Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
GlLHM7paoZ.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\kVuoJyeoW.bmp
|
PC bitmap, Windows 3.x format, 1280 x 1024 x 16
|
dropped
|
|
|
|
C:\Users\user\Contacts\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\BNAGMGSPLO\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\LSBIHQFDVT\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\QCFWYSKMHA\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\DUUDTUBZFW\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\GIGIYTFFYT\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\PIVFAGEAAV\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Saved Games\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Searches\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Videos\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\3D Objects\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\Desktop\BJZFPPWAPT\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\BNAGMGSPLO.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\BNAGMGSPLO.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\DUUDTUBZFW.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\DUUDTUBZFW\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\EEGWXUHVUG.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\EFOYFBOLXA.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\EFOYFBOLXA.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\EFOYFBOLXA.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\EWZCVGNOWT.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\GAOBCVIQIJ.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\GAOBCVIQIJ.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\GAOBCVIQIJ\BNAGMGSPLO.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\GAOBCVIQIJ\EEGWXUHVUG.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\GAOBCVIQIJ\EFOYFBOLXA.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\GAOBCVIQIJ\GAOBCVIQIJ.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\GAOBCVIQIJ\QCFWYSKMHA.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\GAOBCVIQIJ\SUAVTZKNFL.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\GAOBCVIQIJ\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\GIGIYTFFYT\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\JDDHMPCDUJ.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\JDDHMPCDUJ\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\LFOPODGVOH\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\LSBIHQFDVT.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\LSBIHQFDVT\GAOBCVIQIJ.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\LSBIHQFDVT\LSBIHQFDVT.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\LSBIHQFDVT\PWCCAWLGRE.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\LSBIHQFDVT\QCFWYSKMHA.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\LSBIHQFDVT\SUAVTZKNFL.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\LSBIHQFDVT\ZQIXMVQGAH.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\NWCXBPIUYI\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\PALRGUCVEH.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\PIVFAGEAAV\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\PWCCAWLGRE.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QCFWYSKMHA.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QCFWYSKMHA.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QCFWYSKMHA.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QCFWYSKMHA\BNAGMGSPLO.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QCFWYSKMHA\DUUDTUBZFW.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QCFWYSKMHA\EFOYFBOLXA.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QCFWYSKMHA\EWZCVGNOWT.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QCFWYSKMHA\JDDHMPCDUJ.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QCFWYSKMHA\QCFWYSKMHA.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QNCYCDFIJJ.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QNCYCDFIJJ.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QNCYCDFIJJ\EFOYFBOLXA.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QNCYCDFIJJ\PALRGUCVEH.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QNCYCDFIJJ\QNCYCDFIJJ.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QNCYCDFIJJ\SQSJKEBWDT.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QNCYCDFIJJ\SUAVTZKNFL.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QNCYCDFIJJ\ZGGKNSUKOP.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\QNCYCDFIJJ\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\SQSJKEBWDT.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\SUAVTZKNFL.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\SUAVTZKNFL.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\ZGGKNSUKOP.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\ZQIXMVQGAH.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\BJZFPPWAPT\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\BNAGMGSPLO.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\BNAGMGSPLO.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\BNAGMGSPLO\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\DUUDTUBZFW.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\EEGWXUHVUG.png.kVuoJyeoW
|
COM executable for DOS
|
dropped
|
|
|
|
C:\Users\user\Documents\EFOYFBOLXA.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\EFOYFBOLXA.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\EFOYFBOLXA.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\EWZCVGNOWT.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\GAOBCVIQIJ.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\GAOBCVIQIJ.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\GAOBCVIQIJ\BNAGMGSPLO.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\GAOBCVIQIJ\EEGWXUHVUG.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\GAOBCVIQIJ\EFOYFBOLXA.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\GAOBCVIQIJ\GAOBCVIQIJ.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\GAOBCVIQIJ\QCFWYSKMHA.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\GAOBCVIQIJ\SUAVTZKNFL.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\GAOBCVIQIJ\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\JDDHMPCDUJ.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\JDDHMPCDUJ\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\LFOPODGVOH\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\NWCXBPIUYI\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\PALRGUCVEH.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\PWCCAWLGRE.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QCFWYSKMHA.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QCFWYSKMHA.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QCFWYSKMHA.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QCFWYSKMHA\BNAGMGSPLO.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QCFWYSKMHA\DUUDTUBZFW.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QCFWYSKMHA\EFOYFBOLXA.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QCFWYSKMHA\EWZCVGNOWT.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QCFWYSKMHA\JDDHMPCDUJ.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QCFWYSKMHA\QCFWYSKMHA.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QCFWYSKMHA\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\QNCYCDFIJJ.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QNCYCDFIJJ.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QNCYCDFIJJ\EFOYFBOLXA.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QNCYCDFIJJ\PALRGUCVEH.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QNCYCDFIJJ\QNCYCDFIJJ.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QNCYCDFIJJ\SQSJKEBWDT.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QNCYCDFIJJ\SUAVTZKNFL.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QNCYCDFIJJ\ZGGKNSUKOP.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\QNCYCDFIJJ\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\SQSJKEBWDT.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\SUAVTZKNFL.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\SUAVTZKNFL.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\SUAVTZKNFL.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\ZGGKNSUKOP.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\ZQIXMVQGAH.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\ZQIXMVQGAH\GAOBCVIQIJ.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\ZQIXMVQGAH\PWCCAWLGRE.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\ZQIXMVQGAH\QCFWYSKMHA.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\ZQIXMVQGAH\QNCYCDFIJJ.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\ZQIXMVQGAH\SUAVTZKNFL.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\ZQIXMVQGAH\ZQIXMVQGAH.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Documents\ZQIXMVQGAH\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Downloads\BNAGMGSPLO.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\BNAGMGSPLO.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\DUUDTUBZFW.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\EEGWXUHVUG.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\EFOYFBOLXA.jpg.kVuoJyeoW
|
PGP\011Secret Sub-key -
|
dropped
|
|
|
|
C:\Users\user\Downloads\EFOYFBOLXA.mp3.kVuoJyeoW
|
370 sysV executable not stripped
|
dropped
|
|
|
|
C:\Users\user\Downloads\EFOYFBOLXA.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\EWZCVGNOWT.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\GAOBCVIQIJ.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\GAOBCVIQIJ.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\JDDHMPCDUJ.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\PALRGUCVEH.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\PWCCAWLGRE.png.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\QCFWYSKMHA.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\QCFWYSKMHA.jpg.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\QCFWYSKMHA.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\QNCYCDFIJJ.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\QNCYCDFIJJ.pdf.kVuoJyeoW
|
DOS executable (COM)
|
dropped
|
|
|
|
C:\Users\user\Downloads\SQSJKEBWDT.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\SUAVTZKNFL.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\SUAVTZKNFL.pdf.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\SUAVTZKNFL.xlsx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\ZGGKNSUKOP.mp3.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\ZQIXMVQGAH.docx.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Downloads\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Favorites\Amazon.url.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Favorites\Bing.url.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Favorites\Facebook.url.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Favorites\Google.url.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Favorites\Links\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Favorites\Live.url.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Favorites\NYTimes.url.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Favorites\Reddit.url.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Favorites\Twitter.url.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Favorites\Wikipedia.url.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Favorites\Youtube.url.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Favorites\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Links\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Music\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\OneDrive\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Pictures\Camera Roll\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Pictures\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Recent\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Searches\Everywhere.search-ms.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\Searches\Indexed Locations.search-ms.kVuoJyeoW
|
data
|
dropped
|
|
|
|
C:\Users\user\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\kVuoJyeoW.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
There are 167 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\GlLHM7paoZ.exe
|
'C:\Users\user\Desktop\GlLHM7paoZ.exe'
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://paymenthacks.com/?ztYdx0Q=9Jh2L4nBPBJechaF7&aLz8nwiFC=fVBFCEdqrnS06Ab&ZaNSaGgG3=maO6bGG6LAg&m
|
unknown
|
|
|
|
http://ww25.paymenthacks.com/
|
unknown
|
|
|
|
http://supp24yy6a66hwszu2piygicgwzdtbwftb76htfj7vnip3getgqnzxid.onion/7NT6LXKC1XQHW5039BLOV.
|
unknown
|
|
|
|
http://ww25.paymenthacks.com/?ztYdx0Q=9Jh2L4nBPBJechaF7&aLz8nwiFC=fVBFCEdqrnS06Ab&ZaNSaGgG3=maO6bGG6
|
unknown
|
|
|
|
http://paymenthacks.com/?ztYdx0Q=9Jh2L4nBPBJechaF7&aLz8nwiFC=fVBFCEdqrnS06Ab&ZaNSaGgG3=maO6bGG6LAg&mi3fju3=SkxeAp3EGyy3E&fGep=oo79la8IfpgF2Pf&Ktpuhpgn=2pQNXS3RarpD2S&lzLC=HEaimaSUBS3zw0nFsZL&MNg=HhbZ8eK
|
103.224.212.222
|
|
|
|
https://paymenthacks.com/?ztYdx0Q=9Jh2L4nBPBJechaF7&aLz8nwiFC=fVBFCEdqrnS06Ab&ZaNSaGgG3=maO6bGG6LAg&mi3fju3=SkxeAp3EGyy3E&fGep=oo79la8IfpgF2Pf&Ktpuhpgn=2pQNXS3RarpD2S&lzLC=HEaimaSUBS3zw0nFsZL&MNg=HhbZ8eK
|
103.224.212.222
|
|
|
|
http://ww25.paymenthacks.com/?ztYdx0Q=9Jh2L4nBPBJechaF7&aLz8nwiFC=fVBFCEdqrnS06Ab&ZaNSaGgG3=maO6bGG6LAg&mi3fju3=SkxeAp3EGyy3E&fGep=oo79la8IfpgF2Pf&Ktpuhpgn=2pQNXS3RarpD2S&lzLC=HEaimaSUBS3zw0nFsZL&MNg=HhbZ8eK&subid1=20211024-1821-244d-afd2-7f2406ac953a
|
199.59.242.153
|
|
|
|
http://paymenthacks.com/?wFdsAo=m8SxzzJYA8Cye0ZuIp&IIu7qt4s=9vaqCkIU&P0rY85r3g=3yWBtmW9ThsVHLPvT&NIz
|
unknown
|
|
|
|
http://ww25.paymenthacks.com/?wFdsAo=m8SxzzJYA8Cye0ZuIp&IIu7qt4s=9vaqCkIU&P0rY85r3g=3yWBtmW9ThsVHLPv
|
unknown
|
|
|
|
http://ww25.paymenthacks.com/?ztYdx0Q=9Jh2L4nBPBJechaF7&aLz8nwiFC=fVBFCEdqrnS06Ab&ZaNSaGgG3=maO6bGG6LAg&mi3fju3=SkxeAp3EGyy3E&fGep=oo79la8IfpgF2Pf&Ktpuhpgn=2pQNXS3RarpD2S&lzLC=HEaimaSUBS3zw0nFsZL&MNg=HhbZ8eK&subid1=20211024-1821-245b-b16a-e897805eb3ba
|
199.59.242.153
|
|
|
|
http://ww25.paymenthacks.com/u
|
unknown
|
|
|
|
http://mojobiden.com/?wFdsAo=m8SxzzJYA8Cye0ZuIp&IIu7qt4s=9vaqCkIU&P0rY85r3g=3yWBtmW9ThsVHLPvT&NIzLa=
|
unknown
|
|
|
|
https://mojobiden.com/?ztYdx0Q=9Jh2L4nBPBJechaF7&aLz8nwiFC=fVBFCEdqrnS06Ab&ZaNSaGgG3=maO6bGG6LAg&mi3
|
unknown
|
|
|
|
https://mojobiden.com/
|
unknown
|
|
|
|
https://mojobiden.com/ments
|
unknown
|
|
|
|
https://www.torproject.org/).
|
unknown
|
|
|
|
http://mojobiden.com/?ztYdx0Q=9Jh2L4nBPBJechaF7&aLz8nwiFC=fVBFCEdqrnS06Ab&ZaNSaGgG3=maO6bGG6LAg&mi3f
|
unknown
|
|
There are 7 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
paymenthacks.com
|
103.224.212.222
|
|
|
|
mojobiden.com
|
unknown
|
|
|
|
ww25.paymenthacks.com
|
unknown
|
|
|
|
77026.bodis.com
|
199.59.242.153
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
103.224.212.222
|
paymenthacks.com
|
Australia
|
|
|
|
199.59.242.153
|
77026.bodis.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Control Panel\Desktop
|
WallPaper
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
12FB000
|
unkown
|
page read and write
|
|
|
|
12FC000
|
unkown
|
page read and write
|
|
|
|
12FF000
|
unkown
|
page read and write
|
|
|
|
7FF59F10C000
|
unkown image
|
page readonly
|
|
|
|
206FF9B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A912E000
|
unkown image
|
page readonly
|
|
|
|
2195D213000
|
unkown
|
page read and write
|
|
|
|
7FF561DD3000
|
unkown image
|
page readonly
|
|
|
|
213909E0000
|
unkown image
|
page readonly
|
|
|
|
12FB000
|
unkown
|
page read and write
|
|
|
|
7F352000
|
unkown image
|
page readonly
|
|
|
|
7FF565671000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF54B89C000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
23DC27F000
|
stack
|
page read and write
|
|
|
|
7FF536F87000
|
unkown image
|
page readonly
|
|
|
|
2E10000
|
heap private
|
page execute and read and write
|
|
|
|
5205B9C000
|
unkown
|
page read and write
|
|
|
|
1354000
|
unkown
|
page read and write
|
|
|
|
7FF5C4B4B000
|
unkown image
|
page readonly
|
|
|
|
21390C10000
|
unkown
|
page read and write
|
|
|
|
7FF54BE17000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9201000
|
unkown image
|
page readonly
|
|
|
|
1E97AFF0000
|
unkown image
|
page readonly
|
|
|
|
12DF5110000
|
unkown image
|
page readonly
|
|
|
|
1B6597B3000
|
unkown
|
page read and write
|
|
|
|
BDBFAFF000
|
stack
|
page read and write
|
|
|
|
235035B0000
|
unkown
|
page read and write
|
|
|
|
1D47DC6B000
|
unkown
|
page read and write
|
|
|
|
2195D170000
|
unkown image
|
page readonly
|
|
|
|
1E97B2B8000
|
unkown
|
page read and write
|
|
|
|
7DF4FB710000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8F86000
|
unkown image
|
page readonly
|
|
|
|
7FF561E37000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF565593000
|
unkown image
|
page readonly
|
|
|
|
7FF59F17E000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
206FFC49000
|
unkown
|
page read and write
|
|
|
|
23DC37D000
|
stack
|
page read and write
|
|
|
|
206FFC42000
|
unkown
|
page read and write
|
|
|
|
1B659B40000
|
unkown
|
page read and write
|
|
|
|
7FF5C44ED000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD242000
|
unkown image
|
page readonly
|
|
|
|
71D367C000
|
stack
|
page read and write
|
|
|
|
206FF9D0000
|
unkown image
|
page readonly
|
|
|
|
1A5CF849000
|
unkown
|
page read and write
|
|
|
|
12FB000
|
heap default
|
page read and write
|
|
|
|
7FF561C46000
|
unkown image
|
page readonly
|
|
|
|
2195D120000
|
unkown image
|
page read and write
|
|
|
|
2195D229000
|
unkown
|
page read and write
|
|
|
|
776D079000
|
stack
|
page read and write
|
|
|
|
2195DA02000
|
unkown
|
page read and write
|
|
|
|
7FF4FD9F5000
|
unkown image
|
page readonly
|
|
|
|
2E21000
|
unkown
|
page read and write
|
|
|
|
1E118890000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD9E4000
|
unkown image
|
page readonly
|
|
|
|
1B65976D000
|
unkown
|
page read and write
|
|
|
|
7DF544CC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4BB5000
|
unkown image
|
page readonly
|
|
|
|
206FF9B0000
|
unkown image
|
page readonly
|
|
|
|
7FF561E0B000
|
unkown image
|
page readonly
|
|
|
|
3A50000
|
unkown
|
page read and write
|
|
|
|
7FF56406A000
|
unkown image
|
page readonly
|
|
|
|
1A7E6FF000
|
stack
|
page read and write
|
|
|
|
1A7E1FF000
|
stack
|
page read and write
|
|
|
|
7DF5732D0000
|
unkown image
|
page readonly
|
|
|
|
7FF59EFF1000
|
unkown image
|
page readonly
|
|
|
|
1B658F13000
|
unkown
|
page read and write
|
|
|
|
1A5CFA00000
|
unkown image
|
page readonly
|
|
|
|
7FF59F1C3000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3BE2000
|
unkown image
|
page readonly
|
|
|
|
20734F60000
|
unkown image
|
page read and write
|
|
|
|
1A5CF82A000
|
unkown
|
page read and write
|
|
|
|
7DF559BA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFB0E000
|
unkown image
|
page readonly
|
|
|
|
135C000
|
unkown
|
page read and write
|
|
|
|
2195D140000
|
unkown image
|
page readonly
|
|
|
|
7FF5368A3000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD97D000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4C73000
|
unkown image
|
page readonly
|
|
|
|
7DF5732D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5732D2000
|
unkown image
|
page readonly
|
|
|
|
7FF550A9B000
|
unkown image
|
page readonly
|
|
|
|
12DF5170000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF5EFB33000
|
unkown image
|
page readonly
|
|
|
|
7FF59EF25000
|
unkown image
|
page readonly
|
|
|
|
1B6597B4000
|
unkown
|
page read and write
|
|
|
|
7FF59F0B7000
|
unkown image
|
page readonly
|
|
|
|
206FFC4E000
|
unkown
|
page read and write
|
|
|
|
776CF7B000
|
stack
|
page read and write
|
|
|
|
7DF5ACF20000
|
unkown image
|
page readonly
|
|
|
|
2E21000
|
unkown
|
page read and write
|
|
|
|
7FF561DB7000
|
unkown image
|
page readonly
|
|
|
|
12DF5140000
|
unkown image
|
page readonly
|
|
|
|
1E97B2C7000
|
unkown
|
page read and write
|
|
|
|
7FF5C4CDD000
|
unkown image
|
page readonly
|
|
|
|
7FF5A910F000
|
unkown image
|
page readonly
|
|
|
|
7FF59F08B000
|
unkown image
|
page readonly
|
|
|
|
7FF54BA69000
|
unkown image
|
page readonly
|
|
|
|
7DF5ACF02000
|
unkown image
|
page readonly
|
|
|
|
20735100000
|
unkown
|
page read and write
|
|
|
|
2195D140000
|
unkown image
|
page readonly
|
|
|
|
1C49B7F000
|
stack
|
page read and write
|
|
|
|
7FF59EFE4000
|
unkown image
|
page readonly
|
|
|
|
7F360000
|
unkown image
|
page readonly
|
|
|
|
1E118A7C000
|
unkown
|
page read and write
|
|
|
|
1B6597D8000
|
unkown
|
page read and write
|
|
|
|
7FF565642000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5F49000
|
unkown image
|
page readonly
|
|
|
|
7DF50B670000
|
unkown image
|
page readonly
|
|
|
|
1B65975B000
|
unkown
|
page read and write
|
|
|
|
1A5CF800000
|
unkown
|
page read and write
|
|
|
|
7FF56406D000
|
unkown image
|
page readonly
|
|
|
|
7FF56404E000
|
unkown image
|
page readonly
|
|
|
|
7FF54BE9D000
|
unkown image
|
page readonly
|
|
|
|
F3E000
|
stack
|
page read and write
|
|
|
|
7DF5ACF02000
|
unkown image
|
page readonly
|
|
|
|
BF0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF564003000
|
unkown image
|
page readonly
|
|
|
|
7FF5655CE000
|
unkown image
|
page readonly
|
|
|
|
7FF5A90F7000
|
unkown image
|
page readonly
|
|
|
|
7DF5732D2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4D39000
|
unkown image
|
page readonly
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
7DF50B660000
|
unkown image
|
page readonly
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7FF59F2A1000
|
unkown image
|
page readonly
|
|
|
|
206FFC7D000
|
unkown
|
page read and write
|
|
|
|
7FF54BE4E000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4BBB000
|
unkown image
|
page readonly
|
|
|
|
7FF59EC0B000
|
unkown image
|
page readonly
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
1D47DC3D000
|
unkown
|
page read and write
|
|
|
|
1B6592D0000
|
unkown image
|
page readonly
|
|
|
|
776CC7D000
|
unkown
|
page read and write
|
|
|
|
7FF54BE6B000
|
unkown image
|
page readonly
|
|
|
|
23503596000
|
heap default
|
page read and write
|
|
|
|
20734FE0000
|
unkown image
|
page readonly
|
|
|
|
7DF571D52000
|
unkown image
|
page readonly
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7DF4711A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5619A7000
|
unkown image
|
page readonly
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
1A7E5FF000
|
stack
|
page read and write
|
|
|
|
7FF59F29A000
|
unkown image
|
page readonly
|
|
|
|
2E21000
|
unkown
|
page read and write
|
|
|
|
1E118B13000
|
unkown
|
page read and write
|
|
|
|
1B659760000
|
unkown
|
page read and write
|
|
|
|
3A50000
|
unkown
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7DF5FD860000
|
unkown image
|
page readonly
|
|
|
|
7FF5A917A000
|
unkown image
|
page readonly
|
|
|
|
7FF54BF11000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFBE1000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
12FB000
|
unkown
|
page read and write
|
|
|
|
1B658E4E000
|
unkown
|
page read and write
|
|
|
|
7FF56171A000
|
unkown image
|
page readonly
|
|
|
|
1B65976F000
|
unkown
|
page read and write
|
|
|
|
7FF59F1AF000
|
unkown image
|
page readonly
|
|
|
|
1E118B02000
|
unkown
|
page read and write
|
|
|
|
7DF5FD850000
|
unkown image
|
page readonly
|
|
|
|
23503BF0000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
1E97AFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF536FAE000
|
unkown image
|
page readonly
|
|
|
|
21390B68000
|
unkown
|
page read and write
|
|
|
|
1B65976C000
|
unkown
|
page read and write
|
|
|
|
1C497BE000
|
stack
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF5C4C80000
|
unkown image
|
page readonly
|
|
|
|
20735600000
|
unkown image
|
page readonly
|
|
|
|
7FF5652FC000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
20735402000
|
unkown
|
page read and write
|
|
|
|
1B659560000
|
unkown image
|
page readonly
|
|
|
|
7FF5654DC000
|
unkown image
|
page readonly
|
|
|
|
7FF54BE43000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFBB9000
|
unkown image
|
page readonly
|
|
|
|
7FF561CAB000
|
unkown image
|
page readonly
|
|
|
|
1A5CF660000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD920000
|
unkown image
|
page readonly
|
|
|
|
1103000
|
unkown image
|
page readonly
|
|
|
|
7DF5D29D0000
|
unkown image
|
page readonly
|
|
|
|
7DF46FC20000
|
unkown image
|
page readonly
|
|
|
|
21390B2E000
|
unkown
|
page read and write
|
|
|
|
7FF4FD23E000
|
unkown image
|
page readonly
|
|
|
|
2195D256000
|
unkown
|
page read and write
|
|
|
|
235034C0000
|
unkown image
|
page readonly
|
|
|
|
2195D227000
|
unkown
|
page read and write
|
|
|
|
1B658E5A000
|
unkown
|
page read and write
|
|
|
|
7F340000
|
unkown image
|
page readonly
|
|
|
|
7FF5A917D000
|
unkown image
|
page readonly
|
|
|
|
776CE79000
|
stack
|
page read and write
|
|
|
|
12DF51C0000
|
unkown
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
1A5CF650000
|
heap private
|
page read and write
|
|
|
|
1A5CF83C000
|
unkown
|
page read and write
|
|
|
|
20734F70000
|
unkown
|
page read and write
|
|
|
|
7FF5A910D000
|
unkown image
|
page readonly
|
|
|
|
20734FD0000
|
heap default
|
page read and write
|
|
|
|
F75000
|
unkown
|
page read and write
|
|
|
|
7FF5640D4000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4CBE000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3BD0000
|
unkown image
|
page readonly
|
|
|
|
1102000
|
unkown image
|
page write copy
|
|
|
|
129A000
|
unkown
|
page read and write
|
|
|
|
7FF59F151000
|
unkown image
|
page readonly
|
|
|
|
1770000
|
unkown image
|
page readonly
|
|
|
|
7FF5619A1000
|
unkown image
|
page readonly
|
|
|
|
1E97B100000
|
unkown image
|
page readonly
|
|
|
|
7FF565384000
|
unkown image
|
page readonly
|
|
|
|
21391010000
|
unkown image
|
page readonly
|
|
|
|
6DE7378000
|
stack
|
page read and write
|
|
|
|
7FF59F14F000
|
unkown image
|
page readonly
|
|
|
|
2195D160000
|
unkown image
|
page readonly
|
|
|
|
1D47DB50000
|
unkown image
|
page readonly
|
|
|
|
1B658E4F000
|
unkown
|
page read and write
|
|
|
|
1B65977F000
|
unkown
|
page read and write
|
|
|
|
1B659B50000
|
unkown image
|
page read and write
|
|
|
|
A22B7E000
|
stack
|
page read and write
|
|
|
|
235035BA000
|
unkown
|
page read and write
|
|
|
|
2E21000
|
unkown
|
page read and write
|
|
|
|
1354000
|
unkown
|
page read and write
|
|
|
|
7FF563CB6000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
1B658F16000
|
unkown
|
page read and write
|
|
|
|
7FF54BE29000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9177000
|
unkown image
|
page readonly
|
|
|
|
7DF5B6E70000
|
unkown image
|
page readonly
|
|
|
|
7FF561E13000
|
unkown image
|
page readonly
|
|
|
|
7FF59ED81000
|
unkown image
|
page readonly
|
|
|
|
12DF50F0000
|
unkown image
|
page read and write
|
|
|
|
7FF59F059000
|
unkown image
|
page readonly
|
|
|
|
BDBF87E000
|
stack
|
page read and write
|
|
|
|
1B6597B3000
|
unkown
|
page read and write
|
|
|
|
7FF54BAB8000
|
unkown image
|
page readonly
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
206FFC71000
|
unkown
|
page read and write
|
|
|
|
1103000
|
unkown image
|
page readonly
|
|
|
|
1E118A5B000
|
unkown
|
page read and write
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
7FF56403B000
|
unkown image
|
page readonly
|
|
|
|
21390B3F000
|
unkown
|
page read and write
|
|
|
|
21390B35000
|
unkown
|
page read and write
|
|
|
|
21390C85000
|
heap private
|
page read and write
|
|
|
|
7DF5D29C2000
|
unkown image
|
page readonly
|
|
|
|
2D96000
|
heap private
|
page read and write
|
|
|
|
7FF563FFD000
|
unkown image
|
page readonly
|
|
|
|
1B659C21000
|
unkown
|
page read and write
|
|
|
|
329D000
|
stack
|
page read and write
|
|
|
|
7FF5E5E7D000
|
unkown image
|
page readonly
|
|
|
|
7FF5654E4000
|
unkown image
|
page readonly
|
|
|
|
23503591000
|
unkown
|
page read and write
|
|
|
|
1B658E59000
|
unkown
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
206FFC3A000
|
unkown
|
page read and write
|
|
|
|
7FF54BB2D000
|
unkown image
|
page readonly
|
|
|
|
7FF59EADE000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5F6A000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5F5A000
|
unkown image
|
page readonly
|
|
|
|
1B658DF0000
|
unkown image
|
page readonly
|
|
|
|
7FF536D22000
|
unkown image
|
page readonly
|
|
|
|
7F350000
|
unkown image
|
page readonly
|
|
|
|
2E13000
|
heap private
|
page execute and read and write
|
|
|
|
1E1188C0000
|
unkown image
|
page readonly
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7FF537022000
|
unkown image
|
page readonly
|
|
|
|
7DF571D62000
|
unkown image
|
page readonly
|
|
|
|
7FF5EF43A000
|
unkown image
|
page readonly
|
|
|
|
206FFC60000
|
unkown
|
page read and write
|
|
|
|
7DF5FD840000
|
unkown image
|
page readonly
|
|
|
|
1359000
|
unkown
|
page read and write
|
|
|
|
7FF536F73000
|
unkown image
|
page readonly
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7FF5EFB03000
|
unkown image
|
page readonly
|
|
|
|
213909D0000
|
unkown image
|
page readonly
|
|
|
|
23DBF7E000
|
stack
|
page read and write
|
|
|
|
21390B40000
|
unkown
|
page read and write
|
|
|
|
B80000
|
unkown image
|
page readonly
|
|
|
|
7FF564013000
|
unkown image
|
page readonly
|
|
|
|
7DF571D52000
|
unkown image
|
page readonly
|
|
|
|
2195D1C0000
|
unkown
|
page read and write
|
|
|
|
7DF56FB40000
|
unkown image
|
page readonly
|
|
|
|
12DF5110000
|
unkown image
|
page readonly
|
|
|
|
1E118890000
|
unkown image
|
page readonly
|
|
|
|
206FFC13000
|
unkown
|
page read and write
|
|
|
|
1B65975E000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F71000
|
unkown image
|
page readonly
|
|
|
|
7FF59F21D000
|
unkown image
|
page readonly
|
|
|
|
7FF59F005000
|
unkown image
|
page readonly
|
|
|
|
1D47DC5A000
|
unkown
|
page read and write
|
|
|
|
1E97B2E4000
|
unkown
|
page read and write
|
|
|
|
21390C30000
|
unkown
|
page read and write
|
|
|
|
520647F000
|
stack
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF5E5EE7000
|
unkown image
|
page readonly
|
|
|
|
7FF54BDF1000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3BF0000
|
unkown image
|
page readonly
|
|
|
|
97773B000
|
unkown
|
page read and write
|
|
|
|
7FF561A86000
|
unkown image
|
page readonly
|
|
|
|
7FF54BF1A000
|
unkown image
|
page readonly
|
|
|
|
32B0000
|
heap private
|
page read and write
|
|
|
|
7DF5F3BE2000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
7DF5D29E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5E97000
|
unkown image
|
page readonly
|
|
|
|
7FF59F21A000
|
unkown image
|
page readonly
|
|
|
|
7FF561E3D000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
7FF54BE40000
|
unkown image
|
page readonly
|
|
|
|
23DC1FD000
|
stack
|
page read and write
|
|
|
|
7DF571D60000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
7FF565412000
|
unkown image
|
page readonly
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
1B6597B2000
|
unkown
|
page read and write
|
|
|
|
BDBFA7B000
|
stack
|
page read and write
|
|
|
|
1E97B23E000
|
unkown
|
page read and write
|
|
|
|
235035B0000
|
unkown
|
page read and write
|
|
|
|
7FF5A9201000
|
unkown image
|
page readonly
|
|
|
|
C431F7F000
|
stack
|
page read and write
|
|
|
|
1E118A02000
|
unkown
|
page read and write
|
|
|
|
1E118A00000
|
unkown
|
page read and write
|
|
|
|
10D0000
|
unkown
|
page read and write
|
|
|
|
9777BE000
|
stack
|
page read and write
|
|
|
|
7FF59F1D7000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFBE1000
|
unkown image
|
page readonly
|
|
|
|
20735115000
|
unkown
|
page read and write
|
|
|
|
7FF59EFFF000
|
unkown image
|
page readonly
|
|
|
|
1E97B200000
|
unkown
|
page read and write
|
|
|
|
10F1000
|
unkown image
|
page execute read
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
1B659C19000
|
unkown
|
page read and write
|
|
|
|
7FF59EE77000
|
unkown image
|
page readonly
|
|
|
|
7DF56FB32000
|
unkown image
|
page readonly
|
|
|
|
1A5CF84B000
|
unkown
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7FF5A9109000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD92E000
|
unkown image
|
page readonly
|
|
|
|
1A5CFD80000
|
unkown image
|
page readonly
|
|
|
|
1B658DB0000
|
unkown image
|
page readonly
|
|
|
|
1E118F80000
|
unkown image
|
page readonly
|
|
|
|
1B658F08000
|
unkown
|
page read and write
|
|
|
|
7FF5EF7A6000
|
unkown image
|
page readonly
|
|
|
|
1B659794000
|
unkown
|
page read and write
|
|
|
|
7FF54BC04000
|
unkown image
|
page readonly
|
|
|
|
7DF571D50000
|
unkown image
|
page readonly
|
|
|
|
2E21000
|
unkown
|
page read and write
|
|
|
|
71D31FC000
|
stack
|
page read and write
|
|
|
|
1E97B313000
|
unkown
|
page read and write
|
|
|
|
7FF5A9158000
|
unkown image
|
page readonly
|
|
|
|
1B6597A0000
|
unkown
|
page read and write
|
|
|
|
20734FA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4CD7000
|
unkown image
|
page readonly
|
|
|
|
2195D1A0000
|
unkown image
|
page readonly
|
|
|
|
7DF571D70000
|
unkown image
|
page readonly
|
|
|
|
1B658EA8000
|
unkown
|
page read and write
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
7FF550A9B000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4C87000
|
unkown image
|
page readonly
|
|
|
|
A230F8000
|
stack
|
page read and write
|
|
|
|
7FF59F17A000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
2195D130000
|
heap private
|
page read and write
|
|
|
|
7FF4FD95E000
|
unkown image
|
page readonly
|
|
|
|
1B658E5B000
|
unkown
|
page read and write
|
|
|
|
1D47DA10000
|
heap private
|
page read and write
|
|
|
|
7DF56FB20000
|
unkown image
|
page readonly
|
|
|
|
7FF564027000
|
unkown image
|
page readonly
|
|
|
|
1A5CF790000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFA3B000
|
unkown image
|
page readonly
|
|
|
|
10F0000
|
unkown image
|
page readonly
|
|
|
|
23503530000
|
unkown image
|
page readonly
|
|
|
|
7FF5655ED000
|
unkown image
|
page readonly
|
|
|
|
7FF536D46000
|
unkown image
|
page readonly
|
|
|
|
1354000
|
unkown
|
page read and write
|
|
|
|
5206277000
|
stack
|
page read and write
|
|
|
|
12DF5229000
|
unkown
|
page read and write
|
|
|
|
7FF59F1EB000
|
unkown image
|
page readonly
|
|
|
|
20734F80000
|
unkown image
|
page readonly
|
|
|
|
7FF59F217000
|
unkown image
|
page readonly
|
|
|
|
7DF5FD842000
|
unkown image
|
page readonly
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
A2269C000
|
unkown
|
page read and write
|
|
|
|
71D357E000
|
stack
|
page read and write
|
|
|
|
1354000
|
unkown
|
page read and write
|
|
|
|
7DF5B6E80000
|
unkown image
|
page readonly
|
|
|
|
206FFC64000
|
unkown
|
page read and write
|
|
|
|
7FF5640E1000
|
unkown image
|
page readonly
|
|
|
|
7FF561720000
|
unkown image
|
page readonly
|
|
|
|
2E21000
|
unkown
|
page read and write
|
|
|
|
7FF4FD9D9000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4B6F000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3BD2000
|
unkown image
|
page readonly
|
|
|
|
206FFC72000
|
unkown
|
page read and write
|
|
|
|
1B6597BD000
|
unkown
|
page read and write
|
|
|
|
7FF561E99000
|
unkown image
|
page readonly
|
|
|
|
C431FFF000
|
stack
|
page read and write
|
|
|
|
7FF561DE7000
|
unkown image
|
page readonly
|
|
|
|
7DF56FB30000
|
unkown image
|
page readonly
|
|
|
|
1B65976F000
|
unkown
|
page read and write
|
|
|
|
7FF59EB00000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
unkown image
|
page readonly
|
|
|
|
7DF559B82000
|
unkown image
|
page readonly
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
146E000
|
stack
|
page read and write
|
|
|
|
7FF59F0F5000
|
unkown image
|
page readonly
|
|
|
|
206FFE00000
|
unkown image
|
page readonly
|
|
|
|
206FFC29000
|
unkown
|
page read and write
|
|
|
|
1B658E53000
|
unkown
|
page read and write
|
|
|
|
108E000
|
stack
|
page read and write
|
|
|
|
7FF5640DA000
|
unkown image
|
page readonly
|
|
|
|
206FFC78000
|
unkown
|
page read and write
|
|
|
|
7FF564017000
|
unkown image
|
page readonly
|
|
|
|
20735013000
|
unkown
|
page read and write
|
|
|
|
1B6597B3000
|
unkown
|
page read and write
|
|
|
|
7DF559B92000
|
unkown image
|
page readonly
|
|
|
|
7FF536ECC000
|
unkown image
|
page readonly
|
|
|
|
2D4E000
|
stack
|
page read and write
|
|
|
|
7FF5A90E4000
|
unkown image
|
page readonly
|
|
|
|
127A000
|
heap default
|
page read and write
|
|
|
|
7FF5EFB17000
|
unkown image
|
page readonly
|
|
|
|
7FF536F70000
|
unkown image
|
page readonly
|
|
|
|
1B658E13000
|
unkown
|
page read and write
|
|
|
|
7FF536F77000
|
unkown image
|
page readonly
|
|
|
|
206FFC3D000
|
unkown
|
page read and write
|
|
|
|
1100000
|
unkown image
|
page write copy
|
|
|
|
7FF5C49E5000
|
unkown image
|
page readonly
|
|
|
|
21390A10000
|
unkown image
|
page readonly
|
|
|
|
1B65978B000
|
unkown
|
page read and write
|
|
|
|
7DF5ACF10000
|
unkown image
|
page readonly
|
|
|
|
12F6000
|
heap default
|
page read and write
|
|
|
|
1210000
|
stack
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
38FA000
|
stack
|
page read and write
|
|
|
|
1E97B0F0000
|
unkown image
|
page readonly
|
|
|
|
23503480000
|
unkown image
|
page read and write
|
|
|
|
20735002000
|
unkown
|
page read and write
|
|
|
|
7FF536FCA000
|
unkown image
|
page readonly
|
|
|
|
7F352000
|
unkown image
|
page readonly
|
|
|
|
7FF536F5A000
|
unkown image
|
page readonly
|
|
|
|
B7C000
|
unkown
|
page read and write
|
|
|
|
7FF561C8D000
|
unkown image
|
page readonly
|
|
|
|
7FF565654000
|
unkown image
|
page readonly
|
|
|
|
1E97B802000
|
unkown
|
page read and write
|
|
|
|
1B658E86000
|
unkown
|
page read and write
|
|
|
|
7FF5A915E000
|
unkown image
|
page readonly
|
|
|
|
1B65976E000
|
unkown
|
page read and write
|
|
|
|
7FF565586000
|
unkown image
|
page readonly
|
|
|
|
7FF536D72000
|
unkown image
|
page readonly
|
|
|
|
1B658E9E000
|
unkown
|
page read and write
|
|
|
|
BDBF5BE000
|
stack
|
page read and write
|
|
|
|
7FF54BE57000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
1270000
|
heap default
|
page read and write
|
|
|
|
1B65977D000
|
unkown
|
page read and write
|
|
|
|
206FFC45000
|
unkown
|
page read and write
|
|
|
|
1359000
|
unkown
|
page read and write
|
|
|
|
1B658E00000
|
unkown
|
page read and write
|
|
|
|
1D47DA40000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4C69000
|
unkown image
|
page readonly
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
7FF536F5F000
|
unkown image
|
page readonly
|
|
|
|
1B658DE0000
|
heap default
|
page read and write
|
|
|
|
4D3E000
|
stack
|
page read and write
|
|
|
|
6DE74FC000
|
stack
|
page read and write
|
|
|
|
7FF56542C000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD94B000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
1C49E7E000
|
stack
|
page read and write
|
|
|
|
7FF5C4B11000
|
unkown image
|
page readonly
|
|
|
|
7DF5D29D0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD90F000
|
unkown image
|
page readonly
|
|
|
|
1100000
|
unkown image
|
page read and write
|
|
|
|
1E118870000
|
unkown image
|
page read and write
|
|
|
|
1C496BC000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF5E5E9E000
|
unkown image
|
page readonly
|
|
|
|
23503580000
|
heap default
|
page read and write
|
|
|
|
10FF000
|
unkown image
|
page readonly
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
7FF59ED87000
|
unkown image
|
page readonly
|
|
|
|
120E000
|
stack
|
page read and write
|
|
|
|
7FF5E5EBB000
|
unkown image
|
page readonly
|
|
|
|
1B658EAF000
|
unkown
|
page read and write
|
|
|
|
1B659759000
|
unkown
|
page read and write
|
|
|
|
1B6597B2000
|
unkown
|
page read and write
|
|
|
|
7FF5A91D2000
|
unkown image
|
page readonly
|
|
|
|
71D307F000
|
stack
|
page read and write
|
|
|
|
1B658E29000
|
unkown
|
page read and write
|
|
|
|
7FF5EF9B0000
|
unkown image
|
page readonly
|
|
|
|
1B6597B4000
|
unkown
|
page read and write
|
|
|
|
1D47DB70000
|
unkown
|
page read and write
|
|
|
|
71D2ACC000
|
unkown
|
page read and write
|
|
|
|
1A7E2FE000
|
stack
|
page read and write
|
|
|
|
7FF59F28A000
|
unkown image
|
page readonly
|
|
|
|
2E20000
|
unkown
|
page read and write
|
|
|
|
23DC0FF000
|
stack
|
page read and write
|
|
|
|
2195D266000
|
unkown
|
page read and write
|
|
|
|
1B658E8D000
|
unkown
|
page read and write
|
|
|
|
4D3A000
|
stack
|
page read and write
|
|
|
|
7FF5E5E83000
|
unkown image
|
page readonly
|
|
|
|
7DF544CB2000
|
unkown image
|
page readonly
|
|
|
|
1E97B287000
|
unkown
|
page read and write
|
|
|
|
1A5CF881000
|
unkown
|
page read and write
|
|
|
|
977CFE000
|
stack
|
page read and write
|
|
|
|
1B658F02000
|
unkown
|
page read and write
|
|
|
|
A22FFF000
|
stack
|
page read and write
|
|
|
|
12DF5302000
|
unkown
|
page read and write
|
|
|
|
1E118A66000
|
unkown
|
page read and write
|
|
|
|
23DBABB000
|
unkown
|
page read and write
|
|
|
|
7FF563FE7000
|
unkown image
|
page readonly
|
|
|
|
1D47DC13000
|
unkown
|
page read and write
|
|
|
|
7FF5A9153000
|
unkown image
|
page readonly
|
|
|
|
1355000
|
unkown
|
page read and write
|
|
|
|
213909C0000
|
unkown image
|
page read and write
|
|
|
|
7FF5C4B30000
|
unkown image
|
page readonly
|
|
|
|
7FF565671000
|
unkown image
|
page readonly
|
|
|
|
7FF537029000
|
unkown image
|
page readonly
|
|
|
|
71D32FE000
|
stack
|
page read and write
|
|
|
|
1B6597B2000
|
unkown
|
page read and write
|
|
|
|
7FF561D2C000
|
unkown image
|
page readonly
|
|
|
|
7DF5D29C2000
|
unkown image
|
page readonly
|
|
|
|
235035A7000
|
unkown
|
page read and write
|
|
|
|
7DF544CC2000
|
unkown image
|
page readonly
|
|
|
|
7DF544CD0000
|
unkown image
|
page readonly
|
|
|
|
7FF536F21000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4D44000
|
unkown image
|
page readonly
|
|
|
|
7FF536DD6000
|
unkown image
|
page readonly
|
|
|
|
7DF571D70000
|
unkown image
|
page readonly
|
|
|
|
235034A0000
|
unkown image
|
page readonly
|
|
|
|
7FF561EC1000
|
unkown image
|
page readonly
|
|
|
|
12EF000
|
unkown
|
page read and write
|
|
|
|
23503870000
|
unkown image
|
page readonly
|
|
|
|
7FF54BE03000
|
unkown image
|
page readonly
|
|
|
|
1A5CF690000
|
unkown image
|
page readonly
|
|
|
|
7DF4D0890000
|
unkown image
|
page readonly
|
|
|
|
1E97B7B0000
|
unkown image
|
page write copy
|
|
|
|
1E97B229000
|
unkown
|
page read and write
|
|
|
|
1B659C6A000
|
unkown
|
page read and write
|
|
|
|
1B659602000
|
unkown
|
page read and write
|
|
|
|
7DF5D29D2000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFB57000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFA65000
|
unkown image
|
page readonly
|
|
|
|
7F340000
|
unkown image
|
page readonly
|
|
|
|
4C3D000
|
stack
|
page read and write
|
|
|
|
7FF59EC07000
|
unkown image
|
page readonly
|
|
|
|
1B659737000
|
unkown
|
page read and write
|
|
|
|
1B65976E000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F54000
|
unkown image
|
page readonly
|
|
|
|
1A5D0002000
|
unkown
|
page read and write
|
|
|
|
21390B30000
|
unkown
|
page read and write
|
|
|
|
1B658D80000
|
heap private
|
page read and write
|
|
|
|
7FF564010000
|
unkown image
|
page readonly
|
|
|
|
20735413000
|
unkown
|
page read and write
|
|
|
|
1B659799000
|
unkown
|
page read and write
|
|
|
|
7FF561EC1000
|
unkown image
|
page readonly
|
|
|
|
7FF54BEF2000
|
unkown image
|
page readonly
|
|
|
|
1E119202000
|
unkown
|
page read and write
|
|
|
|
7FF54BBAC000
|
unkown image
|
page readonly
|
|
|
|
321E000
|
stack
|
page read and write
|
|
|
|
12DF5190000
|
unkown
|
page read and write
|
|
|
|
7FF59F197000
|
unkown image
|
page readonly
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
7DF56FB22000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4BE5000
|
unkown image
|
page readonly
|
|
|
|
7DF5732E2000
|
unkown image
|
page readonly
|
|
|
|
7FF59F291000
|
unkown image
|
page readonly
|
|
|
|
7FF536D34000
|
unkown image
|
page readonly
|
|
|
|
23503A70000
|
unkown image
|
page readonly
|
|
|
|
7FF561D45000
|
unkown image
|
page readonly
|
|
|
|
21390C90000
|
unkown image
|
page readonly
|
|
|
|
1B658E3C000
|
unkown
|
page read and write
|
|
|
|
2DDE000
|
stack
|
page read and write
|
|
|
|
206FFC74000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF59F1C0000
|
unkown image
|
page readonly
|
|
|
|
12DF5240000
|
unkown
|
page read and write
|
|
|
|
1A5CFC00000
|
unkown image
|
page readonly
|
|
|
|
1E97B010000
|
heap default
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
A22F78000
|
stack
|
page read and write
|
|
|
|
7FF59F026000
|
unkown image
|
page readonly
|
|
|
|
7FF59F11B000
|
unkown image
|
page readonly
|
|
|
|
7FF59F1AD000
|
unkown image
|
page readonly
|
|
|
|
206FFC62000
|
unkown
|
page read and write
|
|
|
|
23DBFFC000
|
stack
|
page read and write
|
|
|
|
1B6590D0000
|
unkown image
|
page readonly
|
|
|
|
1B658E51000
|
unkown
|
page read and write
|
|
|
|
2195D4D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5655BB000
|
unkown image
|
page readonly
|
|
|
|
1B658EF8000
|
unkown
|
page read and write
|
|
|
|
BDBFCFE000
|
stack
|
page read and write
|
|
|
|
7DF559B90000
|
unkown image
|
page readonly
|
|
|
|
1B659450000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFBC4000
|
unkown image
|
page readonly
|
|
|
|
1D47E190000
|
unkown image
|
page readonly
|
|
|
|
1B65972A000
|
unkown
|
page read and write
|
|
|
|
7FF56401E000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD90D000
|
unkown image
|
page readonly
|
|
|
|
1B658EA8000
|
unkown
|
page read and write
|
|
|
|
206FFC30000
|
unkown
|
page read and write
|
|
|
|
7FF5A9113000
|
unkown image
|
page readonly
|
|
|
|
206FFBD0000
|
unkown
|
page read and write
|
|
|
|
7DF5FD840000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF5A91D9000
|
unkown image
|
page readonly
|
|
|
|
7DF442B80000
|
unkown image
|
page readonly
|
|
|
|
7FF536DEF000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD9D2000
|
unkown image
|
page readonly
|
|
|
|
7FF561DCD000
|
unkown image
|
page readonly
|
|
|
|
7DF5D29E0000
|
unkown image
|
page readonly
|
|
|
|
6DE757C000
|
stack
|
page read and write
|
|
|
|
213909E0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD927000
|
unkown image
|
page readonly
|
|
|
|
520637F000
|
stack
|
page read and write
|
|
|
|
206FFC6B000
|
unkown
|
page read and write
|
|
|
|
23503500000
|
unkown
|
page read and write
|
|
|
|
2195D23C000
|
unkown
|
page read and write
|
|
|
|
12DF525C000
|
unkown
|
page read and write
|
|
|
|
7FF5640EA000
|
unkown image
|
page readonly
|
|
|
|
1B65976F000
|
unkown
|
page read and write
|
|
|
|
1B6597BD000
|
unkown
|
page read and write
|
|
|
|
1A7E4FF000
|
stack
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7FF5C4CAB000
|
unkown image
|
page readonly
|
|
|
|
7DF457A50000
|
unkown image
|
page readonly
|
|
|
|
7FF54BE24000
|
unkown image
|
page readonly
|
|
|
|
235035BA000
|
unkown
|
page read and write
|
|
|
|
1E1188E0000
|
heap default
|
page read and write
|
|
|
|
20734FB0000
|
unkown image
|
page readonly
|
|
|
|
1E118A3C000
|
unkown
|
page read and write
|
|
|
|
10F0000
|
unkown image
|
page readonly
|
|
|
|
1260000
|
unkown
|
page read and write
|
|
|
|
1A5CF813000
|
unkown
|
page read and write
|
|
|
|
1B659766000
|
unkown
|
page read and write
|
|
|
|
7FF536DAF000
|
unkown image
|
page readonly
|
|
|
|
A2279E000
|
stack
|
page read and write
|
|
|
|
206FFC7A000
|
unkown
|
page read and write
|
|
|
|
7FF5C4BE1000
|
unkown image
|
page readonly
|
|
|
|
71D317E000
|
stack
|
page read and write
|
|
|
|
1E118A2A000
|
unkown
|
page read and write
|
|
|
|
1C49C7F000
|
stack
|
page read and write
|
|
|
|
1D47E000000
|
unkown image
|
page readonly
|
|
|
|
1B65976A000
|
unkown
|
page read and write
|
|
|
|
1D47DA00000
|
unkown image
|
page read and write
|
|
|
|
2195D300000
|
unkown
|
page read and write
|
|
|
|
7FF565661000
|
unkown image
|
page readonly
|
|
|
|
1B658EE2000
|
unkown
|
page read and write
|
|
|
|
1365000
|
unkown
|
page read and write
|
|
|
|
1E97B302000
|
unkown
|
page read and write
|
|
|
|
206FF9A0000
|
heap private
|
page read and write
|
|
|
|
71D2EFC000
|
stack
|
page read and write
|
|
|
|
1B6597B6000
|
unkown
|
page read and write
|
|
|
|
7FF54BE2F000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4CB3000
|
unkown image
|
page readonly
|
|
|
|
2195D302000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF54BF0A000
|
unkown image
|
page readonly
|
|
|
|
7FF59F1FE000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5E67000
|
unkown image
|
page readonly
|
|
|
|
7FF54BE72000
|
unkown image
|
page readonly
|
|
|
|
7DF50B680000
|
unkown image
|
page readonly
|
|
|
|
1B659771000
|
unkown
|
page read and write
|
|
|
|
1B658EE5000
|
unkown
|
page read and write
|
|
|
|
7FF565554000
|
unkown image
|
page readonly
|
|
|
|
7FF5EF9AD000
|
unkown image
|
page readonly
|
|
|
|
7FF54BBF2000
|
unkown image
|
page readonly
|
|
|
|
20735028000
|
unkown
|
page read and write
|
|
|
|
1B65978B000
|
unkown
|
page read and write
|
|
|
|
7DF5732E0000
|
unkown image
|
page readonly
|
|
|
|
1A5CF900000
|
unkown
|
page read and write
|
|
|
|
7FF54BCBF000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF561C71000
|
unkown image
|
page readonly
|
|
|
|
7FF5A90CE000
|
unkown image
|
page readonly
|
|
|
|
12DF5160000
|
heap default
|
page read and write
|
|
|
|
7FF5C4D51000
|
unkown image
|
page readonly
|
|
|
|
7DF56FB32000
|
unkown image
|
page readonly
|
|
|
|
1D47DE00000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
1B65975E000
|
unkown
|
page read and write
|
|
|
|
4D40000
|
unkown
|
page read and write
|
|
|
|
1E97AFC0000
|
unkown image
|
page readonly
|
|
|
|
206FFC82000
|
unkown
|
page read and write
|
|
|
|
7FF4FD97A000
|
unkown image
|
page readonly
|
|
|
|
1A7E0FC000
|
stack
|
page read and write
|
|
|
|
7DF5B6E62000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7DF56FB20000
|
unkown image
|
page readonly
|
|
|
|
10FF000
|
unkown image
|
page readonly
|
|
|
|
7FF561CCF000
|
unkown image
|
page readonly
|
|
|
|
C432079000
|
stack
|
page read and write
|
|
|
|
7FF5A91F5000
|
unkown image
|
page readonly
|
|
|
|
7FF536F33000
|
unkown image
|
page readonly
|
|
|
|
1B658EA3000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
7FF56566A000
|
unkown image
|
page readonly
|
|
|
|
7DF544CB0000
|
unkown image
|
page readonly
|
|
|
|
1A5CF852000
|
unkown
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
1E97B26D000
|
unkown
|
page read and write
|
|
|
|
1E118880000
|
heap private
|
page read and write
|
|
|
|
1A7DB5B000
|
unkown
|
page read and write
|
|
|
|
7DF5FD842000
|
unkown image
|
page readonly
|
|
|
|
1B658E81000
|
unkown
|
page read and write
|
|
|
|
7FF59F070000
|
unkown image
|
page readonly
|
|
|
|
1D47DC02000
|
unkown
|
page read and write
|
|
|
|
1E1188B0000
|
unkown image
|
page readonly
|
|
|
|
12DF51C0000
|
unkown
|
page read and write
|
|
|
|
206FFC79000
|
unkown
|
page read and write
|
|
|
|
4D4D000
|
unkown
|
page read and write
|
|
|
|
1B658E4B000
|
unkown
|
page read and write
|
|
|
|
12DF5A02000
|
unkown
|
page read and write
|
|
|
|
7FF59F279000
|
unkown image
|
page readonly
|
|
|
|
1B65975C000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F61000
|
unkown image
|
page readonly
|
|
|
|
1E1189E0000
|
unkown
|
page read and write
|
|
|
|
7FF59F1B3000
|
unkown image
|
page readonly
|
|
|
|
6DE73FC000
|
stack
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
1B658E4A000
|
unkown
|
page read and write
|
|
|
|
2195D25C000
|
unkown
|
page read and write
|
|
|
|
1B658E70000
|
unkown
|
page read and write
|
|
|
|
7FF5A90C2000
|
unkown image
|
page readonly
|
|
|
|
1B659C00000
|
unkown
|
page read and write
|
|
|
|
1A5CF902000
|
unkown
|
page read and write
|
|
|
|
7FF4FD916000
|
unkown image
|
page readonly
|
|
|
|
12DF51C0000
|
unkown
|
page read and write
|
|
|
|
1E118C00000
|
unkown image
|
page readonly
|
|
|
|
7DF5D29C0000
|
unkown image
|
page readonly
|
|
|
|
7DF571D62000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFBD1000
|
unkown image
|
page readonly
|
|
|
|
7FF537034000
|
unkown image
|
page readonly
|
|
|
|
7DF5FD852000
|
unkown image
|
page readonly
|
|
|
|
7DF559BA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFAF3000
|
unkown image
|
page readonly
|
|
|
|
7FF54BDA5000
|
unkown image
|
page readonly
|
|
|
|
1A5CF84A000
|
unkown
|
page read and write
|
|
|
|
1B658E57000
|
unkown
|
page read and write
|
|
|
|
7FF59F0B2000
|
unkown image
|
page readonly
|
|
|
|
7FF561DCF000
|
unkown image
|
page readonly
|
|
|
|
1B659779000
|
unkown
|
page read and write
|
|
|
|
7FF536FC7000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFB07000
|
unkown image
|
page readonly
|
|
|
|
325E000
|
stack
|
page read and write
|
|
|
|
7FF56538A000
|
unkown image
|
page readonly
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
20734F80000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5F65000
|
unkown image
|
page readonly
|
|
|
|
1E1189C0000
|
unkown image
|
page readonly
|
|
|
|
206FFC76000
|
unkown
|
page read and write
|
|
|
|
7FF4FDA01000
|
unkown image
|
page readonly
|
|
|
|
1B658E49000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
21391100000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7DF5732F0000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
1D47DA70000
|
heap default
|
page read and write
|
|
|
|
7FF5C4847000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFB3E000
|
unkown image
|
page readonly
|
|
|
|
1B659791000
|
unkown
|
page read and write
|
|
|
|
7F360000
|
unkown image
|
page readonly
|
|
|
|
7FF561DC9000
|
unkown image
|
page readonly
|
|
|
|
7DF5B6E60000
|
unkown image
|
page readonly
|
|
|
|
1B6597B2000
|
unkown
|
page read and write
|
|
|
|
7DF544CC0000
|
unkown image
|
page readonly
|
|
|
|
7FF54BF1E000
|
unkown image
|
page readonly
|
|
|
|
7DF50B662000
|
unkown image
|
page readonly
|
|
|
|
1A7DF7A000
|
stack
|
page read and write
|
|
|
|
7FF5A8994000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD9FA000
|
unkown image
|
page readonly
|
|
|
|
7DF5FD850000
|
unkown image
|
page readonly
|
|
|
|
1B658EA5000
|
unkown
|
page read and write
|
|
|
|
1B65976C000
|
unkown
|
page read and write
|
|
|
|
1B6597B2000
|
unkown
|
page read and write
|
|
|
|
7FF5EF9EF000
|
unkown image
|
page readonly
|
|
|
|
1A7E3FD000
|
stack
|
page read and write
|
|
|
|
776D27C000
|
stack
|
page read and write
|
|
|
|
7FF536E3B000
|
unkown image
|
page readonly
|
|
|
|
12DF5100000
|
heap private
|
page read and write
|
|
|
|
12F6000
|
unkown
|
page read and write
|
|
|
|
7FF5C4C8E000
|
unkown image
|
page readonly
|
|
|
|
206FF990000
|
unkown image
|
page read and write
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
7FF54BE0E000
|
unkown image
|
page readonly
|
|
|
|
23DBE7F000
|
stack
|
page read and write
|
|
|
|
7FF561DE3000
|
unkown image
|
page readonly
|
|
|
|
1354000
|
unkown
|
page read and write
|
|
|
|
12DF5860000
|
unkown image
|
page readonly
|
|
|
|
C431EFF000
|
stack
|
page read and write
|
|
|
|
7FF536F47000
|
unkown image
|
page readonly
|
|
|
|
1E97B2C0000
|
unkown
|
page read and write
|
|
|
|
1D47E180000
|
unkown image
|
page readonly
|
|
|
|
7FF59F183000
|
unkown image
|
page readonly
|
|
|
|
71D347D000
|
stack
|
page read and write
|
|
|
|
7FF54BF04000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD9EA000
|
unkown image
|
page readonly
|
|
|
|
7FF56565A000
|
unkown image
|
page readonly
|
|
|
|
7FF5EF991000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4B2D000
|
unkown image
|
page readonly
|
|
|
|
7FF536F7E000
|
unkown image
|
page readonly
|
|
|
|
7FF54BDA1000
|
unkown image
|
page readonly
|
|
|
|
7FF59F0AF000
|
unkown image
|
page readonly
|
|
|
|
7FF54BE2D000
|
unkown image
|
page readonly
|
|
|
|
C3B000
|
unkown
|
page read and write
|
|
|
|
7FF54BD37000
|
unkown image
|
page readonly
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
235034A0000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
C43217A000
|
stack
|
page read and write
|
|
|
|
1B659C03000
|
unkown
|
page read and write
|
|
|
|
1A5CF871000
|
unkown
|
page read and write
|
|
|
|
1B658EE8000
|
unkown
|
page read and write
|
|
|
|
7FF5C4AE6000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9120000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
7DF5B6E60000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5EEA000
|
unkown image
|
page readonly
|
|
|
|
235035A8000
|
unkown
|
page read and write
|
|
|
|
7FF59F18E000
|
unkown image
|
page readonly
|
|
|
|
1E97B400000
|
unkown image
|
page readonly
|
|
|
|
1B65975A000
|
unkown
|
page read and write
|
|
|
|
7FF561EBA000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFB5D000
|
unkown image
|
page readonly
|
|
|
|
20680180000
|
unkown image
|
page readonly
|
|
|
|
23DC47D000
|
stack
|
page read and write
|
|
|
|
7DF4F1AA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A914B000
|
unkown image
|
page readonly
|
|
|
|
7DF4B4D30000
|
unkown image
|
page readonly
|
|
|
|
7FF561EA4000
|
unkown image
|
page readonly
|
|
|
|
23503865000
|
heap private
|
page read and write
|
|
|
|
1B658D90000
|
unkown image
|
page readonly
|
|
|
|
4D4D000
|
unkown
|
page read and write
|
|
|
|
7FF5EFAEF000
|
unkown image
|
page readonly
|
|
|
|
7FF565665000
|
unkown image
|
page readonly
|
|
|
|
206FFAE0000
|
unkown image
|
page readonly
|
|
|
|
520617E000
|
stack
|
page read and write
|
|
|
|
7FF550A9D000
|
unkown image
|
page readonly
|
|
|
|
7DF5ACF12000
|
unkown image
|
page readonly
|
|
|
|
7DF559B80000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
481F000
|
stack
|
page read and write
|
|
|
|
7FF5E5E93000
|
unkown image
|
page readonly
|
|
|
|
471E000
|
stack
|
page read and write
|
|
|
|
1B658DC0000
|
unkown image
|
page readonly
|
|
|
|
7DF571D60000
|
unkown image
|
page readonly
|
|
|
|
1357000
|
unkown
|
page read and write
|
|
|
|
7FF561D15000
|
unkown image
|
page readonly
|
|
|
|
7DF559B90000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
1359000
|
unkown
|
page read and write
|
|
|
|
1D47DC65000
|
unkown
|
page read and write
|
|
|
|
7FF5640C2000
|
unkown image
|
page readonly
|
|
|
|
7FF59EE07000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5B33000
|
unkown image
|
page readonly
|
|
|
|
1E118A61000
|
unkown
|
page read and write
|
|
|
|
206FFD02000
|
unkown
|
page read and write
|
|
|
|
12F6000
|
unkown
|
page read and write
|
|
|
|
7FF4FD953000
|
unkown image
|
page readonly
|
|
|
|
1E118A8A000
|
unkown
|
page read and write
|
|
|
|
BDBF53C000
|
unkown
|
page read and write
|
|
|
|
20735102000
|
unkown
|
page read and write
|
|
|
|
7F350000
|
unkown image
|
page readonly
|
|
|
|
1B659757000
|
unkown
|
page read and write
|
|
|
|
20735980000
|
unkown image
|
page readonly
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
7DF5732F0000
|
unkown image
|
page readonly
|
|
|
|
7FF561E1E000
|
unkown image
|
page readonly
|
|
|
|
7DF56FB30000
|
unkown image
|
page readonly
|
|
|
|
1A5CF890000
|
unkown
|
page read and write
|
|
|
|
7FF5EF6C1000
|
unkown image
|
page readonly
|
|
|
|
7FF59F1F3000
|
unkown image
|
page readonly
|
|
|
|
1E118B08000
|
unkown
|
page read and write
|
|
|
|
7DF544CC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5EF865000
|
unkown image
|
page readonly
|
|
|
|
7FF5655C2000
|
unkown image
|
page readonly
|
|
|
|
7FF59EC1C000
|
unkown image
|
page readonly
|
|
|
|
206FFC40000
|
unkown
|
page read and write
|
|
|
|
1B659778000
|
unkown
|
page read and write
|
|
|
|
206FFC56000
|
unkown
|
page read and write
|
|
|
|
21390B10000
|
heap default
|
page read and write
|
|
|
|
7DF5FD852000
|
unkown image
|
page readonly
|
|
|
|
7DF559B80000
|
unkown image
|
page readonly
|
|
|
|
7FF561DE0000
|
unkown image
|
page readonly
|
|
|
|
1A5CF6B0000
|
heap default
|
page read and write
|
|
|
|
7FF5E5E76000
|
unkown image
|
page readonly
|
|
|
|
977DF7000
|
stack
|
page read and write
|
|
|
|
7FF59EF67000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFA35000
|
unkown image
|
page readonly
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
1B659540000
|
unkown
|
page read and write
|
|
|
|
7FF5EFB2B000
|
unkown image
|
page readonly
|
|
|
|
7FF537051000
|
unkown image
|
page readonly
|
|
|
|
7FF563CB2000
|
unkown image
|
page readonly
|
|
|
|
1B658D70000
|
unkown image
|
page read and write
|
|
|
|
7DF5732E0000
|
unkown image
|
page readonly
|
|
|
|
7DF5ACF10000
|
unkown image
|
page readonly
|
|
|
|
2195D29B000
|
unkown
|
page read and write
|
|
|
|
977EFF000
|
stack
|
page read and write
|
|
|
|
7FF59EF72000
|
unkown image
|
page readonly
|
|
|
|
7FF59F1C7000
|
unkown image
|
page readonly
|
|
|
|
1B658D90000
|
unkown image
|
page readonly
|
|
|
|
12DF5C00000
|
unkown
|
page read and write
|
|
|
|
7FF54BE9A000
|
unkown image
|
page readonly
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
1D47DA20000
|
unkown image
|
page readonly
|
|
|
|
206FF9E0000
|
unkown image
|
page readonly
|
|
|
|
7FF54BC7F000
|
unkown image
|
page readonly
|
|
|
|
7FF536F3E000
|
unkown image
|
page readonly
|
|
|
|
7FF59F055000
|
unkown image
|
page readonly
|
|
|
|
7DF50B672000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4C6D000
|
unkown image
|
page readonly
|
|
|
|
2195D190000
|
heap default
|
page read and write
|
|
|
|
20735800000
|
unkown image
|
page readonly
|
|
|
|
A22E7E000
|
stack
|
page read and write
|
|
|
|
1E118A5E000
|
unkown
|
page read and write
|
|
|
|
7FF5E5E90000
|
unkown image
|
page readonly
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F42000
|
unkown image
|
page readonly
|
|
|
|
BDBFBF7000
|
stack
|
page read and write
|
|
|
|
3A3E000
|
stack
|
page read and write
|
|
|
|
7FF550A9D000
|
unkown image
|
page readonly
|
|
|
|
7FF5EF966000
|
unkown image
|
page readonly
|
|
|
|
10F1000
|
unkown image
|
page execute read
|
|
|
|
1B659700000
|
unkown
|
page read and write
|
|
|
|
1357000
|
unkown
|
page read and write
|
|
|
|
206FFC67000
|
unkown
|
page read and write
|
|
|
|
71D337B000
|
stack
|
page read and write
|
|
|
|
977C7B000
|
stack
|
page read and write
|
|
|
|
1A5CF908000
|
unkown
|
page read and write
|
|
|
|
7FF5EFBCA000
|
unkown image
|
page readonly
|
|
|
|
12DF5130000
|
unkown image
|
page readonly
|
|
|
|
1E97B913000
|
unkown
|
page read and write
|
|
|
|
7FF537050000
|
unkown image
|
page readonly
|
|
|
|
7FF59EE66000
|
unkown image
|
page readonly
|
|
|
|
776D17F000
|
stack
|
page read and write
|
|
|
|
23503540000
|
unkown image
|
page readonly
|
|
|
|
235035B0000
|
unkown
|
page read and write
|
|
|
|
12DF5213000
|
unkown
|
page read and write
|
|
|
|
7DF5FD860000
|
unkown image
|
page readonly
|
|
|
|
1D47DD02000
|
unkown
|
page read and write
|
|
|
|
7DF5B6E80000
|
unkown image
|
page readonly
|
|
|
|
7FF561C90000
|
unkown image
|
page readonly
|
|
|
|
7FF536E17000
|
unkown image
|
page readonly
|
|
|
|
1B659794000
|
unkown
|
page read and write
|
|
|
|
1A5CF88D000
|
unkown
|
page read and write
|
|
|
|
1B659B40000
|
unkown
|
page read and write
|
|
|
|
2195D850000
|
unkown image
|
page readonly
|
|
|
|
1B65977F000
|
unkown
|
page read and write
|
|
|
|
7DF5ACF00000
|
unkown image
|
page readonly
|
|
|
|
2195D27E000
|
unkown
|
page read and write
|
|
|
|
7FF5640F1000
|
unkown image
|
page readonly
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7FF564067000
|
unkown image
|
page readonly
|
|
|
|
7DF5D29D2000
|
unkown image
|
page readonly
|
|
|
|
7FF536FA3000
|
unkown image
|
page readonly
|
|
|
|
1B659C1D000
|
unkown
|
page read and write
|
|
|
|
1B658EC5000
|
unkown
|
page read and write
|
|
|
|
7FF5EFA61000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5EC2000
|
unkown image
|
page readonly
|
|
|
|
B10000
|
unkown image
|
page read and write
|
|
|
|
20735045000
|
unkown
|
page read and write
|
|
|
|
7FF59F272000
|
unkown image
|
page readonly
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7FF5A91FA000
|
unkown image
|
page readonly
|
|
|
|
206FFA00000
|
heap default
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7DF5732E2000
|
unkown image
|
page readonly
|
|
|
|
7DF46D9F0000
|
unkown image
|
page readonly
|
|
|
|
36FF000
|
stack
|
page read and write
|
|
|
|
5205E7E000
|
stack
|
page read and write
|
|
|
|
7FF54BF21000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
1E97AFE0000
|
unkown image
|
page readonly
|
|
|
|
7DF544CB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4D32000
|
unkown image
|
page readonly
|
|
|
|
7FF59F1A9000
|
unkown image
|
page readonly
|
|
|
|
1B659B40000
|
unkown
|
page read and write
|
|
|
|
7FF565583000
|
unkown image
|
page readonly
|
|
|
|
1B658E4C000
|
unkown
|
page read and write
|
|
|
|
6DE727E000
|
stack
|
page read and write
|
|
|
|
BD0000
|
unkown
|
page read and write
|
|
|
|
7FF561E92000
|
unkown image
|
page readonly
|
|
|
|
7DF4AADD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A91E4000
|
unkown image
|
page readonly
|
|
|
|
2D90000
|
heap private
|
page read and write
|
|
|
|
7FF54BE7E000
|
unkown image
|
page readonly
|
|
|
|
1B65975A000
|
unkown
|
page read and write
|
|
|
|
1E97AFB0000
|
heap private
|
page read and write
|
|
|
|
7FF59F06D000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF59EE74000
|
unkown image
|
page readonly
|
|
|
|
1A5CF84D000
|
unkown
|
page read and write
|
|
|
|
7FF53703A000
|
unkown image
|
page readonly
|
|
|
|
1D47DC00000
|
unkown
|
page read and write
|
|
|
|
2D8E000
|
stack
|
page read and write
|
|
|
|
7FF59F125000
|
unkown image
|
page readonly
|
|
|
|
206FFC4B000
|
unkown
|
page read and write
|
|
|
|
52060FB000
|
stack
|
page read and write
|
|
|
|
7FF561EB1000
|
unkown image
|
page readonly
|
|
|
|
12DF54D0000
|
unkown image
|
page readonly
|
|
|
|
977FFF000
|
stack
|
page read and write
|
|
|
|
7FF59EAE2000
|
unkown image
|
page readonly
|
|
|
|
1A5CF84F000
|
unkown
|
page read and write
|
|
|
|
7FF59EE09000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4D61000
|
unkown image
|
page readonly
|
|
|
|
7FF561E3A000
|
unkown image
|
page readonly
|
|
|
|
1A7E7FF000
|
stack
|
page read and write
|
|
|
|
1E97B2C9000
|
unkown
|
page read and write
|
|
|
|
BDBFDFF000
|
stack
|
page read and write
|
|
|
|
12DF56D0000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
7FF5EFB00000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3BE0000
|
unkown image
|
page readonly
|
|
|
|
6DE6F4D000
|
unkown
|
page read and write
|
|
|
|
1E118E00000
|
unkown image
|
page readonly
|
|
|
|
12DE000
|
heap default
|
page read and write
|
|
|
|
206FFC50000
|
unkown
|
page read and write
|
|
|
|
206FFC2E000
|
unkown
|
page read and write
|
|
|
|
7FF5A91F1000
|
unkown image
|
page readonly
|
|
|
|
1B65976E000
|
unkown
|
page read and write
|
|
|
|
235035BA000
|
unkown
|
page read and write
|
|
|
|
7FF5EFAE9000
|
unkown image
|
page readonly
|
|
|
|
1A5CF913000
|
unkown
|
page read and write
|
|
|
|
7FF5C4BCC000
|
unkown image
|
page readonly
|
|
|
|
EFC000
|
unkown
|
page read and write
|
|
|
|
2195D261000
|
unkown
|
page read and write
|
|
|
|
7FF54BA6D000
|
unkown image
|
page readonly
|
|
|
|
1361000
|
unkown
|
page read and write
|
|
|
|
7FF565590000
|
unkown image
|
page readonly
|
|
|
|
1B6597BD000
|
unkown
|
page read and write
|
|
|
|
7FF5EFAED000
|
unkown image
|
page readonly
|
|
|
|
1E97B600000
|
unkown image
|
page readonly
|
|
|
|
5205EFD000
|
stack
|
page read and write
|
|
|
|
6DE747F000
|
stack
|
page read and write
|
|
|
|
7DF544CB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4CDA000
|
unkown image
|
page readonly
|
|
|
|
1B6597BD000
|
unkown
|
page read and write
|
|
|
|
7FF5EF9CB000
|
unkown image
|
page readonly
|
|
|
|
1B658E52000
|
unkown
|
page read and write
|
|
|
|
C4320FF000
|
stack
|
page read and write
|
|
|
|
7FF54BD32000
|
unkown image
|
page readonly
|
|
|
|
A231FB000
|
stack
|
page read and write
|
|
|
|
2195D6D0000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
1A5CF660000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9123000
|
unkown image
|
page readonly
|
|
|
|
1D47DC75000
|
unkown
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7DF5F3BD0000
|
unkown image
|
page readonly
|
|
|
|
7FF561DEE000
|
unkown image
|
page readonly
|
|
|
|
2195D25F000
|
unkown
|
page read and write
|
|
|
|
7FF536F9B000
|
unkown image
|
page readonly
|
|
|
|
A22D77000
|
stack
|
page read and write
|
|
|
|
206FFC00000
|
unkown
|
page read and write
|
|
|
|
2195D225000
|
unkown
|
page read and write
|
|
|
|
7FF536F5D000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFBDA000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5EED000
|
unkown image
|
page readonly
|
|
|
|
311F000
|
stack
|
page read and write
|
|
|
|
1B659776000
|
unkown
|
page read and write
|
|
|
|
12F3000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF5C4C83000
|
unkown image
|
page readonly
|
|
|
|
12F1000
|
unkown
|
page read and write
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
A2271E000
|
stack
|
page read and write
|
|
|
|
7DF50B670000
|
unkown image
|
page readonly
|
|
|
|
12FE000
|
unkown
|
page read and write
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
1E118A54000
|
unkown
|
page read and write
|
|
|
|
7FF536F63000
|
unkown image
|
page readonly
|
|
|
|
7FF59EAFA000
|
unkown image
|
page readonly
|
|
|
|
7DF5ACF00000
|
unkown image
|
page readonly
|
|
|
|
7FF537041000
|
unkown image
|
page readonly
|
|
|
|
7FF563D75000
|
unkown image
|
page readonly
|
|
|
|
1E97B1E0000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7DF50B672000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4C57000
|
unkown image
|
page readonly
|
|
|
|
7FF564043000
|
unkown image
|
page readonly
|
|
|
|
1B65976F000
|
unkown
|
page read and write
|
|
|
|
156E000
|
stack
|
page read and write
|
|
|
|
7FF54BE33000
|
unkown image
|
page readonly
|
|
|
|
37FF000
|
stack
|
page read and write
|
|
|
|
6DE6FCE000
|
stack
|
page read and write
|
|
|
|
7FF561B45000
|
unkown image
|
page readonly
|
|
|
|
20735058000
|
unkown
|
page read and write
|
|
|
|
7FF563E76000
|
unkown image
|
page readonly
|
|
|
|
7FF563FFF000
|
unkown image
|
page readonly
|
|
|
|
1B659C14000
|
unkown
|
page read and write
|
|
|
|
1A5CF850000
|
unkown
|
page read and write
|
|
|
|
1B6597BD000
|
unkown
|
page read and write
|
|
|
|
21390E90000
|
unkown image
|
page readonly
|
|
|
|
235034E0000
|
unkown
|
page read and write
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
7DF50B660000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFAD7000
|
unkown image
|
page readonly
|
|
|
|
12DF5850000
|
unkown image
|
page readonly
|
|
|
|
7FF59F121000
|
unkown image
|
page readonly
|
|
|
|
7FF54BBF5000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3BF0000
|
unkown image
|
page readonly
|
|
|
|
1E118B00000
|
unkown
|
page read and write
|
|
|
|
1B65975E000
|
unkown
|
page read and write
|
|
|
|
7FF5A8F1A000
|
unkown image
|
page readonly
|
|
|
|
12DF5200000
|
unkown
|
page read and write
|
|
|
|
7FF5E5ECE000
|
unkown image
|
page readonly
|
|
|
|
1B6597BD000
|
unkown
|
page read and write
|
|
|
|
206FFC39000
|
unkown
|
page read and write
|
|
|
|
7FF561D41000
|
unkown image
|
page readonly
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
7FF4FDA01000
|
unkown image
|
page readonly
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
7FF54B74D000
|
unkown image
|
page readonly
|
|
|
|
7DF5B6E62000
|
unkown image
|
page readonly
|
|
|
|
21390B35000
|
unkown
|
page read and write
|
|
|
|
7DF559B82000
|
unkown image
|
page readonly
|
|
|
|
1359000
|
unkown
|
page read and write
|
|
|
|
7FF5640F1000
|
unkown image
|
page readonly
|
|
|
|
1E97B780000
|
unkown image
|
page readonly
|
|
|
|
1E118A13000
|
unkown
|
page read and write
|
|
|
|
7FF54BEF9000
|
unkown image
|
page readonly
|
|
|
|
7FF59F284000
|
unkown image
|
page readonly
|
|
|
|
2195D313000
|
unkown
|
page read and write
|
|
|
|
1D47DA20000
|
unkown image
|
page readonly
|
|
|
|
7FF565576000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4841000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7DF559B92000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8EC0000
|
unkown image
|
page readonly
|
|
|
|
7DF50B662000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD5C6000
|
unkown image
|
page readonly
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
7DF56FB40000
|
unkown image
|
page readonly
|
|
|
|
1B6597A1000
|
unkown
|
page read and write
|
|
|
|
7FF54BE97000
|
unkown image
|
page readonly
|
|
|
|
21390C80000
|
heap private
|
page read and write
|
|
|
|
1E97B213000
|
unkown
|
page read and write
|
|
|
|
C431E7A000
|
unkown
|
page read and write
|
|
|
|
7FF5EFB5A000
|
unkown image
|
page readonly
|
|
|
|
1B6597B3000
|
unkown
|
page read and write
|
|
|
|
7FF5C4C6F000
|
unkown image
|
page readonly
|
|
|
|
7FF5655EA000
|
unkown image
|
page readonly
|
|
|
|
20735000000
|
unkown
|
page read and write
|
|
|
|
7DF5B6E72000
|
unkown image
|
page readonly
|
|
|
|
1102000
|
unkown image
|
page write copy
|
|
|
|
7DF5F3BD2000
|
unkown image
|
page readonly
|
|
|
|
C37000
|
unkown
|
page read and write
|
|
|
|
7DF5B6E70000
|
unkown image
|
page readonly
|
|
|
|
20700002000
|
unkown
|
page read and write
|
|
|
|
7FF5655E7000
|
unkown image
|
page readonly
|
|
|
|
21390A00000
|
unkown image
|
page readonly
|
|
|
|
7FF59F0FB000
|
unkown image
|
page readonly
|
|
|
|
7DF571D50000
|
unkown image
|
page readonly
|
|
|
|
1B659C03000
|
unkown
|
page read and write
|
|
|
|
1357000
|
unkown
|
page read and write
|
|
|
|
206FFC46000
|
unkown
|
page read and write
|
|
|
|
1C4973E000
|
stack
|
page read and write
|
|
|
|
B20000
|
unkown image
|
page readonly
|
|
|
|
206FFC4D000
|
unkown
|
page read and write
|
|
|
|
7DF5F3BE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4D4A000
|
unkown image
|
page readonly
|
|
|
|
1C49D7E000
|
stack
|
page read and write
|
|
|
|
207352D0000
|
unkown image
|
page readonly
|
|
|
|
1A5CF680000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4D5A000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
7FF53704A000
|
unkown image
|
page readonly
|
|
|
|
1A7E8FE000
|
stack
|
page read and write
|
|
|
|
F75000
|
unkown
|
page read and write
|
|
|
|
1D47E402000
|
unkown
|
page read and write
|
|
|
|
10CE000
|
stack
|
page read and write
|
|
|
|
7FF4FD913000
|
unkown image
|
page readonly
|
|
|
|
7FF5EF6C7000
|
unkown image
|
page readonly
|
|
|
|
7FF565543000
|
unkown image
|
page readonly
|
|
|
|
1A5CF802000
|
unkown
|
page read and write
|
|
|
|
7FF565236000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9127000
|
unkown image
|
page readonly
|
|
|
|
7DF50B680000
|
unkown image
|
page readonly
|
|
|
|
7DF5ACF20000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD923000
|
unkown image
|
page readonly
|
|
|
|
A22C7B000
|
stack
|
page read and write
|
|
|
|
977A7E000
|
stack
|
page read and write
|
|
|
|
7FF561DF7000
|
unkown image
|
page readonly
|
|
|
|
A232FD000
|
stack
|
page read and write
|
|
|
|
7FF59EFE6000
|
unkown image
|
page readonly
|
|
|
|
20680000000
|
unkown image
|
page readonly
|
|
|
|
7FF59EFAB000
|
unkown image
|
page readonly
|
|
|
|
2195D308000
|
unkown
|
page read and write
|
|
|
|
1D47DD13000
|
unkown
|
page read and write
|
|
|
|
7DF5D29C0000
|
unkown image
|
page readonly
|
|
|
|
1B659C21000
|
unkown
|
page read and write
|
|
|
|
71D377F000
|
stack
|
page read and write
|
|
|
|
7F342000
|
unkown image
|
page readonly
|
|
|
|
1B658EC0000
|
unkown
|
page read and write
|
|
|
|
1B658EBE000
|
unkown
|
page read and write
|
|
|
|
7DF56FB22000
|
unkown image
|
page readonly
|
|
|
|
10F0000
|
unkown image
|
page readonly
|
|
|
|
12DF5202000
|
unkown
|
page read and write
|
|
|
|
7FF5E5E7F000
|
unkown image
|
page readonly
|
|
|
|
7FF56557F000
|
unkown image
|
page readonly
|
|
|
|
206FFC47000
|
unkown
|
page read and write
|
|
|
|
7DF5ACF12000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5D12000
|
unkown image
|
page readonly
|
|
|
|
1570000
|
unkown image
|
page readonly
|
|
|
|
7FF565649000
|
unkown image
|
page readonly
|
|
|
|
7FF5EF440000
|
unkown image
|
page readonly
|
|
|
|
1359000
|
unkown
|
page read and write
|
|
|
|
393D000
|
stack
|
page read and write
|
|
|
|
1B658E55000
|
unkown
|
page read and write
|
|
|
|
7FF59F051000
|
unkown image
|
page readonly
|
|
|
|
206FFC2D000
|
unkown
|
page read and write
|
|
|
|
1D47DA50000
|
unkown image
|
page readonly
|
|
|
|
7DF5B6E72000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF536FCD000
|
unkown image
|
page readonly
|
|
|
|
1A5CF7B0000
|
unkown
|
page read and write
|
|
|
|
1B65976E000
|
unkown
|
page read and write
|
|
|
|
18F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C4D61000
|
unkown image
|
page readonly
|
|
|
|
7FF54BE47000
|
unkown image
|
page readonly
|
|
|
|
23503860000
|
heap private
|
page read and write
|
|
|
|
7FF5EFA4C000
|
unkown image
|
page readonly
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
1B659590000
|
unkown image
|
page write copy
|
|
|
|
7FF536D17000
|
unkown image
|
page readonly
|
|
|
|
1E97AFA0000
|
unkown image
|
page read and write
|
|
|
|
1B658E56000
|
unkown
|
page read and write
|
|
|
|
7DF409530000
|
unkown image
|
page readonly
|
|
|
|
7FF54BD9C000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8EB7000
|
unkown image
|
page readonly
|
|
|
|
1B659C63000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
1B65976E000
|
unkown
|
page read and write
|
|
|
|
1E97B900000
|
unkown
|
page read and write
|
|
|
|
7FF5A91EA000
|
unkown image
|
page readonly
|
|
|
|
7FF5EFBB2000
|
unkown image
|
page readonly
|
|
|
|
1354000
|
unkown
|
page read and write
|
|
|
|
7DF544CD0000
|
unkown image
|
page readonly
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
7FF536E11000
|
unkown image
|
page readonly
|
|
|
|
7F342000
|
unkown image
|
page readonly
|
|
|
|
1B6597A5000
|
unkown
|
page read and write
|
|
|
|
1B659790000
|
unkown
|
page read and write
|
|
|
|
21390B68000
|
unkown
|
page read and write
|
|
|
|
7FF59F2A0000
|
unkown image
|
page readonly
|
|
|
|
7FF54BCA6000
|
unkown image
|
page readonly
|
|
|
|
7FF59F1CE000
|
unkown image
|
page readonly
|
|
|
|
206FFC73000
|
unkown
|
page read and write
|
|
|
|
F70000
|
heap default
|
page read and write
|
|
|
|
7FF5E5F71000
|
unkown image
|
page readonly
|
|
|
|
1D47DC29000
|
unkown
|
page read and write
|
|
|
|
7FF5C4C97000
|
unkown image
|
page readonly
|
|
|
|
1B659C02000
|
unkown
|
page read and write
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
1368000
|
unkown
|
page read and write
|
|
|
|
1A5CF640000
|
unkown image
|
page read and write
|
|
|
|
7FF59F162000
|
unkown image
|
page readonly
|
|
|
|
1B659754000
|
unkown
|
page read and write
|
|
|
|
7FF4FD9F1000
|
unkown image
|
page readonly
|
|
|
|
7FF561EAA000
|
unkown image
|
page readonly
|
|
|
|
1B659C19000
|
unkown
|
page read and write
|
|
|
|
2195D200000
|
unkown
|
page read and write
|
|
|
|
F74000
|
unkown
|
page read and write
|
|
|
|
7FF561D1B000
|
unkown image
|
page readonly
|
|
|
|
3A50000
|
unkown
|
page read and write
|
|
There are 1272 hidden memdumps, click here to show them.