Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
aEdlObiYav.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\edb.log
|
data
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
|
Extensible storage engine DataBase, version 0x620, checksum 0x04dffe7c, page size 16384, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
data
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
|
data
|
modified
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\aEdlObiYav.exe
|
'C:\Users\user\Desktop\aEdlObiYav.exe'
|
|
|
|
C:\Users\user\Desktop\aEdlObiYav.exe
|
--79fd8b32
|
|
|
|
C:\Windows\SysWOW64\picturerus.exe
|
C:\Windows\SysWOW64\picturerus.exe
|
|
|
|
C:\Windows\SysWOW64\picturerus.exe
|
--b743c2a4
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k NetworkService -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
|
|
|
|
C:\Windows\System32\SgrmBroker.exe
|
C:\Windows\system32\SgrmBroker.exe
|
|
|
|
C:\Program Files\Windows Defender\MpCmdRun.exe
|
'C:\Program Files\Windows Defender\mpcmdrun.exe' -wdenable
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
There are 2 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Driving
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
|
unknown
|
|
|
|
https://t0.tiles.ditu.live.com/tiles/gen
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Walking
|
unknown
|
|
|
|
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
|
unknown
|
|
|
|
https://%s.xboxlive.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Locations
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
|
unknown
|
|
|
|
https://dynamic.t
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Transit
|
unknown
|
|
|
|
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
|
unknown
|
|
|
|
https://appexmapsappupdate.blob.core.windows.net
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
http://178.210.51.222/attrib/glitch/add/merge/
|
unknown
|
|
|
|
https://activity.windows.com
|
unknown
|
|
|
|
http://www.bingmapsportal.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Locations
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://%s.dnet.xboxlive.com
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
|
unknown
|
|
There are 25 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
152.89.236.214
|
unknown
|
Germany
|
|
|
|
198.199.114.69
|
unknown
|
United States
|
|
|
|
104.236.246.93
|
unknown
|
United States
|
|
|
|
178.210.51.222
|
unknown
|
Russian Federation
|
|
|
|
45.33.54.74
|
unknown
|
United States
|
|
|
|
209.141.41.136
|
unknown
|
United States
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
|
|
87.106.136.232
|
unknown
|
Germany
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\svchost.exe
|
cval
|
|
|
|
C:\Windows\System32\svchost.exe
|
cval
|
|
|
|
C:\Windows\System32\svchost.exe
|
PerfMMFileName
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-100
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-101
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\dnsapi.dll,-103
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\NgcRecovery.dll,-100
|
|
|
|
C:\Windows\System32\svchost.exe
|
MonthID
|
|
There are 2 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
ED1000
|
unkown
|
page execute read
|
|
|
|
E21000
|
unkown
|
page execute read
|
|
|
|
2180000
|
unkown
|
page execute and read and write
|
|
|
|
2191000
|
unkown
|
page execute read
|
|
|
|
22C0000
|
unkown
|
page execute and read and write
|
|
|
|
E10000
|
unkown
|
page execute and read and write
|
|
|
|
22D1000
|
unkown
|
page execute read
|
|
|
|
600000
|
unkown
|
page execute and read and write
|
|
|
|
23F57C4E000
|
unkown
|
page read and write
|
|
|
|
781000
|
unkown
|
page read and write
|
|
|
|
DD65FB000
|
unkown
|
page read and write
|
|
|
|
DD6D7B000
|
unkown
|
page read and write
|
|
|
|
2140000
|
heap private
|
page read and write
|
|
|
|
7FF5B909F000
|
unkown
|
page readonly
|
|
|
|
7FF55B6FA000
|
unkown
|
page readonly
|
|
|
|
7FF55D817000
|
unkown
|
page readonly
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
1D9ACF13000
|
unkown
|
page read and write
|
|
|
|
7FF588CCC000
|
unkown
|
page readonly
|
|
|
|
209FFB8C000
|
unkown
|
page read and write
|
|
|
|
7FF4FE355000
|
unkown
|
page readonly
|
|
|
|
1F6348E0000
|
unkown
|
page write copy
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF59B0ED000
|
unkown
|
page readonly
|
|
|
|
455000
|
unkown image
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
56C0D7E000
|
unkown
|
page read and write
|
|
|
|
76F000
|
unkown
|
page read and write
|
|
|
|
7FF549EA9000
|
unkown
|
page readonly
|
|
|
|
E33000
|
unkown
|
page readonly
|
|
|
|
209FDA00000
|
unkown
|
page read and write
|
|
|
|
7FF4FE569000
|
unkown
|
page readonly
|
|
|
|
209FFB54000
|
unkown
|
page read and write
|
|
|
|
7FF5D9803000
|
unkown
|
page readonly
|
|
|
|
7FF588B5D000
|
unkown
|
page readonly
|
|
|
|
7FF4FE527000
|
unkown
|
page readonly
|
|
|
|
22A0000
|
unkown
|
page read and write
|
|
|
|
1D9ACE62000
|
unkown
|
page read and write
|
|
|
|
1F634A1F000
|
unkown
|
page read and write
|
|
|
|
7FF55D94B000
|
unkown
|
page readonly
|
|
|
|
2640000
|
unkown
|
page readonly
|
|
|
|
7FF50A9B8000
|
unkown
|
page readonly
|
|
|
|
7FF5B908B000
|
unkown
|
page readonly
|
|
|
|
1D9ACECB000
|
unkown
|
page read and write
|
|
|
|
26290FC000
|
unkown
|
page read and write
|
|
|
|
2150000
|
unkown
|
page readonly
|
|
|
|
209FF840000
|
unkown
|
page read and write
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
7FF588DBF000
|
unkown
|
page readonly
|
|
|
|
23F57C69000
|
unkown
|
page read and write
|
|
|
|
7FF55B95B000
|
unkown
|
page readonly
|
|
|
|
477000
|
unkown image
|
page read and write
|
|
|
|
2C3536D0000
|
heap default
|
page read and write
|
|
|
|
7FF588C3E000
|
unkown
|
page readonly
|
|
|
|
20981010000
|
unkown
|
page read and write
|
|
|
|
7FF4FE537000
|
unkown
|
page readonly
|
|
|
|
1F63491C000
|
unkown
|
page readonly
|
|
|
|
DD6EFC000
|
unkown
|
page read and write
|
|
|
|
1F630120000
|
unkown
|
page read and write
|
|
|
|
20980202000
|
unkown
|
page read and write
|
|
|
|
23F57C57000
|
unkown
|
page read and write
|
|
|
|
DD6BFA000
|
unkown
|
page read and write
|
|
|
|
157C7AD0000
|
unkown
|
page readonly
|
|
|
|
7FF55D878000
|
unkown
|
page readonly
|
|
|
|
1F634A86000
|
unkown
|
page read and write
|
|
|
|
7FF4FE3A7000
|
unkown
|
page readonly
|
|
|
|
7FF59B247000
|
unkown
|
page readonly
|
|
|
|
209FF830000
|
heap private
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
1F630103000
|
unkown
|
page read and write
|
|
|
|
192C000
|
unkown
|
page read and write
|
|
|
|
2130000
|
unkown
|
page readonly
|
|
|
|
209FDB34000
|
unkown
|
page read and write
|
|
|
|
7FF588BD6000
|
unkown
|
page readonly
|
|
|
|
209FFC78000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF4FE565000
|
unkown
|
page readonly
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
1F62F276000
|
unkown
|
page read and write
|
|
|
|
7CE000
|
stack
|
page read and write
|
|
|
|
1D9AD602000
|
unkown
|
page read and write
|
|
|
|
2280000
|
unkown
|
page readonly
|
|
|
|
90F000
|
stack
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
209FFC46000
|
unkown
|
page read and write
|
|
|
|
262957F000
|
unkown
|
page read and write
|
|
|
|
157C7889000
|
unkown
|
page read and write
|
|
|
|
7FF5D9944000
|
unkown
|
page readonly
|
|
|
|
F6D73F9000
|
unkown
|
page read and write
|
|
|
|
7FF55B8B3000
|
unkown
|
page readonly
|
|
|
|
1D9AD712000
|
unkown
|
page read and write
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
7FF59B289000
|
unkown
|
page readonly
|
|
|
|
209FFCCA000
|
unkown
|
page read and write
|
|
|
|
7FF54A608000
|
unkown
|
page readonly
|
|
|
|
7FF55D838000
|
unkown
|
page readonly
|
|
|
|
2C353835000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
7FF5B8FAD000
|
unkown
|
page readonly
|
|
|
|
455000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF55B8A5000
|
unkown
|
page readonly
|
|
|
|
7FF5B88F4000
|
unkown
|
page readonly
|
|
|
|
CF2D07E000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
7FF50A307000
|
unkown
|
page readonly
|
|
|
|
7D2000
|
unkown
|
page read and write
|
|
|
|
4B6B87F000
|
unkown
|
page read and write
|
|
|
|
7FF5D9926000
|
unkown
|
page readonly
|
|
|
|
1F62FB18000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
209FDBB8000
|
unkown
|
page read and write
|
|
|
|
7FF55D681000
|
unkown
|
page readonly
|
|
|
|
7FF55B96F000
|
unkown
|
page readonly
|
|
|
|
2160000
|
unkown
|
page read and write
|
|
|
|
1F634AB1000
|
unkown
|
page read and write
|
|
|
|
7FF50A9AC000
|
unkown
|
page readonly
|
|
|
|
1F6349F0000
|
unkown
|
page readonly
|
|
|
|
20980302000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF55D797000
|
unkown
|
page readonly
|
|
|
|
209FDB33000
|
unkown
|
page read and write
|
|
|
|
1F634AAF000
|
unkown
|
page read and write
|
|
|
|
1D9ACEBA000
|
unkown
|
page read and write
|
|
|
|
7FF50AA5F000
|
unkown
|
page readonly
|
|
|
|
90F000
|
stack
|
page read and write
|
|
|
|
398000
|
unkown
|
page read and write
|
|
|
|
1F62F2B7000
|
unkown
|
page read and write
|
|
|
|
7FF55D6B0000
|
unkown
|
page readonly
|
|
|
|
20979C3D000
|
unkown
|
page read and write
|
|
|
|
7FF588CED000
|
unkown
|
page readonly
|
|
|
|
7FF55B131000
|
unkown
|
page readonly
|
|
|
|
1F62F9E1000
|
unkown
|
page read and write
|
|
|
|
781000
|
unkown
|
page read and write
|
|
|
|
23F57A10000
|
heap default
|
page read and write
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
1F634970000
|
unkown
|
page readonly
|
|
|
|
1F62F28D000
|
unkown
|
page read and write
|
|
|
|
209FDAB3000
|
unkown
|
page read and write
|
|
|
|
209FFC00000
|
unkown
|
page read and write
|
|
|
|
209FFB70000
|
unkown
|
page read and write
|
|
|
|
7FF5B8FE3000
|
unkown
|
page readonly
|
|
|
|
20981210000
|
unkown
|
page read and write
|
|
|
|
209FDB44000
|
unkown
|
page read and write
|
|
|
|
2F0C000
|
stack
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page readonly
|
|
|
|
389000
|
unkown
|
page read and write
|
|
|
|
21209F90000
|
unkown
|
page readonly
|
|
|
|
7FF54A5B5000
|
unkown
|
page readonly
|
|
|
|
590000
|
heap default
|
page read and write
|
|
|
|
1F634818000
|
unkown
|
page read and write
|
|
|
|
7FF4FE4DA000
|
unkown
|
page readonly
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
20981510000
|
unkown
|
page read and write
|
|
|
|
DD637A000
|
unkown
|
page read and write
|
|
|
|
47E000
|
unkown image
|
page readonly
|
|
|
|
7FF55B77D000
|
unkown
|
page readonly
|
|
|
|
7FF55D84C000
|
unkown
|
page readonly
|
|
|
|
7FF55B940000
|
unkown
|
page readonly
|
|
|
|
455000
|
unkown image
|
page readonly
|
|
|
|
209FFBDA000
|
unkown
|
page read and write
|
|
|
|
2097A260000
|
unkown
|
page readonly
|
|
|
|
209FF8A0000
|
unkown
|
page read and write
|
|
|
|
1F62FB13000
|
unkown
|
page read and write
|
|
|
|
1D9ACE24000
|
unkown
|
page read and write
|
|
|
|
7FF55B799000
|
unkown
|
page readonly
|
|
|
|
209FFC03000
|
unkown
|
page read and write
|
|
|
|
209FFB06000
|
unkown
|
page read and write
|
|
|
|
7FF4FE467000
|
unkown
|
page readonly
|
|
|
|
7FF50A9EA000
|
unkown
|
page readonly
|
|
|
|
29F0000
|
unkown
|
page readonly
|
|
|
|
90F000
|
stack
|
page read and write
|
|
|
|
ED0000
|
unkown
|
page read and write
|
|
|
|
CF2C9DB000
|
unkown
|
page read and write
|
|
|
|
20981210000
|
unkown
|
page read and write
|
|
|
|
4D632FD000
|
unkown
|
page read and write
|
|
|
|
9A000
|
unkown
|
page read and write
|
|
|
|
7FF4FE512000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1F62F302000
|
unkown
|
page read and write
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
20981010000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
20981310000
|
unkown
|
page read and write
|
|
|
|
1D9ACE64000
|
unkown
|
page read and write
|
|
|
|
209FDB2D000
|
unkown
|
page read and write
|
|
|
|
20979C58000
|
unkown
|
page read and write
|
|
|
|
7FF59B116000
|
unkown
|
page readonly
|
|
|
|
DD6A7A000
|
unkown
|
page read and write
|
|
|
|
7FF55D718000
|
unkown
|
page readonly
|
|
|
|
1F634AAA000
|
unkown
|
page read and write
|
|
|
|
225B2E1F000
|
unkown
|
page read and write
|
|
|
|
7FF59B34D000
|
unkown
|
page readonly
|
|
|
|
209FF820000
|
unkown
|
page readonly
|
|
|
|
1F62F299000
|
unkown
|
page read and write
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
7FF5D951B000
|
unkown
|
page readonly
|
|
|
|
20981510000
|
unkown
|
page read and write
|
|
|
|
2628C7C000
|
unkown
|
page read and write
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
7B2000
|
unkown
|
page read and write
|
|
|
|
209FDAF5000
|
unkown
|
page read and write
|
|
|
|
7FF59B334000
|
unkown
|
page readonly
|
|
|
|
4F0000
|
heap default
|
page read and write
|
|
|
|
20981310000
|
unkown
|
page read and write
|
|
|
|
7FF59B224000
|
unkown
|
page readonly
|
|
|
|
209FDBCC000
|
unkown
|
page read and write
|
|
|
|
7FF59AB20000
|
unkown
|
page readonly
|
|
|
|
7FF59B04D000
|
unkown
|
page readonly
|
|
|
|
209FDADC000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
209FF8A0000
|
unkown
|
page read and write
|
|
|
|
4D6347C000
|
unkown
|
page read and write
|
|
|
|
20981210000
|
unkown
|
page read and write
|
|
|
|
7FF588A98000
|
unkown
|
page readonly
|
|
|
|
23A0000
|
unkown
|
page readonly
|
|
|
|
157C7887000
|
unkown
|
page read and write
|
|
|
|
2270000
|
heap private
|
page read and write
|
|
|
|
F30000
|
unkown
|
page read and write
|
|
|
|
4B6B27B000
|
unkown
|
page read and write
|
|
|
|
209FFC46000
|
unkown
|
page read and write
|
|
|
|
DC18FF000
|
unkown
|
page read and write
|
|
|
|
20979BE0000
|
unkown
|
page readonly
|
|
|
|
4B0000
|
heap default
|
page read and write
|
|
|
|
1D9ACE89000
|
unkown
|
page read and write
|
|
|
|
209FDA57000
|
unkown
|
page read and write
|
|
|
|
7B2000
|
unkown
|
page read and write
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
7FF55D853000
|
unkown
|
page readonly
|
|
|
|
2380000
|
unkown
|
page readonly
|
|
|
|
1F634700000
|
unkown
|
page read and write
|
|
|
|
209FFB03000
|
unkown
|
page read and write
|
|
|
|
47B000
|
unkown image
|
page read and write
|
|
|
|
7FF59B320000
|
unkown
|
page readonly
|
|
|
|
225B2DD8000
|
heap default
|
page read and write
|
|
|
|
7FF55D95F000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF50A68A000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
20981010000
|
unkown
|
page read and write
|
|
|
|
209FFB50000
|
unkown
|
page read and write
|
|
|
|
F50000
|
heap private
|
page read and write
|
|
|
|
4CE000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF4FE548000
|
unkown
|
page readonly
|
|
|
|
209FFD00000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page read and write
|
|
|
|
7FF5D995F000
|
unkown
|
page readonly
|
|
|
|
7FF5B908E000
|
unkown
|
page readonly
|
|
|
|
2DCF000
|
stack
|
page read and write
|
|
|
|
4D0000
|
heap default
|
page read and write
|
|
|
|
7FF588C34000
|
unkown
|
page readonly
|
|
|
|
47E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B8D56000
|
unkown
|
page readonly
|
|
|
|
7FF54A568000
|
unkown
|
page readonly
|
|
|
|
20981410000
|
unkown
|
page read and write
|
|
|
|
1D9ACBF0000
|
heap private
|
page read and write
|
|
|
|
157C783F000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
477000
|
unkown image
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
23F57C7A000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF55B89D000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF588D8E000
|
unkown
|
page readonly
|
|
|
|
7FF59B29A000
|
unkown
|
page readonly
|
|
|
|
225B3A00000
|
unkown
|
page read and write
|
|
|
|
209FDBFC000
|
unkown
|
page read and write
|
|
|
|
1F634840000
|
unkown
|
page read and write
|
|
|
|
477000
|
unkown image
|
page read and write
|
|
|
|
7FF55D64C000
|
unkown
|
page readonly
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
209FDADC000
|
unkown
|
page read and write
|
|
|
|
7FF4FE55D000
|
unkown
|
page readonly
|
|
|
|
7FF54A593000
|
unkown
|
page readonly
|
|
|
|
7FF59B32D000
|
unkown
|
page readonly
|
|
|
|
7FF5D994E000
|
unkown
|
page readonly
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
56C087E000
|
unkown
|
page read and write
|
|
|
|
157C7813000
|
unkown
|
page read and write
|
|
|
|
7FF588CD8000
|
unkown
|
page readonly
|
|
|
|
2C353856000
|
unkown
|
page read and write
|
|
|
|
1D9AD390000
|
unkown
|
page readonly
|
|
|
|
7FF55D94E000
|
unkown
|
page readonly
|
|
|
|
1F634960000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
4B6B37E000
|
unkown
|
page read and write
|
|
|
|
209FFCD6000
|
unkown
|
page read and write
|
|
|
|
7FF5D994B000
|
unkown
|
page readonly
|
|
|
|
20980242000
|
unkown
|
page read and write
|
|
|
|
7FF50A9D9000
|
unkown
|
page readonly
|
|
|
|
7FF5B9070000
|
unkown
|
page readonly
|
|
|
|
A70000
|
unkown
|
page readonly
|
|
|
|
56F000
|
heap default
|
page read and write
|
|
|
|
19C000
|
stack
|
page read and write
|
|
|
|
7FF50AA03000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1F634950000
|
unkown
|
page read and write
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
38F000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
56C0C7E000
|
unkown
|
page read and write
|
|
|
|
1F62FA02000
|
unkown
|
page read and write
|
|
|
|
7FF50A94D000
|
unkown
|
page readonly
|
|
|
|
7FF5D9918000
|
unkown
|
page readonly
|
|
|
|
7FF50A7C5000
|
unkown
|
page readonly
|
|
|
|
7FF59B258000
|
unkown
|
page readonly
|
|
|
|
23F57C49000
|
unkown
|
page read and write
|
|
|
|
DD667B000
|
unkown
|
page read and write
|
|
|
|
7FF588604000
|
unkown
|
page readonly
|
|
|
|
910000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF59B1CE000
|
unkown
|
page readonly
|
|
|
|
7FF55D867000
|
unkown
|
page readonly
|
|
|
|
1F62F288000
|
unkown
|
page read and write
|
|
|
|
1F630110000
|
unkown
|
page read and write
|
|
|
|
80E000
|
unkown
|
page read and write
|
|
|
|
FEE000
|
unkown
|
page read and write
|
|
|
|
7FF5D986C000
|
unkown
|
page readonly
|
|
|
|
209FDC00000
|
unkown
|
page readonly
|
|
|
|
469000
|
unkown image
|
page write copy
|
|
|
|
2097A600000
|
unkown
|
page read and write
|
|
|
|
477000
|
unkown image
|
page read and write
|
|
|
|
209FF3C0000
|
unkown
|
page read and write
|
|
|
|
28DF000
|
stack
|
page read and write
|
|
|
|
2CCE000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
20981510000
|
unkown
|
page read and write
|
|
|
|
7FF4FE20D000
|
unkown
|
page readonly
|
|
|
|
DD697B000
|
unkown
|
page read and write
|
|
|
|
DC167F000
|
unkown
|
page read and write
|
|
|
|
23F57C42000
|
unkown
|
page read and write
|
|
|
|
7FF55D5D9000
|
unkown
|
page readonly
|
|
|
|
5B0000
|
unkown
|
page readonly
|
|
|
|
2404000
|
heap private
|
page read and write
|
|
|
|
7CE000
|
stack
|
page read and write
|
|
|
|
209FDBBA000
|
unkown
|
page read and write
|
|
|
|
4B7000
|
heap default
|
page read and write
|
|
|
|
7FF4FE573000
|
unkown
|
page readonly
|
|
|
|
2628F7E000
|
unkown
|
page read and write
|
|
|
|
2120A0A0000
|
unkown
|
page readonly
|
|
|
|
1F630320000
|
unkown
|
page readonly
|
|
|
|
20981210000
|
unkown
|
page read and write
|
|
|
|
209FFB28000
|
unkown
|
page read and write
|
|
|
|
209FFB47000
|
unkown
|
page read and write
|
|
|
|
7FF55B209000
|
unkown
|
page readonly
|
|
|
|
7FF588CA2000
|
unkown
|
page readonly
|
|
|
|
1F634A83000
|
unkown
|
page read and write
|
|
|
|
7FF4FE5EF000
|
unkown
|
page readonly
|
|
|
|
7FF55D64A000
|
unkown
|
page readonly
|
|
|
|
2260000
|
unkown
|
page readonly
|
|
|
|
2C3537B0000
|
unkown
|
page write copy
|
|
|
|
7FF55B7A7000
|
unkown
|
page readonly
|
|
|
|
7FF50AA58000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
1F634920000
|
unkown
|
page read and write
|
|
|
|
209FFC42000
|
unkown
|
page read and write
|
|
|
|
7FF59AFDA000
|
unkown
|
page readonly
|
|
|
|
1F634A81000
|
unkown
|
page read and write
|
|
|
|
219D000
|
unkown
|
page readonly
|
|
|
|
209FFD83000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
157C7866000
|
unkown
|
page read and write
|
|
|
|
1F630350000
|
unkown
|
page readonly
|
|
|
|
209FDBDB000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
20980302000
|
unkown
|
page read and write
|
|
|
|
209FDAAB000
|
unkown
|
page read and write
|
|
|
|
209FF8E0000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
237E000
|
unkown
|
page read and write
|
|
|
|
DD677B000
|
unkown
|
page read and write
|
|
|
|
20981310000
|
unkown
|
page read and write
|
|
|
|
209FD870000
|
heap private
|
page read and write
|
|
|
|
7FF55D72C000
|
unkown
|
page readonly
|
|
|
|
23F57A20000
|
unkown
|
page readonly
|
|
|
|
1F62F273000
|
unkown
|
page read and write
|
|
|
|
7FF55B8A9000
|
unkown
|
page readonly
|
|
|
|
7FF4FE32D000
|
unkown
|
page readonly
|
|
|
|
4A0000
|
unkown
|
page read and write
|
|
|
|
2628FFC000
|
unkown
|
page read and write
|
|
|
|
209FFB13000
|
unkown
|
page read and write
|
|
|
|
1D9AD800000
|
unkown
|
page readonly
|
|
|
|
209FDBB6000
|
unkown
|
page read and write
|
|
|
|
7FF59B268000
|
unkown
|
page readonly
|
|
|
|
7FF59B31B000
|
unkown
|
page readonly
|
|
|
|
7FF55D651000
|
unkown
|
page readonly
|
|
|
|
1F630140000
|
unkown
|
page read and write
|
|
|
|
2630000
|
heap private
|
page read and write
|
|
|
|
225B2E16000
|
unkown
|
page read and write
|
|
|
|
321000
|
unkown
|
page read and write
|
|
|
|
47D000
|
unkown image
|
page read and write
|
|
|
|
7B2000
|
unkown
|
page read and write
|
|
|
|
DD64FA000
|
unkown
|
page read and write
|
|
|
|
7FF4FE600000
|
unkown
|
page readonly
|
|
|
|
2C35383F000
|
unkown
|
page read and write
|
|
|
|
2097A350000
|
unkown
|
page read and write
|
|
|
|
209FFB45000
|
unkown
|
page read and write
|
|
|
|
7FF55D4EF000
|
unkown
|
page readonly
|
|
|
|
59A000
|
heap default
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF5B8FEA000
|
unkown
|
page readonly
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
262947D000
|
unkown
|
page read and write
|
|
|
|
2120A395000
|
heap private
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1020000
|
heap private
|
page read and write
|
|
|
|
7FF588A86000
|
unkown
|
page readonly
|
|
|
|
225B3CD0000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
2C8F000
|
stack
|
page read and write
|
|
|
|
CF2CC7E000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
22D0000
|
unkown
|
page read and write
|
|
|
|
23F57C3A000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
2C353902000
|
unkown
|
page read and write
|
|
|
|
7FF4FDDB4000
|
unkown
|
page readonly
|
|
|
|
209FFBB0000
|
unkown
|
page read and write
|
|
|
|
225B3119000
|
heap private
|
page read and write
|
|
|
|
209FFB4D000
|
unkown
|
page read and write
|
|
|
|
225B3CC0000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
1F62F1E0000
|
unkown
|
page read and write
|
|
|
|
7FF4FE5E8000
|
unkown
|
page readonly
|
|
|
|
209FDA5F000
|
unkown
|
page read and write
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
1F6346C0000
|
unkown
|
page readonly
|
|
|
|
7FF55B87C000
|
unkown
|
page readonly
|
|
|
|
209FFB68000
|
unkown
|
page read and write
|
|
|
|
7FF55D918000
|
unkown
|
page readonly
|
|
|
|
157C7913000
|
unkown
|
page read and write
|
|
|
|
209FDB44000
|
unkown
|
page read and write
|
|
|
|
23F57C5F000
|
unkown
|
page read and write
|
|
|
|
7FF55D531000
|
unkown
|
page readonly
|
|
|
|
2200000
|
heap private
|
page read and write
|
|
|
|
7FF588CAC000
|
unkown
|
page readonly
|
|
|
|
7FF54A61B000
|
unkown
|
page readonly
|
|
|
|
7FF59B34F000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF5B8FCD000
|
unkown
|
page readonly
|
|
|
|
7FF55D944000
|
unkown
|
page readonly
|
|
|
|
209FFD83000
|
unkown
|
page read and write
|
|
|
|
7FF59B33B000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2097A350000
|
unkown
|
page read and write
|
|
|
|
1F62F1C0000
|
unkown
|
page readonly
|
|
|
|
455000
|
unkown image
|
page readonly
|
|
|
|
7FF5B8F70000
|
unkown
|
page readonly
|
|
|
|
7FF588BCD000
|
unkown
|
page readonly
|
|
|
|
20981310000
|
unkown
|
page read and write
|
|
|
|
20980282000
|
unkown
|
page read and write
|
|
|
|
7FF55D500000
|
unkown
|
page readonly
|
|
|
|
7FF4FE212000
|
unkown
|
page readonly
|
|
|
|
94E000
|
unkown
|
page read and write
|
|
|
|
1F630330000
|
unkown
|
page readonly
|
|
|
|
1F634970000
|
unkown
|
page read and write
|
|
|
|
157C7872000
|
unkown
|
page read and write
|
|
|
|
1D9ACC50000
|
heap default
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
209FFC46000
|
unkown
|
page read and write
|
|
|
|
209FFB7B000
|
unkown
|
page read and write
|
|
|
|
D70000
|
unkown
|
page readonly
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
209FD8D0000
|
heap default
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF4FE62F000
|
unkown
|
page readonly
|
|
|
|
DD69FB000
|
unkown
|
page read and write
|
|
|
|
7FF55D4DA000
|
unkown
|
page readonly
|
|
|
|
7FF55D6FD000
|
unkown
|
page readonly
|
|
|
|
F6D757D000
|
unkown
|
page read and write
|
|
|
|
20981610000
|
unkown
|
page read and write
|
|
|
|
157C77D0000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF55D8AA000
|
unkown
|
page readonly
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
2280000
|
unkown
|
page readonly
|
|
|
|
7FF4FE62B000
|
unkown
|
page readonly
|
|
|
|
4B6AB8B000
|
unkown
|
page read and write
|
|
|
|
209FDB35000
|
unkown
|
page read and write
|
|
|
|
22E3000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF54A634000
|
unkown
|
page readonly
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
DD6C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5B9005000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF59B057000
|
unkown
|
page readonly
|
|
|
|
572000
|
heap default
|
page read and write
|
|
|
|
7FF55D5EA000
|
unkown
|
page readonly
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
7FF55D40F000
|
unkown
|
page readonly
|
|
|
|
7FF588CB7000
|
unkown
|
page readonly
|
|
|
|
7FF588B52000
|
unkown
|
page readonly
|
|
|
|
DD70FE000
|
unkown
|
page read and write
|
|
|
|
1F62F1B0000
|
heap default
|
page read and write
|
|
|
|
209FDB54000
|
unkown
|
page read and write
|
|
|
|
7FF4FE504000
|
unkown
|
page readonly
|
|
|
|
209FDA64000
|
unkown
|
page read and write
|
|
|
|
1F634970000
|
unkown
|
page read and write
|
|
|
|
20979B60000
|
heap private
|
page read and write
|
|
|
|
1F634A00000
|
unkown
|
page read and write
|
|
|
|
1F634C90000
|
unkown
|
page readonly
|
|
|
|
7FF4FE43D000
|
unkown
|
page readonly
|
|
|
|
47E000
|
unkown image
|
page readonly
|
|
|
|
1F634AA6000
|
unkown
|
page read and write
|
|
|
|
56C0F7F000
|
unkown
|
page read and write
|
|
|
|
7FF588B0A000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE0DF000
|
unkown
|
page readonly
|
|
|
|
1F6306A0000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF59B10C000
|
unkown
|
page readonly
|
|
|
|
23F57C79000
|
unkown
|
page read and write
|
|
|
|
56C06FB000
|
unkown
|
page read and write
|
|
|
|
209FFCD4000
|
unkown
|
page read and write
|
|
|
|
209FFC17000
|
unkown
|
page read and write
|
|
|
|
2C353C00000
|
unkown
|
page readonly
|
|
|
|
1F62FA00000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
21A3000
|
unkown
|
page readonly
|
|
|
|
17EF000
|
unkown
|
page read and write
|
|
|
|
39E000
|
unkown
|
page read and write
|
|
|
|
DD6DFD000
|
unkown
|
page read and write
|
|
|
|
7FF5D993D000
|
unkown
|
page readonly
|
|
|
|
2120A390000
|
heap private
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1F62FB59000
|
unkown
|
page read and write
|
|
|
|
7FF55B8D5000
|
unkown
|
page readonly
|
|
|
|
DC187D000
|
unkown
|
page read and write
|
|
|
|
225B2E1E000
|
unkown
|
page read and write
|
|
|
|
20981410000
|
unkown
|
page read and write
|
|
|
|
47E000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE62F000
|
unkown
|
page readonly
|
|
|
|
7A1000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
157C77F0000
|
unkown
|
page readonly
|
|
|
|
2394000
|
heap private
|
page read and write
|
|
|
|
157C77B0000
|
unkown
|
page readonly
|
|
|
|
520000
|
unkown
|
page readonly
|
|
|
|
56C107F000
|
unkown
|
page read and write
|
|
|
|
1F62FB02000
|
unkown
|
page read and write
|
|
|
|
7FF55D8A3000
|
unkown
|
page readonly
|
|
|
|
7FF4FE51C000
|
unkown
|
page readonly
|
|
|
|
209FF8D0000
|
unkown
|
page read and write
|
|
|
|
7FF5B909F000
|
unkown
|
page readonly
|
|
|
|
7FF4FE62D000
|
unkown
|
page readonly
|
|
|
|
1D9ACD90000
|
unkown
|
page write copy
|
|
|
|
1000000
|
heap private
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
2390000
|
heap private
|
page read and write
|
|
|
|
2C353913000
|
unkown
|
page read and write
|
|
|
|
7FF5B8FD5000
|
unkown
|
page readonly
|
|
|
|
7FF55D1DA000
|
unkown
|
page readonly
|
|
|
|
1F6348E4000
|
unkown
|
page readonly
|
|
|
|
D005779000
|
unkown
|
page read and write
|
|
|
|
7FF55D7AF000
|
unkown
|
page readonly
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
157C7800000
|
unkown
|
page read and write
|
|
|
|
7FF5D9930000
|
unkown
|
page readonly
|
|
|
|
4F4000
|
unkown
|
page read and write
|
|
|
|
7FF50AA9B000
|
unkown
|
page readonly
|
|
|
|
1370000
|
unkown
|
page read and write
|
|
|
|
209FF8B0000
|
unkown
|
page read and write
|
|
|
|
23F57C29000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D48000
|
unkown
|
page readonly
|
|
|
|
1F62FB18000
|
unkown
|
page read and write
|
|
|
|
1030000
|
unkown
|
page readonly
|
|
|
|
1F62F1D0000
|
unkown
|
page readonly
|
|
|
|
20981410000
|
unkown
|
page read and write
|
|
|
|
7FF5B8F83000
|
unkown
|
page readonly
|
|
|
|
3AA000
|
unkown
|
page read and write
|
|
|
|
209FFB3F000
|
unkown
|
page read and write
|
|
|
|
7FF5B8FD9000
|
unkown
|
page readonly
|
|
|
|
7FF5B905F000
|
unkown
|
page readonly
|
|
|
|
7FF54F61E000
|
unkown
|
page readonly
|
|
|
|
23F57C46000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7B2000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF55D95D000
|
unkown
|
page readonly
|
|
|
|
209FFB6B000
|
unkown
|
page read and write
|
|
|
|
225B2FF0000
|
unkown
|
page readonly
|
|
|
|
20979BD0000
|
unkown
|
page readonly
|
|
|
|
7FF55D466000
|
unkown
|
page readonly
|
|
|
|
7FF55D713000
|
unkown
|
page readonly
|
|
|
|
209FDAB5000
|
unkown
|
page read and write
|
|
|
|
7FF55D65D000
|
unkown
|
page readonly
|
|
|
|
7FF5B9066000
|
unkown
|
page readonly
|
|
|
|
225B3330000
|
unkown
|
page readonly
|
|
|
|
4B6B57E000
|
unkown
|
page read and write
|
|
|
|
23F57AF0000
|
unkown
|
page readonly
|
|
|
|
DC0E8B000
|
unkown
|
page read and write
|
|
|
|
1F62F225000
|
unkown
|
page read and write
|
|
|
|
DC177D000
|
unkown
|
page read and write
|
|
|
|
7FF58886F000
|
unkown
|
page readonly
|
|
|
|
157C8200000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
640000
|
unkown
|
page readonly
|
|
|
|
225B2E16000
|
unkown
|
page read and write
|
|
|
|
209FFCD1000
|
unkown
|
page read and write
|
|
|
|
4F4000
|
heap default
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2120A0D0000
|
heap default
|
page read and write
|
|
|
|
1F634C70000
|
unkown
|
page readonly
|
|
|
|
20979C02000
|
unkown
|
page read and write
|
|
|
|
209FDA61000
|
unkown
|
page read and write
|
|
|
|
7FF50A817000
|
unkown
|
page readonly
|
|
|
|
7FF588DBB000
|
unkown
|
page readonly
|
|
|
|
23F57C5C000
|
unkown
|
page read and write
|
|
|
|
2120A10C000
|
heap default
|
page read and write
|
|
|
|
225B3CB0000
|
unkown
|
page read and write
|
|
|
|
7FF54A64B000
|
unkown
|
page readonly
|
|
|
|
D0056FD000
|
unkown
|
page read and write
|
|
|
|
209FFB8C000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D98000
|
unkown
|
page readonly
|
|
|
|
4B0000
|
heap default
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
47E000
|
unkown image
|
page readonly
|
|
|
|
1D9ACE6B000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
209FFB4A000
|
unkown
|
page read and write
|
|
|
|
1D9ACD30000
|
unkown
|
page readonly
|
|
|
|
209FDB86000
|
unkown
|
page read and write
|
|
|
|
1F6348F4000
|
unkown
|
page readonly
|
|
|
|
20980202000
|
unkown
|
page read and write
|
|
|
|
224C000
|
unkown
|
page read and write
|
|
|
|
DC137E000
|
unkown
|
page read and write
|
|
|
|
20981410000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1F634831000
|
unkown
|
page read and write
|
|
|
|
7FF5B909D000
|
unkown
|
page readonly
|
|
|
|
2C353670000
|
heap private
|
page read and write
|
|
|
|
7FF50A7A7000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
209FFC42000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
20979E00000
|
unkown
|
page readonly
|
|
|
|
2120B9B0000
|
unkown
|
page readonly
|
|
|
|
47B000
|
unkown image
|
page read and write
|
|
|
|
23F57C7D000
|
unkown
|
page read and write
|
|
|
|
1F62F26C000
|
unkown
|
page read and write
|
|
|
|
7FF588DBF000
|
unkown
|
page readonly
|
|
|
|
209FDBBB000
|
unkown
|
page read and write
|
|
|
|
157C7866000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
209FDA13000
|
unkown
|
page read and write
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
225B2ED0000
|
unkown
|
page readonly
|
|
|
|
7FF588D9D000
|
unkown
|
page readonly
|
|
|
|
7FF59B308000
|
unkown
|
page readonly
|
|
|
|
7FF55D503000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2B4F000
|
stack
|
page read and write
|
|
|
|
7FF50A67D000
|
unkown
|
page readonly
|
|
|
|
7FF588DA4000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
54A000
|
heap default
|
page read and write
|
|
|
|
540000
|
heap default
|
page read and write
|
|
|
|
EDE000
|
unkown
|
page read and write
|
|
|
|
4B6AFF7000
|
unkown
|
page read and write
|
|
|
|
209FDA3F000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
21F0000
|
unkown
|
page read and write
|
|
|
|
2270000
|
unkown
|
page readonly
|
|
|
|
7FF5D9895000
|
unkown
|
page readonly
|
|
|
|
7D2000
|
unkown
|
page read and write
|
|
|
|
20981310000
|
unkown
|
page read and write
|
|
|
|
209FFB8E000
|
unkown
|
page read and write
|
|
|
|
47B000
|
unkown image
|
page read and write
|
|
|
|
7FF55D653000
|
unkown
|
page readonly
|
|
|
|
209FFBCC000
|
unkown
|
page read and write
|
|
|
|
2900000
|
unkown
|
page readonly
|
|
|
|
2120BA80000
|
unkown
|
page readonly
|
|
|
|
7FF50A79D000
|
unkown
|
page readonly
|
|
|
|
7FF59B33E000
|
unkown
|
page readonly
|
|
|
|
7FF59B30F000
|
unkown
|
page readonly
|
|
|
|
7FF55B92F000
|
unkown
|
page readonly
|
|
|
|
E20000
|
unkown
|
page read and write
|
|
|
|
6CE000
|
unkown
|
page read and write
|
|
|
|
1F634854000
|
unkown
|
page read and write
|
|
|
|
209FFC17000
|
unkown
|
page read and write
|
|
|
|
157C7A00000
|
unkown
|
page readonly
|
|
|
|
209FFB72000
|
unkown
|
page read and write
|
|
|
|
2950000
|
unkown
|
page readonly
|
|
|
|
7FF5D992B000
|
unkown
|
page readonly
|
|
|
|
47D000
|
unkown image
|
page read and write
|
|
|
|
209FFA02000
|
unkown
|
page read and write
|
|
|
|
7FF5D9857000
|
unkown
|
page readonly
|
|
|
|
DD647F000
|
unkown
|
page read and write
|
|
|
|
7FF59ABAB000
|
unkown
|
page readonly
|
|
|
|
A50000
|
unkown
|
page readonly
|
|
|
|
209FFC3E000
|
unkown
|
page read and write
|
|
|
|
7FF4FE61E000
|
unkown
|
page readonly
|
|
|
|
7FF54A64F000
|
unkown
|
page readonly
|
|
|
|
325000
|
unkown
|
page read and write
|
|
|
|
7FF55D61F000
|
unkown
|
page readonly
|
|
|
|
2300000
|
unkown
|
page readonly
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
23F58202000
|
unkown
|
page read and write
|
|
|
|
DD67FB000
|
unkown
|
page read and write
|
|
|
|
1D9ACF02000
|
unkown
|
page read and write
|
|
|
|
7FF4FE61B000
|
unkown
|
page readonly
|
|
|
|
7FF55D92E000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF54A589000
|
unkown
|
page readonly
|
|
|
|
225B2FE0000
|
unkown
|
page readonly
|
|
|
|
209FFC58000
|
unkown
|
page read and write
|
|
|
|
22DD000
|
unkown
|
page readonly
|
|
|
|
DD6F7A000
|
unkown
|
page read and write
|
|
|
|
7FF5D954D000
|
unkown
|
page readonly
|
|
|
|
23F57C5A000
|
unkown
|
page read and write
|
|
|
|
7FF54A585000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1F630310000
|
unkown
|
page readonly
|
|
|
|
7FF588D0A000
|
unkown
|
page readonly
|
|
|
|
1D9ACE13000
|
unkown
|
page read and write
|
|
|
|
209FFCD3000
|
unkown
|
page read and write
|
|
|
|
1F6349C0000
|
unkown
|
page readonly
|
|
|
|
7FF4FE351000
|
unkown
|
page readonly
|
|
|
|
4B6B5FF000
|
unkown
|
page read and write
|
|
|
|
7FF59B232000
|
unkown
|
page readonly
|
|
|
|
2120A3A0000
|
unkown
|
page readonly
|
|
|
|
1381000
|
unkown
|
page read and write
|
|
|
|
4D62F0C000
|
unkown
|
page read and write
|
|
|
|
209FDA99000
|
unkown
|
page read and write
|
|
|
|
518000
|
unkown
|
page read and write
|
|
|
|
7FF588D78000
|
unkown
|
page readonly
|
|
|
|
7FF59B34F000
|
unkown
|
page readonly
|
|
|
|
80E000
|
unkown
|
page read and write
|
|
|
|
7FF54F61E000
|
unkown
|
page readonly
|
|
|
|
209FDAEE000
|
unkown
|
page read and write
|
|
|
|
1F62F150000
|
heap private
|
page read and write
|
|
|
|
7FF55B874000
|
unkown
|
page readonly
|
|
|
|
DD62FE000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF588CF9000
|
unkown
|
page readonly
|
|
|
|
6CE000
|
unkown
|
page read and write
|
|
|
|
7FF50A9A7000
|
unkown
|
page readonly
|
|
|
|
4D7000
|
heap default
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF4FE5FB000
|
unkown
|
page readonly
|
|
|
|
7FF588D03000
|
unkown
|
page readonly
|
|
|
|
1F630300000
|
unkown
|
page readonly
|
|
|
|
7FF5D9878000
|
unkown
|
page readonly
|
|
|
|
1010000
|
unkown
|
page readonly
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
1F634AB3000
|
unkown
|
page read and write
|
|
|
|
7FF5B8FA7000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
209FFCD6000
|
unkown
|
page read and write
|
|
|
|
20981113000
|
unkown
|
page read and write
|
|
|
|
27DD000
|
stack
|
page read and write
|
|
|
|
23F57C13000
|
unkown
|
page read and write
|
|
|
|
157C785B000
|
unkown
|
page read and write
|
|
|
|
1F634A8B000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
262917B000
|
unkown
|
page read and write
|
|
|
|
1F6346F0000
|
unkown
|
page read and write
|
|
|
|
23F57C44000
|
unkown
|
page read and write
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
198000
|
stack
|
page read and write
|
|
|
|
20980242000
|
unkown
|
page read and write
|
|
|
|
225B2DD0000
|
heap default
|
page read and write
|
|
|
|
2190000
|
unkown
|
page read and write
|
|
|
|
7FF4FE4DD000
|
unkown
|
page readonly
|
|
|
|
7FF5D97FF000
|
unkown
|
page readonly
|
|
|
|
262937E000
|
unkown
|
page read and write
|
|
|
|
7FF50A950000
|
unkown
|
page readonly
|
|
|
|
7FF588DBD000
|
unkown
|
page readonly
|
|
|
|
EF0000
|
unkown
|
page read and write
|
|
|
|
7FF588DAB000
|
unkown
|
page readonly
|
|
|
|
CF2CE7F000
|
unkown
|
page read and write
|
|
|
|
1F62F4D0000
|
unkown
|
page readonly
|
|
|
|
7FF4FE4E0000
|
unkown
|
page readonly
|
|
|
|
1F634918000
|
unkown
|
page write copy
|
|
|
|
225B3120000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF59B25C000
|
unkown
|
page readonly
|
|
|
|
4D633FE000
|
unkown
|
page read and write
|
|
|
|
7FF50A9CD000
|
unkown
|
page readonly
|
|
|
|
1F62F1F0000
|
unkown
|
page read and write
|
|
|
|
1F634810000
|
unkown
|
page read and write
|
|
|
|
7FF55D842000
|
unkown
|
page readonly
|
|
|
|
7FF55D857000
|
unkown
|
page readonly
|
|
|
|
209FFB05000
|
unkown
|
page read and write
|
|
|
|
75A000
|
heap default
|
page read and write
|
|
|
|
2628A7C000
|
unkown
|
page read and write
|
|
|
|
4B6B47B000
|
unkown
|
page read and write
|
|
|
|
7FF4FE593000
|
unkown
|
page readonly
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
7FF59B27D000
|
unkown
|
page readonly
|
|
|
|
469000
|
unkown image
|
page write copy
|
|
|
|
DD68FB000
|
unkown
|
page read and write
|
|
|
|
7FF50AA8E000
|
unkown
|
page readonly
|
|
|
|
209FFC42000
|
unkown
|
page read and write
|
|
|
|
20980000000
|
unkown
|
page readonly
|
|
|
|
209FDA7F000
|
unkown
|
page read and write
|
|
|
|
7FF54A63E000
|
unkown
|
page readonly
|
|
|
|
20979BF0000
|
unkown
|
page read and write
|
|
|
|
7FF50A957000
|
unkown
|
page readonly
|
|
|
|
2290000
|
unkown
|
page readonly
|
|
|
|
7FF4FE523000
|
unkown
|
page readonly
|
|
|
|
2120BA70000
|
unkown
|
page readonly
|
|
|
|
1F630360000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1F62F23D000
|
unkown
|
page read and write
|
|
|
|
4C0000
|
unkown
|
page readonly
|
|
|
|
209FFC3E000
|
unkown
|
page read and write
|
|
|
|
D0057FE000
|
unkown
|
page read and write
|
|
|
|
2097A402000
|
unkown
|
page read and write
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
209FDA5F000
|
unkown
|
page read and write
|
|
|
|
F6D737F000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
2120A380000
|
unkown
|
page readonly
|
|
|
|
7FF4FDDB0000
|
unkown
|
page readonly
|
|
|
|
20979D02000
|
unkown
|
page read and write
|
|
|
|
20981010000
|
unkown
|
page read and write
|
|
|
|
7FF55D92B000
|
unkown
|
page readonly
|
|
|
|
7FF588DAE000
|
unkown
|
page readonly
|
|
|
|
2C353800000
|
unkown
|
page read and write
|
|
|
|
225B2E1E000
|
unkown
|
page read and write
|
|
|
|
7FF55B936000
|
unkown
|
page readonly
|
|
|
|
F6D72FE000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
7FF588D86000
|
unkown
|
page readonly
|
|
|
|
20981210000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page readonly
|
|
|
|
7FF50AA84000
|
unkown
|
page readonly
|
|
|
|
209FDE00000
|
unkown
|
page readonly
|
|
|
|
7FF58891E000
|
unkown
|
page readonly
|
|
|
|
209FFB66000
|
unkown
|
page read and write
|
|
|
|
7FF50A9E3000
|
unkown
|
page readonly
|
|
|
|
7FF4FE4E7000
|
unkown
|
page readonly
|
|
|
|
7FF54A60F000
|
unkown
|
page readonly
|
|
|
|
209FD8E0000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
DD66F9000
|
unkown
|
page read and write
|
|
|
|
22DE000
|
unkown
|
page read and write
|
|
|
|
1F634940000
|
unkown
|
page read and write
|
|
|
|
7FF55D4E0000
|
unkown
|
page readonly
|
|
|
|
7FF4FE53C000
|
unkown
|
page readonly
|
|
|
|
47E000
|
unkown image
|
page readonly
|
|
|
|
1F634A2D000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF50AA66000
|
unkown
|
page readonly
|
|
|
|
1F634810000
|
unkown
|
page read and write
|
|
|
|
23F57C61000
|
unkown
|
page read and write
|
|
|
|
1F634AAC000
|
unkown
|
page read and write
|
|
|
|
2120BAF0000
|
heap private
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
DC15FD000
|
unkown
|
page read and write
|
|
|
|
209FFB24000
|
unkown
|
page read and write
|
|
|
|
1F62F213000
|
unkown
|
page read and write
|
|
|
|
1D9ACD40000
|
unkown
|
page readonly
|
|
|
|
1D9ACD50000
|
unkown
|
page read and write
|
|
|
|
23F57C40000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
209FFBFA000
|
unkown
|
page read and write
|
|
|
|
F20000
|
heap private
|
page read and write
|
|
|
|
1F634C00000
|
unkown
|
page readonly
|
|
|
|
7FF55D86C000
|
unkown
|
page readonly
|
|
|
|
7FF5B9084000
|
unkown
|
page readonly
|
|
|
|
156C000
|
unkown
|
page read and write
|
|
|
|
7FF59B34B000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D988D000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
262927C000
|
unkown
|
page read and write
|
|
|
|
455000
|
unkown image
|
page readonly
|
|
|
|
51E000
|
unkown
|
page read and write
|
|
|
|
20979C29000
|
unkown
|
page read and write
|
|
|
|
7FF55D7D4000
|
unkown
|
page readonly
|
|
|
|
20981010000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
20981210000
|
unkown
|
page read and write
|
|
|
|
209FDBDA000
|
unkown
|
page read and write
|
|
|
|
1F634710000
|
unkown
|
page read and write
|
|
|
|
1F6348F0000
|
unkown
|
page readonly
|
|
|
|
7FF5D980A000
|
unkown
|
page readonly
|
|
|
|
1F630340000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1F634AB5000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page readonly
|
|
|
|
DD63FA000
|
unkown
|
page read and write
|
|
|
|
20981510000
|
unkown
|
page read and write
|
|
|
|
157C8002000
|
unkown
|
page read and write
|
|
|
|
2C3552C0000
|
unkown
|
page readonly
|
|
|
|
D00536C000
|
unkown
|
page read and write
|
|
|
|
21209F30000
|
unkown
|
page readonly
|
|
|
|
2C3551C0000
|
unkown
|
page read and write
|
|
|
|
4B6BC7F000
|
unkown
|
page read and write
|
|
|
|
20980010000
|
unkown
|
page readonly
|
|
|
|
910000
|
unkown
|
page readonly
|
|
|
|
209FDA61000
|
unkown
|
page read and write
|
|
|
|
7FF4FE337000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF55B0F4000
|
unkown
|
page readonly
|
|
|
|
225B2FC0000
|
unkown
|
page read and write
|
|
|
|
56C0B7D000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
20981410000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
7FF55D511000
|
unkown
|
page readonly
|
|
|
|
209FF890000
|
unkown
|
page readonly
|
|
|
|
7FF4FE115000
|
unkown
|
page readonly
|
|
|
|
4B6B4FF000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF50A66F000
|
unkown
|
page readonly
|
|
|
|
2120A0DB000
|
heap default
|
page read and write
|
|
|
|
7FF54A1FD000
|
unkown
|
page readonly
|
|
|
|
225B3CE0000
|
unkown
|
page read and write
|
|
|
|
225B3A76000
|
unkown
|
page read and write
|
|
|
|
DD707C000
|
unkown
|
page read and write
|
|
|
|
225B3115000
|
heap private
|
page read and write
|
|
|
|
7FF59B293000
|
unkown
|
page readonly
|
|
|
|
157C7876000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
2C3536E0000
|
unkown
|
page readonly
|
|
|
|
DD6B7B000
|
unkown
|
page read and write
|
|
|
|
23F57E00000
|
unkown
|
page readonly
|
|
|
|
D005879000
|
unkown
|
page read and write
|
|
|
|
225B3D30000
|
unkown
|
page read and write
|
|
|
|
7FF50AA6B000
|
unkown
|
page readonly
|
|
|
|
209FDA29000
|
unkown
|
page read and write
|
|
|
|
157C7740000
|
heap private
|
page read and write
|
|
|
|
20981010000
|
unkown
|
page read and write
|
|
|
|
209FFBC1000
|
unkown
|
page read and write
|
|
|
|
7FF59B316000
|
unkown
|
page readonly
|
|
|
|
1F63481E000
|
unkown
|
page read and write
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
7FF55D830000
|
unkown
|
page readonly
|
|
|
|
DD687B000
|
unkown
|
page read and write
|
|
|
|
F6D727B000
|
unkown
|
page read and write
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
1F634AB5000
|
unkown
|
page read and write
|
|
|
|
1F62F2A0000
|
unkown
|
page read and write
|
|
|
|
23F57C83000
|
unkown
|
page read and write
|
|
|
|
7FF55B96F000
|
unkown
|
page readonly
|
|
|
|
E00000
|
unkown
|
page readonly
|
|
|
|
225B3A70000
|
unkown
|
page read and write
|
|
|
|
23F57C31000
|
unkown
|
page read and write
|
|
|
|
37C000
|
unkown
|
page read and write
|
|
|
|
F6D74FF000
|
unkown
|
page read and write
|
|
|
|
209FF8A0000
|
unkown
|
page read and write
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
2120A0B0000
|
unkown
|
page readonly
|
|
|
|
23F57C02000
|
unkown
|
page read and write
|
|
|
|
7FF50AA70000
|
unkown
|
page readonly
|
|
|
|
738000
|
heap default
|
page read and write
|
|
|
|
20980205000
|
unkown
|
page read and write
|
|
|
|
7FF55D91F000
|
unkown
|
page readonly
|
|
|
|
7FF5D98CD000
|
unkown
|
page readonly
|
|
|
|
157C786F000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
20980200000
|
unkown
|
page read and write
|
|
|
|
7FF50A974000
|
unkown
|
page readonly
|
|
|
|
7FF5B88E6000
|
unkown
|
page readonly
|
|
|
|
1F6349B0000
|
unkown
|
page readonly
|
|
|
|
1F62F2F9000
|
unkown
|
page read and write
|
|
|
|
7FF5D9602000
|
unkown
|
page readonly
|
|
|
|
469000
|
unkown image
|
page write copy
|
|
|
|
20981110000
|
unkown
|
page read and write
|
|
|
|
7FF55D93D000
|
unkown
|
page readonly
|
|
|
|
23F57D02000
|
unkown
|
page read and write
|
|
|
|
610000
|
heap default
|
page read and write
|
|
|
|
1D9AD000000
|
unkown
|
page readonly
|
|
|
|
20981510000
|
unkown
|
page read and write
|
|
|
|
DD6E7E000
|
unkown
|
page read and write
|
|
|
|
23F57C45000
|
unkown
|
page read and write
|
|
|
|
7FF54A547000
|
unkown
|
page readonly
|
|
|
|
7FF54A63B000
|
unkown
|
page readonly
|
|
|
|
2120A060000
|
unkown
|
page read and write
|
|
|
|
20981010000
|
unkown
|
page read and write
|
|
|
|
7FF50A682000
|
unkown
|
page readonly
|
|
|
|
7FF50AA8B000
|
unkown
|
page readonly
|
|
|
|
1D9ACC60000
|
unkown
|
page readonly
|
|
|
|
7FF55D130000
|
unkown
|
page readonly
|
|
|
|
209FDB13000
|
unkown
|
page read and write
|
|
|
|
23F57C6A000
|
unkown
|
page read and write
|
|
|
|
23F57C64000
|
unkown
|
page read and write
|
|
|
|
4B6BA7D000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
47E000
|
unkown image
|
page readonly
|
|
|
|
2120A080000
|
unkown
|
page read and write
|
|
|
|
209FF8C0000
|
unkown
|
page read and write
|
|
|
|
225B3A60000
|
unkown
|
page read and write
|
|
|
|
209FFBD0000
|
unkown
|
page read and write
|
|
|
|
7FF4FE1FF000
|
unkown
|
page readonly
|
|
|
|
455000
|
unkown image
|
page readonly
|
|
|
|
20981010000
|
unkown
|
page read and write
|
|
|
|
7FF4FE380000
|
unkown
|
page readonly
|
|
|
|
47E000
|
unkown image
|
page readonly
|
|
|
|
225B2E1E000
|
unkown
|
page read and write
|
|
|
|
469000
|
unkown image
|
page write copy
|
|
|
|
E40000
|
heap private
|
page read and write
|
|
|
|
CF2CF7E000
|
unkown
|
page read and write
|
|
|
|
7FF5D98C3000
|
unkown
|
page readonly
|
|
|
|
4B6B67E000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
A4F000
|
stack
|
page read and write
|
|
|
|
7FF5D995B000
|
unkown
|
page readonly
|
|
|
|
5C1000
|
heap default
|
page read and write
|
|
|
|
209FDA99000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1F634850000
|
unkown
|
page read and write
|
|
|
|
7FF55B13A000
|
unkown
|
page readonly
|
|
|
|
7FF4FE21A000
|
unkown
|
page readonly
|
|
|
|
23F57C3D000
|
unkown
|
page read and write
|
|
|
|
1F634A3F000
|
unkown
|
page read and write
|
|
|
|
209FDB75000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
7FF5B8E3D000
|
unkown
|
page readonly
|
|
|
|
80E000
|
stack
|
page read and write
|
|
|
|
2A4E000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
2628E7E000
|
unkown
|
page read and write
|
|
|
|
730000
|
heap default
|
page read and write
|
|
|
|
7FF55D926000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1F62F29D000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page readonly
|
|
|
|
47B000
|
unkown image
|
page read and write
|
|
|
|
23F57BD0000
|
unkown
|
page readonly
|
|
|
|
1D9AD460000
|
unkown
|
page readonly
|
|
|
|
7FF58891A000
|
unkown
|
page readonly
|
|
|
|
7FF55B95E000
|
unkown
|
page readonly
|
|
|
|
209FFCDA000
|
unkown
|
page read and write
|
|
|
|
225B30C0000
|
unkown
|
page readonly
|
|
|
|
1F62F256000
|
unkown
|
page read and write
|
|
|
|
7D2000
|
unkown
|
page read and write
|
|
|
|
7FF59B11F000
|
unkown
|
page readonly
|
|
|
|
23F57C62000
|
unkown
|
page read and write
|
|
|
|
1F634A4C000
|
unkown
|
page read and write
|
|
|
|
209FFC46000
|
unkown
|
page read and write
|
|
|
|
1F6348E0000
|
unkown
|
page read and write
|
|
|
|
2440000
|
heap private
|
page read and write
|
|
|
|
209FFCA9000
|
unkown
|
page read and write
|
|
|
|
209FFB70000
|
unkown
|
page read and write
|
|
|
|
219E000
|
unkown
|
page read and write
|
|
|
|
225B2E1C000
|
heap default
|
page read and write
|
|
|
|
23F57C00000
|
unkown
|
page read and write
|
|
|
|
7FF55D95F000
|
unkown
|
page readonly
|
|
|
|
209FF8F0000
|
unkown
|
page readonly
|
|
|
|
2C353802000
|
unkown
|
page read and write
|
|
|
|
DD657A000
|
unkown
|
page read and write
|
|
|
|
7FF4FE57A000
|
unkown
|
page readonly
|
|
|
|
157C77C0000
|
unkown
|
page readonly
|
|
|
|
2097A350000
|
unkown
|
page read and write
|
|
|
|
209FFB07000
|
unkown
|
page read and write
|
|
|
|
2C355620000
|
unkown
|
page read and write
|
|
|
|
7FF4FE41E000
|
unkown
|
page readonly
|
|
|
|
EDD000
|
unkown
|
page readonly
|
|
|
|
1F634A0F000
|
unkown
|
page read and write
|
|
|
|
20981000000
|
unkown
|
page read and write
|
|
|
|
1F634A62000
|
unkown
|
page read and write
|
|
|
|
20979ED0000
|
unkown
|
page readonly
|
|
|
|
192E000
|
unkown
|
page read and write
|
|
|
|
2120BCF0000
|
heap private
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1F634834000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
455000
|
unkown image
|
page readonly
|
|
|
|
20B0000
|
unkown
|
page read and write
|
|
|
|
7FF5B906B000
|
unkown
|
page readonly
|
|
|
|
2B8E000
|
unkown
|
page read and write
|
|
|
|
23F57BE0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9643000
|
unkown
|
page readonly
|
|
|
|
56C0A7E000
|
unkown
|
page read and write
|
|
|
|
E2D000
|
unkown
|
page readonly
|
|
|
|
1F630100000
|
unkown
|
page read and write
|
|
|
|
7FF4FE614000
|
unkown
|
page readonly
|
|
|
|
23F57C58000
|
unkown
|
page read and write
|
|
|
|
20979C13000
|
unkown
|
page read and write
|
|
|
|
1F634930000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
7FF55D820000
|
unkown
|
page readonly
|
|
|
|
7FF4FE3CD000
|
unkown
|
page readonly
|
|
|
|
7FF50AA7D000
|
unkown
|
page readonly
|
|
|
|
7FF55D88D000
|
unkown
|
page readonly
|
|
|
|
D80000
|
heap private
|
page read and write
|
|
|
|
1F634970000
|
unkown
|
page read and write
|
|
|
|
469000
|
unkown image
|
page write copy
|
|
|
|
7FF50A8AD000
|
unkown
|
page readonly
|
|
|
|
209FDBBA000
|
unkown
|
page read and write
|
|
|
|
7FF50A9D5000
|
unkown
|
page readonly
|
|
|
|
4B6B7FF000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
225B36C0000
|
unkown
|
page readonly
|
|
|
|
7FF55B954000
|
unkown
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
56C028C000
|
unkown
|
page read and write
|
|
|
|
209FDBCA000
|
unkown
|
page read and write
|
|
|
|
7FF55B135000
|
unkown
|
page readonly
|
|
|
|
1930000
|
unkown
|
page read and write
|
|
|
|
209FFC3E000
|
unkown
|
page read and write
|
|
|
|
7FF588CF5000
|
unkown
|
page readonly
|
|
|
|
7FF50AA9F000
|
unkown
|
page readonly
|
|
|
|
7FF54A303000
|
unkown
|
page readonly
|
|
|
|
7FF5B907D000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF55D895000
|
unkown
|
page readonly
|
|
|
|
7FF59B285000
|
unkown
|
page readonly
|
|
|
|
209FF4C0000
|
unkown
|
page readonly
|
|
|
|
209FFD83000
|
unkown
|
page read and write
|
|
|
|
209FFB00000
|
unkown
|
page read and write
|
|
|
|
7FF55D899000
|
unkown
|
page readonly
|
|
|
|
22F0000
|
heap private
|
page read and write
|
|
|
|
1F62F400000
|
unkown
|
page readonly
|
|
|
|
47D000
|
unkown image
|
page read and write
|
|
|
|
7FF5D9556000
|
unkown
|
page readonly
|
|
|
|
CF2D17F000
|
unkown
|
page read and write
|
|
|
|
7FF50A88E000
|
unkown
|
page readonly
|
|
|
|
7FF5B9058000
|
unkown
|
page readonly
|
|
|
|
7FF54A616000
|
unkown
|
page readonly
|
|
|
|
7FF55D6F4000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
20979BC0000
|
heap default
|
page read and write
|
|
|
|
7FF588D25000
|
unkown
|
page readonly
|
|
|
|
7FF59B23C000
|
unkown
|
page readonly
|
|
|
|
3AE000
|
unkown
|
page read and write
|
|
|
|
DD627E000
|
unkown
|
page read and write
|
|
|
|
209FFC42000
|
unkown
|
page read and write
|
|
|
|
15AE000
|
unkown
|
page read and write
|
|
|
|
7FF55D95B000
|
unkown
|
page readonly
|
|
|
|
7FF4FE353000
|
unkown
|
page readonly
|
|
|
|
1F62FA15000
|
unkown
|
page read and write
|
|
|
|
7FF55D4D4000
|
unkown
|
page readonly
|
|
|
|
7FF588CB5000
|
unkown
|
page readonly
|
|
|
|
DD6AFB000
|
unkown
|
page read and write
|
|
|
|
7FF55D80D000
|
unkown
|
page readonly
|
|
|
|
157C7902000
|
unkown
|
page read and write
|
|
|
|
2120BF3F000
|
heap private
|
page read and write
|
|
|
|
7FF54A59A000
|
unkown
|
page readonly
|
|
|
|
1F62F200000
|
unkown
|
page read and write
|
|
|
|
7FF55D8C5000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1F634840000
|
unkown
|
page read and write
|
|
|
|
785000
|
unkown
|
page read and write
|
|
|
|
7FF54A620000
|
unkown
|
page readonly
|
|
|
|
7FF55B94D000
|
unkown
|
page readonly
|
|
|
|
2E0E000
|
unkown
|
page read and write
|
|
|
|
1F62F860000
|
unkown
|
page readonly
|
|
|
|
16EE000
|
unkown
|
page read and write
|
|
|
|
157C7E60000
|
unkown
|
page readonly
|
|
|
|
209FFC3E000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
20980300000
|
unkown
|
page read and write
|
|
|
|
225B3110000
|
heap private
|
page read and write
|
|
|
|
23F57C66000
|
unkown
|
page read and write
|
|
|
|
1D9ACE3E000
|
unkown
|
page read and write
|
|
|
|
7FF4FE4CF000
|
unkown
|
page readonly
|
|
|
|
20981010000
|
unkown
|
page read and write
|
|
|
|
4D6337E000
|
unkown
|
page read and write
|
|
|
|
7FF59B243000
|
unkown
|
page readonly
|
|
|
|
7FF4FE1D0000
|
unkown
|
page readonly
|
|
|
|
7FF4FE60D000
|
unkown
|
page readonly
|
|
|
|
209FDB37000
|
unkown
|
page read and write
|
|
|
|
DD5FBB000
|
unkown
|
page read and write
|
|
|
|
1F62F271000
|
unkown
|
page read and write
|
|
|
|
469000
|
unkown image
|
page write copy
|
|
|
|
7FF55B133000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
209FFC89000
|
unkown
|
page read and write
|
|
|
|
1F634AB5000
|
unkown
|
page read and write
|
|
|
|
16AF000
|
unkown
|
page read and write
|
|
|
|
EE3000
|
unkown
|
page readonly
|
|
|
|
4B6B97A000
|
unkown
|
page read and write
|
|
|
|
DD6FF9000
|
unkown
|
page read and write
|
|
|
|
D90000
|
unkown
|
page read and write
|
|
|
|
7FF588BE2000
|
unkown
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
56C097B000
|
unkown
|
page read and write
|
|
|
|
23F57C6C000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
7FF588D7F000
|
unkown
|
page readonly
|
|
|
|
7FF588CB3000
|
unkown
|
page readonly
|
|
|
|
4D7000
|
unkown
|
page read and write
|
|
|
|
CF2CCFE000
|
unkown
|
page read and write
|
|
|
|
21C0000
|
unkown
|
page read and write
|
|
|
|
7FF59B2B5000
|
unkown
|
page readonly
|
|
|
|
4B6B77A000
|
unkown
|
page read and write
|
|
|
|
7FF5D9870000
|
unkown
|
page readonly
|
|
|
|
7FF55D683000
|
unkown
|
page readonly
|
|
|
|
209FDAB3000
|
unkown
|
page read and write
|
|
|
|
7FF55D834000
|
unkown
|
page readonly
|
|
|
|
1F634970000
|
unkown
|
page read and write
|
|
|
|
7FF4FE1D4000
|
unkown
|
page readonly
|
|
|
|
209FD9B0000
|
unkown
|
page write copy
|
|
|
|
182E000
|
unkown
|
page read and write
|
|
|
|
EF0000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
225B2D70000
|
unkown
|
page read and write
|
|
|
|
7FF59B0E2000
|
unkown
|
page readonly
|
|
|
|
1F62F313000
|
unkown
|
page read and write
|
|
|
|
7FF5D995F000
|
unkown
|
page readonly
|
|
|
|
157C782A000
|
unkown
|
page read and write
|
|
|
|
7FF55B93B000
|
unkown
|
page readonly
|
|
|
|
469000
|
unkown image
|
page write copy
|
|
|
|
4B6B17C000
|
unkown
|
page read and write
|
|
|
|
157C77A0000
|
heap default
|
page read and write
|
|
|
|
1F630220000
|
unkown
|
page read and write
|
|
|
|
7FF50A9B0000
|
unkown
|
page readonly
|
|
|
|
23F579B0000
|
heap private
|
page read and write
|
|
|
|
47D000
|
unkown image
|
page read and write
|
|
|
|
680000
|
heap default
|
page read and write
|
|
|
|
1D9ACEC4000
|
unkown
|
page read and write
|
|
|
|
7FF4FE508000
|
unkown
|
page readonly
|
|
|
|
F6D747A000
|
unkown
|
page read and write
|
|
|
|
1F62F229000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
2120BE40000
|
heap private
|
page read and write
|
|
|
|
7FF55D810000
|
unkown
|
page readonly
|
|
|
|
7D2000
|
unkown
|
page read and write
|
|
|
|
7FF54A55C000
|
unkown
|
page readonly
|
|
|
|
209FDA57000
|
unkown
|
page read and write
|
|
|
|
20981210000
|
unkown
|
page read and write
|
|
|
|
7FF5B8F97000
|
unkown
|
page readonly
|
|
|
|
7FF55B928000
|
unkown
|
page readonly
|
|
|
|
2C353829000
|
unkown
|
page read and write
|
|
|
|
7FF5D9899000
|
unkown
|
page readonly
|
|
|
|
2120A5A0000
|
unkown
|
page readonly
|
|
|
|
23F57C5E000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
1F62FB00000
|
unkown
|
page read and write
|
|
|
|
1F634830000
|
unkown
|
page read and write
|
|
|
|
209FFCD1000
|
unkown
|
page read and write
|
|
|
|
F60000
|
unkown
|
page readonly
|
|
|
|
7FF55D667000
|
unkown
|
page readonly
|
|
|
|
DD6CFB000
|
unkown
|
page read and write
|
|
|
|
2400000
|
heap private
|
page read and write
|
|
|
|
DC13FE000
|
unkown
|
page read and write
|
|
|
|
7FF55D491000
|
unkown
|
page readonly
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
209FFB50000
|
unkown
|
page read and write
|
|
|
|
7FF5B8F60000
|
unkown
|
page readonly
|
|
|
|
7FF5D98A3000
|
unkown
|
page readonly
|
|
|
|
469000
|
unkown image
|
page write copy
|
|
|
|
209FDB34000
|
unkown
|
page read and write
|
|
|
|
23F57C76000
|
unkown
|
page read and write
|
|
|
|
1D9ACD80000
|
unkown
|
page readonly
|
|
|
|
7FF4FE5F6000
|
unkown
|
page readonly
|
|
|
|
1D9ACE2A000
|
unkown
|
page read and write
|
|
|
|
1D9AD700000
|
unkown
|
page read and write
|
|
|
|
7FF588D8B000
|
unkown
|
page readonly
|
|
|
|
20979C00000
|
unkown
|
page read and write
|
|
|
|
614000
|
unkown
|
page read and write
|
|
|
|
209FDA5B000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
199000
|
unkown
|
page read and write
|
|
|
|
7FF5D991F000
|
unkown
|
page readonly
|
|
|
|
7FF54A64F000
|
unkown
|
page readonly
|
|
|
|
225B3100000
|
unkown
|
page read and write
|
|
|
|
7FF50AA9F000
|
unkown
|
page readonly
|
|
|
|
9A000
|
unkown
|
page read and write
|
|
|
|
2C353813000
|
unkown
|
page read and write
|
|
|
|
1F62FB59000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
685000
|
heap default
|
page read and write
|
|
|
|
E2E000
|
unkown
|
page read and write
|
|
|
|
2C353A00000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
209FDA99000
|
unkown
|
page read and write
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
2120C110000
|
heap private
|
page read and write
|
|
|
|
1F634AAE000
|
unkown
|
page read and write
|
|
|
|
209FDAE5000
|
unkown
|
page read and write
|
|
|
|
7FF588CC7000
|
unkown
|
page readonly
|
|
|
|
157C7802000
|
unkown
|
page read and write
|
|
|
|
7FF549EA6000
|
unkown
|
page readonly
|
|
|
|
225B2FA0000
|
unkown
|
page read and write
|
|
|
|
1D9ACE00000
|
unkown
|
page read and write
|
|
|
|
7FF588C94000
|
unkown
|
page readonly
|
|
|
|
455000
|
unkown image
|
page readonly
|
|
|
|
1371000
|
unkown
|
page read and write
|
|
|
|
209FDB44000
|
unkown
|
page read and write
|
|
|
|
7FF54A3ED000
|
unkown
|
page readonly
|
|
|
|
209FFD43000
|
unkown
|
page read and write
|
|
|
|
56C0E7F000
|
unkown
|
page read and write
|
|
|
|
209FFCD3000
|
unkown
|
page read and write
|
|
|
|
19C000
|
stack
|
page read and write
|
|
|
|
DC14FE000
|
unkown
|
page read and write
|
|
|
|
1930000
|
unkown
|
page read and write
|
|
|
|
7FF5D98C5000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF54A57D000
|
unkown
|
page readonly
|
|
|
|
209FFB33000
|
unkown
|
page read and write
|
|
There are 1302 hidden memdumps, click here to show them.