Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
A5uTdwOwJ1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{FA9A4670-B247-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FA9A4672-B247-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF1B654EC27DD768D2.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF7A757557FCA01EC0.TMP
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\A5uTdwOwJ1.dll,Hundredpopulate@@8
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\A5uTdwOwJ1.dll',#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\A5uTdwOwJ1.dll,Mark@@12
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\A5uTdwOwJ1.dll,Seefit@@8
|
|
|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\A5uTdwOwJ1.dll'
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\A5uTdwOwJ1.dll',#1
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4640 CREDAT:17410 /prefetch:2
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
outlook.com
|
40.97.116.82
|
|
|
|
HHN-efz.ms-acdc.office.com
|
40.101.138.210
|
|
|
|
www.outlook.com
|
unknown
|
|
|
|
outlook.office365.com
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{FA9A4670-B247-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
50E8000
|
heap private
|
page read and write
|
|
|
|
45DC000
|
unkown
|
page read and write
|
|
|
|
7FF4ED8D4000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
28AD000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
251E5A00000
|
unkown
|
page readonly
|
|
|
|
27B84F0A000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
257A000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED5AB000
|
unkown
|
page readonly
|
|
|
|
54FF000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF876000
|
unkown
|
page readonly
|
|
|
|
259B000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2CD0000
|
unkown
|
page readonly
|
|
|
|
29407ED0000
|
unkown
|
page readonly
|
|
|
|
308B000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF84A000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
6340000
|
unkown
|
page readonly
|
|
|
|
4870000
|
heap private
|
page read and write
|
|
|
|
290B000
|
unkown
|
page read and write
|
|
|
|
E90000
|
heap default
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B00000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
233B000
|
unkown
|
page readonly
|
|
|
|
2C00000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
6D501000
|
unkown image
|
page read and write
|
|
|
|
2349000
|
unkown
|
page readonly
|
|
|
|
2A00000
|
heap default
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
28B8000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29EC000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
A8EEA7D000
|
unkown
|
page read and write
|
|
|
|
7FF4ED7BB000
|
unkown
|
page readonly
|
|
|
|
7FF4EF6FB000
|
unkown
|
page readonly
|
|
|
|
7FF4EF8F2000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
253C000
|
unkown
|
page readonly
|
|
|
|
2C60000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2FF0000
|
unkown
|
page readonly
|
|
|
|
219A000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A00000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2A21000
|
unkown
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
21E5000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B00000
|
unkown
|
page readonly
|
|
|
|
4C9F000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
E60000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
28EC000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF542480000
|
unkown
|
page readonly
|
|
|
|
2371000
|
unkown
|
page readonly
|
|
|
|
2CF0000
|
unkown
|
page readonly
|
|
|
|
27B82DA0000
|
heap default
|
page read and write
|
|
|
|
7FF4EF805000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2913000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2B6F000
|
unkown
|
page readonly
|
|
|
|
6D4FB000
|
unkown image
|
page execute and read and write
|
|
|
|
2592000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
31B0000
|
unkown
|
page readonly
|
|
|
|
E50000
|
unkown
|
page read and write
|
|
|
|
2A85000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF4EF74D000
|
unkown
|
page readonly
|
|
|
|
202E000
|
unkown
|
page readonly
|
|
|
|
29F0000
|
unkown
|
page readonly
|
|
|
|
2559000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2265000
|
unkown
|
page readonly
|
|
|
|
3140000
|
unkown
|
page read and write
|
|
|
|
6D4CB000
|
unkown image
|
page readonly
|
|
|
|
27B82E79000
|
unkown
|
page read and write
|
|
|
|
259B000
|
unkown
|
page readonly
|
|
|
|
31F0000
|
unkown
|
page readonly
|
|
|
|
4420000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2098000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2DAA000
|
heap default
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
240D000
|
unkown
|
page readonly
|
|
|
|
7FF4EF6A3000
|
unkown
|
page readonly
|
|
|
|
7FF542572000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
7FF4EF868000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
7FF5424EE000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF651000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
359B000
|
heap private
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
7FF4EF8E4000
|
unkown
|
page readonly
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
291B000
|
unkown
|
page read and write
|
|
|
|
7FF5424D4000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
28E0000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3315000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF4ED858000
|
unkown
|
page readonly
|
|
|
|
29407C4D000
|
unkown
|
page read and write
|
|
|
|
7FF542497000
|
unkown
|
page readonly
|
|
|
|
A8EE57E000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2550000
|
unkown
|
page readonly
|
|
|
|
7FF4ED5C8000
|
unkown
|
page readonly
|
|
|
|
47FF000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
27B84F33000
|
unkown
|
page read and write
|
|
|
|
23E4000
|
unkown
|
page readonly
|
|
|
|
330C000
|
unkown
|
page read and write
|
|
|
|
27B82DB0000
|
unkown
|
page write copy
|
|
|
|
B6D10FA000
|
unkown
|
page read and write
|
|
|
|
251A000
|
unkown
|
page readonly
|
|
|
|
235D000
|
unkown
|
page readonly
|
|
|
|
6D435000
|
unkown image
|
page read and write
|
|
|
|
238B000
|
unkown
|
page readonly
|
|
|
|
3315000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
255A000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF4ED84E000
|
unkown
|
page readonly
|
|
|
|
6960000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
23F8000
|
unkown
|
page readonly
|
|
|
|
29408940000
|
unkown
|
page readonly
|
|
|
|
27D0000
|
heap private
|
page read and write
|
|
|
|
2613000
|
unkown
|
page readonly
|
|
|
|
6D440000
|
unkown image
|
page execute read
|
|
|
|
47B0000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
6D4F9000
|
unkown image
|
page read and write
|
|
|
|
7FF4ED81C000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
27A0000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
B6D0BFB000
|
unkown
|
page read and write
|
|
|
|
29407B60000
|
heap private
|
page read and write
|
|
|
|
251E5829000
|
unkown
|
page read and write
|
|
|
|
27B84D70000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D4F000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
20C0000
|
unkown
|
page readonly
|
|
|
|
4D79000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2513000
|
unkown
|
page readonly
|
|
|
|
3597000
|
heap private
|
page read and write
|
|
|
|
251E5780000
|
heap private
|
page read and write
|
|
|
|
7FF4EF87D000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF542388000
|
unkown
|
page readonly
|
|
|
|
4470000
|
heap private
|
page read and write
|
|
|
|
20B8000
|
unkown
|
page readonly
|
|
|
|
2D10000
|
unkown
|
page execute and read and write
|
|
|
|
6D436000
|
unkown image
|
page readonly
|
|
|
|
54BE000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
B6D0E7F000
|
unkown
|
page read and write
|
|
|
|
7FF54213C000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
7FF4ED626000
|
unkown
|
page readonly
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
239F000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED7DA000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2655000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
2DF0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
29407C4A000
|
unkown
|
page read and write
|
|
|
|
6D430000
|
unkown image
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF3C0000
|
unkown
|
page readonly
|
|
|
|
2261000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
6D431000
|
unkown image
|
page execute read
|
|
|
|
292F000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
4A49000
|
heap private
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27C0000
|
unkown
|
page readonly
|
|
|
|
2DDC000
|
unkown
|
page read and write
|
|
|
|
6D4FB000
|
unkown image
|
page execute and read and write
|
|
|
|
7FF4EF8EA000
|
unkown
|
page readonly
|
|
|
|
7FF4ED615000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
218F000
|
unkown
|
page readonly
|
|
|
|
4880000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF82C000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
4480000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
44D0000
|
heap private
|
page read and write
|
|
|
|
29407C8A000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D00000
|
heap default
|
page read and write
|
|
|
|
44CE000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
251E57E0000
|
heap default
|
page read and write
|
|
|
|
251E583F000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
471D000
|
unkown
|
page read and write
|
|
|
|
7FF4EF3D5000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED790000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2573000
|
unkown
|
page readonly
|
|
|
|
6D501000
|
unkown image
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED8E1000
|
unkown
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
483E000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2613000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
21D9000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A40000
|
unkown
|
page execute and read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
1060000
|
heap default
|
page read and write
|
|
|
|
6D518000
|
unkown image
|
page readonly
|
|
|
|
256F000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2567000
|
unkown
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29407C13000
|
unkown
|
page read and write
|
|
|
|
2D41000
|
unkown
|
page execute read
|
|
|
|
2DF0000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
7FF5424C4000
|
unkown
|
page readonly
|
|
|
|
4CAE000
|
unkown
|
page read and write
|
|
|
|
28C7000
|
unkown
|
page readonly
|
|
|
|
27B84CF0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
201F000
|
unkown
|
page readonly
|
|
|
|
6A50000
|
heap private
|
page read and write
|
|
|
|
31D4000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5424F6000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3317000
|
unkown
|
page read and write
|
|
|
|
27B84990000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
4BDE000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B82EBC000
|
unkown
|
page read and write
|
|
|
|
7FF4ED624000
|
unkown
|
page readonly
|
|
|
|
AED000
|
unkown
|
page read and write
|
|
|
|
230A000
|
unkown
|
page readonly
|
|
|
|
7FF4EF85F000
|
unkown
|
page readonly
|
|
|
|
6D430000
|
unkown image
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF4ED869000
|
unkown
|
page readonly
|
|
|
|
2A81000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
20A7000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2DF0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
235F000
|
unkown
|
page readonly
|
|
|
|
31C0000
|
heap default
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
6560000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
291C000
|
unkown
|
page read and write
|
|
|
|
7FF4EF82F000
|
unkown
|
page readonly
|
|
|
|
6D518000
|
unkown image
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D20000
|
unkown
|
page read and write
|
|
|
|
27B82F02000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5424CA000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2C00000
|
heap private
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
28DA000
|
unkown
|
page read and write
|
|
|
|
21FB000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF54214F000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2DBB000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2980000
|
unkown
|
page read and write
|
|
|
|
21B5000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2340000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
257F000
|
unkown
|
page readonly
|
|
|
|
2AB3000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29DC000
|
unkown
|
page readonly
|
|
|
|
7FF4ED611000
|
unkown
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
7FF542571000
|
unkown
|
page readonly
|
|
|
|
1410000
|
heap private
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B82EA4000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
A8EE97F000
|
unkown
|
page read and write
|
|
|
|
2386000
|
unkown
|
page readonly
|
|
|
|
6D433000
|
unkown image
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
27B82D40000
|
heap private
|
page read and write
|
|
|
|
2B30000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED83A000
|
unkown
|
page readonly
|
|
|
|
27B84F00000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
21E7000
|
unkown
|
page readonly
|
|
|
|
2AFB000
|
heap private
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
290F000
|
unkown
|
page read and write
|
|
|
|
B817079000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
6D430000
|
unkown image
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
4C5E000
|
unkown
|
page read and write
|
|
|
|
4474000
|
heap private
|
page read and write
|
|
|
|
4C2E000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B6C000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A36000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
B816BCE000
|
unkown
|
page read and write
|
|
|
|
2608000
|
unkown
|
page readonly
|
|
|
|
4CF0000
|
heap private
|
page read and write
|
|
|
|
4874000
|
heap private
|
page read and write
|
|
|
|
7FF4EF800000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF4ED73D000
|
unkown
|
page readonly
|
|
|
|
2A60000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2CB0000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
479E000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
7FF4ED4C7000
|
unkown
|
page readonly
|
|
|
|
27B84D10000
|
heap private
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
7FF4ED6D1000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3315000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF817000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
4BED000
|
unkown
|
page read and write
|
|
|
|
7FF54237B000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF6FE000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5424DE000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown
|
page readonly
|
|
|
|
3180000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF54223B000
|
unkown
|
page readonly
|
|
|
|
35A0000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29407C4F000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5424F9000
|
unkown
|
page readonly
|
|
|
|
7FF4ED5CF000
|
unkown
|
page readonly
|
|
|
|
547F000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2216000
|
unkown
|
page readonly
|
|
|
|
2B80000
|
heap default
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF4EF86E000
|
unkown
|
page readonly
|
|
|
|
125F000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
2B61000
|
unkown
|
page execute read
|
|
|
|
435D000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
B6D0FFA000
|
unkown
|
page read and write
|
|
|
|
27B84D70000
|
unkown
|
page read and write
|
|
|
|
3260000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
6D430000
|
unkown image
|
page readonly
|
|
|
|
441E000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2AB3000
|
unkown
|
page readonly
|
|
|
|
4E8E000
|
unkown
|
page read and write
|
|
|
|
2AF0000
|
heap private
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
21F7000
|
unkown
|
page readonly
|
|
|
|
4DF8000
|
heap private
|
page read and write
|
|
|
|
284E000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A07000
|
unkown
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
251E72D0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A30000
|
unkown
|
page execute and read and write
|
|
|
|
B816B4B000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A3B000
|
unkown
|
page readonly
|
|
|
|
B6D12F9000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
29CD000
|
unkown
|
page readonly
|
|
|
|
B6D137F000
|
unkown
|
page read and write
|
|
|
|
27B82E57000
|
unkown
|
page read and write
|
|
|
|
21C3000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
A8EE877000
|
unkown
|
page read and write
|
|
|
|
6D20000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
23D1000
|
unkown
|
page readonly
|
|
|
|
251E5855000
|
unkown
|
page read and write
|
|
|
|
7FF4ED8E2000
|
unkown
|
page readonly
|
|
|
|
29B3000
|
unkown
|
page readonly
|
|
|
|
6D430000
|
unkown image
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2509000
|
unkown
|
page readonly
|
|
|
|
7FF4ED5B6000
|
unkown
|
page readonly
|
|
|
|
251E5902000
|
unkown
|
page read and write
|
|
|
|
7FF4EF80B000
|
unkown
|
page readonly
|
|
|
|
1620000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
21AD000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
21FA000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2845000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2228000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
3316000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
21F3000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
B6D127D000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A70000
|
unkown
|
page readonly
|
|
|
|
7FF4EF3C6000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF541CE1000
|
unkown
|
page readonly
|
|
|
|
7FF54214A000
|
unkown
|
page readonly
|
|
|
|
6D431000
|
unkown image
|
page execute read
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
7FF4ED7EE000
|
unkown
|
page readonly
|
|
|
|
7FF4ED3C9000
|
unkown
|
page readonly
|
|
|
|
B6D107F000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2303000
|
unkown
|
page readonly
|
|
|
|
29BA000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B60000
|
unkown
|
page read and write
|
|
|
|
7FF4ED641000
|
unkown
|
page readonly
|
|
|
|
7FF4ED7DC000
|
unkown
|
page readonly
|
|
|
|
27B0000
|
unkown
|
page readonly
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29407D13000
|
unkown
|
page read and write
|
|
|
|
3315000
|
unkown
|
page read and write
|
|
|
|
251E73D0000
|
unkown
|
page readonly
|
|
|
|
2193000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3318000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B84F64000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
208D000
|
unkown
|
page readonly
|
|
|
|
7FF4ED7F0000
|
unkown
|
page readonly
|
|
|
|
6D436000
|
unkown image
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
29407D08000
|
unkown
|
page read and write
|
|
|
|
7FF4ED782000
|
unkown
|
page readonly
|
|
|
|
3309000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2AF7000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B82E88000
|
unkown
|
page read and write
|
|
|
|
32E0000
|
heap default
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF4ED807000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B10000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5424FD000
|
unkown
|
page readonly
|
|
|
|
251E5813000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2659000
|
unkown
|
page read and write
|
|
|
|
2A32000
|
unkown
|
page readonly
|
|
|
|
3080000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B82E3F000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
29407C8D000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
B816EFA000
|
unkown
|
page read and write
|
|
|
|
2407000
|
unkown
|
page readonly
|
|
|
|
4E4C000
|
unkown
|
page read and write
|
|
|
|
2565000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
32EA000
|
heap default
|
page read and write
|
|
|
|
7FF4ED7CF000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
BEC000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2325000
|
unkown
|
page readonly
|
|
|
|
7FF4EF7EC000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
451E000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED4BA000
|
unkown
|
page readonly
|
|
|
|
29407BD0000
|
unkown
|
page readonly
|
|
|
|
2189000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3319000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
29A9000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF4ED736000
|
unkown
|
page readonly
|
|
|
|
A8EE47C000
|
unkown
|
page read and write
|
|
|
|
27B84F23000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B83000000
|
unkown
|
page readonly
|
|
|
|
21ED000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27D7000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
6820000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2581000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3310000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A10000
|
unkown
|
page readonly
|
|
|
|
3311000
|
unkown
|
page read and write
|
|
|
|
2910000
|
unkown
|
page read and write
|
|
|
|
2913000
|
unkown
|
page read and write
|
|
|
|
7FF5424AF000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3120000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2212000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29407C70000
|
unkown
|
page read and write
|
|
|
|
2DA0000
|
heap default
|
page read and write
|
|
|
|
25E5000
|
unkown
|
page readonly
|
|
|
|
6E48000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29407BE0000
|
unkown
|
page readonly
|
|
|
|
7FF5422A1000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
6D430000
|
unkown image
|
page readonly
|
|
|
|
4AC8000
|
heap private
|
page read and write
|
|
|
|
7FF4ED844000
|
unkown
|
page readonly
|
|
|
|
7FF4ED7C4000
|
unkown
|
page readonly
|
|
|
|
29D5000
|
unkown
|
page readonly
|
|
|
|
6680000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A0A000
|
heap default
|
page read and write
|
|
|
|
3020000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5422D9000
|
unkown
|
page readonly
|
|
|
|
2D7A000
|
unkown
|
page read and write
|
|
|
|
4C1F000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2025000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
7FF4ED4BF000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2357000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29B0000
|
unkown
|
page readonly
|
|
|
|
7FF4ED6F3000
|
unkown
|
page readonly
|
|
|
|
25F4000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
7FF4EF764000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
C57000
|
unkown
|
page read and write
|
|
|
|
251E5802000
|
unkown
|
page read and write
|
|
|
|
7FF4ED866000
|
unkown
|
page readonly
|
|
|
|
7FF4EF7EA000
|
unkown
|
page readonly
|
|
|
|
2403000
|
unkown
|
page readonly
|
|
|
|
7FF54248B000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5424AC000
|
unkown
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
7FF4ED827000
|
unkown
|
page readonly
|
|
|
|
232C000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2438000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
23D5000
|
unkown
|
page readonly
|
|
|
|
29407E00000
|
unkown
|
page readonly
|
|
|
|
290B000
|
unkown
|
page read and write
|
|
|
|
7FF4ED834000
|
unkown
|
page readonly
|
|
|
|
2DED000
|
unkown
|
page read and write
|
|
|
|
27B82EE7000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2E0C000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
236A000
|
unkown
|
page readonly
|
|
|
|
3090000
|
unkown
|
page readonly
|
|
|
|
27B82F00000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
1420000
|
unkown
|
page readonly
|
|
|
|
B6D0F79000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED051000
|
unkown
|
page readonly
|
|
|
|
2770000
|
unkown
|
page read and write
|
|
|
|
7FF54247E000
|
unkown
|
page readonly
|
|
|
|
6D435000
|
unkown image
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
106B000
|
heap default
|
page read and write
|
|
|
|
27B832D0000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2382000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2087000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
251E5AD0000
|
unkown
|
page write copy
|
|
|
|
466E000
|
unkown
|
page read and write
|
|
|
|
2333000
|
unkown
|
page readonly
|
|
|
|
29407D00000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
4AE0000
|
unkown
|
page readonly
|
|
|
|
2201000
|
unkown
|
page readonly
|
|
|
|
2DD1000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
5100000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED7EA000
|
unkown
|
page readonly
|
|
|
|
251E5800000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A5D000
|
unkown
|
page read and write
|
|
|
|
7FF5424B8000
|
unkown
|
page readonly
|
|
|
|
291E000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B84D00000
|
unkown
|
page readonly
|
|
|
|
7FF4EF837000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page execute and read and write
|
|
|
|
291C000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF542485000
|
unkown
|
page readonly
|
|
|
|
2DC9000
|
unkown
|
page read and write
|
|
|
|
27B82EC3000
|
unkown
|
page read and write
|
|
|
|
7FF4ED81F000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF4ED861000
|
unkown
|
page readonly
|
|
|
|
7FF4ED4AC000
|
unkown
|
page readonly
|
|
|
|
7FF541CDD000
|
unkown
|
page readonly
|
|
|
|
4A00000
|
heap private
|
page read and write
|
|
|
|
2A61000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29407C2A000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown
|
page read and write
|
|
|
|
FBE000
|
unkown
|
page read and write
|
|
|
|
29A0000
|
unkown
|
page readonly
|
|
|
|
7FF4EF7FE000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
7FF4ED792000
|
unkown
|
page readonly
|
|
|
|
28E0000
|
heap default
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2B6D000
|
unkown
|
page read and write
|
|
|
|
2A30000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
4480000
|
unkown
|
page readonly
|
|
|
|
2D4D000
|
unkown
|
page read and write
|
|
|
|
2914000
|
unkown
|
page read and write
|
|
|
|
B6D117F000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2A13000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
23F2000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
4CDE000
|
unkown
|
page read and write
|
|
|
|
29D0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5422A5000
|
unkown
|
page readonly
|
|
|
|
2800000
|
unkown
|
page readonly
|
|
|
|
445E000
|
unkown
|
page read and write
|
|
|
|
2A1F000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A0F000
|
unkown
|
page readonly
|
|
|
|
29407C55000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF577000
|
unkown
|
page readonly
|
|
|
|
7FF54247A000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED7BF000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2274000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A1A000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
27B82F18000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF542443000
|
unkown
|
page readonly
|
|
|
|
2288000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
6D4CB000
|
unkown image
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
270B000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2596000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
31D0000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
A8EE77B000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2418000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
21EF000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2DCC000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
1000000
|
unkown
|
page readonly
|
|
|
|
2A50000
|
unkown
|
page readonly
|
|
|
|
7FF4ED631000
|
unkown
|
page readonly
|
|
|
|
7FF4EF6E1000
|
unkown
|
page readonly
|
|
|
|
E70000
|
unkown
|
page readonly
|
|
|
|
7FF4ED7F5000
|
unkown
|
page readonly
|
|
|
|
6D440000
|
unkown image
|
page execute read
|
|
|
|
2AA0000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
30F0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
331C000
|
unkown
|
page read and write
|
|
|
|
4C6E000
|
unkown
|
page read and write
|
|
|
|
F90000
|
unkown
|
page execute and read and write
|
|
|
|
7FF542361000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B84D70000
|
unkown
|
page read and write
|
|
|
|
254C000
|
unkown
|
page readonly
|
|
|
|
3160000
|
unkown
|
page readonly
|
|
|
|
3110000
|
unkown
|
page readonly
|
|
|
|
4CC0000
|
heap private
|
page read and write
|
|
|
|
6D516000
|
unkown image
|
page read and write
|
|
|
|
28D8000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
21FF000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED6EB000
|
unkown
|
page readonly
|
|
|
|
B816E7E000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B82EB6000
|
unkown
|
page read and write
|
|
|
|
2E08000
|
unkown
|
page read and write
|
|
|
|
27B82E29000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
251E5B20000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B84F02000
|
unkown
|
page read and write
|
|
|
|
27B84D80000
|
unkown
|
page readonly
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED0F1000
|
unkown
|
page readonly
|
|
|
|
2D40000
|
unkown
|
page read and write
|
|
|
|
2230000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
23AE000
|
unkown
|
page readonly
|
|
|
|
A8EE4FE000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
23A5000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
21CC000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D10000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
49FF000
|
unkown
|
page read and write
|
|
|
|
7FF542157000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF542422000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
69E0000
|
unkown
|
page readonly
|
|
|
|
2913000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
4620000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2427000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29407C02000
|
unkown
|
page read and write
|
|
|
|
2B10000
|
unkown
|
page execute and read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
29407C00000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2293000
|
unkown
|
page readonly
|
|
|
|
7FF4ED649000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
6D516000
|
unkown image
|
page read and write
|
|
|
|
43DE000
|
unkown
|
page read and write
|
|
|
|
2440000
|
unkown
|
page readonly
|
|
|
|
291B000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF542246000
|
unkown
|
page readonly
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
27B85010000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
25E1000
|
unkown
|
page readonly
|
|
|
|
2282000
|
unkown
|
page readonly
|
|
|
|
6D433000
|
unkown image
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2913000
|
unkown
|
page read and write
|
|
|
|
29D0000
|
unkown
|
page execute and read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
7FF4EF844000
|
unkown
|
page readonly
|
|
|
|
213A000
|
unkown
|
page readonly
|
|
|
|
7FF4EF753000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED352000
|
unkown
|
page readonly
|
|
|
|
7FF4ED6F8000
|
unkown
|
page readonly
|
|
|
|
B6D11FA000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
42F0000
|
unkown
|
page readonly
|
|
|
|
27B84890000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29407C52000
|
unkown
|
page read and write
|
|
|
|
46AF000
|
unkown
|
page read and write
|
|
|
|
7FF4ED7FB000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2195000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
219E000
|
unkown
|
page readonly
|
|
|
|
7FF4EF854000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF5424E8000
|
unkown
|
page readonly
|
|
|
|
2355000
|
unkown
|
page readonly
|
|
|
|
475E000
|
unkown
|
page read and write
|
|
|
|
27B82E13000
|
unkown
|
page read and write
|
|
|
|
2403000
|
unkown
|
page readonly
|
|
|
|
461B000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
46D0000
|
heap private
|
page read and write
|
|
|
|
B816F7A000
|
unkown
|
page read and write
|
|
|
|
21D0000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
6D4F9000
|
unkown image
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF542564000
|
unkown
|
page readonly
|
|
|
|
47E0000
|
heap private
|
page read and write
|
|
|
|
231D000
|
unkown
|
page readonly
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
2B20000
|
unkown
|
page readonly
|
|
|
|
29F0000
|
unkown
|
page readonly
|
|
|
|
4540000
|
unkown
|
page read and write
|
|
|
|
2AA8000
|
unkown
|
page readonly
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
2A0D000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B830D0000
|
unkown
|
page readonly
|
|
|
|
7FF4ED7B3000
|
unkown
|
page readonly
|
|
|
|
2A94000
|
unkown
|
page readonly
|
|
|
|
6D430000
|
unkown image
|
page readonly
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B86000000
|
unkown
|
page readonly
|
|
|
|
27B82EDF000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B82F13000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
236F000
|
unkown
|
page readonly
|
|
|
|
7FF4ED8DA000
|
unkown
|
page readonly
|
|
|
|
2363000
|
unkown
|
page readonly
|
|
|
|
7FF54256A000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
26CC000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
439F000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
691D000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2DD5000
|
unkown
|
page read and write
|
|
|
|
21BC000
|
unkown
|
page readonly
|
|
|
|
7FF5424F1000
|
unkown
|
page readonly
|
|
|
|
5EA000
|
unkown
|
page readonly
|
|
|
|
29E3000
|
unkown
|
page readonly
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
695F000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
4940000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B84DA0000
|
unkown
|
page readonly
|
|
|
|
2A80000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
B6D0EFE000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B82E9D000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
B816FFF000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
45FE000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
292F000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
29407BC0000
|
heap default
|
page read and write
|
|
|
|
7FF4EF879000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29408402000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
251E57F0000
|
unkown
|
page readonly
|
|
|
|
29407BF0000
|
unkown
|
page read and write
|
|
|
|
7FF542420000
|
unkown
|
page readonly
|
|
|
|
27B84D60000
|
unkown
|
page readonly
|
|
|
|
2602000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
F80000
|
unkown
|
page execute and read and write
|
|
|
|
2B90000
|
unkown
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
221B000
|
unkown
|
page readonly
|
|
|
|
29407D02000
|
unkown
|
page read and write
|
|
|
|
2535000
|
unkown
|
page readonly
|
|
|
|
22ED000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
7FF4EF8F1000
|
unkown
|
page readonly
|
|
|
|
7FF4EF7FA000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
29407C3C000
|
unkown
|
page read and write
|
|
|
|
C5B000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED85E000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
4620000
|
heap private
|
page read and write
|
|
|
|
29F9000
|
unkown
|
page readonly
|
|
|
|
7FF4EF76C000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
EA0000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2AA2000
|
unkown
|
page readonly
|
|
|
|
28D0000
|
heap default
|
page read and write
|
|
|
|
6E60000
|
unkown
|
page read and write
|
|
|
|
2B00000
|
unkown
|
page execute and read and write
|
|
|
|
3329000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
29408600000
|
unkown
|
page readonly
|
|
|
|
3590000
|
heap private
|
page read and write
|
|
|
|
7FF542383000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2790000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2543000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B84E02000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D4C000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
3087000
|
heap private
|
page read and write
|
|
|
|
2B85000
|
heap default
|
page read and write
|
|
|
|
330C000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
unkown
|
page read and write
|
|
|
|
3140000
|
unkown
|
page execute and read and write
|
|
|
|
27B84F1E000
|
unkown
|
page read and write
|
|
|
|
22E2000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
28EA000
|
heap default
|
page read and write
|
|
|
|
7FF4ED78C000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
252D000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
28A7000
|
unkown
|
page readonly
|
|
|
|
256D000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2293000
|
unkown
|
page readonly
|
|
|
|
2908000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
27B82E00000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
22F9000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
2A05000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED04D000
|
unkown
|
page readonly
|
|
|
|
283F000
|
unkown
|
page readonly
|
|
|
|
27B84D70000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
There are 1286 hidden memdumps, click here to show them.