Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
promo code83874071.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\ProgramData\MqscKrfE.rtf
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$promo code83874071.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\83AB67A7-816A-439D-B972-9539D466DB6C
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C1975964.png
|
PNG image data, 253 x 56, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\DD116215.png
|
PNG image data, 263 x 339, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
\Device\ConDrv
|
ASCII text, with CRLF, CR line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\12741B26.png
|
PNG image data, 263 x 339, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\930D9B79.png
|
PNG image data, 253 x 56, 8-bit/color RGB, non-interlaced
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\wbem\WMIC.exe
|
wmic process call create "mshta C:\ProgramData\MqscKrfE.rtf"
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\wbem\WMIC.exe
|
wmic process call create "mshta C:\ProgramData\MqscKrfE.rtf"
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\System32\mshta.exe
|
mshta C:\ProgramData\MqscKrfE.rtf
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://roaming.edog.
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://api.aadrm.com
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://api.addins.store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://outlook.office365.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 101 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
136.144.181.174
|
unknown
|
Netherlands
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
},;
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
~,;
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
RemoteClearDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
|
Last
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
FilePath
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
StartDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
EndDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Properties
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Url
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
LastClean
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableWinHttpCertAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableIsOwnerRegex
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableSessionAwareHttpClose
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALForExtendedApps
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALSetSilentAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableGuestCredProvider
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableOstringReplace
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\230EA
|
230EA
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSForms
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSComctlLib
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
.!;
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
%p,
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2DAE4
|
2DAE4
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
cw,
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
There are 39 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1B7E0E20000
|
unkown image
|
page read and write
|
|
|
|
7DF47D690000
|
unkown image
|
page readonly
|
|
|
|
1A30747A000
|
unkown
|
page read and write
|
|
|
|
1C164970000
|
unkown
|
page read and write
|
|
|
|
23935F90000
|
unkown
|
page read and write
|
|
|
|
1F94A940000
|
unkown image
|
page readonly
|
|
|
|
23931740000
|
unkown image
|
page readonly
|
|
|
|
7FF571A57000
|
unkown image
|
page readonly
|
|
|
|
1D33D420000
|
unkown image
|
page readonly
|
|
|
|
1F949900000
|
unkown
|
page read and write
|
|
|
|
1D6A7977000
|
unkown
|
page read and write
|
|
|
|
1D33D670000
|
unkown
|
page read and write
|
|
|
|
23935F0E000
|
unkown
|
page read and write
|
|
|
|
7FF569A5C000
|
unkown image
|
page readonly
|
|
|
|
1D6A7989000
|
unkown
|
page read and write
|
|
|
|
23930C70000
|
unkown image
|
page readonly
|
|
|
|
7FF542952000
|
unkown image
|
page readonly
|
|
|
|
1D6A7969000
|
unkown
|
page read and write
|
|
|
|
7FF5C91BF000
|
unkown image
|
page readonly
|
|
|
|
1F149450000
|
heap private
|
page read and write
|
|
|
|
2EB6000
|
unkown
|
page read and write
|
|
|
|
67261FD000
|
stack
|
page read and write
|
|
|
|
23930663000
|
unkown
|
page read and write
|
|
|
|
1D33D550000
|
unkown image
|
page readonly
|
|
|
|
8AC127E000
|
stack
|
page read and write
|
|
|
|
1B7E100F000
|
unkown
|
page read and write
|
|
|
|
1F147BE0000
|
unkown
|
page read and write
|
|
|
|
2D40000
|
unkown image
|
page read and write
|
|
|
|
23930580000
|
unkown image
|
page read and write
|
|
|
|
7FF531241000
|
unkown image
|
page readonly
|
|
|
|
7FF5425FC000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6F10000
|
unkown image
|
page readonly
|
|
|
|
D5CD3FE000
|
stack
|
page read and write
|
|
|
|
33F3000
|
heap private
|
page read and write
|
|
|
|
1D6A7978000
|
unkown
|
page read and write
|
|
|
|
23931640000
|
unkown
|
page read and write
|
|
|
|
7FF5C90AE000
|
unkown image
|
page readonly
|
|
|
|
1D6A7975000
|
unkown
|
page read and write
|
|
|
|
31EE000
|
stack
|
page read and write
|
|
|
|
7FF5C9151000
|
unkown image
|
page readonly
|
|
|
|
1F9497C4000
|
unkown
|
page read and write
|
|
|
|
7FF5C90A6000
|
unkown image
|
page readonly
|
|
|
|
23935CE2000
|
unkown
|
page read and write
|
|
|
|
7FF5662EE000
|
unkown image
|
page readonly
|
|
|
|
1F949938000
|
unkown
|
page read and write
|
|
|
|
7FF53166D000
|
unkown image
|
page readonly
|
|
|
|
1A30747C000
|
unkown
|
page read and write
|
|
|
|
1D6A7108000
|
unkown
|
page read and write
|
|
|
|
7FF571647000
|
unkown image
|
page readonly
|
|
|
|
28F1000
|
unkown image
|
page readonly
|
|
|
|
1D6A798D000
|
unkown
|
page read and write
|
|
|
|
7FF531697000
|
unkown image
|
page readonly
|
|
|
|
1F147B16000
|
unkown
|
page read and write
|
|
|
|
7FF5425EB000
|
unkown image
|
page readonly
|
|
|
|
1F94A4B0000
|
unkown
|
page read and write
|
|
|
|
1D6A797C000
|
unkown
|
page read and write
|
|
|
|
1F94A6F0000
|
unkown
|
page read and write
|
|
|
|
239305C0000
|
unkown image
|
page readonly
|
|
|
|
1D6A799F000
|
unkown
|
page read and write
|
|
|
|
1F94A4B8000
|
unkown
|
page read and write
|
|
|
|
7FF5D504D000
|
unkown image
|
page readonly
|
|
|
|
7FF566243000
|
unkown image
|
page readonly
|
|
|
|
7FF571B61000
|
unkown image
|
page readonly
|
|
|
|
1F147A86000
|
heap default
|
page read and write
|
|
|
|
1D6A7802000
|
unkown
|
page read and write
|
|
|
|
CA6414F000
|
stack
|
page read and write
|
|
|
|
29F1000
|
unkown image
|
page readonly
|
|
|
|
32B0000
|
unkown
|
page read and write
|
|
|
|
7FF542B93000
|
unkown image
|
page readonly
|
|
|
|
7FF5316B3000
|
unkown image
|
page readonly
|
|
|
|
1D6A7E02000
|
unkown
|
page read and write
|
|
|
|
7DF5D6F30000
|
unkown image
|
page readonly
|
|
|
|
23930DC1000
|
unkown
|
page read and write
|
|
|
|
7FF56D67D000
|
unkown image
|
page readonly
|
|
|
|
7FF542C71000
|
unkown image
|
page readonly
|
|
|
|
1F9498DC000
|
unkown
|
page read and write
|
|
|
|
1D6A7987000
|
unkown
|
page read and write
|
|
|
|
1D6A7969000
|
unkown
|
page read and write
|
|
|
|
2395B500000
|
unkown
|
page read and write
|
|
|
|
1F9498F4000
|
unkown
|
page read and write
|
|
|
|
1F147C30000
|
unkown image
|
page readonly
|
|
|
|
CA63E4D000
|
stack
|
page read and write
|
|
|
|
7FF5D4FF3000
|
unkown image
|
page readonly
|
|
|
|
292B000
|
unkown image
|
page readonly
|
|
|
|
7FF5C90C2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C92A1000
|
unkown image
|
page readonly
|
|
|
|
3287000
|
unkown
|
page read and write
|
|
|
|
7DF577852000
|
unkown image
|
page readonly
|
|
|
|
1D33D400000
|
unkown image
|
page read and write
|
|
|
|
7FF5D50D1000
|
unkown image
|
page readonly
|
|
|
|
7FF5C91DE000
|
unkown image
|
page readonly
|
|
|
|
1C163D27000
|
heap default
|
page read and write
|
|
|
|
1D6A7992000
|
unkown
|
page read and write
|
|
|
|
23935F00000
|
unkown
|
page read and write
|
|
|
|
2A5B000
|
unkown image
|
page readonly
|
|
|
|
2395B44D000
|
unkown
|
page read and write
|
|
|
|
2AE6000
|
unkown image
|
page readonly
|
|
|
|
7FF5C89F9000
|
unkown image
|
page readonly
|
|
|
|
7DF574350000
|
unkown image
|
page readonly
|
|
|
|
1F9497DD000
|
unkown
|
page read and write
|
|
|
|
7FF5664A3000
|
unkown image
|
page readonly
|
|
|
|
1F94A4B7000
|
unkown
|
page read and write
|
|
|
|
1D33D64A000
|
unkown
|
page read and write
|
|
|
|
7DF4E0C00000
|
unkown image
|
page readonly
|
|
|
|
1000FF000
|
stack
|
page read and write
|
|
|
|
7FF571B44000
|
unkown image
|
page readonly
|
|
|
|
7FF542A92000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4FF0000
|
unkown image
|
page readonly
|
|
|
|
7FF542C64000
|
unkown image
|
page readonly
|
|
|
|
7FF542A8F000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6F22000
|
unkown image
|
page readonly
|
|
|
|
1F94A4B0000
|
unkown
|
page read and write
|
|
|
|
7FF5C8F94000
|
unkown image
|
page readonly
|
|
|
|
327F000
|
unkown
|
page read and write
|
|
|
|
4F8F2F7000
|
stack
|
page read and write
|
|
|
|
7FF5C8A34000
|
unkown image
|
page readonly
|
|
|
|
7FF566617000
|
unkown image
|
page readonly
|
|
|
|
1D6A7922000
|
unkown
|
page read and write
|
|
|
|
7FF531732000
|
unkown image
|
page readonly
|
|
|
|
7F8F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5429D1000
|
unkown image
|
page readonly
|
|
|
|
1C163D67000
|
unkown
|
page read and write
|
|
|
|
6725EFB000
|
stack
|
page read and write
|
|
|
|
7FF5D4FFE000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2D42000
|
unkown image
|
page readonly
|
|
|
|
6944D79000
|
stack
|
page read and write
|
|
|
|
1F94A6C2000
|
heap private
|
page read and write
|
|
|
|
7FF569313000
|
unkown image
|
page readonly
|
|
|
|
1D6A7058000
|
unkown
|
page read and write
|
|
|
|
8AC0FEE000
|
stack
|
page read and write
|
|
|
|
3D30000
|
unkown image
|
page readonly
|
|
|
|
1F949918000
|
unkown
|
page read and write
|
|
|
|
1F9498D8000
|
unkown
|
page read and write
|
|
|
|
1C164BE0000
|
unkown
|
page read and write
|
|
|
|
7FF542C59000
|
unkown image
|
page readonly
|
|
|
|
7DF577870000
|
unkown image
|
page readonly
|
|
|
|
1C164900000
|
unkown
|
page read and write
|
|
|
|
2A11000
|
unkown image
|
page readonly
|
|
|
|
1F949914000
|
unkown
|
page read and write
|
|
|
|
7DF57B362000
|
unkown image
|
page readonly
|
|
|
|
1C1648F0000
|
unkown
|
page read and write
|
|
|
|
7FF571B51000
|
unkown image
|
page readonly
|
|
|
|
1F949921000
|
unkown
|
page read and write
|
|
|
|
1B7E0FA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5665F9000
|
unkown image
|
page readonly
|
|
|
|
7FF542A39000
|
unkown image
|
page readonly
|
|
|
|
3271000
|
unkown
|
page read and write
|
|
|
|
1A307500000
|
unkown
|
page read and write
|
|
|
|
7FF542BD3000
|
unkown image
|
page readonly
|
|
|
|
7FF5C91E7000
|
unkown image
|
page readonly
|
|
|
|
2D50000
|
unkown image
|
page readonly
|
|
|
|
3120000
|
heap default
|
page read and write
|
|
|
|
1A307330000
|
unkown image
|
page readonly
|
|
|
|
1D6A6E30000
|
unkown image
|
page readonly
|
|
|
|
7FF566495000
|
unkown image
|
page readonly
|
|
|
|
7FF569B10000
|
unkown image
|
page readonly
|
|
|
|
7FF54243C000
|
unkown image
|
page readonly
|
|
|
|
7DF479230000
|
unkown image
|
page readonly
|
|
|
|
2395B980000
|
unkown image
|
page readonly
|
|
|
|
1B7E1006000
|
unkown
|
page read and write
|
|
|
|
7DF53F3C0000
|
unkown image
|
page readonly
|
|
|
|
2395B483000
|
unkown
|
page read and write
|
|
|
|
2395B400000
|
unkown
|
page read and write
|
|
|
|
1D33D629000
|
unkown
|
page read and write
|
|
|
|
7FF5427F7000
|
unkown image
|
page readonly
|
|
|
|
28F6000
|
unkown image
|
page readonly
|
|
|
|
7FF5C91A7000
|
unkown image
|
page readonly
|
|
|
|
7FF531669000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4F2B000
|
unkown image
|
page readonly
|
|
|
|
6944EFE000
|
stack
|
page read and write
|
|
|
|
7FF542C81000
|
unkown image
|
page readonly
|
|
|
|
1B7E11E0000
|
heap private
|
page read and write
|
|
|
|
6D53CFE000
|
stack
|
page read and write
|
|
|
|
7DF574370000
|
unkown image
|
page readonly
|
|
|
|
1C163C80000
|
unkown image
|
page readonly
|
|
|
|
1F949930000
|
unkown
|
page read and write
|
|
|
|
1D6A70E7000
|
unkown
|
page read and write
|
|
|
|
7FF571ABE000
|
unkown image
|
page readonly
|
|
|
|
7FF56D623000
|
unkown image
|
page readonly
|
|
|
|
7FF5312D6000
|
unkown image
|
page readonly
|
|
|
|
7DF57B362000
|
unkown image
|
page readonly
|
|
|
|
4F8F7FF000
|
stack
|
page read and write
|
|
|
|
2A3B000
|
unkown image
|
page readonly
|
|
|
|
7FF542C7A000
|
unkown image
|
page readonly
|
|
|
|
7FF566571000
|
unkown image
|
page readonly
|
|
|
|
1C164BC0000
|
unkown
|
page readonly
|
|
|
|
7FF569B6A000
|
unkown image
|
page readonly
|
|
|
|
23930695000
|
unkown
|
page read and write
|
|
|
|
1D6A704E000
|
unkown
|
page read and write
|
|
|
|
7FF531761000
|
unkown image
|
page readonly
|
|
|
|
7FF542A35000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6F30000
|
unkown image
|
page readonly
|
|
|
|
38B0000
|
unkown
|
page read and write
|
|
|
|
7FF566434000
|
unkown image
|
page readonly
|
|
|
|
7FF57194B000
|
unkown image
|
page readonly
|
|
|
|
23930E00000
|
unkown
|
page read and write
|
|
|
|
1D6A7E02000
|
unkown
|
page read and write
|
|
|
|
1F94A6CA000
|
heap private
|
page read and write
|
|
|
|
7DF5508F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C9056000
|
unkown image
|
page readonly
|
|
|
|
6D540F7000
|
stack
|
page read and write
|
|
|
|
23935F20000
|
unkown
|
page read and write
|
|
|
|
7DF57F7D2000
|
unkown image
|
page readonly
|
|
|
|
7F900000
|
unkown image
|
page readonly
|
|
|
|
1A307230000
|
unkown image
|
page readonly
|
|
|
|
1D6A7969000
|
unkown
|
page read and write
|
|
|
|
7FF542B5A000
|
unkown image
|
page readonly
|
|
|
|
1D6A7987000
|
unkown
|
page read and write
|
|
|
|
23935B94000
|
unkown
|
page read and write
|
|
|
|
7FF56D277000
|
unkown image
|
page readonly
|
|
|
|
7FF542AEC000
|
unkown image
|
page readonly
|
|
|
|
D5CD5FF000
|
stack
|
page read and write
|
|
|
|
7DF5E2D30000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8AB8000
|
unkown image
|
page readonly
|
|
|
|
1D33D63C000
|
unkown
|
page read and write
|
|
|
|
7F902000
|
unkown image
|
page readonly
|
|
|
|
23935C47000
|
unkown
|
page read and write
|
|
|
|
1D33D649000
|
unkown
|
page read and write
|
|
|
|
8AC147B000
|
stack
|
page read and write
|
|
|
|
7FF542A4D000
|
unkown image
|
page readonly
|
|
|
|
7FF5D50BA000
|
unkown image
|
page readonly
|
|
|
|
1D6A7029000
|
unkown
|
page read and write
|
|
|
|
7FF566441000
|
unkown image
|
page readonly
|
|
|
|
1F147B70000
|
unkown
|
page read and write
|
|
|
|
7DF57F7E0000
|
unkown image
|
page readonly
|
|
|
|
32A2000
|
unkown
|
page read and write
|
|
|
|
7DF577860000
|
unkown image
|
page readonly
|
|
|
|
100479000
|
stack
|
page read and write
|
|
|
|
1F94A82A000
|
unkown
|
page read and write
|
|
|
|
7DF57B372000
|
unkown image
|
page readonly
|
|
|
|
23935CAF000
|
unkown
|
page read and write
|
|
|
|
7FF531530000
|
unkown image
|
page readonly
|
|
|
|
1F94A81D000
|
unkown
|
page read and write
|
|
|
|
7DF53F3D0000
|
unkown image
|
page readonly
|
|
|
|
1F147930000
|
unkown image
|
page readonly
|
|
|
|
1D6A6F80000
|
unkown
|
page read and write
|
|
|
|
1C163D20000
|
heap default
|
page read and write
|
|
|
|
1F94990C000
|
unkown
|
page read and write
|
|
|
|
1A307200000
|
unkown image
|
page readonly
|
|
|
|
7FF5664A5000
|
unkown image
|
page readonly
|
|
|
|
1F147B0E000
|
heap default
|
page read and write
|
|
|
|
1D6A70DD000
|
unkown
|
page read and write
|
|
|
|
7FF5C911C000
|
unkown image
|
page readonly
|
|
|
|
7FF56D60D000
|
unkown image
|
page readonly
|
|
|
|
4F8F3FA000
|
stack
|
page read and write
|
|
|
|
7FF5666EE000
|
unkown image
|
page readonly
|
|
|
|
7FF5C90BA000
|
unkown image
|
page readonly
|
|
|
|
23931101000
|
unkown
|
page read and write
|
|
|
|
1D6A79B3000
|
unkown
|
page read and write
|
|
|
|
1B7E0F50000
|
unkown
|
page read and write
|
|
|
|
7FF569479000
|
unkown image
|
page readonly
|
|
|
|
1C163C70000
|
unkown
|
page read and write
|
|
|
|
7DF57F7E0000
|
unkown image
|
page readonly
|
|
|
|
1F94A430000
|
unkown
|
page read and write
|
|
|
|
1A307513000
|
unkown
|
page read and write
|
|
|
|
1D6A7070000
|
unkown
|
page read and write
|
|
|
|
7FF5C9181000
|
unkown image
|
page readonly
|
|
|
|
7FF5D50A9000
|
unkown image
|
page readonly
|
|
|
|
1F94A818000
|
unkown
|
page read and write
|
|
|
|
1D6A7998000
|
unkown
|
page read and write
|
|
|
|
2ADB000
|
unkown image
|
page readonly
|
|
|
|
28FF000
|
unkown image
|
page readonly
|
|
|
|
1B7E0E40000
|
unkown image
|
page readonly
|
|
|
|
23935CEA000
|
unkown
|
page read and write
|
|
|
|
1F147AD7000
|
unkown
|
page read and write
|
|
|
|
7F8F2000
|
unkown image
|
page readonly
|
|
|
|
329A000
|
unkown
|
page read and write
|
|
|
|
7DF53F3D2000
|
unkown image
|
page readonly
|
|
|
|
4F8FCFC000
|
stack
|
page read and write
|
|
|
|
CA63D4F000
|
stack
|
page read and write
|
|
|
|
7DF475720000
|
unkown image
|
page readonly
|
|
|
|
38BD000
|
unkown
|
page read and write
|
|
|
|
1D6A70FA000
|
unkown
|
page read and write
|
|
|
|
1D6A7000000
|
unkown
|
page read and write
|
|
|
|
1F94A44E000
|
unkown
|
page read and write
|
|
|
|
23930DE3000
|
unkown
|
page read and write
|
|
|
|
7DF53F3E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D502E000
|
unkown image
|
page readonly
|
|
|
|
4F8FDFC000
|
stack
|
page read and write
|
|
|
|
7FF569AFF000
|
unkown image
|
page readonly
|
|
|
|
1F149470000
|
heap private
|
page read and write
|
|
|
|
32AE000
|
unkown
|
page read and write
|
|
|
|
7FF5C91D7000
|
unkown image
|
page readonly
|
|
|
|
7FF571A73000
|
unkown image
|
page readonly
|
|
|
|
7FF571AB3000
|
unkown image
|
page readonly
|
|
|
|
7DF57B370000
|
unkown image
|
page readonly
|
|
|
|
7FF542BA7000
|
unkown image
|
page readonly
|
|
|
|
7FF5D50B4000
|
unkown image
|
page readonly
|
|
|
|
1D6A70EA000
|
unkown
|
page read and write
|
|
|
|
7FF5666DA000
|
unkown image
|
page readonly
|
|
|
|
7FF5665E7000
|
unkown image
|
page readonly
|
|
|
|
1F949C30000
|
unkown
|
page read and write
|
|
|
|
7FF56D6EA000
|
unkown image
|
page readonly
|
|
|
|
23935B80000
|
unkown
|
page read and write
|
|
|
|
2A56000
|
unkown image
|
page readonly
|
|
|
|
23930DE0000
|
unkown
|
page read and write
|
|
|
|
7FF569324000
|
unkown image
|
page readonly
|
|
|
|
1C163D19000
|
heap private
|
page read and write
|
|
|
|
23935F21000
|
unkown
|
page read and write
|
|
|
|
1F94995C000
|
unkown
|
page read and write
|
|
|
|
1B7E100F000
|
unkown
|
page read and write
|
|
|
|
4F8F4FD000
|
stack
|
page read and write
|
|
|
|
1D6A703C000
|
unkown
|
page read and write
|
|
|
|
7FF530E34000
|
unkown image
|
page readonly
|
|
|
|
1F949960000
|
unkown
|
page read and write
|
|
|
|
2927000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6F12000
|
unkown image
|
page readonly
|
|
|
|
1F94EDE2000
|
unkown
|
page read and write
|
|
|
|
32A3000
|
unkown
|
page read and write
|
|
|
|
7FF5D4EA0000
|
unkown image
|
page readonly
|
|
|
|
7DF5508E2000
|
unkown image
|
page readonly
|
|
|
|
32A2000
|
unkown
|
page read and write
|
|
|
|
2395B508000
|
unkown
|
page read and write
|
|
|
|
7FF569B4E000
|
unkown image
|
page readonly
|
|
|
|
1F94A443000
|
unkown
|
page read and write
|
|
|
|
7FF5663B7000
|
unkown image
|
page readonly
|
|
|
|
7FF531744000
|
unkown image
|
page readonly
|
|
|
|
7FF5662C0000
|
unkown image
|
page readonly
|
|
|
|
7FF542BA3000
|
unkown image
|
page readonly
|
|
|
|
1F94994C000
|
unkown
|
page read and write
|
|
|
|
1A307429000
|
unkown
|
page read and write
|
|
|
|
2A29000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2D30000
|
unkown image
|
page readonly
|
|
|
|
1F94A44A000
|
unkown
|
page read and write
|
|
|
|
1F949910000
|
unkown
|
page read and write
|
|
|
|
7FF571A6D000
|
unkown image
|
page readonly
|
|
|
|
239306A0000
|
unkown
|
page read and write
|
|
|
|
7FF5D4FD9000
|
unkown image
|
page readonly
|
|
|
|
7FF5315B5000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8EAC000
|
unkown image
|
page readonly
|
|
|
|
7FF5665CE000
|
unkown image
|
page readonly
|
|
|
|
1D6A7056000
|
unkown
|
page read and write
|
|
|
|
7FF56D701000
|
unkown image
|
page readonly
|
|
|
|
7FF5664BD000
|
unkown image
|
page readonly
|
|
|
|
7FF5663FB000
|
unkown image
|
page readonly
|
|
|
|
23930655000
|
unkown
|
page read and write
|
|
|
|
7FF57175E000
|
unkown image
|
page readonly
|
|
|
|
7FF56D60F000
|
unkown image
|
page readonly
|
|
|
|
2A26000
|
unkown image
|
page readonly
|
|
|
|
2ABF000
|
unkown image
|
page readonly
|
|
|
|
10007A000
|
unkown
|
page read and write
|
|
|
|
4F8FB7F000
|
stack
|
page read and write
|
|
|
|
2395B513000
|
unkown
|
page read and write
|
|
|
|
1D33DB80000
|
unkown image
|
page readonly
|
|
|
|
1D33DA00000
|
unkown image
|
page readonly
|
|
|
|
1D6A7988000
|
unkown
|
page read and write
|
|
|
|
1D6A79B6000
|
unkown
|
page read and write
|
|
|
|
1D6A6FF0000
|
unkown
|
page read and write
|
|
|
|
CA6424F000
|
stack
|
page read and write
|
|
|
|
324E000
|
unkown
|
page read and write
|
|
|
|
7FF5C91FB000
|
unkown image
|
page readonly
|
|
|
|
1F94A48E000
|
unkown
|
page read and write
|
|
|
|
7FF569B42000
|
unkown image
|
page readonly
|
|
|
|
1B7E0E60000
|
unkown image
|
page readonly
|
|
|
|
7FF5314E6000
|
unkown image
|
page readonly
|
|
|
|
1F149474000
|
heap private
|
page read and write
|
|
|
|
1D6A797B000
|
unkown
|
page read and write
|
|
|
|
1D6A7027000
|
unkown
|
page read and write
|
|
|
|
7DF57B360000
|
unkown image
|
page readonly
|
|
|
|
1B7E13F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4F25000
|
unkown image
|
page readonly
|
|
|
|
7FF5C9237000
|
unkown image
|
page readonly
|
|
|
|
1D6A6E50000
|
unkown image
|
page readonly
|
|
|
|
2395B390000
|
unkown
|
page read and write
|
|
|
|
7FF571A6F000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4FDD000
|
unkown image
|
page readonly
|
|
|
|
7FF54298B000
|
unkown image
|
page readonly
|
|
|
|
1D6A7977000
|
unkown
|
page read and write
|
|
|
|
7FF5C8F32000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8F82000
|
unkown image
|
page readonly
|
|
|
|
32AE000
|
unkown
|
page read and write
|
|
|
|
E07000
|
unkown image
|
page readonly
|
|
|
|
7F8F0000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6F20000
|
unkown image
|
page readonly
|
|
|
|
7FF569AFD000
|
unkown image
|
page readonly
|
|
|
|
7FF5C9227000
|
unkown image
|
page readonly
|
|
|
|
1D6A797F000
|
unkown
|
page read and write
|
|
|
|
1D33D68A000
|
unkown
|
page read and write
|
|
|
|
1D6A7972000
|
unkown
|
page read and write
|
|
|
|
23935C2E000
|
unkown
|
page read and write
|
|
|
|
23935B40000
|
unkown
|
page read and write
|
|
|
|
23930641000
|
unkown
|
page read and write
|
|
|
|
7FF5C91BD000
|
unkown image
|
page readonly
|
|
|
|
23935AC0000
|
unkown
|
page read and write
|
|
|
|
1F94A440000
|
unkown
|
page read and write
|
|
|
|
1B7E0FE0000
|
heap default
|
page read and write
|
|
|
|
2A01000
|
unkown image
|
page readonly
|
|
|
|
1D33DE02000
|
unkown
|
page read and write
|
|
|
|
7FF566476000
|
unkown image
|
page readonly
|
|
|
|
1D6A7985000
|
unkown
|
page read and write
|
|
|
|
7FF542BFA000
|
unkown image
|
page readonly
|
|
|
|
7FF5C90AA000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4CCE000
|
unkown image
|
page readonly
|
|
|
|
7FF542C80000
|
unkown image
|
page readonly
|
|
|
|
4F8F8FE000
|
stack
|
page read and write
|
|
|
|
7DF5D6F12000
|
unkown image
|
page readonly
|
|
|
|
1F147A59000
|
heap default
|
page read and write
|
|
|
|
1004FE000
|
stack
|
page read and write
|
|
|
|
23935B30000
|
unkown
|
page read and write
|
|
|
|
7FF5666C2000
|
unkown image
|
page readonly
|
|
|
|
7DF577860000
|
unkown image
|
page readonly
|
|
|
|
7F8F2000
|
unkown image
|
page readonly
|
|
|
|
1F147B4D000
|
heap default
|
page read and write
|
|
|
|
1D6A7981000
|
unkown
|
page read and write
|
|
|
|
7FF5D504A000
|
unkown image
|
page readonly
|
|
|
|
1A307413000
|
unkown
|
page read and write
|
|
|
|
1F1493F0000
|
unkown
|
page read and write
|
|
|
|
7FF542354000
|
unkown image
|
page readonly
|
|
|
|
2395B240000
|
unkown image
|
page readonly
|
|
|
|
7FF5719BB000
|
unkown image
|
page readonly
|
|
|
|
7FF569BF1000
|
unkown image
|
page readonly
|
|
|
|
23935FB0000
|
unkown
|
page read and write
|
|
|
|
23935D00000
|
unkown
|
page read and write
|
|
|
|
23935C5E000
|
unkown
|
page read and write
|
|
|
|
7FF56998A000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8D73000
|
unkown image
|
page readonly
|
|
|
|
1D6A79A2000
|
unkown
|
page read and write
|
|
|
|
7DF53F3C0000
|
unkown image
|
page readonly
|
|
|
|
23935F70000
|
unkown
|
page read and write
|
|
|
|
33F2000
|
heap private
|
page read and write
|
|
|
|
7FF569315000
|
unkown image
|
page readonly
|
|
|
|
6944E79000
|
stack
|
page read and write
|
|
|
|
7F900000
|
unkown image
|
page readonly
|
|
|
|
7FF571B61000
|
unkown image
|
page readonly
|
|
|
|
326E000
|
unkown
|
page read and write
|
|
|
|
7FF566404000
|
unkown image
|
page readonly
|
|
|
|
23931750000
|
unkown image
|
page readonly
|
|
|
|
7FF531657000
|
unkown image
|
page readonly
|
|
|
|
1F949908000
|
unkown
|
page read and write
|
|
|
|
7FF5D4E81000
|
unkown image
|
page readonly
|
|
|
|
1F147AC0000
|
heap default
|
page read and write
|
|
|
|
23935F08000
|
unkown
|
page read and write
|
|
|
|
7FF542A97000
|
unkown image
|
page readonly
|
|
|
|
D5CD4F7000
|
stack
|
page read and write
|
|
|
|
7FF5D4EDF000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4FC7000
|
unkown image
|
page readonly
|
|
|
|
3274000
|
unkown
|
page read and write
|
|
|
|
2395B44B000
|
unkown
|
page read and write
|
|
|
|
1D6A6E60000
|
unkown image
|
page readonly
|
|
|
|
1D6A796B000
|
unkown
|
page read and write
|
|
|
|
7FF5C920E000
|
unkown image
|
page readonly
|
|
|
|
1D6A70A5000
|
unkown
|
page read and write
|
|
|
|
1F94A439000
|
unkown
|
page read and write
|
|
|
|
23930D60000
|
unkown image
|
page read and write
|
|
|
|
7DF5508F0000
|
unkown image
|
page readonly
|
|
|
|
23935B50000
|
unkown
|
page read and write
|
|
|
|
1F147AE6000
|
heap default
|
page read and write
|
|
|
|
23931AC0000
|
unkown
|
page read and write
|
|
|
|
1F94A4B8000
|
unkown
|
page read and write
|
|
|
|
7FF5C9231000
|
unkown image
|
page readonly
|
|
|
|
7FF5C91B9000
|
unkown image
|
page readonly
|
|
|
|
7FF569BE1000
|
unkown image
|
page readonly
|
|
|
|
2393068E000
|
unkown
|
page read and write
|
|
|
|
1D33D64E000
|
unkown
|
page read and write
|
|
|
|
7FF571ADA000
|
unkown image
|
page readonly
|
|
|
|
3274000
|
unkown
|
page read and write
|
|
|
|
6944C7D000
|
stack
|
page read and write
|
|
|
|
7FF5316DA000
|
unkown image
|
page readonly
|
|
|
|
7FF571B39000
|
unkown image
|
page readonly
|
|
|
|
7FF569BDA000
|
unkown image
|
page readonly
|
|
|
|
7FF569B3B000
|
unkown image
|
page readonly
|
|
|
|
7FF565EA8000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2D32000
|
unkown image
|
page readonly
|
|
|
|
1D6A796E000
|
unkown
|
page read and write
|
|
|
|
7FF56D67A000
|
unkown image
|
page readonly
|
|
|
|
23931560000
|
unkown image
|
page read and write
|
|
|
|
1F94A4B3000
|
unkown
|
page read and write
|
|
|
|
2EC6000
|
unkown
|
page read and write
|
|
|
|
1F94A825000
|
unkown
|
page read and write
|
|
|
|
4F8F6FB000
|
stack
|
page read and write
|
|
|
|
7FF56D64B000
|
unkown image
|
page readonly
|
|
|
|
7FF542B8D000
|
unkown image
|
page readonly
|
|
|
|
7FF542A6B000
|
unkown image
|
page readonly
|
|
|
|
239305D0000
|
unkown image
|
page readonly
|
|
|
|
1F147B12000
|
heap default
|
page read and write
|
|
|
|
7FF569BE5000
|
unkown image
|
page readonly
|
|
|
|
4F8FBFF000
|
stack
|
page read and write
|
|
|
|
1F147AF4000
|
heap default
|
page read and write
|
|
|
|
1D33D64B000
|
unkown
|
page read and write
|
|
|
|
23935C8C000
|
unkown
|
page read and write
|
|
|
|
1D6A7997000
|
unkown
|
page read and write
|
|
|
|
1F147AE6000
|
unkown
|
page read and write
|
|
|
|
1D6A7985000
|
unkown
|
page read and write
|
|
|
|
1F94A4B3000
|
unkown
|
page read and write
|
|
|
|
3251000
|
unkown
|
page read and write
|
|
|
|
7FF566400000
|
unkown image
|
page readonly
|
|
|
|
1D33D657000
|
unkown
|
page read and write
|
|
|
|
7FF5719E1000
|
unkown image
|
page readonly
|
|
|
|
2D50000
|
unkown image
|
page readonly
|
|
|
|
23930702000
|
unkown
|
page read and write
|
|
|
|
7FF5D5023000
|
unkown image
|
page readonly
|
|
|
|
7FF542C6A000
|
unkown image
|
page readonly
|
|
|
|
1C163CA0000
|
unkown image
|
page readonly
|
|
|
|
1F94997C000
|
unkown
|
page read and write
|
|
|
|
6725CFE000
|
stack
|
page read and write
|
|
|
|
7FF56D65E000
|
unkown image
|
page readonly
|
|
|
|
6D53FFE000
|
stack
|
page read and write
|
|
|
|
7DF577862000
|
unkown image
|
page readonly
|
|
|
|
7FF5D501B000
|
unkown image
|
page readonly
|
|
|
|
23930AE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4E56000
|
unkown image
|
page readonly
|
|
|
|
23930590000
|
heap private
|
page read and write
|
|
|
|
23935E00000
|
unkown
|
page read and write
|
|
|
|
7FF542B89000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8EE2000
|
unkown image
|
page readonly
|
|
|
|
1D6A70AF000
|
unkown
|
page read and write
|
|
|
|
4F8EF1E000
|
stack
|
page read and write
|
|
|
|
1D6A7113000
|
unkown
|
page read and write
|
|
|
|
1D6A7088000
|
unkown
|
page read and write
|
|
|
|
1D33D653000
|
unkown
|
page read and write
|
|
|
|
6D541FF000
|
stack
|
page read and write
|
|
|
|
7FF571A80000
|
unkown image
|
page readonly
|
|
|
|
1A307800000
|
unkown image
|
page readonly
|
|
|
|
6D53C7C000
|
unkown
|
page read and write
|
|
|
|
1D6A798C000
|
unkown
|
page read and write
|
|
|
|
7FF5316BE000
|
unkown image
|
page readonly
|
|
|
|
7FF566667000
|
unkown image
|
page readonly
|
|
|
|
23930668000
|
unkown
|
page read and write
|
|
|
|
7FF5717E5000
|
unkown image
|
page readonly
|
|
|
|
1C163CB0000
|
unkown image
|
page readonly
|
|
|
|
1D6A7E00000
|
unkown
|
page read and write
|
|
|
|
1F9497D9000
|
unkown
|
page read and write
|
|
|
|
10017F000
|
stack
|
page read and write
|
|
|
|
1A307487000
|
unkown
|
page read and write
|
|
|
|
23930665000
|
unkown
|
page read and write
|
|
|
|
7FF566610000
|
unkown image
|
page readonly
|
|
|
|
1D6A79AD000
|
unkown
|
page read and write
|
|
|
|
7FF566627000
|
unkown image
|
page readonly
|
|
|
|
1F94A6D0000
|
unkown
|
page read and write
|
|
|
|
2395B43C000
|
unkown
|
page read and write
|
|
|
|
23930E02000
|
unkown
|
page read and write
|
|
|
|
7FF5664DB000
|
unkown image
|
page readonly
|
|
|
|
2395B800000
|
unkown image
|
page readonly
|
|
|
|
7FF56D6F5000
|
unkown image
|
page readonly
|
|
|
|
3270000
|
unkown
|
page read and write
|
|
|
|
1D6A7991000
|
unkown
|
page read and write
|
|
|
|
1F147920000
|
unkown image
|
page readonly
|
|
|
|
1C163C60000
|
unkown image
|
page read and write
|
|
|
|
1F147FC0000
|
unkown image
|
page readonly
|
|
|
|
23930F00000
|
unkown
|
page read and write
|
|
|
|
7FF5C90A2000
|
unkown image
|
page readonly
|
|
|
|
1D6A79D3000
|
unkown
|
page read and write
|
|
|
|
2395B48F000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A08000
|
unkown image
|
page readonly
|
|
|
|
7FF555B01000
|
unkown image
|
page readonly
|
|
|
|
524F000
|
stack
|
page read and write
|
|
|
|
23930F58000
|
unkown
|
page read and write
|
|
|
|
4F8F87E000
|
stack
|
page read and write
|
|
|
|
7DF57F7C0000
|
unkown image
|
page readonly
|
|
|
|
1F949AE0000
|
unkown image
|
page read and write
|
|
|
|
1F147960000
|
unkown image
|
page readonly
|
|
|
|
8AC167F000
|
stack
|
page read and write
|
|
|
|
1F147AEC000
|
unkown
|
page read and write
|
|
|
|
1D6A7055000
|
unkown
|
page read and write
|
|
|
|
29DE000
|
unkown image
|
page readonly
|
|
|
|
7FF542BAE000
|
unkown image
|
page readonly
|
|
|
|
2393062A000
|
unkown
|
page read and write
|
|
|
|
7FF542C52000
|
unkown image
|
page readonly
|
|
|
|
7FF56625E000
|
unkown image
|
page readonly
|
|
|
|
7FF5665C1000
|
unkown image
|
page readonly
|
|
|
|
1D6A70C2000
|
unkown
|
page read and write
|
|
|
|
7FF565E06000
|
unkown image
|
page readonly
|
|
|
|
23931730000
|
unkown image
|
page readonly
|
|
|
|
6944DFF000
|
stack
|
page read and write
|
|
|
|
7DF574362000
|
unkown image
|
page readonly
|
|
|
|
7FF5665DE000
|
unkown image
|
page readonly
|
|
|
|
7DF550900000
|
unkown image
|
page readonly
|
|
|
|
1D6A799F000
|
unkown
|
page read and write
|
|
|
|
1F94A4B3000
|
unkown
|
page read and write
|
|
|
|
23935D02000
|
unkown
|
page read and write
|
|
|
|
23930F59000
|
unkown
|
page read and write
|
|
|
|
1D6A7981000
|
unkown
|
page read and write
|
|
|
|
7FF569A07000
|
unkown image
|
page readonly
|
|
|
|
7FF566436000
|
unkown image
|
page readonly
|
|
|
|
4F8F9FA000
|
stack
|
page read and write
|
|
|
|
CA63AF7000
|
unkown
|
page read and write
|
|
|
|
7FF5C9282000
|
unkown image
|
page readonly
|
|
|
|
1B7E100F000
|
unkown
|
page read and write
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
33CE000
|
stack
|
page read and write
|
|
|
|
7DF472220000
|
unkown image
|
page readonly
|
|
|
|
7FF5718E6000
|
unkown image
|
page readonly
|
|
|
|
1A307200000
|
unkown image
|
page readonly
|
|
|
|
4F8FEFF000
|
stack
|
page read and write
|
|
|
|
1A30746C000
|
unkown
|
page read and write
|
|
|
|
1D33D613000
|
unkown
|
page read and write
|
|
|
|
1F147B19000
|
unkown
|
page read and write
|
|
|
|
1D33D450000
|
unkown image
|
page readonly
|
|
|
|
7FF566642000
|
unkown image
|
page readonly
|
|
|
|
7FF5C91B6000
|
unkown image
|
page readonly
|
|
|
|
1D6A7987000
|
unkown
|
page read and write
|
|
|
|
39B0000
|
unkown image
|
page readonly
|
|
|
|
1D6A799A000
|
unkown
|
page read and write
|
|
|
|
7FF531680000
|
unkown image
|
page readonly
|
|
|
|
7FF5C91D0000
|
unkown image
|
page readonly
|
|
|
|
239306AF000
|
unkown
|
page read and write
|
|
|
|
1D6A7977000
|
unkown
|
page read and write
|
|
|
|
7FF5313E5000
|
unkown image
|
page readonly
|
|
|
|
7FF542A50000
|
unkown image
|
page readonly
|
|
|
|
1F94A6C0000
|
heap private
|
page read and write
|
|
|
|
1A307220000
|
unkown image
|
page readonly
|
|
|
|
2395B220000
|
unkown image
|
page read and write
|
|
|
|
7DF57B360000
|
unkown image
|
page readonly
|
|
|
|
23930F13000
|
unkown
|
page read and write
|
|
|
|
7DF5508E0000
|
unkown image
|
page readonly
|
|
|
|
1C164C30000
|
unkown
|
page read and write
|
|
|
|
7FF53166F000
|
unkown image
|
page readonly
|
|
|
|
2395B44F000
|
unkown
|
page read and write
|
|
|
|
1F94A6C4000
|
heap private
|
page read and write
|
|
|
|
7FF5C9174000
|
unkown image
|
page readonly
|
|
|
|
1C163D15000
|
heap private
|
page read and write
|
|
|
|
7FF531683000
|
unkown image
|
page readonly
|
|
|
|
326E000
|
unkown
|
page read and write
|
|
|
|
2395B46C000
|
unkown
|
page read and write
|
|
|
|
7DF4D4DE0000
|
unkown image
|
page readonly
|
|
|
|
2AF2000
|
unkown image
|
page readonly
|
|
|
|
3230000
|
unkown
|
page read and write
|
|
|
|
7DF5508F2000
|
unkown image
|
page readonly
|
|
|
|
32AF000
|
unkown
|
page read and write
|
|
|
|
1F94A48C000
|
unkown
|
page read and write
|
|
|
|
1D33D570000
|
unkown
|
page read and write
|
|
|
|
7FF56D6D9000
|
unkown image
|
page readonly
|
|
|
|
23935C0F000
|
unkown
|
page read and write
|
|
|
|
7FF542761000
|
unkown image
|
page readonly
|
|
|
|
7FF5663E6000
|
unkown image
|
page readonly
|
|
|
|
1D33D708000
|
unkown
|
page read and write
|
|
|
|
7FF566603000
|
unkown image
|
page readonly
|
|
|
|
7FF5C92B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4EBB000
|
unkown image
|
page readonly
|
|
|
|
1D6A799A000
|
unkown
|
page read and write
|
|
|
|
1D6A6F60000
|
unkown image
|
page readonly
|
|
|
|
38B4000
|
unkown
|
page read and write
|
|
|
|
1D6A79CD000
|
unkown
|
page read and write
|
|
|
|
7FF53174A000
|
unkown image
|
page readonly
|
|
|
|
D5CD6FF000
|
stack
|
page read and write
|
|
|
|
7FF542B8F000
|
unkown image
|
page readonly
|
|
|
|
1F147FB0000
|
unkown image
|
page readonly
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
32AE000
|
unkown
|
page read and write
|
|
|
|
8AC0F6C000
|
unkown
|
page read and write
|
|
|
|
1D6A7985000
|
unkown
|
page read and write
|
|
|
|
32A3000
|
unkown
|
page read and write
|
|
|
|
1B7E0FF6000
|
heap default
|
page read and write
|
|
|
|
23935CE8000
|
unkown
|
page read and write
|
|
|
|
1D6A704B000
|
unkown
|
page read and write
|
|
|
|
1F147AEC000
|
heap default
|
page read and write
|
|
|
|
7FF542854000
|
unkown image
|
page readonly
|
|
|
|
1B7E0E40000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8EDE000
|
unkown image
|
page readonly
|
|
|
|
1A30743C000
|
unkown
|
page read and write
|
|
|
|
7FF569B6D000
|
unkown image
|
page readonly
|
|
|
|
5310000
|
unkown
|
page read and write
|
|
|
|
7FF5C8E5F000
|
unkown image
|
page readonly
|
|
|
|
1F9498C8000
|
unkown
|
page read and write
|
|
|
|
1A307455000
|
unkown
|
page read and write
|
|
|
|
7FF5719B5000
|
unkown image
|
page readonly
|
|
|
|
23935FB0000
|
unkown
|
page read and write
|
|
|
|
23930AD0000
|
unkown image
|
page readonly
|
|
|
|
2DF0000
|
unkown image
|
page readonly
|
|
|
|
7DF577850000
|
unkown image
|
page readonly
|
|
|
|
2AF8000
|
unkown image
|
page readonly
|
|
|
|
1D6A7996000
|
unkown
|
page read and write
|
|
|
|
7FF5D47A4000
|
unkown image
|
page readonly
|
|
|
|
1F949B30000
|
unkown
|
page read and write
|
|
|
|
1D6A7102000
|
unkown
|
page read and write
|
|
|
|
1F94A4B0000
|
unkown
|
page read and write
|
|
|
|
7FF5C9105000
|
unkown image
|
page readonly
|
|
|
|
7FF566575000
|
unkown image
|
page readonly
|
|
|
|
7FF5C91C3000
|
unkown image
|
page readonly
|
|
|
|
1D6A7998000
|
unkown
|
page read and write
|
|
|
|
8AC18FF000
|
stack
|
page read and write
|
|
|
|
7FF53168E000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2D40000
|
unkown image
|
page readonly
|
|
|
|
1C163D6E000
|
unkown
|
page read and write
|
|
|
|
7FF569AF6000
|
unkown image
|
page readonly
|
|
|
|
7DF57F7C2000
|
unkown image
|
page readonly
|
|
|
|
7FF571234000
|
unkown image
|
page readonly
|
|
|
|
1D6A6E30000
|
unkown image
|
page readonly
|
|
|
|
7FF542857000
|
unkown image
|
page readonly
|
|
|
|
1A307508000
|
unkown
|
page read and write
|
|
|
|
7DF577852000
|
unkown image
|
page readonly
|
|
|
|
1F147C20000
|
heap private
|
page read and write
|
|
|
|
7DF5D6F22000
|
unkown image
|
page readonly
|
|
|
|
1F94A6C7000
|
heap private
|
page read and write
|
|
|
|
6D53D7E000
|
stack
|
page read and write
|
|
|
|
7FF5665BE000
|
unkown image
|
page readonly
|
|
|
|
7FF5429C4000
|
unkown image
|
page readonly
|
|
|
|
7FF5666C9000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8EEA000
|
unkown image
|
page readonly
|
|
|
|
1D6A7989000
|
unkown
|
page read and write
|
|
|
|
7FF56D6E4000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4FDF000
|
unkown image
|
page readonly
|
|
|
|
7FF54287E000
|
unkown image
|
page readonly
|
|
|
|
1F94A49F000
|
unkown
|
page read and write
|
|
|
|
7FF5663D4000
|
unkown image
|
page readonly
|
|
|
|
1C163D6E000
|
unkown
|
page read and write
|
|
|
|
1F147930000
|
unkown image
|
page readonly
|
|
|
|
23935F24000
|
unkown
|
page read and write
|
|
|
|
7FF571911000
|
unkown image
|
page readonly
|
|
|
|
7FF5C909C000
|
unkown image
|
page readonly
|
|
|
|
1F94A4B7000
|
unkown
|
page read and write
|
|
|
|
23930713000
|
unkown
|
page read and write
|
|
|
|
1F94A49B000
|
unkown
|
page read and write
|
|
|
|
1C164BB0000
|
unkown
|
page read and write
|
|
|
|
29D7000
|
unkown image
|
page readonly
|
|
|
|
1D33D410000
|
heap private
|
page read and write
|
|
|
|
1B7E0FB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4F3C000
|
unkown image
|
page readonly
|
|
|
|
7FF5C90C7000
|
unkown image
|
page readonly
|
|
|
|
1C164310000
|
unkown image
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
1D6A79CD000
|
unkown
|
page read and write
|
|
|
|
7DF574360000
|
unkown image
|
page readonly
|
|
|
|
520E000
|
stack
|
page read and write
|
|
|
|
7FF5C929A000
|
unkown image
|
page readonly
|
|
|
|
1B7E0FF1000
|
unkown
|
page read and write
|
|
|
|
7FF56D6FA000
|
unkown image
|
page readonly
|
|
|
|
1D6A7975000
|
unkown
|
page read and write
|
|
|
|
7FF5662F5000
|
unkown image
|
page readonly
|
|
|
|
1D6A797F000
|
unkown
|
page read and write
|
|
|
|
23935C00000
|
unkown
|
page read and write
|
|
|
|
1D6A6E80000
|
heap default
|
page read and write
|
|
|
|
1F94A82E000
|
unkown
|
page read and write
|
|
|
|
1B7E11E5000
|
heap private
|
page read and write
|
|
|
|
7FF571B4A000
|
unkown image
|
page readonly
|
|
|
|
1F94A83A000
|
unkown
|
page read and write
|
|
|
|
1D6A7013000
|
unkown
|
page read and write
|
|
|
|
2A1A000
|
unkown image
|
page readonly
|
|
|
|
1A30744F000
|
unkown
|
page read and write
|
|
|
|
7FF5D50CA000
|
unkown image
|
page readonly
|
|
|
|
7FF5664A9000
|
unkown image
|
page readonly
|
|
|
|
1D6A70BB000
|
unkown
|
page read and write
|
|
|
|
23930E15000
|
unkown
|
page read and write
|
|
|
|
2395B413000
|
unkown
|
page read and write
|
|
|
|
2AF8000
|
unkown image
|
page readonly
|
|
|
|
7FF56663B000
|
unkown image
|
page readonly
|
|
|
|
1F94A498000
|
unkown
|
page read and write
|
|
|
|
1F949968000
|
unkown
|
page read and write
|
|
|
|
7FF566492000
|
unkown image
|
page readonly
|
|
|
|
1D6A7053000
|
unkown
|
page read and write
|
|
|
|
7FF56D620000
|
unkown image
|
page readonly
|
|
|
|
32AC000
|
unkown
|
page read and write
|
|
|
|
7FF56D616000
|
unkown image
|
page readonly
|
|
|
|
2395B600000
|
unkown image
|
page readonly
|
|
|
|
1A307600000
|
unkown image
|
page readonly
|
|
|
|
1F9497C0000
|
unkown
|
page read and write
|
|
|
|
1F94A835000
|
unkown
|
page read and write
|
|
|
|
31AC000
|
stack
|
page read and write
|
|
|
|
1F9498CC000
|
unkown
|
page read and write
|
|
|
|
23935F80000
|
unkown
|
page read and write
|
|
|
|
7FF56D701000
|
unkown image
|
page readonly
|
|
|
|
2395B370000
|
unkown image
|
page readonly
|
|
|
|
1F147AF8000
|
heap default
|
page read and write
|
|
|
|
23930C60000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2D40000
|
unkown image
|
page readonly
|
|
|
|
2EBA000
|
unkown
|
page read and write
|
|
|
|
7FF5315CC000
|
unkown image
|
page readonly
|
|
|
|
343F000
|
stack
|
page read and write
|
|
|
|
3000000
|
unkown image
|
page readonly
|
|
|
|
23935F60000
|
unkown
|
page read and write
|
|
|
|
33D0000
|
unkown image
|
page readonly
|
|
|
|
7FF542B77000
|
unkown image
|
page readonly
|
|
|
|
7FF566613000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4FE3000
|
unkown image
|
page readonly
|
|
|
|
7DF53F3D2000
|
unkown image
|
page readonly
|
|
|
|
7FF5666D4000
|
unkown image
|
page readonly
|
|
|
|
1D6A797F000
|
unkown
|
page read and write
|
|
|
|
33F7000
|
heap private
|
page read and write
|
|
|
|
1D6A704F000
|
unkown
|
page read and write
|
|
|
|
7FF542BFD000
|
unkown image
|
page readonly
|
|
|
|
7FF531687000
|
unkown image
|
page readonly
|
|
|
|
7FF571ADD000
|
unkown image
|
page readonly
|
|
|
|
23935C20000
|
unkown
|
page read and write
|
|
|
|
7FF542B63000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8D51000
|
unkown image
|
page readonly
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
7DF43D290000
|
unkown image
|
page readonly
|
|
|
|
2A35000
|
unkown image
|
page readonly
|
|
|
|
1F94A4B4000
|
unkown
|
page read and write
|
|
|
|
32B0000
|
unkown
|
page read and write
|
|
|
|
1F9498EC000
|
unkown
|
page read and write
|
|
|
|
1F149410000
|
unkown image
|
page readonly
|
|
|
|
7DF57B372000
|
unkown image
|
page readonly
|
|
|
|
7FF53175A000
|
unkown image
|
page readonly
|
|
|
|
1A307980000
|
unkown image
|
page readonly
|
|
|
|
1F147B46000
|
heap default
|
page read and write
|
|
|
|
67262FF000
|
stack
|
page read and write
|
|
|
|
1F147C2E000
|
heap private
|
page read and write
|
|
|
|
7FF5C8FD2000
|
unkown image
|
page readonly
|
|
|
|
7DF574370000
|
unkown image
|
page readonly
|
|
|
|
1A307350000
|
unkown
|
page read and write
|
|
|
|
7FF5316AB000
|
unkown image
|
page readonly
|
|
|
|
8AC1AF8000
|
stack
|
page read and write
|
|
|
|
7FF571930000
|
unkown image
|
page readonly
|
|
|
|
327F000
|
unkown
|
page read and write
|
|
|
|
2395BC02000
|
unkown
|
page read and write
|
|
|
|
7DF5D6F10000
|
unkown image
|
page readonly
|
|
|
|
7FF566564000
|
unkown image
|
page readonly
|
|
|
|
7FF5662EA000
|
unkown image
|
page readonly
|
|
|
|
7FF56931A000
|
unkown image
|
page readonly
|
|
|
|
7FF5C92B1000
|
unkown image
|
page readonly
|
|
|
|
7FF56D627000
|
unkown image
|
page readonly
|
|
|
|
32B0000
|
unkown
|
page read and write
|
|
|
|
1C163D10000
|
heap private
|
page read and write
|
|
|
|
32AC000
|
unkown
|
page read and write
|
|
|
|
1F147AF8000
|
unkown
|
page read and write
|
|
|
|
7FF57122E000
|
unkown image
|
page readonly
|
|
|
|
7FF571AD7000
|
unkown image
|
page readonly
|
|
|
|
7FF5C922D000
|
unkown image
|
page readonly
|
|
|
|
7FF571A87000
|
unkown image
|
page readonly
|
|
|
|
7DF57B380000
|
unkown image
|
page readonly
|
|
|
|
1D6A7977000
|
unkown
|
page read and write
|
|
|
|
1F94A463000
|
unkown
|
page read and write
|
|
|
|
2395B260000
|
unkown image
|
page readonly
|
|
|
|
7FF565EE8000
|
unkown image
|
page readonly
|
|
|
|
1D6A7E02000
|
unkown
|
page read and write
|
|
|
|
1D6A7580000
|
unkown image
|
page readonly
|
|
|
|
1D6A79A7000
|
unkown
|
page read and write
|
|
|
|
7DF574362000
|
unkown image
|
page readonly
|
|
|
|
10057E000
|
stack
|
page read and write
|
|
|
|
1D33D650000
|
unkown
|
page read and write
|
|
|
|
38BB000
|
unkown
|
page read and write
|
|
|
|
1F94A810000
|
unkown
|
page read and write
|
|
|
|
1D6A7981000
|
unkown
|
page read and write
|
|
|
|
7FF566259000
|
unkown image
|
page readonly
|
|
|
|
7FF56655C000
|
unkown image
|
page readonly
|
|
|
|
2ACB000
|
unkown image
|
page readonly
|
|
|
|
7FF53154B000
|
unkown image
|
page readonly
|
|
|
|
7FF542BDE000
|
unkown image
|
page readonly
|
|
|
|
32A4000
|
unkown
|
page read and write
|
|
|
|
38B9000
|
unkown
|
page read and write
|
|
|
|
1D6A794C000
|
unkown
|
page read and write
|
|
|
|
7FF56666A000
|
unkown image
|
page readonly
|
|
|
|
1A307250000
|
heap default
|
page read and write
|
|
|
|
7F902000
|
unkown image
|
page readonly
|
|
|
|
2395B240000
|
unkown image
|
page readonly
|
|
|
|
2395B502000
|
unkown
|
page read and write
|
|
|
|
2AEC000
|
unkown image
|
page readonly
|
|
|
|
7FF569BD4000
|
unkown image
|
page readonly
|
|
|
|
33F0000
|
heap private
|
page read and write
|
|
|
|
2395B42A000
|
unkown
|
page read and write
|
|
|
|
1A3071E0000
|
unkown image
|
page read and write
|
|
|
|
1F147C25000
|
heap private
|
page read and write
|
|
|
|
1F949950000
|
unkown
|
page read and write
|
|
|
|
7FF56629F000
|
unkown image
|
page readonly
|
|
|
|
7FF5C90F9000
|
unkown image
|
page readonly
|
|
|
|
23935CDD000
|
unkown
|
page read and write
|
|
|
|
7FF5315E5000
|
unkown image
|
page readonly
|
|
|
|
1D6A7050000
|
unkown
|
page read and write
|
|
|
|
23935B60000
|
unkown
|
page read and write
|
|
|
|
7FF569BC9000
|
unkown image
|
page readonly
|
|
|
|
4F8EF9E000
|
stack
|
page read and write
|
|
|
|
1D6A704D000
|
unkown
|
page read and write
|
|
|
|
1F949A80000
|
unkown image
|
page write copy
|
|
|
|
23930DF0000
|
unkown
|
page read and write
|
|
|
|
7FF5D4BB1000
|
unkown image
|
page readonly
|
|
|
|
7FF569BF1000
|
unkown image
|
page readonly
|
|
|
|
7DF57F7C0000
|
unkown image
|
page readonly
|
|
|
|
7FF566455000
|
unkown image
|
page readonly
|
|
|
|
CA6404D000
|
stack
|
page read and write
|
|
|
|
32AF000
|
unkown
|
page read and write
|
|
|
|
1D6A79A2000
|
unkown
|
page read and write
|
|
|
|
2A4D000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2D50000
|
unkown image
|
page readonly
|
|
|
|
1F94A44E000
|
unkown
|
page read and write
|
|
|
|
1F949940000
|
unkown
|
page read and write
|
|
|
|
23935CFE000
|
unkown
|
page read and write
|
|
|
|
7FF5D4E9D000
|
unkown image
|
page readonly
|
|
|
|
239360A0000
|
unkown image
|
page read and write
|
|
|
|
4F8EE9B000
|
unkown
|
page read and write
|
|
|
|
1F9498F0000
|
unkown
|
page read and write
|
|
|
|
7FF56CEBC000
|
unkown image
|
page readonly
|
|
|
|
32A4000
|
unkown
|
page read and write
|
|
|
|
2395B290000
|
heap default
|
page read and write
|
|
|
|
7FF56606C000
|
unkown image
|
page readonly
|
|
|
|
23931720000
|
unkown image
|
page readonly
|
|
|
|
7FF542B42000
|
unkown image
|
page readonly
|
|
|
|
7FF5665FD000
|
unkown image
|
page readonly
|
|
|
|
7FF569BEA000
|
unkown image
|
page readonly
|
|
|
|
7FF569A02000
|
unkown image
|
page readonly
|
|
|
|
1A3071F0000
|
heap private
|
page read and write
|
|
|
|
1D6A7975000
|
unkown
|
page read and write
|
|
|
|
1D33D64D000
|
unkown
|
page read and write
|
|
|
|
1D33D655000
|
unkown
|
page read and write
|
|
|
|
23931760000
|
unkown image
|
page readonly
|
|
|
|
7FF571AAB000
|
unkown image
|
page readonly
|
|
|
|
239305A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C9131000
|
unkown image
|
page readonly
|
|
|
|
1D6A7989000
|
unkown
|
page read and write
|
|
|
|
2A3F000
|
unkown image
|
page readonly
|
|
|
|
7FF5315BB000
|
unkown image
|
page readonly
|
|
|
|
7FF5C915F000
|
unkown image
|
page readonly
|
|
|
|
1D6A6E10000
|
unkown image
|
page read and write
|
|
|
|
7FF569BC2000
|
unkown image
|
page readonly
|
|
|
|
3470000
|
heap private
|
page read and write
|
|
|
|
1D6A7E02000
|
unkown
|
page read and write
|
|
|
|
7DF5E2D42000
|
unkown image
|
page readonly
|
|
|
|
7FF56640A000
|
unkown image
|
page readonly
|
|
|
|
4F8F5FE000
|
stack
|
page read and write
|
|
|
|
6D53F7B000
|
stack
|
page read and write
|
|
|
|
23930613000
|
unkown
|
page read and write
|
|
|
|
2395B270000
|
unkown image
|
page readonly
|
|
|
|
23930F18000
|
unkown
|
page read and write
|
|
|
|
1D6A6FF0000
|
unkown
|
page read and write
|
|
|
|
7DF57B380000
|
unkown image
|
page readonly
|
|
|
|
33FA000
|
heap private
|
page read and write
|
|
|
|
1F147910000
|
unkown image
|
page read and write
|
|
|
|
1D6A7900000
|
unkown
|
page read and write
|
|
|
|
8AC1877000
|
stack
|
page read and write
|
|
|
|
1F949978000
|
unkown
|
page read and write
|
|
|
|
7FF56664E000
|
unkown image
|
page readonly
|
|
|
|
8AC177C000
|
stack
|
page read and write
|
|
|
|
2ECC000
|
unkown
|
page read and write
|
|
|
|
1F147ADA000
|
unkown
|
page read and write
|
|
|
|
6725FF7000
|
stack
|
page read and write
|
|
|
|
1B7E1007000
|
unkown
|
page read and write
|
|
|
|
1F147A50000
|
heap default
|
page read and write
|
|
|
|
1D6A7987000
|
unkown
|
page read and write
|
|
|
|
1F949964000
|
unkown
|
page read and write
|
|
|
|
7FF542BB7000
|
unkown image
|
page readonly
|
|
|
|
2AC4000
|
unkown image
|
page readonly
|
|
|
|
1C163D6E000
|
unkown
|
page read and write
|
|
|
|
2393065E000
|
unkown
|
page read and write
|
|
|
|
CA6434F000
|
stack
|
page read and write
|
|
|
|
7FF5664AC000
|
unkown image
|
page readonly
|
|
|
|
7FF531751000
|
unkown image
|
page readonly
|
|
|
|
7FF5C9135000
|
unkown image
|
page readonly
|
|
|
|
2A6C000
|
unkown image
|
page readonly
|
|
|
|
23930F02000
|
unkown
|
page read and write
|
|
|
|
1C164300000
|
unkown image
|
page readonly
|
|
|
|
1D33D680000
|
unkown
|
page read and write
|
|
|
|
1C164BD0000
|
unkown
|
page read and write
|
|
|
|
7FF5663C2000
|
unkown image
|
page readonly
|
|
|
|
67259BB000
|
unkown
|
page read and write
|
|
|
|
7FF5C922A000
|
unkown image
|
page readonly
|
|
|
|
7FF5D50A2000
|
unkown image
|
page readonly
|
|
|
|
7DF577862000
|
unkown image
|
page readonly
|
|
|
|
7DF574352000
|
unkown image
|
page readonly
|
|
|
|
1D33D702000
|
unkown
|
page read and write
|
|
|
|
7FF542BF7000
|
unkown image
|
page readonly
|
|
|
|
7FF5665D3000
|
unkown image
|
page readonly
|
|
|
|
1D33D713000
|
unkown
|
page read and write
|
|
|
|
1D6A7981000
|
unkown
|
page read and write
|
|
|
|
3274000
|
unkown
|
page read and write
|
|
|
|
1D6A76B0000
|
unkown image
|
page read and write
|
|
|
|
7FF569B06000
|
unkown image
|
page readonly
|
|
|
|
1F94A840000
|
unkown
|
page read and write
|
|
|
|
7FF542A06000
|
unkown image
|
page readonly
|
|
|
|
7FF531511000
|
unkown image
|
page readonly
|
|
|
|
23930690000
|
unkown
|
page read and write
|
|
|
|
7FF56D6D2000
|
unkown image
|
page readonly
|
|
|
|
7FF542B5E000
|
unkown image
|
page readonly
|
|
|
|
2DAC000
|
unkown
|
page read and write
|
|
|
|
1F94A44E000
|
unkown
|
page read and write
|
|
|
|
1D6A797A000
|
unkown
|
page read and write
|
|
|
|
1F147B44000
|
heap default
|
page read and write
|
|
|
|
7FF5C9294000
|
unkown image
|
page readonly
|
|
|
|
1F147B0E000
|
unkown
|
page read and write
|
|
|
|
239305A0000
|
unkown image
|
page readonly
|
|
|
|
2395B451000
|
unkown
|
page read and write
|
|
|
|
1D6A7970000
|
unkown
|
page read and write
|
|
|
|
7FF56D613000
|
unkown image
|
page readonly
|
|
|
|
1D6A7987000
|
unkown
|
page read and write
|
|
|
|
7FF5C9289000
|
unkown image
|
page readonly
|
|
|
|
1F147B01000
|
heap default
|
page read and write
|
|
|
|
23935CFC000
|
unkown
|
page read and write
|
|
|
|
3125000
|
heap default
|
page read and write
|
|
|
|
7DF53F3D0000
|
unkown image
|
page readonly
|
|
|
|
CA6444E000
|
stack
|
page read and write
|
|
|
|
7FF542947000
|
unkown image
|
page readonly
|
|
|
|
7FF5C90B1000
|
unkown image
|
page readonly
|
|
|
|
23935C3A000
|
unkown
|
page read and write
|
|
|
|
1F9498E0000
|
unkown
|
page read and write
|
|
|
|
7DF577850000
|
unkown image
|
page readonly
|
|
|
|
7FF542B01000
|
unkown image
|
page readonly
|
|
|
|
1D6A7970000
|
unkown
|
page read and write
|
|
|
|
1D33D658000
|
unkown
|
page read and write
|
|
|
|
1D6A704A000
|
unkown
|
page read and write
|
|
|
|
1D6A7200000
|
unkown image
|
page readonly
|
|
|
|
1D6A6FA0000
|
unkown image
|
page readonly
|
|
|
|
1D6A6FF0000
|
unkown
|
page read and write
|
|
|
|
7DF57B370000
|
unkown image
|
page readonly
|
|
|
|
7DF53F3C2000
|
unkown image
|
page readonly
|
|
|
|
23930600000
|
unkown
|
page read and write
|
|
|
|
1F9498E8000
|
unkown
|
page read and write
|
|
|
|
7FF56666D000
|
unkown image
|
page readonly
|
|
|
|
D5CD07C000
|
unkown
|
page read and write
|
|
|
|
7FF5C91D3000
|
unkown image
|
page readonly
|
|
|
|
694493B000
|
unkown
|
page read and write
|
|
|
|
7FF5D50D1000
|
unkown image
|
page readonly
|
|
|
|
7FF5666EA000
|
unkown image
|
page readonly
|
|
|
|
6D53E7B000
|
stack
|
page read and write
|
|
|
|
7FF5427E9000
|
unkown image
|
page readonly
|
|
|
|
1A307400000
|
unkown
|
page read and write
|
|
|
|
7FF5427E7000
|
unkown image
|
page readonly
|
|
|
|
23935CA7000
|
unkown
|
page read and write
|
|
|
|
7FF5C9124000
|
unkown image
|
page readonly
|
|
|
|
7FF57192D000
|
unkown image
|
page readonly
|
|
|
|
4F8FA7F000
|
stack
|
page read and write
|
|
|
|
7FF566257000
|
unkown image
|
page readonly
|
|
|
|
7FF56947E000
|
unkown image
|
page readonly
|
|
|
|
1F9498F8000
|
unkown
|
page read and write
|
|
|
|
2AD1000
|
unkown image
|
page readonly
|
|
|
|
69449BD000
|
stack
|
page read and write
|
|
|
|
3284000
|
unkown
|
page read and write
|
|
|
|
23930F18000
|
unkown
|
page read and write
|
|
|
|
7FF57196F000
|
unkown image
|
page readonly
|
|
|
|
7FF5719CC000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5047000
|
unkown image
|
page readonly
|
|
|
|
23930D50000
|
unkown
|
page read and write
|
|
|
|
7FF569B03000
|
unkown image
|
page readonly
|
|
|
|
7FF53156F000
|
unkown image
|
page readonly
|
|
|
|
7FF56D62E000
|
unkown image
|
page readonly
|
|
|
|
328D000
|
unkown
|
page read and write
|
|
|
|
7DF574350000
|
unkown image
|
page readonly
|
|
|
|
1F949944000
|
unkown
|
page read and write
|
|
|
|
7FF571B32000
|
unkown image
|
page readonly
|
|
|
|
239305F0000
|
heap default
|
page read and write
|
|
|
|
1F94991C000
|
unkown
|
page read and write
|
|
|
|
7FF5316D7000
|
unkown image
|
page readonly
|
|
|
|
1F94996C000
|
unkown
|
page read and write
|
|
|
|
3BB0000
|
unkown image
|
page readonly
|
|
|
|
1D33D420000
|
unkown image
|
page readonly
|
|
|
|
7FF5692C5000
|
unkown image
|
page readonly
|
|
|
|
7FF5665FF000
|
unkown image
|
page readonly
|
|
|
|
23935B50000
|
unkown
|
page read and write
|
|
|
|
7FF5D4D55000
|
unkown image
|
page readonly
|
|
|
|
2902000
|
unkown image
|
page readonly
|
|
|
|
32A5000
|
unkown
|
page read and write
|
|
|
|
7DF53F3C2000
|
unkown image
|
page readonly
|
|
|
|
1D33D600000
|
unkown
|
page read and write
|
|
|
|
7DF5E2D50000
|
unkown image
|
page readonly
|
|
|
|
1B7E0F70000
|
unkown
|
page read and write
|
|
|
|
1C164960000
|
unkown
|
page read and write
|
|
|
|
D5CD17F000
|
stack
|
page read and write
|
|
|
|
1F147950000
|
unkown image
|
page readonly
|
|
|
|
3478000
|
heap private
|
page read and write
|
|
|
|
7FF53152D000
|
unkown image
|
page readonly
|
|
|
|
1F14947D000
|
heap private
|
page read and write
|
|
|
|
7FF542767000
|
unkown image
|
page readonly
|
|
|
|
7FF5315E1000
|
unkown image
|
page readonly
|
|
|
|
7DF577870000
|
unkown image
|
page readonly
|
|
|
|
1D6A7918000
|
unkown
|
page read and write
|
|
|
|
52CF000
|
stack
|
page read and write
|
|
|
|
1F94A814000
|
unkown
|
page read and write
|
|
|
|
7FF5429DF000
|
unkown image
|
page readonly
|
|
|
|
1F9498E4000
|
unkown
|
page read and write
|
|
|
|
7FF571641000
|
unkown image
|
page readonly
|
|
|
|
4F8F77E000
|
stack
|
page read and write
|
|
|
|
528E000
|
stack
|
page read and write
|
|
|
|
7FF5D4FF7000
|
unkown image
|
page readonly
|
|
|
|
7FF542BCB000
|
unkown image
|
page readonly
|
|
|
|
1D6A7981000
|
unkown
|
page read and write
|
|
|
|
1D6A7977000
|
unkown
|
page read and write
|
|
|
|
7FF531247000
|
unkown image
|
page readonly
|
|
|
|
7FF5666E1000
|
unkown image
|
page readonly
|
|
|
|
1F147BF0000
|
unkown
|
page read and write
|
|
|
|
1D33D470000
|
heap default
|
page read and write
|
|
|
|
7FF565F6D000
|
unkown image
|
page readonly
|
|
|
|
1F9498D0000
|
unkown
|
page read and write
|
|
|
|
1A307C02000
|
unkown
|
page read and write
|
|
|
|
1B7E11F0000
|
unkown image
|
page readonly
|
|
|
|
1D6A70D0000
|
unkown
|
page read and write
|
|
|
|
7FF5666F1000
|
unkown image
|
page readonly
|
|
|
|
3380000
|
unkown
|
page read and write
|
|
|
|
1D6A70EB000
|
unkown
|
page read and write
|
|
|
|
7DF57F7D0000
|
unkown image
|
page readonly
|
|
|
|
1D6A6E20000
|
heap private
|
page read and write
|
|
|
|
7FF565F06000
|
unkown image
|
page readonly
|
|
|
|
1F9499C0000
|
unkown image
|
page readonly
|
|
|
|
38BA000
|
unkown
|
page read and write
|
|
|
|
1D6A796E000
|
unkown
|
page read and write
|
|
|
|
33F9000
|
heap private
|
page read and write
|
|
|
|
1F94A472000
|
unkown
|
page read and write
|
|
|
|
7FF56D653000
|
unkown image
|
page readonly
|
|
|
|
1001FD000
|
stack
|
page read and write
|
|
|
|
1F147B50000
|
unkown
|
page read and write
|
|
|
|
7FF5429C6000
|
unkown image
|
page readonly
|
|
|
|
7DF57F7C2000
|
unkown image
|
page readonly
|
|
|
|
7FF531739000
|
unkown image
|
page readonly
|
|
|
|
32A2000
|
unkown
|
page read and write
|
|
|
|
7FF542905000
|
unkown image
|
page readonly
|
|
|
|
7FF531673000
|
unkown image
|
page readonly
|
|
|
|
51CF000
|
stack
|
page read and write
|
|
|
|
3240000
|
heap default
|
page read and write
|
|
|
|
7DF550900000
|
unkown image
|
page readonly
|
|
|
|
32AE000
|
unkown
|
page read and write
|
|
|
|
1B7E1570000
|
unkown image
|
page readonly
|
|
|
|
7FF5719E5000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8B72000
|
unkown image
|
page readonly
|
|
|
|
3360000
|
unkown
|
page read and write
|
|
|
|
1C164490000
|
unkown image
|
page readonly
|
|
|
|
7FF571A8E000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4F51000
|
unkown image
|
page readonly
|
|
|
|
7FF569B13000
|
unkown image
|
page readonly
|
|
|
|
1D33D700000
|
unkown
|
page read and write
|
|
|
|
7FF5C8F77000
|
unkown image
|
page readonly
|
|
|
|
239306FF000
|
unkown
|
page read and write
|
|
|
|
7DF5508E2000
|
unkown image
|
page readonly
|
|
|
|
7DF57F7D2000
|
unkown image
|
page readonly
|
|
|
|
23935B80000
|
unkown
|
page read and write
|
|
|
|
322F000
|
stack
|
page read and write
|
|
|
|
7FF5C8E26000
|
unkown image
|
page readonly
|
|
|
|
7FF5425E7000
|
unkown image
|
page readonly
|
|
|
|
1C1644A0000
|
unkown image
|
page readonly
|
|
|
|
7FF56644F000
|
unkown image
|
page readonly
|
|
|
|
1F949B20000
|
heap private
|
page read and write
|
|
|
|
1D6A7E63000
|
unkown
|
page read and write
|
|
|
|
CA63F4E000
|
stack
|
page read and write
|
|
|
|
23935B90000
|
unkown
|
page read and write
|
|
|
|
7FF542B31000
|
unkown image
|
page readonly
|
|
|
|
23935B60000
|
unkown
|
page read and write
|
|
|
|
7FF571B5A000
|
unkown image
|
page readonly
|
|
|
|
6944CF9000
|
stack
|
page read and write
|
|
|
|
2395B449000
|
unkown
|
page read and write
|
|
|
|
1C163EF0000
|
unkown
|
page read and write
|
|
|
|
1D6A7992000
|
unkown
|
page read and write
|
|
|
|
7FF54234E000
|
unkown image
|
page readonly
|
|
|
|
239308D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6F20000
|
unkown image
|
page readonly
|
|
|
|
7FF5C915B000
|
unkown image
|
page readonly
|
|
|
|
7FF542B05000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4BB7000
|
unkown image
|
page readonly
|
|
|
|
7DF5E2D32000
|
unkown image
|
page readonly
|
|
|
|
6D542FE000
|
stack
|
page read and write
|
|
|
|
7FF542AD5000
|
unkown image
|
page readonly
|
|
|
|
1D6A7400000
|
unkown image
|
page readonly
|
|
|
|
7FF56D6F1000
|
unkown image
|
page readonly
|
|
|
|
518E000
|
stack
|
page read and write
|
|
|
|
1F94A828000
|
unkown
|
page read and write
|
|
|
|
7DF44E7B0000
|
unkown image
|
page readonly
|
|
|
|
5330000
|
heap private
|
page read and write
|
|
|
|
1F149400000
|
unkown image
|
page readonly
|
|
|
|
1C164100000
|
unkown image
|
page readonly
|
|
|
|
7FF56659F000
|
unkown image
|
page readonly
|
|
|
|
7FF5C910B000
|
unkown image
|
page readonly
|
|
|
|
1A30748E000
|
unkown
|
page read and write
|
|
|
|
1D6A7116000
|
unkown
|
page read and write
|
|
|
|
23935FB0000
|
unkown
|
page read and write
|
|
|
|
7DF574360000
|
unkown image
|
page readonly
|
|
|
|
7DF57F7D0000
|
unkown image
|
page readonly
|
|
|
|
1C163C80000
|
unkown image
|
page readonly
|
|
|
|
1D6A7983000
|
unkown
|
page read and write
|
|
|
|
7FF5665B2000
|
unkown image
|
page readonly
|
|
|
|
38B6000
|
unkown
|
page read and write
|
|
|
|
326F000
|
unkown
|
page read and write
|
|
|
|
7FF542B6E000
|
unkown image
|
page readonly
|
|
|
|
7FF571A69000
|
unkown image
|
page readonly
|
|
|
|
1F147BD0000
|
unkown image
|
page readonly
|
|
|
|
2395B230000
|
heap private
|
page read and write
|
|
|
|
316E000
|
stack
|
page read and write
|
|
|
|
7FF5D50C1000
|
unkown image
|
page readonly
|
|
|
|
7FF5D479E000
|
unkown image
|
page readonly
|
|
|
|
7DF5508E0000
|
unkown image
|
page readonly
|
|
|
|
1F147BC0000
|
unkown
|
page read and write
|
|
|
|
7FF571A97000
|
unkown image
|
page readonly
|
|
|
|
1D6A791A000
|
unkown
|
page read and write
|
|
|
|
7FF5665CA000
|
unkown image
|
page readonly
|
|
|
|
1F949B24000
|
heap private
|
page read and write
|
|
|
|
7FF565EF7000
|
unkown image
|
page readonly
|
|
|
|
33F7000
|
heap private
|
page read and write
|
|
|
|
7FF5316DD000
|
unkown image
|
page readonly
|
|
|
|
1C163CF0000
|
unkown
|
page read and write
|
|
|
|
D5CD37B000
|
stack
|
page read and write
|
|
|
|
7FF5429E5000
|
unkown image
|
page readonly
|
|
|
|
1F94A475000
|
unkown
|
page read and write
|
|
|
|
1F147E30000
|
unkown image
|
page readonly
|
|
|
|
1D6A7E6A000
|
unkown
|
page read and write
|
|
|
|
1D6A79D9000
|
unkown
|
page read and write
|
|
|
|
7DF5508F2000
|
unkown image
|
page readonly
|
|
|
|
2A16000
|
unkown image
|
page readonly
|
|
|
|
1F9498FC000
|
unkown
|
page read and write
|
|
|
|
7FF531761000
|
unkown image
|
page readonly
|
|
|
|
7FF5C92AA000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5007000
|
unkown image
|
page readonly
|
|
|
|
7FF555B01000
|
unkown image
|
page readonly
|
|
|
|
D5CD0FE000
|
stack
|
page read and write
|
|
|
|
1D6A798C000
|
unkown
|
page read and write
|
|
|
|
7FF542A31000
|
unkown image
|
page readonly
|
|
|
|
1D6A7982000
|
unkown
|
page read and write
|
|
|
|
7FF542B2F000
|
unkown image
|
page readonly
|
|
|
|
1C163CD0000
|
unkown
|
page read and write
|
|
|
|
1D6A7660000
|
unkown image
|
page write copy
|
|
|
|
6725C7E000
|
stack
|
page read and write
|
|
|
|
2ABB000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8D4B000
|
unkown image
|
page readonly
|
|
|
|
7DF574352000
|
unkown image
|
page readonly
|
|
|
|
1D33D800000
|
unkown image
|
page readonly
|
|
|
|
1F94A82C000
|
unkown
|
page read and write
|
|
|
|
3248000
|
heap default
|
page read and write
|
|
|
|
23931770000
|
unkown image
|
page readonly
|
|
|
|
7DF53F3E0000
|
unkown image
|
page readonly
|
|
|
|
7FF571A83000
|
unkown image
|
page readonly
|
|
|
|
1F94A4B0000
|
unkown
|
page read and write
|
|
|
|
2EC9000
|
unkown
|
page read and write
|
|
|
|
7FF542BA0000
|
unkown image
|
page readonly
|
|
|
|
67260FF000
|
stack
|
page read and write
|
|
|
|
7FF5C8E95000
|
unkown image
|
page readonly
|
|
|
|
1A307502000
|
unkown
|
page read and write
|
|
|
|
1D6A7052000
|
unkown
|
page read and write
|
|
|
|
7FF56661E000
|
unkown image
|
page readonly
|
|
|
|
1D33D440000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4F55000
|
unkown image
|
page readonly
|
|
|
|
8AC1577000
|
stack
|
page read and write
|
|
|
|
2DEB000
|
unkown
|
page read and write
|
|
|
|
7FF542ADB000
|
unkown image
|
page readonly
|
|
|
|
7FF5C9202000
|
unkown image
|
page readonly
|
|
|
|
8AC19FB000
|
stack
|
page read and write
|
|
|
|
1D6A79A5000
|
unkown
|
page read and write
|
|
There are 1199 hidden memdumps, click here to show them.