Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
mental.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{9D47ABEC-EF99-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{9D47ABEE-EF99-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{A6C9EAC6-EF99-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\610143e0e072b[1].bin
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\610143ef37a40[1].bin
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Temp\~DF6E67667E2D178577.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DF8C183346DBFD51CA.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DFC2C22C1E682D9D5C.TMP
|
data
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\mental.dll'
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\mental.dll,Behind
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\mental.dll',#1
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\mental.dll,Factpresent
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\mental.dll,Steadunder
|
||
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\mental.dll',#1
|
||
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5608 CREDAT:17410 /prefetch:2
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5608 CREDAT:17420 /prefetch:2
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://gtr.antoinfer.com/mtJPbIZJhao/lLJRN3LZO2EvFc/VCw3UNiKyARh06G8CFACi/rvcu9DoT_2BWr3it/vuHuzB9pSHcZY8A/p5jj60CzJBYl9Lfa6y/ccpCtNQRI/kv6KUXrsc9szPvU9BS5d/INRHtQMx8ovuxsrRsSO/mBIUAu_2FXqDwSewtqhiF3/0y8M31aLbHe6S/83PL1bM6/ldvb9gwpgUV8X_2B2Qv6zJW/BQrwXyajxR/YXD2Kky6T0oSJ5G0A/e_2F9JsAj5ok/7mc5pqASMOR/DpTFFPntUkci7e/xU2mysx12dViVQ0ZXlm39/NDqJB6CJvjFI/z
|
185.228.233.17
|
||
http://gtr.antoinfer.com/02_2FRTV/EHY6_2ByVkK9zQWc7nVUHSO/fCtXqnqrPU/KM_2F1pf6mYZC4Gy7/bCWjowHLoe6i/IkZQTMTSLWC/A3a2f6f53ufRn9/E42sf0Trx1PwCM3URc2Wx/3meR8N06RbC7B5vz/fh1949JUpwcTC55/kxUMJM7FV5_2BW6yUI/Qi_2BBp7I/IolDvBZlj8BdCBHYqi7w/k9qRhAJwmrlYaX4Nld1/vuyMEecPRgPCKMIqpUl9z0/QU_2BZUyIrn6K/_2FFz5g9/uSWx1VCCRu0cJ4rt581fcIt/_2BF5K79Db/sITOyBjswJkOChsry/YZZI09hn/M
|
185.228.233.17
|
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
gtr.antoinfer.com
|
185.228.233.17
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
185.228.233.17
|
gtr.antoinfer.com
|
Russian Federation
|
||
192.168.2.1
|
unknown
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files\internet explorer\iexplore.exe
|
{9D47ABEC-EF99-11EB-90EB-ECF4BBEA1588}
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
There are 9 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
3D18000
|
heap private
|
page read and write
|
||
3D18000
|
heap private
|
page read and write
|
||
5018000
|
heap private
|
page read and write
|
||
3D18000
|
heap private
|
page read and write
|
||
780000
|
unkown
|
page execute and read and write
|
||
5018000
|
heap private
|
page read and write
|
||
5018000
|
heap private
|
page read and write
|
||
3D18000
|
heap private
|
page read and write
|
||
3D18000
|
heap private
|
page read and write
|
||
5018000
|
heap private
|
page read and write
|
||
5018000
|
heap private
|
page read and write
|
||
5018000
|
heap private
|
page read and write
|
||
5018000
|
heap private
|
page read and write
|
||
3D18000
|
heap private
|
page read and write
|
||
5018000
|
heap private
|
page read and write
|
||
3D18000
|
heap private
|
page read and write
|
||
5018000
|
heap private
|
page read and write
|
||
3D18000
|
heap private
|
page read and write
|
||
3D18000
|
heap private
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3324000
|
unkown
|
page read and write
|
||
7FF5B6BF0000
|
unkown
|
page readonly
|
||
2037D081000
|
unkown
|
page read and write
|
||
2097CE48000
|
unkown
|
page read and write
|
||
2A28000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
6D476000
|
unkown image
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3910000
|
heap private
|
page read and write
|
||
4FDE000
|
unkown
|
page read and write
|
||
3577000
|
heap private
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
68A4000
|
heap private
|
page read and write
|
||
29BB000
|
unkown
|
page readonly
|
||
D9483ED000
|
unkown
|
page read and write
|
||
3322000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF5B6A41000
|
unkown
|
page readonly
|
||
306A000
|
heap private
|
page read and write
|
||
4B50000
|
heap private
|
page read and write
|
||
7FF502863000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
4210000
|
heap private
|
page read and write
|
||
6D47E000
|
unkown image
|
page execute read
|
||
3070000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
670000
|
unkown
|
page execute and read and write
|
||
7FF53EEAA000
|
unkown
|
page readonly
|
||
2DA0000
|
unkown
|
page read and write
|
||
D4FB0F7000
|
unkown
|
page read and write
|
||
7FF5028FA000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7FF53EDEC000
|
unkown
|
page readonly
|
||
9FF000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF5B6BEE000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7FF5B6870000
|
unkown
|
page readonly
|
||
3068000
|
unkown
|
page read and write
|
||
2AD6000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
2845000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2987000
|
unkown
|
page readonly
|
||
1200000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
2CAA000
|
unkown
|
page read and write
|
||
1D91E990000
|
unkown
|
page read and write
|
||
7FF502978000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2987000
|
unkown
|
page readonly
|
||
7378000
|
heap private
|
page read and write
|
||
6BE0000
|
unkown
|
page readonly
|
||
6D49E000
|
unkown image
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
6D4CA000
|
unkown image
|
page execute and read and write
|
||
32F0000
|
heap default
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2F54000
|
heap private
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
6D471000
|
unkown image
|
page execute read
|
||
3020000
|
unkown
|
page read and write
|
||
2037CE30000
|
heap private
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2A01000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
5330000
|
unkown
|
page read and write
|
||
7FF5B67C5000
|
unkown
|
page readonly
|
||
7FF5B6C27000
|
unkown
|
page readonly
|
||
3070000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
1D91E508000
|
unkown
|
page read and write
|
||
1440000
|
unkown
|
page readonly
|
||
4B9E000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
7FF53EA54000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2DA0000
|
heap private
|
page read and write
|
||
2993000
|
unkown
|
page readonly
|
||
18D8B7F000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
7FF53EE36000
|
unkown
|
page readonly
|
||
2CA3000
|
unkown
|
page readonly
|
||
50AE000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2850000
|
unkown
|
page readonly
|
||
334E000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
6F80000
|
heap private
|
page read and write
|
||
2097CE4D000
|
unkown
|
page read and write
|
||
294D000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
2097CD80000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
1270000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
1D91EC00000
|
unkown
|
page readonly
|
||
7FF5B6A93000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
537C000
|
unkown
|
page read and write
|
||
2963000
|
unkown
|
page readonly
|
||
4810000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
6B40000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
335E000
|
unkown
|
page read and write
|
||
7FF502954000
|
unkown
|
page readonly
|
||
282D000
|
unkown
|
page readonly
|
||
510000
|
unkown
|
page read and write
|
||
143E000
|
unkown
|
page read and write
|
||
110B000
|
heap default
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2B3D000
|
unkown
|
page readonly
|
||
2C70000
|
unkown
|
page readonly
|
||
2037CEA0000
|
unkown
|
page readonly
|
||
7FF5B6B3D000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
350E000
|
unkown
|
page read and write
|
||
7FF53EC11000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
6D471000
|
unkown image
|
page execute read
|
||
800000
|
heap private
|
page read and write
|
||
304A000
|
heap default
|
page read and write
|
||
89A000
|
unkown
|
page read and write
|
||
2A33000
|
unkown
|
page readonly
|
||
53E1000
|
unkown
|
page execute read
|
||
3040000
|
unkown
|
page read and write
|
||
7FF5B6967000
|
unkown
|
page readonly
|
||
2987000
|
unkown
|
page readonly
|
||
2037CF90000
|
unkown
|
page read and write
|
||
D4FAD7E000
|
unkown
|
page read and write
|
||
3067000
|
heap private
|
page read and write
|
||
2097D000000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
7D0000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
276C000
|
unkown
|
page readonly
|
||
7FF53E980000
|
unkown
|
page readonly
|
||
291C000
|
unkown
|
page readonly
|
||
299A000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
2929000
|
unkown
|
page readonly
|
||
1D91E43C000
|
unkown
|
page read and write
|
||
4608000
|
heap private
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF50291B000
|
unkown
|
page readonly
|
||
2856000
|
unkown
|
page readonly
|
||
D4FB1FF000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF53EE2E000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF50293C000
|
unkown
|
page readonly
|
||
1D91E240000
|
unkown
|
page readonly
|
||
307A000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
29B2000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
3060000
|
heap private
|
page read and write
|
||
7FF53EDBA000
|
unkown
|
page readonly
|
||
4DDD000
|
unkown
|
page read and write
|
||
3072000
|
unkown
|
page read and write
|
||
6400000
|
unkown
|
page readonly
|
||
2856000
|
unkown
|
page readonly
|
||
2A05000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
5330000
|
unkown
|
page read and write
|
||
291C000
|
unkown
|
page readonly
|
||
3360000
|
unkown
|
page readonly
|
||
2A28000
|
unkown
|
page readonly
|
||
960000
|
unkown
|
page readonly
|
||
7FF5B6B54000
|
unkown
|
page readonly
|
||
F67000
|
unkown
|
page read and write
|
||
5340000
|
unkown
|
page read and write
|
||
13FE000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2CDF000
|
unkown
|
page read and write
|
||
389F000
|
unkown
|
page read and write
|
||
1100000
|
heap default
|
page read and write
|
||
53EA000
|
unkown
|
page read and write
|
||
41A0000
|
heap private
|
page read and write
|
||
2985000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
46C000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
2037D088000
|
unkown
|
page read and write
|
||
18D830E000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
27C6000
|
unkown
|
page readonly
|
||
2037D08E000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2DD0000
|
unkown
|
page readonly
|
||
4E40000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
6D47E000
|
unkown image
|
page execute read
|
||
7FF53EEB2000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2D8F000
|
unkown
|
page read and write
|
||
3328000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2A33000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
10FC000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
4E1E000
|
unkown
|
page read and write
|
||
2097CE45000
|
unkown
|
page read and write
|
||
29A1000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
2F50000
|
heap private
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
D9482EB000
|
unkown
|
page read and write
|
||
4ADE000
|
unkown
|
page read and write
|
||
3030000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3350000
|
heap private
|
page read and write
|
||
2DE0000
|
heap default
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2C5D000
|
unkown
|
page readonly
|
||
7FF53EDC0000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
2E50000
|
heap private
|
page read and write
|
||
7FF50280B000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
6D470000
|
unkown image
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
124D000
|
unkown
|
page read and write
|
||
7FF502947000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
32FA000
|
heap default
|
page read and write
|
||
2A14000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
335A000
|
heap private
|
page read and write
|
||
3328000
|
unkown
|
page read and write
|
||
3142000
|
unkown
|
page read and write
|
||
1D91EF40000
|
unkown
|
page readonly
|
||
540000
|
unkown
|
page readonly
|
||
799000
|
unkown
|
page readonly
|
||
9BE000
|
unkown
|
page read and write
|
||
293A000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
810000
|
unkown
|
page readonly
|
||
7FF5027F1000
|
unkown
|
page readonly
|
||
7FF5B6BF5000
|
unkown
|
page readonly
|
||
2E1D000
|
unkown
|
page read and write
|
||
DB0000
|
unkown
|
page read and write
|
||
3076000
|
unkown
|
page read and write
|
||
2097CF13000
|
unkown
|
page read and write
|
||
29BB000
|
unkown
|
page readonly
|
||
2A05000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
2097CF00000
|
unkown
|
page read and write
|
||
940000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2E23000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2E12000
|
unkown
|
page read and write
|
||
7FF53EDBE000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
2037CE90000
|
heap default
|
page read and write
|
||
2838000
|
unkown
|
page readonly
|
||
7FF53EDAC000
|
unkown
|
page readonly
|
||
2B55000
|
unkown
|
page readonly
|
||
1D91E3F0000
|
unkown
|
page readonly
|
||
18D887E000
|
unkown
|
page read and write
|
||
7FF5B6C34000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
327B000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2F40000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
2DA0000
|
unkown
|
page execute and read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
7FF5B6C3A000
|
unkown
|
page readonly
|
||
2865000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
2D2E000
|
unkown
|
page read and write
|
||
7FF50296F000
|
unkown
|
page readonly
|
||
4E40000
|
unkown
|
page read and write
|
||
2D90000
|
unkown
|
page execute and read and write
|
||
3329000
|
unkown
|
page read and write
|
||
6D561000
|
unkown image
|
page readonly
|
||
7FF53EDF7000
|
unkown
|
page readonly
|
||
7FF53EDD7000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7FF5B6C69000
|
unkown
|
page readonly
|
||
2C6C000
|
unkown
|
page readonly
|
||
7FF502A01000
|
unkown
|
page readonly
|
||
2037DA00000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
4E20000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
2929000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2097CE87000
|
unkown
|
page read and write
|
||
7FF50295A000
|
unkown
|
page readonly
|
||
C00000
|
unkown
|
page readonly
|
||
2C95000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
298D000
|
unkown
|
page readonly
|
||
6D4C7000
|
unkown image
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2C7B000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
2D50000
|
unkown
|
page read and write
|
||
18D87FB000
|
unkown
|
page read and write
|
||
D4FACFE000
|
unkown
|
page read and write
|
||
32D0000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
2979000
|
unkown
|
page readonly
|
||
2955000
|
unkown
|
page readonly
|
||
2970000
|
unkown
|
page readonly
|
||
6BD3000
|
heap private
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
57A000
|
heap default
|
page read and write
|
||
6D4CA000
|
unkown image
|
page execute and read and write
|
||
2D24000
|
unkown
|
page readonly
|
||
1D91E310000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
D4FAF7B000
|
unkown
|
page read and write
|
||
7FF53EDCB000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3070000
|
unkown
|
page readonly
|
||
298F000
|
unkown
|
page readonly
|
||
DE9000
|
unkown
|
page readonly
|
||
68B0000
|
unkown
|
page readonly
|
||
690000
|
unkown
|
page readonly
|
||
4D9F000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
296B000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
2848000
|
unkown
|
page readonly
|
||
3360000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
1D91E600000
|
unkown
|
page readonly
|
||
29B2000
|
unkown
|
page readonly
|
||
DEC000
|
unkown
|
page readonly
|
||
7FF5B6BFB000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
2993000
|
unkown
|
page readonly
|
||
D94877F000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
32CD000
|
unkown
|
page read and write
|
||
3325000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
4AB000
|
unkown
|
page read and write
|
||
D948C7F000
|
unkown
|
page read and write
|
||
2037CF70000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
31C9000
|
heap private
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
5318000
|
heap private
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
13BC000
|
unkown
|
page read and write
|
||
7FF5B6C58000
|
unkown
|
page readonly
|
||
7FF502964000
|
unkown
|
page readonly
|
||
2963000
|
unkown
|
page readonly
|
||
7FF5025A4000
|
unkown
|
page readonly
|
||
1260000
|
heap default
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3010000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3010000
|
unkown
|
page read and write
|
||
2097CD90000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2CCB000
|
unkown
|
page readonly
|
||
4C1E000
|
unkown
|
page read and write
|
||
4C20000
|
heap private
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
4DA0000
|
unkown
|
page execute and read and write
|
||
3000000
|
unkown
|
page execute and read and write
|
||
2037D03C000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
6B40000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
1D91E500000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
291C000
|
unkown
|
page readonly
|
||
2A01000
|
unkown
|
page readonly
|
||
2CAA000
|
unkown
|
page readonly
|
||
3324000
|
unkown
|
page read and write
|
||
2C4A000
|
unkown
|
page readonly
|
||
2CC6000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
46E0000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2865000
|
unkown
|
page readonly
|
||
D948A7F000
|
unkown
|
page read and write
|
||
7FF5B6C1C000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2A33000
|
unkown
|
page readonly
|
||
2037D102000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7FF50287C000
|
unkown
|
page readonly
|
||
7FF53EEA4000
|
unkown
|
page readonly
|
||
7FF53EE04000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
323A000
|
unkown
|
page read and write
|
||
10CE000
|
unkown
|
page readonly
|
||
7FF53EDEF000
|
unkown
|
page readonly
|
||
5330000
|
unkown
|
page read and write
|
||
4A5B000
|
unkown
|
page read and write
|
||
2097D460000
|
unkown
|
page readonly
|
||
7FF50298D000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF5029F4000
|
unkown
|
page readonly
|
||
7FF5B6C5E000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
2DE0000
|
heap default
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
6D470000
|
unkown image
|
page readonly
|
||
32E0000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
7FF53ED13000
|
unkown
|
page readonly
|
||
2DDD000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
299F000
|
unkown
|
page readonly
|
||
2037D029000
|
unkown
|
page read and write
|
||
7FF5B6C4F000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
DEA000
|
unkown
|
page read and write
|
||
6B40000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7FF5024D0000
|
unkown
|
page readonly
|
||
7FF53E995000
|
unkown
|
page readonly
|
||
D948B7E000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
41EC000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2C70000
|
unkown
|
page readonly
|
||
293A000
|
unkown
|
page readonly
|
||
D4D000
|
unkown
|
page read and write
|
||
2037D06F000
|
unkown
|
page read and write
|
||
29B6000
|
unkown
|
page readonly
|
||
7FF502157000
|
unkown
|
page readonly
|
||
2D70000
|
unkown
|
page readonly
|
||
2E14000
|
unkown
|
page read and write
|
||
7F0000
|
unkown
|
page read and write
|
||
68A0000
|
heap private
|
page read and write
|
||
2D32000
|
unkown
|
page readonly
|
||
970000
|
unkown
|
page readonly
|
||
7FF502761000
|
unkown
|
page readonly
|
||
D4FAFFF000
|
unkown
|
page read and write
|
||
6D476000
|
unkown image
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
7FF53EC63000
|
unkown
|
page readonly
|
||
2E27000
|
unkown
|
page read and write
|
||
7FF5B6CE1000
|
unkown
|
page readonly
|
||
2970000
|
unkown
|
page readonly
|
||
6A5000
|
heap default
|
page read and write
|
||
7FF53EDAA000
|
unkown
|
page readonly
|
||
53BE000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
294D000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3146000
|
unkown
|
page read and write
|
||
6D473000
|
unkown image
|
page readonly
|
||
2CC2000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7FF5B6C1F000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
53EC000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
2097CE8D000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
296B000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
1D91E44F000
|
unkown
|
page read and write
|
||
2097CC30000
|
heap private
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2A14000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
6780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
D94887B000
|
unkown
|
page read and write
|
||
3328000
|
unkown
|
page read and write
|
||
3040000
|
heap default
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2E0D000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
1D91E46F000
|
unkown
|
page read and write
|
||
2B66000
|
unkown
|
page readonly
|
||
7FF50297E000
|
unkown
|
page readonly
|
||
2097CE70000
|
unkown
|
page read and write
|
||
7FF5B6B43000
|
unkown
|
page readonly
|
||
2037D061000
|
unkown
|
page read and write
|
||
2097CC90000
|
heap default
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
7FF50285D000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
791000
|
unkown
|
page execute read
|
||
2B75000
|
unkown
|
page readonly
|
||
2963000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
7FF53ECA1000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
66B0000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
7FF5B6C07000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
2097D800000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
3550000
|
unkown
|
page readonly
|
||
32B0000
|
unkown
|
page read and write
|
||
6D561000
|
unkown image
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
29A1000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
F6B000
|
unkown
|
page read and write
|
||
2097CD70000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
298F000
|
unkown
|
page readonly
|
||
7FF502986000
|
unkown
|
page readonly
|
||
6B40000
|
unkown
|
page read and write
|
||
23D000
|
unkown
|
page read and write
|
||
7FF53EB37000
|
unkown
|
page readonly
|
||
357A000
|
heap private
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF502910000
|
unkown
|
page readonly
|
||
4BDF000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
306D000
|
unkown
|
page read and write
|
||
292C000
|
unkown
|
page readonly
|
||
354E000
|
unkown
|
page read and write
|
||
4B1E000
|
unkown
|
page read and write
|
||
7FF53ED0D000
|
unkown
|
page readonly
|
||
3357000
|
heap private
|
page read and write
|
||
2E1B000
|
unkown
|
page read and write
|
||
2955000
|
unkown
|
page readonly
|
||
50EF000
|
unkown
|
page read and write
|
||
332E000
|
unkown
|
page read and write
|
||
3560000
|
unkown
|
page execute and read and write
|
||
2993000
|
unkown
|
page readonly
|
||
48A0000
|
heap private
|
page read and write
|
||
2C80000
|
unkown
|
page readonly
|
||
7FF5B6CE2000
|
unkown
|
page readonly
|
||
2CEB000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2A33000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3072000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
3068000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3248000
|
heap private
|
page read and write
|
||
7FF502989000
|
unkown
|
page readonly
|
||
2E09000
|
unkown
|
page read and write
|
||
282D000
|
unkown
|
page readonly
|
||
7FF5B67B6000
|
unkown
|
page readonly
|
||
6D475000
|
unkown image
|
page read and write
|
||
2865000
|
unkown
|
page readonly
|
||
2A33000
|
unkown
|
page readonly
|
||
1D91E48C000
|
unkown
|
page read and write
|
||
D94836E000
|
unkown
|
page read and write
|
||
1D91E513000
|
unkown
|
page read and write
|
||
6B40000
|
unkown
|
page read and write
|
||
DC0000
|
unkown
|
page execute and read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7390000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2970000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
4B5F000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
1210000
|
unkown
|
page execute and read and write
|
||
780000
|
unkown
|
page read and write
|
||
7FF5B6B5C000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
2037D590000
|
unkown
|
page readonly
|
||
2097CF08000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
3580000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
6D55F000
|
unkown image
|
page read and write
|
||
1D91E402000
|
unkown
|
page read and write
|
||
1D91E413000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7FF5B6AEE000
|
unkown
|
page readonly
|
||
3073000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
6B40000
|
unkown
|
page read and write
|
||
7FF5028FC000
|
unkown
|
page readonly
|
||
670000
|
unkown
|
page read and write
|
||
2985000
|
unkown
|
page readonly
|
||
17D0000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
295C000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
7FF53EE3D000
|
unkown
|
page readonly
|
||
284C000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
3087000
|
unkown
|
page read and write
|
||
2929000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2C65000
|
unkown
|
page readonly
|
||
7FF5B6CDA000
|
unkown
|
page readonly
|
||
2037D000000
|
unkown
|
page read and write
|
||
3210000
|
unkown
|
page read and write
|
||
5299000
|
heap private
|
page read and write
|
||
6BD0000
|
heap private
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2E0E000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page readonly
|
||
402F000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7FF50290E000
|
unkown
|
page readonly
|
||
7FF5B6AD1000
|
unkown
|
page readonly
|
||
7FF53ECBE000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2DC0000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
2E12000
|
unkown
|
page read and write
|
||
29B2000
|
unkown
|
page readonly
|
||
7FF502874000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
2F60000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
299A000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
53E9000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2C97000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
294D000
|
unkown
|
page readonly
|
||
306C000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
3010000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3140000
|
unkown
|
page readonly
|
||
3400000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
2097D602000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF5027B3000
|
unkown
|
page readonly
|
||
7FF5B6AEB000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2E12000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
27C6000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
1D91EA02000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2D15000
|
unkown
|
page readonly
|
||
3F2F000
|
unkown
|
page read and write
|
||
6A0000
|
heap default
|
page read and write
|
||
6D470000
|
unkown image
|
page readonly
|
||
7FF5024E5000
|
unkown
|
page readonly
|
||
4F00000
|
unkown
|
page readonly
|
||
307B000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7FF53EDC5000
|
unkown
|
page readonly
|
||
5330000
|
unkown
|
page read and write
|
||
4F20000
|
heap private
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
295C000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
2848000
|
unkown
|
page readonly
|
||
379B000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
2097CCA0000
|
unkown
|
page readonly
|
||
298D000
|
unkown
|
page readonly
|
||
2A01000
|
unkown
|
page readonly
|
||
2C9D000
|
unkown
|
page readonly
|
||
79C000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2C2C000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2DEA000
|
heap default
|
page read and write
|
||
29BB000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
4DB0000
|
unkown
|
page execute and read and write
|
||
7FF5B6BEA000
|
unkown
|
page readonly
|
||
6D4C7000
|
unkown image
|
page read and write
|
||
6D470000
|
unkown image
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3E2F000
|
unkown
|
page read and write
|
||
3322000
|
heap default
|
page read and write
|
||
4F9E000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF53EE0A000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF5B6C44000
|
unkown
|
page readonly
|
||
298F000
|
unkown
|
page readonly
|
||
3319000
|
unkown
|
page read and write
|
||
2D80000
|
unkown
|
page readonly
|
||
D4FAC7B000
|
unkown
|
page read and write
|
||
550000
|
unkown
|
page readonly
|
||
299A000
|
unkown
|
page readonly
|
||
3070000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
7FF53EE39000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2C73000
|
unkown
|
page readonly
|
||
6D49E000
|
unkown image
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
33F0000
|
heap default
|
page read and write
|
||
7FF5024D6000
|
unkown
|
page readonly
|
||
2037D802000
|
unkown
|
page read and write
|
||
2979000
|
unkown
|
page readonly
|
||
560000
|
unkown
|
page execute and read and write
|
||
2037D200000
|
unkown
|
page readonly
|
||
3570000
|
heap private
|
page read and write
|
||
7FF53ECBB000
|
unkown
|
page readonly
|
||
2E12000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF50290A000
|
unkown
|
page readonly
|
||
4589000
|
heap private
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
D4FB2FE000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
295C000
|
unkown
|
page readonly
|
||
2A28000
|
unkown
|
page readonly
|
||
506F000
|
unkown
|
page read and write
|
||
570000
|
heap default
|
page read and write
|
||
2C39000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
6BF0000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2D90000
|
unkown
|
page execute and read and write
|
||
299F000
|
unkown
|
page readonly
|
||
2A33000
|
unkown
|
page readonly
|
||
7FF50293F000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
7FF53EE28000
|
unkown
|
page readonly
|
||
2D43000
|
unkown
|
page readonly
|
||
2838000
|
unkown
|
page readonly
|
||
2DB0000
|
unkown
|
page execute and read and write
|
||
C4E000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2A22000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2097CE7C000
|
unkown
|
page read and write
|
||
7FF53EEB1000
|
unkown
|
page readonly
|
||
7FF5B67B0000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
1D91E400000
|
unkown
|
page read and write
|
||
7FF53E607000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
1D91E1D0000
|
heap private
|
page read and write
|
||
2DF0000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page execute and read and write
|
||
29B6000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
1D91E429000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
40BD000
|
unkown
|
page read and write
|
||
4B3E000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3920000
|
heap private
|
page read and write
|
||
A56000
|
unkown
|
page read and write
|
||
296B000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
7FF5B6C6D000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
530000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
2037CF80000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
7FF5B6BDC000
|
unkown
|
page readonly
|
||
7FF5B6BDA000
|
unkown
|
page readonly
|
||
333E000
|
unkown
|
page read and write
|
||
6D470000
|
unkown image
|
page readonly
|
||
307C000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
7FF53ED24000
|
unkown
|
page readonly
|
||
3319000
|
heap default
|
page read and write
|
||
299F000
|
unkown
|
page readonly
|
||
2037D013000
|
unkown
|
page read and write
|
||
2A22000
|
unkown
|
page readonly
|
||
2D43000
|
unkown
|
page readonly
|
||
2955000
|
unkown
|
page readonly
|
||
2E1C000
|
unkown
|
page read and write
|
||
7FF53ED2C000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
29A1000
|
unkown
|
page readonly
|
||
DE0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
3072000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2979000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
53E0000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
7FF53EE14000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF5029FA000
|
unkown
|
page readonly
|
||
8DB000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
27C6000
|
unkown
|
page readonly
|
||
7FF502927000
|
unkown
|
page readonly
|
||
7FF502687000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
6D470000
|
unkown image
|
page readonly
|
||
3072000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2097CE00000
|
unkown
|
page read and write
|
||
6D470000
|
unkown image
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
7FF53EE1F000
|
unkown
|
page readonly
|
||
780000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
6A80000
|
unkown
|
page read and write
|
||
3000000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
40FE000
|
unkown
|
page read and write
|
||
1D91E230000
|
heap default
|
page read and write
|
||
2E09000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
6D473000
|
unkown image
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2097CE29000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
18D838E000
|
unkown
|
page read and write
|
||
2D11000
|
unkown
|
page readonly
|
||
2A05000
|
unkown
|
page readonly
|
||
330F000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
2DA0000
|
unkown
|
page execute and read and write
|
||
780000
|
unkown
|
page read and write
|
||
2A22000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
6B0000
|
unkown
|
page readonly
|
||
2C89000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
6D55F000
|
unkown image
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
7FF502A02000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
D9486FC000
|
unkown
|
page read and write
|
||
2CAF000
|
unkown
|
page readonly
|
||
298D000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
137E000
|
unkown
|
page read and write
|
||
2B48000
|
unkown
|
page readonly
|
||
A5A000
|
unkown
|
page read and write
|
||
2097CE3C000
|
unkown
|
page read and write
|
||
2CB1000
|
unkown
|
page readonly
|
||
3020000
|
unkown
|
page read and write
|
||
2985000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
D948977000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
2097CF02000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2F20000
|
unkown
|
page read and write
|
||
4D5E000
|
unkown
|
page read and write
|
||
2D40000
|
heap default
|
page read and write
|
||
7FF502915000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
6D475000
|
unkown image
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
2037D113000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3020000
|
unkown
|
page read and write
|
||
1D91E455000
|
unkown
|
page read and write
|
||
4F10000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3070000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
7FF5B6C66000
|
unkown
|
page readonly
|
||
DE1000
|
unkown
|
page execute read
|
||
2097CE13000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page read and write
|
||
2D38000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
6B40000
|
unkown
|
page read and write
|
||
2C9F000
|
unkown
|
page readonly
|
||
18D8A7F000
|
unkown
|
page read and write
|
||
5B7000
|
heap default
|
page read and write
|
||
79A000
|
unkown
|
page read and write
|
||
7FF53E986000
|
unkown
|
page readonly
|
||
29B6000
|
unkown
|
page readonly
|
||
7FF5B6CD4000
|
unkown
|
page readonly
|
||
790000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
2D6E000
|
unkown
|
page read and write
|
||
293A000
|
unkown
|
page readonly
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
3040000
|
unkown
|
page read and write
|
||
18D828C000
|
unkown
|
page read and write
|
||
18D8977000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
2F1F000
|
unkown
|
page read and write
|
||
2097CE42000
|
unkown
|
page read and write
|
||
1D91E502000
|
unkown
|
page read and write
|
||
2856000
|
unkown
|
page readonly
|
||
2A14000
|
unkown
|
page readonly
|
||
DD0000
|
unkown
|
page read and write
|
||
4A9E000
|
unkown
|
page read and write
|
There are 1056 hidden memdumps, click here to show them.