Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\vqirYMB1c4.dll'
|
 |
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\vqirYMB1c4.dll,Connectdark
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\vqirYMB1c4.dll',#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\vqirYMB1c4.dll,Mindlake
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\vqirYMB1c4.dll,Porthigh
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\vqirYMB1c4.dll,Problemscale
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\vqirYMB1c4.dll,WingGrass
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\vqirYMB1c4.dll',#1
|
 |
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Island
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Island
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Matter m
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Matter m
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Island
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Matter m
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Island
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Matter m
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Island
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Island
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Island
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Matter m
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Matter m
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c cd Matter m
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
There are 24 hidden processes, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
6DD91000
|
unkown image
|
page execute read
|
|
|
|
6DD91000
|
unkown image
|
page execute read
|
|
|
|
6DD91000
|
unkown image
|
page execute read
|
|
|
|
6DD91000
|
unkown image
|
page execute read
|
|
|
|
6DD91000
|
unkown image
|
page execute read
|
|
|
|
6DD91000
|
unkown image
|
page execute read
|
|
|
|
6DD91000
|
unkown image
|
page execute read
|
|
|
|
146FFFF3000
|
unkown
|
page read and write
|
|
|
|
3710000
|
unkown
|
page readonly
|
|
|
|
7FF5066BC000
|
unkown
|
page readonly
|
|
|
|
2D21000
|
unkown
|
page readonly
|
|
|
|
29F1000
|
unkown
|
page readonly
|
|
|
|
7FF5E9A5D000
|
unkown
|
page readonly
|
|
|
|
7FF5068BB000
|
unkown
|
page readonly
|
|
|
|
2CF4000
|
unkown
|
page readonly
|
|
|
|
3140000
|
unkown
|
page readonly
|
|
|
|
2D3D000
|
unkown
|
page readonly
|
|
|
|
7FF5067D2000
|
unkown
|
page readonly
|
|
|
|
2A85000
|
unkown
|
page readonly
|
|
|
|
7FF5E93F4000
|
unkown
|
page readonly
|
|
|
|
14704D64000
|
unkown
|
page read and write
|
|
|
|
2EDD000
|
unkown
|
page read and write
|
|
|
|
6DE8D000
|
unkown image
|
page readonly
|
|
|
|
14700000000
|
unkown
|
page read and write
|
|
|
|
2DC7000
|
unkown
|
page readonly
|
|
|
|
2AD7000
|
unkown
|
page readonly
|
|
|
|
7FF5065E1000
|
unkown
|
page readonly
|
|
|
|
2C8C000
|
unkown
|
page readonly
|
|
|
|
22DC17F000
|
unkown
|
page read and write
|
|
|
|
6BB000
|
heap default
|
page read and write
|
|
|
|
146FF7D0000
|
unkown
|
page readonly
|
|
|
|
3710000
|
unkown
|
page readonly
|
|
|
|
7FF506421000
|
unkown
|
page readonly
|
|
|
|
29DA000
|
unkown
|
page readonly
|
|
|
|
23F0000
|
unkown
|
page readonly
|
|
|
|
6DE1A000
|
unkown image
|
page readonly
|
|
|
|
14705121000
|
unkown
|
page read and write
|
|
|
|
7FF5E9AE5000
|
unkown
|
page readonly
|
|
|
|
2A1D000
|
unkown
|
page readonly
|
|
|
|
7FF5E9B7E000
|
unkown
|
page readonly
|
|
|
|
29B9000
|
unkown
|
page readonly
|
|
|
|
7FF5067E7000
|
unkown
|
page readonly
|
|
|
|
2D4D000
|
unkown
|
page readonly
|
|
|
|
6DE8C000
|
unkown image
|
page read and write
|
|
|
|
2DBB000
|
unkown
|
page read and write
|
|
|
|
2A49000
|
unkown
|
page readonly
|
|
|
|
146FFFF0000
|
unkown
|
page read and write
|
|
|
|
3350000
|
unkown
|
page readonly
|
|
|
|
6DE1A000
|
unkown image
|
page readonly
|
|
|
|
146FF8A2000
|
unkown
|
page read and write
|
|
|
|
2D27000
|
unkown
|
page readonly
|
|
|
|
29F9000
|
unkown
|
page readonly
|
|
|
|
2C60000
|
unkown
|
page readonly
|
|
|
|
146FF895000
|
unkown
|
page read and write
|
|
|
|
1CF64440000
|
heap default
|
page read and write
|
|
|
|
6DE8D000
|
unkown image
|
page readonly
|
|
|
|
146FFF30000
|
unkown
|
page read and write
|
|
|
|
7FF5E9A67000
|
unkown
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page readonly
|
|
|
|
209A000
|
unkown
|
page readonly
|
|
|
|
2A97000
|
unkown
|
page readonly
|
|
|
|
146FF7F0000
|
unkown
|
page read and write
|
|
|
|
2C95000
|
unkown
|
page readonly
|
|
|
|
3630000
|
unkown
|
page readonly
|
|
|
|
2EBC000
|
unkown
|
page read and write
|
|
|
|
7FF5E98F8000
|
unkown
|
page readonly
|
|
|
|
14705108000
|
unkown
|
page read and write
|
|
|
|
14704E15000
|
unkown
|
page read and write
|
|
|
|
14700100000
|
unkown
|
page read and write
|
|
|
|
14700118000
|
unkown
|
page read and write
|
|
|
|
2B7A000
|
unkown
|
page readonly
|
|
|
|
20B1000
|
unkown
|
page readonly
|
|
|
|
22DC37F000
|
unkown
|
page read and write
|
|
|
|
2B59000
|
unkown
|
page readonly
|
|
|
|
35C0000
|
unkown
|
page readonly
|
|
|
|
14705000000
|
unkown
|
page read and write
|
|
|
|
2B56000
|
unkown
|
page readonly
|
|
|
|
3290000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1CF64BA0000
|
unkown
|
page read and write
|
|
|
|
1CF64800000
|
unkown
|
page readonly
|
|
|
|
362000
|
unkown
|
page read and write
|
|
|
|
2D7C000
|
unkown
|
page read and write
|
|
|
|
146FFA00000
|
unkown
|
page readonly
|
|
|
|
7FF5E9AE9000
|
unkown
|
page readonly
|
|
|
|
2A25000
|
unkown
|
page readonly
|
|
|
|
14705180000
|
unkown
|
page read and write
|
|
|
|
3620000
|
heap private
|
page read and write
|
|
|
|
33A0000
|
unkown
|
page readonly
|
|
|
|
7FF5066A3000
|
unkown
|
page readonly
|
|
|
|
1CF64602000
|
unkown
|
page read and write
|
|
|
|
2AD7000
|
unkown
|
page readonly
|
|
|
|
CDD3DFA000
|
unkown
|
page read and write
|
|
|
|
2FC0000
|
unkown
|
page readonly
|
|
|
|
6DE8C000
|
unkown image
|
page read and write
|
|
|
|
14700002000
|
unkown
|
page read and write
|
|
|
|
7FF506453000
|
unkown
|
page readonly
|
|
|
|
14704E3E000
|
unkown
|
page read and write
|
|
|
|
6DE75000
|
unkown image
|
page read and write
|
|
|
|
22DBFFB000
|
unkown
|
page read and write
|
|
|
|
3010000
|
unkown
|
page readonly
|
|
|
|
7FF50639F000
|
unkown
|
page readonly
|
|
|
|
6DE75000
|
unkown image
|
page read and write
|
|
|
|
147052A0000
|
unkown
|
page readonly
|
|
|
|
2B9C000
|
unkown
|
page readonly
|
|
|
|
146FF760000
|
heap private
|
page read and write
|
|
|
|
2A39000
|
unkown
|
page readonly
|
|
|
|
32AB000
|
unkown
|
page read and write
|
|
|
|
2F80000
|
unkown
|
page read and write
|
|
|
|
2A10000
|
unkown
|
page readonly
|
|
|
|
2C25000
|
unkown
|
page readonly
|
|
|
|
1CF64702000
|
unkown
|
page read and write
|
|
|
|
1CF64E00000
|
unkown
|
page readonly
|
|
|
|
2C50000
|
unkown
|
page readonly
|
|
|
|
1470510E000
|
unkown
|
page read and write
|
|
|
|
20C9000
|
unkown
|
page readonly
|
|
|
|
20B9000
|
unkown
|
page readonly
|
|
|
|
146FF7E0000
|
unkown
|
page readonly
|
|
|
|
7FF5067DC000
|
unkown
|
page readonly
|
|
|
|
14704E2F000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
heap default
|
page read and write
|
|
|
|
14705280000
|
unkown
|
page readonly
|
|
|
|
7FF5067C8000
|
unkown
|
page readonly
|
|
|
|
20B5000
|
unkown
|
page readonly
|
|
|
|
7FF5067C4000
|
unkown
|
page readonly
|
|
|
|
7FF5065D3000
|
unkown
|
page readonly
|
|
|
|
29EB000
|
unkown
|
page readonly
|
|
|
|
29C0000
|
unkown
|
page readonly
|
|
|
|
14700159000
|
unkown
|
page read and write
|
|
|
|
2A0D000
|
unkown
|
page readonly
|
|
|
|
7FF5060C1000
|
unkown
|
page readonly
|
|
|
|
2FD0000
|
unkown
|
page readonly
|
|
|
|
2AC4000
|
unkown
|
page readonly
|
|
|
|
2B99000
|
unkown
|
page readonly
|
|
|
|
7FF50657A000
|
unkown
|
page readonly
|
|
|
|
2D35000
|
unkown
|
page readonly
|
|
|
|
146FF8B1000
|
unkown
|
page read and write
|
|
|
|
7FF5065DC000
|
unkown
|
page readonly
|
|
|
|
2C1B000
|
unkown
|
page readonly
|
|
|
|
7FF5E9B6F000
|
unkown
|
page readonly
|
|
|
|
7FF5E9A9C000
|
unkown
|
page readonly
|
|
|
|
1CF64B90000
|
unkown
|
page readonly
|
|
|
|
7FF5E9A92000
|
unkown
|
page readonly
|
|
|
|
14704E62000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page readonly
|
|
|
|
29FC000
|
unkown
|
page readonly
|
|
|
|
146FF913000
|
unkown
|
page read and write
|
|
|
|
3070000
|
unkown
|
page readonly
|
|
|
|
2A1A000
|
unkown
|
page readonly
|
|
|
|
7FF5065F7000
|
unkown
|
page readonly
|
|
|
|
2850000
|
heap default
|
page read and write
|
|
|
|
2B2D000
|
unkown
|
page readonly
|
|
|
|
328A000
|
heap default
|
page read and write
|
|
|
|
2B85000
|
unkown
|
page readonly
|
|
|
|
2EB8000
|
unkown
|
page read and write
|
|
|
|
3380000
|
unkown
|
page readonly
|
|
|
|
2A45000
|
unkown
|
page readonly
|
|
|
|
2C37000
|
unkown
|
page readonly
|
|
|
|
2BCD000
|
unkown
|
page readonly
|
|
|
|
1CF64530000
|
unkown
|
page readonly
|
|
|
|
29CB000
|
unkown
|
page readonly
|
|
|
|
2A64000
|
unkown
|
page readonly
|
|
|
|
6DE75000
|
unkown image
|
page read and write
|
|
|
|
7FF5068A8000
|
unkown
|
page readonly
|
|
|
|
2B95000
|
unkown
|
page readonly
|
|
|
|
2F1B000
|
unkown
|
page read and write
|
|
|
|
2D39000
|
unkown
|
page readonly
|
|
|
|
33BA000
|
heap default
|
page read and write
|
|
|
|
3710000
|
unkown
|
page readonly
|
|
|
|
14704E85000
|
unkown
|
page read and write
|
|
|
|
2A2B000
|
unkown
|
page readonly
|
|
|
|
14700102000
|
unkown
|
page read and write
|
|
|
|
2A64000
|
unkown
|
page readonly
|
|
|
|
14700118000
|
unkown
|
page read and write
|
|
|
|
2FA0000
|
unkown
|
page readonly
|
|
|
|
2A3C000
|
unkown
|
page readonly
|
|
|
|
2C28000
|
unkown
|
page readonly
|
|
|
|
7FF506829000
|
unkown
|
page readonly
|
|
|
|
20DD000
|
unkown
|
page readonly
|
|
|
|
7FF506684000
|
unkown
|
page readonly
|
|
|
|
2C1D000
|
unkown
|
page readonly
|
|
|
|
22DBBFA000
|
unkown
|
page read and write
|
|
|
|
1CF6467A000
|
unkown
|
page read and write
|
|
|
|
14704D30000
|
unkown
|
page read and write
|
|
|
|
22DB6CC000
|
unkown
|
page read and write
|
|
|
|
2D11000
|
unkown
|
page readonly
|
|
|
|
146FFE60000
|
unkown
|
page readonly
|
|
|
|
314C000
|
unkown
|
page read and write
|
|
|
|
2A8C000
|
unkown
|
page readonly
|
|
|
|
7FF5068BE000
|
unkown
|
page readonly
|
|
|
|
7FF5E9B76000
|
unkown
|
page readonly
|
|
|
|
1CF64613000
|
unkown
|
page read and write
|
|
|
|
2A00000
|
unkown
|
page readonly
|
|
|
|
7FF50681D000
|
unkown
|
page readonly
|
|
|
|
2C81000
|
unkown
|
page readonly
|
|
|
|
326C000
|
unkown
|
page read and write
|
|
|
|
1CF64450000
|
unkown
|
page readonly
|
|
|
|
1CF64669000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
2C21000
|
unkown
|
page readonly
|
|
|
|
1CF64628000
|
unkown
|
page read and write
|
|
|
|
2D0B000
|
unkown
|
page readonly
|
|
|
|
3330000
|
heap default
|
page read and write
|
|
|
|
7FF5067F7000
|
unkown
|
page readonly
|
|
|
|
2D29000
|
unkown
|
page readonly
|
|
|
|
2A05000
|
unkown
|
page readonly
|
|
|
|
7FF5060BF000
|
unkown
|
page readonly
|
|
|
|
1CF64520000
|
unkown
|
page readonly
|
|
|
|
7FF5E983A000
|
unkown
|
page readonly
|
|
|
|
146FFAD0000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
3090000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
214C000
|
unkown
|
page readonly
|
|
|
|
1CF64659000
|
unkown
|
page read and write
|
|
|
|
2BA5000
|
unkown
|
page readonly
|
|
|
|
2DB1000
|
unkown
|
page readonly
|
|
|
|
3000000
|
unkown
|
page readonly
|
|
|
|
2A24000
|
unkown
|
page readonly
|
|
|
|
2FC9000
|
unkown
|
page read and write
|
|
|
|
7FF5067FC000
|
unkown
|
page readonly
|
|
|
|
470000
|
unkown
|
page readonly
|
|
|
|
7FF506764000
|
unkown
|
page readonly
|
|
|
|
1EEB000
|
unkown
|
page readonly
|
|
|
|
33B0000
|
heap default
|
page read and write
|
|
|
|
2A97000
|
unkown
|
page readonly
|
|
|
|
146FF813000
|
unkown
|
page read and write
|
|
|
|
3330000
|
heap default
|
page read and write
|
|
|
|
285A000
|
heap default
|
page read and write
|
|
|
|
7FF5065ED000
|
unkown
|
page readonly
|
|
|
|
2B64000
|
unkown
|
page readonly
|
|
|
|
2CBD000
|
unkown
|
page readonly
|
|
|
|
C40000
|
unkown
|
page readonly
|
|
|
|
2A4D000
|
unkown
|
page readonly
|
|
|
|
2B70000
|
unkown
|
page readonly
|
|
|
|
3188000
|
unkown
|
page read and write
|
|
|
|
7FF5065AE000
|
unkown
|
page readonly
|
|
|
|
7FF50646A000
|
unkown
|
page readonly
|
|
|
|
22DBCFB000
|
unkown
|
page read and write
|
|
|
|
14704E4B000
|
unkown
|
page read and write
|
|
|
|
7FF5E96E1000
|
unkown
|
page readonly
|
|
|
|
7FF5E9A60000
|
unkown
|
page readonly
|
|
|
|
146FF88C000
|
unkown
|
page read and write
|
|
|
|
2984000
|
unkown
|
page readonly
|
|
|
|
7FF5E9893000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
2D2C000
|
unkown
|
page readonly
|
|
|
|
3030000
|
unkown
|
page readonly
|
|
|
|
2044000
|
unkown
|
page readonly
|
|
|
|
14704EBD000
|
unkown
|
page read and write
|
|
|
|
2B64000
|
unkown
|
page readonly
|
|
|
|
2CB4000
|
unkown
|
page readonly
|
|
|
|
20C5000
|
unkown
|
page readonly
|
|
|
|
14700159000
|
unkown
|
page read and write
|
|
|
|
2C14000
|
unkown
|
page readonly
|
|
|
|
6DE8C000
|
unkown image
|
page read and write
|
|
|
|
2CF0000
|
unkown
|
page readonly
|
|
|
|
2080000
|
unkown
|
page readonly
|
|
|
|
2090000
|
unkown
|
page readonly
|
|
|
|
7FF5068EF000
|
unkown
|
page readonly
|
|
|
|
1CF64713000
|
unkown
|
page read and write
|
|
|
|
2157000
|
unkown
|
page readonly
|
|
|
|
2A04000
|
unkown
|
page readonly
|
|
|
|
7FF5E9B68000
|
unkown
|
page readonly
|
|
|
|
2C9D000
|
unkown
|
page readonly
|
|
|
|
3A20000
|
unkown
|
page readonly
|
|
|
|
2B60000
|
unkown
|
page readonly
|
|
|
|
3380000
|
unkown
|
page readonly
|
|
|
|
2A6D000
|
unkown
|
page readonly
|
|
|
|
2C6A000
|
unkown
|
page readonly
|
|
|
|
6DE1A000
|
unkown image
|
page readonly
|
|
|
|
7FF5E9AFA000
|
unkown
|
page readonly
|
|
|
|
146FF7C0000
|
heap default
|
page read and write
|
|
|
|
6DE1A000
|
unkown image
|
page readonly
|
|
|
|
CDD41FF000
|
unkown
|
page read and write
|
|
|
|
2ABB000
|
unkown
|
page readonly
|
|
|
|
2DB5000
|
unkown
|
page readonly
|
|
|
|
14704E00000
|
unkown
|
page read and write
|
|
|
|
14705100000
|
unkown
|
page read and write
|
|
|
|
2C75000
|
unkown
|
page readonly
|
|
|
|
14704EBC000
|
unkown
|
page read and write
|
|
|
|
20A5000
|
unkown
|
page readonly
|
|
|
|
317A000
|
heap default
|
page read and write
|
|
|
|
2DBC000
|
unkown
|
page readonly
|
|
|
|
CDD3FFC000
|
unkown
|
page read and write
|
|
|
|
2D15000
|
unkown
|
page readonly
|
|
|
|
2AC5000
|
unkown
|
page readonly
|
|
|
|
4C0000
|
unkown
|
page readonly
|
|
|
|
7FF5E9B94000
|
unkown
|
page readonly
|
|
|
|
3040000
|
unkown
|
page readonly
|
|
|
|
2CE6000
|
unkown
|
page readonly
|
|
|
|
14704E8B000
|
unkown
|
page read and write
|
|
|
|
7FF5067A0000
|
unkown
|
page readonly
|
|
|
|
2A35000
|
unkown
|
page readonly
|
|
|
|
1CF64C02000
|
unkown
|
page read and write
|
|
|
|
23A0000
|
heap private
|
page read and write
|
|
|
|
14700015000
|
unkown
|
page read and write
|
|
|
|
2600000
|
unkown
|
page readonly
|
|
|
|
2CC8000
|
unkown
|
page readonly
|
|
|
|
22DBAF7000
|
unkown
|
page read and write
|
|
|
|
6B0000
|
heap default
|
page read and write
|
|
|
|
7FF5E9BAD000
|
unkown
|
page readonly
|
|
|
|
6DE8C000
|
unkown image
|
page read and write
|
|
|
|
8B0000
|
unkown
|
page readonly
|
|
|
|
14705260000
|
unkown
|
page readonly
|
|
|
|
14704E0C000
|
unkown
|
page read and write
|
|
|
|
7FF5068AF000
|
unkown
|
page readonly
|
|
|
|
28C000
|
unkown
|
page read and write
|
|
|
|
7FF5068ED000
|
unkown
|
page readonly
|
|
|
|
3170000
|
heap default
|
page read and write
|
|
|
|
2C85000
|
unkown
|
page readonly
|
|
|
|
3080000
|
heap default
|
page read and write
|
|
|
|
29D4000
|
unkown
|
page readonly
|
|
|
|
14700950000
|
unkown
|
page readonly
|
|
|
|
2FF0000
|
heap default
|
page read and write
|
|
|
|
2FCD000
|
unkown
|
page read and write
|
|
|
|
257F000
|
unkown
|
page read and write
|
|
|
|
1F84000
|
unkown
|
page readonly
|
|
|
|
20AB000
|
unkown
|
page readonly
|
|
|
|
7FF506833000
|
unkown
|
page readonly
|
|
|
|
7FF50647F000
|
unkown
|
page readonly
|
|
|
|
7FF5E9927000
|
unkown
|
page readonly
|
|
|
|
3690000
|
unkown
|
page readonly
|
|
|
|
2A09000
|
unkown
|
page readonly
|
|
|
|
7FF506855000
|
unkown
|
page readonly
|
|
|
|
6DE75000
|
unkown image
|
page read and write
|
|
|
|
460000
|
unkown
|
page read and write
|
|
|
|
7FF5067A7000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
2C99000
|
unkown
|
page readonly
|
|
|
|
2084000
|
unkown
|
page readonly
|
|
|
|
3330000
|
heap default
|
page read and write
|
|
|
|
6DE8D000
|
unkown image
|
page readonly
|
|
|
|
1EF4000
|
unkown
|
page readonly
|
|
|
|
6DE75000
|
unkown image
|
page read and write
|
|
|
|
14704D60000
|
unkown
|
page read and write
|
|
|
|
2058000
|
unkown
|
page readonly
|
|
|
|
2ACC000
|
unkown
|
page readonly
|
|
|
|
2D3D000
|
unkown
|
page read and write
|
|
|
|
2D54000
|
unkown
|
page readonly
|
|
|
|
7FF50673F000
|
unkown
|
page readonly
|
|
|
|
2B54000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
7FF5E9ABC000
|
unkown
|
page readonly
|
|
|
|
2B24000
|
unkown
|
page readonly
|
|
|
|
3148000
|
unkown
|
page read and write
|
|
|
|
146FF800000
|
unkown
|
page read and write
|
|
|
|
7FF5E9AA7000
|
unkown
|
page readonly
|
|
|
|
1CF64600000
|
unkown
|
page read and write
|
|
|
|
6DE8D000
|
unkown image
|
page readonly
|
|
|
|
22DC1FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E9B9E000
|
unkown
|
page readonly
|
|
|
|
20BC000
|
unkown
|
page readonly
|
|
|
|
3050000
|
unkown
|
page readonly
|
|
|
|
2D7B000
|
unkown
|
page read and write
|
|
|
|
7FF5065DA000
|
unkown
|
page readonly
|
|
|
|
29F9000
|
unkown
|
page readonly
|
|
|
|
7FF5067B0000
|
unkown
|
page readonly
|
|
|
|
14705180000
|
unkown
|
page read and write
|
|
|
|
2904000
|
unkown
|
page readonly
|
|
|
|
7FF506611000
|
unkown
|
page readonly
|
|
|
|
7FF5068B6000
|
unkown
|
page readonly
|
|
|
|
2157000
|
unkown
|
page readonly
|
|
|
|
204D000
|
unkown
|
page readonly
|
|
|
|
14704EBB000
|
unkown
|
page read and write
|
|
|
|
2BF4000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
14704EAC000
|
unkown
|
page read and write
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
7FF5E9AF3000
|
unkown
|
page readonly
|
|
|
|
7FF506808000
|
unkown
|
page readonly
|
|
|
|
323B000
|
unkown
|
page read and write
|
|
|
|
7FF5067E3000
|
unkown
|
page readonly
|
|
|
|
20ED000
|
unkown
|
page readonly
|
|
|
|
3310000
|
unkown
|
page read and write
|
|
|
|
3AA0000
|
unkown
|
page readonly
|
|
|
|
147051C0000
|
unkown
|
page readonly
|
|
|
|
22DC07E000
|
unkown
|
page read and write
|
|
|
|
7FF5068EB000
|
unkown
|
page readonly
|
|
|
|
29C4000
|
unkown
|
page readonly
|
|
|
|
2D1C000
|
unkown
|
page readonly
|
|
|
|
1CF64700000
|
unkown
|
page read and write
|
|
|
|
2CE9000
|
unkown
|
page readonly
|
|
|
|
6DE8D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E98C6000
|
unkown
|
page readonly
|
|
|
|
7FF5067C0000
|
unkown
|
page readonly
|
|
|
|
6DE8C000
|
unkown image
|
page read and write
|
|
|
|
286B000
|
unkown
|
page readonly
|
|
|
|
14704E22000
|
unkown
|
page read and write
|
|
|
|
7FF506470000
|
unkown
|
page readonly
|
|
|
|
14700113000
|
unkown
|
page read and write
|
|
|
|
7FF5065E3000
|
unkown
|
page readonly
|
|
|
|
2C46000
|
unkown
|
page readonly
|
|
|
|
3500000
|
unkown
|
page readonly
|
|
|
|
2BAD000
|
unkown
|
page readonly
|
|
|
|
7FF50668D000
|
unkown
|
page readonly
|
|
|
|
2DC7000
|
unkown
|
page readonly
|
|
|
|
2A2D000
|
unkown
|
page readonly
|
|
|
|
3340000
|
unkown
|
page readonly
|
|
|
|
6DE1A000
|
unkown image
|
page readonly
|
|
|
|
2874000
|
unkown
|
page readonly
|
|
|
|
7FF506477000
|
unkown
|
page readonly
|
|
|
|
7FF5068CD000
|
unkown
|
page readonly
|
|
|
|
7FF506464000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
22DC0FF000
|
unkown
|
page read and write
|
|
|
|
6DE8C000
|
unkown image
|
page read and write
|
|
|
|
22DBEFC000
|
unkown
|
page read and write
|
|
|
|
3040000
|
heap private
|
page read and write
|
|
|
|
2D1B000
|
unkown
|
page readonly
|
|
|
|
6DE8D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E96B6000
|
unkown
|
page readonly
|
|
|
|
7FF506613000
|
unkown
|
page readonly
|
|
|
|
2390000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
7FF506825000
|
unkown
|
page readonly
|
|
|
|
3280000
|
heap default
|
page read and write
|
|
|
|
3370000
|
heap private
|
page read and write
|
|
|
|
2DE0000
|
unkown
|
page read and write
|
|
|
|
7FF5065AA000
|
unkown
|
page readonly
|
|
|
|
2A7B000
|
unkown
|
page readonly
|
|
|
|
29B6000
|
unkown
|
page readonly
|
|
|
|
7FF5066A8000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page readonly
|
|
|
|
2CB000
|
unkown
|
page read and write
|
|
|
|
29D0000
|
unkown
|
page readonly
|
|
|
|
1CF64664000
|
unkown
|
page read and write
|
|
|
|
6DE75000
|
unkown image
|
page read and write
|
|
|
|
7FF5E9BAF000
|
unkown
|
page readonly
|
|
|
|
2998000
|
unkown
|
page readonly
|
|
|
|
7FF5E997E000
|
unkown
|
page readonly
|
|
|
|
7FF50679D000
|
unkown
|
page readonly
|
|
|
|
298D000
|
unkown
|
page readonly
|
|
|
|
146FF8FE000
|
unkown
|
page read and write
|
|
|
|
2A5D000
|
unkown
|
page readonly
|
|
|
|
7FF505FA9000
|
unkown
|
page readonly
|
|
|
|
3189000
|
unkown
|
page read and write
|
|
|
|
14704D30000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page readonly
|
|
|
|
2BA9000
|
unkown
|
page readonly
|
|
|
|
14705180000
|
unkown
|
page read and write
|
|
|
|
6DE1A000
|
unkown image
|
page readonly
|
|
|
|
22DBDFE000
|
unkown
|
page read and write
|
|
|
|
2079000
|
unkown
|
page readonly
|
|
|
|
20CD000
|
unkown
|
page readonly
|
|
|
|
CDD3EFB000
|
unkown
|
page read and write
|
|
|
|
2834000
|
unkown
|
page readonly
|
|
|
|
FC000
|
unkown
|
page read and write
|
|
|
|
7FF50683A000
|
unkown
|
page readonly
|
|
|
|
14705180000
|
unkown
|
page readonly
|
|
|
|
366000
|
unkown
|
page read and write
|
|
|
|
6DE8C000
|
unkown image
|
page read and write
|
|
|
|
22DC6FF000
|
unkown
|
page read and write
|
|
|
|
6DE8D000
|
unkown image
|
page readonly
|
|
|
|
2FCD000
|
unkown
|
page read and write
|
|
|
|
7FF5E9BAF000
|
unkown
|
page readonly
|
|
|
|
2C2C000
|
unkown
|
page readonly
|
|
|
|
2145000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
6DE75000
|
unkown image
|
page read and write
|
|
|
|
3680000
|
heap private
|
page read and write
|
|
|
|
2FB0000
|
unkown
|
page readonly
|
|
|
|
7FF5E9AB7000
|
unkown
|
page readonly
|
|
|
|
2C89000
|
unkown
|
page readonly
|
|
|
|
2141000
|
unkown
|
page readonly
|
|
|
|
2BC4000
|
unkown
|
page readonly
|
|
|
|
14704DF0000
|
unkown
|
page read and write
|
|
|
|
340A000
|
heap default
|
page read and write
|
|
|
|
22DC2F9000
|
unkown
|
page read and write
|
|
|
|
318C000
|
unkown
|
page read and write
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
2C49000
|
unkown
|
page readonly
|
|
|
|
7FF506494000
|
unkown
|
page readonly
|
|
|
|
2D0A000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
146FF878000
|
unkown
|
page read and write
|
|
|
|
2950000
|
unkown
|
page readonly
|
|
|
|
2DAB000
|
unkown
|
page readonly
|
|
|
|
6DE1A000
|
unkown image
|
page readonly
|
|
|
|
7FF5E9B8D000
|
unkown
|
page readonly
|
|
|
|
7FF5063F6000
|
unkown
|
page readonly
|
|
|
|
34B0000
|
unkown
|
page readonly
|
|
|
|
CDD39AB000
|
unkown
|
page read and write
|
|
|
|
2076000
|
unkown
|
page readonly
|
|
|
|
1CF643E0000
|
heap private
|
page read and write
|
|
|
|
2D25000
|
unkown
|
page readonly
|
|
|
|
7FF5E9B15000
|
unkown
|
page readonly
|
|
|
|
146FF829000
|
unkown
|
page read and write
|
|
|
|
213B000
|
unkown
|
page readonly
|
|
|
|
28C4000
|
unkown
|
page readonly
|
|
|
|
2C54000
|
unkown
|
page readonly
|
|
|
|
2370000
|
unkown
|
page readonly
|
|
|
|
2BBD000
|
unkown
|
page readonly
|
|
|
|
3350000
|
unkown
|
page readonly
|
|
|
|
6DD90000
|
unkown image
|
page readonly
|
|
|
|
2A81000
|
unkown
|
page readonly
|
|
|
|
2583000
|
unkown
|
page read and write
|
|
|
|
2D27000
|
unkown
|
page readonly
|
|
|
|
146FF87C000
|
unkown
|
page read and write
|
|
|
|
3700000
|
heap private
|
page read and write
|
|
|
|
3830000
|
unkown
|
page readonly
|
|
|
|
2CBD000
|
unkown
|
page readonly
|
|
|
|
22DC3FF000
|
unkown
|
page read and write
|
|
|
|
CDD40FB000
|
unkown
|
page read and write
|
|
|
|
146FF873000
|
unkown
|
page read and write
|
|
|
|
282B000
|
unkown
|
page readonly
|
|
|
|
7FF5068DE000
|
unkown
|
page readonly
|
|
|
|
3340000
|
unkown
|
page readonly
|
|
|
|
20E4000
|
unkown
|
page readonly
|
|
|
|
2CAD000
|
unkown
|
page readonly
|
|
|
|
21B0000
|
heap private
|
page read and write
|
|
|
|
29C4000
|
unkown
|
page readonly
|
|
|
|
2D00000
|
unkown
|
page readonly
|
|
|
|
7FF506727000
|
unkown
|
page readonly
|
|
|
|
29CD000
|
unkown
|
page readonly
|
|
|
|
2B8B000
|
unkown
|
page readonly
|
|
|
|
2D15000
|
unkown
|
page readonly
|
|
|
|
146FF858000
|
unkown
|
page read and write
|
|
|
|
1CF64640000
|
unkown
|
page read and write
|
|
|
|
2B91000
|
unkown
|
page readonly
|
|
|
|
7FF5068DB000
|
unkown
|
page readonly
|
|
|
|
3060000
|
heap default
|
page read and write
|
|
|
|
146FF8A0000
|
unkown
|
page read and write
|
|
|
|
7FF5068EF000
|
unkown
|
page readonly
|
|
|
|
2A31000
|
unkown
|
page readonly
|
|
|
|
318D000
|
unkown
|
page read and write
|
|
|
|
147051D0000
|
unkown
|
page readonly
|
|
|
|
2CE0000
|
unkown
|
page readonly
|
|
|
|
2CB4000
|
unkown
|
page readonly
|
|
|
|
29E5000
|
unkown
|
page readonly
|
|
|
|
2770000
|
heap default
|
page read and write
|
|
|
|
1FB000
|
unkown
|
page read and write
|
|
|
|
146FF88E000
|
unkown
|
page read and write
|
|
|
|
22DC4FA000
|
unkown
|
page read and write
|
|
|
|
29F6000
|
unkown
|
page readonly
|
|
|
|
2D5D000
|
unkown
|
page readonly
|
|
|
|
7FF5E9A4D000
|
unkown
|
page readonly
|
|
|
|
14705124000
|
unkown
|
page read and write
|
|
|
|
2C7B000
|
unkown
|
page readonly
|
|
|
|
29F5000
|
unkown
|
page readonly
|
|
|
|
3270000
|
unkown
|
page read and write
|
|
|
|
14704D50000
|
unkown
|
page read and write
|
|
|
|
2AC1000
|
unkown
|
page readonly
|
|
|
|
2ABB000
|
unkown
|
page readonly
|
|
|
|
2B5B000
|
unkown
|
page readonly
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
29D8000
|
unkown
|
page readonly
|
|
|
|
146FF841000
|
unkown
|
page read and write
|
|
|
|
7FF5E9ADD000
|
unkown
|
page readonly
|
|
|
|
7FF5068D4000
|
unkown
|
page readonly
|
|
|
|
3400000
|
heap default
|
page read and write
|
|
|
|
7FF5E9B7B000
|
unkown
|
page readonly
|
|
|
|
14704D20000
|
unkown
|
page read and write
|
|
|
|
146FF902000
|
unkown
|
page read and write
|
|
|
|
2C37000
|
unkown
|
page readonly
|
|
|
|
2380000
|
unkown
|
page readonly
|
|
|
|
333A000
|
heap default
|
page read and write
|
|
|
|
7FF5E9B9B000
|
unkown
|
page readonly
|
|
|
|
7FF506640000
|
unkown
|
page readonly
|
|
|
|
2B38000
|
unkown
|
page readonly
|
|
There are 551 hidden memdumps, click here to show them.