Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
gEP8SOoakR.exe
|
PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\gep8sooakr.exe.log
|
CSV text
|
modified
|
||
\Device\ConDrv
|
ASCII text, with CRLF, LF line terminators
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\gEP8SOoakR.exe
|
"C:\Users\user\Desktop\gEP8SOoakR.exe"
|
||
C:\Users\user\Desktop\gEP8SOoakR.exe
|
C:\Users\user\Desktop\gep8sooakr.exe 1028
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://nlog-project.org/ws/ILogReceiverServer/ProcessLogMessagesResponsep
|
unknown
|
||
https://hooks.slack.com/services/T
|
unknown
|
||
http://nlog-project.org/dummynamespace/
|
unknown
|
||
http://nlog-project.org/ws/ILogReceiverOneWayServer/ProcessLogMessages
|
unknown
|
||
http://schemas.xmlsoap.org/soap/envelope/
|
unknown
|
||
https://nlog-project.org/
|
unknown
|
||
http://nlog-project.org/ws/
|
unknown
|
||
http://nlog-project.org/ws/ILogReceiverServer/ProcessLogMessagesT
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
||
https://www.nuget.org/packages/NLog.Web.AspNetCore
|
unknown
|
||
http://nlog-project.org/ws/3
|
unknown
|
||
https://github.com/j-maly/CommandLineParser
|
unknown
|
||
http://nlog-project.org/ws/5
|
unknown
|
||
http://nlog-project.org/ws/T
|
unknown
|
There are 4 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
s-part-0017.t-0009.t-msedge.net
|
13.107.246.45
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
23B796E0000
|
heap
|
page read and write
|
||
25908863000
|
trusted library allocation
|
page read and write
|
||
7FF848D4D000
|
trusted library allocation
|
page execute and read and write
|
||
23B7B646000
|
heap
|
page read and write
|
||
25922310000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
7FF618641000
|
unkown
|
page execute read
|
||
23B79706000
|
direct allocation
|
page read and write
|
||
25909131000
|
heap
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
7FF618641000
|
unkown
|
page execute read
|
||
25908B70000
|
trusted library allocation
|
page read and write
|
||
7FF848D6B000
|
trusted library allocation
|
page execute and read and write
|
||
259221D0000
|
trusted library allocation
|
page read and write
|
||
23B7BC44000
|
heap
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
259223B0000
|
trusted library allocation
|
page read and write
|
||
25906FF0000
|
trusted library allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
259221F2000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25906CF4000
|
heap
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25906F60000
|
heap
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25906D87000
|
heap
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25907030000
|
heap
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
23B79726000
|
direct allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25906D7E000
|
heap
|
page read and write
|
||
25909840000
|
heap
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25922250000
|
trusted library allocation
|
page read and write
|
||
7FF618640000
|
unkown
|
page readonly
|
||
25907000000
|
trusted library allocation
|
page read and write
|
||
7FF848F40000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25906DD0000
|
heap
|
page read and write
|
||
7FF618664000
|
unkown
|
page readonly
|
||
23B79745000
|
direct allocation
|
page read and write
|
||
23B797DC000
|
heap
|
page read and write
|
||
7FF848F0A000
|
trusted library allocation
|
page read and write
|
||
25908878000
|
trusted library allocation
|
page read and write
|
||
25908879000
|
trusted library allocation
|
page read and write
|
||
25922010000
|
trusted library allocation
|
page read and write
|
||
7FF618663000
|
unkown
|
page write copy
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908877000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
259220E0000
|
trusted library allocation
|
page read and write
|
||
2591B3AC000
|
trusted library allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25922170000
|
trusted library allocation
|
page read and write
|
||
259220E0000
|
trusted library allocation
|
page read and write
|
||
25922110000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
2591A1FE000
|
trusted library allocation
|
page read and write
|
||
25922300000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
259222A1000
|
trusted library allocation
|
page read and write
|
||
25906D04000
|
heap
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
7FF848F20000
|
trusted library allocation
|
page read and write
|
||
25922120000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25922340000
|
trusted library allocation
|
page read and write
|
||
7FF6186E8000
|
unkown
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
259221E0000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
7FF6186FE000
|
unkown
|
page readonly
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
23B7B21A000
|
direct allocation
|
page read and write
|
||
25922020000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
7FF848F08000
|
trusted library allocation
|
page read and write
|
||
25922100000
|
trusted library allocation
|
page read and write
|
||
25906F3A000
|
direct allocation
|
page read and write
|
||
25922270000
|
trusted library allocation
|
page read and write
|
||
7FF848EF0000
|
trusted library allocation
|
page read and write
|
||
23B7972E000
|
direct allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
259220E0000
|
trusted library allocation
|
page read and write
|
||
25908D37000
|
heap
|
page read and write
|
||
25906EFD000
|
direct allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
259221C0000
|
trusted library allocation
|
page read and write
|
||
EA1987E000
|
stack
|
page read and write
|
||
23B79700000
|
direct allocation
|
page read and write
|
||
23B7971C000
|
direct allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
23B79600000
|
heap
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25922120000
|
trusted library allocation
|
page read and write
|
||
25906FB0000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25922210000
|
trusted library allocation
|
page read and write
|
||
25906FB0000
|
trusted library allocation
|
page read and write
|
||
259222B0000
|
trusted library allocation
|
page read and write
|
||
259221B0000
|
trusted library allocation
|
page read and write
|
||
25908BBF000
|
heap
|
page read and write
|
||
259220F0000
|
trusted library allocation
|
page read and write
|
||
25922100000
|
trusted library allocation
|
page read and write
|
||
25906D7E000
|
heap
|
page read and write
|
||
25906CC0000
|
heap
|
page read and write
|
||
259088A0000
|
heap
|
page read and write
|
||
25908890000
|
trusted library allocation
|
page read and write
|
||
259220E0000
|
trusted library allocation
|
page read and write
|
||
259221D0000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
761A3FF000
|
stack
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
25922150000
|
trusted library allocation
|
page read and write
|
||
25922320000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
2590972A000
|
heap
|
page read and write
|
||
25908AC0000
|
trusted library allocation
|
page read and write
|
||
25908890000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
2590982F000
|
heap
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25922160000
|
trusted library allocation
|
page read and write
|
||
25922290000
|
trusted library allocation
|
page read and write
|
||
7FF848DFC000
|
trusted library allocation
|
page execute and read and write
|
||
23B7B8C0000
|
heap
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25922135000
|
trusted library allocation
|
page read and write
|
||
25906D4B000
|
heap
|
page read and write
|
||
25906F2F000
|
direct allocation
|
page read and write
|
||
7FF6186F8000
|
unkown
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25922110000
|
trusted library allocation
|
page read and write
|
||
25922100000
|
trusted library allocation
|
page read and write
|
||
25922220000
|
trusted library allocation
|
page read and write
|
||
7FF848D50000
|
trusted library allocation
|
page read and write
|
||
25922260000
|
trusted library allocation
|
page read and write
|
||
7FF618707000
|
unkown
|
page read and write
|
||
25922180000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908AD3000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25906D76000
|
heap
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
23B7BACC000
|
heap
|
page read and write
|
||
7FF848F00000
|
trusted library allocation
|
page read and write
|
||
259221A0000
|
trusted library allocation
|
page read and write
|
||
23B7B110000
|
heap
|
page read and write
|
||
7FF618663000
|
unkown
|
page write copy
|
||
25922369000
|
trusted library allocation
|
page read and write
|
||
25922390000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25906CC8000
|
heap
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908B70000
|
trusted library allocation
|
page read and write
|
||
25922100000
|
trusted library allocation
|
page read and write
|
||
25922030000
|
trusted library allocation
|
page read and write
|
||
7FF618640000
|
unkown
|
page readonly
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25906D85000
|
heap
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
7FF61870A000
|
unkown
|
page readonly
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
259221C0000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
259220E0000
|
trusted library allocation
|
page read and write
|
||
7FF618664000
|
unkown
|
page readonly
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
23B7BCC3000
|
heap
|
page read and write
|
||
25922000000
|
trusted library allocation
|
page read and write
|
||
7FF848E60000
|
trusted library allocation
|
page execute and read and write
|
||
259220E0000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
259087E0000
|
direct allocation
|
page read and write
|
||
23B7B248000
|
direct allocation
|
page read and write
|
||
7FF6186E6000
|
unkown
|
page readonly
|
||
259098A0000
|
heap
|
page read and write
|
||
25908AC0000
|
trusted library allocation
|
page read and write
|
||
25908B80000
|
trusted library allocation
|
page read and write
|
||
7FF618663000
|
unkown
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
25908AC0000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
259220F0000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908AD3000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25906CF1000
|
heap
|
page read and write
|
||
7FF6186F5000
|
unkown
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
23B797D0000
|
heap
|
page read and write
|
||
23B79732000
|
direct allocation
|
page read and write
|
||
25908890000
|
trusted library allocation
|
page read and write
|
||
2590887E000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
7FF848D44000
|
trusted library allocation
|
page read and write
|
||
25906EFB000
|
direct allocation
|
page read and write
|
||
25908F29000
|
heap
|
page read and write
|
||
25908AC0000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25906EF9000
|
direct allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25908B9E000
|
trusted library allocation
|
page read and write
|
||
7FF6186FE000
|
unkown
|
page readonly
|
||
25922350000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25909923000
|
trusted library allocation
|
page read and write
|
||
25909930000
|
heap
|
page execute and read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
2590887C000
|
trusted library allocation
|
page read and write
|
||
259097EF000
|
heap
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
7FF618663000
|
unkown
|
page read and write
|
||
25908DB1000
|
heap
|
page read and write
|
||
25908AC0000
|
trusted library allocation
|
page read and write
|
||
7FF848D53000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
23B7973A000
|
direct allocation
|
page read and write
|
||
23B79714000
|
direct allocation
|
page read and write
|
||
259220E0000
|
trusted library allocation
|
page read and write
|
||
23B79748000
|
direct allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
259088B0000
|
direct allocation
|
page read and write
|
||
25906D35000
|
heap
|
page read and write
|
||
25922240000
|
trusted library allocation
|
page read and write
|
||
23B7B080000
|
heap
|
page read and write
|
||
7FF6186E8000
|
unkown
|
page read and write
|
||
25922280000
|
trusted library allocation
|
page read and write
|
||
23B7B19D000
|
direct allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908BA0000
|
heap
|
page execute read
|
||
7FF848E00000
|
trusted library allocation
|
page execute and read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
7FF6186E6000
|
unkown
|
page readonly
|
||
259221B0000
|
trusted library allocation
|
page read and write
|
||
259221E0000
|
trusted library allocation
|
page read and write
|
||
23B79790000
|
heap
|
page read and write
|
||
7FF61870A000
|
unkown
|
page readonly
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
EA1927E000
|
stack
|
page read and write
|
||
23B79780000
|
direct allocation
|
page read and write
|
||
25909941000
|
trusted library allocation
|
page read and write
|
||
25908877000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
7FF618640000
|
unkown
|
page readonly
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
7FF61870A000
|
unkown
|
page readonly
|
||
25922150000
|
trusted library allocation
|
page read and write
|
||
25906EE3000
|
direct allocation
|
page read and write
|
||
25907020000
|
heap
|
page read and write
|
||
25922180000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
761A5FF000
|
stack
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25922140000
|
trusted library allocation
|
page read and write
|
||
23B7970F000
|
direct allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25906D75000
|
heap
|
page read and write
|
||
23B7B230000
|
heap
|
page read and write
|
||
23B797D6000
|
heap
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
7FF618707000
|
unkown
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
7FF618640000
|
unkown
|
page readonly
|
||
25906D76000
|
heap
|
page read and write
|
||
2592210A000
|
trusted library allocation
|
page read and write
|
||
25922120000
|
trusted library allocation
|
page read and write
|
||
25908AC0000
|
trusted library allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25906F90000
|
heap
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
7FF618641000
|
unkown
|
page execute read
|
||
23B7B6CD000
|
heap
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
EA1947E000
|
stack
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
23B7BE3B000
|
heap
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
259220E3000
|
trusted library allocation
|
page read and write
|
||
7FF848F0F000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
EA1967F000
|
stack
|
page read and write
|
||
25922365000
|
trusted library allocation
|
page read and write
|
||
259222C0000
|
trusted library allocation
|
page read and write
|
||
7FF6186FE000
|
unkown
|
page readonly
|
||
2591BBAC000
|
trusted library allocation
|
page read and write
|
||
25922170000
|
trusted library allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25907010000
|
heap
|
page execute and read and write
|
||
25906D7D000
|
heap
|
page read and write
|
||
259220E0000
|
trusted library allocation
|
page read and write
|
||
25922190000
|
trusted library allocation
|
page read and write
|
||
25908934000
|
direct allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25906D84000
|
heap
|
page read and write
|
||
259222E0000
|
trusted library allocation
|
page read and write
|
||
259220E0000
|
trusted library allocation
|
page read and write
|
||
25922200000
|
trusted library allocation
|
page read and write
|
||
7FF618707000
|
unkown
|
page write copy
|
||
23B79742000
|
direct allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25909829000
|
heap
|
page read and write
|
||
25906FD0000
|
trusted library allocation
|
page read and write
|
||
7FF848D60000
|
trusted library allocation
|
page read and write
|
||
25908B97000
|
trusted library allocation
|
page read and write
|
||
25906F3D000
|
direct allocation
|
page read and write
|
||
25908878000
|
trusted library allocation
|
page read and write
|
||
7FF6186E6000
|
unkown
|
page readonly
|
||
25908AC0000
|
trusted library allocation
|
page read and write
|
||
2590885A000
|
direct allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908AF0000
|
trusted library section
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25906F50000
|
direct allocation
|
page read and write
|
||
7FF848F50000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
7FF848D42000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
25908890000
|
trusted library allocation
|
page read and write
|
||
7FF6186E6000
|
unkown
|
page readonly
|
||
259095B2000
|
heap
|
page read and write
|
||
25906EB0000
|
heap
|
page read and write
|
||
25908890000
|
trusted library allocation
|
page read and write
|
||
25922140000
|
trusted library allocation
|
page read and write
|
||
23B79A60000
|
heap
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
7FF848DF6000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908890000
|
trusted library allocation
|
page read and write
|
||
7FF848EE0000
|
trusted library allocation
|
page read and write
|
||
7FF61870A000
|
unkown
|
page readonly
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908876000
|
trusted library allocation
|
page read and write
|
||
2591ABAC000
|
trusted library allocation
|
page read and write
|
||
259221A0000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
EA189ED000
|
stack
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908B70000
|
trusted library allocation
|
page read and write
|
||
7FF848D40000
|
trusted library allocation
|
page read and write
|
||
25922110000
|
trusted library allocation
|
page read and write
|
||
259091B0000
|
heap
|
page read and write
|
||
7FF848D43000
|
trusted library allocation
|
page execute and read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25922110000
|
trusted library allocation
|
page read and write
|
||
25908860000
|
trusted library allocation
|
page read and write
|
||
259220F0000
|
trusted library allocation
|
page read and write
|
||
259221F6000
|
trusted library allocation
|
page read and write
|
||
23B7B100000
|
heap
|
page execute read
|
||
259220F0000
|
trusted library allocation
|
page read and write
|
||
25908890000
|
trusted library allocation
|
page read and write
|
||
EA1907E000
|
stack
|
page read and write
|
||
EA18DF9000
|
stack
|
page read and write
|
||
25908AD8000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
259220F0000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25922100000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25922200000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25922040000
|
trusted library allocation
|
page read and write
|
||
25906D8F000
|
heap
|
page read and write
|
||
25906CB0000
|
remote allocation
|
page execute read
|
||
761A1FB000
|
stack
|
page read and write
|
||
EA18BFE000
|
stack
|
page read and write
|
||
7FF848D9C000
|
trusted library allocation
|
page execute and read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
7FF848F5C000
|
trusted library allocation
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
259088A5000
|
heap
|
page read and write
|
||
25908870000
|
trusted library section
|
page read and write
|
||
23B7B2CD000
|
heap
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
EA18E7E000
|
stack
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25906EDF000
|
direct allocation
|
page read and write
|
||
23B7B445000
|
heap
|
page read and write
|
||
23B7B19A000
|
direct allocation
|
page read and write
|
||
25906D73000
|
heap
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
259097DE000
|
heap
|
page read and write
|
||
25908AC0000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908B97000
|
trusted library allocation
|
page read and write
|
||
25907035000
|
heap
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25922130000
|
trusted library allocation
|
page read and write
|
||
2590983E000
|
heap
|
page read and write
|
||
259221F0000
|
trusted library allocation
|
page read and write
|
||
25922380000
|
trusted library allocation
|
page read and write
|
||
7FF6186F5000
|
unkown
|
page read and write
|
||
259220F0000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25922210000
|
trusted library allocation
|
page read and write
|
||
25908AC3000
|
trusted library allocation
|
page read and write
|
||
25909829000
|
heap
|
page read and write
|
||
7FF6186FE000
|
unkown
|
page readonly
|
||
259098A0000
|
heap
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25922160000
|
trusted library allocation
|
page read and write
|
||
25906ED6000
|
direct allocation
|
page read and write
|
||
7FF848F30000
|
trusted library allocation
|
page read and write
|
||
25922370000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908AC0000
|
trusted library allocation
|
page read and write
|
||
25922230000
|
trusted library allocation
|
page read and write
|
||
7FF6186F8000
|
unkown
|
page read and write
|
||
25908FB9000
|
heap
|
page read and write
|
||
25922330000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25909328000
|
heap
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25906ED0000
|
direct allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25922367000
|
trusted library allocation
|
page read and write
|
||
25908890000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
7FF848DF0000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
7FF848D6D000
|
trusted library allocation
|
page execute and read and write
|
||
259093B9000
|
heap
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
259220F0000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25906D01000
|
heap
|
page read and write
|
||
25908B90000
|
trusted library allocation
|
page read and write
|
||
25908AC0000
|
trusted library allocation
|
page read and write
|
||
259097B2000
|
heap
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
7FF618707000
|
unkown
|
page write copy
|
||
25906D31000
|
heap
|
page read and write
|
||
25908B70000
|
trusted library section
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
23B7B4CE000
|
heap
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
259097B0000
|
heap
|
page read and write
|
||
259221F0000
|
trusted library allocation
|
page read and write
|
||
23B7BA38000
|
heap
|
page read and write
|
||
25909531000
|
heap
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25922190000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25906D84000
|
heap
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
259098A0000
|
heap
|
page read and write
|
||
25906EEB000
|
direct allocation
|
page read and write
|
||
25922130000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908AE0000
|
heap
|
page read and write
|
||
259220E0000
|
trusted library allocation
|
page read and write
|
||
7FF848F13000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
7FF848E26000
|
trusted library allocation
|
page execute and read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
23B7B120000
|
direct allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25908890000
|
trusted library allocation
|
page read and write
|
||
2591997C000
|
trusted library allocation
|
page read and write
|
||
7FF618641000
|
unkown
|
page execute read
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25908AC3000
|
trusted library allocation
|
page read and write
|
||
7FF848F1A000
|
trusted library allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
259222AD000
|
trusted library allocation
|
page read and write
|
||
7FF618664000
|
unkown
|
page readonly
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
7FF47B9D0000
|
trusted library allocation
|
page execute and read and write
|
||
7FF848F61000
|
trusted library allocation
|
page read and write
|
||
259222F0000
|
trusted library allocation
|
page read and write
|
||
25909920000
|
trusted library allocation
|
page read and write
|
||
25908B80000
|
trusted library allocation
|
page read and write
|
||
25908890000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25919941000
|
trusted library allocation
|
page read and write
|
||
23B79771000
|
direct allocation
|
page read and write
|
||
23B7B240000
|
direct allocation
|
page read and write
|
||
259220E3000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908880000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
25922000000
|
trusted library section
|
page read and write
|
||
259222D0000
|
trusted library allocation
|
page read and write
|
||
25908877000
|
trusted library allocation
|
page read and write
|
||
25908AC0000
|
trusted library section
|
page read and write
|
||
7FF618664000
|
unkown
|
page readonly
|
||
25922130000
|
trusted library allocation
|
page read and write
|
||
25908879000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25922363000
|
trusted library allocation
|
page read and write
|
||
25906F02000
|
direct allocation
|
page read and write
|
||
23B7B845000
|
heap
|
page read and write
|
||
25906EF5000
|
direct allocation
|
page read and write
|
||
25908870000
|
trusted library allocation
|
page read and write
|
||
25908873000
|
trusted library allocation
|
page read and write
|
||
25908AD0000
|
trusted library allocation
|
page read and write
|
||
25922110000
|
trusted library allocation
|
page read and write
|
||
25922120000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
25908B93000
|
trusted library allocation
|
page read and write
|
||
2590892A000
|
direct allocation
|
page read and write
|
||
259223A0000
|
trusted library allocation
|
page read and write
|
||
23B7975C000
|
direct allocation
|
page read and write
|
There are 552 hidden memdumps, click here to show them.