Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Purchase Order #5000012803.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\nnrr3w4buo
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\nsgB0D.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\nsgB0E.tmp\ibqwlwmewvj.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\urpwvqane
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\bc49718863ee53e026d805ec372039e9_d06ed635-68f6-4e9a-955c-4899f5f57b9a
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Purchase Order #5000012803.exe
|
"C:\Users\user\Desktop\Purchase Order #5000012803.exe"
|
|
|
|
C:\Users\user\Desktop\Purchase Order #5000012803.exe
|
"C:\Users\user\Desktop\Purchase Order #5000012803.exe"
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://kbfvzoboss.bid/alien/fre.php
|
|
||
|
http://alphastand.win/alien/fre.php
|
|
||
|
http://alphastand.trade/alien/fre.php
|
|
||
|
http://slimpackage.com/slimfit/five/fre.php
|
104.223.93.105
|
|
|
|
http://alphastand.top/alien/fre.php
|
|
||
|
http://nsis.sf.net/NSIS_Error
|
unknown
|
|
|
|
http://nsis.sf.net/NSIS_ErrorError
|
unknown
|
|
|
|
http://www.ibsensoftware.com/
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
slimpackage.com
|
104.223.93.105
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
104.223.93.105
|
slimpackage.com
|
United States
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
400000
|
unkown image
|
page execute and read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
6FC000
|
unkown
|
page read and write
|
|
|
|
22D0000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
24D0000
|
heap private
|
page read and write
|
|
|
|
1945FD1A000
|
unkown
|
page read and write
|
|
|
|
1945FB40000
|
unkown
|
page read and write
|
|
|
|
7FF5C8AFF000
|
unkown image
|
page readonly
|
|
|
|
2F36F2E6000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
1945F4C1000
|
unkown
|
page read and write
|
|
|
|
23C83B6B000
|
heap default
|
page read and write
|
|
|
|
1945F800000
|
unkown image
|
page readonly
|
|
|
|
17F6EF20000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8AE3000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8C21000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8964000
|
unkown image
|
page readonly
|
|
|
|
7FF538C01000
|
unkown image
|
page readonly
|
|
|
|
7DF586ED2000
|
unkown image
|
page readonly
|
|
|
|
23C83B60000
|
heap default
|
page read and write
|
|
|
|
7FF538E1E000
|
unkown image
|
page readonly
|
|
|
|
7FF5965FF000
|
unkown image
|
page readonly
|
|
|
|
7FF55E662000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8692000
|
unkown image
|
page readonly
|
|
|
|
5CE000
|
stack
|
page read and write
|
|
|
|
732DD7B000
|
stack
|
page read and write
|
|
|
|
7DF561CE0000
|
unkown image
|
page readonly
|
|
|
|
7DF5737D2000
|
unkown image
|
page readonly
|
|
|
|
11441FE000
|
stack
|
page read and write
|
|
|
|
7DF561CC0000
|
unkown image
|
page readonly
|
|
|
|
779000
|
unkown
|
page read and write
|
|
|
|
22B358A0000
|
unkown
|
page read and write
|
|
|
|
7FF5DF5EF000
|
unkown image
|
page readonly
|
|
|
|
7DF54DF40000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8AB4000
|
unkown image
|
page readonly
|
|
|
|
7FF538E29000
|
unkown image
|
page readonly
|
|
|
|
1A31E8D0000
|
heap private
|
page read and write
|
|
|
|
D70000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
732DAFE000
|
stack
|
page read and write
|
|
|
|
1945F300000
|
unkown image
|
page readonly
|
|
|
|
7DF54DF40000
|
unkown image
|
page readonly
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
7DF54DF20000
|
unkown image
|
page readonly
|
|
|
|
1945FD6C000
|
unkown
|
page read and write
|
|
|
|
7DF5DDCB2000
|
unkown image
|
page readonly
|
|
|
|
7DF5F4730000
|
unkown image
|
page readonly
|
|
|
|
7FF5965BA000
|
unkown image
|
page readonly
|
|
|
|
1945FD8D000
|
unkown
|
page read and write
|
|
|
|
1945FAD0000
|
unkown image
|
page write copy
|
|
|
|
1945FD8A000
|
unkown
|
page read and write
|
|
|
|
1DC10400000
|
unkown image
|
page readonly
|
|
|
|
19A000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B1C000
|
unkown image
|
page readonly
|
|
|
|
C807F5C000
|
unkown
|
page read and write
|
|
|
|
7DF54DF32000
|
unkown image
|
page readonly
|
|
|
|
765000
|
unkown
|
page read and write
|
|
|
|
784000
|
unkown
|
page read and write
|
|
|
|
7DF5F4750000
|
unkown image
|
page readonly
|
|
|
|
1945FD9E000
|
unkown
|
page read and write
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
7DF45FB90000
|
unkown image
|
page readonly
|
|
|
|
7FF59663E000
|
unkown image
|
page readonly
|
|
|
|
7FF571926000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF4BE000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
7FF5DF58B000
|
unkown image
|
page readonly
|
|
|
|
72B20000
|
unkown image
|
page readonly
|
|
|
|
7FF538E18000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
77A000
|
unkown
|
page read and write
|
|
|
|
7FF571920000
|
unkown image
|
page readonly
|
|
|
|
5E5000
|
heap default
|
page read and write
|
|
|
|
7FF5965CA000
|
unkown image
|
page readonly
|
|
|
|
7DF5DDCB2000
|
unkown image
|
page readonly
|
|
|
|
2F36F315000
|
unkown
|
page read and write
|
|
|
|
23C83FE0000
|
unkown image
|
page readonly
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
7FF5966C1000
|
unkown image
|
page readonly
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
7BC42FE000
|
stack
|
page read and write
|
|
|
|
1945FDDC000
|
unkown
|
page read and write
|
|
|
|
7FF55E665000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8966000
|
unkown image
|
page readonly
|
|
|
|
1945FD7F000
|
unkown
|
page read and write
|
|
|
|
1945F45B000
|
unkown
|
page read and write
|
|
|
|
33DF000
|
unkown
|
page read and write
|
|
|
|
23C83990000
|
unkown image
|
page read and write
|
|
|
|
1945FD00000
|
unkown
|
page read and write
|
|
|
|
7FF538B27000
|
unkown image
|
page readonly
|
|
|
|
7FF538E04000
|
unkown image
|
page readonly
|
|
|
|
7FF571D8F000
|
unkown image
|
page readonly
|
|
|
|
1DC0FEE0000
|
unkown image
|
page readonly
|
|
|
|
1945FDAF000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
2F36F2C8000
|
unkown
|
page read and write
|
|
|
|
292237F000
|
stack
|
page read and write
|
|
|
|
1945F810000
|
unkown image
|
page readonly
|
|
|
|
7FF571D6B000
|
unkown image
|
page readonly
|
|
|
|
1945F429000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1945FD9C000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C87C1000
|
unkown image
|
page readonly
|
|
|
|
22B35AF0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF55E752000
|
unkown image
|
page readonly
|
|
|
|
7DF5AB752000
|
unkown image
|
page readonly
|
|
|
|
7FF538985000
|
unkown image
|
page readonly
|
|
|
|
4A0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5961A5000
|
unkown image
|
page readonly
|
|
|
|
23C83AD0000
|
unkown
|
page read and write
|
|
|
|
7DF5AB750000
|
unkown image
|
page readonly
|
|
|
|
1945F4E3000
|
unkown
|
page read and write
|
|
|
|
7FF5C8BA9000
|
unkown image
|
page readonly
|
|
|
|
1945F320000
|
heap default
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7DF4A9610000
|
unkown image
|
page readonly
|
|
|
|
7FF571DD6000
|
unkown image
|
page readonly
|
|
|
|
784000
|
unkown
|
page read and write
|
|
|
|
F5F3B0A000
|
unkown
|
page read and write
|
|
|
|
1A31E8E0000
|
unkown image
|
page readonly
|
|
|
|
17F6F113000
|
unkown
|
page read and write
|
|
|
|
7FF54CB5B000
|
unkown image
|
page readonly
|
|
|
|
1DC10660000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
1945FD9B000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
1945FD7D000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF538C71000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8B67000
|
unkown image
|
page readonly
|
|
|
|
7DF5DDCB0000
|
unkown image
|
page readonly
|
|
|
|
7BA000
|
heap default
|
page read and write
|
|
|
|
7FF5DF562000
|
unkown image
|
page readonly
|
|
|
|
2F36F366000
|
unkown
|
page read and write
|
|
|
|
1A31EA3C000
|
unkown
|
page read and write
|
|
|
|
33DB000
|
unkown
|
page read and write
|
|
|
|
1945F44C000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF571CB3000
|
unkown image
|
page readonly
|
|
|
|
2840000
|
stack
|
page read and write
|
|
|
|
7FF571DB4000
|
unkown image
|
page readonly
|
|
|
|
1945FD87000
|
unkown
|
page read and write
|
|
|
|
1945FD9A000
|
unkown
|
page read and write
|
|
|
|
F5F407C000
|
stack
|
page read and write
|
|
|
|
7FF5DF5BA000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF594000
|
unkown image
|
page readonly
|
|
|
|
7FF55E68C000
|
unkown image
|
page readonly
|
|
|
|
7FF596638000
|
unkown image
|
page readonly
|
|
|
|
7FF538EA2000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF5964CB000
|
unkown image
|
page readonly
|
|
|
|
1DC0FEA0000
|
heap private
|
page read and write
|
|
|
|
1945FD85000
|
unkown
|
page read and write
|
|
|
|
7FF5C8930000
|
unkown image
|
page readonly
|
|
|
|
22BE000
|
stack
|
page read and write
|
|
|
|
19460363000
|
unkown
|
page read and write
|
|
|
|
1945F45C000
|
unkown
|
page read and write
|
|
|
|
17F6F100000
|
unkown
|
page read and write
|
|
|
|
7FF5DF639000
|
unkown image
|
page readonly
|
|
|
|
7DF561CC2000
|
unkown image
|
page readonly
|
|
|
|
1945F508000
|
unkown
|
page read and write
|
|
|
|
1945FD8D000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
7FF54CB9A000
|
unkown image
|
page readonly
|
|
|
|
2F36F215000
|
heap private
|
page read and write
|
|
|
|
2F36F640000
|
unkown image
|
page readonly
|
|
|
|
17F6EEF0000
|
heap private
|
page read and write
|
|
|
|
7DF586ED0000
|
unkown image
|
page readonly
|
|
|
|
23C83AF0000
|
unkown
|
page read and write
|
|
|
|
7DF5AB750000
|
unkown image
|
page readonly
|
|
|
|
1945FD82000
|
unkown
|
page read and write
|
|
|
|
7FF596196000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF58F000
|
unkown image
|
page readonly
|
|
|
|
33DF000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
C80847E000
|
stack
|
page read and write
|
|
|
|
7DF5DDCC0000
|
unkown image
|
page readonly
|
|
|
|
7FF571C21000
|
unkown image
|
page readonly
|
|
|
|
2F36FC23000
|
unkown
|
page read and write
|
|
|
|
7FF5C8971000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7DF44BDF0000
|
unkown image
|
page readonly
|
|
|
|
7FF538D03000
|
unkown image
|
page readonly
|
|
|
|
7DF4DBB70000
|
unkown image
|
page readonly
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
23C839B0000
|
unkown image
|
page readonly
|
|
|
|
7DF4F2600000
|
unkown image
|
page readonly
|
|
|
|
7FF538B30000
|
unkown image
|
page readonly
|
|
|
|
7FF5965DB000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8B47000
|
unkown image
|
page readonly
|
|
|
|
1A31EA74000
|
unkown
|
page read and write
|
|
|
|
7FF54CB88000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF59F000
|
unkown image
|
page readonly
|
|
|
|
7DF54DF22000
|
unkown image
|
page readonly
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
2F36F1B0000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF571C03000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
33DB000
|
unkown
|
page read and write
|
|
|
|
71E000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown
|
page read and write
|
|
|
|
1945FD87000
|
unkown
|
page read and write
|
|
|
|
667000
|
unkown
|
page read and write
|
|
|
|
1DC0FE90000
|
unkown image
|
page read and write
|
|
|
|
7DF561CE0000
|
unkown image
|
page readonly
|
|
|
|
2F36F220000
|
unkown
|
page read and write
|
|
|
|
7DF586EF0000
|
unkown image
|
page readonly
|
|
|
|
1945FD80000
|
unkown
|
page read and write
|
|
|
|
1945F454000
|
unkown
|
page read and write
|
|
|
|
7DF5AB760000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
316000
|
unkown
|
page read and write
|
|
|
|
3246000
|
unkown
|
page read and write
|
|
|
|
7FF538CAE000
|
unkown image
|
page readonly
|
|
|
|
7FF538D9C000
|
unkown image
|
page readonly
|
|
|
|
17F6EF80000
|
unkown
|
page read and write
|
|
|
|
765000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
23C839B0000
|
unkown image
|
page readonly
|
|
|
|
1945FDCF000
|
unkown
|
page read and write
|
|
|
|
769000
|
unkown
|
page read and write
|
|
|
|
292247F000
|
stack
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
71E000
|
unkown
|
page read and write
|
|
|
|
72B21000
|
unkown image
|
page execute read
|
|
|
|
1945FD82000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF54CBAE000
|
unkown image
|
page readonly
|
|
|
|
77D000
|
unkown
|
page read and write
|
|
|
|
1945F4FB000
|
unkown
|
page read and write
|
|
|
|
2F36F180000
|
unkown image
|
page readonly
|
|
|
|
3246000
|
unkown
|
page read and write
|
|
|
|
7FF596491000
|
unkown image
|
page readonly
|
|
|
|
7FF5964B1000
|
unkown image
|
page readonly
|
|
|
|
6E0000
|
heap default
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
5D0000
|
unkown image
|
page readonly
|
|
|
|
1A31E940000
|
unkown image
|
page readonly
|
|
|
|
1143E7B000
|
stack
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
22C0000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
1945FDAE000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7DF5AB752000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF54CBBE000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7B7D000
|
unkown image
|
page readonly
|
|
|
|
22B357A0000
|
unkown image
|
page readonly
|
|
|
|
1945F400000
|
unkown
|
page read and write
|
|
|
|
7FF54CBC9000
|
unkown image
|
page readonly
|
|
|
|
1945FDAB000
|
unkown
|
page read and write
|
|
|
|
7FF59653C000
|
unkown image
|
page readonly
|
|
|
|
19460202000
|
unkown
|
page read and write
|
|
|
|
7DF586EE2000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7DF5F4740000
|
unkown image
|
page readonly
|
|
|
|
2F36FC21000
|
unkown
|
page read and write
|
|
|
|
2F36F2B6000
|
unkown
|
page read and write
|
|
|
|
7FF538DFA000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B8F000
|
unkown image
|
page readonly
|
|
|
|
2F36F2B6000
|
unkown
|
page read and write
|
|
|
|
1945FD9E000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
17F6F000000
|
unkown
|
page read and write
|
|
|
|
7FF571CC4000
|
unkown image
|
page readonly
|
|
|
|
1DC0FED0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8B5F000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF614000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1945FD74000
|
unkown
|
page read and write
|
|
|
|
7DF5F4742000
|
unkown image
|
page readonly
|
|
|
|
9AF000
|
stack
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF5C8BC3000
|
unkown image
|
page readonly
|
|
|
|
1945F2B0000
|
unkown image
|
page read and write
|
|
|
|
71E000
|
unkown
|
page read and write
|
|
|
|
2F36F2E9000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3F4000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF571D60000
|
unkown image
|
page readonly
|
|
|
|
7DF561CD2000
|
unkown image
|
page readonly
|
|
|
|
732DFFF000
|
stack
|
page read and write
|
|
|
|
7FF538C91000
|
unkown image
|
page readonly
|
|
|
|
7FF596473000
|
unkown image
|
page readonly
|
|
|
|
F5F40FF000
|
stack
|
page read and write
|
|
|
|
1DC10580000
|
unkown image
|
page readonly
|
|
|
|
22B357C0000
|
unkown
|
page read and write
|
|
|
|
7DF5737E2000
|
unkown image
|
page readonly
|
|
|
|
22B3588E000
|
unkown
|
page read and write
|
|
|
|
17F6F102000
|
unkown
|
page read and write
|
|
|
|
22B3588E000
|
unkown
|
page read and write
|
|
|
|
1DC0FFE0000
|
unkown image
|
page readonly
|
|
|
|
2F36F1E0000
|
unkown
|
page read and write
|
|
|
|
7FF55E6AA000
|
unkown image
|
page readonly
|
|
|
|
7DF5737F0000
|
unkown image
|
page readonly
|
|
|
|
17F6F802000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1945FD8B000
|
unkown
|
page read and write
|
|
|
|
17F6F108000
|
unkown
|
page read and write
|
|
|
|
AB0000
|
unkown image
|
page readonly
|
|
|
|
7FF571DA4000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF369000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF5AA000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
33DB000
|
unkown
|
page read and write
|
|
|
|
7FF54CB7C000
|
unkown image
|
page readonly
|
|
|
|
1945F513000
|
unkown
|
page read and write
|
|
|
|
7FF571D4C000
|
unkown image
|
page readonly
|
|
|
|
300000
|
unkown
|
page read and write
|
|
|
|
7FF55E6CE000
|
unkown image
|
page readonly
|
|
|
|
1A31E960000
|
unkown
|
page read and write
|
|
|
|
7FF5DEF13000
|
unkown image
|
page readonly
|
|
|
|
3130000
|
unkown
|
page read and write
|
|
|
|
2F36F2C2000
|
unkown
|
page read and write
|
|
|
|
1945FD89000
|
unkown
|
page read and write
|
|
|
|
786000
|
unkown
|
page read and write
|
|
|
|
4EA70FD000
|
stack
|
page read and write
|
|
|
|
33DB000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
22B35898000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
1DC1008E000
|
unkown
|
page read and write
|
|
|
|
2F36F2D6000
|
unkown
|
page read and write
|
|
|
|
292227B000
|
stack
|
page read and write
|
|
|
|
7FF5DF524000
|
unkown image
|
page readonly
|
|
|
|
1945FD90000
|
unkown
|
page read and write
|
|
|
|
7FF5965BC000
|
unkown image
|
page readonly
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
19460302000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF54CB94000
|
unkown image
|
page readonly
|
|
|
|
17F6EF60000
|
unkown image
|
page readonly
|
|
|
|
17F6EF00000
|
unkown image
|
page readonly
|
|
|
|
7FF595DDF000
|
unkown image
|
page readonly
|
|
|
|
2F36F2A4000
|
heap default
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
6DE000
|
stack
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
17F6F08C000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3C0000
|
unkown image
|
page readonly
|
|
|
|
2F36F8B0000
|
unkown
|
page read and write
|
|
|
|
7FF5DF386000
|
unkown image
|
page readonly
|
|
|
|
7FF59664D000
|
unkown image
|
page readonly
|
|
|
|
7FF5966C2000
|
unkown image
|
page readonly
|
|
|
|
2F36F8B0000
|
unkown
|
page read and write
|
|
|
|
2F36F210000
|
heap private
|
page read and write
|
|
|
|
779000
|
unkown
|
page read and write
|
|
|
|
22B35AE0000
|
heap private
|
page read and write
|
|
|
|
1DC10051000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B74000
|
unkown image
|
page readonly
|
|
|
|
1A31EA00000
|
unkown
|
page read and write
|
|
|
|
11440FF000
|
stack
|
page read and write
|
|
|
|
1945F455000
|
unkown
|
page read and write
|
|
|
|
7FF538DAA000
|
unkown image
|
page readonly
|
|
|
|
7FF571DD9000
|
unkown image
|
page readonly
|
|
|
|
2927000
|
unkown
|
page read and write
|
|
|
|
7FF55E698000
|
unkown image
|
page readonly
|
|
|
|
7FF538D9A000
|
unkown image
|
page readonly
|
|
|
|
2921BFE000
|
stack
|
page read and write
|
|
|
|
22B35780000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF5DF6B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5DEF17000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
19460202000
|
unkown
|
page read and write
|
|
|
|
22B35860000
|
heap default
|
page read and write
|
|
|
|
23C83B25000
|
heap private
|
page read and write
|
|
|
|
7DF561CD0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
7FF538DE7000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF5CB000
|
unkown image
|
page readonly
|
|
|
|
732DC7B000
|
stack
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
1A31EB08000
|
unkown
|
page read and write
|
|
|
|
1A31E8E0000
|
unkown image
|
page readonly
|
|
|
|
23C83B20000
|
heap private
|
page read and write
|
|
|
|
17F6F06A000
|
unkown
|
page read and write
|
|
|
|
2F36F1C0000
|
unkown image
|
page readonly
|
|
|
|
17F6F2D0000
|
unkown image
|
page readonly
|
|
|
|
2921E7E000
|
stack
|
page read and write
|
|
|
|
1945FD69000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
1945FD85000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF132000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF513000
|
unkown image
|
page readonly
|
|
|
|
1DC10029000
|
unkown
|
page read and write
|
|
|
|
7DF5737E2000
|
unkown image
|
page readonly
|
|
|
|
7FF571D5E000
|
unkown image
|
page readonly
|
|
|
|
71E000
|
unkown
|
page read and write
|
|
|
|
33DF000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
7FF571CCC000
|
unkown image
|
page readonly
|
|
|
|
1945FD9A000
|
unkown
|
page read and write
|
|
|
|
7FF538CAB000
|
unkown image
|
page readonly
|
|
|
|
1DC0FF00000
|
heap default
|
page read and write
|
|
|
|
7DF5AB740000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
6FC000
|
unkown
|
page read and write
|
|
|
|
1A31EED0000
|
unkown image
|
page readonly
|
|
|
|
7FF538970000
|
unkown image
|
page readonly
|
|
|
|
4A0000
|
unkown image
|
page execute and read and write
|
|
|
|
1945FDBC000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF1D7000
|
unkown image
|
page readonly
|
|
|
|
7FF5C847E000
|
unkown image
|
page readonly
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF5C0000
|
unkown image
|
page readonly
|
|
|
|
33DF000
|
unkown
|
page read and write
|
|
|
|
17F6EEE0000
|
unkown image
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8C1A000
|
unkown image
|
page readonly
|
|
|
|
1DC10000000
|
unkown
|
page read and write
|
|
|
|
7DF5F4732000
|
unkown image
|
page readonly
|
|
|
|
1945F4BA000
|
unkown
|
page read and write
|
|
|
|
7DF5F4740000
|
unkown image
|
page readonly
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
1A31EA4E000
|
unkown
|
page read and write
|
|
|
|
7FF54CC42000
|
unkown image
|
page readonly
|
|
|
|
F5F3F7B000
|
stack
|
page read and write
|
|
|
|
7FF54C4A7000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1945FDBC000
|
unkown
|
page read and write
|
|
|
|
6E8000
|
heap default
|
page read and write
|
|
|
|
7FF57156F000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF4C3000
|
unkown image
|
page readonly
|
|
|
|
33DF000
|
unkown
|
page read and write
|
|
|
|
7FF596523000
|
unkown image
|
page readonly
|
|
|
|
22F0000
|
heap private
|
page read and write
|
|
|
|
273F000
|
stack
|
page read and write
|
|
|
|
54E000
|
stack
|
page read and write
|
|
|
|
7DF5F4742000
|
unkown image
|
page readonly
|
|
|
|
3246000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
1945F2D0000
|
unkown image
|
page readonly
|
|
|
|
7FF538DF4000
|
unkown image
|
page readonly
|
|
|
|
2F36F366000
|
unkown
|
page read and write
|
|
|
|
7FF5DF340000
|
unkown image
|
page readonly
|
|
|
|
7DF5F4750000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF538E2D000
|
unkown image
|
page readonly
|
|
|
|
765000
|
unkown
|
page read and write
|
|
|
|
1A31E8C0000
|
unkown image
|
page read and write
|
|
|
|
7FF5966B4000
|
unkown image
|
page readonly
|
|
|
|
7FF538D14000
|
unkown image
|
page readonly
|
|
|
|
1945FD8A000
|
unkown
|
page read and write
|
|
|
|
1DC10102000
|
unkown
|
page read and write
|
|
|
|
7FF54CC3A000
|
unkown image
|
page readonly
|
|
|
|
1143EFE000
|
stack
|
page read and write
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
7DF586EF0000
|
unkown image
|
page readonly
|
|
|
|
33DB000
|
unkown
|
page read and write
|
|
|
|
766000
|
unkown
|
page read and write
|
|
|
|
429000
|
unkown image
|
page read and write
|
|
|
|
22B3589E000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8B2E000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF463000
|
unkown image
|
page readonly
|
|
|
|
7DF5DDCB0000
|
unkown image
|
page readonly
|
|
|
|
1945FB40000
|
unkown
|
page read and write
|
|
|
|
1945FD85000
|
unkown
|
page read and write
|
|
|
|
7DF484DA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF61F000
|
unkown image
|
page readonly
|
|
|
|
7FF538DDC000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF5BE000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8B5C000
|
unkown image
|
page readonly
|
|
|
|
1945FD8E000
|
unkown
|
page read and write
|
|
|
|
2F36F306000
|
unkown
|
page read and write
|
|
|
|
7FF5DF60A000
|
unkown image
|
page readonly
|
|
|
|
1A31EA13000
|
unkown
|
page read and write
|
|
|
|
7FF538CFD000
|
unkown image
|
page readonly
|
|
|
|
1A31F050000
|
unkown image
|
page readonly
|
|
|
|
7FF5966BA000
|
unkown image
|
page readonly
|
|
|
|
769000
|
unkown
|
page read and write
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
1945FDAD000
|
unkown
|
page read and write
|
|
|
|
600000
|
heap default
|
page read and write
|
|
|
|
22B35760000
|
unkown image
|
page read and write
|
|
|
|
7FF55E6A4000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
72B20000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
22B35876000
|
unkown
|
page read and write
|
|
|
|
765000
|
unkown
|
page read and write
|
|
|
|
17F6F03C000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
17F6F013000
|
unkown
|
page read and write
|
|
|
|
7FF571DCE000
|
unkown image
|
page readonly
|
|
|
|
7DF54DF30000
|
unkown image
|
page readonly
|
|
|
|
7DF5DDCA2000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF604000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
4EA6F7E000
|
stack
|
page read and write
|
|
|
|
1945FDAB000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
1945FDAF000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF5C8981000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
1945FD8D000
|
unkown
|
page read and write
|
|
|
|
7FF538DAE000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
1A31ECD0000
|
unkown image
|
page readonly
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8C22000
|
unkown image
|
page readonly
|
|
|
|
3130000
|
unkown
|
page read and write
|
|
|
|
7DF586EE2000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown image
|
page readonly
|
|
|
|
1945F47F000
|
unkown
|
page read and write
|
|
|
|
22B3588E000
|
unkown
|
page read and write
|
|
|
|
1DC10200000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8AFB000
|
unkown image
|
page readonly
|
|
|
|
2F36F8B0000
|
unkown
|
page read and write
|
|
|
|
7DF5AB740000
|
unkown image
|
page readonly
|
|
|
|
2F36F316000
|
unkown
|
page read and write
|
|
|
|
312000
|
unkown
|
page read and write
|
|
|
|
7DF5DDCA0000
|
unkown image
|
page readonly
|
|
|
|
1945FD9B000
|
unkown
|
page read and write
|
|
|
|
2F36F2CA000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B04000
|
unkown image
|
page readonly
|
|
|
|
7DF586ED0000
|
unkown image
|
page readonly
|
|
|
|
23C83C60000
|
unkown image
|
page readonly
|
|
|
|
F5F3B8E000
|
stack
|
page read and write
|
|
|
|
7FF5965D5000
|
unkown image
|
page readonly
|
|
|
|
1A31EA82000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF55E6B4000
|
unkown image
|
page readonly
|
|
|
|
7FF596646000
|
unkown image
|
page readonly
|
|
|
|
17F6F650000
|
unkown image
|
page readonly
|
|
|
|
71E000
|
unkown
|
page read and write
|
|
|
|
1945FD6C000
|
unkown
|
page read and write
|
|
|
|
7FF5DF5EC000
|
unkown image
|
page readonly
|
|
|
|
1A31EA49000
|
unkown
|
page read and write
|
|
|
|
19460202000
|
unkown
|
page read and write
|
|
|
|
7FF5DF195000
|
unkown image
|
page readonly
|
|
|
|
1946026A000
|
unkown
|
page read and write
|
|
|
|
F5F3EFE000
|
stack
|
page read and write
|
|
|
|
7FF5B7B7D000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7DF4716A0000
|
unkown image
|
page readonly
|
|
|
|
7FF571D8C000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
1945FD9B000
|
unkown
|
page read and write
|
|
|
|
1945F516000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
7FF54C8D0000
|
unkown image
|
page readonly
|
|
|
|
1143C7E000
|
stack
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7DF561CC0000
|
unkown image
|
page readonly
|
|
|
|
77A000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B30000
|
unkown image
|
page readonly
|
|
|
|
1DC10802000
|
unkown
|
page read and write
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
7FF596624000
|
unkown image
|
page readonly
|
|
|
|
2922678000
|
stack
|
page read and write
|
|
|
|
7FF5DF186000
|
unkown image
|
page readonly
|
|
|
|
1945F44D000
|
unkown
|
page read and write
|
|
|
|
2F36FC20000
|
unkown
|
page read and write
|
|
|
|
22B357E0000
|
unkown
|
page read and write
|
|
|
|
2F36F2E6000
|
unkown
|
page read and write
|
|
|
|
6EE000
|
stack
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
1945FD98000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B35000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
765000
|
unkown
|
page read and write
|
|
|
|
7FF5C836A000
|
unkown image
|
page readonly
|
|
|
|
7FF54CB50000
|
unkown image
|
page readonly
|
|
|
|
33DF000
|
unkown
|
page read and write
|
|
|
|
F5F417E000
|
stack
|
page read and write
|
|
|
|
1945F4CF000
|
unkown
|
page read and write
|
|
|
|
19E000
|
unkown
|
page execute and read and write
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
22B35810000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1945F49E000
|
unkown
|
page read and write
|
|
|
|
33DB000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1945F2F0000
|
unkown image
|
page readonly
|
|
|
|
1A31F202000
|
unkown
|
page read and write
|
|
|
|
3130000
|
unkown
|
page read and write
|
|
|
|
7FF5C8436000
|
unkown image
|
page readonly
|
|
|
|
9E0000
|
unkown image
|
page readonly
|
|
|
|
17F6F04E000
|
unkown
|
page read and write
|
|
|
|
1945FD9A000
|
unkown
|
page read and write
|
|
|
|
7FF5DF4BB000
|
unkown image
|
page readonly
|
|
|
|
1DC1005E000
|
unkown
|
page read and write
|
|
|
|
1945FD8E000
|
unkown
|
page read and write
|
|
|
|
1945F2C0000
|
heap private
|
page read and write
|
|
|
|
1945F47A000
|
unkown
|
page read and write
|
|
|
|
4EA6E7F000
|
stack
|
page read and write
|
|
|
|
2921B7C000
|
unkown
|
page read and write
|
|
|
|
77D000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF5DF4A1000
|
unkown image
|
page readonly
|
|
|
|
1A31EA2A000
|
unkown
|
page read and write
|
|
|
|
17F6F07F000
|
unkown
|
page read and write
|
|
|
|
7FF571DC8000
|
unkown image
|
page readonly
|
|
|
|
7FF596534000
|
unkown image
|
page readonly
|
|
|
|
1945FDAF000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
7F4000
|
heap default
|
page read and write
|
|
|
|
7FF5DF1D5000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8C14000
|
unkown image
|
page readonly
|
|
|
|
783000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5DF5F7000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8BA6000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
17F6F4D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF50D000
|
unkown image
|
page readonly
|
|
|
|
1945FD57000
|
unkown
|
page read and write
|
|
|
|
7FF5965D0000
|
unkown image
|
page readonly
|
|
|
|
7FF596614000
|
unkown image
|
page readonly
|
|
|
|
3130000
|
unkown
|
page read and write
|
|
|
|
1945FB50000
|
unkown image
|
page read and write
|
|
|
|
7FF571C5B000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7FF595DE5000
|
unkown image
|
page readonly
|
|
|
|
7FF5965CE000
|
unkown image
|
page readonly
|
|
|
|
3130000
|
unkown
|
page read and write
|
|
|
|
4EA707E000
|
stack
|
page read and write
|
|
|
|
33DB000
|
unkown
|
page read and write
|
|
|
|
1946026A000
|
unkown
|
page read and write
|
|
|
|
2F36F7C0000
|
unkown image
|
page readonly
|
|
|
|
CB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5737F0000
|
unkown image
|
page readonly
|
|
|
|
1945F2D0000
|
unkown image
|
page readonly
|
|
|
|
1A31EA47000
|
unkown
|
page read and write
|
|
|
|
1945FD8C000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
3246000
|
unkown
|
page read and write
|
|
|
|
7DF5F4730000
|
unkown image
|
page readonly
|
|
|
|
1A31EB00000
|
unkown
|
page read and write
|
|
|
|
1945FD6E000
|
unkown
|
page read and write
|
|
|
|
17F6EF00000
|
unkown image
|
page readonly
|
|
|
|
7FF538DDF000
|
unkown image
|
page readonly
|
|
|
|
7DF5AB760000
|
unkown image
|
page readonly
|
|
|
|
7FF538DBB000
|
unkown image
|
page readonly
|
|
|
|
7FF55E6D9000
|
unkown image
|
page readonly
|
|
|
|
7FF55E6C8000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF37B000
|
unkown image
|
page readonly
|
|
|
|
6FC000
|
unkown
|
page read and write
|
|
|
|
7FF5DEDD5000
|
unkown image
|
page readonly
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
7FF571D77000
|
unkown image
|
page readonly
|
|
|
|
291F000
|
stack
|
page read and write
|
|
|
|
7FF538E94000
|
unkown image
|
page readonly
|
|
|
|
769000
|
unkown
|
page read and write
|
|
|
|
7FF5DF122000
|
unkown image
|
page readonly
|
|
|
|
1945F47F000
|
unkown
|
page read and write
|
|
|
|
7BC427C000
|
unkown
|
page read and write
|
|
|
|
1945FD70000
|
unkown
|
page read and write
|
|
|
|
7FF5DF628000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8B9E000
|
unkown image
|
page readonly
|
|
|
|
1A31E900000
|
unkown image
|
page readonly
|
|
|
|
7FF571C5E000
|
unkown image
|
page readonly
|
|
|
|
7FF55E660000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
heap default
|
page read and write
|
|
|
|
283F000
|
stack
|
page read and write
|
|
|
|
227F000
|
stack
|
page read and write
|
|
|
|
7FF5C8B98000
|
unkown image
|
page readonly
|
|
|
|
7FF571D5A000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF5DF5AC000
|
unkown image
|
page readonly
|
|
|
|
7FF571D65000
|
unkown image
|
page readonly
|
|
|
|
7FF54CB55000
|
unkown image
|
page readonly
|
|
|
|
7FF538DB5000
|
unkown image
|
page readonly
|
|
|
|
7DF54DF20000
|
unkown image
|
page readonly
|
|
|
|
1945FD74000
|
unkown
|
page read and write
|
|
|
|
7DF5AB742000
|
unkown image
|
page readonly
|
|
|
|
7FF571DAA000
|
unkown image
|
page readonly
|
|
|
|
7BC48FF000
|
stack
|
page read and write
|
|
|
|
17F6EF30000
|
unkown image
|
page readonly
|
|
|
|
33DF000
|
unkown
|
page read and write
|
|
|
|
1A31EB13000
|
unkown
|
page read and write
|
|
|
|
1945FD75000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
4A0000
|
unkown
|
page execute and read and write
|
|
|
|
1945FD8A000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
58E000
|
stack
|
page read and write
|
|
|
|
7FF571E51000
|
unkown image
|
page readonly
|
|
|
|
6FD000
|
heap default
|
page read and write
|
|
|
|
7FF5DF5D7000
|
unkown image
|
page readonly
|
|
|
|
765000
|
unkown
|
page read and write
|
|
|
|
7DF5DDCC0000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
1945FD8B000
|
unkown
|
page read and write
|
|
|
|
2F36F36A000
|
unkown
|
page read and write
|
|
|
|
22B35898000
|
unkown
|
page read and write
|
|
|
|
1945FDCF000
|
unkown
|
page read and write
|
|
|
|
2F36F440000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8B84000
|
unkown image
|
page readonly
|
|
|
|
3130000
|
unkown
|
page read and write
|
|
|
|
7FF596347000
|
unkown image
|
page readonly
|
|
|
|
7FF596190000
|
unkown image
|
page readonly
|
|
|
|
7FF571C41000
|
unkown image
|
page readonly
|
|
|
|
17F6F002000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page write copy
|
|
|
|
17F6F053000
|
unkown
|
page read and write
|
|
|
|
2F36F270000
|
heap default
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1DC10108000
|
unkown
|
page read and write
|
|
|
|
7BC437E000
|
stack
|
page read and write
|
|
|
|
2F36F306000
|
unkown
|
page read and write
|
|
|
|
7FF5DEDCF000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C848D000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1143FF7000
|
stack
|
page read and write
|
|
|
|
7FF538E0F000
|
unkown image
|
page readonly
|
|
|
|
7BC47FF000
|
stack
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF5DF6B2000
|
unkown image
|
page readonly
|
|
|
|
7DF54DF30000
|
unkown image
|
page readonly
|
|
|
|
1945FD98000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF538E9A000
|
unkown image
|
page readonly
|
|
|
|
7FF571935000
|
unkown image
|
page readonly
|
|
|
|
7FF571D4A000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF12E000
|
unkown image
|
page readonly
|
|
|
|
1945FAA0000
|
unkown image
|
page readonly
|
|
|
|
4EA6EFF000
|
stack
|
page read and write
|
|
|
|
732DA7B000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
75E000
|
stack
|
page read and write
|
|
|
|
11439BE000
|
stack
|
page read and write
|
|
|
|
7FF5965FC000
|
unkown image
|
page readonly
|
|
|
|
1A31EB02000
|
unkown
|
page read and write
|
|
|
|
1945F413000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B7A000
|
unkown image
|
page readonly
|
|
|
|
F5F3E7E000
|
stack
|
page read and write
|
|
|
|
1A31EA53000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
23C83E60000
|
unkown image
|
page readonly
|
|
|
|
732DEF7000
|
stack
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
1DC10075000
|
unkown
|
page read and write
|
|
|
|
2F36F366000
|
unkown
|
page read and write
|
|
|
|
72B22000
|
unkown image
|
page readonly
|
|
|
|
1DC10080000
|
unkown
|
page read and write
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
7BC46F7000
|
stack
|
page read and write
|
|
|
|
2F36FC28000
|
unkown
|
page read and write
|
|
|
|
7FF571575000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8BB2000
|
unkown image
|
page readonly
|
|
|
|
33DF000
|
unkown
|
page read and write
|
|
|
|
17F6F029000
|
unkown
|
page read and write
|
|
|
|
7FF59651D000
|
unkown image
|
page readonly
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
765000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3F6000
|
unkown image
|
page readonly
|
|
|
|
1945FD8D000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1945FD99000
|
unkown
|
page read and write
|
|
|
|
7FF59661A000
|
unkown image
|
page readonly
|
|
|
|
1945FD8A000
|
unkown
|
page read and write
|
|
|
|
19460300000
|
unkown
|
page read and write
|
|
|
|
6FC000
|
unkown
|
page read and write
|
|
|
|
7FF55E6DD000
|
unkown image
|
page readonly
|
|
|
|
29223FE000
|
stack
|
page read and write
|
|
|
|
1945FD72000
|
unkown
|
page read and write
|
|
|
|
22B35886000
|
unkown
|
page read and write
|
|
|
|
762000
|
unkown
|
page read and write
|
|
|
|
7FF54C4A3000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8AB1000
|
unkown image
|
page readonly
|
|
|
|
2F36F2D6000
|
unkown
|
page read and write
|
|
|
|
780000
|
heap private
|
page read and write
|
|
|
|
22B35871000
|
unkown
|
page read and write
|
|
|
|
C807FDF000
|
stack
|
page read and write
|
|
|
|
1945F47B000
|
unkown
|
page read and write
|
|
|
|
7DF5737E0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF4C8000
|
unkown image
|
page readonly
|
|
|
|
7DF54DF22000
|
unkown image
|
page readonly
|
|
|
|
22B35CF0000
|
unkown image
|
page readonly
|
|
|
|
7FF571BB1000
|
unkown image
|
page readonly
|
|
|
|
7FF54CB7F000
|
unkown image
|
page readonly
|
|
|
|
23C839A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF573000
|
unkown image
|
page readonly
|
|
|
|
AAE000
|
stack
|
page read and write
|
|
|
|
7FF54CC41000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8B2A000
|
unkown image
|
page readonly
|
|
|
|
7FF571DBF000
|
unkown image
|
page readonly
|
|
|
|
17F6EF50000
|
heap default
|
page read and write
|
|
|
|
1DC0FEB0000
|
unkown image
|
page readonly
|
|
|
|
1945FC02000
|
unkown
|
page read and write
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
7FF5DF46A000
|
unkown image
|
page readonly
|
|
|
|
1945FD8A000
|
unkown
|
page read and write
|
|
|
|
1945F44F000
|
unkown
|
page read and write
|
|
|
|
7DF5DDCA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C87EA000
|
unkown image
|
page readonly
|
|
|
|
7DF561CC2000
|
unkown image
|
page readonly
|
|
|
|
1A31E930000
|
heap default
|
page read and write
|
|
|
|
7FF538DB0000
|
unkown image
|
page readonly
|
|
|
|
C8083FE000
|
stack
|
page read and write
|
|
|
|
2F36F2C2000
|
unkown
|
page read and write
|
|
|
|
7FF538EA1000
|
unkown image
|
page readonly
|
|
|
|
19460202000
|
unkown
|
page read and write
|
|
|
|
422000
|
unkown image
|
page read and write
|
|
|
|
1DC10013000
|
unkown
|
page read and write
|
|
|
|
3130000
|
unkown
|
page read and write
|
|
|
|
7FF5DF337000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF560000
|
unkown image
|
page readonly
|
|
|
|
7FF55E751000
|
unkown image
|
page readonly
|
|
|
|
7FF571E52000
|
unkown image
|
page readonly
|
|
|
|
1945F457000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF571D97000
|
unkown image
|
page readonly
|
|
|
|
7FF59662F000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8AF3000
|
unkown image
|
page readonly
|
|
|
|
1945FD96000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF55E744000
|
unkown image
|
page readonly
|
|
|
|
1945F43C000
|
unkown
|
page read and write
|
|
|
|
7FF5C89C0000
|
unkown image
|
page readonly
|
|
|
|
22B35876000
|
heap default
|
page read and write
|
|
|
|
2FC000
|
unkown
|
page read and write
|
|
|
|
1A31EA4B000
|
unkown
|
page read and write
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
7FF538DC7000
|
unkown image
|
page readonly
|
|
|
|
22B35820000
|
unkown image
|
page readonly
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
1945FD87000
|
unkown
|
page read and write
|
|
|
|
1945F459000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF180000
|
unkown image
|
page readonly
|
|
|
|
7DF5F4732000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF636000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
4EA6B8A000
|
unkown
|
page read and write
|
|
|
|
2F36F190000
|
unkown image
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF5C89DF000
|
unkown image
|
page readonly
|
|
|
|
5D0000
|
unkown image
|
page readonly
|
|
|
|
3246000
|
unkown
|
page read and write
|
|
|
|
7FF5964CE000
|
unkown image
|
page readonly
|
|
|
|
7FF538C53000
|
unkown image
|
page readonly
|
|
|
|
7FF538976000
|
unkown image
|
page readonly
|
|
|
|
19460200000
|
unkown
|
page read and write
|
|
|
|
2F36F2EC000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
765000
|
unkown
|
page read and write
|
|
|
|
7FF54CC34000
|
unkown image
|
page readonly
|
|
|
|
1945FD93000
|
unkown
|
page read and write
|
|
|
|
1945FD8B000
|
unkown
|
page read and write
|
|
|
|
1945FD66000
|
unkown
|
page read and write
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
1945FDAB000
|
unkown
|
page read and write
|
|
|
|
1945F600000
|
unkown image
|
page readonly
|
|
|
|
1DC1003C000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1945F4D2000
|
unkown
|
page read and write
|
|
|
|
7BC457B000
|
stack
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
7FF596350000
|
unkown image
|
page readonly
|
|
|
|
7DF5DDCA2000
|
unkown image
|
page readonly
|
|
|
|
19B000
|
unkown
|
page read and write
|
|
|
|
F5F3FFD000
|
stack
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
22B35AE5000
|
heap private
|
page read and write
|
|
|
|
7FF5DF52C000
|
unkown image
|
page readonly
|
|
|
|
1945FD75000
|
unkown
|
page read and write
|
|
|
|
2F36FC00000
|
unkown image
|
page read and write
|
|
|
|
7FF55E6BE000
|
unkown image
|
page readonly
|
|
|
|
22B35780000
|
unkown image
|
page readonly
|
|
|
|
1945FD8A000
|
unkown
|
page read and write
|
|
|
|
1A31E910000
|
unkown image
|
page readonly
|
|
|
|
7FF571DDD000
|
unkown image
|
page readonly
|
|
|
|
7DF5737D0000
|
unkown image
|
page readonly
|
|
|
|
4EA6FF9000
|
stack
|
page read and write
|
|
|
|
7FF54CBA4000
|
unkown image
|
page readonly
|
|
|
|
114393B000
|
unkown
|
page read and write
|
|
|
|
1945F990000
|
unkown image
|
page readonly
|
|
|
|
732E0FF000
|
stack
|
page read and write
|
|
|
|
7FF55E66B000
|
unkown image
|
page readonly
|
|
|
|
22C0000
|
unkown
|
page read and write
|
|
|
|
1945FD91000
|
unkown
|
page read and write
|
|
|
|
2F36F2C8000
|
unkown
|
page read and write
|
|
|
|
23C839E0000
|
unkown image
|
page readonly
|
|
|
|
1DC0FEB0000
|
unkown image
|
page readonly
|
|
|
|
7FF571AE0000
|
unkown image
|
page readonly
|
|
|
|
1945FA80000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
2922578000
|
stack
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page execute and read and write
|
|
|
|
2922177000
|
stack
|
page read and write
|
|
|
|
1945FDAB000
|
unkown
|
page read and write
|
|
|
|
778000
|
unkown
|
page read and write
|
|
|
|
7FF55E74A000
|
unkown image
|
page readonly
|
|
|
|
23C839D0000
|
unkown image
|
page readonly
|
|
|
|
17F6F08A000
|
unkown
|
page read and write
|
|
|
|
7FF5DF6AA000
|
unkown image
|
page readonly
|
|
|
|
7DF586EE0000
|
unkown image
|
page readonly
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
7FF5DF411000
|
unkown image
|
page readonly
|
|
|
|
3246000
|
unkown
|
page read and write
|
|
|
|
17F6F04C000
|
unkown
|
page read and write
|
|
|
|
7FF54CBB8000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8B3B000
|
unkown image
|
page readonly
|
|
|
|
7DF561CD0000
|
unkown image
|
page readonly
|
|
|
|
22B35E70000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF5C5000
|
unkown image
|
page readonly
|
|
|
|
1945F470000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B1A000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1A31EA70000
|
unkown
|
page read and write
|
|
|
|
C80827F000
|
stack
|
page read and write
|
|
|
|
7FF538E26000
|
unkown image
|
page readonly
|
|
|
|
3246000
|
unkown
|
page read and write
|
|
|
|
3130000
|
unkown
|
page read and write
|
|
|
|
1945FB40000
|
unkown
|
page read and write
|
|
|
|
7FF54CBCD000
|
unkown image
|
page readonly
|
|
|
|
1945F4E8000
|
unkown
|
page read and write
|
|
|
|
19460302000
|
unkown
|
page read and write
|
|
|
|
2F36F369000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page write copy
|
|
|
|
7FF5965E7000
|
unkown image
|
page readonly
|
|
|
|
2922077000
|
stack
|
page read and write
|
|
|
|
7FF596421000
|
unkown image
|
page readonly
|
|
|
|
69E000
|
stack
|
page read and write
|
|
|
|
7FF5DF401000
|
unkown image
|
page readonly
|
|
|
|
33DB000
|
unkown
|
page read and write
|
|
|
|
7FF5DF09E000
|
unkown image
|
page readonly
|
|
|
|
7FF571E4A000
|
unkown image
|
page readonly
|
|
|
|
1945F4E1000
|
unkown
|
page read and write
|
|
|
|
7FF5DF62E000
|
unkown image
|
page readonly
|
|
|
|
2850000
|
stack
|
page read and write
|
|
|
|
22B35898000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
heap default
|
page read and write
|
|
|
|
2F36F2CA000
|
unkown
|
page read and write
|
|
|
|
7DF5737D0000
|
unkown image
|
page readonly
|
|
|
|
3246000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
1945FD85000
|
unkown
|
page read and write
|
|
|
|
17F6F048000
|
unkown
|
page read and write
|
|
|
|
7DF5737D2000
|
unkown image
|
page readonly
|
|
|
|
7DF5737E0000
|
unkown image
|
page readonly
|
|
|
|
1945F502000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
2F36F170000
|
unkown image
|
page read and write
|
|
|
|
1B0000
|
unkown image
|
page readonly
|
|
|
|
7FF571E44000
|
unkown image
|
page readonly
|
|
|
|
7DF586EE0000
|
unkown image
|
page readonly
|
|
|
|
22EA000
|
unkown
|
page read and write
|
|
|
|
7FF571CAD000
|
unkown image
|
page readonly
|
|
|
|
77C000
|
unkown
|
page read and write
|
|
|
|
1945F4E5000
|
unkown
|
page read and write
|
|
|
|
7FF571AD7000
|
unkown image
|
page readonly
|
|
|
|
7DF586ED2000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1DC10100000
|
unkown
|
page read and write
|
|
|
|
7FF5DF481000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF6A4000
|
unkown image
|
page readonly
|
|
|
|
7BC45FE000
|
stack
|
page read and write
|
|
|
|
732DDFE000
|
stack
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7DF5AB742000
|
unkown image
|
page readonly
|
|
|
|
605000
|
heap default
|
page read and write
|
|
|
|
1945F488000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1945FD9D000
|
unkown
|
page read and write
|
|
|
|
C80837F000
|
stack
|
page read and write
|
|
|
|
7FF596607000
|
unkown image
|
page readonly
|
|
|
|
1DC10113000
|
unkown
|
page read and write
|
|
|
|
22B35885000
|
unkown
|
page read and write
|
|
|
|
2F36F190000
|
unkown image
|
page readonly
|
|
|
|
2330000
|
heap private
|
page read and write
|
|
|
|
228E000
|
stack
|
page read and write
|
|
|
|
1945F44B000
|
unkown
|
page read and write
|
|
|
|
1945FD89000
|
unkown
|
page read and write
|
|
|
|
732DB7D000
|
stack
|
page read and write
|
|
|
|
243F000
|
stack
|
page read and write
|
|
|
|
7DF561CD2000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF538D1C000
|
unkown image
|
page readonly
|
|
|
|
7DF54DF32000
|
unkown image
|
page readonly
|
|
|
|
1945F4A5000
|
unkown
|
page read and write
|
|
|
|
1DC10064000
|
unkown
|
page read and write
|
|
|
|
1945FD27000
|
unkown
|
page read and write
|
|
|
|
779000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B0F000
|
unkown image
|
page readonly
|
|
|
|
7FF596649000
|
unkown image
|
page readonly
|
|
|
|
765000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
There are 1017 hidden memdumps, click here to show them.