Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
'C:\Users\user\Desktop\YF4dF4w2Cr.exe'
|
||
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
--5c8d8ab7
|
||
C:\Windows\SysWOW64\fwdrrebrand.exe
|
C:\Windows\SysWOW64\fwdrrebrand.exe
|
||
C:\Windows\SysWOW64\fwdrrebrand.exe
|
--1cbc15eb
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://201.196.15.79/pnp/splash/loadan/merge/
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
144.76.62.10
|
unknown
|
Germany
|
||
203.99.188.203
|
unknown
|
Pakistan
|
||
201.196.15.79
|
unknown
|
Costa Rica
|
||
200.55.168.82
|
unknown
|
Cuba
|
||
213.138.100.98
|
unknown
|
United Kingdom
|
||
190.117.206.153
|
unknown
|
Peru
|
||
203.99.187.137
|
unknown
|
Pakistan
|
||
70.32.94.58
|
unknown
|
United States
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
NULL
|
||
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
NULL
|
||
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
NULL
|
||
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
NULL
|
||
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
NULL
|
||
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
NULL
|
||
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
NULL
|
||
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
NULL
|
||
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
NULL
|
||
C:\Users\user\Desktop\YF4dF4w2Cr.exe
|
NullFile
|
||
C:\Windows\SysWOW64\fwdrrebrand.exe
|
NULL
|
||
C:\Windows\SysWOW64\fwdrrebrand.exe
|
NULL
|
||
C:\Windows\SysWOW64\fwdrrebrand.exe
|
NULL
|
||
C:\Windows\SysWOW64\fwdrrebrand.exe
|
NULL
|
There are 4 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
E71000
|
unkown
|
page execute read
|
||
23E1000
|
unkown
|
page execute read
|
||
22F0000
|
unkown
|
page execute and read and write
|
||
E40000
|
unkown
|
page execute and read and write
|
||
2311000
|
unkown
|
page execute read
|
||
22F0000
|
unkown
|
page execute and read and write
|
||
E51000
|
unkown
|
page execute read
|
||
E40000
|
unkown
|
page execute and read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CD12C000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CD125000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CB113000
|
unkown
|
page read and write
|
||
257CE000000
|
unkown
|
page read and write
|
||
257CD145000
|
unkown
|
page read and write
|
||
7FF5C33E2000
|
unkown
|
page readonly
|
||
257CB05C000
|
unkown
|
page read and write
|
||
257CD104000
|
unkown
|
page read and write
|
||
7FF5C3494000
|
unkown
|
page readonly
|
||
5F1000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CB05B000
|
unkown
|
page read and write
|
||
25E7000
|
heap private
|
page read and write
|
||
257CE113000
|
unkown
|
page read and write
|
||
462000
|
unkown image
|
page write copy
|
||
E7E000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
100E000
|
unkown
|
page read and write
|
||
257CD542000
|
unkown
|
page read and write
|
||
257CE510000
|
unkown
|
page read and write
|
||
257CD133000
|
unkown
|
page read and write
|
||
7FF5C3261000
|
unkown
|
page readonly
|
||
7FF5C3343000
|
unkown
|
page readonly
|
||
2710000
|
unkown
|
page readonly
|
||
7FF5841B9000
|
unkown
|
page readonly
|
||
CEDC37A000
|
unkown
|
page read and write
|
||
462000
|
unkown image
|
page write copy
|
||
EC1000
|
unkown
|
page read and write
|
||
530000
|
heap default
|
page read and write
|
||
257CD11D000
|
unkown
|
page read and write
|
||
22A0000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
257CD140000
|
unkown
|
page read and write
|
||
7FF5C3445000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
257CCF90000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CCB80000
|
unkown
|
page readonly
|
||
44E000
|
unkown image
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
E5F000
|
unkown
|
page read and write
|
||
EC0000
|
unkown
|
page read and write
|
||
257CD18A000
|
unkown
|
page read and write
|
||
E70000
|
unkown
|
page read and write
|
||
257CD142000
|
unkown
|
page read and write
|
||
257CB06C000
|
unkown
|
page read and write
|
||
257CD11E000
|
unkown
|
page read and write
|
||
7FF5C34B1000
|
unkown
|
page readonly
|
||
DD643FA000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CB0FB000
|
unkown
|
page read and write
|
||
62A000
|
unkown
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
257CD140000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
391000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
28D000
|
unkown
|
page read and write
|
||
580000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
62A000
|
unkown
|
page read and write
|
||
E85000
|
unkown
|
page readonly
|
||
7FF5843B4000
|
unkown
|
page readonly
|
||
257CB072000
|
unkown
|
page read and write
|
||
7FF5C31FB000
|
unkown
|
page readonly
|
||
257CD11D000
|
unkown
|
page read and write
|
||
7FF5C348A000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
257CB08B000
|
unkown
|
page read and write
|
||
7FF5C3299000
|
unkown
|
page readonly
|
||
22A0000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
257CB12D000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
490000
|
unkown
|
page read and write
|
||
1020000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CE010000
|
unkown
|
page read and write
|
||
26D03A00000
|
unkown
|
page readonly
|
||
5C7000
|
heap default
|
page read and write
|
||
257CD146000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
7FF584377000
|
unkown
|
page readonly
|
||
7FF5C34B9000
|
unkown
|
page readonly
|
||
257CD152000
|
unkown
|
page read and write
|
||
DD63C7B000
|
unkown
|
page read and write
|
||
7FF5C30FC000
|
unkown
|
page readonly
|
||
26D03902000
|
unkown
|
page read and write
|
||
257CD125000
|
unkown
|
page read and write
|
||
DD6487B000
|
unkown
|
page read and write
|
||
7FF584452000
|
unkown
|
page readonly
|
||
22E0000
|
unkown
|
page readonly
|
||
257CB1B6000
|
unkown
|
page read and write
|
||
257CCF60000
|
unkown
|
page read and write
|
||
DD6407A000
|
unkown
|
page read and write
|
||
DD64C7B000
|
unkown
|
page read and write
|
||
257CD11E000
|
unkown
|
page read and write
|
||
10C0000
|
heap private
|
page read and write
|
||
DD6457D000
|
unkown
|
page read and write
|
||
DD6447E000
|
unkown
|
page read and write
|
||
257CB072000
|
unkown
|
page read and write
|
||
7FF584138000
|
unkown
|
page readonly
|
||
CEDC3FA000
|
unkown
|
page read and write
|
||
7FF5C3403000
|
unkown
|
page readonly
|
||
7FF58425B000
|
unkown
|
page readonly
|
||
257CD11D000
|
unkown
|
page read and write
|
||
7FF5C344B000
|
unkown
|
page readonly
|
||
257CD300000
|
unkown
|
page read and write
|
||
5B0000
|
heap default
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
7FF5C3484000
|
unkown
|
page readonly
|
||
62C000
|
unkown
|
page read and write
|
||
257CD11D000
|
unkown
|
page read and write
|
||
7FF58432B000
|
unkown
|
page readonly
|
||
FC0000
|
unkown
|
page read and write
|
||
7FF58438C000
|
unkown
|
page readonly
|
||
99000
|
unkown
|
page read and write
|
||
257CD20C000
|
unkown
|
page read and write
|
||
2C0000
|
unkown
|
page read and write
|
||
257CD482000
|
unkown
|
page read and write
|
||
490000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
257CD125000
|
unkown
|
page read and write
|
||
E20000
|
unkown
|
page readonly
|
||
257CB154000
|
unkown
|
page read and write
|
||
7FF58436B000
|
unkown
|
page readonly
|
||
7FF5843C8000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
85F000
|
stack
|
page read and write
|
||
26D03730000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
7FF583F39000
|
unkown
|
page readonly
|
||
65E000
|
heap default
|
page read and write
|
||
389000
|
unkown
|
page read and write
|
||
257CCEE0000
|
unkown
|
page read and write
|
||
7FA000
|
unkown
|
page read and write
|
||
257CD128000
|
unkown
|
page read and write
|
||
580000
|
unkown
|
page read and write
|
||
A7F000
|
stack
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
26D052A0000
|
unkown
|
page readonly
|
||
580000
|
unkown
|
page read and write
|
||
3F20000
|
unkown
|
page readonly
|
||
7FF5C346C000
|
unkown
|
page readonly
|
||
DD63DFA000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
ACF000
|
stack
|
page read and write
|
||
26D03800000
|
unkown
|
page read and write
|
||
257CE210000
|
unkown
|
page read and write
|
||
257CD130000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CB1B8000
|
unkown
|
page read and write
|
||
277000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
7D0000
|
heap default
|
page read and write
|
||
DD63D7E000
|
unkown
|
page read and write
|
||
7FF584397000
|
unkown
|
page readonly
|
||
DD6467B000
|
unkown
|
page read and write
|
||
62A000
|
unkown
|
page read and write
|
||
27B000
|
unkown
|
page read and write
|
||
44E000
|
unkown image
|
page readonly
|
||
257CD1A6000
|
unkown
|
page read and write
|
||
462000
|
unkown image
|
page write copy
|
||
7FF584360000
|
unkown
|
page readonly
|
||
113E000
|
unkown
|
page read and write
|
||
AD0000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
26D03610000
|
unkown
|
page readonly
|
||
A80000
|
unkown
|
page readonly
|
||
12B0000
|
unkown
|
page readonly
|
||
25E0000
|
heap private
|
page read and write
|
||
DD648FB000
|
unkown
|
page read and write
|
||
257CD582000
|
unkown
|
page read and write
|
||
23EF000
|
unkown
|
page read and write
|
||
DD64B7C000
|
unkown
|
page read and write
|
||
257CD505000
|
unkown
|
page read and write
|
||
257CD128000
|
unkown
|
page read and write
|
||
7FF584263000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
27C0000
|
heap private
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
12A8000
|
heap private
|
page read and write
|
||
7FF584196000
|
unkown
|
page readonly
|
||
2AEF000
|
stack
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
7FF584444000
|
unkown
|
page readonly
|
||
7FF5843D1000
|
unkown
|
page readonly
|
||
257CB070000
|
unkown
|
page read and write
|
||
257CB185000
|
unkown
|
page read and write
|
||
5D6000
|
unkown
|
page read and write
|
||
257CD171000
|
unkown
|
page read and write
|
||
257CD343000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
7FF584185000
|
unkown
|
page readonly
|
||
7FF5C34BD000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
257CB200000
|
unkown
|
page readonly
|
||
7FF5C2C9D000
|
unkown
|
page readonly
|
||
257CD2B8000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
435C000
|
stack
|
page read and write
|
||
DD644FB000
|
unkown
|
page read and write
|
||
257CB05F000
|
unkown
|
page read and write
|
||
257CD343000
|
unkown
|
page read and write
|
||
199000
|
unkown
|
page read and write
|
||
2270000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CB131000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
DD6497B000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
11C0000
|
unkown
|
page read and write
|
||
257CCF00000
|
heap private
|
page read and write
|
||
257CE410000
|
unkown
|
page read and write
|
||
821000
|
unkown
|
page read and write
|
||
257CD1EE000
|
unkown
|
page read and write
|
||
60E000
|
unkown
|
page read and write
|
||
7FF58401C000
|
unkown
|
page readonly
|
||
257CD142000
|
unkown
|
page read and write
|
||
810000
|
unkown
|
page read and write
|
||
22B0000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
26D051A0000
|
unkown
|
page read and write
|
||
23F2000
|
unkown
|
page read and write
|
||
257CD12E000
|
unkown
|
page read and write
|
||
60A000
|
unkown
|
page read and write
|
||
2C4000
|
unkown
|
page read and write
|
||
580000
|
unkown
|
page read and write
|
||
245C000
|
unkown
|
page read and write
|
||
7FF5C349E000
|
unkown
|
page readonly
|
||
5E6000
|
heap default
|
page read and write
|
||
9CE000
|
stack
|
page read and write
|
||
5D9000
|
heap default
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CD16E000
|
unkown
|
page read and write
|
||
559000
|
heap default
|
page read and write
|
||
44E000
|
unkown image
|
page readonly
|
||
401000
|
unkown image
|
page execute read
|
||
25C0000
|
unkown
|
page readonly
|
||
287000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
44E000
|
unkown image
|
page readonly
|
||
257CE110000
|
unkown
|
page read and write
|
||
257CD165000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
26D035A0000
|
heap private
|
page read and write
|
||
257CD10E000
|
unkown
|
page read and write
|
||
462000
|
unkown image
|
page read and write
|
||
257CB147000
|
unkown
|
page read and write
|
||
7FF5C3265000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
7FF584037000
|
unkown
|
page readonly
|
||
2220000
|
unkown
|
page read and write
|
||
99000
|
unkown
|
page read and write
|
||
520000
|
unkown
|
page readonly
|
||
257CD11D000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CB0C4000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
5F5000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
DD647FB000
|
unkown
|
page read and write
|
||
7FF583EC2000
|
unkown
|
page readonly
|
||
7FF58435E000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
4B0000
|
unkown
|
page readonly
|
||
257CB2D0000
|
unkown
|
page readonly
|
||
DD641FA000
|
unkown
|
page read and write
|
||
680000
|
heap default
|
page read and write
|
||
257CB055000
|
unkown
|
page read and write
|
||
257CD140000
|
unkown
|
page read and write
|
||
469000
|
unkown image
|
page readonly
|
||
52E000
|
unkown
|
page read and write
|
||
469000
|
unkown image
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
7FF583C61000
|
unkown
|
page readonly
|
||
E65000
|
unkown
|
page readonly
|
||
26EF000
|
stack
|
page read and write
|
||
22E0000
|
unkown
|
page readonly
|
||
4CE000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
177E000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CCF60000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
257CF110000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CD128000
|
unkown
|
page read and write
|
||
44E000
|
unkown image
|
page readonly
|
||
7FF584181000
|
unkown
|
page readonly
|
||
7FF5842A6000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
11C0000
|
unkown
|
page read and write
|
||
806000
|
unkown
|
page read and write
|
||
257CB000000
|
unkown
|
page read and write
|
||
7FF584451000
|
unkown
|
page readonly
|
||
257CD600000
|
unkown
|
page readonly
|
||
670000
|
unkown
|
page read and write
|
||
DC0000
|
unkown
|
page read and write
|
||
11BE000
|
unkown
|
page read and write
|
||
255D000
|
stack
|
page read and write
|
||
7FF58411B000
|
unkown
|
page readonly
|
||
26D03829000
|
unkown
|
page read and write
|
||
257CAFF0000
|
unkown
|
page readonly
|
||
DD64CFD000
|
unkown
|
page read and write
|
||
257CB0AF000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CB1B7000
|
unkown
|
page read and write
|
||
257CD11F000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
5D1000
|
unkown
|
page read and write
|
||
27C4000
|
heap private
|
page read and write
|
||
7FF58444A000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
462000
|
unkown image
|
page read and write
|
||
257CD150000
|
unkown
|
page read and write
|
||
2430000
|
heap private
|
page read and write
|
||
7DA000
|
heap default
|
page read and write
|
||
7FF584126000
|
unkown
|
page readonly
|
||
7FF58432F000
|
unkown
|
page readonly
|
||
E68000
|
heap private
|
page read and write
|
||
5D9000
|
unkown
|
page read and write
|
||
7FF58438F000
|
unkown
|
page readonly
|
||
257CD500000
|
unkown
|
page read and write
|
||
257CE410000
|
unkown
|
page read and write
|
||
4DE000
|
unkown
|
page read and write
|
||
257CE110000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CB064000
|
unkown
|
page read and write
|
||
257CD402000
|
unkown
|
page read and write
|
||
28A000
|
unkown
|
page read and write
|
||
257CD130000
|
unkown
|
page read and write
|
||
257CD141000
|
unkown
|
page read and write
|
||
257CD128000
|
unkown
|
page read and write
|
||
257CD125000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
22D0000
|
unkown
|
page readonly
|
||
257CD383000
|
unkown
|
page read and write
|
||
7FF58402A000
|
unkown
|
page readonly
|
||
257CD11B000
|
unkown
|
page read and write
|
||
257CD542000
|
unkown
|
page read and write
|
||
257CE010000
|
unkown
|
page read and write
|
||
469000
|
unkown image
|
page readonly
|
||
257CD1CC000
|
unkown
|
page read and write
|
||
2590000
|
heap private
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CD128000
|
unkown
|
page read and write
|
||
22B0000
|
unkown
|
page read and write
|
||
490000
|
unkown
|
page readonly
|
||
2437000
|
heap private
|
page read and write
|
||
257CB0DB000
|
unkown
|
page read and write
|
||
26D03600000
|
heap default
|
page read and write
|
||
7FF583BBD000
|
unkown
|
page readonly
|
||
257CD10D000
|
unkown
|
page read and write
|
||
7FD000
|
unkown
|
page read and write
|
||
7FF5C3348000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
DD64A79000
|
unkown
|
page read and write
|
||
257CD146000
|
unkown
|
page read and write
|
||
257CB059000
|
unkown
|
page read and write
|
||
2460000
|
heap private
|
page read and write
|
||
257CD134000
|
unkown
|
page read and write
|
||
53A000
|
heap default
|
page read and write
|
||
26D036E0000
|
unkown
|
page write copy
|
||
5EE000
|
unkown
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
4A4000
|
unkown
|
page read and write
|
||
DD63E7A000
|
unkown
|
page read and write
|
||
4A0000
|
heap default
|
page read and write
|
||
29AF000
|
stack
|
page read and write
|
||
257CD125000
|
unkown
|
page read and write
|
||
2C2F000
|
stack
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
99000
|
unkown
|
page read and write
|
||
257CD11E000
|
unkown
|
page read and write
|
||
E90000
|
unkown
|
page read and write
|
||
7FD000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CB0C7000
|
unkown
|
page read and write
|
||
2C6E000
|
unkown
|
page read and write
|
||
7FF5842F2000
|
unkown
|
page readonly
|
||
29EE000
|
unkown
|
page read and write
|
||
7FF5843AA000
|
unkown
|
page readonly
|
||
113C000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
469000
|
unkown image
|
page readonly
|
||
7FF5C3206000
|
unkown
|
page readonly
|
||
7FF583BC1000
|
unkown
|
page readonly
|
||
EB0000
|
heap private
|
page read and write
|
||
257CD146000
|
unkown
|
page read and write
|
||
257CD002000
|
unkown
|
page read and write
|
||
257CE110000
|
unkown
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
25BE000
|
unkown
|
page read and write
|
||
462000
|
unkown image
|
page read and write
|
||
462000
|
unkown image
|
page read and write
|
||
257CF110000
|
unkown
|
page read and write
|
||
806000
|
unkown
|
page read and write
|
||
257CD125000
|
unkown
|
page read and write
|
||
257CB147000
|
unkown
|
page read and write
|
||
7FF5C3457000
|
unkown
|
page readonly
|
||
257CD125000
|
unkown
|
page read and write
|
||
257CE310000
|
unkown
|
page read and write
|
||
257CB0C4000
|
unkown
|
page read and write
|
||
231E000
|
unkown
|
page readonly
|
||
26D03813000
|
unkown
|
page read and write
|
||
7FF5C346F000
|
unkown
|
page readonly
|
||
469000
|
unkown image
|
page readonly
|
||
7FF5C34AE000
|
unkown
|
page readonly
|
||
257CB0FE000
|
unkown
|
page read and write
|
||
7FF5C3524000
|
unkown
|
page readonly
|
||
257CD11C000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
99000
|
unkown
|
page read and write
|
||
DD649FB000
|
unkown
|
page read and write
|
||
395000
|
unkown
|
page read and write
|
||
257CB064000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CB0BC000
|
unkown
|
page read and write
|
||
7FF584302000
|
unkown
|
page readonly
|
||
257CB0A4000
|
unkown
|
page read and write
|
||
23F5000
|
unkown
|
page readonly
|
||
257CD11E000
|
unkown
|
page read and write
|
||
7FF5843A4000
|
unkown
|
page readonly
|
||
801000
|
unkown
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
257CB134000
|
unkown
|
page read and write
|
||
257CD223000
|
unkown
|
page read and write
|
||
257CD142000
|
unkown
|
page read and write
|
||
257CD12C000
|
unkown
|
page read and write
|
||
257CCF80000
|
unkown
|
page read and write
|
||
117E000
|
unkown
|
page read and write
|
||
80C000
|
unkown
|
page read and write
|
||
63B000
|
unkown
|
page read and write
|
||
CEDC4FF000
|
unkown
|
page read and write
|
||
38D000
|
unkown
|
page read and write
|
||
580000
|
unkown
|
page read and write
|
||
E60000
|
heap private
|
page read and write
|
||
257CB0CE000
|
unkown
|
page read and write
|
||
257CD11E000
|
unkown
|
page read and write
|
||
12A0000
|
heap private
|
page read and write
|
||
257CD136000
|
unkown
|
page read and write
|
||
DD645FC000
|
unkown
|
page read and write
|
||
28AE000
|
unkown
|
page read and write
|
||
257CB0FB000
|
unkown
|
page read and write
|
||
2320000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
63B000
|
unkown
|
page read and write
|
||
23EE000
|
unkown
|
page readonly
|
||
7FF584268000
|
unkown
|
page readonly
|
||
5DA000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
173F000
|
unkown
|
page read and write
|
||
DD6477A000
|
unkown
|
page read and write
|
||
7FF58434A000
|
unkown
|
page readonly
|
||
7FF58402F000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
257CD100000
|
unkown
|
page read and write
|
||
257CB06C000
|
unkown
|
page read and write
|
||
63B000
|
unkown
|
page read and write
|
||
257CD11F000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
CEDC2FE000
|
unkown
|
page read and write
|
||
257CD124000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CD200000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
7FF5843D9000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
7FF5C3321000
|
unkown
|
page readonly
|
||
257CB09D000
|
unkown
|
page read and write
|
||
DF0000
|
unkown
|
page read and write
|
||
DD6437A000
|
unkown
|
page read and write
|
||
257CD140000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CB0C9000
|
unkown
|
page read and write
|
||
7FF5C343A000
|
unkown
|
page readonly
|
||
401000
|
unkown image
|
page execute read
|
||
22C0000
|
unkown
|
page read and write
|
||
802000
|
unkown
|
page read and write
|
||
163F000
|
unkown
|
page read and write
|
||
257CD132000
|
unkown
|
page read and write
|
||
257CD128000
|
unkown
|
page read and write
|
||
257CB0C7000
|
unkown
|
page read and write
|
||
7FF5842AD000
|
unkown
|
page readonly
|
||
87F000
|
stack
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
73F000
|
stack
|
page read and write
|
||
257CD149000
|
unkown
|
page read and write
|
||
257CD11C000
|
unkown
|
page read and write
|
||
296000
|
unkown
|
page read and write
|
||
7FF584334000
|
unkown
|
page readonly
|
||
257CD1B1000
|
unkown
|
page read and write
|
||
257CB072000
|
unkown
|
page read and write
|
||
7FF584323000
|
unkown
|
page readonly
|
||
7FF5C3440000
|
unkown
|
page readonly
|
||
257CD125000
|
unkown
|
page read and write
|
||
257CD11E000
|
unkown
|
page read and write
|
||
257CB072000
|
unkown
|
page read and write
|
||
7FF58433F000
|
unkown
|
page readonly
|
||
231F000
|
unkown
|
page read and write
|
||
257CF010000
|
unkown
|
page read and write
|
||
7FF5C3478000
|
unkown
|
page readonly
|
||
7FF5C343E000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CD146000
|
unkown
|
page read and write
|
||
257CD2B5000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
61D000
|
unkown
|
page read and write
|
||
65B000
|
unkown
|
page read and write
|
||
257CB154000
|
unkown
|
page read and write
|
||
E00000
|
unkown
|
page readonly
|
||
2310000
|
heap private
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
257CE510000
|
unkown
|
page read and write
|
||
257CD128000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
5C0000
|
heap default
|
page read and write
|
||
257CE410000
|
unkown
|
page read and write
|
||
590000
|
unkown
|
page readonly
|
||
DD64D7F000
|
unkown
|
page read and write
|
||
257CCEF0000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
7FF5C2CA1000
|
unkown
|
page readonly
|
||
7FF5842FC000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
4D0000
|
unkown
|
page read and write
|
||
E5E000
|
unkown
|
page readonly
|
||
ED0000
|
unkown
|
page read and write
|
||
257CD193000
|
unkown
|
page read and write
|
||
616000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
7FF5843BE000
|
unkown
|
page readonly
|
||
25A0000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
2310000
|
unkown
|
page read and write
|
||
257CD14E000
|
unkown
|
page read and write
|
||
257CD11E000
|
unkown
|
page read and write
|
||
580000
|
unkown
|
page read and write
|
||
7FF58435A000
|
unkown
|
page readonly
|
||
65B000
|
unkown
|
page read and write
|
||
DD642FB000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CCFA0000
|
unkown
|
page read and write
|
||
257CB079000
|
unkown
|
page read and write
|
||
257CD343000
|
unkown
|
page read and write
|
||
257CB0FB000
|
unkown
|
page read and write
|
||
63D000
|
unkown
|
page read and write
|
||
257CD11C000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CB063000
|
unkown
|
page read and write
|
||
26D03770000
|
unkown
|
page read and write
|
||
630000
|
unkown
|
page read and write
|
||
23E0000
|
unkown
|
page read and write
|
||
CEDC27E000
|
unkown
|
page read and write
|
||
7FF584241000
|
unkown
|
page readonly
|
||
560000
|
unkown
|
page read and write
|
||
257CE510000
|
unkown
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
95F000
|
stack
|
page read and write
|
||
7FF5C352A000
|
unkown
|
page readonly
|
||
22D0000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
257CE510000
|
unkown
|
page read and write
|
||
11F0000
|
heap private
|
page read and write
|
||
DD63CFE000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
1030000
|
heap private
|
page read and write
|
||
617000
|
unkown
|
page read and write
|
||
257CAF90000
|
heap default
|
page read and write
|
||
7FF58434C000
|
unkown
|
page readonly
|
||
2410000
|
heap private
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
CEDC47E000
|
unkown
|
page read and write
|
||
257CD15F000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CD1B7000
|
unkown
|
page read and write
|
||
1200000
|
unkown
|
page readonly
|
||
257CB175000
|
unkown
|
page read and write
|
||
257CB072000
|
unkown
|
page read and write
|
||
DD63F7A000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CB144000
|
unkown
|
page read and write
|
||
660000
|
unkown
|
page readonly
|
||
2B2E000
|
unkown
|
page read and write
|
||
257CB135000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
DD64BFD000
|
unkown
|
page read and write
|
||
7FF5843CE000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
7FF5C3117000
|
unkown
|
page readonly
|
||
DD646FB000
|
unkown
|
page read and write
|
||
257CB1C7000
|
unkown
|
page read and write
|
||
2760000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
7FF5C333B000
|
unkown
|
page readonly
|
||
257CD11C000
|
unkown
|
page read and write
|
||
257CE310000
|
unkown
|
page read and write
|
||
257CD11B000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
97F000
|
stack
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
7FF5C310F000
|
unkown
|
page readonly
|
||
257CD128000
|
unkown
|
page read and write
|
||
B00000
|
unkown
|
page readonly
|
||
80C000
|
unkown
|
page read and write
|
||
7FF5C3532000
|
unkown
|
page readonly
|
||
257CD264000
|
unkown
|
page read and write
|
||
257CE210000
|
unkown
|
page read and write
|
||
257CB155000
|
unkown
|
page read and write
|
||
4A4000
|
unkown
|
page read and write
|
||
257CD402000
|
unkown
|
page read and write
|
||
750000
|
unkown
|
page read and write
|
||
27D0000
|
unkown
|
page readonly
|
||
469000
|
unkown image
|
page readonly
|
||
257CB072000
|
unkown
|
page read and write
|
||
7FF5C33E0000
|
unkown
|
page readonly
|
||
257CB0C8000
|
unkown
|
page read and write
|
||
DD6417A000
|
unkown
|
page read and write
|
||
2330000
|
heap private
|
page read and write
|
||
26D03802000
|
unkown
|
page read and write
|
||
E82000
|
unkown
|
page read and write
|
||
7FF5841A1000
|
unkown
|
page readonly
|
||
7FF584365000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
44E000
|
unkown image
|
page readonly
|
||
257CD131000
|
unkown
|
page read and write
|
||
2594000
|
heap private
|
page read and write
|
||
51E000
|
unkown
|
page read and write
|
||
E50000
|
unkown
|
page read and write
|
||
E30000
|
unkown
|
page read and write
|
||
5B7000
|
heap default
|
page read and write
|
||
44E000
|
unkown image
|
page readonly
|
||
690000
|
unkown
|
page readonly
|
||
22C0000
|
unkown
|
page read and write
|
||
257CD11D000
|
unkown
|
page read and write
|
||
469000
|
unkown image
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
640000
|
unkown
|
page readonly
|
||
257CCF70000
|
unkown
|
page read and write
|
||
257CD482000
|
unkown
|
page read and write
|
||
E7F000
|
unkown
|
page read and write
|
||
DD63EFF000
|
unkown
|
page read and write
|
||
257CB057000
|
unkown
|
page read and write
|
||
62D000
|
heap default
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
DD640FA000
|
unkown
|
page read and write
|
||
56E000
|
unkown
|
page read and write
|
||
6B0000
|
unkown
|
page readonly
|
||
7FF5841B1000
|
unkown
|
page readonly
|
||
401000
|
unkown image
|
page execute read
|
||
7FF5C3531000
|
unkown
|
page readonly
|
||
5D1000
|
heap default
|
page read and write
|
||
DD63FFA000
|
unkown
|
page read and write
|
||
257CE310000
|
unkown
|
page read and write
|
||
2325000
|
unkown
|
page readonly
|
||
62E000
|
unkown
|
page read and write
|
||
5F1000
|
heap default
|
page read and write
|
||
257CCFB0000
|
unkown
|
page readonly
|
||
F00000
|
heap private
|
page read and write
|
||
469000
|
unkown image
|
page readonly
|
||
7FF5C310A000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
D70000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
257CD128000
|
unkown
|
page read and write
|
||
462000
|
unkown image
|
page write copy
|
||
740000
|
unkown
|
page readonly
|
||
63E000
|
heap default
|
page read and write
|
||
257CD400000
|
unkown
|
page read and write
|
||
257CD131000
|
unkown
|
page read and write
|
||
257CB029000
|
unkown
|
page read and write
|
||
257CCF60000
|
unkown
|
page read and write
|
||
257CCF50000
|
unkown
|
page readonly
|
||
2340000
|
unkown
|
page readonly
|
||
401000
|
unkown image
|
page execute read
|
||
7FF5843D6000
|
unkown
|
page readonly
|
||
26D0383F000
|
unkown
|
page read and write
|
||
7FF5C34A8000
|
unkown
|
page readonly
|
||
3CF0000
|
unkown
|
page readonly
|
||
257CAF30000
|
heap private
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
10B0000
|
heap private
|
page read and write
|
||
257CAFA0000
|
unkown
|
page write copy
|
||
257CD213000
|
unkown
|
page read and write
|
||
257CD10A000
|
unkown
|
page read and write
|
||
DD64AFC000
|
unkown
|
page read and write
|
||
257CD146000
|
unkown
|
page read and write
|
||
2280000
|
unkown
|
page readonly
|
||
257CD295000
|
unkown
|
page read and write
|
||
257CCA80000
|
unkown
|
page read and write
|
||
DD6427A000
|
unkown
|
page read and write
|
||
960000
|
unkown
|
page readonly
|
||
630000
|
heap default
|
page read and write
|
||
5D9000
|
unkown
|
page read and write
|
||
5AE000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
187C000
|
unkown
|
page read and write
|
||
257CD343000
|
unkown
|
page read and write
|
||
7FF58413F000
|
unkown
|
page readonly
|
||
199000
|
stack
|
page read and write
|
||
570000
|
unkown
|
page readonly
|
||
257CB176000
|
unkown
|
page read and write
|
||
7FF5C34B6000
|
unkown
|
page readonly
|
||
257CCF60000
|
unkown
|
page read and write
|
||
2770000
|
unkown
|
page readonly
|
||
CEDBF8B000
|
unkown
|
page read and write
|
||
257CD502000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
26D03855000
|
unkown
|
page read and write
|
||
80C000
|
unkown
|
page read and write
|
||
7FF584194000
|
unkown
|
page readonly
|
||
EC1000
|
unkown
|
page read and write
|
||
44E000
|
unkown image
|
page readonly
|
||
257CB072000
|
unkown
|
page read and write
|
||
65D000
|
unkown
|
page read and write
|
||
257CD142000
|
unkown
|
page read and write
|
||
65B000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
||
257CD502000
|
unkown
|
page read and write
|
||
EC1000
|
unkown
|
page read and write
|
||
CA0000
|
unkown
|
page readonly
|
||
257CD13F000
|
unkown
|
page read and write
|
||
4E0000
|
heap default
|
page read and write
|
||
900000
|
unkown
|
page readonly
|
||
257CB03F000
|
unkown
|
page read and write
|
||
257CB013000
|
unkown
|
page read and write
|
||
7FF584300000
|
unkown
|
page readonly
|
||
4A4000
|
unkown
|
page read and write
|
There are 748 hidden memdumps, click here to show them.