Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
CI_PL_BL_ 4100675407_xls.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\~DF86C6EDC191096B55.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
 |
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\CI_PL_BL_ 4100675407_xls.exe
|
"C:\Users\user\Desktop\CI_PL_BL_ 4100675407_xls.exe"
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://bgreenidaho.com/Crur/bin_TLiGMZYC180.bin
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
21A0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5D2058000
|
unkown image
|
page readonly
|
|
|
|
7DF584DF0000
|
unkown image
|
page readonly
|
|
|
|
7FF507E80000
|
unkown image
|
page readonly
|
|
|
|
1DEAE851000
|
unkown
|
page read and write
|
|
|
|
7FF5D2034000
|
unkown image
|
page readonly
|
|
|
|
1B26B7C000
|
stack
|
page read and write
|
|
|
|
1DEAE800000
|
unkown
|
page read and write
|
|
|
|
247CDBE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1D67000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1BC5000
|
unkown image
|
page readonly
|
|
|
|
7FF56FAA4000
|
unkown image
|
page readonly
|
|
|
|
23492FCC000
|
unkown
|
page read and write
|
|
|
|
205B8560000
|
heap private
|
page read and write
|
|
|
|
11679A12000
|
unkown
|
page read and write
|
|
|
|
23492AD0000
|
unkown image
|
page readonly
|
|
|
|
6461C7F000
|
stack
|
page read and write
|
|
|
|
7FF5083AA000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2069000
|
unkown image
|
page readonly
|
|
|
|
7FF508314000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
EF54A77000
|
stack
|
page read and write
|
|
|
|
2A2D94A0000
|
unkown
|
page read and write
|
|
|
|
23492F87000
|
unkown
|
page read and write
|
|
|
|
7FF5766EA000
|
unkown image
|
page readonly
|
|
|
|
2349264B000
|
unkown
|
page read and write
|
|
|
|
E42F1FF000
|
stack
|
page read and write
|
|
|
|
7FF576758000
|
unkown image
|
page readonly
|
|
|
|
116798B0000
|
unkown image
|
page read and write
|
|
|
|
11679A15000
|
unkown
|
page read and write
|
|
|
|
1000FE000
|
stack
|
page read and write
|
|
|
|
7FF57A7B2000
|
unkown image
|
page readonly
|
|
|
|
25167580000
|
unkown image
|
page readonly
|
|
|
|
7FF5603C2000
|
unkown image
|
page readonly
|
|
|
|
6461CFF000
|
stack
|
page read and write
|
|
|
|
7DF5E7160000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2027000
|
unkown image
|
page readonly
|
|
|
|
7DF58B860000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF0E000
|
unkown image
|
page readonly
|
|
|
|
1CB6DC00000
|
unkown
|
page read and write
|
|
|
|
20C0000
|
heap private
|
page read and write
|
|
|
|
205B8658000
|
unkown
|
page read and write
|
|
|
|
7DF51AA30000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
23492F84000
|
unkown
|
page read and write
|
|
|
|
23492F6D000
|
unkown
|
page read and write
|
|
|
|
7FF576047000
|
unkown image
|
page readonly
|
|
|
|
2349264F000
|
unkown
|
page read and write
|
|
|
|
23492652000
|
unkown
|
page read and write
|
|
|
|
7FF59A756000
|
unkown image
|
page readonly
|
|
|
|
11679D00000
|
unkown image
|
page readonly
|
|
|
|
2A2D9380000
|
unkown image
|
page readonly
|
|
|
|
1CB6DC7C000
|
unkown
|
page read and write
|
|
|
|
7FF576727000
|
unkown image
|
page readonly
|
|
|
|
23492655000
|
unkown
|
page read and write
|
|
|
|
7FF59AAE5000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC70000
|
unkown image
|
page readonly
|
|
|
|
7DF58B880000
|
unkown image
|
page readonly
|
|
|
|
7FF50589A000
|
unkown image
|
page readonly
|
|
|
|
7FF5D205E000
|
unkown image
|
page readonly
|
|
|
|
6D2747F000
|
stack
|
page read and write
|
|
|
|
23492F87000
|
unkown
|
page read and write
|
|
|
|
7FF5766DA000
|
unkown image
|
page readonly
|
|
|
|
AB671FE000
|
stack
|
page read and write
|
|
|
|
6D27579000
|
stack
|
page read and write
|
|
|
|
7FF576305000
|
unkown image
|
page readonly
|
|
|
|
7FF5765F8000
|
unkown image
|
page readonly
|
|
|
|
E42F47F000
|
stack
|
page read and write
|
|
|
|
7FF57A71E000
|
unkown image
|
page readonly
|
|
|
|
2349264E000
|
unkown
|
page read and write
|
|
|
|
7FF5767DA000
|
unkown image
|
page readonly
|
|
|
|
7FF56502E000
|
unkown image
|
page readonly
|
|
|
|
234926B1000
|
unkown
|
page read and write
|
|
|
|
7FF5D1EB1000
|
unkown image
|
page readonly
|
|
|
|
247CD840000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF15000
|
unkown image
|
page readonly
|
|
|
|
7FF5D206D000
|
unkown image
|
page readonly
|
|
|
|
7FF50831F000
|
unkown image
|
page readonly
|
|
|
|
1DEAE888000
|
unkown
|
page read and write
|
|
|
|
7FF576470000
|
unkown image
|
page readonly
|
|
|
|
2A2D94D0000
|
heap default
|
page read and write
|
|
|
|
2516767E000
|
unkown
|
page read and write
|
|
|
|
7FF564913000
|
unkown image
|
page readonly
|
|
|
|
23492689000
|
unkown
|
page read and write
|
|
|
|
7DF5E7180000
|
unkown image
|
page readonly
|
|
|
|
1DEAE620000
|
unkown image
|
page read and write
|
|
|
|
25167670000
|
unkown
|
page read and write
|
|
|
|
7FF5D1F43000
|
unkown image
|
page readonly
|
|
|
|
1CB6DAA0000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF0A000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1EEE000
|
unkown image
|
page readonly
|
|
|
|
7FF59ADF1000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7DF58B872000
|
unkown image
|
page readonly
|
|
|
|
11679B80000
|
unkown image
|
page readonly
|
|
|
|
205B8600000
|
unkown
|
page read and write
|
|
|
|
11679920000
|
unkown
|
page read and write
|
|
|
|
2190000
|
heap private
|
page read and write
|
|
|
|
7FF50599A000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1836000
|
unkown image
|
page readonly
|
|
|
|
1DEAE640000
|
unkown image
|
page readonly
|
|
|
|
4F0000
|
heap default
|
page read and write
|
|
|
|
11679AA0000
|
unkown
|
page read and write
|
|
|
|
7FF5764B6000
|
unkown image
|
page readonly
|
|
|
|
7DF51AA32000
|
unkown image
|
page readonly
|
|
|
|
11679A39000
|
unkown
|
page read and write
|
|
|
|
7FF57625E000
|
unkown image
|
page readonly
|
|
|
|
116799F5000
|
unkown
|
page read and write
|
|
|
|
205B8659000
|
unkown
|
page read and write
|
|
|
|
2400000
|
heap private
|
page read and write
|
|
|
|
23492F71000
|
unkown
|
page read and write
|
|
|
|
E42F17B000
|
unkown
|
page read and write
|
|
|
|
2150000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC9F000
|
unkown image
|
page readonly
|
|
|
|
23492540000
|
heap private
|
page read and write
|
|
|
|
2349269F000
|
unkown
|
page read and write
|
|
|
|
23492D50000
|
unkown image
|
page write copy
|
|
|
|
11679A39000
|
unkown
|
page read and write
|
|
|
|
11679A9C000
|
unkown
|
page read and write
|
|
|
|
7FF59AC90000
|
unkown image
|
page readonly
|
|
|
|
23493402000
|
unkown
|
page read and write
|
|
|
|
7FF564D40000
|
unkown image
|
page readonly
|
|
|
|
7DF51D432000
|
unkown image
|
page readonly
|
|
|
|
7FF505630000
|
unkown image
|
page readonly
|
|
|
|
2A2D96A5000
|
heap private
|
page read and write
|
|
|
|
7FF57A6C0000
|
unkown image
|
page readonly
|
|
|
|
2A2D9370000
|
unkown image
|
page readonly
|
|
|
|
7FF505701000
|
unkown image
|
page readonly
|
|
|
|
1CB6DD13000
|
unkown
|
page read and write
|
|
|
|
247CD976000
|
heap default
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
98000
|
unkown
|
page read and write
|
|
|
|
7FF5059A1000
|
unkown image
|
page readonly
|
|
|
|
7FF576524000
|
unkown image
|
page readonly
|
|
|
|
7FF505476000
|
unkown image
|
page readonly
|
|
|
|
23492F95000
|
unkown
|
page read and write
|
|
|
|
23492580000
|
unkown image
|
page readonly
|
|
|
|
7FF576654000
|
unkown image
|
page readonly
|
|
|
|
7FF5082AA000
|
unkown image
|
page readonly
|
|
|
|
205B8550000
|
unkown image
|
page read and write
|
|
|
|
7FF5081BE000
|
unkown image
|
page readonly
|
|
|
|
1DEAE83C000
|
unkown
|
page read and write
|
|
|
|
7FF5058AA000
|
unkown image
|
page readonly
|
|
|
|
1DEAE690000
|
heap default
|
page read and write
|
|
|
|
234928D0000
|
unkown image
|
page readonly
|
|
|
|
6D274FC000
|
stack
|
page read and write
|
|
|
|
23492F8C000
|
unkown
|
page read and write
|
|
|
|
7FF59AAD6000
|
unkown image
|
page readonly
|
|
|
|
23492F98000
|
unkown
|
page read and write
|
|
|
|
7FF56FCB4000
|
unkown image
|
page readonly
|
|
|
|
23492F91000
|
unkown
|
page read and write
|
|
|
|
7FF56FA70000
|
unkown image
|
page readonly
|
|
|
|
7FF57659A000
|
unkown image
|
page readonly
|
|
|
|
7FF505470000
|
unkown image
|
page readonly
|
|
|
|
7FF59AE5D000
|
unkown image
|
page readonly
|
|
|
|
7FF507B00000
|
unkown image
|
page readonly
|
|
|
|
7FF5650B2000
|
unkown image
|
page readonly
|
|
|
|
2A2D96A0000
|
heap private
|
page read and write
|
|
|
|
7FF56F92A000
|
unkown image
|
page readonly
|
|
|
|
247CD99D000
|
unkown
|
page read and write
|
|
|
|
23492570000
|
unkown image
|
page readonly
|
|
|
|
1DEAED80000
|
unkown image
|
page readonly
|
|
|
|
247CDF60000
|
unkown image
|
page readonly
|
|
|
|
7DF51AA30000
|
unkown image
|
page readonly
|
|
|
|
7FF56FD03000
|
unkown image
|
page readonly
|
|
|
|
2A2D94FE000
|
heap default
|
page read and write
|
|
|
|
205B8647000
|
unkown
|
page read and write
|
|
|
|
7DF51AA20000
|
unkown image
|
page readonly
|
|
|
|
25167550000
|
unkown image
|
page readonly
|
|
|
|
7FF57665C000
|
unkown image
|
page readonly
|
|
|
|
234926EA000
|
unkown
|
page read and write
|
|
|
|
23492F7E000
|
unkown
|
page read and write
|
|
|
|
7FF5766DC000
|
unkown image
|
page readonly
|
|
|
|
116798F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5058BB000
|
unkown image
|
page readonly
|
|
|
|
521000
|
heap default
|
page read and write
|
|
|
|
7DF5B0092000
|
unkown image
|
page readonly
|
|
|
|
2516763C000
|
unkown
|
page read and write
|
|
|
|
11679A81000
|
unkown
|
page read and write
|
|
|
|
1DEAE813000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
205B864F000
|
unkown
|
page read and write
|
|
|
|
11679A1A000
|
unkown
|
page read and write
|
|
|
|
11679AA4000
|
unkown
|
page read and write
|
|
|
|
500000
|
heap default
|
page read and write
|
|
|
|
7FF5083A4000
|
unkown image
|
page readonly
|
|
|
|
7FF59AEFA000
|
unkown image
|
page readonly
|
|
|
|
7FF5D201C000
|
unkown image
|
page readonly
|
|
|
|
234925B0000
|
unkown image
|
page readonly
|
|
|
|
7FF505814000
|
unkown image
|
page readonly
|
|
|
|
247CD986000
|
unkown
|
page read and write
|
|
|
|
7DF5E7172000
|
unkown image
|
page readonly
|
|
|
|
116799DD000
|
unkown
|
page read and write
|
|
|
|
EF54C7E000
|
stack
|
page read and write
|
|
|
|
7FF5765EB000
|
unkown image
|
page readonly
|
|
|
|
7FF575F36000
|
unkown image
|
page readonly
|
|
|
|
23492FD9000
|
unkown
|
page read and write
|
|
|
|
7FF576531000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2044000
|
unkown image
|
page readonly
|
|
|
|
23492F82000
|
unkown
|
page read and write
|
|
|
|
205B8700000
|
unkown
|
page read and write
|
|
|
|
1167A392000
|
unkown
|
page read and write
|
|
|
|
23492F98000
|
unkown
|
page read and write
|
|
|
|
23492F19000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
7DF57A140000
|
unkown image
|
page readonly
|
|
|
|
7DF5E7162000
|
unkown image
|
page readonly
|
|
|
|
247CD98F000
|
unkown
|
page read and write
|
|
|
|
23492F75000
|
unkown
|
page read and write
|
|
|
|
7FF56FC3B000
|
unkown image
|
page readonly
|
|
|
|
6D2716A000
|
unkown
|
page read and write
|
|
|
|
1B26A7B000
|
stack
|
page read and write
|
|
|
|
7FF508111000
|
unkown image
|
page readonly
|
|
|
|
7DF51D430000
|
unkown image
|
page readonly
|
|
|
|
7DF51D432000
|
unkown image
|
page readonly
|
|
|
|
7DF58F830000
|
unkown image
|
page readonly
|
|
|
|
7FF56FBF1000
|
unkown image
|
page readonly
|
|
|
|
7FF564FEC000
|
unkown image
|
page readonly
|
|
|
|
23492F85000
|
unkown
|
page read and write
|
|
|
|
7FF5058FA000
|
unkown image
|
page readonly
|
|
|
|
89E44FF000
|
stack
|
page read and write
|
|
|
|
23492F75000
|
unkown
|
page read and write
|
|
|
|
7FF507B06000
|
unkown image
|
page readonly
|
|
|
|
1CB6DC7D000
|
unkown
|
page read and write
|
|
|
|
7FF565014000
|
unkown image
|
page readonly
|
|
|
|
7DF51D440000
|
unkown image
|
page readonly
|
|
|
|
7FF5082C5000
|
unkown image
|
page readonly
|
|
|
|
7FF57A739000
|
unkown image
|
page readonly
|
|
|
|
7FF5765EE000
|
unkown image
|
page readonly
|
|
|
|
7FF57A73D000
|
unkown image
|
page readonly
|
|
|
|
7FF50591E000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1F3D000
|
unkown image
|
page readonly
|
|
|
|
23492648000
|
unkown
|
page read and write
|
|
|
|
234926A9000
|
unkown
|
page read and write
|
|
|
|
247CDA60000
|
unkown
|
page read and write
|
|
|
|
7FF576262000
|
unkown image
|
page readonly
|
|
|
|
7DF51AA40000
|
unkown image
|
page readonly
|
|
|
|
AB6707F000
|
stack
|
page read and write
|
|
|
|
7FF5766EE000
|
unkown image
|
page readonly
|
|
|
|
7FF56FB00000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC87000
|
unkown image
|
page readonly
|
|
|
|
7DF57A130000
|
unkown image
|
page readonly
|
|
|
|
1B26C77000
|
stack
|
page read and write
|
|
|
|
247CD840000
|
unkown image
|
page readonly
|
|
|
|
7FF50581C000
|
unkown image
|
page readonly
|
|
|
|
AB66DCC000
|
unkown
|
page read and write
|
|
|
|
C60000
|
unkown image
|
page readonly
|
|
|
|
247CDA80000
|
unkown
|
page read and write
|
|
|
|
7FF5D1FF0000
|
unkown image
|
page readonly
|
|
|
|
23492F96000
|
unkown
|
page read and write
|
|
|
|
11679A81000
|
unkown
|
page read and write
|
|
|
|
7FF576734000
|
unkown image
|
page readonly
|
|
|
|
20A0000
|
unkown image
|
page readonly
|
|
|
|
7DF584DF2000
|
unkown image
|
page readonly
|
|
|
|
23492F67000
|
unkown
|
page read and write
|
|
|
|
23492FB5000
|
unkown
|
page read and write
|
|
|
|
7FF5058B5000
|
unkown image
|
page readonly
|
|
|
|
205B8E02000
|
unkown
|
page read and write
|
|
|
|
23492F7D000
|
unkown
|
page read and write
|
|
|
|
23492F80000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
25167702000
|
unkown
|
page read and write
|
|
|
|
7DF5B0082000
|
unkown image
|
page readonly
|
|
|
|
116799F5000
|
unkown
|
page read and write
|
|
|
|
247CD98F000
|
unkown
|
page read and write
|
|
|
|
7FF5D1ED1000
|
unkown image
|
page readonly
|
|
|
|
7FF5D20E1000
|
unkown image
|
page readonly
|
|
|
|
23492F94000
|
unkown
|
page read and write
|
|
|
|
7FF59AF89000
|
unkown image
|
page readonly
|
|
|
|
23492F87000
|
unkown
|
page read and write
|
|
|
|
7FF5058C7000
|
unkown image
|
page readonly
|
|
|
|
205B867F000
|
unkown
|
page read and write
|
|
|
|
7FF5D1D99000
|
unkown image
|
page readonly
|
|
|
|
4B0000
|
unkown image
|
page readonly
|
|
|
|
11679A68000
|
unkown
|
page read and write
|
|
|
|
7FF59AF27000
|
unkown image
|
page readonly
|
|
|
|
8D0000
|
unkown image
|
page readonly
|
|
|
|
23492F98000
|
unkown
|
page read and write
|
|
|
|
7FF56FAB1000
|
unkown image
|
page readonly
|
|
|
|
25167600000
|
unkown
|
page read and write
|
|
|
|
7FF57663D000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC44000
|
unkown image
|
page readonly
|
|
|
|
7FF505803000
|
unkown image
|
page readonly
|
|
|
|
7FF56FD62000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF57674F000
|
unkown image
|
page readonly
|
|
|
|
247CD99E000
|
unkown
|
page read and write
|
|
|
|
7FF59AFF4000
|
unkown image
|
page readonly
|
|
|
|
2349264A000
|
unkown
|
page read and write
|
|
|
|
23492657000
|
unkown
|
page read and write
|
|
|
|
1CB6DBB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5766FB000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
205B8665000
|
unkown
|
page read and write
|
|
|
|
25167700000
|
unkown
|
page read and write
|
|
|
|
7FF56FC7B000
|
unkown image
|
page readonly
|
|
|
|
1CB6DA60000
|
unkown image
|
page read and write
|
|
|
|
7DF57A142000
|
unkown image
|
page readonly
|
|
|
|
7FF505753000
|
unkown image
|
page readonly
|
|
|
|
205B85A0000
|
unkown image
|
page readonly
|
|
|
|
2A2D9A30000
|
unkown image
|
page readonly
|
|
|
|
7FF5765F3000
|
unkown image
|
page readonly
|
|
|
|
7FF565004000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1BB6000
|
unkown image
|
page readonly
|
|
|
|
7DF51D440000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7DF51D430000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2007000
|
unkown image
|
page readonly
|
|
|
|
23492FA6000
|
unkown
|
page read and write
|
|
|
|
1167A391000
|
unkown
|
page read and write
|
|
|
|
7FF564917000
|
unkown image
|
page readonly
|
|
|
|
23492651000
|
unkown
|
page read and write
|
|
|
|
11679900000
|
unkown image
|
page readonly
|
|
|
|
205B85F0000
|
unkown
|
page read and write
|
|
|
|
205B8613000
|
unkown
|
page read and write
|
|
|
|
2F50000
|
unkown image
|
page readonly
|
|
|
|
2349346A000
|
unkown
|
page read and write
|
|
|
|
116799F5000
|
unkown
|
page read and write
|
|
|
|
7FF5766A3000
|
unkown image
|
page readonly
|
|
|
|
7FF565028000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D20DA000
|
unkown image
|
page readonly
|
|
|
|
23492F98000
|
unkown
|
page read and write
|
|
|
|
1DEAE908000
|
unkown
|
page read and write
|
|
|
|
7FF5D1FFB000
|
unkown image
|
page readonly
|
|
|
|
89E41FB000
|
stack
|
page read and write
|
|
|
|
7DF41B300000
|
unkown image
|
page readonly
|
|
|
|
7FF5059A2000
|
unkown image
|
page readonly
|
|
|
|
1DEAE902000
|
unkown
|
page read and write
|
|
|
|
1DEAE670000
|
unkown image
|
page readonly
|
|
|
|
23492FA6000
|
unkown
|
page read and write
|
|
|
|
7FF5058AE000
|
unkown image
|
page readonly
|
|
|
|
2516764B000
|
unkown
|
page read and write
|
|
|
|
23492FCA000
|
unkown
|
page read and write
|
|
|
|
7FF56FC23000
|
unkown image
|
page readonly
|
|
|
|
7FF59ADD1000
|
unkown image
|
page readonly
|
|
|
|
25167540000
|
unkown image
|
page readonly
|
|
|
|
7FF564FC0000
|
unkown image
|
page readonly
|
|
|
|
7FF576707000
|
unkown image
|
page readonly
|
|
|
|
7FF57A714000
|
unkown image
|
page readonly
|
|
|
|
7FF5767E1000
|
unkown image
|
page readonly
|
|
|
|
23492F69000
|
unkown
|
page read and write
|
|
|
|
AB670FF000
|
stack
|
page read and write
|
|
|
|
7FF5603C2000
|
unkown image
|
page readonly
|
|
|
|
7FF57675E000
|
unkown image
|
page readonly
|
|
|
|
7FF5082EF000
|
unkown image
|
page readonly
|
|
|
|
7FF5082BE000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1FEA000
|
unkown image
|
page readonly
|
|
|
|
11679A99000
|
unkown
|
page read and write
|
|
|
|
23492F83000
|
unkown
|
page read and write
|
|
|
|
1CB6DC88000
|
unkown
|
page read and write
|
|
|
|
2A2D94DB000
|
heap default
|
page read and write
|
|
|
|
11679D75000
|
heap private
|
page read and write
|
|
|
|
2A2D93B0000
|
unkown image
|
page readonly
|
|
|
|
25167510000
|
heap private
|
page read and write
|
|
|
|
234926EB000
|
unkown
|
page read and write
|
|
|
|
7FF57A70A000
|
unkown image
|
page readonly
|
|
|
|
1CB6DC56000
|
unkown
|
page read and write
|
|
|
|
234925F0000
|
unkown image
|
page readonly
|
|
|
|
7FF59AE0E000
|
unkown image
|
page readonly
|
|
|
|
7FF508037000
|
unkown image
|
page readonly
|
|
|
|
7DF58F850000
|
unkown image
|
page readonly
|
|
|
|
11679A68000
|
unkown
|
page read and write
|
|
|
|
7FF5764AB000
|
unkown image
|
page readonly
|
|
|
|
6D275FE000
|
stack
|
page read and write
|
|
|
|
7FF50590F000
|
unkown image
|
page readonly
|
|
|
|
1B26E7F000
|
stack
|
page read and write
|
|
|
|
7FF57A6F8000
|
unkown image
|
page readonly
|
|
|
|
7FF5762C5000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1830000
|
unkown image
|
page readonly
|
|
|
|
247CD971000
|
unkown
|
page read and write
|
|
|
|
11679A12000
|
unkown
|
page read and write
|
|
|
|
7FF505929000
|
unkown image
|
page readonly
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
11679A12000
|
unkown
|
page read and write
|
|
|
|
1B26D7F000
|
stack
|
page read and write
|
|
|
|
6D271EF000
|
stack
|
page read and write
|
|
|
|
7FF508163000
|
unkown image
|
page readonly
|
|
|
|
7DF584E00000
|
unkown image
|
page readonly
|
|
|
|
2160000
|
unkown
|
page read and write
|
|
|
|
2210000
|
heap private
|
page read and write
|
|
|
|
205B8655000
|
unkown
|
page read and write
|
|
|
|
7DF51AA32000
|
unkown image
|
page readonly
|
|
|
|
7DF58B862000
|
unkown image
|
page readonly
|
|
|
|
1DEAE913000
|
unkown
|
page read and write
|
|
|
|
7DF5B0092000
|
unkown image
|
page readonly
|
|
|
|
23492716000
|
unkown
|
page read and write
|
|
|
|
7FF57673A000
|
unkown image
|
page readonly
|
|
|
|
7DF58B880000
|
unkown image
|
page readonly
|
|
|
|
251678D0000
|
unkown image
|
page readonly
|
|
|
|
247CDBD5000
|
heap private
|
page read and write
|
|
|
|
1DEAF002000
|
unkown
|
page read and write
|
|
|
|
2090000
|
unkown
|
page read and write
|
|
|
|
23492629000
|
unkown
|
page read and write
|
|
|
|
205B8570000
|
unkown image
|
page readonly
|
|
|
|
C50000
|
unkown image
|
page readonly
|
|
|
|
7FF5058E7000
|
unkown image
|
page readonly
|
|
|
|
EF5477E000
|
stack
|
page read and write
|
|
|
|
7FF576043000
|
unkown image
|
page readonly
|
|
|
|
7DF489730000
|
unkown image
|
page readonly
|
|
|
|
7FF59AE0B000
|
unkown image
|
page readonly
|
|
|
|
2320000
|
unkown
|
page read and write
|
|
|
|
7FF5081A1000
|
unkown image
|
page readonly
|
|
|
|
1DEAE856000
|
unkown
|
page read and write
|
|
|
|
7FF576541000
|
unkown image
|
page readonly
|
|
|
|
7FF56FB1F000
|
unkown image
|
page readonly
|
|
|
|
116799E1000
|
heap default
|
page read and write
|
|
|
|
11679D10000
|
unkown
|
page read and write
|
|
|
|
2A2D96B0000
|
unkown image
|
page readonly
|
|
|
|
234926C9000
|
unkown
|
page read and write
|
|
|
|
205B8646000
|
unkown
|
page read and write
|
|
|
|
7FF5767D4000
|
unkown image
|
page readonly
|
|
|
|
7DF51AA40000
|
unkown image
|
page readonly
|
|
|
|
23492DC0000
|
unkown
|
page read and write
|
|
|
|
7FF50822C000
|
unkown image
|
page readonly
|
|
|
|
23492F77000
|
unkown
|
page read and write
|
|
|
|
247CDAA0000
|
unkown image
|
page readonly
|
|
|
|
23492FA3000
|
unkown
|
page read and write
|
|
|
|
1CB6E402000
|
unkown
|
page read and write
|
|
|
|
1DEAE630000
|
heap private
|
page read and write
|
|
|
|
7DF584DF0000
|
unkown image
|
page readonly
|
|
|
|
7FF57A704000
|
unkown image
|
page readonly
|
|
|
|
7DF5E7172000
|
unkown image
|
page readonly
|
|
|
|
23492F93000
|
unkown
|
page read and write
|
|
|
|
1CB6DD08000
|
unkown
|
page read and write
|
|
|
|
7FF56F5CD000
|
unkown image
|
page readonly
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
345000
|
unkown
|
page read and write
|
|
|
|
1CB6DA80000
|
unkown image
|
page readonly
|
|
|
|
7FF5057FD000
|
unkown image
|
page readonly
|
|
|
|
7FF5762B0000
|
unkown image
|
page readonly
|
|
|
|
7DF4E5030000
|
unkown image
|
page readonly
|
|
|
|
7FF564FEF000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5650AA000
|
unkown image
|
page readonly
|
|
|
|
23492F7A000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page execute read
|
|
|
|
7FF508040000
|
unkown image
|
page readonly
|
|
|
|
23492702000
|
unkown
|
page read and write
|
|
|
|
7FF5765B1000
|
unkown image
|
page readonly
|
|
|
|
205B864C000
|
unkown
|
page read and write
|
|
|
|
1DEAE660000
|
unkown image
|
page readonly
|
|
|
|
25167680000
|
unkown
|
page read and write
|
|
|
|
23492FA6000
|
unkown
|
page read and write
|
|
|
|
23492550000
|
unkown image
|
page readonly
|
|
|
|
7DF58B872000
|
unkown image
|
page readonly
|
|
|
|
205B8702000
|
unkown
|
page read and write
|
|
|
|
7FF56FAA6000
|
unkown image
|
page readonly
|
|
|
|
7DF58F830000
|
unkown image
|
page readonly
|
|
|
|
7FF5766F0000
|
unkown image
|
page readonly
|
|
|
|
7DF58F842000
|
unkown image
|
page readonly
|
|
|
|
7FF5766C4000
|
unkown image
|
page readonly
|
|
|
|
23492E02000
|
unkown
|
page read and write
|
|
|
|
23492654000
|
unkown
|
page read and write
|
|
|
|
7FF5D20E2000
|
unkown image
|
page readonly
|
|
|
|
1CB6DE00000
|
unkown image
|
page readonly
|
|
|
|
AB6727F000
|
stack
|
page read and write
|
|
|
|
7FF57A6C5000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1FDC000
|
unkown image
|
page readonly
|
|
|
|
1DEAE87D000
|
unkown
|
page read and write
|
|
|
|
7FF56FBF4000
|
unkown image
|
page readonly
|
|
|
|
234926A6000
|
unkown
|
page read and write
|
|
|
|
205B85C0000
|
heap default
|
page read and write
|
|
|
|
7FF5D1EEB000
|
unkown image
|
page readonly
|
|
|
|
7FF564FC5000
|
unkown image
|
page readonly
|
|
|
|
7DF5E7170000
|
unkown image
|
page readonly
|
|
|
|
7DF57A132000
|
unkown image
|
page readonly
|
|
|
|
20C4000
|
heap private
|
page read and write
|
|
|
|
7FF575F30000
|
unkown image
|
page readonly
|
|
|
|
7DF5B0082000
|
unkown image
|
page readonly
|
|
|
|
7FF56F4B9000
|
unkown image
|
page readonly
|
|
|
|
247CDBD0000
|
heap private
|
page read and write
|
|
|
|
7FF56FD61000
|
unkown image
|
page readonly
|
|
|
|
25167500000
|
unkown image
|
page read and write
|
|
|
|
6D2767F000
|
stack
|
page read and write
|
|
|
|
23492649000
|
unkown
|
page read and write
|
|
|
|
7FF59B001000
|
unkown image
|
page readonly
|
|
|
|
23492FD9000
|
unkown
|
page read and write
|
|
|
|
23492656000
|
unkown
|
page read and write
|
|
|
|
23492613000
|
unkown
|
page read and write
|
|
|
|
205B85D0000
|
unkown image
|
page readonly
|
|
|
|
7FF505994000
|
unkown image
|
page readonly
|
|
|
|
1CB6DD02000
|
unkown
|
page read and write
|
|
|
|
7DF51D442000
|
unkown image
|
page readonly
|
|
|
|
89E3D0F000
|
stack
|
page read and write
|
|
|
|
41C000
|
unkown image
|
page execute read
|
|
|
|
23492C50000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC4F000
|
unkown image
|
page readonly
|
|
|
|
7FF576307000
|
unkown image
|
page readonly
|
|
|
|
205B8689000
|
unkown
|
page read and write
|
|
|
|
7FF59AE7C000
|
unkown image
|
page readonly
|
|
|
|
205B8657000
|
unkown
|
page read and write
|
|
|
|
25167613000
|
unkown
|
page read and write
|
|
|
|
11679D80000
|
unkown image
|
page readonly
|
|
|
|
7FF5057AE000
|
unkown image
|
page readonly
|
|
|
|
6461FF7000
|
stack
|
page read and write
|
|
|
|
234926F9000
|
unkown
|
page read and write
|
|
|
|
7FF56F576000
|
unkown image
|
page readonly
|
|
|
|
7FF59AAD0000
|
unkown image
|
page readonly
|
|
|
|
11679A7F000
|
unkown
|
page read and write
|
|
|
|
7FF59AF3F000
|
unkown image
|
page readonly
|
|
|
|
7DF51AA22000
|
unkown image
|
page readonly
|
|
|
|
23492FA3000
|
unkown
|
page read and write
|
|
|
|
7FF5766BB000
|
unkown image
|
page readonly
|
|
|
|
23492F75000
|
unkown
|
page read and write
|
|
|
|
7FF56503D000
|
unkown image
|
page readonly
|
|
|
|
11679A12000
|
unkown
|
page read and write
|
|
|
|
1DEAE900000
|
unkown
|
page read and write
|
|
|
|
7DF584DE2000
|
unkown image
|
page readonly
|
|
|
|
7FF508181000
|
unkown image
|
page readonly
|
|
|
|
205B8C50000
|
unkown image
|
page readonly
|
|
|
|
11679D70000
|
heap private
|
page read and write
|
|
|
|
7FF5650B1000
|
unkown image
|
page readonly
|
|
|
|
25167713000
|
unkown
|
page read and write
|
|
|
|
89E42F7000
|
stack
|
page read and write
|
|
|
|
205B864D000
|
unkown
|
page read and write
|
|
|
|
341000
|
unkown
|
page read and write
|
|
|
|
7FF508304000
|
unkown image
|
page readonly
|
|
|
|
7FF5761CE000
|
unkown image
|
page readonly
|
|
|
|
7FF507E95000
|
unkown image
|
page readonly
|
|
|
|
1DEAE84B000
|
unkown
|
page read and write
|
|
|
|
7FF59AF3C000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC33000
|
unkown image
|
page readonly
|
|
|
|
7FF5D204F000
|
unkown image
|
page readonly
|
|
|
|
23492F82000
|
unkown
|
page read and write
|
|
|
|
7FF50592D000
|
unkown image
|
page readonly
|
|
|
|
7DF5B0080000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5058B0000
|
unkown image
|
page readonly
|
|
|
|
23492F8B000
|
unkown
|
page read and write
|
|
|
|
7FF5D1BB0000
|
unkown image
|
page readonly
|
|
|
|
7FF50589C000
|
unkown image
|
page readonly
|
|
|
|
116798D0000
|
unkown image
|
page readonly
|
|
|
|
E42F777000
|
stack
|
page read and write
|
|
|
|
7FF565039000
|
unkown image
|
page readonly
|
|
|
|
10047B000
|
stack
|
page read and write
|
|
|
|
7FF56501E000
|
unkown image
|
page readonly
|
|
|
|
11679D10000
|
unkown
|
page read and write
|
|
|
|
7FF505791000
|
unkown image
|
page readonly
|
|
|
|
247CD987000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
heap private
|
page read and write
|
|
|
|
205B8570000
|
unkown image
|
page readonly
|
|
|
|
1CB6DA80000
|
unkown image
|
page readonly
|
|
|
|
7DF5B0090000
|
unkown image
|
page readonly
|
|
|
|
7FF59A750000
|
unkown image
|
page readonly
|
|
|
|
7FF576769000
|
unkown image
|
page readonly
|
|
|
|
10057D000
|
stack
|
page read and write
|
|
|
|
23492F87000
|
unkown
|
page read and write
|
|
|
|
247CD860000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF64000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF508213000
|
unkown image
|
page readonly
|
|
|
|
7FF5082BA000
|
unkown image
|
page readonly
|
|
|
|
7FF505771000
|
unkown image
|
page readonly
|
|
|
|
1B2652B000
|
unkown
|
page read and write
|
|
|
|
7FF56FC5A000
|
unkown image
|
page readonly
|
|
|
|
7FF576252000
|
unkown image
|
page readonly
|
|
|
|
7FF5766CF000
|
unkown image
|
page readonly
|
|
|
|
25167629000
|
unkown
|
page read and write
|
|
|
|
7FF5D1FF5000
|
unkown image
|
page readonly
|
|
|
|
7FF576499000
|
unkown image
|
page readonly
|
|
|
|
7DF51D450000
|
unkown image
|
page readonly
|
|
|
|
64622FF000
|
stack
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
23492F1B000
|
unkown
|
page read and write
|
|
|
|
1DEAE829000
|
unkown
|
page read and write
|
|
|
|
11679A7F000
|
unkown
|
page read and write
|
|
|
|
7FF56FCD8000
|
unkown image
|
page readonly
|
|
|
|
2B50000
|
unkown image
|
page read and write
|
|
|
|
1CB6DBD0000
|
unkown
|
page read and write
|
|
|
|
7FF59B002000
|
unkown image
|
page readonly
|
|
|
|
7FF508224000
|
unkown image
|
page readonly
|
|
|
|
1167A390000
|
unkown
|
page read and write
|
|
|
|
20D0000
|
unkown image
|
page read and write
|
|
|
|
25167520000
|
unkown image
|
page readonly
|
|
|
|
7FF5082C0000
|
unkown image
|
page readonly
|
|
|
|
7DF58B870000
|
unkown image
|
page readonly
|
|
|
|
AB672FE000
|
stack
|
page read and write
|
|
|
|
1004FB000
|
stack
|
page read and write
|
|
|
|
7FF57A6C2000
|
unkown image
|
page readonly
|
|
|
|
1CB6DC29000
|
unkown
|
page read and write
|
|
|
|
7FF56FCF2000
|
unkown image
|
page readonly
|
|
|
|
7FF57A7A4000
|
unkown image
|
page readonly
|
|
|
|
1CB6DC3C000
|
unkown
|
page read and write
|
|
|
|
205B8713000
|
unkown
|
page read and write
|
|
|
|
1B2687F000
|
stack
|
page read and write
|
|
|
|
7FF59AEFC000
|
unkown image
|
page readonly
|
|
|
|
E42F97F000
|
stack
|
page read and write
|
|
|
|
89E3C8B000
|
unkown
|
page read and write
|
|
|
|
7FF5650A4000
|
unkown image
|
page readonly
|
|
|
|
23493402000
|
unkown
|
page read and write
|
|
|
|
7DF5B0090000
|
unkown image
|
page readonly
|
|
|
|
7FF50830A000
|
unkown image
|
page readonly
|
|
|
|
6461EFB000
|
stack
|
page read and write
|
|
|
|
10007A000
|
unkown
|
page read and write
|
|
|
|
11679A81000
|
unkown
|
page read and write
|
|
|
|
1DEAE640000
|
unkown image
|
page readonly
|
|
|
|
7FF5D201F000
|
unkown image
|
page readonly
|
|
|
|
7FF5762B6000
|
unkown image
|
page readonly
|
|
|
|
7FF576526000
|
unkown image
|
page readonly
|
|
|
|
7FF5057AB000
|
unkown image
|
page readonly
|
|
|
|
7FF59AD61000
|
unkown image
|
page readonly
|
|
|
|
11679A68000
|
unkown
|
page read and write
|
|
|
|
7FF5D1F5C000
|
unkown image
|
page readonly
|
|
|
|
7FF5082F7000
|
unkown image
|
page readonly
|
|
|
|
1CB6E180000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC6A000
|
unkown image
|
page readonly
|
|
|
|
7FF59AE74000
|
unkown image
|
page readonly
|
|
|
|
7DF58F850000
|
unkown image
|
page readonly
|
|
|
|
25167708000
|
unkown
|
page read and write
|
|
|
|
23493400000
|
unkown
|
page read and write
|
|
|
|
7FF5D1E93000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1F54000
|
unkown image
|
page readonly
|
|
|
|
89E3D8F000
|
stack
|
page read and write
|
|
|
|
1DEAE770000
|
unkown image
|
page readonly
|
|
|
|
247CD9A0000
|
unkown
|
page read and write
|
|
|
|
7DF4188F0000
|
unkown image
|
page readonly
|
|
|
|
7FF57671F000
|
unkown image
|
page readonly
|
|
|
|
7FF5082D7000
|
unkown image
|
page readonly
|
|
|
|
7FF57A7B1000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC75000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E41000
|
unkown image
|
page readonly
|
|
|
|
7FF5767E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5058DC000
|
unkown image
|
page readonly
|
|
|
|
23492F00000
|
unkown
|
page read and write
|
|
|
|
7FF505926000
|
unkown image
|
page readonly
|
|
|
|
7FF56F5BE000
|
unkown image
|
page readonly
|
|
|
|
AD0000
|
unkown image
|
page readonly
|
|
|
|
23492F83000
|
unkown
|
page read and write
|
|
|
|
23492F69000
|
unkown
|
page read and write
|
|
|
|
7DF5E7160000
|
unkown image
|
page readonly
|
|
|
|
7FF56FCCF000
|
unkown image
|
page readonly
|
|
|
|
1DEAE870000
|
unkown
|
page read and write
|
|
|
|
41C000
|
unkown image
|
page execute read
|
|
|
|
23492F4A000
|
unkown
|
page read and write
|
|
|
|
205B8629000
|
unkown
|
page read and write
|
|
|
|
2349264C000
|
unkown
|
page read and write
|
|
|
|
7DF58F840000
|
unkown image
|
page readonly
|
|
|
|
247CDDE0000
|
unkown image
|
page readonly
|
|
|
|
2410000
|
unkown
|
page read and write
|
|
|
|
1DEAE890000
|
unkown
|
page read and write
|
|
|
|
7FF57A7AA000
|
unkown image
|
page readonly
|
|
|
|
1CB6DD00000
|
unkown
|
page read and write
|
|
|
|
23493402000
|
unkown
|
page read and write
|
|
|
|
7DF584DE0000
|
unkown image
|
page readonly
|
|
|
|
7FF564FCB000
|
unkown image
|
page readonly
|
|
|
|
205B8602000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
23492F82000
|
unkown
|
page read and write
|
|
|
|
7FF5766BF000
|
unkown image
|
page readonly
|
|
|
|
116798C0000
|
unkown image
|
page readonly
|
|
|
|
7DF5B00A0000
|
unkown image
|
page readonly
|
|
|
|
11679A7F000
|
unkown
|
page read and write
|
|
|
|
1DEAEA00000
|
unkown image
|
page readonly
|
|
|
|
7FF56FCA7000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF78000
|
unkown image
|
page readonly
|
|
|
|
23492F84000
|
unkown
|
page read and write
|
|
|
|
7DF51AA22000
|
unkown image
|
page readonly
|
|
|
|
7DF51D450000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF56FCE6000
|
unkown image
|
page readonly
|
|
|
|
7FF5766F5000
|
unkown image
|
page readonly
|
|
|
|
7DF57A130000
|
unkown image
|
page readonly
|
|
|
|
E42FA7A000
|
stack
|
page read and write
|
|
|
|
1B265AF000
|
stack
|
page read and write
|
|
|
|
23493419000
|
unkown
|
page read and write
|
|
|
|
7FF56F7D2000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF47000
|
unkown image
|
page readonly
|
|
|
|
7FF508328000
|
unkown image
|
page readonly
|
|
|
|
205B8708000
|
unkown
|
page read and write
|
|
|
|
89E43FF000
|
stack
|
page read and write
|
|
|
|
25167650000
|
unkown
|
page read and write
|
|
|
|
7DF48D700000
|
unkown image
|
page readonly
|
|
|
|
7FF59ADB3000
|
unkown image
|
page readonly
|
|
|
|
23492F87000
|
unkown
|
page read and write
|
|
|
|
7FF50833D000
|
unkown image
|
page readonly
|
|
|
|
4D9000
|
heap private
|
page read and write
|
|
|
|
1001FE000
|
stack
|
page read and write
|
|
|
|
7DF478000000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC3F000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
7FF5D2066000
|
unkown image
|
page readonly
|
|
|
|
1DEAEC00000
|
unkown image
|
page readonly
|
|
|
|
7FF5764F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5083B2000
|
unkown image
|
page readonly
|
|
|
|
23492F87000
|
unkown
|
page read and write
|
|
|
|
7DF51D442000
|
unkown image
|
page readonly
|
|
|
|
23492530000
|
unkown image
|
page read and write
|
|
|
|
7DF5B00A0000
|
unkown image
|
page readonly
|
|
|
|
247CD9A0000
|
unkown
|
page read and write
|
|
|
|
205B8AD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5765D1000
|
unkown image
|
page readonly
|
|
|
|
23492F82000
|
unkown
|
page read and write
|
|
|
|
23492F77000
|
unkown
|
page read and write
|
|
|
|
23493419000
|
unkown
|
page read and write
|
|
|
|
251675A0000
|
unkown
|
page read and write
|
|
|
|
11679D20000
|
unkown image
|
page read and write
|
|
|
|
7FF57A728000
|
unkown image
|
page readonly
|
|
|
|
23492550000
|
unkown image
|
page readonly
|
|
|
|
4C0000
|
unkown
|
page read and write
|
|
|
|
EF5467C000
|
unkown
|
page read and write
|
|
|
|
7FF56FCBA000
|
unkown image
|
page readonly
|
|
|
|
7DF4ADF50000
|
unkown image
|
page readonly
|
|
|
|
1CB6DC02000
|
unkown
|
page read and write
|
|
|
|
7FF505485000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF10000
|
unkown image
|
page readonly
|
|
|
|
25167AD0000
|
unkown image
|
page readonly
|
|
|
|
247CD98F000
|
unkown
|
page read and write
|
|
|
|
247CD960000
|
heap default
|
page read and write
|
|
|
|
7FF507E86000
|
unkown image
|
page readonly
|
|
|
|
7FF56FCC4000
|
unkown image
|
page readonly
|
|
|
|
23492713000
|
unkown
|
page read and write
|
|
|
|
234925D0000
|
unkown
|
page read and write
|
|
|
|
E42FAFE000
|
stack
|
page read and write
|
|
|
|
205B8652000
|
unkown
|
page read and write
|
|
|
|
116799E3000
|
unkown
|
page read and write
|
|
|
|
205B864B000
|
unkown
|
page read and write
|
|
|
|
7FF59AF54000
|
unkown image
|
page readonly
|
|
|
|
64621FD000
|
stack
|
page read and write
|
|
|
|
64620FF000
|
stack
|
page read and write
|
|
|
|
23492F80000
|
unkown
|
page read and write
|
|
|
|
205B8665000
|
unkown
|
page read and write
|
|
|
|
7FF59AF6F000
|
unkown image
|
page readonly
|
|
|
|
7DF57A150000
|
unkown image
|
page readonly
|
|
|
|
7FF59AFFA000
|
unkown image
|
page readonly
|
|
|
|
7DF51AA20000
|
unkown image
|
page readonly
|
|
|
|
23492671000
|
unkown
|
page read and write
|
|
|
|
7FF57A6CB000
|
unkown image
|
page readonly
|
|
|
|
11679940000
|
unkown
|
page read and write
|
|
|
|
1CB6E000000
|
unkown image
|
page readonly
|
|
|
|
25167E02000
|
unkown
|
page read and write
|
|
|
|
7FF56FD5A000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1FEE000
|
unkown image
|
page readonly
|
|
|
|
7DF482CB0000
|
unkown image
|
page readonly
|
|
|
|
116799B8000
|
heap default
|
page read and write
|
|
|
|
7DF57A150000
|
unkown image
|
page readonly
|
|
|
|
23492708000
|
unkown
|
page read and write
|
|
|
|
7FF5082AC000
|
unkown image
|
page readonly
|
|
|
|
7FF576593000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC5C000
|
unkown image
|
page readonly
|
|
|
|
11679AA8000
|
unkown
|
page read and write
|
|
|
|
7FF56FAC1000
|
unkown image
|
page readonly
|
|
|
|
7FF56FC6E000
|
unkown image
|
page readonly
|
|
|
|
2A2D9360000
|
unkown image
|
page read and write
|
|
|
|
7FF5058DF000
|
unkown image
|
page readonly
|
|
|
|
7DF584E00000
|
unkown image
|
page readonly
|
|
|
|
7DF58B860000
|
unkown image
|
page readonly
|
|
|
|
234925A0000
|
heap default
|
page read and write
|
|
|
|
1CB6DC70000
|
unkown
|
page read and write
|
|
|
|
7FF576744000
|
unkown image
|
page readonly
|
|
|
|
7DF584DF2000
|
unkown image
|
page readonly
|
|
|
|
7FF508339000
|
unkown image
|
page readonly
|
|
|
|
23492FA4000
|
unkown
|
page read and write
|
|
|
|
7FF59AC87000
|
unkown image
|
page readonly
|
|
|
|
7FF56FD54000
|
unkown image
|
page readonly
|
|
|
|
7FF576690000
|
unkown image
|
page readonly
|
|
|
|
7FF576467000
|
unkown image
|
page readonly
|
|
|
|
7DF5B0080000
|
unkown image
|
page readonly
|
|
|
|
7FF5D203A000
|
unkown image
|
page readonly
|
|
|
|
23493402000
|
unkown
|
page read and write
|
|
|
|
7FF5081BB000
|
unkown image
|
page readonly
|
|
|
|
234926C0000
|
unkown
|
page read and write
|
|
|
|
2349263C000
|
unkown
|
page read and write
|
|
|
|
25167602000
|
unkown
|
page read and write
|
|
|
|
234926C3000
|
unkown
|
page read and write
|
|
|
|
205B8670000
|
unkown
|
page read and write
|
|
|
|
23492F67000
|
unkown
|
page read and write
|
|
|
|
7FF508336000
|
unkown image
|
page readonly
|
|
|
|
25167C50000
|
unkown image
|
page readonly
|
|
|
|
7FF5082EC000
|
unkown image
|
page readonly
|
|
|
|
23492F69000
|
unkown
|
page read and write
|
|
|
|
116798D0000
|
unkown image
|
page readonly
|
|
|
|
205B8590000
|
unkown image
|
page readonly
|
|
|
|
23492DD0000
|
unkown image
|
page read and write
|
|
|
|
7FF505918000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1FDA000
|
unkown image
|
page readonly
|
|
|
|
10067F000
|
stack
|
page read and write
|
|
|
|
247CD9A0000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF7E000
|
unkown image
|
page readonly
|
|
|
|
EF5497B000
|
stack
|
page read and write
|
|
|
|
205B88D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5E7170000
|
unkown image
|
page readonly
|
|
|
|
10017E000
|
stack
|
page read and write
|
|
|
|
116799B0000
|
heap default
|
page read and write
|
|
|
|
E42F679000
|
stack
|
page read and write
|
|
|
|
7DF58F840000
|
unkown image
|
page readonly
|
|
|
|
205B863C000
|
unkown
|
page read and write
|
|
|
|
7FF505627000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF1B000
|
unkown image
|
page readonly
|
|
|
|
7DF584DE0000
|
unkown image
|
page readonly
|
|
|
|
421000
|
unkown image
|
page read and write
|
|
|
|
7FF59AF86000
|
unkown image
|
page readonly
|
|
|
|
23492600000
|
unkown
|
page read and write
|
|
|
|
7FF56FCE9000
|
unkown image
|
page readonly
|
|
|
|
7FF56500A000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF8D000
|
unkown image
|
page readonly
|
|
|
|
1CB6DC13000
|
unkown
|
page read and write
|
|
|
|
7FF5083B1000
|
unkown image
|
page readonly
|
|
|
|
7FF576766000
|
unkown image
|
page readonly
|
|
|
|
23492F87000
|
unkown
|
page read and write
|
|
|
|
7FF57A6EC000
|
unkown image
|
page readonly
|
|
|
|
247CD9A0000
|
unkown
|
page read and write
|
|
|
|
7DF57A140000
|
unkown image
|
page readonly
|
|
|
|
11679AA9000
|
unkown
|
page read and write
|
|
|
|
7FF50820D000
|
unkown image
|
page readonly
|
|
|
|
7FF56FCDE000
|
unkown image
|
page readonly
|
|
|
|
23492FCC000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7DF5E7180000
|
unkown image
|
page readonly
|
|
|
|
23492DC0000
|
unkown
|
page read and write
|
|
|
|
1CB6DAD0000
|
heap default
|
page read and write
|
|
|
|
234926E8000
|
unkown
|
page read and write
|
|
|
|
7FF57671C000
|
unkown image
|
page readonly
|
|
|
|
7DF58F832000
|
unkown image
|
page readonly
|
|
|
|
7FF59AF5A000
|
unkown image
|
page readonly
|
|
|
|
23492FB1000
|
unkown
|
page read and write
|
|
|
|
2A2D9380000
|
unkown image
|
page readonly
|
|
|
|
7DF58F842000
|
unkown image
|
page readonly
|
|
|
|
2A2D93A0000
|
unkown image
|
page readonly
|
|
|
|
11679A9B000
|
unkown
|
page read and write
|
|
|
|
7DF57A132000
|
unkown image
|
page readonly
|
|
|
|
11679AA3000
|
unkown
|
page read and write
|
|
|
|
1DEAE790000
|
unkown
|
page read and write
|
|
|
|
205B8650000
|
unkown
|
page read and write
|
|
|
|
23492F8A000
|
unkown
|
page read and write
|
|
|
|
7FF505904000
|
unkown image
|
page readonly
|
|
|
|
7DF58F832000
|
unkown image
|
page readonly
|
|
|
|
23492FA2000
|
unkown
|
page read and write
|
|
|
|
11679AA0000
|
unkown
|
page read and write
|
|
|
|
116799F5000
|
unkown
|
page read and write
|
|
|
|
23492DC0000
|
unkown
|
page read and write
|
|
|
|
7DF5E7162000
|
unkown image
|
page readonly
|
|
|
|
23492F76000
|
unkown
|
page read and write
|
|
|
|
7DF57A142000
|
unkown image
|
page readonly
|
|
|
|
2170000
|
unkown image
|
page readonly
|
|
|
|
23493463000
|
unkown
|
page read and write
|
|
|
|
11679D10000
|
unkown
|
page read and write
|
|
|
|
25167570000
|
heap default
|
page read and write
|
|
|
|
7DF58B862000
|
unkown image
|
page readonly
|
|
|
|
7FF5D20D4000
|
unkown image
|
page readonly
|
|
|
|
23492F87000
|
unkown
|
page read and write
|
|
|
|
7FF564FF8000
|
unkown image
|
page readonly
|
|
|
|
23492F48000
|
unkown
|
page read and write
|
|
|
|
1CB6DA70000
|
heap private
|
page read and write
|
|
|
|
7FF59AE63000
|
unkown image
|
page readonly
|
|
|
|
7FF5058F4000
|
unkown image
|
page readonly
|
|
|
|
7DF584DE2000
|
unkown image
|
page readonly
|
|
|
|
7FF576692000
|
unkown image
|
page readonly
|
|
|
|
50A000
|
heap default
|
page read and write
|
|
|
|
7FF56FC9C000
|
unkown image
|
page readonly
|
|
|
|
7FF576643000
|
unkown image
|
page readonly
|
|
|
|
EF546FE000
|
stack
|
page read and write
|
|
|
|
25167656000
|
unkown
|
page read and write
|
|
|
|
646199B000
|
unkown
|
page read and write
|
|
|
|
1005FF000
|
stack
|
page read and write
|
|
|
|
7FF57A72E000
|
unkown image
|
page readonly
|
|
|
|
25167520000
|
unkown image
|
page readonly
|
|
|
|
23492F67000
|
unkown
|
page read and write
|
|
|
|
11679A39000
|
unkown
|
page read and write
|
|
|
|
7FF5082CB000
|
unkown image
|
page readonly
|
|
|
|
23492F24000
|
unkown
|
page read and write
|
|
|
|
7DF58B870000
|
unkown image
|
page readonly
|
|
|
|
2A2D98B0000
|
unkown image
|
page readonly
|
|
|
|
2A2D95D0000
|
unkown
|
page read and write
|
|
|
|
2516768A000
|
unkown
|
page read and write
|
|
|
|
247CD820000
|
unkown image
|
page read and write
|
|
|
|
234926E2000
|
unkown
|
page read and write
|
|
|
|
1CB6DAB0000
|
unkown image
|
page readonly
|
|
|
|
23492FAC000
|
unkown
|
page read and write
|
|
|
|
23492F87000
|
unkown
|
page read and write
|
|
|
|
E42F878000
|
stack
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF56F901000
|
unkown image
|
page readonly
|
|
|
|
EF54B7E000
|
stack
|
page read and write
|
|
|
|
247CDAB0000
|
unkown image
|
page readonly
|
|
|
|
23492F85000
|
unkown
|
page read and write
|
|
|
|
23492F67000
|
unkown
|
page read and write
|
|
|
|
7FF50832E000
|
unkown image
|
page readonly
|
|
|
|
1CB6DC4E000
|
unkown
|
page read and write
|
|
There are 872 hidden memdumps, click here to show them.