Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Cab_Invoice_pdf.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Roaming\svchost.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\ProgramData\Microsoft\Network\Downloader\edb.log
|
MPEG-4 LOAS
|
dropped
|
||
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
|
Extensible storage engine DataBase, version 0x620, checksum 0x0f1d7f0c, page size 16384, DirtyShutdown, Windows version 10.0
|
dropped
|
||
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\4y2igpme
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\Include\pyconfig.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\VCRUNTIME140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_asyncio.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_bz2.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_ctypes.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_decimal.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_hashlib.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_lzma.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_multiprocessing.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_overlapped.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_queue.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_socket.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_ssl.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\_win32sysloader.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-console-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-datetime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-debug-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-file-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-file-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-file-l2-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-handle-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-localization-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-memory-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-profile-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-synch-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-synch-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-timezone-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-util-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-conio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-convert-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-environment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-locale-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-math-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-process-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-time-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-utility-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\base_library.zip
|
Zip archive data, at least v2.0 to extract
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\file.exe.manifest
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\libcrypto-1_1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\libffi-7.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\libssl-1_1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\pyexpat.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\python38.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\pywintypes38.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\select.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\ucrtbase.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\unicodedata.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\win32api.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\win32event.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI24122\win32gui.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\Include\pyconfig.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\VCRUNTIME140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_asyncio.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_bz2.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_ctypes.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_decimal.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_hashlib.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_lzma.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_multiprocessing.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_overlapped.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_queue.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_socket.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_ssl.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\_win32sysloader.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-console-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-datetime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-debug-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-file-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-file-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-file-l2-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-handle-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-localization-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-memory-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-profile-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-synch-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-synch-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-timezone-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-util-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-conio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-convert-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-environment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-locale-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-math-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-process-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-time-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-utility-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\base_library.zip
|
Zip archive data, at least v2.0 to extract
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\file.exe.manifest
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\libcrypto-1_1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\libffi-7.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\libssl-1_1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\pyexpat.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\python38.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\pywintypes38.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\select.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\ucrtbase.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\unicodedata.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\win32api.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\win32event.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI61562\win32gui.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\Include\pyconfig.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\VCRUNTIME140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_asyncio.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_bz2.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_ctypes.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_decimal.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_hashlib.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_lzma.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_multiprocessing.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_overlapped.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_queue.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_socket.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_ssl.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\_win32sysloader.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-console-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-datetime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-debug-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-file-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-file-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-file-l2-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-handle-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-localization-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-memory-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-profile-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-synch-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-synch-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-timezone-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-util-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-conio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-convert-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-environment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-locale-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-math-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-process-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-time-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-utility-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\base_library.zip
|
Zip archive data, at least v2.0 to extract
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\file.exe.manifest
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\libcrypto-1_1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\libffi-7.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\libssl-1_1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\pyexpat.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\python38.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\pywintypes38.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\select.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\ucrtbase.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\unicodedata.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\win32api.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\win32event.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\_MEI63082\win32gui.pyd
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
|
ASCII text, with no line terminators
|
dropped
|
There are 195 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\Cab_Invoice_pdf.exe
|
"C:\Users\user\Desktop\Cab_Invoice_pdf.exe"
|
||
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
||
C:\Users\user\Desktop\Cab_Invoice_pdf.exe
|
"C:\Users\user\Desktop\Cab_Invoice_pdf.exe"
|
||
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
||
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
||
C:\Users\user\AppData\Roaming\svchost.exe
|
"C:\Users\user\AppData\Roaming\svchost.exe"
|
||
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
||
C:\Users\user\AppData\Roaming\svchost.exe
|
"C:\Users\user\AppData\Roaming\svchost.exe"
|
||
C:\Users\user\AppData\Roaming\svchost.exe
|
"C:\Users\user\AppData\Roaming\svchost.exe"
|
||
C:\Users\user\AppData\Roaming\svchost.exe
|
"C:\Users\user\AppData\Roaming\svchost.exe"
|
||
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
|
||
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c "reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v svchost /t REG_SZ /d "C:\Users\user\AppData\Roaming\svchost.exe""
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\SysWOW64\reg.exe
|
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v svchost /t REG_SZ /d "C:\Users\user\AppData\Roaming\svchost.exe"
|
There are 4 hidden processes, click here to show them.
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://crl.pki.goog/gsr1/gsr1.crldn
|
unknown
|
||
http://pki.goog/gsr1/gsr1.crt
|
unknown
|
||
http://crl.pki.goog/gsr1/gsr1.crl0;
|
unknown
|
||
http://crls.pki.goog/gts1c3/moVDfISia2k.crl(
|
unknown
|
||
http://pki.goog/repo/certs/gts1c3.derB2
|
unknown
|
||
http://crls.pki.goog/gts1c3/moVDfISia2k.crl0
|
unknown
|
||
https://github.com/mhammond/pywin32
|
unknown
|
||
http://crl.pki.goog/gsr1/gsr1.crl
|
unknown
|
||
http://pki.goog/repo/certs/gtsr1.der81
|
unknown
|
||
http://pki.goog/repo/certs/gts1c3.der
|
unknown
|
||
http://pki.goog/repo/certs/gtsr1.derv2
|
unknown
|
||
http://crl.pki.goog/gtsr1/gtsr1.crlR
|
unknown
|
||
http://pki.goog/gsr1/gsr1.crte
|
unknown
|
||
http://pki.goog/repo/certs/gtsr1.der
|
unknown
|
||
http://crls.pki.goog/gts1c3/moVDfISia2k.crl#
|
unknown
|
||
http://crl.pki.goog/gtsr1/gtsr1.crlT
|
unknown
|
||
http://www.python.org/download/releases/2.3/mro/.
|
unknown
|
||
http://pki.goog/repo/certs/gtsr1.der$
|
unknown
|
||
http://pki.goog/repo/certs/gtsr1.der04
|
unknown
|
||
http://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-parameters-6
|
unknown
|
||
http://crl.thawte.com/ThawteTimestampingCA.crl0
|
unknown
|
||
http://crl.pki.goog/gtsr1/gtsr1.crlb
|
unknown
|
||
http://crl.pki.goog/gtsr1/gtsr1.crld
|
unknown
|
||
http://www.iana.org/time-zones/repository/tz-link.html
|
unknown
|
||
https://github.com/BoboTiG/python-mss
|
unknown
|
||
http://www.python.org/dev/peps/pep-0205/
|
unknown
|
||
https://support.google.com/mail/?p=BadCredentials
|
unknown
|
||
http://python.org/dev/peps/pep-0263/
|
unknown
|
||
https://www.disneyplus.com/legal/your-california-privacy-rights
|
unknown
|
||
http://crls.pki.goog/gts1c3/moVDfISia2k.crlr
|
unknown
|
||
http://ocsp.thawte.com0
|
unknown
|
||
http://pki.goog/repo/certs/gts1c3.dere2
|
unknown
|
||
http://crl.ver)
|
unknown
|
||
http://crls.pki.goog/gts1c3/moVDfISia2k.crl
|
unknown
|
||
http://crl.pki.goog/gtsr1/gtsr1.crl0W
|
unknown
|
||
https://www.tiktok.com/legal/report/feedback
|
unknown
|
||
http://pki.goog/gsr1/gsr1.crt02
|
unknown
|
||
http://www.cl.cam.ac.uk/~mgk25/iso-time.html
|
unknown
|
||
http://pki.goog/gsr1/gsr1.crtloc
|
unknown
|
||
https://pki.goog/repository/0
|
unknown
|
||
http://crls.pki.goog/gts1c3/moVDfISia2k.crlc
|
unknown
|
||
http://crl.pki.goog/gtsr1/gtsr1.crl
|
unknown
|
||
http://crls.pki.goog/gts1c3/moVDfISia2k.crla
|
unknown
|
||
https://www.disneyplus.com/legal/privacy-policy
|
unknown
|
||
http://crl.p
|
unknown
|
||
http://crl.pki.goog/gtsr1/gtsr1.crlXx
|
unknown
|
||
https://www.tiktok.c
|
unknown
|
||
https://www.openssl.org/H
|
unknown
|
||
https://disneyplus.com/legal.
|
unknown
|
||
http://crl.pki.goog/gtsr1/gtsr1.crl:
|
unknown
|
||
http://pki.goog/repo/certs/gts1c3.dery1
|
unknown
|
||
http://crl.pki.goog/gtsr1/gtsr1.crlACE
|
unknown
|
||
http://www.phys.uu.nl/~vgent/calendar/isocalendar.htm
|
unknown
|
||
http://crl.pki.goog/gsr1/gsr1.crle
|
unknown
|
||
http://help.disneyplus.com.
|
unknown
|
||
http://pki.goog/repo/certs/gts1c3.der0
|
unknown
|
There are 46 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
smtp.gmail.com
|
142.250.145.108
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
192.168.2.1
|
unknown
|
unknown
|
||
142.250.145.109
|
unknown
|
United States
|
||
142.250.145.108
|
smtp.gmail.com
|
United States
|
||
127.0.0.1
|
unknown
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
|
svchost
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS
|
PerfMMFileName
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
BC1000
|
unkown image
|
page execute read
|
||
1084000
|
unkown
|
page read and write
|
||
6E9A0000
|
unkown image
|
page readonly
|
||
7FF55CACD000
|
unkown image
|
page readonly
|
||
1F912B00000
|
unkown image
|
page read and write
|
||
BC1000
|
unkown image
|
page execute read
|
||
7FF592897000
|
unkown image
|
page readonly
|
||
19D6F340000
|
unkown image
|
page readonly
|
||
1047000
|
unkown
|
page read and write
|
||
6EC20000
|
unkown image
|
page read and write
|
||
106B000
|
unkown
|
page read and write
|
||
6DBB0000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
2191FB50000
|
unkown image
|
page readonly
|
||
6DA70000
|
unkown image
|
page readonly
|
||
6DA70000
|
unkown image
|
page readonly
|
||
301F000
|
unkown
|
page read and write
|
||
20D17A13000
|
unkown
|
page read and write
|
||
6DA96000
|
unkown image
|
page read and write
|
||
1612000
|
unkown
|
page read and write
|
||
1050000
|
heap default
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
88C000
|
unkown
|
page read and write
|
||
3464000
|
unkown
|
page read and write
|
||
7FA30000
|
unkown image
|
page readonly
|
||
7FF54D413000
|
unkown image
|
page readonly
|
||
2F00000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
6F9D1000
|
unkown image
|
page execute read
|
||
2EC0000
|
unkown
|
page read and write
|
||
20D17A29000
|
unkown
|
page read and write
|
||
2AF5000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
871000
|
unkown
|
page read and write
|
||
E00000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
7FF55C302000
|
unkown image
|
page readonly
|
||
7FF53E0BF000
|
unkown image
|
page readonly
|
||
844000
|
unkown
|
page read and write
|
||
88F000
|
unkown
|
page read and write
|
||
EF1000
|
heap default
|
page read and write
|
||
1F911B10000
|
unkown image
|
page readonly
|
||
7FF55CAAE000
|
unkown image
|
page readonly
|
||
6E961000
|
unkown image
|
page execute read
|
||
1628000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
70140000
|
unkown image
|
page read and write
|
||
106F000
|
unkown
|
page read and write
|
||
107C000
|
unkown
|
page read and write
|
||
7FF5AC3C6000
|
unkown image
|
page readonly
|
||
21457200000
|
unkown image
|
page readonly
|
||
20D18390000
|
unkown
|
page read and write
|
||
3451000
|
unkown
|
page read and write
|
||
F38000
|
unkown
|
page read and write
|
||
EE7000
|
unkown
|
page read and write
|
||
59E000
|
stack
|
page read and write
|
||
7FF53E1E2000
|
unkown image
|
page readonly
|
||
3444000
|
unkown
|
page read and write
|
||
7FF54D41E000
|
unkown image
|
page readonly
|
||
155639E0000
|
unkown image
|
page readonly
|
||
84E000
|
unkown
|
page read and write
|
||
7FF59272F000
|
unkown image
|
page readonly
|
||
6DABB000
|
unkown image
|
page readonly
|
||
70131000
|
unkown image
|
page execute read
|
||
6DAD1000
|
unkown image
|
page execute read
|
||
21457080000
|
unkown image
|
page readonly
|
||
1311000
|
unkown image
|
page execute read
|
||
7FF55CA9B000
|
unkown image
|
page readonly
|
||
40000
|
unkown image
|
page readonly
|
||
2C44000
|
unkown
|
page read and write
|
||
7FF5AC59E000
|
unkown image
|
page readonly
|
||
7FF53E095000
|
unkown image
|
page readonly
|
||
14320254000
|
unkown
|
page read and write
|
||
6E941000
|
unkown image
|
page readonly
|
||
7FF55CA66000
|
unkown image
|
page readonly
|
||
1F917300000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
7DF510E30000
|
unkown image
|
page readonly
|
||
6F9AF000
|
unkown image
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
7FF53DF54000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
7DF55B150000
|
unkown image
|
page readonly
|
||
14320313000
|
unkown
|
page read and write
|
||
2BB8000
|
unkown image
|
page readonly
|
||
BF7000
|
unkown image
|
page readonly
|
||
E82000
|
unkown
|
page read and write
|
||
1F917220000
|
unkown
|
page read and write
|
||
6F2F3000
|
unkown image
|
page readonly
|
||
857000
|
unkown
|
page read and write
|
||
106E000
|
unkown
|
page read and write
|
||
7FF53E1E9000
|
unkown image
|
page readonly
|
||
3050000
|
unkown image
|
page readonly
|
||
6E93D000
|
unkown image
|
page write copy
|
||
7FF53DF1B000
|
unkown image
|
page readonly
|
||
481FCFF000
|
stack
|
page read and write
|
||
1097000
|
unkown
|
page read and write
|
||
6DBB0000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
106B000
|
unkown
|
page read and write
|
||
FF530000
|
unkown image
|
page readonly
|
||
20D17A48000
|
unkown
|
page read and write
|
||
E82000
|
unkown
|
page read and write
|
||
2F30000
|
unkown
|
page read and write
|
||
15563A30000
|
heap default
|
page read and write
|
||
FFBB2000
|
unkown image
|
page readonly
|
||
6F9C0000
|
unkown image
|
page readonly
|
||
FFF10000
|
unkown image
|
page readonly
|
||
1F911CFF000
|
unkown
|
page read and write
|
||
21456B70000
|
unkown
|
page read and write
|
||
7FF55CA73000
|
unkown image
|
page readonly
|
||
3300000
|
unkown
|
page read and write
|
||
E7E000
|
unkown
|
page read and write
|
||
1045000
|
unkown
|
page read and write
|
||
D06000
|
heap private
|
page read and write
|
||
36DE000
|
stack
|
page read and write
|
||
6EAE8000
|
unkown image
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
||
6F9C5000
|
unkown image
|
page readonly
|
||
1F9171C8000
|
unkown
|
page read and write
|
||
6E921000
|
unkown image
|
page execute read
|
||
19D6F370000
|
unkown
|
page read and write
|
||
6DDE0000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
32C0000
|
unkown
|
page read and write
|
||
3433000
|
unkown
|
page read and write
|
||
E6C000
|
unkown
|
page read and write
|
||
7DF510E10000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
20D18394000
|
unkown
|
page read and write
|
||
497000
|
unkown
|
page read and write
|
||
10B6000
|
unkown
|
page read and write
|
||
3457000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
7FF59267F000
|
unkown image
|
page readonly
|
||
6DBF2000
|
unkown image
|
page execute read
|
||
703DB000
|
unkown image
|
page readonly
|
||
E19000
|
unkown
|
page read and write
|
||
105B000
|
unkown
|
page read and write
|
||
7DF54BE82000
|
unkown image
|
page readonly
|
||
E74000
|
unkown
|
page read and write
|
||
6DAEB000
|
unkown image
|
page readonly
|
||
7FF53E0DE000
|
unkown image
|
page readonly
|
||
6EDF8000
|
unkown image
|
page readonly
|
||
15563D13000
|
unkown
|
page read and write
|
||
19D6F7D0000
|
unkown image
|
page readonly
|
||
6F9A9000
|
unkown image
|
page readonly
|
||
70141000
|
unkown image
|
page readonly
|
||
1F911C00000
|
unkown
|
page read and write
|
||
C7DB77E000
|
stack
|
page read and write
|
||
20D18390000
|
unkown
|
page read and write
|
||
7DF5A05A0000
|
unkown image
|
page readonly
|
||
2FD5000
|
unkown
|
page read and write
|
||
7FF54CCF8000
|
unkown image
|
page readonly
|
||
36C0000
|
unkown
|
page read and write
|
||
7DF54BE90000
|
unkown image
|
page readonly
|
||
6DEE8000
|
unkown image
|
page read and write
|
||
703C0000
|
unkown image
|
page readonly
|
||
1088000
|
unkown
|
page read and write
|
||
6DB00000
|
unkown image
|
page readonly
|
||
166C000
|
unkown
|
page read and write
|
||
EA6000
|
unkown
|
page read and write
|
||
107E000
|
unkown
|
page read and write
|
||
10B8000
|
unkown
|
page read and write
|
||
995000
|
unkown
|
page read and write
|
||
55E000
|
stack
|
page read and write
|
||
1F9172F2000
|
unkown
|
page read and write
|
||
E26000
|
unkown
|
page read and write
|
||
6DACA000
|
unkown image
|
page readonly
|
||
703B7000
|
unkown image
|
page readonly
|
||
14320264000
|
unkown
|
page read and write
|
||
28301FE000
|
stack
|
page read and write
|
||
1079000
|
unkown
|
page read and write
|
||
2C2F000
|
unkown
|
page read and write
|
||
8DC000
|
unkown
|
page read and write
|
||
7F892000
|
unkown image
|
page readonly
|
||
2C47000
|
unkown
|
page read and write
|
||
6EC00000
|
unkown image
|
page readonly
|
||
493000
|
unkown
|
page read and write
|
||
703D3000
|
unkown image
|
page readonly
|
||
7FF5AC3F1000
|
unkown image
|
page readonly
|
||
7FF59289A000
|
unkown image
|
page readonly
|
||
700000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
1088000
|
unkown
|
page read and write
|
||
1F912BE0000
|
unkown
|
page read and write
|
||
13E967E000
|
stack
|
page read and write
|
||
EB1000
|
unkown
|
page read and write
|
||
7DF5A0592000
|
unkown image
|
page readonly
|
||
6E98E000
|
unkown image
|
page readonly
|
||
2E00000
|
unkown
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
||
87C000
|
unkown
|
page read and write
|
||
887000
|
unkown
|
page read and write
|
||
F11000
|
unkown
|
page read and write
|
||
1057000
|
unkown
|
page read and write
|
||
EC4000
|
unkown
|
page read and write
|
||
2C77000
|
unkown
|
page read and write
|
||
6E98B000
|
unkown image
|
page read and write
|
||
F01000
|
unkown
|
page read and write
|
||
3500000
|
unkown
|
page read and write
|
||
3250000
|
unkown image
|
page readonly
|
||
1045000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
6DD78000
|
unkown image
|
page readonly
|
||
FFF00000
|
unkown image
|
page readonly
|
||
7FF5928F2000
|
unkown image
|
page readonly
|
||
6E940000
|
unkown image
|
page read and write
|
||
20D17AE2000
|
unkown
|
page read and write
|
||
6E960000
|
unkown image
|
page readonly
|
||
7DF5BA2B2000
|
unkown image
|
page readonly
|
||
7DF5A0590000
|
unkown image
|
page readonly
|
||
86D000
|
unkown
|
page read and write
|
||
FFEF2000
|
unkown image
|
page readonly
|
||
1000000
|
unkown
|
page read and write
|
||
3401000
|
unkown
|
page read and write
|
||
887000
|
unkown
|
page read and write
|
||
BC1000
|
unkown image
|
page execute read
|
||
15563C64000
|
unkown
|
page read and write
|
||
7FF5B0321000
|
unkown image
|
page readonly
|
||
6F991000
|
unkown image
|
page execute read
|
||
6E960000
|
unkown image
|
page readonly
|
||
901000
|
unkown
|
page read and write
|
||
EA9000
|
unkown
|
page read and write
|
||
D9E000
|
stack
|
page read and write
|
||
8FD000
|
unkown
|
page read and write
|
||
1F912400000
|
unkown
|
page read and write
|
||
901000
|
unkown
|
page read and write
|
||
F0CF8FF000
|
stack
|
page read and write
|
||
7FF54D43B000
|
unkown image
|
page readonly
|
||
FFBC0000
|
unkown image
|
page readonly
|
||
7FF59282D000
|
unkown image
|
page readonly
|
||
20D17A00000
|
unkown
|
page read and write
|
||
6DAA0000
|
unkown image
|
page readonly
|
||
33F0000
|
unkown image
|
page readonly
|
||
10F4000
|
unkown
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
7FF55CB34000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
2BA0000
|
unkown
|
page read and write
|
||
3434000
|
unkown
|
page read and write
|
||
8317C7F000
|
stack
|
page read and write
|
||
1880000
|
unkown image
|
page readonly
|
||
70130000
|
unkown image
|
page readonly
|
||
6EB50000
|
unkown image
|
page readonly
|
||
7FF5030D7000
|
unkown image
|
page readonly
|
||
7FF5AC58B000
|
unkown image
|
page readonly
|
||
3300000
|
unkown
|
page read and write
|
||
344B000
|
unkown
|
page read and write
|
||
3710000
|
unkown
|
page read and write
|
||
1ACF000
|
stack
|
page read and write
|
||
1F9174F0000
|
unkown
|
page read and write
|
||
7FF5B0257000
|
unkown image
|
page readonly
|
||
37E6000
|
unkown
|
page read and write
|
||
7DF510E12000
|
unkown image
|
page readonly
|
||
7DF54BE72000
|
unkown image
|
page readonly
|
||
83177FE000
|
stack
|
page read and write
|
||
6DA98000
|
unkown image
|
page readonly
|
||
20D183A2000
|
unkown
|
page read and write
|
||
7FF54D2BD000
|
unkown image
|
page readonly
|
||
6E3A0000
|
unkown image
|
page readonly
|
||
20D18399000
|
unkown
|
page read and write
|
||
BF7000
|
unkown image
|
page readonly
|
||
C7DBB7E000
|
stack
|
page read and write
|
||
2F75000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
2C16000
|
unkown
|
page read and write
|
||
FF550000
|
unkown image
|
page readonly
|
||
7FF5AC577000
|
unkown image
|
page readonly
|
||
6DB9A000
|
unkown image
|
page read and write
|
||
F0CEDFB000
|
stack
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
14320286000
|
unkown
|
page read and write
|
||
6F9A9000
|
unkown image
|
page readonly
|
||
2F75000
|
unkown
|
page read and write
|
||
15563C5A000
|
unkown
|
page read and write
|
||
2F00000
|
unkown
|
page read and write
|
||
7FF54D427000
|
unkown image
|
page readonly
|
||
2CB8000
|
unkown
|
page read and write
|
||
6E93D000
|
unkown image
|
page write copy
|
||
8A1000
|
unkown
|
page read and write
|
||
2C5F000
|
unkown
|
page read and write
|
||
7FF53E0EE000
|
unkown image
|
page readonly
|
||
2C32000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
7FF53D95D000
|
unkown image
|
page readonly
|
||
E02000
|
unkown
|
page read and write
|
||
7FF5AC44F000
|
unkown image
|
page readonly
|
||
7DF5A0582000
|
unkown image
|
page readonly
|
||
EF1000
|
unkown
|
page read and write
|
||
6EAF0000
|
unkown image
|
page readonly
|
||
7FF5AC42B000
|
unkown image
|
page readonly
|
||
1101000
|
unkown
|
page read and write
|
||
20D179E0000
|
unkown
|
page read and write
|
||
7FF54D3E7000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
8A4000
|
unkown
|
page read and write
|
||
6EC31000
|
unkown image
|
page execute read
|
||
1084000
|
unkown
|
page read and write
|
||
21456E80000
|
unkown image
|
page readonly
|
||
7FF592775000
|
unkown image
|
page readonly
|
||
F40000
|
heap default
|
page read and write
|
||
1F9170B0000
|
unkown
|
page read and write
|
||
7DF4B8170000
|
unkown image
|
page readonly
|
||
9D7000
|
unkown
|
page read and write
|
||
7FF53DD77000
|
unkown image
|
page readonly
|
||
7FF5925E7000
|
unkown image
|
page readonly
|
||
2E80000
|
unkown
|
page read and write
|
||
E85000
|
unkown
|
page read and write
|
||
343A000
|
unkown
|
page read and write
|
||
7FF54D375000
|
unkown image
|
page readonly
|
||
36AF000
|
unkown
|
page read and write
|
||
1F911C8D000
|
unkown
|
page read and write
|
||
1F912513000
|
unkown
|
page read and write
|
||
7DF4BBE50000
|
unkown image
|
page readonly
|
||
7F882000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
6EB5E000
|
unkown image
|
page readonly
|
||
6F2D0000
|
unkown image
|
page readonly
|
||
6DE90000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
FF7C0000
|
unkown image
|
page readonly
|
||
15563C13000
|
unkown
|
page read and write
|
||
84F000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
6F995000
|
unkown image
|
page read and write
|
||
6F996000
|
unkown image
|
page readonly
|
||
1F9171E0000
|
unkown
|
page read and write
|
||
31C0000
|
unkown
|
page read and write
|
||
7FF54D3FD000
|
unkown image
|
page readonly
|
||
F0B000
|
unkown
|
page read and write
|
||
3800000
|
unkown
|
page read and write
|
||
7FF5B0217000
|
unkown image
|
page readonly
|
||
20D17A50000
|
unkown
|
page read and write
|
||
7FF5AC560000
|
unkown image
|
page readonly
|
||
6DEE9000
|
unkown image
|
page readonly
|
||
2DF1000
|
unkown
|
page read and write
|
||
1060000
|
unkown
|
page read and write
|
||
6F2E5000
|
unkown image
|
page readonly
|
||
6E2F1000
|
unkown image
|
page execute read
|
||
6DEF0000
|
unkown image
|
page readonly
|
||
F01000
|
unkown
|
page read and write
|
||
21456A60000
|
unkown image
|
page readonly
|
||
3500000
|
unkown
|
page read and write
|
||
7FF5B0273000
|
unkown image
|
page readonly
|
||
F0CEA7E000
|
stack
|
page read and write
|
||
2900000
|
unkown
|
page read and write
|
||
12F5000
|
unkown
|
page read and write
|
||
13E93BC000
|
unkown
|
page read and write
|
||
7FF5927E2000
|
unkown image
|
page readonly
|
||
88E000
|
unkown
|
page read and write
|
||
7FF59282F000
|
unkown image
|
page readonly
|
||
2A0587B000
|
stack
|
page read and write
|
||
6E940000
|
unkown image
|
page read and write
|
||
20D18389000
|
unkown
|
page read and write
|
||
2FF5000
|
unkown
|
page read and write
|
||
133C000
|
unkown image
|
page read and write
|
||
1345000
|
unkown image
|
page read and write
|
||
CE5000
|
heap default
|
page read and write
|
||
EA7000
|
unkown
|
page read and write
|
||
6EB20000
|
unkown image
|
page readonly
|
||
1071000
|
unkown
|
page read and write
|
||
EC3000
|
unkown
|
page read and write
|
||
3260000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page read and write
|
||
1F0000
|
unkown image
|
page readonly
|
||
F60000
|
unkown image
|
page readonly
|
||
2C64000
|
unkown
|
page read and write
|
||
20D17AE7000
|
unkown
|
page read and write
|
||
857000
|
unkown
|
page read and write
|
||
BF7000
|
unkown image
|
page readonly
|
||
876000
|
unkown
|
page read and write
|
||
21456A40000
|
unkown image
|
page readonly
|
||
1057000
|
unkown
|
page read and write
|
||
6F2F1000
|
unkown image
|
page execute read
|
||
859000
|
unkown
|
page read and write
|
||
6E963000
|
unkown image
|
page readonly
|
||
FF7D0000
|
unkown image
|
page readonly
|
||
6F31E000
|
unkown image
|
page readonly
|
||
108F000
|
unkown
|
page read and write
|
||
FFBC0000
|
unkown image
|
page readonly
|
||
7E0000
|
unkown image
|
page readonly
|
||
1046000
|
unkown
|
page read and write
|
||
10B2000
|
unkown
|
page read and write
|
||
20D18902000
|
unkown
|
page read and write
|
||
7F890000
|
unkown image
|
page readonly
|
||
2C50000
|
unkown
|
page read and write
|
||
6DB9A000
|
unkown image
|
page read and write
|
||
20D17800000
|
unkown image
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
6DE8B000
|
unkown image
|
page readonly
|
||
3435000
|
unkown
|
page read and write
|
||
6DA91000
|
unkown image
|
page execute read
|
||
E1B000
|
unkown
|
page read and write
|
||
CE0000
|
unkown
|
page read and write
|
||
6F331000
|
unkown image
|
page execute read
|
||
850000
|
unkown
|
page read and write
|
||
20D1836F000
|
unkown
|
page read and write
|
||
8317BF7000
|
stack
|
page read and write
|
||
7FF54D2C0000
|
unkown image
|
page readonly
|
||
6F9D0000
|
unkown image
|
page readonly
|
||
70283000
|
unkown image
|
page readonly
|
||
2F00000
|
unkown
|
page read and write
|
||
20D17F80000
|
unkown image
|
page readonly
|
||
F0CEBF7000
|
stack
|
page read and write
|
||
BEC000
|
unkown image
|
page write copy
|
||
1084000
|
unkown
|
page read and write
|
||
6EC21000
|
unkown image
|
page readonly
|
||
20D183B3000
|
unkown
|
page read and write
|
||
2B17000
|
unkown image
|
page readonly
|
||
13E9B7F000
|
stack
|
page read and write
|
||
6F9E8000
|
unkown image
|
page read and write
|
||
7FF5AFFA5000
|
unkown image
|
page readonly
|
||
3501000
|
unkown
|
page read and write
|
||
290000
|
unkown image
|
page read and write
|
||
17F0000
|
unkown image
|
page readonly
|
||
20D183BE000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
85F000
|
unkown
|
page read and write
|
||
3B1A000
|
unkown
|
page read and write
|
||
831767B000
|
stack
|
page read and write
|
||
EF6000
|
unkown
|
page read and write
|
||
6E93C000
|
unkown image
|
page read and write
|
||
20D183C0000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
2C22000
|
unkown
|
page read and write
|
||
1078000
|
unkown
|
page read and write
|
||
8EF000
|
unkown
|
page read and write
|
||
14320130000
|
unkown image
|
page read and write
|
||
20D18963000
|
unkown
|
page read and write
|
||
670000
|
heap default
|
page read and write
|
||
7FF53DB8C000
|
unkown image
|
page readonly
|
||
8A6000
|
unkown
|
page read and write
|
||
7DF5BA2A2000
|
unkown image
|
page readonly
|
||
2C04000
|
unkown
|
page read and write
|
||
2DF1000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
3200000
|
unkown image
|
page readonly
|
||
10FA000
|
unkown
|
page read and write
|
||
6E797000
|
unkown image
|
page read and write
|
||
E82000
|
unkown
|
page read and write
|
||
BE0000
|
unkown image
|
page readonly
|
||
1F912260000
|
unkown image
|
page readonly
|
||
7DF5BDF90000
|
unkown image
|
page readonly
|
||
BD0000
|
unkown image
|
page readonly
|
||
1B0000
|
unkown image
|
page readonly
|
||
BEC000
|
unkown image
|
page write copy
|
||
1F911C29000
|
unkown
|
page read and write
|
||
20D1835B000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
EB2000
|
unkown
|
page read and write
|
||
7FF5B029A000
|
unkown image
|
page readonly
|
||
2BB8000
|
unkown image
|
page readonly
|
||
7FF53E084000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
2191FD00000
|
unkown
|
page read and write
|
||
302C000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
345F000
|
unkown
|
page read and write
|
||
770000
|
unkown image
|
page readonly
|
||
7FF5925A5000
|
unkown image
|
page readonly
|
||
ECC000
|
unkown
|
page read and write
|
||
30BF000
|
unkown
|
page read and write
|
||
2BB3000
|
unkown image
|
page readonly
|
||
7FF53DD79000
|
unkown image
|
page readonly
|
||
21456BA0000
|
unkown image
|
page readonly
|
||
2C36000
|
unkown
|
page read and write
|
||
B00000
|
unkown image
|
page readonly
|
||
BEE000
|
unkown image
|
page read and write
|
||
2900000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
6DB01000
|
unkown image
|
page execute read
|
||
161B000
|
unkown
|
page read and write
|
||
20D17A47000
|
unkown
|
page read and write
|
||
7FA30000
|
unkown image
|
page readonly
|
||
790000
|
unkown image
|
page read and write
|
||
7FF54CFD7000
|
unkown image
|
page readonly
|
||
20D18802000
|
unkown
|
page read and write
|
||
2191FC3C000
|
unkown
|
page read and write
|
||
20D18377000
|
unkown
|
page read and write
|
||
6DB20000
|
unkown image
|
page readonly
|
||
F0CF27E000
|
stack
|
page read and write
|
||
2EC0000
|
unkown
|
page read and write
|
||
3428000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
342E000
|
unkown
|
page read and write
|
||
7F0000
|
unkown image
|
page readonly
|
||
20D18391000
|
unkown
|
page read and write
|
||
3700000
|
unkown image
|
page readonly
|
||
FF532000
|
unkown image
|
page readonly
|
||
7FF5B0311000
|
unkown image
|
page readonly
|
||
2B60000
|
unkown
|
page read and write
|
||
854000
|
unkown
|
page read and write
|
||
1F9123D0000
|
unkown image
|
page readonly
|
||
20D17970000
|
unkown
|
page read and write
|
||
70130000
|
unkown image
|
page readonly
|
||
2F00000
|
unkown
|
page read and write
|
||
155639D0000
|
heap private
|
page read and write
|
||
20D1831B000
|
unkown
|
page read and write
|
||
770000
|
heap default
|
page read and write
|
||
20D17A4F000
|
unkown
|
page read and write
|
||
10D8000
|
unkown
|
page read and write
|
||
6E920000
|
unkown image
|
page readonly
|
||
6DA71000
|
unkown image
|
page execute read
|
||
D0F000
|
stack
|
page read and write
|
||
32C0000
|
unkown
|
page read and write
|
||
B80000
|
unkown
|
page read and write
|
||
FFBA2000
|
unkown image
|
page readonly
|
||
F0CEEFF000
|
stack
|
page read and write
|
||
FF550000
|
unkown image
|
page readonly
|
||
19D70280000
|
unkown
|
page read and write
|
||
6DB80000
|
unkown image
|
page readonly
|
||
20D17870000
|
heap default
|
page read and write
|
||
7FF54CFD1000
|
unkown image
|
page readonly
|
||
7FF54D3F9000
|
unkown image
|
page readonly
|
||
3640000
|
unkown
|
page read and write
|
||
3520000
|
unkown
|
page read and write
|
||
7FF53DFC3000
|
unkown image
|
page readonly
|
||
2BA0000
|
unkown
|
page read and write
|
||
7FA40000
|
unkown image
|
page readonly
|
||
BE0000
|
unkown image
|
page readonly
|
||
EB2000
|
unkown
|
page read and write
|
||
2BE0000
|
unkown image
|
page readonly
|
||
7FF59287E000
|
unkown image
|
page readonly
|
||
3600000
|
unkown
|
page read and write
|
||
7DF459020000
|
unkown image
|
page readonly
|
||
21456C41000
|
unkown
|
page read and write
|
||
7FF53E119000
|
unkown image
|
page readonly
|
||
7DF5A0580000
|
unkown image
|
page readonly
|
||
1F911D13000
|
unkown
|
page read and write
|
||
72F20000
|
unkown image
|
page readonly
|
||
1F9171F0000
|
unkown
|
page read and write
|
||
E82000
|
unkown
|
page read and write
|
||
106B000
|
unkown
|
page read and write
|
||
1079000
|
unkown
|
page read and write
|
||
7F8A0000
|
unkown image
|
page readonly
|
||
7FF5927FE000
|
unkown image
|
page readonly
|
||
E28000
|
unkown
|
page read and write
|
||
3300000
|
unkown
|
page read and write
|
||
800000
|
unkown
|
page read and write
|
||
7FF5927FA000
|
unkown image
|
page readonly
|
||
BEC000
|
unkown image
|
page write copy
|
||
20D18391000
|
unkown
|
page read and write
|
||
1F911C76000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
CD0000
|
unkown image
|
page readonly
|
||
7FF5B022D000
|
unkown image
|
page readonly
|
||
6E920000
|
unkown image
|
page readonly
|
||
E87000
|
unkown
|
page read and write
|
||
6E971000
|
unkown image
|
page execute read
|
||
128F000
|
stack
|
page read and write
|
||
7FF5031B1000
|
unkown image
|
page readonly
|
||
20D17AE9000
|
unkown
|
page read and write
|
||
7FF55C2FB000
|
unkown image
|
page readonly
|
||
E8C000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
EC7000
|
unkown
|
page read and write
|
||
1344000
|
unkown image
|
page read and write
|
||
2C16000
|
unkown
|
page read and write
|
||
33C8000
|
heap default
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
8FA000
|
unkown
|
page read and write
|
||
FFEF0000
|
unkown image
|
page readonly
|
||
1049000
|
unkown
|
page read and write
|
||
6E9A1000
|
unkown image
|
page execute read
|
||
6E97E000
|
unkown image
|
page readonly
|
||
E28000
|
unkown
|
page read and write
|
||
EC4000
|
unkown
|
page read and write
|
||
FFBA0000
|
unkown image
|
page readonly
|
||
20D17B16000
|
unkown
|
page read and write
|
||
1F911C58000
|
unkown
|
page read and write
|
||
2BE6000
|
unkown
|
page read and write
|
||
20D18389000
|
unkown
|
page read and write
|
||
1F9170C0000
|
unkown
|
page read and write
|
||
20D18356000
|
unkown
|
page read and write
|
||
381E000
|
stack
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
166C000
|
unkown
|
page read and write
|
||
E95000
|
unkown
|
page read and write
|
||
7FF59278C000
|
unkown image
|
page readonly
|
||
7FF59289D000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
19D6F5C0000
|
unkown
|
page read and write
|
||
FF7A0000
|
unkown image
|
page readonly
|
||
7DF55B150000
|
unkown image
|
page readonly
|
||
6F2F0000
|
unkown image
|
page readonly
|
||
10B4000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
8A5000
|
unkown
|
page read and write
|
||
7FF54D2A1000
|
unkown image
|
page readonly
|
||
72F21000
|
unkown image
|
page execute read
|
||
1057000
|
unkown
|
page read and write
|
||
7DF5BDF92000
|
unkown image
|
page readonly
|
||
7DF54BE72000
|
unkown image
|
page readonly
|
||
7FF53DFC5000
|
unkown image
|
page readonly
|
||
6EBF1000
|
unkown image
|
page readonly
|
||
2C1A000
|
unkown
|
page read and write
|
||
10D8000
|
unkown
|
page read and write
|
||
7FF55CA56000
|
unkown image
|
page readonly
|
||
2FD1000
|
unkown
|
page read and write
|
||
2F20000
|
unkown image
|
page readonly
|
||
8F5000
|
unkown
|
page read and write
|
||
1057000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
6F340000
|
unkown image
|
page readonly
|
||
20D17AA7000
|
unkown
|
page read and write
|
||
7FF53DF56000
|
unkown image
|
page readonly
|
||
21920000000
|
unkown image
|
page readonly
|
||
E28000
|
unkown
|
page read and write
|
||
7FF5AC641000
|
unkown image
|
page readonly
|
||
14320150000
|
unkown image
|
page readonly
|
||
3760000
|
unkown
|
page read and write
|
||
EFA000
|
unkown
|
page read and write
|
||
5B0000
|
unkown image
|
page readonly
|
||
7DF5BDF82000
|
unkown image
|
page readonly
|
||
72F31000
|
unkown image
|
page readonly
|
||
70280000
|
unkown image
|
page readonly
|
||
2B00000
|
unkown
|
page read and write
|
||
3600000
|
unkown
|
page read and write
|
||
7FF5AC619000
|
unkown image
|
page readonly
|
||
2C43000
|
unkown
|
page read and write
|
||
14320300000
|
unkown
|
page read and write
|
||
6F2F5000
|
unkown image
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
1050000
|
unkown
|
page read and write
|
||
6F9D0000
|
unkown image
|
page readonly
|
||
7FF54D35C000
|
unkown image
|
page readonly
|
||
C7DB4FE000
|
stack
|
page read and write
|
||
2191FD08000
|
unkown
|
page read and write
|
||
1F913020000
|
unkown
|
page read and write
|
||
107A000
|
unkown
|
page read and write
|
||
1086000
|
unkown
|
page read and write
|
||
3641000
|
unkown
|
page read and write
|
||
6EE48000
|
unkown image
|
page readonly
|
||
BEC000
|
unkown image
|
page read and write
|
||
20D18397000
|
unkown
|
page read and write
|
||
10FE000
|
unkown
|
page read and write
|
||
7FF55C3DE000
|
unkown image
|
page readonly
|
||
7FF55CB45000
|
unkown image
|
page readonly
|
||
EB5000
|
unkown
|
page read and write
|
||
7FF50312D000
|
unkown image
|
page readonly
|
||
166C000
|
unkown
|
page read and write
|
||
831757E000
|
stack
|
page read and write
|
||
7FF53E20A000
|
unkown image
|
page readonly
|
||
15563A10000
|
unkown image
|
page readonly
|
||
7FF53E0FE000
|
unkown image
|
page readonly
|
||
3300000
|
unkown
|
page read and write
|
||
CE0000
|
heap default
|
page read and write
|
||
6F993000
|
unkown image
|
page readonly
|
||
19D6F3E0000
|
heap private
|
page read and write
|
||
3010000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
1069000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
6DBB1000
|
unkown image
|
page execute read
|
||
3448000
|
unkown
|
page read and write
|
||
6DDC5000
|
unkown image
|
page readonly
|
||
118E000
|
stack
|
page read and write
|
||
20D183A2000
|
unkown
|
page read and write
|
||
10C7000
|
unkown
|
page read and write
|
||
7FF54D410000
|
unkown image
|
page readonly
|
||
ED4000
|
unkown
|
page read and write
|
||
7FF592833000
|
unkown image
|
page readonly
|
||
7FF5926D9000
|
unkown image
|
page readonly
|
||
7FF592128000
|
unkown image
|
page readonly
|
||
E82000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
365A000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
15563C3C000
|
unkown
|
page read and write
|
||
2C33000
|
unkown
|
page read and write
|
||
3010000
|
unkown
|
page read and write
|
||
760000
|
unkown image
|
page readonly
|
||
F2B000
|
unkown
|
page read and write
|
||
7DF5A0582000
|
unkown image
|
page readonly
|
||
6E958000
|
unkown image
|
page read and write
|
||
6DB9B000
|
unkown image
|
page readonly
|
||
6F991000
|
unkown image
|
page execute read
|
||
6DAD1000
|
unkown image
|
page execute read
|
||
108D000
|
unkown
|
page read and write
|
||
3436000
|
unkown
|
page read and write
|
||
6E2A9000
|
unkown image
|
page read and write
|
||
2B1B000
|
unkown image
|
page readonly
|
||
7D0000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
2C28000
|
unkown
|
page read and write
|
||
D95000
|
unkown
|
page read and write
|
||
3190000
|
unkown
|
page read and write
|
||
342E000
|
unkown
|
page read and write
|
||
7DF56A7B2000
|
unkown image
|
page readonly
|
||
7FF53DF2A000
|
unkown image
|
page readonly
|
||
1F911B90000
|
unkown
|
page read and write
|
||
5FE000
|
stack
|
page read and write
|
||
2FDF000
|
unkown
|
page read and write
|
||
EC7000
|
unkown
|
page read and write
|
||
F70000
|
heap default
|
page read and write
|
||
BE0000
|
unkown image
|
page readonly
|
||
7FF53DCAB000
|
unkown image
|
page readonly
|
||
7DF54BE82000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
7FF5B01A5000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
10A6000
|
unkown
|
page read and write
|
||
1065000
|
unkown
|
page read and write
|
||
FFF02000
|
unkown image
|
page readonly
|
||
2C1E000
|
unkown
|
page read and write
|
||
7FF5B024E000
|
unkown image
|
page readonly
|
||
7FF53DF61000
|
unkown image
|
page readonly
|
||
7FF5030C3000
|
unkown image
|
page readonly
|
||
1F9123B0000
|
unkown image
|
page readonly
|
||
EDD000
|
unkown
|
page read and write
|
||
6DBA1000
|
unkown image
|
page readonly
|
||
331F000
|
stack
|
page read and write
|
||
7FF53E15B000
|
unkown image
|
page readonly
|
||
EC7000
|
unkown
|
page read and write
|
||
BEE000
|
unkown image
|
page read and write
|
||
6DA94000
|
unkown image
|
page readonly
|
||
3760000
|
unkown
|
page read and write
|
||
6E970000
|
unkown image
|
page readonly
|
||
790000
|
unkown image
|
page readonly
|
||
6EC30000
|
unkown image
|
page readonly
|
||
1F917253000
|
unkown
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
E87000
|
unkown
|
page read and write
|
||
86D000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
EE5000
|
unkown
|
page read and write
|
||
7DF55B162000
|
unkown image
|
page readonly
|
||
7FF54D46D000
|
unkown image
|
page readonly
|
||
1F9174D0000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
E16000
|
unkown image
|
page readonly
|
||
7FF5AC410000
|
unkown image
|
page readonly
|
||
20D18399000
|
unkown
|
page read and write
|
||
6DAD0000
|
unkown image
|
page readonly
|
||
1F917400000
|
unkown
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
7FF5AC567000
|
unkown image
|
page readonly
|
||
1F917302000
|
unkown
|
page read and write
|
||
EC4000
|
unkown
|
page read and write
|
||
7DF5BDFA0000
|
unkown image
|
page readonly
|
||
6DDE0000
|
unkown image
|
page readonly
|
||
1F9172DA000
|
unkown
|
page read and write
|
||
6E287000
|
unkown image
|
page read and write
|
||
7FF5AC62A000
|
unkown image
|
page readonly
|
||
20D1836D000
|
unkown
|
page read and write
|
||
6E9A1000
|
unkown image
|
page execute read
|
||
FF7A2000
|
unkown image
|
page readonly
|
||
481FD7D000
|
stack
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
1F912518000
|
unkown
|
page read and write
|
||
7FF53DE15000
|
unkown image
|
page readonly
|
||
7FF5926F0000
|
unkown image
|
page readonly
|
||
3424000
|
unkown
|
page read and write
|
||
FF8E0000
|
unkown image
|
page readonly
|
||
ECB000
|
unkown
|
page read and write
|
||
2D00000
|
unkown
|
page read and write
|
||
105F000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
B5E000
|
stack
|
page read and write
|
||
8BD000
|
unkown
|
page read and write
|
||
3330000
|
heap private
|
page read and write
|
||
1028000
|
unkown
|
page read and write
|
||
7AE000
|
stack
|
page read and write
|
||
6E950000
|
unkown image
|
page readonly
|
||
6F301000
|
unkown image
|
page execute read
|
||
E82000
|
unkown
|
page read and write
|
||
1F911C94000
|
unkown
|
page read and write
|
||
2191FC4B000
|
unkown
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
6E965000
|
unkown image
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
1F9172A8000
|
unkown
|
page read and write
|
||
21456C57000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
6DA98000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
D06000
|
heap private
|
page read and write
|
||
7FF592685000
|
unkown image
|
page readonly
|
||
2BC7000
|
unkown
|
page read and write
|
||
7FF5B0304000
|
unkown image
|
page readonly
|
||
2C54000
|
unkown
|
page read and write
|
||
327E000
|
stack
|
page read and write
|
||
6EADF000
|
unkown image
|
page readonly
|
||
EB7000
|
unkown
|
page read and write
|
||
6E955000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
AFE000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
3432000
|
unkown
|
page read and write
|
||
30B5000
|
unkown
|
page read and write
|
||
20D18902000
|
unkown
|
page read and write
|
||
19D6FB50000
|
unkown image
|
page readonly
|
||
8A0000
|
unkown
|
page read and write
|
||
6F9E8000
|
unkown image
|
page read and write
|
||
6EC1C000
|
unkown image
|
page read and write
|
||
6DBB1000
|
unkown image
|
page execute read
|
||
7FF59280E000
|
unkown image
|
page readonly
|
||
2B3B000
|
unkown image
|
page readonly
|
||
1086000
|
unkown
|
page read and write
|
||
854000
|
unkown
|
page read and write
|
||
1F9172AB000
|
unkown
|
page read and write
|
||
6F9A0000
|
unkown image
|
page readonly
|
||
EB1000
|
unkown
|
page read and write
|
||
6F9C0000
|
unkown image
|
page readonly
|
||
20D1837C000
|
unkown
|
page read and write
|
||
7FF548A61000
|
unkown image
|
page readonly
|
||
F10000
|
unkown image
|
page readonly
|
||
7F8A0000
|
unkown image
|
page readonly
|
||
7FF53DF0B000
|
unkown image
|
page readonly
|
||
10F9000
|
unkown
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
C7DB6FB000
|
stack
|
page read and write
|
||
20D17A55000
|
unkown
|
page read and write
|
||
89E000
|
unkown
|
page read and write
|
||
3150000
|
unkown
|
page read and write
|
||
EB7000
|
unkown
|
page read and write
|
||
1074000
|
unkown
|
page read and write
|
||
7DF5BA2C0000
|
unkown image
|
page readonly
|
||
19D70000000
|
unkown
|
page read and write
|
||
3000000
|
unkown image
|
page readonly
|
||
1311000
|
unkown image
|
page execute read
|
||
846000
|
unkown
|
page read and write
|
||
7FF5B0233000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
E6C000
|
unkown
|
page read and write
|
||
7EE000
|
stack
|
page read and write
|
||
6EB1A000
|
unkown image
|
page readonly
|
||
6DDC8000
|
unkown image
|
page readonly
|
||
104F000
|
unkown
|
page read and write
|
||
21456E70000
|
heap private
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
6E963000
|
unkown image
|
page readonly
|
||
377A000
|
unkown
|
page read and write
|
||
3B12000
|
unkown
|
page read and write
|
||
3150000
|
unkown image
|
page readonly
|
||
BF5000
|
unkown image
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
15563E00000
|
unkown image
|
page readonly
|
||
BC0000
|
unkown image
|
page readonly
|
||
2191FC4F000
|
unkown
|
page read and write
|
||
7FA22000
|
unkown image
|
page readonly
|
||
EDD000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
2E40000
|
unkown
|
page read and write
|
||
7DF5BA2B0000
|
unkown image
|
page readonly
|
||
13FE000
|
stack
|
page read and write
|
||
1F912518000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
6E2A9000
|
unkown image
|
page read and write
|
||
2B5A000
|
unkown
|
page read and write
|
||
1F911CB1000
|
unkown
|
page read and write
|
||
1F917610000
|
unkown image
|
page read and write
|
||
20D17820000
|
unkown image
|
page readonly
|
||
6E3F9000
|
unkown image
|
page readonly
|
||
32C0000
|
unkown
|
page read and write
|
||
2C1F000
|
unkown
|
page read and write
|
||
2C56000
|
unkown
|
page read and write
|
||
2F00000
|
unkown
|
page read and write
|
||
6DEE7000
|
unkown image
|
page readonly
|
||
6E960000
|
unkown image
|
page readonly
|
||
2BA0000
|
unkown
|
page read and write
|
||
6DB21000
|
unkown image
|
page execute read
|
||
700000
|
unkown image
|
page readonly
|
||
7FF5927A1000
|
unkown image
|
page readonly
|
||
EB1000
|
unkown
|
page read and write
|
||
6EC3D000
|
unkown image
|
page execute read
|
||
1048000
|
unkown
|
page read and write
|
||
EB2000
|
unkown
|
page read and write
|
||
2900000
|
unkown
|
page read and write
|
||
7FF5AFB22000
|
unkown image
|
page readonly
|
||
20D18372000
|
unkown
|
page read and write
|
||
BBC000
|
unkown
|
page read and write
|
||
7FF5B022F000
|
unkown image
|
page readonly
|
||
F16000
|
unkown
|
page read and write
|
||
20D18800000
|
unkown
|
page read and write
|
||
2191FA40000
|
unkown image
|
page readonly
|
||
EC7000
|
unkown
|
page read and write
|
||
1F911B40000
|
unkown image
|
page readonly
|
||
E2C000
|
unkown
|
page read and write
|
||
1F9172EC000
|
unkown
|
page read and write
|
||
303B000
|
unkown
|
page read and write
|
||
21456C5F000
|
unkown
|
page read and write
|
||
FD0000
|
unkown image
|
page readonly
|
||
10FF000
|
unkown
|
page read and write
|
||
133C000
|
unkown image
|
page write copy
|
||
1701000
|
unkown
|
page read and write
|
||
6DABB000
|
unkown image
|
page readonly
|
||
20D1838A000
|
unkown
|
page read and write
|
||
1000000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
1432025F000
|
unkown
|
page read and write
|
||
6DA90000
|
unkown image
|
page readonly
|
||
F02000
|
unkown
|
page read and write
|
||
14320213000
|
unkown
|
page read and write
|
||
C7DB1BB000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
7FF55CB51000
|
unkown image
|
page readonly
|
||
3446000
|
unkown
|
page read and write
|
||
E28000
|
unkown
|
page read and write
|
||
133C000
|
unkown image
|
page write copy
|
||
20D18370000
|
unkown
|
page read and write
|
||
21456C30000
|
heap default
|
page read and write
|
||
7FF55CB41000
|
unkown image
|
page readonly
|
||
107B000
|
unkown
|
page read and write
|
||
342C000
|
unkown
|
page read and write
|
||
282FD1A000
|
unkown
|
page read and write
|
||
6EC1D000
|
unkown image
|
page write copy
|
||
1068000
|
unkown
|
page read and write
|
||
703B5000
|
unkown image
|
page readonly
|
||
13E997F000
|
stack
|
page read and write
|
||
FFBB2000
|
unkown image
|
page readonly
|
||
7FF592732000
|
unkown image
|
page readonly
|
||
FF540000
|
unkown image
|
page readonly
|
||
6F2E0000
|
unkown image
|
page readonly
|
||
20D17A4B000
|
unkown
|
page read and write
|
||
84E000
|
unkown
|
page read and write
|
||
901000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
6EB44000
|
unkown image
|
page read and write
|
||
2C2A000
|
unkown
|
page read and write
|
||
15563C29000
|
unkown
|
page read and write
|
||
70141000
|
unkown image
|
page readonly
|
||
107D000
|
unkown
|
page read and write
|
||
30A5000
|
unkown
|
page read and write
|
||
831747B000
|
unkown
|
page read and write
|
||
7FF54D467000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
1F9171E4000
|
unkown
|
page read and write
|
||
1056000
|
unkown
|
page read and write
|
||
7FF53E0D2000
|
unkown image
|
page readonly
|
||
3180000
|
unkown
|
page read and write
|
||
F0CE79B000
|
unkown
|
page read and write
|
||
2C1C000
|
unkown
|
page read and write
|
||
C7DB5FB000
|
stack
|
page read and write
|
||
7FF53E18A000
|
unkown image
|
page readonly
|
||
72F30000
|
unkown image
|
page read and write
|
||
3350000
|
unkown
|
page read and write
|
||
6E2F0000
|
unkown image
|
page readonly
|
||
7FF5928F9000
|
unkown image
|
page readonly
|
||
7FF53E1F4000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
1069000
|
unkown
|
page read and write
|
||
7FF5924F4000
|
unkown image
|
page readonly
|
||
1087000
|
unkown
|
page read and write
|
||
1330000
|
unkown image
|
page readonly
|
||
20D1886A000
|
unkown
|
page read and write
|
||
7FF53E187000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
8C4000
|
unkown
|
page read and write
|
||
FF6A0000
|
unkown image
|
page readonly
|
||
2191FD13000
|
unkown
|
page read and write
|
||
FF540000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
6E801000
|
unkown image
|
page execute read
|
||
3433000
|
unkown
|
page read and write
|
||
7F880000
|
unkown image
|
page readonly
|
||
889000
|
unkown
|
page read and write
|
||
1F9171C0000
|
unkown
|
page read and write
|
||
1088000
|
unkown
|
page read and write
|
||
7FF5B00A6000
|
unkown image
|
page readonly
|
||
2191FB70000
|
unkown
|
page read and write
|
||
7DF5BDF82000
|
unkown image
|
page readonly
|
||
10A7000
|
unkown
|
page read and write
|
||
7F8A0000
|
unkown image
|
page readonly
|
||
F38000
|
unkown
|
page read and write
|
||
6EC01000
|
unkown image
|
page execute read
|
||
E1B000
|
unkown
|
page read and write
|
||
2A058FF000
|
stack
|
page read and write
|
||
7DF5BDF90000
|
unkown image
|
page readonly
|
||
7FF5029D1000
|
unkown image
|
page readonly
|
||
7FA20000
|
unkown image
|
page readonly
|
||
104F000
|
unkown
|
page read and write
|
||
7FF55CACA000
|
unkown image
|
page readonly
|
||
1F911B10000
|
unkown image
|
page readonly
|
||
3457000
|
unkown
|
page read and write
|
||
1360000
|
unkown image
|
page readonly
|
||
1F911C7B000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
6EE45000
|
unkown image
|
page readonly
|
||
20D1835F000
|
unkown
|
page read and write
|
||
AFF000
|
stack
|
page read and write
|
||
7FF5AC2C5000
|
unkown image
|
page readonly
|
||
7FF5031AA000
|
unkown image
|
page readonly
|
||
15564202000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
20D18802000
|
unkown
|
page read and write
|
||
6E950000
|
unkown image
|
page readonly
|
||
21920402000
|
unkown
|
page read and write
|
||
7FF5924F7000
|
unkown image
|
page readonly
|
||
7DF55B160000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
7FF50319A000
|
unkown image
|
page readonly
|
||
7FF54D403000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
1082000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
12F1000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
1200000
|
unkown image
|
page readonly
|
||
6EB50000
|
unkown image
|
page readonly
|
||
7FF5030FB000
|
unkown image
|
page readonly
|
||
7FF54CCF2000
|
unkown image
|
page readonly
|
||
BEC000
|
unkown image
|
page read and write
|
||
15564190000
|
unkown
|
page read and write
|
||
7DF5A0592000
|
unkown image
|
page readonly
|
||
20D1833F000
|
unkown
|
page read and write
|
||
3600000
|
unkown
|
page read and write
|
||
1094000
|
unkown
|
page read and write
|
||
8BE000
|
unkown
|
page read and write
|
||
FF7A2000
|
unkown image
|
page readonly
|
||
B00000
|
heap private
|
page read and write
|
||
BD0000
|
heap default
|
page read and write
|
||
2BAA000
|
unkown
|
page read and write
|
||
19D6F3F0000
|
heap default
|
page read and write
|
||
6EB16000
|
unkown image
|
page read and write
|
||
7FF5B0243000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
6EBEB000
|
unkown image
|
page readonly
|
||
3404000
|
unkown
|
page read and write
|
||
7B0000
|
unkown image
|
page readonly
|
||
1086000
|
unkown
|
page read and write
|
||
6F300000
|
unkown image
|
page readonly
|
||
7FF59270B000
|
unkown image
|
page readonly
|
||
7FF5031A5000
|
unkown image
|
page readonly
|
||
6EE3F000
|
unkown image
|
page read and write
|
||
6F9B0000
|
unkown image
|
page readonly
|
||
2FE2000
|
unkown
|
page read and write
|
||
1042000
|
unkown
|
page read and write
|
||
1310000
|
unkown image
|
page readonly
|
||
14320259000
|
unkown
|
page read and write
|
||
1F917404000
|
unkown
|
page read and write
|
||
6E920000
|
unkown image
|
page readonly
|
||
E16000
|
unkown image
|
page readonly
|
||
6E2C1000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
3030000
|
unkown image
|
page readonly
|
||
6DB00000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
858000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
7DF55B170000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
12CE000
|
stack
|
page read and write
|
||
7FF5AC54D000
|
unkown image
|
page readonly
|
||
7FF59290A000
|
unkown image
|
page readonly
|
||
FF8D2000
|
unkown image
|
page readonly
|
||
7DF56A7D0000
|
unkown image
|
page readonly
|
||
10C7000
|
unkown
|
page read and write
|
||
20D18391000
|
unkown
|
page read and write
|
||
7FF5AFE07000
|
unkown image
|
page readonly
|
||
6DAC6000
|
unkown image
|
page read and write
|
||
19D6F450000
|
heap default
|
page read and write
|
||
2FE9000
|
unkown
|
page read and write
|
||
6DDC5000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
7FF5AC4C1000
|
unkown image
|
page readonly
|
||
B35000
|
unkown
|
page read and write
|
||
F0B000
|
unkown
|
page read and write
|
||
2B00000
|
unkown
|
page read and write
|
||
10FC000
|
unkown
|
page read and write
|
||
20D17AEA000
|
unkown
|
page read and write
|
||
6E285000
|
unkown image
|
page read and write
|
||
C7DB877000
|
stack
|
page read and write
|
||
EFC000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
EC7000
|
unkown
|
page read and write
|
||
1F911C71000
|
unkown
|
page read and write
|
||
7FF53DEE2000
|
unkown image
|
page readonly
|
||
6E966000
|
unkown image
|
page readonly
|
||
2BD8000
|
unkown image
|
page readonly
|
||
6EC30000
|
unkown image
|
page readonly
|
||
6F9EB000
|
unkown image
|
page readonly
|
||
BF7000
|
unkown image
|
page readonly
|
||
7FF53DF96000
|
unkown image
|
page readonly
|
||
6E971000
|
unkown image
|
page execute read
|
||
6EB45000
|
unkown image
|
page readonly
|
||
342A000
|
unkown
|
page read and write
|
||
7DF510E20000
|
unkown image
|
page readonly
|
||
7FF5030C6000
|
unkown image
|
page readonly
|
||
381F000
|
unkown
|
page read and write
|
||
6DBA1000
|
unkown image
|
page readonly
|
||
1F9120D0000
|
unkown image
|
page readonly
|
||
7DF54BE70000
|
unkown image
|
page readonly
|
||
A3C000
|
unkown
|
page read and write
|
||
7FF53DFB2000
|
unkown image
|
page readonly
|
||
7FF54D443000
|
unkown image
|
page readonly
|
||
1F912402000
|
unkown
|
page read and write
|
||
EC7000
|
unkown
|
page read and write
|
||
7FF5B00ED000
|
unkown image
|
page readonly
|
||
1669000
|
unkown
|
page read and write
|
||
6F300000
|
unkown image
|
page readonly
|
||
34A8000
|
unkown
|
page read and write
|
||
6DDE0000
|
unkown image
|
page readonly
|
||
7FF503189000
|
unkown image
|
page readonly
|
||
B40000
|
unkown image
|
page read and write
|
||
10A4000
|
unkown
|
page read and write
|
||
EBC000
|
unkown
|
page read and write
|
||
7FF55C2C1000
|
unkown image
|
page readonly
|
||
2B50000
|
unkown image
|
page readonly
|
||
371E000
|
stack
|
page read and write
|
||
20D18900000
|
unkown
|
page read and write
|
||
7DF49E450000
|
unkown image
|
page readonly
|
||
83C000
|
unkown
|
page read and write
|
||
7FF55C3CD000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
2C09000
|
unkown
|
page read and write
|
||
3036000
|
unkown
|
page read and write
|
||
2191FC00000
|
unkown
|
page read and write
|
||
E40000
|
heap default
|
page read and write
|
||
3064000
|
unkown
|
page read and write
|
||
6DAA1000
|
unkown image
|
page execute read
|
||
1F91722E000
|
unkown
|
page read and write
|
||
703B0000
|
unkown image
|
page readonly
|
||
7FF53DFC9000
|
unkown image
|
page readonly
|
||
F60000
|
unkown image
|
page readonly
|
||
21456C5F000
|
unkown
|
page read and write
|
||
2191FA10000
|
heap private
|
page read and write
|
||
7DF56A7C2000
|
unkown image
|
page readonly
|
||
6DA88000
|
unkown image
|
page read and write
|
||
EB1000
|
unkown
|
page read and write
|
||
106B000
|
unkown
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
||
3300000
|
unkown
|
page read and write
|
||
FF542000
|
unkown image
|
page readonly
|
||
2FF4000
|
unkown
|
page read and write
|
||
7FF54D2FF000
|
unkown image
|
page readonly
|
||
88C000
|
unkown
|
page read and write
|
||
30D0000
|
unkown
|
page read and write
|
||
6DB00000
|
unkown image
|
page readonly
|
||
6EB51000
|
unkown image
|
page execute read
|
||
1076000
|
unkown
|
page read and write
|
||
481FB7E000
|
stack
|
page read and write
|
||
3421000
|
unkown
|
page read and write
|
||
2C5E000
|
unkown
|
page read and write
|
||
6DAD0000
|
unkown image
|
page readonly
|
||
6DB9B000
|
unkown image
|
page readonly
|
||
2BA0000
|
unkown
|
page read and write
|
||
14320150000
|
unkown image
|
page readonly
|
||
15563C54000
|
unkown
|
page read and write
|
||
20D18399000
|
unkown
|
page read and write
|
||
6DB20000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
7FF53D99B000
|
unkown image
|
page readonly
|
||
20D18398000
|
unkown
|
page read and write
|
||
20D1839A000
|
unkown
|
page read and write
|
||
1E10000
|
unkown image
|
page readonly
|
||
FF430000
|
unkown image
|
page readonly
|
||
6E950000
|
unkown image
|
page readonly
|
||
3300000
|
unkown
|
page read and write
|
||
8C6000
|
unkown
|
page read and write
|
||
6E285000
|
unkown image
|
page read and write
|
||
1051000
|
unkown
|
page read and write
|
||
EE8000
|
unkown
|
page read and write
|
||
3457000
|
unkown
|
page read and write
|
||
8A9000
|
unkown
|
page read and write
|
||
14320200000
|
unkown
|
page read and write
|
||
2A0C000
|
unkown
|
page read and write
|
||
7FF5B0229000
|
unkown image
|
page readonly
|
||
3F5000
|
unkown
|
page read and write
|
||
7FF5B018C000
|
unkown image
|
page readonly
|
||
F38000
|
unkown
|
page read and write
|
||
1F911C78000
|
unkown
|
page read and write
|
||
7FF592671000
|
unkown image
|
page readonly
|
||
87B000
|
unkown
|
page read and write
|
||
7DF56A7B0000
|
unkown image
|
page readonly
|
||
7FF5926ED000
|
unkown image
|
page readonly
|
||
6E401000
|
unkown image
|
page execute read
|
||
6EDAC000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
32C0000
|
unkown
|
page read and write
|
||
1F9123F0000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
7FF55CB4A000
|
unkown image
|
page readonly
|
||
6E7D1000
|
unkown image
|
page readonly
|
||
828000
|
unkown
|
page read and write
|
||
F00000
|
unkown
|
page read and write
|
||
7DF510E12000
|
unkown image
|
page readonly
|
||
DE0000
|
unkown image
|
page readonly
|
||
EC4000
|
unkown
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
3020000
|
unkown image
|
page read and write
|
||
3560000
|
unkown
|
page read and write
|
||
380C000
|
unkown
|
page read and write
|
||
19D70250000
|
unkown
|
page read and write
|
||
6EAA7000
|
unkown image
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
6F9A0000
|
unkown image
|
page readonly
|
||
700000
|
unkown image
|
page readonly
|
||
6DA90000
|
unkown image
|
page readonly
|
||
7FF53E091000
|
unkown image
|
page readonly
|
||
E69000
|
unkown
|
page read and write
|
||
6DE87000
|
unkown image
|
page readonly
|
||
13DE000
|
stack
|
page read and write
|
||
6DD2C000
|
unkown image
|
page readonly
|
||
7FF5AC127000
|
unkown image
|
page readonly
|
||
3418000
|
unkown
|
page read and write
|
||
7FF5AC49B000
|
unkown image
|
page readonly
|
||
BE0000
|
unkown image
|
page readonly
|
||
7FF59291A000
|
unkown image
|
page readonly
|
||
1140000
|
unkown image
|
page readonly
|
||
E82000
|
unkown
|
page read and write
|
||
3416000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
879000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
2C2E000
|
unkown
|
page read and write
|
||
7FF5031B1000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
7FF53DF75000
|
unkown image
|
page readonly
|
||
2A0000
|
unkown image
|
page readonly
|
||
895000
|
unkown
|
page read and write
|
||
133C000
|
unkown image
|
page read and write
|
||
2B12000
|
unkown image
|
page readonly
|
||
7FF54D417000
|
unkown image
|
page readonly
|
||
6DB01000
|
unkown image
|
page execute read
|
||
6DDBF000
|
unkown image
|
page read and write
|
||
3032000
|
unkown
|
page read and write
|
||
1055000
|
unkown
|
page read and write
|
||
166C000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
EE1000
|
unkown
|
page read and write
|
||
7FF59209F000
|
unkown image
|
page readonly
|
||
7FF5AC5B7000
|
unkown image
|
page readonly
|
||
BC1000
|
unkown image
|
page execute read
|
||
108F000
|
unkown
|
page read and write
|
||
881000
|
unkown
|
page read and write
|
||
E28000
|
unkown
|
page read and write
|
||
6E955000
|
unkown image
|
page readonly
|
||
19D6F43C000
|
unkown
|
page read and write
|
||
873000
|
unkown
|
page read and write
|
||
2C25000
|
unkown
|
page read and write
|
||
EBD000
|
unkown
|
page read and write
|
||
C7DB97F000
|
stack
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
6DDE1000
|
unkown image
|
page execute read
|
||
7DF468680000
|
unkown image
|
page readonly
|
||
6DAA0000
|
unkown image
|
page readonly
|
||
32B0000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
1F911B60000
|
heap default
|
page read and write
|
||
2A20000
|
unkown
|
page read and write
|
||
FFF10000
|
unkown image
|
page readonly
|
||
7FF55CA70000
|
unkown image
|
page readonly
|
||
20D183BB000
|
unkown
|
page read and write
|
||
35DC000
|
stack
|
page read and write
|
||
1F917020000
|
unkown
|
page read and write
|
||
E89000
|
unkown
|
page read and write
|
||
1F91724C000
|
unkown
|
page read and write
|
||
BA0000
|
heap private
|
page read and write
|
||
7FF503194000
|
unkown image
|
page readonly
|
||
7DF5BA2A0000
|
unkown image
|
page readonly
|
||
FFAA0000
|
unkown image
|
page readonly
|
||
2C07000
|
unkown
|
page read and write
|
||
F0CF7FC000
|
stack
|
page read and write
|
||
8EF000
|
unkown
|
page read and write
|
||
10AB000
|
unkown
|
page read and write
|
||
305D000
|
unkown
|
page read and write
|
||
7FF53E211000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
7DF56A7D0000
|
unkown image
|
page readonly
|
||
1F911B00000
|
heap private
|
page read and write
|
||
7DF5A0590000
|
unkown image
|
page readonly
|
||
106B000
|
unkown
|
page read and write
|
||
20D17E00000
|
unkown image
|
page readonly
|
||
6F9C5000
|
unkown image
|
page readonly
|
||
21456C58000
|
unkown
|
page read and write
|
||
1F911ED0000
|
unkown image
|
page readonly
|
||
6EAD0000
|
unkown image
|
page readonly
|
||
7FF5AFB28000
|
unkown image
|
page readonly
|
||
6E12C000
|
unkown image
|
page readonly
|
||
2191FC48000
|
unkown
|
page read and write
|
||
E55000
|
heap default
|
page read and write
|
||
6F2D0000
|
unkown image
|
page readonly
|
||
303F000
|
unkown
|
page read and write
|
||
20D179E0000
|
unkown
|
page read and write
|
||
108D000
|
unkown
|
page read and write
|
||
6E63C000
|
unkown image
|
page readonly
|
||
6DE90000
|
unkown image
|
page readonly
|
||
1F9123E0000
|
unkown image
|
page readonly
|
||
7F890000
|
unkown image
|
page readonly
|
||
C7DBA7C000
|
stack
|
page read and write
|
||
EBF000
|
unkown
|
page read and write
|
||
F09000
|
unkown
|
page read and write
|
||
EBA000
|
unkown
|
page read and write
|
||
3450000
|
unkown
|
page read and write
|
||
1F91723F000
|
unkown
|
page read and write
|
||
E6C000
|
unkown
|
page read and write
|
||
2191FE00000
|
unkown image
|
page readonly
|
||
3438000
|
unkown
|
page read and write
|
||
6DDE6000
|
unkown image
|
page readonly
|
||
7FA40000
|
unkown image
|
page readonly
|
||
6F9C0000
|
unkown image
|
page readonly
|
||
2191FC02000
|
unkown
|
page read and write
|
||
6E34B000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
6DB13000
|
unkown image
|
page readonly
|
||
6E93C000
|
unkown image
|
page read and write
|
||
F0CF3FD000
|
stack
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
||
7FF55C967000
|
unkown image
|
page readonly
|
||
7FF54D44E000
|
unkown image
|
page readonly
|
||
20D18399000
|
unkown
|
page read and write
|
||
BC1000
|
unkown image
|
page execute read
|
||
2BB8000
|
unkown image
|
page readonly
|
||
10BA000
|
unkown
|
page read and write
|
||
341C000
|
unkown
|
page read and write
|
||
7F882000
|
unkown image
|
page readonly
|
||
BF4000
|
unkown image
|
page read and write
|
||
3F1000
|
unkown
|
page read and write
|
||
32A0000
|
unkown image
|
page readonly
|
||
E87000
|
unkown
|
page read and write
|
||
6E921000
|
unkown image
|
page execute read
|
||
481FAFE000
|
stack
|
page read and write
|
||
6DA90000
|
unkown image
|
page readonly
|
||
305B000
|
unkown
|
page read and write
|
||
7FF5926D1000
|
unkown image
|
page readonly
|
||
1072000
|
unkown
|
page read and write
|
||
BF7000
|
unkown image
|
page readonly
|
||
2BA0000
|
unkown
|
page read and write
|
||
106E000
|
unkown
|
page read and write
|
||
6DDE1000
|
unkown image
|
page execute read
|
||
7FF592920000
|
unkown image
|
page readonly
|
||
3446000
|
unkown
|
page read and write
|
||
1F917030000
|
unkown
|
page read and write
|
||
143201D0000
|
unkown
|
page read and write
|
||
7FF59229C000
|
unkown image
|
page readonly
|
||
7FF5AC631000
|
unkown image
|
page readonly
|
||
6DEF1000
|
unkown image
|
page execute read
|
||
1068000
|
unkown
|
page read and write
|
||
7FF55CA5F000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
385E000
|
stack
|
page read and write
|
||
20D1830F000
|
unkown
|
page read and write
|
||
3447000
|
unkown
|
page read and write
|
||
896000
|
unkown
|
page read and write
|
||
10BF000
|
unkown
|
page read and write
|
||
F0CF4FF000
|
stack
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
10C7000
|
unkown
|
page read and write
|
||
13F0000
|
heap private
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
1072000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
8C6000
|
unkown
|
page read and write
|
||
20D183B3000
|
unkown
|
page read and write
|
||
6F0000
|
unkown image
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
||
14320850000
|
unkown image
|
page readonly
|
||
BEC000
|
unkown image
|
page write copy
|
||
1628000
|
unkown
|
page read and write
|
||
20D183C2000
|
unkown
|
page read and write
|
||
822000
|
unkown
|
page read and write
|
||
8F3000
|
unkown
|
page read and write
|
||
2F70000
|
unkown
|
page read and write
|
||
88C000
|
unkown
|
page read and write
|
||
7FF53E162000
|
unkown image
|
page readonly
|
||
37C7000
|
unkown
|
page read and write
|
||
8D0000
|
unkown
|
page read and write
|
||
FF560000
|
unkown image
|
page readonly
|
||
2BB8000
|
unkown image
|
page readonly
|
||
6E941000
|
unkown image
|
page readonly
|
||
7DF5BDF80000
|
unkown image
|
page readonly
|
||
7DF510E22000
|
unkown image
|
page readonly
|
||
888000
|
unkown
|
page read and write
|
||
F40000
|
unkown image
|
page readonly
|
||
20D17AC5000
|
unkown
|
page read and write
|
||
7FF55C3CF000
|
unkown image
|
page readonly
|
||
6DE3B000
|
unkown image
|
page readonly
|
||
32BE000
|
stack
|
page read and write
|
||
10F5000
|
unkown
|
page read and write
|
||
1330000
|
unkown image
|
page readonly
|
||
15564180000
|
unkown image
|
page readonly
|
||
6DAC6000
|
unkown image
|
page read and write
|
||
20D17A3C000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
EE1000
|
unkown
|
page read and write
|
||
34B9000
|
unkown
|
page read and write
|
||
1012000
|
unkown
|
page read and write
|
||
7FF55C8EA000
|
unkown image
|
page readonly
|
||
2A05AFE000
|
stack
|
page read and write
|
||
BF7000
|
unkown image
|
page readonly
|
||
1C10000
|
unkown image
|
page readonly
|
||
FFBB0000
|
unkown image
|
page readonly
|
||
20D1835F000
|
unkown
|
page read and write
|
||
3FC000
|
unkown
|
page read and write
|
||
3457000
|
unkown
|
page read and write
|
||
15563C00000
|
unkown
|
page read and write
|
||
33D0000
|
unkown image
|
page readonly
|
||
195000
|
unkown
|
page read and write
|
||
6DAA0000
|
unkown image
|
page readonly
|
||
7FF59262B000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
1F9123C0000
|
unkown image
|
page readonly
|
||
20D183C2000
|
unkown
|
page read and write
|
||
7EC000
|
unkown
|
page read and write
|
||
1089000
|
unkown
|
page read and write
|
||
108F000
|
unkown
|
page read and write
|
||
EBA000
|
unkown
|
page read and write
|
||
6E2C1000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
7FF54D4F1000
|
unkown image
|
page readonly
|
||
7FF592857000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
6EB3B000
|
unkown image
|
page readonly
|
||
855000
|
unkown
|
page read and write
|
||
2CA7000
|
unkown
|
page read and write
|
||
7FF54D34B000
|
unkown image
|
page readonly
|
||
19D6F3E9000
|
heap private
|
page read and write
|
||
FF8F0000
|
unkown image
|
page readonly
|
||
6E800000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
20D18391000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
20D183C6000
|
unkown
|
page read and write
|
||
155639E0000
|
unkown image
|
page readonly
|
||
20D17850000
|
unkown image
|
page readonly
|
||
E28000
|
unkown
|
page read and write
|
||
7FF592829000
|
unkown image
|
page readonly
|
||
9D000
|
unkown
|
page read and write
|
||
1F912500000
|
unkown
|
page read and write
|
||
B60000
|
heap default
|
page read and write
|
||
1330000
|
heap default
|
page read and write
|
||
EB7000
|
unkown
|
page read and write
|
||
1061000
|
unkown
|
page read and write
|
||
1F917200000
|
unkown
|
page read and write
|
||
6F990000
|
unkown image
|
page readonly
|
||
3478000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
8AB000
|
unkown
|
page read and write
|
||
2191FA20000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
877000
|
unkown
|
page read and write
|
||
2C0C000
|
unkown
|
page read and write
|
||
84E000
|
unkown
|
page read and write
|
||
E16000
|
unkown image
|
page readonly
|
||
3422000
|
unkown
|
page read and write
|
||
780000
|
unkown
|
page read and write
|
||
10DD000
|
unkown
|
page read and write
|
||
3060000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
7FF5AC54F000
|
unkown image
|
page readonly
|
||
3705000
|
unkown
|
page read and write
|
||
FF7B2000
|
unkown image
|
page readonly
|
||
EF1000
|
unkown
|
page read and write
|
||
881000
|
unkown
|
page read and write
|
||
853000
|
unkown
|
page read and write
|
||
7DF5BA2B2000
|
unkown image
|
page readonly
|
||
7FF5B029D000
|
unkown image
|
page readonly
|
||
872000
|
unkown
|
page read and write
|
||
1055000
|
unkown
|
page read and write
|
||
6DDBF000
|
unkown image
|
page read and write
|
||
EA7000
|
unkown
|
page read and write
|
||
7FF592817000
|
unkown image
|
page readonly
|
||
2FB0000
|
unkown image
|
page readonly
|
||
6E961000
|
unkown image
|
page execute read
|
||
21920180000
|
unkown image
|
page readonly
|
||
6DAF4000
|
unkown image
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
6E2BF000
|
unkown image
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
20D18361000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
7FF592911000
|
unkown image
|
page readonly
|
||
6E203000
|
unkown image
|
page readonly
|
||
8A3000
|
unkown
|
page read and write
|
||
13E0000
|
unkown image
|
page readonly
|
||
2F90000
|
unkown
|
page read and write
|
||
7FF55CB29000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
7FF53DDBF000
|
unkown image
|
page readonly
|
||
1380000
|
unkown image
|
page readonly
|
||
7F880000
|
unkown image
|
page readonly
|
||
6DB12000
|
unkown image
|
page read and write
|
||
7FF5030BF000
|
unkown image
|
page readonly
|
||
7F892000
|
unkown image
|
page readonly
|
||
FBC000
|
unkown
|
page read and write
|
||
3400000
|
unkown
|
page read and write
|
||
2D50000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
FFDF0000
|
unkown image
|
page readonly
|
||
1101000
|
unkown
|
page read and write
|
||
FF7C0000
|
unkown image
|
page readonly
|
||
20D183B1000
|
unkown
|
page read and write
|
||
1F9170A0000
|
unkown
|
page read and write
|
||
2C2E000
|
unkown
|
page read and write
|
||
6EB70000
|
unkown image
|
page readonly
|
||
7FF54D4F1000
|
unkown image
|
page readonly
|
||
7F890000
|
unkown image
|
page readonly
|
||
2B2D000
|
unkown image
|
page readonly
|
||
1F911B30000
|
unkown image
|
page readonly
|
||
20D183AA000
|
unkown
|
page read and write
|
||
17E0000
|
unkown image
|
page readonly
|
||
6F9A1000
|
unkown image
|
page execute read
|
||
602000
|
unkown
|
page read and write
|
||
6EAA9000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
3417000
|
unkown
|
page read and write
|
||
E16000
|
unkown image
|
page readonly
|
||
20D17810000
|
heap private
|
page read and write
|
||
E6C000
|
unkown
|
page read and write
|
||
2FE5000
|
unkown
|
page read and write
|
||
ED5000
|
unkown
|
page read and write
|
||
7DF54BE80000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
1700000
|
unkown image
|
page readonly
|
||
6DA70000
|
unkown image
|
page readonly
|
||
3433000
|
unkown
|
page read and write
|
||
10D2000
|
unkown
|
page read and write
|
||
371000
|
unkown
|
page read and write
|
||
FF7B2000
|
unkown image
|
page readonly
|
||
7FF503182000
|
unkown image
|
page readonly
|
||
14320302000
|
unkown
|
page read and write
|
||
7FF5B0247000
|
unkown image
|
page readonly
|
||
2D90000
|
unkown
|
page read and write
|
||
1062000
|
unkown
|
page read and write
|
||
2FD5000
|
unkown
|
page read and write
|
||
3357000
|
unkown
|
page read and write
|
||
84A000
|
unkown
|
page read and write
|
||
19D6F310000
|
unkown
|
page read and write
|
||
2C1F000
|
unkown
|
page read and write
|
||
E47000
|
heap default
|
page read and write
|
||
E28000
|
unkown
|
page read and write
|
||
BEC000
|
unkown image
|
page read and write
|
||
7FF592407000
|
unkown image
|
page readonly
|
||
1310000
|
unkown image
|
page readonly
|
||
37A1000
|
unkown
|
page read and write
|
||
2F00000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
345F000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
283007E000
|
stack
|
page read and write
|
||
6E713000
|
unkown image
|
page readonly
|
||
20D179F0000
|
unkown image
|
page read and write
|
||
1310000
|
unkown image
|
page readonly
|
||
7FF5AC624000
|
unkown image
|
page readonly
|
||
2FC000
|
unkown
|
page read and write
|
||
7FF592287000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
2D80000
|
heap private
|
page read and write
|
||
2C2C000
|
unkown
|
page read and write
|
||
870000
|
unkown
|
page read and write
|
||
F0CF47F000
|
stack
|
page read and write
|
||
7FF54D4EA000
|
unkown image
|
page readonly
|
||
2C05000
|
unkown
|
page read and write
|
||
3260000
|
unkown
|
page read and write
|
||
20D17840000
|
unkown image
|
page readonly
|
||
B40000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
8F2000
|
unkown
|
page read and write
|
||
810000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
7DF54BE80000
|
unkown image
|
page readonly
|
||
E82000
|
unkown
|
page read and write
|
||
6F9C1000
|
unkown image
|
page execute read
|
||
7DF510E10000
|
unkown image
|
page readonly
|
||
B00000
|
unkown
|
page read and write
|
||
6E951000
|
unkown image
|
page execute read
|
||
7FF5AC537000
|
unkown image
|
page readonly
|
||
3595000
|
unkown
|
page read and write
|
||
7DF55B170000
|
unkown image
|
page readonly
|
||
812000
|
unkown
|
page read and write
|
||
6DAA0000
|
unkown image
|
page readonly
|
||
20D1833C000
|
unkown
|
page read and write
|
||
8C6000
|
unkown
|
page read and write
|
||
108D000
|
unkown
|
page read and write
|
||
6DA71000
|
unkown image
|
page execute read
|
||
7FF54D4E1000
|
unkown image
|
page readonly
|
||
6E286000
|
unkown image
|
page write copy
|
||
30D0000
|
unkown
|
page read and write
|
||
B10000
|
unkown
|
page read and write
|
||
F0CF1FE000
|
stack
|
page read and write
|
||
7FF5B031A000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
2900000
|
unkown
|
page read and write
|
||
1F912415000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
BC1000
|
unkown image
|
page execute read
|
||
EA1000
|
unkown
|
page read and write
|
||
19D6F43C000
|
unkown
|
page read and write
|
||
FF8E2000
|
unkown image
|
page readonly
|
||
2AFF000
|
stack
|
page read and write
|
||
1096000
|
unkown
|
page read and write
|
||
6E286000
|
unkown image
|
page write copy
|
||
7FF53DFCC000
|
unkown image
|
page readonly
|
||
6E795000
|
unkown image
|
page read and write
|
||
89A000
|
unkown
|
page read and write
|
||
E8C000
|
unkown
|
page read and write
|
||
7FF54D3FF000
|
unkown image
|
page readonly
|
||
7FF5030D0000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
10C1000
|
unkown
|
page read and write
|
||
87D000
|
unkown
|
page read and write
|
||
19D6F43E000
|
unkown
|
page read and write
|
||
ED4000
|
unkown
|
page read and write
|
||
7DF5BDF92000
|
unkown image
|
page readonly
|
||
610000
|
unkown image
|
page readonly
|
||
2191FA00000
|
unkown image
|
page read and write
|
||
E6C000
|
unkown
|
page read and write
|
||
20D183C0000
|
unkown
|
page read and write
|
||
E26000
|
unkown
|
page read and write
|
||
2AFA000
|
unkown image
|
page readonly
|
||
6F993000
|
unkown image
|
page readonly
|
||
770000
|
unkown image
|
page readonly
|
||
1071000
|
unkown
|
page read and write
|
||
BE0000
|
unkown image
|
page readonly
|
||
6EE43000
|
unkown image
|
page read and write
|
||
3500000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
8D7000
|
unkown
|
page read and write
|
||
7FA20000
|
unkown image
|
page readonly
|
||
6DAF4000
|
unkown image
|
page read and write
|
||
FFBA2000
|
unkown image
|
page readonly
|
||
2F80000
|
unkown image
|
page readonly
|
||
ED4000
|
unkown
|
page read and write
|
||
19D6F459000
|
heap default
|
page read and write
|
||
7FF592921000
|
unkown image
|
page readonly
|
||
F38000
|
unkown
|
page read and write
|
||
88C000
|
unkown
|
page read and write
|
||
EBA000
|
unkown
|
page read and write
|
||
3760000
|
unkown
|
page read and write
|
||
E89000
|
unkown
|
page read and write
|
||
20D1835B000
|
unkown
|
page read and write
|
||
7FF53E107000
|
unkown image
|
page readonly
|
||
20000
|
heap default
|
page read and write
|
||
85B000
|
unkown
|
page read and write
|
||
AFE000
|
stack
|
page read and write
|
||
7FF5B012F000
|
unkown image
|
page readonly
|
||
7FF592141000
|
unkown image
|
page readonly
|
||
802000
|
unkown
|
page read and write
|
||
20D17A4E000
|
unkown
|
page read and write
|
||
856000
|
unkown
|
page read and write
|
||
1F917260000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
6EB20000
|
unkown image
|
page readonly
|
||
395F000
|
stack
|
page read and write
|
||
1086000
|
unkown
|
page read and write
|
||
36AA000
|
unkown
|
page read and write
|
||
7DF510E22000
|
unkown image
|
page readonly
|
||
6F33F000
|
unkown image
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
||
1086000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
30E0000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
1F9171E1000
|
unkown
|
page read and write
|
||
7FF53E16E000
|
unkown image
|
page readonly
|
||
6E3F8000
|
unkown image
|
page read and write
|
||
7FF5B0321000
|
unkown image
|
page readonly
|
||
6E958000
|
unkown image
|
page read and write
|
||
6E2F6000
|
unkown image
|
page readonly
|
||
10AA000
|
unkown
|
page read and write
|
||
BB0000
|
unkown image
|
page readonly
|
||
6F9A1000
|
unkown image
|
page execute read
|
||
1077000
|
unkown
|
page read and write
|
||
20D1836D000
|
unkown
|
page read and write
|
||
999000
|
unkown
|
page read and write
|
||
7FF54D4DA000
|
unkown image
|
page readonly
|
||
6DAF5000
|
unkown image
|
page readonly
|
||
1074000
|
unkown
|
page read and write
|
||
2C46000
|
unkown
|
page read and write
|
||
703D8000
|
unkown image
|
page read and write
|
||
308D000
|
unkown
|
page read and write
|
||
88D000
|
unkown
|
page read and write
|
||
F0B000
|
unkown
|
page read and write
|
||
1063000
|
unkown
|
page read and write
|
||
20D183BB000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
FF8F0000
|
unkown image
|
page readonly
|
||
BEC000
|
unkown image
|
page read and write
|
||
20D17A4D000
|
unkown
|
page read and write
|
||
1347000
|
unkown image
|
page readonly
|
||
ED5000
|
unkown
|
page read and write
|
||
6E2BF000
|
unkown image
|
page read and write
|
||
109B000
|
unkown
|
page read and write
|
||
10A1000
|
unkown
|
page read and write
|
||
2C46000
|
unkown
|
page read and write
|
||
6E800000
|
unkown image
|
page readonly
|
||
10A5000
|
unkown
|
page read and write
|
||
F2A000
|
unkown
|
page read and write
|
||
6E950000
|
unkown image
|
page readonly
|
||
2B00000
|
unkown
|
page read and write
|
||
2191FA70000
|
heap default
|
page read and write
|
||
6DBBD000
|
unkown image
|
page execute read
|
||
6EB70000
|
unkown image
|
page readonly
|
||
1065000
|
heap default
|
page read and write
|
||
3090000
|
unkown
|
page read and write
|
||
7DF56A7B2000
|
unkown image
|
page readonly
|
||
7FF5B00D1000
|
unkown image
|
page readonly
|
||
30C1000
|
unkown
|
page read and write
|
||
20D17950000
|
unkown image
|
page readonly
|
||
BC1000
|
unkown image
|
page execute read
|
||
6DEF1000
|
unkown image
|
page execute read
|
||
20D1839A000
|
unkown
|
page read and write
|
||
2BA1000
|
unkown
|
page read and write
|
||
7FF5B02F2000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
3438000
|
unkown
|
page read and write
|
||
7F892000
|
unkown image
|
page readonly
|
||
D06000
|
heap private
|
page read and write
|
||
E28000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
20D18371000
|
unkown
|
page read and write
|
||
EB1000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
760000
|
unkown image
|
page readonly
|
||
6E3F7000
|
unkown image
|
page readonly
|
||
6DB00000
|
unkown image
|
page readonly
|
||
20D18393000
|
unkown
|
page read and write
|
||
19D6F390000
|
unkown
|
page read and write
|
||
3600000
|
unkown
|
page read and write
|
||
7FF54D4C9000
|
unkown image
|
page readonly
|
||
107A000
|
unkown
|
page read and write
|
||
7FF53DD7E000
|
unkown image
|
page readonly
|
||
7FF53DF24000
|
unkown image
|
page readonly
|
||
19D6FF90000
|
unkown
|
page read and write
|
||
30D0000
|
unkown image
|
page readonly
|
||
7FF53DE0F000
|
unkown image
|
page readonly
|
||
75D000
|
unkown
|
page read and write
|
||
341B000
|
unkown
|
page read and write
|
||
7FF53DF20000
|
unkown image
|
page readonly
|
||
20D17B13000
|
unkown
|
page read and write
|
||
856000
|
unkown
|
page read and write
|
||
3447000
|
unkown
|
page read and write
|
||
6DDE0000
|
unkown image
|
page readonly
|
||
D1E000
|
stack
|
page read and write
|
||
106D000
|
unkown
|
page read and write
|
||
7FF5926D5000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
37C0000
|
unkown
|
page read and write
|
||
3210000
|
unkown
|
page read and write
|
||
7FF59277B000
|
unkown image
|
page readonly
|
||
15563D08000
|
unkown
|
page read and write
|
||
703C0000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
1F912250000
|
unkown image
|
page readonly
|
||
6F9C0000
|
unkown image
|
page readonly
|
||
20D1835D000
|
unkown
|
page read and write
|
||
1F911C9F000
|
unkown
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
||
1086000
|
unkown
|
page read and write
|
||
7FF55CB22000
|
unkown image
|
page readonly
|
||
7FF55C3D9000
|
unkown image
|
page readonly
|
||
20D18399000
|
unkown
|
page read and write
|
||
3750000
|
unkown image
|
page readonly
|
||
ED0000
|
unkown
|
page read and write
|
||
F0CF2FF000
|
stack
|
page read and write
|
||
6EAA7000
|
unkown image
|
page read and write
|
||
13E97FB000
|
stack
|
page read and write
|
||
1F9174E0000
|
unkown
|
page read and write
|
||
7FF54D371000
|
unkown image
|
page readonly
|
||
BE0000
|
unkown image
|
page readonly
|
||
EA1000
|
unkown
|
page read and write
|
||
20D183AA000
|
unkown
|
page read and write
|
||
6F30E000
|
unkown image
|
page readonly
|
||
7FF53E1FA000
|
unkown image
|
page readonly
|
||
6DB80000
|
unkown image
|
page readonly
|
||
7FF5B030A000
|
unkown image
|
page readonly
|
||
B90000
|
unkown image
|
page readonly
|
||
7FF592666000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
FF8E0000
|
unkown image
|
page readonly
|
||
107E000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
7FF592904000
|
unkown image
|
page readonly
|
||
FF560000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
7FF53DD63000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
1090000
|
unkown image
|
page readonly
|
||
1054000
|
unkown
|
page read and write
|
||
14320170000
|
unkown image
|
page readonly
|
||
2FD6000
|
unkown
|
page read and write
|
||
7FF5B017B000
|
unkown image
|
page readonly
|
||
21456A20000
|
unkown image
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
20D17990000
|
unkown image
|
page readonly
|
||
2F00000
|
unkown image
|
page readonly
|
||
E82000
|
unkown
|
page read and write
|
||
1078000
|
unkown
|
page read and write
|
||
1084000
|
heap default
|
page read and write
|
||
2C4F000
|
unkown
|
page read and write
|
||
7FF5030D3000
|
unkown image
|
page readonly
|
||
8C0000
|
unkown
|
page read and write
|
||
1310000
|
unkown image
|
page readonly
|
||
760000
|
unkown image
|
page readonly
|
||
2C56000
|
unkown
|
page read and write
|
||
6F2D1000
|
unkown image
|
page execute read
|
||
20D18390000
|
unkown
|
page read and write
|
||
6DEF0000
|
unkown image
|
page readonly
|
||
ED4000
|
unkown
|
page read and write
|
||
7FF592840000
|
unkown image
|
page readonly
|
||
14320202000
|
unkown
|
page read and write
|
||
83D000
|
unkown
|
page read and write
|
||
14320180000
|
unkown image
|
page readonly
|
||
302F000
|
unkown
|
page read and write
|
||
20D17AA8000
|
unkown
|
page read and write
|
||
6DA70000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
ED4000
|
unkown
|
page read and write
|
||
6E909000
|
unkown image
|
page readonly
|
||
2FE3000
|
unkown
|
page read and write
|
||
7FF5AC56E000
|
unkown image
|
page readonly
|
||
88D000
|
unkown
|
page read and write
|
||
7FF5AC495000
|
unkown image
|
page readonly
|
||
600000
|
unkown image
|
page readonly
|
||
6DB21000
|
unkown image
|
page execute read
|
||
6DB97000
|
unkown image
|
page write copy
|
||
2C18000
|
unkown
|
page read and write
|
||
13E98FB000
|
stack
|
page read and write
|
||
878000
|
unkown
|
page read and write
|
||
1330000
|
unkown image
|
page readonly
|
||
20D17820000
|
unkown image
|
page readonly
|
||
7FF53E11D000
|
unkown image
|
page readonly
|
||
143204D0000
|
unkown image
|
page readonly
|
||
7F880000
|
unkown image
|
page readonly
|
||
6DA7F000
|
unkown image
|
page readonly
|
||
1057000
|
heap default
|
page read and write
|
||
FF542000
|
unkown image
|
page readonly
|
||
20D18367000
|
unkown
|
page read and write
|
||
20D183B1000
|
unkown
|
page read and write
|
||
6F2E0000
|
unkown image
|
page readonly
|
||
7F0000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
12FE000
|
stack
|
page read and write
|
||
20D1835C000
|
unkown
|
page read and write
|
||
20D17A53000
|
unkown
|
page read and write
|
||
7FF53E07C000
|
unkown image
|
page readonly
|
||
3455000
|
unkown
|
page read and write
|
||
19D6F3B0000
|
unkown image
|
page readonly
|
||
20D1831D000
|
unkown
|
page read and write
|
||
6E7CF000
|
unkown image
|
page read and write
|
||
6DAD0000
|
unkown image
|
page readonly
|
||
2191FC86000
|
unkown
|
page read and write
|
||
1086000
|
unkown
|
page read and write
|
||
1347000
|
unkown image
|
page readonly
|
||
7FF53E11F000
|
unkown image
|
page readonly
|
||
886000
|
unkown
|
page read and write
|
||
6DAA1000
|
unkown image
|
page execute read
|
||
6E9A0000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
20D18300000
|
unkown
|
page read and write
|
||
F0CEFFB000
|
stack
|
page read and write
|
||
7FF5031A1000
|
unkown image
|
page readonly
|
||
6EC0E000
|
unkown image
|
page readonly
|
||
7FF53E147000
|
unkown image
|
page readonly
|
||
7FF53DEF4000
|
unkown image
|
page readonly
|
||
2C31000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
DA0000
|
unkown
|
page read and write
|
||
847000
|
unkown
|
page read and write
|
||
6F2E9000
|
unkown image
|
page readonly
|
||
37B0000
|
unkown image
|
page readonly
|
||
19D6F350000
|
unkown image
|
page readonly
|
||
2FF9000
|
unkown
|
page read and write
|
||
856000
|
unkown
|
page read and write
|
||
20D1831B000
|
unkown
|
page read and write
|
||
7FF53E18D000
|
unkown image
|
page readonly
|
||
E28000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
6EAF1000
|
unkown image
|
page execute read
|
||
19D70010000
|
unkown
|
page read and write
|
||
1402000
|
unkown
|
page read and write
|
||
3510000
|
unkown image
|
page readonly
|
||
19D70260000
|
unkown
|
page readonly
|
||
1074000
|
unkown
|
page read and write
|
||
6F2F6000
|
unkown image
|
page readonly
|
||
20D1836A000
|
unkown
|
page read and write
|
||
20D18394000
|
unkown
|
page read and write
|
||
6E397000
|
unkown image
|
page readonly
|
||
FF440000
|
unkown image
|
page readonly
|
||
20D18370000
|
unkown
|
page read and write
|
||
7FF55CA63000
|
unkown image
|
page readonly
|
||
901000
|
unkown
|
page read and write
|
||
86E000
|
unkown
|
page read and write
|
||
1082000
|
unkown
|
page read and write
|
||
7FF53DFDD000
|
unkown image
|
page readonly
|
||
6DA8B000
|
unkown image
|
page readonly
|
||
E28000
|
unkown
|
page read and write
|
||
20D18391000
|
unkown
|
page read and write
|
||
6EAA9000
|
unkown image
|
page readonly
|
||
6E92E000
|
unkown image
|
page readonly
|
||
1F9171F0000
|
unkown
|
page read and write
|
||
1072000
|
unkown
|
page read and write
|
||
7DF510E30000
|
unkown image
|
page readonly
|
||
7FF503103000
|
unkown image
|
page readonly
|
||
6E97E000
|
unkown image
|
page readonly
|
||
1F917289000
|
unkown
|
page read and write
|
||
F0CECFD000
|
stack
|
page read and write
|
||
7FE000
|
stack
|
page read and write
|
||
CC0000
|
unkown image
|
page readonly
|
||
1347000
|
unkown image
|
page readonly
|
||
1F90000
|
unkown image
|
page readonly
|
||
14320229000
|
unkown
|
page read and write
|
||
7DF510E20000
|
unkown image
|
page readonly
|
||
6F9AF000
|
unkown image
|
page read and write
|
||
3420000
|
unkown
|
page read and write
|
||
EB1000
|
unkown
|
page read and write
|
||
1F9171C0000
|
unkown
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
1600000
|
unkown
|
page read and write
|
||
7DF5BA2B0000
|
unkown image
|
page readonly
|
||
E28000
|
unkown
|
page read and write
|
||
7DF55B160000
|
unkown image
|
page readonly
|
||
D00000
|
heap private
|
page read and write
|
||
2830179000
|
stack
|
page read and write
|
||
6DB0E000
|
unkown image
|
page readonly
|
||
1F912559000
|
unkown
|
page read and write
|
||
19D6F43C000
|
unkown
|
page read and write
|
||
7FF55CB3A000
|
unkown image
|
page readonly
|
||
1055000
|
unkown
|
page read and write
|
||
FF7B0000
|
unkown image
|
page readonly
|
||
20D17A4A000
|
unkown
|
page read and write
|
||
15563D00000
|
unkown
|
page read and write
|
||
301A000
|
unkown
|
page read and write
|
||
887000
|
unkown
|
page read and write
|
||
6E920000
|
unkown image
|
page readonly
|
||
6DEF0000
|
unkown image
|
page readonly
|
||
6DE87000
|
unkown image
|
page readonly
|
||
295F000
|
unkown
|
page read and write
|
||
CDF000
|
stack
|
page read and write
|
||
19D70270000
|
unkown
|
page read and write
|
||
1073000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
2A00000
|
unkown
|
page read and write
|
||
20D183DB000
|
unkown
|
page read and write
|
||
89F000
|
unkown
|
page read and write
|
||
14320140000
|
heap private
|
page read and write
|
||
7FF54D276000
|
unkown image
|
page readonly
|
||
B60000
|
unkown image
|
page readonly
|
||
7FF5AFE01000
|
unkown image
|
page readonly
|
||
6E12C000
|
unkown image
|
page readonly
|
||
108D000
|
unkown
|
page read and write
|
||
70280000
|
unkown image
|
page readonly
|
||
3380000
|
unkown image
|
page readonly
|
||
6DB13000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
85E000
|
unkown
|
page read and write
|
||
7FF5AC4AC000
|
unkown image
|
page readonly
|
||
6EB62000
|
unkown image
|
page read and write
|
||
909000
|
unkown
|
page read and write
|
||
6DDC8000
|
unkown image
|
page readonly
|
||
F0CF5FC000
|
stack
|
page read and write
|
||
B60000
|
unkown image
|
page readonly
|
||
6DB0E000
|
unkown image
|
page readonly
|
||
1091000
|
unkown
|
page read and write
|
||
823000
|
unkown
|
page read and write
|
||
888000
|
unkown
|
page read and write
|
||
3433000
|
unkown
|
page read and write
|
||
1082000
|
unkown
|
page read and write
|
||
20D18802000
|
unkown
|
page read and write
|
||
E6C000
|
unkown
|
page read and write
|
||
20D1836D000
|
unkown
|
page read and write
|
||
1F911C13000
|
unkown
|
page read and write
|
||
13E96FE000
|
stack
|
page read and write
|
||
3446000
|
unkown
|
page read and write
|
||
F38000
|
unkown
|
page read and write
|
||
890000
|
unkown
|
page read and write
|
||
AF5000
|
unkown
|
page read and write
|
||
EC4000
|
unkown
|
page read and write
|
||
1089000
|
unkown
|
page read and write
|
||
2B7A000
|
unkown
|
page read and write
|
||
21456C46000
|
heap default
|
page read and write
|
||
FFBB0000
|
unkown image
|
page readonly
|
||
106B000
|
unkown
|
page read and write
|
||
70130000
|
unkown image
|
page readonly
|
||
20D18374000
|
unkown
|
page read and write
|
||
905000
|
unkown
|
page read and write
|
||
6DAD0000
|
unkown image
|
page readonly
|
||
2C01000
|
unkown
|
page read and write
|
||
20D18389000
|
unkown
|
page read and write
|
||
1077000
|
unkown
|
page read and write
|
||
21456E75000
|
heap private
|
page read and write
|
||
7FF53DFFB000
|
unkown image
|
page readonly
|
||
7FF592401000
|
unkown image
|
page readonly
|
||
8AD000
|
unkown
|
page read and write
|
||
7DF5A0580000
|
unkown image
|
page readonly
|
||
6E2F0000
|
unkown image
|
page readonly
|
||
700000
|
unkown image
|
page readonly
|
||
6EB0B000
|
unkown image
|
page readonly
|
||
10AE000
|
unkown
|
page read and write
|
||
7DF449D40000
|
unkown image
|
page readonly
|
||
3600000
|
unkown
|
page read and write
|
||
2CD0000
|
unkown
|
page read and write
|
||
106F000
|
unkown
|
page read and write
|
||
20D18391000
|
unkown
|
page read and write
|
||
1088000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
6F9D1000
|
unkown image
|
page execute read
|
||
2A05BFE000
|
stack
|
page read and write
|
||
6DEE8000
|
unkown image
|
page read and write
|
||
6E965000
|
unkown image
|
page read and write
|
||
6E400000
|
unkown image
|
page readonly
|
||
1500000
|
unkown image
|
page readonly
|
||
3433000
|
unkown
|
page read and write
|
||
7FF592489000
|
unkown image
|
page readonly
|
||
7FF53D98C000
|
unkown image
|
page readonly
|
||
1F911B70000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
2BF0000
|
unkown image
|
page readonly
|
||
E28000
|
unkown
|
page read and write
|
||
2BAF000
|
unkown
|
page read and write
|
||
155639C0000
|
unkown image
|
page read and write
|
||
1F917520000
|
unkown
|
page read and write
|
||
6DACA000
|
unkown image
|
page readonly
|
||
1E0000
|
heap default
|
page read and write
|
||
FF530000
|
unkown image
|
page readonly
|
||
BC1000
|
unkown image
|
page execute read
|
||
2A0567E000
|
stack
|
page read and write
|
||
83174FE000
|
stack
|
page read and write
|
||
1072000
|
unkown
|
page read and write
|
||
1071000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
7DF5BA2C0000
|
unkown image
|
page readonly
|
||
20D18393000
|
unkown
|
page read and write
|
||
1101000
|
unkown
|
page read and write
|
||
770000
|
unkown image
|
page readonly
|
||
1F912559000
|
unkown
|
page read and write
|
||
7DF5BDF80000
|
unkown image
|
page readonly
|
||
7FF5AC5BD000
|
unkown image
|
page readonly
|
||
20D17AB1000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
6E970000
|
unkown image
|
page readonly
|
||
EB1000
|
unkown
|
page read and write
|
||
7FF55C390000
|
unkown image
|
page readonly
|
||
1F9123F3000
|
unkown
|
page read and write
|
||
12FC000
|
unkown
|
page read and write
|
||
20D18389000
|
unkown
|
page read and write
|
||
7FF592847000
|
unkown image
|
page readonly
|
||
19D6F3E5000
|
heap private
|
page read and write
|
||
2C05000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
70140000
|
unkown image
|
page read and write
|
||
1F917310000
|
unkown
|
page read and write
|
||
1660000
|
unkown image
|
page readonly
|
||
7FF53E133000
|
unkown image
|
page readonly
|
||
19D6F3F7000
|
heap default
|
page read and write
|
||
20D17A8C000
|
unkown
|
page read and write
|
||
6E796000
|
unkown image
|
page write copy
|
||
7F882000
|
unkown image
|
page readonly
|
||
1F913001000
|
unkown
|
page read and write
|
||
6E203000
|
unkown image
|
page readonly
|
||
1086000
|
unkown
|
page read and write
|
||
FF550000
|
unkown image
|
page readonly
|
||
105A000
|
unkown
|
page read and write
|
||
166C000
|
unkown
|
page read and write
|
||
20D17C00000
|
unkown image
|
page readonly
|
||
10C1000
|
unkown
|
page read and write
|
||
6EAD1000
|
unkown image
|
page execute read
|
||
7FF53E0EA000
|
unkown image
|
page readonly
|
||
703C1000
|
unkown image
|
page execute read
|
||
14320A02000
|
unkown
|
page read and write
|
||
6DA88000
|
unkown image
|
page read and write
|
||
70285000
|
unkown image
|
page read and write
|
||
30D0000
|
unkown
|
page read and write
|
||
303C000
|
unkown
|
page read and write
|
||
19CE000
|
stack
|
page read and write
|
||
8FB000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
143201A0000
|
heap default
|
page read and write
|
||
19D6F320000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
107D000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
108E000
|
unkown
|
page read and write
|
||
3405000
|
unkown
|
page read and write
|
||
1095000
|
unkown
|
page read and write
|
||
6E9A0000
|
unkown image
|
page readonly
|
||
FF7A0000
|
unkown image
|
page readonly
|
||
6F9E3000
|
unkown image
|
page readonly
|
||
6E39B000
|
unkown image
|
page readonly
|
||
D0E000
|
stack
|
page read and write
|
||
EAD000
|
unkown
|
page read and write
|
||
7FF55CAA2000
|
unkown image
|
page readonly
|
||
14FE000
|
stack
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
7FF53E130000
|
unkown image
|
page readonly
|
||
2191FC13000
|
unkown
|
page read and write
|
||
13E9C7F000
|
stack
|
page read and write
|
||
7FF592487000
|
unkown image
|
page readonly
|
||
EB5000
|
unkown
|
page read and write
|
||
F0B000
|
unkown
|
page read and write
|
||
FF540000
|
unkown image
|
page readonly
|
||
7DF55B162000
|
unkown image
|
page readonly
|
||
861000
|
unkown
|
page read and write
|
||
1090000
|
unkown
|
page read and write
|
||
6DEE9000
|
unkown image
|
page readonly
|
||
2890000
|
heap private
|
page read and write
|
||
2A0000
|
unkown image
|
page readonly
|
||
2C32000
|
unkown
|
page read and write
|
||
2B60000
|
unkown
|
page read and write
|
||
15563C5C000
|
unkown
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
||
70131000
|
unkown image
|
page execute read
|
||
7FF53E0E1000
|
unkown image
|
page readonly
|
||
481FC79000
|
stack
|
page read and write
|
||
EB5000
|
unkown
|
page read and write
|
||
481FBF9000
|
stack
|
page read and write
|
||
7FF5AC593000
|
unkown image
|
page readonly
|
||
1628000
|
unkown
|
page read and write
|
||
6F9E3000
|
unkown image
|
page readonly
|
||
7FF5B01A1000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
6E970000
|
unkown image
|
page readonly
|
||
6DA7F000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
1C0F000
|
stack
|
page read and write
|
||
1058000
|
unkown
|
page read and write
|
||
6EB63000
|
unkown image
|
page readonly
|
||
2D01000
|
unkown
|
page read and write
|
||
3430000
|
unkown
|
page read and write
|
||
10D8000
|
unkown
|
page read and write
|
||
6DEE7000
|
unkown image
|
page readonly
|
||
1077000
|
unkown
|
page read and write
|
||
6F9D0000
|
unkown image
|
page readonly
|
||
166C000
|
unkown
|
page read and write
|
||
3110000
|
unkown
|
page read and write
|
||
6F996000
|
unkown image
|
page readonly
|
||
6F2D6000
|
unkown image
|
page read and write
|
||
7FF5AC121000
|
unkown image
|
page readonly
|
||
FFEF0000
|
unkown image
|
page readonly
|
||
7FF59284E000
|
unkown image
|
page readonly
|
||
DF0000
|
unkown image
|
page readonly
|
||
FF7B0000
|
unkown image
|
page readonly
|
||
887000
|
unkown
|
page read and write
|
||
6EB21000
|
unkown image
|
page execute read
|
||
1F911C3F000
|
unkown
|
page read and write
|
||
2FFD000
|
unkown
|
page read and write
|
||
2BD3000
|
unkown image
|
page readonly
|
||
BC0000
|
unkown image
|
page readonly
|
||
108D000
|
unkown
|
page read and write
|
||
E28000
|
unkown
|
page read and write
|
||
7F882000
|
unkown image
|
page readonly
|
||
1F917520000
|
unkown
|
page read and write
|
||
6F330000
|
unkown image
|
page readonly
|
||
6E959000
|
unkown image
|
page readonly
|
||
21456BB0000
|
unkown image
|
page readonly
|
||
143201B0000
|
unkown image
|
page readonly
|
||
E85000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
2B4C000
|
unkown image
|
page readonly
|
||
3041000
|
unkown
|
page read and write
|
||
862000
|
unkown
|
page read and write
|
||
109B000
|
unkown
|
page read and write
|
||
20D17AD5000
|
unkown
|
page read and write
|
||
20D183BC000
|
unkown
|
page read and write
|
||
6DD78000
|
unkown image
|
page readonly
|
||
6F990000
|
unkown image
|
page readonly
|
||
6E287000
|
unkown image
|
page read and write
|
||
6EBD0000
|
unkown image
|
page readonly
|
||
7FF54D345000
|
unkown image
|
page readonly
|
||
8B2000
|
unkown
|
page read and write
|
||
7FF5B010B000
|
unkown image
|
page readonly
|
||
2191FC2A000
|
unkown
|
page read and write
|
||
1F911AF0000
|
unkown image
|
page read and write
|
||
2C23000
|
unkown
|
page read and write
|
||
7FF54D46A000
|
unkown image
|
page readonly
|
||
29E0000
|
unkown
|
page read and write
|
||
6E9A0000
|
unkown image
|
page readonly
|
||
7FF5030DE000
|
unkown image
|
page readonly
|
||
D10000
|
unkown image
|
page readonly
|
||
EBD000
|
unkown
|
page read and write
|
||
2A0537B000
|
unkown
|
page read and write
|
||
2C1D000
|
unkown
|
page read and write
|
||
7FF5B0240000
|
unkown image
|
page readonly
|
||
2191FC8D000
|
unkown
|
page read and write
|
||
7DF5BA2A0000
|
unkown image
|
page readonly
|
||
143206D0000
|
unkown image
|
page readonly
|
||
7FF54D4C2000
|
unkown image
|
page readonly
|
||
1628000
|
unkown
|
page read and write
|
||
21456B50000
|
unkown
|
page read and write
|
||
831777B000
|
stack
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
2F10000
|
unkown
|
page execute and read and write
|
||
7FF592803000
|
unkown image
|
page readonly
|
||
F50000
|
unkown image
|
page readonly
|
||
12C0000
|
unkown image
|
page readonly
|
||
6F2E8000
|
unkown image
|
page read and write
|
||
6E960000
|
unkown image
|
page readonly
|
||
3416000
|
unkown
|
page read and write
|
||
6DE3B000
|
unkown image
|
page readonly
|
||
20D17AF8000
|
unkown
|
page read and write
|
||
7FF5B0297000
|
unkown image
|
page readonly
|
||
2EC0000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
70286000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
6F2F0000
|
unkown image
|
page readonly
|
||
6EBE7000
|
unkown image
|
page read and write
|
||
8317AFE000
|
stack
|
page read and write
|
||
2191FA50000
|
unkown image
|
page readonly
|
||
1F9172FC000
|
unkown
|
page read and write
|
||
20D18389000
|
unkown
|
page read and write
|
||
8B7000
|
unkown
|
page read and write
|
||
8A7000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
6F9B0000
|
unkown image
|
page readonly
|
||
2F40000
|
unkown
|
page read and write
|
||
7FF53E0F3000
|
unkown image
|
page readonly
|
||
355F000
|
unkown
|
page read and write
|
||
6F31B000
|
unkown image
|
page read and write
|
||
EFA000
|
unkown
|
page read and write
|
||
E28000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
3680000
|
unkown
|
page read and write
|
||
20D18327000
|
unkown
|
page read and write
|
||
33E0000
|
unkown
|
page execute and read and write
|
||
7DF56A7C0000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
3300000
|
unkown
|
page read and write
|
||
2C43000
|
unkown
|
page read and write
|
||
7DF55B152000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
873000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
3450000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
10F0000
|
unkown
|
page read and write
|
||
7FF53E123000
|
unkown image
|
page readonly
|
||
7B0000
|
unkown image
|
page readonly
|
||
20D18802000
|
unkown
|
page read and write
|
||
20D18390000
|
unkown
|
page read and write
|
||
F04000
|
unkown
|
page read and write
|
||
7FF5927A5000
|
unkown image
|
page readonly
|
||
7FF55C2FD000
|
unkown image
|
page readonly
|
||
7FF5AC563000
|
unkown image
|
page readonly
|
||
166C000
|
unkown
|
page read and write
|
||
7FF548A61000
|
unkown image
|
page readonly
|
||
83179F8000
|
stack
|
page read and write
|
||
EB5000
|
unkown
|
page read and write
|
||
19D6F9D0000
|
unkown image
|
page readonly
|
||
7FF5AC612000
|
unkown image
|
page readonly
|
||
6F9A0000
|
unkown image
|
page readonly
|
||
1057000
|
unkown
|
page read and write
|
||
D5E000
|
stack
|
page read and write
|
||
7FF50292F000
|
unkown image
|
page readonly
|
||
8F4000
|
unkown
|
page read and write
|
||
2F60000
|
heap default
|
page read and write
|
||
F00000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
7FF592873000
|
unkown image
|
page readonly
|
||
481FA7B000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
FF8D0000
|
unkown image
|
page readonly
|
||
2A053FE000
|
stack
|
page read and write
|
||
20D18399000
|
unkown
|
page read and write
|
||
1310000
|
unkown image
|
page readonly
|
||
3407000
|
unkown
|
page read and write
|
||
7FA22000
|
unkown image
|
page readonly
|
||
1F917520000
|
unkown
|
page read and write
|
||
21456A40000
|
unkown image
|
page readonly
|
||
EB1000
|
unkown
|
page read and write
|
||
7FF53E137000
|
unkown image
|
page readonly
|
||
6DEF0000
|
unkown image
|
page readonly
|
||
1073000
|
unkown
|
page read and write
|
||
7FF55CB51000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
6DE8B000
|
unkown image
|
page readonly
|
||
6DDE6000
|
unkown image
|
page readonly
|
||
6DD2C000
|
unkown image
|
page readonly
|
||
7FF5B026B000
|
unkown image
|
page readonly
|
||
3390000
|
unkown
|
page read and write
|
||
109F000
|
unkown
|
page read and write
|
||
7F892000
|
unkown image
|
page readonly
|
||
7FF59286B000
|
unkown image
|
page readonly
|
||
7DF5BDFA0000
|
unkown image
|
page readonly
|
||
6F9EB000
|
unkown image
|
page readonly
|
||
7FF5AC641000
|
unkown image
|
page readonly
|
||
280000
|
heap default
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
7FF54D175000
|
unkown image
|
page readonly
|
||
282FD9F000
|
stack
|
page read and write
|
||
703B1000
|
unkown image
|
page execute read
|
||
8AA000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
15563C77000
|
unkown
|
page read and write
|
||
6F995000
|
unkown image
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
3820000
|
unkown
|
page read and write
|
||
1311000
|
unkown image
|
page execute read
|
||
20D1831D000
|
unkown
|
page read and write
|
||
1F9171CE000
|
unkown
|
page read and write
|
||
8FE000
|
unkown
|
page read and write
|
||
2BA6000
|
unkown
|
page read and write
|
||
6EAF0000
|
unkown image
|
page readonly
|
||
EE8000
|
unkown
|
page read and write
|
||
84B000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
2C56000
|
unkown
|
page read and write
|
||
703B0000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
7DF55B152000
|
unkown image
|
page readonly
|
||
32D0000
|
heap default
|
page read and write
|
||
30CC000
|
unkown
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
||
85A000
|
unkown
|
page read and write
|
||
E87000
|
unkown
|
page read and write
|
||
6EC00000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
2191FC54000
|
unkown
|
page read and write
|
||
1330000
|
unkown image
|
page readonly
|
||
7FF5AC63A000
|
unkown image
|
page readonly
|
||
7FA32000
|
unkown image
|
page readonly
|
||
3465000
|
unkown
|
page read and write
|
||
2C28000
|
unkown
|
page read and write
|
||
760000
|
unkown image
|
page readonly
|
||
7FF5926A6000
|
unkown image
|
page readonly
|
||
6E959000
|
unkown image
|
page readonly
|
||
1F917500000
|
unkown
|
page read and write
|
||
2191FC70000
|
unkown
|
page read and write
|
||
FF8D0000
|
unkown image
|
page readonly
|
||
7FF55CA5D000
|
unkown image
|
page readonly
|
||
6F339000
|
unkown image
|
page readonly
|
||
375000
|
unkown
|
page read and write
|
||
6F9C7000
|
unkown image
|
page readonly
|
||
6F9C7000
|
unkown image
|
page readonly
|
||
19D6FB60000
|
unkown image
|
page readonly
|
||
1628000
|
unkown
|
page read and write
|
||
19D6F435000
|
unkown
|
page read and write
|
||
3160000
|
unkown
|
page execute and read and write
|
||
F38000
|
unkown
|
page read and write
|
||
3170000
|
unkown image
|
page readonly
|
||
2FC0000
|
unkown
|
page read and write
|
||
1432025D000
|
unkown
|
page read and write
|
||
F50000
|
unkown image
|
page read and write
|
||
6DBB0000
|
unkown image
|
page readonly
|
||
6E98E000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
BE0000
|
unkown image
|
page readonly
|
||
6DBBD000
|
unkown image
|
page execute read
|
||
19D6F320000
|
unkown image
|
page readonly
|
||
FF532000
|
unkown image
|
page readonly
|
||
88C000
|
unkown
|
page read and write
|
||
7DF54BE90000
|
unkown image
|
page readonly
|
||
20D17A71000
|
unkown
|
page read and write
|
||
2C4F000
|
unkown
|
page read and write
|
||
E6C000
|
unkown
|
page read and write
|
||
FFEF2000
|
unkown image
|
page readonly
|
||
7DF40ECE0000
|
unkown image
|
page readonly
|
||
7FF592843000
|
unkown image
|
page readonly
|
||
12D0000
|
unkown
|
page read and write
|
||
6DAF5000
|
unkown image
|
page readonly
|
||
83178F7000
|
stack
|
page read and write
|
||
7F780000
|
unkown image
|
page readonly
|
||
107B000
|
unkown
|
page read and write
|
||
BE0000
|
unkown image
|
page readonly
|
||
BF5000
|
unkown image
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
360C000
|
unkown
|
page read and write
|
||
7FF5030BD000
|
unkown image
|
page readonly
|
||
7FF50310E000
|
unkown image
|
page readonly
|
||
1628000
|
unkown
|
page read and write
|
||
6E970000
|
unkown image
|
page readonly
|
||
7FF5B02F9000
|
unkown image
|
page readonly
|
||
EE8000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
D02000
|
heap private
|
page read and write
|
||
2C20000
|
unkown
|
page read and write
|
||
7FF5927D1000
|
unkown image
|
page readonly
|
||
1086000
|
unkown
|
page read and write
|
||
EE1000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
EB1000
|
unkown
|
page read and write
|
||
1068000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
6DAEB000
|
unkown image
|
page readonly
|
||
6EB71000
|
unkown image
|
page execute read
|
||
7FF5B0175000
|
unkown image
|
page readonly
|
||
7FF5AC40D000
|
unkown image
|
page readonly
|
||
7FF50312A000
|
unkown image
|
page readonly
|
||
20D17ABE000
|
unkown
|
page read and write
|
||
6F9D0000
|
unkown image
|
page readonly
|
||
1076000
|
unkown
|
page read and write
|
||
FFF00000
|
unkown image
|
page readonly
|
||
7F890000
|
unkown image
|
page readonly
|
||
161B000
|
unkown
|
page read and write
|
||
6E966000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
323E000
|
stack
|
page read and write
|
||
3500000
|
unkown
|
page read and write
|
||
FF550000
|
unkown image
|
page readonly
|
||
EBD000
|
unkown
|
page read and write
|
||
7FF53E13E000
|
unkown image
|
page readonly
|
||
10B3000
|
unkown
|
page read and write
|
||
EC3000
|
unkown
|
page read and write
|
||
FF552000
|
unkown image
|
page readonly
|
||
6F2E1000
|
unkown image
|
page execute read
|
||
10F0000
|
unkown
|
page read and write
|
||
E96000
|
unkown
|
page read and write
|
||
BF7000
|
unkown image
|
page readonly
|
||
33C0000
|
heap default
|
page read and write
|
||
37A0000
|
unkown image
|
page readonly
|
||
2191FA20000
|
unkown image
|
page readonly
|
||
20D18381000
|
unkown
|
page read and write
|
||
1432023C000
|
unkown
|
page read and write
|
||
1F912502000
|
unkown
|
page read and write
|
||
84D000
|
unkown
|
page read and write
|
||
7F880000
|
unkown image
|
page readonly
|
||
1084000
|
unkown
|
page read and write
|
||
EBF000
|
unkown
|
page read and write
|
||
6E907000
|
unkown image
|
page read and write
|
||
14320308000
|
unkown
|
page read and write
|
||
FFBA0000
|
unkown image
|
page readonly
|
||
7FF55C9BC000
|
unkown image
|
page readonly
|
||
EE5000
|
unkown
|
page read and write
|
||
1310000
|
unkown image
|
page readonly
|
||
7DF5BA2A2000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
7DF5A05A0000
|
unkown image
|
page readonly
|
||
70281000
|
unkown image
|
page execute read
|
||
1F911D02000
|
unkown
|
page read and write
|
||
7FF5B027E000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
7FF5B00F0000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
7FF53DED7000
|
unkown image
|
page readonly
|
||
2A41000
|
unkown
|
page read and write
|
||
1F9172F8000
|
unkown
|
page read and write
|
||
2C38000
|
unkown
|
page read and write
|
||
108E000
|
unkown
|
page read and write
|
||
89A000
|
unkown
|
page read and write
|
||
1311000
|
unkown image
|
page execute read
|
||
2BD8000
|
unkown image
|
page readonly
|
||
E1B000
|
unkown
|
page read and write
|
||
7F920000
|
unkown image
|
page readonly
|
||
FC0000
|
unkown image
|
page readonly
|
||
6DA8B000
|
unkown image
|
page readonly
|
||
F0CEAFE000
|
stack
|
page read and write
|
||
1619000
|
unkown
|
page read and write
|
||
2870000
|
unkown
|
page read and write
|
||
6F330000
|
unkown image
|
page readonly
|
||
107B000
|
unkown
|
page read and write
|
||
20D18376000
|
unkown
|
page read and write
|
||
109F000
|
unkown
|
page read and write
|
||
E85000
|
unkown
|
page read and write
|
||
3070000
|
unkown
|
page read and write
|
||
7FF5AC5BA000
|
unkown image
|
page readonly
|
||
1432027C000
|
unkown
|
page read and write
|
||
BF7000
|
unkown image
|
page readonly
|
||
E82000
|
unkown
|
page read and write
|
||
EC7000
|
unkown
|
page read and write
|
||
D99000
|
unkown
|
page read and write
|
||
20D1886A000
|
unkown
|
page read and write
|
||
8B1000
|
unkown
|
page read and write
|
||
20D18202000
|
unkown
|
page read and write
|
||
3340000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
6F9A0000
|
unkown image
|
page readonly
|
||
7FF55C962000
|
unkown image
|
page readonly
|
||
1B0E000
|
stack
|
page read and write
|
||
3110000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
E28000
|
unkown
|
page read and write
|
||
2C45000
|
unkown
|
page read and write
|
||
3030000
|
unkown image
|
page readonly
|
||
7FF5AC553000
|
unkown image
|
page readonly
|
||
7FF5925F2000
|
unkown image
|
page readonly
|
||
2191FD02000
|
unkown
|
page read and write
|
||
72F20000
|
unkown image
|
page readonly
|
||
864000
|
unkown
|
page read and write
|
||
21456C5F000
|
unkown
|
page read and write
|
||
CB0000
|
unkown image
|
page readonly
|
||
6E400000
|
unkown image
|
page readonly
|
||
E10000
|
unkown
|
page read and write
|
||
3428000
|
unkown
|
page read and write
|
||
1F912390000
|
unkown image
|
page readonly
|
||
E71000
|
unkown
|
page read and write
|
||
1058000
|
unkown
|
page read and write
|
||
7FF53DF06000
|
unkown image
|
page readonly
|
||
FF552000
|
unkown image
|
page readonly
|
||
BF4000
|
unkown image
|
page read and write
|
||
20D18376000
|
unkown
|
page read and write
|
||
20D179E0000
|
unkown
|
page read and write
|
||
881000
|
unkown
|
page read and write
|
||
1101000
|
unkown
|
page read and write
|
||
6DBB0000
|
unkown image
|
page readonly
|
||
6DB12000
|
unkown image
|
page read and write
|
||
790000
|
unkown image
|
page readonly
|
||
C7DB47E000
|
stack
|
page read and write
|
||
854000
|
unkown
|
page read and write
|
||
88E000
|
unkown
|
page read and write
|
||
2C21000
|
unkown
|
page read and write
|
||
20D183A2000
|
unkown
|
page read and write
|
||
EFA000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
15564000000
|
unkown image
|
page readonly
|
||
88A000
|
unkown
|
page read and write
|
||
7FF5927CF000
|
unkown image
|
page readonly
|
||
1F9172F6000
|
unkown
|
page read and write
|
||
139E000
|
stack
|
page read and write
|
||
3041000
|
unkown
|
page read and write
|
||
2B36000
|
unkown image
|
page readonly
|
||
2C20000
|
unkown
|
page read and write
|
||
F0CF6FA000
|
stack
|
page read and write
|
||
780000
|
unkown image
|
page read and write
|
||
7FF592737000
|
unkown image
|
page readonly
|
||
6DB97000
|
unkown image
|
page write copy
|
||
1610000
|
unkown
|
page read and write
|
||
E28000
|
unkown
|
page read and write
|
||
7FF53DF6F000
|
unkown image
|
page readonly
|
||
36A6000
|
unkown
|
page read and write
|
||
1082000
|
unkown
|
page read and write
|
||
6DA90000
|
unkown image
|
page readonly
|
||
307D000
|
unkown
|
page read and write
|
||
9DB000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
7FF59228B000
|
unkown image
|
page readonly
|
||
7FF53E20E000
|
unkown image
|
page readonly
|
||
345F000
|
unkown
|
page read and write
|
||
6E951000
|
unkown image
|
page execute read
|
||
20D18060000
|
unkown image
|
page write copy
|
||
1360000
|
unkown image
|
page readonly
|
||
7FF592664000
|
unkown image
|
page readonly
|
||
EB1000
|
unkown
|
page read and write
|
||
7FF5AC4C5000
|
unkown image
|
page readonly
|
||
2B15000
|
unkown image
|
page readonly
|
||
15563C5F000
|
unkown
|
page read and write
|
||
E28000
|
unkown
|
page read and write
|
||
15563C58000
|
unkown
|
page read and write
|
||
1086000
|
unkown
|
page read and write
|
||
2BA0000
|
unkown
|
page read and write
|
||
19D6F300000
|
unkown image
|
page read and write
|
||
6EAD0000
|
unkown image
|
page readonly
|
||
6DB20000
|
unkown image
|
page readonly
|
||
7FA32000
|
unkown image
|
page readonly
|
||
2C52000
|
unkown
|
page read and write
|
||
E30000
|
unkown image
|
page readonly
|
||
6E7B9000
|
unkown image
|
page read and write
|
||
104F000
|
unkown
|
page read and write
|
||
13E9A77000
|
stack
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
7FF54D4D4000
|
unkown image
|
page readonly
|
||
1F911BA0000
|
unkown image
|
page read and write
|
||
6DA91000
|
unkown image
|
page execute read
|
||
1068000
|
unkown
|
page read and write
|
||
1347000
|
unkown image
|
page readonly
|
||
1068000
|
unkown
|
page read and write
|
||
70130000
|
unkown image
|
page readonly
|
||
15563D02000
|
unkown
|
page read and write
|
||
1F9172F4000
|
unkown
|
page read and write
|
||
2C00000
|
unkown
|
page read and write
|
||
15563A00000
|
unkown image
|
page readonly
|
||
7FF53E201000
|
unkown image
|
page readonly
|
||
3433000
|
unkown
|
page read and write
|
||
1010000
|
unkown
|
page read and write
|
||
5A0000
|
heap private
|
page read and write
|
||
1F9172E1000
|
unkown
|
page read and write
|
||
7DF56A7B0000
|
unkown image
|
page readonly
|
||
3012000
|
unkown
|
page read and write
|
||
FF540000
|
unkown image
|
page readonly
|
||
6EAEB000
|
unkown image
|
page readonly
|
||
8FF000
|
unkown
|
page read and write
|
||
6DBF2000
|
unkown image
|
page execute read
|
||
104B000
|
unkown
|
page read and write
|
||
F0CF17F000
|
stack
|
page read and write
|
||
7F8A0000
|
unkown image
|
page readonly
|
||
1091000
|
unkown
|
page read and write
|
||
20D183AD000
|
unkown
|
page read and write
|
||
6F2D4000
|
unkown image
|
page readonly
|
||
1F917320000
|
unkown
|
page read and write
|
||
7DF56A7C2000
|
unkown image
|
page readonly
|
||
2FD0000
|
unkown
|
page read and write
|
||
6F990000
|
unkown image
|
page readonly
|
||
901000
|
unkown
|
page read and write
|
||
7FF5AC549000
|
unkown image
|
page readonly
|
||
EE1000
|
unkown
|
page read and write
|
||
841000
|
unkown
|
page read and write
|
||
1628000
|
unkown
|
page read and write
|
||
6EC72000
|
unkown image
|
page execute read
|
||
7DF54BE70000
|
unkown image
|
page readonly
|
||
7DF56A7C0000
|
unkown image
|
page readonly
|
||
FF542000
|
unkown image
|
page readonly
|
||
6DA96000
|
unkown image
|
page read and write
|
||
1F917214000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
EC7000
|
unkown
|
page read and write
|
||
20D18394000
|
unkown
|
page read and write
|
||
33B0000
|
unkown
|
page read and write
|
||
30AF000
|
unkown
|
page read and write
|
||
FF8D2000
|
unkown image
|
page readonly
|
||
1F9123A0000
|
unkown image
|
page readonly
|
||
20D17B08000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
10A8000
|
unkown
|
page read and write
|
||
6F990000
|
unkown image
|
page readonly
|
||
133E000
|
unkown image
|
page read and write
|
||
10D1000
|
unkown
|
page read and write
|
||
15563C81000
|
unkown
|
page read and write
|
||
848000
|
unkown
|
page read and write
|
||
20D17B02000
|
unkown
|
page read and write
|
||
1A0000
|
unkown image
|
page readonly
|
||
269E000
|
stack
|
page read and write
|
||
1080000
|
unkown
|
page read and write
|
||
161B000
|
unkown
|
page read and write
|
||
6E92E000
|
unkown image
|
page readonly
|
||
EB0000
|
unkown
|
page read and write
|
||
FFF02000
|
unkown image
|
page readonly
|
||
6F2D8000
|
unkown image
|
page readonly
|
||
6DB20000
|
unkown image
|
page readonly
|
||
EC3000
|
unkown
|
page read and write
|
||
6E98B000
|
unkown image
|
page read and write
|
||
EFE000
|
unkown
|
page read and write
|
||
2D10000
|
unkown
|
page read and write
|
||
E12000
|
unkown
|
page read and write
|
||
E1B000
|
unkown
|
page read and write
|
||
6DA94000
|
unkown image
|
page readonly
|
||
3433000
|
unkown
|
page read and write
|
||
2C45000
|
unkown
|
page read and write
|
||
6F9C1000
|
unkown image
|
page execute read
|
||
FF8E2000
|
unkown image
|
page readonly
|
||
3444000
|
unkown
|
page read and write
|
||
2A059F7000
|
stack
|
page read and write
|
||
7FF54D2DB000
|
unkown image
|
page readonly
|
||
770000
|
unkown image
|
page readonly
|
||
FF542000
|
unkown image
|
page readonly
|
||
F0CF0FB000
|
stack
|
page read and write
|
||
EFA000
|
unkown
|
page read and write
|
||
28300FF000
|
stack
|
page read and write
|
||
165F000
|
stack
|
page read and write
|
||
1086000
|
unkown
|
page read and write
|
||
15563B10000
|
unkown image
|
page readonly
|
||
7FF592122000
|
unkown image
|
page readonly
|
||
EBA000
|
unkown
|
page read and write
|
||
1084000
|
unkown
|
page read and write
|
||
1F917490000
|
unkown
|
page read and write
|
||
BC0000
|
unkown image
|
page readonly
|
There are 2634 hidden memdumps, click here to show them.