Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
lazagne.exe
|
PE32+ executable (console) x86-64, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\lazagne.exe.manifest
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6bfbvf
|
ASCII text, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\MSVCR90.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\_ctypes.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\_elementtree.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\_hashlib.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\_multiprocessing.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\_socket.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\_sqlite3.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\_ssl.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\bz2.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\msvcp100.dll
|
PE32+ executable (DLL) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\msvcr100.dll
|
PE32+ executable (DLL) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\pyexpat.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\python27.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\pywintypes27.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\select.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\sqlite3.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\unicodedata.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\_MEI29602\win32pipe.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
modified
|
|
|
|
\Device\ConDrv
|
ASCII text, with CRLF line terminators
|
dropped
|
|
There are 12 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\lazagne.exe
|
'C:\Users\user\Desktop\lazagne.exe'
|
|
|
|
C:\Users\user\Desktop\lazagne.exe
|
'C:\Users\user\Desktop\lazagne.exe'
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://cr.yp.to/djb.html
|
unknown
|
|
|
|
https://bitbucket.org/jmichel/dpapick
|
unknown
|
|
|
|
http://python.org/dev/peps/pep-0263/
|
unknown
|
|
|
|
https://getcomposer.org/doc/articles/http-basic-authentication.md
|
unknown
|
|
|
|
http://www.di-mgt.com.au/rsa_alg.html#pkcs1schemes
|
unknown
|
|
|
|
http://www.rgaros.nl/gestalt/
|
unknown
|
|
|
|
http://www.seanet.com/~bugbee/crypto/salsa20/
|
unknown
|
|
|
|
http://psi-im.org/options
|
unknown
|
|
|
|
http://www.ecrypt.eu.org/stream/salsa20p3.html
|
unknown
|
|
|
|
https://maven.apache.org/settings.html#Servers
|
unknown
|
|
|
|
https://www.gmail.com/
|
unknown
|
|
|
|
http://www.tiac.net/~sw/2010/02/PureSalsa20
|
unknown
|
|
|
|
http://blog.digital-forensics.it/2016/01/windows-revaulting.html
|
unknown
|
|
|
|
https://github.com/dfirfpi/dpapilab
|
unknown
|
|
|
|
http://cr.yp.to/snuffle.html
|
unknown
|
|
|
|
http://www.openssl.org/support/faq.html
|
unknown
|
|
|
|
http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf
|
unknown
|
|
|
|
http://maven.apache.org/SETTINGS/1.0.0
|
unknown
|
|
|
|
http://www.unicode.org/reports/tr44/tr44-4.html).u
|
unknown
|
|
|
|
https://github.com/putterpanda/mimikittenz
|
unknown
|
|
|
|
https://maven.apache.org/guides/mini/guide-encryption.html#How_to_create_a_master_password
|
unknown
|
|
|
|
https://git-scm.com/docs/git-credential-store
|
unknown
|
|
|
|
http://www.unicode.org/reports/tr44/tr44-4.html).
|
unknown
|
|
|
|
http://lab.mediaservice.net/code/cachedump.rb
|
unknown
|
|
|
|
http://www.openssl.org/support/faq.htmlC:
|
unknown
|
|
|
|
http://www.ecrypt.eu.org/stream/p3ciphers/salsa20/salsa20_p3source.zip
|
unknown
|
|
|
|
https://github.com/mhammond/pywin320
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/wsdl/
|
unknown
|
|
|
|
http://cr.yp.to/snuffle/salsafamily-20071225.pdf
|
unknown
|
|
|
|
http://www.eyevis.de/en/products/wall-management-software.html
|
unknown
|
|
|
|
http://www.python.org/dev/peps/pep-0205/
|
unknown
|
|
|
|
http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf);
|
unknown
|
|
|
|
http://json.org
|
unknown
|
|
There are 23 hidden URLs, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
213FDB32000
|
unkown
|
page read and write
|
|
|
|
213FDB31000
|
unkown
|
page read and write
|
|
|
|
213FDA6E000
|
unkown
|
page read and write
|
|
|
|
213FDA6E000
|
unkown
|
page read and write
|
|
|
|
7FF51DA1B000
|
unkown
|
page readonly
|
|
|
|
7FF5394F1000
|
unkown
|
page readonly
|
|
|
|
5002B000
|
unkown image
|
page readonly
|
|
|
|
1CC75BA0000
|
unkown
|
page read and write
|
|
|
|
26097950000
|
unkown
|
page read and write
|
|
|
|
1CC75AF5000
|
unkown
|
page read and write
|
|
|
|
18670AA0000
|
unkown
|
page read and write
|
|
|
|
7FF7F6BD0000
|
unkown image
|
page readonly
|
|
|
|
213FDFC3000
|
unkown
|
page read and write
|
|
|
|
7FF52069C000
|
unkown
|
page readonly
|
|
|
|
7FF5394BF000
|
unkown
|
page readonly
|
|
|
|
95FA27B000
|
unkown
|
page read and write
|
|
|
|
7FF56B276000
|
unkown
|
page readonly
|
|
|
|
213FE257000
|
unkown
|
page read and write
|
|
|
|
7FF51D7D8000
|
unkown
|
page readonly
|
|
|
|
7FF51DB65000
|
unkown
|
page readonly
|
|
|
|
213FDC2C000
|
unkown
|
page read and write
|
|
|
|
1EBD00BB000
|
unkown
|
page read and write
|
|
|
|
7FF5D0790000
|
unkown
|
page readonly
|
|
|
|
77F31000
|
unkown image
|
page execute read
|
|
|
|
7FF59AE36000
|
unkown
|
page readonly
|
|
|
|
7FF539495000
|
unkown
|
page readonly
|
|
|
|
7FF56B211000
|
unkown
|
page readonly
|
|
|
|
7FF5CFFFF000
|
unkown
|
page readonly
|
|
|
|
224DC2A0000
|
unkown
|
page read and write
|
|
|
|
677B67E000
|
unkown
|
page read and write
|
|
|
|
213FDC2C000
|
unkown
|
page read and write
|
|
|
|
2038AE00000
|
unkown
|
page readonly
|
|
|
|
213FE2D7000
|
unkown
|
page read and write
|
|
|
|
7FF539544000
|
unkown
|
page readonly
|
|
|
|
677B07F000
|
unkown
|
page read and write
|
|
|
|
1ECE1A57000
|
unkown
|
page read and write
|
|
|
|
7FF5D077F000
|
unkown
|
page readonly
|
|
|
|
24677B13000
|
unkown
|
page read and write
|
|
|
|
50029000
|
unkown image
|
page read and write
|
|
|
|
2038AC25000
|
unkown
|
page read and write
|
|
|
|
2ADE4760000
|
heap private
|
page read and write
|
|
|
|
7FF51DB54000
|
unkown
|
page readonly
|
|
|
|
DBBE7E000
|
unkown
|
page read and write
|
|
|
|
DBB88C000
|
unkown
|
page read and write
|
|
|
|
6BD297C000
|
unkown
|
page read and write
|
|
|
|
16080FC000
|
unkown
|
page read and write
|
|
|
|
1EBD0070000
|
unkown
|
page read and write
|
|
|
|
1CC75AF8000
|
unkown
|
page read and write
|
|
|
|
7FF5D075D000
|
unkown
|
page readonly
|
|
|
|
7FF51D974000
|
unkown
|
page readonly
|
|
|
|
677B47B000
|
unkown
|
page read and write
|
|
|
|
1866C550000
|
unkown
|
page readonly
|
|
|
|
213FDFBD000
|
unkown
|
page read and write
|
|
|
|
26097870000
|
unkown
|
page readonly
|
|
|
|
26097302000
|
unkown
|
page read and write
|
|
|
|
77F48000
|
unkown image
|
page readonly
|
|
|
|
16083FD000
|
unkown
|
page read and write
|
|
|
|
213FB89C000
|
heap default
|
page read and write
|
|
|
|
213FDA09000
|
unkown
|
page read and write
|
|
|
|
50020000
|
unkown image
|
page readonly
|
|
|
|
77F1F000
|
unkown image
|
page read and write
|
|
|
|
7FF53ACD1000
|
unkown
|
page readonly
|
|
|
|
50010000
|
unkown image
|
page readonly
|
|
|
|
767897D000
|
unkown
|
page read and write
|
|
|
|
7FF51DAF5000
|
unkown
|
page readonly
|
|
|
|
18670C9C000
|
unkown
|
page read and write
|
|
|
|
7FF5D076C000
|
unkown
|
page readonly
|
|
|
|
18670A60000
|
unkown
|
page read and write
|
|
|
|
7FF51DAFC000
|
unkown
|
page readonly
|
|
|
|
1CC75AF1000
|
unkown
|
page read and write
|
|
|
|
224DBC00000
|
unkown
|
page read and write
|
|
|
|
18670CB1000
|
unkown
|
page read and write
|
|
|
|
7FF58D712000
|
unkown
|
page readonly
|
|
|
|
15CA8F2000
|
unkown
|
page read and write
|
|
|
|
7FFF8F1BB000
|
unkown image
|
page write copy
|
|
|
|
2038AB90000
|
unkown
|
page read and write
|
|
|
|
50031000
|
unkown image
|
page execute read
|
|
|
|
6BD28FF000
|
unkown
|
page read and write
|
|
|
|
18670CB6000
|
unkown
|
page read and write
|
|
|
|
15CAAFE000
|
unkown
|
page read and write
|
|
|
|
213FE217000
|
unkown
|
page read and write
|
|
|
|
C859F3C000
|
unkown
|
page read and write
|
|
|
|
7FF520725000
|
unkown
|
page readonly
|
|
|
|
1ECE1A00000
|
unkown
|
page read and write
|
|
|
|
7FF5D0856000
|
unkown
|
page readonly
|
|
|
|
7DFE54835000
|
unkown
|
page readonly
|
|
|
|
7FF58D69B000
|
unkown
|
page readonly
|
|
|
|
7FF58D78C000
|
unkown
|
page readonly
|
|
|
|
18670CBD000
|
unkown
|
page read and write
|
|
|
|
7FF5D05D2000
|
unkown
|
page readonly
|
|
|
|
7FFF8F1BA000
|
unkown image
|
page read and write
|
|
|
|
50322000
|
unkown image
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
7FF51DA4D000
|
unkown
|
page readonly
|
|
|
|
7FF59AC45000
|
unkown
|
page readonly
|
|
|
|
1866C470000
|
unkown
|
page read and write
|
|
|
|
1866B410000
|
unkown
|
page readonly
|
|
|
|
7FF539443000
|
unkown
|
page readonly
|
|
|
|
7FF58D7A3000
|
unkown
|
page readonly
|
|
|
|
C85A2FD000
|
unkown
|
page read and write
|
|
|
|
50318000
|
unkown image
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
7FFF8EF10000
|
unkown image
|
page readonly
|
|
|
|
7FF51DC14000
|
unkown
|
page readonly
|
|
|
|
7FF56B19F000
|
unkown
|
page readonly
|
|
|
|
1ECE18A0000
|
heap default
|
page read and write
|
|
|
|
7FF56B175000
|
unkown
|
page readonly
|
|
|
|
2038AC60000
|
unkown
|
page read and write
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
1CC75B0A000
|
unkown
|
page read and write
|
|
|
|
2038AC59000
|
unkown
|
page read and write
|
|
|
|
7FF56B1C1000
|
unkown
|
page readonly
|
|
|
|
213FE34C000
|
unkown
|
page read and write
|
|
|
|
DBB90E000
|
unkown
|
page read and write
|
|
|
|
5037C000
|
unkown image
|
page write copy
|
|
|
|
7FF59ADE1000
|
unkown
|
page readonly
|
|
|
|
77F30000
|
unkown image
|
page readonly
|
|
|
|
7FF5D0788000
|
unkown
|
page readonly
|
|
|
|
1ECE1A24000
|
unkown
|
page read and write
|
|
|
|
1EBD0013000
|
unkown
|
page read and write
|
|
|
|
77EF3000
|
unkown image
|
page readonly
|
|
|
|
7FF56B130000
|
unkown
|
page readonly
|
|
|
|
50380000
|
unkown image
|
page read and write
|
|
|
|
1ECE1990000
|
unkown
|
page readonly
|
|
|
|
213FB870000
|
unkown
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
1ECE1A47000
|
unkown
|
page read and write
|
|
|
|
1ECE18B0000
|
unkown
|
page readonly
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
18670E00000
|
unkown
|
page readonly
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
1ECE1F90000
|
unkown
|
page readonly
|
|
|
|
1866BF01000
|
unkown
|
page read and write
|
|
|
|
2ADE457F000
|
heap private
|
page read and write
|
|
|
|
77ED0000
|
unkown image
|
page readonly
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
224DBC20000
|
unkown
|
page read and write
|
|
|
|
5037E000
|
unkown image
|
page read and write
|
|
|
|
7FF53AD93000
|
unkown
|
page readonly
|
|
|
|
18670960000
|
unkown
|
page read and write
|
|
|
|
1CC75B2A000
|
unkown
|
page read and write
|
|
|
|
7FF51DB8B000
|
unkown
|
page readonly
|
|
|
|
1CC75B00000
|
unkown
|
page read and write
|
|
|
|
95FA97F000
|
unkown
|
page read and write
|
|
|
|
7FF53ACC1000
|
unkown
|
page readonly
|
|
|
|
95FA67F000
|
unkown
|
page read and write
|
|
|
|
FD1BF7B000
|
unkown
|
page read and write
|
|
|
|
1CC75AFE000
|
unkown
|
page read and write
|
|
|
|
1CC75BE0000
|
unkown
|
page read and write
|
|
|
|
7FF59ADF1000
|
unkown
|
page readonly
|
|
|
|
7FF520661000
|
unkown
|
page readonly
|
|
|
|
7FF5D03D9000
|
unkown
|
page readonly
|
|
|
|
5032A000
|
unkown image
|
page read and write
|
|
|
|
7FF53ACC9000
|
unkown
|
page readonly
|
|
|
|
7FF59AA15000
|
unkown
|
page readonly
|
|
|
|
7FF51D7F4000
|
unkown
|
page readonly
|
|
|
|
213FD517000
|
unkown
|
page read and write
|
|
|
|
7FF51D84D000
|
unkown
|
page readonly
|
|
|
|
7FF59AC12000
|
unkown
|
page readonly
|
|
|
|
213FD2A0000
|
unkown
|
page read and write
|
|
|
|
1866BC00000
|
unkown
|
page read and write
|
|
|
|
7FF56B293000
|
unkown
|
page readonly
|
|
|
|
7FF51FEA9000
|
unkown
|
page readonly
|
|
|
|
213FDC63000
|
unkown
|
page read and write
|
|
|
|
16082FE000
|
unkown
|
page read and write
|
|
|
|
7FF58D6C0000
|
unkown
|
page readonly
|
|
|
|
6BD2A7D000
|
unkown
|
page read and write
|
|
|
|
7FF59AE44000
|
unkown
|
page readonly
|
|
|
|
18670EA0000
|
unkown
|
page readonly
|
|
|
|
213FDA24000
|
unkown
|
page read and write
|
|
|
|
1CC75A60000
|
unkown
|
page read and write
|
|
|
|
1EBD0900000
|
unkown
|
page read and write
|
|
|
|
7678AFD000
|
unkown
|
page read and write
|
|
|
|
50043000
|
unkown image
|
page readonly
|
|
|
|
213FD9FB000
|
unkown
|
page read and write
|
|
|
|
7FF5D0069000
|
unkown
|
page readonly
|
|
|
|
7FF59ADAB000
|
unkown
|
page readonly
|
|
|
|
7FF53AD86000
|
unkown
|
page readonly
|
|
|
|
1ECE19F0000
|
unkown
|
page read and write
|
|
|
|
7FF7F6BD0000
|
unkown image
|
page readonly
|
|
|
|
7FF51DB60000
|
unkown
|
page readonly
|
|
|
|
1CC75B3D000
|
unkown
|
page read and write
|
|
|
|
18670EC0000
|
unkown
|
page readonly
|
|
|
|
213FE3C1000
|
unkown
|
page read and write
|
|
|
|
7FF53ACA8000
|
unkown
|
page readonly
|
|
|
|
213FE219000
|
unkown
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
1CC75B22000
|
unkown
|
page read and write
|
|
|
|
213FE381000
|
unkown
|
page read and write
|
|
|
|
7FF5206A9000
|
unkown
|
page readonly
|
|
|
|
213FE219000
|
unkown
|
page read and write
|
|
|
|
7FF5D085C000
|
unkown
|
page readonly
|
|
|
|
7FF51DB70000
|
unkown
|
page readonly
|
|
|
|
26097C00000
|
unkown
|
page readonly
|
|
|
|
7678BFD000
|
unkown
|
page read and write
|
|
|
|
7FF51DB8F000
|
unkown
|
page readonly
|
|
|
|
2ADE2640000
|
unkown
|
page readonly
|
|
|
|
26097940000
|
unkown
|
page readonly
|
|
|
|
677ADFE000
|
unkown
|
page read and write
|
|
|
|
2038AC5C000
|
unkown
|
page read and write
|
|
|
|
213FE019000
|
unkown
|
page read and write
|
|
|
|
213FE36A000
|
unkown
|
page read and write
|
|
|
|
213FDC51000
|
unkown
|
page read and write
|
|
|
|
213FE34C000
|
unkown
|
page read and write
|
|
|
|
7FFF8EED0000
|
unkown image
|
page readonly
|
|
|
|
18670A90000
|
unkown
|
page read and write
|
|
|
|
18670C99000
|
unkown
|
page read and write
|
|
|
|
1866BD00000
|
unkown
|
page read and write
|
|
|
|
18670BC0000
|
unkown
|
page read and write
|
|
|
|
7FF56AFFA000
|
unkown
|
page readonly
|
|
|
|
7FF520733000
|
unkown
|
page readonly
|
|
|
|
7FF5206AC000
|
unkown
|
page readonly
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
7FF51D4BE000
|
unkown
|
page readonly
|
|
|
|
7FF5D07DC000
|
unkown
|
page readonly
|
|
|
|
213FE2D7000
|
unkown
|
page read and write
|
|
|
|
1CC75BE2000
|
unkown
|
page read and write
|
|
|
|
DBB98E000
|
unkown
|
page read and write
|
|
|
|
6BD2EFF000
|
unkown
|
page read and write
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
7FF51DC6C000
|
unkown
|
page readonly
|
|
|
|
7FFF8CA11000
|
unkown image
|
page execute read
|
|
|
|
7FF51D479000
|
unkown
|
page readonly
|
|
|
|
7FF7F6BF3000
|
unkown image
|
page readonly
|
|
|
|
1EBD0D40000
|
unkown
|
page readonly
|
|
|
|
18670C1F000
|
unkown
|
page read and write
|
|
|
|
213FE381000
|
unkown
|
page read and write
|
|
|
|
7FF52062C000
|
unkown
|
page readonly
|
|
|
|
7FF58D6D1000
|
unkown
|
page readonly
|
|
|
|
7FF58D6C4000
|
unkown
|
page readonly
|
|
|
|
7FF53AD76000
|
unkown
|
page readonly
|
|
|
|
26097200000
|
unkown
|
page read and write
|
|
|
|
7FF5395B3000
|
unkown
|
page readonly
|
|
|
|
26097213000
|
unkown
|
page read and write
|
|
|
|
7FF5D006D000
|
unkown
|
page readonly
|
|
|
|
213FE33A000
|
unkown
|
page read and write
|
|
|
|
77ED0000
|
unkown image
|
page readonly
|
|
|
|
7FF51DBA4000
|
unkown
|
page readonly
|
|
|
|
1ECE39D0000
|
unkown
|
page write copy
|
|
|
|
2ADE279B000
|
heap default
|
page read and write
|
|
|
|
1CC75AEF000
|
heap default
|
page read and write
|
|
|
|
224DBAB0000
|
heap private
|
page read and write
|
|
|
|
50362000
|
unkown image
|
page write copy
|
|
|
|
2ADE25E0000
|
unkown
|
page readonly
|
|
|
|
7FF59AE9C000
|
unkown
|
page readonly
|
|
|
|
7FF7F6BD1000
|
unkown image
|
page execute read
|
|
|
|
7FF51D94F000
|
unkown
|
page readonly
|
|
|
|
7FF7F6C11000
|
unkown image
|
page read and write
|
|
|
|
1ECE1A99000
|
unkown
|
page read and write
|
|
|
|
7FF59ADBC000
|
unkown
|
page readonly
|
|
|
|
7FFF8EFCD000
|
unkown image
|
page readonly
|
|
|
|
677AFFF000
|
unkown
|
page read and write
|
|
|
|
1CC75B02000
|
unkown
|
page read and write
|
|
|
|
7FF5D03DB000
|
unkown
|
page readonly
|
|
|
|
7FF7F6BD0000
|
unkown image
|
page readonly
|
|
|
|
213FD2A2000
|
unkown
|
page read and write
|
|
|
|
2038AC31000
|
unkown
|
page read and write
|
|
|
|
1ECE19F0000
|
unkown
|
page read and write
|
|
|
|
1CC75BEB000
|
unkown
|
page read and write
|
|
|
|
7FF51DA35000
|
unkown
|
page readonly
|
|
|
|
7FF53951C000
|
unkown
|
page readonly
|
|
|
|
7FF51D42E000
|
unkown
|
page readonly
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
7FF52063B000
|
unkown
|
page readonly
|
|
|
|
7FF56B19C000
|
unkown
|
page readonly
|
|
|
|
213FE219000
|
unkown
|
page read and write
|
|
|
|
2038AC67000
|
unkown
|
page read and write
|
|
|
|
18670940000
|
unkown
|
page read and write
|
|
|
|
1866B629000
|
unkown
|
page read and write
|
|
|
|
7FF59AEB3000
|
unkown
|
page readonly
|
|
|
|
677B37A000
|
unkown
|
page read and write
|
|
|
|
7FF56B27C000
|
unkown
|
page readonly
|
|
|
|
1CC75DD0000
|
heap private
|
page read and write
|
|
|
|
2ADE4480000
|
heap private
|
page read and write
|
|
|
|
50328000
|
unkown image
|
page read and write
|
|
|
|
7FF51D98E000
|
unkown
|
page readonly
|
|
|
|
95FA77F000
|
unkown
|
page read and write
|
|
|
|
1607A7C000
|
unkown
|
page read and write
|
|
|
|
213FD230000
|
heap private
|
page read and write
|
|
|
|
18670B90000
|
unkown
|
page read and write
|
|
|
|
7FF5D07E9000
|
unkown
|
page readonly
|
|
|
|
7FF51DB44000
|
unkown
|
page readonly
|
|
|
|
7FF5394A0000
|
unkown
|
page readonly
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
213FE36B000
|
unkown
|
page read and write
|
|
|
|
213FDC51000
|
unkown
|
page read and write
|
|
|
|
1EBD0200000
|
unkown
|
page readonly
|
|
|
|
7FF56B180000
|
unkown
|
page readonly
|
|
|
|
7FF56B141000
|
unkown
|
page readonly
|
|
|
|
50360000
|
unkown image
|
page read and write
|
|
|
|
7FF53A594000
|
unkown
|
page readonly
|
|
|
|
213FDC2C000
|
unkown
|
page read and write
|
|
|
|
213FDC63000
|
unkown
|
page read and write
|
|
|
|
1866B400000
|
heap default
|
page read and write
|
|
|
|
2038AC41000
|
unkown
|
page read and write
|
|
|
|
18670C7E000
|
unkown
|
page read and write
|
|
|
|
677ABFA000
|
unkown
|
page read and write
|
|
|
|
7FF51DB00000
|
unkown
|
page readonly
|
|
|
|
213FE213000
|
unkown
|
page read and write
|
|
|
|
7FF56B202000
|
unkown
|
page readonly
|
|
|
|
77EFE000
|
unkown image
|
page readonly
|
|
|
|
213FE20D000
|
unkown
|
page read and write
|
|
|
|
767887E000
|
unkown
|
page read and write
|
|
|
|
1CC75AE0000
|
heap default
|
page read and write
|
|
|
|
1866C5B0000
|
unkown
|
page readonly
|
|
|
|
503A4000
|
unkown image
|
page readonly
|
|
|
|
7FF51D4C0000
|
unkown
|
page readonly
|
|
|
|
7FF5D0873000
|
unkown
|
page readonly
|
|
|
|
1EBD0029000
|
unkown
|
page read and write
|
|
|
|
1866B4F0000
|
unkown
|
page readonly
|
|
|
|
18670BC0000
|
unkown
|
page read and write
|
|
|
|
7FF58D719000
|
unkown
|
page readonly
|
|
|
|
7FF520645000
|
unkown
|
page readonly
|
|
|
|
1866C370000
|
unkown
|
page read and write
|
|
|
|
76789FF000
|
unkown
|
page read and write
|
|
|
|
18670C3F000
|
unkown
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
1ECE1C00000
|
unkown
|
page readonly
|
|
|
|
18670B5C000
|
unkown
|
page readonly
|
|
|
|
2038AC56000
|
unkown
|
page read and write
|
|
|
|
7FF5D01DC000
|
unkown
|
page readonly
|
|
|
|
18670AA4000
|
unkown
|
page read and write
|
|
|
|
260974D0000
|
unkown
|
page readonly
|
|
|
|
7FF58D6E1000
|
unkown
|
page readonly
|
|
|
|
7FF5D0703000
|
unkown
|
page readonly
|
|
|
|
7FF520650000
|
unkown
|
page readonly
|
|
|
|
1ECE1B02000
|
unkown
|
page read and write
|
|
|
|
1866B702000
|
unkown
|
page read and write
|
|
|
|
7FF520600000
|
unkown
|
page readonly
|
|
|
|
7FF51DBF2000
|
unkown
|
page readonly
|
|
|
|
213FE4C6000
|
unkown
|
page read and write
|
|
|
|
1866BD02000
|
unkown
|
page read and write
|
|
|
|
2038AC47000
|
unkown
|
page read and write
|
|
|
|
7FF51DBB9000
|
unkown
|
page readonly
|
|
|
|
50017000
|
unkown image
|
page readonly
|
|
|
|
7FF520616000
|
unkown
|
page readonly
|
|
|
|
18670A60000
|
unkown
|
page read and write
|
|
|
|
1866B625000
|
unkown
|
page read and write
|
|
|
|
50011000
|
unkown image
|
page execute read
|
|
|
|
7FFF8F1C8000
|
unkown image
|
page read and write
|
|
|
|
7FF5D0008000
|
unkown
|
page readonly
|
|
|
|
7FF51DB50000
|
unkown
|
page readonly
|
|
|
|
2038AC77000
|
unkown
|
page read and write
|
|
|
|
213FD241000
|
unkown
|
page read and write
|
|
|
|
7FF5D068A000
|
unkown
|
page readonly
|
|
|
|
767877F000
|
unkown
|
page read and write
|
|
|
|
18670E10000
|
unkown
|
page readonly
|
|
|
|
7FF7F6BD1000
|
unkown image
|
page execute read
|
|
|
|
7FF58CF8C000
|
unkown
|
page readonly
|
|
|
|
18670B30000
|
unkown
|
page read and write
|
|
|
|
5035D000
|
unkown image
|
page read and write
|
|
|
|
7FF5D044A000
|
unkown
|
page readonly
|
|
|
|
5036A000
|
unkown image
|
page write copy
|
|
|
|
18670A68000
|
unkown
|
page read and write
|
|
|
|
2038AC51000
|
unkown
|
page read and write
|
|
|
|
7FF520733000
|
unkown
|
page readonly
|
|
|
|
2ADE2950000
|
heap private
|
page read and write
|
|
|
|
7FF51D484000
|
unkown
|
page readonly
|
|
|
|
50026000
|
unkown image
|
page readonly
|
|
|
|
50020000
|
unkown image
|
page readonly
|
|
|
|
7FFF8EF11000
|
unkown image
|
page execute read
|
|
|
|
2ADE4120000
|
unkown
|
page readonly
|
|
|
|
7FF5D0605000
|
unkown
|
page readonly
|
|
|
|
7FF56ADE8000
|
unkown
|
page readonly
|
|
|
|
7FF51DB7B000
|
unkown
|
page readonly
|
|
|
|
95FA37F000
|
unkown
|
page read and write
|
|
|
|
1866B5E0000
|
unkown
|
page read and write
|
|
|
|
7FF539536000
|
unkown
|
page readonly
|
|
|
|
24677A5B000
|
unkown
|
page read and write
|
|
|
|
7FF59ADBF000
|
unkown
|
page readonly
|
|
|
|
7FF5D07A1000
|
unkown
|
page readonly
|
|
|
|
1CC75B37000
|
unkown
|
page read and write
|
|
|
|
2ADE2955000
|
heap private
|
page read and write
|
|
|
|
7FFF8F14F000
|
unkown image
|
page readonly
|
|
|
|
7FF52071C000
|
unkown
|
page readonly
|
|
|
|
1EBD0000000
|
unkown
|
page read and write
|
|
|
|
7FF53AD19000
|
unkown
|
page readonly
|
|
|
|
224DC270000
|
unkown
|
page read and write
|
|
|
|
2038AC84000
|
unkown
|
page read and write
|
|
|
|
7FF5394C8000
|
unkown
|
page readonly
|
|
|
|
1866B673000
|
unkown
|
page read and write
|
|
|
|
95FA47D000
|
unkown
|
page read and write
|
|
|
|
7FF7F6C03000
|
unkown image
|
page read and write
|
|
|
|
7FF59AA11000
|
unkown
|
page readonly
|
|
|
|
224DC2B0000
|
unkown
|
page read and write
|
|
|
|
28D88FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D0010000
|
unkown
|
page readonly
|
|
|
|
DBC07F000
|
unkown
|
page read and write
|
|
|
|
7FF56B1A5000
|
unkown
|
page readonly
|
|
|
|
1866B671000
|
unkown
|
page read and write
|
|
|
|
7FF53ACFC000
|
unkown
|
page readonly
|
|
|
|
7FF51DC66000
|
unkown
|
page readonly
|
|
|
|
7FFF8EFE0000
|
unkown image
|
page readonly
|
|
|
|
7FF51D991000
|
unkown
|
page readonly
|
|
|
|
7FF7F6C03000
|
unkown image
|
page write copy
|
|
|
|
2ADE2750000
|
unkown
|
page readonly
|
|
|
|
24677CD0000
|
unkown
|
page readonly
|
|
|
|
213FD3D0000
|
heap private
|
page read and write
|
|
|
|
7FF51DB95000
|
unkown
|
page readonly
|
|
|
|
7FF59ADD0000
|
unkown
|
page readonly
|
|
|
|
7FF5394D0000
|
unkown
|
page readonly
|
|
|
|
2038AC40000
|
unkown
|
page read and write
|
|
|
|
6BD2BFD000
|
unkown
|
page read and write
|
|
|
|
213FD9D4000
|
unkown
|
page read and write
|
|
|
|
95FA57F000
|
unkown
|
page read and write
|
|
|
|
7FF539312000
|
unkown
|
page readonly
|
|
|
|
1866B676000
|
unkown
|
page read and write
|
|
|
|
7FF51DBC1000
|
unkown
|
page readonly
|
|
|
|
1ECE33F0000
|
unkown
|
page readonly
|
|
|
|
7FF7F6BD0000
|
unkown image
|
page readonly
|
|
|
|
1866B3A0000
|
heap private
|
page read and write
|
|
|
|
50060000
|
unkown image
|
page readonly
|
|
|
|
7FF58D4B9000
|
unkown
|
page readonly
|
|
|
|
1866B699000
|
unkown
|
page read and write
|
|
|
|
7FF5D07EC000
|
unkown
|
page readonly
|
|
|
|
18670CBB000
|
unkown
|
page read and write
|
|
|
|
50374000
|
unkown image
|
page write copy
|
|
|
|
677A6DC000
|
unkown
|
page read and write
|
|
|
|
7FF539365000
|
unkown
|
page readonly
|
|
|
|
7FF59ADC8000
|
unkown
|
page readonly
|
|
|
|
7FF520654000
|
unkown
|
page readonly
|
|
|
|
213FE213000
|
unkown
|
page read and write
|
|
|
|
76786FE000
|
unkown
|
page read and write
|
|
|
|
224DBC3D000
|
unkown
|
page read and write
|
|
|
|
77F30000
|
unkown image
|
page readonly
|
|
|
|
7FFF8F1C6000
|
unkown image
|
page write copy
|
|
|
|
26097400000
|
unkown
|
page readonly
|
|
|
|
7FF56B209000
|
unkown
|
page readonly
|
|
|
|
77F1A000
|
unkown image
|
page readonly
|
|
|
|
2ADE4130000
|
unkown
|
page readonly
|
|
|
|
7FF59AE05000
|
unkown
|
page readonly
|
|
|
|
5004E000
|
unkown image
|
page readonly
|
|
|
|
1EBD00C2000
|
unkown
|
page read and write
|
|
|
|
7FF56ADF9000
|
unkown
|
page readonly
|
|
|
|
7FF56B05D000
|
unkown
|
page readonly
|
|
|
|
7FF53ACE5000
|
unkown
|
page readonly
|
|
|
|
7FF7F6BD0000
|
unkown image
|
page readonly
|
|
|
|
213FB890000
|
heap default
|
page read and write
|
|
|
|
50329000
|
unkown image
|
page write copy
|
|
|
|
213FDF5A000
|
unkown
|
page read and write
|
|
|
|
18670A6E000
|
unkown
|
page read and write
|
|
|
|
7FF5D0873000
|
unkown
|
page readonly
|
|
|
|
7FF5394D4000
|
unkown
|
page readonly
|
|
|
|
77F10000
|
unkown image
|
page readonly
|
|
|
|
18670B58000
|
unkown
|
page write copy
|
|
|
|
7FF51D96D000
|
unkown
|
page readonly
|
|
|
|
224DC260000
|
unkown
|
page readonly
|
|
|
|
1ECE1A65000
|
unkown
|
page read and write
|
|
|
|
7FF5D005A000
|
unkown
|
page readonly
|
|
|
|
7FF5D03C8000
|
unkown
|
page readonly
|
|
|
|
1866B656000
|
unkown
|
page read and write
|
|
|
|
7FF53AD16000
|
unkown
|
page readonly
|
|
|
|
95FA17E000
|
unkown
|
page read and write
|
|
|
|
1866B5D0000
|
unkown
|
page read and write
|
|
|
|
24677A76000
|
unkown
|
page read and write
|
|
|
|
213FE4C6000
|
unkown
|
page read and write
|
|
|
|
5001A000
|
unkown image
|
page read and write
|
|
|
|
7FF51D9E2000
|
unkown
|
page readonly
|
|
|
|
2038AD02000
|
unkown
|
page read and write
|
|
|
|
7FFF8CB94000
|
unkown image
|
page readonly
|
|
|
|
1EBD0680000
|
unkown
|
page read and write
|
|
|
|
7FF5206B6000
|
unkown
|
page readonly
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
213FE33A000
|
unkown
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
7FF58D64D000
|
unkown
|
page readonly
|
|
|
|
213FD9CF000
|
unkown
|
page read and write
|
|
|
|
1ECE1840000
|
heap private
|
page read and write
|
|
|
|
767847B000
|
unkown
|
page read and write
|
|
|
|
7FF59AD84000
|
unkown
|
page readonly
|
|
|
|
7FF58D393000
|
unkown
|
page readonly
|
|
|
|
7FFF8CA10000
|
unkown image
|
page readonly
|
|
|
|
5033B000
|
unkown image
|
page write copy
|
|
|
|
24677960000
|
heap private
|
page read and write
|
|
|
|
7FF51D873000
|
unkown
|
page readonly
|
|
|
|
7FF58CFDB000
|
unkown
|
page readonly
|
|
|
|
1ECE33E0000
|
unkown
|
page readonly
|
|
|
|
213FE4A6000
|
unkown
|
page read and write
|
|
|
|
213FE24F000
|
unkown
|
page read and write
|
|
|
|
7FF59ADD4000
|
unkown
|
page readonly
|
|
|
|
7FF59AB9C000
|
unkown
|
page readonly
|
|
|
|
26097256000
|
unkown
|
page read and write
|
|
|
|
7FF5D063D000
|
unkown
|
page readonly
|
|
|
|
2038AC6D000
|
unkown
|
page read and write
|
|
|
|
7FF56B1B4000
|
unkown
|
page readonly
|
|
|
|
95FA87F000
|
unkown
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
1866BBF0000
|
unkown
|
page read and write
|
|
|
|
2038AC7A000
|
unkown
|
page read and write
|
|
|
|
24677A60000
|
unkown
|
page read and write
|
|
|
|
77F11000
|
unkown image
|
page execute read
|
|
|
|
1ECE1A89000
|
unkown
|
page read and write
|
|
|
|
1EBD0670000
|
unkown
|
page readonly
|
|
|
|
1866B688000
|
unkown
|
page read and write
|
|
|
|
7FF58D6D9000
|
unkown
|
page readonly
|
|
|
|
1607FFF000
|
unkown
|
page read and write
|
|
|
|
18670B44000
|
unkown
|
page readonly
|
|
|
|
18670A90000
|
unkown
|
page read and write
|
|
|
|
24678140000
|
unkown
|
page readonly
|
|
|
|
7FF520648000
|
unkown
|
page readonly
|
|
|
|
77EFC000
|
unkown image
|
page read and write
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
677B27F000
|
unkown
|
page read and write
|
|
|
|
213FB860000
|
unkown
|
page readonly
|
|
|
|
50365000
|
unkown image
|
page read and write
|
|
|
|
7FF59AE29000
|
unkown
|
page readonly
|
|
|
|
7FF51DC06000
|
unkown
|
page readonly
|
|
|
|
7FF51DBA0000
|
unkown
|
page readonly
|
|
|
|
213FDFB9000
|
unkown
|
page read and write
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
7FF539345000
|
unkown
|
page readonly
|
|
|
|
5035F000
|
unkown image
|
page write copy
|
|
|
|
213FE204000
|
unkown
|
page read and write
|
|
|
|
2038AC4D000
|
unkown
|
page read and write
|
|
|
|
7678C7E000
|
unkown
|
page read and write
|
|
|
|
2038AC3A000
|
unkown
|
page read and write
|
|
|
|
7FF58D6B6000
|
unkown
|
page readonly
|
|
|
|
5004A000
|
unkown image
|
page read and write
|
|
|
|
18670C00000
|
unkown
|
page read and write
|
|
|
|
7FFF8EFE0000
|
unkown image
|
page readonly
|
|
|
|
213FDC51000
|
unkown
|
page read and write
|
|
|
|
224DBE00000
|
unkown
|
page readonly
|
|
|
|
7FF51D97F000
|
unkown
|
page readonly
|
|
|
|
1CC75CA5000
|
unkown
|
page read and write
|
|
|
|
DBBD7E000
|
unkown
|
page read and write
|
|
|
|
213FB8A0000
|
heap default
|
page read and write
|
|
|
|
7FFF8EEF2000
|
unkown image
|
page readonly
|
|
|
|
1866BD18000
|
unkown
|
page read and write
|
|
|
|
1CC75CA5000
|
unkown
|
page read and write
|
|
|
|
16081FC000
|
unkown
|
page read and write
|
|
|
|
2ADE2780000
|
heap private
|
page read and write
|
|
|
|
1EBD05A0000
|
unkown
|
page readonly
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
1ECE19A0000
|
unkown
|
page read and write
|
|
|
|
6BD2CFE000
|
unkown
|
page read and write
|
|
|
|
7FF5203E5000
|
unkown
|
page readonly
|
|
|
|
7FFF8EFCA000
|
unkown image
|
page read and write
|
|
|
|
7FF51D424000
|
unkown
|
page readonly
|
|
|
|
213FB830000
|
unkown
|
page read and write
|
|
|
|
213FDA6E000
|
unkown
|
page read and write
|
|
|
|
18670EE0000
|
unkown
|
page readonly
|
|
|
|
7FF520641000
|
unkown
|
page readonly
|
|
|
|
213FE34C000
|
unkown
|
page read and write
|
|
|
|
224DBC58000
|
unkown
|
page read and write
|
|
|
|
7FF53917D000
|
unkown
|
page readonly
|
|
|
|
7FF53ACB4000
|
unkown
|
page readonly
|
|
|
|
5031C000
|
unkown image
|
page read and write
|
|
|
|
7FFF8F1CA000
|
unkown image
|
page read and write
|
|
|
|
1CC75B19000
|
unkown
|
page read and write
|
|
|
|
213FD9E4000
|
unkown
|
page read and write
|
|
|
|
213FDA24000
|
unkown
|
page read and write
|
|
|
|
5001E000
|
unkown image
|
page readonly
|
|
|
|
50385000
|
unkown image
|
page read and write
|
|
|
|
1CC75CA5000
|
unkown
|
page read and write
|
|
|
|
18670A80000
|
unkown
|
page read and write
|
|
|
|
7FF59AE22000
|
unkown
|
page readonly
|
|
|
|
7FF59AD2C000
|
unkown
|
page readonly
|
|
|
|
1866B5C0000
|
unkown
|
page readonly
|
|
|
|
677B0FF000
|
unkown
|
page read and write
|
|
|
|
7FF51D9B5000
|
unkown
|
page readonly
|
|
|
|
213FD200000
|
unkown
|
page read and write
|
|
|
|
18670B34000
|
unkown
|
page readonly
|
|
|
|
7FF59ADA9000
|
unkown
|
page readonly
|
|
|
|
246779C0000
|
heap default
|
page read and write
|
|
|
|
7FFF8CB2E000
|
unkown image
|
page readonly
|
|
|
|
1ECE1A74000
|
unkown
|
page read and write
|
|
|
|
213FDD20000
|
unkown
|
page readonly
|
|
|
|
1ECE1A20000
|
unkown
|
page read and write
|
|
|
|
7FF5D0866000
|
unkown
|
page readonly
|
|
|
|
26097202000
|
unkown
|
page read and write
|
|
|
|
7FF53A519000
|
unkown
|
page readonly
|
|
|
|
7FFF8EFE1000
|
unkown image
|
page execute read
|
|
|
|
224DBB20000
|
unkown
|
page readonly
|
|
|
|
7FFF8F1D0000
|
unkown image
|
page readonly
|
|
|
|
1ECE19C0000
|
unkown
|
page read and write
|
|
|
|
50030000
|
unkown image
|
page readonly
|
|
|
|
C85A37E000
|
unkown
|
page read and write
|
|
|
|
7FF5394C5000
|
unkown
|
page readonly
|
|
|
|
26097264000
|
unkown
|
page read and write
|
|
|
|
677A75F000
|
unkown
|
page read and write
|
|
|
|
24678060000
|
unkown
|
page readonly
|
|
|
|
7FF56B1E5000
|
unkown
|
page readonly
|
|
|
|
2038AC57000
|
unkown
|
page read and write
|
|
|
|
2ADE4140000
|
unkown
|
page readonly
|
|
|
|
7FF51DA71000
|
unkown
|
page readonly
|
|
|
|
7FF5393A1000
|
unkown
|
page readonly
|
|
|
|
1866B6B7000
|
unkown
|
page read and write
|
|
|
|
677B17E000
|
unkown
|
page read and write
|
|
|
|
1ECE33A0000
|
unkown
|
page read and write
|
|
|
|
7FF5394E1000
|
unkown
|
page readonly
|
|
|
|
7FF539529000
|
unkown
|
page readonly
|
|
|
|
246779F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D0761000
|
unkown
|
page readonly
|
|
|
|
7FF51D816000
|
unkown
|
page readonly
|
|
|
|
1866C560000
|
unkown
|
page readonly
|
|
|
|
1ECE1B00000
|
unkown
|
page read and write
|
|
|
|
18670B40000
|
unkown
|
page readonly
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
FD1C07E000
|
unkown
|
page read and write
|
|
|
|
18670CB9000
|
unkown
|
page read and write
|
|
|
|
5033D000
|
unkown image
|
page read and write
|
|
|
|
7FF520716000
|
unkown
|
page readonly
|
|
|
|
1ECE1B13000
|
unkown
|
page read and write
|
|
|
|
50331000
|
unkown image
|
page write copy
|
|
|
|
18670C2D000
|
unkown
|
page read and write
|
|
|
|
7FF51DB5C000
|
unkown
|
page readonly
|
|
|
|
1EBD008A000
|
unkown
|
page read and write
|
|
|
|
7FF7F6C03000
|
unkown image
|
page write copy
|
|
|
|
7FFF8CB86000
|
unkown image
|
page read and write
|
|
|
|
7FF7F6BF3000
|
unkown image
|
page readonly
|
|
|
|
50060000
|
unkown image
|
page readonly
|
|
|
|
7FF51DB98000
|
unkown
|
page readonly
|
|
|
|
24677A02000
|
unkown
|
page read and write
|
|
|
|
1EBD06B0000
|
unkown
|
page readonly
|
|
|
|
1866C8F0000
|
unkown
|
page read and write
|
|
|
|
213FE4A6000
|
unkown
|
page read and write
|
|
|
|
7FF5D0785000
|
unkown
|
page readonly
|
|
|
|
213FD220000
|
unkown
|
page execute and read and write
|
|
|
|
213FDE60000
|
unkown
|
page read and write
|
|
|
|
28D8515000
|
unkown
|
page read and write
|
|
|
|
2038AC6F000
|
unkown
|
page read and write
|
|
|
|
2038AAA0000
|
unkown
|
page readonly
|
|
|
|
1EBD0044000
|
unkown
|
page read and write
|
|
|
|
213FD515000
|
unkown
|
page read and write
|
|
|
|
7FF5D053F000
|
unkown
|
page readonly
|
|
|
|
213FE4A6000
|
unkown
|
page read and write
|
|
|
|
18670910000
|
unkown
|
page readonly
|
|
|
|
24677A66000
|
unkown
|
page read and write
|
|
|
|
1CC75B08000
|
unkown
|
page read and write
|
|
|
|
1866B66C000
|
unkown
|
page read and write
|
|
|
|
24677A41000
|
unkown
|
page read and write
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
1866B600000
|
unkown
|
page read and write
|
|
|
|
7FF51D7E9000
|
unkown
|
page readonly
|
|
|
|
18670C85000
|
unkown
|
page read and write
|
|
|
|
7FF56AACC000
|
unkown
|
page readonly
|
|
|
|
1607DFF000
|
unkown
|
page read and write
|
|
|
|
7FF56AF59000
|
unkown
|
page readonly
|
|
|
|
18670BB0000
|
unkown
|
page read and write
|
|
|
|
24677A29000
|
unkown
|
page read and write
|
|
|
|
213FDC63000
|
unkown
|
page read and write
|
|
|
|
26097279000
|
unkown
|
page read and write
|
|
|
|
1866C570000
|
unkown
|
page readonly
|
|
|
|
7FF51D9AF000
|
unkown
|
page readonly
|
|
|
|
1ECE3600000
|
unkown
|
page read and write
|
|
|
|
1866C5A0000
|
unkown
|
page readonly
|
|
|
|
18670BA0000
|
unkown
|
page read and write
|
|
|
|
7FF51D949000
|
unkown
|
page readonly
|
|
|
|
18670BC0000
|
unkown
|
page read and write
|
|
|
|
15CA9FE000
|
unkown
|
page read and write
|
|
|
|
18670BC0000
|
unkown
|
page read and write
|
|
|
|
213FE446000
|
unkown
|
page read and write
|
|
|
|
2ADE2760000
|
unkown
|
page readonly
|
|
|
|
1CC75CA5000
|
unkown
|
page read and write
|
|
|
|
24677C00000
|
unkown
|
page readonly
|
|
|
|
7FF539505000
|
unkown
|
page readonly
|
|
|
|
224DBC29000
|
unkown
|
page read and write
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
7FF53AA18000
|
unkown
|
page readonly
|
|
|
|
7FF51DC75000
|
unkown
|
page readonly
|
|
|
|
7FF51DA2B000
|
unkown
|
page readonly
|
|
|
|
1CC75B64000
|
unkown
|
page read and write
|
|
|
|
7FF51DBEB000
|
unkown
|
page readonly
|
|
|
|
18670E20000
|
unkown
|
page readonly
|
|
|
|
7FF56B1A8000
|
unkown
|
page readonly
|
|
|
|
7FF56B1B0000
|
unkown
|
page readonly
|
|
|
|
213FE4C6000
|
unkown
|
page read and write
|
|
|
|
FD1BD7B000
|
unkown
|
page read and write
|
|
|
|
7FF5D07E2000
|
unkown
|
page readonly
|
|
|
|
7FF58D6F5000
|
unkown
|
page readonly
|
|
|
|
2038AC62000
|
unkown
|
page read and write
|
|
|
|
224DC190000
|
unkown
|
page readonly
|
|
|
|
1866BBF3000
|
unkown
|
page read and write
|
|
|
|
7FF58D796000
|
unkown
|
page readonly
|
|
|
|
1866B713000
|
unkown
|
page read and write
|
|
|
|
7FF51D4C7000
|
unkown
|
page readonly
|
|
|
|
677AEFB000
|
unkown
|
page read and write
|
|
|
|
50061000
|
unkown image
|
page execute read
|
|
|
|
7FF59AE2C000
|
unkown
|
page readonly
|
|
|
|
1CC75AF8000
|
unkown
|
page read and write
|
|
|
|
95F9FFB000
|
unkown
|
page read and write
|
|
|
|
18670C87000
|
unkown
|
page read and write
|
|
|
|
7FF59AA7D000
|
unkown
|
page readonly
|
|
|
|
1866BD59000
|
unkown
|
page read and write
|
|
|
|
7FF5D00AB000
|
unkown
|
page readonly
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
213FDC51000
|
unkown
|
page read and write
|
|
|
|
7FF5D0794000
|
unkown
|
page readonly
|
|
|
|
28D89FF000
|
unkown
|
page read and write
|
|
|
|
224DC2A0000
|
unkown
|
page read and write
|
|
|
|
7FF59ADE9000
|
unkown
|
page readonly
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
7FF51DC83000
|
unkown
|
page readonly
|
|
|
|
7FF51DBD5000
|
unkown
|
page readonly
|
|
|
|
1866C580000
|
unkown
|
page readonly
|
|
|
|
7FF7F6C11000
|
unkown image
|
page read and write
|
|
|
|
7FF7F6C13000
|
unkown image
|
page readonly
|
|
|
|
7FF51DBB1000
|
unkown
|
page readonly
|
|
|
|
7FF5394AC000
|
unkown
|
page readonly
|
|
|
|
213FE33A000
|
unkown
|
page read and write
|
|
|
|
24677B02000
|
unkown
|
page read and write
|
|
|
|
224DBC02000
|
unkown
|
page read and write
|
|
|
|
26097268000
|
unkown
|
page read and write
|
|
|
|
224DBBF0000
|
unkown
|
page readonly
|
|
|
|
7FF539596000
|
unkown
|
page readonly
|
|
|
|
18670C62000
|
unkown
|
page read and write
|
|
|
|
1CC75AF5000
|
unkown
|
page read and write
|
|
|
|
50338000
|
unkown image
|
page read and write
|
|
|
|
26097190000
|
heap private
|
page read and write
|
|
|
|
18670B80000
|
unkown
|
page read and write
|
|
|
|
1CC75AF5000
|
unkown
|
page read and write
|
|
|
|
213FDC2C000
|
unkown
|
page read and write
|
|
|
|
7FF7F6C13000
|
unkown image
|
page readonly
|
|
|
|
7FF59ADC5000
|
unkown
|
page readonly
|
|
|
|
7FFF8EED1000
|
unkown image
|
page execute read
|
|
|
|
18670B30000
|
unkown
|
page write copy
|
|
|
|
50323000
|
unkown image
|
page write copy
|
|
|
|
2038AB70000
|
unkown
|
page readonly
|
|
|
|
7FF539522000
|
unkown
|
page readonly
|
|
|
|
7FFF8EEFB000
|
unkown image
|
page read and write
|
|
|
|
2038AC00000
|
unkown
|
page read and write
|
|
|
|
1866BC15000
|
unkown
|
page read and write
|
|
|
|
1866C390000
|
unkown
|
page read and write
|
|
|
|
2038AC2A000
|
unkown
|
page read and write
|
|
|
|
213FD235000
|
heap private
|
page read and write
|
|
|
|
7FF5D0072000
|
unkown
|
page readonly
|
|
|
|
77F41000
|
unkown image
|
page readonly
|
|
|
|
1CC75B26000
|
unkown
|
page read and write
|
|
|
|
1ECE1A56000
|
unkown
|
page read and write
|
|
|
|
7FF538D4A000
|
unkown
|
page readonly
|
|
|
|
7FF538D50000
|
unkown
|
page readonly
|
|
|
|
6BD25FC000
|
unkown
|
page read and write
|
|
|
|
2ADE2960000
|
unkown
|
page readonly
|
|
|
|
7FFF8EFB1000
|
unkown image
|
page readonly
|
|
|
|
7FF7F6BF3000
|
unkown image
|
page readonly
|
|
|
|
1EBD0802000
|
unkown
|
page read and write
|
|
|
|
7FF520685000
|
unkown
|
page readonly
|
|
|
|
77F45000
|
unkown image
|
page read and write
|
|
|
|
18670A84000
|
unkown
|
page read and write
|
|
|
|
1ECE1A3D000
|
unkown
|
page read and write
|
|
|
|
1CC75BE1000
|
unkown
|
page read and write
|
|
|
|
1CC75B27000
|
unkown
|
page read and write
|
|
|
|
7FF58D7A3000
|
unkown
|
page readonly
|
|
|
|
1CC75B38000
|
unkown
|
page read and write
|
|
|
|
213FD986000
|
unkown
|
page read and write
|
|
|
|
7FF5205F4000
|
unkown
|
page readonly
|
|
|
|
1EBD06C0000
|
unkown
|
page write copy
|
|
|
|
7FF5D05DA000
|
unkown
|
page readonly
|
|
|
|
2038AA90000
|
heap default
|
page read and write
|
|
|
|
7FF51D7EB000
|
unkown
|
page readonly
|
|
|
|
1ECE1980000
|
unkown
|
page readonly
|
|
|
|
7FF7F6C13000
|
unkown image
|
page readonly
|
|
|
|
1CC75B25000
|
unkown
|
page read and write
|
|
|
|
2ADE2890000
|
unkown
|
page readonly
|
|
|
|
1EBCFEC0000
|
heap private
|
page read and write
|
|
|
|
213FE20D000
|
unkown
|
page read and write
|
|
|
|
7FF56B293000
|
unkown
|
page readonly
|
|
|
|
7FF53AD0C000
|
unkown
|
page readonly
|
|
|
|
7FF59AD43000
|
unkown
|
page readonly
|
|
|
|
7FF59ACC5000
|
unkown
|
page readonly
|
|
|
|
7FF5203E9000
|
unkown
|
page readonly
|
|
|
|
1866C360000
|
unkown
|
page read and write
|
|
|
|
18670A81000
|
unkown
|
page read and write
|
|
|
|
213FDFC3000
|
unkown
|
page read and write
|
|
|
|
213FD920000
|
unkown
|
page read and write
|
|
|
|
1866B6F9000
|
unkown
|
page read and write
|
|
|
|
7FFF8EEFD000
|
unkown image
|
page readonly
|
|
|
|
2038AA30000
|
heap private
|
page read and write
|
|
|
|
677B1FF000
|
unkown
|
page read and write
|
|
|
|
50010000
|
unkown image
|
page readonly
|
|
|
|
50352000
|
unkown image
|
page read and write
|
|
|
|
24677A00000
|
unkown
|
page read and write
|
|
|
|
7FF5D0661000
|
unkown
|
page readonly
|
|
|
|
7FF51D879000
|
unkown
|
page readonly
|
|
|
|
7FF7F6C03000
|
unkown image
|
page read and write
|
|
|
|
1866BD13000
|
unkown
|
page read and write
|
|
|
|
6BD2AFB000
|
unkown
|
page read and write
|
|
|
|
18670C15000
|
unkown
|
page read and write
|
|
|
|
1ECE1A57000
|
unkown
|
page read and write
|
|
|
|
224DC402000
|
unkown
|
page read and write
|
|
|
|
26097300000
|
unkown
|
page read and write
|
|
|
|
18670B70000
|
unkown
|
page read and write
|
|
|
|
2038AC42000
|
unkown
|
page read and write
|
|
|
|
7FF58D6B8000
|
unkown
|
page readonly
|
|
|
|
213FE3CC000
|
unkown
|
page read and write
|
|
|
|
213FBA60000
|
unkown
|
page readonly
|
|
|
|
1866BC02000
|
unkown
|
page read and write
|
|
|
|
1607EFF000
|
unkown
|
page read and write
|
|
|
|
224DBB10000
|
heap default
|
page read and write
|
|
|
|
7FF59AE1B000
|
unkown
|
page readonly
|
|
|
|
2038AC55000
|
unkown
|
page read and write
|
|
|
|
26097228000
|
unkown
|
page read and write
|
|
|
|
7FF53AD09000
|
unkown
|
page readonly
|
|
|
|
7FF5395B3000
|
unkown
|
page readonly
|
|
|
|
7FF59AE96000
|
unkown
|
page readonly
|
|
|
|
18670BC0000
|
unkown
|
page readonly
|
|
|
|
7FF58D734000
|
unkown
|
page readonly
|
|
|
|
50319000
|
unkown image
|
page write copy
|
|
|
|
95F9BEC000
|
unkown
|
page read and write
|
|
|
|
7FF53AAF2000
|
unkown
|
page readonly
|
|
|
|
18670CB7000
|
unkown
|
page read and write
|
|
|
|
7FF59AB8A000
|
unkown
|
page readonly
|
|
|
|
26097240000
|
unkown
|
page read and write
|
|
|
|
7FF5206A2000
|
unkown
|
page readonly
|
|
|
|
213FDA0C000
|
unkown
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
2038AC7E000
|
unkown
|
page read and write
|
|
|
|
213FE2D7000
|
unkown
|
page read and write
|
|
|
|
1CC75970000
|
unkown
|
page readonly
|
|
|
|
2038B402000
|
unkown
|
page read and write
|
|
|
|
7FF5206B1000
|
unkown
|
page readonly
|
|
|
|
1CC75AF8000
|
unkown
|
page read and write
|
|
|
|
224DC2A0000
|
unkown
|
page read and write
|
|
|
|
7FF5D0685000
|
unkown
|
page readonly
|
|
|
|
1866B613000
|
unkown
|
page read and write
|
|
|
|
28D851C000
|
unkown
|
page read and write
|
|
|
|
1EBD0102000
|
unkown
|
page read and write
|
|
|
|
213FE202000
|
unkown
|
page read and write
|
|
|
|
7FF53927F000
|
unkown
|
page readonly
|
|
|
|
2ADE2790000
|
heap default
|
page read and write
|
|
|
|
7DFD855C8000
|
unkown
|
page readonly
|
|
|
|
7FF52063F000
|
unkown
|
page readonly
|
|
|
|
7FFF8F1C5000
|
unkown image
|
page read and write
|
|
|
|
7FF58D70C000
|
unkown
|
page readonly
|
|
|
|
5035B000
|
unkown image
|
page write copy
|
|
|
|
1866B68D000
|
unkown
|
page read and write
|
|
|
|
7FF56B18C000
|
unkown
|
page readonly
|
|
|
|
2ADE42B0000
|
heap private
|
page read and write
|
|
|
|
2ADE2CF0000
|
unkown
|
page readonly
|
|
|
|
7FF58D647000
|
unkown
|
page readonly
|
|
|
|
213FE1F7000
|
unkown
|
page read and write
|
|
|
|
2038AC7B000
|
unkown
|
page read and write
|
|
|
|
246779D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D077C000
|
unkown
|
page readonly
|
|
|
|
5032E000
|
unkown image
|
page read and write
|
|
|
|
1866B4E0000
|
unkown
|
page readonly
|
|
|
|
1CC75AFC000
|
unkown
|
page read and write
|
|
|
|
7FF53AD93000
|
unkown
|
page readonly
|
|
|
|
7FF58D786000
|
unkown
|
page readonly
|
|
|
|
7FF53929D000
|
unkown
|
page readonly
|
|
|
|
7FF59AEB3000
|
unkown
|
page readonly
|
|
|
|
50351000
|
unkown image
|
page write copy
|
|
|
|
1866B6AF000
|
unkown
|
page read and write
|
|
|
|
1EBD0A00000
|
unkown
|
page readonly
|
|
|
|
7FF7F6BD1000
|
unkown image
|
page execute read
|
|
|
|
7FF53ACA5000
|
unkown
|
page readonly
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
1EBCFF30000
|
unkown
|
page readonly
|
|
|
|
7FF7F6BF3000
|
unkown image
|
page readonly
|
|
|
|
2038AC46000
|
unkown
|
page read and write
|
|
|
|
7FF51DA90000
|
unkown
|
page readonly
|
|
|
|
24677A70000
|
unkown
|
page read and write
|
|
|
|
7FF56AE5D000
|
unkown
|
page readonly
|
|
|
|
7FF51DBF9000
|
unkown
|
page readonly
|
|
|
|
7FF52044B000
|
unkown
|
page readonly
|
|
|
|
7FF56B216000
|
unkown
|
page readonly
|
|
|
|
18670CBD000
|
unkown
|
page read and write
|
|
|
|
2ADE2710000
|
unkown
|
page read and write
|
|
|
|
7FF539279000
|
unkown
|
page readonly
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
2038AC5A000
|
unkown
|
page read and write
|
|
|
|
7FF5394BB000
|
unkown
|
page readonly
|
|
|
|
FD1BE7E000
|
unkown
|
page read and write
|
|
|
|
6BD2DFD000
|
unkown
|
page read and write
|
|
|
|
26097313000
|
unkown
|
page read and write
|
|
|
|
213FD3E0000
|
unkown
|
page read and write
|
|
|
|
24678202000
|
unkown
|
page read and write
|
|
|
|
7FF51DB31000
|
unkown
|
page readonly
|
|
|
|
7FF58D643000
|
unkown
|
page readonly
|
|
|
|
7FFF8F1C9000
|
unkown image
|
page write copy
|
|
|
|
7FFF8CA10000
|
unkown image
|
page readonly
|
|
|
|
213FE446000
|
unkown
|
page read and write
|
|
|
|
C85A3FE000
|
unkown
|
page read and write
|
|
|
|
213FE217000
|
unkown
|
page read and write
|
|
|
|
213FDA24000
|
unkown
|
page read and write
|
|
|
|
2038AC6A000
|
unkown
|
page read and write
|
|
|
|
DBBF7F000
|
unkown
|
page read and write
|
|
|
|
18670950000
|
unkown
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
213FE07C000
|
unkown
|
page read and write
|
|
|
|
677AAF7000
|
unkown
|
page read and write
|
|
|
|
7FF58D6AF000
|
unkown
|
page readonly
|
|
|
|
2ADE27CC000
|
heap default
|
page read and write
|
|
|
|
7FF5D07C5000
|
unkown
|
page readonly
|
|
|
|
7FF51DC83000
|
unkown
|
page readonly
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
6BD21AC000
|
unkown
|
page read and write
|
|
|
|
2ADE2730000
|
unkown
|
page read and write
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
7FF59ACCA000
|
unkown
|
page readonly
|
|
|
|
213FE375000
|
unkown
|
page read and write
|
|
|
|
50030000
|
unkown image
|
page readonly
|
|
|
|
2038AC5F000
|
unkown
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
213FE11E000
|
unkown
|
page read and write
|
|
|
|
7FF53ACB0000
|
unkown
|
page readonly
|
|
|
|
7FF7F6C13000
|
unkown image
|
page readonly
|
|
|
|
213FE446000
|
unkown
|
page read and write
|
|
|
|
2038AC13000
|
unkown
|
page read and write
|
|
|
|
5036B000
|
unkown image
|
page read and write
|
|
|
|
7FF56ADFB000
|
unkown
|
page readonly
|
|
|
|
213FD5E0000
|
unkown
|
page readonly
|
|
|
|
7FF53952C000
|
unkown
|
page readonly
|
|
|
|
7FFF8EED0000
|
unkown image
|
page readonly
|
|
|
|
2038AB80000
|
unkown
|
page readonly
|
|
|
|
7FF59AEA5000
|
unkown
|
page readonly
|
|
|
|
1ECE1A46000
|
unkown
|
page read and write
|
|
|
|
213FB990000
|
unkown
|
page readonly
|
|
|
|
18670C9D000
|
unkown
|
page read and write
|
|
|
|
1EBD00CC000
|
unkown
|
page read and write
|
|
|
|
7FF56B143000
|
unkown
|
page readonly
|
|
|
|
1ECE1A13000
|
unkown
|
page read and write
|
|
|
|
7FF51DBFC000
|
unkown
|
page readonly
|
|
|
|
7FF51DA30000
|
unkown
|
page readonly
|
|
|
|
1ECE3402000
|
unkown
|
page read and write
|
|
|
|
7FF53AC9F000
|
unkown
|
page readonly
|
|
|
|
7FF5392A4000
|
unkown
|
page readonly
|
|
|
|
50021000
|
unkown image
|
page execute read
|
|
|
|
7FF56B1FB000
|
unkown
|
page readonly
|
|
|
|
213FE207000
|
unkown
|
page read and write
|
|
|
|
1CC75B0E000
|
unkown
|
page read and write
|
|
|
|
50209000
|
unkown image
|
page readonly
|
|
|
|
50377000
|
unkown image
|
page read and write
|
|
|
|
1ECE3680000
|
unkown
|
page readonly
|
|
|
|
1866BBD1000
|
unkown
|
page read and write
|
|
|
|
7FF7F6BD0000
|
unkown image
|
page readonly
|
|
|
|
1EBCFF20000
|
heap default
|
page read and write
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
1ECE1B18000
|
unkown
|
page read and write
|
|
|
|
1CC75B04000
|
unkown
|
page read and write
|
|
|
|
1866B800000
|
unkown
|
page readonly
|
|
|
|
1EBD0400000
|
unkown
|
page readonly
|
|
|
|
1866BD18000
|
unkown
|
page read and write
|
|
|
|
246779E0000
|
unkown
|
page readonly
|
|
|
|
18670C4C000
|
unkown
|
page read and write
|
|
|
|
7FFF8CB8F000
|
unkown image
|
page read and write
|
|
|
|
7FF56B285000
|
unkown
|
page readonly
|
|
|
|
260976D0000
|
unkown
|
page readonly
|
|
|
|
7FF59ADA0000
|
unkown
|
page readonly
|
|
|
|
1CC75BE5000
|
unkown
|
page read and write
|
|
|
|
7FF53AD24000
|
unkown
|
page readonly
|
|
|
|
5032D000
|
unkown image
|
page write copy
|
|
|
|
5037F000
|
unkown image
|
page write copy
|
|
|
|
7FF5D0513000
|
unkown
|
page readonly
|
|
|
|
7FF7F6BD1000
|
unkown image
|
page execute read
|
|
|
|
7FF58D71C000
|
unkown
|
page readonly
|
|
|
|
77ED1000
|
unkown image
|
page execute read
|
|
|
|
7FFF8CB88000
|
unkown image
|
page write copy
|
|
|
|
224DBC13000
|
unkown
|
page read and write
|
|
|
|
C85A47C000
|
unkown
|
page read and write
|
|
|
|
7FF5394E9000
|
unkown
|
page readonly
|
|
|
|
1ECE19F0000
|
unkown
|
page read and write
|
|
|
|
50366000
|
unkown image
|
page write copy
|
|
|
|
50368000
|
unkown image
|
page read and write
|
|
|
|
7FF58D726000
|
unkown
|
page readonly
|
|
|
|
7FFF8EF10000
|
unkown image
|
page readonly
|
|
|
|
26097A02000
|
unkown
|
page read and write
|
|
|
|
7FF520492000
|
unkown
|
page readonly
|
|
|
|
1CC75AF7000
|
unkown
|
page read and write
|
|
|
|
FD1BA7B000
|
unkown
|
page read and write
|
|
|
|
7FF59AD95000
|
unkown
|
page readonly
|
|
|
|
213FDC63000
|
unkown
|
page read and write
|
|
|
|
1866C590000
|
unkown
|
page readonly
|
|
|
|
24677A13000
|
unkown
|
page read and write
|
|
|
|
24678400000
|
unkown
|
page readonly
|
|
|
|
7FF58D345000
|
unkown
|
page readonly
|
|
|
|
1CC75A40000
|
unkown
|
page read and write
|
|
|
|
2038AC3D000
|
unkown
|
page read and write
|
|
|
|
213FDF5B000
|
unkown
|
page read and write
|
|
|
|
77F22000
|
unkown image
|
page readonly
|
|
|
|
213FE202000
|
unkown
|
page read and write
|
|
|
|
7FF539484000
|
unkown
|
page readonly
|
|
|
|
6BD27FF000
|
unkown
|
page read and write
|
|
|
|
7FF58D38A000
|
unkown
|
page readonly
|
|
|
|
7FF53AD02000
|
unkown
|
page readonly
|
|
|
|
50321000
|
unkown image
|
page write copy
|
|
|
|
1866B63D000
|
unkown
|
page read and write
|
|
|
|
7FF56B20C000
|
unkown
|
page readonly
|
|
|
|
1EBD0113000
|
unkown
|
page read and write
|
|
|
|
213FE20D000
|
unkown
|
page read and write
|
|
|
|
1ECE1A88000
|
unkown
|
page read and write
|
|
|
|
77F10000
|
unkown image
|
page readonly
|
|
|
|
7FF59A652000
|
unkown
|
page readonly
|
|
|
|
7FF5D07F6000
|
unkown
|
page readonly
|
|
|
|
1CC75BD7000
|
unkown
|
page read and write
|
|
|
|
7FF5395A5000
|
unkown
|
page readonly
|
|
|
|
2038AC58000
|
unkown
|
page read and write
|
|
|
|
213FB7E0000
|
unkown
|
page readonly
|
|
|
|
1866BD59000
|
unkown
|
page read and write
|
|
|
|
224DBD02000
|
unkown
|
page read and write
|
|
|
|
677ACF9000
|
unkown
|
page read and write
|
|
|
|
260971F0000
|
heap default
|
page read and write
|
|
There are 982 hidden memdumps, click here to show them.