Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
tcpmdmaus.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\edb.log
|
data
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
|
Extensible storage user DataBase, version 0x620, checksum 0xfe58a2ca, page size 16384, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
data
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
|
ASCII text, with no line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\tcpmdmaus.exe
|
'C:\Users\user\Desktop\tcpmdmaus.exe'
|
|
|
|
C:\Users\user\Desktop\tcpmdmaus.exe
|
C:\Users\user\Desktop\tcpmdmaus.exe
|
|
|
|
C:\Windows\SysWOW64\sharedconnect.exe
|
C:\Windows\SysWOW64\sharedconnect.exe
|
|
|
|
C:\Windows\SysWOW64\sharedconnect.exe
|
C:\Windows\SysWOW64\sharedconnect.exe
|
|
|
|
C:\Windows\SysWOW64\sharedsls.exe
|
C:\Windows\SysWOW64\sharedsls.exe
|
|
|
|
C:\Windows\SysWOW64\sharedsls.exe
|
C:\Windows\SysWOW64\sharedsls.exe
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
|
|
There are 1 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.disneyplus.com/legal/your-california-privacy-rights
|
unknown
|
|
|
|
http://www.g5e.com/G5_End_User_License_Supplemental_Terms
|
unknown
|
|
|
|
https://www.disneyplus.com/legal/privacy-policy
|
unknown
|
|
|
|
https://support.g5e.com/hc/en-us/categories/360002985040-Hidden-City-Hidden-Object-Adventure
|
unknown
|
|
|
|
https://77.157.40.119:443/
|
77.157.40.119
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/09/enumeration
|
unknown
|
|
|
|
https://corp.roblox.com/contact/
|
unknown
|
|
|
|
https://www.roblox.com/develop
|
unknown
|
|
|
|
http://universalstore.streaming.mediaservices.windows.net/e5f6356f-80b5-47df-960c-a214cf301822/55652
|
unknown
|
|
|
|
https://disneyplus.com/legal.
|
unknown
|
|
|
|
https://www.roblox.com/info/privacy
|
unknown
|
|
|
|
http://crl.ver)
|
unknown
|
|
|
|
http://www.g5e.com/termsofservice
|
unknown
|
|
|
|
https://www.tiktok.com/legal/report/feedback
|
unknown
|
|
|
|
https://en.help.roblox.com/hc/en-us
|
unknown
|
|
|
|
https://corp.roblox.com/parents/
|
unknown
|
|
|
|
http://schemas.microsoft.co
|
unknown
|
|
|
|
http://help.disneyplus.com.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/r
|
unknown
|
|
|
|
http://77.157.40.119:443/?6
|
unknown
|
|
|
|
http://77.157.40.119:443/
|
unknown
|
|
|
|
http://77.157.40.119:443/1
|
unknown
|
|
|
|
http://77.157.40.119:443/.
|
unknown
|
|
|
|
http://66.220.110.56:50000/f
|
unknown
|
|
|
|
http://77.157.40.119:443//
|
unknown
|
|
|
|
http://77.157.40.119:443/&
|
unknown
|
|
|
|
http://66.220.110.56:50000/1
|
unknown
|
|
|
|
http://197.82.220.82:8080/
|
unknown
|
|
|
|
http://77.157.40.119:443/V
|
unknown
|
|
|
|
http://184.186.78.177/:$
|
unknown
|
|
|
|
http://77.157.40.119:443/#6
|
unknown
|
|
|
|
http://110.143.116.201/&$
|
unknown
|
|
|
|
http://110.143.116.201/
|
unknown
|
|
|
|
http://184.186.78.177/
|
unknown
|
|
|
|
http://66.220.110.56:50000/
|
unknown
|
|
|
|
http://110.143.116.201/g$
|
unknown
|
|
|
|
http://197.82.220.82:8080/v
|
unknown
|
|
|
|
http://197.82.220.82:8080/1
|
unknown
|
|
|
|
http://110.143.116.201/-$
|
unknown
|
|
There are 29 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
windowsupdate.s.llnwi.net
|
178.79.242.128
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
184.186.78.177
|
unknown
|
United States
|
|
|
|
24.217.117.217
|
unknown
|
United States
|
|
|
|
139.162.216.32
|
unknown
|
Netherlands
|
|
|
|
77.157.40.119
|
unknown
|
France
|
|
|
|
110.143.116.201
|
unknown
|
Australia
|
|
|
|
66.220.110.56
|
unknown
|
United States
|
|
|
|
197.82.220.82
|
unknown
|
South Africa
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
|
|
212.83.128.139
|
unknown
|
France
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS
|
PerfMMFileName
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\System32\ci.dll,-100
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\System32\ci.dll,-101
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\system32\dnsapi.dll,-103
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\system32\NgcRecovery.dll,-100
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1481000
|
unkown
|
page execute read
|
|
|
|
951000
|
unkown
|
page execute read
|
|
|
|
861000
|
unkown
|
page execute read
|
|
|
|
CD1000
|
unkown
|
page execute read
|
|
|
|
7166677000
|
stack
|
page read and write
|
|
|
|
7DF519AA0000
|
unkown image
|
page readonly
|
|
|
|
1830000
|
unkown
|
page read and write
|
|
|
|
15868200000
|
unkown image
|
page readonly
|
|
|
|
1FADEB00000
|
unkown
|
page read and write
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
7DF519A80000
|
unkown image
|
page readonly
|
|
|
|
C9F8F79000
|
stack
|
page read and write
|
|
|
|
1F08D200000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1F08CF13000
|
unkown
|
page read and write
|
|
|
|
6A80000
|
unkown
|
page read and write
|
|
|
|
3F3000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7FF4FDF16000
|
unkown image
|
page readonly
|
|
|
|
7FF5242FD000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown image
|
page write copy
|
|
|
|
46681FB000
|
stack
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5070F7000
|
unkown image
|
page readonly
|
|
|
|
95A000
|
unkown
|
page read and write
|
|
|
|
18AAA2A2000
|
unkown
|
page read and write
|
|
|
|
1FAD9790000
|
unkown image
|
page readonly
|
|
|
|
2771000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF5BE701000
|
unkown image
|
page readonly
|
|
|
|
1491000
|
unkown
|
page read and write
|
|
|
|
3CD000
|
unkown image
|
page write copy
|
|
|
|
7FF50FC9D000
|
unkown image
|
page readonly
|
|
|
|
7DF507CD2000
|
unkown image
|
page readonly
|
|
|
|
18AAA28A000
|
heap default
|
page read and write
|
|
|
|
12F64B78000
|
unkown
|
page read and write
|
|
|
|
7FF52426A000
|
unkown image
|
page readonly
|
|
|
|
B96000
|
unkown
|
page read and write
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
3CA000
|
unkown image
|
page read and write
|
|
|
|
7FF4FD7A8000
|
unkown image
|
page readonly
|
|
|
|
1FAD9A15000
|
unkown
|
page read and write
|
|
|
|
7DF52E0E2000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8F40000
|
unkown image
|
page readonly
|
|
|
|
780000
|
unkown image
|
page readonly
|
|
|
|
1F08D000000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown image
|
page execute read
|
|
|
|
660000
|
unkown image
|
page read and write
|
|
|
|
7FF4E2DCB000
|
unkown image
|
page readonly
|
|
|
|
2345B720000
|
unkown image
|
page readonly
|
|
|
|
1F08CF02000
|
unkown
|
page read and write
|
|
|
|
7FF4FDED7000
|
unkown image
|
page readonly
|
|
|
|
15868802000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1F08CCC0000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown image
|
page write copy
|
|
|
|
1FAD9080000
|
unkown image
|
page readonly
|
|
|
|
1FAD90B0000
|
unkown image
|
page readonly
|
|
|
|
1FAD9271000
|
unkown
|
page read and write
|
|
|
|
1FADA0F0000
|
unkown
|
page read and write
|
|
|
|
2870000
|
unkown
|
page read and write
|
|
|
|
12F64130000
|
unkown image
|
page read and write
|
|
|
|
7DF519A92000
|
unkown image
|
page readonly
|
|
|
|
14B0000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
12F65020000
|
unkown
|
page read and write
|
|
|
|
4EE9D1E000
|
stack
|
page read and write
|
|
|
|
12F6503C000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
12F64B1B000
|
unkown
|
page read and write
|
|
|
|
7F780000
|
unkown image
|
page readonly
|
|
|
|
11E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEC4E000
|
unkown image
|
page readonly
|
|
|
|
12F64140000
|
heap private
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
12F64269000
|
unkown
|
page read and write
|
|
|
|
7FF5242F7000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD655000
|
unkown image
|
page readonly
|
|
|
|
12F64B13000
|
unkown
|
page read and write
|
|
|
|
12F64260000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
7FF5CEC47000
|
unkown image
|
page readonly
|
|
|
|
1FADEAF8000
|
unkown
|
page read and write
|
|
|
|
14A0000
|
unkown
|
page read and write
|
|
|
|
190F0000
|
unkown
|
page read and write
|
|
|
|
7FF50FAF8000
|
unkown image
|
page readonly
|
|
|
|
7FF50FC37000
|
unkown image
|
page readonly
|
|
|
|
9C95FF000
|
stack
|
page read and write
|
|
|
|
7FF524188000
|
unkown image
|
page readonly
|
|
|
|
BB0000
|
unkown image
|
page readonly
|
|
|
|
18AAA1D0000
|
unkown
|
page read and write
|
|
|
|
7FF5CEFA0000
|
unkown image
|
page readonly
|
|
|
|
1FADEA3D000
|
unkown
|
page read and write
|
|
|
|
1FAD9A02000
|
unkown
|
page read and write
|
|
|
|
7DF5C8CC2000
|
unkown image
|
page readonly
|
|
|
|
7FF50FCE2000
|
unkown image
|
page readonly
|
|
|
|
7FF507A23000
|
unkown image
|
page readonly
|
|
|
|
7FF507A26000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEE56000
|
unkown image
|
page readonly
|
|
|
|
12F65102000
|
unkown
|
page read and write
|
|
|
|
3CA000
|
unkown image
|
page write copy
|
|
|
|
1FAD9313000
|
unkown
|
page read and write
|
|
|
|
8A8000
|
unkown
|
page read and write
|
|
|
|
7FF50F9BF000
|
unkown image
|
page readonly
|
|
|
|
12F64BB8000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1FADEA8A000
|
unkown
|
page read and write
|
|
|
|
7F2A2000
|
unkown image
|
page readonly
|
|
|
|
C00000
|
unkown
|
page read and write
|
|
|
|
7FF50FBA8000
|
unkown image
|
page readonly
|
|
|
|
7FF54B70D000
|
unkown image
|
page readonly
|
|
|
|
1F08CF00000
|
unkown
|
page read and write
|
|
|
|
7B4000
|
unkown
|
page read and write
|
|
|
|
3C9000
|
unkown image
|
page readonly
|
|
|
|
12F64B7E000
|
unkown
|
page read and write
|
|
|
|
3C9000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEC20000
|
unkown image
|
page readonly
|
|
|
|
12F65102000
|
unkown
|
page read and write
|
|
|
|
7DF52E0E0000
|
unkown image
|
page readonly
|
|
|
|
1FADA003000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
C9F8EF9000
|
stack
|
page read and write
|
|
|
|
7DF5C8CD0000
|
unkown image
|
page readonly
|
|
|
|
15868049000
|
unkown
|
page read and write
|
|
|
|
1FAD90A0000
|
unkown image
|
page readonly
|
|
|
|
12F64BA5000
|
unkown
|
page read and write
|
|
|
|
1FADE890000
|
unkown
|
page read and write
|
|
|
|
2CA0000
|
unkown
|
page read and write
|
|
|
|
B3F000
|
unkown
|
page read and write
|
|
|
|
7FF50FBC4000
|
unkown image
|
page readonly
|
|
|
|
1FAD9780000
|
unkown image
|
page readonly
|
|
|
|
18AAA299000
|
unkown
|
page read and write
|
|
|
|
1FADEA00000
|
unkown
|
page read and write
|
|
|
|
1FAD9274000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown image
|
page execute read
|
|
|
|
7FF5BEDE4000
|
unkown image
|
page readonly
|
|
|
|
18AAA485000
|
heap private
|
page read and write
|
|
|
|
7DF52E0E2000
|
unkown image
|
page readonly
|
|
|
|
1F08CE13000
|
unkown
|
page read and write
|
|
|
|
12F64213000
|
unkown
|
page read and write
|
|
|
|
7FF5BEC74000
|
unkown image
|
page readonly
|
|
|
|
7FF54B714000
|
unkown image
|
page readonly
|
|
|
|
7FBA2000
|
unkown image
|
page readonly
|
|
|
|
1F08CCA0000
|
unkown image
|
page read and write
|
|
|
|
2345B750000
|
unkown image
|
page readonly
|
|
|
|
7FF50FC94000
|
unkown image
|
page readonly
|
|
|
|
B3D000
|
unkown
|
page read and write
|
|
|
|
12F64262000
|
unkown
|
page read and write
|
|
|
|
1FADEABD000
|
unkown
|
page read and write
|
|
|
|
15868057000
|
unkown
|
page read and write
|
|
|
|
3CC000
|
unkown image
|
page readonly
|
|
|
|
3CD000
|
unkown image
|
page write copy
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1586806D000
|
unkown
|
page read and write
|
|
|
|
7FF507931000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEC41000
|
unkown image
|
page readonly
|
|
|
|
15868660000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
2345B92D000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
3CD000
|
unkown image
|
page write copy
|
|
|
|
7FF507878000
|
unkown image
|
page readonly
|
|
|
|
7FF507A32000
|
unkown image
|
page readonly
|
|
|
|
12F64BA6000
|
unkown
|
page read and write
|
|
|
|
18AAA200000
|
unkown image
|
page readonly
|
|
|
|
7FF4FDD61000
|
unkown image
|
page readonly
|
|
|
|
4EEA27E000
|
stack
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1040000
|
unkown
|
page read and write
|
|
|
|
1FADEA62000
|
unkown
|
page read and write
|
|
|
|
7F780000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEA99000
|
unkown image
|
page readonly
|
|
|
|
12F64BCD000
|
unkown
|
page read and write
|
|
|
|
7DF507CD0000
|
unkown image
|
page readonly
|
|
|
|
2345C430000
|
unkown
|
page read and write
|
|
|
|
3C9000
|
unkown image
|
page readonly
|
|
|
|
15868113000
|
unkown
|
page read and write
|
|
|
|
7F9D2000
|
unkown image
|
page readonly
|
|
|
|
7FF50F797000
|
unkown image
|
page readonly
|
|
|
|
15868108000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
1586804B000
|
unkown
|
page read and write
|
|
|
|
12F6425C000
|
unkown
|
page read and write
|
|
|
|
1490000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF5CF0C2000
|
unkown image
|
page readonly
|
|
|
|
3CA000
|
unkown image
|
page read and write
|
|
|
|
15868000000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
4667A77000
|
stack
|
page read and write
|
|
|
|
7FF5240DA000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7FF5BEA42000
|
unkown image
|
page readonly
|
|
|
|
7FF524155000
|
unkown image
|
page readonly
|
|
|
|
7FF54B71B000
|
unkown image
|
page readonly
|
|
|
|
15867EB0000
|
unkown image
|
page readonly
|
|
|
|
7FF50FBD4000
|
unkown image
|
page readonly
|
|
|
|
12F64302000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7FF50FA44000
|
unkown image
|
page readonly
|
|
|
|
3CA000
|
unkown image
|
page write copy
|
|
|
|
B49000
|
unkown
|
page read and write
|
|
|
|
7DF5117E0000
|
unkown image
|
page readonly
|
|
|
|
1FADE5A0000
|
unkown
|
page read and write
|
|
|
|
23D3EA4C000
|
unkown
|
page read and write
|
|
|
|
7FF5BEC16000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
7DF5D8F50000
|
unkown image
|
page readonly
|
|
|
|
1FAD92A8000
|
unkown
|
page read and write
|
|
|
|
7FF524117000
|
unkown image
|
page readonly
|
|
|
|
7DF519A80000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEEC4000
|
unkown image
|
page readonly
|
|
|
|
916000
|
unkown
|
page read and write
|
|
|
|
12F64BA6000
|
unkown
|
page read and write
|
|
|
|
7B4000
|
unkown
|
page read and write
|
|
|
|
12F64BB4000
|
unkown
|
page read and write
|
|
|
|
7FF5BEE5D000
|
unkown image
|
page readonly
|
|
|
|
7F790000
|
unkown image
|
page readonly
|
|
|
|
15868054000
|
unkown
|
page read and write
|
|
|
|
7FF5CF08F000
|
unkown image
|
page readonly
|
|
|
|
7DF5C8CC0000
|
unkown image
|
page readonly
|
|
|
|
12F64BA5000
|
unkown
|
page read and write
|
|
|
|
23D3EA3C000
|
unkown
|
page read and write
|
|
|
|
15868013000
|
unkown
|
page read and write
|
|
|
|
18AAA27B000
|
heap default
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7F2A0000
|
unkown image
|
page readonly
|
|
|
|
23D3EA50000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7FF4FDED4000
|
unkown image
|
page readonly
|
|
|
|
8880000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
9C90FB000
|
stack
|
page read and write
|
|
|
|
3C3000
|
unkown image
|
page execute read
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
12F649C0000
|
unkown
|
page read and write
|
|
|
|
7FF507826000
|
unkown image
|
page readonly
|
|
|
|
3BF000
|
unkown image
|
page execute read
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
940000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5BECBA000
|
unkown image
|
page readonly
|
|
|
|
7F9E0000
|
unkown image
|
page readonly
|
|
|
|
F30000
|
unkown image
|
page readonly
|
|
|
|
7DF5117D2000
|
unkown image
|
page readonly
|
|
|
|
7FF507962000
|
unkown image
|
page readonly
|
|
|
|
9C9577000
|
stack
|
page read and write
|
|
|
|
E30000
|
unkown
|
page execute and read and write
|
|
|
|
7DF40F6A0000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
12F64B8C000
|
unkown
|
page read and write
|
|
|
|
2E3D000
|
stack
|
page read and write
|
|
|
|
1FADE730000
|
unkown
|
page read and write
|
|
|
|
7FF5BEEEA000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8F30000
|
unkown image
|
page readonly
|
|
|
|
3BD000
|
unkown image
|
page execute read
|
|
|
|
7DF555500000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF141000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
7FF5BEF06000
|
unkown image
|
page readonly
|
|
|
|
86A000
|
unkown
|
page read and write
|
|
|
|
23D3E7F0000
|
unkown image
|
page readonly
|
|
|
|
7DF5117F0000
|
unkown image
|
page readonly
|
|
|
|
9280000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF50FA1E000
|
unkown image
|
page readonly
|
|
|
|
1FADE840000
|
unkown
|
page read and write
|
|
|
|
7FF50FA20000
|
unkown image
|
page readonly
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
7DF5D8F32000
|
unkown image
|
page readonly
|
|
|
|
15868059000
|
unkown
|
page read and write
|
|
|
|
7FF5BE8CA000
|
unkown image
|
page readonly
|
|
|
|
7FF4FDEFA000
|
unkown image
|
page readonly
|
|
|
|
12F64316000
|
unkown
|
page read and write
|
|
|
|
B73000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7FF524299000
|
unkown image
|
page readonly
|
|
|
|
23D3EC00000
|
unkown image
|
page readonly
|
|
|
|
72C000
|
unkown
|
page read and write
|
|
|
|
7FF5BEE0F000
|
unkown image
|
page readonly
|
|
|
|
3BD000
|
unkown image
|
page execute read
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7DF519AA0000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
E6F000
|
heap default
|
page read and write
|
|
|
|
7FF4E2DCB000
|
unkown image
|
page readonly
|
|
|
|
1FADE610000
|
unkown
|
page read and write
|
|
|
|
7B4000
|
unkown
|
page read and write
|
|
|
|
A680000
|
unkown
|
page read and write
|
|
|
|
B93000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown image
|
page write copy
|
|
|
|
168F0000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
2CA0000
|
unkown
|
page read and write
|
|
|
|
7FF50F842000
|
unkown image
|
page readonly
|
|
|
|
2345C660000
|
unkown
|
page readonly
|
|
|
|
1FADE890000
|
unkown
|
page read and write
|
|
|
|
7FF54B72A000
|
unkown image
|
page readonly
|
|
|
|
7FF50FBDF000
|
unkown image
|
page readonly
|
|
|
|
1FADE800000
|
unkown
|
page read and write
|
|
|
|
18AAA2A2000
|
unkown
|
page read and write
|
|
|
|
18AAA480000
|
heap private
|
page read and write
|
|
|
|
793000
|
unkown
|
page read and write
|
|
|
|
466787B000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
unkown image
|
page execute read
|
|
|
|
7FF4FDE34000
|
unkown image
|
page readonly
|
|
|
|
2D30000
|
heap private
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
7FF5CF0DD000
|
unkown image
|
page readonly
|
|
|
|
8FE000
|
stack
|
page read and write
|
|
|
|
7FF524297000
|
unkown image
|
page readonly
|
|
|
|
1FADEAFE000
|
unkown
|
page read and write
|
|
|
|
7FF5BEF03000
|
unkown image
|
page readonly
|
|
|
|
7FF523A07000
|
unkown image
|
page readonly
|
|
|
|
12F642E3000
|
unkown
|
page read and write
|
|
|
|
1586808A000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
3ED000
|
unkown image
|
page write copy
|
|
|
|
7FF50795A000
|
unkown image
|
page readonly
|
|
|
|
7FBA0000
|
unkown image
|
page readonly
|
|
|
|
12F6503C000
|
unkown
|
page read and write
|
|
|
|
1280000
|
unkown image
|
page readonly
|
|
|
|
7FF50FC12000
|
unkown image
|
page readonly
|
|
|
|
18AAA0C0000
|
unkown image
|
page readonly
|
|
|
|
7FF524136000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEBC3000
|
unkown image
|
page readonly
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
4EEA47F000
|
stack
|
page read and write
|
|
|
|
7FF5BEC5B000
|
unkown image
|
page readonly
|
|
|
|
C5F000
|
stack
|
page read and write
|
|
|
|
7FF50FBC9000
|
unkown image
|
page readonly
|
|
|
|
12F64BCD000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown image
|
page write copy
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
3BF000
|
unkown image
|
page execute read
|
|
|
|
18AAA690000
|
unkown image
|
page readonly
|
|
|
|
172F0000
|
unkown
|
page read and write
|
|
|
|
7FF524266000
|
unkown image
|
page readonly
|
|
|
|
1FADEAF4000
|
unkown
|
page read and write
|
|
|
|
7FF5079F4000
|
unkown image
|
page readonly
|
|
|
|
7FF50F4BB000
|
unkown image
|
page readonly
|
|
|
|
23D3EA88000
|
unkown
|
page read and write
|
|
|
|
716627B000
|
unkown
|
page read and write
|
|
|
|
CCE000
|
stack
|
page read and write
|
|
|
|
7FF5070F1000
|
unkown image
|
page readonly
|
|
|
|
7FF50F3A7000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8F40000
|
unkown image
|
page readonly
|
|
|
|
784000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
12F6509D000
|
unkown
|
page read and write
|
|
|
|
7FF5BEA8C000
|
unkown image
|
page readonly
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
3ED000
|
unkown image
|
page write copy
|
|
|
|
7FF5BEBCA000
|
unkown image
|
page readonly
|
|
|
|
46686FE000
|
stack
|
page read and write
|
|
|
|
1FADE590000
|
unkown
|
page read and write
|
|
|
|
2345BAB0000
|
unkown
|
page read and write
|
|
|
|
35CC000
|
stack
|
page read and write
|
|
|
|
3C3000
|
unkown image
|
page execute read
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
7FF507943000
|
unkown image
|
page readonly
|
|
|
|
7FF5BECD3000
|
unkown image
|
page readonly
|
|
|
|
300000
|
unkown image
|
page readonly
|
|
|
|
240000
|
unkown image
|
page read and write
|
|
|
|
35C000
|
unkown
|
page read and write
|
|
|
|
75E000
|
stack
|
page read and write
|
|
|
|
12F64B8A000
|
unkown
|
page read and write
|
|
|
|
12F64BCD000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
unkown image
|
page execute read
|
|
|
|
7FF5BEE2D000
|
unkown image
|
page readonly
|
|
|
|
15868080000
|
unkown
|
page read and write
|
|
|
|
7FF54B6A9000
|
unkown image
|
page readonly
|
|
|
|
1FAD923D000
|
unkown
|
page read and write
|
|
|
|
7DF5C8CC0000
|
unkown image
|
page readonly
|
|
|
|
1489000
|
unkown
|
page readonly
|
|
|
|
7FF5BEDC5000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown image
|
page write copy
|
|
|
|
12F64BA6000
|
unkown
|
page read and write
|
|
|
|
15867EE0000
|
unkown image
|
page readonly
|
|
|
|
7FF523DF7000
|
unkown image
|
page readonly
|
|
|
|
1F08D602000
|
unkown
|
page read and write
|
|
|
|
7FF5079F7000
|
unkown image
|
page readonly
|
|
|
|
7FF507989000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7F2A2000
|
unkown image
|
page readonly
|
|
|
|
18AAA0A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5C8CB2000
|
unkown image
|
page readonly
|
|
|
|
7FF50792F000
|
unkown image
|
page readonly
|
|
|
|
3BD000
|
unkown image
|
page execute read
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7FF4FDCAC000
|
unkown image
|
page readonly
|
|
|
|
AF9000
|
unkown
|
page read and write
|
|
|
|
7FF507A37000
|
unkown image
|
page readonly
|
|
|
|
1F08CCE0000
|
unkown image
|
page readonly
|
|
|
|
1453000
|
unkown
|
page read and write
|
|
|
|
3BD000
|
unkown image
|
page execute read
|
|
|
|
324E000
|
stack
|
page read and write
|
|
|
|
1FAD9299000
|
unkown
|
page read and write
|
|
|
|
3F3000
|
unkown image
|
page readonly
|
|
|
|
959000
|
unkown
|
page readonly
|
|
|
|
FE0000
|
unkown image
|
page readonly
|
|
|
|
1080000
|
unkown image
|
page readonly
|
|
|
|
23D3EA00000
|
unkown
|
page read and write
|
|
|
|
7FF5BEE67000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5BEE36000
|
unkown image
|
page readonly
|
|
|
|
1920000
|
unkown
|
page read and write
|
|
|
|
12F64B93000
|
unkown
|
page read and write
|
|
|
|
9C947D000
|
stack
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1F08D380000
|
unkown image
|
page readonly
|
|
|
|
7FF4FDEDD000
|
unkown image
|
page readonly
|
|
|
|
C9F8FFF000
|
stack
|
page read and write
|
|
|
|
3C3000
|
unkown image
|
page execute read
|
|
|
|
23D3E7C0000
|
unkown image
|
page readonly
|
|
|
|
12F6503C000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
CE0000
|
heap default
|
page read and write
|
|
|
|
7F9C0000
|
unkown image
|
page readonly
|
|
|
|
34CE000
|
stack
|
page read and write
|
|
|
|
3ED000
|
unkown image
|
page write copy
|
|
|
|
7FF507845000
|
unkown image
|
page readonly
|
|
|
|
3F9000
|
unkown image
|
page readonly
|
|
|
|
23D3E810000
|
heap default
|
page read and write
|
|
|
|
1A6C000
|
stack
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
B49000
|
heap default
|
page read and write
|
|
|
|
1FAD9B02000
|
unkown
|
page read and write
|
|
|
|
7DF519A82000
|
unkown image
|
page readonly
|
|
|
|
7FF5079ED000
|
unkown image
|
page readonly
|
|
|
|
C20000
|
stack
|
page read and write
|
|
|
|
12F6425F000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
7DF52E100000
|
unkown image
|
page readonly
|
|
|
|
869000
|
unkown
|
page readonly
|
|
|
|
7FF5CED2C000
|
unkown image
|
page readonly
|
|
|
|
7FF54B743000
|
unkown image
|
page readonly
|
|
|
|
B08000
|
heap default
|
page read and write
|
|
|
|
23D3E9E0000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
15867ED0000
|
unkown image
|
page readonly
|
|
|
|
3ED000
|
unkown image
|
page write copy
|
|
|
|
E6C000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF2A000
|
unkown image
|
page readonly
|
|
|
|
18AAA285000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
18AAA490000
|
unkown image
|
page readonly
|
|
|
|
1140000
|
heap private
|
page read and write
|
|
|
|
4EE9C9C000
|
unkown
|
page read and write
|
|
|
|
3CA000
|
unkown image
|
page read and write
|
|
|
|
4667EFB000
|
stack
|
page read and write
|
|
|
|
7FF5BEE3A000
|
unkown image
|
page readonly
|
|
|
|
7DF5C8CB0000
|
unkown image
|
page readonly
|
|
|
|
23D3EA65000
|
unkown
|
page read and write
|
|
|
|
7DF5117D0000
|
unkown image
|
page readonly
|
|
|
|
2345B8E0000
|
heap default
|
page read and write
|
|
|
|
2BA2000
|
unkown
|
page read and write
|
|
|
|
7FF5242F4000
|
unkown image
|
page readonly
|
|
|
|
DB0000
|
unkown image
|
page readonly
|
|
|
|
C9F9079000
|
stack
|
page read and write
|
|
|
|
3F9000
|
unkown image
|
page readonly
|
|
|
|
3BD000
|
unkown image
|
page execute read
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
12F64B82000
|
unkown
|
page read and write
|
|
|
|
77E000
|
stack
|
page read and write
|
|
|
|
7FF5BEDF0000
|
unkown image
|
page readonly
|
|
|
|
12F64B5D000
|
unkown
|
page read and write
|
|
|
|
2345B880000
|
unkown image
|
page readonly
|
|
|
|
12F64B67000
|
unkown
|
page read and write
|
|
|
|
7FF507848000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7DF5554F2000
|
unkown image
|
page readonly
|
|
|
|
7FF50FCD3000
|
unkown image
|
page readonly
|
|
|
|
7FF524158000
|
unkown image
|
page readonly
|
|
|
|
12F64BA6000
|
unkown
|
page read and write
|
|
|
|
7FF54B746000
|
unkown image
|
page readonly
|
|
|
|
784000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
E48000
|
heap default
|
page read and write
|
|
|
|
12F64B63000
|
unkown
|
page read and write
|
|
|
|
23D3EF80000
|
unkown image
|
page readonly
|
|
|
|
7DF42BFB0000
|
unkown image
|
page readonly
|
|
|
|
E2E000
|
stack
|
page read and write
|
|
|
|
7FF50FB95000
|
unkown image
|
page readonly
|
|
|
|
4667BF9000
|
stack
|
page read and write
|
|
|
|
B00000
|
heap default
|
page read and write
|
|
|
|
12F641D0000
|
unkown
|
page read and write
|
|
|
|
12F64B91000
|
unkown
|
page read and write
|
|
|
|
12F6516A000
|
unkown
|
page read and write
|
|
|
|
7FF50FC06000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1FADEB02000
|
unkown
|
page read and write
|
|
|
|
B65000
|
unkown
|
page read and write
|
|
|
|
7FF5BEBBD000
|
unkown image
|
page readonly
|
|
|
|
3F9000
|
unkown image
|
page readonly
|
|
|
|
7F2B2000
|
unkown image
|
page readonly
|
|
|
|
1FADEB05000
|
unkown
|
page read and write
|
|
|
|
1FADA1F0000
|
unkown image
|
page readonly
|
|
|
|
12F64B7E000
|
unkown
|
page read and write
|
|
|
|
1E50000
|
unkown
|
page read and write
|
|
|
|
85216F9000
|
stack
|
page read and write
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
7FF54B717000
|
unkown image
|
page readonly
|
|
|
|
15868051000
|
unkown
|
page read and write
|
|
|
|
FE0000
|
unkown image
|
page readonly
|
|
|
|
716657B000
|
stack
|
page read and write
|
|
|
|
3CC000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
334F000
|
stack
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
93E000
|
stack
|
page read and write
|
|
|
|
12F64B66000
|
unkown
|
page read and write
|
|
|
|
7F9C0000
|
unkown image
|
page readonly
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
7B4000
|
unkown
|
page read and write
|
|
|
|
15868400000
|
unkown image
|
page readonly
|
|
|
|
1FAD9600000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8F32000
|
unkown image
|
page readonly
|
|
|
|
7FF50FA7A000
|
unkown image
|
page readonly
|
|
|
|
85213DF000
|
stack
|
page read and write
|
|
|
|
7FF50F575000
|
unkown image
|
page readonly
|
|
|
|
600000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF015000
|
unkown image
|
page readonly
|
|
|
|
7FF5074E7000
|
unkown image
|
page readonly
|
|
|
|
7DF5117F0000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
7FF5241C5000
|
unkown image
|
page readonly
|
|
|
|
23D3EA47000
|
unkown
|
page read and write
|
|
|
|
7F7A0000
|
unkown image
|
page readonly
|
|
|
|
12F65026000
|
unkown
|
page read and write
|
|
|
|
4667CFD000
|
stack
|
page read and write
|
|
|
|
338E000
|
stack
|
page read and write
|
|
|
|
15867F00000
|
heap default
|
page read and write
|
|
|
|
852177A000
|
stack
|
page read and write
|
|
|
|
7FF5079E4000
|
unkown image
|
page readonly
|
|
|
|
12F64B5B000
|
unkown
|
page read and write
|
|
|
|
784000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
3BF000
|
unkown image
|
page execute read
|
|
|
|
7FF50FBEF000
|
unkown image
|
page readonly
|
|
|
|
AF0000
|
unkown image
|
page readonly
|
|
|
|
1FADA200000
|
unkown image
|
page readonly
|
|
|
|
1FAD9213000
|
unkown
|
page read and write
|
|
|
|
9C91F7000
|
stack
|
page read and write
|
|
|
|
7FF507A37000
|
unkown image
|
page readonly
|
|
|
|
12F64BA6000
|
unkown
|
page read and write
|
|
|
|
1F08CCF0000
|
unkown image
|
page readonly
|
|
|
|
7FF507956000
|
unkown image
|
page readonly
|
|
|
|
1FAD9A00000
|
unkown
|
page read and write
|
|
|
|
7F792000
|
unkown image
|
page readonly
|
|
|
|
23D3EA4D000
|
unkown
|
page read and write
|
|
|
|
1FAD9302000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
1FADE760000
|
unkown
|
page read and write
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
466807F000
|
stack
|
page read and write
|
|
|
|
1FADEADE000
|
unkown
|
page read and write
|
|
|
|
7FF5BEE23000
|
unkown image
|
page readonly
|
|
|
|
1F08CDF0000
|
unkown image
|
page readonly
|
|
|
|
12F641A0000
|
heap default
|
page read and write
|
|
|
|
12F64150000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEE6E000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD6BD000
|
unkown image
|
page readonly
|
|
|
|
1FADE750000
|
unkown
|
page read and write
|
|
|
|
7FF5CF144000
|
unkown image
|
page readonly
|
|
|
|
1FAD90D0000
|
heap default
|
page read and write
|
|
|
|
2345B92D000
|
unkown
|
page read and write
|
|
|
|
7DF52E0F2000
|
unkown image
|
page readonly
|
|
|
|
7FF50FBC0000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
716677F000
|
stack
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
12F64288000
|
unkown
|
page read and write
|
|
|
|
7FF50FCD6000
|
unkown image
|
page readonly
|
|
|
|
1FADE774000
|
unkown
|
page read and write
|
|
|
|
12F649D0000
|
unkown image
|
page read and write
|
|
|
|
12F6423C000
|
unkown
|
page read and write
|
|
|
|
D2E000
|
stack
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
18AAA2B0000
|
unkown
|
page read and write
|
|
|
|
7FF5BEC02000
|
unkown image
|
page readonly
|
|
|
|
2345C680000
|
unkown
|
page read and write
|
|
|
|
1FAD91B0000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
12F65003000
|
unkown
|
page read and write
|
|
|
|
23D3E7A0000
|
unkown image
|
page read and write
|
|
|
|
12F64B91000
|
unkown
|
page read and write
|
|
|
|
3F3000
|
unkown image
|
page readonly
|
|
|
|
12F6509D000
|
unkown
|
page read and write
|
|
|
|
7F2C0000
|
unkown image
|
page readonly
|
|
|
|
6D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEF86000
|
unkown image
|
page readonly
|
|
|
|
15868100000
|
unkown
|
page read and write
|
|
|
|
B73000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
310E000
|
stack
|
page read and write
|
|
|
|
1030000
|
unkown
|
page execute and read and write
|
|
|
|
1FADE620000
|
unkown
|
page read and write
|
|
|
|
7FF5CF186000
|
unkown image
|
page readonly
|
|
|
|
7FF524241000
|
unkown image
|
page readonly
|
|
|
|
23D3EA8C000
|
unkown
|
page read and write
|
|
|
|
9C937F000
|
stack
|
page read and write
|
|
|
|
3F9000
|
unkown image
|
page readonly
|
|
|
|
12F64180000
|
unkown image
|
page readonly
|
|
|
|
12F6425B000
|
unkown
|
page read and write
|
|
|
|
3CA000
|
unkown image
|
page write copy
|
|
|
|
12F65018000
|
unkown
|
page read and write
|
|
|
|
3BF000
|
unkown image
|
page execute read
|
|
|
|
7F2B0000
|
unkown image
|
page readonly
|
|
|
|
12F65100000
|
unkown
|
page read and write
|
|
|
|
12F642B0000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
5666AF7000
|
stack
|
page read and write
|
|
|
|
7FBA0000
|
unkown image
|
page readonly
|
|
|
|
7F9D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5117E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEE69000
|
unkown image
|
page readonly
|
|
|
|
18AAA2A2000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1470000
|
unkown
|
page execute and read and write
|
|
|
|
1013000
|
unkown
|
page read and write
|
|
|
|
7DF5117D0000
|
unkown image
|
page readonly
|
|
|
|
1F08CE6F000
|
unkown
|
page read and write
|
|
|
|
2345BAE0000
|
unkown
|
page read and write
|
|
|
|
18AAA220000
|
unkown image
|
page read and write
|
|
|
|
7FF4FDD51000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEED7000
|
unkown image
|
page readonly
|
|
|
|
3BD000
|
unkown image
|
page execute read
|
|
|
|
716687F000
|
stack
|
page read and write
|
|
|
|
7F2A0000
|
unkown image
|
page readonly
|
|
|
|
3B1000
|
unkown image
|
page execute read
|
|
|
|
7FF52424F000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7FF5CF0AD000
|
unkown image
|
page readonly
|
|
|
|
1E50000
|
unkown
|
page read and write
|
|
|
|
7FF524304000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FBB0000
|
unkown image
|
page readonly
|
|
|
|
7E0000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
3BF000
|
unkown image
|
page execute read
|
|
|
|
12F64313000
|
unkown
|
page read and write
|
|
|
|
1F08CF08000
|
unkown
|
page read and write
|
|
|
|
4EE9D9E000
|
stack
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1FAD9276000
|
unkown
|
page read and write
|
|
|
|
3CA000
|
unkown image
|
page write copy
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
12F64A02000
|
unkown
|
page read and write
|
|
|
|
2345B710000
|
unkown
|
page read and write
|
|
|
|
7F9C2000
|
unkown image
|
page readonly
|
|
|
|
6C0000
|
unkown image
|
page read and write
|
|
|
|
B93000
|
unkown
|
page read and write
|
|
|
|
3C9000
|
unkown image
|
page readonly
|
|
|
|
196D000
|
stack
|
page read and write
|
|
|
|
2400000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5BEE1F000
|
unkown image
|
page readonly
|
|
|
|
12F64BA5000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown image
|
page execute read
|
|
|
|
1FAD91D0000
|
unkown
|
page read and write
|
|
|
|
7FF4FDEE7000
|
unkown image
|
page readonly
|
|
|
|
3C9000
|
unkown image
|
page readonly
|
|
|
|
1BFE000
|
stack
|
page read and write
|
|
|
|
7DF52E0F0000
|
unkown image
|
page readonly
|
|
|
|
3F3000
|
unkown image
|
page readonly
|
|
|
|
15867FE0000
|
unkown image
|
page readonly
|
|
|
|
12F64B6C000
|
unkown
|
page read and write
|
|
|
|
3F3000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF4FDEE4000
|
unkown image
|
page readonly
|
|
|
|
566667B000
|
unkown
|
page read and write
|
|
|
|
7FF5BED95000
|
unkown image
|
page readonly
|
|
|
|
12F64254000
|
unkown
|
page read and write
|
|
|
|
2345BF10000
|
unkown image
|
page readonly
|
|
|
|
1F08CE3C000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
unkown image
|
page execute read
|
|
|
|
1FAD9200000
|
unkown
|
page read and write
|
|
|
|
7FF5079E1000
|
unkown image
|
page readonly
|
|
|
|
716637F000
|
stack
|
page read and write
|
|
|
|
1FADEAA5000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
2345B92D000
|
unkown
|
page read and write
|
|
|
|
7FF52430B000
|
unkown image
|
page readonly
|
|
|
|
7FF50FC39000
|
unkown image
|
page readonly
|
|
|
|
7F680000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF50FA93000
|
unkown image
|
page readonly
|
|
|
|
7FBA2000
|
unkown image
|
page readonly
|
|
|
|
18AAA810000
|
unkown image
|
page readonly
|
|
|
|
9C8FFC000
|
stack
|
page read and write
|
|
|
|
148A000
|
unkown
|
page read and write
|
|
|
|
7FF5BEBEF000
|
unkown image
|
page readonly
|
|
|
|
1FAD91E0000
|
unkown image
|
page read and write
|
|
|
|
3C9000
|
unkown image
|
page readonly
|
|
|
|
7FF54B707000
|
unkown image
|
page readonly
|
|
|
|
7FF52431A000
|
unkown image
|
page readonly
|
|
|
|
7DF5554F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEBE5000
|
unkown image
|
page readonly
|
|
|
|
1D3D000
|
stack
|
page read and write
|
|
|
|
7FF50FA2B000
|
unkown image
|
page readonly
|
|
|
|
7FF4FDE6D000
|
unkown image
|
page readonly
|
|
|
|
7FF50FB97000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
7DF52E0E0000
|
unkown image
|
page readonly
|
|
|
|
2345B860000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1ABE000
|
stack
|
page read and write
|
|
|
|
1FAD922A000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF5074E1000
|
unkown image
|
page readonly
|
|
|
|
7FF523A01000
|
unkown image
|
page readonly
|
|
|
|
3AC000
|
unkown
|
page read and write
|
|
|
|
3C3000
|
unkown image
|
page execute read
|
|
|
|
3B4000
|
unkown image
|
page execute read
|
|
|
|
7FF5BEE42000
|
unkown image
|
page readonly
|
|
|
|
12F6501D000
|
unkown
|
page read and write
|
|
|
|
7FF5CF091000
|
unkown image
|
page readonly
|
|
|
|
3C3000
|
unkown image
|
page execute read
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
7FF50F791000
|
unkown image
|
page readonly
|
|
|
|
C10000
|
heap default
|
page read and write
|
|
|
|
7DF405B90000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7DF5C8CC2000
|
unkown image
|
page readonly
|
|
|
|
12F64BCD000
|
unkown
|
page read and write
|
|
|
|
E40000
|
heap default
|
page read and write
|
|
|
|
12F641B0000
|
unkown image
|
page readonly
|
|
|
|
23D3EB00000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
12F64BCD000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1CFF000
|
stack
|
page read and write
|
|
|
|
7FF4FDE79000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7CE000
|
stack
|
page read and write
|
|
|
|
7FF50FC0A000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
2420000
|
heap private
|
page read and write
|
|
|
|
7FF5CF15B000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEFA8000
|
unkown image
|
page readonly
|
|
|
|
7FF54B676000
|
unkown image
|
page readonly
|
|
|
|
7FF5242F1000
|
unkown image
|
page readonly
|
|
|
|
7FF5BECBD000
|
unkown image
|
page readonly
|
|
|
|
7DF519A82000
|
unkown image
|
page readonly
|
|
|
|
7FF4FDF13000
|
unkown image
|
page readonly
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
566677E000
|
stack
|
page read and write
|
|
|
|
15868102000
|
unkown
|
page read and write
|
|
|
|
2F0000
|
unkown image
|
page read and write
|
|
|
|
1FADA210000
|
unkown image
|
page readonly
|
|
|
|
12F64B00000
|
unkown
|
page read and write
|
|
|
|
B62000
|
unkown
|
page read and write
|
|
|
|
852187C000
|
stack
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
716647B000
|
stack
|
page read and write
|
|
|
|
2345B840000
|
unkown
|
page read and write
|
|
|
|
7FF5BEF12000
|
unkown image
|
page readonly
|
|
|
|
23D3E7E0000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1F08CE2A000
|
unkown
|
page read and write
|
|
|
|
2770000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown image
|
page readonly
|
|
|
|
15867EB0000
|
unkown image
|
page readonly
|
|
|
|
1FADEAE3000
|
unkown
|
page read and write
|
|
|
|
320F000
|
stack
|
page read and write
|
|
|
|
C20000
|
stack
|
page read and write
|
|
|
|
7FF507840000
|
unkown image
|
page readonly
|
|
|
|
1FAD92F9000
|
unkown
|
page read and write
|
|
|
|
7FF4FD650000
|
unkown image
|
page readonly
|
|
|
|
1BBF000
|
stack
|
page read and write
|
|
|
|
7FF50FC2D000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
18AAA2A8000
|
unkown
|
page read and write
|
|
|
|
7FF54B415000
|
unkown image
|
page readonly
|
|
|
|
2345B8D0000
|
unkown
|
page read and write
|
|
|
|
2345B8E7000
|
heap default
|
page read and write
|
|
|
|
7DF507CC2000
|
unkown image
|
page readonly
|
|
|
|
12F65102000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
3B4000
|
unkown image
|
page execute read
|
|
|
|
3B1000
|
unkown image
|
page execute read
|
|
|
|
300000
|
unkown image
|
page readonly
|
|
|
|
3CC000
|
unkown image
|
page readonly
|
|
|
|
1F08D470000
|
unkown
|
page read and write
|
|
|
|
23D3EA4F000
|
unkown
|
page read and write
|
|
|
|
14D0000
|
heap private
|
page read and write
|
|
|
|
9C8EFF000
|
stack
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
784000
|
unkown
|
page read and write
|
|
|
|
AAE000
|
stack
|
page read and write
|
|
|
|
3ED000
|
unkown image
|
page write copy
|
|
|
|
7FF5CF14D000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEC50000
|
unkown image
|
page readonly
|
|
|
|
1480000
|
unkown
|
page readonly
|
|
|
|
7FF5CF192000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown image
|
page write copy
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1FADE770000
|
unkown
|
page read and write
|
|
|
|
1F08CE4F000
|
unkown
|
page read and write
|
|
|
|
6CD000
|
unkown
|
page read and write
|
|
|
|
7FF50FB28000
|
unkown image
|
page readonly
|
|
|
|
B62000
|
unkown
|
page read and write
|
|
|
|
7FF523FB1000
|
unkown image
|
page readonly
|
|
|
|
852167E000
|
stack
|
page read and write
|
|
|
|
7DF5117E0000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7DF507CD2000
|
unkown image
|
page readonly
|
|
|
|
1FAD9B59000
|
unkown
|
page read and write
|
|
|
|
7FF4FDED1000
|
unkown image
|
page readonly
|
|
|
|
12F642E7000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7FF5CF16A000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD64A000
|
unkown image
|
page readonly
|
|
|
|
B5E000
|
stack
|
page read and write
|
|
|
|
7FF52423F000
|
unkown image
|
page readonly
|
|
|
|
7FF50F766000
|
unkown image
|
page readonly
|
|
|
|
7DF52E0F0000
|
unkown image
|
page readonly
|
|
|
|
3ED000
|
unkown image
|
page write copy
|
|
|
|
12F64200000
|
unkown
|
page read and write
|
|
|
|
91F000
|
unkown
|
page read and write
|
|
|
|
2850000
|
heap private
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
784000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
unkown image
|
page execute read
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
2345B94F000
|
unkown
|
page read and write
|
|
|
|
23D3E7B0000
|
heap private
|
page read and write
|
|
|
|
3BF000
|
unkown image
|
page execute read
|
|
|
|
7FF5BEC14000
|
unkown image
|
page readonly
|
|
|
|
7FF50FAF5000
|
unkown image
|
page readonly
|
|
|
|
2AC000
|
unkown
|
page read and write
|
|
|
|
18AAA280000
|
heap default
|
page read and write
|
|
|
|
1F08CCC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEF57000
|
unkown image
|
page readonly
|
|
|
|
12F64950000
|
unkown image
|
page write copy
|
|
|
|
1F08CE51000
|
unkown
|
page read and write
|
|
|
|
7FF5BEC1A000
|
unkown image
|
page readonly
|
|
|
|
250000
|
unkown image
|
page readonly
|
|
|
|
1FAD9080000
|
unkown image
|
page readonly
|
|
|
|
2345B94A000
|
unkown
|
page read and write
|
|
|
|
7FF50F951000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEFD8000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEDD8000
|
unkown image
|
page readonly
|
|
|
|
C20000
|
stack
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
12F649C0000
|
unkown
|
page read and write
|
|
|
|
7F7A0000
|
unkown image
|
page readonly
|
|
|
|
7DF519A90000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
CD0000
|
unkown
|
page readonly
|
|
|
|
18AAA080000
|
unkown image
|
page read and write
|
|
|
|
7FF4FDD38000
|
unkown image
|
page readonly
|
|
|
|
71662FE000
|
stack
|
page read and write
|
|
|
|
730000
|
unkown image
|
page readonly
|
|
|
|
1F08CD10000
|
heap default
|
page read and write
|
|
|
|
1FAD928E000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
466827F000
|
stack
|
page read and write
|
|
|
|
7FF50F763000
|
unkown image
|
page readonly
|
|
|
|
12F64B87000
|
unkown
|
page read and write
|
|
|
|
566697B000
|
stack
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
56669FF000
|
stack
|
page read and write
|
|
|
|
7FF4FDE77000
|
unkown image
|
page readonly
|
|
|
|
7FBB0000
|
unkown image
|
page readonly
|
|
|
|
7F8C0000
|
unkown image
|
page readonly
|
|
|
|
B5D000
|
unkown
|
page read and write
|
|
|
|
2345B93C000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
2E7E000
|
stack
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
23D3EB02000
|
unkown
|
page read and write
|
|
|
|
7FBC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEE11000
|
unkown image
|
page readonly
|
|
|
|
7FF50FAB7000
|
unkown image
|
page readonly
|
|
|
|
2F7F000
|
stack
|
page read and write
|
|
|
|
2BB0000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
12F65003000
|
unkown
|
page read and write
|
|
|
|
23D3EA52000
|
unkown
|
page read and write
|
|
|
|
1FADEABE000
|
unkown
|
page read and write
|
|
|
|
23D3EA7D000
|
unkown
|
page read and write
|
|
|
|
2345BAF9000
|
heap private
|
page read and write
|
|
|
|
12F649C0000
|
unkown
|
page read and write
|
|
|
|
7FF5BE799000
|
unkown image
|
page readonly
|
|
|
|
2345B93B000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1FAD92B7000
|
unkown
|
page read and write
|
|
|
|
7B4000
|
unkown
|
page read and write
|
|
|
|
7FF54B696000
|
unkown image
|
page readonly
|
|
|
|
3CC000
|
unkown image
|
page readonly
|
|
|
|
7FF50F9A4000
|
unkown image
|
page readonly
|
|
|
|
B2C000
|
unkown
|
page read and write
|
|
|
|
7F790000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
3CD000
|
unkown image
|
page write copy
|
|
|
|
7FF523DF1000
|
unkown image
|
page readonly
|
|
|
|
4667DFE000
|
stack
|
page read and write
|
|
|
|
780000
|
unkown image
|
page readonly
|
|
|
|
7FBB2000
|
unkown image
|
page readonly
|
|
|
|
1586804D000
|
unkown
|
page read and write
|
|
|
|
7DF5554F0000
|
unkown image
|
page readonly
|
|
|
|
7DF4533C0000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
19AF0000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7DF507CC2000
|
unkown image
|
page readonly
|
|
|
|
B76000
|
unkown
|
page read and write
|
|
|
|
7F792000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF09F000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
7F9D2000
|
unkown image
|
page readonly
|
|
|
|
1FADEAA2000
|
unkown
|
page read and write
|
|
|
|
18AAA2B0000
|
unkown
|
page read and write
|
|
|
|
3CD000
|
unkown image
|
page write copy
|
|
|
|
12F64308000
|
unkown
|
page read and write
|
|
|
|
3CA000
|
unkown image
|
page read and write
|
|
|
|
B62000
|
unkown
|
page read and write
|
|
|
|
7DF5D8F50000
|
unkown image
|
page readonly
|
|
|
|
7F2B0000
|
unkown image
|
page readonly
|
|
|
|
670000
|
unkown image
|
page readonly
|
|
|
|
F7E000
|
stack
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF5CE857000
|
unkown image
|
page readonly
|
|
|
|
3CC000
|
unkown image
|
page readonly
|
|
|
|
12F64B88000
|
unkown
|
page read and write
|
|
|
|
12F64170000
|
unkown image
|
page readonly
|
|
|
|
12F64850000
|
unkown image
|
page readonly
|
|
|
|
1400000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEF67000
|
unkown image
|
page readonly
|
|
|
|
2345BAF0000
|
heap private
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1F08CE8A000
|
unkown
|
page read and write
|
|
|
|
E94000
|
heap default
|
page read and write
|
|
|
|
12F65000000
|
unkown
|
page read and write
|
|
|
|
7FF50F9F0000
|
unkown image
|
page readonly
|
|
|
|
12F64BA5000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7FF5BEC09000
|
unkown image
|
page readonly
|
|
|
|
3F9000
|
unkown image
|
page readonly
|
|
|
|
BAF000
|
stack
|
page read and write
|
|
|
|
7FF5BECAA000
|
unkown image
|
page readonly
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
7FF54AF2B000
|
unkown image
|
page readonly
|
|
|
|
1370000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEE01000
|
unkown image
|
page readonly
|
|
|
|
1F08CE7E000
|
unkown
|
page read and write
|
|
|
|
1FADEB02000
|
unkown
|
page read and write
|
|
|
|
1F08CE4A000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
85217FF000
|
stack
|
page read and write
|
|
|
|
1380000
|
unkown image
|
page readonly
|
|
|
|
3BF000
|
unkown image
|
page execute read
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
2345B9E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5076A1000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8F42000
|
unkown image
|
page readonly
|
|
|
|
4EEA57C000
|
stack
|
page read and write
|
|
|
|
5666CFE000
|
stack
|
page read and write
|
|
|
|
12F64266000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
18AAA210000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8F42000
|
unkown image
|
page readonly
|
|
|
|
7FF50FCBA000
|
unkown image
|
page readonly
|
|
|
|
12F64B86000
|
unkown
|
page read and write
|
|
|
|
7DF4D6E00000
|
unkown image
|
page readonly
|
|
|
|
7FF4FDF27000
|
unkown image
|
page readonly
|
|
|
|
12F6425E000
|
unkown
|
page read and write
|
|
|
|
7FF524253000
|
unkown image
|
page readonly
|
|
|
|
1F08CCB0000
|
heap private
|
page read and write
|
|
|
|
1FADE730000
|
unkown
|
page read and write
|
|
|
|
18AAA2AC000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
186F0000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
18AAA2A9000
|
unkown
|
page read and write
|
|
|
|
7FF4FDE46000
|
unkown image
|
page readonly
|
|
|
|
12F64BA6000
|
unkown
|
page read and write
|
|
|
|
7DF555510000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEBD3000
|
unkown image
|
page readonly
|
|
|
|
3B1000
|
unkown image
|
page execute read
|
|
|
|
7E80000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
B21000
|
heap default
|
page read and write
|
|
|
|
7FF5CF0D6000
|
unkown image
|
page readonly
|
|
|
|
2345B700000
|
unkown image
|
page read and write
|
|
|
|
9C927F000
|
stack
|
page read and write
|
|
|
|
12F646D0000
|
unkown image
|
page readonly
|
|
|
|
1FAD926C000
|
unkown
|
page read and write
|
|
|
|
18AAA0A0000
|
unkown image
|
page readonly
|
|
|
|
C60000
|
unkown image
|
page readonly
|
|
|
|
7FF50FA8F000
|
unkown image
|
page readonly
|
|
|
|
3F9000
|
unkown image
|
page readonly
|
|
|
|
7FF50FBF3000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD64E000
|
unkown image
|
page readonly
|
|
|
|
1FADE630000
|
unkown
|
page read and write
|
|
|
|
1FAD9287000
|
unkown
|
page read and write
|
|
|
|
9C80000
|
unkown
|
page read and write
|
|
|
|
7FF524150000
|
unkown image
|
page readonly
|
|
|
|
46680FF000
|
stack
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
1FAD9400000
|
unkown image
|
page readonly
|
|
|
|
B73000
|
unkown
|
page read and write
|
|
|
|
15868056000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1F08CE00000
|
unkown
|
page read and write
|
|
|
|
1491000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
4667FFF000
|
stack
|
page read and write
|
|
|
|
5E4000
|
unkown
|
page read and write
|
|
|
|
7DF52E100000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF154000
|
unkown image
|
page readonly
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
7480000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown image
|
page write copy
|
|
|
|
1820000
|
unkown
|
page read and write
|
|
|
|
7FF50FC26000
|
unkown image
|
page readonly
|
|
|
|
B93000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
910000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
7FF50FCE7000
|
unkown image
|
page readonly
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
23D3EB08000
|
unkown
|
page read and write
|
|
|
|
3C3000
|
unkown image
|
page execute read
|
|
|
|
1FAD92B5000
|
unkown
|
page read and write
|
|
|
|
7FF50794D000
|
unkown image
|
page readonly
|
|
|
|
7F9E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEED4000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
3BD000
|
unkown image
|
page execute read
|
|
|
|
7FF5CF197000
|
unkown image
|
page readonly
|
|
|
|
1FAD9B13000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1FADE860000
|
unkown
|
page read and write
|
|
|
|
3BF000
|
unkown image
|
page execute read
|
|
|
|
7FF524336000
|
unkown image
|
page readonly
|
|
|
|
7FF50FB65000
|
unkown image
|
page readonly
|
|
|
|
7FF524333000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1F08CE02000
|
unkown
|
page read and write
|
|
|
|
12F64BCD000
|
unkown
|
page read and write
|
|
|
|
960000
|
heap default
|
page read and write
|
|
|
|
7FF54B6A7000
|
unkown image
|
page readonly
|
|
|
|
760000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF5BE8CF000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1FAD9C01000
|
unkown
|
page read and write
|
|
|
|
780000
|
heap default
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
12F64BB1000
|
unkown
|
page read and write
|
|
|
|
9C97FC000
|
stack
|
page read and write
|
|
|
|
7DF4C6B80000
|
unkown image
|
page readonly
|
|
|
|
2345BD10000
|
unkown image
|
page readonly
|
|
|
|
3CC000
|
unkown image
|
page readonly
|
|
|
|
7FF5BECC3000
|
unkown image
|
page readonly
|
|
|
|
23D3EA13000
|
unkown
|
page read and write
|
|
|
|
7FF50FCA4000
|
unkown image
|
page readonly
|
|
|
|
1FADE760000
|
unkown
|
page read and write
|
|
|
|
7FF50FC97000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
23D3E7C0000
|
unkown image
|
page readonly
|
|
|
|
1FADE870000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
7FF5078B5000
|
unkown image
|
page readonly
|
|
|
|
1FADA590000
|
unkown
|
page read and write
|
|
|
|
3CD000
|
unkown image
|
page write copy
|
|
|
|
1FADEA18000
|
unkown
|
page read and write
|
|
|
|
3F3000
|
unkown image
|
page readonly
|
|
|
|
1FADEADE000
|
unkown
|
page read and write
|
|
|
|
15867E90000
|
unkown image
|
page read and write
|
|
|
|
2345B720000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
7FF4FDEEB000
|
unkown image
|
page readonly
|
|
|
|
12F64B5B000
|
unkown
|
page read and write
|
|
|
|
7FAA0000
|
unkown image
|
page readonly
|
|
|
|
1FADE890000
|
unkown
|
page read and write
|
|
|
|
23D3EE00000
|
unkown image
|
page readonly
|
|
|
|
2345B925000
|
unkown
|
page read and write
|
|
|
|
18AAA270000
|
heap default
|
page read and write
|
|
|
|
7FF5BE6E0000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
unkown image
|
page execute read
|
|
|
|
7FF524286000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
unkown image
|
page execute read
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
7FF54B663000
|
unkown image
|
page readonly
|
|
|
|
8A4000
|
unkown
|
page read and write
|
|
|
|
7FF5CF157000
|
unkown image
|
page readonly
|
|
|
|
3C3000
|
unkown image
|
page execute read
|
|
|
|
1FADE850000
|
unkown
|
page read and write
|
|
|
|
17CF0000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
CD9000
|
unkown
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
3ED000
|
unkown image
|
page write copy
|
|
|
|
15868580000
|
unkown image
|
page readonly
|
|
|
|
7FF50FCE7000
|
unkown image
|
page readonly
|
|
|
|
7F9D0000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7DF5117D2000
|
unkown image
|
page readonly
|
|
|
|
46684FA000
|
stack
|
page read and write
|
|
|
|
2345BAF5000
|
heap private
|
page read and write
|
|
|
|
7FF5CF197000
|
unkown image
|
page readonly
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
7DF507CC0000
|
unkown image
|
page readonly
|
|
|
|
1FADEA21000
|
unkown
|
page read and write
|
|
|
|
7FF524347000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF0A3000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
12F642C5000
|
unkown
|
page read and write
|
|
|
|
7DF5117E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5077CA000
|
unkown image
|
page readonly
|
|
|
|
87A000
|
heap default
|
page read and write
|
|
|
|
7FF5079E7000
|
unkown image
|
page readonly
|
|
|
|
1FAD9B59000
|
unkown
|
page read and write
|
|
|
|
7DF5554F2000
|
unkown image
|
page readonly
|
|
|
|
15867EA0000
|
heap private
|
page read and write
|
|
|
|
7FF5CEFA5000
|
unkown image
|
page readonly
|
|
|
|
2345B94D000
|
unkown
|
page read and write
|
|
|
|
7FF5CF0E9000
|
unkown image
|
page readonly
|
|
|
|
1FADA1E0000
|
unkown image
|
page readonly
|
|
|
|
1F08CE4C000
|
unkown
|
page read and write
|
|
|
|
12F64B99000
|
unkown
|
page read and write
|
|
|
|
15EF0000
|
unkown
|
page read and write
|
|
|
|
1FADEA4A000
|
unkown
|
page read and write
|
|
|
|
7DF52E0F2000
|
unkown image
|
page readonly
|
|
|
|
1FADA1D0000
|
unkown image
|
page readonly
|
|
|
|
1586804A000
|
unkown
|
page read and write
|
|
|
|
7F782000
|
unkown image
|
page readonly
|
|
|
|
7FF5BED58000
|
unkown image
|
page readonly
|
|
|
|
12F642E6000
|
unkown
|
page read and write
|
|
|
|
E60000
|
unkown image
|
page readonly
|
|
|
|
B62000
|
unkown
|
page read and write
|
|
|
|
670000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8F30000
|
unkown image
|
page readonly
|
|
|
|
18AAA2AB000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7DF507CE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5BE8C8000
|
unkown image
|
page readonly
|
|
|
|
7FF50FA8C000
|
unkown image
|
page readonly
|
|
|
|
1FAD9256000
|
unkown
|
page read and write
|
|
|
|
12F64B4A000
|
unkown
|
page read and write
|
|
|
|
4EEA67F000
|
stack
|
page read and write
|
|
|
|
3BD000
|
unkown image
|
page execute read
|
|
|
|
8BE000
|
stack
|
page read and write
|
|
|
|
2BA0000
|
unkown
|
page read and write
|
|
|
|
12F64268000
|
unkown
|
page read and write
|
|
|
|
23D3E8F0000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
46682FF000
|
stack
|
page read and write
|
|
|
|
12F64B93000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown image
|
page execute read
|
|
|
|
23D3EA46000
|
unkown
|
page read and write
|
|
|
|
7FF5BEBD8000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEDF9000
|
unkown image
|
page readonly
|
|
|
|
12F64264000
|
unkown
|
page read and write
|
|
|
|
48D000
|
unkown
|
page read and write
|
|
|
|
18AAA2B0000
|
unkown
|
page read and write
|
|
|
|
18AAA2B0000
|
unkown
|
page read and write
|
|
|
|
12F64B46000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
5666BFF000
|
stack
|
page read and write
|
|
|
|
7FF54B69D000
|
unkown image
|
page readonly
|
|
|
|
7FF54B757000
|
unkown image
|
page readonly
|
|
|
|
7FF52428D000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF5CF0B6000
|
unkown image
|
page readonly
|
|
|
|
23D3F002000
|
unkown
|
page read and write
|
|
|
|
107E000
|
stack
|
page read and write
|
|
|
|
2771000
|
unkown
|
page read and write
|
|
|
|
7FF5BECB7000
|
unkown image
|
page readonly
|
|
|
|
852135A000
|
unkown
|
page read and write
|
|
|
|
7FF524347000
|
unkown image
|
page readonly
|
|
|
|
7B4000
|
unkown
|
page read and write
|
|
|
|
23D3EB13000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
2345C090000
|
unkown image
|
page readonly
|
|
|
|
3CC000
|
unkown image
|
page readonly
|
|
|
|
18AAA1B0000
|
unkown
|
page read and write
|
|
|
|
12F64B76000
|
unkown
|
page read and write
|
|
|
|
7DF507CE0000
|
unkown image
|
page readonly
|
|
|
|
7FF507976000
|
unkown image
|
page readonly
|
|
|
|
7F2B2000
|
unkown image
|
page readonly
|
|
|
|
7FBB2000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
7FF5BED51000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
12F64B8D000
|
unkown
|
page read and write
|
|
|
|
7FF4FDD68000
|
unkown image
|
page readonly
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
3CC000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
9C96FD000
|
stack
|
page read and write
|
|
|
|
2345C6D0000
|
unkown
|
page read and write
|
|
|
|
1FADEA2F000
|
unkown
|
page read and write
|
|
|
|
7FF524272000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEF17000
|
unkown image
|
page readonly
|
|
|
|
1FAD9B00000
|
unkown
|
page read and write
|
|
|
|
7F9C2000
|
unkown image
|
page readonly
|
|
|
|
C20000
|
stack
|
page read and write
|
|
|
|
12F64263000
|
unkown
|
page read and write
|
|
|
|
7FF50FAD6000
|
unkown image
|
page readonly
|
|
|
|
7FF54B704000
|
unkown image
|
page readonly
|
|
|
|
1FAD9B18000
|
unkown
|
page read and write
|
|
|
|
7FF4FD7A1000
|
unkown image
|
page readonly
|
|
|
|
770000
|
unkown
|
page execute and read and write
|
|
|
|
3ED000
|
unkown image
|
page write copy
|
|
|
|
7B4000
|
unkown
|
page read and write
|
|
|
|
12F642F6000
|
unkown
|
page read and write
|
|
|
|
7FF5BEAAA000
|
unkown image
|
page readonly
|
|
|
|
6FC000
|
unkown
|
page read and write
|
|
|
|
12F644D0000
|
unkown image
|
page readonly
|
|
|
|
3F3000
|
unkown image
|
page readonly
|
|
|
|
12F64150000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF0BA000
|
unkown image
|
page readonly
|
|
|
|
7DF417950000
|
unkown image
|
page readonly
|
|
|
|
870000
|
heap default
|
page read and write
|
|
|
|
7FF4FDF27000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1FAD9289000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
12F64B11000
|
unkown
|
page read and write
|
|
|
|
7FF50FAF0000
|
unkown image
|
page readonly
|
|
|
|
7FF54B757000
|
unkown image
|
page readonly
|
|
|
|
46683FF000
|
stack
|
page read and write
|
|
|
|
7DF5C8CB0000
|
unkown image
|
page readonly
|
|
|
|
1FADA220000
|
unkown image
|
page readonly
|
|
|
|
7DF507CC0000
|
unkown image
|
page readonly
|
|
|
|
2CFC000
|
stack
|
page read and write
|
|
|
|
7FF5BECBF000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
3C9000
|
unkown image
|
page readonly
|
|
|
|
7FF54B665000
|
unkown image
|
page readonly
|
|
|
|
3F3000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF0E7000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF4FDE1F000
|
unkown image
|
page readonly
|
|
|
|
7CA000
|
unkown
|
page read and write
|
|
|
|
4667F7E000
|
stack
|
page read and write
|
|
|
|
1FAD9060000
|
unkown image
|
page read and write
|
|
|
|
2345BAC0000
|
unkown
|
page read and write
|
|
|
|
7FF5BEE04000
|
unkown image
|
page readonly
|
|
|
|
7F2C0000
|
unkown image
|
page readonly
|
|
|
|
1FADA010000
|
unkown image
|
page read and write
|
|
|
|
7FF4FDE66000
|
unkown image
|
page readonly
|
|
|
|
7FBC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5077F7000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
23D3EA4B000
|
unkown
|
page read and write
|
|
|
|
7FF507987000
|
unkown image
|
page readonly
|
|
|
|
7FF50793F000
|
unkown image
|
page readonly
|
|
|
|
7FF54B66E000
|
unkown image
|
page readonly
|
|
|
|
1FADE738000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown image
|
page write copy
|
|
|
|
7DF5C8CB2000
|
unkown image
|
page readonly
|
|
|
|
7DF555502000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
9C8B9B000
|
unkown
|
page read and write
|
|
|
|
7FF50FBFD000
|
unkown image
|
page readonly
|
|
|
|
18AAA29B000
|
unkown
|
page read and write
|
|
|
|
7FF52425D000
|
unkown image
|
page readonly
|
|
|
|
3C3000
|
unkown image
|
page execute read
|
|
|
|
B93000
|
unkown
|
page read and write
|
|
|
|
18AAA2B0000
|
unkown
|
page read and write
|
|
|
|
12F64B5D000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1FADA000000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown image
|
page execute read
|
|
|
|
7FF50F3A1000
|
unkown image
|
page readonly
|
|
|
|
9C8E7E000
|
stack
|
page read and write
|
|
|
|
7DF555500000
|
unkown image
|
page readonly
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7DF507CD0000
|
unkown image
|
page readonly
|
|
|
|
12F6425A000
|
unkown
|
page read and write
|
|
|
|
348F000
|
stack
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1FAD9315000
|
unkown
|
page read and write
|
|
|
|
4EEA1FB000
|
stack
|
page read and write
|
|
|
|
7F782000
|
unkown image
|
page readonly
|
|
|
|
7FF524107000
|
unkown image
|
page readonly
|
|
|
|
3C9000
|
unkown image
|
page readonly
|
|
|
|
56666FE000
|
stack
|
page read and write
|
|
|
|
C9F8A9C000
|
unkown
|
page read and write
|
|
|
|
7FF5BEEC7000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1FAD9254000
|
unkown
|
page read and write
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
1E3C000
|
stack
|
page read and write
|
|
|
|
12F65002000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
heap default
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown image
|
page readonly
|
|
|
|
7FF524307000
|
unkown image
|
page readonly
|
|
|
|
7FF50F579000
|
unkown image
|
page readonly
|
|
|
|
7FF5BE6F7000
|
unkown image
|
page readonly
|
|
|
|
12F64BCD000
|
unkown
|
page read and write
|
|
|
|
7DF519A90000
|
unkown image
|
page readonly
|
|
|
|
11F0000
|
unkown image
|
page readonly
|
|
|
|
2345BB00000
|
unkown
|
page read and write
|
|
|
|
1586803C000
|
unkown
|
page read and write
|
|
|
|
4EEA377000
|
stack
|
page read and write
|
|
|
|
15868029000
|
unkown
|
page read and write
|
|
|
|
12F64B91000
|
unkown
|
page read and write
|
|
|
|
C20000
|
stack
|
page read and write
|
|
|
|
12F642DD000
|
unkown
|
page read and write
|
|
|
|
3CD000
|
unkown image
|
page write copy
|
|
|
|
7FF50F9B5000
|
unkown image
|
page readonly
|
|
|
|
96A000
|
heap default
|
page read and write
|
|
|
|
7FF5BECE7000
|
unkown image
|
page readonly
|
|
|
|
12F64B5C000
|
unkown
|
page read and write
|
|
|
|
7DF5C8CD0000
|
unkown image
|
page readonly
|
|
|
|
7DF555510000
|
unkown image
|
page readonly
|
|
|
|
1490000
|
unkown
|
page execute and read and write
|
|
|
|
1FADEAFA000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown image
|
page readonly
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
7FF54B701000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
1FADE754000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
2345C670000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
3CD000
|
unkown image
|
page write copy
|
|
|
|
7FF5BEDE7000
|
unkown image
|
page readonly
|
|
|
|
860000
|
unkown
|
page readonly
|
|
|
|
12F642A6000
|
unkown
|
page read and write
|
|
|
|
23D3EA2A000
|
unkown
|
page read and write
|
|
|
|
2823000
|
unkown
|
page read and write
|
|
|
|
7FF50FBE1000
|
unkown image
|
page readonly
|
|
|
|
7FF5BEDF4000
|
unkown image
|
page readonly
|
|
|
|
12F642BE000
|
unkown
|
page read and write
|
|
|
|
7FF50FCA7000
|
unkown image
|
page readonly
|
|
|
|
7DF519A92000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF183000
|
unkown image
|
page readonly
|
|
|
|
7FF5079FB000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
3F9000
|
unkown image
|
page readonly
|
|
|
|
7FF507807000
|
unkown image
|
page readonly
|
|
|
|
2345B94F000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1FADA571000
|
unkown
|
page read and write
|
|
|
|
7FF50FAA7000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF507A0A000
|
unkown image
|
page readonly
|
|
|
|
1FADE890000
|
unkown
|
page read and write
|
|
|
|
A6F000
|
stack
|
page read and write
|
|
|
|
7FF50FC91000
|
unkown image
|
page readonly
|
|
|
|
12F64229000
|
unkown
|
page read and write
|
|
|
|
491000
|
unkown
|
page read and write
|
|
|
|
CDA000
|
unkown
|
page read and write
|
|
|
|
B73000
|
unkown
|
page read and write
|
|
|
|
1FAD9B18000
|
unkown
|
page read and write
|
|
|
|
7FF5BEA72000
|
unkown image
|
page readonly
|
|
|
|
12F6503C000
|
unkown
|
page read and write
|
|
|
|
730000
|
unkown image
|
page readonly
|
|
|
|
1FADE73E000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
3F9000
|
unkown image
|
page readonly
|
|
|
|
7FF4FD643000
|
unkown image
|
page readonly
|
|
|
|
784000
|
unkown
|
page read and write
|
|
|
|
7FF5BEECD000
|
unkown image
|
page readonly
|
|
|
|
CE4000
|
unkown
|
page read and write
|
|
|
|
7FF5BED81000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page read and write
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF5075CC000
|
unkown image
|
page readonly
|
|
|
|
1FADE880000
|
unkown
|
page read and write
|
|
|
|
7FF524342000
|
unkown image
|
page readonly
|
|
|
|
1821000
|
unkown
|
page read and write
|
|
|
|
7FF5BEB93000
|
unkown image
|
page readonly
|
|
|
|
2345B740000
|
unkown image
|
page readonly
|
|
|
|
12F64B6B000
|
unkown
|
page read and write
|
|
|
|
12F65003000
|
unkown
|
page read and write
|
|
|
|
7FF50797D000
|
unkown image
|
page readonly
|
|
|
|
7FF523EDC000
|
unkown image
|
page readonly
|
|
|
|
7B4000
|
unkown
|
page read and write
|
|
|
|
1FADE751000
|
unkown
|
page read and write
|
|
|
|
7F1A0000
|
unkown image
|
page readonly
|
|
|
|
950000
|
unkown
|
page readonly
|
|
|
|
7FF5BEEC1000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF147000
|
unkown image
|
page readonly
|
|
|
|
12F64BA5000
|
unkown
|
page read and write
|
|
|
|
7DF555502000
|
unkown image
|
page readonly
|
|
|
|
1FAD9070000
|
heap private
|
page read and write
|
|
|
|
12F641F0000
|
unkown image
|
page readonly
|
|
There are 1423 hidden memdumps, click here to show them.