Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\c63f1121_by_Libranalysis.dll,Dark@@4
|
 |
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\c63f1121_by_Libranalysis.dll',#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\c63f1121_by_Libranalysis.dll,Schoolpress@@8
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\c63f1121_by_Libranalysis.dll,Triangleart@@8
|
|
|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\c63f1121_by_Libranalysis.dll'
|
 |
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\c63f1121_by_Libranalysis.dll',#1
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
6D577000
|
unkown image
|
page read and write
|
|
|
|
7FF55C0CA000
|
unkown
|
page readonly
|
|
|
|
2F53000
|
unkown
|
page readonly
|
|
|
|
2EAF000
|
unkown
|
page readonly
|
|
|
|
5B19000
|
unkown
|
page readonly
|
|
|
|
2EB3000
|
unkown
|
page readonly
|
|
|
|
5B12000
|
unkown
|
page readonly
|
|
|
|
E22000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page readonly
|
|
|
|
6D577000
|
unkown image
|
page read and write
|
|
|
|
2D80000
|
unkown
|
page readonly
|
|
|
|
2859882A000
|
unkown
|
page read and write
|
|
|
|
7FF55B7D4000
|
unkown
|
page readonly
|
|
|
|
5785000
|
unkown
|
page readonly
|
|
|
|
2E83000
|
unkown
|
page readonly
|
|
|
|
5884000
|
unkown
|
page readonly
|
|
|
|
2EA5000
|
unkown
|
page readonly
|
|
|
|
2E83000
|
unkown
|
page readonly
|
|
|
|
28598913000
|
unkown
|
page read and write
|
|
|
|
6D574000
|
unkown image
|
page read and write
|
|
|
|
6D503000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown
|
page readonly
|
|
|
|
2E8C000
|
unkown
|
page readonly
|
|
|
|
2F53000
|
unkown
|
page readonly
|
|
|
|
2F48000
|
unkown
|
page readonly
|
|
|
|
2CF0000
|
unkown
|
page readonly
|
|
|
|
2E8C000
|
unkown
|
page readonly
|
|
|
|
2F42000
|
unkown
|
page readonly
|
|
|
|
2F3C000
|
unkown
|
page readonly
|
|
|
|
53F6000
|
unkown
|
page readonly
|
|
|
|
2E34000
|
unkown
|
page readonly
|
|
|
|
6D574000
|
unkown image
|
page read and write
|
|
|
|
2CE6000
|
unkown
|
page readonly
|
|
|
|
58F0000
|
unkown
|
page readonly
|
|
|
|
2EDB000
|
unkown
|
page readonly
|
|
|
|
7FF55C1C2000
|
unkown
|
page readonly
|
|
|
|
2ED2000
|
unkown
|
page readonly
|
|
|
|
5B92000
|
unkown
|
page readonly
|
|
|
|
6D505000
|
unkown image
|
page read and write
|
|
|
|
4AC0000
|
unkown
|
page readonly
|
|
|
|
6D501000
|
unkown image
|
page execute read
|
|
|
|
2ED2000
|
unkown
|
page readonly
|
|
|
|
6D588000
|
unkown image
|
page read and write
|
|
|
|
170000
|
unkown
|
page readonly
|
|
|
|
2E5A000
|
unkown
|
page readonly
|
|
|
|
5990000
|
unkown
|
page readonly
|
|
|
|
6D500000
|
unkown image
|
page readonly
|
|
|
|
5B16000
|
unkown
|
page readonly
|
|
|
|
2EA7000
|
unkown
|
page readonly
|
|
|
|
6D500000
|
unkown image
|
page readonly
|
|
|
|
2D80000
|
unkown
|
page readonly
|
|
|
|
2E7C000
|
unkown
|
page readonly
|
|
|
|
4BBF000
|
unkown
|
page read and write
|
|
|
|
4C3F000
|
unkown
|
page read and write
|
|
|
|
2F53000
|
unkown
|
page readonly
|
|
|
|
2EB3000
|
unkown
|
page readonly
|
|
|
|
6D55E000
|
unkown image
|
page readonly
|
|
|
|
7FF55C0BC000
|
unkown
|
page readonly
|
|
|
|
7FF55C0E7000
|
unkown
|
page readonly
|
|
|
|
2ED2000
|
unkown
|
page readonly
|
|
|
|
4E74000
|
unkown
|
page readonly
|
|
|
|
6F0000
|
heap default
|
page read and write
|
|
|
|
6D500000
|
unkown image
|
page readonly
|
|
|
|
6D500000
|
unkown image
|
page readonly
|
|
|
|
D7D000
|
unkown
|
page read and write
|
|
|
|
7FF55C0DB000
|
unkown
|
page readonly
|
|
|
|
28598790000
|
unkown
|
page readonly
|
|
|
|
5179000
|
unkown
|
page readonly
|
|
|
|
556C000
|
unkown
|
page readonly
|
|
|
|
2EDB000
|
unkown
|
page readonly
|
|
|
|
3360000
|
heap default
|
page read and write
|
|
|
|
6D500000
|
unkown image
|
page readonly
|
|
|
|
9D0000
|
unkown
|
page readonly
|
|
|
|
5970000
|
unkown
|
page readonly
|
|
|
|
2E5A000
|
unkown
|
page readonly
|
|
|
|
6D55E000
|
unkown image
|
page readonly
|
|
|
|
285987A0000
|
unkown
|
page read and write
|
|
|
|
2859887B000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
5A50000
|
unkown
|
page readonly
|
|
|
|
4E9B000
|
unkown
|
page readonly
|
|
|
|
537F000
|
unkown
|
page readonly
|
|
|
|
2E7C000
|
unkown
|
page readonly
|
|
|
|
5C00000
|
unkown
|
page readonly
|
|
|
|
A1AB177000
|
unkown
|
page read and write
|
|
|
|
6D55E000
|
unkown image
|
page readonly
|
|
|
|
5802000
|
unkown
|
page readonly
|
|
|
|
6D55E000
|
unkown image
|
page readonly
|
|
|
|
7FF55C03C000
|
unkown
|
page readonly
|
|
|
|
6D588000
|
unkown image
|
page read and write
|
|
|
|
28599540000
|
unkown
|
page readonly
|
|
|
|
7FF55C1B4000
|
unkown
|
page readonly
|
|
|
|
5BAD000
|
unkown
|
page readonly
|
|
|
|
5964000
|
unkown
|
page readonly
|
|
|
|
140000
|
unkown
|
page read and write
|
|
|
|
57D2000
|
unkown
|
page readonly
|
|
|
|
606E000
|
unkown
|
page read and write
|
|
|
|
7FF55C146000
|
unkown
|
page readonly
|
|
|
|
4E0000
|
heap default
|
page read and write
|
|
|
|
2EA5000
|
unkown
|
page readonly
|
|
|
|
7FF55C0BA000
|
unkown
|
page readonly
|
|
|
|
3320000
|
unkown
|
page readonly
|
|
|
|
1210000
|
heap default
|
page read and write
|
|
|
|
2CF0000
|
unkown
|
page readonly
|
|
|
|
2F25000
|
unkown
|
page readonly
|
|
|
|
2E52000
|
unkown
|
page readonly
|
|
|
|
57B5000
|
unkown
|
page readonly
|
|
|
|
51BF000
|
unkown
|
page read and write
|
|
|
|
2F34000
|
unkown
|
page readonly
|
|
|
|
6D50F000
|
unkown image
|
page execute read
|
|
|
|
347A000
|
heap default
|
page read and write
|
|
|
|
2F21000
|
unkown
|
page readonly
|
|
|
|
2E83000
|
unkown
|
page readonly
|
|
|
|
2EBF000
|
unkown
|
page readonly
|
|
|
|
5232000
|
unkown
|
page readonly
|
|
|
|
6D500000
|
unkown image
|
page readonly
|
|
|
|
2EB3000
|
unkown
|
page readonly
|
|
|
|
3770000
|
unkown
|
page readonly
|
|
|
|
28598710000
|
heap private
|
page read and write
|
|
|
|
5C97000
|
unkown
|
page readonly
|
|
|
|
6D55E000
|
unkown image
|
page readonly
|
|
|
|
1C0000
|
unkown
|
page readonly
|
|
|
|
53FC000
|
unkown
|
page readonly
|
|
|
|
28599200000
|
unkown
|
page readonly
|
|
|
|
5C42000
|
unkown
|
page readonly
|
|
|
|
2EAD000
|
unkown
|
page readonly
|
|
|
|
2E34000
|
unkown
|
page readonly
|
|
|
|
2E49000
|
unkown
|
page readonly
|
|
|
|
51D9000
|
unkown
|
page readonly
|
|
|
|
2EA7000
|
unkown
|
page readonly
|
|
|
|
7FF55C12F000
|
unkown
|
page readonly
|
|
|
|
2E75000
|
unkown
|
page readonly
|
|
|
|
5B1D000
|
unkown
|
page readonly
|
|
|
|
5B30000
|
unkown
|
page readonly
|
|
|
|
7FF55C1C1000
|
unkown
|
page readonly
|
|
|
|
160000
|
unkown
|
page readonly
|
|
|
|
A1AB27E000
|
unkown
|
page read and write
|
|
|
|
2E34000
|
unkown
|
page readonly
|
|
|
|
6D50E000
|
unkown image
|
page readonly
|
|
|
|
2E4C000
|
unkown
|
page readonly
|
|
|
|
598B000
|
unkown
|
page readonly
|
|
|
|
57A2000
|
unkown
|
page readonly
|
|
|
|
5A00000
|
unkown
|
page readonly
|
|
|
|
2EC1000
|
unkown
|
page readonly
|
|
|
|
65A0000
|
unkown
|
page read and write
|
|
|
|
2EA5000
|
unkown
|
page readonly
|
|
|
|
51A9000
|
unkown
|
page readonly
|
|
|
|
6D500000
|
unkown image
|
page readonly
|
|
|
|
6D574000
|
unkown image
|
page read and write
|
|
|
|
3190000
|
unkown
|
page readonly
|
|
|
|
5C72000
|
unkown
|
page readonly
|
|
|
|
2F42000
|
unkown
|
page readonly
|
|
|
|
5972000
|
unkown
|
page readonly
|
|
|
|
2EA7000
|
unkown
|
page readonly
|
|
|
|
6D506000
|
unkown image
|
page readonly
|
|
|
|
5B62000
|
unkown
|
page readonly
|
|
|
|
7FF55C1BA000
|
unkown
|
page readonly
|
|
|
|
58A2000
|
unkown
|
page readonly
|
|
|
|
2E52000
|
unkown
|
page readonly
|
|
|
|
5BD0000
|
unkown
|
page readonly
|
|
|
|
5EE000
|
unkown
|
page read and write
|
|
|
|
58A4000
|
unkown
|
page readonly
|
|
|
|
6D58A000
|
unkown image
|
page readonly
|
|
|
|
2E90000
|
unkown
|
page readonly
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
2E52000
|
unkown
|
page readonly
|
|
|
|
F39000
|
unkown
|
page read and write
|
|
|
|
2ED6000
|
unkown
|
page readonly
|
|
|
|
2EBA000
|
unkown
|
page readonly
|
|
|
|
650000
|
unkown
|
page readonly
|
|
|
|
9C0000
|
heap private
|
page read and write
|
|
|
|
28598800000
|
unkown
|
page read and write
|
|
|
|
339000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page readonly
|
|
|
|
2EAF000
|
unkown
|
page readonly
|
|
|
|
7FF55C034000
|
unkown
|
page readonly
|
|
|
|
2E4C000
|
unkown
|
page readonly
|
|
|
|
4E82000
|
unkown
|
page readonly
|
|
|
|
A1AB37C000
|
unkown
|
page read and write
|
|
|
|
5239000
|
unkown
|
page readonly
|
|
|
|
4BFE000
|
unkown
|
page read and write
|
|
|
|
CCD000
|
unkown
|
page read and write
|
|
|
|
4E94000
|
unkown
|
page readonly
|
|
|
|
2E75000
|
unkown
|
page readonly
|
|
|
|
28598770000
|
heap default
|
page read and write
|
|
|
|
1E0000
|
heap private
|
page read and write
|
|
|
|
4D3E000
|
unkown
|
page read and write
|
|
|
|
28598855000
|
unkown
|
page read and write
|
|
|
|
5C67000
|
unkown
|
page readonly
|
|
|
|
2ED6000
|
unkown
|
page readonly
|
|
|
|
7FF55C13E000
|
unkown
|
page readonly
|
|
|
|
2EB3000
|
unkown
|
page readonly
|
|
|
|
12FB000
|
heap default
|
page read and write
|
|
|
|
2E4C000
|
unkown
|
page readonly
|
|
|
|
2E4C000
|
unkown
|
page readonly
|
|
|
|
6D500000
|
unkown image
|
page readonly
|
|
|
|
5255000
|
unkown
|
page readonly
|
|
|
|
2F42000
|
unkown
|
page readonly
|
|
|
|
33D000
|
unkown
|
page read and write
|
|
|
|
594B000
|
unkown
|
page readonly
|
|
|
|
E1E000
|
unkown
|
page read and write
|
|
|
|
5C40000
|
unkown
|
page readonly
|
|
|
|
51C5000
|
unkown
|
page readonly
|
|
|
|
7FF55C149000
|
unkown
|
page readonly
|
|
|
|
2EBF000
|
unkown
|
page readonly
|
|
|
|
3570000
|
unkown
|
page readonly
|
|
|
|
2EAF000
|
unkown
|
page readonly
|
|
|
|
7FF55C14D000
|
unkown
|
page readonly
|
|
|
|
5077000
|
unkown
|
page readonly
|
|
|
|
5F2000
|
unkown
|
page read and write
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
7FF55B901000
|
unkown
|
page readonly
|
|
|
|
6D588000
|
unkown image
|
page read and write
|
|
|
|
2CE6000
|
unkown
|
page readonly
|
|
|
|
1020000
|
unkown
|
page readonly
|
|
|
|
2E75000
|
unkown
|
page readonly
|
|
|
|
2CF0000
|
unkown
|
page readonly
|
|
|
|
5AA0000
|
unkown
|
page readonly
|
|
|
|
5797000
|
unkown
|
page readonly
|
|
|
|
2B9000
|
unkown
|
page read and write
|
|
|
|
5047000
|
unkown
|
page readonly
|
|
|
|
2F3C000
|
unkown
|
page readonly
|
|
|
|
610000
|
unkown
|
page readonly
|
|
|
|
28598847000
|
unkown
|
page read and write
|
|
|
|
51A2000
|
unkown
|
page readonly
|
|
|
|
46A000
|
heap default
|
page read and write
|
|
|
|
2ED6000
|
unkown
|
page readonly
|
|
|
|
2F3C000
|
unkown
|
page readonly
|
|
|
|
570000
|
heap default
|
page read and write
|
|
|
|
6588000
|
unkown
|
page read and write
|
|
|
|
2EAD000
|
unkown
|
page readonly
|
|
|
|
F35000
|
unkown
|
page read and write
|
|
|
|
28598870000
|
unkown
|
page read and write
|
|
|
|
2F53000
|
unkown
|
page readonly
|
|
|
|
2EC1000
|
unkown
|
page readonly
|
|
|
|
5209000
|
unkown
|
page readonly
|
|
|
|
1D0000
|
unkown
|
page readonly
|
|
|
|
850000
|
unkown
|
page readonly
|
|
|
|
6D574000
|
unkown image
|
page read and write
|
|
|
|
7FF55C138000
|
unkown
|
page readonly
|
|
|
|
2E5A000
|
unkown
|
page readonly
|
|
|
|
7FF55C0FC000
|
unkown
|
page readonly
|
|
|
|
2F3C000
|
unkown
|
page readonly
|
|
|
|
51F5000
|
unkown
|
page readonly
|
|
|
|
2F21000
|
unkown
|
page readonly
|
|
|
|
7FF55C11A000
|
unkown
|
page readonly
|
|
|
|
6D588000
|
unkown image
|
page read and write
|
|
|
|
6D58A000
|
unkown image
|
page readonly
|
|
|
|
596B000
|
unkown
|
page readonly
|
|
|
|
10F0000
|
unkown
|
page read and write
|
|
|
|
510000
|
heap default
|
page read and write
|
|
|
|
2F34000
|
unkown
|
page readonly
|
|
|
|
2E90000
|
unkown
|
page readonly
|
|
|
|
A1AB07B000
|
unkown
|
page read and write
|
|
|
|
6D58A000
|
unkown image
|
page readonly
|
|
|
|
6D501000
|
unkown image
|
page execute read
|
|
|
|
5772000
|
unkown
|
page readonly
|
|
|
|
58A0000
|
unkown
|
page readonly
|
|
|
|
5952000
|
unkown
|
page readonly
|
|
|
|
6D501000
|
unkown image
|
page execute read
|
|
|
|
7FF55C023000
|
unkown
|
page readonly
|
|
|
|
2E99000
|
unkown
|
page readonly
|
|
|
|
2EC1000
|
unkown
|
page readonly
|
|
|
|
2EAF000
|
unkown
|
page readonly
|
|
|
|
28598908000
|
unkown
|
page read and write
|
|
|
|
1120000
|
unkown
|
page readonly
|
|
|
|
2F21000
|
unkown
|
page readonly
|
|
|
|
2E75000
|
unkown
|
page readonly
|
|
|
|
1100000
|
unkown
|
page readonly
|
|
|
|
6D588000
|
unkown image
|
page read and write
|
|
|
|
7FF55BFB1000
|
unkown
|
page readonly
|
|
|
|
5195000
|
unkown
|
page readonly
|
|
|
|
2E90000
|
unkown
|
page readonly
|
|
|
|
6D58A000
|
unkown image
|
page readonly
|
|
|
|
5932000
|
unkown
|
page readonly
|
|
|
|
7FF55B7CE000
|
unkown
|
page readonly
|
|
|
|
2F34000
|
unkown
|
page readonly
|
|
|
|
5830000
|
unkown
|
page readonly
|
|
|
|
33A0000
|
unkown
|
page read and write
|
|
|
|
2E34000
|
unkown
|
page readonly
|
|
|
|
5B00000
|
unkown
|
page readonly
|
|
|
|
2EA5000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page readonly
|
|
|
|
4D70000
|
unkown
|
page read and write
|
|
|
|
2F53000
|
unkown
|
page readonly
|
|
|
|
3FB000
|
unkown
|
page read and write
|
|
|
|
7FF55BCA5000
|
unkown
|
page readonly
|
|
|
|
45A0000
|
unkown
|
page read and write
|
|
|
|
5565000
|
unkown
|
page readonly
|
|
|
|
5815000
|
unkown
|
page readonly
|
|
|
|
5AC0000
|
unkown
|
page readonly
|
|
|
|
50E7000
|
unkown
|
page readonly
|
|
|
|
57F7000
|
unkown
|
page readonly
|
|
|
|
2F53000
|
unkown
|
page readonly
|
|
|
|
2859884F000
|
unkown
|
page read and write
|
|
|
|
2F48000
|
unkown
|
page readonly
|
|
|
|
2E7C000
|
unkown
|
page readonly
|
|
|
|
7FF55BC90000
|
unkown
|
page readonly
|
|
|
|
4E7B000
|
unkown
|
page readonly
|
|
|
|
2E49000
|
unkown
|
page readonly
|
|
|
|
12F0000
|
heap default
|
page read and write
|
|
|
|
5CF0000
|
unkown
|
page readonly
|
|
|
|
5827000
|
unkown
|
page readonly
|
|
|
|
A1AAB1B000
|
unkown
|
page read and write
|
|
|
|
7FF55C01D000
|
unkown
|
page readonly
|
|
|
|
A1AAE7D000
|
unkown
|
page read and write
|
|
|
|
6190000
|
unkown
|
page read and write
|
|
|
|
6D501000
|
unkown image
|
page execute read
|
|
|
|
3BC000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
unkown
|
page readonly
|
|
|
|
2F25000
|
unkown
|
page readonly
|
|
|
|
740000
|
unkown
|
page readonly
|
|
|
|
2D80000
|
unkown
|
page readonly
|
|
|
|
2F53000
|
unkown
|
page readonly
|
|
|
|
57C7000
|
unkown
|
page readonly
|
|
|
|
D70000
|
unkown
|
page readonly
|
|
|
|
28598902000
|
unkown
|
page read and write
|
|
|
|
5022000
|
unkown
|
page readonly
|
|
|
|
2EDB000
|
unkown
|
page readonly
|
|
|
|
2859883C000
|
unkown
|
page read and write
|
|
|
|
2EA7000
|
unkown
|
page readonly
|
|
|
|
7FF55C124000
|
unkown
|
page readonly
|
|
|
|
28599002000
|
unkown
|
page read and write
|
|
|
|
7FF55BFCE000
|
unkown
|
page readonly
|
|
|
|
2CF0000
|
unkown
|
page readonly
|
|
|
|
3340000
|
heap private
|
page read and write
|
|
|
|
DBB000
|
unkown
|
page read and write
|
|
|
|
2F25000
|
unkown
|
page readonly
|
|
|
|
7FF55BF73000
|
unkown
|
page readonly
|
|
|
|
2F53000
|
unkown
|
page readonly
|
|
|
|
6D500000
|
unkown image
|
page readonly
|
|
|
|
6D503000
|
unkown image
|
page readonly
|
|
|
|
2E99000
|
unkown
|
page readonly
|
|
|
|
2ED2000
|
unkown
|
page readonly
|
|
|
|
2F25000
|
unkown
|
page readonly
|
|
|
|
5880000
|
unkown
|
page readonly
|
|
|
|
5172000
|
unkown
|
page readonly
|
|
|
|
2EDB000
|
unkown
|
page readonly
|
|
|
|
75A000
|
heap default
|
page read and write
|
|
|
|
2E99000
|
unkown
|
page readonly
|
|
|
|
2E49000
|
unkown
|
page readonly
|
|
|
|
5944000
|
unkown
|
page readonly
|
|
|
|
2BD000
|
unkown
|
page read and write
|
|
|
|
6D577000
|
unkown image
|
page read and write
|
|
|
|
51A000
|
heap default
|
page read and write
|
|
|
|
5BB0000
|
unkown
|
page readonly
|
|
|
|
2EBA000
|
unkown
|
page readonly
|
|
|
|
140000
|
unkown
|
page read and write
|
|
|
|
28598AD0000
|
unkown
|
page readonly
|
|
|
|
2F42000
|
unkown
|
page readonly
|
|
|
|
28598900000
|
unkown
|
page read and write
|
|
|
|
7FF55C0D0000
|
unkown
|
page readonly
|
|
|
|
28598813000
|
unkown
|
page read and write
|
|
|
|
2F48000
|
unkown
|
page readonly
|
|
|
|
28598A00000
|
unkown
|
page readonly
|
|
|
|
6D500000
|
unkown image
|
page readonly
|
|
|
|
2E99000
|
unkown
|
page readonly
|
|
|
|
2CE6000
|
unkown
|
page readonly
|
|
|
|
7FF55C0FF000
|
unkown
|
page readonly
|
|
|
|
750000
|
heap default
|
page read and write
|
|
|
|
5829000
|
unkown
|
page readonly
|
|
|
|
4E62000
|
unkown
|
page readonly
|
|
|
|
5CA0000
|
unkown
|
page readonly
|
|
|
|
2E8C000
|
unkown
|
page readonly
|
|
|
|
4C40000
|
unkown
|
page readonly
|
|
|
|
6D50E000
|
unkown image
|
page readonly
|
|
|
|
6D577000
|
unkown image
|
page execute and read and write
|
|
|
|
5202000
|
unkown
|
page readonly
|
|
|
|
5882000
|
unkown
|
page readonly
|
|
|
|
5862000
|
unkown
|
page readonly
|
|
|
|
5225000
|
unkown
|
page readonly
|
|
|
|
2E90000
|
unkown
|
page readonly
|
|
|
|
5052000
|
unkown
|
page readonly
|
|
|
|
5930000
|
unkown
|
page readonly
|
|
|
|
A1AAB9E000
|
unkown
|
page read and write
|
|
|
|
2E83000
|
unkown
|
page readonly
|
|
|
|
580000
|
unkown
|
page readonly
|
|
|
|
1110000
|
unkown
|
page readonly
|
|
|
|
7FF55BF21000
|
unkown
|
page readonly
|
|
|
|
2EBF000
|
unkown
|
page readonly
|
|
|
|
2CE6000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page readonly
|
|
|
|
6D501000
|
unkown image
|
page execute read
|
|
|
|
6D506000
|
unkown image
|
page readonly
|
|
|
|
5C20000
|
unkown
|
page readonly
|
|
|
|
50F2000
|
unkown
|
page readonly
|
|
|
|
4AA0000
|
unkown
|
page readonly
|
|
|
|
5379000
|
unkown
|
page readonly
|
|
|
|
5864000
|
unkown
|
page readonly
|
|
|
|
5CC0000
|
unkown
|
page readonly
|
|
|
|
7FF55C107000
|
unkown
|
page readonly
|
|
|
|
51D2000
|
unkown
|
page readonly
|
|
|
|
28598888000
|
unkown
|
page read and write
|
|
|
|
2E7C000
|
unkown
|
page readonly
|
|
|
|
2E49000
|
unkown
|
page readonly
|
|
|
|
2F21000
|
unkown
|
page readonly
|
|
|
|
2D80000
|
unkown
|
page readonly
|
|
|
|
2EAD000
|
unkown
|
page readonly
|
|
|
|
2E5A000
|
unkown
|
page readonly
|
|
|
|
460000
|
heap default
|
page read and write
|
|
|
|
1E0000
|
heap private
|
page read and write
|
|
|
|
5BF0000
|
unkown
|
page readonly
|
|
|
|
2E52000
|
unkown
|
page readonly
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
7FF55BE47000
|
unkown
|
page readonly
|
|
|
|
160000
|
unkown
|
page readonly
|
|
|
|
7FF55C114000
|
unkown
|
page readonly
|
|
|
|
50C2000
|
unkown
|
page readonly
|
|
|
|
2ED6000
|
unkown
|
page readonly
|
|
|
|
7FF55BC96000
|
unkown
|
page readonly
|
|
|
|
2EAD000
|
unkown
|
page readonly
|
|
|
|
7FF55BFCB000
|
unkown
|
page readonly
|
|
|
|
6D574000
|
unkown image
|
page read and write
|
|
|
|
57E5000
|
unkown
|
page readonly
|
|
|
|
5C30000
|
unkown
|
page readonly
|
|
|
|
2EC1000
|
unkown
|
page readonly
|
|
|
|
346E000
|
unkown
|
page read and write
|
|
|
|
5984000
|
unkown
|
page readonly
|
|
|
|
5CE0000
|
unkown
|
page readonly
|
|
|
|
2EBF000
|
unkown
|
page readonly
|
|
|
|
7FF55C0CE000
|
unkown
|
page readonly
|
|
|
|
1C0000
|
unkown
|
page readonly
|
|
|
|
28598780000
|
unkown
|
page readonly
|
|
|
|
2EBA000
|
unkown
|
page readonly
|
|
|
|
3470000
|
heap default
|
page read and write
|
|
|
|
10FD000
|
unkown
|
page read and write
|
|
|
|
6D58A000
|
unkown image
|
page readonly
|
|
|
|
2E8C000
|
unkown
|
page readonly
|
|
|
|
7FF55C0D5000
|
unkown
|
page readonly
|
|
|
|
6D505000
|
unkown image
|
page read and write
|
|
|
|
2F34000
|
unkown
|
page readonly
|
|
|
|
6D577000
|
unkown image
|
page execute and read and write
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
170000
|
unkown
|
page readonly
|
|
|
|
1D0000
|
unkown
|
page readonly
|
|
|
|
2EBA000
|
unkown
|
page readonly
|
|
|
|
5AE0000
|
unkown
|
page readonly
|
|
|
|
3330000
|
unkown
|
page readonly
|
|
|
|
660000
|
unkown
|
page read and write
|
|
|
|
2F48000
|
unkown
|
page readonly
|
|
|
|
55AB000
|
unkown
|
page readonly
|
|
|
|
5117000
|
unkown
|
page readonly
|
|
|
|
6D50F000
|
unkown image
|
page execute read
|
|
There are 434 hidden memdumps, click here to show them.