Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
qMROoJ.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{AF41F182-125B-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D5521091-125B-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{AF41F184-125B-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D5521093-125B-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
|
ASCII text, with CRLF line terminators
|
modified
|
||
C:\Users\user\AppData\Local\Temp\~DF2A3A7A2351617C42.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DF6949C95B3A0F3EDF.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DF922DBE2E8FFEAC90.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DFFFC0064E6ABA1F29.TMP
|
data
|
dropped
|
There are 19 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\qMROoJ.exe
|
'C:\Users\user\Desktop\qMROoJ.exe'
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6084 CREDAT:17410 /prefetch:2
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6536 CREDAT:17410 /prefetch:2
|
||
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
||
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://haverit.xyz/index.htm
|
unknown
|
||
https://haverit.xyz/index.htmdex.htm
|
unknown
|
||
https://haverit.xyz
|
unknown
|
||
https://haverit.xyz/index.htmRoot
|
unknown
|
||
http://www.nytimes.com/
|
unknown
|
||
https://sectigo.com/CPS0
|
unknown
|
||
http://ocsp.sectigo.com0
|
unknown
|
||
http://%s=%s&file://&os=%u.%u_%u_%u_x%uindex.html;
|
unknown
|
||
http://www.youtube.com/
|
unknown
|
||
http://www.wikipedia.com/
|
unknown
|
||
http://www.amazon.com/
|
unknown
|
||
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
|
unknown
|
||
http://www.live.com/
|
unknown
|
||
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
|
unknown
|
||
http://www.reddit.com/
|
unknown
|
||
http://www.twitter.com/
|
unknown
|
||
http://www.google.com/
|
unknown
|
There are 7 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
haverit.xyz
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files\internet explorer\iexplore.exe
|
{AF41F182-125B-11EC-90E5-ECF4BB2D2496}
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
||
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingBitmap
|
||
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingRandomizedBitmap
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
||
C:\Program Files\internet explorer\iexplore.exe
|
{D5521091-125B-11EC-90E5-ECF4BB2D2496}
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
There are 19 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
3680000
|
heap private
|
page read and write
|
||
1F362CA0000
|
unkown
|
page read and write
|
||
7FF568658000
|
unkown image
|
page readonly
|
||
7FF4F72E6000
|
unkown image
|
page readonly
|
||
7FF55B5F8000
|
unkown image
|
page readonly
|
||
7B69A7F000
|
unkown
|
page read and write
|
||
25F01F00000
|
unkown
|
page read and write
|
||
1099000
|
unkown image
|
page execute and read and write
|
||
7FF5C3A5B000
|
unkown image
|
page readonly
|
||
2019CB8F000
|
unkown
|
page read and write
|
||
7DF5E81B0000
|
unkown image
|
page readonly
|
||
191119D0000
|
unkown
|
page read and write
|
||
620000
|
unkown
|
page read and write
|
||
1910C1D0000
|
unkown image
|
page readonly
|
||
7DF5654E2000
|
unkown image
|
page readonly
|
||
2019CB94000
|
unkown
|
page read and write
|
||
19111AFA000
|
unkown
|
page read and write
|
||
7DF5E9580000
|
unkown image
|
page readonly
|
||
649000
|
unkown
|
page read and write
|
||
2913F84A000
|
unkown
|
page read and write
|
||
1910C502000
|
unkown
|
page read and write
|
||
2019CB7E000
|
unkown
|
page read and write
|
||
2019C910000
|
unkown
|
page read and write
|
||
1F361D30000
|
unkown
|
page read and write
|
||
7FF55B614000
|
unkown image
|
page readonly
|
||
63D000
|
unkown
|
page read and write
|
||
650000
|
unkown
|
page read and write
|
||
2019CB00000
|
unkown
|
page read and write
|
||
2019C400000
|
unkown image
|
page readonly
|
||
2019CB75000
|
unkown
|
page read and write
|
||
2019CB6D000
|
unkown
|
page read and write
|
||
2019CBBF000
|
unkown
|
page read and write
|
||
7FF5DF597000
|
unkown image
|
page readonly
|
||
7B69FFF000
|
unkown
|
page read and write
|
||
7FF55F53D000
|
unkown image
|
page readonly
|
||
7B69F7F000
|
unkown
|
page read and write
|
||
1F362140000
|
unkown
|
page read and write
|
||
7DF5693A2000
|
unkown image
|
page readonly
|
||
650000
|
unkown
|
page read and write
|
||
106A000
|
unkown image
|
page readonly
|
||
7FF5687C4000
|
unkown image
|
page readonly
|
||
7DF5725B2000
|
unkown image
|
page readonly
|
||
7FF5C39A3000
|
unkown image
|
page readonly
|
||
184EC790000
|
unkown image
|
page readonly
|
||
7FF568628000
|
unkown image
|
page readonly
|
||
7FF5DF6E6000
|
unkown image
|
page readonly
|
||
7FF4F74CA000
|
unkown image
|
page readonly
|
||
7FF5DE295000
|
unkown image
|
page readonly
|
||
7FF5DDF8C000
|
unkown image
|
page readonly
|
||
7FF5C3A6A000
|
unkown image
|
page readonly
|
||
1F362139000
|
heap private
|
page read and write
|
||
2019CBBF000
|
unkown
|
page read and write
|
||
7FF5DE3C7000
|
unkown image
|
page readonly
|
||
7FF55B1E7000
|
unkown image
|
page readonly
|
||
1E31DD08000
|
unkown
|
page read and write
|
||
7FF5DF79A000
|
unkown image
|
page readonly
|
||
2019CB6E000
|
unkown
|
page read and write
|
||
821D17B000
|
unkown
|
page read and write
|
||
7FF55F5B7000
|
unkown image
|
page readonly
|
||
7DF5725D0000
|
unkown image
|
page readonly
|
||
7B6A4FB000
|
unkown
|
page read and write
|
||
2019CB7F000
|
unkown
|
page read and write
|
||
7FF55B6E4000
|
unkown image
|
page readonly
|
||
7FF55EDCB000
|
unkown image
|
page readonly
|
||
2019C2A7000
|
unkown
|
page read and write
|
||
7FF55F549000
|
unkown image
|
page readonly
|
||
1E31DA50000
|
unkown image
|
page readonly
|
||
2913FC00000
|
unkown image
|
page readonly
|
||
25F01DB0000
|
unkown
|
page read and write
|
||
1E31DA70000
|
unkown image
|
page readonly
|
||
25F01E7E000
|
unkown
|
page read and write
|
||
25F01E55000
|
unkown
|
page read and write
|
||
7FF5DF431000
|
unkown image
|
page readonly
|
||
7B6939E000
|
unkown
|
page read and write
|
||
7FF5C39BA000
|
unkown image
|
page readonly
|
||
7FF5DF55A000
|
unkown image
|
page readonly
|
||
7FF5DF77D000
|
unkown image
|
page readonly
|
||
620000
|
unkown
|
page read and write
|
||
1F361D40000
|
unkown image
|
page readonly
|
||
63B000
|
unkown
|
page read and write
|
||
7FF55EDCF000
|
unkown image
|
page readonly
|
||
7FF55B732000
|
unkown image
|
page readonly
|
||
2019C2C5000
|
unkown
|
page read and write
|
||
7DF4CB700000
|
unkown image
|
page readonly
|
||
7FF5C39C2000
|
unkown image
|
page readonly
|
||
7DF5CD842000
|
unkown image
|
page readonly
|
||
7DF5E81B0000
|
unkown image
|
page readonly
|
||
191118C0000
|
unkown
|
page read and write
|
||
7FF5DF6DD000
|
unkown image
|
page readonly
|
||
2019CB9A000
|
unkown
|
page read and write
|
||
821D07B000
|
unkown
|
page read and write
|
||
1E31DC51000
|
unkown
|
page read and write
|
||
1910C3F0000
|
unkown
|
page read and write
|
||
7FF5687D4000
|
unkown image
|
page readonly
|
||
2019C600000
|
unkown image
|
page readonly
|
||
7FF5DF608000
|
unkown image
|
page readonly
|
||
33A000
|
unkown
|
page read and write
|
||
2019CBBC000
|
unkown
|
page read and write
|
||
1E31DBA0000
|
unkown
|
page read and write
|
||
2019D002000
|
unkown
|
page read and write
|
||
2019CBC0000
|
unkown
|
page read and write
|
||
7FFD0000
|
unkown image
|
page readonly
|
||
5F9000
|
heap default
|
page read and write
|
||
2019CB94000
|
unkown
|
page read and write
|
||
7FF55F5A4000
|
unkown image
|
page readonly
|
||
5CB000
|
heap default
|
page read and write
|
||
7FF5DE3C4000
|
unkown image
|
page readonly
|
||
1E31DC86000
|
unkown
|
page read and write
|
||
7FF5DE102000
|
unkown image
|
page readonly
|
||
7FFC2000
|
unkown image
|
page readonly
|
||
7FF568736000
|
unkown image
|
page readonly
|
||
7DF5E9560000
|
unkown image
|
page readonly
|
||
2019D002000
|
unkown
|
page read and write
|
||
2913F86D000
|
unkown
|
page read and write
|
||
1E31DC7A000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
1F362A20000
|
unkown
|
page read and write
|
||
7B69D7E000
|
unkown
|
page read and write
|
||
1094000
|
unkown image
|
page write copy
|
||
7FF55ADAE000
|
unkown image
|
page readonly
|
||
E0E000
|
unkown
|
page read and write
|
||
7FF4F728A000
|
unkown image
|
page readonly
|
||
7DF569392000
|
unkown image
|
page readonly
|
||
5AA000
|
heap default
|
page read and write
|
||
1910CA00000
|
unkown
|
page read and write
|
||
7FF55B4E3000
|
unkown image
|
page readonly
|
||
7FF4F7300000
|
unkown image
|
page readonly
|
||
7FF55F5E6000
|
unkown image
|
page readonly
|
||
7FF5DE109000
|
unkown image
|
page readonly
|
||
7FF55B5B5000
|
unkown image
|
page readonly
|
||
9211BF7000
|
unkown
|
page read and write
|
||
19111B02000
|
unkown
|
page read and write
|
||
7FF5DE3CD000
|
unkown image
|
page readonly
|
||
7FF5DF5D8000
|
unkown image
|
page readonly
|
||
1910C4FB000
|
unkown
|
page read and write
|
||
1E31DA80000
|
unkown image
|
page readonly
|
||
2019D002000
|
unkown
|
page read and write
|
||
2019D002000
|
unkown
|
page read and write
|
||
13CA7C000
|
unkown
|
page read and write
|
||
2019CB8A000
|
unkown
|
page read and write
|
||
2019CB9D000
|
unkown
|
page read and write
|
||
7FF4F73EF000
|
unkown image
|
page readonly
|
||
184EC1F2000
|
unkown
|
page read and write
|
||
3683000
|
heap private
|
page read and write
|
||
CEFCFFE000
|
unkown
|
page read and write
|
||
7FF55B6ED000
|
unkown image
|
page readonly
|
||
1E31DC13000
|
unkown
|
page read and write
|
||
7FF4F74A1000
|
unkown image
|
page readonly
|
||
7FF5C3A41000
|
unkown image
|
page readonly
|
||
7FF5C3547000
|
unkown image
|
page readonly
|
||
2019CB86000
|
unkown
|
page read and write
|
||
7FF5DE406000
|
unkown image
|
page readonly
|
||
2019CB7C000
|
unkown
|
page read and write
|
||
19111880000
|
unkown
|
page read and write
|
||
1910CB59000
|
unkown
|
page read and write
|
||
2019C8A0000
|
unkown image
|
page write copy
|
||
25F01F08000
|
unkown
|
page read and write
|
||
191118C4000
|
unkown
|
page read and write
|
||
E60000
|
heap private
|
page read and write
|
||
7FF568806000
|
unkown image
|
page readonly
|
||
2019CB94000
|
unkown
|
page read and write
|
||
7FF5C3886000
|
unkown image
|
page readonly
|
||
19111A3F000
|
unkown
|
page read and write
|
||
7FF55F12B000
|
unkown image
|
page readonly
|
||
3AEF000
|
unkown
|
page read and write
|
||
7FF5DE1B7000
|
unkown image
|
page readonly
|
||
7FF5DF277000
|
unkown image
|
page readonly
|
||
1F361DD0000
|
unkown image
|
page readonly
|
||
184EC210000
|
unkown
|
page read and write
|
||
7DF5CD832000
|
unkown image
|
page readonly
|
||
FB0000
|
unkown
|
page read and write
|
||
1090000
|
unkown image
|
page write copy
|
||
191119B0000
|
unkown
|
page read and write
|
||
921187E000
|
unkown
|
page read and write
|
||
7B69BFE000
|
unkown
|
page read and write
|
||
821D37E000
|
unkown
|
page read and write
|
||
FAE000
|
unkown
|
page read and write
|
||
2019CB6C000
|
unkown
|
page read and write
|
||
1000000
|
unkown image
|
page readonly
|
||
7FF5DE174000
|
unkown image
|
page readonly
|
||
184EC1ED000
|
heap default
|
page read and write
|
||
7FF5DE14E000
|
unkown image
|
page readonly
|
||
7FF5C3A86000
|
unkown image
|
page readonly
|
||
7FF55B689000
|
unkown image
|
page readonly
|
||
7DF5CD840000
|
unkown image
|
page readonly
|
||
649000
|
unkown
|
page read and write
|
||
7FF5687C1000
|
unkown image
|
page readonly
|
||
1910C1B0000
|
unkown image
|
page read and write
|
||
2913F600000
|
unkown image
|
page readonly
|
||
7FF5C3A92000
|
unkown image
|
page readonly
|
||
7FF5C39B6000
|
unkown image
|
page readonly
|
||
7FEB0000
|
unkown image
|
page readonly
|
||
2019D003000
|
unkown
|
page read and write
|
||
7FF5DF719000
|
unkown image
|
page readonly
|
||
2019CB97000
|
unkown
|
page read and write
|
||
7FF56870F000
|
unkown image
|
page readonly
|
||
2019D059000
|
unkown
|
page read and write
|
||
10EF000
|
unkown image
|
page readonly
|
||
25F01D20000
|
heap private
|
page read and write
|
||
62F000
|
unkown
|
page read and write
|
||
7FF55B1B6000
|
unkown image
|
page readonly
|
||
F9586F8000
|
unkown
|
page read and write
|
||
7FF55F503000
|
unkown image
|
page readonly
|
||
7FF55B619000
|
unkown image
|
page readonly
|
||
7FF5DE0BD000
|
unkown image
|
page readonly
|
||
1F362A30000
|
unkown
|
page read and write
|
||
2913F650000
|
heap default
|
page read and write
|
||
7DF5E81C0000
|
unkown image
|
page readonly
|
||
7FF5DE281000
|
unkown image
|
page readonly
|
||
7FF4F7449000
|
unkown image
|
page readonly
|
||
7DF5654E0000
|
unkown image
|
page readonly
|
||
7FF55F50E000
|
unkown image
|
page readonly
|
||
7FF56875D000
|
unkown image
|
page readonly
|
||
7FF5C398F000
|
unkown image
|
page readonly
|
||
649000
|
unkown
|
page read and write
|
||
1000000
|
unkown image
|
page readonly
|
||
7FF55AF0B000
|
unkown image
|
page readonly
|
||
7FF5C3A4D000
|
unkown image
|
page readonly
|
||
1001000
|
unkown image
|
page execute read
|
||
7FF5C3857000
|
unkown image
|
page readonly
|
||
7FF55AFC5000
|
unkown image
|
page readonly
|
||
7FF55B4DD000
|
unkown image
|
page readonly
|
||
7FF55AFC9000
|
unkown image
|
page readonly
|
||
9211CFE000
|
unkown
|
page read and write
|
||
D80000
|
unkown
|
page read and write
|
||
7FF5C382A000
|
unkown image
|
page readonly
|
||
7FF55F5CA000
|
unkown image
|
page readonly
|
||
7FF55F5B4000
|
unkown image
|
page readonly
|
||
1910C49C000
|
unkown
|
page read and write
|
||
19111950000
|
unkown
|
page read and write
|
||
4A0000
|
unkown
|
page read and write
|
||
7DF5693A0000
|
unkown image
|
page readonly
|
||
184EC1F7000
|
heap default
|
page read and write
|
||
61B000
|
unkown
|
page read and write
|
||
7FF55B470000
|
unkown image
|
page readonly
|
||
184EC210000
|
unkown
|
page read and write
|
||
19111AA7000
|
unkown
|
page read and write
|
||
2019C313000
|
unkown
|
page read and write
|
||
F9581DE000
|
unkown
|
page read and write
|
||
4A0000
|
unkown
|
page execute and read and write
|
||
1910C4B9000
|
unkown
|
page read and write
|
||
2019C0A0000
|
unkown image
|
page readonly
|
||
7FF5DE1BD000
|
unkown image
|
page readonly
|
||
1F361E48000
|
heap default
|
page read and write
|
||
2019CB9A000
|
unkown
|
page read and write
|
||
7FFB2000
|
unkown image
|
page readonly
|
||
7FF5DE3C1000
|
unkown image
|
page readonly
|
||
7FF567FF8000
|
unkown image
|
page readonly
|
||
7FF55B67D000
|
unkown image
|
page readonly
|
||
2019CBD5000
|
unkown
|
page read and write
|
||
2019C270000
|
unkown
|
page read and write
|
||
1F362010000
|
unkown image
|
page readonly
|
||
821D277000
|
unkown
|
page read and write
|
||
7FF5C3A44000
|
unkown image
|
page readonly
|
||
674000
|
unkown
|
page read and write
|
||
7FF5DF787000
|
unkown image
|
page readonly
|
||
7FF5DF706000
|
unkown image
|
page readonly
|
||
7DF569390000
|
unkown image
|
page readonly
|
||
C086C7B000
|
unkown
|
page read and write
|
||
7FF5DE1BA000
|
unkown image
|
page readonly
|
||
1910C476000
|
unkown
|
page read and write
|
||
821CF7E000
|
unkown
|
page read and write
|
||
C20000
|
unkown image
|
page readonly
|
||
1E31DC4E000
|
unkown
|
page read and write
|
||
7FF4F6FA1000
|
unkown image
|
page readonly
|
||
25F01E88000
|
unkown
|
page read and write
|
||
7FF55B62F000
|
unkown image
|
page readonly
|
||
19111A00000
|
unkown
|
page read and write
|
||
F9588FC000
|
unkown
|
page read and write
|
||
7B6A0FE000
|
unkown
|
page read and write
|
||
7FF55B440000
|
unkown image
|
page readonly
|
||
7DF5725D0000
|
unkown image
|
page readonly
|
||
7FF5DF6CF000
|
unkown image
|
page readonly
|
||
7FFB0000
|
unkown image
|
page readonly
|
||
7DF5E81B2000
|
unkown image
|
page readonly
|
||
7FF5DE356000
|
unkown image
|
page readonly
|
||
2019CB7D000
|
unkown
|
page read and write
|
||
1003000
|
unkown image
|
page readonly
|
||
2913F902000
|
unkown
|
page read and write
|
||
7FF5DE36E000
|
unkown image
|
page readonly
|
||
184EC1E9000
|
heap default
|
page read and write
|
||
7FF5DE258000
|
unkown image
|
page readonly
|
||
7FF5C3A97000
|
unkown image
|
page readonly
|
||
7FF55B631000
|
unkown image
|
page readonly
|
||
2019D063000
|
unkown
|
page read and write
|
||
7FF5DE3D4000
|
unkown image
|
page readonly
|
||
7FF55F5AD000
|
unkown image
|
page readonly
|
||
921197C000
|
unkown
|
page read and write
|
||
7B6967E000
|
unkown
|
page read and write
|
||
2019C23C000
|
unkown
|
page read and write
|
||
26A0000
|
heap private
|
page read and write
|
||
2019C24B000
|
unkown
|
page read and write
|
||
7B69879000
|
unkown
|
page read and write
|
||
1910C42A000
|
unkown
|
page read and write
|
||
3683000
|
heap private
|
page read and write
|
||
7DF5E9560000
|
unkown image
|
page readonly
|
||
7FF5DE32D000
|
unkown image
|
page readonly
|
||
4C0000
|
heap default
|
page read and write
|
||
63B000
|
unkown
|
page read and write
|
||
2019CB94000
|
unkown
|
page read and write
|
||
7DF5654D0000
|
unkown image
|
page readonly
|
||
2019CBA5000
|
unkown
|
page read and write
|
||
7FF5DE3D7000
|
unkown image
|
page readonly
|
||
7FF567F0F000
|
unkown image
|
page readonly
|
||
1910CB13000
|
unkown
|
page read and write
|
||
7FF55B610000
|
unkown image
|
page readonly
|
||
7FF55B494000
|
unkown image
|
page readonly
|
||
191119E0000
|
unkown
|
page read and write
|
||
2019CB9A000
|
unkown
|
page read and write
|
||
1911188E000
|
unkown
|
page read and write
|
||
7FF5C310E000
|
unkown image
|
page readonly
|
||
3683000
|
heap private
|
page read and write
|
||
2019C308000
|
unkown
|
page read and write
|
||
7FF5DF6C1000
|
unkown image
|
page readonly
|
||
7FF55B63F000
|
unkown image
|
page readonly
|
||
7FF4F7305000
|
unkown image
|
page readonly
|
||
2019CB8F000
|
unkown
|
page read and write
|
||
7FF4F7308000
|
unkown image
|
page readonly
|
||
7FF55B540000
|
unkown image
|
page readonly
|
||
F958C7F000
|
unkown
|
page read and write
|
||
61B000
|
unkown
|
page read and write
|
||
108E000
|
unkown image
|
page read and write
|
||
1910CB18000
|
unkown
|
page read and write
|
||
7FF5DE33A000
|
unkown image
|
page readonly
|
||
7FF55B405000
|
unkown image
|
page readonly
|
||
480000
|
unkown image
|
page readonly
|
||
25F01E3C000
|
unkown
|
page read and write
|
||
62F000
|
unkown
|
page read and write
|
||
7FF5DF70D000
|
unkown image
|
page readonly
|
||
7FF5DE369000
|
unkown image
|
page readonly
|
||
2019CB9A000
|
unkown
|
page read and write
|
||
7FF4F7447000
|
unkown image
|
page readonly
|
||
2019C24E000
|
unkown
|
page read and write
|
||
184EC208000
|
unkown
|
page read and write
|
||
2019CB9A000
|
unkown
|
page read and write
|
||
F9587F7000
|
unkown
|
page read and write
|
||
1910C453000
|
unkown
|
page read and write
|
||
7FF5C399F000
|
unkown image
|
page readonly
|
||
3D2F000
|
unkown
|
page read and write
|
||
19111ADE000
|
unkown
|
page read and write
|
||
2019CBC1000
|
unkown
|
page read and write
|
||
7FF5DE2E7000
|
unkown image
|
page readonly
|
||
2019CBCE000
|
unkown
|
page read and write
|
||
184EC2E0000
|
unkown
|
page read and write
|
||
2019C880000
|
unkown image
|
page readonly
|
||
19111AE7000
|
unkown
|
page read and write
|
||
1E31DAA0000
|
heap default
|
page read and write
|
||
2019C302000
|
unkown
|
page read and write
|
||
7FF5DE1AA000
|
unkown image
|
page readonly
|
||
C0871FE000
|
unkown
|
page read and write
|
||
7FF567F1C000
|
unkown image
|
page readonly
|
||
1E31DC48000
|
unkown
|
page read and write
|
||
109D000
|
unkown image
|
page read and write
|
||
7FF5DE31F000
|
unkown image
|
page readonly
|
||
4C5000
|
heap default
|
page read and write
|
||
2913F5E0000
|
unkown image
|
page read and write
|
||
DC0000
|
heap private
|
page read and write
|
||
1E31DC4A000
|
unkown
|
page read and write
|
||
7DF4633A0000
|
unkown image
|
page readonly
|
||
F9585FE000
|
unkown
|
page read and write
|
||
7FF4F743D000
|
unkown image
|
page readonly
|
||
184EC1E7000
|
heap default
|
page read and write
|
||
1910C525000
|
unkown
|
page read and write
|
||
184EC410000
|
unkown image
|
page readonly
|
||
650000
|
unkown
|
page read and write
|
||
2019CB94000
|
unkown
|
page read and write
|
||
19111B02000
|
unkown
|
page read and write
|
||
7DF5725C2000
|
unkown image
|
page readonly
|
||
7FF5DEE7E000
|
unkown image
|
page readonly
|
||
2019CB51000
|
unkown
|
page read and write
|
||
25F02602000
|
unkown
|
page read and write
|
||
4AC000
|
unkown
|
page read and write
|
||
D80000
|
unkown
|
page execute and read and write
|
||
7FF55B687000
|
unkown image
|
page readonly
|
||
2019CB4D000
|
unkown
|
page read and write
|
||
1910C471000
|
unkown
|
page read and write
|
||
2913F855000
|
unkown
|
page read and write
|
||
61B000
|
unkown
|
page read and write
|
||
1E31DB80000
|
unkown image
|
page readonly
|
||
7FF5687CD000
|
unkown image
|
page readonly
|
||
7FFC0000
|
unkown image
|
page readonly
|
||
25F01D10000
|
unkown image
|
page read and write
|
||
7FF55B64D000
|
unkown image
|
page readonly
|
||
623000
|
unkown
|
page read and write
|
||
7FF55B47B000
|
unkown image
|
page readonly
|
||
25F020D0000
|
unkown image
|
page readonly
|
||
7FF5DE2F0000
|
unkown image
|
page readonly
|
||
F95847F000
|
unkown
|
page read and write
|
||
191119E0000
|
unkown
|
page read and write
|
||
CEFD379000
|
unkown
|
page read and write
|
||
1910C310000
|
unkown image
|
page readonly
|
||
13C979000
|
unkown
|
page read and write
|
||
7FF5DE304000
|
unkown image
|
page readonly
|
||
C086CFE000
|
unkown
|
page read and write
|
||
2019C0D0000
|
unkown image
|
page readonly
|
||
7DF5725B0000
|
unkown image
|
page readonly
|
||
7FF5DDBAE000
|
unkown image
|
page readonly
|
||
62F000
|
unkown
|
page read and write
|
||
C086FFF000
|
unkown
|
page read and write
|
||
1E31DA50000
|
unkown image
|
page readonly
|
||
1E31DC7C000
|
unkown
|
page read and write
|
||
7FF567F98000
|
unkown image
|
page readonly
|
||
646000
|
unkown
|
page read and write
|
||
2019C316000
|
unkown
|
page read and write
|
||
25F01D50000
|
unkown image
|
page readonly
|
||
7FF55B40F000
|
unkown image
|
page readonly
|
||
1910C473000
|
unkown
|
page read and write
|
||
10AB000
|
unkown image
|
page read and write
|
||
674000
|
unkown
|
page read and write
|
||
7FF5C38A0000
|
unkown image
|
page readonly
|
||
7FF55B662000
|
unkown image
|
page readonly
|
||
7FF5DE2D8000
|
unkown image
|
page readonly
|
||
2019CB9A000
|
unkown
|
page read and write
|
||
1F361D70000
|
unkown image
|
page readonly
|
||
1000000
|
unkown image
|
page readonly
|
||
7FF55B545000
|
unkown image
|
page readonly
|
||
7DF5E9562000
|
unkown image
|
page readonly
|
||
653000
|
unkown
|
page read and write
|
||
1910D350000
|
unkown image
|
page readonly
|
||
4A1000
|
unkown
|
page execute read
|
||
7FF5C38D8000
|
unkown image
|
page readonly
|
||
1910C980000
|
unkown image
|
page readonly
|
||
2019CB9A000
|
unkown
|
page read and write
|
||
1F361E8E000
|
unkown
|
page read and write
|
||
7FF5DE35D000
|
unkown image
|
page readonly
|
||
25F02450000
|
unkown image
|
page readonly
|
||
191118B0000
|
unkown
|
page read and write
|
||
649000
|
unkown
|
page read and write
|
||
19111990000
|
unkown
|
page read and write
|
||
2913FD80000
|
unkown image
|
page readonly
|
||
25F01E6F000
|
unkown
|
page read and write
|
||
5A0000
|
heap default
|
page read and write
|
||
2913F630000
|
unkown image
|
page readonly
|
||
7FF55B526000
|
unkown image
|
page readonly
|
||
7FFB2000
|
unkown image
|
page readonly
|
||
2019D002000
|
unkown
|
page read and write
|
||
7FF5DE1C3000
|
unkown image
|
page readonly
|
||
649000
|
unkown
|
page read and write
|
||
13C87F000
|
unkown
|
page read and write
|
||
7FF5DDC42000
|
unkown image
|
page readonly
|
||
7FF5DE150000
|
unkown image
|
page readonly
|
||
7DF5012B0000
|
unkown image
|
page readonly
|
||
184EC405000
|
heap private
|
page read and write
|
||
63B000
|
unkown
|
page read and write
|
||
184EC207000
|
unkown
|
page read and write
|
||
CEFD2FE000
|
unkown
|
page read and write
|
||
7DF5725C0000
|
unkown image
|
page readonly
|
||
1910D240000
|
unkown
|
page read and write
|
||
7FF5687DB000
|
unkown image
|
page readonly
|
||
2019CB98000
|
unkown
|
page read and write
|
||
7DF5725C2000
|
unkown image
|
page readonly
|
||
490000
|
unkown
|
page execute and read and write
|
||
2913F620000
|
unkown image
|
page readonly
|
||
821D47E000
|
unkown
|
page read and write
|
||
9211AFF000
|
unkown
|
page read and write
|
||
1E31DC4C000
|
unkown
|
page read and write
|
||
7FF55B26B000
|
unkown image
|
page readonly
|
||
184EC0D0000
|
unkown image
|
page readonly
|
||
260F000
|
unkown
|
page read and write
|
||
184EC330000
|
unkown image
|
page read and write
|
||
1F362C80000
|
unkown
|
page readonly
|
||
7DF5012A0000
|
unkown image
|
page readonly
|
||
1910C513000
|
unkown
|
page read and write
|
||
1F362135000
|
heap private
|
page read and write
|
||
7FF4F741A000
|
unkown image
|
page readonly
|
||
7FF5DE11A000
|
unkown image
|
page readonly
|
||
1910C1C0000
|
heap private
|
page read and write
|
||
1F362C90000
|
unkown
|
page read and write
|
||
7FF568817000
|
unkown image
|
page readonly
|
||
7FFB0000
|
unkown image
|
page readonly
|
||
CEFD4FB000
|
unkown
|
page read and write
|
||
1910C46C000
|
unkown
|
page read and write
|
||
2913F88A000
|
unkown
|
page read and write
|
||
1E31DC29000
|
unkown
|
page read and write
|
||
7FF55B437000
|
unkown image
|
page readonly
|
||
19111888000
|
unkown
|
page read and write
|
||
1910C990000
|
unkown image
|
page read and write
|
||
191118A4000
|
unkown
|
page read and write
|
||
CEFCF7B000
|
unkown
|
page read and write
|
||
1910CA02000
|
unkown
|
page read and write
|
||
1E31DC21000
|
unkown
|
page read and write
|
||
184EC090000
|
unkown image
|
page read and write
|
||
13C9FF000
|
unkown
|
page read and write
|
||
1E31DC00000
|
unkown
|
page read and write
|
||
2019CB96000
|
unkown
|
page read and write
|
||
1910D330000
|
unkown image
|
page readonly
|
||
2019CB1C000
|
unkown
|
page read and write
|
||
1910D340000
|
unkown image
|
page readonly
|
||
8A0000
|
unkown image
|
page readonly
|
||
2019C0A0000
|
unkown image
|
page readonly
|
||
649000
|
unkown
|
page read and write
|
||
7B69CFE000
|
unkown
|
page read and write
|
||
7FF4F7338000
|
unkown image
|
page readonly
|
||
7FF5DE323000
|
unkown image
|
page readonly
|
||
7FF5DE1DE000
|
unkown image
|
page readonly
|
||
614000
|
unkown
|
page read and write
|
||
7FF5DE2E4000
|
unkown image
|
page readonly
|
||
7FF55B624000
|
unkown image
|
page readonly
|
||
1910C400000
|
unkown
|
page read and write
|
||
7FF55B723000
|
unkown image
|
page readonly
|
||
821CEFE000
|
unkown
|
page read and write
|
||
3683000
|
heap private
|
page read and write
|
||
1E31E180000
|
unkown image
|
page readonly
|
||
63B000
|
unkown
|
page read and write
|
||
2019C0F0000
|
heap default
|
page read and write
|
||
1F361E8E000
|
unkown
|
page read and write
|
||
7FF5C38A8000
|
unkown image
|
page readonly
|
||
25F01F13000
|
unkown
|
page read and write
|
||
7FF5C3915000
|
unkown image
|
page readonly
|
||
2019CB74000
|
unkown
|
page read and write
|
||
9211DFE000
|
unkown
|
page read and write
|
||
7FF5C3A83000
|
unkown image
|
page readonly
|
||
7FF4F74F2000
|
unkown image
|
page readonly
|
||
2913F900000
|
unkown
|
page read and write
|
||
1E31DE00000
|
unkown image
|
page readonly
|
||
19111AFA000
|
unkown
|
page read and write
|
||
62F000
|
unkown
|
page read and write
|
||
1F361E30000
|
unkown
|
page read and write
|
||
7FF4F73F1000
|
unkown image
|
page readonly
|
||
7FF568817000
|
unkown image
|
page readonly
|
||
191119A0000
|
unkown
|
page read and write
|
||
2019D002000
|
unkown
|
page read and write
|
||
7FF5C39E7000
|
unkown image
|
page readonly
|
||
2019C080000
|
unkown image
|
page read and write
|
||
7FF5DE1E7000
|
unkown image
|
page readonly
|
||
1910D160000
|
unkown image
|
page read and write
|
||
191118A1000
|
unkown
|
page read and write
|
||
7FF5DE120000
|
unkown image
|
page readonly
|
||
1910C220000
|
heap default
|
page read and write
|
||
2913F908000
|
unkown
|
page read and write
|
||
191118B0000
|
unkown
|
page read and write
|
||
13C8FF000
|
unkown
|
page read and write
|
||
7FF4F7436000
|
unkown image
|
page readonly
|
||
7FF5687EA000
|
unkown image
|
page readonly
|
||
63B000
|
unkown
|
page read and write
|
||
184EC0B0000
|
unkown image
|
page readonly
|
||
7FF5DF6EA000
|
unkown image
|
page readonly
|
||
7FF5C39D6000
|
unkown image
|
page readonly
|
||
7FF4F72C7000
|
unkown image
|
page readonly
|
||
29140002000
|
unkown
|
page read and write
|
||
191119C0000
|
unkown
|
page read and write
|
||
25F01E4F000
|
unkown
|
page read and write
|
||
1E31DC49000
|
unkown
|
page read and write
|
||
1F361E71000
|
heap default
|
page read and write
|
||
7FF55B292000
|
unkown image
|
page readonly
|
||
19111A2D000
|
unkown
|
page read and write
|
||
7FF55F536000
|
unkown image
|
page readonly
|
||
7FF5DF6BF000
|
unkown image
|
page readonly
|
||
10EF000
|
unkown image
|
page readonly
|
||
19111780000
|
unkown
|
page read and write
|
||
611000
|
unkown
|
page read and write
|
||
7FFC0000
|
unkown image
|
page readonly
|
||
CEFD3F9000
|
unkown
|
page read and write
|
||
2019D002000
|
unkown
|
page read and write
|
||
1910CB18000
|
unkown
|
page read and write
|
||
F958BF7000
|
unkown
|
page read and write
|
||
7FF5DDC99000
|
unkown image
|
page readonly
|
||
25F01D80000
|
heap default
|
page read and write
|
||
7DF501290000
|
unkown image
|
page readonly
|
||
2019C251000
|
unkown
|
page read and write
|
||
7FF5DE15B000
|
unkown image
|
page readonly
|
||
4AA000
|
unkown
|
page readonly
|
||
7DF569392000
|
unkown image
|
page readonly
|
||
7FF4F7422000
|
unkown image
|
page readonly
|
||
C0870F7000
|
unkown
|
page read and write
|
||
7FF5DE2F4000
|
unkown image
|
page readonly
|
||
611000
|
unkown
|
page read and write
|
||
336000
|
unkown
|
page read and write
|
||
2019CBD7000
|
unkown
|
page read and write
|
||
7FF55B6E1000
|
unkown image
|
page readonly
|
||
7FF5C35CB000
|
unkown image
|
page readonly
|
||
7FF568724000
|
unkown image
|
page readonly
|
||
7FF5DF7B3000
|
unkown image
|
page readonly
|
||
2019C090000
|
heap private
|
page read and write
|
||
7DF5693A2000
|
unkown image
|
page readonly
|
||
2019C1D0000
|
unkown image
|
page readonly
|
||
1910C456000
|
unkown
|
page read and write
|
||
7FF5DF5B6000
|
unkown image
|
page readonly
|
||
7DF5012B0000
|
unkown image
|
page readonly
|
||
7FF55B676000
|
unkown image
|
page readonly
|
||
2913F84F000
|
unkown
|
page read and write
|
||
638000
|
unkown
|
page read and write
|
||
2019C780000
|
unkown image
|
page readonly
|
||
1E31DD02000
|
unkown
|
page read and write
|
||
7FF4F702B000
|
unkown image
|
page readonly
|
||
25F01F02000
|
unkown
|
page read and write
|
||
1F3626D0000
|
unkown image
|
page readonly
|
||
7FF4F73FF000
|
unkown image
|
page readonly
|
||
7DF5E81C2000
|
unkown image
|
page readonly
|
||
1910C488000
|
unkown
|
page read and write
|
||
19111A0E000
|
unkown
|
page read and write
|
||
7FF55F5F7000
|
unkown image
|
page readonly
|
||
7FF55B4F7000
|
unkown image
|
page readonly
|
||
7FF5DF771000
|
unkown image
|
page readonly
|
||
7DF5E9572000
|
unkown image
|
page readonly
|
||
7FF4F74B7000
|
unkown image
|
page readonly
|
||
7FF5C3701000
|
unkown image
|
page readonly
|
||
7FF5DF587000
|
unkown image
|
page readonly
|
||
7FF5DE342000
|
unkown image
|
page readonly
|
||
7FF55B737000
|
unkown image
|
page readonly
|
||
7FF5DE412000
|
unkown image
|
page readonly
|
||
19111A1F000
|
unkown
|
page read and write
|
||
2019CB9D000
|
unkown
|
page read and write
|
||
184EC0B0000
|
unkown image
|
page readonly
|
||
2019C910000
|
unkown
|
page read and write
|
||
7FF5DE0D8000
|
unkown image
|
page readonly
|
||
1E31DD13000
|
unkown
|
page read and write
|
||
1F362130000
|
heap private
|
page read and write
|
||
2019CB6B000
|
unkown
|
page read and write
|
||
3BEC000
|
unkown
|
page read and write
|
||
7FF55B737000
|
unkown image
|
page readonly
|
||
25F01E02000
|
unkown
|
page read and write
|
||
7FF5DE1BF000
|
unkown image
|
page readonly
|
||
1098000
|
unkown image
|
page read and write
|
||
1F362CF0000
|
unkown
|
page read and write
|
||
1F362C70000
|
unkown
|
page read and write
|
||
7FF55B1E1000
|
unkown image
|
page readonly
|
||
7FF5DE251000
|
unkown image
|
page readonly
|
||
7FF55F5A7000
|
unkown image
|
page readonly
|
||
2019C0C0000
|
unkown image
|
page readonly
|
||
FB0000
|
unkown
|
page read and write
|
||
108E000
|
unkown image
|
page write copy
|
||
2019C249000
|
unkown
|
page read and write
|
||
2019CB7D000
|
unkown
|
page read and write
|
||
7FF4F740D000
|
unkown image
|
page readonly
|
||
7FF5DE0C3000
|
unkown image
|
page readonly
|
||
7FF5C3A57000
|
unkown image
|
page readonly
|
||
3683000
|
heap private
|
page read and write
|
||
7FF5C39E9000
|
unkown image
|
page readonly
|
||
19111A4C000
|
unkown
|
page read and write
|
||
7FF55B4DF000
|
unkown image
|
page readonly
|
||
7FF5C3A47000
|
unkown image
|
page readonly
|
||
7FF4F72B7000
|
unkown image
|
page readonly
|
||
7FF55B46E000
|
unkown image
|
page readonly
|
||
19111AEF000
|
unkown
|
page read and write
|
||
7FF5C3A54000
|
unkown image
|
page readonly
|
||
1910C49A000
|
unkown
|
page read and write
|
||
2019CB79000
|
unkown
|
page read and write
|
||
7DF5E9580000
|
unkown image
|
page readonly
|
||
2019CB15000
|
unkown
|
page read and write
|
||
2019CB8A000
|
unkown
|
page read and write
|
||
7FF568769000
|
unkown image
|
page readonly
|
||
F6F000
|
unkown
|
page read and write
|
||
C086D7E000
|
unkown
|
page read and write
|
||
7DF5E9572000
|
unkown image
|
page readonly
|
||
7B6997A000
|
unkown
|
page read and write
|
||
4AE000
|
unkown
|
page readonly
|
||
631000
|
unkown
|
page read and write
|
||
7DF5012A2000
|
unkown image
|
page readonly
|
||
1910CB59000
|
unkown
|
page read and write
|
||
644000
|
unkown
|
page read and write
|
||
7FF5DF7C7000
|
unkown image
|
page readonly
|
||
7FF55F516000
|
unkown image
|
page readonly
|
||
7FF5C3867000
|
unkown image
|
page readonly
|
||
7DF5654F0000
|
unkown image
|
page readonly
|
||
7FF5C3A97000
|
unkown image
|
page readonly
|
||
7B6931B000
|
unkown
|
page read and write
|
||
1010000
|
unkown image
|
page execute read
|
||
7FF4F7161000
|
unkown image
|
page readonly
|
||
2019CB6D000
|
unkown
|
page read and write
|
||
7FF568767000
|
unkown image
|
page readonly
|
||
7DF5CD830000
|
unkown image
|
page readonly
|
||
1910C43D000
|
unkown
|
page read and write
|
||
7FFD0000
|
unkown image
|
page readonly
|
||
7DF4E7430000
|
unkown image
|
page readonly
|
||
7DF5654D0000
|
unkown image
|
page readonly
|
||
7FF55B548000
|
unkown image
|
page readonly
|
||
619000
|
unkown
|
page read and write
|
||
7FF4F74F7000
|
unkown image
|
page readonly
|
||
2019C2F6000
|
unkown
|
page read and write
|
||
1910C300000
|
unkown image
|
page readonly
|
||
7FF5DF7C7000
|
unkown image
|
page readonly
|
||
2913F83C000
|
unkown
|
page read and write
|
||
2019C2E2000
|
unkown
|
page read and write
|
||
7FF4F74E3000
|
unkown image
|
page readonly
|
||
1006000
|
unkown image
|
page readonly
|
||
7DF5E81D0000
|
unkown image
|
page readonly
|
||
25F01D30000
|
unkown image
|
page readonly
|
||
191119E0000
|
unkown
|
page read and write
|
||
184EC1E0000
|
heap default
|
page read and write
|
||
7FF5DF784000
|
unkown image
|
page readonly
|
||
184EC210000
|
unkown
|
page read and write
|
||
1E31DC3C000
|
unkown
|
page read and write
|
||
1910D6C1000
|
unkown
|
page read and write
|
||
638000
|
unkown
|
page read and write
|
||
2913F750000
|
unkown
|
page read and write
|
||
1E31E402000
|
unkown
|
page read and write
|
||
2019CB9A000
|
unkown
|
page read and write
|
||
7FF55B643000
|
unkown image
|
page readonly
|
||
1F362550000
|
unkown image
|
page readonly
|
||
7FF5DE1D3000
|
unkown image
|
page readonly
|
||
7FF55F547000
|
unkown image
|
page readonly
|
||
19111770000
|
unkown
|
page read and write
|
||
9211A7B000
|
unkown
|
page read and write
|
||
2913F829000
|
unkown
|
page read and write
|
||
7FF5DE116000
|
unkown image
|
page readonly
|
||
2019CB96000
|
unkown
|
page read and write
|
||
2019CB74000
|
unkown
|
page read and write
|
||
7FF5C38A5000
|
unkown image
|
page readonly
|
||
7FF5DF5D5000
|
unkown image
|
page readonly
|
||
7DF5CD850000
|
unkown image
|
page readonly
|
||
25F01E13000
|
unkown
|
page read and write
|
||
7FF55B6E7000
|
unkown image
|
page readonly
|
||
3683000
|
heap private
|
page read and write
|
||
2913F87D000
|
unkown
|
page read and write
|
||
2913F813000
|
unkown
|
page read and write
|
||
2019CB7C000
|
unkown
|
page read and write
|
||
184EC1C0000
|
unkown
|
page read and write
|
||
7FF5DF774000
|
unkown image
|
page readonly
|
||
2019CA02000
|
unkown
|
page read and write
|
||
1E31E000000
|
unkown image
|
page readonly
|
||
1E31DA30000
|
unkown image
|
page read and write
|
||
7FF55B578000
|
unkown image
|
page readonly
|
||
7DF5CD840000
|
unkown image
|
page readonly
|
||
2019CB79000
|
unkown
|
page read and write
|
||
1005000
|
unkown image
|
page read and write
|
||
2019CBAD000
|
unkown
|
page read and write
|
||
1910CB00000
|
unkown
|
page read and write
|
||
7FF5DDF99000
|
unkown image
|
page readonly
|
||
19111AF8000
|
unkown
|
page read and write
|
||
1910C9F0000
|
unkown
|
page read and write
|
||
7DF5654D2000
|
unkown image
|
page readonly
|
||
1001000
|
unkown image
|
page execute read
|
||
AA0000
|
unkown image
|
page readonly
|
||
7FF5DDBA4000
|
unkown image
|
page readonly
|
||
3C2E000
|
unkown
|
page read and write
|
||
C086F7B000
|
unkown
|
page read and write
|
||
1F361D20000
|
unkown image
|
page read and write
|
||
7FF55B656000
|
unkown image
|
page readonly
|
||
106A000
|
unkown image
|
page readonly
|
||
25F022D0000
|
unkown image
|
page readonly
|
||
7FF5DF645000
|
unkown image
|
page readonly
|
||
7FF55B70A000
|
unkown image
|
page readonly
|
||
7FF5DE336000
|
unkown image
|
page readonly
|
||
1E31DA40000
|
heap private
|
page read and write
|
||
7FF5DE367000
|
unkown image
|
page readonly
|
||
1910C1D0000
|
unkown image
|
page readonly
|
||
7FF54D6BB000
|
unkown image
|
page readonly
|
||
921150B000
|
unkown
|
page read and write
|
||
7FF5DE2F9000
|
unkown image
|
page readonly
|
||
7FF5C39AD000
|
unkown image
|
page readonly
|
||
1E31DC4B000
|
unkown
|
page read and write
|
||
2019C920000
|
unkown image
|
page read and write
|
||
D6D000
|
unkown
|
page read and write
|
||
1910C413000
|
unkown
|
page read and write
|
||
1910D320000
|
unkown image
|
page readonly
|
||
7FF4F74BB000
|
unkown image
|
page readonly
|
||
921158E000
|
unkown
|
page read and write
|
||
7FF5DF777000
|
unkown image
|
page readonly
|
||
7DF501290000
|
unkown image
|
page readonly
|
||
19111AB0000
|
unkown
|
page read and write
|
||
25F01D60000
|
unkown image
|
page readonly
|
||
7FF55B507000
|
unkown image
|
page readonly
|
||
7B69777000
|
unkown
|
page read and write
|
||
7FF5DF271000
|
unkown image
|
page readonly
|
||
25F01E24000
|
unkown
|
page read and write
|
||
7DF5E81D0000
|
unkown image
|
page readonly
|
||
7FF5DF5D0000
|
unkown image
|
page readonly
|
||
19111760000
|
unkown
|
page read and write
|
||
1910CA15000
|
unkown
|
page read and write
|
||
7DF5E9570000
|
unkown image
|
page readonly
|
||
1910C600000
|
unkown image
|
page readonly
|
||
1F361E40000
|
heap default
|
page read and write
|
||
2019C229000
|
unkown
|
page read and write
|
||
2019CB9B000
|
unkown
|
page read and write
|
||
2019CB94000
|
unkown
|
page read and write
|
||
7FF568803000
|
unkown image
|
page readonly
|
||
7FF5DE2C5000
|
unkown image
|
page readonly
|
||
7DF5693A0000
|
unkown image
|
page readonly
|
||
7FF55B65A000
|
unkown image
|
page readonly
|
||
7FF4F6FA7000
|
unkown image
|
page readonly
|
||
7B69B7B000
|
unkown
|
page read and write
|
||
1F361D60000
|
unkown image
|
page readonly
|
||
25F01D30000
|
unkown image
|
page readonly
|
||
7FF5DF6D3000
|
unkown image
|
page readonly
|
||
7FF4F7375000
|
unkown image
|
page readonly
|
||
F9589FE000
|
unkown
|
page read and write
|
||
1910D6E0000
|
unkown
|
page read and write
|
||
7B6A1FB000
|
unkown
|
page read and write
|
||
2913F800000
|
unkown
|
page read and write
|
||
13C5AF000
|
unkown
|
page read and write
|
||
1F361D90000
|
unkown
|
page read and write
|
||
7FF55F505000
|
unkown image
|
page readonly
|
||
7FF5DF78B000
|
unkown image
|
page readonly
|
||
2913F730000
|
unkown image
|
page readonly
|
||
191116F0000
|
unkown
|
page read and write
|
||
2019CBBC000
|
unkown
|
page read and write
|
||
657000
|
unkown
|
page read and write
|
||
7FF568651000
|
unkown image
|
page readonly
|
||
1093000
|
unkown image
|
page read and write
|
||
7DF5E9570000
|
unkown image
|
page readonly
|
||
630000
|
unkown
|
page read and write
|
||
19111B00000
|
unkown
|
page read and write
|
||
7FF5DDBE0000
|
unkown image
|
page readonly
|
||
7DF5693B0000
|
unkown image
|
page readonly
|
||
2019CB94000
|
unkown
|
page read and write
|
||
2019CB5E000
|
unkown
|
page read and write
|
||
184EC610000
|
unkown image
|
page readonly
|
||
1F361E20000
|
unkown
|
page read and write
|
||
19111A89000
|
unkown
|
page read and write
|
||
C6D000
|
unkown
|
page read and write
|
||
25F01E00000
|
unkown
|
page read and write
|
||
2913F913000
|
unkown
|
page read and write
|
||
1F0000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
7DF5CD832000
|
unkown image
|
page readonly
|
||
F95815B000
|
unkown
|
page read and write
|
||
184EC310000
|
unkown image
|
page readonly
|
||
E4E000
|
unkown
|
page read and write
|
||
7FF5C39DD000
|
unkown image
|
page readonly
|
||
7FF5DDF72000
|
unkown image
|
page readonly
|
||
2019C910000
|
unkown
|
page read and write
|
||
7B69DFF000
|
unkown
|
page read and write
|
||
7FF4F7416000
|
unkown image
|
page readonly
|
||
7DF5654D2000
|
unkown image
|
page readonly
|
||
2019CB94000
|
unkown
|
page read and write
|
||
2019CB9C000
|
unkown
|
page read and write
|
||
1910C48F000
|
unkown
|
page read and write
|
||
FED000
|
unkown
|
page read and write
|
||
F958AF8000
|
unkown
|
page read and write
|
||
191116E0000
|
unkown
|
page read and write
|
||
7B69C7F000
|
unkown
|
page read and write
|
||
2019C288000
|
unkown
|
page read and write
|
||
184EC320000
|
unkown image
|
page readonly
|
||
7DF5012A2000
|
unkown image
|
page readonly
|
||
7FF5DE403000
|
unkown image
|
page readonly
|
||
191119E0000
|
unkown
|
page read and write
|
||
620000
|
unkown
|
page read and write
|
||
7FF5DE417000
|
unkown image
|
page readonly
|
||
7DF5725B2000
|
unkown image
|
page readonly
|
||
2019CB7D000
|
unkown
|
page read and write
|
||
7FF4F74F7000
|
unkown image
|
page readonly
|
||
7B69EFE000
|
unkown
|
page read and write
|
||
658000
|
unkown
|
page read and write
|
||
7DF501292000
|
unkown image
|
page readonly
|
||
9C000
|
unkown
|
page read and write
|
||
7DF5654F0000
|
unkown image
|
page readonly
|
||
2019D002000
|
unkown
|
page read and write
|
||
7FF55F5E3000
|
unkown image
|
page readonly
|
||
1E31DD00000
|
unkown
|
page read and write
|
||
7DF5CD850000
|
unkown image
|
page readonly
|
||
7DF501292000
|
unkown image
|
page readonly
|
||
7FF5DF7C2000
|
unkown image
|
page readonly
|
||
7DF5CD830000
|
unkown image
|
page readonly
|
||
7FF55F5F7000
|
unkown image
|
page readonly
|
||
7FF5DF2FB000
|
unkown image
|
page readonly
|
||
7FF4F74E6000
|
unkown image
|
page readonly
|
||
7FF5DE0EF000
|
unkown image
|
page readonly
|
||
7FF56859C000
|
unkown image
|
page readonly
|
||
19111A61000
|
unkown
|
page read and write
|
||
2019C253000
|
unkown
|
page read and write
|
||
7FF568641000
|
unkown image
|
page readonly
|
||
2019C2E9000
|
unkown
|
page read and write
|
||
7FFC2000
|
unkown image
|
page readonly
|
||
7DF5654E2000
|
unkown image
|
page readonly
|
||
1F361DB0000
|
unkown
|
page read and write
|
||
614000
|
unkown
|
page read and write
|
||
CEFD27E000
|
unkown
|
page read and write
|
||
7FF55F5BB000
|
unkown image
|
page readonly
|
||
1910C1F0000
|
unkown image
|
page readonly
|
||
7FF55B6F7000
|
unkown image
|
page readonly
|
||
2019C22E000
|
unkown
|
page read and write
|
||
646000
|
unkown
|
page read and write
|
||
2913F5F0000
|
heap private
|
page read and write
|
||
1E31DC4F000
|
unkown
|
page read and write
|
||
1910D370000
|
unkown image
|
page readonly
|
||
184EC220000
|
unkown
|
page read and write
|
||
2019CBAD000
|
unkown
|
page read and write
|
||
2019C200000
|
unkown
|
page read and write
|
||
7FF4F7403000
|
unkown image
|
page readonly
|
||
7DF5E81B2000
|
unkown image
|
page readonly
|
||
7FF5DE114000
|
unkown image
|
page readonly
|
||
2019D000000
|
unkown
|
page read and write
|
||
7DF470480000
|
unkown image
|
page readonly
|
||
7FF55B1B3000
|
unkown image
|
page readonly
|
||
1F361D40000
|
unkown image
|
page readonly
|
||
2019C2B1000
|
unkown
|
page read and write
|
||
13C52A000
|
unkown
|
page read and write
|
||
191118A0000
|
unkown
|
page read and write
|
||
2913F600000
|
unkown image
|
page readonly
|
||
7FF5C3541000
|
unkown image
|
page readonly
|
||
19111880000
|
unkown
|
page read and write
|
||
7FF5DE0D2000
|
unkown image
|
page readonly
|
||
7DF5693B0000
|
unkown image
|
page readonly
|
||
7DF5654E0000
|
unkown image
|
page readonly
|
||
7DF5E81C0000
|
unkown image
|
page readonly
|
||
7DF5E9562000
|
unkown image
|
page readonly
|
||
7FF5DE0CA000
|
unkown image
|
page readonly
|
||
FB0000
|
unkown
|
page read and write
|
||
25F01D90000
|
unkown image
|
page readonly
|
||
7FF55F5A1000
|
unkown image
|
page readonly
|
||
184EC21F000
|
unkown
|
page read and write
|
||
184EC400000
|
heap private
|
page read and write
|
||
1E31DC6F000
|
unkown
|
page read and write
|
||
7FF55B6F4000
|
unkown image
|
page readonly
|
||
7FF4F6B6E000
|
unkown image
|
page readonly
|
||
2019CBBC000
|
unkown
|
page read and write
|
||
1910CB02000
|
unkown
|
page read and write
|
||
5D4000
|
heap default
|
page read and write
|
||
1F361E8E000
|
unkown
|
page read and write
|
||
7FF5DE0E5000
|
unkown image
|
page readonly
|
||
1910D360000
|
unkown image
|
page readonly
|
||
2610000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page read and write
|
||
7DF5725C0000
|
unkown image
|
page readonly
|
||
7FF55AF0F000
|
unkown image
|
page readonly
|
||
7FF5DE311000
|
unkown image
|
page readonly
|
||
7DF5012A0000
|
unkown image
|
page readonly
|
||
2019C2AE000
|
unkown
|
page read and write
|
||
1910C800000
|
unkown image
|
page readonly
|
||
7DF5E81C2000
|
unkown image
|
page readonly
|
||
7FF567F1A000
|
unkown image
|
page readonly
|
||
7FF55B726000
|
unkown image
|
page readonly
|
||
7FF4F74AD000
|
unkown image
|
page readonly
|
||
10AD000
|
unkown image
|
page readonly
|
||
19111AD8000
|
unkown
|
page read and write
|
||
2019C1F0000
|
unkown
|
page read and write
|
||
1100000
|
unkown image
|
page readonly
|
||
7FF5DE30F000
|
unkown image
|
page readonly
|
||
7DF3FF160000
|
unkown image
|
page readonly
|
||
7FF5DF6F2000
|
unkown image
|
page readonly
|
||
7FF5DDF42000
|
unkown image
|
page readonly
|
||
7FF5DF7B6000
|
unkown image
|
page readonly
|
||
2019D01D000
|
unkown
|
page read and write
|
||
19B000
|
unkown
|
page read and write
|
||
CEFD47E000
|
unkown
|
page read and write
|
||
7DF467260000
|
unkown image
|
page readonly
|
||
7FF55B5E7000
|
unkown image
|
page readonly
|
||
2019C213000
|
unkown
|
page read and write
|
||
7FF4F74A4000
|
unkown image
|
page readonly
|
||
7FF5DF717000
|
unkown image
|
page readonly
|
||
7DF5CD842000
|
unkown image
|
page readonly
|
||
D70000
|
heap private
|
page read and write
|
||
7FF54D6BB000
|
unkown image
|
page readonly
|
||
7FF55B4CA000
|
unkown image
|
page readonly
|
||
7FF568756000
|
unkown image
|
page readonly
|
||
1A0000
|
unkown image
|
page readonly
|
||
7FF4F74B4000
|
unkown image
|
page readonly
|
||
1910C200000
|
unkown image
|
page readonly
|
||
2913FA00000
|
unkown image
|
page readonly
|
||
1910C9F3000
|
unkown
|
page read and write
|
||
1F362350000
|
unkown image
|
page readonly
|
||
7FF55B3A1000
|
unkown image
|
page readonly
|
||
7FF5C3991000
|
unkown image
|
page readonly
|
||
7DF569390000
|
unkown image
|
page readonly
|
||
C0872FF000
|
unkown
|
page read and write
|
||
10AD000
|
unkown image
|
page readonly
|
||
7FF4F74A7000
|
unkown image
|
page readonly
|
||
2019C2C0000
|
unkown
|
page read and write
|
||
7DF5725B0000
|
unkown image
|
page readonly
|
||
821CE7C000
|
unkown
|
page read and write
|
||
60D000
|
unkown
|
page read and write
|
||
7FF5DE3EA000
|
unkown image
|
page readonly
|
||
1F361E86000
|
unkown
|
page read and write
|
||
7FF568091000
|
unkown image
|
page readonly
|
||
7FF5687D7000
|
unkown image
|
page readonly
|
||
7FF55B5E5000
|
unkown image
|
page readonly
|
||
61F000
|
unkown
|
page read and write
|
||
7FF5687C7000
|
unkown image
|
page readonly
|
||
7FF5DDFD7000
|
unkown image
|
page readonly
|
||
7B6A3FF000
|
unkown
|
page read and write
|
||
7DF4E6080000
|
unkown image
|
page readonly
|
There are 984 hidden memdumps, click here to show them.