Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
gunzipped.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\gunzipped.exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck
|
very short file (no magic)
|
dropped
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\bc49718863ee53e026d805ec372039e9_d06ed635-68f6-4e9a-955c-4899f5f57b9a
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\gunzipped.exe
|
"C:\Users\user\Desktop\gunzipped.exe"
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Msbuild.exe
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://jnxxx1.xyz/JRM/w2/fre.php
|
104.21.60.171
|
|
|
|
http://kbfvzoboss.bid/alien/fre.php
|
|
||
|
http://alphastand.win/alien/fre.php
|
|
||
|
http://alphastand.trade/alien/fre.php
|
|
||
|
http://alphastand.top/alien/fre.php
|
|
||
|
https://jnxxx1.xyz/JRM/w2/fre.php
|
|
||
|
http://www.ibsensoftware.com/
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
jnxxx1.xyz
|
104.21.60.171
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
104.21.60.171
|
jnxxx1.xyz
|
United States
|
|
|
|
172.67.198.111
|
unknown
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
275A000
|
unkown
|
page read and write
|
|
|
|
C58000
|
heap default
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
C6F000
|
unkown
|
page read and write
|
|
|
|
1270F000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
295D00F0000
|
heap private
|
page read and write
|
|
|
|
295D0B00000
|
unkown
|
page read and write
|
|
|
|
295D0313000
|
unkown
|
page read and write
|
|
|
|
295D00E0000
|
unkown image
|
page read and write
|
|
|
|
295D0249000
|
unkown
|
page read and write
|
|
|
|
12E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B11CE000
|
unkown image
|
page readonly
|
|
|
|
24386702000
|
unkown
|
page read and write
|
|
|
|
C9B000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
7FF5E1461000
|
unkown image
|
page readonly
|
|
|
|
7FDE4FF000
|
stack
|
page read and write
|
|
|
|
295D106A000
|
unkown
|
page read and write
|
|
|
|
1852D747000
|
unkown
|
page read and write
|
|
|
|
295D0286000
|
unkown
|
page read and write
|
|
|
|
7FF57401E000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1647000
|
unkown image
|
page readonly
|
|
|
|
7FF573F1B000
|
unkown image
|
page readonly
|
|
|
|
7FFA362FC000
|
unkown
|
page execute and read and write
|
|
|
|
AC0000
|
heap private
|
page read and write
|
|
|
|
7FF5B0FAA000
|
unkown image
|
page readonly
|
|
|
|
2680000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
7FF513937000
|
unkown image
|
page readonly
|
|
|
|
C9A000
|
unkown
|
page read and write
|
|
|
|
2CFC000
|
unkown
|
page read and write
|
|
|
|
7FF5137FB000
|
unkown image
|
page readonly
|
|
|
|
1B180000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
7FF5B1272000
|
unkown image
|
page readonly
|
|
|
|
243865E0000
|
heap default
|
page read and write
|
|
|
|
7FF5E11D6000
|
unkown image
|
page readonly
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
12D0000
|
unkown image
|
page readonly
|
|
|
|
7FF513864000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
295D0B62000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1191000
|
unkown image
|
page readonly
|
|
|
|
293E000
|
unkown
|
page read and write
|
|
|
|
7FFA362C0000
|
unkown
|
page read and write
|
|
|
|
1852D9A0000
|
unkown image
|
page readonly
|
|
|
|
2750000
|
unkown
|
page read and write
|
|
|
|
7FF573F84000
|
unkown image
|
page readonly
|
|
|
|
93A000
|
heap default
|
page read and write
|
|
|
|
1852D751000
|
unkown
|
page read and write
|
|
|
|
22F8D108000
|
unkown
|
page read and write
|
|
|
|
7FF573E71000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
A47000
|
unkown
|
page read and write
|
|
|
|
22F8D02A000
|
unkown
|
page read and write
|
|
|
|
7FF5E1689000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown
|
page read and write
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
126A1000
|
unkown
|
page read and write
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
2680000
|
unkown
|
page read and write
|
|
|
|
AB0000
|
unkown
|
page read and write
|
|
|
|
9CC000
|
unkown
|
page read and write
|
|
|
|
FDB67FB000
|
stack
|
page read and write
|
|
|
|
295D01F0000
|
unkown
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
292D000
|
unkown
|
page read and write
|
|
|
|
7FF5B133E000
|
unkown image
|
page readonly
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
2AD2000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
7FF57401A000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6782000
|
unkown image
|
page readonly
|
|
|
|
24386570000
|
unkown image
|
page read and write
|
|
|
|
C95000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
7FF5E11D0000
|
unkown image
|
page readonly
|
|
|
|
295D0B68000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E43000
|
unkown image
|
page readonly
|
|
|
|
2712000
|
unkown
|
page read and write
|
|
|
|
7FF533EF3000
|
unkown image
|
page readonly
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
C96000
|
unkown
|
page read and write
|
|
|
|
7FF5AA990000
|
unkown image
|
page readonly
|
|
|
|
7FF5B11B1000
|
unkown image
|
page readonly
|
|
|
|
7DF5C6460000
|
unkown image
|
page readonly
|
|
|
|
7FF574096000
|
unkown image
|
page readonly
|
|
|
|
7FF5B13C2000
|
unkown image
|
page readonly
|
|
|
|
7FFA362B4000
|
unkown
|
page read and write
|
|
|
|
CD0000
|
unkown image
|
page readonly
|
|
|
|
C9B000
|
unkown
|
page read and write
|
|
|
|
28F8000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
7FF5AA9A0000
|
unkown image
|
page readonly
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
1852D660000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
439C477000
|
stack
|
page read and write
|
|
|
|
1B030000
|
unkown
|
page read and write
|
|
|
|
C9E000
|
unkown
|
page read and write
|
|
|
|
570000
|
unkown image
|
page readonly
|
|
|
|
2B87000
|
unkown
|
page read and write
|
|
|
|
7DF528A90000
|
unkown image
|
page readonly
|
|
|
|
7FFA363C5000
|
unkown
|
page read and write
|
|
|
|
295D0B65000
|
unkown
|
page read and write
|
|
|
|
295D1002000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
439C07B000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
22F8D113000
|
unkown
|
page read and write
|
|
|
|
7DF5F6780000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1104000
|
unkown image
|
page readonly
|
|
|
|
295D0BA5000
|
unkown
|
page read and write
|
|
|
|
7FF573F6D000
|
unkown image
|
page readonly
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
7FFA36470000
|
unkown
|
page read and write
|
|
|
|
7FF574112000
|
unkown image
|
page readonly
|
|
|
|
C6F000
|
unkown
|
page read and write
|
|
|
|
988000
|
heap default
|
page read and write
|
|
|
|
975857B000
|
stack
|
page read and write
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
7FF5E14B3000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1349000
|
unkown image
|
page readonly
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
7FF5E14D1000
|
unkown image
|
page readonly
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
7FF574025000
|
unkown image
|
page readonly
|
|
|
|
2438663C000
|
unkown
|
page read and write
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
7DF4C4310000
|
unkown image
|
page readonly
|
|
|
|
7FFA363D0000
|
unkown
|
page execute and read and write
|
|
|
|
7DF549720000
|
unkown image
|
page readonly
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
295D0B95000
|
unkown
|
page read and write
|
|
|
|
7DF549720000
|
unkown image
|
page readonly
|
|
|
|
7FF51397D000
|
unkown image
|
page readonly
|
|
|
|
2BBA000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
2AB8000
|
unkown
|
page read and write
|
|
|
|
AB0000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
heap default
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
295D1002000
|
unkown
|
page read and write
|
|
|
|
7FF513677000
|
unkown image
|
page readonly
|
|
|
|
2AE3000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
2911000
|
unkown
|
page read and write
|
|
|
|
7FF5B13C1000
|
unkown image
|
page readonly
|
|
|
|
286E000
|
stack
|
page read and write
|
|
|
|
7DF528A90000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
2438664E000
|
unkown
|
page read and write
|
|
|
|
28FE000
|
unkown
|
page read and write
|
|
|
|
7FF573859000
|
unkown image
|
page readonly
|
|
|
|
7FF57400C000
|
unkown image
|
page readonly
|
|
|
|
7DF5891A2000
|
unkown image
|
page readonly
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
7FF573F8C000
|
unkown image
|
page readonly
|
|
|
|
22F8D06A000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
295D0BAF000
|
unkown
|
page read and write
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
1852D550000
|
unkown image
|
page readonly
|
|
|
|
22F8CFB0000
|
unkown
|
page read and write
|
|
|
|
C96000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
2BA0D44B000
|
unkown
|
page read and write
|
|
|
|
295D0B68000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
8FB000
|
unkown
|
page read and write
|
|
|
|
949000
|
heap default
|
page read and write
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
7FF5E16FA000
|
unkown image
|
page readonly
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
22F8CF10000
|
unkown image
|
page read and write
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
2AAD000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
295D0253000
|
unkown
|
page read and write
|
|
|
|
243865C0000
|
unkown image
|
page readonly
|
|
|
|
295D0120000
|
unkown image
|
page readonly
|
|
|
|
450000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1346000
|
unkown image
|
page readonly
|
|
|
|
24386600000
|
unkown
|
page read and write
|
|
|
|
24386713000
|
unkown
|
page read and write
|
|
|
|
7FDE6FE000
|
stack
|
page read and write
|
|
|
|
7FF5138FA000
|
unkown image
|
page readonly
|
|
|
|
1852D680000
|
unkown
|
page read and write
|
|
|
|
2AA3000
|
unkown
|
page read and write
|
|
|
|
2870000
|
unkown
|
page read and write
|
|
|
|
7FF513751000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1314000
|
unkown image
|
page readonly
|
|
|
|
2BA0D380000
|
unkown image
|
page readonly
|
|
|
|
2AED000
|
unkown
|
page read and write
|
|
|
|
7DF5891A0000
|
unkown image
|
page readonly
|
|
|
|
295D0130000
|
unkown image
|
page readonly
|
|
|
|
295D0B78000
|
unkown
|
page read and write
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
7FF573F1E000
|
unkown image
|
page readonly
|
|
|
|
22F8D013000
|
unkown
|
page read and write
|
|
|
|
2A9A000
|
unkown
|
page read and write
|
|
|
|
7FF5B0E96000
|
unkown image
|
page readonly
|
|
|
|
2727000
|
unkown
|
page read and write
|
|
|
|
7FF5B1283000
|
unkown image
|
page readonly
|
|
|
|
1852D6C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E163C000
|
unkown image
|
page readonly
|
|
|
|
24386590000
|
unkown image
|
page readonly
|
|
|
|
22F8D03C000
|
unkown
|
page read and write
|
|
|
|
A34000
|
unkown
|
page read and write
|
|
|
|
22F8D08C000
|
unkown
|
page read and write
|
|
|
|
7FF5B12DB000
|
unkown image
|
page readonly
|
|
|
|
7FF51390B000
|
unkown image
|
page readonly
|
|
|
|
295D0B5B000
|
unkown
|
page read and write
|
|
|
|
7FF5139EA000
|
unkown image
|
page readonly
|
|
|
|
7DF589190000
|
unkown image
|
page readonly
|
|
|
|
7FF57400A000
|
unkown image
|
page readonly
|
|
|
|
2AC9000
|
unkown
|
page read and write
|
|
|
|
A48000
|
unkown
|
page read and write
|
|
|
|
7FF5345AB000
|
unkown image
|
page readonly
|
|
|
|
2924000
|
unkown
|
page read and write
|
|
|
|
22F8D2D0000
|
unkown image
|
page readonly
|
|
|
|
295D1000000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
7DF5F67A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AA9A2000
|
unkown image
|
page readonly
|
|
|
|
295D0308000
|
unkown
|
page read and write
|
|
|
|
A30000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
C71000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
97582FE000
|
stack
|
page read and write
|
|
|
|
7FF5139F2000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
295D0B12000
|
unkown
|
page read and write
|
|
|
|
BD3727C000
|
unkown
|
page read and write
|
|
|
|
7FF5B12FF000
|
unkown image
|
page readonly
|
|
|
|
1B061000
|
unkown
|
page read and write
|
|
|
|
2ADC000
|
unkown
|
page read and write
|
|
|
|
1150000
|
unkown image
|
page readonly
|
|
|
|
2BA0D390000
|
unkown image
|
page readonly
|
|
|
|
7FF5E165A000
|
unkown image
|
page readonly
|
|
|
|
439C17E000
|
stack
|
page read and write
|
|
|
|
1B25E000
|
stack
|
page read and write
|
|
|
|
12895000
|
unkown
|
page read and write
|
|
|
|
BD376F7000
|
stack
|
page read and write
|
|
|
|
295D024F000
|
unkown
|
page read and write
|
|
|
|
7FF5345A5000
|
unkown image
|
page readonly
|
|
|
|
295D0B6C000
|
unkown
|
page read and write
|
|
|
|
1AFD0000
|
unkown
|
page read and write
|
|
|
|
7DF549730000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1338000
|
unkown image
|
page readonly
|
|
|
|
C91000
|
unkown
|
page read and write
|
|
|
|
7FF5B13B4000
|
unkown image
|
page readonly
|
|
|
|
2AE0000
|
unkown
|
page read and write
|
|
|
|
7FF5137C1000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1047000
|
unkown image
|
page readonly
|
|
|
|
7FF51392F000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
295D0BCF000
|
unkown
|
page read and write
|
|
|
|
2B85000
|
unkown
|
page read and write
|
|
|
|
7FF5E1615000
|
unkown image
|
page readonly
|
|
|
|
7FF5139F1000
|
unkown image
|
page readonly
|
|
|
|
7FFA36450000
|
unkown
|
page execute and read and write
|
|
|
|
7DF528A80000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
2705000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
295D0B91000
|
unkown
|
page read and write
|
|
|
|
98E000
|
heap default
|
page read and write
|
|
|
|
7FFA36386000
|
unkown
|
page execute and read and write
|
|
|
|
7DF528A70000
|
unkown image
|
page readonly
|
|
|
|
41A000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1627000
|
unkown image
|
page readonly
|
|
|
|
295D0B17000
|
unkown
|
page read and write
|
|
|
|
7FF5B13BA000
|
unkown image
|
page readonly
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
295D0B9F000
|
unkown
|
page read and write
|
|
|
|
975837E000
|
stack
|
page read and write
|
|
|
|
2680000
|
unkown
|
page read and write
|
|
|
|
7FF574057000
|
unkown image
|
page readonly
|
|
|
|
295D0BBE000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
7FF574064000
|
unkown image
|
page readonly
|
|
|
|
CCE000
|
stack
|
page read and write
|
|
|
|
AC5000
|
heap private
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
295D02A5000
|
unkown
|
page read and write
|
|
|
|
1852D72B000
|
heap default
|
page read and write
|
|
|
|
2723000
|
unkown
|
page read and write
|
|
|
|
A20000
|
unkown
|
page read and write
|
|
|
|
7FF5E163F000
|
unkown image
|
page readonly
|
|
|
|
295D02F4000
|
unkown
|
page read and write
|
|
|
|
274D000
|
unkown
|
page read and write
|
|
|
|
256F000
|
stack
|
page read and write
|
|
|
|
2CEF000
|
unkown
|
page read and write
|
|
|
|
1AA1D000
|
unkown
|
page read and write
|
|
|
|
7FF4A8860000
|
unkown image
|
page readonly
|
|
|
|
C97000
|
unkown
|
page read and write
|
|
|
|
7FF5B12BC000
|
unkown image
|
page readonly
|
|
|
|
273F000
|
unkown
|
page read and write
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
7DF549712000
|
unkown image
|
page readonly
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
7FF5E160A000
|
unkown image
|
page readonly
|
|
|
|
295D0B95000
|
unkown
|
page read and write
|
|
|
|
7FFA362B0000
|
unkown
|
page read and write
|
|
|
|
295D0B91000
|
unkown
|
page read and write
|
|
|
|
7FF5345F4000
|
unkown image
|
page readonly
|
|
|
|
439C37B000
|
stack
|
page read and write
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
C50000
|
heap default
|
page read and write
|
|
|
|
243868D0000
|
unkown image
|
page readonly
|
|
|
|
CB1000
|
unkown
|
page read and write
|
|
|
|
7DF5891A2000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
2716000
|
unkown
|
page read and write
|
|
|
|
7FDE67A000
|
stack
|
page read and write
|
|
|
|
295D0B63000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
3F2000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
295D0930000
|
unkown image
|
page write copy
|
|
|
|
2CEF000
|
stack
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
7FDE57F000
|
stack
|
page read and write
|
|
|
|
7FF5345A0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF5E1702000
|
unkown image
|
page readonly
|
|
|
|
7FF5345FE000
|
unkown image
|
page readonly
|
|
|
|
4A0000
|
unkown
|
page execute and read and write
|
|
|
|
1852D758000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
1852D75E000
|
unkown
|
page read and write
|
|
|
|
1852D9D0000
|
unkown image
|
page readonly
|
|
|
|
22F8D802000
|
unkown
|
page read and write
|
|
|
|
FDB697B000
|
stack
|
page read and write
|
|
|
|
295D0B95000
|
unkown
|
page read and write
|
|
|
|
7FF5E155D000
|
unkown image
|
page readonly
|
|
|
|
C9F000
|
unkown
|
page read and write
|
|
|
|
C9A000
|
unkown
|
page read and write
|
|
|
|
1B050000
|
heap private
|
page execute and read and write
|
|
|
|
7FF5B1121000
|
unkown image
|
page readonly
|
|
|
|
2BA0D6D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E160E000
|
unkown image
|
page readonly
|
|
|
|
22F8D080000
|
unkown
|
page read and write
|
|
|
|
1852D550000
|
unkown image
|
page readonly
|
|
|
|
7FF57409D000
|
unkown image
|
page readonly
|
|
|
|
295D0100000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
24386613000
|
unkown
|
page read and write
|
|
|
|
C9A000
|
unkown
|
page read and write
|
|
|
|
295D024D000
|
unkown
|
page read and write
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
2710000
|
unkown
|
page read and write
|
|
|
|
6A4000
|
unkown
|
page read and write
|
|
|
|
28A0000
|
heap private
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
7FF534692000
|
unkown image
|
page readonly
|
|
|
|
439C27B000
|
stack
|
page read and write
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
295D0B63000
|
unkown
|
page read and write
|
|
|
|
2BA0D3E0000
|
unkown
|
page read and write
|
|
|
|
2AA5000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
295D0A02000
|
unkown
|
page read and write
|
|
|
|
C96000
|
unkown
|
page read and write
|
|
|
|
7FFA362CB000
|
unkown
|
page execute and read and write
|
|
|
|
2CF0000
|
stack
|
page read and write
|
|
|
|
295D0980000
|
unkown image
|
page read and write
|
|
|
|
7FF5AA9B0000
|
unkown image
|
page readonly
|
|
|
|
7FF573BE6000
|
unkown image
|
page readonly
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
7DF5C6460000
|
unkown image
|
page readonly
|
|
|
|
295D0B6C000
|
unkown
|
page read and write
|
|
|
|
295D04D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1223000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
274B000
|
unkown
|
page read and write
|
|
|
|
7FF534684000
|
unkown image
|
page readonly
|
|
|
|
295D0250000
|
unkown
|
page read and write
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
295D0B9F000
|
unkown
|
page read and write
|
|
|
|
295D1002000
|
unkown
|
page read and write
|
|
|
|
295D0150000
|
heap default
|
page read and write
|
|
|
|
439C57E000
|
stack
|
page read and write
|
|
|
|
7FF5137E1000
|
unkown image
|
page readonly
|
|
|
|
7DF528A80000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
AC0000
|
unkown image
|
page readonly
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown image
|
page read and write
|
|
|
|
7FF5B0DAE000
|
unkown image
|
page readonly
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
7DF5F6790000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0C27000
|
unkown image
|
page readonly
|
|
|
|
7DF4F4650000
|
unkown image
|
page readonly
|
|
|
|
C9F000
|
unkown
|
page read and write
|
|
|
|
439C0FE000
|
stack
|
page read and write
|
|
|
|
2BA0D400000
|
unkown
|
page read and write
|
|
|
|
7FF5E1563000
|
unkown image
|
page readonly
|
|
|
|
295D0316000
|
unkown
|
page read and write
|
|
|
|
1852D820000
|
unkown image
|
page readonly
|
|
|
|
7FF51395F000
|
unkown image
|
page readonly
|
|
|
|
2BA0D500000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0B09000
|
unkown image
|
page readonly
|
|
|
|
6A8000
|
unkown
|
page read and write
|
|
|
|
7DF528A72000
|
unkown image
|
page readonly
|
|
|
|
1852D757000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
CA0000
|
unkown
|
page read and write
|
|
|
|
7FF57408E000
|
unkown image
|
page readonly
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
1AFE0000
|
unkown
|
page read and write
|
|
|
|
1B085000
|
unkown
|
page read and write
|
|
|
|
295D02D6000
|
unkown
|
page read and write
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
7FF51394A000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B0E32000
|
unkown image
|
page readonly
|
|
|
|
C9F000
|
unkown
|
page read and write
|
|
|
|
1852D6B0000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
7FDE5F9000
|
stack
|
page read and write
|
|
|
|
7FF5B1050000
|
unkown image
|
page readonly
|
|
|
|
7FFA36460000
|
unkown
|
page read and write
|
|
|
|
2BA0D470000
|
unkown
|
page read and write
|
|
|
|
295D0180000
|
unkown
|
page read and write
|
|
|
|
295D01F0000
|
unkown
|
page read and write
|
|
|
|
22F8CF30000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
2CE9000
|
unkown
|
page read and write
|
|
|
|
7FF573DA0000
|
unkown image
|
page readonly
|
|
|
|
295D0B9F000
|
unkown
|
page read and write
|
|
|
|
291A000
|
unkown
|
page read and write
|
|
|
|
95C000
|
heap default
|
page read and write
|
|
|
|
273A000
|
unkown
|
page read and write
|
|
|
|
2BA0D502000
|
unkown
|
page read and write
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
2CE0000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
7FFA362AD000
|
unkown
|
page execute and read and write
|
|
|
|
7DF549722000
|
unkown image
|
page readonly
|
|
|
|
7FF5AA9A0000
|
unkown image
|
page readonly
|
|
|
|
295D0B65000
|
unkown
|
page read and write
|
|
|
|
7FF5B0E90000
|
unkown image
|
page readonly
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
295D0B91000
|
unkown
|
page read and write
|
|
|
|
7FF5B1111000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1390000
|
unkown image
|
page readonly
|
|
|
|
22F8D102000
|
unkown
|
page read and write
|
|
|
|
22F8D650000
|
unkown image
|
page readonly
|
|
|
|
2438666E000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
7FF513680000
|
unkown image
|
page readonly
|
|
|
|
2D00000
|
stack
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
BD379FC000
|
stack
|
page read and write
|
|
|
|
24386683000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
BD372FE000
|
stack
|
page read and write
|
|
|
|
295D0B9F000
|
unkown
|
page read and write
|
|
|
|
AAC000
|
unkown
|
page read and write
|
|
|
|
1B060000
|
unkown
|
page read and write
|
|
|
|
7FF5B1270000
|
unkown image
|
page readonly
|
|
|
|
295D0850000
|
unkown image
|
page readonly
|
|
|
|
7FF4A87B0000
|
unkown
|
page execute and read and write
|
|
|
|
A61000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
295D0B64000
|
unkown
|
page read and write
|
|
|
|
7DF5F6792000
|
unkown image
|
page readonly
|
|
|
|
295D1002000
|
unkown
|
page read and write
|
|
|
|
7FF5139E4000
|
unkown image
|
page readonly
|
|
|
|
2CCE000
|
unkown
|
page read and write
|
|
|
|
7FFA362CD000
|
unkown
|
page execute and read and write
|
|
|
|
440000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
295D0B96000
|
unkown
|
page read and write
|
|
|
|
2940000
|
unkown
|
page read and write
|
|
|
|
295D026F000
|
unkown
|
page read and write
|
|
|
|
7FF574037000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
2749000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
2931000
|
unkown
|
page read and write
|
|
|
|
24386708000
|
unkown
|
page read and write
|
|
|
|
7FF5E1574000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown image
|
page read and write
|
|
|
|
C96000
|
unkown
|
page read and write
|
|
|
|
1AC1D000
|
stack
|
page read and write
|
|
|
|
7FF574088000
|
unkown image
|
page readonly
|
|
|
|
7FF5345CF000
|
unkown image
|
page readonly
|
|
|
|
7FF5345EA000
|
unkown image
|
page readonly
|
|
|
|
7DF549730000
|
unkown image
|
page readonly
|
|
|
|
2BA0D42A000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
7FF574074000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
7FF5B12D0000
|
unkown image
|
page readonly
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
1A6D0000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C23000
|
unkown image
|
page readonly
|
|
|
|
295D0256000
|
unkown
|
page read and write
|
|
|
|
C9A000
|
unkown
|
page read and write
|
|
|
|
BD3737E000
|
stack
|
page read and write
|
|
|
|
22F8CF60000
|
unkown image
|
page readonly
|
|
|
|
512000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
BCE000
|
stack
|
page read and write
|
|
|
|
295D0302000
|
unkown
|
page read and write
|
|
|
|
7DF5F6790000
|
unkown image
|
page readonly
|
|
|
|
2946000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
2B81000
|
unkown
|
page read and write
|
|
|
|
22F8D04D000
|
unkown
|
page read and write
|
|
|
|
1852D530000
|
unkown image
|
page read and write
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
295D0B78000
|
unkown
|
page read and write
|
|
|
|
C9A000
|
unkown
|
page read and write
|
|
|
|
7DF549710000
|
unkown image
|
page readonly
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
7DF5C6440000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
7FFA362BD000
|
unkown
|
page execute and read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
7FF5E1387000
|
unkown image
|
page readonly
|
|
|
|
1B077000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
C96000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
129B6000
|
unkown
|
page read and write
|
|
|
|
1B020000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
2920000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
7FFA36350000
|
unkown
|
page read and write
|
|
|
|
7FF5E14F1000
|
unkown image
|
page readonly
|
|
|
|
24386580000
|
heap private
|
page read and write
|
|
|
|
7FF513853000
|
unkown image
|
page readonly
|
|
|
|
7FF5345D8000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0B03000
|
unkown image
|
page readonly
|
|
|
|
7FF573EC3000
|
unkown image
|
page readonly
|
|
|
|
A50000
|
heap private
|
page execute and read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
2BA0D360000
|
unkown image
|
page readonly
|
|
|
|
7FF5E166F000
|
unkown image
|
page readonly
|
|
|
|
FFBA0000
|
unkown image
|
page readonly
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
2922000
|
unkown
|
page read and write
|
|
|
|
8F0000
|
heap private
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
291C000
|
unkown
|
page read and write
|
|
|
|
7FF534691000
|
unkown image
|
page readonly
|
|
|
|
2718000
|
unkown
|
page read and write
|
|
|
|
7DF5891B0000
|
unkown image
|
page readonly
|
|
|
|
2BA0D47C000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
295D0B5E000
|
unkown
|
page read and write
|
|
|
|
266F000
|
stack
|
page read and write
|
|
|
|
2B92000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
C98000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
2ABF000
|
unkown
|
page read and write
|
|
|
|
295D1002000
|
unkown
|
page read and write
|
|
|
|
2BA0DC02000
|
unkown
|
page read and write
|
|
|
|
2CDE000
|
unkown
|
page read and write
|
|
|
|
7FFA36360000
|
unkown
|
page execute and read and write
|
|
|
|
C98000
|
unkown
|
page read and write
|
|
|
|
7FF5B12E7000
|
unkown image
|
page readonly
|
|
|
|
24386653000
|
unkown
|
page read and write
|
|
|
|
2BA0D49A000
|
unkown
|
page read and write
|
|
|
|
2936000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
C94000
|
unkown
|
page read and write
|
|
|
|
7DF5C6452000
|
unkown image
|
page readonly
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1324000
|
unkown image
|
page readonly
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
24386647000
|
unkown
|
page read and write
|
|
|
|
7FF57404C000
|
unkown image
|
page readonly
|
|
|
|
295D0200000
|
unkown
|
page read and write
|
|
|
|
1852D9C5000
|
heap private
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
7FF513944000
|
unkown image
|
page readonly
|
|
|
|
7FF51384D000
|
unkown image
|
page readonly
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
24386D40000
|
unkown
|
page read and write
|
|
|
|
FDB667E000
|
stack
|
page read and write
|
|
|
|
C91000
|
unkown
|
page read and write
|
|
|
|
295D0B66000
|
unkown
|
page read and write
|
|
|
|
295D0B9F000
|
unkown
|
page read and write
|
|
|
|
7FF5B12CE000
|
unkown image
|
page readonly
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
295D0B5B000
|
unkown
|
page read and write
|
|
|
|
2690000
|
heap private
|
page read and write
|
|
|
|
295D0B73000
|
unkown
|
page read and write
|
|
|
|
1279D000
|
unkown
|
page read and write
|
|
|
|
7FF5B12AF000
|
unkown image
|
page readonly
|
|
|
|
7FF534608000
|
unkown image
|
page readonly
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
7FF573BE0000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
7FF513976000
|
unkown image
|
page readonly
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E1610000
|
unkown image
|
page readonly
|
|
|
|
960000
|
heap default
|
page read and write
|
|
|
|
1B45F000
|
stack
|
page read and write
|
|
|
|
2BA0D413000
|
unkown
|
page read and write
|
|
|
|
920000
|
heap default
|
page read and write
|
|
|
|
2BA7000
|
unkown
|
page read and write
|
|
|
|
22F8CF80000
|
heap default
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
7FF5B121D000
|
unkown image
|
page readonly
|
|
|
|
2736000
|
unkown
|
page read and write
|
|
|
|
7DF426940000
|
unkown image
|
page readonly
|
|
|
|
7FF5E15FA000
|
unkown image
|
page readonly
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
1852D720000
|
heap default
|
page read and write
|
|
|
|
7DF5C6442000
|
unkown image
|
page readonly
|
|
|
|
2ACF000
|
unkown
|
page read and write
|
|
|
|
7FF5B132F000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
7FF5B1096000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
C96000
|
unkown
|
page read and write
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
CA0000
|
unkown
|
page read and write
|
|
|
|
295D0B81000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
C95000
|
unkown
|
page read and write
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
295D0B61000
|
unkown
|
page read and write
|
|
|
|
22F8CF20000
|
heap private
|
page read and write
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
7FF573EE1000
|
unkown image
|
page readonly
|
|
|
|
97586F7000
|
stack
|
page read and write
|
|
|
|
7FF5134D5000
|
unkown image
|
page readonly
|
|
|
|
2CF3000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
7FF574111000
|
unkown image
|
page readonly
|
|
|
|
7FF5B11CB000
|
unkown image
|
page readonly
|
|
|
|
2909000
|
unkown
|
page read and write
|
|
|
|
290D000
|
unkown
|
page read and write
|
|
|
|
7FF513900000
|
unkown image
|
page readonly
|
|
|
|
295D1063000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
C9A000
|
unkown
|
page read and write
|
|
|
|
290B000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
7FFA362A4000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page execute and read and write
|
|
|
|
295D0B7D000
|
unkown
|
page read and write
|
|
|
|
2AA9000
|
unkown
|
page read and write
|
|
|
|
7FF5B10D0000
|
unkown image
|
page readonly
|
|
|
|
7FFA363CB000
|
unkown
|
page read and write
|
|
|
|
7FF5137A3000
|
unkown image
|
page readonly
|
|
|
|
295D0254000
|
unkown
|
page read and write
|
|
|
|
295D0160000
|
unkown image
|
page readonly
|
|
|
|
7DF5F6792000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
7FF574099000
|
unkown image
|
page readonly
|
|
|
|
1852D9C0000
|
heap private
|
page read and write
|
|
|
|
2BA0D340000
|
unkown image
|
page read and write
|
|
|
|
7FF5B123C000
|
unkown image
|
page readonly
|
|
|
|
295D0259000
|
unkown
|
page read and write
|
|
|
|
2D00000
|
unkown
|
page read and write
|
|
|
|
7FF57410A000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
C90000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
A4B000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
2BCB000
|
unkown
|
page read and write
|
|
|
|
F50000
|
unkown image
|
page readonly
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
1852D751000
|
unkown
|
page read and write
|
|
|
|
2BA0D3B0000
|
heap default
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
1852D736000
|
heap default
|
page read and write
|
|
|
|
7DF4475E0000
|
unkown image
|
page readonly
|
|
|
|
BD375FB000
|
stack
|
page read and write
|
|
|
|
975827B000
|
unkown
|
page read and write
|
|
|
|
7FF5E1686000
|
unkown image
|
page readonly
|
|
|
|
12933000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
FDB6C7F000
|
stack
|
page read and write
|
|
|
|
2D0D000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
ED0000
|
unkown image
|
page readonly
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
7FF5B1307000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
7FF57407F000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1678000
|
unkown image
|
page readonly
|
|
|
|
282E000
|
stack
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
22F8D4D0000
|
unkown image
|
page readonly
|
|
|
|
295D0B7D000
|
unkown
|
page read and write
|
|
|
|
7FF5B12BA000
|
unkown image
|
page readonly
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
22F8D000000
|
unkown
|
page read and write
|
|
|
|
7FF5E168D000
|
unkown image
|
page readonly
|
|
|
|
295D0B5D000
|
unkown
|
page read and write
|
|
|
|
7DF528A82000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
1B010000
|
unkown
|
page read and write
|
|
|
|
127C4000
|
unkown
|
page read and write
|
|
|
|
243865F0000
|
unkown image
|
page readonly
|
|
|
|
2714000
|
unkown
|
page read and write
|
|
|
|
24386C50000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
295D0B6E000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
1B061000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
7FF5AA9A2000
|
unkown image
|
page readonly
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
C98000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
2438664B000
|
unkown
|
page read and write
|
|
|
|
7FF5E157C000
|
unkown image
|
page readonly
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
7DF549722000
|
unkown image
|
page readonly
|
|
|
|
295D0B49000
|
unkown
|
page read and write
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
BD377FE000
|
stack
|
page read and write
|
|
|
|
2BBD000
|
unkown
|
page read and write
|
|
|
|
7DF528A82000
|
unkown image
|
page readonly
|
|
|
|
C91000
|
unkown
|
page read and write
|
|
|
|
2BA0D8D0000
|
unkown image
|
page readonly
|
|
|
|
7FF51396E000
|
unkown image
|
page readonly
|
|
|
|
97588FF000
|
stack
|
page read and write
|
|
|
|
295D0258000
|
unkown
|
page read and write
|
|
|
|
92C000
|
heap default
|
page read and write
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
7FF5B12CA000
|
unkown image
|
page readonly
|
|
|
|
97587FD000
|
stack
|
page read and write
|
|
|
|
7FF5E11E5000
|
unkown image
|
page readonly
|
|
|
|
7DF487060000
|
unkown image
|
page readonly
|
|
|
|
CB2000
|
unkown
|
page read and write
|
|
|
|
295D01F0000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
2933000
|
unkown
|
page read and write
|
|
|
|
7FF5B0EE5000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
7FF5B12A4000
|
unkown image
|
page readonly
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
1852D731000
|
unkown
|
page read and write
|
|
|
|
5DD000
|
unkown
|
page read and write
|
|
|
|
7FF5138FE000
|
unkown image
|
page readonly
|
|
|
|
7FF5345E4000
|
unkown image
|
page readonly
|
|
|
|
8F5000
|
heap private
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
BD374FE000
|
stack
|
page read and write
|
|
|
|
7FF5B129F000
|
unkown image
|
page readonly
|
|
|
|
295D0BBE000
|
unkown
|
page read and write
|
|
|
|
7FF574104000
|
unkown image
|
page readonly
|
|
|
|
7FF573BF5000
|
unkown image
|
page readonly
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
7FF53460E000
|
unkown image
|
page readonly
|
|
|
|
295D0B7A000
|
unkown
|
page read and write
|
|
|
|
C96000
|
unkown
|
page read and write
|
|
|
|
295D0BAF000
|
unkown
|
page read and write
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
A80000
|
heap private
|
page read and write
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
7FDE47A000
|
unkown
|
page read and write
|
|
|
|
22F8D100000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
41A000
|
unkown image
|
page readonly
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
295D02BD000
|
unkown
|
page read and write
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E16F4000
|
unkown image
|
page readonly
|
|
|
|
2AA7000
|
unkown
|
page read and write
|
|
|
|
295D06D0000
|
unkown image
|
page readonly
|
|
|
|
295D0B14000
|
unkown
|
page read and write
|
|
|
|
26F7000
|
unkown
|
page read and write
|
|
|
|
7FF533EF7000
|
unkown image
|
page readonly
|
|
|
|
295D024A000
|
unkown
|
page read and write
|
|
|
|
7FF5B117A000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
295D028D000
|
unkown
|
page read and write
|
|
|
|
FDB66FE000
|
stack
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
7FF5B0EE7000
|
unkown image
|
page readonly
|
|
|
|
FDB6B7E000
|
stack
|
page read and write
|
|
|
|
295D0B73000
|
unkown
|
page read and write
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
AD5000
|
heap default
|
page read and write
|
|
|
|
7FF5E0E49000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
C91000
|
unkown
|
page read and write
|
|
|
|
C98000
|
unkown
|
page read and write
|
|
|
|
295D1002000
|
unkown
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
7FF5B11D3000
|
unkown image
|
page readonly
|
|
|
|
7DF5C6450000
|
unkown image
|
page readonly
|
|
|
|
295D02EB000
|
unkown
|
page read and write
|
|
|
|
1AFD0000
|
unkown
|
page read and write
|
|
|
|
295D0B9F000
|
unkown
|
page read and write
|
|
|
|
7FF573F73000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
1050000
|
unkown image
|
page readonly
|
|
|
|
2CD8000
|
unkown
|
page read and write
|
|
|
|
1852D751000
|
unkown
|
page read and write
|
|
|
|
AB0000
|
unkown
|
page read and write
|
|
|
|
7FF5E1664000
|
unkown image
|
page readonly
|
|
|
|
2BA0D360000
|
unkown image
|
page readonly
|
|
|
|
22F8D053000
|
unkown
|
page read and write
|
|
|
|
7FF5E150E000
|
unkown image
|
page readonly
|
|
|
|
295D0B6E000
|
unkown
|
page read and write
|
|
|
|
295D0B73000
|
unkown
|
page read and write
|
|
|
|
2AB6000
|
unkown
|
page read and write
|
|
|
|
295D0B6C000
|
unkown
|
page read and write
|
|
|
|
28F6000
|
unkown
|
page read and write
|
|
|
|
272E000
|
stack
|
page read and write
|
|
|
|
295D0BB0000
|
unkown
|
page read and write
|
|
|
|
2D02000
|
unkown
|
page read and write
|
|
|
|
7FF57406A000
|
unkown image
|
page readonly
|
|
|
|
7DF5891B0000
|
unkown image
|
page readonly
|
|
|
|
1B35F000
|
stack
|
page read and write
|
|
|
|
AB0000
|
unkown
|
page read and write
|
|
|
|
7FF534619000
|
unkown image
|
page readonly
|
|
|
|
C20000
|
unkown
|
page read and write
|
|
|
|
126A7000
|
unkown
|
page read and write
|
|
|
|
2BB6000
|
unkown
|
page read and write
|
|
|
|
C9C000
|
unkown
|
page read and write
|
|
|
|
AB0000
|
unkown
|
page read and write
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
295D0BC0000
|
unkown
|
page read and write
|
|
|
|
439C67E000
|
stack
|
page read and write
|
|
|
|
7DF549710000
|
unkown image
|
page readonly
|
|
|
|
7FF5137FE000
|
unkown image
|
page readonly
|
|
|
|
4A0000
|
unkown
|
page execute and read and write
|
|
|
|
C98000
|
unkown
|
page read and write
|
|
|
|
295D0B6C000
|
unkown
|
page read and write
|
|
|
|
7DF528A72000
|
unkown image
|
page readonly
|
|
|
|
7DF589192000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown image
|
page read and write
|
|
|
|
7FF5B12D5000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
7DF549712000
|
unkown image
|
page readonly
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown image
|
page read and write
|
|
|
|
2438662A000
|
unkown
|
page read and write
|
|
|
|
1B040000
|
unkown
|
page read and write
|
|
|
|
7FF5138EA000
|
unkown image
|
page readonly
|
|
|
|
7FF51392C000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
295D02AF000
|
unkown
|
page read and write
|
|
|
|
7FF57402B000
|
unkown image
|
page readonly
|
|
|
|
2680000
|
unkown
|
page read and write
|
|
|
|
7DF528A70000
|
unkown image
|
page readonly
|
|
|
|
295D0B9F000
|
unkown
|
page read and write
|
|
|
|
510000
|
unkown image
|
page readonly
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
7DF589190000
|
unkown image
|
page readonly
|
|
|
|
26F0000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
287F000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0E3E000
|
unkown image
|
page readonly
|
|
|
|
128EC000
|
unkown
|
page read and write
|
|
|
|
295D0B9E000
|
unkown
|
page read and write
|
|
|
|
7FF5B0EA5000
|
unkown image
|
page readonly
|
|
|
|
1852D570000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
1AFD0000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
7FF57404F000
|
unkown image
|
page readonly
|
|
|
|
7FF5B12FC000
|
unkown image
|
page readonly
|
|
|
|
A4D000
|
unkown
|
page read and write
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
2B83000
|
unkown
|
page read and write
|
|
|
|
7FF513979000
|
unkown image
|
page readonly
|
|
|
|
2BA0DA50000
|
unkown image
|
page readonly
|
|
|
|
295D01A0000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
295D0B75000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5C6440000
|
unkown image
|
page readonly
|
|
|
|
24386590000
|
unkown image
|
page readonly
|
|
|
|
7FF5E15FC000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
1AF60000
|
unkown
|
page read and write
|
|
|
|
22F8CF30000
|
unkown image
|
page readonly
|
|
|
|
295D1002000
|
unkown
|
page read and write
|
|
|
|
7FF5E150B000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
1852D746000
|
unkown
|
page read and write
|
|
|
|
24386700000
|
unkown
|
page read and write
|
|
|
|
7DF5F6782000
|
unkown image
|
page readonly
|
|
|
|
2BA0D448000
|
unkown
|
page read and write
|
|
|
|
2BA0D44E000
|
unkown
|
page read and write
|
|
|
|
55B000
|
unkown
|
page read and write
|
|
|
|
7DF5F6780000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1106000
|
unkown image
|
page readonly
|
|
|
|
7FF5134C6000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
2CF1000
|
unkown
|
page read and write
|
|
|
|
7DF5C6450000
|
unkown image
|
page readonly
|
|
|
|
BD37A7F000
|
stack
|
page read and write
|
|
|
|
2680000
|
unkown
|
page read and write
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
7DF5F67A0000
|
unkown image
|
page readonly
|
|
|
|
2BA5000
|
unkown
|
page read and write
|
|
|
|
FFCA0000
|
unkown image
|
page readonly
|
|
|
|
22F8CF90000
|
unkown image
|
page readonly
|
|
|
|
7FF573F01000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1234000
|
unkown image
|
page readonly
|
|
|
|
7FFA36474000
|
unkown
|
page read and write
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
1B170000
|
unkown
|
page read and write
|
|
|
|
295D023C000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
26A1000
|
unkown
|
page read and write
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
7FF573D97000
|
unkown image
|
page readonly
|
|
|
|
1281A000
|
unkown
|
page read and write
|
|
|
|
C90000
|
unkown
|
page read and write
|
|
|
|
2BA3000
|
unkown
|
page read and write
|
|
|
|
FFCB2000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
97585FE000
|
stack
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
295D024E000
|
unkown
|
page read and write
|
|
|
|
98A000
|
heap default
|
page read and write
|
|
|
|
7FF53468A000
|
unkown image
|
page readonly
|
|
|
|
7FF5B11D8000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
295D0B6C000
|
unkown
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
12729000
|
unkown
|
page read and write
|
|
|
|
FDB687E000
|
stack
|
page read and write
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
295D0B73000
|
unkown
|
page read and write
|
|
|
|
7FF5E1654000
|
unkown image
|
page readonly
|
|
|
|
1B061000
|
unkown
|
page read and write
|
|
|
|
1B000000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
97589FF000
|
stack
|
page read and write
|
|
|
|
2670000
|
unkown
|
page read and write
|
|
|
|
28FC000
|
unkown
|
page read and write
|
|
|
|
272C000
|
unkown
|
page read and write
|
|
|
|
295D02A4000
|
unkown
|
page read and write
|
|
|
|
7FF5345CC000
|
unkown image
|
page readonly
|
|
|
|
1B55E000
|
stack
|
page read and write
|
|
|
|
7FF5AA9B0000
|
unkown image
|
page readonly
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
C9A000
|
unkown
|
page read and write
|
|
|
|
7FF53427A000
|
unkown image
|
page readonly
|
|
|
|
295D0B67000
|
unkown
|
page read and write
|
|
|
|
295D0B91000
|
unkown
|
page read and write
|
|
|
|
295D0B5E000
|
unkown
|
page read and write
|
|
|
|
287D000
|
unkown
|
page read and write
|
|
|
|
295D0229000
|
unkown
|
page read and write
|
|
|
|
7FF5E167E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B131A000
|
unkown image
|
page readonly
|
|
|
|
A90000
|
unkown image
|
page read and write
|
|
|
|
7FF513954000
|
unkown image
|
page readonly
|
|
|
|
7FF5E161B000
|
unkown image
|
page readonly
|
|
|
|
FDB63AB000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
2BA0D3C0000
|
unkown image
|
page readonly
|
|
|
|
7DF5C6442000
|
unkown image
|
page readonly
|
|
|
|
2BB8000
|
unkown
|
page read and write
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
FDB6A77000
|
stack
|
page read and write
|
|
|
|
271A000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
295D0BA5000
|
unkown
|
page read and write
|
|
|
|
C91000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
7FF5B1173000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
7DF5891A0000
|
unkown image
|
page readonly
|
|
|
|
1B160000
|
unkown
|
page read and write
|
|
|
|
295D0100000
|
unkown image
|
page readonly
|
|
|
|
22F8CF50000
|
unkown image
|
page readonly
|
|
|
|
7DF5C6452000
|
unkown image
|
page readonly
|
|
|
|
126C9000
|
unkown
|
page read and write
|
|
|
|
2725000
|
unkown
|
page read and write
|
|
|
|
273C000
|
unkown
|
page read and write
|
|
|
|
1852D736000
|
unkown
|
page read and write
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B108B000
|
unkown image
|
page readonly
|
|
|
|
7FDE77F000
|
stack
|
page read and write
|
|
|
|
24386E02000
|
unkown
|
page read and write
|
|
|
|
24386AD0000
|
unkown image
|
page readonly
|
|
|
|
295D024B000
|
unkown
|
page read and write
|
|
|
|
295D0B5C000
|
unkown
|
page read and write
|
|
|
|
2AAB000
|
unkown
|
page read and write
|
|
|
|
295D0B6C000
|
unkown
|
page read and write
|
|
|
|
7FF5AA992000
|
unkown image
|
page readonly
|
|
|
|
2680000
|
unkown
|
page read and write
|
|
|
|
7FF51386C000
|
unkown image
|
page readonly
|
|
|
|
295D0213000
|
unkown
|
page read and write
|
|
|
|
FFCA2000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
295D02C4000
|
unkown
|
page read and write
|
|
|
|
1AFF0000
|
unkown
|
page read and write
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2BA0D453000
|
unkown
|
page read and write
|
|
|
|
7FF513905000
|
unkown image
|
page readonly
|
|
|
|
295D0B8E000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
1AFD0000
|
unkown
|
page read and write
|
|
|
|
2B96000
|
unkown
|
page read and write
|
|
|
|
7FF513968000
|
unkown image
|
page readonly
|
|
|
|
7FF5134C0000
|
unkown image
|
page readonly
|
|
|
|
243865B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1701000
|
unkown image
|
page readonly
|
|
|
|
BD378F7000
|
stack
|
page read and write
|
|
|
|
2BA0D350000
|
heap private
|
page read and write
|
|
|
|
7DF589192000
|
unkown image
|
page readonly
|
|
|
|
7FF5B0E42000
|
unkown image
|
page readonly
|
|
|
|
7FF5138EC000
|
unkown image
|
page readonly
|
|
|
|
FFCB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AA990000
|
unkown image
|
page readonly
|
|
|
|
CAB000
|
unkown
|
page read and write
|
|
|
|
C9B000
|
unkown
|
page read and write
|
|
|
|
7FF513917000
|
unkown image
|
page readonly
|
|
|
|
22F8D002000
|
unkown
|
page read and write
|
|
|
|
7FF574020000
|
unkown image
|
page readonly
|
|
|
|
7FF53461D000
|
unkown image
|
page readonly
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
2BA0D43C000
|
unkown
|
page read and write
|
|
|
|
24386678000
|
unkown
|
page read and write
|
|
|
|
7FF573853000
|
unkown image
|
page readonly
|
|
|
|
2BA0D508000
|
unkown
|
page read and write
|
|
|
|
7FF5AA992000
|
unkown image
|
page readonly
|
|
|
|
C96000
|
unkown
|
page read and write
|
|
|
|
2BA0D513000
|
unkown
|
page read and write
|
|
|
|
FFCC0000
|
unkown image
|
page readonly
|
|
|
|
7FFA363C0000
|
unkown
|
page read and write
|
|
|
|
1B061000
|
unkown
|
page read and write
|
|
|
|
1852D75F000
|
unkown
|
page read and write
|
|
|
|
450000
|
unkown image
|
page readonly
|
|
|
|
3F2000
|
unkown image
|
page readonly
|
|
|
|
295D02DE000
|
unkown
|
page read and write
|
|
|
|
2729000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
295D0B6F000
|
unkown
|
page read and write
|
|
|
|
295D0B76000
|
unkown
|
page read and write
|
|
|
|
C99000
|
unkown
|
page read and write
|
|
|
|
BD37B7E000
|
stack
|
page read and write
|
|
|
|
7FF5B129B000
|
unkown image
|
page readonly
|
|
There are 1110 hidden memdumps, click here to show them.