Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
CTkT1fRtQv.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_8697bb53893bff1d8dd8d2263efc904abedc64_160cf2be_197edd8e\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC8DD.tmp.dmp
|
Mini DuMP crash report, 15 streams, Mon Apr 19 21:41:01 2021, 0x1205a4 type
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF85.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD468.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\CTkT1fRtQv.dll'
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\CTkT1fRtQv.dll',#1
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\CTkT1fRtQv.dll',ReadLogRecord
|
||
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\CTkT1fRtQv.dll',#1
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 7024 -s 144
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://ansicon.adoxa.vze.com/6
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
159.203.93.122
|
unknown
|
United States
|
||
50.116.27.97
|
unknown
|
United States
|
||
94.247.168.64
|
unknown
|
Sweden
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Windows\SysWOW64\WerFault.exe
|
AmiHivePermissionsCorrect
|
||
C:\Windows\SysWOW64\WerFault.exe
|
AmiHiveOwnerCorrect
|
||
C:\Windows\SysWOW64\WerFault.exe
|
ExceptionRecord
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
728A1000
|
unkown image
|
page execute read
|
||
728A1000
|
unkown image
|
page execute read
|
||
524F000
|
stack
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
1941E600000
|
unkown
|
page read and write
|
||
20F3000
|
unkown
|
page readonly
|
||
2213000
|
unkown
|
page readonly
|
||
2F62000
|
unkown
|
page read and write
|
||
CA0000
|
unkown
|
page readonly
|
||
2FBB000
|
unkown
|
page read and write
|
||
1B116637000
|
unkown
|
page read and write
|
||
2FD3000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
4EC0000
|
unkown
|
page read and write
|
||
1B116520000
|
unkown
|
page read and write
|
||
2C03000
|
unkown
|
page readonly
|
||
2F56000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
1941EA50000
|
unkown
|
page readonly
|
||
4B280000
|
unkown
|
page read and write
|
||
4630000
|
heap private
|
page read and write
|
||
7FF56BBB9000
|
unkown
|
page readonly
|
||
1AF46802000
|
unkown
|
page read and write
|
||
4FD0000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
1FA1000
|
unkown
|
page readonly
|
||
2FA8000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2FB5000
|
unkown
|
page read and write
|
||
7FF57736F000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
1AF46A00000
|
unkown
|
page readonly
|
||
7FF577291000
|
unkown
|
page readonly
|
||
7FF56BB57000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2C2F000
|
unkown
|
page readonly
|
||
7FF577389000
|
unkown
|
page readonly
|
||
2FC1000
|
unkown
|
page read and write
|
||
3050000
|
unkown
|
page readonly
|
||
7FF577402000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
5130000
|
heap private
|
page read and write
|
||
5135000
|
heap private
|
page read and write
|
||
2A93000
|
unkown
|
page readonly
|
||
2F58000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
33EA000
|
heap default
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
3270000
|
unkown
|
page readonly
|
||
2FA8000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF576BA5000
|
unkown
|
page readonly
|
||
2C5B000
|
unkown
|
page readonly
|
||
4E10000
|
unkown
|
page read and write
|
||
2F66000
|
unkown
|
page read and write
|
||
2CA5000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
4DCC000
|
unkown
|
page read and write
|
||
2FC7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
4DC3000
|
unkown
|
page read and write
|
||
B6E000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
19420110000
|
unkown
|
page readonly
|
||
7FF56BBB6000
|
unkown
|
page readonly
|
||
3180000
|
unkown
|
page readonly
|
||
80E000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF5E492A000
|
unkown
|
page readonly
|
||
7FF56BB6C000
|
unkown
|
page readonly
|
||
1AF481A0000
|
unkown
|
page read and write
|
||
2FBB000
|
unkown
|
page read and write
|
||
7FF5E409D000
|
unkown
|
page readonly
|
||
1B116800000
|
unkown
|
page readonly
|
||
306D000
|
heap private
|
page read and write
|
||
2CC000
|
unkown
|
page read and write
|
||
3E0000
|
unkown
|
page read and write
|
||
1B4477E000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2BB3000
|
unkown
|
page readonly
|
||
2B58000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
306B000
|
heap private
|
page read and write
|
||
2FA8000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
1941E702000
|
unkown
|
page read and write
|
||
1AF4686C000
|
unkown
|
page read and write
|
||
2C52000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF577354000
|
unkown
|
page readonly
|
||
1AF4686A000
|
unkown
|
page read and write
|
||
7FF56BB40000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
4DC3000
|
unkown
|
page read and write
|
||
3000000
|
unkown
|
page read and write
|
||
CB0000
|
unkown
|
page read and write
|
||
2FCD000
|
unkown
|
page read and write
|
||
3300000
|
heap default
|
page read and write
|
||
2C0C000
|
unkown
|
page readonly
|
||
2FC1000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2580000
|
unkown
|
page read and write
|
||
2BED000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
25C0000
|
unkown
|
page read and write
|
||
2FD9000
|
unkown
|
page read and write
|
||
1AF46800000
|
unkown
|
page read and write
|
||
7FF5773F4000
|
unkown
|
page readonly
|
||
2EE0000
|
heap default
|
page read and write
|
||
1941E675000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
1941E800000
|
unkown
|
page write copy
|
||
CB5000
|
heap default
|
page read and write
|
||
1B11660D000
|
unkown
|
page read and write
|
||
1941E613000
|
unkown
|
page read and write
|
||
5161000
|
unkown
|
page read and write
|
||
1AF4686A000
|
unkown
|
page read and write
|
||
1941E66C000
|
unkown
|
page read and write
|
||
7FF57731B000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2A85000
|
unkown
|
page readonly
|
||
7FF5E4699000
|
unkown
|
page readonly
|
||
7FF5E4661000
|
unkown
|
page readonly
|
||
4DC3000
|
unkown
|
page read and write
|
||
2150000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
2950000
|
unkown
|
page read and write
|
||
4940000
|
unkown
|
page readonly
|
||
4DCC000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
31E0000
|
unkown
|
page read and write
|
||
2C41000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
21E5000
|
unkown
|
page readonly
|
||
1AF46868000
|
unkown
|
page read and write
|
||
2FD9000
|
unkown
|
page read and write
|
||
4D4F000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF576B2E000
|
unkown
|
page readonly
|
||
4DCC000
|
unkown
|
page read and write
|
||
2167000
|
unkown
|
page readonly
|
||
545000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2FCD000
|
unkown
|
page read and write
|
||
4FE0000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2AB5000
|
unkown
|
page readonly
|
||
7FF56BB03000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
537E000
|
unkown
|
page read and write
|
||
219B000
|
unkown
|
page readonly
|
||
2ED0000
|
unkown
|
page read and write
|
||
7FF56BBBD000
|
unkown
|
page readonly
|
||
4D80000
|
unkown
|
page read and write
|
||
3670000
|
unkown
|
page readonly
|
||
2C19000
|
unkown
|
page readonly
|
||
7FF56BA43000
|
unkown
|
page readonly
|
||
5132000
|
heap private
|
page read and write
|
||
7FF5772FA000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2F5D000
|
unkown
|
page read and write
|
||
7FF5E4748000
|
unkown
|
page readonly
|
||
2AE2000
|
unkown
|
page readonly
|
||
7FF5E484B000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
513C000
|
heap private
|
page read and write
|
||
1AF46813000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2B35000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
1AF46902000
|
unkown
|
page read and write
|
||
2970000
|
heap private
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
4DC8000
|
unkown
|
page read and write
|
||
3060000
|
heap private
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2FD3000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF5E488A000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF5E4665000
|
unkown
|
page readonly
|
||
7FF5E44FC000
|
unkown
|
page readonly
|
||
1AF465A0000
|
heap private
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF56BC24000
|
unkown
|
page readonly
|
||
7FF56BC32000
|
unkown
|
page readonly
|
||
4FC4000
|
heap private
|
page read and write
|
||
2ABF000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2B4C000
|
unkown
|
page readonly
|
||
32A0000
|
unkown
|
page execute and read and write
|
||
1FAB000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
4C81000
|
unkown
|
page read and write
|
||
1B446FE000
|
unkown
|
page read and write
|
||
2A6B000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF56BB84000
|
unkown
|
page readonly
|
||
1AF46730000
|
unkown
|
page readonly
|
||
2FCD000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2CD3000
|
unkown
|
page readonly
|
||
7FF57730A000
|
unkown
|
page readonly
|
||
7FF56B906000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2F6B000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
29D0000
|
heap default
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
29D5000
|
heap default
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
A0F000
|
unkown
|
page read and write
|
||
7FF5771A0000
|
unkown
|
page readonly
|
||
1941E629000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2FD9000
|
unkown
|
page read and write
|
||
2B73000
|
heap default
|
page read and write
|
||
2F5D000
|
unkown
|
page read and write
|
||
1B116602000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2F97000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
25A0000
|
unkown
|
page readonly
|
||
1B448FF000
|
unkown
|
page read and write
|
||
728A0000
|
unkown image
|
page readonly
|
||
1AF46600000
|
heap default
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
4DC3000
|
unkown
|
page read and write
|
||
549000
|
unkown
|
page read and write
|
||
1AF46900000
|
unkown
|
page read and write
|
||
19420010000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
216F000
|
unkown
|
page readonly
|
||
33E0000
|
heap default
|
page read and write
|
||
6FC000
|
stack
|
page read and write
|
||
2988000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2F6E000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2956000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7E4FB8B000
|
unkown
|
page read and write
|
||
2A6C000
|
unkown
|
page readonly
|
||
7FF56BC2A000
|
unkown
|
page readonly
|
||
D00000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF5E4931000
|
unkown
|
page readonly
|
||
2C3F000
|
unkown
|
page readonly
|
||
2F9E000
|
unkown
|
page read and write
|
||
7FF5E483A000
|
unkown
|
page readonly
|
||
3000000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2FE0000
|
unkown
|
page readonly
|
||
3190000
|
heap private
|
page read and write
|
||
3403000
|
heap default
|
page read and write
|
||
2910000
|
unkown
|
page readonly
|
||
2C10000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF5E4517000
|
unkown
|
page readonly
|
||
2726000
|
unkown
|
page read and write
|
||
8CBA179000
|
unkown
|
page read and write
|
||
53BF000
|
stack
|
page read and write
|
||
2B63000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
4DC6000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
1AF46856000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF5E486F000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
1B116B00000
|
unkown
|
page read and write
|
||
2FB5000
|
unkown
|
page read and write
|
||
2C2D000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2FD9000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CFE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
1941E658000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
36C0000
|
unkown
|
page readonly
|
||
31A0000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
3680000
|
unkown
|
page readonly
|
||
2FD9000
|
unkown
|
page read and write
|
||
2920000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
4E80000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
3FF000
|
unkown
|
page read and write
|
||
1B116611000
|
unkown
|
page read and write
|
||
1AF46829000
|
unkown
|
page read and write
|
||
21E1000
|
unkown
|
page readonly
|
||
2159000
|
unkown
|
page readonly
|
||
2196000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2C56000
|
unkown
|
page readonly
|
||
7FF5E4894000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
21F4000
|
unkown
|
page readonly
|
||
7FF56BBA8000
|
unkown
|
page readonly
|
||
28D6000
|
unkown
|
page readonly
|
||
2FD9000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
1941E642000
|
unkown
|
page read and write
|
||
4C81000
|
unkown
|
page read and write
|
||
4DCC000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF5E48B1000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
2FC7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
8CBA07E000
|
unkown
|
page read and write
|
||
4E30000
|
heap private
|
page read and write
|
||
7FF5772A6000
|
unkown
|
page readonly
|
||
28FE000
|
unkown
|
page readonly
|
||
272A000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2BDA000
|
unkown
|
page readonly
|
||
4DCA000
|
unkown
|
page read and write
|
||
3070000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
1941E66F000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
1AF4686C000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2FD9000
|
unkown
|
page read and write
|
||
728BD000
|
unkown image
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
8CB9C7D000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
1AF4686C000
|
unkown
|
page read and write
|
||
2FAF000
|
unkown
|
page read and write
|
||
1AF46913000
|
unkown
|
page read and write
|
||
1B116580000
|
heap default
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF56BC31000
|
unkown
|
page readonly
|
||
5151000
|
unkown
|
page read and write
|
||
7FF5E47E0000
|
unkown
|
page readonly
|
||
4640000
|
unkown
|
page read and write
|
||
7FF577364000
|
unkown
|
page readonly
|
||
2C50000
|
unkown
|
page readonly
|
||
2F6E000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF56B8FB000
|
unkown
|
page readonly
|
||
2C33000
|
unkown
|
page readonly
|
||
CB0000
|
heap default
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2FA3000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2BFC000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2972000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
5150000
|
unkown
|
page read and write
|
||
211A000
|
unkown
|
page readonly
|
||
2F9C000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
1B116700000
|
unkown
|
page read and write
|
||
50E0000
|
unkown
|
page read and write
|
||
2109000
|
unkown
|
page readonly
|
||
4DCD000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
D20000
|
unkown
|
page read and write
|
||
1AF4686C000
|
unkown
|
page read and write
|
||
728BF000
|
unkown image
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
7E500F9000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2FCD000
|
unkown
|
page read and write
|
||
4B39F000
|
unkown
|
page read and write
|
||
5250000
|
unkown
|
page readonly
|
||
7FF56B965000
|
unkown
|
page readonly
|
||
2977000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2F6B000
|
unkown
|
page read and write
|
||
2F8A000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2B44000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
28E9000
|
unkown
|
page readonly
|
||
1AF466E0000
|
unkown
|
page write copy
|
||
7FF5772FC000
|
unkown
|
page readonly
|
||
2F9C000
|
unkown
|
page read and write
|
||
2ACF000
|
unkown
|
page readonly
|
||
7FF5E450F000
|
unkown
|
page readonly
|
||
38C0000
|
unkown
|
page readonly
|
||
2990000
|
unkown
|
page readonly
|
||
7FF56BB45000
|
unkown
|
page readonly
|
||
2FC1000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
C6F000
|
stack
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
4C80000
|
unkown
|
page read and write
|
||
2F54000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
1B4467B000
|
unkown
|
page read and write
|
||
2F66000
|
unkown
|
page read and write
|
||
7E4FF7B000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2A8C000
|
unkown
|
page readonly
|
||
25DF000
|
unkown
|
page read and write
|
||
7FF5E4932000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2113000
|
unkown
|
page readonly
|
||
2A60000
|
unkown
|
page readonly
|
||
1B116628000
|
unkown
|
page read and write
|
||
7E5007F000
|
unkown
|
page read and write
|
||
4F70000
|
unkown
|
page read and write
|
||
2F91000
|
unkown
|
page read and write
|
||
2B31000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF56BB94000
|
unkown
|
page readonly
|
||
1941E700000
|
unkown
|
page read and write
|
||
212D000
|
unkown
|
page readonly
|
||
2202000
|
unkown
|
page readonly
|
||
7FF56BA21000
|
unkown
|
page readonly
|
||
5070000
|
unkown
|
page readonly
|
||
3100000
|
heap private
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
4634000
|
heap private
|
page read and write
|
||
2F5F000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2A9D000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF56B7FC000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
9A2000
|
stack
|
page read and write
|
||
C5E000
|
unkown
|
page read and write
|
||
3030000
|
unkown
|
page readonly
|
||
4DC9000
|
unkown
|
page read and write
|
||
2F68000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
3198000
|
heap private
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF5E48B6000
|
unkown
|
page readonly
|
||
7E4FEFF000
|
unkown
|
page read and write
|
||
4DC3000
|
unkown
|
page read and write
|
||
2FD9000
|
unkown
|
page read and write
|
||
2FD9000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF56B817000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2980000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
1FEA000
|
unkown
|
page readonly
|
||
2C25000
|
unkown
|
page readonly
|
||
700000
|
unkown
|
page readonly
|
||
2192000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2BC9000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF5E473B000
|
unkown
|
page readonly
|
||
2135000
|
unkown
|
page readonly
|
||
24DC000
|
unkown
|
page read and write
|
||
4EBF000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2FD9000
|
unkown
|
page read and write
|
||
728A0000
|
unkown image
|
page readonly
|
||
1B116702000
|
unkown
|
page read and write
|
||
2FC7000
|
unkown
|
page read and write
|
||
1AF4686C000
|
unkown
|
page read and write
|
||
7FF56B961000
|
unkown
|
page readonly
|
||
3280000
|
unkown
|
page read and write
|
||
251B000
|
unkown
|
page read and write
|
||
2213000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF56BAE0000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF56BA3B000
|
unkown
|
page readonly
|
||
1941E850000
|
unkown
|
page readonly
|
||
2B52000
|
unkown
|
page readonly
|
||
2CA1000
|
unkown
|
page readonly
|
||
3260000
|
unkown
|
page readonly
|
||
A0B000
|
unkown
|
page read and write
|
||
728BA000
|
unkown image
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
4B39F000
|
unkown
|
page read and write
|
||
8CB9F7F000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2B00000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
2C3A000
|
unkown
|
page readonly
|
||
4D50000
|
unkown
|
page readonly
|
||
7FF56BA48000
|
unkown
|
page readonly
|
||
4650000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CE0000
|
unkown
|
page readonly
|
||
7FF56B80F000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF5E48BD000
|
unkown
|
page readonly
|
||
2165000
|
unkown
|
page readonly
|
||
7FF576B26000
|
unkown
|
page readonly
|
||
7FF5E4857000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
2FC1000
|
unkown
|
page read and write
|
||
7FF5E4878000
|
unkown
|
page readonly
|
||
7FF5E489E000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2FDB000
|
unkown
|
page read and write
|
||
4B280000
|
unkown
|
page read and write
|
||
1AF46610000
|
unkown
|
page readonly
|
||
5100000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2FC1000
|
unkown
|
page read and write
|
||
3A0000
|
unkown
|
page execute and read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
5138000
|
heap private
|
page read and write
|
||
1B116613000
|
unkown
|
page read and write
|
||
28EB000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF56BB3E000
|
unkown
|
page readonly
|
||
2FD9000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2FCD000
|
unkown
|
page read and write
|
||
2AAA000
|
unkown
|
page readonly
|
||
1B447F9000
|
unkown
|
page read and write
|
||
2FD3000
|
unkown
|
page read and write
|
||
2CC8000
|
unkown
|
page readonly
|
||
1B44879000
|
unkown
|
page read and write
|
||
7FF5E4924000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
5138000
|
heap private
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
1AF4683F000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2BCC000
|
unkown
|
page readonly
|
||
3010000
|
unkown
|
page readonly
|
||
2800000
|
unkown
|
page readonly
|
||
7E4FFFA000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2BD3000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2FB5000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2F68000
|
unkown
|
page read and write
|
||
329F000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF5E483E000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
25F0000
|
unkown
|
page read and write
|
||
2F62000
|
unkown
|
page read and write
|
||
1AF482A0000
|
unkown
|
page readonly
|
||
350000
|
heap default
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2FA2000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
36A0000
|
unkown
|
page read and write
|
||
1AF46868000
|
unkown
|
page read and write
|
||
728A0000
|
unkown image
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
19420470000
|
unkown
|
page read and write
|
||
7FF5E48AE000
|
unkown
|
page readonly
|
||
1941E66D000
|
unkown
|
page read and write
|
||
C9F000
|
stack
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
4B39B000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
1941E66D000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2C27000
|
unkown
|
page readonly
|
||
7FF56BB4B000
|
unkown
|
page readonly
|
||
2F5F000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
728BF000
|
unkown image
|
page readonly
|
||
7FF5E48A8000
|
unkown
|
page readonly
|
||
4DCC000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
4470000
|
unkown
|
page read and write
|
||
7FF5E4840000
|
unkown
|
page readonly
|
||
2AA0000
|
unkown
|
page readonly
|
||
2FCD000
|
unkown
|
page read and write
|
||
4DCF000
|
unkown
|
page read and write
|
||
1B116715000
|
unkown
|
page read and write
|
||
728BA000
|
unkown image
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
217A000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2FBB000
|
unkown
|
page read and write
|
||
3240000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
830000
|
heap default
|
page read and write
|
||
2ACA000
|
unkown
|
page readonly
|
||
25E0000
|
unkown
|
page execute and read and write
|
||
7FF56B39D000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page readonly
|
||
31E4000
|
unkown
|
page read and write
|
||
2208000
|
unkown
|
page readonly
|
||
213C000
|
unkown
|
page readonly
|
||
9F0000
|
unkown
|
page read and write
|
||
340000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
32E0000
|
unkown
|
page read and write
|
||
2181000
|
unkown
|
page readonly
|
||
7FF5E4743000
|
unkown
|
page readonly
|
||
2FCD000
|
unkown
|
page read and write
|
||
7FF577347000
|
unkown
|
page readonly
|
||
7FF56B80A000
|
unkown
|
page readonly
|
||
2940000
|
unkown
|
page readonly
|
||
319C000
|
heap private
|
page read and write
|
||
7FF5E4606000
|
unkown
|
page readonly
|
||
2ABD000
|
unkown
|
page readonly
|
||
1B116A13000
|
unkown
|
page read and write
|
||
96C000
|
unkown
|
page read and write
|
||
1B116B13000
|
unkown
|
page read and write
|
||
2AB7000
|
unkown
|
page readonly
|
||
217F000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
4C81000
|
unkown
|
page read and write
|
||
7FF5773FA000
|
unkown
|
page readonly
|
||
330000
|
unkown
|
page read and write
|
||
2F6B000
|
unkown
|
page read and write
|
||
7FF5E486C000
|
unkown
|
page readonly
|
||
2040000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
36B0000
|
heap private
|
page read and write
|
||
2F66000
|
unkown
|
page read and write
|
||
2A61000
|
unkown
|
page readonly
|
||
4F74000
|
unkown
|
page read and write
|
||
7E4FE7E000
|
unkown
|
page read and write
|
||
2F6E000
|
unkown
|
page read and write
|
||
2B50000
|
heap default
|
page read and write
|
||
2FB5000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF57733F000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
1941E602000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
5110000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2FC7000
|
unkown
|
page read and write
|
||
7FF5E4845000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF5E48B9000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
4DCA000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
25B0000
|
unkown
|
page readonly
|
||
7FF56BBAE000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
1B116B02000
|
unkown
|
page read and write
|
||
50F0000
|
unkown
|
page readonly
|
||
4B39B000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
216D000
|
unkown
|
page readonly
|
||
3066000
|
heap private
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2AA9000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF56BB6F000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
1941E530000
|
unkown
|
page readonly
|
||
3305000
|
heap default
|
page read and write
|
||
2FD3000
|
unkown
|
page read and write
|
||
7FF57708F000
|
unkown
|
page readonly
|
||
1941E713000
|
unkown
|
page read and write
|
||
2FC7000
|
unkown
|
page read and write
|
||
214C000
|
unkown
|
page readonly
|
||
2EE8000
|
heap default
|
page read and write
|
||
39E000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
7FF5772D3000
|
unkown
|
page readonly
|
||
728BD000
|
unkown image
|
page read and write
|
||
7FF57738D000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2F6E000
|
unkown
|
page read and write
|
||
B2E000
|
stack
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2FC7000
|
unkown
|
page read and write
|
||
852000
|
heap default
|
page read and write
|
||
8CB9E7E000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF577310000
|
unkown
|
page readonly
|
||
1941E4C0000
|
heap private
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
3690000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF56BB9E000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2FE0000
|
unkown
|
page read and write
|
||
2FB5000
|
unkown
|
page read and write
|
||
3030000
|
unkown
|
page read and write
|
||
7FF5E47E2000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF577401000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF577386000
|
unkown
|
page readonly
|
||
7FF5E4803000
|
unkown
|
page readonly
|
||
83B000
|
heap default
|
page read and write
|
||
2143000
|
unkown
|
page readonly
|
||
1941E520000
|
heap default
|
page read and write
|
||
4D0E000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2DA0000
|
unkown
|
page readonly
|
||
2F68000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2EC0000
|
unkown
|
page readonly
|
||
7FF56BB3A000
|
unkown
|
page readonly
|
||
CB7000
|
unkown
|
page read and write
|
||
1B116600000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2FBB000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
4E7E000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
3310000
|
unkown
|
page readonly
|
||
7FF56BB8A000
|
unkown
|
page readonly
|
||
2FA2000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
7FF5E450A000
|
unkown
|
page readonly
|
||
1B116723000
|
heap private
|
page read and write
|
||
2FAF000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
4FC0000
|
heap private
|
page read and write
|
||
2930000
|
heap private
|
page read and write
|
||
CD0000
|
heap private
|
page read and write
|
||
728A0000
|
unkown image
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2CC2000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
2173000
|
unkown
|
page readonly
|
||
2FC1000
|
unkown
|
page read and write
|
||
1B4497F000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
4DCC000
|
unkown
|
page read and write
|
||
7FF56BAE2000
|
unkown
|
page readonly
|
||
2A5B000
|
unkown
|
page readonly
|
||
7FF57735A000
|
unkown
|
page readonly
|
||
2FC7000
|
unkown
|
page read and write
|
||
7FF56BBB1000
|
unkown
|
page readonly
|
||
2CB4000
|
unkown
|
page readonly
|
||
2FD9000
|
unkown
|
page read and write
|
||
7FF5E4721000
|
unkown
|
page readonly
|
||
315E000
|
unkown
|
page read and write
|
||
2EAF000
|
stack
|
page read and write
|
||
7FF5E45FB000
|
unkown
|
page readonly
|
||
2AC3000
|
unkown
|
page readonly
|
||
CBE000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
728A0000
|
unkown image
|
page readonly
|
||
2F96000
|
unkown
|
page read and write
|
||
CB7000
|
unkown
|
page read and write
|
||
2FD9000
|
unkown
|
page read and write
|
||
A2F000
|
stack
|
page read and write
|
||
4DCC000
|
unkown
|
page read and write
|
||
1B116A02000
|
unkown
|
page read and write
|
||
7FF5E4884000
|
unkown
|
page readonly
|
||
2CD3000
|
unkown
|
page readonly
|
||
53B0000
|
heap private
|
page read and write
|
||
1AF4686A000
|
unkown
|
page read and write
|
||
2B5A000
|
heap default
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
210C000
|
unkown
|
page readonly
|
||
2BF5000
|
unkown
|
page readonly
|
||
7FF56B999000
|
unkown
|
page readonly
|
||
2F9C000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
2FBB000
|
unkown
|
page read and write
|
||
CBE000
|
unkown
|
page read and write
|
||
728A0000
|
unkown image
|
page readonly
|
||
4DCA000
|
unkown
|
page read and write
|
||
DD5000
|
unkown
|
page readonly
|
||
7FF56BB78000
|
unkown
|
page readonly
|
There are 821 hidden memdumps, click here to show them.