Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Quotation.jar
|
Zip archive data, at least v2.0 to extract
|
initial sample
|
 |
|
|
C:\cmdlinestart.log
|
ASCII text, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Oracle\Java\.oracle_jre_usage\cce3fe3b0d8d83e2.timestamp
|
ASCII text, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\83aa4cc77f591dfc2374580bbd95f6ba_d06ed635-68f6-4e9a-955c-4899f5f57b9a
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c ''C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe' -javaagent:'C:\Users\user\AppData\Local\Temp\jartracer.jar'
-jar 'C:\Users\user\Desktop\Quotation.jar'' >> C:\cmdlinestart.log 2>&1
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe
|
'C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe' -javaagent:'C:\Users\user\AppData\Local\Temp\jartracer.jar' -jar
'C:\Users\user\Desktop\Quotation.jar'
|
|
|
|
C:\Windows\SysWOW64\icacls.exe
|
C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant 'everyone':(OI)(CI)M
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://null.oracle.com/
|
unknown
|
|
|
|
https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.5.0/jna-platform-5.5.0.jar
|
unknown
|
|
|
|
https://github.com/krist
|
unknown
|
|
|
|
https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.5.0/jna-5.5.0.jar
|
unknown
|
|
|
|
http://www.allatori.com
|
unknown
|
|
|
|
https://repo1.maven.org/maven2/org/xerial/sqlite-jdbc/3.14.2.1/sqlite-jdbc-3.14.2.1.jar
|
unknown
|
|
|
|
https://github.com/kristian/system-hook/releases/download/3.5/system-hook-3.5.jar
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
sonatype.map.fastly.net
|
199.232.192.209
|
|
|
|
github.com
|
140.82.121.3
|
|
|
|
repo1.maven.org
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
199.232.192.209
|
sonatype.map.fastly.net
|
United States
|
|
|
|
140.82.121.3
|
github.com
|
United States
|
|
|
|
140.82.121.4
|
unknown
|
United States
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
C153000
|
unkown
|
page read and write
|
|
|
|
2E20000
|
heap default
|
page read and write
|
|
|
|
158B7000
|
unkown
|
page read and write
|
|
|
|
1B6BF0FB000
|
unkown
|
page read and write
|
|
|
|
7DF5484E0000
|
unkown image
|
page readonly
|
|
|
|
16BC8000
|
unkown
|
page read and write
|
|
|
|
23AE8870000
|
heap private
|
page read and write
|
|
|
|
1FD46513000
|
unkown
|
page read and write
|
|
|
|
7DF5D01C0000
|
unkown image
|
page readonly
|
|
|
|
7FF59BAF7000
|
unkown image
|
page readonly
|
|
|
|
142D000
|
unkown
|
page read and write
|
|
|
|
7FF53244E000
|
unkown image
|
page readonly
|
|
|
|
CE38CFE000
|
unkown
|
page read and write
|
|
|
|
7FF5DBC9F000
|
unkown image
|
page readonly
|
|
|
|
C035000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF59B6C3000
|
unkown image
|
page readonly
|
|
|
|
185F0180000
|
unkown image
|
page readonly
|
|
|
|
23AE8C00000
|
unkown image
|
page readonly
|
|
|
|
C0AB000
|
unkown
|
page read and write
|
|
|
|
C02F000
|
unkown
|
page read and write
|
|
|
|
200E6950000
|
unkown image
|
page readonly
|
|
|
|
1405000
|
unkown
|
page read and write
|
|
|
|
16C2C000
|
unkown
|
page read and write
|
|
|
|
16AE9000
|
unkown
|
page read and write
|
|
|
|
7FA20000
|
unkown image
|
page readonly
|
|
|
|
6AF25FD000
|
unkown
|
page read and write
|
|
|
|
1B6BEF30000
|
unkown
|
page read and write
|
|
|
|
7FF532BAD000
|
unkown image
|
page readonly
|
|
|
|
7FF59BB18000
|
unkown image
|
page readonly
|
|
|
|
B4E000
|
unkown
|
page read and write
|
|
|
|
1FD46502000
|
unkown
|
page read and write
|
|
|
|
23AE8A50000
|
unkown
|
page read and write
|
|
|
|
15FE2000
|
unkown
|
page read and write
|
|
|
|
C09F000
|
unkown
|
page read and write
|
|
|
|
1B6BEF14000
|
unkown
|
page read and write
|
|
|
|
7FF59BA55000
|
unkown image
|
page readonly
|
|
|
|
703A4F7000
|
unkown
|
page read and write
|
|
|
|
16B7D000
|
unkown
|
page read and write
|
|
|
|
15EAE000
|
unkown
|
page read and write
|
|
|
|
16B2D000
|
unkown
|
page read and write
|
|
|
|
7DF5B1500000
|
unkown image
|
page readonly
|
|
|
|
C096000
|
unkown
|
page read and write
|
|
|
|
16060000
|
unkown
|
page read and write
|
|
|
|
7FF59B9EE000
|
unkown image
|
page readonly
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
6AF212B000
|
unkown
|
page read and write
|
|
|
|
7FF5DBC9F000
|
unkown image
|
page readonly
|
|
|
|
16A1B000
|
unkown
|
page read and write
|
|
|
|
7FF59BBFF000
|
unkown image
|
page readonly
|
|
|
|
2053E802000
|
unkown
|
page read and write
|
|
|
|
C041000
|
unkown
|
page read and write
|
|
|
|
2E27000
|
heap default
|
page read and write
|
|
|
|
1B6B9970000
|
unkown image
|
page readonly
|
|
|
|
28A5CA02000
|
unkown
|
page read and write
|
|
|
|
200E6A51000
|
unkown
|
page read and write
|
|
|
|
1B6BEF20000
|
unkown
|
page read and write
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
A377D7F000
|
unkown
|
page read and write
|
|
|
|
C149000
|
unkown
|
page read and write
|
|
|
|
51FE77E000
|
unkown
|
page read and write
|
|
|
|
7FF532454000
|
unkown image
|
page readonly
|
|
|
|
C172000
|
unkown
|
page read and write
|
|
|
|
200E6820000
|
unkown image
|
page readonly
|
|
|
|
2053E061000
|
unkown
|
page read and write
|
|
|
|
7FF59BBEE000
|
unkown image
|
page readonly
|
|
|
|
CB4E1FF000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
16C5E000
|
unkown
|
page read and write
|
|
|
|
C0AD000
|
unkown
|
page read and write
|
|
|
|
15924000
|
unkown
|
page read and write
|
|
|
|
200E6810000
|
heap private
|
page read and write
|
|
|
|
C16E000
|
unkown
|
page read and write
|
|
|
|
2053E000000
|
unkown
|
page read and write
|
|
|
|
1586F000
|
unkown
|
page read and write
|
|
|
|
7FF59BBC6000
|
unkown image
|
page readonly
|
|
|
|
158A5000
|
unkown
|
page read and write
|
|
|
|
C9D41F7000
|
unkown
|
page read and write
|
|
|
|
200E6F80000
|
unkown image
|
page readonly
|
|
|
|
C02E000
|
unkown
|
page read and write
|
|
|
|
16B49000
|
unkown
|
page read and write
|
|
|
|
CB4E4FF000
|
unkown
|
page read and write
|
|
|
|
158EC000
|
unkown
|
page read and write
|
|
|
|
16E017E000
|
unkown
|
page read and write
|
|
|
|
7FF5090F1000
|
unkown image
|
page readonly
|
|
|
|
16AC3000
|
unkown
|
page read and write
|
|
|
|
1405000
|
unkown
|
page read and write
|
|
|
|
16AD2000
|
unkown
|
page read and write
|
|
|
|
13FE000
|
unkown
|
page read and write
|
|
|
|
C02D000
|
unkown
|
page read and write
|
|
|
|
16BC2000
|
unkown
|
page read and write
|
|
|
|
1419000
|
unkown
|
page read and write
|
|
|
|
16060000
|
unkown
|
page read and write
|
|
|
|
15887000
|
unkown
|
page read and write
|
|
|
|
1B6BEFC0000
|
unkown
|
page read and write
|
|
|
|
158D5000
|
unkown
|
page read and write
|
|
|
|
C18B000
|
unkown
|
page read and write
|
|
|
|
16AAE000
|
unkown
|
page read and write
|
|
|
|
A377F7F000
|
unkown
|
page read and write
|
|
|
|
23AE8A02000
|
unkown
|
page read and write
|
|
|
|
16B7E000
|
unkown
|
page read and write
|
|
|
|
A377C7B000
|
unkown
|
page read and write
|
|
|
|
C15B000
|
unkown
|
page read and write
|
|
|
|
C103000
|
unkown
|
page read and write
|
|
|
|
7DF5BEBC0000
|
unkown image
|
page readonly
|
|
|
|
C0C9000
|
unkown
|
page read and write
|
|
|
|
7DF5BEBB0000
|
unkown image
|
page readonly
|
|
|
|
7FF532993000
|
unkown image
|
page readonly
|
|
|
|
C016000
|
unkown
|
page read and write
|
|
|
|
C0AA000
|
unkown
|
page read and write
|
|
|
|
2A27000
|
unkown image
|
page readonly
|
|
|
|
C0BF000
|
unkown
|
page read and write
|
|
|
|
7FF5DBC05000
|
unkown image
|
page readonly
|
|
|
|
C1B5000
|
unkown
|
page read and write
|
|
|
|
16B7D000
|
unkown
|
page read and write
|
|
|
|
158DD000
|
unkown
|
page read and write
|
|
|
|
7DF446390000
|
unkown image
|
page readonly
|
|
|
|
13945FF0000
|
unkown image
|
page readonly
|
|
|
|
703A6FF000
|
unkown
|
page read and write
|
|
|
|
7FF532B9B000
|
unkown image
|
page readonly
|
|
|
|
16B18000
|
unkown
|
page read and write
|
|
|
|
16B84000
|
unkown
|
page read and write
|
|
|
|
1B6B9840000
|
unkown image
|
page readonly
|
|
|
|
16AC1000
|
unkown
|
page read and write
|
|
|
|
E60000
|
unkown image
|
page readonly
|
|
|
|
C1BE000
|
unkown
|
page read and write
|
|
|
|
16AD2000
|
unkown
|
page read and write
|
|
|
|
15EC1000
|
unkown
|
page read and write
|
|
|
|
C160000
|
unkown
|
page read and write
|
|
|
|
F055B7E000
|
unkown
|
page read and write
|
|
|
|
C14D000
|
unkown
|
page read and write
|
|
|
|
1FD466D0000
|
unkown image
|
page readonly
|
|
|
|
16BC8000
|
unkown
|
page read and write
|
|
|
|
2561DC29000
|
unkown
|
page read and write
|
|
|
|
C173000
|
unkown
|
page read and write
|
|
|
|
7DF5D01D0000
|
unkown image
|
page readonly
|
|
|
|
C02A000
|
unkown
|
page read and write
|
|
|
|
158A1000
|
unkown
|
page read and write
|
|
|
|
C16F000
|
unkown
|
page read and write
|
|
|
|
28A5CA69000
|
unkown
|
page read and write
|
|
|
|
E50000
|
unkown image
|
page readonly
|
|
|
|
2053E03D000
|
unkown
|
page read and write
|
|
|
|
16A1B000
|
unkown
|
page read and write
|
|
|
|
7FF59BB39000
|
unkown image
|
page readonly
|
|
|
|
16DFC7B000
|
unkown
|
page read and write
|
|
|
|
1FD463F0000
|
heap default
|
page read and write
|
|
|
|
7FF532BCF000
|
unkown image
|
page readonly
|
|
|
|
C027000
|
unkown
|
page read and write
|
|
|
|
7FF532AD7000
|
unkown image
|
page readonly
|
|
|
|
7FF532BA0000
|
unkown image
|
page readonly
|
|
|
|
F0555DE000
|
unkown
|
page read and write
|
|
|
|
1B6BA318000
|
unkown
|
page read and write
|
|
|
|
16AAE000
|
unkown
|
page read and write
|
|
|
|
7FF532BCB000
|
unkown image
|
page readonly
|
|
|
|
7FF532BBB000
|
unkown image
|
page readonly
|
|
|
|
158E4000
|
unkown
|
page read and write
|
|
|
|
B60000
|
heap private
|
page read and write
|
|
|
|
13946213000
|
unkown
|
page read and write
|
|
|
|
28A5C9C0000
|
unkown image
|
page readonly
|
|
|
|
F055D7F000
|
unkown
|
page read and write
|
|
|
|
C0AE000
|
unkown
|
page read and write
|
|
|
|
16B2D000
|
unkown
|
page read and write
|
|
|
|
75D000
|
unkown
|
page read and write
|
|
|
|
16C5D000
|
unkown
|
page read and write
|
|
|
|
16BC2000
|
unkown
|
page read and write
|
|
|
|
C0B1000
|
unkown
|
page read and write
|
|
|
|
16B7E000
|
unkown
|
page read and write
|
|
|
|
16B61000
|
unkown
|
page read and write
|
|
|
|
15877000
|
unkown
|
page read and write
|
|
|
|
23AE8A8F000
|
unkown
|
page read and write
|
|
|
|
6AF277E000
|
unkown
|
page read and write
|
|
|
|
7FF532BB4000
|
unkown image
|
page readonly
|
|
|
|
7FF532A1F000
|
unkown image
|
page readonly
|
|
|
|
C148000
|
unkown
|
page read and write
|
|
|
|
15851000
|
unkown
|
page read and write
|
|
|
|
51FE8FC000
|
unkown
|
page read and write
|
|
|
|
23AE89D0000
|
unkown
|
page read and write
|
|
|
|
C182000
|
unkown
|
page read and write
|
|
|
|
C0A7000
|
unkown
|
page read and write
|
|
|
|
2053DFE0000
|
unkown
|
page read and write
|
|
|
|
2561DB60000
|
unkown image
|
page readonly
|
|
|
|
7DF5D01D2000
|
unkown image
|
page readonly
|
|
|
|
B70000
|
heap default
|
page read and write
|
|
|
|
16B61000
|
unkown
|
page read and write
|
|
|
|
16C24000
|
unkown
|
page read and write
|
|
|
|
1607E000
|
unkown
|
page read and write
|
|
|
|
703A37B000
|
unkown
|
page read and write
|
|
|
|
1428000
|
unkown
|
page read and write
|
|
|
|
28A5C9E0000
|
unkown
|
page read and write
|
|
|
|
23AE8F80000
|
unkown image
|
page readonly
|
|
|
|
1FD4643C000
|
unkown
|
page read and write
|
|
|
|
C144000
|
unkown
|
page read and write
|
|
|
|
1FD463C0000
|
unkown image
|
page readonly
|
|
|
|
16060000
|
unkown
|
page read and write
|
|
|
|
CB4DC7B000
|
unkown
|
page read and write
|
|
|
|
2053DF40000
|
unkown image
|
page read and write
|
|
|
|
C0AF000
|
unkown
|
page read and write
|
|
|
|
7DF5D01C2000
|
unkown image
|
page readonly
|
|
|
|
2561DA50000
|
unkown image
|
page readonly
|
|
|
|
2053E062000
|
unkown
|
page read and write
|
|
|
|
BFFE000
|
unkown
|
page read and write
|
|
|
|
200E6970000
|
unkown
|
page read and write
|
|
|
|
C0A2000
|
unkown
|
page read and write
|
|
|
|
13F3000
|
unkown
|
page read and write
|
|
|
|
F05597F000
|
unkown
|
page read and write
|
|
|
|
7FF59BB35000
|
unkown image
|
page readonly
|
|
|
|
51FE5FC000
|
unkown
|
page read and write
|
|
|
|
7FF50937D000
|
unkown image
|
page readonly
|
|
|
|
16B49000
|
unkown
|
page read and write
|
|
|
|
16B19000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
7FF59BBB8000
|
unkown image
|
page readonly
|
|
|
|
16B49000
|
unkown
|
page read and write
|
|
|
|
16C14000
|
unkown
|
page read and write
|
|
|
|
6AF29FD000
|
unkown
|
page read and write
|
|
|
|
CE38BFE000
|
unkown
|
page read and write
|
|
|
|
13FE000
|
unkown
|
page read and write
|
|
|
|
C0EE000
|
unkown
|
page read and write
|
|
|
|
7DF51ED52000
|
unkown image
|
page readonly
|
|
|
|
28A5C880000
|
heap private
|
page read and write
|
|
|
|
15EA7000
|
unkown
|
page read and write
|
|
|
|
141E000
|
unkown
|
page read and write
|
|
|
|
C162000
|
unkown
|
page read and write
|
|
|
|
15851000
|
unkown
|
page read and write
|
|
|
|
16B42000
|
unkown
|
page read and write
|
|
|
|
79C000
|
unkown
|
page read and write
|
|
|
|
16B61000
|
unkown
|
page read and write
|
|
|
|
703A0FE000
|
unkown
|
page read and write
|
|
|
|
A37797A000
|
unkown
|
page read and write
|
|
|
|
15EA7000
|
unkown
|
page read and write
|
|
|
|
13F3000
|
unkown
|
page read and write
|
|
|
|
13945FE0000
|
heap private
|
page read and write
|
|
|
|
C0B3000
|
unkown
|
page read and write
|
|
|
|
7DF5484C0000
|
unkown image
|
page readonly
|
|
|
|
16C5D000
|
unkown
|
page read and write
|
|
|
|
16AC1000
|
unkown
|
page read and write
|
|
|
|
7DF5B1500000
|
unkown image
|
page readonly
|
|
|
|
1B6BF050000
|
unkown
|
page read and write
|
|
|
|
C02B000
|
unkown
|
page read and write
|
|
|
|
16AC1000
|
unkown
|
page read and write
|
|
|
|
C17D000
|
unkown
|
page read and write
|
|
|
|
185F0120000
|
unkown image
|
page readonly
|
|
|
|
16B6A000
|
unkown
|
page read and write
|
|
|
|
7DF5484C2000
|
unkown image
|
page readonly
|
|
|
|
7DF537830000
|
unkown image
|
page readonly
|
|
|
|
2561DC3D000
|
unkown
|
page read and write
|
|
|
|
7FF59BA4F000
|
unkown image
|
page readonly
|
|
|
|
2053E04B000
|
unkown
|
page read and write
|
|
|
|
200E6C00000
|
unkown image
|
page readonly
|
|
|
|
1B6BEEF0000
|
unkown
|
page read and write
|
|
|
|
7DF51ED40000
|
unkown image
|
page readonly
|
|
|
|
C01E000
|
unkown
|
page read and write
|
|
|
|
13946200000
|
unkown
|
page read and write
|
|
|
|
23AE8B13000
|
unkown
|
page read and write
|
|
|
|
7FF59BB4A000
|
unkown image
|
page readonly
|
|
|
|
7FF5091ED000
|
unkown image
|
page readonly
|
|
|
|
BE8F000
|
unkown
|
page read and write
|
|
|
|
7FF50923E000
|
unkown image
|
page readonly
|
|
|
|
13FE000
|
unkown
|
page read and write
|
|
|
|
C0A4000
|
unkown
|
page read and write
|
|
|
|
16B42000
|
unkown
|
page read and write
|
|
|
|
16C56000
|
unkown
|
page read and write
|
|
|
|
C000000
|
unkown
|
page read and write
|
|
|
|
158A7000
|
unkown
|
page read and write
|
|
|
|
6AF2B7E000
|
unkown
|
page read and write
|
|
|
|
16B76000
|
unkown
|
page read and write
|
|
|
|
16B3C000
|
unkown
|
page read and write
|
|
|
|
7FF5092A5000
|
unkown image
|
page readonly
|
|
|
|
7FA32000
|
unkown image
|
page readonly
|
|
|
|
16C2E000
|
unkown
|
page read and write
|
|
|
|
F055A7B000
|
unkown
|
page read and write
|
|
|
|
7FF532B09000
|
unkown image
|
page readonly
|
|
|
|
7FF59BBD0000
|
unkown image
|
page readonly
|
|
|
|
1FD46429000
|
unkown
|
page read and write
|
|
|
|
2053DF60000
|
unkown image
|
page readonly
|
|
|
|
968000
|
unkown
|
page read and write
|
|
|
|
1B6BEF11000
|
unkown
|
page read and write
|
|
|
|
16AC3000
|
unkown
|
page read and write
|
|
|
|
1FD468E0000
|
unkown image
|
page readonly
|
|
|
|
185F0120000
|
unkown image
|
page readonly
|
|
|
|
185F0150000
|
unkown image
|
page readonly
|
|
|
|
1FD46483000
|
unkown
|
page read and write
|
|
|
|
C151000
|
unkown
|
page read and write
|
|
|
|
2053E046000
|
unkown
|
page read and write
|
|
|
|
1B6B9890000
|
heap default
|
page read and write
|
|
|
|
C0A2000
|
unkown
|
page read and write
|
|
|
|
7FF5DBC84000
|
unkown image
|
page readonly
|
|
|
|
28A5C870000
|
unkown image
|
page read and write
|
|
|
|
16B01000
|
unkown
|
page read and write
|
|
|
|
7FF50935C000
|
unkown image
|
page readonly
|
|
|
|
7FF59BB07000
|
unkown image
|
page readonly
|
|
|
|
158DD000
|
unkown
|
page read and write
|
|
|
|
7FF532699000
|
unkown image
|
page readonly
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
2053E052000
|
unkown
|
page read and write
|
|
|
|
2561DC13000
|
unkown
|
page read and write
|
|
|
|
16BBC000
|
unkown
|
page read and write
|
|
|
|
23AE88D0000
|
heap default
|
page read and write
|
|
|
|
2053DF90000
|
unkown image
|
page readonly
|
|
|
|
C005000
|
unkown
|
page read and write
|
|
|
|
2053E05F000
|
unkown
|
page read and write
|
|
|
|
16BA5000
|
unkown
|
page read and write
|
|
|
|
2053E102000
|
unkown
|
page read and write
|
|
|
|
15EA7000
|
unkown
|
page read and write
|
|
|
|
C0B1000
|
unkown
|
page read and write
|
|
|
|
C0B0000
|
unkown
|
page read and write
|
|
|
|
7FF5DB35D000
|
unkown image
|
page readonly
|
|
|
|
C04F000
|
unkown
|
page read and write
|
|
|
|
7DF5484D2000
|
unkown image
|
page readonly
|
|
|
|
13F3000
|
unkown
|
page read and write
|
|
|
|
15877000
|
unkown
|
page read and write
|
|
|
|
16C14000
|
unkown
|
page read and write
|
|
|
|
7FF509385000
|
unkown image
|
page readonly
|
|
|
|
15EDD000
|
unkown
|
page read and write
|
|
|
|
2053DF50000
|
heap private
|
page read and write
|
|
|
|
7FF50941B000
|
unkown image
|
page readonly
|
|
|
|
142D000
|
unkown
|
page read and write
|
|
|
|
1409000
|
unkown
|
page read and write
|
|
|
|
1B6BF250000
|
unkown
|
page read and write
|
|
|
|
A377777000
|
unkown
|
page read and write
|
|
|
|
23AE8B02000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7DF5B1502000
|
unkown image
|
page readonly
|
|
|
|
15EC1000
|
unkown
|
page read and write
|
|
|
|
16C5E000
|
unkown
|
page read and write
|
|
|
|
29AD000
|
unkown image
|
page readonly
|
|
|
|
BFFC000
|
unkown
|
page read and write
|
|
|
|
16B5A000
|
unkown
|
page read and write
|
|
|
|
2053E042000
|
unkown
|
page read and write
|
|
|
|
A377B7B000
|
unkown
|
page read and write
|
|
|
|
C1C6000
|
unkown
|
page read and write
|
|
|
|
1B6BF0F5000
|
unkown
|
page read and write
|
|
|
|
7DF4AF3C0000
|
unkown image
|
page readonly
|
|
|
|
7FF50943E000
|
unkown image
|
page readonly
|
|
|
|
16C53000
|
unkown
|
page read and write
|
|
|
|
A377CFF000
|
unkown
|
page read and write
|
|
|
|
16AE9000
|
unkown
|
page read and write
|
|
|
|
C144000
|
unkown
|
page read and write
|
|
|
|
16B20000
|
unkown
|
page read and write
|
|
|
|
16AE9000
|
unkown
|
page read and write
|
|
|
|
7DF516F90000
|
unkown image
|
page readonly
|
|
|
|
6AF267E000
|
unkown
|
page read and write
|
|
|
|
C033000
|
unkown
|
page read and write
|
|
|
|
23AE8A13000
|
unkown
|
page read and write
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
15887000
|
unkown
|
page read and write
|
|
|
|
C205000
|
unkown
|
page read and write
|
|
|
|
16B7D000
|
unkown
|
page read and write
|
|
|
|
C0BB000
|
unkown
|
page read and write
|
|
|
|
16B7C000
|
unkown
|
page read and write
|
|
|
|
C062000
|
unkown
|
page read and write
|
|
|
|
13945FD0000
|
unkown image
|
page read and write
|
|
|
|
13946020000
|
unkown image
|
page readonly
|
|
|
|
C15D000
|
unkown
|
page read and write
|
|
|
|
16060000
|
unkown
|
page read and write
|
|
|
|
C035000
|
unkown
|
page read and write
|
|
|
|
C101000
|
unkown
|
page read and write
|
|
|
|
16B62000
|
unkown
|
page read and write
|
|
|
|
23AE89B0000
|
unkown image
|
page readonly
|
|
|
|
13946040000
|
heap default
|
page read and write
|
|
|
|
2561DA60000
|
unkown image
|
page readonly
|
|
|
|
7FF59BBEB000
|
unkown image
|
page readonly
|
|
|
|
7DF516FA2000
|
unkown image
|
page readonly
|
|
|
|
16AAE000
|
unkown
|
page read and write
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
2561DA10000
|
unkown image
|
page read and write
|
|
|
|
16AE9000
|
unkown
|
page read and write
|
|
|
|
C036000
|
unkown
|
page read and write
|
|
|
|
51FE9FC000
|
unkown
|
page read and write
|
|
|
|
1B6B9830000
|
heap private
|
page read and write
|
|
|
|
16096000
|
unkown
|
page read and write
|
|
|
|
C0DD000
|
unkown
|
page read and write
|
|
|
|
7DF5F15B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DBC8B000
|
unkown image
|
page readonly
|
|
|
|
142A000
|
unkown
|
page read and write
|
|
|
|
BEA0000
|
unkown
|
page read and write
|
|
|
|
2053E650000
|
unkown image
|
page readonly
|
|
|
|
16BDA000
|
unkown
|
page read and write
|
|
|
|
23AE8860000
|
unkown image
|
page read and write
|
|
|
|
C154000
|
unkown
|
page read and write
|
|
|
|
23AE8A00000
|
unkown
|
page read and write
|
|
|
|
C157000
|
unkown
|
page read and write
|
|
|
|
200E6A8A000
|
unkown
|
page read and write
|
|
|
|
16C5D000
|
unkown
|
page read and write
|
|
|
|
7FF50944B000
|
unkown image
|
page readonly
|
|
|
|
7FF532BCF000
|
unkown image
|
page readonly
|
|
|
|
185F0213000
|
unkown
|
page read and write
|
|
|
|
15891000
|
unkown
|
page read and write
|
|
|
|
2053E013000
|
unkown
|
page read and write
|
|
|
|
7DF537812000
|
unkown image
|
page readonly
|
|
|
|
16B53000
|
unkown
|
page read and write
|
|
|
|
2949000
|
unkown image
|
page readonly
|
|
|
|
1609E000
|
unkown
|
page read and write
|
|
|
|
7DF5BEBB2000
|
unkown image
|
page readonly
|
|
|
|
C021000
|
unkown
|
page read and write
|
|
|
|
C9D3EFE000
|
unkown
|
page read and write
|
|
|
|
2053E06C000
|
unkown
|
page read and write
|
|
|
|
C1BC000
|
unkown
|
page read and write
|
|
|
|
16B30000
|
unkown
|
page read and write
|
|
|
|
2053E066000
|
unkown
|
page read and write
|
|
|
|
7FF509103000
|
unkown image
|
page readonly
|
|
|
|
23AE88A0000
|
unkown image
|
page readonly
|
|
|
|
16B64000
|
unkown
|
page read and write
|
|
|
|
16C56000
|
unkown
|
page read and write
|
|
|
|
2053E045000
|
unkown
|
page read and write
|
|
|
|
7FF5DBC5F000
|
unkown image
|
page readonly
|
|
|
|
1419000
|
unkown
|
page read and write
|
|
|
|
16B29000
|
unkown
|
page read and write
|
|
|
|
7FF50940F000
|
unkown image
|
page readonly
|
|
|
|
13F6000
|
unkown
|
page read and write
|
|
|
|
2053DF60000
|
unkown image
|
page readonly
|
|
|
|
7DF5BEBA0000
|
unkown image
|
page readonly
|
|
|
|
2053E049000
|
unkown
|
page read and write
|
|
|
|
7FF5092C4000
|
unkown image
|
page readonly
|
|
|
|
16B49000
|
unkown
|
page read and write
|
|
|
|
16B79000
|
unkown
|
page read and write
|
|
|
|
7FF50943B000
|
unkown image
|
page readonly
|
|
|
|
7FF509420000
|
unkown image
|
page readonly
|
|
|
|
28A5C8E0000
|
heap default
|
page read and write
|
|
|
|
CE3878E000
|
unkown
|
page read and write
|
|
|
|
1FD4644E000
|
unkown
|
page read and write
|
|
|
|
C008000
|
unkown
|
page read and write
|
|
|
|
141E000
|
unkown
|
page read and write
|
|
|
|
7DF5F15B0000
|
unkown image
|
page readonly
|
|
|
|
28A5CA2A000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1B6BF250000
|
unkown
|
page read and write
|
|
|
|
C215000
|
unkown
|
page read and write
|
|
|
|
7FF532B35000
|
unkown image
|
page readonly
|
|
|
|
C0EA000
|
unkown
|
page read and write
|
|
|
|
7FF508F19000
|
unkown image
|
page readonly
|
|
|
|
7FF5DB4AE000
|
unkown image
|
page readonly
|
|
|
|
1FD46500000
|
unkown
|
page read and write
|
|
|
|
15FE2000
|
unkown
|
page read and write
|
|
|
|
7FF532B1A000
|
unkown image
|
page readonly
|
|
|
|
7FF532AC7000
|
unkown image
|
page readonly
|
|
|
|
C1CB000
|
unkown
|
page read and write
|
|
|
|
7FF59BBCB000
|
unkown image
|
page readonly
|
|
|
|
2A0B000
|
unkown image
|
page readonly
|
|
|
|
7FF50929F000
|
unkown image
|
page readonly
|
|
|
|
16B7D000
|
unkown
|
page read and write
|
|
|
|
7DF5484D0000
|
unkown image
|
page readonly
|
|
|
|
C09A000
|
unkown
|
page read and write
|
|
|
|
2561DBB0000
|
unkown
|
page read and write
|
|
|
|
7DF537820000
|
unkown image
|
page readonly
|
|
|
|
7FF59BA74000
|
unkown image
|
page readonly
|
|
|
|
1B6B9990000
|
unkown
|
page read and write
|
|
|
|
7FF532BBE000
|
unkown image
|
page readonly
|
|
|
|
7FCB0000
|
unkown image
|
page readonly
|
|
|
|
CE3868C000
|
unkown
|
page read and write
|
|
|
|
1B6B9860000
|
unkown image
|
page readonly
|
|
|
|
16C5D000
|
unkown
|
page read and write
|
|
|
|
200E7202000
|
unkown
|
page read and write
|
|
|
|
7FF59BB65000
|
unkown image
|
page readonly
|
|
|
|
E4B000
|
unkown
|
page read and write
|
|
|
|
1607E000
|
unkown
|
page read and write
|
|
|
|
16BA5000
|
unkown
|
page read and write
|
|
|
|
CB4E5FF000
|
unkown
|
page read and write
|
|
|
|
1FD4642C000
|
unkown
|
page read and write
|
|
|
|
1609E000
|
unkown
|
page read and write
|
|
|
|
1B6B9870000
|
unkown image
|
page readonly
|
|
|
|
A377EFF000
|
unkown
|
page read and write
|
|
|
|
16AAE000
|
unkown
|
page read and write
|
|
|
|
1FD4646F000
|
unkown
|
page read and write
|
|
|
|
F055C77000
|
unkown
|
page read and write
|
|
|
|
1FD46390000
|
heap private
|
page read and write
|
|
|
|
23AE8A29000
|
unkown
|
page read and write
|
|
|
|
13946130000
|
unkown image
|
page readonly
|
|
|
|
7DF51ED40000
|
unkown image
|
page readonly
|
|
|
|
C013000
|
unkown
|
page read and write
|
|
|
|
703A3FE000
|
unkown
|
page read and write
|
|
|
|
C007000
|
unkown
|
page read and write
|
|
|
|
158D5000
|
unkown
|
page read and write
|
|
|
|
C045000
|
unkown
|
page read and write
|
|
|
|
7FA40000
|
unkown image
|
page readonly
|
|
|
|
7DF41CC10000
|
unkown image
|
page readonly
|
|
|
|
16B79000
|
unkown
|
page read and write
|
|
|
|
16A78000
|
unkown
|
page read and write
|
|
|
|
C0A9000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
1B6B9820000
|
unkown image
|
page read and write
|
|
|
|
200E6A02000
|
unkown
|
page read and write
|
|
|
|
158E5000
|
unkown
|
page read and write
|
|
|
|
C0F3000
|
unkown
|
page read and write
|
|
|
|
16A26000
|
unkown
|
page read and write
|
|
|
|
15891000
|
unkown
|
page read and write
|
|
|
|
7FCC2000
|
unkown image
|
page readonly
|
|
|
|
7FF509416000
|
unkown image
|
page readonly
|
|
|
|
7FF59B8B3000
|
unkown image
|
page readonly
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
7FF532B8F000
|
unkown image
|
page readonly
|
|
|
|
7FF53299E000
|
unkown image
|
page readonly
|
|
|
|
7FF5DBC66000
|
unkown image
|
page readonly
|
|
|
|
7FF50944F000
|
unkown image
|
page readonly
|
|
|
|
C0A2000
|
unkown
|
page read and write
|
|
|
|
7DF5F4FA0000
|
unkown image
|
page readonly
|
|
|
|
16AAE000
|
unkown
|
page read and write
|
|
|
|
CB4DA7B000
|
unkown
|
page read and write
|
|
|
|
200E6B02000
|
unkown
|
page read and write
|
|
|
|
15891000
|
unkown
|
page read and write
|
|
|
|
7DF5B1510000
|
unkown image
|
page readonly
|
|
|
|
16B78000
|
unkown
|
page read and write
|
|
|
|
16A1B000
|
unkown
|
page read and write
|
|
|
|
16B2B000
|
unkown
|
page read and write
|
|
|
|
16B53000
|
unkown
|
page read and write
|
|
|
|
7FF5DBB97000
|
unkown image
|
page readonly
|
|
|
|
C0B7000
|
unkown
|
page read and write
|
|
|
|
23AE8A70000
|
unkown
|
page read and write
|
|
|
|
C0AD000
|
unkown
|
page read and write
|
|
|
|
1B6BEEFE000
|
unkown
|
page read and write
|
|
|
|
C168000
|
unkown
|
page read and write
|
|
|
|
200E6A3C000
|
unkown
|
page read and write
|
|
|
|
2561DBB0000
|
unkown
|
page read and write
|
|
|
|
16B61000
|
unkown
|
page read and write
|
|
|
|
7FCD0000
|
unkown image
|
page readonly
|
|
|
|
185F0200000
|
unkown
|
page read and write
|
|
|
|
2053E076000
|
unkown
|
page read and write
|
|
|
|
2A15000
|
unkown image
|
page readonly
|
|
|
|
1609E000
|
unkown
|
page read and write
|
|
|
|
16096000
|
unkown
|
page read and write
|
|
|
|
C14C000
|
unkown
|
page read and write
|
|
|
|
185F0100000
|
unkown image
|
page read and write
|
|
|
|
23AE8E00000
|
unkown image
|
page readonly
|
|
|
|
16B0E000
|
unkown
|
page read and write
|
|
|
|
C9D40FB000
|
unkown
|
page read and write
|
|
|
|
15FE2000
|
unkown
|
page read and write
|
|
|
|
16AAE000
|
unkown
|
page read and write
|
|
|
|
7FF59BB43000
|
unkown image
|
page readonly
|
|
|
|
C18E000
|
unkown
|
page read and write
|
|
|
|
703A5FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DB953000
|
unkown image
|
page readonly
|
|
|
|
1B6BEEF8000
|
unkown
|
page read and write
|
|
|
|
7FF532B96000
|
unkown image
|
page readonly
|
|
|
|
C155000
|
unkown
|
page read and write
|
|
|
|
C1C0000
|
unkown
|
page read and write
|
|
|
|
16B71000
|
unkown
|
page read and write
|
|
|
|
16060000
|
unkown
|
page read and write
|
|
|
|
1FD46A60000
|
unkown image
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
16A1B000
|
unkown
|
page read and write
|
|
|
|
1428000
|
unkown
|
page read and write
|
|
|
|
7DF51ED42000
|
unkown image
|
page readonly
|
|
|
|
15887000
|
unkown
|
page read and write
|
|
|
|
BE85000
|
unkown
|
page read and write
|
|
|
|
15FEA000
|
unkown
|
page read and write
|
|
|
|
16BBC000
|
unkown
|
page read and write
|
|
|
|
F0554DB000
|
unkown
|
page read and write
|
|
|
|
140E000
|
unkown
|
page read and write
|
|
|
|
7DF5F15A0000
|
unkown image
|
page readonly
|
|
|
|
1607E000
|
unkown
|
page read and write
|
|
|
|
16B7C000
|
unkown
|
page read and write
|
|
|
|
16BBC000
|
unkown
|
page read and write
|
|
|
|
2E36000
|
heap default
|
page read and write
|
|
|
|
16B19000
|
unkown
|
page read and write
|
|
|
|
13FE000
|
unkown
|
page read and write
|
|
|
|
C201000
|
unkown
|
page read and write
|
|
|
|
7FF5DBC6B000
|
unkown image
|
page readonly
|
|
|
|
1FD46400000
|
unkown
|
page read and write
|
|
|
|
C166000
|
unkown
|
page read and write
|
|
|
|
16C5D000
|
unkown
|
page read and write
|
|
|
|
C144000
|
unkown
|
page read and write
|
|
|
|
C1B7000
|
unkown
|
page read and write
|
|
|
|
7FF59B9CE000
|
unkown image
|
page readonly
|
|
|
|
23AE88B0000
|
unkown image
|
page readonly
|
|
|
|
51FE1EC000
|
unkown
|
page read and write
|
|
|
|
16B7D000
|
unkown
|
page read and write
|
|
|
|
1419000
|
unkown
|
page read and write
|
|
|
|
C164000
|
unkown
|
page read and write
|
|
|
|
BE89000
|
unkown
|
page read and write
|
|
|
|
7DF5484E0000
|
unkown image
|
page readonly
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
1B6B9840000
|
unkown image
|
page readonly
|
|
|
|
7DF516FA0000
|
unkown image
|
page readonly
|
|
|
|
15FEA000
|
unkown
|
page read and write
|
|
|
|
7FF508CD4000
|
unkown image
|
page readonly
|
|
|
|
7FA32000
|
unkown image
|
page readonly
|
|
|
|
7FF5DBBD9000
|
unkown image
|
page readonly
|
|
|
|
2561DA30000
|
unkown image
|
page readonly
|
|
|
|
C17C000
|
unkown
|
page read and write
|
|
|
|
7FF5DBBAC000
|
unkown image
|
page readonly
|
|
|
|
1411000
|
unkown
|
page read and write
|
|
|
|
16AE9000
|
unkown
|
page read and write
|
|
|
|
703A07B000
|
unkown
|
page read and write
|
|
|
|
16AC3000
|
unkown
|
page read and write
|
|
|
|
2989000
|
unkown image
|
page readonly
|
|
|
|
1428000
|
unkown
|
page read and write
|
|
|
|
7DF5B14F2000
|
unkown image
|
page readonly
|
|
|
|
7FF59B9C3000
|
unkown image
|
page readonly
|
|
|
|
23AE8B08000
|
unkown
|
page read and write
|
|
|
|
C09A000
|
unkown
|
page read and write
|
|
|
|
13946010000
|
unkown image
|
page readonly
|
|
|
|
13F3000
|
unkown
|
page read and write
|
|
|
|
23AE8B00000
|
unkown
|
page read and write
|
|
|
|
16C53000
|
unkown
|
page read and write
|
|
|
|
16AC1000
|
unkown
|
page read and write
|
|
|
|
C0E6000
|
unkown
|
page read and write
|
|
|
|
C045000
|
unkown
|
page read and write
|
|
|
|
1B6BA359000
|
unkown
|
page read and write
|
|
|
|
7FF5093B5000
|
unkown image
|
page readonly
|
|
|
|
C05C000
|
unkown
|
page read and write
|
|
|
|
CE38DFF000
|
unkown
|
page read and write
|
|
|
|
1B6BA318000
|
unkown
|
page read and write
|
|
|
|
C0A7000
|
unkown
|
page read and write
|
|
|
|
C159000
|
unkown
|
page read and write
|
|
|
|
6AF287D000
|
unkown
|
page read and write
|
|
|
|
16B7D000
|
unkown
|
page read and write
|
|
|
|
51FEE7E000
|
unkown
|
page read and write
|
|
|
|
16B30000
|
unkown
|
page read and write
|
|
|
|
51FE87E000
|
unkown
|
page read and write
|
|
|
|
7FF532A44000
|
unkown image
|
page readonly
|
|
|
|
7DF5B14F0000
|
unkown image
|
page readonly
|
|
|
|
2053E040000
|
unkown
|
page read and write
|
|
|
|
2053DFB0000
|
heap default
|
page read and write
|
|
|
|
7DF5F15A2000
|
unkown image
|
page readonly
|
|
|
|
1B6B9A00000
|
unkown
|
page read and write
|
|
|
|
F055E7E000
|
unkown
|
page read and write
|
|
|
|
200E6A65000
|
unkown
|
page read and write
|
|
|
|
1FD46B50000
|
unkown
|
page read and write
|
|
|
|
200E6A70000
|
unkown
|
page read and write
|
|
|
|
C000000
|
unkown
|
page read and write
|
|
|
|
7FF5326A8000
|
unkown image
|
page readonly
|
|
|
|
28A5CA00000
|
unkown
|
page read and write
|
|
|
|
13FE000
|
unkown
|
page read and write
|
|
|
|
C1C2000
|
unkown
|
page read and write
|
|
|
|
C158000
|
unkown
|
page read and write
|
|
|
|
A37733B000
|
unkown
|
page read and write
|
|
|
|
16BD4000
|
unkown
|
page read and write
|
|
|
|
28A5CA13000
|
unkown
|
page read and write
|
|
|
|
7FA30000
|
unkown image
|
page readonly
|
|
|
|
16B71000
|
unkown
|
page read and write
|
|
|
|
16B7E000
|
unkown
|
page read and write
|
|
|
|
7FF5329E3000
|
unkown image
|
page readonly
|
|
|
|
16B79000
|
unkown
|
page read and write
|
|
|
|
A377A7E000
|
unkown
|
page read and write
|
|
|
|
C015000
|
unkown
|
page read and write
|
|
|
|
7FF532AC3000
|
unkown image
|
page readonly
|
|
|
|
7FF59BA13000
|
unkown image
|
page readonly
|
|
|
|
200E6B00000
|
unkown
|
page read and write
|
|
|
|
16AD1000
|
unkown
|
page read and write
|
|
|
|
C159000
|
unkown
|
page read and write
|
|
|
|
C17E000
|
unkown
|
page read and write
|
|
|
|
200E6850000
|
unkown image
|
page readonly
|
|
|
|
1FD46C02000
|
unkown
|
page read and write
|
|
|
|
C006000
|
unkown
|
page read and write
|
|
|
|
28A5C8C0000
|
unkown image
|
page readonly
|
|
|
|
158A3000
|
unkown
|
page read and write
|
|
|
|
7FF509393000
|
unkown image
|
page readonly
|
|
|
|
200E6A4F000
|
unkown
|
page read and write
|
|
|
|
16AAE000
|
unkown
|
page read and write
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
C0BD000
|
unkown
|
page read and write
|
|
|
|
1B6BF250000
|
unkown
|
page read and write
|
|
|
|
16B0E000
|
unkown
|
page read and write
|
|
|
|
CB4E2FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DB35F000
|
unkown image
|
page readonly
|
|
|
|
2053E05C000
|
unkown
|
page read and write
|
|
|
|
BFFD000
|
unkown
|
page read and write
|
|
|
|
2985000
|
unkown image
|
page readonly
|
|
|
|
7B0000
|
unkown image
|
page readonly
|
|
|
|
BFE000
|
unkown
|
page read and write
|
|
|
|
7FF509213000
|
unkown image
|
page readonly
|
|
|
|
7FF532B13000
|
unkown image
|
page readonly
|
|
|
|
16ACC000
|
unkown
|
page read and write
|
|
|
|
7FF59BBFB000
|
unkown image
|
page readonly
|
|
|
|
200E6A4A000
|
unkown
|
page read and write
|
|
|
|
16BA3000
|
unkown
|
page read and write
|
|
|
|
13F3000
|
unkown
|
page read and write
|
|
|
|
C0B2000
|
unkown
|
page read and write
|
|
|
|
7FF5DBBEA000
|
unkown image
|
page readonly
|
|
|
|
23AE8A81000
|
unkown
|
page read and write
|
|
|
|
1586F000
|
unkown
|
page read and write
|
|
|
|
C010000
|
unkown
|
page read and write
|
|
|
|
7FF5DBC9B000
|
unkown image
|
page readonly
|
|
|
|
16AC1000
|
unkown
|
page read and write
|
|
|
|
C16B000
|
unkown
|
page read and write
|
|
|
|
16DFF7B000
|
unkown
|
page read and write
|
|
|
|
185F0229000
|
unkown
|
page read and write
|
|
|
|
28A5C8B0000
|
unkown image
|
page readonly
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
C09C000
|
unkown
|
page read and write
|
|
|
|
2561DA20000
|
heap private
|
page read and write
|
|
|
|
2053E029000
|
unkown
|
page read and write
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
15FEA000
|
unkown
|
page read and write
|
|
|
|
DFD000
|
unkown
|
page read and write
|
|
|
|
158D5000
|
unkown
|
page read and write
|
|
|
|
141E000
|
unkown
|
page read and write
|
|
|
|
C151000
|
unkown
|
page read and write
|
|
|
|
2053E079000
|
unkown
|
page read and write
|
|
|
|
16C54000
|
unkown
|
page read and write
|
|
|
|
7DF5F1590000
|
unkown image
|
page readonly
|
|
|
|
703A17E000
|
unkown
|
page read and write
|
|
|
|
C155000
|
unkown
|
page read and write
|
|
|
|
2053DFC0000
|
unkown image
|
page readonly
|
|
|
|
158D5000
|
unkown
|
page read and write
|
|
|
|
C1C8000
|
unkown
|
page read and write
|
|
|
|
16B75000
|
unkown
|
page read and write
|
|
|
|
C029000
|
unkown
|
page read and write
|
|
|
|
16B18000
|
unkown
|
page read and write
|
|
|
|
C00F000
|
unkown
|
page read and write
|
|
|
|
7FF59B99D000
|
unkown image
|
page readonly
|
|
|
|
51FEB7D000
|
unkown
|
page read and write
|
|
|
|
16A78000
|
unkown
|
page read and write
|
|
|
|
16B49000
|
unkown
|
page read and write
|
|
|
|
13945FF0000
|
unkown image
|
page readonly
|
|
|
|
1FD46413000
|
unkown
|
page read and write
|
|
|
|
7FF50921E000
|
unkown image
|
page readonly
|
|
|
|
C0A0000
|
unkown
|
page read and write
|
|
|
|
C069000
|
unkown
|
page read and write
|
|
|
|
C0B5000
|
unkown
|
page read and write
|
|
|
|
7DF5F1592000
|
unkown image
|
page readonly
|
|
|
|
16AC1000
|
unkown
|
page read and write
|
|
|
|
200E6A65000
|
unkown
|
page read and write
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
16B71000
|
unkown
|
page read and write
|
|
|
|
28A5CA3F000
|
unkown
|
page read and write
|
|
|
|
7FF5DF6AF000
|
unkown image
|
page readonly
|
|
|
|
1592F000
|
unkown
|
page read and write
|
|
|
|
16A7F000
|
unkown
|
page read and write
|
|
|
|
2A27000
|
unkown image
|
page readonly
|
|
|
|
158EC000
|
unkown
|
page read and write
|
|
|
|
16BC8000
|
unkown
|
page read and write
|
|
|
|
A377DFE000
|
unkown
|
page read and write
|
|
|
|
C03C000
|
unkown
|
page read and write
|
|
|
|
1607E000
|
unkown
|
page read and write
|
|
|
|
C160000
|
unkown
|
page read and write
|
|
|
|
23AE8A8B000
|
unkown
|
page read and write
|
|
|
|
15FE1000
|
unkown
|
page read and write
|
|
|
|
16060000
|
unkown
|
page read and write
|
|
|
|
200E6A00000
|
unkown
|
page read and write
|
|
|
|
7FF5DBBB8000
|
unkown image
|
page readonly
|
|
|
|
C03A000
|
unkown
|
page read and write
|
|
|
|
1B6B99A0000
|
unkown image
|
page read and write
|
|
|
|
16C14000
|
unkown
|
page read and write
|
|
|
|
200E6820000
|
unkown image
|
page readonly
|
|
|
|
7FF50939A000
|
unkown image
|
page readonly
|
|
|
|
7DF5484D0000
|
unkown image
|
page readonly
|
|
|
|
7DF51ED60000
|
unkown image
|
page readonly
|
|
|
|
2958000
|
unkown image
|
page readonly
|
|
|
|
7DF5BEBA2000
|
unkown image
|
page readonly
|
|
|
|
16C5D000
|
unkown
|
page read and write
|
|
|
|
16AAE000
|
unkown
|
page read and write
|
|
|
|
16B7C000
|
unkown
|
page read and write
|
|
|
|
6F0000
|
unkown image
|
page read and write
|
|
|
|
16C1B000
|
unkown
|
page read and write
|
|
|
|
200E6B13000
|
unkown
|
page read and write
|
|
|
|
16DFE7E000
|
unkown
|
page read and write
|
|
|
|
CB4DEFF000
|
unkown
|
page read and write
|
|
|
|
7FF5DBBE3000
|
unkown image
|
page readonly
|
|
|
|
16B79000
|
unkown
|
page read and write
|
|
|
|
200E6A29000
|
unkown
|
page read and write
|
|
|
|
1FD46508000
|
unkown
|
page read and write
|
|
|
|
158D3000
|
unkown
|
page read and write
|
|
|
|
7FF5DBC70000
|
unkown image
|
page readonly
|
|
|
|
7FF532B05000
|
unkown image
|
page readonly
|
|
|
|
C053000
|
unkown
|
page read and write
|
|
|
|
16C5E000
|
unkown
|
page read and write
|
|
|
|
28A5C890000
|
unkown image
|
page readonly
|
|
|
|
7FF50942D000
|
unkown image
|
page readonly
|
|
|
|
7FF59B394000
|
unkown image
|
page readonly
|
|
|
|
16C5E000
|
unkown
|
page read and write
|
|
|
|
C098000
|
unkown
|
page read and write
|
|
|
|
7FF509357000
|
unkown image
|
page readonly
|
|
|
|
185F0140000
|
unkown image
|
page readonly
|
|
|
|
C001000
|
unkown
|
page read and write
|
|
|
|
C188000
|
unkown
|
page read and write
|
|
|
|
7FF59B6D8000
|
unkown image
|
page readonly
|
|
|
|
C041000
|
unkown
|
page read and write
|
|
|
|
1FD463A0000
|
unkown image
|
page readonly
|
|
|
|
2053E083000
|
unkown
|
page read and write
|
|
|
|
A37817E000
|
unkown
|
page read and write
|
|
|
|
7FF5DBBCD000
|
unkown image
|
page readonly
|
|
|
|
15EC1000
|
unkown
|
page read and write
|
|
|
|
15FE2000
|
unkown
|
page read and write
|
|
|
|
16C14000
|
unkown
|
page read and write
|
|
|
|
7FF532AE8000
|
unkown image
|
page readonly
|
|
|
|
7FF50944F000
|
unkown image
|
page readonly
|
|
|
|
7DF51ED52000
|
unkown image
|
page readonly
|
|
|
|
7DF5B14F2000
|
unkown image
|
page readonly
|
|
|
|
C0FB000
|
unkown
|
page read and write
|
|
|
|
2053E002000
|
unkown
|
page read and write
|
|
|
|
B0E000
|
unkown
|
page read and write
|
|
|
|
15891000
|
unkown
|
page read and write
|
|
|
|
C0C4000
|
unkown
|
page read and write
|
|
|
|
C043000
|
unkown
|
page read and write
|
|
|
|
C186000
|
unkown
|
page read and write
|
|
|
|
C032000
|
unkown
|
page read and write
|
|
|
|
16A1B000
|
unkown
|
page read and write
|
|
|
|
51FED7C000
|
unkown
|
page read and write
|
|
|
|
C1FF000
|
unkown
|
page read and write
|
|
|
|
7FF59B6C9000
|
unkown image
|
page readonly
|
|
|
|
D90000
|
unkown image
|
page read and write
|
|
|
|
C15E000
|
unkown
|
page read and write
|
|
|
|
16B75000
|
unkown
|
page read and write
|
|
|
|
C05E000
|
unkown
|
page read and write
|
|
|
|
1FD4644B000
|
unkown
|
page read and write
|
|
|
|
16A80000
|
unkown
|
page read and write
|
|
|
|
7FF509434000
|
unkown image
|
page readonly
|
|
|
|
BE93000
|
unkown
|
page read and write
|
|
|
|
1FD4648D000
|
unkown
|
page read and write
|
|
|
|
C15C000
|
unkown
|
page read and write
|
|
|
|
C9D43FE000
|
unkown
|
page read and write
|
|
|
|
7DF51ED50000
|
unkown image
|
page readonly
|
|
|
|
7DF5F4FB2000
|
unkown image
|
page readonly
|
|
|
|
7FF59BBBF000
|
unkown image
|
page readonly
|
|
|
|
16B30000
|
unkown
|
page read and write
|
|
|
|
7FF5329BE000
|
unkown image
|
page readonly
|
|
|
|
2053E04D000
|
unkown
|
page read and write
|
|
|
|
16A1B000
|
unkown
|
page read and write
|
|
|
|
7DF5F15A0000
|
unkown image
|
page readonly
|
|
|
|
A377E7E000
|
unkown
|
page read and write
|
|
|
|
1B6BEF34000
|
unkown
|
page read and write
|
|
|
|
15887000
|
unkown
|
page read and write
|
|
|
|
CB4E0FD000
|
unkown
|
page read and write
|
|
|
|
7DF516FB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5F15A2000
|
unkown image
|
page readonly
|
|
|
|
2053E064000
|
unkown
|
page read and write
|
|
|
|
7DF51ED42000
|
unkown image
|
page readonly
|
|
|
|
7FA40000
|
unkown image
|
page readonly
|
|
|
|
185F01A0000
|
unkown
|
page read and write
|
|
|
|
15F4B000
|
unkown
|
page read and write
|
|
|
|
23AE8A3C000
|
unkown
|
page read and write
|
|
|
|
16B79000
|
unkown
|
page read and write
|
|
|
|
16060000
|
unkown
|
page read and write
|
|
|
|
7DF5D01E0000
|
unkown image
|
page readonly
|
|
|
|
16C5D000
|
unkown
|
page read and write
|
|
|
|
16C44000
|
unkown
|
page read and write
|
|
|
|
7FF532693000
|
unkown image
|
page readonly
|
|
|
|
F05555F000
|
unkown
|
page read and write
|
|
|
|
7FF532AFD000
|
unkown image
|
page readonly
|
|
|
|
C1AA000
|
unkown
|
page read and write
|
|
|
|
16AC1000
|
unkown
|
page read and write
|
|
|
|
CB4E3FF000
|
unkown
|
page read and write
|
|
|
|
16B84000
|
unkown
|
page read and write
|
|
|
|
7FF5BA8CF000
|
unkown image
|
page readonly
|
|
|
|
6AF28FF000
|
unkown
|
page read and write
|
|
|
|
7FF509263000
|
unkown image
|
page readonly
|
|
|
|
C1C4000
|
unkown
|
page read and write
|
|
|
|
1FD46455000
|
unkown
|
page read and write
|
|
|
|
7FF532ADC000
|
unkown image
|
page readonly
|
|
|
|
C027000
|
unkown
|
page read and write
|
|
|
|
15851000
|
unkown
|
page read and write
|
|
|
|
7DF51ED50000
|
unkown image
|
page readonly
|
|
|
|
16A77000
|
unkown
|
page read and write
|
|
|
|
16AAE000
|
unkown
|
page read and write
|
|
|
|
16060000
|
unkown
|
page read and write
|
|
|
|
7FF59BBE4000
|
unkown image
|
page readonly
|
|
|
|
BBE000
|
unkown
|
page read and write
|
|
|
|
2053DF80000
|
unkown image
|
page readonly
|
|
|
|
C03A000
|
unkown
|
page read and write
|
|
|
|
200E6E00000
|
unkown image
|
page readonly
|
|
|
|
2053E07A000
|
unkown
|
page read and write
|
|
|
|
BE97000
|
unkown
|
page read and write
|
|
|
|
16AC3000
|
unkown
|
page read and write
|
|
|
|
C017000
|
unkown
|
page read and write
|
|
|
|
C14F000
|
unkown
|
page read and write
|
|
|
|
7DF5484D2000
|
unkown image
|
page readonly
|
|
|
|
200E6870000
|
heap default
|
page read and write
|
|
|
|
16C2B000
|
unkown
|
page read and write
|
|
|
|
C161000
|
unkown
|
page read and write
|
|
|
|
16BAC000
|
unkown
|
page read and write
|
|
|
|
16C13000
|
unkown
|
page read and write
|
|
|
|
16B7E000
|
unkown
|
page read and write
|
|
|
|
7FF5DBC8E000
|
unkown image
|
page readonly
|
|
|
|
1B6BEEF0000
|
unkown
|
page read and write
|
|
|
|
51FEA7B000
|
unkown
|
page read and write
|
|
|
|
16B30000
|
unkown
|
page read and write
|
|
|
|
13946202000
|
unkown
|
page read and write
|
|
|
|
7FF53296D000
|
unkown image
|
page readonly
|
|
|
|
1586F000
|
unkown
|
page read and write
|
|
|
|
16BA5000
|
unkown
|
page read and write
|
|
|
|
703A27B000
|
unkown
|
page read and write
|
|
|
|
16C53000
|
unkown
|
page read and write
|
|
|
|
16AC1000
|
unkown
|
page read and write
|
|
|
|
7DF5F4FC0000
|
unkown image
|
page readonly
|
|
|
|
16C2C000
|
unkown
|
page read and write
|
|
|
|
15919000
|
unkown
|
page read and write
|
|
|
|
7FF508F28000
|
unkown image
|
page readonly
|
|
|
|
C0A3000
|
unkown
|
page read and write
|
|
|
|
7FF59BBDD000
|
unkown image
|
page readonly
|
|
|
|
16B7D000
|
unkown
|
page read and write
|
|
|
|
7DF5484C2000
|
unkown image
|
page readonly
|
|
|
|
23AE8880000
|
unkown image
|
page readonly
|
|
|
|
23AE8A4B000
|
unkown
|
page read and write
|
|
|
|
7DF5B1510000
|
unkown image
|
page readonly
|
|
|
|
7FCC0000
|
unkown image
|
page readonly
|
|
|
|
15EC1000
|
unkown
|
page read and write
|
|
|
|
23AE8A4E000
|
unkown
|
page read and write
|
|
|
|
C0CF000
|
unkown
|
page read and write
|
|
|
|
1FD46450000
|
unkown
|
page read and write
|
|
|
|
16BFE000
|
unkown
|
page read and write
|
|
|
|
7FF5A92AF000
|
unkown image
|
page readonly
|
|
|
|
7FF59B2AF000
|
unkown image
|
page readonly
|
|
|
|
16E007E000
|
unkown
|
page read and write
|
|
|
|
2053E069000
|
unkown
|
page read and write
|
|
|
|
16C54000
|
unkown
|
page read and write
|
|
|
|
7FF59BAF3000
|
unkown image
|
page readonly
|
|
|
|
C06F000
|
unkown
|
page read and write
|
|
|
|
23AE8880000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1590000
|
unkown image
|
page readonly
|
|
|
|
2053E06A000
|
unkown
|
page read and write
|
|
|
|
7DF516F92000
|
unkown image
|
page readonly
|
|
|
|
185F0110000
|
heap private
|
page read and write
|
|
|
|
13946120000
|
unkown image
|
page readonly
|
|
|
|
2053E031000
|
unkown
|
page read and write
|
|
|
|
16B3C000
|
unkown
|
page read and write
|
|
|
|
2561DC57000
|
unkown
|
page read and write
|
|
|
|
A377879000
|
unkown
|
page read and write
|
|
|
|
200E6B08000
|
unkown
|
page read and write
|
|
|
|
1FD46479000
|
unkown
|
page read and write
|
|
|
|
7FF5DBC58000
|
unkown image
|
page readonly
|
|
|
|
1FD463D0000
|
unkown image
|
page readonly
|
|
|
|
C9D3E7E000
|
unkown
|
page read and write
|
|
|
|
C00B000
|
unkown
|
page read and write
|
|
|
|
C16A000
|
unkown
|
page read and write
|
|
|
|
200E6800000
|
unkown image
|
page read and write
|
|
|
|
CB4DDFB000
|
unkown
|
page read and write
|
|
|
|
1B6BA359000
|
unkown
|
page read and write
|
|
|
|
7FF521F1F000
|
unkown image
|
page readonly
|
|
|
|
16060000
|
unkown
|
page read and write
|
|
|
|
185F0170000
|
heap default
|
page read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
16C44000
|
unkown
|
page read and write
|
|
|
|
15917000
|
unkown
|
page read and write
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
C1B3000
|
unkown
|
page read and write
|
|
|
|
C9D42FF000
|
unkown
|
page read and write
|
|
|
|
51FEC7E000
|
unkown
|
page read and write
|
|
|
|
200E6A13000
|
unkown
|
page read and write
|
|
|
|
C01A000
|
unkown
|
page read and write
|
|
|
|
7FF508F13000
|
unkown image
|
page readonly
|
|
|
|
7FF509389000
|
unkown image
|
page readonly
|
|
|
|
C04B000
|
unkown
|
page read and write
|
|
|
|
2053E047000
|
unkown
|
page read and write
|
|
|
|
2561DC00000
|
unkown
|
page read and write
|
|
|
|
C195000
|
unkown
|
page read and write
|
|
|
|
2995000
|
unkown image
|
page readonly
|
|
|
|
16A23000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
2053E03A000
|
unkown
|
page read and write
|
|
|
|
16A2B000
|
unkown
|
page read and write
|
|
|
|
7FF532B88000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1592000
|
unkown image
|
page readonly
|
|
|
|
291F000
|
unkown image
|
page readonly
|
|
|
|
28A5C890000
|
unkown image
|
page readonly
|
|
|
|
158A8000
|
unkown
|
page read and write
|
|
|
|
C9D3BDB000
|
unkown
|
page read and write
|
|
|
|
7FF50169F000
|
unkown image
|
page readonly
|
|
|
|
7DF5B14F0000
|
unkown image
|
page readonly
|
|
|
|
1B6BF040000
|
unkown
|
page read and write
|
|
|
|
2561DB80000
|
unkown
|
page read and write
|
|
|
|
1614D000
|
unkown
|
page read and write
|
|
|
|
16B7D000
|
unkown
|
page read and write
|
|
|
|
23AE9202000
|
unkown
|
page read and write
|
|
|
|
16A21000
|
unkown
|
page read and write
|
|
|
|
16BCC000
|
unkown
|
page read and write
|
|
|
|
F0558FB000
|
unkown
|
page read and write
|
|
|
|
7DF5B1502000
|
unkown image
|
page readonly
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
7FF509408000
|
unkown image
|
page readonly
|
|
|
|
16BC2000
|
unkown
|
page read and write
|
|
|
|
1FD46380000
|
unkown image
|
page read and write
|
|
|
|
16AC1000
|
unkown
|
page read and write
|
|
|
|
16B29000
|
unkown
|
page read and write
|
|
|
|
16B30000
|
unkown
|
page read and write
|
|
|
|
C9D3FFB000
|
unkown
|
page read and write
|
|
|
|
7FF532A25000
|
unkown image
|
page readonly
|
|
|
|
15F4B000
|
unkown
|
page read and write
|
|
|
|
7DF4EF460000
|
unkown image
|
page readonly
|
|
|
|
7FA20000
|
unkown image
|
page readonly
|
|
|
|
2053E05E000
|
unkown
|
page read and write
|
|
|
|
2561DC02000
|
unkown
|
page read and write
|
|
|
|
C149000
|
unkown
|
page read and write
|
|
|
|
2561DA30000
|
unkown image
|
page readonly
|
|
|
|
C038000
|
unkown
|
page read and write
|
|
|
|
C19B000
|
unkown
|
page read and write
|
|
|
|
16AC1000
|
unkown
|
page read and write
|
|
|
|
16AC3000
|
unkown
|
page read and write
|
|
|
|
7FF5DB443000
|
unkown image
|
page readonly
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
16C34000
|
unkown
|
page read and write
|
|
|
|
23AE8A55000
|
unkown
|
page read and write
|
|
|
|
7FF59BB2D000
|
unkown image
|
page readonly
|
|
|
|
23AE8A0B000
|
unkown
|
page read and write
|
|
|
|
2053E07D000
|
unkown
|
page read and write
|
|
|
|
16B7D000
|
unkown
|
page read and write
|
|
|
|
1FD468D0000
|
unkown image
|
page readonly
|
|
|
|
CE3870E000
|
unkown
|
page read and write
|
|
|
|
16B5A000
|
unkown
|
page read and write
|
|
|
|
7FF509347000
|
unkown image
|
page readonly
|
|
|
|
96C000
|
unkown
|
page read and write
|
|
|
|
7DF5F4FA2000
|
unkown image
|
page readonly
|
|
|
|
7DF537810000
|
unkown image
|
page readonly
|
|
|
|
C031000
|
unkown
|
page read and write
|
|
|
|
16B7E000
|
unkown
|
page read and write
|
|
|
|
200E6840000
|
unkown image
|
page readonly
|
|
|
|
7FA30000
|
unkown image
|
page readonly
|
|
|
|
7FF5DBBD5000
|
unkown image
|
page readonly
|
|
|
|
15920000
|
unkown
|
page read and write
|
|
|
|
7FF509368000
|
unkown image
|
page readonly
|
|
|
|
7DF5484C0000
|
unkown image
|
page readonly
|
|
|
|
7DF5F4FB0000
|
unkown image
|
page readonly
|
|
|
|
158DD000
|
unkown
|
page read and write
|
|
|
|
C0A6000
|
unkown
|
page read and write
|
|
|
|
7FCB2000
|
unkown image
|
page readonly
|
|
|
|
1FD463A0000
|
unkown image
|
page readonly
|
|
|
|
C023000
|
unkown
|
page read and write
|
|
|
|
C177000
|
unkown
|
page read and write
|
|
|
|
7FF509343000
|
unkown image
|
page readonly
|
|
|
|
7FF532883000
|
unkown image
|
page readonly
|
|
|
|
16C1C000
|
unkown
|
page read and write
|
|
|
|
16AD2000
|
unkown
|
page read and write
|
|
|
|
7FF532A37000
|
unkown image
|
page readonly
|
|
|
|
2053E4D0000
|
unkown image
|
page readonly
|
|
|
|
C023000
|
unkown
|
page read and write
|
|
|
|
15F4B000
|
unkown
|
page read and write
|
|
|
|
7FA22000
|
unkown image
|
page readonly
|
|
|
|
2561DA80000
|
heap default
|
page read and write
|
|
|
|
C148000
|
unkown
|
page read and write
|
|
|
|
C1AE000
|
unkown
|
page read and write
|
|
|
|
2053E2D0000
|
unkown image
|
page readonly
|
|
|
|
1B6B9A13000
|
unkown
|
page read and write
|
|
|
|
C209000
|
unkown
|
page read and write
|
|
|
|
16AAE000
|
unkown
|
page read and write
|
|
|
|
7FF59BBFF000
|
unkown image
|
page readonly
|
|
|
|
16B2D000
|
unkown
|
page read and write
|
|
|
|
7FF59BB0C000
|
unkown image
|
page readonly
|
|
|
|
C191000
|
unkown
|
page read and write
|
|
|
|
2561DBB0000
|
unkown
|
page read and write
|
|
|
|
7FA22000
|
unkown image
|
page readonly
|
|
|
|
7FF5DBA3D000
|
unkown image
|
page readonly
|
|
|
|
7DF51ED60000
|
unkown image
|
page readonly
|
|
|
|
C164000
|
unkown
|
page read and write
|
|
|
|
7FF508CCE000
|
unkown image
|
page readonly
|
|
|
|
7DF537822000
|
unkown image
|
page readonly
|
|
|
|
200E6A4C000
|
unkown
|
page read and write
|
|
|
|
16C43000
|
unkown
|
page read and write
|
|
There are 1027 hidden memdumps, click here to show them.