Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
0HvIGwMmBV.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\edb.log
|
data
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
|
Extensible storage engine DataBase, version 0x620, checksum 0xae08ab15, page size 16384, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCircular.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl
|
data
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
|
data
|
modified
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\0HvIGwMmBV.exe
|
'C:\Users\user\Desktop\0HvIGwMmBV.exe'
|
|
|
|
C:\Users\user\Desktop\0HvIGwMmBV.exe
|
C:\Users\user\Desktop\0HvIGwMmBV.exe
|
|
|
|
C:\Windows\SysWOW64\servicerpc.exe
|
C:\Windows\SysWOW64\servicerpc.exe
|
|
|
|
C:\Windows\SysWOW64\servicerpc.exe
|
C:\Windows\SysWOW64\servicerpc.exe
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k unistacksvcgroup
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k NetworkService -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
|
|
|
|
C:\Windows\System32\SgrmBroker.exe
|
C:\Windows\system32\SgrmBroker.exe
|
|
|
|
C:\Program Files\Windows Defender\MpCmdRun.exe
|
'C:\Program Files\Windows Defender\mpcmdrun.exe' -wdenable
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
There are 4 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Driving
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
|
unknown
|
|
|
|
https://t0.tiles.ditu.live.com/tiles/gen
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Walking
|
unknown
|
|
|
|
https://79.172.249.82:443/
|
79.172.249.82
|
|
|
|
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
|
unknown
|
|
|
|
https://%s.xboxlive.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Locations
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
|
unknown
|
|
|
|
https://dynamic.t
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Transit
|
unknown
|
|
|
|
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
|
unknown
|
|
|
|
https://appexmapsappupdate.blob.core.windows.net
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://activity.windows.com
|
unknown
|
|
|
|
http://www.bingmapsportal.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Locations
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://%s.dnet.xboxlive.com
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
|
unknown
|
|
There are 25 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
193.169.54.12
|
unknown
|
Germany
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
173.230.145.224
|
unknown
|
United States
|
|
|
|
79.172.249.82
|
unknown
|
Hungary
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\svchost.exe
|
cval
|
|
|
|
C:\Windows\System32\svchost.exe
|
cval
|
|
|
|
C:\Windows\System32\svchost.exe
|
PerfMMFileName
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-100
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-101
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\dnsapi.dll,-103
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\NgcRecovery.dll,-100
|
|
|
|
C:\Windows\System32\svchost.exe
|
MonthID
|
|
There are 2 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
E81000
|
unkown image
|
page execute read
|
|
|
|
E81000
|
unkown image
|
page execute read
|
|
|
|
E81000
|
unkown image
|
page execute read
|
|
|
|
E81000
|
unkown image
|
page execute read
|
|
|
|
E81000
|
unkown image
|
page execute read
|
|
|
|
E81000
|
unkown image
|
page execute read
|
|
|
|
E81000
|
unkown image
|
page execute read
|
|
|
|
E81000
|
unkown image
|
page execute read
|
|
|
|
1A8A000
|
unkown
|
page read and write
|
|
|
|
1EA9A868000
|
unkown
|
page read and write
|
|
|
|
7FF50148E000
|
unkown
|
page readonly
|
|
|
|
1CE219E0000
|
unkown
|
page read and write
|
|
|
|
5079E7F000
|
unkown
|
page read and write
|
|
|
|
7FF5741D7000
|
unkown
|
page readonly
|
|
|
|
7FF5C28D1000
|
unkown
|
page readonly
|
|
|
|
1BC42000000
|
heap private
|
page read and write
|
|
|
|
7FF5012DF000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
201194E0000
|
unkown
|
page readonly
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
1BC4225B000
|
unkown
|
page read and write
|
|
|
|
22914558000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B6C000
|
unkown
|
page readonly
|
|
|
|
7FF546BDD000
|
unkown
|
page readonly
|
|
|
|
1F003EF0000
|
unkown
|
page read and write
|
|
|
|
7FF59BAF5000
|
unkown
|
page readonly
|
|
|
|
7FF5C29B6000
|
unkown
|
page readonly
|
|
|
|
7FF5D9B25000
|
unkown
|
page readonly
|
|
|
|
7FF59BA4C000
|
unkown
|
page readonly
|
|
|
|
1BC4223B000
|
unkown
|
page read and write
|
|
|
|
F8B000
|
unkown
|
page read and write
|
|
|
|
26F17113000
|
unkown
|
page read and write
|
|
|
|
1F005FFA000
|
unkown
|
page read and write
|
|
|
|
92F26FE000
|
unkown
|
page read and write
|
|
|
|
7FF50137C000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF59BAD1000
|
unkown
|
page readonly
|
|
|
|
1F007310000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF59BB07000
|
unkown
|
page readonly
|
|
|
|
7FF5E63B2000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page readonly
|
|
|
|
7FF57416E000
|
unkown
|
page readonly
|
|
|
|
1EA9A902000
|
unkown
|
page read and write
|
|
|
|
7FF58B16E000
|
unkown
|
page readonly
|
|
|
|
1F005FE0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6445000
|
unkown
|
page readonly
|
|
|
|
22A2D289000
|
unkown
|
page read and write
|
|
|
|
1F005FF4000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
26F170CB000
|
unkown
|
page read and write
|
|
|
|
183628D0000
|
unkown
|
page readonly
|
|
|
|
7FF51FDB9000
|
unkown
|
page readonly
|
|
|
|
1EA9A813000
|
unkown
|
page read and write
|
|
|
|
7FF58B983000
|
unkown
|
page readonly
|
|
|
|
7FF5C296E000
|
unkown
|
page readonly
|
|
|
|
4F9B47E000
|
unkown
|
page read and write
|
|
|
|
1F005F67000
|
unkown
|
page read and write
|
|
|
|
7FF574239000
|
unkown
|
page readonly
|
|
|
|
22919264000
|
unkown
|
page read and write
|
|
|
|
1F003EA9000
|
unkown
|
page read and write
|
|
|
|
507A07F000
|
unkown
|
page read and write
|
|
|
|
1BC42276000
|
unkown
|
page read and write
|
|
|
|
7FF58B63E000
|
unkown
|
page readonly
|
|
|
|
7FF58B91C000
|
unkown
|
page readonly
|
|
|
|
1F003EA7000
|
unkown
|
page read and write
|
|
|
|
22913BE0000
|
heap default
|
page read and write
|
|
|
|
7FF5C2A31000
|
unkown
|
page readonly
|
|
|
|
7FF58BAA9000
|
unkown
|
page readonly
|
|
|
|
15DA7FF000
|
unkown
|
page read and write
|
|
|
|
7FF546B88000
|
unkown
|
page readonly
|
|
|
|
7FF5C2989000
|
unkown
|
page readonly
|
|
|
|
1F003E97000
|
unkown
|
page read and write
|
|
|
|
1EA9A6E0000
|
unkown
|
page readonly
|
|
|
|
7FF51FE75000
|
unkown
|
page readonly
|
|
|
|
7FF5C2917000
|
unkown
|
page readonly
|
|
|
|
7FF5E6258000
|
unkown
|
page readonly
|
|
|
|
1F003F02000
|
unkown
|
page read and write
|
|
|
|
22A2D4D0000
|
unkown
|
page readonly
|
|
|
|
22919314000
|
unkown
|
page readonly
|
|
|
|
7FF5C278A000
|
unkown
|
page readonly
|
|
|
|
1CE21B13000
|
unkown
|
page read and write
|
|
|
|
7FF54634C000
|
unkown
|
page readonly
|
|
|
|
15DA77B000
|
unkown
|
page read and write
|
|
|
|
26F17660000
|
unkown
|
page write copy
|
|
|
|
1F003F1E000
|
unkown
|
page read and write
|
|
|
|
229194B6000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
229194AE000
|
unkown
|
page read and write
|
|
|
|
22A2D140000
|
heap private
|
page read and write
|
|
|
|
7FF5013CC000
|
unkown
|
page readonly
|
|
|
|
1F003E74000
|
unkown
|
page read and write
|
|
|
|
1F005E02000
|
unkown
|
page read and write
|
|
|
|
7FF59BB5E000
|
unkown
|
page readonly
|
|
|
|
1BC4227A000
|
unkown
|
page read and write
|
|
|
|
1CE21960000
|
unkown
|
page read and write
|
|
|
|
1F003EEB000
|
unkown
|
page read and write
|
|
|
|
22A2DC00000
|
unkown
|
page readonly
|
|
|
|
22A2D313000
|
unkown
|
page read and write
|
|
|
|
52ACFFD000
|
unkown
|
page read and write
|
|
|
|
1F003ECD000
|
unkown
|
page read and write
|
|
|
|
50796FB000
|
unkown
|
page read and write
|
|
|
|
1F003EEC000
|
unkown
|
page read and write
|
|
|
|
7FF51FF0A000
|
unkown
|
page readonly
|
|
|
|
2F50000
|
unkown
|
page readonly
|
|
|
|
7FF5E63C2000
|
unkown
|
page readonly
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5011A6000
|
unkown
|
page readonly
|
|
|
|
7FF51FF56000
|
unkown
|
page readonly
|
|
|
|
1F006600000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF5A3132000
|
unkown
|
page readonly
|
|
|
|
DCC000
|
unkown
|
page read and write
|
|
|
|
1BC4223E000
|
unkown
|
page read and write
|
|
|
|
22A2D860000
|
unkown
|
page readonly
|
|
|
|
7FF5C256D000
|
unkown
|
page readonly
|
|
|
|
1F003E3F000
|
unkown
|
page read and write
|
|
|
|
1F003EEB000
|
unkown
|
page read and write
|
|
|
|
1F003E55000
|
unkown
|
page read and write
|
|
|
|
1CE219A0000
|
unkown
|
page read and write
|
|
|
|
7FF59BA62000
|
unkown
|
page readonly
|
|
|
|
7FF5A30F1000
|
unkown
|
page readonly
|
|
|
|
7FF5010C2000
|
unkown
|
page readonly
|
|
|
|
B6C000
|
unkown
|
page read and write
|
|
|
|
22A2D1B0000
|
unkown
|
page readonly
|
|
|
|
22913D25000
|
unkown
|
page read and write
|
|
|
|
7FF5C2975000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
910000
|
unkown
|
page read and write
|
|
|
|
1F007210000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF574107000
|
unkown
|
page readonly
|
|
|
|
26F16F80000
|
unkown
|
page readonly
|
|
|
|
22919400000
|
unkown
|
page read and write
|
|
|
|
7DFD31044000
|
unkown
|
page readonly
|
|
|
|
1CA64FC000
|
unkown
|
page read and write
|
|
|
|
1F005F34000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1EA9A670000
|
heap private
|
page read and write
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
229196C0000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
B01000
|
heap default
|
page read and write
|
|
|
|
1CA61FF000
|
unkown
|
page read and write
|
|
|
|
7FF58BAA9000
|
unkown
|
page readonly
|
|
|
|
7FF501495000
|
unkown
|
page readonly
|
|
|
|
C4D000
|
unkown
|
page read and write
|
|
|
|
1CE21930000
|
unkown
|
page read and write
|
|
|
|
22913C00000
|
unkown
|
page read and write
|
|
|
|
7FF51FCA5000
|
unkown
|
page readonly
|
|
|
|
22914CD0000
|
unkown
|
page readonly
|
|
|
|
1EA9A6D0000
|
heap default
|
page read and write
|
|
|
|
7C1000
|
unkown
|
page read and write
|
|
|
|
7FF5014E5000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
1F006242000
|
unkown
|
page read and write
|
|
|
|
1EA9A900000
|
unkown
|
page read and write
|
|
|
|
7FF5A3106000
|
unkown
|
page readonly
|
|
|
|
92F277E000
|
unkown
|
page read and write
|
|
|
|
7FF58B82F000
|
unkown
|
page readonly
|
|
|
|
7FF51FF25000
|
unkown
|
page readonly
|
|
|
|
7FF51FF4D000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF5E63EE000
|
unkown
|
page readonly
|
|
|
|
7FF51FF80000
|
unkown
|
page readonly
|
|
|
|
1CE21A48000
|
unkown
|
page read and write
|
|
|
|
228C000
|
unkown
|
page read and write
|
|
|
|
7FF51FC97000
|
unkown
|
page readonly
|
|
|
|
4ED000
|
unkown
|
page read and write
|
|
|
|
1F003F14000
|
unkown
|
page read and write
|
|
|
|
7FF5C28DA000
|
unkown
|
page readonly
|
|
|
|
7FF5D93F5000
|
unkown
|
page readonly
|
|
|
|
7FF5C2258000
|
unkown
|
page readonly
|
|
|
|
1F003F1F000
|
unkown
|
page read and write
|
|
|
|
15D9CFE000
|
unkown
|
page read and write
|
|
|
|
1F006000000
|
unkown
|
page read and write
|
|
|
|
1F003ECB000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5E63A4000
|
unkown
|
page readonly
|
|
|
|
7FF5D9844000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5A3098000
|
unkown
|
page readonly
|
|
|
|
1CE21A59000
|
unkown
|
page read and write
|
|
|
|
7FF5014D6000
|
unkown
|
page readonly
|
|
|
|
5079F7D000
|
unkown
|
page read and write
|
|
|
|
26F17029000
|
unkown
|
page read and write
|
|
|
|
183624E0000
|
heap private
|
page read and write
|
|
|
|
22914415000
|
unkown
|
page read and write
|
|
|
|
E50000
|
unkown
|
page read and write
|
|
|
|
20117B20000
|
heap private
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F006183000
|
unkown
|
page read and write
|
|
|
|
7FF58B75E000
|
unkown
|
page readonly
|
|
|
|
108E000
|
stack
|
page read and write
|
|
|
|
7FF5C2847000
|
unkown
|
page readonly
|
|
|
|
18362602000
|
unkown
|
page read and write
|
|
|
|
1F003E87000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF58B80E000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
1BC42A02000
|
unkown
|
page read and write
|
|
|
|
1F005F28000
|
unkown
|
page read and write
|
|
|
|
1740000
|
unkown
|
page readonly
|
|
|
|
7FF5C2913000
|
unkown
|
page readonly
|
|
|
|
22919600000
|
unkown
|
page readonly
|
|
|
|
7FF58B7DC000
|
unkown
|
page readonly
|
|
|
|
7FF58B998000
|
unkown
|
page readonly
|
|
|
|
7FF5A3189000
|
unkown
|
page readonly
|
|
|
|
7FF50147A000
|
unkown
|
page readonly
|
|
|
|
7FF51FED8000
|
unkown
|
page readonly
|
|
|
|
7FF58BA40000
|
unkown
|
page readonly
|
|
|
|
7FF58B5E5000
|
unkown
|
page readonly
|
|
|
|
15DA17B000
|
unkown
|
page read and write
|
|
|
|
7FF51FF1E000
|
unkown
|
page readonly
|
|
|
|
1F007310000
|
unkown
|
page read and write
|
|
|
|
7FF5D9ABA000
|
unkown
|
page readonly
|
|
|
|
1F003D30000
|
heap default
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
20119500000
|
unkown
|
page readonly
|
|
|
|
1F007510000
|
unkown
|
page read and write
|
|
|
|
7FF5A3115000
|
unkown
|
page readonly
|
|
|
|
7FF5C295A000
|
unkown
|
page readonly
|
|
|
|
1F005F5D000
|
unkown
|
page read and write
|
|
|
|
7FF50154E000
|
unkown
|
page readonly
|
|
|
|
7FF58B5E1000
|
unkown
|
page readonly
|
|
|
|
22919680000
|
unkown
|
page readonly
|
|
|
|
7FF5A2E03000
|
unkown
|
page readonly
|
|
|
|
507A47E000
|
unkown
|
page read and write
|
|
|
|
52AC87B000
|
unkown
|
page read and write
|
|
|
|
1EA9A7B0000
|
unkown
|
page readonly
|
|
|
|
1F007110000
|
unkown
|
page read and write
|
|
|
|
22914350000
|
unkown
|
page read and write
|
|
|
|
7FF5C2A39000
|
unkown
|
page readonly
|
|
|
|
1BC4222A000
|
unkown
|
page read and write
|
|
|
|
22919240000
|
unkown
|
page read and write
|
|
|
|
52ACB7E000
|
unkown
|
page read and write
|
|
|
|
7FF51F792000
|
unkown
|
page readonly
|
|
|
|
22913E00000
|
unkown
|
page readonly
|
|
|
|
7FF58B85C000
|
unkown
|
page readonly
|
|
|
|
2DAE000
|
unkown
|
page read and write
|
|
|
|
229190B0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9BE1000
|
unkown
|
page readonly
|
|
|
|
20119410000
|
unkown
|
page readonly
|
|
|
|
7FF51FEF6000
|
unkown
|
page readonly
|
|
|
|
7FF5D9B77000
|
unkown
|
page readonly
|
|
|
|
1F003E82000
|
unkown
|
page read and write
|
|
|
|
1F005FE0000
|
unkown
|
page read and write
|
|
|
|
7FF59BB60000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF58B9CA000
|
unkown
|
page readonly
|
|
|
|
1F005F15000
|
unkown
|
page read and write
|
|
|
|
7FF574130000
|
unkown
|
page readonly
|
|
|
|
2188AAE0000
|
unkown
|
page read and write
|
|
|
|
7FF59BB69000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
A20000
|
unkown
|
page readonly
|
|
|
|
1BC42246000
|
unkown
|
page read and write
|
|
|
|
1F007310000
|
unkown
|
page read and write
|
|
|
|
1F005FFB000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF58B6BC000
|
unkown
|
page readonly
|
|
|
|
15D9C7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C2694000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF573E55000
|
unkown
|
page readonly
|
|
|
|
92F287A000
|
unkown
|
page read and write
|
|
|
|
20119520000
|
heap private
|
page read and write
|
|
|
|
7FF51FF2F000
|
unkown
|
page readonly
|
|
|
|
1F003E8A000
|
unkown
|
page read and write
|
|
|
|
302E000
|
unkown
|
page read and write
|
|
|
|
1CE21A58000
|
unkown
|
page read and write
|
|
|
|
7FF5014DC000
|
unkown
|
page readonly
|
|
|
|
1F005F00000
|
unkown
|
page read and write
|
|
|
|
7808D7F000
|
unkown
|
page read and write
|
|
|
|
52ACEFD000
|
unkown
|
page read and write
|
|
|
|
7FF58B941000
|
unkown
|
page readonly
|
|
|
|
1BC42269000
|
unkown
|
page read and write
|
|
|
|
15D9EF9000
|
unkown
|
page read and write
|
|
|
|
1CE21A8A000
|
unkown
|
page read and write
|
|
|
|
1CE21A59000
|
unkown
|
page read and write
|
|
|
|
7FF58B442000
|
unkown
|
page readonly
|
|
|
|
7FF573DF0000
|
unkown
|
page readonly
|
|
|
|
1EA9B200000
|
unkown
|
page readonly
|
|
|
|
9CE000
|
unkown
|
page read and write
|
|
|
|
C36DE7D000
|
unkown
|
page read and write
|
|
|
|
1BC42261000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5E64B1000
|
unkown
|
page readonly
|
|
|
|
1F0E000
|
unkown
|
page read and write
|
|
|
|
7FF5C29C5000
|
unkown
|
page readonly
|
|
|
|
7FF573FBF000
|
unkown
|
page readonly
|
|
|
|
22913CFC000
|
unkown
|
page read and write
|
|
|
|
21889002000
|
unkown
|
page read and write
|
|
|
|
7FF5D9A9A000
|
unkown
|
page readonly
|
|
|
|
7FF574148000
|
unkown
|
page readonly
|
|
|
|
7FF5E5C61000
|
unkown
|
page readonly
|
|
|
|
E8B000
|
unkown image
|
page readonly
|
|
|
|
1F003E29000
|
unkown
|
page read and write
|
|
|
|
7FF58B6B6000
|
unkown
|
page readonly
|
|
|
|
AEC000
|
unkown
|
page read and write
|
|
|
|
7FF59BADC000
|
unkown
|
page readonly
|
|
|
|
52ACC7E000
|
unkown
|
page read and write
|
|
|
|
1EA9B002000
|
unkown
|
page read and write
|
|
|
|
7FF5E62C7000
|
unkown
|
page readonly
|
|
|
|
78094FF000
|
unkown
|
page read and write
|
|
|
|
1F003F6F000
|
unkown
|
page read and write
|
|
|
|
1F0040D0000
|
unkown
|
page readonly
|
|
|
|
7FF59B6A5000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
1F007010000
|
unkown
|
page read and write
|
|
|
|
1F006282000
|
unkown
|
page read and write
|
|
|
|
7FF546BC9000
|
unkown
|
page readonly
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
22914D30000
|
unkown
|
page readonly
|
|
|
|
1BC4224F000
|
unkown
|
page read and write
|
|
|
|
5079AFB000
|
unkown
|
page read and write
|
|
|
|
A761CFB000
|
unkown
|
page read and write
|
|
|
|
7FF59BAEC000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
F8E000
|
stack
|
page read and write
|
|
|
|
22919284000
|
unkown
|
page read and write
|
|
|
|
15D99FB000
|
unkown
|
page read and write
|
|
|
|
7FF5014CC000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F007410000
|
unkown
|
page read and write
|
|
|
|
7FF58B861000
|
unkown
|
page readonly
|
|
|
|
7FF54634A000
|
unkown
|
page readonly
|
|
|
|
7FF5741D4000
|
unkown
|
page readonly
|
|
|
|
22919310000
|
unkown
|
page write copy
|
|
|
|
1F003EA9000
|
unkown
|
page read and write
|
|
|
|
7FF58B96B000
|
unkown
|
page readonly
|
|
|
|
7FF501141000
|
unkown
|
page readonly
|
|
|
|
7FF5E6409000
|
unkown
|
page readonly
|
|
|
|
7FF501367000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF5E5B8E000
|
unkown
|
page readonly
|
|
|
|
1BC42247000
|
unkown
|
page read and write
|
|
|
|
1F003EE0000
|
unkown
|
page read and write
|
|
|
|
7FF54699A000
|
unkown
|
page readonly
|
|
|
|
7FF5014C1000
|
unkown
|
page readonly
|
|
|
|
7FF51FF5C000
|
unkown
|
page readonly
|
|
|
|
7FF5C27BF000
|
unkown
|
page readonly
|
|
|
|
22A2D1C0000
|
unkown
|
page readonly
|
|
|
|
7FF51FD88000
|
unkown
|
page readonly
|
|
|
|
7FF5D98B0000
|
unkown
|
page readonly
|
|
|
|
1F003EB0000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
1F005FF7000
|
unkown
|
page read and write
|
|
|
|
800000
|
unkown
|
page readonly
|
|
|
|
22919380000
|
unkown
|
page read and write
|
|
|
|
1CE218F0000
|
unkown
|
page readonly
|
|
|
|
A0E000
|
unkown
|
page read and write
|
|
|
|
7FF5E6426000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
heap private
|
page read and write
|
|
|
|
7FF58B9B8000
|
unkown
|
page readonly
|
|
|
|
26F17A00000
|
unkown
|
page readonly
|
|
|
|
E8C000
|
unkown image
|
page read and write
|
|
|
|
7FF5C29D0000
|
unkown
|
page readonly
|
|
|
|
7808FFA000
|
unkown
|
page read and write
|
|
|
|
7FF59BA72000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
26F17900000
|
unkown
|
page read and write
|
|
|
|
20118000000
|
unkown
|
page readonly
|
|
|
|
7FF5D9AA1000
|
unkown
|
page readonly
|
|
|
|
7C4000
|
unkown
|
page read and write
|
|
|
|
1BC42060000
|
heap default
|
page read and write
|
|
|
|
13B0000
|
unkown
|
page readonly
|
|
|
|
7808E7F000
|
unkown
|
page read and write
|
|
|
|
7FF5C29BC000
|
unkown
|
page readonly
|
|
|
|
2291943E000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5C2942000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
229190F0000
|
unkown
|
page readonly
|
|
|
|
1CE21B00000
|
unkown
|
page read and write
|
|
|
|
7FF5014F4000
|
unkown
|
page readonly
|
|
|
|
7FF57419D000
|
unkown
|
page readonly
|
|
|
|
1F003D90000
|
unkown
|
page readonly
|
|
|
|
1BC42200000
|
unkown
|
page read and write
|
|
|
|
22914518000
|
unkown
|
page read and write
|
|
|
|
D4D08FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B5C000
|
unkown
|
page readonly
|
|
|
|
21889320000
|
unkown
|
page readonly
|
|
|
|
E8D000
|
unkown image
|
page readonly
|
|
|
|
7FF51FEBA000
|
unkown
|
page readonly
|
|
|
|
22914513000
|
unkown
|
page read and write
|
|
|
|
7FF5C291C000
|
unkown
|
page readonly
|
|
|
|
1F007210000
|
unkown
|
page read and write
|
|
|
|
1F005FE0000
|
unkown
|
page read and write
|
|
|
|
C36DFFC000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5741B6000
|
unkown
|
page readonly
|
|
|
|
7FF58B915000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
22914518000
|
unkown
|
page read and write
|
|
|
|
21889054000
|
unkown
|
page read and write
|
|
|
|
1CA65FE000
|
unkown
|
page read and write
|
|
|
|
316E000
|
unkown
|
page read and write
|
|
|
|
A761DFD000
|
unkown
|
page read and write
|
|
|
|
7FF573DF3000
|
unkown
|
page readonly
|
|
|
|
1F003E81000
|
unkown
|
page read and write
|
|
|
|
7FF546C05000
|
unkown
|
page readonly
|
|
|
|
1BC42279000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
2188ABE0000
|
unkown
|
page readonly
|
|
|
|
7FF5D99F3000
|
unkown
|
page readonly
|
|
|
|
22A0000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
22913C70000
|
unkown
|
page read and write
|
|
|
|
7808AF9000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1CA5B1B000
|
unkown
|
page read and write
|
|
|
|
1F005CF0000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
A761E7C000
|
unkown
|
page read and write
|
|
|
|
1CE21820000
|
unkown
|
page readonly
|
|
|
|
7FF5D99F7000
|
unkown
|
page readonly
|
|
|
|
7FF501462000
|
unkown
|
page readonly
|
|
|
|
7FF58BA11000
|
unkown
|
page readonly
|
|
|
|
7FF5E6220000
|
unkown
|
page readonly
|
|
|
|
1F006012000
|
unkown
|
page read and write
|
|
|
|
22913C7A000
|
unkown
|
page read and write
|
|
|
|
1CA62FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C29A1000
|
unkown
|
page readonly
|
|
|
|
1F006183000
|
unkown
|
page read and write
|
|
|
|
7FF51FD6F000
|
unkown
|
page readonly
|
|
|
|
4F9B1EE000
|
unkown
|
page read and write
|
|
|
|
7FF58B770000
|
unkown
|
page readonly
|
|
|
|
7FF5D9AF8000
|
unkown
|
page readonly
|
|
|
|
1F005D30000
|
unkown
|
page read and write
|
|
|
|
1BC42302000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF51FEF2000
|
unkown
|
page readonly
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
D4D09FE000
|
unkown
|
page read and write
|
|
|
|
7808CFB000
|
unkown
|
page read and write
|
|
|
|
201195B0000
|
heap private
|
page read and write
|
|
|
|
7FF5E6436000
|
unkown
|
page readonly
|
|
|
|
7FF5C29A6000
|
unkown
|
page readonly
|
|
|
|
22913C8E000
|
unkown
|
page read and write
|
|
|
|
7FF5E6345000
|
unkown
|
page readonly
|
|
|
|
1CE219E0000
|
unkown
|
page read and write
|
|
|
|
7FF5C2778000
|
unkown
|
page readonly
|
|
|
|
7FF58B765000
|
unkown
|
page readonly
|
|
|
|
26F17200000
|
unkown
|
page readonly
|
|
|
|
26F17932000
|
unkown
|
page read and write
|
|
|
|
2291933C000
|
unkown
|
page readonly
|
|
|
|
7FF5D9BE9000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
15DA6FC000
|
unkown
|
page read and write
|
|
|
|
7FF574239000
|
unkown
|
page readonly
|
|
|
|
1BC42283000
|
unkown
|
page read and write
|
|
|
|
A30000
|
heap private
|
page read and write
|
|
|
|
1F003E77000
|
unkown
|
page read and write
|
|
|
|
1F003EDD000
|
unkown
|
page read and write
|
|
|
|
22913C53000
|
unkown
|
page read and write
|
|
|
|
7FF5E5C68000
|
unkown
|
page readonly
|
|
|
|
18362702000
|
unkown
|
page read and write
|
|
|
|
92F27FA000
|
unkown
|
page read and write
|
|
|
|
20117B25000
|
heap private
|
page read and write
|
|
|
|
184D000
|
unkown
|
page read and write
|
|
|
|
229196A0000
|
unkown
|
page readonly
|
|
|
|
214F000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF5D993A000
|
unkown
|
page readonly
|
|
|
|
1F005D10000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
15D9DFA000
|
unkown
|
page read and write
|
|
|
|
1BC42266000
|
unkown
|
page read and write
|
|
|
|
1F005F18000
|
unkown
|
page read and write
|
|
|
|
7FF5E63FF000
|
unkown
|
page readonly
|
|
|
|
7FF58B24C000
|
unkown
|
page readonly
|
|
|
|
7FF59BAA5000
|
unkown
|
page readonly
|
|
|
|
22A2D22A000
|
unkown
|
page read and write
|
|
|
|
22919140000
|
unkown
|
page read and write
|
|
|
|
E8B000
|
unkown image
|
page readonly
|
|
|
|
1EA9AD90000
|
unkown
|
page readonly
|
|
|
|
D8E000
|
stack
|
page read and write
|
|
|
|
1F007410000
|
unkown
|
page read and write
|
|
|
|
1BC4225A000
|
unkown
|
page read and write
|
|
|
|
7FF51FEE2000
|
unkown
|
page readonly
|
|
|
|
7FF58B9B2000
|
unkown
|
page readonly
|
|
|
|
7FF5E63C8000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F003ECD000
|
unkown
|
page read and write
|
|
|
|
15DA4FB000
|
unkown
|
page read and write
|
|
|
|
1BC4225E000
|
unkown
|
page read and write
|
|
|
|
201179B0000
|
unkown
|
page readonly
|
|
|
|
E8D000
|
unkown image
|
page readonly
|
|
|
|
1F003EA9000
|
unkown
|
page read and write
|
|
|
|
7FF546C10000
|
unkown
|
page readonly
|
|
|
|
1F006183000
|
unkown
|
page read and write
|
|
|
|
7FF5C2928000
|
unkown
|
page readonly
|
|
|
|
183625A0000
|
unkown
|
page read and write
|
|
|
|
1CE21A13000
|
unkown
|
page read and write
|
|
|
|
7FF5013D7000
|
unkown
|
page readonly
|
|
|
|
7FF5D9853000
|
unkown
|
page readonly
|
|
|
|
15DA2FB000
|
unkown
|
page read and write
|
|
|
|
7FF58B98C000
|
unkown
|
page readonly
|
|
|
|
1F003E82000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
15D9E7E000
|
unkown
|
page read and write
|
|
|
|
22919360000
|
unkown
|
page read and write
|
|
|
|
7FF5E63C6000
|
unkown
|
page readonly
|
|
|
|
78092FC000
|
unkown
|
page read and write
|
|
|
|
22914D10000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5A302E000
|
unkown
|
page readonly
|
|
|
|
E8B000
|
unkown image
|
page readonly
|
|
|
|
22A2D271000
|
unkown
|
page read and write
|
|
|
|
A761B7E000
|
unkown
|
page read and write
|
|
|
|
FEA000
|
heap default
|
page read and write
|
|
|
|
22919310000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B84000
|
unkown
|
page readonly
|
|
|
|
1BC4223D000
|
unkown
|
page read and write
|
|
|
|
7FF5A291C000
|
unkown
|
page readonly
|
|
|
|
18362550000
|
unkown
|
page readonly
|
|
|
|
26F16FA0000
|
unkown
|
page read and write
|
|
|
|
A10000
|
heap default
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5C2700000
|
unkown
|
page readonly
|
|
|
|
1F005FE0000
|
unkown
|
page read and write
|
|
|
|
22913C8A000
|
unkown
|
page read and write
|
|
|
|
7FF5D9ABC000
|
unkown
|
page readonly
|
|
|
|
1CE21C00000
|
unkown
|
page readonly
|
|
|
|
2291924E000
|
unkown
|
page read and write
|
|
|
|
7FF574189000
|
unkown
|
page readonly
|
|
|
|
7FF5E5B95000
|
unkown
|
page readonly
|
|
|
|
7FF51FCB0000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
229150A0000
|
unkown
|
page read and write
|
|
|
|
1F0060A4000
|
unkown
|
page read and write
|
|
|
|
1F003ECF000
|
unkown
|
page read and write
|
|
|
|
1BC42202000
|
unkown
|
page read and write
|
|
|
|
32AE000
|
unkown
|
page read and write
|
|
|
|
1F006400000
|
unkown
|
page read and write
|
|
|
|
7FF5A30BE000
|
unkown
|
page readonly
|
|
|
|
1F006442000
|
unkown
|
page read and write
|
|
|
|
183625A0000
|
unkown
|
page read and write
|
|
|
|
22A2D1A0000
|
heap default
|
page read and write
|
|
|
|
1F003E56000
|
unkown
|
page read and write
|
|
|
|
E8D000
|
unkown image
|
page readonly
|
|
|
|
103C000
|
heap default
|
page read and write
|
|
|
|
7FF5A317E000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF58B250000
|
unkown
|
page readonly
|
|
|
|
BF0000
|
heap default
|
page read and write
|
|
|
|
FA7000
|
heap default
|
page read and write
|
|
|
|
7FF546C79000
|
unkown
|
page readonly
|
|
|
|
26F1706B000
|
unkown
|
page read and write
|
|
|
|
52ACAFE000
|
unkown
|
page read and write
|
|
|
|
1F005D50000
|
unkown
|
page readonly
|
|
|
|
E20000
|
unkown
|
page readonly
|
|
|
|
7FF5E5CF5000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF59BB69000
|
unkown
|
page readonly
|
|
|
|
7FF5C2828000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
E70000
|
unkown
|
page readonly
|
|
|
|
7FF546BF6000
|
unkown
|
page readonly
|
|
|
|
7FF58BA26000
|
unkown
|
page readonly
|
|
|
|
7FF5E63F5000
|
unkown
|
page readonly
|
|
|
|
1F005FE0000
|
unkown
|
page read and write
|
|
|
|
1BC4226C000
|
unkown
|
page read and write
|
|
|
|
15DA47B000
|
unkown
|
page read and write
|
|
|
|
507A17E000
|
unkown
|
page read and write
|
|
|
|
7FF5D9AF6000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
22919120000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF501450000
|
unkown
|
page readonly
|
|
|
|
18363000000
|
unkown
|
page read and write
|
|
|
|
7FF59BA17000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
22919270000
|
unkown
|
page read and write
|
|
|
|
228E000
|
unkown
|
page read and write
|
|
|
|
7FF50149F000
|
unkown
|
page readonly
|
|
|
|
22919240000
|
unkown
|
page read and write
|
|
|
|
7FF5013E5000
|
unkown
|
page readonly
|
|
|
|
7FF546C79000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
26F17590000
|
unkown
|
page readonly
|
|
|
|
7FF58BA0D000
|
unkown
|
page readonly
|
|
|
|
7FF5C279E000
|
unkown
|
page readonly
|
|
|
|
7FF5D9950000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
100B000
|
heap default
|
page read and write
|
|
|
|
26F16EA0000
|
heap default
|
page read and write
|
|
|
|
7FF5A3080000
|
unkown
|
page readonly
|
|
|
|
1BC4227D000
|
unkown
|
page read and write
|
|
|
|
7FF5D9AFA000
|
unkown
|
page readonly
|
|
|
|
507A27E000
|
unkown
|
page read and write
|
|
|
|
18362635000
|
unkown
|
page read and write
|
|
|
|
1EA9A857000
|
unkown
|
page read and write
|
|
|
|
1F006202000
|
unkown
|
page read and write
|
|
|
|
7FF574175000
|
unkown
|
page readonly
|
|
|
|
A76217D000
|
unkown
|
page read and write
|
|
|
|
292D000
|
stack
|
page read and write
|
|
|
|
1F005FF9000
|
unkown
|
page read and write
|
|
|
|
7FF5E642C000
|
unkown
|
page readonly
|
|
|
|
22919260000
|
unkown
|
page read and write
|
|
|
|
2011997F000
|
heap private
|
page read and write
|
|
|
|
7FF546C14000
|
unkown
|
page readonly
|
|
|
|
1F003EEB000
|
unkown
|
page read and write
|
|
|
|
18362E02000
|
unkown
|
page read and write
|
|
|
|
22A2D269000
|
unkown
|
page read and write
|
|
|
|
1EA9A802000
|
unkown
|
page read and write
|
|
|
|
7FF5E627A000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
1CE21A63000
|
unkown
|
page read and write
|
|
|
|
22913D13000
|
unkown
|
page read and write
|
|
|
|
22A2D213000
|
unkown
|
page read and write
|
|
|
|
1F005F65000
|
unkown
|
page read and write
|
|
|
|
1F007310000
|
unkown
|
page read and write
|
|
|
|
1090000
|
unkown
|
page readonly
|
|
|
|
1F005D20000
|
unkown
|
page read and write
|
|
|
|
758000
|
unkown
|
page read and write
|
|
|
|
1F005FF9000
|
unkown
|
page read and write
|
|
|
|
26F16FD0000
|
unkown
|
page readonly
|
|
|
|
7FF5E643C000
|
unkown
|
page readonly
|
|
|
|
1F006053000
|
unkown
|
page read and write
|
|
|
|
1F005FC6000
|
unkown
|
page read and write
|
|
|
|
22915090000
|
unkown
|
page read and write
|
|
|
|
7FF5A312D000
|
unkown
|
page readonly
|
|
|
|
7FF5C29C7000
|
unkown
|
page readonly
|
|
|
|
7FF5A30D9000
|
unkown
|
page readonly
|
|
|
|
7FF58B757000
|
unkown
|
page readonly
|
|
|
|
1F003ED8000
|
unkown
|
page read and write
|
|
|
|
1DE0000
|
unkown
|
page read and write
|
|
|
|
4F9B67E000
|
unkown
|
page read and write
|
|
|
|
39D000
|
stack
|
page read and write
|
|
|
|
7FF5C26A7000
|
unkown
|
page readonly
|
|
|
|
1F006143000
|
unkown
|
page read and write
|
|
|
|
E8B000
|
unkown image
|
page readonly
|
|
|
|
1F006282000
|
unkown
|
page read and write
|
|
|
|
1BC42242000
|
unkown
|
page read and write
|
|
|
|
10A0000
|
unkown
|
page readonly
|
|
|
|
7FF51FF87000
|
unkown
|
page readonly
|
|
|
|
1CE21A49000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5E5FF5000
|
unkown
|
page readonly
|
|
|
|
7FF5E623F000
|
unkown
|
page readonly
|
|
|
|
7FF58B9E5000
|
unkown
|
page readonly
|
|
|
|
1F003F3F000
|
unkown
|
page read and write
|
|
|
|
7FF5A30C5000
|
unkown
|
page readonly
|
|
|
|
1BC42070000
|
unkown
|
page readonly
|
|
|
|
22913C3F000
|
unkown
|
page read and write
|
|
|
|
1BC42258000
|
unkown
|
page read and write
|
|
|
|
7FF50118E000
|
unkown
|
page readonly
|
|
|
|
22919248000
|
unkown
|
page read and write
|
|
|
|
7FF546413000
|
unkown
|
page readonly
|
|
|
|
E8B000
|
unkown image
|
page readonly
|
|
|
|
7FF59B93A000
|
unkown
|
page readonly
|
|
|
|
1BC4226A000
|
unkown
|
page read and write
|
|
|
|
1F003E97000
|
unkown
|
page read and write
|
|
|
|
4F9B16C000
|
unkown
|
page read and write
|
|
|
|
7FF5010BE000
|
unkown
|
page readonly
|
|
|
|
E8D000
|
unkown image
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF501559000
|
unkown
|
page readonly
|
|
|
|
2A30000
|
unkown
|
page readonly
|
|
|
|
1EA9A85F000
|
unkown
|
page read and write
|
|
|
|
26F170BA000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
1BC42232000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
1F004000000
|
unkown
|
page readonly
|
|
|
|
A761F7C000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
22919488000
|
unkown
|
page read and write
|
|
|
|
7FF51FBB8000
|
unkown
|
page readonly
|
|
|
|
26F17087000
|
unkown
|
page read and write
|
|
|
|
1F003EEB000
|
unkown
|
page read and write
|
|
|
|
7FF5C2A2E000
|
unkown
|
page readonly
|
|
|
|
22914400000
|
unkown
|
page read and write
|
|
|
|
7FF501284000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F003E13000
|
unkown
|
page read and write
|
|
|
|
34EC000
|
stack
|
page read and write
|
|
|
|
1CA66FD000
|
unkown
|
page read and write
|
|
|
|
C49000
|
unkown
|
page read and write
|
|
|
|
7FF5A2E0C000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF501466000
|
unkown
|
page readonly
|
|
|
|
1F003EE2000
|
unkown
|
page read and write
|
|
|
|
7FF5014BD000
|
unkown
|
page readonly
|
|
|
|
7FF5A30AA000
|
unkown
|
page readonly
|
|
|
|
1CE21A68000
|
unkown
|
page read and write
|
|
|
|
1F003E00000
|
unkown
|
page read and write
|
|
|
|
7FF5741A1000
|
unkown
|
page readonly
|
|
|
|
7FF59BA1A000
|
unkown
|
page readonly
|
|
|
|
7FF501468000
|
unkown
|
page readonly
|
|
|
|
22913C2A000
|
unkown
|
page read and write
|
|
|
|
700000
|
heap default
|
page read and write
|
|
|
|
1F005F18000
|
unkown
|
page read and write
|
|
|
|
1F005970000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F003DD0000
|
unkown
|
page readonly
|
|
|
|
4F9B77F000
|
unkown
|
page read and write
|
|
|
|
21888F90000
|
heap private
|
page read and write
|
|
|
|
7FF58BA16000
|
unkown
|
page readonly
|
|
|
|
1F005F75000
|
unkown
|
page read and write
|
|
|
|
1F003F1D000
|
unkown
|
page read and write
|
|
|
|
7B1000
|
unkown
|
page read and write
|
|
|
|
92F28FF000
|
unkown
|
page read and write
|
|
|
|
22914330000
|
unkown
|
page readonly
|
|
|
|
7FF5C26E7000
|
unkown
|
page readonly
|
|
|
|
7FF58B879000
|
unkown
|
page readonly
|
|
|
|
22A2D25A000
|
unkown
|
page read and write
|
|
|
|
15D9D79000
|
unkown
|
page read and write
|
|
|
|
1CE21B18000
|
unkown
|
page read and write
|
|
|
|
7FF5E5C55000
|
unkown
|
page readonly
|
|
|
|
7FF5C29D7000
|
unkown
|
page readonly
|
|
|
|
20119880000
|
heap private
|
page read and write
|
|
|
|
1F005D00000
|
unkown
|
page read and write
|
|
|
|
7FF58B9DE000
|
unkown
|
page readonly
|
|
|
|
E8C000
|
unkown image
|
page read and write
|
|
|
|
7FF546C6E000
|
unkown
|
page readonly
|
|
|
|
1836263D000
|
unkown
|
page read and write
|
|
|
|
1F007410000
|
unkown
|
page read and write
|
|
|
|
33AF000
|
stack
|
page read and write
|
|
|
|
22A2D258000
|
unkown
|
page read and write
|
|
|
|
7FF58B7E8000
|
unkown
|
page readonly
|
|
|
|
1CE21F90000
|
unkown
|
page readonly
|
|
|
|
AC8000
|
heap default
|
page read and write
|
|
|
|
1BC42241000
|
unkown
|
page read and write
|
|
|
|
A7619FC000
|
unkown
|
page read and write
|
|
|
|
22914502000
|
unkown
|
page read and write
|
|
|
|
A9E000
|
unkown
|
page read and write
|
|
|
|
7FF5C29AC000
|
unkown
|
page readonly
|
|
|
|
7FF58B620000
|
unkown
|
page readonly
|
|
|
|
FA0000
|
heap default
|
page read and write
|
|
|
|
7FF58B987000
|
unkown
|
page readonly
|
|
|
|
1CE23402000
|
unkown
|
page read and write
|
|
|
|
26F17040000
|
unkown
|
page read and write
|
|
|
|
7FF5E64AE000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
21889013000
|
unkown
|
page read and write
|
|
|
|
92F267B000
|
unkown
|
page read and write
|
|
|
|
26F17102000
|
unkown
|
page read and write
|
|
|
|
1BC42257000
|
unkown
|
page read and write
|
|
|
|
22914CE0000
|
unkown
|
page readonly
|
|
|
|
200F000
|
unkown
|
page read and write
|
|
|
|
33EE000
|
unkown
|
page read and write
|
|
|
|
1EA9A800000
|
unkown
|
page read and write
|
|
|
|
15DA37B000
|
unkown
|
page read and write
|
|
|
|
7FF51FC9E000
|
unkown
|
page readonly
|
|
|
|
18362613000
|
unkown
|
page read and write
|
|
|
|
22913C75000
|
unkown
|
page read and write
|
|
|
|
20117AE0000
|
unkown
|
page read and write
|
|
|
|
15DA1FB000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
26F176B0000
|
unkown
|
page readonly
|
|
|
|
E40000
|
heap default
|
page read and write
|
|
|
|
7FF546BE6000
|
unkown
|
page readonly
|
|
|
|
22919261000
|
unkown
|
page read and write
|
|
|
|
326F000
|
stack
|
page read and write
|
|
|
|
7FF5741BC000
|
unkown
|
page readonly
|
|
|
|
229193A0000
|
unkown
|
page read and write
|
|
|
|
1F007510000
|
unkown
|
page read and write
|
|
|
|
7FF50112F000
|
unkown
|
page readonly
|
|
|
|
7FF5C26F5000
|
unkown
|
page readonly
|
|
|
|
7FF58B6AD000
|
unkown
|
page readonly
|
|
|
|
1F003D40000
|
unkown
|
page write copy
|
|
|
|
E8C000
|
unkown image
|
page read and write
|
|
|
|
22914D20000
|
unkown
|
page readonly
|
|
|
|
15DA67C000
|
unkown
|
page read and write
|
|
|
|
2F4F000
|
stack
|
page read and write
|
|
|
|
7FF5A310C000
|
unkown
|
page readonly
|
|
|
|
7FF58B6BF000
|
unkown
|
page readonly
|
|
|
|
7FF501452000
|
unkown
|
page readonly
|
|
|
|
7FF5014A9000
|
unkown
|
page readonly
|
|
|
|
7FF5741A6000
|
unkown
|
page readonly
|
|
|
|
7FF51FD4E000
|
unkown
|
page readonly
|
|
|
|
22914BF0000
|
unkown
|
page read and write
|
|
|
|
507A37F000
|
unkown
|
page read and write
|
|
|
|
1F003DF0000
|
unkown
|
page read and write
|
|
|
|
1F006100000
|
unkown
|
page read and write
|
|
|
|
1F005FE0000
|
unkown
|
page read and write
|
|
|
|
22919350000
|
unkown
|
page read and write
|
|
|
|
1BC4225F000
|
unkown
|
page read and write
|
|
|
|
7FF59BAAF000
|
unkown
|
page readonly
|
|
|
|
1F005D00000
|
unkown
|
page read and write
|
|
|
|
7FF51FEF8000
|
unkown
|
page readonly
|
|
|
|
7FF574132000
|
unkown
|
page readonly
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
7FF501132000
|
unkown
|
page readonly
|
|
|
|
1BC42249000
|
unkown
|
page read and write
|
|
|
|
7FF51FF6C000
|
unkown
|
page readonly
|
|
|
|
7FF58B678000
|
unkown
|
page readonly
|
|
|
|
312F000
|
stack
|
page read and write
|
|
|
|
7FF5D9B80000
|
unkown
|
page readonly
|
|
|
|
7FF546BB5000
|
unkown
|
page readonly
|
|
|
|
7FF5738FB000
|
unkown
|
page readonly
|
|
|
|
7FF51FF84000
|
unkown
|
page readonly
|
|
|
|
1F005F53000
|
unkown
|
page read and write
|
|
|
|
1BC4225C000
|
unkown
|
page read and write
|
|
|
|
1F005FB5000
|
unkown
|
page read and write
|
|
|
|
7FF5E6175000
|
unkown
|
page readonly
|
|
|
|
183625A0000
|
unkown
|
page read and write
|
|
|
|
1F005F38000
|
unkown
|
page read and write
|
|
|
|
7FF5A3189000
|
unkown
|
page readonly
|
|
|
|
22A2D23F000
|
unkown
|
page read and write
|
|
|
|
22913D02000
|
unkown
|
page read and write
|
|
|
|
1F003EE3000
|
unkown
|
page read and write
|
|
|
|
20117C70000
|
unkown
|
page readonly
|
|
|
|
5D2000
|
unkown
|
page read and write
|
|
|
|
1CE23940000
|
unkown
|
page write copy
|
|
|
|
2291944B000
|
unkown
|
page read and write
|
|
|
|
7FF58B870000
|
unkown
|
page readonly
|
|
|
|
7FF5C2930000
|
unkown
|
page readonly
|
|
|
|
22913BF0000
|
unkown
|
page readonly
|
|
|
|
26F16E40000
|
heap private
|
page read and write
|
|
|
|
7FF59BA76000
|
unkown
|
page readonly
|
|
|
|
7FF5D9A97000
|
unkown
|
page readonly
|
|
|
|
15DA07A000
|
unkown
|
page read and write
|
|
|
|
18362600000
|
unkown
|
page read and write
|
|
|
|
7FF58B957000
|
unkown
|
page readonly
|
|
|
|
2291945D000
|
unkown
|
page read and write
|
|
|
|
52ACD7D000
|
unkown
|
page read and write
|
|
|
|
1F007010000
|
unkown
|
page read and write
|
|
|
|
22A2DA02000
|
unkown
|
page read and write
|
|
|
|
7FF5C2254000
|
unkown
|
page readonly
|
|
|
|
7FF5E611D000
|
unkown
|
page readonly
|
|
|
|
1F003EA7000
|
unkown
|
page read and write
|
|
|
|
15DA5FB000
|
unkown
|
page read and write
|
|
|
|
1BC42260000
|
unkown
|
page read and write
|
|
|
|
1F005F56000
|
unkown
|
page read and write
|
|
|
|
15DA57D000
|
unkown
|
page read and write
|
|
|
|
1F003EA7000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1DD0000
|
unkown
|
page read and write
|
|
|
|
7FF5C29D4000
|
unkown
|
page readonly
|
|
|
|
229193A0000
|
unkown
|
page readonly
|
|
|
|
1CA63FC000
|
unkown
|
page read and write
|
|
|
|
18362658000
|
unkown
|
page read and write
|
|
|
|
C36E07E000
|
unkown
|
page read and write
|
|
|
|
22A2D200000
|
unkown
|
page read and write
|
|
|
|
7FF5D9BDE000
|
unkown
|
page readonly
|
|
|
|
7FF546BFC000
|
unkown
|
page readonly
|
|
|
|
7FF5C28F1000
|
unkown
|
page readonly
|
|
|
|
E8C000
|
unkown image
|
page read and write
|
|
|
|
7FF5014F7000
|
unkown
|
page readonly
|
|
|
|
1F005F34000
|
unkown
|
page read and write
|
|
|
|
7FF573DF7000
|
unkown
|
page readonly
|
|
|
|
229194B4000
|
unkown
|
page read and write
|
|
|
|
229193E0000
|
unkown
|
page readonly
|
|
|
|
7FF57422E000
|
unkown
|
page readonly
|
|
|
|
92F297A000
|
unkown
|
page read and write
|
|
|
|
26F16EB0000
|
unkown
|
page readonly
|
|
|
|
1CE21A49000
|
unkown
|
page read and write
|
|
|
|
7FF5E6457000
|
unkown
|
page readonly
|
|
|
|
7FF5C2946000
|
unkown
|
page readonly
|
|
|
|
22A2D400000
|
unkown
|
page readonly
|
|
|
|
7808EFE000
|
unkown
|
page read and write
|
|
|
|
1F003EA3000
|
unkown
|
page read and write
|
|
|
|
7FF5D93F9000
|
unkown
|
page readonly
|
|
|
|
1CE23600000
|
unkown
|
page readonly
|
|
|
|
7FF58B9A0000
|
unkown
|
page readonly
|
|
|
|
7FF58BA47000
|
unkown
|
page readonly
|
|
|
|
7FF5E605D000
|
unkown
|
page readonly
|
|
|
|
22915093000
|
unkown
|
page read and write
|
|
|
|
1F003ECD000
|
unkown
|
page read and write
|
|
|
|
7FF5E61E3000
|
unkown
|
page readonly
|
|
|
|
C36DA9C000
|
unkown
|
page read and write
|
|
|
|
1F007410000
|
unkown
|
page read and write
|
|
|
|
BFA000
|
heap default
|
page read and write
|
|
|
|
E00000
|
unkown
|
page read and write
|
|
|
|
7FF5C28A5000
|
unkown
|
page readonly
|
|
|
|
1F003F5F000
|
unkown
|
page read and write
|
|
|
|
22914B10000
|
unkown
|
page read and write
|
|
|
|
1BC42400000
|
unkown
|
page readonly
|
|
|
|
7FF59BA9E000
|
unkown
|
page readonly
|
|
|
|
7FF59B738000
|
unkown
|
page readonly
|
|
|
|
7FF546C71000
|
unkown
|
page readonly
|
|
|
|
7FF5D9B66000
|
unkown
|
page readonly
|
|
|
|
1F006242000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
1A90000
|
unkown
|
page readonly
|
|
|
|
22A2D1F0000
|
unkown
|
page readonly
|
|
|
|
1F007310000
|
unkown
|
page read and write
|
|
|
|
7FF5C2932000
|
unkown
|
page readonly
|
|
|
|
1F005FE3000
|
unkown
|
page read and write
|
|
|
|
7FF574231000
|
unkown
|
page readonly
|
|
|
|
7FF58B9A2000
|
unkown
|
page readonly
|
|
|
|
22913C91000
|
unkown
|
page read and write
|
|
|
|
52ACDFF000
|
unkown
|
page read and write
|
|
|
|
2A29000
|
stack
|
page read and write
|
|
|
|
7FF5D9BE9000
|
unkown
|
page readonly
|
|
|
|
7FF5E6205000
|
unkown
|
page readonly
|
|
|
|
1EA9A913000
|
unkown
|
page read and write
|
|
|
|
20117B7B000
|
heap default
|
page read and write
|
|
|
|
26F17013000
|
unkown
|
page read and write
|
|
|
|
7FF59BB04000
|
unkown
|
page readonly
|
|
|
|
1F005D00000
|
unkown
|
page read and write
|
|
|
|
18362540000
|
heap default
|
page read and write
|
|
|
|
1CE21900000
|
unkown
|
page readonly
|
|
|
|
7FF58B9F9000
|
unkown
|
page readonly
|
|
|
|
7FF58BA44000
|
unkown
|
page readonly
|
|
|
|
1CE21A2A000
|
unkown
|
page read and write
|
|
|
|
7D3000
|
unkown
|
page read and write
|
|
|
|
FE6000
|
heap default
|
page read and write
|
|
|
|
7FF5012F8000
|
unkown
|
page readonly
|
|
|
|
7FF59BA21000
|
unkown
|
page readonly
|
|
|
|
7FF50131B000
|
unkown
|
page readonly
|
|
|
|
218E000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B56000
|
unkown
|
page readonly
|
|
|
|
A50000
|
heap default
|
page read and write
|
|
|
|
7FF51FFE9000
|
unkown
|
page readonly
|
|
|
|
229193F0000
|
unkown
|
page readonly
|
|
|
|
1F003EA3000
|
unkown
|
page read and write
|
|
|
|
21889520000
|
unkown
|
page readonly
|
|
|
|
AF1000
|
heap default
|
page read and write
|
|
|
|
7FF51FF75000
|
unkown
|
page readonly
|
|
|
|
E50000
|
unkown
|
page read and write
|
|
|
|
A55000
|
heap default
|
page read and write
|
|
|
|
22919270000
|
unkown
|
page read and write
|
|
|
|
22A2D276000
|
unkown
|
page read and write
|
|
|
|
7FF5740FB000
|
unkown
|
page readonly
|
|
|
|
7FF5A30FC000
|
unkown
|
page readonly
|
|
|
|
1BC42150000
|
unkown
|
page readonly
|
|
|
|
18362800000
|
unkown
|
page readonly
|
|
|
|
1BC42244000
|
unkown
|
page read and write
|
|
|
|
1F005F13000
|
unkown
|
page read and write
|
|
|
|
78089FD000
|
unkown
|
page read and write
|
|
|
|
1EA9A879000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
22913C77000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
22914559000
|
unkown
|
page read and write
|
|
|
|
7FF501559000
|
unkown
|
page readonly
|
|
|
|
15D9FFA000
|
unkown
|
page read and write
|
|
|
|
7FF59BA07000
|
unkown
|
page readonly
|
|
|
|
1F003CD0000
|
heap private
|
page read and write
|
|
|
|
7FF58B9B6000
|
unkown
|
page readonly
|
|
|
|
21889200000
|
unkown
|
page readonly
|
|
|
|
A76227F000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
BC0000
|
unkown
|
page read and write
|
|
|
|
22919460000
|
unkown
|
page read and write
|
|
|
|
7FF50145D000
|
unkown
|
page readonly
|
|
|
|
22A2D266000
|
unkown
|
page read and write
|
|
|
|
7FF5A3096000
|
unkown
|
page readonly
|
|
|
|
22919130000
|
unkown
|
page read and write
|
|
|
|
7FF5014C6000
|
unkown
|
page readonly
|
|
|
|
7FF51FEE0000
|
unkown
|
page readonly
|
|
|
|
26F170C2000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F005FE0000
|
unkown
|
page read and write
|
|
|
|
1CE233E0000
|
unkown
|
page readonly
|
|
|
|
7FF5E6454000
|
unkown
|
page readonly
|
|
|
|
22919412000
|
unkown
|
page read and write
|
|
|
|
7FF58B178000
|
unkown
|
page readonly
|
|
|
|
2291949F000
|
unkown
|
page read and write
|
|
|
|
7FF573E04000
|
unkown
|
page readonly
|
|
|
|
7FF59BACD000
|
unkown
|
page readonly
|
|
|
|
194C000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B39000
|
unkown
|
page readonly
|
|
|
|
78091FD000
|
unkown
|
page read and write
|
|
|
|
7FF501550000
|
unkown
|
page readonly
|
|
|
|
7FF5E63B0000
|
unkown
|
page readonly
|
|
|
|
AC0000
|
heap default
|
page read and write
|
|
|
|
7FF5C28E4000
|
unkown
|
page readonly
|
|
|
|
20117B30000
|
unkown
|
page readonly
|
|
|
|
1CE21910000
|
unkown
|
page read and write
|
|
|
|
1F007410000
|
unkown
|
page read and write
|
|
|
|
22919324000
|
unkown
|
page readonly
|
|
|
|
7FF58BAA0000
|
unkown
|
page readonly
|
|
|
|
7FF51FFE1000
|
unkown
|
page readonly
|
|
|
|
7FF5A3124000
|
unkown
|
page readonly
|
|
|
|
1F005D00000
|
unkown
|
page readonly
|
|
|
|
780867C000
|
unkown
|
page read and write
|
|
|
|
1CE21A02000
|
unkown
|
page read and write
|
|
|
|
7FF5E6452000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5D99D8000
|
unkown
|
page readonly
|
|
|
|
22919390000
|
unkown
|
page read and write
|
|
|
|
198D000
|
unkown
|
page read and write
|
|
|
|
1F005FE0000
|
unkown
|
page read and write
|
|
|
|
1F005F77000
|
unkown
|
page read and write
|
|
|
|
7FF5C275B000
|
unkown
|
page readonly
|
|
|
|
201196A0000
|
heap private
|
page read and write
|
|
|
|
22913C9C000
|
unkown
|
page read and write
|
|
|
|
1F007110000
|
unkown
|
page read and write
|
|
|
|
7FF5C2543000
|
unkown
|
page readonly
|
|
|
|
7FF59BA78000
|
unkown
|
page readonly
|
|
|
|
7FF51FB23000
|
unkown
|
page readonly
|
|
|
|
7FF58BA1C000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F006200000
|
unkown
|
page read and write
|
|
|
|
52AC9FF000
|
unkown
|
page read and write
|
|
|
|
78090FF000
|
unkown
|
page read and write
|
|
|
|
1F005FA4000
|
unkown
|
page read and write
|
|
|
|
7FF5E6289000
|
unkown
|
page readonly
|
|
|
|
7FF5A293E000
|
unkown
|
page readonly
|
|
|
|
204E000
|
unkown
|
page read and write
|
|
|
|
2E00000
|
unkown
|
page readonly
|
|
|
|
A76159B000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
22A2D202000
|
unkown
|
page read and write
|
|
|
|
7FF58B9EF000
|
unkown
|
page readonly
|
|
|
|
7FF5C2843000
|
unkown
|
page readonly
|
|
|
|
7FF58B868000
|
unkown
|
page readonly
|
|
|
|
7FF574142000
|
unkown
|
page readonly
|
|
|
|
7FF5E64B9000
|
unkown
|
page readonly
|
|
|
|
1BC42213000
|
unkown
|
page read and write
|
|
|
|
1F006084000
|
unkown
|
page read and write
|
|
|
|
7FF58BA9E000
|
unkown
|
page readonly
|
|
|
|
1F003EE1000
|
unkown
|
page read and write
|
|
|
|
22919370000
|
unkown
|
page read and write
|
|
|
|
21889035000
|
unkown
|
page read and write
|
|
|
|
4F9B87F000
|
unkown
|
page read and write
|
|
|
|
7FF59B79E000
|
unkown
|
page readonly
|
|
|
|
20117B00000
|
unkown
|
page read and write
|
|
|
|
1CE219E0000
|
unkown
|
page read and write
|
|
|
|
20117BAC000
|
heap default
|
page read and write
|
|
|
|
2290000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
229193A0000
|
unkown
|
page read and write
|
|
|
|
22A2D1D0000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1CE21B02000
|
unkown
|
page read and write
|
|
|
|
7FF58B977000
|
unkown
|
page readonly
|
|
|
|
1EA9A83C000
|
unkown
|
page read and write
|
|
|
|
7FF5C28AC000
|
unkown
|
page readonly
|
|
|
|
229193A0000
|
unkown
|
page read and write
|
|
|
|
7FF5014F0000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
22A2D302000
|
unkown
|
page read and write
|
|
|
|
7FF58BA2C000
|
unkown
|
page readonly
|
|
|
|
2291941E000
|
unkown
|
page read and write
|
|
|
|
26F16F90000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5C2948000
|
unkown
|
page readonly
|
|
|
|
1F005F53000
|
unkown
|
page read and write
|
|
|
|
7FF5A302A000
|
unkown
|
page readonly
|
|
|
|
7FF59B6A3000
|
unkown
|
page readonly
|
|
|
|
1BC42140000
|
unkown
|
page readonly
|
|
|
|
7FF51FECC000
|
unkown
|
page readonly
|
|
|
|
7FF5E5FF1000
|
unkown
|
page readonly
|
|
|
|
93C000
|
stack
|
page read and write
|
|
|
|
E8B000
|
unkown image
|
page readonly
|
|
|
|
7FF5C276C000
|
unkown
|
page readonly
|
|
|
|
A76207E000
|
unkown
|
page read and write
|
|
|
|
7FF5012BE000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F005F54000
|
unkown
|
page read and write
|
|
|
|
7FF5C290C000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F006342000
|
unkown
|
page read and write
|
|
|
|
1F003ECA000
|
unkown
|
page read and write
|
|
|
|
22914D00000
|
unkown
|
page readonly
|
|
|
|
7FF5C28E7000
|
unkown
|
page readonly
|
|
|
|
22914CF0000
|
unkown
|
page readonly
|
|
|
|
18362560000
|
unkown
|
page readonly
|
|
|
|
229190A0000
|
unkown
|
page read and write
|
|
|
|
7FF59B6A1000
|
unkown
|
page readonly
|
|
|
|
1F007210000
|
unkown
|
page read and write
|
|
|
|
70A000
|
heap default
|
page read and write
|
|
|
|
7FF58B244000
|
unkown
|
page readonly
|
|
|
|
1F005F64000
|
unkown
|
page read and write
|
|
|
|
1F003E66000
|
unkown
|
page read and write
|
|
|
|
1F003E54000
|
unkown
|
page read and write
|
|
|
|
1F003E9F000
|
unkown
|
page read and write
|
|
|
|
22913C56000
|
unkown
|
page read and write
|
|
|
|
1F003E59000
|
unkown
|
page read and write
|
|
|
|
26F17802000
|
unkown
|
page read and write
|
|
|
|
7FF5A2D9C000
|
unkown
|
page readonly
|
|
|
|
21889000000
|
unkown
|
page read and write
|
|
|
|
1BC42245000
|
unkown
|
page read and write
|
|
|
|
7FF501370000
|
unkown
|
page readonly
|
|
|
|
15D9F7A000
|
unkown
|
page read and write
|
|
|
|
1F005F34000
|
unkown
|
page read and write
|
|
|
|
20117B40000
|
unkown
|
page readonly
|
|
|
|
E8D000
|
unkown image
|
page readonly
|
|
|
|
D4D07FB000
|
unkown
|
page read and write
|
|
|
|
7FF5A30ED000
|
unkown
|
page readonly
|
|
|
|
22914260000
|
unkown
|
page readonly
|
|
|
|
21889029000
|
unkown
|
page read and write
|
|
|
|
1F005F17000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
1CE21A00000
|
unkown
|
page read and write
|
|
|
|
26F17000000
|
unkown
|
page read and write
|
|
|
|
7FF546B9A000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5741AC000
|
unkown
|
page readonly
|
|
|
|
22914340000
|
unkown
|
page read and write
|
|
|
|
7FF51FF66000
|
unkown
|
page readonly
|
|
|
|
1F005FE0000
|
unkown
|
page read and write
|
|
|
|
1F003EC9000
|
unkown
|
page read and write
|
|
|
|
1CA60FF000
|
unkown
|
page read and write
|
|
|
|
101C000
|
heap default
|
page read and write
|
|
|
|
7FF50143C000
|
unkown
|
page readonly
|
|
|
|
7FF5A3034000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
15DA27B000
|
unkown
|
page read and write
|
|
|
|
1CE217B0000
|
heap private
|
page read and write
|
|
|
|
1F006143000
|
unkown
|
page read and write
|
|
|
|
22914402000
|
unkown
|
page read and write
|
|
|
|
7FF5A309A000
|
unkown
|
page readonly
|
|
|
|
7FF5D9AF2000
|
unkown
|
page readonly
|
|
|
|
7FF546BEC000
|
unkown
|
page readonly
|
|
|
|
1CE21A3D000
|
unkown
|
page read and write
|
|
|
|
22914500000
|
unkown
|
page read and write
|
|
|
|
7FF5C297F000
|
unkown
|
page readonly
|
|
|
|
1F003EDC000
|
unkown
|
page read and write
|
|
|
|
7FF5A3120000
|
unkown
|
page readonly
|
|
|
|
1F005D40000
|
unkown
|
page read and write
|
|
|
|
A10000
|
unkown
|
page read and write
|
|
|
|
7FF59BA60000
|
unkown
|
page readonly
|
|
|
|
7FF501448000
|
unkown
|
page readonly
|
|
|
|
1F005F55000
|
unkown
|
page read and write
|
|
|
|
D4D047C000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5D98A5000
|
unkown
|
page readonly
|
|
|
|
7FF59B897000
|
unkown
|
page readonly
|
|
|
|
E0C000
|
unkown
|
page read and write
|
|
|
|
1EA9A7D0000
|
unkown
|
page read and write
|
|
|
|
1F005F7D000
|
unkown
|
page read and write
|
|
|
|
7FF5C299D000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF58B637000
|
unkown
|
page readonly
|
|
|
|
7FF58B2E5000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF546BBF000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
7CA000
|
unkown
|
page read and write
|
|
|
|
22919320000
|
unkown
|
page readonly
|
|
|
|
7FF546B70000
|
unkown
|
page readonly
|
|
|
|
2291942C000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B0A000
|
unkown
|
page readonly
|
|
|
|
1F003F2E000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
22913C13000
|
unkown
|
page read and write
|
|
|
|
22913ED0000
|
unkown
|
page readonly
|
|
|
|
218892D0000
|
unkown
|
page write copy
|
|
|
|
7FF5C26BC000
|
unkown
|
page readonly
|
|
|
|
E8B000
|
unkown image
|
page readonly
|
|
|
|
7FF5469FF000
|
unkown
|
page readonly
|
|
|
|
7FF5D9B87000
|
unkown
|
page readonly
|
|
|
|
7FF5C290A000
|
unkown
|
page readonly
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9857000
|
unkown
|
page readonly
|
|
|
|
7808BFE000
|
unkown
|
page read and write
|
|
|
|
7FF59B8D0000
|
unkown
|
page readonly
|
|
|
|
83C000
|
unkown
|
page read and write
|
|
|
|
20117A10000
|
unkown
|
page readonly
|
|
|
|
1F003F60000
|
unkown
|
page read and write
|
|
|
|
20117B70000
|
heap default
|
page read and write
|
|
|
|
7FF5741C5000
|
unkown
|
page readonly
|
|
|
|
22914701000
|
unkown
|
page read and write
|
|
|
|
7FF5C27A0000
|
unkown
|
page readonly
|
|
|
|
1CE21810000
|
heap default
|
page read and write
|
|
|
|
229194B2000
|
unkown
|
page read and write
|
|
|
|
7FF5C2A39000
|
unkown
|
page readonly
|
|
|
|
15DA3FA000
|
unkown
|
page read and write
|
|
|
|
7FF546C17000
|
unkown
|
page readonly
|
|
|
|
18362570000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1EA9A829000
|
unkown
|
page read and write
|
|
|
|
22919338000
|
unkown
|
page write copy
|
|
|
|
7FF5A30F6000
|
unkown
|
page readonly
|
|
|
|
2188903F000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF546B86000
|
unkown
|
page readonly
|
|
|
|
7FF59BAD6000
|
unkown
|
page readonly
|
|
|
|
1F006402000
|
unkown
|
page read and write
|
|
|
|
E8D000
|
unkown image
|
page readonly
|
|
|
|
22915071000
|
unkown
|
page read and write
|
|
|
|
7FF5A3082000
|
unkown
|
page readonly
|
|
|
|
5079C7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C26EE000
|
unkown
|
page readonly
|
|
|
|
1BC4224E000
|
unkown
|
page read and write
|
|
|
|
BC0000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F007000000
|
unkown
|
page read and write
|
|
|
|
6A0000
|
heap default
|
page read and write
|
|
|
|
1CE219F0000
|
unkown
|
page readonly
|
|
|
|
7FF50142A000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
22A2D26F000
|
unkown
|
page read and write
|
|
|
|
7FF57417F000
|
unkown
|
page readonly
|
|
|
|
29D000
|
unkown
|
page read and write
|
|
|
|
C36DF7E000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
229193A0000
|
unkown
|
page read and write
|
|
|
|
1BC42160000
|
unkown
|
page read and write
|
|
|
|
7FF5A3181000
|
unkown
|
page readonly
|
|
|
|
1EA9AA00000
|
unkown
|
page readonly
|
|
|
|
22919484000
|
unkown
|
page read and write
|
|
|
|
21889102000
|
unkown
|
page read and write
|
|
|
|
18362C60000
|
unkown
|
page readonly
|
|
|
|
7FF5E63A8000
|
unkown
|
page readonly
|
|
|
|
A761C7F000
|
unkown
|
page read and write
|
|
|
|
1F003ECD000
|
unkown
|
page read and write
|
|
|
|
7FF58B84E000
|
unkown
|
page readonly
|
|
|
|
7808DFF000
|
unkown
|
page read and write
|
|
|
|
7FF51FDA8000
|
unkown
|
page readonly
|
|
|
|
1F007210000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B1E000
|
unkown
|
page readonly
|
|
|
|
5ED000
|
stack
|
page read and write
|
|
|
|
7FF5C28EA000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
18362629000
|
unkown
|
page read and write
|
|
|
|
7FF5C26A3000
|
unkown
|
page readonly
|
|
|
|
1F007110000
|
unkown
|
page read and write
|
|
|
|
E8B000
|
unkown image
|
page readonly
|
|
|
|
1EA9A7C0000
|
unkown
|
page readonly
|
|
|
|
22913B80000
|
heap private
|
page read and write
|
|
|
|
7FF5D9B4D000
|
unkown
|
page readonly
|
|
|
|
7FF58B72C000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5E5C53000
|
unkown
|
page readonly
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1F006300000
|
unkown
|
page read and write
|
|
|
|
1F006382000
|
unkown
|
page read and write
|
|
|
|
1F005870000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown
|
page readonly
|
|
|
|
E10000
|
heap private
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF59BAB9000
|
unkown
|
page readonly
|
|
|
|
21888FF0000
|
heap default
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF5E64B9000
|
unkown
|
page readonly
|
|
|
|
780907F000
|
unkown
|
page read and write
|
|
|
|
E8D000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown
|
page readonly
|
|
|
|
7FF51FFE9000
|
unkown
|
page readonly
|
|
|
|
1F005F9B000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF58B961000
|
unkown
|
page readonly
|
|
|
|
7FF51FF39000
|
unkown
|
page readonly
|
|
|
|
7808877000
|
unkown
|
page read and write
|
|
|
|
201194F0000
|
unkown
|
page readonly
|
|
|
|
7FF5E6180000
|
unkown
|
page readonly
|
|
|
|
1F006302000
|
unkown
|
page read and write
|
|
|
|
7FF58B7CB000
|
unkown
|
page readonly
|
|
|
|
7FF5E641D000
|
unkown
|
page readonly
|
|
|
|
7FF5A3127000
|
unkown
|
page readonly
|
|
|
|
1F003DE0000
|
heap private
|
page read and write
|
|
|
|
7FF58BA35000
|
unkown
|
page readonly
|
|
|
|
5079D7B000
|
unkown
|
page read and write
|
|
|
|
7FF546BAE000
|
unkown
|
page readonly
|
|
|
|
15DA0FA000
|
unkown
|
page read and write
|
|
|
|
7FF59BA58000
|
unkown
|
page readonly
|
|
|
|
1F003ECD000
|
unkown
|
page read and write
|
|
|
|
7FF58B927000
|
unkown
|
page readonly
|
|
|
|
1F003F1F000
|
unkown
|
page read and write
|
|
|
|
7FF59BAE6000
|
unkown
|
page readonly
|
|
|
|
7FF51FFDE000
|
unkown
|
page readonly
|
|
|
|
7FF5D9B2F000
|
unkown
|
page readonly
|
|
|
|
7FF58B5E3000
|
unkown
|
page readonly
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
22919280000
|
unkown
|
page read and write
|
|
|
|
E8D000
|
unkown image
|
page readonly
|
|
There are 1260 hidden memdumps, click here to show them.