Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Aqlmlmmeey.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\LocalLow\1xVPfvJcrg
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
 |
|
|
C:\Users\user\AppData\LocalLow\RYwTiizs2t
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\frAQBc8Wsa
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\rAA74ecQekC.zip
|
Zip archive data, at least v2.0 to extract
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\rQF69AzBla
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\sqlite3.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\AccessibleHandler.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\AccessibleMarshal.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\IA2Marshal.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\MapiProxy.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\MapiProxy_InUse.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-file-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-file-l2-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-handle-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-localization-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-memory-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-profile-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-synch-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-synch-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-timezone-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-core-util-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-conio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-convert-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-environment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-locale-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-math-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-private-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-process-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-time-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\api-ms-win-crt-utility-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\breakpadinjector.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\freebl3.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\ldap60.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\ldif60.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\lgpllibs.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\libEGL.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\mozMapi32.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\mozMapi32_InUse.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\mozglue.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\msvcp140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\nss3.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\nssckbi.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\nssdbm3.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\pB4pD1lB4sD3.zip
|
Zip archive data, at least v2.0 to extract
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\prldap60.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\qipcap.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\softokn3.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\ucrtbase.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\uS0wV5wY9qH3\vcruntime140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\yH9tY9hO9gL5
|
ASCII text, with CRLF, CR line terminators
|
dropped
|
|
|
|
\Device\Null
|
ASCII text, with CRLF line terminators, with overstriking
|
dropped
|
|
There are 58 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Aqlmlmmeey.exe
|
'C:\Users\user\Desktop\Aqlmlmmeey.exe'
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C timeout /T 10 /NOBREAK > Nul & Del /f /q 'C:\Users\user\Desktop\Aqlmlmmeey.exe'
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\timeout.exe
|
timeout /T 10 /NOBREAK
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://185.138.164.150/
|
185.138.164.150
|
|
|
|
http://185.138.164.150//l/f/GpHpKnwB3dP17SpzaKnS/9801dace6a5ab5b92aa19fd0ea4e73710d7a6a98
|
185.138.164.150
|
|
|
|
http://185.138.164.150//l/f/GpHpKnwB3dP17SpzaKnS/405431785963a051c32213179fa2e9bea8d07aae
|
185.138.164.150
|
|
|
|
https://duckduckgo.com/chrome_newtab
|
unknown
|
|
|
|
http://crl.netsolssl.com/NetworkSolutionsCertificateAuthority.crl0
|
unknown
|
|
|
|
http://fedir.comsign.co.il/crl/ComSignCA.crl0
|
unknown
|
|
|
|
https://duckduckgo.com/ac/?q=
|
unknown
|
|
|
|
http://185.138.164.150:80//l/f/GpHpKnwB3dP17SpzaKnS/405431785963a051c32213179fa2e9bea8d07aaegdcncolp
|
unknown
|
|
|
|
http://crl.chambersign.org/chambersroot.crl0
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=chrom322;cat=chrom01g;ord=58648497779
|
unknown
|
|
|
|
https://repository.luxtrust.lu0
|
unknown
|
|
|
|
http://cps.chambersign.org/cps/chambersroot.html0
|
unknown
|
|
|
|
https://telegram.org/img/t_logo.png
|
unknown
|
|
|
|
http://www.mozilla.com0
|
unknown
|
|
|
|
https://www.google.com/chrome/static/images/favicons/favicon-16x16.png
|
unknown
|
|
|
|
http://www.chambersign.org1
|
unknown
|
|
|
|
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
|
unknown
|
|
|
|
http://www.firmaprofesional.com/cps0
|
unknown
|
|
|
|
http://www.diginotar.nl/cps/pkioverheid0
|
unknown
|
|
|
|
http://185.138.164.150//l/f/GpHpKnwB3dP17SpzaKnS/405431785963a051c32213179fa2e9bea8d07aae78
|
unknown
|
|
|
|
http://repository.swisssign.com/0
|
unknown
|
|
|
|
http://crl.securetrust.com/SGCA.crl0
|
unknown
|
|
|
|
http://crl.securetrust.com/STCA.crl0
|
unknown
|
|
|
|
http://www.trustcenter.de/crl/v2/tc_class_3_ca_II.crl
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=1;num=3931852
|
unknown
|
|
|
|
http://crl.thawte.com/ThawteTimestampingCA.crl0
|
unknown
|
|
|
|
http://www.certplus.com/CRL/class2.crl0
|
unknown
|
|
|
|
http://www.quovadisglobal.com/cps0
|
unknown
|
|
|
|
https://www.google.com/chrome/thank-you.html?statcb=0&installdataindex=empty&defaultbrowser=0rs
|
unknown
|
|
|
|
http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1_der.crl0
|
unknown
|
|
|
|
https://www.google.com/chrome/thank-you.html?statcb=0&installdataindex=empty&defaultbrowser=0usp
|
unknown
|
|
|
|
https://ocsp.quovadisoffshore.com0
|
unknown
|
|
|
|
http://cps.chambersign.org/cps/chambersignroot.html0
|
unknown
|
|
|
|
http://www.sqlite.org/copyright.html.
|
unknown
|
|
|
|
http://policy.camerfirma.com0
|
unknown
|
|
|
|
http://www.mozilla.com/en-US/blocklist/
|
unknown
|
|
|
|
https://www.google.com/images/branding/product/ico/googleg_lodp.ico
|
unknown
|
|
|
|
http://185.138.164.150/M
|
unknown
|
|
|
|
https://www.google.com/chrome/thank-you.html?statcb=0&installdataindex=empty&defaultbrowser=0o
|
unknown
|
|
|
|
https://www.google.com/chrome/thank-you.html?statcb=0&installdataindex=empty&defaultbrowser=0pC
|
unknown
|
|
|
|
http://185.138.164.150:80/779676D92903688rome
|
unknown
|
|
|
|
http://www.accv.es/legislacion_c.htm0U
|
unknown
|
|
|
|
http://www.certicamara.com/dpc/0Z
|
unknown
|
|
|
|
http://ocsp.accv.es0
|
unknown
|
|
|
|
http://ocsp.thawte.com0
|
unknown
|
|
|
|
https://www.google.com/chrome/thank-you.htmlstatcb=0&installdataindex=empty&defaultbrowser=0usp
|
unknown
|
|
|
|
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
|
unknown
|
|
|
|
https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search
|
unknown
|
|
|
|
http://185.138.164.150//l/f/GpHpKnwB3dP17SpzaKnS/405431785963a051c32213179fa2e9bea8d07aae7w
|
unknown
|
|
|
|
https://ac.ecosia.org/autocomplete?q=
|
unknown
|
|
|
|
https://www.google.com/chrome/static
|
unknown
|
|
|
|
https://www.catcert.net/verarrel
|
unknown
|
|
|
|
http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1.crt0
|
unknown
|
|
|
|
http://crl.chambersign.org/chambersignroot.crl0
|
unknown
|
|
|
|
http://crl.xrampsecurity.com/XGCA.crl0
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1
|
unknown
|
|
|
|
https://www.catcert.net/verarrel05
|
unknown
|
|
|
|
https://t.me/agrybirdsgamerept
|
149.154.167.99
|
|
|
|
http://www.quovadis.bm0
|
unknown
|
|
|
|
http://www.accv.es00
|
unknown
|
|
|
|
http://www.pkioverheid.nl/policies/root-policy-G20
|
unknown
|
|
|
|
http://www.cert.fnmt.es/dpcs/0
|
unknown
|
|
|
|
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
|
unknown
|
|
|
|
https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
|
unknown
|
|
There are 54 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
t.me
|
149.154.167.99
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
185.138.164.150
|
unknown
|
Germany
|
|
|
|
149.154.167.99
|
t.me
|
United Kingdom
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
30C0000
|
unkown
|
page execute and read and write
|
|
|
|
400000
|
unkown image
|
page execute and read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
11CDA602000
|
unkown
|
page read and write
|
|
|
|
25676629000
|
unkown
|
page read and write
|
|
|
|
7FF56CCA8000
|
unkown image
|
page readonly
|
|
|
|
1E332676000
|
unkown
|
page read and write
|
|
|
|
25676656000
|
unkown
|
page read and write
|
|
|
|
2336A868000
|
unkown
|
page read and write
|
|
|
|
7FF585D38000
|
unkown image
|
page readonly
|
|
|
|
7DF5385D0000
|
unkown image
|
page readonly
|
|
|
|
1A3F804F000
|
unkown
|
page read and write
|
|
|
|
5446000
|
unkown
|
page read and write
|
|
|
|
7DF5E2710000
|
unkown image
|
page readonly
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
2DEF000
|
unkown
|
page read and write
|
|
|
|
7FF58625B000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4697000
|
unkown image
|
page readonly
|
|
|
|
2805B1F0000
|
unkown image
|
page readonly
|
|
|
|
1E3325B0000
|
unkown
|
page read and write
|
|
|
|
7FF5861A3000
|
unkown image
|
page readonly
|
|
|
|
1FDBA27C000
|
unkown
|
page read and write
|
|
|
|
7FF53B16F000
|
unkown image
|
page readonly
|
|
|
|
280608C0000
|
unkown
|
page read and write
|
|
|
|
425000
|
unkown image
|
page write copy
|
|
|
|
7FF53B0A5000
|
unkown image
|
page readonly
|
|
|
|
28060791000
|
unkown
|
page read and write
|
|
|
|
1FDBA229000
|
unkown
|
page read and write
|
|
|
|
2A05000
|
unkown image
|
page readonly
|
|
|
|
31D8000
|
unkown
|
page read and write
|
|
|
|
7DF5E2702000
|
unkown image
|
page readonly
|
|
|
|
7FF5B762D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E47CB000
|
unkown image
|
page readonly
|
|
|
|
2805B27B000
|
unkown
|
page read and write
|
|
|
|
668B9FE000
|
unkown
|
page read and write
|
|
|
|
11CD9E3C000
|
unkown
|
page read and write
|
|
|
|
7DF5F6152000
|
unkown image
|
page readonly
|
|
|
|
29C9000
|
unkown image
|
page readonly
|
|
|
|
7FF522460000
|
unkown image
|
page readonly
|
|
|
|
2805B980000
|
unkown image
|
page read and write
|
|
|
|
7DF550AA0000
|
unkown image
|
page readonly
|
|
|
|
1FDBAA02000
|
unkown
|
page read and write
|
|
|
|
7FF5E079A000
|
unkown image
|
page readonly
|
|
|
|
2805C160000
|
unkown
|
page read and write
|
|
|
|
7FF56CEDD000
|
unkown image
|
page readonly
|
|
|
|
A60E77C000
|
unkown
|
page read and write
|
|
|
|
2336A828000
|
unkown
|
page read and write
|
|
|
|
7FF5E46C2000
|
unkown image
|
page readonly
|
|
|
|
7DF5CCF42000
|
unkown image
|
page readonly
|
|
|
|
2336A610000
|
unkown image
|
page read and write
|
|
|
|
1FDBA300000
|
unkown
|
page read and write
|
|
|
|
2805B256000
|
unkown
|
page read and write
|
|
|
|
7DF5F6142000
|
unkown image
|
page readonly
|
|
|
|
11CD9C90000
|
unkown image
|
page read and write
|
|
|
|
6D7937E000
|
unkown
|
page read and write
|
|
|
|
7FF522BC7000
|
unkown image
|
page readonly
|
|
|
|
7DF5828C0000
|
unkown image
|
page readonly
|
|
|
|
6DBB7E000
|
unkown
|
page read and write
|
|
|
|
2567667B000
|
unkown
|
page read and write
|
|
|
|
7DF5425A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5858E9000
|
unkown image
|
page readonly
|
|
|
|
29D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0720000
|
unkown image
|
page readonly
|
|
|
|
1A3F7FA0000
|
unkown image
|
page readonly
|
|
|
|
2A91000
|
unkown image
|
page readonly
|
|
|
|
7FF522BCC000
|
unkown image
|
page readonly
|
|
|
|
1E332510000
|
unkown image
|
page read and write
|
|
|
|
2805C270000
|
unkown image
|
page readonly
|
|
|
|
7DF542590000
|
unkown image
|
page readonly
|
|
|
|
4C7E000
|
unkown
|
page read and write
|
|
|
|
7FF56C740000
|
unkown image
|
page readonly
|
|
|
|
2336A913000
|
unkown
|
page read and write
|
|
|
|
7FF53B0FA000
|
unkown image
|
page readonly
|
|
|
|
6ED88000
|
unkown image
|
page read and write
|
|
|
|
24044930000
|
unkown image
|
page readonly
|
|
|
|
7FF5E45AE000
|
unkown image
|
page readonly
|
|
|
|
820000
|
unkown image
|
page readonly
|
|
|
|
4DEC8000
|
unkown
|
page read and write
|
|
|
|
7FF52C769000
|
unkown image
|
page readonly
|
|
|
|
25676661000
|
unkown
|
page read and write
|
|
|
|
280608D0000
|
unkown
|
page read and write
|
|
|
|
11CDA200000
|
unkown image
|
page readonly
|
|
|
|
2567666A000
|
unkown
|
page read and write
|
|
|
|
7FF5B7413000
|
unkown image
|
page readonly
|
|
|
|
1A3F7F70000
|
unkown image
|
page readonly
|
|
|
|
7FF52CB97000
|
unkown image
|
page readonly
|
|
|
|
7FF53AD0A000
|
unkown image
|
page readonly
|
|
|
|
1FDBA302000
|
unkown
|
page read and write
|
|
|
|
1A3F8102000
|
unkown
|
page read and write
|
|
|
|
2805B213000
|
unkown
|
page read and write
|
|
|
|
2BDB8FF000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
heap default
|
page read and write
|
|
|
|
7DF5385C2000
|
unkown image
|
page readonly
|
|
|
|
2805B9E1000
|
unkown
|
page read and write
|
|
|
|
7DF440460000
|
unkown image
|
page readonly
|
|
|
|
3149000
|
unkown
|
page execute and read and write
|
|
|
|
5438000
|
unkown
|
page read and write
|
|
|
|
2805C290000
|
unkown image
|
page readonly
|
|
|
|
4DEAF000
|
unkown
|
page read and write
|
|
|
|
7FF522C86000
|
unkown image
|
page readonly
|
|
|
|
7FF52297F000
|
unkown image
|
page readonly
|
|
|
|
6EC61000
|
unkown image
|
page execute read
|
|
|
|
2805BB18000
|
unkown
|
page read and write
|
|
|
|
7FF52CA3D000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCCF7000
|
unkown image
|
page readonly
|
|
|
|
25676613000
|
unkown
|
page read and write
|
|
|
|
7FF53A945000
|
unkown image
|
page readonly
|
|
|
|
7FF5B760F000
|
unkown image
|
page readonly
|
|
|
|
24044910000
|
unkown image
|
page read and write
|
|
|
|
1E332702000
|
unkown
|
page read and write
|
|
|
|
A60E2FF000
|
unkown
|
page read and write
|
|
|
|
A2E000
|
unkown
|
page read and write
|
|
|
|
6B551FF000
|
unkown
|
page read and write
|
|
|
|
1A3F7F20000
|
unkown image
|
page read and write
|
|
|
|
7FF5CCDC6000
|
unkown image
|
page readonly
|
|
|
|
2336A879000
|
unkown
|
page read and write
|
|
|
|
1D4592BB000
|
unkown
|
page read and write
|
|
|
|
7DF5828A2000
|
unkown image
|
page readonly
|
|
|
|
2AA7000
|
unkown image
|
page readonly
|
|
|
|
7FF522B0F000
|
unkown image
|
page readonly
|
|
|
|
7FF53B1AF000
|
unkown image
|
page readonly
|
|
|
|
2805BC01000
|
unkown
|
page read and write
|
|
|
|
7DF4CAE10000
|
unkown image
|
page readonly
|
|
|
|
280608E4000
|
unkown
|
page read and write
|
|
|
|
A26EFFB000
|
unkown
|
page read and write
|
|
|
|
7DF59BB52000
|
unkown image
|
page readonly
|
|
|
|
7FF53AC5F000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0747000
|
unkown image
|
page readonly
|
|
|
|
2336A630000
|
unkown image
|
page readonly
|
|
|
|
7DF5CCF40000
|
unkown image
|
page readonly
|
|
|
|
28060778000
|
unkown
|
page read and write
|
|
|
|
1E332530000
|
unkown image
|
page readonly
|
|
|
|
7DF5425A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5828C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B764F000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7634000
|
unkown image
|
page readonly
|
|
|
|
7FF52CBD5000
|
unkown image
|
page readonly
|
|
|
|
4B20000
|
heap private
|
page read and write
|
|
|
|
1FDBA23C000
|
unkown
|
page read and write
|
|
|
|
7FF52C763000
|
unkown image
|
page readonly
|
|
|
|
25676641000
|
unkown
|
page read and write
|
|
|
|
2336A780000
|
unkown
|
page read and write
|
|
|
|
7FF58618D000
|
unkown image
|
page readonly
|
|
|
|
7FF53B0BC000
|
unkown image
|
page readonly
|
|
|
|
28060902000
|
unkown
|
page read and write
|
|
|
|
11CD9E57000
|
unkown
|
page read and write
|
|
|
|
5493000
|
unkown
|
page read and write
|
|
|
|
7DF5385B0000
|
unkown image
|
page readonly
|
|
|
|
7FF586226000
|
unkown image
|
page readonly
|
|
|
|
6B553FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E46EC000
|
unkown image
|
page readonly
|
|
|
|
2805BB59000
|
unkown
|
page read and write
|
|
|
|
3040000
|
unkown image
|
page readonly
|
|
|
|
7FF56CEC8000
|
unkown image
|
page readonly
|
|
|
|
11CDA000000
|
unkown image
|
page readonly
|
|
|
|
4CCD000
|
unkown
|
page read and write
|
|
|
|
2BDB7FE000
|
unkown
|
page read and write
|
|
|
|
7FF53B194000
|
unkown image
|
page readonly
|
|
|
|
7FF586244000
|
unkown image
|
page readonly
|
|
|
|
2805C063000
|
unkown
|
page read and write
|
|
|
|
7FF56CFAF000
|
unkown image
|
page readonly
|
|
|
|
7DF550AB2000
|
unkown image
|
page readonly
|
|
|
|
11CD9E71000
|
unkown
|
page read and write
|
|
|
|
11CD9CA0000
|
heap private
|
page read and write
|
|
|
|
7DF5E2700000
|
unkown image
|
page readonly
|
|
|
|
7DF550AB2000
|
unkown image
|
page readonly
|
|
|
|
1FDBA313000
|
unkown
|
page read and write
|
|
|
|
7FF56CEB8000
|
unkown image
|
page readonly
|
|
|
|
2336AA00000
|
unkown image
|
page readonly
|
|
|
|
7DF550AA2000
|
unkown image
|
page readonly
|
|
|
|
25676500000
|
unkown image
|
page read and write
|
|
|
|
1D459229000
|
unkown
|
page read and write
|
|
|
|
31E7000
|
heap private
|
page read and write
|
|
|
|
2BDB5FF000
|
unkown
|
page read and write
|
|
|
|
2805BA02000
|
unkown
|
page read and write
|
|
|
|
7FF52CC9F000
|
unkown image
|
page readonly
|
|
|
|
7FF5B73ED000
|
unkown image
|
page readonly
|
|
|
|
7FF52CA63000
|
unkown image
|
page readonly
|
|
|
|
7F2E0000
|
unkown image
|
page readonly
|
|
|
|
1A3F8013000
|
unkown
|
page read and write
|
|
|
|
2805B241000
|
unkown
|
page read and write
|
|
|
|
7FF5E0733000
|
unkown image
|
page readonly
|
|
|
|
1FDBA020000
|
heap private
|
page read and write
|
|
|
|
1A3F8029000
|
unkown
|
page read and write
|
|
|
|
11CD9E2A000
|
unkown
|
page read and write
|
|
|
|
1D4590F0000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF522463000
|
unkown image
|
page readonly
|
|
|
|
7FF5E468D000
|
unkown image
|
page readonly
|
|
|
|
7FF56CF7B000
|
unkown image
|
page readonly
|
|
|
|
24044960000
|
unkown image
|
page readonly
|
|
|
|
7FF522834000
|
unkown image
|
page readonly
|
|
|
|
7FF56CEBC000
|
unkown image
|
page readonly
|
|
|
|
7DF550AA2000
|
unkown image
|
page readonly
|
|
|
|
11CD9CE0000
|
unkown image
|
page readonly
|
|
|
|
11CD9CB0000
|
unkown image
|
page readonly
|
|
|
|
7FF53AFBD000
|
unkown image
|
page readonly
|
|
|
|
6B5497B000
|
unkown
|
page read and write
|
|
|
|
1D458FA0000
|
unkown image
|
page read and write
|
|
|
|
7DF5FA0D2000
|
unkown image
|
page readonly
|
|
|
|
6F432000
|
unkown image
|
page readonly
|
|
|
|
31CE000
|
unkown
|
page read and write
|
|
|
|
7FF5E42E6000
|
unkown image
|
page readonly
|
|
|
|
2805B600000
|
unkown image
|
page readonly
|
|
|
|
7FF53A9F4000
|
unkown image
|
page readonly
|
|
|
|
7FF522C25000
|
unkown image
|
page readonly
|
|
|
|
6F410000
|
unkown image
|
page readonly
|
|
|
|
7FF522864000
|
unkown image
|
page readonly
|
|
|
|
7FF53B0E9000
|
unkown image
|
page readonly
|
|
|
|
7DF5E26F0000
|
unkown image
|
page readonly
|
|
|
|
7FF522C7F000
|
unkown image
|
page readonly
|
|
|
|
6ED8B000
|
unkown image
|
page readonly
|
|
|
|
7FF5E47BD000
|
unkown image
|
page readonly
|
|
|
|
7FF52CC8B000
|
unkown image
|
page readonly
|
|
|
|
2336A620000
|
heap private
|
page read and write
|
|
|
|
4A8F000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1A3F82D0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
25676667000
|
unkown
|
page read and write
|
|
|
|
24044930000
|
unkown image
|
page readonly
|
|
|
|
1E332560000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
4B0E000
|
unkown
|
page read and write
|
|
|
|
7FF5DFF11000
|
unkown image
|
page readonly
|
|
|
|
7DF5385C0000
|
unkown image
|
page readonly
|
|
|
|
7DF5CCF52000
|
unkown image
|
page readonly
|
|
|
|
24044ED0000
|
unkown image
|
page readonly
|
|
|
|
7DF59BB70000
|
unkown image
|
page readonly
|
|
|
|
7FF522A8C000
|
unkown image
|
page readonly
|
|
|
|
542B000
|
unkown
|
page read and write
|
|
|
|
2805C260000
|
unkown image
|
page readonly
|
|
|
|
2805C070000
|
unkown
|
page read and write
|
|
|
|
7FF5CCD43000
|
unkown image
|
page readonly
|
|
|
|
26A000
|
unkown
|
page read and write
|
|
|
|
7FF5CCDFB000
|
unkown image
|
page readonly
|
|
|
|
2805BA15000
|
unkown
|
page read and write
|
|
|
|
7FF56CFAD000
|
unkown image
|
page readonly
|
|
|
|
7FF5E47CE000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0789000
|
unkown image
|
page readonly
|
|
|
|
4FDD000
|
unkown
|
page read and write
|
|
|
|
7FF5B7568000
|
unkown image
|
page readonly
|
|
|
|
7FF522CAB000
|
unkown image
|
page readonly
|
|
|
|
28060860000
|
unkown
|
page read and write
|
|
|
|
7FF5B757D000
|
unkown image
|
page readonly
|
|
|
|
7FF56CE84000
|
unkown image
|
page readonly
|
|
|
|
7FF53B0E5000
|
unkown image
|
page readonly
|
|
|
|
24044A40000
|
unkown
|
page read and write
|
|
|
|
1E332713000
|
unkown
|
page read and write
|
|
|
|
7FF586199000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC4C3000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6160000
|
unkown image
|
page readonly
|
|
|
|
1D459313000
|
unkown
|
page read and write
|
|
|
|
7FF53B084000
|
unkown image
|
page readonly
|
|
|
|
7FF522C8E000
|
unkown image
|
page readonly
|
|
|
|
2805BB02000
|
unkown
|
page read and write
|
|
|
|
11CD9CD0000
|
unkown image
|
page readonly
|
|
|
|
7DF4E05C0000
|
unkown image
|
page readonly
|
|
|
|
6D793FC000
|
unkown
|
page read and write
|
|
|
|
28060AD0000
|
unkown
|
page read and write
|
|
|
|
7FF5E47DF000
|
unkown image
|
page readonly
|
|
|
|
54BC000
|
unkown
|
page read and write
|
|
|
|
25676C50000
|
unkown image
|
page readonly
|
|
|
|
28060A90000
|
unkown
|
page read and write
|
|
|
|
7FF5B7557000
|
unkown image
|
page readonly
|
|
|
|
7FF56CD76000
|
unkown image
|
page readonly
|
|
|
|
1E332530000
|
unkown image
|
page readonly
|
|
|
|
2805C240000
|
unkown image
|
page readonly
|
|
|
|
7DF4F4010000
|
unkown image
|
page readonly
|
|
|
|
54A7000
|
unkown
|
page read and write
|
|
|
|
28060790000
|
unkown
|
page read and write
|
|
|
|
7FF522A10000
|
unkown image
|
page readonly
|
|
|
|
2567664B000
|
unkown
|
page read and write
|
|
|
|
25676E02000
|
unkown
|
page read and write
|
|
|
|
6B54CFF000
|
unkown
|
page read and write
|
|
|
|
5492000
|
unkown
|
page read and write
|
|
|
|
2567664E000
|
unkown
|
page read and write
|
|
|
|
1FDBA180000
|
unkown
|
page read and write
|
|
|
|
673A27E000
|
unkown
|
page read and write
|
|
|
|
31E0000
|
heap private
|
page read and write
|
|
|
|
7FF5B7585000
|
unkown image
|
page readonly
|
|
|
|
28060900000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7589000
|
unkown image
|
page readonly
|
|
|
|
7FF52CC05000
|
unkown image
|
page readonly
|
|
|
|
24044A24000
|
unkown
|
page read and write
|
|
|
|
7FF522A78000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
280607B4000
|
unkown
|
page read and write
|
|
|
|
7FF56C73A000
|
unkown image
|
page readonly
|
|
|
|
2805B0C0000
|
unkown image
|
page readonly
|
|
|
|
7DF5828B2000
|
unkown image
|
page readonly
|
|
|
|
7FF5E083B000
|
unkown image
|
page readonly
|
|
|
|
87C000
|
unkown
|
page read and write
|
|
|
|
7FF5CCDB8000
|
unkown image
|
page readonly
|
|
|
|
7FF586195000
|
unkown image
|
page readonly
|
|
|
|
2336A855000
|
unkown
|
page read and write
|
|
|
|
7FF5E44F6000
|
unkown image
|
page readonly
|
|
|
|
41C000
|
unkown image
|
page readonly
|
|
|
|
7FF56CF68000
|
unkown image
|
page readonly
|
|
|
|
25676702000
|
unkown
|
page read and write
|
|
|
|
28060AD0000
|
unkown
|
page read and write
|
|
|
|
45A0000
|
heap private
|
page read and write
|
|
|
|
7DF5F6152000
|
unkown image
|
page readonly
|
|
|
|
1A3F8802000
|
unkown
|
page read and write
|
|
|
|
7FF56CEF3000
|
unkown image
|
page readonly
|
|
|
|
7FF52294A000
|
unkown image
|
page readonly
|
|
|
|
24045400000
|
unkown
|
page read and write
|
|
|
|
561D000
|
unkown
|
page read and write
|
|
|
|
A60DF7D000
|
unkown
|
page read and write
|
|
|
|
7DF480770000
|
unkown image
|
page readonly
|
|
|
|
C5E000
|
unkown
|
page read and write
|
|
|
|
7FF53AE76000
|
unkown image
|
page readonly
|
|
|
|
4DEB2000
|
unkown
|
page read and write
|
|
|
|
7FF5E081B000
|
unkown image
|
page readonly
|
|
|
|
24044B02000
|
unkown
|
page read and write
|
|
|
|
A60E67E000
|
unkown
|
page read and write
|
|
|
|
7FF522BED000
|
unkown image
|
page readonly
|
|
|
|
7FF5B741E000
|
unkown image
|
page readonly
|
|
|
|
6F411000
|
unkown image
|
page execute read
|
|
|
|
7FF5E0757000
|
unkown image
|
page readonly
|
|
|
|
7FF5229BD000
|
unkown image
|
page readonly
|
|
|
|
1FDBA160000
|
unkown image
|
page readonly
|
|
|
|
2A8B000
|
unkown image
|
page readonly
|
|
|
|
7FF5E082D000
|
unkown image
|
page readonly
|
|
|
|
1A3F8092000
|
unkown
|
page read and write
|
|
|
|
668B7FB000
|
unkown
|
page read and write
|
|
|
|
7FF52CBE3000
|
unkown image
|
page readonly
|
|
|
|
7DF59BB60000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCD18000
|
unkown image
|
page readonly
|
|
|
|
1D459900000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
4DEB9000
|
unkown
|
page read and write
|
|
|
|
7FF522370000
|
unkown image
|
page readonly
|
|
|
|
2336A650000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0710000
|
unkown image
|
page readonly
|
|
|
|
2BDB27B000
|
unkown
|
page read and write
|
|
|
|
6D7957B000
|
unkown
|
page read and write
|
|
|
|
7FF52CBD9000
|
unkown image
|
page readonly
|
|
|
|
11CD9F02000
|
unkown
|
page read and write
|
|
|
|
1FDBA030000
|
unkown image
|
page readonly
|
|
|
|
2BDB57B000
|
unkown
|
page read and write
|
|
|
|
1E33265A000
|
unkown
|
page read and write
|
|
|
|
7DF5CCF40000
|
unkown image
|
page readonly
|
|
|
|
7F2F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC4C5000
|
unkown image
|
page readonly
|
|
|
|
4E110000
|
unkown image
|
page readonly
|
|
|
|
7FF56CD42000
|
unkown image
|
page readonly
|
|
|
|
1D458FF0000
|
unkown image
|
page readonly
|
|
|
|
303F000
|
unkown
|
page read and write
|
|
|
|
8C0000
|
unkown image
|
page readonly
|
|
|
|
7FF522BD8000
|
unkown image
|
page readonly
|
|
|
|
28060800000
|
unkown
|
page read and write
|
|
|
|
24044A02000
|
unkown
|
page read and write
|
|
|
|
25676630000
|
unkown
|
page read and write
|
|
|
|
7DF59BB50000
|
unkown image
|
page readonly
|
|
|
|
7DF5CCF50000
|
unkown image
|
page readonly
|
|
|
|
7DF550AC0000
|
unkown image
|
page readonly
|
|
|
|
2CA0000
|
heap default
|
page read and write
|
|
|
|
7FF5229C7000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCDD0000
|
unkown image
|
page readonly
|
|
|
|
AAF000
|
unkown
|
page read and write
|
|
|
|
2EEC000
|
unkown
|
page read and write
|
|
|
|
A60E3FF000
|
unkown
|
page read and write
|
|
|
|
543D000
|
unkown
|
page read and write
|
|
|
|
2336A85F000
|
unkown
|
page read and write
|
|
|
|
7DF5F6150000
|
unkown image
|
page readonly
|
|
|
|
307E000
|
unkown
|
page read and write
|
|
|
|
7FF5B764F000
|
unkown image
|
page readonly
|
|
|
|
7FF522B6D000
|
unkown image
|
page readonly
|
|
|
|
7FF522C03000
|
unkown image
|
page readonly
|
|
|
|
7FF5B759A000
|
unkown image
|
page readonly
|
|
|
|
7FF5B743E000
|
unkown image
|
page readonly
|
|
|
|
1FDBA213000
|
unkown
|
page read and write
|
|
|
|
7FF52C421000
|
unkown image
|
page readonly
|
|
|
|
31F0000
|
unkown image
|
page readonly
|
|
|
|
7FF522B70000
|
unkown image
|
page readonly
|
|
|
|
7FF53B0C8000
|
unkown image
|
page readonly
|
|
|
|
7DF550AB0000
|
unkown image
|
page readonly
|
|
|
|
2567666B000
|
unkown
|
page read and write
|
|
|
|
28060849000
|
unkown
|
page read and write
|
|
|
|
7FF5CCDCB000
|
unkown image
|
page readonly
|
|
|
|
4AD0000
|
unkown
|
page read and write
|
|
|
|
11CD9CB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5CCF60000
|
unkown image
|
page readonly
|
|
|
|
668BAFE000
|
unkown
|
page read and write
|
|
|
|
673A1FD000
|
unkown
|
page read and write
|
|
|
|
7FF5858EF000
|
unkown image
|
page readonly
|
|
|
|
1FDBA28D000
|
unkown
|
page read and write
|
|
|
|
25676655000
|
unkown
|
page read and write
|
|
|
|
A60E97F000
|
unkown
|
page read and write
|
|
|
|
7DF5FA0D0000
|
unkown image
|
page readonly
|
|
|
|
1A3F8056000
|
unkown
|
page read and write
|
|
|
|
7FF52CC84000
|
unkown image
|
page readonly
|
|
|
|
280608E4000
|
unkown
|
page read and write
|
|
|
|
7FF5E084F000
|
unkown image
|
page readonly
|
|
|
|
7DF5385B2000
|
unkown image
|
page readonly
|
|
|
|
7F2E0000
|
unkown image
|
page readonly
|
|
|
|
11CD9F08000
|
unkown
|
page read and write
|
|
|
|
2336A760000
|
unkown image
|
page readonly
|
|
|
|
7DF436480000
|
unkown image
|
page readonly
|
|
|
|
25676644000
|
unkown
|
page read and write
|
|
|
|
7FF53B09C000
|
unkown image
|
page readonly
|
|
|
|
7FF5229E3000
|
unkown image
|
page readonly
|
|
|
|
2A2D000
|
unkown image
|
page readonly
|
|
|
|
280607A0000
|
unkown
|
page read and write
|
|
|
|
11CD9F13000
|
unkown
|
page read and write
|
|
|
|
7FF5229B3000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF56CEFA000
|
unkown image
|
page readonly
|
|
|
|
25676580000
|
unkown image
|
page readonly
|
|
|
|
7FF5E04F8000
|
unkown image
|
page readonly
|
|
|
|
1D459243000
|
unkown
|
page read and write
|
|
|
|
7FF5CCAB3000
|
unkown image
|
page readonly
|
|
|
|
1FDBA200000
|
unkown
|
page read and write
|
|
|
|
1E332590000
|
unkown image
|
page readonly
|
|
|
|
4C2F000
|
unkown
|
page read and write
|
|
|
|
7FF5B763B000
|
unkown image
|
page readonly
|
|
|
|
1FDBA249000
|
unkown
|
page read and write
|
|
|
|
7FF53B0A7000
|
unkown image
|
page readonly
|
|
|
|
6D78E7B000
|
unkown
|
page read and write
|
|
|
|
6ED50000
|
unkown image
|
page readonly
|
|
|
|
24044990000
|
unkown image
|
page readonly
|
|
|
|
7DF550AC0000
|
unkown image
|
page readonly
|
|
|
|
25676640000
|
unkown
|
page read and write
|
|
|
|
54D8000
|
unkown
|
page read and write
|
|
|
|
B20000
|
heap default
|
page read and write
|
|
|
|
7FF56CF94000
|
unkown image
|
page readonly
|
|
|
|
2336A902000
|
unkown
|
page read and write
|
|
|
|
28060770000
|
unkown
|
page read and write
|
|
|
|
280607A0000
|
unkown
|
page read and write
|
|
|
|
6B5452C000
|
unkown
|
page read and write
|
|
|
|
7FF53B1AF000
|
unkown image
|
page readonly
|
|
|
|
24E000
|
unkown
|
page read and write
|
|
|
|
7FF56CE92000
|
unkown image
|
page readonly
|
|
|
|
24045050000
|
unkown image
|
page readonly
|
|
|
|
1FDBA050000
|
unkown image
|
page readonly
|
|
|
|
7FF53B1AB000
|
unkown image
|
page readonly
|
|
|
|
1FDBA250000
|
unkown
|
page read and write
|
|
|
|
2805BA00000
|
unkown
|
page read and write
|
|
|
|
7FF52CC6B000
|
unkown image
|
page readonly
|
|
|
|
2805B279000
|
unkown
|
page read and write
|
|
|
|
7FF5E4311000
|
unkown image
|
page readonly
|
|
|
|
2805B790000
|
unkown image
|
page readonly
|
|
|
|
7FF53AFC6000
|
unkown image
|
page readonly
|
|
|
|
2E57000
|
unkown
|
page execute and read and write
|
|
|
|
7FF52CAF5000
|
unkown image
|
page readonly
|
|
|
|
6D7977F000
|
unkown
|
page read and write
|
|
|
|
7FF586153000
|
unkown image
|
page readonly
|
|
|
|
1D459100000
|
unkown image
|
page readonly
|
|
|
|
240449E0000
|
unkown
|
page read and write
|
|
|
|
986D5FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E083E000
|
unkown image
|
page readonly
|
|
|
|
2ECD000
|
unkown
|
page read and write
|
|
|
|
252000
|
unkown
|
page read and write
|
|
|
|
280608E2000
|
unkown
|
page read and write
|
|
|
|
7FF522B34000
|
unkown image
|
page readonly
|
|
|
|
240449B0000
|
unkown
|
page read and write
|
|
|
|
7FF58623D000
|
unkown image
|
page readonly
|
|
|
|
2567667E000
|
unkown
|
page read and write
|
|
|
|
2EDF000
|
unkown
|
page read and write
|
|
|
|
1E332C60000
|
unkown image
|
page readonly
|
|
|
|
7FF56CC3A000
|
unkown image
|
page readonly
|
|
|
|
25676520000
|
unkown image
|
page readonly
|
|
|
|
1E33263F000
|
unkown
|
page read and write
|
|
|
|
7FF522CBD000
|
unkown image
|
page readonly
|
|
|
|
4ACD000
|
unkown
|
page read and write
|
|
|
|
1D459200000
|
unkown
|
page read and write
|
|
|
|
7DF59BB62000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4745000
|
unkown image
|
page readonly
|
|
|
|
1E332613000
|
unkown
|
page read and write
|
|
|
|
7FF522BB7000
|
unkown image
|
page readonly
|
|
|
|
7F2F2000
|
unkown image
|
page readonly
|
|
|
|
280608AD000
|
unkown
|
page read and write
|
|
|
|
4DEAB000
|
unkown
|
page read and write
|
|
|
|
2336A840000
|
unkown
|
page read and write
|
|
|
|
4E2BE000
|
unkown
|
page read and write
|
|
|
|
1FDBA270000
|
unkown
|
page read and write
|
|
|
|
7DF5828B0000
|
unkown image
|
page readonly
|
|
|
|
7FF56CFAF000
|
unkown image
|
page readonly
|
|
|
|
7DF5E26F2000
|
unkown image
|
page readonly
|
|
|
|
986D0FE000
|
unkown
|
page read and write
|
|
|
|
29D8000
|
unkown image
|
page readonly
|
|
|
|
6D7967F000
|
unkown
|
page read and write
|
|
|
|
1E332580000
|
heap default
|
page read and write
|
|
|
|
2805B0B0000
|
heap private
|
page read and write
|
|
|
|
1A3F803C000
|
unkown
|
page read and write
|
|
|
|
24044980000
|
heap default
|
page read and write
|
|
|
|
1A3F808D000
|
unkown
|
page read and write
|
|
|
|
7FF52CBA7000
|
unkown image
|
page readonly
|
|
|
|
7FF52297B000
|
unkown image
|
page readonly
|
|
|
|
2805B0C0000
|
unkown image
|
page readonly
|
|
|
|
280608FE000
|
unkown
|
page read and write
|
|
|
|
4DDF000
|
unkown
|
page read and write
|
|
|
|
1D45926F000
|
unkown
|
page read and write
|
|
|
|
11CD9E00000
|
unkown
|
page read and write
|
|
|
|
2805B2A1000
|
unkown
|
page read and write
|
|
|
|
7DF59BB50000
|
unkown image
|
page readonly
|
|
|
|
7DF5FA0D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6150000
|
unkown image
|
page readonly
|
|
|
|
7FF522444000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCD4A000
|
unkown image
|
page readonly
|
|
|
|
7FF522A5D000
|
unkown image
|
page readonly
|
|
|
|
7DF5828A0000
|
unkown image
|
page readonly
|
|
|
|
604000
|
unkown
|
page read and write
|
|
|
|
2BDB2FD000
|
unkown
|
page read and write
|
|
|
|
25676570000
|
heap default
|
page read and write
|
|
|
|
1E332520000
|
heap private
|
page read and write
|
|
|
|
280608A5000
|
unkown
|
page read and write
|
|
|
|
2CA5000
|
heap default
|
page read and write
|
|
|
|
986D4FE000
|
unkown
|
page read and write
|
|
|
|
7FF5CCD0C000
|
unkown image
|
page readonly
|
|
|
|
1FDBA255000
|
unkown
|
page read and write
|
|
|
|
2336A680000
|
heap default
|
page read and write
|
|
|
|
25676645000
|
unkown
|
page read and write
|
|
|
|
7DF5CCF60000
|
unkown image
|
page readonly
|
|
|
|
7FF522C8B000
|
unkown image
|
page readonly
|
|
|
|
7FF522CBB000
|
unkown image
|
page readonly
|
|
|
|
7FF53B19B000
|
unkown image
|
page readonly
|
|
|
|
6D794FD000
|
unkown
|
page read and write
|
|
|
|
7DF5425B0000
|
unkown image
|
page readonly
|
|
|
|
7DF59BB60000
|
unkown image
|
page readonly
|
|
|
|
7DF5828B0000
|
unkown image
|
page readonly
|
|
|
|
2CC0000
|
unkown image
|
page readonly
|
|
|
|
256768D0000
|
unkown image
|
page readonly
|
|
|
|
7FF52CC70000
|
unkown image
|
page readonly
|
|
|
|
1A3F7F60000
|
unkown image
|
page readonly
|
|
|
|
4DEC6000
|
unkown
|
page read and write
|
|
|
|
28060660000
|
unkown
|
page read and write
|
|
|
|
7FF52CC9B000
|
unkown image
|
page readonly
|
|
|
|
7FF5860AF000
|
unkown image
|
page readonly
|
|
|
|
7FF52C349000
|
unkown image
|
page readonly
|
|
|
|
7FF585A6E000
|
unkown image
|
page readonly
|
|
|
|
A60E37E000
|
unkown
|
page read and write
|
|
|
|
2805BB00000
|
unkown
|
page read and write
|
|
|
|
2EC0000
|
unkown image
|
page readonly
|
|
|
|
7FF522B94000
|
unkown image
|
page readonly
|
|
|
|
2805C5E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B749F000
|
unkown image
|
page readonly
|
|
|
|
1A3F804D000
|
unkown
|
page read and write
|
|
|
|
7FF56CEE5000
|
unkown image
|
page readonly
|
|
|
|
28060A80000
|
unkown
|
page read and write
|
|
|
|
25676AD0000
|
unkown image
|
page readonly
|
|
|
|
1FDBA24B000
|
unkown
|
page read and write
|
|
|
|
25676520000
|
unkown image
|
page readonly
|
|
|
|
2805B313000
|
unkown
|
page read and write
|
|
|
|
1D458FC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B761B000
|
unkown image
|
page readonly
|
|
|
|
7FF56CF15000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCDBF000
|
unkown image
|
page readonly
|
|
|
|
280608F0000
|
unkown
|
page read and write
|
|
|
|
7FF522BA2000
|
unkown image
|
page readonly
|
|
|
|
1D4591E0000
|
unkown
|
page read and write
|
|
|
|
543D000
|
unkown
|
page read and write
|
|
|
|
7FF585FFD000
|
unkown image
|
page readonly
|
|
|
|
7FF52276F000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
2805B302000
|
unkown
|
page read and write
|
|
|
|
2805B28F000
|
unkown
|
page read and write
|
|
|
|
A60E27B000
|
unkown
|
page read and write
|
|
|
|
7F2F0000
|
unkown image
|
page readonly
|
|
|
|
7F2E2000
|
unkown image
|
page readonly
|
|
|
|
54D8000
|
unkown
|
page read and write
|
|
|
|
7FF585F13000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF58622B000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
unkown image
|
page read and write
|
|
|
|
1E332668000
|
unkown
|
page read and write
|
|
|
|
2A09000
|
unkown image
|
page readonly
|
|
|
|
7FF5E44D8000
|
unkown image
|
page readonly
|
|
|
|
25676648000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5229AC000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
2336A813000
|
unkown
|
page read and write
|
|
|
|
2336A800000
|
unkown
|
page read and write
|
|
|
|
6B54DFE000
|
unkown
|
page read and write
|
|
|
|
25676540000
|
unkown image
|
page readonly
|
|
|
|
7FF56CE9C000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7113000
|
unkown image
|
page readonly
|
|
|
|
7DF5385B2000
|
unkown image
|
page readonly
|
|
|
|
542F000
|
unkown
|
page read and write
|
|
|
|
4DEC5000
|
unkown
|
page read and write
|
|
|
|
7FF52284F000
|
unkown image
|
page readonly
|
|
|
|
7FF56CEE9000
|
unkown image
|
page readonly
|
|
|
|
A26EB2E000
|
unkown
|
page read and write
|
|
|
|
1D4592C5000
|
unkown
|
page read and write
|
|
|
|
1D459400000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCD39000
|
unkown image
|
page readonly
|
|
|
|
7FF5229AA000
|
unkown image
|
page readonly
|
|
|
|
1A3F8000000
|
unkown
|
page read and write
|
|
|
|
7FF56CCB7000
|
unkown image
|
page readonly
|
|
|
|
2A95000
|
unkown image
|
page readonly
|
|
|
|
7FF52283A000
|
unkown image
|
page readonly
|
|
|
|
25676550000
|
unkown image
|
page readonly
|
|
|
|
A26F3FE000
|
unkown
|
page read and write
|
|
|
|
668B28B000
|
unkown
|
page read and write
|
|
|
|
61E00000
|
unkown image
|
page readonly
|
|
|
|
7FF522CA4000
|
unkown image
|
page readonly
|
|
|
|
1A3F7FC0000
|
unkown
|
page read and write
|
|
|
|
7DF5FA0F0000
|
unkown image
|
page readonly
|
|
|
|
7FF522BAC000
|
unkown image
|
page readonly
|
|
|
|
7DF5CCF42000
|
unkown image
|
page readonly
|
|
|
|
7FF56CD4D000
|
unkown image
|
page readonly
|
|
|
|
986D17E000
|
unkown
|
page read and write
|
|
|
|
25E000
|
unkown
|
page read and write
|
|
|
|
25676662000
|
unkown
|
page read and write
|
|
|
|
6B54BFC000
|
unkown
|
page read and write
|
|
|
|
25676649000
|
unkown
|
page read and write
|
|
|
|
2BDB37E000
|
unkown
|
page read and write
|
|
|
|
280607B0000
|
unkown
|
page read and write
|
|
|
|
5467000
|
unkown
|
page read and write
|
|
|
|
7FF56CF8D000
|
unkown image
|
page readonly
|
|
|
|
7F2F2000
|
unkown image
|
page readonly
|
|
|
|
7DF5FA0F0000
|
unkown image
|
page readonly
|
|
|
|
6F410000
|
unkown image
|
page readonly
|
|
|
|
7FF52CC9F000
|
unkown image
|
page readonly
|
|
|
|
1E332C50000
|
unkown image
|
page readonly
|
|
|
|
6D7907C000
|
unkown
|
page read and write
|
|
|
|
7FF56CE2E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B6E5E000
|
unkown image
|
page readonly
|
|
|
|
11CD9E51000
|
unkown
|
page read and write
|
|
|
|
6739FFE000
|
unkown
|
page read and write
|
|
|
|
4DEB4000
|
unkown
|
page read and write
|
|
|
|
7FF5B75B5000
|
unkown image
|
page readonly
|
|
|
|
7FF53AEF8000
|
unkown image
|
page readonly
|
|
|
|
54AD000
|
unkown
|
page read and write
|
|
|
|
1D459802000
|
unkown
|
page read and write
|
|
|
|
7FF5E472A000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCDEB000
|
unkown image
|
page readonly
|
|
|
|
7FF5229E1000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0506000
|
unkown image
|
page readonly
|
|
|
|
2805B229000
|
unkown
|
page read and write
|
|
|
|
5489000
|
unkown
|
page read and write
|
|
|
|
7FF52237B000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown image
|
page readonly
|
|
|
|
28060823000
|
unkown
|
page read and write
|
|
|
|
6DB67E000
|
unkown
|
page read and write
|
|
|
|
197000
|
unkown
|
page read and write
|
|
|
|
7FF586157000
|
unkown image
|
page readonly
|
|
|
|
7FF52CC66000
|
unkown image
|
page readonly
|
|
|
|
2A0C000
|
unkown image
|
page readonly
|
|
|
|
11CD9E02000
|
unkown
|
page read and write
|
|
|
|
1D4592E3000
|
unkown
|
page read and write
|
|
|
|
7FF522B90000
|
unkown image
|
page readonly
|
|
|
|
7DF542590000
|
unkown image
|
page readonly
|
|
|
|
7FF5E479F000
|
unkown image
|
page readonly
|
|
|
|
7FF52CA6E000
|
unkown image
|
page readonly
|
|
|
|
7FF53B0A3000
|
unkown image
|
page readonly
|
|
|
|
2BBB000
|
unkown image
|
page readonly
|
|
|
|
7FF5E452D000
|
unkown image
|
page readonly
|
|
|
|
3570000
|
unkown image
|
page readonly
|
|
|
|
7FF522CAE000
|
unkown image
|
page readonly
|
|
|
|
7DF5385B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E47A6000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC581000
|
unkown image
|
page readonly
|
|
|
|
7FF585D23000
|
unkown image
|
page readonly
|
|
|
|
2A16000
|
unkown image
|
page readonly
|
|
|
|
7FF5E46CC000
|
unkown image
|
page readonly
|
|
|
|
6B552FF000
|
unkown
|
page read and write
|
|
|
|
25676600000
|
unkown
|
page read and write
|
|
|
|
1FDBA600000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0820000
|
unkown image
|
page readonly
|
|
|
|
542F000
|
unkown
|
page read and write
|
|
|
|
11CD9DE0000
|
unkown image
|
page readonly
|
|
|
|
7FF53AFD2000
|
unkown image
|
page readonly
|
|
|
|
280608F9000
|
unkown
|
page read and write
|
|
|
|
7FF56CF9B000
|
unkown image
|
page readonly
|
|
|
|
1D458FC0000
|
unkown image
|
page readonly
|
|
|
|
986D3FF000
|
unkown
|
page read and write
|
|
|
|
7DF59BB62000
|
unkown image
|
page readonly
|
|
|
|
7FF522CBF000
|
unkown image
|
page readonly
|
|
|
|
2805BB13000
|
unkown
|
page read and write
|
|
|
|
7FF522847000
|
unkown image
|
page readonly
|
|
|
|
6DB97E000
|
unkown
|
page read and write
|
|
|
|
7FF5B6CDF000
|
unkown image
|
page readonly
|
|
|
|
7DF550AA0000
|
unkown image
|
page readonly
|
|
|
|
54BC000
|
unkown
|
page read and write
|
|
|
|
7FF5860B5000
|
unkown image
|
page readonly
|
|
|
|
7FF53B168000
|
unkown image
|
page readonly
|
|
|
|
7FF53AF4D000
|
unkown image
|
page readonly
|
|
|
|
11CD9E80000
|
unkown
|
page read and write
|
|
|
|
7FF5E0793000
|
unkown image
|
page readonly
|
|
|
|
4E3D0000
|
unkown
|
page read and write
|
|
|
|
7FF522BF9000
|
unkown image
|
page readonly
|
|
|
|
4CD0000
|
heap private
|
page read and write
|
|
|
|
7FF53B19E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7128000
|
unkown image
|
page readonly
|
|
|
|
A26F2FD000
|
unkown
|
page read and write
|
|
|
|
1A3F84D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5FA0E0000
|
unkown image
|
page readonly
|
|
|
|
2336AD80000
|
unkown image
|
page readonly
|
|
|
|
7DF542592000
|
unkown image
|
page readonly
|
|
|
|
7FF5E446A000
|
unkown image
|
page readonly
|
|
|
|
7FF56CEA7000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCDFF000
|
unkown image
|
page readonly
|
|
|
|
7FF522A73000
|
unkown image
|
page readonly
|
|
|
|
6DB7FB000
|
unkown
|
page read and write
|
|
|
|
1A3F8053000
|
unkown
|
page read and write
|
|
|
|
7DF542592000
|
unkown image
|
page readonly
|
|
|
|
7F2E2000
|
unkown image
|
page readonly
|
|
|
|
11CD9E22000
|
unkown
|
page read and write
|
|
|
|
7FF522BB3000
|
unkown image
|
page readonly
|
|
|
|
28060AB0000
|
unkown
|
page read and write
|
|
|
|
2567666D000
|
unkown
|
page read and write
|
|
|
|
7DF5385D0000
|
unkown image
|
page readonly
|
|
|
|
7FF586167000
|
unkown image
|
page readonly
|
|
|
|
6DB6FE000
|
unkown
|
page read and write
|
|
|
|
7DF499A20000
|
unkown image
|
page readonly
|
|
|
|
4DECB000
|
unkown
|
page read and write
|
|
|
|
7FF58616C000
|
unkown image
|
page readonly
|
|
|
|
673A47D000
|
unkown
|
page read and write
|
|
|
|
2BDB6F7000
|
unkown
|
page read and write
|
|
|
|
2805B870000
|
unkown
|
page read and write
|
|
|
|
2805B28B000
|
unkown
|
page read and write
|
|
|
|
7FF53B02E000
|
unkown image
|
page readonly
|
|
|
|
6B550FF000
|
unkown
|
page read and write
|
|
|
|
28060794000
|
unkown
|
page read and write
|
|
|
|
7DF5FA0D2000
|
unkown image
|
page readonly
|
|
|
|
7FF5B764B000
|
unkown image
|
page readonly
|
|
|
|
1A3F7F40000
|
unkown image
|
page readonly
|
|
|
|
1FDBA010000
|
unkown image
|
page read and write
|
|
|
|
33F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B74C4000
|
unkown image
|
page readonly
|
|
|
|
4DEE2000
|
unkown
|
page read and write
|
|
|
|
6ED86000
|
unkown image
|
page write copy
|
|
|
|
6B54EFD000
|
unkown
|
page read and write
|
|
|
|
7FF58624E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7547000
|
unkown image
|
page readonly
|
|
|
|
24044920000
|
heap private
|
page read and write
|
|
|
|
7FF56CD7F000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7608000
|
unkown image
|
page readonly
|
|
|
|
7FF52CA8E000
|
unkown image
|
page readonly
|
|
|
|
7FF5E47DD000
|
unkown image
|
page readonly
|
|
|
|
1A3F8084000
|
unkown
|
page read and write
|
|
|
|
4E27F000
|
unkown
|
page read and write
|
|
|
|
26D000
|
unkown
|
page read and write
|
|
|
|
2E4A000
|
heap default
|
page read and write
|
|
|
|
2CEE000
|
unkown
|
page read and write
|
|
|
|
7FF52CBCD000
|
unkown image
|
page readonly
|
|
|
|
11CDA460000
|
unkown
|
page read and write
|
|
|
|
7FF56CF76000
|
unkown image
|
page readonly
|
|
|
|
7F300000
|
unkown image
|
page readonly
|
|
|
|
4DECC000
|
unkown
|
page read and write
|
|
|
|
5497000
|
unkown
|
page read and write
|
|
|
|
7FF53B115000
|
unkown image
|
page readonly
|
|
|
|
7DF5385C0000
|
unkown image
|
page readonly
|
|
|
|
1FDBA289000
|
unkown
|
page read and write
|
|
|
|
7DF5F6140000
|
unkown image
|
page readonly
|
|
|
|
A26EBAE000
|
unkown
|
page read and write
|
|
|
|
6EC60000
|
unkown image
|
page readonly
|
|
|
|
1E332629000
|
unkown
|
page read and write
|
|
|
|
24044A13000
|
unkown
|
page read and write
|
|
|
|
2336A864000
|
unkown
|
page read and write
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
6D7987C000
|
unkown
|
page read and write
|
|
|
|
4DEC8000
|
unkown
|
page read and write
|
|
|
|
7DF5425A2000
|
unkown image
|
page readonly
|
|
|
|
7FF58625F000
|
unkown image
|
page readonly
|
|
|
|
2BBB000
|
unkown image
|
page readonly
|
|
|
|
1D459213000
|
unkown
|
page read and write
|
|
|
|
25676650000
|
unkown
|
page read and write
|
|
|
|
7FF5B7620000
|
unkown image
|
page readonly
|
|
|
|
2805B2FD000
|
unkown
|
page read and write
|
|
|
|
240449E0000
|
unkown
|
page read and write
|
|
|
|
7DF5425B0000
|
unkown image
|
page readonly
|
|
|
|
1D458FE0000
|
unkown image
|
page readonly
|
|
|
|
2805B28D000
|
unkown
|
page read and write
|
|
|
|
2336B002000
|
unkown
|
page read and write
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
1D459780000
|
unkown image
|
page readonly
|
|
|
|
7FF52CAB3000
|
unkown image
|
page readonly
|
|
|
|
1FDBA030000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCD65000
|
unkown image
|
page readonly
|
|
|
|
2E2E000
|
unkown
|
page read and write
|
|
|
|
7FF522C0A000
|
unkown image
|
page readonly
|
|
|
|
6DBA77000
|
unkown
|
page read and write
|
|
|
|
1E332550000
|
unkown image
|
page readonly
|
|
|
|
7FF5E47AE000
|
unkown image
|
page readonly
|
|
|
|
7FF586178000
|
unkown image
|
page readonly
|
|
|
|
7FF56CEA3000
|
unkown image
|
page readonly
|
|
|
|
280605E0000
|
unkown
|
page read and write
|
|
|
|
6739F7F000
|
unkown
|
page read and write
|
|
|
|
7FF586073000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCDEE000
|
unkown image
|
page readonly
|
|
|
|
28060830000
|
unkown
|
page read and write
|
|
|
|
7FF5B7593000
|
unkown image
|
page readonly
|
|
|
|
7FF52CC58000
|
unkown image
|
page readonly
|
|
|
|
7FF5B6CD9000
|
unkown image
|
page readonly
|
|
|
|
673A4FE000
|
unkown
|
page read and write
|
|
|
|
1A3F8108000
|
unkown
|
page read and write
|
|
|
|
1D459010000
|
heap default
|
page read and write
|
|
|
|
24044A00000
|
unkown
|
page read and write
|
|
|
|
7FF53B17B000
|
unkown image
|
page readonly
|
|
|
|
7FF52CB14000
|
unkown image
|
page readonly
|
|
|
|
11CDA380000
|
unkown image
|
page readonly
|
|
|
|
11CD9F00000
|
unkown
|
page read and write
|
|
|
|
240449E0000
|
unkown
|
page read and write
|
|
|
|
8D0000
|
unkown image
|
page readonly
|
|
|
|
7FF53AD0E000
|
unkown image
|
page readonly
|
|
|
|
A60E17B000
|
unkown
|
page read and write
|
|
|
|
1A3F7F90000
|
heap default
|
page read and write
|
|
|
|
2805B0F0000
|
unkown image
|
page readonly
|
|
|
|
6DB38B000
|
unkown
|
page read and write
|
|
|
|
1A3F804B000
|
unkown
|
page read and write
|
|
|
|
28060AD0000
|
unkown
|
page read and write
|
|
|
|
11CD9E13000
|
unkown
|
page read and write
|
|
|
|
2AA7000
|
unkown image
|
page readonly
|
|
|
|
7FF5B763E000
|
unkown image
|
page readonly
|
|
|
|
A26F0F7000
|
unkown
|
page read and write
|
|
|
|
7DF5FA0E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5E46E7000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7DF5E26F0000
|
unkown image
|
page readonly
|
|
|
|
986D2FE000
|
unkown
|
page read and write
|
|
|
|
541F000
|
unkown
|
page read and write
|
|
|
|
24045202000
|
unkown
|
page read and write
|
|
|
|
7FF5E077D000
|
unkown image
|
page readonly
|
|
|
|
1A3F806F000
|
unkown
|
page read and write
|
|
|
|
7DF5CCF50000
|
unkown image
|
page readonly
|
|
|
|
7FF5B74A5000
|
unkown image
|
page readonly
|
|
|
|
25676639000
|
unkown
|
page read and write
|
|
|
|
1D459912000
|
unkown
|
page read and write
|
|
|
|
7FF53B1AD000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0816000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7119000
|
unkown image
|
page readonly
|
|
|
|
2336AD90000
|
unkown image
|
page readonly
|
|
|
|
7FF52CB93000
|
unkown image
|
page readonly
|
|
|
|
1E332AD0000
|
unkown image
|
page readonly
|
|
|
|
2805B400000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC586000
|
unkown image
|
page readonly
|
|
|
|
A60E47F000
|
unkown
|
page read and write
|
|
|
|
7FF5860D4000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7616000
|
unkown image
|
page readonly
|
|
|
|
264000
|
unkown
|
page read and write
|
|
|
|
7FF522C78000
|
unkown image
|
page readonly
|
|
|
|
4DEE1000
|
unkown
|
page read and write
|
|
|
|
7FF5E4798000
|
unkown image
|
page readonly
|
|
|
|
7FF5E470D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7463000
|
unkown image
|
page readonly
|
|
|
|
7FF53B0B7000
|
unkown image
|
page readonly
|
|
|
|
7FF5E084D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E47C4000
|
unkown image
|
page readonly
|
|
|
|
6DBC7E000
|
unkown
|
page read and write
|
|
|
|
7DF5385C2000
|
unkown image
|
page readonly
|
|
|
|
7DF5828A2000
|
unkown image
|
page readonly
|
|
|
|
24044950000
|
unkown image
|
page readonly
|
|
|
|
25676647000
|
unkown
|
page read and write
|
|
|
|
7DF59BB70000
|
unkown image
|
page readonly
|
|
|
|
1D459600000
|
unkown image
|
page readonly
|
|
|
|
7FF522B77000
|
unkown image
|
page readonly
|
|
|
|
1E3328D0000
|
unkown image
|
page readonly
|
|
|
|
280608FB000
|
unkown
|
page read and write
|
|
|
|
1A3F8100000
|
unkown
|
page read and write
|
|
|
|
1E332E02000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF56CF80000
|
unkown image
|
page readonly
|
|
|
|
7DF4F7FA0000
|
unkown image
|
page readonly
|
|
|
|
2805B110000
|
heap default
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
25676646000
|
unkown
|
page read and write
|
|
|
|
7FF53B176000
|
unkown image
|
page readonly
|
|
|
|
2336A802000
|
unkown
|
page read and write
|
|
|
|
7FF5E47DF000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
heap default
|
page read and write
|
|
|
|
7FF5E07B5000
|
unkown image
|
page readonly
|
|
|
|
7FF5E47AB000
|
unkown image
|
page readonly
|
|
|
|
7FF5E075D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7303000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4719000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2710000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4024000
|
unkown image
|
page readonly
|
|
|
|
A60E07F000
|
unkown
|
page read and write
|
|
|
|
7FF5E4690000
|
unkown image
|
page readonly
|
|
|
|
668B8FB000
|
unkown
|
page read and write
|
|
|
|
7FF53B0DD000
|
unkown image
|
page readonly
|
|
|
|
7FF53B092000
|
unkown image
|
page readonly
|
|
|
|
1FDBA080000
|
heap default
|
page read and write
|
|
|
|
673A0FF000
|
unkown
|
page read and write
|
|
|
|
A30000
|
unkown
|
page read and write
|
|
|
|
7FF56CF9E000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0834000
|
unkown image
|
page readonly
|
|
|
|
7FF522C9D000
|
unkown image
|
page readonly
|
|
|
|
7FF53B024000
|
unkown image
|
page readonly
|
|
|
|
7FF56CD6C000
|
unkown image
|
page readonly
|
|
|
|
7F300000
|
unkown image
|
page readonly
|
|
|
|
6D7927E000
|
unkown
|
page read and write
|
|
|
|
25676660000
|
unkown
|
page read and write
|
|
|
|
11CD9D00000
|
heap default
|
page read and write
|
|
|
|
7DF550AB0000
|
unkown image
|
page readonly
|
|
|
|
2805B274000
|
unkown
|
page read and write
|
|
|
|
1A3F8650000
|
unkown image
|
page readonly
|
|
|
|
261000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1D458FB0000
|
heap private
|
page read and write
|
|
|
|
4EDD000
|
unkown
|
page read and write
|
|
|
|
7DF5FA0E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5229B1000
|
unkown image
|
page readonly
|
|
|
|
7FF53B0F3000
|
unkown image
|
page readonly
|
|
|
|
318E000
|
unkown
|
page read and write
|
|
|
|
1FDBA060000
|
unkown image
|
page readonly
|
|
|
|
7FF56CCAD000
|
unkown image
|
page readonly
|
|
|
|
25676684000
|
unkown
|
page read and write
|
|
|
|
28060670000
|
unkown
|
page read and write
|
|
|
|
1D45993A000
|
unkown
|
page read and write
|
|
|
|
7FF5E46D7000
|
unkown image
|
page readonly
|
|
|
|
7FF5E05ED000
|
unkown image
|
page readonly
|
|
|
|
820000
|
unkown image
|
page readonly
|
|
|
|
1E332602000
|
unkown
|
page read and write
|
|
|
|
2567664F000
|
unkown
|
page read and write
|
|
|
|
673A37D000
|
unkown
|
page read and write
|
|
|
|
7FF5E0548000
|
unkown image
|
page readonly
|
|
|
|
7FF5861C5000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4715000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6142000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7543000
|
unkown image
|
page readonly
|
|
|
|
1A3F7F30000
|
heap private
|
page read and write
|
|
|
|
7FF52CBEA000
|
unkown image
|
page readonly
|
|
|
|
7FF522840000
|
unkown image
|
page readonly
|
|
|
|
7FF586218000
|
unkown image
|
page readonly
|
|
|
|
6B54FFE000
|
unkown
|
page read and write
|
|
|
|
6739A8C000
|
unkown
|
page read and write
|
|
|
|
1D4597B0000
|
unkown image
|
page write copy
|
|
|
|
7FF5E084F000
|
unkown image
|
page readonly
|
|
|
|
7FF52C953000
|
unkown image
|
page readonly
|
|
|
|
7FF58602E000
|
unkown image
|
page readonly
|
|
|
|
4AD0000
|
unkown
|
page read and write
|
|
|
|
267000
|
unkown
|
page read and write
|
|
|
|
7FF5E0808000
|
unkown image
|
page readonly
|
|
|
|
7FF586230000
|
unkown image
|
page readonly
|
|
|
|
7FF53B17E000
|
unkown image
|
page readonly
|
|
|
|
2805C060000
|
unkown
|
page read and write
|
|
|
|
B28000
|
heap default
|
page read and write
|
|
|
|
7FF52C778000
|
unkown image
|
page readonly
|
|
|
|
2336AC00000
|
unkown image
|
page readonly
|
|
|
|
28060AA0000
|
unkown
|
page read and write
|
|
|
|
1D4592CC000
|
unkown
|
page read and write
|
|
|
|
A60DCF7000
|
unkown
|
page read and write
|
|
|
|
7FF5E0785000
|
unkown image
|
page readonly
|
|
|
|
2805B0A0000
|
unkown image
|
page read and write
|
|
|
|
256765A0000
|
unkown
|
page read and write
|
|
|
|
A26EAAC000
|
unkown
|
page read and write
|
|
|
|
A60E5FE000
|
unkown
|
page read and write
|
|
|
|
7FF52CAEF000
|
unkown image
|
page readonly
|
|
|
|
7FF53AE88000
|
unkown image
|
page readonly
|
|
|
|
1FDBA400000
|
unkown image
|
page readonly
|
|
|
|
7DF5E26F2000
|
unkown image
|
page readonly
|
|
|
|
7FF52CC7D000
|
unkown image
|
page readonly
|
|
|
|
7FF522B80000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCD2D000
|
unkown image
|
page readonly
|
|
|
|
7FF52CBAC000
|
unkown image
|
page readonly
|
|
|
|
7DF5828B2000
|
unkown image
|
page readonly
|
|
|
|
2805C080000
|
unkown image
|
page read and write
|
|
|
|
7DF5FA0E0000
|
unkown image
|
page readonly
|
|
|
|
2567663D000
|
unkown
|
page read and write
|
|
|
|
A60DE79000
|
unkown
|
page read and write
|
|
|
|
7FF5E4723000
|
unkown image
|
page readonly
|
|
|
|
11CD9E8B000
|
unkown
|
page read and write
|
|
|
|
7FF52CC8E000
|
unkown image
|
page readonly
|
|
|
|
2805B780000
|
unkown image
|
page readonly
|
|
|
|
25676510000
|
heap private
|
page read and write
|
|
|
|
7FF5229B8000
|
unkown image
|
page readonly
|
|
|
|
6EC60000
|
unkown image
|
page readonly
|
|
|
|
25676632000
|
unkown
|
page read and write
|
|
|
|
6DB8FB000
|
unkown
|
page read and write
|
|
|
|
4DE90000
|
unkown
|
page read and write
|
|
|
|
986D07C000
|
unkown
|
page read and write
|
|
|
|
A60D8FB000
|
unkown
|
page read and write
|
|
|
|
7FF5CCDE4000
|
unkown image
|
page readonly
|
|
|
|
7FF585D29000
|
unkown image
|
page readonly
|
|
|
|
1D459302000
|
unkown
|
page read and write
|
|
|
|
29FB000
|
unkown image
|
page readonly
|
|
|
|
7FF53AF42000
|
unkown image
|
page readonly
|
|
|
|
54A7000
|
unkown
|
page read and write
|
|
|
|
7DF59BB52000
|
unkown image
|
page readonly
|
|
|
|
7FF5B755C000
|
unkown image
|
page readonly
|
|
|
|
280608DE000
|
unkown
|
page read and write
|
|
|
|
7FF522AF7000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4557000
|
unkown image
|
page readonly
|
|
|
|
6F429000
|
unkown image
|
page readonly
|
|
|
|
7FF56CFAB000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6160000
|
unkown image
|
page readonly
|
|
|
|
7FF58621F000
|
unkown image
|
page readonly
|
|
|
|
1FDBA308000
|
unkown
|
page read and write
|
|
|
|
1A3F7F40000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6140000
|
unkown image
|
page readonly
|
|
|
|
7FF5227C6000
|
unkown image
|
page readonly
|
|
|
|
1A3F8051000
|
unkown
|
page read and write
|
|
|
|
7FF58625F000
|
unkown image
|
page readonly
|
|
|
|
7FF522BF5000
|
unkown image
|
page readonly
|
|
|
|
280608FC000
|
unkown
|
page read and write
|
|
|
|
A60E57F000
|
unkown
|
page read and write
|
|
|
|
30B0000
|
heap private
|
page read and write
|
|
|
|
3080000
|
unkown
|
page read and write
|
|
|
|
7DF44E970000
|
unkown image
|
page readonly
|
|
|
|
29D4000
|
unkown image
|
page readonly
|
|
|
|
1A3F8049000
|
unkown
|
page read and write
|
|
|
|
7FF5E080F000
|
unkown image
|
page readonly
|
|
|
|
7FF53B18D000
|
unkown image
|
page readonly
|
|
|
|
28060650000
|
unkown
|
page read and write
|
|
|
|
AEE000
|
unkown
|
page read and write
|
|
|
|
1FDBA780000
|
unkown image
|
page readonly
|
|
|
|
7FF52CC5F000
|
unkown image
|
page readonly
|
|
|
|
543D000
|
unkown
|
page read and write
|
|
|
|
28060770000
|
unkown
|
page read and write
|
|
|
|
7FF522442000
|
unkown image
|
page readonly
|
|
|
|
2805BB58000
|
unkown
|
page read and write
|
|
|
|
1A3F8113000
|
unkown
|
page read and write
|
|
|
|
2336A630000
|
unkown image
|
page readonly
|
|
|
|
7DF5828A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCB9D000
|
unkown image
|
page readonly
|
|
|
|
7FF52CBB8000
|
unkown image
|
page readonly
|
|
|
|
1FDBA24D000
|
unkown
|
page read and write
|
|
|
|
2805B0E0000
|
unkown image
|
page readonly
|
|
|
|
25676642000
|
unkown
|
page read and write
|
|
|
|
7FF56CF6F000
|
unkown image
|
page readonly
|
|
|
|
7FF58604E000
|
unkown image
|
page readonly
|
|
|
|
5457000
|
unkown
|
page read and write
|
|
|
|
25676677000
|
unkown
|
page read and write
|
|
|
|
4DEBD000
|
unkown
|
page read and write
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
280608F0000
|
unkown
|
page read and write
|
|
|
|
7FF5861AA000
|
unkown image
|
page readonly
|
|
|
|
2336A900000
|
unkown
|
page read and write
|
|
|
|
7FF586023000
|
unkown image
|
page readonly
|
|
|
|
24044A5C000
|
unkown
|
page read and write
|
|
|
|
2336A660000
|
unkown image
|
page readonly
|
|
|
|
2806077E000
|
unkown
|
page read and write
|
|
|
|
2567667A000
|
unkown
|
page read and write
|
|
|
|
2805B200000
|
unkown
|
page read and write
|
|
|
|
2806083C000
|
unkown
|
page read and write
|
|
|
|
7FF522CBF000
|
unkown image
|
page readonly
|
|
|
|
4E3BF000
|
unkown
|
page read and write
|
|
|
|
24045060000
|
unkown image
|
page readonly
|
|
|
|
24044CD0000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2702000
|
unkown image
|
page readonly
|
|
|
|
7FF5E467D000
|
unkown image
|
page readonly
|
|
|
|
2805B296000
|
unkown
|
page read and write
|
|
|
|
6D7997F000
|
unkown
|
page read and write
|
|
|
|
7FF5CCD35000
|
unkown image
|
page readonly
|
|
|
|
2805C250000
|
unkown image
|
page readonly
|
|
|
|
A26F1FF000
|
unkown
|
page read and write
|
|
|
|
54CB000
|
unkown
|
page read and write
|
|
|
|
7FF522A54000
|
unkown image
|
page readonly
|
|
|
|
6F430000
|
unkown image
|
page read and write
|
|
|
|
7F1E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCDFF000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
6B54AFF000
|
unkown
|
page read and write
|
|
|
|
7FF5227F1000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
1E332600000
|
unkown
|
page read and write
|
|
|
|
280607E0000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown
|
page read and write
|
|
|
|
7DF5CCF52000
|
unkown image
|
page readonly
|
|
|
|
2805B2B5000
|
unkown
|
page read and write
|
|
|
|
2805C280000
|
unkown image
|
page readonly
|
|
|
|
2805BB18000
|
unkown
|
page read and write
|
|
|
|
7FF58624B000
|
unkown image
|
page readonly
|
|
|
|
28060889000
|
unkown
|
page read and write
|
|
|
|
2EA7000
|
unkown
|
page read and write
|
|
|
|
7FF522B98000
|
unkown image
|
page readonly
|
|
|
|
4E17E000
|
unkown
|
page read and write
|
|
|
|
7DF5425A2000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2700000
|
unkown image
|
page readonly
|
|
|
|
4AD0000
|
unkown
|
page read and write
|
|
|
|
1D459289000
|
unkown
|
page read and write
|
|
|
|
4DEAF000
|
unkown
|
page read and write
|
|
There are 1059 hidden memdumps, click here to show them.