Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
PHvqpLRfRl.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\edb.log
|
data
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
|
Extensible storage engine DataBase, version 0x620, checksum 0x0efe33c8, page size 16384, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCircular.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl.0001@. (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\UnistackCircular.etl.0001 (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl.0001.k (copy)
|
data
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
|
data
|
modified
|
|
There are 2 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\PHvqpLRfRl.exe
|
'C:\Users\user\Desktop\PHvqpLRfRl.exe'
|
|
|
|
C:\Windows\SysWOW64\BackgroundTransferHost\ipsmsnap.exe
|
C:\Windows\SysWOW64\BackgroundTransferHost\ipsmsnap.exe
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k unistacksvcgroup
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k NetworkService -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\SgrmBroker.exe
|
C:\Windows\system32\SgrmBroker.exe
|
|
|
|
C:\Program Files\Windows Defender\MpCmdRun.exe
|
'C:\Program Files\Windows Defender\mpcmdrun.exe' -wdenable
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
There are 5 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://120.138.30.150:8080/2aF5ml4oR/WXLdIdZGpJmXIp5/PBsOTo7qERajOZz1lh/LN3m/MNxh/5?
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Driving
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Traffic/Incidents/
|
unknown
|
|
|
|
https://t0.tiles.ditu.live.com/tiles/gen
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Walking
|
unknown
|
|
|
|
http://74.219.172.26/3vre0AbvHoC/72zolH2gtmnbq3QOxa/GmI2ntvI/3wNRQ8Motcr5/
|
unknown
|
|
|
|
http://104.156.59.7:8080/3x1oIXewHYdNlV01/MCzATjJI1I/RPBsOTo7qERajOZz1lh/LN3m/MNxh/#?
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/logging.ashx
|
unknown
|
|
|
|
http://194.187.133.160:443/rRPAuzYPI/PCfjdWIpUQcAD/TNhKcjKj/nadJLloIjR2s5GA9b/NUnsi05bbdpoKVYXGgn/R8
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?entry=
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
|
unknown
|
|
|
|
http://120.138.30.150:8080/2aF5ml4oR/WXLdIdZGpJmXIp5/c8
|
unknown
|
|
|
|
http://104.156.59.7:8080/3x1oIXewHYdNlV01/MCzATjJI1I/RPBsOTo7qERajOZz1lh/LN3m/MNxh/m
|
unknown
|
|
|
|
https://appexmapsappupdate.blob.core.windows.net
|
unknown
|
|
|
|
http://120.138.30.150:8080/2aF5ml4oR/WXLdIdZGpJmXIp5/
|
unknown
|
|
|
|
http://104.236.246.93:8080/nNKoq5kK/=
|
unknown
|
|
|
|
http://www.bingmapsportal.com
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
|
unknown
|
|
|
|
http://104.156.59.7:8080/3x1oIXewHYdNlV01/MCzATjJI1I/RPBsOTo7qERajOZz1lh/LN3m/MNxh/
|
unknown
|
|
|
|
http://104.236.246.93:8080/nNKoq5kK/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Traffic/Incidents/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
|
unknown
|
|
|
|
https://%s.xboxlive.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Locations
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
http://134.209.36.254:8080/tWwU/w3xB1Bhz7yaslBgJS/q49F3NAtj1IqnXaW2A/GIQOEsdbSxikR6wT/lMJv8yE/
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/logging.ashx
|
unknown
|
|
|
|
http://104.156.59.7:8080/3x1oIXeY
|
unknown
|
|
|
|
http://104.236.246.93:8080/nNKoq5kK/n
|
unknown
|
|
|
|
http://104.156.59.7:8080/3x1oIXewHYdNlV01/MCzATjJI1I/RPBsOTo7qERajOZz1lh/LN3m/MNxh/3
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dynamic.t
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Transit
|
unknown
|
|
|
|
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://activity.windows.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Locations
|
unknown
|
|
|
|
https://%s.dnet.xboxlive.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
|
unknown
|
|
There are 43 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
94.200.114.161
|
unknown
|
United Arab Emirates
|
|
|
|
85.152.162.105
|
unknown
|
Spain
|
|
|
|
174.102.48.180
|
unknown
|
United States
|
|
|
|
169.239.182.217
|
unknown
|
South Africa
|
|
|
|
200.123.150.89
|
unknown
|
Argentina
|
|
|
|
220.245.198.194
|
unknown
|
Australia
|
|
|
|
104.131.11.150
|
unknown
|
United States
|
|
|
|
176.111.60.55
|
unknown
|
Ukraine
|
|
|
|
94.23.237.171
|
unknown
|
France
|
|
|
|
187.161.206.24
|
unknown
|
Mexico
|
|
|
|
139.162.108.71
|
unknown
|
Netherlands
|
|
|
|
156.155.166.221
|
unknown
|
South Africa
|
|
|
|
104.32.141.43
|
unknown
|
United States
|
|
|
|
94.1.108.190
|
unknown
|
United Kingdom
|
|
|
|
87.106.139.101
|
unknown
|
Germany
|
|
|
|
213.196.135.145
|
unknown
|
Switzerland
|
|
|
|
62.30.7.67
|
unknown
|
United Kingdom
|
|
|
|
79.98.24.39
|
unknown
|
Lithuania
|
|
|
|
107.5.122.110
|
unknown
|
United States
|
|
|
|
75.139.38.211
|
unknown
|
United States
|
|
|
|
87.106.136.232
|
unknown
|
Germany
|
|
|
|
110.5.16.198
|
unknown
|
Japan
|
|
|
|
104.131.44.150
|
unknown
|
United States
|
|
|
|
62.75.141.82
|
unknown
|
Germany
|
|
|
|
124.41.215.226
|
unknown
|
Nepal
|
|
|
|
172.91.208.86
|
unknown
|
United States
|
|
|
|
37.139.21.175
|
unknown
|
Netherlands
|
|
|
|
194.187.133.160
|
unknown
|
Bulgaria
|
|
|
|
24.43.99.75
|
unknown
|
United States
|
|
|
|
95.213.236.64
|
unknown
|
Russian Federation
|
|
|
|
46.105.131.79
|
unknown
|
France
|
|
|
|
139.130.242.43
|
unknown
|
Australia
|
|
|
|
82.80.155.43
|
unknown
|
Israel
|
|
|
|
110.145.77.103
|
unknown
|
Australia
|
|
|
|
61.92.17.12
|
unknown
|
Hong Kong
|
|
|
|
120.150.60.189
|
unknown
|
Australia
|
|
|
|
93.147.212.206
|
unknown
|
Italy
|
|
|
|
91.211.88.52
|
unknown
|
Ukraine
|
|
|
|
68.188.112.97
|
unknown
|
United States
|
|
|
|
153.232.188.106
|
unknown
|
Japan
|
|
|
|
140.186.212.146
|
unknown
|
United States
|
|
|
|
121.7.127.163
|
unknown
|
Singapore
|
|
|
|
50.35.17.13
|
unknown
|
United States
|
|
|
|
157.245.99.39
|
unknown
|
United States
|
|
|
|
203.153.216.189
|
unknown
|
Indonesia
|
|
|
|
174.45.13.118
|
unknown
|
United States
|
|
|
|
162.241.242.173
|
unknown
|
United States
|
|
|
|
85.105.205.77
|
unknown
|
Turkey
|
|
|
|
123.176.25.234
|
unknown
|
Maldives
|
|
|
|
74.120.55.163
|
unknown
|
Canada
|
|
|
|
50.91.114.38
|
unknown
|
United States
|
|
|
|
200.114.213.233
|
unknown
|
Argentina
|
|
|
|
78.24.219.147
|
unknown
|
Russian Federation
|
|
|
|
24.179.13.119
|
unknown
|
United States
|
|
|
|
104.156.59.7
|
unknown
|
United States
|
|
|
|
203.117.253.142
|
unknown
|
Singapore
|
|
|
|
201.173.217.124
|
unknown
|
Mexico
|
|
|
|
139.99.158.11
|
unknown
|
Canada
|
|
|
|
134.209.36.254
|
unknown
|
United States
|
|
|
|
195.251.213.56
|
unknown
|
Greece
|
|
|
|
75.80.124.4
|
unknown
|
United States
|
|
|
|
121.124.124.40
|
unknown
|
Korea Republic of
|
|
|
|
47.144.21.12
|
unknown
|
United States
|
|
|
|
139.59.60.244
|
unknown
|
Singapore
|
|
|
|
61.19.246.238
|
unknown
|
Thailand
|
|
|
|
168.235.67.138
|
unknown
|
United States
|
|
|
|
139.59.67.118
|
unknown
|
Singapore
|
|
|
|
137.59.187.107
|
unknown
|
Hong Kong
|
|
|
|
219.74.18.66
|
unknown
|
Singapore
|
|
|
|
78.187.156.31
|
unknown
|
Turkey
|
|
|
|
188.219.31.12
|
unknown
|
Italy
|
|
|
|
83.169.36.251
|
unknown
|
Germany
|
|
|
|
74.134.41.124
|
unknown
|
United States
|
|
|
|
5.196.74.210
|
unknown
|
France
|
|
|
|
42.200.107.142
|
unknown
|
Hong Kong
|
|
|
|
1.221.254.82
|
unknown
|
Korea Republic of
|
|
|
|
74.208.45.104
|
unknown
|
United States
|
|
|
|
120.138.30.150
|
unknown
|
New Zealand
|
|
|
|
84.39.182.7
|
unknown
|
Spain
|
|
|
|
97.82.79.83
|
unknown
|
United States
|
|
|
|
24.137.76.62
|
unknown
|
Canada
|
|
|
|
82.225.49.121
|
unknown
|
France
|
|
|
|
37.187.72.193
|
unknown
|
France
|
|
|
|
181.169.34.190
|
unknown
|
Argentina
|
|
|
|
95.179.229.244
|
unknown
|
Netherlands
|
|
|
|
109.74.5.95
|
unknown
|
Sweden
|
|
|
|
74.219.172.26
|
unknown
|
United States
|
|
|
|
79.137.83.50
|
unknown
|
France
|
|
|
|
103.86.49.11
|
unknown
|
Thailand
|
|
|
|
209.141.54.221
|
unknown
|
United States
|
|
|
|
89.216.122.92
|
unknown
|
Serbia
|
|
|
|
185.94.252.104
|
unknown
|
Germany
|
|
|
|
5.39.91.110
|
unknown
|
France
|
|
|
|
137.119.36.33
|
unknown
|
United States
|
|
|
|
104.236.246.93
|
unknown
|
United States
|
|
|
|
94.23.216.33
|
unknown
|
France
|
|
|
|
219.75.128.166
|
unknown
|
Japan
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
There are 88 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\svchost.exe
|
cval
|
|
|
|
C:\Windows\System32\svchost.exe
|
cval
|
|
|
|
C:\Windows\System32\svchost.exe
|
PerfMMFileName
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-100
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-101
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\dnsapi.dll,-103
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
|
|
|
|
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\NgcRecovery.dll,-100
|
|
|
|
C:\Windows\System32\svchost.exe
|
MonthID
|
|
There are 2 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
E50000
|
unkown
|
page execute and read and write
|
|
|
|
401000
|
unkown
|
page execute read
|
|
|
|
3F0000
|
unkown
|
page execute and read and write
|
|
|
|
814000
|
unkown
|
page read and write
|
|
|
|
981000
|
unkown
|
page execute read
|
|
|
|
E64000
|
unkown
|
page read and write
|
|
|
|
7FF5DD705000
|
unkown
|
page readonly
|
|
|
|
7FF5094FB000
|
unkown
|
page readonly
|
|
|
|
7FF4EEFCB000
|
unkown
|
page readonly
|
|
|
|
25BE0F90000
|
unkown
|
page read and write
|
|
|
|
7FF5159B8000
|
unkown
|
page readonly
|
|
|
|
26AEC002000
|
unkown
|
page read and write
|
|
|
|
1431E513000
|
unkown
|
page read and write
|
|
|
|
1431E2F0000
|
unkown
|
page readonly
|
|
|
|
184DCA02000
|
unkown
|
page read and write
|
|
|
|
25BE10B9000
|
unkown
|
page read and write
|
|
|
|
7FF5954E5000
|
unkown
|
page readonly
|
|
|
|
20D1FF02000
|
unkown
|
page read and write
|
|
|
|
DD85E7A000
|
unkown
|
page read and write
|
|
|
|
7FF4EF6D7000
|
unkown
|
page readonly
|
|
|
|
33B0000
|
unkown
|
page read and write
|
|
|
|
26AEC200000
|
unkown
|
page readonly
|
|
|
|
10F0000
|
unkown
|
page readonly
|
|
|
|
F517BFC000
|
unkown
|
page read and write
|
|
|
|
67F65F7000
|
unkown
|
page read and write
|
|
|
|
26BD1B00000
|
unkown
|
page read and write
|
|
|
|
7FF4EF568000
|
unkown
|
page readonly
|
|
|
|
7FF4EF42D000
|
unkown
|
page readonly
|
|
|
|
224C3102000
|
unkown
|
page read and write
|
|
|
|
7FF560A79000
|
unkown
|
page readonly
|
|
|
|
26BD1A49000
|
unkown
|
page read and write
|
|
|
|
7FF4EF5F0000
|
unkown
|
page readonly
|
|
|
|
25BE6861000
|
unkown
|
page read and write
|
|
|
|
2D9E9861000
|
unkown
|
page read and write
|
|
|
|
7FF51597A000
|
unkown
|
page readonly
|
|
|
|
E61000
|
unkown
|
page execute read
|
|
|
|
20D1FD40000
|
unkown
|
page readonly
|
|
|
|
25BE2040000
|
unkown
|
page readonly
|
|
|
|
589227E000
|
unkown
|
page read and write
|
|
|
|
7FF509C80000
|
unkown
|
page readonly
|
|
|
|
184DC24C000
|
unkown
|
page read and write
|
|
|
|
25C81F50000
|
unkown
|
page readonly
|
|
|
|
184DC249000
|
unkown
|
page read and write
|
|
|
|
7FF515A19000
|
unkown
|
page readonly
|
|
|
|
1090000
|
unkown
|
page readonly
|
|
|
|
7FF509C1E000
|
unkown
|
page readonly
|
|
|
|
7FF515AC0000
|
unkown
|
page readonly
|
|
|
|
20D1FF13000
|
unkown
|
page read and write
|
|
|
|
67F5FCE000
|
unkown
|
page read and write
|
|
|
|
2D9E9813000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4F0000
|
unkown
|
page readonly
|
|
|
|
184DC239000
|
unkown
|
page read and write
|
|
|
|
98D000
|
unkown
|
page read and write
|
|
|
|
F517E7C000
|
unkown
|
page read and write
|
|
|
|
7FF509CE9000
|
unkown
|
page readonly
|
|
|
|
20D20800000
|
unkown
|
page readonly
|
|
|
|
26BD1B13000
|
unkown
|
page read and write
|
|
|
|
25BE0E90000
|
unkown
|
page readonly
|
|
|
|
7FF515A2D000
|
unkown
|
page readonly
|
|
|
|
7FF4EF6F7000
|
unkown
|
page readonly
|
|
|
|
7FF56D6D8000
|
unkown
|
page readonly
|
|
|
|
7FF560883000
|
unkown
|
page readonly
|
|
|
|
25C8186A000
|
unkown
|
page read and write
|
|
|
|
5891FAE000
|
unkown
|
page read and write
|
|
|
|
E40000
|
unkown
|
page readonly
|
|
|
|
67F66FF000
|
unkown
|
page read and write
|
|
|
|
7FF55F685000
|
unkown
|
page readonly
|
|
|
|
7FF56CECF000
|
unkown
|
page readonly
|
|
|
|
1140000
|
unkown image
|
page readonly
|
|
|
|
DD863FF000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page readonly
|
|
|
|
5A2000
|
unkown
|
page read and write
|
|
|
|
1276926A000
|
unkown
|
page read and write
|
|
|
|
7FF56D56F000
|
unkown
|
page readonly
|
|
|
|
25BE64E8000
|
unkown
|
page read and write
|
|
|
|
7FF5288F9000
|
unkown
|
page readonly
|
|
|
|
24F7FA9F000
|
unkown
|
page read and write
|
|
|
|
DD8627F000
|
unkown
|
page read and write
|
|
|
|
F517A7F000
|
unkown
|
page read and write
|
|
|
|
7FF50D02D000
|
unkown
|
page readonly
|
|
|
|
7FF5B0180000
|
unkown
|
page readonly
|
|
|
|
184DC170000
|
unkown
|
page read and write
|
|
|
|
25BE1089000
|
unkown
|
page read and write
|
|
|
|
7FF515698000
|
unkown
|
page readonly
|
|
|
|
7FF4EF363000
|
unkown
|
page readonly
|
|
|
|
24F7FCD0000
|
unkown
|
page readonly
|
|
|
|
7FF5157F7000
|
unkown
|
page readonly
|
|
|
|
26BD1B18000
|
unkown
|
page read and write
|
|
|
|
224C3002000
|
unkown
|
page read and write
|
|
|
|
7FF5AFFAA000
|
unkown
|
page readonly
|
|
|
|
7FF4EF70C000
|
unkown
|
page readonly
|
|
|
|
589277F000
|
unkown
|
page read and write
|
|
|
|
224C2E40000
|
unkown
|
page readonly
|
|
|
|
F517D7B000
|
unkown
|
page read and write
|
|
|
|
7FF51589A000
|
unkown
|
page readonly
|
|
|
|
184DC242000
|
unkown
|
page read and write
|
|
|
|
1140000
|
unkown image
|
page readonly
|
|
|
|
184DC24D000
|
unkown
|
page read and write
|
|
|
|
813000
|
unkown
|
page readonly
|
|
|
|
7FF560970000
|
unkown
|
page readonly
|
|
|
|
37AE000
|
unkown
|
page read and write
|
|
|
|
127690D0000
|
unkown
|
page readonly
|
|
|
|
7FF56D7E9000
|
unkown
|
page readonly
|
|
|
|
25BE65EC000
|
unkown
|
page readonly
|
|
|
|
26AEBFA0000
|
unkown
|
page read and write
|
|
|
|
7FF56081A000
|
unkown
|
page readonly
|
|
|
|
4F81FDB000
|
unkown
|
page read and write
|
|
|
|
7FF5957D8000
|
unkown
|
page readonly
|
|
|
|
23503FE000
|
unkown
|
page read and write
|
|
|
|
26BD3510000
|
unkown
|
page readonly
|
|
|
|
13C0000
|
heap private
|
page read and write
|
|
|
|
7FF55F608000
|
unkown
|
page readonly
|
|
|
|
25BE106C000
|
unkown
|
page read and write
|
|
|
|
7FF5DD767000
|
unkown
|
page readonly
|
|
|
|
7FF5159FE000
|
unkown
|
page readonly
|
|
|
|
1431E479000
|
unkown
|
page read and write
|
|
|
|
E90000
|
heap default
|
page read and write
|
|
|
|
1431E402000
|
unkown
|
page read and write
|
|
|
|
7FF509CE1000
|
unkown
|
page readonly
|
|
|
|
2D9E9800000
|
unkown
|
page read and write
|
|
|
|
7FF55F635000
|
unkown
|
page readonly
|
|
|
|
7FF59578B000
|
unkown
|
page readonly
|
|
|
|
7FF4EF7A6000
|
unkown
|
page readonly
|
|
|
|
7FF50D096000
|
unkown
|
page readonly
|
|
|
|
25BE63D0000
|
unkown
|
page read and write
|
|
|
|
7FF558AC7000
|
unkown
|
page readonly
|
|
|
|
26BD1A67000
|
unkown
|
page read and write
|
|
|
|
184DC250000
|
unkown
|
page read and write
|
|
|
|
7FF4EEFC8000
|
unkown
|
page readonly
|
|
|
|
25BE63E0000
|
unkown
|
page read and write
|
|
|
|
7FF56084A000
|
unkown
|
page readonly
|
|
|
|
224C3076000
|
unkown
|
page read and write
|
|
|
|
6B90DFE000
|
unkown
|
page read and write
|
|
|
|
7FF4EF5E1000
|
unkown
|
page readonly
|
|
|
|
7FF4EF55C000
|
unkown
|
page readonly
|
|
|
|
25BE6854000
|
unkown
|
page read and write
|
|
|
|
7FF558C06000
|
unkown
|
page readonly
|
|
|
|
26BD1A49000
|
unkown
|
page read and write
|
|
|
|
A3C000
|
unkown
|
page read and write
|
|
|
|
7FF5B0289000
|
unkown
|
page readonly
|
|
|
|
E30000
|
unkown
|
page read and write
|
|
|
|
2584DE19000
|
heap default
|
page read and write
|
|
|
|
587000
|
unkown
|
page read and write
|
|
|
|
26BD1A00000
|
unkown
|
page read and write
|
|
|
|
26BD3500000
|
unkown
|
page readonly
|
|
|
|
25BE688D000
|
unkown
|
page read and write
|
|
|
|
7FF5B0224000
|
unkown
|
page readonly
|
|
|
|
7FF5609F6000
|
unkown
|
page readonly
|
|
|
|
26BD34F0000
|
unkown
|
page read and write
|
|
|
|
2EB1000
|
unkown
|
page read and write
|
|
|
|
184DC0E0000
|
heap private
|
page read and write
|
|
|
|
7FF55F6F1000
|
unkown
|
page readonly
|
|
|
|
E98BA7E000
|
unkown
|
page read and write
|
|
|
|
7FF558AC1000
|
unkown
|
page readonly
|
|
|
|
2D9E9872000
|
unkown
|
page read and write
|
|
|
|
7FF515A0F000
|
unkown
|
page readonly
|
|
|
|
26BD1A8A000
|
unkown
|
page read and write
|
|
|
|
184DC245000
|
unkown
|
page read and write
|
|
|
|
7FF5DD736000
|
unkown
|
page readonly
|
|
|
|
4F82A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5957D2000
|
unkown
|
page readonly
|
|
|
|
25BE68B4000
|
unkown
|
page read and write
|
|
|
|
1141000
|
unkown image
|
page execute read
|
|
|
|
7FF509AAE000
|
unkown
|
page readonly
|
|
|
|
25BE6610000
|
unkown
|
page read and write
|
|
|
|
7FF558C24000
|
unkown
|
page readonly
|
|
|
|
7FF50D11E000
|
unkown
|
page readonly
|
|
|
|
25BE1918000
|
unkown
|
page read and write
|
|
|
|
7FF5DD4F3000
|
unkown
|
page readonly
|
|
|
|
20D1FD30000
|
unkown
|
page readonly
|
|
|
|
26BD1A59000
|
unkown
|
page read and write
|
|
|
|
7FF52886C000
|
unkown
|
page readonly
|
|
|
|
93C000
|
unkown
|
page read and write
|
|
|
|
7FF50D06F000
|
unkown
|
page readonly
|
|
|
|
25BE6520000
|
unkown
|
page read and write
|
|
|
|
30BE000
|
unkown
|
page read and write
|
|
|
|
10CE000
|
unkown
|
page read and write
|
|
|
|
7FF4EF064000
|
unkown
|
page readonly
|
|
|
|
D1E000
|
unkown
|
page read and write
|
|
|
|
7FF509AF3000
|
unkown
|
page readonly
|
|
|
|
1431E3E0000
|
unkown
|
page read and write
|
|
|
|
25BE6504000
|
unkown
|
page read and write
|
|
|
|
7FF4EF738000
|
unkown
|
page readonly
|
|
|
|
20D1FE67000
|
unkown
|
page read and write
|
|
|
|
25BE6690000
|
unkown
|
page readonly
|
|
|
|
7FF56D7E9000
|
unkown
|
page readonly
|
|
|
|
2FAF000
|
unkown
|
page read and write
|
|
|
|
7FF515830000
|
unkown
|
page readonly
|
|
|
|
7FF4EF3F8000
|
unkown
|
page readonly
|
|
|
|
26BD34F0000
|
unkown
|
page read and write
|
|
|
|
7FF56D5B9000
|
unkown
|
page readonly
|
|
|
|
37AC000
|
unkown
|
page read and write
|
|
|
|
7FF560A6E000
|
unkown
|
page readonly
|
|
|
|
7FF5DCF76000
|
unkown
|
page readonly
|
|
|
|
224C305A000
|
unkown
|
page read and write
|
|
|
|
25C81A00000
|
unkown
|
page readonly
|
|
|
|
224C2E30000
|
heap default
|
page read and write
|
|
|
|
20D1FE13000
|
unkown
|
page read and write
|
|
|
|
7FF5609FC000
|
unkown
|
page readonly
|
|
|
|
A7E01FC000
|
unkown
|
page read and write
|
|
|
|
4F82E7E000
|
unkown
|
page read and write
|
|
|
|
7FF515A05000
|
unkown
|
page readonly
|
|
|
|
234FFEE000
|
unkown
|
page read and write
|
|
|
|
25BE0F80000
|
unkown
|
page read and write
|
|
|
|
7FF560A71000
|
unkown
|
page readonly
|
|
|
|
25C818C3000
|
unkown
|
page read and write
|
|
|
|
2D9E9710000
|
unkown
|
page readonly
|
|
|
|
A7DFFFD000
|
unkown
|
page read and write
|
|
|
|
7FF5B0198000
|
unkown
|
page readonly
|
|
|
|
7FF5156FE000
|
unkown
|
page readonly
|
|
|
|
26BD3602000
|
unkown
|
page read and write
|
|
|
|
7FF5DD6D2000
|
unkown
|
page readonly
|
|
|
|
184DC26D000
|
unkown
|
page read and write
|
|
|
|
25BE64E0000
|
unkown
|
page read and write
|
|
|
|
DE4000
|
unkown
|
page read and write
|
|
|
|
6B90CFE000
|
unkown
|
page read and write
|
|
|
|
DD8607F000
|
unkown
|
page read and write
|
|
|
|
25BE6524000
|
unkown
|
page read and write
|
|
|
|
7FF4EF829000
|
unkown
|
page readonly
|
|
|
|
6B907FE000
|
unkown
|
page read and write
|
|
|
|
7FF50CC8E000
|
unkown
|
page readonly
|
|
|
|
7FF5607FF000
|
unkown
|
page readonly
|
|
|
|
26AEC05C000
|
unkown
|
page read and write
|
|
|
|
7FF509C87000
|
unkown
|
page readonly
|
|
|
|
184DC284000
|
unkown
|
page read and write
|
|
|
|
235027F000
|
unkown
|
page read and write
|
|
|
|
25C82200000
|
unkown
|
page readonly
|
|
|
|
184DC23D000
|
unkown
|
page read and write
|
|
|
|
7FF50CD5E000
|
unkown
|
page readonly
|
|
|
|
7FF558BAA000
|
unkown
|
page readonly
|
|
|
|
7FF595483000
|
unkown
|
page readonly
|
|
|
|
1169000
|
unkown image
|
page read and write
|
|
|
|
7FF5DCFB7000
|
unkown
|
page readonly
|
|
|
|
2D9E985E000
|
unkown
|
page read and write
|
|
|
|
97D000
|
unkown
|
page read and write
|
|
|
|
4F82B7F000
|
unkown
|
page read and write
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
7FF595797000
|
unkown
|
page readonly
|
|
|
|
7FF56D739000
|
unkown
|
page readonly
|
|
|
|
DD867F9000
|
unkown
|
page read and write
|
|
|
|
25C81888000
|
unkown
|
page read and write
|
|
|
|
7FF56099A000
|
unkown
|
page readonly
|
|
|
|
20D1FC50000
|
heap default
|
page read and write
|
|
|
|
7FF5DD490000
|
unkown
|
page readonly
|
|
|
|
7FF560A17000
|
unkown
|
page readonly
|
|
|
|
25C82002000
|
unkown
|
page read and write
|
|
|
|
7FF558A5A000
|
unkown
|
page readonly
|
|
|
|
7FF4EF732000
|
unkown
|
page readonly
|
|
|
|
184DC200000
|
unkown
|
page read and write
|
|
|
|
25BE6510000
|
unkown
|
page read and write
|
|
|
|
7FF558C81000
|
unkown
|
page readonly
|
|
|
|
25BE1815000
|
unkown
|
page read and write
|
|
|
|
26AEBE80000
|
unkown
|
page readonly
|
|
|
|
30DE000
|
unkown
|
page read and write
|
|
|
|
1431E458000
|
unkown
|
page read and write
|
|
|
|
25BE1056000
|
unkown
|
page read and write
|
|
|
|
184DC27E000
|
unkown
|
page read and write
|
|
|
|
E98BE77000
|
unkown
|
page read and write
|
|
|
|
224C35B0000
|
unkown
|
page readonly
|
|
|
|
25BE102A000
|
unkown
|
page read and write
|
|
|
|
26BD3520000
|
unkown
|
page write copy
|
|
|
|
20D1FF08000
|
unkown
|
page read and write
|
|
|
|
12769268000
|
unkown
|
page read and write
|
|
|
|
7FF515A46000
|
unkown
|
page readonly
|
|
|
|
7FF528885000
|
unkown
|
page readonly
|
|
|
|
7FF515A67000
|
unkown
|
page readonly
|
|
|
|
7DFE12BF0000
|
unkown
|
page readonly
|
|
|
|
BD6537F000
|
unkown
|
page read and write
|
|
|
|
7FF558C27000
|
unkown
|
page readonly
|
|
|
|
C97000
|
unkown
|
page read and write
|
|
|
|
12769070000
|
unkown
|
page readonly
|
|
|
|
7FF4EF695000
|
unkown
|
page readonly
|
|
|
|
25BE2010000
|
unkown
|
page readonly
|
|
|
|
25BE1FF0000
|
unkown
|
page readonly
|
|
|
|
7FF528866000
|
unkown
|
page readonly
|
|
|
|
184DC241000
|
unkown
|
page read and write
|
|
|
|
26AEBE70000
|
heap default
|
page read and write
|
|
|
|
7FF5159C0000
|
unkown
|
page readonly
|
|
|
|
184DC26A000
|
unkown
|
page read and write
|
|
|
|
7FF509CE9000
|
unkown
|
page readonly
|
|
|
|
12769215000
|
heap private
|
page read and write
|
|
|
|
2584E0D0000
|
heap private
|
page read and write
|
|
|
|
7FF5DCF79000
|
unkown
|
page readonly
|
|
|
|
224C2F20000
|
unkown
|
page readonly
|
|
|
|
7FF558C0C000
|
unkown
|
page readonly
|
|
|
|
7FF50D0A6000
|
unkown
|
page readonly
|
|
|
|
7FF56D76C000
|
unkown
|
page readonly
|
|
|
|
7FF560580000
|
unkown
|
page readonly
|
|
|
|
7FF5288F9000
|
unkown
|
page readonly
|
|
|
|
2D9E9908000
|
unkown
|
page read and write
|
|
|
|
1354000
|
unkown
|
page read and write
|
|
|
|
7FF4EF707000
|
unkown
|
page readonly
|
|
|
|
26AEBFA0000
|
unkown
|
page read and write
|
|
|
|
20D1FF00000
|
unkown
|
page read and write
|
|
|
|
2B70000
|
unkown
|
page readonly
|
|
|
|
7FF50D129000
|
unkown
|
page readonly
|
|
|
|
7FF509C6C000
|
unkown
|
page readonly
|
|
|
|
E98BF7F000
|
unkown
|
page read and write
|
|
|
|
7FF558BFC000
|
unkown
|
page readonly
|
|
|
|
7FF558A0F000
|
unkown
|
page readonly
|
|
|
|
184DC268000
|
unkown
|
page read and write
|
|
|
|
40D000
|
unkown
|
page read and write
|
|
|
|
1760000
|
unkown
|
page readonly
|
|
|
|
67F64FE000
|
unkown
|
page read and write
|
|
|
|
7FF55F585000
|
unkown
|
page readonly
|
|
|
|
7FF558AFC000
|
unkown
|
page readonly
|
|
|
|
7FF595494000
|
unkown
|
page readonly
|
|
|
|
7FF4EF5CE000
|
unkown
|
page readonly
|
|
|
|
7FF5589AA000
|
unkown
|
page readonly
|
|
|
|
7FF50D05E000
|
unkown
|
page readonly
|
|
|
|
4F8277E000
|
unkown
|
page read and write
|
|
|
|
20D1FE29000
|
unkown
|
page read and write
|
|
|
|
80E000
|
unkown
|
page read and write
|
|
|
|
30D4000
|
unkown
|
page read and write
|
|
|
|
25C81760000
|
heap private
|
page read and write
|
|
|
|
234FF6C000
|
unkown
|
page read and write
|
|
|
|
2584DE3B000
|
heap default
|
page read and write
|
|
|
|
7FF50CD76000
|
unkown
|
page readonly
|
|
|
|
A7DFBFF000
|
unkown
|
page read and write
|
|
|
|
7FF509C56000
|
unkown
|
page readonly
|
|
|
|
7FF558C89000
|
unkown
|
page readonly
|
|
|
|
25BE6640000
|
unkown
|
page readonly
|
|
|
|
1431E413000
|
unkown
|
page read and write
|
|
|
|
1276924B000
|
heap default
|
page read and write
|
|
|
|
25C81913000
|
unkown
|
page read and write
|
|
|
|
2584E0D5000
|
heap private
|
page read and write
|
|
|
|
DC0000
|
unkown
|
page read and write
|
|
|
|
7FF56D787000
|
unkown
|
page readonly
|
|
|
|
32C000
|
unkown
|
page read and write
|
|
|
|
3210E7F000
|
unkown
|
page read and write
|
|
|
|
7FF5B0215000
|
unkown
|
page readonly
|
|
|
|
7FF5B01ED000
|
unkown
|
page readonly
|
|
|
|
5891F2B000
|
unkown
|
page read and write
|
|
|
|
DD8617B000
|
unkown
|
page read and write
|
|
|
|
26AEC060000
|
unkown
|
page read and write
|
|
|
|
7FF509A6F000
|
unkown
|
page readonly
|
|
|
|
7FF558C15000
|
unkown
|
page readonly
|
|
|
|
7FF4EF436000
|
unkown
|
page readonly
|
|
|
|
7FF558B98000
|
unkown
|
page readonly
|
|
|
|
25BE64EE000
|
unkown
|
page read and write
|
|
|
|
C98000
|
unkown
|
page read and write
|
|
|
|
32111FF000
|
unkown
|
page read and write
|
|
|
|
25C81813000
|
unkown
|
page read and write
|
|
|
|
67F627E000
|
unkown
|
page read and write
|
|
|
|
7FF4EF78D000
|
unkown
|
page readonly
|
|
|
|
4F82C7F000
|
unkown
|
page read and write
|
|
|
|
7FF5957FE000
|
unkown
|
page readonly
|
|
|
|
2584DDE0000
|
unkown
|
page read and write
|
|
|
|
E98BAFE000
|
unkown
|
page read and write
|
|
|
|
26AEBF60000
|
unkown
|
page readonly
|
|
|
|
7FF5957C2000
|
unkown
|
page readonly
|
|
|
|
25BE0E80000
|
heap default
|
page read and write
|
|
|
|
E9A000
|
heap default
|
page read and write
|
|
|
|
2584DDC0000
|
unkown
|
page read and write
|
|
|
|
184DC260000
|
unkown
|
page read and write
|
|
|
|
24F7F9D0000
|
heap default
|
page read and write
|
|
|
|
115F000
|
unkown image
|
page readonly
|
|
|
|
26BD1970000
|
unkown
|
page read and write
|
|
|
|
2584DE1E000
|
heap default
|
page read and write
|
|
|
|
7FF5958BE000
|
unkown
|
page readonly
|
|
|
|
7FF595846000
|
unkown
|
page readonly
|
|
|
|
7FF5DD485000
|
unkown
|
page readonly
|
|
|
|
7FF558B82000
|
unkown
|
page readonly
|
|
|
|
7FF50D091000
|
unkown
|
page readonly
|
|
|
|
A2A000
|
heap default
|
page read and write
|
|
|
|
7FF50D022000
|
unkown
|
page readonly
|
|
|
|
7FF50D04A000
|
unkown
|
page readonly
|
|
|
|
25BE1959000
|
unkown
|
page read and write
|
|
|
|
30B0000
|
unkown
|
page read and write
|
|
|
|
2D9EA002000
|
unkown
|
page read and write
|
|
|
|
2EB1000
|
unkown
|
page read and write
|
|
|
|
7FF509C25000
|
unkown
|
page readonly
|
|
|
|
7FF515ABE000
|
unkown
|
page readonly
|
|
|
|
3210FFB000
|
unkown
|
page read and write
|
|
|
|
2EB0000
|
unkown
|
page read and write
|
|
|
|
7FF56D6F8000
|
unkown
|
page readonly
|
|
|
|
184DC150000
|
unkown
|
page readonly
|
|
|
|
7FF528892000
|
unkown
|
page readonly
|
|
|
|
7FF5DD70F000
|
unkown
|
page readonly
|
|
|
|
BD6547E000
|
unkown
|
page read and write
|
|
|
|
7FF5958C9000
|
unkown
|
page readonly
|
|
|
|
DD8637E000
|
unkown
|
page read and write
|
|
|
|
E60000
|
unkown
|
page read and write
|
|
|
|
E20000
|
unkown
|
page readonly
|
|
|
|
7FF509C5C000
|
unkown
|
page readonly
|
|
|
|
2D9E9872000
|
unkown
|
page read and write
|
|
|
|
7FF4EF76F000
|
unkown
|
page readonly
|
|
|
|
7FF558BD9000
|
unkown
|
page readonly
|
|
|
|
184DC279000
|
unkown
|
page read and write
|
|
|
|
67F6375000
|
unkown
|
page read and write
|
|
|
|
10D0000
|
unkown
|
page read and write
|
|
|
|
7FF595831000
|
unkown
|
page readonly
|
|
|
|
25BE6390000
|
unkown
|
page readonly
|
|
|
|
25BE65B0000
|
unkown
|
page write copy
|
|
|
|
7FF558BF6000
|
unkown
|
page readonly
|
|
|
|
25C817E0000
|
unkown
|
page readonly
|
|
|
|
25BE6888000
|
unkown
|
page read and write
|
|
|
|
127691A0000
|
unkown
|
page read and write
|
|
|
|
7FF509C66000
|
unkown
|
page readonly
|
|
|
|
20D1FE3C000
|
unkown
|
page read and write
|
|
|
|
7FF595819000
|
unkown
|
page readonly
|
|
|
|
25BE2390000
|
unkown
|
page read and write
|
|
|
|
184DC302000
|
unkown
|
page read and write
|
|
|
|
25BE6680000
|
unkown
|
page readonly
|
|
|
|
2C60000
|
heap private
|
page read and write
|
|
|
|
7FF509C2F000
|
unkown
|
page readonly
|
|
|
|
7FF4EF4E5000
|
unkown
|
page readonly
|
|
|
|
E63000
|
unkown
|
page readonly
|
|
|
|
7FF56D72F000
|
unkown
|
page readonly
|
|
|
|
115F000
|
unkown image
|
page readonly
|
|
|
|
67F67FF000
|
unkown
|
page read and write
|
|
|
|
20D20000000
|
unkown
|
page readonly
|
|
|
|
7FF5957C0000
|
unkown
|
page readonly
|
|
|
|
4F8257E000
|
unkown
|
page read and write
|
|
|
|
7FF5DD301000
|
unkown
|
page readonly
|
|
|
|
25BE68B7000
|
unkown
|
page read and write
|
|
|
|
7FF5609E6000
|
unkown
|
page readonly
|
|
|
|
E60000
|
unkown
|
page readonly
|
|
|
|
7FF50D0C4000
|
unkown
|
page readonly
|
|
|
|
25BE17F0000
|
unkown
|
page read and write
|
|
|
|
26BD1A02000
|
unkown
|
page read and write
|
|
|
|
25BE1102000
|
unkown
|
page read and write
|
|
|
|
7FF595480000
|
unkown
|
page readonly
|
|
|
|
7FF528808000
|
unkown
|
page readonly
|
|
|
|
25BE6818000
|
unkown
|
page read and write
|
|
|
|
184DC248000
|
unkown
|
page read and write
|
|
|
|
7FF5DD6B4000
|
unkown
|
page readonly
|
|
|
|
25BE65D7000
|
unkown
|
page readonly
|
|
|
|
25BE6640000
|
unkown
|
page read and write
|
|
|
|
7FF5DD74C000
|
unkown
|
page readonly
|
|
|
|
20D1FE88000
|
unkown
|
page read and write
|
|
|
|
40F000
|
unkown
|
page read and write
|
|
|
|
7FF50CE54000
|
unkown
|
page readonly
|
|
|
|
25C818CD000
|
unkown
|
page read and write
|
|
|
|
2C4E000
|
unkown
|
page read and write
|
|
|
|
7FF56088D000
|
unkown
|
page readonly
|
|
|
|
116D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B01CF000
|
unkown
|
page readonly
|
|
|
|
7FF4EF4DE000
|
unkown
|
page readonly
|
|
|
|
25C82540000
|
unkown
|
page readonly
|
|
|
|
7FF4EF829000
|
unkown
|
page readonly
|
|
|
|
7FF595836000
|
unkown
|
page readonly
|
|
|
|
7FF5B020C000
|
unkown
|
page readonly
|
|
|
|
2D9EA200000
|
unkown
|
page readonly
|
|
|
|
F51787C000
|
unkown
|
page read and write
|
|
|
|
26BD1A58000
|
unkown
|
page read and write
|
|
|
|
7FF5DD305000
|
unkown
|
page readonly
|
|
|
|
2D9E9A00000
|
unkown
|
page readonly
|
|
|
|
2EB1000
|
unkown
|
page read and write
|
|
|
|
235037F000
|
unkown
|
page read and write
|
|
|
|
7FF558BBE000
|
unkown
|
page readonly
|
|
|
|
1290000
|
unkown
|
page read and write
|
|
|
|
1141000
|
unkown image
|
page execute read
|
|
|
|
1431E210000
|
heap default
|
page read and write
|
|
|
|
20D20460000
|
unkown
|
page readonly
|
|
|
|
E98C07C000
|
unkown
|
page read and write
|
|
|
|
7FF56D71E000
|
unkown
|
page readonly
|
|
|
|
25BE6620000
|
unkown
|
page read and write
|
|
|
|
1431EC00000
|
unkown
|
page readonly
|
|
|
|
7FF5159AC000
|
unkown
|
page readonly
|
|
|
|
7FF560986000
|
unkown
|
page readonly
|
|
|
|
E98BD7E000
|
unkown
|
page read and write
|
|
|
|
7FF5094F5000
|
unkown
|
page readonly
|
|
|
|
2D9E985B000
|
unkown
|
page read and write
|
|
|
|
D20000
|
unkown
|
page read and write
|
|
|
|
7FF5159D2000
|
unkown
|
page readonly
|
|
|
|
7FF5AF964000
|
unkown
|
page readonly
|
|
|
|
33B0000
|
unkown
|
page read and write
|
|
|
|
F517B7E000
|
unkown
|
page read and write
|
|
|
|
7FF50CF9C000
|
unkown
|
page readonly
|
|
|
|
26BD1A2A000
|
unkown
|
page read and write
|
|
|
|
BD6557E000
|
unkown
|
page read and write
|
|
|
|
26BD1A59000
|
unkown
|
page read and write
|
|
|
|
26AEC03D000
|
unkown
|
page read and write
|
|
|
|
1431E43C000
|
unkown
|
page read and write
|
|
|
|
7FF59582D000
|
unkown
|
page readonly
|
|
|
|
25BE6640000
|
unkown
|
page read and write
|
|
|
|
184DC265000
|
unkown
|
page read and write
|
|
|
|
24F7FA13000
|
unkown
|
page read and write
|
|
|
|
7FF56D780000
|
unkown
|
page readonly
|
|
|
|
7FF5159C2000
|
unkown
|
page readonly
|
|
|
|
7FF558790000
|
unkown
|
page readonly
|
|
|
|
25BE1076000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page read and write
|
|
|
|
7FF50CFFA000
|
unkown
|
page readonly
|
|
|
|
7FF5DD54F000
|
unkown
|
page readonly
|
|
|
|
7FF56D6E0000
|
unkown
|
page readonly
|
|
|
|
7FF4EF6A7000
|
unkown
|
page readonly
|
|
|
|
B70000
|
unkown
|
page readonly
|
|
|
|
25C817F0000
|
unkown
|
page read and write
|
|
|
|
C90000
|
heap default
|
page read and write
|
|
|
|
25BE1900000
|
unkown
|
page read and write
|
|
|
|
25BE0F70000
|
unkown
|
page readonly
|
|
|
|
7FF4EF3B7000
|
unkown
|
page readonly
|
|
|
|
7FF509BE2000
|
unkown
|
page readonly
|
|
|
|
7FF4EF6EB000
|
unkown
|
page readonly
|
|
|
|
8F5000
|
unkown
|
page read and write
|
|
|
|
7FF4EF791000
|
unkown
|
page readonly
|
|
|
|
7FF56D75C000
|
unkown
|
page readonly
|
|
|
|
2584DCF0000
|
unkown
|
page readonly
|
|
|
|
184DC247000
|
unkown
|
page read and write
|
|
|
|
1390000
|
unkown
|
page readonly
|
|
|
|
7FF56056A000
|
unkown
|
page readonly
|
|
|
|
26BD1C00000
|
unkown
|
page readonly
|
|
|
|
1312000
|
unkown
|
page read and write
|
|
|
|
7FF515981000
|
unkown
|
page readonly
|
|
|
|
7FF4EF720000
|
unkown
|
page readonly
|
|
|
|
62027CE000
|
unkown
|
page read and write
|
|
|
|
7FF56D756000
|
unkown
|
page readonly
|
|
|
|
10E0000
|
unkown
|
page readonly
|
|
|
|
224C3054000
|
unkown
|
page read and write
|
|
|
|
7FF5DD6B8000
|
unkown
|
page readonly
|
|
|
|
599000
|
unkown
|
page read and write
|
|
|
|
7FF4EF79C000
|
unkown
|
page readonly
|
|
|
|
7DFF9EF56000
|
unkown
|
page readonly
|
|
|
|
2D9E9802000
|
unkown
|
page read and write
|
|
|
|
20D1FE00000
|
unkown
|
page read and write
|
|
|
|
7FF5B0206000
|
unkown
|
page readonly
|
|
|
|
25BE1802000
|
unkown
|
page read and write
|
|
|
|
7FF560A79000
|
unkown
|
page readonly
|
|
|
|
20D1FD50000
|
unkown
|
page read and write
|
|
|
|
7FF50D0B5000
|
unkown
|
page readonly
|
|
|
|
184DC261000
|
unkown
|
page read and write
|
|
|
|
7FF558B96000
|
unkown
|
page readonly
|
|
|
|
7FF4EF333000
|
unkown
|
page readonly
|
|
|
|
33AB000
|
unkown
|
page read and write
|
|
|
|
7FF50D018000
|
unkown
|
page readonly
|
|
|
|
25C82132000
|
unkown
|
page read and write
|
|
|
|
4F8287F000
|
unkown
|
page read and write
|
|
|
|
352F000
|
unkown
|
page read and write
|
|
|
|
12769267000
|
unkown
|
page read and write
|
|
|
|
7FF5DCF6B000
|
unkown
|
page readonly
|
|
|
|
F51817F000
|
unkown
|
page read and write
|
|
|
|
116D000
|
unkown image
|
page readonly
|
|
|
|
356E000
|
unkown
|
page read and write
|
|
|
|
7FF4EF736000
|
unkown
|
page readonly
|
|
|
|
7FF528876000
|
unkown
|
page readonly
|
|
|
|
7FF595867000
|
unkown
|
page readonly
|
|
|
|
7FF5159D8000
|
unkown
|
page readonly
|
|
|
|
7FF558A9D000
|
unkown
|
page readonly
|
|
|
|
2D9E9913000
|
unkown
|
page read and write
|
|
|
|
25C818BC000
|
unkown
|
page read and write
|
|
|
|
2D9E987F000
|
unkown
|
page read and write
|
|
|
|
30AE000
|
unkown
|
page read and write
|
|
|
|
7FF595864000
|
unkown
|
page readonly
|
|
|
|
2D9E9700000
|
heap default
|
page read and write
|
|
|
|
7FF5DD6D6000
|
unkown
|
page readonly
|
|
|
|
7FF4EF796000
|
unkown
|
page readonly
|
|
|
|
3DD000
|
unkown
|
page read and write
|
|
|
|
7FF509A8A000
|
unkown
|
page readonly
|
|
|
|
980000
|
unkown
|
page read and write
|
|
|
|
7FF560988000
|
unkown
|
page readonly
|
|
|
|
26BD1940000
|
heap default
|
page read and write
|
|
|
|
12769340000
|
unkown
|
page readonly
|
|
|
|
7FF558780000
|
unkown
|
page readonly
|
|
|
|
7FF4EF81E000
|
unkown
|
page readonly
|
|
|
|
6202B7E000
|
unkown
|
page read and write
|
|
|
|
A7DFDFE000
|
unkown
|
page read and write
|
|
|
|
25BE6800000
|
unkown
|
page read and write
|
|
|
|
7FF52882E000
|
unkown
|
page readonly
|
|
|
|
7FF4EF718000
|
unkown
|
page readonly
|
|
|
|
7FF5DD7C9000
|
unkown
|
page readonly
|
|
|
|
2B6D000
|
unkown
|
page read and write
|
|
|
|
224C3602000
|
unkown
|
page read and write
|
|
|
|
7FF59583C000
|
unkown
|
page readonly
|
|
|
|
7FF50CFB5000
|
unkown
|
page readonly
|
|
|
|
C50000
|
unkown
|
page read and write
|
|
|
|
184DC22A000
|
unkown
|
page read and write
|
|
|
|
7FF4EF5F9000
|
unkown
|
page readonly
|
|
|
|
7FF50CF40000
|
unkown
|
page readonly
|
|
|
|
26BD1A3D000
|
unkown
|
page read and write
|
|
|
|
7FF5DD7C9000
|
unkown
|
page readonly
|
|
|
|
7FF50D129000
|
unkown
|
page readonly
|
|
|
|
7FF5B01F6000
|
unkown
|
page readonly
|
|
|
|
24F80200000
|
unkown
|
page readonly
|
|
|
|
A7DFA7C000
|
unkown
|
page read and write
|
|
|
|
184DC274000
|
unkown
|
page read and write
|
|
|
|
A7DFEFC000
|
unkown
|
page read and write
|
|
|
|
7FF509ABA000
|
unkown
|
page readonly
|
|
|
|
24F7FED0000
|
unkown
|
page readonly
|
|
|
|
7FF595805000
|
unkown
|
page readonly
|
|
|
|
24F7FA2A000
|
unkown
|
page read and write
|
|
|
|
25BE682D000
|
unkown
|
page read and write
|
|
|
|
184DC246000
|
unkown
|
page read and write
|
|
|
|
7FF50D09C000
|
unkown
|
page readonly
|
|
|
|
7FF558B92000
|
unkown
|
page readonly
|
|
|
|
7FF595855000
|
unkown
|
page readonly
|
|
|
|
25BE681F000
|
unkown
|
page read and write
|
|
|
|
224C302A000
|
unkown
|
page read and write
|
|
|
|
2EAE000
|
unkown
|
page read and write
|
|
|
|
7FF56D6F2000
|
unkown
|
page readonly
|
|
|
|
C50000
|
unkown
|
page read and write
|
|
|
|
7FF560A10000
|
unkown
|
page readonly
|
|
|
|
24F7FFA0000
|
unkown
|
page read and write
|
|
|
|
A20000
|
heap default
|
page read and write
|
|
|
|
2584DE34000
|
heap default
|
page read and write
|
|
|
|
7FF528849000
|
unkown
|
page readonly
|
|
|
|
20D1FE54000
|
unkown
|
page read and write
|
|
|
|
2D9E9EB0000
|
unkown
|
page readonly
|
|
|
|
7FF4EEFD8000
|
unkown
|
page readonly
|
|
|
|
7FF5B0289000
|
unkown
|
page readonly
|
|
|
|
20D1FE5C000
|
unkown
|
page read and write
|
|
|
|
26BD3470000
|
unkown
|
page read and write
|
|
|
|
7FF515A3C000
|
unkown
|
page readonly
|
|
|
|
20D1FE62000
|
unkown
|
page read and write
|
|
|
|
25BE1958000
|
unkown
|
page read and write
|
|
|
|
7FF509C0A000
|
unkown
|
page readonly
|
|
|
|
7FF5DD755000
|
unkown
|
page readonly
|
|
|
|
184DC263000
|
unkown
|
page read and write
|
|
|
|
7FF4EF7B5000
|
unkown
|
page readonly
|
|
|
|
7FF50CCFF000
|
unkown
|
page readonly
|
|
|
|
7FF5AF961000
|
unkown
|
page readonly
|
|
|
|
7FF4EF4D7000
|
unkown
|
page readonly
|
|
|
|
7FF50CEAF000
|
unkown
|
page readonly
|
|
|
|
25BE6640000
|
unkown
|
page read and write
|
|
|
|
25BE1013000
|
unkown
|
page read and write
|
|
|
|
DD869FF000
|
unkown
|
page read and write
|
|
|
|
12769267000
|
unkown
|
page read and write
|
|
|
|
26AEBE10000
|
heap private
|
page read and write
|
|
|
|
25BE1071000
|
unkown
|
page read and write
|
|
|
|
26AEBF70000
|
unkown
|
page read and write
|
|
|
|
7FF558A93000
|
unkown
|
page readonly
|
|
|
|
7FF50D032000
|
unkown
|
page readonly
|
|
|
|
7FF5DCF58000
|
unkown
|
page readonly
|
|
|
|
C97000
|
unkown
|
page read and write
|
|
|
|
7FF5B027E000
|
unkown
|
page readonly
|
|
|
|
24F7FA00000
|
unkown
|
page read and write
|
|
|
|
25C818E4000
|
unkown
|
page read and write
|
|
|
|
7FF509A0A000
|
unkown
|
page readonly
|
|
|
|
DD85F7B000
|
unkown
|
page read and write
|
|
|
|
26AEC02A000
|
unkown
|
page read and write
|
|
|
|
7FF5608B1000
|
unkown
|
page readonly
|
|
|
|
25C81829000
|
unkown
|
page read and write
|
|
|
|
184DC160000
|
unkown
|
page readonly
|
|
|
|
7FF4EF43F000
|
unkown
|
page readonly
|
|
|
|
7FF56D4B0000
|
unkown
|
page readonly
|
|
|
|
25BE0F60000
|
unkown
|
page readonly
|
|
|
|
1431E429000
|
unkown
|
page read and write
|
|
|
|
184DC262000
|
unkown
|
page read and write
|
|
|
|
184DC230000
|
unkown
|
page read and write
|
|
|
|
25BE66A0000
|
unkown
|
page readonly
|
|
|
|
25BE64E0000
|
unkown
|
page read and write
|
|
|
|
25BE68A3000
|
unkown
|
page read and write
|
|
|
|
DD8657E000
|
unkown
|
page read and write
|
|
|
|
115F000
|
unkown image
|
page readonly
|
|
|
|
7FF515605000
|
unkown
|
page readonly
|
|
|
|
4F8267C000
|
unkown
|
page read and write
|
|
|
|
7FF5DD6D8000
|
unkown
|
page readonly
|
|
|
|
26AEC590000
|
unkown
|
page readonly
|
|
|
|
25BE1913000
|
unkown
|
page read and write
|
|
|
|
7FF594F9E000
|
unkown
|
page readonly
|
|
|
|
1090000
|
unkown
|
page read and write
|
|
|
|
7FF5DD6C0000
|
unkown
|
page readonly
|
|
|
|
E98BBF5000
|
unkown
|
page read and write
|
|
|
|
4F82D7F000
|
unkown
|
page read and write
|
|
|
|
7FF50CF4C000
|
unkown
|
page readonly
|
|
|
|
7FF560283000
|
unkown
|
page readonly
|
|
|
|
7FF5097F0000
|
unkown
|
page readonly
|
|
|
|
7FF4EF5DC000
|
unkown
|
page readonly
|
|
|
|
A1E000
|
unkown
|
page read and write
|
|
|
|
620274B000
|
unkown
|
page read and write
|
|
|
|
7FF4EF765000
|
unkown
|
page readonly
|
|
|
|
B0A000
|
heap default
|
page read and write
|
|
|
|
7FF4EF5AF000
|
unkown
|
page readonly
|
|
|
|
DD85D77000
|
unkown
|
page read and write
|
|
|
|
184DC27B000
|
unkown
|
page read and write
|
|
|
|
E50000
|
heap private
|
page read and write
|
|
|
|
7FF558C20000
|
unkown
|
page readonly
|
|
|
|
7FF4EF4AC000
|
unkown
|
page readonly
|
|
|
|
7FF55F60A000
|
unkown
|
page readonly
|
|
|
|
7FF4EF703000
|
unkown
|
page readonly
|
|
|
|
1431E1B0000
|
heap private
|
page read and write
|
|
|
|
116D000
|
unkown image
|
page readonly
|
|
|
|
7FF509C84000
|
unkown
|
page readonly
|
|
|
|
25BE6600000
|
unkown
|
page read and write
|
|
|
|
7FF4EF54B000
|
unkown
|
page readonly
|
|
|
|
7FF5609C9000
|
unkown
|
page readonly
|
|
|
|
F51767B000
|
unkown
|
page read and write
|
|
|
|
184DC255000
|
unkown
|
page read and write
|
|
|
|
366E000
|
unkown
|
page read and write
|
|
|
|
7FF5DD5D7000
|
unkown
|
page readonly
|
|
|
|
7FF5DD568000
|
unkown
|
page readonly
|
|
|
|
7FF5609EC000
|
unkown
|
page readonly
|
|
|
|
2D6F000
|
unkown
|
page read and write
|
|
|
|
7FF55F67C000
|
unkown
|
page readonly
|
|
|
|
C40000
|
unkown
|
page read and write
|
|
|
|
25C81AD0000
|
unkown
|
page readonly
|
|
|
|
2D9E9900000
|
unkown
|
page read and write
|
|
|
|
7FF55F6F9000
|
unkown
|
page readonly
|
|
|
|
25BE65B0000
|
unkown
|
page read and write
|
|
|
|
7FF56D6E2000
|
unkown
|
page readonly
|
|
|
|
1140000
|
unkown image
|
page readonly
|
|
|
|
342E000
|
unkown
|
page read and write
|
|
|
|
7FF509C4D000
|
unkown
|
page readonly
|
|
|
|
7FF558A2A000
|
unkown
|
page readonly
|
|
|
|
E71000
|
unkown
|
page readonly
|
|
|
|
5892577000
|
unkown
|
page read and write
|
|
|
|
26BD3800000
|
unkown
|
page readonly
|
|
|
|
25BE10FB000
|
unkown
|
page read and write
|
|
|
|
13D0000
|
unkown
|
page readonly
|
|
|
|
7FF5B01C5000
|
unkown
|
page readonly
|
|
|
|
312E000
|
unkown
|
page read and write
|
|
|
|
7FF56D766000
|
unkown
|
page readonly
|
|
|
|
115F000
|
unkown image
|
page readonly
|
|
|
|
DD8596B000
|
unkown
|
page read and write
|
|
|
|
26BD1990000
|
unkown
|
page read and write
|
|
|
|
7FF52887C000
|
unkown
|
page readonly
|
|
|
|
7FF560A14000
|
unkown
|
page readonly
|
|
|
|
7FF56D784000
|
unkown
|
page readonly
|
|
|
|
184DC4D0000
|
unkown
|
page readonly
|
|
|
|
1140000
|
unkown image
|
page readonly
|
|
|
|
7FF5288F1000
|
unkown
|
page readonly
|
|
|
|
25C817C0000
|
heap default
|
page read and write
|
|
|
|
7FF50D00C000
|
unkown
|
page readonly
|
|
|
|
6B90A7E000
|
unkown
|
page read and write
|
|
|
|
26AEC802000
|
unkown
|
page read and write
|
|
|
|
26AEC013000
|
unkown
|
page read and write
|
|
|
|
7FF515AC9000
|
unkown
|
page readonly
|
|
|
|
7FF515A55000
|
unkown
|
page readonly
|
|
|
|
7FF4EF365000
|
unkown
|
page readonly
|
|
|
|
7FF5B0196000
|
unkown
|
page readonly
|
|
|
|
20D1FC60000
|
unkown
|
page readonly
|
|
|
|
7FF4EF7C4000
|
unkown
|
page readonly
|
|
|
|
7FF4EF69C000
|
unkown
|
page readonly
|
|
|
|
7FF509CDE000
|
unkown
|
page readonly
|
|
|
|
7FF56D49E000
|
unkown
|
page readonly
|
|
|
|
2D9E97F0000
|
unkown
|
page readonly
|
|
|
|
7FF56D74D000
|
unkown
|
page readonly
|
|
|
|
7FF5DD42D000
|
unkown
|
page readonly
|
|
|
|
7FF509BE0000
|
unkown
|
page readonly
|
|
|
|
25BE1200000
|
unkown
|
page readonly
|
|
|
|
7FF55F6F9000
|
unkown
|
page readonly
|
|
|
|
811000
|
unkown
|
page execute read
|
|
|
|
7FF509BF6000
|
unkown
|
page readonly
|
|
|
|
7FF56D5A8000
|
unkown
|
page readonly
|
|
|
|
25BE6510000
|
unkown
|
page read and write
|
|
|
|
BD658FD000
|
unkown
|
page read and write
|
|
|
|
7FF560A05000
|
unkown
|
page readonly
|
|
|
|
1169000
|
unkown image
|
page write copy
|
|
|
|
26BD1A13000
|
unkown
|
page read and write
|
|
|
|
6202BFE000
|
unkown
|
page read and write
|
|
|
|
7FF5DCF68000
|
unkown
|
page readonly
|
|
|
|
26BD1CD0000
|
unkown
|
page readonly
|
|
|
|
24F7FB13000
|
unkown
|
page read and write
|
|
|
|
7FF515A36000
|
unkown
|
page readonly
|
|
|
|
7FF59564F000
|
unkown
|
page readonly
|
|
|
|
7FF5609BF000
|
unkown
|
page readonly
|
|
|
|
7FF509BF2000
|
unkown
|
page readonly
|
|
|
|
26BD1B02000
|
unkown
|
page read and write
|
|
|
|
1431E300000
|
unkown
|
page readonly
|
|
|
|
20D20602000
|
unkown
|
page read and write
|
|
|
|
7FF4EF7AC000
|
unkown
|
page readonly
|
|
|
|
184DC26B000
|
unkown
|
page read and write
|
|
|
|
7FF55F66C000
|
unkown
|
page readonly
|
|
|
|
7FF558B80000
|
unkown
|
page readonly
|
|
|
|
7FF50CD02000
|
unkown
|
page readonly
|
|
|
|
132C000
|
unkown
|
page read and write
|
|
|
|
7FF50D036000
|
unkown
|
page readonly
|
|
|
|
224C3000000
|
unkown
|
page read and write
|
|
|
|
2D9E9E60000
|
unkown
|
page read and write
|
|
|
|
7FF56D4A5000
|
unkown
|
page readonly
|
|
|
|
1140000
|
unkown image
|
page readonly
|
|
|
|
26BD18E0000
|
heap private
|
page read and write
|
|
|
|
DA2000
|
unkown
|
page read and write
|
|
|
|
224C3068000
|
unkown
|
page read and write
|
|
|
|
7FF515AC9000
|
unkown
|
page readonly
|
|
|
|
1141000
|
unkown image
|
page execute read
|
|
|
|
7FF5B0220000
|
unkown
|
page readonly
|
|
|
|
7FF5DD762000
|
unkown
|
page readonly
|
|
|
|
1431E220000
|
unkown
|
page readonly
|
|
|
|
6F8000
|
unkown
|
page read and write
|
|
|
|
2D9E97E0000
|
unkown
|
page readonly
|
|
|
|
7FF560570000
|
unkown
|
page readonly
|
|
|
|
26BD1A86000
|
unkown
|
page read and write
|
|
|
|
25BE65B4000
|
unkown
|
page readonly
|
|
|
|
25C81F60000
|
unkown
|
page write copy
|
|
|
|
7FF4EEF15000
|
unkown
|
page readonly
|
|
|
|
184DC140000
|
heap default
|
page read and write
|
|
|
|
24F7F970000
|
heap private
|
page read and write
|
|
|
|
BD653FF000
|
unkown
|
page read and write
|
|
|
|
7FF50D0C7000
|
unkown
|
page readonly
|
|
|
|
25BE2050000
|
unkown
|
page readonly
|
|
|
|
7FF4EF330000
|
unkown
|
page readonly
|
|
|
|
7FF50CC92000
|
unkown
|
page readonly
|
|
|
|
7FF50CD11000
|
unkown
|
page readonly
|
|
|
|
C95000
|
heap default
|
page read and write
|
|
|
|
25BE109B000
|
unkown
|
page read and write
|
|
|
|
7FF50CF37000
|
unkown
|
page readonly
|
|
|
|
25BE6740000
|
unkown
|
page readonly
|
|
|
|
2D9E9902000
|
unkown
|
page read and write
|
|
|
|
7FF515A64000
|
unkown
|
page readonly
|
|
|
|
7FF5DD599000
|
unkown
|
page readonly
|
|
|
|
7FF5288EE000
|
unkown
|
page readonly
|
|
|
|
7FF4EF6E1000
|
unkown
|
page readonly
|
|
|
|
7FF4EF779000
|
unkown
|
page readonly
|
|
|
|
24F7FA6F000
|
unkown
|
page read and write
|
|
|
|
26BD1960000
|
unkown
|
page readonly
|
|
|
|
7FF5B0281000
|
unkown
|
page readonly
|
|
|
|
7FF56D3B8000
|
unkown
|
page readonly
|
|
|
|
7FF4EF6C1000
|
unkown
|
page readonly
|
|
|
|
7FF4EF820000
|
unkown
|
page readonly
|
|
|
|
24F7FC00000
|
unkown
|
page readonly
|
|
|
|
12769210000
|
heap private
|
page read and write
|
|
|
|
A7DFCFF000
|
unkown
|
page read and write
|
|
|
|
24F7FA3C000
|
unkown
|
page read and write
|
|
|
|
7FF5DD6C2000
|
unkown
|
page readonly
|
|
|
|
25BE6500000
|
unkown
|
page read and write
|
|
|
|
25BE65F0000
|
unkown
|
page read and write
|
|
|
|
7FF5DD73C000
|
unkown
|
page readonly
|
|
|
|
7FF5DD530000
|
unkown
|
page readonly
|
|
|
|
6202AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5DD58A000
|
unkown
|
page readonly
|
|
|
|
67F5F4B000
|
unkown
|
page read and write
|
|
|
|
7FF56D497000
|
unkown
|
page readonly
|
|
|
|
184DC244000
|
unkown
|
page read and write
|
|
|
|
7FF509B21000
|
unkown
|
page readonly
|
|
|
|
1140000
|
unkown image
|
page readonly
|
|
|
|
593000
|
unkown
|
page read and write
|
|
|
|
25BE1918000
|
unkown
|
page read and write
|
|
|
|
25BE10AF000
|
unkown
|
page read and write
|
|
|
|
589247B000
|
unkown
|
page read and write
|
|
|
|
26BD1950000
|
unkown
|
page readonly
|
|
|
|
1431EA02000
|
unkown
|
page read and write
|
|
|
|
583000
|
unkown
|
page read and write
|
|
|
|
BD657FD000
|
unkown
|
page read and write
|
|
|
|
2B70000
|
unkown
|
page readonly
|
|
|
|
7FF595487000
|
unkown
|
page readonly
|
|
|
|
7FF50CEC8000
|
unkown
|
page readonly
|
|
|
|
25BE1074000
|
unkown
|
page read and write
|
|
|
|
BD652FE000
|
unkown
|
page read and write
|
|
|
|
224C2FF0000
|
unkown
|
page readonly
|
|
|
|
7FF59580F000
|
unkown
|
page readonly
|
|
|
|
127691C0000
|
unkown
|
page read and write
|
|
|
|
7FF55F649000
|
unkown
|
page readonly
|
|
|
|
25BE683F000
|
unkown
|
page read and write
|
|
|
|
7FF5958C1000
|
unkown
|
page readonly
|
|
|
|
25BE6720000
|
unkown
|
page readonly
|
|
|
|
7FF4EF361000
|
unkown
|
page readonly
|
|
|
|
184DC275000
|
unkown
|
page read and write
|
|
|
|
322C000
|
unkown
|
page read and write
|
|
|
|
26AEBF50000
|
unkown
|
page readonly
|
|
|
|
1431E502000
|
unkown
|
page read and write
|
|
|
|
7FF558BC5000
|
unkown
|
page readonly
|
|
|
|
25BE17E0000
|
unkown
|
page read and write
|
|
|
|
25C81800000
|
unkown
|
page read and write
|
|
|
|
7FF4EF5E8000
|
unkown
|
page readonly
|
|
|
|
F517CFD000
|
unkown
|
page read and write
|
|
|
|
7FF4EEF1F000
|
unkown
|
page readonly
|
|
|
|
7FF558A78000
|
unkown
|
page readonly
|
|
|
|
7FF50D0C0000
|
unkown
|
page readonly
|
|
|
|
7FF56D6F6000
|
unkown
|
page readonly
|
|
|
|
12769255000
|
unkown
|
page read and write
|
|
|
|
2D9E983C000
|
unkown
|
page read and write
|
|
|
|
25C81902000
|
unkown
|
page read and write
|
|
|
|
7FF558BCF000
|
unkown
|
page readonly
|
|
|
|
F51807D000
|
unkown
|
page read and write
|
|
|
|
7FF5DD7BE000
|
unkown
|
page readonly
|
|
|
|
25BE65E8000
|
unkown
|
page write copy
|
|
|
|
25BE2030000
|
unkown
|
page readonly
|
|
|
|
2730000
|
unkown
|
page readonly
|
|
|
|
E13000
|
unkown
|
page read and write
|
|
|
|
7FF5DD655000
|
unkown
|
page readonly
|
|
|
|
25BE684C000
|
unkown
|
page read and write
|
|
|
|
7FF4EF43C000
|
unkown
|
page readonly
|
|
|
|
25BE1590000
|
unkown
|
page readonly
|
|
|
|
9DC000
|
unkown
|
page read and write
|
|
|
|
6B90BFE000
|
unkown
|
page read and write
|
|
|
|
7FF558BED000
|
unkown
|
page readonly
|
|
|
|
111D000
|
unkown
|
page read and write
|
|
|
|
7FF56D7E1000
|
unkown
|
page readonly
|
|
|
|
7FF509B5C000
|
unkown
|
page readonly
|
|
|
|
7FF56079A000
|
unkown
|
page readonly
|
|
|
|
36AD000
|
unkown
|
page read and write
|
|
|
|
7FF558A4E000
|
unkown
|
page readonly
|
|
|
|
26BD1A48000
|
unkown
|
page read and write
|
|
|
|
25BE1000000
|
unkown
|
page read and write
|
|
|
|
26BD34F0000
|
unkown
|
page read and write
|
|
|
|
32110FE000
|
unkown
|
page read and write
|
|
|
|
810000
|
unkown
|
page read and write
|
|
|
|
7FF55F676000
|
unkown
|
page readonly
|
|
|
|
DF9000
|
unkown
|
page read and write
|
|
|
|
7FF50D020000
|
unkown
|
page readonly
|
|
|
|
830000
|
heap default
|
page read and write
|
|
|
|
589267F000
|
unkown
|
page read and write
|
|
|
|
1169000
|
unkown image
|
page write copy
|
|
|
|
25BE1113000
|
unkown
|
page read and write
|
|
|
|
26AEC660000
|
unkown
|
page read and write
|
|
|
|
25BE103D000
|
unkown
|
page read and write
|
|
|
|
7FF5609B5000
|
unkown
|
page readonly
|
|
|
|
7FF560982000
|
unkown
|
page readonly
|
|
|
|
7FF515977000
|
unkown
|
page readonly
|
|
|
|
C50000
|
unkown
|
page read and write
|
|
|
|
184DC213000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown
|
page readonly
|
|
|
|
7FF5958C9000
|
unkown
|
page readonly
|
|
|
|
E98B7AC000
|
unkown
|
page read and write
|
|
|
|
7FF56D6BA000
|
unkown
|
page readonly
|
|
|
|
7FF5B01D9000
|
unkown
|
page readonly
|
|
|
|
2584DE10000
|
heap default
|
page read and write
|
|
|
|
7FF5B01FC000
|
unkown
|
page readonly
|
|
|
|
A7DF87C000
|
unkown
|
page read and write
|
|
|
|
7FF55877A000
|
unkown
|
page readonly
|
|
|
|
4F8297D000
|
unkown
|
page read and write
|
|
|
|
7FF5DD7C1000
|
unkown
|
page readonly
|
|
|
|
26AEC102000
|
unkown
|
page read and write
|
|
|
|
7FF56D725000
|
unkown
|
page readonly
|
|
|
|
26BD2060000
|
unkown
|
page readonly
|
|
|
|
7FF56D775000
|
unkown
|
page readonly
|
|
|
|
7FF5DCEA9000
|
unkown
|
page readonly
|
|
|
|
7FF55F65E000
|
unkown
|
page readonly
|
|
|
|
25BE1090000
|
unkown
|
page read and write
|
|
|
|
7FF56CED5000
|
unkown
|
page readonly
|
|
|
|
127691E0000
|
unkown
|
page readonly
|
|
|
|
20D1FE60000
|
unkown
|
page read and write
|
|
|
|
7FF5608EC000
|
unkown
|
page readonly
|
|
|
|
25BE6630000
|
unkown
|
page read and write
|
|
|
|
30C4000
|
unkown
|
page read and write
|
|
|
|
25BE6640000
|
unkown
|
page read and write
|
|
|
|
184DC400000
|
unkown
|
page readonly
|
|
|
|
25BE1F10000
|
unkown
|
page read and write
|
|
|
|
7FF560972000
|
unkown
|
page readonly
|
|
|
|
224C3590000
|
unkown
|
page read and write
|
|
|
|
7FF52885D000
|
unkown
|
page readonly
|
|
|
|
7FF50D065000
|
unkown
|
page readonly
|
|
|
|
DD864FC000
|
unkown
|
page read and write
|
|
|
|
26AEC000000
|
unkown
|
page read and write
|
|
|
|
7FF5DD72D000
|
unkown
|
page readonly
|
|
|
|
7FF558C89000
|
unkown
|
page readonly
|
|
|
|
6202A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5DD36D000
|
unkown
|
page readonly
|
|
|
|
25C817D0000
|
unkown
|
page readonly
|
|
|
|
F517F7E000
|
unkown
|
page read and write
|
|
|
|
C1E000
|
unkown
|
page read and write
|
|
|
|
20D1FBF0000
|
heap private
|
page read and write
|
|
|
|
25C81E60000
|
unkown
|
page readonly
|
|
|
|
7FF56D6CC000
|
unkown
|
page readonly
|
|
|
|
224C2F10000
|
unkown
|
page readonly
|
|
|
|
98F000
|
unkown
|
page read and write
|
|
|
|
7FF50CFA7000
|
unkown
|
page readonly
|
|
|
|
7FF50D038000
|
unkown
|
page readonly
|
|
|
|
7FF5609AE000
|
unkown
|
page readonly
|
|
|
|
25BE65D4000
|
unkown
|
page readonly
|
|
|
|
7FF509B27000
|
unkown
|
page readonly
|
|
|
|
25BE688A000
|
unkown
|
page read and write
|
|
|
|
25BE0E20000
|
heap private
|
page read and write
|
|
|
|
7FF4EF74A000
|
unkown
|
page readonly
|
|
|
|
7FF4EF58E000
|
unkown
|
page readonly
|
|
|
|
2E6F000
|
unkown
|
page read and write
|
|
|
|
224C3200000
|
unkown
|
page readonly
|
|
|
|
7FF515967000
|
unkown
|
page readonly
|
|
|
|
7FF515601000
|
unkown
|
page readonly
|
|
|
|
184DC24B000
|
unkown
|
page read and write
|
|
|
|
2D9E982A000
|
unkown
|
page read and write
|
|
|
|
7FF5DD764000
|
unkown
|
page readonly
|
|
|
|
7FF50D120000
|
unkown
|
page readonly
|
|
|
|
30BC000
|
unkown
|
page read and write
|
|
|
|
224C303F000
|
unkown
|
page read and write
|
|
|
|
BD64F4C000
|
unkown
|
page read and write
|
|
|
|
7FF5DCEA7000
|
unkown
|
page readonly
|
|
|
|
7FF5608B7000
|
unkown
|
page readonly
|
|
|
|
1431E500000
|
unkown
|
page read and write
|
|
|
|
1169000
|
unkown image
|
page read and write
|
|
|
|
24F7FA9B000
|
unkown
|
page read and write
|
|
|
|
25BE1E30000
|
unkown
|
page read and write
|
|
|
|
7FF56D7DE000
|
unkown
|
page readonly
|
|
|
|
7FF5B0227000
|
unkown
|
page readonly
|
|
|
|
25C82100000
|
unkown
|
page read and write
|
|
|
|
25BE17C1000
|
unkown
|
page read and write
|
|
|
|
7FF50D08D000
|
unkown
|
page readonly
|
|
|
|
7FF4EF75E000
|
unkown
|
page readonly
|
|
|
|
184DC27A000
|
unkown
|
page read and write
|
|
|
|
184DC277000
|
unkown
|
page read and write
|
|
|
|
67F647B000
|
unkown
|
page read and write
|
|
|
|
7FF5DD719000
|
unkown
|
page readonly
|
|
|
|
B39000
|
unkown
|
page read and write
|
|
|
|
224C3113000
|
unkown
|
page read and write
|
|
|
|
7FF5097DA000
|
unkown
|
page readonly
|
|
|
|
26AEC024000
|
unkown
|
page read and write
|
|
|
|
7FF50CE8E000
|
unkown
|
page readonly
|
|
|
|
25BE6760000
|
unkown
|
page readonly
|
|
|
|
7FF5B01AA000
|
unkown
|
page readonly
|
|
|
|
7FF4EF3A0000
|
unkown
|
page readonly
|
|
|
|
7FF560868000
|
unkown
|
page readonly
|
|
|
|
7FF509AD8000
|
unkown
|
page readonly
|
|
|
|
7FF55F6EE000
|
unkown
|
page readonly
|
|
|
|
30EF000
|
unkown
|
page read and write
|
|
|
|
390000
|
unkown
|
page read and write
|
|
|
|
7FF558C7E000
|
unkown
|
page readonly
|
|
|
|
7FF515A4C000
|
unkown
|
page readonly
|
|
|
|
DD862FE000
|
unkown
|
page read and write
|
|
|
|
7FF50CEEB000
|
unkown
|
page readonly
|
|
|
|
1141000
|
unkown image
|
page execute read
|
|
|
|
25BE2020000
|
unkown
|
page readonly
|
|
|
|
7FF52880A000
|
unkown
|
page readonly
|
|
|
|
24F7F9E0000
|
unkown
|
page readonly
|
|
|
|
1431E400000
|
unkown
|
page read and write
|
|
|
|
7FF4EF722000
|
unkown
|
page readonly
|
|
|
|
25BE6501000
|
unkown
|
page read and write
|
|
|
|
7FF5159D6000
|
unkown
|
page readonly
|
|
|
|
BD6567D000
|
unkown
|
page read and write
|
|
|
|
224C3078000
|
unkown
|
page read and write
|
|
|
|
184DC259000
|
unkown
|
page read and write
|
|
|
|
6B90EFF000
|
unkown
|
page read and write
|
|
|
|
7FF50D079000
|
unkown
|
page readonly
|
|
|
|
7FF59584C000
|
unkown
|
page readonly
|
|
|
|
1431E468000
|
unkown
|
page read and write
|
|
|
|
7FF56D588000
|
unkown
|
page readonly
|
|
|
|
7FF4EF7C7000
|
unkown
|
page readonly
|
|
|
|
7FF56D675000
|
unkown
|
page readonly
|
|
|
|
184DC240000
|
unkown
|
page read and write
|
|
|
|
DD866FE000
|
unkown
|
page read and write
|
|
|
|
224C3013000
|
unkown
|
page read and write
|
|
|
|
7FF5DCEAF000
|
unkown
|
page readonly
|
|
|
|
25BE2000000
|
unkown
|
page readonly
|
|
|
|
116D000
|
unkown image
|
page readonly
|
|
|
|
184DC267000
|
unkown
|
page read and write
|
|
|
|
25BE63C0000
|
unkown
|
page read and write
|
|
|
|
2D9E9866000
|
unkown
|
page read and write
|
|
|
|
7FF5B01BE000
|
unkown
|
page readonly
|
|
|
|
C97000
|
unkown
|
page read and write
|
|
|
|
7FF5B000F000
|
unkown
|
page readonly
|
|
|
|
DD8667A000
|
unkown
|
page read and write
|
|
|
|
7FF509C39000
|
unkown
|
page readonly
|
|
|
|
224C2DD0000
|
heap private
|
page read and write
|
|
|
|
7FF528835000
|
unkown
|
page readonly
|
|
|
|
7FF5DD746000
|
unkown
|
page readonly
|
|
|
|
821000
|
unkown
|
page readonly
|
|
|
|
25BE1800000
|
unkown
|
page read and write
|
|
|
|
7FF5DD6FE000
|
unkown
|
page readonly
|
|
|
|
235047E000
|
unkown
|
page read and write
|
|
|
|
3210C7B000
|
unkown
|
page read and write
|
|
|
|
7FF56083E000
|
unkown
|
page readonly
|
|
|
|
25BE1902000
|
unkown
|
page read and write
|
|
|
|
224C3800000
|
unkown
|
page readonly
|
|
|
|
12769240000
|
heap default
|
page read and write
|
|
|
|
7FF5097E0000
|
unkown
|
page readonly
|
|
|
|
1431E600000
|
unkown
|
page readonly
|
|
|
|
24F7FB02000
|
unkown
|
page read and write
|
|
|
|
7FF5DD2D3000
|
unkown
|
page readonly
|
|
|
|
7FF4EF7C0000
|
unkown
|
page readonly
|
|
|
|
A7E00FE000
|
unkown
|
page read and write
|
|
|
|
7FF55F49D000
|
unkown
|
page readonly
|
|
|
|
7FF4EF3BE000
|
unkown
|
page readonly
|
|
|
|
184DC264000
|
unkown
|
page read and write
|
|
|
|
7FF56D54E000
|
unkown
|
page readonly
|
|
|
|
7FF56D70A000
|
unkown
|
page readonly
|
|
|
|
6B9077C000
|
unkown
|
page read and write
|
|
|
|
2D9E96A0000
|
heap private
|
page read and write
|
|
|
|
1276925A000
|
unkown
|
page read and write
|
|
|
|
7FF50D0AC000
|
unkown
|
page readonly
|
|
|
|
4F823FA000
|
unkown
|
page read and write
|
|
|
|
33E0000
|
heap private
|
page read and write
|
|
|
|
7FF5609DD000
|
unkown
|
page readonly
|
|
|
|
7FF515A31000
|
unkown
|
page readonly
|
|
|
|
8F9000
|
unkown
|
page read and write
|
|
|
|
E98BCFB000
|
unkown
|
page read and write
|
|
|
|
25C8183D000
|
unkown
|
page read and write
|
|
|
|
20D1FE57000
|
unkown
|
page read and write
|
|
|
|
26AEBFA0000
|
unkown
|
page read and write
|
|
|
|
7FF509BF8000
|
unkown
|
page readonly
|
|
|
|
1431E3D0000
|
unkown
|
page readonly
|
|
|
|
589237C000
|
unkown
|
page read and write
|
|
|
|
7FF509C75000
|
unkown
|
page readonly
|
|
|
|
24F80002000
|
unkown
|
page read and write
|
|
|
|
26BD19C0000
|
unkown
|
page read and write
|
|
|
|
BD656FF000
|
unkown
|
page read and write
|
|
|
|
24F7F9F0000
|
unkown
|
page readonly
|
|
There are 1057 hidden memdumps, click here to show them.