Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\7HHrcwZjLI.exe
|
'C:\Users\user\Desktop\7HHrcwZjLI.exe'
|
 |
|
|
C:\Users\user\Desktop\7HHrcwZjLI.exe
|
'C:\Users\user\Desktop\7HHrcwZjLI.exe'
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://dypage.duckdns.org/remcos_d_QUBXVO174.b
|
|
||
|
dyn-wave.duckdns.org
|
|
||
|
http://backupsoldyn.duckdns.org/remcos_d_QUBXVO174.bin
|
unknown
|
 |
|
|
http://dypage.duckdns.org/remcos_d_QUBXVO174.binhttp://backupsoldyn.duckdns.org/remcos_d_QUBXVO174.b
|
unknown
|
|
|
|
http://dypage.duckdns.org/remcos_d_QUBXVO174.bin
|
23.146.242.85
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
dypage.duckdns.org
|
23.146.242.85
|
|
|
|
dyn-wave.duckdns.org
|
23.146.241.70
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
23.146.241.70
|
dyn-wave.duckdns.org
|
Reserved
|
|
|
|
23.146.242.85
|
dypage.duckdns.org
|
Reserved
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Remcos-2LBKGP
|
exepath
|
|
|
|
HKEY_CURRENT_USER\Software\Remcos-2LBKGP
|
licence
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2CD0000
|
unkown
|
page execute and read and write
|
|
|
|
860000
|
heap default
|
page read and write
|
|
|
|
7DF451A90000
|
unkown image
|
page readonly
|
|
|
|
7FF549DE4000
|
unkown image
|
page readonly
|
|
|
|
910000
|
unkown
|
page read and write
|
|
|
|
C40000
|
unkown image
|
page readonly
|
|
|
|
7FF549DD7000
|
unkown image
|
page readonly
|
|
|
|
7FF549D3D000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD39D000
|
unkown image
|
page readonly
|
|
|
|
2C10000
|
unkown image
|
page readonly
|
|
|
|
ABBB17E000
|
unkown
|
page read and write
|
|
|
|
1E57C500000
|
unkown
|
page read and write
|
|
|
|
7FF5B0EC6000
|
unkown image
|
page readonly
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD394000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7FF562A81000
|
unkown image
|
page readonly
|
|
|
|
7FF525BB3000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD2E1000
|
unkown image
|
page readonly
|
|
|
|
2DF8000
|
heap private
|
page read and write
|
|
|
|
1E57BCA6000
|
unkown
|
page read and write
|
|
|
|
1E18D000
|
unkown
|
page read and write
|
|
|
|
2B60D5B0000
|
unkown
|
page read and write
|
|
|
|
7FF5B0E87000
|
unkown image
|
page readonly
|
|
|
|
7FF545D1D000
|
unkown image
|
page readonly
|
|
|
|
2220000
|
unkown image
|
page readonly
|
|
|
|
7FF545B37000
|
unkown image
|
page readonly
|
|
|
|
2B608E80000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1DE9A000
|
unkown
|
page read and write
|
|
|
|
7FF562A56000
|
unkown image
|
page readonly
|
|
|
|
20C220D0000
|
unkown image
|
page readonly
|
|
|
|
7FF58000A000
|
unkown image
|
page readonly
|
|
|
|
1DABF000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
23FB1A00000
|
unkown
|
page read and write
|
|
|
|
7FF545C92000
|
unkown image
|
page readonly
|
|
|
|
1E57C588000
|
unkown
|
page read and write
|
|
|
|
2B60D617000
|
unkown
|
page read and write
|
|
|
|
1E57C573000
|
unkown
|
page read and write
|
|
|
|
1E57C565000
|
unkown
|
page read and write
|
|
|
|
7FF5AD0B5000
|
unkown image
|
page readonly
|
|
|
|
2B608013000
|
unkown
|
page read and write
|
|
|
|
20C220D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B06AB000
|
unkown image
|
page readonly
|
|
|
|
7FF57FF44000
|
unkown image
|
page readonly
|
|
|
|
2B608D61000
|
unkown
|
page read and write
|
|
|
|
74A000
|
heap default
|
page read and write
|
|
|
|
7FF525B74000
|
unkown image
|
page readonly
|
|
|
|
1F8A64B0000
|
unkown
|
page read and write
|
|
|
|
2B60D5E0000
|
unkown
|
page read and write
|
|
|
|
7DF56CD90000
|
unkown image
|
page readonly
|
|
|
|
ABBB0FE000
|
unkown
|
page read and write
|
|
|
|
2B60D480000
|
unkown
|
page read and write
|
|
|
|
7FF549D33000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD2B7000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
730000
|
unkown
|
page read and write
|
|
|
|
2B60D4A4000
|
unkown
|
page read and write
|
|
|
|
7FF5AD228000
|
unkown image
|
page readonly
|
|
|
|
2B609300000
|
unkown
|
page read and write
|
|
|
|
1F8A6930000
|
unkown image
|
page readonly
|
|
|
|
1E14D000
|
unkown
|
page read and write
|
|
|
|
2B60D6B5000
|
unkown
|
page read and write
|
|
|
|
7DF553BE0000
|
unkown image
|
page readonly
|
|
|
|
1D4FF000
|
unkown
|
page read and write
|
|
|
|
2B608700000
|
unkown
|
page read and write
|
|
|
|
1E57CAC2000
|
unkown
|
page read and write
|
|
|
|
7FF545C7D000
|
unkown image
|
page readonly
|
|
|
|
20C22600000
|
unkown image
|
page readonly
|
|
|
|
7DF5B71A0000
|
unkown image
|
page readonly
|
|
|
|
16F8FA00000
|
unkown
|
page read and write
|
|
|
|
7FF549DFA000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1F8A6488000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1E57BC4B000
|
unkown
|
page read and write
|
|
|
|
1F8A7260000
|
unkown
|
page read and write
|
|
|
|
7FF5AD18D000
|
unkown image
|
page readonly
|
|
|
|
7FF545D17000
|
unkown image
|
page readonly
|
|
|
|
20C22790000
|
unkown image
|
page readonly
|
|
|
|
7FF549D1F000
|
unkown image
|
page readonly
|
|
|
|
2B60D5E0000
|
unkown
|
page read and write
|
|
|
|
7FF57FE78000
|
unkown image
|
page readonly
|
|
|
|
7FF549D2F000
|
unkown image
|
page readonly
|
|
|
|
16F8FA70000
|
unkown
|
page read and write
|
|
|
|
2B608713000
|
unkown
|
page read and write
|
|
|
|
93F000
|
unkown
|
page read and write
|
|
|
|
7FF545C73000
|
unkown image
|
page readonly
|
|
|
|
3194C7E000
|
unkown
|
page read and write
|
|
|
|
7FF562CAF000
|
unkown image
|
page readonly
|
|
|
|
2B60D6F9000
|
unkown
|
page read and write
|
|
|
|
7FF525883000
|
unkown image
|
page readonly
|
|
|
|
2D6E000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
1E57BC70000
|
unkown
|
page read and write
|
|
|
|
1E57BC29000
|
unkown
|
page read and write
|
|
|
|
A1F037E000
|
unkown
|
page read and write
|
|
|
|
2B60D63C000
|
unkown
|
page read and write
|
|
|
|
1E57C594000
|
unkown
|
page read and write
|
|
|
|
1F8A6B30000
|
unkown image
|
page readonly
|
|
|
|
7DF52F972000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0ED7000
|
unkown image
|
page readonly
|
|
|
|
1E57C5A7000
|
unkown
|
page read and write
|
|
|
|
E91027F000
|
unkown
|
page read and write
|
|
|
|
7FF549D6D000
|
unkown image
|
page readonly
|
|
|
|
7FF549BF7000
|
unkown image
|
page readonly
|
|
|
|
1E57C58E000
|
unkown
|
page read and write
|
|
|
|
1E57BC4C000
|
unkown
|
page read and write
|
|
|
|
2B60D570000
|
unkown
|
page read and write
|
|
|
|
2B608615000
|
unkown
|
page read and write
|
|
|
|
7DF553BC2000
|
unkown image
|
page readonly
|
|
|
|
1F8A6540000
|
unkown image
|
page readonly
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
E90FF7B000
|
unkown
|
page read and write
|
|
|
|
7FF5ACBAF000
|
unkown image
|
page readonly
|
|
|
|
1F8A7200000
|
unkown
|
page read and write
|
|
|
|
7FF549E27000
|
unkown image
|
page readonly
|
|
|
|
7FF580023000
|
unkown image
|
page readonly
|
|
|
|
1B8B1DF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACF5C000
|
unkown image
|
page readonly
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
1E57BC6A000
|
unkown
|
page read and write
|
|
|
|
7FF5AD0A8000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD3E2000
|
unkown image
|
page readonly
|
|
|
|
7FF562FD2000
|
unkown image
|
page readonly
|
|
|
|
7DF553BE0000
|
unkown image
|
page readonly
|
|
|
|
1E57CAB8000
|
unkown
|
page read and write
|
|
|
|
16F8FA4B000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
heap private
|
page read and write
|
|
|
|
7FF562FC6000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACBB3000
|
unkown image
|
page readonly
|
|
|
|
7FF545C5F000
|
unkown image
|
page readonly
|
|
|
|
7DF52F980000
|
unkown image
|
page readonly
|
|
|
|
7DF54FB02000
|
unkown image
|
page readonly
|
|
|
|
7FF564EDB000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD221000
|
unkown image
|
page readonly
|
|
|
|
7FF525987000
|
unkown image
|
page readonly
|
|
|
|
7FF57FE61000
|
unkown image
|
page readonly
|
|
|
|
1F8A63D0000
|
unkown
|
page read and write
|
|
|
|
7FF545B27000
|
unkown image
|
page readonly
|
|
|
|
7FF545B78000
|
unkown image
|
page readonly
|
|
|
|
16F8FCD0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1E57C59A000
|
unkown
|
page read and write
|
|
|
|
1E51F000
|
unkown
|
page read and write
|
|
|
|
1B8B1A60000
|
heap private
|
page read and write
|
|
|
|
7FF5AD251000
|
unkown image
|
page readonly
|
|
|
|
23FB1910000
|
heap default
|
page read and write
|
|
|
|
7DF589DE0000
|
unkown image
|
page readonly
|
|
|
|
20C220C0000
|
heap private
|
page read and write
|
|
|
|
1B8B1730000
|
unkown image
|
page readonly
|
|
|
|
2B60D5E0000
|
unkown
|
page read and write
|
|
|
|
1E3DF000
|
unkown
|
page read and write
|
|
|
|
7FF5B0E8D000
|
unkown image
|
page readonly
|
|
|
|
6C7000
|
heap private
|
page read and write
|
|
|
|
7FF545D67000
|
unkown image
|
page readonly
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
2B608102000
|
unkown
|
page read and write
|
|
|
|
7DF56CD82000
|
unkown image
|
page readonly
|
|
|
|
1E57C597000
|
unkown
|
page read and write
|
|
|
|
E90F6FD000
|
unkown
|
page read and write
|
|
|
|
319477F000
|
unkown
|
page read and write
|
|
|
|
23FB1A4D000
|
unkown
|
page read and write
|
|
|
|
7FF562CA5000
|
unkown image
|
page readonly
|
|
|
|
23FB18F0000
|
unkown image
|
page readonly
|
|
|
|
7FF580026000
|
unkown image
|
page readonly
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
1F8A62A0000
|
unkown
|
page read and write
|
|
|
|
7DF5B7192000
|
unkown image
|
page readonly
|
|
|
|
2B60D65D000
|
unkown
|
page read and write
|
|
|
|
7FF5AD18F000
|
unkown image
|
page readonly
|
|
|
|
20C22A02000
|
unkown
|
page read and write
|
|
|
|
1F8A71F0000
|
unkown
|
page readonly
|
|
|
|
7FF562C41000
|
unkown image
|
page readonly
|
|
|
|
7FF57FDBC000
|
unkown image
|
page readonly
|
|
|
|
23FB2070000
|
unkown
|
page read and write
|
|
|
|
7FF5AD295000
|
unkown image
|
page readonly
|
|
|
|
7FF549DDD000
|
unkown image
|
page readonly
|
|
|
|
7DF52F970000
|
unkown image
|
page readonly
|
|
|
|
2B60D661000
|
unkown
|
page read and write
|
|
|
|
7FF57F813000
|
unkown image
|
page readonly
|
|
|
|
1E57CA1D000
|
unkown
|
page read and write
|
|
|
|
1B8B18E9000
|
unkown
|
page read and write
|
|
|
|
7FF549BBA000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD17A000
|
unkown image
|
page readonly
|
|
|
|
7FF562FC3000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD193000
|
unkown image
|
page readonly
|
|
|
|
16F8FB00000
|
unkown
|
page read and write
|
|
|
|
1E57C56C000
|
unkown
|
page read and write
|
|
|
|
1E57BC82000
|
unkown
|
page read and write
|
|
|
|
7FF545D53000
|
unkown image
|
page readonly
|
|
|
|
1E57BD02000
|
unkown
|
page read and write
|
|
|
|
7FF562D34000
|
unkown image
|
page readonly
|
|
|
|
1D97F000
|
unkown
|
page read and write
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
7DF553BD2000
|
unkown image
|
page readonly
|
|
|
|
2FD8A7B000
|
unkown
|
page read and write
|
|
|
|
1F8A6490000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5627AB000
|
unkown image
|
page readonly
|
|
|
|
2B6085F3000
|
unkown
|
page read and write
|
|
|
|
7FF5B0E84000
|
unkown image
|
page readonly
|
|
|
|
7FF57F815000
|
unkown image
|
page readonly
|
|
|
|
1B8B18E8000
|
unkown
|
page read and write
|
|
|
|
7FF545CAD000
|
unkown image
|
page readonly
|
|
|
|
1E57C5C0000
|
unkown
|
page read and write
|
|
|
|
7FF562A53000
|
unkown image
|
page readonly
|
|
|
|
1E57BD08000
|
unkown
|
page read and write
|
|
|
|
7FF545CA6000
|
unkown image
|
page readonly
|
|
|
|
7DF5BAC70000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD3A4000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1E57BCE8000
|
unkown
|
page read and write
|
|
|
|
7DF5B7190000
|
unkown image
|
page readonly
|
|
|
|
7FF562D83000
|
unkown image
|
page readonly
|
|
|
|
1F8A6448000
|
heap default
|
page read and write
|
|
|
|
7FF57FFE1000
|
unkown image
|
page readonly
|
|
|
|
21E0000
|
unkown image
|
page readonly
|
|
|
|
1E57BC66000
|
unkown
|
page read and write
|
|
|
|
2B608600000
|
unkown
|
page read and write
|
|
|
|
1E57CA02000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
ABBB97F000
|
unkown
|
page read and write
|
|
|
|
16F8FA50000
|
unkown
|
page read and write
|
|
|
|
7FF545D11000
|
unkown image
|
page readonly
|
|
|
|
2B60D704000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1E57C588000
|
unkown
|
page read and write
|
|
|
|
7FF5B0B53000
|
unkown image
|
page readonly
|
|
|
|
7FF549D4A000
|
unkown image
|
page readonly
|
|
|
|
7FF562EC4000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0DF6000
|
unkown image
|
page readonly
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
7DF56CD70000
|
unkown image
|
page readonly
|
|
|
|
740000
|
heap default
|
page read and write
|
|
|
|
7FF5AD312000
|
unkown image
|
page readonly
|
|
|
|
20C22610000
|
unkown image
|
page readonly
|
|
|
|
1DD40000
|
unkown
|
page read and write
|
|
|
|
2B608702000
|
unkown
|
page read and write
|
|
|
|
1E57C56D000
|
unkown
|
page read and write
|
|
|
|
2B60D590000
|
unkown
|
page read and write
|
|
|
|
7FF57F81A000
|
unkown image
|
page readonly
|
|
|
|
7FF525BC7000
|
unkown image
|
page readonly
|
|
|
|
E90F8FE000
|
unkown
|
page read and write
|
|
|
|
1E57BB60000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
1E57BC9F000
|
unkown
|
page read and write
|
|
|
|
1E57BC6A000
|
unkown
|
page read and write
|
|
|
|
2B607DD0000
|
unkown image
|
page readonly
|
|
|
|
2DF0000
|
heap private
|
page read and write
|
|
|
|
7FF562D1B000
|
unkown image
|
page readonly
|
|
|
|
7FF545D27000
|
unkown image
|
page readonly
|
|
|
|
3194A77000
|
unkown
|
page read and write
|
|
|
|
4FA6EF9000
|
unkown
|
page read and write
|
|
|
|
1E57BB40000
|
unkown image
|
page read and write
|
|
|
|
7FF549DD1000
|
unkown image
|
page readonly
|
|
|
|
1E57CA02000
|
unkown
|
page read and write
|
|
|
|
7FF562D7F000
|
unkown image
|
page readonly
|
|
|
|
7FF545CB9000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACD98000
|
unkown image
|
page readonly
|
|
|
|
1E57C59C000
|
unkown
|
page read and write
|
|
|
|
7FF525B06000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
2B608704000
|
unkown
|
page read and write
|
|
|
|
1B8B18DF000
|
unkown
|
page read and write
|
|
|
|
7FF525B84000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD0F0000
|
unkown image
|
page readonly
|
|
|
|
7FF525B19000
|
unkown image
|
page readonly
|
|
|
|
98000
|
unkown
|
page read and write
|
|
|
|
7FF5AD0E6000
|
unkown image
|
page readonly
|
|
|
|
7DF54FB02000
|
unkown image
|
page readonly
|
|
|
|
700000
|
unkown
|
page execute read
|
|
|
|
7FF562ECF000
|
unkown image
|
page readonly
|
|
|
|
7FF57FE71000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD326000
|
unkown image
|
page readonly
|
|
|
|
2B608102000
|
unkown
|
page read and write
|
|
|
|
1E57C5D0000
|
unkown
|
page read and write
|
|
|
|
20C2223C000
|
unkown
|
page read and write
|
|
|
|
2B608078000
|
unkown
|
page read and write
|
|
|
|
1E57C5A9000
|
unkown
|
page read and write
|
|
|
|
2B60D5E0000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1E57C55E000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACD9F000
|
unkown image
|
page readonly
|
|
|
|
7FF562D10000
|
unkown image
|
page readonly
|
|
|
|
1F8A6715000
|
heap private
|
page read and write
|
|
|
|
1F8A6450000
|
heap default
|
page read and write
|
|
|
|
23FB1A3C000
|
unkown
|
page read and write
|
|
|
|
2B60D550000
|
unkown
|
page read and write
|
|
|
|
2B60D649000
|
unkown
|
page read and write
|
|
|
|
2B608029000
|
unkown
|
page read and write
|
|
|
|
7FF525B17000
|
unkown image
|
page readonly
|
|
|
|
7FF545CB7000
|
unkown image
|
page readonly
|
|
|
|
1E57C5A9000
|
unkown
|
page read and write
|
|
|
|
7FF549DD4000
|
unkown image
|
page readonly
|
|
|
|
7FF562F84000
|
unkown image
|
page readonly
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
1E57CB00000
|
unkown
|
page read and write
|
|
|
|
7FF562EB4000
|
unkown image
|
page readonly
|
|
|
|
1E57BC00000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown image
|
page readonly
|
|
|
|
1E57C57F000
|
unkown
|
page read and write
|
|
|
|
1E57C5AF000
|
unkown
|
page read and write
|
|
|
|
1E57CA02000
|
unkown
|
page read and write
|
|
|
|
1F8A62D0000
|
unkown image
|
page readonly
|
|
|
|
7DF52F970000
|
unkown image
|
page readonly
|
|
|
|
7FF545AFA000
|
unkown image
|
page readonly
|
|
|
|
7FF545C61000
|
unkown image
|
page readonly
|
|
|
|
1E57CA00000
|
unkown
|
page read and write
|
|
|
|
761000
|
heap default
|
page read and write
|
|
|
|
6A0000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF549E16000
|
unkown image
|
page readonly
|
|
|
|
16F8F970000
|
unkown image
|
page readonly
|
|
|
|
1E57BCE5000
|
unkown
|
page read and write
|
|
|
|
7FF545D14000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0E97000
|
unkown image
|
page readonly
|
|
|
|
1E57BC52000
|
unkown
|
page read and write
|
|
|
|
7FF5AD120000
|
unkown image
|
page readonly
|
|
|
|
2200000
|
unkown image
|
page readonly
|
|
|
|
1E57C0D0000
|
unkown image
|
page readonly
|
|
|
|
ABBB57F000
|
unkown
|
page read and write
|
|
|
|
7FF57FF87000
|
unkown image
|
page readonly
|
|
|
|
20C2227C000
|
unkown
|
page read and write
|
|
|
|
16F8FA4F000
|
unkown
|
page read and write
|
|
|
|
7FF545C86000
|
unkown image
|
page readonly
|
|
|
|
7FF545D62000
|
unkown image
|
page readonly
|
|
|
|
20C22100000
|
unkown image
|
page readonly
|
|
|
|
1B8B18DF000
|
unkown
|
page read and write
|
|
|
|
1E57C59C000
|
unkown
|
page read and write
|
|
|
|
414F000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5BAC82000
|
unkown image
|
page readonly
|
|
|
|
7FF57F861000
|
unkown image
|
page readonly
|
|
|
|
2B60D550000
|
unkown
|
page read and write
|
|
|
|
16F8FB02000
|
unkown
|
page read and write
|
|
|
|
7DF5B7182000
|
unkown image
|
page readonly
|
|
|
|
E90F9F9000
|
unkown
|
page read and write
|
|
|
|
7DF54FB12000
|
unkown image
|
page readonly
|
|
|
|
2B608580000
|
unkown image
|
page readonly
|
|
|
|
ABBB07B000
|
unkown
|
page read and write
|
|
|
|
23FB1A13000
|
unkown
|
page read and write
|
|
|
|
E91007A000
|
unkown
|
page read and write
|
|
|
|
7FF5AD1A3000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD2C0000
|
unkown image
|
page readonly
|
|
|
|
1E57BC66000
|
unkown
|
page read and write
|
|
|
|
1F8A62B0000
|
unkown image
|
page readonly
|
|
|
|
7FF562EB9000
|
unkown image
|
page readonly
|
|
|
|
2D3F379000
|
unkown
|
page read and write
|
|
|
|
7FF562F02000
|
unkown image
|
page readonly
|
|
|
|
7FF549DE7000
|
unkown image
|
page readonly
|
|
|
|
7DF54FB12000
|
unkown image
|
page readonly
|
|
|
|
1E57C598000
|
unkown
|
page read and write
|
|
|
|
7FF5AD187000
|
unkown image
|
page readonly
|
|
|
|
21B0000
|
unkown
|
page read and write
|
|
|
|
16F8F990000
|
unkown image
|
page readonly
|
|
|
|
1E57C56E000
|
unkown
|
page read and write
|
|
|
|
2B607DD0000
|
unkown image
|
page readonly
|
|
|
|
23FB1A4B000
|
unkown
|
page read and write
|
|
|
|
A1EFEFF000
|
unkown
|
page read and write
|
|
|
|
7DF589DE0000
|
unkown image
|
page readonly
|
|
|
|
1E57BBE0000
|
unkown
|
page read and write
|
|
|
|
7FF5AD063000
|
unkown image
|
page readonly
|
|
|
|
1B8B1A65000
|
heap private
|
page read and write
|
|
|
|
16F8FA29000
|
unkown
|
page read and write
|
|
|
|
7FF525671000
|
unkown image
|
page readonly
|
|
|
|
7DF56CD70000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF562DE8000
|
unkown image
|
page readonly
|
|
|
|
23FB1A4F000
|
unkown
|
page read and write
|
|
|
|
7FF525ABF000
|
unkown image
|
page readonly
|
|
|
|
2B60D4B0000
|
unkown
|
page read and write
|
|
|
|
1D87E000
|
unkown
|
page read and write
|
|
|
|
1E57CA02000
|
unkown
|
page read and write
|
|
|
|
7FF57FF56000
|
unkown image
|
page readonly
|
|
|
|
2B608114000
|
unkown
|
page read and write
|
|
|
|
2B60D380000
|
unkown
|
page read and write
|
|
|
|
2FD8F77000
|
unkown
|
page read and write
|
|
|
|
1E57C54A000
|
unkown
|
page read and write
|
|
|
|
7FF5AD2F3000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD08D000
|
unkown image
|
page readonly
|
|
|
|
1B8B18C7000
|
heap default
|
page read and write
|
|
|
|
7FF562CE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACB48000
|
unkown image
|
page readonly
|
|
|
|
7FE000
|
unkown
|
page read and write
|
|
|
|
1E28F000
|
unkown
|
page read and write
|
|
|
|
1E57C578000
|
unkown
|
page read and write
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
7FF5AD0EA000
|
unkown image
|
page readonly
|
|
|
|
16F8FA4D000
|
unkown
|
page read and write
|
|
|
|
1DEDE000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
20C22270000
|
unkown
|
page read and write
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
55E000
|
unkown
|
page read and write
|
|
|
|
2B60E000000
|
unkown
|
page read and write
|
|
|
|
1E57C55A000
|
unkown
|
page read and write
|
|
|
|
7DF589DE2000
|
unkown image
|
page readonly
|
|
|
|
2B60D488000
|
unkown
|
page read and write
|
|
|
|
7DF553BD2000
|
unkown image
|
page readonly
|
|
|
|
7FF545414000
|
unkown image
|
page readonly
|
|
|
|
7FF562B32000
|
unkown image
|
page readonly
|
|
|
|
1B8B1710000
|
unkown image
|
page readonly
|
|
|
|
2B60D600000
|
unkown
|
page read and write
|
|
|
|
1E57C360000
|
unkown image
|
page write copy
|
|
|
|
1E57C59A000
|
unkown
|
page read and write
|
|
|
|
1F8A6700000
|
unkown
|
page read and write
|
|
|
|
1F8A66F0000
|
unkown
|
page read and write
|
|
|
|
1F8A63F0000
|
unkown
|
page read and write
|
|
|
|
7FF545B70000
|
unkown image
|
page readonly
|
|
|
|
7FF525ADD000
|
unkown image
|
page readonly
|
|
|
|
1E57C591000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5259D8000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD11E000
|
unkown image
|
page readonly
|
|
|
|
1B8B16F0000
|
unkown image
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
2B60D5A0000
|
unkown
|
page read and write
|
|
|
|
7FF5AD265000
|
unkown image
|
page readonly
|
|
|
|
7DF487CA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACFA8000
|
unkown image
|
page readonly
|
|
|
|
1E57C5D7000
|
unkown
|
page read and write
|
|
|
|
7DF52F980000
|
unkown image
|
page readonly
|
|
|
|
7FF57FFFB000
|
unkown image
|
page readonly
|
|
|
|
7DF56CD82000
|
unkown image
|
page readonly
|
|
|
|
16F8FA88000
|
unkown
|
page read and write
|
|
|
|
7FF562DA7000
|
unkown image
|
page readonly
|
|
|
|
2270000
|
unkown
|
page read and write
|
|
|
|
2210000
|
unkown
|
page read and write
|
|
|
|
2FD917F000
|
unkown
|
page read and write
|
|
|
|
1B8B1A70000
|
unkown image
|
page readonly
|
|
|
|
1F8A6710000
|
heap private
|
page read and write
|
|
|
|
2240000
|
unkown
|
page read and write
|
|
|
|
1E57BD16000
|
unkown
|
page read and write
|
|
|
|
7FF5ACF69000
|
unkown image
|
page readonly
|
|
|
|
319497B000
|
unkown
|
page read and write
|
|
|
|
1E57BB90000
|
unkown image
|
page readonly
|
|
|
|
7DF589DF0000
|
unkown image
|
page readonly
|
|
|
|
7DF553BC0000
|
unkown image
|
page readonly
|
|
|
|
1E57CA5D000
|
unkown
|
page read and write
|
|
|
|
7FF549CA5000
|
unkown image
|
page readonly
|
|
|
|
16F8F960000
|
heap private
|
page read and write
|
|
|
|
7FF549D52000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD2FD000
|
unkown image
|
page readonly
|
|
|
|
7FF545D67000
|
unkown image
|
page readonly
|
|
|
|
7FF562EDF000
|
unkown image
|
page readonly
|
|
|
|
7DF52F962000
|
unkown image
|
page readonly
|
|
|
|
2DD4000
|
heap private
|
page read and write
|
|
|
|
7FF549C35000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD0D9000
|
unkown image
|
page readonly
|
|
|
|
7FF545D24000
|
unkown image
|
page readonly
|
|
|
|
1DD3F000
|
unkown
|
page read and write
|
|
|
|
7FF5AD1B7000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0E9B000
|
unkown image
|
page readonly
|
|
|
|
20C22308000
|
unkown
|
page read and write
|
|
|
|
23FB1C00000
|
unkown image
|
page readonly
|
|
|
|
ABBB377000
|
unkown
|
page read and write
|
|
|
|
7FF5AD2C4000
|
unkown image
|
page readonly
|
|
|
|
7FF525A08000
|
unkown image
|
page readonly
|
|
|
|
7FF525AE6000
|
unkown image
|
page readonly
|
|
|
|
1B8B1820000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1E41E000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
1E57CABF000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5B71A0000
|
unkown image
|
page readonly
|
|
|
|
2B607E00000
|
unkown image
|
page readonly
|
|
|
|
2B608000000
|
unkown
|
page read and write
|
|
|
|
1E57BCC3000
|
unkown
|
page read and write
|
|
|
|
1E57BC50000
|
unkown
|
page read and write
|
|
|
|
7FF5498D7000
|
unkown image
|
page readonly
|
|
|
|
2B60807B000
|
unkown
|
page read and write
|
|
|
|
7FF57FFF7000
|
unkown image
|
page readonly
|
|
|
|
7FF52595A000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1E57BC54000
|
unkown
|
page read and write
|
|
|
|
7FF5B0DEE000
|
unkown image
|
page readonly
|
|
|
|
1E57BCB0000
|
unkown
|
page read and write
|
|
|
|
1E57C55A000
|
unkown
|
page read and write
|
|
|
|
23FB18C0000
|
unkown image
|
page readonly
|
|
|
|
7DF54FB00000
|
unkown image
|
page readonly
|
|
|
|
2B607F00000
|
unkown image
|
page readonly
|
|
|
|
23FB1A70000
|
unkown
|
page read and write
|
|
|
|
7FF562F94000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD2EF000
|
unkown image
|
page readonly
|
|
|
|
23FB1B08000
|
unkown
|
page read and write
|
|
|
|
2B608091000
|
unkown
|
page read and write
|
|
|
|
20C22229000
|
unkown
|
page read and write
|
|
|
|
1E57BCF8000
|
unkown
|
page read and write
|
|
|
|
1E57CA02000
|
unkown
|
page read and write
|
|
|
|
16F8FB13000
|
unkown
|
page read and write
|
|
|
|
7FF562FAA000
|
unkown image
|
page readonly
|
|
|
|
7FF545817000
|
unkown image
|
page readonly
|
|
|
|
2B60D6E2000
|
unkown
|
page read and write
|
|
|
|
ABBB878000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
heap private
|
page read and write
|
|
|
|
16F8F9A0000
|
unkown image
|
page readonly
|
|
|
|
16F90050000
|
unkown image
|
page readonly
|
|
|
|
2FD8E7C000
|
unkown
|
page read and write
|
|
|
|
7FF562F81000
|
unkown image
|
page readonly
|
|
|
|
7DF52F960000
|
unkown image
|
page readonly
|
|
|
|
7FF562FD7000
|
unkown image
|
page readonly
|
|
|
|
2B60D48E000
|
unkown
|
page read and write
|
|
|
|
1E57C51C000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
20C22120000
|
heap default
|
page read and write
|
|
|
|
1DBFF000
|
unkown
|
page read and write
|
|
|
|
4D61000
|
unkown
|
page read and write
|
|
|
|
1E57CABE000
|
unkown
|
page read and write
|
|
|
|
2B60D4A1000
|
unkown
|
page read and write
|
|
|
|
1E57BBC0000
|
unkown image
|
page readonly
|
|
|
|
1F8A71E0000
|
unkown
|
page read and write
|
|
|
|
1B8B18BB000
|
heap default
|
page read and write
|
|
|
|
7DF589DD2000
|
unkown image
|
page readonly
|
|
|
|
1E57BCAD000
|
unkown
|
page read and write
|
|
|
|
2B60D630000
|
unkown
|
page read and write
|
|
|
|
7FF562F27000
|
unkown image
|
page readonly
|
|
|
|
1E57C5A7000
|
unkown
|
page read and write
|
|
|
|
7DF5B7180000
|
unkown image
|
page readonly
|
|
|
|
23FB18A0000
|
unkown image
|
page read and write
|
|
|
|
2B60D6B3000
|
unkown
|
page read and write
|
|
|
|
2D3EF3A000
|
unkown
|
page read and write
|
|
|
|
20C22302000
|
unkown
|
page read and write
|
|
|
|
7FF5AD2B4000
|
unkown image
|
page readonly
|
|
|
|
D90000
|
unkown image
|
page readonly
|
|
|
|
7FF525B71000
|
unkown image
|
page readonly
|
|
|
|
7DF553BD0000
|
unkown image
|
page readonly
|
|
|
|
1F8A6410000
|
unkown image
|
page readonly
|
|
|
|
2B608758000
|
unkown
|
page read and write
|
|
|
|
16F8FB08000
|
unkown
|
page read and write
|
|
|
|
6B0000
|
unkown
|
page read and write
|
|
|
|
7DF56CD80000
|
unkown image
|
page readonly
|
|
|
|
7FF525BC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0E81000
|
unkown image
|
page readonly
|
|
|
|
1E57C3E0000
|
unkown image
|
page read and write
|
|
|
|
7DF5BAC82000
|
unkown image
|
page readonly
|
|
|
|
56E000
|
unkown
|
page execute and read and write
|
|
|
|
7FF562C53000
|
unkown image
|
page readonly
|
|
|
|
319467C000
|
unkown
|
page read and write
|
|
|
|
7FF562D6A000
|
unkown image
|
page readonly
|
|
|
|
1E57C5D7000
|
unkown
|
page read and write
|
|
|
|
7FF549E22000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
7FF545C8A000
|
unkown image
|
page readonly
|
|
|
|
7DF5BAC80000
|
unkown image
|
page readonly
|
|
|
|
7FF562C93000
|
unkown image
|
page readonly
|
|
|
|
23FB1A50000
|
unkown
|
page read and write
|
|
|
|
E90F5F7000
|
unkown
|
page read and write
|
|
|
|
1E57BB50000
|
heap private
|
page read and write
|
|
|
|
424F000
|
unkown
|
page read and write
|
|
|
|
7FF562F1D000
|
unkown image
|
page readonly
|
|
|
|
2B608107000
|
unkown
|
page read and write
|
|
|
|
20C22213000
|
unkown
|
page read and write
|
|
|
|
7FF5AD0E4000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
2B60D550000
|
unkown
|
page read and write
|
|
|
|
7FF5AD2DF000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1E57C56D000
|
unkown
|
page read and write
|
|
|
|
7FF5AD3E7000
|
unkown image
|
page readonly
|
|
|
|
1B8B18B0000
|
heap default
|
page read and write
|
|
|
|
7FF562E18000
|
unkown image
|
page readonly
|
|
|
|
7FF562DE0000
|
unkown image
|
page readonly
|
|
|
|
2D2E000
|
unkown
|
page read and write
|
|
|
|
7DF553BD0000
|
unkown image
|
page readonly
|
|
|
|
7FF562E55000
|
unkown image
|
page readonly
|
|
|
|
4FA691B000
|
unkown
|
page read and write
|
|
|
|
1E57C584000
|
unkown
|
page read and write
|
|
|
|
1E57C524000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF562EF6000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF562EB0000
|
unkown image
|
page readonly
|
|
|
|
2B608D80000
|
unkown
|
page read and write
|
|
|
|
23FB1B13000
|
unkown
|
page read and write
|
|
|
|
2B60D624000
|
unkown
|
page read and write
|
|
|
|
2D3F47E000
|
unkown
|
page read and write
|
|
|
|
1E57BED0000
|
unkown image
|
page readonly
|
|
|
|
2B60D910000
|
unkown
|
page read and write
|
|
|
|
1E57CABB000
|
unkown
|
page read and write
|
|
|
|
7FF525B87000
|
unkown image
|
page readonly
|
|
|
|
ABBB678000
|
unkown
|
page read and write
|
|
|
|
7FF525B0D000
|
unkown image
|
page readonly
|
|
|
|
7FF562F87000
|
unkown image
|
page readonly
|
|
|
|
7FF580037000
|
unkown image
|
page readonly
|
|
|
|
16F8F9C0000
|
heap default
|
page read and write
|
|
|
|
1B8B1870000
|
unkown image
|
page readonly
|
|
|
|
20C22200000
|
unkown
|
page read and write
|
|
|
|
7FF525B7D000
|
unkown image
|
page readonly
|
|
|
|
1E57BC3C000
|
unkown
|
page read and write
|
|
|
|
DC0000
|
unkown image
|
page readonly
|
|
|
|
16F8FED0000
|
unkown image
|
page readonly
|
|
|
|
7FF57FF76000
|
unkown image
|
page readonly
|
|
|
|
2308000
|
heap private
|
page read and write
|
|
|
|
7DF54FB20000
|
unkown image
|
page readonly
|
|
|
|
350000
|
unkown
|
page read and write
|
|
|
|
7DF5BAC72000
|
unkown image
|
page readonly
|
|
|
|
2B608602000
|
unkown
|
page read and write
|
|
|
|
7FF5AD0D2000
|
unkown image
|
page readonly
|
|
|
|
7DF56CD72000
|
unkown image
|
page readonly
|
|
|
|
7FF580037000
|
unkown image
|
page readonly
|
|
|
|
7DF54FB10000
|
unkown image
|
page readonly
|
|
|
|
1E57CAE2000
|
unkown
|
page read and write
|
|
|
|
7DF5B7192000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0E16000
|
unkown image
|
page readonly
|
|
|
|
1E57C542000
|
unkown
|
page read and write
|
|
|
|
20C220B0000
|
unkown image
|
page read and write
|
|
|
|
7FF5AD18A000
|
unkown image
|
page readonly
|
|
|
|
7FF525831000
|
unkown image
|
page readonly
|
|
|
|
7DF54FB10000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1E57BC4D000
|
unkown
|
page read and write
|
|
|
|
7FF5AD0BF000
|
unkown image
|
page readonly
|
|
|
|
7FF57F8B8000
|
unkown image
|
page readonly
|
|
|
|
1E57C330000
|
unkown image
|
page readonly
|
|
|
|
7FF525ACF000
|
unkown image
|
page readonly
|
|
|
|
1E57BC13000
|
unkown
|
page read and write
|
|
|
|
7FF525A45000
|
unkown image
|
page readonly
|
|
|
|
23FB1A29000
|
unkown
|
page read and write
|
|
|
|
7FF545BE5000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD3BA000
|
unkown image
|
page readonly
|
|
|
|
23FB18B0000
|
heap private
|
page read and write
|
|
|
|
16F8FA3C000
|
unkown
|
page read and write
|
|
|
|
1D3FE000
|
unkown
|
page read and write
|
|
|
|
7FF525B8B000
|
unkown image
|
page readonly
|
|
|
|
20C220F0000
|
unkown image
|
page readonly
|
|
|
|
2B6080A1000
|
unkown
|
page read and write
|
|
|
|
2B60D8D0000
|
unkown
|
page read and write
|
|
|
|
7FF545C6F000
|
unkown image
|
page readonly
|
|
|
|
7DF5BAC90000
|
unkown image
|
page readonly
|
|
|
|
23FB18C0000
|
unkown image
|
page readonly
|
|
|
|
7FF562684000
|
unkown image
|
page readonly
|
|
|
|
A10000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACF42000
|
unkown image
|
page readonly
|
|
|
|
7FF545D2B000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF562F29000
|
unkown image
|
page readonly
|
|
|
|
7FF562865000
|
unkown image
|
page readonly
|
|
|
|
ABBB477000
|
unkown
|
page read and write
|
|
|
|
7FF562EE3000
|
unkown image
|
page readonly
|
|
|
|
2D3F3FE000
|
unkown
|
page read and write
|
|
|
|
1D9BE000
|
unkown
|
page read and write
|
|
|
|
1E57C5AF000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF562DE5000
|
unkown image
|
page readonly
|
|
|
|
23FB1A52000
|
unkown
|
page read and write
|
|
|
|
7FF57FFF4000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
1B8B1880000
|
unkown image
|
page readonly
|
|
|
|
2B6085F0000
|
unkown
|
page read and write
|
|
|
|
2B608040000
|
unkown
|
page read and write
|
|
|
|
1F8A6440000
|
heap default
|
page read and write
|
|
|
|
1F8A62E0000
|
unkown image
|
page readonly
|
|
|
|
1B8B1890000
|
unkown image
|
page read and write
|
|
|
|
7FF5AD093000
|
unkown image
|
page readonly
|
|
|
|
7FF525AC1000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0DE3000
|
unkown image
|
page readonly
|
|
|
|
1E57C590000
|
unkown
|
page read and write
|
|
|
|
7FF57FF89000
|
unkown image
|
page readonly
|
|
|
|
7DF5B7190000
|
unkown image
|
page readonly
|
|
|
|
7DF5BAC90000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD33E000
|
unkown image
|
page readonly
|
|
|
|
344000
|
unkown
|
page read and write
|
|
|
|
2D3EFBF000
|
unkown
|
page read and write
|
|
|
|
2B60D4C0000
|
unkown
|
page read and write
|
|
|
|
7FF562DC6000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD2D4000
|
unkown image
|
page readonly
|
|
|
|
7DF52F972000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD3A7000
|
unkown image
|
page readonly
|
|
|
|
16F8F950000
|
unkown image
|
page read and write
|
|
|
|
7FF57FFED000
|
unkown image
|
page readonly
|
|
|
|
4FA6D79000
|
unkown
|
page read and write
|
|
|
|
2B608096000
|
unkown
|
page read and write
|
|
|
|
7FF5ACF12000
|
unkown image
|
page readonly
|
|
|
|
1B8B18C2000
|
unkown
|
page read and write
|
|
|
|
2B608718000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5AD144000
|
unkown image
|
page readonly
|
|
|
|
7FF549C68000
|
unkown image
|
page readonly
|
|
|
|
23FB1A81000
|
unkown
|
page read and write
|
|
|
|
7FF5259B6000
|
unkown image
|
page readonly
|
|
|
|
7DF5B7180000
|
unkown image
|
page readonly
|
|
|
|
7FF562EFA000
|
unkown image
|
page readonly
|
|
|
|
1F8A64AC000
|
unkown
|
page read and write
|
|
|
|
590000
|
heap default
|
page read and write
|
|
|
|
7FF562E85000
|
unkown image
|
page readonly
|
|
|
|
1E57BCBD000
|
unkown
|
page read and write
|
|
|
|
E90F18B000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
23FB1E00000
|
unkown image
|
page readonly
|
|
|
|
1E57C588000
|
unkown
|
page read and write
|
|
|
|
7FF5AD2A8000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
4FA6CF9000
|
unkown
|
page read and write
|
|
|
|
1B8B1C70000
|
unkown image
|
page readonly
|
|
|
|
7FF562F8D000
|
unkown image
|
page readonly
|
|
|
|
7FF564EDB000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD32D000
|
unkown image
|
page readonly
|
|
|
|
7FF549E13000
|
unkown image
|
page readonly
|
|
|
|
1E57BBB0000
|
heap default
|
page read and write
|
|
|
|
7FF549D21000
|
unkown image
|
page readonly
|
|
|
|
E90FAFB000
|
unkown
|
page read and write
|
|
|
|
7FF545A23000
|
unkown image
|
page readonly
|
|
|
|
7DF553BC2000
|
unkown image
|
page readonly
|
|
|
|
4FA6DFE000
|
unkown
|
page read and write
|
|
|
|
1E57CA02000
|
unkown
|
page read and write
|
|
|
|
7FF562ED1000
|
unkown image
|
page readonly
|
|
|
|
2FD907F000
|
unkown
|
page read and write
|
|
|
|
7FF5B0EC3000
|
unkown image
|
page readonly
|
|
|
|
1E57C5A7000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
7FF549BE7000
|
unkown image
|
page readonly
|
|
|
|
2B607DB0000
|
unkown image
|
page read and write
|
|
|
|
16F8F9F0000
|
unkown
|
page read and write
|
|
|
|
7FF57FFE7000
|
unkown image
|
page readonly
|
|
|
|
7FF545811000
|
unkown image
|
page readonly
|
|
|
|
1F8A62B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD3D3000
|
unkown image
|
page readonly
|
|
|
|
24D0000
|
unkown
|
page read and write
|
|
|
|
7FF545B56000
|
unkown image
|
page readonly
|
|
|
|
7FF562D7D000
|
unkown image
|
page readonly
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
16F8FA52000
|
unkown
|
page read and write
|
|
|
|
16F8FA7D000
|
unkown
|
page read and write
|
|
|
|
2B60D4B0000
|
unkown
|
page read and write
|
|
|
|
1E57C5BA000
|
unkown
|
page read and write
|
|
|
|
2B608200000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0DE5000
|
unkown image
|
page readonly
|
|
|
|
7DF5BAC70000
|
unkown image
|
page readonly
|
|
|
|
1E57C55C000
|
unkown
|
page read and write
|
|
|
|
20C22400000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD30A000
|
unkown image
|
page readonly
|
|
|
|
1E57BC4F000
|
unkown
|
page read and write
|
|
|
|
1E57C5A4000
|
unkown
|
page read and write
|
|
|
|
7FF5AD397000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD306000
|
unkown image
|
page readonly
|
|
|
|
1E57BCE2000
|
unkown
|
page read and write
|
|
|
|
7FF549D79000
|
unkown image
|
page readonly
|
|
|
|
7DF44D9D0000
|
unkown image
|
page readonly
|
|
|
|
2B607DF0000
|
unkown image
|
page readonly
|
|
|
|
1E57BB80000
|
unkown image
|
page readonly
|
|
|
|
7FF57FFE4000
|
unkown image
|
page readonly
|
|
|
|
7FF549DEB000
|
unkown image
|
page readonly
|
|
|
|
2B608400000
|
unkown image
|
page readonly
|
|
|
|
7FF525274000
|
unkown image
|
page readonly
|
|
|
|
7DF589DD2000
|
unkown image
|
page readonly
|
|
|
|
7FF57F7BC000
|
unkown image
|
page readonly
|
|
|
|
7FF562E87000
|
unkown image
|
page readonly
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
1E57C55A000
|
unkown
|
page read and write
|
|
|
|
7FF549C38000
|
unkown image
|
page readonly
|
|
|
|
A1EFE7B000
|
unkown
|
page read and write
|
|
|
|
7FF5AD3D6000
|
unkown image
|
page readonly
|
|
|
|
7DF589DD0000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
E90F7FA000
|
unkown
|
page read and write
|
|
|
|
16F8FA13000
|
unkown
|
page read and write
|
|
|
|
2305000
|
heap private
|
page read and write
|
|
|
|
2FD8B7F000
|
unkown
|
page read and write
|
|
|
|
340000
|
unkown
|
page read and write
|
|
|
|
1F8A6719000
|
heap private
|
page read and write
|
|
|
|
2B60D702000
|
unkown
|
page read and write
|
|
|
|
2B60D6F2000
|
unkown
|
page read and write
|
|
|
|
7FF57FE48000
|
unkown image
|
page readonly
|
|
|
|
1E57CAC0000
|
unkown
|
page read and write
|
|
|
|
7FF549C16000
|
unkown image
|
page readonly
|
|
|
|
7DF54FB00000
|
unkown image
|
page readonly
|
|
|
|
7FF549D66000
|
unkown image
|
page readonly
|
|
|
|
1E2DD000
|
unkown
|
page read and write
|
|
|
|
1B8B18D8000
|
unkown
|
page read and write
|
|
|
|
2300000
|
heap private
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5B0EAA000
|
unkown image
|
page readonly
|
|
|
|
1E57C5AC000
|
unkown
|
page read and write
|
|
|
|
1E57BD13000
|
unkown
|
page read and write
|
|
|
|
6F0000
|
unkown
|
page read and write
|
|
|
|
7FF545D56000
|
unkown image
|
page readonly
|
|
|
|
1E57CABE000
|
unkown
|
page read and write
|
|
|
|
2B60D6B6000
|
unkown
|
page read and write
|
|
|
|
1E57CAC0000
|
unkown
|
page read and write
|
|
|
|
7FF5B0E94000
|
unkown image
|
page readonly
|
|
|
|
1E57CB02000
|
unkown
|
page read and write
|
|
|
|
1F8A6490000
|
unkown
|
page read and write
|
|
|
|
20C22265000
|
unkown
|
page read and write
|
|
|
|
7FF5AD0A5000
|
unkown image
|
page readonly
|
|
|
|
2FD8AFF000
|
unkown
|
page read and write
|
|
|
|
2D3F2FC000
|
unkown
|
page read and write
|
|
|
|
2FD8D7B000
|
unkown
|
page read and write
|
|
|
|
7FF525997000
|
unkown image
|
page readonly
|
|
|
|
2B608D90000
|
unkown
|
page read and write
|
|
|
|
7FF545B75000
|
unkown image
|
page readonly
|
|
|
|
7DF4B5050000
|
unkown image
|
page readonly
|
|
|
|
1DFDE000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
20C2224B000
|
unkown
|
page read and write
|
|
|
|
7FF5B0E29000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD1AE000
|
unkown image
|
page readonly
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
1DAFE000
|
unkown
|
page read and write
|
|
|
|
1F8A6290000
|
unkown image
|
page read and write
|
|
|
|
7DF52F962000
|
unkown image
|
page readonly
|
|
|
|
1E57CA03000
|
unkown
|
page read and write
|
|
|
|
20C22880000
|
unkown
|
page read and write
|
|
|
|
2B60D5D0000
|
unkown
|
page read and write
|
|
|
|
1E57C3D0000
|
unkown
|
page read and write
|
|
|
|
1E57BC53000
|
unkown
|
page read and write
|
|
|
|
7FF562FD7000
|
unkown image
|
page readonly
|
|
|
|
16F8F9D0000
|
unkown image
|
page readonly
|
|
|
|
7DF56CD72000
|
unkown image
|
page readonly
|
|
|
|
1E57C51A000
|
unkown
|
page read and write
|
|
|
|
2B60D685000
|
unkown
|
page read and write
|
|
|
|
7FF549D46000
|
unkown image
|
page readonly
|
|
|
|
7FF525BC7000
|
unkown image
|
page readonly
|
|
|
|
2B60D6E2000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
3194B7F000
|
unkown
|
page read and write
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
24C0000
|
heap private
|
page read and write
|
|
|
|
7DF4B8B40000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0E27000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD391000
|
unkown image
|
page readonly
|
|
|
|
2B60D6FF000
|
unkown
|
page read and write
|
|
|
|
7FF562869000
|
unkown image
|
page readonly
|
|
|
|
1B8B1710000
|
unkown image
|
page readonly
|
|
|
|
219000
|
unkown
|
page read and write
|
|
|
|
7FF562D97000
|
unkown image
|
page readonly
|
|
|
|
1E04D000
|
unkown
|
page read and write
|
|
|
|
7DF52F960000
|
unkown image
|
page readonly
|
|
|
|
4FA6E79000
|
unkown
|
page read and write
|
|
|
|
7DF54FB20000
|
unkown image
|
page readonly
|
|
|
|
7DF46AC40000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD2C9000
|
unkown image
|
page readonly
|
|
|
|
1E57C3D0000
|
unkown
|
page read and write
|
|
|
|
7DF56CD90000
|
unkown image
|
page readonly
|
|
|
|
817000
|
heap default
|
page read and write
|
|
|
|
23FB1F80000
|
unkown image
|
page readonly
|
|
|
|
2B60D707000
|
unkown
|
page read and write
|
|
|
|
7FF562F97000
|
unkown image
|
page readonly
|
|
|
|
2310000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1B8B18DF000
|
unkown
|
page read and write
|
|
|
|
7FF57FF2F000
|
unkown image
|
page readonly
|
|
|
|
A1F047E000
|
unkown
|
page read and write
|
|
|
|
2B6080FF000
|
unkown
|
page read and write
|
|
|
|
1E57C402000
|
unkown
|
page read and write
|
|
|
|
7FF5AD339000
|
unkown image
|
page readonly
|
|
|
|
2B6080FF000
|
unkown
|
page read and write
|
|
|
|
7FF525AD3000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
2D3F27F000
|
unkown
|
page read and write
|
|
|
|
1E57CA02000
|
unkown
|
page read and write
|
|
|
|
1E57CAC2000
|
unkown
|
page read and write
|
|
|
|
2B60808D000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
1E57C5AC000
|
unkown
|
page read and write
|
|
|
|
1F8A6FA0000
|
unkown
|
page read and write
|
|
|
|
7FF549A91000
|
unkown image
|
page readonly
|
|
|
|
1E290000
|
unkown
|
page read and write
|
|
|
|
1E57C588000
|
unkown
|
page read and write
|
|
|
|
1F8A66C0000
|
unkown image
|
page readonly
|
|
|
|
1E57C588000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1E57C3D0000
|
unkown
|
page read and write
|
|
|
|
1E57BB60000
|
unkown image
|
page readonly
|
|
|
|
A1EFF7F000
|
unkown
|
page read and write
|
|
|
|
7DF589DD0000
|
unkown image
|
page readonly
|
|
|
|
2B607FF0000
|
unkown
|
page read and write
|
|
|
|
7FF545D3A000
|
unkown image
|
page readonly
|
|
|
|
1E57C598000
|
unkown
|
page read and write
|
|
|
|
23FB1B02000
|
unkown
|
page read and write
|
|
|
|
16F8F970000
|
unkown image
|
page readonly
|
|
|
|
2B608718000
|
unkown
|
page read and write
|
|
|
|
7FF5B0ED7000
|
unkown image
|
page readonly
|
|
|
|
2B60D4A0000
|
unkown
|
page read and write
|
|
|
|
1E57CAD3000
|
unkown
|
page read and write
|
|
|
|
1E57C250000
|
unkown image
|
page readonly
|
|
|
|
7FF525AEA000
|
unkown image
|
page readonly
|
|
|
|
2B608058000
|
unkown
|
page read and write
|
|
|
|
7FF562E98000
|
unkown image
|
page readonly
|
|
|
|
7FF562A87000
|
unkown image
|
page readonly
|
|
|
|
7FF525B77000
|
unkown image
|
page readonly
|
|
|
|
7FF5498D1000
|
unkown image
|
page readonly
|
|
|
|
7FF5459D1000
|
unkown image
|
page readonly
|
|
|
|
23FB19F0000
|
unkown image
|
page readonly
|
|
|
|
7DF5BAC80000
|
unkown image
|
page readonly
|
|
|
|
7FF525677000
|
unkown image
|
page readonly
|
|
|
|
20C22265000
|
unkown
|
page read and write
|
|
|
|
1F8A7210000
|
unkown
|
page read and write
|
|
|
|
1DD9D000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
7DF553BC0000
|
unkown image
|
page readonly
|
|
|
|
ABBB778000
|
unkown
|
page read and write
|
|
|
|
7FF549C30000
|
unkown image
|
page readonly
|
|
|
|
7FF5259D5000
|
unkown image
|
page readonly
|
|
|
|
2B60D370000
|
unkown
|
page read and write
|
|
|
|
7FF525BB6000
|
unkown image
|
page readonly
|
|
|
|
2B608072000
|
unkown
|
page read and write
|
|
|
|
20C22288000
|
unkown
|
page read and write
|
|
|
|
1B8B18D7000
|
unkown
|
page read and write
|
|
|
|
2B60D360000
|
unkown
|
page read and write
|
|
|
|
7FF5AD12B000
|
unkown image
|
page readonly
|
|
|
|
2B60D4C4000
|
unkown
|
page read and write
|
|
|
|
31946FF000
|
unkown
|
page read and write
|
|
|
|
23FB1B00000
|
unkown
|
page read and write
|
|
|
|
7FF5259D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5BAC72000
|
unkown image
|
page readonly
|
|
|
|
7DF589DE2000
|
unkown image
|
page readonly
|
|
|
|
1E57BCD5000
|
unkown
|
page read and write
|
|
|
|
1B8B1840000
|
unkown
|
page read and write
|
|
|
|
2B607E20000
|
heap default
|
page read and write
|
|
|
|
7FF545BA8000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1E57C5A7000
|
unkown
|
page read and write
|
|
|
|
1F8A6F90000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
heap default
|
page read and write
|
|
|
|
7DF5B7182000
|
unkown image
|
page readonly
|
|
|
|
7FF525B9A000
|
unkown image
|
page readonly
|
|
|
|
16F90202000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF549E27000
|
unkown image
|
page readonly
|
|
|
|
1E57CA02000
|
unkown
|
page read and write
|
|
|
|
23FB2202000
|
unkown
|
page read and write
|
|
|
|
510000
|
unkown image
|
page readonly
|
|
|
|
7FF57F8B1000
|
unkown image
|
page readonly
|
|
|
|
810000
|
heap default
|
page read and write
|
|
|
|
7FF562F16000
|
unkown image
|
page readonly
|
|
|
|
2250000
|
unkown
|
page read and write
|
|
|
|
2B60D5C0000
|
unkown
|
page read and write
|
|
|
|
1E57CAE2000
|
unkown
|
page read and write
|
|
|
|
7DF589DF0000
|
unkown image
|
page readonly
|
|
|
|
7DF42D830000
|
unkown image
|
page readonly
|
|
|
|
1E57C597000
|
unkown
|
page read and write
|
|
|
|
ABBB8FF000
|
unkown
|
page read and write
|
|
|
|
20C22300000
|
unkown
|
page read and write
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
7FF525AF2000
|
unkown image
|
page readonly
|
|
|
|
7FF562D0E000
|
unkown image
|
page readonly
|
|
|
|
23FB18E0000
|
unkown image
|
page readonly
|
|
|
|
20C22251000
|
unkown
|
page read and write
|
|
|
|
A1F0277000
|
unkown
|
page read and write
|
|
|
|
20C22313000
|
unkown
|
page read and write
|
|
|
|
1DC3E000
|
unkown
|
page read and write
|
|
|
|
2B6080B2000
|
unkown
|
page read and write
|
|
|
|
7DF56CD80000
|
unkown image
|
page readonly
|
|
|
|
A3F000
|
unkown
|
page read and write
|
|
|
|
1E57C599000
|
unkown
|
page read and write
|
|
|
|
A1F017B000
|
unkown
|
page read and write
|
|
|
|
7FF5B0E1D000
|
unkown image
|
page readonly
|
|
|
|
20C22256000
|
unkown
|
page read and write
|
|
|
|
42E000
|
unkown image
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2B60D480000
|
unkown
|
page read and write
|
|
|
|
7FF5AD337000
|
unkown image
|
page readonly
|
|
|
|
1D3BF000
|
unkown
|
page read and write
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
1E57C596000
|
unkown
|
page read and write
|
|
|
|
1F8A6720000
|
unkown
|
page read and write
|
|
|
|
6DE000
|
unkown
|
page read and write
|
|
|
|
2B607DC0000
|
heap private
|
page read and write
|
|
|
|
1E57C59C000
|
unkown
|
page read and write
|
|
|
|
2260000
|
heap private
|
page read and write
|
|
|
|
7FF549D77000
|
unkown image
|
page readonly
|
|
|
|
1E57BCE9000
|
unkown
|
page read and write
|
|
|
|
1E57CABA000
|
unkown
|
page read and write
|
|
|
|
7FF57FF7D000
|
unkown image
|
page readonly
|
|
|
|
7FF562EED000
|
unkown image
|
page readonly
|
|
|
|
1F8A6490000
|
unkown
|
page read and write
|
|
There are 966 hidden memdumps, click here to show them.