Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
N1yprTBBXs.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
|
UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6272167835D47591.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6272167835D47591.exe:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611970727133.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Cookies1611970726289
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Cookies1611970737289
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eklhijcdkfafgjlcdgmbboagmpekiefg\1.0.0.0_0\background.js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eklhijcdkfafgjlcdgmbboagmpekiefg\1.0.0.0_0\book.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eklhijcdkfafgjlcdgmbboagmpekiefg\1.0.0.0_0\icon.png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eklhijcdkfafgjlcdgmbboagmpekiefg\1.0.0.0_0\icon48.png
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eklhijcdkfafgjlcdgmbboagmpekiefg\1.0.0.0_0\jquery-1.8.3.min.js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eklhijcdkfafgjlcdgmbboagmpekiefg\1.0.0.0_0\manifest.json
|
ASCII text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eklhijcdkfafgjlcdgmbboagmpekiefg\1.0.0.0_0\popup.html
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eklhijcdkfafgjlcdgmbboagmpekiefg\1.0.0.0_0\popup.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611970726180
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611970737242
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611970728399
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611970730398
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\MSI1983.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\MiniThunderPlatform.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\atl71.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\dl_peer_id.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\download_engine.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\msvcp71.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\msvcr71.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\zlib1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\ecv37E8.tmp
|
Extensible storage engine DataBase, version 0x620, checksum 0xe7583a04, page size 32768, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\gdiview.msi
|
;1033
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\xldl.dat
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\xldl.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Web Data1611970737586
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\crx.7z
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\crx.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Localwebdata1611970737633
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611970727133.txt
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Cookies1611969864637
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Cookies1611969903678
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgbhlbickleeahcekelaihlhilcoplad\1.0.0.0_0\background.js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgbhlbickleeahcekelaihlhilcoplad\1.0.0.0_0\book.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgbhlbickleeahcekelaihlhilcoplad\1.0.0.0_0\icon.png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgbhlbickleeahcekelaihlhilcoplad\1.0.0.0_0\icon48.png
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgbhlbickleeahcekelaihlhilcoplad\1.0.0.0_0\jquery-1.8.3.min.js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgbhlbickleeahcekelaihlhilcoplad\1.0.0.0_0\manifest.json
|
ASCII text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgbhlbickleeahcekelaihlhilcoplad\1.0.0.0_0\popup.html
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgbhlbickleeahcekelaihlhilcoplad\1.0.0.0_0\popup.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611969864637
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611969903631
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611969865778
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611969896866
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\MSIE145.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\ecvFD59.tmp
|
Extensible storage engine DataBase, version 0x620, checksum 0xfccd3eb0, page size 32768, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Web Data1611969904131
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Localwebdata1611969904225
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611969895131.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611969895131.txt
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
|
There are 48 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\N1yprTBBXs.exe
|
'C:\Users\user\Desktop\N1yprTBBXs.exe'
|
|
|
|
C:\Users\user\AppData\Local\Temp\6272167835D47591.exe
|
C:\Users\user\AppData\Local\Temp\6272167835D47591.exe 0011 user01
|
|
|
|
C:\Users\user\AppData\Local\Temp\6272167835D47591.exe
|
C:\Users\user\AppData\Local\Temp\6272167835D47591.exe 200 user01
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd /c ping 127.0.0.1 -n 3 & del 'C:\Users\user\Desktop\N1yprTBBXs.exe'
|
|
|
|
C:\Windows\SysWOW64\PING.EXE
|
ping 127.0.0.1 -n 3
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /c taskkill /f /im chrome.exe
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd /c ping 127.0.0.1 -n 3 & del 'C:\Users\user\AppData\Local\Temp\6272167835D47591.exe'
|
|
|
|
C:\Windows\SysWOW64\PING.EXE
|
ping 127.0.0.1 -n 3
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd /c ping 127.0.0.1 -n 3 & del 'C:\Users\user\AppData\Local\Temp\6272167835D47591.exe'
|
|
|
|
C:\Windows\SysWOW64\PING.EXE
|
ping 127.0.0.1 -n 3
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
msiexec.exe /i 'C:\Users\user\AppData\Local\Temp\gdiview.msi'
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding 0B37D2846804C02059732A6A10D93625 C
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Users\user\AppData\Roaming\1611970727133.exe
|
'C:\Users\user\AppData\Roaming\1611970727133.exe' /sjson 'C:\Users\user\AppData\Roaming\1611970727133.txt'
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\taskkill.exe
|
taskkill /f /im chrome.exe
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe ThunderFW 'C:\Users\user\AppData\Local\Temp\download\MiniThunderPlatform.exe'
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding 47001C74A82A95AF6290BD5DE31B19AD C
|
|
|
|
C:\Users\user\AppData\Roaming\1611969895131.exe
|
'C:\Users\user\AppData\Roaming\1611969895131.exe' /sjson 'C:\Users\user\AppData\Roaming\1611969895131.txt'
|
|
There are 11 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/scripttemplate
|
unknown
|
|
|
|
https://duckduckgo.com/chrome_newtab
|
unknown
|
|
|
|
https://duckduckgo.com/ac/?q=
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/g
|
104.21.23.16
|
|
|
|
https://www.messenger.com/
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=chrom322;cat=chrom01g;ord=58648497779
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/e
|
104.21.23.16
|
|
|
|
https://cvision.media.net/new/286x175/2/75/95/36/612b163a-ff7b-498a-bad2-3c52bbd2c504.jpg?v=9
|
unknown
|
|
|
|
https://cvision.media.net/new/286x175/2/57/35/144/83ebc513-f6d1-4e0e-a39a-bef975147e85.jpg?v=9
|
unknown
|
|
|
|
http://www.msn.com
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/w
|
104.21.23.16
|
|
|
|
http://www.nirsoft.net
|
unknown
|
|
|
|
https://deff.nelreports.net/api/report?cat=msn
|
unknown
|
|
|
|
https://A5D4CE54CC78B3CA.xyz/
|
unknown
|
|
|
|
https://contextual.media.net/__media__/js/util/nrrV9140.js
|
unknown
|
|
|
|
https://twitter.com/ookie:
|
unknown
|
|
|
|
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meCore.min.js
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/r
|
104.21.23.16
|
|
|
|
https://twitter.comsec-fetch-dest:
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCc13122162a9a46c3b4cbf05ffccde0f
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=1;num=3931852
|
unknown
|
|
|
|
http://ocsp.pki.goog/gts1o1core0
|
unknown
|
|
|
|
http://www.msn.com/?ocid=iehp
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCee0d4d5fd4424c8390d703b105f82c3
|
unknown
|
|
|
|
http://crl.pki.goog/GTS1O1core.crl0
|
unknown
|
|
|
|
http://images.outbrainimg.com/transform/v3/eyJpdSI6IjE4MmE0M2M0MDY3OGU1N2E4MjhkM2NjNDdlNGMzZmNkYjU1N
|
unknown
|
|
|
|
https://www.messenger.com
|
unknown
|
|
|
|
http://www.nirsoft.net/
|
unknown
|
|
|
|
http://84cfba021a5a6662.xy/info_old/w
|
104.21.23.16
|
|
|
|
http://ocsp.pki.goog/GTSGIAG30
|
unknown
|
|
|
|
https://www.instagram.com/graphql/query/?query_hash=149bef52a3b2af88c0fec37913fe1cbc&variables=%7B%2
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.jsoncommand=FINALIZE&media_id=
|
unknown
|
|
|
|
https://www.instagram.com/
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/soap/encoding/
|
unknown
|
|
|
|
http://www.xunlei.com/GET
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC5bdddb231cf54f958a5b6e76e9d8eee
|
unknown
|
|
|
|
https://optanon.blob.core.windows.net/skins/4.1.0/default_flat_top_two_button_black/v2/css/optanon.c
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json%dcommand=INIT&total_bytes=&media_type=image%2Fjpeg&me
|
unknown
|
|
|
|
http://images.outbrainimg.com/transform/v3/eyJpdSI6ImY3MDA1MDJkMTdmZDY0M2VkZTBjNzg5MTE1OWEyYTYxMWRiN
|
unknown
|
|
|
|
https://www.messenger.com/origin:
|
unknown
|
|
|
|
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
|
unknown
|
|
|
|
http://pki.goog/gsr2/GTS1O1.crt0
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
|
|
|
https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml
|
unknown
|
|
|
|
https://contextual.media.net/
|
unknown
|
|
|
|
http://ocsp.pki.goog/gsr202
|
unknown
|
|
|
|
https://optanon.blob.core.windows.net/skins/4.1.0/default_flat_top_two_button_black/v2/images/cookie
|
unknown
|
|
|
|
https://pki.goog/repository/0
|
unknown
|
|
|
|
https://mem.gfx.ms/meversion?partner=RetailStore2&market=en-us&uhf=1
|
unknown
|
|
|
|
https://api.twitter.com/1.1/statuses/update.json
|
unknown
|
|
|
|
https://cvision.media.net/new/300x300/3/167/174/27/39ab3103-8560-4a55-bfc4-401f897cf6f2.jpg?v=9
|
unknown
|
|
|
|
http://www.msn.com/
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json
|
unknown
|
|
|
|
https://www.cloudflare.com/5xx-error-landing
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC828bc1cde9f04b788c98b5423157734
|
unknown
|
|
|
|
https://twitter.com/compose/tweetsec-fetch-mode:
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/w
|
unknown
|
|
|
|
https://www.messenger.com/accept:
|
unknown
|
|
|
|
http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/consent/55a804
|
unknown
|
|
|
|
https://contextual.media.net/803288796/fcmain.js?&gdpr=0&cid=8CU157172&cpcd=pC3JHgSCqY8UHihgrvGr0A%3
|
unknown
|
|
|
|
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meBoot.min.js
|
unknown
|
|
|
|
https://contextual.media.net/48/nrrV18753.js
|
unknown
|
|
|
|
http://crl.pki.goog/gsr2/gsr2.crl0?
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/g
|
unknown
|
|
|
|
http://pki.goog/gsr2/GTSGIAG3.crt0)
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json?command=APPEND&media_id=%s&segment_index=0
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
|
|
https://www.messenger.comhttps://www.messenger.com/login/nonce/ookie:
|
unknown
|
|
|
|
http://www.xunlei.com/
|
unknown
|
|
|
|
http://pki.goog/gsr2/GTS1O1.crt0#
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/ddd
|
104.21.23.16
|
|
|
|
https://aefd.nelreports.net/api/report?cat=bingth
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json?command=APPEND&media_id=%s&segment_index=0accept:
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/soap/envelope/
|
unknown
|
|
|
|
https://exchangework%04d%02d%02d.xyz/http://changenewsys%04d%02d%02d.xyz/post_info.
|
unknown
|
|
|
|
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
unknown
|
|
|
|
https://assets.adobedtm.com/launch-EN7b3d710ac67a4a1195648458258f97dd.min.js
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCfd484f9188564713bbc5d13d862ebbf
|
unknown
|
|
|
|
https://duckduckgo.com/chrome_newtabH
|
unknown
|
|
|
|
https://curl.haxx.se/docs/http-cookies.html
|
unknown
|
|
|
|
http://www.openssl.org/support/faq.html
|
unknown
|
|
|
|
https://images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_333%2Cw_311%2Cc_fill%2Cg_faces:aut
|
unknown
|
|
|
|
http://www.winimage.com/zLibDllresource://scrollbar_u_h.pngresource://scrollbar_d_h.pngresource://sc
|
unknown
|
|
|
|
http://images.outbrainimg.com/transform/v3/eyJpdSI6IiIsIml1ZSI6Imh0dHA6Ly9pbWFnZXMyLnplbWFudGEuY29tL
|
unknown
|
|
|
|
https://www.instagram.comsec-fetch-mode:
|
unknown
|
|
|
|
https://www.instagram.com/accounts/login/ajax/facebook/
|
unknown
|
|
|
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e
|
unknown
|
|
|
|
http://crl.thawte.com/ThawteTimestampingCA.crl0
|
unknown
|
|
|
|
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
|
|
|
https://www.instagram.com/sec-fetch-site:
|
unknown
|
|
|
|
https://twitter.comReferer:
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/#y
|
unknown
|
|
|
|
http://www.interestvideo.com/video1.php
|
unknown
|
|
|
|
https://www.instagram.com/accept:
|
unknown
|
|
|
|
https://A5D4CE54CC78B3CA.xyz/t
|
unknown
|
|
|
|
https://www.messenger.com/login/nonce/
|
unknown
|
|
|
|
https://cvision.media.net/new/300x194/2/138/47/25/3b2da2d4-7a38-47c3-b162-f33e769f51f5.jpg?v=9
|
unknown
|
|
|
|
https://srtb.msn.com/auction?a=de-ch&b=623d43496a394c99b1336ff5cc139eb9&c=MSN&d=http%3A%2F%2Fwww.msn
|
unknown
|
|
|
|
http://www.youtube.com
|
unknown
|
|
|
|
http://www.youtube.comdM
|
unknown
|
|
|
|
http://www.youtube.comSX
|
unknown
|
|
|
|
https://www.cloudflare.com/5xx
|
unknown
|
|
|
|
https://A5D4CE54CC78B3CA.xyz/Rm
|
unknown
|
|
|
|
https://www.cloudflare.com
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/wJ
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/&1
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/e
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/B
|
unknown
|
|
There are 100 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
84CFBA021A5A6662.xyz
|
104.21.23.16
|
|
|
|
84cfba021a5a6662.xyz
|
104.21.23.16
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
127.0.0.1
|
unknown
|
unknown
|
unknown
|
|
|
|
104.21.23.16
|
unknown
|
United States
|
unknown
|
|
|
|
172.67.208.74
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\N1yprTBBXs.exe
|
Blob
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
GlobalAssocChangedCounter
|
|
|
|
C:\Users\user\AppData\Local\Temp\6272167835D47591.exe
|
1
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe
|
@C:\Windows\SysWOW64\FirewallControlPanel.dll,-12122
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
22397453000
|
unkown
|
page read and write
|
|
|
|
11A91290000
|
unkown
|
page readonly
|
|
|
|
2842E1F0000
|
unkown
|
page readonly
|
|
|
|
2842E213000
|
unkown
|
page read and write
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
1BE1E456000
|
unkown
|
page read and write
|
|
|
|
C958BEB000
|
unkown
|
page read and write
|
|
|
|
7FF5998B4000
|
unkown
|
page readonly
|
|
|
|
16C52100000
|
unkown
|
page read and write
|
|
|
|
E40000
|
heap private
|
page read and write
|
|
|
|
7FF5195B0000
|
unkown
|
page readonly
|
|
|
|
2C30C018000
|
unkown
|
page read and write
|
|
|
|
7FF522D24000
|
unkown
|
page readonly
|
|
|
|
16C520DE000
|
unkown
|
page read and write
|
|
|
|
1E304513000
|
unkown
|
page read and write
|
|
|
|
68F000
|
unkown
|
page read and write
|
|
|
|
16C53010000
|
unkown
|
page read and write
|
|
|
|
C3B64FE000
|
unkown
|
page read and write
|
|
|
|
6B9D000
|
stack
|
page read and write
|
|
|
|
16C51FB1000
|
unkown
|
page read and write
|
|
|
|
7FF578995000
|
unkown
|
page readonly
|
|
|
|
7FF569B7B000
|
unkown
|
page readonly
|
|
|
|
2BD5000
|
unkown
|
page readonly
|
|
|
|
7FF563C48000
|
unkown
|
page readonly
|
|
|
|
2842E110000
|
heap default
|
page read and write
|
|
|
|
7FF5CAAED000
|
unkown
|
page readonly
|
|
|
|
668000
|
unkown
|
page read and write
|
|
|
|
16C52183000
|
unkown
|
page read and write
|
|
|
|
6CA0000
|
unkown
|
page read and write
|
|
|
|
414D000
|
unkown
|
page read and write
|
|
|
|
7FF57086B000
|
unkown
|
page readonly
|
|
|
|
2C306A8F000
|
unkown
|
page read and write
|
|
|
|
868F9F9000
|
unkown
|
page read and write
|
|
|
|
BAB000
|
unkown
|
page read and write
|
|
|
|
3F8000
|
unkown
|
page read and write
|
|
|
|
1D9DAF40000
|
unkown
|
page readonly
|
|
|
|
10337000
|
unkown
|
page readonly
|
|
|
|
2B7D000
|
unkown
|
page readonly
|
|
|
|
B21000
|
unkown image
|
page readonly
|
|
|
|
7FF522E7B000
|
unkown
|
page readonly
|
|
|
|
717000
|
unkown
|
page read and write
|
|
|
|
16C51F6A000
|
unkown
|
page read and write
|
|
|
|
2C306A79000
|
unkown
|
page read and write
|
|
|
|
2BE5000
|
unkown
|
page readonly
|
|
|
|
4199000
|
unkown
|
page read and write
|
|
|
|
20B3000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page readonly
|
|
|
|
55A000
|
unkown image
|
page write copy
|
|
|
|
7FF4F144B000
|
unkown
|
page readonly
|
|
|
|
2940F92E000
|
unkown
|
page read and write
|
|
|
|
7FF599CD6000
|
unkown
|
page readonly
|
|
|
|
2F90000
|
unkown
|
page readonly
|
|
|
|
685000
|
unkown
|
page read and write
|
|
|
|
5DE000
|
unkown
|
page read and write
|
|
|
|
4173000
|
unkown
|
page read and write
|
|
|
|
717000
|
unkown
|
page read and write
|
|
|
|
2C6B000
|
unkown
|
page readonly
|
|
|
|
43F1000
|
unkown
|
page read and write
|
|
|
|
1E2CFA50000
|
unkown
|
page read and write
|
|
|
|
1E2CF950000
|
unkown
|
page readonly
|
|
|
|
7FF519601000
|
unkown
|
page readonly
|
|
|
|
1C312E00000
|
unkown
|
page read and write
|
|
|
|
7FF569B80000
|
unkown
|
page readonly
|
|
|
|
7FF4F1418000
|
unkown
|
page readonly
|
|
|
|
1DC5266C000
|
unkown
|
page read and write
|
|
|
|
1DC52673000
|
unkown
|
page read and write
|
|
|
|
1BE1E43F000
|
unkown
|
page read and write
|
|
|
|
7FF57086F000
|
unkown
|
page readonly
|
|
|
|
7FF5194DF000
|
unkown
|
page readonly
|
|
|
|
7FF5A397E000
|
unkown
|
page readonly
|
|
|
|
59D000
|
unkown
|
page read and write
|
|
|
|
7FF522E15000
|
unkown
|
page readonly
|
|
|
|
2D8F000
|
stack
|
page read and write
|
|
|
|
474000
|
unkown
|
page read and write
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
1BE1E468000
|
unkown
|
page read and write
|
|
|
|
16C53010000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
7FF522DBC000
|
unkown
|
page readonly
|
|
|
|
7FF563BDA000
|
unkown
|
page readonly
|
|
|
|
1C312E4F000
|
unkown
|
page read and write
|
|
|
|
2940F90D000
|
unkown
|
page read and write
|
|
|
|
2EA0000
|
unkown
|
page read and write
|
|
|
|
677000
|
unkown
|
page read and write
|
|
|
|
7FF5AF514000
|
unkown
|
page readonly
|
|
|
|
16C4FEEE000
|
unkown
|
page read and write
|
|
|
|
16C4FCB0000
|
heap default
|
page read and write
|
|
|
|
638000
|
heap default
|
page read and write
|
|
|
|
D10000
|
unkown
|
page read and write
|
|
|
|
20F5000
|
unkown
|
page read and write
|
|
|
|
7FF5CABBF000
|
unkown
|
page readonly
|
|
|
|
672000
|
unkown
|
page read and write
|
|
|
|
1DC5266A000
|
unkown
|
page read and write
|
|
|
|
20A4000
|
unkown
|
page read and write
|
|
|
|
16C4FEE5000
|
unkown
|
page read and write
|
|
|
|
20B13FD000
|
unkown
|
page read and write
|
|
|
|
7FF599CFE000
|
unkown
|
page readonly
|
|
|
|
4147000
|
unkown
|
page read and write
|
|
|
|
16C4FE00000
|
unkown
|
page read and write
|
|
|
|
789000
|
unkown
|
page read and write
|
|
|
|
27EE000
|
unkown
|
page read and write
|
|
|
|
41B7000
|
unkown
|
page read and write
|
|
|
|
20DB000
|
unkown
|
page read and write
|
|
|
|
2C306A77000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown
|
page readonly
|
|
|
|
16C51C40000
|
heap private
|
page read and write
|
|
|
|
7FF569A05000
|
unkown
|
page readonly
|
|
|
|
41DD000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page readonly
|
|
|
|
655B7FA000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2BA6000
|
unkown
|
page readonly
|
|
|
|
344F000
|
unkown
|
page read and write
|
|
|
|
2C30BF60000
|
unkown
|
page read and write
|
|
|
|
4159000
|
unkown
|
page read and write
|
|
|
|
11A91513000
|
unkown
|
page read and write
|
|
|
|
1D9DA802000
|
unkown
|
page read and write
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
D90000
|
unkown
|
page read and write
|
|
|
|
2C30C220000
|
unkown
|
page read and write
|
|
|
|
7FF4F103D000
|
unkown
|
page readonly
|
|
|
|
2842E229000
|
unkown
|
page read and write
|
|
|
|
7FF57082F000
|
unkown
|
page readonly
|
|
|
|
7FF56398D000
|
unkown
|
page readonly
|
|
|
|
7FF522DF3000
|
unkown
|
page readonly
|
|
|
|
3DF0000
|
unkown
|
page readonly
|
|
|
|
16C51F7C000
|
unkown
|
page read and write
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
7FF5707B3000
|
unkown
|
page readonly
|
|
|
|
6BF000
|
stack
|
page read and write
|
|
|
|
2C30C000000
|
unkown
|
page read and write
|
|
|
|
E23177D000
|
unkown
|
page read and write
|
|
|
|
7FF57086F000
|
unkown
|
page readonly
|
|
|
|
16C53010000
|
unkown
|
page read and write
|
|
|
|
7FF570767000
|
unkown
|
page readonly
|
|
|
|
3DF000
|
unkown
|
page read and write
|
|
|
|
16C52400000
|
unkown
|
page readonly
|
|
|
|
7FF578638000
|
unkown
|
page readonly
|
|
|
|
7FF58ECDD000
|
unkown
|
page readonly
|
|
|
|
2C306AAC000
|
unkown
|
page read and write
|
|
|
|
22397513000
|
unkown
|
page read and write
|
|
|
|
2B45000
|
unkown
|
page read and write
|
|
|
|
1DC52662000
|
unkown
|
page read and write
|
|
|
|
2A09000
|
unkown
|
page readonly
|
|
|
|
2C306A58000
|
unkown
|
page read and write
|
|
|
|
2C30C220000
|
unkown
|
page read and write
|
|
|
|
61567E000
|
unkown
|
page read and write
|
|
|
|
66C000
|
unkown
|
page read and write
|
|
|
|
16C4FEE5000
|
unkown
|
page read and write
|
|
|
|
413F000
|
unkown
|
page read and write
|
|
|
|
1E2D0060000
|
unkown
|
page readonly
|
|
|
|
1DC52667000
|
unkown
|
page read and write
|
|
|
|
7FF599A60000
|
unkown
|
page readonly
|
|
|
|
2C1D000
|
unkown
|
page readonly
|
|
|
|
41F6000
|
unkown
|
page read and write
|
|
|
|
16C52200000
|
unkown
|
page read and write
|
|
|
|
7E1000
|
unkown
|
page read and write
|
|
|
|
A8E000
|
unkown
|
page read and write
|
|
|
|
2C307159000
|
unkown
|
page read and write
|
|
|
|
10338000
|
unkown
|
page read and write
|
|
|
|
10337000
|
unkown
|
page readonly
|
|
|
|
72B000
|
heap default
|
page read and write
|
|
|
|
7FF563BC5000
|
unkown
|
page readonly
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
7FF58ED56000
|
unkown
|
page readonly
|
|
|
|
7FF5197CD000
|
unkown
|
page readonly
|
|
|
|
D00000
|
unkown
|
page read and write
|
|
|
|
7FF599AFE000
|
unkown
|
page readonly
|
|
|
|
11A91440000
|
unkown
|
page read and write
|
|
|
|
2940F8A9000
|
heap private
|
page read and write
|
|
|
|
7FF57079D000
|
unkown
|
page readonly
|
|
|
|
7FF522973000
|
unkown
|
page readonly
|
|
|
|
61587F000
|
unkown
|
page read and write
|
|
|
|
1DC52663000
|
unkown
|
page read and write
|
|
|
|
7FF519723000
|
unkown
|
page readonly
|
|
|
|
1E303C00000
|
unkown
|
page read and write
|
|
|
|
6C3000
|
unkown
|
page read and write
|
|
|
|
7FF599BE8000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5CAACD000
|
unkown
|
page readonly
|
|
|
|
7FF519900000
|
unkown
|
page readonly
|
|
|
|
7FF522C7E000
|
unkown
|
page readonly
|
|
|
|
7FF58E9EF000
|
unkown
|
page readonly
|
|
|
|
2110000
|
heap private
|
page read and write
|
|
|
|
20AE000
|
unkown
|
page read and write
|
|
|
|
2940F880000
|
unkown
|
page read and write
|
|
|
|
681000
|
unkown
|
page read and write
|
|
|
|
868F5DE000
|
unkown
|
page read and write
|
|
|
|
7FF569A24000
|
unkown
|
page readonly
|
|
|
|
1DC5263A000
|
unkown
|
page read and write
|
|
|
|
7FF570636000
|
unkown
|
page readonly
|
|
|
|
7FF5AFCBE000
|
unkown
|
page readonly
|
|
|
|
7FF56385F000
|
unkown
|
page readonly
|
|
|
|
7FF5A397E000
|
unkown
|
page readonly
|
|
|
|
7FF599C73000
|
unkown
|
page readonly
|
|
|
|
22397468000
|
unkown
|
page read and write
|
|
|
|
20AE000
|
unkown
|
page read and write
|
|
|
|
787000
|
unkown
|
page read and write
|
|
|
|
2080000
|
unkown
|
page read and write
|
|
|
|
7FF5226D6000
|
unkown
|
page readonly
|
|
|
|
7FF5787CD000
|
unkown
|
page readonly
|
|
|
|
7FF599C49000
|
unkown
|
page readonly
|
|
|
|
2C30BD70000
|
unkown
|
page read and write
|
|
|
|
1C313800000
|
unkown
|
page readonly
|
|
|
|
7FF5195A4000
|
unkown
|
page readonly
|
|
|
|
7FF599BC7000
|
unkown
|
page readonly
|
|
|
|
20B11F7000
|
unkown
|
page read and write
|
|
|
|
D3A0B7D000
|
unkown
|
page read and write
|
|
|
|
420A000
|
unkown
|
page read and write
|
|
|
|
2BFD000
|
unkown
|
page readonly
|
|
|
|
D3A0A7F000
|
unkown
|
page read and write
|
|
|
|
16C53310000
|
unkown
|
page read and write
|
|
|
|
7FF563C60000
|
unkown
|
page readonly
|
|
|
|
1D9DB002000
|
unkown
|
page read and write
|
|
|
|
41B7000
|
unkown
|
page read and write
|
|
|
|
2940F905000
|
unkown
|
page read and write
|
|
|
|
2940F7D0000
|
unkown
|
page read and write
|
|
|
|
16C53510000
|
unkown
|
page read and write
|
|
|
|
4150000
|
unkown
|
page read and write
|
|
|
|
7FF5AFBDC000
|
unkown
|
page readonly
|
|
|
|
7FF5AF549000
|
unkown
|
page readonly
|
|
|
|
B10000
|
unkown image
|
page readonly
|
|
|
|
16C4FD90000
|
unkown
|
page write copy
|
|
|
|
67C000
|
unkown
|
page read and write
|
|
|
|
22397400000
|
unkown
|
page read and write
|
|
|
|
1DC52660000
|
unkown
|
page read and write
|
|
|
|
20C3000
|
unkown
|
page read and write
|
|
|
|
2BCA000
|
unkown
|
page readonly
|
|
|
|
3DED000
|
stack
|
page read and write
|
|
|
|
16C51F54000
|
unkown
|
page read and write
|
|
|
|
1C312DC0000
|
heap default
|
page read and write
|
|
|
|
2F01000
|
unkown
|
page read and write
|
|
|
|
2C30C046000
|
unkown
|
page read and write
|
|
|
|
7FF5191CE000
|
unkown
|
page readonly
|
|
|
|
2C306B16000
|
unkown
|
page read and write
|
|
|
|
41D5000
|
unkown
|
page read and write
|
|
|
|
C95937C000
|
unkown
|
page read and write
|
|
|
|
2C30BEC0000
|
unkown
|
page read and write
|
|
|
|
1C312D60000
|
heap private
|
page read and write
|
|
|
|
2AED000
|
unkown
|
page read and write
|
|
|
|
16C4FE6C000
|
unkown
|
page read and write
|
|
|
|
1DC52560000
|
unkown
|
page readonly
|
|
|
|
16C520DA000
|
unkown
|
page read and write
|
|
|
|
4140000
|
unkown
|
page read and write
|
|
|
|
BB0000
|
heap private
|
page read and write
|
|
|
|
2C30C230000
|
unkown
|
page readonly
|
|
|
|
2C306AFF000
|
unkown
|
page read and write
|
|
|
|
11A91400000
|
unkown
|
page read and write
|
|
|
|
1DC5266E000
|
unkown
|
page read and write
|
|
|
|
7FF5789FB000
|
unkown
|
page readonly
|
|
|
|
7FF4F145B000
|
unkown
|
page readonly
|
|
|
|
7FF58EE33000
|
unkown
|
page readonly
|
|
|
|
41C3000
|
unkown
|
page read and write
|
|
|
|
2C30C042000
|
unkown
|
page read and write
|
|
|
|
7FF5198DD000
|
unkown
|
page readonly
|
|
|
|
41B5000
|
unkown
|
page read and write
|
|
|
|
5D0000
|
unkown
|
page read and write
|
|
|
|
7FF51971A000
|
unkown
|
page readonly
|
|
|
|
C12E7FD000
|
unkown
|
page read and write
|
|
|
|
16C51F0E000
|
unkown
|
page read and write
|
|
|
|
68E000
|
unkown
|
page read and write
|
|
|
|
6ADE000
|
unkown
|
page read and write
|
|
|
|
6B5C000
|
unkown
|
page read and write
|
|
|
|
1BE1E402000
|
unkown
|
page read and write
|
|
|
|
7FF4F145F000
|
unkown
|
page readonly
|
|
|
|
7FF51993C000
|
unkown
|
page readonly
|
|
|
|
2B8F000
|
stack
|
page read and write
|
|
|
|
20B1000
|
unkown
|
page read and write
|
|
|
|
7FF59949D000
|
unkown
|
page readonly
|
|
|
|
2B34000
|
heap private
|
page read and write
|
|
|
|
1C312E4B000
|
unkown
|
page read and write
|
|
|
|
E70000
|
unkown
|
page readonly
|
|
|
|
7FF51987F000
|
unkown
|
page readonly
|
|
|
|
1BE1E6D0000
|
unkown
|
page readonly
|
|
|
|
655A9CB000
|
unkown
|
page read and write
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
2842E450000
|
unkown
|
page readonly
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
4166000
|
unkown
|
page read and write
|
|
|
|
7FF58EEA5000
|
unkown
|
page readonly
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
29410610000
|
unkown
|
page read and write
|
|
|
|
7FF578683000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
4191000
|
unkown
|
page read and write
|
|
|
|
223973E0000
|
unkown
|
page read and write
|
|
|
|
7FF57870E000
|
unkown
|
page readonly
|
|
|
|
655B2FA000
|
unkown
|
page read and write
|
|
|
|
41CA000
|
unkown
|
page read and write
|
|
|
|
E2314FE000
|
unkown
|
page read and write
|
|
|
|
7FF599D0D000
|
unkown
|
page readonly
|
|
|
|
7FF519536000
|
unkown
|
page readonly
|
|
|
|
7FF5CAAB7000
|
unkown
|
page readonly
|
|
|
|
7FF569B15000
|
unkown
|
page readonly
|
|
|
|
11A91280000
|
heap default
|
page read and write
|
|
|
|
2E50000
|
unkown
|
page read and write
|
|
|
|
1DC5267D000
|
unkown
|
page read and write
|
|
|
|
3102000
|
heap private
|
page read and write
|
|
|
|
55A000
|
unkown image
|
page write copy
|
|
|
|
7FF522C73000
|
unkown
|
page readonly
|
|
|
|
16C520DA000
|
unkown
|
page read and write
|
|
|
|
7FF519A2F000
|
unkown
|
page readonly
|
|
|
|
665000
|
unkown
|
page read and write
|
|
|
|
7FF58EF3F000
|
unkown
|
page readonly
|
|
|
|
1E2CFB08000
|
unkown
|
page read and write
|
|
|
|
C3B62FA000
|
unkown
|
page read and write
|
|
|
|
6D7000
|
unkown
|
page read and write
|
|
|
|
6A6000
|
unkown
|
page read and write
|
|
|
|
7FF599D0F000
|
unkown
|
page readonly
|
|
|
|
1D9DA902000
|
unkown
|
page read and write
|
|
|
|
2C87000
|
unkown
|
page readonly
|
|
|
|
2940F8C7000
|
heap default
|
page read and write
|
|
|
|
16C4FEE4000
|
unkown
|
page read and write
|
|
|
|
2200000
|
heap private
|
page read and write
|
|
|
|
2C30C2C0000
|
unkown
|
page readonly
|
|
|
|
16C53510000
|
unkown
|
page read and write
|
|
|
|
7FF5699FF000
|
unkown
|
page readonly
|
|
|
|
2BF5000
|
unkown
|
page readonly
|
|
|
|
2C307118000
|
unkown
|
page read and write
|
|
|
|
7FF522C4D000
|
unkown
|
page readonly
|
|
|
|
A3F000
|
stack
|
page read and write
|
|
|
|
7FF570763000
|
unkown
|
page readonly
|
|
|
|
11A91502000
|
unkown
|
page read and write
|
|
|
|
7FF58EE83000
|
unkown
|
page readonly
|
|
|
|
7FF5CABBF000
|
unkown
|
page readonly
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
2117000
|
unkown
|
page read and write
|
|
|
|
7FF522E76000
|
unkown
|
page readonly
|
|
|
|
2940FF60000
|
unkown
|
page readonly
|
|
|
|
41AC000
|
unkown
|
page read and write
|
|
|
|
16C53610000
|
unkown
|
page read and write
|
|
|
|
7FF5998FA000
|
unkown
|
page readonly
|
|
|
|
41CB000
|
unkown
|
page read and write
|
|
|
|
2C306A00000
|
unkown
|
page read and write
|
|
|
|
7FF4F124E000
|
unkown
|
page readonly
|
|
|
|
C12ECFF000
|
unkown
|
page read and write
|
|
|
|
7FF578663000
|
unkown
|
page readonly
|
|
|
|
9BF000
|
stack
|
page read and write
|
|
|
|
11A91402000
|
unkown
|
page read and write
|
|
|
|
2AB4000
|
unkown
|
page readonly
|
|
|
|
66D000
|
unkown
|
page read and write
|
|
|
|
16C4FE72000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
unkown
|
page read and write
|
|
|
|
246000
|
unkown
|
page read and write
|
|
|
|
16C4FF2E000
|
unkown
|
page read and write
|
|
|
|
7E4000
|
unkown
|
page read and write
|
|
|
|
7FF5998ED000
|
unkown
|
page readonly
|
|
|
|
713000
|
unkown
|
page read and write
|
|
|
|
7FF522CFF000
|
unkown
|
page readonly
|
|
|
|
C3B6B7D000
|
unkown
|
page read and write
|
|
|
|
7CA000
|
heap default
|
page read and write
|
|
|
|
16C4FE67000
|
unkown
|
page read and write
|
|
|
|
B21000
|
unkown image
|
page readonly
|
|
|
|
7FF570040000
|
unkown
|
page readonly
|
|
|
|
7FF56999E000
|
unkown
|
page readonly
|
|
|
|
16C53310000
|
unkown
|
page read and write
|
|
|
|
7FF58EE6D000
|
unkown
|
page readonly
|
|
|
|
7FF578659000
|
unkown
|
page readonly
|
|
|
|
16C52183000
|
unkown
|
page read and write
|
|
|
|
2940FBD0000
|
unkown
|
page readonly
|
|
|
|
16C4FEE5000
|
unkown
|
page read and write
|
|
|
|
92F000
|
stack
|
page read and write
|
|
|
|
7FF522D05000
|
unkown
|
page readonly
|
|
|
|
210E000
|
unkown
|
page read and write
|
|
|
|
1D9DAF50000
|
unkown
|
page read and write
|
|
|
|
301F000
|
stack
|
page read and write
|
|
|
|
691000
|
unkown
|
page read and write
|
|
|
|
CCF000
|
stack
|
page read and write
|
|
|
|
16C51C80000
|
unkown
|
page readonly
|
|
|
|
7FF563B9C000
|
unkown
|
page readonly
|
|
|
|
22C000
|
unkown
|
page read and write
|
|
|
|
198000
|
stack
|
page read and write
|
|
|
|
29FF000
|
unkown
|
page readonly
|
|
|
|
2E8D000
|
stack
|
page read and write
|
|
|
|
2C307104000
|
unkown
|
page read and write
|
|
|
|
7FF5CA876000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
90955BB000
|
unkown
|
page read and write
|
|
|
|
1E2CFA13000
|
unkown
|
page read and write
|
|
|
|
239000
|
unkown
|
page read and write
|
|
|
|
16C520CA000
|
unkown
|
page read and write
|
|
|
|
2EB9000
|
unkown
|
page read and write
|
|
|
|
6E3000
|
unkown
|
page read and write
|
|
|
|
7FF57871B000
|
unkown
|
page readonly
|
|
|
|
2B6D000
|
unkown
|
page readonly
|
|
|
|
7FF4F143D000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB0A000
|
unkown
|
page readonly
|
|
|
|
7FF569AE9000
|
unkown
|
page readonly
|
|
|
|
2BC0000
|
unkown
|
page readonly
|
|
|
|
2842E120000
|
unkown
|
page readonly
|
|
|
|
7FF4F142B000
|
unkown
|
page readonly
|
|
|
|
3320000
|
unkown
|
page read and write
|
|
|
|
868FD7F000
|
unkown
|
page read and write
|
|
|
|
321D000
|
unkown
|
page read and write
|
|
|
|
16C4FF81000
|
unkown
|
page read and write
|
|
|
|
1D9DA790000
|
heap private
|
page read and write
|
|
|
|
7FF5704FA000
|
unkown
|
page readonly
|
|
|
|
7FF599A33000
|
unkown
|
page readonly
|
|
|
|
3FB000
|
unkown
|
page read and write
|
|
|
|
2280000
|
unkown
|
page read and write
|
|
|
|
3320000
|
unkown
|
page read and write
|
|
|
|
7FF563A07000
|
unkown
|
page readonly
|
|
|
|
1DC52570000
|
unkown
|
page read and write
|
|
|
|
4138000
|
unkown
|
page read and write
|
|
|
|
6CF000
|
unkown
|
page read and write
|
|
|
|
30A000
|
unkown
|
page read and write
|
|
|
|
610000
|
heap default
|
page read and write
|
|
|
|
10023000
|
unkown
|
page readonly
|
|
|
|
16C51F45000
|
unkown
|
page read and write
|
|
|
|
418A000
|
unkown
|
page read and write
|
|
|
|
7FF5CA405000
|
unkown
|
page readonly
|
|
|
|
4171000
|
unkown
|
page read and write
|
|
|
|
20C3000
|
unkown
|
page read and write
|
|
|
|
2A0E000
|
unkown
|
page readonly
|
|
|
|
6FE000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
unkown
|
page readonly
|
|
|
|
4154000
|
unkown
|
page read and write
|
|
|
|
16C4FE6C000
|
unkown
|
page read and write
|
|
|
|
7FF599A35000
|
unkown
|
page readonly
|
|
|
|
D5DCC7C000
|
unkown
|
page read and write
|
|
|
|
4182000
|
unkown
|
page read and write
|
|
|
|
7FF578445000
|
unkown
|
page readonly
|
|
|
|
BA0000
|
heap private
|
page read and write
|
|
|
|
7FF5785D0000
|
unkown
|
page readonly
|
|
|
|
2BD0000
|
unkown
|
page readonly
|
|
|
|
8CB000
|
heap private
|
page read and write
|
|
|
|
4446000
|
unkown
|
page read and write
|
|
|
|
521000
|
unkown image
|
page readonly
|
|
|
|
7FF599BBD000
|
unkown
|
page readonly
|
|
|
|
D3A077C000
|
unkown
|
page read and write
|
|
|
|
7FF58EF3B000
|
unkown
|
page readonly
|
|
|
|
2940F8C0000
|
heap default
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
2C307783000
|
unkown
|
page read and write
|
|
|
|
1DC52E02000
|
unkown
|
page read and write
|
|
|
|
73A000
|
heap default
|
page read and write
|
|
|
|
66D000
|
unkown
|
page read and write
|
|
|
|
2C306ABB000
|
unkown
|
page read and write
|
|
|
|
7B3000
|
heap default
|
page read and write
|
|
|
|
7FF569BAB000
|
unkown
|
page readonly
|
|
|
|
9095A7F000
|
unkown
|
page read and write
|
|
|
|
2C85000
|
heap private
|
page read and write
|
|
|
|
2680000
|
unkown
|
page read and write
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
20AC000
|
unkown
|
page read and write
|
|
|
|
7FF519969000
|
unkown
|
page readonly
|
|
|
|
6F0000
|
heap default
|
page read and write
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
1BE1E433000
|
unkown
|
page read and write
|
|
|
|
16C4FEDD000
|
unkown
|
page read and write
|
|
|
|
20CC000
|
unkown
|
page read and write
|
|
|
|
2C12000
|
unkown
|
page readonly
|
|
|
|
2BF5000
|
unkown
|
page readonly
|
|
|
|
2A8D000
|
unkown
|
page readonly
|
|
|
|
16C520DA000
|
unkown
|
page read and write
|
|
|
|
2C307159000
|
unkown
|
page read and write
|
|
|
|
16C52143000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC05000
|
unkown
|
page readonly
|
|
|
|
2A81000
|
unkown
|
page readonly
|
|
|
|
41B1000
|
unkown
|
page read and write
|
|
|
|
3F2000
|
unkown
|
page read and write
|
|
|
|
AFA000
|
heap default
|
page read and write
|
|
|
|
322000
|
unkown
|
page read and write
|
|
|
|
B1C000
|
unkown image
|
page readonly
|
|
|
|
7FF578A1B000
|
unkown
|
page readonly
|
|
|
|
7FF519937000
|
unkown
|
page readonly
|
|
|
|
655AF7B000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown
|
page read and write
|
|
|
|
22397402000
|
unkown
|
page read and write
|
|
|
|
418E000
|
unkown
|
page read and write
|
|
|
|
7FF599C07000
|
unkown
|
page readonly
|
|
|
|
2C71000
|
unkown
|
page readonly
|
|
|
|
ABF000
|
stack
|
page read and write
|
|
|
|
2A7B000
|
unkown
|
page readonly
|
|
|
|
7FF519923000
|
unkown
|
page readonly
|
|
|
|
483E000
|
unkown
|
page read and write
|
|
|
|
B80000
|
unkown
|
page readonly
|
|
|
|
26FB000
|
unkown
|
page read and write
|
|
|
|
1E304600000
|
unkown
|
page readonly
|
|
|
|
7FF578A1E000
|
unkown
|
page readonly
|
|
|
|
2C0D000
|
unkown
|
page readonly
|
|
|
|
7FF577EAD000
|
unkown
|
page readonly
|
|
|
|
7FF51997A000
|
unkown
|
page readonly
|
|
|
|
7FF578927000
|
unkown
|
page readonly
|
|
|
|
6AC000
|
unkown
|
page read and write
|
|
|
|
979ABF9000
|
unkown
|
page read and write
|
|
|
|
5CE000
|
unkown
|
page read and write
|
|
|
|
2C87000
|
unkown
|
page readonly
|
|
|
|
2C306A71000
|
unkown
|
page read and write
|
|
|
|
16C4FF30000
|
unkown
|
page read and write
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
7FF58ED62000
|
unkown
|
page readonly
|
|
|
|
7FF578630000
|
unkown
|
page readonly
|
|
|
|
2E20000
|
unkown
|
page read and write
|
|
|
|
7FF4F11D7000
|
unkown
|
page readonly
|
|
|
|
16C53210000
|
unkown
|
page read and write
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
2C30C045000
|
unkown
|
page read and write
|
|
|
|
2BE9000
|
unkown
|
page readonly
|
|
|
|
7FF51971C000
|
unkown
|
page readonly
|
|
|
|
7FF519561000
|
unkown
|
page readonly
|
|
|
|
2C6B000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
65F000
|
unkown
|
page read and write
|
|
|
|
2C1D000
|
unkown
|
page readonly
|
|
|
|
6157FF000
|
unkown
|
page read and write
|
|
|
|
7FF563A9D000
|
unkown
|
page readonly
|
|
|
|
351C000
|
unkown
|
page read and write
|
|
|
|
7FF599CE0000
|
unkown
|
page readonly
|
|
|
|
23B000
|
unkown
|
page read and write
|
|
|
|
7FF4F104A000
|
unkown
|
page readonly
|
|
|
|
1DC52640000
|
unkown
|
page read and write
|
|
|
|
41A8000
|
unkown
|
page read and write
|
|
|
|
77F000
|
heap default
|
page read and write
|
|
|
|
2C30C220000
|
unkown
|
page readonly
|
|
|
|
2C30C00F000
|
unkown
|
page read and write
|
|
|
|
16C53110000
|
unkown
|
page read and write
|
|
|
|
7FF58EE79000
|
unkown
|
page readonly
|
|
|
|
3103000
|
unkown
|
page read and write
|
|
|
|
2EE4000
|
unkown
|
page read and write
|
|
|
|
7DE000
|
unkown
|
page read and write
|
|
|
|
1C312E8C000
|
unkown
|
page read and write
|
|
|
|
752000
|
heap default
|
page read and write
|
|
|
|
7FF5786E6000
|
unkown
|
page readonly
|
|
|
|
6AA000
|
unkown
|
page read and write
|
|
|
|
7FF5195EA000
|
unkown
|
page readonly
|
|
|
|
2C30BF60000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown
|
page write copy
|
|
|
|
7FF599CCF000
|
unkown
|
page readonly
|
|
|
|
16C53110000
|
unkown
|
page read and write
|
|
|
|
66D000
|
unkown
|
page read and write
|
|
|
|
757000
|
heap default
|
page read and write
|
|
|
|
2C87000
|
unkown
|
page readonly
|
|
|
|
1C3130D0000
|
unkown
|
page readonly
|
|
|
|
2C30C2D0000
|
unkown
|
page read and write
|
|
|
|
11A91455000
|
unkown
|
page read and write
|
|
|
|
7FF522E68000
|
unkown
|
page readonly
|
|
|
|
45F0000
|
unkown
|
page readonly
|
|
|
|
2842FC00000
|
unkown
|
page read and write
|
|
|
|
669000
|
unkown
|
page read and write
|
|
|
|
2117000
|
unkown
|
page read and write
|
|
|
|
16C51F44000
|
unkown
|
page read and write
|
|
|
|
1E2CF800000
|
heap private
|
page read and write
|
|
|
|
7FF599C03000
|
unkown
|
page readonly
|
|
|
|
2C30BED0000
|
unkown
|
page read and write
|
|
|
|
16C4FF71000
|
unkown
|
page read and write
|
|
|
|
7FF563C7B000
|
unkown
|
page readonly
|
|
|
|
16C4FF30000
|
unkown
|
page read and write
|
|
|
|
8C9000
|
heap private
|
page read and write
|
|
|
|
29410600000
|
unkown
|
page read and write
|
|
|
|
1DB000
|
stack
|
page read and write
|
|
|
|
20A1000
|
unkown
|
page read and write
|
|
|
|
1E303CC7000
|
unkown
|
page read and write
|
|
|
|
16C4FF81000
|
unkown
|
page read and write
|
|
|
|
2C30BED4000
|
unkown
|
page read and write
|
|
|
|
2C307870000
|
unkown
|
page read and write
|
|
|
|
7FF599C5A000
|
unkown
|
page readonly
|
|
|
|
16C4FE7B000
|
unkown
|
page read and write
|
|
|
|
2AAB000
|
unkown
|
page readonly
|
|
|
|
1DC52642000
|
unkown
|
page read and write
|
|
|
|
7FF599BE4000
|
unkown
|
page readonly
|
|
|
|
2B33000
|
heap private
|
page read and write
|
|
|
|
7FF563A7E000
|
unkown
|
page readonly
|
|
|
|
2C306A13000
|
unkown
|
page read and write
|
|
|
|
7FF522DE9000
|
unkown
|
page readonly
|
|
|
|
2C30BD90000
|
unkown
|
page read and write
|
|
|
|
1E2CF960000
|
unkown
|
page read and write
|
|
|
|
708000
|
unkown
|
page read and write
|
|
|
|
16C51F23000
|
unkown
|
page read and write
|
|
|
|
16C4FE40000
|
unkown
|
page read and write
|
|
|
|
20C3000
|
unkown
|
page read and write
|
|
|
|
65A000
|
heap default
|
page read and write
|
|
|
|
2A09000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF4F1334000
|
unkown
|
page readonly
|
|
|
|
20AE000
|
unkown
|
page read and write
|
|
|
|
1DC52540000
|
heap default
|
page read and write
|
|
|
|
7FF4F126D000
|
unkown
|
page readonly
|
|
|
|
1D9DAF80000
|
unkown
|
page read and write
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
2C306B02000
|
unkown
|
page read and write
|
|
|
|
16C53210000
|
unkown
|
page read and write
|
|
|
|
20BB000
|
unkown
|
page read and write
|
|
|
|
2C30BFC0000
|
unkown
|
page read and write
|
|
|
|
666000
|
unkown
|
page read and write
|
|
|
|
1E303B40000
|
heap private
|
page read and write
|
|
|
|
7FF5AFADD000
|
unkown
|
page readonly
|
|
|
|
C8E000
|
unkown
|
page read and write
|
|
|
|
1BE1E600000
|
unkown
|
page readonly
|
|
|
|
223972F0000
|
unkown
|
page readonly
|
|
|
|
6B4000
|
unkown
|
page read and write
|
|
|
|
2C30C2E0000
|
unkown
|
page readonly
|
|
|
|
7FF570602000
|
unkown
|
page readonly
|
|
|
|
2C30C240000
|
unkown
|
page readonly
|
|
|
|
C3B61F7000
|
unkown
|
page read and write
|
|
|
|
320F000
|
stack
|
page read and write
|
|
|
|
6CD000
|
unkown
|
page read and write
|
|
|
|
16C53310000
|
unkown
|
page read and write
|
|
|
|
B6F000
|
stack
|
page read and write
|
|
|
|
2C306C00000
|
unkown
|
page readonly
|
|
|
|
2C3079B0000
|
unkown
|
page readonly
|
|
|
|
16C4FE6A000
|
unkown
|
page read and write
|
|
|
|
20A9000
|
unkown
|
page read and write
|
|
|
|
20A1000
|
unkown
|
page read and write
|
|
|
|
4159000
|
unkown
|
page read and write
|
|
|
|
C12EDFF000
|
unkown
|
page read and write
|
|
|
|
16C53210000
|
unkown
|
page read and write
|
|
|
|
1DC52613000
|
unkown
|
page read and write
|
|
|
|
42B0000
|
unkown
|
page readonly
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
4F2000
|
unkown image
|
page execute and write copy
|
|
|
|
44F0000
|
unkown
|
page read and write
|
|
|
|
70BF000
|
stack
|
page read and write
|
|
|
|
16C52143000
|
unkown
|
page read and write
|
|
|
|
2BE1000
|
unkown
|
page readonly
|
|
|
|
7FF5CAB90000
|
unkown
|
page readonly
|
|
|
|
7FF5707BA000
|
unkown
|
page readonly
|
|
|
|
7FF599C53000
|
unkown
|
page readonly
|
|
|
|
1DC5265F000
|
unkown
|
page read and write
|
|
|
|
16C51F64000
|
unkown
|
page read and write
|
|
|
|
20B3000
|
unkown
|
page read and write
|
|
|
|
7FF599BBA000
|
unkown
|
page readonly
|
|
|
|
1D9DAAD0000
|
unkown
|
page readonly
|
|
|
|
5A0000
|
unkown
|
page readonly
|
|
|
|
7FF5AFCAD000
|
unkown
|
page readonly
|
|
|
|
2C30BFB0000
|
unkown
|
page read and write
|
|
|
|
7FF4F13C3000
|
unkown
|
page readonly
|
|
|
|
1DC5267A000
|
unkown
|
page read and write
|
|
|
|
16C51E02000
|
unkown
|
page read and write
|
|
|
|
B1F000
|
unkown image
|
page read and write
|
|
|
|
2940F860000
|
unkown
|
page read and write
|
|
|
|
79C000
|
unkown
|
page read and write
|
|
|
|
787000
|
heap default
|
page read and write
|
|
|
|
7D8000
|
unkown
|
page read and write
|
|
|
|
41C1000
|
unkown
|
page read and write
|
|
|
|
2842E200000
|
unkown
|
page read and write
|
|
|
|
1C313B40000
|
unkown
|
page readonly
|
|
|
|
2C30BF80000
|
unkown
|
page read and write
|
|
|
|
668000
|
unkown
|
page read and write
|
|
|
|
20B3000
|
unkown
|
page read and write
|
|
|
|
2BE0000
|
unkown
|
page readonly
|
|
|
|
7FF4F1399000
|
unkown
|
page readonly
|
|
|
|
4F2000
|
unkown image
|
page execute and write copy
|
|
|
|
42E0000
|
heap private
|
page read and write
|
|
|
|
4156000
|
unkown
|
page read and write
|
|
|
|
2A0E000
|
unkown
|
page readonly
|
|
|
|
1DC5267C000
|
unkown
|
page read and write
|
|
|
|
415D000
|
unkown
|
page read and write
|
|
|
|
16C53210000
|
unkown
|
page read and write
|
|
|
|
7FF5CABAE000
|
unkown
|
page readonly
|
|
|
|
2F8D000
|
stack
|
page read and write
|
|
|
|
7FF578A2B000
|
unkown
|
page readonly
|
|
|
|
3350000
|
unkown
|
page read and write
|
|
|
|
7FF5782FD000
|
unkown
|
page readonly
|
|
|
|
1D9DA83D000
|
unkown
|
page read and write
|
|
|
|
7D8000
|
unkown
|
page read and write
|
|
|
|
7FF4F1444000
|
unkown
|
page readonly
|
|
|
|
890000
|
unkown
|
page readonly
|
|
|
|
16C4FEEA000
|
unkown
|
page read and write
|
|
|
|
16C4FE74000
|
unkown
|
page read and write
|
|
|
|
20C6000
|
unkown
|
page read and write
|
|
|
|
E23147E000
|
unkown
|
page read and write
|
|
|
|
7FF578A14000
|
unkown
|
page readonly
|
|
|
|
655B87B000
|
unkown
|
page read and write
|
|
|
|
90958FF000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCCF000
|
unkown
|
page readonly
|
|
|
|
487D000
|
stack
|
page read and write
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
20CB000
|
unkown
|
page read and write
|
|
|
|
1BE1E46F000
|
unkown
|
page read and write
|
|
|
|
7FF56994D000
|
unkown
|
page readonly
|
|
|
|
1DC5263D000
|
unkown
|
page read and write
|
|
|
|
3D3D000
|
stack
|
page read and write
|
|
|
|
7FF519908000
|
unkown
|
page readonly
|
|
|
|
BAB000
|
unkown
|
page read and write
|
|
|
|
4152000
|
unkown
|
page read and write
|
|
|
|
7FF5CAB8B000
|
unkown
|
page readonly
|
|
|
|
7FF519995000
|
unkown
|
page readonly
|
|
|
|
16C51C00000
|
unkown
|
page readonly
|
|
|
|
4152000
|
unkown
|
page read and write
|
|
|
|
16C53510000
|
unkown
|
page read and write
|
|
|
|
16C51C70000
|
unkown
|
page readonly
|
|
|
|
74F000
|
stack
|
page read and write
|
|
|
|
7FF5197FC000
|
unkown
|
page readonly
|
|
|
|
7FF5786E3000
|
unkown
|
page readonly
|
|
|
|
1BE1E46B000
|
unkown
|
page read and write
|
|
|
|
6F7000
|
unkown
|
page read and write
|
|
|
|
7FF5785CD000
|
unkown
|
page readonly
|
|
|
|
412000
|
unkown image
|
page write copy
|
|
|
|
7FF570854000
|
unkown
|
page readonly
|
|
|
|
D5DD07E000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
55E000
|
unkown
|
page read and write
|
|
|
|
2BB0000
|
unkown
|
page readonly
|
|
|
|
7FF519753000
|
unkown
|
page readonly
|
|
|
|
2C307100000
|
unkown
|
page read and write
|
|
|
|
1E2CFA81000
|
unkown
|
page read and write
|
|
|
|
7FF599CDB000
|
unkown
|
page readonly
|
|
|
|
2842E302000
|
unkown
|
page read and write
|
|
|
|
31DF000
|
stack
|
page read and write
|
|
|
|
7FF5192A8000
|
unkown
|
page readonly
|
|
|
|
A7E000
|
unkown
|
page read and write
|
|
|
|
BAD000
|
unkown
|
page read and write
|
|
|
|
20A4000
|
unkown
|
page read and write
|
|
|
|
1E303BD0000
|
unkown
|
page read and write
|
|
|
|
1C312F08000
|
unkown
|
page read and write
|
|
|
|
1C312E70000
|
unkown
|
page read and write
|
|
|
|
10338000
|
unkown
|
page read and write
|
|
|
|
1BE1E46B000
|
unkown
|
page read and write
|
|
|
|
7FF57077C000
|
unkown
|
page readonly
|
|
|
|
1DC52648000
|
unkown
|
page read and write
|
|
|
|
6DD000
|
unkown
|
page read and write
|
|
|
|
7FF599CFB000
|
unkown
|
page readonly
|
|
|
|
20C2000
|
unkown
|
page read and write
|
|
|
|
7FF5196BA000
|
unkown
|
page readonly
|
|
|
|
16C4FEE3000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
16C51F17000
|
unkown
|
page read and write
|
|
|
|
655B77A000
|
unkown
|
page read and write
|
|
|
|
900000
|
unkown
|
page readonly
|
|
|
|
2C30C0B0000
|
unkown
|
page read and write
|
|
|
|
16C53810000
|
unkown
|
page read and write
|
|
|
|
620000
|
unkown
|
page readonly
|
|
|
|
16C51CB0000
|
unkown
|
page read and write
|
|
|
|
20AC000
|
unkown
|
page read and write
|
|
|
|
1BE1E46B000
|
unkown
|
page read and write
|
|
|
|
33CF000
|
stack
|
page read and write
|
|
|
|
7FF563872000
|
unkown
|
page readonly
|
|
|
|
16C4FF13000
|
unkown
|
page read and write
|
|
|
|
6153CE000
|
unkown
|
page read and write
|
|
|
|
7FF5CAB25000
|
unkown
|
page readonly
|
|
|
|
7FF58EE4C000
|
unkown
|
page readonly
|
|
|
|
1BE1E468000
|
unkown
|
page read and write
|
|
|
|
7FF569973000
|
unkown
|
page readonly
|
|
|
|
7FF5195D0000
|
unkown
|
page readonly
|
|
|
|
7FF4F1395000
|
unkown
|
page readonly
|
|
|
|
2360000
|
heap private
|
page read and write
|
|
|
|
16C52000000
|
unkown
|
page read and write
|
|
|
|
7FF578655000
|
unkown
|
page readonly
|
|
|
|
7FF578965000
|
unkown
|
page readonly
|
|
|
|
7FF5199EF000
|
unkown
|
page readonly
|
|
|
|
1DC52633000
|
unkown
|
page read and write
|
|
|
|
16C4FF40000
|
unkown
|
page read and write
|
|
|
|
686000
|
unkown
|
page read and write
|
|
|
|
7FF578948000
|
unkown
|
page readonly
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
9095B7C000
|
unkown
|
page read and write
|
|
|
|
979A7DB000
|
unkown
|
page read and write
|
|
|
|
228000
|
unkown
|
page read and write
|
|
|
|
294103C0000
|
unkown
|
page read and write
|
|
|
|
7FF5CAA90000
|
unkown
|
page readonly
|
|
|
|
1DC52664000
|
unkown
|
page read and write
|
|
|
|
2C30000
|
unkown
|
page readonly
|
|
|
|
682000
|
unkown
|
page read and write
|
|
|
|
7FF522DC8000
|
unkown
|
page readonly
|
|
|
|
2BB4000
|
unkown
|
page readonly
|
|
|
|
2C30BFF0000
|
unkown
|
page read and write
|
|
|
|
7FF58EE35000
|
unkown
|
page readonly
|
|
|
|
3520000
|
unkown
|
page read and write
|
|
|
|
979AC79000
|
unkown
|
page read and write
|
|
|
|
BAE000
|
unkown
|
page read and write
|
|
|
|
10023000
|
unkown
|
page readonly
|
|
|
|
16C51C80000
|
unkown
|
page read and write
|
|
|
|
3CEE000
|
unkown
|
page read and write
|
|
|
|
16C4FEE1000
|
unkown
|
page read and write
|
|
|
|
2689000
|
unkown
|
page read and write
|
|
|
|
16C53310000
|
unkown
|
page read and write
|
|
|
|
7FF57075C000
|
unkown
|
page readonly
|
|
|
|
BAC000
|
heap private
|
page read and write
|
|
|
|
194000
|
stack
|
page read and write
|
|
|
|
20B9000
|
unkown
|
page read and write
|
|
|
|
7E8000
|
unkown
|
page read and write
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
7FF522E94000
|
unkown
|
page readonly
|
|
|
|
1C312E4A000
|
unkown
|
page read and write
|
|
|
|
7FF5997F5000
|
unkown
|
page readonly
|
|
|
|
1E2CFA8D000
|
unkown
|
page read and write
|
|
|
|
7FF599C28000
|
unkown
|
page readonly
|
|
|
|
2A28000
|
unkown
|
page readonly
|
|
|
|
655B4FC000
|
unkown
|
page read and write
|
|
|
|
708000
|
unkown
|
page read and write
|
|
|
|
240A000
|
unkown
|
page read and write
|
|
|
|
66D000
|
unkown
|
page read and write
|
|
|
|
65F000
|
unkown
|
page read and write
|
|
|
|
2C307113000
|
unkown
|
page read and write
|
|
|
|
20B0B9C000
|
unkown
|
page read and write
|
|
|
|
2C30C085000
|
unkown
|
page read and write
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
4188000
|
unkown
|
page read and write
|
|
|
|
6E8000
|
unkown
|
page read and write
|
|
|
|
8A0000
|
unkown
|
page readonly
|
|
|
|
6C7000
|
unkown
|
page read and write
|
|
|
|
2C30C0B4000
|
unkown
|
page read and write
|
|
|
|
7FF5998DF000
|
unkown
|
page readonly
|
|
|
|
7FF57893C000
|
unkown
|
page readonly
|
|
|
|
16C52143000
|
unkown
|
page read and write
|
|
|
|
22397220000
|
unkown
|
page readonly
|
|
|
|
7FF599D0B000
|
unkown
|
page readonly
|
|
|
|
7FF569BAF000
|
unkown
|
page readonly
|
|
|
|
7FF570840000
|
unkown
|
page readonly
|
|
|
|
521000
|
unkown image
|
page readonly
|
|
|
|
C9598FE000
|
unkown
|
page read and write
|
|
|
|
440000
|
unkown
|
page readonly
|
|
|
|
16C517A0000
|
unkown
|
page read and write
|
|
|
|
684000
|
unkown
|
page read and write
|
|
|
|
663000
|
unkown
|
page read and write
|
|
|
|
2A07000
|
unkown
|
page readonly
|
|
|
|
6C4000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
16C52143000
|
unkown
|
page read and write
|
|
|
|
20CB000
|
unkown
|
page read and write
|
|
|
|
7D7000
|
unkown
|
page read and write
|
|
|
|
415F000
|
unkown
|
page read and write
|
|
|
|
2C87000
|
unkown
|
page readonly
|
|
|
|
16C51FCA000
|
unkown
|
page read and write
|
|
|
|
43F1000
|
unkown
|
page read and write
|
|
|
|
2C30BEB0000
|
unkown
|
page read and write
|
|
|
|
22397413000
|
unkown
|
page read and write
|
|
|
|
20A8000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page readonly
|
|
|
|
16C4FFB1000
|
unkown
|
page read and write
|
|
|
|
349000
|
stack
|
page read and write
|
|
|
|
2C30C300000
|
unkown
|
page readonly
|
|
|
|
655B179000
|
unkown
|
page read and write
|
|
|
|
706000
|
unkown
|
page read and write
|
|
|
|
6E9000
|
unkown
|
page read and write
|
|
|
|
1BE1E500000
|
unkown
|
page read and write
|
|
|
|
22397476000
|
unkown
|
page read and write
|
|
|
|
D3A02CB000
|
unkown
|
page read and write
|
|
|
|
7FF570788000
|
unkown
|
page readonly
|
|
|
|
71BE000
|
stack
|
page read and write
|
|
|
|
41B4000
|
unkown
|
page read and write
|
|
|
|
1DC52631000
|
unkown
|
page read and write
|
|
|
|
20B10FB000
|
unkown
|
page read and write
|
|
|
|
6B1D000
|
stack
|
page read and write
|
|
|
|
419C000
|
unkown
|
page read and write
|
|
|
|
C12EEFF000
|
unkown
|
page read and write
|
|
|
|
970000
|
heap default
|
page read and write
|
|
|
|
2C30C04F000
|
unkown
|
page read and write
|
|
|
|
1DC5264B000
|
unkown
|
page read and write
|
|
|
|
92F000
|
stack
|
page read and write
|
|
|
|
20C3000
|
unkown
|
page read and write
|
|
|
|
4156000
|
unkown
|
page read and write
|
|
|
|
252000
|
unkown
|
page read and write
|
|
|
|
1C312E4E000
|
unkown
|
page read and write
|
|
|
|
16C520DE000
|
unkown
|
page read and write
|
|
|
|
1BE1E46B000
|
unkown
|
page read and write
|
|
|
|
7FF599C1C000
|
unkown
|
page readonly
|
|
|
|
1E2CFA4A000
|
unkown
|
page read and write
|
|
|
|
2BCD000
|
unkown
|
page read and write
|
|
|
|
77E000
|
unkown
|
page read and write
|
|
|
|
2E39000
|
unkown
|
page read and write
|
|
|
|
1DC52600000
|
unkown
|
page read and write
|
|
|
|
909587E000
|
unkown
|
page read and write
|
|
|
|
65F000
|
unkown
|
page read and write
|
|
|
|
B11000
|
unkown image
|
page execute read
|
|
|
|
615779000
|
unkown
|
page read and write
|
|
|
|
1D9DAF80000
|
unkown
|
page read and write
|
|
|
|
7FF5786FD000
|
unkown
|
page readonly
|
|
|
|
16C53110000
|
unkown
|
page read and write
|
|
|
|
1E2CFB13000
|
unkown
|
page read and write
|
|
|
|
4146000
|
unkown
|
page read and write
|
|
|
|
2C306830000
|
heap default
|
page read and write
|
|
|
|
1BE1E46D000
|
unkown
|
page read and write
|
|
|
|
78E000
|
unkown
|
page read and write
|
|
|
|
16C51C80000
|
unkown
|
page read and write
|
|
|
|
A2F000
|
stack
|
page read and write
|
|
|
|
449A000
|
unkown
|
page read and write
|
|
|
|
16C51F60000
|
unkown
|
page read and write
|
|
|
|
29FA000
|
unkown
|
page readonly
|
|
|
|
7FF519751000
|
unkown
|
page readonly
|
|
|
|
72E000
|
unkown
|
page read and write
|
|
|
|
1BE1E468000
|
unkown
|
page read and write
|
|
|
|
41B6000
|
unkown
|
page read and write
|
|
|
|
6A8000
|
unkown
|
page read and write
|
|
|
|
2C0D000
|
unkown
|
page readonly
|
|
|
|
16C53210000
|
unkown
|
page read and write
|
|
|
|
16C4FF71000
|
unkown
|
page read and write
|
|
|
|
20F5000
|
unkown
|
page read and write
|
|
|
|
7FF599A31000
|
unkown
|
page readonly
|
|
|
|
7FF563B40000
|
unkown
|
page readonly
|
|
|
|
7FF5CAAA3000
|
unkown
|
page readonly
|
|
|
|
1DC52674000
|
unkown
|
page read and write
|
|
|
|
1DC52661000
|
unkown
|
page read and write
|
|
|
|
708000
|
unkown
|
page read and write
|
|
|
|
7FF5639B5000
|
unkown
|
page readonly
|
|
|
|
689000
|
unkown
|
page read and write
|
|
|
|
16C51C20000
|
unkown
|
page read and write
|
|
|
|
2260000
|
unkown
|
page read and write
|
|
|
|
7FF578603000
|
unkown
|
page readonly
|
|
|
|
7FF522EAF000
|
unkown
|
page readonly
|
|
|
|
4154000
|
unkown
|
page read and write
|
|
|
|
7FF5198F0000
|
unkown
|
page readonly
|
|
|
|
7FF58EF0E000
|
unkown
|
page readonly
|
|
|
|
7FF5789F6000
|
unkown
|
page readonly
|
|
|
|
2C30BFE0000
|
unkown
|
page read and write
|
|
|
|
689000
|
unkown
|
page read and write
|
|
|
|
7FF599C45000
|
unkown
|
page readonly
|
|
|
|
D3A09FD000
|
unkown
|
page read and write
|
|
|
|
7FF5789E8000
|
unkown
|
page readonly
|
|
|
|
BA3000
|
unkown
|
page read and write
|
|
|
|
E44000
|
heap private
|
page read and write
|
|
|
|
2688000
|
unkown
|
page read and write
|
|
|
|
6FF000
|
unkown
|
page read and write
|
|
|
|
E2316FA000
|
unkown
|
page read and write
|
|
|
|
7FF5CA95D000
|
unkown
|
page readonly
|
|
|
|
655AFFA000
|
unkown
|
page read and write
|
|
|
|
C9591FF000
|
unkown
|
page read and write
|
|
|
|
16C53710000
|
unkown
|
page read and write
|
|
|
|
20CF000
|
unkown
|
page read and write
|
|
|
|
7FF519A1E000
|
unkown
|
page readonly
|
|
|
|
7FF570828000
|
unkown
|
page readonly
|
|
|
|
7FF5707A9000
|
unkown
|
page readonly
|
|
|
|
16C51F77000
|
unkown
|
page read and write
|
|
|
|
655B0FA000
|
unkown
|
page read and write
|
|
|
|
7FF5CA8B8000
|
unkown
|
page readonly
|
|
|
|
41C3000
|
unkown
|
page read and write
|
|
|
|
7FF569B6F000
|
unkown
|
page readonly
|
|
|
|
1C312DD0000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
730000
|
heap default
|
page read and write
|
|
|
|
7FF569AE5000
|
unkown
|
page readonly
|
|
|
|
7FF58EF3F000
|
unkown
|
page readonly
|
|
|
|
10001000
|
unkown
|
page execute read
|
|
|
|
2C306A8F000
|
unkown
|
page read and write
|
|
|
|
7FF4F13A3000
|
unkown
|
page readonly
|
|
|
|
16C52202000
|
unkown
|
page read and write
|
|
|
|
2842E400000
|
unkown
|
page write copy
|
|
|
|
16C53310000
|
unkown
|
page read and write
|
|
|
|
B1F000
|
unkown image
|
page write copy
|
|
|
|
E231579000
|
unkown
|
page read and write
|
|
|
|
2C306A40000
|
unkown
|
page read and write
|
|
|
|
8C0000
|
unkown
|
page readonly
|
|
|
|
7FF4F1367000
|
unkown
|
page readonly
|
|
|
|
655ADFA000
|
unkown
|
page read and write
|
|
|
|
BB3000
|
heap private
|
page read and write
|
|
|
|
67C000
|
unkown
|
page read and write
|
|
|
|
7FF569ABC000
|
unkown
|
page readonly
|
|
|
|
7FF569B9B000
|
unkown
|
page readonly
|
|
|
|
E23167F000
|
unkown
|
page read and write
|
|
|
|
16C520A9000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page readonly
|
|
|
|
C12E15B000
|
unkown
|
page read and write
|
|
|
|
16C4FCC0000
|
unkown
|
page readonly
|
|
|
|
7FF519965000
|
unkown
|
page readonly
|
|
|
|
1E304260000
|
unkown
|
page readonly
|
|
|
|
920000
|
unkown
|
page read and write
|
|
|
|
1E303ED0000
|
unkown
|
page readonly
|
|
|
|
11A92EA0000
|
unkown
|
page readonly
|
|
|
|
2772000
|
unkown
|
page read and write
|
|
|
|
4171000
|
unkown
|
page read and write
|
|
|
|
16C520DE000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page readonly
|
|
|
|
2C306B07000
|
unkown
|
page read and write
|
|
|
|
7FF57083B000
|
unkown
|
page readonly
|
|
|
|
45E000
|
unkown
|
page read and write
|
|
|
|
7FF5AFAF9000
|
unkown
|
page readonly
|
|
|
|
1E303C29000
|
unkown
|
page read and write
|
|
|
|
2A25000
|
unkown
|
page readonly
|
|
|
|
2B30000
|
heap private
|
page read and write
|
|
|
|
16C53910000
|
unkown
|
page read and write
|
|
|
|
7DE000
|
unkown
|
page read and write
|
|
|
|
6156F9000
|
unkown
|
page read and write
|
|
|
|
7FF599BC0000
|
unkown
|
page readonly
|
|
|
|
29410030000
|
unkown
|
page readonly
|
|
|
|
7FF57850E000
|
unkown
|
page readonly
|
|
|
|
415D000
|
unkown
|
page read and write
|
|
|
|
699000
|
unkown
|
page read and write
|
|
|
|
2BC0000
|
unkown
|
page read and write
|
|
|
|
B10000
|
unkown image
|
page readonly
|
|
|
|
7FF58EDBE000
|
unkown
|
page readonly
|
|
|
|
7FF5AF54B000
|
unkown
|
page readonly
|
|
|
|
7FF569B76000
|
unkown
|
page readonly
|
|
|
|
7FF57085E000
|
unkown
|
page readonly
|
|
|
|
7FF563BA0000
|
unkown
|
page readonly
|
|
|
|
655B97B000
|
unkown
|
page read and write
|
|
|
|
5DE000
|
unkown
|
page read and write
|
|
|
|
2730000
|
unkown
|
page execute and read and write
|
|
|
|
2C306910000
|
unkown
|
page readonly
|
|
|
|
41AC000
|
unkown
|
page read and write
|
|
|
|
351F000
|
stack
|
page read and write
|
|
|
|
7FF578A2F000
|
unkown
|
page readonly
|
|
|
|
3320000
|
unkown
|
page read and write
|
|
|
|
2680000
|
unkown
|
page read and write
|
|
|
|
1BE1E46B000
|
unkown
|
page read and write
|
|
|
|
868F55E000
|
unkown
|
page read and write
|
|
|
|
1BE1FE70000
|
unkown
|
page read and write
|
|
|
|
16C51F50000
|
unkown
|
page read and write
|
|
|
|
20B3000
|
unkown
|
page read and write
|
|
|
|
196000
|
stack
|
page read and write
|
|
|
|
3E3000
|
unkown
|
page read and write
|
|
|
|
22397300000
|
unkown
|
page readonly
|
|
|
|
6C6000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1BE1E400000
|
unkown
|
page read and write
|
|
|
|
4131000
|
unkown
|
page read and write
|
|
|
|
799000
|
heap default
|
page read and write
|
|
|
|
2C3069F0000
|
unkown
|
page readonly
|
|
|
|
18A000
|
stack
|
page read and write
|
|
|
|
659000
|
unkown
|
page read and write
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
2940F6A0000
|
unkown
|
page read and write
|
|
|
|
4152000
|
unkown
|
page read and write
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
7FF5191CA000
|
unkown
|
page readonly
|
|
|
|
414000
|
unkown image
|
page readonly
|
|
|
|
2BDB000
|
unkown
|
page readonly
|
|
|
|
2688000
|
unkown
|
page read and write
|
|
|
|
16C53610000
|
unkown
|
page read and write
|
|
|
|
6D7000
|
unkown
|
page read and write
|
|
|
|
1E2D0400000
|
unkown
|
page readonly
|
|
|
|
20C3000
|
unkown
|
page read and write
|
|
|
|
6CF000
|
unkown
|
page read and write
|
|
|
|
2940F9C0000
|
unkown
|
page read and write
|
|
|
|
20AC000
|
unkown
|
page read and write
|
|
|
|
ABF000
|
stack
|
page read and write
|
|
|
|
7FF4F1167000
|
unkown
|
page readonly
|
|
|
|
2BEC000
|
unkown
|
page readonly
|
|
|
|
341E000
|
unkown
|
page read and write
|
|
|
|
BA3000
|
unkown
|
page read and write
|
|
|
|
88F000
|
stack
|
page read and write
|
|
|
|
C9592FF000
|
unkown
|
page read and write
|
|
|
|
7FF522DE5000
|
unkown
|
page readonly
|
|
|
|
2C80000
|
heap private
|
page read and write
|
|
|
|
1E30453A000
|
unkown
|
page read and write
|
|
|
|
414000
|
unkown image
|
page readonly
|
|
|
|
7FF569AF3000
|
unkown
|
page readonly
|
|
|
|
7FF57062C000
|
unkown
|
page readonly
|
|
|
|
2BD5000
|
unkown
|
page readonly
|
|
|
|
770000
|
heap default
|
page read and write
|
|
|
|
BB9000
|
unkown
|
page read and write
|
|
|
|
41AC000
|
unkown
|
page read and write
|
|
|
|
1E304340000
|
unkown
|
page write copy
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
2C2E000
|
unkown
|
page read and write
|
|
|
|
2941037E000
|
unkown
|
page read and write
|
|
|
|
90959F9000
|
unkown
|
page read and write
|
|
|
|
41DD000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown
|
page read and write
|
|
|
|
70A000
|
heap default
|
page read and write
|
|
|
|
22397458000
|
unkown
|
page read and write
|
|
|
|
7FF5CAB9D000
|
unkown
|
page readonly
|
|
|
|
10001000
|
unkown
|
page execute read
|
|
|
|
16C53210000
|
unkown
|
page read and write
|
|
|
|
558000
|
heap default
|
page read and write
|
|
|
|
16C4FE29000
|
unkown
|
page read and write
|
|
|
|
7FF5785D7000
|
unkown
|
page readonly
|
|
|
|
7FF599B1D000
|
unkown
|
page readonly
|
|
|
|
16C51F98000
|
unkown
|
page read and write
|
|
|
|
20A1000
|
unkown
|
page read and write
|
|
|
|
16C52089000
|
unkown
|
page read and write
|
|
|
|
4131000
|
unkown
|
page read and write
|
|
|
|
16C51F8B000
|
unkown
|
page read and write
|
|
|
|
16C52202000
|
unkown
|
page read and write
|
|
|
|
16C52382000
|
unkown
|
page read and write
|
|
|
|
2C30BF60000
|
unkown
|
page read and write
|
|
|
|
7FF58ECD2000
|
unkown
|
page readonly
|
|
|
|
1D9DAE70000
|
unkown
|
page readonly
|
|
|
|
41AB000
|
unkown
|
page read and write
|
|
|
|
C958FFC000
|
unkown
|
page read and write
|
|
|
|
20A1000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
73A000
|
heap default
|
page read and write
|
|
|
|
655AEFB000
|
unkown
|
page read and write
|
|
|
|
BA7000
|
unkown
|
page read and write
|
|
|
|
41A4000
|
unkown
|
page read and write
|
|
|
|
11A91360000
|
unkown
|
page write copy
|
|
|
|
472F000
|
stack
|
page read and write
|
|
|
|
7DE000
|
unkown
|
page read and write
|
|
|
|
1E2CF860000
|
heap default
|
page read and write
|
|
|
|
2940F870000
|
unkown
|
page read and write
|
|
|
|
16C4FC50000
|
heap private
|
page read and write
|
|
|
|
C95947C000
|
unkown
|
page read and write
|
|
|
|
7FF563C8F000
|
unkown
|
page readonly
|
|
|
|
6E0000
|
heap private
|
page read and write
|
|
|
|
7E8000
|
unkown
|
page read and write
|
|
|
|
7D8000
|
unkown
|
page read and write
|
|
|
|
47FF000
|
stack
|
page read and write
|
|
|
|
23E000
|
unkown
|
page read and write
|
|
|
|
75F000
|
heap default
|
page read and write
|
|
|
|
16C51C90000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
unkown
|
page read and write
|
|
|
|
1DC5264E000
|
unkown
|
page read and write
|
|
|
|
7FF51995D000
|
unkown
|
page readonly
|
|
|
|
7FF519A14000
|
unkown
|
page readonly
|
|
|
|
2C30C0B7000
|
unkown
|
page read and write
|
|
|
|
40F000
|
unkown image
|
page readonly
|
|
|
|
C00000
|
heap private
|
page read and write
|
|
|
|
1DC52647000
|
unkown
|
page read and write
|
|
|
|
22397502000
|
unkown
|
page read and write
|
|
|
|
6B1000
|
unkown
|
page read and write
|
|
|
|
7FF569679000
|
unkown
|
page readonly
|
|
|
|
684000
|
unkown
|
page read and write
|
|
|
|
7FF57084D000
|
unkown
|
page readonly
|
|
|
|
69E000
|
unkown
|
page read and write
|
|
|
|
3790000
|
unkown
|
page read and write
|
|
|
|
7FF4F1426000
|
unkown
|
page readonly
|
|
|
|
4F0000
|
unkown image
|
page execute and read and write
|
|
|
|
780000
|
heap default
|
page read and write
|
|
|
|
2BE9000
|
unkown
|
page readonly
|
|
|
|
7FF569AA3000
|
unkown
|
page readonly
|
|
|
|
7FF563BF3000
|
unkown
|
page readonly
|
|
|
|
674000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
6B0000
|
unkown
|
page readonly
|
|
|
|
41DD000
|
unkown
|
page read and write
|
|
|
|
20C3000
|
unkown
|
page read and write
|
|
|
|
65D000
|
unkown
|
page read and write
|
|
|
|
868FB77000
|
unkown
|
page read and write
|
|
|
|
16C51F3B000
|
unkown
|
page read and write
|
|
|
|
7FF57060D000
|
unkown
|
page readonly
|
|
|
|
678000
|
unkown
|
page read and write
|
|
|
|
2842E255000
|
unkown
|
page read and write
|
|
|
|
7FF5192B2000
|
unkown
|
page readonly
|
|
|
|
4152000
|
unkown
|
page read and write
|
|
|
|
2C30C027000
|
unkown
|
page read and write
|
|
|
|
4191000
|
unkown
|
page read and write
|
|
|
|
1E2CFA00000
|
unkown
|
page read and write
|
|
|
|
1BE1E468000
|
unkown
|
page read and write
|
|
|
|
16C51C80000
|
unkown
|
page read and write
|
|
|
|
1BE1E46B000
|
unkown
|
page read and write
|
|
|
|
2C306A7B000
|
unkown
|
page read and write
|
|
|
|
79D000
|
heap default
|
page read and write
|
|
|
|
16C4FECE000
|
unkown
|
page read and write
|
|
|
|
41AC000
|
unkown
|
page read and write
|
|
|
|
29FF000
|
unkown
|
page readonly
|
|
|
|
1E2CFC00000
|
unkown
|
page readonly
|
|
|
|
6C20000
|
unkown
|
page read and write
|
|
|
|
7FF578969000
|
unkown
|
page readonly
|
|
|
|
7FF4F138D000
|
unkown
|
page readonly
|
|
|
|
559000
|
unkown image
|
page read and write
|
|
|
|
474000
|
unkown
|
page read and write
|
|
|
|
20AD000
|
unkown
|
page read and write
|
|
|
|
2C307CF0000
|
unkown
|
page read and write
|
|
|
|
630000
|
heap default
|
page read and write
|
|
|
|
7FF599C3D000
|
unkown
|
page readonly
|
|
|
|
2AAB000
|
unkown
|
page readonly
|
|
|
|
474000
|
unkown
|
page read and write
|
|
|
|
7FF522EAF000
|
unkown
|
page readonly
|
|
|
|
474000
|
unkown
|
page read and write
|
|
|
|
7FF4F1185000
|
unkown
|
page readonly
|
|
|
|
22397A02000
|
unkown
|
page read and write
|
|
|
|
16C4FE55000
|
unkown
|
page read and write
|
|
|
|
2C30C00D000
|
unkown
|
page read and write
|
|
|
|
22397990000
|
unkown
|
page readonly
|
|
|
|
16C51F46000
|
unkown
|
page read and write
|
|
|
|
1DC52669000
|
unkown
|
page read and write
|
|
|
|
2C306A95000
|
unkown
|
page read and write
|
|
|
|
700000
|
heap default
|
page read and write
|
|
|
|
2B2E000
|
unkown
|
page read and write
|
|
|
|
708000
|
unkown
|
page read and write
|
|
|
|
16C520DE000
|
unkown
|
page read and write
|
|
|
|
730000
|
heap default
|
page read and write
|
|
|
|
414D000
|
unkown
|
page read and write
|
|
|
|
1E2CFB02000
|
unkown
|
page read and write
|
|
|
|
37A000
|
unkown
|
page read and write
|
|
|
|
11A91469000
|
unkown
|
page read and write
|
|
|
|
2C30C0B1000
|
unkown
|
page read and write
|
|
|
|
4171000
|
unkown
|
page read and write
|
|
|
|
2BF9000
|
unkown
|
page readonly
|
|
|
|
7D8000
|
unkown
|
page read and write
|
|
|
|
C9595FC000
|
unkown
|
page read and write
|
|
|
|
655B27B000
|
unkown
|
page read and write
|
|
|
|
2117000
|
unkown
|
page read and write
|
|
|
|
20A1000
|
unkown
|
page read and write
|
|
|
|
1C312E49000
|
unkown
|
page read and write
|
|
|
|
655B8FB000
|
unkown
|
page read and write
|
|
|
|
70D000
|
unkown
|
page read and write
|
|
|
|
510000
|
unkown
|
page read and write
|
|
|
|
7FF5CAB86000
|
unkown
|
page readonly
|
|
|
|
16C4FEE5000
|
unkown
|
page read and write
|
|
|
|
1DC52683000
|
unkown
|
page read and write
|
|
|
|
7FF522EAB000
|
unkown
|
page readonly
|
|
|
|
1DC52641000
|
unkown
|
page read and write
|
|
|
|
655B5FA000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
2940F92B000
|
unkown
|
page read and write
|
|
|
|
7FF569BAF000
|
unkown
|
page readonly
|
|
|
|
7C0000
|
unkown
|
page read and write
|
|
|
|
11A9146E000
|
unkown
|
page read and write
|
|
|
|
ACE000
|
unkown
|
page read and write
|
|
|
|
6D4000
|
unkown
|
page read and write
|
|
|
|
2C7E000
|
unkown
|
page read and write
|
|
|
|
4187000
|
unkown
|
page read and write
|
|
|
|
2BEC000
|
unkown
|
page readonly
|
|
|
|
655ACFE000
|
unkown
|
page read and write
|
|
|
|
2C12000
|
unkown
|
page readonly
|
|
|
|
BAD000
|
unkown
|
page read and write
|
|
|
|
7FF5199F6000
|
unkown
|
page readonly
|
|
|
|
C9594FB000
|
unkown
|
page read and write
|
|
|
|
2C30BEB4000
|
unkown
|
page read and write
|
|
|
|
6A9000
|
unkown
|
page read and write
|
|
|
|
61534B000
|
unkown
|
page read and write
|
|
|
|
7FF5707A5000
|
unkown
|
page readonly
|
|
|
|
2BF0000
|
unkown
|
page read and write
|
|
|
|
1E303BC0000
|
unkown
|
page readonly
|
|
|
|
2880000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5998B0000
|
unkown
|
page readonly
|
|
|
|
4152000
|
unkown
|
page read and write
|
|
|
|
C3B5DEB000
|
unkown
|
page read and write
|
|
|
|
562000
|
unkown image
|
page readonly
|
|
|
|
708000
|
unkown
|
page read and write
|
|
|
|
1C312E4D000
|
unkown
|
page read and write
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
16C52282000
|
unkown
|
page read and write
|
|
|
|
20C3000
|
unkown
|
page read and write
|
|
|
|
20B12FE000
|
unkown
|
page read and write
|
|
|
|
7FF5789EF000
|
unkown
|
page readonly
|
|
|
|
7FF5195BF000
|
unkown
|
page readonly
|
|
|
|
4440000
|
unkown
|
page readonly
|
|
|
|
32E0000
|
unkown
|
page read and write
|
|
|
|
2BDB000
|
unkown
|
page readonly
|
|
|
|
475000
|
unkown
|
page read and write
|
|
|
|
4192000
|
unkown
|
page read and write
|
|
|
|
663000
|
unkown
|
page read and write
|
|
|
|
1E303C6D000
|
unkown
|
page read and write
|
|
|
|
2C307102000
|
unkown
|
page read and write
|
|
|
|
1DC52550000
|
unkown
|
page readonly
|
|
|
|
674000
|
unkown
|
page read and write
|
|
|
|
7FF57841D000
|
unkown
|
page readonly
|
|
|
|
521000
|
unkown image
|
page readonly
|
|
|
|
7FF56387A000
|
unkown
|
page readonly
|
|
|
|
630000
|
heap default
|
page read and write
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
2B8D000
|
unkown
|
page readonly
|
|
|
|
7FF4F1042000
|
unkown
|
page readonly
|
|
|
|
2C30C220000
|
unkown
|
page read and write
|
|
|
|
16C51CC0000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown
|
page read and write
|
|
|
|
7FF563BC9000
|
unkown
|
page readonly
|
|
|
|
3E40000
|
unkown
|
page readonly
|
|
|
|
460000
|
unkown
|
page read and write
|
|
|
|
7FF5CA3F5000
|
unkown
|
page readonly
|
|
|
|
70E000
|
unkown
|
page read and write
|
|
|
|
2940F8B0000
|
unkown
|
page read and write
|
|
|
|
7FF578A00000
|
unkown
|
page readonly
|
|
|
|
1DC5265C000
|
unkown
|
page read and write
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
868F4DC000
|
unkown
|
page read and write
|
|
|
|
2117000
|
unkown
|
page read and write
|
|
|
|
E2311AB000
|
unkown
|
page read and write
|
|
|
|
2BA9000
|
unkown
|
page readonly
|
|
|
|
1BE1E390000
|
unkown
|
page readonly
|
|
|
|
7FF4F13AA000
|
unkown
|
page readonly
|
|
|
|
16C53910000
|
unkown
|
page read and write
|
|
|
|
16C51CA0000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
heap default
|
page read and write
|
|
|
|
2940F90D000
|
unkown
|
page read and write
|
|
|
|
6AE000
|
unkown
|
page read and write
|
|
|
|
1BE1E46D000
|
unkown
|
page read and write
|
|
|
|
7A7000
|
unkown
|
page read and write
|
|
|
|
1C312E3C000
|
unkown
|
page read and write
|
|
|
|
44F2000
|
unkown
|
page read and write
|
|
|
|
E2D000
|
unkown
|
page read and write
|
|
|
|
79C000
|
heap default
|
page read and write
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
24F000
|
unkown
|
page read and write
|
|
|
|
7FF5CAAF5000
|
unkown
|
page readonly
|
|
|
|
615000
|
heap default
|
page read and write
|
|
|
|
3CA0000
|
unkown
|
page read and write
|
|
|
|
223973D0000
|
unkown
|
page readonly
|
|
|
|
7FF578291000
|
unkown
|
page readonly
|
|
|
|
BFE000
|
unkown
|
page read and write
|
|
|
|
620000
|
heap default
|
page read and write
|
|
|
|
7FF5195E4000
|
unkown
|
page readonly
|
|
|
|
7FF522E9E000
|
unkown
|
page readonly
|
|
|
|
7FF57086D000
|
unkown
|
page readonly
|
|
|
|
7B4000
|
unkown
|
page read and write
|
|
|
|
41AC000
|
unkown
|
page read and write
|
|
|
|
7FF569AA7000
|
unkown
|
page readonly
|
|
|
|
20B0EFE000
|
unkown
|
page read and write
|
|
|
|
521000
|
unkown image
|
page readonly
|
|
|
|
7FF5699C3000
|
unkown
|
page readonly
|
|
|
|
2689000
|
unkown
|
page read and write
|
|
|
|
1C312F00000
|
unkown
|
page read and write
|
|
|
|
7FF522E8D000
|
unkown
|
page readonly
|
|
|
|
1DC52649000
|
unkown
|
page read and write
|
|
|
|
2C307015000
|
unkown
|
page read and write
|
|
|
|
4156000
|
unkown
|
page read and write
|
|
|
|
77C000
|
heap default
|
page read and write
|
|
|
|
7FF578302000
|
unkown
|
page readonly
|
|
|
|
2C75000
|
unkown
|
page readonly
|
|
|
|
6A80000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCB4000
|
unkown
|
page readonly
|
|
|
|
7FF5CAAC7000
|
unkown
|
page readonly
|
|
|
|
BA7000
|
heap private
|
page read and write
|
|
|
|
7C4000
|
unkown
|
page read and write
|
|
|
|
47BE000
|
unkown
|
page read and write
|
|
|
|
4152000
|
unkown
|
page read and write
|
|
|
|
4445000
|
unkown
|
page read and write
|
|
|
|
1DC52646000
|
unkown
|
page read and write
|
|
|
|
16C53310000
|
unkown
|
page read and write
|
|
|
|
7FF519780000
|
unkown
|
page readonly
|
|
|
|
24C000
|
unkown
|
page read and write
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
7FF522E80000
|
unkown
|
page readonly
|
|
|
|
717C000
|
unkown
|
page read and write
|
|
|
|
4180000
|
unkown
|
page read and write
|
|
|
|
2842E23F000
|
unkown
|
page read and write
|
|
|
|
16C4FEE4000
|
unkown
|
page read and write
|
|
|
|
2BA9000
|
unkown
|
page readonly
|
|
|
|
7FF58EE22000
|
unkown
|
page readonly
|
|
|
|
7FF578A2F000
|
unkown
|
page readonly
|
|
|
|
67F000
|
unkown
|
page read and write
|
|
|
|
1DC52629000
|
unkown
|
page read and write
|
|
|
|
41F7000
|
unkown
|
page read and write
|
|
|
|
249000
|
unkown
|
page read and write
|
|
|
|
20A1000
|
unkown
|
page read and write
|
|
|
|
1E2CF870000
|
unkown
|
page readonly
|
|
|
|
7FF599CC8000
|
unkown
|
page readonly
|
|
|
|
2B63000
|
unkown
|
page readonly
|
|
|
|
7FF58E784000
|
unkown
|
page readonly
|
|
|
|
1D9DAF80000
|
unkown
|
page read and write
|
|
|
|
7DE000
|
unkown
|
page read and write
|
|
|
|
16C4FEE5000
|
unkown
|
page read and write
|
|
|
|
5030000
|
unkown
|
page read and write
|
|
|
|
41CA000
|
unkown
|
page read and write
|
|
|
|
7FF4F1370000
|
unkown
|
page readonly
|
|
|
|
37E000
|
unkown
|
page read and write
|
|
|
|
7FF57871F000
|
unkown
|
page readonly
|
|
|
|
310D000
|
unkown
|
page read and write
|
|
|
|
8C0000
|
heap private
|
page read and write
|
|
|
|
11A9146B000
|
unkown
|
page read and write
|
|
|
|
1D9DA813000
|
unkown
|
page read and write
|
|
|
|
11A91600000
|
unkown
|
page readonly
|
|
|
|
562000
|
unkown image
|
page readonly
|
|
|
|
34AC000
|
unkown
|
page read and write
|
|
|
|
11A913F0000
|
unkown
|
page read and write
|
|
|
|
16C52302000
|
unkown
|
page read and write
|
|
|
|
7FF5693D6000
|
unkown
|
page readonly
|
|
|
|
7D7000
|
heap default
|
page read and write
|
|
|
|
6BF000
|
unkown
|
page read and write
|
|
|
|
16C51F46000
|
unkown
|
page read and write
|
|
|
|
7FF5198E7000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
7FF569AC8000
|
unkown
|
page readonly
|
|
|
|
8C9000
|
heap private
|
page read and write
|
|
|
|
6C0000
|
unkown
|
page read and write
|
|
|
|
2E39000
|
unkown
|
page read and write
|
|
|
|
7FF569B9E000
|
unkown
|
page readonly
|
|
|
|
7FF569B68000
|
unkown
|
page readonly
|
|
|
|
7FF519A2B000
|
unkown
|
page readonly
|
|
|
|
7FF5AFB07000
|
unkown
|
page readonly
|
|
|
|
4150000
|
unkown
|
page read and write
|
|
|
|
7FF51972D000
|
unkown
|
page readonly
|
|
|
|
7FF522DB7000
|
unkown
|
page readonly
|
|
|
|
655AD7A000
|
unkown
|
page read and write
|
|
|
|
2E26000
|
unkown
|
page read and write
|
|
|
|
868FC7F000
|
unkown
|
page read and write
|
|
|
|
979AD79000
|
unkown
|
page read and write
|
|
|
|
8C6000
|
heap private
|
page read and write
|
|
|
|
C12E6FD000
|
unkown
|
page read and write
|
|
|
|
210A000
|
unkown
|
page read and write
|
|
|
|
187000
|
stack
|
page read and write
|
|
|
|
41DF000
|
unkown
|
page read and write
|
|
|
|
2842FD00000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
707E000
|
unkown
|
page read and write
|
|
|
|
7FF58EF06000
|
unkown
|
page readonly
|
|
|
|
AC0000
|
unkown
|
page readonly
|
|
|
|
2940F820000
|
unkown
|
page readonly
|
|
|
|
20AE000
|
unkown
|
page read and write
|
|
|
|
1E2CFB00000
|
unkown
|
page read and write
|
|
|
|
2AB4000
|
unkown
|
page readonly
|
|
|
|
655B6FA000
|
unkown
|
page read and write
|
|
|
|
1E304500000
|
unkown
|
page read and write
|
|
|
|
16C51FEC000
|
unkown
|
page read and write
|
|
|
|
61E000
|
unkown
|
page read and write
|
|
|
|
7FF58ED4D000
|
unkown
|
page readonly
|
|
|
|
194000
|
stack
|
page read and write
|
|
|
|
7FF5AFBD4000
|
unkown
|
page readonly
|
|
|
|
799000
|
unkown
|
page read and write
|
|
|
|
7FF51991C000
|
unkown
|
page readonly
|
|
|
|
7FF57862C000
|
unkown
|
page readonly
|
|
|
|
7FF563BD3000
|
unkown
|
page readonly
|
|
|
|
7FF58EF3D000
|
unkown
|
page readonly
|
|
|
|
7FF519904000
|
unkown
|
page readonly
|
|
|
|
3030000
|
unkown
|
page read and write
|
|
|
|
7FF519867000
|
unkown
|
page readonly
|
|
|
|
11A91500000
|
unkown
|
page read and write
|
|
|
|
16C520DA000
|
unkown
|
page read and write
|
|
|
|
7FF5199FB000
|
unkown
|
page readonly
|
|
|
|
7FF5998F2000
|
unkown
|
page readonly
|
|
|
|
4155000
|
unkown
|
page read and write
|
|
|
|
2940F90D000
|
unkown
|
page read and write
|
|
|
|
16C52382000
|
unkown
|
page read and write
|
|
|
|
2C306A29000
|
unkown
|
page read and write
|
|
|
|
1BE1E46B000
|
unkown
|
page read and write
|
|
|
|
7CA000
|
unkown
|
page read and write
|
|
|
|
16C51F79000
|
unkown
|
page read and write
|
|
|
|
A2F000
|
stack
|
page read and write
|
|
|
|
6D0000
|
unkown
|
page readonly
|
|
|
|
7FF599AAD000
|
unkown
|
page readonly
|
|
|
|
7FF58EDB4000
|
unkown
|
page readonly
|
|
|
|
7D7000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
1C312E7B000
|
unkown
|
page read and write
|
|
|
|
7FF4F141F000
|
unkown
|
page readonly
|
|
|
|
16C53810000
|
unkown
|
page read and write
|
|
|
|
16C52300000
|
unkown
|
page read and write
|
|
|
|
16C53010000
|
unkown
|
page read and write
|
|
|
|
7FF569AFA000
|
unkown
|
page readonly
|
|
|
|
2C30BFD0000
|
unkown
|
page read and write
|
|
|
|
2C306840000
|
unkown
|
page readonly
|
|
|
|
7FF519A2F000
|
unkown
|
page readonly
|
|
|
|
310C000
|
unkown
|
page read and write
|
|
|
|
16C52302000
|
unkown
|
page read and write
|
|
|
|
B10000
|
unkown image
|
page readonly
|
|
|
|
630000
|
unkown
|
page readonly
|
|
|
|
20B0FF5000
|
unkown
|
page read and write
|
|
|
|
1BE1E46D000
|
unkown
|
page read and write
|
|
|
|
4193000
|
unkown
|
page read and write
|
|
|
|
1E303CB8000
|
unkown
|
page read and write
|
|
|
|
AE0000
|
unkown
|
page readonly
|
|
|
|
2B91000
|
unkown
|
page readonly
|
|
|
|
7FF4F136C000
|
unkown
|
page readonly
|
|
|
|
2BF0000
|
unkown
|
page read and write
|
|
|
|
7FF58EE58000
|
unkown
|
page readonly
|
|
|
|
16C52017000
|
unkown
|
page read and write
|
|
|
|
4159000
|
unkown
|
page read and write
|
|
|
|
665000
|
unkown
|
page read and write
|
|
|
|
2A9C000
|
unkown
|
page readonly
|
|
|
|
685000
|
unkown
|
page read and write
|
|
|
|
2E21000
|
unkown
|
page read and write
|
|
|
|
16C53110000
|
unkown
|
page read and write
|
|
|
|
4195000
|
unkown
|
page read and write
|
|
|
|
655B1FB000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown
|
page readonly
|
|
|
|
2C306AFF000
|
unkown
|
page read and write
|
|
|
|
1E303E00000
|
unkown
|
page readonly
|
|
|
|
235000
|
unkown
|
page read and write
|
|
|
|
1D9DA7F0000
|
heap default
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page readonly
|
|
|
|
20B0000
|
unkown
|
page read and write
|
|
|
|
7FF522DFA000
|
unkown
|
page readonly
|
|
|
|
1BE1E46B000
|
unkown
|
page read and write
|
|
|
|
7FF58EC8A000
|
unkown
|
page readonly
|
|
|
|
7FF599BFC000
|
unkown
|
page readonly
|
|
|
|
1C312E29000
|
unkown
|
page read and write
|
|
|
|
6EA000
|
unkown
|
page read and write
|
|
|
|
16C520DA000
|
unkown
|
page read and write
|
|
|
|
7FF5196EF000
|
unkown
|
page readonly
|
|
|
|
7FF4F130D000
|
unkown
|
page readonly
|
|
|
|
20B3000
|
unkown
|
page read and write
|
|
|
|
655B57A000
|
unkown
|
page read and write
|
|
|
|
7FF5CAB7F000
|
unkown
|
page readonly
|
|
|
|
2C306AA1000
|
unkown
|
page read and write
|
|
|
|
2A07000
|
unkown
|
page readonly
|
|
|
|
655AE7F000
|
unkown
|
page read and write
|
|
|
|
16C51F19000
|
unkown
|
page read and write
|
|
|
|
7FF563C8F000
|
unkown
|
page readonly
|
|
|
|
7FF519A1B000
|
unkown
|
page readonly
|
|
|
|
562000
|
unkown image
|
page readonly
|
|
|
|
7FF5CA868000
|
unkown
|
page readonly
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
20D3000
|
unkown
|
page read and write
|
|
|
|
4172000
|
unkown
|
page read and write
|
|
|
|
73C000
|
heap default
|
page read and write
|
|
|
|
B1C000
|
unkown image
|
page readonly
|
|
|
|
7FF5195D4000
|
unkown
|
page readonly
|
|
|
|
5DA000
|
stack
|
page read and write
|
|
|
|
2AAE000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
1E303C13000
|
unkown
|
page read and write
|
|
|
|
2C307780000
|
unkown
|
page read and write
|
|
|
|
1BE1E340000
|
unkown
|
page write copy
|
|
|
|
559000
|
unkown image
|
page read and write
|
|
|
|
A30000
|
unkown
|
page read and write
|
|
|
|
20A0000
|
unkown
|
page read and write
|
|
|
|
20A9000
|
unkown
|
page read and write
|
|
|
|
16C4FE13000
|
unkown
|
page read and write
|
|
|
|
22397C00000
|
unkown
|
page readonly
|
|
|
|
1E2CFA4D000
|
unkown
|
page read and write
|
|
|
|
4172000
|
unkown
|
page read and write
|
|
|
|
16C520DC000
|
unkown
|
page read and write
|
|
|
|
41DE000
|
unkown
|
page read and write
|
|
|
|
10332000
|
unkown
|
page read and write
|
|
|
|
16C51F57000
|
unkown
|
page read and write
|
|
|
|
7FF522979000
|
unkown
|
page readonly
|
|
|
|
7FF58EE2C000
|
unkown
|
page readonly
|
|
|
|
7FF57864D000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown
|
page read and write
|
|
|
|
1E2CF940000
|
unkown
|
page readonly
|
|
|
|
11A91413000
|
unkown
|
page read and write
|
|
|
|
16C51FE6000
|
unkown
|
page read and write
|
|
|
|
415D000
|
unkown
|
page read and write
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
310A000
|
heap private
|
page read and write
|
|
|
|
655B07A000
|
unkown
|
page read and write
|
|
|
|
2842E0B0000
|
heap private
|
page read and write
|
|
|
|
23EA000
|
unkown
|
page read and write
|
|
|
|
2C30C057000
|
unkown
|
page read and write
|
|
|
|
7FF5198A4000
|
unkown
|
page readonly
|
|
|
|
7FF578427000
|
unkown
|
page readonly
|
|
|
|
1BE1E2D0000
|
heap private
|
page read and write
|
|
|
|
680000
|
unkown
|
page read and write
|
|
|
|
23B0000
|
unkown
|
page read and write
|
|
|
|
7FF599BAF000
|
unkown
|
page readonly
|
|
|
|
1BE1E513000
|
unkown
|
page read and write
|
|
|
|
10332000
|
unkown
|
page read and write
|
|
|
|
662000
|
unkown
|
page read and write
|
|
|
|
1E304402000
|
unkown
|
page read and write
|
|
|
|
7FF56386D000
|
unkown
|
page readonly
|
|
|
|
778000
|
heap default
|
page read and write
|
|
|
|
331D000
|
stack
|
page read and write
|
|
|
|
8CA000
|
heap private
|
page read and write
|
|
|
|
689000
|
unkown
|
page read and write
|
|
|
|
4131000
|
unkown
|
page read and write
|
|
|
|
7FF5195DE000
|
unkown
|
page readonly
|
|
|
|
4130000
|
unkown
|
page read and write
|
|
|
|
16C4FF50000
|
unkown
|
page read and write
|
|
|
|
7FF57870B000
|
unkown
|
page readonly
|
|
|
|
7FF522E9B000
|
unkown
|
page readonly
|
|
|
|
1E304940000
|
unkown
|
page readonly
|
|
|
|
2117000
|
unkown
|
page read and write
|
|
|
|
2C30BFA0000
|
unkown
|
page read and write
|
|
|
|
23D000
|
unkown
|
page read and write
|
|
|
|
7FF5997BF000
|
unkown
|
page readonly
|
|
|
|
7FF519737000
|
unkown
|
page readonly
|
|
|
|
909597A000
|
unkown
|
page read and write
|
|
|
|
BB4000
|
heap private
|
page read and write
|
|
|
|
309F000
|
stack
|
page read and write
|
|
|
|
419D000
|
unkown
|
page read and write
|
|
|
|
2BB0000
|
unkown
|
page readonly
|
|
|
|
8B0000
|
heap private
|
page read and write
|
|
|
|
7FF570744000
|
unkown
|
page readonly
|
|
|
|
16C4FEE2000
|
unkown
|
page read and write
|
|
|
|
1C312E13000
|
unkown
|
page read and write
|
|
|
|
7FF58ED01000
|
unkown
|
page readonly
|
|
|
|
6A9000
|
unkown
|
page read and write
|
|
|
|
194000
|
stack
|
page read and write
|
|
|
|
7FF563B47000
|
unkown
|
page readonly
|
|
|
|
1C312E02000
|
unkown
|
page read and write
|
|
|
|
E6C000
|
stack
|
page read and write
|
|
|
|
4152000
|
unkown
|
page read and write
|
|
|
|
620000
|
unkown
|
page readonly
|
|
|
|
2A98000
|
unkown
|
page readonly
|
|
|
|
22397429000
|
unkown
|
page read and write
|
|
|
|
2C30C064000
|
unkown
|
page read and write
|
|
|
|
9E0000
|
unkown
|
page readonly
|
|
|
|
7FF58EA9A000
|
unkown
|
page readonly
|
|
|
|
7FF599CF4000
|
unkown
|
page readonly
|
|
|
|
30DE000
|
unkown
|
page read and write
|
|
|
|
70D000
|
unkown
|
page read and write
|
|
|
|
2E81000
|
unkown
|
page read and write
|
|
|
|
979ACFE000
|
unkown
|
page read and write
|
|
|
|
9F0000
|
heap private
|
page read and write
|
|
|
|
1C312F13000
|
unkown
|
page read and write
|
|
|
|
7FF57852D000
|
unkown
|
page readonly
|
|
|
|
2C30BE90000
|
unkown
|
page read and write
|
|
|
|
2C30BE98000
|
unkown
|
page read and write
|
|
|
|
6C90000
|
heap private
|
page read and write
|
|
|
|
4445000
|
unkown
|
page read and write
|
|
|
|
16C4FF2A000
|
unkown
|
page read and write
|
|
|
|
7FF5AF50D000
|
unkown
|
page readonly
|
|
|
|
7FF5CABA4000
|
unkown
|
page readonly
|
|
|
|
840000
|
unkown
|
page readonly
|
|
|
|
D3A0CFF000
|
unkown
|
page read and write
|
|
|
|
7FF57056D000
|
unkown
|
page readonly
|
|
|
|
19B000
|
stack
|
page read and write
|
|
|
|
20AE000
|
unkown
|
page read and write
|
|
|
|
7FF4F1430000
|
unkown
|
page readonly
|
|
|
|
7FF5AFBFD000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown
|
page read and write
|
|
|
|
672000
|
unkown
|
page read and write
|
|
|
|
419C000
|
unkown
|
page read and write
|
|
|
|
16C4FFB2000
|
unkown
|
page read and write
|
|
|
|
562000
|
unkown image
|
page readonly
|
|
|
|
412000
|
unkown image
|
page read and write
|
|
|
|
7FF5AF569000
|
unkown
|
page readonly
|
|
|
|
253A000
|
unkown
|
page read and write
|
|
|
|
7FF563BBD000
|
unkown
|
page readonly
|
|
|
|
20A9000
|
unkown
|
page read and write
|
|
|
|
16C51FC7000
|
unkown
|
page read and write
|
|
|
|
20A9000
|
unkown
|
page read and write
|
|
|
|
7FF569688000
|
unkown
|
page readonly
|
|
|
|
7FF58EE47000
|
unkown
|
page readonly
|
|
|
|
2940F700000
|
unkown
|
page readonly
|
|
|
|
868FA7E000
|
unkown
|
page read and write
|
|
|
|
1DC52652000
|
unkown
|
page read and write
|
|
|
|
7FF58EEFF000
|
unkown
|
page readonly
|
|
|
|
7FF58EE37000
|
unkown
|
page readonly
|
|
|
|
7FF569ADD000
|
unkown
|
page readonly
|
|
|
|
43F0000
|
unkown
|
page read and write
|
|
|
|
1D9DA800000
|
unkown
|
page read and write
|
|
|
|
2C7C000
|
unkown
|
page readonly
|
|
|
|
41F6000
|
unkown
|
page read and write
|
|
|
|
7FF522CC3000
|
unkown
|
page readonly
|
|
|
|
2C30C0AD000
|
unkown
|
page read and write
|
|
|
|
7FF563C8B000
|
unkown
|
page readonly
|
|
|
|
7FF578627000
|
unkown
|
page readonly
|
|
|
|
7FF4F115D000
|
unkown
|
page readonly
|
|
|
|
7FF599CED000
|
unkown
|
page readonly
|
|
|
|
16C4FEC0000
|
unkown
|
page read and write
|
|
|
|
16C52342000
|
unkown
|
page read and write
|
|
|
|
8B9000
|
heap private
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
7D9000
|
unkown
|
page read and write
|
|
|
|
C12EBFF000
|
unkown
|
page read and write
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
16C53110000
|
unkown
|
page read and write
|
|
|
|
1E2CFA6E000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCA0000
|
unkown
|
page readonly
|
|
|
|
7FF522DDD000
|
unkown
|
page readonly
|
|
|
|
1DC52645000
|
unkown
|
page read and write
|
|
|
|
437F000
|
stack
|
page read and write
|
|
|
|
55A000
|
unkown image
|
page write copy
|
|
|
|
2681000
|
unkown
|
page read and write
|
|
|
|
1E304330000
|
unkown
|
page readonly
|
|
|
|
16C4FF3F000
|
unkown
|
page read and write
|
|
|
|
11A91220000
|
heap private
|
page read and write
|
|
|
|
2C30C021000
|
unkown
|
page read and write
|
|
|
|
66F000
|
unkown
|
page read and write
|
|
|
|
7FF578293000
|
unkown
|
page readonly
|
|
|
|
11A9146D000
|
unkown
|
page read and write
|
|
|
|
2239745A000
|
unkown
|
page read and write
|
|
|
|
2940F906000
|
unkown
|
page read and write
|
|
|
|
2C306ABA000
|
unkown
|
page read and write
|
|
|
|
7FF5AF550000
|
unkown
|
page readonly
|
|
|
|
4F2000
|
unkown image
|
page execute and write copy
|
|
|
|
16C4FE6C000
|
unkown
|
page read and write
|
|
|
|
2C30BD00000
|
unkown
|
page read and write
|
|
|
|
41AC000
|
unkown
|
page read and write
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
7FF56997E000
|
unkown
|
page readonly
|
|
|
|
44E000
|
unkown
|
page read and write
|
|
|
|
2681000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
heap private
|
page read and write
|
|
|
|
3E3E000
|
stack
|
page read and write
|
|
|
|
1DC52644000
|
unkown
|
page read and write
|
|
|
|
7FF4F144E000
|
unkown
|
page readonly
|
|
|
|
11A913B0000
|
unkown
|
page readonly
|
|
|
|
B11000
|
unkown image
|
page execute read
|
|
|
|
7FF5CAB03000
|
unkown
|
page readonly
|
|
|
|
655B37B000
|
unkown
|
page read and write
|
|
|
|
470000
|
heap default
|
page read and write
|
|
|
|
41A3000
|
unkown
|
page read and write
|
|
|
|
22397210000
|
heap default
|
page read and write
|
|
|
|
1BE1E468000
|
unkown
|
page read and write
|
|
|
|
1E2CFA55000
|
unkown
|
page read and write
|
|
|
|
420B000
|
unkown
|
page read and write
|
|
|
|
1BE1E429000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCCF000
|
unkown
|
page readonly
|
|
|
|
2750000
|
unkown
|
page execute and read and write
|
|
|
|
480000
|
unkown
|
page readonly
|
|
|
|
868F8F5000
|
unkown
|
page read and write
|
|
|
|
1DC52800000
|
unkown
|
page readonly
|
|
|
|
2C71000
|
unkown
|
page readonly
|
|
|
|
20B3000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
heap default
|
page read and write
|
|
|
|
7FF563B3D000
|
unkown
|
page readonly
|
|
|
|
7FF563BA8000
|
unkown
|
page readonly
|
|
|
|
2C30BE90000
|
unkown
|
page read and write
|
|
|
|
7E4000
|
unkown
|
page read and write
|
|
|
|
569000
|
heap default
|
page read and write
|
|
|
|
1C313602000
|
unkown
|
page read and write
|
|
|
|
6F8000
|
heap default
|
page read and write
|
|
|
|
7FF599B47000
|
unkown
|
page readonly
|
|
|
|
43EF000
|
stack
|
page read and write
|
|
|
|
2C30BD80000
|
unkown
|
page read and write
|
|
|
|
BA3000
|
unkown
|
page read and write
|
|
|
|
2C30C310000
|
unkown
|
page read and write
|
|
|
|
16C53610000
|
unkown
|
page read and write
|
|
|
|
4F90000
|
unkown
|
page readonly
|
|
|
|
7FF58EE75000
|
unkown
|
page readonly
|
|
|
|
16C51FF7000
|
unkown
|
page read and write
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
70D000
|
unkown
|
page read and write
|
|
|
|
7FF4F1378000
|
unkown
|
page readonly
|
|
|
|
1E303C3E000
|
unkown
|
page read and write
|
|
|
|
18D000
|
stack
|
page read and write
|
|
|
|
7FF519A0D000
|
unkown
|
page readonly
|
|
|
|
C12E57A000
|
unkown
|
page read and write
|
|
|
|
2C30C0A0000
|
unkown
|
page read and write
|
|
|
|
326000
|
unkown
|
page read and write
|
|
|
|
DC000
|
unkown
|
page read and write
|
|
|
|
1E303CC9000
|
unkown
|
page read and write
|
|
|
|
20A9000
|
unkown
|
page read and write
|
|
|
|
22397600000
|
unkown
|
page readonly
|
|
|
|
16C4FEE5000
|
unkown
|
page read and write
|
|
|
|
2C30BEC0000
|
unkown
|
page read and write
|
|
|
|
11A92DA0000
|
unkown
|
page read and write
|
|
|
|
C3B65FB000
|
unkown
|
page read and write
|
|
|
|
16C53910000
|
unkown
|
page read and write
|
|
|
|
20A4000
|
unkown
|
page read and write
|
|
|
|
89E000
|
stack
|
page read and write
|
|
|
|
7C1000
|
unkown
|
page read and write
|
|
|
|
16C53510000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
unkown
|
page read and write
|
|
|
|
7FF599A0D000
|
unkown
|
page readonly
|
|
|
|
223971B0000
|
heap private
|
page read and write
|
|
|
|
41C3000
|
unkown
|
page read and write
|
|
|
|
7FF5786D8000
|
unkown
|
page readonly
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
7FF58EC18000
|
unkown
|
page readonly
|
|
|
|
910000
|
unkown
|
page readonly
|
|
|
|
7FF5CAAF9000
|
unkown
|
page readonly
|
|
|
|
2C30C033000
|
unkown
|
page read and write
|
|
|
|
D5DCD7E000
|
unkown
|
page read and write
|
|
|
|
59E000
|
unkown
|
page read and write
|
|
|
|
C3B66FB000
|
unkown
|
page read and write
|
|
|
|
7FF5196A9000
|
unkown
|
page readonly
|
|
|
|
659000
|
unkown
|
page read and write
|
|
|
|
10337000
|
unkown
|
page readonly
|
|
|
|
418F000
|
unkown
|
page read and write
|
|
|
|
7FF5195AA000
|
unkown
|
page readonly
|
|
|
|
61E000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC8F000
|
unkown
|
page readonly
|
|
|
|
7FF58EE14000
|
unkown
|
page readonly
|
|
|
|
7FF569B8D000
|
unkown
|
page readonly
|
|
|
|
2580000
|
unkown
|
page read and write
|
|
|
|
16C520DA000
|
unkown
|
page read and write
|
|
|
|
474000
|
unkown
|
page read and write
|
|
|
|
2B39000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCBB000
|
unkown
|
page readonly
|
|
|
|
674000
|
unkown
|
page read and write
|
|
|
|
8B5000
|
heap private
|
page read and write
|
|
|
|
7FF599A17000
|
unkown
|
page readonly
|
|
|
|
1DC5265E000
|
unkown
|
page read and write
|
|
|
|
7FF5197C4000
|
unkown
|
page readonly
|
|
|
|
785000
|
heap default
|
page read and write
|
|
|
|
1C312DF0000
|
unkown
|
page read and write
|
|
|
|
550000
|
heap default
|
page read and write
|
|
|
|
6D0000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
42BE000
|
unkown
|
page read and write
|
|
|
|
16C53310000
|
unkown
|
page read and write
|
|
|
|
7AE000
|
unkown
|
page read and write
|
|
|
|
7FF569AB7000
|
unkown
|
page readonly
|
|
|
|
67D000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown
|
page readonly
|
|
|
|
2BE1000
|
unkown
|
page readonly
|
|
|
|
7FF4F145F000
|
unkown
|
page readonly
|
|
|
|
29410660000
|
unkown
|
page read and write
|
|
|
|
16C520DC000
|
unkown
|
page read and write
|
|
|
|
712000
|
unkown
|
page read and write
|
|
|
|
11A91429000
|
unkown
|
page read and write
|
|
|
|
2C30BCF0000
|
unkown
|
page read and write
|
|
|
|
7FF599D0F000
|
unkown
|
page readonly
|
|
|
|
2C307118000
|
unkown
|
page read and write
|
|
|
|
2C307761000
|
unkown
|
page read and write
|
|
|
|
20B3000
|
unkown
|
page read and write
|
|
|
|
940000
|
unkown
|
page readonly
|
|
|
|
C12EAFF000
|
unkown
|
page read and write
|
|
|
|
7FF4F1317000
|
unkown
|
page readonly
|
|
|
|
6EF000
|
unkown
|
page read and write
|
|
|
|
7FF5700E2000
|
unkown
|
page readonly
|
|
|
|
7FF522988000
|
unkown
|
page readonly
|
|
|
|
7FF4F1310000
|
unkown
|
page readonly
|
|
|
|
310C000
|
heap private
|
page read and write
|
|
|
|
10001000
|
unkown
|
page execute read
|
|
|
|
660000
|
unkown
|
page read and write
|
|
|
|
16C53010000
|
unkown
|
page read and write
|
|
|
|
7FF58EE8A000
|
unkown
|
page readonly
|
|
|
|
2E64000
|
unkown
|
page read and write
|
|
|
|
655B9FE000
|
unkown
|
page read and write
|
|
|
|
559000
|
unkown image
|
page write copy
|
|
|
|
1E2CFA29000
|
unkown
|
page read and write
|
|
|
|
2C30BEB1000
|
unkown
|
page read and write
|
|
|
|
16C4FDE0000
|
unkown
|
page readonly
|
|
|
|
16C52143000
|
unkown
|
page read and write
|
|
|
|
6CA000
|
unkown
|
page read and write
|
|
|
|
474000
|
unkown
|
page read and write
|
|
|
|
BA7000
|
unkown
|
page read and write
|
|
|
|
8FE000
|
stack
|
page read and write
|
|
|
|
7FF519912000
|
unkown
|
page readonly
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
D5DD17F000
|
unkown
|
page read and write
|
|
|
|
1DC52602000
|
unkown
|
page read and write
|
|
|
|
16C53410000
|
unkown
|
page read and write
|
|
|
|
7FF522C9E000
|
unkown
|
page readonly
|
|
|
|
2C30C021000
|
unkown
|
page read and write
|
|
|
|
C12E9FD000
|
unkown
|
page read and write
|
|
|
|
7FF563B64000
|
unkown
|
page readonly
|
|
|
|
7FF58EF2E000
|
unkown
|
page readonly
|
|
|
|
16C4FE6E000
|
unkown
|
page read and write
|
|
|
|
462E000
|
unkown
|
page read and write
|
|
|
|
16C4FF91000
|
unkown
|
page read and write
|
|
|
|
41A7000
|
unkown
|
page read and write
|
|
|
|
16C50000000
|
unkown
|
page readonly
|
|
|
|
FBC000
|
unkown
|
page readonly
|
|
|
|
7FF563C6D000
|
unkown
|
page readonly
|
|
|
|
4177000
|
unkown
|
page read and write
|
|
|
|
7FF5786DF000
|
unkown
|
page readonly
|
|
|
|
2689000
|
unkown
|
page read and write
|
|
|
|
16C53210000
|
unkown
|
page read and write
|
|
|
|
685000
|
unkown
|
page read and write
|
|
|
|
11A91469000
|
unkown
|
page read and write
|
|
|
|
7FF5197E8000
|
unkown
|
page readonly
|
|
|
|
7FF563C74000
|
unkown
|
page readonly
|
|
|
|
27EE000
|
unkown
|
page read and write
|
|
|
|
16C51F00000
|
unkown
|
page read and write
|
|
|
|
7FF569673000
|
unkown
|
page readonly
|
|
|
|
1BE1E502000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC35000
|
unkown
|
page readonly
|
|
|
|
20B0E7E000
|
unkown
|
page read and write
|
|
|
|
77E000
|
heap default
|
page read and write
|
|
|
|
4182000
|
unkown
|
page read and write
|
|
|
|
7FF5199FE000
|
unkown
|
page readonly
|
|
|
|
4131000
|
unkown
|
page read and write
|
|
|
|
C3B6D7F000
|
unkown
|
page read and write
|
|
|
|
16C4FEE5000
|
unkown
|
page read and write
|
|
|
|
68C000
|
unkown
|
page read and write
|
|
|
|
16C51CD0000
|
unkown
|
page readonly
|
|
|
|
7FF522B63000
|
unkown
|
page readonly
|
|
|
|
16C53210000
|
unkown
|
page read and write
|
|
|
|
2BB4000
|
unkown
|
page readonly
|
|
|
|
1E2D0202000
|
unkown
|
page read and write
|
|
|
|
562000
|
unkown image
|
page readonly
|
|
|
|
2C307000000
|
unkown
|
page read and write
|
|
|
|
7FF57897A000
|
unkown
|
page readonly
|
|
|
|
16C520D8000
|
unkown
|
page read and write
|
|
|
|
2BE5000
|
unkown
|
page readonly
|
|
|
|
20AE000
|
unkown
|
page read and write
|
|
|
|
9BE000
|
unkown
|
page read and write
|
|
|
|
7FF578497000
|
unkown
|
page readonly
|
|
|
|
2940F810000
|
unkown
|
page readonly
|
|
|
|
7FF58EC06000
|
unkown
|
page readonly
|
|
|
|
7FF4F102F000
|
unkown
|
page readonly
|
|
|
|
7FF5706EE000
|
unkown
|
page readonly
|
|
|
|
16C51F4C000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC13000
|
unkown
|
page readonly
|
|
|
|
7CA000
|
unkown
|
page read and write
|
|
|
|
D3A07FF000
|
unkown
|
page read and write
|
|
|
|
16C520D9000
|
unkown
|
page read and write
|
|
|
|
7FF519200000
|
unkown
|
page readonly
|
|
|
|
68E000
|
unkown
|
page read and write
|
|
|
|
7FF5CAB78000
|
unkown
|
page readonly
|
|
|
|
1DC524E0000
|
heap private
|
page read and write
|
|
|
|
46B0000
|
unkown
|
page read and write
|
|
|
|
7FF563C4F000
|
unkown
|
page readonly
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
1C312E51000
|
unkown
|
page read and write
|
|
|
|
B90000
|
unkown
|
page readonly
|
|
|
|
559000
|
unkown image
|
page write copy
|
|
|
|
655AC7E000
|
unkown
|
page read and write
|
|
|
|
655B67A000
|
unkown
|
page read and write
|
|
|
|
10332000
|
unkown
|
page read and write
|
|
|
|
6EE000
|
unkown
|
page read and write
|
|
|
|
7FF569B94000
|
unkown
|
page readonly
|
|
|
|
1C312F02000
|
unkown
|
page read and write
|
|
|
|
A6E000
|
unkown
|
page read and write
|
|
|
|
7FF570752000
|
unkown
|
page readonly
|
|
|
|
16C4FE6A000
|
unkown
|
page read and write
|
|
|
|
10338000
|
unkown
|
page read and write
|
|
|
|
7FF57085B000
|
unkown
|
page readonly
|
|
|
|
2BC0000
|
unkown
|
page readonly
|
|
|
|
1DC528D0000
|
unkown
|
page readonly
|
|
|
|
7FF563840000
|
unkown
|
page readonly
|
|
|
|
4187000
|
unkown
|
page read and write
|
|
|
|
559000
|
unkown image
|
page read and write
|
|
|
|
16C53610000
|
unkown
|
page read and write
|
|
|
|
2BCA000
|
unkown
|
page readonly
|
|
|
|
7FF570836000
|
unkown
|
page readonly
|
|
|
|
16C518A0000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC96000
|
unkown
|
page readonly
|
|
|
|
678000
|
unkown
|
page read and write
|
|
|
|
7FF519721000
|
unkown
|
page readonly
|
|
|
|
C3B63FA000
|
unkown
|
page read and write
|
|
|
|
7FF5785F4000
|
unkown
|
page readonly
|
|
|
|
10023000
|
unkown
|
page readonly
|
|
|
|
4F0000
|
unkown image
|
page execute and read and write
|
|
|
|
44A000
|
unkown
|
page read and write
|
|
|
|
16C53210000
|
unkown
|
page read and write
|
|
|
|
7FF599BF2000
|
unkown
|
page readonly
|
|
|
|
521000
|
unkown image
|
page readonly
|
|
|
|
7FF58EF0B000
|
unkown
|
page readonly
|
|
|
|
2940F8A5000
|
heap private
|
page read and write
|
|
|
|
41AC000
|
unkown
|
page read and write
|
|
|
|
7FF58EF2B000
|
unkown
|
page readonly
|
|
|
|
2117000
|
unkown
|
page read and write
|
|
|
|
6AC000
|
unkown
|
page read and write
|
|
|
|
41A5000
|
unkown
|
page read and write
|
|
|
|
3800000
|
unkown
|
page read and write
|
|
|
|
7FF5CAA80000
|
unkown
|
page readonly
|
|
|
|
16C4FEE4000
|
unkown
|
page read and write
|
|
|
|
16C51F57000
|
unkown
|
page read and write
|
|
|
|
1BE1E46D000
|
unkown
|
page read and write
|
|
|
|
7C4000
|
unkown
|
page read and write
|
|
|
|
950000
|
unkown
|
page write copy
|
|
|
|
16C53410000
|
unkown
|
page read and write
|
|
|
|
678000
|
unkown
|
page read and write
|
|
|
|
7FF569A17000
|
unkown
|
page readonly
|
|
|
|
11A9146F000
|
unkown
|
page read and write
|
|
|
|
4152000
|
unkown
|
page read and write
|
|
|
|
16C4FEDA000
|
unkown
|
page read and write
|
|
|
|
7FF599C17000
|
unkown
|
page readonly
|
|
|
|
7FF57866A000
|
unkown
|
page readonly
|
|
|
|
2C30C018000
|
unkown
|
page read and write
|
|
|
|
699000
|
unkown
|
page read and write
|
|
|
|
7FF58EF24000
|
unkown
|
page readonly
|
|
|
|
241000
|
unkown
|
page read and write
|
|
|
|
416B000
|
unkown
|
page read and write
|
|
|
|
7FF5CABBD000
|
unkown
|
page readonly
|
|
|
|
2C30BE9E000
|
unkown
|
page read and write
|
|
|
|
1E303BA0000
|
heap default
|
page read and write
|
|
|
|
16C53000000
|
unkown
|
page read and write
|
|
|
|
7FF5199E8000
|
unkown
|
page readonly
|
|
|
|
2C30C027000
|
unkown
|
page read and write
|
|
|
|
9095AFD000
|
unkown
|
page read and write
|
|
|
|
2EB9000
|
unkown
|
page read and write
|
|
|
|
1C313000000
|
unkown
|
page readonly
|
|
|
|
7FF5782EF000
|
unkown
|
page readonly
|
|
|
|
3320000
|
unkown
|
page readonly
|
|
|
|
22397470000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
16C4FF71000
|
unkown
|
page read and write
|
|
|
|
40F000
|
unkown image
|
page readonly
|
|
|
|
4154000
|
unkown
|
page read and write
|
|
|
|
2BFD000
|
unkown
|
page readonly
|
|
|
|
7FF57830A000
|
unkown
|
page readonly
|
|
|
|
6DF000
|
unkown
|
page read and write
|
|
|
|
6B3000
|
unkown
|
page read and write
|
|
|
|
3C30000
|
unkown
|
page read and write
|
|
|
|
7FF522DA3000
|
unkown
|
page readonly
|
|
|
|
8C6000
|
heap private
|
page read and write
|
|
|
|
16C4FF90000
|
unkown
|
page read and write
|
|
|
|
16C53410000
|
unkown
|
page read and write
|
|
|
|
C9597FC000
|
unkown
|
page read and write
|
|
|
|
34BF000
|
unkown
|
page read and write
|
|
|
|
7FF5786EB000
|
unkown
|
page readonly
|
|
|
|
4131000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7DE000
|
unkown
|
page read and write
|
|
|
|
7FF5198E0000
|
unkown
|
page readonly
|
|
|
|
7FF57871F000
|
unkown
|
page readonly
|
|
|
|
7FF519948000
|
unkown
|
page readonly
|
|
|
|
1D9DA829000
|
unkown
|
page read and write
|
|
|
|
6BDE000
|
unkown
|
page read and write
|
|
|
|
4152000
|
unkown
|
page read and write
|
|
|
|
2C306A95000
|
unkown
|
page read and write
|
|
|
|
1D9DB200000
|
unkown
|
page read and write
|
|
|
|
2EA6000
|
unkown
|
page read and write
|
|
|
|
2C306F90000
|
unkown
|
page read and write
|
|
|
|
16C4FE66000
|
unkown
|
page read and write
|
|
|
|
1E303BB0000
|
unkown
|
page readonly
|
|
|
|
B70000
|
unkown
|
page read and write
|
|
|
|
655B47D000
|
unkown
|
page read and write
|
|
|
|
20B3000
|
unkown
|
page read and write
|
|
|
|
7FF522DA7000
|
unkown
|
page readonly
|
|
|
|
307E000
|
unkown
|
page read and write
|
|
|
|
562000
|
unkown image
|
page readonly
|
|
|
|
2C3067D0000
|
heap private
|
page read and write
|
|
|
|
6A9000
|
unkown
|
page read and write
|
|
|
|
2940F7F0000
|
unkown
|
page read and write
|
|
|
|
2842E202000
|
unkown
|
page read and write
|
|
|
|
1D9DACD0000
|
unkown
|
page readonly
|
|
|
|
7FF519927000
|
unkown
|
page readonly
|
|
|
|
19C000
|
stack
|
page read and write
|
|
|
|
D5DCCFE000
|
unkown
|
page read and write
|
|
|
|
7FF563C56000
|
unkown
|
page readonly
|
|
|
|
6C1F000
|
stack
|
page read and write
|
|
|
|
17C000
|
stack
|
page read and write
|
|
|
|
20C3000
|
unkown
|
page read and write
|
|
|
|
7FF570778000
|
unkown
|
page readonly
|
|
|
|
1D9DA85C000
|
unkown
|
page read and write
|
|
|
|
2773000
|
unkown
|
page read and write
|
|
|
|
4192000
|
unkown
|
page read and write
|
|
|
|
16C52058000
|
unkown
|
page read and write
|
|
|
|
7FF522E6F000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC09000
|
unkown
|
page readonly
|
|
|
|
2C307002000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown
|
page read and write
|
|
|
|
16C4FF70000
|
unkown
|
page read and write
|
|
|
|
294105F0000
|
unkown
|
page readonly
|
|
|
|
16C4FEA5000
|
unkown
|
page read and write
|
|
|
|
7FF519A2D000
|
unkown
|
page readonly
|
|
|
|
2C306AAA000
|
unkown
|
page read and write
|
|
|
|
2689000
|
unkown
|
page read and write
|
|
|
|
7FF570577000
|
unkown
|
page readonly
|
|
|
|
18E000
|
stack
|
page read and write
|
|
|
|
16C4FE76000
|
unkown
|
page read and write
|
|
|
|
2B6D000
|
unkown
|
page readonly
|
|
|
|
2BA6000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC88000
|
unkown
|
page readonly
|
|
|
|
41A9000
|
unkown
|
page read and write
|
|
|
|
2C30C0AF000
|
unkown
|
page read and write
|
|
|
|
16C4FEBF000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC9B000
|
unkown
|
page readonly
|
|
|
|
2EA1000
|
unkown
|
page read and write
|
|
|
|
16C4FEE4000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown image
|
page execute and read and write
|
|
|
|
BA7000
|
unkown
|
page read and write
|
|
|
|
7FF57063F000
|
unkown
|
page readonly
|
|
|
|
1BE1E413000
|
unkown
|
page read and write
|
|
|
|
2BF9000
|
unkown
|
page readonly
|
|
|
|
16C53310000
|
unkown
|
page read and write
|
|
|
|
2581000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown
|
page readonly
|
|
|
|
2581000
|
unkown
|
page read and write
|
|
|
|
1E303D13000
|
unkown
|
page read and write
|
|
|
|
2239743F000
|
unkown
|
page read and write
|
|
|
|
7FF57895D000
|
unkown
|
page readonly
|
|
|
|
7FF599A87000
|
unkown
|
page readonly
|
|
|
|
1BE1FF70000
|
unkown
|
page readonly
|
|
|
|
2ED0000
|
unkown
|
page read and write
|
|
|
|
7FF5707D5000
|
unkown
|
page readonly
|
|
|
|
7FF5CABAB000
|
unkown
|
page readonly
|
|
|
|
20E8000
|
unkown
|
page read and write
|
|
|
|
4175000
|
unkown
|
page read and write
|
|
|
|
4534000
|
unkown
|
page read and write
|
|
|
|
766000
|
heap default
|
page read and write
|
|
|
|
2C306AA1000
|
unkown
|
page read and write
|
|
|
|
2940F8A0000
|
heap private
|
page read and write
|
|
|
|
8A0000
|
unkown
|
page read and write
|
|
|
|
2B8D000
|
unkown
|
page readonly
|
|
|
|
7FF569863000
|
unkown
|
page readonly
|
|
|
|
3F5000
|
unkown
|
page read and write
|
|
|
|
7FF5786F0000
|
unkown
|
page readonly
|
|
|
|
1BE1E330000
|
heap default
|
page read and write
|
|
|
|
3100000
|
heap private
|
page read and write
|
|
|
|
685000
|
unkown
|
page read and write
|
|
|
|
7FF58EF1D000
|
unkown
|
page readonly
|
|
|
|
7FF5AF884000
|
unkown
|
page readonly
|
|
|
|
20DB000
|
unkown
|
page read and write
|
|
|
|
413D000
|
unkown
|
page read and write
|
|
|
|
7FF563C7E000
|
unkown
|
page readonly
|
|
|
|
7FF58EEF8000
|
unkown
|
page readonly
|
|
|
|
1C312DE0000
|
unkown
|
page readonly
|
|
|
|
1DC52702000
|
unkown
|
page read and write
|
|
|
|
BAB000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2370000
|
unkown
|
page readonly
|
|
|
|
1E303D02000
|
unkown
|
page read and write
|
|
|
|
7FF563C5B000
|
unkown
|
page readonly
|
|
|
|
70E000
|
unkown
|
page read and write
|
|
|
|
7FF563B97000
|
unkown
|
page readonly
|
|
|
|
419C000
|
unkown
|
page read and write
|
|
|
|
7FF58EA9E000
|
unkown
|
page readonly
|
|
|
|
7FF578973000
|
unkown
|
page readonly
|
|
|
|
7FF4F0BED000
|
unkown
|
page readonly
|
|
|
|
16C52202000
|
unkown
|
page read and write
|
|
|
|
E2315FA000
|
unkown
|
page read and write
|
|
|
|
7FF519973000
|
unkown
|
page readonly
|
|
|
|
1E2CFA3C000
|
unkown
|
page read and write
|
|
|
|
76E000
|
unkown
|
page read and write
|
|
|
|
7FF563997000
|
unkown
|
page readonly
|
|
|
|
655B3FB000
|
unkown
|
page read and write
|
|
|
|
16C53610000
|
unkown
|
page read and write
|
|
|
|
67E000
|
unkown
|
page read and write
|
|
|
|
8C7000
|
heap private
|
page read and write
|
|
|
|
16C53110000
|
unkown
|
page read and write
|
|
|
|
559000
|
unkown image
|
page write copy
|
|
|
|
521000
|
unkown image
|
page readonly
|
|
|
|
2C75000
|
unkown
|
page readonly
|
|
|
|
2B7D000
|
unkown
|
page readonly
|
|
|
|
778000
|
unkown
|
page read and write
|
|
|
|
2C306B02000
|
unkown
|
page read and write
|
|
|
|
8D0000
|
unkown
|
page readonly
|
|
|
|
474000
|
unkown
|
page read and write
|
|
|
|
16C53410000
|
unkown
|
page read and write
|
|
|
|
418E000
|
unkown
|
page read and write
|
|
|
|
20B3000
|
unkown
|
page read and write
|
|
|
|
7FF578704000
|
unkown
|
page readonly
|
|
|
|
2190000
|
unkown
|
page readonly
|
|
|
|
7FF5AFA5A000
|
unkown
|
page readonly
|
|
|
|
7FF5197E3000
|
unkown
|
page readonly
|
|
|
|
D5DCF7E000
|
unkown
|
page read and write
|
|
|
|
1D9DAA00000
|
unkown
|
page readonly
|
|
|
|
22397456000
|
unkown
|
page read and write
|
|
|
|
4198000
|
unkown
|
page read and write
|
|
There are 2054 hidden memdumps, click here to show them.