Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
btc1exch06_2021-10-24_12_30_07.zip
|
Zip archive data, at least v4.5 to extract
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\o21fgc1p.ykx\unarchiver.log
|
ASCII text, with CRLF line terminators
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Windows\SysWOW64\unarchiver.exe
|
'C:\Windows\SysWOW64\unarchiver.exe' 'C:\Users\user\Desktop\btc1exch06_2021-10-24_12_30_07.zip'
|
||
C:\Windows\SysWOW64\7za.exe
|
'C:\Windows\System32\7za.exe' x -pinfected -y -o'C:\Users\user\AppData\Local\Temp\amgha5zs.gqf' 'C:\Users\user\Desktop\btc1exch06_2021-10-24_12_30_07.zip'
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
1FB95B70000
|
unkown image
|
page readonly
|
||
7FF54E9CA000
|
unkown image
|
page readonly
|
||
7DF593F30000
|
unkown image
|
page readonly
|
||
1FB96250000
|
unkown image
|
page readonly
|
||
7FF54A4EA000
|
unkown image
|
page readonly
|
||
28FDD844000
|
unkown
|
page read and write
|
||
2B48A66A000
|
unkown
|
page read and write
|
||
1866F3C0000
|
unkown
|
page read and write
|
||
7FF50B21A000
|
unkown image
|
page readonly
|
||
28FDD83D000
|
unkown
|
page read and write
|
||
2B48A1AD000
|
unkown
|
page read and write
|
||
1CA1BE79000
|
unkown
|
page read and write
|
||
7FF5CA95D000
|
unkown image
|
page readonly
|
||
7FF51A9C1000
|
unkown image
|
page readonly
|
||
7FF54E8B1000
|
unkown image
|
page readonly
|
||
1CA1C380000
|
unkown image
|
page readonly
|
||
7FF51AB8D000
|
unkown image
|
page readonly
|
||
FD0397E000
|
stack
|
page read and write
|
||
3EA0277000
|
stack
|
page read and write
|
||
582617F000
|
stack
|
page read and write
|
||
28FDD83A000
|
unkown
|
page read and write
|
||
2B48A187000
|
unkown
|
page read and write
|
||
7F250000
|
unkown image
|
page readonly
|
||
7FF50B08B000
|
unkown image
|
page readonly
|
||
15901F13000
|
unkown
|
page read and write
|
||
2B489800000
|
unkown
|
page read and write
|
||
7FF5707B5000
|
unkown image
|
page readonly
|
||
7FF51AB1F000
|
unkown image
|
page readonly
|
||
2B4898EF000
|
unkown
|
page read and write
|
||
58260FE000
|
stack
|
page read and write
|
||
2B4898EF000
|
unkown
|
page read and write
|
||
2B48A11E000
|
unkown
|
page read and write
|
||
7DF518E92000
|
unkown image
|
page readonly
|
||
73F19FE000
|
stack
|
page read and write
|
||
7FF51A954000
|
unkown image
|
page readonly
|
||
7FF570411000
|
unkown image
|
page readonly
|
||
7FF54A25F000
|
unkown image
|
page readonly
|
||
7DF558180000
|
unkown image
|
page readonly
|
||
7FF51ABE2000
|
unkown image
|
page readonly
|
||
FEFF2000
|
unkown image
|
page readonly
|
||
7DF57E5A0000
|
unkown image
|
page readonly
|
||
7FF54E7F7000
|
unkown image
|
page readonly
|
||
7DF5D8640000
|
unkown image
|
page readonly
|
||
5CD000
|
unkown
|
page read and write
|
||
7DF528882000
|
unkown image
|
page readonly
|
||
582637C000
|
stack
|
page read and write
|
||
1FB95C00000
|
unkown
|
page read and write
|
||
3E9FEFE000
|
stack
|
page read and write
|
||
2B489E50000
|
unkown image
|
page readonly
|
||
7FF51A9C9000
|
unkown image
|
page readonly
|
||
7FF54A47A000
|
unkown image
|
page readonly
|
||
7FF54E957000
|
unkown image
|
page readonly
|
||
2B48A602000
|
unkown
|
page read and write
|
||
28FDD863000
|
unkown
|
page read and write
|
||
28FDD841000
|
unkown
|
page read and write
|
||
7F242000
|
unkown image
|
page readonly
|
||
7FF54A1C7000
|
unkown image
|
page readonly
|
||
7FF57083F000
|
unkown image
|
page readonly
|
||
7FF51AB33000
|
unkown image
|
page readonly
|
||
73F14BC000
|
unkown
|
page read and write
|
||
28FDD7A0000
|
unkown image
|
page readonly
|
||
7FF51A7AA000
|
unkown image
|
page readonly
|
||
7FF50B0B5000
|
unkown image
|
page readonly
|
||
2B48A1DB000
|
unkown
|
page read and write
|
||
7FF5861FB000
|
unkown image
|
page readonly
|
||
7DF558160000
|
unkown image
|
page readonly
|
||
7FF586203000
|
unkown image
|
page readonly
|
||
2B48A196000
|
unkown
|
page read and write
|
||
2B48A602000
|
unkown
|
page read and write
|
||
2B4896F0000
|
unkown image
|
page read and write
|
||
28FDD845000
|
unkown
|
page read and write
|
||
2E86000
|
unkown
|
page read and write
|
||
28FDD85E000
|
unkown
|
page read and write
|
||
7FF5CA957000
|
unkown image
|
page readonly
|
||
11A0000
|
unkown image
|
page readonly
|
||
7FF51AB37000
|
unkown image
|
page readonly
|
||
3EA00FB000
|
stack
|
page read and write
|
||
1CA1BC90000
|
unkown image
|
page read and write
|
||
7FF50AEB5000
|
unkown image
|
page readonly
|
||
7DF55C652000
|
unkown image
|
page readonly
|
||
28FDD690000
|
unkown image
|
page readonly
|
||
2B4897B0000
|
unkown image
|
page readonly
|
||
7FF54A4D2000
|
unkown image
|
page readonly
|
||
2C3DF940000
|
unkown image
|
page readonly
|
||
2B48A1A7000
|
unkown
|
page read and write
|
||
2B48A19F000
|
unkown
|
page read and write
|
||
2B48A178000
|
unkown
|
page read and write
|
||
7FF54A3F7000
|
unkown image
|
page readonly
|
||
7DF5D8652000
|
unkown image
|
page readonly
|
||
7DF45A510000
|
unkown image
|
page readonly
|
||
7FF54A2C7000
|
unkown image
|
page readonly
|
||
7FF586036000
|
unkown image
|
page readonly
|
||
1866F3A7000
|
unkown
|
page read and write
|
||
1CA1BF13000
|
unkown
|
page read and write
|
||
2B48A187000
|
unkown
|
page read and write
|
||
7DF558180000
|
unkown image
|
page readonly
|
||
7FF51AA1F000
|
unkown image
|
page readonly
|
||
56654FF000
|
stack
|
page read and write
|
||
7DF55C650000
|
unkown image
|
page readonly
|
||
7FF5708AA000
|
unkown image
|
page readonly
|
||
7FF5CA9CA000
|
unkown image
|
page readonly
|
||
522C000
|
stack
|
page read and write
|
||
28FDD670000
|
unkown image
|
page readonly
|
||
E28000
|
unkown
|
page read and write
|
||
7FF570883000
|
unkown image
|
page readonly
|
||
A70000
|
heap default
|
page read and write
|
||
1CA1BCD0000
|
unkown image
|
page readonly
|
||
FD03DF8000
|
stack
|
page read and write
|
||
7FF54E932000
|
unkown image
|
page readonly
|
||
2B48985B000
|
unkown
|
page read and write
|
||
933000
|
unkown
|
page read and write
|
||
7FF51A7E4000
|
unkown image
|
page readonly
|
||
1AE08800000
|
unkown image
|
page readonly
|
||
7FF54A477000
|
unkown image
|
page readonly
|
||
7FF570827000
|
unkown image
|
page readonly
|
||
7DF558162000
|
unkown image
|
page readonly
|
||
2B48A19D000
|
unkown
|
page read and write
|
||
7FF50B1AD000
|
unkown image
|
page readonly
|
||
28FDDC00000
|
unkown image
|
page readonly
|
||
2B48A189000
|
unkown
|
page read and write
|
||
94F000
|
unkown
|
page read and write
|
||
1AE08A00000
|
unkown image
|
page readonly
|
||
7FF5ABE6F000
|
unkown image
|
page readonly
|
||
58262FF000
|
stack
|
page read and write
|
||
2B489AD0000
|
unkown image
|
page readonly
|
||
7FF51AC11000
|
unkown image
|
page readonly
|
||
7FF5860BF000
|
unkown image
|
page readonly
|
||
1866F750000
|
unkown image
|
page readonly
|
||
94E36FE000
|
stack
|
page read and write
|
||
7FF54E9DA000
|
unkown image
|
page readonly
|
||
7FF54E90E000
|
unkown image
|
page readonly
|
||
7FF54A40D000
|
unkown image
|
page readonly
|
||
2E22000
|
unkown
|
page read and write
|
||
7FF50B13F000
|
unkown image
|
page readonly
|
||
7FF570902000
|
unkown image
|
page readonly
|
||
2B4898B1000
|
unkown
|
page read and write
|
||
2C3DFABB000
|
unkown
|
page read and write
|
||
2B48A19F000
|
unkown
|
page read and write
|
||
7F240000
|
unkown image
|
page readonly
|
||
7FF51A9E0000
|
unkown image
|
page readonly
|
||
7FF586080000
|
unkown image
|
page readonly
|
||
2AC0000
|
heap private
|
page read and write
|
||
1866F3B6000
|
unkown
|
page read and write
|
||
6D40000
|
heap private
|
page read and write
|
||
2B4898E3000
|
unkown
|
page read and write
|
||
2B48A115000
|
unkown
|
page read and write
|
||
15901E02000
|
unkown
|
page read and write
|
||
2B48A167000
|
unkown
|
page read and write
|
||
2B489851000
|
unkown
|
page read and write
|
||
7DF558162000
|
unkown image
|
page readonly
|
||
2B48A185000
|
unkown
|
page read and write
|
||
7DF5D8642000
|
unkown image
|
page readonly
|
||
28FDD859000
|
unkown
|
page read and write
|
||
28FDD86B000
|
unkown
|
page read and write
|
||
D9A000
|
unkown
|
page execute and read and write
|
||
2B489813000
|
unkown
|
page read and write
|
||
18F16980000
|
unkown image
|
page readonly
|
||
2B48A189000
|
unkown
|
page read and write
|
||
7DF558160000
|
unkown image
|
page readonly
|
||
F7E000
|
stack
|
page read and write
|
||
582627F000
|
stack
|
page read and write
|
||
7FF54A437000
|
unkown image
|
page readonly
|
||
2E7C000
|
unkown
|
page read and write
|
||
7FF57092A000
|
unkown image
|
page readonly
|
||
7FF51ABE9000
|
unkown image
|
page readonly
|
||
1130000
|
unkown
|
page read and write
|
||
7DF5D8640000
|
unkown image
|
page readonly
|
||
7FF51AAC1000
|
unkown image
|
page readonly
|
||
2B489855000
|
unkown
|
page read and write
|
||
1AE08B80000
|
unkown image
|
page readonly
|
||
7FF570914000
|
unkown image
|
page readonly
|
||
7FF54A45E000
|
unkown image
|
page readonly
|
||
2B48A1AB000
|
unkown
|
page read and write
|
||
28FDD868000
|
unkown
|
page read and write
|
||
7DF593F20000
|
unkown image
|
page readonly
|
||
7DF5B9BD0000
|
unkown image
|
page readonly
|
||
1350000
|
unkown image
|
page readonly
|
||
28FDD82D000
|
unkown
|
page read and write
|
||
7DF5B9BD0000
|
unkown image
|
page readonly
|
||
7FF586105000
|
unkown image
|
page readonly
|
||
18F1642A000
|
unkown
|
page read and write
|
||
7FF5ABEDA000
|
unkown image
|
page readonly
|
||
7DF593F22000
|
unkown image
|
page readonly
|
||
28FDD858000
|
unkown
|
page read and write
|
||
15901C10000
|
unkown image
|
page readonly
|
||
7FF5CA8AE000
|
unkown image
|
page readonly
|
||
15901E77000
|
unkown
|
page read and write
|
||
28FDD877000
|
unkown
|
page read and write
|
||
7FF54A099000
|
unkown image
|
page readonly
|
||
2B48A18F000
|
unkown
|
page read and write
|
||
1CA1BF02000
|
unkown
|
page read and write
|
||
7FF54A45E000
|
unkown image
|
page readonly
|
||
18F1647E000
|
unkown
|
page read and write
|
||
7DF57E590000
|
unkown image
|
page readonly
|
||
2B48A198000
|
unkown
|
page read and write
|
||
94E397E000
|
stack
|
page read and write
|
||
D1FB3FC000
|
stack
|
page read and write
|
||
18F16500000
|
unkown
|
page read and write
|
||
1CA1BE55000
|
unkown
|
page read and write
|
||
2B48A663000
|
unkown
|
page read and write
|
||
1FB95C49000
|
unkown
|
page read and write
|
||
2B48A19A000
|
unkown
|
page read and write
|
||
1380000
|
heap private
|
page read and write
|
||
943000
|
unkown
|
page read and write
|
||
7FF54A500000
|
unkown image
|
page readonly
|
||
2E8B000
|
unkown
|
page read and write
|
||
A40000
|
heap default
|
page read and write
|
||
D9C000
|
unkown
|
page execute and read and write
|
||
1AE08510000
|
heap default
|
page read and write
|
||
FF010000
|
unkown image
|
page readonly
|
||
28FDD87E000
|
unkown
|
page read and write
|
||
2B48A19A000
|
unkown
|
page read and write
|
||
7DF593F22000
|
unkown image
|
page readonly
|
||
7F242000
|
unkown image
|
page readonly
|
||
18F16450000
|
unkown
|
page read and write
|
||
FF002000
|
unkown image
|
page readonly
|
||
2B48A100000
|
unkown
|
page read and write
|
||
1FB95D00000
|
unkown
|
page read and write
|
||
1866F2B0000
|
unkown image
|
page readonly
|
||
7FF5ABF51000
|
unkown image
|
page readonly
|
||
7FF57079C000
|
unkown image
|
page readonly
|
||
7FF51A8E2000
|
unkown image
|
page readonly
|
||
7DF55C660000
|
unkown image
|
page readonly
|
||
2B48A197000
|
unkown
|
page read and write
|
||
3E9FB8B000
|
unkown
|
page read and write
|
||
1AE085F0000
|
unkown image
|
page readonly
|
||
7DF5D8642000
|
unkown image
|
page readonly
|
||
56653FF000
|
stack
|
page read and write
|
||
7FF5CA92B000
|
unkown image
|
page readonly
|
||
7FF54A4F1000
|
unkown image
|
page readonly
|
||
2B48A602000
|
unkown
|
page read and write
|
||
7DF558160000
|
unkown image
|
page readonly
|
||
1866F396000
|
heap default
|
page read and write
|
||
2C3DFF80000
|
unkown image
|
page readonly
|
||
B49A7FB000
|
stack
|
page read and write
|
||
7FF54A501000
|
unkown image
|
page readonly
|
||
2B48A602000
|
unkown
|
page read and write
|
||
7FF54E9DE000
|
unkown image
|
page readonly
|
||
7FF54A1F6000
|
unkown image
|
page readonly
|
||
7FF51AB63000
|
unkown image
|
page readonly
|
||
7FF54E77F000
|
unkown image
|
page readonly
|
||
94C000
|
unkown
|
page read and write
|
||
1AE084B0000
|
heap private
|
page read and write
|
||
B49A8FB000
|
stack
|
page read and write
|
||
2C3DFE00000
|
unkown image
|
page readonly
|
||
7FF50B085000
|
unkown image
|
page readonly
|
||
1FB95C13000
|
unkown
|
page read and write
|
||
4FEE000
|
stack
|
page read and write
|
||
1AE08600000
|
unkown
|
page read and write
|
||
2B48A1D9000
|
unkown
|
page read and write
|
||
2E54000
|
unkown
|
page read and write
|
||
7FF54E7F2000
|
unkown image
|
page readonly
|
||
2B48A16C000
|
unkown
|
page read and write
|
||
7FF50B153000
|
unkown image
|
page readonly
|
||
7FF51A895000
|
unkown image
|
page readonly
|
||
7FF54A0C1000
|
unkown image
|
page readonly
|
||
6D44000
|
heap private
|
page read and write
|
||
1360000
|
unkown
|
page read and write
|
||
1FB95C4D000
|
unkown
|
page read and write
|
||
7FF58620E000
|
unkown image
|
page readonly
|
||
7DF491DE0000
|
unkown image
|
page readonly
|
||
2B4898C9000
|
unkown
|
page read and write
|
||
2B48A1CA000
|
unkown
|
page read and write
|
||
2B48A187000
|
unkown
|
page read and write
|
||
2B48A19A000
|
unkown
|
page read and write
|
||
28FDD82E000
|
unkown
|
page read and write
|
||
7FF51A6F7000
|
unkown image
|
page readonly
|
||
1CA1BE49000
|
unkown
|
page read and write
|
||
28FDD831000
|
unkown
|
page read and write
|
||
1CA1BE78000
|
unkown
|
page read and write
|
||
D20000
|
unkown image
|
page readonly
|
||
15901E67000
|
unkown
|
page read and write
|
||
2B48A189000
|
unkown
|
page read and write
|
||
7DF528890000
|
unkown image
|
page readonly
|
||
FD03C78000
|
stack
|
page read and write
|
||
7DF518EB0000
|
unkown image
|
page readonly
|
||
1866F8D0000
|
unkown image
|
page readonly
|
||
2B489F80000
|
unkown
|
page read and write
|
||
7FF50B202000
|
unkown image
|
page readonly
|
||
1FB95BC0000
|
heap default
|
page read and write
|
||
18F16455000
|
unkown
|
page read and write
|
||
28FDD846000
|
unkown
|
page read and write
|
||
2B48A16B000
|
unkown
|
page read and write
|
||
7FF54A42E000
|
unkown image
|
page readonly
|
||
2B48A1B9000
|
unkown
|
page read and write
|
||
7FF570909000
|
unkown image
|
page readonly
|
||
28FDD87A000
|
unkown
|
page read and write
|
||
2B489854000
|
unkown
|
page read and write
|
||
1320000
|
unkown image
|
page readonly
|
||
7FF50B231000
|
unkown image
|
page readonly
|
||
2E65000
|
unkown
|
page read and write
|
||
7FF54A477000
|
unkown image
|
page readonly
|
||
7FF570843000
|
unkown image
|
page readonly
|
||
2C3DF9A0000
|
unkown image
|
page write copy
|
||
E38000
|
unkown
|
page read and write
|
||
1AE08640000
|
unkown
|
page read and write
|
||
1AE084C0000
|
unkown image
|
page readonly
|
||
1FB95C70000
|
unkown
|
page read and write
|
||
7FF51A7E7000
|
unkown image
|
page readonly
|
||
7FF5CA6FA000
|
unkown image
|
page readonly
|
||
7FF5ABF61000
|
unkown image
|
page readonly
|
||
1AE084A0000
|
unkown image
|
page read and write
|
||
7FF51A777000
|
unkown image
|
page readonly
|
||
56651FD000
|
stack
|
page read and write
|
||
2E4F000
|
unkown
|
page read and write
|
||
7FF5ABEBE000
|
unkown image
|
page readonly
|
||
7FF5AB79E000
|
unkown image
|
page readonly
|
||
1FB95D13000
|
unkown
|
page read and write
|
||
7FF54A453000
|
unkown image
|
page readonly
|
||
7FF5ABF4A000
|
unkown image
|
page readonly
|
||
11D0000
|
unkown image
|
page readonly
|
||
28FDD650000
|
unkown image
|
page read and write
|
||
940000
|
unkown
|
page read and write
|
||
DCB000
|
heap default
|
page read and write
|
||
7FF51AB6E000
|
unkown image
|
page readonly
|
||
2E72000
|
unkown
|
page read and write
|
||
7FF5706E1000
|
unkown image
|
page readonly
|
||
DA7000
|
unkown
|
page execute and read and write
|
||
7DF426740000
|
unkown image
|
page readonly
|
||
7DF456030000
|
unkown image
|
page readonly
|
||
18F16230000
|
unkown image
|
page readonly
|
||
2B48A110000
|
unkown
|
page read and write
|
||
7DF5B9BE0000
|
unkown image
|
page readonly
|
||
7DF5B9BC0000
|
unkown image
|
page readonly
|
||
2B48A185000
|
unkown
|
page read and write
|
||
2B48A112000
|
unkown
|
page read and write
|
||
7DF528870000
|
unkown image
|
page readonly
|
||
7FF54E8D7000
|
unkown image
|
page readonly
|
||
7FF50B231000
|
unkown image
|
page readonly
|
||
1AE0865C000
|
unkown
|
page read and write
|
||
7FF50ADCA000
|
unkown image
|
page readonly
|
||
28C5000
|
heap private
|
page read and write
|
||
7FF5ABE83000
|
unkown image
|
page readonly
|
||
1866F2D0000
|
unkown image
|
page readonly
|
||
2C3DF800000
|
heap private
|
page read and write
|
||
7DF558180000
|
unkown image
|
page readonly
|
||
15901C00000
|
heap private
|
page read and write
|
||
18F16210000
|
unkown image
|
page read and write
|
||
2B48A19A000
|
unkown
|
page read and write
|
||
28FDD86A000
|
unkown
|
page read and write
|
||
7FF5CA8A2000
|
unkown image
|
page readonly
|
||
5500000
|
unkown
|
page read and write
|
||
7DF5B9BE0000
|
unkown image
|
page readonly
|
||
7FF54A427000
|
unkown image
|
page readonly
|
||
15901C40000
|
unkown image
|
page readonly
|
||
5E0000
|
unkown image
|
page readonly
|
||
18F16C02000
|
unkown
|
page read and write
|
||
2B48A603000
|
unkown
|
page read and write
|
||
7FF51AAD2000
|
unkown image
|
page readonly
|
||
18F16260000
|
unkown image
|
page readonly
|
||
7DF5D8660000
|
unkown image
|
page readonly
|
||
A00000
|
unkown image
|
page readonly
|
||
7FF5CA9D5000
|
unkown image
|
page readonly
|
||
29618FB000
|
stack
|
page read and write
|
||
2B48A61D000
|
unkown
|
page read and write
|
||
2B489CD0000
|
unkown image
|
page readonly
|
||
2E88000
|
unkown
|
page read and write
|
||
7DF558180000
|
unkown image
|
page readonly
|
||
7FF51AB30000
|
unkown image
|
page readonly
|
||
BB0000
|
unkown
|
page read and write
|
||
7FF51AA91000
|
unkown image
|
page readonly
|
||
1FB95C55000
|
unkown
|
page read and write
|
||
7DF5B9BC0000
|
unkown image
|
page readonly
|
||
1340000
|
unkown
|
page read and write
|
||
7FF54E9B2000
|
unkown image
|
page readonly
|
||
2C3DFB02000
|
unkown
|
page read and write
|
||
7FF50B000000
|
unkown image
|
page readonly
|
||
7FF57087B000
|
unkown image
|
page readonly
|
||
7FF5861A7000
|
unkown image
|
page readonly
|
||
1866F3BF000
|
unkown
|
page read and write
|
||
7FF5706FD000
|
unkown image
|
page readonly
|
||
7FF50B209000
|
unkown image
|
page readonly
|
||
2B48A1BE000
|
unkown
|
page read and write
|
||
53FE000
|
stack
|
page read and write
|
||
2B4898DA000
|
unkown
|
page read and write
|
||
1CA1BE4B000
|
unkown
|
page read and write
|
||
28FDD813000
|
unkown
|
page read and write
|
||
7FF50AFE1000
|
unkown image
|
page readonly
|
||
5664EFB000
|
stack
|
page read and write
|
||
18F16800000
|
unkown image
|
page readonly
|
||
7DF518E90000
|
unkown image
|
page readonly
|
||
73F1AFE000
|
stack
|
page read and write
|
||
2B489790000
|
unkown
|
page read and write
|
||
7F250000
|
unkown image
|
page readonly
|
||
7FF58610B000
|
unkown image
|
page readonly
|
||
2B48A199000
|
unkown
|
page read and write
|
||
7FF54A40F000
|
unkown image
|
page readonly
|
||
7DF5B9BD2000
|
unkown image
|
page readonly
|
||
B49AA77000
|
stack
|
page read and write
|
||
7DF518EA0000
|
unkown image
|
page readonly
|
||
1CA1BE84000
|
unkown
|
page read and write
|
||
1CA1BDE0000
|
unkown image
|
page readonly
|
||
2B48983C000
|
unkown
|
page read and write
|
||
7FF5ABE87000
|
unkown image
|
page readonly
|
||
7E0000
|
unkown image
|
page read and write
|
||
B49AC7E000
|
stack
|
page read and write
|
||
7FF50AD17000
|
unkown image
|
page readonly
|
||
296197E000
|
stack
|
page read and write
|
||
2C3DFF90000
|
unkown image
|
page readonly
|
||
2B4898A0000
|
unkown
|
page read and write
|
||
1CA1BD00000
|
heap default
|
page read and write
|
||
119E000
|
stack
|
page read and write
|
||
7FF5CA903000
|
unkown image
|
page readonly
|
||
D1FB27F000
|
stack
|
page read and write
|
||
7FF54A188000
|
unkown image
|
page readonly
|
||
73F1BFD000
|
stack
|
page read and write
|
||
7FF50B1A7000
|
unkown image
|
page readonly
|
||
15901F02000
|
unkown
|
page read and write
|
||
2B48A18C000
|
unkown
|
page read and write
|
||
7FF570700000
|
unkown image
|
page readonly
|
||
7FF585F35000
|
unkown image
|
page readonly
|
||
D1FB77E000
|
stack
|
page read and write
|
||
1866F2A0000
|
heap private
|
page read and write
|
||
7DF5D8652000
|
unkown image
|
page readonly
|
||
2B48A198000
|
unkown
|
page read and write
|
||
18F16360000
|
unkown image
|
page readonly
|
||
2B48A186000
|
unkown
|
page read and write
|
||
7DF55C640000
|
unkown image
|
page readonly
|
||
570000
|
unkown image
|
page readonly
|
||
2B48A165000
|
unkown
|
page read and write
|
||
D1FB57B000
|
stack
|
page read and write
|
||
7FF5861B9000
|
unkown image
|
page readonly
|
||
7DF416D60000
|
unkown image
|
page readonly
|
||
7FF5861E7000
|
unkown image
|
page readonly
|
||
7DF55C642000
|
unkown image
|
page readonly
|
||
7FF51AB23000
|
unkown image
|
page readonly
|
||
1FB95C89000
|
unkown
|
page read and write
|
||
7FF54E907000
|
unkown image
|
page readonly
|
||
18F16508000
|
unkown
|
page read and write
|
||
7FF54A420000
|
unkown image
|
page readonly
|
||
5664D7B000
|
stack
|
page read and write
|
||
7FF51AB07000
|
unkown image
|
page readonly
|
||
2B48A189000
|
unkown
|
page read and write
|
||
7FF5CA95A000
|
unkown image
|
page readonly
|
||
FD033FE000
|
stack
|
page read and write
|
||
7FF570857000
|
unkown image
|
page readonly
|
||
28FDD860000
|
unkown
|
page read and write
|
||
18F16502000
|
unkown
|
page read and write
|
||
C40000
|
heap default
|
page read and write
|
||
2B48A187000
|
unkown
|
page read and write
|
||
2B489770000
|
unkown image
|
page readonly
|
||
2B48A602000
|
unkown
|
page read and write
|
||
28FDD800000
|
unkown
|
page read and write
|
||
2C3DFA13000
|
unkown
|
page read and write
|
||
7FF54A4EA000
|
unkown image
|
page readonly
|
||
28FDDA00000
|
unkown image
|
page readonly
|
||
7DF558172000
|
unkown image
|
page readonly
|
||
7FF5CA246000
|
unkown image
|
page readonly
|
||
7FF5ABF55000
|
unkown image
|
page readonly
|
||
7FF54E865000
|
unkown image
|
page readonly
|
||
7DF528882000
|
unkown image
|
page readonly
|
||
28FDD884000
|
unkown
|
page read and write
|
||
7FF54A37C000
|
unkown image
|
page readonly
|
||
15901E71000
|
unkown
|
page read and write
|
||
2B4898C2000
|
unkown
|
page read and write
|
||
2B48A18E000
|
unkown
|
page read and write
|
||
7FF50B139000
|
unkown image
|
page readonly
|
||
2B489F80000
|
unkown
|
page read and write
|
||
28FDD875000
|
unkown
|
page read and write
|
||
15902390000
|
unkown image
|
page readonly
|
||
28FDD660000
|
heap private
|
page read and write
|
||
FEFF2000
|
unkown image
|
page readonly
|
||
2B48A184000
|
unkown
|
page read and write
|
||
2B48A11D000
|
unkown
|
page read and write
|
||
7FF54E73F000
|
unkown image
|
page readonly
|
||
7FF58607D000
|
unkown image
|
page readonly
|
||
1350000
|
unkown
|
page execute and read and write
|
||
2B489871000
|
unkown
|
page read and write
|
||
7FF5861BD000
|
unkown image
|
page readonly
|
||
7DF593F10000
|
unkown image
|
page readonly
|
||
7FF5CA8F3000
|
unkown image
|
page readonly
|
||
7FF51AA65000
|
unkown image
|
page readonly
|
||
7FF50B143000
|
unkown image
|
page readonly
|
||
7FF50B15E000
|
unkown image
|
page readonly
|
||
D30000
|
unkown image
|
page readonly
|
||
7FF50AFFD000
|
unkown image
|
page readonly
|
||
7FF586135000
|
unkown image
|
page readonly
|
||
28C0000
|
heap private
|
page read and write
|
||
E31000
|
unkown
|
page read and write
|
||
7FF5CA9E1000
|
unkown image
|
page readonly
|
||
2B489902000
|
unkown
|
page read and write
|
||
E25000
|
unkown
|
page read and write
|
||
1AE0862A000
|
unkown
|
page read and write
|
||
FF000000
|
unkown image
|
page readonly
|
||
7DF528890000
|
unkown image
|
page readonly
|
||
2A9F000
|
stack
|
page read and write
|
||
7FF54A185000
|
unkown image
|
page readonly
|
||
1CA1BCB0000
|
unkown image
|
page readonly
|
||
1866F2F0000
|
unkown
|
page read and write
|
||
2B48A602000
|
unkown
|
page read and write
|
||
7FF51A96F000
|
unkown image
|
page readonly
|
||
F2F000
|
stack
|
page read and write
|
||
15902200000
|
unkown image
|
page readonly
|
||
7FF50B157000
|
unkown image
|
page readonly
|
||
1AE08702000
|
unkown
|
page read and write
|
||
1FB95C50000
|
unkown
|
page read and write
|
||
73F1E7D000
|
stack
|
page read and write
|
||
7FF51AB1D000
|
unkown image
|
page readonly
|
||
7FF51ABF4000
|
unkown image
|
page readonly
|
||
15901E5B000
|
unkown
|
page read and write
|
||
7FF54A437000
|
unkown image
|
page readonly
|
||
2C3DF830000
|
unkown image
|
page readonly
|
||
7FF54E8EF000
|
unkown image
|
page readonly
|
||
7FF54A1E4000
|
unkown image
|
page readonly
|
||
15901D60000
|
unkown
|
page read and write
|
||
B60000
|
unkown image
|
page readonly
|
||
DBA000
|
unkown
|
page execute and read and write
|
||
7FF57083D000
|
unkown image
|
page readonly
|
||
7DF5B9BD2000
|
unkown image
|
page readonly
|
||
1CA1C200000
|
unkown image
|
page readonly
|
||
2B48A198000
|
unkown
|
page read and write
|
||
7FF51A9C5000
|
unkown image
|
page readonly
|
||
7FF5ABE76000
|
unkown image
|
page readonly
|
||
7FF570931000
|
unkown image
|
page readonly
|
||
2B48A1A9000
|
unkown
|
page read and write
|
||
7FF54A286000
|
unkown image
|
page readonly
|
||
CAE000
|
stack
|
page read and write
|
||
D1FB0FC000
|
stack
|
page read and write
|
||
7FF54A3EE000
|
unkown image
|
page readonly
|
||
1866F380000
|
heap default
|
page read and write
|
||
566491C000
|
unkown
|
page read and write
|
||
8FC000
|
unkown
|
page read and write
|
||
7FF54A40F000
|
unkown image
|
page readonly
|
||
2E2E000
|
unkown
|
page read and write
|
||
28FDD829000
|
unkown
|
page read and write
|
||
E2E000
|
stack
|
page read and write
|
||
2C3DFA69000
|
unkown
|
page read and write
|
||
2B48A169000
|
unkown
|
page read and write
|
||
7FF51A9FB000
|
unkown image
|
page readonly
|
||
15901C30000
|
unkown image
|
page readonly
|
||
2B4898EC000
|
unkown
|
page read and write
|
||
2B48A185000
|
unkown
|
page read and write
|
||
2B48A19F000
|
unkown
|
page read and write
|
||
F90000
|
heap private
|
page read and write
|
||
1FB95C29000
|
unkown
|
page read and write
|
||
7FF5ABE6D000
|
unkown image
|
page readonly
|
||
4FAE000
|
stack
|
page read and write
|
||
1CA1BCB0000
|
unkown image
|
page readonly
|
||
18F1643C000
|
unkown
|
page read and write
|
||
7DF57E5B0000
|
unkown image
|
page readonly
|
||
1866F550000
|
unkown image
|
page readonly
|
||
7FF5CA766000
|
unkown image
|
page readonly
|
||
DB2000
|
unkown
|
page execute and read and write
|
||
7FF51AB19000
|
unkown image
|
page readonly
|
||
FEFF0000
|
unkown image
|
page readonly
|
||
1CA1BE4F000
|
unkown
|
page read and write
|
||
2E77000
|
unkown
|
page read and write
|
||
2B48A620000
|
unkown
|
page read and write
|
||
2B48A170000
|
unkown
|
page read and write
|
||
2B48A164000
|
unkown
|
page read and write
|
||
2B48A18E000
|
unkown
|
page read and write
|
||
7FF5CA6A0000
|
unkown image
|
page readonly
|
||
FD03B7B000
|
stack
|
page read and write
|
||
2B48A19C000
|
unkown
|
page read and write
|
||
C45000
|
heap default
|
page read and write
|
||
7FF54A29F000
|
unkown image
|
page readonly
|
||
7FF5862A1000
|
unkown image
|
page readonly
|
||
2B48984F000
|
unkown
|
page read and write
|
||
F0E000
|
stack
|
page read and write
|
||
7FF54A423000
|
unkown image
|
page readonly
|
||
7DF4D6510000
|
unkown image
|
page readonly
|
||
7FF54A47D000
|
unkown image
|
page readonly
|
||
2B48A1AF000
|
unkown
|
page read and write
|
||
2B48A189000
|
unkown
|
page read and write
|
||
2B48A19A000
|
unkown
|
page read and write
|
||
1386000
|
heap private
|
page read and write
|
||
7FF51AB47000
|
unkown image
|
page readonly
|
||
2B48A602000
|
unkown
|
page read and write
|
||
1AE08CA0000
|
unkown
|
page read and write
|
||
7FF54E8E9000
|
unkown image
|
page readonly
|
||
7FF50B03F000
|
unkown image
|
page readonly
|
||
2B48A190000
|
unkown
|
page read and write
|
||
7FF54E9C4000
|
unkown image
|
page readonly
|
||
FF010000
|
unkown image
|
page readonly
|
||
50ED000
|
stack
|
page read and write
|
||
2B48A17F000
|
unkown
|
page read and write
|
||
7FF57091A000
|
unkown image
|
page readonly
|
||
7FF54A2C1000
|
unkown image
|
page readonly
|
||
7FF5862B1000
|
unkown image
|
page readonly
|
||
7FF58622D000
|
unkown image
|
page readonly
|
||
1CA1BCE0000
|
unkown image
|
page readonly
|
||
7FF50B0B1000
|
unkown image
|
page readonly
|
||
7FF54E9E1000
|
unkown image
|
page readonly
|
||
1866F350000
|
unkown image
|
page readonly
|
||
2B48A17D000
|
unkown
|
page read and write
|
||
2B48A188000
|
unkown
|
page read and write
|
||
7FF54A4FA000
|
unkown image
|
page readonly
|
||
7DF558162000
|
unkown image
|
page readonly
|
||
1FB95BF0000
|
unkown
|
page read and write
|
||
6D50000
|
unkown
|
page read and write
|
||
7FF54E903000
|
unkown image
|
page readonly
|
||
EC7000
|
unkown
|
page execute and read and write
|
||
7DF518EA2000
|
unkown image
|
page readonly
|
||
7FF585E4A000
|
unkown image
|
page readonly
|
||
1866F2A5000
|
heap private
|
page read and write
|
||
E28000
|
heap default
|
page read and write
|
||
2B48A19A000
|
unkown
|
page read and write
|
||
7DF5D8650000
|
unkown image
|
page readonly
|
||
1CA1BE29000
|
unkown
|
page read and write
|
||
7DF5B9BC2000
|
unkown image
|
page readonly
|
||
A30000
|
unkown image
|
page readonly
|
||
FEFF0000
|
unkown image
|
page readonly
|
||
2C3DF860000
|
heap default
|
page read and write
|
||
18F16380000
|
unkown
|
page read and write
|
||
56650FE000
|
stack
|
page read and write
|
||
7FF57071B000
|
unkown image
|
page readonly
|
||
7FF570196000
|
unkown image
|
page readonly
|
||
56652FF000
|
stack
|
page read and write
|
||
18F16230000
|
unkown image
|
page readonly
|
||
6E30000
|
unkown
|
page read and write
|
||
18F16422000
|
unkown
|
page read and write
|
||
2B489F80000
|
unkown
|
page read and write
|
||
7FF57085E000
|
unkown image
|
page readonly
|
||
2B48A17D000
|
unkown
|
page read and write
|
||
5D0000
|
unkown image
|
page readonly
|
||
7FF51AC0A000
|
unkown image
|
page readonly
|
||
2B489F90000
|
unkown image
|
page read and write
|
||
2C3DFC00000
|
unkown image
|
page readonly
|
||
7FF586289000
|
unkown image
|
page readonly
|
||
582607A000
|
unkown
|
page read and write
|
||
28FDD6A0000
|
unkown image
|
page readonly
|
||
7FF58611C000
|
unkown image
|
page readonly
|
||
1FB95C3C000
|
unkown
|
page read and write
|
||
A00000
|
unkown image
|
page readonly
|
||
7FF58622A000
|
unkown image
|
page readonly
|
||
7FF570785000
|
unkown image
|
page readonly
|
||
BFE000
|
stack
|
page read and write
|
||
B49A6FD000
|
stack
|
page read and write
|
||
7FF51AA7C000
|
unkown image
|
page readonly
|
||
7FF54A2BC000
|
unkown image
|
page readonly
|
||
2B48A17F000
|
unkown
|
page read and write
|
||
1AE08CA0000
|
unkown
|
page read and write
|
||
7FF5ABF5A000
|
unkown image
|
page readonly
|
||
2B48984D000
|
unkown
|
page read and write
|
||
7FF54A1D2000
|
unkown image
|
page readonly
|
||
7FF51AAEE000
|
unkown image
|
page readonly
|
||
2B489908000
|
unkown
|
page read and write
|
||
7DF57E592000
|
unkown image
|
page readonly
|
||
1360000
|
unkown
|
page read and write
|
||
2961C7F000
|
stack
|
page read and write
|
||
28FDD670000
|
unkown image
|
page readonly
|
||
7FF50B17B000
|
unkown image
|
page readonly
|
||
7FF570850000
|
unkown image
|
page readonly
|
||
7FF570867000
|
unkown image
|
page readonly
|
||
7FF50B22A000
|
unkown image
|
page readonly
|
||
7DF558160000
|
unkown image
|
page readonly
|
||
7FF51AC10000
|
unkown image
|
page readonly
|
||
7FF51A577000
|
unkown image
|
page readonly
|
||
F30000
|
unkown image
|
page readonly
|
||
2B48A185000
|
unkown
|
page read and write
|
||
D70000
|
unkown
|
page read and write
|
||
D90000
|
unkown
|
page read and write
|
||
2B489913000
|
unkown
|
page read and write
|
||
7FF50B167000
|
unkown image
|
page readonly
|
||
18F1649E000
|
unkown
|
page read and write
|
||
7DF593F12000
|
unkown image
|
page readonly
|
||
2B4898F9000
|
unkown
|
page read and write
|
||
7FF54A40D000
|
unkown image
|
page readonly
|
||
7DF47C460000
|
unkown image
|
page readonly
|
||
7DF558172000
|
unkown image
|
page readonly
|
||
7DF593F12000
|
unkown image
|
page readonly
|
||
7FF5CA8D7000
|
unkown image
|
page readonly
|
||
7FF50AD11000
|
unkown image
|
page readonly
|
||
7FF585D97000
|
unkown image
|
page readonly
|
||
7FF51A57B000
|
unkown image
|
page readonly
|
||
7FF54E92B000
|
unkown image
|
page readonly
|
||
7FF57088E000
|
unkown image
|
page readonly
|
||
7FF54A3F7000
|
unkown image
|
page readonly
|
||
73F1D7D000
|
stack
|
page read and write
|
||
7FF54E52D000
|
unkown image
|
page readonly
|
||
7FF51AAF3000
|
unkown image
|
page readonly
|
||
D1FB37F000
|
stack
|
page read and write
|
||
7DF55C652000
|
unkown image
|
page readonly
|
||
2B489700000
|
heap private
|
page read and write
|
||
7F232000
|
unkown image
|
page readonly
|
||
7FF51AC01000
|
unkown image
|
page readonly
|
||
2B4898A7000
|
unkown
|
page read and write
|
||
2C3DF810000
|
unkown image
|
page readonly
|
||
6D60000
|
unkown
|
page read and write
|
||
2E11000
|
unkown
|
page read and write
|
||
7FF54E9D1000
|
unkown image
|
page readonly
|
||
7FF5ABEB3000
|
unkown image
|
page readonly
|
||
2B48A198000
|
unkown
|
page read and write
|
||
7FF51AA27000
|
unkown image
|
page readonly
|
||
7FF51A6F1000
|
unkown image
|
page readonly
|
||
2C3DF840000
|
unkown image
|
page readonly
|
||
28FDD857000
|
unkown
|
page read and write
|
||
7FF5CA697000
|
unkown image
|
page readonly
|
||
28FDD842000
|
unkown
|
page read and write
|
||
1AE08C70000
|
unkown
|
page read and write
|
||
1866F3B1000
|
unkown
|
page read and write
|
||
2C3DF810000
|
unkown image
|
page readonly
|
||
7FF54A44B000
|
unkown image
|
page readonly
|
||
1CA1C602000
|
unkown
|
page read and write
|
||
D1FACBB000
|
unkown
|
page read and write
|
||
7FF5ABF61000
|
unkown image
|
page readonly
|
||
1FB95D08000
|
unkown
|
page read and write
|
||
7FF5ABF39000
|
unkown image
|
page readonly
|
||
7FF50B18E000
|
unkown image
|
page readonly
|
||
7FF54A0FD000
|
unkown image
|
page readonly
|
||
7FF54E5ED000
|
unkown image
|
page readonly
|
||
7FF54A4FA000
|
unkown image
|
page readonly
|
||
7F232000
|
unkown image
|
page readonly
|
||
7DF5D8650000
|
unkown image
|
page readonly
|
||
B59000
|
unkown
|
page read and write
|
||
1390000
|
unkown image
|
page readonly
|
||
7FF51A996000
|
unkown image
|
page readonly
|
||
7FF50B221000
|
unkown image
|
page readonly
|
||
7FF51AAFE000
|
unkown image
|
page readonly
|
||
7FF54A4F1000
|
unkown image
|
page readonly
|
||
56655FF000
|
stack
|
page read and write
|
||
7FF5ABEDD000
|
unkown image
|
page readonly
|
||
28FDD862000
|
unkown
|
page read and write
|
||
7DF518EA0000
|
unkown image
|
page readonly
|
||
2B48A17D000
|
unkown
|
page read and write
|
||
2B489857000
|
unkown
|
page read and write
|
||
7DF528872000
|
unkown image
|
page readonly
|
||
7DF5B9BC2000
|
unkown image
|
page readonly
|
||
949000
|
unkown
|
page read and write
|
||
18F16470000
|
unkown
|
page read and write
|
||
1CA1BE13000
|
unkown
|
page read and write
|
||
15901D40000
|
unkown image
|
page readonly
|
||
2B48A189000
|
unkown
|
page read and write
|
||
1CA1BE4D000
|
unkown
|
page read and write
|
||
B49A97E000
|
stack
|
page read and write
|
||
94E387E000
|
stack
|
page read and write
|
||
7DF518EA2000
|
unkown image
|
page readonly
|
||
1AE084F0000
|
unkown image
|
page readonly
|
||
7FF5AB7A2000
|
unkown image
|
page readonly
|
||
58261F9000
|
stack
|
page read and write
|
||
7FF54E20D000
|
unkown image
|
page readonly
|
||
2B48A187000
|
unkown
|
page read and write
|
||
1CA1BF08000
|
unkown
|
page read and write
|
||
2C3E0300000
|
unkown
|
page read and write
|
||
1FB95B50000
|
unkown image
|
page read and write
|
||
7FF570853000
|
unkown image
|
page readonly
|
||
1FB95ED0000
|
unkown image
|
page readonly
|
||
7FF54E95D000
|
unkown image
|
page readonly
|
||
7FF51AA6B000
|
unkown image
|
page readonly
|
||
2C3DFB13000
|
unkown
|
page read and write
|
||
7FF54E861000
|
unkown image
|
page readonly
|
||
7FF51A44E000
|
unkown image
|
page readonly
|
||
15901BF0000
|
unkown image
|
page read and write
|
||
1CA1BE00000
|
unkown
|
page read and write
|
||
1866F360000
|
unkown image
|
page readonly
|
||
1CA1BF00000
|
unkown
|
page read and write
|
||
7FF51A9DD000
|
unkown image
|
page readonly
|
||
7FF58609B000
|
unkown image
|
page readonly
|
||
7FF51AA22000
|
unkown image
|
page readonly
|
||
7F230000
|
unkown image
|
page readonly
|
||
7DF57E592000
|
unkown image
|
page readonly
|
||
2E58000
|
unkown
|
page read and write
|
||
7FF5CA907000
|
unkown image
|
page readonly
|
||
2B48A603000
|
unkown
|
page read and write
|
||
2C3DFA6F000
|
unkown
|
page read and write
|
||
7FF54E6B5000
|
unkown image
|
page readonly
|
||
7FF50B09C000
|
unkown image
|
page readonly
|
||
15901C10000
|
unkown image
|
page readonly
|
||
2B48A19E000
|
unkown
|
page read and write
|
||
7DF593F30000
|
unkown image
|
page readonly
|
||
73F197E000
|
stack
|
page read and write
|
||
7FF5CA8E9000
|
unkown image
|
page readonly
|
||
7FF51AB8A000
|
unkown image
|
page readonly
|
||
7FF54E917000
|
unkown image
|
page readonly
|
||
15901E13000
|
unkown
|
page read and write
|
||
1866F3A8000
|
unkown
|
page read and write
|
||
D40000
|
heap private
|
page execute and read and write
|
||
2B48A1AE000
|
unkown
|
page read and write
|
||
7FF5861DE000
|
unkown image
|
page readonly
|
||
1AE08624000
|
unkown
|
page read and write
|
||
2C3DF960000
|
unkown
|
page read and write
|
||
1FB95B90000
|
unkown image
|
page readonly
|
||
FD03A7F000
|
stack
|
page read and write
|
||
6D6000
|
unkown
|
page read and write
|
||
7FF50B183000
|
unkown image
|
page readonly
|
||
7FF54A453000
|
unkown image
|
page readonly
|
||
28FDD84E000
|
unkown
|
page read and write
|
||
2B489829000
|
unkown
|
page read and write
|
||
2B48984A000
|
unkown
|
page read and write
|
||
1FB95BA0000
|
unkown image
|
page readonly
|
||
2B489730000
|
unkown image
|
page readonly
|
||
2B48A18E000
|
unkown
|
page read and write
|
||
7FF54A4D2000
|
unkown image
|
page readonly
|
||
94E3B7F000
|
stack
|
page read and write
|
||
1CA1BE8E000
|
unkown
|
page read and write
|
||
28FDD87B000
|
unkown
|
page read and write
|
||
7FF5CA93E000
|
unkown image
|
page readonly
|
||
7FF54E8F3000
|
unkown image
|
page readonly
|
||
7FF51A975000
|
unkown image
|
page readonly
|
||
29616FE000
|
stack
|
page read and write
|
||
7FF54E8CE000
|
unkown image
|
page readonly
|
||
1CA1C460000
|
unkown
|
page read and write
|
||
7FF5ABF32000
|
unkown image
|
page readonly
|
||
2C3E0332000
|
unkown
|
page read and write
|
||
B56000
|
unkown
|
page read and write
|
||
7FF5ABE8E000
|
unkown image
|
page readonly
|
||
2C3DFA8A000
|
unkown
|
page read and write
|
||
7FF58629A000
|
unkown image
|
page readonly
|
||
7FF51AB3E000
|
unkown image
|
page readonly
|
||
7DF57E5A2000
|
unkown image
|
page readonly
|
||
570000
|
unkown image
|
page readonly
|
||
2B48A19C000
|
unkown
|
page read and write
|
||
1FB95C4B000
|
unkown
|
page read and write
|
||
28FDD874000
|
unkown
|
page read and write
|
||
7DF55C660000
|
unkown image
|
page readonly
|
||
1AE08613000
|
unkown
|
page read and write
|
||
7DF528880000
|
unkown image
|
page readonly
|
||
2B48985E000
|
unkown
|
page read and write
|
||
2B48A196000
|
unkown
|
page read and write
|
||
6E20000
|
unkown
|
page read and write
|
||
7FF586227000
|
unkown image
|
page readonly
|
||
DAA000
|
unkown
|
page execute and read and write
|
||
7DF558172000
|
unkown image
|
page readonly
|
||
73F1C7E000
|
stack
|
page read and write
|
||
7FF54E66B000
|
unkown image
|
page readonly
|
||
7FF57073F000
|
unkown image
|
page readonly
|
||
2B48A184000
|
unkown
|
page read and write
|
||
1AE084C0000
|
unkown image
|
page readonly
|
||
7FF51AA95000
|
unkown image
|
page readonly
|
||
7F0000
|
unkown image
|
page readonly
|
||
522A000
|
stack
|
page read and write
|
||
7FF585E50000
|
unkown image
|
page readonly
|
||
FD0337E000
|
stack
|
page read and write
|
||
A50000
|
unkown
|
page read and write
|
||
7FF54E529000
|
unkown image
|
page readonly
|
||
2B48A18B000
|
unkown
|
page read and write
|
||
1CA1BCA0000
|
heap private
|
page read and write
|
||
7FF54A3D1000
|
unkown image
|
page readonly
|
||
2B48A18C000
|
unkown
|
page read and write
|
||
54FE000
|
stack
|
page read and write
|
||
2B48A163000
|
unkown
|
page read and write
|
||
28FDD85D000
|
unkown
|
page read and write
|
||
7DF558170000
|
unkown image
|
page readonly
|
||
2B48A186000
|
unkown
|
page read and write
|
||
D1FB87D000
|
stack
|
page read and write
|
||
7DF593F10000
|
unkown image
|
page readonly
|
||
7FF5861BF000
|
unkown image
|
page readonly
|
||
BAE000
|
stack
|
page read and write
|
||
7FF5862B1000
|
unkown image
|
page readonly
|
||
18F16513000
|
unkown
|
page read and write
|
||
1866F3B1000
|
unkown
|
page read and write
|
||
7FF5CA9B9000
|
unkown image
|
page readonly
|
||
1866F310000
|
unkown
|
page read and write
|
||
7DF528870000
|
unkown image
|
page readonly
|
||
2B48A17D000
|
unkown
|
page read and write
|
||
7FF585FAB000
|
unkown image
|
page readonly
|
||
7FF5705B5000
|
unkown image
|
page readonly
|
||
28FDD849000
|
unkown
|
page read and write
|
||
550000
|
unkown image
|
page read and write
|
||
2E81000
|
unkown
|
page read and write
|
||
7DF518E92000
|
unkown image
|
page readonly
|
||
7FF51A58C000
|
unkown image
|
page readonly
|
||
73F187E000
|
stack
|
page read and write
|
||
7FF5CA938000
|
unkown image
|
page readonly
|
||
7FF54A4E4000
|
unkown image
|
page readonly
|
||
296167E000
|
stack
|
page read and write
|
||
7FF54A4D9000
|
unkown image
|
page readonly
|
||
2B489760000
|
heap default
|
page read and write
|
||
6D30000
|
unkown image
|
page readonly
|
||
2B48A1B9000
|
unkown
|
page read and write
|
||
2B48A19A000
|
unkown
|
page read and write
|
||
7FF54E8ED000
|
unkown image
|
page readonly
|
||
2B48A1AF000
|
unkown
|
page read and write
|
||
7FF54E6B2000
|
unkown image
|
page readonly
|
||
7FF5861D0000
|
unkown image
|
page readonly
|
||
1AE08CA0000
|
unkown
|
page read and write
|
||
2B48A17D000
|
unkown
|
page read and write
|
||
1866F391000
|
unkown
|
page read and write
|
||
29613CC000
|
unkown
|
page read and write
|
||
2B48A185000
|
unkown
|
page read and write
|
||
7FF5707B1000
|
unkown image
|
page readonly
|
||
1330000
|
unkown image
|
page readonly
|
||
2B489740000
|
unkown image
|
page readonly
|
||
7FF54A44B000
|
unkown image
|
page readonly
|
||
7FF50B214000
|
unkown image
|
page readonly
|
||
5664FFF000
|
stack
|
page read and write
|
||
7DF55C640000
|
unkown image
|
page readonly
|
||
7FF54E6C4000
|
unkown image
|
page readonly
|
||
7FF54A427000
|
unkown image
|
page readonly
|
||
7FF50B1AA000
|
unkown image
|
page readonly
|
||
7FF5CA8ED000
|
unkown image
|
page readonly
|
||
7DF593F20000
|
unkown image
|
page readonly
|
||
2B48A17F000
|
unkown
|
page read and write
|
||
7DF57E5A2000
|
unkown image
|
page readonly
|
||
94E3A7E000
|
stack
|
page read and write
|
||
7FF54E35C000
|
unkown image
|
page readonly
|
||
2770000
|
unkown
|
page read and write
|
||
FD037FA000
|
stack
|
page read and write
|
||
15901E66000
|
unkown
|
page read and write
|
||
7FF5CA9D1000
|
unkown image
|
page readonly
|
||
2B48988A000
|
unkown
|
page read and write
|
||
1FB95BD0000
|
unkown image
|
page readonly
|
||
7FF54A4E4000
|
unkown image
|
page readonly
|
||
7DF558172000
|
unkown image
|
page readonly
|
||
2E5D000
|
unkown
|
page read and write
|
||
109E000
|
stack
|
page read and write
|
||
6C70000
|
unkown image
|
page readonly
|
||
28FDD833000
|
unkown
|
page read and write
|
||
7DF558162000
|
unkown image
|
page readonly
|
||
1AE084E0000
|
unkown image
|
page readonly
|
||
7F240000
|
unkown image
|
page readonly
|
||
18F16400000
|
unkown
|
page read and write
|
||
15901E3F000
|
unkown
|
page read and write
|
||
7FF54E8E4000
|
unkown image
|
page readonly
|
||
7FF51A7B0000
|
unkown image
|
page readonly
|
||
D1FB97F000
|
stack
|
page read and write
|
||
2B489710000
|
unkown image
|
page readonly
|
||
7FF51ABFA000
|
unkown image
|
page readonly
|
||
7DF4B7A90000
|
unkown image
|
page readonly
|
||
7FF50B150000
|
unkown image
|
page readonly
|
||
B49A67E000
|
stack
|
page read and write
|
||
6D2000
|
unkown
|
page read and write
|
||
7FF54A413000
|
unkown image
|
page readonly
|
||
7FF54A501000
|
unkown image
|
page readonly
|
||
15902602000
|
unkown
|
page read and write
|
||
7FF5861D7000
|
unkown image
|
page readonly
|
||
1CA1BE3C000
|
unkown
|
page read and write
|
||
7FF54A2EB000
|
unkown image
|
page readonly
|
||
2B48A1AD000
|
unkown
|
page read and write
|
||
2C3DFAE3000
|
unkown
|
page read and write
|
||
1AE08B90000
|
unkown image
|
page readonly
|
||
28FDD861000
|
unkown
|
page read and write
|
||
7FF51A956000
|
unkown image
|
page readonly
|
||
FF000000
|
unkown image
|
page readonly
|
||
7FF54E93E000
|
unkown image
|
page readonly
|
||
2E60000
|
unkown
|
page read and write
|
||
7DF518EB0000
|
unkown image
|
page readonly
|
||
3E11000
|
unkown
|
page read and write
|
||
1866F3B5000
|
unkown
|
page read and write
|
||
2C3DFACC000
|
unkown
|
page read and write
|
||
7FF570839000
|
unkown image
|
page readonly
|
||
7F230000
|
unkown image
|
page readonly
|
||
1866F290000
|
unkown image
|
page read and write
|
||
28FDDD80000
|
unkown image
|
page readonly
|
||
1866F3B1000
|
unkown
|
page read and write
|
||
A78000
|
heap default
|
page read and write
|
||
ECB000
|
unkown
|
page execute and read and write
|
||
18F16250000
|
unkown image
|
page readonly
|
||
7FF50AFB6000
|
unkown image
|
page readonly
|
||
2E6F000
|
unkown
|
page read and write
|
||
2B4898AB000
|
unkown
|
page read and write
|
||
D1FB67F000
|
stack
|
page read and write
|
||
7FF54A423000
|
unkown image
|
page readonly
|
||
7FF54A0C7000
|
unkown image
|
page readonly
|
||
2B48A1A7000
|
unkown
|
page read and write
|
||
7FF51A91B000
|
unkown image
|
page readonly
|
||
7FF51A899000
|
unkown image
|
page readonly
|
||
946000
|
unkown
|
page read and write
|
||
3EA047F000
|
stack
|
page read and write
|
||
28FDD864000
|
unkown
|
page read and write
|
||
7FF586282000
|
unkown image
|
page readonly
|
||
7DF5D8660000
|
unkown image
|
page readonly
|
||
B49AB7F000
|
stack
|
page read and write
|
||
7FF57078B000
|
unkown image
|
page readonly
|
||
1FB96402000
|
unkown
|
page read and write
|
||
7FF5CA900000
|
unkown image
|
page readonly
|
||
18F16220000
|
heap private
|
page read and write
|
||
7FF50B01B000
|
unkown image
|
page readonly
|
||
2B48985D000
|
unkown
|
page read and write
|
||
2B489710000
|
unkown image
|
page readonly
|
||
2B48A002000
|
unkown
|
page read and write
|
||
2B48A1DF000
|
unkown
|
page read and write
|
||
2E47000
|
unkown
|
page read and write
|
||
2B48A198000
|
unkown
|
page read and write
|
||
D82000
|
unkown
|
page execute and read and write
|
||
28FDD840000
|
unkown
|
page read and write
|
||
7FF586061000
|
unkown image
|
page readonly
|
||
2B48A190000
|
unkown
|
page read and write
|
||
15902000000
|
unkown image
|
page readonly
|
||
7FF5ABBE9000
|
unkown image
|
page readonly
|
||
7FF586131000
|
unkown image
|
page readonly
|
||
7DF528880000
|
unkown image
|
page readonly
|
||
7FF5CA9DA000
|
unkown image
|
page readonly
|
||
1866F3C0000
|
unkown
|
page read and write
|
||
FD03CFF000
|
stack
|
page read and write
|
||
7DF57E5A0000
|
unkown image
|
page readonly
|
||
7DF528872000
|
unkown image
|
page readonly
|
||
7FF51AABF000
|
unkown image
|
page readonly
|
||
7DF558170000
|
unkown image
|
page readonly
|
||
1FB95B60000
|
heap private
|
page read and write
|
||
7DF518E90000
|
unkown image
|
page readonly
|
||
1AE08626000
|
unkown
|
page read and write
|
||
7FF51A452000
|
unkown image
|
page readonly
|
||
15902380000
|
unkown image
|
page readonly
|
||
1AE08602000
|
unkown
|
page read and write
|
||
CEE000
|
stack
|
page read and write
|
||
2B48A19B000
|
unkown
|
page read and write
|
||
512D000
|
stack
|
page read and write
|
||
2B48A187000
|
unkown
|
page read and write
|
||
3E9FFFB000
|
stack
|
page read and write
|
||
D8A000
|
unkown
|
page execute and read and write
|
||
28FDD7C0000
|
unkown
|
page read and write
|
||
2961B7F000
|
stack
|
page read and write
|
||
28FDD865000
|
unkown
|
page read and write
|
||
7FF54E9B9000
|
unkown image
|
page readonly
|
||
7FF5CA8C4000
|
unkown image
|
page readonly
|
||
7FF54A47D000
|
unkown image
|
page readonly
|
||
7FF5708AD000
|
unkown image
|
page readonly
|
||
FF002000
|
unkown image
|
page readonly
|
||
937000
|
unkown
|
page read and write
|
||
7FF54E900000
|
unkown image
|
page readonly
|
||
7FF570931000
|
unkown image
|
page readonly
|
||
D1FB4FC000
|
stack
|
page read and write
|
||
7FF585D91000
|
unkown image
|
page readonly
|
||
7FF586294000
|
unkown image
|
page readonly
|
||
1866F396000
|
unkown
|
page read and write
|
||
7FF54A501000
|
unkown image
|
page readonly
|
||
52BE000
|
stack
|
page read and write
|
||
7FF5861C3000
|
unkown image
|
page readonly
|
||
3E9FE7E000
|
stack
|
page read and write
|
||
7FF50B13D000
|
unkown image
|
page readonly
|
||
2B48A167000
|
unkown
|
page read and write
|
||
15901E2A000
|
unkown
|
page read and write
|
||
15901E00000
|
unkown
|
page read and write
|
||
7FF5708A7000
|
unkown image
|
page readonly
|
||
18F16280000
|
heap default
|
page read and write
|
||
2B48A1AB000
|
unkown
|
page read and write
|
||
7FF54A42E000
|
unkown image
|
page readonly
|
||
7FF54A413000
|
unkown image
|
page readonly
|
||
1CA1BE52000
|
unkown
|
page read and write
|
||
7FF5CA9E1000
|
unkown image
|
page readonly
|
||
1FB95D02000
|
unkown
|
page read and write
|
||
2B489916000
|
unkown
|
page read and write
|
||
2B489859000
|
unkown
|
page read and write
|
||
2B489883000
|
unkown
|
page read and write
|
||
138A000
|
heap private
|
page read and write
|
||
7FF5CA9C4000
|
unkown image
|
page readonly
|
||
7FF51A779000
|
unkown image
|
page readonly
|
||
7FF54A3E3000
|
unkown image
|
page readonly
|
||
1FB960D0000
|
unkown image
|
page readonly
|
||
A5A000
|
unkown
|
page read and write
|
||
1FB95B70000
|
unkown image
|
page readonly
|
||
7DF558170000
|
unkown image
|
page readonly
|
||
2B48A14C000
|
unkown
|
page read and write
|
||
DFB000
|
heap default
|
page read and write
|
||
28FDE002000
|
unkown
|
page read and write
|
||
2B48984C000
|
unkown
|
page read and write
|
||
7F130000
|
unkown image
|
page readonly
|
||
1866F2B0000
|
unkown image
|
page readonly
|
||
FEEF0000
|
unkown image
|
page readonly
|
||
2C3DFA00000
|
unkown
|
page read and write
|
||
D95000
|
unkown
|
page execute and read and write
|
||
2B48A189000
|
unkown
|
page read and write
|
||
2B489F30000
|
unkown image
|
page write copy
|
||
7FF54E95A000
|
unkown image
|
page readonly
|
||
2B489853000
|
unkown
|
page read and write
|
||
2B48A600000
|
unkown
|
page read and write
|
||
56656FF000
|
stack
|
page read and write
|
||
7FF570921000
|
unkown image
|
page readonly
|
||
2961A77000
|
stack
|
page read and write
|
||
28FDD833000
|
unkown
|
page read and write
|
||
18F16449000
|
unkown
|
page read and write
|
||
DEF000
|
stack
|
page read and write
|
||
7FF5ABE80000
|
unkown image
|
page readonly
|
||
1CA1BE47000
|
unkown
|
page read and write
|
||
1CA1BE6C000
|
unkown
|
page read and write
|
||
28FDD86D000
|
unkown
|
page read and write
|
||
7FF51A8D7000
|
unkown image
|
page readonly
|
||
2B48A19B000
|
unkown
|
page read and write
|
||
7FF51A961000
|
unkown image
|
page readonly
|
||
7FF5706B6000
|
unkown image
|
page readonly
|
||
7FF5CA90E000
|
unkown image
|
page readonly
|
||
7FF51AAEA000
|
unkown image
|
page readonly
|
||
7FF54A286000
|
unkown image
|
page readonly
|
||
2B48A602000
|
unkown
|
page read and write
|
||
94E367E000
|
stack
|
page read and write
|
||
7FF50AF2B000
|
unkown image
|
page readonly
|
||
C3E000
|
stack
|
page read and write
|
||
7FF54A420000
|
unkown image
|
page readonly
|
||
7FF54E85C000
|
unkown image
|
page readonly
|
||
7FF5861D3000
|
unkown image
|
page readonly
|
||
1CA1C000000
|
unkown image
|
page readonly
|
||
7FF50B127000
|
unkown image
|
page readonly
|
||
7DF558170000
|
unkown image
|
page readonly
|
||
7FF5CA8EF000
|
unkown image
|
page readonly
|
||
1FB95C7C000
|
unkown
|
page read and write
|
||
2B48A1A9000
|
unkown
|
page read and write
|
||
28FDD6C0000
|
heap default
|
page read and write
|
||
2B489850000
|
unkown
|
page read and write
|
||
FD032FB000
|
unkown
|
page read and write
|
||
7FF5CA9B2000
|
unkown image
|
page readonly
|
||
2B48A190000
|
unkown
|
page read and write
|
||
18F1644D000
|
unkown
|
page read and write
|
||
7F0D0000
|
unkown
|
page execute and read and write
|
||
7FF51AB5B000
|
unkown image
|
page readonly
|
||
7DF55C642000
|
unkown image
|
page readonly
|
||
7FF570417000
|
unkown image
|
page readonly
|
||
7FF51AB87000
|
unkown image
|
page readonly
|
||
DC0000
|
heap default
|
page read and write
|
||
7DF55C650000
|
unkown image
|
page readonly
|
||
7FF5ABF44000
|
unkown image
|
page readonly
|
||
2C3DFA3E000
|
unkown
|
page read and write
|
||
7FF5862AA000
|
unkown image
|
page readonly
|
||
2B48984B000
|
unkown
|
page read and write
|
||
7FF5ABE73000
|
unkown image
|
page readonly
|
||
7FF50ADD0000
|
unkown image
|
page readonly
|
||
18F16600000
|
unkown image
|
page readonly
|
||
7FF54A0C2000
|
unkown image
|
page readonly
|
||
7FF5ABEAB000
|
unkown image
|
page readonly
|
||
7DF57E590000
|
unkown image
|
page readonly
|
||
1AE08E02000
|
unkown
|
page read and write
|
||
7FF54E766000
|
unkown image
|
page readonly
|
||
7FF54A47A000
|
unkown image
|
page readonly
|
||
2B48A187000
|
unkown
|
page read and write
|
||
3EA037F000
|
stack
|
page read and write
|
||
94E33CB000
|
unkown
|
page read and write
|
||
2B48A17D000
|
unkown
|
page read and write
|
||
18F1649B000
|
unkown
|
page read and write
|
||
28FDD902000
|
unkown
|
page read and write
|
||
B49A38B000
|
unkown
|
page read and write
|
||
7FF54E8C3000
|
unkown image
|
page readonly
|
||
28FDD85A000
|
unkown
|
page read and write
|
||
15901C60000
|
heap default
|
page read and write
|
||
2E6A000
|
unkown
|
page read and write
|
||
2C3E0202000
|
unkown
|
page read and write
|
||
7DF57E5B0000
|
unkown image
|
page readonly
|
||
FD038F7000
|
stack
|
page read and write
|
||
7FF54A40A000
|
unkown image
|
page readonly
|
||
F10000
|
unkown
|
page read and write
|
||
2B48A185000
|
unkown
|
page read and write
|
||
2C3DFA29000
|
unkown
|
page read and write
|
||
1AE08CB0000
|
unkown
|
page read and write
|
||
2B48A184000
|
unkown
|
page read and write
|
||
2C3DF7F0000
|
unkown image
|
page read and write
|
||
D92000
|
unkown
|
page execute and read and write
|
||
2B48A165000
|
unkown
|
page read and write
|
||
7DF456030000
|
unkown image
|
page readonly
|
||
3EA017E000
|
stack
|
page read and write
|
||
18F16413000
|
unkown
|
page read and write
|
||
2B48A188000
|
unkown
|
page read and write
|
||
53BE000
|
stack
|
page read and write
|
||
7FF5CA933000
|
unkown image
|
page readonly
|
There are 1122 hidden memdumps, click here to show them.