Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Fec9qUX4at.exe
|
'C:\Users\user\Desktop\Fec9qUX4at.exe'
|
 |
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://101.99.94.119/WEALTH_fkWglQyCXO188.bin
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2B20000
|
unkown
|
page execute and read and write
|
|
|
|
1E24A446000
|
unkown
|
page read and write
|
 |
|
|
4734000
|
unkown
|
page readonly
|
|
|
|
7FF5800BE000
|
unkown
|
page readonly
|
|
|
|
4FE87DF000
|
unkown
|
page read and write
|
|
|
|
7FF52064A000
|
unkown
|
page readonly
|
|
|
|
7FF5ACE04000
|
unkown
|
page readonly
|
|
|
|
48B0000
|
unkown
|
page readonly
|
|
|
|
7FF5ACB20000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
440000
|
unkown
|
page readonly
|
|
|
|
7FF5800CB000
|
unkown
|
page readonly
|
|
|
|
13EE4745000
|
unkown
|
page read and write
|
|
|
|
13EE3ECF000
|
unkown
|
page read and write
|
|
|
|
13EE4748000
|
unkown
|
page read and write
|
|
|
|
13EE478A000
|
unkown
|
page read and write
|
|
|
|
13EE4759000
|
unkown
|
page read and write
|
|
|
|
241750D0000
|
unkown
|
page read and write
|
|
|
|
3FF2000
|
unkown
|
page readonly
|
|
|
|
7FF569DC4000
|
unkown
|
page readonly
|
|
|
|
2C5598D0000
|
unkown
|
page readonly
|
|
|
|
4620000
|
unkown
|
page readonly
|
|
|
|
28C0000
|
unkown
|
page read and write
|
|
|
|
D6CA6AA000
|
unkown
|
page read and write
|
|
|
|
7FF569EC8000
|
unkown
|
page readonly
|
|
|
|
13EE4759000
|
unkown
|
page read and write
|
|
|
|
5D2D177000
|
unkown
|
page read and write
|
|
|
|
7FF5ACCC0000
|
unkown
|
page readonly
|
|
|
|
477B000
|
unkown
|
page readonly
|
|
|
|
7FF5ACCF4000
|
unkown
|
page readonly
|
|
|
|
7FF5ACB54000
|
unkown
|
page readonly
|
|
|
|
24175131000
|
unkown
|
page read and write
|
|
|
|
2417514E000
|
unkown
|
page read and write
|
|
|
|
7FF5ACD37000
|
unkown
|
page readonly
|
|
|
|
20C67846000
|
unkown
|
page read and write
|
|
|
|
7FF5ACCFF000
|
unkown
|
page readonly
|
|
|
|
1E24A44F000
|
unkown
|
page read and write
|
|
|
|
7FF5ACE0A000
|
unkown
|
page readonly
|
|
|
|
13EE4784000
|
unkown
|
page read and write
|
|
|
|
20B0000
|
unkown
|
page read and write
|
|
|
|
7FF569E4A000
|
unkown
|
page readonly
|
|
|
|
13EE3E13000
|
unkown
|
page read and write
|
|
|
|
7FF592C2F000
|
unkown
|
page readonly
|
|
|
|
28B0000
|
heap private
|
page read and write
|
|
|
|
7FF52058C000
|
unkown
|
page readonly
|
|
|
|
241750F0000
|
unkown
|
page read and write
|
|
|
|
7FF520560000
|
unkown
|
page readonly
|
|
|
|
20C67847000
|
unkown
|
page read and write
|
|
|
|
20C67913000
|
unkown
|
page read and write
|
|
|
|
3C52000
|
unkown
|
page readonly
|
|
|
|
13EE4749000
|
unkown
|
page read and write
|
|
|
|
13EE479C000
|
unkown
|
page read and write
|
|
|
|
2C55A000000
|
unkown
|
page readonly
|
|
|
|
13EE3F13000
|
unkown
|
page read and write
|
|
|
|
D6CAA7A000
|
unkown
|
page read and write
|
|
|
|
7FF5AC7FE000
|
unkown
|
page readonly
|
|
|
|
13EE3ED2000
|
unkown
|
page read and write
|
|
|
|
5D2CE7F000
|
unkown
|
page read and write
|
|
|
|
7FF5800C0000
|
unkown
|
page readonly
|
|
|
|
4FE875F000
|
unkown
|
page read and write
|
|
|
|
13EE4741000
|
unkown
|
page read and write
|
|
|
|
7FF57FF63000
|
unkown
|
page readonly
|
|
|
|
20D5000
|
heap private
|
page read and write
|
|
|
|
4754000
|
unkown
|
page readonly
|
|
|
|
7FF592BCE000
|
unkown
|
page readonly
|
|
|
|
7FF569E5E000
|
unkown
|
page readonly
|
|
|
|
13EE47A5000
|
unkown
|
page read and write
|
|
|
|
7FF569DAD000
|
unkown
|
page readonly
|
|
|
|
4674000
|
unkown
|
page readonly
|
|
|
|
7FF5ACB71000
|
unkown
|
page readonly
|
|
|
|
13EE3DB0000
|
unkown
|
page write copy
|
|
|
|
2B7E000
|
unkown
|
page read and write
|
|
|
|
7FF569F44000
|
unkown
|
page readonly
|
|
|
|
420000
|
unkown
|
page readonly
|
|
|
|
1E24A3D0000
|
unkown
|
page readonly
|
|
|
|
7FF592C24000
|
unkown
|
page readonly
|
|
|
|
13EE4757000
|
unkown
|
page read and write
|
|
|
|
13EE3ED1000
|
unkown
|
page read and write
|
|
|
|
45B7000
|
unkown
|
page readonly
|
|
|
|
7FF5ACD4C000
|
unkown
|
page readonly
|
|
|
|
13EE4550000
|
unkown
|
page read and write
|
|
|
|
7FF5ACAE6000
|
unkown
|
page readonly
|
|
|
|
20C67908000
|
unkown
|
page read and write
|
|
|
|
7FF5AC8E6000
|
unkown
|
page readonly
|
|
|
|
C40000
|
unkown
|
page readonly
|
|
|
|
7FF569A20000
|
unkown
|
page readonly
|
|
|
|
24175163000
|
unkown
|
page read and write
|
|
|
|
4780000
|
unkown
|
page readonly
|
|
|
|
7FF5ACC1B000
|
unkown
|
page readonly
|
|
|
|
9606F5000
|
unkown
|
page read and write
|
|
|
|
7FF569E97000
|
unkown
|
page readonly
|
|
|
|
20C6784D000
|
unkown
|
page read and write
|
|
|
|
20C67826000
|
unkown
|
page read and write
|
|
|
|
7FF58010A000
|
unkown
|
page readonly
|
|
|
|
7FF569E8C000
|
unkown
|
page readonly
|
|
|
|
7FF5AC935000
|
unkown
|
page readonly
|
|
|
|
2C559674000
|
unkown
|
page read and write
|
|
|
|
29C0000
|
unkown
|
page readonly
|
|
|
|
38B0000
|
unkown
|
page readonly
|
|
|
|
2C55964D000
|
unkown
|
page read and write
|
|
|
|
13EE4C61000
|
unkown
|
page read and write
|
|
|
|
7FF5927A5000
|
unkown
|
page readonly
|
|
|
|
13EE4C02000
|
unkown
|
page read and write
|
|
|
|
7FF5ACAA0000
|
unkown
|
page readonly
|
|
|
|
4FE8BFB000
|
unkown
|
page read and write
|
|
|
|
13EE4000000
|
unkown
|
page readonly
|
|
|
|
3FC2000
|
unkown
|
page readonly
|
|
|
|
49E0000
|
unkown
|
page readonly
|
|
|
|
13EE47B6000
|
unkown
|
page read and write
|
|
|
|
13EE4717000
|
unkown
|
page read and write
|
|
|
|
7FF520644000
|
unkown
|
page readonly
|
|
|
|
3C84000
|
unkown
|
page readonly
|
|
|
|
20C67852000
|
unkown
|
page read and write
|
|
|
|
13EE4C02000
|
unkown
|
page read and write
|
|
|
|
435C000
|
unkown
|
page readonly
|
|
|
|
7FF58011F000
|
unkown
|
page readonly
|
|
|
|
24175350000
|
heap private
|
page read and write
|
|
|
|
20C67A00000
|
unkown
|
page readonly
|
|
|
|
3F07000
|
unkown
|
page readonly
|
|
|
|
13EE47A5000
|
unkown
|
page read and write
|
|
|
|
7FF5ACB56000
|
unkown
|
page readonly
|
|
|
|
13EE4746000
|
unkown
|
page read and write
|
|
|
|
13EE4E00000
|
unkown
|
page readonly
|
|
|
|
7FF592C46000
|
unkown
|
page readonly
|
|
|
|
7FF5205C8000
|
unkown
|
page readonly
|
|
|
|
7FF520651000
|
unkown
|
page readonly
|
|
|
|
417000
|
unkown image
|
page readonly
|
|
|
|
1E24A413000
|
unkown
|
page read and write
|
|
|
|
4906000
|
unkown
|
page readonly
|
|
|
|
D6CA7AF000
|
unkown
|
page read and write
|
|
|
|
13EE4767000
|
unkown
|
page read and write
|
|
|
|
7FF5ACC01000
|
unkown
|
page readonly
|
|
|
|
13EE4763000
|
unkown
|
page read and write
|
|
|
|
7FF57F90C000
|
unkown
|
page readonly
|
|
|
|
48D0000
|
unkown
|
page readonly
|
|
|
|
7FF569BE0000
|
unkown
|
page readonly
|
|
|
|
7FF5ACC1E000
|
unkown
|
page readonly
|
|
|
|
20C6784B000
|
unkown
|
page read and write
|
|
|
|
2C559713000
|
unkown
|
page read and write
|
|
|
|
4690000
|
unkown
|
page readonly
|
|
|
|
7FF5ACD25000
|
unkown
|
page readonly
|
|
|
|
13EE3F02000
|
unkown
|
page read and write
|
|
|
|
7FF592C1A000
|
unkown
|
page readonly
|
|
|
|
13EE3EEB000
|
unkown
|
page read and write
|
|
|
|
7FF5205D9000
|
unkown
|
page readonly
|
|
|
|
4672000
|
unkown
|
page readonly
|
|
|
|
1E24A600000
|
unkown
|
page readonly
|
|
|
|
4A10000
|
unkown
|
page readonly
|
|
|
|
7FF569EB4000
|
unkown
|
page readonly
|
|
|
|
45A5000
|
unkown
|
page readonly
|
|
|
|
3C8B000
|
unkown
|
page readonly
|
|
|
|
20D8000
|
heap private
|
page read and write
|
|
|
|
8B0000
|
unkown
|
page readonly
|
|
|
|
13EE4736000
|
unkown
|
page read and write
|
|
|
|
13EE474A000
|
unkown
|
page read and write
|
|
|
|
2C5595A0000
|
unkown
|
page read and write
|
|
|
|
7FF5ACD64000
|
unkown
|
page readonly
|
|
|
|
24175147000
|
unkown
|
page read and write
|
|
|
|
3F85000
|
unkown
|
page readonly
|
|
|
|
2C559590000
|
unkown
|
page readonly
|
|
|
|
13EE4787000
|
unkown
|
page read and write
|
|
|
|
24175163000
|
unkown
|
page read and write
|
|
|
|
7FF569E60000
|
unkown
|
page readonly
|
|
|
|
13EE476D000
|
unkown
|
page read and write
|
|
|
|
7FF592C49000
|
unkown
|
page readonly
|
|
|
|
13EE3ED0000
|
unkown
|
page read and write
|
|
|
|
4BDF000
|
unkown
|
page read and write
|
|
|
|
7FF5ACD8E000
|
unkown
|
page readonly
|
|
|
|
7FF5ACD88000
|
unkown
|
page readonly
|
|
|
|
24175164000
|
unkown
|
page read and write
|
|
|
|
7FF5AC882000
|
unkown
|
page readonly
|
|
|
|
13EE4790000
|
unkown
|
page read and write
|
|
|
|
7FF57FC86000
|
unkown
|
page readonly
|
|
|
|
20C67864000
|
unkown
|
page read and write
|
|
|
|
13EE4C02000
|
unkown
|
page read and write
|
|
|
|
24175165000
|
unkown
|
page read and write
|
|
|
|
7FF592947000
|
unkown
|
page readonly
|
|
|
|
3EB2000
|
unkown
|
page readonly
|
|
|
|
13EE4759000
|
unkown
|
page read and write
|
|
|
|
7FF5ACB61000
|
unkown
|
page readonly
|
|
|
|
7FF580104000
|
unkown
|
page readonly
|
|
|
|
13EE4C02000
|
unkown
|
page read and write
|
|
|
|
7FF592ACE000
|
unkown
|
page readonly
|
|
|
|
1E24A513000
|
unkown
|
page read and write
|
|
|
|
2FCF000
|
unkown
|
page read and write
|
|
|
|
7FF5ACCEB000
|
unkown
|
page readonly
|
|
|
|
4C1E000
|
unkown
|
page read and write
|
|
|
|
13EE3E50000
|
unkown
|
page read and write
|
|
|
|
7FF592B34000
|
unkown
|
page readonly
|
|
|
|
4029000
|
unkown
|
page readonly
|
|
|
|
13EE4740000
|
unkown
|
page read and write
|
|
|
|
4652000
|
unkown
|
page readonly
|
|
|
|
13EE4570000
|
unkown
|
page readonly
|
|
|
|
13EE3E70000
|
unkown
|
page read and write
|
|
|
|
2A2000
|
unkown
|
page read and write
|
|
|
|
13EE477B000
|
unkown
|
page read and write
|
|
|
|
13EE4790000
|
unkown
|
page read and write
|
|
|
|
3FE5000
|
unkown
|
page readonly
|
|
|
|
7FF5ACA97000
|
unkown
|
page readonly
|
|
|
|
7FF592A21000
|
unkown
|
page readonly
|
|
|
|
7FF592ACB000
|
unkown
|
page readonly
|
|
|
|
D6CAB7E000
|
unkown
|
page read and write
|
|
|
|
29E000
|
unkown
|
page read and write
|
|
|
|
57A000
|
heap default
|
page read and write
|
|
|
|
7FF5AC88E000
|
unkown
|
page readonly
|
|
|
|
7FF592CB4000
|
unkown
|
page readonly
|
|
|
|
24175220000
|
unkown
|
page readonly
|
|
|
|
3E37000
|
unkown
|
page readonly
|
|
|
|
2820000
|
unkown
|
page read and write
|
|
|
|
2C559E02000
|
unkown
|
page read and write
|
|
|
|
4952000
|
unkown
|
page readonly
|
|
|
|
3F99000
|
unkown
|
page readonly
|
|
|
|
13EE4C02000
|
unkown
|
page read and write
|
|
|
|
7FF5AC56A000
|
unkown
|
page readonly
|
|
|
|
13EE4700000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5801B2000
|
unkown
|
page readonly
|
|
|
|
7FF5ACC23000
|
unkown
|
page readonly
|
|
|
|
49C0000
|
unkown
|
page readonly
|
|
|
|
20C67610000
|
unkown
|
page readonly
|
|
|
|
7FF569EAA000
|
unkown
|
page readonly
|
|
|
|
13EE3EA6000
|
unkown
|
page read and write
|
|
|
|
7FF580128000
|
unkown
|
page readonly
|
|
|
|
7FF592A73000
|
unkown
|
page readonly
|
|
|
|
13EE3EEE000
|
unkown
|
page read and write
|
|
|
|
45D5000
|
unkown
|
page readonly
|
|
|
|
29D9000
|
heap private
|
page read and write
|
|
|
|
7FF569F4A000
|
unkown
|
page readonly
|
|
|
|
2C559688000
|
unkown
|
page read and write
|
|
|
|
13EE479A000
|
unkown
|
page read and write
|
|
|
|
45F2000
|
unkown
|
page readonly
|
|
|
|
416F000
|
unkown
|
page readonly
|
|
|
|
7FF51FEB7000
|
unkown
|
page readonly
|
|
|
|
7FF569D41000
|
unkown
|
page readonly
|
|
|
|
7FF57FFBB000
|
unkown
|
page readonly
|
|
|
|
3C6B000
|
unkown
|
page readonly
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
1E24A44D000
|
unkown
|
page read and write
|
|
|
|
13EE4739000
|
unkown
|
page read and write
|
|
|
|
7FF5ACD4F000
|
unkown
|
page readonly
|
|
|
|
13EE476A000
|
unkown
|
page read and write
|
|
|
|
2C559700000
|
unkown
|
page read and write
|
|
|
|
7FF592BCA000
|
unkown
|
page readonly
|
|
|
|
1E24A459000
|
unkown
|
page read and write
|
|
|
|
13EE4767000
|
unkown
|
page read and write
|
|
|
|
1E24A465000
|
unkown
|
page read and write
|
|
|
|
13EE4530000
|
unkown
|
page readonly
|
|
|
|
7FF5800AC000
|
unkown
|
page readonly
|
|
|
|
13EE4784000
|
unkown
|
page read and write
|
|
|
|
960D78000
|
unkown
|
page read and write
|
|
|
|
7FF569EDD000
|
unkown
|
page readonly
|
|
|
|
DDE74FF000
|
unkown
|
page read and write
|
|
|
|
7FF569ECE000
|
unkown
|
page readonly
|
|
|
|
2C559600000
|
unkown
|
page read and write
|
|
|
|
7FF5ACD57000
|
unkown
|
page readonly
|
|
|
|
7FF592950000
|
unkown
|
page readonly
|
|
|
|
7FF5ACD0A000
|
unkown
|
page readonly
|
|
|
|
13EE4784000
|
unkown
|
page read and write
|
|
|
|
45C2000
|
unkown
|
page readonly
|
|
|
|
13EE3EFE000
|
unkown
|
page read and write
|
|
|
|
DDE71FC000
|
unkown
|
page read and write
|
|
|
|
7FF58013D000
|
unkown
|
page readonly
|
|
|
|
2C559708000
|
unkown
|
page read and write
|
|
|
|
20C67888000
|
unkown
|
page read and write
|
|
|
|
4762000
|
unkown
|
page readonly
|
|
|
|
4605000
|
unkown
|
page readonly
|
|
|
|
490D000
|
unkown
|
page readonly
|
|
|
|
13EE4792000
|
unkown
|
page read and write
|
|
|
|
3FF9000
|
unkown
|
page readonly
|
|
|
|
13EE3E3C000
|
unkown
|
page read and write
|
|
|
|
13EE4777000
|
unkown
|
page read and write
|
|
|
|
20C67600000
|
heap default
|
page read and write
|
|
|
|
13EE47A8000
|
unkown
|
page read and write
|
|
|
|
1E24A47D000
|
unkown
|
page read and write
|
|
|
|
3F62000
|
unkown
|
page readonly
|
|
|
|
13EE4764000
|
unkown
|
page read and write
|
|
|
|
7FF520565000
|
unkown
|
page readonly
|
|
|
|
13EE4777000
|
unkown
|
page read and write
|
|
|
|
13EE4753000
|
unkown
|
page read and write
|
|
|
|
4355000
|
unkown
|
page readonly
|
|
|
|
1E24A470000
|
unkown
|
page read and write
|
|
|
|
20E0000
|
unkown
|
page read and write
|
|
|
|
13EE4763000
|
unkown
|
page read and write
|
|
|
|
4617000
|
unkown
|
page readonly
|
|
|
|
7FF5ACCC2000
|
unkown
|
page readonly
|
|
|
|
7FF5800C5000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2C559510000
|
heap private
|
page read and write
|
|
|
|
7FF5AC673000
|
unkown
|
page readonly
|
|
|
|
1E24A3E0000
|
unkown
|
page read and write
|
|
|
|
20C67850000
|
unkown
|
page read and write
|
|
|
|
7FF57FC80000
|
unkown
|
page readonly
|
|
|
|
DDE72F7000
|
unkown
|
page read and write
|
|
|
|
3E67000
|
unkown
|
page readonly
|
|
|
|
7FF5AC677000
|
unkown
|
page readonly
|
|
|
|
1E24A429000
|
unkown
|
page read and write
|
|
|
|
4A62000
|
unkown
|
page readonly
|
|
|
|
1E24A490000
|
unkown
|
page read and write
|
|
|
|
7FF592BE7000
|
unkown
|
page readonly
|
|
|
|
13EE40D0000
|
unkown
|
page readonly
|
|
|
|
4A60000
|
unkown
|
page readonly
|
|
|
|
7FF51FEB3000
|
unkown
|
page readonly
|
|
|
|
20C67900000
|
unkown
|
page read and write
|
|
|
|
7FF592CC1000
|
unkown
|
page readonly
|
|
|
|
3C64000
|
unkown
|
page readonly
|
|
|
|
7FF5ACD96000
|
unkown
|
page readonly
|
|
|
|
2C559690000
|
unkown
|
page read and write
|
|
|
|
2C559570000
|
heap default
|
page read and write
|
|
|
|
D6CABFC000
|
unkown
|
page read and write
|
|
|
|
13EE4747000
|
unkown
|
page read and write
|
|
|
|
1E24AC02000
|
unkown
|
page read and write
|
|
|
|
4015000
|
unkown
|
page readonly
|
|
|
|
13EE4D00000
|
unkown
|
page read and write
|
|
|
|
20C67870000
|
unkown
|
page read and write
|
|
|
|
7FF569A26000
|
unkown
|
page readonly
|
|
|
|
13EE47C5000
|
unkown
|
page read and write
|
|
|
|
4169000
|
unkown
|
page readonly
|
|
|
|
4D1F000
|
unkown
|
page read and write
|
|
|
|
1E24A3C0000
|
unkown
|
page readonly
|
|
|
|
7FF592796000
|
unkown
|
page readonly
|
|
|
|
2C55A340000
|
unkown
|
page readonly
|
|
|
|
4A90000
|
unkown
|
page readonly
|
|
|
|
7FF5205B4000
|
unkown
|
page readonly
|
|
|
|
24175120000
|
heap default
|
page read and write
|
|
|
|
7FF569DB3000
|
unkown
|
page readonly
|
|
|
|
1E24A43C000
|
unkown
|
page read and write
|
|
|
|
13EE3D40000
|
unkown
|
page readonly
|
|
|
|
3C72000
|
unkown
|
page readonly
|
|
|
|
7FF5ACC84000
|
unkown
|
page readonly
|
|
|
|
1E24A500000
|
unkown
|
page read and write
|
|
|
|
7FF57FF11000
|
unkown
|
page readonly
|
|
|
|
13EE479C000
|
unkown
|
page read and write
|
|
|
|
20C675A0000
|
heap private
|
page read and write
|
|
|
|
7FF569D5B000
|
unkown
|
page readonly
|
|
|
|
3F69000
|
unkown
|
page readonly
|
|
|
|
13EE4784000
|
unkown
|
page read and write
|
|
|
|
4890000
|
unkown
|
page readonly
|
|
|
|
5D2D27E000
|
unkown
|
page read and write
|
|
|
|
7FF52056B000
|
unkown
|
page readonly
|
|
|
|
7FF592BBA000
|
unkown
|
page readonly
|
|
|
|
13EE3D60000
|
unkown
|
page read and write
|
|
|
|
13EE3EAA000
|
unkown
|
page read and write
|
|
|
|
7FF5800EF000
|
unkown
|
page readonly
|
|
|
|
7FF580024000
|
unkown
|
page readonly
|
|
|
|
7FF569D03000
|
unkown
|
page readonly
|
|
|
|
4022000
|
unkown
|
page readonly
|
|
|
|
2C559702000
|
unkown
|
page read and write
|
|
|
|
13EE4774000
|
unkown
|
page read and write
|
|
|
|
2070000
|
unkown
|
page read and write
|
|
|
|
3E42000
|
unkown
|
page readonly
|
|
|
|
7FF592C3E000
|
unkown
|
page readonly
|
|
|
|
20C677C0000
|
unkown
|
page readonly
|
|
|
|
1E24A350000
|
heap private
|
page read and write
|
|
|
|
13EE4744000
|
unkown
|
page read and write
|
|
|
|
41EC000
|
unkown
|
page readonly
|
|
|
|
7FF592BDB000
|
unkown
|
page readonly
|
|
|
|
4654000
|
unkown
|
page readonly
|
|
|
|
20C67855000
|
unkown
|
page read and write
|
|
|
|
3E12000
|
unkown
|
page readonly
|
|
|
|
7FF592B23000
|
unkown
|
page readonly
|
|
|
|
4587000
|
unkown
|
page readonly
|
|
|
|
7FF5ACADB000
|
unkown
|
page readonly
|
|
|
|
7FF5ACD1E000
|
unkown
|
page readonly
|
|
|
|
24175360000
|
unkown
|
page readonly
|
|
|
|
4A87000
|
unkown
|
page readonly
|
|
|
|
4A20000
|
unkown
|
page readonly
|
|
|
|
13EE3EC0000
|
unkown
|
page read and write
|
|
|
|
13EE4746000
|
unkown
|
page read and write
|
|
|
|
9608F7000
|
unkown
|
page read and write
|
|
|
|
13EE4800000
|
unkown
|
page readonly
|
|
|
|
13EE472D000
|
unkown
|
page read and write
|
|
|
|
41E6000
|
unkown
|
page readonly
|
|
|
|
13EE4550000
|
unkown
|
page readonly
|
|
|
|
13EE47B6000
|
unkown
|
page read and write
|
|
|
|
13EE4742000
|
unkown
|
page read and write
|
|
|
|
13EE4762000
|
unkown
|
page read and write
|
|
|
|
7FF5ACD0C000
|
unkown
|
page readonly
|
|
|
|
13EE474A000
|
unkown
|
page read and write
|
|
|
|
13EE3E4C000
|
unkown
|
page read and write
|
|
|
|
3FB5000
|
unkown
|
page readonly
|
|
|
|
24E0000
|
unkown
|
page readonly
|
|
|
|
7FF5ACC73000
|
unkown
|
page readonly
|
|
|
|
7FF57FFA1000
|
unkown
|
page readonly
|
|
|
|
4045000
|
unkown
|
page readonly
|
|
|
|
7FF57FE37000
|
unkown
|
page readonly
|
|
|
|
7FF592C07000
|
unkown
|
page readonly
|
|
|
|
560000
|
unkown
|
page execute read
|
|
|
|
4720000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF592B1D000
|
unkown
|
page readonly
|
|
|
|
13EE4758000
|
unkown
|
page read and write
|
|
|
|
4FE86DB000
|
unkown
|
page read and write
|
|
|
|
7FF592790000
|
unkown
|
page readonly
|
|
|
|
7FF569F52000
|
unkown
|
page readonly
|
|
|
|
2C55963C000
|
unkown
|
page read and write
|
|
|
|
7FF569CB1000
|
unkown
|
page readonly
|
|
|
|
29D0000
|
heap private
|
page read and write
|
|
|
|
7FF5ACC8C000
|
unkown
|
page readonly
|
|
|
|
7FF5ACD74000
|
unkown
|
page readonly
|
|
|
|
24175300000
|
unkown
|
page readonly
|
|
|
|
13EE3CD0000
|
heap private
|
page read and write
|
|
|
|
4AB0000
|
unkown
|
page readonly
|
|
|
|
13EE476B000
|
unkown
|
page read and write
|
|
|
|
13EE4758000
|
unkown
|
page read and write
|
|
|
|
47F0000
|
unkown
|
page readonly
|
|
|
|
570000
|
heap default
|
page read and write
|
|
|
|
7FF5801B1000
|
unkown
|
page readonly
|
|
|
|
7FF57FFBE000
|
unkown
|
page readonly
|
|
|
|
7FF5AC8F5000
|
unkown
|
page readonly
|
|
|
|
96032F000
|
unkown
|
page read and write
|
|
|
|
13EE4774000
|
unkown
|
page read and write
|
|
|
|
473B000
|
unkown
|
page readonly
|
|
|
|
DDE6DFF000
|
unkown
|
page read and write
|
|
|
|
20C6783C000
|
unkown
|
page read and write
|
|
|
|
1E24AE00000
|
unkown
|
page readonly
|
|
|
|
7FF592BBC000
|
unkown
|
page readonly
|
|
|
|
4FE8EFD000
|
unkown
|
page read and write
|
|
|
|
20C677D0000
|
unkown
|
page read and write
|
|
|
|
2C559654000
|
unkown
|
page read and write
|
|
|
|
3F92000
|
unkown
|
page readonly
|
|
|
|
7FF592AB1000
|
unkown
|
page readonly
|
|
|
|
13EE4724000
|
unkown
|
page read and write
|
|
|
|
20C67829000
|
unkown
|
page read and write
|
|
|
|
7FF592BFF000
|
unkown
|
page readonly
|
|
|
|
960AFF000
|
unkown
|
page read and write
|
|
|
|
13EE4728000
|
unkown
|
page read and write
|
|
|
|
2080000
|
unkown
|
page readonly
|
|
|
|
1E24A454000
|
unkown
|
page read and write
|
|
|
|
20C67859000
|
unkown
|
page read and write
|
|
|
|
20C68340000
|
unkown
|
page readonly
|
|
|
|
4FE8DFF000
|
unkown
|
page read and write
|
|
|
|
1E24A465000
|
unkown
|
page read and write
|
|
|
|
3FC9000
|
unkown
|
page readonly
|
|
|
|
7FF52058F000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
13EE3EA6000
|
unkown
|
page read and write
|
|
|
|
13EE3EEE000
|
unkown
|
page read and write
|
|
|
|
7FF5ACC6D000
|
unkown
|
page readonly
|
|
|
|
4840000
|
unkown
|
page readonly
|
|
|
|
7FF5800EC000
|
unkown
|
page readonly
|
|
|
|
7FF569E8F000
|
unkown
|
page readonly
|
|
|
|
4774000
|
unkown
|
page readonly
|
|
|
|
7FF592B3C000
|
unkown
|
page readonly
|
|
|
|
7FF5ACBC3000
|
unkown
|
page readonly
|
|
|
|
7FF592C4D000
|
unkown
|
page readonly
|
|
|
|
13EE3E00000
|
unkown
|
page read and write
|
|
|
|
7FF5AC622000
|
unkown
|
page readonly
|
|
|
|
7FF569E77000
|
unkown
|
page readonly
|
|
|
|
13EE4C00000
|
unkown
|
page read and write
|
|
|
|
7FF5ACBCA000
|
unkown
|
page readonly
|
|
|
|
7FF5ACE11000
|
unkown
|
page readonly
|
|
|
|
20C67800000
|
unkown
|
page read and write
|
|
|
|
7FF569EBF000
|
unkown
|
page readonly
|
|
|
|
48F0000
|
unkown
|
page readonly
|
|
|
|
7FF569ED6000
|
unkown
|
page readonly
|
|
|
|
7FF5800D7000
|
unkown
|
page readonly
|
|
|
|
1E24A502000
|
unkown
|
page read and write
|
|
|
|
1E24A6D0000
|
unkown
|
page readonly
|
|
|
|
13EE3D80000
|
unkown
|
page readonly
|
|
|
|
2C559800000
|
unkown
|
page readonly
|
|
|
|
7FF58012E000
|
unkown
|
page readonly
|
|
|
|
24175146000
|
unkown
|
page read and write
|
|
|
|
13EE47A5000
|
unkown
|
page read and write
|
|
|
|
13EE4550000
|
unkown
|
page read and write
|
|
|
|
4670000
|
unkown
|
page readonly
|
|
|
|
7FF5ACD99000
|
unkown
|
page readonly
|
|
|
|
13EE47A5000
|
unkown
|
page read and write
|
|
|
|
1E24A3B0000
|
heap default
|
page read and write
|
|
|
|
13EE3EE3000
|
unkown
|
page read and write
|
|
|
|
13EE4750000
|
unkown
|
page read and write
|
|
|
|
20D0000
|
heap private
|
page read and write
|
|
|
|
13EE3D50000
|
unkown
|
page readonly
|
|
|
|
241752F0000
|
unkown
|
page readonly
|
|
|
|
2417514E000
|
unkown
|
page read and write
|
|
|
|
13EE4783000
|
unkown
|
page read and write
|
|
|
|
20C67813000
|
unkown
|
page read and write
|
|
|
|
7FF592BD5000
|
unkown
|
page readonly
|
|
|
|
13EE3E52000
|
unkown
|
page read and write
|
|
|
|
13EE3ECE000
|
unkown
|
page read and write
|
|
|
|
7FF569BD7000
|
unkown
|
page readonly
|
|
|
|
2C559580000
|
unkown
|
page readonly
|
|
|
|
13EE4746000
|
unkown
|
page read and write
|
|
|
|
20C676E0000
|
unkown
|
page readonly
|
|
|
|
7FF569EA4000
|
unkown
|
page readonly
|
|
|
|
13EE477B000
|
unkown
|
page read and write
|
|
|
|
13EE47A8000
|
unkown
|
page read and write
|
|
|
|
4920000
|
unkown
|
page readonly
|
|
|
|
4FE8CF7000
|
unkown
|
page read and write
|
|
|
|
13EE3E8A000
|
unkown
|
page read and write
|
|
|
|
7FF569E5A000
|
unkown
|
page readonly
|
|
|
|
28A0000
|
unkown
|
page read and write
|
|
|
|
7FF592BFC000
|
unkown
|
page readonly
|
|
|
|
4902000
|
unkown
|
page readonly
|
|
|
|
7FF5801A4000
|
unkown
|
page readonly
|
|
|
|
13EE4777000
|
unkown
|
page read and write
|
|
|
|
DDE6D7F000
|
unkown
|
page read and write
|
|
|
|
417000
|
unkown image
|
page readonly
|
|
|
|
960C7A000
|
unkown
|
page read and write
|
|
|
|
7FF5800AA000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page readonly
|
|
|
|
7FF58002C000
|
unkown
|
page readonly
|
|
|
|
7FF5205CE000
|
unkown
|
page readonly
|
|
|
|
7FF5ACD7F000
|
unkown
|
page readonly
|
|
|
|
20C67857000
|
unkown
|
page read and write
|
|
|
|
D6CA72F000
|
unkown
|
page read and write
|
|
|
|
4575000
|
unkown
|
page readonly
|
|
|
|
13EE4540000
|
unkown
|
page readonly
|
|
|
|
3090000
|
unkown
|
page read and write
|
|
|
|
4760000
|
unkown
|
page readonly
|
|
|
|
7FF520652000
|
unkown
|
page readonly
|
|
|
|
13EE475B000
|
unkown
|
page read and write
|
|
|
|
1E24A457000
|
unkown
|
page read and write
|
|
|
|
1E24A44C000
|
unkown
|
page read and write
|
|
|
|
3EE2000
|
unkown
|
page readonly
|
|
|
|
13EE4745000
|
unkown
|
page read and write
|
|
|
|
1E24A44B000
|
unkown
|
page read and write
|
|
|
|
4A30000
|
unkown
|
page readonly
|
|
|
|
7FF57FC95000
|
unkown
|
page readonly
|
|
|
|
7FF569ED9000
|
unkown
|
page readonly
|
|
|
|
13EE477A000
|
unkown
|
page read and write
|
|
|
|
4A57000
|
unkown
|
page readonly
|
|
|
|
7FF592C14000
|
unkown
|
page readonly
|
|
|
|
24175163000
|
unkown
|
page read and write
|
|
|
|
7FF59241A000
|
unkown
|
page readonly
|
|
|
|
13EE3E4F000
|
unkown
|
page read and write
|
|
|
|
7FF5AC8E0000
|
unkown
|
page readonly
|
|
|
|
7FF580013000
|
unkown
|
page readonly
|
|
|
|
13EE475B000
|
unkown
|
page read and write
|
|
|
|
13EE474F000
|
unkown
|
page read and write
|
|
|
|
7FF569E65000
|
unkown
|
page readonly
|
|
|
|
20C67E02000
|
unkown
|
page read and write
|
|
|
|
7FF5696AA000
|
unkown
|
page readonly
|
|
|
|
13EE476D000
|
unkown
|
page read and write
|
|
|
|
7FF520598000
|
unkown
|
page readonly
|
|
|
|
4722000
|
unkown
|
page readonly
|
|
|
|
13EE4560000
|
unkown
|
page read and write
|
|
|
|
4562000
|
unkown
|
page readonly
|
|
|
|
DDE73FE000
|
unkown
|
page read and write
|
|
|
|
20C68000000
|
unkown
|
page readonly
|
|
|
|
475B000
|
unkown
|
page readonly
|
|
|
|
7FF592BD0000
|
unkown
|
page readonly
|
|
|
|
13EE4602000
|
unkown
|
page read and write
|
|
|
|
D6CAAF9000
|
unkown
|
page read and write
|
|
|
|
7FF5ACD20000
|
unkown
|
page readonly
|
|
|
|
DDE6CFB000
|
unkown
|
page read and write
|
|
|
|
591000
|
heap default
|
page read and write
|
|
|
|
7FF5ACE12000
|
unkown
|
page readonly
|
|
|
|
2C559670000
|
unkown
|
page read and write
|
|
|
|
7FF5AC937000
|
unkown
|
page readonly
|
|
|
|
960B7F000
|
unkown
|
page read and write
|
|
|
|
49A0000
|
unkown
|
page readonly
|
|
|
|
7FF580139000
|
unkown
|
page readonly
|
|
|
|
13EE3F08000
|
unkown
|
page read and write
|
|
|
|
13EE4752000
|
unkown
|
page read and write
|
|
|
|
1E24B140000
|
unkown
|
page readonly
|
|
|
|
1E24A508000
|
unkown
|
page read and write
|
|
|
|
13EE4759000
|
unkown
|
page read and write
|
|
|
|
13EE4749000
|
unkown
|
page read and write
|
|
|
|
9603AE000
|
unkown
|
page read and write
|
|
|
|
1E24A489000
|
unkown
|
page read and write
|
|
|
|
7FF5ACD1A000
|
unkown
|
page readonly
|
|
|
|
20C67902000
|
unkown
|
page read and write
|
|
|
|
7FF580114000
|
unkown
|
page readonly
|
|
|
|
20A0000
|
heap private
|
page read and write
|
|
|
|
13EE3ECE000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
unkown
|
page readonly
|
|
|
|
2417514E000
|
unkown
|
page read and write
|
|
|
|
13EE479C000
|
unkown
|
page read and write
|
|
|
|
13EE47A8000
|
unkown
|
page read and write
|
|
|
|
13EE4794000
|
unkown
|
page read and write
|
|
|
|
7FF569A35000
|
unkown
|
page readonly
|
|
|
|
4592000
|
unkown
|
page readonly
|
|
|
|
24175136000
|
heap default
|
page read and write
|
|
|
|
5D2D07B000
|
unkown
|
page read and write
|
|
|
|
7FF5ACC28000
|
unkown
|
page readonly
|
|
|
|
5D2D37F000
|
unkown
|
page read and write
|
|
|
|
13EE3D30000
|
heap default
|
page read and write
|
|
|
|
7FF569F51000
|
unkown
|
page readonly
|
|
|
|
7FF5800BA000
|
unkown
|
page readonly
|
|
|
|
7FF5205A4000
|
unkown
|
page readonly
|
|
|
|
13EE3EC7000
|
unkown
|
page read and write
|
|
|
|
4982000
|
unkown
|
page readonly
|
|
|
|
499D000
|
unkown
|
page readonly
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
1E24A400000
|
unkown
|
page read and write
|
|
|
|
13EE475B000
|
unkown
|
page read and write
|
|
|
|
960E7E000
|
unkown
|
page read and write
|
|
|
|
20C6784C000
|
unkown
|
page read and write
|
|
|
|
9607F7000
|
unkown
|
page read and write
|
|
|
|
550000
|
unkown
|
page read and write
|
|
|
|
1E24A447000
|
unkown
|
page read and write
|
|
|
|
7FF569D5E000
|
unkown
|
page readonly
|
|
|
|
13EE4C54000
|
unkown
|
page read and write
|
|
|
|
2BB0000
|
heap private
|
page read and write
|
|
|
|
7FF57FE40000
|
unkown
|
page readonly
|
|
|
|
49F0000
|
unkown
|
page readonly
|
|
|
|
1E24A48C000
|
unkown
|
page read and write
|
|
|
|
13EE4C02000
|
unkown
|
page read and write
|
|
|
|
7FF580136000
|
unkown
|
page readonly
|
|
|
|
1E24A455000
|
unkown
|
page read and write
|
|
|
|
7FF5801AA000
|
unkown
|
page readonly
|
|
|
|
13EE4719000
|
unkown
|
page read and write
|
|
|
|
7FF5ACD6A000
|
unkown
|
page readonly
|
|
|
|
2C559613000
|
unkown
|
page read and write
|
|
|
|
7FF592CC2000
|
unkown
|
page readonly
|
|
|
|
13EE479E000
|
unkown
|
page read and write
|
|
|
|
7FF5ACCEF000
|
unkown
|
page readonly
|
|
|
|
13EE4744000
|
unkown
|
page read and write
|
|
|
|
20C6784F000
|
unkown
|
page read and write
|
|
|
|
1E24A458000
|
unkown
|
page read and write
|
|
|
|
7FF5800F7000
|
unkown
|
page readonly
|
|
|
|
13EE4746000
|
unkown
|
page read and write
|
|
|
|
2BC0000
|
unkown
|
page read and write
|
|
|
|
7FF592C38000
|
unkown
|
page readonly
|
|
|
|
99000
|
unkown
|
page read and write
|
|
|
|
2C559629000
|
unkown
|
page read and write
|
|
|
|
13EE4D02000
|
unkown
|
page read and write
|
|
|
|
4909000
|
unkown
|
page readonly
|
|
|
|
430000
|
heap default
|
page read and write
|
|
|
|
13EE4C61000
|
unkown
|
page read and write
|
|
|
|
4AD0000
|
unkown
|
page readonly
|
|
|
|
4692000
|
unkown
|
page readonly
|
|
|
|
5D2CB0B000
|
unkown
|
page read and write
|
|
|
|
20C67864000
|
unkown
|
page read and write
|
|
|
|
13EE4550000
|
unkown
|
page read and write
|
|
|
|
13EE3E4D000
|
unkown
|
page read and write
|
|
|
|
2BB4000
|
heap private
|
page read and write
|
|
|
|
7FF58000D000
|
unkown
|
page readonly
|
|
|
|
1E24A450000
|
unkown
|
page read and write
|
|
|
|
4619000
|
unkown
|
page readonly
|
|
|
|
13EE4749000
|
unkown
|
page read and write
|
|
|
|
13EE4769000
|
unkown
|
page read and write
|
|
|
|
415000
|
unkown image
|
page read and write
|
|
|
|
2090000
|
unkown
|
page readonly
|
|
|
|
9602AC000
|
unkown
|
page read and write
|
|
|
|
4A32000
|
unkown
|
page readonly
|
|
|
|
20C67858000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
5D2CB8F000
|
unkown
|
page read and write
|
|
|
|
7FF569DCC000
|
unkown
|
page readonly
|
|
|
|
13EE3EB0000
|
unkown
|
page read and write
|
|
|
|
24175355000
|
heap private
|
page read and write
|
|
|
|
7FF5ACD2B000
|
unkown
|
page readonly
|
|
|
|
20C0000
|
unkown
|
page readonly
|
|
|
|
7FF5205BE000
|
unkown
|
page readonly
|
|
|
|
4694000
|
unkown
|
page readonly
|
|
|
|
3890000
|
unkown
|
page readonly
|
|
|
|
7FF592CBA000
|
unkown
|
page readonly
|
|
|
|
439B000
|
unkown
|
page readonly
|
|
|
|
7FF5205DD000
|
unkown
|
page readonly
|
|
|
|
3ED7000
|
unkown
|
page readonly
|
|
|
|
45E7000
|
unkown
|
page readonly
|
|
|
|
7FF569E4C000
|
unkown
|
page readonly
|
|
|
|
7FF569E6B000
|
unkown
|
page readonly
|
|
|
|
7FF5205AA000
|
unkown
|
page readonly
|
|
|
|
13EE3E4B000
|
unkown
|
page read and write
|
|
|
|
1E24A452000
|
unkown
|
page read and write
|
|
|
|
9609FA000
|
unkown
|
page read and write
|
|
|
|
7FF5AC892000
|
unkown
|
page readonly
|
|
|
|
13EE475D000
|
unkown
|
page read and write
|
|
|
|
13EE3E9F000
|
unkown
|
page read and write
|
|
|
|
13EE3E29000
|
unkown
|
page read and write
|
|
|
|
13EE4742000
|
unkown
|
page read and write
|
|
|
|
13EE47C0000
|
unkown
|
page read and write
|
|
|
|
4742000
|
unkown
|
page readonly
|
|
There are 655 hidden memdumps, click here to show them.