Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
SureServoPROInstall_V4_1_0_5_DB2_0_8.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\0x0409.ini
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\0x0409.ini
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\ISSetup.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, PECompact2 compressed
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\autorun.inf
|
Microsoft Windows Autorun file, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\data1.cab
|
InstallShield CAB
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\data1.hdr
|
InstallShield CAB
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\layout.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\setup.bmp
|
PC bitmap, Windows 3.x format, 640 x 480 x 8
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\setup.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\setup.ini
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\setup.inx
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\ISSetup.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, PECompact2 compressed
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\MsiStub\{1F57C7D2-0C2E-406D-90F1-7C57BC934AB8}\SureServo
PRO.msi
|
{96BB593B-34E7-4635-BEC7-ABBCC2C5C462}
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\setup.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\setup.ini
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISB542E.tmp
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\cor542B.tmp
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\dot542C.tmp
|
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\dot542D.tmp
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{62E0592E-B1C0-499B-83F6-829789BDBD51}\DIF542A.tmp
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{62E0592E-B1C0-499B-83F6-829789BDBD51}\Fon53FA.tmp
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{62E0592E-B1C0-499B-83F6-829789BDBD51}\Str542F.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{62E0592E-B1C0-499B-83F6-829789BDBD51}\_is5463.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{62E0592E-B1C0-499B-83F6-829789BDBD51}\def5462.tmp
|
RIFF (little-endian) data, palette, version 1028, 0 entries
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{62E0592E-B1C0-499B-83F6-829789BDBD51}\isr5430.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, PECompact2 compressed
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{62E0592E-B1C0-499B-83F6-829789BDBD51}\lic53F9.tmp
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{62E0592E-B1C0-499B-83F6-829789BDBD51}\set53F8.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Def5461.tmp
|
RIFF (little-endian) data, palette, version 1028, 0 entries
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Isr5530.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, PECompact2 compressed
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\MMO6B1E.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Set5500.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str55CE.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str5757.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str57C6.tmp
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str5826.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str5895.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str58F5.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str5993.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str59F3.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str5B8B.tmp
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str5C1A.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str5C89.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str5CE9.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str5D49.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str5DE7.tmp
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str61D1.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str626F.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str62FE.tmp
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str636D.tmp
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str63FC.tmp
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str646B.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str64CB.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str652B.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str65C9.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str6667.tmp
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str66C7.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str6765.tmp
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str6823.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str6892.tmp
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str6921.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str69BF.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str6A1F.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str6A8E.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\Str6B1D.tmp
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5560.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is55FE.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5758.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is57C7.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5827.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5896.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is58F6.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5994.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is59F4.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5B8C.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5C1B.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5C8A.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5CEA.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5D4A.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is5DE8.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is61D2.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is6270.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is632E.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is636E.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is63FD.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is646C.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is64CC.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is656A.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is65CA.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is6668.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is66F7.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is6766.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is6824.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is6893.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is6922.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is69C0.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is6A20.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\{8DA8AB7C-68BD-40BE-B843-21CE4CD3DBA4}\_is6ABE.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
There are 88 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\SureServoPROInstall_V4_1_0_5_DB2_0_8.exe
|
'C:\Users\user\Desktop\SureServoPROInstall_V4_1_0_5_DB2_0_8.exe'
|
||
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\setup.exe
|
C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\setup.exe -package:'C:\Users\user\Desktop\SureServoPROInstall_V4_1_0_5_DB2_0_8.exe'
-no_selfdeleter -IS_temp -media_path:'C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\' -tempdisk1folder:'C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\'
-IS_OriginalLauncher:'C:\Users\user\AppData\Local\Temp\{13FF6051-2C7F-44D5-BA42-894B5CE410C5}\Disk1\setup.exe'
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe
|
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{B8FD074B-9EF5-416D-A3EE-6D8FB115C83F}
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe
|
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{3BED6DCE-3BD7-42E3-BF6F-81E3F37201FD}
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe
|
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{30C7FFBC-292B-4310-AFE7-0365F4C35832}
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe
|
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{C15C7E7D-7890-420A-86BA-7E9024358B47}
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe
|
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{6332241F-264C-4388-88EB-7A98CF4DBA83}
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe
|
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{D1BE9E7C-E67D-4CF9-BA65-428ACD016A71}
|
||
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe
|
C:\Users\user\AppData\Local\Temp\{5A5FC2C6-9262-4BBA-8AD9-F7AEF29201FF}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{176CEB1A-A045-48A9-ADF5-06CDBA606E31}
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://deviis4.installshield.com/NetNirvana/
|
unknown
|
||
http://deviis4.installshield.com/NetNirvana/data2.cabDisk1
|
unknown
|
||
http://=0x%04x.iniMS
|
unknown
|
||
http://support.automationdirect.com8
|
unknown
|
||
http://www.installshield.com/isetup/ProErrorCentral.asp?ErrorCode=%d
|
unknown
|
||
http://crl.thawte.com/ThawteTimestampingCA.crl0
|
unknown
|
||
http://support.automationdirect.com
|
unknown
|
||
http://www.flexerasoftware.com0
|
unknown
|
||
http://www.symauth.com/cps0(
|
unknown
|
||
http://www.symauth.com/rpa00
|
unknown
|
||
http://ocsp.thawte.com0
|
unknown
|
There are 1 hidden URLs, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
3AFB000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
1E58A95F000
|
unkown
|
page read and write
|
||
7FF52CF57000
|
unkown
|
page readonly
|
||
7FF5BF6BD000
|
unkown
|
page readonly
|
||
1FBED902000
|
unkown
|
page read and write
|
||
52C0000
|
unkown
|
page execute and read and write
|
||
4489000
|
unkown
|
page readonly
|
||
971000
|
unkown
|
page read and write
|
||
7C074FA000
|
unkown
|
page read and write
|
||
1E58AE00000
|
unkown
|
page read and write
|
||
18E000
|
unkown
|
page read and write
|
||
18394ED6000
|
unkown
|
page read and write
|
||
8DD000
|
unkown
|
page read and write
|
||
3ABF8FF000
|
unkown
|
page read and write
|
||
1E5889CC000
|
unkown
|
page read and write
|
||
33E6000
|
unkown
|
page read and write
|
||
64A0000
|
unkown
|
page read and write
|
||
5E3B000
|
unkown
|
page read and write
|
||
880000
|
heap default
|
page read and write
|
||
5BB1000
|
unkown image
|
page execute read
|
||
1E58B013000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
7FF7F39AA000
|
unkown image
|
page read and write
|
||
33D7000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
8E4000
|
unkown
|
page read and write
|
||
4979DFC000
|
unkown
|
page read and write
|
||
1A238B38000
|
unkown
|
page read and write
|
||
1E58A902000
|
unkown
|
page read and write
|
||
7FF5BFDAD000
|
unkown
|
page readonly
|
||
232A54F0000
|
heap default
|
page read and write
|
||
4990000
|
unkown
|
page read and write
|
||
1E5889CD000
|
unkown
|
page read and write
|
||
65F3000
|
unkown
|
page read and write
|
||
25E92550000
|
unkown
|
page write copy
|
||
49799FB000
|
unkown
|
page read and write
|
||
8EC000
|
heap default
|
page read and write
|
||
1FBED8B0000
|
heap default
|
page read and write
|
||
340B000
|
unkown
|
page read and write
|
||
1E58B000000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page write copy
|
||
1E58AADF000
|
unkown
|
page read and write
|
||
497A47A000
|
unkown
|
page read and write
|
||
1FBED700000
|
unkown
|
page readonly
|
||
5FA0000
|
unkown
|
page read and write
|
||
1FBED8E5000
|
unkown
|
page read and write
|
||
6420000
|
unkown
|
page read and write
|
||
650000
|
unkown
|
page read and write
|
||
906000
|
unkown
|
page read and write
|
||
1EB7CAC0000
|
unkown
|
page readonly
|
||
6D80000
|
unkown
|
page read and write
|
||
3D52000
|
unkown
|
page readonly
|
||
1E588958000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
2047EFE000
|
unkown
|
page read and write
|
||
1F802702000
|
unkown
|
page read and write
|
||
1E58AADA000
|
unkown
|
page read and write
|
||
1E5889BF000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
1E58A92E000
|
unkown
|
page read and write
|
||
4475000
|
unkown
|
page readonly
|
||
64C0000
|
unkown
|
page read and write
|
||
620000
|
heap default
|
page read and write
|
||
25E92602000
|
unkown
|
page read and write
|
||
4590000
|
unkown
|
page readonly
|
||
232A7100000
|
unkown
|
page readonly
|
||
7FF52D220000
|
unkown
|
page readonly
|
||
65DE000
|
unkown
|
page read and write
|
||
7C0777E000
|
unkown
|
page read and write
|
||
1E58B810000
|
unkown
|
page read and write
|
||
1A0A58A0000
|
unkown
|
page read and write
|
||
1E58A930000
|
unkown
|
page read and write
|
||
7FF52D364000
|
unkown
|
page readonly
|
||
1FBED8FF000
|
unkown
|
page read and write
|
||
1E58AA00000
|
unkown
|
page read and write
|
||
2231FBA0000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
1E58AC02000
|
unkown
|
page read and write
|
||
59E0000
|
unkown
|
page read and write
|
||
59FA000
|
unkown
|
page read and write
|
||
95C000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
3D22000
|
unkown
|
page readonly
|
||
4487000
|
unkown
|
page readonly
|
||
6594000
|
unkown
|
page read and write
|
||
7FF52D0D9000
|
unkown
|
page readonly
|
||
5DBF000
|
unkown
|
page read and write
|
||
1EB7B0C0000
|
unkown
|
page readonly
|
||
8FB000
|
unkown
|
page read and write
|
||
3E55000
|
unkown
|
page readonly
|
||
6B0000
|
unkown
|
page readonly
|
||
8DF000
|
unkown
|
page read and write
|
||
8D3000
|
unkown
|
page read and write
|
||
45D0000
|
unkown
|
page readonly
|
||
4979BFB000
|
unkown
|
page read and write
|
||
2047AFB000
|
unkown
|
page read and write
|
||
1A238B20000
|
unkown
|
page read and write
|
||
5E90000
|
unkown
|
page read and write
|
||
307E000
|
unkown
|
page read and write
|
||
33D7000
|
unkown
|
page read and write
|
||
5864000
|
unkown
|
page read and write
|
||
4890000
|
unkown
|
page readonly
|
||
18394ED1000
|
unkown
|
page read and write
|
||
7FF5257A1000
|
unkown
|
page readonly
|
||
20F4000
|
heap private
|
page read and write
|
||
18E47FF000
|
unkown
|
page read and write
|
||
25E925A0000
|
unkown
|
page readonly
|
||
1E5889FD000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
911000
|
unkown
|
page read and write
|
||
48D2000
|
unkown
|
page readonly
|
||
8FD000
|
unkown
|
page read and write
|
||
5E2A000
|
unkown
|
page read and write
|
||
902000
|
unkown
|
page read and write
|
||
65CA000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page read and write
|
||
7FF52D297000
|
unkown
|
page readonly
|
||
3500000
|
unkown image
|
page readonly
|
||
232A5536000
|
unkown
|
page read and write
|
||
232A70F0000
|
heap private
|
page read and write
|
||
45C4000
|
unkown
|
page readonly
|
||
1E58AC00000
|
unkown
|
page read and write
|
||
C4F000
|
unkown
|
page read and write
|
||
1A238B1F000
|
unkown
|
page read and write
|
||
912000
|
unkown
|
page read and write
|
||
8E4000
|
unkown
|
page read and write
|
||
45A4000
|
unkown
|
page readonly
|
||
3457000
|
unkown
|
page read and write
|
||
18394E40000
|
heap private
|
page read and write
|
||
53F3000
|
unkown image
|
page read and write
|
||
7FF5BFD5B000
|
unkown
|
page readonly
|
||
8FE000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
2BA3C79000
|
unkown
|
page read and write
|
||
46B0000
|
unkown
|
page readonly
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
1E58AADF000
|
unkown
|
page read and write
|
||
8F9000
|
unkown
|
page read and write
|
||
585D000
|
unkown
|
page read and write
|
||
8D0000
|
unkown
|
page read and write
|
||
1E58B010000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
44C2000
|
unkown
|
page readonly
|
||
1E58C000000
|
unkown
|
page readonly
|
||
5E09000
|
unkown
|
page read and write
|
||
4979AFA000
|
unkown
|
page read and write
|
||
3E85000
|
unkown
|
page readonly
|
||
1E58A902000
|
unkown
|
page read and write
|
||
2231FB20000
|
unkown
|
page readonly
|
||
3CD7000
|
unkown
|
page readonly
|
||
4860000
|
unkown
|
page readonly
|
||
18396800000
|
unkown
|
page readonly
|
||
1E58A9D0000
|
unkown
|
page read and write
|
||
1A0A58C8000
|
heap default
|
page read and write
|
||
6040000
|
unkown
|
page read and write
|
||
4979B79000
|
unkown
|
page read and write
|
||
497A1FB000
|
unkown
|
page read and write
|
||
7FF5BFE77000
|
unkown
|
page readonly
|
||
8B7000
|
unkown
|
page read and write
|
||
7FF525591000
|
unkown
|
page readonly
|
||
8EC000
|
unkown
|
page read and write
|
||
7FF52D243000
|
unkown
|
page readonly
|
||
18394EA6000
|
heap default
|
page read and write
|
||
3200000
|
unkown
|
page read and write
|
||
8E4000
|
unkown
|
page read and write
|
||
1FF4000
|
unkown
|
page read and write
|
||
497A5FB000
|
unkown
|
page read and write
|
||
2680000
|
unkown
|
page read and write
|
||
3501000
|
unkown image
|
page execute and read and write
|
||
1A23A4F0000
|
heap private
|
page read and write
|
||
7FF5BFC26000
|
unkown
|
page readonly
|
||
912000
|
unkown
|
page read and write
|
||
1E58AA95000
|
unkown
|
page read and write
|
||
7FF5BFE2B000
|
unkown
|
page readonly
|
||
401000
|
unkown image
|
page execute read
|
||
7FF52537A000
|
unkown
|
page readonly
|
||
1E5888D0000
|
unkown
|
page read and write
|
||
1A238B37000
|
unkown
|
page read and write
|
||
1F802629000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page execute and read and write
|
||
7FF5256B5000
|
unkown
|
page readonly
|
||
5B91000
|
unkown image
|
page execute and read and write
|
||
33ED000
|
unkown
|
page read and write
|
||
7FF5BFC81000
|
unkown
|
page readonly
|
||
8DE000
|
unkown
|
page read and write
|
||
BBD9BB000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
21E0000
|
unkown
|
page read and write
|
||
20480FF000
|
unkown
|
page read and write
|
||
5E70000
|
unkown
|
page read and write
|
||
8DF000
|
unkown
|
page read and write
|
||
1FD8000
|
unkown
|
page read and write
|
||
6470000
|
unkown
|
page read and write
|
||
18E41EB000
|
unkown
|
page read and write
|
||
90A000
|
unkown
|
page read and write
|
||
1E58AAB7000
|
unkown
|
page read and write
|
||
10001000
|
unkown image
|
page execute and read and write
|
||
87A000
|
heap private
|
page read and write
|
||
1E58AB43000
|
unkown
|
page read and write
|
||
8F9000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page write copy
|
||
7C076F9000
|
unkown
|
page read and write
|
||
65D000
|
unkown
|
page read and write
|
||
3408000
|
unkown
|
page read and write
|
||
610000
|
unkown
|
page readonly
|
||
1E58A740000
|
unkown
|
page read and write
|
||
1E58AB43000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
3690000
|
heap private
|
page read and write
|
||
5A7E000
|
unkown
|
page read and write
|
||
4504000
|
unkown
|
page readonly
|
||
8E5000
|
unkown
|
page read and write
|
||
1E58B210000
|
unkown
|
page read and write
|
||
1FBEF2C5000
|
heap private
|
page read and write
|
||
5EF0000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
58FA000
|
unkown
|
page read and write
|
||
7FF5BFDFC000
|
unkown
|
page readonly
|
||
1E58A780000
|
unkown
|
page readonly
|
||
8DD000
|
unkown
|
page read and write
|
||
4660000
|
unkown
|
page readonly
|
||
47C2000
|
unkown
|
page readonly
|
||
1FBED90A000
|
unkown
|
page read and write
|
||
C80000
|
unkown
|
page readonly
|
||
1A23A500000
|
unkown
|
page readonly
|
||
8CF000
|
unkown
|
page read and write
|
||
1E588871000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
B4E000
|
unkown
|
page read and write
|
||
6460000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page read and write
|
||
8E6000
|
unkown
|
page read and write
|
||
18394E45000
|
heap private
|
page read and write
|
||
1E58AAE6000
|
unkown
|
page read and write
|
||
6D70000
|
unkown
|
page read and write
|
||
4AE000
|
unkown image
|
page readonly
|
||
1E58AB83000
|
unkown
|
page read and write
|
||
7FF52571E000
|
unkown
|
page readonly
|
||
3500000
|
unkown image
|
page readonly
|
||
7FF52D2B8000
|
unkown
|
page readonly
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
BBE2FF000
|
unkown
|
page read and write
|
||
25E94170000
|
unkown
|
page readonly
|
||
8DE000
|
unkown
|
page read and write
|
||
90C000
|
unkown
|
page read and write
|
||
3076000
|
unkown
|
page read and write
|
||
90A000
|
unkown
|
page read and write
|
||
1E58B210000
|
unkown
|
page read and write
|
||
4E45000
|
unkown
|
page read and write
|
||
1E58AAE0000
|
unkown
|
page read and write
|
||
4E40000
|
unkown
|
page read and write
|
||
1E58A6E0000
|
heap private
|
page read and write
|
||
90B000
|
unkown
|
page read and write
|
||
4BFE000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
7FF525509000
|
unkown
|
page readonly
|
||
33ED000
|
unkown
|
page read and write
|
||
1E58A730000
|
unkown
|
page read and write
|
||
7FF7F39AA000
|
unkown image
|
page read and write
|
||
196000
|
unkown
|
page read and write
|
||
4BBF000
|
unkown
|
page read and write
|
||
860000
|
unkown
|
page execute and read and write
|
||
5247000
|
unkown
|
page read and write
|
||
1E58AAE5000
|
unkown
|
page read and write
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
7FF52D2CA000
|
unkown
|
page readonly
|
||
7FF5BFB2A000
|
unkown
|
page readonly
|
||
7FF5BFE00000
|
unkown
|
page readonly
|
||
8E0000
|
unkown
|
page read and write
|
||
1E5888EC000
|
unkown
|
page read and write
|
||
1FE0000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
5F90000
|
unkown
|
page read and write
|
||
8F0000
|
unkown
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
4DC000
|
unkown image
|
page readonly
|
||
232A56C0000
|
unkown
|
page read and write
|
||
4850000
|
unkown
|
page readonly
|
||
1E588936000
|
unkown
|
page read and write
|
||
1E58A934000
|
unkown
|
page read and write
|
||
1A2389E0000
|
unkown
|
page read and write
|
||
7FF7F39AA000
|
unkown image
|
page read and write
|
||
7FF5BFC38000
|
unkown
|
page readonly
|
||
33EB000
|
unkown
|
page read and write
|
||
1A0A7360000
|
heap private
|
page read and write
|
||
1EB7CAB0000
|
heap private
|
page read and write
|
||
5EF0000
|
unkown
|
page read and write
|
||
7FF5BFF52000
|
unkown
|
page readonly
|
||
1E58AD02000
|
unkown
|
page read and write
|
||
E5F86FE000
|
unkown
|
page read and write
|
||
1FBED8B9000
|
heap default
|
page read and write
|
||
2E7000
|
unkown
|
page read and write
|
||
7FF525721000
|
unkown
|
page readonly
|
||
4592000
|
unkown
|
page readonly
|
||
8D3000
|
unkown
|
page read and write
|
||
640000
|
unkown
|
page read and write
|
||
5D80000
|
unkown
|
page read and write
|
||
1EB7B1B0000
|
unkown
|
page read and write
|
||
6DE0000
|
unkown
|
page read and write
|
||
3170000
|
unkown
|
page read and write
|
||
7FF52CAE1000
|
unkown
|
page readonly
|
||
620000
|
unkown
|
page read and write
|
||
3AE2000
|
unkown
|
page readonly
|
||
232A6F75000
|
heap private
|
page read and write
|
||
1E588800000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
7FF5254D1000
|
unkown
|
page readonly
|
||
8B6000
|
unkown
|
page read and write
|
||
4E40000
|
unkown
|
page read and write
|
||
4445000
|
unkown
|
page readonly
|
||
7FF5BFC3F000
|
unkown
|
page readonly
|
||
3ABFCFE000
|
unkown
|
page read and write
|
||
4979F7B000
|
unkown
|
page read and write
|
||
18394EC4000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
497A07D000
|
unkown
|
page read and write
|
||
1A238B1C000
|
heap default
|
page read and write
|
||
8E8000
|
unkown
|
page read and write
|
||
610000
|
unkown
|
page readonly
|
||
2FBE000
|
unkown
|
page read and write
|
||
1E58B410000
|
unkown
|
page read and write
|
||
5BE3000
|
unkown image
|
page read and write
|
||
902000
|
unkown
|
page read and write
|
||
342E000
|
unkown
|
page read and write
|
||
8B7000
|
unkown
|
page read and write
|
||
1FBE000
|
unkown
|
page read and write
|
||
2231FC00000
|
heap default
|
page read and write
|
||
1E58AA09000
|
unkown
|
page read and write
|
||
7FF5256BB000
|
unkown
|
page readonly
|
||
1E58B310000
|
unkown
|
page read and write
|
||
8B6000
|
unkown
|
page read and write
|
||
56B8000
|
unkown
|
page read and write
|
||
33ED000
|
unkown
|
page read and write
|
||
1E5888F7000
|
unkown
|
page read and write
|
||
5A13000
|
unkown
|
page read and write
|
||
1E58A9E3000
|
unkown
|
page read and write
|
||
477D000
|
unkown
|
page readonly
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
1A238910000
|
unkown
|
page readonly
|
||
1EB7B060000
|
unkown
|
page readonly
|
||
7FF52D372000
|
unkown
|
page readonly
|
||
570000
|
heap default
|
page read and write
|
||
1E58B010000
|
unkown
|
page read and write
|
||
8DD000
|
unkown
|
page read and write
|
||
20A0000
|
unkown
|
page read and write
|
||
908000
|
unkown
|
page read and write
|
||
232A56E0000
|
unkown
|
page readonly
|
||
65A6000
|
unkown
|
page read and write
|
||
4D7000
|
unkown image
|
page write copy
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
20E0000
|
unkown
|
page read and write
|
||
5795000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
45B2000
|
unkown
|
page readonly
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
7FF7F39AA000
|
unkown image
|
page read and write
|
||
7FF52572D000
|
unkown
|
page readonly
|
||
7FF52D0A1000
|
unkown
|
page readonly
|
||
497AA7A000
|
unkown
|
page read and write
|
||
1E58888E000
|
unkown
|
page read and write
|
||
1E58B810000
|
unkown
|
page read and write
|
||
7FF5BFED6000
|
unkown
|
page readonly
|
||
902000
|
unkown
|
page read and write
|
||
33F2000
|
unkown
|
page read and write
|
||
2047BFE000
|
unkown
|
page read and write
|
||
36D0000
|
unkown
|
page readonly
|
||
1E58A902000
|
unkown
|
page read and write
|
||
4979E7B000
|
unkown
|
page read and write
|
||
7FF5BFE8C000
|
unkown
|
page readonly
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
7FF52CF3C000
|
unkown
|
page readonly
|
||
1FBED8E5000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
966000
|
unkown
|
page read and write
|
||
1E58AAE5000
|
unkown
|
page read and write
|
||
4950000
|
unkown
|
page read and write
|
||
4056000
|
unkown
|
page readonly
|
||
5A90000
|
unkown image
|
page readonly
|
||
59AE000
|
unkown
|
page read and write
|
||
497A77B000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
3180000
|
unkown
|
page read and write
|
||
41CC000
|
unkown
|
page readonly
|
||
7FF5BFD63000
|
unkown
|
page readonly
|
||
1E58AAE0000
|
unkown
|
page read and write
|
||
53C0000
|
unkown image
|
page readonly
|
||
1A238B13000
|
unkown
|
page read and write
|
||
2231FC09000
|
heap default
|
page read and write
|
||
3084000
|
unkown
|
page read and write
|
||
44E0000
|
unkown
|
page readonly
|
||
3AD4000
|
unkown
|
page readonly
|
||
E5F80FB000
|
unkown
|
page read and write
|
||
1F802800000
|
unkown
|
page readonly
|
||
3200000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
4CFF000
|
unkown
|
page read and write
|
||
8BD000
|
unkown
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
1E58AB43000
|
unkown
|
page read and write
|
||
8E4000
|
unkown
|
page read and write
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
1E58B310000
|
unkown
|
page read and write
|
||
3700000
|
unkown
|
page readonly
|
||
1FBED7D0000
|
unkown
|
page read and write
|
||
902000
|
unkown
|
page read and write
|
||
4979A7A000
|
unkown
|
page read and write
|
||
7FF5BFD68000
|
unkown
|
page readonly
|
||
1FBED7F0000
|
unkown
|
page read and write
|
||
1FBED90A000
|
unkown
|
page read and write
|
||
1E58AAE1000
|
unkown
|
page read and write
|
||
25E94070000
|
unkown
|
page read and write
|
||
6010000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
1E58B410000
|
unkown
|
page read and write
|
||
8E1000
|
unkown
|
page read and write
|
||
620000
|
unkown
|
page read and write
|
||
232A5480000
|
unkown
|
page readonly
|
||
1A238AF0000
|
heap default
|
page read and write
|
||
1A0A7160000
|
unkown
|
page read and write
|
||
1FBED8F5000
|
unkown
|
page read and write
|
||
8BA000
|
unkown
|
page read and write
|
||
680000
|
unkown
|
page read and write
|
||
8E0000
|
unkown
|
page read and write
|
||
497AAFA000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
7FF52D2DE000
|
unkown
|
page readonly
|
||
497952E000
|
unkown
|
page read and write
|
||
56832FE000
|
unkown
|
page read and write
|
||
2BA394E000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
25E92800000
|
unkown
|
page readonly
|
||
8F8000
|
unkown
|
page read and write
|
||
1E588869000
|
unkown
|
page read and write
|
||
34B4000
|
unkown
|
page read and write
|
||
5EF0000
|
unkown
|
page read and write
|
||
1FBED6A0000
|
unkown
|
page readonly
|
||
1E588978000
|
unkown
|
page read and write
|
||
964000
|
unkown
|
page read and write
|
||
18394EF0000
|
unkown
|
page read and write
|
||
96C000
|
unkown
|
page read and write
|
||
101F2000
|
unkown image
|
page execute and read and write
|
||
5BB0000
|
unkown
|
page execute and read and write
|
||
7FF5BFF44000
|
unkown
|
page readonly
|
||
49794AB000
|
unkown
|
page read and write
|
||
E5F84FF000
|
unkown
|
page read and write
|
||
6A0000
|
unkown
|
page readonly
|
||
965000
|
unkown
|
page read and write
|
||
2080000
|
unkown
|
page read and write
|
||
2231FBD0000
|
heap private
|
page read and write
|
||
7FF52CF4F000
|
unkown
|
page readonly
|
||
578B000
|
unkown
|
page read and write
|
||
96C000
|
unkown
|
page read and write
|
||
8FD000
|
unkown
|
page read and write
|
||
1E58A962000
|
unkown
|
page read and write
|
||
907000
|
unkown
|
page read and write
|
||
19C000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
8E2000
|
unkown
|
page read and write
|
||
18394ED3000
|
unkown
|
page read and write
|
||
1F804510000
|
unkown
|
page read and write
|
||
907000
|
unkown
|
page read and write
|
||
8D2000
|
heap default
|
page read and write
|
||
5A85000
|
unkown
|
page read and write
|
||
349A000
|
unkown
|
page read and write
|
||
93B000
|
heap default
|
page read and write
|
||
7FF5BF9C2000
|
unkown
|
page readonly
|
||
1E58A370000
|
unkown
|
page readonly
|
||
95D000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page write copy
|
||
232A54F9000
|
heap default
|
page read and write
|
||
1E58AA64000
|
unkown
|
page read and write
|
||
6582000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
497A9FF000
|
unkown
|
page read and write
|
||
1E58A977000
|
unkown
|
page read and write
|
||
1E58892B000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
1E58AA0B000
|
unkown
|
page read and write
|
||
53C0000
|
unkown image
|
page readonly
|
||
8B6000
|
unkown
|
page read and write
|
||
1A0A59C0000
|
unkown
|
page readonly
|
||
10239000
|
unkown image
|
page execute and read and write
|
||
1010000
|
unkown
|
page readonly
|
||
1E5888FA000
|
unkown
|
page read and write
|
||
18394EA0000
|
heap default
|
page read and write
|
||
7FF5BFCB9000
|
unkown
|
page readonly
|
||
43E5000
|
unkown
|
page readonly
|
||
18394ED6000
|
unkown
|
page read and write
|
||
2BA3CFA000
|
unkown
|
page read and write
|
||
7FF5256DC000
|
unkown
|
page readonly
|
||
8F4000
|
unkown
|
page read and write
|
||
18394DE0000
|
unkown
|
page read and write
|
||
8F9000
|
unkown
|
page read and write
|
||
7FF5BFDF2000
|
unkown
|
page readonly
|
||
1E588770000
|
heap default
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
8E2000
|
unkown
|
page read and write
|
||
28B000
|
unkown
|
page read and write
|
||
875000
|
heap private
|
page read and write
|
||
232A5512000
|
unkown
|
page read and write
|
||
1FBED8E5000
|
unkown
|
page read and write
|
||
8E2000
|
unkown
|
page read and write
|
||
90F000
|
unkown
|
page read and write
|
||
8D3000
|
unkown
|
page read and write
|
||
3414000
|
unkown
|
page read and write
|
||
36A0000
|
unkown
|
page readonly
|
||
909000
|
unkown
|
page read and write
|
||
1A0A71A5000
|
heap private
|
page read and write
|
||
1E58A7B0000
|
unkown
|
page readonly
|
||
6C0000
|
heap default
|
page read and write
|
||
33ED000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
BBE1FE000
|
unkown
|
page read and write
|
||
8ED000
|
unkown
|
page read and write
|
||
22321700000
|
heap private
|
page read and write
|
||
18394FA0000
|
unkown
|
page readonly
|
||
7FF5257A2000
|
unkown
|
page readonly
|
||
96A000
|
unkown
|
page read and write
|
||
903000
|
unkown
|
page read and write
|
||
232A5539000
|
unkown
|
page read and write
|
||
497A6F9000
|
unkown
|
page read and write
|
||
1A0A5911000
|
heap default
|
page read and write
|
||
420B000
|
unkown
|
page readonly
|
||
530000
|
unkown
|
page readonly
|
||
10000000
|
unkown image
|
page readonly
|
||
10000000
|
unkown image
|
page readonly
|
||
1E58A90D000
|
unkown
|
page read and write
|
||
509000
|
unkown image
|
page readonly
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
7FF5BFC85000
|
unkown
|
page readonly
|
||
1E5888E2000
|
unkown
|
page read and write
|
||
405C000
|
unkown
|
page readonly
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
90B000
|
unkown
|
page read and write
|
||
8E9000
|
unkown
|
page read and write
|
||
57B7000
|
unkown
|
page read and write
|
||
4740000
|
unkown
|
page readonly
|
||
1E58AADC000
|
unkown
|
page read and write
|
||
497987B000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page write copy
|
||
31B0000
|
unkown
|
page read and write
|
||
3039000
|
heap private
|
page read and write
|
||
1EB7B190000
|
unkown
|
page read and write
|
||
1E58B710000
|
unkown
|
page read and write
|
||
3406000
|
unkown
|
page read and write
|
||
8F4000
|
unkown
|
page read and write
|
||
7FF525673000
|
unkown
|
page readonly
|
||
5690000
|
unkown
|
page read and write
|
||
3B061FF000
|
unkown
|
page read and write
|
||
7FF5BFC1B000
|
unkown
|
page readonly
|
||
907000
|
unkown
|
page read and write
|
||
3406000
|
unkown
|
page read and write
|
||
2BA39CE000
|
unkown
|
page read and write
|
||
3045000
|
unkown
|
page read and write
|
||
7FF5BFCA1000
|
unkown
|
page readonly
|
||
5EE0000
|
heap private
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
907000
|
unkown
|
page read and write
|
||
5590000
|
unkown
|
page read and write
|
||
7FF5BF761000
|
unkown
|
page readonly
|
||
5B89000
|
unkown image
|
page execute and read and write
|
||
5240000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
3AC2000
|
unkown
|
page readonly
|
||
5FC0000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
1E588710000
|
heap private
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
4979CF9000
|
unkown
|
page read and write
|
||
1E58B210000
|
unkown
|
page read and write
|
||
1FBED8FF000
|
unkown
|
page read and write
|
||
6DB0000
|
unkown
|
page read and write
|
||
1F80263F000
|
unkown
|
page read and write
|
||
1E58A9B9000
|
unkown
|
page read and write
|
||
7FF5256E8000
|
unkown
|
page readonly
|
||
1EB7B690000
|
unkown
|
page readonly
|
||
7FF524F11000
|
unkown
|
page readonly
|
||
6020000
|
unkown
|
page read and write
|
||
1E5888CE000
|
unkown
|
page read and write
|
||
917000
|
heap default
|
page read and write
|
||
7FF525704000
|
unkown
|
page readonly
|
||
5BB0000
|
unkown image
|
page readonly
|
||
1F802600000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
25E92659000
|
unkown
|
page read and write
|
||
90C000
|
unkown
|
page read and write
|
||
5682EFB000
|
unkown
|
page read and write
|
||
4940000
|
unkown
|
page readonly
|
||
620000
|
unkown
|
page read and write
|
||
2231FDD0000
|
unkown
|
page readonly
|
||
8E4000
|
unkown
|
page read and write
|
||
1E5889BD000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
5989000
|
unkown
|
page read and write
|
||
7FF52D36A000
|
unkown
|
page readonly
|
||
7FF52D03B000
|
unkown
|
page readonly
|
||
6000000
|
unkown
|
page read and write
|
||
7FF52D046000
|
unkown
|
page readonly
|
||
519000
|
unkown image
|
page readonly
|
||
1E5888C5000
|
unkown
|
page read and write
|
||
3E39000
|
unkown
|
page readonly
|
||
7FF5BFE23000
|
unkown
|
page readonly
|
||
7FF7F39A6000
|
unkown image
|
page write copy
|
||
1E5888BD000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page read and write
|
||
64D0000
|
unkown
|
page read and write
|
||
5DAE000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
7FF52D2F1000
|
unkown
|
page readonly
|
||
654000
|
unkown
|
page read and write
|
||
7FF5255AB000
|
unkown
|
page readonly
|
||
5D74000
|
unkown image
|
page readonly
|
||
7FF5256FA000
|
unkown
|
page readonly
|
||
5BE5000
|
unkown image
|
page readonly
|
||
1E58B210000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
497A87A000
|
unkown
|
page read and write
|
||
3B05CFE000
|
unkown
|
page read and write
|
||
8FF000
|
unkown
|
page read and write
|
||
659F000
|
unkown
|
page read and write
|
||
1E58AE02000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
5E50000
|
unkown
|
page read and write
|
||
1A238B21000
|
unkown
|
page read and write
|
||
2200000
|
unkown
|
page readonly
|
||
8FE000
|
unkown
|
page read and write
|
||
8E0000
|
unkown
|
page read and write
|
||
1E58883F000
|
unkown
|
page read and write
|
||
95D000
|
unkown
|
page read and write
|
||
3B05EFF000
|
unkown
|
page read and write
|
||
8F9000
|
unkown
|
page read and write
|
||
1E5888C1000
|
unkown
|
page read and write
|
||
3CB2000
|
unkown
|
page readonly
|
||
65B1000
|
unkown
|
page read and write
|
||
4979C7B000
|
unkown
|
page read and write
|
||
4720000
|
unkown
|
page readonly
|
||
4790000
|
unkown
|
page readonly
|
||
7FF52D285000
|
unkown
|
page readonly
|
||
6570000
|
unkown
|
page read and write
|
||
7FF5BFE5E000
|
unkown
|
page readonly
|
||
1E58AB43000
|
unkown
|
page read and write
|
||
2231FBD5000
|
heap private
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page write copy
|
||
8DD000
|
unkown
|
page read and write
|
||
6410000
|
unkown
|
page read and write
|
||
8F9000
|
unkown
|
page read and write
|
||
1E58B010000
|
unkown
|
page read and write
|
||
56833FE000
|
unkown
|
page read and write
|
||
8EB000
|
unkown
|
page read and write
|
||
5F50000
|
unkown
|
page read and write
|
||
1E588989000
|
unkown
|
page read and write
|
||
65EC000
|
unkown
|
page read and write
|
||
4A80000
|
unkown
|
page read and write
|
||
3000000
|
unkown
|
page readonly
|
||
90A000
|
unkown
|
page read and write
|
||
4700000
|
unkown
|
page readonly
|
||
497A0FB000
|
unkown
|
page read and write
|
||
5FF0000
|
unkown
|
page read and write
|
||
5EF0000
|
unkown
|
page read and write
|
||
5EE5000
|
heap private
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page read and write
|
||
2600000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
56E000
|
unkown
|
page read and write
|
||
1E58B110000
|
unkown
|
page read and write
|
||
5856000
|
unkown
|
page read and write
|
||
1E58A760000
|
unkown
|
page read and write
|
||
232A5516000
|
unkown
|
page read and write
|
||
25E92629000
|
unkown
|
page read and write
|
||
2047FFE000
|
unkown
|
page read and write
|
||
2BA3E7C000
|
unkown
|
page read and write
|
||
1E58B210000
|
unkown
|
page read and write
|
||
975000
|
unkown
|
page read and write
|
||
1E58A802000
|
unkown
|
page read and write
|
||
3237000
|
unkown
|
page read and write
|
||
1E588875000
|
unkown
|
page read and write
|
||
7FF525794000
|
unkown
|
page readonly
|
||
33EB000
|
unkown
|
page read and write
|
||
911000
|
unkown
|
page read and write
|
||
1E58A900000
|
unkown
|
page read and write
|
||
8DD000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
5A77000
|
unkown
|
page read and write
|
||
3170000
|
unkown
|
page read and write
|
||
7FF5BFEA4000
|
unkown
|
page readonly
|
||
1E58A270000
|
unkown
|
page read and write
|
||
5EF0000
|
unkown
|
page read and write
|
||
497A67B000
|
unkown
|
page read and write
|
||
8F9000
|
unkown
|
page read and write
|
||
1E58AD00000
|
unkown
|
page read and write
|
||
519000
|
unkown image
|
page readonly
|
||
1E58B110000
|
unkown
|
page read and write
|
||
44C4000
|
unkown
|
page readonly
|
||
7FF52D2F9000
|
unkown
|
page readonly
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
3030000
|
heap private
|
page read and write
|
||
4415000
|
unkown
|
page readonly
|
||
1E5888F7000
|
unkown
|
page read and write
|
||
7FF52CADD000
|
unkown
|
page readonly
|
||
1E58AC82000
|
unkown
|
page read and write
|
||
7FF5BFCB1000
|
unkown
|
page readonly
|
||
4779000
|
unkown
|
page readonly
|
||
1E58AAE0000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
7FF5BFA39000
|
unkown
|
page readonly
|
||
8F4000
|
unkown
|
page read and write
|
||
33F2000
|
unkown
|
page read and write
|
||
3FDF000
|
unkown
|
page readonly
|
||
5994000
|
unkown
|
page read and write
|
||
5F70000
|
unkown
|
page read and write
|
||
3CA7000
|
unkown
|
page readonly
|
||
1E5888E5000
|
unkown
|
page read and write
|
||
7FF525476000
|
unkown
|
page readonly
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
1EB7B300000
|
unkown
|
page readonly
|
||
620000
|
unkown
|
page read and write
|
||
25E92600000
|
unkown
|
page read and write
|
||
1E58A97C000
|
unkown
|
page read and write
|
||
7FF5256DF000
|
unkown
|
page readonly
|
||
3ABFBFE000
|
unkown
|
page read and write
|
||
3EB5000
|
unkown
|
page readonly
|
||
96A000
|
unkown
|
page read and write
|
||
908000
|
unkown
|
page read and write
|
||
4979D7A000
|
unkown
|
page read and write
|
||
909000
|
unkown
|
page read and write
|
||
1A0A57D0000
|
unkown
|
page readonly
|
||
8E3000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
5F40000
|
unkown
|
page read and write
|
||
1F802654000
|
unkown
|
page read and write
|
||
7FF5BFE8F000
|
unkown
|
page readonly
|
||
1E58A770000
|
unkown
|
page read and write
|
||
1E5888BD000
|
unkown
|
page read and write
|
||
7FF5BFC94000
|
unkown
|
page readonly
|
||
7FF5BFE4A000
|
unkown
|
page readonly
|
||
8EC000
|
unkown
|
page read and write
|
||
8F4000
|
unkown
|
page read and write
|
||
2EBC000
|
unkown
|
page read and write
|
||
1E588780000
|
unkown
|
page write copy
|
||
1E58A730000
|
unkown
|
page read and write
|
||
4E40000
|
unkown
|
page read and write
|
||
1E5889B9000
|
unkown
|
page read and write
|
||
1E58AAE0000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
1E5888F0000
|
unkown
|
page read and write
|
||
2540000
|
unkown
|
page execute and read and write
|
||
1E58AA23000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page read and write
|
||
4550000
|
unkown
|
page readonly
|
||
1F802613000
|
unkown
|
page read and write
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
18394EE7000
|
unkown
|
page read and write
|
||
509000
|
unkown image
|
page readonly
|
||
1E588869000
|
unkown
|
page read and write
|
||
4462000
|
unkown
|
page readonly
|
||
20C0000
|
unkown
|
page readonly
|
||
8EC000
|
unkown
|
page read and write
|
||
342B000
|
unkown
|
page read and write
|
||
8E2000
|
unkown
|
page read and write
|
||
5928000
|
unkown
|
page read and write
|
||
33D7000
|
unkown
|
page read and write
|
||
7FF5254D5000
|
unkown
|
page readonly
|
||
1E58A977000
|
unkown
|
page read and write
|
||
2EB000
|
unkown
|
page read and write
|
||
3695000
|
heap private
|
page read and write
|
||
8F9000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
47F2000
|
unkown
|
page readonly
|
||
7FF5BFEAA000
|
unkown
|
page readonly
|
||
65C3000
|
unkown
|
page read and write
|
||
1E58A95F000
|
unkown
|
page read and write
|
||
3170000
|
unkown
|
page read and write
|
||
183967F0000
|
heap private
|
page read and write
|
||
911000
|
unkown
|
page read and write
|
||
4920000
|
unkown
|
page readonly
|
||
1E58AC42000
|
unkown
|
page read and write
|
||
3E09000
|
unkown
|
page readonly
|
||
B00000
|
unkown
|
page readonly
|
||
19A000
|
unkown
|
page read and write
|
||
99000
|
unkown
|
page read and write
|
||
1E58AAE0000
|
unkown
|
page read and write
|
||
3372000
|
unkown
|
page read and write
|
||
1F8028D0000
|
unkown
|
page write copy
|
||
8EC000
|
unkown
|
page read and write
|
||
1E58AAE0000
|
unkown
|
page read and write
|
||
8CF000
|
unkown
|
page read and write
|
||
1E5888FD000
|
unkown
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
1F8025C0000
|
heap default
|
page read and write
|
||
5BDB000
|
unkown image
|
page readonly
|
||
1E5889CC000
|
unkown
|
page read and write
|
||
7FF525650000
|
unkown
|
page readonly
|
||
53ED000
|
unkown image
|
page read and write
|
||
6E00000
|
unkown
|
page read and write
|
||
6420000
|
unkown
|
page read and write
|
||
971000
|
unkown
|
page read and write
|
||
3E62000
|
unkown
|
page readonly
|
||
1E58A977000
|
unkown
|
page read and write
|
||
6480000
|
unkown
|
page read and write
|
||
90B000
|
unkown
|
page read and write
|
||
44E2000
|
unkown
|
page readonly
|
||
7FF52570E000
|
unkown
|
page readonly
|
||
5EA0000
|
unkown
|
page read and write
|
||
7FF52D2AC000
|
unkown
|
page readonly
|
||
8F4000
|
unkown
|
page read and write
|
||
1E5888D2000
|
unkown
|
page read and write
|
||
36F0000
|
unkown
|
page read and write
|
||
660000
|
unkown
|
page read and write
|
||
8BD000
|
unkown
|
page read and write
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
5A91000
|
unkown image
|
page execute and read and write
|
||
65FB000
|
unkown
|
page read and write
|
||
64E0000
|
unkown
|
page read and write
|
||
8FF000
|
unkown
|
page read and write
|
||
870000
|
heap private
|
page read and write
|
||
101CE000
|
unkown image
|
page execute and read and write
|
||
64B0000
|
unkown
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
1E588813000
|
unkown
|
page read and write
|
||
5D80000
|
unkown
|
page read and write
|
||
3200000
|
unkown
|
page read and write
|
||
1E5888B8000
|
unkown
|
page read and write
|
||
1A238B39000
|
unkown
|
page read and write
|
||
18394EE7000
|
unkown
|
page read and write
|
||
64A000
|
unkown
|
page read and write
|
||
1EB7B1E5000
|
heap private
|
page read and write
|
||
1E588AD0000
|
unkown
|
page readonly
|
||
C70000
|
heap private
|
page read and write
|
||
3170000
|
unkown
|
page read and write
|
||
5E40000
|
unkown
|
page read and write
|
||
7FF5BF6C1000
|
unkown
|
page readonly
|
||
4D3E000
|
unkown
|
page read and write
|
||
8BB000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
8BB000
|
unkown
|
page read and write
|
||
8E8000
|
unkown
|
page read and write
|
||
4980000
|
unkown
|
page read and write
|
||
1E58B110000
|
unkown
|
page read and write
|
||
1E588933000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
7FF5BFE4C000
|
unkown
|
page readonly
|
||
8DE000
|
unkown
|
page read and write
|
||
902000
|
unkown
|
page read and write
|
||
1E58A730000
|
unkown
|
page read and write
|
||
4402000
|
unkown
|
page readonly
|
||
7FF5BFECE000
|
unkown
|
page readonly
|
||
971000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
308C000
|
unkown
|
page read and write
|
||
5E60000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
1E58A92C000
|
unkown
|
page read and write
|
||
5F80000
|
unkown
|
page read and write
|
||
232A6E80000
|
unkown
|
page read and write
|
||
8FF000
|
unkown
|
page read and write
|
||
45F0000
|
unkown
|
page readonly
|
||
3E02000
|
unkown
|
page readonly
|
||
8DE000
|
unkown
|
page read and write
|
||
65E000
|
unkown
|
page read and write
|
||
33DF000
|
unkown
|
page read and write
|
||
1E588897000
|
unkown
|
page read and write
|
||
7C0714B000
|
unkown
|
page read and write
|
||
7FF5BFE2F000
|
unkown
|
page readonly
|
||
497A97B000
|
unkown
|
page read and write
|
||
25E924E0000
|
heap private
|
page read and write
|
||
4502000
|
unkown
|
page readonly
|
||
1E58B010000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page read and write
|
||
8F9000
|
unkown
|
page read and write
|
||
7FF5256C7000
|
unkown
|
page readonly
|
||
1E58AA47000
|
unkown
|
page read and write
|
||
25E92640000
|
unkown
|
page read and write
|
||
3670000
|
unkown
|
page read and write
|
||
7FF52D28B000
|
unkown
|
page readonly
|
||
8E5000
|
unkown
|
page read and write
|
||
3601000
|
unkown image
|
page execute and read and write
|
||
8D5000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
5D80000
|
unkown
|
page read and write
|
||
965000
|
unkown
|
page read and write
|
||
907000
|
unkown
|
page read and write
|
||
1F8040C0000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
2070000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
630000
|
unkown
|
page read and write
|
||
584E000
|
unkown
|
page read and write
|
||
4DC000
|
unkown image
|
page readonly
|
||
33D7000
|
unkown
|
page read and write
|
||
1A2388B0000
|
unkown
|
page readonly
|
||
31C0000
|
unkown
|
page read and write
|
||
1E58AAD8000
|
unkown
|
page read and write
|
||
1E58B410000
|
unkown
|
page read and write
|
||
6602000
|
unkown
|
page read and write
|
||
5EF0000
|
unkown
|
page read and write
|
||
1E58A9D2000
|
unkown
|
page read and write
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
1E58A6D0000
|
unkown
|
page read and write
|
||
57E1000
|
unkown
|
page read and write
|
||
33F2000
|
unkown
|
page read and write
|
||
902000
|
unkown
|
page read and write
|
||
7FF52D2E8000
|
unkown
|
page readonly
|
||
1E5888C0000
|
unkown
|
page read and write
|
||
7FF5BFB1C000
|
unkown
|
page readonly
|
||
7FF5BFD41000
|
unkown
|
page readonly
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
1A0A58C0000
|
heap default
|
page read and write
|
||
5BDF000
|
unkown image
|
page read and write
|
||
1E58A9A2000
|
unkown
|
page read and write
|
||
5C0000
|
unkown
|
page read and write
|
||
6DD0000
|
unkown
|
page read and write
|
||
56A2000
|
unkown
|
page read and write
|
||
232A55F0000
|
unkown
|
page readonly
|
||
C60000
|
heap private
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
22321710000
|
unkown
|
page readonly
|
||
1E58B210000
|
unkown
|
page read and write
|
||
53EB000
|
unkown image
|
page readonly
|
||
909000
|
unkown
|
page read and write
|
||
7FF52D27A000
|
unkown
|
page readonly
|
||
519000
|
unkown image
|
page readonly
|
||
45E4000
|
unkown
|
page readonly
|
||
1A23A4F5000
|
heap private
|
page read and write
|
||
3200000
|
unkown
|
page read and write
|
||
1E58AB83000
|
unkown
|
page read and write
|
||
1E58A913000
|
unkown
|
page read and write
|
||
1F802920000
|
unkown
|
page readonly
|
||
43D2000
|
unkown
|
page readonly
|
||
8FD000
|
unkown
|
page read and write
|
||
8ED000
|
unkown
|
page read and write
|
||
3FD9000
|
unkown
|
page readonly
|
||
8E1000
|
unkown
|
page read and write
|
||
3200000
|
unkown
|
page read and write
|
||
3E25000
|
unkown
|
page readonly
|
||
1E5888B1000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
1E58A730000
|
unkown
|
page read and write
|
||
1E58AAE0000
|
unkown
|
page read and write
|
||
3170000
|
unkown
|
page read and write
|
||
2540000
|
unkown
|
page readonly
|
||
8D3000
|
unkown
|
page read and write
|
||
232A6F70000
|
heap private
|
page read and write
|
||
658D000
|
unkown
|
page read and write
|
||
96A000
|
unkown
|
page read and write
|
||
4E40000
|
unkown
|
page read and write
|
||
8E3000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
56830FE000
|
unkown
|
page read and write
|
||
96A000
|
unkown
|
page read and write
|
||
8FB000
|
unkown
|
page read and write
|
||
7FF525387000
|
unkown
|
page readonly
|
||
906000
|
unkown
|
page read and write
|
||
1E58AA23000
|
unkown
|
page read and write
|
||
7FF5BFE65000
|
unkown
|
page readonly
|
||
8F4000
|
unkown
|
page read and write
|
||
8EF000
|
unkown
|
page read and write
|
||
45D2000
|
unkown
|
page readonly
|
||
1E58A750000
|
unkown
|
page read and write
|
||
90D000
|
unkown
|
page read and write
|
||
8B4000
|
unkown
|
page read and write
|
||
18E49FF000
|
unkown
|
page read and write
|
||
96A000
|
unkown
|
page read and write
|
||
7FF52D161000
|
unkown
|
page readonly
|
||
5FE0000
|
unkown
|
page read and write
|
||
8DF000
|
unkown
|
page read and write
|
||
232A551E000
|
unkown
|
page read and write
|
||
3B062FE000
|
unkown
|
page read and write
|
||
7FF5BFE34000
|
unkown
|
page readonly
|
||
63F0000
|
unkown
|
page read and write
|
||
8E7000
|
unkown
|
page read and write
|
||
3170000
|
unkown
|
page read and write
|
||
1F8025D0000
|
unkown
|
page readonly
|
||
18394EF6000
|
unkown
|
page read and write
|
||
4500000
|
unkown
|
page readonly
|
||
7FF5BFEBE000
|
unkown
|
page readonly
|
||
204B000
|
unkown
|
page read and write
|
||
7FF5BFE97000
|
unkown
|
page readonly
|
||
20D0000
|
unkown
|
page read and write
|
||
657A000
|
unkown
|
page read and write
|
||
65B8000
|
unkown
|
page read and write
|
||
8C2000
|
unkown
|
page read and write
|
||
3160000
|
unkown
|
page read and write
|
||
9C000
|
unkown
|
page read and write
|
||
8F3000
|
unkown
|
page read and write
|
||
5916000
|
unkown
|
page read and write
|
||
96A000
|
unkown
|
page read and write
|
||
7FF52D280000
|
unkown
|
page readonly
|
||
33E5000
|
unkown
|
page read and write
|
||
7FF52537F000
|
unkown
|
page readonly
|
||
7C075FA000
|
unkown
|
page read and write
|
||
8E2000
|
unkown
|
page read and write
|
||
18394EFA000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
1E5888E3000
|
unkown
|
page read and write
|
||
8E4000
|
unkown
|
page read and write
|
||
2BA3DF9000
|
unkown
|
page read and write
|
||
7FF52D27E000
|
unkown
|
page readonly
|
||
E5F87FE000
|
unkown
|
page read and write
|
||
1A238B3B000
|
unkown
|
page read and write
|
||
7FF52D222000
|
unkown
|
page readonly
|
||
590C000
|
unkown
|
page read and write
|
||
3ABF7FE000
|
unkown
|
page read and write
|
||
1E58B110000
|
unkown
|
page read and write
|
||
6DA0000
|
unkown
|
page read and write
|
||
7FF5BFEB4000
|
unkown
|
page readonly
|
||
18394CB0000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
497A3FB000
|
unkown
|
page read and write
|
||
53C1000
|
unkown image
|
page execute read
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
1E58A961000
|
unkown
|
page read and write
|
||
1E5888A3000
|
unkown
|
page read and write
|
||
8BB000
|
unkown
|
page read and write
|
||
1E5888C0000
|
unkown
|
page read and write
|
||
7FF5BFB37000
|
unkown
|
page readonly
|
||
720000
|
unkown
|
page readonly
|
||
323B000
|
unkown
|
page read and write
|
||
7FF52536C000
|
unkown
|
page readonly
|
||
1A238B1F000
|
heap default
|
page read and write
|
||
2420000
|
unkown
|
page readonly
|
||
1E588936000
|
unkown
|
page read and write
|
||
18394EF0000
|
unkown
|
page read and write
|
||
18394EF0000
|
unkown
|
page read and write
|
||
18E48FE000
|
unkown
|
page read and write
|
||
36E0000
|
unkown
|
page execute and read and write
|
||
1FBED902000
|
unkown
|
page read and write
|
||
7FF5256F4000
|
unkown
|
page readonly
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
902000
|
unkown
|
page read and write
|
||
7FF5BFEC8000
|
unkown
|
page readonly
|
||
28F000
|
unkown
|
page read and write
|
||
1E58A90A000
|
unkown
|
page read and write
|
||
4776000
|
unkown
|
page readonly
|
||
4427000
|
unkown
|
page readonly
|
||
3ABF6FA000
|
unkown
|
page read and write
|
||
8FF000
|
unkown
|
page read and write
|
||
1FBEF450000
|
unkown
|
page readonly
|
||
1E58AB46000
|
unkown
|
page read and write
|
||
5EF0000
|
unkown
|
page read and write
|
||
3AF4000
|
unkown
|
page readonly
|
||
101BB000
|
unkown image
|
page execute and read and write
|
||
25E928D0000
|
unkown
|
page readonly
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
8D8000
|
unkown
|
page read and write
|
||
4E3F000
|
unkown
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
3170000
|
unkown
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
1F8041C0000
|
unkown
|
page readonly
|
||
8F4000
|
unkown
|
page read and write
|
||
1E588913000
|
unkown
|
page read and write
|
||
3B060FE000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
1E58B610000
|
unkown
|
page read and write
|
||
1E58A6C0000
|
unkown
|
page readonly
|
||
1A238B03000
|
heap default
|
page read and write
|
||
8E7000
|
unkown
|
page read and write
|
||
7FF5255B3000
|
unkown
|
page readonly
|
||
6420000
|
unkown
|
page read and write
|
||
7FF525718000
|
unkown
|
page readonly
|
||
4960000
|
unkown
|
page read and write
|
||
3190000
|
unkown
|
page read and write
|
||
497A8FD000
|
unkown
|
page read and write
|
||
7FF5BFE5A000
|
unkown
|
page readonly
|
||
18394D10000
|
unkown
|
page readonly
|
||
3B0593A000
|
unkown
|
page read and write
|
||
5A90000
|
unkown image
|
page readonly
|
||
7FF52D371000
|
unkown
|
page readonly
|
||
8FD000
|
unkown
|
page read and write
|
||
18394ED6000
|
unkown
|
page read and write
|
||
2060000
|
unkown
|
page read and write
|
||
48A0000
|
unkown
|
page readonly
|
||
965000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
5584000
|
unkown image
|
page readonly
|
||
8FF000
|
unkown
|
page read and write
|
||
8E2000
|
unkown
|
page read and write
|
||
1E58B110000
|
unkown
|
page read and write
|
||
7FF5256AE000
|
unkown
|
page readonly
|
||
497A4FB000
|
unkown
|
page read and write
|
||
1EB7B209000
|
heap default
|
page read and write
|
||
18394EE7000
|
unkown
|
page read and write
|
||
1E58B110000
|
unkown
|
page read and write
|
||
202F000
|
unkown
|
page read and write
|
||
7FF5BFC96000
|
unkown
|
page readonly
|
||
33D7000
|
unkown
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
3E99000
|
unkown
|
page readonly
|
||
401000
|
unkown image
|
page execute read
|
||
3300000
|
unkown
|
page read and write
|
||
49795AE000
|
unkown
|
page read and write
|
||
95A000
|
unkown
|
page read and write
|
||
4772000
|
unkown
|
page readonly
|
||
7FF7F39AA000
|
unkown image
|
page read and write
|
||
971000
|
unkown
|
page read and write
|
||
6030000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
7C0767F000
|
unkown
|
page read and write
|
||
8FF000
|
unkown
|
page read and write
|
||
1A0A71A0000
|
heap private
|
page read and write
|
||
2231FB80000
|
unkown
|
page read and write
|
||
980000
|
unkown
|
page readonly
|
||
33D7000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
1E58B410000
|
unkown
|
page read and write
|
||
49798FB000
|
unkown
|
page read and write
|
||
56F3000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
1E58B710000
|
unkown
|
page read and write
|
||
3200000
|
unkown
|
page read and write
|
||
1E58B610000
|
unkown
|
page read and write
|
||
519000
|
unkown image
|
page readonly
|
||
7FF5256AA000
|
unkown
|
page readonly
|
||
5FB0000
|
unkown
|
page read and write
|
||
1E58AAE4000
|
unkown
|
page read and write
|
||
7FF5BFED1000
|
unkown
|
page readonly
|
||
600000
|
unkown
|
page read and write
|
||
1A0A5D50000
|
unkown
|
page readonly
|
||
7FF52D17B000
|
unkown
|
page readonly
|
||
4D7000
|
unkown image
|
page read and write
|
||
7FF525652000
|
unkown
|
page readonly
|
||
90B000
|
unkown
|
page read and write
|
||
56834FF000
|
unkown
|
page read and write
|
||
1A238BF0000
|
unkown
|
page readonly
|
||
1E5888E5000
|
unkown
|
page read and write
|
||
20B0000
|
unkown
|
page readonly
|
||
33F2000
|
unkown
|
page read and write
|
||
7FF7F39AB000
|
unkown image
|
page readonly
|
||
3DD2000
|
unkown
|
page readonly
|
||
8F5000
|
unkown
|
page read and write
|
||
8DD000
|
unkown
|
page read and write
|
||
7FF52D2D4000
|
unkown
|
page readonly
|
||
90C000
|
unkown
|
page read and write
|
||
45EB000
|
unkown
|
page readonly
|
||
4DC000
|
unkown image
|
page readonly
|
||
1E58B310000
|
unkown
|
page read and write
|
||
1F802560000
|
heap private
|
page read and write
|
||
6C6000
|
heap default
|
page read and write
|
||
497A57B000
|
unkown
|
page read and write
|
||
1E5889BA000
|
unkown
|
page read and write
|
||
3200000
|
unkown
|
page read and write
|
||
90B000
|
unkown
|
page read and write
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
1A238A30000
|
heap private
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
1E58B410000
|
unkown
|
page read and write
|
||
1FBED8D8000
|
heap default
|
page read and write
|
||
8F7000
|
unkown
|
page read and write
|
||
55A0000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
7FF5BFE6B000
|
unkown
|
page readonly
|
||
6DC0000
|
unkown
|
page read and write
|
||
1E5887D0000
|
unkown
|
page readonly
|
||
7FF52D0A5000
|
unkown
|
page readonly
|
||
1EB7B200000
|
heap default
|
page read and write
|
||
5EF0000
|
unkown
|
page read and write
|
||
4970000
|
unkown
|
page read and write
|
||
971000
|
unkown
|
page read and write
|
||
BBDFFE000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
3DD9000
|
unkown
|
page readonly
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
25E92702000
|
unkown
|
page read and write
|
||
1E58AE02000
|
unkown
|
page read and write
|
||
7FF5BFF4A000
|
unkown
|
page readonly
|
||
7FF7F39AA000
|
unkown image
|
page read and write
|
||
8FF000
|
unkown
|
page read and write
|
||
8FF000
|
unkown
|
page read and write
|
||
33E5000
|
unkown
|
page read and write
|
||
4ABE000
|
unkown
|
page read and write
|
||
5FD0000
|
unkown
|
page read and write
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
911000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
4979EFB000
|
unkown
|
page read and write
|
||
5E1F000
|
unkown
|
page read and write
|
||
1FBEF440000
|
heap private
|
page read and write
|
||
8FD000
|
unkown
|
page read and write
|
||
1E58B210000
|
unkown
|
page read and write
|
||
2BA38CB000
|
unkown
|
page read and write
|
||
1E5888C5000
|
unkown
|
page read and write
|
||
1FBED8DF000
|
unkown
|
page read and write
|
||
8FE000
|
unkown
|
page read and write
|
||
65E000
|
unkown
|
page read and write
|
||
1E5888E4000
|
unkown
|
page read and write
|
||
7FF52579A000
|
unkown
|
page readonly
|
||
1FBEF2C0000
|
heap private
|
page read and write
|
||
48F7000
|
unkown
|
page readonly
|
||
8EC000
|
unkown
|
page read and write
|
||
1E5888EA000
|
unkown
|
page read and write
|
||
575A000
|
unkown
|
page read and write
|
||
44E4000
|
unkown
|
page readonly
|
||
36C0000
|
unkown
|
page readonly
|
||
1E58886B000
|
unkown
|
page read and write
|
||
43F7000
|
unkown
|
page readonly
|
||
6D90000
|
unkown
|
page read and write
|
||
7FF52D188000
|
unkown
|
page readonly
|
||
3DF5000
|
unkown
|
page readonly
|
||
4900000
|
unkown
|
page readonly
|
||
1A0A7370000
|
unkown
|
page readonly
|
||
670000
|
unkown
|
page read and write
|
||
2FD0000
|
unkown
|
page read and write
|
||
1E58A790000
|
unkown
|
page readonly
|
||
509000
|
unkown image
|
page readonly
|
||
4457000
|
unkown
|
page readonly
|
||
5BDD000
|
unkown image
|
page read and write
|
||
8FE000
|
heap default
|
page read and write
|
||
7FF5BFB2F000
|
unkown
|
page readonly
|
||
3D77000
|
unkown
|
page readonly
|
||
497A17B000
|
unkown
|
page read and write
|
||
33EB000
|
unkown
|
page read and write
|
||
1E58B310000
|
unkown
|
page read and write
|
||
48A2000
|
unkown
|
page readonly
|
||
1F802602000
|
unkown
|
page read and write
|
||
7FF52D2F6000
|
unkown
|
page readonly
|
||
5682FFE000
|
unkown
|
page read and write
|
||
53BC000
|
unkown
|
page read and write
|
||
5EF0000
|
unkown
|
page read and write
|
||
1E58B510000
|
unkown
|
page read and write
|
||
33F2000
|
unkown
|
page read and write
|
||
7FF5BFE60000
|
unkown
|
page readonly
|
||
7FF52CF4A000
|
unkown
|
page readonly
|
||
1E58A902000
|
unkown
|
page read and write
|
||
18394EC9000
|
heap default
|
page read and write
|
||
3ADB000
|
unkown
|
page readonly
|
||
971000
|
unkown
|
page read and write
|
||
1E58A995000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page write copy
|
||
1E58889C000
|
unkown
|
page read and write
|
||
1E58887A000
|
unkown
|
page read and write
|
||
1E58A9FC000
|
unkown
|
page read and write
|
||
654000
|
unkown
|
page read and write
|
||
592C000
|
unkown
|
page read and write
|
||
45CB000
|
unkown
|
page readonly
|
||
41C5000
|
unkown
|
page readonly
|
||
1E5889DD000
|
unkown
|
page read and write
|
||
1E58886D000
|
unkown
|
page read and write
|
||
3C82000
|
unkown
|
page readonly
|
||
4490000
|
unkown
|
page readonly
|
||
1E588892000
|
unkown
|
page read and write
|
||
96A000
|
unkown
|
page read and write
|
||
7FF5BFE02000
|
unkown
|
page readonly
|
||
2231FD00000
|
unkown
|
page readonly
|
||
5898000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
1E58AB00000
|
unkown
|
page read and write
|
||
7FF7F39AA000
|
unkown image
|
page read and write
|
||
BBE0FF000
|
unkown
|
page read and write
|
||
7FF5BFDA6000
|
unkown
|
page readonly
|
||
5A6F000
|
unkown
|
page read and write
|
||
4AE000
|
unkown image
|
page readonly
|
||
1EB7B1E0000
|
heap private
|
page read and write
|
||
7FF52D2EE000
|
unkown
|
page readonly
|
||
1E58B210000
|
unkown
|
page read and write
|
||
7FF5BFE3F000
|
unkown
|
page readonly
|
||
1E58AADB000
|
unkown
|
page read and write
|
||
3170000
|
unkown
|
page read and write
|
||
1E58A95F000
|
unkown
|
page read and write
|
||
8F0000
|
unkown
|
page read and write
|
||
1A238B18000
|
heap default
|
page read and write
|
||
7FF52D183000
|
unkown
|
page readonly
|
||
1E58A977000
|
unkown
|
page read and write
|
||
64F000
|
heap default
|
page read and write
|
||
53EF000
|
unkown image
|
page read and write
|
||
95D000
|
unkown
|
page read and write
|
||
53C0000
|
unkown image
|
page readonly
|
||
8D3000
|
unkown
|
page read and write
|
||
480D000
|
unkown
|
page readonly
|
||
3E92000
|
unkown
|
page readonly
|
||
4830000
|
unkown
|
page readonly
|
||
3170000
|
unkown
|
page read and write
|
||
4D7000
|
unkown image
|
page write copy
|
||
1E588855000
|
unkown
|
page read and write
|
||
4760000
|
unkown
|
page readonly
|
||
203A000
|
unkown
|
page read and write
|
||
3E32000
|
unkown
|
page readonly
|
||
1E58A92D000
|
unkown
|
page read and write
|
||
1FBED8FF000
|
unkown
|
page read and write
|
||
8FE000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
7FF7F39A6000
|
unkown image
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
18E46FF000
|
unkown
|
page read and write
|
||
3ABFAFE000
|
unkown
|
page read and write
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
2047CFE000
|
unkown
|
page read and write
|
||
96D000
|
unkown
|
page read and write
|
||
497A27B000
|
unkown
|
page read and write
|
||
48D0000
|
unkown
|
page readonly
|
||
8F8000
|
unkown
|
page read and write
|
||
25E92613000
|
unkown
|
page read and write
|
||
5E80000
|
unkown
|
page read and write
|
||
497997F000
|
unkown
|
page read and write
|
||
7FF52D2FD000
|
unkown
|
page readonly
|
||
911000
|
unkown
|
page read and write
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
497A37B000
|
unkown
|
page read and write
|
||
8E6000
|
unkown
|
page read and write
|
||
6400000
|
unkown
|
page read and write
|
||
1FBED902000
|
unkown
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
1E588829000
|
unkown
|
page read and write
|
||
8BA000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
620000
|
unkown
|
page read and write
|
||
1FBED8E1000
|
unkown
|
page read and write
|
||
18394E00000
|
unkown
|
page read and write
|
||
966000
|
unkown
|
page read and write
|
||
4432000
|
unkown
|
page readonly
|
||
7C0757E000
|
unkown
|
page read and write
|
||
1E58A9CA000
|
unkown
|
page read and write
|
||
909000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
25E92540000
|
heap default
|
page read and write
|
||
1E5888EB000
|
unkown
|
page read and write
|
||
7FF5255B8000
|
unkown
|
page readonly
|
||
B80000
|
unkown
|
page readonly
|
||
3E69000
|
unkown
|
page readonly
|
||
911000
|
unkown
|
page read and write
|
||
1E58B310000
|
unkown
|
page read and write
|
||
971000
|
unkown
|
page read and write
|
||
7FF52D2AF000
|
unkown
|
page readonly
|
||
7FF7F3997000
|
unkown image
|
page readonly
|
||
1E5888E2000
|
unkown
|
page read and write
|
||
31D0000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
20F0000
|
heap private
|
page read and write
|
||
8DD000
|
unkown
|
page read and write
|
||
90B000
|
unkown
|
page read and write
|
||
3D47000
|
unkown
|
page readonly
|
||
65D5000
|
unkown
|
page read and write
|
||
1FBED9B0000
|
unkown
|
page readonly
|
||
2BA3D7F000
|
unkown
|
page read and write
|
||
88A000
|
heap default
|
page read and write
|
||
3720000
|
unkown
|
page readonly
|
||
4AE000
|
unkown image
|
page readonly
|
||
35F9000
|
unkown image
|
page execute and read and write
|
||
5EC0000
|
unkown
|
page read and write
|
||
1FBED8F9000
|
unkown
|
page read and write
|
||
1A238A00000
|
unkown
|
page read and write
|
||
8DF000
|
unkown
|
page read and write
|
||
5EB0000
|
unkown
|
page read and write
|
||
4880000
|
unkown
|
page readonly
|
||
1FBED90A000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
4E40000
|
unkown
|
page read and write
|
||
8F5000
|
unkown
|
page read and write
|
||
1E58B210000
|
unkown
|
page read and write
|
||
7FF524F0D000
|
unkown
|
page readonly
|
||
18394EAB000
|
heap default
|
page read and write
|
||
8E4000
|
unkown
|
page read and write
|
||
1A238B1C000
|
unkown
|
page read and write
|
||
E5F85FF000
|
unkown
|
page read and write
|
||
903000
|
unkown
|
page read and write
|
||
1FBED8D3000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
497A7FB000
|
unkown
|
page read and write
|
||
509000
|
unkown image
|
page readonly
|
||
3B05DFE000
|
unkown
|
page read and write
|
||
7FF525729000
|
unkown
|
page readonly
|
||
7C0747E000
|
unkown
|
page read and write
|
||
4810000
|
unkown
|
page readonly
|
||
232A551F000
|
unkown
|
page read and write
|
||
8B4000
|
unkown
|
page read and write
|
||
5F60000
|
unkown
|
page read and write
|
||
7FF5256B0000
|
unkown
|
page readonly
|
||
1E58A9D4000
|
unkown
|
page read and write
|
||
1A0A5770000
|
unkown
|
page readonly
|
||
4DC000
|
unkown image
|
page readonly
|
||
5A64000
|
unkown
|
page read and write
|
||
8FF000
|
unkown
|
page read and write
|
||
1E58AAE5000
|
unkown
|
page read and write
|
||
6490000
|
unkown
|
page read and write
|
||
6DF0000
|
unkown
|
page read and write
|
||
45AB000
|
unkown
|
page readonly
|
||
5E17000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
366B000
|
unkown
|
page read and write
|
||
1F9D000
|
unkown
|
page read and write
|
||
1E58B310000
|
unkown
|
page read and write
|
||
1E58AA47000
|
unkown
|
page read and write
|
||
33F2000
|
unkown
|
page read and write
|
||
7FF52D2C4000
|
unkown
|
page readonly
|
||
8DF000
|
unkown
|
page read and write
|
||
1E58B710000
|
unkown
|
page read and write
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
1E588869000
|
unkown
|
page read and write
|
||
62B000
|
heap default
|
page read and write
|
||
22320160000
|
unkown
|
page readonly
|
||
7FF7F3981000
|
unkown image
|
page execute read
|
||
7FF5BFED9000
|
unkown
|
page readonly
|
||
53F5000
|
unkown image
|
page readonly
|
||
7FF5BFF51000
|
unkown
|
page readonly
|
||
7FF525726000
|
unkown
|
page readonly
|
||
620000
|
unkown
|
page read and write
|
||
18394EB5000
|
heap default
|
page read and write
|
||
497A2FC000
|
unkown
|
page read and write
|
||
4D7000
|
unkown image
|
page read and write
|
||
4979FFC000
|
unkown
|
page read and write
|
||
1E588938000
|
unkown
|
page read and write
|
||
8BB000
|
unkown
|
page read and write
|
||
1A238AF8000
|
heap default
|
page read and write
|
||
5D8D000
|
unkown
|
page read and write
|
||
7FF7F3980000
|
unkown image
|
page readonly
|
||
48C7000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
21D0000
|
unkown
|
page read and write
|
||
1E588A00000
|
unkown
|
page readonly
|
||
5F30000
|
unkown
|
page read and write
|
||
7FF52546B000
|
unkown
|
page readonly
|
||
8FD000
|
unkown
|
page read and write
|
||
2050000
|
unkown
|
page read and write
|
||
4AE000
|
unkown image
|
page readonly
|
||
5BB0000
|
unkown image
|
page readonly
|
||
7C071CE000
|
unkown
|
page read and write
|
||
906000
|
unkown
|
page read and write
|
||
1FFC000
|
unkown
|
page read and write
|
||
8BF000
|
unkown
|
page read and write
|
||
21C0000
|
unkown
|
page read and write
|
||
2FE0000
|
unkown
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
1E588947000
|
unkown
|
page read and write
|
There are 1430 hidden memdumps, click here to show them.