Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\ftyaXQevlQ.exe
|
'C:\Users\user\Desktop\ftyaXQevlQ.exe'
|
 |
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://101.99.94.119/WEALTHKELLS_QhOVDYr246
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
20F0000
|
unkown
|
page execute and read and write
|
|
|
|
2A470413000
|
unkown
|
page read and write
|
 |
|
|
38A0000
|
unkown
|
page readonly
|
|
|
|
7FF5AC5A4000
|
unkown
|
page readonly
|
|
|
|
7FF56A554000
|
unkown
|
page readonly
|
|
|
|
26ACAC13000
|
unkown
|
page read and write
|
|
|
|
26ACAC02000
|
unkown
|
page read and write
|
|
|
|
4607000
|
unkown
|
page readonly
|
|
|
|
C40000
|
unkown
|
page readonly
|
|
|
|
2D6E07B000
|
unkown
|
page read and write
|
|
|
|
2D6E177000
|
unkown
|
page read and write
|
|
|
|
1C6F664A000
|
unkown
|
page read and write
|
|
|
|
1C6F66B2000
|
unkown
|
page read and write
|
|
|
|
1C6F6F96000
|
unkown
|
page read and write
|
|
|
|
1DC8A650000
|
unkown
|
page read and write
|
|
|
|
26ACAC3C000
|
unkown
|
page read and write
|
|
|
|
4A52000
|
unkown
|
page readonly
|
|
|
|
1C6F6F50000
|
unkown
|
page read and write
|
|
|
|
7FF576405000
|
unkown
|
page readonly
|
|
|
|
1C6F6F38000
|
unkown
|
page read and write
|
|
|
|
1C6F6800000
|
unkown
|
page readonly
|
|
|
|
1C6F6F53000
|
unkown
|
page read and write
|
|
|
|
20D0000
|
unkown
|
page read and write
|
|
|
|
2A47044C000
|
unkown
|
page read and write
|
|
|
|
1C6F6F82000
|
unkown
|
page read and write
|
|
|
|
4880000
|
unkown
|
page readonly
|
|
|
|
1DC8A708000
|
unkown
|
page read and write
|
|
|
|
7FF5AAF5F000
|
unkown
|
page readonly
|
|
|
|
7FF56A4A0000
|
unkown
|
page readonly
|
|
|
|
26ACAC00000
|
unkown
|
page read and write
|
|
|
|
3C74000
|
unkown
|
page readonly
|
|
|
|
4159000
|
unkown
|
page readonly
|
|
|
|
4910000
|
unkown
|
page readonly
|
|
|
|
4990000
|
unkown
|
page readonly
|
|
|
|
434C000
|
unkown
|
page readonly
|
|
|
|
7FF5AAFF2000
|
unkown
|
page readonly
|
|
|
|
7FF5AC23A000
|
unkown
|
page readonly
|
|
|
|
4D02078000
|
unkown
|
page read and write
|
|
|
|
3F52000
|
unkown
|
page readonly
|
|
|
|
7FF56A579000
|
unkown
|
page readonly
|
|
|
|
22CE000
|
unkown
|
page read and write
|
|
|
|
7FF56A453000
|
unkown
|
page readonly
|
|
|
|
7FF56A55F000
|
unkown
|
page readonly
|
|
|
|
3F59000
|
unkown
|
page readonly
|
|
|
|
1C6F6F69000
|
unkown
|
page read and write
|
|
|
|
4660000
|
unkown
|
page readonly
|
|
|
|
E1069DF000
|
unkown
|
page read and write
|
|
|
|
1DC8B340000
|
unkown
|
page readonly
|
|
|
|
7FF5D6434000
|
unkown
|
page readonly
|
|
|
|
7FF56A341000
|
unkown
|
page readonly
|
|
|
|
2FFC000
|
unkown
|
page read and write
|
|
|
|
7FF57681A000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF56A4CB000
|
unkown
|
page readonly
|
|
|
|
1DC8A654000
|
unkown
|
page read and write
|
|
|
|
47E0000
|
unkown
|
page readonly
|
|
|
|
1C6F6F5E000
|
unkown
|
page read and write
|
|
|
|
7FF56A4FE000
|
unkown
|
page readonly
|
|
|
|
4EA000
|
heap default
|
page read and write
|
|
|
|
7FF5AAF17000
|
unkown
|
page readonly
|
|
|
|
1DC8A590000
|
unkown
|
page read and write
|
|
|
|
1C6F6F55000
|
unkown
|
page read and write
|
|
|
|
1C6F7502000
|
unkown
|
page read and write
|
|
|
|
2D6E27E000
|
unkown
|
page read and write
|
|
|
|
7FF569D28000
|
unkown
|
page readonly
|
|
|
|
7FF56A56E000
|
unkown
|
page readonly
|
|
|
|
7FF5D63B1000
|
unkown
|
page readonly
|
|
|
|
4A47000
|
unkown
|
page readonly
|
|
|
|
2A470491000
|
unkown
|
page read and write
|
|
|
|
26ACB280000
|
unkown
|
page read and write
|
|
|
|
2F30000
|
unkown
|
page readonly
|
|
|
|
2118000
|
heap private
|
page read and write
|
|
|
|
17D5D639000
|
unkown
|
page read and write
|
|
|
|
1C6F65F0000
|
unkown
|
page readonly
|
|
|
|
4C0000
|
unkown
|
page read and write
|
|
|
|
46D0000
|
unkown
|
page readonly
|
|
|
|
1C6F6F50000
|
unkown
|
page read and write
|
|
|
|
1C6F6F93000
|
unkown
|
page read and write
|
|
|
|
1C6F664E000
|
unkown
|
page read and write
|
|
|
|
4744000
|
unkown
|
page readonly
|
|
|
|
7FF576794000
|
unkown
|
page readonly
|
|
|
|
1C6F6F06000
|
unkown
|
page read and write
|
|
|
|
1C6F6F82000
|
unkown
|
page read and write
|
|
|
|
1C6F6F3F000
|
unkown
|
page read and write
|
|
|
|
1C6F6F67000
|
unkown
|
page read and write
|
|
|
|
3FE2000
|
unkown
|
page readonly
|
|
|
|
4A10000
|
unkown
|
page readonly
|
|
|
|
2A470447000
|
unkown
|
page read and write
|
|
|
|
4684000
|
unkown
|
page readonly
|
|
|
|
7FF5AC5BE000
|
unkown
|
page readonly
|
|
|
|
7FF56A568000
|
unkown
|
page readonly
|
|
|
|
3D9000
|
unkown
|
page read and write
|
|
|
|
4942000
|
unkown
|
page readonly
|
|
|
|
7FF576921000
|
unkown
|
page readonly
|
|
|
|
2D6DB4B000
|
unkown
|
page read and write
|
|
|
|
7FF5AAEEC000
|
unkown
|
page readonly
|
|
|
|
1C6F6F3C000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC80000
|
unkown
|
page readonly
|
|
|
|
41D6000
|
unkown
|
page readonly
|
|
|
|
438B000
|
unkown
|
page readonly
|
|
|
|
1DC8A690000
|
unkown
|
page read and write
|
|
|
|
1C6F6F93000
|
unkown
|
page read and write
|
|
|
|
1C6F6F98000
|
unkown
|
page read and write
|
|
|
|
1C6F6D30000
|
unkown
|
page readonly
|
|
|
|
7FF5AADE1000
|
unkown
|
page readonly
|
|
|
|
26ACB000000
|
unkown
|
page readonly
|
|
|
|
45E2000
|
unkown
|
page readonly
|
|
|
|
7FF576884000
|
unkown
|
page readonly
|
|
|
|
1C6F6F3C000
|
unkown
|
page read and write
|
|
|
|
1C6F7461000
|
unkown
|
page read and write
|
|
|
|
1C6F6F93000
|
unkown
|
page read and write
|
|
|
|
7FF56A2C6000
|
unkown
|
page readonly
|
|
|
|
F642E7E000
|
unkown
|
page read and write
|
|
|
|
7FF56A544000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF57672E000
|
unkown
|
page readonly
|
|
|
|
4610000
|
unkown
|
page readonly
|
|
|
|
3FB2000
|
unkown
|
page readonly
|
|
|
|
4A50000
|
unkown
|
page readonly
|
|
|
|
2A470400000
|
unkown
|
page read and write
|
|
|
|
1C6F6F62000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF569E57000
|
unkown
|
page readonly
|
|
|
|
4724000
|
unkown
|
page readonly
|
|
|
|
1C6F6688000
|
unkown
|
page read and write
|
|
|
|
7FF56A537000
|
unkown
|
page readonly
|
|
|
|
4CCF000
|
unkown
|
page read and write
|
|
|
|
26ACAC4C000
|
unkown
|
page read and write
|
|
|
|
4680000
|
unkown
|
page readonly
|
|
|
|
7FF5763F6000
|
unkown
|
page readonly
|
|
|
|
7FF56A3FE000
|
unkown
|
page readonly
|
|
|
|
3FA5000
|
unkown
|
page readonly
|
|
|
|
1C6F7500000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5D6247000
|
unkown
|
page readonly
|
|
|
|
7FF5D64D5000
|
unkown
|
page readonly
|
|
|
|
501000
|
heap default
|
page read and write
|
|
|
|
1C6F66AB000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2A47044F000
|
unkown
|
page read and write
|
|
|
|
7FF57672B000
|
unkown
|
page readonly
|
|
|
|
4A00000
|
unkown
|
page readonly
|
|
|
|
7FF5765B0000
|
unkown
|
page readonly
|
|
|
|
1C6F7600000
|
unkown
|
page readonly
|
|
|
|
7FF5763F0000
|
unkown
|
page readonly
|
|
|
|
7FF57683B000
|
unkown
|
page readonly
|
|
|
|
17D5D616000
|
heap default
|
page read and write
|
|
|
|
7FF5AAEEA000
|
unkown
|
page readonly
|
|
|
|
3EA2000
|
unkown
|
page readonly
|
|
|
|
4A20000
|
unkown
|
page readonly
|
|
|
|
7FF56A351000
|
unkown
|
page readonly
|
|
|
|
1C6F6F94000
|
unkown
|
page read and write
|
|
|
|
17D5D627000
|
unkown
|
page read and write
|
|
|
|
7FF569E53000
|
unkown
|
page readonly
|
|
|
|
7FF56A3E1000
|
unkown
|
page readonly
|
|
|
|
7FF57691A000
|
unkown
|
page readonly
|
|
|
|
7FF56A4EA000
|
unkown
|
page readonly
|
|
|
|
20A0000
|
unkown
|
page read and write
|
|
|
|
7FF56A0D5000
|
unkown
|
page readonly
|
|
|
|
1DC8B000000
|
unkown
|
page readonly
|
|
|
|
E10695C000
|
unkown
|
page read and write
|
|
|
|
E10717E000
|
unkown
|
page read and write
|
|
|
|
1DC8A580000
|
unkown
|
page readonly
|
|
|
|
2A470488000
|
unkown
|
page read and write
|
|
|
|
4345000
|
unkown
|
page readonly
|
|
|
|
2A470508000
|
unkown
|
page read and write
|
|
|
|
4609000
|
unkown
|
page readonly
|
|
|
|
7FF5AADFE000
|
unkown
|
page readonly
|
|
|
|
1C6F6F4B000
|
unkown
|
page read and write
|
|
|
|
7FF5AC651000
|
unkown
|
page readonly
|
|
|
|
26ACAC29000
|
unkown
|
page read and write
|
|
|
|
7FF5AAF05000
|
unkown
|
page readonly
|
|
|
|
2A470260000
|
heap private
|
page read and write
|
|
|
|
4D0171B000
|
unkown
|
page read and write
|
|
|
|
474B000
|
unkown
|
page readonly
|
|
|
|
1C6F6FAE000
|
unkown
|
page read and write
|
|
|
|
7FF5D6250000
|
unkown
|
page readonly
|
|
|
|
4595000
|
unkown
|
page readonly
|
|
|
|
1DC8A500000
|
heap private
|
page read and write
|
|
|
|
20B0000
|
unkown
|
page readonly
|
|
|
|
7FF5ABEB3000
|
unkown
|
page readonly
|
|
|
|
26ACAC52000
|
unkown
|
page read and write
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
1C6F7402000
|
unkown
|
page read and write
|
|
|
|
7FF5AAE53000
|
unkown
|
page readonly
|
|
|
|
1C6F6FAE000
|
unkown
|
page read and write
|
|
|
|
1C6F6647000
|
unkown
|
page read and write
|
|
|
|
E106F77000
|
unkown
|
page read and write
|
|
|
|
1C6F6FF6000
|
unkown
|
page read and write
|
|
|
|
4972000
|
unkown
|
page readonly
|
|
|
|
1C6F6FEE000
|
unkown
|
page read and write
|
|
|
|
4BCF000
|
unkown
|
page read and write
|
|
|
|
7FF5AAF0B000
|
unkown
|
page readonly
|
|
|
|
1C6F6F02000
|
unkown
|
page read and write
|
|
|
|
1DC8A658000
|
unkown
|
page read and write
|
|
|
|
7FF56A336000
|
unkown
|
page readonly
|
|
|
|
2210000
|
unkown
|
page read and write
|
|
|
|
45F5000
|
unkown
|
page readonly
|
|
|
|
2110000
|
heap private
|
page read and write
|
|
|
|
1C6F6F6A000
|
unkown
|
page read and write
|
|
|
|
2A470E00000
|
unkown
|
page readonly
|
|
|
|
2A47048F000
|
unkown
|
page read and write
|
|
|
|
21DE000
|
unkown
|
page read and write
|
|
|
|
1C6F6F52000
|
unkown
|
page read and write
|
|
|
|
1C6F6F6B000
|
unkown
|
page read and write
|
|
|
|
F642B7B000
|
unkown
|
page read and write
|
|
|
|
17D5D611000
|
unkown
|
page read and write
|
|
|
|
F64287C000
|
unkown
|
page read and write
|
|
|
|
7FF5D64BC000
|
unkown
|
page readonly
|
|
|
|
1C6F6600000
|
unkown
|
page read and write
|
|
|
|
7FF5AAAD5000
|
unkown
|
page readonly
|
|
|
|
4D0217F000
|
unkown
|
page read and write
|
|
|
|
26ACAD08000
|
unkown
|
page read and write
|
|
|
|
1C6F7429000
|
unkown
|
page read and write
|
|
|
|
2120000
|
unkown
|
page read and write
|
|
|
|
1C6F7350000
|
unkown
|
page read and write
|
|
|
|
7FF56A517000
|
unkown
|
page readonly
|
|
|
|
4005000
|
unkown
|
page readonly
|
|
|
|
7FF56A2BB000
|
unkown
|
page readonly
|
|
|
|
7FF5D6096000
|
unkown
|
page readonly
|
|
|
|
4D01E79000
|
unkown
|
page read and write
|
|
|
|
1DC8A629000
|
unkown
|
page read and write
|
|
|
|
7FF5AAF6E000
|
unkown
|
page readonly
|
|
|
|
1DC8A659000
|
unkown
|
page read and write
|
|
|
|
2A470513000
|
unkown
|
page read and write
|
|
|
|
1C6F6DF0000
|
unkown
|
page readonly
|
|
|
|
2A470470000
|
unkown
|
page read and write
|
|
|
|
7FF56A50B000
|
unkown
|
page readonly
|
|
|
|
7FF56A0C0000
|
unkown
|
page readonly
|
|
|
|
F642C77000
|
unkown
|
page read and write
|
|
|
|
7FF5AC598000
|
unkown
|
page readonly
|
|
|
|
7FF56A4D4000
|
unkown
|
page readonly
|
|
|
|
17D5D570000
|
unkown
|
page readonly
|
|
|
|
2A47044B000
|
unkown
|
page read and write
|
|
|
|
1C6F6F50000
|
unkown
|
page read and write
|
|
|
|
7FF5AC5B4000
|
unkown
|
page readonly
|
|
|
|
F642D7E000
|
unkown
|
page read and write
|
|
|
|
F6428FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D6514000
|
unkown
|
page readonly
|
|
|
|
7FF5AAFE4000
|
unkown
|
page readonly
|
|
|
|
7FF56A072000
|
unkown
|
page readonly
|
|
|
|
7FF57682E000
|
unkown
|
page readonly
|
|
|
|
7FF5AAF76000
|
unkown
|
page readonly
|
|
|
|
1C6F6D90000
|
unkown
|
page write copy
|
|
|
|
1C6F6D60000
|
unkown
|
page readonly
|
|
|
|
26ACAD13000
|
unkown
|
page read and write
|
|
|
|
7FF5AC64A000
|
unkown
|
page readonly
|
|
|
|
1C6F7402000
|
unkown
|
page read and write
|
|
|
|
1C6F6648000
|
unkown
|
page read and write
|
|
|
|
4750000
|
unkown
|
page readonly
|
|
|
|
3D5000
|
unkown
|
page read and write
|
|
|
|
7FF57689E000
|
unkown
|
page readonly
|
|
|
|
1C6F6F61000
|
unkown
|
page read and write
|
|
|
|
4D020FF000
|
unkown
|
page read and write
|
|
|
|
3E57000
|
unkown
|
page readonly
|
|
|
|
4682000
|
unkown
|
page readonly
|
|
|
|
7FF576914000
|
unkown
|
page readonly
|
|
|
|
7FF5AAC77000
|
unkown
|
page readonly
|
|
|
|
77EBE7A000
|
unkown
|
page read and write
|
|
|
|
7FF56A062000
|
unkown
|
page readonly
|
|
|
|
1C6F6653000
|
unkown
|
page read and write
|
|
|
|
48FD000
|
unkown
|
page readonly
|
|
|
|
1DC8A570000
|
unkown
|
page readonly
|
|
|
|
4577000
|
unkown
|
page readonly
|
|
|
|
1DC8A646000
|
unkown
|
page read and write
|
|
|
|
2115000
|
heap private
|
page read and write
|
|
|
|
45C5000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF56A5F1000
|
unkown
|
page readonly
|
|
|
|
45B2000
|
unkown
|
page readonly
|
|
|
|
7FF5AAE4D000
|
unkown
|
page readonly
|
|
|
|
7FF5AAE6C000
|
unkown
|
page readonly
|
|
|
|
7FF5AAFEA000
|
unkown
|
page readonly
|
|
|
|
7FF56A1DA000
|
unkown
|
page readonly
|
|
|
|
7FF56A0C6000
|
unkown
|
page readonly
|
|
|
|
20E0000
|
unkown
|
page readonly
|
|
|
|
1C6F664D000
|
unkown
|
page read and write
|
|
|
|
7FF576058000
|
unkown
|
page readonly
|
|
|
|
1C6F7400000
|
unkown
|
page read and write
|
|
|
|
7FF5D654D000
|
unkown
|
page readonly
|
|
|
|
4D01A7F000
|
unkown
|
page read and write
|
|
|
|
1DC8A560000
|
heap default
|
page read and write
|
|
|
|
17D5D63F000
|
unkown
|
page read and write
|
|
|
|
4712000
|
unkown
|
page readonly
|
|
|
|
4552000
|
unkown
|
page readonly
|
|
|
|
7FF576835000
|
unkown
|
page readonly
|
|
|
|
17D5D626000
|
unkown
|
page read and write
|
|
|
|
1DC8A64F000
|
unkown
|
page read and write
|
|
|
|
7FF56A115000
|
unkown
|
page readonly
|
|
|
|
4770000
|
unkown
|
page readonly
|
|
|
|
3C5B000
|
unkown
|
page readonly
|
|
|
|
7FF5AC644000
|
unkown
|
page readonly
|
|
|
|
4B0000
|
heap default
|
page read and write
|
|
|
|
1C6F6F59000
|
unkown
|
page read and write
|
|
|
|
7FF5AAF4A000
|
unkown
|
page readonly
|
|
|
|
7FF56A52F000
|
unkown
|
page readonly
|
|
|
|
7FF5768A6000
|
unkown
|
page readonly
|
|
|
|
7FF576830000
|
unkown
|
page readonly
|
|
|
|
1DC8A613000
|
unkown
|
page read and write
|
|
|
|
26ACAB30000
|
unkown
|
page readonly
|
|
|
|
7FF57685C000
|
unkown
|
page readonly
|
|
|
|
2A4703A0000
|
unkown
|
page readonly
|
|
|
|
1C6F6F79000
|
unkown
|
page read and write
|
|
|
|
1C6F7461000
|
unkown
|
page read and write
|
|
|
|
7FF569FDE000
|
unkown
|
page readonly
|
|
|
|
7FF57685F000
|
unkown
|
page readonly
|
|
|
|
4710000
|
unkown
|
page readonly
|
|
|
|
7FF576922000
|
unkown
|
page readonly
|
|
|
|
7FF5AAF2C000
|
unkown
|
page readonly
|
|
|
|
1C6F6F72000
|
unkown
|
page read and write
|
|
|
|
7FF5D6090000
|
unkown
|
page readonly
|
|
|
|
26ACB600000
|
unkown
|
page readonly
|
|
|
|
1DC8A670000
|
unkown
|
page read and write
|
|
|
|
1C6F6F37000
|
unkown
|
page read and write
|
|
|
|
7FF5AAAC6000
|
unkown
|
page readonly
|
|
|
|
7FF5D653E000
|
unkown
|
page readonly
|
|
|
|
48F6000
|
unkown
|
page readonly
|
|
|
|
17D5D639000
|
unkown
|
page read and write
|
|
|
|
2A470426000
|
unkown
|
page read and write
|
|
|
|
17D5D62E000
|
unkown
|
page read and write
|
|
|
|
1DC8A647000
|
unkown
|
page read and write
|
|
|
|
2A47043C000
|
unkown
|
page read and write
|
|
|
|
7FF5AC58C000
|
unkown
|
page readonly
|
|
|
|
1C6F6FF7000
|
unkown
|
page read and write
|
|
|
|
7FF56A3AA000
|
unkown
|
page readonly
|
|
|
|
7FF5D6549000
|
unkown
|
page readonly
|
|
|
|
4662000
|
unkown
|
page readonly
|
|
|
|
7FF5AAEFA000
|
unkown
|
page readonly
|
|
|
|
77EBDF9000
|
unkown
|
page read and write
|
|
|
|
17D5D8E5000
|
heap private
|
page read and write
|
|
|
|
7FF576847000
|
unkown
|
page readonly
|
|
|
|
7FF5766D3000
|
unkown
|
page readonly
|
|
|
|
476B000
|
unkown
|
page readonly
|
|
|
|
1C6F6E02000
|
unkown
|
page read and write
|
|
|
|
7FF5AAEFE000
|
unkown
|
page readonly
|
|
|
|
1C6F7402000
|
unkown
|
page read and write
|
|
|
|
1C6F6FA7000
|
unkown
|
page read and write
|
|
|
|
1C6F6FFD000
|
unkown
|
page read and write
|
|
|
|
7FF5ABEB7000
|
unkown
|
page readonly
|
|
|
|
1C6F6670000
|
unkown
|
page read and write
|
|
|
|
7FF56A277000
|
unkown
|
page readonly
|
|
|
|
77EBC7A000
|
unkown
|
page read and write
|
|
|
|
1DC8A8D0000
|
unkown
|
page readonly
|
|
|
|
7FF56A5F2000
|
unkown
|
page readonly
|
|
|
|
1C6F6629000
|
unkown
|
page read and write
|
|
|
|
1C6F66C0000
|
unkown
|
page read and write
|
|
|
|
8B0000
|
unkown
|
page readonly
|
|
|
|
1C6F6F56000
|
unkown
|
page read and write
|
|
|
|
7FF5D643C000
|
unkown
|
page readonly
|
|
|
|
417000
|
unkown image
|
page readonly
|
|
|
|
48C0000
|
unkown
|
page readonly
|
|
|
|
7FF5AC56B000
|
unkown
|
page readonly
|
|
|
|
1C6F6FF1000
|
unkown
|
page read and write
|
|
|
|
7FF56A505000
|
unkown
|
page readonly
|
|
|
|
1C6F6F02000
|
unkown
|
page read and write
|
|
|
|
1C6F68D0000
|
unkown
|
page readonly
|
|
|
|
3F75000
|
unkown
|
page readonly
|
|
|
|
7FF5AAF7D000
|
unkown
|
page readonly
|
|
|
|
1C6F7340000
|
unkown
|
page read and write
|
|
|
|
1C6F6650000
|
unkown
|
page read and write
|
|
|
|
7FF576874000
|
unkown
|
page readonly
|
|
|
|
48F9000
|
unkown
|
page readonly
|
|
|
|
1C6F6F1B000
|
unkown
|
page read and write
|
|
|
|
7FF5D6373000
|
unkown
|
page readonly
|
|
|
|
26ACAE00000
|
unkown
|
page readonly
|
|
|
|
4A80000
|
unkown
|
page readonly
|
|
|
|
1C6F7000000
|
unkown
|
page readonly
|
|
|
|
3C54000
|
unkown
|
page readonly
|
|
|
|
7FF5AC58F000
|
unkown
|
page readonly
|
|
|
|
1DC8A702000
|
unkown
|
page read and write
|
|
|
|
1C6F6F61000
|
unkown
|
page read and write
|
|
|
|
4D0227A000
|
unkown
|
page read and write
|
|
|
|
3ED2000
|
unkown
|
page readonly
|
|
|
|
7FF5AC5D9000
|
unkown
|
page readonly
|
|
|
|
1DC8A713000
|
unkown
|
page read and write
|
|
|
|
7FF5AAF68000
|
unkown
|
page readonly
|
|
|
|
7FF56A4FA000
|
unkown
|
page readonly
|
|
|
|
7FF56A4DF000
|
unkown
|
page readonly
|
|
|
|
1C6F6F93000
|
unkown
|
page read and write
|
|
|
|
4D0179F000
|
unkown
|
page read and write
|
|
|
|
7FF5D65BA000
|
unkown
|
page readonly
|
|
|
|
7FF576711000
|
unkown
|
page readonly
|
|
|
|
7FF5D64DB000
|
unkown
|
page readonly
|
|
|
|
1C6F6DE0000
|
unkown
|
page readonly
|
|
|
|
1C6F6F38000
|
unkown
|
page read and write
|
|
|
|
26ACB270000
|
unkown
|
page readonly
|
|
|
|
1C6F6F61000
|
unkown
|
page read and write
|
|
|
|
7FF576783000
|
unkown
|
page readonly
|
|
|
|
2A4702D0000
|
unkown
|
page readonly
|
|
|
|
1C6F7340000
|
unkown
|
page readonly
|
|
|
|
17D5D540000
|
unkown
|
page read and write
|
|
|
|
1C6F6F4B000
|
unkown
|
page read and write
|
|
|
|
1C6F6613000
|
unkown
|
page read and write
|
|
|
|
1C6F6F5B000
|
unkown
|
page read and write
|
|
|
|
7FF5D65C2000
|
unkown
|
page readonly
|
|
|
|
4830000
|
unkown
|
page readonly
|
|
|
|
7FF5D6546000
|
unkown
|
page readonly
|
|
|
|
4764000
|
unkown
|
page readonly
|
|
|
|
2A470600000
|
unkown
|
page readonly
|
|
|
|
1DC8A63C000
|
unkown
|
page read and write
|
|
|
|
4732000
|
unkown
|
page readonly
|
|
|
|
1C6F6F68000
|
unkown
|
page read and write
|
|
|
|
1DC8A655000
|
unkown
|
page read and write
|
|
|
|
1C6F6F65000
|
unkown
|
page read and write
|
|
|
|
21F0000
|
heap private
|
page read and write
|
|
|
|
1C6F6F8A000
|
unkown
|
page read and write
|
|
|
|
1C6F6580000
|
heap private
|
page read and write
|
|
|
|
22E0000
|
heap private
|
page read and write
|
|
|
|
7FF5D64CE000
|
unkown
|
page readonly
|
|
|
|
26ACAB20000
|
heap default
|
page read and write
|
|
|
|
26ACB402000
|
unkown
|
page read and write
|
|
|
|
7FF56A117000
|
unkown
|
page readonly
|
|
|
|
7FF57679C000
|
unkown
|
page readonly
|
|
|
|
7FF5D65B4000
|
unkown
|
page readonly
|
|
|
|
3FB9000
|
unkown
|
page readonly
|
|
|
|
7FF57682A000
|
unkown
|
page readonly
|
|
|
|
7FF56A464000
|
unkown
|
page readonly
|
|
|
|
7FF5D5D1C000
|
unkown
|
page readonly
|
|
|
|
2A470502000
|
unkown
|
page read and write
|
|
|
|
3880000
|
unkown
|
page readonly
|
|
|
|
E106D75000
|
unkown
|
page read and write
|
|
|
|
1C6F66A8000
|
unkown
|
page read and write
|
|
|
|
415000
|
unkown image
|
page read and write
|
|
|
|
2A470454000
|
unkown
|
page read and write
|
|
|
|
7FF56A3A3000
|
unkown
|
page readonly
|
|
|
|
7FF56A4A2000
|
unkown
|
page readonly
|
|
|
|
1C6F66C7000
|
unkown
|
page read and write
|
|
|
|
17D5D520000
|
unkown
|
page read and write
|
|
|
|
7FF5AADFB000
|
unkown
|
page readonly
|
|
|
|
2A470457000
|
unkown
|
page read and write
|
|
|
|
7FF57687A000
|
unkown
|
page readonly
|
|
|
|
2B30000
|
unkown
|
page read and write
|
|
|
|
1C6F6F70000
|
unkown
|
page read and write
|
|
|
|
7FF56A4CF000
|
unkown
|
page readonly
|
|
|
|
7FF5AAE64000
|
unkown
|
page readonly
|
|
|
|
7FF56A52C000
|
unkown
|
page readonly
|
|
|
|
17D5D62E000
|
unkown
|
page read and write
|
|
|
|
1C6F66FB000
|
unkown
|
page read and write
|
|
|
|
2209000
|
heap private
|
page read and write
|
|
|
|
1C6F6F91000
|
unkown
|
page read and write
|
|
|
|
7FF5AA728000
|
unkown
|
page readonly
|
|
|
|
26ACAC4F000
|
unkown
|
page read and write
|
|
|
|
7FF5AAF54000
|
unkown
|
page readonly
|
|
|
|
1DC8A800000
|
unkown
|
page readonly
|
|
|
|
1DC8A600000
|
unkown
|
page read and write
|
|
|
|
7FF5D6507000
|
unkown
|
page readonly
|
|
|
|
1C6F6F38000
|
unkown
|
page read and write
|
|
|
|
7FF56A3FB000
|
unkown
|
page readonly
|
|
|
|
7FF57681C000
|
unkown
|
page readonly
|
|
|
|
7FF5AC652000
|
unkown
|
page readonly
|
|
|
|
26ACAC70000
|
unkown
|
page read and write
|
|
|
|
7FF5AC5AA000
|
unkown
|
page readonly
|
|
|
|
1DC8A64D000
|
unkown
|
page read and write
|
|
|
|
2A470C02000
|
unkown
|
page read and write
|
|
|
|
20C0000
|
heap private
|
page read and write
|
|
|
|
7FF5768AD000
|
unkown
|
page readonly
|
|
|
|
2A30000
|
unkown
|
page read and write
|
|
|
|
1C6F6F67000
|
unkown
|
page read and write
|
|
|
|
1C6F65E0000
|
heap default
|
page read and write
|
|
|
|
1C6F7454000
|
unkown
|
page read and write
|
|
|
|
1DC8AE02000
|
unkown
|
page read and write
|
|
|
|
7FF5D64FF000
|
unkown
|
page readonly
|
|
|
|
1C6F7340000
|
unkown
|
page read and write
|
|
|
|
7FF56A576000
|
unkown
|
page readonly
|
|
|
|
1C6F7402000
|
unkown
|
page read and write
|
|
|
|
4D01D77000
|
unkown
|
page read and write
|
|
|
|
7FF5AAAC0000
|
unkown
|
page readonly
|
|
|
|
26F0000
|
unkown
|
page readonly
|
|
|
|
1C6F6F49000
|
unkown
|
page read and write
|
|
|
|
7FF5D60A5000
|
unkown
|
page readonly
|
|
|
|
2080000
|
unkown
|
page readonly
|
|
|
|
2D6E37E000
|
unkown
|
page read and write
|
|
|
|
41DC000
|
unkown
|
page readonly
|
|
|
|
1C6F7402000
|
unkown
|
page read and write
|
|
|
|
1C6F6F4E000
|
unkown
|
page read and write
|
|
|
|
4035000
|
unkown
|
page readonly
|
|
|
|
1C6F6651000
|
unkown
|
page read and write
|
|
|
|
1C6F6654000
|
unkown
|
page read and write
|
|
|
|
49D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D64E7000
|
unkown
|
page readonly
|
|
|
|
49E0000
|
unkown
|
page readonly
|
|
|
|
2A470429000
|
unkown
|
page read and write
|
|
|
|
E10707F000
|
unkown
|
page read and write
|
|
|
|
7FF5D64CA000
|
unkown
|
page readonly
|
|
|
|
1C6F6F55000
|
unkown
|
page read and write
|
|
|
|
3FE9000
|
unkown
|
page readonly
|
|
|
|
1C6F7360000
|
unkown
|
page readonly
|
|
|
|
77EBD7E000
|
unkown
|
page read and write
|
|
|
|
7FF5AC565000
|
unkown
|
page readonly
|
|
|
|
7FF5AAF79000
|
unkown
|
page readonly
|
|
|
|
1C6F6F00000
|
unkown
|
page read and write
|
|
|
|
7FF5768A9000
|
unkown
|
page readonly
|
|
|
|
45A7000
|
unkown
|
page readonly
|
|
|
|
7FF576681000
|
unkown
|
page readonly
|
|
|
|
1C6F6FF7000
|
unkown
|
page read and write
|
|
|
|
1C6F7402000
|
unkown
|
page read and write
|
|
|
|
1C6F66EC000
|
unkown
|
page read and write
|
|
|
|
1C6F6FA9000
|
unkown
|
page read and write
|
|
|
|
2A470A70000
|
unkown
|
page readonly
|
|
|
|
7FF5AAF44000
|
unkown
|
page readonly
|
|
|
|
1C6F6F93000
|
unkown
|
page read and write
|
|
|
|
48E0000
|
unkown
|
page readonly
|
|
|
|
45D7000
|
unkown
|
page readonly
|
|
|
|
17D5D63E000
|
unkown
|
page read and write
|
|
|
|
1C6F66A7000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page readonly
|
|
|
|
1C6F6F27000
|
unkown
|
page read and write
|
|
|
|
7FF576898000
|
unkown
|
page readonly
|
|
|
|
3C62000
|
unkown
|
page readonly
|
|
|
|
7FF5D6321000
|
unkown
|
page readonly
|
|
|
|
1C6F6F59000
|
unkown
|
page read and write
|
|
|
|
7FF5AAF2F000
|
unkown
|
page readonly
|
|
|
|
7FF5D6538000
|
unkown
|
page readonly
|
|
|
|
26ACAAC0000
|
heap private
|
page read and write
|
|
|
|
26ACB940000
|
unkown
|
page readonly
|
|
|
|
E106E7B000
|
unkown
|
page read and write
|
|
|
|
1DC8A657000
|
unkown
|
page read and write
|
|
|
|
4752000
|
unkown
|
page readonly
|
|
|
|
4012000
|
unkown
|
page readonly
|
|
|
|
4565000
|
unkown
|
page readonly
|
|
|
|
1C6F6F57000
|
unkown
|
page read and write
|
|
|
|
99000
|
unkown
|
page read and write
|
|
|
|
3C7B000
|
unkown
|
page readonly
|
|
|
|
7FF56A408000
|
unkown
|
page readonly
|
|
|
|
2070000
|
unkown
|
page read and write
|
|
|
|
1C6F6F65000
|
unkown
|
page read and write
|
|
|
|
1C6F6F4E000
|
unkown
|
page read and write
|
|
|
|
7FF569E02000
|
unkown
|
page readonly
|
|
|
|
1C6F6F8A000
|
unkown
|
page read and write
|
|
|
|
3E27000
|
unkown
|
page readonly
|
|
|
|
4AA0000
|
unkown
|
page readonly
|
|
|
|
4AC0000
|
unkown
|
page readonly
|
|
|
|
F642F7F000
|
unkown
|
page read and write
|
|
|
|
1C6F66EC000
|
unkown
|
page read and write
|
|
|
|
7FF5D65C1000
|
unkown
|
page readonly
|
|
|
|
2A4702C0000
|
heap default
|
page read and write
|
|
|
|
1C6F6FF7000
|
unkown
|
page read and write
|
|
|
|
26ACAD00000
|
unkown
|
page read and write
|
|
|
|
17D5D600000
|
heap default
|
page read and write
|
|
|
|
1DC8A64B000
|
unkown
|
page read and write
|
|
|
|
2A470500000
|
unkown
|
page read and write
|
|
|
|
7FF5D651A000
|
unkown
|
page readonly
|
|
|
|
F64297F000
|
unkown
|
page read and write
|
|
|
|
3EC7000
|
unkown
|
page readonly
|
|
|
|
7FF5AC5C8000
|
unkown
|
page readonly
|
|
|
|
2A470446000
|
unkown
|
page read and write
|
|
|
|
7FF56A54A000
|
unkown
|
page readonly
|
|
|
|
E106C7F000
|
unkown
|
page read and write
|
|
|
|
1C6F6F60000
|
unkown
|
page read and write
|
|
|
|
1C6F6F57000
|
unkown
|
page read and write
|
|
|
|
1C6F6F39000
|
unkown
|
page read and write
|
|
|
|
1C6F6F96000
|
unkown
|
page read and write
|
|
|
|
7FF5AC5DD000
|
unkown
|
page readonly
|
|
|
|
1C6F6716000
|
unkown
|
page read and write
|
|
|
|
4582000
|
unkown
|
page readonly
|
|
|
|
1C6F6F70000
|
unkown
|
page read and write
|
|
|
|
1C6F6F5A000
|
unkown
|
page read and write
|
|
|
|
3E02000
|
unkown
|
page readonly
|
|
|
|
7FF56A46C000
|
unkown
|
page readonly
|
|
|
|
1C6F6F60000
|
unkown
|
page read and write
|
|
|
|
3FD5000
|
unkown
|
page readonly
|
|
|
|
7FF5AADA3000
|
unkown
|
page readonly
|
|
|
|
7FF5D6423000
|
unkown
|
page readonly
|
|
|
|
7FF56A300000
|
unkown
|
page readonly
|
|
|
|
1C6F6F98000
|
unkown
|
page read and write
|
|
|
|
7FF57688F000
|
unkown
|
page readonly
|
|
|
|
1C6F6D40000
|
unkown
|
page read and write
|
|
|
|
26ACAC7F000
|
unkown
|
page read and write
|
|
|
|
3F82000
|
unkown
|
page readonly
|
|
|
|
1DC8A700000
|
unkown
|
page read and write
|
|
|
|
1C6F664B000
|
unkown
|
page read and write
|
|
|
|
2D6DE7F000
|
unkown
|
page read and write
|
|
|
|
7FF5D64D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D64BA000
|
unkown
|
page readonly
|
|
|
|
1C6F6F02000
|
unkown
|
page read and write
|
|
|
|
1C6F6656000
|
unkown
|
page read and write
|
|
|
|
1C6F6FB7000
|
unkown
|
page read and write
|
|
|
|
7FF5D64FC000
|
unkown
|
page readonly
|
|
|
|
22F0000
|
unkown
|
page read and write
|
|
|
|
48A0000
|
unkown
|
page readonly
|
|
|
|
1DC8A64C000
|
unkown
|
page read and write
|
|
|
|
1C6F6F68000
|
unkown
|
page read and write
|
|
|
|
77EBCFF000
|
unkown
|
page read and write
|
|
|
|
2A47044D000
|
unkown
|
page read and write
|
|
|
|
17D5D450000
|
unkown
|
page readonly
|
|
|
|
4D01F7E000
|
unkown
|
page read and write
|
|
|
|
7FF5AAF00000
|
unkown
|
page readonly
|
|
|
|
7FF56A06E000
|
unkown
|
page readonly
|
|
|
|
7FF56A5E4000
|
unkown
|
page readonly
|
|
|
|
77EBEFE000
|
unkown
|
page read and write
|
|
|
|
7FF5765A7000
|
unkown
|
page readonly
|
|
|
|
7FF5AAFF1000
|
unkown
|
page readonly
|
|
|
|
17D5D8F0000
|
unkown
|
page readonly
|
|
|
|
48F2000
|
unkown
|
page readonly
|
|
|
|
1C6F6F49000
|
unkown
|
page read and write
|
|
|
|
1C6F6708000
|
unkown
|
page read and write
|
|
|
|
1C6F66C4000
|
unkown
|
page read and write
|
|
|
|
7FF56A5EA000
|
unkown
|
page readonly
|
|
|
|
7FF5D63CB000
|
unkown
|
page readonly
|
|
|
|
26ACAC8B000
|
unkown
|
page read and write
|
|
|
|
2090000
|
unkown
|
page readonly
|
|
|
|
1C6F6649000
|
unkown
|
page read and write
|
|
|
|
4664000
|
unkown
|
page readonly
|
|
|
|
7FF56A403000
|
unkown
|
page readonly
|
|
|
|
1C6F66E4000
|
unkown
|
page read and write
|
|
|
|
1C6F6FEA000
|
unkown
|
page read and write
|
|
|
|
2200000
|
heap private
|
page read and write
|
|
|
|
1C6F6713000
|
unkown
|
page read and write
|
|
|
|
4A22000
|
unkown
|
page readonly
|
|
|
|
7FF57677D000
|
unkown
|
page readonly
|
|
|
|
1C6F6F82000
|
unkown
|
page read and write
|
|
|
|
7FF576867000
|
unkown
|
page readonly
|
|
|
|
2A4703C0000
|
unkown
|
page read and write
|
|
|
|
1DC8A681000
|
unkown
|
page read and write
|
|
|
|
17D5D62E000
|
unkown
|
page read and write
|
|
|
|
17D5D580000
|
unkown
|
page readonly
|
|
|
|
1C6F6F65000
|
unkown
|
page read and write
|
|
|
|
1C6F6702000
|
unkown
|
page read and write
|
|
|
|
17D5D639000
|
unkown
|
page read and write
|
|
|
|
472B000
|
unkown
|
page readonly
|
|
|
|
415F000
|
unkown
|
page readonly
|
|
|
|
3C42000
|
unkown
|
page readonly
|
|
|
|
2D6DBCF000
|
unkown
|
page read and write
|
|
|
|
7FF56A334000
|
unkown
|
page readonly
|
|
|
|
7FF5D63CE000
|
unkown
|
page readonly
|
|
|
|
4642000
|
unkown
|
page readonly
|
|
|
|
7FF5D6524000
|
unkown
|
page readonly
|
|
|
|
77EBF7C000
|
unkown
|
page read and write
|
|
|
|
7FF5AAF37000
|
unkown
|
page readonly
|
|
|
|
7FF5D641D000
|
unkown
|
page readonly
|
|
|
|
3E32000
|
unkown
|
page readonly
|
|
|
|
7FF5AAD51000
|
unkown
|
page readonly
|
|
|
|
1C6F6F98000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page readonly
|
|
|
|
1C6F663C000
|
unkown
|
page read and write
|
|
|
|
7FF56A280000
|
unkown
|
page readonly
|
|
|
|
4D01C7A000
|
unkown
|
page read and write
|
|
|
|
3EF7000
|
unkown
|
page readonly
|
|
|
|
7FF5D652F000
|
unkown
|
page readonly
|
|
|
|
417000
|
unkown image
|
page readonly
|
|
|
|
1C6F6F5B000
|
unkown
|
page read and write
|
|
|
|
7FF56A4EC000
|
unkown
|
page readonly
|
|
|
|
17D5D8E0000
|
heap private
|
page read and write
|
|
|
|
7FF5AC560000
|
unkown
|
page readonly
|
|
|
|
4D0000
|
unkown
|
page execute read
|
|
|
|
1C6F6F67000
|
unkown
|
page read and write
|
|
|
|
1C6F6F53000
|
unkown
|
page read and write
|
|
|
|
4019000
|
unkown
|
page readonly
|
|
|
|
498D000
|
unkown
|
page readonly
|
|
|
|
1C6F6FA7000
|
unkown
|
page read and write
|
|
|
|
1DC8A652000
|
unkown
|
page read and write
|
|
|
|
7FF56A500000
|
unkown
|
page readonly
|
|
|
|
1C6F6F7C000
|
unkown
|
page read and write
|
|
|
|
7FF56A44D000
|
unkown
|
page readonly
|
|
|
|
7FF5AC5CE000
|
unkown
|
page readonly
|
|
|
|
49B0000
|
unkown
|
page readonly
|
|
|
|
4A77000
|
unkown
|
page readonly
|
|
|
|
1C6F7340000
|
unkown
|
page read and write
|
|
|
|
1C6F7402000
|
unkown
|
page read and write
|
|
|
|
2A4703B0000
|
unkown
|
page readonly
|
|
|
|
20C4000
|
heap private
|
page read and write
|
|
|
|
1C6F6F43000
|
unkown
|
page read and write
|
|
|
|
26ACAD02000
|
unkown
|
page read and write
|
|
|
|
1C6F6F8A000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
heap default
|
page read and write
|
|
|
|
4644000
|
unkown
|
page readonly
|
|
|
|
3080000
|
unkown
|
page read and write
|
|
|
|
3F89000
|
unkown
|
page readonly
|
|
|
|
1C6F6F75000
|
unkown
|
page read and write
|
|
There are 659 hidden memdumps, click here to show them.