Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Scanned Payment Copy00024.scr.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\~DF25FB0965A4D91BCD.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
 |
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Scanned Payment Copy00024.scr.exe
|
"C:\Users\user\Desktop\Scanned Payment Copy00024.scr.exe"
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ministerstormens\Confabulatory
|
Finansierings
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2210000
|
unkown
|
page execute and read and write
|
|
|
|
2388D200000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA3B4000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBA97000
|
unkown image
|
page readonly
|
|
|
|
229100A0000
|
unkown
|
page read and write
|
|
|
|
7FF4FB918000
|
unkown image
|
page readonly
|
|
|
|
7FF53ADAF000
|
unkown image
|
page readonly
|
|
|
|
7FF510CF3000
|
unkown image
|
page readonly
|
|
|
|
4B7647F000
|
stack
|
page read and write
|
|
|
|
7FF522AD9000
|
unkown image
|
page readonly
|
|
|
|
7FF510D2D000
|
unkown image
|
page readonly
|
|
|
|
7FF53AEA7000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBA1D000
|
unkown image
|
page readonly
|
|
|
|
7FF510D37000
|
unkown image
|
page readonly
|
|
|
|
3BBF000
|
stack
|
page read and write
|
|
|
|
2290FF04000
|
unkown
|
page read and write
|
|
|
|
2290FEF3000
|
unkown
|
page read and write
|
|
|
|
7FF53369F000
|
unkown image
|
page readonly
|
|
|
|
7FF522998000
|
unkown image
|
page readonly
|
|
|
|
7DF52C922000
|
unkown image
|
page readonly
|
|
|
|
7FF510BD6000
|
unkown image
|
page readonly
|
|
|
|
2D40DB6F000
|
unkown
|
page read and write
|
|
|
|
7FF5229C8000
|
unkown image
|
page readonly
|
|
|
|
7FF53ADA1000
|
unkown image
|
page readonly
|
|
|
|
2290FEE2000
|
unkown
|
page read and write
|
|
|
|
2D40D455000
|
unkown
|
page read and write
|
|
|
|
7FF501E07000
|
unkown image
|
page readonly
|
|
|
|
7FF53AE6B000
|
unkown image
|
page readonly
|
|
|
|
168F9780000
|
unkown image
|
page readonly
|
|
|
|
168F9060000
|
unkown image
|
page readonly
|
|
|
|
7FF53ABA7000
|
unkown image
|
page readonly
|
|
|
|
7FF502541000
|
unkown image
|
page readonly
|
|
|
|
2290B100000
|
unkown
|
page read and write
|
|
|
|
7DF50C3F0000
|
unkown image
|
page readonly
|
|
|
|
168F9313000
|
unkown
|
page read and write
|
|
|
|
168F9302000
|
unkown
|
page read and write
|
|
|
|
168F9260000
|
unkown
|
page read and write
|
|
|
|
7FF4FB9CF000
|
unkown image
|
page readonly
|
|
|
|
7DF52C932000
|
unkown image
|
page readonly
|
|
|
|
1A87AA00000
|
unkown image
|
page readonly
|
|
|
|
2D40D516000
|
unkown
|
page read and write
|
|
|
|
7FF522A93000
|
unkown image
|
page readonly
|
|
|
|
7FF522995000
|
unkown image
|
page readonly
|
|
|
|
24EF0C20000
|
unkown image
|
page readonly
|
|
|
|
7FF53AE57000
|
unkown image
|
page readonly
|
|
|
|
2290B660000
|
unkown
|
page read and write
|
|
|
|
2290B158000
|
unkown
|
page read and write
|
|
|
|
7FF5336C6000
|
unkown image
|
page readonly
|
|
|
|
7FF510C65000
|
unkown image
|
page readonly
|
|
|
|
2290AA00000
|
unkown image
|
page readonly
|
|
|
|
7FF5025F4000
|
unkown image
|
page readonly
|
|
|
|
2D40D44E000
|
unkown
|
page read and write
|
|
|
|
2388CE40000
|
unkown image
|
page readonly
|
|
|
|
422000
|
unkown image
|
page read and write
|
|
|
|
168F9200000
|
unkown
|
page read and write
|
|
|
|
7FF5025FD000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB7AF000
|
unkown image
|
page readonly
|
|
|
|
2D40D470000
|
unkown
|
page read and write
|
|
|
|
168F9030000
|
unkown image
|
page readonly
|
|
|
|
7DF4E2070000
|
unkown image
|
page readonly
|
|
|
|
7DF53D550000
|
unkown image
|
page readonly
|
|
|
|
DC9849C000
|
unkown
|
page read and write
|
|
|
|
168F925E000
|
unkown
|
page read and write
|
|
|
|
1A87AA30000
|
unkown image
|
page readonly
|
|
|
|
2D40D4AA000
|
unkown
|
page read and write
|
|
|
|
1A87A9F0000
|
unkown
|
page read and write
|
|
|
|
2388CF50000
|
unkown image
|
page readonly
|
|
|
|
2290A8AB000
|
unkown
|
page read and write
|
|
|
|
7DF53D542000
|
unkown image
|
page readonly
|
|
|
|
2290FEAD000
|
unkown
|
page read and write
|
|
|
|
7FF51864B000
|
unkown image
|
page readonly
|
|
|
|
2D40DBA6000
|
unkown
|
page read and write
|
|
|
|
7FF522A7F000
|
unkown image
|
page readonly
|
|
|
|
7FF5023EF000
|
unkown image
|
page readonly
|
|
|
|
7FF502647000
|
unkown image
|
page readonly
|
|
|
|
2D40DB78000
|
unkown
|
page read and write
|
|
|
|
7DF51ABA0000
|
unkown image
|
page readonly
|
|
|
|
2D40E063000
|
unkown
|
page read and write
|
|
|
|
7FF50258D000
|
unkown image
|
page readonly
|
|
|
|
7DF50C3F0000
|
unkown image
|
page readonly
|
|
|
|
13AFF1AB000
|
heap default
|
page read and write
|
|
|
|
7FF53AC3A000
|
unkown image
|
page readonly
|
|
|
|
2D40D447000
|
unkown
|
page read and write
|
|
|
|
1A87AA20000
|
unkown image
|
page readonly
|
|
|
|
7DF51AB90000
|
unkown image
|
page readonly
|
|
|
|
7FF5335D1000
|
unkown image
|
page readonly
|
|
|
|
2388D580000
|
unkown image
|
page readonly
|
|
|
|
2388D056000
|
unkown
|
page read and write
|
|
|
|
7FF52291A000
|
unkown image
|
page readonly
|
|
|
|
3ABF000
|
stack
|
page read and write
|
|
|
|
7FF502455000
|
unkown image
|
page readonly
|
|
|
|
1A87AAF0000
|
heap default
|
page read and write
|
|
|
|
1A87AB12000
|
heap default
|
page read and write
|
|
|
|
7FF53AD9F000
|
unkown image
|
page readonly
|
|
|
|
2D40D44D000
|
unkown
|
page read and write
|
|
|
|
7FF510DA4000
|
unkown image
|
page readonly
|
|
|
|
2388D102000
|
unkown
|
page read and write
|
|
|
|
7FF501ED5000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB9F6000
|
unkown image
|
page readonly
|
|
|
|
7FF510A51000
|
unkown image
|
page readonly
|
|
|
|
168F9010000
|
unkown image
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
22910090000
|
unkown
|
page read and write
|
|
|
|
7FF510AE7000
|
unkown image
|
page readonly
|
|
|
|
2D40DB67000
|
unkown
|
page read and write
|
|
|
|
7FF4FB8A7000
|
unkown image
|
page readonly
|
|
|
|
7FF5227F1000
|
unkown image
|
page readonly
|
|
|
|
2288000
|
heap private
|
page read and write
|
|
|
|
7FF53ADF9000
|
unkown image
|
page readonly
|
|
|
|
7FF510BA7000
|
unkown image
|
page readonly
|
|
|
|
2D40E002000
|
unkown
|
page read and write
|
|
|
|
7FF510D9D000
|
unkown image
|
page readonly
|
|
|
|
168F9213000
|
unkown
|
page read and write
|
|
|
|
2D40000
|
unkown image
|
page read and write
|
|
|
|
7FF510CDF000
|
unkown image
|
page readonly
|
|
|
|
2290FE61000
|
unkown
|
page read and write
|
|
|
|
9B595FE000
|
stack
|
page read and write
|
|
|
|
2D40DBA1000
|
unkown
|
page read and write
|
|
|
|
7DF505870000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBAC3000
|
unkown image
|
page readonly
|
|
|
|
7FF53AE96000
|
unkown image
|
page readonly
|
|
|
|
2D40DB80000
|
unkown
|
page read and write
|
|
|
|
2D40D502000
|
unkown
|
page read and write
|
|
|
|
2290B015000
|
unkown
|
page read and write
|
|
|
|
7FF53ACB0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBAD7000
|
unkown image
|
page readonly
|
|
|
|
A74C3F8000
|
stack
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
13AFF500000
|
unkown image
|
page readonly
|
|
|
|
7FF510B7A000
|
unkown image
|
page readonly
|
|
|
|
7FF53ADD2000
|
unkown image
|
page readonly
|
|
|
|
168F9308000
|
unkown
|
page read and write
|
|
|
|
2D40D9A0000
|
unkown
|
page read and write
|
|
|
|
2D40DB5E000
|
unkown
|
page read and write
|
|
|
|
2290A87C000
|
unkown
|
page read and write
|
|
|
|
7DF5E41B2000
|
unkown image
|
page readonly
|
|
|
|
2290FE00000
|
unkown
|
page read and write
|
|
|
|
7FF4FB893000
|
unkown image
|
page readonly
|
|
|
|
1A87B6E0000
|
unkown
|
page read and write
|
|
|
|
2290A6D0000
|
unkown image
|
page readonly
|
|
|
|
24EF0E54000
|
unkown
|
page read and write
|
|
|
|
2D40DB26000
|
unkown
|
page read and write
|
|
|
|
500000
|
heap default
|
page read and write
|
|
|
|
7FF50231F000
|
unkown image
|
page readonly
|
|
|
|
2D40DB5D000
|
unkown
|
page read and write
|
|
|
|
7DF52C920000
|
unkown image
|
page readonly
|
|
|
|
7FF502450000
|
unkown image
|
page readonly
|
|
|
|
2D40DB82000
|
unkown
|
page read and write
|
|
|
|
7FF4FB7D6000
|
unkown image
|
page readonly
|
|
|
|
7DF50C400000
|
unkown image
|
page readonly
|
|
|
|
2D40D508000
|
unkown
|
page read and write
|
|
|
|
2D40E06A000
|
unkown
|
page read and write
|
|
|
|
7FF510CE1000
|
unkown image
|
page readonly
|
|
|
|
2D40D451000
|
unkown
|
page read and write
|
|
|
|
7FF4FB7D4000
|
unkown image
|
page readonly
|
|
|
|
2290FE15000
|
unkown
|
page read and write
|
|
|
|
5B1E97D000
|
stack
|
page read and write
|
|
|
|
7FF53AE93000
|
unkown image
|
page readonly
|
|
|
|
2290AFF0000
|
unkown
|
page read and write
|
|
|
|
24EF1200000
|
unkown image
|
page readonly
|
|
|
|
24EF0D50000
|
unkown
|
page read and write
|
|
|
|
2D40DBA6000
|
unkown
|
page read and write
|
|
|
|
7DF544C52000
|
unkown image
|
page readonly
|
|
|
|
C16F7F000
|
stack
|
page read and write
|
|
|
|
7FF502647000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB9A4000
|
unkown image
|
page readonly
|
|
|
|
5B1E8F9000
|
stack
|
page read and write
|
|
|
|
7FF510D0A000
|
unkown image
|
page readonly
|
|
|
|
2D40DB82000
|
unkown
|
page read and write
|
|
|
|
168F9160000
|
unkown image
|
page readonly
|
|
|
|
7FF502407000
|
unkown image
|
page readonly
|
|
|
|
2D40D413000
|
unkown
|
page read and write
|
|
|
|
7FF5020C6000
|
unkown image
|
page readonly
|
|
|
|
2D40DB5C000
|
unkown
|
page read and write
|
|
|
|
2D40D48B000
|
unkown
|
page read and write
|
|
|
|
2D40DB0D000
|
unkown
|
page read and write
|
|
|
|
2B80000
|
unkown
|
page read and write
|
|
|
|
229100C0000
|
unkown
|
page read and write
|
|
|
|
7DF544C50000
|
unkown image
|
page readonly
|
|
|
|
229100C0000
|
unkown
|
page read and write
|
|
|
|
424000
|
unkown image
|
page readonly
|
|
|
|
2388D400000
|
unkown image
|
page readonly
|
|
|
|
4B7607B000
|
stack
|
page read and write
|
|
|
|
2D40DB67000
|
unkown
|
page read and write
|
|
|
|
2388CF70000
|
unkown
|
page read and write
|
|
|
|
7FF5DA3BD000
|
unkown image
|
page readonly
|
|
|
|
13AFF1DE000
|
unkown
|
page read and write
|
|
|
|
7DF52C930000
|
unkown image
|
page readonly
|
|
|
|
2388D04B000
|
unkown
|
page read and write
|
|
|
|
13AFF0A0000
|
unkown image
|
page readonly
|
|
|
|
2290FEDB000
|
unkown
|
page read and write
|
|
|
|
7FF53ADC6000
|
unkown image
|
page readonly
|
|
|
|
7DF403740000
|
unkown image
|
page readonly
|
|
|
|
7FF5335E8000
|
unkown image
|
page readonly
|
|
|
|
229101F0000
|
unkown
|
page read and write
|
|
|
|
13AFF2A0000
|
unkown image
|
page readonly
|
|
|
|
24EF0E13000
|
unkown
|
page read and write
|
|
|
|
168F9020000
|
heap private
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2388D000000
|
unkown
|
page read and write
|
|
|
|
7DF52C940000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB78A000
|
unkown image
|
page readonly
|
|
|
|
2D40DB6F000
|
unkown
|
page read and write
|
|
|
|
7FF5023A4000
|
unkown image
|
page readonly
|
|
|
|
7DF50C3F2000
|
unkown image
|
page readonly
|
|
|
|
7FF53ADED000
|
unkown image
|
page readonly
|
|
|
|
2290FD84000
|
unkown
|
page read and write
|
|
|
|
7DF53D560000
|
unkown image
|
page readonly
|
|
|
|
13AFF1A0000
|
heap default
|
page read and write
|
|
|
|
13AFF690000
|
unkown image
|
page readonly
|
|
|
|
168F9286000
|
unkown
|
page read and write
|
|
|
|
1A87AA00000
|
unkown image
|
page readonly
|
|
|
|
2290A88C000
|
unkown
|
page read and write
|
|
|
|
7FF5DA3F3000
|
unkown image
|
page readonly
|
|
|
|
1A87ACB0000
|
unkown
|
page read and write
|
|
|
|
2290FF02000
|
unkown
|
page read and write
|
|
|
|
7FF502633000
|
unkown image
|
page readonly
|
|
|
|
2290FEF9000
|
unkown
|
page read and write
|
|
|
|
2290A6B0000
|
unkown image
|
page readonly
|
|
|
|
13AFF1CF000
|
unkown
|
page read and write
|
|
|
|
7FF522A81000
|
unkown image
|
page readonly
|
|
|
|
168F925D000
|
unkown
|
page read and write
|
|
|
|
7DF53D540000
|
unkown image
|
page readonly
|
|
|
|
7DF544C50000
|
unkown image
|
page readonly
|
|
|
|
2D40DB80000
|
unkown
|
page read and write
|
|
|
|
2290B760000
|
unkown
|
page read and write
|
|
|
|
2D40D4ED000
|
unkown
|
page read and write
|
|
|
|
7FF5DA359000
|
unkown image
|
page readonly
|
|
|
|
2290AE60000
|
unkown
|
page read and write
|
|
|
|
2440000
|
unkown
|
page read and write
|
|
|
|
7FF510C28000
|
unkown image
|
page readonly
|
|
|
|
2D40D980000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB877000
|
unkown image
|
page readonly
|
|
|
|
2290A902000
|
unkown
|
page read and write
|
|
|
|
7FF522AAA000
|
unkown image
|
page readonly
|
|
|
|
7DF40A2B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9BC7000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB2E7000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB9B0000
|
unkown image
|
page readonly
|
|
|
|
2388D013000
|
unkown
|
page read and write
|
|
|
|
7DF50C3F2000
|
unkown image
|
page readonly
|
|
|
|
7FF53AEA2000
|
unkown image
|
page readonly
|
|
|
|
24EF1380000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
2D40DB6C000
|
unkown
|
page read and write
|
|
|
|
7DF544C60000
|
unkown image
|
page readonly
|
|
|
|
DC988FB000
|
stack
|
page read and write
|
|
|
|
2290A8FF000
|
unkown
|
page read and write
|
|
|
|
227E000
|
stack
|
page read and write
|
|
|
|
7DF50C3E0000
|
unkown image
|
page readonly
|
|
|
|
168F9180000
|
unkown
|
page read and write
|
|
|
|
2290A813000
|
unkown
|
page read and write
|
|
|
|
7DF52C920000
|
unkown image
|
page readonly
|
|
|
|
7DF42A7F0000
|
unkown image
|
page readonly
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
7FF53ACB5000
|
unkown image
|
page readonly
|
|
|
|
7FF510DA7000
|
unkown image
|
page readonly
|
|
|
|
2D40D4C7000
|
unkown
|
page read and write
|
|
|
|
2290B104000
|
unkown
|
page read and write
|
|
|
|
7DF53D540000
|
unkown image
|
page readonly
|
|
|
|
DC98E7A000
|
stack
|
page read and write
|
|
|
|
9F0000
|
unkown image
|
page readonly
|
|
|
|
2285000
|
heap private
|
page read and write
|
|
|
|
2D40DBB6000
|
unkown
|
page read and write
|
|
|
|
7FF53AA4F000
|
unkown image
|
page readonly
|
|
|
|
2D40D450000
|
unkown
|
page read and write
|
|
|
|
13AFF510000
|
unkown image
|
page readonly
|
|
|
|
2290FD6E000
|
unkown
|
page read and write
|
|
|
|
A74CD7A000
|
stack
|
page read and write
|
|
|
|
7DF52C940000
|
unkown image
|
page readonly
|
|
|
|
A74BF8B000
|
unkown
|
page read and write
|
|
|
|
2290B000000
|
unkown
|
page read and write
|
|
|
|
7FF522B47000
|
unkown image
|
page readonly
|
|
|
|
7FF502315000
|
unkown image
|
page readonly
|
|
|
|
7DF53D552000
|
unkown image
|
page readonly
|
|
|
|
7DF51AB82000
|
unkown image
|
page readonly
|
|
|
|
691000
|
heap default
|
page read and write
|
|
|
|
2290A7E0000
|
unkown image
|
page readonly
|
|
|
|
2290000
|
unkown
|
page read and write
|
|
|
|
9B593F7000
|
stack
|
page read and write
|
|
|
|
7FF50238B000
|
unkown image
|
page readonly
|
|
|
|
2D40D453000
|
unkown
|
page read and write
|
|
|
|
7FF52272F000
|
unkown image
|
page readonly
|
|
|
|
67A000
|
heap default
|
page read and write
|
|
|
|
2290A690000
|
unkown image
|
page read and write
|
|
|
|
7FF522B73000
|
unkown image
|
page readonly
|
|
|
|
168F927C000
|
unkown
|
page read and write
|
|
|
|
7FF53AEA7000
|
unkown image
|
page readonly
|
|
|
|
7FF522947000
|
unkown image
|
page readonly
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
2290A914000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBA29000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA315000
|
unkown image
|
page readonly
|
|
|
|
13AFF2C0000
|
unkown
|
page read and write
|
|
|
|
2D40DFA0000
|
unkown
|
page read and write
|
|
|
|
7FF4FB783000
|
unkown image
|
page readonly
|
|
|
|
34F3CB000
|
unkown
|
page read and write
|
|
|
|
2D40D1F0000
|
unkown image
|
page readonly
|
|
|
|
2D40DB67000
|
unkown
|
page read and write
|
|
|
|
A74C6FE000
|
stack
|
page read and write
|
|
|
|
1A87AB28000
|
unkown
|
page read and write
|
|
|
|
2290FE23000
|
unkown
|
page read and write
|
|
|
|
7FF5DA3B7000
|
unkown image
|
page readonly
|
|
|
|
2290FEB0000
|
unkown
|
page read and write
|
|
|
|
34F9F7000
|
stack
|
page read and write
|
|
|
|
2D40DB00000
|
unkown
|
page read and write
|
|
|
|
7FF510891000
|
unkown image
|
page readonly
|
|
|
|
2290FD81000
|
unkown
|
page read and write
|
|
|
|
7FF53375D000
|
unkown image
|
page readonly
|
|
|
|
7DF51AB92000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
7FF53ADBD000
|
unkown image
|
page readonly
|
|
|
|
7DF43B410000
|
unkown image
|
page readonly
|
|
|
|
2388D086000
|
unkown
|
page read and write
|
|
|
|
2D40D4EA000
|
unkown
|
page read and write
|
|
|
|
7FF4FBAC6000
|
unkown image
|
page readonly
|
|
|
|
7FF502642000
|
unkown image
|
page readonly
|
|
|
|
2D40DB63000
|
unkown
|
page read and write
|
|
|
|
2388D051000
|
unkown
|
page read and write
|
|
|
|
3140000
|
unkown
|
page read and write
|
|
|
|
7FF53ADF7000
|
unkown image
|
page readonly
|
|
|
|
A74C5FC000
|
stack
|
page read and write
|
|
|
|
2D40DB64000
|
unkown
|
page read and write
|
|
|
|
24EF0E00000
|
unkown
|
page read and write
|
|
|
|
2D40DB95000
|
unkown
|
page read and write
|
|
|
|
7FF502529000
|
unkown image
|
page readonly
|
|
|
|
7FF522B87000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB7DA000
|
unkown image
|
page readonly
|
|
|
|
2D40E002000
|
unkown
|
page read and write
|
|
|
|
229100C0000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
2290FE74000
|
unkown
|
page read and write
|
|
|
|
2D40D429000
|
unkown
|
page read and write
|
|
|
|
7FF510DAB000
|
unkown image
|
page readonly
|
|
|
|
2D40D1E0000
|
heap private
|
page read and write
|
|
|
|
C16A9A000
|
unkown
|
page read and write
|
|
|
|
7FF510D12000
|
unkown image
|
page readonly
|
|
|
|
7FF502586000
|
unkown image
|
page readonly
|
|
|
|
24EF1602000
|
unkown
|
page read and write
|
|
|
|
7FF4FB9C4000
|
unkown image
|
page readonly
|
|
|
|
2D40D486000
|
unkown
|
page read and write
|
|
|
|
7FF4FBA02000
|
unkown image
|
page readonly
|
|
|
|
7DF505870000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB632000
|
unkown image
|
page readonly
|
|
|
|
7FF51864B000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB659000
|
unkown image
|
page readonly
|
|
|
|
2D40D449000
|
unkown
|
page read and write
|
|
|
|
7FF5229FE000
|
unkown image
|
page readonly
|
|
|
|
2D40DB67000
|
unkown
|
page read and write
|
|
|
|
2190000
|
unkown
|
page execute read
|
|
|
|
1A87AB30000
|
unkown
|
page read and write
|
|
|
|
2290A8A1000
|
unkown
|
page read and write
|
|
|
|
7FF510DE7000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB9ED000
|
unkown image
|
page readonly
|
|
|
|
7FF533793000
|
unkown image
|
page readonly
|
|
|
|
7FF53ADE6000
|
unkown image
|
page readonly
|
|
|
|
24EF0C30000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2290B102000
|
unkown
|
page read and write
|
|
|
|
2290AFF3000
|
unkown
|
page read and write
|
|
|
|
7FF53377A000
|
unkown image
|
page readonly
|
|
|
|
2290FE40000
|
unkown
|
page read and write
|
|
|
|
7FF5020BA000
|
unkown image
|
page readonly
|
|
|
|
7FF502380000
|
unkown image
|
page readonly
|
|
|
|
2D40DBB0000
|
unkown
|
page read and write
|
|
|
|
7DF51AB80000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB985000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB7C2000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
5B1E779000
|
stack
|
page read and write
|
|
|
|
7FF5DA3DA000
|
unkown image
|
page readonly
|
|
|
|
7FF502417000
|
unkown image
|
page readonly
|
|
|
|
34FBFD000
|
stack
|
page read and write
|
|
|
|
7FF502604000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7FF522A9D000
|
unkown image
|
page readonly
|
|
|
|
2290FDA4000
|
unkown
|
page read and write
|
|
|
|
7FF522990000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA407000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBA2E000
|
unkown image
|
page readonly
|
|
|
|
24EF0F00000
|
unkown
|
page read and write
|
|
|
|
2290FC40000
|
unkown
|
page read and write
|
|
|
|
2D40DB5D000
|
unkown
|
page read and write
|
|
|
|
13AFF080000
|
unkown image
|
page readonly
|
|
|
|
7FF53AE67000
|
unkown image
|
page readonly
|
|
|
|
D80000
|
unkown image
|
page readonly
|
|
|
|
7FF502607000
|
unkown image
|
page readonly
|
|
|
|
7FF53AE5D000
|
unkown image
|
page readonly
|
|
|
|
7DF5E41A0000
|
unkown image
|
page readonly
|
|
|
|
2D40D240000
|
heap default
|
page read and write
|
|
|
|
7FF522B44000
|
unkown image
|
page readonly
|
|
|
|
2290FDD0000
|
unkown
|
page read and write
|
|
|
|
7DF53D552000
|
unkown image
|
page readonly
|
|
|
|
2D40DB6F000
|
unkown
|
page read and write
|
|
|
|
2430000
|
heap private
|
page read and write
|
|
|
|
7FF510CEF000
|
unkown image
|
page readonly
|
|
|
|
1A87B9B0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA31E000
|
unkown image
|
page readonly
|
|
|
|
7FF5336B4000
|
unkown image
|
page readonly
|
|
|
|
7FF53AC77000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB745000
|
unkown image
|
page readonly
|
|
|
|
7FF53352C000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBAD2000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB9A7000
|
unkown image
|
page readonly
|
|
|
|
24EF0D30000
|
unkown image
|
page readonly
|
|
|
|
2388CE20000
|
unkown image
|
page readonly
|
|
|
|
2290FF05000
|
unkown
|
page read and write
|
|
|
|
168F9262000
|
unkown
|
page read and write
|
|
|
|
2D40DBA3000
|
unkown
|
page read and write
|
|
|
|
2290FD60000
|
unkown
|
page read and write
|
|
|
|
13AFF080000
|
unkown image
|
page readonly
|
|
|
|
24EF0E56000
|
unkown
|
page read and write
|
|
|
|
424000
|
unkown image
|
page readonly
|
|
|
|
2388D062000
|
unkown
|
page read and write
|
|
|
|
7FF4FB602000
|
unkown image
|
page readonly
|
|
|
|
2D40D400000
|
unkown
|
page read and write
|
|
|
|
7FF522A8F000
|
unkown image
|
page readonly
|
|
|
|
2D40DBB7000
|
unkown
|
page read and write
|
|
|
|
1A87AAE0000
|
heap default
|
page read and write
|
|
|
|
2290FC50000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2D40DFB0000
|
unkown image
|
page read and write
|
|
|
|
2D40DB82000
|
unkown
|
page read and write
|
|
|
|
2D40DB75000
|
unkown
|
page read and write
|
|
|
|
7FF4FB9B4000
|
unkown image
|
page readonly
|
|
|
|
2D40DB99000
|
unkown
|
page read and write
|
|
|
|
7FF4FB998000
|
unkown image
|
page readonly
|
|
|
|
4B7627F000
|
stack
|
page read and write
|
|
|
|
7FF522AD7000
|
unkown image
|
page readonly
|
|
|
|
7FF510D39000
|
unkown image
|
page readonly
|
|
|
|
9B591FB000
|
stack
|
page read and write
|
|
|
|
7FF510DBA000
|
unkown image
|
page readonly
|
|
|
|
2D40DB95000
|
unkown
|
page read and write
|
|
|
|
7FF502508000
|
unkown image
|
page readonly
|
|
|
|
DC98C78000
|
stack
|
page read and write
|
|
|
|
24EF0E49000
|
unkown
|
page read and write
|
|
|
|
2290A879000
|
unkown
|
page read and write
|
|
|
|
7FF510DD3000
|
unkown image
|
page readonly
|
|
|
|
13AFF1DF000
|
unkown
|
page read and write
|
|
|
|
7FF4FB48F000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB81B000
|
unkown image
|
page readonly
|
|
|
|
7FF502436000
|
unkown image
|
page readonly
|
|
|
|
1A87AB30000
|
unkown
|
page read and write
|
|
|
|
7FF522AB2000
|
unkown image
|
page readonly
|
|
|
|
2D40DB95000
|
unkown
|
page read and write
|
|
|
|
7FF522631000
|
unkown image
|
page readonly
|
|
|
|
2D40DB95000
|
unkown
|
page read and write
|
|
|
|
2F9000
|
unkown
|
page read and write
|
|
|
|
7FF522ACD000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB87D000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB77D000
|
unkown image
|
page readonly
|
|
|
|
9B5907F000
|
stack
|
page read and write
|
|
|
|
7DF51ABA0000
|
unkown image
|
page readonly
|
|
|
|
24EF0E51000
|
unkown
|
page read and write
|
|
|
|
7FF4FB911000
|
unkown image
|
page readonly
|
|
|
|
C16FFD000
|
stack
|
page read and write
|
|
|
|
2388D070000
|
unkown
|
page read and write
|
|
|
|
1A87B680000
|
unkown
|
page read and write
|
|
|
|
24EF0E50000
|
unkown
|
page read and write
|
|
|
|
7FF50254F000
|
unkown image
|
page readonly
|
|
|
|
1A87B960000
|
unkown
|
page read and write
|
|
|
|
34F6FF000
|
stack
|
page read and write
|
|
|
|
24EF0E53000
|
unkown
|
page read and write
|
|
|
|
A74C4FA000
|
stack
|
page read and write
|
|
|
|
7DF52C922000
|
unkown image
|
page readonly
|
|
|
|
24EF0E4B000
|
unkown
|
page read and write
|
|
|
|
2D40D4AB000
|
unkown
|
page read and write
|
|
|
|
2D40DBA6000
|
unkown
|
page read and write
|
|
|
|
2D40DB5D000
|
unkown
|
page read and write
|
|
|
|
9B592FB000
|
stack
|
page read and write
|
|
|
|
7FF5DA3C4000
|
unkown image
|
page readonly
|
|
|
|
2D40DB4E000
|
unkown
|
page read and write
|
|
|
|
7FF5D9BC4000
|
unkown image
|
page readonly
|
|
|
|
1A87AB4F000
|
heap default
|
page read and write
|
|
|
|
2D40DFA0000
|
unkown
|
page read and write
|
|
|
|
2290FDD0000
|
unkown
|
page read and write
|
|
|
|
24EF0E55000
|
unkown
|
page read and write
|
|
|
|
7FF533751000
|
unkown image
|
page readonly
|
|
|
|
2D40DA02000
|
unkown
|
page read and write
|
|
|
|
2290A902000
|
unkown
|
page read and write
|
|
|
|
4B75BEF000
|
stack
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7FF50255D000
|
unkown image
|
page readonly
|
|
|
|
7FF5021A2000
|
unkown image
|
page readonly
|
|
|
|
2290FE4D000
|
unkown
|
page read and write
|
|
|
|
7FF533021000
|
unkown image
|
page readonly
|
|
|
|
A74C8FB000
|
stack
|
page read and write
|
|
|
|
7FF53AE64000
|
unkown image
|
page readonly
|
|
|
|
13AFF2B0000
|
heap private
|
page read and write
|
|
|
|
2D40DBBC000
|
unkown
|
page read and write
|
|
|
|
2D40D600000
|
unkown image
|
page readonly
|
|
|
|
1A87B940000
|
unkown
|
page readonly
|
|
|
|
2D40DB67000
|
unkown
|
page read and write
|
|
|
|
2290A840000
|
unkown
|
page read and write
|
|
|
|
2D40DB76000
|
unkown
|
page read and write
|
|
|
|
13AFF1C7000
|
unkown
|
page read and write
|
|
|
|
7DF5E41A2000
|
unkown image
|
page readonly
|
|
|
|
7FF533764000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
24EF1000000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBAAA000
|
unkown image
|
page readonly
|
|
|
|
7FF502597000
|
unkown image
|
page readonly
|
|
|
|
2290FEFF000
|
unkown
|
page read and write
|
|
|
|
24EF0E47000
|
unkown
|
page read and write
|
|
|
|
2290FF00000
|
unkown
|
page read and write
|
|
|
|
7FF53ACB8000
|
unkown image
|
page readonly
|
|
|
|
7FF522B82000
|
unkown image
|
page readonly
|
|
|
|
7DF50C3E0000
|
unkown image
|
page readonly
|
|
|
|
7FF532FDD000
|
unkown image
|
page readonly
|
|
|
|
2D40DBB7000
|
unkown
|
page read and write
|
|
|
|
7FF502524000
|
unkown image
|
page readonly
|
|
|
|
2290FEC0000
|
unkown
|
page read and write
|
|
|
|
7FF501ED9000
|
unkown image
|
page readonly
|
|
|
|
7DF505880000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB94E000
|
unkown image
|
page readonly
|
|
|
|
2290AD80000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBA16000
|
unkown image
|
page readonly
|
|
|
|
7FF5335E1000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA3B1000
|
unkown image
|
page readonly
|
|
|
|
13AFF1B2000
|
unkown
|
page read and write
|
|
|
|
7DF544C42000
|
unkown image
|
page readonly
|
|
|
|
24EF0E89000
|
unkown
|
page read and write
|
|
|
|
168F9202000
|
unkown
|
page read and write
|
|
|
|
2D40DB95000
|
unkown
|
page read and write
|
|
|
|
2290FD90000
|
unkown
|
page read and write
|
|
|
|
1A87B950000
|
unkown
|
page read and write
|
|
|
|
24EF0C00000
|
unkown image
|
page readonly
|
|
|
|
2D40DB95000
|
unkown
|
page read and write
|
|
|
|
670000
|
heap default
|
page read and write
|
|
|
|
24EF0C00000
|
unkown image
|
page readonly
|
|
|
|
7FF5023ED000
|
unkown image
|
page readonly
|
|
|
|
2D40D4E2000
|
unkown
|
page read and write
|
|
|
|
7FF533029000
|
unkown image
|
page readonly
|
|
|
|
2290FE30000
|
unkown
|
page read and write
|
|
|
|
7FF5020F7000
|
unkown image
|
page readonly
|
|
|
|
7FF510D06000
|
unkown image
|
page readonly
|
|
|
|
2D40E002000
|
unkown
|
page read and write
|
|
|
|
7FF510BF5000
|
unkown image
|
page readonly
|
|
|
|
9B594FF000
|
stack
|
page read and write
|
|
|
|
7FF5DA313000
|
unkown image
|
page readonly
|
|
|
|
DC98EFF000
|
stack
|
page read and write
|
|
|
|
1A87B250000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA357000
|
unkown image
|
page readonly
|
|
|
|
7FF502599000
|
unkown image
|
page readonly
|
|
|
|
7FF53AD25000
|
unkown image
|
page readonly
|
|
|
|
2D40D4B4000
|
unkown
|
page read and write
|
|
|
|
7FF53AC96000
|
unkown image
|
page readonly
|
|
|
|
2290A907000
|
unkown
|
page read and write
|
|
|
|
2D40D4EC000
|
unkown
|
page read and write
|
|
|
|
7FF532FDF000
|
unkown image
|
page readonly
|
|
|
|
2290A873000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
7DF544C52000
|
unkown image
|
page readonly
|
|
|
|
24EF0E3C000
|
unkown
|
page read and write
|
|
|
|
7DF5E41C0000
|
unkown image
|
page readonly
|
|
|
|
2D40D1F0000
|
unkown image
|
page readonly
|
|
|
|
13AFF1C8000
|
unkown
|
page read and write
|
|
|
|
7FF4FB87F000
|
unkown image
|
page readonly
|
|
|
|
24EF0BE0000
|
unkown image
|
page read and write
|
|
|
|
168F923C000
|
unkown
|
page read and write
|
|
|
|
2290FDA0000
|
unkown
|
page read and write
|
|
|
|
13AFF6A0000
|
unkown image
|
page read and write
|
|
|
|
2388D029000
|
unkown
|
page read and write
|
|
|
|
2290A6A0000
|
heap private
|
page read and write
|
|
|
|
34F67F000
|
stack
|
page read and write
|
|
|
|
2D40D800000
|
unkown image
|
page readonly
|
|
|
|
7FF501E57000
|
unkown image
|
page readonly
|
|
|
|
2D40E002000
|
unkown
|
page read and write
|
|
|
|
7DF50C3E2000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBA27000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB7C9000
|
unkown image
|
page readonly
|
|
|
|
7FF5336E6000
|
unkown image
|
page readonly
|
|
|
|
229101B0000
|
unkown
|
page read and write
|
|
|
|
34FAFF000
|
stack
|
page read and write
|
|
|
|
7FF4FB7A5000
|
unkown image
|
page readonly
|
|
|
|
7DF5E41B0000
|
unkown image
|
page readonly
|
|
|
|
2D40DB98000
|
unkown
|
page read and write
|
|
|
|
2290B670000
|
unkown
|
page read and write
|
|
|
|
1A87B930000
|
unkown
|
page read and write
|
|
|
|
2290B118000
|
unkown
|
page read and write
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
2D40DBC6000
|
unkown
|
page read and write
|
|
|
|
2D40DB95000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
2D40D44B000
|
unkown
|
page read and write
|
|
|
|
7DF5E41B2000
|
unkown image
|
page readonly
|
|
|
|
2D40D513000
|
unkown
|
page read and write
|
|
|
|
24EF0E4A000
|
unkown
|
page read and write
|
|
|
|
7FF4FBA84000
|
unkown image
|
page readonly
|
|
|
|
1A87AAC5000
|
heap private
|
page read and write
|
|
|
|
7FF522B87000
|
unkown image
|
page readonly
|
|
|
|
24EF0BF0000
|
heap private
|
page read and write
|
|
|
|
2D40DB91000
|
unkown
|
page read and write
|
|
|
|
7FF5335B8000
|
unkown image
|
page readonly
|
|
|
|
2D40DB5D000
|
unkown
|
page read and write
|
|
|
|
7FF4FB80E000
|
unkown image
|
page readonly
|
|
|
|
4B75B6B000
|
unkown
|
page read and write
|
|
|
|
168F9030000
|
unkown image
|
page readonly
|
|
|
|
1A87AA90000
|
unkown image
|
page readonly
|
|
|
|
7DF50C400000
|
unkown image
|
page readonly
|
|
|
|
7DF53D550000
|
unkown image
|
page readonly
|
|
|
|
7FF50253F000
|
unkown image
|
page readonly
|
|
|
|
9B58DAB000
|
unkown
|
page read and write
|
|
|
|
7FF53ACE8000
|
unkown image
|
page readonly
|
|
|
|
7DF505882000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB64C000
|
unkown image
|
page readonly
|
|
|
|
1A87AB30000
|
unkown
|
page read and write
|
|
|
|
7FF510DE7000
|
unkown image
|
page readonly
|
|
|
|
2290A6B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5025F7000
|
unkown image
|
page readonly
|
|
|
|
7FF522B37000
|
unkown image
|
page readonly
|
|
|
|
7FF5336ED000
|
unkown image
|
page readonly
|
|
|
|
168F9246000
|
unkown
|
page read and write
|
|
|
|
2D39000
|
heap private
|
page read and write
|
|
|
|
2290FD68000
|
unkown
|
page read and write
|
|
|
|
2D40DBC1000
|
unkown
|
page read and write
|
|
|
|
7DF52C932000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB9D1000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB7E0000
|
unkown image
|
page readonly
|
|
|
|
7FF510D91000
|
unkown image
|
page readonly
|
|
|
|
2CFE000
|
stack
|
page read and write
|
|
|
|
7FF510CFD000
|
unkown image
|
page readonly
|
|
|
|
2D40DB70000
|
unkown
|
page read and write
|
|
|
|
168F9300000
|
unkown
|
page read and write
|
|
|
|
7FF53AE51000
|
unkown image
|
page readonly
|
|
|
|
2D40DB5D000
|
unkown
|
page read and write
|
|
|
|
7FF4FB6A4000
|
unkown image
|
page readonly
|
|
|
|
2D40DBA0000
|
unkown
|
page read and write
|
|
|
|
24EF0E4E000
|
unkown
|
page read and write
|
|
|
|
7FF5024F7000
|
unkown image
|
page readonly
|
|
|
|
7DF53D542000
|
unkown image
|
page readonly
|
|
|
|
7FF53AB11000
|
unkown image
|
page readonly
|
|
|
|
2D40DB95000
|
unkown
|
page read and write
|
|
|
|
7FF50261A000
|
unkown image
|
page readonly
|
|
|
|
7FF510897000
|
unkown image
|
page readonly
|
|
|
|
7FF522A05000
|
unkown image
|
page readonly
|
|
|
|
7DF544C60000
|
unkown image
|
page readonly
|
|
|
|
7FF510D94000
|
unkown image
|
page readonly
|
|
|
|
1A87B240000
|
unkown image
|
page readonly
|
|
|
|
7FF5021EF000
|
unkown image
|
page readonly
|
|
|
|
168F9254000
|
unkown
|
page read and write
|
|
|
|
4B75F7B000
|
stack
|
page read and write
|
|
|
|
7FF4FB71A000
|
unkown image
|
page readonly
|
|
|
|
13AFF2B5000
|
heap private
|
page read and write
|
|
|
|
7FF4FB2A4000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB86A000
|
unkown image
|
page readonly
|
|
|
|
7DF505880000
|
unkown image
|
page readonly
|
|
|
|
7FF502214000
|
unkown image
|
page readonly
|
|
|
|
2388D108000
|
unkown
|
page read and write
|
|
|
|
7FF502350000
|
unkown image
|
page readonly
|
|
|
|
7DF5E41A0000
|
unkown image
|
page readonly
|
|
|
|
168F925C000
|
unkown
|
page read and write
|
|
|
|
2D40DF40000
|
unkown image
|
page write copy
|
|
|
|
2D40DB72000
|
unkown
|
page read and write
|
|
|
|
7FF4FB9DF000
|
unkown image
|
page readonly
|
|
|
|
7FF50228A000
|
unkown image
|
page readonly
|
|
|
|
2290B118000
|
unkown
|
page read and write
|
|
|
|
2290A8B1000
|
unkown
|
page read and write
|
|
|
|
2388CE00000
|
unkown image
|
page read and write
|
|
|
|
7DF51AB90000
|
unkown image
|
page readonly
|
|
|
|
24EF0E29000
|
unkown
|
page read and write
|
|
|
|
DC98A79000
|
stack
|
page read and write
|
|
|
|
2290FD90000
|
unkown
|
page read and write
|
|
|
|
24EF0E70000
|
unkown
|
page read and write
|
|
|
|
5B1E7F9000
|
stack
|
page read and write
|
|
|
|
7FF5020F1000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7DF51AB80000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBA8D000
|
unkown image
|
page readonly
|
|
|
|
7FF53ADB3000
|
unkown image
|
page readonly
|
|
|
|
2388D113000
|
unkown
|
page read and write
|
|
|
|
2388D100000
|
unkown
|
page read and write
|
|
|
|
7FF502566000
|
unkown image
|
page readonly
|
|
|
|
7FF502534000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA3F6000
|
unkown image
|
page readonly
|
|
|
|
2D40DB5C000
|
unkown
|
page read and write
|
|
|
|
DC9897F000
|
stack
|
page read and write
|
|
|
|
7DF5E41C0000
|
unkown image
|
page readonly
|
|
|
|
2D40DB95000
|
unkown
|
page read and write
|
|
|
|
7FF510BF0000
|
unkown image
|
page readonly
|
|
|
|
C16E7F000
|
stack
|
page read and write
|
|
|
|
7FF532F50000
|
unkown image
|
page readonly
|
|
|
|
21C0000
|
unkown
|
page read and write
|
|
|
|
DC9851E000
|
stack
|
page read and write
|
|
|
|
A74CF7E000
|
stack
|
page read and write
|
|
|
|
7FF502553000
|
unkown image
|
page readonly
|
|
|
|
2D40DB4B000
|
unkown
|
page read and write
|
|
|
|
7DF505890000
|
unkown image
|
page readonly
|
|
|
|
7FF532F49000
|
unkown image
|
page readonly
|
|
|
|
5B1E87E000
|
stack
|
page read and write
|
|
|
|
13AFF1CF000
|
unkown
|
page read and write
|
|
|
|
7FF5DA34D000
|
unkown image
|
page readonly
|
|
|
|
7DF5E41B0000
|
unkown image
|
page readonly
|
|
|
|
2388CE50000
|
unkown image
|
page readonly
|
|
|
|
7FF522957000
|
unkown image
|
page readonly
|
|
|
|
7FF522637000
|
unkown image
|
page readonly
|
|
|
|
7FF5024F5000
|
unkown image
|
page readonly
|
|
|
|
24EF0C50000
|
heap default
|
page read and write
|
|
|
|
A74C27F000
|
stack
|
page read and write
|
|
|
|
7FF533767000
|
unkown image
|
page readonly
|
|
|
|
7FF510D26000
|
unkown image
|
page readonly
|
|
|
|
2D40D44A000
|
unkown
|
page read and write
|
|
|
|
4B75E7F000
|
stack
|
page read and write
|
|
|
|
7FF4FB9FA000
|
unkown image
|
page readonly
|
|
|
|
7DF544C40000
|
unkown image
|
page readonly
|
|
|
|
7FF5024C5000
|
unkown image
|
page readonly
|
|
|
|
2230000
|
heap private
|
page read and write
|
|
|
|
7FF533796000
|
unkown image
|
page readonly
|
|
|
|
13AFF1CF000
|
unkown
|
page read and write
|
|
|
|
1A87A9E0000
|
unkown image
|
page read and write
|
|
|
|
7FF510BF8000
|
unkown image
|
page readonly
|
|
|
|
7FF533158000
|
unkown image
|
page readonly
|
|
|
|
13AFF2E0000
|
unkown
|
page read and write
|
|
|
|
DC98D7F000
|
stack
|
page read and write
|
|
|
|
2290AC00000
|
unkown image
|
page readonly
|
|
|
|
A74C7FA000
|
stack
|
page read and write
|
|
|
|
1A87AA50000
|
unkown
|
page read and write
|
|
|
|
7FF522B3D000
|
unkown image
|
page readonly
|
|
|
|
2290FDF0000
|
unkown
|
page read and write
|
|
|
|
1A87AAC9000
|
heap private
|
page read and write
|
|
|
|
2D40DBA6000
|
unkown
|
page read and write
|
|
|
|
7FF4FB9E3000
|
unkown image
|
page readonly
|
|
|
|
2D40E000000
|
unkown
|
page read and write
|
|
|
|
168F9A02000
|
unkown
|
page read and write
|
|
|
|
2290A8B1000
|
unkown
|
page read and write
|
|
|
|
7FF533754000
|
unkown image
|
page readonly
|
|
|
|
13AFF300000
|
unkown image
|
page readonly
|
|
|
|
7FF53AC67000
|
unkown image
|
page readonly
|
|
|
|
2290A895000
|
unkown
|
page read and write
|
|
|
|
2D40DB1D000
|
unkown
|
page read and write
|
|
|
|
7FF501E04000
|
unkown image
|
page readonly
|
|
|
|
2D40E002000
|
unkown
|
page read and write
|
|
|
|
2D40D320000
|
unkown image
|
page readonly
|
|
|
|
2D40D4C0000
|
unkown
|
page read and write
|
|
|
|
7DF418A50000
|
unkown image
|
page readonly
|
|
|
|
7FF53376B000
|
unkown image
|
page readonly
|
|
|
|
2290A858000
|
unkown
|
page read and write
|
|
|
|
7FF53AE7A000
|
unkown image
|
page readonly
|
|
|
|
2290B113000
|
unkown
|
page read and write
|
|
|
|
7DF505882000
|
unkown image
|
page readonly
|
|
|
|
2388CE10000
|
heap private
|
page read and write
|
|
|
|
DC98B77000
|
stack
|
page read and write
|
|
|
|
7FF502572000
|
unkown image
|
page readonly
|
|
|
|
2D40DBA6000
|
unkown
|
page read and write
|
|
|
|
650000
|
unkown image
|
page readonly
|
|
|
|
2290FDD0000
|
unkown
|
page read and write
|
|
|
|
1A87AEC0000
|
unkown image
|
page readonly
|
|
|
|
7FF502636000
|
unkown image
|
page readonly
|
|
|
|
2D40DB5E000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown
|
page read and write
|
|
|
|
7FF522B5A000
|
unkown image
|
page readonly
|
|
|
|
2290A800000
|
unkown
|
page read and write
|
|
|
|
2D40DB6E000
|
unkown
|
page read and write
|
|
|
|
2D40D9C0000
|
unkown image
|
page readonly
|
|
|
|
2290FE97000
|
unkown
|
page read and write
|
|
|
|
7DF544C40000
|
unkown image
|
page readonly
|
|
|
|
7FF522B4B000
|
unkown image
|
page readonly
|
|
|
|
7FF510DE2000
|
unkown image
|
page readonly
|
|
|
|
2290FDA0000
|
unkown
|
page read and write
|
|
|
|
24EF0E4D000
|
unkown
|
page read and write
|
|
|
|
168F9050000
|
unkown image
|
page readonly
|
|
|
|
7FF5023DA000
|
unkown image
|
page readonly
|
|
|
|
2290FEAF000
|
unkown
|
page read and write
|
|
|
|
21D0000
|
unkown image
|
page readonly
|
|
|
|
2290A700000
|
heap default
|
page read and write
|
|
|
|
C16EF9000
|
stack
|
page read and write
|
|
|
|
7FF53A957000
|
unkown image
|
page readonly
|
|
|
|
7FF533757000
|
unkown image
|
page readonly
|
|
|
|
2388D07B000
|
unkown
|
page read and write
|
|
|
|
168F925F000
|
unkown
|
page read and write
|
|
|
|
2390000
|
unkown image
|
page read and write
|
|
|
|
7FF5DA3C7000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
168F9600000
|
unkown image
|
page readonly
|
|
|
|
7FF510D97000
|
unkown image
|
page readonly
|
|
|
|
9B590FF000
|
stack
|
page read and write
|
|
|
|
4B76177000
|
stack
|
page read and write
|
|
|
|
2D40D210000
|
unkown image
|
page readonly
|
|
|
|
2D40DB78000
|
unkown
|
page read and write
|
|
|
|
7FF50237E000
|
unkown image
|
page readonly
|
|
|
|
24EF0F13000
|
unkown
|
page read and write
|
|
|
|
7DF505872000
|
unkown image
|
page readonly
|
|
|
|
5B1E3EB000
|
unkown
|
page read and write
|
|
|
|
22910070000
|
unkown
|
page read and write
|
|
|
|
7FF4FB798000
|
unkown image
|
page readonly
|
|
|
|
D70000
|
unkown image
|
page readonly
|
|
|
|
24EF0E7F000
|
unkown
|
page read and write
|
|
|
|
7FF4FB87A000
|
unkown image
|
page readonly
|
|
|
|
2D40D4FB000
|
unkown
|
page read and write
|
|
|
|
2D40DBC1000
|
unkown
|
page read and write
|
|
|
|
7FF4FB834000
|
unkown image
|
page readonly
|
|
|
|
7FF522B31000
|
unkown image
|
page readonly
|
|
|
|
7FF522976000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA326000
|
unkown image
|
page readonly
|
|
|
|
7FF5023F3000
|
unkown image
|
page readonly
|
|
|
|
DC9859E000
|
stack
|
page read and write
|
|
|
|
1A87AAC0000
|
heap private
|
page read and write
|
|
|
|
2290FC60000
|
unkown
|
page read and write
|
|
|
|
2290A890000
|
unkown
|
page read and write
|
|
|
|
21E0000
|
heap private
|
page read and write
|
|
|
|
1A87AA70000
|
unkown
|
page read and write
|
|
|
|
7FF522B34000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB810000
|
unkown image
|
page readonly
|
|
|
|
7DF50C3E2000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBA94000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7DF51AB92000
|
unkown image
|
page readonly
|
|
|
|
7FF53A951000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBA81000
|
unkown image
|
page readonly
|
|
|
|
168F9080000
|
heap default
|
page read and write
|
|
|
|
7FF502458000
|
unkown image
|
page readonly
|
|
|
|
7FF522AC6000
|
unkown image
|
page readonly
|
|
|
|
7FF502488000
|
unkown image
|
page readonly
|
|
|
|
7DF442B10000
|
unkown image
|
page readonly
|
|
|
|
2290A8FF000
|
unkown
|
page read and write
|
|
|
|
7FF4FB326000
|
unkown image
|
page readonly
|
|
|
|
2290FF02000
|
unkown
|
page read and write
|
|
|
|
7FF5336F9000
|
unkown image
|
page readonly
|
|
|
|
1A87AB2D000
|
heap default
|
page read and write
|
|
|
|
168F9229000
|
unkown
|
page read and write
|
|
|
|
2280000
|
heap private
|
page read and write
|
|
|
|
C16B9F000
|
stack
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
2290AFD1000
|
unkown
|
page read and write
|
|
|
|
1A87B670000
|
unkown
|
page read and write
|
|
|
|
7FF4FB9B9000
|
unkown image
|
page readonly
|
|
|
|
7DF5E41A2000
|
unkown image
|
page readonly
|
|
|
|
2D40DFA0000
|
unkown
|
page read and write
|
|
|
|
7FF5020C3000
|
unkown image
|
page readonly
|
|
|
|
2388CE20000
|
unkown image
|
page readonly
|
|
|
|
7FF5336F7000
|
unkown image
|
page readonly
|
|
|
|
7DF53D560000
|
unkown image
|
page readonly
|
|
|
|
22910080000
|
unkown
|
page read and write
|
|
|
|
7FF532FE4000
|
unkown image
|
page readonly
|
|
|
|
2F5000
|
unkown
|
page read and write
|
|
|
|
2290BBE0000
|
unkown
|
page read and write
|
|
|
|
2290B159000
|
unkown
|
page read and write
|
|
|
|
2290FF04000
|
unkown
|
page read and write
|
|
|
|
2D40DB67000
|
unkown
|
page read and write
|
|
|
|
7FF510BB7000
|
unkown image
|
page readonly
|
|
|
|
DC98FFC000
|
stack
|
page read and write
|
|
|
|
2D40DB80000
|
unkown
|
page read and write
|
|
|
|
2D40DB6C000
|
unkown
|
page read and write
|
|
|
|
7DF52C930000
|
unkown image
|
page readonly
|
|
|
|
2D40DB7A000
|
unkown
|
page read and write
|
|
|
|
34F8FB000
|
stack
|
page read and write
|
|
|
|
2290A8BD000
|
unkown
|
page read and write
|
|
|
|
7DF51AB82000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9FD4000
|
unkown image
|
page readonly
|
|
|
|
2388D03C000
|
unkown
|
page read and write
|
|
|
|
4B7637C000
|
stack
|
page read and write
|
|
|
|
7FF5337A7000
|
unkown image
|
page readonly
|
|
|
|
2D40D43C000
|
unkown
|
page read and write
|
|
|
|
7FF4FB941000
|
unkown image
|
page readonly
|
|
|
|
2388CE70000
|
heap default
|
page read and write
|
|
|
|
7DF544C42000
|
unkown image
|
page readonly
|
|
|
|
7FF50256A000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
7FF5022B1000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
2290A8AD000
|
unkown
|
page read and write
|
|
|
|
1A87B0C0000
|
unkown image
|
page readonly
|
|
|
|
2290A829000
|
unkown
|
page read and write
|
|
|
|
2D40DB95000
|
unkown
|
page read and write
|
|
|
|
7FF5DA407000
|
unkown image
|
page readonly
|
|
|
|
2290FD60000
|
unkown
|
page read and write
|
|
|
|
2200000
|
unkown
|
page read and write
|
|
|
|
7FF5DA346000
|
unkown image
|
page readonly
|
|
|
|
2D40DBC6000
|
unkown
|
page read and write
|
|
|
|
7FF522B76000
|
unkown image
|
page readonly
|
|
|
|
2D40DB1B000
|
unkown
|
page read and write
|
|
|
|
2D40D456000
|
unkown
|
page read and write
|
|
|
|
7FF4FB955000
|
unkown image
|
page readonly
|
|
|
|
13AFF1B7000
|
heap default
|
page read and write
|
|
|
|
1A87B6F0000
|
unkown
|
page read and write
|
|
|
|
2388D802000
|
unkown
|
page read and write
|
|
|
|
7FF5025F1000
|
unkown image
|
page readonly
|
|
|
|
2290B002000
|
unkown
|
page read and write
|
|
|
|
7FF5337A7000
|
unkown image
|
page readonly
|
|
|
|
7FF53AE54000
|
unkown image
|
page readonly
|
|
|
|
C16B1F000
|
stack
|
page read and write
|
|
|
|
7FF502520000
|
unkown image
|
page readonly
|
|
|
|
7FF510DD6000
|
unkown image
|
page readonly
|
|
|
|
2290A6E0000
|
unkown image
|
page readonly
|
|
|
|
168F9400000
|
unkown image
|
page readonly
|
|
|
|
13AFF060000
|
unkown image
|
page read and write
|
|
|
|
2D40E002000
|
unkown
|
page read and write
|
|
|
|
2D40D220000
|
unkown image
|
page readonly
|
|
|
|
7FF4FBA87000
|
unkown image
|
page readonly
|
|
|
|
7FF522AA6000
|
unkown image
|
page readonly
|
|
|
|
2D40D1D0000
|
unkown image
|
page read and write
|
|
|
|
2D40DBB0000
|
unkown
|
page read and write
|
|
|
|
24EF0F08000
|
unkown
|
page read and write
|
|
|
|
7FF53ADCA000
|
unkown image
|
page readonly
|
|
|
|
2D30000
|
heap private
|
page read and write
|
|
|
|
2D40D448000
|
unkown
|
page read and write
|
|
|
|
7FF4FB883000
|
unkown image
|
page readonly
|
|
|
|
24EF0E48000
|
unkown
|
page read and write
|
|
|
|
2290FF02000
|
unkown
|
page read and write
|
|
|
|
2290FD80000
|
unkown
|
page read and write
|
|
|
|
2388D062000
|
unkown
|
page read and write
|
|
|
|
7FF5DA3CB000
|
unkown image
|
page readonly
|
|
|
|
7DF505872000
|
unkown image
|
page readonly
|
|
|
|
1A87AAE8000
|
heap default
|
page read and write
|
|
|
|
7DF505890000
|
unkown image
|
page readonly
|
|
|
|
24EF0F02000
|
unkown
|
page read and write
|
|
There are 898 hidden memdumps, click here to show them.