Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
UioA2E9DBG.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\edb.log
|
MPEG-4 LOAS
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
|
Extensible storage engine DataBase, version 0x620, checksum 0x52f1f60b, page size 16384, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
data
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
|
ASCII text, with no line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll"
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\UioA2E9DBG.dll,Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\UioA2E9DBG.dll,agrwqhxohbh
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\UioA2E9DBG.dll,aoydsyidkopcdbcv
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Jsczeisswlgpw\ifzwhxr.fpp",gqJNgJRYaqyk
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",#1
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
|
|
There are 2 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://crl.ver)
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
195.154.133.20
|
unknown
|
France
|
|
|
|
212.237.17.99
|
unknown
|
Italy
|
|
|
|
110.232.117.186
|
unknown
|
Australia
|
|
|
|
104.245.52.73
|
unknown
|
United States
|
|
|
|
138.185.72.26
|
unknown
|
Brazil
|
|
|
|
81.0.236.90
|
unknown
|
Czech Republic
|
|
|
|
45.118.115.99
|
unknown
|
Indonesia
|
|
|
|
103.75.201.2
|
unknown
|
Thailand
|
|
|
|
216.158.226.206
|
unknown
|
United States
|
|
|
|
107.182.225.142
|
unknown
|
United States
|
|
|
|
45.118.135.203
|
unknown
|
Japan
|
|
|
|
50.116.54.215
|
unknown
|
United States
|
|
|
|
51.68.175.8
|
unknown
|
France
|
|
|
|
103.8.26.102
|
unknown
|
Malaysia
|
|
|
|
46.55.222.11
|
unknown
|
Bulgaria
|
|
|
|
41.76.108.46
|
unknown
|
South Africa
|
|
|
|
103.8.26.103
|
unknown
|
Malaysia
|
|
|
|
178.79.147.66
|
unknown
|
United Kingdom
|
|
|
|
212.237.5.209
|
unknown
|
Italy
|
|
|
|
176.104.106.96
|
unknown
|
Serbia
|
|
|
|
207.38.84.195
|
unknown
|
United States
|
|
|
|
212.237.56.116
|
unknown
|
Italy
|
|
|
|
45.142.114.231
|
unknown
|
Germany
|
|
|
|
203.114.109.124
|
unknown
|
Thailand
|
|
|
|
210.57.217.132
|
unknown
|
Indonesia
|
|
|
|
58.227.42.236
|
unknown
|
Korea Republic of
|
|
|
|
185.184.25.237
|
unknown
|
Turkey
|
|
|
|
158.69.222.101
|
unknown
|
Canada
|
|
|
|
104.251.214.46
|
unknown
|
United States
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
There are 20 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS
|
PerfMMFileName
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
380000
|
stack
|
page execute and read and write
|
|
|
|
D90000
|
stack
|
page execute and read and write
|
|
|
|
A30000
|
stack
|
page execute and read and write
|
|
|
|
8E0000
|
unkown
|
page execute and read and write
|
|
|
|
6DA000
|
heap default
|
page read and write
|
|
|
|
DBA000
|
heap default
|
page read and write
|
|
|
|
AB6000
|
heap default
|
page read and write
|
|
|
|
B10000
|
stack
|
page execute and read and write
|
|
|
|
111B000
|
heap default
|
page read and write
|
|
|
|
1130000
|
stack
|
page execute and read and write
|
|
|
|
9D5000
|
heap default
|
page read and write
|
|
|
|
D4A000
|
heap default
|
page read and write
|
|
|
|
1094000
|
unkown
|
page read and write
|
|
|
|
309B000
|
unkown image
|
page readonly
|
|
|
|
1030000
|
unkown image
|
page readonly
|
|
|
|
818000
|
unkown
|
page read and write
|
|
|
|
7DF50C650000
|
unkown image
|
page readonly
|
|
|
|
11BC000
|
stack
|
page read and write
|
|
|
|
301B000
|
unkown image
|
page readonly
|
|
|
|
307B000
|
unkown image
|
page readonly
|
|
|
|
BC5000
|
unkown
|
page read and write
|
|
|
|
30AC000
|
unkown image
|
page readonly
|
|
|
|
66A7AF9000
|
stack
|
page read and write
|
|
|
|
7DF5DFB92000
|
unkown image
|
page readonly
|
|
|
|
DB0000
|
unkown image
|
page readonly
|
|
|
|
2F9B000
|
unkown image
|
page readonly
|
|
|
|
2276E785000
|
unkown
|
page read and write
|
|
|
|
7FF4FE9B4000
|
unkown image
|
page readonly
|
|
|
|
2F9E000
|
unkown image
|
page readonly
|
|
|
|
BF0000
|
unkown
|
page read and write
|
|
|
|
1EA7E190000
|
unkown
|
page read and write
|
|
|
|
540F6FB000
|
stack
|
page read and write
|
|
|
|
960000
|
unkown image
|
page readonly
|
|
|
|
2276E6C5000
|
heap private
|
page read and write
|
|
|
|
2F9E000
|
unkown image
|
page readonly
|
|
|
|
7FE50000
|
unkown image
|
page readonly
|
|
|
|
11F0000
|
unkown image
|
page readonly
|
|
|
|
7F5A0000
|
unkown image
|
page readonly
|
|
|
|
CB0000
|
unkown
|
page read and write
|
|
|
|
2F9E000
|
unkown image
|
page readonly
|
|
|
|
5D0000
|
unkown image
|
page readonly
|
|
|
|
2276E78D000
|
unkown
|
page read and write
|
|
|
|
308B000
|
unkown image
|
page readonly
|
|
|
|
1170000
|
heap private
|
page read and write
|
|
|
|
1EA7DDA0000
|
unkown image
|
page readonly
|
|
|
|
6180000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown image
|
page readonly
|
|
|
|
DB0000
|
heap default
|
page read and write
|
|
|
|
780000
|
unkown image
|
page read and write
|
|
|
|
79B000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
unkown
|
page read and write
|
|
|
|
2EB1000
|
unkown image
|
page readonly
|
|
|
|
1EA7E130000
|
unkown
|
page read and write
|
|
|
|
91C000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown image
|
page readonly
|
|
|
|
BE0000
|
heap default
|
page read and write
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
1EA7DD50000
|
unkown image
|
page readonly
|
|
|
|
2EC7000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7F390000
|
unkown image
|
page readonly
|
|
|
|
7FE60000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE130000
|
unkown image
|
page readonly
|
|
|
|
2276E78F000
|
unkown
|
page read and write
|
|
|
|
6E940000
|
unkown image
|
page readonly
|
|
|
|
30AC000
|
unkown image
|
page readonly
|
|
|
|
127E000
|
stack
|
page read and write
|
|
|
|
7FF5D1E67000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC93000
|
unkown
|
page read and write
|
|
|
|
2FDA000
|
unkown image
|
page readonly
|
|
|
|
B15000
|
unkown
|
page read and write
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE8E3000
|
unkown image
|
page readonly
|
|
|
|
AC0000
|
unkown image
|
page readonly
|
|
|
|
2FD6000
|
unkown image
|
page readonly
|
|
|
|
D10000
|
heap default
|
page read and write
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
3091000
|
unkown image
|
page readonly
|
|
|
|
307F000
|
unkown image
|
page readonly
|
|
|
|
2ED9000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE91B000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E50000
|
unkown image
|
page readonly
|
|
|
|
BD7000
|
unkown
|
page read and write
|
|
|
|
1130000
|
unkown
|
page read and write
|
|
|
|
7FAD0000
|
unkown image
|
page readonly
|
|
|
|
A10000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E0A000
|
unkown image
|
page readonly
|
|
|
|
6A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E8E000
|
unkown image
|
page readonly
|
|
|
|
7F490000
|
unkown image
|
page readonly
|
|
|
|
308B000
|
unkown image
|
page readonly
|
|
|
|
7F382000
|
unkown image
|
page readonly
|
|
|
|
2FB2000
|
unkown image
|
page readonly
|
|
|
|
A00000
|
unkown image
|
page read and write
|
|
|
|
7F390000
|
unkown image
|
page readonly
|
|
|
|
1130000
|
unkown
|
page read and write
|
|
|
|
3091000
|
unkown image
|
page readonly
|
|
|
|
A50000
|
unkown image
|
page readonly
|
|
|
|
B10000
|
unkown
|
page read and write
|
|
|
|
7FF4FE9A9000
|
unkown image
|
page readonly
|
|
|
|
4AEE000
|
stack
|
page read and write
|
|
|
|
B24000
|
unkown
|
page read and write
|
|
|
|
7FF5D1E82000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1CE3000
|
unkown image
|
page readonly
|
|
|
|
7FA00000
|
unkown image
|
page readonly
|
|
|
|
7DF50C632000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
unkown
|
page read and write
|
|
|
|
7F382000
|
unkown image
|
page readonly
|
|
|
|
F70000
|
unkown image
|
page readonly
|
|
|
|
7FAD0000
|
unkown image
|
page readonly
|
|
|
|
BCE000
|
unkown
|
page read and write
|
|
|
|
7F380000
|
unkown image
|
page readonly
|
|
|
|
B77000
|
heap private
|
page read and write
|
|
|
|
6E8F1000
|
unkown image
|
page execute read
|
|
|
|
A6B000
|
unkown
|
page read and write
|
|
|
|
7FB12000
|
unkown image
|
page readonly
|
|
|
|
5EB0000
|
heap private
|
page read and write
|
|
|
|
C60000
|
unkown image
|
page readonly
|
|
|
|
7FF82000
|
unkown image
|
page readonly
|
|
|
|
7FB02000
|
unkown image
|
page readonly
|
|
|
|
7FE52000
|
unkown image
|
page readonly
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
11BE000
|
stack
|
page read and write
|
|
|
|
D00000
|
unkown
|
page read and write
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
302C000
|
unkown image
|
page readonly
|
|
|
|
2FFF000
|
unkown image
|
page readonly
|
|
|
|
2FE9000
|
unkown image
|
page readonly
|
|
|
|
B11000
|
unkown
|
page read and write
|
|
|
|
B1A000
|
unkown
|
page read and write
|
|
|
|
7F592000
|
unkown image
|
page readonly
|
|
|
|
F86000
|
unkown
|
page read and write
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
3084000
|
unkown image
|
page readonly
|
|
|
|
7FF82000
|
unkown image
|
page readonly
|
|
|
|
302C000
|
unkown image
|
page readonly
|
|
|
|
D35000
|
unkown
|
page read and write
|
|
|
|
FE0000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
3300000
|
heap private
|
page read and write
|
|
|
|
2EBD000
|
unkown image
|
page readonly
|
|
|
|
1EA00000000
|
unkown
|
page read and write
|
|
|
|
2FFF000
|
unkown image
|
page readonly
|
|
|
|
7DF50C630000
|
unkown image
|
page readonly
|
|
|
|
7F5A2000
|
unkown image
|
page readonly
|
|
|
|
6E93D000
|
unkown image
|
page read and write
|
|
|
|
5D0000
|
unkown image
|
page readonly
|
|
|
|
2EBD000
|
unkown image
|
page readonly
|
|
|
|
7FF5D17AF000
|
unkown image
|
page readonly
|
|
|
|
7FF80000
|
unkown image
|
page readonly
|
|
|
|
7F5B0000
|
unkown image
|
page readonly
|
|
|
|
7F5B0000
|
unkown image
|
page readonly
|
|
|
|
1EA7E520000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
6080000
|
heap private
|
page read and write
|
|
|
|
2FD6000
|
unkown image
|
page readonly
|
|
|
|
308B000
|
unkown image
|
page readonly
|
|
|
|
7FF80000
|
unkown image
|
page readonly
|
|
|
|
7FE60000
|
unkown image
|
page readonly
|
|
|
|
2FFF000
|
unkown image
|
page readonly
|
|
|
|
7FAC2000
|
unkown image
|
page readonly
|
|
|
|
1EA7E2FC000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown image
|
page read and write
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
66A7CF9000
|
stack
|
page read and write
|
|
|
|
D44000
|
unkown
|
page read and write
|
|
|
|
BD4000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C76000
|
unkown image
|
page readonly
|
|
|
|
BC5000
|
unkown
|
page read and write
|
|
|
|
7DF5DFB90000
|
unkown image
|
page readonly
|
|
|
|
FE0000
|
heap private
|
page read and write
|
|
|
|
2F9E000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
7F390000
|
unkown image
|
page readonly
|
|
|
|
BD4000
|
unkown
|
page read and write
|
|
|
|
1EA7E200000
|
unkown
|
page read and write
|
|
|
|
1EA7E24C000
|
unkown
|
page read and write
|
|
|
|
D52000
|
unkown
|
page read and write
|
|
|
|
9F0000
|
unkown image
|
page readonly
|
|
|
|
DB5000
|
stack
|
page execute and read and write
|
|
|
|
7FC72000
|
unkown image
|
page readonly
|
|
|
|
2FFB000
|
unkown image
|
page readonly
|
|
|
|
2FBF000
|
unkown image
|
page readonly
|
|
|
|
CB0000
|
unkown image
|
page readonly
|
|
|
|
5E7E000
|
stack
|
page read and write
|
|
|
|
AB0000
|
unkown image
|
page readonly
|
|
|
|
301B000
|
unkown image
|
page readonly
|
|
|
|
B18000
|
heap default
|
page read and write
|
|
|
|
2FFF000
|
unkown image
|
page readonly
|
|
|
|
7F372000
|
unkown image
|
page readonly
|
|
|
|
1070000
|
unkown image
|
page readonly
|
|
|
|
FEA000
|
heap private
|
page read and write
|
|
|
|
2FE6000
|
unkown image
|
page readonly
|
|
|
|
6E940000
|
unkown image
|
page readonly
|
|
|
|
7FF72000
|
unkown image
|
page readonly
|
|
|
|
CA0000
|
unkown image
|
page read and write
|
|
|
|
3030000
|
unkown image
|
page readonly
|
|
|
|
C00000
|
unkown image
|
page read and write
|
|
|
|
3C0000
|
heap private
|
page read and write
|
|
|
|
6EC000
|
unkown
|
page read and write
|
|
|
|
2FAE000
|
unkown image
|
page readonly
|
|
|
|
BCD000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
2FF5000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
9CE000
|
unkown
|
page read and write
|
|
|
|
7FF4FE259000
|
unkown image
|
page readonly
|
|
|
|
540FAFA000
|
stack
|
page read and write
|
|
|
|
2FAE000
|
unkown image
|
page readonly
|
|
|
|
1EA7D500000
|
unkown
|
page read and write
|
|
|
|
7DF5DFBB0000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
unkown image
|
page readonly
|
|
|
|
30AC000
|
unkown image
|
page readonly
|
|
|
|
7FE50000
|
unkown image
|
page readonly
|
|
|
|
7F590000
|
unkown image
|
page readonly
|
|
|
|
2F9E000
|
unkown image
|
page readonly
|
|
|
|
2E86000
|
unkown image
|
page readonly
|
|
|
|
2FB2000
|
unkown image
|
page readonly
|
|
|
|
D4A000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown image
|
page readonly
|
|
|
|
7FE52000
|
unkown image
|
page readonly
|
|
|
|
B7A000
|
heap private
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
B1D000
|
unkown
|
page read and write
|
|
|
|
30A6000
|
unkown image
|
page readonly
|
|
|
|
6E93D000
|
unkown image
|
page read and write
|
|
|
|
309B000
|
unkown image
|
page readonly
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
1EA7D0E0000
|
unkown image
|
page readonly
|
|
|
|
2FF5000
|
unkown image
|
page readonly
|
|
|
|
7FE42000
|
unkown image
|
page readonly
|
|
|
|
83B000
|
unkown
|
page read and write
|
|
|
|
2DB000
|
unkown
|
page read and write
|
|
|
|
7F372000
|
unkown image
|
page readonly
|
|
|
|
2FDA000
|
unkown image
|
page readonly
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
5EB3000
|
heap private
|
page read and write
|
|
|
|
1EA7E2F5000
|
unkown
|
page read and write
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
2FFB000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1B35000
|
unkown image
|
page readonly
|
|
|
|
1EA7CD00000
|
unkown
|
page read and write
|
|
|
|
CF0000
|
unkown image
|
page readonly
|
|
|
|
2276E750000
|
heap default
|
page read and write
|
|
|
|
CF0000
|
unkown image
|
page readonly
|
|
|
|
5EC0000
|
unkown image
|
page readonly
|
|
|
|
5F6000
|
unkown
|
page read and write
|
|
|
|
7F370000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7F180000
|
unkown image
|
page readonly
|
|
|
|
CB0000
|
unkown image
|
page readonly
|
|
|
|
300D000
|
unkown image
|
page readonly
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
7FF72000
|
unkown image
|
page readonly
|
|
|
|
1075000
|
unkown
|
page read and write
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
302C000
|
unkown image
|
page readonly
|
|
|
|
2FDA000
|
unkown image
|
page readonly
|
|
|
|
302C000
|
unkown image
|
page readonly
|
|
|
|
728000
|
unkown
|
page read and write
|
|
|
|
1EA7D350000
|
unkown
|
page read and write
|
|
|
|
540ED3C000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
heap default
|
page read and write
|
|
|
|
690000
|
unkown image
|
page readonly
|
|
|
|
B17000
|
unkown
|
page read and write
|
|
|
|
2E86000
|
unkown image
|
page readonly
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
309B000
|
unkown image
|
page readonly
|
|
|
|
7E0000
|
unkown image
|
page readonly
|
|
|
|
1155000
|
stack
|
page execute and read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
1EA7E140000
|
unkown
|
page read and write
|
|
|
|
7FF4FE8D6000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
5D0000
|
unkown image
|
page readonly
|
|
|
|
5FBF000
|
stack
|
page read and write
|
|
|
|
2FDA000
|
unkown image
|
page readonly
|
|
|
|
7DF5DFB90000
|
unkown image
|
page readonly
|
|
|
|
1160000
|
heap default
|
page read and write
|
|
|
|
D60000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
7F372000
|
unkown image
|
page readonly
|
|
|
|
890000
|
unkown image
|
page readonly
|
|
|
|
2F9E000
|
unkown image
|
page readonly
|
|
|
|
2F9E000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1D9C000
|
unkown image
|
page readonly
|
|
|
|
7F2A0000
|
unkown image
|
page readonly
|
|
|
|
2FDA000
|
unkown image
|
page readonly
|
|
|
|
1EA7D260000
|
unkown image
|
page readonly
|
|
|
|
1EA7D3E3000
|
unkown
|
page read and write
|
|
|
|
7F380000
|
unkown image
|
page readonly
|
|
|
|
29D000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown image
|
page readonly
|
|
|
|
2FFB000
|
unkown image
|
page readonly
|
|
|
|
240000
|
unkown image
|
page readonly
|
|
|
|
CF0000
|
unkown image
|
page readonly
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1F09000
|
unkown image
|
page readonly
|
|
|
|
2E82000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
7F5A2000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC00000
|
unkown
|
page read and write
|
|
|
|
1EA7D400000
|
unkown
|
page read and write
|
|
|
|
309B000
|
unkown image
|
page readonly
|
|
|
|
ABC000
|
unkown
|
page read and write
|
|
|
|
2FF5000
|
unkown image
|
page readonly
|
|
|
|
B90000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E53000
|
unkown image
|
page readonly
|
|
|
|
1150000
|
unkown
|
page read and write
|
|
|
|
1890000
|
unkown image
|
page readonly
|
|
|
|
7DF5DFBA2000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE76A000
|
unkown image
|
page readonly
|
|
|
|
D90000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1CB6000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE8DF000
|
unkown image
|
page readonly
|
|
|
|
2FB2000
|
unkown image
|
page readonly
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
1EA7D559000
|
unkown
|
page read and write
|
|
|
|
7FF4FE1D9000
|
unkown image
|
page readonly
|
|
|
|
7FC62000
|
unkown image
|
page readonly
|
|
|
|
30AC000
|
unkown image
|
page readonly
|
|
|
|
30B3000
|
unkown image
|
page readonly
|
|
|
|
2FBF000
|
unkown image
|
page readonly
|
|
|
|
6E8F1000
|
unkown image
|
page execute read
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
7DF50C640000
|
unkown image
|
page readonly
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
309B000
|
unkown image
|
page readonly
|
|
|
|
1EA7E29D000
|
unkown
|
page read and write
|
|
|
|
309B000
|
unkown image
|
page readonly
|
|
|
|
33B0000
|
unkown image
|
page readonly
|
|
|
|
3084000
|
unkown image
|
page readonly
|
|
|
|
7FAC0000
|
unkown image
|
page readonly
|
|
|
|
2E82000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE8E6000
|
unkown image
|
page readonly
|
|
|
|
307F000
|
unkown image
|
page readonly
|
|
|
|
1EA7E2DE000
|
unkown
|
page read and write
|
|
|
|
1EA7E222000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
D39000
|
unkown
|
page read and write
|
|
|
|
987000
|
heap private
|
page read and write
|
|
|
|
940000
|
unkown
|
page read and write
|
|
|
|
63C0000
|
unkown
|
page read and write
|
|
|
|
1140000
|
heap private
|
page read and write
|
|
|
|
1087000
|
unkown
|
page read and write
|
|
|
|
4B6D000
|
stack
|
page read and write
|
|
|
|
2FFB000
|
unkown image
|
page readonly
|
|
|
|
2FE9000
|
unkown image
|
page readonly
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
D40000
|
heap default
|
page read and write
|
|
|
|
CC0000
|
unkown image
|
page readonly
|
|
|
|
A10000
|
unkown image
|
page readonly
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1F2E000
|
unkown image
|
page readonly
|
|
|
|
6E8F1000
|
unkown image
|
page execute read
|
|
|
|
3091000
|
unkown image
|
page readonly
|
|
|
|
4B9E000
|
stack
|
page read and write
|
|
|
|
7D0000
|
heap default
|
page read and write
|
|
|
|
7FAB2000
|
unkown image
|
page readonly
|
|
|
|
1EA7E2FD000
|
unkown
|
page read and write
|
|
|
|
2E86000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
2FF5000
|
unkown image
|
page readonly
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
1EA7E590000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
2FD6000
|
unkown image
|
page readonly
|
|
|
|
9BA000
|
heap default
|
page read and write
|
|
|
|
7FF70000
|
unkown image
|
page readonly
|
|
|
|
308B000
|
unkown image
|
page readonly
|
|
|
|
105A000
|
heap default
|
page read and write
|
|
|
|
7F2A0000
|
unkown image
|
page readonly
|
|
|
|
2E82000
|
unkown image
|
page readonly
|
|
|
|
33A7000
|
heap private
|
page read and write
|
|
|
|
117D000
|
stack
|
page read and write
|
|
|
|
2E86000
|
unkown image
|
page readonly
|
|
|
|
2FAE000
|
unkown image
|
page readonly
|
|
|
|
1510000
|
unkown image
|
page readonly
|
|
|
|
1EA7D513000
|
unkown
|
page read and write
|
|
|
|
2FBF000
|
unkown image
|
page readonly
|
|
|
|
600000
|
unkown image
|
page readonly
|
|
|
|
7DF50C642000
|
unkown image
|
page readonly
|
|
|
|
2276E550000
|
unkown
|
page read and write
|
|
|
|
7FF5D1E5E000
|
unkown image
|
page readonly
|
|
|
|
540F177000
|
stack
|
page read and write
|
|
|
|
D47000
|
unkown
|
page read and write
|
|
|
|
6E92A000
|
unkown image
|
page readonly
|
|
|
|
6E940000
|
unkown image
|
page readonly
|
|
|
|
308B000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1B00000
|
unkown image
|
page readonly
|
|
|
|
B35000
|
stack
|
page execute and read and write
|
|
|
|
690000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1A83000
|
unkown image
|
page readonly
|
|
|
|
33A0000
|
heap private
|
page read and write
|
|
|
|
7FF5D1B2F000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C14000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
unkown
|
page read and write
|
|
|
|
2276F4A0000
|
unkown
|
page readonly
|
|
|
|
1EA7CBA0000
|
unkown image
|
page readonly
|
|
|
|
540F9FF000
|
stack
|
page read and write
|
|
|
|
7FF82000
|
unkown image
|
page readonly
|
|
|
|
7DF40A500000
|
unkown image
|
page readonly
|
|
|
|
300D000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1DB1000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C74000
|
unkown image
|
page readonly
|
|
|
|
7FF70000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
unkown image
|
page readonly
|
|
|
|
1EA7E560000
|
unkown
|
page read and write
|
|
|
|
4B5D000
|
stack
|
page read and write
|
|
|
|
2EBD000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7F5B0000
|
unkown image
|
page readonly
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
340000
|
unkown
|
page read and write
|
|
|
|
32E0000
|
unkown image
|
page readonly
|
|
|
|
6E92A000
|
unkown image
|
page readonly
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
unkown image
|
page readonly
|
|
|
|
D59000
|
unkown
|
page read and write
|
|
|
|
D3D000
|
unkown
|
page read and write
|
|
|
|
3730000
|
unkown image
|
page readonly
|
|
|
|
126E000
|
stack
|
page read and write
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1D1B000
|
unkown image
|
page readonly
|
|
|
|
3016000
|
unkown image
|
page readonly
|
|
|
|
6EB80000
|
unkown image
|
page readonly
|
|
|
|
1EA7D3F0000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
1EA7E261000
|
unkown
|
page read and write
|
|
|
|
1040000
|
unkown
|
page read and write
|
|
|
|
BC8000
|
unkown
|
page read and write
|
|
|
|
540F2FA000
|
stack
|
page read and write
|
|
|
|
7FF5D1E27000
|
unkown image
|
page readonly
|
|
|
|
2FB2000
|
unkown image
|
page readonly
|
|
|
|
7FF72000
|
unkown image
|
page readonly
|
|
|
|
2FFB000
|
unkown image
|
page readonly
|
|
|
|
6090000
|
unkown
|
page read and write
|
|
|
|
7FF5D1F31000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC72000
|
unkown
|
page read and write
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
F8A000
|
unkown
|
page read and write
|
|
|
|
979000
|
unkown
|
page read and write
|
|
|
|
2FE9000
|
unkown image
|
page readonly
|
|
|
|
7FC80000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
33AA000
|
heap private
|
page read and write
|
|
|
|
2FAE000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE922000
|
unkown image
|
page readonly
|
|
|
|
3016000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown image
|
page readonly
|
|
|
|
D80000
|
unkown image
|
page readonly
|
|
|
|
2FD6000
|
unkown image
|
page readonly
|
|
|
|
7DF50C632000
|
unkown image
|
page readonly
|
|
|
|
7FC72000
|
unkown image
|
page readonly
|
|
|
|
307B000
|
unkown image
|
page readonly
|
|
|
|
302C000
|
unkown image
|
page readonly
|
|
|
|
112F000
|
stack
|
page read and write
|
|
|
|
7FF4FE25E000
|
unkown image
|
page readonly
|
|
|
|
A20000
|
heap private
|
page read and write
|
|
|
|
2FE9000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
2FAE000
|
unkown image
|
page readonly
|
|
|
|
7FC80000
|
unkown image
|
page readonly
|
|
|
|
30A6000
|
unkown image
|
page readonly
|
|
|
|
1EA7D360000
|
unkown image
|
page read and write
|
|
|
|
E21000
|
unkown
|
page read and write
|
|
|
|
D44000
|
unkown
|
page read and write
|
|
|
|
7DF50C630000
|
unkown image
|
page readonly
|
|
|
|
307B000
|
unkown image
|
page readonly
|
|
|
|
2276E590000
|
unkown image
|
page readonly
|
|
|
|
2FAE000
|
unkown image
|
page readonly
|
|
|
|
FC0000
|
unkown image
|
page readonly
|
|
|
|
307F000
|
unkown image
|
page readonly
|
|
|
|
7F092000
|
unkown image
|
page readonly
|
|
|
|
7F592000
|
unkown image
|
page readonly
|
|
|
|
D90000
|
unkown image
|
page readonly
|
|
|
|
30B3000
|
unkown image
|
page readonly
|
|
|
|
7FAB2000
|
unkown image
|
page readonly
|
|
|
|
2EBD000
|
unkown image
|
page readonly
|
|
|
|
B1D000
|
unkown
|
page read and write
|
|
|
|
307B000
|
unkown image
|
page readonly
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
1100000
|
unkown image
|
page readonly
|
|
|
|
6E8F1000
|
unkown image
|
page execute read
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
5CA000
|
unkown
|
page read and write
|
|
|
|
2276F490000
|
unkown
|
page read and write
|
|
|
|
1EA7E524000
|
unkown
|
page read and write
|
|
|
|
1EA7D559000
|
unkown
|
page read and write
|
|
|
|
2FD1000
|
unkown image
|
page readonly
|
|
|
|
1078000
|
unkown
|
page read and write
|
|
|
|
B1D000
|
unkown
|
page read and write
|
|
|
|
6084000
|
heap private
|
page read and write
|
|
|
|
3E0000
|
unkown image
|
page readonly
|
|
|
|
30A6000
|
unkown image
|
page readonly
|
|
|
|
1075000
|
unkown
|
page read and write
|
|
|
|
1EA7DB90000
|
unkown image
|
page read and write
|
|
|
|
2FB2000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1EA7E254000
|
unkown
|
page read and write
|
|
|
|
FE7000
|
heap private
|
page read and write
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
7FF72000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E1E000
|
unkown image
|
page readonly
|
|
|
|
9C0000
|
heap default
|
page read and write
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
1EA7E160000
|
unkown
|
page read and write
|
|
|
|
1EA7E160000
|
unkown
|
page read and write
|
|
|
|
D3D000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
B50000
|
unkown image
|
page readonly
|
|
|
|
F80000
|
unkown image
|
page readonly
|
|
|
|
2276E78D000
|
unkown
|
page read and write
|
|
|
|
A9E000
|
stack
|
page read and write
|
|
|
|
65D000
|
unkown
|
page read and write
|
|
|
|
7FC70000
|
unkown image
|
page readonly
|
|
|
|
D39000
|
unkown
|
page read and write
|
|
|
|
2FBF000
|
unkown image
|
page readonly
|
|
|
|
D0C000
|
unkown
|
page read and write
|
|
|
|
3091000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1DF2000
|
unkown image
|
page readonly
|
|
|
|
B70000
|
unkown image
|
page readonly
|
|
|
|
1500000
|
heap private
|
page read and write
|
|
|
|
2FE9000
|
unkown image
|
page readonly
|
|
|
|
7F592000
|
unkown image
|
page readonly
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
AC0000
|
unkown image
|
page readonly
|
|
|
|
30AC000
|
unkown image
|
page readonly
|
|
|
|
7F370000
|
unkown image
|
page readonly
|
|
|
|
7FE52000
|
unkown image
|
page readonly
|
|
|
|
BE4000
|
unkown
|
page read and write
|
|
|
|
DB0000
|
unkown
|
page read and write
|
|
|
|
43C000
|
unkown
|
page read and write
|
|
|
|
7DF50C640000
|
unkown image
|
page readonly
|
|
|
|
7FF4EA8E1000
|
unkown image
|
page readonly
|
|
|
|
1710000
|
unkown image
|
page readonly
|
|
|
|
66A771C000
|
unkown
|
page read and write
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
2FF5000
|
unkown image
|
page readonly
|
|
|
|
307B000
|
unkown image
|
page readonly
|
|
|
|
3084000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1CD2000
|
unkown image
|
page readonly
|
|
|
|
1EA7DD60000
|
unkown image
|
page readonly
|
|
|
|
AC0000
|
unkown image
|
page readonly
|
|
|
|
307B000
|
unkown image
|
page readonly
|
|
|
|
300D000
|
unkown image
|
page readonly
|
|
|
|
1EA7E22D000
|
unkown
|
page read and write
|
|
|
|
2FFB000
|
unkown image
|
page readonly
|
|
|
|
12AF000
|
stack
|
page read and write
|
|
|
|
3084000
|
unkown image
|
page readonly
|
|
|
|
6A3000
|
unkown
|
page read and write
|
|
|
|
AB8000
|
unkown
|
page read and write
|
|
|
|
1EA7E2CA000
|
unkown
|
page read and write
|
|
|
|
2276F256000
|
unkown
|
page read and write
|
|
|
|
A0E000
|
stack
|
page read and write
|
|
|
|
7F270000
|
unkown image
|
page readonly
|
|
|
|
1EA7DD70000
|
unkown image
|
page readonly
|
|
|
|
140F000
|
unkown image
|
page readonly
|
|
|
|
E60000
|
unkown image
|
page readonly
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
3016000
|
unkown image
|
page readonly
|
|
|
|
2FD1000
|
unkown image
|
page readonly
|
|
|
|
D35000
|
unkown
|
page read and write
|
|
|
|
1EA7E150000
|
unkown
|
page read and write
|
|
|
|
6A0000
|
unkown image
|
page readonly
|
|
|
|
7FE70000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE122000
|
unkown image
|
page readonly
|
|
|
|
7DF5DFBA0000
|
unkown image
|
page readonly
|
|
|
|
230000
|
unkown image
|
page read and write
|
|
|
|
7F590000
|
unkown image
|
page readonly
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
7DF50C642000
|
unkown image
|
page readonly
|
|
|
|
7F590000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE92E000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
unkown image
|
page readonly
|
|
|
|
107F000
|
unkown
|
page read and write
|
|
|
|
1EA7CB80000
|
unkown image
|
page read and write
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
unkown image
|
page readonly
|
|
|
|
1EA7D3E0000
|
unkown
|
page read and write
|
|
|
|
2276E540000
|
unkown image
|
page read and write
|
|
|
|
7FE40000
|
unkown image
|
page readonly
|
|
|
|
2276E6D0000
|
unkown image
|
page readonly
|
|
|
|
CF0000
|
unkown image
|
page readonly
|
|
|
|
98A000
|
heap private
|
page read and write
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
1EA7D270000
|
unkown image
|
page readonly
|
|
|
|
2FFB000
|
unkown image
|
page readonly
|
|
|
|
2276EDE0000
|
unkown image
|
page readonly
|
|
|
|
1EA7E400000
|
unkown
|
page read and write
|
|
|
|
2276E78D000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
unkown image
|
page readonly
|
|
|
|
3D0000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
unkown image
|
page readonly
|
|
|
|
CA0000
|
unkown
|
page read and write
|
|
|
|
5FA000
|
unkown
|
page read and write
|
|
|
|
2E86000
|
unkown image
|
page readonly
|
|
|
|
1EA7D502000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown
|
page read and write
|
|
|
|
AAB000
|
unkown
|
page read and write
|
|
|
|
7FF5D1E3D000
|
unkown image
|
page readonly
|
|
|
|
1EA7E180000
|
unkown
|
page read and write
|
|
|
|
1143000
|
heap private
|
page read and write
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
BC1000
|
unkown
|
page read and write
|
|
|
|
1EA7E5E0000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown image
|
page readonly
|
|
|
|
30A6000
|
unkown image
|
page readonly
|
|
|
|
3091000
|
unkown image
|
page readonly
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
7FF4FE8F3000
|
unkown image
|
page readonly
|
|
|
|
307F000
|
unkown image
|
page readonly
|
|
|
|
2FD6000
|
unkown image
|
page readonly
|
|
|
|
6E92A000
|
unkown image
|
page readonly
|
|
|
|
1EA7E306000
|
unkown
|
page read and write
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
2FF5000
|
unkown image
|
page readonly
|
|
|
|
1EA7CD13000
|
unkown
|
page read and write
|
|
|
|
307F000
|
unkown image
|
page readonly
|
|
|
|
30AC000
|
unkown image
|
page readonly
|
|
|
|
C00000
|
heap default
|
page read and write
|
|
|
|
600000
|
unkown image
|
page readonly
|
|
|
|
2FB2000
|
unkown image
|
page readonly
|
|
|
|
540F87F000
|
stack
|
page read and write
|
|
|
|
BDE000
|
stack
|
page read and write
|
|
|
|
C6D000
|
unkown
|
page read and write
|
|
|
|
AB0000
|
unkown image
|
page readonly
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
360000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE8DD000
|
unkown image
|
page readonly
|
|
|
|
30AC000
|
unkown image
|
page readonly
|
|
|
|
2E86000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1F21000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE9C5000
|
unkown image
|
page readonly
|
|
|
|
7FF5D16E4000
|
unkown image
|
page readonly
|
|
|
|
3091000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE9D1000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
6850000
|
unkown
|
page read and write
|
|
|
|
6E92A000
|
unkown image
|
page readonly
|
|
|
|
338E000
|
stack
|
page read and write
|
|
|
|
7FF5D1C44000
|
unkown image
|
page readonly
|
|
|
|
301B000
|
unkown image
|
page readonly
|
|
|
|
B32000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
2F99000
|
unkown image
|
page readonly
|
|
|
|
CF0000
|
unkown image
|
page readonly
|
|
|
|
DF0000
|
unkown image
|
page readonly
|
|
|
|
7DF5DFBA2000
|
unkown image
|
page readonly
|
|
|
|
300D000
|
unkown image
|
page readonly
|
|
|
|
7FAB0000
|
unkown image
|
page readonly
|
|
|
|
107F000
|
unkown
|
page read and write
|
|
|
|
7F390000
|
unkown image
|
page readonly
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
2FFB000
|
unkown image
|
page readonly
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
5FC0000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
unkown image
|
page readonly
|
|
|
|
2FC4000
|
unkown image
|
page readonly
|
|
|
|
2DAE000
|
unkown image
|
page readonly
|
|
|
|
2E82000
|
unkown image
|
page readonly
|
|
|
|
3390000
|
unkown
|
page read and write
|
|
|
|
4BAC000
|
stack
|
page read and write
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
2EB1000
|
unkown image
|
page readonly
|
|
|
|
2276E6C0000
|
heap private
|
page read and write
|
|
|
|
7F292000
|
unkown image
|
page readonly
|
|
|
|
301B000
|
unkown image
|
page readonly
|
|
|
|
7EF90000
|
unkown image
|
page readonly
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE129000
|
unkown image
|
page readonly
|
|
|
|
2FBF000
|
unkown image
|
page readonly
|
|
|
|
7FE42000
|
unkown image
|
page readonly
|
|
|
|
3091000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
unkown image
|
page readonly
|
|
|
|
7E0000
|
heap default
|
page read and write
|
|
|
|
3016000
|
unkown image
|
page readonly
|
|
|
|
7FAB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1CFD000
|
unkown image
|
page readonly
|
|
|
|
7F370000
|
unkown image
|
page readonly
|
|
|
|
30A6000
|
unkown image
|
page readonly
|
|
|
|
1EA7E300000
|
unkown
|
page read and write
|
|
|
|
2FD6000
|
unkown image
|
page readonly
|
|
|
|
1EA7D518000
|
unkown
|
page read and write
|
|
|
|
570000
|
unkown image
|
page readonly
|
|
|
|
7D5000
|
heap default
|
page read and write
|
|
|
|
7FF4FE1D7000
|
unkown image
|
page readonly
|
|
|
|
7FF82000
|
unkown image
|
page readonly
|
|
|
|
7FE50000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C26000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC8E000
|
unkown
|
page read and write
|
|
|
|
D30000
|
unkown image
|
page readonly
|
|
|
|
6E93D000
|
unkown image
|
page read and write
|
|
|
|
7FF5D1E13000
|
unkown image
|
page readonly
|
|
|
|
6E940000
|
unkown image
|
page readonly
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
unkown image
|
page readonly
|
|
|
|
B60000
|
unkown
|
page read and write
|
|
|
|
7FAC0000
|
unkown image
|
page readonly
|
|
|
|
107F000
|
unkown
|
page read and write
|
|
|
|
1EA7CC3D000
|
unkown
|
page read and write
|
|
|
|
3016000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E0E000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
C4F000
|
stack
|
page read and write
|
|
|
|
32F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D1AC0000
|
unkown image
|
page readonly
|
|
|
|
2FDA000
|
unkown image
|
page readonly
|
|
|
|
A00000
|
unkown
|
page read and write
|
|
|
|
30B3000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
unkown image
|
page readonly
|
|
|
|
D10000
|
unkown
|
page read and write
|
|
|
|
7FF5D1F2A000
|
unkown image
|
page readonly
|
|
|
|
D39000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown image
|
page read and write
|
|
|
|
A3B000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
heap default
|
page read and write
|
|
|
|
7F5B0000
|
unkown image
|
page readonly
|
|
|
|
440000
|
unkown
|
page read and write
|
|
|
|
7FF5D1BF7000
|
unkown image
|
page readonly
|
|
|
|
905000
|
unkown
|
page execute and read and write
|
|
|
|
308B000
|
unkown image
|
page readonly
|
|
|
|
BA0000
|
heap default
|
page read and write
|
|
|
|
30A6000
|
unkown image
|
page readonly
|
|
|
|
B1D000
|
unkown
|
page read and write
|
|
|
|
2276F510000
|
unkown
|
page read and write
|
|
|
|
7F372000
|
unkown image
|
page readonly
|
|
|
|
FF0000
|
unkown image
|
page readonly
|
|
|
|
2FBF000
|
unkown image
|
page readonly
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D18AC000
|
unkown image
|
page readonly
|
|
|
|
3084000
|
unkown image
|
page readonly
|
|
|
|
A10000
|
unkown image
|
page readonly
|
|
|
|
2FDA000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC13000
|
unkown
|
page read and write
|
|
|
|
2276E748000
|
heap default
|
page read and write
|
|
|
|
1EA7E5E0000
|
unkown
|
page read and write
|
|
|
|
4AAE000
|
stack
|
page read and write
|
|
|
|
7FF70000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7F380000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE94A000
|
unkown image
|
page readonly
|
|
|
|
570000
|
unkown image
|
page readonly
|
|
|
|
B1F000
|
unkown
|
page read and write
|
|
|
|
C60000
|
unkown image
|
page readonly
|
|
|
|
B15000
|
unkown
|
page read and write
|
|
|
|
A4F000
|
stack
|
page read and write
|
|
|
|
7F092000
|
unkown image
|
page readonly
|
|
|
|
7F390000
|
unkown image
|
page readonly
|
|
|
|
2276F4C0000
|
unkown
|
page read and write
|
|
|
|
7FF5D1DFE000
|
unkown image
|
page readonly
|
|
|
|
2FBF000
|
unkown image
|
page readonly
|
|
|
|
7F9B0000
|
unkown image
|
page readonly
|
|
|
|
7FC60000
|
unkown image
|
page readonly
|
|
|
|
7FF4EA8E1000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC6F000
|
unkown
|
page read and write
|
|
|
|
7FF5D1C8F000
|
unkown image
|
page readonly
|
|
|
|
301B000
|
unkown image
|
page readonly
|
|
|
|
7FC70000
|
unkown image
|
page readonly
|
|
|
|
2FDA000
|
unkown image
|
page readonly
|
|
|
|
1EA7E180000
|
unkown
|
page read and write
|
|
|
|
308B000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1ADF000
|
unkown image
|
page readonly
|
|
|
|
1EA7E29A000
|
unkown
|
page read and write
|
|
|
|
1EA7E508000
|
unkown
|
page read and write
|
|
|
|
1EA7CD02000
|
unkown
|
page read and write
|
|
|
|
7F370000
|
unkown image
|
page readonly
|
|
|
|
10FB000
|
unkown
|
page read and write
|
|
|
|
308B000
|
unkown image
|
page readonly
|
|
|
|
2E86000
|
unkown image
|
page readonly
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC57000
|
unkown
|
page read and write
|
|
|
|
DE0000
|
unkown image
|
page readonly
|
|
|
|
ADE000
|
stack
|
page read and write
|
|
|
|
1EA7D518000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown image
|
page readonly
|
|
|
|
7DF5DFB92000
|
unkown image
|
page readonly
|
|
|
|
300D000
|
unkown image
|
page readonly
|
|
|
|
7F5A0000
|
unkown image
|
page readonly
|
|
|
|
2FAE000
|
unkown image
|
page readonly
|
|
|
|
1030000
|
unkown image
|
page readonly
|
|
|
|
300D000
|
unkown image
|
page readonly
|
|
|
|
D3A000
|
unkown
|
page read and write
|
|
|
|
30B3000
|
unkown image
|
page readonly
|
|
|
|
7FB20000
|
unkown image
|
page readonly
|
|
|
|
D8B000
|
unkown
|
page read and write
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
1EA7E215000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
6F0000
|
unkown image
|
page read and write
|
|
|
|
7FE60000
|
unkown image
|
page readonly
|
|
|
|
D50000
|
unkown image
|
page readonly
|
|
|
|
540F8FE000
|
stack
|
page read and write
|
|
|
|
7FF5D1CE5000
|
unkown image
|
page readonly
|
|
|
|
300D000
|
unkown image
|
page readonly
|
|
|
|
BA0000
|
unkown image
|
page readonly
|
|
|
|
7FE60000
|
unkown image
|
page readonly
|
|
|
|
7F5A0000
|
unkown image
|
page readonly
|
|
|
|
1EA7E5E0000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
unkown image
|
page readonly
|
|
|
|
E10000
|
unkown image
|
page readonly
|
|
|
|
7DF5DFBB0000
|
unkown image
|
page readonly
|
|
|
|
7F592000
|
unkown image
|
page readonly
|
|
|
|
7F5A0000
|
unkown image
|
page readonly
|
|
|
|
7FE42000
|
unkown image
|
page readonly
|
|
|
|
1110000
|
heap default
|
page read and write
|
|
|
|
2FFF000
|
unkown image
|
page readonly
|
|
|
|
B24000
|
unkown
|
page read and write
|
|
|
|
7FF5D1CEC000
|
unkown image
|
page readonly
|
|
|
|
309B000
|
unkown image
|
page readonly
|
|
|
|
7FB60000
|
unkown image
|
page readonly
|
|
|
|
3084000
|
unkown image
|
page readonly
|
|
|
|
910000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE9A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E3F000
|
unkown image
|
page readonly
|
|
|
|
2FE9000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E43000
|
unkown image
|
page readonly
|
|
|
|
66A7BFE000
|
stack
|
page read and write
|
|
|
|
7FF80000
|
unkown image
|
page readonly
|
|
|
|
3084000
|
unkown image
|
page readonly
|
|
|
|
7F382000
|
unkown image
|
page readonly
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
302C000
|
unkown image
|
page readonly
|
|
|
|
AB0000
|
unkown image
|
page readonly
|
|
|
|
A55000
|
stack
|
page execute and read and write
|
|
|
|
AE0000
|
unkown
|
page read and write
|
|
|
|
1020000
|
heap private
|
page read and write
|
|
|
|
B34000
|
unkown
|
page read and write
|
|
|
|
7F5B0000
|
unkown image
|
page readonly
|
|
|
|
1010000
|
unkown image
|
page readonly
|
|
|
|
B80000
|
unkown image
|
page readonly
|
|
|
|
12BE000
|
stack
|
page read and write
|
|
|
|
66A7B79000
|
stack
|
page read and write
|
|
|
|
7FF70000
|
unkown image
|
page readonly
|
|
|
|
2FAE000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE83C000
|
unkown image
|
page readonly
|
|
|
|
D70000
|
unkown
|
page read and write
|
|
|
|
7FF5D1EAA000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1A99000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE9C1000
|
unkown image
|
page readonly
|
|
|
|
4B2F000
|
stack
|
page read and write
|
|
|
|
2FE6000
|
unkown image
|
page readonly
|
|
|
|
301B000
|
unkown image
|
page readonly
|
|
|
|
1EA7CBD0000
|
unkown image
|
page readonly
|
|
|
|
6B0000
|
unkown
|
page read and write
|
|
|
|
3084000
|
unkown image
|
page readonly
|
|
|
|
7FF80000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1EAD000
|
unkown image
|
page readonly
|
|
|
|
C10000
|
unkown image
|
page readonly
|
|
|
|
7FE40000
|
unkown image
|
page readonly
|
|
|
|
2F0000
|
unkown image
|
page readonly
|
|
|
|
7FE40000
|
unkown image
|
page readonly
|
|
|
|
7F5A2000
|
unkown image
|
page readonly
|
|
|
|
2FBF000
|
unkown image
|
page readonly
|
|
|
|
975000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown image
|
page read and write
|
|
|
|
CB0000
|
unkown image
|
page readonly
|
|
|
|
7FAC2000
|
unkown image
|
page readonly
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
1EA7E302000
|
unkown
|
page read and write
|
|
|
|
1050000
|
heap default
|
page read and write
|
|
|
|
1EA7E2E4000
|
unkown
|
page read and write
|
|
|
|
10EE000
|
stack
|
page read and write
|
|
|
|
2276EDD0000
|
unkown image
|
page readonly
|
|
|
|
1EA7D3C1000
|
unkown
|
page read and write
|
|
|
|
2F9E000
|
unkown image
|
page readonly
|
|
|
|
7F380000
|
unkown image
|
page readonly
|
|
|
|
DF0000
|
unkown
|
page read and write
|
|
|
|
309B000
|
unkown image
|
page readonly
|
|
|
|
6A0000
|
unkown image
|
page readonly
|
|
|
|
6450000
|
unkown
|
page read and write
|
|
|
|
D1A000
|
heap default
|
page read and write
|
|
|
|
7FE52000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E01000
|
unkown image
|
page readonly
|
|
|
|
A10000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
30AC000
|
unkown image
|
page readonly
|
|
|
|
107A000
|
unkown
|
page read and write
|
|
|
|
307B000
|
unkown image
|
page readonly
|
|
|
|
DD0000
|
heap default
|
page read and write
|
|
|
|
3A5000
|
stack
|
page execute and read and write
|
|
|
|
301B000
|
unkown image
|
page readonly
|
|
|
|
81C000
|
unkown
|
page read and write
|
|
|
|
1EA7DB60000
|
unkown
|
page read and write
|
|
|
|
30B3000
|
unkown image
|
page readonly
|
|
|
|
B27000
|
unkown
|
page read and write
|
|
|
|
2FF5000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E7B000
|
unkown image
|
page readonly
|
|
|
|
7FE40000
|
unkown image
|
page readonly
|
|
|
|
30AC000
|
unkown image
|
page readonly
|
|
|
|
7F590000
|
unkown image
|
page readonly
|
|
|
|
300D000
|
unkown image
|
page readonly
|
|
|
|
2FBF000
|
unkown image
|
page readonly
|
|
|
|
9B0000
|
heap default
|
page read and write
|
|
|
|
940000
|
heap private
|
page read and write
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
BAA000
|
heap default
|
page read and write
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
30B3000
|
unkown image
|
page readonly
|
|
|
|
7F370000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE9BA000
|
unkown image
|
page readonly
|
|
|
|
2EB1000
|
unkown image
|
page readonly
|
|
|
|
7F5A2000
|
unkown image
|
page readonly
|
|
|
|
7F382000
|
unkown image
|
page readonly
|
|
|
|
6A0000
|
unkown image
|
page readonly
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE12B000
|
unkown image
|
page readonly
|
|
|
|
AB0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE9D1000
|
unkown image
|
page readonly
|
|
|
|
6E940000
|
unkown image
|
page readonly
|
|
|
|
E40000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1EA7000
|
unkown image
|
page readonly
|
|
|
|
1EA7DC70000
|
unkown
|
page read and write
|
|
|
|
7DF5DFBA0000
|
unkown image
|
page readonly
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
AB0000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC95000
|
unkown
|
page read and write
|
|
|
|
2FD6000
|
unkown image
|
page readonly
|
|
|
|
B08000
|
heap default
|
page read and write
|
|
|
|
7F090000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC29000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
7B0000
|
unkown image
|
page readonly
|
|
|
|
2FAE000
|
unkown image
|
page readonly
|
|
|
|
540FCFF000
|
stack
|
page read and write
|
|
|
|
7FB00000
|
unkown image
|
page readonly
|
|
|
|
2FD1000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
7FF72000
|
unkown image
|
page readonly
|
|
|
|
107D000
|
unkown
|
page read and write
|
|
|
|
BD1000
|
unkown
|
page read and write
|
|
|
|
7FF4FE9CA000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
E25000
|
unkown
|
page read and write
|
|
|
|
6E92A000
|
unkown image
|
page readonly
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
6E8F1000
|
unkown image
|
page execute read
|
|
|
|
2FFF000
|
unkown image
|
page readonly
|
|
|
|
307B000
|
unkown image
|
page readonly
|
|
|
|
107D000
|
unkown
|
page read and write
|
|
|
|
1EA7D402000
|
unkown
|
page read and write
|
|
|
|
2276E730000
|
unkown
|
page read and write
|
|
|
|
B18000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
540F5FA000
|
stack
|
page read and write
|
|
|
|
7FF5D1C40000
|
unkown image
|
page readonly
|
|
|
|
D3D000
|
unkown
|
page read and write
|
|
|
|
7FF5D1A9E000
|
unkown image
|
page readonly
|
|
|
|
2276EC50000
|
unkown image
|
page readonly
|
|
|
|
600000
|
unkown image
|
page readonly
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
1EA7DD90000
|
unkown image
|
page readonly
|
|
|
|
7F380000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE7E7000
|
unkown image
|
page readonly
|
|
|
|
3304000
|
heap private
|
page read and write
|
|
|
|
2276E6A0000
|
unkown
|
page read and write
|
|
|
|
2FD6000
|
unkown image
|
page readonly
|
|
|
|
1EA7CCB3000
|
unkown
|
page read and write
|
|
|
|
302C000
|
unkown image
|
page readonly
|
|
|
|
570000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
D41000
|
unkown
|
page read and write
|
|
|
|
2EB1000
|
unkown image
|
page readonly
|
|
|
|
6E93D000
|
unkown image
|
page read and write
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
240000
|
unkown image
|
page readonly
|
|
|
|
301B000
|
unkown image
|
page readonly
|
|
|
|
1130000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
2276F4B0000
|
unkown
|
page read and write
|
|
|
|
2276E580000
|
unkown image
|
page readonly
|
|
|
|
2FE9000
|
unkown image
|
page readonly
|
|
|
|
4A6D000
|
stack
|
page read and write
|
|
|
|
2ED5000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C95000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C4A000
|
unkown image
|
page readonly
|
|
|
|
302C000
|
unkown image
|
page readonly
|
|
|
|
B90000
|
unkown image
|
page readonly
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
1084000
|
unkown
|
page read and write
|
|
|
|
107D000
|
unkown
|
page read and write
|
|
|
|
980000
|
heap private
|
page read and write
|
|
|
|
7F382000
|
unkown image
|
page readonly
|
|
|
|
3016000
|
unkown image
|
page readonly
|
|
|
|
1081000
|
unkown
|
page read and write
|
|
|
|
1EA7E2EE000
|
unkown
|
page read and write
|
|
|
|
2276EA50000
|
unkown image
|
page readonly
|
|
|
|
D3D000
|
unkown
|
page read and write
|
|
|
|
107E000
|
unkown
|
page read and write
|
|
|
|
540F7FF000
|
stack
|
page read and write
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
7FE40000
|
unkown image
|
page readonly
|
|
|
|
B1F000
|
unkown
|
page read and write
|
|
|
|
2276E560000
|
unkown image
|
page readonly
|
|
|
|
309B000
|
unkown image
|
page readonly
|
|
|
|
7F292000
|
unkown image
|
page readonly
|
|
|
|
6E8F1000
|
unkown image
|
page execute read
|
|
|
|
CD0000
|
heap default
|
page read and write
|
|
|
|
2FD1000
|
unkown image
|
page readonly
|
|
|
|
2E0000
|
unkown image
|
page readonly
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
7EA000
|
unkown
|
page read and write
|
|
|
|
920000
|
unkown
|
page read and write
|
|
|
|
2E86000
|
unkown image
|
page readonly
|
|
|
|
990000
|
unkown image
|
page readonly
|
|
|
|
6E8F0000
|
unkown image
|
page readonly
|
|
|
|
1EA7DD80000
|
unkown image
|
page readonly
|
|
|
|
11FD000
|
stack
|
page read and write
|
|
|
|
3016000
|
unkown image
|
page readonly
|
|
|
|
6E93D000
|
unkown image
|
page read and write
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
2F9E000
|
unkown image
|
page readonly
|
|
|
|
308B000
|
unkown image
|
page readonly
|
|
|
|
75C000
|
unkown
|
page read and write
|
|
|
|
3007000
|
unkown image
|
page readonly
|
|
|
|
7FE50000
|
unkown image
|
page readonly
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
3016000
|
unkown image
|
page readonly
|
|
|
|
2276E840000
|
unkown
|
page read and write
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
540F3FB000
|
stack
|
page read and write
|
|
|
|
1EA7E570000
|
unkown
|
page read and write
|
|
|
|
7FB10000
|
unkown image
|
page readonly
|
|
|
|
7FF80000
|
unkown image
|
page readonly
|
|
|
|
3091000
|
unkown image
|
page readonly
|
|
|
|
2FFB000
|
unkown image
|
page readonly
|
|
|
|
A90000
|
heap default
|
page read and write
|
|
|
|
D59000
|
unkown
|
page read and write
|
|
|
|
D80000
|
heap default
|
page read and write
|
|
|
|
302C000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
1EA7E521000
|
unkown
|
page read and write
|
|
|
|
7FF5D1CE9000
|
unkown image
|
page readonly
|
|
|
|
107D000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC6A000
|
unkown
|
page read and write
|
|
|
|
7FE60000
|
unkown image
|
page readonly
|
|
|
|
7FB20000
|
unkown image
|
page readonly
|
|
|
|
540F97E000
|
stack
|
page read and write
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
5D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1F14000
|
unkown image
|
page readonly
|
|
|
|
1EA7E580000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
AFA000
|
heap default
|
page read and write
|
|
|
|
1EA7CED0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1F1A000
|
unkown image
|
page readonly
|
|
|
|
2FD6000
|
unkown image
|
page readonly
|
|
|
|
2276F240000
|
unkown
|
page read and write
|
|
|
|
540F77F000
|
stack
|
page read and write
|
|
|
|
7FD40000
|
unkown image
|
page readonly
|
|
|
|
6E92A000
|
unkown image
|
page readonly
|
|
|
|
730000
|
unkown image
|
page readonly
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1EA7E23F000
|
unkown
|
page read and write
|
|
|
|
7FE42000
|
unkown image
|
page readonly
|
|
|
|
BCD000
|
unkown
|
page read and write
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
D20000
|
unkown image
|
page readonly
|
|
|
|
2FFF000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE7E2000
|
unkown image
|
page readonly
|
|
|
|
307F000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E57000
|
unkown image
|
page readonly
|
|
|
|
B70000
|
heap private
|
page read and write
|
|
|
|
3016000
|
unkown image
|
page readonly
|
|
|
|
D10000
|
unkown image
|
page readonly
|
|
|
|
C10000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1A97000
|
unkown image
|
page readonly
|
|
|
|
7FB02000
|
unkown image
|
page readonly
|
|
|
|
1EA7CC9A000
|
unkown
|
page read and write
|
|
|
|
7DF4DDA60000
|
unkown image
|
page readonly
|
|
|
|
CE0000
|
unkown image
|
page read and write
|
|
|
|
7FF5D1DDF000
|
unkown image
|
page readonly
|
|
|
|
3091000
|
unkown image
|
page readonly
|
|
|
|
2276E6C9000
|
heap private
|
page read and write
|
|
|
|
2276E560000
|
unkown image
|
page readonly
|
|
|
|
7F372000
|
unkown image
|
page readonly
|
|
|
|
D90000
|
unkown image
|
page readonly
|
|
|
|
F90000
|
unkown image
|
page readonly
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
300D000
|
unkown image
|
page readonly
|
|
|
|
32E0000
|
unkown image
|
page readonly
|
|
|
|
1EA7CBF0000
|
heap default
|
page read and write
|
|
|
|
30A6000
|
unkown image
|
page readonly
|
|
|
|
30B3000
|
unkown image
|
page readonly
|
|
|
|
6E93D000
|
unkown image
|
page read and write
|
|
|
|
7FF5D1DA4000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE1E8000
|
unkown image
|
page readonly
|
|
|
|
D3E000
|
unkown
|
page read and write
|
|
|
|
9A0000
|
unkown
|
page read and write
|
|
|
|
30B2000
|
unkown image
|
page readonly
|
|
|
|
BCA000
|
unkown
|
page read and write
|
|
|
|
2FE9000
|
unkown image
|
page readonly
|
|
|
|
7FB10000
|
unkown image
|
page readonly
|
|
|
|
570000
|
unkown image
|
page readonly
|
|
|
|
FB0000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
2276E740000
|
heap default
|
page read and write
|
|
|
|
30A6000
|
unkown image
|
page readonly
|
|
|
|
2276F250000
|
unkown
|
page read and write
|
|
|
|
7F5A2000
|
unkown image
|
page readonly
|
|
|
|
540F4FF000
|
stack
|
page read and write
|
|
|
|
B60000
|
unkown
|
page read and write
|
|
|
|
3084000
|
unkown image
|
page readonly
|
|
|
|
C70000
|
unkown
|
page read and write
|
|
|
|
2FFF000
|
unkown image
|
page readonly
|
|
|
|
BCD000
|
unkown
|
page read and write
|
|
|
|
1120000
|
heap private
|
page read and write
|
|
|
|
30B3000
|
unkown image
|
page readonly
|
|
|
|
2276E720000
|
unkown
|
page read and write
|
|
|
|
7FF5D17AD000
|
unkown image
|
page readonly
|
|
|
|
1EA7D415000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown image
|
page readonly
|
|
|
|
2E86000
|
unkown image
|
page readonly
|
|
|
|
570000
|
unkown image
|
page readonly
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
7FB00000
|
unkown image
|
page readonly
|
|
|
|
7FF82000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1F02000
|
unkown image
|
page readonly
|
|
|
|
32E0000
|
unkown image
|
page readonly
|
|
|
|
7DF50C650000
|
unkown image
|
page readonly
|
|
|
|
307F000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
2FDA000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C3B000
|
unkown image
|
page readonly
|
|
|
|
BCD000
|
unkown
|
page read and write
|
|
|
|
334E000
|
stack
|
page read and write
|
|
|
|
1EA7E194000
|
unkown
|
page read and write
|
|
|
|
6E940000
|
unkown image
|
page readonly
|
|
|
|
1EA7CBC0000
|
unkown image
|
page readonly
|
|
|
|
1EA7CCA5000
|
unkown
|
page read and write
|
|
|
|
7F592000
|
unkown image
|
page readonly
|
|
|
|
1EA7E500000
|
unkown
|
page read and write
|
|
|
|
A50000
|
unkown
|
page read and write
|
|
|
|
1EA7E304000
|
unkown
|
page read and write
|
|
|
|
7F5A0000
|
unkown image
|
page readonly
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE94D000
|
unkown image
|
page readonly
|
|
|
|
AC0000
|
unkown image
|
page readonly
|
|
|
|
A10000
|
unkown image
|
page readonly
|
|
|
|
7B0000
|
unkown image
|
page readonly
|
|
|
|
2FE9000
|
unkown image
|
page readonly
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
D90000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
7F590000
|
unkown image
|
page readonly
|
|
|
|
2276E680000
|
unkown
|
page read and write
|
|
|
|
1EA7E150000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown image
|
page readonly
|
|
|
|
35B0000
|
unkown image
|
page readonly
|
|
|
|
1EA7CBA0000
|
unkown image
|
page readonly
|
|
|
|
7FB12000
|
unkown image
|
page readonly
|
|
|
|
2FD1000
|
unkown image
|
page readonly
|
|
|
|
1071000
|
unkown
|
page read and write
|
|
|
|
7FF4FE8F0000
|
unkown image
|
page readonly
|
|
|
|
AD0000
|
unkown
|
page read and write
|
|
|
|
307B000
|
unkown image
|
page readonly
|
|
|
|
1084000
|
unkown
|
page read and write
|
|
|
|
2FF5000
|
unkown image
|
page readonly
|
|
|
|
1EA7D0D0000
|
unkown image
|
page readonly
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
7FE52000
|
unkown image
|
page readonly
|
|
|
|
2FFF000
|
unkown image
|
page readonly
|
|
|
|
30B8000
|
unkown image
|
page readonly
|
|
|
|
A9A000
|
heap default
|
page read and write
|
|
|
|
66A7D7B000
|
stack
|
page read and write
|
|
|
|
2E82000
|
unkown image
|
page readonly
|
|
|
|
307F000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
B1F000
|
unkown
|
page read and write
|
|
|
|
9D2000
|
unkown
|
page read and write
|
|
|
|
7FF5D1C81000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C02000
|
unkown image
|
page readonly
|
|
|
|
FF0000
|
unkown image
|
page readonly
|
|
|
|
1EA7CB90000
|
heap private
|
page read and write
|
|
|
|
301B000
|
unkown image
|
page readonly
|
|
|
|
7FF70000
|
unkown image
|
page readonly
|
|
|
|
307F000
|
unkown image
|
page readonly
|
|
|
|
1EA7E50E000
|
unkown
|
page read and write
|
|
|
|
6390000
|
unkown image
|
page readonly
|
|
|
|
2FF5000
|
unkown image
|
page readonly
|
|
|
|
30A6000
|
unkown image
|
page readonly
|
|
|
|
CB0000
|
unkown image
|
page readonly
|
|
|
|
7FC60000
|
unkown image
|
page readonly
|
|
|
|
7FF5D16EE000
|
unkown image
|
page readonly
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1DB5000
|
unkown image
|
page readonly
|
|
|
|
1EA7E219000
|
unkown
|
page read and write
|
|
|
|
7FE42000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E39000
|
unkown image
|
page readonly
|
|
|
|
7FC62000
|
unkown image
|
page readonly
|
|
|
|
7F090000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
heap default
|
page read and write
|
|
There are 1216 hidden memdumps, click here to show them.