page read and write
|
|
|
|
8520000
|
unkown
|
page read and write
|
|
|
|
4DE0000
|
unkown
|
page read and write
|
|
|
|
41E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
6F30000
|
unkown
|
page read and write
|
|
|
|
50000
|
unkown image
|
page readonly
|
|
|
|
3E96000
|
unkown
|
page read and write
|
|
|
|
5A75000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
420000
|
unkown
|
page read and write
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
30AF000
|
stack
|
page read and write
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
413E000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7450000
|
unkown
|
page read and write
|
|
|
|
7FDC000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
4710000
|
unkown image
|
page readonly
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
4C90000
|
unkown
|
page read and write
|
|
|
|
72A0000
|
unkown
|
page read and write
|
|
|
|
79B0000
|
unkown
|
page read and write
|
|
|
|
7ACD000
|
unkown
|
page read and write
|
|
|
|
2103000
|
unkown
|
page read and write
|
|
|
|
1DA0000
|
unkown
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
3320000
|
unkown
|
page read and write
|
|
|
|
6F0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
49D000
|
heap default
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
3500000
|
unkown
|
page read and write
|
|
|
|
57C8000
|
unkown
|
page read and write
|
|
|
|
30B0000
|
unkown
|
page read and write
|
|
|
|
D0000
|
unkown image
|
page readonly
|
|
|
|
365E000
|
stack
|
page read and write
|
|
|
|
50F000
|
heap default
|
page read and write
|
|
|
|
2010000
|
unkown image
|
page readonly
|
|
|
|
1DBE000
|
unkown
|
page read and write
|
|
|
|
3518000
|
unkown
|
page read and write
|
|
|
|
7190000
|
heap private
|
page read and write
|
|
|
|
B00000
|
heap private
|
page read and write
|
|
|
|
8110000
|
heap private
|
page read and write
|
|
|
|
6D10000
|
unkown image
|
page readonly
|
|
|
|
3FD8000
|
unkown
|
page read and write
|
|
|
|
3510000
|
unkown
|
page read and write
|
|
|
|
2D6000
|
unkown
|
page read and write
|
|
|
|
56A0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
5B5F000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
593E000
|
unkown
|
page read and write
|
|
|
|
6F40000
|
unkown
|
page read and write
|
|
|
|
6DE8000
|
unkown
|
page read and write
|
|
|
|
34E0000
|
unkown
|
page read and write
|
|
|
|
20F0000
|
unkown image
|
page readonly
|
|
|
|
2499000
|
unkown
|
page read and write
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
6D52000
|
unkown
|
page read and write
|
|
|
|
8520000
|
unkown
|
page read and write
|
|
|
|
78E6000
|
unkown
|
page read and write
|
|
|
|
34D0000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
417000
|
heap default
|
page read and write
|
|
|
|
793F000
|
heap private
|
page read and write
|
|
|
|
503D000
|
unkown
|
page read and write
|
|
|
|
6DF4000
|
unkown
|
page read and write
|
|
|
|
6F20000
|
unkown
|
page read and write
|
|
|
|
8140000
|
unkown
|
page read and write
|
|
|
|
4E4000
|
heap default
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
7909000
|
heap private
|
page read and write
|
|
|
|
5930000
|
unkown
|
page read and write
|
|
|
|
8150000
|
unkown
|
page read and write
|
|
|
|
6D60000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
56C0000
|
unkown
|
page read and write
|
|
|
|
6E7F1000
|
unkown image
|
page readonly
|
|
|
|
3160000
|
unkown
|
page read and write
|
|
|
|
2494000
|
unkown
|
page read and write
|
|
|
|
8192000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
6FF0000
|
unkown
|
page read and write
|
|
|
|
4EE0000
|
unkown
|
page read and write
|
|
|
|
5B21000
|
unkown
|
page read and write
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
2F77000
|
heap private
|
page read and write
|
|
|
|
5AA9000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
5A4A000
|
stack
|
page read and write
|
|
|
|
2490000
|
unkown
|
page read and write
|
|
|
|
85E0000
|
unkown
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
7FEFF1A0000
|
unkown
|
page execute read
|
|
|
|
81E0000
|
unkown
|
page read and write
|
|
|
|
36E000
|
stack
|
page read and write
|
|
|
|
6E84C000
|
unkown image
|
page read and write
|
|
|
|
5695000
|
unkown
|
page read and write
|
|
|
|
3522000
|
unkown
|
page read and write
|
|
|
|
5790000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
73C0000
|
unkown
|
page read and write
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
7290000
|
unkown
|
page read and write
|
|
|
|
2F10000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
4B20000
|
unkown
|
page read and write
|
|
|
|
2D10000
|
heap private
|
page read and write
|
|
|
|
3330000
|
unkown
|
page read and write
|
|
|
|
4B40000
|
stack
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
7FDC000
|
unkown
|
page read and write
|
|
|
|
5067000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
heap private
|
page read and write
|
|
|
|
31D3000
|
unkown
|
page read and write
|
|
|
|
2140000
|
heap private
|
page read and write
|
|
|
|
6D20000
|
unkown image
|
page read and write
|
|
|
|
2F70000
|
heap private
|
page read and write
|
|
|
|
24A0000
|
heap private
|
page read and write
|
|
|
|
6E3A000
|
unkown
|
page read and write
|
|
|
|
8141000
|
unkown
|
page read and write
|
|
|
|
5058000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
6D40000
|
unkown image
|
page read and write
|
|
|
|
130000
|
unkown
|
page read and write
|
|
|
|
34C0000
|
unkown
|
page read and write
|
|
|
|
7080000
|
heap private
|
page read and write
|
|
|
|
5B39000
|
unkown
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
2F90000
|
unkown
|
page read and write
|
|
|
|
120000
|
unkown
|
page read and write
|
|
|
|
1C90000
|
unkown
|
page read and write
|
|
|
|
4320000
|
unkown
|
page read and write
|
|
|
|
2EB0000
|
unkown
|
page read and write
|
|
|
|
6E521000
|
unkown image
|
page execute read
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7F60000
|
unkown
|
page read and write
|
|
|
|
6D50000
|
unkown
|
page read and write
|
|
|
|
8555000
|
unkown
|
page read and write
|
|
|
|
5B21000
|
unkown
|
page read and write
|
|
|
|
5920000
|
unkown
|
page read and write
|
|
|
|
7AE1000
|
unkown
|
page read and write
|
|
|
|
6E844000
|
unkown image
|
page read and write
|
|
There are 508 hidden memdumps, click here to show them.