Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Purchase Order No. XIV21623..exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\Purchase Order No. XIV21623..exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Purchase Order No. XIV21623..exe
|
"C:\Users\user\Desktop\Purchase Order No. XIV21623..exe"
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
|
 |
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
|
unknown
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
13189000
|
unkown
|
page read and write
|
|
|
|
1240000
|
unkown
|
page read and write
|
|
|
|
2A359340000
|
unkown image
|
page readonly
|
|
|
|
2FB4000
|
unkown
|
page read and write
|
|
|
|
2A3594FB000
|
unkown
|
page read and write
|
|
|
|
F2660FE000
|
unkown
|
page read and write
|
|
|
|
2A359491000
|
unkown
|
page read and write
|
|
|
|
7FF5A0993000
|
unkown image
|
page readonly
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
1B8E0000
|
unkown
|
page read and write
|
|
|
|
7FFA1D81D000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5A0B70000
|
unkown image
|
page readonly
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3E0000
|
unkown image
|
page readonly
|
|
|
|
1240000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
2DEF000
|
unkown
|
page read and write
|
|
|
|
2DDA000
|
unkown
|
page read and write
|
|
|
|
7F102000
|
unkown image
|
page readonly
|
|
|
|
2A359D02000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
1B5D1000
|
unkown
|
page read and write
|
|
|
|
322E000
|
unkown
|
page read and write
|
|
|
|
7FF5A074F000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0BCD000
|
unkown image
|
page readonly
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
7FFA1D83B000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5A0BEA000
|
unkown image
|
page readonly
|
|
|
|
7FF5A098C000
|
unkown image
|
page readonly
|
|
|
|
E60000
|
heap private
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
1260000
|
unkown
|
page read and write
|
|
|
|
2A35943D000
|
unkown
|
page read and write
|
|
|
|
2A359F01000
|
unkown
|
page read and write
|
|
|
|
2A35EC21000
|
unkown
|
page read and write
|
|
|
|
1B790000
|
unkown
|
page read and write
|
|
|
|
2B82000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
2E15000
|
unkown
|
page read and write
|
|
|
|
2FE9000
|
unkown
|
page read and write
|
|
|
|
2A35EC4A000
|
unkown
|
page read and write
|
|
|
|
7FF5A0827000
|
unkown image
|
page readonly
|
|
|
|
2A3592F0000
|
unkown image
|
page read and write
|
|
|
|
1B5CD000
|
stack
|
page read and write
|
|
|
|
7FFA1D940000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5A0456000
|
unkown image
|
page readonly
|
|
|
|
7FFA1D8C0000
|
unkown
|
page read and write
|
|
|
|
2DE9000
|
unkown
|
page read and write
|
|
|
|
1B5D0000
|
unkown
|
page read and write
|
|
|
|
E84000
|
unkown
|
page read and write
|
|
|
|
7FF5A09C1000
|
unkown image
|
page readonly
|
|
|
|
323F000
|
unkown
|
page read and write
|
|
|
|
335C000
|
unkown
|
page read and write
|
|
|
|
1B860000
|
unkown
|
page read and write
|
|
|
|
7FF5A0A58000
|
unkown image
|
page readonly
|
|
|
|
3187000
|
unkown
|
page read and write
|
|
|
|
2A35EAF0000
|
unkown
|
page read and write
|
|
|
|
2B60000
|
unkown
|
page read and write
|
|
|
|
2E0F000
|
unkown
|
page read and write
|
|
|
|
1B7CE000
|
stack
|
page read and write
|
|
|
|
CF0000
|
unkown
|
page read and write
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0C7D000
|
unkown image
|
page readonly
|
|
|
|
2A359413000
|
unkown
|
page read and write
|
|
|
|
F26577E000
|
unkown
|
page read and write
|
|
|
|
7FF5A09C3000
|
unkown image
|
page readonly
|
|
|
|
2A35948B000
|
unkown
|
page read and write
|
|
|
|
2A35E9F0000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown image
|
page readonly
|
|
|
|
2A35A801000
|
unkown
|
page read and write
|
|
|
|
1B730000
|
unkown
|
page read and write
|
|
|
|
ED0000
|
unkown image
|
page read and write
|
|
|
|
2A359310000
|
unkown image
|
page readonly
|
|
|
|
E70000
|
unkown
|
page read and write
|
|
|
|
7FFA1D824000
|
unkown
|
page read and write
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
7F110000
|
unkown image
|
page readonly
|
|
|
|
2A359456000
|
unkown
|
page read and write
|
|
|
|
1B5D1000
|
unkown
|
page read and write
|
|
|
|
2FC5000
|
unkown
|
page read and write
|
|
|
|
2A359429000
|
unkown
|
page read and write
|
|
|
|
3263000
|
unkown
|
page read and write
|
|
|
|
1600000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF3D0000
|
unkown image
|
page readonly
|
|
|
|
7F110000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF3D2000
|
unkown image
|
page readonly
|
|
|
|
1B820000
|
unkown
|
page read and write
|
|
|
|
1B8A0000
|
unkown
|
page read and write
|
|
|
|
324E000
|
unkown
|
page read and write
|
|
|
|
2DD8000
|
unkown
|
page read and write
|
|
|
|
2A359502000
|
unkown
|
page read and write
|
|
|
|
F26607E000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C9F000
|
unkown image
|
page readonly
|
|
|
|
2FB2000
|
unkown
|
page read and write
|
|
|
|
1B750000
|
unkown
|
page read and write
|
|
|
|
2FC9000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C8E000
|
unkown image
|
page readonly
|
|
|
|
3272000
|
unkown
|
page read and write
|
|
|
|
2A359A50000
|
unkown image
|
page readonly
|
|
|
|
2A35A820000
|
unkown
|
page read and write
|
|
|
|
1B7C0000
|
unkown
|
page read and write
|
|
|
|
1B760000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C70000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0871000
|
unkown image
|
page readonly
|
|
|
|
2A359C15000
|
unkown
|
page read and write
|
|
|
|
D81000
|
heap default
|
page read and write
|
|
|
|
2A35EC02000
|
unkown
|
page read and write
|
|
|
|
EF0000
|
unkown
|
page read and write
|
|
|
|
E54000
|
unkown
|
page read and write
|
|
|
|
EF0000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3C0000
|
unkown image
|
page readonly
|
|
|
|
7FFA1D9D0000
|
unkown
|
page read and write
|
|
|
|
7FFA1D932000
|
unkown
|
page read and write
|
|
|
|
2FA3000
|
unkown
|
page read and write
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
1B7D0000
|
unkown
|
page read and write
|
|
|
|
810000
|
unkown image
|
page readonly
|
|
|
|
2A359BE0000
|
unkown image
|
page readonly
|
|
|
|
2DFC000
|
unkown
|
page read and write
|
|
|
|
336D000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
1B770000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown image
|
page readonly
|
|
|
|
3254000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C58000
|
unkown image
|
page readonly
|
|
|
|
319A000
|
unkown
|
page read and write
|
|
|
|
2A359330000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0C9F000
|
unkown image
|
page readonly
|
|
|
|
850000
|
unkown image
|
page readonly
|
|
|
|
1B7B0000
|
unkown
|
page read and write
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
2FED000
|
unkown
|
page read and write
|
|
|
|
2A35E820000
|
unkown
|
page read and write
|
|
|
|
324C000
|
unkown
|
page read and write
|
|
|
|
2A35949D000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
9B0000
|
unkown image
|
page readonly
|
|
|
|
2A359300000
|
heap private
|
page read and write
|
|
|
|
2A35EC3D000
|
unkown
|
page read and write
|
|
|
|
CD0000
|
unkown
|
page read and write
|
|
|
|
2FB8000
|
unkown
|
page read and write
|
|
|
|
7FF5A09A7000
|
unkown image
|
page readonly
|
|
|
|
2A35EC00000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C8B000
|
unkown image
|
page readonly
|
|
|
|
1B8CE000
|
stack
|
page read and write
|
|
|
|
7FF5A099D000
|
unkown image
|
page readonly
|
|
|
|
F2656FB000
|
unkown
|
page read and write
|
|
|
|
1B8DE000
|
unkown
|
page read and write
|
|
|
|
F265CFF000
|
unkown
|
page read and write
|
|
|
|
2A35EC19000
|
unkown
|
page read and write
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
2A3594B4000
|
unkown
|
page read and write
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
E70000
|
unkown
|
page read and write
|
|
|
|
7DF5B6592000
|
unkown image
|
page readonly
|
|
|
|
1480000
|
unkown image
|
page readonly
|
|
|
|
3161000
|
unkown
|
page read and write
|
|
|
|
7FF5A0BB8000
|
unkown image
|
page readonly
|
|
|
|
880000
|
unkown image
|
page readonly
|
|
|
|
3174000
|
unkown
|
page read and write
|
|
|
|
2DDF000
|
unkown
|
page read and write
|
|
|
|
7FF5A0BA7000
|
unkown image
|
page readonly
|
|
|
|
2B20000
|
unkown
|
page read and write
|
|
|
|
1B710000
|
unkown
|
page read and write
|
|
|
|
3360000
|
unkown
|
page read and write
|
|
|
|
1230000
|
unkown
|
page read and write
|
|
|
|
7FF5A0524000
|
unkown image
|
page readonly
|
|
|
|
2A35EC2D000
|
unkown
|
page read and write
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
7DF5B6590000
|
unkown image
|
page readonly
|
|
|
|
1B18D000
|
stack
|
page read and write
|
|
|
|
F265AF7000
|
unkown
|
page read and write
|
|
|
|
2A35EC1B000
|
unkown
|
page read and write
|
|
|
|
7FF5A086C000
|
unkown image
|
page readonly
|
|
|
|
1AD50000
|
unkown
|
page read and write
|
|
|
|
12D23000
|
unkown
|
page read and write
|
|
|
|
2B50000
|
unkown
|
page read and write
|
|
|
|
7FFA1D820000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown image
|
page readonly
|
|
|
|
7DF5B65A2000
|
unkown image
|
page readonly
|
|
|
|
860000
|
unkown image
|
page read and write
|
|
|
|
7F102000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0B82000
|
unkown image
|
page readonly
|
|
|
|
2E00000
|
unkown
|
page read and write
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
3154000
|
unkown
|
page read and write
|
|
|
|
2A3598D0000
|
unkown image
|
page readonly
|
|
|
|
318C000
|
unkown
|
page read and write
|
|
|
|
3351000
|
unkown
|
page read and write
|
|
|
|
D19000
|
heap default
|
page read and write
|
|
|
|
2A35A3E0000
|
unkown
|
page read and write
|
|
|
|
7FFA1D830000
|
unkown
|
page read and write
|
|
|
|
7F110000
|
unkown image
|
page readonly
|
|
|
|
2A359472000
|
unkown
|
page read and write
|
|
|
|
2A359400000
|
unkown
|
page read and write
|
|
|
|
2FE7000
|
unkown
|
page read and write
|
|
|
|
2A35EC64000
|
unkown
|
page read and write
|
|
|
|
2D00000
|
unkown
|
page read and write
|
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
1B840000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown image
|
page readonly
|
|
|
|
E90000
|
unkown
|
page read and write
|
|
|
|
1270000
|
heap private
|
page read and write
|
|
|
|
F265FFF000
|
unkown
|
page read and write
|
|
|
|
3165000
|
unkown
|
page read and write
|
|
|
|
120F000
|
stack
|
page read and write
|
|
|
|
7F102000
|
unkown image
|
page readonly
|
|
|
|
3185000
|
unkown
|
page read and write
|
|
|
|
335A000
|
unkown
|
page read and write
|
|
|
|
7FF5A0BAC000
|
unkown image
|
page readonly
|
|
|
|
1B6D0000
|
unkown
|
page read and write
|
|
|
|
E70000
|
unkown
|
page read and write
|
|
|
|
7FF5A0BD9000
|
unkown image
|
page readonly
|
|
|
|
1B5D1000
|
unkown
|
page read and write
|
|
|
|
1B7E0000
|
unkown
|
page read and write
|
|
|
|
1260000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C5F000
|
unkown image
|
page readonly
|
|
|
|
1B5EC000
|
unkown
|
page read and write
|
|
|
|
7FF5A0BE3000
|
unkown image
|
page readonly
|
|
|
|
2A35E830000
|
unkown
|
page read and write
|
|
|
|
2A3594AD000
|
unkown
|
page read and write
|
|
|
|
7FF5A051A000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0A53000
|
unkown image
|
page readonly
|
|
|
|
2A35948D000
|
unkown
|
page read and write
|
|
|
|
3265000
|
unkown
|
page read and write
|
|
|
|
323B000
|
unkown
|
page read and write
|
|
|
|
810000
|
unkown image
|
page readonly
|
|
|
|
2FA5000
|
unkown
|
page read and write
|
|
|
|
2A35E9C0000
|
unkown
|
page read and write
|
|
|
|
2A35EB00000
|
unkown
|
page read and write
|
|
|
|
D4B000
|
heap default
|
page read and write
|
|
|
|
2B50000
|
unkown
|
page read and write
|
|
|
|
2A359A60000
|
unkown image
|
page readonly
|
|
|
|
1B740000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B74000
|
unkown image
|
page readonly
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
1B720000
|
unkown
|
page read and write
|
|
|
|
3371000
|
unkown
|
page read and write
|
|
|
|
2E13000
|
unkown
|
page read and write
|
|
|
|
2DDC000
|
unkown
|
page read and write
|
|
|
|
2A35EC1D000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C9D000
|
unkown image
|
page readonly
|
|
|
|
7FFA1D9C0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C9B000
|
unkown image
|
page readonly
|
|
|
|
2A359BC0000
|
unkown image
|
page readonly
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
7DF5B65A0000
|
unkown image
|
page readonly
|
|
|
|
880000
|
unkown image
|
page readonly
|
|
|
|
2A359C02000
|
unkown
|
page read and write
|
|
|
|
7FF5A0991000
|
unkown image
|
page readonly
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
2DF1000
|
unkown
|
page read and write
|
|
|
|
2A359360000
|
heap default
|
page read and write
|
|
|
|
7FF5A0B8C000
|
unkown image
|
page readonly
|
|
|
|
7FFA1D82D000
|
unkown
|
page execute and read and write
|
|
|
|
7FFA1D814000
|
unkown
|
page read and write
|
|
|
|
E70000
|
unkown image
|
page read and write
|
|
|
|
7FF5A0A3D000
|
unkown image
|
page readonly
|
|
|
|
2A35A300000
|
unkown image
|
page read and write
|
|
|
|
7FFA1D86C000
|
unkown
|
page execute and read and write
|
|
|
|
1B8D0000
|
unkown
|
page read and write
|
|
|
|
2A359370000
|
unkown image
|
page readonly
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0820000
|
unkown image
|
page readonly
|
|
|
|
1B7A0000
|
unkown
|
page read and write
|
|
|
|
2B20000
|
unkown
|
page read and write
|
|
|
|
2E0D000
|
unkown
|
page read and write
|
|
|
|
335E000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
1B830000
|
unkown
|
page read and write
|
|
|
|
2A359390000
|
unkown
|
page read and write
|
|
|
|
2DFE000
|
unkown
|
page read and write
|
|
|
|
2B30000
|
unkown
|
page read and write
|
|
|
|
812000
|
unkown image
|
page readonly
|
|
|
|
1250000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
2A35EAD0000
|
unkown
|
page read and write
|
|
|
|
2A35EC57000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page read and write
|
|
|
|
EB2000
|
unkown
|
page read and write
|
|
|
|
E20000
|
unkown
|
page read and write
|
|
|
|
334D000
|
unkown
|
page read and write
|
|
|
|
3228000
|
unkown
|
page read and write
|
|
|
|
12D27000
|
unkown
|
page read and write
|
|
|
|
1B780000
|
unkown
|
page read and write
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
2FB6000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
EF0000
|
unkown
|
page read and write
|
|
|
|
100E000
|
stack
|
page read and write
|
|
|
|
3230000
|
unkown
|
page read and write
|
|
|
|
2DCC000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C66000
|
unkown image
|
page readonly
|
|
|
|
2B30000
|
unkown
|
page read and write
|
|
|
|
E50000
|
unkown
|
page read and write
|
|
|
|
7FF5A0A6D000
|
unkown image
|
page readonly
|
|
|
|
2D10000
|
heap private
|
page execute and read and write
|
|
|
|
7FFA1D935000
|
unkown
|
page read and write
|
|
|
|
2A359B90000
|
unkown image
|
page readonly
|
|
|
|
E80000
|
unkown
|
page read and write
|
|
|
|
2A35E9E0000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown image
|
page readonly
|
|
|
|
EE0000
|
unkown
|
page read and write
|
|
|
|
2E02000
|
unkown
|
page read and write
|
|
|
|
2A359BF3000
|
unkown
|
page read and write
|
|
|
|
2A359BF0000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C6B000
|
unkown image
|
page readonly
|
|
|
|
2A359310000
|
unkown image
|
page readonly
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
2DEB000
|
unkown
|
page read and write
|
|
|
|
1275000
|
heap private
|
page read and write
|
|
|
|
2D21000
|
unkown
|
page read and write
|
|
|
|
2A35E8B0000
|
unkown
|
page read and write
|
|
|
|
D50000
|
heap default
|
page read and write
|
|
|
|
F265DFE000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3D2000
|
unkown image
|
page readonly
|
|
|
|
2E0B000
|
unkown
|
page read and write
|
|
|
|
2A359BB0000
|
unkown image
|
page readonly
|
|
|
|
1B6E0000
|
unkown
|
page read and write
|
|
|
|
D4D000
|
heap default
|
page read and write
|
|
|
|
7FF5A085B000
|
unkown image
|
page readonly
|
|
|
|
2A3593A0000
|
unkown image
|
page read and write
|
|
|
|
1B870000
|
unkown
|
page read and write
|
|
|
|
2FC3000
|
unkown
|
page read and write
|
|
|
|
7DF4B4460000
|
unkown image
|
page readonly
|
|
|
|
7FF5A081A000
|
unkown image
|
page readonly
|
|
|
|
2DC9000
|
unkown
|
page read and write
|
|
|
|
EA0000
|
unkown
|
page read and write
|
|
|
|
1B800000
|
unkown
|
page read and write
|
|
|
|
7DF5B6592000
|
unkown image
|
page readonly
|
|
|
|
2FDE000
|
unkown
|
page read and write
|
|
|
|
334B000
|
unkown
|
page read and write
|
|
|
|
3226000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown image
|
page readonly
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
2A35E8A0000
|
unkown
|
page read and write
|
|
|
|
1B700000
|
unkown
|
page read and write
|
|
|
|
1230000
|
unkown
|
page read and write
|
|
|
|
F265BFB000
|
unkown
|
page read and write
|
|
|
|
F05000
|
heap private
|
page read and write
|
|
|
|
2A359513000
|
unkown
|
page read and write
|
|
|
|
2FD6000
|
unkown
|
page read and write
|
|
|
|
1B9CE000
|
stack
|
page read and write
|
|
|
|
810000
|
unkown image
|
page readonly
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
3243000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown image
|
page readonly
|
|
|
|
D79000
|
heap default
|
page read and write
|
|
|
|
2B70000
|
heap private
|
page read and write
|
|
|
|
2FE0000
|
unkown
|
page read and write
|
|
|
|
F265F7E000
|
unkown
|
page read and write
|
|
|
|
3172000
|
unkown
|
page read and write
|
|
|
|
7FFA1D930000
|
unkown
|
page read and write
|
|
|
|
E70000
|
unkown
|
page read and write
|
|
|
|
7F110000
|
unkown image
|
page readonly
|
|
|
|
7FF4DD1E0000
|
unkown
|
page execute and read and write
|
|
|
|
2A359475000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B97000
|
unkown image
|
page readonly
|
|
|
|
1B850000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
2B60000
|
unkown
|
page read and write
|
|
|
|
336F000
|
unkown
|
page read and write
|
|
|
|
3268000
|
unkown
|
page read and write
|
|
|
|
1B8B0000
|
unkown
|
page read and write
|
|
|
|
7F102000
|
unkown image
|
page readonly
|
|
|
|
2A3596D0000
|
unkown image
|
page readonly
|
|
|
|
2B1E000
|
stack
|
page read and write
|
|
|
|
1E0000
|
unkown image
|
page readonly
|
|
|
|
7DF5B65B0000
|
unkown image
|
page readonly
|
|
|
|
1B8C0000
|
unkown
|
page read and write
|
|
|
|
2DC7000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
3152000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown image
|
page readonly
|
|
|
|
315F000
|
unkown
|
page read and write
|
|
|
|
2D00000
|
unkown
|
page read and write
|
|
|
|
2DED000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
3156000
|
unkown
|
page read and write
|
|
|
|
2A359BD0000
|
unkown image
|
page readonly
|
|
|
|
1B890000
|
unkown
|
page read and write
|
|
|
|
2FC7000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3C2000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0B60000
|
unkown image
|
page readonly
|
|
|
|
80000
|
unkown image
|
page readonly
|
|
|
|
7DF5B65A0000
|
unkown image
|
page readonly
|
|
|
|
2A35E8C0000
|
unkown
|
page read and write
|
|
|
|
3176000
|
unkown
|
page read and write
|
|
|
|
EF0000
|
unkown
|
page read and write
|
|
|
|
1B6F0000
|
unkown
|
page read and write
|
|
|
|
ED0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B93000
|
unkown image
|
page readonly
|
|
|
|
12D21000
|
unkown
|
page read and write
|
|
|
|
1250000
|
unkown
|
page read and write
|
|
|
|
7DF5B65A2000
|
unkown image
|
page readonly
|
|
|
|
1BACE000
|
stack
|
page read and write
|
|
|
|
2FA1000
|
unkown
|
page read and write
|
|
|
|
1B880000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3E0000
|
unkown image
|
page readonly
|
|
|
|
2FDA000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
2A35EAE0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0A6F000
|
unkown image
|
page readonly
|
|
|
|
F265EFB000
|
unkown
|
page read and write
|
|
|
|
D88000
|
heap default
|
page read and write
|
|
|
|
7FFA1D83D000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5A0983000
|
unkown image
|
page readonly
|
|
|
|
1230000
|
unkown
|
page read and write
|
|
|
|
12D89000
|
unkown
|
page read and write
|
|
|
|
2FBB000
|
unkown
|
page read and write
|
|
|
|
7F102000
|
unkown image
|
page readonly
|
|
|
|
325F000
|
unkown
|
page read and write
|
|
|
|
EF0000
|
unkown
|
page read and write
|
|
|
|
2A359D00000
|
unkown
|
page read and write
|
|
|
|
D77000
|
heap default
|
page read and write
|
|
|
|
EE0000
|
unkown
|
page read and write
|
|
|
|
322A000
|
unkown
|
page read and write
|
|
|
|
2A359BA0000
|
unkown image
|
page readonly
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
D7B000
|
heap default
|
page read and write
|
|
|
|
110E000
|
stack
|
page read and write
|
|
|
|
2E11000
|
unkown
|
page read and write
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
3375000
|
unkown
|
page read and write
|
|
|
|
7FFA1D8D0000
|
unkown
|
page execute and read and write
|
|
|
|
2A35EC67000
|
unkown
|
page read and write
|
|
|
|
7FF5A0856000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
98B000
|
unkown
|
page read and write
|
|
|
|
7FF4DD290000
|
unkown image
|
page readonly
|
|
|
|
D10000
|
heap default
|
page read and write
|
|
|
|
7FF5DF3D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0A39000
|
unkown image
|
page readonly
|
|
|
|
2A35EC4E000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
D3B000
|
heap default
|
page read and write
|
|
|
|
334F000
|
unkown
|
page read and write
|
|
|
|
ED0000
|
unkown
|
page read and write
|
|
|
|
F2657FE000
|
unkown
|
page read and write
|
|
|
|
3239000
|
unkown
|
page read and write
|
|
|
|
F00000
|
heap private
|
page read and write
|
|
|
|
ED0000
|
unkown
|
page read and write
|
|
|
|
EC0000
|
heap private
|
page execute and read and write
|
|
|
|
EF0000
|
unkown
|
page read and write
|
|
|
|
2A359477000
|
unkown
|
page read and write
|
|
|
|
7F110000
|
unkown image
|
page readonly
|
|
|
|
2FCD000
|
unkown
|
page read and write
|
|
|
|
9A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A098A000
|
unkown image
|
page readonly
|
|
|
|
7DF5B65B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF3C0000
|
unkown image
|
page readonly
|
|
|
|
7DF5B6590000
|
unkown image
|
page readonly
|
|
|
|
2A359D13000
|
unkown
|
page read and write
|
|
|
|
E40000
|
unkown
|
page read and write
|
|
|
|
1B7F0000
|
unkown
|
page read and write
|
|
|
|
812000
|
unkown image
|
page readonly
|
|
|
|
7FF5A092A000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0C05000
|
unkown image
|
page readonly
|
|
|
|
7FF5A09F0000
|
unkown image
|
page readonly
|
|
|
|
323D000
|
unkown
|
page read and write
|
|
|
|
7FFA1D8F6000
|
unkown
|
page execute and read and write
|
|
|
|
1230000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C84000
|
unkown image
|
page readonly
|
|
|
|
2A35946D000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0BD5000
|
unkown image
|
page readonly
|
|
|
|
2DD6000
|
unkown
|
page read and write
|
|
|
|
2FEB000
|
unkown
|
page read and write
|
|
|
|
1B810000
|
unkown
|
page read and write
|
|
|
|
E70000
|
unkown
|
page read and write
|
|
|
|
870000
|
unkown image
|
page readonly
|
|
|
|
2A359C00000
|
unkown
|
page read and write
|
|
|
|
3189000
|
unkown
|
page read and write
|
|
|
|
3373000
|
unkown
|
page read and write
|
|
|
|
3252000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
1280000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF3C2000
|
unkown image
|
page readonly
|
|
|
|
3270000
|
unkown
|
page read and write
|
|
There are 473 hidden memdumps, click here to show them.