Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
pitEBNziGR.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\edb.log
|
data
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
|
Extensible storage engine DataBase, version 0x620, checksum 0x71939413, page size 16384, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCircular.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl
|
data
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
|
data
|
modified
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\pitEBNziGR.exe
|
'C:\Users\user\Desktop\pitEBNziGR.exe'
|
|
|
|
C:\Users\user\Desktop\pitEBNziGR.exe
|
C:\Users\user\Desktop\pitEBNziGR.exe
|
|
|
|
C:\Windows\SysWOW64\audioservice.exe
|
C:\Windows\SysWOW64\audioservice.exe
|
|
|
|
C:\Windows\SysWOW64\audioservice.exe
|
C:\Windows\SysWOW64\audioservice.exe
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k unistacksvcgroup
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k NetworkService -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
|
|
|
|
C:\Windows\System32\SgrmBroker.exe
|
C:\Windows\system32\SgrmBroker.exe
|
|
|
|
C:\Program Files\Windows Defender\MpCmdRun.exe
|
'C:\Program Files\Windows Defender\mpcmdrun.exe' -wdenable
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
There are 4 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://173.230.145.224:8080/
|
unknown
|
|
|
|
http://193.169.54.12:8080/
|
unknown
|
|
|
|
http://173.230.145.224:8080/gM#
|
unknown
|
|
|
|
http://193.169.54.12:8080/_M
|
unknown
|
|
|
|
http://193.169.54.12:8080/ux
|
unknown
|
|
|
|
http://173.230.145.224:8080/TM
|
unknown
|
|
|
|
http://173.230.145.224:8080/l
|
unknown
|
|
|
|
http://193.169.54.12:8080/5
|
unknown
|
|
|
|
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Driving
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Traffic/Incidents/
|
unknown
|
|
|
|
https://t0.tiles.ditu.live.com/tiles/gen
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Walking
|
unknown
|
|
|
|
https://79.172.249.82:443/
|
79.172.249.82
|
|
|
|
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
|
unknown
|
|
|
|
https://%s.xboxlive.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Locations
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing
|
unknown
|
|
|
|
https://dynamic.t
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Transit
|
unknown
|
|
|
|
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
|
unknown
|
|
|
|
https://appexmapsappupdate.blob.core.windows.net
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
http://79.172.249.82:443/
|
unknown
|
|
|
|
https://activity.windows.com
|
unknown
|
|
|
|
http://www.bingmapsportal.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Locations
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://%s.dnet.xboxlive.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
|
unknown
|
|
There are 38 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
193.169.54.12
|
unknown
|
Germany
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
173.230.145.224
|
unknown
|
United States
|
|
|
|
79.172.249.82
|
unknown
|
Hungary
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\svchost.exe
|
cval
|
|
|
|
C:\Windows\System32\svchost.exe
|
cval
|
|
|
|
C:\Windows\System32\svchost.exe
|
PerfMMFileName
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-100
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-101
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\dnsapi.dll,-103
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\NgcRecovery.dll,-100
|
|
|
|
C:\Windows\System32\svchost.exe
|
MonthID
|
|
There are 2 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
A81000
|
unkown image
|
page execute read
|
|
|
|
A81000
|
unkown image
|
page execute read
|
|
|
|
A81000
|
unkown image
|
page execute read
|
|
|
|
A81000
|
unkown image
|
page execute read
|
|
|
|
A81000
|
unkown image
|
page execute read
|
|
|
|
A81000
|
unkown image
|
page execute read
|
|
|
|
A81000
|
unkown image
|
page execute read
|
|
|
|
A81000
|
unkown image
|
page execute read
|
|
|
|
7FF50FB26000
|
unkown
|
page readonly
|
|
|
|
7FF5366CC000
|
unkown
|
page readonly
|
|
|
|
7FF4FA4BE000
|
unkown
|
page readonly
|
|
|
|
1A8B0110000
|
unkown
|
page read and write
|
|
|
|
28F2E102000
|
unkown
|
page read and write
|
|
|
|
7FF555DB7000
|
unkown
|
page readonly
|
|
|
|
7FF5366BE000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF5E218C000
|
unkown
|
page readonly
|
|
|
|
28F32DD0000
|
unkown
|
page write copy
|
|
|
|
241186CF000
|
unkown
|
page read and write
|
|
|
|
1A8AF240000
|
unkown
|
page read and write
|
|
|
|
7FF4FA506000
|
unkown
|
page readonly
|
|
|
|
217B5000000
|
unkown
|
page read and write
|
|
|
|
1939C644000
|
unkown
|
page read and write
|
|
|
|
F90000
|
heap default
|
page read and write
|
|
|
|
2FF0000
|
heap private
|
page read and write
|
|
|
|
1FA8E300000
|
unkown
|
page read and write
|
|
|
|
28F2D6B0000
|
unkown
|
page readonly
|
|
|
|
1939C540000
|
unkown
|
page readonly
|
|
|
|
BA602FE000
|
unkown
|
page read and write
|
|
|
|
1939C67E000
|
unkown
|
page read and write
|
|
|
|
1A8AD487000
|
unkown
|
page read and write
|
|
|
|
217B4702000
|
unkown
|
page read and write
|
|
|
|
7FF50FB9E000
|
unkown
|
page readonly
|
|
|
|
1939C800000
|
unkown
|
page readonly
|
|
|
|
1EA11320000
|
unkown
|
page readonly
|
|
|
|
7FF5B99F2000
|
unkown
|
page readonly
|
|
|
|
1786202A000
|
unkown
|
page read and write
|
|
|
|
17862047000
|
unkown
|
page read and write
|
|
|
|
17863C40000
|
unkown
|
page read and write
|
|
|
|
7FF5B93BE000
|
unkown
|
page readonly
|
|
|
|
7FF4FA348000
|
unkown
|
page readonly
|
|
|
|
7FF5DFB21000
|
unkown
|
page readonly
|
|
|
|
1A8AD487000
|
unkown
|
page read and write
|
|
|
|
7FF5E2145000
|
unkown
|
page readonly
|
|
|
|
7FF5DFF4D000
|
unkown
|
page readonly
|
|
|
|
28F2D876000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
28F2D8A9000
|
unkown
|
page read and write
|
|
|
|
24118C60000
|
unkown
|
page write copy
|
|
|
|
3AF7CFB000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A8B0110000
|
unkown
|
page read and write
|
|
|
|
1939C67B000
|
unkown
|
page read and write
|
|
|
|
7FF53678C000
|
unkown
|
page readonly
|
|
|
|
1136000
|
unkown
|
page read and write
|
|
|
|
17863C00000
|
unkown
|
page read and write
|
|
|
|
28F32DD0000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF536658000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF555B64000
|
unkown
|
page readonly
|
|
|
|
1A8AF210000
|
heap private
|
page read and write
|
|
|
|
1A8AF743000
|
unkown
|
page read and write
|
|
|
|
4DA6EFA000
|
unkown
|
page read and write
|
|
|
|
7FF535FFA000
|
unkown
|
page readonly
|
|
|
|
1FB48110000
|
unkown
|
page readonly
|
|
|
|
7FF5B9A4D000
|
unkown
|
page readonly
|
|
|
|
7FF555D13000
|
unkown
|
page readonly
|
|
|
|
17862057000
|
unkown
|
page read and write
|
|
|
|
7FF59974C000
|
unkown
|
page readonly
|
|
|
|
7FF5992B3000
|
unkown
|
page readonly
|
|
|
|
7FF5B99F8000
|
unkown
|
page readonly
|
|
|
|
333E000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
DAFCF7D000
|
unkown
|
page read and write
|
|
|
|
7FF5E2176000
|
unkown
|
page readonly
|
|
|
|
28F33062000
|
unkown
|
page read and write
|
|
|
|
7FF564E56000
|
unkown
|
page readonly
|
|
|
|
7FF5366D1000
|
unkown
|
page readonly
|
|
|
|
7FF5366E9000
|
unkown
|
page readonly
|
|
|
|
52D22FD000
|
unkown
|
page read and write
|
|
|
|
BA5FFF7000
|
unkown
|
page read and write
|
|
|
|
7FF5A655E000
|
unkown
|
page readonly
|
|
|
|
718227F000
|
unkown
|
page read and write
|
|
|
|
7FF5A6185000
|
unkown
|
page readonly
|
|
|
|
1A8AF5E9000
|
unkown
|
page read and write
|
|
|
|
28F2DFF3000
|
unkown
|
page read and write
|
|
|
|
1A8AD573000
|
unkown
|
page read and write
|
|
|
|
7FF5DFECC000
|
unkown
|
page readonly
|
|
|
|
7FF5364A7000
|
unkown
|
page readonly
|
|
|
|
F8E000
|
unkown
|
page read and write
|
|
|
|
28F2D7A0000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A80000
|
unkown
|
page readonly
|
|
|
|
24118670000
|
unkown
|
page read and write
|
|
|
|
7FF536490000
|
unkown
|
page readonly
|
|
|
|
7FF59981A000
|
unkown
|
page readonly
|
|
|
|
7FF5E18E6000
|
unkown
|
page readonly
|
|
|
|
23F6DEA0000
|
heap private
|
page read and write
|
|
|
|
7FF4FA2EE000
|
unkown
|
page readonly
|
|
|
|
28F2E850000
|
unkown
|
page readonly
|
|
|
|
28F2E800000
|
unkown
|
page readonly
|
|
|
|
1FA8E180000
|
unkown
|
page readonly
|
|
|
|
15283FE000
|
unkown
|
page read and write
|
|
|
|
1FA8E190000
|
unkown
|
page readonly
|
|
|
|
7FF564E66000
|
unkown
|
page readonly
|
|
|
|
1A8AD4E1000
|
unkown
|
page read and write
|
|
|
|
1A8AF800000
|
unkown
|
page read and write
|
|
|
|
7FF536451000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
28F3301F000
|
unkown
|
page read and write
|
|
|
|
23F6DEE0000
|
heap private
|
page read and write
|
|
|
|
1939C657000
|
unkown
|
page read and write
|
|
|
|
235697B000
|
unkown
|
page read and write
|
|
|
|
1527E7B000
|
unkown
|
page read and write
|
|
|
|
1A8AD560000
|
unkown
|
page read and write
|
|
|
|
BA6087F000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF53687D000
|
unkown
|
page readonly
|
|
|
|
2356C7D000
|
unkown
|
page read and write
|
|
|
|
7FF5B93E5000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5A64A5000
|
unkown
|
page readonly
|
|
|
|
7FF59984F000
|
unkown
|
page readonly
|
|
|
|
11ECE7C000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A8AD562000
|
unkown
|
page read and write
|
|
|
|
28F32E60000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF5DFF6C000
|
unkown
|
page readonly
|
|
|
|
1A8AF280000
|
unkown
|
page read and write
|
|
|
|
7181DAB000
|
unkown
|
page read and write
|
|
|
|
28F2E840000
|
unkown
|
page readonly
|
|
|
|
7FF536869000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
17862013000
|
unkown
|
page read and write
|
|
|
|
F40000
|
heap private
|
page read and write
|
|
|
|
7FF599A2D000
|
unkown
|
page readonly
|
|
|
|
C7D000
|
unkown
|
page read and write
|
|
|
|
7FF4FA589000
|
unkown
|
page readonly
|
|
|
|
1EA11454000
|
unkown
|
page read and write
|
|
|
|
1A8AF902000
|
unkown
|
page read and write
|
|
|
|
1A8AD4A0000
|
unkown
|
page read and write
|
|
|
|
1A8B0310000
|
unkown
|
page read and write
|
|
|
|
C67000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF4FA245000
|
unkown
|
page readonly
|
|
|
|
7FF5B9967000
|
unkown
|
page readonly
|
|
|
|
1FA8E258000
|
unkown
|
page read and write
|
|
|
|
17861FD0000
|
unkown
|
page readonly
|
|
|
|
E00000
|
unkown
|
page readonly
|
|
|
|
7FF5999D8000
|
unkown
|
page readonly
|
|
|
|
3AF81FB000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page readonly
|
|
|
|
7FF564E84000
|
unkown
|
page readonly
|
|
|
|
28F330B7000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF50FAB8000
|
unkown
|
page readonly
|
|
|
|
1A8AF55E000
|
unkown
|
page read and write
|
|
|
|
28F2D780000
|
unkown
|
page readonly
|
|
|
|
7FF5A6569000
|
unkown
|
page readonly
|
|
|
|
3AF7FFB000
|
unkown
|
page read and write
|
|
|
|
7FF5366D8000
|
unkown
|
page readonly
|
|
|
|
12C0000
|
unkown
|
page readonly
|
|
|
|
1939C65B000
|
unkown
|
page read and write
|
|
|
|
1EA12E00000
|
unkown
|
page read and write
|
|
|
|
7FF5E20F4000
|
unkown
|
page readonly
|
|
|
|
28F2E7F0000
|
unkown
|
page readonly
|
|
|
|
24118F00000
|
unkown
|
page read and write
|
|
|
|
7FF5B93A9000
|
unkown
|
page readonly
|
|
|
|
7FF5A5C2B000
|
unkown
|
page readonly
|
|
|
|
1FA8E27D000
|
unkown
|
page read and write
|
|
|
|
7FF5E1A45000
|
unkown
|
page readonly
|
|
|
|
1939C63A000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
35BE000
|
unkown
|
page read and write
|
|
|
|
7FF564E6C000
|
unkown
|
page readonly
|
|
|
|
7FF555BD0000
|
unkown
|
page readonly
|
|
|
|
28F2D790000
|
unkown
|
page readonly
|
|
|
|
1A8AD53F000
|
unkown
|
page read and write
|
|
|
|
4DA6E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5B96C2000
|
unkown
|
page readonly
|
|
|
|
7FF5367DB000
|
unkown
|
page readonly
|
|
|
|
1FB48790000
|
unkown
|
page read and write
|
|
|
|
1A8AF700000
|
unkown
|
page read and write
|
|
|
|
7FF555EA4000
|
unkown
|
page readonly
|
|
|
|
EB0000
|
heap default
|
page read and write
|
|
|
|
824F57E000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1EA11413000
|
unkown
|
page read and write
|
|
|
|
7FF50F82C000
|
unkown
|
page readonly
|
|
|
|
12CC000
|
unkown
|
page read and write
|
|
|
|
7FF5A642B000
|
unkown
|
page readonly
|
|
|
|
7FF599724000
|
unkown
|
page readonly
|
|
|
|
7FF5645B2000
|
unkown
|
page readonly
|
|
|
|
52D207C000
|
unkown
|
page read and write
|
|
|
|
7FF536155000
|
unkown
|
page readonly
|
|
|
|
178639D0000
|
unkown
|
page read and write
|
|
|
|
118E000
|
stack
|
page read and write
|
|
|
|
1A8AF500000
|
unkown
|
page read and write
|
|
|
|
23F6F7BF000
|
heap private
|
page read and write
|
|
|
|
217B45C0000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A8B0010000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
1939C66B000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A8AD250000
|
heap private
|
page read and write
|
|
|
|
115A000
|
heap default
|
page read and write
|
|
|
|
7FF599A4C000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF599A60000
|
unkown
|
page readonly
|
|
|
|
24118590000
|
unkown
|
page readonly
|
|
|
|
7FF5E214F000
|
unkown
|
page readonly
|
|
|
|
1A8AF554000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A25000
|
unkown
|
page readonly
|
|
|
|
1A8AD3E0000
|
unkown
|
page readonly
|
|
|
|
7FF536526000
|
unkown
|
page readonly
|
|
|
|
1FB48262000
|
unkown
|
page read and write
|
|
|
|
3AF73CF000
|
unkown
|
page read and write
|
|
|
|
1FB48302000
|
unkown
|
page read and write
|
|
|
|
BA604FF000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF59997A000
|
unkown
|
page readonly
|
|
|
|
1939C613000
|
unkown
|
page read and write
|
|
|
|
28F2D898000
|
unkown
|
page read and write
|
|
|
|
11ED07C000
|
unkown
|
page read and write
|
|
|
|
824F4FD000
|
unkown
|
page read and write
|
|
|
|
1FA8E313000
|
unkown
|
page read and write
|
|
|
|
1EA11650000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5E2186000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF59996A000
|
unkown
|
page readonly
|
|
|
|
1FB4828B000
|
unkown
|
page read and write
|
|
|
|
7FF59993C000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
1A8AF684000
|
unkown
|
page read and write
|
|
|
|
7FF536886000
|
unkown
|
page readonly
|
|
|
|
1A8AF783000
|
unkown
|
page read and write
|
|
|
|
24118713000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF4FA0C3000
|
unkown
|
page readonly
|
|
|
|
FD0000
|
heap default
|
page read and write
|
|
|
|
24118688000
|
unkown
|
page read and write
|
|
|
|
7FF5367C7000
|
unkown
|
page readonly
|
|
|
|
7FF5DFEF6000
|
unkown
|
page readonly
|
|
|
|
24118B90000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF5DFEA1000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A8AD520000
|
unkown
|
page read and write
|
|
|
|
4DA6BDE000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A8AD4C0000
|
unkown
|
page read and write
|
|
|
|
7FF5DFB25000
|
unkown
|
page readonly
|
|
|
|
7FF5E1FCA000
|
unkown
|
page readonly
|
|
|
|
1A8AD43F000
|
unkown
|
page read and write
|
|
|
|
11ED2FE000
|
unkown
|
page read and write
|
|
|
|
3AF7A79000
|
unkown
|
page read and write
|
|
|
|
1A8AF544000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF5B96D1000
|
unkown
|
page readonly
|
|
|
|
7FF5A64EC000
|
unkown
|
page readonly
|
|
|
|
1939C662000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5367F3000
|
unkown
|
page readonly
|
|
|
|
7FF53664C000
|
unkown
|
page readonly
|
|
|
|
12E0000
|
heap private
|
page read and write
|
|
|
|
1A8AD4C4000
|
unkown
|
page read and write
|
|
|
|
C74000
|
unkown
|
page read and write
|
|
|
|
7FF5DFF51000
|
unkown
|
page readonly
|
|
|
|
1939C668000
|
unkown
|
page read and write
|
|
|
|
3AF7BFC000
|
unkown
|
page read and write
|
|
|
|
195A000
|
unkown
|
page read and write
|
|
|
|
7FF5B99ED000
|
unkown
|
page readonly
|
|
|
|
3AF817A000
|
unkown
|
page read and write
|
|
|
|
7FF5E2209000
|
unkown
|
page readonly
|
|
|
|
1939C664000
|
unkown
|
page read and write
|
|
|
|
1939C634000
|
unkown
|
page read and write
|
|
|
|
7FF5B936A000
|
unkown
|
page readonly
|
|
|
|
F8C000
|
unkown
|
page read and write
|
|
|
|
23F6E280000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1EA11400000
|
unkown
|
page read and write
|
|
|
|
7FF50FB16000
|
unkown
|
page readonly
|
|
|
|
28F2E118000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A6C000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
A8B000
|
unkown image
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF555E7C000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A8AF5A5000
|
unkown
|
page read and write
|
|
|
|
7FF555DC1000
|
unkown
|
page readonly
|
|
|
|
23F6DEF0000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
3AF7DFA000
|
unkown
|
page read and write
|
|
|
|
1FA8E302000
|
unkown
|
page read and write
|
|
|
|
7FF5A6561000
|
unkown
|
page readonly
|
|
|
|
7FF4FA4CF000
|
unkown
|
page readonly
|
|
|
|
28F32DF8000
|
unkown
|
page write copy
|
|
|
|
217B462A000
|
unkown
|
page read and write
|
|
|
|
7FF4FA4AA000
|
unkown
|
page readonly
|
|
|
|
7FF599808000
|
unkown
|
page readonly
|
|
|
|
7FF5B9459000
|
unkown
|
page readonly
|
|
|
|
28F2D6A0000
|
heap default
|
page read and write
|
|
|
|
1A8AD562000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
17862058000
|
unkown
|
page read and write
|
|
|
|
7FF5B99CC000
|
unkown
|
page readonly
|
|
|
|
30FE000
|
stack
|
page read and write
|
|
|
|
7FF536919000
|
unkown
|
page readonly
|
|
|
|
1A8AF6A7000
|
unkown
|
page read and write
|
|
|
|
7FF50FB40000
|
unkown
|
page readonly
|
|
|
|
235687B000
|
unkown
|
page read and write
|
|
|
|
D91000
|
unkown
|
page read and write
|
|
|
|
1939C64D000
|
unkown
|
page read and write
|
|
|
|
EFE000
|
stack
|
page read and write
|
|
|
|
F90000
|
unkown
|
page readonly
|
|
|
|
A8D000
|
unkown image
|
page readonly
|
|
|
|
7FF5DFF2F000
|
unkown
|
page readonly
|
|
|
|
F98000
|
heap default
|
page read and write
|
|
|
|
205D000
|
unkown
|
page read and write
|
|
|
|
7FF50FB0D000
|
unkown
|
page readonly
|
|
|
|
7FF5B99E2000
|
unkown
|
page readonly
|
|
|
|
7FF555E4F000
|
unkown
|
page readonly
|
|
|
|
1FB48030000
|
heap default
|
page read and write
|
|
|
|
28F32F80000
|
unkown
|
page readonly
|
|
|
|
1939C641000
|
unkown
|
page read and write
|
|
|
|
1A8AD429000
|
unkown
|
page read and write
|
|
|
|
1A8AD2B0000
|
heap default
|
page read and write
|
|
|
|
1FB48279000
|
unkown
|
page read and write
|
|
|
|
7FF53652F000
|
unkown
|
page readonly
|
|
|
|
7FF5DFDBA000
|
unkown
|
page readonly
|
|
|
|
7FF5B93CC000
|
unkown
|
page readonly
|
|
|
|
1939C684000
|
unkown
|
page read and write
|
|
|
|
1DDE000
|
unkown
|
page read and write
|
|
|
|
2356F7F000
|
unkown
|
page read and write
|
|
|
|
7FF5DFF87000
|
unkown
|
page readonly
|
|
|
|
1FB48213000
|
unkown
|
page read and write
|
|
|
|
3AF7C7B000
|
unkown
|
page read and write
|
|
|
|
1A8AD2C0000
|
unkown
|
page readonly
|
|
|
|
585D6FB000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
1FB487B0000
|
unkown
|
page readonly
|
|
|
|
7FF5B9459000
|
unkown
|
page readonly
|
|
|
|
1A8B0010000
|
unkown
|
page read and write
|
|
|
|
BA60A7C000
|
unkown
|
page read and write
|
|
|
|
7FF5E1EC5000
|
unkown
|
page readonly
|
|
|
|
217B4C60000
|
unkown
|
page readonly
|
|
|
|
7FF555F09000
|
unkown
|
page readonly
|
|
|
|
A8B000
|
unkown image
|
page readonly
|
|
|
|
A5B000
|
stack
|
page read and write
|
|
|
|
7FF5999FE000
|
unkown
|
page readonly
|
|
|
|
7FF53690E000
|
unkown
|
page readonly
|
|
|
|
1A8AF2B0000
|
unkown
|
page read and write
|
|
|
|
7FF5E1F33000
|
unkown
|
page readonly
|
|
|
|
A8B000
|
unkown image
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1939C600000
|
unkown
|
page read and write
|
|
|
|
7FF555E3E000
|
unkown
|
page readonly
|
|
|
|
7FF5E213E000
|
unkown
|
page readonly
|
|
|
|
2ED0000
|
unkown
|
page read and write
|
|
|
|
824F17E000
|
unkown
|
page read and write
|
|
|
|
A8C000
|
unkown image
|
page read and write
|
|
|
|
241186CC000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
28F2D83D000
|
unkown
|
page read and write
|
|
|
|
1A8AF57C000
|
unkown
|
page read and write
|
|
|
|
7FF5362B2000
|
unkown
|
page readonly
|
|
|
|
BA608FF000
|
unkown
|
page read and write
|
|
|
|
1FB48802000
|
unkown
|
page read and write
|
|
|
|
7FF5DFF66000
|
unkown
|
page readonly
|
|
|
|
7FF4FA328000
|
unkown
|
page readonly
|
|
|
|
1EA113F0000
|
unkown
|
page readonly
|
|
|
|
7FF50F823000
|
unkown
|
page readonly
|
|
|
|
7FF5DFBB8000
|
unkown
|
page readonly
|
|
|
|
1A8AD4F9000
|
unkown
|
page read and write
|
|
|
|
1A8AD52F000
|
unkown
|
page read and write
|
|
|
|
7FF4FA250000
|
unkown
|
page readonly
|
|
|
|
7FF5B9A39000
|
unkown
|
page readonly
|
|
|
|
7FF564E39000
|
unkown
|
page readonly
|
|
|
|
1A8B0310000
|
unkown
|
page read and write
|
|
|
|
7FF5367F7000
|
unkown
|
page readonly
|
|
|
|
1A8AD491000
|
unkown
|
page read and write
|
|
|
|
7FF564C6F000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
17862000000
|
unkown
|
page read and write
|
|
|
|
7FF536896000
|
unkown
|
page readonly
|
|
|
|
128D000
|
stack
|
page read and write
|
|
|
|
28F32E04000
|
unkown
|
page write copy
|
|
|
|
17862200000
|
unkown
|
page readonly
|
|
|
|
1A8AD4D2000
|
unkown
|
page read and write
|
|
|
|
1939C65F000
|
unkown
|
page read and write
|
|
|
|
28F32E60000
|
unkown
|
page read and write
|
|
|
|
7FF5A649E000
|
unkown
|
page readonly
|
|
|
|
7FF5A6460000
|
unkown
|
page readonly
|
|
|
|
24118CB0000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
28F32D40000
|
unkown
|
page read and write
|
|
|
|
7FF5DFF84000
|
unkown
|
page readonly
|
|
|
|
2356B7F000
|
unkown
|
page read and write
|
|
|
|
1A8AF2A0000
|
unkown
|
page read and write
|
|
|
|
7FF564E87000
|
unkown
|
page readonly
|
|
|
|
217B45C0000
|
unkown
|
page read and write
|
|
|
|
A8D000
|
unkown image
|
page readonly
|
|
|
|
28F2D8F9000
|
unkown
|
page read and write
|
|
|
|
17863B02000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5E19A0000
|
unkown
|
page readonly
|
|
|
|
17862058000
|
unkown
|
page read and write
|
|
|
|
11ED1FF000
|
unkown
|
page read and write
|
|
|
|
7FF4FA498000
|
unkown
|
page readonly
|
|
|
|
24118E02000
|
unkown
|
page read and write
|
|
|
|
28F2E610000
|
unkown
|
page read and write
|
|
|
|
1939C65C000
|
unkown
|
page read and write
|
|
|
|
7FF5E1FD9000
|
unkown
|
page readonly
|
|
|
|
1A8AD413000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A66000
|
unkown
|
page readonly
|
|
|
|
1A8AF6C5000
|
unkown
|
page read and write
|
|
|
|
1A8AF743000
|
unkown
|
page read and write
|
|
|
|
7FF4F9C60000
|
unkown
|
page readonly
|
|
|
|
28F32E60000
|
unkown
|
page read and write
|
|
|
|
7FF5E216D000
|
unkown
|
page readonly
|
|
|
|
7FF5E18F5000
|
unkown
|
page readonly
|
|
|
|
1FA8EA02000
|
unkown
|
page read and write
|
|
|
|
1939C530000
|
unkown
|
page readonly
|
|
|
|
7FF50F29D000
|
unkown
|
page readonly
|
|
|
|
1FB481F0000
|
unkown
|
page readonly
|
|
|
|
7FF53663B000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF536812000
|
unkown
|
page readonly
|
|
|
|
1FA8EC00000
|
unkown
|
page readonly
|
|
|
|
2F80000
|
unkown
|
page readonly
|
|
|
|
1EA112B0000
|
heap private
|
page read and write
|
|
|
|
1125000
|
unkown
|
page read and write
|
|
|
|
7FF555D17000
|
unkown
|
page readonly
|
|
|
|
28F2D873000
|
unkown
|
page read and write
|
|
|
|
24118800000
|
unkown
|
page readonly
|
|
|
|
7FF5E2159000
|
unkown
|
page readonly
|
|
|
|
241185A0000
|
unkown
|
page readonly
|
|
|
|
7FF5368A5000
|
unkown
|
page readonly
|
|
|
|
1A8AD470000
|
unkown
|
page read and write
|
|
|
|
178639F0000
|
unkown
|
page readonly
|
|
|
|
A8D000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
unkown
|
page readonly
|
|
|
|
241185B0000
|
unkown
|
page read and write
|
|
|
|
3AF72CB000
|
unkown
|
page read and write
|
|
|
|
7FF5E1F8F000
|
unkown
|
page readonly
|
|
|
|
23F6F8D0000
|
heap private
|
page read and write
|
|
|
|
1A8AD513000
|
unkown
|
page read and write
|
|
|
|
1A8AF900000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF4FA4C5000
|
unkown
|
page readonly
|
|
|
|
7FF5368B4000
|
unkown
|
page readonly
|
|
|
|
28F32E30000
|
unkown
|
page read and write
|
|
|
|
7FF53683A000
|
unkown
|
page readonly
|
|
|
|
1527EFE000
|
unkown
|
page read and write
|
|
|
|
7FF5998D3000
|
unkown
|
page readonly
|
|
|
|
1939C631000
|
unkown
|
page read and write
|
|
|
|
1A8AD46E000
|
unkown
|
page read and write
|
|
|
|
23F6F840000
|
heap private
|
page read and write
|
|
|
|
DAFCBFC000
|
unkown
|
page read and write
|
|
|
|
1A8AF6A4000
|
unkown
|
page read and write
|
|
|
|
7FF555B77000
|
unkown
|
page readonly
|
|
|
|
7FF555E16000
|
unkown
|
page readonly
|
|
|
|
1650000
|
unkown
|
page readonly
|
|
|
|
824F2FE000
|
unkown
|
page read and write
|
|
|
|
1A8B0410000
|
unkown
|
page read and write
|
|
|
|
7FF5B995C000
|
unkown
|
page readonly
|
|
|
|
1A8AF580000
|
unkown
|
page read and write
|
|
|
|
7FF5DFF56000
|
unkown
|
page readonly
|
|
|
|
1A8B0410000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF536822000
|
unkown
|
page readonly
|
|
|
|
1A8B0110000
|
unkown
|
page read and write
|
|
|
|
17862118000
|
unkown
|
page read and write
|
|
|
|
23F6DEE5000
|
heap private
|
page read and write
|
|
|
|
7FF5B98F7000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF564E4D000
|
unkown
|
page readonly
|
|
|
|
824F27E000
|
unkown
|
page read and write
|
|
|
|
7FF4FA478000
|
unkown
|
page readonly
|
|
|
|
FA0000
|
heap default
|
page read and write
|
|
|
|
A8B000
|
unkown image
|
page readonly
|
|
|
|
28F2E820000
|
unkown
|
page readonly
|
|
|
|
28F2DD90000
|
unkown
|
page readonly
|
|
|
|
7FF5368B7000
|
unkown
|
page readonly
|
|
|
|
BF0000
|
unkown
|
page readonly
|
|
|
|
7FF599A46000
|
unkown
|
page readonly
|
|
|
|
7FF50FAA2000
|
unkown
|
page readonly
|
|
|
|
7FF50FAF9000
|
unkown
|
page readonly
|
|
|
|
28F2E810000
|
unkown
|
page readonly
|
|
|
|
1A8AD520000
|
unkown
|
page read and write
|
|
|
|
A8D000
|
unkown image
|
page readonly
|
|
|
|
1A8AF530000
|
unkown
|
page read and write
|
|
|
|
1A8AD46A000
|
unkown
|
page read and write
|
|
|
|
1FA8E228000
|
unkown
|
page read and write
|
|
|
|
EC0000
|
unkown
|
page readonly
|
|
|
|
7FF5B9A2F000
|
unkown
|
page readonly
|
|
|
|
1FB4825A000
|
unkown
|
page read and write
|
|
|
|
7FF555F09000
|
unkown
|
page readonly
|
|
|
|
7FF564E25000
|
unkown
|
page readonly
|
|
|
|
1A8AF636000
|
unkown
|
page read and write
|
|
|
|
28F2EB90000
|
unkown
|
page read and write
|
|
|
|
7FF4FA30F000
|
unkown
|
page readonly
|
|
|
|
7FF5E2112000
|
unkown
|
page readonly
|
|
|
|
1FA8E26A000
|
unkown
|
page read and write
|
|
|
|
7FF564E5C000
|
unkown
|
page readonly
|
|
|
|
23F6DD40000
|
unkown
|
page read and write
|
|
|
|
1A8AF54A000
|
unkown
|
page read and write
|
|
|
|
7FF5995D3000
|
unkown
|
page readonly
|
|
|
|
7FF50FB2C000
|
unkown
|
page readonly
|
|
|
|
7FF564DF6000
|
unkown
|
page readonly
|
|
|
|
241186BE000
|
unkown
|
page read and write
|
|
|
|
2356E7E000
|
unkown
|
page read and write
|
|
|
|
7FF555E1A000
|
unkown
|
page readonly
|
|
|
|
7FF5E21A7000
|
unkown
|
page readonly
|
|
|
|
7FF5B9A75000
|
unkown
|
page readonly
|
|
|
|
7FF50FAE5000
|
unkown
|
page readonly
|
|
|
|
28F2D82A000
|
unkown
|
page read and write
|
|
|
|
7FF5999C0000
|
unkown
|
page readonly
|
|
|
|
C80000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
A8C000
|
unkown image
|
page read and write
|
|
|
|
7FF4FA237000
|
unkown
|
page readonly
|
|
|
|
1A1E7FF0000
|
unkown
|
page read and write
|
|
|
|
7FF5E2201000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1FA8E202000
|
unkown
|
page read and write
|
|
|
|
28F32D00000
|
unkown
|
page read and write
|
|
|
|
7FF536455000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF555E45000
|
unkown
|
page readonly
|
|
|
|
28F32DFC000
|
unkown
|
page readonly
|
|
|
|
718207E000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
A8C000
|
unkown image
|
page read and write
|
|
|
|
1A8AF549000
|
unkown
|
page read and write
|
|
|
|
1A1E8280000
|
heap private
|
page read and write
|
|
|
|
1A8AD560000
|
unkown
|
page read and write
|
|
|
|
7FF5DFB23000
|
unkown
|
page readonly
|
|
|
|
28F32EB0000
|
unkown
|
page readonly
|
|
|
|
1786207B000
|
unkown
|
page read and write
|
|
|
|
7FF50FACA000
|
unkown
|
page readonly
|
|
|
|
585D7FE000
|
unkown
|
page read and write
|
|
|
|
7FF564E2F000
|
unkown
|
page readonly
|
|
|
|
1FB4822A000
|
unkown
|
page read and write
|
|
|
|
17861EE0000
|
heap default
|
page read and write
|
|
|
|
1A8AD46E000
|
unkown
|
page read and write
|
|
|
|
2411862A000
|
unkown
|
page read and write
|
|
|
|
7FF599A36000
|
unkown
|
page readonly
|
|
|
|
7FF5B9652000
|
unkown
|
page readonly
|
|
|
|
7FF5B9AE9000
|
unkown
|
page readonly
|
|
|
|
1A8AF5D7000
|
unkown
|
page read and write
|
|
|
|
7FF555CF8000
|
unkown
|
page readonly
|
|
|
|
23F6DE60000
|
unkown
|
page readonly
|
|
|
|
7FF599AC9000
|
unkown
|
page readonly
|
|
|
|
7FF5645AF000
|
unkown
|
page readonly
|
|
|
|
BA6077F000
|
unkown
|
page read and write
|
|
|
|
1A8AF612000
|
unkown
|
page read and write
|
|
|
|
28F330B3000
|
unkown
|
page read and write
|
|
|
|
1A8AF54B000
|
unkown
|
page read and write
|
|
|
|
1A8B0210000
|
unkown
|
page read and write
|
|
|
|
1EA11310000
|
heap default
|
page read and write
|
|
|
|
7FF599A05000
|
unkown
|
page readonly
|
|
|
|
A8D000
|
unkown image
|
page readonly
|
|
|
|
2B89000
|
stack
|
page read and write
|
|
|
|
217B4602000
|
unkown
|
page read and write
|
|
|
|
17863CC0000
|
unkown
|
page readonly
|
|
|
|
235717F000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A8AD466000
|
unkown
|
page read and write
|
|
|
|
7FF5B9395000
|
unkown
|
page readonly
|
|
|
|
7FF5A6134000
|
unkown
|
page readonly
|
|
|
|
7FF599A19000
|
unkown
|
page readonly
|
|
|
|
1EDF000
|
unkown
|
page read and write
|
|
|
|
7FF59982E000
|
unkown
|
page readonly
|
|
|
|
28F32D0E000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF536881000
|
unkown
|
page readonly
|
|
|
|
BA605FF000
|
unkown
|
page read and write
|
|
|
|
1939C63E000
|
unkown
|
page read and write
|
|
|
|
7FF555B73000
|
unkown
|
page readonly
|
|
|
|
7FF599737000
|
unkown
|
page readonly
|
|
|
|
7FF5365C7000
|
unkown
|
page readonly
|
|
|
|
7FF4FA4FC000
|
unkown
|
page readonly
|
|
|
|
24118600000
|
unkown
|
page read and write
|
|
|
|
28F330A2000
|
unkown
|
page read and write
|
|
|
|
7FF50FB4D000
|
unkown
|
page readonly
|
|
|
|
7FF5E2116000
|
unkown
|
page readonly
|
|
|
|
7FF5E18DD000
|
unkown
|
page readonly
|
|
|
|
28F32D24000
|
unkown
|
page read and write
|
|
|
|
7FF53685F000
|
unkown
|
page readonly
|
|
|
|
28F32E60000
|
unkown
|
page readonly
|
|
|
|
7FF599A3C000
|
unkown
|
page readonly
|
|
|
|
28F32EA0000
|
unkown
|
page readonly
|
|
|
|
28F3308B000
|
unkown
|
page read and write
|
|
|
|
28F33000000
|
unkown
|
page read and write
|
|
|
|
1939C66A000
|
unkown
|
page read and write
|
|
|
|
17862002000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
BA6097E000
|
unkown
|
page read and write
|
|
|
|
17862102000
|
unkown
|
page read and write
|
|
|
|
1A8AF526000
|
unkown
|
page read and write
|
|
|
|
7FF5B93D6000
|
unkown
|
page readonly
|
|
|
|
7FF5B96BF000
|
unkown
|
page readonly
|
|
|
|
7FF599981000
|
unkown
|
page readonly
|
|
|
|
4DA6B5B000
|
unkown
|
page read and write
|
|
|
|
1939C675000
|
unkown
|
page read and write
|
|
|
|
7FF5E2095000
|
unkown
|
page readonly
|
|
|
|
15281FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A56000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A8AF783000
|
unkown
|
page read and write
|
|
|
|
7FF555719000
|
unkown
|
page readonly
|
|
|
|
23F6DC7B000
|
heap default
|
page read and write
|
|
|
|
28F32E40000
|
unkown
|
page read and write
|
|
|
|
28F2D800000
|
unkown
|
page read and write
|
|
|
|
1FB48272000
|
unkown
|
page read and write
|
|
|
|
3AF767A000
|
unkown
|
page read and write
|
|
|
|
7FF5999D6000
|
unkown
|
page readonly
|
|
|
|
178639D0000
|
unkown
|
page read and write
|
|
|
|
1A8AF564000
|
unkown
|
page read and write
|
|
|
|
1A8AD466000
|
unkown
|
page read and write
|
|
|
|
17862100000
|
unkown
|
page read and write
|
|
|
|
7FF555C5A000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
1939C665000
|
unkown
|
page read and write
|
|
|
|
217B48D0000
|
unkown
|
page readonly
|
|
|
|
7FF5365CE000
|
unkown
|
page readonly
|
|
|
|
1A8AF402000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A87000
|
unkown
|
page readonly
|
|
|
|
7FF5DFF5C000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
B8D000
|
stack
|
page read and write
|
|
|
|
BA5FE7F000
|
unkown
|
page read and write
|
|
|
|
7FF4FA4D9000
|
unkown
|
page readonly
|
|
|
|
7FF599A64000
|
unkown
|
page readonly
|
|
|
|
F3D000
|
stack
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
E3D000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown
|
page readonly
|
|
|
|
7FF536453000
|
unkown
|
page readonly
|
|
|
|
1939C674000
|
unkown
|
page read and write
|
|
|
|
17862113000
|
unkown
|
page read and write
|
|
|
|
C86000
|
unkown
|
page read and write
|
|
|
|
7FF599777000
|
unkown
|
page readonly
|
|
|
|
1A8AF57C000
|
unkown
|
page read and write
|
|
|
|
7FF50F7BC000
|
unkown
|
page readonly
|
|
|
|
7FF5364E8000
|
unkown
|
page readonly
|
|
|
|
217B4570000
|
unkown
|
page readonly
|
|
|
|
7FF555E76000
|
unkown
|
page readonly
|
|
|
|
1939C658000
|
unkown
|
page read and write
|
|
|
|
7FF5B9814000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF555E86000
|
unkown
|
page readonly
|
|
|
|
7FF5B990C000
|
unkown
|
page readonly
|
|
|
|
585D5FB000
|
unkown
|
page read and write
|
|
|
|
7FF50FBA9000
|
unkown
|
page readonly
|
|
|
|
28F32D30000
|
unkown
|
page read and write
|
|
|
|
7FF5999AC000
|
unkown
|
page readonly
|
|
|
|
1090000
|
heap default
|
page read and write
|
|
|
|
113A000
|
heap default
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF50FBA1000
|
unkown
|
page readonly
|
|
|
|
7FF5995FD000
|
unkown
|
page readonly
|
|
|
|
1A8AF280000
|
unkown
|
page read and write
|
|
|
|
1EA11600000
|
unkown
|
page write copy
|
|
|
|
10C8000
|
heap default
|
page read and write
|
|
|
|
7FF555F01000
|
unkown
|
page readonly
|
|
|
|
217B4560000
|
heap default
|
page read and write
|
|
|
|
7FF50FBA9000
|
unkown
|
page readonly
|
|
|
|
28F32E20000
|
unkown
|
page read and write
|
|
|
|
7FF5E1FA8000
|
unkown
|
page readonly
|
|
|
|
BD0000
|
unkown
|
page readonly
|
|
|
|
1CA0000
|
unkown
|
page read and write
|
|
|
|
7FF5E1E6D000
|
unkown
|
page readonly
|
|
|
|
7FF5B986F000
|
unkown
|
page readonly
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
1FA8E110000
|
heap private
|
page read and write
|
|
|
|
1A8B0310000
|
unkown
|
page read and write
|
|
|
|
28F330B1000
|
unkown
|
page read and write
|
|
|
|
23F6DE80000
|
unkown
|
page readonly
|
|
|
|
28F2E630000
|
unkown
|
page read and write
|
|
|
|
152807E000
|
unkown
|
page read and write
|
|
|
|
7FF5DFF1E000
|
unkown
|
page readonly
|
|
|
|
7FF5E1F55000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
A8B000
|
unkown image
|
page readonly
|
|
|
|
28F2E015000
|
unkown
|
page read and write
|
|
|
|
1A8AF270000
|
unkown
|
page readonly
|
|
|
|
28F33086000
|
unkown
|
page read and write
|
|
|
|
B15000
|
heap default
|
page read and write
|
|
|
|
DAFCFFF000
|
unkown
|
page read and write
|
|
|
|
3AF7E7A000
|
unkown
|
page read and write
|
|
|
|
1A8AD4CA000
|
unkown
|
page read and write
|
|
|
|
217B4E02000
|
unkown
|
page read and write
|
|
|
|
23F6DD60000
|
unkown
|
page readonly
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
7FF5B93DC000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
D47000
|
unkown
|
page read and write
|
|
|
|
17861FE0000
|
unkown
|
page read and write
|
|
|
|
7FF555BC5000
|
unkown
|
page readonly
|
|
|
|
1A8AF942000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
217B4613000
|
unkown
|
page read and write
|
|
|
|
7FF564DE0000
|
unkown
|
page readonly
|
|
|
|
D95000
|
unkown
|
page read and write
|
|
|
|
24118624000
|
unkown
|
page read and write
|
|
|
|
3AF827F000
|
unkown
|
page read and write
|
|
|
|
178639A0000
|
unkown
|
page read and write
|
|
|
|
7FF5B9ADE000
|
unkown
|
page readonly
|
|
|
|
7FF5E21A2000
|
unkown
|
page readonly
|
|
|
|
11ED5FC000
|
unkown
|
page read and write
|
|
|
|
1FB48120000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5B99BA000
|
unkown
|
page readonly
|
|
|
|
7FF4FA46C000
|
unkown
|
page readonly
|
|
|
|
7FF5B8C8C000
|
unkown
|
page readonly
|
|
|
|
7FF564EE9000
|
unkown
|
page readonly
|
|
|
|
7FF599790000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
BA603FB000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
7FF599A31000
|
unkown
|
page readonly
|
|
|
|
52D1D7C000
|
unkown
|
page read and write
|
|
|
|
7FF555C70000
|
unkown
|
page readonly
|
|
|
|
7FF4FA524000
|
unkown
|
page readonly
|
|
|
|
7FF536808000
|
unkown
|
page readonly
|
|
|
|
7FF53652C000
|
unkown
|
page readonly
|
|
|
|
1A8AD52F000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF564EDE000
|
unkown
|
page readonly
|
|
|
|
52D1FFE000
|
unkown
|
page read and write
|
|
|
|
7FF5367D1000
|
unkown
|
page readonly
|
|
|
|
17864000000
|
unkown
|
page write copy
|
|
|
|
217B4624000
|
unkown
|
page read and write
|
|
|
|
1A8AF541000
|
unkown
|
page read and write
|
|
|
|
1939C646000
|
unkown
|
page read and write
|
|
|
|
1A1E7F20000
|
unkown
|
page readonly
|
|
|
|
7FF5B9975000
|
unkown
|
page readonly
|
|
|
|
7FF4FA57E000
|
unkown
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
1A8AF600000
|
unkown
|
page read and write
|
|
|
|
7FF5DFF25000
|
unkown
|
page readonly
|
|
|
|
7FF53667E000
|
unkown
|
page readonly
|
|
|
|
4DA7079000
|
unkown
|
page read and write
|
|
|
|
7FF5E2017000
|
unkown
|
page readonly
|
|
|
|
7FF59999C000
|
unkown
|
page readonly
|
|
|
|
217B465C000
|
unkown
|
page read and write
|
|
|
|
2356D7F000
|
unkown
|
page read and write
|
|
|
|
3AF787A000
|
unkown
|
page read and write
|
|
|
|
178639D0000
|
unkown
|
page read and write
|
|
|
|
7FF5992AF000
|
unkown
|
page readonly
|
|
|
|
17861E80000
|
heap private
|
page read and write
|
|
|
|
1A8AD4C0000
|
unkown
|
page read and write
|
|
|
|
824F3FE000
|
unkown
|
page read and write
|
|
|
|
217B4800000
|
unkown
|
page readonly
|
|
|
|
7FF5A64B9000
|
unkown
|
page readonly
|
|
|
|
1FA8E860000
|
unkown
|
page readonly
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
17863A02000
|
unkown
|
page read and write
|
|
|
|
3AF80FD000
|
unkown
|
page read and write
|
|
|
|
7FF4FA4ED000
|
unkown
|
page readonly
|
|
|
|
1939C645000
|
unkown
|
page read and write
|
|
|
|
7FF5A6478000
|
unkown
|
page readonly
|
|
|
|
7FF536826000
|
unkown
|
page readonly
|
|
|
|
1FB4823F000
|
unkown
|
page read and write
|
|
|
|
7FF50FA54000
|
unkown
|
page readonly
|
|
|
|
95C000
|
unkown
|
page read and write
|
|
|
|
1A1E8030000
|
heap default
|
page read and write
|
|
|
|
7FF5A6120000
|
unkown
|
page readonly
|
|
|
|
7FF50FB35000
|
unkown
|
page readonly
|
|
|
|
7FF50F35B000
|
unkown
|
page readonly
|
|
|
|
217B4500000
|
heap private
|
page read and write
|
|
|
|
7FF4FA50C000
|
unkown
|
page readonly
|
|
|
|
1EA11402000
|
unkown
|
page read and write
|
|
|
|
1A8AF280000
|
unkown
|
page read and write
|
|
|
|
1EA1141F000
|
unkown
|
page read and write
|
|
|
|
28F32D44000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A5C000
|
unkown
|
page readonly
|
|
|
|
A8D000
|
unkown image
|
page readonly
|
|
|
|
28F2D902000
|
unkown
|
page read and write
|
|
|
|
7FF5A64D1000
|
unkown
|
page readonly
|
|
|
|
1FA8E170000
|
heap default
|
page read and write
|
|
|
|
24118F12000
|
unkown
|
page read and write
|
|
|
|
7FF5B9451000
|
unkown
|
page readonly
|
|
|
|
1960000
|
unkown
|
page readonly
|
|
|
|
241184C0000
|
unkown
|
page readonly
|
|
|
|
7FF5365E0000
|
unkown
|
page readonly
|
|
|
|
7FF4FA589000
|
unkown
|
page readonly
|
|
|
|
BA600FA000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF59977E000
|
unkown
|
page readonly
|
|
|
|
1EA1143F000
|
unkown
|
page read and write
|
|
|
|
7FF5B99D8000
|
unkown
|
page readonly
|
|
|
|
7FF5B99E0000
|
unkown
|
page readonly
|
|
|
|
3AF77FA000
|
unkown
|
page read and write
|
|
|
|
28F2DFF0000
|
unkown
|
page read and write
|
|
|
|
7FF4FA45A000
|
unkown
|
page readonly
|
|
|
|
7FF53688C000
|
unkown
|
page readonly
|
|
|
|
A8B000
|
unkown image
|
page readonly
|
|
|
|
235707E000
|
unkown
|
page read and write
|
|
|
|
3AF7D7C000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A1E000
|
unkown
|
page readonly
|
|
|
|
1A8B0210000
|
unkown
|
page read and write
|
|
|
|
7FF5365D5000
|
unkown
|
page readonly
|
|
|
|
10A0000
|
unkown
|
page readonly
|
|
|
|
A8C000
|
unkown image
|
page read and write
|
|
|
|
7FF4FA158000
|
unkown
|
page readonly
|
|
|
|
7FF5E217C000
|
unkown
|
page readonly
|
|
|
|
7FF536855000
|
unkown
|
page readonly
|
|
|
|
1939C647000
|
unkown
|
page read and write
|
|
|
|
7FF564E80000
|
unkown
|
page readonly
|
|
|
|
7FF564E0A000
|
unkown
|
page readonly
|
|
|
|
52D196C000
|
unkown
|
page read and write
|
|
|
|
7FF5998B8000
|
unkown
|
page readonly
|
|
|
|
23F6DB40000
|
unkown
|
page readonly
|
|
|
|
7FF555E18000
|
unkown
|
page readonly
|
|
|
|
7FF5DFFDE000
|
unkown
|
page readonly
|
|
|
|
1A8B0000000
|
unkown
|
page read and write
|
|
|
|
7FF5367E7000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
178639E0000
|
unkown
|
page readonly
|
|
|
|
1939C63D000
|
unkown
|
page read and write
|
|
|
|
7FF5DFEE2000
|
unkown
|
page readonly
|
|
|
|
7FF50FAA0000
|
unkown
|
page readonly
|
|
|
|
7FF50FB44000
|
unkown
|
page readonly
|
|
|
|
7FF5366E0000
|
unkown
|
page readonly
|
|
|
|
1939C632000
|
unkown
|
page read and write
|
|
|
|
7FF5999D2000
|
unkown
|
page readonly
|
|
|
|
1939C450000
|
heap default
|
page read and write
|
|
|
|
28F32E07000
|
unkown
|
page write copy
|
|
|
|
C77000
|
unkown
|
page read and write
|
|
|
|
1A1E804B000
|
heap default
|
page read and write
|
|
|
|
7FF50FA4A000
|
unkown
|
page readonly
|
|
|
|
7FF5B9A0A000
|
unkown
|
page readonly
|
|
|
|
7FF5E2100000
|
unkown
|
page readonly
|
|
|
|
28F2E118000
|
unkown
|
page read and write
|
|
|
|
1FB48040000
|
unkown
|
page readonly
|
|
|
|
1EA11429000
|
unkown
|
page read and write
|
|
|
|
28F32F60000
|
unkown
|
page readonly
|
|
|
|
3AF7EFB000
|
unkown
|
page read and write
|
|
|
|
BA60C7E000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF555DDC000
|
unkown
|
page readonly
|
|
|
|
B00000
|
unkown
|
page read and write
|
|
|
|
23F6DE70000
|
unkown
|
page readonly
|
|
|
|
1A8AD454000
|
unkown
|
page read and write
|
|
|
|
1FB48313000
|
unkown
|
page read and write
|
|
|
|
23F6F6C0000
|
heap private
|
page read and write
|
|
|
|
1A8AD51F000
|
unkown
|
page read and write
|
|
|
|
28F2E201000
|
unkown
|
page read and write
|
|
|
|
28F2D886000
|
unkown
|
page read and write
|
|
|
|
7FF4FA359000
|
unkown
|
page readonly
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
217B45C0000
|
unkown
|
page read and write
|
|
|
|
28F3302D000
|
unkown
|
page read and write
|
|
|
|
7FF599A55000
|
unkown
|
page readonly
|
|
|
|
7FF5E21FE000
|
unkown
|
page readonly
|
|
|
|
7FF5B92E5000
|
unkown
|
page readonly
|
|
|
|
7FF5A6123000
|
unkown
|
page readonly
|
|
|
|
7FF5B9AE0000
|
unkown
|
page readonly
|
|
|
|
1A8AD4E1000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF564C0A000
|
unkown
|
page readonly
|
|
|
|
1A8AF556000
|
unkown
|
page read and write
|
|
|
|
7FF599977000
|
unkown
|
page readonly
|
|
|
|
1FB48A00000
|
unkown
|
page readonly
|
|
|
|
28F32D08000
|
unkown
|
page read and write
|
|
|
|
1939CE02000
|
unkown
|
page read and write
|
|
|
|
2356A7F000
|
unkown
|
page read and write
|
|
|
|
7FF555715000
|
unkown
|
page readonly
|
|
|
|
1F1E000
|
unkown
|
page read and write
|
|
|
|
1939C702000
|
unkown
|
page read and write
|
|
|
|
7FF564EE1000
|
unkown
|
page readonly
|
|
|
|
CD2000
|
unkown
|
page read and write
|
|
|
|
28F2E159000
|
unkown
|
page read and write
|
|
|
|
1A8AEDA0000
|
unkown
|
page read and write
|
|
|
|
7FF5DFD50000
|
unkown
|
page readonly
|
|
|
|
7FF5DFD17000
|
unkown
|
page readonly
|
|
|
|
7FF5DFF39000
|
unkown
|
page readonly
|
|
|
|
7FF5B984E000
|
unkown
|
page readonly
|
|
|
|
1A8AF57A000
|
unkown
|
page read and write
|
|
|
|
3AF797A000
|
unkown
|
page read and write
|
|
|
|
7FF5368B0000
|
unkown
|
page readonly
|
|
|
|
7FF50FB47000
|
unkown
|
page readonly
|
|
|
|
52D25FF000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
824EDEB000
|
unkown
|
page read and write
|
|
|
|
28F2E100000
|
unkown
|
page read and write
|
|
|
|
BA601FA000
|
unkown
|
page read and write
|
|
|
|
7FF5A6507000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1FA8E213000
|
unkown
|
page read and write
|
|
|
|
28F32E50000
|
unkown
|
page read and write
|
|
|
|
1FA8E400000
|
unkown
|
page readonly
|
|
|
|
17862048000
|
unkown
|
page read and write
|
|
|
|
7FF555EA0000
|
unkown
|
page readonly
|
|
|
|
28F2DA00000
|
unkown
|
page readonly
|
|
|
|
7FF555EFE000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF536797000
|
unkown
|
page readonly
|
|
|
|
1CB1000
|
unkown
|
page read and write
|
|
|
|
3AF76FA000
|
unkown
|
page read and write
|
|
|
|
7FF5DFE87000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
23F6DC30000
|
unkown
|
page readonly
|
|
|
|
1FA8E4D0000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
1A8AF535000
|
unkown
|
page read and write
|
|
|
|
7FF5E1DAD000
|
unkown
|
page readonly
|
|
|
|
3AF7AFA000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A1E8010000
|
unkown
|
page read and write
|
|
|
|
1FA8E1A0000
|
unkown
|
page read and write
|
|
|
|
7FF599961000
|
unkown
|
page readonly
|
|
|
|
7FF5367FC000
|
unkown
|
page readonly
|
|
|
|
1A8AF53E000
|
unkown
|
page read and write
|
|
|
|
1939C66F000
|
unkown
|
page read and write
|
|
|
|
A8D000
|
unkown image
|
page readonly
|
|
|
|
1A8B0210000
|
unkown
|
page read and write
|
|
|
|
7FF5999A7000
|
unkown
|
page readonly
|
|
|
|
824F77D000
|
unkown
|
page read and write
|
|
|
|
B90000
|
unkown
|
page read and write
|
|
|
|
7FF536919000
|
unkown
|
page readonly
|
|
|
|
7FF4FA482000
|
unkown
|
page readonly
|
|
|
|
585D8FE000
|
unkown
|
page read and write
|
|
|
|
2160000
|
unkown
|
page read and write
|
|
|
|
1786203D000
|
unkown
|
page read and write
|
|
|
|
4DA70FF000
|
unkown
|
page read and write
|
|
|
|
28F32BF0000
|
unkown
|
page read and write
|
|
|
|
23F6DAE0000
|
unkown
|
page readonly
|
|
|
|
7FF4FA515000
|
unkown
|
page readonly
|
|
|
|
7FF4FA23E000
|
unkown
|
page readonly
|
|
|
|
1FB48202000
|
unkown
|
page read and write
|
|
|
|
1A8AD400000
|
unkown
|
page read and write
|
|
|
|
7FF599935000
|
unkown
|
page readonly
|
|
|
|
AFE000
|
unkown
|
page read and write
|
|
|
|
7FF4FA581000
|
unkown
|
page readonly
|
|
|
|
7FF599785000
|
unkown
|
page readonly
|
|
|
|
7FF50FA4E000
|
unkown
|
page readonly
|
|
|
|
7FF5DFFE9000
|
unkown
|
page readonly
|
|
|
|
7FF5A64F5000
|
unkown
|
page readonly
|
|
|
|
52D21FB000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF599830000
|
unkown
|
page readonly
|
|
|
|
28F2D813000
|
unkown
|
page read and write
|
|
|
|
28F2E000000
|
unkown
|
page read and write
|
|
|
|
1A8AFA00000
|
unkown
|
page readonly
|
|
|
|
201F000
|
unkown
|
page read and write
|
|
|
|
1A8AF5C6000
|
unkown
|
page read and write
|
|
|
|
3AF777F000
|
unkown
|
page read and write
|
|
|
|
F90000
|
heap default
|
page read and write
|
|
|
|
7FF599974000
|
unkown
|
page readonly
|
|
|
|
1EA12F00000
|
unkown
|
page readonly
|
|
|
|
BA606FD000
|
unkown
|
page read and write
|
|
|
|
1939C660000
|
unkown
|
page read and write
|
|
|
|
7FF5DFED8000
|
unkown
|
page readonly
|
|
|
|
3AF807B000
|
unkown
|
page read and write
|
|
|
|
7FF5DFF75000
|
unkown
|
page readonly
|
|
|
|
28F2DFD1000
|
unkown
|
page read and write
|
|
|
|
7FF5DFC1E000
|
unkown
|
page readonly
|
|
|
|
23F6DE20000
|
unkown
|
page readonly
|
|
|
|
1A8AF57C000
|
unkown
|
page read and write
|
|
|
|
A8B000
|
unkown image
|
page readonly
|
|
|
|
71820FE000
|
unkown
|
page read and write
|
|
|
|
7FF50FB1C000
|
unkown
|
page readonly
|
|
|
|
7FF4FA496000
|
unkown
|
page readonly
|
|
|
|
28F2D913000
|
unkown
|
page read and write
|
|
|
|
7FF50FB11000
|
unkown
|
page readonly
|
|
|
|
17862063000
|
unkown
|
page read and write
|
|
|
|
7FF555E12000
|
unkown
|
page readonly
|
|
|
|
28F32EC0000
|
unkown
|
page readonly
|
|
|
|
7FF5DFE9A000
|
unkown
|
page readonly
|
|
|
|
28F330B4000
|
unkown
|
page read and write
|
|
|
|
A8D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E2195000
|
unkown
|
page readonly
|
|
|
|
7FF5A6127000
|
unkown
|
page readonly
|
|
|
|
B10000
|
heap default
|
page read and write
|
|
|
|
7FF5A64AF000
|
unkown
|
page readonly
|
|
|
|
7FF5A64D6000
|
unkown
|
page readonly
|
|
|
|
28F32C00000
|
unkown
|
page read and write
|
|
|
|
FDA000
|
heap default
|
page read and write
|
|
|
|
217B4590000
|
unkown
|
page read and write
|
|
|
|
1FA8E23C000
|
unkown
|
page read and write
|
|
|
|
7FF5B9368000
|
unkown
|
page readonly
|
|
|
|
7FF5E2118000
|
unkown
|
page readonly
|
|
|
|
1EA11502000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1939C65E000
|
unkown
|
page read and write
|
|
|
|
1A8B0410000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF599AC9000
|
unkown
|
page readonly
|
|
|
|
7FF564E75000
|
unkown
|
page readonly
|
|
|
|
7FF5E21A4000
|
unkown
|
page readonly
|
|
|
|
7FF536785000
|
unkown
|
page readonly
|
|
|
|
7FF5A6437000
|
unkown
|
page readonly
|
|
|
|
7FF5B964E000
|
unkown
|
page readonly
|
|
|
|
7FF50FAB6000
|
unkown
|
page readonly
|
|
|
|
1A8B0010000
|
unkown
|
page read and write
|
|
|
|
1A1E8038000
|
heap default
|
page read and write
|
|
|
|
1A8AF5E2000
|
unkown
|
page read and write
|
|
|
|
FBF000
|
heap default
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF5E1F70000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5A6472000
|
unkown
|
page readonly
|
|
|
|
1A8AD390000
|
unkown
|
page write copy
|
|
|
|
A1C000
|
unkown
|
page read and write
|
|
|
|
12F0000
|
unkown
|
page readonly
|
|
|
|
28F2E710000
|
unkown
|
page read and write
|
|
|
|
52D23FF000
|
unkown
|
page read and write
|
|
|
|
28F33015000
|
unkown
|
page read and write
|
|
|
|
28F32DD4000
|
unkown
|
page readonly
|
|
|
|
7FF5B971E000
|
unkown
|
page readonly
|
|
|
|
BA6057E000
|
unkown
|
page read and write
|
|
|
|
3AF78FA000
|
unkown
|
page read and write
|
|
|
|
7FF5997EB000
|
unkown
|
page readonly
|
|
|
|
10C0000
|
heap default
|
page read and write
|
|
|
|
7FF5DFEF2000
|
unkown
|
page readonly
|
|
|
|
1A8B0413000
|
unkown
|
page read and write
|
|
|
|
824F67D000
|
unkown
|
page read and write
|
|
|
|
28F2D88D000
|
unkown
|
page read and write
|
|
|
|
24118645000
|
unkown
|
page read and write
|
|
|
|
7FF5A6569000
|
unkown
|
page readonly
|
|
|
|
1939C460000
|
unkown
|
page readonly
|
|
|
|
7FF599A67000
|
unkown
|
page readonly
|
|
|
|
7FF564E1E000
|
unkown
|
page readonly
|
|
|
|
7FF5A6462000
|
unkown
|
page readonly
|
|
|
|
1A8AD4C9000
|
unkown
|
page read and write
|
|
|
|
7FF50FADE000
|
unkown
|
page readonly
|
|
|
|
28F3304C000
|
unkown
|
page read and write
|
|
|
|
3100000
|
unkown
|
page readonly
|
|
|
|
7FF599A0F000
|
unkown
|
page readonly
|
|
|
|
7FF5DFEF8000
|
unkown
|
page readonly
|
|
|
|
28F2D640000
|
heap private
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF53689C000
|
unkown
|
page readonly
|
|
|
|
15280FE000
|
unkown
|
page read and write
|
|
|
|
4DA6FFF000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
F60000
|
unkown
|
page read and write
|
|
|
|
17862590000
|
unkown
|
page readonly
|
|
|
|
1939C3F0000
|
heap private
|
page read and write
|
|
|
|
7FF5DFEE0000
|
unkown
|
page readonly
|
|
|
|
28F2D8A0000
|
unkown
|
page read and write
|
|
|
|
24119000000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
3AF7F7A000
|
unkown
|
page read and write
|
|
|
|
52D24FD000
|
unkown
|
page read and write
|
|
|
|
28F2E600000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF4FA4F6000
|
unkown
|
page readonly
|
|
|
|
181C000
|
unkown
|
page read and write
|
|
|
|
7FF53669F000
|
unkown
|
page readonly
|
|
|
|
A8B000
|
unkown image
|
page readonly
|
|
|
|
2FD0000
|
unkown
|
page readonly
|
|
|
|
3AF79FA000
|
unkown
|
page read and write
|
|
|
|
28F3303F000
|
unkown
|
page read and write
|
|
|
|
217B463D000
|
unkown
|
page read and write
|
|
|
|
11ED6FE000
|
unkown
|
page read and write
|
|
|
|
1129000
|
heap default
|
page read and write
|
|
|
|
36BC000
|
stack
|
page read and write
|
|
|
|
1A8AF802000
|
unkown
|
page read and write
|
|
|
|
A1D000
|
unkown
|
page read and write
|
|
|
|
7FF5B9888000
|
unkown
|
page readonly
|
|
|
|
185D000
|
unkown
|
page read and write
|
|
|
|
1A8AF59C000
|
unkown
|
page read and write
|
|
|
|
357F000
|
stack
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1FB48269000
|
unkown
|
page read and write
|
|
|
|
217B4600000
|
unkown
|
page read and write
|
|
|
|
28F2D86C000
|
unkown
|
page read and write
|
|
|
|
52D217D000
|
unkown
|
page read and write
|
|
|
|
7FF5DFE97000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1A8AF783000
|
unkown
|
page read and write
|
|
|
|
1A1E8285000
|
heap private
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
7FF5DFFE0000
|
unkown
|
page readonly
|
|
|
|
1A8AF2C0000
|
unkown
|
page readonly
|
|
|
|
347E000
|
unkown
|
page read and write
|
|
|
|
7FF5E20F8000
|
unkown
|
page readonly
|
|
|
|
28F2D8B7000
|
unkown
|
page read and write
|
|
|
|
28F2E113000
|
unkown
|
page read and write
|
|
|
|
15282FE000
|
unkown
|
page read and write
|
|
|
|
28F32BE0000
|
unkown
|
page read and write
|
|
|
|
7FF5999EA000
|
unkown
|
page readonly
|
|
|
|
7FF5B98AB000
|
unkown
|
page readonly
|
|
|
|
1939C66D000
|
unkown
|
page read and write
|
|
|
|
17862048000
|
unkown
|
page read and write
|
|
|
|
11ED4FC000
|
unkown
|
page read and write
|
|
|
|
1A8AF5B5000
|
unkown
|
page read and write
|
|
|
|
7FF50FB52000
|
unkown
|
page readonly
|
|
|
|
7FF5B944E000
|
unkown
|
page readonly
|
|
|
|
F3D000
|
unkown
|
page read and write
|
|
|
|
BA5FB9B000
|
unkown
|
page read and write
|
|
|
|
7FF5998D7000
|
unkown
|
page readonly
|
|
|
|
28F32E10000
|
unkown
|
page read and write
|
|
|
|
7FF564EE9000
|
unkown
|
page readonly
|
|
|
|
7FF5DFFE9000
|
unkown
|
page readonly
|
|
|
|
1FB48200000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5999A3000
|
unkown
|
page readonly
|
|
|
|
28F32F40000
|
unkown
|
page readonly
|
|
|
|
235667B000
|
unkown
|
page read and write
|
|
|
|
7FF555E59000
|
unkown
|
page readonly
|
|
|
|
7FF5E1ED0000
|
unkown
|
page readonly
|
|
|
|
3AF7B7E000
|
unkown
|
page read and write
|
|
|
|
1939C679000
|
unkown
|
page read and write
|
|
|
|
7FF53684E000
|
unkown
|
page readonly
|
|
|
|
2F00000
|
unkown
|
page readonly
|
|
|
|
7FF5B9736000
|
unkown
|
page readonly
|
|
|
|
1A8B0010000
|
unkown
|
page read and write
|
|
|
|
1A8B0110000
|
unkown
|
page read and write
|
|
|
|
343F000
|
stack
|
page read and write
|
|
|
|
7FF5B9AE9000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
28F32D30000
|
unkown
|
page read and write
|
|
|
|
7FF5A6504000
|
unkown
|
page readonly
|
|
|
|
241184B0000
|
heap default
|
page read and write
|
|
|
|
3AF734E000
|
unkown
|
page read and write
|
|
|
|
24118702000
|
unkown
|
page read and write
|
|
|
|
7FF4FA520000
|
unkown
|
page readonly
|
|
|
|
28F2D856000
|
unkown
|
page read and write
|
|
|
|
B8C000
|
unkown
|
page read and write
|
|
|
|
28F2E002000
|
unkown
|
page read and write
|
|
|
|
7FF599A57000
|
unkown
|
page readonly
|
|
|
|
28F32E60000
|
unkown
|
page read and write
|
|
|
|
7FF5999B8000
|
unkown
|
page readonly
|
|
|
|
4DA6F7A000
|
unkown
|
page read and write
|
|
|
|
1A8AF842000
|
unkown
|
page read and write
|
|
|
|
1939C67A000
|
unkown
|
page read and write
|
|
|
|
7FF5E1D45000
|
unkown
|
page readonly
|
|
|
|
7FF53659C000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
17861FC0000
|
unkown
|
page readonly
|
|
|
|
7FF5997FC000
|
unkown
|
page readonly
|
|
|
|
F10000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF5A62EF000
|
unkown
|
page readonly
|
|
|
|
7FF5A64CD000
|
unkown
|
page readonly
|
|
|
|
1A8AF280000
|
unkown
|
page read and write
|
|
|
|
1939C62A000
|
unkown
|
page read and write
|
|
|
|
1A8AEEA0000
|
unkown
|
page readonly
|
|
|
|
7FF5367B1000
|
unkown
|
page readonly
|
|
|
|
1A8AD600000
|
unkown
|
page readonly
|
|
|
|
28F32D21000
|
unkown
|
page read and write
|
|
|
|
7FF5E1D41000
|
unkown
|
page readonly
|
|
|
|
1A8AF535000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
7FF50FABA000
|
unkown
|
page readonly
|
|
|
|
1A8AF56B000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
23F6DC40000
|
heap default
|
page read and write
|
|
|
|
7FF5B9A51000
|
unkown
|
page readonly
|
|
|
|
718217F000
|
unkown
|
page read and write
|
|
|
|
1786205C000
|
unkown
|
page read and write
|
|
|
|
DAFD0FC000
|
unkown
|
page read and write
|
|
|
|
17861EF0000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
28F32D20000
|
unkown
|
page read and write
|
|
|
|
217B4580000
|
unkown
|
page readonly
|
|
|
|
11ED3FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E2209000
|
unkown
|
page readonly
|
|
|
|
241185E0000
|
unkown
|
page readonly
|
|
|
|
7FF555E6D000
|
unkown
|
page readonly
|
|
|
|
1EA13260000
|
unkown
|
page read and write
|
|
|
|
7FF5A64DC000
|
unkown
|
page readonly
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
1FB47FD0000
|
heap private
|
page read and write
|
|
|
|
7FF599733000
|
unkown
|
page readonly
|
|
|
|
1A8AF290000
|
unkown
|
page read and write
|
|
|
|
1527F7E000
|
unkown
|
page read and write
|
|
|
|
7FF59999A000
|
unkown
|
page readonly
|
|
|
|
7FF599AC1000
|
unkown
|
page readonly
|
|
|
|
1A8AF743000
|
unkown
|
page read and write
|
|
|
|
7FF53651D000
|
unkown
|
page readonly
|
|
|
|
7FF4FA415000
|
unkown
|
page readonly
|
|
|
|
1FB48400000
|
unkown
|
page readonly
|
|
|
|
28F2E830000
|
unkown
|
page readonly
|
|
|
|
28F2D7B0000
|
unkown
|
page read and write
|
|
|
|
1939C65A000
|
unkown
|
page read and write
|
|
|
|
7FF5A64E6000
|
unkown
|
page readonly
|
|
|
|
1A8B0210000
|
unkown
|
page read and write
|
|
|
|
7FF5999C2000
|
unkown
|
page readonly
|
|
|
|
1A8AD5A1000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF536828000
|
unkown
|
page readonly
|
|
|
|
7FF555E2A000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
7FF5B9900000
|
unkown
|
page readonly
|
|
|
|
24118613000
|
unkown
|
page read and write
|
|
|
|
215B000
|
unkown
|
page read and write
|
|
|
|
7FF4FA492000
|
unkown
|
page readonly
|
|
|
|
7FF555DDA000
|
unkown
|
page readonly
|
|
|
|
7FF536910000
|
unkown
|
page readonly
|
|
|
|
52D1EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5B99F6000
|
unkown
|
page readonly
|
|
|
|
7FF536810000
|
unkown
|
page readonly
|
|
|
|
23F6DC4B000
|
heap default
|
page read and write
|
|
|
|
7FF4FA480000
|
unkown
|
page readonly
|
|
|
|
7FF5E18D4000
|
unkown
|
page readonly
|
|
|
|
31FE000
|
unkown
|
page read and write
|
|
|
|
7FF4FA527000
|
unkown
|
page readonly
|
|
|
|
1A8AF653000
|
unkown
|
page read and write
|
|
|
|
23F6DC10000
|
unkown
|
page read and write
|
|
|
|
7FF599ABE000
|
unkown
|
page readonly
|
|
|
|
1939C663000
|
unkown
|
page read and write
|
|
|
|
7FF555E97000
|
unkown
|
page readonly
|
|
|
|
32FF000
|
stack
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
1939C67D000
|
unkown
|
page read and write
|
|
|
|
585D0FB000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5E2102000
|
unkown
|
page readonly
|
|
|
|
28F2D871000
|
unkown
|
page read and write
|
|
|
|
71821FF000
|
unkown
|
page read and write
|
|
|
|
F9A000
|
heap default
|
page read and write
|
|
|
|
28F32BB0000
|
unkown
|
page readonly
|
|
|
|
1156000
|
unkown
|
page read and write
|
|
|
|
1A8AF200000
|
unkown
|
page readonly
|
|
|
|
1939C550000
|
unkown
|
page read and write
|
|
|
|
1A8AD502000
|
unkown
|
page read and write
|
|
|
|
1FA8E200000
|
unkown
|
page read and write
|
|
|
|
7FF536004000
|
unkown
|
page readonly
|
|
|
|
2F7E000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A84000
|
unkown
|
page readonly
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
1A8AD472000
|
unkown
|
page read and write
|
|
|
|
1CA1000
|
unkown
|
page read and write
|
|
|
|
7FF555EA7000
|
unkown
|
page readonly
|
|
|
|
1939C661000
|
unkown
|
page read and write
|
|
|
|
28F32D00000
|
unkown
|
page read and write
|
|
|
|
24118450000
|
heap private
|
page read and write
|
|
|
|
1939C642000
|
unkown
|
page read and write
|
|
|
|
7FF5364AE000
|
unkown
|
page readonly
|
|
|
|
28F2E158000
|
unkown
|
page read and write
|
|
|
|
1A8AF2E0000
|
unkown
|
page readonly
|
|
|
|
7FF564DF8000
|
unkown
|
page readonly
|
|
|
|
7FF555E8C000
|
unkown
|
page readonly
|
|
|
|
7FF555DBA000
|
unkown
|
page readonly
|
|
|
|
FA4000
|
unkown
|
page read and write
|
|
|
|
F10000
|
unkown
|
page read and write
|
|
|
|
DAFD07E000
|
unkown
|
page read and write
|
|
There are 1251 hidden memdumps, click here to show them.