Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
nheQqfaVcS.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{506886DB-1243-11EC-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7678AF55-1243-11EC-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{506886DD-1243-11EC-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7678AF57-1243-11EC-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\NewErrorPageTemplate[2]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF04D35234F04DF89A.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF165B26F914703F17.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF65FC542F93EC8AEB.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFCDB1AD29A328B9E8.TMP
|
data
|
dropped
|
|
There are 19 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\nheQqfaVcS.exe
|
'C:\Users\user\Desktop\nheQqfaVcS.exe'
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6256 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5720 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://haverit.xyz/index.htm
|
unknown
|
|
|
|
https://haverit.xyz/index.htmdex.htm
|
unknown
|
|
|
|
https://haverit.xyz
|
unknown
|
|
|
|
https://haverit.xyz/index.htmRoot
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://sectigo.com/CPS0
|
unknown
|
|
|
|
http://ocsp.sectigo.com0
|
unknown
|
|
|
|
http://%s=%s&file://&os=%u.%u_%u_%u_x%uindex.html;
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
http://www.google.com/
|
unknown
|
|
There are 7 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
haverit.xyz
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{506886DB-1243-11EC-90E5-ECF4BB570DC9}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingBitmap
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingRandomizedBitmap
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{7678AF55-1243-11EC-90E5-ECF4BB570DC9}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
There are 19 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
1FB59ED0000
|
heap private
|
page read and write
|
|
|
|
1FB5A102000
|
unkown
|
page read and write
|
|
|
|
7FF565229000
|
unkown image
|
page readonly
|
|
|
|
7FF505693000
|
unkown image
|
page readonly
|
|
|
|
57A000
|
unkown
|
page read and write
|
|
|
|
1DD93056000
|
unkown
|
page read and write
|
|
|
|
1C184C50000
|
unkown
|
page read and write
|
|
|
|
575000
|
unkown
|
page read and write
|
|
|
|
7FF589BF6000
|
unkown image
|
page readonly
|
|
|
|
8839B7F000
|
unkown
|
page read and write
|
|
|
|
DA41F7F000
|
unkown
|
page read and write
|
|
|
|
7FF55BB1D000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9EFF000
|
unkown image
|
page readonly
|
|
|
|
1DD93063000
|
unkown
|
page read and write
|
|
|
|
7DF5B1830000
|
unkown image
|
page readonly
|
|
|
|
7FF5C660D000
|
unkown image
|
page readonly
|
|
|
|
7DF534962000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9E47000
|
unkown image
|
page readonly
|
|
|
|
7FF55BBED000
|
unkown image
|
page readonly
|
|
|
|
1D0FD702000
|
unkown
|
page read and write
|
|
|
|
7FF51F04B000
|
unkown image
|
page readonly
|
|
|
|
7FF55B911000
|
unkown image
|
page readonly
|
|
|
|
238C9FF0000
|
unkown
|
page read and write
|
|
|
|
7FF59BE85000
|
unkown image
|
page readonly
|
|
|
|
7FF59B5AF000
|
unkown image
|
page readonly
|
|
|
|
7DF59F540000
|
unkown image
|
page readonly
|
|
|
|
1BBB67A0000
|
unkown
|
page read and write
|
|
|
|
7FF5846E2000
|
unkown image
|
page readonly
|
|
|
|
7FF589B48000
|
unkown image
|
page readonly
|
|
|
|
812117C000
|
unkown
|
page read and write
|
|
|
|
7FF55BB3A000
|
unkown image
|
page readonly
|
|
|
|
7FF51EF6C000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
238C9ECD000
|
unkown
|
page read and write
|
|
|
|
7FF5056EA000
|
unkown image
|
page readonly
|
|
|
|
7FF51F03D000
|
unkown image
|
page readonly
|
|
|
|
4EB000
|
heap default
|
page read and write
|
|
|
|
55C000
|
unkown
|
page read and write
|
|
|
|
7FF58490F000
|
unkown image
|
page readonly
|
|
|
|
7FF59B9E3000
|
unkown image
|
page readonly
|
|
|
|
22CADA02000
|
unkown
|
page read and write
|
|
|
|
19B000
|
unkown
|
page read and write
|
|
|
|
1D0FD713000
|
unkown
|
page read and write
|
|
|
|
1FB59F30000
|
heap default
|
page read and write
|
|
|
|
646EC7C000
|
unkown
|
page read and write
|
|
|
|
7FF55BB33000
|
unkown image
|
page readonly
|
|
|
|
7FF589B69000
|
unkown image
|
page readonly
|
|
|
|
7FF584847000
|
unkown image
|
page readonly
|
|
|
|
238C9F6F000
|
unkown
|
page read and write
|
|
|
|
1DD9304D000
|
unkown
|
page read and write
|
|
|
|
1A0EF508000
|
unkown
|
page read and write
|
|
|
|
1DD92F90000
|
unkown image
|
page readonly
|
|
|
|
56D000
|
unkown
|
page read and write
|
|
|
|
7FF58494D000
|
unkown image
|
page readonly
|
|
|
|
1C184D00000
|
unkown
|
page read and write
|
|
|
|
1DD92F50000
|
unkown image
|
page readonly
|
|
|
|
646EB7C000
|
unkown
|
page read and write
|
|
|
|
595095E000
|
unkown
|
page read and write
|
|
|
|
646ED7E000
|
unkown
|
page read and write
|
|
|
|
59508DB000
|
unkown
|
page read and write
|
|
|
|
238C9EF0000
|
unkown
|
page read and write
|
|
|
|
7FF5A9CDA000
|
unkown image
|
page readonly
|
|
|
|
235957C0000
|
unkown image
|
page readonly
|
|
|
|
7FF50553D000
|
unkown image
|
page readonly
|
|
|
|
DE624FE000
|
unkown
|
page read and write
|
|
|
|
1D0FD629000
|
unkown
|
page read and write
|
|
|
|
52C000
|
unkown
|
page read and write
|
|
|
|
BC4967E000
|
unkown
|
page read and write
|
|
|
|
6CCF92B000
|
unkown
|
page read and write
|
|
|
|
1BBB6213000
|
unkown
|
page read and write
|
|
|
|
36D3000
|
heap private
|
page read and write
|
|
|
|
7FF50579B000
|
unkown image
|
page readonly
|
|
|
|
7FF584824000
|
unkown image
|
page readonly
|
|
|
|
7FF55BBB6000
|
unkown image
|
page readonly
|
|
|
|
1A0EF500000
|
unkown
|
page read and write
|
|
|
|
646E97E000
|
unkown
|
page read and write
|
|
|
|
1A0EF48C000
|
unkown
|
page read and write
|
|
|
|
7FF584716000
|
unkown image
|
page readonly
|
|
|
|
1544A020000
|
heap default
|
page read and write
|
|
|
|
7DF46F3B0000
|
unkown image
|
page readonly
|
|
|
|
1544A802000
|
unkown
|
page read and write
|
|
|
|
22CAD302000
|
unkown
|
page read and write
|
|
|
|
DE6215A000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B7D000
|
unkown image
|
page readonly
|
|
|
|
235957A0000
|
unkown image
|
page read and write
|
|
|
|
7FF505466000
|
unkown image
|
page readonly
|
|
|
|
235959D7000
|
heap default
|
page read and write
|
|
|
|
1D0FDD50000
|
unkown image
|
page write copy
|
|
|
|
7FF51F02B000
|
unkown image
|
page readonly
|
|
|
|
1C185180000
|
unkown image
|
page readonly
|
|
|
|
536000
|
heap default
|
page read and write
|
|
|
|
7FF5D5C6F000
|
unkown image
|
page readonly
|
|
|
|
7DF5B1812000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5C5B000
|
unkown image
|
page readonly
|
|
|
|
7FF59BF1F000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE73000
|
unkown image
|
page readonly
|
|
|
|
1DD9307E000
|
unkown
|
page read and write
|
|
|
|
1BBB6020000
|
unkown image
|
page readonly
|
|
|
|
1A0EF44E000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C4D000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9F06000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9E37000
|
unkown image
|
page readonly
|
|
|
|
238C9FF0000
|
unkown
|
page read and write
|
|
|
|
1DD93029000
|
unkown
|
page read and write
|
|
|
|
7DF5DBFD2000
|
unkown image
|
page readonly
|
|
|
|
7FF59BD0E000
|
unkown image
|
page readonly
|
|
|
|
7FF58470C000
|
unkown image
|
page readonly
|
|
|
|
7FF51E86E000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9DF7000
|
unkown image
|
page readonly
|
|
|
|
7DF534970000
|
unkown image
|
page readonly
|
|
|
|
7FF50561E000
|
unkown image
|
page readonly
|
|
|
|
1D0FD580000
|
unkown image
|
page readonly
|
|
|
|
7DF534960000
|
unkown image
|
page readonly
|
|
|
|
1C184C00000
|
unkown
|
page read and write
|
|
|
|
1A0EF3F0000
|
unkown image
|
page readonly
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5C6D000
|
unkown image
|
page readonly
|
|
|
|
7FF55BAE3000
|
unkown image
|
page readonly
|
|
|
|
7FF51EB38000
|
unkown image
|
page readonly
|
|
|
|
1DD93058000
|
unkown
|
page read and write
|
|
|
|
1FB59F10000
|
unkown image
|
page readonly
|
|
|
|
238C9F8D000
|
unkown
|
page read and write
|
|
|
|
1544A7B0000
|
unkown
|
page read and write
|
|
|
|
1A0EF453000
|
unkown
|
page read and write
|
|
|
|
1BBB623C000
|
unkown
|
page read and write
|
|
|
|
7FF5A9D0E000
|
unkown image
|
page readonly
|
|
|
|
7DF534970000
|
unkown image
|
page readonly
|
|
|
|
1A0EF380000
|
heap private
|
page read and write
|
|
|
|
7FF59B5A9000
|
unkown image
|
page readonly
|
|
|
|
238C9C50000
|
unkown image
|
page read and write
|
|
|
|
22CAD150000
|
unkown image
|
page readonly
|
|
|
|
1DD93060000
|
unkown
|
page read and write
|
|
|
|
238C9F34000
|
unkown
|
page read and write
|
|
|
|
5EC000
|
unkown
|
page read and write
|
|
|
|
1DD93077000
|
unkown
|
page read and write
|
|
|
|
5D0000
|
unkown
|
page execute and read and write
|
|
|
|
8DE37F000
|
unkown
|
page read and write
|
|
|
|
7FF50578E000
|
unkown image
|
page readonly
|
|
|
|
883997B000
|
unkown
|
page read and write
|
|
|
|
7FF59BEFD000
|
unkown image
|
page readonly
|
|
|
|
540000
|
heap default
|
page read and write
|
|
|
|
7DF5B1810000
|
unkown image
|
page readonly
|
|
|
|
1DD93802000
|
unkown
|
page read and write
|
|
|
|
109D000
|
unkown image
|
page read and write
|
|
|
|
5950D7E000
|
unkown
|
page read and write
|
|
|
|
1A0EF402000
|
unkown
|
page read and write
|
|
|
|
7FF5C6393000
|
unkown image
|
page readonly
|
|
|
|
1DD9305F000
|
unkown
|
page read and write
|
|
|
|
7FF59BE59000
|
unkown image
|
page readonly
|
|
|
|
7FF5C61B8000
|
unkown image
|
page readonly
|
|
|
|
7FF584893000
|
unkown image
|
page readonly
|
|
|
|
238C9F48000
|
unkown
|
page read and write
|
|
|
|
7FF51E6E9000
|
unkown image
|
page readonly
|
|
|
|
1FB5A100000
|
unkown
|
page read and write
|
|
|
|
7FF51EF95000
|
unkown image
|
page readonly
|
|
|
|
1D0FDF00000
|
unkown
|
page read and write
|
|
|
|
7FF51F030000
|
unkown image
|
page readonly
|
|
|
|
22CAD1A0000
|
unkown
|
page read and write
|
|
|
|
8121377000
|
unkown
|
page read and write
|
|
|
|
7DF59A240000
|
unkown image
|
page readonly
|
|
|
|
7FF55096D000
|
unkown image
|
page readonly
|
|
|
|
7FF51EEAF000
|
unkown image
|
page readonly
|
|
|
|
7DF5BF850000
|
unkown image
|
page readonly
|
|
|
|
1A0EF43C000
|
unkown
|
page read and write
|
|
|
|
238C9F27000
|
unkown
|
page read and write
|
|
|
|
1094000
|
unkown image
|
page write copy
|
|
|
|
238C9F04000
|
unkown
|
page read and write
|
|
|
|
238C9C60000
|
unkown image
|
page readonly
|
|
|
|
F40000
|
heap private
|
page read and write
|
|
|
|
7DF534962000
|
unkown image
|
page readonly
|
|
|
|
55C000
|
unkown
|
page read and write
|
|
|
|
238C9F27000
|
unkown
|
page read and write
|
|
|
|
23595E60000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9EA5000
|
unkown image
|
page readonly
|
|
|
|
7DF51B092000
|
unkown image
|
page readonly
|
|
|
|
BC48A7B000
|
unkown
|
page read and write
|
|
|
|
10EF000
|
unkown image
|
page readonly
|
|
|
|
1DD93079000
|
unkown
|
page read and write
|
|
|
|
10AD000
|
unkown image
|
page readonly
|
|
|
|
BC4957E000
|
unkown
|
page read and write
|
|
|
|
1DD93042000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C28000
|
unkown image
|
page readonly
|
|
|
|
7FF55BBDB000
|
unkown image
|
page readonly
|
|
|
|
7DF59A242000
|
unkown image
|
page readonly
|
|
|
|
7DF51B090000
|
unkown image
|
page readonly
|
|
|
|
22CAD120000
|
unkown image
|
page readonly
|
|
|
|
3D3C000
|
unkown
|
page read and write
|
|
|
|
7FF5C65F8000
|
unkown image
|
page readonly
|
|
|
|
1FB5A07B000
|
unkown
|
page read and write
|
|
|
|
1A0EF502000
|
unkown
|
page read and write
|
|
|
|
7FF5A9F24000
|
unkown image
|
page readonly
|
|
|
|
1D0FD600000
|
unkown
|
page read and write
|
|
|
|
1DD9305C000
|
unkown
|
page read and write
|
|
|
|
DE621DE000
|
unkown
|
page read and write
|
|
|
|
7FF5C66BD000
|
unkown image
|
page readonly
|
|
|
|
1544AA00000
|
unkown
|
page read and write
|
|
|
|
BC48E7C000
|
unkown
|
page read and write
|
|
|
|
BC48D7F000
|
unkown
|
page read and write
|
|
|
|
7FF59BE2C000
|
unkown image
|
page readonly
|
|
|
|
7FF55BB08000
|
unkown image
|
page readonly
|
|
|
|
7DF57ABE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5652DE000
|
unkown image
|
page readonly
|
|
|
|
420000
|
unkown
|
page read and write
|
|
|
|
7FF589C1B000
|
unkown image
|
page readonly
|
|
|
|
1C184C55000
|
unkown
|
page read and write
|
|
|
|
7FF589C2B000
|
unkown image
|
page readonly
|
|
|
|
7FF50576E000
|
unkown image
|
page readonly
|
|
|
|
55A000
|
unkown
|
page read and write
|
|
|
|
7FF59BE38000
|
unkown image
|
page readonly
|
|
|
|
7DF5714E2000
|
unkown image
|
page readonly
|
|
|
|
1BBB6010000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9E79000
|
unkown image
|
page readonly
|
|
|
|
7FF589B5D000
|
unkown image
|
page readonly
|
|
|
|
BC4927F000
|
unkown
|
page read and write
|
|
|
|
7DF49D3F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C65D7000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown
|
page execute and read and write
|
|
|
|
238C9D90000
|
unkown
|
page read and write
|
|
|
|
1A0EF3C0000
|
unkown image
|
page readonly
|
|
|
|
7FF55B9BD000
|
unkown image
|
page readonly
|
|
|
|
1BBB6308000
|
unkown
|
page read and write
|
|
|
|
7FF584908000
|
unkown image
|
page readonly
|
|
|
|
26F0000
|
heap private
|
page read and write
|
|
|
|
BC4937E000
|
unkown
|
page read and write
|
|
|
|
7FF58487D000
|
unkown image
|
page readonly
|
|
|
|
7FF5C61A9000
|
unkown image
|
page readonly
|
|
|
|
7FF5C6535000
|
unkown image
|
page readonly
|
|
|
|
1DD92F30000
|
unkown image
|
page readonly
|
|
|
|
238C9EE4000
|
unkown
|
page read and write
|
|
|
|
24F000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
7FF59BF0B000
|
unkown image
|
page readonly
|
|
|
|
7DF4E9430000
|
unkown image
|
page readonly
|
|
|
|
1C184A40000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
heap default
|
page read and write
|
|
|
|
1DD9305A000
|
unkown
|
page read and write
|
|
|
|
7DF571500000
|
unkown image
|
page readonly
|
|
|
|
1DD92F10000
|
unkown image
|
page read and write
|
|
|
|
1FB5A013000
|
unkown
|
page read and write
|
|
|
|
7DF57ABF2000
|
unkown image
|
page readonly
|
|
|
|
1BBB626C000
|
unkown
|
page read and write
|
|
|
|
DA41D7F000
|
unkown
|
page read and write
|
|
|
|
1DD9306D000
|
unkown
|
page read and write
|
|
|
|
238C9ED4000
|
unkown
|
page read and write
|
|
|
|
7FF59BCBD000
|
unkown image
|
page readonly
|
|
|
|
1C184A00000
|
unkown image
|
page read and write
|
|
|
|
1DD932D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5C3B000
|
unkown image
|
page readonly
|
|
|
|
238C9F35000
|
unkown
|
page read and write
|
|
|
|
DA41CFE000
|
unkown
|
page read and write
|
|
|
|
238C9F04000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF58494F000
|
unkown image
|
page readonly
|
|
|
|
1544A302000
|
unkown
|
page read and write
|
|
|
|
1FB5A040000
|
unkown
|
page read and write
|
|
|
|
238C9F48000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
1FB59EE0000
|
unkown image
|
page readonly
|
|
|
|
7DF59A250000
|
unkown image
|
page readonly
|
|
|
|
BC48C7B000
|
unkown
|
page read and write
|
|
|
|
536000
|
unkown
|
page read and write
|
|
|
|
7FF51EE23000
|
unkown image
|
page readonly
|
|
|
|
7DF5BF842000
|
unkown image
|
page readonly
|
|
|
|
1D0FD5B0000
|
heap default
|
page read and write
|
|
|
|
238C9C70000
|
unkown image
|
page readonly
|
|
|
|
564000
|
unkown
|
page read and write
|
|
|
|
7FF59BBD3000
|
unkown image
|
page readonly
|
|
|
|
1FB5A05A000
|
unkown
|
page read and write
|
|
|
|
1BBB5FF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9F0B000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5C5E000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9F3F000
|
unkown image
|
page readonly
|
|
|
|
7FF59B9E9000
|
unkown image
|
page readonly
|
|
|
|
1D0FD550000
|
heap private
|
page read and write
|
|
|
|
238C9DB0000
|
unkown
|
page read and write
|
|
|
|
7FF51F05B000
|
unkown image
|
page readonly
|
|
|
|
7FF59B72E000
|
unkown image
|
page readonly
|
|
|
|
1A0EF44D000
|
unkown
|
page read and write
|
|
|
|
106A000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9E6D000
|
unkown image
|
page readonly
|
|
|
|
1BBB6313000
|
unkown
|
page read and write
|
|
|
|
7FF55BAC4000
|
unkown image
|
page readonly
|
|
|
|
7DF5DBFF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5052FA000
|
unkown image
|
page readonly
|
|
|
|
1FB5A002000
|
unkown
|
page read and write
|
|
|
|
7FF589B3C000
|
unkown image
|
page readonly
|
|
|
|
7FF58494B000
|
unkown image
|
page readonly
|
|
|
|
7FF5C652F000
|
unkown image
|
page readonly
|
|
|
|
BC4917D000
|
unkown
|
page read and write
|
|
|
|
646EF7F000
|
unkown
|
page read and write
|
|
|
|
1FB59EC0000
|
unkown image
|
page read and write
|
|
|
|
7FF5056E3000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9E75000
|
unkown image
|
page readonly
|
|
|
|
235959D0000
|
heap default
|
page read and write
|
|
|
|
646EAFD000
|
unkown
|
page read and write
|
|
|
|
DE6257B000
|
unkown
|
page read and write
|
|
|
|
7DF59A240000
|
unkown image
|
page readonly
|
|
|
|
7DF5EB572000
|
unkown image
|
page readonly
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
DE6267C000
|
unkown
|
page read and write
|
|
|
|
238CA0D0000
|
unkown image
|
page readonly
|
|
|
|
7FF55BBCD000
|
unkown image
|
page readonly
|
|
|
|
7DF57AC00000
|
unkown image
|
page readonly
|
|
|
|
7DF5DBFE2000
|
unkown image
|
page readonly
|
|
|
|
7FF5899CD000
|
unkown image
|
page readonly
|
|
|
|
1A0EF3E0000
|
heap default
|
page read and write
|
|
|
|
7FF589B73000
|
unkown image
|
page readonly
|
|
|
|
7DF59F532000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5BB3000
|
unkown image
|
page readonly
|
|
|
|
1A0EFC02000
|
unkown
|
page read and write
|
|
|
|
1C184E00000
|
unkown image
|
page readonly
|
|
|
|
7FF55B913000
|
unkown image
|
page readonly
|
|
|
|
1DD93047000
|
unkown
|
page read and write
|
|
|
|
1D84A9C000
|
unkown
|
page read and write
|
|
|
|
7FF5055AD000
|
unkown image
|
page readonly
|
|
|
|
6CCFE7B000
|
unkown
|
page read and write
|
|
|
|
883987E000
|
unkown
|
page read and write
|
|
|
|
4CA000
|
heap default
|
page read and write
|
|
|
|
7FF55BBEB000
|
unkown image
|
page readonly
|
|
|
|
BC4907F000
|
unkown
|
page read and write
|
|
|
|
7FF58493E000
|
unkown image
|
page readonly
|
|
|
|
1544A202000
|
unkown
|
page read and write
|
|
|
|
7FF55BBC0000
|
unkown image
|
page readonly
|
|
|
|
555000
|
unkown
|
page read and write
|
|
|
|
7DF534952000
|
unkown image
|
page readonly
|
|
|
|
7DF51B0A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5652DB000
|
unkown image
|
page readonly
|
|
|
|
1C184C3C000
|
unkown
|
page read and write
|
|
|
|
7FF5056A7000
|
unkown image
|
page readonly
|
|
|
|
36D3000
|
heap private
|
page read and write
|
|
|
|
7FF584934000
|
unkown image
|
page readonly
|
|
|
|
1DD92F30000
|
unkown image
|
page readonly
|
|
|
|
1544A240000
|
unkown
|
page read and write
|
|
|
|
7FF505682000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5B9D000
|
unkown image
|
page readonly
|
|
|
|
7FF505705000
|
unkown image
|
page readonly
|
|
|
|
812157E000
|
unkown
|
page read and write
|
|
|
|
238C9EE4000
|
unkown
|
page read and write
|
|
|
|
7FF5845DA000
|
unkown image
|
page readonly
|
|
|
|
1A0EF8D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5A0D000
|
unkown image
|
page readonly
|
|
|
|
6CCF9AF000
|
unkown
|
page read and write
|
|
|
|
1BBB6600000
|
unkown image
|
page readonly
|
|
|
|
238C9F48000
|
unkown
|
page read and write
|
|
|
|
7DF534960000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1DD93068000
|
unkown
|
page read and write
|
|
|
|
1FB5A063000
|
unkown
|
page read and write
|
|
|
|
1C184C4B000
|
unkown
|
page read and write
|
|
|
|
7DF59A252000
|
unkown image
|
page readonly
|
|
|
|
544000
|
unkown
|
page read and write
|
|
|
|
1C185000000
|
unkown image
|
page readonly
|
|
|
|
1DD93013000
|
unkown
|
page read and write
|
|
|
|
7DF5EB570000
|
unkown image
|
page readonly
|
|
|
|
1BBB6400000
|
unkown image
|
page readonly
|
|
|
|
E9D000
|
unkown
|
page read and write
|
|
|
|
1D0FD6CF000
|
unkown
|
page read and write
|
|
|
|
7FF55BB29000
|
unkown image
|
page readonly
|
|
|
|
7FF5C66CE000
|
unkown image
|
page readonly
|
|
|
|
7FF5052FE000
|
unkown image
|
page readonly
|
|
|
|
7FF565255000
|
unkown image
|
page readonly
|
|
|
|
7DF59F522000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
572000
|
unkown
|
page read and write
|
|
|
|
7FF5A9BCA000
|
unkown image
|
page readonly
|
|
|
|
7FF59BCE3000
|
unkown image
|
page readonly
|
|
|
|
7FF51EFC5000
|
unkown image
|
page readonly
|
|
|
|
555000
|
heap default
|
page read and write
|
|
|
|
7FF5A9F1D000
|
unkown image
|
page readonly
|
|
|
|
563000
|
unkown
|
page read and write
|
|
|
|
7DF5BF840000
|
unkown image
|
page readonly
|
|
|
|
7FF584832000
|
unkown image
|
page readonly
|
|
|
|
7DF5BF850000
|
unkown image
|
page readonly
|
|
|
|
7FF505784000
|
unkown image
|
page readonly
|
|
|
|
8DDD6C000
|
unkown
|
page read and write
|
|
|
|
1C184D02000
|
unkown
|
page read and write
|
|
|
|
6CCFF77000
|
unkown
|
page read and write
|
|
|
|
238C9F8D000
|
unkown
|
page read and write
|
|
|
|
238C9EE4000
|
unkown
|
page read and write
|
|
|
|
238C9ED4000
|
unkown
|
page read and write
|
|
|
|
22CAD860000
|
unkown image
|
page readonly
|
|
|
|
55F000
|
unkown
|
page read and write
|
|
|
|
7FF5A9C56000
|
unkown image
|
page readonly
|
|
|
|
7FF55B7BB000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5365000
|
unkown image
|
page readonly
|
|
|
|
7FF584657000
|
unkown image
|
page readonly
|
|
|
|
108E000
|
unkown image
|
page write copy
|
|
|
|
55C000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C40000
|
unkown image
|
page readonly
|
|
|
|
7FF5898E3000
|
unkown image
|
page readonly
|
|
|
|
7FF55B394000
|
unkown image
|
page readonly
|
|
|
|
238C9F6F000
|
unkown
|
page read and write
|
|
|
|
561000
|
unkown
|
page read and write
|
|
|
|
7FF505478000
|
unkown image
|
page readonly
|
|
|
|
7FF59BD75000
|
unkown image
|
page readonly
|
|
|
|
238C9F04000
|
unkown
|
page read and write
|
|
|
|
7DF57ABF0000
|
unkown image
|
page readonly
|
|
|
|
1D0FD8D0000
|
unkown image
|
page readonly
|
|
|
|
1DD9303A000
|
unkown
|
page read and write
|
|
|
|
238C9F27000
|
unkown
|
page read and write
|
|
|
|
55F000
|
unkown
|
page read and write
|
|
|
|
1006000
|
unkown image
|
page readonly
|
|
|
|
7DF51B0A0000
|
unkown image
|
page readonly
|
|
|
|
7FF51EF99000
|
unkown image
|
page readonly
|
|
|
|
7FF5C66DF000
|
unkown image
|
page readonly
|
|
|
|
1DD9306F000
|
unkown
|
page read and write
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
7FF55BBEF000
|
unkown image
|
page readonly
|
|
|
|
238C9FF0000
|
unkown
|
page read and write
|
|
|
|
1DD93062000
|
unkown
|
page read and write
|
|
|
|
7DF571500000
|
unkown image
|
page readonly
|
|
|
|
7FF55BADC000
|
unkown image
|
page readonly
|
|
|
|
BC4947E000
|
unkown
|
page read and write
|
|
|
|
1A0EF471000
|
unkown
|
page read and write
|
|
|
|
1001000
|
unkown image
|
page execute read
|
|
|
|
7FF5C66DF000
|
unkown image
|
page readonly
|
|
|
|
7FF59BCEE000
|
unkown image
|
page readonly
|
|
|
|
7FF58485C000
|
unkown image
|
page readonly
|
|
|
|
22CAD241000
|
unkown
|
page read and write
|
|
|
|
1D850FE000
|
unkown
|
page read and write
|
|
|
|
544000
|
heap default
|
page read and write
|
|
|
|
8120DBE000
|
unkown
|
page read and write
|
|
|
|
8DE47E000
|
unkown
|
page read and write
|
|
|
|
1A0EF47E000
|
unkown
|
page read and write
|
|
|
|
7FF55B397000
|
unkown image
|
page readonly
|
|
|
|
70D000
|
unkown
|
page read and write
|
|
|
|
238CA0C0000
|
heap private
|
page read and write
|
|
|
|
7FF59BF1F000
|
unkown image
|
page readonly
|
|
|
|
7DF5B1810000
|
unkown image
|
page readonly
|
|
|
|
1D0FD644000
|
unkown
|
page read and write
|
|
|
|
1DD92F60000
|
unkown image
|
page readonly
|
|
|
|
238C9EA0000
|
heap default
|
page read and write
|
|
|
|
7FF51EE4E000
|
unkown image
|
page readonly
|
|
|
|
1DD93084000
|
unkown
|
page read and write
|
|
|
|
238CA7A2000
|
unkown
|
page read and write
|
|
|
|
7FF51ED13000
|
unkown image
|
page readonly
|
|
|
|
7FF59BE63000
|
unkown image
|
page readonly
|
|
|
|
7DF59F530000
|
unkown image
|
page readonly
|
|
|
|
7FF55B986000
|
unkown image
|
page readonly
|
|
|
|
7DF5DBFE0000
|
unkown image
|
page readonly
|
|
|
|
7FF51F044000
|
unkown image
|
page readonly
|
|
|
|
1FB59F00000
|
unkown image
|
page readonly
|
|
|
|
22CAD4D0000
|
unkown image
|
page readonly
|
|
|
|
7DF534950000
|
unkown image
|
page readonly
|
|
|
|
7DF5BF832000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9C8D000
|
unkown image
|
page readonly
|
|
|
|
7FF51F026000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5C36000
|
unkown image
|
page readonly
|
|
|
|
1D0FDC50000
|
unkown image
|
page readonly
|
|
|
|
22CAD170000
|
heap default
|
page read and write
|
|
|
|
7FF55BB42000
|
unkown image
|
page readonly
|
|
|
|
7DF5714E0000
|
unkown image
|
page readonly
|
|
|
|
557000
|
unkown
|
page read and write
|
|
|
|
7DF57ABE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5847CE000
|
unkown image
|
page readonly
|
|
|
|
1BBB6802000
|
unkown
|
page read and write
|
|
|
|
1D0FDE02000
|
unkown
|
page read and write
|
|
|
|
7FF5C662A000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9F0E000
|
unkown image
|
page readonly
|
|
|
|
23595A00000
|
heap default
|
page read and write
|
|
|
|
1FB59EE0000
|
unkown image
|
page readonly
|
|
|
|
7FF584843000
|
unkown image
|
page readonly
|
|
|
|
7FF55B8E3000
|
unkown image
|
page readonly
|
|
|
|
1BBB627F000
|
unkown
|
page read and write
|
|
|
|
7DF51B092000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9F2E000
|
unkown image
|
page readonly
|
|
|
|
1D0FD6C7000
|
unkown
|
page read and write
|
|
|
|
7DF478AB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5846EA000
|
unkown image
|
page readonly
|
|
|
|
15449FC0000
|
heap private
|
page read and write
|
|
|
|
DA41E7F000
|
unkown
|
page read and write
|
|
|
|
1D0FD6BE000
|
unkown
|
page read and write
|
|
|
|
7FF51EED4000
|
unkown image
|
page readonly
|
|
|
|
238CA2D0000
|
unkown image
|
page readonly
|
|
|
|
7FF589B95000
|
unkown image
|
page readonly
|
|
|
|
22CAD180000
|
unkown image
|
page readonly
|
|
|
|
7FF59BE27000
|
unkown image
|
page readonly
|
|
|
|
253000
|
unkown
|
page read and write
|
|
|
|
1D0FD6E1000
|
unkown
|
page read and write
|
|
|
|
7DF4AF6E0000
|
unkown image
|
page readonly
|
|
|
|
1C184C6F000
|
unkown
|
page read and write
|
|
|
|
1BBB6200000
|
unkown
|
page read and write
|
|
|
|
7FF5C5DD5000
|
unkown image
|
page readonly
|
|
|
|
1001000
|
unkown image
|
page execute read
|
|
|
|
1C184C49000
|
unkown
|
page read and write
|
|
|
|
1DD9306A000
|
unkown
|
page read and write
|
|
|
|
88396FE000
|
unkown
|
page read and write
|
|
|
|
7DF5BF832000
|
unkown image
|
page readonly
|
|
|
|
7FF5C66C4000
|
unkown image
|
page readonly
|
|
|
|
53F000
|
unkown
|
page read and write
|
|
|
|
59509DE000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B53000
|
unkown image
|
page readonly
|
|
|
|
7FF51F01F000
|
unkown image
|
page readonly
|
|
|
|
1D0FD613000
|
unkown
|
page read and write
|
|
|
|
8839C7F000
|
unkown
|
page read and write
|
|
|
|
7FF59BEDF000
|
unkown image
|
page readonly
|
|
|
|
7FF5056AC000
|
unkown image
|
page readonly
|
|
|
|
7FF51EB23000
|
unkown image
|
page readonly
|
|
|
|
7FF51EF57000
|
unkown image
|
page readonly
|
|
|
|
3B3F000
|
unkown
|
page read and write
|
|
|
|
5EA000
|
unkown
|
page readonly
|
|
|
|
7FF5C65D3000
|
unkown image
|
page readonly
|
|
|
|
1544A1F0000
|
unkown
|
page read and write
|
|
|
|
7FF58489A000
|
unkown image
|
page readonly
|
|
|
|
7FF5651FE000
|
unkown image
|
page readonly
|
|
|
|
1D8547D000
|
unkown
|
page read and write
|
|
|
|
1DD934D0000
|
unkown image
|
page readonly
|
|
|
|
238CA7A0000
|
unkown
|
page read and write
|
|
|
|
7FF51F018000
|
unkown image
|
page readonly
|
|
|
|
7FF55B794000
|
unkown image
|
page readonly
|
|
|
|
7FF5652EF000
|
unkown image
|
page readonly
|
|
|
|
1D0FD590000
|
unkown image
|
page readonly
|
|
|
|
7FF589BFB000
|
unkown image
|
page readonly
|
|
|
|
7FF58494F000
|
unkown image
|
page readonly
|
|
|
|
7FF584920000
|
unkown image
|
page readonly
|
|
|
|
7FF55B982000
|
unkown image
|
page readonly
|
|
|
|
7FF5C647D000
|
unkown image
|
page readonly
|
|
|
|
3C3F000
|
unkown
|
page read and write
|
|
|
|
22CAD202000
|
unkown
|
page read and write
|
|
|
|
7FF5D5BD5000
|
unkown image
|
page readonly
|
|
|
|
1BBB6780000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9DED000
|
unkown image
|
page readonly
|
|
|
|
22CAD140000
|
unkown image
|
page readonly
|
|
|
|
7FF51EFA3000
|
unkown image
|
page readonly
|
|
|
|
7FF51EEB5000
|
unkown image
|
page readonly
|
|
|
|
22CAD229000
|
unkown
|
page read and write
|
|
|
|
7DF57ABE2000
|
unkown image
|
page readonly
|
|
|
|
7DF5BF842000
|
unkown image
|
page readonly
|
|
|
|
F8E000
|
unkown
|
page read and write
|
|
|
|
596000
|
unkown
|
page read and write
|
|
|
|
1FB5A068000
|
unkown
|
page read and write
|
|
|
|
1A0EF451000
|
unkown
|
page read and write
|
|
|
|
264E000
|
unkown
|
page read and write
|
|
|
|
7DF5DBFF0000
|
unkown image
|
page readonly
|
|
|
|
7DF51B0B0000
|
unkown image
|
page readonly
|
|
|
|
BC48F7E000
|
unkown
|
page read and write
|
|
|
|
7DF5EB562000
|
unkown image
|
page readonly
|
|
|
|
1003000
|
unkown image
|
page readonly
|
|
|
|
235957B0000
|
unkown image
|
page readonly
|
|
|
|
22CAD110000
|
heap private
|
page read and write
|
|
|
|
1BBB6229000
|
unkown
|
page read and write
|
|
|
|
1FB5A000000
|
unkown
|
page read and write
|
|
|
|
1D851FD000
|
unkown
|
page read and write
|
|
|
|
7FF50578B000
|
unkown image
|
page readonly
|
|
|
|
7FF505303000
|
unkown image
|
page readonly
|
|
|
|
7FF55096D000
|
unkown image
|
page readonly
|
|
|
|
22CAD850000
|
unkown image
|
page readonly
|
|
|
|
7FF5C66DB000
|
unkown image
|
page readonly
|
|
|
|
7DF5EB560000
|
unkown image
|
page readonly
|
|
|
|
238C9F6F000
|
unkown
|
page read and write
|
|
|
|
1BBB6202000
|
unkown
|
page read and write
|
|
|
|
238C9F8B000
|
unkown
|
page read and write
|
|
|
|
7DF57ABE2000
|
unkown image
|
page readonly
|
|
|
|
7FF584889000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9E8A000
|
unkown image
|
page readonly
|
|
|
|
238C9F86000
|
unkown
|
page read and write
|
|
|
|
5950E7E000
|
unkown
|
page read and write
|
|
|
|
646EE7C000
|
unkown
|
page read and write
|
|
|
|
FCE000
|
unkown
|
page read and write
|
|
|
|
7DF59F530000
|
unkown image
|
page readonly
|
|
|
|
7FF51EB29000
|
unkown image
|
page readonly
|
|
|
|
7FF584916000
|
unkown image
|
page readonly
|
|
|
|
1FB5A113000
|
unkown
|
page read and write
|
|
|
|
238CA0C5000
|
heap private
|
page read and write
|
|
|
|
1D0FDAD0000
|
unkown image
|
page readonly
|
|
|
|
7DF5EB580000
|
unkown image
|
page readonly
|
|
|
|
1BBB6040000
|
heap default
|
page read and write
|
|
|
|
7DF4D9EA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9E22000
|
unkown image
|
page readonly
|
|
|
|
7FF59BE55000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE2E000
|
unkown image
|
page readonly
|
|
|
|
1C184A70000
|
heap default
|
page read and write
|
|
|
|
7DF5714F2000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7DF5714E0000
|
unkown image
|
page readonly
|
|
|
|
DE627FF000
|
unkown
|
page read and write
|
|
|
|
1A0EFA50000
|
unkown image
|
page readonly
|
|
|
|
1BBB5FD0000
|
unkown image
|
page read and write
|
|
|
|
7FF59BD94000
|
unkown image
|
page readonly
|
|
|
|
7FF59BD33000
|
unkown image
|
page readonly
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
1FB5A028000
|
unkown
|
page read and write
|
|
|
|
7DF5DBFD0000
|
unkown image
|
page readonly
|
|
|
|
812127B000
|
unkown
|
page read and write
|
|
|
|
56E000
|
unkown
|
page read and write
|
|
|
|
1BBB6300000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C6619000
|
unkown image
|
page readonly
|
|
|
|
9D0000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
646E87F000
|
unkown
|
page read and write
|
|
|
|
7FF50579F000
|
unkown image
|
page readonly
|
|
|
|
53B000
|
unkown
|
page read and write
|
|
|
|
235957F0000
|
unkown image
|
page readonly
|
|
|
|
7DF4BD700000
|
unkown image
|
page readonly
|
|
|
|
1DD93074000
|
unkown
|
page read and write
|
|
|
|
7FF584005000
|
unkown image
|
page readonly
|
|
|
|
7FF55BAB0000
|
unkown image
|
page readonly
|
|
|
|
1BBB6250000
|
unkown
|
page read and write
|
|
|
|
15449FB0000
|
unkown image
|
page read and write
|
|
|
|
7FF55BA71000
|
unkown image
|
page readonly
|
|
|
|
238C9CA0000
|
unkown image
|
page readonly
|
|
|
|
22CAD25C000
|
unkown
|
page read and write
|
|
|
|
15449FD0000
|
unkown image
|
page readonly
|
|
|
|
1A0EFB40000
|
unkown
|
page read and write
|
|
|
|
7DF59A242000
|
unkown image
|
page readonly
|
|
|
|
1A0EF370000
|
unkown image
|
page read and write
|
|
|
|
7DF57ABF0000
|
unkown image
|
page readonly
|
|
|
|
1544A110000
|
unkown image
|
page readonly
|
|
|
|
15449FF0000
|
unkown image
|
page readonly
|
|
|
|
56E000
|
unkown
|
page read and write
|
|
|
|
238C9F90000
|
unkown
|
page read and write
|
|
|
|
7FF589B27000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5B30000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9A71000
|
unkown image
|
page readonly
|
|
|
|
7FF55BB55000
|
unkown image
|
page readonly
|
|
|
|
1544A7B0000
|
unkown
|
page read and write
|
|
|
|
1DD92F20000
|
heap private
|
page read and write
|
|
|
|
55F000
|
unkown
|
page read and write
|
|
|
|
7FF5848B5000
|
unkown image
|
page readonly
|
|
|
|
1544A400000
|
unkown image
|
page readonly
|
|
|
|
53E000
|
unkown
|
page read and write
|
|
|
|
7FF504FE4000
|
unkown image
|
page readonly
|
|
|
|
238CA7A1000
|
unkown
|
page read and write
|
|
|
|
7FF55B69F000
|
unkown image
|
page readonly
|
|
|
|
7FF589B65000
|
unkown image
|
page readonly
|
|
|
|
1FB5A660000
|
unkown image
|
page readonly
|
|
|
|
1BBB6302000
|
unkown
|
page read and write
|
|
|
|
1DD93031000
|
unkown
|
page read and write
|
|
|
|
1BBB624D000
|
unkown
|
page read and write
|
|
|
|
7FF5652AF000
|
unkown image
|
page readonly
|
|
|
|
7DF432820000
|
unkown image
|
page readonly
|
|
|
|
1C184B70000
|
unkown
|
page read and write
|
|
|
|
7FF5A9DF0000
|
unkown image
|
page readonly
|
|
|
|
1C184A20000
|
unkown image
|
page readonly
|
|
|
|
1C184D13000
|
unkown
|
page read and write
|
|
|
|
53B000
|
unkown
|
page read and write
|
|
|
|
544000
|
unkown
|
page read and write
|
|
|
|
238C9F6F000
|
unkown
|
page read and write
|
|
|
|
7FF5056B8000
|
unkown image
|
page readonly
|
|
|
|
7FF5C6615000
|
unkown image
|
page readonly
|
|
|
|
1544A7B0000
|
unkown
|
page read and write
|
|
|
|
7FF5C669F000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
238C9C70000
|
unkown image
|
page readonly
|
|
|
|
7FF589BE8000
|
unkown image
|
page readonly
|
|
|
|
88393EB000
|
unkown
|
page read and write
|
|
|
|
1BBB624A000
|
unkown
|
page read and write
|
|
|
|
1DD93057000
|
unkown
|
page read and write
|
|
|
|
7FF5652CD000
|
unkown image
|
page readonly
|
|
|
|
1BBB5FE0000
|
heap private
|
page read and write
|
|
|
|
36D3000
|
heap private
|
page read and write
|
|
|
|
7FF51E6EF000
|
unkown image
|
page readonly
|
|
|
|
7FF59BEEB000
|
unkown image
|
page readonly
|
|
|
|
7FF5652A8000
|
unkown image
|
page readonly
|
|
|
|
1DD93102000
|
unkown
|
page read and write
|
|
|
|
1DD93040000
|
unkown
|
page read and write
|
|
|
|
7DF51B090000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5B40000
|
unkown image
|
page readonly
|
|
|
|
56E000
|
unkown
|
page read and write
|
|
|
|
1D0FDC60000
|
unkown image
|
page readonly
|
|
|
|
8120D3C000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1BBB6255000
|
unkown
|
page read and write
|
|
|
|
1DD93055000
|
unkown
|
page read and write
|
|
|
|
DE6247E000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C6F000
|
unkown image
|
page readonly
|
|
|
|
7FF59BF0E000
|
unkown image
|
page readonly
|
|
|
|
1FB59F40000
|
unkown image
|
page readonly
|
|
|
|
572000
|
unkown
|
page read and write
|
|
|
|
7DF534952000
|
unkown image
|
page readonly
|
|
|
|
7FF5652D4000
|
unkown image
|
page readonly
|
|
|
|
7FF51F05F000
|
unkown image
|
page readonly
|
|
|
|
7DF5EB570000
|
unkown image
|
page readonly
|
|
|
|
7DF5714F0000
|
unkown image
|
page readonly
|
|
|
|
55C000
|
unkown
|
page read and write
|
|
|
|
1A0EF513000
|
unkown
|
page read and write
|
|
|
|
7FF504F38000
|
unkown image
|
page readonly
|
|
|
|
238C9F48000
|
unkown
|
page read and write
|
|
|
|
7DF57ABF2000
|
unkown image
|
page readonly
|
|
|
|
1DD93002000
|
unkown
|
page read and write
|
|
|
|
7FF5056D5000
|
unkown image
|
page readonly
|
|
|
|
1544A100000
|
unkown image
|
page readonly
|
|
|
|
7FF55B8D3000
|
unkown image
|
page readonly
|
|
|
|
7FF55BA73000
|
unkown image
|
page readonly
|
|
|
|
52C000
|
unkown
|
page read and write
|
|
|
|
7FF589C2F000
|
unkown image
|
page readonly
|
|
|
|
BD0000
|
unkown image
|
page readonly
|
|
|
|
7FF55BAF7000
|
unkown image
|
page readonly
|
|
|
|
7FF55BAFC000
|
unkown image
|
page readonly
|
|
|
|
235957C0000
|
unkown image
|
page readonly
|
|
|
|
1544A780000
|
unkown image
|
page readonly
|
|
|
|
7FF5893C0000
|
unkown image
|
page readonly
|
|
|
|
7FF51EF78000
|
unkown image
|
page readonly
|
|
|
|
10AB000
|
unkown image
|
page read and write
|
|
|
|
1A0EF450000
|
unkown
|
page read and write
|
|
|
|
1C184A20000
|
unkown image
|
page readonly
|
|
|
|
15449FD0000
|
unkown image
|
page readonly
|
|
|
|
7DF59F540000
|
unkown image
|
page readonly
|
|
|
|
7FF55BBA8000
|
unkown image
|
page readonly
|
|
|
|
7FF59B9F8000
|
unkown image
|
page readonly
|
|
|
|
7DF534950000
|
unkown image
|
page readonly
|
|
|
|
238C9F85000
|
unkown
|
page read and write
|
|
|
|
575000
|
unkown
|
page read and write
|
|
|
|
7FF565225000
|
unkown image
|
page readonly
|
|
|
|
7FF55B2D2000
|
unkown image
|
page readonly
|
|
|
|
1D0FD540000
|
unkown image
|
page read and write
|
|
|
|
7FF55BB25000
|
unkown image
|
page readonly
|
|
|
|
7FF505695000
|
unkown image
|
page readonly
|
|
|
|
23595C55000
|
heap private
|
page read and write
|
|
|
|
DE6277D000
|
unkown
|
page read and write
|
|
|
|
1A0EF400000
|
unkown
|
page read and write
|
|
|
|
7DF59F520000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5BA9000
|
unkown image
|
page readonly
|
|
|
|
235958E0000
|
unkown
|
page read and write
|
|
|
|
1FB5A2D0000
|
unkown image
|
page readonly
|
|
|
|
420000
|
unkown
|
page read and write
|
|
|
|
7FF5C66A6000
|
unkown image
|
page readonly
|
|
|
|
1D84FFF000
|
unkown
|
page read and write
|
|
|
|
7FF55BBAF000
|
unkown image
|
page readonly
|
|
|
|
1D84F7E000
|
unkown
|
page read and write
|
|
|
|
1DD93000000
|
unkown
|
page read and write
|
|
|
|
7DF5714E2000
|
unkown image
|
page readonly
|
|
|
|
555000
|
unkown
|
page read and write
|
|
|
|
1544A000000
|
unkown image
|
page readonly
|
|
|
|
1D0FD671000
|
unkown
|
page read and write
|
|
|
|
5F5000
|
heap default
|
page read and write
|
|
|
|
7FF5A9A46000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9E4C000
|
unkown image
|
page readonly
|
|
|
|
883967E000
|
unkown
|
page read and write
|
|
|
|
7FF5C64A3000
|
unkown image
|
page readonly
|
|
|
|
7FF55B8E1000
|
unkown image
|
page readonly
|
|
|
|
1544A213000
|
unkown
|
page read and write
|
|
|
|
36D3000
|
heap private
|
page read and write
|
|
|
|
1544A200000
|
unkown
|
page read and write
|
|
|
|
1010000
|
unkown image
|
page execute read
|
|
|
|
7FF50524F000
|
unkown image
|
page readonly
|
|
|
|
22CAD313000
|
unkown
|
page read and write
|
|
|
|
7FF5C6698000
|
unkown image
|
page readonly
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
7DF51B0B0000
|
unkown image
|
page readonly
|
|
|
|
7DF5DBFE0000
|
unkown image
|
page readonly
|
|
|
|
22CAD278000
|
unkown
|
page read and write
|
|
|
|
22CAD213000
|
unkown
|
page read and write
|
|
|
|
10AD000
|
unkown image
|
page readonly
|
|
|
|
812147E000
|
unkown
|
page read and write
|
|
|
|
1C184C7E000
|
unkown
|
page read and write
|
|
|
|
D50000
|
unkown image
|
page readonly
|
|
|
|
4C0000
|
heap default
|
page read and write
|
|
|
|
7DF59F520000
|
unkown image
|
page readonly
|
|
|
|
7FF5652C0000
|
unkown image
|
page readonly
|
|
|
|
7FF59BEE6000
|
unkown image
|
page readonly
|
|
|
|
7FF55BBDE000
|
unkown image
|
page readonly
|
|
|
|
7DF51B0A0000
|
unkown image
|
page readonly
|
|
|
|
7FF589BEF000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9EF8000
|
unkown image
|
page readonly
|
|
|
|
1093000
|
unkown image
|
page read and write
|
|
|
|
8839A77000
|
unkown
|
page read and write
|
|
|
|
7FF50579D000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown image
|
page readonly
|
|
|
|
1D0FD5E0000
|
unkown
|
page read and write
|
|
|
|
7FF5652B6000
|
unkown image
|
page readonly
|
|
|
|
5EE000
|
unkown
|
page readonly
|
|
|
|
1FB5A802000
|
unkown
|
page read and write
|
|
|
|
7FF5C65E7000
|
unkown image
|
page readonly
|
|
|
|
7FF56521D000
|
unkown image
|
page readonly
|
|
|
|
1C184C13000
|
unkown
|
page read and write
|
|
|
|
7DF5B1822000
|
unkown image
|
page readonly
|
|
|
|
7DF57AC00000
|
unkown image
|
page readonly
|
|
|
|
1D0FD68A000
|
unkown
|
page read and write
|
|
|
|
7FF589C2F000
|
unkown image
|
page readonly
|
|
|
|
1A0EF390000
|
unkown image
|
page readonly
|
|
|
|
536000
|
unkown
|
page read and write
|
|
|
|
7FF5A9F3D000
|
unkown image
|
page readonly
|
|
|
|
7FF5C64AE000
|
unkown image
|
page readonly
|
|
|
|
7FF55BAE7000
|
unkown image
|
page readonly
|
|
|
|
1100000
|
unkown image
|
page readonly
|
|
|
|
7FF505532000
|
unkown image
|
page readonly
|
|
|
|
7DF5BF830000
|
unkown image
|
page readonly
|
|
|
|
595107F000
|
unkown
|
page read and write
|
|
|
|
7FF55BBEF000
|
unkown image
|
page readonly
|
|
|
|
7FF55BAD2000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9F2B000
|
unkown image
|
page readonly
|
|
|
|
7FF50576B000
|
unkown image
|
page readonly
|
|
|
|
7DF59A260000
|
unkown image
|
page readonly
|
|
|
|
238C9F48000
|
unkown
|
page read and write
|
|
|
|
1005000
|
unkown image
|
page read and write
|
|
|
|
6CD017F000
|
unkown
|
page read and write
|
|
|
|
7DF5DBFD2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C64F3000
|
unkown image
|
page readonly
|
|
|
|
7FF5C6554000
|
unkown image
|
page readonly
|
|
|
|
1D0FD560000
|
unkown image
|
page readonly
|
|
|
|
1A0EF429000
|
unkown
|
page read and write
|
|
|
|
7DF5EB572000
|
unkown image
|
page readonly
|
|
|
|
7FF5C65EC000
|
unkown image
|
page readonly
|
|
|
|
1BBB6120000
|
unkown image
|
page readonly
|
|
|
|
238CA450000
|
unkown image
|
page readonly
|
|
|
|
EE0000
|
unkown
|
page read and write
|
|
|
|
238C9EE4000
|
unkown
|
page read and write
|
|
|
|
DA41C7C000
|
unkown
|
page read and write
|
|
|
|
7FF5D5918000
|
unkown image
|
page readonly
|
|
|
|
ED0000
|
heap private
|
page read and write
|
|
|
|
1D0FD5C0000
|
unkown image
|
page readonly
|
|
|
|
1FB5A4D0000
|
unkown image
|
page readonly
|
|
|
|
7FF584868000
|
unkown image
|
page readonly
|
|
|
|
7DF59F532000
|
unkown image
|
page readonly
|
|
|
|
1DD92FB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A9F3F000
|
unkown image
|
page readonly
|
|
|
|
1DD93087000
|
unkown
|
page read and write
|
|
|
|
7FF5A9CB7000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5B77000
|
unkown image
|
page readonly
|
|
|
|
235959DB000
|
heap default
|
page read and write
|
|
|
|
7FF505674000
|
unkown image
|
page readonly
|
|
|
|
7FF5C6623000
|
unkown image
|
page readonly
|
|
|
|
7FF589C1E000
|
unkown image
|
page readonly
|
|
|
|
1099000
|
unkown image
|
page execute and read and write
|
|
|
|
36D3000
|
heap private
|
page read and write
|
|
|
|
1A0EF390000
|
unkown image
|
page readonly
|
|
|
|
8DE27B000
|
unkown
|
page read and write
|
|
|
|
7FF51F05F000
|
unkown image
|
page readonly
|
|
|
|
7FF51EFAA000
|
unkown image
|
page readonly
|
|
|
|
10EF000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5055C2000
|
unkown image
|
page readonly
|
|
|
|
7FF58464D000
|
unkown image
|
page readonly
|
|
|
|
7FF59BD6F000
|
unkown image
|
page readonly
|
|
|
|
DA41EFF000
|
unkown
|
page read and write
|
|
|
|
7FF505697000
|
unkown image
|
page readonly
|
|
|
|
23595FE0000
|
unkown image
|
page readonly
|
|
|
|
7DF5714F0000
|
unkown image
|
page readonly
|
|
|
|
7FF59BE13000
|
unkown image
|
page readonly
|
|
|
|
1D0FD560000
|
unkown image
|
page readonly
|
|
|
|
1DD92F80000
|
heap default
|
page read and write
|
|
|
|
4F4000
|
heap default
|
page read and write
|
|
|
|
7FF5D5BBA000
|
unkown image
|
page readonly
|
|
|
|
7DF5DBFE2000
|
unkown image
|
page readonly
|
|
|
|
812107E000
|
unkown
|
page read and write
|
|
|
|
1BBB5FF0000
|
unkown image
|
page readonly
|
|
|
|
238C9F0C000
|
unkown
|
page read and write
|
|
|
|
7FF59BE6A000
|
unkown image
|
page readonly
|
|
|
|
7FF55B3EA000
|
unkown image
|
page readonly
|
|
|
|
646E2BB000
|
unkown
|
page read and write
|
|
|
|
238C9EF0000
|
unkown
|
page read and write
|
|
|
|
7DF5BF830000
|
unkown image
|
page readonly
|
|
|
|
1BBB628A000
|
unkown
|
page read and write
|
|
|
|
7FF589B7A000
|
unkown image
|
page readonly
|
|
|
|
1A0EF44A000
|
unkown
|
page read and write
|
|
|
|
7FF584858000
|
unkown image
|
page readonly
|
|
|
|
7DF5B1812000
|
unkown image
|
page readonly
|
|
|
|
7DF418F60000
|
unkown image
|
page readonly
|
|
|
|
1FB5A650000
|
unkown image
|
page readonly
|
|
|
|
1C184C4D000
|
unkown
|
page read and write
|
|
|
|
7FF55BB5D000
|
unkown image
|
page readonly
|
|
|
|
5950F7F000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
238C9F6F000
|
unkown
|
page read and write
|
|
|
|
7FF59BF04000
|
unkown image
|
page readonly
|
|
|
|
7DF5EB580000
|
unkown image
|
page readonly
|
|
|
|
8DE57E000
|
unkown
|
page read and write
|
|
|
|
7DF5EB562000
|
unkown image
|
page readonly
|
|
|
|
238C9EF0000
|
unkown
|
page read and write
|
|
|
|
7FF55BA6E000
|
unkown image
|
page readonly
|
|
|
|
22CAD6D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5B1822000
|
unkown image
|
page readonly
|
|
|
|
547000
|
heap default
|
page read and write
|
|
|
|
7FF5C66AB000
|
unkown image
|
page readonly
|
|
|
|
7FF50577D000
|
unkown image
|
page readonly
|
|
|
|
572000
|
unkown
|
page read and write
|
|
|
|
7FF5C6645000
|
unkown image
|
page readonly
|
|
|
|
1C184A50000
|
unkown image
|
page readonly
|
|
|
|
7FF565233000
|
unkown image
|
page readonly
|
|
|
|
EA0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF50575F000
|
unkown image
|
page readonly
|
|
|
|
260F000
|
unkown
|
page read and write
|
|
|
|
7FF50568C000
|
unkown image
|
page readonly
|
|
|
|
235957E0000
|
unkown image
|
page readonly
|
|
|
|
1DD9303C000
|
unkown
|
page read and write
|
|
|
|
7FF5C66CB000
|
unkown image
|
page readonly
|
|
|
|
DE626FE000
|
unkown
|
page read and write
|
|
|
|
7FF51EDFD000
|
unkown image
|
page readonly
|
|
|
|
238C9F35000
|
unkown
|
page read and write
|
|
|
|
238CA7A5000
|
unkown
|
page read and write
|
|
|
|
7FF5C66B0000
|
unkown image
|
page readonly
|
|
|
|
23595C60000
|
unkown image
|
page readonly
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
7FF5A9E83000
|
unkown image
|
page readonly
|
|
|
|
7FF5C61A3000
|
unkown image
|
page readonly
|
|
|
|
1090000
|
unkown image
|
page write copy
|
|
|
|
7FF505766000
|
unkown image
|
page readonly
|
|
|
|
1544A25C000
|
unkown
|
page read and write
|
|
|
|
7FF58493B000
|
unkown image
|
page readonly
|
|
|
|
7DF5714F2000
|
unkown image
|
page readonly
|
|
|
|
DE625FC000
|
unkown
|
page read and write
|
|
|
|
1C184D08000
|
unkown
|
page read and write
|
|
|
|
1A0EF6D0000
|
unkown image
|
page readonly
|
|
|
|
1DD93075000
|
unkown
|
page read and write
|
|
|
|
7FF505614000
|
unkown image
|
page readonly
|
|
|
|
1A0EF3B0000
|
unkown image
|
page readonly
|
|
|
|
7FF59BEF0000
|
unkown image
|
page readonly
|
|
|
|
7FF55BBBB000
|
unkown image
|
page readonly
|
|
|
|
555000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B67000
|
unkown image
|
page readonly
|
|
|
|
238C9ED2000
|
unkown
|
page read and write
|
|
|
|
1544A255000
|
unkown
|
page read and write
|
|
|
|
7FF505758000
|
unkown image
|
page readonly
|
|
|
|
6CD007F000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1544A600000
|
unkown image
|
page readonly
|
|
|
|
7FF55B98D000
|
unkown image
|
page readonly
|
|
|
|
1D854FE000
|
unkown
|
page read and write
|
|
|
|
7FF58491B000
|
unkown image
|
page readonly
|
|
|
|
7FF59BF1B000
|
unkown image
|
page readonly
|
|
|
|
7DF5B1820000
|
unkown image
|
page readonly
|
|
|
|
1DD93650000
|
unkown image
|
page readonly
|
|
|
|
1DD93065000
|
unkown
|
page read and write
|
|
|
|
238CA7A3000
|
unkown
|
page read and write
|
|
|
|
1A0EF413000
|
unkown
|
page read and write
|
|
|
|
7FF59BED8000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5968000
|
unkown image
|
page readonly
|
|
|
|
22CAD200000
|
unkown
|
page read and write
|
|
|
|
7FF5846ED000
|
unkown image
|
page readonly
|
|
|
|
1C184C29000
|
unkown
|
page read and write
|
|
|
|
1D8537D000
|
unkown
|
page read and write
|
|
|
|
7DF59F522000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9784000
|
unkown image
|
page readonly
|
|
|
|
1C184C89000
|
unkown
|
page read and write
|
|
|
|
1544A229000
|
unkown
|
page read and write
|
|
|
|
1C184A10000
|
heap private
|
page read and write
|
|
|
|
7FF55BAC8000
|
unkown image
|
page readonly
|
|
|
|
238C9EF0000
|
unkown
|
page read and write
|
|
|
|
7FF59BE17000
|
unkown image
|
page readonly
|
|
|
|
D9D000
|
unkown
|
page read and write
|
|
|
|
7DF59A252000
|
unkown image
|
page readonly
|
|
|
|
7DF51B0A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5055B6000
|
unkown image
|
page readonly
|
|
|
|
1098000
|
unkown image
|
page read and write
|
|
|
|
7DF498110000
|
unkown image
|
page readonly
|
|
|
|
7DF5DBFD0000
|
unkown image
|
page readonly
|
|
|
|
646E6FB000
|
unkown
|
page read and write
|
|
|
|
596000
|
unkown
|
page read and write
|
|
|
|
7FF584885000
|
unkown image
|
page readonly
|
|
|
|
1DD9307B000
|
unkown
|
page read and write
|
|
|
|
7DF5EB560000
|
unkown image
|
page readonly
|
|
|
|
7DF5B1820000
|
unkown image
|
page readonly
|
|
|
|
7DF5BF840000
|
unkown image
|
page readonly
|
|
|
|
7DF5B1830000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5926000
|
unkown image
|
page readonly
|
|
|
|
7FF58483C000
|
unkown image
|
page readonly
|
|
|
|
6CCFC7F000
|
unkown
|
page read and write
|
|
|
|
23595C50000
|
heap private
|
page read and write
|
|
|
|
22CAD100000
|
unkown image
|
page read and write
|
|
|
|
7DFE4CDD5000
|
unkown image
|
page readonly
|
|
|
|
F00000
|
heap private
|
page read and write
|
|
|
|
238C9C90000
|
unkown image
|
page readonly
|
|
|
|
7FF5C64CE000
|
unkown image
|
page readonly
|
|
|
|
1C185402000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
108E000
|
unkown image
|
page read and write
|
|
|
|
7FF5D536A000
|
unkown image
|
page readonly
|
|
|
|
646E9FC000
|
unkown
|
page read and write
|
|
|
|
2650000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C54000
|
unkown image
|
page readonly
|
|
|
|
22CAD25A000
|
unkown
|
page read and write
|
|
|
|
7DF59A260000
|
unkown image
|
page readonly
|
|
|
|
7FF55B940000
|
unkown image
|
page readonly
|
|
|
|
7FF51F04E000
|
unkown image
|
page readonly
|
|
|
|
7DF59A250000
|
unkown image
|
page readonly
|
|
|
|
1FB59F60000
|
unkown
|
page read and write
|
|
|
|
7FF50579F000
|
unkown image
|
page readonly
|
|
|
|
7FF589C14000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
1A0EF445000
|
unkown
|
page read and write
|
|
|
|
1A0EF444000
|
unkown
|
page read and write
|
|
|
|
7FF5652EF000
|
unkown image
|
page readonly
|
|
|
|
238C9F35000
|
unkown
|
page read and write
|
|
|
|
55D000
|
heap default
|
page read and write
|
|
|
|
7FF5056D9000
|
unkown image
|
page readonly
|
|
|
|
1544A223000
|
unkown
|
page read and write
|
|
|
|
7FF58492D000
|
unkown image
|
page readonly
|
|
|
|
7FF55BBD4000
|
unkown image
|
page readonly
|
|
|
|
23595900000
|
unkown
|
page read and write
|
|
|
|
7FF51EF8D000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF58471F000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5C2F000
|
unkown image
|
page readonly
|
|
|
|
22CAD120000
|
unkown image
|
page readonly
|
|
|
|
420000
|
unkown
|
page read and write
|
|
|
|
7FF51EF67000
|
unkown image
|
page readonly
|
|
|
|
55F000
|
unkown
|
page read and write
|
|
|
|
1DD9307A000
|
unkown
|
page read and write
|
|
|
|
5E1000
|
unkown
|
page execute read
|
|
|
|
575000
|
unkown
|
page read and write
|
|
|
|
238C9F04000
|
unkown
|
page read and write
|
|
|
|
238C9F07000
|
unkown
|
page read and write
|
|
|
|
7FF5056CD000
|
unkown image
|
page readonly
|
|
|
|
7FF565253000
|
unkown image
|
page readonly
|
|
|
|
106A000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9DDD000
|
unkown image
|
page readonly
|
|
|
|
1A0EF44B000
|
unkown
|
page read and write
|
|
|
|
7FF5A9E2C000
|
unkown image
|
page readonly
|
|
|
|
7FF589C00000
|
unkown image
|
page readonly
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
7FF5D5BA5000
|
unkown image
|
page readonly
|
|
|
|
1D8527E000
|
unkown
|
page read and write
|
|
|
|
36D3000
|
heap private
|
page read and write
|
|
|
|
7FF51EF53000
|
unkown image
|
page readonly
|
|
|
|
7FF59BE4D000
|
unkown image
|
page readonly
|
|
|
|
1C184B50000
|
unkown image
|
page readonly
|
|
There are 1033 hidden memdumps, click here to show them.