Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
CGd7lq6RDL.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{06650DBE-1262-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{E0443E1A-1261-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{06650DC0-1262-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{E0443E1C-1261-11EC-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF54FE3B7C7FD18873.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF849AFB3A04ECE3BF.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF9956526A696EBC76.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFD9B906886E0EC1C2.TMP
|
data
|
dropped
|
|
There are 19 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\CGd7lq6RDL.exe
|
'C:\Users\user\Desktop\CGd7lq6RDL.exe'
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6672 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5656 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://haverit.xyz/index.htm
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://sectigo.com/CPS0
|
unknown
|
|
|
|
http://ocsp.sectigo.com0
|
unknown
|
|
|
|
https://haverit.xyz/index.htmdex.htm
|
unknown
|
|
|
|
http://%s=%s&file://&os=%u.%u_%u_%u_x%uindex.html;
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://haverit.xyz
|
unknown
|
|
|
|
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://haverit.xyz/index.htmRoot
|
unknown
|
|
|
|
http://www.google.com/
|
unknown
|
|
There are 7 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
haverit.xyz
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{E0443E1A-1261-11EC-90E5-ECF4BB2D2496}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingBitmap
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingRandomizedBitmap
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{06650DBE-1262-11EC-90E5-ECF4BB2D2496}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
There are 19 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
7DF50E712000
|
unkown image
|
page readonly
|
|
|
|
7FF564A96000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1287000
|
unkown image
|
page readonly
|
|
|
|
17FD82A7000
|
unkown
|
page read and write
|
|
|
|
17FD8B7F000
|
unkown
|
page read and write
|
|
|
|
17FD8BB8000
|
unkown
|
page read and write
|
|
|
|
23CEF95C000
|
heap default
|
page read and write
|
|
|
|
17FD8B96000
|
unkown
|
page read and write
|
|
|
|
7FF564B43000
|
unkown image
|
page readonly
|
|
|
|
260F000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown image
|
page readonly
|
|
|
|
2A9C70A5000
|
heap private
|
page read and write
|
|
|
|
7FF5B421A000
|
unkown image
|
page readonly
|
|
|
|
17FD8255000
|
unkown
|
page read and write
|
|
|
|
2A9C6BF0000
|
unkown image
|
page readonly
|
|
|
|
7DF482030000
|
unkown image
|
page readonly
|
|
|
|
5CE000
|
unkown
|
page read and write
|
|
|
|
7FF5B1278000
|
unkown image
|
page readonly
|
|
|
|
2AE6DE5E000
|
unkown
|
page read and write
|
|
|
|
17FD8B51000
|
unkown
|
page read and write
|
|
|
|
62F7AFB000
|
unkown
|
page read and write
|
|
|
|
1BA115B0000
|
unkown
|
page read and write
|
|
|
|
1BA0D2ED000
|
unkown
|
page read and write
|
|
|
|
1098000
|
unkown image
|
page read and write
|
|
|
|
E9D20BA000
|
unkown
|
page read and write
|
|
|
|
365D97E000
|
unkown
|
page read and write
|
|
|
|
7FF51ABC2000
|
unkown image
|
page readonly
|
|
|
|
24040C00000
|
unkown
|
page read and write
|
|
|
|
5D9000
|
unkown
|
page read and write
|
|
|
|
17FD8257000
|
unkown
|
page read and write
|
|
|
|
24040D00000
|
unkown
|
page read and write
|
|
|
|
7DF5BE880000
|
unkown image
|
page readonly
|
|
|
|
1BA0CC90000
|
unkown image
|
page read and write
|
|
|
|
7FF51A741000
|
unkown image
|
page readonly
|
|
|
|
7FF564B07000
|
unkown image
|
page readonly
|
|
|
|
1BA116A0000
|
unkown
|
page read and write
|
|
|
|
1099000
|
unkown image
|
page execute and read and write
|
|
|
|
7DF5BE882000
|
unkown image
|
page readonly
|
|
|
|
17FD8BBB000
|
unkown
|
page read and write
|
|
|
|
17FD8258000
|
unkown
|
page read and write
|
|
|
|
7DF524A50000
|
unkown image
|
page readonly
|
|
|
|
17FD8B8B000
|
unkown
|
page read and write
|
|
|
|
106A000
|
unkown image
|
page readonly
|
|
|
|
7FF57A04B000
|
unkown image
|
page readonly
|
|
|
|
7FF5B12AF000
|
unkown image
|
page readonly
|
|
|
|
1BA11480000
|
unkown
|
page read and write
|
|
|
|
5B4000
|
unkown
|
page read and write
|
|
|
|
17FD8A02000
|
unkown
|
page read and write
|
|
|
|
7FF564A63000
|
unkown image
|
page readonly
|
|
|
|
7FF559402000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1187000
|
unkown image
|
page readonly
|
|
|
|
17FD8B94000
|
unkown
|
page read and write
|
|
|
|
7FF5B12E2000
|
unkown image
|
page readonly
|
|
|
|
7FF51AB79000
|
unkown image
|
page readonly
|
|
|
|
7FF5048AD000
|
unkown image
|
page readonly
|
|
|
|
62C000
|
unkown
|
page read and write
|
|
|
|
7FF5B49E4000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4A94000
|
unkown image
|
page readonly
|
|
|
|
17FD8BBB000
|
unkown
|
page read and write
|
|
|
|
7FF51A9D0000
|
unkown image
|
page readonly
|
|
|
|
7FF50412A000
|
unkown image
|
page readonly
|
|
|
|
17FD8B88000
|
unkown
|
page read and write
|
|
|
|
1BA0BE9A000
|
unkown
|
page read and write
|
|
|
|
7FF5B1364000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1367000
|
unkown image
|
page readonly
|
|
|
|
24040ED0000
|
unkown image
|
page readonly
|
|
|
|
17FD82A6000
|
unkown
|
page read and write
|
|
|
|
7FF51A716000
|
unkown image
|
page readonly
|
|
|
|
1BA0CD70000
|
unkown
|
page read and write
|
|
|
|
214690A0000
|
unkown image
|
page readonly
|
|
|
|
7FF564B2A000
|
unkown image
|
page readonly
|
|
|
|
23CEF900000
|
heap default
|
page read and write
|
|
|
|
7FF51AA86000
|
unkown image
|
page readonly
|
|
|
|
17FD824D000
|
unkown
|
page read and write
|
|
|
|
7FF564B14000
|
unkown image
|
page readonly
|
|
|
|
17FD8B53000
|
unkown
|
page read and write
|
|
|
|
17FD8B7C000
|
unkown
|
page read and write
|
|
|
|
7FF5B12CD000
|
unkown image
|
page readonly
|
|
|
|
7FF5B421F000
|
unkown image
|
page readonly
|
|
|
|
7FF504917000
|
unkown image
|
page readonly
|
|
|
|
7FF5B11F8000
|
unkown image
|
page readonly
|
|
|
|
17FD8170000
|
unkown image
|
page readonly
|
|
|
|
5EA000
|
unkown
|
page read and write
|
|
|
|
7FF51AB15000
|
unkown image
|
page readonly
|
|
|
|
24040C4B000
|
unkown
|
page read and write
|
|
|
|
7FF51AB74000
|
unkown image
|
page readonly
|
|
|
|
23CEF840000
|
unkown image
|
page readonly
|
|
|
|
59B000
|
unkown
|
page read and write
|
|
|
|
24040C4F000
|
unkown
|
page read and write
|
|
|
|
17FD8B8D000
|
unkown
|
page read and write
|
|
|
|
24041402000
|
unkown
|
page read and write
|
|
|
|
7DF584170000
|
unkown image
|
page readonly
|
|
|
|
483DB7F000
|
unkown
|
page read and write
|
|
|
|
94D000
|
unkown
|
page read and write
|
|
|
|
17FD8970000
|
unkown image
|
page write copy
|
|
|
|
365DA7F000
|
unkown
|
page read and write
|
|
|
|
17FD8B7A000
|
unkown
|
page read and write
|
|
|
|
7FF51AA3D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B105D000
|
unkown image
|
page readonly
|
|
|
|
7FF5593E3000
|
unkown image
|
page readonly
|
|
|
|
62F6FFB000
|
unkown
|
page read and write
|
|
|
|
1BA0BEA1000
|
unkown
|
page read and write
|
|
|
|
17FD8BAF000
|
unkown
|
page read and write
|
|
|
|
2F338F8000
|
unkown
|
page read and write
|
|
|
|
17FD8B88000
|
unkown
|
page read and write
|
|
|
|
DC0000
|
unkown
|
page read and write
|
|
|
|
7DF524A42000
|
unkown image
|
page readonly
|
|
|
|
7FF564B57000
|
unkown image
|
page readonly
|
|
|
|
24040C6F000
|
unkown
|
page read and write
|
|
|
|
7FF51ABAD000
|
unkown image
|
page readonly
|
|
|
|
10AB000
|
unkown image
|
page read and write
|
|
|
|
2AE6DE83000
|
unkown
|
page read and write
|
|
|
|
7FF5B12FD000
|
unkown image
|
page readonly
|
|
|
|
2AE6DE54000
|
unkown
|
page read and write
|
|
|
|
7DF56E8F2000
|
unkown image
|
page readonly
|
|
|
|
1BA0C700000
|
unkown
|
page read and write
|
|
|
|
1BA0CE60000
|
unkown image
|
page readonly
|
|
|
|
1BA11580000
|
unkown
|
page read and write
|
|
|
|
7FF5593D1000
|
unkown image
|
page readonly
|
|
|
|
17FD8B94000
|
unkown
|
page read and write
|
|
|
|
1BA116E0000
|
unkown
|
page read and write
|
|
|
|
7FF5593CF000
|
unkown image
|
page readonly
|
|
|
|
17FD8B73000
|
unkown
|
page read and write
|
|
|
|
17FD9002000
|
unkown
|
page read and write
|
|
|
|
7FF5B485C000
|
unkown image
|
page readonly
|
|
|
|
5D6000
|
unkown
|
page read and write
|
|
|
|
7FF51A4A7000
|
unkown image
|
page readonly
|
|
|
|
17FD8B9D000
|
unkown
|
page read and write
|
|
|
|
7FF5B49CF000
|
unkown image
|
page readonly
|
|
|
|
5CE000
|
unkown
|
page read and write
|
|
|
|
7FF51A901000
|
unkown image
|
page readonly
|
|
|
|
17FD8B9E000
|
unkown
|
page read and write
|
|
|
|
7FF50412E000
|
unkown image
|
page readonly
|
|
|
|
DE0000
|
heap private
|
page read and write
|
|
|
|
7FF57A319000
|
unkown image
|
page readonly
|
|
|
|
2AE6DC70000
|
heap private
|
page read and write
|
|
|
|
7DF563272000
|
unkown image
|
page readonly
|
|
|
|
7DF584172000
|
unkown image
|
page readonly
|
|
|
|
1BA0CE90000
|
unkown image
|
page readonly
|
|
|
|
1BA0D265000
|
unkown
|
page read and write
|
|
|
|
7FF564AA9000
|
unkown image
|
page readonly
|
|
|
|
7DF5BB150000
|
unkown image
|
page readonly
|
|
|
|
1BA115A0000
|
unkown
|
page read and write
|
|
|
|
1BA0CC80000
|
unkown
|
page read and write
|
|
|
|
23CEF94B000
|
unkown
|
page read and write
|
|
|
|
7FF564946000
|
unkown image
|
page readonly
|
|
|
|
17FD8B89000
|
unkown
|
page read and write
|
|
|
|
7FF5043DB000
|
unkown image
|
page readonly
|
|
|
|
24040B70000
|
unkown image
|
page readonly
|
|
|
|
7DF584172000
|
unkown image
|
page readonly
|
|
|
|
4A0000
|
unkown
|
page read and write
|
|
|
|
7FF5647DB000
|
unkown image
|
page readonly
|
|
|
|
17FD8308000
|
unkown
|
page read and write
|
|
|
|
61D000
|
unkown
|
page read and write
|
|
|
|
1BA0C480000
|
unkown
|
page read and write
|
|
|
|
7FF51AB45000
|
unkown image
|
page readonly
|
|
|
|
4AC000
|
unkown
|
page read and write
|
|
|
|
2AE6DF13000
|
unkown
|
page read and write
|
|
|
|
598000
|
unkown
|
page read and write
|
|
|
|
7FF559497000
|
unkown image
|
page readonly
|
|
|
|
1BA116B0000
|
unkown
|
page read and write
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
17FD8B94000
|
unkown
|
page read and write
|
|
|
|
17FD82EA000
|
unkown
|
page read and write
|
|
|
|
7FF51AC47000
|
unkown image
|
page readonly
|
|
|
|
7DF4BC740000
|
unkown image
|
page readonly
|
|
|
|
21469266000
|
unkown
|
page read and write
|
|
|
|
1BA0D243000
|
unkown
|
page read and write
|
|
|
|
53D000
|
unkown
|
page read and write
|
|
|
|
62F70FF000
|
unkown
|
page read and write
|
|
|
|
1BA0C602000
|
unkown
|
page read and write
|
|
|
|
7FF5B4AD7000
|
unkown image
|
page readonly
|
|
|
|
2AE6DDB0000
|
unkown image
|
page readonly
|
|
|
|
17FD8BA5000
|
unkown
|
page read and write
|
|
|
|
7FF57A317000
|
unkown image
|
page readonly
|
|
|
|
1BA0D2E7000
|
unkown
|
page read and write
|
|
|
|
17FD82F9000
|
unkown
|
page read and write
|
|
|
|
17FD8B89000
|
unkown
|
page read and write
|
|
|
|
17FD8170000
|
unkown image
|
page readonly
|
|
|
|
24040C49000
|
unkown
|
page read and write
|
|
|
|
2A9C6E4C000
|
unkown
|
page read and write
|
|
|
|
7FF51AB70000
|
unkown image
|
page readonly
|
|
|
|
7FF51AA67000
|
unkown image
|
page readonly
|
|
|
|
7FF5B12BF000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE882000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1294000
|
unkown image
|
page readonly
|
|
|
|
1010000
|
unkown image
|
page execute read
|
|
|
|
1001000
|
unkown image
|
page execute read
|
|
|
|
7FF5B130E000
|
unkown image
|
page readonly
|
|
|
|
2A9C70A0000
|
heap private
|
page read and write
|
|
|
|
17FD825A000
|
unkown
|
page read and write
|
|
|
|
2630000
|
heap private
|
page read and write
|
|
|
|
23CEF911000
|
heap default
|
page read and write
|
|
|
|
7FF51A9A0000
|
unkown image
|
page readonly
|
|
|
|
7DF524A30000
|
unkown image
|
page readonly
|
|
|
|
62F74FE000
|
unkown
|
page read and write
|
|
|
|
7DF4B9020000
|
unkown image
|
page readonly
|
|
|
|
23CEFCA9000
|
heap private
|
page read and write
|
|
|
|
7FF564AA7000
|
unkown image
|
page readonly
|
|
|
|
7FF57A208000
|
unkown image
|
page readonly
|
|
|
|
24040C13000
|
unkown
|
page read and write
|
|
|
|
108E000
|
unkown image
|
page read and write
|
|
|
|
3E7F000
|
unkown
|
page read and write
|
|
|
|
17FD8B89000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page read and write
|
|
|
|
7FF50492B000
|
unkown image
|
page readonly
|
|
|
|
7FF5B10B6000
|
unkown image
|
page readonly
|
|
|
|
7FF57A1B6000
|
unkown image
|
page readonly
|
|
|
|
5C1000
|
unkown
|
page read and write
|
|
|
|
2A9C6E4C000
|
unkown
|
page read and write
|
|
|
|
7FF564917000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4A1D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B108F000
|
unkown image
|
page readonly
|
|
|
|
17FD8B8D000
|
unkown
|
page read and write
|
|
|
|
17FD8B93000
|
unkown
|
page read and write
|
|
|
|
1BA0BCD0000
|
unkown image
|
page readonly
|
|
|
|
E9D2479000
|
unkown
|
page read and write
|
|
|
|
2AE6DE5F000
|
unkown
|
page read and write
|
|
|
|
5DA000
|
unkown
|
page read and write
|
|
|
|
62F757F000
|
unkown
|
page read and write
|
|
|
|
5CE000
|
unkown
|
page read and write
|
|
|
|
7DF563282000
|
unkown image
|
page readonly
|
|
|
|
2AE6E602000
|
unkown
|
page read and write
|
|
|
|
7FF51A45E000
|
unkown image
|
page readonly
|
|
|
|
2A9C6E4C000
|
unkown
|
page read and write
|
|
|
|
483DE7F000
|
unkown
|
page read and write
|
|
|
|
1BA0D2A3000
|
unkown
|
page read and write
|
|
|
|
17FD8160000
|
heap private
|
page read and write
|
|
|
|
24040C4E000
|
unkown
|
page read and write
|
|
|
|
7DF5BB170000
|
unkown image
|
page readonly
|
|
|
|
61C000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
365D4FE000
|
unkown
|
page read and write
|
|
|
|
17FD8BB3000
|
unkown
|
page read and write
|
|
|
|
7FF5B1173000
|
unkown image
|
page readonly
|
|
|
|
7FF5B13B2000
|
unkown image
|
page readonly
|
|
|
|
7FF50487E000
|
unkown image
|
page readonly
|
|
|
|
2A9C6C10000
|
unkown image
|
page readonly
|
|
|
|
2A9C6E4A000
|
unkown
|
page read and write
|
|
|
|
1BA0D302000
|
unkown
|
page read and write
|
|
|
|
2A9C6E37000
|
unkown
|
page read and write
|
|
|
|
7FF5B0F77000
|
unkown image
|
page readonly
|
|
|
|
24040D02000
|
unkown
|
page read and write
|
|
|
|
23CEFEC0000
|
unkown image
|
page readonly
|
|
|
|
7DF5BB160000
|
unkown image
|
page readonly
|
|
|
|
2AE6DE2E000
|
unkown
|
page read and write
|
|
|
|
2A9C6E22000
|
unkown
|
page read and write
|
|
|
|
7FF51AC57000
|
unkown image
|
page readonly
|
|
|
|
5D4000
|
unkown
|
page read and write
|
|
|
|
3613000
|
heap private
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7DF56E8F0000
|
unkown image
|
page readonly
|
|
|
|
1BA0C200000
|
unkown image
|
page readonly
|
|
|
|
7FF57A245000
|
unkown image
|
page readonly
|
|
|
|
17FD84D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B13A6000
|
unkown image
|
page readonly
|
|
|
|
7DF56E900000
|
unkown image
|
page readonly
|
|
|
|
10AD000
|
unkown image
|
page readonly
|
|
|
|
4A0000
|
unkown
|
page execute and read and write
|
|
|
|
21469A02000
|
unkown
|
page read and write
|
|
|
|
7DF524A42000
|
unkown image
|
page readonly
|
|
|
|
17FD8BD2000
|
unkown
|
page read and write
|
|
|
|
7FF57A187000
|
unkown image
|
page readonly
|
|
|
|
17FD824C000
|
unkown
|
page read and write
|
|
|
|
17FD8B8D000
|
unkown
|
page read and write
|
|
|
|
E52B5FD000
|
unkown
|
page read and write
|
|
|
|
17FD8BC1000
|
unkown
|
page read and write
|
|
|
|
17FD8BCC000
|
unkown
|
page read and write
|
|
|
|
1BA0C718000
|
unkown
|
page read and write
|
|
|
|
7FF5B12F6000
|
unkown image
|
page readonly
|
|
|
|
17FD8213000
|
unkown
|
page read and write
|
|
|
|
2146922A000
|
unkown
|
page read and write
|
|
|
|
10EF000
|
unkown image
|
page readonly
|
|
|
|
2A9C6E4C000
|
unkown
|
page read and write
|
|
|
|
17FD86D0000
|
unkown image
|
page readonly
|
|
|
|
7DF563270000
|
unkown image
|
page readonly
|
|
|
|
7FF51A9CE000
|
unkown image
|
page readonly
|
|
|
|
1BA0C600000
|
unkown
|
page read and write
|
|
|
|
7FF564B1B000
|
unkown image
|
page readonly
|
|
|
|
7FF51ABB6000
|
unkown image
|
page readonly
|
|
|
|
17FD8302000
|
unkown
|
page read and write
|
|
|
|
21469273000
|
unkown
|
page read and write
|
|
|
|
17FD8B94000
|
unkown
|
page read and write
|
|
|
|
2AE6DCD0000
|
heap default
|
page read and write
|
|
|
|
F1D000
|
unkown
|
page read and write
|
|
|
|
24040B90000
|
unkown image
|
page readonly
|
|
|
|
7FF5B10FB000
|
unkown image
|
page readonly
|
|
|
|
3613000
|
heap private
|
page read and write
|
|
|
|
598000
|
unkown
|
page read and write
|
|
|
|
7C32CF9000
|
unkown
|
page read and write
|
|
|
|
17FD8B81000
|
unkown
|
page read and write
|
|
|
|
7FF51A525000
|
unkown image
|
page readonly
|
|
|
|
17FD89E0000
|
unkown
|
page read and write
|
|
|
|
2146923C000
|
unkown
|
page read and write
|
|
|
|
62F69BE000
|
unkown
|
page read and write
|
|
|
|
3613000
|
heap private
|
page read and write
|
|
|
|
490000
|
unkown
|
page execute and read and write
|
|
|
|
17FD8BA7000
|
unkown
|
page read and write
|
|
|
|
1BA116C0000
|
unkown
|
page read and write
|
|
|
|
17FD8B8F000
|
unkown
|
page read and write
|
|
|
|
7FF559318000
|
unkown image
|
page readonly
|
|
|
|
1BA0C801000
|
unkown
|
page read and write
|
|
|
|
7FF57A377000
|
unkown image
|
page readonly
|
|
|
|
7FF504924000
|
unkown image
|
page readonly
|
|
|
|
2AE6DE66000
|
unkown
|
page read and write
|
|
|
|
1BA0C615000
|
unkown
|
page read and write
|
|
|
|
109D000
|
unkown image
|
page read and write
|
|
|
|
17FD901E000
|
unkown
|
page read and write
|
|
|
|
62F6C7E000
|
unkown
|
page read and write
|
|
|
|
17FD8200000
|
unkown
|
page read and write
|
|
|
|
7FF51AC4D000
|
unkown image
|
page readonly
|
|
|
|
7FF559487000
|
unkown image
|
page readonly
|
|
|
|
7FF559297000
|
unkown image
|
page readonly
|
|
|
|
E52B4F7000
|
unkown
|
page read and write
|
|
|
|
17FD8B94000
|
unkown
|
page read and write
|
|
|
|
17FD89E0000
|
unkown
|
page read and write
|
|
|
|
17FD8BA8000
|
unkown
|
page read and write
|
|
|
|
17FD8B9E000
|
unkown
|
page read and write
|
|
|
|
23CEFC70000
|
unkown
|
page read and write
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
17FD8940000
|
unkown image
|
page readonly
|
|
|
|
7DF524A32000
|
unkown image
|
page readonly
|
|
|
|
1BA0BE3F000
|
unkown
|
page read and write
|
|
|
|
1BA1158E000
|
unkown
|
page read and write
|
|
|
|
7FF51AB91000
|
unkown image
|
page readonly
|
|
|
|
7DF50E710000
|
unkown image
|
page readonly
|
|
|
|
7DF50E720000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0BC7000
|
unkown image
|
page readonly
|
|
|
|
7FF5592A7000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4A8D000
|
unkown image
|
page readonly
|
|
|
|
17FD8B7A000
|
unkown
|
page read and write
|
|
|
|
7C3270B000
|
unkown
|
page read and write
|
|
|
|
7FF564A76000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1030000
|
unkown image
|
page readonly
|
|
|
|
2F33477000
|
unkown
|
page read and write
|
|
|
|
2A9C6E4C000
|
unkown
|
page read and write
|
|
|
|
7FF5B4AC6000
|
unkown image
|
page readonly
|
|
|
|
17FD8B80000
|
unkown
|
page read and write
|
|
|
|
214690A0000
|
unkown image
|
page readonly
|
|
|
|
2A9C70B0000
|
unkown image
|
page readonly
|
|
|
|
7C32D7A000
|
unkown
|
page read and write
|
|
|
|
24040D13000
|
unkown
|
page read and write
|
|
|
|
62F737F000
|
unkown
|
page read and write
|
|
|
|
FDE000
|
unkown
|
page read and write
|
|
|
|
7FF55949B000
|
unkown image
|
page readonly
|
|
|
|
7FF51AB84000
|
unkown image
|
page readonly
|
|
|
|
7FF558F87000
|
unkown image
|
page readonly
|
|
|
|
1BA0BEEC000
|
unkown
|
page read and write
|
|
|
|
1BA0C3A0000
|
unkown image
|
page readonly
|
|
|
|
7FF51A713000
|
unkown image
|
page readonly
|
|
|
|
10AD000
|
unkown image
|
page readonly
|
|
|
|
1BA116E0000
|
unkown
|
page read and write
|
|
|
|
2F3327D000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF559355000
|
unkown image
|
page readonly
|
|
|
|
23CEFC60000
|
unkown
|
page read and write
|
|
|
|
7FF5B12D6000
|
unkown image
|
page readonly
|
|
|
|
21469090000
|
heap private
|
page read and write
|
|
|
|
17FD8B89000
|
unkown
|
page read and write
|
|
|
|
7DF50E710000
|
unkown image
|
page readonly
|
|
|
|
7FF51A747000
|
unkown image
|
page readonly
|
|
|
|
1BA0BE00000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
1BA0BCB0000
|
unkown image
|
page read and write
|
|
|
|
7FF5048B7000
|
unkown image
|
page readonly
|
|
|
|
7FF5B13B7000
|
unkown image
|
page readonly
|
|
|
|
17FD8BB3000
|
unkown
|
page read and write
|
|
|
|
7FF504914000
|
unkown image
|
page readonly
|
|
|
|
108E000
|
unkown image
|
page write copy
|
|
|
|
17FD8B9B000
|
unkown
|
page read and write
|
|
|
|
24040B60000
|
heap private
|
page read and write
|
|
|
|
1BA116D0000
|
unkown
|
page read and write
|
|
|
|
7DF5BB170000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1221000
|
unkown image
|
page readonly
|
|
|
|
17FD8B88000
|
unkown
|
page read and write
|
|
|
|
17FD8B91000
|
unkown
|
page read and write
|
|
|
|
7DF5BE872000
|
unkown image
|
page readonly
|
|
|
|
23CEF94B000
|
unkown
|
page read and write
|
|
|
|
1BA0BEAC000
|
unkown
|
page read and write
|
|
|
|
21469400000
|
unkown image
|
page readonly
|
|
|
|
7DF524A40000
|
unkown image
|
page readonly
|
|
|
|
7FF559141000
|
unkown image
|
page readonly
|
|
|
|
7FF51A30F000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
1BA0D1F0000
|
unkown
|
page read and write
|
|
|
|
7FF51AAA8000
|
unkown image
|
page readonly
|
|
|
|
7FF564A7A000
|
unkown image
|
page readonly
|
|
|
|
7FF564B57000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE890000
|
unkown image
|
page readonly
|
|
|
|
17FD82E2000
|
unkown
|
page read and write
|
|
|
|
577000
|
unkown
|
page read and write
|
|
|
|
5F6000
|
unkown
|
page read and write
|
|
|
|
17FD82E8000
|
unkown
|
page read and write
|
|
|
|
7FF5B1374000
|
unkown image
|
page readonly
|
|
|
|
2A9C6D20000
|
unkown
|
page read and write
|
|
|
|
7DF46C7C0000
|
unkown image
|
page readonly
|
|
|
|
24040C4A000
|
unkown
|
page read and write
|
|
|
|
1BA0BE29000
|
unkown
|
page read and write
|
|
|
|
7FF51ABD6000
|
unkown image
|
page readonly
|
|
|
|
1BA0BEBB000
|
unkown
|
page read and write
|
|
|
|
21469213000
|
unkown
|
page read and write
|
|
|
|
98E000
|
unkown
|
page read and write
|
|
|
|
17FD8B73000
|
unkown
|
page read and write
|
|
|
|
17FD8B72000
|
unkown
|
page read and write
|
|
|
|
7FF57A384000
|
unkown image
|
page readonly
|
|
|
|
7FF57A3C7000
|
unkown image
|
page readonly
|
|
|
|
7FF51AB9F000
|
unkown image
|
page readonly
|
|
|
|
7FF5B10C0000
|
unkown image
|
page readonly
|
|
|
|
17FD9000000
|
unkown
|
page read and write
|
|
|
|
7FF51AC54000
|
unkown image
|
page readonly
|
|
|
|
7FF51A7F2000
|
unkown image
|
page readonly
|
|
|
|
7FF51ABA3000
|
unkown image
|
page readonly
|
|
|
|
2A9C6D00000
|
unkown
|
page read and write
|
|
|
|
1BA0C702000
|
unkown
|
page read and write
|
|
|
|
7DF40C5D0000
|
unkown image
|
page readonly
|
|
|
|
7FF51AC97000
|
unkown image
|
page readonly
|
|
|
|
17FD8150000
|
unkown image
|
page read and write
|
|
|
|
17FD82BC000
|
unkown
|
page read and write
|
|
|
|
21469308000
|
unkown
|
page read and write
|
|
|
|
17FD8BAC000
|
unkown
|
page read and write
|
|
|
|
7FF5B12DA000
|
unkown image
|
page readonly
|
|
|
|
7DF5BB160000
|
unkown image
|
page readonly
|
|
|
|
17FD8B88000
|
unkown
|
page read and write
|
|
|
|
7FF5B10A9000
|
unkown image
|
page readonly
|
|
|
|
7FF51A45A000
|
unkown image
|
page readonly
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
7FF5B115F000
|
unkown image
|
page readonly
|
|
|
|
17FD8B94000
|
unkown
|
page read and write
|
|
|
|
2A9C6D70000
|
unkown image
|
page read and write
|
|
|
|
483DF77000
|
unkown
|
page read and write
|
|
|
|
17FD8B92000
|
unkown
|
page read and write
|
|
|
|
2A9C6E10000
|
heap default
|
page read and write
|
|
|
|
23CF0750000
|
unkown
|
page readonly
|
|
|
|
2AE6DE5D000
|
unkown
|
page read and write
|
|
|
|
17FD8BAD000
|
unkown
|
page read and write
|
|
|
|
17FD8B8A000
|
unkown
|
page read and write
|
|
|
|
17FD8B65000
|
unkown
|
page read and write
|
|
|
|
17FD8B94000
|
unkown
|
page read and write
|
|
|
|
7FF51AC6A000
|
unkown image
|
page readonly
|
|
|
|
7FF51AA57000
|
unkown image
|
page readonly
|
|
|
|
1BA0BD00000
|
unkown image
|
page readonly
|
|
|
|
2A9C6E49000
|
unkown
|
page read and write
|
|
|
|
365D47B000
|
unkown
|
page read and write
|
|
|
|
17FD81A0000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7DF563290000
|
unkown image
|
page readonly
|
|
|
|
7DF563280000
|
unkown image
|
page readonly
|
|
|
|
17FD9019000
|
unkown
|
page read and write
|
|
|
|
24040C3C000
|
unkown
|
page read and write
|
|
|
|
1BA0C5F3000
|
unkown
|
page read and write
|
|
|
|
7DF584180000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1284000
|
unkown image
|
page readonly
|
|
|
|
17FD82B1000
|
unkown
|
page read and write
|
|
|
|
17FD82EB000
|
unkown
|
page read and write
|
|
|
|
21469200000
|
unkown
|
page read and write
|
|
|
|
17FD8B8A000
|
unkown
|
page read and write
|
|
|
|
7C3278E000
|
unkown
|
page read and write
|
|
|
|
2F32F1C000
|
unkown
|
page read and write
|
|
|
|
5CE000
|
unkown
|
page read and write
|
|
|
|
21469302000
|
unkown
|
page read and write
|
|
|
|
7DF563290000
|
unkown image
|
page readonly
|
|
|
|
2AE6DF08000
|
unkown
|
page read and write
|
|
|
|
17FD8B65000
|
unkown
|
page read and write
|
|
|
|
17FD8B84000
|
unkown
|
page read and write
|
|
|
|
2AE6DC80000
|
unkown image
|
page readonly
|
|
|
|
1BA0C5F0000
|
unkown
|
page read and write
|
|
|
|
7FF504875000
|
unkown image
|
page readonly
|
|
|
|
1BA0BCF0000
|
unkown image
|
page readonly
|
|
|
|
5D4000
|
unkown
|
page read and write
|
|
|
|
7DF524A30000
|
unkown image
|
page readonly
|
|
|
|
7FF5594C3000
|
unkown image
|
page readonly
|
|
|
|
17FD8B56000
|
unkown
|
page read and write
|
|
|
|
214691F0000
|
unkown
|
page read and write
|
|
|
|
17FD9002000
|
unkown
|
page read and write
|
|
|
|
1BA0BECF000
|
unkown
|
page read and write
|
|
|
|
62F693B000
|
unkown
|
page read and write
|
|
|
|
1BA0BEC8000
|
unkown
|
page read and write
|
|
|
|
1BA0D200000
|
unkown
|
page read and write
|
|
|
|
17FD8B7F000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown image
|
page readonly
|
|
|
|
7FF59997B000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
62F73FE000
|
unkown
|
page read and write
|
|
|
|
24040C7B000
|
unkown
|
page read and write
|
|
|
|
7FF564968000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE880000
|
unkown image
|
page readonly
|
|
|
|
2AE6DCB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0F12000
|
unkown image
|
page readonly
|
|
|
|
E10000
|
heap private
|
page read and write
|
|
|
|
7FF55926A000
|
unkown image
|
page readonly
|
|
|
|
2A9C6E27000
|
heap default
|
page read and write
|
|
|
|
7DF56E900000
|
unkown image
|
page readonly
|
|
|
|
23CEF907000
|
heap default
|
page read and write
|
|
|
|
214690C0000
|
unkown image
|
page readonly
|
|
|
|
7FF579A3F000
|
unkown image
|
page readonly
|
|
|
|
7DF524A40000
|
unkown image
|
page readonly
|
|
|
|
62F76FF000
|
unkown
|
page read and write
|
|
|
|
2A9C6E3E000
|
unkown
|
page read and write
|
|
|
|
2AE6DE81000
|
unkown
|
page read and write
|
|
|
|
7DF56E910000
|
unkown image
|
page readonly
|
|
|
|
3D7C000
|
unkown
|
page read and write
|
|
|
|
7FF5B0EE2000
|
unkown image
|
page readonly
|
|
|
|
7FF559481000
|
unkown image
|
page readonly
|
|
|
|
214691D0000
|
unkown image
|
page readonly
|
|
|
|
598000
|
unkown
|
page read and write
|
|
|
|
5F3000
|
unkown
|
page read and write
|
|
|
|
17FD8BA5000
|
unkown
|
page read and write
|
|
|
|
5E7000
|
unkown
|
page read and write
|
|
|
|
7FF5B103A000
|
unkown image
|
page readonly
|
|
|
|
7FF57A1D5000
|
unkown image
|
page readonly
|
|
|
|
7DF50E700000
|
unkown image
|
page readonly
|
|
|
|
23CEF810000
|
unkown image
|
page readonly
|
|
|
|
7FF57A3C7000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1163000
|
unkown image
|
page readonly
|
|
|
|
7DF524A50000
|
unkown image
|
page readonly
|
|
|
|
17FD8B80000
|
unkown
|
page read and write
|
|
|
|
E9D24FA000
|
unkown
|
page read and write
|
|
|
|
2F3367B000
|
unkown
|
page read and write
|
|
|
|
17FD8B93000
|
unkown
|
page read and write
|
|
|
|
7FF51AA2A000
|
unkown image
|
page readonly
|
|
|
|
2A9C6E26000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page read and write
|
|
|
|
17FD8B7F000
|
unkown
|
page read and write
|
|
|
|
17FD8B70000
|
unkown
|
page read and write
|
|
|
|
7FF5B10EE000
|
unkown image
|
page readonly
|
|
|
|
2146925E000
|
unkown
|
page read and write
|
|
|
|
7DF563270000
|
unkown image
|
page readonly
|
|
|
|
19B000
|
unkown
|
page read and write
|
|
|
|
1BA0BF02000
|
unkown
|
page read and write
|
|
|
|
23CEF8F0000
|
unkown
|
page read and write
|
|
|
|
62C000
|
unkown
|
page read and write
|
|
|
|
5F3000
|
unkown
|
page read and write
|
|
|
|
7FF5B420F000
|
unkown image
|
page readonly
|
|
|
|
1BA11580000
|
unkown
|
page read and write
|
|
|
|
1BA0CEA0000
|
unkown image
|
page readonly
|
|
|
|
62F747F000
|
unkown
|
page read and write
|
|
|
|
2AE6E200000
|
unkown image
|
page readonly
|
|
|
|
7FF51AAA5000
|
unkown image
|
page readonly
|
|
|
|
5BA000
|
unkown
|
page read and write
|
|
|
|
24040BA0000
|
unkown image
|
page readonly
|
|
|
|
17FD8B7B000
|
unkown
|
page read and write
|
|
|
|
1BA0BE97000
|
unkown
|
page read and write
|
|
|
|
1BA115A4000
|
unkown
|
page read and write
|
|
|
|
7FF5B10BA000
|
unkown image
|
page readonly
|
|
|
|
7FF51ABE9000
|
unkown image
|
page readonly
|
|
|
|
7FF564601000
|
unkown image
|
page readonly
|
|
|
|
214690D0000
|
unkown image
|
page readonly
|
|
|
|
1BA0C000000
|
unkown image
|
page readonly
|
|
|
|
7DF50E702000
|
unkown image
|
page readonly
|
|
|
|
7FF5B136D000
|
unkown image
|
page readonly
|
|
|
|
7FF51A70B000
|
unkown image
|
page readonly
|
|
|
|
2F339FF000
|
unkown
|
page read and write
|
|
|
|
23CF07C0000
|
unkown
|
page read and write
|
|
|
|
1BA0BE7E000
|
unkown
|
page read and write
|
|
|
|
7FF5B1235000
|
unkown image
|
page readonly
|
|
|
|
2AE6DE69000
|
unkown
|
page read and write
|
|
|
|
7FF559494000
|
unkown image
|
page readonly
|
|
|
|
598000
|
unkown
|
page read and write
|
|
|
|
7FF564A5F000
|
unkown image
|
page readonly
|
|
|
|
7FF564960000
|
unkown image
|
page readonly
|
|
|
|
2AE6DC80000
|
unkown image
|
page readonly
|
|
|
|
1BA0C759000
|
unkown
|
page read and write
|
|
|
|
17FD8B7F000
|
unkown
|
page read and write
|
|
|
|
4AE000
|
unkown
|
page readonly
|
|
|
|
7FF564998000
|
unkown image
|
page readonly
|
|
|
|
E9D21BF000
|
unkown
|
page read and write
|
|
|
|
17FD8B78000
|
unkown
|
page read and write
|
|
|
|
17FD8B8D000
|
unkown
|
page read and write
|
|
|
|
7DF5BE870000
|
unkown image
|
page readonly
|
|
|
|
23CEFCA0000
|
heap private
|
page read and write
|
|
|
|
7FF5593FA000
|
unkown image
|
page readonly
|
|
|
|
7DF563280000
|
unkown image
|
page readonly
|
|
|
|
17FD81D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5593ED000
|
unkown image
|
page readonly
|
|
|
|
17FD8BB6000
|
unkown
|
page read and write
|
|
|
|
62F6D77000
|
unkown
|
page read and write
|
|
|
|
320000
|
unkown
|
page read and write
|
|
|
|
7C32A7D000
|
unkown
|
page read and write
|
|
|
|
7FF5B12B1000
|
unkown image
|
page readonly
|
|
|
|
7DF584162000
|
unkown image
|
page readonly
|
|
|
|
7FF5592E0000
|
unkown image
|
page readonly
|
|
|
|
1BA115C0000
|
unkown
|
page read and write
|
|
|
|
7FF5594D2000
|
unkown image
|
page readonly
|
|
|
|
17FD8B78000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5647C1000
|
unkown image
|
page readonly
|
|
|
|
7FF57A39A000
|
unkown image
|
page readonly
|
|
|
|
7FF564A4F000
|
unkown image
|
page readonly
|
|
|
|
7FF5592E8000
|
unkown image
|
page readonly
|
|
|
|
17FD8BCC000
|
unkown
|
page read and write
|
|
|
|
17FD8B92000
|
unkown
|
page read and write
|
|
|
|
5D5000
|
unkown
|
page read and write
|
|
|
|
1006000
|
unkown image
|
page readonly
|
|
|
|
5D8000
|
unkown
|
page read and write
|
|
|
|
7DF56E902000
|
unkown image
|
page readonly
|
|
|
|
5CE000
|
unkown
|
page read and write
|
|
|
|
17FD8B79000
|
unkown
|
page read and write
|
|
|
|
7FF504886000
|
unkown image
|
page readonly
|
|
|
|
17FD8B99000
|
unkown
|
page read and write
|
|
|
|
1BA0D28A000
|
unkown
|
page read and write
|
|
|
|
17FD900A000
|
unkown
|
page read and write
|
|
|
|
7FF51A9F4000
|
unkown image
|
page readonly
|
|
|
|
2AE6DE81000
|
unkown
|
page read and write
|
|
|
|
2A9C6E40000
|
unkown
|
page read and write
|
|
|
|
23CEF860000
|
unkown
|
page read and write
|
|
|
|
7FF564B01000
|
unkown image
|
page readonly
|
|
|
|
D90000
|
unkown image
|
page readonly
|
|
|
|
17FD8B92000
|
unkown
|
page read and write
|
|
|
|
17FD8B82000
|
unkown
|
page read and write
|
|
|
|
7FF57A3C2000
|
unkown image
|
page readonly
|
|
|
|
7FF57A374000
|
unkown image
|
page readonly
|
|
|
|
17FD8BC1000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A27000
|
unkown image
|
page readonly
|
|
|
|
17FD8271000
|
unkown
|
page read and write
|
|
|
|
240410D0000
|
unkown image
|
page readonly
|
|
|
|
7FF57A306000
|
unkown image
|
page readonly
|
|
|
|
7DF56E8F0000
|
unkown image
|
page readonly
|
|
|
|
2F3337C000
|
unkown
|
page read and write
|
|
|
|
21469300000
|
unkown
|
page read and write
|
|
|
|
2A9C6E1B000
|
heap default
|
page read and write
|
|
|
|
5EA000
|
unkown
|
page read and write
|
|
|
|
1BA0C713000
|
unkown
|
page read and write
|
|
|
|
62C000
|
unkown
|
page read and write
|
|
|
|
1001000
|
unkown image
|
page execute read
|
|
|
|
DA0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5B4A84000
|
unkown image
|
page readonly
|
|
|
|
17FD8B86000
|
unkown
|
page read and write
|
|
|
|
106A000
|
unkown image
|
page readonly
|
|
|
|
2AE6E000000
|
unkown image
|
page readonly
|
|
|
|
7FF559429000
|
unkown image
|
page readonly
|
|
|
|
7DF5BB162000
|
unkown image
|
page readonly
|
|
|
|
1BA11650000
|
unkown
|
page read and write
|
|
|
|
7FF5594C6000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF57A031000
|
unkown image
|
page readonly
|
|
|
|
24040C4D000
|
unkown
|
page read and write
|
|
|
|
1BA0D2F5000
|
unkown
|
page read and write
|
|
|
|
7FF5594AA000
|
unkown image
|
page readonly
|
|
|
|
7DF584160000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE872000
|
unkown image
|
page readonly
|
|
|
|
2F3377E000
|
unkown
|
page read and write
|
|
|
|
1BA0BE56000
|
unkown
|
page read and write
|
|
|
|
21469261000
|
unkown
|
page read and write
|
|
|
|
7FF5B4901000
|
unkown image
|
page readonly
|
|
|
|
2A9C6E3E000
|
unkown
|
page read and write
|
|
|
|
62F71FB000
|
unkown
|
page read and write
|
|
|
|
17FD8B5A000
|
unkown
|
page read and write
|
|
|
|
2AE6DE00000
|
unkown
|
page read and write
|
|
|
|
2F32F9E000
|
unkown
|
page read and write
|
|
|
|
E9D25FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B4224000
|
unkown image
|
page readonly
|
|
|
|
365D67B000
|
unkown
|
page read and write
|
|
|
|
62F77F9000
|
unkown
|
page read and write
|
|
|
|
17FD8BAE000
|
unkown
|
page read and write
|
|
|
|
17FD901E000
|
unkown
|
page read and write
|
|
|
|
7FF57A2BF000
|
unkown image
|
page readonly
|
|
|
|
A10000
|
unkown image
|
page readonly
|
|
|
|
17FD824F000
|
unkown
|
page read and write
|
|
|
|
23CF0760000
|
unkown
|
page read and write
|
|
|
|
17FD8B96000
|
unkown
|
page read and write
|
|
|
|
7FF51AC44000
|
unkown image
|
page readonly
|
|
|
|
2AE6DE29000
|
unkown
|
page read and write
|
|
|
|
7FF5594D7000
|
unkown image
|
page readonly
|
|
|
|
7FF5593DF000
|
unkown image
|
page readonly
|
|
|
|
7FF57A371000
|
unkown image
|
page readonly
|
|
|
|
17FD8B70000
|
unkown
|
page read and write
|
|
|
|
7FF5B4351000
|
unkown image
|
page readonly
|
|
|
|
7FF51AB47000
|
unkown image
|
page readonly
|
|
|
|
17FD8B88000
|
unkown
|
page read and write
|
|
|
|
17FD8B7F000
|
unkown
|
page read and write
|
|
|
|
5EA000
|
unkown
|
page read and write
|
|
|
|
17FD824B000
|
unkown
|
page read and write
|
|
|
|
62F7679000
|
unkown
|
page read and write
|
|
|
|
23CEF800000
|
unkown
|
page read and write
|
|
|
|
7FF5B10B4000
|
unkown image
|
page readonly
|
|
|
|
7FF559484000
|
unkown image
|
page readonly
|
|
|
|
3C00000
|
unkown
|
page read and write
|
|
|
|
24040C29000
|
unkown
|
page read and write
|
|
|
|
1BA0D285000
|
unkown
|
page read and write
|
|
|
|
7FF504967000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1299000
|
unkown image
|
page readonly
|
|
|
|
17FD8B7F000
|
unkown
|
page read and write
|
|
|
|
23CF0770000
|
unkown
|
page read and write
|
|
|
|
7DF56E910000
|
unkown image
|
page readonly
|
|
|
|
3613000
|
heap private
|
page read and write
|
|
|
|
7FF51AC41000
|
unkown image
|
page readonly
|
|
|
|
2AE6DE3C000
|
unkown
|
page read and write
|
|
|
|
17FD8BCC000
|
unkown
|
page read and write
|
|
|
|
7FF5B10F0000
|
unkown image
|
page readonly
|
|
|
|
21469080000
|
unkown image
|
page read and write
|
|
|
|
7FF51AA3F000
|
unkown image
|
page readonly
|
|
|
|
5F8000
|
unkown
|
page read and write
|
|
|
|
1BA0D2FB000
|
unkown
|
page read and write
|
|
|
|
17FD9002000
|
unkown
|
page read and write
|
|
|
|
17FD8B7A000
|
unkown
|
page read and write
|
|
|
|
4A1000
|
unkown
|
page execute read
|
|
|
|
1093000
|
unkown image
|
page read and write
|
|
|
|
7FF57A1D0000
|
unkown image
|
page readonly
|
|
|
|
7FF579E77000
|
unkown image
|
page readonly
|
|
|
|
1BA0CE50000
|
unkown image
|
page readonly
|
|
|
|
2A9C6E40000
|
unkown
|
page read and write
|
|
|
|
7FF5B115D000
|
unkown image
|
page readonly
|
|
|
|
1BA0BEAE000
|
unkown
|
page read and write
|
|
|
|
7FF51AAA0000
|
unkown image
|
page readonly
|
|
|
|
1094000
|
unkown image
|
page write copy
|
|
|
|
7DF584180000
|
unkown image
|
page readonly
|
|
|
|
5B2000
|
unkown
|
page read and write
|
|
|
|
214690F0000
|
heap default
|
page read and write
|
|
|
|
7FF57A2C1000
|
unkown image
|
page readonly
|
|
|
|
7FF5B13A3000
|
unkown image
|
page readonly
|
|
|
|
17FD825E000
|
unkown
|
page read and write
|
|
|
|
7FF564A82000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1157000
|
unkown image
|
page readonly
|
|
|
|
24041250000
|
unkown image
|
page readonly
|
|
|
|
1100000
|
unkown image
|
page readonly
|
|
|
|
2146925B000
|
unkown
|
page read and write
|
|
|
|
17FD8253000
|
unkown
|
page read and write
|
|
|
|
7DF524A32000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4AAA000
|
unkown image
|
page readonly
|
|
|
|
7FF57A3B3000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0E2A000
|
unkown image
|
page readonly
|
|
|
|
7FF51AA43000
|
unkown image
|
page readonly
|
|
|
|
62F72FB000
|
unkown
|
page read and write
|
|
|
|
17FD9061000
|
unkown
|
page read and write
|
|
|
|
54A000
|
heap default
|
page read and write
|
|
|
|
7DF5BB152000
|
unkown image
|
page readonly
|
|
|
|
17FD900A000
|
unkown
|
page read and write
|
|
|
|
2AE6DDD0000
|
unkown
|
page read and write
|
|
|
|
17FD8BB4000
|
unkown
|
page read and write
|
|
|
|
7FF5B1072000
|
unkown image
|
page readonly
|
|
|
|
7FF57A2E6000
|
unkown image
|
page readonly
|
|
|
|
17FD8B83000
|
unkown
|
page read and write
|
|
|
|
17FD8B93000
|
unkown
|
page read and write
|
|
|
|
3613000
|
heap private
|
page read and write
|
|
|
|
17FD8B5A000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
62F79FF000
|
unkown
|
page read and write
|
|
|
|
2AE6DE8D000
|
unkown
|
page read and write
|
|
|
|
17FD8B57000
|
unkown
|
page read and write
|
|
|
|
17FD8B8E000
|
unkown
|
page read and write
|
|
|
|
17FD8B7C000
|
unkown
|
page read and write
|
|
|
|
E9D257F000
|
unkown
|
page read and write
|
|
|
|
E52B3FB000
|
unkown
|
page read and write
|
|
|
|
5EA000
|
unkown
|
page read and write
|
|
|
|
7FF51A9DB000
|
unkown image
|
page readonly
|
|
|
|
7FF564B17000
|
unkown image
|
page readonly
|
|
|
|
7FF504953000
|
unkown image
|
page readonly
|
|
|
|
17FD8B8A000
|
unkown
|
page read and write
|
|
|
|
1BA0BEE0000
|
unkown
|
page read and write
|
|
|
|
597000
|
unkown
|
page read and write
|
|
|
|
7FF564B46000
|
unkown image
|
page readonly
|
|
|
|
7FF51AC86000
|
unkown image
|
page readonly
|
|
|
|
17FD8B8D000
|
unkown
|
page read and write
|
|
|
|
7FF51AC83000
|
unkown image
|
page readonly
|
|
|
|
17FD8850000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4A9B000
|
unkown image
|
page readonly
|
|
|
|
7FF564607000
|
unkown image
|
page readonly
|
|
|
|
17FD8B8C000
|
unkown
|
page read and write
|
|
|
|
365D77B000
|
unkown
|
page read and write
|
|
|
|
17FD82C3000
|
unkown
|
page read and write
|
|
|
|
23CEFAD0000
|
unkown image
|
page readonly
|
|
|
|
5C1000
|
unkown
|
page read and write
|
|
|
|
2F337FF000
|
unkown
|
page read and write
|
|
|
|
17FD8254000
|
unkown
|
page read and write
|
|
|
|
2AE6DCA0000
|
unkown image
|
page readonly
|
|
|
|
7FF564965000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1377000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1265000
|
unkown image
|
page readonly
|
|
|
|
3A7F000
|
unkown
|
page read and write
|
|
|
|
17FD8B73000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A97000
|
unkown image
|
page readonly
|
|
|
|
7FF51AC97000
|
unkown image
|
page readonly
|
|
|
|
7DF50E720000
|
unkown image
|
page readonly
|
|
|
|
2A9C6BD0000
|
unkown image
|
page read and write
|
|
|
|
2146924F000
|
unkown
|
page read and write
|
|
|
|
17FD8BAA000
|
unkown
|
page read and write
|
|
|
|
7FF57A37D000
|
unkown image
|
page readonly
|
|
|
|
1BA0D254000
|
unkown
|
page read and write
|
|
|
|
17FD8B78000
|
unkown
|
page read and write
|
|
|
|
1BA11470000
|
unkown
|
page read and write
|
|
|
|
2A9C6D60000
|
unkown image
|
page readonly
|
|
|
|
1BA0BF13000
|
unkown
|
page read and write
|
|
|
|
17FD8B86000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A29000
|
unkown image
|
page readonly
|
|
|
|
7FF57A197000
|
unkown image
|
page readonly
|
|
|
|
7FF55948D000
|
unkown image
|
page readonly
|
|
|
|
17FD9002000
|
unkown
|
page read and write
|
|
|
|
7FF50491D000
|
unkown image
|
page readonly
|
|
|
|
23CEFCA5000
|
heap private
|
page read and write
|
|
|
|
1BA0D2F8000
|
unkown
|
page read and write
|
|
|
|
7FF564A6D000
|
unkown image
|
page readonly
|
|
|
|
7DF584162000
|
unkown image
|
page readonly
|
|
|
|
17FD89E0000
|
unkown
|
page read and write
|
|
|
|
7DF50E700000
|
unkown image
|
page readonly
|
|
|
|
1BA11460000
|
unkown
|
page read and write
|
|
|
|
7FF5B0F39000
|
unkown image
|
page readonly
|
|
|
|
1BA11690000
|
unkown
|
page read and write
|
|
|
|
7FF51AC92000
|
unkown image
|
page readonly
|
|
|
|
2AE6DE61000
|
unkown
|
page read and write
|
|
|
|
7FF504911000
|
unkown image
|
page readonly
|
|
|
|
23CF00C0000
|
unkown image
|
page readonly
|
|
|
|
5BA000
|
unkown
|
page read and write
|
|
|
|
17FD9002000
|
unkown
|
page read and write
|
|
|
|
17FD8B92000
|
unkown
|
page read and write
|
|
|
|
1BA0D2F1000
|
unkown
|
page read and write
|
|
|
|
7FF51AB58000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE890000
|
unkown image
|
page readonly
|
|
|
|
23CEF880000
|
unkown
|
page read and write
|
|
|
|
17FD8B66000
|
unkown
|
page read and write
|
|
|
|
17FD8B94000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1003000
|
unkown image
|
page readonly
|
|
|
|
17FD8B89000
|
unkown
|
page read and write
|
|
|
|
17FD8B7F000
|
unkown
|
page read and write
|
|
|
|
17FD8B78000
|
unkown
|
page read and write
|
|
|
|
1090000
|
unkown image
|
page write copy
|
|
|
|
23CEF810000
|
unkown image
|
page readonly
|
|
|
|
7DF584160000
|
unkown image
|
page readonly
|
|
|
|
7FF5594D7000
|
unkown image
|
page readonly
|
|
|
|
F5E000
|
unkown
|
page read and write
|
|
|
|
17FD8B5A000
|
unkown
|
page read and write
|
|
|
|
31C000
|
unkown
|
page read and write
|
|
|
|
1BA11588000
|
unkown
|
page read and write
|
|
|
|
2AE6DE13000
|
unkown
|
page read and write
|
|
|
|
592000
|
unkown
|
page read and write
|
|
|
|
483DD7B000
|
unkown
|
page read and write
|
|
|
|
7FF5B1309000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
17FD8BB7000
|
unkown
|
page read and write
|
|
|
|
24040BD0000
|
unkown image
|
page readonly
|
|
|
|
17FD8313000
|
unkown
|
page read and write
|
|
|
|
7FF5B0B4D000
|
unkown image
|
page readonly
|
|
|
|
1BA0D259000
|
unkown
|
page read and write
|
|
|
|
7DF5BB150000
|
unkown image
|
page readonly
|
|
|
|
540000
|
heap default
|
page read and write
|
|
|
|
23CEFC50000
|
unkown image
|
page readonly
|
|
|
|
1BA0C590000
|
unkown image
|
page read and write
|
|
|
|
1BA0BD20000
|
heap default
|
page read and write
|
|
|
|
7DF563272000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4911000
|
unkown image
|
page readonly
|
|
|
|
7C32B79000
|
unkown
|
page read and write
|
|
|
|
17FD8B8D000
|
unkown
|
page read and write
|
|
|
|
17FD8B89000
|
unkown
|
page read and write
|
|
|
|
7FF564927000
|
unkown image
|
page readonly
|
|
|
|
21469600000
|
unkown image
|
page readonly
|
|
|
|
17FD8B89000
|
unkown
|
page read and write
|
|
|
|
E9D213F000
|
unkown
|
page read and write
|
|
|
|
7FF558F81000
|
unkown image
|
page readonly
|
|
|
|
3AF0000
|
heap private
|
page read and write
|
|
|
|
17FD8B00000
|
unkown
|
page read and write
|
|
|
|
2AE6DC60000
|
unkown image
|
page read and write
|
|
|
|
E52B6FE000
|
unkown
|
page read and write
|
|
|
|
7FF5B48E8000
|
unkown image
|
page readonly
|
|
|
|
23CF0520000
|
unkown
|
page read and write
|
|
|
|
1BA0C210000
|
unkown image
|
page readonly
|
|
|
|
4AA000
|
unkown
|
page readonly
|
|
|
|
17FD9063000
|
unkown
|
page read and write
|
|
|
|
7DF5BB152000
|
unkown image
|
page readonly
|
|
|
|
2A9C6BF0000
|
unkown image
|
page readonly
|
|
|
|
7FF57A38B000
|
unkown image
|
page readonly
|
|
|
|
24040C51000
|
unkown
|
page read and write
|
|
|
|
58B000
|
unkown
|
page read and write
|
|
|
|
7FF59997B000
|
unkown image
|
page readonly
|
|
|
|
365D877000
|
unkown
|
page read and write
|
|
|
|
17FD8B78000
|
unkown
|
page read and write
|
|
|
|
7FF504873000
|
unkown image
|
page readonly
|
|
|
|
17FD81F0000
|
unkown
|
page read and write
|
|
|
|
574000
|
heap default
|
page read and write
|
|
|
|
7FF5B4AC3000
|
unkown image
|
page readonly
|
|
|
|
17FD9002000
|
unkown
|
page read and write
|
|
|
|
7DF56E902000
|
unkown image
|
page readonly
|
|
|
|
1BA116E0000
|
unkown
|
page read and write
|
|
|
|
7FF55941D000
|
unkown image
|
page readonly
|
|
|
|
21469281000
|
unkown
|
page read and write
|
|
|
|
7FF57A2F2000
|
unkown image
|
page readonly
|
|
|
|
17FD823C000
|
unkown
|
page read and write
|
|
|
|
7FF5648EA000
|
unkown image
|
page readonly
|
|
|
|
17FD8229000
|
unkown
|
page read and write
|
|
|
|
17FD81C0000
|
heap default
|
page read and write
|
|
|
|
2A9C6E51000
|
unkown
|
page read and write
|
|
|
|
1BA115B0000
|
unkown
|
page read and write
|
|
|
|
7FF51AB8F000
|
unkown image
|
page readonly
|
|
|
|
17FD8B9E000
|
unkown
|
page read and write
|
|
|
|
62F6DFE000
|
unkown
|
page read and write
|
|
|
|
7FF57A2EA000
|
unkown image
|
page readonly
|
|
|
|
1BA0BE83000
|
unkown
|
page read and write
|
|
|
|
17FD8B92000
|
unkown
|
page read and write
|
|
|
|
23CEF94B000
|
unkown
|
page read and write
|
|
|
|
2A9C6D50000
|
unkown image
|
page readonly
|
|
|
|
1BA0BE9C000
|
unkown
|
page read and write
|
|
|
|
7FF57A2D3000
|
unkown image
|
page readonly
|
|
|
|
7FF5048B9000
|
unkown image
|
page readonly
|
|
|
|
1BA0BE13000
|
unkown
|
page read and write
|
|
|
|
365D57D000
|
unkown
|
page read and write
|
|
|
|
7FF5649D5000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1085000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4A16000
|
unkown image
|
page readonly
|
|
|
|
62F6EFC000
|
unkown
|
page read and write
|
|
|
|
24040D08000
|
unkown
|
page read and write
|
|
|
|
593000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5048A6000
|
unkown image
|
page readonly
|
|
|
|
7FF5B114A000
|
unkown image
|
page readonly
|
|
|
|
7FF5B115A000
|
unkown image
|
page readonly
|
|
|
|
4B5000
|
heap default
|
page read and write
|
|
|
|
2AE6E380000
|
unkown image
|
page readonly
|
|
|
|
1BA0C718000
|
unkown
|
page read and write
|
|
|
|
7FF51ABDD000
|
unkown image
|
page readonly
|
|
|
|
17FD8B9B000
|
unkown
|
page read and write
|
|
|
|
7FF5B11F1000
|
unkown image
|
page readonly
|
|
|
|
1BA0C759000
|
unkown
|
page read and write
|
|
|
|
17FD8B80000
|
unkown
|
page read and write
|
|
|
|
7FF564B52000
|
unkown image
|
page readonly
|
|
|
|
17FD8BB6000
|
unkown
|
page read and write
|
|
|
|
17FD8B6E000
|
unkown
|
page read and write
|
|
|
|
21469780000
|
unkown image
|
page readonly
|
|
|
|
7C32C7E000
|
unkown
|
page read and write
|
|
|
|
23CEF943000
|
unkown
|
page read and write
|
|
|
|
7FF51A91B000
|
unkown image
|
page readonly
|
|
|
|
62C000
|
unkown
|
page read and write
|
|
|
|
24040B50000
|
unkown image
|
page read and write
|
|
|
|
17FD8B5A000
|
unkown
|
page read and write
|
|
|
|
2A9C6E40000
|
unkown
|
page read and write
|
|
|
|
1BA0BCD0000
|
unkown image
|
page readonly
|
|
|
|
17FD8B7A000
|
unkown
|
page read and write
|
|
|
|
7FF57A387000
|
unkown image
|
page readonly
|
|
|
|
1BA0C390000
|
unkown image
|
page readonly
|
|
|
|
5F8000
|
unkown
|
page read and write
|
|
|
|
7DF50E702000
|
unkown image
|
page readonly
|
|
|
|
17FD8289000
|
unkown
|
page read and write
|
|
|
|
7FF57A30D000
|
unkown image
|
page readonly
|
|
|
|
21469313000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A87000
|
unkown image
|
page readonly
|
|
|
|
1BA0D2A5000
|
unkown
|
page read and write
|
|
|
|
24040C86000
|
unkown
|
page read and write
|
|
|
|
17FD8B82000
|
unkown
|
page read and write
|
|
|
|
5E3000
|
unkown
|
page read and write
|
|
|
|
7FF5B4AD7000
|
unkown image
|
page readonly
|
|
|
|
7DF584170000
|
unkown image
|
page readonly
|
|
|
|
483DA7B000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page read and write
|
|
|
|
23CEF7F0000
|
unkown image
|
page read and write
|
|
|
|
7FF504927000
|
unkown image
|
page readonly
|
|
|
|
23CEF830000
|
unkown image
|
page readonly
|
|
|
|
7FF57A15A000
|
unkown image
|
page readonly
|
|
|
|
17FD8B8A000
|
unkown
|
page read and write
|
|
|
|
7FF5B1307000
|
unkown image
|
page readonly
|
|
|
|
7FF57A3B6000
|
unkown image
|
page readonly
|
|
|
|
1BA116E0000
|
unkown
|
page read and write
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
7FF5B10A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5593F6000
|
unkown image
|
page readonly
|
|
|
|
17FD8B9B000
|
unkown
|
page read and write
|
|
|
|
17FD8BB7000
|
unkown
|
page read and write
|
|
|
|
23CEF8A0000
|
unkown image
|
page readonly
|
|
|
|
17FD8251000
|
unkown
|
page read and write
|
|
|
|
1BA0BCC0000
|
heap private
|
page read and write
|
|
|
|
17FD8250000
|
unkown
|
page read and write
|
|
|
|
5BE000
|
unkown
|
page read and write
|
|
|
|
2A9C6E36000
|
unkown
|
page read and write
|
|
|
|
7DF56E8F2000
|
unkown image
|
page readonly
|
|
|
|
7C32AFE000
|
unkown
|
page read and write
|
|
|
|
7FF579E71000
|
unkown image
|
page readonly
|
|
|
|
24040BC0000
|
heap default
|
page read and write
|
|
|
|
7FF55915B000
|
unkown image
|
page readonly
|
|
|
|
7FF564B0D000
|
unkown image
|
page readonly
|
|
|
|
2A9C7090000
|
unkown image
|
page readonly
|
|
|
|
17FD8190000
|
unkown image
|
page readonly
|
|
|
|
17FD8BA9000
|
unkown
|
page read and write
|
|
|
|
2AE6DF00000
|
unkown
|
page read and write
|
|
|
|
7FF5592E5000
|
unkown image
|
page readonly
|
|
|
|
2A9C6E3E000
|
unkown
|
page read and write
|
|
|
|
7FF57A1D8000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF51A965000
|
unkown image
|
page readonly
|
|
|
|
5BE000
|
unkown
|
page read and write
|
|
|
|
7FF5B12C3000
|
unkown image
|
page readonly
|
|
|
|
7FF564B04000
|
unkown image
|
page readonly
|
|
|
|
7DF461140000
|
unkown image
|
page readonly
|
|
|
|
2A9C6F10000
|
unkown image
|
page readonly
|
|
|
|
7FF564A9D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0C38000
|
unkown image
|
page readonly
|
|
|
|
4B0000
|
heap default
|
page read and write
|
|
|
|
5BE000
|
unkown
|
page read and write
|
|
|
|
2AE6DF02000
|
unkown
|
page read and write
|
|
|
|
2A9C6E52000
|
unkown
|
page read and write
|
|
|
|
483DAFE000
|
unkown
|
page read and write
|
|
|
|
F9E000
|
unkown
|
page read and write
|
|
|
|
17FD8B18000
|
unkown
|
page read and write
|
|
|
|
7FF5B49F6000
|
unkown image
|
page readonly
|
|
|
|
7FF51ABBA000
|
unkown image
|
page readonly
|
|
|
|
23CEFC90000
|
unkown
|
page read and write
|
|
|
|
17FD8B78000
|
unkown
|
page read and write
|
|
|
|
7C32BFC000
|
unkown
|
page read and write
|
|
|
|
24040BF0000
|
unkown
|
page read and write
|
|
|
|
2A9C6E4A000
|
unkown
|
page read and write
|
|
|
|
7FF5B1078000
|
unkown image
|
page readonly
|
|
|
|
17FD8B24000
|
unkown
|
page read and write
|
|
|
|
7FF5B12A4000
|
unkown image
|
page readonly
|
|
|
|
7FF51ABE7000
|
unkown image
|
page readonly
|
|
|
|
7FF559427000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1114000
|
unkown image
|
page readonly
|
|
|
|
7FF559416000
|
unkown image
|
page readonly
|
|
|
|
17FD8B65000
|
unkown
|
page read and write
|
|
|
|
7FF57A2CF000
|
unkown image
|
page readonly
|
|
|
|
7FF504967000
|
unkown image
|
page readonly
|
|
|
|
1BA0D300000
|
unkown
|
page read and write
|
|
|
|
2F33577000
|
unkown
|
page read and write
|
|
|
|
7FF5B0F2C000
|
unkown image
|
page readonly
|
|
|
|
24040B70000
|
unkown image
|
page readonly
|
|
|
|
1BA0D247000
|
unkown
|
page read and write
|
|
|
|
1BA0D400000
|
unkown
|
page read and write
|
|
|
|
7FF5641CF000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4918000
|
unkown image
|
page readonly
|
|
|
|
7FF51A529000
|
unkown image
|
page readonly
|
|
|
|
7FF51A96F000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1290000
|
unkown image
|
page readonly
|
|
|
|
17FD8B97000
|
unkown
|
page read and write
|
|
|
|
7FF57A2DD000
|
unkown image
|
page readonly
|
|
|
|
7DF5BB162000
|
unkown image
|
page readonly
|
|
|
|
10EF000
|
unkown image
|
page readonly
|
|
|
|
17FD89F0000
|
unkown image
|
page read and write
|
|
|
|
7FF50493A000
|
unkown image
|
page readonly
|
|
|
|
17FD8B82000
|
unkown
|
page read and write
|
|
|
|
1005000
|
unkown image
|
page read and write
|
|
|
|
E52AFCF000
|
unkown
|
page read and write
|
|
|
|
17FD8316000
|
unkown
|
page read and write
|
|
|
|
17FD8B94000
|
unkown
|
page read and write
|
|
|
|
3BFF000
|
unkown
|
page read and write
|
|
|
|
23CEFCB0000
|
unkown
|
page read and write
|
|
|
|
3613000
|
heap private
|
page read and write
|
|
|
|
17FD8BAE000
|
unkown
|
page read and write
|
|
|
|
7FF5592C6000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
17FD8BAF000
|
unkown
|
page read and write
|
|
|
|
1BA0CC61000
|
unkown
|
page read and write
|
|
|
|
1BA0CE70000
|
unkown image
|
page readonly
|
|
|
|
1BA0CE80000
|
unkown image
|
page readonly
|
|
|
|
7FF51AAD8000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0B77000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
17FD8B7B000
|
unkown
|
page read and write
|
|
|
|
17FD8B97000
|
unkown
|
page read and write
|
|
|
|
7FF5B421D000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE870000
|
unkown image
|
page readonly
|
|
|
|
7FF5B138A000
|
unkown image
|
page readonly
|
|
|
|
17FD8BA0000
|
unkown
|
page read and write
|
|
|
|
17FD8B7C000
|
unkown
|
page read and write
|
|
|
|
1BA0BE87000
|
unkown
|
page read and write
|
|
|
|
17FD900A000
|
unkown
|
page read and write
|
|
|
|
17FD8B89000
|
unkown
|
page read and write
|
|
|
|
17FD8B7B000
|
unkown
|
page read and write
|
|
|
|
E52AF4F000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A81000
|
unkown image
|
page readonly
|
|
|
|
17FD825D000
|
unkown
|
page read and write
|
|
|
|
7DF563282000
|
unkown image
|
page readonly
|
|
|
|
7FF564A51000
|
unkown image
|
page readonly
|
|
|
|
56B000
|
heap default
|
page read and write
|
|
|
|
7FF5B1361000
|
unkown image
|
page readonly
|
|
|
|
7FF504956000
|
unkown image
|
page readonly
|
|
|
|
1BA115C4000
|
unkown
|
page read and write
|
|
|
|
7DF50E712000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1063000
|
unkown image
|
page readonly
|
|
|
|
483E07F000
|
unkown
|
page read and write
|
|
|
|
1BA115A1000
|
unkown
|
page read and write
|
|
|
|
17FD8B96000
|
unkown
|
page read and write
|
|
|
|
7DF422900000
|
unkown image
|
page readonly
|
|
|
|
21469256000
|
unkown
|
page read and write
|
|
|
|
E52AECB000
|
unkown
|
page read and write
|
|
There are 1092 hidden memdumps, click here to show them.