Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
2gyA5uNl6VPQUA.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCircular.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl.0001YS (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\UnistackCircular.etl.0001 (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl.0001 (copy)
|
data
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
modified
|
|
|
|
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Logs\dosvc.20211202_012855_088.etl
|
data
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_f49b738aac9d445c211ec1cdbddf7abb15fde6_d70d8aa6_11633778\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER222B.tmp.dmp
|
Mini DuMP crash report, 15 streams, Thu Dec 2 01:17:32 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER2D57.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER3017.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF6A5.tmp.csv
|
data
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFB88.tmp.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl.0001s (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl.0001". (copy)
|
data
|
dropped
|
|
|
|
C:\Windows\appcompat\Programs\Amcache.hve
|
MS Windows registry file, NT/2000 or above
|
dropped
|
|
|
|
C:\Windows\appcompat\Programs\Amcache.hve.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
|
There are 9 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
|
|
|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe "C:\Users\user\Desktop\2gyA5uNl6VPQUA.dll"
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k NetworkService -p
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\2gyA5uNl6VPQUA.dll,Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\2gyA5uNl6VPQUA.dll",#1
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k unistacksvcgroup
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\2gyA5uNl6VPQUA.dll,axamexdrqyrgb
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\2gyA5uNl6VPQUA.dll,bhramccfbdd
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\2gyA5uNl6VPQUA.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Cyyah\ysrainvzaakh.dkv",pczodXjTBX
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\2gyA5uNl6VPQUA.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\2gyA5uNl6VPQUA.dll",Control_RunDLL
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k WerSvcGroup
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Qrcyfrqyrevqn\zfjlg.mpd",GeWefLGOgdb
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\Qrcyfrqyrevqn\zfjlg.mpd",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\2gyA5uNl6VPQUA.dll",#1
|
|
|
|
C:\Windows\System32\SgrmBroker.exe
|
C:\Windows\system32\SgrmBroker.exe
|
|
|
|
C:\Program Files\Windows Defender\MpCmdRun.exe
|
"C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -pss -s 156 -p 5816 -ip 5816
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 5816 -ip 5816
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 6376 -ip 6376
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6376 -s 304
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -pss -s 164 -p 6376 -ip 6376
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6376 -s 308
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
There are 20 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://46.55.222.11/UKKmNexCiEZNdWysJnUxJeBGVUutat
|
46.55.222.11
|
|
|
|
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Driving
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Transit/Stops/
|
unknown
|
|
|
|
https://t0.tiles.ditu.live.com/tiles/gen
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Traffic/Incidents/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Walking
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Transit/Stops/
|
unknown
|
|
|
|
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Locations
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?entry=
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
|
unknown
|
|
|
|
https://dynamic.t
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Transit
|
unknown
|
|
|
|
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
|
unknown
|
|
|
|
http://www.bingmapsportal.comsv
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/mapcontrol/roadshield.ashx?bucket=
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Locations
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
|
unknown
|
|
|
|
https://46.55.222.11/UKKmNexCiEZNdWysJnUxJeBGVUutatZ
|
unknown
|
|
|
|
https://www.disneyplus.com/legal/your-california-privacy-rights
|
unknown
|
|
|
|
http://crl.ver)
|
unknown
|
|
|
|
https://www.disneyplus.com/legal/privacy-policy
|
unknown
|
|
|
|
http://upx.sf.net
|
unknown
|
|
|
|
https://www.tiktok.com/legal/report/feedback
|
unknown
|
|
|
|
http://help.disneyplus.com.
|
unknown
|
|
|
|
https://46.55.222.11/
|
unknown
|
|
|
|
https://disneyplus.com/legal.
|
unknown
|
|
There are 36 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
195.154.133.20
|
unknown
|
France
|
|
|
|
212.237.17.99
|
unknown
|
Italy
|
|
|
|
110.232.117.186
|
unknown
|
Australia
|
|
|
|
104.245.52.73
|
unknown
|
United States
|
|
|
|
138.185.72.26
|
unknown
|
Brazil
|
|
|
|
81.0.236.90
|
unknown
|
Czech Republic
|
|
|
|
45.118.115.99
|
unknown
|
Indonesia
|
|
|
|
103.75.201.2
|
unknown
|
Thailand
|
|
|
|
216.158.226.206
|
unknown
|
United States
|
|
|
|
107.182.225.142
|
unknown
|
United States
|
|
|
|
45.118.135.203
|
unknown
|
Japan
|
|
|
|
50.116.54.215
|
unknown
|
United States
|
|
|
|
51.68.175.8
|
unknown
|
France
|
|
|
|
103.8.26.102
|
unknown
|
Malaysia
|
|
|
|
46.55.222.11
|
unknown
|
Bulgaria
|
|
|
|
41.76.108.46
|
unknown
|
South Africa
|
|
|
|
103.8.26.103
|
unknown
|
Malaysia
|
|
|
|
178.79.147.66
|
unknown
|
United Kingdom
|
|
|
|
212.237.5.209
|
unknown
|
Italy
|
|
|
|
176.104.106.96
|
unknown
|
Serbia
|
|
|
|
207.38.84.195
|
unknown
|
United States
|
|
|
|
212.237.56.116
|
unknown
|
Italy
|
|
|
|
45.142.114.231
|
unknown
|
Germany
|
|
|
|
203.114.109.124
|
unknown
|
Thailand
|
|
|
|
210.57.217.132
|
unknown
|
Indonesia
|
|
|
|
58.227.42.236
|
unknown
|
Korea Republic of
|
|
|
|
185.184.25.237
|
unknown
|
Turkey
|
|
|
|
158.69.222.101
|
unknown
|
Canada
|
|
|
|
104.251.214.46
|
unknown
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
There are 20 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
|
cval
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
|
cval
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Usage
|
MonthID
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6376
|
Terminator
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6376
|
Reason
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6376
|
CreationTime
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
|
AmiHivePermissionsCorrect
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
|
AmiHiveOwnerCorrect
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
|
ExceptionRecord
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2D7A000
|
heap default
|
page read and write
|
|
|
|
7C0000
|
stack
|
page execute and read and write
|
|
|
|
83D000
|
heap default
|
page read and write
|
|
|
|
47A000
|
heap default
|
page read and write
|
|
|
|
2C30000
|
stack
|
page execute and read and write
|
|
|
|
6A0000
|
stack
|
page execute and read and write
|
|
|
|
7C0000
|
stack
|
page execute and read and write
|
|
|
|
30F0000
|
stack
|
page execute and read and write
|
|
|
|
3019000
|
unkown
|
page read and write
|
|
|
|
2F20000
|
stack
|
page execute and read and write
|
|
|
|
83D000
|
heap default
|
page read and write
|
|
|
|
83D000
|
heap default
|
page read and write
|
|
|
|
32A3000
|
heap default
|
page read and write
|
|
|
|
7C0000
|
stack
|
page execute and read and write
|
|
|
|
83D000
|
heap default
|
page read and write
|
|
|
|
7C0000
|
stack
|
page execute and read and write
|
|
|
|
EFF3EFB000
|
stack
|
page read and write
|
|
|
|
2D70000
|
unkown image
|
page readonly
|
|
|
|
7FCD2000
|
unkown image
|
page readonly
|
|
|
|
29E0000
|
unkown image
|
page readonly
|
|
|
|
7F642000
|
unkown image
|
page readonly
|
|
|
|
78B8C7B000
|
unkown
|
page read and write
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
2950000
|
unkown image
|
page readonly
|
|
|
|
6C5000
|
stack
|
page execute and read and write
|
|
|
|
7FF562964000
|
unkown image
|
page readonly
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
311A000
|
heap private
|
page read and write
|
|
|
|
2896000
|
unkown image
|
page readonly
|
|
|
|
28C0000
|
unkown image
|
page readonly
|
|
|
|
2664000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
7DF548950000
|
unkown image
|
page readonly
|
|
|
|
7F670000
|
unkown image
|
page readonly
|
|
|
|
2A5C000
|
unkown image
|
page readonly
|
|
|
|
6EBE1000
|
unkown image
|
page execute read
|
|
|
|
1B813E59000
|
unkown
|
page read and write
|
|
|
|
7DF5D3D20000
|
unkown image
|
page readonly
|
|
|
|
6EC0A000
|
unkown image
|
page readonly
|
|
|
|
78B937D000
|
stack
|
page read and write
|
|
|
|
2D40000
|
unkown image
|
page readonly
|
|
|
|
7FD52000
|
unkown image
|
page readonly
|
|
|
|
338D000
|
unkown
|
page read and write
|
|
|
|
7FCF0000
|
unkown image
|
page readonly
|
|
|
|
7DF570600000
|
unkown image
|
page readonly
|
|
|
|
2D60000
|
unkown image
|
page readonly
|
|
|
|
24D1000
|
unkown image
|
page readonly
|
|
|
|
7FF4F54C4000
|
unkown image
|
page readonly
|
|
|
|
7FF53ABD7000
|
unkown image
|
page readonly
|
|
|
|
338D000
|
unkown
|
page read and write
|
|
|
|
2F07000
|
heap private
|
page read and write
|
|
|
|
1E3F0790000
|
heap private
|
page read and write
|
|
|
|
7F762000
|
unkown image
|
page readonly
|
|
|
|
6EC3D000
|
unkown image
|
page read and write
|
|
|
|
2D44000
|
unkown
|
page read and write
|
|
|
|
7FA000
|
unkown
|
page read and write
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
2EF0000
|
heap default
|
page read and write
|
|
|
|
1BCDCC35000
|
unkown
|
page read and write
|
|
|
|
1BCDCB60000
|
unkown image
|
page read and write
|
|
|
|
25DF000
|
unkown image
|
page readonly
|
|
|
|
63C000
|
unkown
|
page read and write
|
|
|
|
7DF5705E2000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
1C768EA0000
|
unkown
|
page read and write
|
|
|
|
7DF5D3D10000
|
unkown image
|
page readonly
|
|
|
|
82B000
|
heap default
|
page read and write
|
|
|
|
3D0000
|
unkown image
|
page read and write
|
|
|
|
7DF504A92000
|
unkown image
|
page readonly
|
|
|
|
7F762000
|
unkown image
|
page readonly
|
|
|
|
4D9F000
|
stack
|
page read and write
|
|
|
|
7F632000
|
unkown image
|
page readonly
|
|
|
|
2F45000
|
stack
|
page execute and read and write
|
|
|
|
1B813E7A000
|
unkown
|
page read and write
|
|
|
|
285C000
|
unkown image
|
page readonly
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
267B000
|
unkown image
|
page readonly
|
|
|
|
2A68000
|
unkown image
|
page readonly
|
|
|
|
6EC3D000
|
unkown image
|
page read and write
|
|
|
|
1BCDCB80000
|
unkown image
|
page readonly
|
|
|
|
2DEF000
|
stack
|
page read and write
|
|
|
|
7FCD0000
|
unkown image
|
page readonly
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
3D0000
|
unkown image
|
page read and write
|
|
|
|
7DF5705E2000
|
unkown image
|
page readonly
|
|
|
|
7F752000
|
unkown image
|
page readonly
|
|
|
|
2996000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6D8E000
|
unkown image
|
page readonly
|
|
|
|
25B6000
|
unkown image
|
page readonly
|
|
|
|
7FF4F53AE000
|
unkown image
|
page readonly
|
|
|
|
2F70000
|
unkown image
|
page readonly
|
|
|
|
5144A9B000
|
unkown
|
page read and write
|
|
|
|
2D2E000
|
unkown
|
page read and write
|
|
|
|
2D5B000
|
unkown
|
page read and write
|
|
|
|
7FD60000
|
unkown image
|
page readonly
|
|
|
|
2C643BA0000
|
unkown
|
page read and write
|
|
|
|
7FD50000
|
unkown image
|
page readonly
|
|
|
|
2D1C000
|
unkown
|
page read and write
|
|
|
|
3110000
|
heap private
|
page read and write
|
|
|
|
23832674000
|
unkown
|
page read and write
|
|
|
|
7FF4F6D27000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6E30000
|
unkown image
|
page readonly
|
|
|
|
7F640000
|
unkown image
|
page readonly
|
|
|
|
1B813E59000
|
unkown
|
page read and write
|
|
|
|
2C643C20000
|
unkown
|
page read and write
|
|
|
|
267B000
|
unkown image
|
page readonly
|
|
|
|
7DF504AB0000
|
unkown image
|
page readonly
|
|
|
|
2FF0000
|
unkown image
|
page readonly
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
6EBE1000
|
unkown image
|
page execute read
|
|
|
|
7FF56288D000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
680F000
|
stack
|
page read and write
|
|
|
|
25FB000
|
unkown image
|
page readonly
|
|
|
|
634E000
|
stack
|
page read and write
|
|
|
|
850000
|
unkown image
|
page readonly
|
|
|
|
6EC3D000
|
unkown image
|
page read and write
|
|
|
|
2C642C70000
|
unkown image
|
page readonly
|
|
|
|
78B967E000
|
stack
|
page read and write
|
|
|
|
7FF5628D2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F542B000
|
unkown image
|
page readonly
|
|
|
|
7FCD2000
|
unkown image
|
page readonly
|
|
|
|
3370000
|
unkown image
|
page readonly
|
|
|
|
1BCDCB80000
|
unkown image
|
page readonly
|
|
|
|
26BF000
|
unkown image
|
page readonly
|
|
|
|
7E5000
|
stack
|
page execute and read and write
|
|
|
|
7F642000
|
unkown image
|
page readonly
|
|
|
|
78B8F7E000
|
stack
|
page read and write
|
|
|
|
7FF562896000
|
unkown image
|
page readonly
|
|
|
|
7DF503150000
|
unkown image
|
page readonly
|
|
|
|
7FF5C600E000
|
unkown image
|
page readonly
|
|
|
|
1B813CF0000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown image
|
page readonly
|
|
|
|
25F8000
|
unkown image
|
page readonly
|
|
|
|
7F672000
|
unkown image
|
page readonly
|
|
|
|
2E3C000
|
unkown
|
page read and write
|
|
|
|
7DF5D3D12000
|
unkown image
|
page readonly
|
|
|
|
1B813E74000
|
unkown
|
page read and write
|
|
|
|
2F10000
|
stack
|
page read and write
|
|
|
|
7FF4F6E31000
|
unkown image
|
page readonly
|
|
|
|
7F750000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6D5E000
|
unkown image
|
page readonly
|
|
|
|
1B813F02000
|
unkown
|
page read and write
|
|
|
|
82B000
|
heap default
|
page read and write
|
|
|
|
2D70000
|
heap default
|
page read and write
|
|
|
|
7E0000
|
unkown image
|
page read and write
|
|
|
|
7FF53AA66000
|
unkown image
|
page readonly
|
|
|
|
25F1000
|
unkown image
|
page readonly
|
|
|
|
7F772000
|
unkown image
|
page readonly
|
|
|
|
2686000
|
unkown image
|
page readonly
|
|
|
|
2978000
|
unkown image
|
page readonly
|
|
|
|
1E0000
|
unkown image
|
page readonly
|
|
|
|
338E000
|
unkown
|
page read and write
|
|
|
|
7FF56220E000
|
unkown image
|
page readonly
|
|
|
|
7FF53AA5B000
|
unkown image
|
page readonly
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
7FF4F53A2000
|
unkown image
|
page readonly
|
|
|
|
2A68000
|
unkown image
|
page readonly
|
|
|
|
2895000
|
unkown image
|
page readonly
|
|
|
|
7F770000
|
unkown image
|
page readonly
|
|
|
|
3580000
|
unkown image
|
page readonly
|
|
|
|
5144F7C000
|
stack
|
page read and write
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
25BA000
|
unkown image
|
page readonly
|
|
|
|
7F630000
|
unkown image
|
page readonly
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
268C000
|
unkown image
|
page readonly
|
|
|
|
3170000
|
heap private
|
page read and write
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
23832B90000
|
unkown image
|
page readonly
|
|
|
|
2656000
|
unkown image
|
page readonly
|
|
|
|
282A000
|
unkown image
|
page readonly
|
|
|
|
11A0000
|
unkown image
|
page readonly
|
|
|
|
25F6000
|
unkown image
|
page readonly
|
|
|
|
1E3F0902000
|
unkown
|
page read and write
|
|
|
|
2D1A000
|
unkown
|
page read and write
|
|
|
|
1E3F0829000
|
unkown
|
page read and write
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
1B813E7B000
|
unkown
|
page read and write
|
|
|
|
7FF562893000
|
unkown image
|
page readonly
|
|
|
|
2950000
|
unkown image
|
page readonly
|
|
|
|
7DF5D3D12000
|
unkown image
|
page readonly
|
|
|
|
1E3F087A000
|
unkown
|
page read and write
|
|
|
|
7FF5C60B1000
|
unkown image
|
page readonly
|
|
|
|
6EBE1000
|
unkown image
|
page execute read
|
|
|
|
641000
|
unkown
|
page read and write
|
|
|
|
840000
|
unkown image
|
page readonly
|
|
|
|
6EC3F000
|
unkown image
|
page write copy
|
|
|
|
7F780000
|
unkown image
|
page readonly
|
|
|
|
2973000
|
unkown image
|
page readonly
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5FBF000
|
unkown image
|
page readonly
|
|
|
|
25FB000
|
unkown image
|
page readonly
|
|
|
|
4FEE000
|
stack
|
page read and write
|
|
|
|
2A68000
|
unkown image
|
page readonly
|
|
|
|
2610000
|
unkown image
|
page readonly
|
|
|
|
1B813D20000
|
unkown image
|
page readonly
|
|
|
|
2978000
|
unkown image
|
page readonly
|
|
|
|
7FF53ACCA000
|
unkown image
|
page readonly
|
|
|
|
2C643BC0000
|
unkown
|
page read and write
|
|
|
|
7FBD0000
|
unkown image
|
page readonly
|
|
|
|
82B000
|
heap default
|
page read and write
|
|
|
|
7F640000
|
unkown image
|
page readonly
|
|
|
|
1B813E3E000
|
unkown
|
page read and write
|
|
|
|
7FF56297A000
|
unkown image
|
page readonly
|
|
|
|
7F770000
|
unkown image
|
page readonly
|
|
|
|
1E3F0800000
|
unkown
|
page read and write
|
|
|
|
4F1D000
|
stack
|
page read and write
|
|
|
|
6EC40000
|
unkown image
|
page readonly
|
|
|
|
7FF53AC3E000
|
unkown image
|
page readonly
|
|
|
|
2D20000
|
unkown
|
page read and write
|
|
|
|
7FF4F6D3D000
|
unkown image
|
page readonly
|
|
|
|
7FF4F53E9000
|
unkown image
|
page readonly
|
|
|
|
7F642000
|
unkown image
|
page readonly
|
|
|
|
7F530000
|
unkown image
|
page readonly
|
|
|
|
6EC0A000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
E20000
|
unkown image
|
page readonly
|
|
|
|
1B813E69000
|
unkown
|
page read and write
|
|
|
|
498735E000
|
stack
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
49873DF000
|
stack
|
page read and write
|
|
|
|
7FF53AC03000
|
unkown image
|
page readonly
|
|
|
|
2591000
|
unkown image
|
page readonly
|
|
|
|
2A2F000
|
unkown image
|
page readonly
|
|
|
|
2C643500000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
2F0A000
|
heap private
|
page read and write
|
|
|
|
641000
|
unkown
|
page read and write
|
|
|
|
2D31000
|
unkown
|
page read and write
|
|
|
|
1B813CF0000
|
unkown image
|
page readonly
|
|
|
|
7F630000
|
unkown image
|
page readonly
|
|
|
|
1BCDCC29000
|
unkown
|
page read and write
|
|
|
|
2C643966000
|
unkown
|
page read and write
|
|
|
|
6EC3F000
|
unkown image
|
page write copy
|
|
|
|
920000
|
stack
|
page read and write
|
|
|
|
7F642000
|
unkown image
|
page readonly
|
|
|
|
276E000
|
unkown image
|
page readonly
|
|
|
|
23832648000
|
unkown
|
page read and write
|
|
|
|
1E3F0802000
|
unkown
|
page read and write
|
|
|
|
7DF5A75D2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6CAC000
|
unkown image
|
page readonly
|
|
|
|
296C000
|
unkown image
|
page readonly
|
|
|
|
315F000
|
stack
|
page read and write
|
|
|
|
7F740000
|
unkown image
|
page readonly
|
|
|
|
43B000
|
unkown
|
page read and write
|
|
|
|
2BD0000
|
unkown image
|
page readonly
|
|
|
|
2940000
|
unkown image
|
page read and write
|
|
|
|
1E3F083D000
|
unkown
|
page read and write
|
|
|
|
7FF4F545A000
|
unkown image
|
page readonly
|
|
|
|
2996000
|
unkown image
|
page readonly
|
|
|
|
2FEE000
|
stack
|
page read and write
|
|
|
|
2D2D000
|
unkown
|
page read and write
|
|
|
|
1B814602000
|
unkown
|
page read and write
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5E36000
|
unkown image
|
page readonly
|
|
|
|
7FF4F545D000
|
unkown image
|
page readonly
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
2CA0000
|
unkown image
|
page readonly
|
|
|
|
28A9000
|
unkown image
|
page readonly
|
|
|
|
2693000
|
unkown image
|
page readonly
|
|
|
|
2668000
|
unkown image
|
page readonly
|
|
|
|
638F000
|
stack
|
page read and write
|
|
|
|
4E10000
|
heap private
|
page read and write
|
|
|
|
7FF53A4ED000
|
unkown image
|
page readonly
|
|
|
|
7F752000
|
unkown image
|
page readonly
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
7FCF0000
|
unkown image
|
page readonly
|
|
|
|
6EBE1000
|
unkown image
|
page execute read
|
|
|
|
25A3000
|
unkown image
|
page readonly
|
|
|
|
73C000
|
unkown
|
page read and write
|
|
|
|
1B813E46000
|
unkown
|
page read and write
|
|
|
|
2CB0000
|
unkown image
|
page read and write
|
|
|
|
2471000
|
unkown image
|
page readonly
|
|
|
|
1E3F0E70000
|
unkown image
|
page readonly
|
|
|
|
7FF599879000
|
unkown image
|
page readonly
|
|
|
|
1BCDCBD0000
|
heap default
|
page read and write
|
|
|
|
7FF53AA93000
|
unkown image
|
page readonly
|
|
|
|
6EC0A000
|
unkown image
|
page readonly
|
|
|
|
7FF599971000
|
unkown image
|
page readonly
|
|
|
|
2D60000
|
unkown image
|
page readonly
|
|
|
|
260C000
|
unkown image
|
page readonly
|
|
|
|
2E57000
|
unkown
|
page read and write
|
|
|
|
7FCD2000
|
unkown image
|
page readonly
|
|
|
|
2CC0000
|
unkown image
|
page readonly
|
|
|
|
7FF59989E000
|
unkown image
|
page readonly
|
|
|
|
2A63000
|
unkown image
|
page readonly
|
|
|
|
2881000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6D13000
|
unkown image
|
page readonly
|
|
|
|
3D0000
|
unkown image
|
page read and write
|
|
|
|
1020000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6E14000
|
unkown image
|
page readonly
|
|
|
|
B39CBBE000
|
stack
|
page read and write
|
|
|
|
710000
|
unkown image
|
page readonly
|
|
|
|
31B0000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
7DF5705F2000
|
unkown image
|
page readonly
|
|
|
|
62CE000
|
stack
|
page read and write
|
|
|
|
28C7000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
7F632000
|
unkown image
|
page readonly
|
|
|
|
26F3000
|
unkown image
|
page readonly
|
|
|
|
E20000
|
unkown image
|
page readonly
|
|
|
|
990000
|
heap default
|
page read and write
|
|
|
|
23832602000
|
unkown
|
page read and write
|
|
|
|
7DF5A75F0000
|
unkown image
|
page readonly
|
|
|
|
7F762000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
260C000
|
unkown image
|
page readonly
|
|
|
|
514527F000
|
stack
|
page read and write
|
|
|
|
78B977F000
|
stack
|
page read and write
|
|
|
|
7FF4F54CA000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6C1B000
|
unkown image
|
page readonly
|
|
|
|
7DF548942000
|
unkown image
|
page readonly
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
1BCDD360000
|
unkown
|
page read and write
|
|
|
|
2971000
|
unkown image
|
page readonly
|
|
|
|
2990000
|
unkown
|
page read and write
|
|
|
|
2D28000
|
unkown
|
page read and write
|
|
|
|
7FF53ABEF000
|
unkown image
|
page readonly
|
|
|
|
990000
|
heap default
|
page read and write
|
|
|
|
2D79000
|
unkown
|
page read and write
|
|
|
|
1B813E50000
|
unkown
|
page read and write
|
|
|
|
25A5000
|
unkown image
|
page readonly
|
|
|
|
7DF5D3D20000
|
unkown image
|
page readonly
|
|
|
|
7FCE0000
|
unkown image
|
page readonly
|
|
|
|
7F640000
|
unkown image
|
page readonly
|
|
|
|
2C642F10000
|
unkown image
|
page readonly
|
|
|
|
7FF53A49B000
|
unkown image
|
page readonly
|
|
|
|
28DB000
|
unkown image
|
page readonly
|
|
|
|
7FF5998ED000
|
unkown image
|
page readonly
|
|
|
|
25A1000
|
unkown image
|
page readonly
|
|
|
|
25EE000
|
unkown image
|
page readonly
|
|
|
|
7DF401010000
|
unkown image
|
page readonly
|
|
|
|
7FF562175000
|
unkown image
|
page readonly
|
|
|
|
820000
|
heap default
|
page read and write
|
|
|
|
7FF4F64E2000
|
unkown image
|
page readonly
|
|
|
|
7F742000
|
unkown image
|
page readonly
|
|
|
|
338A000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
7A2007C000
|
stack
|
page read and write
|
|
|
|
1B813CD0000
|
unkown image
|
page read and write
|
|
|
|
800000
|
unkown
|
page read and write
|
|
|
|
7FF4F6E09000
|
unkown image
|
page readonly
|
|
|
|
7FF599971000
|
unkown image
|
page readonly
|
|
|
|
7FF53A849000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
27A5000
|
unkown image
|
page readonly
|
|
|
|
2BF0000
|
unkown image
|
page readonly
|
|
|
|
7FCD0000
|
unkown image
|
page readonly
|
|
|
|
7FD52000
|
unkown image
|
page readonly
|
|
|
|
7FD40000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6D43000
|
unkown image
|
page readonly
|
|
|
|
920000
|
stack
|
page read and write
|
|
|
|
7FF59918E000
|
unkown image
|
page readonly
|
|
|
|
7FF5628A0000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
2D00000
|
heap default
|
page read and write
|
|
|
|
7FF53AC5D000
|
unkown image
|
page readonly
|
|
|
|
7FF599965000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
2FF0000
|
heap default
|
page read and write
|
|
|
|
6EC3D000
|
unkown image
|
page read and write
|
|
|
|
23832713000
|
unkown
|
page read and write
|
|
|
|
7FF4F53D7000
|
unkown image
|
page readonly
|
|
|
|
6EC3F000
|
unkown image
|
page write copy
|
|
|
|
7FF4F543E000
|
unkown image
|
page readonly
|
|
|
|
25DB000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5FE7000
|
unkown image
|
page readonly
|
|
|
|
850000
|
unkown image
|
page readonly
|
|
|
|
25C9000
|
unkown image
|
page readonly
|
|
|
|
1B813D50000
|
unkown image
|
page readonly
|
|
|
|
3380000
|
unkown image
|
page readonly
|
|
|
|
1BCDD250000
|
unkown image
|
page readonly
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
7DF5A75F0000
|
unkown image
|
page readonly
|
|
|
|
23832B80000
|
unkown image
|
page readonly
|
|
|
|
23832648000
|
unkown
|
page read and write
|
|
|
|
7FF4F5285000
|
unkown image
|
page readonly
|
|
|
|
7FF53A501000
|
unkown image
|
page readonly
|
|
|
|
7FF599841000
|
unkown image
|
page readonly
|
|
|
|
7F742000
|
unkown image
|
page readonly
|
|
|
|
63C000
|
unkown
|
page read and write
|
|
|
|
800000
|
unkown image
|
page read and write
|
|
|
|
23832658000
|
unkown
|
page read and write
|
|
|
|
23832718000
|
unkown
|
page read and write
|
|
|
|
2D80000
|
unkown
|
page read and write
|
|
|
|
7FF4F5457000
|
unkown image
|
page readonly
|
|
|
|
25D5000
|
unkown image
|
page readonly
|
|
|
|
78B987E000
|
stack
|
page read and write
|
|
|
|
7FF4F6D67000
|
unkown image
|
page readonly
|
|
|
|
7F660000
|
unkown image
|
page readonly
|
|
|
|
2698000
|
unkown image
|
page readonly
|
|
|
|
7FCE0000
|
unkown image
|
page readonly
|
|
|
|
7FF599540000
|
unkown image
|
page readonly
|
|
|
|
2D2D000
|
unkown
|
page read and write
|
|
|
|
2999000
|
unkown image
|
page readonly
|
|
|
|
2698000
|
unkown image
|
page readonly
|
|
|
|
1C76900D000
|
unkown
|
page read and write
|
|
|
|
7F762000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
7FF53ACE1000
|
unkown image
|
page readonly
|
|
|
|
7FD50000
|
unkown image
|
page readonly
|
|
|
|
2878000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5438000
|
unkown image
|
page readonly
|
|
|
|
B39CFFE000
|
stack
|
page read and write
|
|
|
|
23832657000
|
unkown
|
page read and write
|
|
|
|
2C642CA0000
|
unkown image
|
page readonly
|
|
|
|
7DF46E4B0000
|
unkown image
|
page readonly
|
|
|
|
2986000
|
unkown image
|
page readonly
|
|
|
|
7DF504AA2000
|
unkown image
|
page readonly
|
|
|
|
31FF000
|
stack
|
page read and write
|
|
|
|
7DF503152000
|
unkown image
|
page readonly
|
|
|
|
29B3000
|
unkown image
|
page readonly
|
|
|
|
7DF503142000
|
unkown image
|
page readonly
|
|
|
|
1B813E47000
|
unkown
|
page read and write
|
|
|
|
7FF5C6082000
|
unkown image
|
page readonly
|
|
|
|
25A5000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5FC3000
|
unkown image
|
page readonly
|
|
|
|
7FF5628FA000
|
unkown image
|
page readonly
|
|
|
|
24C5000
|
unkown image
|
page readonly
|
|
|
|
2861000
|
unkown image
|
page readonly
|
|
|
|
25BA000
|
unkown image
|
page readonly
|
|
|
|
29BD000
|
unkown image
|
page readonly
|
|
|
|
6EC40000
|
unkown image
|
page readonly
|
|
|
|
2C40000
|
unkown image
|
page readonly
|
|
|
|
4F9F000
|
stack
|
page read and write
|
|
|
|
3E0000
|
unkown image
|
page readonly
|
|
|
|
7DF503140000
|
unkown image
|
page readonly
|
|
|
|
3397000
|
unkown
|
page read and write
|
|
|
|
1B8140D0000
|
unkown image
|
page readonly
|
|
|
|
7FC50000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5FD7000
|
unkown image
|
page readonly
|
|
|
|
2C6430E0000
|
heap private
|
page read and write
|
|
|
|
1B813E44000
|
unkown
|
page read and write
|
|
|
|
293F000
|
unkown image
|
page readonly
|
|
|
|
7DF504A92000
|
unkown image
|
page readonly
|
|
|
|
7FCF0000
|
unkown image
|
page readonly
|
|
|
|
2975000
|
unkown image
|
page readonly
|
|
|
|
2525000
|
unkown image
|
page readonly
|
|
|
|
6EC3D000
|
unkown image
|
page read and write
|
|
|
|
28B5000
|
unkown image
|
page readonly
|
|
|
|
7F752000
|
unkown image
|
page readonly
|
|
|
|
263F000
|
unkown image
|
page readonly
|
|
|
|
7DF504AA0000
|
unkown image
|
page readonly
|
|
|
|
2D2F000
|
unkown
|
page read and write
|
|
|
|
7F560000
|
unkown image
|
page readonly
|
|
|
|
7FF4F53F3000
|
unkown image
|
page readonly
|
|
|
|
7F680000
|
unkown image
|
page readonly
|
|
|
|
2F55000
|
heap default
|
page read and write
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
B39CB3B000
|
unkown
|
page read and write
|
|
|
|
7FF53A515000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5CA7000
|
unkown image
|
page readonly
|
|
|
|
2891000
|
unkown image
|
page readonly
|
|
|
|
84D000
|
unkown
|
page read and write
|
|
|
|
7FF53A8AC000
|
unkown image
|
page readonly
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
267B000
|
unkown image
|
page readonly
|
|
|
|
7FD32000
|
unkown image
|
page readonly
|
|
|
|
238324E0000
|
unkown image
|
page readonly
|
|
|
|
1B813E2F000
|
unkown
|
page read and write
|
|
|
|
7FD60000
|
unkown image
|
page readonly
|
|
|
|
2D2A000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
heap private
|
page read and write
|
|
|
|
3460000
|
unkown image
|
page readonly
|
|
|
|
29E0000
|
unkown image
|
page readonly
|
|
|
|
83B000
|
unkown
|
page read and write
|
|
|
|
6EC3F000
|
unkown image
|
page write copy
|
|
|
|
260C000
|
unkown image
|
page readonly
|
|
|
|
2BD0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F53C4000
|
unkown image
|
page readonly
|
|
|
|
3394000
|
unkown
|
page read and write
|
|
|
|
23832647000
|
unkown
|
page read and write
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
238323B0000
|
unkown image
|
page readonly
|
|
|
|
2D2D000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
28CD000
|
unkown image
|
page readonly
|
|
|
|
6EC40000
|
unkown image
|
page readonly
|
|
|
|
7F530000
|
unkown image
|
page readonly
|
|
|
|
1B813D40000
|
heap default
|
page read and write
|
|
|
|
266B000
|
unkown image
|
page readonly
|
|
|
|
7FF53A9A7000
|
unkown image
|
page readonly
|
|
|
|
29A5000
|
unkown image
|
page readonly
|
|
|
|
1C769213000
|
unkown
|
page read and write
|
|
|
|
7FF4F6D50000
|
unkown image
|
page readonly
|
|
|
|
7FF53AA7F000
|
unkown image
|
page readonly
|
|
|
|
2A68000
|
unkown image
|
page readonly
|
|
|
|
1E3F085B000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6B14000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
7FD30000
|
unkown image
|
page readonly
|
|
|
|
1C769002000
|
unkown
|
page read and write
|
|
|
|
258E000
|
unkown image
|
page readonly
|
|
|
|
2698000
|
unkown image
|
page readonly
|
|
|
|
1C768E90000
|
unkown image
|
page read and write
|
|
|
|
7FF5627EC000
|
unkown image
|
page readonly
|
|
|
|
7FF53AACB000
|
unkown image
|
page readonly
|
|
|
|
7F630000
|
unkown image
|
page readonly
|
|
|
|
2A63000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6D1E000
|
unkown image
|
page readonly
|
|
|
|
1C769000000
|
unkown
|
page read and write
|
|
|
|
7FF56271A000
|
unkown image
|
page readonly
|
|
|
|
7FF599102000
|
unkown image
|
page readonly
|
|
|
|
2A34000
|
unkown image
|
page readonly
|
|
|
|
25C6000
|
unkown image
|
page readonly
|
|
|
|
6EC40000
|
unkown image
|
page readonly
|
|
|
|
2D34000
|
unkown
|
page read and write
|
|
|
|
7FC30000
|
unkown image
|
page readonly
|
|
|
|
2C7F000
|
stack
|
page read and write
|
|
|
|
50AD000
|
stack
|
page read and write
|
|
|
|
7DF503142000
|
unkown image
|
page readonly
|
|
|
|
29C0000
|
heap default
|
page read and write
|
|
|
|
2A2B000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6D3F000
|
unkown image
|
page readonly
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
7DF5A75E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5628FD000
|
unkown image
|
page readonly
|
|
|
|
2D10000
|
heap default
|
page read and write
|
|
|
|
7DF5705E0000
|
unkown image
|
page readonly
|
|
|
|
25B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5C6003000
|
unkown image
|
page readonly
|
|
|
|
3350000
|
unkown image
|
page readonly
|
|
|
|
2966000
|
unkown image
|
page readonly
|
|
|
|
2D60000
|
unkown image
|
page readonly
|
|
|
|
2D2F000
|
unkown
|
page read and write
|
|
|
|
1B813E52000
|
unkown
|
page read and write
|
|
|
|
1BCDCC13000
|
unkown
|
page read and write
|
|
|
|
2BD0000
|
unkown image
|
page readonly
|
|
|
|
3600000
|
unkown image
|
page readonly
|
|
|
|
7FF5997EC000
|
unkown image
|
page readonly
|
|
|
|
EFF3CFF000
|
stack
|
page read and write
|
|
|
|
1E3F0F50000
|
unkown
|
page read and write
|
|
|
|
1B813E6D000
|
unkown
|
page read and write
|
|
|
|
2A4B000
|
unkown image
|
page readonly
|
|
|
|
7FF53AC00000
|
unkown image
|
page readonly
|
|
|
|
336A000
|
heap default
|
page read and write
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
2C642DB0000
|
unkown
|
page read and write
|
|
|
|
2D5B000
|
unkown
|
page read and write
|
|
|
|
23832500000
|
unkown
|
page read and write
|
|
|
|
2616000
|
unkown image
|
page readonly
|
|
|
|
6EC3F000
|
unkown image
|
page write copy
|
|
|
|
6384000
|
heap private
|
page read and write
|
|
|
|
7F750000
|
unkown image
|
page readonly
|
|
|
|
7FF53A488000
|
unkown image
|
page readonly
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
282A000
|
unkown image
|
page readonly
|
|
|
|
2603000
|
unkown image
|
page readonly
|
|
|
|
2BD0000
|
unkown image
|
page readonly
|
|
|
|
25DF000
|
unkown image
|
page readonly
|
|
|
|
23832666000
|
unkown
|
page read and write
|
|
|
|
7F672000
|
unkown image
|
page readonly
|
|
|
|
7FF599883000
|
unkown image
|
page readonly
|
|
|
|
1B813E3B000
|
unkown
|
page read and write
|
|
|
|
7FF4F53EF000
|
unkown image
|
page readonly
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
2C642DD0000
|
unkown image
|
page readonly
|
|
|
|
7F750000
|
unkown image
|
page readonly
|
|
|
|
7FF53ABE9000
|
unkown image
|
page readonly
|
|
|
|
25ED000
|
unkown image
|
page readonly
|
|
|
|
1B813E51000
|
unkown
|
page read and write
|
|
|
|
7FF53AA87000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
2D70000
|
unkown image
|
page readonly
|
|
|
|
7FF53A4F6000
|
unkown image
|
page readonly
|
|
|
|
7FF54E891000
|
unkown image
|
page readonly
|
|
|
|
7DF5A75E2000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown image
|
page readonly
|
|
|
|
2BD0000
|
unkown image
|
page readonly
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
2698000
|
unkown image
|
page readonly
|
|
|
|
2671000
|
unkown image
|
page readonly
|
|
|
|
2978000
|
unkown image
|
page readonly
|
|
|
|
25A5000
|
unkown image
|
page readonly
|
|
|
|
2BF0000
|
unkown image
|
page readonly
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
7FF53A48E000
|
unkown image
|
page readonly
|
|
|
|
49872DD000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
unkown image
|
page readonly
|
|
|
|
5E90000
|
unkown image
|
page readonly
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
7FCD0000
|
unkown image
|
page readonly
|
|
|
|
6EC3F000
|
unkown image
|
page write copy
|
|
|
|
7FF53AC57000
|
unkown image
|
page readonly
|
|
|
|
29DC000
|
unkown image
|
page readonly
|
|
|
|
265F000
|
unkown image
|
page readonly
|
|
|
|
6EC3F000
|
unkown image
|
page write copy
|
|
|
|
7DF503152000
|
unkown image
|
page readonly
|
|
|
|
28BF000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6E02000
|
unkown image
|
page readonly
|
|
|
|
7DF4D1BE0000
|
unkown image
|
page readonly
|
|
|
|
2E90000
|
unkown
|
page read and write
|
|
|
|
25C9000
|
unkown image
|
page readonly
|
|
|
|
2598000
|
unkown image
|
page readonly
|
|
|
|
28D6000
|
unkown image
|
page readonly
|
|
|
|
3035000
|
unkown
|
page read and write
|
|
|
|
2A68000
|
unkown image
|
page readonly
|
|
|
|
7FF5620C7000
|
unkown image
|
page readonly
|
|
|
|
6EBE1000
|
unkown image
|
page execute read
|
|
|
|
2A3B000
|
unkown image
|
page readonly
|
|
|
|
6EC40000
|
unkown image
|
page readonly
|
|
|
|
7FF562971000
|
unkown image
|
page readonly
|
|
|
|
3385000
|
unkown
|
page read and write
|
|
|
|
26C4000
|
unkown image
|
page readonly
|
|
|
|
249D000
|
unkown image
|
page readonly
|
|
|
|
1BCDD260000
|
unkown image
|
page readonly
|
|
|
|
6EC0A000
|
unkown image
|
page readonly
|
|
|
|
1C768ED0000
|
unkown image
|
page readonly
|
|
|
|
293B000
|
unkown image
|
page readonly
|
|
|
|
2C643BB0000
|
unkown
|
page readonly
|
|
|
|
7F742000
|
unkown image
|
page readonly
|
|
|
|
25D5000
|
unkown image
|
page readonly
|
|
|
|
2795000
|
unkown image
|
page readonly
|
|
|
|
4DDC000
|
stack
|
page read and write
|
|
|
|
266B000
|
unkown image
|
page readonly
|
|
|
|
2F00000
|
heap private
|
page read and write
|
|
|
|
7FF599867000
|
unkown image
|
page readonly
|
|
|
|
7E5000
|
stack
|
page execute and read and write
|
|
|
|
7F642000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5403000
|
unkown image
|
page readonly
|
|
|
|
3370000
|
unkown image
|
page readonly
|
|
|
|
25F6000
|
unkown image
|
page readonly
|
|
|
|
49876F9000
|
stack
|
page read and write
|
|
|
|
6EC40000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown image
|
page readonly
|
|
|
|
67CE000
|
stack
|
page read and write
|
|
|
|
170000
|
unkown image
|
page readonly
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
2671000
|
unkown image
|
page readonly
|
|
|
|
1B813E77000
|
unkown
|
page read and write
|
|
|
|
7FF53ACD1000
|
unkown image
|
page readonly
|
|
|
|
7F752000
|
unkown image
|
page readonly
|
|
|
|
7DF5A75D0000
|
unkown image
|
page readonly
|
|
|
|
6EC0A000
|
unkown image
|
page readonly
|
|
|
|
238325D0000
|
unkown
|
page read and write
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
2968000
|
unkown image
|
page readonly
|
|
|
|
1B813D10000
|
unkown image
|
page readonly
|
|
|
|
29AB000
|
unkown image
|
page readonly
|
|
|
|
1BCDD330000
|
unkown
|
page read and write
|
|
|
|
1B813E75000
|
unkown
|
page read and write
|
|
|
|
7FF599949000
|
unkown image
|
page readonly
|
|
|
|
51450FE000
|
stack
|
page read and write
|
|
|
|
7F770000
|
unkown image
|
page readonly
|
|
|
|
6EC0A000
|
unkown image
|
page readonly
|
|
|
|
7F780000
|
unkown image
|
page readonly
|
|
|
|
7FF53A984000
|
unkown image
|
page readonly
|
|
|
|
7F660000
|
unkown image
|
page readonly
|
|
|
|
7FF53ABF3000
|
unkown image
|
page readonly
|
|
|
|
7FF5C60B1000
|
unkown image
|
page readonly
|
|
|
|
261A000
|
unkown image
|
page readonly
|
|
|
|
2CF0000
|
unkown
|
page read and write
|
|
|
|
7FF599815000
|
unkown image
|
page readonly
|
|
|
|
7FD50000
|
unkown image
|
page readonly
|
|
|
|
2C642C60000
|
unkown
|
page read and write
|
|
|
|
7FF4F6E21000
|
unkown image
|
page readonly
|
|
|
|
7DF548950000
|
unkown image
|
page readonly
|
|
|
|
7FF4F54DA000
|
unkown image
|
page readonly
|
|
|
|
2A41000
|
unkown image
|
page readonly
|
|
|
|
2C643960000
|
unkown
|
page read and write
|
|
|
|
7F772000
|
unkown image
|
page readonly
|
|
|
|
1B813E30000
|
unkown
|
page read and write
|
|
|
|
2ED0000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown image
|
page readonly
|
|
|
|
1B813E49000
|
unkown
|
page read and write
|
|
|
|
78B8E7A000
|
stack
|
page read and write
|
|
|
|
2EFA000
|
heap default
|
page read and write
|
|
|
|
3E0000
|
unkown image
|
page readonly
|
|
|
|
2D37000
|
unkown
|
page read and write
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
6EC3D000
|
unkown image
|
page read and write
|
|
|
|
295E000
|
unkown image
|
page readonly
|
|
|
|
850000
|
unkown image
|
page readonly
|
|
|
|
2610000
|
unkown image
|
page readonly
|
|
|
|
1BCDD402000
|
unkown
|
page read and write
|
|
|
|
1BCDD360000
|
unkown
|
page read and write
|
|
|
|
7FF5C6027000
|
unkown image
|
page readonly
|
|
|
|
23832702000
|
unkown
|
page read and write
|
|
|
|
1C769102000
|
unkown
|
page read and write
|
|
|
|
7FF5998E7000
|
unkown image
|
page readonly
|
|
|
|
2A36000
|
unkown
|
page read and write
|
|
|
|
1E3F0913000
|
unkown
|
page read and write
|
|
|
|
2CC0000
|
unkown image
|
page readonly
|
|
|
|
2B9C000
|
unkown
|
page read and write
|
|
|
|
29C6000
|
unkown image
|
page readonly
|
|
|
|
23834002000
|
unkown
|
page read and write
|
|
|
|
7FF4F54B2000
|
unkown image
|
page readonly
|
|
|
|
23832520000
|
unkown
|
page read and write
|
|
|
|
2C10000
|
unkown
|
page read and write
|
|
|
|
2A25000
|
unkown
|
page read and write
|
|
|
|
7F772000
|
unkown image
|
page readonly
|
|
|
|
7FF59995A000
|
unkown image
|
page readonly
|
|
|
|
23832700000
|
unkown
|
page read and write
|
|
|
|
1BCDCBA0000
|
unkown image
|
page readonly
|
|
|
|
4E20000
|
unkown image
|
page readonly
|
|
|
|
29DC000
|
unkown image
|
page readonly
|
|
|
|
2698000
|
unkown image
|
page readonly
|
|
|
|
7F772000
|
unkown image
|
page readonly
|
|
|
|
268C000
|
unkown image
|
page readonly
|
|
|
|
7FF53AC0E000
|
unkown image
|
page readonly
|
|
|
|
78B957E000
|
stack
|
page read and write
|
|
|
|
7F530000
|
unkown image
|
page readonly
|
|
|
|
2C55000
|
stack
|
page execute and read and write
|
|
|
|
2D70000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5779000
|
unkown image
|
page readonly
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
7FD42000
|
unkown image
|
page readonly
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
2598000
|
unkown image
|
page readonly
|
|
|
|
7FF56288F000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6E2A000
|
unkown image
|
page readonly
|
|
|
|
2A56000
|
unkown image
|
page readonly
|
|
|
|
1E3F07A0000
|
unkown image
|
page readonly
|
|
|
|
11A0000
|
unkown image
|
page readonly
|
|
|
|
1B813E13000
|
unkown
|
page read and write
|
|
|
|
310E000
|
stack
|
page read and write
|
|
|
|
338D000
|
unkown
|
page read and write
|
|
|
|
28A6000
|
unkown image
|
page readonly
|
|
|
|
7FF562975000
|
unkown image
|
page readonly
|
|
|
|
2E4D000
|
unkown
|
page read and write
|
|
|
|
7F632000
|
unkown image
|
page readonly
|
|
|
|
7FF4F4C90000
|
unkown image
|
page readonly
|
|
|
|
23832A00000
|
unkown image
|
page readonly
|
|
|
|
3280000
|
unkown image
|
page readonly
|
|
|
|
298A000
|
unkown image
|
page readonly
|
|
|
|
49876FE000
|
stack
|
page read and write
|
|
|
|
7FF4F6AF7000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
7FCE0000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
1C769115000
|
unkown
|
page read and write
|
|
|
|
51454FE000
|
stack
|
page read and write
|
|
|
|
7DF5705F0000
|
unkown image
|
page readonly
|
|
|
|
2DF0000
|
unkown image
|
page readonly
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
2A3B000
|
unkown image
|
page readonly
|
|
|
|
7F530000
|
unkown image
|
page readonly
|
|
|
|
1B814450000
|
unkown image
|
page readonly
|
|
|
|
7FF4F54E1000
|
unkown image
|
page readonly
|
|
|
|
25B6000
|
unkown image
|
page readonly
|
|
|
|
7FCF0000
|
unkown image
|
page readonly
|
|
|
|
2C643090000
|
unkown image
|
page readonly
|
|
|
|
2CC0000
|
unkown image
|
page readonly
|
|
|
|
2C642E5D000
|
unkown
|
page read and write
|
|
|
|
29EB000
|
unkown
|
page read and write
|
|
|
|
3480000
|
unkown image
|
page readonly
|
|
|
|
7FF53ACDA000
|
unkown image
|
page readonly
|
|
|
|
273A000
|
unkown image
|
page readonly
|
|
|
|
78B947E000
|
stack
|
page read and write
|
|
|
|
29E0000
|
unkown image
|
page readonly
|
|
|
|
7FF59987D000
|
unkown image
|
page readonly
|
|
|
|
7FF53A833000
|
unkown image
|
page readonly
|
|
|
|
3038000
|
unkown
|
page read and write
|
|
|
|
7A1FE7B000
|
unkown
|
page read and write
|
|
|
|
31D0000
|
unkown image
|
page readonly
|
|
|
|
1B813E2D000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
7FF5C6094000
|
unkown image
|
page readonly
|
|
|
|
1B813E4F000
|
unkown
|
page read and write
|
|
|
|
2C642E6D000
|
heap default
|
page read and write
|
|
|
|
B39D0FE000
|
stack
|
page read and write
|
|
|
|
7FF562981000
|
unkown image
|
page readonly
|
|
|
|
3290000
|
unkown image
|
page readonly
|
|
|
|
2D60000
|
unkown image
|
page readonly
|
|
|
|
1020000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
238325D0000
|
unkown
|
page read and write
|
|
|
|
25D5000
|
unkown image
|
page readonly
|
|
|
|
1B813E4A000
|
unkown
|
page read and write
|
|
|
|
7FF5998EA000
|
unkown image
|
page readonly
|
|
|
|
2951000
|
unkown image
|
page readonly
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
258E000
|
unkown image
|
page readonly
|
|
|
|
28EC000
|
unkown image
|
page readonly
|
|
|
|
7FF562209000
|
unkown image
|
page readonly
|
|
|
|
6EC0A000
|
unkown image
|
page readonly
|
|
|
|
2C643BD0000
|
unkown
|
page read and write
|
|
|
|
7DF504AB0000
|
unkown image
|
page readonly
|
|
|
|
2D75000
|
unkown
|
page read and write
|
|
|
|
7FF59970F000
|
unkown image
|
page readonly
|
|
|
|
2C6430C0000
|
unkown
|
page read and write
|
|
|
|
26D1000
|
unkown image
|
page readonly
|
|
|
|
7FF5C60A1000
|
unkown image
|
page readonly
|
|
|
|
295E000
|
unkown image
|
page readonly
|
|
|
|
7FF5620C0000
|
unkown image
|
page readonly
|
|
|
|
7F640000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
1BCDCED0000
|
unkown image
|
page readonly
|
|
|
|
6EC3F000
|
unkown image
|
page write copy
|
|
|
|
3240000
|
unkown
|
page read and write
|
|
|
|
2CB0000
|
unkown image
|
page read and write
|
|
|
|
1E3F0CE0000
|
unkown image
|
page readonly
|
|
|
|
EFF3E7F000
|
stack
|
page read and write
|
|
|
|
2A21000
|
unkown
|
page read and write
|
|
|
|
7FF59996A000
|
unkown image
|
page readonly
|
|
|
|
6EBE1000
|
unkown image
|
page execute read
|
|
|
|
245A000
|
unkown image
|
page readonly
|
|
|
|
7DF4A54A0000
|
unkown image
|
page readonly
|
|
|
|
7DF548940000
|
unkown image
|
page readonly
|
|
|
|
2C642E5F000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
unkown image
|
page readonly
|
|
|
|
7F762000
|
unkown image
|
page readonly
|
|
|
|
7A2037F000
|
stack
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
323E000
|
stack
|
page read and write
|
|
|
|
E20000
|
unkown image
|
page readonly
|
|
|
|
1E3F0878000
|
unkown
|
page read and write
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
26BB000
|
unkown image
|
page readonly
|
|
|
|
514537D000
|
stack
|
page read and write
|
|
|
|
2C642D90000
|
unkown
|
page read and write
|
|
|
|
2999000
|
unkown image
|
page readonly
|
|
|
|
7F632000
|
unkown image
|
page readonly
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
2799000
|
unkown image
|
page readonly
|
|
|
|
2968000
|
unkown image
|
page readonly
|
|
|
|
25C9000
|
unkown image
|
page readonly
|
|
|
|
7FF599893000
|
unkown image
|
page readonly
|
|
|
|
29B0000
|
unkown image
|
page readonly
|
|
|
|
23832600000
|
unkown
|
page read and write
|
|
|
|
2950000
|
unkown image
|
page readonly
|
|
|
|
7FCE2000
|
unkown image
|
page readonly
|
|
|
|
1BCDCC40000
|
unkown
|
page read and write
|
|
|
|
2A32000
|
unkown
|
page read and write
|
|
|
|
3391000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
6390000
|
unkown
|
page read and write
|
|
|
|
7FF599890000
|
unkown image
|
page readonly
|
|
|
|
7FCD0000
|
unkown image
|
page readonly
|
|
|
|
7F630000
|
unkown image
|
page readonly
|
|
|
|
26E6000
|
unkown image
|
page readonly
|
|
|
|
7DF503160000
|
unkown image
|
page readonly
|
|
|
|
1BCDCD02000
|
unkown
|
page read and write
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
23832613000
|
unkown
|
page read and write
|
|
|
|
1BCDD0D0000
|
unkown image
|
page readonly
|
|
|
|
2C642E5D000
|
unkown
|
page read and write
|
|
|
|
2950000
|
unkown image
|
page readonly
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
24C5000
|
unkown image
|
page readonly
|
|
|
|
1B813E63000
|
unkown
|
page read and write
|
|
|
|
7F770000
|
unkown image
|
page readonly
|
|
|
|
25BA000
|
unkown image
|
page readonly
|
|
|
|
2671000
|
unkown image
|
page readonly
|
|
|
|
2E78000
|
unkown
|
page read and write
|
|
|
|
266B000
|
unkown image
|
page readonly
|
|
|
|
1E3F0840000
|
unkown
|
page read and write
|
|
|
|
25DB000
|
unkown image
|
page readonly
|
|
|
|
5E00000
|
unkown
|
page read and write
|
|
|
|
49878FE000
|
stack
|
page read and write
|
|
|
|
7FF4F5197000
|
unkown image
|
page readonly
|
|
|
|
1B813E2E000
|
unkown
|
page read and write
|
|
|
|
7F780000
|
unkown image
|
page readonly
|
|
|
|
160000
|
unkown image
|
page read and write
|
|
|
|
238323E0000
|
unkown image
|
page readonly
|
|
|
|
6EC40000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6BF7000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6D7B000
|
unkown image
|
page readonly
|
|
|
|
7FF59987F000
|
unkown image
|
page readonly
|
|
|
|
6380000
|
heap private
|
page read and write
|
|
|
|
2AC0000
|
unkown image
|
page readonly
|
|
|
|
24BA000
|
unkown image
|
page readonly
|
|
|
|
2664000
|
unkown image
|
page readonly
|
|
|
|
11A0000
|
unkown image
|
page readonly
|
|
|
|
2383262A000
|
unkown
|
page read and write
|
|
|
|
2A5C000
|
unkown image
|
page readonly
|
|
|
|
2383263F000
|
unkown
|
page read and write
|
|
|
|
3045000
|
heap default
|
page read and write
|
|
|
|
6EC3F000
|
unkown image
|
page write copy
|
|
|
|
23834540000
|
unkown image
|
page write copy
|
|
|
|
7FF4F54B9000
|
unkown image
|
page readonly
|
|
|
|
1E3F07F0000
|
heap default
|
page read and write
|
|
|
|
1BCDCC02000
|
unkown
|
page read and write
|
|
|
|
7FF53AC2B000
|
unkown image
|
page readonly
|
|
|
|
2788000
|
unkown image
|
page readonly
|
|
|
|
7FF53A63D000
|
unkown image
|
page readonly
|
|
|
|
2491000
|
unkown image
|
page readonly
|
|
|
|
7FF562792000
|
unkown image
|
page readonly
|
|
|
|
2BF0000
|
unkown image
|
page readonly
|
|
|
|
7FD62000
|
unkown image
|
page readonly
|
|
|
|
2D21000
|
unkown
|
page read and write
|
|
|
|
7FF4F5433000
|
unkown image
|
page readonly
|
|
|
|
24C5000
|
unkown image
|
page readonly
|
|
|
|
7F670000
|
unkown image
|
page readonly
|
|
|
|
2D25000
|
unkown
|
page read and write
|
|
|
|
5E84000
|
heap private
|
page read and write
|
|
|
|
7FF53ABCB000
|
unkown image
|
page readonly
|
|
|
|
25ED000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6DA7000
|
unkown image
|
page readonly
|
|
|
|
7FCE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5990FB000
|
unkown image
|
page readonly
|
|
|
|
800000
|
unkown image
|
page read and write
|
|
|
|
23832400000
|
heap default
|
page read and write
|
|
|
|
245A000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6DAD000
|
unkown image
|
page readonly
|
|
|
|
1E3F0780000
|
unkown image
|
page read and write
|
|
|
|
2DC0000
|
unkown
|
page read and write
|
|
|
|
1C769028000
|
unkown
|
page read and write
|
|
|
|
7FF53A3A9000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
49879F9000
|
stack
|
page read and write
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
2C6430D0000
|
unkown
|
page read and write
|
|
|
|
2B98000
|
unkown
|
page read and write
|
|
|
|
7FF53ACB2000
|
unkown image
|
page readonly
|
|
|
|
3055000
|
unkown
|
page read and write
|
|
|
|
2E5B000
|
unkown
|
page read and write
|
|
|
|
2635000
|
unkown image
|
page readonly
|
|
|
|
7FF5620C9000
|
unkown image
|
page readonly
|
|
|
|
7DF548952000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
23832390000
|
unkown image
|
page read and write
|
|
|
|
2CC0000
|
unkown image
|
page readonly
|
|
|
|
29CB000
|
unkown image
|
page readonly
|
|
|
|
2CC0000
|
unkown image
|
page readonly
|
|
|
|
3385000
|
unkown
|
page read and write
|
|
|
|
2975000
|
unkown image
|
page readonly
|
|
|
|
1C769202000
|
unkown
|
page read and write
|
|
|
|
2C642C90000
|
unkown image
|
page readonly
|
|
|
|
7F740000
|
unkown image
|
page readonly
|
|
|
|
7FF4F54D5000
|
unkown image
|
page readonly
|
|
|
|
920000
|
stack
|
page read and write
|
|
|
|
7DF504A90000
|
unkown image
|
page readonly
|
|
|
|
2C90000
|
unkown image
|
page readonly
|
|
|
|
2A68000
|
unkown image
|
page readonly
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
301B000
|
unkown
|
page read and write
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
7FF5628CB000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6B8F000
|
unkown image
|
page readonly
|
|
|
|
328A000
|
heap default
|
page read and write
|
|
|
|
7F680000
|
unkown image
|
page readonly
|
|
|
|
7FD42000
|
unkown image
|
page readonly
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
3110000
|
unkown image
|
page readonly
|
|
|
|
7FCD2000
|
unkown image
|
page readonly
|
|
|
|
1E3F07A0000
|
unkown image
|
page readonly
|
|
|
|
49877FF000
|
stack
|
page read and write
|
|
|
|
25A3000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5FD3000
|
unkown image
|
page readonly
|
|
|
|
25E3000
|
unkown image
|
page readonly
|
|
|
|
7A2057F000
|
stack
|
page read and write
|
|
|
|
23832590000
|
unkown
|
page read and write
|
|
|
|
990000
|
heap default
|
page read and write
|
|
|
|
2C6430B0000
|
unkown
|
page read and write
|
|
|
|
2686000
|
unkown image
|
page readonly
|
|
|
|
2698000
|
unkown image
|
page readonly
|
|
|
|
7FF53A9B2000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
1B813D70000
|
unkown
|
page read and write
|
|
|
|
7FD62000
|
unkown image
|
page readonly
|
|
|
|
7A2047F000
|
stack
|
page read and write
|
|
|
|
2664000
|
unkown image
|
page readonly
|
|
|
|
238323B0000
|
unkown image
|
page readonly
|
|
|
|
7DF548940000
|
unkown image
|
page readonly
|
|
|
|
2698000
|
unkown image
|
page readonly
|
|
|
|
7DF5D3D30000
|
unkown image
|
page readonly
|
|
|
|
7DF5705F2000
|
unkown image
|
page readonly
|
|
|
|
7FF599954000
|
unkown image
|
page readonly
|
|
|
|
1B813CE0000
|
heap private
|
page read and write
|
|
|
|
790000
|
unkown image
|
page read and write
|
|
|
|
7FF4F5400000
|
unkown image
|
page readonly
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
23832800000
|
unkown image
|
page readonly
|
|
|
|
7DF504A90000
|
unkown image
|
page readonly
|
|
|
|
29AF000
|
unkown image
|
page readonly
|
|
|
|
29BD000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6D3A000
|
unkown image
|
page readonly
|
|
|
|
1B813E42000
|
unkown
|
page read and write
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
51451FD000
|
stack
|
page read and write
|
|
|
|
31F0000
|
unkown image
|
page readonly
|
|
|
|
7FF53AC5A000
|
unkown image
|
page readonly
|
|
|
|
820000
|
heap default
|
page read and write
|
|
|
|
5E80000
|
heap private
|
page read and write
|
|
|
|
2D50000
|
heap default
|
page read and write
|
|
|
|
2591000
|
unkown image
|
page readonly
|
|
|
|
1B813E84000
|
unkown
|
page read and write
|
|
|
|
73C000
|
unkown
|
page read and write
|
|
|
|
2D60000
|
unkown image
|
page readonly
|
|
|
|
2CC0000
|
unkown image
|
page readonly
|
|
|
|
6EBE1000
|
unkown image
|
page execute read
|
|
|
|
7FF5C60AA000
|
unkown image
|
page readonly
|
|
|
|
2D25000
|
unkown
|
page read and write
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
7FF56296A000
|
unkown image
|
page readonly
|
|
|
|
25ED000
|
unkown image
|
page readonly
|
|
|
|
2D2F000
|
unkown
|
page read and write
|
|
|
|
7FF5628A3000
|
unkown image
|
page readonly
|
|
|
|
EFF3C7F000
|
stack
|
page read and write
|
|
|
|
4F5D000
|
stack
|
page read and write
|
|
|
|
276C000
|
unkown image
|
page readonly
|
|
|
|
7FF5628DE000
|
unkown image
|
page readonly
|
|
|
|
1C768EE0000
|
unkown image
|
page readonly
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
268C000
|
unkown image
|
page readonly
|
|
|
|
2C642E5D000
|
unkown
|
page read and write
|
|
|
|
1B813E45000
|
unkown
|
page read and write
|
|
|
|
2C643300000
|
unkown image
|
page readonly
|
|
|
|
B39D1FE000
|
stack
|
page read and write
|
|
|
|
7DF5705F0000
|
unkown image
|
page readonly
|
|
|
|
7FF562981000
|
unkown image
|
page readonly
|
|
|
|
7FF53A851000
|
unkown image
|
page readonly
|
|
|
|
7FCE2000
|
unkown image
|
page readonly
|
|
|
|
29AB000
|
unkown image
|
page readonly
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6BCF000
|
unkown image
|
page readonly
|
|
|
|
1BCDD600000
|
unkown
|
page read and write
|
|
|
|
3076000
|
unkown
|
page read and write
|
|
|
|
7FCD0000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown image
|
page readonly
|
|
|
|
7FCF0000
|
unkown image
|
page readonly
|
|
|
|
6EC40000
|
unkown image
|
page readonly
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
7FF56217B000
|
unkown image
|
page readonly
|
|
|
|
7FCE2000
|
unkown image
|
page readonly
|
|
|
|
1BCDCC5C000
|
unkown
|
page read and write
|
|
|
|
7F742000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
3D0000
|
unkown image
|
page read and write
|
|
|
|
2686000
|
unkown image
|
page readonly
|
|
|
|
23832677000
|
unkown
|
page read and write
|
|
|
|
26EC000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6E1A000
|
unkown image
|
page readonly
|
|
|
|
7FF4F540E000
|
unkown image
|
page readonly
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
7FF53AAF2000
|
unkown image
|
page readonly
|
|
|
|
E20000
|
unkown image
|
page readonly
|
|
|
|
2D70000
|
unkown image
|
page readonly
|
|
|
|
7FF562886000
|
unkown image
|
page readonly
|
|
|
|
2841000
|
unkown image
|
page readonly
|
|
|
|
7DF5A75E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5991EE000
|
unkown image
|
page readonly
|
|
|
|
7FF53ACE1000
|
unkown image
|
page readonly
|
|
|
|
1B813E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C5D35000
|
unkown image
|
page readonly
|
|
|
|
28C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5620CE000
|
unkown image
|
page readonly
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
506E000
|
stack
|
page read and write
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
7F770000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
1BCDD360000
|
unkown
|
page read and write
|
|
|
|
2A2B000
|
unkown image
|
page readonly
|
|
|
|
1BCDCBB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5FDE000
|
unkown image
|
page readonly
|
|
|
|
1E3F0CD0000
|
unkown image
|
page readonly
|
|
|
|
286E000
|
unkown image
|
page readonly
|
|
|
|
2981000
|
unkown image
|
page readonly
|
|
|
|
2961000
|
unkown image
|
page readonly
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
28BB000
|
unkown image
|
page readonly
|
|
|
|
470000
|
heap default
|
page read and write
|
|
|
|
25F6000
|
unkown image
|
page readonly
|
|
|
|
6EBE1000
|
unkown image
|
page execute read
|
|
|
|
7FF53ABCF000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5FD0000
|
unkown image
|
page readonly
|
|
|
|
78B907D000
|
stack
|
page read and write
|
|
|
|
7FF54E891000
|
unkown image
|
page readonly
|
|
|
|
2F10000
|
unkown image
|
page readonly
|
|
|
|
6EC3D000
|
unkown image
|
page read and write
|
|
|
|
7F632000
|
unkown image
|
page readonly
|
|
|
|
2E51000
|
unkown
|
page read and write
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
2A41000
|
unkown image
|
page readonly
|
|
|
|
3388000
|
unkown
|
page read and write
|
|
|
|
29C6000
|
unkown image
|
page readonly
|
|
|
|
1B813E4D000
|
unkown
|
page read and write
|
|
|
|
2D2D000
|
unkown
|
page read and write
|
|
|
|
7FF53A384000
|
unkown image
|
page readonly
|
|
|
|
26DB000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
7A2027C000
|
stack
|
page read and write
|
|
|
|
1020000
|
unkown image
|
page readonly
|
|
|
|
294B000
|
unkown image
|
page readonly
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
2643000
|
unkown image
|
page readonly
|
|
|
|
7FF599961000
|
unkown image
|
page readonly
|
|
|
|
7DF570600000
|
unkown image
|
page readonly
|
|
|
|
3076000
|
heap default
|
page read and write
|
|
|
|
1C769300000
|
unkown
|
page read and write
|
|
|
|
29AF000
|
unkown image
|
page readonly
|
|
|
|
2605000
|
unkown image
|
page readonly
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
25DF000
|
unkown image
|
page readonly
|
|
|
|
3394000
|
unkown
|
page read and write
|
|
|
|
7DF503150000
|
unkown image
|
page readonly
|
|
|
|
850000
|
unkown image
|
page readonly
|
|
|
|
238325D0000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
1B813E41000
|
unkown
|
page read and write
|
|
|
|
7FF4F51A0000
|
unkown image
|
page readonly
|
|
|
|
306F000
|
unkown
|
page read and write
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
29A5000
|
unkown image
|
page readonly
|
|
|
|
2876000
|
unkown image
|
page readonly
|
|
|
|
6EC0A000
|
unkown image
|
page readonly
|
|
|
|
88B000
|
unkown
|
page read and write
|
|
|
|
3280000
|
heap default
|
page read and write
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
7FCE2000
|
unkown image
|
page readonly
|
|
|
|
2EF0000
|
unkown image
|
page readonly
|
|
|
|
258E000
|
unkown image
|
page readonly
|
|
|
|
7FF562797000
|
unkown image
|
page readonly
|
|
|
|
11B0000
|
unkown image
|
page readonly
|
|
|
|
1C768F00000
|
heap default
|
page read and write
|
|
|
|
7FF5C602A000
|
unkown image
|
page readonly
|
|
|
|
2C642E55000
|
unkown
|
page read and write
|
|
|
|
7FF4F53ED000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
920000
|
stack
|
page read and write
|
|
|
|
2670000
|
unkown image
|
page readonly
|
|
|
|
1E3F07D0000
|
unkown image
|
page readonly
|
|
|
|
7FF53ACD5000
|
unkown image
|
page readonly
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
2A68000
|
unkown image
|
page readonly
|
|
|
|
7F640000
|
unkown image
|
page readonly
|
|
|
|
6EBE0000
|
unkown image
|
page readonly
|
|
|
|
25E3000
|
unkown image
|
page readonly
|
|
|
|
7FF53AB5C000
|
unkown image
|
page readonly
|
|
|
|
6390000
|
unkown
|
page read and write
|
|
|
|
29CB000
|
unkown image
|
page readonly
|
|
|
|
2A2F000
|
unkown image
|
page readonly
|
|
|
|
1C769100000
|
unkown
|
page read and write
|
|
|
|
23832550000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
heap default
|
page read and write
|
|
|
|
1CC000
|
unkown
|
page read and write
|
|
|
|
7DF504AA0000
|
unkown image
|
page readonly
|
|
|
|
7DF504AA2000
|
unkown image
|
page readonly
|
|
|
|
7FCE2000
|
unkown image
|
page readonly
|
|
|
|
78B927F000
|
stack
|
page read and write
|
|
|
|
7FF53ACC4000
|
unkown image
|
page readonly
|
|
|
|
890000
|
unkown image
|
page readonly
|
|
|
|
2DAE000
|
stack
|
page read and write
|
|
|
|
2751000
|
unkown image
|
page readonly
|
|
|
|
63C000
|
unkown
|
page read and write
|
|
|
|
7FD30000
|
unkown image
|
page readonly
|
|
|
|
289A000
|
unkown image
|
page readonly
|
|
|
|
7FF53A8DE000
|
unkown image
|
page readonly
|
|
|
|
2471000
|
unkown image
|
page readonly
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
7F740000
|
unkown image
|
page readonly
|
|
|
|
7A2017C000
|
stack
|
page read and write
|
|
|
|
1B813E66000
|
unkown
|
page read and write
|
|
|
|
26F8000
|
unkown image
|
page readonly
|
|
|
|
7F660000
|
unkown image
|
page readonly
|
|
|
|
7FF53AC32000
|
unkown image
|
page readonly
|
|
|
|
7DF5D3D22000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6DAA000
|
unkown image
|
page readonly
|
|
|
|
7FF5C609A000
|
unkown image
|
page readonly
|
|
|
|
1BCDCB70000
|
heap private
|
page read and write
|
|
|
|
2693000
|
unkown image
|
page readonly
|
|
|
|
1B813E6B000
|
unkown
|
page read and write
|
|
|
|
1B813E4E000
|
unkown
|
page read and write
|
|
|
|
7DF503160000
|
unkown image
|
page readonly
|
|
|
|
3270000
|
heap private
|
page read and write
|
|
|
|
7FD50000
|
unkown image
|
page readonly
|
|
|
|
7FD32000
|
unkown image
|
page readonly
|
|
|
|
7FD70000
|
unkown image
|
page readonly
|
|
|
|
7FF53AC07000
|
unkown image
|
page readonly
|
|
|
|
7FCD2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F51FA000
|
unkown image
|
page readonly
|
|
|
|
6EC3D000
|
unkown image
|
page read and write
|
|
|
|
2693000
|
unkown image
|
page readonly
|
|
|
|
7FF53ACB9000
|
unkown image
|
page readonly
|
|
|
|
2C6430E5000
|
heap private
|
page read and write
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
EFF3DF9000
|
stack
|
page read and write
|
|
|
|
1E3F0E60000
|
unkown image
|
page readonly
|
|
|
|
264D000
|
unkown image
|
page readonly
|
|
|
|
7DF503140000
|
unkown image
|
page readonly
|
|
|
|
170000
|
unkown image
|
page readonly
|
|
|
|
5144FFE000
|
stack
|
page read and write
|
|
|
|
7FF53ABED000
|
unkown image
|
page readonly
|
|
|
|
2A4B000
|
unkown image
|
page readonly
|
|
|
|
7A2077C000
|
stack
|
page read and write
|
|
|
|
2C642C70000
|
unkown image
|
page readonly
|
|
|
|
7FD70000
|
unkown image
|
page readonly
|
|
|
|
2610000
|
unkown image
|
page readonly
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
7FF53AAF7000
|
unkown image
|
page readonly
|
|
|
|
7FF53A847000
|
unkown image
|
page readonly
|
|
|
|
29F0000
|
unkown
|
page read and write
|
|
|
|
298A000
|
unkown image
|
page readonly
|
|
|
|
7F662000
|
unkown image
|
page readonly
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
2FE0000
|
heap private
|
page read and write
|
|
|
|
7E5000
|
stack
|
page execute and read and write
|
|
|
|
29AC000
|
unkown
|
page read and write
|
|
|
|
295B000
|
unkown image
|
page readonly
|
|
|
|
7FF53A497000
|
unkown image
|
page readonly
|
|
|
|
7FF5998C5000
|
unkown image
|
page readonly
|
|
|
|
2C6430F0000
|
unkown
|
page read and write
|
|
|
|
2C6430E9000
|
heap private
|
page read and write
|
|
|
|
6810000
|
unkown
|
page read and write
|
|
|
|
25C6000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5FBD000
|
unkown image
|
page readonly
|
|
|
|
338D000
|
unkown
|
page read and write
|
|
|
|
245A000
|
unkown image
|
page readonly
|
|
|
|
7DF5D3D10000
|
unkown image
|
page readonly
|
|
|
|
2FA0000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
25B6000
|
unkown image
|
page readonly
|
|
|
|
7F780000
|
unkown image
|
page readonly
|
|
|
|
24A6000
|
unkown image
|
page readonly
|
|
|
|
7FF4F54E1000
|
unkown image
|
page readonly
|
|
|
|
2D70000
|
unkown image
|
page readonly
|
|
|
|
7DF5705E0000
|
unkown image
|
page readonly
|
|
|
|
7FCF0000
|
unkown image
|
page readonly
|
|
|
|
7FF562952000
|
unkown image
|
page readonly
|
|
|
|
1C768EB0000
|
unkown image
|
page readonly
|
|
|
|
11B0000
|
unkown image
|
page readonly
|
|
|
|
1B813E00000
|
unkown
|
page read and write
|
|
|
|
2BC0000
|
unkown image
|
page read and write
|
|
|
|
6EC0A000
|
unkown image
|
page readonly
|
|
|
|
7E5000
|
stack
|
page execute and read and write
|
|
|
|
7FF4F5266000
|
unkown image
|
page readonly
|
|
|
|
1B813E2C000
|
unkown
|
page read and write
|
|
|
|
2950000
|
unkown image
|
page readonly
|
|
|
|
2978000
|
unkown image
|
page readonly
|
|
|
|
238323A0000
|
heap private
|
page read and write
|
|
|
|
2D34000
|
unkown
|
page read and write
|
|
|
|
6EC40000
|
unkown image
|
page readonly
|
|
|
|
7DF5D3D22000
|
unkown image
|
page readonly
|
|
|
|
3160000
|
unkown image
|
page readonly
|
|
|
|
2CC0000
|
unkown image
|
page readonly
|
|
|
|
6EBE1000
|
unkown image
|
page execute read
|
|
|
|
3381000
|
unkown
|
page read and write
|
|
|
|
265F000
|
unkown image
|
page readonly
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
660000
|
heap default
|
page read and write
|
|
|
|
7FF5C5FFB000
|
unkown image
|
page readonly
|
|
|
|
2895000
|
unkown image
|
page readonly
|
|
|
|
7F772000
|
unkown image
|
page readonly
|
|
|
|
11B0000
|
unkown image
|
page readonly
|
|
|
|
238323D0000
|
unkown image
|
page readonly
|
|
|
|
2698000
|
unkown image
|
page readonly
|
|
|
|
2598000
|
unkown image
|
page readonly
|
|
|
|
1BCDCC55000
|
unkown
|
page read and write
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
82B000
|
heap default
|
page read and write
|
|
|
|
1B813E4B000
|
unkown
|
page read and write
|
|
|
|
670000
|
unkown image
|
page readonly
|
|
|
|
2978000
|
unkown image
|
page readonly
|
|
|
|
1C769302000
|
unkown
|
page read and write
|
|
|
|
7FF4F6BF1000
|
unkown image
|
page readonly
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
11A0000
|
unkown image
|
page readonly
|
|
|
|
820000
|
heap default
|
page read and write
|
|
|
|
640000
|
unkown
|
page read and write
|
|
|
|
2978000
|
unkown image
|
page readonly
|
|
|
|
1B8142D0000
|
unkown image
|
page readonly
|
|
|
|
7DF446810000
|
unkown image
|
page readonly
|
|
|
|
2FF0000
|
unkown image
|
page readonly
|
|
|
|
502F000
|
stack
|
page read and write
|
|
|
|
7FCE0000
|
unkown image
|
page readonly
|
|
|
|
3190000
|
unkown image
|
page readonly
|
|
|
|
2C642E18000
|
heap default
|
page read and write
|
|
|
|
1E3F07C0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6D01000
|
unkown image
|
page readonly
|
|
|
|
7FF4F54D1000
|
unkown image
|
page readonly
|
|
|
|
7F750000
|
unkown image
|
page readonly
|
|
|
|
2F50000
|
heap default
|
page read and write
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
B39CE7E000
|
stack
|
page read and write
|
|
|
|
6EC3D000
|
unkown image
|
page read and write
|
|
|
|
1C769123000
|
heap private
|
page read and write
|
|
|
|
1B813E29000
|
unkown
|
page read and write
|
|
|
|
7FF4F6B26000
|
unkown image
|
page readonly
|
|
|
|
1E3F0AD0000
|
unkown image
|
page readonly
|
|
|
|
2C3E000
|
stack
|
page read and write
|
|
|
|
2944000
|
unkown image
|
page readonly
|
|
|
|
7DF5A75E0000
|
unkown image
|
page readonly
|
|
|
|
3117000
|
heap private
|
page read and write
|
|
|
|
7FF4F5407000
|
unkown image
|
page readonly
|
|
|
|
7FF5C602D000
|
unkown image
|
page readonly
|
|
|
|
3115000
|
stack
|
page execute and read and write
|
|
|
|
2698000
|
unkown image
|
page readonly
|
|
|
|
1B813E30000
|
unkown
|
page read and write
|
|
|
|
7FF4F6D57000
|
unkown image
|
page readonly
|
|
|
|
7DF5D3D30000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6D53000
|
unkown image
|
page readonly
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
263B000
|
unkown image
|
page readonly
|
|
|
|
286D000
|
unkown image
|
page readonly
|
|
|
|
2C642E10000
|
heap default
|
page read and write
|
|
|
|
7F662000
|
unkown image
|
page readonly
|
|
|
|
1020000
|
unkown image
|
page readonly
|
|
|
|
2972000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5B4B000
|
unkown image
|
page readonly
|
|
|
|
3360000
|
heap default
|
page read and write
|
|
|
|
860000
|
unkown
|
page read and write
|
|
|
|
2DC0000
|
unkown
|
page read and write
|
|
|
|
1E3F0813000
|
unkown
|
page read and write
|
|
|
|
7FF4F6D83000
|
unkown image
|
page readonly
|
|
|
|
25DB000
|
unkown image
|
page readonly
|
|
|
|
7FF599897000
|
unkown image
|
page readonly
|
|
|
|
7F780000
|
unkown image
|
page readonly
|
|
|
|
2FFA000
|
heap default
|
page read and write
|
|
|
|
820000
|
heap default
|
page read and write
|
|
|
|
7DF5A75D2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6BB6000
|
unkown image
|
page readonly
|
|
|
|
7DF5A75D0000
|
unkown image
|
page readonly
|
|
|
|
EFF3D79000
|
stack
|
page read and write
|
|
|
|
30D0000
|
heap default
|
page read and write
|
|
|
|
3700000
|
unkown image
|
page readonly
|
|
|
|
2BD0000
|
unkown image
|
page readonly
|
|
|
|
1BCDCC00000
|
unkown
|
page read and write
|
|
|
|
7DF402960000
|
unkown image
|
page readonly
|
|
|
|
7FF5C5FA7000
|
unkown image
|
page readonly
|
|
|
|
7DF548942000
|
unkown image
|
page readonly
|
|
|
|
265F000
|
unkown image
|
page readonly
|
|
|
|
2CA0000
|
unkown
|
page read and write
|
|
|
|
7FF5C58E5000
|
unkown image
|
page readonly
|
|
|
|
2A56000
|
unkown image
|
page readonly
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
630F000
|
stack
|
page read and write
|
|
|
|
7FD40000
|
unkown image
|
page readonly
|
|
|
|
1C769013000
|
unkown
|
page read and write
|
|
|
|
1C768EB0000
|
unkown image
|
page readonly
|
|
|
|
7DF548960000
|
unkown image
|
page readonly
|
|
|
|
25FB000
|
unkown image
|
page readonly
|
|
|
|
2986000
|
unkown image
|
page readonly
|
|
|
|
62B0000
|
unkown image
|
page readonly
|
|
|
|
760000
|
heap private
|
page read and write
|
|
|
|
1BCDCBE0000
|
unkown image
|
page readonly
|
|
|
|
2A34000
|
unkown image
|
page readonly
|
|
|
|
23832658000
|
unkown
|
page read and write
|
|
|
|
7FF4F6B02000
|
unkown image
|
page readonly
|
|
|
|
B39D2FF000
|
stack
|
page read and write
|
|
|
|
2D0A000
|
heap default
|
page read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
7A2067E000
|
stack
|
page read and write
|
|
|
|
25C6000
|
unkown image
|
page readonly
|
|
|
|
7FF562959000
|
unkown image
|
page readonly
|
|
|
|
1C769317000
|
unkown
|
page read and write
|
|
|
|
2C642C50000
|
unkown image
|
page read and write
|
|
|
|
7DF548960000
|
unkown image
|
page readonly
|
|
|
|
63C000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
unkown image
|
page readonly
|
|
|
|
7F740000
|
unkown image
|
page readonly
|
|
|
|
1E3F1002000
|
unkown
|
page read and write
|
|
|
|
7DF548952000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
3035000
|
unkown
|
page read and write
|
|
|
|
990000
|
heap default
|
page read and write
|
|
|
|
3380000
|
unkown image
|
page readonly
|
|
|
|
EFF39CB000
|
unkown
|
page read and write
|
|
|
|
7F630000
|
unkown image
|
page readonly
|
|
There are 1367 hidden memdumps, click here to show them.