Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
RFQ 001030112021#U00b7pdf.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck
|
very short file (no magic)
|
dropped
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\bc49718863ee53e026d805ec372039e9_d06ed635-68f6-4e9a-955c-4899f5f57b9a
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\RFQ 001030112021#U00b7pdf.exe
|
"C:\Users\user\Desktop\RFQ 001030112021#U00b7pdf.exe"
|
|
|
|
C:\Users\user\Desktop\RFQ 001030112021#U00b7pdf.exe
|
"C:\Users\user\Desktop\RFQ 001030112021#U00b7pdf.exe"
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://63.250.34.171/tickets.php?id=277N
|
unknown
|
|
|
|
http://63.250.34.171/tickets.php?id=277
|
63.250.34.171
|
|
|
|
https://doc-00-50-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/tmgkbuuo
|
unknown
|
|
|
|
https://doc-00-50-docs.googleusercontent.com/t
|
unknown
|
|
|
|
https://doc-00-50-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/tmgkbuuoqg7e2eb3u8b2c66mt8m0nijc/1638356250000/03026244708369606156/*/1f5uP5o0CfHZv_GAVqkAqahPOSxgGlgCb?e=download
|
216.58.198.33
|
|
|
|
https://drive.google.com/
|
unknown
|
|
|
|
https://doc-00-50-docs.googleusercontent.com/p
|
unknown
|
|
|
|
https://doc-00-50-docs.googleusercontent.com/:
|
unknown
|
|
|
|
https://doc-00-50-docs.googleusercontent.com/
|
unknown
|
|
|
|
https://doc-00-50-docs.googleusercontent.com/)
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/report-to/gse_l9ocaq
|
unknown
|
|
There are 1 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
drive.google.com
|
142.250.180.110
|
|
|
|
googlehosted.l.googleusercontent.com
|
216.58.198.33
|
|
|
|
doc-00-50-docs.googleusercontent.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
63.250.34.171
|
unknown
|
United States
|
|
|
|
216.58.198.33
|
googlehosted.l.googleusercontent.com
|
United States
|
|
|
|
142.250.180.110
|
drive.google.com
|
United States
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
20B0000
|
unkown
|
page execute and read and write
|
|
|
|
560000
|
unkown
|
page execute and read and write
|
|
|
|
7DF5E3BD0000
|
unkown image
|
page readonly
|
|
|
|
29B3EC49000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA14000
|
unkown image
|
page readonly
|
|
|
|
23570250000
|
unkown image
|
page readonly
|
|
|
|
18221055000
|
unkown
|
page read and write
|
|
|
|
93F000
|
stack
|
page read and write
|
|
|
|
7FF591917000
|
unkown image
|
page readonly
|
|
|
|
7FF507DE5000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
9E4000
|
heap default
|
page read and write
|
|
|
|
7FF5125BA000
|
unkown image
|
page readonly
|
|
|
|
7DF5276F0000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1C2C000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF591751000
|
unkown image
|
page readonly
|
|
|
|
800000
|
unkown image
|
page readonly
|
|
|
|
7DF5E3BB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1C0B000
|
unkown image
|
page readonly
|
|
|
|
C79CDFF000
|
stack
|
page read and write
|
|
|
|
A42000
|
unkown
|
page read and write
|
|
|
|
7DF527700000
|
unkown image
|
page readonly
|
|
|
|
1E6F8000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA2A000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6D90000
|
unkown image
|
page readonly
|
|
|
|
7FF512654000
|
unkown image
|
page readonly
|
|
|
|
7FF505EE7000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1822108A000
|
unkown
|
page read and write
|
|
|
|
18221113000
|
unkown
|
page read and write
|
|
|
|
25A0DD9A000
|
unkown
|
page read and write
|
|
|
|
25A0D300000
|
unkown image
|
page readonly
|
|
|
|
1E7C6A02000
|
unkown
|
page read and write
|
|
|
|
7DF5E3BC0000
|
unkown image
|
page readonly
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
2AB2EFB5000
|
heap private
|
page read and write
|
|
|
|
25A0DDA0000
|
unkown
|
page read and write
|
|
|
|
AE07F6B000
|
unkown
|
page read and write
|
|
|
|
1E7C6120000
|
unkown image
|
page read and write
|
|
|
|
7DF5F6D72000
|
unkown image
|
page readonly
|
|
|
|
1E5DE000
|
stack
|
page read and write
|
|
|
|
7DF5E3BC0000
|
unkown image
|
page readonly
|
|
|
|
3FC717F000
|
stack
|
page read and write
|
|
|
|
25A0D516000
|
unkown
|
page read and write
|
|
|
|
7FF505F3E000
|
unkown image
|
page readonly
|
|
|
|
7DF51CF50000
|
unkown image
|
page readonly
|
|
|
|
1E6DF000
|
stack
|
page read and write
|
|
|
|
45E000
|
stack
|
page read and write
|
|
|
|
AE0867F000
|
stack
|
page read and write
|
|
|
|
7FF5E1C54000
|
unkown image
|
page readonly
|
|
|
|
25A0DDC2000
|
unkown
|
page read and write
|
|
|
|
25A0DDC2000
|
unkown
|
page read and write
|
|
|
|
7FF51256A000
|
unkown image
|
page readonly
|
|
|
|
7FF59190B000
|
unkown image
|
page readonly
|
|
|
|
41C000
|
unkown image
|
page readonly
|
|
|
|
25A0D44F000
|
unkown
|
page read and write
|
|
|
|
7FF507ED2000
|
unkown image
|
page readonly
|
|
|
|
EDFD7DB000
|
unkown
|
page read and write
|
|
|
|
7FF5E1553000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE881000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
A39000
|
unkown
|
page read and write
|
|
|
|
29B3F250000
|
unkown image
|
page readonly
|
|
|
|
1822103C000
|
unkown
|
page read and write
|
|
|
|
25A0D43C000
|
unkown
|
page read and write
|
|
|
|
8F0000
|
unkown image
|
page readonly
|
|
|
|
18220F70000
|
unkown image
|
page readonly
|
|
|
|
25A0DDA2000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF512661000
|
unkown image
|
page readonly
|
|
|
|
25A0D2F0000
|
heap private
|
page read and write
|
|
|
|
7DF5A6A70000
|
unkown image
|
page readonly
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
7FF507C31000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
A9016EB000
|
unkown
|
page read and write
|
|
|
|
7FF505F38000
|
unkown image
|
page readonly
|
|
|
|
7FF51255A000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE9F3000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
29B3EC4B000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
AE07FEF000
|
stack
|
page read and write
|
|
|
|
33A000
|
unkown
|
page read and write
|
|
|
|
2AB2EC36000
|
unkown
|
page read and write
|
|
|
|
1E7C624C000
|
unkown
|
page read and write
|
|
|
|
7DF4A4940000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5E1C79000
|
unkown image
|
page readonly
|
|
|
|
7FF5125A7000
|
unkown image
|
page readonly
|
|
|
|
25A0D429000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
1822104A000
|
unkown
|
page read and write
|
|
|
|
1E1CD000
|
stack
|
page read and write
|
|
|
|
41A000
|
unkown image
|
page read and write
|
|
|
|
25A0DD66000
|
unkown
|
page read and write
|
|
|
|
2356FB30000
|
unkown image
|
page readonly
|
|
|
|
25A0DDA2000
|
unkown
|
page read and write
|
|
|
|
18220F50000
|
unkown image
|
page read and write
|
|
|
|
274000
|
unkown
|
page read and write
|
|
|
|
25A0E300000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE9E2000
|
unkown image
|
page readonly
|
|
|
|
1E7C6308000
|
unkown
|
page read and write
|
|
|
|
7DF51CF70000
|
unkown image
|
page readonly
|
|
|
|
2AB2EC48000
|
unkown
|
page read and write
|
|
|
|
7FF59195F000
|
unkown image
|
page readonly
|
|
|
|
29B3EB90000
|
unkown image
|
page readonly
|
|
|
|
25D0000
|
heap private
|
page read and write
|
|
|
|
97E000
|
stack
|
page read and write
|
|
|
|
1E728000
|
unkown
|
page read and write
|
|
|
|
7DF5276E0000
|
unkown image
|
page readonly
|
|
|
|
1E7C6170000
|
unkown image
|
page readonly
|
|
|
|
1E7C6270000
|
unkown
|
page read and write
|
|
|
|
7FF5917FE000
|
unkown image
|
page readonly
|
|
|
|
7FF512575000
|
unkown image
|
page readonly
|
|
|
|
29B3ED13000
|
unkown
|
page read and write
|
|
|
|
25A0D44D000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
25A0D4AD000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
1822104F000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7DF5E3BC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE5A2000
|
unkown image
|
page readonly
|
|
|
|
A901DF7000
|
stack
|
page read and write
|
|
|
|
7DF51B040000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEAB9000
|
unkown image
|
page readonly
|
|
|
|
2356FB10000
|
unkown image
|
page read and write
|
|
|
|
7FF5CE342000
|
unkown image
|
page readonly
|
|
|
|
2420000
|
unkown
|
page read and write
|
|
|
|
7FF505C84000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1CE4000
|
unkown image
|
page readonly
|
|
|
|
25A0DDA5000
|
unkown
|
page read and write
|
|
|
|
1E7C6302000
|
unkown
|
page read and write
|
|
|
|
7FF507E48000
|
unkown image
|
page readonly
|
|
|
|
25A0DD00000
|
unkown
|
page read and write
|
|
|
|
7FF591979000
|
unkown image
|
page readonly
|
|
|
|
7FF507E59000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE840000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6A90000
|
unkown image
|
page readonly
|
|
|
|
3FC6CFF000
|
stack
|
page read and write
|
|
|
|
2356FD13000
|
unkown
|
page read and write
|
|
|
|
1E735000
|
unkown
|
page read and write
|
|
|
|
2AB2EBE0000
|
unkown image
|
page readonly
|
|
|
|
2356FC4D000
|
unkown
|
page read and write
|
|
|
|
7FF505DB1000
|
unkown image
|
page readonly
|
|
|
|
25A0DD25000
|
unkown
|
page read and write
|
|
|
|
1E7C6254000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A72000
|
unkown image
|
page readonly
|
|
|
|
25A0D4A8000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA3A000
|
unkown image
|
page readonly
|
|
|
|
2356FC4E000
|
unkown
|
page read and write
|
|
|
|
1E7C6140000
|
unkown image
|
page readonly
|
|
|
|
7FF5079A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE51E000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEB31000
|
unkown image
|
page readonly
|
|
|
|
7FF5125CF000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
2356FC29000
|
unkown
|
page read and write
|
|
|
|
C79CCF9000
|
stack
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
E7AD07E000
|
stack
|
page read and write
|
|
|
|
7FF5CEAAE000
|
unkown image
|
page readonly
|
|
|
|
7FF512451000
|
unkown image
|
page readonly
|
|
|
|
18220F60000
|
heap private
|
page read and write
|
|
|
|
7FF505A96000
|
unkown image
|
page readonly
|
|
|
|
7FF5122E7000
|
unkown image
|
page readonly
|
|
|
|
2AB2EB40000
|
unkown image
|
page readonly
|
|
|
|
2356FC48000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA45000
|
unkown image
|
page readonly
|
|
|
|
18220F70000
|
unkown image
|
page readonly
|
|
|
|
25A0D400000
|
unkown
|
page read and write
|
|
|
|
25A0D508000
|
unkown
|
page read and write
|
|
|
|
25A0D413000
|
unkown
|
page read and write
|
|
|
|
7FF5918EA000
|
unkown image
|
page readonly
|
|
|
|
25A0DDB5000
|
unkown
|
page read and write
|
|
|
|
25A0D8D0000
|
unkown image
|
page readonly
|
|
|
|
182214D0000
|
unkown image
|
page readonly
|
|
|
|
41C000
|
unkown image
|
page readonly
|
|
|
|
AE08577000
|
stack
|
page read and write
|
|
|
|
25A0E202000
|
unkown
|
page read and write
|
|
|
|
25A0E202000
|
unkown
|
page read and write
|
|
|
|
7FF505FC1000
|
unkown image
|
page readonly
|
|
|
|
25A0D330000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1C4A000
|
unkown image
|
page readonly
|
|
|
|
2AB2EC4F000
|
unkown
|
page read and write
|
|
|
|
29B3EC8C000
|
unkown
|
page read and write
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
7FF51259F000
|
unkown image
|
page readonly
|
|
|
|
7FF511DD2000
|
unkown image
|
page readonly
|
|
|
|
A39000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
25A0DD6D000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF505F07000
|
unkown image
|
page readonly
|
|
|
|
7FF507ED1000
|
unkown image
|
page readonly
|
|
|
|
2AB2EC51000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A90000
|
unkown image
|
page readonly
|
|
|
|
7FF505E23000
|
unkown image
|
page readonly
|
|
|
|
7DF51B050000
|
unkown image
|
page readonly
|
|
|
|
25A0DD5F000
|
unkown
|
page read and write
|
|
|
|
29B3EC29000
|
unkown
|
page read and write
|
|
|
|
18221102000
|
unkown
|
page read and write
|
|
|
|
7FF5CE5B2000
|
unkown image
|
page readonly
|
|
|
|
AE0827F000
|
stack
|
page read and write
|
|
|
|
1DEF0000
|
unkown
|
page read and write
|
|
|
|
7FF51257B000
|
unkown image
|
page readonly
|
|
|
|
7FF507E2A000
|
unkown image
|
page readonly
|
|
|
|
29B3F402000
|
unkown
|
page read and write
|
|
|
|
7FF5914C6000
|
unkown image
|
page readonly
|
|
|
|
25A0D4DE000
|
unkown
|
page read and write
|
|
|
|
41C000
|
unkown image
|
page readonly
|
|
|
|
AE0847B000
|
stack
|
page read and write
|
|
|
|
A90176F000
|
stack
|
page read and write
|
|
|
|
1DCAE000
|
stack
|
page read and write
|
|
|
|
7DF4E1A80000
|
unkown image
|
page readonly
|
|
|
|
25A0DD80000
|
unkown
|
page read and write
|
|
|
|
A3B000
|
unkown
|
page read and write
|
|
|
|
2356FC50000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
3FC6F77000
|
stack
|
page read and write
|
|
|
|
18221108000
|
unkown
|
page read and write
|
|
|
|
7FF505E1D000
|
unkown image
|
page readonly
|
|
|
|
7FF5124BD000
|
unkown image
|
page readonly
|
|
|
|
7FF5919E4000
|
unkown image
|
page readonly
|
|
|
|
7DF4F4C40000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEA57000
|
unkown image
|
page readonly
|
|
|
|
1E7C624D000
|
unkown
|
page read and write
|
|
|
|
7FF5CE98D000
|
unkown image
|
page readonly
|
|
|
|
7FF591976000
|
unkown image
|
page readonly
|
|
|
|
262A000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
47A000
|
heap default
|
page read and write
|
|
|
|
25A0DDA2000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A80000
|
unkown image
|
page readonly
|
|
|
|
2356FC7A000
|
unkown
|
page read and write
|
|
|
|
29B3EC82000
|
unkown
|
page read and write
|
|
|
|
25A0DC02000
|
unkown
|
page read and write
|
|
|
|
7FF5079A6000
|
unkown image
|
page readonly
|
|
|
|
2AB2EBA0000
|
unkown
|
page read and write
|
|
|
|
7FF505ED0000
|
unkown image
|
page readonly
|
|
|
|
7FF512130000
|
unkown image
|
page readonly
|
|
|
|
EDFDDF7000
|
stack
|
page read and write
|
|
|
|
830000
|
heap default
|
page read and write
|
|
|
|
2AB2EC36000
|
heap default
|
page read and write
|
|
|
|
2AB2EDF0000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF507E4E000
|
unkown image
|
page readonly
|
|
|
|
7FF507E24000
|
unkown image
|
page readonly
|
|
|
|
3FC707F000
|
stack
|
page read and write
|
|
|
|
7DF5A6A82000
|
unkown image
|
page readonly
|
|
|
|
7DF51CF62000
|
unkown image
|
page readonly
|
|
|
|
7DF51CF60000
|
unkown image
|
page readonly
|
|
|
|
25A0DD5D000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF507B94000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
29B3EBD0000
|
unkown image
|
page readonly
|
|
|
|
1E7C6130000
|
heap private
|
page read and write
|
|
|
|
7FF59194A000
|
unkown image
|
page readonly
|
|
|
|
7FF5919F1000
|
unkown image
|
page readonly
|
|
|
|
7FF5124D4000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE8E3000
|
unkown image
|
page readonly
|
|
|
|
E7ACB7B000
|
stack
|
page read and write
|
|
|
|
29B3EC4F000
|
unkown
|
page read and write
|
|
|
|
7DF51CF62000
|
unkown image
|
page readonly
|
|
|
|
29B3EBC0000
|
heap default
|
page read and write
|
|
|
|
2356FC49000
|
unkown
|
page read and write
|
|
|
|
7FF505ECA000
|
unkown image
|
page readonly
|
|
|
|
2356FB20000
|
heap private
|
page read and write
|
|
|
|
25A0D380000
|
unkown
|
page read and write
|
|
|
|
7FF5E1C6E000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7DF51B060000
|
unkown image
|
page readonly
|
|
|
|
2356FC3C000
|
unkown
|
page read and write
|
|
|
|
7FF591853000
|
unkown image
|
page readonly
|
|
|
|
460000
|
unkown image
|
page readonly
|
|
|
|
7FF5123C1000
|
unkown image
|
page readonly
|
|
|
|
7FF505FC2000
|
unkown image
|
page readonly
|
|
|
|
25A0DD92000
|
unkown
|
page read and write
|
|
|
|
7DF5E3BB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6D80000
|
unkown image
|
page readonly
|
|
|
|
7FF505D73000
|
unkown image
|
page readonly
|
|
|
|
1E7C6229000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5CE5AE000
|
unkown image
|
page readonly
|
|
|
|
7DF51CF52000
|
unkown image
|
page readonly
|
|
|
|
1E7C6288000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
25A0DD4C000
|
unkown
|
page read and write
|
|
|
|
7FF507B57000
|
unkown image
|
page readonly
|
|
|
|
18220FA0000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page execute read
|
|
|
|
41C000
|
unkown image
|
page readonly
|
|
|
|
470000
|
heap default
|
page read and write
|
|
|
|
41C000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1CEA000
|
unkown image
|
page readonly
|
|
|
|
2A60000
|
unkown image
|
page readonly
|
|
|
|
491000
|
heap default
|
page read and write
|
|
|
|
25A0D3A0000
|
unkown image
|
page readonly
|
|
|
|
18221100000
|
unkown
|
page read and write
|
|
|
|
7FF512145000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
18220FD0000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7DF5F6D70000
|
unkown image
|
page readonly
|
|
|
|
18221054000
|
unkown
|
page read and write
|
|
|
|
7FF505AA5000
|
unkown image
|
page readonly
|
|
|
|
25A0DD61000
|
unkown
|
page read and write
|
|
|
|
7FF505732000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE9AC000
|
unkown image
|
page readonly
|
|
|
|
1E7C6313000
|
unkown
|
page read and write
|
|
|
|
25A0D3F0000
|
unkown
|
page read and write
|
|
|
|
7FF505F4D000
|
unkown image
|
page readonly
|
|
|
|
7FF591954000
|
unkown image
|
page readonly
|
|
|
|
60000
|
unkown
|
page read and write
|
|
|
|
7DF5E3BC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE93B000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
C79C9CF000
|
stack
|
page read and write
|
|
|
|
5AE000
|
stack
|
page read and write
|
|
|
|
1E7C6213000
|
unkown
|
page read and write
|
|
|
|
7DF51B052000
|
unkown image
|
page readonly
|
|
|
|
18221650000
|
unkown image
|
page readonly
|
|
|
|
25A0D4A1000
|
unkown
|
page read and write
|
|
|
|
7FF59184D000
|
unkown image
|
page readonly
|
|
|
|
A901BFB000
|
stack
|
page read and write
|
|
|
|
7FF5CE606000
|
unkown image
|
page readonly
|
|
|
|
18221051000
|
unkown
|
page read and write
|
|
|
|
1E7C627E000
|
unkown
|
page read and write
|
|
|
|
25A0D350000
|
heap default
|
page read and write
|
|
|
|
29B3EBF0000
|
unkown
|
page read and write
|
|
|
|
7FF591168000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE9E0000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7DF51B042000
|
unkown image
|
page readonly
|
|
|
|
25A0E26A000
|
unkown
|
page read and write
|
|
|
|
7DF51CF50000
|
unkown image
|
page readonly
|
|
|
|
2356FB50000
|
unkown image
|
page readonly
|
|
|
|
25A0DD9A000
|
unkown
|
page read and write
|
|
|
|
7FF5CE657000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
25A0E26A000
|
unkown
|
page read and write
|
|
|
|
C79CD7A000
|
stack
|
page read and write
|
|
|
|
EDFDAFF000
|
stack
|
page read and write
|
|
|
|
7FF51246B000
|
unkown image
|
page readonly
|
|
|
|
AE0877F000
|
stack
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
9E3000
|
unkown
|
page read and write
|
|
|
|
2AB2EF70000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6D70000
|
unkown image
|
page readonly
|
|
|
|
7FF507E17000
|
unkown image
|
page readonly
|
|
|
|
7EF000
|
stack
|
page read and write
|
|
|
|
3FC6D7F000
|
stack
|
page read and write
|
|
|
|
7DF5276E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5125ED000
|
unkown image
|
page readonly
|
|
|
|
7FF507DEB000
|
unkown image
|
page readonly
|
|
|
|
C70000
|
unkown image
|
page readonly
|
|
|
|
7FF5079B5000
|
unkown image
|
page readonly
|
|
|
|
25A0D488000
|
unkown
|
page read and write
|
|
|
|
25A0DA50000
|
unkown image
|
page readonly
|
|
|
|
3FC6C7B000
|
unkown
|
page read and write
|
|
|
|
7FF505F46000
|
unkown image
|
page readonly
|
|
|
|
7FF507DDE000
|
unkown image
|
page readonly
|
|
|
|
1E7C6190000
|
heap default
|
page read and write
|
|
|
|
25A0DD9A000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1CF2000
|
unkown image
|
page readonly
|
|
|
|
2356FB80000
|
heap default
|
page read and write
|
|
|
|
7FF5E1C5E000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEA2C000
|
unkown image
|
page readonly
|
|
|
|
25A0DB30000
|
unkown image
|
page write copy
|
|
|
|
A901EFE000
|
stack
|
page read and write
|
|
|
|
29B3ED08000
|
unkown
|
page read and write
|
|
|
|
28C0000
|
unkown
|
page read and write
|
|
|
|
7DF5276E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5125C4000
|
unkown image
|
page readonly
|
|
|
|
7FF507D4C000
|
unkown image
|
page readonly
|
|
|
|
C79CE7C000
|
stack
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
C79CC7F000
|
stack
|
page read and write
|
|
|
|
7FF591905000
|
unkown image
|
page readonly
|
|
|
|
E7AC87C000
|
unkown
|
page read and write
|
|
|
|
2B30000
|
unkown
|
page read and write
|
|
|
|
7DF51B042000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE943000
|
unkown image
|
page readonly
|
|
|
|
25A0D513000
|
unkown
|
page read and write
|
|
|
|
25A0DDBB000
|
unkown
|
page read and write
|
|
|
|
25A0DD9C000
|
unkown
|
page read and write
|
|
|
|
7FF5CE901000
|
unkown image
|
page readonly
|
|
|
|
7FF5918FA000
|
unkown image
|
page readonly
|
|
|
|
29B3EBA0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5125E9000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
2AB2EFC0000
|
unkown image
|
page readonly
|
|
|
|
2AB2EC53000
|
unkown
|
page read and write
|
|
|
|
18221802000
|
unkown
|
page read and write
|
|
|
|
7FF507E0C000
|
unkown image
|
page readonly
|
|
|
|
1822104B000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA4B000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE9A4000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1C44000
|
unkown image
|
page readonly
|
|
|
|
1B0000
|
unkown
|
page read and write
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
2356FC71000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
25A0D481000
|
unkown
|
page read and write
|
|
|
|
2356FB30000
|
unkown image
|
page readonly
|
|
|
|
7FF505D21000
|
unkown image
|
page readonly
|
|
|
|
7DF4255B0000
|
unkown image
|
page readonly
|
|
|
|
7FF591900000
|
unkown image
|
page readonly
|
|
|
|
25A0DD69000
|
unkown
|
page read and write
|
|
|
|
7EE000
|
stack
|
page read and write
|
|
|
|
7FF507CDE000
|
unkown image
|
page readonly
|
|
|
|
7DF5276F0000
|
unkown image
|
page readonly
|
|
|
|
25A0D4BD000
|
unkown
|
page read and write
|
|
|
|
25A0E202000
|
unkown
|
page read and write
|
|
|
|
7DF51B040000
|
unkown image
|
page readonly
|
|
|
|
1822107E000
|
unkown
|
page read and write
|
|
|
|
25A0E302000
|
unkown
|
page read and write
|
|
|
|
25A0DD5D000
|
unkown
|
page read and write
|
|
|
|
E7ACA7C000
|
stack
|
page read and write
|
|
|
|
7FF507D44000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5914C0000
|
unkown image
|
page readonly
|
|
|
|
7FF512570000
|
unkown image
|
page readonly
|
|
|
|
A33000
|
unkown
|
page read and write
|
|
|
|
7FF505738000
|
unkown image
|
page readonly
|
|
|
|
29B3EC00000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
2356FC02000
|
unkown
|
page read and write
|
|
|
|
235700D0000
|
unkown image
|
page readonly
|
|
|
|
B7F000
|
stack
|
page read and write
|
|
|
|
25A0D455000
|
unkown
|
page read and write
|
|
|
|
2356FD00000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF591937000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
2356FD08000
|
unkown
|
page read and write
|
|
|
|
7FF5CEB32000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE921000
|
unkown image
|
page readonly
|
|
|
|
25A0DDC3000
|
unkown
|
page read and write
|
|
|
|
7DF5F6D82000
|
unkown image
|
page readonly
|
|
|
|
7FF59186C000
|
unkown image
|
page readonly
|
|
|
|
E7ACE78000
|
stack
|
page read and write
|
|
|
|
7FF5124DC000
|
unkown image
|
page readonly
|
|
|
|
2AB2EB40000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1C68000
|
unkown image
|
page readonly
|
|
|
|
1E7C6160000
|
unkown image
|
page readonly
|
|
|
|
18221047000
|
unkown
|
page read and write
|
|
|
|
2356FC4C000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1DC30000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA77000
|
unkown image
|
page readonly
|
|
|
|
25A0DDB3000
|
unkown
|
page read and write
|
|
|
|
7FF507642000
|
unkown image
|
page readonly
|
|
|
|
7FF512136000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1C38000
|
unkown image
|
page readonly
|
|
|
|
7DF5E3BD0000
|
unkown image
|
page readonly
|
|
|
|
7DF5276E2000
|
unkown image
|
page readonly
|
|
|
|
29B3EC02000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA8A000
|
unkown image
|
page readonly
|
|
|
|
7FF507E5D000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
2AB2EFB0000
|
heap private
|
page read and write
|
|
|
|
7DF5F6D82000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF505EFF000
|
unkown image
|
page readonly
|
|
|
|
1E2CA000
|
stack
|
page read and write
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
9F2000
|
heap default
|
page read and write
|
|
|
|
20F0000
|
heap private
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
29B3EC4C000
|
unkown
|
page read and write
|
|
|
|
1E7C6246000
|
unkown
|
page read and write
|
|
|
|
7FF505EFC000
|
unkown image
|
page readonly
|
|
|
|
7FF507C83000
|
unkown image
|
page readonly
|
|
|
|
25A0E202000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
2356FB60000
|
unkown image
|
page readonly
|
|
|
|
7DF51B052000
|
unkown image
|
page readonly
|
|
|
|
25A0D459000
|
unkown
|
page read and write
|
|
|
|
7FF51256E000
|
unkown image
|
page readonly
|
|
|
|
7DF5E3BB2000
|
unkown image
|
page readonly
|
|
|
|
1DDEE000
|
stack
|
page read and write
|
|
|
|
7FF505EDB000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEA94000
|
unkown image
|
page readonly
|
|
|
|
7FF507DE0000
|
unkown image
|
page readonly
|
|
|
|
2356FC00000
|
unkown
|
page read and write
|
|
|
|
7FF5918FE000
|
unkown image
|
page readonly
|
|
|
|
7FF507E56000
|
unkown image
|
page readonly
|
|
|
|
2AB2EC5F000
|
unkown
|
page read and write
|
|
|
|
7FF5CE93E000
|
unkown image
|
page readonly
|
|
|
|
610000
|
heap default
|
page read and write
|
|
|
|
7FF512587000
|
unkown image
|
page readonly
|
|
|
|
25A0DB80000
|
unkown image
|
page read and write
|
|
|
|
9F2000
|
unkown
|
page read and write
|
|
|
|
1DB2F000
|
stack
|
page read and write
|
|
|
|
7FF507648000
|
unkown image
|
page readonly
|
|
|
|
29B3ED00000
|
unkown
|
page read and write
|
|
|
|
1DC6F000
|
stack
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5919EA000
|
unkown image
|
page readonly
|
|
|
|
2AB2EB60000
|
unkown image
|
page readonly
|
|
|
|
7FF51255C000
|
unkown image
|
page readonly
|
|
|
|
2AB2EB80000
|
unkown
|
page read and write
|
|
|
|
2AB2EC4F000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7DF51CF60000
|
unkown image
|
page readonly
|
|
|
|
1E310000
|
unkown
|
page read and write
|
|
|
|
3FC727D000
|
stack
|
page read and write
|
|
|
|
980000
|
heap default
|
page read and write
|
|
|
|
7FF5CE874000
|
unkown image
|
page readonly
|
|
|
|
7FF507E3F000
|
unkown image
|
page readonly
|
|
|
|
7FF505F2F000
|
unkown image
|
page readonly
|
|
|
|
1DDAF000
|
stack
|
page read and write
|
|
|
|
7FF5CE393000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6A82000
|
unkown image
|
page readonly
|
|
|
|
25A0DDA4000
|
unkown
|
page read and write
|
|
|
|
18221029000
|
unkown
|
page read and write
|
|
|
|
7FF5917C1000
|
unkown image
|
page readonly
|
|
|
|
9F2000
|
unkown
|
page read and write
|
|
|
|
7FF5E1C00000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
E7ACFFF000
|
stack
|
page read and write
|
|
|
|
41C000
|
unkown image
|
page readonly
|
|
|
|
1000000
|
unkown image
|
page readonly
|
|
|
|
1E7C6300000
|
unkown
|
page read and write
|
|
|
|
25A0E302000
|
unkown
|
page read and write
|
|
|
|
7FF5CE2A8000
|
unkown image
|
page readonly
|
|
|
|
7FF507EC4000
|
unkown image
|
page readonly
|
|
|
|
7FF505ECE000
|
unkown image
|
page readonly
|
|
|
|
18221013000
|
unkown
|
page read and write
|
|
|
|
EDFDFFF000
|
stack
|
page read and write
|
|
|
|
1E7C64D0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
25A0DD9A000
|
unkown
|
page read and write
|
|
|
|
29B3EC51000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
2356FBB0000
|
unkown
|
page read and write
|
|
|
|
7FF59196E000
|
unkown image
|
page readonly
|
|
|
|
1E5A7000
|
unkown
|
page read and write
|
|
|
|
25A0D470000
|
unkown
|
page read and write
|
|
|
|
7FF5E19B0000
|
unkown image
|
page readonly
|
|
|
|
2356FED0000
|
unkown image
|
page readonly
|
|
|
|
1E7C624B000
|
unkown
|
page read and write
|
|
|
|
9EB000
|
unkown
|
page read and write
|
|
|
|
1E7C66D0000
|
unkown image
|
page readonly
|
|
|
|
2B6A000
|
unkown
|
page read and write
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE876000
|
unkown image
|
page readonly
|
|
|
|
987000
|
heap default
|
page read and write
|
|
|
|
7FF5E1C05000
|
unkown image
|
page readonly
|
|
|
|
9D7000
|
heap default
|
page read and write
|
|
|
|
7DF5E3BB0000
|
unkown image
|
page readonly
|
|
|
|
7FF51246E000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
25A0DDBB000
|
unkown
|
page read and write
|
|
|
|
7FF591677000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
2356FC89000
|
unkown
|
page read and write
|
|
|
|
25A0D300000
|
unkown image
|
page readonly
|
|
|
|
25A0DD19000
|
unkown
|
page read and write
|
|
|
|
33E000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF507DCA000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEA0B000
|
unkown image
|
page readonly
|
|
|
|
2AB2EC53000
|
unkown
|
page read and write
|
|
|
|
C79C94A000
|
unkown
|
page read and write
|
|
|
|
7FF505F14000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF51265A000
|
unkown image
|
page readonly
|
|
|
|
A901CFF000
|
stack
|
page read and write
|
|
|
|
7FF5CE2A2000
|
unkown image
|
page readonly
|
|
|
|
1E59C000
|
stack
|
page read and write
|
|
|
|
7FF591944000
|
unkown image
|
page readonly
|
|
|
|
A9017EE000
|
stack
|
page read and write
|
|
|
|
7FF5918EC000
|
unkown image
|
page readonly
|
|
|
|
7FF512324000
|
unkown image
|
page readonly
|
|
|
|
7FF507D2D000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
18220FC0000
|
heap default
|
page read and write
|
|
|
|
25A0D44B000
|
unkown
|
page read and write
|
|
|
|
2AB2EC4F000
|
unkown
|
page read and write
|
|
|
|
C7F000
|
stack
|
page read and write
|
|
|
|
7FF507CC1000
|
unkown image
|
page readonly
|
|
|
|
1E7C6850000
|
unkown image
|
page readonly
|
|
|
|
18221070000
|
unkown
|
page read and write
|
|
|
|
1E7C61A0000
|
unkown image
|
page readonly
|
|
|
|
7FF591968000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE7F4000
|
unkown image
|
page readonly
|
|
|
|
25A0D4E9000
|
unkown
|
page read and write
|
|
|
|
1822102C000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
25A0DDD4000
|
unkown
|
page read and write
|
|
|
|
7FF5125D8000
|
unkown image
|
page readonly
|
|
|
|
7FF5914D5000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEB2A000
|
unkown image
|
page readonly
|
|
|
|
25A0DD89000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A80000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE8EA000
|
unkown image
|
page readonly
|
|
|
|
25A0DDD2000
|
unkown
|
page read and write
|
|
|
|
7DF418F10000
|
unkown image
|
page readonly
|
|
|
|
7DF51B060000
|
unkown image
|
page readonly
|
|
|
|
2960000
|
unkown
|
page read and write
|
|
|
|
29B3EC4E000
|
unkown
|
page read and write
|
|
|
|
7FF5125E6000
|
unkown image
|
page readonly
|
|
|
|
1DEEF000
|
stack
|
page read and write
|
|
|
|
29B3EB60000
|
heap private
|
page read and write
|
|
|
|
7FF507DF7000
|
unkown image
|
page readonly
|
|
|
|
1E08E000
|
stack
|
page read and write
|
|
|
|
7FF505DCE000
|
unkown image
|
page readonly
|
|
|
|
9D000
|
stack
|
page read and write
|
|
|
|
E7ACD7F000
|
stack
|
page read and write
|
|
|
|
25A0D4C4000
|
unkown
|
page read and write
|
|
|
|
25A0DDC0000
|
unkown
|
page read and write
|
|
|
|
7FF511DD8000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6D80000
|
unkown image
|
page readonly
|
|
|
|
20D0000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1E34E000
|
stack
|
page read and write
|
|
|
|
25A0D4ED000
|
unkown
|
page read and write
|
|
|
|
25A0D360000
|
unkown image
|
page readonly
|
|
|
|
7FF5124C3000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEA6F000
|
unkown image
|
page readonly
|
|
|
|
25A0DD7F000
|
unkown
|
page read and write
|
|
|
|
7DF5F6D72000
|
unkown image
|
page readonly
|
|
|
|
7FF512662000
|
unkown image
|
page readonly
|
|
|
|
2AB2EC20000
|
heap default
|
page read and write
|
|
|
|
25A0D4EC000
|
unkown
|
page read and write
|
|
|
|
25A0DDA4000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7DF51CF70000
|
unkown image
|
page readonly
|
|
|
|
1E7C6200000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
29B3EB70000
|
unkown image
|
page readonly
|
|
|
|
1822104C000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A72000
|
unkown image
|
page readonly
|
|
|
|
5D0000
|
heap private
|
page read and write
|
|
|
|
1E18F000
|
stack
|
page read and write
|
|
|
|
182212D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE615000
|
unkown image
|
page readonly
|
|
|
|
7FF507DCC000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEA9F000
|
unkown image
|
page readonly
|
|
|
|
9D0000
|
heap default
|
page read and write
|
|
|
|
7FF507E34000
|
unkown image
|
page readonly
|
|
|
|
7FF59192F000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF505F24000
|
unkown image
|
page readonly
|
|
|
|
18221048000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF507ECA000
|
unkown image
|
page readonly
|
|
|
|
2AB2EC60000
|
unkown
|
page read and write
|
|
|
|
7FF505A90000
|
unkown image
|
page readonly
|
|
|
|
18221080000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA40000
|
unkown image
|
page readonly
|
|
|
|
E7ACC77000
|
stack
|
page read and write
|
|
|
|
1E7C6247000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF512431000
|
unkown image
|
page readonly
|
|
|
|
7FF505FB4000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE7B7000
|
unkown image
|
page readonly
|
|
|
|
25A0DDA2000
|
unkown
|
page read and write
|
|
|
|
29B3EC13000
|
unkown
|
page read and write
|
|
|
|
25A0D4B2000
|
unkown
|
page read and write
|
|
|
|
25A0D3F0000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA1F000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE397000
|
unkown image
|
page readonly
|
|
|
|
7FF505FBA000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
25A0DD6E000
|
unkown
|
page read and write
|
|
|
|
1DB6E000
|
stack
|
page read and write
|
|
|
|
1E44F000
|
stack
|
page read and write
|
|
|
|
25A0DD9A000
|
unkown
|
page read and write
|
|
|
|
2AB2EC53000
|
unkown
|
page read and write
|
|
|
|
2356FC13000
|
unkown
|
page read and write
|
|
|
|
7FF5917A3000
|
unkown image
|
page readonly
|
|
|
|
7FF591864000
|
unkown image
|
page readonly
|
|
|
|
24A0000
|
unkown
|
page read and write
|
|
|
|
25A0E363000
|
unkown
|
page read and write
|
|
|
|
7FF5E1CF1000
|
unkown image
|
page readonly
|
|
|
|
7FF5917FB000
|
unkown image
|
page readonly
|
|
|
|
29B3EC6D000
|
unkown
|
page read and write
|
|
|
|
7DF527700000
|
unkown image
|
page readonly
|
|
|
|
7FF59192C000
|
unkown image
|
page readonly
|
|
|
|
7FF507DDA000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEA0F000
|
unkown image
|
page readonly
|
|
|
|
AF0000
|
unkown image
|
page readonly
|
|
|
|
18220FF0000
|
unkown
|
page read and write
|
|
|
|
1822104E000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
25A0DD9A000
|
unkown
|
page read and write
|
|
|
|
7FF505E3C000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
E7AC97F000
|
stack
|
page read and write
|
|
|
|
25A0D2E0000
|
unkown image
|
page read and write
|
|
|
|
7FF5CEAB6000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE993000
|
unkown image
|
page readonly
|
|
|
|
29B3EC4A000
|
unkown
|
page read and write
|
|
|
|
7FF507CA1000
|
unkown image
|
page readonly
|
|
|
|
7FF5919F2000
|
unkown image
|
page readonly
|
|
|
|
28B0000
|
heap private
|
page read and write
|
|
|
|
28B9000
|
heap private
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
2950000
|
heap private
|
page read and write
|
|
|
|
7FF5E1557000
|
unkown image
|
page readonly
|
|
|
|
7FF505F49000
|
unkown image
|
page readonly
|
|
|
|
7FF505DCB000
|
unkown image
|
page readonly
|
|
|
|
2090000
|
unkown image
|
page readonly
|
|
|
|
7DF5276F2000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
25A0DD76000
|
unkown
|
page read and write
|
|
|
|
2AB2EC53000
|
unkown
|
page read and write
|
|
|
|
25A0DD71000
|
unkown
|
page read and write
|
|
|
|
2AB2EC47000
|
unkown
|
page read and write
|
|
|
|
25A0DD5F000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1C7D000
|
unkown image
|
page readonly
|
|
|
|
600000
|
unkown
|
page read and write
|
|
|
|
7FF505E34000
|
unkown image
|
page readonly
|
|
|
|
7FF505C47000
|
unkown image
|
page readonly
|
|
|
|
7DF51CF52000
|
unkown image
|
page readonly
|
|
|
|
29B3F0D0000
|
unkown image
|
page readonly
|
|
|
|
25A0D502000
|
unkown
|
page read and write
|
|
|
|
56F000
|
unkown
|
page execute and read and write
|
|
|
|
29B3EB50000
|
unkown image
|
page read and write
|
|
|
|
25A0DD67000
|
unkown
|
page read and write
|
|
|
|
25A0D6D0000
|
unkown image
|
page readonly
|
|
|
|
1E310000
|
unkown
|
page read and write
|
|
|
|
25A0D4FC000
|
unkown
|
page read and write
|
|
|
|
E7AC8FF000
|
stack
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
25A0E363000
|
unkown
|
page read and write
|
|
|
|
1E5A0000
|
unkown
|
page read and write
|
|
|
|
E7ACF77000
|
stack
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF507D33000
|
unkown image
|
page readonly
|
|
|
|
18221052000
|
unkown
|
page read and write
|
|
|
|
1E7C623C000
|
unkown
|
page read and write
|
|
|
|
2100000
|
heap private
|
page read and write
|
|
|
|
7FF507CDB000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE806000
|
unkown image
|
page readonly
|
|
|
|
7FF51259C000
|
unkown image
|
page readonly
|
|
|
|
1E743000
|
unkown
|
page read and write
|
|
|
|
EDFDCFB000
|
stack
|
page read and write
|
|
|
|
25A0DDC0000
|
unkown
|
page read and write
|
|
|
|
9EE000
|
unkown
|
page read and write
|
|
|
|
7FF5CEB24000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE7FB000
|
unkown image
|
page readonly
|
|
|
|
EDFDEFE000
|
stack
|
page read and write
|
|
|
|
25A0D320000
|
unkown image
|
page readonly
|
|
|
|
7FF505ED5000
|
unkown image
|
page readonly
|
|
|
|
E7AD178000
|
stack
|
page read and write
|
|
|
|
2356FB90000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE7F0000
|
unkown image
|
page readonly
|
|
|
|
1E7C61C0000
|
unkown
|
page read and write
|
|
|
|
EDFDA7F000
|
stack
|
page read and write
|
|
|
|
7FF5CE655000
|
unkown image
|
page readonly
|
|
|
|
25A0E202000
|
unkown
|
page read and write
|
|
|
|
29B3ED02000
|
unkown
|
page read and write
|
|
|
|
1E7C6140000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6D90000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEA3E000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1C2F000
|
unkown image
|
page readonly
|
|
|
|
1E310000
|
unkown
|
page read and write
|
|
|
|
29B3EB70000
|
unkown image
|
page readonly
|
|
|
|
23570402000
|
unkown
|
page read and write
|
|
|
|
7DF5276F2000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE948000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
25A0DDA2000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA84000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
25A0E202000
|
unkown
|
page read and write
|
|
|
|
76E000
|
stack
|
page read and write
|
|
|
|
7FF505EBA000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF505EBC000
|
unkown image
|
page readonly
|
|
|
|
25A0DDBE000
|
unkown
|
page read and write
|
|
|
|
7FF5917E1000
|
unkown image
|
page readonly
|
|
|
|
7FF512413000
|
unkown image
|
page readonly
|
|
|
|
2AB2EBD0000
|
unkown image
|
page readonly
|
|
|
|
2AB2EB20000
|
unkown image
|
page read and write
|
|
|
|
7FF5125DE000
|
unkown image
|
page readonly
|
|
|
|
7AE000
|
stack
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
2110000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA6C000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE891000
|
unkown image
|
page readonly
|
|
|
|
7FF505D91000
|
unkown image
|
page readonly
|
|
|
|
1E7C6290000
|
unkown
|
page read and write
|
|
|
|
29B3EED0000
|
unkown image
|
page readonly
|
|
|
|
1E04E000
|
stack
|
page read and write
|
|
|
|
1DF4E000
|
stack
|
page read and write
|
|
|
|
1E7C624F000
|
unkown
|
page read and write
|
|
|
|
25A0DDD2000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
8EF000
|
stack
|
page read and write
|
|
|
|
7FF5125B4000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEAA8000
|
unkown image
|
page readonly
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
7FF507E0F000
|
unkown image
|
page readonly
|
|
|
|
7DF51B050000
|
unkown image
|
page readonly
|
|
|
|
7FF59197D000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE600000
|
unkown image
|
page readonly
|
|
|
|
29B3EC3C000
|
unkown
|
page read and write
|
|
|
|
25A0D3F0000
|
unkown
|
page read and write
|
|
|
|
7DF5A6A70000
|
unkown image
|
page readonly
|
|
|
|
18220F90000
|
unkown image
|
page readonly
|
|
|
|
1E49D000
|
stack
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
1E7C6257000
|
unkown
|
page read and write
|
|
|
|
18221000000
|
unkown
|
page read and write
|
|
|
|
7FF5916B4000
|
unkown image
|
page readonly
|
|
|
|
7DF41AE20000
|
unkown image
|
page readonly
|
|
|
|
2AB2EC31000
|
unkown
|
page read and write
|
|
|
|
1E721000
|
unkown
|
page read and write
|
|
|
|
25A0E200000
|
unkown
|
page read and write
|
|
|
|
A901FFA000
|
stack
|
page read and write
|
|
|
|
2356FD02000
|
unkown
|
page read and write
|
|
|
|
7FF505F1A000
|
unkown image
|
page readonly
|
|
There are 825 hidden memdumps, click here to show them.