Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
NTS_eTaxInvoice 1-12-2021#U00b7pdf.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\Form_Pilleorms8.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.exe (copy)
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
 |
|
|
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\bc49718863ee53e026d805ec372039e9_d06ed635-68f6-4e9a-955c-4899f5f57b9a
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\NTS_eTaxInvoice 1-12-2021#U00b7pdf.exe
|
"C:\Users\user\Desktop\NTS_eTaxInvoice 1-12-2021#U00b7pdf.exe"
|
|
|
|
C:\Users\user\AppData\Local\Temp\Form_Pilleorms8.exe
|
C:\Users\user\AppData\Local\Temp\Form_Pilleorms8.exe
|
|
|
|
C:\Users\user\AppData\Local\Temp\Form_Pilleorms8.exe
|
C:\Users\user\AppData\Local\Temp\Form_Pilleorms8.exe
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://63.250.34.171/tickets.php?id=156
|
63.250.34.171
|
|
|
|
https://doc-0s-8g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/e3qi22h3f39crtgptlkpn346psio1vva/1638430350000/13431600623523591888/*/1vel8-ekCr0ivRl8u50SHCZNZh1tCa62N?e=download
|
142.250.203.97
|
|
|
|
https://doc-0s-8g-docs.googleusercontent.com/aF/T
|
unknown
|
|
|
|
http://nsis.sf.net/NSIS_ErrorError
|
unknown
|
|
|
|
https://doc-0s-8g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/e3qi22h3
|
unknown
|
|
|
|
https://doc-0s-8g-docs.googleusercontent.com/
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/report-to/gse_l9ocaq
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
drive.google.com
|
142.250.203.110
|
|
|
|
googlehosted.l.googleusercontent.com
|
142.250.203.97
|
|
|
|
doc-0s-8g-docs.googleusercontent.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
63.250.34.171
|
unknown
|
United States
|
|
|
|
142.250.203.97
|
googlehosted.l.googleusercontent.com
|
United States
|
|
|
|
142.250.203.110
|
drive.google.com
|
United States
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
560000
|
unkown
|
page execute and read and write
|
|
|
|
8160000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5DC849000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
9BF000
|
stack
|
page read and write
|
|
|
|
7DF55D370000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5040000
|
unkown image
|
page readonly
|
|
|
|
83D000
|
unkown
|
page read and write
|
|
|
|
7DF5F1942000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
230D3802000
|
unkown
|
page read and write
|
|
|
|
230D338B000
|
unkown
|
page read and write
|
|
|
|
41D000
|
unkown image
|
page readonly
|
|
|
|
1C43ADC0000
|
unkown image
|
page readonly
|
|
|
|
1EC13F80000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
1C43AE13000
|
unkown
|
page read and write
|
|
|
|
230D3398000
|
unkown
|
page read and write
|
|
|
|
7FF5DC621000
|
unkown image
|
page readonly
|
|
|
|
94F000
|
stack
|
page read and write
|
|
|
|
7DF583BF2000
|
unkown image
|
page readonly
|
|
|
|
7FF56EA9C000
|
unkown image
|
page readonly
|
|
|
|
7FF5480DE000
|
unkown image
|
page readonly
|
|
|
|
EEEC67F000
|
stack
|
page read and write
|
|
|
|
1EC13A88000
|
unkown
|
page read and write
|
|
|
|
1DB5E000
|
stack
|
page read and write
|
|
|
|
7FF4F54CA000
|
unkown image
|
page readonly
|
|
|
|
7FF5CBC0B000
|
unkown image
|
page readonly
|
|
|
|
13E4D4B0000
|
unkown image
|
page read and write
|
|
|
|
950000
|
unkown image
|
page readonly
|
|
|
|
7FF56EB5A000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
8F2DEF8000
|
stack
|
page read and write
|
|
|
|
7DF55D360000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC606000
|
unkown image
|
page readonly
|
|
|
|
230D338A000
|
unkown
|
page read and write
|
|
|
|
230D338A000
|
unkown
|
page read and write
|
|
|
|
670000
|
unkown image
|
page readonly
|
|
|
|
8110000
|
heap private
|
page read and write
|
|
|
|
7FF4F5046000
|
unkown image
|
page readonly
|
|
|
|
1EC13A4C000
|
unkown
|
page read and write
|
|
|
|
829BFB000
|
unkown
|
page read and write
|
|
|
|
7FF5DC7AF000
|
unkown image
|
page readonly
|
|
|
|
230D2970000
|
heap private
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
425000
|
unkown image
|
page read and write
|
|
|
|
7FF56EA6E000
|
unkown image
|
page readonly
|
|
|
|
230D2AB1000
|
unkown
|
page read and write
|
|
|
|
7DF583C00000
|
unkown image
|
page readonly
|
|
|
|
1C43ACE0000
|
heap default
|
page read and write
|
|
|
|
230D33BB000
|
unkown
|
page read and write
|
|
|
|
230D2AA6000
|
unkown
|
page read and write
|
|
|
|
8C60000
|
heap private
|
page read and write
|
|
|
|
60000
|
unkown
|
page read and write
|
|
|
|
2DF6CA27000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
835000
|
unkown
|
page read and write
|
|
|
|
B00000
|
unkown image
|
page readonly
|
|
|
|
7FF4F4CCF000
|
unkown image
|
page readonly
|
|
|
|
7FF5CB553000
|
unkown image
|
page readonly
|
|
|
|
63D0000
|
unkown
|
page read and write
|
|
|
|
7F1000
|
unkown
|
page read and write
|
|
|
|
565000
|
heap default
|
page read and write
|
|
|
|
7FF5DC604000
|
unkown image
|
page readonly
|
|
|
|
1EC13A13000
|
unkown
|
page read and write
|
|
|
|
1E0CE000
|
stack
|
page read and write
|
|
|
|
230D3050000
|
unkown image
|
page readonly
|
|
|
|
EEEC77F000
|
stack
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC3A5000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC807000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5497000
|
unkown image
|
page readonly
|
|
|
|
7DF55D352000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5564000
|
unkown image
|
page readonly
|
|
|
|
7DF50A602000
|
unkown image
|
page readonly
|
|
|
|
230D2ED0000
|
unkown image
|
page readonly
|
|
|
|
1DF3D000
|
stack
|
page read and write
|
|
|
|
7FF547DA0000
|
unkown image
|
page readonly
|
|
|
|
8F2D6FF000
|
stack
|
page read and write
|
|
|
|
7FF548133000
|
unkown image
|
page readonly
|
|
|
|
680000
|
heap default
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
230D3383000
|
unkown
|
page read and write
|
|
|
|
82A4FF000
|
stack
|
page read and write
|
|
|
|
7FF56E645000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC7BC000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF5480C1000
|
unkown image
|
page readonly
|
|
|
|
1E35D000
|
stack
|
page read and write
|
|
|
|
1C43AF00000
|
unkown
|
page read and write
|
|
|
|
8F2DCFE000
|
stack
|
page read and write
|
|
|
|
7FF5480A1000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CBC7D000
|
unkown image
|
page readonly
|
|
|
|
230D2A29000
|
unkown
|
page read and write
|
|
|
|
7FF5CBC2F000
|
unkown image
|
page readonly
|
|
|
|
1EC13B13000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F53EC000
|
unkown image
|
page readonly
|
|
|
|
7FF56E636000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
1C43AE4C000
|
unkown
|
page read and write
|
|
|
|
7DF4DEC40000
|
unkown image
|
page readonly
|
|
|
|
1EC13A57000
|
unkown
|
page read and write
|
|
|
|
640000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC3E5000
|
unkown image
|
page readonly
|
|
|
|
40D000
|
unkown image
|
page read and write
|
|
|
|
230D2980000
|
unkown image
|
page readonly
|
|
|
|
2DF6CB40000
|
unkown image
|
page readonly
|
|
|
|
7FF4F547A000
|
unkown image
|
page readonly
|
|
|
|
972F4FB000
|
stack
|
page read and write
|
|
|
|
8F2DB7F000
|
stack
|
page read and write
|
|
|
|
13E4DB90000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC83E000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC0D2000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC73C000
|
unkown image
|
page readonly
|
|
|
|
82A0FB000
|
stack
|
page read and write
|
|
|
|
8C96D7F000
|
stack
|
page read and write
|
|
|
|
7FF5DC770000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
373000
|
unkown
|
page read and write
|
|
|
|
1EC13980000
|
unkown
|
page read and write
|
|
|
|
13E4D713000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
1C43ACC0000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7DF5E0D80000
|
unkown image
|
page readonly
|
|
|
|
230D2A50000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1EC13A4D000
|
unkown
|
page read and write
|
|
|
|
13E4D800000
|
unkown image
|
page readonly
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
7FF4F54DF000
|
unkown image
|
page readonly
|
|
|
|
230D3802000
|
unkown
|
page read and write
|
|
|
|
230D2AEB000
|
unkown
|
page read and write
|
|
|
|
7FF5DC67A000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
230D2A70000
|
unkown
|
page read and write
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7FF54822A000
|
unkown image
|
page readonly
|
|
|
|
560000
|
heap default
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5DC824000
|
unkown image
|
page readonly
|
|
|
|
230D338A000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
230D339F000
|
unkown
|
page read and write
|
|
|
|
230D33D9000
|
unkown
|
page read and write
|
|
|
|
82A3FF000
|
stack
|
page read and write
|
|
|
|
7FF548031000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC81A000
|
unkown image
|
page readonly
|
|
|
|
656E000
|
stack
|
page read and write
|
|
|
|
65D2000
|
heap default
|
page read and write
|
|
|
|
7FF5DC7BA000
|
unkown image
|
page readonly
|
|
|
|
230D2A4F000
|
unkown
|
page read and write
|
|
|
|
7FF5CBC4A000
|
unkown image
|
page readonly
|
|
|
|
1EC13A00000
|
unkown
|
page read and write
|
|
|
|
7DF5F1950000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5234000
|
unkown image
|
page readonly
|
|
|
|
230D3802000
|
unkown
|
page read and write
|
|
|
|
7FF548234000
|
unkown image
|
page readonly
|
|
|
|
8180000
|
heap private
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF56E7E7000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
230D2A3C000
|
unkown
|
page read and write
|
|
|
|
82A2FF000
|
stack
|
page read and write
|
|
|
|
7FF5DC01F000
|
unkown image
|
page readonly
|
|
|
|
230D3800000
|
unkown
|
page read and write
|
|
|
|
230D3312000
|
unkown
|
page read and write
|
|
|
|
7FF56E630000
|
unkown image
|
page readonly
|
|
|
|
7FF4F546A000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1960000
|
unkown image
|
page readonly
|
|
|
|
230D3130000
|
unkown
|
page read and write
|
|
|
|
230D29D0000
|
heap default
|
page read and write
|
|
|
|
408000
|
unkown image
|
page readonly
|
|
|
|
629F000
|
unkown image
|
page readonly
|
|
|
|
7FF56EA70000
|
unkown image
|
page readonly
|
|
|
|
7FF547DB5000
|
unkown image
|
page readonly
|
|
|
|
2DF6CEE0000
|
unkown image
|
page readonly
|
|
|
|
7FF56EB61000
|
unkown image
|
page readonly
|
|
|
|
230D2AF8000
|
unkown
|
page read and write
|
|
|
|
13E4D702000
|
unkown
|
page read and write
|
|
|
|
7DF583BF0000
|
unkown image
|
page readonly
|
|
|
|
7DF50A5F2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F54FD000
|
unkown image
|
page readonly
|
|
|
|
7FF5CBC79000
|
unkown image
|
page readonly
|
|
|
|
13E4D646000
|
unkown
|
page read and write
|
|
|
|
1DDA0000
|
unkown
|
page read and write
|
|
|
|
1C43AE4F000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
13E4D689000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5481CC000
|
unkown image
|
page readonly
|
|
|
|
7FF56EAED000
|
unkown image
|
page readonly
|
|
|
|
7FF56EA9F000
|
unkown image
|
page readonly
|
|
|
|
1C43AE4D000
|
unkown
|
page read and write
|
|
|
|
7DF5F1952000
|
unkown image
|
page readonly
|
|
|
|
7FF548224000
|
unkown image
|
page readonly
|
|
|
|
972F6F7000
|
stack
|
page read and write
|
|
|
|
7FF5DC79F000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown image
|
page readonly
|
|
|
|
230D2A89000
|
unkown
|
page read and write
|
|
|
|
230D2AEE000
|
unkown
|
page read and write
|
|
|
|
7FF4F54B7000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
5BE000
|
stack
|
page read and write
|
|
|
|
84F000
|
stack
|
page read and write
|
|
|
|
658000
|
heap default
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC5D0000
|
unkown image
|
page readonly
|
|
|
|
230D3398000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7DF50A600000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC596000
|
unkown image
|
page readonly
|
|
|
|
230D2A00000
|
unkown
|
page read and write
|
|
|
|
7FF54824E000
|
unkown image
|
page readonly
|
|
|
|
9D000
|
stack
|
page read and write
|
|
|
|
7FF5CBCEA000
|
unkown image
|
page readonly
|
|
|
|
1C43B200000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF548259000
|
unkown image
|
page readonly
|
|
|
|
56F000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5481E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC8C2000
|
unkown image
|
page readonly
|
|
|
|
1EC13820000
|
heap private
|
page read and write
|
|
|
|
13E4D656000
|
unkown
|
page read and write
|
|
|
|
2280000
|
heap private
|
page read and write
|
|
|
|
7FF54820C000
|
unkown image
|
page readonly
|
|
|
|
7FF56EB54000
|
unkown image
|
page readonly
|
|
|
|
1EC13880000
|
heap default
|
page read and write
|
|
|
|
7F1000
|
heap default
|
page read and write
|
|
|
|
2DF6CA30000
|
unkown
|
page read and write
|
|
|
|
1D4A0000
|
unkown
|
page read and write
|
|
|
|
7FF5DC7A4000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
230D3382000
|
unkown
|
page read and write
|
|
|
|
1DA1E000
|
stack
|
page read and write
|
|
|
|
230D337A000
|
unkown
|
page read and write
|
|
|
|
7FF4F54AC000
|
unkown image
|
page readonly
|
|
|
|
230D31F0000
|
unkown
|
page read and write
|
|
|
|
230D338A000
|
unkown
|
page read and write
|
|
|
|
383000
|
unkown
|
page read and write
|
|
|
|
8050000
|
unkown image
|
page readonly
|
|
|
|
230D3395000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown
|
page read and write
|
|
|
|
7FF5DC7CE000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
230D3358000
|
unkown
|
page read and write
|
|
|
|
7DF5F1960000
|
unkown image
|
page readonly
|
|
|
|
834000
|
unkown
|
page read and write
|
|
|
|
7FF5CBCF1000
|
unkown image
|
page readonly
|
|
|
|
8360000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown image
|
page readonly
|
|
|
|
13E4D520000
|
heap default
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1EC13E00000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5361000
|
unkown image
|
page readonly
|
|
|
|
1EC13A4B000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
2DF6C8D0000
|
unkown image
|
page readonly
|
|
|
|
230D31F0000
|
unkown
|
page read and write
|
|
|
|
7FF4F537B000
|
unkown image
|
page readonly
|
|
|
|
8B20000
|
unkown
|
page read and write
|
|
|
|
13E4D64C000
|
unkown
|
page read and write
|
|
|
|
7FF5DC3E7000
|
unkown image
|
page readonly
|
|
|
|
7DF5E0D80000
|
unkown image
|
page readonly
|
|
|
|
13E4D4C0000
|
heap private
|
page read and write
|
|
|
|
41B000
|
unkown image
|
page read and write
|
|
|
|
7DF583BE2000
|
unkown image
|
page readonly
|
|
|
|
2DF6CA26000
|
unkown
|
page read and write
|
|
|
|
7FF5CBCF2000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
1C43AE49000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
230D2980000
|
unkown image
|
page readonly
|
|
|
|
2DF6C8D0000
|
unkown image
|
page readonly
|
|
|
|
7DF583BF2000
|
unkown image
|
page readonly
|
|
|
|
7FF56EADE000
|
unkown image
|
page readonly
|
|
|
|
8309000
|
heap private
|
page read and write
|
|
|
|
7FF5DC71D000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
6570000
|
unkown
|
page execute read
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5482CA000
|
unkown image
|
page readonly
|
|
|
|
D00000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1942000
|
unkown image
|
page readonly
|
|
|
|
1EC13A90000
|
unkown
|
page read and write
|
|
|
|
7FF56EAB4000
|
unkown image
|
page readonly
|
|
|
|
13E4D4D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC838000
|
unkown image
|
page readonly
|
|
|
|
8F2DDF8000
|
stack
|
page read and write
|
|
|
|
230D3863000
|
unkown
|
page read and write
|
|
|
|
2DF6CB30000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7DF583C00000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF56EA5A000
|
unkown image
|
page readonly
|
|
|
|
13E4D67F000
|
unkown
|
page read and write
|
|
|
|
230D2B02000
|
unkown
|
page read and write
|
|
|
|
7FF5DC82F000
|
unkown image
|
page readonly
|
|
|
|
1DDFE000
|
stack
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
EEEC28A000
|
unkown
|
page read and write
|
|
|
|
230D3369000
|
unkown
|
page read and write
|
|
|
|
1E45C000
|
stack
|
page read and write
|
|
|
|
230D2A9F000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
832000
|
unkown
|
page read and write
|
|
|
|
230D3388000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
230D337A000
|
unkown
|
page read and write
|
|
|
|
787000
|
heap default
|
page read and write
|
|
|
|
7FF5481E5000
|
unkown image
|
page readonly
|
|
|
|
230D2A4B000
|
unkown
|
page read and write
|
|
|
|
7FF4F546C000
|
unkown image
|
page readonly
|
|
|
|
839000
|
unkown
|
page read and write
|
|
|
|
230D2AAB000
|
unkown
|
page read and write
|
|
|
|
230D3180000
|
unkown image
|
page write copy
|
|
|
|
8290000
|
unkown image
|
page readonly
|
|
|
|
7DF50A600000
|
unkown image
|
page readonly
|
|
|
|
836000
|
heap default
|
page read and write
|
|
|
|
1E1CF000
|
stack
|
page read and write
|
|
|
|
8F2DA77000
|
stack
|
page read and write
|
|
|
|
3F6000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5482D1000
|
unkown image
|
page readonly
|
|
|
|
41D000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC342000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
2DF6CB60000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
8C9652B000
|
unkown
|
page read and write
|
|
|
|
7DF583BE2000
|
unkown image
|
page readonly
|
|
|
|
7FF56E9C3000
|
unkown image
|
page readonly
|
|
|
|
8190000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF56EA6A000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7DF50A602000
|
unkown image
|
page readonly
|
|
|
|
230D3398000
|
unkown
|
page read and write
|
|
|
|
1C43AE52000
|
unkown
|
page read and write
|
|
|
|
7FF4F54EE000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
8F2DC78000
|
stack
|
page read and write
|
|
|
|
230D2A52000
|
unkown
|
page read and write
|
|
|
|
7DF583BF0000
|
unkown image
|
page readonly
|
|
|
|
230D2ADF000
|
unkown
|
page read and write
|
|
|
|
7FF5DC7D0000
|
unkown image
|
page readonly
|
|
|
|
8C96B77000
|
stack
|
page read and write
|
|
|
|
9FE000
|
stack
|
page read and write
|
|
|
|
8C80000
|
unkown
|
page read and write
|
|
|
|
264000
|
unkown
|
page read and write
|
|
|
|
7FF4F54F6000
|
unkown image
|
page readonly
|
|
|
|
40A000
|
unkown image
|
page write copy
|
|
|
|
7FF56EACF000
|
unkown image
|
page readonly
|
|
|
|
2DF6C8F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC846000
|
unkown image
|
page readonly
|
|
|
|
1E03A000
|
stack
|
page read and write
|
|
|
|
7DF55D362000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7DF45B220000
|
unkown image
|
page readonly
|
|
|
|
230D3740000
|
unkown image
|
page read and write
|
|
|
|
13E4D500000
|
unkown image
|
page readonly
|
|
|
|
7FF54823F000
|
unkown image
|
page readonly
|
|
|
|
838000
|
heap default
|
page read and write
|
|
|
|
1E460000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
41E000
|
unkown image
|
page read and write
|
|
|
|
226E000
|
stack
|
page read and write
|
|
|
|
230D2A55000
|
unkown
|
page read and write
|
|
|
|
7FF5DC2AE000
|
unkown image
|
page readonly
|
|
|
|
65BA000
|
heap default
|
page read and write
|
|
|
|
1E090000
|
unkown
|
page read and write
|
|
|
|
1E467000
|
unkown
|
page read and write
|
|
|
|
230D338C000
|
unkown
|
page read and write
|
|
|
|
23DA000
|
unkown
|
page read and write
|
|
|
|
7FF548217000
|
unkown image
|
page readonly
|
|
|
|
7FF547F94000
|
unkown image
|
page readonly
|
|
|
|
82A1F7000
|
stack
|
page read and write
|
|
|
|
41D000
|
unkown image
|
page readonly
|
|
|
|
6AB0000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF56EA7B000
|
unkown image
|
page readonly
|
|
|
|
652E000
|
stack
|
page read and write
|
|
|
|
230D338A000
|
unkown
|
page read and write
|
|
|
|
1C43AF13000
|
unkown
|
page read and write
|
|
|
|
13E4D602000
|
unkown
|
page read and write
|
|
|
|
7FF4F5323000
|
unkown image
|
page readonly
|
|
|
|
1E21E000
|
stack
|
page read and write
|
|
|
|
230D3398000
|
unkown
|
page read and write
|
|
|
|
2DF6CA30000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1E5B1000
|
unkown
|
page read and write
|
|
|
|
230D31F0000
|
unkown
|
page read and write
|
|
|
|
6C30000
|
unkown image
|
page readonly
|
|
|
|
230D3202000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F548B000
|
unkown image
|
page readonly
|
|
|
|
40A000
|
unkown image
|
page read and write
|
|
|
|
41D000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC7FF000
|
unkown image
|
page readonly
|
|
|
|
1C43AE80000
|
unkown
|
page read and write
|
|
|
|
7FF5DC396000
|
unkown image
|
page readonly
|
|
|
|
1D9DF000
|
stack
|
page read and write
|
|
|
|
408000
|
unkown image
|
page readonly
|
|
|
|
13E4D651000
|
unkown
|
page read and write
|
|
|
|
1EC13850000
|
unkown image
|
page readonly
|
|
|
|
222F000
|
stack
|
page read and write
|
|
|
|
8C96C7F000
|
stack
|
page read and write
|
|
|
|
7FF56EA75000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1950000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
7FF56EAE9000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC783000
|
unkown image
|
page readonly
|
|
|
|
7D7000
|
heap default
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
836000
|
unkown
|
page read and write
|
|
|
|
7FF56EAA7000
|
unkown image
|
page readonly
|
|
|
|
7DF5E0D90000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5485000
|
unkown image
|
page readonly
|
|
|
|
570000
|
unkown
|
page read and write
|
|
|
|
7FF548083000
|
unkown image
|
page readonly
|
|
|
|
7DF50A610000
|
unkown image
|
page readonly
|
|
|
|
230D2B08000
|
unkown
|
page read and write
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
7FF547DA6000
|
unkown image
|
page readonly
|
|
|
|
829E7E000
|
stack
|
page read and write
|
|
|
|
1EC13A4F000
|
unkown
|
page read and write
|
|
|
|
7FF4F54AF000
|
unkown image
|
page readonly
|
|
|
|
230D2A59000
|
unkown
|
page read and write
|
|
|
|
431000
|
unkown image
|
page read and write
|
|
|
|
7FF56EAC4000
|
unkown image
|
page readonly
|
|
|
|
7FF5CBC44000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1DC9E000
|
stack
|
page read and write
|
|
|
|
7FF5DC6CE000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
AFF000
|
stack
|
page read and write
|
|
|
|
7FF5DC7D5000
|
unkown image
|
page readonly
|
|
|
|
65A0000
|
unkown
|
page read and write
|
|
|
|
230D338F000
|
unkown
|
page read and write
|
|
|
|
230D33CB000
|
unkown
|
page read and write
|
|
|
|
2310000
|
unkown
|
page read and write
|
|
|
|
7FF5CBCE4000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
13E4D652000
|
unkown
|
page read and write
|
|
|
|
7FF56E9BD000
|
unkown image
|
page readonly
|
|
|
|
1E59F000
|
stack
|
page read and write
|
|
|
|
7FF5CBC38000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC550000
|
unkown image
|
page readonly
|
|
|
|
7EA000
|
unkown
|
page read and write
|
|
|
|
7FF5DC6CB000
|
unkown image
|
page readonly
|
|
|
|
230D2B16000
|
unkown
|
page read and write
|
|
|
|
63BE000
|
stack
|
page read and write
|
|
|
|
7FF56EB62000
|
unkown image
|
page readonly
|
|
|
|
7A3000
|
heap default
|
page read and write
|
|
|
|
7DF5E0D72000
|
unkown image
|
page readonly
|
|
|
|
230D338B000
|
unkown
|
page read and write
|
|
|
|
68B0000
|
unkown image
|
page readonly
|
|
|
|
7FF56EA5C000
|
unkown image
|
page readonly
|
|
|
|
7DF5E0D82000
|
unkown image
|
page readonly
|
|
|
|
7FF4F54D4000
|
unkown image
|
page readonly
|
|
|
|
7FF548256000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F54F9000
|
unkown image
|
page readonly
|
|
|
|
1EC13A29000
|
unkown
|
page read and write
|
|
|
|
1C43B380000
|
unkown image
|
page readonly
|
|
|
|
68AF000
|
stack
|
page read and write
|
|
|
|
7FF5DC772000
|
unkown image
|
page readonly
|
|
|
|
7FF4F51F7000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
972F2FE000
|
stack
|
page read and write
|
|
|
|
1C43AC80000
|
heap private
|
page read and write
|
|
|
|
7FF56EAD8000
|
unkown image
|
page readonly
|
|
|
|
1E5B3000
|
unkown
|
page read and write
|
|
|
|
7FF4F5571000
|
unkown image
|
page readonly
|
|
|
|
1EC13830000
|
unkown image
|
page readonly
|
|
|
|
1B0000
|
unkown
|
page read and write
|
|
|
|
260000
|
unkown
|
page read and write
|
|
|
|
230D29E0000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7DF481AB0000
|
unkown image
|
page readonly
|
|
|
|
7FF56E2BF000
|
unkown image
|
page readonly
|
|
|
|
7FF56EAE6000
|
unkown image
|
page readonly
|
|
|
|
2DF6CA00000
|
heap default
|
page read and write
|
|
|
|
7FF56EA87000
|
unkown image
|
page readonly
|
|
|
|
7FF5CBC68000
|
unkown image
|
page readonly
|
|
|
|
230D335F000
|
unkown
|
page read and write
|
|
|
|
230D33DA000
|
unkown
|
page read and write
|
|
|
|
650000
|
heap default
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1DC5F000
|
stack
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
7FF5CBC05000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1E31E000
|
stack
|
page read and write
|
|
|
|
230D3318000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1EC13960000
|
unkown image
|
page readonly
|
|
|
|
13E4D67E000
|
unkown
|
page read and write
|
|
|
|
230D2CD0000
|
unkown image
|
page readonly
|
|
|
|
13E4D629000
|
unkown
|
page read and write
|
|
|
|
7DF55D350000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1EC13A54000
|
unkown
|
page read and write
|
|
|
|
64EF000
|
stack
|
page read and write
|
|
|
|
7FF5DC691000
|
unkown image
|
page readonly
|
|
|
|
EEEC7FC000
|
stack
|
page read and write
|
|
|
|
230D2A4D000
|
unkown
|
page read and write
|
|
|
|
7DF50A5F0000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
8AA0000
|
unkown
|
page read and write
|
|
|
|
1EC14202000
|
unkown
|
page read and write
|
|
|
|
1C43B000000
|
unkown image
|
page readonly
|
|
|
|
41A000
|
unkown image
|
page read and write
|
|
|
|
7DF583BE0000
|
unkown image
|
page readonly
|
|
|
|
230D33BC000
|
unkown
|
page read and write
|
|
|
|
7FF5CB557000
|
unkown image
|
page readonly
|
|
|
|
EEEC30F000
|
stack
|
page read and write
|
|
|
|
230D334A000
|
unkown
|
page read and write
|
|
|
|
230D3382000
|
unkown
|
page read and write
|
|
|
|
230D335F000
|
unkown
|
page read and write
|
|
|
|
230D338F000
|
unkown
|
page read and write
|
|
|
|
212E000
|
stack
|
page read and write
|
|
|
|
972F7FF000
|
stack
|
page read and write
|
|
|
|
7DF4EF810000
|
unkown image
|
page readonly
|
|
|
|
629F000
|
unkown image
|
page readonly
|
|
|
|
1E49E000
|
stack
|
page read and write
|
|
|
|
7FF5CBC54000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC584000
|
unkown image
|
page readonly
|
|
|
|
230D33D9000
|
unkown
|
page read and write
|
|
|
|
829EFF000
|
stack
|
page read and write
|
|
|
|
7FF5482C4000
|
unkown image
|
page readonly
|
|
|
|
2DF6CA11000
|
unkown
|
page read and write
|
|
|
|
1EC13A70000
|
unkown
|
page read and write
|
|
|
|
230D3314000
|
unkown
|
page read and write
|
|
|
|
1C43AF08000
|
unkown
|
page read and write
|
|
|
|
230D2B13000
|
unkown
|
page read and write
|
|
|
|
7FF5CBC6E000
|
unkown image
|
page readonly
|
|
|
|
230D2AC3000
|
unkown
|
page read and write
|
|
|
|
7FF4F5572000
|
unkown image
|
page readonly
|
|
|
|
26FF000
|
stack
|
page read and write
|
|
|
|
230D3398000
|
unkown
|
page read and write
|
|
|
|
8F2D97A000
|
stack
|
page read and write
|
|
|
|
7FF5DC7FC000
|
unkown image
|
page readonly
|
|
|
|
230D339F000
|
unkown
|
page read and write
|
|
|
|
7FF5DC79B000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF56E9DC000
|
unkown image
|
page readonly
|
|
|
|
230D3396000
|
unkown
|
page read and write
|
|
|
|
83A000
|
unkown
|
page read and write
|
|
|
|
2DF6CB55000
|
heap private
|
page read and write
|
|
|
|
7FF56E913000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC332000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
7DF55D350000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC611000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
7FF5DC123000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC127000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5341000
|
unkown image
|
page readonly
|
|
|
|
7FF56E96E000
|
unkown image
|
page readonly
|
|
|
|
7FF4F53E4000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
13E4D700000
|
unkown
|
page read and write
|
|
|
|
1C43ADE0000
|
unkown
|
page read and write
|
|
|
|
63C0000
|
unkown image
|
page readonly
|
|
|
|
2DF6C8B0000
|
unkown image
|
page read and write
|
|
|
|
972F27F000
|
stack
|
page read and write
|
|
|
|
1C43AE29000
|
unkown
|
page read and write
|
|
|
|
1C43AC90000
|
unkown image
|
page readonly
|
|
|
|
972F3FB000
|
stack
|
page read and write
|
|
|
|
65B0000
|
heap default
|
page read and write
|
|
|
|
230D29B0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F54C4000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
2300000
|
heap private
|
page read and write
|
|
|
|
13E4D4F0000
|
unkown image
|
page readonly
|
|
|
|
1C43AE50000
|
unkown
|
page read and write
|
|
|
|
7FF4F556A000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7DF5E0D70000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC8BA000
|
unkown image
|
page readonly
|
|
|
|
7DF50A5F0000
|
unkown image
|
page readonly
|
|
|
|
230D386A000
|
unkown
|
page read and write
|
|
|
|
7FF56E9D4000
|
unkown image
|
page readonly
|
|
|
|
230D29A0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F52D1000
|
unkown image
|
page readonly
|
|
|
|
230D2AD6000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
1C43AC70000
|
unkown image
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7DF4084C0000
|
unkown image
|
page readonly
|
|
|
|
8350000
|
heap private
|
page read and write
|
|
|
|
1EC13B02000
|
unkown
|
page read and write
|
|
|
|
8CBA000
|
unkown
|
page read and write
|
|
|
|
8C965AF000
|
stack
|
page read and write
|
|
|
|
44C000
|
unkown image
|
page readonly
|
|
|
|
1C43AC90000
|
unkown image
|
page readonly
|
|
|
|
7FF54820F000
|
unkown image
|
page readonly
|
|
|
|
13E4D613000
|
unkown
|
page read and write
|
|
|
|
7F6000
|
unkown
|
page read and write
|
|
|
|
1C43AE4B000
|
unkown
|
page read and write
|
|
|
|
629F000
|
unkown image
|
page readonly
|
|
|
|
7FF547F57000
|
unkown image
|
page readonly
|
|
|
|
2DF6CD60000
|
unkown image
|
page readonly
|
|
|
|
7FF5482D2000
|
unkown image
|
page readonly
|
|
|
|
2DF6CB00000
|
unkown
|
page read and write
|
|
|
|
7FF54812D000
|
unkown image
|
page readonly
|
|
|
|
2DF6CA16000
|
heap default
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
230D3398000
|
unkown
|
page read and write
|
|
|
|
1DB1F000
|
stack
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1C43B602000
|
unkown
|
page read and write
|
|
|
|
7FF5DC8B4000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC390000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5481CA000
|
unkown image
|
page readonly
|
|
|
|
7FF548248000
|
unkown image
|
page readonly
|
|
|
|
2DF6C9E0000
|
unkown
|
page read and write
|
|
|
|
7FF5DC8C1000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC6D3000
|
unkown image
|
page readonly
|
|
|
|
13E4D708000
|
unkown
|
page read and write
|
|
|
|
7FF5481DA000
|
unkown image
|
page readonly
|
|
|
|
7FF54814C000
|
unkown image
|
page readonly
|
|
|
|
1C43AE3C000
|
unkown
|
page read and write
|
|
|
|
1EC13A7B000
|
unkown
|
page read and write
|
|
|
|
7FF4F53D3000
|
unkown image
|
page readonly
|
|
|
|
1EC13A3C000
|
unkown
|
page read and write
|
|
|
|
230D2960000
|
unkown image
|
page read and write
|
|
|
|
19A000
|
unkown
|
page read and write
|
|
|
|
8C9687F000
|
stack
|
page read and write
|
|
|
|
1C43AE8A000
|
unkown
|
page read and write
|
|
|
|
7FF4F54E8000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
8300000
|
heap private
|
page read and write
|
|
|
|
7FF5DC673000
|
unkown image
|
page readonly
|
|
|
|
414000
|
unkown image
|
page read and write
|
|
|
|
7FF5CBC00000
|
unkown image
|
page readonly
|
|
|
|
7FF5480DB000
|
unkown image
|
page readonly
|
|
|
|
EEEC6F9000
|
stack
|
page read and write
|
|
|
|
67AF000
|
stack
|
page read and write
|
|
|
|
230D3398000
|
unkown
|
page read and write
|
|
|
|
7DF50A610000
|
unkown image
|
page readonly
|
|
|
|
8F2D77F000
|
stack
|
page read and write
|
|
|
|
55E000
|
stack
|
page read and write
|
|
|
|
377000
|
unkown
|
page read and write
|
|
|
|
1C43AE02000
|
unkown
|
page read and write
|
|
|
|
7FF5481DE000
|
unkown image
|
page readonly
|
|
|
|
7DF55D360000
|
unkown image
|
page readonly
|
|
|
|
230D3394000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1DD9F000
|
stack
|
page read and write
|
|
|
|
13E4D4D0000
|
unkown image
|
page readonly
|
|
|
|
230D3802000
|
unkown
|
page read and write
|
|
|
|
2DF6CA30000
|
unkown
|
page read and write
|
|
|
|
7FF548144000
|
unkown image
|
page readonly
|
|
|
|
230D3388000
|
unkown
|
page read and write
|
|
|
|
1C43AE70000
|
unkown
|
page read and write
|
|
|
|
EEEC38F000
|
stack
|
page read and write
|
|
|
|
7DF583BE0000
|
unkown image
|
page readonly
|
|
|
|
1EC13A46000
|
unkown
|
page read and write
|
|
|
|
22B0000
|
heap private
|
page read and write
|
|
|
|
1EC13C00000
|
unkown image
|
page readonly
|
|
|
|
8BE000
|
stack
|
page read and write
|
|
|
|
7FF56E8C1000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC7DB000
|
unkown image
|
page readonly
|
|
|
|
7DF55D362000
|
unkown image
|
page readonly
|
|
|
|
780000
|
heap default
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CBC2C000
|
unkown image
|
page readonly
|
|
|
|
22DE000
|
stack
|
page read and write
|
|
|
|
7FF4F547E000
|
unkown image
|
page readonly
|
|
|
|
1EC13B00000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7DF55D370000
|
unkown image
|
page readonly
|
|
|
|
7FF56E931000
|
unkown image
|
page readonly
|
|
|
|
629F000
|
unkown image
|
page readonly
|
|
|
|
230D3300000
|
unkown
|
page read and write
|
|
|
|
63E0000
|
heap default
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
13E4DA00000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7DF5E0D82000
|
unkown image
|
page readonly
|
|
|
|
230D2AEE000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
440000
|
unkown image
|
page read and write
|
|
|
|
7FF5DC547000
|
unkown image
|
page readonly
|
|
|
|
1C43AF02000
|
unkown
|
page read and write
|
|
|
|
230D3398000
|
unkown
|
page read and write
|
|
|
|
7DF50A5F2000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5481EB000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
1EC13B08000
|
unkown
|
page read and write
|
|
|
|
7FF5DC814000
|
unkown image
|
page readonly
|
|
|
|
629F000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7DF5F1940000
|
unkown image
|
page readonly
|
|
|
|
230D2ABC000
|
unkown
|
page read and write
|
|
|
|
7FF5DC33E000
|
unkown image
|
page readonly
|
|
|
|
41D000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
8F2D67C000
|
unkown
|
page read and write
|
|
|
|
1EC13A7E000
|
unkown
|
page read and write
|
|
|
|
13E4D66F000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1E090000
|
unkown
|
page read and write
|
|
|
|
1C43AE00000
|
unkown
|
page read and write
|
|
|
|
629F000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC6D8000
|
unkown image
|
page readonly
|
|
|
|
2DF6CB50000
|
heap private
|
page read and write
|
|
|
|
13E4DC80000
|
unkown
|
page read and write
|
|
|
|
7FF5DC58B000
|
unkown image
|
page readonly
|
|
|
|
7DF5E0D70000
|
unkown image
|
page readonly
|
|
|
|
7FF54825D000
|
unkown image
|
page readonly
|
|
|
|
230D33A3000
|
unkown
|
page read and write
|
|
|
|
13E4D63C000
|
unkown
|
page read and write
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
230D33BB000
|
unkown
|
page read and write
|
|
|
|
7FF4F53CD000
|
unkown image
|
page readonly
|
|
|
|
1EC13860000
|
unkown image
|
page readonly
|
|
|
|
8120000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
230D3394000
|
unkown
|
page read and write
|
|
|
|
230D2A13000
|
unkown
|
page read and write
|
|
|
|
CD0000
|
unkown image
|
page readonly
|
|
|
|
972F5FF000
|
stack
|
page read and write
|
|
|
|
7F3000
|
unkown
|
page read and write
|
|
|
|
230D3394000
|
unkown
|
page read and write
|
|
|
|
1E090000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1EC13A47000
|
unkown
|
page read and write
|
|
|
|
7FF56E951000
|
unkown image
|
page readonly
|
|
|
|
7FF5CBC5E000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5055000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
834000
|
unkown
|
page read and write
|
|
|
|
839000
|
unkown
|
page read and write
|
|
|
|
7FF5CB980000
|
unkown image
|
page readonly
|
|
|
|
2700000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7DF55D352000
|
unkown image
|
page readonly
|
|
|
|
1C43AE4A000
|
unkown
|
page read and write
|
|
|
|
13E4DE02000
|
unkown
|
page read and write
|
|
|
|
230D3394000
|
unkown
|
page read and write
|
|
|
|
7FF56E824000
|
unkown image
|
page readonly
|
|
|
|
7EA000
|
unkown
|
page read and write
|
|
|
|
7FF4F5480000
|
unkown image
|
page readonly
|
|
|
|
1EC13810000
|
unkown image
|
page read and write
|
|
|
|
44C000
|
unkown image
|
page readonly
|
|
|
|
230D335F000
|
unkown
|
page read and write
|
|
|
|
7FF5DC7CA000
|
unkown image
|
page readonly
|
|
|
|
7FF56E96B000
|
unkown image
|
page readonly
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
1EC13A72000
|
unkown
|
page read and write
|
|
|
|
1DEFE000
|
stack
|
page read and write
|
|
|
|
7DF5F1952000
|
unkown image
|
page readonly
|
|
|
|
230D3398000
|
unkown
|
page read and write
|
|
|
|
7FF5481F7000
|
unkown image
|
page readonly
|
|
|
|
1C43ACB0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F537E000
|
unkown image
|
page readonly
|
|
|
|
7FF547A2F000
|
unkown image
|
page readonly
|
|
|
|
620000
|
heap private
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC7E7000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7DF5E0D72000
|
unkown image
|
page readonly
|
|
|
|
13E4D600000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
230D338D000
|
unkown
|
page read and write
|
|
|
|
7FF5DC734000
|
unkown image
|
page readonly
|
|
|
|
1EC13830000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC723000
|
unkown image
|
page readonly
|
|
|
|
7DF5F1940000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC6B1000
|
unkown image
|
page readonly
|
|
|
|
7FF56EABA000
|
unkown image
|
page readonly
|
|
|
|
972EFCC000
|
unkown
|
page read and write
|
|
|
|
230D3160000
|
unkown image
|
page readonly
|
|
|
|
41D000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
13E4DA10000
|
unkown image
|
page readonly
|
|
|
|
7DF5E0D90000
|
unkown image
|
page readonly
|
|
|
|
8C96A7B000
|
stack
|
page read and write
|
|
There are 790 hidden memdumps, click here to show them.