Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
sample20211025-01.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Create Time/Date: Mon Oct
25 08:52:46 2021, Last Saved Time/Date: Mon Oct 25 08:52:48 2021, Security: 0, Author: DHL eCommerce
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\D996E009-EEFC-4DD9-8747-5D20986EEBA9
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://roaming.edog.
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://api.aadrm.com
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://api.addins.store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://outlook.office365.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
q6<
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
r6<
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSForms
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSComctlLib
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
RemoteClearDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
|
Last
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\1FE51
|
1FE51
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
FilePath
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
StartDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
EndDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Properties
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Url
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
LastClean
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableWinHttpCertAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableIsOwnerRegex
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableSessionAwareHttpClose
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALForExtendedApps
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALSetSilentAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableGuestCredProvider
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableOstringReplace
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
(?<
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTime
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
m*-
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2E234
|
2E234
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
~.-
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\34D07
|
34D07
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\358BA
|
358BA
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
There are 82 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
20720AA0000
|
unkown image
|
page readonly
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
7FF5ABD0F000
|
unkown image
|
page readonly
|
|
|
|
7FF53FE5E000
|
unkown image
|
page readonly
|
|
|
|
22405980000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1929000
|
unkown image
|
page readonly
|
|
|
|
7FF58A23B000
|
unkown image
|
page readonly
|
|
|
|
587E57F000
|
stack
|
page read and write
|
|
|
|
2407C860000
|
unkown image
|
page readonly
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
7FF56DBA1000
|
unkown image
|
page readonly
|
|
|
|
7DF59B330000
|
unkown image
|
page readonly
|
|
|
|
36D63DF000
|
stack
|
page read and write
|
|
|
|
7FF5C192D000
|
unkown image
|
page readonly
|
|
|
|
12143B50000
|
unkown
|
page read and write
|
|
|
|
7DF59B320000
|
unkown image
|
page readonly
|
|
|
|
7FF56BE14000
|
unkown image
|
page readonly
|
|
|
|
7FF53FE3F000
|
unkown image
|
page readonly
|
|
|
|
1EDA0750000
|
unkown image
|
page readonly
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
7FF5E3069000
|
unkown image
|
page readonly
|
|
|
|
7FF58A4BA000
|
unkown image
|
page readonly
|
|
|
|
3AEFA7B000
|
stack
|
page read and write
|
|
|
|
7FF55D725000
|
unkown image
|
page readonly
|
|
|
|
7FF56BC37000
|
unkown image
|
page readonly
|
|
|
|
165EE040000
|
unkown image
|
page readonly
|
|
|
|
1EE4BC6F000
|
unkown
|
page read and write
|
|
|
|
1B4E0274000
|
unkown
|
page read and write
|
|
|
|
7FF56C007000
|
unkown image
|
page readonly
|
|
|
|
20720D90000
|
unkown
|
page read and write
|
|
|
|
7DF57B820000
|
unkown image
|
page readonly
|
|
|
|
7FF58D63D000
|
unkown image
|
page readonly
|
|
|
|
20720320000
|
heap default
|
page read and write
|
|
|
|
4E5CA7D000
|
stack
|
page read and write
|
|
|
|
20720D59000
|
unkown
|
page read and write
|
|
|
|
1EDA0856000
|
unkown
|
page read and write
|
|
|
|
20720400000
|
unkown
|
page read and write
|
|
|
|
7DF59B322000
|
unkown image
|
page readonly
|
|
|
|
7FF57C663000
|
unkown image
|
page readonly
|
|
|
|
7DF56B530000
|
unkown image
|
page readonly
|
|
|
|
20720DA4000
|
unkown
|
page read and write
|
|
|
|
7DF56B540000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1A11000
|
unkown image
|
page readonly
|
|
|
|
7FF58A48B000
|
unkown image
|
page readonly
|
|
|
|
20721363000
|
unkown
|
page read and write
|
|
|
|
7FF5E375F000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3469000
|
unkown image
|
page readonly
|
|
|
|
7FF57C64D000
|
unkown image
|
page readonly
|
|
|
|
7FF58D699000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1904000
|
unkown image
|
page readonly
|
|
|
|
1EE4BC02000
|
unkown
|
page read and write
|
|
|
|
7FF5AB8E1000
|
unkown image
|
page readonly
|
|
|
|
7FF56DB2D000
|
unkown image
|
page readonly
|
|
|
|
7DF55B022000
|
unkown image
|
page readonly
|
|
|
|
165EE190000
|
unkown
|
page read and write
|
|
|
|
1AF55CAF000
|
unkown
|
page read and write
|
|
|
|
7FF54D32D000
|
unkown image
|
page readonly
|
|
|
|
7FF53FD85000
|
unkown image
|
page readonly
|
|
|
|
20FF7A00000
|
unkown
|
page read and write
|
|
|
|
7FF58D3BB000
|
unkown image
|
page readonly
|
|
|
|
165EE780000
|
unkown image
|
page readonly
|
|
|
|
1B4E023A000
|
unkown
|
page read and write
|
|
|
|
7FF58D61E000
|
unkown image
|
page readonly
|
|
|
|
7FF53FE83000
|
unkown image
|
page readonly
|
|
|
|
1EE4BC58000
|
unkown
|
page read and write
|
|
|
|
52766FF000
|
stack
|
page read and write
|
|
|
|
AB3DBFB000
|
stack
|
page read and write
|
|
|
|
7FF5ABDE4000
|
unkown image
|
page readonly
|
|
|
|
7FF58A460000
|
unkown image
|
page readonly
|
|
|
|
207204BE000
|
unkown
|
page read and write
|
|
|
|
16AFF78000
|
stack
|
page read and write
|
|
|
|
7FF55D6DF000
|
unkown image
|
page readonly
|
|
|
|
7FF55D7F7000
|
unkown image
|
page readonly
|
|
|
|
7FF57C4C6000
|
unkown image
|
page readonly
|
|
|
|
7FF56DB2A000
|
unkown image
|
page readonly
|
|
|
|
7FF53F571000
|
unkown image
|
page readonly
|
|
|
|
7FF56BBB1000
|
unkown image
|
page readonly
|
|
|
|
1B4E0400000
|
unkown image
|
page readonly
|
|
|
|
7FF58D5D3000
|
unkown image
|
page readonly
|
|
|
|
12143C5C000
|
unkown
|
page read and write
|
|
|
|
7FF55D69D000
|
unkown image
|
page readonly
|
|
|
|
1EC7BCD0000
|
unkown image
|
page readonly
|
|
|
|
20FF5E13000
|
unkown
|
page read and write
|
|
|
|
7FF56B79F000
|
unkown image
|
page readonly
|
|
|
|
7FF56DBA5000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABBB1000
|
unkown image
|
page readonly
|
|
|
|
7FF5E2F3B000
|
unkown image
|
page readonly
|
|
|
|
21217180000
|
unkown image
|
page readonly
|
|
|
|
7FF58D3A4000
|
unkown image
|
page readonly
|
|
|
|
7DF5B9A62000
|
unkown image
|
page readonly
|
|
|
|
7FF56DAC6000
|
unkown image
|
page readonly
|
|
|
|
20720D9B000
|
unkown
|
page read and write
|
|
|
|
20720D98000
|
unkown
|
page read and write
|
|
|
|
AB3D79C000
|
unkown
|
page read and write
|
|
|
|
7FF57C4F3000
|
unkown image
|
page readonly
|
|
|
|
20720D55000
|
unkown
|
page read and write
|
|
|
|
20720D6D000
|
unkown
|
page read and write
|
|
|
|
1EDA0740000
|
heap default
|
page read and write
|
|
|
|
7DF5F14E2000
|
unkown image
|
page readonly
|
|
|
|
7FF56BFD9000
|
unkown image
|
page readonly
|
|
|
|
7FF5361A1000
|
unkown image
|
page readonly
|
|
|
|
20FF6390000
|
unkown image
|
page readonly
|
|
|
|
16AFAF7000
|
stack
|
page read and write
|
|
|
|
527627B000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5F8000
|
unkown image
|
page readonly
|
|
|
|
7FF58D5F7000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABC0F000
|
unkown image
|
page readonly
|
|
|
|
7FF53622D000
|
unkown image
|
page readonly
|
|
|
|
7DF5B9A70000
|
unkown image
|
page readonly
|
|
|
|
7FF5E37CE000
|
unkown image
|
page readonly
|
|
|
|
21216CBA000
|
unkown
|
page read and write
|
|
|
|
16AFBFE000
|
stack
|
page read and write
|
|
|
|
7DF57B820000
|
unkown image
|
page readonly
|
|
|
|
7FF56BEE7000
|
unkown image
|
page readonly
|
|
|
|
7FF56BE2F000
|
unkown image
|
page readonly
|
|
|
|
20FF5DB0000
|
unkown
|
page read and write
|
|
|
|
1B4E026B000
|
unkown
|
page read and write
|
|
|
|
7FF5E35EB000
|
unkown image
|
page readonly
|
|
|
|
16B007D000
|
stack
|
page read and write
|
|
|
|
7DF56B532000
|
unkown image
|
page readonly
|
|
|
|
21216BE0000
|
unkown
|
page read and write
|
|
|
|
36D677F000
|
stack
|
page read and write
|
|
|
|
4E5CB7C000
|
stack
|
page read and write
|
|
|
|
20720482000
|
unkown
|
page read and write
|
|
|
|
A18CF7F000
|
stack
|
page read and write
|
|
|
|
7FF5ABC55000
|
unkown image
|
page readonly
|
|
|
|
AB3DFFC000
|
stack
|
page read and write
|
|
|
|
20FF5DE0000
|
unkown
|
page read and write
|
|
|
|
7FF5ABD77000
|
unkown image
|
page readonly
|
|
|
|
7FF56C0A9000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABDF1000
|
unkown image
|
page readonly
|
|
|
|
7FF56D226000
|
unkown image
|
page readonly
|
|
|
|
7FF54CA7F000
|
unkown image
|
page readonly
|
|
|
|
7FF57BE11000
|
unkown image
|
page readonly
|
|
|
|
7DF57B810000
|
unkown image
|
page readonly
|
|
|
|
7FF56B717000
|
unkown image
|
page readonly
|
|
|
|
7DF5F14F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABC6C000
|
unkown image
|
page readonly
|
|
|
|
7FF5E37E7000
|
unkown image
|
page readonly
|
|
|
|
7DF54DBA0000
|
unkown image
|
page readonly
|
|
|
|
1B4E0267000
|
unkown
|
page read and write
|
|
|
|
7FF54D303000
|
unkown image
|
page readonly
|
|
|
|
1B4E0275000
|
unkown
|
page read and write
|
|
|
|
7FF58D481000
|
unkown image
|
page readonly
|
|
|
|
20721220000
|
unkown
|
page read and write
|
|
|
|
7FF56C0CA000
|
unkown image
|
page readonly
|
|
|
|
1EE4C180000
|
unkown image
|
page readonly
|
|
|
|
1EDA06E0000
|
heap private
|
page read and write
|
|
|
|
1B4E0802000
|
unkown
|
page read and write
|
|
|
|
7FF58A423000
|
unkown image
|
page readonly
|
|
|
|
1EDA0900000
|
unkown
|
page read and write
|
|
|
|
7FF5C16E0000
|
unkown image
|
page readonly
|
|
|
|
587EAFF000
|
stack
|
page read and write
|
|
|
|
7FF5E3842000
|
unkown image
|
page readonly
|
|
|
|
1AF55DC0000
|
unkown image
|
page readonly
|
|
|
|
7DF55B022000
|
unkown image
|
page readonly
|
|
|
|
7FF559AC1000
|
unkown image
|
page readonly
|
|
|
|
20FF5E58000
|
unkown
|
page read and write
|
|
|
|
7FF58A4B7000
|
unkown image
|
page readonly
|
|
|
|
224051C0000
|
heap private
|
page read and write
|
|
|
|
7DF54DB92000
|
unkown image
|
page readonly
|
|
|
|
7FF55D7F3000
|
unkown image
|
page readonly
|
|
|
|
7DF59B340000
|
unkown image
|
page readonly
|
|
|
|
7DF54DB90000
|
unkown image
|
page readonly
|
|
|
|
7DF5F14E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABE01000
|
unkown image
|
page readonly
|
|
|
|
7FF535E6D000
|
unkown image
|
page readonly
|
|
|
|
121440C0000
|
unkown image
|
page readonly
|
|
|
|
1B4E0040000
|
heap default
|
page read and write
|
|
|
|
20720D9E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3871000
|
unkown image
|
page readonly
|
|
|
|
7FF53626B000
|
unkown image
|
page readonly
|
|
|
|
7DF56B550000
|
unkown image
|
page readonly
|
|
|
|
20720D9B000
|
unkown
|
page read and write
|
|
|
|
7DF5981B0000
|
unkown image
|
page readonly
|
|
|
|
7FF56BFF3000
|
unkown image
|
page readonly
|
|
|
|
7DF58A3C0000
|
unkown image
|
page readonly
|
|
|
|
3AF017F000
|
stack
|
page read and write
|
|
|
|
1AF55B50000
|
unkown image
|
page readonly
|
|
|
|
3AEFC7D000
|
stack
|
page read and write
|
|
|
|
7FF58D63A000
|
unkown image
|
page readonly
|
|
|
|
7FF5E36EC000
|
unkown image
|
page readonly
|
|
|
|
1EC7B8E0000
|
unkown image
|
page readonly
|
|
|
|
CF8FFF7000
|
stack
|
page read and write
|
|
|
|
7FF5ABD7D000
|
unkown image
|
page readonly
|
|
|
|
20720810000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF690000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1A21000
|
unkown image
|
page readonly
|
|
|
|
12143C18000
|
heap default
|
page read and write
|
|
|
|
75AFBFE000
|
stack
|
page read and write
|
|
|
|
21217202000
|
unkown
|
page read and write
|
|
|
|
7FF57C3C5000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB8E7000
|
unkown image
|
page readonly
|
|
|
|
7FF53631A000
|
unkown image
|
page readonly
|
|
|
|
20FF5E3D000
|
unkown
|
page read and write
|
|
|
|
7DF5981A2000
|
unkown image
|
page readonly
|
|
|
|
7DF5B9A62000
|
unkown image
|
page readonly
|
|
|
|
7FF5E360F000
|
unkown image
|
page readonly
|
|
|
|
12143C5C000
|
unkown
|
page read and write
|
|
|
|
1EE4BD13000
|
unkown
|
page read and write
|
|
|
|
12143B70000
|
unkown
|
page read and write
|
|
|
|
7FF55D7DF000
|
unkown image
|
page readonly
|
|
|
|
7FF54D2BD000
|
unkown image
|
page readonly
|
|
|
|
1EE4C190000
|
unkown
|
page read and write
|
|
|
|
1AF55CB0000
|
unkown
|
page read and write
|
|
|
|
7DF543F92000
|
unkown image
|
page readonly
|
|
|
|
20FF5E7C000
|
unkown
|
page read and write
|
|
|
|
2240548C000
|
unkown
|
page read and write
|
|
|
|
7FF5C1A0A000
|
unkown image
|
page readonly
|
|
|
|
7DF488270000
|
unkown image
|
page readonly
|
|
|
|
1EC7BA70000
|
unkown
|
page read and write
|
|
|
|
7FF56BFE3000
|
unkown image
|
page readonly
|
|
|
|
21216D02000
|
unkown
|
page read and write
|
|
|
|
7FF56B8D2000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABD2E000
|
unkown image
|
page readonly
|
|
|
|
2407C150000
|
unkown image
|
page readonly
|
|
|
|
7FF5E386A000
|
unkown image
|
page readonly
|
|
|
|
7FF57C64F000
|
unkown image
|
page readonly
|
|
|
|
7FF58A498000
|
unkown image
|
page readonly
|
|
|
|
DCA78FC000
|
stack
|
page read and write
|
|
|
|
212171B0000
|
unkown image
|
page write copy
|
|
|
|
7FF58A3F1000
|
unkown image
|
page readonly
|
|
|
|
1EDA0902000
|
unkown
|
page read and write
|
|
|
|
7DF54DBB0000
|
unkown image
|
page readonly
|
|
|
|
7FF536224000
|
unkown image
|
page readonly
|
|
|
|
21216B00000
|
unkown image
|
page readonly
|
|
|
|
7FF58A0A7000
|
unkown image
|
page readonly
|
|
|
|
7DF5981A0000
|
unkown image
|
page readonly
|
|
|
|
7FF55D807000
|
unkown image
|
page readonly
|
|
|
|
7DF57B830000
|
unkown image
|
page readonly
|
|
|
|
1EDA0870000
|
unkown
|
page read and write
|
|
|
|
7FF5ABDEA000
|
unkown image
|
page readonly
|
|
|
|
7DF54DBB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3861000
|
unkown image
|
page readonly
|
|
|
|
1EC7C202000
|
unkown
|
page read and write
|
|
|
|
7FF5C1A1A000
|
unkown image
|
page readonly
|
|
|
|
165EEA02000
|
unkown
|
page read and write
|
|
|
|
7FF54D30E000
|
unkown image
|
page readonly
|
|
|
|
20720451000
|
unkown
|
page read and write
|
|
|
|
12144726000
|
unkown
|
page read and write
|
|
|
|
20721302000
|
unkown
|
page read and write
|
|
|
|
7DF56B530000
|
unkown image
|
page readonly
|
|
|
|
1B4E0120000
|
unkown image
|
page readonly
|
|
|
|
7FF57C667000
|
unkown image
|
page readonly
|
|
|
|
7FF54D2C3000
|
unkown image
|
page readonly
|
|
|
|
165EE040000
|
unkown image
|
page readonly
|
|
|
|
7FF58D487000
|
unkown image
|
page readonly
|
|
|
|
7FF54D2D0000
|
unkown image
|
page readonly
|
|
|
|
1EE4BA10000
|
unkown image
|
page readonly
|
|
|
|
7FF56BFC7000
|
unkown image
|
page readonly
|
|
|
|
7FF54D2D3000
|
unkown image
|
page readonly
|
|
|
|
1EC7B8E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABD0D000
|
unkown image
|
page readonly
|
|
|
|
1EDA0720000
|
unkown image
|
page readonly
|
|
|
|
7FF58D5E3000
|
unkown image
|
page readonly
|
|
|
|
7FF56BF3C000
|
unkown image
|
page readonly
|
|
|
|
1EC7BA55000
|
unkown
|
page read and write
|
|
|
|
21216CCB000
|
unkown
|
page read and write
|
|
|
|
7FF56DB9A000
|
unkown image
|
page readonly
|
|
|
|
20FF6000000
|
unkown image
|
page readonly
|
|
|
|
7FF53FEAA000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABD7A000
|
unkown image
|
page readonly
|
|
|
|
7DF579D42000
|
unkown image
|
page readonly
|
|
|
|
7FF53FF09000
|
unkown image
|
page readonly
|
|
|
|
1EDA0829000
|
unkown
|
page read and write
|
|
|
|
7FF5ABD09000
|
unkown image
|
page readonly
|
|
|
|
7FF57C693000
|
unkown image
|
page readonly
|
|
|
|
1EE4BC13000
|
unkown
|
page read and write
|
|
|
|
75AF8F7000
|
stack
|
page read and write
|
|
|
|
7FF54D2BF000
|
unkown image
|
page readonly
|
|
|
|
7FF53FE27000
|
unkown image
|
page readonly
|
|
|
|
7FF53FBB5000
|
unkown image
|
page readonly
|
|
|
|
7FF58D6C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E33C3000
|
unkown image
|
page readonly
|
|
|
|
212169C0000
|
unkown image
|
page readonly
|
|
|
|
22405300000
|
unkown image
|
page readonly
|
|
|
|
12143BE0000
|
unkown
|
page read and write
|
|
|
|
7FF56DBB1000
|
unkown image
|
page readonly
|
|
|
|
1EC7BA4D000
|
unkown
|
page read and write
|
|
|
|
7DF5B9A72000
|
unkown image
|
page readonly
|
|
|
|
7DF54DB92000
|
unkown image
|
page readonly
|
|
|
|
1AF56100000
|
unkown image
|
page readonly
|
|
|
|
20720456000
|
unkown
|
page read and write
|
|
|
|
7FF5C1947000
|
unkown image
|
page readonly
|
|
|
|
1EC7B8C0000
|
unkown image
|
page read and write
|
|
|
|
AB3E07B000
|
stack
|
page read and write
|
|
|
|
212169B0000
|
heap private
|
page read and write
|
|
|
|
7FF55D555000
|
unkown image
|
page readonly
|
|
|
|
7FF55D7E3000
|
unkown image
|
page readonly
|
|
|
|
7DF55B020000
|
unkown image
|
page readonly
|
|
|
|
7FF56BC39000
|
unkown image
|
page readonly
|
|
|
|
75AF4FE000
|
stack
|
page read and write
|
|
|
|
7FF5E3854000
|
unkown image
|
page readonly
|
|
|
|
7FF536233000
|
unkown image
|
page readonly
|
|
|
|
1B4E0263000
|
unkown
|
page read and write
|
|
|
|
7FF5E3687000
|
unkown image
|
page readonly
|
|
|
|
22405A02000
|
unkown
|
page read and write
|
|
|
|
7FF53FE39000
|
unkown image
|
page readonly
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
7FF5E3682000
|
unkown image
|
page readonly
|
|
|
|
7FF5E37ED000
|
unkown image
|
page readonly
|
|
|
|
1EDA0CD0000
|
unkown image
|
page readonly
|
|
|
|
20720D98000
|
unkown
|
page read and write
|
|
|
|
7FF53FE43000
|
unkown image
|
page readonly
|
|
|
|
2407C120000
|
heap private
|
page read and write
|
|
|
|
7FF5C192F000
|
unkown image
|
page readonly
|
|
|
|
1B4E023D000
|
unkown
|
page read and write
|
|
|
|
1B4E0780000
|
unkown image
|
page readonly
|
|
|
|
AB3DE7E000
|
stack
|
page read and write
|
|
|
|
7FF5C1943000
|
unkown image
|
page readonly
|
|
|
|
7FF53624E000
|
unkown image
|
page readonly
|
|
|
|
587E0DB000
|
unkown
|
page read and write
|
|
|
|
7FF54D3A5000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3065000
|
unkown image
|
page readonly
|
|
|
|
7FF57C66E000
|
unkown image
|
page readonly
|
|
|
|
1EE4C000000
|
unkown image
|
page readonly
|
|
|
|
3AEFE7F000
|
stack
|
page read and write
|
|
|
|
7FF5E2F32000
|
unkown image
|
page readonly
|
|
|
|
CF8FC7E000
|
stack
|
page read and write
|
|
|
|
7DF44BA60000
|
unkown image
|
page readonly
|
|
|
|
7FF53FE3D000
|
unkown image
|
page readonly
|
|
|
|
7FF56C01B000
|
unkown image
|
page readonly
|
|
|
|
1EDA06F0000
|
unkown image
|
page readonly
|
|
|
|
20720D10000
|
unkown
|
page read and write
|
|
|
|
20720D7E000
|
unkown
|
page read and write
|
|
|
|
22405600000
|
unkown image
|
page readonly
|
|
|
|
CF901FF000
|
stack
|
page read and write
|
|
|
|
1EDA083C000
|
unkown
|
page read and write
|
|
|
|
7DF543F90000
|
unkown image
|
page readonly
|
|
|
|
165EE313000
|
unkown
|
page read and write
|
|
|
|
7FF536243000
|
unkown image
|
page readonly
|
|
|
|
7DF5981C0000
|
unkown image
|
page readonly
|
|
|
|
7FF58D6B1000
|
unkown image
|
page readonly
|
|
|
|
20FF5D70000
|
unkown image
|
page readonly
|
|
|
|
1EC7BA84000
|
unkown
|
page read and write
|
|
|
|
20720D00000
|
unkown
|
page read and write
|
|
|
|
7FF54D2D7000
|
unkown image
|
page readonly
|
|
|
|
7FF5E377D000
|
unkown image
|
page readonly
|
|
|
|
207204E3000
|
unkown
|
page read and write
|
|
|
|
22405800000
|
unkown image
|
page readonly
|
|
|
|
7DF4991F0000
|
unkown image
|
page readonly
|
|
|
|
21216C00000
|
unkown
|
page read and write
|
|
|
|
36D67FA000
|
stack
|
page read and write
|
|
|
|
7FF5E3623000
|
unkown image
|
page readonly
|
|
|
|
7FF58A44F000
|
unkown image
|
page readonly
|
|
|
|
1EDA0802000
|
unkown
|
page read and write
|
|
|
|
1B4E0232000
|
unkown
|
page read and write
|
|
|
|
7DF58A3A2000
|
unkown image
|
page readonly
|
|
|
|
22405400000
|
unkown
|
page read and write
|
|
|
|
20720D4A000
|
unkown
|
page read and write
|
|
|
|
1AF55DB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E362C000
|
unkown image
|
page readonly
|
|
|
|
7FF5361A5000
|
unkown image
|
page readonly
|
|
|
|
1B4E0241000
|
unkown
|
page read and write
|
|
|
|
7FF536321000
|
unkown image
|
page readonly
|
|
|
|
7FF56C0BA000
|
unkown image
|
page readonly
|
|
|
|
7DF59B322000
|
unkown image
|
page readonly
|
|
|
|
1EDA0710000
|
unkown image
|
page readonly
|
|
|
|
A18CD7E000
|
stack
|
page read and write
|
|
|
|
1EDA0913000
|
unkown
|
page read and write
|
|
|
|
1B4DFFF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABD27000
|
unkown image
|
page readonly
|
|
|
|
16AF3DC000
|
unkown
|
page read and write
|
|
|
|
7FF5C1940000
|
unkown image
|
page readonly
|
|
|
|
7FF55D6BB000
|
unkown image
|
page readonly
|
|
|
|
587E6FF000
|
stack
|
page read and write
|
|
|
|
7FF58D613000
|
unkown image
|
page readonly
|
|
|
|
20720600000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABBCD000
|
unkown image
|
page readonly
|
|
|
|
207204FA000
|
unkown
|
page read and write
|
|
|
|
7FF56BFDD000
|
unkown image
|
page readonly
|
|
|
|
7FF54D2C6000
|
unkown image
|
page readonly
|
|
|
|
2072045A000
|
unkown
|
page read and write
|
|
|
|
7FF56BDA2000
|
unkown image
|
page readonly
|
|
|
|
1EDA0813000
|
unkown
|
page read and write
|
|
|
|
7DF5CF680000
|
unkown image
|
page readonly
|
|
|
|
7FF56DAD3000
|
unkown image
|
page readonly
|
|
|
|
7DF55B020000
|
unkown image
|
page readonly
|
|
|
|
22405200000
|
unkown image
|
page readonly
|
|
|
|
7FF56D21A000
|
unkown image
|
page readonly
|
|
|
|
1EE4BE00000
|
unkown image
|
page readonly
|
|
|
|
1B4E024F000
|
unkown
|
page read and write
|
|
|
|
4E5C77F000
|
stack
|
page read and write
|
|
|
|
165EE278000
|
unkown
|
page read and write
|
|
|
|
1AF55C9F000
|
unkown
|
page read and write
|
|
|
|
7FF536247000
|
unkown image
|
page readonly
|
|
|
|
1AF55C81000
|
unkown
|
page read and write
|
|
|
|
7FF53FEAD000
|
unkown image
|
page readonly
|
|
|
|
7FF53FF31000
|
unkown image
|
page readonly
|
|
|
|
7FF56D94A000
|
unkown image
|
page readonly
|
|
|
|
1EC7B910000
|
unkown image
|
page readonly
|
|
|
|
2072043C000
|
unkown
|
page read and write
|
|
|
|
7FF58A467000
|
unkown image
|
page readonly
|
|
|
|
7FF55D84A000
|
unkown image
|
page readonly
|
|
|
|
1EC7B900000
|
unkown image
|
page readonly
|
|
|
|
7FF53FF1A000
|
unkown image
|
page readonly
|
|
|
|
7FF53FD9C000
|
unkown image
|
page readonly
|
|
|
|
1EDA0AD0000
|
unkown image
|
page readonly
|
|
|
|
1EE537D000
|
stack
|
page read and write
|
|
|
|
7FF536311000
|
unkown image
|
page readonly
|
|
|
|
7FF56D210000
|
unkown image
|
page readonly
|
|
|
|
7FF5C199D000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF6A0000
|
unkown image
|
page readonly
|
|
|
|
165EE200000
|
unkown
|
page read and write
|
|
|
|
7FF5360BF000
|
unkown image
|
page readonly
|
|
|
|
7FF56C04A000
|
unkown image
|
page readonly
|
|
|
|
20721300000
|
unkown
|
page read and write
|
|
|
|
224053F0000
|
unkown
|
page read and write
|
|
|
|
75AF7FF000
|
stack
|
page read and write
|
|
|
|
7FF5C1917000
|
unkown image
|
page readonly
|
|
|
|
587E5FC000
|
stack
|
page read and write
|
|
|
|
20721204000
|
unkown
|
page read and write
|
|
|
|
7FF56BDDB000
|
unkown image
|
page readonly
|
|
|
|
7DF543FA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C19F9000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABDD2000
|
unkown image
|
page readonly
|
|
|
|
7FF58A28E000
|
unkown image
|
page readonly
|
|
|
|
7FF57C653000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABD5E000
|
unkown image
|
page readonly
|
|
|
|
12143EA9000
|
heap private
|
page read and write
|
|
|
|
1B4E0232000
|
unkown
|
page read and write
|
|
|
|
7FF535B4D000
|
unkown image
|
page readonly
|
|
|
|
AB3E27E000
|
stack
|
page read and write
|
|
|
|
7FF536217000
|
unkown image
|
page readonly
|
|
|
|
1AF55C96000
|
unkown
|
page read and write
|
|
|
|
7DF58A3B0000
|
unkown image
|
page readonly
|
|
|
|
2407C130000
|
unkown image
|
page readonly
|
|
|
|
7FF54D3B1000
|
unkown image
|
page readonly
|
|
|
|
7DF58A3A2000
|
unkown image
|
page readonly
|
|
|
|
CF900FE000
|
stack
|
page read and write
|
|
|
|
DCA7C77000
|
stack
|
page read and write
|
|
|
|
1B4E0265000
|
unkown
|
page read and write
|
|
|
|
2072126A000
|
unkown
|
page read and write
|
|
|
|
207204EF000
|
unkown
|
page read and write
|
|
|
|
20FF5E48000
|
unkown
|
page read and write
|
|
|
|
1B4E0230000
|
unkown
|
page read and write
|
|
|
|
1B4E0010000
|
unkown image
|
page readonly
|
|
|
|
20720D84000
|
unkown
|
page read and write
|
|
|
|
7DF57B812000
|
unkown image
|
page readonly
|
|
|
|
7FF5C18E2000
|
unkown image
|
page readonly
|
|
|
|
7DF458EE0000
|
unkown image
|
page readonly
|
|
|
|
DCA79FB000
|
stack
|
page read and write
|
|
|
|
7DF55B030000
|
unkown image
|
page readonly
|
|
|
|
52762FE000
|
stack
|
page read and write
|
|
|
|
12143B90000
|
unkown image
|
page readonly
|
|
|
|
7FF535AD3000
|
unkown image
|
page readonly
|
|
|
|
20FF5E58000
|
unkown
|
page read and write
|
|
|
|
7FF58D387000
|
unkown image
|
page readonly
|
|
|
|
7FF56BEBB000
|
unkown image
|
page readonly
|
|
|
|
1B4E0256000
|
unkown
|
page read and write
|
|
|
|
7DF579D42000
|
unkown image
|
page readonly
|
|
|
|
212169F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABCF7000
|
unkown image
|
page readonly
|
|
|
|
224051D0000
|
unkown image
|
page readonly
|
|
|
|
1EDA088A000
|
unkown
|
page read and write
|
|
|
|
7FF55D823000
|
unkown image
|
page readonly
|
|
|
|
2407C200000
|
unkown
|
page read and write
|
|
|
|
7FF536229000
|
unkown image
|
page readonly
|
|
|
|
1B4DFFF0000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF692000
|
unkown image
|
page readonly
|
|
|
|
20721203000
|
unkown
|
page read and write
|
|
|
|
21216C13000
|
unkown
|
page read and write
|
|
|
|
1B4E026F000
|
unkown
|
page read and write
|
|
|
|
7FF53FF31000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF692000
|
unkown image
|
page readonly
|
|
|
|
7FF53619B000
|
unkown image
|
page readonly
|
|
|
|
7FF57C741000
|
unkown image
|
page readonly
|
|
|
|
1EC7BA3C000
|
unkown
|
page read and write
|
|
|
|
7FF5E3793000
|
unkown image
|
page readonly
|
|
|
|
7FF56C0B4000
|
unkown image
|
page readonly
|
|
|
|
75AFAFD000
|
stack
|
page read and write
|
|
|
|
7FF58A535000
|
unkown image
|
page readonly
|
|
|
|
12143C5C000
|
unkown
|
page read and write
|
|
|
|
20720516000
|
unkown
|
page read and write
|
|
|
|
7FF53FE50000
|
unkown image
|
page readonly
|
|
|
|
20720D5D000
|
unkown
|
page read and write
|
|
|
|
2072121D000
|
unkown
|
page read and write
|
|
|
|
7FF58D6A4000
|
unkown image
|
page readonly
|
|
|
|
7DF58A3B0000
|
unkown image
|
page readonly
|
|
|
|
1EC7B960000
|
unkown
|
page read and write
|
|
|
|
7FF56BE35000
|
unkown image
|
page readonly
|
|
|
|
21217300000
|
unkown
|
page read and write
|
|
|
|
12143A30000
|
unkown image
|
page readonly
|
|
|
|
7FF57C731000
|
unkown image
|
page readonly
|
|
|
|
7FF53FD1B000
|
unkown image
|
page readonly
|
|
|
|
7FF56BF81000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABC5B000
|
unkown image
|
page readonly
|
|
|
|
12143EA5000
|
heap private
|
page read and write
|
|
|
|
7DF5B9A60000
|
unkown image
|
page readonly
|
|
|
|
7DF5F14D2000
|
unkown image
|
page readonly
|
|
|
|
7FF57C741000
|
unkown image
|
page readonly
|
|
|
|
7FF53630A000
|
unkown image
|
page readonly
|
|
|
|
7FF58A437000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3849000
|
unkown image
|
page readonly
|
|
|
|
1EDA0800000
|
unkown
|
page read and write
|
|
|
|
1EE4BC3C000
|
unkown
|
page read and write
|
|
|
|
AB3E17D000
|
stack
|
page read and write
|
|
|
|
7DF441E50000
|
unkown image
|
page readonly
|
|
|
|
7FF57C6B7000
|
unkown image
|
page readonly
|
|
|
|
7FF56BF2B000
|
unkown image
|
page readonly
|
|
|
|
1EC7BA79000
|
unkown
|
page read and write
|
|
|
|
12143EB0000
|
unkown
|
page read and write
|
|
|
|
1EC7B940000
|
unkown image
|
page readonly
|
|
|
|
7FF5E35F6000
|
unkown image
|
page readonly
|
|
|
|
7FF56B8D8000
|
unkown image
|
page readonly
|
|
|
|
20720DA6000
|
unkown
|
page read and write
|
|
|
|
7FF58A3DE000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3797000
|
unkown image
|
page readonly
|
|
|
|
20720D9A000
|
unkown
|
page read and write
|
|
|
|
7FF56DB0E000
|
unkown image
|
page readonly
|
|
|
|
7FF56DA1C000
|
unkown image
|
page readonly
|
|
|
|
7FF58D5AE000
|
unkown image
|
page readonly
|
|
|
|
20720DA3000
|
unkown
|
page read and write
|
|
|
|
1EDA06F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3514000
|
unkown image
|
page readonly
|
|
|
|
20721200000
|
unkown
|
page read and write
|
|
|
|
7FF58D4AB000
|
unkown image
|
page readonly
|
|
|
|
7FF559AC1000
|
unkown image
|
page readonly
|
|
|
|
12143C10000
|
heap default
|
page read and write
|
|
|
|
20720455000
|
unkown
|
page read and write
|
|
|
|
7FF57C724000
|
unkown image
|
page readonly
|
|
|
|
20720DA4000
|
unkown
|
page read and write
|
|
|
|
7FF53FCFD000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABD20000
|
unkown image
|
page readonly
|
|
|
|
4E5C5FF000
|
stack
|
page read and write
|
|
|
|
7DF58A3B2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1A15000
|
unkown image
|
page readonly
|
|
|
|
20720413000
|
unkown
|
page read and write
|
|
|
|
20720D8C000
|
unkown
|
page read and write
|
|
|
|
7FF589D6D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3865000
|
unkown image
|
page readonly
|
|
|
|
16AF7FB000
|
stack
|
page read and write
|
|
|
|
165EE22A000
|
unkown
|
page read and write
|
|
|
|
7DF579D50000
|
unkown image
|
page readonly
|
|
|
|
7DF579D40000
|
unkown image
|
page readonly
|
|
|
|
7FF5C173A000
|
unkown image
|
page readonly
|
|
|
|
20FF5E02000
|
unkown
|
page read and write
|
|
|
|
7FF53FE57000
|
unkown image
|
page readonly
|
|
|
|
7FF53622F000
|
unkown image
|
page readonly
|
|
|
|
7FF5E33D7000
|
unkown image
|
page readonly
|
|
|
|
20720D8A000
|
unkown
|
page read and write
|
|
|
|
20720300000
|
unkown image
|
page readonly
|
|
|
|
7FF56DB82000
|
unkown image
|
page readonly
|
|
|
|
7FF53629D000
|
unkown image
|
page readonly
|
|
|
|
7FF56BE21000
|
unkown image
|
page readonly
|
|
|
|
12144980000
|
unkown
|
page read and write
|
|
|
|
7FF58A449000
|
unkown image
|
page readonly
|
|
|
|
20FF5C40000
|
unkown image
|
page readonly
|
|
|
|
7FF54D382000
|
unkown image
|
page readonly
|
|
|
|
22405451000
|
unkown
|
page read and write
|
|
|
|
20FF5DE0000
|
unkown
|
page read and write
|
|
|
|
7DF5F14F0000
|
unkown image
|
page readonly
|
|
|
|
527637E000
|
stack
|
page read and write
|
|
|
|
7FF54D3A1000
|
unkown image
|
page readonly
|
|
|
|
7DF4CD550000
|
unkown image
|
page readonly
|
|
|
|
207204F0000
|
unkown
|
page read and write
|
|
|
|
7DF57B822000
|
unkown image
|
page readonly
|
|
|
|
1AF55C95000
|
unkown
|
page read and write
|
|
|
|
7FF58D3B6000
|
unkown image
|
page readonly
|
|
|
|
1EC7BB08000
|
unkown
|
page read and write
|
|
|
|
7FF54CBB8000
|
unkown image
|
page readonly
|
|
|
|
7FF57C68B000
|
unkown image
|
page readonly
|
|
|
|
1EC7BED0000
|
unkown image
|
page readonly
|
|
|
|
20FF5DE0000
|
unkown
|
page read and write
|
|
|
|
7FF5ABDD9000
|
unkown image
|
page readonly
|
|
|
|
7DF579D30000
|
unkown image
|
page readonly
|
|
|
|
7DF55B012000
|
unkown image
|
page readonly
|
|
|
|
1AF55D70000
|
unkown
|
page read and write
|
|
|
|
1EE4B9C0000
|
unkown image
|
page read and write
|
|
|
|
7FF56BCA4000
|
unkown image
|
page readonly
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
7FF5E2F42000
|
unkown image
|
page readonly
|
|
|
|
DCA74AB000
|
unkown
|
page read and write
|
|
|
|
1EDA0908000
|
unkown
|
page read and write
|
|
|
|
7FF58A52A000
|
unkown image
|
page readonly
|
|
|
|
1EE547F000
|
stack
|
page read and write
|
|
|
|
7FF55D8D1000
|
unkown image
|
page readonly
|
|
|
|
20720D0E000
|
unkown
|
page read and write
|
|
|
|
7FF58A44D000
|
unkown image
|
page readonly
|
|
|
|
7FF53FD8B000
|
unkown image
|
page readonly
|
|
|
|
1EC7BA00000
|
unkown
|
page read and write
|
|
|
|
20FF6200000
|
unkown image
|
page readonly
|
|
|
|
20720D56000
|
unkown
|
page read and write
|
|
|
|
20FF5E00000
|
unkown
|
page read and write
|
|
|
|
7FF536004000
|
unkown image
|
page readonly
|
|
|
|
7FF56DB02000
|
unkown image
|
page readonly
|
|
|
|
1EC7BA6A000
|
unkown
|
page read and write
|
|
|
|
224051B0000
|
unkown image
|
page read and write
|
|
|
|
1B4E0262000
|
unkown
|
page read and write
|
|
|
|
7FF55D755000
|
unkown image
|
page readonly
|
|
|
|
7DF56B540000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABB86000
|
unkown image
|
page readonly
|
|
|
|
7FF56BFAE000
|
unkown image
|
page readonly
|
|
|
|
A18C6CC000
|
unkown
|
page read and write
|
|
|
|
7FF57C72A000
|
unkown image
|
page readonly
|
|
|
|
7FF55CF17000
|
unkown image
|
page readonly
|
|
|
|
7FF56DAD0000
|
unkown image
|
page readonly
|
|
|
|
21216CC3000
|
unkown
|
page read and write
|
|
|
|
4E5C87F000
|
stack
|
page read and write
|
|
|
|
1EC7BA6A000
|
unkown
|
page read and write
|
|
|
|
20720454000
|
unkown
|
page read and write
|
|
|
|
7FF536272000
|
unkown image
|
page readonly
|
|
|
|
1AF55B50000
|
unkown image
|
page readonly
|
|
|
|
12143BF0000
|
unkown
|
page read and write
|
|
|
|
1B4E0200000
|
unkown
|
page read and write
|
|
|
|
1EE4C202000
|
unkown
|
page read and write
|
|
|
|
7FF55D81B000
|
unkown image
|
page readonly
|
|
|
|
7DF543F80000
|
unkown image
|
page readonly
|
|
|
|
7FF5C196B000
|
unkown image
|
page readonly
|
|
|
|
20720DBB000
|
unkown
|
page read and write
|
|
|
|
20720DB9000
|
unkown
|
page read and write
|
|
|
|
20FF5D90000
|
unkown
|
page read and write
|
|
|
|
7FF56BE81000
|
unkown image
|
page readonly
|
|
|
|
2407C130000
|
unkown image
|
page readonly
|
|
|
|
DCA7A7E000
|
stack
|
page read and write
|
|
|
|
7FF53631E000
|
unkown image
|
page readonly
|
|
|
|
7FF53620E000
|
unkown image
|
page readonly
|
|
|
|
7FF536240000
|
unkown image
|
page readonly
|
|
|
|
2407C233000
|
unkown
|
page read and write
|
|
|
|
165EE060000
|
unkown image
|
page readonly
|
|
|
|
21216C2A000
|
unkown
|
page read and write
|
|
|
|
20720DDC000
|
unkown
|
page read and write
|
|
|
|
20720DD1000
|
unkown
|
page read and write
|
|
|
|
12143C00000
|
unkown
|
page read and write
|
|
|
|
165EE090000
|
heap default
|
page read and write
|
|
|
|
20720B40000
|
unkown
|
page read and write
|
|
|
|
207202B0000
|
unkown image
|
page read and write
|
|
|
|
1AF55C86000
|
heap default
|
page read and write
|
|
|
|
7FF5E3537000
|
unkown image
|
page readonly
|
|
|
|
20FF5C90000
|
heap default
|
page read and write
|
|
|
|
1EE4BC29000
|
unkown
|
page read and write
|
|
|
|
7DF59B330000
|
unkown image
|
page readonly
|
|
|
|
7DF59B320000
|
unkown image
|
page readonly
|
|
|
|
7DF469400000
|
unkown image
|
page readonly
|
|
|
|
20720471000
|
unkown
|
page read and write
|
|
|
|
2407C850000
|
unkown image
|
page readonly
|
|
|
|
12143E90000
|
unkown image
|
page readonly
|
|
|
|
165EE202000
|
unkown
|
page read and write
|
|
|
|
7FF53FD00000
|
unkown image
|
page readonly
|
|
|
|
207204D8000
|
unkown
|
page read and write
|
|
|
|
7FF53F577000
|
unkown image
|
page readonly
|
|
|
|
587EA7D000
|
stack
|
page read and write
|
|
|
|
20720D8C000
|
unkown
|
page read and write
|
|
|
|
1EE4BB10000
|
unkown image
|
page readonly
|
|
|
|
21216C24000
|
unkown
|
page read and write
|
|
|
|
7FF56DABD000
|
unkown image
|
page readonly
|
|
|
|
7FF5362F9000
|
unkown image
|
page readonly
|
|
|
|
12143A10000
|
unkown image
|
page read and write
|
|
|
|
7FF57C69E000
|
unkown image
|
page readonly
|
|
|
|
16AFCF7000
|
stack
|
page read and write
|
|
|
|
7FF5E37C2000
|
unkown image
|
page readonly
|
|
|
|
A18CE7F000
|
stack
|
page read and write
|
|
|
|
20720429000
|
unkown
|
page read and write
|
|
|
|
1AF55C86000
|
unkown
|
page read and write
|
|
|
|
7FF56DBB1000
|
unkown image
|
page readonly
|
|
|
|
20720DCA000
|
unkown
|
page read and write
|
|
|
|
20720DCA000
|
unkown
|
page read and write
|
|
|
|
165EE276000
|
unkown
|
page read and write
|
|
|
|
20FF5C40000
|
unkown image
|
page readonly
|
|
|
|
165EE070000
|
unkown image
|
page readonly
|
|
|
|
7FF56BEE2000
|
unkown image
|
page readonly
|
|
|
|
1B4E0240000
|
unkown
|
page read and write
|
|
|
|
7FF56BFB3000
|
unkown image
|
page readonly
|
|
|
|
1EDA087E000
|
unkown
|
page read and write
|
|
|
|
7FF54D39A000
|
unkown image
|
page readonly
|
|
|
|
7FF55D8C1000
|
unkown image
|
page readonly
|
|
|
|
7FF58D5CD000
|
unkown image
|
page readonly
|
|
|
|
3AF007E000
|
stack
|
page read and write
|
|
|
|
20720800000
|
unkown image
|
page readonly
|
|
|
|
7FF5C194E000
|
unkown image
|
page readonly
|
|
|
|
7FF57C6BA000
|
unkown image
|
page readonly
|
|
|
|
1AF55EF5000
|
heap private
|
page read and write
|
|
|
|
16AFE7A000
|
stack
|
page read and write
|
|
|
|
1AF55EF0000
|
heap private
|
page read and write
|
|
|
|
12143A60000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF690000
|
unkown image
|
page readonly
|
|
|
|
7FF58A46E000
|
unkown image
|
page readonly
|
|
|
|
7FF5C197E000
|
unkown image
|
page readonly
|
|
|
|
1B4E0249000
|
unkown
|
page read and write
|
|
|
|
1EE4BA00000
|
unkown image
|
page readonly
|
|
|
|
7FF56D213000
|
unkown image
|
page readonly
|
|
|
|
20FF5E89000
|
unkown
|
page read and write
|
|
|
|
20720D13000
|
unkown
|
page read and write
|
|
|
|
165EE302000
|
unkown
|
page read and write
|
|
|
|
4E5CC7E000
|
stack
|
page read and write
|
|
|
|
7FF56DAB6000
|
unkown image
|
page readonly
|
|
|
|
7FF58A2BB000
|
unkown image
|
page readonly
|
|
|
|
20720DAB000
|
unkown
|
page read and write
|
|
|
|
2407C229000
|
unkown
|
page read and write
|
|
|
|
1EE4F4B000
|
unkown
|
page read and write
|
|
|
|
7DF5981C0000
|
unkown image
|
page readonly
|
|
|
|
21216AF0000
|
unkown image
|
page readonly
|
|
|
|
7DF579D40000
|
unkown image
|
page readonly
|
|
|
|
20FF5E47000
|
unkown
|
page read and write
|
|
|
|
7DF5CF682000
|
unkown image
|
page readonly
|
|
|
|
7DF5F14D0000
|
unkown image
|
page readonly
|
|
|
|
20720AD0000
|
unkown image
|
page write copy
|
|
|
|
1B4E024E000
|
unkown
|
page read and write
|
|
|
|
7FF54D394000
|
unkown image
|
page readonly
|
|
|
|
7FF57C677000
|
unkown image
|
page readonly
|
|
|
|
7DF543F82000
|
unkown image
|
page readonly
|
|
|
|
7FF53629A000
|
unkown image
|
page readonly
|
|
|
|
CF8FEFB000
|
stack
|
page read and write
|
|
|
|
1EE53F9000
|
stack
|
page read and write
|
|
|
|
224051D0000
|
unkown image
|
page readonly
|
|
|
|
7FF58D5EE000
|
unkown image
|
page readonly
|
|
|
|
7FF53FE53000
|
unkown image
|
page readonly
|
|
|
|
7DF55B010000
|
unkown image
|
page readonly
|
|
|
|
1B4E0260000
|
unkown
|
page read and write
|
|
|
|
7FF56BFBE000
|
unkown image
|
page readonly
|
|
|
|
7DF5981B0000
|
unkown image
|
page readonly
|
|
|
|
7DF496070000
|
unkown image
|
page readonly
|
|
|
|
7FF54D3B1000
|
unkown image
|
page readonly
|
|
|
|
7FF56DAC3000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABBD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C18EE000
|
unkown image
|
page readonly
|
|
|
|
20720B50000
|
unkown image
|
page read and write
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
1B4E07A0000
|
unkown
|
page read and write
|
|
|
|
16AF6FE000
|
stack
|
page read and write
|
|
|
|
7FF5E365B000
|
unkown image
|
page readonly
|
|
|
|
7DF4EF3A0000
|
unkown image
|
page readonly
|
|
|
|
7FF54D2FB000
|
unkown image
|
page readonly
|
|
|
|
21217000000
|
unkown image
|
page readonly
|
|
|
|
20720D98000
|
unkown
|
page read and write
|
|
|
|
3AEFB7E000
|
stack
|
page read and write
|
|
|
|
2407C202000
|
unkown
|
page read and write
|
|
|
|
7FF55D8D1000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1A04000
|
unkown image
|
page readonly
|
|
|
|
1EDA0850000
|
unkown
|
page read and write
|
|
|
|
1B4E0213000
|
unkown
|
page read and write
|
|
|
|
3AEF39B000
|
unkown
|
page read and write
|
|
|
|
587E97D000
|
stack
|
page read and write
|
|
|
|
1EC7BA13000
|
unkown
|
page read and write
|
|
|
|
20720D91000
|
unkown
|
page read and write
|
|
|
|
CF8F98B000
|
unkown
|
page read and write
|
|
|
|
75AF77B000
|
stack
|
page read and write
|
|
|
|
21216D13000
|
unkown
|
page read and write
|
|
|
|
7FF5E375B000
|
unkown image
|
page readonly
|
|
|
|
7FF53FE7B000
|
unkown image
|
page readonly
|
|
|
|
7FF56C023000
|
unkown image
|
page readonly
|
|
|
|
7FF55D8A9000
|
unkown image
|
page readonly
|
|
|
|
1B4E027B000
|
unkown
|
page read and write
|
|
|
|
1B4E026A000
|
unkown
|
page read and write
|
|
|
|
7FF55D3B7000
|
unkown image
|
page readonly
|
|
|
|
22405455000
|
unkown
|
page read and write
|
|
|
|
7FF53FA11000
|
unkown image
|
page readonly
|
|
|
|
7DF5F14E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABC81000
|
unkown image
|
page readonly
|
|
|
|
7DF54DBA0000
|
unkown image
|
page readonly
|
|
|
|
7FF56C0D0000
|
unkown image
|
page readonly
|
|
|
|
12143C5E000
|
unkown
|
page read and write
|
|
|
|
7FF56BD55000
|
unkown image
|
page readonly
|
|
|
|
7FF58D5CA000
|
unkown image
|
page readonly
|
|
|
|
7DF55B010000
|
unkown image
|
page readonly
|
|
|
|
7FF5C17A6000
|
unkown image
|
page readonly
|
|
|
|
12144960000
|
unkown
|
page read and write
|
|
|
|
7FF58D637000
|
unkown image
|
page readonly
|
|
|
|
2072126A000
|
unkown
|
page read and write
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
7FF53F732000
|
unkown image
|
page readonly
|
|
|
|
7DFE312E8000
|
unkown image
|
page readonly
|
|
|
|
7FF55D7FE000
|
unkown image
|
page readonly
|
|
|
|
7FF56BF25000
|
unkown image
|
page readonly
|
|
|
|
587E87F000
|
stack
|
page read and write
|
|
|
|
AB3DD7F000
|
stack
|
page read and write
|
|
|
|
7FF5C1A21000
|
unkown image
|
page readonly
|
|
|
|
7FF56DAFB000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABE01000
|
unkown image
|
page readonly
|
|
|
|
7FF5C19F2000
|
unkown image
|
page readonly
|
|
|
|
1B4E0600000
|
unkown image
|
page readonly
|
|
|
|
7FF5E343C000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABA85000
|
unkown image
|
page readonly
|
|
|
|
1B4E0250000
|
unkown
|
page read and write
|
|
|
|
7FF58D6BA000
|
unkown image
|
page readonly
|
|
|
|
7FF56BFDF000
|
unkown image
|
page readonly
|
|
|
|
7FF54CBB4000
|
unkown image
|
page readonly
|
|
|
|
20720D8A000
|
unkown
|
page read and write
|
|
|
|
20FF5F02000
|
unkown
|
page read and write
|
|
|
|
7FF5ABDFA000
|
unkown image
|
page readonly
|
|
|
|
7FF57C712000
|
unkown image
|
page readonly
|
|
|
|
22405470000
|
unkown
|
page read and write
|
|
|
|
20720D99000
|
unkown
|
page read and write
|
|
|
|
2407C1E0000
|
unkown
|
page read and write
|
|
|
|
7FF5C1973000
|
unkown image
|
page readonly
|
|
|
|
7FF56BE89000
|
unkown image
|
page readonly
|
|
|
|
1B4E0284000
|
unkown
|
page read and write
|
|
|
|
12143A30000
|
unkown image
|
page readonly
|
|
|
|
587E7FD000
|
stack
|
page read and write
|
|
|
|
AB3E37C000
|
stack
|
page read and write
|
|
|
|
7FF56D21F000
|
unkown image
|
page readonly
|
|
|
|
207202C0000
|
heap private
|
page read and write
|
|
|
|
7FF56BFFE000
|
unkown image
|
page readonly
|
|
|
|
7FF57C660000
|
unkown image
|
page readonly
|
|
|
|
224051F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5360A6000
|
unkown image
|
page readonly
|
|
|
|
7FF56BFAA000
|
unkown image
|
page readonly
|
|
|
|
207202D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3790000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABD37000
|
unkown image
|
page readonly
|
|
|
|
20720459000
|
unkown
|
page read and write
|
|
|
|
1AF55C9F000
|
unkown
|
page read and write
|
|
|
|
7FF58A4BD000
|
unkown image
|
page readonly
|
|
|
|
7FF58D5CF000
|
unkown image
|
page readonly
|
|
|
|
7DF5B9A70000
|
unkown image
|
page readonly
|
|
|
|
7FF55D7C7000
|
unkown image
|
page readonly
|
|
|
|
7FF53FDB1000
|
unkown image
|
page readonly
|
|
|
|
20720D90000
|
unkown
|
page read and write
|
|
|
|
1AF55CB0000
|
unkown
|
page read and write
|
|
|
|
7DF579D30000
|
unkown image
|
page readonly
|
|
|
|
7FF58A236000
|
unkown image
|
page readonly
|
|
|
|
7FF55D847000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF6A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5361F1000
|
unkown image
|
page readonly
|
|
|
|
7FF58A53A000
|
unkown image
|
page readonly
|
|
|
|
12143A20000
|
unkown
|
page read and write
|
|
|
|
7DF58A3C0000
|
unkown image
|
page readonly
|
|
|
|
1EE4BA30000
|
heap default
|
page read and write
|
|
|
|
7FF5C1997000
|
unkown image
|
page readonly
|
|
|
|
7FF55D7D9000
|
unkown image
|
page readonly
|
|
|
|
1AF56280000
|
unkown image
|
page readonly
|
|
|
|
7FF56DBAA000
|
unkown image
|
page readonly
|
|
|
|
1B4DFFD0000
|
unkown image
|
page read and write
|
|
|
|
7FF55D72B000
|
unkown image
|
page readonly
|
|
|
|
7DF543F92000
|
unkown image
|
page readonly
|
|
|
|
7FF5C199A000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA3B000
|
unkown image
|
page readonly
|
|
|
|
2407C302000
|
unkown
|
page read and write
|
|
|
|
7FF56BFF0000
|
unkown image
|
page readonly
|
|
|
|
7FF56D9C2000
|
unkown image
|
page readonly
|
|
|
|
165EE23D000
|
unkown
|
page read and write
|
|
|
|
7FF5E377F000
|
unkown image
|
page readonly
|
|
|
|
1B4E027E000
|
unkown
|
page read and write
|
|
|
|
7FF53FF2A000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3094000
|
unkown image
|
page readonly
|
|
|
|
7FF56BEDF000
|
unkown image
|
page readonly
|
|
|
|
3AEF7FB000
|
stack
|
page read and write
|
|
|
|
20720D64000
|
unkown
|
page read and write
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
7FF5E385A000
|
unkown image
|
page readonly
|
|
|
|
7FF56BF92000
|
unkown image
|
page readonly
|
|
|
|
1B4E0245000
|
unkown
|
page read and write
|
|
|
|
7FF536132000
|
unkown image
|
page readonly
|
|
|
|
2407C180000
|
heap default
|
page read and write
|
|
|
|
7FF58D5E0000
|
unkown image
|
page readonly
|
|
|
|
A18CC7B000
|
stack
|
page read and write
|
|
|
|
7FF58A541000
|
unkown image
|
page readonly
|
|
|
|
7FF56BE85000
|
unkown image
|
page readonly
|
|
|
|
20FF5F18000
|
unkown
|
page read and write
|
|
|
|
7DF4B7930000
|
unkown image
|
page readonly
|
|
|
|
1B4E0242000
|
unkown
|
page read and write
|
|
|
|
7FF55D8B4000
|
unkown image
|
page readonly
|
|
|
|
121442C0000
|
unkown image
|
page readonly
|
|
|
|
1B4E024B000
|
unkown
|
page read and write
|
|
|
|
12143EA0000
|
heap private
|
page read and write
|
|
|
|
7FF5ABD23000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1978000
|
unkown image
|
page readonly
|
|
|
|
7FF53607F000
|
unkown image
|
page readonly
|
|
|
|
7FF58A53E000
|
unkown image
|
page readonly
|
|
|
|
7DF543FA0000
|
unkown image
|
page readonly
|
|
|
|
7FF55D7DD000
|
unkown image
|
page readonly
|
|
|
|
7FF58A453000
|
unkown image
|
page readonly
|
|
|
|
16AF67F000
|
stack
|
page read and write
|
|
|
|
7FF56BEA0000
|
unkown image
|
page readonly
|
|
|
|
20720D90000
|
unkown
|
page read and write
|
|
|
|
7FF55D7F0000
|
unkown image
|
page readonly
|
|
|
|
CF8FDFB000
|
stack
|
page read and write
|
|
|
|
20FF7DC0000
|
unkown image
|
page write copy
|
|
|
|
1B4E022D000
|
unkown
|
page read and write
|
|
|
|
36D635F000
|
stack
|
page read and write
|
|
|
|
7FF58D6AA000
|
unkown image
|
page readonly
|
|
|
|
7FF53FE8E000
|
unkown image
|
page readonly
|
|
|
|
7FF58A524000
|
unkown image
|
page readonly
|
|
|
|
12144970000
|
unkown
|
page readonly
|
|
|
|
1EC7B930000
|
heap default
|
page read and write
|
|
|
|
20721302000
|
unkown
|
page read and write
|
|
|
|
212169A0000
|
unkown image
|
page read and write
|
|
|
|
36D62DA000
|
unkown
|
page read and write
|
|
|
|
7DF579D32000
|
unkown image
|
page readonly
|
|
|
|
7DFD8C576000
|
unkown image
|
page readonly
|
|
|
|
7FF53FEA7000
|
unkown image
|
page readonly
|
|
|
|
CF8FCFD000
|
stack
|
page read and write
|
|
|
|
16AFD7F000
|
stack
|
page read and write
|
|
|
|
2407CC00000
|
unkown
|
page read and write
|
|
|
|
16AF8FA000
|
stack
|
page read and write
|
|
|
|
7FF54D2DE000
|
unkown image
|
page readonly
|
|
|
|
2072044D000
|
unkown
|
page read and write
|
|
|
|
52767FF000
|
stack
|
page read and write
|
|
|
|
20720DAA000
|
unkown
|
page read and write
|
|
|
|
7FF535C9C000
|
unkown image
|
page readonly
|
|
|
|
7FF55D0D2000
|
unkown image
|
page readonly
|
|
|
|
207202D0000
|
unkown image
|
page readonly
|
|
|
|
165EE27B000
|
unkown
|
page read and write
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
20FF5F13000
|
unkown
|
page read and write
|
|
|
|
7FF5E2F52000
|
unkown image
|
page readonly
|
|
|
|
7FF56BE56000
|
unkown image
|
page readonly
|
|
|
|
7FF53627E000
|
unkown image
|
page readonly
|
|
|
|
2407C258000
|
unkown
|
page read and write
|
|
|
|
DCA75AE000
|
stack
|
page read and write
|
|
|
|
7FF58A093000
|
unkown image
|
page readonly
|
|
|
|
2407C240000
|
unkown
|
page read and write
|
|
|
|
7FF57C637000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA37000
|
unkown image
|
page readonly
|
|
|
|
7FF536257000
|
unkown image
|
page readonly
|
|
|
|
52764FE000
|
stack
|
page read and write
|
|
|
|
7FF58D6C1000
|
unkown image
|
page readonly
|
|
|
|
7FF55D84D000
|
unkown image
|
page readonly
|
|
|
|
1EDA1002000
|
unkown
|
page read and write
|
|
|
|
7FF536203000
|
unkown image
|
page readonly
|
|
|
|
20720D80000
|
unkown
|
page read and write
|
|
|
|
212169C0000
|
unkown image
|
page readonly
|
|
|
|
7DF543F90000
|
unkown image
|
page readonly
|
|
|
|
2072044E000
|
unkown
|
page read and write
|
|
|
|
7FF56C04D000
|
unkown image
|
page readonly
|
|
|
|
7DF5981A2000
|
unkown image
|
page readonly
|
|
|
|
1B4E0229000
|
unkown
|
page read and write
|
|
|
|
7DF56B542000
|
unkown image
|
page readonly
|
|
|
|
20FF7802000
|
unkown
|
page read and write
|
|
|
|
4E5CD7B000
|
stack
|
page read and write
|
|
|
|
7DF5CF682000
|
unkown image
|
page readonly
|
|
|
|
7DF55B012000
|
unkown image
|
page readonly
|
|
|
|
1EE4B9D0000
|
heap private
|
page read and write
|
|
|
|
2240544B000
|
unkown
|
page read and write
|
|
|
|
20FF5E62000
|
unkown
|
page read and write
|
|
|
|
22405452000
|
unkown
|
page read and write
|
|
|
|
7FF58A463000
|
unkown image
|
page readonly
|
|
|
|
7FF56C0C1000
|
unkown image
|
page readonly
|
|
|
|
1AF55B30000
|
unkown image
|
page read and write
|
|
|
|
212169E0000
|
unkown image
|
page readonly
|
|
|
|
7DF59B332000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1096000
|
unkown image
|
page readonly
|
|
|
|
7FF56C0D1000
|
unkown image
|
page readonly
|
|
|
|
1B4E0244000
|
unkown
|
page read and write
|
|
|
|
7FF56BBB7000
|
unkown image
|
page readonly
|
|
|
|
20720D5B000
|
unkown
|
page read and write
|
|
|
|
21216C89000
|
unkown
|
page read and write
|
|
|
|
7FF56D439000
|
unkown image
|
page readonly
|
|
|
|
7FF56DABF000
|
unkown image
|
page readonly
|
|
|
|
7DF58A3B2000
|
unkown image
|
page readonly
|
|
|
|
3AEFD7F000
|
stack
|
page read and write
|
|
|
|
7FF58D60B000
|
unkown image
|
page readonly
|
|
|
|
AB3DEFC000
|
stack
|
page read and write
|
|
|
|
7DF55B030000
|
unkown image
|
page readonly
|
|
|
|
20FF6380000
|
unkown image
|
page readonly
|
|
|
|
7FF55D73C000
|
unkown image
|
page readonly
|
|
|
|
36D66FE000
|
stack
|
page read and write
|
|
|
|
7FF53FF14000
|
unkown image
|
page readonly
|
|
|
|
7DF5981B2000
|
unkown image
|
page readonly
|
|
|
|
7FF58A0A9000
|
unkown image
|
page readonly
|
|
|
|
2407C6D0000
|
unkown image
|
page readonly
|
|
|
|
165EE170000
|
unkown image
|
page readonly
|
|
|
|
21216A10000
|
heap default
|
page read and write
|
|
|
|
20FF5E57000
|
unkown
|
page read and write
|
|
|
|
7FF58D591000
|
unkown image
|
page readonly
|
|
|
|
7FF56C0A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1236000
|
unkown image
|
page readonly
|
|
|
|
7FF58D392000
|
unkown image
|
page readonly
|
|
|
|
7DF5F14D0000
|
unkown image
|
page readonly
|
|
|
|
1EE4BC7B000
|
unkown
|
page read and write
|
|
|
|
DCA752E000
|
stack
|
page read and write
|
|
|
|
7DF56B550000
|
unkown image
|
page readonly
|
|
|
|
4E5C1BC000
|
unkown
|
page read and write
|
|
|
|
7DF5B9A80000
|
unkown image
|
page readonly
|
|
|
|
1AF55B70000
|
unkown image
|
page readonly
|
|
|
|
7FF55D751000
|
unkown image
|
page readonly
|
|
|
|
7FF57C73A000
|
unkown image
|
page readonly
|
|
|
|
1EE4B9E0000
|
unkown image
|
page readonly
|
|
|
|
7FF54D3AA000
|
unkown image
|
page readonly
|
|
|
|
7DF5F14E2000
|
unkown image
|
page readonly
|
|
|
|
7FF56C02E000
|
unkown image
|
page readonly
|
|
|
|
7FF55D82E000
|
unkown image
|
page readonly
|
|
|
|
7DF543F82000
|
unkown image
|
page readonly
|
|
|
|
7FF58D446000
|
unkown image
|
page readonly
|
|
|
|
1B4E0302000
|
unkown
|
page read and write
|
|
|
|
7FF55CF11000
|
unkown image
|
page readonly
|
|
|
|
7FF58A519000
|
unkown image
|
page readonly
|
|
|
|
7FF53FCE1000
|
unkown image
|
page readonly
|
|
|
|
1EC7BA4A000
|
unkown
|
page read and write
|
|
|
|
165EE268000
|
unkown
|
page read and write
|
|
|
|
7DF58A3A0000
|
unkown image
|
page readonly
|
|
|
|
7FF58CD94000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABBEB000
|
unkown image
|
page readonly
|
|
|
|
1B4E0264000
|
unkown
|
page read and write
|
|
|
|
7FF5E37EA000
|
unkown image
|
page readonly
|
|
|
|
20FF5C60000
|
unkown image
|
page readonly
|
|
|
|
1B4E0248000
|
unkown
|
page read and write
|
|
|
|
20FF5E2A000
|
unkown
|
page read and write
|
|
|
|
1B4E027D000
|
unkown
|
page read and write
|
|
|
|
7FF53FF02000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABD53000
|
unkown image
|
page readonly
|
|
|
|
7DF543F80000
|
unkown image
|
page readonly
|
|
|
|
22405508000
|
unkown
|
page read and write
|
|
|
|
4E5C97E000
|
stack
|
page read and write
|
|
|
|
7FF5E3783000
|
unkown image
|
page readonly
|
|
|
|
1EE4BB20000
|
unkown image
|
page readonly
|
|
|
|
7FF55D656000
|
unkown image
|
page readonly
|
|
|
|
7FF56DB89000
|
unkown image
|
page readonly
|
|
|
|
165EE020000
|
unkown image
|
page read and write
|
|
|
|
21216C6E000
|
unkown
|
page read and write
|
|
|
|
20FF5C20000
|
unkown image
|
page read and write
|
|
|
|
7DF58A3A0000
|
unkown image
|
page readonly
|
|
|
|
20720D90000
|
unkown
|
page read and write
|
|
|
|
2240543C000
|
unkown
|
page read and write
|
|
|
|
1EC7BA50000
|
unkown
|
page read and write
|
|
|
|
20720D8D000
|
unkown
|
page read and write
|
|
|
|
3AEF97F000
|
stack
|
page read and write
|
|
|
|
3AEFF7F000
|
stack
|
page read and write
|
|
|
|
1B4E022E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3542000
|
unkown image
|
page readonly
|
|
|
|
20721203000
|
unkown
|
page read and write
|
|
|
|
20720508000
|
unkown
|
page read and write
|
|
|
|
7FF5E33D9000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3767000
|
unkown image
|
page readonly
|
|
|
|
7FF54D32A000
|
unkown image
|
page readonly
|
|
|
|
7FF53FD3F000
|
unkown image
|
page readonly
|
|
|
|
7FF53FCB6000
|
unkown image
|
page readonly
|
|
|
|
1EE4B9E0000
|
unkown image
|
page readonly
|
|
|
|
7FF53FE67000
|
unkown image
|
page readonly
|
|
|
|
20720D9E000
|
unkown
|
page read and write
|
|
|
|
7FF5362F2000
|
unkown image
|
page readonly
|
|
|
|
1EDA0770000
|
unkown
|
page read and write
|
|
|
|
7FF58D5E7000
|
unkown image
|
page readonly
|
|
|
|
20720C02000
|
unkown
|
page read and write
|
|
|
|
20720B40000
|
unkown
|
page read and write
|
|
|
|
1B4DFFE0000
|
heap private
|
page read and write
|
|
|
|
7FF58D5B7000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF680000
|
unkown image
|
page readonly
|
|
|
|
7FF56BF7F000
|
unkown image
|
page readonly
|
|
|
|
7FF535F2D000
|
unkown image
|
page readonly
|
|
|
|
7DF57B810000
|
unkown image
|
page readonly
|
|
|
|
1EC7BB00000
|
unkown
|
page read and write
|
|
|
|
7FF5ABD13000
|
unkown image
|
page readonly
|
|
|
|
7DF4796E0000
|
unkown image
|
page readonly
|
|
|
|
7FF56DB94000
|
unkown image
|
page readonly
|
|
|
|
7FF536137000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABD4B000
|
unkown image
|
page readonly
|
|
|
|
7DF477C00000
|
unkown image
|
page readonly
|
|
|
|
2407C1B0000
|
unkown
|
page read and write
|
|
|
|
1B4E026D000
|
unkown
|
page read and write
|
|
|
|
2407C110000
|
unkown image
|
page read and write
|
|
|
|
52765FE000
|
stack
|
page read and write
|
|
|
|
1EC7BB02000
|
unkown
|
page read and write
|
|
|
|
7DF59B332000
|
unkown image
|
page readonly
|
|
|
|
7FF53FA17000
|
unkown image
|
page readonly
|
|
|
|
2407C160000
|
unkown image
|
page readonly
|
|
|
|
1B4E0020000
|
unkown image
|
page readonly
|
|
|
|
7FF56BD97000
|
unkown image
|
page readonly
|
|
|
|
22405413000
|
unkown
|
page read and write
|
|
|
|
7FF5C16D7000
|
unkown image
|
page readonly
|
|
|
|
7DF59B340000
|
unkown image
|
page readonly
|
|
|
|
7FF58A49E000
|
unkown image
|
page readonly
|
|
|
|
7DF5F14D2000
|
unkown image
|
page readonly
|
|
|
|
20720D88000
|
unkown
|
page read and write
|
|
|
|
7DF57B822000
|
unkown image
|
page readonly
|
|
|
|
20720D7E000
|
unkown
|
page read and write
|
|
|
|
1EE54F9000
|
stack
|
page read and write
|
|
|
|
7DF5981B2000
|
unkown image
|
page readonly
|
|
|
|
165EE790000
|
unkown image
|
page readonly
|
|
|
|
7FF58D5A3000
|
unkown image
|
page readonly
|
|
|
|
1EC7BB13000
|
unkown
|
page read and write
|
|
|
|
7FF55D8BA000
|
unkown image
|
page readonly
|
|
|
|
165EE213000
|
unkown
|
page read and write
|
|
|
|
7FF53FF21000
|
unkown image
|
page readonly
|
|
|
|
7FF53FDB5000
|
unkown image
|
page readonly
|
|
|
|
207204B0000
|
unkown
|
page read and write
|
|
|
|
1EE557F000
|
stack
|
page read and write
|
|
|
|
7DF5981A0000
|
unkown image
|
page readonly
|
|
|
|
75AF9FF000
|
stack
|
page read and write
|
|
|
|
7DF579D32000
|
unkown image
|
page readonly
|
|
|
|
2407C1E0000
|
unkown
|
page read and write
|
|
|
|
7FF58A3EF000
|
unkown image
|
page readonly
|
|
|
|
1B4E0246000
|
unkown
|
page read and write
|
|
|
|
20FF77A0000
|
unkown
|
page read and write
|
|
|
|
165EE25A000
|
unkown
|
page read and write
|
|
|
|
22405220000
|
heap default
|
page read and write
|
|
|
|
207204ED000
|
unkown
|
page read and write
|
|
|
|
7FF57C6BD000
|
unkown image
|
page readonly
|
|
|
|
7FF55D8CA000
|
unkown image
|
page readonly
|
|
|
|
7FF56BE9D000
|
unkown image
|
page readonly
|
|
|
|
121449E0000
|
unkown
|
page read and write
|
|
|
|
1B4E0247000
|
unkown
|
page read and write
|
|
|
|
20721363000
|
unkown
|
page read and write
|
|
|
|
1AF55D90000
|
unkown
|
page read and write
|
|
|
|
7FF58D45F000
|
unkown image
|
page readonly
|
|
|
|
20720D9C000
|
unkown
|
page read and write
|
|
|
|
2072044C000
|
unkown
|
page read and write
|
|
|
|
7FF56B8D4000
|
unkown image
|
page readonly
|
|
|
|
2407C213000
|
unkown
|
page read and write
|
|
|
|
7DF5B9A60000
|
unkown image
|
page readonly
|
|
|
|
2407C1E0000
|
unkown
|
page read and write
|
|
|
|
7FF5E37BB000
|
unkown image
|
page readonly
|
|
|
|
2407C4D0000
|
unkown image
|
page readonly
|
|
|
|
20720DA2000
|
unkown
|
page read and write
|
|
|
|
7DF5B9A72000
|
unkown image
|
page readonly
|
|
|
|
DCA7B7F000
|
stack
|
page read and write
|
|
|
|
20720450000
|
unkown
|
page read and write
|
|
|
|
20720458000
|
unkown
|
page read and write
|
|
|
|
20720990000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABC85000
|
unkown image
|
page readonly
|
|
|
|
7FF56BFF7000
|
unkown image
|
page readonly
|
|
|
|
7DF57B812000
|
unkown image
|
page readonly
|
|
|
|
20720513000
|
unkown
|
page read and write
|
|
|
|
7FF58A531000
|
unkown image
|
page readonly
|
|
|
|
12144720000
|
unkown
|
page read and write
|
|
|
|
22405500000
|
unkown
|
page read and write
|
|
|
|
7FF535E69000
|
unkown image
|
page readonly
|
|
|
|
20720D8C000
|
unkown
|
page read and write
|
|
|
|
7FF54D389000
|
unkown image
|
page readonly
|
|
|
|
20720A80000
|
unkown
|
page read and write
|
|
|
|
75AF57E000
|
stack
|
page read and write
|
|
|
|
7FF58A30D000
|
unkown image
|
page readonly
|
|
|
|
12143A50000
|
unkown image
|
page readonly
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
2240544E000
|
unkown
|
page read and write
|
|
|
|
1EC7B8D0000
|
heap private
|
page read and write
|
|
|
|
7FF56BCA7000
|
unkown image
|
page readonly
|
|
|
|
1EDA06D0000
|
unkown image
|
page read and write
|
|
|
|
7DF56B542000
|
unkown image
|
page readonly
|
|
|
|
12144990000
|
unkown
|
page read and write
|
|
|
|
AB3E47F000
|
stack
|
page read and write
|
|
|
|
7FF56B711000
|
unkown image
|
page readonly
|
|
|
|
7FF535FF2000
|
unkown image
|
page readonly
|
|
|
|
20720D9E000
|
unkown
|
page read and write
|
|
|
|
1EE4BD00000
|
unkown
|
page read and write
|
|
|
|
7FF58A512000
|
unkown image
|
page readonly
|
|
|
|
20FF5C70000
|
unkown image
|
page readonly
|
|
|
|
20720453000
|
unkown
|
page read and write
|
|
|
|
7FF5E31CD000
|
unkown image
|
page readonly
|
|
|
|
7FF58D53C000
|
unkown image
|
page readonly
|
|
|
|
7FF58D41F000
|
unkown image
|
page readonly
|
|
|
|
7FF58D692000
|
unkown image
|
page readonly
|
|
|
|
12143D10000
|
unkown image
|
page readonly
|
|
|
|
7FF55D8A2000
|
unkown image
|
page readonly
|
|
|
|
7FF56BF55000
|
unkown image
|
page readonly
|
|
|
|
20720D8A000
|
unkown
|
page read and write
|
|
|
|
21216E00000
|
unkown image
|
page readonly
|
|
|
|
7DF54DBA2000
|
unkown image
|
page readonly
|
|
|
|
20720DA3000
|
unkown
|
page read and write
|
|
|
|
1AF55C9F000
|
unkown
|
page read and write
|
|
|
|
165EE600000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA4C000
|
unkown image
|
page readonly
|
|
|
|
7FF58A492000
|
unkown image
|
page readonly
|
|
|
|
20720DA4000
|
unkown
|
page read and write
|
|
|
|
7FF58A42E000
|
unkown image
|
page readonly
|
|
|
|
1B4E0239000
|
unkown
|
page read and write
|
|
|
|
1EC7C050000
|
unkown image
|
page readonly
|
|
|
|
1EE4BD02000
|
unkown
|
page read and write
|
|
|
|
20720D9A000
|
unkown
|
page read and write
|
|
|
|
7FF5C1933000
|
unkown image
|
page readonly
|
|
|
|
2072048B000
|
unkown
|
page read and write
|
|
|
|
207204C5000
|
unkown
|
page read and write
|
|
|
|
7DF56B532000
|
unkown image
|
page readonly
|
|
|
|
1AF55F00000
|
unkown image
|
page readonly
|
|
|
|
1B4E0261000
|
unkown
|
page read and write
|
|
|
|
DCA7D7F000
|
stack
|
page read and write
|
|
|
|
165EE030000
|
heap private
|
page read and write
|
|
|
|
207202F0000
|
unkown image
|
page readonly
|
|
|
|
7FF56D221000
|
unkown image
|
page readonly
|
|
|
|
21216C3E000
|
unkown
|
page read and write
|
|
|
|
7DF54DB90000
|
unkown image
|
page readonly
|
|
|
|
20720B40000
|
unkown
|
page read and write
|
|
|
|
7DF5B9A80000
|
unkown image
|
page readonly
|
|
|
|
7FF55D3B1000
|
unkown image
|
page readonly
|
|
|
|
1EDA0E50000
|
unkown image
|
page readonly
|
|
|
|
16AF9FB000
|
stack
|
page read and write
|
|
|
|
7FF56D43E000
|
unkown image
|
page readonly
|
|
|
|
20720502000
|
unkown
|
page read and write
|
|
|
|
165EE400000
|
unkown image
|
page readonly
|
|
|
|
7FF56D9C7000
|
unkown image
|
page readonly
|
|
|
|
1AF55C70000
|
heap default
|
page read and write
|
|
|
|
7DF57B830000
|
unkown image
|
page readonly
|
|
|
|
22405429000
|
unkown
|
page read and write
|
|
|
|
22405513000
|
unkown
|
page read and write
|
|
|
|
20720489000
|
unkown
|
page read and write
|
|
|
|
20FF5E48000
|
unkown
|
page read and write
|
|
|
|
7FF55D681000
|
unkown image
|
page readonly
|
|
|
|
20FF5C30000
|
heap private
|
page read and write
|
|
|
|
20FF5F00000
|
unkown
|
page read and write
|
|
|
|
7DF579D50000
|
unkown image
|
page readonly
|
|
|
|
1B4E0268000
|
unkown
|
page read and write
|
|
|
|
7FF56BF51000
|
unkown image
|
page readonly
|
|
|
|
2407CA02000
|
unkown
|
page read and write
|
|
|
|
7FF56BE16000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3779000
|
unkown image
|
page readonly
|
|
|
|
2407C190000
|
unkown image
|
page readonly
|
|
|
|
20720D8D000
|
unkown
|
page read and write
|
|
|
|
7DF54DBA2000
|
unkown image
|
page readonly
|
|
|
|
7FF536297000
|
unkown image
|
page readonly
|
|
|
|
7FF535FF5000
|
unkown image
|
page readonly
|
|
|
|
75AF47B000
|
unkown
|
page read and write
|
|
|
|
7FF536304000
|
unkown image
|
page readonly
|
|
|
|
1EC7BA29000
|
unkown
|
page read and write
|
|
|
|
7FF55D6A0000
|
unkown image
|
page readonly
|
|
|
|
20721202000
|
unkown
|
page read and write
|
|
|
|
7FF5E379E000
|
unkown image
|
page readonly
|
|
|
|
2407C220000
|
unkown
|
page read and write
|
|
|
|
1EE4BC00000
|
unkown
|
page read and write
|
|
|
|
36D6679000
|
stack
|
page read and write
|
|
|
|
7FF5E3871000
|
unkown image
|
page readonly
|
|
|
|
7FF56C047000
|
unkown image
|
page readonly
|
|
|
|
20720D98000
|
unkown
|
page read and write
|
|
|
|
1B4E0239000
|
unkown
|
page read and write
|
|
|
|
22405502000
|
unkown
|
page read and write
|
|
There are 1194 hidden memdumps, click here to show them.