Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
NRB-RTGS 28-Sept 2021.jar
|
Zip archive data, at least v2.0 to extract
|
initial sample
|
 |
|
|
C:\cmdlinestart.log
|
ASCII text, with CRLF, LF line terminators
|
modified
|
|
|
|
C:\ProgramData\Oracle\Java\.oracle_jre_usage\cce3fe3b0d8d83e2.timestamp
|
ASCII text, with CRLF line terminators
|
dropped
|
 |
|
|
C:\jar\META-INF\MANIFEST.MF
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\jar\carLambo\FLUCgYjjYukBnLOPJmMXa.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\FNfNjvjZirJsYBDQvbyXp.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\FirstRun.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\GDI32.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\HBrowserNativeApis.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\HZFTeYcSoingkrwfACxsS.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\IWRkRwQylUNIljRjtAkaC.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\IkqnNUVNYHrOTFlrdiXDE.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\InQtwvxSwGlKCGaPBlkoE.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\JBOWUuMcvCkhdglJnhRMv.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\KUmqyODGGRUyuSPgAiEHR.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\Kernel32.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\LMjLyRQVjrbfIpBrwheBI.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\LPFdzbdgUbctDqujAWZYI.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\MwXUjyQKvUCIJaqfYeEXR.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\NRSgeibhpMRqnMXxHCtkH.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\OfHKSMXcxdCQqFxyzUhpZ.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\PRecjdEZwdifBquTYRlUl.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\QdhsHELHRynENxdBimgsC.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\RhcfPXNPybLnSaSYqyEXw.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\RyDWjwZKMcstuZbiMGYqA.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\SpPnnJyNVMiKWFUPPBgAJ.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\User32.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\VMnlAvsfupVDCaszPEPjX.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\VuLgyZptDPIAaqUhBdkQg.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\WAjaJbPBkhpSMiTfTlSfV.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\WFnpewDUZzidjcKbMnKqG.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\WKTBLojTnJupFuAfwhtUj.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\WLVpZVKPTwBamUZoZCNyH.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\WinGDI.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\WppqWwSRlQJiTLfjgsmCj.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\YGZckHbbfSSCkmxMSahob.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\YYCouWIWxqsvPFMgyBqwW.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\ZeiFKvzcxODidyLNIuqkn.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\ZkwKzBMaxNbOlYdeHUyJr.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\aNhPdlHWbWcyZlRBjRTvT.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\amywDpahHAvKsbAjnpCoO.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\anzYKctnLiQPVOOntxFFV.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\chMqAfpdZnrPTUanWELCv.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\dAXHhOjprIGmjWiJRHaiQ.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\dpKhbKrSnHDyRqwJknedZ.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\eSHYGKVncDIRweeZuClPC.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\eWXALjSUSDRBlUrdVjYaX.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\eXJaDawGGAXnThaaGUiMt.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\gMLqgzFILKCRhknogvWcQ.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\gPLIBbXIRgEqoywxWrJpW.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\gnZAbPgVxflhpdLkKRSEC.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\hBSMFRWfUehfEMRTcdxur.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\hcHXKAfoYuEiOypNbthOq.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\ifmTFpwQLwUvcmBtqiUxG.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\jNOmAVANbBsSwqYRQpxgY.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\jadywgihJVmemkhExuzpm.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\jxScqCFTjrLlWNGYXdNEZ.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\koPaEdvZZnsDCtKcfImQC.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\lIljmvPgJhDKnHUcdUMQJ.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\nTSsWfapOWJzCPxPKlsSa.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\oKVVeurDdXccUodgtAiki.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\ppqPYkdOMPGLhnnFjoRgt.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\prIukYBclICdhLpsxJGHU.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\qaFhxuVWqPsAXIszXSnWD.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\resources\config.txt
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\jar\carLambo\trsUGiegHrIdIKYyegTti.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\vADhEfSlROOWFitmByjkH.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\vAJiRrxrPqrmdaYHqifDe.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\vmvXFcYvTedJqkhtugLYR.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\xdIozHlUXHmwNaqNNEWok.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\jar\carLambo\yphecTSiezxVkeTiKHCVh.class
|
compiled Java class data, version 49.0 (Java 1.5)
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\83aa4cc77f591dfc2374580bbd95f6ba_d06ed635-68f6-4e9a-955c-4899f5f57b9a
|
data
|
dropped
|
|
There are 62 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe
|
java.exe -jar 'C:\Users\user\Desktop\NRB-RTGS 28-Sept 2021.jar' carLambo.FirstRun
|
|
|
|
C:\Windows\System32\cmd.exe
|
C:\Windows\system32\cmd.exe /c 7za.exe x -y -oC:\jar 'C:\Users\user\Desktop\NRB-RTGS 28-Sept 2021.jar'
|
|
|
|
C:\Windows\System32\7za.exe
|
7za.exe x -y -oC:\jar 'C:\Users\user\Desktop\NRB-RTGS 28-Sept 2021.jar'
|
|
|
|
C:\Windows\System32\cmd.exe
|
'C:\Windows\System32\cmd.exe' /c java.exe -jar 'C:\Users\user\Desktop\NRB-RTGS 28-Sept 2021.jar' carLambo.FirstRun >> C:\cmdlinestart.log
2>&1
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\icacls.exe
|
C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant 'everyone':(OI)(CI)M
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c ''C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe' -javaagent:'C:\Users\user\AppData\Local\Temp\jartracer.jar'
-jar 'C:\Users\user\Desktop\NRB-RTGS 28-Sept 2021.jar'' >> C:\cmdlinestart.log 2>&1
|
|
|
|
C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe
|
'C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe' -javaagent:'C:\Users\user\AppData\Local\Temp\jartracer.jar' -jar
'C:\Users\user\Desktop\NRB-RTGS 28-Sept 2021.jar'
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://crl.xrampsecurity.com/XGCA.crl
|
unknown
|
|
|
|
https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.5.0/jna-platform-5.5.0.jar
|
unknown
|
|
|
|
http://crl.chambersign.org/chambersroot.crl0
|
unknown
|
|
|
|
http://trustcenter-crl.certificat2.com/Keynectis/KEYNECTIS_ROOT_CA.crl0
|
unknown
|
|
|
|
http://www.certplus.com/CRL/class2.crl
|
unknown
|
|
|
|
http://bugreport.sun.com/bugreport/
|
unknown
|
|
|
|
http://cps.chambersign.org/cps/chambersroot.html0
|
unknown
|
|
|
|
http://java.oracle.com/
|
unknown
|
|
|
|
http://null.oracle.com/
|
unknown
|
|
|
|
http://www.chambersign.org1
|
unknown
|
|
|
|
http://repository.swisssign.com/0
|
unknown
|
|
|
|
https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.5.0/jna-5.5.0.jar
|
unknown
|
|
|
|
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
|
unknown
|
|
|
|
http://policy.camerfirma.com
|
unknown
|
|
|
|
https://ocsp.quovadisoffshore.com
|
unknown
|
|
|
|
https://repo1.maven.org/maven2/org/xerial/sqlite-jdbc/3.14.2.1/sqlite-jdbc-3.14.2.1.jar
|
unknown
|
|
|
|
http://crl.securetrust.com/STCA.crl0
|
unknown
|
|
|
|
http://www.quovadisglobal.com/cps
|
unknown
|
|
|
|
http://cps.chambersign.org/cps/chambersroot.html
|
unknown
|
|
|
|
http://www.certplus.com/CRL/class3P.crl
|
unknown
|
|
|
|
http://www.certplus.com/CRL/class3P.crl0
|
unknown
|
|
|
|
http://crl.securetrust.com/STCA.crl
|
unknown
|
|
|
|
http://www.certplus.com/CRL/class2.crl0
|
unknown
|
|
|
|
http://www.quovadisglobal.com/cps0
|
unknown
|
|
|
|
http://crl.xrampsecurity.com/XGCA.crl0
|
unknown
|
|
|
|
http://trustcenter-crl.certificat2.com/Keynectis/KEYNECTIS_ROOT_CA.crl
|
unknown
|
|
|
|
http://www.quovadis.bm
|
unknown
|
|
|
|
http://www.quovadis.bm0
|
unknown
|
|
|
|
https://ocsp.quovadisoffshore.com0
|
unknown
|
|
|
|
http://www.allatori.com
|
unknown
|
|
|
|
http://crl.chambersign.org/chambersroot.crl
|
unknown
|
|
|
|
http://repository.swisssign.com/
|
unknown
|
|
|
|
http://www.chambersign.org
|
unknown
|
|
|
|
https://github.com/kristian/system-hook/releases/download/3.5/system-hook-3.5.jar
|
unknown
|
|
|
|
http://policy.camerfirma.com0
|
unknown
|
|
There are 25 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
sonatype.map.fastly.net
|
199.232.192.209
|
|
|
|
github.com
|
140.82.121.4
|
|
|
|
repo1.maven.org
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
199.232.192.209
|
sonatype.map.fastly.net
|
United States
|
|
|
|
140.82.121.4
|
github.com
|
United States
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
9DA4000
|
unkown
|
page read and write
|
|
|
|
9D68000
|
unkown
|
page read and write
|
|
|
|
49EE000
|
unkown
|
page read and write
|
|
|
|
180C21D0000
|
unkown image
|
page readonly
|
|
|
|
26205055000
|
unkown
|
page read and write
|
|
|
|
14D76000
|
unkown
|
page read and write
|
|
|
|
16290000
|
unkown
|
page read and write
|
|
|
|
1765DA20000
|
unkown image
|
page readonly
|
|
|
|
7FF5814F3000
|
unkown image
|
page readonly
|
|
|
|
237432A0000
|
unkown image
|
page readonly
|
|
|
|
29C42302000
|
unkown
|
page read and write
|
|
|
|
1BB9B76A000
|
unkown
|
page read and write
|
|
|
|
F8506FF000
|
unkown
|
page read and write
|
|
|
|
25F30770000
|
unkown image
|
page readonly
|
|
|
|
1513E000
|
unkown
|
page read and write
|
|
|
|
7FF559777000
|
unkown image
|
page readonly
|
|
|
|
1BB9B78A000
|
unkown
|
page read and write
|
|
|
|
7FF50A4DA000
|
unkown image
|
page readonly
|
|
|
|
1BB9AEE2000
|
unkown
|
page read and write
|
|
|
|
25F30908000
|
unkown
|
page read and write
|
|
|
|
7FF58164F000
|
unkown image
|
page readonly
|
|
|
|
180C21F0000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE5D000
|
unkown
|
page read and write
|
|
|
|
1BB9B700000
|
unkown
|
page read and write
|
|
|
|
15C80000
|
heap private
|
page read and write
|
|
|
|
1BB9AEBE000
|
unkown
|
page read and write
|
|
|
|
15D1E000
|
unkown
|
page read and write
|
|
|
|
7F500000
|
unkown image
|
page readonly
|
|
|
|
7DF596760000
|
unkown image
|
page readonly
|
|
|
|
7FF52B19E000
|
unkown image
|
page readonly
|
|
|
|
7DF596762000
|
unkown image
|
page readonly
|
|
|
|
7FF55FE35000
|
unkown image
|
page readonly
|
|
|
|
26205108000
|
unkown
|
page read and write
|
|
|
|
168A9000
|
unkown image
|
page read and write
|
|
|
|
29C42600000
|
unkown image
|
page readonly
|
|
|
|
4ADC000
|
unkown
|
page read and write
|
|
|
|
545A2FE000
|
unkown
|
page read and write
|
|
|
|
7F6D0000
|
unkown image
|
page readonly
|
|
|
|
1BB9B380000
|
unkown image
|
page readonly
|
|
|
|
25E0000
|
unkown
|
page read and write
|
|
|
|
9DD0000
|
unkown
|
page read and write
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
1BB9B70D000
|
unkown
|
page read and write
|
|
|
|
7FF58BC00000
|
unkown image
|
page readonly
|
|
|
|
1BB9B76B000
|
unkown
|
page read and write
|
|
|
|
7FF5810CE000
|
unkown image
|
page readonly
|
|
|
|
16820000
|
unkown
|
page read and write
|
|
|
|
7FF52AAEE000
|
unkown image
|
page readonly
|
|
|
|
7FF52B1A0000
|
unkown image
|
page readonly
|
|
|
|
7DF51F672000
|
unkown image
|
page readonly
|
|
|
|
E73637F000
|
unkown
|
page read and write
|
|
|
|
7FF52B208000
|
unkown image
|
page readonly
|
|
|
|
7DF5B8E70000
|
unkown image
|
page readonly
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
1765DB30000
|
unkown
|
page read and write
|
|
|
|
25F3087D000
|
unkown
|
page read and write
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
180C2585000
|
heap private
|
page read and write
|
|
|
|
29C4227E000
|
unkown
|
page read and write
|
|
|
|
7FF58115E000
|
unkown image
|
page readonly
|
|
|
|
7FF581658000
|
unkown image
|
page readonly
|
|
|
|
7DF5B8E80000
|
unkown image
|
page readonly
|
|
|
|
7FF559F04000
|
unkown image
|
page readonly
|
|
|
|
16190000
|
unkown
|
page read and write
|
|
|
|
26205013000
|
unkown
|
page read and write
|
|
|
|
A3B000
|
heap private
|
page read and write
|
|
|
|
180C2550000
|
unkown
|
page read and write
|
|
|
|
1BB9ADD0000
|
unkown
|
page read and write
|
|
|
|
4AD8000
|
unkown
|
page read and write
|
|
|
|
1BB9AE51000
|
unkown
|
page read and write
|
|
|
|
2310000
|
unkown
|
page read and write
|
|
|
|
1BB9B765000
|
unkown
|
page read and write
|
|
|
|
180C2418000
|
unkown
|
page read and write
|
|
|
|
1BB9B74D000
|
unkown
|
page read and write
|
|
|
|
7FF55FF22000
|
unkown image
|
page readonly
|
|
|
|
25F30730000
|
unkown image
|
page read and write
|
|
|
|
1BB9BD00000
|
unkown
|
page read and write
|
|
|
|
180C2419000
|
unkown
|
page read and write
|
|
|
|
7FF581424000
|
unkown image
|
page readonly
|
|
|
|
7DF43E1E0000
|
unkown image
|
page readonly
|
|
|
|
26204F40000
|
unkown image
|
page readonly
|
|
|
|
1BB9B76A000
|
unkown
|
page read and write
|
|
|
|
180C239A000
|
unkown
|
page read and write
|
|
|
|
1BB9B7A2000
|
unkown
|
page read and write
|
|
|
|
7FF50A4FB000
|
unkown image
|
page readonly
|
|
|
|
14C47000
|
unkown
|
page read and write
|
|
|
|
7FF52B292000
|
unkown image
|
page readonly
|
|
|
|
237433B0000
|
unkown
|
page read and write
|
|
|
|
4BAD000
|
unkown
|
page read and write
|
|
|
|
180C239A000
|
unkown
|
page read and write
|
|
|
|
1BB9AE4F000
|
unkown
|
page read and write
|
|
|
|
7FF5813AB000
|
unkown image
|
page readonly
|
|
|
|
1BB9B7CC000
|
unkown
|
page read and write
|
|
|
|
7DF5A0FF2000
|
unkown image
|
page readonly
|
|
|
|
26205029000
|
unkown
|
page read and write
|
|
|
|
1765DBFE000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page read and write
|
|
|
|
7DF540330000
|
unkown image
|
page readonly
|
|
|
|
7FF55FE1A000
|
unkown image
|
page readonly
|
|
|
|
29C41FF0000
|
unkown image
|
page read and write
|
|
|
|
7FF5A3D58000
|
unkown image
|
page readonly
|
|
|
|
7FF50A507000
|
unkown image
|
page readonly
|
|
|
|
7FF5A3CF5000
|
unkown image
|
page readonly
|
|
|
|
29C42010000
|
unkown image
|
page readonly
|
|
|
|
7FF58163A000
|
unkown image
|
page readonly
|
|
|
|
7F6C2000
|
unkown image
|
page readonly
|
|
|
|
F8991FE000
|
unkown
|
page read and write
|
|
|
|
E735E7E000
|
unkown
|
page read and write
|
|
|
|
15740000
|
unkown
|
page read and write
|
|
|
|
7FF52AFA0000
|
unkown image
|
page readonly
|
|
|
|
7DF596772000
|
unkown image
|
page readonly
|
|
|
|
91E000
|
unkown
|
page read and write
|
|
|
|
23743270000
|
unkown image
|
page readonly
|
|
|
|
56D5C7F000
|
unkown
|
page read and write
|
|
|
|
4800000
|
unkown
|
page read and write
|
|
|
|
7FF58161C000
|
unkown image
|
page readonly
|
|
|
|
550000
|
heap default
|
page read and write
|
|
|
|
248000
|
unkown
|
page read and write
|
|
|
|
1BB9AC80000
|
unkown image
|
page readonly
|
|
|
|
4CAD000
|
unkown
|
page read and write
|
|
|
|
F898BAE000
|
unkown
|
page read and write
|
|
|
|
9C0000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE55000
|
unkown
|
page read and write
|
|
|
|
180C22F0000
|
unkown
|
page read and write
|
|
|
|
1BB9B797000
|
unkown
|
page read and write
|
|
|
|
7FF50A51F000
|
unkown image
|
page readonly
|
|
|
|
7FF50A5E1000
|
unkown image
|
page readonly
|
|
|
|
26204F60000
|
unkown
|
page read and write
|
|
|
|
7FF5A3D34000
|
unkown image
|
page readonly
|
|
|
|
1BB9BD02000
|
unkown
|
page read and write
|
|
|
|
69AE97E000
|
unkown
|
page read and write
|
|
|
|
7FF55FE7A000
|
unkown image
|
page readonly
|
|
|
|
2620507B000
|
unkown
|
page read and write
|
|
|
|
1BB9B768000
|
unkown
|
page read and write
|
|
|
|
F898FFB000
|
unkown
|
page read and write
|
|
|
|
29C42222000
|
unkown
|
page read and write
|
|
|
|
2380000
|
unkown
|
page read and write
|
|
|
|
1BB9B75B000
|
unkown
|
page read and write
|
|
|
|
180C2389000
|
unkown
|
page read and write
|
|
|
|
7FF5A3D1C000
|
unkown image
|
page readonly
|
|
|
|
7FF5A3D44000
|
unkown image
|
page readonly
|
|
|
|
7FF50A4F0000
|
unkown image
|
page readonly
|
|
|
|
25E0000
|
heap private
|
page read and write
|
|
|
|
7DF5A1002000
|
unkown image
|
page readonly
|
|
|
|
1BB9AF16000
|
unkown
|
page read and write
|
|
|
|
7FF52A9C3000
|
unkown image
|
page readonly
|
|
|
|
7FF559E88000
|
unkown image
|
page readonly
|
|
|
|
1765DBF5000
|
unkown
|
page read and write
|
|
|
|
25F3084D000
|
unkown
|
page read and write
|
|
|
|
14C60000
|
unkown
|
page read and write
|
|
|
|
7FF581162000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE83000
|
unkown
|
page read and write
|
|
|
|
2785000
|
unkown
|
page execute and read and write
|
|
|
|
1BB9AE13000
|
unkown
|
page read and write
|
|
|
|
1765DBFE000
|
unkown
|
page read and write
|
|
|
|
7FF50A4EE000
|
unkown image
|
page readonly
|
|
|
|
A37000
|
heap private
|
page read and write
|
|
|
|
1BB9B796000
|
unkown
|
page read and write
|
|
|
|
7FF52AFF1000
|
unkown image
|
page readonly
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
795000
|
unkown
|
page read and write
|
|
|
|
180C2409000
|
unkown
|
page read and write
|
|
|
|
7DF574FA2000
|
unkown image
|
page readonly
|
|
|
|
2678000
|
unkown
|
page read and write
|
|
|
|
545A877000
|
unkown
|
page read and write
|
|
|
|
1765DB90000
|
unkown image
|
page readonly
|
|
|
|
1BB9ACD0000
|
heap default
|
page read and write
|
|
|
|
1BB9AEF8000
|
unkown
|
page read and write
|
|
|
|
1BB9B76B000
|
unkown
|
page read and write
|
|
|
|
2792000
|
unkown
|
page execute and read and write
|
|
|
|
25D0000
|
unkown image
|
page readonly
|
|
|
|
1BB9B77F000
|
unkown
|
page read and write
|
|
|
|
1765DBD0000
|
heap default
|
page read and write
|
|
|
|
56D5CFF000
|
unkown
|
page read and write
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
6E7000
|
heap default
|
page read and write
|
|
|
|
4CC1000
|
unkown
|
page read and write
|
|
|
|
7FF580F43000
|
unkown image
|
page readonly
|
|
|
|
7FF5816DA000
|
unkown image
|
page readonly
|
|
|
|
21F3000
|
unkown image
|
page readonly
|
|
|
|
7FF58BA55000
|
unkown image
|
page readonly
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
7FF559AFA000
|
unkown image
|
page readonly
|
|
|
|
7FF58BE7E000
|
unkown image
|
page readonly
|
|
|
|
7FF559E2B000
|
unkown image
|
page readonly
|
|
|
|
1BB9B796000
|
unkown
|
page read and write
|
|
|
|
29C42200000
|
unkown
|
page read and write
|
|
|
|
69986FE000
|
unkown
|
page read and write
|
|
|
|
20EB000
|
unkown image
|
page readonly
|
|
|
|
7FF52B1EA000
|
unkown image
|
page readonly
|
|
|
|
7FF58BEAF000
|
unkown image
|
page readonly
|
|
|
|
7FF5813B6000
|
unkown image
|
page readonly
|
|
|
|
791000
|
unkown
|
page read and write
|
|
|
|
59E000
|
unkown
|
page read and write
|
|
|
|
7FF50A534000
|
unkown image
|
page readonly
|
|
|
|
1EC000
|
unkown
|
page read and write
|
|
|
|
7FF58BF64000
|
unkown image
|
page readonly
|
|
|
|
180C21C0000
|
unkown image
|
page readonly
|
|
|
|
7DF574FA2000
|
unkown image
|
page readonly
|
|
|
|
21C6000
|
unkown image
|
page readonly
|
|
|
|
159FE000
|
unkown
|
page read and write
|
|
|
|
7FF52B174000
|
unkown image
|
page readonly
|
|
|
|
7FF581207000
|
unkown image
|
page readonly
|
|
|
|
7FF52B153000
|
unkown image
|
page readonly
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
7DF540322000
|
unkown image
|
page readonly
|
|
|
|
1BB9ACA0000
|
unkown image
|
page readonly
|
|
|
|
56D5D79000
|
unkown
|
page read and write
|
|
|
|
1BB9BC6A000
|
unkown
|
page read and write
|
|
|
|
1BB9AE00000
|
unkown
|
page read and write
|
|
|
|
7FF55FBA7000
|
unkown image
|
page readonly
|
|
|
|
7FF58BF6A000
|
unkown image
|
page readonly
|
|
|
|
7FF580D1A000
|
unkown image
|
page readonly
|
|
|
|
7FF5A3D28000
|
unkown image
|
page readonly
|
|
|
|
F85067E000
|
unkown
|
page read and write
|
|
|
|
7FF58BDCD000
|
unkown image
|
page readonly
|
|
|
|
1BB9AEA0000
|
unkown
|
page read and write
|
|
|
|
7DF5B8E80000
|
unkown image
|
page readonly
|
|
|
|
1BB9AF13000
|
unkown
|
page read and write
|
|
|
|
7FF52B1F4000
|
unkown image
|
page readonly
|
|
|
|
2450000
|
unkown image
|
page read and write
|
|
|
|
15340000
|
unkown
|
page read and write
|
|
|
|
7DF51F662000
|
unkown image
|
page readonly
|
|
|
|
9E1A000
|
unkown
|
page read and write
|
|
|
|
7FF58BF72000
|
unkown image
|
page readonly
|
|
|
|
7FF559E20000
|
unkown image
|
page readonly
|
|
|
|
7FF50A4F5000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE54000
|
unkown
|
page read and write
|
|
|
|
7DF56EFA0000
|
unkown image
|
page readonly
|
|
|
|
7F5C0000
|
unkown image
|
page readonly
|
|
|
|
7FF52B04F000
|
unkown image
|
page readonly
|
|
|
|
7FF55FCF1000
|
unkown image
|
page readonly
|
|
|
|
7FF55FE98000
|
unkown image
|
page readonly
|
|
|
|
1BB9B76B000
|
unkown
|
page read and write
|
|
|
|
2A76000
|
heap default
|
page read and write
|
|
|
|
7FF55FBB0000
|
unkown image
|
page readonly
|
|
|
|
161A0000
|
unkown
|
page read and write
|
|
|
|
180C23F3000
|
unkown
|
page read and write
|
|
|
|
7FF50A527000
|
unkown image
|
page readonly
|
|
|
|
7FF5815C4000
|
unkown image
|
page readonly
|
|
|
|
26204E30000
|
unkown image
|
page readonly
|
|
|
|
7FF52AFE1000
|
unkown image
|
page readonly
|
|
|
|
7FF52B222000
|
unkown image
|
page readonly
|
|
|
|
7FF55FF14000
|
unkown image
|
page readonly
|
|
|
|
1BB9B758000
|
unkown
|
page read and write
|
|
|
|
47DE000
|
unkown
|
page read and write
|
|
|
|
7FF51DD41000
|
unkown image
|
page readonly
|
|
|
|
7FF58BEAC000
|
unkown image
|
page readonly
|
|
|
|
7FF58BEDF000
|
unkown image
|
page readonly
|
|
|
|
1BB9B480000
|
unkown image
|
page write copy
|
|
|
|
7DF5B8E72000
|
unkown image
|
page readonly
|
|
|
|
168B4000
|
unkown image
|
page read and write
|
|
|
|
F898AAB000
|
unkown
|
page read and write
|
|
|
|
26205102000
|
unkown
|
page read and write
|
|
|
|
7FF5811C5000
|
unkown image
|
page readonly
|
|
|
|
7FF580F47000
|
unkown image
|
page readonly
|
|
|
|
26205200000
|
unkown image
|
page readonly
|
|
|
|
163E0000
|
unkown
|
page read and write
|
|
|
|
1BB9B76F000
|
unkown
|
page read and write
|
|
|
|
69AE0BC000
|
unkown
|
page read and write
|
|
|
|
1BB9B7AC000
|
unkown
|
page read and write
|
|
|
|
7DF5A1002000
|
unkown image
|
page readonly
|
|
|
|
2460000
|
unkown image
|
page readonly
|
|
|
|
29C4223C000
|
unkown
|
page read and write
|
|
|
|
1765DA20000
|
unkown image
|
page readonly
|
|
|
|
2620504A000
|
unkown
|
page read and write
|
|
|
|
1BB9AC60000
|
unkown image
|
page read and write
|
|
|
|
1BB9AE3C000
|
unkown
|
page read and write
|
|
|
|
7FF55FE30000
|
unkown image
|
page readonly
|
|
|
|
6E0000
|
heap default
|
page read and write
|
|
|
|
237434B8000
|
heap default
|
page read and write
|
|
|
|
2305000
|
heap private
|
page read and write
|
|
|
|
545A978000
|
unkown
|
page read and write
|
|
|
|
7DF4B6D30000
|
unkown image
|
page readonly
|
|
|
|
180C2200000
|
unkown image
|
page readonly
|
|
|
|
21D0000
|
unkown
|
page read and write
|
|
|
|
4BA3000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
25F30900000
|
unkown
|
page read and write
|
|
|
|
14F7F000
|
unkown
|
page read and write
|
|
|
|
26204E60000
|
heap default
|
page read and write
|
|
|
|
1BB9B7B9000
|
unkown
|
page read and write
|
|
|
|
1BB9B732000
|
unkown
|
page read and write
|
|
|
|
7DF574FC0000
|
unkown image
|
page readonly
|
|
|
|
272A000
|
unkown
|
page execute and read and write
|
|
|
|
180C2418000
|
unkown
|
page read and write
|
|
|
|
7FF5A3DDA000
|
unkown image
|
page readonly
|
|
|
|
7FF50A3B1000
|
unkown image
|
page readonly
|
|
|
|
7FF52AD02000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE4D000
|
unkown
|
page read and write
|
|
|
|
1BB9B4F0000
|
unkown
|
page read and write
|
|
|
|
1BB9B7C2000
|
unkown
|
page read and write
|
|
|
|
7F520000
|
unkown image
|
page readonly
|
|
|
|
7FF50A270000
|
unkown image
|
page readonly
|
|
|
|
25F307D0000
|
unkown
|
page read and write
|
|
|
|
7FF581441000
|
unkown image
|
page readonly
|
|
|
|
2115000
|
unkown image
|
page readonly
|
|
|
|
1BB9B769000
|
unkown
|
page read and write
|
|
|
|
180C2354000
|
heap default
|
page read and write
|
|
|
|
25F30750000
|
unkown image
|
page readonly
|
|
|
|
7FF581543000
|
unkown image
|
page readonly
|
|
|
|
7FF5814EE000
|
unkown image
|
page readonly
|
|
|
|
9D9C000
|
unkown
|
page read and write
|
|
|
|
9DA6000
|
unkown
|
page read and write
|
|
|
|
180C23BE000
|
unkown
|
page read and write
|
|
|
|
7FF55FE74000
|
unkown image
|
page readonly
|
|
|
|
1BB9BD63000
|
unkown
|
page read and write
|
|
|
|
26205000000
|
unkown
|
page read and write
|
|
|
|
21E2000
|
unkown image
|
page readonly
|
|
|
|
180C2415000
|
unkown
|
page read and write
|
|
|
|
7DF51F670000
|
unkown image
|
page readonly
|
|
|
|
4CC5000
|
unkown
|
page read and write
|
|
|
|
7FF50A5DA000
|
unkown image
|
page readonly
|
|
|
|
7DF51F680000
|
unkown image
|
page readonly
|
|
|
|
1BB9B76A000
|
unkown
|
page read and write
|
|
|
|
EC000
|
unkown
|
page read and write
|
|
|
|
F898EFB000
|
unkown
|
page read and write
|
|
|
|
1765DC0F000
|
unkown
|
page read and write
|
|
|
|
9D6E000
|
unkown
|
page read and write
|
|
|
|
FF452000
|
unkown image
|
page readonly
|
|
|
|
25F30780000
|
unkown image
|
page readonly
|
|
|
|
1BB9AEA9000
|
unkown
|
page read and write
|
|
|
|
180C23B1000
|
unkown
|
page read and write
|
|
|
|
25F30750000
|
unkown image
|
page readonly
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
2A67000
|
heap default
|
page read and write
|
|
|
|
7FF52AFD6000
|
unkown image
|
page readonly
|
|
|
|
1BB9AEE5000
|
unkown
|
page read and write
|
|
|
|
7DF540320000
|
unkown image
|
page readonly
|
|
|
|
1BB9B78C000
|
unkown
|
page read and write
|
|
|
|
1765DC10000
|
unkown
|
page read and write
|
|
|
|
7DF540320000
|
unkown image
|
page readonly
|
|
|
|
1BB9B78C000
|
unkown
|
page read and write
|
|
|
|
2420000
|
heap private
|
page read and write
|
|
|
|
56D5DFA000
|
unkown
|
page read and write
|
|
|
|
7FF559F11000
|
unkown image
|
page readonly
|
|
|
|
7DF51F680000
|
unkown image
|
page readonly
|
|
|
|
15C84000
|
heap private
|
page read and write
|
|
|
|
545A4FB000
|
unkown
|
page read and write
|
|
|
|
7FF55F9F6000
|
unkown image
|
page readonly
|
|
|
|
545A9FE000
|
unkown
|
page read and write
|
|
|
|
7FF58BBF7000
|
unkown image
|
page readonly
|
|
|
|
7DF596760000
|
unkown image
|
page readonly
|
|
|
|
25DE000
|
unkown
|
page read and write
|
|
|
|
29C4224D000
|
unkown
|
page read and write
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
1BB9BC02000
|
unkown
|
page read and write
|
|
|
|
15CCE000
|
unkown
|
page read and write
|
|
|
|
7FF58BEF6000
|
unkown image
|
page readonly
|
|
|
|
1BB9B76B000
|
unkown
|
page read and write
|
|
|
|
1BB9ADF0000
|
unkown image
|
page readonly
|
|
|
|
1BB9B768000
|
unkown
|
page read and write
|
|
|
|
7FF581426000
|
unkown image
|
page readonly
|
|
|
|
4ABB000
|
unkown
|
page read and write
|
|
|
|
180C2C60000
|
unkown
|
page read and write
|
|
|
|
4AC8000
|
unkown
|
page read and write
|
|
|
|
1BB9B76A000
|
unkown
|
page read and write
|
|
|
|
25F307A0000
|
heap default
|
page read and write
|
|
|
|
540000
|
unkown image
|
page readonly
|
|
|
|
A1F000
|
unkown
|
page read and write
|
|
|
|
7FF5A3D6D000
|
unkown image
|
page readonly
|
|
|
|
7FF50A341000
|
unkown image
|
page readonly
|
|
|
|
F8507FF000
|
unkown
|
page read and write
|
|
|
|
1BB9AF08000
|
unkown
|
page read and write
|
|
|
|
180C2412000
|
unkown
|
page read and write
|
|
|
|
1BB9B75D000
|
unkown
|
page read and write
|
|
|
|
26204DF0000
|
unkown image
|
page read and write
|
|
|
|
7FF50A544000
|
unkown image
|
page readonly
|
|
|
|
7DF51F672000
|
unkown image
|
page readonly
|
|
|
|
1BB9B78A000
|
unkown
|
page read and write
|
|
|
|
7F512000
|
unkown image
|
page readonly
|
|
|
|
7FF50A51C000
|
unkown image
|
page readonly
|
|
|
|
7FF52B1CF000
|
unkown image
|
page readonly
|
|
|
|
7DF540312000
|
unkown image
|
page readonly
|
|
|
|
9F24000
|
unkown
|
page read and write
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
1BB9BD02000
|
unkown
|
page read and write
|
|
|
|
7DF574FB0000
|
unkown image
|
page readonly
|
|
|
|
1BB9B7A4000
|
unkown
|
page read and write
|
|
|
|
7FF50A45C000
|
unkown image
|
page readonly
|
|
|
|
FF340000
|
unkown image
|
page readonly
|
|
|
|
7F6C2000
|
unkown image
|
page readonly
|
|
|
|
1BB9BC02000
|
unkown
|
page read and write
|
|
|
|
29C42780000
|
unkown image
|
page readonly
|
|
|
|
1BB9B75D000
|
unkown
|
page read and write
|
|
|
|
7F512000
|
unkown image
|
page readonly
|
|
|
|
1BB9B763000
|
unkown
|
page read and write
|
|
|
|
26204E40000
|
unkown image
|
page readonly
|
|
|
|
7FF51DD41000
|
unkown image
|
page readonly
|
|
|
|
7FF52B17F000
|
unkown image
|
page readonly
|
|
|
|
9F03000
|
unkown
|
page read and write
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
7DF49EEC0000
|
unkown image
|
page readonly
|
|
|
|
29C42030000
|
unkown image
|
page readonly
|
|
|
|
29C42308000
|
unkown
|
page read and write
|
|
|
|
7FF50A443000
|
unkown image
|
page readonly
|
|
|
|
7DF5A1010000
|
unkown image
|
page readonly
|
|
|
|
7FF55FE8F000
|
unkown image
|
page readonly
|
|
|
|
7FF58BE80000
|
unkown image
|
page readonly
|
|
|
|
1BB9B76B000
|
unkown
|
page read and write
|
|
|
|
1BB9B7DE000
|
unkown
|
page read and write
|
|
|
|
15423000
|
unkown
|
page read and write
|
|
|
|
1765DBFE000
|
unkown
|
page read and write
|
|
|
|
7FF5815DC000
|
unkown image
|
page readonly
|
|
|
|
7FF55FE2E000
|
unkown image
|
page readonly
|
|
|
|
7DF51F670000
|
unkown image
|
page readonly
|
|
|
|
1BB9B765000
|
unkown
|
page read and write
|
|
|
|
29C42313000
|
unkown
|
page read and write
|
|
|
|
545A27E000
|
unkown
|
page read and write
|
|
|
|
9F1F000
|
unkown
|
page read and write
|
|
|
|
7DF5A0FF0000
|
unkown image
|
page readonly
|
|
|
|
FF442000
|
unkown image
|
page readonly
|
|
|
|
180C2560000
|
unkown image
|
page read and write
|
|
|
|
7FF581634000
|
unkown image
|
page readonly
|
|
|
|
1BB9B7A5000
|
unkown
|
page read and write
|
|
|
|
2370000
|
unkown image
|
page read and write
|
|
|
|
26F0000
|
unkown
|
page execute and read and write
|
|
|
|
490000
|
unkown image
|
page readonly
|
|
|
|
7DF51F662000
|
unkown image
|
page readonly
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
7FF55FD11000
|
unkown image
|
page readonly
|
|
|
|
159BF000
|
unkown
|
page read and write
|
|
|
|
7FF55FC81000
|
unkown image
|
page readonly
|
|
|
|
237436C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5814EB000
|
unkown image
|
page readonly
|
|
|
|
1596E000
|
unkown
|
page read and write
|
|
|
|
1BB9B79A000
|
unkown
|
page read and write
|
|
|
|
7FF52B216000
|
unkown image
|
page readonly
|
|
|
|
25F3083C000
|
unkown
|
page read and write
|
|
|
|
1765DBA0000
|
unkown image
|
page readonly
|
|
|
|
29C42400000
|
unkown image
|
page readonly
|
|
|
|
7FF55FE5C000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE58000
|
unkown
|
page read and write
|
|
|
|
1BB9AEC5000
|
unkown
|
page read and write
|
|
|
|
26205580000
|
unkown image
|
page readonly
|
|
|
|
7FF55FD83000
|
unkown image
|
page readonly
|
|
|
|
1BB9BC02000
|
unkown
|
page read and write
|
|
|
|
7FF52B291000
|
unkown image
|
page readonly
|
|
|
|
1BB9B76A000
|
unkown
|
page read and write
|
|
|
|
7FF50A56D000
|
unkown image
|
page readonly
|
|
|
|
29C42264000
|
unkown
|
page read and write
|
|
|
|
26205050000
|
unkown
|
page read and write
|
|
|
|
7FF58BA40000
|
unkown image
|
page readonly
|
|
|
|
29C42000000
|
heap private
|
page read and write
|
|
|
|
1BB9B4F0000
|
unkown
|
page read and write
|
|
|
|
1BB9B769000
|
unkown
|
page read and write
|
|
|
|
7FF52AE31000
|
unkown image
|
page readonly
|
|
|
|
7DF51F660000
|
unkown image
|
page readonly
|
|
|
|
7DF5A1000000
|
unkown image
|
page readonly
|
|
|
|
7FF5814D1000
|
unkown image
|
page readonly
|
|
|
|
53C000
|
unkown
|
page read and write
|
|
|
|
7FF58BD61000
|
unkown image
|
page readonly
|
|
|
|
150FE000
|
unkown
|
page read and write
|
|
|
|
9EBB000
|
unkown
|
page read and write
|
|
|
|
FF440000
|
unkown image
|
page readonly
|
|
|
|
F60000
|
unkown image
|
page readonly
|
|
|
|
237436B0000
|
heap private
|
page read and write
|
|
|
|
7F6E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5811B0000
|
unkown image
|
page readonly
|
|
|
|
7F6C0000
|
unkown image
|
page readonly
|
|
|
|
7FF559E74000
|
unkown image
|
page readonly
|
|
|
|
25F30902000
|
unkown
|
page read and write
|
|
|
|
1BB9B797000
|
unkown
|
page read and write
|
|
|
|
7FF55FD94000
|
unkown image
|
page readonly
|
|
|
|
7FF5815EA000
|
unkown image
|
page readonly
|
|
|
|
7FF559E58000
|
unkown image
|
page readonly
|
|
|
|
550000
|
unkown image
|
page readonly
|
|
|
|
7FF52B1D7000
|
unkown image
|
page readonly
|
|
|
|
1765DB75000
|
heap private
|
page read and write
|
|
|
|
7FF58BD23000
|
unkown image
|
page readonly
|
|
|
|
7FF5816D4000
|
unkown image
|
page readonly
|
|
|
|
25F31002000
|
unkown
|
page read and write
|
|
|
|
15449000
|
unkown
|
page read and write
|
|
|
|
7F6D2000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE7D000
|
unkown
|
page read and write
|
|
|
|
7FF50A53A000
|
unkown image
|
page readonly
|
|
|
|
7DF56EFA2000
|
unkown image
|
page readonly
|
|
|
|
7DF56EFB0000
|
unkown image
|
page readonly
|
|
|
|
1BB9B7B9000
|
unkown
|
page read and write
|
|
|
|
7FF58BE7A000
|
unkown image
|
page readonly
|
|
|
|
14C98000
|
unkown
|
page read and write
|
|
|
|
7DF5A1000000
|
unkown image
|
page readonly
|
|
|
|
1BB9B7AD000
|
unkown
|
page read and write
|
|
|
|
7FF559E64000
|
unkown image
|
page readonly
|
|
|
|
7FF58BDE4000
|
unkown image
|
page readonly
|
|
|
|
7DF46CE60000
|
unkown image
|
page readonly
|
|
|
|
699816D000
|
unkown
|
page read and write
|
|
|
|
152EE000
|
unkown
|
page read and write
|
|
|
|
151CE000
|
unkown
|
page read and write
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
29C42140000
|
unkown image
|
page readonly
|
|
|
|
7FF581666000
|
unkown image
|
page readonly
|
|
|
|
1BB9B602000
|
unkown
|
page read and write
|
|
|
|
7FF5A3D69000
|
unkown image
|
page readonly
|
|
|
|
26204E10000
|
unkown image
|
page readonly
|
|
|
|
7FF55FE2A000
|
unkown image
|
page readonly
|
|
|
|
7FF58153D000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE5A000
|
unkown
|
page read and write
|
|
|
|
2900000
|
heap default
|
page read and write
|
|
|
|
545A3FB000
|
unkown
|
page read and write
|
|
|
|
7FF55F55A000
|
unkown image
|
page readonly
|
|
|
|
7FF52B121000
|
unkown image
|
page readonly
|
|
|
|
C30000
|
unkown image
|
page readonly
|
|
|
|
7FF52AAA2000
|
unkown image
|
page readonly
|
|
|
|
7DF56EF92000
|
unkown image
|
page readonly
|
|
|
|
7FF55FCD3000
|
unkown image
|
page readonly
|
|
|
|
1BB9B773000
|
unkown
|
page read and write
|
|
|
|
E735EFE000
|
unkown
|
page read and write
|
|
|
|
7FF559F12000
|
unkown image
|
page readonly
|
|
|
|
29C42252000
|
unkown
|
page read and write
|
|
|
|
15442000
|
unkown
|
page read and write
|
|
|
|
29C4226F000
|
unkown
|
page read and write
|
|
|
|
15C70000
|
unkown
|
page read and write
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
1BB9B776000
|
unkown
|
page read and write
|
|
|
|
7FF50A3EB000
|
unkown image
|
page readonly
|
|
|
|
7FF50A5D4000
|
unkown image
|
page readonly
|
|
|
|
29C42040000
|
unkown image
|
page readonly
|
|
|
|
25F30850000
|
unkown
|
page read and write
|
|
|
|
180C2550000
|
unkown
|
page read and write
|
|
|
|
1BB9B770000
|
unkown
|
page read and write
|
|
|
|
7FF5815EE000
|
unkown image
|
page readonly
|
|
|
|
7FF5811B6000
|
unkown image
|
page readonly
|
|
|
|
1765DCD0000
|
unkown image
|
page readonly
|
|
|
|
FF450000
|
unkown image
|
page readonly
|
|
|
|
B15000
|
heap default
|
page read and write
|
|
|
|
7FF55F9F0000
|
unkown image
|
page readonly
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
7FF50A569000
|
unkown image
|
page readonly
|
|
|
|
1BB9B763000
|
unkown
|
page read and write
|
|
|
|
15AE0000
|
unkown image
|
page readonly
|
|
|
|
24BD000
|
unkown
|
page read and write
|
|
|
|
7FF52B28A000
|
unkown image
|
page readonly
|
|
|
|
7FF559E6A000
|
unkown image
|
page readonly
|
|
|
|
F8992FF000
|
unkown
|
page read and write
|
|
|
|
7FF58149A000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE5E000
|
unkown
|
page read and write
|
|
|
|
1BB9B78C000
|
unkown
|
page read and write
|
|
|
|
1BB9AE52000
|
unkown
|
page read and write
|
|
|
|
1BB9B768000
|
unkown
|
page read and write
|
|
|
|
14C3F000
|
unkown
|
page read and write
|
|
|
|
7FF5816E1000
|
unkown image
|
page readonly
|
|
|
|
69AE57E000
|
unkown
|
page read and write
|
|
|
|
2620503C000
|
unkown
|
page read and write
|
|
|
|
7FF581590000
|
unkown image
|
page readonly
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
1BB9AE4B000
|
unkown
|
page read and write
|
|
|
|
7DF596762000
|
unkown image
|
page readonly
|
|
|
|
7FF58161F000
|
unkown image
|
page readonly
|
|
|
|
699847E000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
heap default
|
page read and write
|
|
|
|
7DF596770000
|
unkown image
|
page readonly
|
|
|
|
25F30740000
|
heap private
|
page read and write
|
|
|
|
2300000
|
heap private
|
page read and write
|
|
|
|
1BB9B776000
|
unkown
|
page read and write
|
|
|
|
1BB9B764000
|
unkown
|
page read and write
|
|
|
|
A30000
|
heap private
|
page read and write
|
|
|
|
7FF52B18A000
|
unkown image
|
page readonly
|
|
|
|
7FF50A558000
|
unkown image
|
page readonly
|
|
|
|
7FF52B1AB000
|
unkown image
|
page readonly
|
|
|
|
9E3F000
|
unkown
|
page read and write
|
|
|
|
1765DC11000
|
unkown
|
page read and write
|
|
|
|
7FF55FD9C000
|
unkown image
|
page readonly
|
|
|
|
1BB9B200000
|
unkown image
|
page readonly
|
|
|
|
6DE000
|
unkown
|
page read and write
|
|
|
|
7DF540322000
|
unkown image
|
page readonly
|
|
|
|
7FF5A3CF0000
|
unkown image
|
page readonly
|
|
|
|
7DF574FC0000
|
unkown image
|
page readonly
|
|
|
|
168BE000
|
unkown image
|
page read and write
|
|
|
|
7DF5A0FF0000
|
unkown image
|
page readonly
|
|
|
|
7FF58BD41000
|
unkown image
|
page readonly
|
|
|
|
1BB9BC00000
|
unkown
|
page read and write
|
|
|
|
7DF56EF90000
|
unkown image
|
page readonly
|
|
|
|
7FF55FEA6000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE71000
|
unkown
|
page read and write
|
|
|
|
9E25000
|
unkown
|
page read and write
|
|
|
|
7FF55FF21000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE7E000
|
unkown
|
page read and write
|
|
|
|
F8990F7000
|
unkown
|
page read and write
|
|
|
|
1BB9B789000
|
unkown
|
page read and write
|
|
|
|
25F5000
|
unkown
|
page read and write
|
|
|
|
7FF581152000
|
unkown image
|
page readonly
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
7FF5814F8000
|
unkown image
|
page readonly
|
|
|
|
1BB9B7A0000
|
unkown
|
page read and write
|
|
|
|
545A677000
|
unkown
|
page read and write
|
|
|
|
7F400000
|
unkown image
|
page readonly
|
|
|
|
7FF5812CA000
|
unkown image
|
page readonly
|
|
|
|
7FF559E9D000
|
unkown image
|
page readonly
|
|
|
|
E73617F000
|
unkown
|
page read and write
|
|
|
|
1BB9AE57000
|
unkown
|
page read and write
|
|
|
|
7FF55FE47000
|
unkown image
|
page readonly
|
|
|
|
15C2F000
|
unkown
|
page read and write
|
|
|
|
1BB9B75F000
|
unkown
|
page read and write
|
|
|
|
7DF574FB2000
|
unkown image
|
page readonly
|
|
|
|
7FF50A4EA000
|
unkown image
|
page readonly
|
|
|
|
7FF50A55E000
|
unkown image
|
page readonly
|
|
|
|
69AE67B000
|
unkown
|
page read and write
|
|
|
|
237434B0000
|
heap default
|
page read and write
|
|
|
|
7FF58BDD3000
|
unkown image
|
page readonly
|
|
|
|
168C0000
|
unkown
|
page read and write
|
|
|
|
7F6D2000
|
unkown image
|
page readonly
|
|
|
|
FF440000
|
unkown image
|
page readonly
|
|
|
|
2430000
|
unkown
|
page read and write
|
|
|
|
7FF559773000
|
unkown image
|
page readonly
|
|
|
|
E7360FB000
|
unkown
|
page read and write
|
|
|
|
1BB9B7BD000
|
unkown
|
page read and write
|
|
|
|
7DF540310000
|
unkown image
|
page readonly
|
|
|
|
1BB9B74D000
|
unkown
|
page read and write
|
|
|
|
1BB9B74D000
|
unkown
|
page read and write
|
|
|
|
180C21B0000
|
unkown image
|
page read and write
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
14800000
|
unkown
|
page read and write
|
|
|
|
1543A000
|
unkown
|
page read and write
|
|
|
|
1BB9ACB0000
|
unkown image
|
page readonly
|
|
|
|
15435000
|
unkown
|
page read and write
|
|
|
|
1765DED0000
|
unkown image
|
page readonly
|
|
|
|
7FF5814B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5A3DE2000
|
unkown image
|
page readonly
|
|
|
|
1BB9B734000
|
unkown
|
page read and write
|
|
|
|
1765DBE6000
|
heap default
|
page read and write
|
|
|
|
9D50000
|
unkown
|
page read and write
|
|
|
|
26205113000
|
unkown
|
page read and write
|
|
|
|
180C23F5000
|
unkown
|
page read and write
|
|
|
|
180C2418000
|
unkown
|
page read and write
|
|
|
|
9B5000
|
heap default
|
page read and write
|
|
|
|
7DF5B8E62000
|
unkown image
|
page readonly
|
|
|
|
2320000
|
unkown
|
page read and write
|
|
|
|
7FF52B20E000
|
unkown image
|
page readonly
|
|
|
|
1BB9B76A000
|
unkown
|
page read and write
|
|
|
|
7FF581607000
|
unkown image
|
page readonly
|
|
|
|
56D5EFF000
|
unkown
|
page read and write
|
|
|
|
A20000
|
unkown image
|
page readonly
|
|
|
|
7DF5A0FF2000
|
unkown image
|
page readonly
|
|
|
|
1BB9B715000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown image
|
page read and write
|
|
|
|
7FF581592000
|
unkown image
|
page readonly
|
|
|
|
29C4224F000
|
unkown
|
page read and write
|
|
|
|
22E0000
|
unkown
|
page read and write
|
|
|
|
25F3082A000
|
unkown
|
page read and write
|
|
|
|
9E2C000
|
unkown
|
page read and write
|
|
|
|
7DF574FA0000
|
unkown image
|
page readonly
|
|
|
|
7DF5B8E60000
|
unkown image
|
page readonly
|
|
|
|
7FF58BDEC000
|
unkown image
|
page readonly
|
|
|
|
7FF52AAFD000
|
unkown image
|
page readonly
|
|
|
|
26205100000
|
unkown
|
page read and write
|
|
|
|
180C240A000
|
unkown
|
page read and write
|
|
|
|
1BB9B76A000
|
unkown
|
page read and write
|
|
|
|
E736277000
|
unkown
|
page read and write
|
|
|
|
7FF55FE1C000
|
unkown image
|
page readonly
|
|
|
|
7DF5B8E72000
|
unkown image
|
page readonly
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
29C4228F000
|
unkown
|
page read and write
|
|
|
|
7FF52B219000
|
unkown image
|
page readonly
|
|
|
|
1765DA00000
|
unkown image
|
page read and write
|
|
|
|
69AE13D000
|
unkown
|
page read and write
|
|
|
|
25F0000
|
unkown
|
page read and write
|
|
|
|
211C000
|
unkown image
|
page readonly
|
|
|
|
7F500000
|
unkown image
|
page readonly
|
|
|
|
180C2790000
|
unkown image
|
page readonly
|
|
|
|
1BB9B7AD000
|
unkown
|
page read and write
|
|
|
|
7FF50A0B6000
|
unkown image
|
page readonly
|
|
|
|
1521E000
|
unkown
|
page read and write
|
|
|
|
7FF58BE6C000
|
unkown image
|
page readonly
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
7FF5815CF000
|
unkown image
|
page readonly
|
|
|
|
7DF540310000
|
unkown image
|
page readonly
|
|
|
|
7DF472E70000
|
unkown image
|
page readonly
|
|
|
|
29F0000
|
heap private
|
page read and write
|
|
|
|
7FF58BEE8000
|
unkown image
|
page readonly
|
|
|
|
9EC6000
|
unkown
|
page read and write
|
|
|
|
21E0000
|
unkown
|
page read and write
|
|
|
|
1BB9B768000
|
unkown
|
page read and write
|
|
|
|
FF452000
|
unkown image
|
page readonly
|
|
|
|
ADB000
|
heap default
|
page read and write
|
|
|
|
7FF581431000
|
unkown image
|
page readonly
|
|
|
|
1BB9AEE9000
|
unkown
|
page read and write
|
|
|
|
237436B5000
|
heap private
|
page read and write
|
|
|
|
1BB9AEB2000
|
unkown
|
page read and write
|
|
|
|
180C23F3000
|
unkown
|
page read and write
|
|
|
|
163D8000
|
unkown
|
page read and write
|
|
|
|
7FF58BA46000
|
unkown image
|
page readonly
|
|
|
|
FF460000
|
unkown image
|
page readonly
|
|
|
|
7DF596780000
|
unkown image
|
page readonly
|
|
|
|
25F30800000
|
unkown
|
page read and write
|
|
|
|
7DF494630000
|
unkown image
|
page readonly
|
|
|
|
1BB9B78C000
|
unkown
|
page read and write
|
|
|
|
26204E10000
|
unkown image
|
page readonly
|
|
|
|
1BB9BC6A000
|
unkown
|
page read and write
|
|
|
|
1BB9AE29000
|
unkown
|
page read and write
|
|
|
|
9E14000
|
unkown
|
page read and write
|
|
|
|
B17000
|
heap default
|
page read and write
|
|
|
|
180C23BF000
|
unkown
|
page read and write
|
|
|
|
180C2386000
|
unkown
|
page read and write
|
|
|
|
7FF581627000
|
unkown image
|
page readonly
|
|
|
|
29C42060000
|
heap default
|
page read and write
|
|
|
|
23743390000
|
unkown
|
page read and write
|
|
|
|
1BB9B7CC000
|
unkown
|
page read and write
|
|
|
|
1765DBE1000
|
unkown
|
page read and write
|
|
|
|
26205087000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
26205802000
|
unkown
|
page read and write
|
|
|
|
7FF50A5E2000
|
unkown image
|
page readonly
|
|
|
|
69980EA000
|
unkown
|
page read and write
|
|
|
|
180C2590000
|
unkown image
|
page readonly
|
|
|
|
1BB9AEA7000
|
unkown
|
page read and write
|
|
|
|
1BB9AE8B000
|
unkown
|
page read and write
|
|
|
|
B1B000
|
heap default
|
page read and write
|
|
|
|
1BB9B76E000
|
unkown
|
page read and write
|
|
|
|
7FF58165E000
|
unkown image
|
page readonly
|
|
|
|
7FF52B030000
|
unkown image
|
page readonly
|
|
|
|
7FF5A3DE1000
|
unkown image
|
page readonly
|
|
|
|
25F30870000
|
unkown
|
page read and write
|
|
|
|
7FF50A566000
|
unkown image
|
page readonly
|
|
|
|
1BB9AE50000
|
unkown
|
page read and write
|
|
|
|
7FF559E7E000
|
unkown image
|
page readonly
|
|
|
|
7FF55FD2B000
|
unkown image
|
page readonly
|
|
|
|
1BB9AC80000
|
unkown image
|
page readonly
|
|
|
|
180C21D0000
|
unkown image
|
page readonly
|
|
|
|
7FF50A43D000
|
unkown image
|
page readonly
|
|
|
|
23743250000
|
unkown image
|
page read and write
|
|
|
|
7FF55FE9E000
|
unkown image
|
page readonly
|
|
|
|
69AE777000
|
unkown
|
page read and write
|
|
|
|
25F30855000
|
unkown
|
page read and write
|
|
|
|
7FF52B19A000
|
unkown image
|
page readonly
|
|
|
|
180C23B1000
|
unkown
|
page read and write
|
|
|
|
7FF58BEF9000
|
unkown image
|
page readonly
|
|
|
|
7FF52AFD4000
|
unkown image
|
page readonly
|
|
|
|
29C42264000
|
unkown
|
page read and write
|
|
|
|
180C2910000
|
unkown image
|
page readonly
|
|
|
|
2620508E000
|
unkown
|
page read and write
|
|
|
|
4CCA000
|
unkown
|
page read and write
|
|
|
|
1BB9B76A000
|
unkown
|
page read and write
|
|
|
|
69AE1BE000
|
unkown
|
page read and write
|
|
|
|
478E000
|
unkown
|
page read and write
|
|
|
|
1BB9B787000
|
unkown
|
page read and write
|
|
|
|
4A39000
|
unkown
|
page read and write
|
|
|
|
1BB9BC02000
|
unkown
|
page read and write
|
|
|
|
1BB9B7A4000
|
unkown
|
page read and write
|
|
|
|
23743270000
|
unkown image
|
page readonly
|
|
|
|
7FF58BD7E000
|
unkown image
|
page readonly
|
|
|
|
7FF55FA05000
|
unkown image
|
page readonly
|
|
|
|
F8508FF000
|
unkown
|
page read and write
|
|
|
|
7DF41D530000
|
unkown image
|
page readonly
|
|
|
|
152AE000
|
unkown
|
page read and write
|
|
|
|
1BB9B745000
|
unkown
|
page read and write
|
|
|
|
180C23F3000
|
unkown
|
page read and write
|
|
|
|
2510000
|
unkown image
|
page readonly
|
|
|
|
7DF56EFA2000
|
unkown image
|
page readonly
|
|
|
|
15444000
|
unkown
|
page read and write
|
|
|
|
DD0000
|
unkown image
|
page readonly
|
|
|
|
8DF000
|
unkown
|
page read and write
|
|
|
|
29C42010000
|
unkown image
|
page readonly
|
|
|
|
180C2383000
|
unkown
|
page read and write
|
|
|
|
25F30AD0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A1010000
|
unkown image
|
page readonly
|
|
|
|
180C2415000
|
unkown
|
page read and write
|
|
|
|
69984FB000
|
unkown
|
page read and write
|
|
|
|
7FF52B1FF000
|
unkown image
|
page readonly
|
|
|
|
29C42A02000
|
unkown
|
page read and write
|
|
|
|
1BB9B763000
|
unkown
|
page read and write
|
|
|
|
7FF58BE85000
|
unkown image
|
page readonly
|
|
|
|
2410000
|
unkown
|
page read and write
|
|
|
|
1BB9BC02000
|
unkown
|
page read and write
|
|
|
|
26F2000
|
unkown
|
page execute and read and write
|
|
|
|
14EEE000
|
unkown
|
page read and write
|
|
|
|
7FF5815F0000
|
unkown image
|
page readonly
|
|
|
|
7FF559E8E000
|
unkown image
|
page readonly
|
|
|
|
7FF559E4F000
|
unkown image
|
page readonly
|
|
|
|
7FF58BE6A000
|
unkown image
|
page readonly
|
|
|
|
7F510000
|
unkown image
|
page readonly
|
|
|
|
7FF581370000
|
unkown image
|
page readonly
|
|
|
|
1525E000
|
unkown
|
page read and write
|
|
|
|
7FF581205000
|
unkown image
|
page readonly
|
|
|
|
1BB9B721000
|
unkown
|
page read and write
|
|
|
|
7FF58BEB7000
|
unkown image
|
page readonly
|
|
|
|
23743A40000
|
unkown image
|
page readonly
|
|
|
|
1BB9AC70000
|
heap private
|
page read and write
|
|
|
|
25F30CD0000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1BB9BC02000
|
unkown
|
page read and write
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
1BB9B000000
|
unkown image
|
page readonly
|
|
|
|
7DF56EF90000
|
unkown image
|
page readonly
|
|
|
|
29C4227C000
|
unkown
|
page read and write
|
|
|
|
15BDE000
|
unkown
|
page read and write
|
|
|
|
7FF52B18C000
|
unkown image
|
page readonly
|
|
|
|
7FF52B124000
|
unkown image
|
page readonly
|
|
|
|
29C42160000
|
unkown
|
page read and write
|
|
|
|
15AD9000
|
unkown
|
page read and write
|
|
|
|
B0B000
|
heap default
|
page read and write
|
|
|
|
180C2365000
|
unkown
|
page read and write
|
|
|
|
7FF58BCD1000
|
unkown image
|
page readonly
|
|
|
|
BD0000
|
unkown image
|
page readonly
|
|
|
|
7FF581644000
|
unkown image
|
page readonly
|
|
|
|
A2D000
|
unkown
|
page read and write
|
|
|
|
7FF52B16F000
|
unkown image
|
page readonly
|
|
|
|
7FF52B233000
|
unkown image
|
page readonly
|
|
|
|
1543D000
|
unkown
|
page read and write
|
|
|
|
7FF5A3D3A000
|
unkown image
|
page readonly
|
|
|
|
1BB9B768000
|
unkown
|
page read and write
|
|
|
|
1BB9B773000
|
unkown
|
page read and write
|
|
|
|
153EE000
|
unkown
|
page read and write
|
|
|
|
7FF5813F0000
|
unkown image
|
page readonly
|
|
|
|
259E000
|
unkown
|
page read and write
|
|
|
|
1BB9B759000
|
unkown
|
page read and write
|
|
|
|
1765DBF6000
|
unkown
|
page read and write
|
|
|
|
69985FD000
|
unkown
|
page read and write
|
|
|
|
7FF55FF1A000
|
unkown image
|
page readonly
|
|
|
|
278B000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5A3D5E000
|
unkown image
|
page readonly
|
|
|
|
1765DA40000
|
unkown image
|
page readonly
|
|
|
|
7FF5A3D4E000
|
unkown image
|
page readonly
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
1BB9B785000
|
unkown
|
page read and write
|
|
|
|
7FF559E4C000
|
unkown image
|
page readonly
|
|
|
|
7FF58BD7B000
|
unkown image
|
page readonly
|
|
|
|
7FF50A393000
|
unkown image
|
page readonly
|
|
|
|
7FF50A454000
|
unkown image
|
page readonly
|
|
|
|
7FF509C1A000
|
unkown image
|
page readonly
|
|
|
|
1BB9B4F0000
|
unkown
|
page read and write
|
|
|
|
AB0000
|
unkown
|
page read and write
|
|
|
|
7FF58BEC4000
|
unkown image
|
page readonly
|
|
|
|
2697000
|
unkown
|
page read and write
|
|
|
|
7FF55FE67000
|
unkown image
|
page readonly
|
|
|
|
25F30849000
|
unkown
|
page read and write
|
|
|
|
7FF50A4DC000
|
unkown image
|
page readonly
|
|
|
|
7FF5815F5000
|
unkown image
|
page readonly
|
|
|
|
47E0000
|
unkown
|
page read and write
|
|
|
|
180C23F5000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
237438C0000
|
unkown image
|
page readonly
|
|
|
|
2A60000
|
heap default
|
page read and write
|
|
|
|
272E000
|
unkown
|
page execute and read and write
|
|
|
|
9B0000
|
heap default
|
page read and write
|
|
|
|
7FF50A3D1000
|
unkown image
|
page readonly
|
|
|
|
7FF5815BB000
|
unkown image
|
page readonly
|
|
|
|
9E0000
|
unkown
|
page read and write
|
|
|
|
4ED000
|
unkown
|
page read and write
|
|
|
|
1BB9B776000
|
unkown
|
page read and write
|
|
|
|
1BB9AE4C000
|
unkown
|
page read and write
|
|
|
|
1765DB70000
|
heap private
|
page read and write
|
|
|
|
24FB000
|
unkown
|
page read and write
|
|
|
|
1BB9B78D000
|
unkown
|
page read and write
|
|
|
|
21D4000
|
unkown image
|
page readonly
|
|
|
|
F85087E000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
7FF55FE84000
|
unkown image
|
page readonly
|
|
|
|
29C42287000
|
unkown
|
page read and write
|
|
|
|
2732000
|
unkown
|
page execute and read and write
|
|
|
|
7FF52B163000
|
unkown image
|
page readonly
|
|
|
|
7DF596772000
|
unkown image
|
page readonly
|
|
|
|
7FF50A3EE000
|
unkown image
|
page readonly
|
|
|
|
545A77F000
|
unkown
|
page read and write
|
|
|
|
7DF51F660000
|
unkown image
|
page readonly
|
|
|
|
B29000
|
heap default
|
page read and write
|
|
|
|
9E1F000
|
unkown
|
page read and write
|
|
|
|
7DF574FB0000
|
unkown image
|
page readonly
|
|
|
|
7DF56EFA0000
|
unkown image
|
page readonly
|
|
|
|
F898B2E000
|
unkown
|
page read and write
|
|
|
|
1765DC0E000
|
unkown
|
page read and write
|
|
|
|
26204E00000
|
heap private
|
page read and write
|
|
|
|
7DF574FA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5815FB000
|
unkown image
|
page readonly
|
|
|
|
4CCE000
|
unkown
|
page read and write
|
|
|
|
180C2365000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown image
|
page readonly
|
|
|
|
25F3088A000
|
unkown
|
page read and write
|
|
|
|
1BB9ADB0000
|
unkown image
|
page readonly
|
|
|
|
9ED2000
|
unkown
|
page read and write
|
|
|
|
7DF540312000
|
unkown image
|
page readonly
|
|
|
|
2620504D000
|
unkown
|
page read and write
|
|
|
|
7DF596770000
|
unkown image
|
page readonly
|
|
|
|
49D8000
|
unkown
|
page read and write
|
|
|
|
1BB9BC1D000
|
unkown
|
page read and write
|
|
|
|
294E000
|
unkown
|
page read and write
|
|
|
|
1BB9B732000
|
unkown
|
page read and write
|
|
|
|
7FF581669000
|
unkown image
|
page readonly
|
|
|
|
15A88000
|
unkown
|
page read and write
|
|
|
|
7F6C0000
|
unkown image
|
page readonly
|
|
|
|
7FF55FD7D000
|
unkown image
|
page readonly
|
|
|
|
7FF52AE5A000
|
unkown image
|
page readonly
|
|
|
|
1BB9B771000
|
unkown
|
page read and write
|
|
|
|
C20000
|
unkown image
|
page readonly
|
|
|
|
7FF58BE8B000
|
unkown image
|
page readonly
|
|
|
|
7FF55FEA9000
|
unkown image
|
page readonly
|
|
|
|
25E5000
|
heap private
|
page read and write
|
|
|
|
9D0000
|
unkown image
|
page readonly
|
|
|
|
1BB9AED5000
|
unkown
|
page read and write
|
|
|
|
25F30E50000
|
unkown image
|
page readonly
|
|
|
|
7FF5816E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5A3CF2000
|
unkown image
|
page readonly
|
|
|
|
7FF581554000
|
unkown image
|
page readonly
|
|
|
|
1BB9B500000
|
unkown image
|
page read and write
|
|
|
|
269B000
|
unkown
|
page read and write
|
|
|
|
7FF581367000
|
unkown image
|
page readonly
|
|
|
|
25F307B0000
|
unkown image
|
page readonly
|
|
|
|
7F502000
|
unkown image
|
page readonly
|
|
|
|
7FF58BE97000
|
unkown image
|
page readonly
|
|
|
|
29C4224A000
|
unkown
|
page read and write
|
|
|
|
180C2C6A000
|
unkown
|
page read and write
|
|
|
|
1BB9AE83000
|
unkown
|
page read and write
|
|
|
|
7FF50A267000
|
unkown image
|
page readonly
|
|
|
|
180C2580000
|
heap private
|
page read and write
|
|
|
|
7FF55FE3B000
|
unkown image
|
page readonly
|
|
|
|
150AE000
|
unkown
|
page read and write
|
|
|
|
15A4F000
|
unkown
|
page read and write
|
|
|
|
180C2420000
|
unkown
|
page read and write
|
|
|
|
1765DB50000
|
unkown
|
page read and write
|
|
|
|
F50000
|
unkown image
|
page readonly
|
|
|
|
215F000
|
unkown image
|
page readonly
|
|
|
|
7FF52B284000
|
unkown image
|
page readonly
|
|
|
|
7DF56EFB0000
|
unkown image
|
page readonly
|
|
|
|
7F510000
|
unkown image
|
page readonly
|
|
|
|
1BB9B7AA000
|
unkown
|
page read and write
|
|
|
|
7DF5B8E70000
|
unkown image
|
page readonly
|
|
|
|
1BB9B78C000
|
unkown
|
page read and write
|
|
|
|
2620506F000
|
unkown
|
page read and write
|
|
|
|
2460000
|
unkown image
|
page readonly
|
|
|
|
7FF52B1B7000
|
unkown image
|
page readonly
|
|
|
|
14D1E000
|
unkown
|
page read and write
|
|
|
|
7DF5B8E60000
|
unkown image
|
page readonly
|
|
|
|
1765E050000
|
unkown image
|
page readonly
|
|
|
|
215A000
|
unkown image
|
page readonly
|
|
|
|
29C4222A000
|
unkown
|
page read and write
|
|
|
|
E73657F000
|
unkown
|
page read and write
|
|
|
|
14F2E000
|
unkown
|
page read and write
|
|
|
|
7FF5A3CFB000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
FF450000
|
unkown image
|
page readonly
|
|
|
|
7DF540330000
|
unkown image
|
page readonly
|
|
|
|
9DE4000
|
unkown
|
page read and write
|
|
|
|
FF460000
|
unkown image
|
page readonly
|
|
|
|
7FF50A54F000
|
unkown image
|
page readonly
|
|
|
|
7FF5815A3000
|
unkown image
|
page readonly
|
|
|
|
7FF58BEEE000
|
unkown image
|
page readonly
|
|
|
|
14E9E000
|
unkown
|
page read and write
|
|
|
|
7FF58155C000
|
unkown image
|
page readonly
|
|
|
|
7FF52B1E4000
|
unkown image
|
page readonly
|
|
|
|
699867E000
|
unkown
|
page read and write
|
|
|
|
29C42300000
|
unkown
|
page read and write
|
|
|
|
1BB9AEAD000
|
unkown
|
page read and write
|
|
|
|
7DF56EF92000
|
unkown image
|
page readonly
|
|
|
|
7FF52B1A5000
|
unkown image
|
page readonly
|
|
|
|
2742000
|
unkown
|
page execute and read and write
|
|
|
|
180C2320000
|
heap default
|
page read and write
|
|
|
|
7FF55FD2E000
|
unkown image
|
page readonly
|
|
|
|
1BB9BC03000
|
unkown
|
page read and write
|
|
|
|
7FF50A0C5000
|
unkown image
|
page readonly
|
|
|
|
237434BA000
|
heap default
|
page read and write
|
|
|
|
7F520000
|
unkown image
|
page readonly
|
|
|
|
1BB9AF02000
|
unkown
|
page read and write
|
|
|
|
26205400000
|
unkown image
|
page readonly
|
|
|
|
5459FAB000
|
unkown
|
page read and write
|
|
|
|
7FF559F0A000
|
unkown image
|
page readonly
|
|
|
|
7FF52B16B000
|
unkown image
|
page readonly
|
|
|
|
A88000
|
unkown
|
page read and write
|
|
|
|
69981EE000
|
unkown
|
page read and write
|
|
|
|
7FF52AAA6000
|
unkown image
|
page readonly
|
|
|
|
7F502000
|
unkown image
|
page readonly
|
|
|
|
1BB9B7D8000
|
unkown
|
page read and write
|
|
|
|
69AE87F000
|
unkown
|
page read and write
|
|
|
|
69AE4FB000
|
unkown
|
page read and write
|
|
|
|
244000
|
unkown
|
page read and write
|
|
|
|
1BB9B79E000
|
unkown
|
page read and write
|
|
|
|
180C2383000
|
unkown
|
page read and write
|
|
|
|
21F3000
|
unkown image
|
page readonly
|
|
|
|
E73647A000
|
unkown
|
page read and write
|
|
|
|
7DF574FB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5815DA000
|
unkown image
|
page readonly
|
|
|
|
23743290000
|
unkown image
|
page readonly
|
|
|
|
7FF58BECA000
|
unkown image
|
page readonly
|
|
|
|
29C42255000
|
unkown
|
page read and write
|
|
|
|
168A6000
|
unkown image
|
page read and write
|
|
|
|
7FF5A3DD4000
|
unkown image
|
page readonly
|
|
|
|
7FF581493000
|
unkown image
|
page readonly
|
|
|
|
FF442000
|
unkown image
|
page readonly
|
|
|
|
1BB9B76A000
|
unkown
|
page read and write
|
|
|
|
273A000
|
unkown
|
page execute and read and write
|
|
|
|
56D59AA000
|
unkown
|
page read and write
|
|
|
|
7FF559E99000
|
unkown image
|
page readonly
|
|
|
|
29C42213000
|
unkown
|
page read and write
|
|
|
|
7F6D0000
|
unkown image
|
page readonly
|
|
|
|
180C2415000
|
unkown
|
page read and write
|
|
|
|
F8503CC000
|
unkown
|
page read and write
|
|
|
|
298F000
|
unkown
|
page read and write
|
|
|
|
7FF5815BF000
|
unkown image
|
page readonly
|
|
|
|
7FF55FEAD000
|
unkown image
|
page readonly
|
|
|
|
1533F000
|
unkown
|
page read and write
|
|
|
|
1BB9AEE8000
|
unkown
|
page read and write
|
|
|
|
46F0000
|
unkown
|
page read and write
|
|
|
|
7FF580EF2000
|
unkown image
|
page readonly
|
|
|
|
180C2550000
|
unkown
|
page read and write
|
|
|
|
1BB9B773000
|
unkown
|
page read and write
|
|
|
|
7FF58BED4000
|
unkown image
|
page readonly
|
|
|
|
7FF52B1CC000
|
unkown image
|
page readonly
|
|
|
|
7DF5B8E62000
|
unkown image
|
page readonly
|
|
|
|
7FF50A0B0000
|
unkown image
|
page readonly
|
|
|
|
7F6E0000
|
unkown image
|
page readonly
|
|
|
|
1BB9B70E000
|
unkown
|
page read and write
|
|
|
|
7FF559E25000
|
unkown image
|
page readonly
|
|
|
|
2500000
|
unkown image
|
page readonly
|
|
|
|
699857D000
|
unkown
|
page read and write
|
|
|
|
1518F000
|
unkown
|
page read and write
|
|
|
|
180C2328000
|
heap default
|
page read and write
|
|
|
|
E735B8B000
|
unkown
|
page read and write
|
|
|
|
23743260000
|
unkown image
|
page readonly
|
|
|
|
7DF596780000
|
unkown image
|
page readonly
|
|
|
|
15C6C000
|
unkown
|
page read and write
|
|
|
|
2172000
|
unkown image
|
page readonly
|
|
|
|
DB0000
|
unkown image
|
page readonly
|
|
|
|
56D5E7F000
|
unkown
|
page read and write
|
|
|
|
25F30813000
|
unkown
|
page read and write
|
|
|
|
25F30913000
|
unkown
|
page read and write
|
|
|
|
1BB9B715000
|
unkown
|
page read and write
|
|
|
|
545A57E000
|
unkown
|
page read and write
|
|
|
|
7FF55FE5F000
|
unkown image
|
page readonly
|
|
|
|
1BB9B7AC000
|
unkown
|
page read and write
|
|
|
|
7FF58BEFD000
|
unkown image
|
page readonly
|
|
|
|
7FF58BF71000
|
unkown image
|
page readonly
|
|
|
|
1BB9BC02000
|
unkown
|
page read and write
|
|
|
|
180C23F5000
|
unkown
|
page read and write
|
|
There are 1012 hidden memdumps, click here to show them.