Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
3NeufRwoxF.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\3NeufRwoxF.exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\nsvCA57.tmp\qvddvmam.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\kusazc8wp39
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\nsvCA56.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\wuatpe
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\3NeufRwoxF.exe
|
"C:\Users\user\Desktop\3NeufRwoxF.exe"
|
|
|
|
C:\Users\user\Desktop\3NeufRwoxF.exe
|
"C:\Users\user\Desktop\3NeufRwoxF.exe"
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://subca.ocsp-certum.com0.
|
unknown
|
|
|
|
http://repository.certum.pl/ca.cer09
|
unknown
|
|
|
|
http://127.0.0.1:HTTP/1.1
|
unknown
|
|
|
|
http://DynDns.comDynDNS
|
unknown
|
|
|
|
http://yandex.oc
|
unknown
|
|
|
|
http://nsis.sf.net/NSIS_Error
|
unknown
|
|
|
|
http://repository.certum.pl/ctnca.cer09
|
unknown
|
|
|
|
http://crls.ya
|
unknown
|
|
|
|
http://crls.yandex.net/certum/ycasha2.crl0-
|
unknown
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
|
unknown
|
|
|
|
http://crl.certum.pl/ctnca.crl0k
|
unknown
|
|
|
|
http://MXCHOJ.com
|
unknown
|
|
|
|
http://subca.ocsp-certum.com01
|
unknown
|
|
|
|
http://yandex.crl.certum.pl/ycasha2.crl0q
|
unknown
|
|
|
|
https://api.ipify.org%GETMozilla/5.0
|
unknown
|
|
|
|
http://crl.certum.pl/ca.crl0h
|
unknown
|
|
|
|
http://nsis.sf.net/NSIS_ErrorError
|
unknown
|
|
|
|
https://www.certum.pl/CPS0
|
unknown
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
|
unknown
|
|
|
|
http://www.certum.pl/CPS0
|
unknown
|
|
|
|
http://yandex.ocsp-responder.com03
|
unknown
|
|
|
|
http://repository.certum.pl/ycasha2.cer0
|
unknown
|
|
There are 12 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
smtp.yandex.ru
|
77.88.21.158
|
|
|
|
smtp.yandex.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
77.88.21.158
|
smtp.yandex.ru
|
Russian Federation
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
|
word
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run
|
word
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
400000
|
unkown image
|
page execute and read and write
|
|
|
|
824000
|
unkown
|
page read and write
|
|
|
|
414000
|
unkown
|
page execute and read and write
|
|
|
|
28D1000
|
unkown
|
page read and write
|
|
|
|
38D1000
|
unkown
|
page read and write
|
|
|
|
414000
|
unkown
|
page execute and read and write
|
|
|
|
23C0000
|
unkown image
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
49D2000
|
unkown
|
page execute and read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
331B000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF584AEA000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9C52000
|
unkown image
|
page readonly
|
|
|
|
5420000
|
unkown
|
page execute and read and write
|
|
|
|
2543DE80000
|
unkown image
|
page readonly
|
|
|
|
7FF51D68E000
|
unkown image
|
page readonly
|
|
|
|
331B000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown
|
page read and write
|
|
|
|
23EE620A000
|
unkown
|
page read and write
|
|
|
|
23EE5D5F000
|
unkown
|
page read and write
|
|
|
|
331F000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF51FE7C000
|
unkown image
|
page readonly
|
|
|
|
23EE54BB000
|
unkown
|
page read and write
|
|
|
|
528E000
|
stack
|
page read and write
|
|
|
|
2170000
|
unkown image
|
page readonly
|
|
|
|
27B93770000
|
unkown image
|
page readonly
|
|
|
|
7FF594690000
|
unkown image
|
page readonly
|
|
|
|
23EE5DA7000
|
unkown
|
page read and write
|
|
|
|
7FF55D040000
|
unkown image
|
page readonly
|
|
|
|
23EE5B40000
|
unkown
|
page read and write
|
|
|
|
7FF55CF01000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9C50000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
23EE5481000
|
unkown
|
page read and write
|
|
|
|
23EE5380000
|
heap private
|
page read and write
|
|
|
|
7FF594AE7000
|
unkown image
|
page readonly
|
|
|
|
7FF51F75C000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5845C6000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
16CB0A00000
|
unkown
|
page read and write
|
|
|
|
19A000
|
unkown
|
page read and write
|
|
|
|
7DF5327A0000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
23EE5D80000
|
unkown
|
page read and write
|
|
|
|
7FF51FFF4000
|
unkown image
|
page readonly
|
|
|
|
2543DC1E000
|
unkown
|
page read and write
|
|
|
|
7FF51FF86000
|
unkown image
|
page readonly
|
|
|
|
23EE5D88000
|
unkown
|
page read and write
|
|
|
|
331B000
|
unkown
|
page read and write
|
|
|
|
2A35000
|
unkown
|
page read and write
|
|
|
|
7FF55D02C000
|
unkown image
|
page readonly
|
|
|
|
23EE5516000
|
unkown
|
page read and write
|
|
|
|
7FF5848FB000
|
unkown image
|
page readonly
|
|
|
|
F7D8DFC000
|
stack
|
page read and write
|
|
|
|
233000
|
unkown
|
page read and write
|
|
|
|
23EE5D24000
|
unkown
|
page read and write
|
|
|
|
7FF55D09F000
|
unkown image
|
page readonly
|
|
|
|
F7D8CFE000
|
stack
|
page read and write
|
|
|
|
7FF594B2F000
|
unkown image
|
page readonly
|
|
|
|
24E000
|
unkown
|
page read and write
|
|
|
|
7FF584777000
|
unkown image
|
page readonly
|
|
|
|
72B20000
|
unkown image
|
page readonly
|
|
|
|
2560000
|
unkown image
|
page readonly
|
|
|
|
16CB0A54000
|
unkown
|
page read and write
|
|
|
|
27B93829000
|
unkown
|
page read and write
|
|
|
|
5B9E000
|
stack
|
page read and write
|
|
|
|
251000
|
unkown
|
page read and write
|
|
|
|
7FF51FF0E000
|
unkown image
|
page readonly
|
|
|
|
23EE5D97000
|
unkown
|
page read and write
|
|
|
|
4A10000
|
unkown image
|
page readonly
|
|
|
|
27B93908000
|
unkown
|
page read and write
|
|
|
|
7FF594BC2000
|
unkown image
|
page readonly
|
|
|
|
23EE544F000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
23EE5D26000
|
unkown
|
page read and write
|
|
|
|
23EE5DD7000
|
unkown
|
page read and write
|
|
|
|
7FF55CE76000
|
unkown image
|
page readonly
|
|
|
|
254000
|
unkown
|
page read and write
|
|
|
|
7FF5848C1000
|
unkown image
|
page readonly
|
|
|
|
23EE548A000
|
unkown
|
page read and write
|
|
|
|
24C000
|
unkown
|
page read and write
|
|
|
|
1E983800000
|
unkown image
|
page readonly
|
|
|
|
23EE5D5F000
|
unkown
|
page read and write
|
|
|
|
3186000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
F7D8EFB000
|
stack
|
page read and write
|
|
|
|
27B93880000
|
unkown
|
page read and write
|
|
|
|
7DF432F50000
|
unkown image
|
page readonly
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
4FEE000
|
stack
|
page read and write
|
|
|
|
271C000
|
unkown
|
page read and write
|
|
|
|
2543DBF0000
|
heap default
|
page read and write
|
|
|
|
7FF55C993000
|
unkown image
|
page readonly
|
|
|
|
7FF55CF43000
|
unkown image
|
page readonly
|
|
|
|
23EE5D88000
|
unkown
|
page read and write
|
|
|
|
E60000
|
unkown image
|
page readonly
|
|
|
|
50EF000
|
stack
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF55CEEA000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF55CF93000
|
unkown image
|
page readonly
|
|
|
|
7DF599B82000
|
unkown image
|
page readonly
|
|
|
|
20FFC7E000
|
stack
|
page read and write
|
|
|
|
6E9E000
|
stack
|
page read and write
|
|
|
|
5BB0000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1E983500000
|
unkown image
|
page readonly
|
|
|
|
7DF5327B2000
|
unkown image
|
page readonly
|
|
|
|
263000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
20F0000
|
heap private
|
page read and write
|
|
|
|
6035CF7000
|
stack
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF51FFFA000
|
unkown image
|
page readonly
|
|
|
|
27B93760000
|
heap private
|
page read and write
|
|
|
|
23EE5D4C000
|
unkown
|
page read and write
|
|
|
|
7FF55D04B000
|
unkown image
|
page readonly
|
|
|
|
78A000
|
unkown
|
page execute and read and write
|
|
|
|
20BE000
|
stack
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF55CF21000
|
unkown image
|
page readonly
|
|
|
|
7FF55D02A000
|
unkown image
|
page readonly
|
|
|
|
23EE5D85000
|
unkown
|
page read and write
|
|
|
|
896000
|
unkown
|
page read and write
|
|
|
|
AE0000
|
unkown image
|
page readonly
|
|
|
|
7FF55C886000
|
unkown image
|
page readonly
|
|
|
|
23EE6202000
|
unkown
|
page read and write
|
|
|
|
1E9835F0000
|
unkown
|
page read and write
|
|
|
|
F7D8C7D000
|
stack
|
page read and write
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
23EE5449000
|
unkown
|
page read and write
|
|
|
|
23EE5D74000
|
unkown
|
page read and write
|
|
|
|
7FF5946A5000
|
unkown image
|
page readonly
|
|
|
|
6D00000
|
unkown image
|
page read and write
|
|
|
|
23EE53F0000
|
unkown image
|
page readonly
|
|
|
|
23EE5DA7000
|
unkown
|
page read and write
|
|
|
|
1E98363C000
|
unkown
|
page read and write
|
|
|
|
7DF535092000
|
unkown image
|
page readonly
|
|
|
|
23EE5D61000
|
unkown
|
page read and write
|
|
|
|
7FF51FF89000
|
unkown image
|
page readonly
|
|
|
|
2A02000
|
unkown
|
page read and write
|
|
|
|
7FF55CEE3000
|
unkown image
|
page readonly
|
|
|
|
2543DBA0000
|
unkown
|
page read and write
|
|
|
|
23EE5D87000
|
unkown
|
page read and write
|
|
|
|
7DF5A9C42000
|
unkown image
|
page readonly
|
|
|
|
6FE000
|
stack
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
23EE5D86000
|
unkown
|
page read and write
|
|
|
|
4AD2000
|
unkown
|
page read and write
|
|
|
|
7FF584A2C000
|
unkown image
|
page readonly
|
|
|
|
7FF5848E1000
|
unkown image
|
page readonly
|
|
|
|
7A2000
|
unkown
|
page read and write
|
|
|
|
2543DA70000
|
unkown image
|
page readonly
|
|
|
|
859000
|
unkown
|
page read and write
|
|
|
|
7DF535082000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF51CF87000
|
unkown image
|
page readonly
|
|
|
|
B7CEDFF000
|
stack
|
page read and write
|
|
|
|
549D000
|
unkown
|
page read and write
|
|
|
|
60362FD000
|
stack
|
page read and write
|
|
|
|
7FF55D132000
|
unkown image
|
page readonly
|
|
|
|
21C0000
|
heap private
|
page read and write
|
|
|
|
7FF51FF54000
|
unkown image
|
page readonly
|
|
|
|
4EAE000
|
stack
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
2570000
|
unkown
|
page read and write
|
|
|
|
7DF5721C0000
|
unkown image
|
page readonly
|
|
|
|
2070000
|
heap private
|
page read and write
|
|
|
|
23EE5DD7000
|
unkown
|
page read and write
|
|
|
|
27B937A0000
|
unkown image
|
page readonly
|
|
|
|
5450000
|
unkown
|
page read and write
|
|
|
|
23EE5DA4000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
27B937D0000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
72B22000
|
unkown image
|
page readonly
|
|
|
|
603575E000
|
stack
|
page read and write
|
|
|
|
16CB0E10000
|
unkown image
|
page readonly
|
|
|
|
7FF584A5F000
|
unkown image
|
page readonly
|
|
|
|
49D0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF51FAD0000
|
unkown image
|
page readonly
|
|
|
|
7FF594BB4000
|
unkown image
|
page readonly
|
|
|
|
27B93790000
|
unkown image
|
page readonly
|
|
|
|
782000
|
unkown
|
page execute and read and write
|
|
|
|
5440000
|
unkown
|
page read and write
|
|
|
|
23EE5D00000
|
unkown
|
page read and write
|
|
|
|
7DF5327C0000
|
unkown image
|
page readonly
|
|
|
|
7FF584A76000
|
unkown image
|
page readonly
|
|
|
|
7FF584A2F000
|
unkown image
|
page readonly
|
|
|
|
23EE5D29000
|
unkown
|
page read and write
|
|
|
|
7DF599B70000
|
unkown image
|
page readonly
|
|
|
|
7FF51FE0B000
|
unkown image
|
page readonly
|
|
|
|
2400000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
7FF51D698000
|
unkown image
|
page readonly
|
|
|
|
1E9833C0000
|
heap private
|
page read and write
|
|
|
|
23EE5452000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF594A34000
|
unkown image
|
page readonly
|
|
|
|
53C0000
|
unkown image
|
page readonly
|
|
|
|
394E9FB000
|
stack
|
page read and write
|
|
|
|
16CB0A2A000
|
unkown
|
page read and write
|
|
|
|
23EE544A000
|
unkown
|
page read and write
|
|
|
|
23EE5D86000
|
unkown
|
page read and write
|
|
|
|
2440000
|
heap private
|
page read and write
|
|
|
|
20FFDFB000
|
stack
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
331B000
|
unkown
|
page read and write
|
|
|
|
47E000
|
stack
|
page read and write
|
|
|
|
23EE5B70000
|
unkown image
|
page readonly
|
|
|
|
16CB0B13000
|
unkown
|
page read and write
|
|
|
|
72B21000
|
unkown image
|
page execute read
|
|
|
|
22F000
|
unkown
|
page read and write
|
|
|
|
7FF55CDB7000
|
unkown image
|
page readonly
|
|
|
|
331F000
|
unkown
|
page read and write
|
|
|
|
23EE5470000
|
unkown
|
page read and write
|
|
|
|
7FF584A4A000
|
unkown image
|
page readonly
|
|
|
|
7FF594B14000
|
unkown image
|
page readonly
|
|
|
|
23EE5D99000
|
unkown
|
page read and write
|
|
|
|
3186000
|
unkown
|
page read and write
|
|
|
|
7FF594B07000
|
unkown image
|
page readonly
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
7FF520002000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
23EE5400000
|
unkown
|
page read and write
|
|
|
|
3186000
|
unkown
|
page read and write
|
|
|
|
B7CE9AE000
|
stack
|
page read and write
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
53F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5848A3000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9C40000
|
unkown image
|
page readonly
|
|
|
|
16CB08C0000
|
heap private
|
page read and write
|
|
|
|
16CB0900000
|
unkown image
|
page readonly
|
|
|
|
1E983C02000
|
unkown
|
page read and write
|
|
|
|
7FF51D635000
|
unkown image
|
page readonly
|
|
|
|
260F000
|
stack
|
page read and write
|
|
|
|
1E983613000
|
unkown
|
page read and write
|
|
|
|
1E983400000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF594921000
|
unkown image
|
page readonly
|
|
|
|
7FF51FF0A000
|
unkown image
|
page readonly
|
|
|
|
7FF594AD5000
|
unkown image
|
page readonly
|
|
|
|
7FF584953000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
3186000
|
unkown
|
page read and write
|
|
|
|
7FF55CBAE000
|
unkown image
|
page readonly
|
|
|
|
7FF594696000
|
unkown image
|
page readonly
|
|
|
|
23EE5B90000
|
unkown image
|
page write copy
|
|
|
|
331B000
|
unkown
|
page read and write
|
|
|
|
23EE54E9000
|
unkown
|
page read and write
|
|
|
|
7FF584246000
|
unkown image
|
page readonly
|
|
|
|
4AD0000
|
unkown
|
page read and write
|
|
|
|
23EE5D96000
|
unkown
|
page read and write
|
|
|
|
49CF000
|
stack
|
page read and write
|
|
|
|
7DF5721C0000
|
unkown image
|
page readonly
|
|
|
|
7FF584AF2000
|
unkown image
|
page readonly
|
|
|
|
23EE5D91000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
5BA0000
|
heap private
|
page read and write
|
|
|
|
7FF51FE74000
|
unkown image
|
page readonly
|
|
|
|
23EE54D4000
|
unkown
|
page read and write
|
|
|
|
7FF55D08A000
|
unkown image
|
page readonly
|
|
|
|
6BC0000
|
unkown
|
page read and write
|
|
|
|
7FF51FEFA000
|
unkown image
|
page readonly
|
|
|
|
3186000
|
unkown
|
page read and write
|
|
|
|
7FF55D077000
|
unkown image
|
page readonly
|
|
|
|
7FF594B3E000
|
unkown image
|
page readonly
|
|
|
|
23EE5D7F000
|
unkown
|
page read and write
|
|
|
|
7FF55C88C000
|
unkown image
|
page readonly
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
23EE54EC000
|
unkown
|
page read and write
|
|
|
|
738000
|
heap private
|
page read and write
|
|
|
|
7FF51FD61000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1E98368A000
|
unkown
|
page read and write
|
|
|
|
6BFE000
|
stack
|
page read and write
|
|
|
|
7FF55CDFB000
|
unkown image
|
page readonly
|
|
|
|
6035F7E000
|
stack
|
page read and write
|
|
|
|
23EE54CB000
|
unkown
|
page read and write
|
|
|
|
580E000
|
stack
|
page read and write
|
|
|
|
54A7000
|
unkown
|
page read and write
|
|
|
|
7FF51D668000
|
unkown image
|
page readonly
|
|
|
|
871000
|
unkown
|
page read and write
|
|
|
|
26C000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF594847000
|
unkown image
|
page readonly
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
23EE5DA8000
|
unkown
|
page read and write
|
|
|
|
23EE5D7F000
|
unkown
|
page read and write
|
|
|
|
7FF55D057000
|
unkown image
|
page readonly
|
|
|
|
23EE5D8D000
|
unkown
|
page read and write
|
|
|
|
7DF5327A0000
|
unkown image
|
page readonly
|
|
|
|
1E983600000
|
unkown
|
page read and write
|
|
|
|
7FF594A3C000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF594A1D000
|
unkown image
|
page readonly
|
|
|
|
23EE5DA8000
|
unkown
|
page read and write
|
|
|
|
7FF51FF3F000
|
unkown image
|
page readonly
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
7FF594B24000
|
unkown image
|
page readonly
|
|
|
|
23EE5DB8000
|
unkown
|
page read and write
|
|
|
|
2543DA50000
|
unkown image
|
page read and write
|
|
|
|
7FF594B1A000
|
unkown image
|
page readonly
|
|
|
|
6AB0000
|
unkown
|
page read and write
|
|
|
|
23EE5C02000
|
unkown
|
page read and write
|
|
|
|
7FF5949CB000
|
unkown image
|
page readonly
|
|
|
|
23EE5D5F000
|
unkown
|
page read and write
|
|
|
|
7DF5721C2000
|
unkown image
|
page readonly
|
|
|
|
4B6E000
|
stack
|
page read and write
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9C60000
|
unkown image
|
page readonly
|
|
|
|
23EE543C000
|
unkown
|
page read and write
|
|
|
|
23EE5D7D000
|
unkown
|
page read and write
|
|
|
|
7FF520001000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9C50000
|
unkown image
|
page readonly
|
|
|
|
2420000
|
unkown
|
page read and write
|
|
|
|
29EF000
|
unkown
|
page read and write
|
|
|
|
7FF55C997000
|
unkown image
|
page readonly
|
|
|
|
7A6000
|
unkown
|
page execute and read and write
|
|
|
|
7FF51FF6F000
|
unkown image
|
page readonly
|
|
|
|
23EE5450000
|
unkown
|
page read and write
|
|
|
|
23EE5D85000
|
unkown
|
page read and write
|
|
|
|
23EE5D5E000
|
unkown
|
page read and write
|
|
|
|
1E983700000
|
unkown
|
page read and write
|
|
|
|
7FF51D65F000
|
unkown image
|
page readonly
|
|
|
|
57CB000
|
stack
|
page read and write
|
|
|
|
23F000
|
unkown
|
page read and write
|
|
|
|
F7D9177000
|
stack
|
page read and write
|
|
|
|
7FF55D00B000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
23EE5D62000
|
unkown
|
page read and write
|
|
|
|
20800F7000
|
stack
|
page read and write
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF584A0B000
|
unkown image
|
page readonly
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
7FF55CE81000
|
unkown image
|
page readonly
|
|
|
|
2410000
|
unkown image
|
page readonly
|
|
|
|
60361FA000
|
stack
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
6E5E000
|
stack
|
page read and write
|
|
|
|
5F5000
|
heap default
|
page read and write
|
|
|
|
2543E200000
|
unkown image
|
page readonly
|
|
|
|
5911000
|
unkown
|
page read and write
|
|
|
|
6FDE000
|
stack
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
23EE5D85000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7DF599B72000
|
unkown image
|
page readonly
|
|
|
|
1E983420000
|
heap default
|
page read and write
|
|
|
|
7DF535080000
|
unkown image
|
page readonly
|
|
|
|
7DF535090000
|
unkown image
|
page readonly
|
|
|
|
480000
|
unkown image
|
page readonly
|
|
|
|
7FF51D65C000
|
unkown image
|
page readonly
|
|
|
|
7FF594879000
|
unkown image
|
page readonly
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
16CB08B0000
|
unkown image
|
page read and write
|
|
|
|
23EE5513000
|
unkown
|
page read and write
|
|
|
|
16CB0A7F000
|
unkown
|
page read and write
|
|
|
|
7FF55CF48000
|
unkown image
|
page readonly
|
|
|
|
16CB0F90000
|
unkown image
|
page readonly
|
|
|
|
237B000
|
heap private
|
page execute and read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
C40000
|
unkown image
|
page readonly
|
|
|
|
5BAB000
|
heap private
|
page read and write
|
|
|
|
7FF594BBA000
|
unkown image
|
page readonly
|
|
|
|
23EE5D8C000
|
unkown
|
page read and write
|
|
|
|
7FF5845C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5848FE000
|
unkown image
|
page readonly
|
|
|
|
2543DE70000
|
heap private
|
page read and write
|
|
|
|
16CB0E00000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9C42000
|
unkown image
|
page readonly
|
|
|
|
2543DB80000
|
unkown
|
page read and write
|
|
|
|
7FF594AD0000
|
unkown image
|
page readonly
|
|
|
|
20FFCFE000
|
stack
|
page read and write
|
|
|
|
7FF594973000
|
unkown image
|
page readonly
|
|
|
|
7FF51D6A9000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
7FF55CE91000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF51D2AE000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
23EE5D89000
|
unkown
|
page read and write
|
|
|
|
23EE626B000
|
unkown
|
page read and write
|
|
|
|
394ED7F000
|
stack
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
16CB0B02000
|
unkown
|
page read and write
|
|
|
|
25D000
|
unkown
|
page read and write
|
|
|
|
7DF4A7B10000
|
unkown image
|
page readonly
|
|
|
|
7FF584A44000
|
unkown image
|
page readonly
|
|
|
|
331F000
|
unkown
|
page read and write
|
|
|
|
524B000
|
stack
|
page read and write
|
|
|
|
CE0000
|
unkown image
|
page readonly
|
|
|
|
862000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
23EE5D97000
|
unkown
|
page read and write
|
|
|
|
7FF55D124000
|
unkown image
|
page readonly
|
|
|
|
7FF584851000
|
unkown image
|
page readonly
|
|
|
|
331F000
|
unkown
|
page read and write
|
|
|
|
4DE000
|
stack
|
page read and write
|
|
|
|
24B000
|
unkown
|
page read and write
|
|
|
|
5400000
|
unkown
|
page execute and read and write
|
|
|
|
16CB08D0000
|
unkown image
|
page readonly
|
|
|
|
7FF55C942000
|
unkown image
|
page readonly
|
|
|
|
7FF584A7D000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF51FF78000
|
unkown image
|
page readonly
|
|
|
|
27B937F0000
|
unkown
|
page read and write
|
|
|
|
9DF000
|
stack
|
page read and write
|
|
|
|
16CB0A5C000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
23EE5413000
|
unkown
|
page read and write
|
|
|
|
16CB1202000
|
unkown
|
page read and write
|
|
|
|
7FF51FF64000
|
unkown image
|
page readonly
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF51FF27000
|
unkown image
|
page readonly
|
|
|
|
7FF51D722000
|
unkown image
|
page readonly
|
|
|
|
7FF51CF83000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF55CE74000
|
unkown image
|
page readonly
|
|
|
|
3982000
|
unkown
|
page read and write
|
|
|
|
8C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5845D5000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7C2000
|
unkown
|
page read and write
|
|
|
|
816000
|
heap default
|
page read and write
|
|
|
|
7FF594B46000
|
unkown image
|
page readonly
|
|
|
|
27B93813000
|
unkown
|
page read and write
|
|
|
|
7FF51D674000
|
unkown image
|
page readonly
|
|
|
|
7FF594ACA000
|
unkown image
|
page readonly
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
7FF594A23000
|
unkown image
|
page readonly
|
|
|
|
23EE6204000
|
unkown
|
page read and write
|
|
|
|
7FF594991000
|
unkown image
|
page readonly
|
|
|
|
23EE620A000
|
unkown
|
page read and write
|
|
|
|
23EE5D85000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
1E98362A000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page write copy
|
|
|
|
245000
|
unkown
|
page read and write
|
|
|
|
558E000
|
stack
|
page read and write
|
|
|
|
7DF599B80000
|
unkown image
|
page readonly
|
|
|
|
7FF55D0B9000
|
unkown image
|
page readonly
|
|
|
|
7DF5327C0000
|
unkown image
|
page readonly
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
331F000
|
unkown
|
page read and write
|
|
|
|
19E000
|
unkown
|
page execute and read and write
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
2543DA90000
|
unkown image
|
page readonly
|
|
|
|
23EE544B000
|
unkown
|
page read and write
|
|
|
|
7FF51FF15000
|
unkown image
|
page readonly
|
|
|
|
7BA000
|
unkown
|
page execute and read and write
|
|
|
|
2543E080000
|
unkown image
|
page readonly
|
|
|
|
23EE5D90000
|
unkown
|
page read and write
|
|
|
|
23EE5508000
|
unkown
|
page read and write
|
|
|
|
16CB0920000
|
heap default
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
27B93AD0000
|
unkown image
|
page readonly
|
|
|
|
710000
|
unkown image
|
page readonly
|
|
|
|
23EE5D85000
|
unkown
|
page read and write
|
|
|
|
394EB7E000
|
stack
|
page read and write
|
|
|
|
7DF470080000
|
unkown image
|
page readonly
|
|
|
|
22BE000
|
stack
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7DF599B70000
|
unkown image
|
page readonly
|
|
|
|
7DF599B82000
|
unkown image
|
page readonly
|
|
|
|
590F000
|
stack
|
page read and write
|
|
|
|
2992000
|
unkown
|
page read and write
|
|
|
|
F7D89BC000
|
unkown
|
page read and write
|
|
|
|
7FF51D71A000
|
unkown image
|
page readonly
|
|
|
|
27B9384D000
|
unkown
|
page read and write
|
|
|
|
1E983713000
|
unkown
|
page read and write
|
|
|
|
27B9388A000
|
unkown
|
page read and write
|
|
|
|
422000
|
unkown image
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7DF599B80000
|
unkown image
|
page readonly
|
|
|
|
23EE5D80000
|
unkown
|
page read and write
|
|
|
|
5910000
|
unkown
|
page read and write
|
|
|
|
7C7000
|
unkown
|
page execute and read and write
|
|
|
|
514C000
|
stack
|
page read and write
|
|
|
|
331F000
|
unkown
|
page read and write
|
|
|
|
23EE5DB1000
|
unkown
|
page read and write
|
|
|
|
7FF51FF5A000
|
unkown image
|
page readonly
|
|
|
|
23EE5D6C000
|
unkown
|
page read and write
|
|
|
|
3186000
|
unkown
|
page read and write
|
|
|
|
7FF58424C000
|
unkown image
|
page readonly
|
|
|
|
23EE5D80000
|
unkown
|
page read and write
|
|
|
|
20FFEFB000
|
stack
|
page read and write
|
|
|
|
199000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
7FF594B4D000
|
unkown image
|
page readonly
|
|
|
|
2543DC01000
|
unkown
|
page read and write
|
|
|
|
7DF5327A2000
|
unkown image
|
page readonly
|
|
|
|
7FF584A68000
|
unkown image
|
page readonly
|
|
|
|
23EE54C3000
|
unkown
|
page read and write
|
|
|
|
23EE5390000
|
unkown image
|
page readonly
|
|
|
|
6D5E000
|
stack
|
page read and write
|
|
|
|
ADF000
|
stack
|
page read and write
|
|
|
|
254F000
|
stack
|
page read and write
|
|
|
|
23EE5D80000
|
unkown
|
page read and write
|
|
|
|
301F000
|
stack
|
page read and write
|
|
|
|
7FF55D00F000
|
unkown image
|
page readonly
|
|
|
|
6E60000
|
unkown
|
page read and write
|
|
|
|
7FF51D6AD000
|
unkown image
|
page readonly
|
|
|
|
23EE54A7000
|
unkown
|
page read and write
|
|
|
|
6E60000
|
unkown
|
page read and write
|
|
|
|
7FF5849EC000
|
unkown image
|
page readonly
|
|
|
|
7FF51FE63000
|
unkown image
|
page readonly
|
|
|
|
23EE5454000
|
unkown
|
page read and write
|
|
|
|
23EE544D000
|
unkown
|
page read and write
|
|
|
|
7DF5327B0000
|
unkown image
|
page readonly
|
|
|
|
7FF55CF3B000
|
unkown image
|
page readonly
|
|
|
|
2543DC0F000
|
unkown
|
page read and write
|
|
|
|
B7CEC7F000
|
stack
|
page read and write
|
|
|
|
6035DFF000
|
stack
|
page read and write
|
|
|
|
7DF5350A0000
|
unkown image
|
page readonly
|
|
|
|
7FF51D63B000
|
unkown image
|
page readonly
|
|
|
|
7FF5949B1000
|
unkown image
|
page readonly
|
|
|
|
27B93902000
|
unkown
|
page read and write
|
|
|
|
7FF55D084000
|
unkown image
|
page readonly
|
|
|
|
7FF51FDD1000
|
unkown image
|
page readonly
|
|
|
|
4E6F000
|
stack
|
page read and write
|
|
|
|
6BC0000
|
unkown
|
page read and write
|
|
|
|
27B93802000
|
unkown
|
page read and write
|
|
|
|
7FF594ADB000
|
unkown image
|
page readonly
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
594C000
|
stack
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7DF5721C2000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF584AE4000
|
unkown image
|
page readonly
|
|
|
|
6AC0000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page execute and read and write
|
|
|
|
23EE54F6000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
7FF51D721000
|
unkown image
|
page readonly
|
|
|
|
2360000
|
unkown
|
page read and write
|
|
|
|
7DF599B72000
|
unkown image
|
page readonly
|
|
|
|
7FF51FF1B000
|
unkown image
|
page readonly
|
|
|
|
7FF55D014000
|
unkown image
|
page readonly
|
|
|
|
7FF51FF8D000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF594B38000
|
unkown image
|
page readonly
|
|
|
|
8BF000
|
stack
|
page read and write
|
|
|
|
7FF51F756000
|
unkown image
|
page readonly
|
|
|
|
AC0000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF51FAE5000
|
unkown image
|
page readonly
|
|
|
|
B7CECF9000
|
stack
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5849FA000
|
unkown image
|
page readonly
|
|
|
|
54A9000
|
unkown
|
page read and write
|
|
|
|
896000
|
unkown
|
page read and write
|
|
|
|
7FF594AFF000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9C60000
|
unkown image
|
page readonly
|
|
|
|
59E000
|
stack
|
page read and write
|
|
|
|
72B20000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
23EE53B0000
|
unkown image
|
page readonly
|
|
|
|
7FF55CDE9000
|
unkown image
|
page readonly
|
|
|
|
23EE5453000
|
unkown
|
page read and write
|
|
|
|
53D0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF55CC55000
|
unkown image
|
page readonly
|
|
|
|
23EE5D85000
|
unkown
|
page read and write
|
|
|
|
23EE5502000
|
unkown
|
page read and write
|
|
|
|
23EE5D87000
|
unkown
|
page read and write
|
|
|
|
23EE5390000
|
unkown image
|
page readonly
|
|
|
|
23EE5D5B000
|
unkown
|
page read and write
|
|
|
|
56CD000
|
stack
|
page read and write
|
|
|
|
7DF5327B2000
|
unkown image
|
page readonly
|
|
|
|
2543DBFB000
|
heap default
|
page read and write
|
|
|
|
266000
|
unkown
|
page read and write
|
|
|
|
6AB1000
|
unkown
|
page read and write
|
|
|
|
7FF55D06F000
|
unkown image
|
page readonly
|
|
|
|
7DF599B90000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9C52000
|
unkown image
|
page readonly
|
|
|
|
2543DC10000
|
unkown
|
page read and write
|
|
|
|
7FF584A54000
|
unkown image
|
page readonly
|
|
|
|
2543DBD0000
|
unkown image
|
page readonly
|
|
|
|
B7CE92A000
|
unkown
|
page read and write
|
|
|
|
7FF51FC87000
|
unkown image
|
page readonly
|
|
|
|
23EE5D81000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
394EAFB000
|
stack
|
page read and write
|
|
|
|
196000
|
unkown
|
page read and write
|
|
|
|
1E983670000
|
unkown
|
page read and write
|
|
|
|
2543DC17000
|
unkown
|
page read and write
|
|
|
|
490000
|
heap default
|
page read and write
|
|
|
|
7FF5849EA000
|
unkown image
|
page readonly
|
|
|
|
23EE5D60000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
16CB0A8E000
|
unkown
|
page read and write
|
|
|
|
6035AFB000
|
stack
|
page read and write
|
|
|
|
23EE5370000
|
unkown image
|
page read and write
|
|
|
|
23EE6150000
|
unkown image
|
page read and write
|
|
|
|
7FF594AFC000
|
unkown image
|
page readonly
|
|
|
|
7DF5721B2000
|
unkown image
|
page readonly
|
|
|
|
7FF55D03A000
|
unkown image
|
page readonly
|
|
|
|
6BB0000
|
unkown
|
page read and write
|
|
|
|
2543DC1E000
|
unkown
|
page read and write
|
|
|
|
60356DB000
|
unkown
|
page read and write
|
|
|
|
27B93CD0000
|
unkown image
|
page readonly
|
|
|
|
7FF58494D000
|
unkown image
|
page readonly
|
|
|
|
270F000
|
stack
|
page read and write
|
|
|
|
5A9C000
|
stack
|
page read and write
|
|
|
|
7DF430670000
|
unkown image
|
page readonly
|
|
|
|
23EE53E0000
|
heap default
|
page read and write
|
|
|
|
23EE5D80000
|
unkown
|
page read and write
|
|
|
|
23EE54E5000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
730000
|
heap private
|
page read and write
|
|
|
|
6035EF7000
|
stack
|
page read and write
|
|
|
|
23EE544C000
|
unkown
|
page read and write
|
|
|
|
23EE56D0000
|
unkown image
|
page readonly
|
|
|
|
7FF584964000
|
unkown image
|
page readonly
|
|
|
|
23EE5D67000
|
unkown
|
page read and write
|
|
|
|
1E983702000
|
unkown
|
page read and write
|
|
|
|
7FF51D69E000
|
unkown image
|
page readonly
|
|
|
|
16CB0A59000
|
unkown
|
page read and write
|
|
|
|
16CB1080000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
6CFF000
|
stack
|
page read and write
|
|
|
|
23EE6202000
|
unkown
|
page read and write
|
|
|
|
7FF51FAD6000
|
unkown image
|
page readonly
|
|
|
|
27B93800000
|
unkown
|
page read and write
|
|
|
|
4FAF000
|
stack
|
page read and write
|
|
|
|
23EE6272000
|
unkown
|
page read and write
|
|
|
|
23EE5D5B000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
5F0000
|
heap default
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
23EE6140000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
2543DC1E000
|
unkown
|
page read and write
|
|
|
|
16CB0A02000
|
unkown
|
page read and write
|
|
|
|
1E98364D000
|
unkown
|
page read and write
|
|
|
|
16CB0A64000
|
unkown
|
page read and write
|
|
|
|
242000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
27B93870000
|
unkown
|
page read and write
|
|
|
|
23EE5D7F000
|
unkown
|
page read and write
|
|
|
|
7FF5949CE000
|
unkown image
|
page readonly
|
|
|
|
7BE000
|
stack
|
page read and write
|
|
|
|
1E9833B0000
|
unkown image
|
page read and write
|
|
|
|
7FF55CCBE000
|
unkown image
|
page readonly
|
|
|
|
7DF5721B2000
|
unkown image
|
page readonly
|
|
|
|
392D000
|
unkown
|
page read and write
|
|
|
|
568F000
|
stack
|
page read and write
|
|
|
|
23EE5D91000
|
unkown
|
page read and write
|
|
|
|
5F7000
|
unkown
|
page read and write
|
|
|
|
7FF584A17000
|
unkown image
|
page readonly
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
23EE5DD1000
|
unkown
|
page read and write
|
|
|
|
7FF55D131000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
2543DBFD000
|
heap default
|
page read and write
|
|
|
|
23EE5D96000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
269000
|
unkown
|
page read and write
|
|
|
|
2430000
|
unkown
|
page execute and read and write
|
|
|
|
20FF9EB000
|
unkown
|
page read and write
|
|
|
|
7FF55CFAC000
|
unkown image
|
page readonly
|
|
|
|
23EE5D62000
|
unkown
|
page read and write
|
|
|
|
7FF51FCB9000
|
unkown image
|
page readonly
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
21BE000
|
stack
|
page read and write
|
|
|
|
7FF55CFE0000
|
unkown image
|
page readonly
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF51FF47000
|
unkown image
|
page readonly
|
|
|
|
6E60000
|
unkown
|
page read and write
|
|
|
|
260000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
7FF55D01F000
|
unkown image
|
page readonly
|
|
|
|
5EE000
|
stack
|
page read and write
|
|
|
|
331F000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7DF5721D0000
|
unkown image
|
page readonly
|
|
|
|
7FF55CE06000
|
unkown image
|
page readonly
|
|
|
|
16CB0C00000
|
unkown image
|
page readonly
|
|
|
|
60363FF000
|
stack
|
page read and write
|
|
|
|
1E983708000
|
unkown
|
page read and write
|
|
|
|
27B93E50000
|
unkown image
|
page readonly
|
|
|
|
7FF55CF3E000
|
unkown image
|
page readonly
|
|
|
|
7FF51FEFC000
|
unkown image
|
page readonly
|
|
|
|
534000
|
heap default
|
page read and write
|
|
|
|
16CB0B08000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
4FA000
|
heap default
|
page read and write
|
|
|
|
7FF55D0B6000
|
unkown image
|
page readonly
|
|
|
|
1E983B80000
|
unkown image
|
page readonly
|
|
|
|
16CB0A3C000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF594ACE000
|
unkown image
|
page readonly
|
|
|
|
7DF5721B0000
|
unkown image
|
page readonly
|
|
|
|
7DF535082000
|
unkown image
|
page readonly
|
|
|
|
23EE5D86000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
23BE000
|
stack
|
page read and write
|
|
|
|
23EE6140000
|
unkown
|
page read and write
|
|
|
|
20D0000
|
unkown
|
page read and write
|
|
|
|
23EE5D78000
|
unkown
|
page read and write
|
|
|
|
7FF584A37000
|
unkown image
|
page readonly
|
|
|
|
7FF55CF8D000
|
unkown image
|
page readonly
|
|
|
|
430000
|
unkown
|
page read and write
|
|
|
|
7DF599B90000
|
unkown image
|
page readonly
|
|
|
|
B7CED7A000
|
stack
|
page read and write
|
|
|
|
7B2000
|
unkown
|
page execute and read and write
|
|
|
|
2580000
|
heap private
|
page read and write
|
|
|
|
394E5AC000
|
unkown
|
page read and write
|
|
|
|
23EE54DB000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
7FF51D630000
|
unkown image
|
page readonly
|
|
|
|
7FF51FE0E000
|
unkown image
|
page readonly
|
|
|
|
27B93913000
|
unkown
|
page read and write
|
|
|
|
7FF55D03E000
|
unkown image
|
page readonly
|
|
|
|
7CB000
|
unkown
|
page execute and read and write
|
|
|
|
2543DE75000
|
heap private
|
page read and write
|
|
|
|
23EE5D84000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
heap default
|
page read and write
|
|
|
|
27B9383C000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
4B80000
|
unkown
|
page read and write
|
|
|
|
F7D927F000
|
stack
|
page read and write
|
|
|
|
7FF55D045000
|
unkown image
|
page readonly
|
|
|
|
1E9833F0000
|
unkown image
|
page readonly
|
|
|
|
7FF51D684000
|
unkown image
|
page readonly
|
|
|
|
331B000
|
unkown
|
page read and write
|
|
|
|
55E000
|
stack
|
page read and write
|
|
|
|
7E8000
|
heap default
|
page read and write
|
|
|
|
23EE5DD2000
|
unkown
|
page read and write
|
|
|
|
23EE5D68000
|
unkown
|
page read and write
|
|
|
|
23EE5D8B000
|
unkown
|
page read and write
|
|
|
|
1E9833D0000
|
unkown image
|
page readonly
|
|
|
|
7FF55D06C000
|
unkown image
|
page readonly
|
|
|
|
7DF5350A0000
|
unkown image
|
page readonly
|
|
|
|
7FF55D0AE000
|
unkown image
|
page readonly
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
7DF535092000
|
unkown image
|
page readonly
|
|
|
|
7FF51FF10000
|
unkown image
|
page readonly
|
|
|
|
1E983A00000
|
unkown image
|
page readonly
|
|
|
|
7FF594ABC000
|
unkown image
|
page readonly
|
|
|
|
23EE5D96000
|
unkown
|
page read and write
|
|
|
|
27B937C0000
|
heap default
|
page read and write
|
|
|
|
538E000
|
stack
|
page read and write
|
|
|
|
331F000
|
unkown
|
page read and write
|
|
|
|
20801FF000
|
stack
|
page read and write
|
|
|
|
7FF51FDF1000
|
unkown image
|
page readonly
|
|
|
|
23EE6140000
|
unkown
|
page read and write
|
|
|
|
4B70000
|
heap private
|
page read and write
|
|
|
|
409000
|
unkown image
|
page read and write
|
|
|
|
7FF55CC06000
|
unkown image
|
page readonly
|
|
|
|
7FF55CC57000
|
unkown image
|
page readonly
|
|
|
|
7FF59432D000
|
unkown image
|
page readonly
|
|
|
|
27B93770000
|
unkown image
|
page readonly
|
|
|
|
7DF535090000
|
unkown image
|
page readonly
|
|
|
|
23EE5D91000
|
unkown
|
page read and write
|
|
|
|
7FF584A00000
|
unkown image
|
page readonly
|
|
|
|
23EE5D64000
|
unkown
|
page read and write
|
|
|
|
2543DC16000
|
unkown
|
page read and write
|
|
|
|
7FF594B49000
|
unkown image
|
page readonly
|
|
|
|
7DF5721B0000
|
unkown image
|
page readonly
|
|
|
|
B7CEE7C000
|
stack
|
page read and write
|
|
|
|
6035BF8000
|
stack
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
394EC77000
|
stack
|
page read and write
|
|
|
|
7FF55CFE2000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
23EE5D85000
|
unkown
|
page read and write
|
|
|
|
23EE58D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9C40000
|
unkown image
|
page readonly
|
|
|
|
2543DBE0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
20FFF7E000
|
stack
|
page read and write
|
|
|
|
2370000
|
heap private
|
page execute and read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
16CB0A5F000
|
unkown
|
page read and write
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
7FF584A79000
|
unkown image
|
page readonly
|
|
|
|
54A9000
|
unkown
|
page read and write
|
|
|
|
7DF5327A2000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF55CC00000
|
unkown image
|
page readonly
|
|
|
|
394E8FE000
|
stack
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
23EE54A0000
|
unkown
|
page read and write
|
|
|
|
1E98367F000
|
unkown
|
page read and write
|
|
|
|
23EE53C0000
|
unkown image
|
page readonly
|
|
|
|
23EE5D96000
|
unkown
|
page read and write
|
|
|
|
213E000
|
stack
|
page read and write
|
|
|
|
5A4E000
|
stack
|
page read and write
|
|
|
|
331F000
|
unkown
|
page read and write
|
|
|
|
7FF584A6E000
|
unkown image
|
page readonly
|
|
|
|
6F9A000
|
stack
|
page read and write
|
|
|
|
27B94002000
|
unkown
|
page read and write
|
|
|
|
7FF584A05000
|
unkown image
|
page readonly
|
|
|
|
414000
|
unkown
|
page execute and read and write
|
|
|
|
23EE5D86000
|
unkown
|
page read and write
|
|
|
|
7AA000
|
unkown
|
page execute and read and write
|
|
|
|
5486000
|
unkown
|
page read and write
|
|
|
|
7FF55D094000
|
unkown image
|
page readonly
|
|
|
|
7FF5849FE000
|
unkown image
|
page readonly
|
|
|
|
16CB0A8A000
|
unkown
|
page read and write
|
|
|
|
7FF594ABA000
|
unkown image
|
page readonly
|
|
|
|
7FF55CBB2000
|
unkown image
|
page readonly
|
|
|
|
3186000
|
unkown
|
page read and write
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
1E983653000
|
unkown
|
page read and write
|
|
|
|
7DF5721D0000
|
unkown image
|
page readonly
|
|
|
|
70DF000
|
stack
|
page read and write
|
|
|
|
394EE7F000
|
stack
|
page read and write
|
|
|
|
7FF55CFA4000
|
unkown image
|
page readonly
|
|
|
|
2543DC06000
|
heap default
|
page read and write
|
|
|
|
6F9D000
|
stack
|
page read and write
|
|
|
|
60357DE000
|
stack
|
page read and write
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
23EE5D83000
|
unkown
|
page read and write
|
|
|
|
23EE5D67000
|
unkown
|
page read and write
|
|
|
|
23EE5D9B000
|
unkown
|
page read and write
|
|
|
|
394E87E000
|
stack
|
page read and write
|
|
|
|
7DF5327B0000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7E0000
|
heap default
|
page read and write
|
|
|
|
7FF55CB1E000
|
unkown image
|
page readonly
|
|
|
|
27B93750000
|
unkown image
|
page read and write
|
|
|
|
740000
|
unkown
|
page read and write
|
|
|
|
257000
|
unkown
|
page read and write
|
|
|
|
7FF584AF1000
|
unkown image
|
page readonly
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
7FF55CC15000
|
unkown image
|
page readonly
|
|
|
|
23EE5DD1000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
16CB0B00000
|
unkown
|
page read and write
|
|
|
|
23EE5D84000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
7FF51D714000
|
unkown image
|
page readonly
|
|
|
|
7FF55D0A8000
|
unkown image
|
page readonly
|
|
|
|
16CB08F0000
|
unkown image
|
page readonly
|
|
|
|
7FF55CFF3000
|
unkown image
|
page readonly
|
|
|
|
7FF5847A9000
|
unkown image
|
page readonly
|
|
|
|
23EE5D5E000
|
unkown
|
page read and write
|
|
|
|
7FF55CE40000
|
unkown image
|
page readonly
|
|
|
|
6035FFF000
|
stack
|
page read and write
|
|
|
|
4B81000
|
unkown
|
page read and write
|
|
|
|
7DF497A40000
|
unkown image
|
page readonly
|
|
|
|
27B93900000
|
unkown
|
page read and write
|
|
|
|
792000
|
unkown
|
page execute and read and write
|
|
|
|
F7D8F7F000
|
stack
|
page read and write
|
|
|
|
7FF58496C000
|
unkown image
|
page readonly
|
|
|
|
3186000
|
unkown
|
page read and write
|
|
|
|
5410000
|
unkown
|
page execute and read and write
|
|
|
|
23EE5D66000
|
unkown
|
page read and write
|
|
|
|
23EE5A50000
|
unkown image
|
page readonly
|
|
|
|
23EE5429000
|
unkown
|
page read and write
|
|
|
|
23EE5DA8000
|
unkown
|
page read and write
|
|
|
|
23EE54EC000
|
unkown
|
page read and write
|
|
|
|
7FF51FDB3000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
5440000
|
unkown
|
page execute and read and write
|
|
|
|
16CB08D0000
|
unkown image
|
page readonly
|
|
|
|
7FF51FE5D000
|
unkown image
|
page readonly
|
|
|
|
331B000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page write copy
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
23EE6200000
|
unkown
|
page read and write
|
|
|
|
7FF594BC1000
|
unkown image
|
page readonly
|
|
|
|
1E983602000
|
unkown
|
page read and write
|
|
|
|
25A000
|
unkown
|
page read and write
|
|
|
|
20802FF000
|
stack
|
page read and write
|
|
|
|
1E9833D0000
|
unkown image
|
page readonly
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
23EE5D68000
|
unkown
|
page read and write
|
|
|
|
F7D907F000
|
stack
|
page read and write
|
|
|
|
7DF535080000
|
unkown image
|
page readonly
|
|
|
|
23EE5D85000
|
unkown
|
page read and write
|
|
|
|
2543DA70000
|
unkown image
|
page readonly
|
|
|
|
7FF51D67A000
|
unkown image
|
page readonly
|
|
|
|
7FF51FF3C000
|
unkown image
|
page readonly
|
|
|
|
23EE5D67000
|
unkown
|
page read and write
|
|
|
|
331B000
|
unkown
|
page read and write
|
|
|
|
16CB0A13000
|
unkown
|
page read and write
|
|
|
|
27B93853000
|
unkown
|
page read and write
|
|
|
|
7FF55CBA2000
|
unkown image
|
page readonly
|
|
|
|
248000
|
unkown
|
page read and write
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
3186000
|
unkown
|
page read and write
|
|
|
|
331B000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF55D12A000
|
unkown image
|
page readonly
|
|
|
|
60360FB000
|
stack
|
page read and write
|
|
|
|
39B6000
|
unkown
|
page read and write
|
|
|
|
23EE5D96000
|
unkown
|
page read and write
|
|
|
|
7FF51FF7E000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
429000
|
unkown image
|
page read and write
|
|
|
|
6AC0000
|
unkown
|
page read and write
|
|
There are 916 hidden memdumps, click here to show them.