Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\msiexec.exe
|
"C:\Users\user\Desktop\msiexec.exe"
|
 |
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7EF5F28000
|
stack
|
page read and write
|
||
|
1FB0B440000
|
heap
|
page read and write
|
||
|
7FF7E891F000
|
unkown
|
page write copy
|
||
|
1FB0B651000
|
heap
|
page read and write
|
||
|
1FB0B651000
|
heap
|
page read and write
|
||
|
1FB0B620000
|
heap
|
page read and write
|
||
|
1FB0B655000
|
heap
|
page read and write
|
||
|
7FF7E891B000
|
unkown
|
page readonly
|
||
|
1FB0D0B0000
|
heap
|
page read and write
|
||
|
1FB0B661000
|
heap
|
page read and write
|
||
|
1FB0B667000
|
heap
|
page read and write
|
||
|
1FB0B665000
|
heap
|
page read and write
|
||
|
1FB0B655000
|
heap
|
page read and write
|
||
|
1FB0B661000
|
heap
|
page read and write
|
||
|
7FF7E8911000
|
unkown
|
page execute read
|
||
|
7EF627E000
|
stack
|
page read and write
|
||
|
7EF62FF000
|
stack
|
page read and write
|
||
|
1FB0EC60000
|
trusted library allocation
|
page read and write
|
||
|
7EF637E000
|
stack
|
page read and write
|
||
|
1FB0B610000
|
heap
|
page read and write
|
||
|
1FB0B655000
|
heap
|
page read and write
|
||
|
1FB0B662000
|
heap
|
page read and write
|
||
|
1FB0B682000
|
heap
|
page read and write
|
||
|
1FB0B61B000
|
heap
|
page read and write
|
||
|
1FB0B651000
|
heap
|
page read and write
|
||
|
1FB0D0B4000
|
heap
|
page read and write
|
||
|
1FB0B648000
|
heap
|
page read and write
|
||
|
1FB0B62B000
|
heap
|
page read and write
|
||
|
1FB0B560000
|
heap
|
page read and write
|
||
|
1FB0B667000
|
heap
|
page read and write
|
||
|
1FB0D430000
|
heap
|
page read and write
|
||
|
1FB0B65D000
|
heap
|
page read and write
|
||
|
7EF5FAE000
|
stack
|
page read and write
|
||
|
1FB0B65C000
|
heap
|
page read and write
|
||
|
7FF7E8922000
|
unkown
|
page readonly
|
||
|
1FB0B645000
|
heap
|
page read and write
|
||
|
7FF7E891F000
|
unkown
|
page read and write
|
||
|
1FB0B661000
|
heap
|
page read and write
|
||
|
1FB0B520000
|
heap
|
page readonly
|
||
|
7FF7E8923000
|
unkown
|
page write copy
|
||
|
7FF7E891B000
|
unkown
|
page readonly
|
||
|
7FF7E8922000
|
unkown
|
page readonly
|
||
|
1FB0B661000
|
heap
|
page read and write
|
||
|
1FB0B530000
|
heap
|
page read and write
|
||
|
1FB0D400000
|
heap
|
page read and write
|
||
|
1FB0B65D000
|
heap
|
page read and write
|
||
|
7FF7E8911000
|
unkown
|
page execute read
|
||
|
7FF7E8910000
|
unkown
|
page readonly
|
||
|
1FB0B65D000
|
heap
|
page read and write
|
||
|
1FB0B615000
|
heap
|
page read and write
|
||
|
1FB0B682000
|
heap
|
page read and write
|
||
|
1FB0B661000
|
heap
|
page read and write
|
||
|
7FF7E8924000
|
unkown
|
page readonly
|
||
|
7FF7E8910000
|
unkown
|
page readonly
|
||
|
1FB0B66C000
|
heap
|
page read and write
|
There are 45 hidden memdumps, click here to show them.