Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Justificante.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\~DF27D39ECE608940C1.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
 |
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Justificante.exe
|
"C:\Users\user\Desktop\Justificante.exe"
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
|
"C:\Users\user\Desktop\Justificante.exe"
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
|
"C:\Users\user\Desktop\Justificante.exe"
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://drive.google.com/:j;
|
unknown
|
|
|
|
https://drive.google.com/Z
|
unknown
|
|
|
|
https://drive.google.com/z
|
unknown
|
|
|
|
https://drive.google.com/8
|
unknown
|
|
|
|
http://www.topqualityfreeware.com/
|
unknown
|
|
|
|
https://drive.google.com/
|
unknown
|
|
|
|
https://drive.google.com/$jI
|
unknown
|
|
|
|
https://drive.google.com/ertificates
|
unknown
|
|
|
|
https://drive.google.com/t
|
unknown
|
|
|
|
https://drive.google.com/2
|
unknown
|
|
|
|
https://drive.google.com/R
|
unknown
|
|
|
|
https://drive.google.com/r
|
unknown
|
|
|
|
https://drive.google.com/0
|
unknown
|
|
|
|
https://drive.google.com/Tp6
|
unknown
|
|
|
|
https://drive.google.com/crosoft
|
unknown
|
|
|
|
https://drive.google.com/Ni
|
unknown
|
|
|
|
https://drive.google.com/j
|
unknown
|
|
|
|
http://topqualityfreeware.com
|
unknown
|
|
|
|
https://drive.google.com/_1
|
unknown
|
|
|
|
https://drive.google.com/ificate
|
unknown
|
|
|
|
https://drive.google.com/B
|
unknown
|
|
|
|
https://drive.google.com/a
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/report-to/gse_l9ocaq
|
unknown
|
|
There are 13 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
drive.google.com
|
142.250.181.238
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.181.238
|
drive.google.com
|
United States
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
FC0000
|
unkown
|
page execute and read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
FA0000
|
unkown image
|
page readonly
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
7F990000
|
unkown image
|
page readonly
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
4EF1000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
E00000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
2280000
|
heap private
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1290000
|
unkown image
|
page readonly
|
|
|
|
12B0000
|
heap default
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
7F990000
|
unkown image
|
page readonly
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
4EF0000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown image
|
page readonly
|
|
|
|
12FF000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
F90000
|
unkown image
|
page readonly
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
7F980000
|
unkown image
|
page readonly
|
|
|
|
DFB000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
FA0000
|
unkown image
|
page readonly
|
|
|
|
1C0000
|
unkown image
|
page readonly
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1DBF0000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7F982000
|
unkown image
|
page readonly
|
|
|
|
31D0000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
11B0000
|
unkown
|
page read and write
|
|
|
|
1D75E000
|
stack
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
7F980000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
4B4000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
1D1BE000
|
stack
|
page read and write
|
|
|
|
FA0000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
E8C000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1DBF0000
|
unkown
|
page read and write
|
|
|
|
426000
|
unkown image
|
page readonly
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
7F980000
|
unkown image
|
page readonly
|
|
|
|
7F972000
|
unkown image
|
page readonly
|
|
|
|
FA0000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
13B0000
|
stack
|
page read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
1326000
|
unkown
|
page read and write
|
|
|
|
22C8000
|
heap private
|
page read and write
|
|
|
|
7F972000
|
unkown image
|
page readonly
|
|
|
|
22C0000
|
heap private
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
219000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
7F982000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12CC000
|
unkown
|
page read and write
|
|
|
|
1CFE0000
|
unkown image
|
page readonly
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
7F972000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
21D000
|
unkown
|
page read and write
|
|
|
|
1CED0000
|
unkown
|
page read and write
|
|
|
|
3210000
|
unkown
|
page read and write
|
|
|
|
1D210000
|
heap private
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
12A0000
|
unkown image
|
page readonly
|
|
|
|
7F972000
|
unkown image
|
page readonly
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
426000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
2CE0000
|
unkown image
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
2230000
|
unkown image
|
page readonly
|
|
|
|
1D85E000
|
stack
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
heap default
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
4B4000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1D1FD000
|
stack
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
E10000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
21F0000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1DC2E000
|
stack
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1DBF0000
|
unkown
|
page read and write
|
|
|
|
13D0000
|
stack
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
2B30000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
624000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1394000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
5F9000
|
heap default
|
page read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
FB0000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
4DAF000
|
stack
|
page read and write
|
|
|
|
7F982000
|
unkown image
|
page readonly
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
5D1000
|
unkown image
|
page readonly
|
|
|
|
1348000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
7F990000
|
unkown image
|
page readonly
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
2B29000
|
heap private
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown image
|
page readonly
|
|
|
|
10000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
10D4000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12FF000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
DB0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
7F980000
|
unkown image
|
page readonly
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
12FC000
|
unkown
|
page read and write
|
|
|
|
1CED1000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
4B0000
|
heap default
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1391000
|
unkown
|
page read and write
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
1DB8C000
|
stack
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
1280000
|
heap private
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
2250000
|
unkown
|
page execute and read and write
|
|
|
|
F90000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
22D0000
|
unkown
|
page read and write
|
|
|
|
15F0000
|
unkown
|
page read and write
|
|
|
|
54F0000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
19C0000
|
unkown image
|
page readonly
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
E20000
|
unkown image
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
1D9CF000
|
stack
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
12CC000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
614000
|
heap default
|
page read and write
|
|
|
|
13B3000
|
stack
|
page read and write
|
|
|
|
7F802000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
FA0000
|
unkown image
|
page readonly
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
4B4000
|
unkown
|
page read and write
|
|
|
|
7F990000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
2CD0000
|
heap private
|
page read and write
|
|
|
|
4DEE000
|
stack
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
12B7000
|
heap default
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
7F802000
|
unkown image
|
page readonly
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1DA8D000
|
stack
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
7F972000
|
unkown image
|
page readonly
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1271000
|
unkown image
|
page readonly
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
2B20000
|
heap private
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
30E0000
|
unkown image
|
page readonly
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
2AF0000
|
heap private
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
7F972000
|
unkown image
|
page readonly
|
|
|
|
12FD000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
21D0000
|
unkown
|
page execute read
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown image
|
page readonly
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
7F982000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
2270000
|
unkown image
|
page readonly
|
|
|
|
5FD000
|
heap default
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
7F982000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
E30000
|
unkown image
|
page readonly
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1830000
|
unkown image
|
page readonly
|
|
|
|
1394000
|
unkown
|
page read and write
|
|
|
|
2E19000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
7F982000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1D17E000
|
stack
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
10C0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
FA0000
|
unkown image
|
page readonly
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1CFD0000
|
unkown image
|
page readonly
|
|
|
|
2DE0000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
DF7000
|
unkown
|
page read and write
|
|
|
|
1391000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
F90000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
2C30000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
1D9E0000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
5529000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1391000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1DD2E000
|
stack
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
4EF1000
|
unkown
|
page read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
640000
|
heap default
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
19B0000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1630000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1D8CE000
|
stack
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
4EEF000
|
stack
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown image
|
page readonly
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
A30000
|
unkown image
|
page readonly
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
7F980000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
F90000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
F90000
|
unkown image
|
page readonly
|
|
|
|
7F980000
|
unkown image
|
page readonly
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
10D0000
|
heap default
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
7F802000
|
unkown image
|
page readonly
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
134B000
|
unkown
|
page read and write
|
|
|
|
7F990000
|
unkown image
|
page readonly
|
|
|
|
99000
|
unkown
|
page read and write
|
|
|
|
7F802000
|
unkown image
|
page readonly
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
4CAE000
|
stack
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
424000
|
unkown image
|
page read and write
|
|
|
|
7F990000
|
unkown image
|
page readonly
|
|
|
|
7F982000
|
unkown image
|
page readonly
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
7F980000
|
unkown image
|
page readonly
|
|
|
|
430000
|
unkown
|
page read and write
|
|
|
|
F8B000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
F90000
|
unkown image
|
page readonly
|
|
|
|
7F972000
|
unkown image
|
page readonly
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
7F990000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
7F802000
|
unkown image
|
page readonly
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1391000
|
unkown
|
page read and write
|
|
|
|
22C5000
|
heap private
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
2AF4000
|
heap private
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page execute and read and write
|
|
|
|
1325000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1391000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown image
|
page readonly
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
12CB000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1D65E000
|
stack
|
page read and write
|
|
|
|
12F7000
|
unkown
|
page read and write
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
|
|
133C000
|
unkown
|
page read and write
|
|
|
|
C30000
|
unkown image
|
page readonly
|
|
|
|
1347000
|
unkown
|
page read and write
|
|
|
|
1349000
|
unkown
|
page read and write
|
|
|
|
5460000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
132D000
|
unkown
|
page read and write
|
|
|
|
1318000
|
unkown
|
page read and write
|
|
|
|
2A10000
|
unkown image
|
page read and write
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
1324000
|
unkown
|
page read and write
|
|
There are 742 hidden memdumps, click here to show them.