Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
mormanti.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\edb.log
|
data
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
|
Extensible storage engine DataBase, version 0x620, checksum 0x0656ce7e, page size 16384, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCircular.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl
|
data
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
|
data
|
modified
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\mormanti.exe
|
'C:\Users\user\Desktop\mormanti.exe'
|
|
|
|
C:\Windows\SysWOW64\msmpeg2vdec\eventvwr.exe
|
C:\Windows\SysWOW64\msmpeg2vdec\eventvwr.exe
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k unistacksvcgroup
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k NetworkService -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
|
|
|
|
C:\Windows\System32\SgrmBroker.exe
|
C:\Windows\system32\SgrmBroker.exe
|
|
|
|
C:\Program Files\Windows Defender\MpCmdRun.exe
|
'C:\Program Files\Windows Defender\mpcmdrun.exe' -wdenable
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
There are 5 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://68.183.170.114/nFzrf7w0/EO2pZ/MQ0xve/
|
unknown
|
|
|
|
https://fs.microsoft.c
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Driving
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Traffic/Incidents/
|
unknown
|
|
|
|
https://t0.tiles.ditu.live.com/tiles/gen
|
unknown
|
|
|
|
http://68.183.170.114:8080/nFzrf7w0/EO2pZ/MQ0xve/
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Walking
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
|
unknown
|
|
|
|
http://72.47.248.48:7080/VTzYrEpbArBozqZBhS/
|
unknown
|
|
|
|
http://66.228.49.173:8080/TyLIHl4nuj0XCeB/C12IKmccuoQw2U92z/s(KF
|
unknown
|
|
|
|
http://66.228.49.173/TyLIHl4nuj0XCeB/C12IKmccuoQw2U92z/
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
http://149.62.173.247:8080/kH8ALNiaGV/5bEuMKuJNKlslD3n/rvXy2RpDwZlslOQBeY7/BCLTdgbwF6J8vsIGfDq/jZ9iV
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
|
unknown
|
|
|
|
http://68.183.170.114:8080/nFzrf7w0/EO2pZ/MQ0xve/c
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
|
unknown
|
|
|
|
http://66.228.49.173:8080/TyLIHl4nuj0XCeB/C12IKmccuoQw2U92z/
|
unknown
|
|
|
|
https://appexmapsappupdate.blob.core.windows.net
|
unknown
|
|
|
|
http://www.bingmapsportal.com
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
http://72.47.248.48:7080/VTzYrEpbArBozqZBhS/CL:
|
unknown
|
|
|
|
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
http://149.62.173.247/kH8ALNiaGV/5bEuMKuJNKlslD3n/rvXy2RpDwZlslOQBeY7/BCLTdgbwF6J8vsIGfDq/jZ9iV8xFle
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
|
unknown
|
|
|
|
https://%s.xboxlive.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Locations
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dynamic.t
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Transit
|
unknown
|
|
|
|
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
|
unknown
|
|
|
|
http://72.47.248.48:7080/VTzYrEpbArBozqZBhS/6O
|
unknown
|
|
|
|
http://68.183.170.114:8080/nFzrf7w0/EO2pZ/MQ0xve/:
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
http://58.171.153.81/j4XmHhlvX7h4pe/uu11HumRcyQn/3XzJ/ymPM07W/vKmfGodTznrrD/
|
unknown
|
|
|
|
https://activity.windows.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Locations
|
unknown
|
|
|
|
https://%s.dnet.xboxlive.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
|
unknown
|
|
There are 42 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
149.62.173.247
|
unknown
|
Spain
|
|
|
|
191.182.6.118
|
unknown
|
Brazil
|
|
|
|
104.131.103.37
|
unknown
|
United States
|
|
|
|
204.225.249.100
|
unknown
|
Canada
|
|
|
|
94.176.234.118
|
unknown
|
Lithuania
|
|
|
|
70.32.84.74
|
unknown
|
United States
|
|
|
|
177.73.0.98
|
unknown
|
Brazil
|
|
|
|
12.162.84.2
|
unknown
|
United States
|
|
|
|
116.125.120.88
|
unknown
|
Korea Republic of
|
|
|
|
58.171.153.81
|
unknown
|
Australia
|
|
|
|
170.81.48.2
|
unknown
|
Brazil
|
|
|
|
219.92.13.25
|
unknown
|
Malaysia
|
|
|
|
202.62.39.111
|
unknown
|
Cambodia
|
|
|
|
209.236.123.42
|
unknown
|
United States
|
|
|
|
213.181.91.224
|
unknown
|
Spain
|
|
|
|
5.196.35.138
|
unknown
|
France
|
|
|
|
187.162.248.237
|
unknown
|
Mexico
|
|
|
|
189.2.177.210
|
unknown
|
Brazil
|
|
|
|
93.151.186.85
|
unknown
|
Italy
|
|
|
|
217.199.160.224
|
unknown
|
United Kingdom
|
|
|
|
114.109.179.60
|
unknown
|
Thailand
|
|
|
|
143.0.87.101
|
unknown
|
Brazil
|
|
|
|
186.103.141.250
|
unknown
|
Chile
|
|
|
|
77.90.136.129
|
unknown
|
Germany
|
|
|
|
181.129.96.162
|
unknown
|
Colombia
|
|
|
|
50.28.51.143
|
unknown
|
United States
|
|
|
|
68.183.190.199
|
unknown
|
United States
|
|
|
|
94.206.45.18
|
unknown
|
United Arab Emirates
|
|
|
|
190.17.195.202
|
unknown
|
Argentina
|
|
|
|
73.116.193.136
|
unknown
|
United States
|
|
|
|
82.76.111.249
|
unknown
|
Romania
|
|
|
|
189.194.58.119
|
unknown
|
Mexico
|
|
|
|
80.249.176.206
|
unknown
|
Russian Federation
|
|
|
|
145.236.8.174
|
unknown
|
Hungary
|
|
|
|
191.99.160.58
|
unknown
|
Ecuador
|
|
|
|
217.13.106.14
|
unknown
|
Hungary
|
|
|
|
147.91.184.91
|
unknown
|
Serbia
|
|
|
|
68.183.170.114
|
unknown
|
United States
|
|
|
|
81.198.69.61
|
unknown
|
Latvia
|
|
|
|
177.66.190.130
|
unknown
|
Brazil
|
|
|
|
177.72.13.80
|
unknown
|
Brazil
|
|
|
|
61.92.159.208
|
unknown
|
Hong Kong
|
|
|
|
178.79.163.131
|
unknown
|
United Kingdom
|
|
|
|
46.28.111.142
|
unknown
|
Czech Republic
|
|
|
|
77.55.211.77
|
unknown
|
Poland
|
|
|
|
190.163.31.26
|
unknown
|
Chile
|
|
|
|
137.74.106.111
|
unknown
|
France
|
|
|
|
172.104.169.32
|
unknown
|
United States
|
|
|
|
72.47.248.48
|
unknown
|
United States
|
|
|
|
181.120.79.227
|
unknown
|
Paraguay
|
|
|
|
89.32.150.160
|
unknown
|
Romania
|
|
|
|
104.131.41.185
|
unknown
|
United States
|
|
|
|
186.250.52.226
|
unknown
|
Brazil
|
|
|
|
87.106.46.107
|
unknown
|
Germany
|
|
|
|
177.144.135.2
|
unknown
|
Brazil
|
|
|
|
217.160.182.191
|
unknown
|
Germany
|
|
|
|
201.213.156.176
|
unknown
|
Argentina
|
|
|
|
83.169.21.32
|
unknown
|
Germany
|
|
|
|
70.32.115.157
|
unknown
|
United States
|
|
|
|
213.60.96.117
|
unknown
|
Spain
|
|
|
|
212.231.60.98
|
unknown
|
Spain
|
|
|
|
181.36.42.205
|
unknown
|
Dominican Republic
|
|
|
|
104.131.103.128
|
unknown
|
United States
|
|
|
|
190.190.148.27
|
unknown
|
Argentina
|
|
|
|
190.6.193.152
|
unknown
|
Honduras
|
|
|
|
51.255.165.160
|
unknown
|
France
|
|
|
|
212.71.237.140
|
unknown
|
United Kingdom
|
|
|
|
185.94.252.27
|
unknown
|
Germany
|
|
|
|
2.47.112.152
|
unknown
|
Italy
|
|
|
|
104.236.161.64
|
unknown
|
United States
|
|
|
|
192.241.143.52
|
unknown
|
United States
|
|
|
|
192.241.146.84
|
unknown
|
United States
|
|
|
|
45.161.242.102
|
unknown
|
Brazil
|
|
|
|
66.228.49.173
|
unknown
|
United States
|
|
|
|
190.147.137.153
|
unknown
|
Colombia
|
|
|
|
82.196.15.205
|
unknown
|
Netherlands
|
|
|
|
111.67.12.221
|
unknown
|
Australia
|
|
|
|
177.74.228.34
|
unknown
|
Brazil
|
|
|
|
91.219.169.180
|
unknown
|
Ukraine
|
|
|
|
185.94.252.12
|
unknown
|
Germany
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
There are 71 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\svchost.exe
|
cval
|
|
|
|
C:\Windows\System32\svchost.exe
|
cval
|
|
|
|
C:\Windows\System32\svchost.exe
|
PerfMMFileName
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-100
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-101
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\dnsapi.dll,-103
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\NgcRecovery.dll,-100
|
|
|
|
C:\Windows\System32\svchost.exe
|
MonthID
|
|
There are 2 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1140000
|
unkown
|
page execute and read and write
|
|
|
|
2DC1000
|
unkown
|
page execute read
|
|
|
|
2DB0000
|
unkown
|
page execute and read and write
|
|
|
|
1151000
|
unkown
|
page execute read
|
|
|
|
7FF5D84A8000
|
unkown
|
page readonly
|
|
|
|
D15FC7E000
|
unkown
|
page read and write
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
2EB6000
|
unkown
|
page read and write
|
|
|
|
284E144A000
|
unkown
|
page read and write
|
|
|
|
7FF5D83B0000
|
unkown
|
page readonly
|
|
|
|
7FF5E8CC2000
|
unkown
|
page readonly
|
|
|
|
22B08E76000
|
unkown
|
page read and write
|
|
|
|
1C4AD22A000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF562736000
|
unkown
|
page readonly
|
|
|
|
3060000
|
unkown
|
page readonly
|
|
|
|
265B8A6A000
|
unkown
|
page read and write
|
|
|
|
1F85F108000
|
unkown
|
page read and write
|
|
|
|
284E13C0000
|
heap default
|
page read and write
|
|
|
|
22B095C0000
|
unkown
|
page read and write
|
|
|
|
7FF565CC5000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
25121502000
|
unkown
|
page read and write
|
|
|
|
7FF5D84DF000
|
unkown
|
page readonly
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
1F85F03C000
|
unkown
|
page read and write
|
|
|
|
16AC8271000
|
unkown
|
page read and write
|
|
|
|
7FF5CE95A000
|
unkown
|
page readonly
|
|
|
|
265B8A5F000
|
unkown
|
page read and write
|
|
|
|
7FF5D840C000
|
unkown
|
page readonly
|
|
|
|
7FF5D8181000
|
unkown
|
page readonly
|
|
|
|
1F7F0D13000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown image
|
page readonly
|
|
|
|
F12EA7B000
|
unkown
|
page read and write
|
|
|
|
7FF4F3218000
|
unkown
|
page readonly
|
|
|
|
1175000
|
heap private
|
page read and write
|
|
|
|
22B08E8C000
|
unkown
|
page read and write
|
|
|
|
7FF4F31EE000
|
unkown
|
page readonly
|
|
|
|
22B08F13000
|
unkown
|
page read and write
|
|
|
|
7FF5E8DB0000
|
unkown
|
page readonly
|
|
|
|
1C4AD288000
|
unkown
|
page read and write
|
|
|
|
16AC8150000
|
unkown
|
page readonly
|
|
|
|
265B8A61000
|
unkown
|
page read and write
|
|
|
|
7FF53C1D0000
|
unkown
|
page readonly
|
|
|
|
C17000
|
unkown image
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2ED6000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF56270F000
|
unkown
|
page readonly
|
|
|
|
22B09600000
|
unkown
|
page read and write
|
|
|
|
7FF4F338D000
|
unkown
|
page readonly
|
|
|
|
1F85F102000
|
unkown
|
page read and write
|
|
|
|
22B0E2F1000
|
unkown
|
page read and write
|
|
|
|
1F7F1600000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
C17000
|
unkown image
|
page readonly
|
|
|
|
284E1600000
|
unkown
|
page readonly
|
|
|
|
7FF5D84A6000
|
unkown
|
page readonly
|
|
|
|
7FF562767000
|
unkown
|
page readonly
|
|
|
|
393E000
|
unkown
|
page read and write
|
|
|
|
7FF5E88F3000
|
unkown
|
page readonly
|
|
|
|
608C07F000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
CDC000
|
unkown
|
page read and write
|
|
|
|
2F9C000
|
unkown
|
page read and write
|
|
|
|
7FF4F3336000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
22B0E300000
|
unkown
|
page read and write
|
|
|
|
7FF5E89CF000
|
unkown
|
page readonly
|
|
|
|
7FF53C1C5000
|
unkown
|
page readonly
|
|
|
|
FB3000
|
unkown
|
page read and write
|
|
|
|
7FF4F31AF000
|
unkown
|
page readonly
|
|
|
|
7FF5CE94E000
|
unkown
|
page readonly
|
|
|
|
265B8A3A000
|
unkown
|
page read and write
|
|
|
|
1F7F0B90000
|
unkown
|
page readonly
|
|
|
|
7FF5E8B6C000
|
unkown
|
page readonly
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
284E1413000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA80000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
3A1D000
|
unkown
|
page read and write
|
|
|
|
7FF5622BA000
|
unkown
|
page readonly
|
|
|
|
7FF5E8AF8000
|
unkown
|
page readonly
|
|
|
|
2EA2000
|
unkown
|
page read and write
|
|
|
|
7FF5D8490000
|
unkown
|
page readonly
|
|
|
|
265B8900000
|
heap default
|
page read and write
|
|
|
|
7FF5CE67A000
|
unkown
|
page readonly
|
|
|
|
D15FB7E000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
25121470000
|
unkown
|
page read and write
|
|
|
|
284E1502000
|
unkown
|
page read and write
|
|
|
|
13FA99C0000
|
unkown
|
page read and write
|
|
|
|
C11000
|
unkown image
|
page execute read
|
|
|
|
7FF51FDBC000
|
unkown
|
page readonly
|
|
|
|
1F85F100000
|
unkown
|
page read and write
|
|
|
|
34DC000
|
unkown
|
page read and write
|
|
|
|
7FF4F3429000
|
unkown
|
page readonly
|
|
|
|
1C4AD880000
|
unkown
|
page write copy
|
|
|
|
C14000
|
unkown image
|
page readonly
|
|
|
|
13FA9429000
|
unkown
|
page read and write
|
|
|
|
7FF4F3332000
|
unkown
|
page readonly
|
|
|
|
22B0E42E000
|
unkown
|
page read and write
|
|
|
|
DF0000
|
unkown
|
page read and write
|
|
|
|
2FA0000
|
unkown
|
page read and write
|
|
|
|
1F85F06F000
|
unkown
|
page read and write
|
|
|
|
1C4AD251000
|
unkown
|
page read and write
|
|
|
|
265B8C00000
|
unkown
|
page readonly
|
|
|
|
34DD000
|
unkown
|
page read and write
|
|
|
|
7FF579A80000
|
unkown
|
page readonly
|
|
|
|
DE0000
|
unkown
|
page readonly
|
|
|
|
7FF51FE49000
|
unkown
|
page readonly
|
|
|
|
1E006C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5CE9C1000
|
unkown
|
page readonly
|
|
|
|
7FF53C4A4000
|
unkown
|
page readonly
|
|
|
|
7FF53C501000
|
unkown
|
page readonly
|
|
|
|
FC5000
|
unkown
|
page read and write
|
|
|
|
265B8A3E000
|
unkown
|
page read and write
|
|
|
|
22B09DF0000
|
unkown
|
page readonly
|
|
|
|
13FA9990000
|
unkown
|
page read and write
|
|
|
|
7FF5D8530000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF53C44F000
|
unkown
|
page readonly
|
|
|
|
22B08E29000
|
unkown
|
page read and write
|
|
|
|
7FF579AFC000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
265B8A84000
|
unkown
|
page read and write
|
|
|
|
7FF4F3233000
|
unkown
|
page readonly
|
|
|
|
7FF5E8571000
|
unkown
|
page readonly
|
|
|
|
7FF5E8D2C000
|
unkown
|
page readonly
|
|
|
|
2F90000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1C4AD213000
|
unkown
|
page read and write
|
|
|
|
1E006C68000
|
unkown
|
page read and write
|
|
|
|
C16000
|
unkown image
|
page read and write
|
|
|
|
F12EB7E000
|
unkown
|
page read and write
|
|
|
|
7FF56273C000
|
unkown
|
page readonly
|
|
|
|
2EE4000
|
unkown
|
page read and write
|
|
|
|
7FF562764000
|
unkown
|
page readonly
|
|
|
|
22B0E630000
|
unkown
|
page read and write
|
|
|
|
1E006C00000
|
unkown
|
page read and write
|
|
|
|
D15F8FF000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
22B0E48D000
|
unkown
|
page read and write
|
|
|
|
1F7F0C72000
|
unkown
|
page read and write
|
|
|
|
1F85F002000
|
unkown
|
page read and write
|
|
|
|
7FF5E8C7B000
|
unkown
|
page readonly
|
|
|
|
1140000
|
unkown
|
page readonly
|
|
|
|
1E006D02000
|
unkown
|
page read and write
|
|
|
|
13FA9A02000
|
unkown
|
page read and write
|
|
|
|
265B8A44000
|
unkown
|
page read and write
|
|
|
|
13FA9402000
|
unkown
|
page read and write
|
|
|
|
7FF5E894E000
|
unkown
|
page readonly
|
|
|
|
1E006B80000
|
unkown
|
page read and write
|
|
|
|
22B0E1D0000
|
unkown
|
page read and write
|
|
|
|
265B8A5C000
|
unkown
|
page read and write
|
|
|
|
7FF5CEAFC000
|
unkown
|
page readonly
|
|
|
|
E70000
|
unkown
|
page read and write
|
|
|
|
284E144E000
|
unkown
|
page read and write
|
|
|
|
7FF5E8C97000
|
unkown
|
page readonly
|
|
|
|
7FF4F341E000
|
unkown
|
page readonly
|
|
|
|
286EC7D000
|
unkown
|
page read and write
|
|
|
|
7FF4F2F1A000
|
unkown
|
page readonly
|
|
|
|
1F85EF60000
|
unkown
|
page readonly
|
|
|
|
265B8A6B000
|
unkown
|
page read and write
|
|
|
|
22B09DE0000
|
unkown
|
page readonly
|
|
|
|
7FF4F339C000
|
unkown
|
page readonly
|
|
|
|
16AC8A02000
|
unkown
|
page read and write
|
|
|
|
1F7F0C66000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7722E75000
|
unkown
|
page read and write
|
|
|
|
284E1469000
|
unkown
|
page read and write
|
|
|
|
416217E000
|
unkown
|
page read and write
|
|
|
|
22B0E41E000
|
unkown
|
page read and write
|
|
|
|
1C4AD2CA000
|
unkown
|
page read and write
|
|
|
|
22B0E3A0000
|
unkown
|
page write copy
|
|
|
|
284E13F0000
|
unkown
|
page read and write
|
|
|
|
35DF000
|
unkown
|
page read and write
|
|
|
|
128A000
|
heap default
|
page read and write
|
|
|
|
3B1E000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1380000
|
unkown
|
page readonly
|
|
|
|
13FA9502000
|
unkown
|
page read and write
|
|
|
|
265B8A65000
|
unkown
|
page read and write
|
|
|
|
2DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5D849D000
|
unkown
|
page readonly
|
|
|
|
D15FFFA000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
16AC8170000
|
unkown
|
page read and write
|
|
|
|
7FF5798F0000
|
unkown
|
page readonly
|
|
|
|
7FF5796C1000
|
unkown
|
page readonly
|
|
|
|
7FF5D8172000
|
unkown
|
page readonly
|
|
|
|
1C4ADC00000
|
unkown
|
page readonly
|
|
|
|
41626FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E8C37000
|
unkown
|
page readonly
|
|
|
|
1E006C13000
|
unkown
|
page read and write
|
|
|
|
7FF5627C9000
|
unkown
|
page readonly
|
|
|
|
10F6000
|
unkown
|
page read and write
|
|
|
|
7FF5D82C4000
|
unkown
|
page readonly
|
|
|
|
2ED9000
|
unkown
|
page read and write
|
|
|
|
7FF5CE978000
|
unkown
|
page readonly
|
|
|
|
C0CBFF000
|
unkown
|
page read and write
|
|
|
|
1F85F04F000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA92000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1C4AD200000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown image
|
page readonly
|
|
|
|
7FF53C4A7000
|
unkown
|
page readonly
|
|
|
|
2DC0000
|
unkown
|
page read and write
|
|
|
|
7FF53C476000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
22B0E43B000
|
unkown
|
page read and write
|
|
|
|
7FF5C1157000
|
unkown
|
page readonly
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
7FF561F81000
|
unkown
|
page readonly
|
|
|
|
1F7F0C29000
|
unkown
|
page read and write
|
|
|
|
16AC8F40000
|
unkown
|
page readonly
|
|
|
|
2F80000
|
heap private
|
page read and write
|
|
|
|
7FF51FD99000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF53C3DA000
|
unkown
|
page readonly
|
|
|
|
7FF5E85F4000
|
unkown
|
page readonly
|
|
|
|
22B08E95000
|
unkown
|
page read and write
|
|
|
|
265B8A79000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF51FD8F000
|
unkown
|
page readonly
|
|
|
|
7FF5E8B78000
|
unkown
|
page readonly
|
|
|
|
265B8A60000
|
unkown
|
page read and write
|
|
|
|
7FF4F3379000
|
unkown
|
page readonly
|
|
|
|
7FF51F4FD000
|
unkown
|
page readonly
|
|
|
|
7FF51FD17000
|
unkown
|
page readonly
|
|
|
|
34DC000
|
unkown
|
page read and write
|
|
|
|
7FF5626D2000
|
unkown
|
page readonly
|
|
|
|
1C4AD0F0000
|
unkown
|
page readonly
|
|
|
|
22B0E680000
|
unkown
|
page readonly
|
|
|
|
137E000
|
unkown
|
page read and write
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
265B8A7D000
|
unkown
|
page read and write
|
|
|
|
7FF5796C5000
|
unkown
|
page readonly
|
|
|
|
25121C00000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown image
|
page readonly
|
|
|
|
7FF5E8B5A000
|
unkown
|
page readonly
|
|
|
|
C0C7FB000
|
unkown
|
page read and write
|
|
|
|
2F6E000
|
unkown
|
page read and write
|
|
|
|
3050000
|
unkown
|
page readonly
|
|
|
|
7FF53C2C8000
|
unkown
|
page readonly
|
|
|
|
7FF51FBCF000
|
unkown
|
page readonly
|
|
|
|
7FF4F31FA000
|
unkown
|
page readonly
|
|
|
|
7FF53C1B7000
|
unkown
|
page readonly
|
|
|
|
37FE000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF565BBF000
|
unkown
|
page readonly
|
|
|
|
7FF579B24000
|
unkown
|
page readonly
|
|
|
|
7FF5D84E9000
|
unkown
|
page readonly
|
|
|
|
7FF5CEB24000
|
unkown
|
page readonly
|
|
|
|
E6BB37F000
|
unkown
|
page read and write
|
|
|
|
37BF000
|
unkown
|
page read and write
|
|
|
|
1C4AD400000
|
unkown
|
page readonly
|
|
|
|
DA0000
|
unkown
|
page read and write
|
|
|
|
E6BACDC000
|
unkown
|
page read and write
|
|
|
|
7FF5C168A000
|
unkown
|
page readonly
|
|
|
|
22B0E460000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF562746000
|
unkown
|
page readonly
|
|
|
|
7FF565BD8000
|
unkown
|
page readonly
|
|
|
|
7FF51FD42000
|
unkown
|
page readonly
|
|
|
|
7FF5E8B80000
|
unkown
|
page readonly
|
|
|
|
22B0E2D0000
|
unkown
|
page read and write
|
|
|
|
13FA93F0000
|
unkown
|
page readonly
|
|
|
|
7FF579B15000
|
unkown
|
page readonly
|
|
|
|
7FF5CE680000
|
unkown
|
page readonly
|
|
|
|
7FF565E2E000
|
unkown
|
page readonly
|
|
|
|
1C4ADF40000
|
unkown
|
page readonly
|
|
|
|
265B8A13000
|
unkown
|
page read and write
|
|
|
|
36BE000
|
unkown
|
page read and write
|
|
|
|
7FF565D28000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF565AF5000
|
unkown
|
page readonly
|
|
|
|
7FF5E8CDA000
|
unkown
|
page readonly
|
|
|
|
7FF51FD7E000
|
unkown
|
page readonly
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
13FA9600000
|
unkown
|
page readonly
|
|
|
|
1F85F200000
|
unkown
|
page readonly
|
|
|
|
2DF0000
|
unkown
|
page read and write
|
|
|
|
2ED9000
|
unkown
|
page read and write
|
|
|
|
7FF5E8D3C000
|
unkown
|
page readonly
|
|
|
|
7FF5CE690000
|
unkown
|
page readonly
|
|
|
|
C14000
|
unkown image
|
page readonly
|
|
|
|
251213E0000
|
unkown
|
page readonly
|
|
|
|
7FF51FDB1000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1F7F0C61000
|
unkown
|
page read and write
|
|
|
|
D52407E000
|
unkown
|
page read and write
|
|
|
|
286E9FE000
|
unkown
|
page read and write
|
|
|
|
1F85EE10000
|
heap private
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5625DD000
|
unkown
|
page readonly
|
|
|
|
7FF5D84D5000
|
unkown
|
page readonly
|
|
|
|
251213F0000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
C0C4FE000
|
unkown
|
page read and write
|
|
|
|
1F85EF70000
|
unkown
|
page read and write
|
|
|
|
7FF53C0D8000
|
unkown
|
page readonly
|
|
|
|
265B8A2F000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
608BF7C000
|
unkown
|
page read and write
|
|
|
|
7FF4F2F30000
|
unkown
|
page readonly
|
|
|
|
D15F7FD000
|
unkown
|
page read and write
|
|
|
|
7FF565D42000
|
unkown
|
page readonly
|
|
|
|
7FF4F323D000
|
unkown
|
page readonly
|
|
|
|
7FF5D83BC000
|
unkown
|
page readonly
|
|
|
|
F12EF7F000
|
unkown
|
page read and write
|
|
|
|
1C4ADA02000
|
unkown
|
page read and write
|
|
|
|
265B8A63000
|
unkown
|
page read and write
|
|
|
|
D98CEB000
|
unkown
|
page read and write
|
|
|
|
F12EAFD000
|
unkown
|
page read and write
|
|
|
|
7FF53C495000
|
unkown
|
page readonly
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
286EAFD000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5E88F5000
|
unkown
|
page readonly
|
|
|
|
25121300000
|
unkown
|
page readonly
|
|
|
|
7FF4F336F000
|
unkown
|
page readonly
|
|
|
|
265B89E0000
|
unkown
|
page readonly
|
|
|
|
608C27D000
|
unkown
|
page read and write
|
|
|
|
284E1400000
|
unkown
|
page read and write
|
|
|
|
7FF5CE90F000
|
unkown
|
page readonly
|
|
|
|
7FF5C1904000
|
unkown
|
page readonly
|
|
|
|
22B08EA0000
|
unkown
|
page read and write
|
|
|
|
22B09000000
|
unkown
|
page readonly
|
|
|
|
7FF5CEB89000
|
unkown
|
page readonly
|
|
|
|
7FF5E8D36000
|
unkown
|
page readonly
|
|
|
|
7FF562719000
|
unkown
|
page readonly
|
|
|
|
7FF579A92000
|
unkown
|
page readonly
|
|
|
|
22B0E300000
|
unkown
|
page read and write
|
|
|
|
416207C000
|
unkown
|
page read and write
|
|
|
|
7FF5E8C87000
|
unkown
|
page readonly
|
|
|
|
22B08EFE000
|
unkown
|
page read and write
|
|
|
|
37CB000
|
unkown
|
page read and write
|
|
|
|
7FF5626C2000
|
unkown
|
page readonly
|
|
|
|
1C4AD1E0000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
25121413000
|
unkown
|
page read and write
|
|
|
|
7FF565E31000
|
unkown
|
page readonly
|
|
|
|
286E3EB000
|
unkown
|
page read and write
|
|
|
|
38DE000
|
unkown
|
page read and write
|
|
|
|
265B88A0000
|
heap private
|
page read and write
|
|
|
|
E6BB27F000
|
unkown
|
page read and write
|
|
|
|
7FF5E88C3000
|
unkown
|
page readonly
|
|
|
|
265B8A26000
|
unkown
|
page read and write
|
|
|
|
265B8A74000
|
unkown
|
page read and write
|
|
|
|
C17000
|
unkown image
|
page readonly
|
|
|
|
C0C9FF000
|
unkown
|
page read and write
|
|
|
|
3BAC000
|
unkown
|
page read and write
|
|
|
|
13FA9230000
|
heap default
|
page read and write
|
|
|
|
16AC8C00000
|
unkown
|
page readonly
|
|
|
|
7FF51FDCC000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
22B0E670000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
16AC8160000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1F85F802000
|
unkown
|
page read and write
|
|
|
|
7FF5C18B9000
|
unkown
|
page readonly
|
|
|
|
3A3E000
|
unkown
|
page read and write
|
|
|
|
7FF579B27000
|
unkown
|
page readonly
|
|
|
|
7FF51FE41000
|
unkown
|
page readonly
|
|
|
|
265B8910000
|
unkown
|
page readonly
|
|
|
|
7FF53C42A000
|
unkown
|
page readonly
|
|
|
|
7FF4F2F40000
|
unkown
|
page readonly
|
|
|
|
1E006C29000
|
unkown
|
page read and write
|
|
|
|
265B8A7E000
|
unkown
|
page read and write
|
|
|
|
25121513000
|
unkown
|
page read and write
|
|
|
|
7FF5C189E000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1040000
|
heap default
|
page read and write
|
|
|
|
7FF53C48C000
|
unkown
|
page readonly
|
|
|
|
265B8A75000
|
unkown
|
page read and write
|
|
|
|
16AC8213000
|
unkown
|
page read and write
|
|
|
|
22B0E610000
|
unkown
|
page read and write
|
|
|
|
D9927B000
|
unkown
|
page read and write
|
|
|
|
2F50000
|
heap private
|
page read and write
|
|
|
|
7FF5E8CEE000
|
unkown
|
page readonly
|
|
|
|
7FF51FD40000
|
unkown
|
page readonly
|
|
|
|
7FF56272D000
|
unkown
|
page readonly
|
|
|
|
7FF4F3322000
|
unkown
|
page readonly
|
|
|
|
7FF53C3EC000
|
unkown
|
page readonly
|
|
|
|
D523DBE000
|
unkown
|
page read and write
|
|
|
|
7FF5797BE000
|
unkown
|
page readonly
|
|
|
|
D15FCFF000
|
unkown
|
page read and write
|
|
|
|
7FF5CE341000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown image
|
page readonly
|
|
|
|
7FF5D8501000
|
unkown
|
page readonly
|
|
|
|
7DFAF9A51000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF579A27000
|
unkown
|
page readonly
|
|
|
|
284E3002000
|
unkown
|
page read and write
|
|
|
|
1F7F0C00000
|
unkown
|
page read and write
|
|
|
|
265B8A2D000
|
unkown
|
page read and write
|
|
|
|
22B0E730000
|
unkown
|
page readonly
|
|
|
|
22B0E420000
|
unkown
|
page read and write
|
|
|
|
22B08C10000
|
heap private
|
page read and write
|
|
|
|
7FF5E8930000
|
unkown
|
page readonly
|
|
|
|
16AC8276000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown image
|
page readonly
|
|
|
|
22B08E90000
|
unkown
|
page read and write
|
|
|
|
22B0E3A4000
|
unkown
|
page readonly
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
7FF4F3320000
|
unkown
|
page readonly
|
|
|
|
7FF5E8D26000
|
unkown
|
page readonly
|
|
|
|
22B0E430000
|
unkown
|
page read and write
|
|
|
|
13FA943D000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5E89C6000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1210000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5D851C000
|
unkown
|
page readonly
|
|
|
|
284E1500000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
heap default
|
page read and write
|
|
|
|
7FF5CEA96000
|
unkown
|
page readonly
|
|
|
|
16AC8278000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
22B0E3F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D84CE000
|
unkown
|
page readonly
|
|
|
|
D5243FE000
|
unkown
|
page read and write
|
|
|
|
1F7F0C8C000
|
unkown
|
page read and write
|
|
|
|
22B0E1B0000
|
unkown
|
page read and write
|
|
|
|
D15FDFF000
|
unkown
|
page read and write
|
|
|
|
7FF5C1876000
|
unkown
|
page readonly
|
|
|
|
C17000
|
unkown image
|
page readonly
|
|
|
|
7FF5E8D45000
|
unkown
|
page readonly
|
|
|
|
D90000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
C11000
|
unkown image
|
page execute read
|
|
|
|
2512143C000
|
unkown
|
page read and write
|
|
|
|
41620FE000
|
unkown
|
page read and write
|
|
|
|
1F85F04B000
|
unkown
|
page read and write
|
|
|
|
1F85F062000
|
unkown
|
page read and write
|
|
|
|
2512144B000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
heap private
|
page read and write
|
|
|
|
7FF5E85EF000
|
unkown
|
page readonly
|
|
|
|
7FF5E8579000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1150000
|
unkown
|
page read and write
|
|
|
|
1F7F0E00000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5CEAF6000
|
unkown
|
page readonly
|
|
|
|
7FF565DBC000
|
unkown
|
page readonly
|
|
|
|
7FF5627BE000
|
unkown
|
page readonly
|
|
|
|
16AC822A000
|
unkown
|
page read and write
|
|
|
|
7FF5655E3000
|
unkown
|
page readonly
|
|
|
|
7FF4F3396000
|
unkown
|
page readonly
|
|
|
|
7FF53C509000
|
unkown
|
page readonly
|
|
|
|
7FF5E8D54000
|
unkown
|
page readonly
|
|
|
|
22B0E4A5000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5627C1000
|
unkown
|
page readonly
|
|
|
|
7FF5C1023000
|
unkown
|
page readonly
|
|
|
|
22B08D50000
|
unkown
|
page readonly
|
|
|
|
7FF5CEAED000
|
unkown
|
page readonly
|
|
|
|
22B08D80000
|
unkown
|
page read and write
|
|
|
|
C0C8FD000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
265B8A45000
|
unkown
|
page read and write
|
|
|
|
1E007600000
|
unkown
|
page readonly
|
|
|
|
7FF5D8338000
|
unkown
|
page readonly
|
|
|
|
284E145A000
|
unkown
|
page read and write
|
|
|
|
7FF565E39000
|
unkown
|
page readonly
|
|
|
|
265B8A58000
|
unkown
|
page read and write
|
|
|
|
DD9000
|
unkown
|
page read and write
|
|
|
|
7FF565971000
|
unkown
|
page readonly
|
|
|
|
1F7F0AB0000
|
unkown
|
page readonly
|
|
|
|
284E144D000
|
unkown
|
page read and write
|
|
|
|
34D0000
|
unkown
|
page read and write
|
|
|
|
7FF53C459000
|
unkown
|
page readonly
|
|
|
|
7FF5D8488000
|
unkown
|
page readonly
|
|
|
|
265B8A42000
|
unkown
|
page read and write
|
|
|
|
1F85F049000
|
unkown
|
page read and write
|
|
|
|
1C4AD790000
|
unkown
|
page readonly
|
|
|
|
13FA9C00000
|
unkown
|
page read and write
|
|
|
|
22B0E4C6000
|
unkown
|
page read and write
|
|
|
|
22B08E70000
|
unkown
|
page read and write
|
|
|
|
7FF565DC5000
|
unkown
|
page readonly
|
|
|
|
38FF000
|
unkown
|
page read and write
|
|
|
|
22B0E2D0000
|
unkown
|
page read and write
|
|
|
|
7FF4F3429000
|
unkown
|
page readonly
|
|
|
|
D15F47F000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1E006D00000
|
unkown
|
page read and write
|
|
|
|
22B0E2D8000
|
unkown
|
page read and write
|
|
|
|
265B8A7A000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5D846A000
|
unkown
|
page readonly
|
|
|
|
7FF579AC5000
|
unkown
|
page readonly
|
|
|
|
7FF5C1907000
|
unkown
|
page readonly
|
|
|
|
14BE000
|
unkown
|
page read and write
|
|
|
|
7FF579AD9000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5E8D09000
|
unkown
|
page readonly
|
|
|
|
286EB7E000
|
unkown
|
page read and write
|
|
|
|
7FF5CEACF000
|
unkown
|
page readonly
|
|
|
|
7FF5D8492000
|
unkown
|
page readonly
|
|
|
|
7FF5C18AF000
|
unkown
|
page readonly
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
7FF565DD4000
|
unkown
|
page readonly
|
|
|
|
7FF53C400000
|
unkown
|
page readonly
|
|
|
|
7FF565B85000
|
unkown
|
page readonly
|
|
|
|
25121A02000
|
unkown
|
page read and write
|
|
|
|
7FF5E8A67000
|
unkown
|
page readonly
|
|
|
|
7FF5D8525000
|
unkown
|
page readonly
|
|
|
|
D15F1AB000
|
unkown
|
page read and write
|
|
|
|
284E145D000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5E849B000
|
unkown
|
page readonly
|
|
|
|
7FF53C395000
|
unkown
|
page readonly
|
|
|
|
265B8A5B000
|
unkown
|
page read and write
|
|
|
|
22B09E00000
|
unkown
|
page readonly
|
|
|
|
284E13E0000
|
unkown
|
page readonly
|
|
|
|
22B09718000
|
unkown
|
page read and write
|
|
|
|
265B8A2A000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B89000
|
unkown
|
page readonly
|
|
|
|
127E000
|
unkown
|
page read and write
|
|
|
|
C11000
|
unkown image
|
page execute read
|
|
|
|
7FF56263C000
|
unkown
|
page readonly
|
|
|
|
1F85F000000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5626EA000
|
unkown
|
page readonly
|
|
|
|
7FF4F33B5000
|
unkown
|
page readonly
|
|
|
|
22B0E448000
|
unkown
|
page read and write
|
|
|
|
F12F07E000
|
unkown
|
page read and write
|
|
|
|
D9937F000
|
unkown
|
page read and write
|
|
|
|
22B0E3A0000
|
unkown
|
page read and write
|
|
|
|
25121402000
|
unkown
|
page read and write
|
|
|
|
7FF5E8A80000
|
unkown
|
page readonly
|
|
|
|
7FF5C1969000
|
unkown
|
page readonly
|
|
|
|
115B000
|
unkown
|
page readonly
|
|
|
|
7FF565DA6000
|
unkown
|
page readonly
|
|
|
|
37D0000
|
heap private
|
page read and write
|
|
|
|
265B8A62000
|
unkown
|
page read and write
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
608B88B000
|
unkown
|
page read and write
|
|
|
|
7FF5654F5000
|
unkown
|
page readonly
|
|
|
|
7FF5CEB20000
|
unkown
|
page readonly
|
|
|
|
7FF5CEABE000
|
unkown
|
page readonly
|
|
|
|
7FF5626D8000
|
unkown
|
page readonly
|
|
|
|
7FF565D48000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1C4AD313000
|
unkown
|
page read and write
|
|
|
|
7FF5D850C000
|
unkown
|
page readonly
|
|
|
|
2DC9000
|
unkown
|
page read and write
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
1F7F0BA0000
|
unkown
|
page read and write
|
|
|
|
16AC8313000
|
unkown
|
page read and write
|
|
|
|
22B09602000
|
unkown
|
page read and write
|
|
|
|
10F9000
|
unkown
|
page read and write
|
|
|
|
7FF5E8CC6000
|
unkown
|
page readonly
|
|
|
|
D15FD7F000
|
unkown
|
page read and write
|
|
|
|
7FF51FA65000
|
unkown
|
page readonly
|
|
|
|
7FF5CEB89000
|
unkown
|
page readonly
|
|
|
|
284E2F70000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF579B89000
|
unkown
|
page readonly
|
|
|
|
22B0E630000
|
unkown
|
page read and write
|
|
|
|
1F7F0C13000
|
unkown
|
page read and write
|
|
|
|
1E006C02000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
284E2EB0000
|
unkown
|
page read and write
|
|
|
|
608BCFB000
|
unkown
|
page read and write
|
|
|
|
1C4AD26D000
|
unkown
|
page read and write
|
|
|
|
34DB000
|
unkown
|
page read and write
|
|
|
|
1E006D13000
|
unkown
|
page read and write
|
|
|
|
22B0E310000
|
unkown
|
page read and write
|
|
|
|
284E2E80000
|
unkown
|
page read and write
|
|
|
|
7FF5CEB27000
|
unkown
|
page readonly
|
|
|
|
1E006B70000
|
unkown
|
page readonly
|
|
|
|
7FF565B63000
|
unkown
|
page readonly
|
|
|
|
C0C77D000
|
unkown
|
page read and write
|
|
|
|
7FF5625B8000
|
unkown
|
page readonly
|
|
|
|
22B0E487000
|
unkown
|
page read and write
|
|
|
|
2E20000
|
unkown
|
page readonly
|
|
|
|
7FF5625D3000
|
unkown
|
page readonly
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
25121230000
|
unkown
|
page readonly
|
|
|
|
22B0E414000
|
unkown
|
page read and write
|
|
|
|
7FF5659DD000
|
unkown
|
page readonly
|
|
|
|
3B7C000
|
unkown
|
page read and write
|
|
|
|
7FF53C486000
|
unkown
|
page readonly
|
|
|
|
7FF5E8574000
|
unkown
|
page readonly
|
|
|
|
7FF53C412000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1F85FA00000
|
unkown
|
page readonly
|
|
|
|
22B0E3B4000
|
unkown
|
page readonly
|
|
|
|
7FF5E8947000
|
unkown
|
page readonly
|
|
|
|
7FF53C402000
|
unkown
|
page readonly
|
|
|
|
7FF4F3338000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2DCB000
|
unkown
|
page readonly
|
|
|
|
FCB000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown
|
page read and write
|
|
|
|
1F7F0C47000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B3F000
|
unkown
|
page readonly
|
|
|
|
284E2F80000
|
unkown
|
page readonly
|
|
|
|
7FF5798B7000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5E8C9C000
|
unkown
|
page readonly
|
|
|
|
22B0E710000
|
unkown
|
page readonly
|
|
|
|
1F7F1260000
|
unkown
|
page readonly
|
|
|
|
7FF579AF1000
|
unkown
|
page readonly
|
|
|
|
D9947E000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF565D32000
|
unkown
|
page readonly
|
|
|
|
22B095D0000
|
unkown
|
page read and write
|
|
|
|
1600000
|
unkown
|
page readonly
|
|
|
|
7FF579AED000
|
unkown
|
page readonly
|
|
|
|
284E3200000
|
unkown
|
page readonly
|
|
|
|
7FF5E8DB9000
|
unkown
|
page readonly
|
|
|
|
7FF53C445000
|
unkown
|
page readonly
|
|
|
|
7FF5C1961000
|
unkown
|
page readonly
|
|
|
|
FAF000
|
unkown
|
page read and write
|
|
|
|
1F7F0D00000
|
unkown
|
page read and write
|
|
|
|
22B09CE0000
|
unkown
|
page read and write
|
|
|
|
1C4AD1C0000
|
unkown
|
page readonly
|
|
|
|
7FF56259A000
|
unkown
|
page readonly
|
|
|
|
D15FAFB000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown
|
page read and write
|
|
|
|
7FF53C47C000
|
unkown
|
page readonly
|
|
|
|
7FF5E8B5E000
|
unkown
|
page readonly
|
|
|
|
7FF579B80000
|
unkown
|
page readonly
|
|
|
|
7FF579B89000
|
unkown
|
page readonly
|
|
|
|
7FF51FDE4000
|
unkown
|
page readonly
|
|
|
|
265B8A64000
|
unkown
|
page read and write
|
|
|
|
7FF4F334A000
|
unkown
|
page readonly
|
|
|
|
7722D7E000
|
unkown
|
page read and write
|
|
|
|
7FF565D89000
|
unkown
|
page readonly
|
|
|
|
7FF565B00000
|
unkown
|
page readonly
|
|
|
|
7FF5D8102000
|
unkown
|
page readonly
|
|
|
|
16AC8302000
|
unkown
|
page read and write
|
|
|
|
7FF5D8516000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
39DE000
|
unkown
|
page read and write
|
|
|
|
22B0E2F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D84A2000
|
unkown
|
page readonly
|
|
|
|
284E16D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D831F000
|
unkown
|
page readonly
|
|
|
|
7FF51FDAD000
|
unkown
|
page readonly
|
|
|
|
25121400000
|
unkown
|
page read and write
|
|
|
|
22B0E750000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5E8DAE000
|
unkown
|
page readonly
|
|
|
|
25121456000
|
unkown
|
page read and write
|
|
|
|
3090000
|
heap private
|
page read and write
|
|
|
|
265B8B02000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
77232FF000
|
unkown
|
page read and write
|
|
|
|
284E145E000
|
unkown
|
page read and write
|
|
|
|
16AC8010000
|
heap private
|
page read and write
|
|
|
|
284E2EF0000
|
unkown
|
page read and write
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
7FF5D84FD000
|
unkown
|
page readonly
|
|
|
|
7FF565C09000
|
unkown
|
page readonly
|
|
|
|
7FF561F7B000
|
unkown
|
page readonly
|
|
|
|
22B0E630000
|
unkown
|
page read and write
|
|
|
|
1F85F029000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2EAF000
|
unkown
|
page read and write
|
|
|
|
284E2F70000
|
unkown
|
page read and write
|
|
|
|
D1601FF000
|
unkown
|
page read and write
|
|
|
|
7FF565DB6000
|
unkown
|
page readonly
|
|
|
|
22B0E400000
|
unkown
|
page read and write
|
|
|
|
3A7E000
|
unkown
|
page read and write
|
|
|
|
7FF565D30000
|
unkown
|
page readonly
|
|
|
|
13FA99C0000
|
unkown
|
page read and write
|
|
|
|
265B8A31000
|
unkown
|
page read and write
|
|
|
|
1C4AD0E0000
|
heap default
|
page read and write
|
|
|
|
22B09713000
|
unkown
|
page read and write
|
|
|
|
D15F5F8000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1F7F0A40000
|
heap private
|
page read and write
|
|
|
|
16AC8266000
|
unkown
|
page read and write
|
|
|
|
7FF5CEAD9000
|
unkown
|
page readonly
|
|
|
|
D15F9FA000
|
unkown
|
page read and write
|
|
|
|
E74000
|
unkown
|
page read and write
|
|
|
|
7FF565E39000
|
unkown
|
page readonly
|
|
|
|
7FF579A41000
|
unkown
|
page readonly
|
|
|
|
7FF562601000
|
unkown
|
page readonly
|
|
|
|
16AC8253000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
284E1360000
|
heap private
|
page read and write
|
|
|
|
1230000
|
heap default
|
page read and write
|
|
|
|
7FF5E89BD000
|
unkown
|
page readonly
|
|
|
|
7FF565DD7000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
22B08F02000
|
unkown
|
page read and write
|
|
|
|
7FF4F33C4000
|
unkown
|
page readonly
|
|
|
|
DD6000
|
unkown
|
page read and write
|
|
|
|
1C4AD2C1000
|
unkown
|
page read and write
|
|
|
|
1F85EE70000
|
heap default
|
page read and write
|
|
|
|
265B8A3B000
|
unkown
|
page read and write
|
|
|
|
D523D3B000
|
unkown
|
page read and write
|
|
|
|
D15FBFE000
|
unkown
|
page read and write
|
|
|
|
16AC8790000
|
unkown
|
page readonly
|
|
|
|
16AC8200000
|
unkown
|
page read and write
|
|
|
|
22B09DD0000
|
unkown
|
page readonly
|
|
|
|
13FA9240000
|
unkown
|
page readonly
|
|
|
|
7FF5D816F000
|
unkown
|
page readonly
|
|
|
|
7FF51FDC6000
|
unkown
|
page readonly
|
|
|
|
608BE7F000
|
unkown
|
page read and write
|
|
|
|
41624F7000
|
unkown
|
page read and write
|
|
|
|
3B20000
|
unkown
|
page read and write
|
|
|
|
7722C7C000
|
unkown
|
page read and write
|
|
|
|
22B08C70000
|
heap default
|
page read and write
|
|
|
|
7722FFF000
|
unkown
|
page read and write
|
|
|
|
7FF5E8CC8000
|
unkown
|
page readonly
|
|
|
|
16AC8080000
|
unkown
|
page readonly
|
|
|
|
7FF565BA0000
|
unkown
|
page readonly
|
|
|
|
113A000
|
heap default
|
page read and write
|
|
|
|
1F7F0B80000
|
unkown
|
page readonly
|
|
|
|
265B8A7B000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1280000
|
heap default
|
page read and write
|
|
|
|
1F85F08A000
|
unkown
|
page read and write
|
|
|
|
22B08E13000
|
unkown
|
page read and write
|
|
|
|
7FF579A82000
|
unkown
|
page readonly
|
|
|
|
123D000
|
unkown
|
page read and write
|
|
|
|
608C77F000
|
unkown
|
page read and write
|
|
|
|
1220000
|
unkown
|
page readonly
|
|
|
|
7FF5D83A7000
|
unkown
|
page readonly
|
|
|
|
7FF565BFA000
|
unkown
|
page readonly
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
265B8A4E000
|
unkown
|
page read and write
|
|
|
|
F12EE77000
|
unkown
|
page read and write
|
|
|
|
7FF53C46D000
|
unkown
|
page readonly
|
|
|
|
1E006E00000
|
unkown
|
page readonly
|
|
|
|
7FF565D9D000
|
unkown
|
page readonly
|
|
|
|
15FF000
|
unkown
|
page read and write
|
|
|
|
3B1C000
|
unkown
|
page read and write
|
|
|
|
1E007402000
|
unkown
|
page read and write
|
|
|
|
7FF4F3267000
|
unkown
|
page readonly
|
|
|
|
1E006C3C000
|
unkown
|
page read and write
|
|
|
|
104A000
|
heap default
|
page read and write
|
|
|
|
1F7F0D08000
|
unkown
|
page read and write
|
|
|
|
D15F6F9000
|
unkown
|
page read and write
|
|
|
|
7FF5CE33B000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
25121220000
|
heap default
|
page read and write
|
|
|
|
22B08E56000
|
unkown
|
page read and write
|
|
|
|
7FF5E8C67000
|
unkown
|
page readonly
|
|
|
|
C16000
|
unkown image
|
page write copy
|
|
|
|
7FF51FD0B000
|
unkown
|
page readonly
|
|
|
|
284E1518000
|
unkown
|
page read and write
|
|
|
|
D5244FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E8C2C000
|
unkown
|
page readonly
|
|
|
|
7FF4F335E000
|
unkown
|
page readonly
|
|
|
|
22B08E3D000
|
unkown
|
page read and write
|
|
|
|
13BE000
|
unkown
|
page read and write
|
|
|
|
1F85F062000
|
unkown
|
page read and write
|
|
|
|
22B09801000
|
unkown
|
page read and write
|
|
|
|
7FF56274C000
|
unkown
|
page readonly
|
|
|
|
1170000
|
heap private
|
page read and write
|
|
|
|
7FF5C18E6000
|
unkown
|
page readonly
|
|
|
|
7FF5E8CA8000
|
unkown
|
page readonly
|
|
|
|
7FF5E8CFF000
|
unkown
|
page readonly
|
|
|
|
7FF5D835B000
|
unkown
|
page readonly
|
|
|
|
D2C000
|
unkown
|
page read and write
|
|
|
|
7FF5D8417000
|
unkown
|
page readonly
|
|
|
|
265B8A68000
|
unkown
|
page read and write
|
|
|
|
7FF5CE99D000
|
unkown
|
page readonly
|
|
|
|
7FF5CEB0C000
|
unkown
|
page readonly
|
|
|
|
7FF5E8CB0000
|
unkown
|
page readonly
|
|
|
|
1E007260000
|
unkown
|
page readonly
|
|
|
|
7FF4F33A6000
|
unkown
|
page readonly
|
|
|
|
1F7F0C3C000
|
unkown
|
page read and write
|
|
|
|
7FF51FE49000
|
unkown
|
page readonly
|
|
|
|
7FF565C47000
|
unkown
|
page readonly
|
|
|
|
7FF5C18D6000
|
unkown
|
page readonly
|
|
|
|
265B8A41000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF53C418000
|
unkown
|
page readonly
|
|
|
|
22B09DC0000
|
unkown
|
page readonly
|
|
|
|
7FF5D82FE000
|
unkown
|
page readonly
|
|
|
|
265B8A3D000
|
unkown
|
page read and write
|
|
|
|
7FF562760000
|
unkown
|
page readonly
|
|
|
|
7FF5626C0000
|
unkown
|
page readonly
|
|
|
|
7FF562607000
|
unkown
|
page readonly
|
|
|
|
7FF5D8425000
|
unkown
|
page readonly
|
|
|
|
284E1A60000
|
unkown
|
page readonly
|
|
|
|
7FF5E8AEC000
|
unkown
|
page readonly
|
|
|
|
7FF5D858E000
|
unkown
|
page readonly
|
|
|
|
13FA945C000
|
unkown
|
page read and write
|
|
|
|
1C4AD080000
|
heap private
|
page read and write
|
|
|
|
16AC8070000
|
heap default
|
page read and write
|
|
|
|
1F85F04D000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1C4AD2B9000
|
unkown
|
page read and write
|
|
|
|
265B9060000
|
unkown
|
page read and write
|
|
|
|
7FF5E8D50000
|
unkown
|
page readonly
|
|
|
|
7FF5D80FE000
|
unkown
|
page readonly
|
|
|
|
1E006C58000
|
unkown
|
page read and write
|
|
|
|
E6BB87F000
|
unkown
|
page read and write
|
|
|
|
7FF5CEAC5000
|
unkown
|
page readonly
|
|
|
|
7FF5CE8AA000
|
unkown
|
page readonly
|
|
|
|
286E77F000
|
unkown
|
page read and write
|
|
|
|
7FF4F33C7000
|
unkown
|
page readonly
|
|
|
|
7FF5CE9C7000
|
unkown
|
page readonly
|
|
|
|
7FF5E8C25000
|
unkown
|
page readonly
|
|
|
|
22B08D70000
|
unkown
|
page read and write
|
|
|
|
22B08E00000
|
unkown
|
page read and write
|
|
|
|
7FF4F3365000
|
unkown
|
page readonly
|
|
|
|
22B0E3C8000
|
unkown
|
page write copy
|
|
|
|
C0C2FC000
|
unkown
|
page read and write
|
|
|
|
22B08C80000
|
unkown
|
page readonly
|
|
|
|
416237B000
|
unkown
|
page read and write
|
|
|
|
7FF5C18A5000
|
unkown
|
page readonly
|
|
|
|
7FF565A9D000
|
unkown
|
page readonly
|
|
|
|
22B095E0000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
265B8A6F000
|
unkown
|
page read and write
|
|
|
|
13FA91D0000
|
heap private
|
page read and write
|
|
|
|
22B08E7A000
|
unkown
|
page read and write
|
|
|
|
7FF5E8ADB000
|
unkown
|
page readonly
|
|
|
|
1F85EF50000
|
unkown
|
page readonly
|
|
|
|
7FF53BBCD000
|
unkown
|
page readonly
|
|
|
|
3000000
|
unkown
|
page readonly
|
|
|
|
7FF5C18CD000
|
unkown
|
page readonly
|
|
|
|
22B09615000
|
unkown
|
page read and write
|
|
|
|
7FF56258E000
|
unkown
|
page readonly
|
|
|
|
25121429000
|
unkown
|
page read and write
|
|
|
|
7FF5622C0000
|
unkown
|
page readonly
|
|
|
|
2F26000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1235000
|
heap default
|
page read and write
|
|
|
|
C0BEDB000
|
unkown
|
page read and write
|
|
|
|
7FF4F314A000
|
unkown
|
page readonly
|
|
|
|
7FF5E8C71000
|
unkown
|
page readonly
|
|
|
|
22B0E2F4000
|
unkown
|
page read and write
|
|
|
|
7FF565DAC000
|
unkown
|
page readonly
|
|
|
|
7FF5C16EF000
|
unkown
|
page readonly
|
|
|
|
7FF5E8CF5000
|
unkown
|
page readonly
|
|
|
|
7FF565D6E000
|
unkown
|
page readonly
|
|
|
|
13FA9413000
|
unkown
|
page read and write
|
|
|
|
7FF5CEAAA000
|
unkown
|
page readonly
|
|
|
|
7FF565DD2000
|
unkown
|
page readonly
|
|
|
|
7FF5D8599000
|
unkown
|
page readonly
|
|
|
|
16AC8400000
|
unkown
|
page readonly
|
|
|
|
7FF5C188A000
|
unkown
|
page readonly
|
|
|
|
1E006C64000
|
unkown
|
page read and write
|
|
|
|
7FF51FA14000
|
unkown
|
page readonly
|
|
|
|
1F85F051000
|
unkown
|
page read and write
|
|
|
|
C0C67C000
|
unkown
|
page read and write
|
|
|
|
22B0A160000
|
unkown
|
page read and write
|
|
|
|
19E0000
|
unkown
|
page readonly
|
|
|
|
7FF5C1969000
|
unkown
|
page readonly
|
|
|
|
22B0E1C0000
|
unkown
|
page read and write
|
|
|
|
284E1513000
|
unkown
|
page read and write
|
|
|
|
D5242FE000
|
unkown
|
page read and write
|
|
|
|
C16000
|
unkown image
|
page write copy
|
|
|
|
7FF53C4A0000
|
unkown
|
page readonly
|
|
|
|
7FF562705000
|
unkown
|
page readonly
|
|
|
|
1E006B60000
|
unkown
|
page readonly
|
|
|
|
14FE000
|
unkown
|
page read and write
|
|
|
|
22B0E4B3000
|
unkown
|
page read and write
|
|
|
|
7FF562755000
|
unkown
|
page readonly
|
|
|
|
7FF5E8C93000
|
unkown
|
page readonly
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
7FF4F329C000
|
unkown
|
page readonly
|
|
|
|
30A0000
|
unkown
|
page readonly
|
|
|
|
284E13D0000
|
unkown
|
page readonly
|
|
|
|
7FF5CE9FC000
|
unkown
|
page readonly
|
|
|
|
7FF5626D6000
|
unkown
|
page readonly
|
|
|
|
22B08DE1000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2E35000
|
heap private
|
page read and write
|
|
|
|
7FF5E8C51000
|
unkown
|
page readonly
|
|
|
|
1180000
|
unkown
|
page read and write
|
|
|
|
7FF5E88F1000
|
unkown
|
page readonly
|
|
|
|
22B09390000
|
unkown
|
page readonly
|
|
|
|
7FF51FA07000
|
unkown
|
page readonly
|
|
|
|
7FF579A6C000
|
unkown
|
page readonly
|
|
|
|
7FF5D81CE000
|
unkown
|
page readonly
|
|
|
|
265B8A57000
|
unkown
|
page read and write
|
|
|
|
1F85F660000
|
unkown
|
page readonly
|
|
|
|
284E2F70000
|
unkown
|
page read and write
|
|
|
|
7FF5E8A75000
|
unkown
|
page readonly
|
|
|
|
7FF579AF6000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
16AC8190000
|
unkown
|
page readonly
|
|
|
|
77230F7000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA82000
|
unkown
|
page readonly
|
|
|
|
7FF5E8D57000
|
unkown
|
page readonly
|
|
|
|
7FF565627000
|
unkown
|
page readonly
|
|
|
|
7FF5D847C000
|
unkown
|
page readonly
|
|
|
|
2E52000
|
unkown
|
page read and write
|
|
|
|
7FF565D7F000
|
unkown
|
page readonly
|
|
|
|
7FF5E8A3C000
|
unkown
|
page readonly
|
|
|
|
7FF5D84BA000
|
unkown
|
page readonly
|
|
|
|
C0C5FF000
|
unkown
|
page read and write
|
|
|
|
608C47E000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA98000
|
unkown
|
page readonly
|
|
|
|
284E1402000
|
unkown
|
page read and write
|
|
|
|
7FF5C1878000
|
unkown
|
page readonly
|
|
|
|
22B09718000
|
unkown
|
page read and write
|
|
|
|
284E143D000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B71000
|
unkown
|
page readonly
|
|
|
|
7FF4F3421000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
22B09758000
|
unkown
|
page read and write
|
|
|
|
1F85F113000
|
unkown
|
page read and write
|
|
|
|
7FF579758000
|
unkown
|
page readonly
|
|
|
|
35E0000
|
unkown
|
page readonly
|
|
|
|
1F7F0C02000
|
unkown
|
page read and write
|
|
|
|
1650000
|
unkown
|
page readonly
|
|
|
|
2ED9000
|
unkown
|
page read and write
|
|
|
|
1C4AD1D0000
|
unkown
|
page readonly
|
|
|
|
7FF5E8D1D000
|
unkown
|
page readonly
|
|
|
|
E6BB0FC000
|
unkown
|
page read and write
|
|
|
|
2512144F000
|
unkown
|
page read and write
|
|
|
|
22B0E314000
|
unkown
|
page read and write
|
|
|
|
2FDE000
|
unkown
|
page read and write
|
|
|
|
1260000
|
unkown
|
page readonly
|
|
|
|
7FF5627C9000
|
unkown
|
page readonly
|
|
|
|
318E000
|
unkown
|
page read and write
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
7FF5C18DC000
|
unkown
|
page readonly
|
|
|
|
25121500000
|
unkown
|
page read and write
|
|
|
|
7FF51FDD5000
|
unkown
|
page readonly
|
|
|
|
1E006AF0000
|
heap private
|
page read and write
|
|
|
|
7FF5624EA000
|
unkown
|
page readonly
|
|
|
|
7FF5D8537000
|
unkown
|
page readonly
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
11D0000
|
unkown
|
page read and write
|
|
|
|
7FF4F33AC000
|
unkown
|
page readonly
|
|
|
|
F12ED7B000
|
unkown
|
page read and write
|
|
|
|
265B89F0000
|
unkown
|
page readonly
|
|
|
|
7FF5C1900000
|
unkown
|
page readonly
|
|
|
|
7FF579A98000
|
unkown
|
page readonly
|
|
|
|
7FF5E8DB9000
|
unkown
|
page readonly
|
|
|
|
7FF53C2A8000
|
unkown
|
page readonly
|
|
|
|
7FF51FDB6000
|
unkown
|
page readonly
|
|
|
|
265B8A6D000
|
unkown
|
page read and write
|
|
|
|
7FF5E89CC000
|
unkown
|
page readonly
|
|
|
|
C14000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEB7E000
|
unkown
|
page readonly
|
|
|
|
7722F7B000
|
unkown
|
page read and write
|
|
|
|
FC2000
|
unkown
|
page read and write
|
|
|
|
22B0E3CC000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1C4AD870000
|
unkown
|
page readonly
|
|
|
|
C0CAFD000
|
unkown
|
page read and write
|
|
|
|
7FF579B06000
|
unkown
|
page readonly
|
|
|
|
22B09702000
|
unkown
|
page read and write
|
|
|
|
284E2F90000
|
unkown
|
page readonly
|
|
|
|
22B09E10000
|
unkown
|
page readonly
|
|
|
|
7FF5E8B1E000
|
unkown
|
page readonly
|
|
|
|
1E006ED0000
|
unkown
|
page readonly
|
|
|
|
E6BB57C000
|
unkown
|
page read and write
|
|
|
|
284E142A000
|
unkown
|
page read and write
|
|
|
|
1F7F1402000
|
unkown
|
page read and write
|
|
|
|
1F7F0AA0000
|
heap default
|
page read and write
|
|
|
|
7FF579B7E000
|
unkown
|
page readonly
|
|
|
|
1F7F0C5E000
|
unkown
|
page read and write
|
|
|
|
7FF5626FE000
|
unkown
|
page readonly
|
|
|
|
13FA9400000
|
unkown
|
page read and write
|
|
|
|
7FF53C26E000
|
unkown
|
page readonly
|
|
|
|
7FF4F33C0000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5CEB15000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF51FD58000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
13FA9320000
|
unkown
|
page readonly
|
|
|
|
34E1000
|
unkown
|
page read and write
|
|
|
|
7FF53C2D9000
|
unkown
|
page readonly
|
|
|
|
E6BB67D000
|
unkown
|
page read and write
|
|
|
|
25121451000
|
unkown
|
page read and write
|
|
|
|
7FF53C43E000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
22B08D60000
|
unkown
|
page readonly
|
|
|
|
7FF53C1BE000
|
unkown
|
page readonly
|
|
|
|
608C17E000
|
unkown
|
page read and write
|
|
|
|
E6BB77F000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1C4ADB32000
|
unkown
|
page read and write
|
|
|
|
25121508000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF56254F000
|
unkown
|
page readonly
|
|
|
|
7FF579A37000
|
unkown
|
page readonly
|
|
|
|
7FF4F3261000
|
unkown
|
page readonly
|
|
|
|
7FF57995A000
|
unkown
|
page readonly
|
|
|
|
7FF5E8CB2000
|
unkown
|
page readonly
|
|
|
|
7FF5C195E000
|
unkown
|
page readonly
|
|
|
|
608C57F000
|
unkown
|
page read and write
|
|
|
|
2F2E000
|
unkown
|
page read and write
|
|
|
|
608C67F000
|
unkown
|
page read and write
|
|
|
|
7FF5CEB81000
|
unkown
|
page readonly
|
|
|
|
C16000
|
unkown image
|
page read and write
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
265B8A5A000
|
unkown
|
page read and write
|
|
|
|
7FF579B0C000
|
unkown
|
page readonly
|
|
|
|
D15FEFF000
|
unkown
|
page read and write
|
|
|
|
265B9202000
|
unkown
|
page read and write
|
|
|
|
22B0E422000
|
unkown
|
page read and write
|
|
|
|
22B0E600000
|
unkown
|
page read and write
|
|
|
|
41623FE000
|
unkown
|
page read and write
|
|
|
|
265B8A47000
|
unkown
|
page read and write
|
|
|
|
7FF579A78000
|
unkown
|
page readonly
|
|
|
|
C11000
|
unkown image
|
page execute read
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
77231FF000
|
unkown
|
page read and write
|
|
|
|
41625FF000
|
unkown
|
page read and write
|
|
|
|
25121600000
|
unkown
|
page readonly
|
|
|
|
7FF565D24000
|
unkown
|
page readonly
|
|
|
|
7FF5D8599000
|
unkown
|
page readonly
|
|
|
|
16AC825A000
|
unkown
|
page read and write
|
|
|
|
7FF5E8D21000
|
unkown
|
page readonly
|
|
|
|
7722CFE000
|
unkown
|
page read and write
|
|
|
|
25121F40000
|
unkown
|
page readonly
|
|
|
|
7FF56566C000
|
unkown
|
page readonly
|
|
|
|
7FF5655DD000
|
unkown
|
page readonly
|
|
|
|
7FF5C18EC000
|
unkown
|
page readonly
|
|
|
|
251211C0000
|
heap private
|
page read and write
|
|
|
|
D5241FE000
|
unkown
|
page read and write
|
|
|
|
7FF53C3F8000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown image
|
page readonly
|
|
|
|
608C37F000
|
unkown
|
page read and write
|
|
|
|
FC8000
|
unkown
|
page read and write
|
|
|
|
7FF5E8988000
|
unkown
|
page readonly
|
|
|
|
22B08EA3000
|
unkown
|
page read and write
|
|
|
|
7FF5C18F5000
|
unkown
|
page readonly
|
|
|
|
7FF51FA00000
|
unkown
|
page readonly
|
|
|
|
7FF5D8506000
|
unkown
|
page readonly
|
|
|
|
FCE000
|
unkown
|
page read and write
|
|
|
|
7FF5D8534000
|
unkown
|
page readonly
|
|
|
|
22B0E453000
|
unkown
|
page read and write
|
|
|
|
7FF53C416000
|
unkown
|
page readonly
|
|
|
|
22B095C3000
|
unkown
|
page read and write
|
|
|
|
22B0E3B0000
|
unkown
|
page readonly
|
|
|
|
22B09759000
|
unkown
|
page read and write
|
|
|
|
286ED7D000
|
unkown
|
page read and write
|
|
|
|
1F7F0C5B000
|
unkown
|
page read and write
|
|
|
|
265B8A5E000
|
unkown
|
page read and write
|
|
|
|
7FF53C509000
|
unkown
|
page readonly
|
|
|
|
286E87E000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1F7F0D02000
|
unkown
|
page read and write
|
|
|
|
7FF51FE3E000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
16AC823F000
|
unkown
|
page read and write
|
|
|
|
2512147F000
|
unkown
|
page read and write
|
|
|
|
2512148C000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
1C4AD302000
|
unkown
|
page read and write
|
|
|
|
7FF5CE993000
|
unkown
|
page readonly
|
|
|
|
1E006B50000
|
heap default
|
page read and write
|
|
|
|
3B80000
|
unkown
|
page read and write
|
|
|
|
7FF51FD85000
|
unkown
|
page readonly
|
|
|
|
284E2FA0000
|
unkown
|
page write copy
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5D8590000
|
unkown
|
page readonly
|
|
|
|
7FF53C4FE000
|
unkown
|
page readonly
|
|
|
|
22B0E3E0000
|
unkown
|
page read and write
|
|
|
|
13FA99C0000
|
unkown
|
page read and write
|
|
|
|
22B09E20000
|
unkown
|
page readonly
|
|
|
|
22B0E180000
|
unkown
|
page readonly
|
|
|
|
F12EC75000
|
unkown
|
page read and write
|
|
|
|
1F85EE80000
|
unkown
|
page readonly
|
|
|
|
286E8FE000
|
unkown
|
page read and write
|
|
|
|
1C4ADB00000
|
unkown
|
page read and write
|
|
|
|
1F85F013000
|
unkown
|
page read and write
|
|
|
|
22B09C00000
|
unkown
|
page read and write
|
|
|
|
7FF51FA03000
|
unkown
|
page readonly
|
|
|
|
7FF51FDE7000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
11C4000
|
unkown
|
page read and write
|
|
|
|
7FF565D75000
|
unkown
|
page readonly
|
|
|
|
22B09700000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
16AC8202000
|
unkown
|
page read and write
|
|
|
|
7FF579A3A000
|
unkown
|
page readonly
|
|
|
|
13FA9310000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
2E94000
|
unkown
|
page read and write
|
|
|
|
7FF5622D0000
|
unkown
|
page readonly
|
|
|
|
7FF565D46000
|
unkown
|
page readonly
|
|
|
|
11D0000
|
unkown
|
page read and write
|
|
|
|
3B20000
|
unkown
|
page read and write
|
|
|
|
7FF4F2F20000
|
unkown
|
page readonly
|
|
|
|
7FF579ACF000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF579A96000
|
unkown
|
page readonly
|
|
|
|
22B0E630000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF51FD52000
|
unkown
|
page readonly
|
|
|
|
265B8A00000
|
unkown
|
page read and write
|
|
|
|
7FF53C28F000
|
unkown
|
page readonly
|
|
|
|
E6BB47F000
|
unkown
|
page read and write
|
|
|
|
7FF5CEB06000
|
unkown
|
page readonly
|
|
|
|
FBF000
|
unkown
|
page read and write
|
|
|
|
7FF5C1860000
|
unkown
|
page readonly
|
|
|
|
22B0E2DE000
|
unkown
|
page read and write
|
|
|
|
22B0E690000
|
unkown
|
page readonly
|
|
|
|
2F91000
|
unkown
|
page read and write
|
|
|
|
7FF5D81E6000
|
unkown
|
page readonly
|
|
|
|
1159000
|
unkown
|
page read and write
|
|
|
|
7FF579ABE000
|
unkown
|
page readonly
|
|
|
|
7FF5E8A6E000
|
unkown
|
page readonly
|
|
|
|
265B8A46000
|
unkown
|
page read and write
|
|
|
|
7FF565975000
|
unkown
|
page readonly
|
|
|
|
2F1A000
|
unkown
|
page read and write
|
|
|
|
11BD000
|
unkown
|
page read and write
|
|
There are 1117 hidden memdumps, click here to show them.