Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF97.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 12:00:21 2021, 0x1205a4 type
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD321.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 12:00:22 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDA56.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDE10.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDF95.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE0CF.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_100fb986e1756f46c39bcd29fe4136c1b062e4_82810a17_1812e8eb\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_23f57899179e2315822a274bdb180af5dd610e5_82810a17_1436f4b3\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_c06c6d9b89f48a8a0e6e4feba1443adadff228e_82810a17_05e6e1d6\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_c3cbf2193d9fa4edd46cb99d95805ff8d68ee663_82810a17_1a5af733\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERA838.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 02:45:20 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB132.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB170.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 02:45:24 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB3F2.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC140.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC4AA.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 02:45:29 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC71D.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC91E.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 02:45:30 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD2B4.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD575.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDCA7.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE40B.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Windows\appcompat\Programs\Amcache.hve
|
MS Windows registry file, NT/2000 or above
|
dropped
|
|
|
|
C:\Windows\appcompat\Programs\Amcache.hve.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
|
There are 15 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll,FFRgpmdlwwWde
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',CheckTrust
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',DllCanUnloadNow
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',DllGetClassObject
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',DownloadFile
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',GetICifFileFromFile
|
|
|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll'
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',#1
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 7144 -s 652
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6296 -s 652
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6360 -s 664
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6368 -s 664
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6360 -s 664
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6396 -s 664
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6368 -s 664
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6396 -s 664
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6372 -s 668
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6372 -s 668
|
|
There are 9 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.vomfass.deDVarFileInfo$
|
unknown
|
|
|
|
http://upx.sf.net
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
66.147.235.11
|
unknown
|
United States
|
|
|
|
149.202.179.100
|
unknown
|
France
|
|
|
|
81.0.236.89
|
unknown
|
Czech Republic
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
|
AmiHivePermissionsCorrect
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
|
AmiHiveOwnerCorrect
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProgramId
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
FileId
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LowerCaseLongPath
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LongPathHash
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Name
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Publisher
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Version
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinFileVersion
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinaryType
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProductName
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProductVersion
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LinkDate
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinProductVersion
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Size
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Language
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
IsPeFile
|
|
|
|
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
IsOsComponent
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
|
ExceptionRecord
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
|
ExceptionRecord
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProgramId
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
FileId
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LowerCaseLongPath
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LongPathHash
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Name
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Publisher
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Version
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinFileVersion
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinaryType
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProductName
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProductVersion
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LinkDate
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinProductVersion
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Size
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Language
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
IsPeFile
|
|
|
|
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
IsOsComponent
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
|
DeviceTicket
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
|
DeviceId
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
|
ApplicationFlags
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Property
|
001880059795CE77
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\IdentityCRL\ClockData
|
ClockTimeSeconds
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\IdentityCRL\ClockData
|
TickCount
|
|
There are 34 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
2D8BDB80000
|
unkown image
|
page readonly
|
|
|
|
2D04000
|
unkown image
|
page readonly
|
|
|
|
7FF58E2D4000
|
unkown image
|
page readonly
|
|
|
|
421F000
|
stack
|
page read and write
|
|
|
|
8C34BBF000
|
stack
|
page read and write
|
|
|
|
C94E88B000
|
unkown
|
page read and write
|
|
|
|
26F3000
|
unkown image
|
page readonly
|
|
|
|
88C000
|
unkown
|
page read and write
|
|
|
|
7FF58E55E000
|
unkown image
|
page readonly
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
2BB8000
|
unkown image
|
page readonly
|
|
|
|
280F000
|
unkown image
|
page readonly
|
|
|
|
7DF484970000
|
unkown image
|
page readonly
|
|
|
|
1DFD4C66000
|
unkown
|
page read and write
|
|
|
|
4B39B000
|
unkown
|
page read and write
|
|
|
|
7FF57314A000
|
unkown image
|
page readonly
|
|
|
|
1DFD4C66000
|
unkown
|
page read and write
|
|
|
|
3450000
|
unkown image
|
page readonly
|
|
|
|
2A70000
|
unkown
|
page read and write
|
|
|
|
3380000
|
unkown image
|
page readonly
|
|
|
|
7FF52CF05000
|
unkown image
|
page readonly
|
|
|
|
7FF57312E000
|
unkown image
|
page readonly
|
|
|
|
7F242000
|
unkown image
|
page readonly
|
|
|
|
C5A000
|
unkown image
|
page readonly
|
|
|
|
2656000
|
unkown image
|
page readonly
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
2A9A000
|
unkown
|
page read and write
|
|
|
|
820000
|
unkown image
|
page read and write
|
|
|
|
24D1000
|
unkown image
|
page readonly
|
|
|
|
260000
|
unkown image
|
page read and write
|
|
|
|
26D1000
|
unkown image
|
page readonly
|
|
|
|
2AE9000
|
unkown image
|
page readonly
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
7FF58E57B000
|
unkown image
|
page readonly
|
|
|
|
7FF52CF31000
|
unkown image
|
page readonly
|
|
|
|
21D59790000
|
unkown image
|
page readonly
|
|
|
|
21D59C80000
|
unkown image
|
page readonly
|
|
|
|
305D000
|
unkown
|
page read and write
|
|
|
|
2AD6000
|
unkown image
|
page readonly
|
|
|
|
5160000
|
heap private
|
page read and write
|
|
|
|
7DF59C2A0000
|
unkown image
|
page readonly
|
|
|
|
7FF52D061000
|
unkown image
|
page readonly
|
|
|
|
7FF58E3E3000
|
unkown image
|
page readonly
|
|
|
|
7FF578D8B000
|
unkown image
|
page readonly
|
|
|
|
7DF580E30000
|
unkown image
|
page readonly
|
|
|
|
28CB000
|
unkown image
|
page readonly
|
|
|
|
F9403FF000
|
stack
|
page read and write
|
|
|
|
7FF578927000
|
unkown image
|
page readonly
|
|
|
|
E0A29F9000
|
stack
|
page read and write
|
|
|
|
2E10000
|
unkown image
|
page readonly
|
|
|
|
6F0000
|
unkown image
|
page readonly
|
|
|
|
47B0000
|
unkown
|
page read and write
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
7FF58E631000
|
unkown image
|
page readonly
|
|
|
|
29D0000
|
unkown image
|
page readonly
|
|
|
|
305D000
|
heap default
|
page read and write
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
7FF572FE7000
|
unkown image
|
page readonly
|
|
|
|
8F0000
|
unkown image
|
page readonly
|
|
|
|
4713000
|
heap private
|
page read and write
|
|
|
|
4930000
|
heap private
|
page read and write
|
|
|
|
8F0000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
3064000
|
unkown
|
page read and write
|
|
|
|
698000
|
unkown
|
page read and write
|
|
|
|
2AFB000
|
unkown image
|
page readonly
|
|
|
|
7FF57311B000
|
unkown image
|
page readonly
|
|
|
|
7FF578CAC000
|
unkown image
|
page readonly
|
|
|
|
7FF58E3AB000
|
unkown image
|
page readonly
|
|
|
|
C94E90E000
|
stack
|
page read and write
|
|
|
|
2B7B000
|
unkown image
|
page readonly
|
|
|
|
2F9A000
|
unkown
|
page read and write
|
|
|
|
2AFB000
|
unkown image
|
page readonly
|
|
|
|
473B000
|
unkown
|
page read and write
|
|
|
|
305D000
|
heap default
|
page read and write
|
|
|
|
7FF52C86D000
|
unkown image
|
page readonly
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
7FF578D6E000
|
unkown image
|
page readonly
|
|
|
|
7FF10000
|
unkown image
|
page readonly
|
|
|
|
348E000
|
stack
|
page read and write
|
|
|
|
2E10000
|
unkown image
|
page readonly
|
|
|
|
7FF58E614000
|
unkown image
|
page readonly
|
|
|
|
7DF580E50000
|
unkown image
|
page readonly
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
830000
|
unkown image
|
page readonly
|
|
|
|
7DF59C2A2000
|
unkown image
|
page readonly
|
|
|
|
830000
|
unkown image
|
page readonly
|
|
|
|
61C0000
|
unkown image
|
page readonly
|
|
|
|
305D000
|
unkown
|
page read and write
|
|
|
|
4D7000
|
unkown
|
page read and write
|
|
|
|
2DA0000
|
unkown
|
page read and write
|
|
|
|
7FF52C812000
|
unkown image
|
page readonly
|
|
|
|
2B2C000
|
unkown image
|
page readonly
|
|
|
|
3310000
|
heap private
|
page read and write
|
|
|
|
7FF58DCDF000
|
unkown image
|
page readonly
|
|
|
|
7FF52CF57000
|
unkown image
|
page readonly
|
|
|
|
21D59820000
|
unkown
|
page read and write
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
7FA82000
|
unkown image
|
page readonly
|
|
|
|
28FC000
|
unkown image
|
page readonly
|
|
|
|
3010000
|
unkown
|
page read and write
|
|
|
|
21D59790000
|
unkown image
|
page readonly
|
|
|
|
261A000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown image
|
page readonly
|
|
|
|
2525000
|
unkown image
|
page readonly
|
|
|
|
7FF578DB7000
|
unkown image
|
page readonly
|
|
|
|
2836000
|
unkown image
|
page readonly
|
|
|
|
21D597C0000
|
unkown image
|
page readonly
|
|
|
|
1DFD4B10000
|
unkown image
|
page readonly
|
|
|
|
2E4A000
|
heap default
|
page read and write
|
|
|
|
F93FA7B000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown image
|
page read and write
|
|
|
|
2B84000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
3260000
|
heap default
|
page read and write
|
|
|
|
34D0000
|
heap default
|
page read and write
|
|
|
|
2D8BD470000
|
unkown image
|
page readonly
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
41DE000
|
stack
|
page read and write
|
|
|
|
26EC000
|
unkown image
|
page readonly
|
|
|
|
770000
|
unkown image
|
page readonly
|
|
|
|
26D6000
|
unkown image
|
page readonly
|
|
|
|
2F9E000
|
unkown
|
page read and write
|
|
|
|
7FF572936000
|
unkown image
|
page readonly
|
|
|
|
32FE000
|
stack
|
page read and write
|
|
|
|
4721000
|
unkown
|
page read and write
|
|
|
|
29A0000
|
unkown
|
page execute and read and write
|
|
|
|
390000
|
unkown image
|
page readonly
|
|
|
|
7F6F2000
|
unkown image
|
page readonly
|
|
|
|
7DF53ACE0000
|
unkown image
|
page readonly
|
|
|
|
2F80000
|
unkown image
|
page read and write
|
|
|
|
7FF55F0E1000
|
unkown image
|
page readonly
|
|
|
|
2616000
|
unkown image
|
page readonly
|
|
|
|
7FF578E41000
|
unkown image
|
page readonly
|
|
|
|
7FA80000
|
unkown image
|
page readonly
|
|
|
|
557000
|
unkown
|
page read and write
|
|
|
|
7FF10000
|
unkown image
|
page readonly
|
|
|
|
2908000
|
unkown image
|
page readonly
|
|
|
|
2D20000
|
unkown image
|
page readonly
|
|
|
|
7FF58E3EC000
|
unkown image
|
page readonly
|
|
|
|
31E0000
|
unkown
|
page read and write
|
|
|
|
3317000
|
heap private
|
page read and write
|
|
|
|
26E6000
|
unkown image
|
page readonly
|
|
|
|
3000000
|
unkown image
|
page readonly
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
2CAC000
|
unkown image
|
page readonly
|
|
|
|
287C000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
2836000
|
unkown image
|
page readonly
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
2D8BD5C0000
|
unkown
|
page read and write
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
7FA90000
|
unkown image
|
page readonly
|
|
|
|
2CC000
|
unkown
|
page read and write
|
|
|
|
62E4000
|
heap private
|
page read and write
|
|
|
|
C5A000
|
unkown image
|
page readonly
|
|
|
|
7FF52CF6F000
|
unkown image
|
page readonly
|
|
|
|
3620000
|
unkown
|
page read and write
|
|
|
|
263B000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
2ADA000
|
unkown image
|
page readonly
|
|
|
|
2DCF000
|
stack
|
page read and write
|
|
|
|
7F6E0000
|
unkown image
|
page readonly
|
|
|
|
7FF52D055000
|
unkown image
|
page readonly
|
|
|
|
1DFD4D13000
|
unkown
|
page read and write
|
|
|
|
263F000
|
unkown image
|
page readonly
|
|
|
|
7DF59C292000
|
unkown image
|
page readonly
|
|
|
|
2B1B000
|
unkown image
|
page readonly
|
|
|
|
2DD0000
|
heap private
|
page read and write
|
|
|
|
2A96000
|
unkown
|
page read and write
|
|
|
|
7FF5730D6000
|
unkown image
|
page readonly
|
|
|
|
7DF49A160000
|
unkown image
|
page readonly
|
|
|
|
263B000
|
unkown image
|
page readonly
|
|
|
|
25D5000
|
unkown image
|
page readonly
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
heap default
|
page read and write
|
|
|
|
2FEC000
|
unkown
|
page read and write
|
|
|
|
26D1000
|
unkown image
|
page readonly
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
21D59785000
|
heap private
|
page read and write
|
|
|
|
F93FEFE000
|
stack
|
page read and write
|
|
|
|
7FF52CF87000
|
unkown image
|
page readonly
|
|
|
|
1DFD4C02000
|
unkown
|
page read and write
|
|
|
|
271A000
|
unkown image
|
page readonly
|
|
|
|
2706000
|
unkown image
|
page readonly
|
|
|
|
7FF58E58E000
|
unkown image
|
page readonly
|
|
|
|
4230000
|
heap private
|
page read and write
|
|
|
|
21D59789000
|
heap private
|
page read and write
|
|
|
|
7FF58E5AA000
|
unkown image
|
page readonly
|
|
|
|
3180000
|
unkown image
|
page readonly
|
|
|
|
3079000
|
unkown
|
page read and write
|
|
|
|
7FF5730DD000
|
unkown image
|
page readonly
|
|
|
|
2AFF000
|
unkown image
|
page readonly
|
|
|
|
7F250000
|
unkown image
|
page readonly
|
|
|
|
C94EDFB000
|
stack
|
page read and write
|
|
|
|
7FF58E4AC000
|
unkown image
|
page readonly
|
|
|
|
263B000
|
unkown image
|
page readonly
|
|
|
|
2908000
|
unkown image
|
page readonly
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
270000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
2839000
|
unkown image
|
page readonly
|
|
|
|
2B7F000
|
unkown image
|
page readonly
|
|
|
|
3360000
|
unkown
|
page read and write
|
|
|
|
2A5F000
|
stack
|
page read and write
|
|
|
|
7EFA0000
|
unkown image
|
page readonly
|
|
|
|
2D8BD450000
|
unkown image
|
page read and write
|
|
|
|
8C34FF9000
|
stack
|
page read and write
|
|
|
|
263F000
|
unkown image
|
page readonly
|
|
|
|
2735000
|
unkown image
|
page readonly
|
|
|
|
21D5A740000
|
unkown
|
page read and write
|
|
|
|
2AD1000
|
unkown image
|
page readonly
|
|
|
|
2C7F000
|
unkown image
|
page readonly
|
|
|
|
7FF52CFDA000
|
unkown image
|
page readonly
|
|
|
|
305D000
|
unkown
|
page read and write
|
|
|
|
2B30000
|
unkown image
|
page readonly
|
|
|
|
2BAC000
|
unkown image
|
page readonly
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
30B0000
|
unkown image
|
page readonly
|
|
|
|
2B0D000
|
unkown image
|
page readonly
|
|
|
|
4FB0000
|
unkown image
|
page readonly
|
|
|
|
2845000
|
unkown image
|
page readonly
|
|
|
|
4530000
|
unkown image
|
page readonly
|
|
|
|
2AD6000
|
unkown image
|
page readonly
|
|
|
|
2643000
|
unkown image
|
page readonly
|
|
|
|
7DF586AC0000
|
unkown image
|
page readonly
|
|
|
|
2EA2000
|
heap default
|
page read and write
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
26DB000
|
unkown image
|
page readonly
|
|
|
|
28332930000
|
heap default
|
page read and write
|
|
|
|
2B11000
|
unkown image
|
page readonly
|
|
|
|
2AB1000
|
unkown image
|
page readonly
|
|
|
|
7F560000
|
unkown image
|
page readonly
|
|
|
|
4B280000
|
unkown
|
page read and write
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
3AE0000
|
unkown image
|
page readonly
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
7FF52CF8E000
|
unkown image
|
page readonly
|
|
|
|
4DB000
|
unkown
|
page read and write
|
|
|
|
62F0000
|
unkown
|
page read and write
|
|
|
|
2CB0000
|
unkown image
|
page readonly
|
|
|
|
3640000
|
heap private
|
page read and write
|
|
|
|
26E6000
|
unkown image
|
page readonly
|
|
|
|
2990000
|
stack
|
page execute and read and write
|
|
|
|
4814000
|
unkown
|
page read and write
|
|
|
|
2D11000
|
unkown image
|
page readonly
|
|
|
|
2B65000
|
unkown image
|
page readonly
|
|
|
|
4D54000
|
unkown
|
page read and write
|
|
|
|
2BB8000
|
unkown image
|
page readonly
|
|
|
|
7FF578E2A000
|
unkown image
|
page readonly
|
|
|
|
7F5E0000
|
unkown image
|
page readonly
|
|
|
|
2AE6000
|
unkown image
|
page readonly
|
|
|
|
710000
|
unkown image
|
page readonly
|
|
|
|
2A78000
|
unkown
|
page read and write
|
|
|
|
3010000
|
unkown image
|
page readonly
|
|
|
|
21D5A010000
|
unkown image
|
page readonly
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
E0A29FE000
|
stack
|
page read and write
|
|
|
|
2BAC000
|
unkown image
|
page readonly
|
|
|
|
2F80000
|
unkown image
|
page readonly
|
|
|
|
2C9B000
|
unkown image
|
page readonly
|
|
|
|
2B90000
|
unkown image
|
page readonly
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
3010000
|
unkown
|
page read and write
|
|
|
|
6F0000
|
unkown image
|
page readonly
|
|
|
|
260000
|
unkown image
|
page read and write
|
|
|
|
2CD0000
|
unkown image
|
page readonly
|
|
|
|
26F3000
|
unkown image
|
page readonly
|
|
|
|
21D5A6E0000
|
unkown
|
page read and write
|
|
|
|
7FF58E553000
|
unkown image
|
page readonly
|
|
|
|
3300000
|
unkown image
|
page readonly
|
|
|
|
2C75000
|
unkown image
|
page readonly
|
|
|
|
26E6000
|
unkown image
|
page readonly
|
|
|
|
35D0000
|
unkown image
|
page readonly
|
|
|
|
21D59E80000
|
unkown image
|
page readonly
|
|
|
|
2D8BD718000
|
unkown
|
page read and write
|
|
|
|
7FF572A0D000
|
unkown image
|
page readonly
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
2A14000
|
unkown
|
page read and write
|
|
|
|
7FF5731B4000
|
unkown image
|
page readonly
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
62E4000
|
heap private
|
page read and write
|
|
|
|
7FF52D044000
|
unkown image
|
page readonly
|
|
|
|
2B30000
|
unkown image
|
page readonly
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
26C4000
|
unkown image
|
page readonly
|
|
|
|
2B8B000
|
unkown image
|
page readonly
|
|
|
|
370E000
|
stack
|
page read and write
|
|
|
|
33A0000
|
stack
|
page execute and read and write
|
|
|
|
E0A2CFC000
|
unkown
|
page read and write
|
|
|
|
26BF000
|
unkown image
|
page readonly
|
|
|
|
21D59770000
|
unkown image
|
page read and write
|
|
|
|
25FF000
|
unkown image
|
page readonly
|
|
|
|
284B000
|
unkown image
|
page readonly
|
|
|
|
2AE6000
|
unkown image
|
page readonly
|
|
|
|
271A000
|
unkown image
|
page readonly
|
|
|
|
7FF58E527000
|
unkown image
|
page readonly
|
|
|
|
2A14000
|
unkown
|
page read and write
|
|
|
|
370000
|
unkown
|
page read and write
|
|
|
|
7F542000
|
unkown image
|
page readonly
|
|
|
|
32B0000
|
unkown image
|
page readonly
|
|
|
|
3405000
|
heap default
|
page read and write
|
|
|
|
3310000
|
heap private
|
page read and write
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
30AB000
|
unkown
|
page read and write
|
|
|
|
2D8BD62A000
|
unkown
|
page read and write
|
|
|
|
4930000
|
unkown
|
page read and write
|
|
|
|
21D597B0000
|
unkown image
|
page readonly
|
|
|
|
7FA90000
|
unkown image
|
page readonly
|
|
|
|
672E000
|
stack
|
page read and write
|
|
|
|
7FF578DBD000
|
unkown image
|
page readonly
|
|
|
|
3420000
|
unkown image
|
page readonly
|
|
|
|
263F000
|
unkown image
|
page readonly
|
|
|
|
930000
|
heap private
|
page read and write
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
34CF000
|
stack
|
page read and write
|
|
|
|
3D0000
|
unkown image
|
page read and write
|
|
|
|
7FF578CC5000
|
unkown image
|
page readonly
|
|
|
|
35D0000
|
unkown image
|
page readonly
|
|
|
|
2BB3000
|
unkown image
|
page readonly
|
|
|
|
4830000
|
unkown
|
page read and write
|
|
|
|
7FF5730F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5731C5000
|
unkown image
|
page readonly
|
|
|
|
694000
|
unkown
|
page read and write
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
7FF578DBA000
|
unkown image
|
page readonly
|
|
|
|
7DF580E40000
|
unkown image
|
page readonly
|
|
|
|
2BA6000
|
unkown image
|
page readonly
|
|
|
|
3130000
|
unkown image
|
page readonly
|
|
|
|
7FF52C856000
|
unkown image
|
page readonly
|
|
|
|
8E0000
|
unkown image
|
page readonly
|
|
|
|
7FF58E442000
|
unkown image
|
page readonly
|
|
|
|
2FE0000
|
unkown image
|
page readonly
|
|
|
|
4814000
|
unkown
|
page read and write
|
|
|
|
7FF572A5E000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown image
|
page readonly
|
|
|
|
2D8E000
|
stack
|
page read and write
|
|
|
|
2E5F000
|
stack
|
page read and write
|
|
|
|
7DF53ACD2000
|
unkown image
|
page readonly
|
|
|
|
36C4000
|
unkown
|
page read and write
|
|
|
|
7DF53ACE0000
|
unkown image
|
page readonly
|
|
|
|
7FF578921000
|
unkown image
|
page readonly
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
7FF5730DF000
|
unkown image
|
page readonly
|
|
|
|
390000
|
unkown image
|
page readonly
|
|
|
|
24D1000
|
unkown image
|
page readonly
|
|
|
|
7FA82000
|
unkown image
|
page readonly
|
|
|
|
7FA72000
|
unkown image
|
page readonly
|
|
|
|
32FE000
|
stack
|
page read and write
|
|
|
|
323B000
|
unkown
|
page read and write
|
|
|
|
264D000
|
unkown image
|
page readonly
|
|
|
|
29D0000
|
unkown image
|
page readonly
|
|
|
|
2D8BEFF0000
|
unkown
|
page read and write
|
|
|
|
2D10000
|
stack
|
page read and write
|
|
|
|
2D10000
|
stack
|
page read and write
|
|
|
|
3260000
|
heap default
|
page read and write
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
270B000
|
unkown image
|
page readonly
|
|
|
|
7EFA0000
|
unkown image
|
page readonly
|
|
|
|
2E1E000
|
stack
|
page read and write
|
|
|
|
2E80000
|
heap default
|
page read and write
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
E0A2BFB000
|
stack
|
page read and write
|
|
|
|
3270000
|
stack
|
page read and write
|
|
|
|
2701000
|
unkown image
|
page readonly
|
|
|
|
E0A28FE000
|
stack
|
page read and write
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
28332F15000
|
unkown
|
page read and write
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
2C10000
|
unkown image
|
page readonly
|
|
|
|
2A96000
|
unkown
|
page read and write
|
|
|
|
4C60000
|
unkown
|
page read and write
|
|
|
|
C94EEF7000
|
stack
|
page read and write
|
|
|
|
7DF59C290000
|
unkown image
|
page readonly
|
|
|
|
28332F00000
|
unkown
|
page read and write
|
|
|
|
4B39F000
|
unkown
|
page read and write
|
|
|
|
2CC000
|
unkown
|
page read and write
|
|
|
|
2643000
|
unkown image
|
page readonly
|
|
|
|
2C2E000
|
unkown image
|
page readonly
|
|
|
|
43B0000
|
stack
|
page read and write
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
28332A02000
|
unkown
|
page read and write
|
|
|
|
7FF58DE65000
|
unkown image
|
page readonly
|
|
|
|
7FF578D37000
|
unkown image
|
page readonly
|
|
|
|
3300000
|
unkown image
|
page readonly
|
|
|
|
3300000
|
unkown image
|
page readonly
|
|
|
|
2B60000
|
unkown image
|
page readonly
|
|
|
|
2AF5000
|
unkown image
|
page readonly
|
|
|
|
7FF57292F000
|
unkown image
|
page readonly
|
|
|
|
25F1000
|
unkown image
|
page readonly
|
|
|
|
1DFD4C7E000
|
unkown
|
page read and write
|
|
|
|
28E1000
|
unkown image
|
page readonly
|
|
|
|
2635000
|
unkown image
|
page readonly
|
|
|
|
3850000
|
unkown image
|
page readonly
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
2C69000
|
unkown image
|
page readonly
|
|
|
|
264D000
|
unkown image
|
page readonly
|
|
|
|
E0A247D000
|
unkown
|
page read and write
|
|
|
|
26D1000
|
unkown image
|
page readonly
|
|
|
|
2D8BF002000
|
unkown
|
page read and write
|
|
|
|
270D000
|
unkown image
|
page readonly
|
|
|
|
2643000
|
unkown image
|
page readonly
|
|
|
|
7DF53ACD0000
|
unkown image
|
page readonly
|
|
|
|
62E0000
|
heap private
|
page read and write
|
|
|
|
830000
|
unkown image
|
page readonly
|
|
|
|
21D59800000
|
unkown
|
page read and write
|
|
|
|
2F30000
|
heap default
|
page read and write
|
|
|
|
4D60000
|
unkown image
|
page readonly
|
|
|
|
2908000
|
unkown image
|
page readonly
|
|
|
|
2BFB000
|
unkown
|
page read and write
|
|
|
|
2FF0000
|
unkown image
|
page readonly
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
26F3000
|
unkown image
|
page readonly
|
|
|
|
269E000
|
unkown image
|
page readonly
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
C94EFFF000
|
stack
|
page read and write
|
|
|
|
2CD0000
|
unkown image
|
page readonly
|
|
|
|
320000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
heap private
|
page read and write
|
|
|
|
26C4000
|
unkown image
|
page readonly
|
|
|
|
2FC0000
|
stack
|
page read and write
|
|
|
|
6D0000
|
stack
|
page read and write
|
|
|
|
2B9B000
|
unkown image
|
page readonly
|
|
|
|
2D8BD64E000
|
unkown
|
page read and write
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
8C34EF9000
|
stack
|
page read and write
|
|
|
|
2D8BD470000
|
unkown image
|
page readonly
|
|
|
|
26C4000
|
unkown image
|
page readonly
|
|
|
|
7FF5731C1000
|
unkown image
|
page readonly
|
|
|
|
2D8BF5E0000
|
unkown image
|
page write copy
|
|
|
|
4E5F000
|
stack
|
page read and write
|
|
|
|
21D59880000
|
unkown
|
page read and write
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
2635000
|
unkown image
|
page readonly
|
|
|
|
41DE000
|
stack
|
page read and write
|
|
|
|
3F0000
|
heap private
|
page read and write
|
|
|
|
3350000
|
heap default
|
page read and write
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
32FE000
|
stack
|
page read and write
|
|
|
|
2525000
|
unkown image
|
page readonly
|
|
|
|
3010000
|
unkown image
|
page readonly
|
|
|
|
672E000
|
stack
|
page read and write
|
|
|
|
7FF12000
|
unkown image
|
page readonly
|
|
|
|
7F272000
|
unkown image
|
page readonly
|
|
|
|
2ADA000
|
unkown image
|
page readonly
|
|
|
|
7DF586AA0000
|
unkown image
|
page readonly
|
|
|
|
21D5A6D0000
|
unkown
|
page readonly
|
|
|
|
7F440000
|
unkown image
|
page readonly
|
|
|
|
24C7000
|
unkown image
|
page readonly
|
|
|
|
7FF58E53F000
|
unkown image
|
page readonly
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
7FF578D4D000
|
unkown image
|
page readonly
|
|
|
|
2B16000
|
unkown image
|
page readonly
|
|
|
|
2E10000
|
unkown image
|
page readonly
|
|
|
|
8D0000
|
unkown image
|
page readonly
|
|
|
|
32FE000
|
stack
|
page read and write
|
|
|
|
2B60000
|
unkown image
|
page readonly
|
|
|
|
49D0000
|
heap private
|
page read and write
|
|
|
|
7FF578E3A000
|
unkown image
|
page readonly
|
|
|
|
88C000
|
unkown
|
page read and write
|
|
|
|
7F6F2000
|
unkown image
|
page readonly
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown image
|
page readonly
|
|
|
|
2990000
|
unkown image
|
page readonly
|
|
|
|
270000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5731BA000
|
unkown image
|
page readonly
|
|
|
|
3055000
|
heap default
|
page read and write
|
|
|
|
6730000
|
unkown
|
page read and write
|
|
|
|
F93FFFF000
|
stack
|
page read and write
|
|
|
|
2D8BD65A000
|
unkown
|
page read and write
|
|
|
|
C94F0FF000
|
stack
|
page read and write
|
|
|
|
2CB0000
|
unkown image
|
page readonly
|
|
|
|
286B000
|
unkown image
|
page readonly
|
|
|
|
4600000
|
unkown
|
page read and write
|
|
|
|
7DF53ACC0000
|
unkown image
|
page readonly
|
|
|
|
7FF58E41B000
|
unkown image
|
page readonly
|
|
|
|
7FF578AC5000
|
unkown image
|
page readonly
|
|
|
|
7FF578D49000
|
unkown image
|
page readonly
|
|
|
|
30D6000
|
unkown
|
page read and write
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
26EB000
|
unkown image
|
page readonly
|
|
|
|
2D8BD460000
|
heap private
|
page read and write
|
|
|
|
7DF53ACC2000
|
unkown image
|
page readonly
|
|
|
|
2B50000
|
unkown image
|
page read and write
|
|
|
|
3210000
|
unkown image
|
page readonly
|
|
|
|
7DF586AB2000
|
unkown image
|
page readonly
|
|
|
|
8CB000
|
unkown
|
page read and write
|
|
|
|
7FF578D4F000
|
unkown image
|
page readonly
|
|
|
|
28DB000
|
unkown image
|
page readonly
|
|
|
|
55B000
|
unkown
|
page read and write
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
24C7000
|
unkown image
|
page readonly
|
|
|
|
2B7F000
|
unkown image
|
page readonly
|
|
|
|
2B50000
|
unkown image
|
page read and write
|
|
|
|
24C7000
|
unkown image
|
page readonly
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown image
|
page readonly
|
|
|
|
263B000
|
unkown image
|
page readonly
|
|
|
|
48F0000
|
unkown
|
page read and write
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
2D8BD602000
|
unkown
|
page read and write
|
|
|
|
26DB000
|
unkown image
|
page readonly
|
|
|
|
26BB000
|
unkown image
|
page readonly
|
|
|
|
7DF59C2B0000
|
unkown image
|
page readonly
|
|
|
|
2635000
|
unkown image
|
page readonly
|
|
|
|
2FF0000
|
stack
|
page read and write
|
|
|
|
7FF578E12000
|
unkown image
|
page readonly
|
|
|
|
4A24000
|
unkown
|
page read and write
|
|
|
|
49D0000
|
heap private
|
page read and write
|
|
|
|
2B03000
|
unkown image
|
page readonly
|
|
|
|
1DFD50D0000
|
unkown image
|
page readonly
|
|
|
|
7FA70000
|
unkown image
|
page readonly
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
7FF52CFDD000
|
unkown image
|
page readonly
|
|
|
|
2C9B000
|
unkown
|
page read and write
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
27FE000
|
unkown image
|
page readonly
|
|
|
|
7FF578D77000
|
unkown image
|
page readonly
|
|
|
|
2D8BD66A000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown image
|
page readonly
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
261A000
|
unkown image
|
page readonly
|
|
|
|
3065000
|
heap default
|
page read and write
|
|
|
|
29F0000
|
unkown image
|
page read and write
|
|
|
|
2C8D000
|
unkown image
|
page readonly
|
|
|
|
4720000
|
unkown
|
page read and write
|
|
|
|
4D54000
|
unkown
|
page read and write
|
|
|
|
26C6000
|
unkown image
|
page readonly
|
|
|
|
2DCF000
|
stack
|
page read and write
|
|
|
|
2CA0000
|
unkown image
|
page readonly
|
|
|
|
3320000
|
unkown image
|
page readonly
|
|
|
|
2D8BD66A000
|
unkown
|
page read and write
|
|
|
|
26C4000
|
unkown image
|
page readonly
|
|
|
|
7FF52D061000
|
unkown image
|
page readonly
|
|
|
|
7FF58E53D000
|
unkown image
|
page readonly
|
|
|
|
276F000
|
unkown image
|
page readonly
|
|
|
|
7FF58E3CF000
|
unkown image
|
page readonly
|
|
|
|
25EE000
|
unkown image
|
page readonly
|
|
|
|
61BE000
|
stack
|
page read and write
|
|
|
|
2D26000
|
unkown image
|
page readonly
|
|
|
|
7DF580E42000
|
unkown image
|
page readonly
|
|
|
|
264D000
|
unkown image
|
page readonly
|
|
|
|
7FF578CC1000
|
unkown image
|
page readonly
|
|
|
|
7FF58DF8D000
|
unkown image
|
page readonly
|
|
|
|
2643000
|
unkown image
|
page readonly
|
|
|
|
2AAE000
|
unkown image
|
page readonly
|
|
|
|
30C0000
|
unkown image
|
page readonly
|
|
|
|
4FA0000
|
heap private
|
page read and write
|
|
|
|
8E0000
|
unkown image
|
page readonly
|
|
|
|
4B39F000
|
unkown
|
page read and write
|
|
|
|
7FA82000
|
unkown image
|
page readonly
|
|
|
|
7F270000
|
unkown image
|
page readonly
|
|
|
|
4620000
|
heap private
|
page read and write
|
|
|
|
2BA6000
|
unkown image
|
page readonly
|
|
|
|
1DFD4D08000
|
unkown
|
page read and write
|
|
|
|
361E000
|
stack
|
page read and write
|
|
|
|
7FF52D04A000
|
unkown image
|
page readonly
|
|
|
|
285D000
|
unkown image
|
page readonly
|
|
|
|
75E000
|
stack
|
page read and write
|
|
|
|
48EF000
|
stack
|
page read and write
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
3430000
|
stack
|
page readonly
|
|
|
|
2BBB000
|
unkown
|
page read and write
|
|
|
|
32B0000
|
unkown image
|
page readonly
|
|
|
|
7FF58DE27000
|
unkown image
|
page readonly
|
|
|
|
6D0000
|
stack
|
page read and write
|
|
|
|
26AF000
|
unkown image
|
page readonly
|
|
|
|
26F3000
|
unkown image
|
page readonly
|
|
|
|
2656000
|
unkown image
|
page readonly
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
7FF578E24000
|
unkown image
|
page readonly
|
|
|
|
7F8C0000
|
unkown image
|
page readonly
|
|
|
|
26D1000
|
unkown image
|
page readonly
|
|
|
|
7FA70000
|
unkown image
|
page readonly
|
|
|
|
26DB000
|
unkown image
|
page readonly
|
|
|
|
7FF58E61A000
|
unkown image
|
page readonly
|
|
|
|
2B84000
|
unkown image
|
page readonly
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
3290000
|
unkown image
|
page readonly
|
|
|
|
30C0000
|
unkown image
|
page readonly
|
|
|
|
3065000
|
heap default
|
page read and write
|
|
|
|
306C000
|
unkown
|
page read and write
|
|
|
|
7FF20000
|
unkown image
|
page readonly
|
|
|
|
7F6F2000
|
unkown image
|
page readonly
|
|
|
|
7DF586AB0000
|
unkown image
|
page readonly
|
|
|
|
2525000
|
unkown image
|
page readonly
|
|
|
|
1DFD5402000
|
unkown
|
page read and write
|
|
|
|
2987000
|
unkown image
|
page readonly
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
830000
|
unkown image
|
page readonly
|
|
|
|
6730000
|
unkown
|
page read and write
|
|
|
|
7FF58E302000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
26E1000
|
unkown image
|
page readonly
|
|
|
|
2616000
|
unkown image
|
page readonly
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
26EC000
|
unkown image
|
page readonly
|
|
|
|
7FF58E5AD000
|
unkown image
|
page readonly
|
|
|
|
7F8C2000
|
unkown image
|
page readonly
|
|
|
|
33F0000
|
unkown
|
page read and write
|
|
|
|
4930000
|
unkown
|
page read and write
|
|
|
|
29C0000
|
heap default
|
page read and write
|
|
|
|
E0A2579000
|
stack
|
page read and write
|
|
|
|
7FF578D63000
|
unkown image
|
page readonly
|
|
|
|
3317000
|
heap private
|
page read and write
|
|
|
|
2FE0000
|
unkown image
|
page readonly
|
|
|
|
25F1000
|
unkown image
|
page readonly
|
|
|
|
2735000
|
unkown image
|
page readonly
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
7F8D0000
|
unkown image
|
page readonly
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
2D8BF200000
|
unkown
|
page read and write
|
|
|
|
55B000
|
unkown
|
page read and write
|
|
|
|
2D8BD600000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
unkown
|
page readonly
|
|
|
|
2D8BDB90000
|
unkown image
|
page readonly
|
|
|
|
2C7B000
|
unkown image
|
page readonly
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
28332E02000
|
unkown
|
page read and write
|
|
|
|
760000
|
heap default
|
page read and write
|
|
|
|
35D0000
|
unkown
|
page read and write
|
|
|
|
1DFD4B60000
|
heap default
|
page read and write
|
|
|
|
7DF53ACC2000
|
unkown image
|
page readonly
|
|
|
|
21D5A480000
|
unkown
|
page read and write
|
|
|
|
2656000
|
unkown image
|
page readonly
|
|
|
|
26BB000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
4A24000
|
unkown
|
page read and write
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
1DFD5250000
|
unkown image
|
page readonly
|
|
|
|
2A90000
|
heap default
|
page read and write
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
264D000
|
unkown image
|
page readonly
|
|
|
|
7DF580E40000
|
unkown image
|
page readonly
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
28D4000
|
unkown image
|
page readonly
|
|
|
|
2D10000
|
stack
|
page read and write
|
|
|
|
26DB000
|
unkown image
|
page readonly
|
|
|
|
1190000
|
unkown image
|
page readonly
|
|
|
|
29D0000
|
unkown image
|
page readonly
|
|
|
|
4F2F000
|
stack
|
page read and write
|
|
|
|
F93FC7C000
|
stack
|
page read and write
|
|
|
|
280F000
|
unkown image
|
page readonly
|
|
|
|
7F6F0000
|
unkown image
|
page readonly
|
|
|
|
5163000
|
heap private
|
page read and write
|
|
|
|
2F80000
|
unkown image
|
page readonly
|
|
|
|
26F3000
|
unkown image
|
page readonly
|
|
|
|
2DA4000
|
unkown
|
page read and write
|
|
|
|
3520000
|
unkown image
|
page readonly
|
|
|
|
2B1B000
|
unkown image
|
page readonly
|
|
|
|
21D598A0000
|
heap default
|
page read and write
|
|
|
|
286B000
|
unkown image
|
page readonly
|
|
|
|
7DF586AB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5731CA000
|
unkown image
|
page readonly
|
|
|
|
62F0000
|
unkown
|
page read and write
|
|
|
|
7DF586AA2000
|
unkown image
|
page readonly
|
|
|
|
7F8D2000
|
unkown image
|
page readonly
|
|
|
|
7F6E2000
|
unkown image
|
page readonly
|
|
|
|
2D40000
|
unkown image
|
page readonly
|
|
|
|
7F6E0000
|
unkown image
|
page readonly
|
|
|
|
3059000
|
heap default
|
page read and write
|
|
|
|
4A30000
|
unkown
|
page read and write
|
|
|
|
2D38000
|
unkown image
|
page readonly
|
|
|
|
7FF52CEDC000
|
unkown image
|
page readonly
|
|
|
|
263F000
|
unkown image
|
page readonly
|
|
|
|
306C000
|
unkown
|
page read and write
|
|
|
|
F9400FD000
|
stack
|
page read and write
|
|
|
|
2A7C000
|
unkown
|
page read and write
|
|
|
|
28332A28000
|
unkown
|
page read and write
|
|
|
|
28332B23000
|
heap private
|
page read and write
|
|
|
|
3180000
|
unkown image
|
page readonly
|
|
|
|
28DB000
|
unkown image
|
page readonly
|
|
|
|
7FF5731D1000
|
unkown image
|
page readonly
|
|
|
|
26E1000
|
unkown image
|
page readonly
|
|
|
|
26C4000
|
unkown image
|
page readonly
|
|
|
|
7F8E0000
|
unkown image
|
page readonly
|
|
|
|
25EE000
|
unkown image
|
page readonly
|
|
|
|
335A000
|
heap default
|
page read and write
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
7FF58E609000
|
unkown image
|
page readonly
|
|
|
|
2920000
|
unkown
|
page read and write
|
|
|
|
3400000
|
heap default
|
page read and write
|
|
|
|
C94E98F000
|
stack
|
page read and write
|
|
|
|
8C34ABB000
|
unkown
|
page read and write
|
|
|
|
2720000
|
unkown image
|
page readonly
|
|
|
|
2FA0000
|
unkown image
|
page readonly
|
|
|
|
7F5E0000
|
unkown image
|
page readonly
|
|
|
|
28F6000
|
unkown image
|
page readonly
|
|
|
|
F93FDFF000
|
stack
|
page read and write
|
|
|
|
7FF58E631000
|
unkown image
|
page readonly
|
|
|
|
31E0000
|
unkown
|
page read and write
|
|
|
|
3740000
|
heap private
|
page read and write
|
|
|
|
8C34F7E000
|
stack
|
page read and write
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
2D8BD5A0000
|
unkown image
|
page readonly
|
|
|
|
25EE000
|
unkown image
|
page readonly
|
|
|
|
5270000
|
unkown
|
page read and write
|
|
|
|
7F552000
|
unkown image
|
page readonly
|
|
|
|
2DA4000
|
unkown
|
page read and write
|
|
|
|
3240000
|
unkown image
|
page readonly
|
|
|
|
2D8BD713000
|
unkown
|
page read and write
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
7FF5731A9000
|
unkown image
|
page readonly
|
|
|
|
3310000
|
unkown image
|
page readonly
|
|
|
|
33A0000
|
unkown image
|
page readonly
|
|
|
|
7F700000
|
unkown image
|
page readonly
|
|
|
|
28EB000
|
unkown image
|
page readonly
|
|
|
|
1DFD4B10000
|
unkown image
|
page readonly
|
|
|
|
1DFD4D00000
|
unkown
|
page read and write
|
|
|
|
66EE000
|
stack
|
page read and write
|
|
|
|
25FF000
|
unkown image
|
page readonly
|
|
|
|
28CB000
|
unkown image
|
page readonly
|
|
|
|
2B91000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown image
|
page readonly
|
|
|
|
7FF52CF80000
|
unkown image
|
page readonly
|
|
|
|
8CB000
|
unkown
|
page read and write
|
|
|
|
30DA000
|
unkown
|
page read and write
|
|
|
|
4820000
|
unkown image
|
page readonly
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
2DA0000
|
unkown
|
page read and write
|
|
|
|
7FF578C95000
|
unkown image
|
page readonly
|
|
|
|
4240000
|
unkown image
|
page readonly
|
|
|
|
7F6F0000
|
unkown image
|
page readonly
|
|
|
|
2F9A000
|
unkown
|
page read and write
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
270000
|
unkown image
|
page readonly
|
|
|
|
28332E13000
|
unkown
|
page read and write
|
|
|
|
261A000
|
unkown image
|
page readonly
|
|
|
|
7F550000
|
unkown image
|
page readonly
|
|
|
|
2D00000
|
unkown
|
page read and write
|
|
|
|
2D8BD490000
|
unkown image
|
page readonly
|
|
|
|
7FF52CDFF000
|
unkown image
|
page readonly
|
|
|
|
3520000
|
unkown image
|
page readonly
|
|
|
|
2D8BD702000
|
unkown
|
page read and write
|
|
|
|
7FF578D67000
|
unkown image
|
page readonly
|
|
|
|
21D5A470000
|
unkown
|
page read and write
|
|
|
|
21D598E5000
|
unkown
|
page read and write
|
|
|
|
7F542000
|
unkown image
|
page readonly
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
7DF586AB2000
|
unkown image
|
page readonly
|
|
|
|
264D000
|
unkown image
|
page readonly
|
|
|
|
7F250000
|
unkown image
|
page readonly
|
|
|
|
2D8BD672000
|
unkown
|
page read and write
|
|
|
|
2D8BDA00000
|
unkown image
|
page readonly
|
|
|
|
25FF000
|
unkown image
|
page readonly
|
|
|
|
7FF58E51F000
|
unkown image
|
page readonly
|
|
|
|
7DF53ACD2000
|
unkown image
|
page readonly
|
|
|
|
3440000
|
stack
|
page read and write
|
|
|
|
2D8E000
|
stack
|
page read and write
|
|
|
|
4230000
|
heap private
|
page read and write
|
|
|
|
2970000
|
unkown image
|
page readonly
|
|
|
|
2A9A000
|
unkown
|
page read and write
|
|
|
|
2A9A000
|
unkown
|
page read and write
|
|
|
|
1DFD4D02000
|
unkown
|
page read and write
|
|
|
|
3079000
|
heap default
|
page read and write
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
4820000
|
unkown image
|
page readonly
|
|
|
|
25F1000
|
unkown image
|
page readonly
|
|
|
|
2FC0000
|
stack
|
page read and write
|
|
|
|
4720000
|
unkown
|
page read and write
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
283328D0000
|
unkown
|
page read and write
|
|
|
|
2D8BD4C0000
|
heap default
|
page read and write
|
|
|
|
3010000
|
unkown image
|
page readonly
|
|
|
|
2C83000
|
unkown image
|
page readonly
|
|
|
|
7FF30000
|
unkown image
|
page readonly
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
2B60000
|
unkown image
|
page readonly
|
|
|
|
7FF58E197000
|
unkown image
|
page readonly
|
|
|
|
4820000
|
unkown
|
page read and write
|
|
|
|
2AC5000
|
heap default
|
page read and write
|
|
|
|
2670000
|
unkown image
|
page readonly
|
|
|
|
4720000
|
unkown
|
page read and write
|
|
|
|
73B000
|
unkown
|
page read and write
|
|
|
|
2D8BD648000
|
unkown
|
page read and write
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
2D8BEFF0000
|
unkown
|
page read and write
|
|
|
|
49D0000
|
heap private
|
page read and write
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
2990000
|
stack
|
page execute and read and write
|
|
|
|
7DF580E32000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
2C51000
|
unkown image
|
page readonly
|
|
|
|
27A3000
|
unkown image
|
page readonly
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
29B0000
|
unkown
|
page read and write
|
|
|
|
760000
|
heap default
|
page read and write
|
|
|
|
7FF578E41000
|
unkown image
|
page readonly
|
|
|
|
24D1000
|
unkown image
|
page readonly
|
|
|
|
279C000
|
unkown image
|
page readonly
|
|
|
|
3010000
|
unkown image
|
page readonly
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
21D5A000000
|
unkown image
|
page readonly
|
|
|
|
7FF57303C000
|
unkown image
|
page readonly
|
|
|
|
7F700000
|
unkown image
|
page readonly
|
|
|
|
2E8A000
|
heap default
|
page read and write
|
|
|
|
21D598A8000
|
heap default
|
page read and write
|
|
|
|
28D4000
|
unkown image
|
page readonly
|
|
|
|
7FF58E3B6000
|
unkown image
|
page readonly
|
|
|
|
3220000
|
stack
|
page execute and read and write
|
|
|
|
4D60000
|
unkown image
|
page readonly
|
|
|
|
26CA000
|
unkown image
|
page readonly
|
|
|
|
7FF5731A2000
|
unkown image
|
page readonly
|
|
|
|
30AB000
|
unkown
|
page read and write
|
|
|
|
7FF572F6A000
|
unkown image
|
page readonly
|
|
|
|
2D8BD65A000
|
unkown
|
page read and write
|
|
|
|
5280000
|
unkown
|
page read and write
|
|
|
|
7FF58E1FC000
|
unkown image
|
page readonly
|
|
|
|
820000
|
unkown image
|
page read and write
|
|
|
|
7FF572A4D000
|
unkown image
|
page readonly
|
|
|
|
1DFD4B40000
|
unkown image
|
page readonly
|
|
|
|
1DFD4B30000
|
unkown image
|
page readonly
|
|
|
|
7F552000
|
unkown image
|
page readonly
|
|
|
|
7F540000
|
unkown image
|
page readonly
|
|
|
|
21D598E8000
|
heap default
|
page read and write
|
|
|
|
2821000
|
unkown image
|
page readonly
|
|
|
|
26EC000
|
unkown image
|
page readonly
|
|
|
|
28CF000
|
unkown image
|
page readonly
|
|
|
|
2F60000
|
unkown image
|
page readonly
|
|
|
|
7FF5730E3000
|
unkown image
|
page readonly
|
|
|
|
276B000
|
unkown image
|
page readonly
|
|
|
|
7FF578E31000
|
unkown image
|
page readonly
|
|
|
|
2CD0000
|
unkown image
|
page readonly
|
|
|
|
2970000
|
unkown image
|
page readonly
|
|
|
|
3200000
|
unkown image
|
page readonly
|
|
|
|
7FF58E550000
|
unkown image
|
page readonly
|
|
|
|
E0A2AFC000
|
stack
|
page read and write
|
|
|
|
2C3F000
|
unkown image
|
page readonly
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
7DF580E32000
|
unkown image
|
page readonly
|
|
|
|
7FF578C2B000
|
unkown image
|
page readonly
|
|
|
|
26BB000
|
unkown image
|
page readonly
|
|
|
|
30B0000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
7F8C0000
|
unkown image
|
page readonly
|
|
|
|
29E5000
|
unkown image
|
page readonly
|
|
|
|
25EE000
|
unkown image
|
page readonly
|
|
|
|
7F7C0000
|
unkown image
|
page readonly
|
|
|
|
2990000
|
stack
|
page execute and read and write
|
|
|
|
2D33000
|
unkown image
|
page readonly
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
28EB000
|
unkown image
|
page readonly
|
|
|
|
21D59A70000
|
unkown
|
page read and write
|
|
|
|
7F170000
|
unkown image
|
page readonly
|
|
|
|
26D7000
|
unkown image
|
page readonly
|
|
|
|
7FF58E625000
|
unkown image
|
page readonly
|
|
|
|
2DA0000
|
unkown
|
page read and write
|
|
|
|
7F6E0000
|
unkown image
|
page readonly
|
|
|
|
4240000
|
unkown image
|
page readonly
|
|
|
|
1DFD4B00000
|
heap private
|
page read and write
|
|
|
|
1DFD4C56000
|
unkown
|
page read and write
|
|
|
|
4720000
|
unkown
|
page read and write
|
|
|
|
2E5F000
|
stack
|
page read and write
|
|
|
|
26C1000
|
unkown image
|
page readonly
|
|
|
|
2821000
|
unkown image
|
page readonly
|
|
|
|
2CFF000
|
unkown image
|
page readonly
|
|
|
|
333F000
|
stack
|
page read and write
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
7FF58E621000
|
unkown image
|
page readonly
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
261A000
|
unkown image
|
page readonly
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
2C31000
|
unkown image
|
page readonly
|
|
|
|
88C000
|
unkown
|
page read and write
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
2845000
|
unkown image
|
page readonly
|
|
|
|
25EE000
|
unkown image
|
page readonly
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
26BF000
|
unkown image
|
page readonly
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
C10000
|
stack
|
page read and write
|
|
|
|
3270000
|
stack
|
page read and write
|
|
|
|
7FF58E199000
|
unkown image
|
page readonly
|
|
|
|
7DF59C292000
|
unkown image
|
page readonly
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
1DFD4C00000
|
unkown
|
page read and write
|
|
|
|
26A1000
|
unkown image
|
page readonly
|
|
|
|
331A000
|
heap private
|
page read and write
|
|
|
|
75E000
|
stack
|
page read and write
|
|
|
|
263B000
|
unkown image
|
page readonly
|
|
|
|
2ABF000
|
unkown image
|
page readonly
|
|
|
|
7B0000
|
stack
|
page execute and read and write
|
|
|
|
E0A267C000
|
stack
|
page read and write
|
|
|
|
2991000
|
unkown image
|
page readonly
|
|
|
|
33E0000
|
unkown image
|
page readonly
|
|
|
|
7F8D0000
|
unkown image
|
page readonly
|
|
|
|
2DCF000
|
stack
|
page read and write
|
|
|
|
3061000
|
unkown
|
page read and write
|
|
|
|
6E8B1000
|
unkown image
|
page execute read
|
|
|
|
305A000
|
unkown
|
page read and write
|
|
|
|
1DFD4C4B000
|
unkown
|
page read and write
|
|
|
|
30B000
|
unkown
|
page read and write
|
|
|
|
7FF57314D000
|
unkown image
|
page readonly
|
|
|
|
518B000
|
unkown
|
page read and write
|
|
|
|
25F1000
|
unkown image
|
page readonly
|
|
|
|
8CB000
|
unkown
|
page read and write
|
|
|
|
7FA72000
|
unkown image
|
page readonly
|
|
|
|
2903000
|
unkown image
|
page readonly
|
|
|
|
24D1000
|
unkown image
|
page readonly
|
|
|
|
26D9000
|
unkown image
|
page readonly
|
|
|
|
5170000
|
unkown
|
page read and write
|
|
|
|
263F000
|
unkown image
|
page readonly
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
2781000
|
unkown image
|
page readonly
|
|
|
|
2970000
|
unkown image
|
page readonly
|
|
|
|
1DFD4C29000
|
unkown
|
page read and write
|
|
|
|
7FF58DD08000
|
unkown image
|
page readonly
|
|
|
|
2E80000
|
heap default
|
page read and write
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
7F700000
|
unkown image
|
page readonly
|
|
|
|
2A9A000
|
heap default
|
page read and write
|
|
|
|
3B0000
|
stack
|
page execute and read and write
|
|
|
|
7DF59C2B0000
|
unkown image
|
page readonly
|
|
|
|
3130000
|
unkown image
|
page readonly
|
|
|
|
2F30000
|
heap default
|
page read and write
|
|
|
|
840000
|
heap default
|
page read and write
|
|
|
|
2656000
|
unkown image
|
page readonly
|
|
|
|
3650000
|
unkown image
|
page readonly
|
|
|
|
2BB8000
|
unkown image
|
page readonly
|
|
|
|
30B000
|
unkown
|
page read and write
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
24C7000
|
unkown image
|
page readonly
|
|
|
|
320000
|
unkown image
|
page readonly
|
|
|
|
24D1000
|
unkown image
|
page readonly
|
|
|
|
26BB000
|
unkown image
|
page readonly
|
|
|
|
66EE000
|
stack
|
page read and write
|
|
|
|
2950000
|
unkown
|
page read and write
|
|
|
|
2D8BD5E0000
|
unkown
|
page read and write
|
|
|
|
1DFD4AF0000
|
unkown image
|
page read and write
|
|
|
|
7F8D2000
|
unkown image
|
page readonly
|
|
|
|
26F3000
|
unkown image
|
page readonly
|
|
|
|
2E8A000
|
heap default
|
page read and write
|
|
|
|
63C000
|
unkown
|
page read and write
|
|
|
|
8E0000
|
unkown image
|
page readonly
|
|
|
|
940000
|
heap default
|
page read and write
|
|
|
|
284B000
|
unkown image
|
page readonly
|
|
|
|
62E0000
|
heap private
|
page read and write
|
|
|
|
2C56000
|
unkown image
|
page readonly
|
|
|
|
7F550000
|
unkown image
|
page readonly
|
|
|
|
2E5F000
|
stack
|
page read and write
|
|
|
|
26D1000
|
unkown image
|
page readonly
|
|
|
|
2DD0000
|
heap private
|
page read and write
|
|
|
|
3065000
|
unkown
|
page read and write
|
|
|
|
26E5000
|
unkown image
|
page readonly
|
|
|
|
28F6000
|
unkown image
|
page readonly
|
|
|
|
7FF578BF1000
|
unkown image
|
page readonly
|
|
|
|
2635000
|
unkown image
|
page readonly
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
7DF438B90000
|
unkown image
|
page readonly
|
|
|
|
830000
|
unkown image
|
page readonly
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
2B91000
|
unkown image
|
page readonly
|
|
|
|
2B03000
|
unkown image
|
page readonly
|
|
|
|
2D8E000
|
stack
|
page read and write
|
|
|
|
25FF000
|
unkown image
|
page readonly
|
|
|
|
26D1000
|
unkown image
|
page readonly
|
|
|
|
2616000
|
unkown image
|
page readonly
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
2D60000
|
stack
|
page execute and read and write
|
|
|
|
7F270000
|
unkown image
|
page readonly
|
|
|
|
7E00FF288000
|
unkown image
|
page readonly
|
|
|
|
305E000
|
unkown
|
page read and write
|
|
|
|
7FF58E447000
|
unkown image
|
page readonly
|
|
|
|
1010000
|
unkown image
|
page readonly
|
|
|
|
3850000
|
unkown image
|
page readonly
|
|
|
|
2E1E000
|
stack
|
page read and write
|
|
|
|
7FF12000
|
unkown image
|
page readonly
|
|
|
|
7DF59C290000
|
unkown image
|
page readonly
|
|
|
|
4814000
|
unkown
|
page read and write
|
|
|
|
261A000
|
unkown image
|
page readonly
|
|
|
|
2991000
|
unkown image
|
page readonly
|
|
|
|
3710000
|
unkown
|
page read and write
|
|
|
|
7F6F0000
|
unkown image
|
page readonly
|
|
|
|
7F7C0000
|
unkown image
|
page readonly
|
|
|
|
7FF52CFB5000
|
unkown image
|
page readonly
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
284F000
|
unkown image
|
page readonly
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
2635000
|
unkown image
|
page readonly
|
|
|
|
28FC000
|
unkown image
|
page readonly
|
|
|
|
2C66000
|
unkown image
|
page readonly
|
|
|
|
7FF52C876000
|
unkown image
|
page readonly
|
|
|
|
21D598EC000
|
unkown
|
page read and write
|
|
|
|
2AD1000
|
unkown image
|
page readonly
|
|
|
|
3180000
|
unkown image
|
page readonly
|
|
|
|
2B7B000
|
unkown image
|
page readonly
|
|
|
|
2616000
|
unkown image
|
page readonly
|
|
|
|
4E5F000
|
stack
|
page read and write
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
3000000
|
unkown image
|
page read and write
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
21D598B0000
|
heap default
|
page read and write
|
|
|
|
2E40000
|
heap default
|
page read and write
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
7FF578E19000
|
unkown image
|
page readonly
|
|
|
|
3059000
|
unkown
|
page read and write
|
|
|
|
7DF59C2A2000
|
unkown image
|
page readonly
|
|
|
|
7FF52D05A000
|
unkown image
|
page readonly
|
|
|
|
7FF58E539000
|
unkown image
|
page readonly
|
|
|
|
7F8C2000
|
unkown image
|
page readonly
|
|
|
|
2F40000
|
unkown
|
page read and write
|
|
|
|
F9401FB000
|
stack
|
page read and write
|
|
|
|
7F8D0000
|
unkown image
|
page readonly
|
|
|
|
26E6000
|
unkown image
|
page readonly
|
|
|
|
28332F02000
|
unkown
|
page read and write
|
|
|
|
2656000
|
unkown image
|
page readonly
|
|
|
|
28332A0D000
|
unkown
|
page read and write
|
|
|
|
2D0B000
|
unkown image
|
page readonly
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
4F40000
|
heap private
|
page read and write
|
|
|
|
7FF52CF73000
|
unkown image
|
page readonly
|
|
|
|
2C5A000
|
unkown image
|
page readonly
|
|
|
|
2950000
|
unkown
|
page read and write
|
|
|
|
2F80000
|
stack
|
page execute and read and write
|
|
|
|
3310000
|
unkown image
|
page readonly
|
|
|
|
3055000
|
unkown
|
page read and write
|
|
|
|
4820000
|
unkown image
|
page readonly
|
|
|
|
2D8BD659000
|
unkown
|
page read and write
|
|
|
|
2643000
|
unkown image
|
page readonly
|
|
|
|
7FF5730E6000
|
unkown image
|
page readonly
|
|
|
|
26BB000
|
unkown image
|
page readonly
|
|
|
|
2D38000
|
unkown image
|
page readonly
|
|
|
|
2E00000
|
unkown image
|
page readonly
|
|
|
|
21D5A6C0000
|
unkown
|
page read and write
|
|
|
|
2616000
|
unkown image
|
page readonly
|
|
|
|
7FF5731D1000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
2BFB000
|
unkown
|
page read and write
|
|
|
|
2D8BEFF0000
|
unkown
|
page read and write
|
|
|
|
7FF58E582000
|
unkown image
|
page readonly
|
|
|
|
27A8000
|
unkown image
|
page readonly
|
|
|
|
263B000
|
unkown image
|
page readonly
|
|
|
|
32B0000
|
unkown image
|
page readonly
|
|
|
|
26EF000
|
unkown image
|
page readonly
|
|
|
|
2D8BD4A0000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown image
|
page readonly
|
|
|
|
7FF52D039000
|
unkown image
|
page readonly
|
|
|
|
7F272000
|
unkown image
|
page readonly
|
|
|
|
7FF578C9B000
|
unkown image
|
page readonly
|
|
|
|
2796000
|
unkown image
|
page readonly
|
|
|
|
7FF5730F3000
|
unkown image
|
page readonly
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
7FF578C0D000
|
unkown image
|
page readonly
|
|
|
|
7FF52CFD7000
|
unkown image
|
page readonly
|
|
|
|
2CFB000
|
unkown image
|
page readonly
|
|
|
|
26BF000
|
unkown image
|
page readonly
|
|
|
|
11A0000
|
unkown image
|
page readonly
|
|
|
|
7FF58E62A000
|
unkown image
|
page readonly
|
|
|
|
7FF58E51B000
|
unkown image
|
page readonly
|
|
|
|
7FF55F0E1000
|
unkown image
|
page readonly
|
|
|
|
27A8000
|
unkown image
|
page readonly
|
|
|
|
26D7000
|
unkown image
|
page readonly
|
|
|
|
4940000
|
unkown image
|
page readonly
|
|
|
|
2EA2000
|
heap default
|
page read and write
|
|
|
|
2D8BD669000
|
unkown
|
page read and write
|
|
|
|
7F8C0000
|
unkown image
|
page readonly
|
|
|
|
7F8C2000
|
unkown image
|
page readonly
|
|
|
|
2903000
|
unkown image
|
page readonly
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
2D8BD613000
|
unkown
|
page read and write
|
|
|
|
28332A00000
|
unkown
|
page read and write
|
|
|
|
7FF578D93000
|
unkown image
|
page readonly
|
|
|
|
3066000
|
unkown
|
page read and write
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
2525000
|
unkown image
|
page readonly
|
|
|
|
4710000
|
heap private
|
page read and write
|
|
|
|
820000
|
unkown image
|
page read and write
|
|
|
|
7F6E2000
|
unkown image
|
page readonly
|
|
|
|
2C5C000
|
unkown
|
page read and write
|
|
|
|
D04000
|
stack
|
page read and write
|
|
|
|
26DB000
|
unkown image
|
page readonly
|
|
|
|
7F560000
|
unkown image
|
page readonly
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
2826000
|
unkown image
|
page readonly
|
|
|
|
8D0000
|
unkown image
|
page readonly
|
|
|
|
3750000
|
unkown image
|
page readonly
|
|
|
|
26BF000
|
unkown image
|
page readonly
|
|
|
|
21D59830000
|
unkown image
|
page readonly
|
|
|
|
2880000
|
unkown image
|
page readonly
|
|
|
|
2616000
|
unkown image
|
page readonly
|
|
|
|
285D000
|
unkown image
|
page readonly
|
|
|
|
1DFD4ED0000
|
unkown image
|
page readonly
|
|
|
|
282A000
|
unkown image
|
page readonly
|
|
|
|
287C000
|
unkown image
|
page readonly
|
|
|
|
2E00000
|
unkown image
|
page readonly
|
|
|
|
24D1000
|
unkown image
|
page readonly
|
|
|
|
2AF5000
|
unkown image
|
page readonly
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
2D8BD71C000
|
unkown
|
page read and write
|
|
|
|
2B07000
|
unkown image
|
page readonly
|
|
|
|
8D0000
|
unkown image
|
page readonly
|
|
|
|
7FF52D051000
|
unkown image
|
page readonly
|
|
|
|
21D597E0000
|
unkown
|
page read and write
|
|
|
|
277B000
|
unkown image
|
page readonly
|
|
|
|
2D90000
|
unkown image
|
page readonly
|
|
|
|
3450000
|
unkown image
|
page readonly
|
|
|
|
7FA72000
|
unkown image
|
page readonly
|
|
|
|
7FA70000
|
unkown image
|
page readonly
|
|
|
|
7FF58E2F7000
|
unkown image
|
page readonly
|
|
|
|
2E1E000
|
stack
|
page read and write
|
|
|
|
29CA000
|
heap default
|
page read and write
|
|
|
|
7DF59C2A0000
|
unkown image
|
page readonly
|
|
|
|
2E80000
|
heap default
|
page read and write
|
|
|
|
7F8E0000
|
unkown image
|
page readonly
|
|
|
|
264D000
|
unkown image
|
page readonly
|
|
|
|
2D8BD63D000
|
unkown
|
page read and write
|
|
|
|
282A000
|
unkown image
|
page readonly
|
|
|
|
2701000
|
unkown image
|
page readonly
|
|
|
|
25F1000
|
unkown image
|
page readonly
|
|
|
|
1DFD4C50000
|
unkown
|
page read and write
|
|
|
|
E10000
|
unkown image
|
page readonly
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
2F40000
|
unkown
|
page read and write
|
|
|
|
28332B02000
|
unkown
|
page read and write
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
3350000
|
heap default
|
page read and write
|
|
|
|
E0A2D7F000
|
unkown
|
page read and write
|
|
|
|
2D8BD800000
|
unkown image
|
page readonly
|
|
|
|
7FF52CF6D000
|
unkown image
|
page readonly
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
310000
|
unkown image
|
page readonly
|
|
|
|
7FA80000
|
unkown image
|
page readonly
|
|
|
|
7FF578BC6000
|
unkown image
|
page readonly
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
2866000
|
unkown image
|
page readonly
|
|
|
|
E0A26FF000
|
stack
|
page read and write
|
|
|
|
263F000
|
unkown image
|
page readonly
|
|
|
|
3000000
|
unkown image
|
page readonly
|
|
|
|
2D8BEFB0000
|
unkown
|
page read and write
|
|
|
|
7DF580E50000
|
unkown image
|
page readonly
|
|
|
|
26EC000
|
unkown image
|
page readonly
|
|
|
|
2AFF000
|
unkown image
|
page readonly
|
|
|
|
2B0D000
|
unkown image
|
page readonly
|
|
|
|
3640000
|
heap private
|
page read and write
|
|
|
|
2577000
|
unkown image
|
page readonly
|
|
|
|
7FF58E5A7000
|
unkown image
|
page readonly
|
|
|
|
25FF000
|
unkown image
|
page readonly
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
48A4000
|
unkown
|
page read and write
|
|
|
|
2AAE000
|
unkown image
|
page readonly
|
|
|
|
6E8CA000
|
unkown image
|
page readonly
|
|
|
|
28332A13000
|
unkown
|
page read and write
|
|
|
|
29E5000
|
unkown image
|
page readonly
|
|
|
|
2987000
|
unkown image
|
page readonly
|
|
|
|
2643000
|
unkown image
|
page readonly
|
|
|
|
2D1B000
|
unkown image
|
page readonly
|
|
|
|
3650000
|
unkown image
|
page readonly
|
|
|
|
820000
|
unkown image
|
page read and write
|
|
|
|
421F000
|
stack
|
page read and write
|
|
|
|
7FF572FE2000
|
unkown image
|
page readonly
|
|
|
|
2D8BD700000
|
unkown
|
page read and write
|
|
|
|
26C4000
|
unkown image
|
page readonly
|
|
|
|
2950000
|
unkown
|
page read and write
|
|
|
|
2F60000
|
unkown image
|
page readonly
|
|
|
|
2525000
|
unkown image
|
page readonly
|
|
|
|
557000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
heap default
|
page read and write
|
|
|
|
34DA000
|
heap default
|
page read and write
|
|
|
|
4B39B000
|
unkown
|
page read and write
|
|
|
|
7FF58E183000
|
unkown image
|
page readonly
|
|
|
|
2E8A000
|
heap default
|
page read and write
|
|
|
|
2DD0000
|
unkown image
|
page readonly
|
|
|
|
6E8CF000
|
unkown image
|
page readonly
|
|
|
|
7FF52CF83000
|
unkown image
|
page readonly
|
|
|
|
2866000
|
unkown image
|
page readonly
|
|
|
|
1DFD4B70000
|
unkown image
|
page readonly
|
|
|
|
28E1000
|
unkown image
|
page readonly
|
|
|
|
26BF000
|
unkown image
|
page readonly
|
|
|
|
2A90000
|
heap default
|
page read and write
|
|
|
|
26EC000
|
unkown image
|
page readonly
|
|
|
|
3055000
|
unkown
|
page read and write
|
|
|
|
2A5F000
|
stack
|
page read and write
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
2B8B000
|
unkown image
|
page readonly
|
|
|
|
2C96000
|
unkown image
|
page readonly
|
|
|
|
2656000
|
unkown image
|
page readonly
|
|
|
|
710000
|
unkown image
|
page readonly
|
|
|
|
7FA80000
|
unkown image
|
page readonly
|
|
|
|
2BBB000
|
unkown
|
page read and write
|
|
|
|
7DF53ACD0000
|
unkown image
|
page readonly
|
|
|
|
28CF000
|
unkown image
|
page readonly
|
|
|
|
26EC000
|
unkown image
|
page readonly
|
|
|
|
7FF30000
|
unkown image
|
page readonly
|
|
|
|
830000
|
unkown image
|
page readonly
|
|
|
|
8C34E7A000
|
stack
|
page read and write
|
|
|
|
4C60000
|
unkown
|
page read and write
|
|
|
|
770000
|
unkown image
|
page readonly
|
|
|
|
25F1000
|
unkown image
|
page readonly
|
|
|
|
7FF58DCD5000
|
unkown image
|
page readonly
|
|
|
|
1DFD4C13000
|
unkown
|
page read and write
|
|
|
|
24C7000
|
unkown image
|
page readonly
|
|
|
|
310000
|
unkown image
|
page readonly
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
27FE000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
28332B15000
|
unkown
|
page read and write
|
|
|
|
3390000
|
unkown image
|
page readonly
|
|
|
|
7EFA0000
|
unkown image
|
page readonly
|
|
|
|
7FF22000
|
unkown image
|
page readonly
|
|
|
|
C94ECFB000
|
stack
|
page read and write
|
|
|
|
2AB1000
|
unkown image
|
page readonly
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
830000
|
unkown image
|
page readonly
|
|
|
|
7F130000
|
unkown image
|
page readonly
|
|
|
|
2BB3000
|
unkown image
|
page readonly
|
|
|
|
7DF586AC0000
|
unkown image
|
page readonly
|
|
|
|
2BE0000
|
unkown image
|
page readonly
|
|
|
|
2970000
|
unkown image
|
page readonly
|
|
|
|
3059000
|
unkown
|
page read and write
|
|
|
|
28332A66000
|
unkown
|
page read and write
|
|
|
|
2A9A000
|
heap default
|
page read and write
|
|
|
|
94B000
|
heap default
|
page read and write
|
|
|
|
2D50000
|
heap private
|
page read and write
|
|
|
|
284F000
|
unkown image
|
page readonly
|
|
|
|
271C000
|
unkown image
|
page readonly
|
|
|
|
4B280000
|
unkown
|
page read and write
|
|
|
|
7FF578C4F000
|
unkown image
|
page readonly
|
|
|
|
2A96000
|
unkown
|
page read and write
|
|
|
|
2D00000
|
heap default
|
page read and write
|
|
|
|
2880000
|
unkown image
|
page readonly
|
|
|
|
2950000
|
unkown
|
page read and write
|
|
|
|
2D8BD69B000
|
unkown
|
page read and write
|
|
|
|
7FF52C819000
|
unkown image
|
page readonly
|
|
|
|
2DB0000
|
heap default
|
page read and write
|
|
|
|
3320000
|
unkown image
|
page readonly
|
|
|
|
2AE9000
|
unkown image
|
page readonly
|
|
|
|
21D598ED000
|
unkown
|
page read and write
|
|
|
|
25EE000
|
unkown image
|
page readonly
|
|
|
|
45F0000
|
unkown
|
page read and write
|
|
|
|
333F000
|
stack
|
page read and write
|
|
|
|
7FF58E557000
|
unkown image
|
page readonly
|
|
|
|
E0A27FF000
|
stack
|
page read and write
|
|
|
|
3020000
|
unkown image
|
page read and write
|
|
|
|
21D598EC000
|
unkown
|
page read and write
|
|
|
|
25FF000
|
unkown image
|
page readonly
|
|
|
|
7DF47ED00000
|
unkown image
|
page readonly
|
|
|
|
8D0000
|
unkown image
|
page readonly
|
|
|
|
2FF0000
|
stack
|
page read and write
|
|
|
|
28332910000
|
unkown image
|
page readonly
|
|
|
|
7DF580E42000
|
unkown image
|
page readonly
|
|
|
|
3310000
|
unkown image
|
page readonly
|
|
|
|
2D00000
|
heap default
|
page read and write
|
|
|
|
26F3000
|
unkown image
|
page readonly
|
|
|
|
7F8E0000
|
unkown image
|
page readonly
|
|
|
|
2E3E000
|
stack
|
page read and write
|
|
|
|
4A30000
|
unkown
|
page read and write
|
|
|
|
2920000
|
unkown
|
page read and write
|
|
|
|
2B16000
|
unkown image
|
page readonly
|
|
|
|
7FF5729E8000
|
unkown image
|
page readonly
|
|
|
|
7FF5729EA000
|
unkown image
|
page readonly
|
|
|
|
7FF22000
|
unkown image
|
page readonly
|
|
|
|
7DF586AA0000
|
unkown image
|
page readonly
|
|
|
|
2ABF000
|
unkown image
|
page readonly
|
|
|
|
7DF586AA2000
|
unkown image
|
page readonly
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
303A000
|
heap default
|
page read and write
|
|
|
|
6E8B0000
|
unkown image
|
page readonly
|
|
|
|
26DB000
|
unkown image
|
page readonly
|
|
|
|
283328C0000
|
unkown image
|
page read and write
|
|
|
|
8E0000
|
unkown image
|
page readonly
|
|
|
|
21D59890000
|
unkown
|
page read and write
|
|
|
|
7F242000
|
unkown image
|
page readonly
|
|
|
|
7DF580E30000
|
unkown image
|
page readonly
|
|
|
|
2839000
|
unkown image
|
page readonly
|
|
|
|
8CB000
|
unkown
|
page read and write
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
7F6E2000
|
unkown image
|
page readonly
|
|
|
|
26BF000
|
unkown image
|
page readonly
|
|
|
|
3000000
|
unkown image
|
page read and write
|
|
|
|
21D59780000
|
heap private
|
page read and write
|
|
|
|
2F9E000
|
unkown
|
page read and write
|
|
|
|
303A000
|
heap default
|
page read and write
|
|
|
|
2B9B000
|
unkown image
|
page readonly
|
|
|
|
7FF58DCE2000
|
unkown image
|
page readonly
|
|
|
|
21D5A6F0000
|
unkown
|
page read and write
|
|
|
|
3950000
|
unkown image
|
page readonly
|
|
|
|
24C7000
|
unkown image
|
page readonly
|
|
|
|
1DFD4B90000
|
unkown
|
page read and write
|
|
|
|
7DF53ACC0000
|
unkown image
|
page readonly
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
7FF573122000
|
unkown image
|
page readonly
|
|
|
|
7FF578D9E000
|
unkown image
|
page readonly
|
|
|
|
283328E0000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
stack
|
page execute and read and write
|
|
|
|
270D000
|
unkown image
|
page readonly
|
|
|
|
7FF578D53000
|
unkown image
|
page readonly
|
|
|
|
2B2C000
|
unkown image
|
page readonly
|
|
|
|
26BB000
|
unkown image
|
page readonly
|
|
|
|
88C000
|
unkown
|
page read and write
|
|
|
|
7FF58DCDB000
|
unkown image
|
page readonly
|
|
|
|
278B000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown image
|
page readonly
|
|
|
|
3079000
|
heap default
|
page read and write
|
|
|
|
7F540000
|
unkown image
|
page readonly
|
|
|
|
283328E0000
|
unkown image
|
page readonly
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
2D00000
|
heap default
|
page read and write
|
|
|
|
7FF572A59000
|
unkown image
|
page readonly
|
|
|
|
335A000
|
heap default
|
page read and write
|
|
|
|
2774000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
7F8D2000
|
unkown image
|
page readonly
|
|
|
|
7FF578C10000
|
unkown image
|
page readonly
|
|
|
|
28332900000
|
unkown image
|
page readonly
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
61BE000
|
stack
|
page read and write
|
|
|
|
2525000
|
unkown image
|
page readonly
|
|
|
|
3AD0000
|
unkown image
|
page readonly
|
|
|
|
1DFD4C70000
|
unkown
|
page read and write
|
|
|
|
61C0000
|
unkown image
|
page readonly
|
|
|
|
3F0000
|
heap private
|
page read and write
|
|
|
|
21D5A486000
|
unkown
|
page read and write
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
7FF58E543000
|
unkown image
|
page readonly
|
|
|
|
2DD0000
|
heap private
|
page read and write
|
|
|
|
7FF52CF69000
|
unkown image
|
page readonly
|
|
|
|
28332B00000
|
unkown
|
page read and write
|
|
|
|
7FA90000
|
unkown image
|
page readonly
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
3074000
|
unkown
|
page read and write
|
|
|
|
5171000
|
unkown
|
page read and write
|
|
|
|
26E6000
|
unkown image
|
page readonly
|
|
|
|
2635000
|
unkown image
|
page readonly
|
|
|
|
3290000
|
unkown image
|
page readonly
|
|
|
|
3055000
|
heap default
|
page read and write
|
|
|
|
8C34B3F000
|
stack
|
page read and write
|
|
|
|
261A000
|
unkown image
|
page readonly
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
3059000
|
heap default
|
page read and write
|
|
|
|
7FF58E602000
|
unkown image
|
page readonly
|
|
|
|
3220000
|
stack
|
page execute and read and write
|
|
|
|
4F40000
|
heap private
|
page read and write
|
|
|
|
2826000
|
unkown image
|
page readonly
|
|
|
|
361E000
|
stack
|
page read and write
|
|
|
|
1DFD4C88000
|
unkown
|
page read and write
|
|
|
|
26E6000
|
unkown image
|
page readonly
|
|
|
|
2F80000
|
stack
|
page execute and read and write
|
|
|
|
7FF20000
|
unkown image
|
page readonly
|
|
|
|
370000
|
unkown
|
page read and write
|
|
|
|
2AC0000
|
heap default
|
page read and write
|
|
|
|
26FD000
|
unkown image
|
page readonly
|
|
|
|
1DFD4C3C000
|
unkown
|
page read and write
|
|
|
|
2F80000
|
unkown image
|
page readonly
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
2D2C000
|
unkown image
|
page readonly
|
|
|
|
32B0000
|
unkown image
|
page readonly
|
|
|
|
331A000
|
heap private
|
page read and write
|
|
|
|
6E8CD000
|
unkown image
|
page read and write
|
|
|
|
7FF578D60000
|
unkown image
|
page readonly
|
|
|
|
2581000
|
unkown image
|
page readonly
|
|
|
|
44A4000
|
stack
|
page read and write
|
|
There are 1367 hidden memdumps, click here to show them.