Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
p47bG25tTf.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{54E1EBED-1243-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7B4B21B1-1243-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{54E1EBEF-1243-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7B4B21B3-1243-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF173DAD1FEFCCC031.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF29513E450399A0E6.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF904617D6CF584C8C.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF9DEA79CED7C13093.TMP
|
data
|
dropped
|
|
There are 19 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\p47bG25tTf.exe
|
'C:\Users\user\Desktop\p47bG25tTf.exe'
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5348 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2584 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://haverit.xyz/index.htm
|
unknown
|
|
|
|
https://haverit.xyz/index.htmdex.htm
|
unknown
|
|
|
|
https://haverit.xyz
|
unknown
|
|
|
|
https://haverit.xyz/index.htmRoot
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://sectigo.com/CPS0
|
unknown
|
|
|
|
http://ocsp.sectigo.com0
|
unknown
|
|
|
|
http://%s=%s&file://&os=%u.%u_%u_%u_x%uindex.html;
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
http://www.google.com/
|
unknown
|
|
There are 7 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
haverit.xyz
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{54E1EBED-1243-11EC-90E5-ECF4BB2D2496}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingBitmap
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingRandomizedBitmap
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{7B4B21B1-1243-11EC-90E5-ECF4BB2D2496}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
There are 19 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
3750000
|
heap private
|
page read and write
|
|
|
|
2C9F723C000
|
unkown
|
page read and write
|
|
|
|
47AA27B000
|
unkown
|
page read and write
|
|
|
|
2CA57CC4000
|
unkown
|
page read and write
|
|
|
|
65E000
|
unkown
|
page read and write
|
|
|
|
2CA57D02000
|
unkown
|
page read and write
|
|
|
|
DE0000
|
heap private
|
page read and write
|
|
|
|
2CA585BD000
|
unkown
|
page read and write
|
|
|
|
7FF59743C000
|
unkown image
|
page readonly
|
|
|
|
675000
|
unkown
|
page read and write
|
|
|
|
7FF54FC88000
|
unkown image
|
page readonly
|
|
|
|
7FF5363CA000
|
unkown image
|
page readonly
|
|
|
|
2CA585BE000
|
unkown
|
page read and write
|
|
|
|
1100000
|
unkown image
|
page readonly
|
|
|
|
3EBF000
|
unkown
|
page read and write
|
|
|
|
2CA585B1000
|
unkown
|
page read and write
|
|
|
|
7FF54FC94000
|
unkown image
|
page readonly
|
|
|
|
641000
|
unkown
|
page read and write
|
|
|
|
218154D0000
|
unkown image
|
page readonly
|
|
|
|
17FCC720000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6A30000
|
unkown image
|
page readonly
|
|
|
|
2CA57ED0000
|
unkown image
|
page readonly
|
|
|
|
7FF5695A7000
|
unkown image
|
page readonly
|
|
|
|
2CA58579000
|
unkown
|
page read and write
|
|
|
|
7FF54FC45000
|
unkown image
|
page readonly
|
|
|
|
7FF5694C6000
|
unkown image
|
page readonly
|
|
|
|
7DF559B80000
|
unkown image
|
page readonly
|
|
|
|
7FF59CC77000
|
unkown image
|
page readonly
|
|
|
|
686000
|
unkown
|
page read and write
|
|
|
|
7FF596E17000
|
unkown image
|
page readonly
|
|
|
|
17FCCF13000
|
unkown
|
page read and write
|
|
|
|
2C9F7285000
|
unkown
|
page read and write
|
|
|
|
2CA58250000
|
unkown image
|
page readonly
|
|
|
|
3753000
|
heap private
|
page read and write
|
|
|
|
2C9F7213000
|
unkown
|
page read and write
|
|
|
|
218155BE000
|
unkown
|
page read and write
|
|
|
|
7DF573690000
|
unkown image
|
page readonly
|
|
|
|
2CA585B9000
|
unkown
|
page read and write
|
|
|
|
92682F9000
|
unkown
|
page read and write
|
|
|
|
7FF59CA0A000
|
unkown image
|
page readonly
|
|
|
|
7FF569455000
|
unkown image
|
page readonly
|
|
|
|
21815570000
|
unkown image
|
page readonly
|
|
|
|
7DF573680000
|
unkown image
|
page readonly
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
7FF5695A7000
|
unkown image
|
page readonly
|
|
|
|
1639F560000
|
unkown image
|
page readonly
|
|
|
|
2CE29700000
|
unkown
|
page read and write
|
|
|
|
7FF57C55B000
|
unkown image
|
page readonly
|
|
|
|
667000
|
unkown
|
page read and write
|
|
|
|
2CA585B1000
|
unkown
|
page read and write
|
|
|
|
2CA58592000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
F10000
|
heap private
|
page read and write
|
|
|
|
1639F950000
|
unkown
|
page read and write
|
|
|
|
2CA585B1000
|
unkown
|
page read and write
|
|
|
|
7FF569484000
|
unkown image
|
page readonly
|
|
|
|
17FCC873000
|
unkown
|
page read and write
|
|
|
|
7FF5692B0000
|
unkown image
|
page readonly
|
|
|
|
2C9F7200000
|
unkown
|
page read and write
|
|
|
|
2CA58573000
|
unkown
|
page read and write
|
|
|
|
64D000
|
unkown
|
page read and write
|
|
|
|
2CA58330000
|
unkown image
|
page readonly
|
|
|
|
7FF54FAD0000
|
unkown image
|
page readonly
|
|
|
|
7FF54FCA0000
|
unkown image
|
page readonly
|
|
|
|
6A4000
|
unkown
|
page read and write
|
|
|
|
7FF54FCCF000
|
unkown image
|
page readonly
|
|
|
|
7FF54FD19000
|
unkown image
|
page readonly
|
|
|
|
1094000
|
unkown image
|
page write copy
|
|
|
|
7FF54F594000
|
unkown image
|
page readonly
|
|
|
|
2CA583C0000
|
unkown
|
page read and write
|
|
|
|
7FF53645D000
|
unkown image
|
page readonly
|
|
|
|
47AA6FC000
|
unkown
|
page read and write
|
|
|
|
7FF59CAB8000
|
unkown image
|
page readonly
|
|
|
|
67C000
|
unkown
|
page read and write
|
|
|
|
7FF5976B7000
|
unkown image
|
page readonly
|
|
|
|
1006000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
2CA58579000
|
unkown
|
page read and write
|
|
|
|
2C9F76D0000
|
unkown image
|
page readonly
|
|
|
|
17FD204C000
|
unkown
|
page read and write
|
|
|
|
7FF59767B000
|
unkown image
|
page readonly
|
|
|
|
2CA585C4000
|
unkown
|
page read and write
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
F20000
|
unkown
|
page read and write
|
|
|
|
7FF5976A3000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
2CA585A0000
|
unkown
|
page read and write
|
|
|
|
7FF54FC01000
|
unkown image
|
page readonly
|
|
|
|
17FCD930000
|
unkown image
|
page read and write
|
|
|
|
9267FBF000
|
unkown
|
page read and write
|
|
|
|
2CA58572000
|
unkown
|
page read and write
|
|
|
|
7FF59CC37000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
163A04C0000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A22000
|
unkown image
|
page readonly
|
|
|
|
7FF597674000
|
unkown image
|
page readonly
|
|
|
|
21815545000
|
heap private
|
page read and write
|
|
|
|
1010000
|
unkown image
|
page execute read
|
|
|
|
7FF59768A000
|
unkown image
|
page readonly
|
|
|
|
7DF573682000
|
unkown image
|
page readonly
|
|
|
|
17FD1DD0000
|
unkown
|
page read and write
|
|
|
|
2C9F7308000
|
unkown
|
page read and write
|
|
|
|
2CE294E0000
|
unkown image
|
page readonly
|
|
|
|
5A1EFFB000
|
unkown
|
page read and write
|
|
|
|
2CA57C4F000
|
unkown
|
page read and write
|
|
|
|
7FF5974E1000
|
unkown image
|
page readonly
|
|
|
|
2CE29629000
|
unkown
|
page read and write
|
|
|
|
677000
|
unkown
|
page read and write
|
|
|
|
2CE29708000
|
unkown
|
page read and write
|
|
|
|
2CA57C4C000
|
unkown
|
page read and write
|
|
|
|
E61813F000
|
unkown
|
page read and write
|
|
|
|
1093000
|
unkown image
|
page read and write
|
|
|
|
7FF59CB96000
|
unkown image
|
page readonly
|
|
|
|
2CA57C53000
|
unkown
|
page read and write
|
|
|
|
7FF5694BD000
|
unkown image
|
page readonly
|
|
|
|
7FF5976A6000
|
unkown image
|
page readonly
|
|
|
|
21815960000
|
unkown image
|
page readonly
|
|
|
|
E2E000
|
unkown
|
page read and write
|
|
|
|
7FF54F949000
|
unkown image
|
page readonly
|
|
|
|
7FF5975FD000
|
unkown image
|
page readonly
|
|
|
|
1099000
|
unkown image
|
page execute and read and write
|
|
|
|
7FF536111000
|
unkown image
|
page readonly
|
|
|
|
7FF535C05000
|
unkown image
|
page readonly
|
|
|
|
1639FBE0000
|
unkown image
|
page readonly
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
7FF5693B0000
|
unkown image
|
page readonly
|
|
|
|
2CA57C8D000
|
unkown
|
page read and write
|
|
|
|
7FF59CC4A000
|
unkown image
|
page readonly
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
1639F880000
|
unkown image
|
page readonly
|
|
|
|
1639F7CB000
|
heap default
|
page read and write
|
|
|
|
7FF54FD17000
|
unkown image
|
page readonly
|
|
|
|
7FF569593000
|
unkown image
|
page readonly
|
|
|
|
218154F0000
|
unkown image
|
page readonly
|
|
|
|
2CA58A19000
|
unkown
|
page read and write
|
|
|
|
17FD1B90000
|
unkown
|
page read and write
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
7FF54FD0D000
|
unkown image
|
page readonly
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
7FF597677000
|
unkown image
|
page readonly
|
|
|
|
17FCC875000
|
unkown
|
page read and write
|
|
|
|
664000
|
unkown
|
page read and write
|
|
|
|
17FD1CC1000
|
unkown
|
page read and write
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
7FF5697E3000
|
unkown image
|
page readonly
|
|
|
|
1639F780000
|
heap default
|
page read and write
|
|
|
|
2CA58599000
|
unkown
|
page read and write
|
|
|
|
2CA57C4E000
|
unkown
|
page read and write
|
|
|
|
7DF559B70000
|
unkown image
|
page readonly
|
|
|
|
19B000
|
unkown
|
page read and write
|
|
|
|
2CA58591000
|
unkown
|
page read and write
|
|
|
|
7FF59CC72000
|
unkown image
|
page readonly
|
|
|
|
7FF5693B8000
|
unkown image
|
page readonly
|
|
|
|
686000
|
unkown
|
page read and write
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
2CE29A00000
|
unkown image
|
page readonly
|
|
|
|
2CA585AA000
|
unkown
|
page read and write
|
|
|
|
7FF536496000
|
unkown image
|
page readonly
|
|
|
|
E6180BB000
|
unkown
|
page read and write
|
|
|
|
2C9F7249000
|
unkown
|
page read and write
|
|
|
|
17FCCA00000
|
unkown image
|
page readonly
|
|
|
|
17FD1CC0000
|
unkown
|
page read and write
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
7FF569829000
|
unkown image
|
page readonly
|
|
|
|
261000
|
unkown
|
page read and write
|
|
|
|
2CA58561000
|
unkown
|
page read and write
|
|
|
|
659000
|
unkown
|
page read and write
|
|
|
|
7FF59C8F0000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
17FD1CD0000
|
unkown
|
page read and write
|
|
|
|
7FF54FB6D000
|
unkown image
|
page readonly
|
|
|
|
EC3A6F7000
|
unkown
|
page read and write
|
|
|
|
2CA585B1000
|
unkown
|
page read and write
|
|
|
|
2CA57C52000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A22000
|
unkown image
|
page readonly
|
|
|
|
17FD1E00000
|
unkown
|
page read and write
|
|
|
|
64B000
|
unkown
|
page read and write
|
|
|
|
E9953FE000
|
unkown
|
page read and write
|
|
|
|
2CA5854D000
|
unkown
|
page read and write
|
|
|
|
E99527E000
|
unkown
|
page read and write
|
|
|
|
7DF5A1452000
|
unkown image
|
page readonly
|
|
|
|
218155BE000
|
unkown
|
page read and write
|
|
|
|
2CE29657000
|
unkown
|
page read and write
|
|
|
|
2CE29800000
|
unkown image
|
page readonly
|
|
|
|
2C9F7950000
|
unkown
|
page read and write
|
|
|
|
2CE29670000
|
unkown
|
page read and write
|
|
|
|
21815AE0000
|
unkown image
|
page readonly
|
|
|
|
17FD1E00000
|
unkown
|
page read and write
|
|
|
|
218154B0000
|
unkown image
|
page read and write
|
|
|
|
7FF5697F6000
|
unkown image
|
page readonly
|
|
|
|
10EF000
|
unkown image
|
page readonly
|
|
|
|
1639F590000
|
unkown image
|
page readonly
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
17FCCDB0000
|
unkown image
|
page read and write
|
|
|
|
7DF540252000
|
unkown image
|
page readonly
|
|
|
|
7FF59CC3B000
|
unkown image
|
page readonly
|
|
|
|
7FF569367000
|
unkown image
|
page readonly
|
|
|
|
7FF569057000
|
unkown image
|
page readonly
|
|
|
|
10AB000
|
unkown image
|
page read and write
|
|
|
|
7FF54FB0B000
|
unkown image
|
page readonly
|
|
|
|
2C9F727C000
|
unkown
|
page read and write
|
|
|
|
2C9F71F0000
|
heap default
|
page read and write
|
|
|
|
7FF569457000
|
unkown image
|
page readonly
|
|
|
|
7FF54FD71000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6A20000
|
unkown image
|
page readonly
|
|
|
|
646000
|
unkown
|
page read and write
|
|
|
|
67D000
|
unkown
|
page read and write
|
|
|
|
5EA000
|
heap default
|
page read and write
|
|
|
|
218155C0000
|
unkown
|
page read and write
|
|
|
|
2CA57BD0000
|
unkown
|
page read and write
|
|
|
|
6A4000
|
unkown
|
page read and write
|
|
|
|
17FCD5A0000
|
unkown image
|
page readonly
|
|
|
|
1639F7D8000
|
heap default
|
page read and write
|
|
|
|
7FF569567000
|
unkown image
|
page readonly
|
|
|
|
7FF569827000
|
unkown image
|
page readonly
|
|
|
|
2CA5856F000
|
unkown
|
page read and write
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
17FCCD80000
|
unkown image
|
page readonly
|
|
|
|
2CA583C0000
|
unkown
|
page read and write
|
|
|
|
7DF4A48E0000
|
unkown image
|
page readonly
|
|
|
|
2CA58556000
|
unkown
|
page read and write
|
|
|
|
652000
|
unkown
|
page read and write
|
|
|
|
EC3A4FC000
|
unkown
|
page read and write
|
|
|
|
7DF573340000
|
unkown image
|
page readonly
|
|
|
|
17FCC913000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
17FCCE00000
|
unkown
|
page read and write
|
|
|
|
2CA58591000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown
|
page read and write
|
|
|
|
7FF5698D7000
|
unkown image
|
page readonly
|
|
|
|
666000
|
unkown
|
page read and write
|
|
|
|
17FD202D000
|
unkown
|
page read and write
|
|
|
|
2CA585C8000
|
unkown
|
page read and write
|
|
|
|
17FD1DE0000
|
unkown
|
page read and write
|
|
|
|
7FF5362E8000
|
unkown image
|
page readonly
|
|
|
|
1639F710000
|
unkown
|
page read and write
|
|
|
|
7FF5362B8000
|
unkown image
|
page readonly
|
|
|
|
4D0000
|
unkown image
|
page readonly
|
|
|
|
646000
|
unkown
|
page read and write
|
|
|
|
7FF59CB7F000
|
unkown image
|
page readonly
|
|
|
|
7FF53623A000
|
unkown image
|
page readonly
|
|
|
|
7FF536296000
|
unkown image
|
page readonly
|
|
|
|
7FF569551000
|
unkown image
|
page readonly
|
|
|
|
7FF569304000
|
unkown image
|
page readonly
|
|
|
|
675000
|
unkown
|
page read and write
|
|
|
|
1639F9C5000
|
heap private
|
page read and write
|
|
|
|
3753000
|
heap private
|
page read and write
|
|
|
|
17FD1CA0000
|
unkown
|
page read and write
|
|
|
|
650000
|
unkown
|
page read and write
|
|
|
|
17FCD5B0000
|
unkown image
|
page readonly
|
|
|
|
7FF596E99000
|
unkown image
|
page readonly
|
|
|
|
2C9F7256000
|
unkown
|
page read and write
|
|
|
|
2CA585B3000
|
unkown
|
page read and write
|
|
|
|
7FF5697E5000
|
unkown image
|
page readonly
|
|
|
|
7FF596DDD000
|
unkown image
|
page readonly
|
|
|
|
7FF59CBB6000
|
unkown image
|
page readonly
|
|
|
|
E61867F000
|
unkown
|
page read and write
|
|
|
|
675000
|
unkown
|
page read and write
|
|
|
|
17FCC5D0000
|
unkown image
|
page read and write
|
|
|
|
2CA57D13000
|
unkown
|
page read and write
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
7FF5363E6000
|
unkown image
|
page readonly
|
|
|
|
2CA57CFE000
|
unkown
|
page read and write
|
|
|
|
7FF569494000
|
unkown image
|
page readonly
|
|
|
|
17FCCF00000
|
unkown
|
page read and write
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
7FF597661000
|
unkown image
|
page readonly
|
|
|
|
7FF569816000
|
unkown image
|
page readonly
|
|
|
|
688000
|
unkown
|
page read and write
|
|
|
|
17FD1BA0000
|
unkown
|
page read and write
|
|
|
|
1005000
|
unkown image
|
page read and write
|
|
|
|
7FF54FCEA000
|
unkown image
|
page readonly
|
|
|
|
7DF573350000
|
unkown image
|
page readonly
|
|
|
|
2CE2963C000
|
unkown
|
page read and write
|
|
|
|
2CA585AC000
|
unkown
|
page read and write
|
|
|
|
7FF535BFF000
|
unkown image
|
page readonly
|
|
|
|
10AD000
|
unkown image
|
page readonly
|
|
|
|
17FCD580000
|
unkown image
|
page readonly
|
|
|
|
7DF540242000
|
unkown image
|
page readonly
|
|
|
|
7FF535F51000
|
unkown image
|
page readonly
|
|
|
|
7FF568E35000
|
unkown image
|
page readonly
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
7FF54FC08000
|
unkown image
|
page readonly
|
|
|
|
4F1000
|
unkown
|
page execute read
|
|
|
|
647000
|
unkown
|
page read and write
|
|
|
|
163A0510000
|
unkown
|
page read and write
|
|
|
|
7FF59CC27000
|
unkown image
|
page readonly
|
|
|
|
5A1EC7B000
|
unkown
|
page read and write
|
|
|
|
17FCCDA0000
|
unkown
|
page read and write
|
|
|
|
7DF540242000
|
unkown image
|
page readonly
|
|
|
|
7FF5698D7000
|
unkown image
|
page readonly
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
7FF5362B5000
|
unkown image
|
page readonly
|
|
|
|
7FF54FD77000
|
unkown image
|
page readonly
|
|
|
|
1639F790000
|
heap default
|
page read and write
|
|
|
|
17FCC89C000
|
unkown
|
page read and write
|
|
|
|
664000
|
unkown
|
page read and write
|
|
|
|
2CA5856D000
|
unkown
|
page read and write
|
|
|
|
2C9F71A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6A20000
|
unkown image
|
page readonly
|
|
|
|
7FF54FC31000
|
unkown image
|
page readonly
|
|
|
|
2CA57C00000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
688000
|
unkown
|
page read and write
|
|
|
|
7FF5363AF000
|
unkown image
|
page readonly
|
|
|
|
7DF559B70000
|
unkown image
|
page readonly
|
|
|
|
7FF5698C3000
|
unkown image
|
page readonly
|
|
|
|
7DF573360000
|
unkown image
|
page readonly
|
|
|
|
21816F00000
|
unkown image
|
page read and write
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
7FF5975F6000
|
unkown image
|
page readonly
|
|
|
|
7FF5974F8000
|
unkown image
|
page readonly
|
|
|
|
1639F560000
|
unkown image
|
page readonly
|
|
|
|
2CE29702000
|
unkown
|
page read and write
|
|
|
|
7DF5A1470000
|
unkown image
|
page readonly
|
|
|
|
17FCC620000
|
unkown image
|
page readonly
|
|
|
|
17FD20F5000
|
unkown
|
page read and write
|
|
|
|
47AA2FE000
|
unkown
|
page read and write
|
|
|
|
7FF59C3CF000
|
unkown image
|
page readonly
|
|
|
|
7FF59C727000
|
unkown image
|
page readonly
|
|
|
|
2C9F7300000
|
unkown
|
page read and write
|
|
|
|
2C9F74D0000
|
unkown image
|
page readonly
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
7FF5364A7000
|
unkown image
|
page readonly
|
|
|
|
1639F580000
|
unkown image
|
page readonly
|
|
|
|
17FD203F000
|
unkown
|
page read and write
|
|
|
|
21815760000
|
unkown image
|
page readonly
|
|
|
|
E61887F000
|
unkown
|
page read and write
|
|
|
|
2CA57B30000
|
unkown image
|
page read and write
|
|
|
|
67C000
|
unkown
|
page read and write
|
|
|
|
2CA5859B000
|
unkown
|
page read and write
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
2CA57C55000
|
unkown
|
page read and write
|
|
|
|
7FF54F93C000
|
unkown image
|
page readonly
|
|
|
|
7FF5693E8000
|
unkown image
|
page readonly
|
|
|
|
17FD1D70000
|
unkown
|
page read and write
|
|
|
|
17FCC640000
|
heap default
|
page read and write
|
|
|
|
7FF57C55B000
|
unkown image
|
page readonly
|
|
|
|
17FCC730000
|
unkown image
|
page readonly
|
|
|
|
5A1ECFD000
|
unkown
|
page read and write
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
218155A2000
|
unkown
|
page read and write
|
|
|
|
106A000
|
unkown image
|
page readonly
|
|
|
|
2CA58537000
|
unkown
|
page read and write
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
260C000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
17FD1CD0000
|
unkown
|
page read and write
|
|
|
|
7DF573680000
|
unkown image
|
page readonly
|
|
|
|
2CA58579000
|
unkown
|
page read and write
|
|
|
|
7DF573350000
|
unkown image
|
page readonly
|
|
|
|
5A1EF7E000
|
unkown
|
page read and write
|
|
|
|
7FF54FDB3000
|
unkown image
|
page readonly
|
|
|
|
17FCC8A1000
|
unkown
|
page read and write
|
|
|
|
7FF54FDC2000
|
unkown image
|
page readonly
|
|
|
|
2CE29390000
|
unkown image
|
page read and write
|
|
|
|
1090000
|
unkown image
|
page write copy
|
|
|
|
7FF536493000
|
unkown image
|
page readonly
|
|
|
|
17FCCC00000
|
unkown image
|
page readonly
|
|
|
|
71D000
|
unkown
|
page read and write
|
|
|
|
2CA585B3000
|
unkown
|
page read and write
|
|
|
|
17FD2000000
|
unkown
|
page read and write
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
2CA5856D000
|
unkown
|
page read and write
|
|
|
|
109D000
|
unkown image
|
page read and write
|
|
|
|
17FCC8FA000
|
unkown
|
page read and write
|
|
|
|
17FCC890000
|
unkown
|
page read and write
|
|
|
|
2CA5859C000
|
unkown
|
page read and write
|
|
|
|
17FCDA10000
|
unkown
|
page read and write
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
163A02B0000
|
unkown
|
page read and write
|
|
|
|
7FF597664000
|
unkown image
|
page readonly
|
|
|
|
7DF5A1450000
|
unkown image
|
page readonly
|
|
|
|
7FF569897000
|
unkown image
|
page readonly
|
|
|
|
5A1EE79000
|
unkown
|
page read and write
|
|
|
|
7FF569102000
|
unkown image
|
page readonly
|
|
|
|
2C9F7270000
|
unkown
|
page read and write
|
|
|
|
7FF54FB6F000
|
unkown image
|
page readonly
|
|
|
|
2C9F724D000
|
unkown
|
page read and write
|
|
|
|
E6185FB000
|
unkown
|
page read and write
|
|
|
|
652000
|
unkown
|
page read and write
|
|
|
|
2CA585AA000
|
unkown
|
page read and write
|
|
|
|
218154D0000
|
unkown image
|
page readonly
|
|
|
|
7FF54FCE6000
|
unkown image
|
page readonly
|
|
|
|
17FD1E00000
|
unkown
|
page read and write
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
7FF5693B5000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB8E000
|
unkown image
|
page readonly
|
|
|
|
632000
|
unkown
|
page read and write
|
|
|
|
47AA37E000
|
unkown
|
page read and write
|
|
|
|
2CA5857B000
|
unkown
|
page read and write
|
|
|
|
7FF54FA88000
|
unkown image
|
page readonly
|
|
|
|
2CA5859E000
|
unkown
|
page read and write
|
|
|
|
7DF573670000
|
unkown image
|
page readonly
|
|
|
|
1639F6C0000
|
unkown image
|
page readonly
|
|
|
|
7FF56989B000
|
unkown image
|
page readonly
|
|
|
|
7FF5363ED000
|
unkown image
|
page readonly
|
|
|
|
7DF5A1462000
|
unkown image
|
page readonly
|
|
|
|
7FF5363B3000
|
unkown image
|
page readonly
|
|
|
|
2C9F7A02000
|
unkown
|
page read and write
|
|
|
|
7FF56949F000
|
unkown image
|
page readonly
|
|
|
|
2CA57CE2000
|
unkown
|
page read and write
|
|
|
|
7FF5976B7000
|
unkown image
|
page readonly
|
|
|
|
7FF59CA85000
|
unkown image
|
page readonly
|
|
|
|
7DF540250000
|
unkown image
|
page readonly
|
|
|
|
DB0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF535F57000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1639F720000
|
unkown
|
page read and write
|
|
|
|
7FF59CB9A000
|
unkown image
|
page readonly
|
|
|
|
17FCC88B000
|
unkown
|
page read and write
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
7FF54FDB6000
|
unkown image
|
page readonly
|
|
|
|
17FCCF59000
|
unkown
|
page read and write
|
|
|
|
653000
|
unkown
|
page read and write
|
|
|
|
1639F550000
|
unkown
|
page read and write
|
|
|
|
2CA58568000
|
unkown
|
page read and write
|
|
|
|
7FF54FB97000
|
unkown image
|
page readonly
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
7DF471210000
|
unkown image
|
page readonly
|
|
|
|
47AA4FE000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A30000
|
unkown image
|
page readonly
|
|
|
|
2CA57C13000
|
unkown
|
page read and write
|
|
|
|
7FF59CC24000
|
unkown image
|
page readonly
|
|
|
|
7FF56934D000
|
unkown image
|
page readonly
|
|
|
|
2CA57C5A000
|
unkown
|
page read and write
|
|
|
|
7FF569211000
|
unkown image
|
page readonly
|
|
|
|
17FD20AB000
|
unkown
|
page read and write
|
|
|
|
2CA58A63000
|
unkown
|
page read and write
|
|
|
|
17FCC83D000
|
unkown
|
page read and write
|
|
|
|
650000
|
unkown
|
page read and write
|
|
|
|
68B000
|
unkown
|
page read and write
|
|
|
|
7FF59C3D5000
|
unkown image
|
page readonly
|
|
|
|
7FF5694D2000
|
unkown image
|
page readonly
|
|
|
|
7FF54FD84000
|
unkown image
|
page readonly
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
17FD1CE0000
|
unkown
|
page read and write
|
|
|
|
7FF54FA4C000
|
unkown image
|
page readonly
|
|
|
|
7DF540240000
|
unkown image
|
page readonly
|
|
|
|
21815540000
|
heap private
|
page read and write
|
|
|
|
7FF54FB67000
|
unkown image
|
page readonly
|
|
|
|
2C9F71C0000
|
unkown image
|
page readonly
|
|
|
|
17FD2061000
|
unkown
|
page read and write
|
|
|
|
1001000
|
unkown image
|
page execute read
|
|
|
|
17FD2096000
|
unkown
|
page read and write
|
|
|
|
7FF536454000
|
unkown image
|
page readonly
|
|
|
|
6A4000
|
unkown
|
page read and write
|
|
|
|
17FCDAF0000
|
unkown
|
page read and write
|
|
|
|
2C9F71D0000
|
unkown image
|
page readonly
|
|
|
|
7FF59CAF5000
|
unkown image
|
page readonly
|
|
|
|
7DF559B62000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF59CB71000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
7FF54FDC7000
|
unkown image
|
page readonly
|
|
|
|
2CA57C3C000
|
unkown
|
page read and write
|
|
|
|
7FF569894000
|
unkown image
|
page readonly
|
|
|
|
7FF54FCA4000
|
unkown image
|
page readonly
|
|
|
|
7FF59CB8D000
|
unkown image
|
page readonly
|
|
|
|
7DF573342000
|
unkown image
|
page readonly
|
|
|
|
2CA585A0000
|
unkown
|
page read and write
|
|
|
|
1639F787000
|
heap default
|
page read and write
|
|
|
|
2CA58350000
|
unkown image
|
page write copy
|
|
|
|
21815550000
|
unkown
|
page read and write
|
|
|
|
7FF536120000
|
unkown image
|
page readonly
|
|
|
|
E9954F8000
|
unkown
|
page read and write
|
|
|
|
659000
|
unkown
|
page read and write
|
|
|
|
7FF54FD7D000
|
unkown image
|
page readonly
|
|
|
|
2C9F726A000
|
unkown
|
page read and write
|
|
|
|
17FCC800000
|
unkown
|
page read and write
|
|
|
|
E9957FE000
|
unkown
|
page read and write
|
|
|
|
7FF569275000
|
unkown image
|
page readonly
|
|
|
|
7FF54FAFE000
|
unkown image
|
page readonly
|
|
|
|
761000
|
unkown
|
page read and write
|
|
|
|
7DF457A30000
|
unkown image
|
page readonly
|
|
|
|
677000
|
unkown
|
page read and write
|
|
|
|
7FF54F591000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6A12000
|
unkown image
|
page readonly
|
|
|
|
2CA5859B000
|
unkown
|
page read and write
|
|
|
|
2CA585A0000
|
unkown
|
page read and write
|
|
|
|
7FF54FCC1000
|
unkown image
|
page readonly
|
|
|
|
674000
|
unkown
|
page read and write
|
|
|
|
7FF536451000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB5A000
|
unkown image
|
page readonly
|
|
|
|
2CA57C4B000
|
unkown
|
page read and write
|
|
|
|
3753000
|
heap private
|
page read and write
|
|
|
|
7FF59766D000
|
unkown image
|
page readonly
|
|
|
|
7FF59CA88000
|
unkown image
|
page readonly
|
|
|
|
106A000
|
unkown image
|
page readonly
|
|
|
|
2CA57B70000
|
unkown image
|
page readonly
|
|
|
|
672000
|
unkown
|
page read and write
|
|
|
|
108E000
|
unkown image
|
page write copy
|
|
|
|
2CA58570000
|
unkown
|
page read and write
|
|
|
|
672000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A10000
|
unkown image
|
page readonly
|
|
|
|
7FF569881000
|
unkown image
|
page readonly
|
|
|
|
2CA57B80000
|
unkown image
|
page readonly
|
|
|
|
2CA57CA6000
|
unkown
|
page read and write
|
|
|
|
1639F7CF000
|
unkown
|
page read and write
|
|
|
|
7FF568CFF000
|
unkown image
|
page readonly
|
|
|
|
2CA57C50000
|
unkown
|
page read and write
|
|
|
|
2CE295D0000
|
unkown
|
page read and write
|
|
|
|
2CA5857E000
|
unkown
|
page read and write
|
|
|
|
2C9F7252000
|
unkown
|
page read and write
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
505000
|
heap default
|
page read and write
|
|
|
|
7FF54FA95000
|
unkown image
|
page readonly
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
7FF54FA73000
|
unkown image
|
page readonly
|
|
|
|
7DF573340000
|
unkown image
|
page readonly
|
|
|
|
7FF569557000
|
unkown image
|
page readonly
|
|
|
|
7DF573682000
|
unkown image
|
page readonly
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
47AA478000
|
unkown
|
page read and write
|
|
|
|
17FD1B10000
|
unkown
|
page read and write
|
|
|
|
7FF5694ED000
|
unkown image
|
page readonly
|
|
|
|
2CA58A19000
|
unkown
|
page read and write
|
|
|
|
7FF54F985000
|
unkown image
|
page readonly
|
|
|
|
47AAB7E000
|
unkown
|
page read and write
|
|
|
|
7FF5694AF000
|
unkown image
|
page readonly
|
|
|
|
10EF000
|
unkown image
|
page readonly
|
|
|
|
649000
|
unkown
|
page read and write
|
|
|
|
17FCCF18000
|
unkown
|
page read and write
|
|
|
|
685000
|
unkown
|
page read and write
|
|
|
|
2CA57CA7000
|
unkown
|
page read and write
|
|
|
|
47AABFF000
|
unkown
|
page read and write
|
|
|
|
7DF49F320000
|
unkown image
|
page readonly
|
|
|
|
7FF569480000
|
unkown image
|
page readonly
|
|
|
|
2C9F7860000
|
unkown image
|
page readonly
|
|
|
|
7FF54F922000
|
unkown image
|
page readonly
|
|
|
|
7DF573342000
|
unkown image
|
page readonly
|
|
|
|
17FCD101000
|
unkown
|
page read and write
|
|
|
|
7DF471540000
|
unkown image
|
page readonly
|
|
|
|
2CA57B50000
|
unkown image
|
page readonly
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
E994FCE000
|
unkown
|
page read and write
|
|
|
|
2CA585BE000
|
unkown
|
page read and write
|
|
|
|
7DF559B80000
|
unkown image
|
page readonly
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
2CA580D0000
|
unkown image
|
page readonly
|
|
|
|
7FF59CBC7000
|
unkown image
|
page readonly
|
|
|
|
2CA57CE0000
|
unkown
|
page read and write
|
|
|
|
17FD1B80000
|
unkown
|
page read and write
|
|
|
|
7FF54FA7B000
|
unkown image
|
page readonly
|
|
|
|
7FF59CB6F000
|
unkown image
|
page readonly
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
17FCC902000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A10000
|
unkown image
|
page readonly
|
|
|
|
7DF559B72000
|
unkown image
|
page readonly
|
|
|
|
EC3A0EB000
|
unkown
|
page read and write
|
|
|
|
47AADFA000
|
unkown
|
page read and write
|
|
|
|
2CE29B80000
|
unkown image
|
page readonly
|
|
|
|
2CA57C5D000
|
unkown
|
page read and write
|
|
|
|
2CA58546000
|
unkown
|
page read and write
|
|
|
|
1003000
|
unkown image
|
page readonly
|
|
|
|
7FF5698C6000
|
unkown image
|
page readonly
|
|
|
|
7FF569887000
|
unkown image
|
page readonly
|
|
|
|
7DF540260000
|
unkown image
|
page readonly
|
|
|
|
2CE29400000
|
heap default
|
page read and write
|
|
|
|
2CA58569000
|
unkown
|
page read and write
|
|
|
|
676000
|
unkown
|
page read and write
|
|
|
|
E9955FA000
|
unkown
|
page read and write
|
|
|
|
E6181BE000
|
unkown
|
page read and write
|
|
|
|
7FF569564000
|
unkown image
|
page readonly
|
|
|
|
2CA58577000
|
unkown
|
page read and write
|
|
|
|
2CA58579000
|
unkown
|
page read and write
|
|
|
|
7DF573672000
|
unkown image
|
page readonly
|
|
|
|
67A000
|
unkown
|
page read and write
|
|
|
|
17FD1E00000
|
unkown
|
page read and write
|
|
|
|
926827F000
|
unkown
|
page read and write
|
|
|
|
7FF59CB83000
|
unkown image
|
page readonly
|
|
|
|
17FD1DF0000
|
unkown
|
page read and write
|
|
|
|
2CA585DE000
|
unkown
|
page read and write
|
|
|
|
7FF54FA9F000
|
unkown image
|
page readonly
|
|
|
|
7FF54FCBF000
|
unkown image
|
page readonly
|
|
|
|
17FCC889000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
2CE29713000
|
unkown
|
page read and write
|
|
|
|
7DF573672000
|
unkown image
|
page readonly
|
|
|
|
7FF59CBBD000
|
unkown image
|
page readonly
|
|
|
|
17FCCF59000
|
unkown
|
page read and write
|
|
|
|
7FF54FCD3000
|
unkown image
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page execute and read and write
|
|
|
|
2C9F726A000
|
unkown
|
page read and write
|
|
|
|
7FF569026000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown image
|
page readonly
|
|
|
|
7FF569396000
|
unkown image
|
page readonly
|
|
|
|
667000
|
unkown
|
page read and write
|
|
|
|
2CA57C58000
|
unkown
|
page read and write
|
|
|
|
17FCC829000
|
unkown
|
page read and write
|
|
|
|
7FF596E15000
|
unkown image
|
page readonly
|
|
|
|
632000
|
unkown
|
page read and write
|
|
|
|
665000
|
unkown
|
page read and write
|
|
|
|
2CA58402000
|
unkown
|
page read and write
|
|
|
|
7FF53646B000
|
unkown image
|
page readonly
|
|
|
|
1639F9A0000
|
unkown
|
page readonly
|
|
|
|
218155C0000
|
unkown
|
page read and write
|
|
|
|
92683FF000
|
unkown
|
page read and write
|
|
|
|
7FF54FAB2000
|
unkown image
|
page readonly
|
|
|
|
E6184FC000
|
unkown
|
page read and write
|
|
|
|
7DF540252000
|
unkown image
|
page readonly
|
|
|
|
7FF5692DE000
|
unkown image
|
page readonly
|
|
|
|
7FF5695A2000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
75E000
|
unkown
|
page read and write
|
|
|
|
2181559B000
|
heap default
|
page read and write
|
|
|
|
17FCC5F0000
|
unkown image
|
page readonly
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
659000
|
unkown
|
page read and write
|
|
|
|
17FD1DC0000
|
unkown
|
page read and write
|
|
|
|
7FF59CA37000
|
unkown image
|
page readonly
|
|
|
|
679000
|
unkown
|
page read and write
|
|
|
|
2CE29651000
|
unkown
|
page read and write
|
|
|
|
625000
|
unkown
|
page read and write
|
|
|
|
2CA585A8000
|
unkown
|
page read and write
|
|
|
|
2CA583C0000
|
unkown
|
page read and write
|
|
|
|
2C9F7302000
|
unkown
|
page read and write
|
|
|
|
631000
|
unkown
|
page read and write
|
|
|
|
7FF59C721000
|
unkown image
|
page readonly
|
|
|
|
7DF573670000
|
unkown image
|
page readonly
|
|
|
|
5A1EEF9000
|
unkown
|
page read and write
|
|
|
|
7FF56933A000
|
unkown image
|
page readonly
|
|
|
|
4FE000
|
unkown
|
page readonly
|
|
|
|
3753000
|
heap private
|
page read and write
|
|
|
|
1001000
|
unkown image
|
page execute read
|
|
|
|
1639F9B0000
|
unkown
|
page read and write
|
|
|
|
7FF536457000
|
unkown image
|
page readonly
|
|
|
|
7FF597607000
|
unkown image
|
page readonly
|
|
|
|
2CA5859D000
|
unkown
|
page read and write
|
|
|
|
1639F9C0000
|
heap private
|
page read and write
|
|
|
|
649000
|
unkown
|
page read and write
|
|
|
|
649000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
17FD1CC4000
|
unkown
|
page read and write
|
|
|
|
4FC000
|
unkown
|
page read and write
|
|
|
|
7FF54FC97000
|
unkown image
|
page readonly
|
|
|
|
2CE29688000
|
unkown
|
page read and write
|
|
|
|
DC0000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF597609000
|
unkown image
|
page readonly
|
|
|
|
17FD20EE000
|
unkown
|
page read and write
|
|
|
|
2CA58539000
|
unkown
|
page read and write
|
|
|
|
7FF54FD74000
|
unkown image
|
page readonly
|
|
|
|
926847D000
|
unkown
|
page read and write
|
|
|
|
2CA5854E000
|
unkown
|
page read and write
|
|
|
|
17FCD570000
|
unkown image
|
page readonly
|
|
|
|
17FD20DD000
|
unkown
|
page read and write
|
|
|
|
7FF56988D000
|
unkown image
|
page readonly
|
|
|
|
689000
|
unkown
|
page read and write
|
|
|
|
7FF54FCDD000
|
unkown image
|
page readonly
|
|
|
|
2CA585A0000
|
unkown
|
page read and write
|
|
|
|
7DF540260000
|
unkown image
|
page readonly
|
|
|
|
7FF5694A1000
|
unkown image
|
page readonly
|
|
|
|
7FF5975AF000
|
unkown image
|
page readonly
|
|
|
|
686000
|
unkown
|
page read and write
|
|
|
|
64D000
|
unkown
|
page read and write
|
|
|
|
47AA9FF000
|
unkown
|
page read and write
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
7FF54FD87000
|
unkown image
|
page readonly
|
|
|
|
7FF59CBA2000
|
unkown image
|
page readonly
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
E61897E000
|
unkown
|
page read and write
|
|
|
|
47AA8FB000
|
unkown
|
page read and write
|
|
|
|
1639F9D0000
|
unkown
|
page read and write
|
|
|
|
2CA57BA0000
|
heap default
|
page read and write
|
|
|
|
2CA57B50000
|
unkown image
|
page readonly
|
|
|
|
1639F990000
|
unkown
|
page read and write
|
|
|
|
218155B7000
|
unkown
|
page read and write
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
7FF5974F1000
|
unkown image
|
page readonly
|
|
|
|
DAD000
|
unkown
|
page read and write
|
|
|
|
7FF59CC66000
|
unkown image
|
page readonly
|
|
|
|
2CA57C5C000
|
unkown
|
page read and write
|
|
|
|
17FCD560000
|
unkown image
|
page readonly
|
|
|
|
7FF59CA47000
|
unkown image
|
page readonly
|
|
|
|
2CA585BD000
|
unkown
|
page read and write
|
|
|
|
7FF5363F9000
|
unkown image
|
page readonly
|
|
|
|
17FD20FB000
|
unkown
|
page read and write
|
|
|
|
679000
|
unkown
|
page read and write
|
|
|
|
7FF56957A000
|
unkown image
|
page readonly
|
|
|
|
63D000
|
unkown
|
page read and write
|
|
|
|
2CA58571000
|
unkown
|
page read and write
|
|
|
|
2CA585AC000
|
unkown
|
page read and write
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
7FF59CA80000
|
unkown image
|
page readonly
|
|
|
|
2CA585BA000
|
unkown
|
page read and write
|
|
|
|
64D000
|
unkown
|
page read and write
|
|
|
|
5A1ED7E000
|
unkown
|
page read and write
|
|
|
|
17FCC8AA000
|
unkown
|
page read and write
|
|
|
|
659000
|
unkown
|
page read and write
|
|
|
|
2CE29600000
|
unkown
|
page read and write
|
|
|
|
EBE000
|
unkown
|
page read and write
|
|
|
|
E6E000
|
unkown
|
page read and write
|
|
|
|
7FF59CC21000
|
unkown image
|
page readonly
|
|
|
|
7DF5A1462000
|
unkown image
|
page readonly
|
|
|
|
2CA57CB1000
|
unkown
|
page read and write
|
|
|
|
E618777000
|
unkown
|
page read and write
|
|
|
|
17FD20F3000
|
unkown
|
page read and write
|
|
|
|
1639FF60000
|
unkown image
|
page readonly
|
|
|
|
636000
|
unkown
|
page read and write
|
|
|
|
7FF59CC2D000
|
unkown image
|
page readonly
|
|
|
|
1639F540000
|
unkown image
|
page read and write
|
|
|
|
2C9F7180000
|
unkown image
|
page read and write
|
|
|
|
1639F9C9000
|
heap private
|
page read and write
|
|
|
|
2CA58577000
|
unkown
|
page read and write
|
|
|
|
3DBD000
|
unkown
|
page read and write
|
|
|
|
2CA583D0000
|
unkown image
|
page read and write
|
|
|
|
17FCC856000
|
unkown
|
page read and write
|
|
|
|
7DF540250000
|
unkown image
|
page readonly
|
|
|
|
17FCDAF3000
|
unkown
|
page read and write
|
|
|
|
7DF5A1450000
|
unkown image
|
page readonly
|
|
|
|
21815510000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
17FCC5F0000
|
unkown image
|
page readonly
|
|
|
|
1098000
|
unkown image
|
page read and write
|
|
|
|
7DF559B72000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB24000
|
unkown image
|
page readonly
|
|
|
|
2CA58A59000
|
unkown
|
page read and write
|
|
|
|
270F000
|
unkown
|
page read and write
|
|
|
|
2C9F71A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5694CA000
|
unkown image
|
page readonly
|
|
|
|
2CA58563000
|
unkown
|
page read and write
|
|
|
|
7FF54FCA9000
|
unkown image
|
page readonly
|
|
|
|
17FCC86E000
|
unkown
|
page read and write
|
|
|
|
218155BE000
|
unkown
|
page read and write
|
|
|
|
7FF5362B0000
|
unkown image
|
page readonly
|
|
|
|
500000
|
heap default
|
page read and write
|
|
|
|
EC3A1EE000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF54FAB9000
|
unkown image
|
page readonly
|
|
|
|
218155A7000
|
heap default
|
page read and write
|
|
|
|
7FF54F648000
|
unkown image
|
page readonly
|
|
|
|
47AAAFE000
|
unkown
|
page read and write
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
62D000
|
unkown
|
page read and write
|
|
|
|
7DF559B60000
|
unkown image
|
page readonly
|
|
|
|
7FF5694E6000
|
unkown image
|
page readonly
|
|
|
|
47AAA7F000
|
unkown
|
page read and write
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
2CA5859E000
|
unkown
|
page read and write
|
|
|
|
7FF5363A1000
|
unkown image
|
page readonly
|
|
|
|
2C9F7190000
|
heap private
|
page read and write
|
|
|
|
7FF5694B3000
|
unkown image
|
page readonly
|
|
|
|
17FCCE15000
|
unkown
|
page read and write
|
|
|
|
2CA585A8000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
heap default
|
page read and write
|
|
|
|
17FCC610000
|
unkown image
|
page readonly
|
|
|
|
17FCCE02000
|
unkown
|
page read and write
|
|
|
|
2CA58573000
|
unkown
|
page read and write
|
|
|
|
7FF569884000
|
unkown image
|
page readonly
|
|
|
|
2CA57C71000
|
unkown
|
page read and write
|
|
|
|
7FF5364A7000
|
unkown image
|
page readonly
|
|
|
|
630000
|
unkown
|
page read and write
|
|
|
|
7FF5363D2000
|
unkown image
|
page readonly
|
|
|
|
2CA585B9000
|
unkown
|
page read and write
|
|
|
|
2CE293D0000
|
unkown image
|
page readonly
|
|
|
|
7FF596F31000
|
unkown image
|
page readonly
|
|
|
|
2CE29649000
|
unkown
|
page read and write
|
|
|
|
47AA5FB000
|
unkown
|
page read and write
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
615000
|
heap default
|
page read and write
|
|
|
|
17FCCF02000
|
unkown
|
page read and write
|
|
|
|
2CA58596000
|
unkown
|
page read and write
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
17FD1CAE000
|
unkown
|
page read and write
|
|
|
|
7FF5698AA000
|
unkown image
|
page readonly
|
|
|
|
7DF559B62000
|
unkown image
|
page readonly
|
|
|
|
EC3A7FE000
|
unkown
|
page read and write
|
|
|
|
7FF5694F9000
|
unkown image
|
page readonly
|
|
|
|
7FF5975D6000
|
unkown image
|
page readonly
|
|
|
|
7FF597667000
|
unkown image
|
page readonly
|
|
|
|
7FF54F8F2000
|
unkown image
|
page readonly
|
|
|
|
7DF43E110000
|
unkown image
|
page readonly
|
|
|
|
2CA57BB0000
|
unkown image
|
page readonly
|
|
|
|
7FF56981D000
|
unkown image
|
page readonly
|
|
|
|
2CA58579000
|
unkown
|
page read and write
|
|
|
|
7FF54FA6D000
|
unkown image
|
page readonly
|
|
|
|
2CA58A1E000
|
unkown
|
page read and write
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
7FF54F549000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB73000
|
unkown image
|
page readonly
|
|
|
|
7FF5692EB000
|
unkown image
|
page readonly
|
|
|
|
2CE2967C000
|
unkown
|
page read and write
|
|
|
|
17FD20A8000
|
unkown
|
page read and write
|
|
|
|
108E000
|
unkown image
|
page read and write
|
|
|
|
7FF56955D000
|
unkown image
|
page readonly
|
|
|
|
7FF536325000
|
unkown image
|
page readonly
|
|
|
|
2CA585B3000
|
unkown
|
page read and write
|
|
|
|
7FF569023000
|
unkown image
|
page readonly
|
|
|
|
3753000
|
heap private
|
page read and write
|
|
|
|
17FCD911000
|
unkown
|
page read and write
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
EC3A16E000
|
unkown
|
page read and write
|
|
|
|
2C9F7251000
|
unkown
|
page read and write
|
|
|
|
47AAFFE000
|
unkown
|
page read and write
|
|
|
|
17FD201F000
|
unkown
|
page read and write
|
|
|
|
21815580000
|
unkown image
|
page readonly
|
|
|
|
7FF5363BD000
|
unkown image
|
page readonly
|
|
|
|
619000
|
unkown
|
page read and write
|
|
|
|
2CA57C29000
|
unkown
|
page read and write
|
|
|
|
10AD000
|
unkown image
|
page readonly
|
|
|
|
47AB0FB000
|
unkown
|
page read and write
|
|
|
|
2CA58599000
|
unkown
|
page read and write
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
67C000
|
unkown
|
page read and write
|
|
|
|
7FF54FC75000
|
unkown image
|
page readonly
|
|
|
|
658000
|
unkown
|
page read and write
|
|
|
|
664000
|
unkown
|
page read and write
|
|
|
|
17FCC5E0000
|
heap private
|
page read and write
|
|
|
|
E995A78000
|
unkown
|
page read and write
|
|
|
|
2CA585D7000
|
unkown
|
page read and write
|
|
|
|
7FF569353000
|
unkown image
|
page readonly
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
EC3A5FB000
|
unkown
|
page read and write
|
|
|
|
1639FDE0000
|
unkown image
|
page readonly
|
|
|
|
7FF54FCF2000
|
unkown image
|
page readonly
|
|
|
|
7FF596DE4000
|
unkown image
|
page readonly
|
|
|
|
2CA57CC1000
|
unkown
|
page read and write
|
|
|
|
7FF536267000
|
unkown image
|
page readonly
|
|
|
|
2CE2964A000
|
unkown
|
page read and write
|
|
|
|
7FF59CC34000
|
unkown image
|
page readonly
|
|
|
|
6A4000
|
unkown
|
page read and write
|
|
|
|
17FD1CA0000
|
unkown
|
page read and write
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
E99537B000
|
unkown
|
page read and write
|
|
|
|
7FF59CA66000
|
unkown image
|
page readonly
|
|
|
|
7FF56922B000
|
unkown image
|
page readonly
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
2CE29613000
|
unkown
|
page read and write
|
|
|
|
E99597A000
|
unkown
|
page read and write
|
|
|
|
17FD1CA8000
|
unkown
|
page read and write
|
|
|
|
7FF54FCB4000
|
unkown image
|
page readonly
|
|
|
|
2CA57B40000
|
heap private
|
page read and write
|
|
|
|
7FF54FD1E000
|
unkown image
|
page readonly
|
|
|
|
47AACFA000
|
unkown
|
page read and write
|
|
|
|
1639F7CF000
|
unkown
|
page read and write
|
|
|
|
7FF54FAC4000
|
unkown image
|
page readonly
|
|
|
|
7FF569468000
|
unkown image
|
page readonly
|
|
|
|
7FF54FAC6000
|
unkown image
|
page readonly
|
|
|
|
17FD1DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5690AC000
|
unkown image
|
page readonly
|
|
|
|
17FD20FA000
|
unkown
|
page read and write
|
|
|
|
7FF568D7C000
|
unkown image
|
page readonly
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
2CA57D08000
|
unkown
|
page read and write
|
|
|
|
63D000
|
unkown
|
page read and write
|
|
|
|
2C9F7229000
|
unkown
|
page read and write
|
|
|
|
17FCC813000
|
unkown
|
page read and write
|
|
|
|
60C000
|
heap default
|
page read and write
|
|
|
|
2CA585A0000
|
unkown
|
page read and write
|
|
|
|
2CA57D16000
|
unkown
|
page read and write
|
|
|
|
265000
|
unkown
|
page read and write
|
|
|
|
17FCC853000
|
unkown
|
page read and write
|
|
|
|
7FF536277000
|
unkown image
|
page readonly
|
|
|
|
218155B6000
|
unkown
|
page read and write
|
|
|
|
2C9F76E0000
|
unkown image
|
page readonly
|
|
|
|
7FF54FA82000
|
unkown image
|
page readonly
|
|
|
|
658000
|
unkown
|
page read and write
|
|
|
|
3753000
|
heap private
|
page read and write
|
|
|
|
2CA58575000
|
unkown
|
page read and write
|
|
|
|
7FF54FB83000
|
unkown image
|
page readonly
|
|
|
|
2CE29C02000
|
unkown
|
page read and write
|
|
|
|
7FF54FACA000
|
unkown image
|
page readonly
|
|
|
|
7FF569425000
|
unkown image
|
page readonly
|
|
|
|
2CE293A0000
|
heap private
|
page read and write
|
|
|
|
2CA58597000
|
unkown
|
page read and write
|
|
|
|
7FF536467000
|
unkown image
|
page readonly
|
|
|
|
7FF536464000
|
unkown image
|
page readonly
|
|
|
|
7FF5363F7000
|
unkown image
|
page readonly
|
|
|
|
69C000
|
unkown
|
page read and write
|
|
|
|
17FD2015000
|
unkown
|
page read and write
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
E994F4B000
|
unkown
|
page read and write
|
|
|
|
2CA58A00000
|
unkown
|
page read and write
|
|
|
|
7FF54FD9A000
|
unkown image
|
page readonly
|
|
|
|
218155C0000
|
unkown
|
page read and write
|
|
|
|
2CA58A1E000
|
unkown
|
page read and write
|
|
|
|
7FF59CC63000
|
unkown image
|
page readonly
|
|
|
|
7FF569596000
|
unkown image
|
page readonly
|
|
|
|
7FF569377000
|
unkown image
|
page readonly
|
|
|
|
17FCC878000
|
unkown
|
page read and write
|
|
|
|
2CA5855F000
|
unkown
|
page read and write
|
|
|
|
E70000
|
heap private
|
page read and write
|
|
|
|
7FF5364A2000
|
unkown image
|
page readonly
|
|
|
|
E99587F000
|
unkown
|
page read and write
|
|
|
|
7DF5A1452000
|
unkown image
|
page readonly
|
|
|
|
1639F7CF000
|
unkown
|
page read and write
|
|
|
|
7FF56927F000
|
unkown image
|
page readonly
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF59C8E1000
|
unkown image
|
page readonly
|
|
|
|
7FF568D05000
|
unkown image
|
page readonly
|
|
|
|
4E0000
|
unkown
|
page execute and read and write
|
|
|
|
17FD1CE4000
|
unkown
|
page read and write
|
|
|
|
2CE293B0000
|
unkown image
|
page readonly
|
|
|
|
7FF569554000
|
unkown image
|
page readonly
|
|
|
|
7DF5A1460000
|
unkown image
|
page readonly
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
7FF54FB00000
|
unkown image
|
page readonly
|
|
|
|
660000
|
unkown
|
page read and write
|
|
|
|
2CE293E0000
|
unkown image
|
page readonly
|
|
|
|
650000
|
unkown
|
page read and write
|
|
|
|
2CA5855F000
|
unkown
|
page read and write
|
|
|
|
7FF5692E0000
|
unkown image
|
page readonly
|
|
|
|
7DF540240000
|
unkown image
|
page readonly
|
|
|
|
7DF573352000
|
unkown image
|
page readonly
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
7DF5A1470000
|
unkown image
|
page readonly
|
|
|
|
2CA58A02000
|
unkown
|
page read and write
|
|
|
|
1639F7C7000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A12000
|
unkown image
|
page readonly
|
|
|
|
7FF59CBC9000
|
unkown image
|
page readonly
|
|
|
|
7FF56934F000
|
unkown image
|
page readonly
|
|
|
|
7FF5697EE000
|
unkown image
|
page readonly
|
|
|
|
17FD1B00000
|
unkown
|
page read and write
|
|
|
|
5A1EDFE000
|
unkown
|
page read and write
|
|
|
|
2CE29602000
|
unkown
|
page read and write
|
|
|
|
7FF569051000
|
unkown image
|
page readonly
|
|
|
|
9E0000
|
unkown image
|
page readonly
|
|
|
|
7DF573690000
|
unkown image
|
page readonly
|
|
|
|
7FF596E1C000
|
unkown image
|
page readonly
|
|
|
|
2CA5858F000
|
unkown
|
page read and write
|
|
|
|
2CA5859B000
|
unkown
|
page read and write
|
|
|
|
2770000
|
heap private
|
page read and write
|
|
|
|
7FF568E39000
|
unkown image
|
page readonly
|
|
|
|
7FF53647A000
|
unkown image
|
page readonly
|
|
|
|
7FF5694F7000
|
unkown image
|
page readonly
|
|
|
|
637000
|
unkown
|
page read and write
|
|
|
|
17FD20E7000
|
unkown
|
page read and write
|
|
|
|
672000
|
unkown
|
page read and write
|
|
|
|
7FF59CC77000
|
unkown image
|
page readonly
|
|
|
|
17FCCF18000
|
unkown
|
page read and write
|
|
|
|
7FF569489000
|
unkown image
|
page readonly
|
|
|
|
2CA5859E000
|
unkown
|
page read and write
|
|
|
|
2CA58500000
|
unkown
|
page read and write
|
|
|
|
2CA5857C000
|
unkown
|
page read and write
|
|
|
|
7FF5363C6000
|
unkown image
|
page readonly
|
|
|
|
17FCDB00000
|
unkown
|
page read and write
|
|
|
|
47AA7FE000
|
unkown
|
page read and write
|
|
|
|
EC3A8FD000
|
unkown
|
page read and write
|
|
|
|
7DF559B60000
|
unkown image
|
page readonly
|
|
|
|
7FF53639F000
|
unkown image
|
page readonly
|
|
|
|
47AA97F000
|
unkown
|
page read and write
|
|
|
|
21815590000
|
heap default
|
page read and write
|
|
|
|
6A4000
|
unkown
|
page read and write
|
|
|
|
218155CF000
|
unkown
|
page read and write
|
|
|
|
2CE293B0000
|
unkown image
|
page readonly
|
|
|
|
7DF573360000
|
unkown image
|
page readonly
|
|
|
|
4FA000
|
unkown
|
page readonly
|
|
|
|
7FF5975C4000
|
unkown image
|
page readonly
|
|
|
|
1639F6A0000
|
unkown
|
page read and write
|
|
|
|
761000
|
unkown
|
page read and write
|
|
|
|
926837A000
|
unkown
|
page read and write
|
|
|
|
7FF596E9C000
|
unkown image
|
page readonly
|
|
|
|
2C9F7313000
|
unkown
|
page read and write
|
|
|
|
1639F680000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
3BBF000
|
unkown
|
page read and write
|
|
|
|
E9956F7000
|
unkown
|
page read and write
|
|
|
|
17FCD590000
|
unkown image
|
page readonly
|
|
|
|
7DF5A1460000
|
unkown image
|
page readonly
|
|
|
|
7DF573352000
|
unkown image
|
page readonly
|
|
|
|
7FF54FD06000
|
unkown image
|
page readonly
|
|
|
|
7FF5974C8000
|
unkown image
|
page readonly
|
|
|
|
9267F3A000
|
unkown
|
page read and write
|
|
|
|
E618A7E000
|
unkown
|
page read and write
|
|
|
|
218155D0000
|
unkown
|
page read and write
|
|
There are 998 hidden memdumps, click here to show them.