Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Revised Proforma Invoice_New order.exe
|
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Revised Proforma Invoice_New order.exe.log
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\Revised Proforma Invoice_New order.exe
|
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\Revised Proforma Invoice_New order.exe:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1vgntrt1.ztt.psm1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ff5nys0k.j11.ps1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jm0jnll4.eqo.ps1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ngqwsyfo.kwg.psm1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pvgur2kc.vrh.ps1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_zbprfsgr.2ta.psm1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\Documents\20210928\PowerShell_transcript.114127.HB6zZtzF.20210928085543.txt
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\20210928\PowerShell_transcript.114127.I2K6eNc7.20210928085600.txt
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\20210928\PowerShell_transcript.114127.syR87O2Z.20210928085551.txt
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
There are 4 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Revised Proforma Invoice_New order.exe
|
'C:\Users\user\Desktop\Revised Proforma Invoice_New order.exe'
|
|
|
|
C:\Users\user\AppData\Local\Temp\Revised Proforma Invoice_New order.exe
|
C:\Users\user\AppData\Local\Temp\Revised Proforma Invoice_New order.exe
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
|
'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Start-Sleep -s 5
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
|
'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Start-Sleep -s 5
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
|
'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Start-Sleep -s 5
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://127.0.0.1:HTTP/1.1
|
unknown
|
|
|
|
http://DynDns.comDynDNS
|
unknown
|
|
|
|
http://AAbVfU.com
|
unknown
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
|
unknown
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
|
unknown
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3EED000
|
unkown
|
page read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
2E89000
|
unkown
|
page read and write
|
|
|
|
31A1000
|
unkown
|
page read and write
|
|
|
|
3E71000
|
unkown
|
page read and write
|
|
|
|
2F1E000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
16580C70000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
BC7AA78000
|
unkown
|
page read and write
|
|
|
|
2C50000
|
unkown
|
page read and write
|
|
|
|
7FF50B9B1000
|
unkown image
|
page readonly
|
|
|
|
288DA780000
|
unkown image
|
page readonly
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
FF0000
|
unkown
|
page read and write
|
|
|
|
1C820D95000
|
unkown
|
page read and write
|
|
|
|
66AF000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CCC000
|
unkown image
|
page readonly
|
|
|
|
1C821302000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
1C820D5F000
|
unkown
|
page read and write
|
|
|
|
7FF5D93C9000
|
unkown image
|
page readonly
|
|
|
|
5650000
|
unkown
|
page read and write
|
|
|
|
57B0000
|
unkown
|
page read and write
|
|
|
|
1890000
|
unkown image
|
page readonly
|
|
|
|
2FB0000
|
heap private
|
page execute and read and write
|
|
|
|
14F1A302000
|
unkown
|
page read and write
|
|
|
|
5605000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
7FF50BB5E000
|
unkown image
|
page readonly
|
|
|
|
7FF510246000
|
unkown image
|
page readonly
|
|
|
|
7FF50BA41000
|
unkown image
|
page readonly
|
|
|
|
1C820DB5000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
14F1A150000
|
unkown image
|
page readonly
|
|
|
|
7FF55907D000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
21B53B40000
|
unkown image
|
page readonly
|
|
|
|
14CD000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5D9D91000
|
unkown image
|
page readonly
|
|
|
|
7FF53DE57000
|
unkown image
|
page readonly
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
2C20000
|
unkown
|
page read and write
|
|
|
|
15C6000
|
unkown
|
page read and write
|
|
|
|
E50000
|
unkown image
|
page readonly
|
|
|
|
288DA7C0000
|
unkown
|
page read and write
|
|
|
|
584E000
|
unkown
|
page read and write
|
|
|
|
10BC000
|
unkown
|
page read and write
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
1C820D7F000
|
unkown
|
page read and write
|
|
|
|
1C82044B000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
7FF5D9860000
|
unkown image
|
page readonly
|
|
|
|
6C3DD7B000
|
unkown
|
page read and write
|
|
|
|
7FF5D9D92000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9CA0000
|
unkown image
|
page readonly
|
|
|
|
1385000
|
heap default
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
F70000
|
heap private
|
page read and write
|
|
|
|
21B53C5C000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820DAB000
|
unkown
|
page read and write
|
|
|
|
F63000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5D9CEA000
|
unkown image
|
page readonly
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9B81000
|
unkown image
|
page readonly
|
|
|
|
16580C4E000
|
unkown
|
page read and write
|
|
|
|
3068000
|
unkown
|
page read and write
|
|
|
|
16580C47000
|
unkown
|
page read and write
|
|
|
|
4D2E0FE000
|
unkown
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
55F4000
|
unkown
|
page read and write
|
|
|
|
288DA81F000
|
unkown
|
page read and write
|
|
|
|
7FF53DE3A000
|
unkown image
|
page readonly
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
7DF525810000
|
unkown image
|
page readonly
|
|
|
|
7FF50BBB4000
|
unkown image
|
page readonly
|
|
|
|
5CA0000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1576000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C42000
|
unkown image
|
page readonly
|
|
|
|
7FF50BB4A000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
1C820DBC000
|
unkown
|
page read and write
|
|
|
|
5440000
|
unkown
|
page read and write
|
|
|
|
7DF56E180000
|
unkown image
|
page readonly
|
|
|
|
7FF53DBC0000
|
unkown image
|
page readonly
|
|
|
|
7FF53DEB6000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9B9B000
|
unkown image
|
page readonly
|
|
|
|
7DF5EEE22000
|
unkown image
|
page readonly
|
|
|
|
170F000
|
unkown
|
page read and write
|
|
|
|
5430000
|
unkown
|
page read and write
|
|
|
|
BC7AB7C000
|
unkown
|
page read and write
|
|
|
|
1C820DA5000
|
unkown
|
page read and write
|
|
|
|
4EDF0B000
|
unkown
|
page read and write
|
|
|
|
288DA81E000
|
unkown
|
page read and write
|
|
|
|
1C820400000
|
unkown
|
page read and write
|
|
|
|
2F80000
|
unkown
|
page read and write
|
|
|
|
1C820D7D000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
1540000
|
unkown
|
page read and write
|
|
|
|
7DF520CD2000
|
unkown image
|
page readonly
|
|
|
|
21B53B10000
|
heap private
|
page read and write
|
|
|
|
560E000
|
unkown
|
page read and write
|
|
|
|
21B53D02000
|
unkown
|
page read and write
|
|
|
|
BC7A6F7000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9875000
|
unkown image
|
page readonly
|
|
|
|
7FF559005000
|
unkown image
|
page readonly
|
|
|
|
1C820D9C000
|
unkown
|
page read and write
|
|
|
|
7DF520CE2000
|
unkown image
|
page readonly
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
1C821300000
|
unkown
|
page read and write
|
|
|
|
7DF5EEE30000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
14F1A24D000
|
unkown
|
page read and write
|
|
|
|
10AA000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown image
|
page readonly
|
|
|
|
1C821202000
|
unkown
|
page read and write
|
|
|
|
7FF5D9D16000
|
unkown image
|
page readonly
|
|
|
|
1C820D6A000
|
unkown
|
page read and write
|
|
|
|
3080000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
14C4000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D5D000
|
unkown
|
page read and write
|
|
|
|
41A1000
|
unkown
|
page read and write
|
|
|
|
7FF5D9BA8000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D9C000
|
unkown
|
page read and write
|
|
|
|
7FF5105E4000
|
unkown image
|
page readonly
|
|
|
|
7FF50B289000
|
unkown image
|
page readonly
|
|
|
|
1490000
|
unkown image
|
page read and write
|
|
|
|
1C821202000
|
unkown
|
page read and write
|
|
|
|
7FF5D9A17000
|
unkown image
|
page readonly
|
|
|
|
7FF53DEBD000
|
unkown image
|
page readonly
|
|
|
|
7DF4ECCE0000
|
unkown image
|
page readonly
|
|
|
|
16580D13000
|
unkown
|
page read and write
|
|
|
|
7FF53DE2C000
|
unkown image
|
page readonly
|
|
|
|
7FF55905E000
|
unkown image
|
page readonly
|
|
|
|
7FF5104D1000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9C8A000
|
unkown image
|
page readonly
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
5620000
|
unkown
|
page read and write
|
|
|
|
1C82044E000
|
unkown
|
page read and write
|
|
|
|
21B54250000
|
unkown image
|
page readonly
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
21B54402000
|
unkown
|
page read and write
|
|
|
|
1C8202F0000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1570000
|
heap private
|
page read and write
|
|
|
|
7FF5D9C53000
|
unkown image
|
page readonly
|
|
|
|
1C820B40000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2E36000
|
unkown
|
page read and write
|
|
|
|
560C000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
1C820D1D000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
18C0000
|
unkown image
|
page readonly
|
|
|
|
21B53C7A000
|
unkown
|
page read and write
|
|
|
|
7FF5590EA000
|
unkown image
|
page readonly
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C820DAB000
|
unkown
|
page read and write
|
|
|
|
7FF53DCE3000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9C6F000
|
unkown image
|
page readonly
|
|
|
|
BC7AC7F000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2F90000
|
unkown
|
page execute and read and write
|
|
|
|
1C820D71000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
FBE000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
1AC0000
|
unkown image
|
page readonly
|
|
|
|
1C820D70000
|
unkown
|
page read and write
|
|
|
|
7DF520CD2000
|
unkown image
|
page readonly
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
14F1A270000
|
unkown
|
page read and write
|
|
|
|
1C820D1E000
|
unkown
|
page read and write
|
|
|
|
7FF5D9812000
|
unkown image
|
page readonly
|
|
|
|
7FF5D95F3000
|
unkown image
|
page readonly
|
|
|
|
288DA7F1000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
1C820D6D000
|
unkown
|
page read and write
|
|
|
|
7FF5D9AA0000
|
unkown image
|
page readonly
|
|
|
|
1530000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
1C820D70000
|
unkown
|
page read and write
|
|
|
|
150B000
|
unkown
|
page execute and read and write
|
|
|
|
1C82044D000
|
unkown
|
page read and write
|
|
|
|
BC7A7FF000
|
unkown
|
page read and write
|
|
|
|
1C820D69000
|
unkown
|
page read and write
|
|
|
|
288DA7EB000
|
heap default
|
page read and write
|
|
|
|
6C3D9DE000
|
unkown
|
page read and write
|
|
|
|
7FF50BAB3000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
288DA9F0000
|
unkown image
|
page readonly
|
|
|
|
16580C88000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C8C000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
288DA9D5000
|
heap private
|
page read and write
|
|
|
|
4D2E1FB000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
16580C4C000
|
unkown
|
page read and write
|
|
|
|
5650000
|
unkown
|
page read and write
|
|
|
|
6650000
|
unkown
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
F00000
|
unkown
|
page read and write
|
|
|
|
2E36000
|
unkown
|
page read and write
|
|
|
|
7FF50BBCE000
|
unkown image
|
page readonly
|
|
|
|
2BDE000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B4A000
|
unkown image
|
page readonly
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
7FF5D9A5B000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
16580B40000
|
unkown image
|
page readonly
|
|
|
|
B10000
|
unkown image
|
page readonly
|
|
|
|
1C820DBE000
|
unkown
|
page read and write
|
|
|
|
7FF55902F000
|
unkown image
|
page readonly
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
1C820D84000
|
unkown
|
page read and write
|
|
|
|
16580A10000
|
unkown image
|
page readonly
|
|
|
|
7FF53DE84000
|
unkown image
|
page readonly
|
|
|
|
21B53C13000
|
unkown
|
page read and write
|
|
|
|
1C820D78000
|
unkown
|
page read and write
|
|
|
|
1C820D6B000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B9E000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
14F1A213000
|
unkown
|
page read and write
|
|
|
|
666D000
|
unkown
|
page read and write
|
|
|
|
7FF50BB77000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
2E3A000
|
unkown
|
page read and write
|
|
|
|
2E71000
|
unkown
|
page read and write
|
|
|
|
7FAF2000
|
unkown image
|
page readonly
|
|
|
|
2C40000
|
unkown
|
page execute and read and write
|
|
|
|
1502000
|
unkown
|
page read and write
|
|
|
|
7FF5D9D0E000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF50BB5A000
|
unkown image
|
page readonly
|
|
|
|
1C820DBC000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
1C820DD9000
|
unkown
|
page read and write
|
|
|
|
7FF50B8D7000
|
unkown image
|
page readonly
|
|
|
|
14F1A180000
|
heap default
|
page read and write
|
|
|
|
5C76000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C74000
|
unkown image
|
page readonly
|
|
|
|
7FF559068000
|
unkown image
|
page readonly
|
|
|
|
7DF525802000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
5410000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
56C0000
|
heap private
|
page execute and read and write
|
|
|
|
1C820429000
|
unkown
|
page read and write
|
|
|
|
1C820DC7000
|
unkown
|
page read and write
|
|
|
|
1C820DA7000
|
unkown
|
page read and write
|
|
|
|
69B0000
|
unkown
|
page read and write
|
|
|
|
54DE000
|
unkown
|
page read and write
|
|
|
|
580E000
|
unkown
|
page read and write
|
|
|
|
7FF50BB97000
|
unkown image
|
page readonly
|
|
|
|
7FF5103F7000
|
unkown image
|
page readonly
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
14F1A130000
|
unkown image
|
page readonly
|
|
|
|
6660000
|
unkown
|
page read and write
|
|
|
|
FBF578E000
|
unkown
|
page read and write
|
|
|
|
1C820DA4000
|
unkown
|
page read and write
|
|
|
|
7FF50BC52000
|
unkown image
|
page readonly
|
|
|
|
7DF56E180000
|
unkown image
|
page readonly
|
|
|
|
1C820B40000
|
unkown
|
page read and write
|
|
|
|
16580C51000
|
unkown
|
page read and write
|
|
|
|
FBF570F000
|
unkown
|
page read and write
|
|
|
|
1C820DCA000
|
unkown
|
page read and write
|
|
|
|
52EE000
|
unkown
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
5656000
|
unkown
|
page read and write
|
|
|
|
7FF5106B7000
|
unkown image
|
page readonly
|
|
|
|
4D2DE7C000
|
unkown
|
page read and write
|
|
|
|
6670000
|
unkown
|
page read and write
|
|
|
|
5860000
|
unkown
|
page read and write
|
|
|
|
FA8000
|
unkown
|
page read and write
|
|
|
|
5911000
|
unkown
|
page read and write
|
|
|
|
1C8204D7000
|
unkown
|
page read and write
|
|
|
|
14F1AA02000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7FF559000000
|
unkown image
|
page readonly
|
|
|
|
16580D00000
|
unkown
|
page read and write
|
|
|
|
7FF55902C000
|
unkown image
|
page readonly
|
|
|
|
7FF5106E8000
|
unkown image
|
page readonly
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
1C82126A000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
D80000
|
unkown image
|
page readonly
|
|
|
|
7FF5106CA000
|
unkown image
|
page readonly
|
|
|
|
5A4E000
|
unkown
|
page read and write
|
|
|
|
7DF552FB0000
|
unkown image
|
page readonly
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
7FF50BBBF000
|
unkown image
|
page readonly
|
|
|
|
5410000
|
unkown
|
page read and write
|
|
|
|
7DF46C040000
|
unkown image
|
page readonly
|
|
|
|
151B000
|
heap default
|
page read and write
|
|
|
|
3F44000
|
unkown
|
page read and write
|
|
|
|
1C820DAF000
|
unkown
|
page read and write
|
|
|
|
7FF50BACC000
|
unkown image
|
page readonly
|
|
|
|
B6C000
|
unkown
|
page read and write
|
|
|
|
14F1A308000
|
unkown
|
page read and write
|
|
|
|
1C820454000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C8204BD000
|
unkown
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
7FF5106FD000
|
unkown image
|
page readonly
|
|
|
|
7FF510764000
|
unkown image
|
page readonly
|
|
|
|
1155000
|
unkown
|
page read and write
|
|
|
|
10BB000
|
heap default
|
page read and write
|
|
|
|
1C820D70000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
1C820DCA000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
3067000
|
unkown
|
page read and write
|
|
|
|
7F222000
|
unkown image
|
page readonly
|
|
|
|
6630000
|
unkown
|
page read and write
|
|
|
|
41C9000
|
unkown
|
page read and write
|
|
|
|
7FF50BBD6000
|
unkown image
|
page readonly
|
|
|
|
7FF5590F2000
|
unkown image
|
page readonly
|
|
|
|
FB0000
|
unkown image
|
page readonly
|
|
|
|
1C820D72000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
1C820DB3000
|
unkown
|
page read and write
|
|
|
|
7FF5105EC000
|
unkown image
|
page readonly
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
662B000
|
unkown
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
7FF50BA5E000
|
unkown image
|
page readonly
|
|
|
|
1C8202C0000
|
heap private
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C820D5F000
|
unkown
|
page read and write
|
|
|
|
1C820D5F000
|
unkown
|
page read and write
|
|
|
|
1C820D6C000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
7FF50B726000
|
unkown image
|
page readonly
|
|
|
|
16580D08000
|
unkown
|
page read and write
|
|
|
|
7DF5EEE20000
|
unkown image
|
page readonly
|
|
|
|
BC7A27B000
|
unkown
|
page read and write
|
|
|
|
7FF50BAC4000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
10A0000
|
unkown
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
6C3D95C000
|
unkown
|
page read and write
|
|
|
|
148E000
|
unkown
|
page read and write
|
|
|
|
7FF53DF24000
|
unkown image
|
page readonly
|
|
|
|
1C820D75000
|
unkown
|
page read and write
|
|
|
|
1C820D73000
|
unkown
|
page read and write
|
|
|
|
16580C72000
|
unkown
|
page read and write
|
|
|
|
2E38000
|
unkown
|
page read and write
|
|
|
|
1C820D78000
|
unkown
|
page read and write
|
|
|
|
1C820D6F000
|
unkown
|
page read and write
|
|
|
|
F50000
|
unkown
|
page read and write
|
|
|
|
7FF53DA00000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B61000
|
unkown image
|
page readonly
|
|
|
|
7DF552FB2000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
165809F0000
|
unkown image
|
page read and write
|
|
|
|
7FF5D9866000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
2E3C000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B43000
|
unkown image
|
page readonly
|
|
|
|
4D2DF7E000
|
unkown
|
page read and write
|
|
|
|
14F1A850000
|
unkown image
|
page readonly
|
|
|
|
7FF5D95F7000
|
unkown image
|
page readonly
|
|
|
|
4D2DEFE000
|
unkown
|
page read and write
|
|
|
|
7FF50BA21000
|
unkown image
|
page readonly
|
|
|
|
1C82046F000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
288DAD90000
|
unkown image
|
page readonly
|
|
|
|
7FF51076A000
|
unkown image
|
page readonly
|
|
|
|
7FF53DF2A000
|
unkown image
|
page readonly
|
|
|
|
2C70000
|
heap private
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
21B53C85000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
14F1A22A000
|
unkown
|
page read and write
|
|
|
|
569E000
|
unkown
|
page read and write
|
|
|
|
1C821202000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
BC7A37E000
|
unkown
|
page read and write
|
|
|
|
21B53D08000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF510771000
|
unkown image
|
page readonly
|
|
|
|
1510000
|
heap default
|
page read and write
|
|
|
|
FBF5AFA000
|
unkown
|
page read and write
|
|
|
|
1C820516000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820DB0000
|
unkown
|
page read and write
|
|
|
|
7DF520CE0000
|
unkown image
|
page readonly
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
14F1A110000
|
unkown image
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
7FF53DE8A000
|
unkown image
|
page readonly
|
|
|
|
1C820D7C000
|
unkown
|
page read and write
|
|
|
|
1C820D6E000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C9A000
|
unkown image
|
page readonly
|
|
|
|
1C820DAB000
|
unkown
|
page read and write
|
|
|
|
7FF53DE2A000
|
unkown image
|
page readonly
|
|
|
|
D80000
|
unkown image
|
page readonly
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C820D87000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2E50000
|
unkown
|
page read and write
|
|
|
|
7FAF0000
|
unkown image
|
page readonly
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
56D0000
|
unkown image
|
page readonly
|
|
|
|
5CF1000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D75000
|
unkown
|
page read and write
|
|
|
|
6C3DEFE000
|
unkown
|
page read and write
|
|
|
|
CDF000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
7FF5D9D8A000
|
unkown image
|
page readonly
|
|
|
|
1500000
|
unkown
|
page read and write
|
|
|
|
7DF525800000
|
unkown image
|
page readonly
|
|
|
|
1C82048A000
|
unkown
|
page read and write
|
|
|
|
1C820DA1000
|
unkown
|
page read and write
|
|
|
|
7FAF0000
|
unkown image
|
page readonly
|
|
|
|
1C821202000
|
unkown
|
page read and write
|
|
|
|
7FF53DEAE000
|
unkown image
|
page readonly
|
|
|
|
7FF5D997A000
|
unkown image
|
page readonly
|
|
|
|
288DA9D0000
|
heap private
|
page read and write
|
|
|
|
4EE47B000
|
unkown
|
page read and write
|
|
|
|
1C820D6F000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
7DF520CD0000
|
unkown image
|
page readonly
|
|
|
|
1C8202D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9BA3000
|
unkown image
|
page readonly
|
|
|
|
1C820D6F000
|
unkown
|
page read and write
|
|
|
|
15DE000
|
unkown
|
page read and write
|
|
|
|
155B000
|
unkown
|
page execute and read and write
|
|
|
|
4EE577000
|
unkown
|
page read and write
|
|
|
|
7FF558953000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
16580C3C000
|
unkown
|
page read and write
|
|
|
|
7F220000
|
unkown image
|
page readonly
|
|
|
|
1C820D7A000
|
unkown
|
page read and write
|
|
|
|
14F6000
|
unkown
|
page execute and read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
10EF000
|
heap default
|
page read and write
|
|
|
|
14F1A300000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
5BA0000
|
unkown
|
page read and write
|
|
|
|
7FF5105CD000
|
unkown image
|
page readonly
|
|
|
|
1C820D75000
|
unkown
|
page read and write
|
|
|
|
1C820D75000
|
unkown
|
page read and write
|
|
|
|
1C820D77000
|
unkown
|
page read and write
|
|
|
|
69AE000
|
unkown
|
page read and write
|
|
|
|
590F000
|
unkown
|
page read and write
|
|
|
|
21B53C61000
|
unkown
|
page read and write
|
|
|
|
57B0000
|
unkown
|
page read and write
|
|
|
|
D80000
|
unkown image
|
page readonly
|
|
|
|
68AE000
|
unkown
|
page read and write
|
|
|
|
288DA7A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9CA5000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
16580C81000
|
unkown
|
page read and write
|
|
|
|
544E000
|
unkown
|
page read and write
|
|
|
|
14D0000
|
heap private
|
page read and write
|
|
|
|
5410000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7DF41EBA0000
|
unkown image
|
page readonly
|
|
|
|
7DF552FB2000
|
unkown image
|
page readonly
|
|
|
|
5910000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
1C820DBE000
|
unkown
|
page read and write
|
|
|
|
1C820800000
|
unkown image
|
page readonly
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
7FF510255000
|
unkown image
|
page readonly
|
|
|
|
10B0000
|
heap default
|
page read and write
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
D82000
|
unkown image
|
page readonly
|
|
|
|
5648000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C0C000
|
unkown image
|
page readonly
|
|
|
|
1C820D77000
|
unkown
|
page read and write
|
|
|
|
1C820D81000
|
unkown
|
page read and write
|
|
|
|
1C820DD9000
|
unkown
|
page read and write
|
|
|
|
CE3000
|
unkown
|
page read and write
|
|
|
|
1C820D77000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D9C000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
1C820DAB000
|
unkown
|
page read and write
|
|
|
|
319F000
|
unkown
|
page read and write
|
|
|
|
1C8204F6000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
16580C29000
|
unkown
|
page read and write
|
|
|
|
7FF53DF31000
|
unkown image
|
page readonly
|
|
|
|
14F1A200000
|
unkown
|
page read and write
|
|
|
|
1C820DA4000
|
unkown
|
page read and write
|
|
|
|
1C820D7F000
|
unkown
|
page read and write
|
|
|
|
7FF53DD93000
|
unkown image
|
page readonly
|
|
|
|
A42000
|
unkown image
|
page readonly
|
|
|
|
21B53C2A000
|
unkown
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
7FF50B8E0000
|
unkown image
|
page readonly
|
|
|
|
1C820DAC000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
14F0000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
7FF5D98B7000
|
unkown image
|
page readonly
|
|
|
|
FC7000
|
unkown
|
page read and write
|
|
|
|
21B53C5E000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
1C821202000
|
unkown
|
page read and write
|
|
|
|
1C820D7C000
|
unkown
|
page read and write
|
|
|
|
21B53B50000
|
unkown image
|
page readonly
|
|
|
|
FC5000
|
heap default
|
page read and write
|
|
|
|
2D7E000
|
unkown
|
page read and write
|
|
|
|
7FF55906E000
|
unkown image
|
page readonly
|
|
|
|
7F9E0000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820DC2000
|
unkown
|
page read and write
|
|
|
|
14F1A1B0000
|
unkown
|
page read and write
|
|
|
|
FBF568A000
|
unkown
|
page read and write
|
|
|
|
1C820D69000
|
unkown
|
page read and write
|
|
|
|
1C820D6F000
|
unkown
|
page read and write
|
|
|
|
7FF50B735000
|
unkown image
|
page readonly
|
|
|
|
1C820DAF000
|
unkown
|
page read and write
|
|
|
|
7FF50BA03000
|
unkown image
|
page readonly
|
|
|
|
7FF559079000
|
unkown image
|
page readonly
|
|
|
|
7F120000
|
unkown image
|
page readonly
|
|
|
|
16580A30000
|
unkown image
|
page readonly
|
|
|
|
7FF50BBD9000
|
unkown image
|
page readonly
|
|
|
|
6C3DE7B000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
7FF51067A000
|
unkown image
|
page readonly
|
|
|
|
1C820D15000
|
unkown
|
page read and write
|
|
|
|
529E000
|
unkown
|
page read and write
|
|
|
|
7FF5D9AF1000
|
unkown image
|
page readonly
|
|
|
|
5660000
|
unkown
|
page read and write
|
|
|
|
7FF53DE94000
|
unkown image
|
page readonly
|
|
|
|
1C820D79000
|
unkown
|
page read and write
|
|
|
|
5620000
|
unkown
|
page read and write
|
|
|
|
1C82044A000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
16580D02000
|
unkown
|
page read and write
|
|
|
|
1C820D7F000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
5C6D000
|
unkown
|
page read and write
|
|
|
|
6C3E0FF000
|
unkown
|
page read and write
|
|
|
|
14F1A252000
|
unkown
|
page read and write
|
|
|
|
5C71000
|
unkown
|
page read and write
|
|
|
|
1C820DAB000
|
unkown
|
page read and write
|
|
|
|
D82000
|
unkown image
|
page readonly
|
|
|
|
7FAE0000
|
unkown image
|
page readonly
|
|
|
|
2E50000
|
unkown
|
page read and write
|
|
|
|
4D2E3FE000
|
unkown
|
page read and write
|
|
|
|
55F7000
|
unkown
|
page read and write
|
|
|
|
1C820D86000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7FF53DDAC000
|
unkown image
|
page readonly
|
|
|
|
7DF5EEE30000
|
unkown image
|
page readonly
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
2FA0000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
570E000
|
unkown
|
page read and write
|
|
|
|
7FF50BB8C000
|
unkown image
|
page readonly
|
|
|
|
7FAE2000
|
unkown image
|
page readonly
|
|
|
|
10BF000
|
unkown
|
page read and write
|
|
|
|
1C820DA2000
|
unkown
|
page read and write
|
|
|
|
57C0000
|
heap private
|
page read and write
|
|
|
|
67EB000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
7DF520CE2000
|
unkown image
|
page readonly
|
|
|
|
7FF53DC91000
|
unkown image
|
page readonly
|
|
|
|
2E46000
|
unkown
|
page read and write
|
|
|
|
7FF51066C000
|
unkown image
|
page readonly
|
|
|
|
1C820DAB000
|
unkown
|
page read and write
|
|
|
|
1C820D85000
|
unkown
|
page read and write
|
|
|
|
7F222000
|
unkown image
|
page readonly
|
|
|
|
1C820300000
|
unkown image
|
page readonly
|
|
|
|
7DF5EEE10000
|
unkown image
|
page readonly
|
|
|
|
1580000
|
unkown image
|
page readonly
|
|
|
|
7FF50BC51000
|
unkown image
|
page readonly
|
|
|
|
5630000
|
unkown
|
page read and write
|
|
|
|
1C820DA3000
|
unkown
|
page read and write
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
1C820DB8000
|
unkown
|
page read and write
|
|
|
|
1C82043C000
|
unkown
|
page read and write
|
|
|
|
16580C13000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CB7000
|
unkown image
|
page readonly
|
|
|
|
FBF5B7F000
|
unkown
|
page read and write
|
|
|
|
1C820D4D000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
1C820D6F000
|
unkown
|
page read and write
|
|
|
|
7FF53DE3E000
|
unkown image
|
page readonly
|
|
|
|
7DF552FC0000
|
unkown image
|
page readonly
|
|
|
|
7FF559044000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9CD7000
|
unkown image
|
page readonly
|
|
|
|
5611000
|
unkown
|
page read and write
|
|
|
|
1C820D60000
|
unkown
|
page read and write
|
|
|
|
1C820D7C000
|
unkown
|
page read and write
|
|
|
|
12AE000
|
unkown
|
page read and write
|
|
|
|
16580C02000
|
unkown
|
page read and write
|
|
|
|
7DF552FB0000
|
unkown image
|
page readonly
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
1C8204E0000
|
unkown
|
page read and write
|
|
|
|
F6D000
|
unkown
|
page execute and read and write
|
|
|
|
7FF55904A000
|
unkown image
|
page readonly
|
|
|
|
1C820453000
|
unkown
|
page read and write
|
|
|
|
1C820D76000
|
unkown
|
page read and write
|
|
|
|
4F6E000
|
unkown
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820DAD000
|
unkown
|
page read and write
|
|
|
|
4EE77F000
|
unkown
|
page read and write
|
|
|
|
1C8204C4000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
10B6000
|
unkown
|
page read and write
|
|
|
|
1C82045C000
|
unkown
|
page read and write
|
|
|
|
7DF520CD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5105D3000
|
unkown image
|
page readonly
|
|
|
|
1C821203000
|
unkown
|
page read and write
|
|
|
|
7FF50BC4A000
|
unkown image
|
page readonly
|
|
|
|
6C3DC7E000
|
unkown
|
page read and write
|
|
|
|
EAB000
|
unkown
|
page read and write
|
|
|
|
2E3C000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
7FF53DD3B000
|
unkown image
|
page readonly
|
|
|
|
7FF53DBB7000
|
unkown image
|
page readonly
|
|
|
|
21B53B80000
|
unkown image
|
page readonly
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
7FF53DA06000
|
unkown image
|
page readonly
|
|
|
|
7FF51068B000
|
unkown image
|
page readonly
|
|
|
|
16580C48000
|
unkown
|
page read and write
|
|
|
|
1557000
|
unkown
|
page execute and read and write
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
1C820B40000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
7DF56E190000
|
unkown image
|
page readonly
|
|
|
|
3090000
|
heap private
|
page read and write
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
66EE000
|
unkown
|
page read and write
|
|
|
|
154A000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5106C4000
|
unkown image
|
page readonly
|
|
|
|
14FA000
|
unkown
|
page execute and read and write
|
|
|
|
16580A00000
|
heap private
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
14F1A28A000
|
unkown
|
page read and write
|
|
|
|
7FAE0000
|
unkown image
|
page readonly
|
|
|
|
10B3000
|
unkown
|
page read and write
|
|
|
|
5860000
|
unkown
|
page read and write
|
|
|
|
7FF53DF32000
|
unkown image
|
page readonly
|
|
|
|
1C820DA3000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF510240000
|
unkown image
|
page readonly
|
|
|
|
A42000
|
unkown image
|
page readonly
|
|
|
|
1C820D0B000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
5430000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
1C820508000
|
unkown
|
page read and write
|
|
|
|
7DF5EEE10000
|
unkown image
|
page readonly
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
16580C00000
|
unkown
|
page read and write
|
|
|
|
10AD000
|
unkown
|
page execute and read and write
|
|
|
|
6640000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
16580A40000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C82126A000
|
unkown
|
page read and write
|
|
|
|
1C820600000
|
unkown image
|
page readonly
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
1C820D7C000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
288DA780000
|
unkown image
|
page readonly
|
|
|
|
1C820459000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
1C820DDB000
|
unkown
|
page read and write
|
|
|
|
1C821202000
|
unkown
|
page read and write
|
|
|
|
7FF53DD8D000
|
unkown image
|
page readonly
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
14F1A23C000
|
unkown
|
page read and write
|
|
|
|
1C820D6C000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
5B0E000
|
unkown
|
page read and write
|
|
|
|
7FF51057E000
|
unkown image
|
page readonly
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
2E39000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
7DF56E182000
|
unkown image
|
page readonly
|
|
|
|
7FF5D980E000
|
unkown image
|
page readonly
|
|
|
|
1C820DAB000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
1C820D6A000
|
unkown
|
page read and write
|
|
|
|
7FAE2000
|
unkown image
|
page readonly
|
|
|
|
1C821202000
|
unkown
|
page read and write
|
|
|
|
1585000
|
unkown
|
page read and write
|
|
|
|
BC7A97F000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
69B0000
|
unkown
|
page read and write
|
|
|
|
1C820DA1000
|
unkown
|
page read and write
|
|
|
|
BC7A8F8000
|
unkown
|
page read and write
|
|
|
|
1C820D6F000
|
unkown
|
page read and write
|
|
|
|
7DF56E170000
|
unkown image
|
page readonly
|
|
|
|
7FF559054000
|
unkown image
|
page readonly
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF558957000
|
unkown image
|
page readonly
|
|
|
|
1C820D65000
|
unkown
|
page read and write
|
|
|
|
7FF5590E4000
|
unkown image
|
page readonly
|
|
|
|
2E50000
|
unkown
|
page read and write
|
|
|
|
14B0000
|
unkown
|
page read and write
|
|
|
|
7DF520CE0000
|
unkown image
|
page readonly
|
|
|
|
E40000
|
unkown image
|
page read and write
|
|
|
|
7DF5257F0000
|
unkown image
|
page readonly
|
|
|
|
1C820DAB000
|
unkown
|
page read and write
|
|
|
|
7FF5106AC000
|
unkown image
|
page readonly
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
1C820D6B000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
1C820DA7000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
7FF51066A000
|
unkown image
|
page readonly
|
|
|
|
7FF53DEA8000
|
unkown image
|
page readonly
|
|
|
|
1C820D15000
|
unkown
|
page read and write
|
|
|
|
21B540D0000
|
unkown image
|
page readonly
|
|
|
|
21B53C54000
|
unkown
|
page read and write
|
|
|
|
1C820513000
|
unkown
|
page read and write
|
|
|
|
288DA810000
|
heap default
|
page read and write
|
|
|
|
2F60000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
532E000
|
unkown
|
page read and write
|
|
|
|
7FF50BB8F000
|
unkown image
|
page readonly
|
|
|
|
7FF50BB65000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
14F1A24F000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
5BA0000
|
unkown
|
page read and write
|
|
|
|
4EE27E000
|
unkown
|
page read and write
|
|
|
|
1C820449000
|
unkown
|
page read and write
|
|
|
|
1C820D5F000
|
unkown
|
page read and write
|
|
|
|
2E37000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
7DF56E182000
|
unkown image
|
page readonly
|
|
|
|
16580C7C000
|
unkown
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
62CE000
|
unkown
|
page read and write
|
|
|
|
1C820D91000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2E44000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
14ED000
|
unkown
|
page execute and read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
7FF510685000
|
unkown image
|
page readonly
|
|
|
|
2E35000
|
unkown
|
page read and write
|
|
|
|
2D88000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
7FF53DE45000
|
unkown image
|
page readonly
|
|
|
|
1C8204E9000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF53DA15000
|
unkown image
|
page readonly
|
|
|
|
BC7AD7F000
|
unkown
|
page read and write
|
|
|
|
7FF5D9AE1000
|
unkown image
|
page readonly
|
|
|
|
BC7A2FE000
|
unkown
|
page read and write
|
|
|
|
14F1A120000
|
heap private
|
page read and write
|
|
|
|
1507000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5D9802000
|
unkown image
|
page readonly
|
|
|
|
1C821363000
|
unkown
|
page read and write
|
|
|
|
7FF510680000
|
unkown image
|
page readonly
|
|
|
|
BC7A47B000
|
unkown
|
page read and write
|
|
|
|
1C820D7F000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C8202D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5EEE12000
|
unkown image
|
page readonly
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CE4000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF5106AF000
|
unkown image
|
page readonly
|
|
|
|
7FB00000
|
unkown image
|
page readonly
|
|
|
|
14F1A130000
|
unkown image
|
page readonly
|
|
|
|
1C820D6F000
|
unkown
|
page read and write
|
|
|
|
1C821200000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown image
|
page readonly
|
|
|
|
1550000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2F5E000
|
unkown
|
page read and write
|
|
|
|
7FF50BBA4000
|
unkown image
|
page readonly
|
|
|
|
14E0000
|
unkown
|
page read and write
|
|
|
|
7FF510697000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
2E50000
|
unkown
|
page read and write
|
|
|
|
1710000
|
unkown image
|
page readonly
|
|
|
|
7FF50B720000
|
unkown image
|
page readonly
|
|
|
|
5850000
|
unkown
|
page execute and read and write
|
|
|
|
21B53B00000
|
unkown image
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C821202000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF53DD01000
|
unkown image
|
page readonly
|
|
|
|
5C80000
|
unkown
|
page execute and read and write
|
|
|
|
1C820D70000
|
unkown
|
page read and write
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
1C821202000
|
unkown
|
page read and write
|
|
|
|
1547000
|
unkown
|
page execute and read and write
|
|
|
|
3067000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
7FF510772000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9CF4000
|
unkown image
|
page readonly
|
|
|
|
21B53ED0000
|
unkown image
|
page readonly
|
|
|
|
B00000
|
unkown image
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
7FF510400000
|
unkown image
|
page readonly
|
|
|
|
5C90000
|
unkown
|
page read and write
|
|
|
|
7FB00000
|
unkown image
|
page readonly
|
|
|
|
1C820DCC000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C820D6F000
|
unkown
|
page read and write
|
|
|
|
2E35000
|
unkown
|
page read and write
|
|
|
|
7FF50FDA9000
|
unkown image
|
page readonly
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
1C820D51000
|
unkown
|
page read and write
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
1C820DC2000
|
unkown
|
page read and write
|
|
|
|
7FF5106EE000
|
unkown image
|
page readonly
|
|
|
|
7FF510561000
|
unkown image
|
page readonly
|
|
|
|
5614000
|
unkown
|
page read and write
|
|
|
|
1C820DAF000
|
unkown
|
page read and write
|
|
|
|
7FF510523000
|
unkown image
|
page readonly
|
|
|
|
14F1A190000
|
unkown image
|
page readonly
|
|
|
|
21B53C3C000
|
unkown
|
page read and write
|
|
|
|
1C820D7D000
|
unkown
|
page read and write
|
|
|
|
5660000
|
unkown
|
page read and write
|
|
|
|
288DA7F6000
|
heap default
|
page read and write
|
|
|
|
1370000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C04000
|
unkown image
|
page readonly
|
|
|
|
7DF525802000
|
unkown image
|
page readonly
|
|
|
|
1C820D84000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
14C3000
|
unkown
|
page execute and read and write
|
|
|
|
13AF000
|
unkown
|
page read and write
|
|
|
|
B70000
|
unkown image
|
page readonly
|
|
|
|
1C820D71000
|
unkown
|
page read and write
|
|
|
|
1C820DBB000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
7FF53DE6F000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7DF520CF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9C40000
|
unkown image
|
page readonly
|
|
|
|
7DF5257F2000
|
unkown image
|
page readonly
|
|
|
|
7FF5590F1000
|
unkown image
|
page readonly
|
|
|
|
1C820C02000
|
unkown
|
page read and write
|
|
|
|
7FF5D9A66000
|
unkown image
|
page readonly
|
|
|
|
1C820D09000
|
unkown
|
page read and write
|
|
|
|
7FF510541000
|
unkown image
|
page readonly
|
|
|
|
1C820D87000
|
unkown
|
page read and write
|
|
|
|
1C820D5D000
|
unkown
|
page read and write
|
|
|
|
7FF5106DF000
|
unkown image
|
page readonly
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
1576000
|
unkown
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
5630000
|
unkown
|
page read and write
|
|
|
|
16581000000
|
unkown image
|
page readonly
|
|
|
|
7FF53DE6C000
|
unkown image
|
page readonly
|
|
|
|
EF8000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
1C820D7F000
|
unkown
|
page read and write
|
|
|
|
1C820D7C000
|
unkown
|
page read and write
|
|
|
|
5608000
|
unkown
|
page read and write
|
|
|
|
5630000
|
unkown
|
page read and write
|
|
|
|
1C8202B0000
|
unkown image
|
page read and write
|
|
|
|
2E30000
|
unkown image
|
page read and write
|
|
|
|
16580A10000
|
unkown image
|
page readonly
|
|
|
|
1C820D86000
|
unkown
|
page read and write
|
|
|
|
5EEF000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
16581180000
|
unkown image
|
page readonly
|
|
|
|
7FF53DE4B000
|
unkown image
|
page readonly
|
|
|
|
580F000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D0A000
|
unkown
|
page read and write
|
|
|
|
1C820D5D000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
7FF50BB4C000
|
unkown image
|
page readonly
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
F64000
|
unkown
|
page read and write
|
|
|
|
21B53C5A000
|
unkown
|
page read and write
|
|
|
|
1C820810000
|
unkown image
|
page readonly
|
|
|
|
10A6000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
132E000
|
unkown
|
page read and write
|
|
|
|
7DF56E170000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D00000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
7DF5257F2000
|
unkown image
|
page readonly
|
|
|
|
14F1A4D0000
|
unkown image
|
page readonly
|
|
|
|
7FF51067E000
|
unkown image
|
page readonly
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
5630000
|
unkown
|
page read and write
|
|
|
|
7FF50BBAA000
|
unkown image
|
page readonly
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C820D6A000
|
unkown
|
page read and write
|
|
|
|
7FF559038000
|
unkown image
|
page readonly
|
|
|
|
1C820D91000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C820D75000
|
unkown
|
page read and write
|
|
|
|
5BA1000
|
unkown
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
53C0000
|
unkown image
|
page read and write
|
|
|
|
5630000
|
unkown
|
page read and write
|
|
|
|
7FF50BBDD000
|
unkown image
|
page readonly
|
|
|
|
14F1A313000
|
unkown
|
page read and write
|
|
|
|
7FF53DDA4000
|
unkown image
|
page readonly
|
|
|
|
7FF53DE40000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C820D6B000
|
unkown
|
page read and write
|
|
|
|
7FF5D9BF3000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D6C000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7DF5EEE12000
|
unkown image
|
page readonly
|
|
|
|
14F1A27D000
|
unkown
|
page read and write
|
|
|
|
154E000
|
heap default
|
page read and write
|
|
|
|
21B53D00000
|
unkown
|
page read and write
|
|
|
|
7FF53DD21000
|
unkown image
|
page readonly
|
|
|
|
10A4000
|
unkown
|
page read and write
|
|
|
|
7FF50BBC8000
|
unkown image
|
page readonly
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
1C820D8D000
|
unkown
|
page read and write
|
|
|
|
1C820456000
|
unkown
|
page read and write
|
|
|
|
1C820D0C000
|
unkown
|
page read and write
|
|
|
|
5C0F000
|
unkown
|
page read and write
|
|
|
|
1C82121D000
|
unkown
|
page read and write
|
|
|
|
57B0000
|
unkown
|
page read and write
|
|
|
|
7DF552FC2000
|
unkown image
|
page readonly
|
|
|
|
1C82045B000
|
unkown
|
page read and write
|
|
|
|
21B53C00000
|
unkown
|
page read and write
|
|
|
|
7FF50BB60000
|
unkown image
|
page readonly
|
|
|
|
7FF5D95A2000
|
unkown image
|
page readonly
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
560E000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
7FF5D9A20000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CAB000
|
unkown image
|
page readonly
|
|
|
|
3248000
|
unkown
|
page read and write
|
|
|
|
14E3000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CFF000
|
unkown image
|
page readonly
|
|
|
|
7FF50BAAD000
|
unkown image
|
page readonly
|
|
|
|
14F1A202000
|
unkown
|
page read and write
|
|
|
|
1C820DB9000
|
unkown
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
3068000
|
unkown
|
page read and write
|
|
|
|
1C820D70000
|
unkown
|
page read and write
|
|
|
|
14F1A6D0000
|
unkown image
|
page readonly
|
|
|
|
7FF55900B000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
4EE67F000
|
unkown
|
page read and write
|
|
|
|
288DA760000
|
unkown image
|
page read and write
|
|
|
|
F3E000
|
unkown
|
page read and write
|
|
|
|
13B0000
|
unkown image
|
page readonly
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
7DF5257F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9C9E000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
16580A60000
|
heap default
|
page read and write
|
|
|
|
5500000
|
heap private
|
page execute and read and write
|
|
|
|
2E41000
|
unkown
|
page read and write
|
|
|
|
1C820502000
|
unkown
|
page read and write
|
|
|
|
1C820320000
|
heap default
|
page read and write
|
|
|
|
1152000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7DF552FD0000
|
unkown image
|
page readonly
|
|
|
|
FBF5A79000
|
unkown
|
page read and write
|
|
|
|
BC7A5FF000
|
unkown
|
page read and write
|
|
|
|
7DF5EEE20000
|
unkown image
|
page readonly
|
|
|
|
7FF53DD3E000
|
unkown image
|
page readonly
|
|
|
|
1C820D69000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
4D2E4FF000
|
unkown
|
page read and write
|
|
|
|
1C8204EC000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
21B53BA0000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
55E2000
|
unkown
|
page read and write
|
|
|
|
7DF56E190000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
16581402000
|
unkown
|
page read and write
|
|
|
|
1C82044F000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
1C8204B1000
|
unkown
|
page read and write
|
|
|
|
1C820D70000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C7F000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
21B53C8A000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
7FF5D9D84000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7DF56E172000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CCF000
|
unkown image
|
page readonly
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
1C820D7F000
|
unkown
|
page read and write
|
|
|
|
7FF5D98B5000
|
unkown image
|
page readonly
|
|
|
|
1C820413000
|
unkown
|
page read and write
|
|
|
|
1C820D84000
|
unkown
|
page read and write
|
|
|
|
1C820DA3000
|
unkown
|
page read and write
|
|
|
|
7FF5D9AD4000
|
unkown image
|
page readonly
|
|
|
|
55E6000
|
unkown
|
page read and write
|
|
|
|
1C820D6F000
|
unkown
|
page read and write
|
|
|
|
1C820D9F000
|
unkown
|
page read and write
|
|
|
|
10B9000
|
unkown
|
page read and write
|
|
|
|
7FF53DEB9000
|
unkown image
|
page readonly
|
|
|
|
2ED0000
|
unkown
|
page read and write
|
|
|
|
6630000
|
unkown
|
page read and write
|
|
|
|
1C820DA1000
|
unkown
|
page read and write
|
|
|
|
2E20000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
7DF525800000
|
unkown image
|
page readonly
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D89000
|
unkown
|
page read and write
|
|
|
|
1C820D4B000
|
unkown
|
page read and write
|
|
|
|
136E000
|
unkown
|
page read and write
|
|
|
|
BC7A577000
|
unkown
|
page read and write
|
|
|
|
548E000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
652C000
|
unkown
|
page read and write
|
|
|
|
1C820DCA000
|
unkown
|
page read and write
|
|
|
|
21B53B20000
|
unkown image
|
page readonly
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
7DF5EEE22000
|
unkown image
|
page readonly
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
1C820D69000
|
unkown
|
page read and write
|
|
|
|
7FF5106F6000
|
unkown image
|
page readonly
|
|
|
|
594E000
|
unkown
|
page read and write
|
|
|
|
1C820D7D000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
16580B60000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1582000
|
unkown
|
page read and write
|
|
|
|
1C820990000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
55EE000
|
unkown
|
page read and write
|
|
|
|
5860000
|
unkown
|
page read and write
|
|
|
|
4EDF8E000
|
unkown
|
page read and write
|
|
|
|
7FF50BC44000
|
unkown image
|
page readonly
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
1C820D9A000
|
unkown
|
page read and write
|
|
|
|
1C820DB7000
|
unkown
|
page read and write
|
|
|
|
B80000
|
unkown image
|
page readonly
|
|
|
|
1C820A80000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
21B53D13000
|
unkown
|
page read and write
|
|
|
|
1C820D60000
|
unkown
|
page read and write
|
|
|
|
10C2000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
288DA810000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
1C820DB7000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
21B53B70000
|
heap default
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
5CCD000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
7FAF2000
|
unkown image
|
page readonly
|
|
|
|
E50000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
7FF5D9D08000
|
unkown image
|
page readonly
|
|
|
|
1C820D70000
|
unkown
|
page read and write
|
|
|
|
FBF5BFD000
|
unkown
|
page read and write
|
|
|
|
B10000
|
unkown image
|
page readonly
|
|
|
|
1C820D60000
|
unkown
|
page read and write
|
|
|
|
3240000
|
unkown
|
page read and write
|
|
|
|
6C3DFF7000
|
unkown
|
page read and write
|
|
|
|
15F0000
|
heap default
|
page read and write
|
|
|
|
55E4000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
1C820457000
|
unkown
|
page read and write
|
|
|
|
14F1A160000
|
unkown image
|
page readonly
|
|
|
|
2E60000
|
heap private
|
page execute and read and write
|
|
|
|
7FF5D9BED000
|
unkown image
|
page readonly
|
|
|
|
1C820D77000
|
unkown
|
page read and write
|
|
|
|
7F220000
|
unkown image
|
page readonly
|
|
|
|
7DF552FC0000
|
unkown image
|
page readonly
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
1C820481000
|
unkown
|
page read and write
|
|
|
|
7FF5D9AD6000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
288DAA00000
|
unkown image
|
page readonly
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
BD0000
|
unkown
|
page read and write
|
|
|
|
1C820D6F000
|
unkown
|
page read and write
|
|
|
|
1C820D77000
|
unkown
|
page read and write
|
|
|
|
7FF53DE9F000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7FF51057B000
|
unkown image
|
page readonly
|
|
|
|
16580E00000
|
unkown image
|
page readonly
|
|
|
|
7DF4236C0000
|
unkown image
|
page readonly
|
|
|
|
288DA9B0000
|
unkown
|
page read and write
|
|
|
|
1C820AA0000
|
unkown image
|
page readonly
|
|
|
|
7FF558CDA000
|
unkown image
|
page readonly
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2E35000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
16580C4F000
|
unkown
|
page read and write
|
|
|
|
10EB000
|
heap default
|
page read and write
|
|
|
|
1380000
|
heap default
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
2C1E000
|
unkown
|
page read and write
|
|
|
|
1C820D7C000
|
unkown
|
page read and write
|
|
|
|
1C820D7A000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820DA1000
|
unkown
|
page read and write
|
|
|
|
21B53B20000
|
unkown image
|
page readonly
|
|
|
|
14F1A24B000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
1C820DB7000
|
unkown
|
page read and write
|
|
|
|
7DF552FC2000
|
unkown image
|
page readonly
|
|
|
|
5410000
|
unkown
|
page read and write
|
|
|
|
1C820D75000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF50BB6B000
|
unkown image
|
page readonly
|
|
|
|
288DAC10000
|
unkown image
|
page readonly
|
|
|
|
18B0000
|
heap private
|
page read and write
|
|
|
|
5CF0000
|
unkown
|
page read and write
|
|
|
|
7FF5106F9000
|
unkown image
|
page readonly
|
|
|
|
5631000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
1C820D7E000
|
unkown
|
page read and write
|
|
|
|
1C820D80000
|
unkown
|
page read and write
|
|
|
|
1C820D77000
|
unkown
|
page read and write
|
|
|
|
5648000
|
unkown
|
page read and write
|
|
|
|
7FF53DE77000
|
unkown image
|
page readonly
|
|
|
|
1C820B50000
|
unkown image
|
page read and write
|
|
|
|
7FF50BA5B000
|
unkown image
|
page readonly
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
7DF552FD0000
|
unkown image
|
page readonly
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF5D977E000
|
unkown image
|
page readonly
|
|
|
|
7DF56E172000
|
unkown image
|
page readonly
|
|
|
|
324A000
|
unkown
|
page read and write
|
|
|
|
288DA7E0000
|
heap default
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
288DAC00000
|
unkown image
|
page readonly
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
1C820AD0000
|
unkown image
|
page write copy
|
|
|
|
1C821302000
|
unkown
|
page read and write
|
|
|
|
7DF450E80000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9C6B000
|
unkown image
|
page readonly
|
|
|
|
4D2E2F7000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
5645000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
6C3E1FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D9D19000
|
unkown image
|
page readonly
|
|
|
|
FC0000
|
heap default
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
5420000
|
unkown
|
page read and write
|
|
|
|
7FF5106D4000
|
unkown image
|
page readonly
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
7DF520CF0000
|
unkown image
|
page readonly
|
|
|
|
21B53C66000
|
unkown
|
page read and write
|
|
|
|
7DF525810000
|
unkown image
|
page readonly
|
|
|
|
5340000
|
heap private
|
page read and write
|
|
|
|
1132000
|
heap default
|
page read and write
|
|
|
|
1C8204EC000
|
unkown
|
page read and write
|
|
|
|
1C820DA2000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
There are 1229 hidden memdumps, click here to show them.