Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
FileSetup-v17.04.41.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
|
UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6852B33702F6B3BD.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6852B33702F6B3BD.exe:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Cookies1611946677837
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Cookies1611946694149
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\canopdahbphflpoibdjjgahoedkbdncm\1.0.0.0_0\background.js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\canopdahbphflpoibdjjgahoedkbdncm\1.0.0.0_0\book.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\canopdahbphflpoibdjjgahoedkbdncm\1.0.0.0_0\icon.png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\canopdahbphflpoibdjjgahoedkbdncm\1.0.0.0_0\icon48.png
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\canopdahbphflpoibdjjgahoedkbdncm\1.0.0.0_0\jquery-1.8.3.min.js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\canopdahbphflpoibdjjgahoedkbdncm\1.0.0.0_0\manifest.json
|
ASCII text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\canopdahbphflpoibdjjgahoedkbdncm\1.0.0.0_0\popup.html
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\canopdahbphflpoibdjjgahoedkbdncm\1.0.0.0_0\popup.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611946677837
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611946694087
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611946680743
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611946681946
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\MSI61C2.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\MiniThunderPlatform.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\atl71.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\dl_peer_id.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\download_engine.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\msvcp71.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\msvcr71.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\zlib1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\ecvAA35.tmp
|
Extensible storage engine DataBase, version 0x620, checksum 0x30c654ce, page size 32768, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\gdiview.msi
|
;1033
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\xldl.dat
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\xldl.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Web Data1611946694399
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\crx.7z
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\crx.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Localwebdata1611946694399
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611946678493.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611946678493.txt
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Cookies1611913514530
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Cookies1611913558680
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcdpclapmggacanmpfjlemhjkoefcbh\1.0.0.0_0\background.js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcdpclapmggacanmpfjlemhjkoefcbh\1.0.0.0_0\book.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcdpclapmggacanmpfjlemhjkoefcbh\1.0.0.0_0\icon.png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcdpclapmggacanmpfjlemhjkoefcbh\1.0.0.0_0\icon48.png
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcdpclapmggacanmpfjlemhjkoefcbh\1.0.0.0_0\jquery-1.8.3.min.js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcdpclapmggacanmpfjlemhjkoefcbh\1.0.0.0_0\manifest.json
|
ASCII text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcdpclapmggacanmpfjlemhjkoefcbh\1.0.0.0_0\popup.html
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcdpclapmggacanmpfjlemhjkoefcbh\1.0.0.0_0\popup.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611913514483
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611913558680
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611913516483
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611913547477
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\MSI2C5D.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\ecv732A.tmp
|
Extensible storage engine DataBase, version 0x620, checksum 0x18bd5d35, page size 32768, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Web Data1611913558993
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Localwebdata1611913559039
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611913544586.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611913544586.txt
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
|
There are 48 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\FileSetup-v17.04.41.exe
|
'C:\Users\user\Desktop\FileSetup-v17.04.41.exe'
|
|
|
|
C:\Users\user\AppData\Local\Temp\6852B33702F6B3BD.exe
|
C:\Users\user\AppData\Local\Temp\6852B33702F6B3BD.exe 0011 installp3
|
|
|
|
C:\Users\user\AppData\Local\Temp\6852B33702F6B3BD.exe
|
C:\Users\user\AppData\Local\Temp\6852B33702F6B3BD.exe 200 installp3
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd /c ping 127.0.0.1 -n 3 & del 'C:\Users\user\Desktop\FileSetup-v17.04.41.exe'
|
|
|
|
C:\Windows\SysWOW64\PING.EXE
|
ping 127.0.0.1 -n 3
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /c taskkill /f /im chrome.exe
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd /c ping 127.0.0.1 -n 3 & del 'C:\Users\user\AppData\Local\Temp\6852B33702F6B3BD.exe'
|
|
|
|
C:\Windows\SysWOW64\PING.EXE
|
ping 127.0.0.1 -n 3
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd /c ping 127.0.0.1 -n 3 & del 'C:\Users\user\AppData\Local\Temp\6852B33702F6B3BD.exe'
|
|
|
|
C:\Windows\SysWOW64\PING.EXE
|
ping 127.0.0.1 -n 3
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
msiexec.exe /i 'C:\Users\user\AppData\Local\Temp\gdiview.msi'
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding E90BF9A81DF75408BCAEC738866B933F C
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Users\user\AppData\Roaming\1611946678493.exe
|
'C:\Users\user\AppData\Roaming\1611946678493.exe' /sjson 'C:\Users\user\AppData\Roaming\1611946678493.txt'
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\taskkill.exe
|
taskkill /f /im chrome.exe
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe ThunderFW 'C:\Users\user\AppData\Local\Temp\download\MiniThunderPlatform.exe'
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding 4B33F9BC0983FC9804745233301A967F C
|
|
|
|
C:\Users\user\AppData\Roaming\1611913544586.exe
|
'C:\Users\user\AppData\Roaming\1611913544586.exe' /sjson 'C:\Users\user\AppData\Roaming\1611913544586.txt'
|
|
There are 11 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/scripttemplate
|
unknown
|
|
|
|
https://duckduckgo.com/chrome_newtab
|
unknown
|
|
|
|
https://duckduckgo.com/ac/?q=
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/g
|
104.21.23.16
|
|
|
|
https://www.messenger.com/
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/e
|
104.21.23.16
|
|
|
|
http://www.msn.com
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/w
|
104.21.23.16
|
|
|
|
http://www.nirsoft.net
|
unknown
|
|
|
|
https://deff.nelreports.net/api/report?cat=msn
|
unknown
|
|
|
|
https://A5D4CE54CC78B3CA.xyz/
|
unknown
|
|
|
|
https://twitter.com/ookie:
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/r
|
104.21.23.16
|
|
|
|
https://twitter.comsec-fetch-dest:
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCc13122162a9a46c3b4cbf05ffccde0f
|
unknown
|
|
|
|
http://www.interoperabilitybridges.com/wmp-extension-for-chrome
|
unknown
|
|
|
|
http://ocsp.pki.goog/gts1o1core0
|
unknown
|
|
|
|
https://maps.windows.com/windows-app-web-link
|
unknown
|
|
|
|
http://www.msn.com/?ocid=iehp
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=chrom322;cat=chrom01g;ord=68568119166
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCee0d4d5fd4424c8390d703b105f82c3
|
unknown
|
|
|
|
https://srtb.msn.com/auction?a=de-ch&b=a8415ac9f9644a1396bc1648a4599445&c=MSN&d=http%3A%2F%2Fwww.msn
|
unknown
|
|
|
|
http://crl.pki.goog/GTS1O1core.crl0
|
unknown
|
|
|
|
https://www.messenger.com
|
unknown
|
|
|
|
http://www.nirsoft.net/
|
unknown
|
|
|
|
http://forms.real.com/real/realone/download.html?type=rpsp_us
|
unknown
|
|
|
|
http://config.i.duba.net/lminstall/%d.json?time=%d
|
unknown
|
|
|
|
http://ocsp.pki.goog/GTSGIAG30
|
unknown
|
|
|
|
https://www.instagram.com/graphql/query/?query_hash=149bef52a3b2af88c0fec37913fe1cbc&variables=%7B%2
|
unknown
|
|
|
|
https://logincdn.msauth.net/16.000/Converged_v21033_-0mnSwu67knBd7qR7YN9GQ2.css
|
unknown
|
|
|
|
http://download.divx.com/player/divxdotcom/DivXWebPlayerInstaller.exe
|
unknown
|
|
|
|
https://logincdn.msauth.net/16.000.28666.10/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc1937
|
unknown
|
|
|
|
https://logincdn.msauth.net/16.000.28666.10/content/images/ellipsis_white_5ac590ee72bfe06a7cecfd75b5
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.jsoncommand=FINALIZE&media_id=
|
unknown
|
|
|
|
https://www.instagram.com/
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/soap/encoding/
|
unknown
|
|
|
|
http://www.xunlei.com/GET
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/i
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC5bdddb231cf54f958a5b6e76e9d8eee
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json%dcommand=INIT&total_bytes=&media_type=image%2Fjpeg&me
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/xet(
|
unknown
|
|
|
|
https://www.messenger.com/origin:
|
unknown
|
|
|
|
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
|
unknown
|
|
|
|
http://pki.goog/gsr2/GTS1O1.crt0
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
|
|
|
https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml
|
unknown
|
|
|
|
https://contextual.media.net/
|
unknown
|
|
|
|
http://ocsp.pki.goog/gsr202
|
unknown
|
|
|
|
https://pki.goog/repository/0
|
unknown
|
|
|
|
https://api.twitter.com/1.1/statuses/update.json
|
unknown
|
|
|
|
https://cvision.media.net/new/300x300/3/167/174/27/39ab3103-8560-4a55-bfc4-401f897cf6f2.jpg?v=9
|
unknown
|
|
|
|
http://www.msn.com/
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC828bc1cde9f04b788c98b5423157734
|
unknown
|
|
|
|
https://twitter.com/compose/tweetsec-fetch-mode:
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/w
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=1;num=1463674
|
unknown
|
|
|
|
https://www.messenger.com/accept:
|
unknown
|
|
|
|
http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/consent/55a804
|
unknown
|
|
|
|
https://contextual.media.net/803288796/fcmain.js?&gdpr=0&cid=8CU157172&cpcd=pC3JHgSCqY8UHihgrvGr0A%3
|
unknown
|
|
|
|
https://contextual.media.net/48/nrrV18753.js
|
unknown
|
|
|
|
http://crl.pki.goog/gsr2/gsr2.crl0?
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/g
|
unknown
|
|
|
|
http://pki.goog/gsr2/GTSGIAG3.crt0)
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json?command=APPEND&media_id=%s&segment_index=0
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
|
|
https://www.messenger.comhttps://www.messenger.com/login/nonce/ookie:
|
unknown
|
|
|
|
https://fsfba021a5a6662.xyz/
|
unknown
|
|
|
|
http://www.xunlei.com/
|
unknown
|
|
|
|
http://pki.goog/gsr2/GTS1O1.crt0#
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/ddd
|
104.21.23.16
|
|
|
|
https://aefd.nelreports.net/api/report?cat=bingth
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/wN
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json?command=APPEND&media_id=%s&segment_index=0accept:
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/soap/envelope/
|
unknown
|
|
|
|
https://exchangework%04d%02d%02d.xyz/http://changenewsys%04d%02d%02d.xyz/post_info.
|
unknown
|
|
|
|
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/
|
unknown
|
|
|
|
https://assets.adobedtm.com/launch-EN7b3d710ac67a4a1195648458258f97dd.min.js
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCfd484f9188564713bbc5d13d862ebbf
|
unknown
|
|
|
|
https://curl.haxx.se/docs/http-cookies.html
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/g
|
unknown
|
|
|
|
http://www.openssl.org/support/faq.html
|
unknown
|
|
|
|
https://www.instagram.comsec-fetch-mode:
|
unknown
|
|
|
|
https://www.instagram.com/accounts/login/ajax/facebook/
|
unknown
|
|
|
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e
|
unknown
|
|
|
|
http://crl.thawte.com/ThawteTimestampingCA.crl0
|
unknown
|
|
|
|
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
|
|
|
https://www.instagram.com/sec-fetch-site:
|
unknown
|
|
|
|
https://twitter.comReferer:
|
unknown
|
|
|
|
http://www.interestvideo.com/video1.php
|
unknown
|
|
|
|
http://config.i.duba.net/lminstall/%d.json?time=%dcheckinstallSOFTWARE
|
unknown
|
|
|
|
https://www.instagram.com/accept:
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/w&
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/w%
|
unknown
|
|
|
|
https://www.messenger.com/login/nonce/
|
unknown
|
|
|
|
http://www.youtube.com
|
unknown
|
|
|
|
https://twitter.com/compose/tweetsec-fetch-dest:
|
unknown
|
|
|
|
http://crl.pki.goog/GTSGIAG3.crl0
|
unknown
|
|
|
|
https://adservice.google.co.uk/ddm/fls/i/src=2542116;type=chrom322;cat=chrom01g;ord=6856811916691;gt
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/gAn
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/wdl
|
unknown
|
|
|
|
https://contextual.media.net/__media__/js/util/nrrV9140.js
|
unknown
|
|
|
|
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meCore.min.js
|
unknown
|
|
|
|
http://images.outbrainimg.com/transform/v3/eyJpdSI6Ijk4OGQ1ZDgwMWE2ODQ2NDNkM2ZkMmYyMGEwOTgwMWQ3MDE2Z
|
unknown
|
|
|
|
https://logincdn.msauth.net/16.000.28230.00/ConvergedLoginPaginatedStrings.en.js
|
unknown
|
|
|
|
https://s.yimg.com/lo/api/res/1.2/BXjlWewXmZ47HeV5NPvUYA--~A/Zmk9ZmlsbDt3PTYyMjtoPTM2ODthcHBpZD1nZW1
|
unknown
|
|
|
|
http://charlesproxy.com/ssl
|
unknown
|
|
|
|
https://cvision.media.net/new/286x175/3/148/118/158/6d596081-b574-4a8a-9662-8f180c6f659f.jpg?v=9
|
unknown
|
|
|
|
https://logincdn.msauth.net/16.000.28230.00/images/ellipsis_white.svg?x=5ac590ee72bfe06a7cecfd75b588
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz//fine/sendh/
|
unknown
|
|
|
|
https://logincdn.msauth.net/16.000.28666.10/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e
|
unknown
|
|
|
|
https://optanon.blob.core.windows.net/skins/4.1.0/default_flat_top_two_button_black/v2/css/optanon.c
|
unknown
|
|
|
|
https://cvision.media.net/new/100x75/2/249/241/157/ab7b8862-dfb2-4e59-a214-ff623600dbf5.jpg?v=9
|
unknown
|
|
|
|
https://cvision.media.net/new/300x300/2/41/100/83/b5cbfa68-1c93-41c9-8797-4f9b532bc0b6.jpg?v=9
|
unknown
|
|
|
|
https://logincdn.msauth.net/16.000.28230.00/Converged_v21033.css
|
unknown
|
|
|
|
https://optanon.blob.core.windows.net/skins/4.1.0/default_flat_top_two_button_black/v2/images/cookie
|
unknown
|
|
|
|
https://www.msn.com/
|
unknown
|
|
|
|
https://mem.gfx.ms/meversion?partner=RetailStore2&market=en-us&uhf=1
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/~
|
unknown
|
|
|
|
http://www.youtube.com8
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/ll
|
unknown
|
|
|
|
https://172.217.23.78/
|
unknown
|
|
|
|
https://cvision.media.net/new/100x75/3/148/118/158/6d596081-b574-4a8a-9662-8f180c6f659f.jpg?v=9
|
unknown
|
|
|
|
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meBoot.min.js
|
unknown
|
|
|
|
http://images.outbrainimg.com/transform/v3/eyJpdSI6IjVhZWEwOTA0MmYxYzJjMDRlMmU1NDg1YzZmNjY2NTU5N2E5N
|
unknown
|
|
|
|
https://aefd.nelreports.net/api/report?cat=bingrms
|
unknown
|
|
|
|
http://service.real.com/realplayer/security/02062012_player/en/r
|
unknown
|
|
|
|
http://images.outbrainimg.com/transform/v3/eyJpdSI6ImYxODk5OTBhOWZjYjFmZjNjNmMxNDhmYjkzM2M3NzY1Mzk3Z
|
unknown
|
|
|
|
https://srtb.msn.com/auction?a=de-ch&b=28e3747a031f4b2a8498142b7c961529&c=MSN&d=http%3A%2F%2Fwww.msn
|
unknown
|
|
|
|
https://googleads.g.doubleclick.net/adsid/google/ui?gadsid=AORoGNQP1yCl9r5iywZTFTjpazv-DURVxDidzMfrF
|
unknown
|
|
|
|
https://googleads.g.doubleclick.net/adsid/google/ui?gadsid=AORoGNSrZsXAj6n_sYvivJecwrpYgMhb9ihVGAlz2
|
unknown
|
|
|
|
https://policies.yahoo.com/w3c/p3p.xml
|
unknown
|
|
|
|
https://www.googleapis.c
|
unknown
|
|
|
|
http://images.outbrainimg.com/transform/v3/eyJpdSI6IjAxYWZjY2Q0NWJhMmI1MGJkMWJjMzhmMGFlZWM2MDJmMjc2O
|
unknown
|
|
There are 126 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
84CFBA021A5A6662.xyz
|
104.21.23.16
|
|
|
|
84cfba021a5a6662.xyz
|
104.21.23.16
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
127.0.0.1
|
unknown
|
unknown
|
unknown
|
|
|
|
104.21.23.16
|
unknown
|
United States
|
unknown
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\FileSetup-v17.04.41.exe
|
Blob
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
GlobalAssocChangedCounter
|
|
|
|
C:\Users\user\AppData\Local\Temp\6852B33702F6B3BD.exe
|
1
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe
|
@C:\Windows\SysWOW64\FirewallControlPanel.dll,-12122
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe
|
@C:\Windows\SysWOW64\FirewallControlPanel.dll,-12122
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
222D8200000
|
unkown
|
page readonly
|
|
|
|
7FF583434000
|
unkown
|
page readonly
|
|
|
|
28B0000
|
unkown
|
page readonly
|
|
|
|
7FF5B735C000
|
unkown
|
page readonly
|
|
|
|
2E55000
|
unkown
|
page read and write
|
|
|
|
7FF5DA358000
|
unkown
|
page readonly
|
|
|
|
7FF51B326000
|
unkown
|
page readonly
|
|
|
|
15E63F43000
|
unkown
|
page read and write
|
|
|
|
237A000
|
heap private
|
page read and write
|
|
|
|
23A0000
|
unkown
|
page read and write
|
|
|
|
7FF5B735A000
|
unkown
|
page readonly
|
|
|
|
15E65200000
|
unkown
|
page readonly
|
|
|
|
2373000
|
unkown
|
page read and write
|
|
|
|
7FF524351000
|
unkown
|
page readonly
|
|
|
|
7FF54A5B7000
|
unkown
|
page readonly
|
|
|
|
7FF5563DC000
|
unkown
|
page readonly
|
|
|
|
21CEB002000
|
unkown
|
page read and write
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
220E000
|
unkown
|
page read and write
|
|
|
|
572C87E000
|
unkown
|
page read and write
|
|
|
|
7FF524865000
|
unkown
|
page readonly
|
|
|
|
7FF5E0FAC000
|
unkown
|
page readonly
|
|
|
|
15E63C51000
|
unkown
|
page read and write
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
21846EFF000
|
unkown
|
page read and write
|
|
|
|
A5437E000
|
unkown
|
page read and write
|
|
|
|
2750000
|
unkown
|
page read and write
|
|
|
|
17C000
|
stack
|
page read and write
|
|
|
|
7FF51B3B4000
|
unkown
|
page readonly
|
|
|
|
7FF539347000
|
unkown
|
page readonly
|
|
|
|
15E63CCE000
|
unkown
|
page read and write
|
|
|
|
143D6300000
|
unkown
|
page readonly
|
|
|
|
7FF524B47000
|
unkown
|
page readonly
|
|
|
|
3CB9000
|
unkown
|
page read and write
|
|
|
|
7FF539491000
|
unkown
|
page readonly
|
|
|
|
A546FD000
|
unkown
|
page read and write
|
|
|
|
127AC702000
|
unkown
|
page read and write
|
|
|
|
2395000
|
unkown
|
page readonly
|
|
|
|
2DFC3C51000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
unkown
|
page read and write
|
|
|
|
50A000
|
unkown image
|
page read and write
|
|
|
|
21CEB032000
|
unkown
|
page read and write
|
|
|
|
7FF54A93A000
|
unkown
|
page readonly
|
|
|
|
143D64C2000
|
unkown
|
page read and write
|
|
|
|
127ACE02000
|
unkown
|
page read and write
|
|
|
|
1D356FD0000
|
heap private
|
page read and write
|
|
|
|
21846E29000
|
unkown
|
page read and write
|
|
|
|
BFF000
|
unkown image
|
page read and write
|
|
|
|
10000000
|
unkown
|
page read and write
|
|
|
|
3A9000
|
unkown
|
page read and write
|
|
|
|
C01000
|
unkown image
|
page readonly
|
|
|
|
15E64210000
|
unkown
|
page read and write
|
|
|
|
7FF5DA49C000
|
unkown
|
page readonly
|
|
|
|
127AC602000
|
unkown
|
page read and write
|
|
|
|
2184C260000
|
unkown
|
page read and write
|
|
|
|
7FF52D327000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE66000
|
unkown
|
page readonly
|
|
|
|
21CEB057000
|
unkown
|
page read and write
|
|
|
|
3CE5000
|
unkown
|
page read and write
|
|
|
|
338167C000
|
unkown
|
page read and write
|
|
|
|
7FF4EF1D5000
|
unkown
|
page readonly
|
|
|
|
21846E5A000
|
unkown
|
page read and write
|
|
|
|
775000
|
unkown
|
page read and write
|
|
|
|
2184C6A0000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C01000
|
unkown
|
page readonly
|
|
|
|
21CEB05A000
|
unkown
|
page read and write
|
|
|
|
222D8013000
|
unkown
|
page read and write
|
|
|
|
2DFC3D08000
|
unkown
|
page read and write
|
|
|
|
4C6000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1036000
|
unkown
|
page readonly
|
|
|
|
7FF52D2ED000
|
unkown
|
page readonly
|
|
|
|
2E28000
|
heap default
|
page read and write
|
|
|
|
21CEB069000
|
unkown
|
page read and write
|
|
|
|
7FF58341C000
|
unkown
|
page readonly
|
|
|
|
3DDE000
|
unkown
|
page read and write
|
|
|
|
BF1000
|
unkown image
|
page execute read
|
|
|
|
21CEB06A000
|
unkown
|
page read and write
|
|
|
|
27C1000
|
unkown
|
page read and write
|
|
|
|
7FF54ADC6000
|
unkown
|
page readonly
|
|
|
|
830000
|
unkown
|
page read and write
|
|
|
|
1DF6B1D0000
|
heap default
|
page read and write
|
|
|
|
7FF4EEDA8000
|
unkown
|
page readonly
|
|
|
|
2EA8000
|
unkown
|
page read and write
|
|
|
|
2184C232000
|
unkown
|
page read and write
|
|
|
|
FDC467F000
|
unkown
|
page read and write
|
|
|
|
2ED0000
|
unkown
|
page read and write
|
|
|
|
7FF54ACBC000
|
unkown
|
page readonly
|
|
|
|
21846F02000
|
unkown
|
page read and write
|
|
|
|
246E000
|
stack
|
page read and write
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
2CD5000
|
heap default
|
page read and write
|
|
|
|
2EE9000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD03000
|
unkown
|
page readonly
|
|
|
|
15E61C9F000
|
unkown
|
page read and write
|
|
|
|
2F06000
|
unkown
|
page read and write
|
|
|
|
2EBA000
|
unkown
|
page read and write
|
|
|
|
2DF0000
|
heap private
|
page read and write
|
|
|
|
3E00000
|
unkown
|
page read and write
|
|
|
|
1D357253000
|
unkown
|
page read and write
|
|
|
|
7FF524B2C000
|
unkown
|
page readonly
|
|
|
|
2184C580000
|
unkown
|
page read and write
|
|
|
|
293B000
|
unkown
|
page read and write
|
|
|
|
F18559E000
|
unkown
|
page read and write
|
|
|
|
CD8C2FE000
|
unkown
|
page read and write
|
|
|
|
2CC3000
|
heap default
|
page read and write
|
|
|
|
2DFC3C90000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
unkown
|
page readonly
|
|
|
|
15E61CA8000
|
unkown
|
page read and write
|
|
|
|
81E000
|
unkown
|
page read and write
|
|
|
|
2816000
|
unkown
|
page readonly
|
|
|
|
2180000
|
unkown
|
page readonly
|
|
|
|
7FF5393A6000
|
unkown
|
page readonly
|
|
|
|
E632DEB000
|
unkown
|
page read and write
|
|
|
|
2220000
|
heap private
|
page read and write
|
|
|
|
2233000
|
heap private
|
page read and write
|
|
|
|
7FF539344000
|
unkown
|
page readonly
|
|
|
|
15E63CC9000
|
unkown
|
page read and write
|
|
|
|
2D12B700000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE3F000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C98000
|
unkown
|
page readonly
|
|
|
|
2DFC3AE0000
|
unkown
|
page readonly
|
|
|
|
7FF556402000
|
unkown
|
page readonly
|
|
|
|
7FF53934A000
|
unkown
|
page readonly
|
|
|
|
30BF5FA000
|
unkown
|
page read and write
|
|
|
|
3DED000
|
unkown
|
page read and write
|
|
|
|
C643CFA000
|
unkown
|
page read and write
|
|
|
|
3DD7000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
2E97000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4C8000
|
unkown
|
page readonly
|
|
|
|
21846CF0000
|
unkown
|
page readonly
|
|
|
|
33810FC000
|
unkown
|
page read and write
|
|
|
|
2D129730000
|
unkown
|
page write copy
|
|
|
|
A3E000
|
unkown
|
page read and write
|
|
|
|
15E63D02000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D77000
|
unkown
|
page readonly
|
|
|
|
A6B000
|
unkown
|
page read and write
|
|
|
|
7FF5561A7000
|
unkown
|
page readonly
|
|
|
|
7FF4EF5AE000
|
unkown
|
page readonly
|
|
|
|
15E61C9E000
|
unkown
|
page read and write
|
|
|
|
335000
|
unkown
|
page read and write
|
|
|
|
222D7ED0000
|
heap private
|
page read and write
|
|
|
|
21846F16000
|
unkown
|
page read and write
|
|
|
|
B1B000
|
heap private
|
page read and write
|
|
|
|
2865000
|
unkown
|
page readonly
|
|
|
|
7FF54AD52000
|
unkown
|
page readonly
|
|
|
|
21847718000
|
unkown
|
page read and write
|
|
|
|
7FF524AA0000
|
unkown
|
page readonly
|
|
|
|
31F0000
|
heap private
|
page read and write
|
|
|
|
504000
|
unkown
|
page read and write
|
|
|
|
497000
|
unkown image
|
page execute and write copy
|
|
|
|
2340000
|
unkown
|
page read and write
|
|
|
|
1F05FAD0000
|
heap private
|
page read and write
|
|
|
|
2227000
|
unkown
|
page read and write
|
|
|
|
2184C6E0000
|
unkown
|
page readonly
|
|
|
|
21E1000
|
unkown
|
page read and write
|
|
|
|
2340000
|
unkown
|
page readonly
|
|
|
|
7FF4EEFB9000
|
unkown
|
page readonly
|
|
|
|
2F06000
|
unkown
|
page read and write
|
|
|
|
2EDA000
|
unkown
|
page read and write
|
|
|
|
222D8002000
|
unkown
|
page read and write
|
|
|
|
3E46000
|
unkown
|
page read and write
|
|
|
|
7FF54AD58000
|
unkown
|
page readonly
|
|
|
|
2D12B850000
|
unkown
|
page readonly
|
|
|
|
7FF5E0CDF000
|
unkown
|
page readonly
|
|
|
|
7FF5562C9000
|
unkown
|
page readonly
|
|
|
|
7FF5833FD000
|
unkown
|
page readonly
|
|
|
|
1DF6B520000
|
unkown
|
page readonly
|
|
|
|
8B1000
|
heap default
|
page read and write
|
|
|
|
7FF5DA206000
|
unkown
|
page readonly
|
|
|
|
2230000
|
heap private
|
page read and write
|
|
|
|
50B000
|
unkown image
|
page write copy
|
|
|
|
232D000
|
unkown
|
page readonly
|
|
|
|
3E04000
|
unkown
|
page read and write
|
|
|
|
7FF52D306000
|
unkown
|
page readonly
|
|
|
|
21847700000
|
unkown
|
page read and write
|
|
|
|
CD8C27E000
|
unkown
|
page read and write
|
|
|
|
2E65000
|
unkown
|
page read and write
|
|
|
|
2E55000
|
unkown
|
page read and write
|
|
|
|
30BF9F9000
|
unkown
|
page read and write
|
|
|
|
2C8A000
|
heap default
|
page read and write
|
|
|
|
288000
|
unkown
|
page read and write
|
|
|
|
2930000
|
heap private
|
page read and write
|
|
|
|
1F05FB50000
|
unkown
|
page readonly
|
|
|
|
7FF5DA52C000
|
unkown
|
page readonly
|
|
|
|
7FF53948E000
|
unkown
|
page readonly
|
|
|
|
2D12B718000
|
unkown
|
page read and write
|
|
|
|
2E7C000
|
unkown
|
page read and write
|
|
|
|
15E63C53000
|
unkown
|
page read and write
|
|
|
|
7FF539351000
|
unkown
|
page readonly
|
|
|
|
7FF52D280000
|
unkown
|
page readonly
|
|
|
|
7FF53914E000
|
unkown
|
page readonly
|
|
|
|
2F06000
|
unkown
|
page read and write
|
|
|
|
3D65000
|
unkown
|
page read and write
|
|
|
|
1F05FC00000
|
unkown
|
page read and write
|
|
|
|
27D4000
|
unkown
|
page read and write
|
|
|
|
3D8E000
|
unkown
|
page read and write
|
|
|
|
7FF5246DD000
|
unkown
|
page readonly
|
|
|
|
222D000
|
unkown
|
page read and write
|
|
|
|
7FF5B70E4000
|
unkown
|
page readonly
|
|
|
|
2D12B820000
|
unkown
|
page read and write
|
|
|
|
7FF539388000
|
unkown
|
page readonly
|
|
|
|
2184C20D000
|
unkown
|
page read and write
|
|
|
|
7FF4EEDF9000
|
unkown
|
page readonly
|
|
|
|
7FF524A15000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown
|
page read and write
|
|
|
|
7FF54ADE7000
|
unkown
|
page readonly
|
|
|
|
23EB000
|
unkown
|
page readonly
|
|
|
|
2DFC3E00000
|
unkown
|
page readonly
|
|
|
|
7FF52D324000
|
unkown
|
page readonly
|
|
|
|
3D14000
|
unkown
|
page read and write
|
|
|
|
2650000
|
unkown
|
page readonly
|
|
|
|
21848193000
|
unkown
|
page read and write
|
|
|
|
7FF51B396000
|
unkown
|
page readonly
|
|
|
|
50B000
|
unkown image
|
page write copy
|
|
|
|
2344000
|
unkown
|
page readonly
|
|
|
|
7FF5B7427000
|
unkown
|
page readonly
|
|
|
|
2184C224000
|
unkown
|
page read and write
|
|
|
|
7FF5833E9000
|
unkown
|
page readonly
|
|
|
|
7FF4EEFAE000
|
unkown
|
page readonly
|
|
|
|
7FF54AE41000
|
unkown
|
page readonly
|
|
|
|
3DEC000
|
unkown
|
page read and write
|
|
|
|
7FF5E1046000
|
unkown
|
page readonly
|
|
|
|
2D12B810000
|
unkown
|
page readonly
|
|
|
|
2DFC3C13000
|
unkown
|
page read and write
|
|
|
|
9F0000
|
unkown
|
page readonly
|
|
|
|
7FF5393E9000
|
unkown
|
page readonly
|
|
|
|
15E63CDA000
|
unkown
|
page read and write
|
|
|
|
3B2000
|
unkown
|
page read and write
|
|
|
|
7FF5E102D000
|
unkown
|
page readonly
|
|
|
|
781000
|
unkown
|
page read and write
|
|
|
|
2DFC3C3C000
|
unkown
|
page read and write
|
|
|
|
127AC629000
|
unkown
|
page read and write
|
|
|
|
15E63F43000
|
unkown
|
page read and write
|
|
|
|
3E07000
|
unkown
|
page read and write
|
|
|
|
2DFC3A10000
|
unkown
|
page readonly
|
|
|
|
505000
|
unkown image
|
page write copy
|
|
|
|
30BF97D000
|
unkown
|
page read and write
|
|
|
|
7FF524910000
|
unkown
|
page readonly
|
|
|
|
7FF539107000
|
unkown
|
page readonly
|
|
|
|
2D9E000
|
unkown
|
page read and write
|
|
|
|
15E63AA0000
|
unkown
|
page readonly
|
|
|
|
3E1A000
|
unkown
|
page read and write
|
|
|
|
7FF4FFC1A000
|
unkown
|
page readonly
|
|
|
|
7FF539392000
|
unkown
|
page readonly
|
|
|
|
30BF0FB000
|
unkown
|
page read and write
|
|
|
|
15E61CFD000
|
unkown
|
page read and write
|
|
|
|
15E61D1C000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown
|
page read and write
|
|
|
|
7FF51B328000
|
unkown
|
page readonly
|
|
|
|
A6B000
|
unkown
|
page read and write
|
|
|
|
15E61C00000
|
unkown
|
page read and write
|
|
|
|
293E000
|
unkown
|
page read and write
|
|
|
|
2352000
|
unkown
|
page readonly
|
|
|
|
3A8D000
|
stack
|
page read and write
|
|
|
|
7FF5391EA000
|
unkown
|
page readonly
|
|
|
|
21847704000
|
unkown
|
page read and write
|
|
|
|
7FF52D2AA000
|
unkown
|
page readonly
|
|
|
|
E4C2B7A000
|
unkown
|
page read and write
|
|
|
|
2B80000
|
heap default
|
page read and write
|
|
|
|
2648000
|
unkown
|
page readonly
|
|
|
|
27DB000
|
unkown
|
page read and write
|
|
|
|
7FF524A98000
|
unkown
|
page readonly
|
|
|
|
7FF4EF4EE000
|
unkown
|
page readonly
|
|
|
|
21846E93000
|
unkown
|
page read and write
|
|
|
|
264E000
|
unkown
|
page readonly
|
|
|
|
7FF524870000
|
unkown
|
page readonly
|
|
|
|
F185A7F000
|
unkown
|
page read and write
|
|
|
|
7FF4EF170000
|
unkown
|
page readonly
|
|
|
|
2657000
|
unkown
|
page readonly
|
|
|
|
7FF55647C000
|
unkown
|
page readonly
|
|
|
|
7FF5E0E2E000
|
unkown
|
page readonly
|
|
|
|
7FF583155000
|
unkown
|
page readonly
|
|
|
|
7FF5831EA000
|
unkown
|
page readonly
|
|
|
|
2B14000
|
unkown
|
page read and write
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
1D357802000
|
unkown
|
page read and write
|
|
|
|
572CBFE000
|
unkown
|
page read and write
|
|
|
|
2E52000
|
heap default
|
page read and write
|
|
|
|
2336000
|
unkown
|
page readonly
|
|
|
|
DCA000
|
heap default
|
page read and write
|
|
|
|
7FF4FFE97000
|
unkown
|
page readonly
|
|
|
|
82B000
|
heap default
|
page read and write
|
|
|
|
10337000
|
unkown
|
page readonly
|
|
|
|
21847000000
|
unkown
|
page readonly
|
|
|
|
2660000
|
unkown
|
page readonly
|
|
|
|
21CEB200000
|
unkown
|
page readonly
|
|
|
|
26C3000
|
unkown
|
page readonly
|
|
|
|
7FF524A5A000
|
unkown
|
page readonly
|
|
|
|
2D1297D0000
|
unkown
|
page readonly
|
|
|
|
63E000
|
unkown
|
page read and write
|
|
|
|
7FF55642E000
|
unkown
|
page readonly
|
|
|
|
3E1B000
|
unkown
|
page read and write
|
|
|
|
2E3D000
|
unkown
|
page read and write
|
|
|
|
26C0000
|
unkown
|
page read and write
|
|
|
|
2E54000
|
unkown
|
page read and write
|
|
|
|
15E63C45000
|
unkown
|
page read and write
|
|
|
|
3E5A000
|
unkown
|
page read and write
|
|
|
|
7FF555D3E000
|
unkown
|
page readonly
|
|
|
|
1DF6B302000
|
unkown
|
page read and write
|
|
|
|
2EC9000
|
unkown
|
page read and write
|
|
|
|
A542FC000
|
unkown
|
page read and write
|
|
|
|
7FF524ACA000
|
unkown
|
page readonly
|
|
|
|
2298F25E000
|
heap default
|
page read and write
|
|
|
|
7FF52D37E000
|
unkown
|
page readonly
|
|
|
|
7FF52CAF7000
|
unkown
|
page readonly
|
|
|
|
10338000
|
unkown
|
page read and write
|
|
|
|
30BF579000
|
unkown
|
page read and write
|
|
|
|
7FF5DA536000
|
unkown
|
page readonly
|
|
|
|
7FF51B419000
|
unkown
|
page readonly
|
|
|
|
2E5C000
|
unkown
|
page read and write
|
|
|
|
2D1298D3000
|
unkown
|
page read and write
|
|
|
|
7FF539416000
|
unkown
|
page readonly
|
|
|
|
15E61C40000
|
unkown
|
page read and write
|
|
|
|
2822000
|
unkown
|
page readonly
|
|
|
|
7FF51B38C000
|
unkown
|
page readonly
|
|
|
|
283B000
|
unkown
|
page read and write
|
|
|
|
21848171000
|
unkown
|
page read and write
|
|
|
|
21CEB046000
|
unkown
|
page read and write
|
|
|
|
1AC83013000
|
unkown
|
page read and write
|
|
|
|
1AC832D0000
|
unkown
|
page readonly
|
|
|
|
7FF51B37D000
|
unkown
|
page readonly
|
|
|
|
2D1298F4000
|
unkown
|
page read and write
|
|
|
|
2184C200000
|
unkown
|
page read and write
|
|
|
|
338157B000
|
unkown
|
page read and write
|
|
|
|
8DE000
|
unkown
|
page read and write
|
|
|
|
3DD0000
|
unkown
|
page read and write
|
|
|
|
7FF5E0FFE000
|
unkown
|
page readonly
|
|
|
|
3380C9B000
|
unkown
|
page read and write
|
|
|
|
BFF000
|
unkown image
|
page write copy
|
|
|
|
4CB0000
|
heap private
|
page read and write
|
|
|
|
222D9B70000
|
unkown
|
page readonly
|
|
|
|
127ACB90000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE6C000
|
unkown
|
page readonly
|
|
|
|
7FF4EF509000
|
unkown
|
page readonly
|
|
|
|
7FF5DA509000
|
unkown
|
page readonly
|
|
|
|
2D58000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page readonly
|
|
|
|
21CEB03B000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5E10C9000
|
unkown
|
page readonly
|
|
|
|
3A5000
|
unkown
|
page read and write
|
|
|
|
7FF5E0944000
|
unkown
|
page readonly
|
|
|
|
7FF4EF5B1000
|
unkown
|
page readonly
|
|
|
|
21CEAED0000
|
heap private
|
page read and write
|
|
|
|
7FF5563CA000
|
unkown
|
page readonly
|
|
|
|
2DFC3C8C000
|
unkown
|
page read and write
|
|
|
|
7FF5561AE000
|
unkown
|
page readonly
|
|
|
|
222D8029000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown
|
page readonly
|
|
|
|
127AC800000
|
unkown
|
page readonly
|
|
|
|
7FF5E0D7E000
|
unkown
|
page readonly
|
|
|
|
7FF5DA4B2000
|
unkown
|
page readonly
|
|
|
|
2E9D000
|
unkown
|
page read and write
|
|
|
|
2C0D000
|
unkown
|
page read and write
|
|
|
|
50B000
|
unkown image
|
page write copy
|
|
|
|
21CEB000000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
7FF4EEF2C000
|
unkown
|
page readonly
|
|
|
|
7FF4FFCCA000
|
unkown
|
page readonly
|
|
|
|
1DF6B202000
|
unkown
|
page read and write
|
|
|
|
21E0000
|
unkown
|
page read and write
|
|
|
|
7FF52D0AA000
|
unkown
|
page readonly
|
|
|
|
2360000
|
unkown
|
page readonly
|
|
|
|
7FF4EE77D000
|
unkown
|
page readonly
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDF2000
|
unkown
|
page readonly
|
|
|
|
2F02000
|
unkown
|
page read and write
|
|
|
|
4C80000
|
unkown
|
page read and write
|
|
|
|
7FF5390F4000
|
unkown
|
page readonly
|
|
|
|
572CCFF000
|
unkown
|
page read and write
|
|
|
|
3D4F000
|
unkown
|
page read and write
|
|
|
|
7FF54ADE0000
|
unkown
|
page readonly
|
|
|
|
30BF67B000
|
unkown
|
page read and write
|
|
|
|
127ACCA0000
|
unkown
|
page read and write
|
|
|
|
21846F02000
|
unkown
|
page read and write
|
|
|
|
15E61C13000
|
unkown
|
page read and write
|
|
|
|
15E63CC7000
|
unkown
|
page read and write
|
|
|
|
3DFE000
|
unkown
|
page read and write
|
|
|
|
15E61CEE000
|
unkown
|
page read and write
|
|
|
|
2184C560000
|
unkown
|
page read and write
|
|
|
|
7FF5E103C000
|
unkown
|
page readonly
|
|
|
|
4C6000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA4A8000
|
unkown
|
page readonly
|
|
|
|
15E61D1D000
|
unkown
|
page read and write
|
|
|
|
7FF52D2C5000
|
unkown
|
page readonly
|
|
|
|
15E64110000
|
unkown
|
page read and write
|
|
|
|
7FF4FFC7F000
|
unkown
|
page readonly
|
|
|
|
7FF4FFEEE000
|
unkown
|
page readonly
|
|
|
|
7FF54AD99000
|
unkown
|
page readonly
|
|
|
|
283B000
|
unkown
|
page read and write
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
127ACCA0000
|
unkown
|
page read and write
|
|
|
|
3CBA000
|
unkown
|
page read and write
|
|
|
|
7FF5DA11E000
|
unkown
|
page readonly
|
|
|
|
A56000
|
unkown
|
page read and write
|
|
|
|
B16000
|
heap private
|
page read and write
|
|
|
|
3E1A000
|
unkown
|
page read and write
|
|
|
|
1AC83113000
|
unkown
|
page read and write
|
|
|
|
27FB000
|
unkown
|
page read and write
|
|
|
|
3CC1000
|
unkown
|
page read and write
|
|
|
|
7FF5E0F81000
|
unkown
|
page readonly
|
|
|
|
222D8102000
|
unkown
|
page read and write
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
7FF51B35F000
|
unkown
|
page readonly
|
|
|
|
7FF5564F9000
|
unkown
|
page readonly
|
|
|
|
28D0000
|
unkown
|
page readonly
|
|
|
|
15E63AB0000
|
unkown
|
page read and write
|
|
|
|
7FF5E0FB8000
|
unkown
|
page readonly
|
|
|
|
331000
|
unkown
|
page read and write
|
|
|
|
22F1000
|
unkown
|
page readonly
|
|
|
|
1D35723C000
|
unkown
|
page read and write
|
|
|
|
495000
|
unkown image
|
page execute and read and write
|
|
|
|
2D1298EF000
|
unkown
|
page read and write
|
|
|
|
143D63E0000
|
unkown
|
page read and write
|
|
|
|
1D357040000
|
unkown
|
page readonly
|
|
|
|
2298F250000
|
heap default
|
page read and write
|
|
|
|
2184C584000
|
unkown
|
page read and write
|
|
|
|
1AC8303D000
|
unkown
|
page read and write
|
|
|
|
15E61D6E000
|
unkown
|
page read and write
|
|
|
|
7FF539377000
|
unkown
|
page readonly
|
|
|
|
7FF524A87000
|
unkown
|
page readonly
|
|
|
|
530000
|
unkown
|
page readonly
|
|
|
|
15E64010000
|
unkown
|
page read and write
|
|
|
|
7FF5B7424000
|
unkown
|
page readonly
|
|
|
|
7FF4EF33F000
|
unkown
|
page readonly
|
|
|
|
7FF4FFEF9000
|
unkown
|
page readonly
|
|
|
|
2301000
|
unkown
|
page readonly
|
|
|
|
7FF5B739A000
|
unkown
|
page readonly
|
|
|
|
3CC5000
|
unkown
|
page read and write
|
|
|
|
3290000
|
unkown
|
page read and write
|
|
|
|
7FF556466000
|
unkown
|
page readonly
|
|
|
|
E63347A000
|
unkown
|
page read and write
|
|
|
|
B1B000
|
heap private
|
page read and write
|
|
|
|
7FF5E0FA3000
|
unkown
|
page readonly
|
|
|
|
27DB000
|
unkown
|
page read and write
|
|
|
|
7FF524817000
|
unkown
|
page readonly
|
|
|
|
A52000
|
unkown
|
page read and write
|
|
|
|
2184C7C0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF52C000
|
unkown
|
page readonly
|
|
|
|
7FF5DA31E000
|
unkown
|
page readonly
|
|
|
|
2185000
|
unkown
|
page readonly
|
|
|
|
7FF5B7420000
|
unkown
|
page readonly
|
|
|
|
1AC82F50000
|
unkown
|
page readonly
|
|
|
|
2253000
|
unkown
|
page read and write
|
|
|
|
21846EAA000
|
unkown
|
page read and write
|
|
|
|
6FA000
|
heap default
|
page read and write
|
|
|
|
7FF5B7489000
|
unkown
|
page readonly
|
|
|
|
1F05FC02000
|
unkown
|
page read and write
|
|
|
|
A3E000
|
unkown
|
page read and write
|
|
|
|
1D357288000
|
unkown
|
page read and write
|
|
|
|
7FF4EF47B000
|
unkown
|
page readonly
|
|
|
|
323F000
|
stack
|
page read and write
|
|
|
|
2184C610000
|
unkown
|
page read and write
|
|
|
|
FDC46FE000
|
unkown
|
page read and write
|
|
|
|
7FF5DA33F000
|
unkown
|
page readonly
|
|
|
|
7FF55643F000
|
unkown
|
page readonly
|
|
|
|
1D357030000
|
heap default
|
page read and write
|
|
|
|
7FF5392A3000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C57000
|
unkown
|
page readonly
|
|
|
|
CD8C4FC000
|
unkown
|
page read and write
|
|
|
|
2705000
|
unkown
|
page readonly
|
|
|
|
7FF52D1C7000
|
unkown
|
page readonly
|
|
|
|
2D129913000
|
unkown
|
page read and write
|
|
|
|
7FF524B26000
|
unkown
|
page readonly
|
|
|
|
A39000
|
unkown
|
page read and write
|
|
|
|
2DFC3C49000
|
unkown
|
page read and write
|
|
|
|
7FF5B7481000
|
unkown
|
page readonly
|
|
|
|
7FF51B3B7000
|
unkown
|
page readonly
|
|
|
|
7FF55625E000
|
unkown
|
page readonly
|
|
|
|
73C000
|
heap default
|
page read and write
|
|
|
|
10001000
|
unkown
|
page execute read
|
|
|
|
7FF5DA4C8000
|
unkown
|
page readonly
|
|
|
|
2184C660000
|
unkown
|
page read and write
|
|
|
|
7FF539499000
|
unkown
|
page readonly
|
|
|
|
2E66000
|
unkown
|
page read and write
|
|
|
|
2D129882000
|
unkown
|
page read and write
|
|
|
|
3D14000
|
unkown
|
page read and write
|
|
|
|
7FF5393BA000
|
unkown
|
page readonly
|
|
|
|
2ECB000
|
unkown
|
page read and write
|
|
|
|
7FF51B3A5000
|
unkown
|
page readonly
|
|
|
|
15E65102000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C40000
|
unkown
|
page readonly
|
|
|
|
7FF52D30C000
|
unkown
|
page readonly
|
|
|
|
2D129A00000
|
unkown
|
page readonly
|
|
|
|
3D4D000
|
unkown
|
page read and write
|
|
|
|
7460000
|
unkown
|
page read and write
|
|
|
|
222D000
|
unkown
|
page readonly
|
|
|
|
2470000
|
unkown
|
page read and write
|
|
|
|
A30000
|
unkown
|
page read and write
|
|
|
|
143D61B0000
|
heap private
|
page read and write
|
|
|
|
2E6A000
|
unkown
|
page read and write
|
|
|
|
61FB57A000
|
unkown
|
page read and write
|
|
|
|
3D4D000
|
unkown
|
page read and write
|
|
|
|
7FF52D14E000
|
unkown
|
page readonly
|
|
|
|
30BFA7F000
|
unkown
|
page read and write
|
|
|
|
7FF4EF53C000
|
unkown
|
page readonly
|
|
|
|
232A000
|
unkown
|
page readonly
|
|
|
|
7FF5E0FA7000
|
unkown
|
page readonly
|
|
|
|
15E63A30000
|
unkown
|
page readonly
|
|
|
|
3DFD000
|
unkown
|
page read and write
|
|
|
|
1DF6CCC0000
|
unkown
|
page read and write
|
|
|
|
7FF5E0FD8000
|
unkown
|
page readonly
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
7FF54ADCC000
|
unkown
|
page readonly
|
|
|
|
764000
|
unkown
|
page read and write
|
|
|
|
1D357400000
|
unkown
|
page readonly
|
|
|
|
21CEB02F000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
A5457D000
|
unkown
|
page read and write
|
|
|
|
61FB11C000
|
unkown
|
page read and write
|
|
|
|
2E53000
|
unkown
|
page read and write
|
|
|
|
2E72000
|
unkown
|
page read and write
|
|
|
|
A5407B000
|
unkown
|
page read and write
|
|
|
|
7FF52D296000
|
unkown
|
page readonly
|
|
|
|
27D4000
|
unkown
|
page read and write
|
|
|
|
15E64410000
|
unkown
|
page read and write
|
|
|
|
3CAD000
|
unkown
|
page read and write
|
|
|
|
21CEB049000
|
unkown
|
page read and write
|
|
|
|
21848190000
|
unkown
|
page read and write
|
|
|
|
7FF5B73CF000
|
unkown
|
page readonly
|
|
|
|
7FF54A940000
|
unkown
|
page readonly
|
|
|
|
AA7000
|
unkown
|
page read and write
|
|
|
|
7FF5561C0000
|
unkown
|
page readonly
|
|
|
|
A3E000
|
unkown
|
page read and write
|
|
|
|
7FF524A1C000
|
unkown
|
page readonly
|
|
|
|
3200000
|
unkown
|
page readonly
|
|
|
|
28BB000
|
unkown
|
page readonly
|
|
|
|
3E07000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page readonly
|
|
|
|
E4C2C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5B73C5000
|
unkown
|
page readonly
|
|
|
|
2E7B000
|
unkown
|
page read and write
|
|
|
|
2D5E000
|
unkown
|
page read and write
|
|
|
|
E4C28FF000
|
unkown
|
page read and write
|
|
|
|
34D0000
|
unkown
|
page read and write
|
|
|
|
3DE8000
|
unkown
|
page read and write
|
|
|
|
2184C650000
|
unkown
|
page read and write
|
|
|
|
143D6513000
|
unkown
|
page read and write
|
|
|
|
2931000
|
unkown
|
page read and write
|
|
|
|
A3F000
|
stack
|
page read and write
|
|
|
|
2E80000
|
unkown
|
page read and write
|
|
|
|
143D6469000
|
unkown
|
page read and write
|
|
|
|
3EFF000
|
stack
|
page read and write
|
|
|
|
7FF556408000
|
unkown
|
page readonly
|
|
|
|
7FF5E0CD6000
|
unkown
|
page readonly
|
|
|
|
3CB2000
|
unkown
|
page read and write
|
|
|
|
31F9000
|
heap private
|
page read and write
|
|
|
|
15E61C9C000
|
unkown
|
page read and write
|
|
|
|
338177E000
|
unkown
|
page read and write
|
|
|
|
2D129840000
|
unkown
|
page read and write
|
|
|
|
7FF539425000
|
unkown
|
page readonly
|
|
|
|
7FF54ADBC000
|
unkown
|
page readonly
|
|
|
|
7FF5B7337000
|
unkown
|
page readonly
|
|
|
|
15E63F43000
|
unkown
|
page read and write
|
|
|
|
7FF52490E000
|
unkown
|
page readonly
|
|
|
|
1D357213000
|
unkown
|
page read and write
|
|
|
|
143D6489000
|
unkown
|
page read and write
|
|
|
|
15E63AB0000
|
unkown
|
page read and write
|
|
|
|
222D9A70000
|
unkown
|
page read and write
|
|
|
|
2184C690000
|
unkown
|
page read and write
|
|
|
|
2184C6A0000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
2DFC3C4F000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
412000
|
unkown image
|
page read and write
|
|
|
|
2E72000
|
unkown
|
page read and write
|
|
|
|
4890000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page readonly
|
|
|
|
2BF0000
|
unkown
|
page readonly
|
|
|
|
7FF5B7406000
|
unkown
|
page readonly
|
|
|
|
21CEB013000
|
unkown
|
page read and write
|
|
|
|
2D12B78A000
|
unkown
|
page read and write
|
|
|
|
81C000
|
heap default
|
page read and write
|
|
|
|
27CC000
|
unkown
|
page read and write
|
|
|
|
1AC83029000
|
unkown
|
page read and write
|
|
|
|
7FF51B13A000
|
unkown
|
page readonly
|
|
|
|
1F05FE00000
|
unkown
|
page readonly
|
|
|
|
2E74000
|
unkown
|
page read and write
|
|
|
|
7FF524AEF000
|
unkown
|
page readonly
|
|
|
|
7FF4EF184000
|
unkown
|
page readonly
|
|
|
|
2DFC4740000
|
unkown
|
page readonly
|
|
|
|
7FF5393D5000
|
unkown
|
page readonly
|
|
|
|
2E4F000
|
unkown
|
page read and write
|
|
|
|
7FF5833D5000
|
unkown
|
page readonly
|
|
|
|
7FF524B11000
|
unkown
|
page readonly
|
|
|
|
27C1000
|
unkown
|
page read and write
|
|
|
|
C91898E000
|
unkown
|
page read and write
|
|
|
|
5930000
|
unkown
|
page read and write
|
|
|
|
1DF6B256000
|
unkown
|
page read and write
|
|
|
|
286A000
|
unkown
|
page readonly
|
|
|
|
15E64310000
|
unkown
|
page read and write
|
|
|
|
15E63AB0000
|
unkown
|
page readonly
|
|
|
|
7FF539406000
|
unkown
|
page readonly
|
|
|
|
15E61CD5000
|
unkown
|
page read and write
|
|
|
|
222D804B000
|
unkown
|
page read and write
|
|
|
|
7FF5832A3000
|
unkown
|
page readonly
|
|
|
|
3D27000
|
unkown
|
page read and write
|
|
|
|
8EF000
|
stack
|
page read and write
|
|
|
|
222D7F30000
|
heap default
|
page read and write
|
|
|
|
1AC83000000
|
unkown
|
page read and write
|
|
|
|
226D000
|
unkown
|
page read and write
|
|
|
|
2223000
|
unkown
|
page read and write
|
|
|
|
2184C1A0000
|
unkown
|
page read and write
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
2E79000
|
unkown
|
page read and write
|
|
|
|
3DD2000
|
unkown
|
page read and write
|
|
|
|
21F3000
|
unkown
|
page read and write
|
|
|
|
3CE5000
|
unkown
|
page read and write
|
|
|
|
504000
|
unkown
|
page read and write
|
|
|
|
27C9000
|
unkown
|
page read and write
|
|
|
|
7FF4FFA00000
|
unkown
|
page readonly
|
|
|
|
7A5D000
|
stack
|
page read and write
|
|
|
|
7FF51B3B0000
|
unkown
|
page readonly
|
|
|
|
B5CA9F5000
|
unkown
|
page read and write
|
|
|
|
1F05FD13000
|
unkown
|
page read and write
|
|
|
|
3CBD000
|
unkown
|
page read and write
|
|
|
|
222D7F40000
|
unkown
|
page write copy
|
|
|
|
7FF5DA4BD000
|
unkown
|
page readonly
|
|
|
|
2D48000
|
heap private
|
page read and write
|
|
|
|
1F05FB60000
|
unkown
|
page read and write
|
|
|
|
7FF538FA3000
|
unkown
|
page readonly
|
|
|
|
2855000
|
unkown
|
page readonly
|
|
|
|
7FF51B419000
|
unkown
|
page readonly
|
|
|
|
2DFC3BC0000
|
unkown
|
page readonly
|
|
|
|
7FF5DA3D0000
|
unkown
|
page readonly
|
|
|
|
2D12B789000
|
unkown
|
page read and write
|
|
|
|
7FF556449000
|
unkown
|
page readonly
|
|
|
|
4CB4000
|
heap private
|
page read and write
|
|
|
|
30BF379000
|
unkown
|
page read and write
|
|
|
|
7FF52D381000
|
unkown
|
page readonly
|
|
|
|
2F40000
|
unkown
|
page readonly
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF52D15A000
|
unkown
|
page readonly
|
|
|
|
2E50000
|
unkown
|
page read and write
|
|
|
|
27FD000
|
unkown
|
page readonly
|
|
|
|
420000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF524BA9000
|
unkown
|
page readonly
|
|
|
|
15E61D02000
|
unkown
|
page read and write
|
|
|
|
127ACCA0000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
heap default
|
page read and write
|
|
|
|
7FF5E0F8B000
|
unkown
|
page readonly
|
|
|
|
7FF5B6C2D000
|
unkown
|
page readonly
|
|
|
|
848000
|
heap default
|
page read and write
|
|
|
|
28D8000
|
unkown
|
page readonly
|
|
|
|
2E7A000
|
unkown
|
page read and write
|
|
|
|
15E61D2C000
|
unkown
|
page read and write
|
|
|
|
15E63C41000
|
unkown
|
page read and write
|
|
|
|
7FF539437000
|
unkown
|
page readonly
|
|
|
|
3DEC000
|
unkown
|
page read and write
|
|
|
|
26B2000
|
unkown
|
page readonly
|
|
|
|
1AC83075000
|
unkown
|
page read and write
|
|
|
|
30BF17E000
|
unkown
|
page read and write
|
|
|
|
7FF556298000
|
unkown
|
page readonly
|
|
|
|
15E61AE0000
|
heap default
|
page read and write
|
|
|
|
2C4D000
|
stack
|
page read and write
|
|
|
|
7FF5560C8000
|
unkown
|
page readonly
|
|
|
|
2184C430000
|
unkown
|
page read and write
|
|
|
|
865000
|
heap default
|
page read and write
|
|
|
|
2850000
|
unkown
|
page readonly
|
|
|
|
7FF5B747E000
|
unkown
|
page readonly
|
|
|
|
2D129660000
|
unkown
|
page readonly
|
|
|
|
127AC4B0000
|
heap private
|
page read and write
|
|
|
|
30BF2FB000
|
unkown
|
page read and write
|
|
|
|
7FF5DA521000
|
unkown
|
page readonly
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0FEA000
|
unkown
|
page readonly
|
|
|
|
2184C20E000
|
unkown
|
page read and write
|
|
|
|
7FF524804000
|
unkown
|
page readonly
|
|
|
|
2E67000
|
unkown
|
page read and write
|
|
|
|
7FF5E1067000
|
unkown
|
page readonly
|
|
|
|
15E61C29000
|
unkown
|
page read and write
|
|
|
|
2235000
|
heap private
|
page read and write
|
|
|
|
15E65142000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown
|
page read and write
|
|
|
|
26E9000
|
unkown
|
page readonly
|
|
|
|
3D27000
|
unkown
|
page read and write
|
|
|
|
7FF524A83000
|
unkown
|
page readonly
|
|
|
|
1D35724C000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE85000
|
unkown
|
page readonly
|
|
|
|
B20000
|
unkown
|
page readonly
|
|
|
|
D0F000
|
stack
|
page read and write
|
|
|
|
7FF4EEEF5000
|
unkown
|
page readonly
|
|
|
|
143D6600000
|
unkown
|
page readonly
|
|
|
|
7FF54AD7E000
|
unkown
|
page readonly
|
|
|
|
143D643E000
|
unkown
|
page read and write
|
|
|
|
7FF5DA437000
|
unkown
|
page readonly
|
|
|
|
2DFC3D13000
|
unkown
|
page read and write
|
|
|
|
15E64310000
|
unkown
|
page read and write
|
|
|
|
21847718000
|
unkown
|
page read and write
|
|
|
|
2340000
|
unkown
|
page read and write
|
|
|
|
3DEC000
|
unkown
|
page read and write
|
|
|
|
33813FC000
|
unkown
|
page read and write
|
|
|
|
15E61A80000
|
heap private
|
page read and write
|
|
|
|
F185B7C000
|
unkown
|
page read and write
|
|
|
|
21CEB802000
|
unkown
|
page read and write
|
|
|
|
3CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5B71DA000
|
unkown
|
page readonly
|
|
|
|
3CC0000
|
unkown
|
page read and write
|
|
|
|
7FF54AC5D000
|
unkown
|
page readonly
|
|
|
|
7FF5246B3000
|
unkown
|
page readonly
|
|
|
|
500000
|
heap default
|
page read and write
|
|
|
|
2184C610000
|
unkown
|
page read and write
|
|
|
|
7FF583406000
|
unkown
|
page readonly
|
|
|
|
73E000
|
unkown
|
page read and write
|
|
|
|
15E61C9B000
|
unkown
|
page read and write
|
|
|
|
B10000
|
heap private
|
page read and write
|
|
|
|
7FF5DA557000
|
unkown
|
page readonly
|
|
|
|
338187D000
|
unkown
|
page read and write
|
|
|
|
28B000
|
unkown
|
page read and write
|
|
|
|
21846E93000
|
unkown
|
page read and write
|
|
|
|
7FF5B7278000
|
unkown
|
page readonly
|
|
|
|
27C000
|
unkown
|
page read and write
|
|
|
|
2360000
|
unkown
|
page read and write
|
|
|
|
2F65000
|
heap default
|
page read and write
|
|
|
|
2E4F000
|
unkown
|
page read and write
|
|
|
|
3CE5000
|
unkown
|
page read and write
|
|
|
|
21CEB042000
|
unkown
|
page read and write
|
|
|
|
15E61C80000
|
unkown
|
page read and write
|
|
|
|
B5CA5AB000
|
unkown
|
page read and write
|
|
|
|
2ED3000
|
unkown
|
page read and write
|
|
|
|
21CEB060000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCE8000
|
unkown
|
page readonly
|
|
|
|
23E0000
|
unkown
|
page readonly
|
|
|
|
2E7C000
|
unkown
|
page read and write
|
|
|
|
7FF52CE80000
|
unkown
|
page readonly
|
|
|
|
40F000
|
unkown image
|
page readonly
|
|
|
|
2B4E000
|
unkown
|
page read and write
|
|
|
|
15E63F83000
|
unkown
|
page read and write
|
|
|
|
776000
|
unkown
|
page read and write
|
|
|
|
E6331F9000
|
unkown
|
page read and write
|
|
|
|
2D1297E0000
|
heap private
|
page read and write
|
|
|
|
7FF4EEF36000
|
unkown
|
page readonly
|
|
|
|
7FF52D315000
|
unkown
|
page readonly
|
|
|
|
7FF54ADD5000
|
unkown
|
page readonly
|
|
|
|
2184C2B4000
|
unkown
|
page read and write
|
|
|
|
7FF4FFEF1000
|
unkown
|
page readonly
|
|
|
|
3CA7000
|
unkown
|
page read and write
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
C643DFF000
|
unkown
|
page read and write
|
|
|
|
7FF54AC81000
|
unkown
|
page readonly
|
|
|
|
7FF524998000
|
unkown
|
page readonly
|
|
|
|
746000
|
heap default
|
page read and write
|
|
|
|
3FD1000
|
unkown
|
page read and write
|
|
|
|
7FF5563F0000
|
unkown
|
page readonly
|
|
|
|
15E63E53000
|
unkown
|
page read and write
|
|
|
|
10001000
|
unkown
|
page execute read
|
|
|
|
7FF54ABCF000
|
unkown
|
page readonly
|
|
|
|
2D12B860000
|
unkown
|
page readonly
|
|
|
|
781000
|
unkown
|
page read and write
|
|
|
|
7FF5249B7000
|
unkown
|
page readonly
|
|
|
|
28C4000
|
unkown
|
page readonly
|
|
|
|
7FF4EF177000
|
unkown
|
page readonly
|
|
|
|
7FF4EF5B9000
|
unkown
|
page readonly
|
|
|
|
7FF5391FE000
|
unkown
|
page readonly
|
|
|
|
2DFC3D02000
|
unkown
|
page read and write
|
|
|
|
2E79000
|
unkown
|
page read and write
|
|
|
|
36AC000
|
unkown
|
page read and write
|
|
|
|
15E63C0B000
|
unkown
|
page read and write
|
|
|
|
2E6E000
|
unkown
|
page read and write
|
|
|
|
7FF5DA550000
|
unkown
|
page readonly
|
|
|
|
7FF5E0E88000
|
unkown
|
page readonly
|
|
|
|
1F05FC3C000
|
unkown
|
page read and write
|
|
|
|
15E64410000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE35000
|
unkown
|
page readonly
|
|
|
|
2F06000
|
unkown
|
page read and write
|
|
|
|
7FF5B70F7000
|
unkown
|
page readonly
|
|
|
|
C918D75000
|
unkown
|
page read and write
|
|
|
|
7FF58348E000
|
unkown
|
page readonly
|
|
|
|
1AC83102000
|
unkown
|
page read and write
|
|
|
|
572C8FE000
|
unkown
|
page read and write
|
|
|
|
21CEB07A000
|
unkown
|
page read and write
|
|
|
|
2EA9000
|
unkown
|
page read and write
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
4C6000
|
unkown image
|
page readonly
|
|
|
|
2780000
|
unkown
|
page write copy
|
|
|
|
15E61C7D000
|
unkown
|
page read and write
|
|
|
|
7FF556476000
|
unkown
|
page readonly
|
|
|
|
64E000
|
unkown
|
page read and write
|
|
|
|
2E6F000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4B0000
|
unkown
|
page readonly
|
|
|
|
7FF54A950000
|
unkown
|
page readonly
|
|
|
|
89D000
|
heap default
|
page read and write
|
|
|
|
4D90000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2184C213000
|
unkown
|
page read and write
|
|
|
|
2350000
|
heap private
|
page read and write
|
|
|
|
2187000
|
unkown
|
page readonly
|
|
|
|
2D1298BF000
|
unkown
|
page read and write
|
|
|
|
495000
|
unkown image
|
page execute and read and write
|
|
|
|
7FF5393A8000
|
unkown
|
page readonly
|
|
|
|
3CBA000
|
unkown
|
page read and write
|
|
|
|
3D4E000
|
unkown
|
page read and write
|
|
|
|
2A80000
|
heap private
|
page read and write
|
|
|
|
7FF5DA192000
|
unkown
|
page readonly
|
|
|
|
7FF5E1005000
|
unkown
|
page readonly
|
|
|
|
15E63CC7000
|
unkown
|
page read and write
|
|
|
|
7FF5B733A000
|
unkown
|
page readonly
|
|
|
|
10BE000
|
stack
|
page read and write
|
|
|
|
143D6B14000
|
unkown
|
page read and write
|
|
|
|
3CA1000
|
unkown
|
page read and write
|
|
|
|
504000
|
unkown
|
page read and write
|
|
|
|
7FF524857000
|
unkown
|
page readonly
|
|
|
|
7FF524B37000
|
unkown
|
page readonly
|
|
|
|
2D129902000
|
unkown
|
page read and write
|
|
|
|
2D1295F0000
|
heap private
|
page read and write
|
|
|
|
2D4C000
|
unkown
|
page read and write
|
|
|
|
2DFC3C7F000
|
unkown
|
page read and write
|
|
|
|
3E46000
|
unkown
|
page read and write
|
|
|
|
127AC624000
|
unkown
|
page read and write
|
|
|
|
497000
|
unkown image
|
page execute and write copy
|
|
|
|
15E61C83000
|
unkown
|
page read and write
|
|
|
|
15E61CC4000
|
unkown
|
page read and write
|
|
|
|
3CC6000
|
unkown
|
page read and write
|
|
|
|
28E000
|
unkown
|
page read and write
|
|
|
|
15E63C50000
|
unkown
|
page read and write
|
|
|
|
1D3571F0000
|
unkown
|
page readonly
|
|
|
|
E63357B000
|
unkown
|
page read and write
|
|
|
|
2E4C000
|
unkown
|
page read and write
|
|
|
|
10332000
|
unkown
|
page read and write
|
|
|
|
4FFD000
|
stack
|
page read and write
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
2DFC3D00000
|
unkown
|
page read and write
|
|
|
|
DC0000
|
heap default
|
page read and write
|
|
|
|
7FF5833CE000
|
unkown
|
page readonly
|
|
|
|
3DFC000
|
unkown
|
page read and write
|
|
|
|
7FF556490000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE7C000
|
unkown
|
page readonly
|
|
|
|
3E06000
|
unkown
|
page read and write
|
|
|
|
21CEB061000
|
unkown
|
page read and write
|
|
|
|
2D12B820000
|
unkown
|
page read and write
|
|
|
|
2E49000
|
unkown
|
page read and write
|
|
|
|
1DF6B22A000
|
unkown
|
page read and write
|
|
|
|
3DD7000
|
unkown
|
page read and write
|
|
|
|
804000
|
heap default
|
page read and write
|
|
|
|
2223000
|
unkown
|
page read and write
|
|
|
|
3950000
|
unkown
|
page readonly
|
|
|
|
15E63F83000
|
unkown
|
page read and write
|
|
|
|
28B2000
|
unkown
|
page read and write
|
|
|
|
7FF53936C000
|
unkown
|
page readonly
|
|
|
|
1F060600000
|
unkown
|
page readonly
|
|
|
|
7FF5B7396000
|
unkown
|
page readonly
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
7FF5E10BE000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
7FF5E1060000
|
unkown
|
page readonly
|
|
|
|
21CEB2D0000
|
unkown
|
page readonly
|
|
|
|
3E01000
|
unkown
|
page read and write
|
|
|
|
F18549C000
|
unkown
|
page read and write
|
|
|
|
1D357302000
|
unkown
|
page read and write
|
|
|
|
3B8000
|
unkown
|
page read and write
|
|
|
|
7FF54AD85000
|
unkown
|
page readonly
|
|
|
|
7FF52D1FC000
|
unkown
|
page readonly
|
|
|
|
15E65082000
|
unkown
|
page read and write
|
|
|
|
15E64310000
|
unkown
|
page read and write
|
|
|
|
7FF52492F000
|
unkown
|
page readonly
|
|
|
|
2DF0000
|
unkown
|
page read and write
|
|
|
|
E4C287B000
|
unkown
|
page read and write
|
|
|
|
7FF583491000
|
unkown
|
page readonly
|
|
|
|
1F05FB30000
|
heap default
|
page read and write
|
|
|
|
15E61C54000
|
unkown
|
page read and write
|
|
|
|
2184C561000
|
unkown
|
page read and write
|
|
|
|
773000
|
heap default
|
page read and write
|
|
|
|
1F05FC7C000
|
unkown
|
page read and write
|
|
|
|
3CC3000
|
unkown
|
page read and write
|
|
|
|
B6E000
|
unkown
|
page read and write
|
|
|
|
23E6000
|
unkown
|
page readonly
|
|
|
|
15E63E00000
|
unkown
|
page read and write
|
|
|
|
1F05FC22000
|
unkown
|
page read and write
|
|
|
|
1DF6B4D0000
|
unkown
|
page write copy
|
|
|
|
2184C213000
|
unkown
|
page read and write
|
|
|
|
2EA9000
|
unkown
|
page read and write
|
|
|
|
2ED0000
|
unkown
|
page read and write
|
|
|
|
27F2000
|
unkown
|
page readonly
|
|
|
|
CD8C3FA000
|
unkown
|
page read and write
|
|
|
|
2E51000
|
unkown
|
page read and write
|
|
|
|
127ACC70000
|
unkown
|
page read and write
|
|
|
|
2E62000
|
unkown
|
page read and write
|
|
|
|
7FF4EEF45000
|
unkown
|
page readonly
|
|
|
|
2E74000
|
unkown
|
page read and write
|
|
|
|
127AC600000
|
unkown
|
page read and write
|
|
|
|
7FF54AD6A000
|
unkown
|
page readonly
|
|
|
|
31D0000
|
unkown
|
page readonly
|
|
|
|
1AC82EE0000
|
heap private
|
page read and write
|
|
|
|
2184C670000
|
unkown
|
page read and write
|
|
|
|
7FF51B40E000
|
unkown
|
page readonly
|
|
|
|
21CEB066000
|
unkown
|
page read and write
|
|
|
|
7FF5561B5000
|
unkown
|
page readonly
|
|
|
|
3E5B000
|
unkown
|
page read and write
|
|
|
|
7FF524AA2000
|
unkown
|
page readonly
|
|
|
|
15E61BC0000
|
unkown
|
page readonly
|
|
|
|
A3E000
|
unkown
|
page read and write
|
|
|
|
7FF52D1C1000
|
unkown
|
page readonly
|
|
|
|
E4C2E7B000
|
unkown
|
page read and write
|
|
|
|
2801000
|
unkown
|
page readonly
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
2DBE000
|
unkown
|
page read and write
|
|
|
|
7FF524B40000
|
unkown
|
page readonly
|
|
|
|
10001000
|
unkown
|
page execute read
|
|
|
|
7FF52CE90000
|
unkown
|
page readonly
|
|
|
|
7FF51B411000
|
unkown
|
page readonly
|
|
|
|
21846EA8000
|
unkown
|
page read and write
|
|
|
|
7FF524A41000
|
unkown
|
page readonly
|
|
|
|
B5CAA7E000
|
unkown
|
page read and write
|
|
|
|
488E000
|
stack
|
page read and write
|
|
|
|
2EE6000
|
unkown
|
page read and write
|
|
|
|
10023000
|
unkown
|
page readonly
|
|
|
|
7FF51B33A000
|
unkown
|
page readonly
|
|
|
|
143D6C00000
|
unkown
|
page readonly
|
|
|
|
7FF55641A000
|
unkown
|
page readonly
|
|
|
|
2298F1A0000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2DFC3A00000
|
heap default
|
page read and write
|
|
|
|
53B000
|
heap default
|
page read and write
|
|
|
|
21CEB05E000
|
unkown
|
page read and write
|
|
|
|
2184C630000
|
unkown
|
page read and write
|
|
|
|
7FF52D178000
|
unkown
|
page readonly
|
|
|
|
2210000
|
unkown
|
page read and write
|
|
|
|
27C8000
|
unkown
|
page read and write
|
|
|
|
2ED2000
|
unkown
|
page read and write
|
|
|
|
50A000
|
unkown image
|
page read and write
|
|
|
|
3CC1000
|
unkown
|
page read and write
|
|
|
|
7FF52D320000
|
unkown
|
page readonly
|
|
|
|
2E7A000
|
unkown
|
page read and write
|
|
|
|
3E47000
|
unkown
|
page read and write
|
|
|
|
2362000
|
unkown
|
page readonly
|
|
|
|
CD8BFAB000
|
unkown
|
page read and write
|
|
|
|
27B4000
|
unkown
|
page readonly
|
|
|
|
283B000
|
unkown
|
page read and write
|
|
|
|
7FF5B7297000
|
unkown
|
page readonly
|
|
|
|
7FF5DA5AE000
|
unkown
|
page readonly
|
|
|
|
226D000
|
unkown
|
page read and write
|
|
|
|
22D0000
|
unkown
|
page readonly
|
|
|
|
27DB000
|
unkown
|
page read and write
|
|
|
|
1D357249000
|
unkown
|
page read and write
|
|
|
|
2184C54E000
|
unkown
|
page read and write
|
|
|
|
7FF524AB6000
|
unkown
|
page readonly
|
|
|
|
1DF6CDC0000
|
unkown
|
page readonly
|
|
|
|
230F000
|
unkown
|
page readonly
|
|
|
|
1D357270000
|
unkown
|
page read and write
|
|
|
|
1D35724E000
|
unkown
|
page read and write
|
|
|
|
2298F258000
|
heap default
|
page read and write
|
|
|
|
21846E00000
|
unkown
|
page read and write
|
|
|
|
15E63CD9000
|
unkown
|
page read and write
|
|
|
|
A41000
|
unkown
|
page read and write
|
|
|
|
1AC82F90000
|
unkown
|
page readonly
|
|
|
|
7FF54AC0E000
|
unkown
|
page readonly
|
|
|
|
504000
|
unkown
|
page read and write
|
|
|
|
7FF52D389000
|
unkown
|
page readonly
|
|
|
|
C918E7B000
|
unkown
|
page read and write
|
|
|
|
15E61C6D000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE90000
|
unkown
|
page readonly
|
|
|
|
3DD2000
|
unkown
|
page read and write
|
|
|
|
3DE2000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE49000
|
unkown
|
page readonly
|
|
|
|
2D129650000
|
heap default
|
page read and write
|
|
|
|
7FF5DA37B000
|
unkown
|
page readonly
|
|
|
|
1F05FD02000
|
unkown
|
page read and write
|
|
|
|
7FF583288000
|
unkown
|
page readonly
|
|
|
|
7FF538C3D000
|
unkown
|
page readonly
|
|
|
|
15E61CA0000
|
unkown
|
page read and write
|
|
|
|
7FF5249B3000
|
unkown
|
page readonly
|
|
|
|
15E63CC9000
|
unkown
|
page read and write
|
|
|
|
2184C6F0000
|
unkown
|
page readonly
|
|
|
|
2184C770000
|
unkown
|
page readonly
|
|
|
|
3D4D000
|
unkown
|
page read and write
|
|
|
|
143D64BB000
|
unkown
|
page read and write
|
|
|
|
21846DC0000
|
unkown
|
page readonly
|
|
|
|
28E0000
|
unkown
|
page execute and read and write
|
|
|
|
2210000
|
unkown
|
page readonly
|
|
|
|
33814FD000
|
unkown
|
page read and write
|
|
|
|
7FF556406000
|
unkown
|
page readonly
|
|
|
|
2DFF000
|
stack
|
page read and write
|
|
|
|
A30000
|
unkown
|
page readonly
|
|
|
|
27DB000
|
unkown
|
page read and write
|
|
|
|
30BF07E000
|
unkown
|
page read and write
|
|
|
|
7FF5E1019000
|
unkown
|
page readonly
|
|
|
|
194000
|
stack
|
page read and write
|
|
|
|
3D4E000
|
unkown
|
page read and write
|
|
|
|
2184C2B7000
|
unkown
|
page read and write
|
|
|
|
7FF5B6C31000
|
unkown
|
page readonly
|
|
|
|
2D12989E000
|
unkown
|
page read and write
|
|
|
|
266B000
|
unkown
|
page readonly
|
|
|
|
2DFC3BD0000
|
unkown
|
page read and write
|
|
|
|
340F000
|
unkown
|
page read and write
|
|
|
|
7FF5DA2E6000
|
unkown
|
page readonly
|
|
|
|
2373000
|
unkown
|
page readonly
|
|
|
|
BF1000
|
unkown image
|
page execute read
|
|
|
|
143D62F0000
|
unkown
|
page readonly
|
|
|
|
2810000
|
unkown
|
page execute and read and write
|
|
|
|
7520000
|
unkown
|
page read and write
|
|
|
|
7FF4EF557000
|
unkown
|
page readonly
|
|
|
|
2E80000
|
unkown
|
page read and write
|
|
|
|
127ACC60000
|
unkown
|
page readonly
|
|
|
|
2184C540000
|
unkown
|
page read and write
|
|
|
|
2238000
|
heap private
|
page read and write
|
|
|
|
2E68000
|
unkown
|
page read and write
|
|
|
|
CD8C379000
|
unkown
|
page read and write
|
|
|
|
2C4C000
|
stack
|
page read and write
|
|
|
|
7FF5E0CDC000
|
unkown
|
page readonly
|
|
|
|
27D0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF51B19F000
|
unkown
|
page readonly
|
|
|
|
BB0000
|
heap private
|
page read and write
|
|
|
|
2223000
|
unkown
|
page read and write
|
|
|
|
143D6502000
|
unkown
|
page read and write
|
|
|
|
7FF5B71F0000
|
unkown
|
page readonly
|
|
|
|
2308000
|
unkown
|
page readonly
|
|
|
|
412000
|
unkown image
|
page write copy
|
|
|
|
7FF5E0F47000
|
unkown
|
page readonly
|
|
|
|
2EB7000
|
unkown
|
page read and write
|
|
|
|
7FF539160000
|
unkown
|
page readonly
|
|
|
|
7FF524A61000
|
unkown
|
page readonly
|
|
|
|
7FF52D389000
|
unkown
|
page readonly
|
|
|
|
7FF5B740C000
|
unkown
|
page readonly
|
|
|
|
B5CAC77000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE1A000
|
unkown
|
page readonly
|
|
|
|
2D129857000
|
unkown
|
page read and write
|
|
|
|
7FF583107000
|
unkown
|
page readonly
|
|
|
|
15E61CCD000
|
unkown
|
page read and write
|
|
|
|
7FF5833BA000
|
unkown
|
page readonly
|
|
|
|
15E65100000
|
unkown
|
page read and write
|
|
|
|
512000
|
unkown image
|
page readonly
|
|
|
|
1D357229000
|
unkown
|
page read and write
|
|
|
|
394D000
|
stack
|
page read and write
|
|
|
|
820000
|
unkown
|
page readonly
|
|
|
|
504000
|
unkown
|
page read and write
|
|
|
|
7FF4EF526000
|
unkown
|
page readonly
|
|
|
|
28B6000
|
unkown
|
page readonly
|
|
|
|
15E61AF0000
|
unkown
|
page readonly
|
|
|
|
3D79000
|
unkown
|
page read and write
|
|
|
|
1F05FC4F000
|
unkown
|
page read and write
|
|
|
|
7FF53933A000
|
unkown
|
page readonly
|
|
|
|
27BB000
|
unkown
|
page readonly
|
|
|
|
346C000
|
unkown
|
page read and write
|
|
|
|
15E64210000
|
unkown
|
page read and write
|
|
|
|
6F0000
|
heap default
|
page read and write
|
|
|
|
AA7000
|
unkown
|
page read and write
|
|
|
|
7FF4EF545000
|
unkown
|
page readonly
|
|
|
|
21CEB06C000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE08000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE2E000
|
unkown
|
page readonly
|
|
|
|
2E20000
|
heap default
|
page read and write
|
|
|
|
2D12B749000
|
unkown
|
page read and write
|
|
|
|
7A1C000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE5D000
|
unkown
|
page readonly
|
|
|
|
770000
|
heap default
|
page read and write
|
|
|
|
7FF5DA1A1000
|
unkown
|
page readonly
|
|
|
|
143D6F40000
|
unkown
|
page write copy
|
|
|
|
7FF5562B8000
|
unkown
|
page readonly
|
|
|
|
3DDF000
|
unkown
|
page read and write
|
|
|
|
7FF5E1055000
|
unkown
|
page readonly
|
|
|
|
512000
|
unkown image
|
page readonly
|
|
|
|
10338000
|
unkown
|
page read and write
|
|
|
|
1DF6B400000
|
unkown
|
page readonly
|
|
|
|
E6335FD000
|
unkown
|
page read and write
|
|
|
|
15E61D13000
|
unkown
|
page read and write
|
|
|
|
2DFC4400000
|
unkown
|
page readonly
|
|
|
|
A10000
|
unkown
|
page read and write
|
|
|
|
15E63C00000
|
unkown
|
page read and write
|
|
|
|
572C5CC000
|
unkown
|
page read and write
|
|
|
|
1F060402000
|
unkown
|
page read and write
|
|
|
|
7FF524A7C000
|
unkown
|
page readonly
|
|
|
|
495000
|
unkown image
|
page execute and read and write
|
|
|
|
2EC9000
|
unkown
|
page read and write
|
|
|
|
7FF54AC53000
|
unkown
|
page readonly
|
|
|
|
3DF3000
|
unkown
|
page read and write
|
|
|
|
61FBAFE000
|
unkown
|
page read and write
|
|
|
|
7FF5393CE000
|
unkown
|
page readonly
|
|
|
|
231D000
|
unkown
|
page read and write
|
|
|
|
3CE5000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFD0D000
|
unkown
|
page readonly
|
|
|
|
57E000
|
unkown
|
page read and write
|
|
|
|
15E64000000
|
unkown
|
page read and write
|
|
|
|
7FF524A54000
|
unkown
|
page readonly
|
|
|
|
5E0000
|
heap default
|
page read and write
|
|
|
|
512000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0C03000
|
unkown
|
page readonly
|
|
|
|
15E61C7A000
|
unkown
|
page read and write
|
|
|
|
7FF5B7145000
|
unkown
|
page readonly
|
|
|
|
21847615000
|
unkown
|
page read and write
|
|
|
|
196000
|
stack
|
page read and write
|
|
|
|
2EA0000
|
heap private
|
page read and write
|
|
|
|
3CC0000
|
unkown
|
page read and write
|
|
|
|
2E50000
|
unkown
|
page read and write
|
|
|
|
3CA0000
|
unkown
|
page read and write
|
|
|
|
2E58000
|
unkown
|
page read and write
|
|
|
|
BFC000
|
unkown image
|
page readonly
|
|
|
|
3E12000
|
unkown
|
page read and write
|
|
|
|
2E7E000
|
unkown
|
page read and write
|
|
|
|
3FCF000
|
stack
|
page read and write
|
|
|
|
30BF4FB000
|
unkown
|
page read and write
|
|
|
|
2210000
|
unkown
|
page read and write
|
|
|
|
143D6210000
|
heap default
|
page read and write
|
|
|
|
15E63C53000
|
unkown
|
page read and write
|
|
|
|
A3E000
|
unkown
|
page read and write
|
|
|
|
7FF54A635000
|
unkown
|
page readonly
|
|
|
|
3D1A000
|
unkown
|
page read and write
|
|
|
|
2184C548000
|
unkown
|
page read and write
|
|
|
|
7FF54AB6A000
|
unkown
|
page readonly
|
|
|
|
15E61C49000
|
unkown
|
page read and write
|
|
|
|
7FF583347000
|
unkown
|
page readonly
|
|
|
|
7FF5DA4DA000
|
unkown
|
page readonly
|
|
|
|
384D000
|
stack
|
page read and write
|
|
|
|
2E5E000
|
unkown
|
page read and write
|
|
|
|
2DF5000
|
heap private
|
page read and write
|
|
|
|
7FF4FFD6C000
|
unkown
|
page readonly
|
|
|
|
BFC000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
15E63E73000
|
unkown
|
page read and write
|
|
|
|
7FF52CE7A000
|
unkown
|
page readonly
|
|
|
|
7FF58334A000
|
unkown
|
page readonly
|
|
|
|
15E63C41000
|
unkown
|
page read and write
|
|
|
|
2E55000
|
unkown
|
page read and write
|
|
|
|
2D12986E000
|
unkown
|
page read and write
|
|
|
|
2E4E000
|
unkown
|
page read and write
|
|
|
|
C6439EE000
|
unkown
|
page read and write
|
|
|
|
7FF4EF521000
|
unkown
|
page readonly
|
|
|
|
E4C31FA000
|
unkown
|
page read and write
|
|
|
|
512000
|
unkown image
|
page readonly
|
|
|
|
788000
|
unkown
|
page read and write
|
|
|
|
127AC520000
|
unkown
|
page readonly
|
|
|
|
1AC83065000
|
unkown
|
page read and write
|
|
|
|
18D000
|
stack
|
page read and write
|
|
|
|
3D8E000
|
unkown
|
page read and write
|
|
|
|
484E000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE94000
|
unkown
|
page readonly
|
|
|
|
2184C440000
|
unkown
|
page read and write
|
|
|
|
75C000
|
stack
|
page read and write
|
|
|
|
7FF4EF487000
|
unkown
|
page readonly
|
|
|
|
21CEAF50000
|
unkown
|
page readonly
|
|
|
|
A2E000
|
unkown
|
page read and write
|
|
|
|
2E4E000
|
unkown
|
page read and write
|
|
|
|
7FF5DA445000
|
unkown
|
page readonly
|
|
|
|
7FF51B310000
|
unkown
|
page readonly
|
|
|
|
7FF5DA3DC000
|
unkown
|
page readonly
|
|
|
|
B5CAE7F000
|
unkown
|
page read and write
|
|
|
|
2EB6000
|
unkown
|
page read and write
|
|
|
|
2E7D000
|
stack
|
page read and write
|
|
|
|
7FF4EF173000
|
unkown
|
page readonly
|
|
|
|
A9E000
|
unkown
|
page read and write
|
|
|
|
3FE1000
|
unkown
|
page read and write
|
|
|
|
15E61C98000
|
unkown
|
page read and write
|
|
|
|
2184C570000
|
unkown
|
page read and write
|
|
|
|
143D6413000
|
unkown
|
page read and write
|
|
|
|
2D12B2A0000
|
unkown
|
page readonly
|
|
|
|
7FF53937C000
|
unkown
|
page readonly
|
|
|
|
30BF7FA000
|
unkown
|
page read and write
|
|
|
|
15E64110000
|
unkown
|
page read and write
|
|
|
|
3DFC000
|
unkown
|
page read and write
|
|
|
|
7FF5B7489000
|
unkown
|
page readonly
|
|
|
|
30BF77B000
|
unkown
|
page read and write
|
|
|
|
30BF8FB000
|
unkown
|
page read and write
|
|
|
|
7FF5B73ED000
|
unkown
|
page readonly
|
|
|
|
7FF5B7398000
|
unkown
|
page readonly
|
|
|
|
15E61C7A000
|
unkown
|
page read and write
|
|
|
|
21847E30000
|
unkown
|
page readonly
|
|
|
|
15E61C7A000
|
unkown
|
page read and write
|
|
|
|
2D12B830000
|
unkown
|
page readonly
|
|
|
|
1F05FED0000
|
unkown
|
page readonly
|
|
|
|
1D357202000
|
unkown
|
page read and write
|
|
|
|
15E63E84000
|
unkown
|
page read and write
|
|
|
|
7FF5E0F77000
|
unkown
|
page readonly
|
|
|
|
143D64CA000
|
unkown
|
page read and write
|
|
|
|
2DFC39A0000
|
heap private
|
page read and write
|
|
|
|
4F7E000
|
stack
|
page read and write
|
|
|
|
1AC8305A000
|
unkown
|
page read and write
|
|
|
|
512000
|
unkown image
|
page readonly
|
|
|
|
30BF3FB000
|
unkown
|
page read and write
|
|
|
|
27EB000
|
unkown
|
page read and write
|
|
|
|
2DA0000
|
unkown
|
page read and write
|
|
|
|
127AC63D000
|
unkown
|
page read and write
|
|
|
|
7FF55645D000
|
unkown
|
page readonly
|
|
|
|
7FF52D292000
|
unkown
|
page readonly
|
|
|
|
3CE3000
|
unkown
|
page read and write
|
|
|
|
7FF524A57000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
3D1C000
|
unkown
|
page read and write
|
|
|
|
7FF5E10C0000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
7FF5DA51D000
|
unkown
|
page readonly
|
|
|
|
3CE5000
|
unkown
|
page read and write
|
|
|
|
21847602000
|
unkown
|
page read and write
|
|
|
|
187000
|
stack
|
page read and write
|
|
|
|
7FF5E0FC0000
|
unkown
|
page readonly
|
|
|
|
7FF5E0D18000
|
unkown
|
page readonly
|
|
|
|
7FF4EEFB1000
|
unkown
|
page readonly
|
|
|
|
7FF5E104C000
|
unkown
|
page readonly
|
|
|
|
27DB000
|
unkown
|
page read and write
|
|
|
|
1F05FC56000
|
unkown
|
page read and write
|
|
|
|
143D6A02000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4FF000
|
unkown
|
page readonly
|
|
|
|
2184C2A0000
|
unkown
|
page read and write
|
|
|
|
2DFC3C00000
|
unkown
|
page read and write
|
|
|
|
2E7C000
|
unkown
|
page read and write
|
|
|
|
7FF4EF554000
|
unkown
|
page readonly
|
|
|
|
2F20000
|
unkown
|
page read and write
|
|
|
|
4FBC000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
7FF54AC38000
|
unkown
|
page readonly
|
|
|
|
2D1298A8000
|
unkown
|
page read and write
|
|
|
|
269C000
|
unkown
|
page read and write
|
|
|
|
7FF583200000
|
unkown
|
page readonly
|
|
|
|
15E63C4F000
|
unkown
|
page read and write
|
|
|
|
5090000
|
unkown
|
page read and write
|
|
|
|
87B000
|
heap default
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
237D000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page readonly
|
|
|
|
4C6000
|
unkown image
|
page readonly
|
|
|
|
7CA000
|
heap default
|
page read and write
|
|
|
|
2D48000
|
heap private
|
page read and write
|
|
|
|
2280000
|
unkown
|
page read and write
|
|
|
|
7FF5E0905000
|
unkown
|
page readonly
|
|
|
|
1D357110000
|
unkown
|
page readonly
|
|
|
|
2E5C000
|
unkown
|
page read and write
|
|
|
|
3CE5000
|
unkown
|
page read and write
|
|
|
|
26DA000
|
stack
|
page read and write
|
|
|
|
34E0000
|
unkown
|
page read and write
|
|
|
|
2E81000
|
unkown
|
page read and write
|
|
|
|
21CEB040000
|
unkown
|
page read and write
|
|
|
|
3DE9000
|
unkown
|
page read and write
|
|
|
|
2D1298C8000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown
|
page read and write
|
|
|
|
E6334FA000
|
unkown
|
page read and write
|
|
|
|
7FF583416000
|
unkown
|
page readonly
|
|
|
|
3D8E000
|
unkown
|
page read and write
|
|
|
|
2E00000
|
unkown
|
page readonly
|
|
|
|
1DF6B23F000
|
unkown
|
page read and write
|
|
|
|
77F000
|
stack
|
page read and write
|
|
|
|
2DFC3C4A000
|
unkown
|
page read and write
|
|
|
|
7FF5833DF000
|
unkown
|
page readonly
|
|
|
|
7FF5248CB000
|
unkown
|
page readonly
|
|
|
|
7FF524BA9000
|
unkown
|
page readonly
|
|
|
|
3CD9000
|
unkown
|
page read and write
|
|
|
|
218481A0000
|
unkown
|
page read and write
|
|
|
|
237C000
|
unkown
|
page read and write
|
|
|
|
31F5000
|
heap private
|
page read and write
|
|
|
|
7FF5E0E81000
|
unkown
|
page readonly
|
|
|
|
27C9000
|
unkown
|
page read and write
|
|
|
|
6F9000
|
unkown
|
page read and write
|
|
|
|
7FF5B73F6000
|
unkown
|
page readonly
|
|
|
|
7FF524AF9000
|
unkown
|
page readonly
|
|
|
|
21CEB044000
|
unkown
|
page read and write
|
|
|
|
C91917F000
|
unkown
|
page read and write
|
|
|
|
1AC83002000
|
unkown
|
page read and write
|
|
|
|
7FF524813000
|
unkown
|
page readonly
|
|
|
|
7FF5DA5B0000
|
unkown
|
page readonly
|
|
|
|
2D5D000
|
unkown
|
page read and write
|
|
|
|
FDC447B000
|
unkown
|
page read and write
|
|
|
|
27C9000
|
unkown
|
page read and write
|
|
|
|
3DF9000
|
unkown
|
page read and write
|
|
|
|
B16000
|
heap private
|
page read and write
|
|
|
|
21846E7B000
|
unkown
|
page read and write
|
|
|
|
2DFC4202000
|
unkown
|
page read and write
|
|
|
|
2EA2000
|
unkown
|
page read and write
|
|
|
|
7FF524B16000
|
unkown
|
page readonly
|
|
|
|
4650000
|
unkown
|
page readonly
|
|
|
|
E4C2A77000
|
unkown
|
page read and write
|
|
|
|
7FF4FF9F0000
|
unkown
|
page readonly
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
F185D7F000
|
unkown
|
page read and write
|
|
|
|
3CE5000
|
unkown
|
page read and write
|
|
|
|
2298F535000
|
heap private
|
page read and write
|
|
|
|
143D6400000
|
unkown
|
page read and write
|
|
|
|
1AC82F40000
|
heap default
|
page read and write
|
|
|
|
7FF53940C000
|
unkown
|
page readonly
|
|
|
|
2EBD000
|
unkown
|
page read and write
|
|
|
|
7FF5B7293000
|
unkown
|
page readonly
|
|
|
|
27EB000
|
unkown
|
page read and write
|
|
|
|
27D4000
|
unkown
|
page read and write
|
|
|
|
21CEB102000
|
unkown
|
page read and write
|
|
|
|
15E63C5A000
|
unkown
|
page read and write
|
|
|
|
CD8C47E000
|
unkown
|
page read and write
|
|
|
|
21CEAF40000
|
unkown
|
page readonly
|
|
|
|
10337000
|
unkown
|
page readonly
|
|
|
|
F185C77000
|
unkown
|
page read and write
|
|
|
|
7FF4EEFB9000
|
unkown
|
page readonly
|
|
|
|
7FF51B39C000
|
unkown
|
page readonly
|
|
|
|
1DF6B1E0000
|
unkown
|
page readonly
|
|
|
|
414000
|
unkown image
|
page readonly
|
|
|
|
2CCF000
|
heap default
|
page read and write
|
|
|
|
7FF5564EE000
|
unkown
|
page readonly
|
|
|
|
2F1B000
|
unkown
|
page read and write
|
|
|
|
1DF6B200000
|
unkown
|
page read and write
|
|
|
|
7FF5391D8000
|
unkown
|
page readonly
|
|
|
|
497000
|
unkown image
|
page execute and write copy
|
|
|
|
7FF5E0D08000
|
unkown
|
page readonly
|
|
|
|
7FF524B0D000
|
unkown
|
page readonly
|
|
|
|
27EB000
|
unkown
|
page read and write
|
|
|
|
3E12000
|
unkown
|
page read and write
|
|
|
|
7FF5DA53C000
|
unkown
|
page readonly
|
|
|
|
194000
|
stack
|
page read and write
|
|
|
|
10337000
|
unkown
|
page readonly
|
|
|
|
2D12B749000
|
unkown
|
page read and write
|
|
|
|
7FF539499000
|
unkown
|
page readonly
|
|
|
|
2240000
|
unkown
|
page read and write
|
|
|
|
2F60000
|
heap default
|
page read and write
|
|
|
|
18E000
|
stack
|
page read and write
|
|
|
|
143D6B00000
|
unkown
|
page read and write
|
|
|
|
7FF538C41000
|
unkown
|
page readonly
|
|
|
|
21846E8F000
|
unkown
|
page read and write
|
|
|
|
364F000
|
unkown
|
page read and write
|
|
|
|
505000
|
unkown image
|
page write copy
|
|
|
|
7FF5564F1000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
15E63F43000
|
unkown
|
page read and write
|
|
|
|
C643D7F000
|
unkown
|
page read and write
|
|
|
|
7FF51B369000
|
unkown
|
page readonly
|
|
|
|
3CB6000
|
unkown
|
page read and write
|
|
|
|
7FF53941C000
|
unkown
|
page readonly
|
|
|
|
7FF539390000
|
unkown
|
page readonly
|
|
|
|
2E49000
|
unkown
|
page read and write
|
|
|
|
7E9000
|
heap default
|
page read and write
|
|
|
|
21846EFF000
|
unkown
|
page read and write
|
|
|
|
1D357313000
|
unkown
|
page read and write
|
|
|
|
15E61C6D000
|
unkown
|
page read and write
|
|
|
|
7FF54ADB6000
|
unkown
|
page readonly
|
|
|
|
7FF5DA4C6000
|
unkown
|
page readonly
|
|
|
|
143D69F0000
|
unkown
|
page readonly
|
|
|
|
2400000
|
unkown
|
page readonly
|
|
|
|
7FF4EF51D000
|
unkown
|
page readonly
|
|
|
|
505000
|
unkown image
|
page write copy
|
|
|
|
E63367F000
|
unkown
|
page read and write
|
|
|
|
3CFA000
|
unkown
|
page read and write
|
|
|
|
811000
|
heap default
|
page read and write
|
|
|
|
21846E13000
|
unkown
|
page read and write
|
|
|
|
A39000
|
unkown
|
page read and write
|
|
|
|
3DA0000
|
unkown
|
page read and write
|
|
|
|
A5477E000
|
unkown
|
page read and write
|
|
|
|
7FF539103000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C5E000
|
unkown
|
page readonly
|
|
|
|
4F3C000
|
unkown
|
page read and write
|
|
|
|
7FF5B7150000
|
unkown
|
page readonly
|
|
|
|
83C000
|
unkown
|
page read and write
|
|
|
|
7FF524AB2000
|
unkown
|
page readonly
|
|
|
|
27BD000
|
unkown
|
page readonly
|
|
|
|
21846DE0000
|
unkown
|
page read and write
|
|
|
|
779000
|
unkown
|
page read and write
|
|
|
|
7FF583103000
|
unkown
|
page readonly
|
|
|
|
7FF53930C000
|
unkown
|
page readonly
|
|
|
|
27C0000
|
unkown
|
page read and write
|
|
|
|
3DDB000
|
unkown
|
page read and write
|
|
|
|
7FF5833A2000
|
unkown
|
page readonly
|
|
|
|
7FF51B355000
|
unkown
|
page readonly
|
|
|
|
2238000
|
heap private
|
page read and write
|
|
|
|
1F05FB40000
|
unkown
|
page readonly
|
|
|
|
2227000
|
heap private
|
page read and write
|
|
|
|
7FF4FFEF9000
|
unkown
|
page readonly
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
15E61D1A000
|
unkown
|
page read and write
|
|
|
|
89F000
|
stack
|
page read and write
|
|
|
|
7FF52D2CF000
|
unkown
|
page readonly
|
|
|
|
B19000
|
heap private
|
page read and write
|
|
|
|
15E63C54000
|
unkown
|
page read and write
|
|
|
|
2D5C000
|
unkown
|
page read and write
|
|
|
|
7FF4EEE45000
|
unkown
|
page readonly
|
|
|
|
3E12000
|
unkown
|
page read and write
|
|
|
|
15E63AB0000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
unkown
|
page readonly
|
|
|
|
26FD000
|
unkown
|
page readonly
|
|
|
|
1D35724A000
|
unkown
|
page read and write
|
|
|
|
7FF5391BB000
|
unkown
|
page readonly
|
|
|
|
1D357790000
|
unkown
|
page read and write
|
|
|
|
2F0E000
|
unkown
|
page read and write
|
|
|
|
2D49000
|
unkown
|
page read and write
|
|
|
|
2655000
|
unkown
|
page readonly
|
|
|
|
30BF6FB000
|
unkown
|
page read and write
|
|
|
|
A31000
|
unkown
|
page read and write
|
|
|
|
F1858F5000
|
unkown
|
page read and write
|
|
|
|
7FF5830F4000
|
unkown
|
page readonly
|
|
|
|
7FF539305000
|
unkown
|
page readonly
|
|
|
|
61FBDFF000
|
unkown
|
page read and write
|
|
|
|
21CEB041000
|
unkown
|
page read and write
|
|
|
|
B5CAD7F000
|
unkown
|
page read and write
|
|
|
|
15E61C7F000
|
unkown
|
page read and write
|
|
|
|
22FE000
|
unkown
|
page readonly
|
|
|
|
7FF5833A6000
|
unkown
|
page readonly
|
|
|
|
7FF5564F9000
|
unkown
|
page readonly
|
|
|
|
3DE2000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
3CE000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF524ADE000
|
unkown
|
page readonly
|
|
|
|
2F50000
|
unkown
|
page write copy
|
|
|
|
B19000
|
heap private
|
page read and write
|
|
|
|
7FF5B7341000
|
unkown
|
page readonly
|
|
|
|
2A00000
|
unkown
|
page readonly
|
|
|
|
E633179000
|
unkown
|
page read and write
|
|
|
|
7FF5B73AA000
|
unkown
|
page readonly
|
|
|
|
2F00000
|
unkown
|
page read and write
|
|
|
|
2827000
|
unkown
|
page readonly
|
|
|
|
222D8057000
|
unkown
|
page read and write
|
|
|
|
B17000
|
heap private
|
page read and write
|
|
|
|
3A90000
|
unkown
|
page readonly
|
|
|
|
7FF5E10C9000
|
unkown
|
page readonly
|
|
|
|
2184C790000
|
unkown
|
page readonly
|
|
|
|
A49000
|
unkown
|
page read and write
|
|
|
|
7FF58336C000
|
unkown
|
page readonly
|
|
|
|
26C1000
|
unkown
|
page read and write
|
|
|
|
21CEB05F000
|
unkown
|
page read and write
|
|
|
|
2EB9000
|
unkown
|
page read and write
|
|
|
|
840000
|
heap default
|
page read and write
|
|
|
|
7FF5E0F97000
|
unkown
|
page readonly
|
|
|
|
2E6B000
|
unkown
|
page read and write
|
|
|
|
26C1000
|
unkown
|
page read and write
|
|
|
|
7FF52D2D9000
|
unkown
|
page readonly
|
|
|
|
B5CAB7B000
|
unkown
|
page read and write
|
|
|
|
E63327E000
|
unkown
|
page read and write
|
|
|
|
792000
|
unkown
|
page read and write
|
|
|
|
79E000
|
unkown
|
page read and write
|
|
|
|
7FF539373000
|
unkown
|
page readonly
|
|
|
|
2F02000
|
unkown
|
page read and write
|
|
|
|
2239000
|
unkown
|
page read and write
|
|
|
|
7FF5DA122000
|
unkown
|
page readonly
|
|
|
|
7FF4EF4C2000
|
unkown
|
page readonly
|
|
|
|
7DF000
|
stack
|
page read and write
|
|
|
|
2E53000
|
unkown
|
page read and write
|
|
|
|
3DFC000
|
unkown
|
page read and write
|
|
|
|
2D12B1A0000
|
unkown
|
page read and write
|
|
|
|
7FF556033000
|
unkown
|
page readonly
|
|
|
|
2340000
|
unkown
|
page readonly
|
|
|
|
72E000
|
heap default
|
page read and write
|
|
|
|
A85000
|
unkown
|
page read and write
|
|
|
|
27F3000
|
unkown
|
page read and write
|
|
|
|
7FF5E093A000
|
unkown
|
page readonly
|
|
|
|
7ADE000
|
stack
|
page read and write
|
|
|
|
15E635F0000
|
unkown
|
page read and write
|
|
|
|
504000
|
unkown
|
page read and write
|
|
|
|
7FF52D221000
|
unkown
|
page readonly
|
|
|
|
5F0000
|
unkown
|
page readonly
|
|
|
|
2E74000
|
unkown
|
page read and write
|
|
|
|
27CE000
|
unkown
|
page readonly
|
|
|
|
10023000
|
unkown
|
page readonly
|
|
|
|
7FF52D19D000
|
unkown
|
page readonly
|
|
|
|
15E65042000
|
unkown
|
page read and write
|
|
|
|
C643C7A000
|
unkown
|
page read and write
|
|
|
|
2184C564000
|
unkown
|
page read and write
|
|
|
|
3D2000
|
unkown
|
page read and write
|
|
|
|
2E67000
|
unkown
|
page read and write
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
7FF556485000
|
unkown
|
page readonly
|
|
|
|
7510000
|
heap private
|
page read and write
|
|
|
|
1F060940000
|
unkown
|
page readonly
|
|
|
|
2F02000
|
unkown
|
page read and write
|
|
|
|
27C9000
|
unkown
|
page read and write
|
|
|
|
21CEAF30000
|
heap default
|
page read and write
|
|
|
|
7FF539401000
|
unkown
|
page readonly
|
|
|
|
1F05FC6D000
|
unkown
|
page read and write
|
|
|
|
888000
|
heap default
|
page read and write
|
|
|
|
7FF4EEF09000
|
unkown
|
page readonly
|
|
|
|
7FF5E0FD6000
|
unkown
|
page readonly
|
|
|
|
3CE7000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D90000
|
unkown
|
page readonly
|
|
|
|
3DF4000
|
unkown
|
page read and write
|
|
|
|
2184C29B000
|
unkown
|
page read and write
|
|
|
|
A9A000
|
unkown
|
page read and write
|
|
|
|
877000
|
heap default
|
page read and write
|
|
|
|
2280000
|
unkown
|
page read and write
|
|
|
|
2184C6A0000
|
unkown
|
page read and write
|
|
|
|
2D12B820000
|
unkown
|
page read and write
|
|
|
|
222D82D0000
|
unkown
|
page readonly
|
|
|
|
282E000
|
unkown
|
page readonly
|
|
|
|
1AC83A00000
|
unkown
|
page readonly
|
|
|
|
143D6467000
|
unkown
|
page read and write
|
|
|
|
15E61D5D000
|
unkown
|
page read and write
|
|
|
|
2EDF000
|
unkown
|
page read and write
|
|
|
|
3CC2000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E7C000
|
unkown
|
page readonly
|
|
|
|
2D129813000
|
unkown
|
page read and write
|
|
|
|
2BCF000
|
stack
|
page read and write
|
|
|
|
1AC82F60000
|
unkown
|
page readonly
|
|
|
|
7FF582C3D000
|
unkown
|
page readonly
|
|
|
|
15E63CC7000
|
unkown
|
page read and write
|
|
|
|
15E63F00000
|
unkown
|
page read and write
|
|
|
|
2D1297C0000
|
unkown
|
page read and write
|
|
|
|
2DFC3C4B000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD37000
|
unkown
|
page readonly
|
|
|
|
2346000
|
unkown
|
page readonly
|
|
|
|
7FF52D298000
|
unkown
|
page readonly
|
|
|
|
2B6A000
|
unkown
|
page read and write
|
|
|
|
505000
|
unkown image
|
page write copy
|
|
|
|
4C4E000
|
stack
|
page read and write
|
|
|
|
2372000
|
heap private
|
page read and write
|
|
|
|
15E63F83000
|
unkown
|
page read and write
|
|
|
|
10C0000
|
unkown
|
page readonly
|
|
|
|
220D000
|
unkown
|
page read and write
|
|
|
|
7FF51AC59000
|
unkown
|
page readonly
|
|
|
|
2843000
|
unkown
|
page readonly
|
|
|
|
4EE0000
|
unkown
|
page read and write
|
|
|
|
2408000
|
unkown
|
page readonly
|
|
|
|
21CEB04E000
|
unkown
|
page read and write
|
|
|
|
505000
|
unkown
|
page read and write
|
|
|
|
7FF539147000
|
unkown
|
page readonly
|
|
|
|
2770000
|
unkown
|
page readonly
|
|
|
|
3FC0000
|
heap private
|
page read and write
|
|
|
|
2184C263000
|
unkown
|
page read and write
|
|
|
|
2D43000
|
heap private
|
page read and write
|
|
|
|
4CC0000
|
unkown
|
page readonly
|
|
|
|
893000
|
heap default
|
page read and write
|
|
|
|
222D803F000
|
unkown
|
page read and write
|
|
|
|
2390000
|
heap private
|
page read and write
|
|
|
|
333F000
|
stack
|
page read and write
|
|
|
|
21847CF0000
|
unkown
|
page read and write
|
|
|
|
2935000
|
unkown
|
page read and write
|
|
|
|
21CEB05C000
|
unkown
|
page read and write
|
|
|
|
15E61CC4000
|
unkown
|
page read and write
|
|
|
|
1D357200000
|
unkown
|
page read and write
|
|
|
|
22DE000
|
unkown
|
page read and write
|
|
|
|
507F000
|
stack
|
page read and write
|
|
|
|
B5CA8FE000
|
unkown
|
page read and write
|
|
|
|
9EE000
|
unkown
|
page read and write
|
|
|
|
15E61CE9000
|
unkown
|
page read and write
|
|
|
|
7FF4EF536000
|
unkown
|
page readonly
|
|
|
|
7FF5DA554000
|
unkown
|
page readonly
|
|
|
|
7FF524A7A000
|
unkown
|
page readonly
|
|
|
|
650000
|
unkown
|
page readonly
|
|
|
|
F18551E000
|
unkown
|
page read and write
|
|
|
|
2184C1B0000
|
unkown
|
page read and write
|
|
|
|
E63337B000
|
unkown
|
page read and write
|
|
|
|
2DFC3C4D000
|
unkown
|
page read and write
|
|
|
|
3CB4000
|
unkown
|
page read and write
|
|
|
|
6FD000
|
unkown
|
page read and write
|
|
|
|
7FF5DA48A000
|
unkown
|
page readonly
|
|
|
|
2E5E000
|
unkown
|
page read and write
|
|
|
|
2227000
|
unkown
|
page read and write
|
|
|
|
127AC658000
|
unkown
|
page read and write
|
|
|
|
9FE000
|
unkown
|
page read and write
|
|
|
|
65E000
|
unkown
|
page read and write
|
|
|
|
FDC45FF000
|
unkown
|
page read and write
|
|
|
|
771000
|
unkown
|
page read and write
|
|
|
|
7FF524A4A000
|
unkown
|
page readonly
|
|
|
|
15E63E3A000
|
unkown
|
page read and write
|
|
|
|
15E63C76000
|
unkown
|
page read and write
|
|
|
|
21846E3D000
|
unkown
|
page read and write
|
|
|
|
3CA1000
|
unkown
|
page read and write
|
|
|
|
7FF52D2FC000
|
unkown
|
page readonly
|
|
|
|
15E65042000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE76000
|
unkown
|
page readonly
|
|
|
|
198000
|
stack
|
page read and write
|
|
|
|
2E6A000
|
unkown
|
page read and write
|
|
|
|
15E61D3C000
|
unkown
|
page read and write
|
|
|
|
61FB9FD000
|
unkown
|
page read and write
|
|
|
|
2814000
|
unkown
|
page readonly
|
|
|
|
3DD8000
|
unkown
|
page read and write
|
|
|
|
7FF556435000
|
unkown
|
page readonly
|
|
|
|
3030000
|
unkown
|
page read and write
|
|
|
|
222D000
|
unkown
|
page read and write
|
|
|
|
21846E8D000
|
unkown
|
page read and write
|
|
|
|
1AC82F70000
|
unkown
|
page read and write
|
|
|
|
A38000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E6E000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
505000
|
unkown image
|
page write copy
|
|
|
|
1F05FC89000
|
unkown
|
page read and write
|
|
|
|
7FF5248E8000
|
unkown
|
page readonly
|
|
|
|
3CB5000
|
unkown
|
page read and write
|
|
|
|
338137E000
|
unkown
|
page read and write
|
|
|
|
2E4E000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
2810000
|
unkown
|
page readonly
|
|
|
|
15E61C9B000
|
unkown
|
page read and write
|
|
|
|
7FF5B73FC000
|
unkown
|
page readonly
|
|
|
|
2ED5000
|
unkown
|
page read and write
|
|
|
|
27F3000
|
unkown
|
page read and write
|
|
|
|
7FF5833AA000
|
unkown
|
page readonly
|
|
|
|
503E000
|
unkown
|
page read and write
|
|
|
|
15E64110000
|
unkown
|
page read and write
|
|
|
|
2DFC3C28000
|
unkown
|
page read and write
|
|
|
|
7FF556385000
|
unkown
|
page readonly
|
|
|
|
27CC000
|
unkown
|
page read and write
|
|
|
|
15E61CC2000
|
unkown
|
page read and write
|
|
|
|
59F0000
|
unkown
|
page readonly
|
|
|
|
2184C7B0000
|
unkown
|
page readonly
|
|
|
|
7FF5DA5B9000
|
unkown
|
page readonly
|
|
|
|
2184C24C000
|
unkown
|
page read and write
|
|
|
|
E4C337B000
|
unkown
|
page read and write
|
|
|
|
143D6429000
|
unkown
|
page read and write
|
|
|
|
746000
|
unkown
|
page read and write
|
|
|
|
78E000
|
unkown
|
page read and write
|
|
|
|
3CE5000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4C2000
|
unkown
|
page readonly
|
|
|
|
7FF5DA545000
|
unkown
|
page readonly
|
|
|
|
2EC6000
|
unkown
|
page read and write
|
|
|
|
2806000
|
unkown
|
page readonly
|
|
|
|
7FF5393A2000
|
unkown
|
page readonly
|
|
|
|
3DE3000
|
unkown
|
page read and write
|
|
|
|
21847758000
|
unkown
|
page read and write
|
|
|
|
15E63CAD000
|
unkown
|
page read and write
|
|
|
|
2210000
|
unkown
|
page read and write
|
|
|
|
27CC000
|
unkown
|
page read and write
|
|
|
|
E63307E000
|
unkown
|
page read and write
|
|
|
|
27C1000
|
unkown
|
page readonly
|
|
|
|
772000
|
unkown
|
page read and write
|
|
|
|
2D40000
|
heap private
|
page read and write
|
|
|
|
7FF54AD8F000
|
unkown
|
page readonly
|
|
|
|
2E72000
|
unkown
|
page read and write
|
|
|
|
4C6000
|
unkown image
|
page readonly
|
|
|
|
510000
|
unkown
|
page readonly
|
|
|
|
2E67000
|
unkown
|
page read and write
|
|
|
|
2B50000
|
unkown
|
page readonly
|
|
|
|
30BF47B000
|
unkown
|
page read and write
|
|
|
|
143D63D0000
|
unkown
|
page readonly
|
|
|
|
A39000
|
unkown
|
page read and write
|
|
|
|
2ECC000
|
unkown
|
page read and write
|
|
|
|
30BF87D000
|
unkown
|
page read and write
|
|
|
|
3CE7000
|
unkown
|
page read and write
|
|
|
|
21CEB02D000
|
unkown
|
page read and write
|
|
|
|
768000
|
heap default
|
page read and write
|
|
|
|
2330000
|
unkown
|
page readonly
|
|
|
|
283B000
|
unkown
|
page read and write
|
|
|
|
E6332FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B7417000
|
unkown
|
page readonly
|
|
|
|
28D8000
|
unkown
|
page readonly
|
|
|
|
30BF27F000
|
unkown
|
page read and write
|
|
|
|
2184C540000
|
unkown
|
page read and write
|
|
|
|
3D1A000
|
unkown
|
page read and write
|
|
|
|
7FF5E0FD2000
|
unkown
|
page readonly
|
|
|
|
7FF52D2F6000
|
unkown
|
page readonly
|
|
|
|
520000
|
heap default
|
page read and write
|
|
|
|
3E04000
|
unkown
|
page read and write
|
|
|
|
7FF538FCD000
|
unkown
|
page readonly
|
|
|
|
15E63C42000
|
unkown
|
page read and write
|
|
|
|
21846E7D000
|
unkown
|
page read and write
|
|
|
|
2184C1F0000
|
unkown
|
page read and write
|
|
|
|
93B000
|
stack
|
page read and write
|
|
|
|
21846DD0000
|
unkown
|
page readonly
|
|
|
|
2C8E000
|
unkown
|
page read and write
|
|
|
|
7FF5E1064000
|
unkown
|
page readonly
|
|
|
|
7FF5E0E99000
|
unkown
|
page readonly
|
|
|
|
2E62000
|
unkown
|
page read and write
|
|
|
|
21846C80000
|
heap private
|
page read and write
|
|
|
|
505000
|
unkown image
|
page write copy
|
|
|
|
237C000
|
heap private
|
page read and write
|
|
|
|
7FF582C41000
|
unkown
|
page readonly
|
|
|
|
40F000
|
unkown image
|
page readonly
|
|
|
|
18A000
|
stack
|
page read and write
|
|
|
|
7FF54ADE4000
|
unkown
|
page readonly
|
|
|
|
15E64410000
|
unkown
|
page read and write
|
|
|
|
15E63A40000
|
unkown
|
page read and write
|
|
|
|
7FF52482C000
|
unkown
|
page readonly
|
|
|
|
3CC6000
|
unkown
|
page read and write
|
|
|
|
7FF4EEF3C000
|
unkown
|
page readonly
|
|
|
|
A39000
|
unkown
|
page read and write
|
|
|
|
27C9000
|
unkown
|
page read and write
|
|
|
|
3CFA000
|
unkown
|
page read and write
|
|
|
|
21CEB059000
|
unkown
|
page read and write
|
|
|
|
7FF55627F000
|
unkown
|
page readonly
|
|
|
|
2E99000
|
unkown
|
page read and write
|
|
|
|
B5CA87E000
|
unkown
|
page read and write
|
|
|
|
7FF52D282000
|
unkown
|
page readonly
|
|
|
|
2320000
|
unkown
|
page readonly
|
|
|
|
82D000
|
heap default
|
page read and write
|
|
|
|
2EC1000
|
unkown
|
page read and write
|
|
|
|
2D129918000
|
unkown
|
page read and write
|
|
|
|
7FF5B70F3000
|
unkown
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page readonly
|
|
|
|
7FF5248DC000
|
unkown
|
page readonly
|
|
|
|
9A0000
|
unkown
|
page read and write
|
|
|
|
15E63CC6000
|
unkown
|
page read and write
|
|
|
|
71B000
|
heap default
|
page read and write
|
|
|
|
19B000
|
stack
|
page read and write
|
|
|
|
27B6000
|
unkown
|
page readonly
|
|
|
|
7FF524AE5000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
222D8000000
|
unkown
|
page read and write
|
|
|
|
7FF4EEECA000
|
unkown
|
page readonly
|
|
|
|
1F05FD08000
|
unkown
|
page read and write
|
|
|
|
9DF000
|
stack
|
page read and write
|
|
|
|
1DF6B170000
|
heap private
|
page read and write
|
|
|
|
C6438EB000
|
unkown
|
page read and write
|
|
|
|
68E000
|
unkown
|
page read and write
|
|
|
|
3CAE000
|
unkown
|
page read and write
|
|
|
|
7FF54AD56000
|
unkown
|
page readonly
|
|
|
|
15E63A50000
|
heap private
|
page read and write
|
|
|
|
15E65082000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4B0000
|
unkown
|
page readonly
|
|
|
|
7FF5DA42C000
|
unkown
|
page readonly
|
|
|
|
7FF53936A000
|
unkown
|
page readonly
|
|
|
|
15E61D1C000
|
unkown
|
page read and write
|
|
|
|
21CEB07D000
|
unkown
|
page read and write
|
|
|
|
2408000
|
unkown
|
page readonly
|
|
|
|
7FF5393DF000
|
unkown
|
page readonly
|
|
|
|
2E9A000
|
unkown
|
page read and write
|
|
|
|
15E61CD3000
|
unkown
|
page read and write
|
|
|
|
21CEB079000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4EE000
|
unkown
|
page readonly
|
|
|
|
338197E000
|
unkown
|
page read and write
|
|
|
|
2184C6A0000
|
unkown
|
page read and write
|
|
|
|
7FF524B44000
|
unkown
|
page readonly
|
|
|
|
3DE1000
|
unkown
|
page read and write
|
|
|
|
223C000
|
unkown
|
page read and write
|
|
|
|
15E63C71000
|
unkown
|
page read and write
|
|
|
|
7FF54AC1A000
|
unkown
|
page readonly
|
|
|
|
2E6A000
|
unkown
|
page read and write
|
|
|
|
572CAFE000
|
unkown
|
page read and write
|
|
|
|
3CC3000
|
unkown
|
page read and write
|
|
|
|
30BEDDB000
|
unkown
|
page read and write
|
|
|
|
21846E8F000
|
unkown
|
page read and write
|
|
|
|
21846E78000
|
unkown
|
page read and write
|
|
|
|
1D357300000
|
unkown
|
page read and write
|
|
|
|
21CEB029000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4F5000
|
unkown
|
page readonly
|
|
|
|
222D7F90000
|
unkown
|
page readonly
|
|
|
|
21CEB083000
|
unkown
|
page read and write
|
|
|
|
1F05FC2A000
|
unkown
|
page read and write
|
|
|
|
15E65000000
|
unkown
|
page read and write
|
|
|
|
7FF524B1C000
|
unkown
|
page readonly
|
|
|
|
7FF54AC87000
|
unkown
|
page readonly
|
|
|
|
A39000
|
unkown
|
page read and write
|
|
|
|
2385000
|
unkown
|
page readonly
|
|
|
|
7FF556497000
|
unkown
|
page readonly
|
|
|
|
15E63E12000
|
unkown
|
page read and write
|
|
|
|
2DFC3C89000
|
unkown
|
page read and write
|
|
|
|
75E000
|
unkown
|
page read and write
|
|
|
|
2E52000
|
unkown
|
page read and write
|
|
|
|
414000
|
unkown image
|
page readonly
|
|
|
|
2DFC3C4E000
|
unkown
|
page read and write
|
|
|
|
2340000
|
unkown
|
page read and write
|
|
|
|
FBE000
|
stack
|
page read and write
|
|
|
|
A4B000
|
unkown
|
page read and write
|
|
|
|
2184C610000
|
unkown
|
page read and write
|
|
|
|
2184C2B6000
|
unkown
|
page read and write
|
|
|
|
21CEB058000
|
unkown
|
page read and write
|
|
|
|
7FF524A8C000
|
unkown
|
page readonly
|
|
|
|
50A000
|
unkown image
|
page read and write
|
|
|
|
2EC9000
|
unkown
|
page read and write
|
|
|
|
3DE5000
|
unkown
|
page read and write
|
|
|
|
15E65002000
|
unkown
|
page read and write
|
|
|
|
278000
|
unkown
|
page read and write
|
|
|
|
512000
|
unkown image
|
page readonly
|
|
|
|
5080000
|
unkown
|
page readonly
|
|
|
|
7FF5B7392000
|
unkown
|
page readonly
|
|
|
|
143D64CC000
|
unkown
|
page read and write
|
|
|
|
127AC613000
|
unkown
|
page read and write
|
|
|
|
2298F1C0000
|
unkown
|
page read and write
|
|
|
|
15E636F0000
|
unkown
|
page readonly
|
|
|
|
4D80000
|
unkown
|
page read and write
|
|
|
|
15E61E00000
|
unkown
|
page write copy
|
|
|
|
1F05FD00000
|
unkown
|
page read and write
|
|
|
|
7FF5DA3C7000
|
unkown
|
page readonly
|
|
|
|
27C0000
|
unkown
|
page read and write
|
|
|
|
C918C7E000
|
unkown
|
page read and write
|
|
|
|
61FB7FE000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown
|
page read and write
|
|
|
|
2D12B702000
|
unkown
|
page read and write
|
|
|
|
7FF5392A7000
|
unkown
|
page readonly
|
|
|
|
220D000
|
unkown
|
page read and write
|
|
|
|
2D1D000
|
stack
|
page read and write
|
|
|
|
7FF5DA4F5000
|
unkown
|
page readonly
|
|
|
|
5110000
|
unkown
|
page read and write
|
|
|
|
143D6470000
|
unkown
|
page read and write
|
|
|
|
7FF54AE3E000
|
unkown
|
page readonly
|
|
|
|
2D129800000
|
unkown
|
page read and write
|
|
|
|
670000
|
heap default
|
page read and write
|
|
|
|
21846E9F000
|
unkown
|
page read and write
|
|
|
|
15E61C72000
|
unkown
|
page read and write
|
|
|
|
27D8000
|
unkown
|
page readonly
|
|
|
|
1AC83660000
|
unkown
|
page readonly
|
|
|
|
7FF539434000
|
unkown
|
page readonly
|
|
|
|
3DFA000
|
unkown
|
page read and write
|
|
|
|
21CD000
|
unkown
|
page read and write
|
|
|
|
7FF5DA18F000
|
unkown
|
page readonly
|
|
|
|
7FF583430000
|
unkown
|
page readonly
|
|
|
|
21CEAF60000
|
unkown
|
page read and write
|
|
|
|
A3D000
|
unkown
|
page read and write
|
|
|
|
15E63C1F000
|
unkown
|
page read and write
|
|
|
|
2D45000
|
heap private
|
page read and write
|
|
|
|
3CA7000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE06000
|
unkown
|
page readonly
|
|
|
|
1D357A00000
|
unkown
|
page readonly
|
|
|
|
27C9000
|
unkown
|
page read and write
|
|
|
|
2298F350000
|
unkown
|
page readonly
|
|
|
|
A5F000
|
unkown
|
page read and write
|
|
|
|
E4C357F000
|
unkown
|
page read and write
|
|
|
|
7FF5563F2000
|
unkown
|
page readonly
|
|
|
|
A40000
|
unkown
|
page read and write
|
|
|
|
19C000
|
stack
|
page read and write
|
|
|
|
7FF583427000
|
unkown
|
page readonly
|
|
|
|
7FF51B386000
|
unkown
|
page readonly
|
|
|
|
21847600000
|
unkown
|
page read and write
|
|
|
|
10332000
|
unkown
|
page read and write
|
|
|
|
2E5D000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D85000
|
unkown
|
page readonly
|
|
|
|
7DFAFBE86000
|
unkown
|
page readonly
|
|
|
|
3D8E000
|
unkown
|
page read and write
|
|
|
|
7FF5248FA000
|
unkown
|
page readonly
|
|
|
|
E6330FE000
|
unkown
|
page read and write
|
|
|
|
7FF539427000
|
unkown
|
page readonly
|
|
|
|
2F70000
|
unkown
|
page readonly
|
|
|
|
15E61C9C000
|
unkown
|
page read and write
|
|
|
|
A50000
|
heap default
|
page read and write
|
|
|
|
1D357D40000
|
unkown
|
page readonly
|
|
|
|
7FF5E0F3C000
|
unkown
|
page readonly
|
|
|
|
2D12B602000
|
unkown
|
page read and write
|
|
|
|
61FBEFF000
|
unkown
|
page read and write
|
|
|
|
15E64110000
|
unkown
|
page read and write
|
|
|
|
7FF51AC0D000
|
unkown
|
page readonly
|
|
|
|
21847713000
|
unkown
|
page read and write
|
|
|
|
4C90000
|
unkown
|
page readonly
|
|
|
|
7FF53911C000
|
unkown
|
page readonly
|
|
|
|
1D357308000
|
unkown
|
page read and write
|
|
|
|
7FF556494000
|
unkown
|
page readonly
|
|
|
|
4C6000
|
unkown image
|
page readonly
|
|
|
|
127AC510000
|
heap default
|
page read and write
|
|
|
|
7FF524BA1000
|
unkown
|
page readonly
|
|
|
|
2C80000
|
heap default
|
page read and write
|
|
|
|
15E63EA4000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDF0000
|
unkown
|
page readonly
|
|
|
|
7FF583499000
|
unkown
|
page readonly
|
|
|
|
7FF539288000
|
unkown
|
page readonly
|
|
|
|
2D129870000
|
unkown
|
page read and write
|
|
|
|
2B0E000
|
stack
|
page read and write
|
|
|
|
2BA9000
|
stack
|
page read and write
|
|
|
|
143D6220000
|
unkown
|
page readonly
|
|
|
|
61FB6FC000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF583160000
|
unkown
|
page readonly
|
|
|
|
2DFC3C6C000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
27F4000
|
unkown
|
page read and write
|
|
|
|
7FF5393FD000
|
unkown
|
page readonly
|
|
|
|
7A9C000
|
unkown
|
page read and write
|
|
|
|
23F4000
|
unkown
|
page readonly
|
|
|
|
7FF5563E8000
|
unkown
|
page readonly
|
|
|
|
3CBF000
|
unkown
|
page read and write
|
|
|
|
15E63CDA000
|
unkown
|
page read and write
|
|
|
|
2184C570000
|
unkown
|
page read and write
|
|
|
|
1F05FC13000
|
unkown
|
page read and write
|
|
|
|
7FF4FF9EA000
|
unkown
|
page readonly
|
|
|
|
2EA3000
|
unkown
|
page read and write
|
|
|
|
2832000
|
unkown
|
page readonly
|
|
|
|
7FF5E0F35000
|
unkown
|
page readonly
|
|
|
|
A545FF000
|
unkown
|
page read and write
|
|
|
|
3CCE000
|
unkown
|
page read and write
|
|
|
|
2184C680000
|
unkown
|
page read and write
|
|
|
|
1D35724F000
|
unkown
|
page read and write
|
|
|
|
15E63C54000
|
unkown
|
page read and write
|
|
|
|
2944000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
7FF583351000
|
unkown
|
page readonly
|
|
|
|
2380000
|
unkown
|
page readonly
|
|
|
|
2241000
|
unkown
|
page read and write
|
|
|
|
B1A000
|
heap private
|
page read and write
|
|
|
|
2D1298DB000
|
unkown
|
page read and write
|
|
|
|
27CE000
|
unkown
|
page read and write
|
|
|
|
7FF583499000
|
unkown
|
page readonly
|
|
|
|
7FF4EEF1E000
|
unkown
|
page readonly
|
|
|
|
A31000
|
unkown
|
page read and write
|
|
|
|
2E5E000
|
unkown
|
page read and write
|
|
|
|
30BF1FB000
|
unkown
|
page read and write
|
|
|
|
7FF5E100F000
|
unkown
|
page readonly
|
|
|
|
2D129780000
|
unkown
|
page readonly
|
|
|
|
4C0D000
|
unkown
|
page read and write
|
|
|
|
1D35724B000
|
unkown
|
page read and write
|
|
|
|
AA7000
|
unkown
|
page read and write
|
|
|
|
9E0000
|
unkown
|
page read and write
|
|
|
|
E6333FB000
|
unkown
|
page read and write
|
|
|
|
15E63C34000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E90000
|
unkown
|
page readonly
|
|
|
|
7FF4FFCBE000
|
unkown
|
page readonly
|
|
|
|
7FF4EF5B9000
|
unkown
|
page readonly
|
|
|
|
F1859FB000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3CE5000
|
unkown
|
page read and write
|
|
|
|
7FF52434D000
|
unkown
|
page readonly
|
|
|
|
127ACCB0000
|
unkown
|
page read and write
|
|
|
|
283B000
|
unkown
|
page read and write
|
|
|
|
222E000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE02000
|
unkown
|
page readonly
|
|
|
|
7FF54ADAD000
|
unkown
|
page readonly
|
|
|
|
7FF5B73BE000
|
unkown
|
page readonly
|
|
|
|
C918F77000
|
unkown
|
page read and write
|
|
|
|
15E61CC0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA1EE000
|
unkown
|
page readonly
|
|
|
|
2E66000
|
unkown
|
page read and write
|
|
|
|
2740000
|
unkown
|
page readonly
|
|
|
|
2ECF000
|
unkown
|
page read and write
|
|
|
|
7FF583437000
|
unkown
|
page readonly
|
|
|
|
26F0000
|
unkown
|
page readonly
|
|
|
|
7FF52D193000
|
unkown
|
page readonly
|
|
|
|
2370000
|
heap private
|
page read and write
|
|
|
|
21CEB03D000
|
unkown
|
page read and write
|
|
|
|
7FF54AD40000
|
unkown
|
page readonly
|
|
|
|
26B7000
|
unkown
|
page readonly
|
|
|
|
2F02000
|
unkown
|
page read and write
|
|
|
|
338127E000
|
unkown
|
page read and write
|
|
|
|
21CEB045000
|
unkown
|
page read and write
|
|
|
|
1D357257000
|
unkown
|
page read and write
|
|
|
|
9BF000
|
stack
|
page read and write
|
|
|
|
2330000
|
unkown
|
page read and write
|
|
|
|
3FD0000
|
unkown
|
page read and write
|
|
|
|
7FF5E0FC2000
|
unkown
|
page readonly
|
|
|
|
27DF000
|
unkown
|
page readonly
|
|
|
|
239A000
|
unkown
|
page readonly
|
|
|
|
7FF5833A8000
|
unkown
|
page readonly
|
|
|
|
231D000
|
unkown
|
page read and write
|
|
|
|
27FA000
|
unkown
|
page readonly
|
|
|
|
217E000
|
unkown
|
page readonly
|
|
|
|
2D12995A000
|
unkown
|
page read and write
|
|
|
|
1AC83802000
|
unkown
|
page read and write
|
|
|
|
7FF5B73D9000
|
unkown
|
page readonly
|
|
|
|
7FF52D10F000
|
unkown
|
page readonly
|
|
|
|
15E61C76000
|
unkown
|
page read and write
|
|
|
|
7FF4EEEC8000
|
unkown
|
page readonly
|
|
|
|
7FF5E0DFC000
|
unkown
|
page readonly
|
|
|
|
7FF524B35000
|
unkown
|
page readonly
|
|
|
|
7FF5391CC000
|
unkown
|
page readonly
|
|
|
|
A3E000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E4F000
|
unkown
|
page readonly
|
|
|
|
2360000
|
heap private
|
page read and write
|
|
|
|
C91907F000
|
unkown
|
page read and write
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
2357000
|
unkown
|
page readonly
|
|
|
|
7FF4EF4FF000
|
unkown
|
page readonly
|
|
|
|
2E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E08000
|
unkown
|
page readonly
|
|
|
|
143D6FA0000
|
unkown
|
page readonly
|
|
|
|
2D12B820000
|
unkown
|
page read and write
|
|
|
|
7FF539430000
|
unkown
|
page readonly
|
|
|
|
2184C224000
|
unkown
|
page read and write
|
|
|
|
7FF54AE49000
|
unkown
|
page readonly
|
|
|
|
7FF524AB8000
|
unkown
|
page readonly
|
|
|
|
7FF5E0CCD000
|
unkown
|
page readonly
|
|
|
|
1AC83200000
|
unkown
|
page readonly
|
|
|
|
6D0000
|
heap default
|
page read and write
|
|
|
|
640000
|
unkown
|
page read and write
|
|
|
|
2EB0000
|
unkown
|
page readonly
|
|
|
|
27C9000
|
unkown
|
page read and write
|
|
|
|
15E63AD0000
|
unkown
|
page readonly
|
|
|
|
7FF5832A7000
|
unkown
|
page readonly
|
|
|
|
15E63C9C000
|
unkown
|
page read and write
|
|
|
|
504000
|
unkown
|
page read and write
|
|
|
|
15E63E77000
|
unkown
|
page read and write
|
|
|
|
21846E73000
|
unkown
|
page read and write
|
|
|
|
2184C23F000
|
unkown
|
page read and write
|
|
|
|
21846E9F000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page readonly
|
|
|
|
B00000
|
unkown
|
page readonly
|
|
|
|
A85000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD31000
|
unkown
|
page readonly
|
|
|
|
7FF54AD42000
|
unkown
|
page readonly
|
|
|
|
21CEB03B000
|
unkown
|
page read and write
|
|
|
|
194000
|
stack
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2E58000
|
unkown
|
page read and write
|
|
|
|
7FF539155000
|
unkown
|
page readonly
|
|
|
|
1DF6B213000
|
unkown
|
page read and write
|
|
|
|
2184C780000
|
unkown
|
page read and write
|
|
|
|
2184C6A0000
|
unkown
|
page readonly
|
|
|
|
1AC8306E000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
heap default
|
page read and write
|
|
|
|
2227000
|
unkown
|
page read and write
|
|
|
|
27C9000
|
unkown
|
page read and write
|
|
|
|
2E74000
|
unkown
|
page read and write
|
|
|
|
21847759000
|
unkown
|
page read and write
|
|
|
|
2E71000
|
unkown
|
page read and write
|
|
|
|
61FBBFF000
|
unkown
|
page read and write
|
|
|
|
7BE000
|
unkown
|
page read and write
|
|
|
|
2D129829000
|
unkown
|
page read and write
|
|
|
|
2235000
|
unkown
|
page readonly
|
|
|
|
61FBCFF000
|
unkown
|
page read and write
|
|
|
|
527000
|
heap default
|
page read and write
|
|
|
|
15E64010000
|
unkown
|
page read and write
|
|
|
|
21846F07000
|
unkown
|
page read and write
|
|
|
|
21846CE0000
|
heap default
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
6B0000
|
unkown
|
page read and write
|
|
|
|
2190000
|
unkown
|
page readonly
|
|
|
|
C64396F000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4B2000
|
unkown
|
page readonly
|
|
|
|
7FF53921F000
|
unkown
|
page readonly
|
|
|
|
10023000
|
unkown
|
page readonly
|
|
|
|
7FF51B34E000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown
|
page read and write
|
|
|
|
27EB000
|
unkown
|
page read and write
|
|
|
|
1D35727B000
|
unkown
|
page read and write
|
|
|
|
A78000
|
unkown
|
page read and write
|
|
|
|
15E61E50000
|
unkown
|
page readonly
|
|
|
|
21CEB076000
|
unkown
|
page read and write
|
|
|
|
21847702000
|
unkown
|
page read and write
|
|
|
|
7FF524B9E000
|
unkown
|
page readonly
|
|
|
|
7FF5E0D4C000
|
unkown
|
page readonly
|
|
|
|
7FF54AE49000
|
unkown
|
page readonly
|
|
|
|
27DB000
|
unkown
|
page read and write
|
|
|
|
7FF58336A000
|
unkown
|
page readonly
|
|
|
|
7FF5DA5B9000
|
unkown
|
page readonly
|
|
|
|
7FF55646C000
|
unkown
|
page readonly
|
|
|
|
C91890B000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
530000
|
unkown
|
page readonly
|
|
|
|
2E52000
|
unkown
|
page read and write
|
|
|
|
127AC5F0000
|
unkown
|
page readonly
|
|
|
|
7FF539200000
|
unkown
|
page readonly
|
|
|
|
15E65082000
|
unkown
|
page read and write
|
|
|
|
AFF000
|
stack
|
page read and write
|
|
|
|
7FF52D2BE000
|
unkown
|
page readonly
|
|
|
|
2D12C010000
|
unkown
|
page read and write
|
|
|
|
7FF52485E000
|
unkown
|
page readonly
|
|
|
|
2298F530000
|
heap private
|
page read and write
|
|
|
|
E4C2D7E000
|
unkown
|
page read and write
|
|
|
|
C01000
|
unkown image
|
page readonly
|
|
|
|
10332000
|
unkown
|
page read and write
|
|
|
|
10338000
|
unkown
|
page read and write
|
|
|
|
504000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C05000
|
unkown
|
page readonly
|
|
|
|
7FF5E1031000
|
unkown
|
page readonly
|
|
|
|
7FF58340C000
|
unkown
|
page readonly
|
|
|
|
7FF5DA526000
|
unkown
|
page readonly
|
|
|
|
7FF5E0DEB000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
3CC4000
|
unkown
|
page read and write
|
|
There are 2004 hidden memdumps, click here to show them.