Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Cyfj6XGbkd.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
|
UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\56BB1610C0318054.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\56BB1610C0318054.exe:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611971443428.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Cookies1611971442537
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Cookies1611971454131
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihkencjepjngjffalaohcbnbeejhnoei\1.0.0.0_0\background.js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihkencjepjngjffalaohcbnbeejhnoei\1.0.0.0_0\book.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihkencjepjngjffalaohcbnbeejhnoei\1.0.0.0_0\icon.png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihkencjepjngjffalaohcbnbeejhnoei\1.0.0.0_0\icon48.png
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihkencjepjngjffalaohcbnbeejhnoei\1.0.0.0_0\jquery-1.8.3.min.js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihkencjepjngjffalaohcbnbeejhnoei\1.0.0.0_0\manifest.json
|
ASCII text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihkencjepjngjffalaohcbnbeejhnoei\1.0.0.0_0\popup.html
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihkencjepjngjffalaohcbnbeejhnoei\1.0.0.0_0\popup.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611971442537
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611971453928
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611971443850
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611971445897
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\MSIB2E9.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\MiniThunderPlatform.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\atl71.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\dl_peer_id.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\download_engine.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\msvcp71.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\msvcr71.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\zlib1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\ecvD64F.tmp
|
Extensible storage engine DataBase, version 0x620, checksum 0xc79d9d3f, page size 32768, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\gdiview.msi
|
;1033
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\xldl.dat
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\xldl.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Web Data1611971454381
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\crx.7z
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\crx.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Localwebdata1611971454428
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611971443428.txt
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Cookies1611970637026
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Cookies1611970645636
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedbikgghcldkeaoafkhiajkpjhhppll\1.0.0.0_0\background.js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedbikgghcldkeaoafkhiajkpjhhppll\1.0.0.0_0\book.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedbikgghcldkeaoafkhiajkpjhhppll\1.0.0.0_0\icon.png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedbikgghcldkeaoafkhiajkpjhhppll\1.0.0.0_0\icon48.png
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedbikgghcldkeaoafkhiajkpjhhppll\1.0.0.0_0\jquery-1.8.3.min.js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedbikgghcldkeaoafkhiajkpjhhppll\1.0.0.0_0\manifest.json
|
ASCII text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedbikgghcldkeaoafkhiajkpjhhppll\1.0.0.0_0\popup.html
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dedbikgghcldkeaoafkhiajkpjhhppll\1.0.0.0_0\popup.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611970607033
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Login Data1611970645542
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611970606876
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1611970639276
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\MSIDCDD.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\download_user.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\ecvFEAD.tmp
|
Extensible storage user DataBase, version 0x620, checksum 0x0e9c6472, page size 32768, DirtyShutdown, Windows version 10.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Web Data1611970646229
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Localwebdata1611970646229
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611970637183.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\1611970637183.txt
|
Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
|
dropped
|
|
There are 50 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Cyfj6XGbkd.exe
|
'C:\Users\user\Desktop\Cyfj6XGbkd.exe'
|
|
|
|
C:\Users\user\AppData\Local\Temp\56BB1610C0318054.exe
|
C:\Users\user\AppData\Local\Temp\56BB1610C0318054.exe 0011 user01
|
|
|
|
C:\Users\user\AppData\Local\Temp\56BB1610C0318054.exe
|
C:\Users\user\AppData\Local\Temp\56BB1610C0318054.exe 200 user01
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd /c ping 127.0.0.1 -n 3 & del 'C:\Users\user\Desktop\Cyfj6XGbkd.exe'
|
|
|
|
C:\Windows\SysWOW64\PING.EXE
|
ping 127.0.0.1 -n 3
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /c taskkill /f /im chrome.exe
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd /c ping 127.0.0.1 -n 3 & del 'C:\Users\user\AppData\Local\Temp\56BB1610C0318054.exe'
|
|
|
|
C:\Windows\SysWOW64\PING.EXE
|
ping 127.0.0.1 -n 3
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd /c ping 127.0.0.1 -n 3 & del 'C:\Users\user\AppData\Local\Temp\56BB1610C0318054.exe'
|
|
|
|
C:\Windows\SysWOW64\PING.EXE
|
ping 127.0.0.1 -n 3
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
msiexec.exe /i 'C:\Users\user\AppData\Local\Temp\gdiview.msi'
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding F759AAE600C1266B09FA365BCB174CA6 C
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Users\user\AppData\Roaming\1611971443428.exe
|
'C:\Users\user\AppData\Roaming\1611971443428.exe' /sjson 'C:\Users\user\AppData\Roaming\1611971443428.txt'
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\taskkill.exe
|
taskkill /f /im chrome.exe
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe ThunderFW 'C:\Users\user\AppData\Local\Temp\download\MiniThunderPlatform.exe'
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Program Files\Windows Defender\MpCmdRun.exe
|
'C:\Program Files\Windows Defender\mpcmdrun.exe' -wdenable
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding C6BE2003C858D11BE040843C2C46EAA2 C
|
|
|
|
C:\Users\user\AppData\Roaming\1611970637183.exe
|
'C:\Users\user\AppData\Roaming\1611970637183.exe' /sjson 'C:\Users\user\AppData\Roaming\1611970637183.txt'
|
|
There are 13 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/scripttemplate
|
unknown
|
|
|
|
https://duckduckgo.com/chrome_newtab
|
unknown
|
|
|
|
https://duckduckgo.com/ac/?q=
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/g
|
104.21.23.16
|
|
|
|
https://www.messenger.com/
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/e
|
104.21.23.16
|
|
|
|
http://www.msn.com
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/w
|
104.21.23.16
|
|
|
|
http://www.nirsoft.net
|
unknown
|
|
|
|
https://deff.nelreports.net/api/report?cat=msn
|
unknown
|
|
|
|
https://A5D4CE54CC78B3CA.xyz/
|
unknown
|
|
|
|
https://twitter.com/ookie:
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/r
|
104.21.23.16
|
|
|
|
https://twitter.comsec-fetch-dest:
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCc13122162a9a46c3b4cbf05ffccde0f
|
unknown
|
|
|
|
http://www.interoperabilitybridges.com/wmp-extension-for-chrome
|
unknown
|
|
|
|
http://ocsp.pki.goog/gts1o1core0
|
unknown
|
|
|
|
https://maps.windows.com/windows-app-web-link
|
unknown
|
|
|
|
http://www.msn.com/?ocid=iehp
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=chrom322;cat=chrom01g;ord=68568119166
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCee0d4d5fd4424c8390d703b105f82c3
|
unknown
|
|
|
|
https://srtb.msn.com/auction?a=de-ch&b=a8415ac9f9644a1396bc1648a4599445&c=MSN&d=http%3A%2F%2Fwww.msn
|
unknown
|
|
|
|
http://crl.pki.goog/GTS1O1core.crl0
|
unknown
|
|
|
|
https://www.messenger.com
|
unknown
|
|
|
|
http://www.nirsoft.net/
|
unknown
|
|
|
|
http://forms.real.com/real/realone/download.html?type=rpsp_us
|
unknown
|
|
|
|
http://ocsp.pki.goog/GTSGIAG30
|
unknown
|
|
|
|
https://www.instagram.com/graphql/query/?query_hash=149bef52a3b2af88c0fec37913fe1cbc&variables=%7B%2
|
unknown
|
|
|
|
https://logincdn.msauth.net/16.000/Converged_v21033_-0mnSwu67knBd7qR7YN9GQ2.css
|
unknown
|
|
|
|
http://download.divx.com/player/divxdotcom/DivXWebPlayerInstaller.exe
|
unknown
|
|
|
|
https://logincdn.msauth.net/16.000.28666.10/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc1937
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/
|
unknown
|
|
|
|
https://logincdn.msauth.net/16.000.28666.10/content/images/ellipsis_white_5ac590ee72bfe06a7cecfd75b5
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.jsoncommand=FINALIZE&media_id=
|
unknown
|
|
|
|
https://www.instagram.com/
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/soap/encoding/
|
unknown
|
|
|
|
http://www.xunlei.com/GET
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC5bdddb231cf54f958a5b6e76e9d8eee
|
unknown
|
|
|
|
http://www.vb-cable.comVBCABLE
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json%dcommand=INIT&total_bytes=&media_type=image%2Fjpeg&me
|
unknown
|
|
|
|
https://www.messenger.com/origin:
|
unknown
|
|
|
|
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
|
unknown
|
|
|
|
http://pki.goog/gsr2/GTS1O1.crt0
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
|
|
|
https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml
|
unknown
|
|
|
|
https://contextual.media.net/
|
unknown
|
|
|
|
http://ocsp.pki.goog/gsr202
|
unknown
|
|
|
|
https://pki.goog/repository/0
|
unknown
|
|
|
|
https://api.twitter.com/1.1/statuses/update.json
|
unknown
|
|
|
|
https://cvision.media.net/new/300x300/3/167/174/27/39ab3103-8560-4a55-bfc4-401f897cf6f2.jpg?v=9
|
unknown
|
|
|
|
http://www.msn.com/
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json
|
unknown
|
|
|
|
https://www.cloudflare.com/5xx-error-landing
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC828bc1cde9f04b788c98b5423157734
|
unknown
|
|
|
|
https://twitter.com/compose/tweetsec-fetch-mode:
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/w
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=1;num=1463674
|
unknown
|
|
|
|
http://www.vb-cable.com
|
unknown
|
|
|
|
https://www.messenger.com/accept:
|
unknown
|
|
|
|
http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/consent/55a804
|
unknown
|
|
|
|
https://contextual.media.net/803288796/fcmain.js?&gdpr=0&cid=8CU157172&cpcd=pC3JHgSCqY8UHihgrvGr0A%3
|
unknown
|
|
|
|
https://contextual.media.net/48/nrrV18753.js
|
unknown
|
|
|
|
http://www.interoperabilitybridges.com/wmp-extension-for-chromeJk
|
unknown
|
|
|
|
http://crl.pki.goog/gsr2/gsr2.crl0?
|
unknown
|
|
|
|
http://forms.real.com/real/realone/download.html?type=rpsp_use
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/g
|
unknown
|
|
|
|
http://pki.goog/gsr2/GTSGIAG3.crt0)
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json?command=APPEND&media_id=%s&segment_index=0
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
|
|
https://www.messenger.comhttps://www.messenger.com/login/nonce/ookie:
|
unknown
|
|
|
|
http://www.xunlei.com/
|
unknown
|
|
|
|
http://pki.goog/gsr2/GTS1O1.crt0#
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/ddd
|
104.21.23.16
|
|
|
|
https://aefd.nelreports.net/api/report?cat=bingth
|
unknown
|
|
|
|
https://upload.twitter.com/i/media/upload.json?command=APPEND&media_id=%s&segment_index=0accept:
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/soap/envelope/
|
unknown
|
|
|
|
https://exchangework%04d%02d%02d.xyz/http://changenewsys%04d%02d%02d.xyz/post_info.
|
unknown
|
|
|
|
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
unknown
|
|
|
|
https://assets.adobedtm.com/launch-EN7b3d710ac67a4a1195648458258f97dd.min.js
|
unknown
|
|
|
|
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCfd484f9188564713bbc5d13d862ebbf
|
unknown
|
|
|
|
https://curl.haxx.se/docs/http-cookies.html
|
unknown
|
|
|
|
http://www.openssl.org/support/faq.html
|
unknown
|
|
|
|
https://www.instagram.comsec-fetch-mode:
|
unknown
|
|
|
|
https://www.instagram.com/accounts/login/ajax/facebook/
|
unknown
|
|
|
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e
|
unknown
|
|
|
|
http://crl.thawte.com/ThawteTimestampingCA.crl0
|
unknown
|
|
|
|
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
|
|
|
https://www.instagram.com/sec-fetch-site:
|
unknown
|
|
|
|
https://twitter.comReferer:
|
unknown
|
|
|
|
http://www.interestvideo.com/video1.php
|
unknown
|
|
|
|
https://www.instagram.com/accept:
|
unknown
|
|
|
|
https://www.messenger.com/login/nonce/
|
unknown
|
|
|
|
http://www.youtube.com
|
unknown
|
|
|
|
https://twitter.com/compose/tweetsec-fetch-dest:
|
unknown
|
|
|
|
http://crl.pki.goog/GTSGIAG3.crl0
|
unknown
|
|
|
|
https://adservice.google.co.uk/ddm/fls/i/src=2542116;type=chrom322;cat=chrom01g;ord=6856811916691;gt
|
unknown
|
|
|
|
http://ocsp.thawte.com0
|
unknown
|
|
|
|
http://www.vb-audio.com
|
unknown
|
|
|
|
https://api.twitter.com/1.1/statuses/update.jsoninclude_profile_interstitial_type=1&include_blocking
|
unknown
|
|
|
|
http://store.paycenter.uc.cnmail-attachment.googleusercontent.com
|
unknown
|
|
|
|
https://contextual.media.net/__media__/js/util/nrrV9140.js
|
unknown
|
|
|
|
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meCore.min.js
|
unknown
|
|
|
|
http://images.outbrainimg.com/transform/v3/eyJpdSI6Ijk4OGQ1ZDgwMWE2ODQ2NDNkM2ZkMmYyMGEwOTgwMWQ3MDE2Z
|
unknown
|
|
|
|
http://charlesproxy.com/ssl
|
unknown
|
|
|
|
https://cvision.media.net/new/300x300/2/189/9/46/83cfba42-7d45-4670-a4a7-a3211ca07534.jpg?v=9
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/al
|
unknown
|
|
|
|
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ce_sharpen%2Ch_311%2Cw_207%2Cc_fill%
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/llr
|
unknown
|
|
|
|
http://images.outbrainimg.com/transform/v3/eyJpdSI6ImQ1Y2M3ZjUxNTk0ZjI1ZWI5NjQxNjllMjcxMDliYzA5MWY4N
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/llH
|
unknown
|
|
|
|
http://www.youtube.comT
|
unknown
|
|
|
|
https://optanon.blob.core.windows.net/skins/4.1.0/default_flat_top_two_button_black/v2/css/optanon.c
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=2542116;cat=chom0;ord=9774759596232;g
|
unknown
|
|
|
|
http://www.youtube.comf
|
unknown
|
|
|
|
https://optanon.blob.core.windows.net/skins/4.1.0/default_flat_top_two_button_black/v2/images/cookie
|
unknown
|
|
|
|
https://mem.gfx.ms/meversion?partner=RetailStore2&market=en-us&uhf=1
|
unknown
|
|
|
|
https://srtb.msn.com/auction?a=de-ch&b=fa1a6a09db4c4f6fbf480b78c51caf60&c=MSN&d=http%3A%2F%2Fwww.msn
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=1;num=7859736
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/r
|
unknown
|
|
|
|
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meBoot.min.js
|
unknown
|
|
|
|
https://cvision.media.net/new/286x175/2/189/134/171/257b11a9-f3a3-4bb3-9298-c791f456f3d0.jpg?v=9
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/e
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/info_old/wV
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/info_old/wI
|
unknown
|
|
|
|
http://84cfba021a5a6662.xyz/
|
unknown
|
|
|
|
http://84CFBA021A5A6662.xyz/f
|
unknown
|
|
|
|
http://images.outbrainimg.com/transform/v3/eyJpdSI6IiIsIml1ZSI6Imh0dHA6Ly9pbWFnZXMyLnplbWFudGEuY29tL
|
unknown
|
|
|
|
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=chrom322;cat=chrom01g;ord=30055406629
|
unknown
|
|
There are 118 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
84CFBA021A5A6662.xyz
|
104.21.23.16
|
|
|
|
84cfba021a5a6662.xyz
|
104.21.23.16
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
127.0.0.1
|
unknown
|
unknown
|
unknown
|
|
|
|
104.21.23.16
|
unknown
|
United States
|
unknown
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Cyfj6XGbkd.exe
|
Blob
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
GlobalAssocChangedCounter
|
|
|
|
C:\Users\user\AppData\Local\Temp\56BB1610C0318054.exe
|
1
|
|
|
|
C:\Users\user\AppData\Local\Temp\download\ThunderFW.exe
|
@C:\Windows\SysWOW64\FirewallControlPanel.dll,-12122
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF575DEE000
|
unkown
|
page readonly
|
|
|
|
FBA000
|
unkown
|
page read and write
|
|
|
|
7FF5CC06A000
|
unkown
|
page readonly
|
|
|
|
7FF5EB2FE000
|
unkown
|
page readonly
|
|
|
|
7FF58B409000
|
unkown
|
page readonly
|
|
|
|
200D084A000
|
unkown
|
page read and write
|
|
|
|
29C4A870000
|
unkown
|
page read and write
|
|
|
|
13EF000
|
stack
|
page read and write
|
|
|
|
10338000
|
unkown
|
page read and write
|
|
|
|
315A000
|
unkown
|
page read and write
|
|
|
|
163AC283000
|
unkown
|
page read and write
|
|
|
|
7FF587E09000
|
unkown
|
page readonly
|
|
|
|
2268D47C000
|
unkown
|
page read and write
|
|
|
|
7FF576289000
|
unkown
|
page readonly
|
|
|
|
2ABC000
|
heap private
|
page read and write
|
|
|
|
2B743713000
|
unkown
|
page read and write
|
|
|
|
18BC21F0000
|
unkown
|
page read and write
|
|
|
|
FBE000
|
unkown
|
page read and write
|
|
|
|
22692D20000
|
unkown
|
page read and write
|
|
|
|
DE300AB000
|
unkown
|
page read and write
|
|
|
|
7FF587C89000
|
unkown
|
page readonly
|
|
|
|
2059000
|
unkown
|
page read and write
|
|
|
|
2F66000
|
unkown
|
page readonly
|
|
|
|
33D9000
|
heap private
|
page read and write
|
|
|
|
7FF52E77D000
|
unkown
|
page readonly
|
|
|
|
7FF58B532000
|
unkown
|
page readonly
|
|
|
|
100E000
|
unkown
|
page read and write
|
|
|
|
7DFD9D669000
|
unkown
|
page readonly
|
|
|
|
22692A0D000
|
unkown
|
page read and write
|
|
|
|
7FF5057EE000
|
unkown
|
page readonly
|
|
|
|
7FF558CEA000
|
unkown
|
page readonly
|
|
|
|
29267BC0000
|
unkown
|
page readonly
|
|
|
|
11CE000
|
unkown
|
page read and write
|
|
|
|
30FB000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF52CA30000
|
unkown
|
page readonly
|
|
|
|
7FF5E6499000
|
unkown
|
page readonly
|
|
|
|
274B000
|
unkown
|
page read and write
|
|
|
|
676437B000
|
unkown
|
page read and write
|
|
|
|
2268D49D000
|
unkown
|
page read and write
|
|
|
|
18E000
|
stack
|
page read and write
|
|
|
|
F0B000
|
stack
|
page read and write
|
|
|
|
238F615E000
|
unkown
|
page read and write
|
|
|
|
FB9000
|
unkown
|
page read and write
|
|
|
|
25D0000
|
unkown
|
page read and write
|
|
|
|
4121000
|
unkown
|
page read and write
|
|
|
|
7FF5CBE4E000
|
unkown
|
page readonly
|
|
|
|
238F6000000
|
unkown
|
page read and write
|
|
|
|
7FF5B1D84000
|
unkown
|
page readonly
|
|
|
|
ACB000
|
heap private
|
page read and write
|
|
|
|
F4F000
|
unkown image
|
page read and write
|
|
|
|
2E20000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5B1D39000
|
unkown
|
page readonly
|
|
|
|
7FF558443000
|
unkown
|
page readonly
|
|
|
|
7FF5057B0000
|
unkown
|
page readonly
|
|
|
|
6C0000
|
heap default
|
page read and write
|
|
|
|
18BC2C00000
|
unkown
|
page readonly
|
|
|
|
2101000
|
unkown
|
page read and write
|
|
|
|
2B743613000
|
unkown
|
page read and write
|
|
|
|
1075000
|
heap default
|
page read and write
|
|
|
|
18BC227B000
|
unkown
|
page read and write
|
|
|
|
9E8B67E000
|
unkown
|
page read and write
|
|
|
|
7FF558B4F000
|
unkown
|
page readonly
|
|
|
|
238F60BD000
|
unkown
|
page read and write
|
|
|
|
7FF5EB459000
|
unkown
|
page readonly
|
|
|
|
30E7000
|
unkown
|
page read and write
|
|
|
|
238F615D000
|
unkown
|
page read and write
|
|
|
|
3100000
|
unkown
|
page read and write
|
|
|
|
296E000
|
unkown
|
page read and write
|
|
|
|
7FF5E5721000
|
unkown
|
page readonly
|
|
|
|
7FF58B378000
|
unkown
|
page readonly
|
|
|
|
22692A16000
|
unkown
|
page read and write
|
|
|
|
30E9000
|
unkown
|
page read and write
|
|
|
|
5D4000
|
heap default
|
page read and write
|
|
|
|
2E80000
|
heap private
|
page read and write
|
|
|
|
238F609F000
|
unkown
|
page read and write
|
|
|
|
7FF5E57B9000
|
unkown
|
page readonly
|
|
|
|
2352C720000
|
heap default
|
page read and write
|
|
|
|
1060000
|
unkown
|
page read and write
|
|
|
|
2268DC15000
|
unkown
|
page read and write
|
|
|
|
2268D429000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown
|
page readonly
|
|
|
|
1A08A0A0000
|
unkown
|
page write copy
|
|
|
|
F4C000
|
unkown image
|
page readonly
|
|
|
|
20EA000
|
heap private
|
page read and write
|
|
|
|
30F5000
|
unkown
|
page read and write
|
|
|
|
3104000
|
unkown
|
page read and write
|
|
|
|
4D7E000
|
unkown
|
page read and write
|
|
|
|
EA0000
|
unkown
|
page readonly
|
|
|
|
FD1000
|
unkown
|
page read and write
|
|
|
|
22ABF400000
|
unkown
|
page readonly
|
|
|
|
2FDD000
|
stack
|
page read and write
|
|
|
|
2268D479000
|
unkown
|
page read and write
|
|
|
|
2210000
|
unkown
|
page read and write
|
|
|
|
ACB000
|
heap private
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page readonly
|
|
|
|
3C8807E000
|
unkown
|
page read and write
|
|
|
|
163AC255000
|
unkown
|
page read and write
|
|
|
|
22692A16000
|
unkown
|
page read and write
|
|
|
|
7FF592222000
|
unkown
|
page readonly
|
|
|
|
29C48EF2000
|
unkown
|
page read and write
|
|
|
|
274B000
|
unkown
|
page read and write
|
|
|
|
26FB000
|
unkown
|
page read and write
|
|
|
|
7FF5E5697000
|
unkown
|
page readonly
|
|
|
|
2DF3000
|
unkown
|
page read and write
|
|
|
|
2F82000
|
unkown
|
page read and write
|
|
|
|
414000
|
unkown image
|
page readonly
|
|
|
|
D40000
|
unkown
|
page write copy
|
|
|
|
580000
|
heap default
|
page read and write
|
|
|
|
7FF5ED967000
|
unkown
|
page readonly
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
274B000
|
unkown
|
page read and write
|
|
|
|
7FF5CC090000
|
unkown
|
page readonly
|
|
|
|
22692D20000
|
unkown
|
page read and write
|
|
|
|
1A089900000
|
heap default
|
page read and write
|
|
|
|
7FF587E26000
|
unkown
|
page readonly
|
|
|
|
21B3EF90000
|
unkown
|
page readonly
|
|
|
|
238F813B000
|
unkown
|
page read and write
|
|
|
|
7FF5E6200000
|
unkown
|
page readonly
|
|
|
|
7FF58B639000
|
unkown
|
page readonly
|
|
|
|
A9F000
|
stack
|
page read and write
|
|
|
|
21B3EA2A000
|
unkown
|
page read and write
|
|
|
|
20E2000
|
heap private
|
page read and write
|
|
|
|
2E50000
|
heap private
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
7FF5920EA000
|
unkown
|
page readonly
|
|
|
|
BD2000
|
unkown
|
page read and write
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
7FF59209F000
|
unkown
|
page readonly
|
|
|
|
22692C21000
|
unkown
|
page read and write
|
|
|
|
7FF5CC06C000
|
unkown
|
page readonly
|
|
|
|
540000
|
unkown
|
page readonly
|
|
|
|
141A000
|
heap default
|
page read and write
|
|
|
|
7FF5B1D51000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown image
|
page readonly
|
|
|
|
6755DFF000
|
unkown
|
page read and write
|
|
|
|
7FF59224E000
|
unkown
|
page readonly
|
|
|
|
F93000
|
unkown
|
page read and write
|
|
|
|
40D000
|
unkown image
|
page write copy
|
|
|
|
100B000
|
unkown
|
page read and write
|
|
|
|
238F81FE000
|
unkown
|
page read and write
|
|
|
|
7FF5056CD000
|
unkown
|
page readonly
|
|
|
|
698000
|
heap default
|
page read and write
|
|
|
|
FAA000
|
unkown
|
page read and write
|
|
|
|
3121000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown
|
page read and write
|
|
|
|
29266320000
|
unkown
|
page readonly
|
|
|
|
7FF5CC088000
|
unkown
|
page readonly
|
|
|
|
3123000
|
unkown
|
page read and write
|
|
|
|
2FB6000
|
unkown
|
page read and write
|
|
|
|
1A08A400000
|
unkown
|
page readonly
|
|
|
|
22692CE0000
|
unkown
|
page read and write
|
|
|
|
2CFE000
|
unkown
|
page read and write
|
|
|
|
7FF587A5D000
|
unkown
|
page readonly
|
|
|
|
615000
|
unkown
|
page read and write
|
|
|
|
2268D4A1000
|
unkown
|
page read and write
|
|
|
|
67644FD000
|
unkown
|
page read and write
|
|
|
|
22E0000
|
unkown
|
page read and write
|
|
|
|
7FF57600F000
|
unkown
|
page readonly
|
|
|
|
163AC276000
|
unkown
|
page read and write
|
|
|
|
22692A26000
|
unkown
|
page read and write
|
|
|
|
2E0D000
|
unkown
|
page read and write
|
|
|
|
FA7000
|
unkown
|
page read and write
|
|
|
|
9E8B07B000
|
unkown
|
page read and write
|
|
|
|
67643FA000
|
unkown
|
page read and write
|
|
|
|
226929D0000
|
unkown
|
page read and write
|
|
|
|
7FF52CCCD000
|
unkown
|
page readonly
|
|
|
|
18BC2202000
|
unkown
|
page read and write
|
|
|
|
2469A7D000
|
unkown
|
page read and write
|
|
|
|
AAF000
|
stack
|
page read and write
|
|
|
|
7FF5E56C2000
|
unkown
|
page readonly
|
|
|
|
40F000
|
unkown image
|
page write copy
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
58A000
|
heap default
|
page read and write
|
|
|
|
238F9510000
|
unkown
|
page read and write
|
|
|
|
2C80000
|
unkown
|
page read and write
|
|
|
|
6763CFB000
|
unkown
|
page read and write
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
238F8105000
|
unkown
|
page read and write
|
|
|
|
7FF5EB304000
|
unkown
|
page readonly
|
|
|
|
7FF5CC134000
|
unkown
|
page readonly
|
|
|
|
212F000
|
unkown
|
page read and write
|
|
|
|
7FF58B528000
|
unkown
|
page readonly
|
|
|
|
22CE000
|
unkown
|
page read and write
|
|
|
|
7FF5CC130000
|
unkown
|
page readonly
|
|
|
|
10332000
|
unkown
|
page read and write
|
|
|
|
5B70000
|
unkown
|
page read and write
|
|
|
|
22F0000
|
unkown
|
page read and write
|
|
|
|
404000
|
unkown image
|
page execute and read and write
|
|
|
|
7FF5EB3C1000
|
unkown
|
page readonly
|
|
|
|
10001000
|
unkown
|
page execute read
|
|
|
|
2352C8A0000
|
unkown
|
page readonly
|
|
|
|
238F6013000
|
unkown
|
page read and write
|
|
|
|
7FF58AE2A000
|
unkown
|
page readonly
|
|
|
|
3C00000
|
unkown
|
page readonly
|
|
|
|
2352CC30000
|
unkown
|
page readonly
|
|
|
|
7FF592296000
|
unkown
|
page readonly
|
|
|
|
5C8000
|
heap default
|
page read and write
|
|
|
|
238F8253000
|
unkown
|
page read and write
|
|
|
|
2DAC000
|
unkown
|
page readonly
|
|
|
|
2268D4A1000
|
unkown
|
page read and write
|
|
|
|
7FF5E6430000
|
unkown
|
page readonly
|
|
|
|
2C41000
|
unkown
|
page read and write
|
|
|
|
2110000
|
unkown
|
page read and write
|
|
|
|
DD936FC000
|
unkown
|
page read and write
|
|
|
|
6763BFF000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1015000
|
unkown
|
page read and write
|
|
|
|
238F60BC000
|
unkown
|
page read and write
|
|
|
|
5C9000
|
unkown
|
page read and write
|
|
|
|
FC9000
|
unkown
|
page read and write
|
|
|
|
7FF52CA17000
|
unkown
|
page readonly
|
|
|
|
16641000000
|
unkown
|
page readonly
|
|
|
|
7FF5E55A8000
|
unkown
|
page readonly
|
|
|
|
2F82000
|
unkown
|
page read and write
|
|
|
|
67558FB000
|
unkown
|
page read and write
|
|
|
|
31B9000
|
unkown
|
page read and write
|
|
|
|
7FF505836000
|
unkown
|
page readonly
|
|
|
|
2F82000
|
unkown
|
page readonly
|
|
|
|
7FF58B400000
|
unkown
|
page readonly
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
412000
|
unkown image
|
page readonly
|
|
|
|
2DBF000
|
unkown
|
page readonly
|
|
|
|
28191C00000
|
unkown
|
page read and write
|
|
|
|
2268D492000
|
unkown
|
page read and write
|
|
|
|
7FF52E6C7000
|
unkown
|
page readonly
|
|
|
|
FB9000
|
unkown
|
page read and write
|
|
|
|
DD93579000
|
unkown
|
page read and write
|
|
|
|
7FF58B5D4000
|
unkown
|
page readonly
|
|
|
|
238F9110000
|
unkown
|
page read and write
|
|
|
|
1C4F8BD0000
|
unkown
|
page readonly
|
|
|
|
22ABF200000
|
unkown
|
page read and write
|
|
|
|
7FF5B1D5C000
|
unkown
|
page readonly
|
|
|
|
3000000
|
unkown
|
page readonly
|
|
|
|
238F9310000
|
unkown
|
page read and write
|
|
|
|
18D000
|
stack
|
page read and write
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
238F7F60000
|
unkown
|
page read and write
|
|
|
|
FDD000
|
unkown
|
page read and write
|
|
|
|
311D000
|
unkown
|
page read and write
|
|
|
|
2DBF000
|
unkown
|
page readonly
|
|
|
|
FDA000
|
unkown
|
page read and write
|
|
|
|
7540000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
7FF5E6499000
|
unkown
|
page readonly
|
|
|
|
7FF58B24F000
|
unkown
|
page readonly
|
|
|
|
26D9000
|
unkown
|
page read and write
|
|
|
|
630000
|
heap default
|
page read and write
|
|
|
|
163AC400000
|
unkown
|
page readonly
|
|
|
|
7FF5E56B0000
|
unkown
|
page readonly
|
|
|
|
2F74000
|
unkown
|
page read and write
|
|
|
|
2F93000
|
unkown
|
page readonly
|
|
|
|
7FF52E7B7000
|
unkown
|
page readonly
|
|
|
|
16640702000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page execute and read and write
|
|
|
|
7FF576206000
|
unkown
|
page readonly
|
|
|
|
7FF587B80000
|
unkown
|
page readonly
|
|
|
|
1045000
|
unkown
|
page read and write
|
|
|
|
29C48E8F000
|
unkown
|
page read and write
|
|
|
|
2268DD58000
|
unkown
|
page read and write
|
|
|
|
238F82A4000
|
unkown
|
page read and write
|
|
|
|
2020000
|
unkown
|
page readonly
|
|
|
|
1008000
|
unkown
|
page read and write
|
|
|
|
226928C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6107000
|
unkown
|
page readonly
|
|
|
|
28191BD0000
|
unkown
|
page readonly
|
|
|
|
25D1000
|
unkown
|
page read and write
|
|
|
|
7FF5E6491000
|
unkown
|
page readonly
|
|
|
|
2155000
|
unkown
|
page read and write
|
|
|
|
16640600000
|
unkown
|
page read and write
|
|
|
|
D5E000
|
unkown
|
page read and write
|
|
|
|
2F60000
|
unkown
|
page readonly
|
|
|
|
7FF587C20000
|
unkown
|
page readonly
|
|
|
|
10337000
|
unkown
|
page readonly
|
|
|
|
22692A3F000
|
unkown
|
page read and write
|
|
|
|
1070000
|
heap default
|
page read and write
|
|
|
|
22A0000
|
unkown
|
page readonly
|
|
|
|
7FF52C3F4000
|
unkown
|
page readonly
|
|
|
|
200D0740000
|
heap private
|
page read and write
|
|
|
|
F16DF7F000
|
unkown
|
page read and write
|
|
|
|
D9FCF7B000
|
unkown
|
page read and write
|
|
|
|
7FF5EB3D6000
|
unkown
|
page readonly
|
|
|
|
7FF5E5754000
|
unkown
|
page readonly
|
|
|
|
676467D000
|
unkown
|
page read and write
|
|
|
|
281935A0000
|
unkown
|
page read and write
|
|
|
|
2F48000
|
unkown
|
page read and write
|
|
|
|
7FF5CC11C000
|
unkown
|
page readonly
|
|
|
|
238F616F000
|
unkown
|
page read and write
|
|
|
|
2AB0000
|
heap private
|
page read and write
|
|
|
|
60C000
|
unkown
|
page read and write
|
|
|
|
6763F79000
|
unkown
|
page read and write
|
|
|
|
22692A20000
|
unkown
|
page read and write
|
|
|
|
7FF5E5AF9000
|
unkown
|
page readonly
|
|
|
|
29266200000
|
unkown
|
page readonly
|
|
|
|
530000
|
unkown
|
page readonly
|
|
|
|
67645FC000
|
unkown
|
page read and write
|
|
|
|
79FC000
|
unkown
|
page read and write
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
22692A32000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
564000
|
unkown
|
page read and write
|
|
|
|
7FF558D2D000
|
unkown
|
page readonly
|
|
|
|
200D2600000
|
unkown
|
page readonly
|
|
|
|
502E000
|
stack
|
page read and write
|
|
|
|
7FF5B1CE0000
|
unkown
|
page readonly
|
|
|
|
1C4F8D02000
|
unkown
|
page read and write
|
|
|
|
2F47000
|
unkown
|
page read and write
|
|
|
|
7FF5056F7000
|
unkown
|
page readonly
|
|
|
|
7FF58B23D000
|
unkown
|
page readonly
|
|
|
|
1A089A2A000
|
unkown
|
page read and write
|
|
|
|
7FF52E6EC000
|
unkown
|
page readonly
|
|
|
|
7FF5971A0000
|
unkown
|
page readonly
|
|
|
|
2F28000
|
unkown
|
page readonly
|
|
|
|
683000
|
unkown
|
page read and write
|
|
|
|
7FF5EDC2E000
|
unkown
|
page readonly
|
|
|
|
7FF5CC0BA000
|
unkown
|
page readonly
|
|
|
|
7FF575DF2000
|
unkown
|
page readonly
|
|
|
|
7FF5EB0DC000
|
unkown
|
page readonly
|
|
|
|
7FF58B542000
|
unkown
|
page readonly
|
|
|
|
F41000
|
unkown image
|
page execute read
|
|
|
|
5C1000
|
heap default
|
page read and write
|
|
|
|
7FF5E568A000
|
unkown
|
page readonly
|
|
|
|
F8E000
|
unkown
|
page read and write
|
|
|
|
7FF57604B000
|
unkown
|
page readonly
|
|
|
|
603000
|
unkown
|
page read and write
|
|
|
|
40B000
|
unkown image
|
page readonly
|
|
|
|
1200000
|
unkown
|
page readonly
|
|
|
|
3101000
|
unkown
|
page read and write
|
|
|
|
7FF5058B1000
|
unkown
|
page readonly
|
|
|
|
21B3EB02000
|
unkown
|
page read and write
|
|
|
|
16640657000
|
unkown
|
page read and write
|
|
|
|
29C4AF49000
|
unkown
|
page read and write
|
|
|
|
33C0000
|
unkown
|
page readonly
|
|
|
|
27C2000
|
unkown
|
page read and write
|
|
|
|
2E2D000
|
unkown
|
page readonly
|
|
|
|
200D0813000
|
unkown
|
page read and write
|
|
|
|
3154000
|
unkown
|
page read and write
|
|
|
|
210E000
|
unkown
|
page read and write
|
|
|
|
7FF59716D000
|
unkown
|
page readonly
|
|
|
|
2AF8000
|
heap private
|
page read and write
|
|
|
|
7FF5E6434000
|
unkown
|
page readonly
|
|
|
|
16640590000
|
unkown
|
page readonly
|
|
|
|
7FF5971A7000
|
unkown
|
page readonly
|
|
|
|
89F000
|
stack
|
page read and write
|
|
|
|
19B000
|
stack
|
page read and write
|
|
|
|
238F82C5000
|
unkown
|
page read and write
|
|
|
|
3127000
|
unkown
|
page read and write
|
|
|
|
7FF52E483000
|
unkown
|
page readonly
|
|
|
|
18BC21D0000
|
unkown
|
page readonly
|
|
|
|
7FF58B3F8000
|
unkown
|
page readonly
|
|
|
|
7FF5E63FD000
|
unkown
|
page readonly
|
|
|
|
40D000
|
unkown image
|
page write copy
|
|
|
|
7FF587E54000
|
unkown
|
page readonly
|
|
|
|
FF0000
|
unkown
|
page read and write
|
|
|
|
20ED000
|
unkown
|
page read and write
|
|
|
|
7FF5E4F25000
|
unkown
|
page readonly
|
|
|
|
7FF5761AA000
|
unkown
|
page readonly
|
|
|
|
3230000
|
unkown
|
page readonly
|
|
|
|
7FF58B4D1000
|
unkown
|
page readonly
|
|
|
|
238F81C1000
|
unkown
|
page read and write
|
|
|
|
4E20000
|
unkown
|
page read and write
|
|
|
|
7FF5EB3C6000
|
unkown
|
page readonly
|
|
|
|
7FF58B246000
|
unkown
|
page readonly
|
|
|
|
DD934FF000
|
unkown
|
page read and write
|
|
|
|
2DE1000
|
unkown
|
page read and write
|
|
|
|
5A9000
|
heap default
|
page read and write
|
|
|
|
29C48EC8000
|
unkown
|
page read and write
|
|
|
|
26FB000
|
unkown
|
page read and write
|
|
|
|
6763AFB000
|
unkown
|
page read and write
|
|
|
|
2268D502000
|
unkown
|
page read and write
|
|
|
|
163AC25F000
|
unkown
|
page read and write
|
|
|
|
210E000
|
unkown
|
page read and write
|
|
|
|
28191B80000
|
unkown
|
page write copy
|
|
|
|
200D07F0000
|
unkown
|
page read and write
|
|
|
|
238F60B7000
|
unkown
|
page read and write
|
|
|
|
512F000
|
stack
|
page read and write
|
|
|
|
7ABE000
|
stack
|
page read and write
|
|
|
|
21B3E980000
|
unkown
|
page read and write
|
|
|
|
163AC257000
|
unkown
|
page read and write
|
|
|
|
FB2000
|
unkown
|
page read and write
|
|
|
|
7FF5E5736000
|
unkown
|
page readonly
|
|
|
|
7FF587EB9000
|
unkown
|
page readonly
|
|
|
|
7FF58B530000
|
unkown
|
page readonly
|
|
|
|
FA8000
|
unkown
|
page read and write
|
|
|
|
238F60BC000
|
unkown
|
page read and write
|
|
|
|
F9E000
|
unkown
|
page read and write
|
|
|
|
ECE92FE000
|
unkown
|
page read and write
|
|
|
|
163AC26A000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
163AC261000
|
unkown
|
page read and write
|
|
|
|
7FF5E63A6000
|
unkown
|
page readonly
|
|
|
|
238F60B6000
|
unkown
|
page read and write
|
|
|
|
7FF558DBE000
|
unkown
|
page readonly
|
|
|
|
7FF52CCAF000
|
unkown
|
page readonly
|
|
|
|
DE305FA000
|
unkown
|
page read and write
|
|
|
|
238F612C000
|
unkown
|
page read and write
|
|
|
|
163AC25E000
|
unkown
|
page read and write
|
|
|
|
115C000
|
unkown
|
page read and write
|
|
|
|
311D000
|
unkown
|
page read and write
|
|
|
|
226928B0000
|
unkown
|
page read and write
|
|
|
|
F8F000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page readonly
|
|
|
|
7FF587D45000
|
unkown
|
page readonly
|
|
|
|
22692A26000
|
unkown
|
page read and write
|
|
|
|
2F51000
|
unkown
|
page read and write
|
|
|
|
7FF592210000
|
unkown
|
page readonly
|
|
|
|
C7982F7000
|
unkown
|
page read and write
|
|
|
|
FAB000
|
unkown
|
page read and write
|
|
|
|
412000
|
unkown image
|
page readonly
|
|
|
|
6755FFF000
|
unkown
|
page read and write
|
|
|
|
7FF58B36C000
|
unkown
|
page readonly
|
|
|
|
22692AB5000
|
unkown
|
page read and write
|
|
|
|
7FF5ED9A0000
|
unkown
|
page readonly
|
|
|
|
7FF5760FC000
|
unkown
|
page readonly
|
|
|
|
7FF505857000
|
unkown
|
page readonly
|
|
|
|
29C48ED9000
|
unkown
|
page read and write
|
|
|
|
5DE000
|
unkown
|
page read and write
|
|
|
|
29C4AF49000
|
unkown
|
page read and write
|
|
|
|
2703000
|
unkown
|
page read and write
|
|
|
|
7FF58B5BC000
|
unkown
|
page readonly
|
|
|
|
DD9377F000
|
unkown
|
page read and write
|
|
|
|
2F77000
|
unkown
|
page read and write
|
|
|
|
540000
|
heap default
|
page read and write
|
|
|
|
238F60EE000
|
unkown
|
page read and write
|
|
|
|
311B000
|
unkown
|
page read and write
|
|
|
|
238F8402000
|
unkown
|
page read and write
|
|
|
|
200D2402000
|
unkown
|
page read and write
|
|
|
|
F89000
|
unkown
|
page read and write
|
|
|
|
560000
|
heap default
|
page read and write
|
|
|
|
7FF5EDAE7000
|
unkown
|
page readonly
|
|
|
|
229D000
|
unkown
|
page read and write
|
|
|
|
7FF5EB3FD000
|
unkown
|
page readonly
|
|
|
|
29C48D50000
|
heap default
|
page read and write
|
|
|
|
2E3A000
|
unkown
|
page readonly
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
7FF597209000
|
unkown
|
page readonly
|
|
|
|
7FF5E543C000
|
unkown
|
page readonly
|
|
|
|
30FA000
|
unkown
|
page read and write
|
|
|
|
2268D300000
|
heap private
|
page read and write
|
|
|
|
F89000
|
unkown
|
page read and write
|
|
|
|
1C4F8C77000
|
unkown
|
page read and write
|
|
|
|
22ABF23C000
|
unkown
|
page read and write
|
|
|
|
40D000
|
unkown image
|
page write copy
|
|
|
|
2469CFC000
|
unkown
|
page read and write
|
|
|
|
2AF8000
|
heap private
|
page read and write
|
|
|
|
7FF558D60000
|
unkown
|
page readonly
|
|
|
|
22692C00000
|
unkown
|
page read and write
|
|
|
|
560000
|
heap default
|
page read and write
|
|
|
|
210E000
|
unkown
|
page read and write
|
|
|
|
7FF5761C5000
|
unkown
|
page readonly
|
|
|
|
238F8236000
|
unkown
|
page read and write
|
|
|
|
6A9000
|
heap default
|
page read and write
|
|
|
|
2AB3000
|
unkown
|
page read and write
|
|
|
|
318E000
|
unkown
|
page read and write
|
|
|
|
FD8000
|
unkown
|
page read and write
|
|
|
|
7FF5057C8000
|
unkown
|
page readonly
|
|
|
|
7FF592151000
|
unkown
|
page readonly
|
|
|
|
7FF5E57AE000
|
unkown
|
page readonly
|
|
|
|
7FF5B19B4000
|
unkown
|
page readonly
|
|
|
|
7FF5CC18E000
|
unkown
|
page readonly
|
|
|
|
238F6029000
|
unkown
|
page read and write
|
|
|
|
238F8117000
|
unkown
|
page read and write
|
|
|
|
2ABE000
|
unkown
|
page read and write
|
|
|
|
29C4AD20000
|
unkown
|
page read and write
|
|
|
|
26DC000
|
unkown
|
page read and write
|
|
|
|
238F82C8000
|
unkown
|
page read and write
|
|
|
|
2F53000
|
unkown
|
page read and write
|
|
|
|
20DE000
|
unkown
|
page read and write
|
|
|
|
10001000
|
unkown
|
page execute read
|
|
|
|
2058000
|
heap private
|
page read and write
|
|
|
|
4E70000
|
heap private
|
page read and write
|
|
|
|
FBA000
|
unkown
|
page read and write
|
|
|
|
2040000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown image
|
page readonly
|
|
|
|
7FF5058AE000
|
unkown
|
page readonly
|
|
|
|
604000
|
unkown
|
page read and write
|
|
|
|
2268D48E000
|
unkown
|
page read and write
|
|
|
|
22692C00000
|
unkown
|
page read and write
|
|
|
|
22692A4C000
|
unkown
|
page read and write
|
|
|
|
7FF59225F000
|
unkown
|
page readonly
|
|
|
|
3154000
|
unkown
|
page read and write
|
|
|
|
163AC273000
|
unkown
|
page read and write
|
|
|
|
2B743600000
|
unkown
|
page read and write
|
|
|
|
101F000
|
unkown
|
page read and write
|
|
|
|
F9C000
|
unkown
|
page read and write
|
|
|
|
22692CB0000
|
unkown
|
page read and write
|
|
|
|
DD9367D000
|
unkown
|
page read and write
|
|
|
|
7FF52E728000
|
unkown
|
page readonly
|
|
|
|
7FF596E77000
|
unkown
|
page readonly
|
|
|
|
102D000
|
unkown
|
page read and write
|
|
|
|
10023000
|
unkown
|
page readonly
|
|
|
|
2F64000
|
unkown
|
page readonly
|
|
|
|
4E30000
|
unkown
|
page read and write
|
|
|
|
7FF5CC073000
|
unkown
|
page readonly
|
|
|
|
22692A61000
|
unkown
|
page read and write
|
|
|
|
FD9000
|
unkown
|
page read and write
|
|
|
|
7FF587DF5000
|
unkown
|
page readonly
|
|
|
|
2D90000
|
heap private
|
page read and write
|
|
|
|
210E000
|
unkown
|
page read and write
|
|
|
|
2B7450A0000
|
unkown
|
page readonly
|
|
|
|
163AC241000
|
unkown
|
page read and write
|
|
|
|
7FF58B4AC000
|
unkown
|
page readonly
|
|
|
|
26F0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5970B7000
|
unkown
|
page readonly
|
|
|
|
2268D502000
|
unkown
|
page read and write
|
|
|
|
7FF5B19A0000
|
unkown
|
page readonly
|
|
|
|
22692C08000
|
unkown
|
page read and write
|
|
|
|
7FF5057FF000
|
unkown
|
page readonly
|
|
|
|
7FF5CC137000
|
unkown
|
page readonly
|
|
|
|
29267AC0000
|
unkown
|
page read and write
|
|
|
|
163AC802000
|
unkown
|
page read and write
|
|
|
|
1A08A312000
|
unkown
|
page read and write
|
|
|
|
7FF558CFE000
|
unkown
|
page readonly
|
|
|
|
7FF5CC0D5000
|
unkown
|
page readonly
|
|
|
|
3750000
|
unkown
|
page read and write
|
|
|
|
7FF587E1D000
|
unkown
|
page readonly
|
|
|
|
7FF5E56C8000
|
unkown
|
page readonly
|
|
|
|
2DA0000
|
unkown
|
page readonly
|
|
|
|
238F606B000
|
unkown
|
page read and write
|
|
|
|
7FF5879F1000
|
unkown
|
page readonly
|
|
|
|
7FF5E636A000
|
unkown
|
page readonly
|
|
|
|
3154000
|
unkown
|
page read and write
|
|
|
|
163AC231000
|
unkown
|
page read and write
|
|
|
|
F93000
|
unkown
|
page read and write
|
|
|
|
238F60DC000
|
unkown
|
page read and write
|
|
|
|
7FF50568A000
|
unkown
|
page readonly
|
|
|
|
200D084B000
|
unkown
|
page read and write
|
|
|
|
154E000
|
unkown
|
page read and write
|
|
|
|
311B000
|
unkown
|
page read and write
|
|
|
|
18BC2302000
|
unkown
|
page read and write
|
|
|
|
26EB000
|
unkown
|
page read and write
|
|
|
|
40B000
|
unkown image
|
page readonly
|
|
|
|
F16DB7C000
|
unkown
|
page read and write
|
|
|
|
1A089A65000
|
unkown
|
page read and write
|
|
|
|
2126000
|
unkown
|
page read and write
|
|
|
|
20EC000
|
unkown
|
page read and write
|
|
|
|
26EB000
|
unkown
|
page read and write
|
|
|
|
2F71000
|
unkown
|
page read and write
|
|
|
|
7FF597112000
|
unkown
|
page readonly
|
|
|
|
200D22D0000
|
unkown
|
page read and write
|
|
|
|
7FF5057C2000
|
unkown
|
page readonly
|
|
|
|
22692C90000
|
unkown
|
page read and write
|
|
|
|
7FF58B62E000
|
unkown
|
page readonly
|
|
|
|
52E000
|
unkown
|
page read and write
|
|
|
|
7FF58B4B7000
|
unkown
|
page readonly
|
|
|
|
22692C24000
|
unkown
|
page read and write
|
|
|
|
1A089AC5000
|
unkown
|
page read and write
|
|
|
|
F92000
|
unkown
|
page read and write
|
|
|
|
7FF5EDBC5000
|
unkown
|
page readonly
|
|
|
|
2F58000
|
unkown
|
page read and write
|
|
|
|
2FCA000
|
unkown
|
page read and write
|
|
|
|
300B000
|
unkown
|
page readonly
|
|
|
|
F90000
|
unkown
|
page read and write
|
|
|
|
61B000
|
unkown
|
page read and write
|
|
|
|
200D2350000
|
unkown
|
page read and write
|
|
|
|
238F9210000
|
unkown
|
page read and write
|
|
|
|
198000
|
stack
|
page read and write
|
|
|
|
5DC000
|
unkown
|
page read and write
|
|
|
|
676417B000
|
unkown
|
page read and write
|
|
|
|
22692D20000
|
unkown
|
page read and write
|
|
|
|
7FF59229C000
|
unkown
|
page readonly
|
|
|
|
F90000
|
unkown
|
page read and write
|
|
|
|
7FF558D67000
|
unkown
|
page readonly
|
|
|
|
D10000
|
unkown
|
page read and write
|
|
|
|
238F81CA000
|
unkown
|
page read and write
|
|
|
|
7FF58B3DE000
|
unkown
|
page readonly
|
|
|
|
1A089A67000
|
unkown
|
page read and write
|
|
|
|
2177000
|
unkown
|
page read and write
|
|
|
|
F16DCFE000
|
unkown
|
page read and write
|
|
|
|
3117000
|
unkown
|
page read and write
|
|
|
|
7FF52CC58000
|
unkown
|
page readonly
|
|
|
|
7FF5E6155000
|
unkown
|
page readonly
|
|
|
|
238F8300000
|
unkown
|
page read and write
|
|
|
|
F92000
|
unkown
|
page read and write
|
|
|
|
3C87B9E000
|
unkown
|
page read and write
|
|
|
|
7FF58B630000
|
unkown
|
page readonly
|
|
|
|
2268DD00000
|
unkown
|
page read and write
|
|
|
|
7FF5E60F4000
|
unkown
|
page readonly
|
|
|
|
7DFC52EE0000
|
unkown
|
page readonly
|
|
|
|
7FF576280000
|
unkown
|
page readonly
|
|
|
|
200D084C000
|
unkown
|
page read and write
|
|
|
|
7FF5058B9000
|
unkown
|
page readonly
|
|
|
|
7FF5B1A05000
|
unkown
|
page readonly
|
|
|
|
2F56000
|
unkown
|
page readonly
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
238F60BB000
|
unkown
|
page read and write
|
|
|
|
10007B000
|
unkown
|
page read and write
|
|
|
|
7FF59717C000
|
unkown
|
page readonly
|
|
|
|
FCF000
|
stack
|
page read and write
|
|
|
|
26D9000
|
unkown
|
page read and write
|
|
|
|
7FF52E769000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
238F81E3000
|
unkown
|
page read and write
|
|
|
|
7FF5057DA000
|
unkown
|
page readonly
|
|
|
|
7FF5CC07C000
|
unkown
|
page readonly
|
|
|
|
F8C000
|
unkown
|
page read and write
|
|
|
|
7FF52CBF5000
|
unkown
|
page readonly
|
|
|
|
2F4A000
|
unkown
|
page readonly
|
|
|
|
F90000
|
unkown
|
page read and write
|
|
|
|
599000
|
unkown
|
page read and write
|
|
|
|
3167000
|
unkown
|
page read and write
|
|
|
|
2F42000
|
unkown
|
page readonly
|
|
|
|
22692A20000
|
unkown
|
page read and write
|
|
|
|
163AC23A000
|
unkown
|
page read and write
|
|
|
|
200D082A000
|
unkown
|
page read and write
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
187000
|
stack
|
page read and write
|
|
|
|
7FF558CD8000
|
unkown
|
page readonly
|
|
|
|
7FF558D64000
|
unkown
|
page readonly
|
|
|
|
21B3F060000
|
unkown
|
page read and write
|
|
|
|
7FF52CA1E000
|
unkown
|
page readonly
|
|
|
|
22F0000
|
unkown
|
page read and write
|
|
|
|
1A0899F0000
|
unkown
|
page readonly
|
|
|
|
7FF5B1D66000
|
unkown
|
page readonly
|
|
|
|
7FF5CC04A000
|
unkown
|
page readonly
|
|
|
|
21B3E950000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
28191C55000
|
unkown
|
page read and write
|
|
|
|
7FF596ED0000
|
unkown
|
page readonly
|
|
|
|
21B3E980000
|
unkown
|
page read and write
|
|
|
|
6755CFD000
|
unkown
|
page read and write
|
|
|
|
28191E00000
|
unkown
|
page readonly
|
|
|
|
29C4AD20000
|
unkown
|
page read and write
|
|
|
|
5C2000
|
heap default
|
page read and write
|
|
|
|
2352C895000
|
heap private
|
page read and write
|
|
|
|
ACA000
|
heap private
|
page read and write
|
|
|
|
7FF5CC0DF000
|
unkown
|
page readonly
|
|
|
|
66F000
|
stack
|
page read and write
|
|
|
|
16640520000
|
heap private
|
page read and write
|
|
|
|
2109000
|
unkown
|
page read and write
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
50EE000
|
unkown
|
page read and write
|
|
|
|
1A08A740000
|
unkown
|
page readonly
|
|
|
|
7FF59218C000
|
unkown
|
page readonly
|
|
|
|
318F000
|
unkown
|
page read and write
|
|
|
|
163AC030000
|
heap default
|
page read and write
|
|
|
|
2B743629000
|
unkown
|
page read and write
|
|
|
|
2F4D000
|
unkown
|
page readonly
|
|
|
|
226928A0000
|
unkown
|
page read and write
|
|
|
|
7FF592269000
|
unkown
|
page readonly
|
|
|
|
7FF592311000
|
unkown
|
page readonly
|
|
|
|
7FF587EB1000
|
unkown
|
page readonly
|
|
|
|
18BC2300000
|
unkown
|
page read and write
|
|
|
|
2268D413000
|
unkown
|
page read and write
|
|
|
|
163AC25C000
|
unkown
|
page read and write
|
|
|
|
7FF5E63A8000
|
unkown
|
page readonly
|
|
|
|
7FF5E56C6000
|
unkown
|
page readonly
|
|
|
|
1028000
|
unkown
|
page read and write
|
|
|
|
F51000
|
unkown image
|
page readonly
|
|
|
|
7FF5CBCA3000
|
unkown
|
page readonly
|
|
|
|
ECE947A000
|
unkown
|
page read and write
|
|
|
|
7FF5057F5000
|
unkown
|
page readonly
|
|
|
|
238F9510000
|
unkown
|
page read and write
|
|
|
|
194000
|
stack
|
page read and write
|
|
|
|
238F6200000
|
unkown
|
page readonly
|
|
|
|
FA2000
|
unkown
|
page read and write
|
|
|
|
2352E110000
|
unkown
|
page readonly
|
|
|
|
22692DF0000
|
unkown
|
page readonly
|
|
|
|
F16D7DB000
|
unkown
|
page read and write
|
|
|
|
567000
|
heap default
|
page read and write
|
|
|
|
3154000
|
unkown
|
page read and write
|
|
|
|
2E22000
|
unkown
|
page readonly
|
|
|
|
7FF5E5667000
|
unkown
|
page readonly
|
|
|
|
2DC857F000
|
unkown
|
page read and write
|
|
|
|
101E000
|
unkown
|
page read and write
|
|
|
|
22ABEFB0000
|
heap private
|
page read and write
|
|
|
|
2FA0000
|
unkown
|
page readonly
|
|
|
|
1A08A090000
|
unkown
|
page readonly
|
|
|
|
2DC877C000
|
unkown
|
page read and write
|
|
|
|
7FF5EDB32000
|
unkown
|
page readonly
|
|
|
|
7FF591B4A000
|
unkown
|
page readonly
|
|
|
|
7FF5970BA000
|
unkown
|
page readonly
|
|
|
|
313A000
|
unkown
|
page read and write
|
|
|
|
21B3EA02000
|
unkown
|
page read and write
|
|
|
|
5C1000
|
unkown
|
page read and write
|
|
|
|
226929F0000
|
unkown
|
page read and write
|
|
|
|
18BC226F000
|
unkown
|
page read and write
|
|
|
|
2D95000
|
heap private
|
page read and write
|
|
|
|
29C4AF02000
|
unkown
|
page read and write
|
|
|
|
120E000
|
stack
|
page read and write
|
|
|
|
7FF5E5625000
|
unkown
|
page readonly
|
|
|
|
2DB4000
|
unkown
|
page readonly
|
|
|
|
7FF591E10000
|
unkown
|
page readonly
|
|
|
|
7FF5CBED8000
|
unkown
|
page readonly
|
|
|
|
3E8F000
|
stack
|
page read and write
|
|
|
|
7FF597201000
|
unkown
|
page readonly
|
|
|
|
7FF58B1B0000
|
unkown
|
page readonly
|
|
|
|
26D8000
|
unkown
|
page read and write
|
|
|
|
7FF5B1DE9000
|
unkown
|
page readonly
|
|
|
|
238F60B6000
|
unkown
|
page read and write
|
|
|
|
7FF52CB39000
|
unkown
|
page readonly
|
|
|
|
20E3000
|
unkown
|
page read and write
|
|
|
|
7FF558D0F000
|
unkown
|
page readonly
|
|
|
|
315A000
|
unkown
|
page read and write
|
|
|
|
238F8168000
|
unkown
|
page read and write
|
|
|
|
1A089A6E000
|
unkown
|
page read and write
|
|
|
|
30DE000
|
stack
|
page read and write
|
|
|
|
2268D48C000
|
unkown
|
page read and write
|
|
|
|
5D4000
|
unkown
|
page read and write
|
|
|
|
6763E79000
|
unkown
|
page read and write
|
|
|
|
1015000
|
unkown
|
page read and write
|
|
|
|
51E000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
621000
|
unkown
|
page read and write
|
|
|
|
570000
|
unkown
|
page readonly
|
|
|
|
4DBF000
|
stack
|
page read and write
|
|
|
|
7FF576196000
|
unkown
|
page readonly
|
|
|
|
220F000
|
stack
|
page read and write
|
|
|
|
2F7000
|
unkown
|
page read and write
|
|
|
|
D5A000
|
unkown
|
page read and write
|
|
|
|
5D4000
|
unkown
|
page read and write
|
|
|
|
200D0E60000
|
unkown
|
page readonly
|
|
|
|
7FF592319000
|
unkown
|
page readonly
|
|
|
|
7FF5057B2000
|
unkown
|
page readonly
|
|
|
|
593000
|
unkown
|
page read and write
|
|
|
|
30FD000
|
unkown
|
page read and write
|
|
|
|
10001000
|
unkown
|
page execute read
|
|
|
|
FBC000
|
unkown
|
page read and write
|
|
|
|
29C48EA9000
|
unkown
|
page read and write
|
|
|
|
7FF5EB3CC000
|
unkown
|
page readonly
|
|
|
|
238F60BE000
|
unkown
|
page read and write
|
|
|
|
238F619F000
|
unkown
|
page read and write
|
|
|
|
7FF5EDB6E000
|
unkown
|
page readonly
|
|
|
|
EB0000
|
unkown
|
page read and write
|
|
|
|
7FF52C8A3000
|
unkown
|
page readonly
|
|
|
|
200D0918000
|
unkown
|
page read and write
|
|
|
|
16640800000
|
unkown
|
page readonly
|
|
|
|
18BC2308000
|
unkown
|
page read and write
|
|
|
|
7FF575E71000
|
unkown
|
page readonly
|
|
|
|
30E1000
|
unkown
|
page read and write
|
|
|
|
200D0913000
|
unkown
|
page read and write
|
|
|
|
7FF5056F1000
|
unkown
|
page readonly
|
|
|
|
7FF576097000
|
unkown
|
page readonly
|
|
|
|
3DC60DC000
|
unkown
|
page read and write
|
|
|
|
2268D370000
|
unkown
|
page readonly
|
|
|
|
4CBF000
|
stack
|
page read and write
|
|
|
|
2DB4000
|
unkown
|
page readonly
|
|
|
|
238F8800000
|
unkown
|
page readonly
|
|
|
|
2F74000
|
unkown
|
page read and write
|
|
|
|
238F7A80000
|
unkown
|
page read and write
|
|
|
|
7FF58B56E000
|
unkown
|
page readonly
|
|
|
|
2268DD59000
|
unkown
|
page read and write
|
|
|
|
22692C0E000
|
unkown
|
page read and write
|
|
|
|
2AB7000
|
unkown
|
page read and write
|
|
|
|
7FF52CCDC000
|
unkown
|
page readonly
|
|
|
|
3100000
|
unkown
|
page read and write
|
|
|
|
2F4F000
|
unkown
|
page read and write
|
|
|
|
AC7000
|
heap private
|
page read and write
|
|
|
|
7FF576115000
|
unkown
|
page readonly
|
|
|
|
7FF5E568C000
|
unkown
|
page readonly
|
|
|
|
7FF576180000
|
unkown
|
page readonly
|
|
|
|
F30000
|
unkown
|
page readonly
|
|
|
|
7FF5E566A000
|
unkown
|
page readonly
|
|
|
|
7FF5E5709000
|
unkown
|
page readonly
|
|
|
|
615000
|
unkown
|
page read and write
|
|
|
|
3A40000
|
unkown
|
page read and write
|
|
|
|
AB4D7F000
|
unkown
|
page read and write
|
|
|
|
40B000
|
unkown image
|
page readonly
|
|
|
|
7FF52CD00000
|
unkown
|
page readonly
|
|
|
|
22692AA0000
|
unkown
|
page read and write
|
|
|
|
7FF592228000
|
unkown
|
page readonly
|
|
|
|
7FF50583C000
|
unkown
|
page readonly
|
|
|
|
5BF000
|
heap default
|
page read and write
|
|
|
|
2101000
|
unkown
|
page read and write
|
|
|
|
5CE000
|
unkown
|
page read and write
|
|
|
|
7FF5CBFA3000
|
unkown
|
page readonly
|
|
|
|
7FF587C7A000
|
unkown
|
page readonly
|
|
|
|
2E0D000
|
unkown
|
page read and write
|
|
|
|
3BF0000
|
unkown
|
page read and write
|
|
|
|
7FF596FF8000
|
unkown
|
page readonly
|
|
|
|
5B7000
|
unkown
|
page read and write
|
|
|
|
346C000
|
unkown
|
page read and write
|
|
|
|
2268D495000
|
unkown
|
page read and write
|
|
|
|
7FF5CBF88000
|
unkown
|
page readonly
|
|
|
|
2703000
|
unkown
|
page read and write
|
|
|
|
7FF558D05000
|
unkown
|
page readonly
|
|
|
|
FC9000
|
unkown
|
page read and write
|
|
|
|
7FF5922B4000
|
unkown
|
page readonly
|
|
|
|
21B3EA3D000
|
unkown
|
page read and write
|
|
|
|
7FF5EB350000
|
unkown
|
page readonly
|
|
|
|
12E0000
|
heap default
|
page read and write
|
|
|
|
2268E820000
|
unkown
|
page read and write
|
|
|
|
163AC26C000
|
unkown
|
page read and write
|
|
|
|
26FB000
|
unkown
|
page read and write
|
|
|
|
28191C29000
|
unkown
|
page read and write
|
|
|
|
26EB000
|
unkown
|
page read and write
|
|
|
|
7A3E000
|
stack
|
page read and write
|
|
|
|
238F8200000
|
unkown
|
page read and write
|
|
|
|
2F69000
|
unkown
|
page read and write
|
|
|
|
2100000
|
heap private
|
page read and write
|
|
|
|
564000
|
unkown
|
page read and write
|
|
|
|
21B3E860000
|
unkown
|
page readonly
|
|
|
|
30F3000
|
unkown
|
page read and write
|
|
|
|
2F77000
|
unkown
|
page readonly
|
|
|
|
18BC224E000
|
unkown
|
page read and write
|
|
|
|
2F4D000
|
unkown
|
page readonly
|
|
|
|
F16DEFD000
|
unkown
|
page read and write
|
|
|
|
F9C000
|
unkown
|
page read and write
|
|
|
|
2268E4C0000
|
unkown
|
page readonly
|
|
|
|
100BFC000
|
unkown
|
page read and write
|
|
|
|
238F8113000
|
unkown
|
page read and write
|
|
|
|
238F9610000
|
unkown
|
page read and write
|
|
|
|
7FF5CC051000
|
unkown
|
page readonly
|
|
|
|
40B000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5664000
|
unkown
|
page readonly
|
|
|
|
7FF5053AA000
|
unkown
|
page readonly
|
|
|
|
7FF52E819000
|
unkown
|
page readonly
|
|
|
|
29266102000
|
unkown
|
page read and write
|
|
|
|
2352C860000
|
unkown
|
page readonly
|
|
|
|
7FF52E029000
|
unkown
|
page readonly
|
|
|
|
7FF587B1D000
|
unkown
|
page readonly
|
|
|
|
226929D0000
|
unkown
|
page read and write
|
|
|
|
5160000
|
unkown
|
page readonly
|
|
|
|
2010000
|
unkown
|
page read and write
|
|
|
|
292662D0000
|
unkown
|
page write copy
|
|
|
|
163AC269000
|
unkown
|
page read and write
|
|
|
|
1C4F9740000
|
unkown
|
page readonly
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
163AC22C000
|
unkown
|
page read and write
|
|
|
|
29C4AD20000
|
unkown
|
page read and write
|
|
|
|
C5C000
|
unkown
|
page read and write
|
|
|
|
FC3000
|
unkown
|
page read and write
|
|
|
|
22692C90000
|
unkown
|
page read and write
|
|
|
|
1008FB000
|
unkown
|
page read and write
|
|
|
|
7FF52CC3A000
|
unkown
|
page readonly
|
|
|
|
7FF5B1D1E000
|
unkown
|
page readonly
|
|
|
|
238F60BB000
|
unkown
|
page read and write
|
|
|
|
18BC2250000
|
unkown
|
page read and write
|
|
|
|
C7983FB000
|
unkown
|
page read and write
|
|
|
|
7FF58B171000
|
unkown
|
page readonly
|
|
|
|
3DC64FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E6406000
|
unkown
|
page readonly
|
|
|
|
238F9000000
|
unkown
|
page read and write
|
|
|
|
7FF5E54DB000
|
unkown
|
page readonly
|
|
|
|
29C48CF0000
|
heap private
|
page read and write
|
|
|
|
7FF58B639000
|
unkown
|
page readonly
|
|
|
|
21B3F202000
|
unkown
|
page read and write
|
|
|
|
1012000
|
unkown
|
page read and write
|
|
|
|
2268D600000
|
unkown
|
page readonly
|
|
|
|
22692D60000
|
unkown
|
page readonly
|
|
|
|
FE0000
|
unkown
|
page readonly
|
|
|
|
194000
|
stack
|
page read and write
|
|
|
|
7FF5EDBD4000
|
unkown
|
page readonly
|
|
|
|
7FF5CC0FD000
|
unkown
|
page readonly
|
|
|
|
2352E45F000
|
heap private
|
page read and write
|
|
|
|
1045000
|
unkown
|
page read and write
|
|
|
|
238F819E000
|
unkown
|
page read and write
|
|
|
|
363000
|
unkown
|
page read and write
|
|
|
|
10338000
|
unkown
|
page read and write
|
|
|
|
7FF5E56B2000
|
unkown
|
page readonly
|
|
|
|
2DE0000
|
unkown
|
page read and write
|
|
|
|
7FF5EDC30000
|
unkown
|
page readonly
|
|
|
|
26D9000
|
unkown
|
page read and write
|
|
|
|
F8E000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA0A000
|
unkown
|
page readonly
|
|
|
|
7FF5E634A000
|
unkown
|
page readonly
|
|
|
|
2AB7000
|
heap private
|
page read and write
|
|
|
|
200D2290000
|
unkown
|
page read and write
|
|
|
|
200D2380000
|
unkown
|
page write copy
|
|
|
|
29C4AD50000
|
unkown
|
page readonly
|
|
|
|
7FF5E5520000
|
unkown
|
page readonly
|
|
|
|
9E8B477000
|
unkown
|
page read and write
|
|
|
|
D9FD0F9000
|
unkown
|
page read and write
|
|
|
|
200D2370000
|
unkown
|
page readonly
|
|
|
|
2F8A000
|
unkown
|
page read and write
|
|
|
|
7FF52E78C000
|
unkown
|
page readonly
|
|
|
|
2E4D000
|
unkown
|
page readonly
|
|
|
|
7FF58B3EC000
|
unkown
|
page readonly
|
|
|
|
7FF52E726000
|
unkown
|
page readonly
|
|
|
|
7FF5E551E000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
2F52000
|
unkown
|
page read and write
|
|
|
|
2F82000
|
unkown
|
page readonly
|
|
|
|
2268DD18000
|
unkown
|
page read and write
|
|
|
|
2122000
|
unkown
|
page read and write
|
|
|
|
7FF58B507000
|
unkown
|
page readonly
|
|
|
|
3101000
|
unkown
|
page read and write
|
|
|
|
2268D507000
|
unkown
|
page read and write
|
|
|
|
1004FC000
|
unkown
|
page read and write
|
|
|
|
AC9000
|
heap private
|
page read and write
|
|
|
|
7FF52E623000
|
unkown
|
page readonly
|
|
|
|
7FF5761BE000
|
unkown
|
page readonly
|
|
|
|
7FF5B1D75000
|
unkown
|
page readonly
|
|
|
|
7FF5CC03A000
|
unkown
|
page readonly
|
|
|
|
4C7E000
|
unkown
|
page read and write
|
|
|
|
2B7435D0000
|
unkown
|
page readonly
|
|
|
|
2040000
|
unkown
|
page read and write
|
|
|
|
7FF5EDB30000
|
unkown
|
page readonly
|
|
|
|
163AC24D000
|
unkown
|
page read and write
|
|
|
|
2F72000
|
unkown
|
page readonly
|
|
|
|
2268E801000
|
unkown
|
page read and write
|
|
|
|
7FF59197D000
|
unkown
|
page readonly
|
|
|
|
29C4AD10000
|
unkown
|
page readonly
|
|
|
|
7FF52E7A7000
|
unkown
|
page readonly
|
|
|
|
FFE000
|
unkown
|
page read and write
|
|
|
|
18BC224A000
|
unkown
|
page read and write
|
|
|
|
7FF587DC8000
|
unkown
|
page readonly
|
|
|
|
F68000
|
heap default
|
page read and write
|
|
|
|
1C4F8C00000
|
unkown
|
page read and write
|
|
|
|
163AC27D000
|
unkown
|
page read and write
|
|
|
|
412000
|
unkown image
|
page read and write
|
|
|
|
28191C3F000
|
unkown
|
page read and write
|
|
|
|
7FF5970C1000
|
unkown
|
page readonly
|
|
|
|
18BC2213000
|
unkown
|
page read and write
|
|
|
|
AB0000
|
unkown
|
page readonly
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
21B3EA24000
|
unkown
|
page read and write
|
|
|
|
7FF52CB08000
|
unkown
|
page readonly
|
|
|
|
FE9000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown
|
page read and write
|
|
|
|
238F813D000
|
unkown
|
page read and write
|
|
|
|
233E000
|
unkown
|
page read and write
|
|
|
|
1C4F9400000
|
unkown
|
page readonly
|
|
|
|
7FF5053B0000
|
unkown
|
page readonly
|
|
|
|
1664063D000
|
unkown
|
page read and write
|
|
|
|
7FF5E5745000
|
unkown
|
page readonly
|
|
|
|
238F812A000
|
unkown
|
page read and write
|
|
|
|
216E000
|
unkown
|
page read and write
|
|
|
|
318D000
|
unkown
|
page read and write
|
|
|
|
7FF587B75000
|
unkown
|
page readonly
|
|
|
|
238F9610000
|
unkown
|
page read and write
|
|
|
|
22ABF1E0000
|
unkown
|
page read and write
|
|
|
|
7FF575E5F000
|
unkown
|
page readonly
|
|
|
|
2FCB000
|
unkown
|
page read and write
|
|
|
|
2DB6000
|
unkown
|
page readonly
|
|
|
|
238F5F30000
|
heap private
|
page read and write
|
|
|
|
27C2000
|
unkown
|
page read and write
|
|
|
|
16640C60000
|
unkown
|
page readonly
|
|
|
|
238F6076000
|
unkown
|
page read and write
|
|
|
|
7FF576198000
|
unkown
|
page readonly
|
|
|
|
7FF5E5651000
|
unkown
|
page readonly
|
|
|
|
1A08A300000
|
unkown
|
page read and write
|
|
|
|
2469EFF000
|
unkown
|
page read and write
|
|
|
|
FAE000
|
unkown
|
page read and write
|
|
|
|
2040000
|
unkown
|
page read and write
|
|
|
|
7FF596F5A000
|
unkown
|
page readonly
|
|
|
|
7FF59714F000
|
unkown
|
page readonly
|
|
|
|
ED1000
|
heap default
|
page read and write
|
|
|
|
7FF587E57000
|
unkown
|
page readonly
|
|
|
|
7FF5B1DE1000
|
unkown
|
page readonly
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
7FF59713E000
|
unkown
|
page readonly
|
|
|
|
1C4F8AF0000
|
unkown
|
page readonly
|
|
|
|
200D085B000
|
unkown
|
page read and write
|
|
|
|
7FF591E0A000
|
unkown
|
page readonly
|
|
|
|
5B7000
|
unkown
|
page read and write
|
|
|
|
67554EB000
|
unkown
|
page read and write
|
|
|
|
19C000
|
stack
|
page read and write
|
|
|
|
683000
|
heap default
|
page read and write
|
|
|
|
2268D457000
|
unkown
|
page read and write
|
|
|
|
26D9000
|
unkown
|
page read and write
|
|
|
|
7FF52CCF5000
|
unkown
|
page readonly
|
|
|
|
7FF5EB3DC000
|
unkown
|
page readonly
|
|
|
|
163AC266000
|
unkown
|
page read and write
|
|
|
|
7FF5761ED000
|
unkown
|
page readonly
|
|
|
|
5D4000
|
unkown
|
page read and write
|
|
|
|
7FF592157000
|
unkown
|
page readonly
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
676447A000
|
unkown
|
page read and write
|
|
|
|
7FF58B548000
|
unkown
|
page readonly
|
|
|
|
1C4F8A10000
|
heap default
|
page read and write
|
|
|
|
AB4B7B000
|
unkown
|
page read and write
|
|
|
|
3028000
|
unkown
|
page readonly
|
|
|
|
7FF52E786000
|
unkown
|
page readonly
|
|
|
|
2DC887D000
|
unkown
|
page read and write
|
|
|
|
7FF52CD5E000
|
unkown
|
page readonly
|
|
|
|
FC9000
|
unkown
|
page read and write
|
|
|
|
7FF5EDB46000
|
unkown
|
page readonly
|
|
|
|
103E000
|
unkown
|
page read and write
|
|
|
|
FB2000
|
unkown
|
page read and write
|
|
|
|
D9FCEFE000
|
unkown
|
page read and write
|
|
|
|
238F5FA0000
|
unkown
|
page write copy
|
|
|
|
7FF52E6CA000
|
unkown
|
page readonly
|
|
|
|
9E8B275000
|
unkown
|
page read and write
|
|
|
|
22ABF313000
|
unkown
|
page read and write
|
|
|
|
2268D43C000
|
unkown
|
page read and write
|
|
|
|
210E000
|
unkown
|
page read and write
|
|
|
|
FA6000
|
unkown
|
page read and write
|
|
|
|
7FF5EDB9D000
|
unkown
|
page readonly
|
|
|
|
BCE000
|
unkown
|
page read and write
|
|
|
|
FD2000
|
unkown
|
page read and write
|
|
|
|
22692E00000
|
unkown
|
page read and write
|
|
|
|
7FF587DA4000
|
unkown
|
page readonly
|
|
|
|
238F7F60000
|
unkown
|
page readonly
|
|
|
|
163AC274000
|
unkown
|
page read and write
|
|
|
|
60B000
|
unkown
|
page read and write
|
|
|
|
228D000
|
unkown
|
page read and write
|
|
|
|
238F818E000
|
unkown
|
page read and write
|
|
|
|
3107000
|
unkown
|
page read and write
|
|
|
|
274B000
|
unkown
|
page read and write
|
|
|
|
26EB000
|
unkown
|
page read and write
|
|
|
|
404000
|
unkown image
|
page execute and read and write
|
|
|
|
7FF587C3F000
|
unkown
|
page readonly
|
|
|
|
22692AAF000
|
unkown
|
page read and write
|
|
|
|
2268DD04000
|
unkown
|
page read and write
|
|
|
|
10077C000
|
unkown
|
page read and write
|
|
|
|
29C48E80000
|
unkown
|
page read and write
|
|
|
|
3C87A9B000
|
unkown
|
page read and write
|
|
|
|
3C87B1E000
|
unkown
|
page read and write
|
|
|
|
22C0000
|
unkown
|
page read and write
|
|
|
|
2268D4FE000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1018000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
3C8817E000
|
unkown
|
page read and write
|
|
|
|
6763A7E000
|
unkown
|
page read and write
|
|
|
|
F95000
|
unkown
|
page read and write
|
|
|
|
7FF5E5480000
|
unkown
|
page readonly
|
|
|
|
7FF5B19A7000
|
unkown
|
page readonly
|
|
|
|
163AC110000
|
unkown
|
page readonly
|
|
|
|
4111000
|
unkown
|
page read and write
|
|
|
|
67646FF000
|
unkown
|
page read and write
|
|
|
|
3120000
|
unkown
|
page read and write
|
|
|
|
20EC000
|
heap private
|
page read and write
|
|
|
|
2352C72B000
|
heap default
|
page read and write
|
|
|
|
7FF576107000
|
unkown
|
page readonly
|
|
|
|
7FF59228C000
|
unkown
|
page readonly
|
|
|
|
2B7434A0000
|
heap default
|
page read and write
|
|
|
|
52E000
|
unkown
|
page read and write
|
|
|
|
2C53000
|
unkown
|
page read and write
|
|
|
|
2268D4FE000
|
unkown
|
page read and write
|
|
|
|
AC6000
|
heap private
|
page read and write
|
|
|
|
FF1000
|
unkown
|
page read and write
|
|
|
|
7FF58B35B000
|
unkown
|
page readonly
|
|
|
|
7FF59212D000
|
unkown
|
page readonly
|
|
|
|
F41000
|
unkown image
|
page execute read
|
|
|
|
30F0000
|
unkown
|
page read and write
|
|
|
|
4FED000
|
unkown
|
page read and write
|
|
|
|
7FF5CBE03000
|
unkown
|
page readonly
|
|
|
|
7FF5EDBB6000
|
unkown
|
page readonly
|
|
|
|
BDB000
|
unkown
|
page read and write
|
|
|
|
67560FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E62A3000
|
unkown
|
page readonly
|
|
|
|
238F81DC000
|
unkown
|
page read and write
|
|
|
|
FB4000
|
unkown
|
page read and write
|
|
|
|
3100000
|
unkown
|
page read and write
|
|
|
|
238F7EF0000
|
unkown
|
page read and write
|
|
|
|
2F80000
|
unkown
|
page readonly
|
|
|
|
420000
|
unkown
|
page readonly
|
|
|
|
607000
|
unkown
|
page read and write
|
|
|
|
7FF5EB3A9000
|
unkown
|
page readonly
|
|
|
|
2F82000
|
unkown
|
page read and write
|
|
|
|
7FF5E636C000
|
unkown
|
page readonly
|
|
|
|
5D4000
|
unkown
|
page read and write
|
|
|
|
1A089B02000
|
unkown
|
page read and write
|
|
|
|
7FF587E3C000
|
unkown
|
page readonly
|
|
|
|
412000
|
unkown image
|
page readonly
|
|
|
|
7FF5E6160000
|
unkown
|
page readonly
|
|
|
|
40D000
|
unkown image
|
page write copy
|
|
|
|
2109000
|
unkown
|
page read and write
|
|
|
|
1041000
|
unkown
|
page read and write
|
|
|
|
5A9000
|
unkown
|
page read and write
|
|
|
|
7FF5CC191000
|
unkown
|
page readonly
|
|
|
|
163AC27A000
|
unkown
|
page read and write
|
|
|
|
238F6055000
|
unkown
|
page read and write
|
|
|
|
313A000
|
unkown
|
page read and write
|
|
|
|
5A1000
|
heap default
|
page read and write
|
|
|
|
C797ECB000
|
unkown
|
page read and write
|
|
|
|
163AC302000
|
unkown
|
page read and write
|
|
|
|
238F8142000
|
unkown
|
page read and write
|
|
|
|
238F611D000
|
unkown
|
page read and write
|
|
|
|
7FF52CACE000
|
unkown
|
page readonly
|
|
|
|
21B3E940000
|
unkown
|
page readonly
|
|
|
|
20E0000
|
unkown
|
page read and write
|
|
|
|
FA7000
|
unkown
|
page read and write
|
|
|
|
238F7F60000
|
unkown
|
page read and write
|
|
|
|
3006000
|
unkown
|
page readonly
|
|
|
|
7FF5761F1000
|
unkown
|
page readonly
|
|
|
|
2268D6D0000
|
unkown
|
page readonly
|
|
|
|
7FF5E5427000
|
unkown
|
page readonly
|
|
|
|
7FF5E5671000
|
unkown
|
page readonly
|
|
|
|
2B7453F0000
|
unkown
|
page read and write
|
|
|
|
29C48DF0000
|
unkown
|
page read and write
|
|
|
|
21B3EA63000
|
unkown
|
page read and write
|
|
|
|
403F000
|
stack
|
page read and write
|
|
|
|
7FF59203A000
|
unkown
|
page readonly
|
|
|
|
7FF5CC116000
|
unkown
|
page readonly
|
|
|
|
210E000
|
unkown
|
page read and write
|
|
|
|
1045000
|
unkown
|
page read and write
|
|
|
|
2E37000
|
unkown
|
page readonly
|
|
|
|
7FF5CBE07000
|
unkown
|
page readonly
|
|
|
|
29C48E56000
|
unkown
|
page read and write
|
|
|
|
10338000
|
unkown
|
page read and write
|
|
|
|
7FF58B4F1000
|
unkown
|
page readonly
|
|
|
|
7FF5E546E000
|
unkown
|
page readonly
|
|
|
|
2470000
|
unkown
|
page read and write
|
|
|
|
2268DC00000
|
unkown
|
page read and write
|
|
|
|
1C4F8C29000
|
unkown
|
page read and write
|
|
|
|
7FF5E63D5000
|
unkown
|
page readonly
|
|
|
|
2268DD18000
|
unkown
|
page read and write
|
|
|
|
F8F000
|
unkown
|
page read and write
|
|
|
|
238F7F80000
|
unkown
|
page readonly
|
|
|
|
10337000
|
unkown
|
page readonly
|
|
|
|
7FF58B546000
|
unkown
|
page readonly
|
|
|
|
29C4ACB0000
|
unkown
|
page readonly
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
238F8400000
|
unkown
|
page read and write
|
|
|
|
5DE000
|
unkown
|
page read and write
|
|
|
|
AC6000
|
heap private
|
page read and write
|
|
|
|
1045000
|
unkown
|
page read and write
|
|
|
|
313A000
|
unkown
|
page read and write
|
|
|
|
238F60BB000
|
unkown
|
page read and write
|
|
|
|
238F8212000
|
unkown
|
page read and write
|
|
|
|
2F77000
|
unkown
|
page readonly
|
|
|
|
7FF52E74E000
|
unkown
|
page readonly
|
|
|
|
F16E07D000
|
unkown
|
page read and write
|
|
|
|
7FF5922A5000
|
unkown
|
page readonly
|
|
|
|
56E000
|
unkown
|
page read and write
|
|
|
|
7FF59712A000
|
unkown
|
page readonly
|
|
|
|
1A089ABC000
|
unkown
|
page read and write
|
|
|
|
22ABF22A000
|
unkown
|
page read and write
|
|
|
|
3006000
|
unkown
|
page readonly
|
|
|
|
7FF5EDBA1000
|
unkown
|
page readonly
|
|
|
|
22692AA6000
|
unkown
|
page read and write
|
|
|
|
1041000
|
unkown
|
page read and write
|
|
|
|
7FF52CD04000
|
unkown
|
page readonly
|
|
|
|
5B5000
|
unkown
|
page read and write
|
|
|
|
1015000
|
unkown
|
page read and write
|
|
|
|
3014000
|
unkown
|
page readonly
|
|
|
|
DD933FA000
|
unkown
|
page read and write
|
|
|
|
3028000
|
unkown
|
page readonly
|
|
|
|
7FF5E648E000
|
unkown
|
page readonly
|
|
|
|
7FF5EDBAC000
|
unkown
|
page readonly
|
|
|
|
7FF587DC2000
|
unkown
|
page readonly
|
|
|
|
FA7000
|
unkown
|
page read and write
|
|
|
|
200D085A000
|
unkown
|
page read and write
|
|
|
|
5B2000
|
unkown
|
page read and write
|
|
|
|
2268DBF0000
|
unkown
|
page read and write
|
|
|
|
2F4B000
|
unkown
|
page read and write
|
|
|
|
7FF558DC1000
|
unkown
|
page readonly
|
|
|
|
318D000
|
unkown
|
page read and write
|
|
|
|
238F60CD000
|
unkown
|
page read and write
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
318D000
|
unkown
|
page read and write
|
|
|
|
50AD000
|
stack
|
page read and write
|
|
|
|
5C1000
|
unkown
|
page read and write
|
|
|
|
29266000000
|
unkown
|
page read and write
|
|
|
|
7FF5CC092000
|
unkown
|
page readonly
|
|
|
|
28191D02000
|
unkown
|
page read and write
|
|
|
|
67559FF000
|
unkown
|
page read and write
|
|
|
|
7FF597176000
|
unkown
|
page readonly
|
|
|
|
200D2350000
|
unkown
|
page read and write
|
|
|
|
BFA000
|
unkown
|
page read and write
|
|
|
|
7FF5ED775000
|
unkown
|
page readonly
|
|
|
|
4C3D000
|
stack
|
page read and write
|
|
|
|
163AC260000
|
unkown
|
page read and write
|
|
|
|
7FF52E6D1000
|
unkown
|
page readonly
|
|
|
|
2177000
|
unkown
|
page read and write
|
|
|
|
7FF5B1CAB000
|
unkown
|
page readonly
|
|
|
|
7FF575FB4000
|
unkown
|
page readonly
|
|
|
|
7FF5CBE55000
|
unkown
|
page readonly
|
|
|
|
7FF5EDB1C000
|
unkown
|
page readonly
|
|
|
|
C7984FA000
|
unkown
|
page read and write
|
|
|
|
F91000
|
unkown
|
page read and write
|
|
|
|
26D9000
|
unkown
|
page read and write
|
|
|
|
7FF592226000
|
unkown
|
page readonly
|
|
|
|
7FF5EB451000
|
unkown
|
page readonly
|
|
|
|
200D0AD0000
|
unkown
|
page readonly
|
|
|
|
163AC259000
|
unkown
|
page read and write
|
|
|
|
7FF5EB0D3000
|
unkown
|
page readonly
|
|
|
|
200D07D0000
|
unkown
|
page read and write
|
|
|
|
2109000
|
unkown
|
page read and write
|
|
|
|
22ABF020000
|
unkown
|
page readonly
|
|
|
|
9E8B0FE000
|
unkown
|
page read and write
|
|
|
|
7FF587DC6000
|
unkown
|
page readonly
|
|
|
|
163AC25A000
|
unkown
|
page read and write
|
|
|
|
3100000
|
unkown
|
page read and write
|
|
|
|
26D9000
|
unkown
|
page read and write
|
|
|
|
2F5C000
|
unkown
|
page read and write
|
|
|
|
7FF52E474000
|
unkown
|
page readonly
|
|
|
|
10332000
|
unkown
|
page read and write
|
|
|
|
7FF5CBF1F000
|
unkown
|
page readonly
|
|
|
|
7FF5EB37A000
|
unkown
|
page readonly
|
|
|
|
238F8500000
|
unkown
|
page read and write
|
|
|
|
2352E130000
|
unkown
|
page readonly
|
|
|
|
2E55000
|
unkown
|
page readonly
|
|
|
|
2352E120000
|
unkown
|
page readonly
|
|
|
|
31DE000
|
stack
|
page read and write
|
|
|
|
2FBA000
|
unkown
|
page readonly
|
|
|
|
7FF5CC0A2000
|
unkown
|
page readonly
|
|
|
|
1C4F9202000
|
unkown
|
page read and write
|
|
|
|
7FF5EDB7F000
|
unkown
|
page readonly
|
|
|
|
7FF592255000
|
unkown
|
page readonly
|
|
|
|
7FF576289000
|
unkown
|
page readonly
|
|
|
|
7FF5E573C000
|
unkown
|
page readonly
|
|
|
|
7FF5EB3F0000
|
unkown
|
page readonly
|
|
|
|
238F7B80000
|
unkown
|
page readonly
|
|
|
|
2F2F000
|
unkown
|
page readonly
|
|
|
|
1015000
|
unkown
|
page read and write
|
|
|
|
7FF5CC199000
|
unkown
|
page readonly
|
|
|
|
102E000
|
unkown
|
page read and write
|
|
|
|
7FF5761FC000
|
unkown
|
page readonly
|
|
|
|
7FF5B1D56000
|
unkown
|
page readonly
|
|
|
|
238F60BC000
|
unkown
|
page read and write
|
|
|
|
F2E000
|
unkown
|
page read and write
|
|
|
|
2111000
|
unkown
|
page read and write
|
|
|
|
2DB6000
|
unkown
|
page readonly
|
|
|
|
F60000
|
heap default
|
page read and write
|
|
|
|
27C2000
|
unkown
|
page read and write
|
|
|
|
10023000
|
unkown
|
page readonly
|
|
|
|
7FF5E63E9000
|
unkown
|
page readonly
|
|
|
|
D00000
|
unkown
|
page readonly
|
|
|
|
163AC1F0000
|
unkown
|
page readonly
|
|
|
|
7FF5CC044000
|
unkown
|
page readonly
|
|
|
|
2352E4F0000
|
heap private
|
page read and write
|
|
|
|
7FF50581D000
|
unkown
|
page readonly
|
|
|
|
F9E000
|
unkown
|
page read and write
|
|
|
|
7FF597197000
|
unkown
|
page readonly
|
|
|
|
325F000
|
unkown
|
page read and write
|
|
|
|
7FF52CC78000
|
unkown
|
page readonly
|
|
|
|
3101000
|
unkown
|
page read and write
|
|
|
|
2350000
|
unkown
|
page read and write
|
|
|
|
7FF58B5AC000
|
unkown
|
page readonly
|
|
|
|
7FF58B1CE000
|
unkown
|
page readonly
|
|
|
|
22D0000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5053C0000
|
unkown
|
page readonly
|
|
|
|
29C4A970000
|
unkown
|
page readonly
|
|
|
|
340F000
|
unkown
|
page read and write
|
|
|
|
2268D49E000
|
unkown
|
page read and write
|
|
|
|
D70000
|
heap default
|
page read and write
|
|
|
|
2C6D000
|
unkown
|
page read and write
|
|
|
|
564000
|
unkown
|
page read and write
|
|
|
|
1A0898A0000
|
heap private
|
page read and write
|
|
|
|
2268D48F000
|
unkown
|
page read and write
|
|
|
|
28191A40000
|
heap private
|
page read and write
|
|
|
|
10023000
|
unkown
|
page readonly
|
|
|
|
2F50000
|
heap private
|
page read and write
|
|
|
|
797C000
|
unkown
|
page read and write
|
|
|
|
40F000
|
unkown image
|
page write copy
|
|
|
|
27C3000
|
unkown
|
page read and write
|
|
|
|
16640613000
|
unkown
|
page read and write
|
|
|
|
163AC790000
|
unkown
|
page read and write
|
|
|
|
238F817D000
|
unkown
|
page read and write
|
|
|
|
7FF576192000
|
unkown
|
page readonly
|
|
|
|
5E0000
|
heap default
|
page read and write
|
|
|
|
200D2360000
|
unkown
|
page readonly
|
|
|
|
313A000
|
unkown
|
page read and write
|
|
|
|
18BC21C0000
|
heap default
|
page read and write
|
|
|
|
7FF5CC077000
|
unkown
|
page readonly
|
|
|
|
7FF52CC76000
|
unkown
|
page readonly
|
|
|
|
2F40000
|
unkown
|
page read and write
|
|
|
|
7FF592212000
|
unkown
|
page readonly
|
|
|
|
238F60BC000
|
unkown
|
page read and write
|
|
|
|
200D0800000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
164E000
|
stack
|
page read and write
|
|
|
|
7FF5E52ED000
|
unkown
|
page readonly
|
|
|
|
7FF5E6103000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF597118000
|
unkown
|
page readonly
|
|
|
|
2FB5000
|
unkown
|
page readonly
|
|
|
|
7FF5970DA000
|
unkown
|
page readonly
|
|
|
|
238F9510000
|
unkown
|
page read and write
|
|
|
|
238F611C000
|
unkown
|
page read and write
|
|
|
|
506C000
|
unkown
|
page read and write
|
|
|
|
7FF558DC9000
|
unkown
|
page readonly
|
|
|
|
166405A0000
|
unkown
|
page readonly
|
|
|
|
7FF576178000
|
unkown
|
page readonly
|
|
|
|
1A089C00000
|
unkown
|
page readonly
|
|
|
|
FA2000
|
unkown
|
page read and write
|
|
|
|
7FF58B2BC000
|
unkown
|
page readonly
|
|
|
|
30EE000
|
unkown
|
page read and write
|
|
|
|
ECE94FF000
|
unkown
|
page read and write
|
|
|
|
96F000
|
stack
|
page read and write
|
|
|
|
1006FE000
|
unkown
|
page read and write
|
|
|
|
7FF5CC031000
|
unkown
|
page readonly
|
|
|
|
7FF52CC60000
|
unkown
|
page readonly
|
|
|
|
412000
|
unkown image
|
page readonly
|
|
|
|
238F82C6000
|
unkown
|
page read and write
|
|
|
|
270B000
|
unkown
|
page read and write
|
|
|
|
7FF59718C000
|
unkown
|
page readonly
|
|
|
|
2352C75D000
|
heap default
|
page read and write
|
|
|
|
18BC2229000
|
unkown
|
page read and write
|
|
|
|
7FF58B2E7000
|
unkown
|
page readonly
|
|
|
|
3DC657E000
|
unkown
|
page read and write
|
|
|
|
21E0000
|
unkown
|
page readonly
|
|
|
|
2268DC02000
|
unkown
|
page read and write
|
|
|
|
166408D0000
|
unkown
|
page readonly
|
|
|
|
7FF558D19000
|
unkown
|
page readonly
|
|
|
|
29266037000
|
unkown
|
page read and write
|
|
|
|
5FC000
|
unkown
|
page read and write
|
|
|
|
2268DBF3000
|
unkown
|
page read and write
|
|
|
|
2030000
|
unkown
|
page readonly
|
|
|
|
F98000
|
unkown
|
page read and write
|
|
|
|
22692A63000
|
unkown
|
page read and write
|
|
|
|
7FF57616C000
|
unkown
|
page readonly
|
|
|
|
1003000
|
unkown
|
page read and write
|
|
|
|
7FF5B1B6F000
|
unkown
|
page readonly
|
|
|
|
33D0000
|
heap private
|
page read and write
|
|
|
|
7FF5761CF000
|
unkown
|
page readonly
|
|
|
|
238F60BC000
|
unkown
|
page read and write
|
|
|
|
7FF5ED773000
|
unkown
|
page readonly
|
|
|
|
29C48E29000
|
unkown
|
page read and write
|
|
|
|
7FF5056C3000
|
unkown
|
page readonly
|
|
|
|
7FF52E755000
|
unkown
|
page readonly
|
|
|
|
31A5000
|
unkown
|
page read and write
|
|
|
|
7FF52E025000
|
unkown
|
page readonly
|
|
|
|
238F7EE0000
|
unkown
|
page readonly
|
|
|
|
2F66000
|
unkown
|
page readonly
|
|
|
|
7FF5054EB000
|
unkown
|
page readonly
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
2268D516000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown
|
page readonly
|
|
|
|
7FF5EAC11000
|
unkown
|
page readonly
|
|
|
|
22ABF802000
|
unkown
|
page read and write
|
|
|
|
238F816E000
|
unkown
|
page read and write
|
|
|
|
6763D7A000
|
unkown
|
page read and write
|
|
|
|
1009FD000
|
unkown
|
page read and write
|
|
|
|
16640700000
|
unkown
|
page read and write
|
|
|
|
238F82C8000
|
unkown
|
page read and write
|
|
|
|
29C49000000
|
unkown
|
page readonly
|
|
|
|
676457C000
|
unkown
|
page read and write
|
|
|
|
2B743655000
|
unkown
|
page read and write
|
|
|
|
7FF5E553F000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown image
|
page readonly
|
|
|
|
2FB5000
|
unkown
|
page readonly
|
|
|
|
26FB000
|
unkown
|
page read and write
|
|
|
|
6755EFF000
|
unkown
|
page read and write
|
|
|
|
16640679000
|
unkown
|
page read and write
|
|
|
|
7FF5E5757000
|
unkown
|
page readonly
|
|
|
|
7FF5EDB42000
|
unkown
|
page readonly
|
|
|
|
7FF58B5A6000
|
unkown
|
page readonly
|
|
|
|
3028000
|
unkown
|
page readonly
|
|
|
|
AD0000
|
unkown
|
page readonly
|
|
|
|
7FF52CD69000
|
unkown
|
page readonly
|
|
|
|
FC1000
|
unkown
|
page read and write
|
|
|
|
238F8284000
|
unkown
|
page read and write
|
|
|
|
7A7C000
|
unkown
|
page read and write
|
|
|
|
67637EE000
|
unkown
|
page read and write
|
|
|
|
550000
|
unkown
|
page read and write
|
|
|
|
1A089A00000
|
unkown
|
page read and write
|
|
|
|
7FF596E73000
|
unkown
|
page readonly
|
|
|
|
2F7E000
|
unkown
|
page readonly
|
|
|
|
7FF5E550A000
|
unkown
|
page readonly
|
|
|
|
321E000
|
unkown
|
page read and write
|
|
|
|
2EB000
|
unkown
|
page read and write
|
|
|
|
7FF587DB2000
|
unkown
|
page readonly
|
|
|
|
200D083D000
|
unkown
|
page read and write
|
|
|
|
7FF5E571D000
|
unkown
|
page readonly
|
|
|
|
311D000
|
unkown
|
page read and write
|
|
|
|
99F000
|
stack
|
page read and write
|
|
|
|
7FF5EDBBC000
|
unkown
|
page readonly
|
|
|
|
2F1E000
|
unkown
|
page readonly
|
|
|
|
7FF5EB44E000
|
unkown
|
page readonly
|
|
|
|
22692820000
|
unkown
|
page read and write
|
|
|
|
2F51000
|
unkown
|
page read and write
|
|
|
|
238F60D0000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2DC9000
|
unkown
|
page readonly
|
|
|
|
7FF59223A000
|
unkown
|
page readonly
|
|
|
|
7FF575E62000
|
unkown
|
page readonly
|
|
|
|
7FF5B1CE2000
|
unkown
|
page readonly
|
|
|
|
EE0000
|
unkown
|
page write copy
|
|
|
|
22ABF0F0000
|
unkown
|
page readonly
|
|
|
|
62E000
|
unkown
|
page read and write
|
|
|
|
3100000
|
unkown
|
page read and write
|
|
|
|
2B0D000
|
unkown
|
page read and write
|
|
|
|
DD935F9000
|
unkown
|
page read and write
|
|
|
|
2268D4A6000
|
unkown
|
page read and write
|
|
|
|
7FF592286000
|
unkown
|
page readonly
|
|
|
|
FBC000
|
unkown
|
page read and write
|
|
|
|
7FF592123000
|
unkown
|
page readonly
|
|
|
|
7FF5E5467000
|
unkown
|
page readonly
|
|
|
|
4BBC000
|
stack
|
page read and write
|
|
|
|
6763DFB000
|
unkown
|
page read and write
|
|
|
|
200D085C000
|
unkown
|
page read and write
|
|
|
|
7FF5EB395000
|
unkown
|
page readonly
|
|
|
|
7FF52E56A000
|
unkown
|
page readonly
|
|
|
|
7FF59711A000
|
unkown
|
page readonly
|
|
|
|
328000
|
unkown
|
page read and write
|
|
|
|
7FF5E569C000
|
unkown
|
page readonly
|
|
|
|
E9A000
|
heap default
|
page read and write
|
|
|
|
200D07A0000
|
heap default
|
page read and write
|
|
|
|
3113000
|
unkown
|
page read and write
|
|
|
|
7FF58B5D0000
|
unkown
|
page readonly
|
|
|
|
238F6073000
|
unkown
|
page read and write
|
|
|
|
18BC2160000
|
heap private
|
page read and write
|
|
|
|
163AC279000
|
unkown
|
page read and write
|
|
|
|
2F2F000
|
unkown
|
page readonly
|
|
|
|
7FF576028000
|
unkown
|
page readonly
|
|
|
|
7FF5B1DDE000
|
unkown
|
page readonly
|
|
|
|
29C4AF00000
|
unkown
|
page read and write
|
|
|
|
2F6C000
|
unkown
|
page read and write
|
|
|
|
29265FD0000
|
unkown
|
page readonly
|
|
|
|
7FF5E5475000
|
unkown
|
page readonly
|
|
|
|
7FF58B208000
|
unkown
|
page readonly
|
|
|
|
FA5000
|
unkown
|
page read and write
|
|
|
|
406000
|
unkown image
|
page execute and write copy
|
|
|
|
2A6E000
|
unkown
|
page read and write
|
|
|
|
2F04000
|
unkown
|
page readonly
|
|
|
|
18A000
|
stack
|
page read and write
|
|
|
|
D9FCBCB000
|
unkown
|
page read and write
|
|
|
|
7FF587580000
|
unkown
|
page readonly
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
1A08A33A000
|
unkown
|
page read and write
|
|
|
|
7FF52C938000
|
unkown
|
page readonly
|
|
|
|
318D000
|
unkown
|
page read and write
|
|
|
|
18BC2A02000
|
unkown
|
page read and write
|
|
|
|
1C4F8BE0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6416000
|
unkown
|
page readonly
|
|
|
|
2C80000
|
unkown
|
page read and write
|
|
|
|
1A089A13000
|
unkown
|
page read and write
|
|
|
|
29C48E40000
|
unkown
|
page read and write
|
|
|
|
7FF58B55A000
|
unkown
|
page readonly
|
|
|
|
10337000
|
unkown
|
page readonly
|
|
|
|
7FF5CBE47000
|
unkown
|
page readonly
|
|
|
|
7FF58B1C7000
|
unkown
|
page readonly
|
|
|
|
DD9327B000
|
unkown
|
page read and write
|
|
|
|
367000
|
unkown
|
page read and write
|
|
|
|
26D9000
|
unkown
|
page read and write
|
|
|
|
C9A000
|
stack
|
page read and write
|
|
|
|
7FF52CD07000
|
unkown
|
page readonly
|
|
|
|
1C4F8C02000
|
unkown
|
page read and write
|
|
|
|
FE2000
|
unkown
|
page read and write
|
|
|
|
7FF5761D9000
|
unkown
|
page readonly
|
|
|
|
2053000
|
heap private
|
page read and write
|
|
|
|
5DE000
|
unkown
|
page read and write
|
|
|
|
2F4E000
|
unkown
|
page read and write
|
|
|
|
163AC246000
|
unkown
|
page read and write
|
|
|
|
238F8002000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
18BC2255000
|
unkown
|
page read and write
|
|
|
|
DD932FE000
|
unkown
|
page read and write
|
|
|
|
AB4C7E000
|
unkown
|
page read and write
|
|
|
|
238F60BB000
|
unkown
|
page read and write
|
|
|
|
238F8383000
|
unkown
|
page read and write
|
|
|
|
7FF587CC7000
|
unkown
|
page readonly
|
|
|
|
26EB000
|
unkown
|
page read and write
|
|
|
|
7DFAF9C18000
|
unkown
|
page readonly
|
|
|
|
2E55000
|
unkown
|
page readonly
|
|
|
|
2F21000
|
unkown
|
page readonly
|
|
|
|
406000
|
unkown image
|
page execute and write copy
|
|
|
|
5C9000
|
unkown
|
page read and write
|
|
|
|
2FA5000
|
unkown
|
page readonly
|
|
|
|
3C8827F000
|
unkown
|
page read and write
|
|
|
|
7FF5E6427000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page readonly
|
|
|
|
7FF59230E000
|
unkown
|
page readonly
|
|
|
|
238F9410000
|
unkown
|
page read and write
|
|
|
|
1041000
|
unkown
|
page read and write
|
|
|
|
211B000
|
unkown
|
page read and write
|
|
|
|
18BC223C000
|
unkown
|
page read and write
|
|
|
|
7FF52E608000
|
unkown
|
page readonly
|
|
|
|
163AC213000
|
unkown
|
page read and write
|
|
|
|
7FF504F1D000
|
unkown
|
page readonly
|
|
|
|
DE301AE000
|
unkown
|
page read and write
|
|
|
|
28191AB0000
|
unkown
|
page readonly
|
|
|
|
163AC229000
|
unkown
|
page read and write
|
|
|
|
F95000
|
unkown
|
page read and write
|
|
|
|
238F9410000
|
unkown
|
page read and write
|
|
|
|
2F0E000
|
unkown
|
page readonly
|
|
|
|
406000
|
unkown image
|
page execute and write copy
|
|
|
|
3028000
|
unkown
|
page readonly
|
|
|
|
2F47000
|
unkown
|
page read and write
|
|
|
|
35A0000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5760A0000
|
unkown
|
page readonly
|
|
|
|
7FF587E52000
|
unkown
|
page readonly
|
|
|
|
2F52000
|
unkown
|
page read and write
|
|
|
|
FA6000
|
unkown
|
page read and write
|
|
|
|
7FF5CC127000
|
unkown
|
page readonly
|
|
|
|
679000
|
heap default
|
page read and write
|
|
|
|
7FF52E819000
|
unkown
|
page readonly
|
|
|
|
6763B7A000
|
unkown
|
page read and write
|
|
|
|
7FF50563F000
|
unkown
|
page readonly
|
|
|
|
1410000
|
heap default
|
page read and write
|
|
|
|
7FF5056A8000
|
unkown
|
page readonly
|
|
|
|
2F74000
|
unkown
|
page read and write
|
|
|
|
27C2000
|
unkown
|
page read and write
|
|
|
|
2177000
|
unkown
|
page read and write
|
|
|
|
238F8502000
|
unkown
|
page read and write
|
|
|
|
7FF58B4FB000
|
unkown
|
page readonly
|
|
|
|
7FF587DA8000
|
unkown
|
page readonly
|
|
|
|
412000
|
unkown image
|
page write copy
|
|
|
|
21B3E930000
|
unkown
|
page readonly
|
|
|
|
7FF5E56FF000
|
unkown
|
page readonly
|
|
|
|
238F9010000
|
unkown
|
page read and write
|
|
|
|
9AE000
|
unkown
|
page read and write
|
|
|
|
2352C640000
|
unkown
|
page readonly
|
|
|
|
22ABF29B000
|
unkown
|
page read and write
|
|
|
|
7FF58AE75000
|
unkown
|
page readonly
|
|
|
|
32DF000
|
stack
|
page read and write
|
|
|
|
2DAC000
|
unkown
|
page readonly
|
|
|
|
28191C13000
|
unkown
|
page read and write
|
|
|
|
226929F0000
|
unkown
|
page read and write
|
|
|
|
7FF52E580000
|
unkown
|
page readonly
|
|
|
|
7FF5E54F8000
|
unkown
|
page readonly
|
|
|
|
2F60000
|
unkown
|
page readonly
|
|
|
|
6763FFB000
|
unkown
|
page read and write
|
|
|
|
1C4F8C13000
|
unkown
|
page read and write
|
|
|
|
7FF58B59D000
|
unkown
|
page readonly
|
|
|
|
FB1000
|
unkown
|
page read and write
|
|
|
|
51F0000
|
unkown
|
page read and write
|
|
|
|
7FF58B5B6000
|
unkown
|
page readonly
|
|
|
|
7FF52CC9E000
|
unkown
|
page readonly
|
|
|
|
238F9010000
|
unkown
|
page read and write
|
|
|
|
29C48DB0000
|
unkown
|
page readonly
|
|
|
|
1A089B13000
|
unkown
|
page read and write
|
|
|
|
22692CD0000
|
unkown
|
page read and write
|
|
|
|
16640E02000
|
unkown
|
page read and write
|
|
|
|
10332000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page read and write
|
|
|
|
9E8B37B000
|
unkown
|
page read and write
|
|
|
|
238F60B6000
|
unkown
|
page read and write
|
|
|
|
3127000
|
unkown
|
page read and write
|
|
|
|
29C4AE02000
|
unkown
|
page read and write
|
|
|
|
7FF5CBDF4000
|
unkown
|
page readonly
|
|
|
|
40D000
|
unkown image
|
page write copy
|
|
|
|
29266040000
|
unkown
|
page read and write
|
|
|
|
C7987FB000
|
unkown
|
page read and write
|
|
|
|
29C4C000000
|
unkown
|
page readonly
|
|
|
|
F4F000
|
unkown image
|
page write copy
|
|
|
|
615000
|
unkown
|
page read and write
|
|
|
|
DE3057F000
|
unkown
|
page read and write
|
|
|
|
FC4000
|
unkown
|
page read and write
|
|
|
|
2268D360000
|
heap default
|
page read and write
|
|
|
|
22ABF27E000
|
unkown
|
page read and write
|
|
|
|
2109000
|
unkown
|
page read and write
|
|
|
|
414000
|
unkown image
|
page readonly
|
|
|
|
2101000
|
unkown
|
page read and write
|
|
|
|
7FF5E5693000
|
unkown
|
page readonly
|
|
|
|
C798E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5920DE000
|
unkown
|
page readonly
|
|
|
|
7FF5E6347000
|
unkown
|
page readonly
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
2268D390000
|
unkown
|
page read and write
|
|
|
|
246D000
|
stack
|
page read and write
|
|
|
|
2352E040000
|
unkown
|
page readonly
|
|
|
|
7FF5E640C000
|
unkown
|
page readonly
|
|
|
|
2352C820000
|
unkown
|
page read and write
|
|
|
|
163AC23C000
|
unkown
|
page read and write
|
|
|
|
163ABFD0000
|
heap private
|
page read and write
|
|
|
|
7FF5EDAD7000
|
unkown
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2F28000
|
unkown
|
page readonly
|
|
|
|
7FF587C05000
|
unkown
|
page readonly
|
|
|
|
1002000
|
unkown
|
page read and write
|
|
|
|
FDE000
|
unkown
|
page read and write
|
|
|
|
7FF50582C000
|
unkown
|
page readonly
|
|
|
|
196000
|
stack
|
page read and write
|
|
|
|
7FF5B19A3000
|
unkown
|
page readonly
|
|
|
|
29C4AF18000
|
unkown
|
page read and write
|
|
|
|
2268DD13000
|
unkown
|
page read and write
|
|
|
|
238F9310000
|
unkown
|
page read and write
|
|
|
|
7FF558CC0000
|
unkown
|
page readonly
|
|
|
|
2F6C000
|
unkown
|
page read and write
|
|
|
|
2268D4A5000
|
unkown
|
page read and write
|
|
|
|
7FF52CCE6000
|
unkown
|
page readonly
|
|
|
|
7FF5B1D2F000
|
unkown
|
page readonly
|
|
|
|
7FF52E75F000
|
unkown
|
page readonly
|
|
|
|
29C4AF4C000
|
unkown
|
page read and write
|
|
|
|
7FF505854000
|
unkown
|
page readonly
|
|
|
|
7FF52CC8A000
|
unkown
|
page readonly
|
|
|
|
18BC2313000
|
unkown
|
page read and write
|
|
|
|
DD9347A000
|
unkown
|
page read and write
|
|
|
|
1011000
|
unkown
|
page read and write
|
|
|
|
33E0000
|
unkown
|
page readonly
|
|
|
|
7CE000
|
unkown
|
page read and write
|
|
|
|
7FF5760AC000
|
unkown
|
page readonly
|
|
|
|
40F000
|
unkown image
|
page readonly
|
|
|
|
3C87EFE000
|
unkown
|
page read and write
|
|
|
|
8CF000
|
stack
|
page read and write
|
|
|
|
E39000
|
stack
|
page read and write
|
|
|
|
7FF587DEE000
|
unkown
|
page readonly
|
|
|
|
2469DF7000
|
unkown
|
page read and write
|
|
|
|
4BFD000
|
unkown
|
page read and write
|
|
|
|
2F06000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page readonly
|
|
|
|
163AC242000
|
unkown
|
page read and write
|
|
|
|
2050000
|
heap private
|
page read and write
|
|
|
|
1045000
|
unkown
|
page read and write
|
|
|
|
1040000
|
heap private
|
page read and write
|
|
|
|
7FF52CCD6000
|
unkown
|
page readonly
|
|
|
|
564000
|
unkown
|
page read and write
|
|
|
|
22692C04000
|
unkown
|
page read and write
|
|
|
|
16640629000
|
unkown
|
page read and write
|
|
|
|
205C000
|
unkown
|
page read and write
|
|
|
|
3DC65FC000
|
unkown
|
page read and write
|
|
|
|
2352E290000
|
heap private
|
page read and write
|
|
|
|
2F0E000
|
unkown
|
page readonly
|
|
|
|
18BC2F40000
|
unkown
|
page readonly
|
|
|
|
22692AB0000
|
unkown
|
page read and write
|
|
|
|
7FF5EDC39000
|
unkown
|
page readonly
|
|
|
|
200D0868000
|
unkown
|
page read and write
|
|
|
|
2268D4AA000
|
unkown
|
page read and write
|
|
|
|
3D5000
|
unkown
|
page read and write
|
|
|
|
2AF3000
|
heap private
|
page read and write
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
412000
|
unkown image
|
page readonly
|
|
|
|
238F9410000
|
unkown
|
page read and write
|
|
|
|
29C48EC1000
|
unkown
|
page read and write
|
|
|
|
40F000
|
unkown image
|
page write copy
|
|
|
|
5DE000
|
unkown
|
page read and write
|
|
|
|
25D1000
|
unkown
|
page read and write
|
|
|
|
63A000
|
heap default
|
page read and write
|
|
|
|
7FF597186000
|
unkown
|
page readonly
|
|
|
|
7FF5EB3F7000
|
unkown
|
page readonly
|
|
|
|
1A08A060000
|
unkown
|
page read and write
|
|
|
|
5C1000
|
unkown
|
page read and write
|
|
|
|
29C48F13000
|
unkown
|
page read and write
|
|
|
|
7FF58B24C000
|
unkown
|
page readonly
|
|
|
|
7FF5EB38E000
|
unkown
|
page readonly
|
|
|
|
7FF5E56F5000
|
unkown
|
page readonly
|
|
|
|
7FF5971A4000
|
unkown
|
page readonly
|
|
|
|
7FF5CC0CE000
|
unkown
|
page readonly
|
|
|
|
FF1000
|
unkown
|
page read and write
|
|
|
|
213B000
|
unkown
|
page read and write
|
|
|
|
101D000
|
unkown
|
page read and write
|
|
|
|
281936A0000
|
unkown
|
page readonly
|
|
|
|
238F60DD000
|
unkown
|
page read and write
|
|
|
|
22692A0E000
|
unkown
|
page read and write
|
|
|
|
67561FF000
|
unkown
|
page read and write
|
|
|
|
22ABF24F000
|
unkown
|
page read and write
|
|
|
|
2AF9000
|
unkown
|
page read and write
|
|
|
|
7FF52CD69000
|
unkown
|
page readonly
|
|
|
|
29C48E00000
|
unkown
|
page read and write
|
|
|
|
2B743440000
|
heap private
|
page read and write
|
|
|
|
2F55000
|
unkown
|
page read and write
|
|
|
|
1650000
|
unkown
|
page readonly
|
|
|
|
7FF558D3C000
|
unkown
|
page readonly
|
|
|
|
27C2000
|
unkown
|
page read and write
|
|
|
|
21B3E7F0000
|
heap private
|
page read and write
|
|
|
|
2F3E000
|
stack
|
page read and write
|
|
|
|
7FF58B5D7000
|
unkown
|
page readonly
|
|
|
|
FAA000
|
unkown
|
page read and write
|
|
|
|
7FF58ADFC000
|
unkown
|
page readonly
|
|
|
|
22C0000
|
unkown
|
page read and write
|
|
|
|
60A000
|
unkown
|
page read and write
|
|
|
|
F92000
|
unkown
|
page read and write
|
|
|
|
2F72000
|
unkown
|
page readonly
|
|
|
|
2352C710000
|
unkown
|
page readonly
|
|
|
|
7FF5E6288000
|
unkown
|
page readonly
|
|
|
|
7FF5879F5000
|
unkown
|
page readonly
|
|
|
|
7FF52E6EA000
|
unkown
|
page readonly
|
|
|
|
22ABF213000
|
unkown
|
page read and write
|
|
|
|
2352C840000
|
unkown
|
page read and write
|
|
|
|
1C4F8C5A000
|
unkown
|
page read and write
|
|
|
|
625000
|
unkown
|
page read and write
|
|
|
|
29C48E13000
|
unkown
|
page read and write
|
|
|
|
7FF587EAE000
|
unkown
|
page readonly
|
|
|
|
7FF558D46000
|
unkown
|
page readonly
|
|
|
|
3100000
|
unkown
|
page read and write
|
|
|
|
608000
|
unkown
|
page read and write
|
|
|
|
2268E3E0000
|
unkown
|
page read and write
|
|
|
|
17C000
|
stack
|
page read and write
|
|
|
|
7FF5EB06C000
|
unkown
|
page readonly
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
29266029000
|
unkown
|
page read and write
|
|
|
|
7FF5E5423000
|
unkown
|
page readonly
|
|
|
|
7FF5CC005000
|
unkown
|
page readonly
|
|
|
|
7FF58AE24000
|
unkown
|
page readonly
|
|
|
|
18BC21E0000
|
unkown
|
page readonly
|
|
|
|
2119000
|
unkown
|
page read and write
|
|
|
|
21B3EA00000
|
unkown
|
page read and write
|
|
|
|
40F000
|
unkown image
|
page write copy
|
|
|
|
7FF5B1CF8000
|
unkown
|
page readonly
|
|
|
|
7FF505826000
|
unkown
|
page readonly
|
|
|
|
3014000
|
unkown
|
page readonly
|
|
|
|
7FF5E57B1000
|
unkown
|
page readonly
|
|
|
|
615000
|
unkown
|
page read and write
|
|
|
|
4100000
|
heap private
|
page read and write
|
|
|
|
1001FF000
|
unkown
|
page read and write
|
|
|
|
58E000
|
unkown
|
page read and write
|
|
|
|
238F60E8000
|
unkown
|
page read and write
|
|
|
|
22692A00000
|
unkown
|
page read and write
|
|
|
|
5EF000
|
unkown
|
page read and write
|
|
|
|
605000
|
unkown
|
page read and write
|
|
|
|
7FF5EB3F4000
|
unkown
|
page readonly
|
|
|
|
7FF58B2EE000
|
unkown
|
page readonly
|
|
|
|
1015000
|
unkown
|
page read and write
|
|
|
|
7FF558AEA000
|
unkown
|
page readonly
|
|
|
|
7FF58B173000
|
unkown
|
page readonly
|
|
|
|
2F64000
|
unkown
|
page readonly
|
|
|
|
7FF5EDBD7000
|
unkown
|
page readonly
|
|
|
|
7FF5057C6000
|
unkown
|
page readonly
|
|
|
|
1020000
|
unkown
|
page readonly
|
|
|
|
29C48D60000
|
unkown
|
page write copy
|
|
|
|
7FF5B145F000
|
unkown
|
page readonly
|
|
|
|
565000
|
unkown
|
page read and write
|
|
|
|
7FF52E4E0000
|
unkown
|
page readonly
|
|
|
|
7FF576227000
|
unkown
|
page readonly
|
|
|
|
21B3EA5C000
|
unkown
|
page read and write
|
|
|
|
2F42000
|
unkown
|
page read and write
|
|
|
|
603000
|
unkown
|
page read and write
|
|
|
|
7FF587AEA000
|
unkown
|
page readonly
|
|
|
|
238F81A8000
|
unkown
|
page read and write
|
|
|
|
22692E10000
|
unkown
|
page readonly
|
|
|
|
7FF5E57B9000
|
unkown
|
page readonly
|
|
|
|
7FF596E64000
|
unkown
|
page readonly
|
|
|
|
238F606A000
|
unkown
|
page read and write
|
|
|
|
7FF5E62A7000
|
unkown
|
page readonly
|
|
|
|
FBE000
|
unkown
|
page read and write
|
|
|
|
213B000
|
unkown
|
page read and write
|
|
|
|
82F000
|
stack
|
page read and write
|
|
|
|
7FF558446000
|
unkown
|
page readonly
|
|
|
|
22692D00000
|
unkown
|
page read and write
|
|
|
|
1C4F8C56000
|
unkown
|
page read and write
|
|
|
|
676427B000
|
unkown
|
page read and write
|
|
|
|
67641FD000
|
unkown
|
page read and write
|
|
|
|
40F000
|
unkown image
|
page write copy
|
|
|
|
26D9000
|
unkown
|
page read and write
|
|
|
|
7FF5E54EC000
|
unkown
|
page readonly
|
|
|
|
238F6113000
|
unkown
|
page read and write
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
E90000
|
heap default
|
page read and write
|
|
|
|
7FF5E63AA000
|
unkown
|
page readonly
|
|
|
|
7FF5EB2FA000
|
unkown
|
page readonly
|
|
|
|
29265F60000
|
heap private
|
page read and write
|
|
|
|
3000000
|
unkown
|
page readonly
|
|
|
|
238F8343000
|
unkown
|
page read and write
|
|
|
|
5B8000
|
unkown
|
page read and write
|
|
|
|
209D000
|
unkown
|
page read and write
|
|
|
|
7FF587538000
|
unkown
|
page readonly
|
|
|
|
7FF558D36000
|
unkown
|
page readonly
|
|
|
|
2352C5E0000
|
unkown
|
page readonly
|
|
|
|
2268D4A2000
|
unkown
|
page read and write
|
|
|
|
7FF5CBF00000
|
unkown
|
page readonly
|
|
|
|
163AC256000
|
unkown
|
page read and write
|
|
|
|
FDA000
|
unkown
|
page read and write
|
|
|
|
7FF59227D000
|
unkown
|
page readonly
|
|
|
|
7FF5E63A2000
|
unkown
|
page readonly
|
|
|
|
2E3F000
|
unkown
|
page readonly
|
|
|
|
7FF5EB352000
|
unkown
|
page readonly
|
|
|
|
238F81B8000
|
unkown
|
page read and write
|
|
|
|
238F7F60000
|
unkown
|
page read and write
|
|
|
|
67640FB000
|
unkown
|
page read and write
|
|
|
|
7FF5CBEEA000
|
unkown
|
page readonly
|
|
|
|
2360000
|
heap private
|
page read and write
|
|
|
|
7FF597159000
|
unkown
|
page readonly
|
|
|
|
238F8383000
|
unkown
|
page read and write
|
|
|
|
163AC202000
|
unkown
|
page read and write
|
|
|
|
5FE000
|
unkown
|
page read and write
|
|
|
|
7FF52E72A000
|
unkown
|
page readonly
|
|
|
|
79BD000
|
stack
|
page read and write
|
|
|
|
22ABFA00000
|
unkown
|
page readonly
|
|
|
|
4F90000
|
unkown
|
page read and write
|
|
|
|
7690000
|
heap private
|
page read and write
|
|
|
|
2F6F000
|
unkown
|
page read and write
|
|
|
|
7FF5B1D6C000
|
unkown
|
page readonly
|
|
|
|
D9FCE7F000
|
unkown
|
page read and write
|
|
|
|
2F5D000
|
unkown
|
page read and write
|
|
|
|
1A089A89000
|
unkown
|
page read and write
|
|
|
|
2352E1A0000
|
heap private
|
page read and write
|
|
|
|
7FF5CBE60000
|
unkown
|
page readonly
|
|
|
|
D9FD07E000
|
unkown
|
page read and write
|
|
|
|
7FF596EC5000
|
unkown
|
page readonly
|
|
|
|
16640677000
|
unkown
|
page read and write
|
|
|
|
22ABFD40000
|
unkown
|
page readonly
|
|
|
|
1C4F8B00000
|
unkown
|
page readonly
|
|
|
|
10087D000
|
unkown
|
page read and write
|
|
|
|
238F9310000
|
unkown
|
page read and write
|
|
|
|
7FF52CC72000
|
unkown
|
page readonly
|
|
|
|
100CFE000
|
unkown
|
page read and write
|
|
|
|
7FF5EDB89000
|
unkown
|
page readonly
|
|
|
|
26E4000
|
unkown
|
page read and write
|
|
|
|
2FBA000
|
unkown
|
page readonly
|
|
|
|
7FF52E796000
|
unkown
|
page readonly
|
|
|
|
7FF505845000
|
unkown
|
page readonly
|
|
|
|
7FF592319000
|
unkown
|
page readonly
|
|
|
|
7FF5EDB48000
|
unkown
|
page readonly
|
|
|
|
7FF52E722000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2F6C000
|
unkown
|
page read and write
|
|
|
|
238F81FC000
|
unkown
|
page read and write
|
|
|
|
238F9610000
|
unkown
|
page read and write
|
|
|
|
2F4A000
|
unkown
|
page readonly
|
|
|
|
2108000
|
unkown
|
page read and write
|
|
|
|
6755AFC000
|
unkown
|
page read and write
|
|
|
|
163AC040000
|
unkown
|
page readonly
|
|
|
|
1C4F8C3D000
|
unkown
|
page read and write
|
|
|
|
695000
|
unkown
|
page read and write
|
|
|
|
7FF57615A000
|
unkown
|
page readonly
|
|
|
|
E8E000
|
unkown
|
page read and write
|
|
|
|
238F9410000
|
unkown
|
page read and write
|
|
|
|
FAA000
|
unkown
|
page read and write
|
|
|
|
7FF5CBEBB000
|
unkown
|
page readonly
|
|
|
|
7FF5EB3E5000
|
unkown
|
page readonly
|
|
|
|
C798DFA000
|
unkown
|
page read and write
|
|
|
|
22692C90000
|
unkown
|
page read and write
|
|
|
|
676407A000
|
unkown
|
page read and write
|
|
|
|
7FF576215000
|
unkown
|
page readonly
|
|
|
|
F9E000
|
unkown
|
page read and write
|
|
|
|
40B000
|
unkown image
|
page readonly
|
|
|
|
221F000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
412000
|
unkown image
|
page readonly
|
|
|
|
6D0000
|
unkown
|
page readonly
|
|
|
|
F92000
|
unkown
|
page read and write
|
|
|
|
22692830000
|
unkown
|
page read and write
|
|
|
|
7FF5761F6000
|
unkown
|
page readonly
|
|
|
|
7FF5EDB75000
|
unkown
|
page readonly
|
|
|
|
7FF52E7B0000
|
unkown
|
page readonly
|
|
|
|
ED0000
|
unkown
|
page readonly
|
|
|
|
22692E40000
|
unkown
|
page read and write
|
|
|
|
7FF5EB36A000
|
unkown
|
page readonly
|
|
|
|
FDA000
|
unkown
|
page read and write
|
|
|
|
7FF5E55C3000
|
unkown
|
page readonly
|
|
|
|
67642FB000
|
unkown
|
page read and write
|
|
|
|
2F77000
|
unkown
|
page read and write
|
|
|
|
7FF5E56A8000
|
unkown
|
page readonly
|
|
|
|
DE3012F000
|
unkown
|
page read and write
|
|
|
|
C7985FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E565A000
|
unkown
|
page readonly
|
|
|
|
2FB6000
|
unkown
|
page read and write
|
|
|
|
2CBD000
|
stack
|
page read and write
|
|
|
|
7FF5058B9000
|
unkown
|
page readonly
|
|
|
|
238F8600000
|
unkown
|
page read and write
|
|
|
|
7FF58B51C000
|
unkown
|
page readonly
|
|
|
|
1A089910000
|
unkown
|
page readonly
|
|
|
|
2B743602000
|
unkown
|
page read and write
|
|
|
|
238F8195000
|
unkown
|
page read and write
|
|
|
|
18BC24D0000
|
unkown
|
page readonly
|
|
|
|
2DC847F000
|
unkown
|
page read and write
|
|
|
|
22E0000
|
unkown
|
page readonly
|
|
|
|
7FF58B300000
|
unkown
|
page readonly
|
|
|
|
7FF58B513000
|
unkown
|
page readonly
|
|
|
|
7FF52CB28000
|
unkown
|
page readonly
|
|
|
|
7FF5E5726000
|
unkown
|
page readonly
|
|
|
|
2704000
|
unkown
|
page read and write
|
|
|
|
7FF587C58000
|
unkown
|
page readonly
|
|
|
|
7FF52E80E000
|
unkown
|
page readonly
|
|
|
|
2F8B000
|
unkown
|
page read and write
|
|
|
|
AC0000
|
heap private
|
page read and write
|
|
|
|
22C0000
|
unkown
|
page readonly
|
|
|
|
7FF52CCEC000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
22ABF1D0000
|
unkown
|
page readonly
|
|
|
|
E0C000
|
unkown
|
page read and write
|
|
|
|
3100000
|
unkown
|
page read and write
|
|
|
|
200D0A00000
|
unkown
|
page readonly
|
|
|
|
4E74000
|
heap private
|
page read and write
|
|
|
|
2E3D000
|
stack
|
page read and write
|
|
|
|
7FF5ED808000
|
unkown
|
page readonly
|
|
|
|
7FF576220000
|
unkown
|
page readonly
|
|
|
|
7FF558DC9000
|
unkown
|
page readonly
|
|
|
|
DE304FB000
|
unkown
|
page read and write
|
|
|
|
7FF592108000
|
unkown
|
page readonly
|
|
|
|
7FF52CA25000
|
unkown
|
page readonly
|
|
|
|
238F7F50000
|
unkown
|
page readonly
|
|
|
|
32BC000
|
unkown
|
page read and write
|
|
|
|
DE3047A000
|
unkown
|
page read and write
|
|
|
|
4110000
|
unkown
|
page read and write
|
|
|
|
2AFC000
|
unkown
|
page read and write
|
|
|
|
7FF5EDBA6000
|
unkown
|
page readonly
|
|
|
|
7FF5CC10C000
|
unkown
|
page readonly
|
|
|
|
22ABF300000
|
unkown
|
page read and write
|
|
|
|
2DC8A7C000
|
unkown
|
page read and write
|
|
|
|
7FF57627E000
|
unkown
|
page readonly
|
|
|
|
7FF52CD61000
|
unkown
|
page readonly
|
|
|
|
3C6000
|
unkown
|
page read and write
|
|
|
|
690000
|
heap default
|
page read and write
|
|
|
|
7FF5E6351000
|
unkown
|
page readonly
|
|
|
|
2B744FA0000
|
unkown
|
page read and write
|
|
|
|
7FF5CC0E9000
|
unkown
|
page readonly
|
|
|
|
5C1000
|
unkown
|
page read and write
|
|
|
|
7FF58B3BF000
|
unkown
|
page readonly
|
|
|
|
2F56000
|
unkown
|
page readonly
|
|
|
|
7FF5E5747000
|
unkown
|
page readonly
|
|
|
|
7FF575FEE000
|
unkown
|
page readonly
|
|
|
|
7FF575EBE000
|
unkown
|
page readonly
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
7FF5CC101000
|
unkown
|
page readonly
|
|
|
|
22F0000
|
unkown
|
page read and write
|
|
|
|
2F4E000
|
unkown
|
page read and write
|
|
|
|
7FF5B1D87000
|
unkown
|
page readonly
|
|
|
|
2E7000
|
unkown
|
page read and write
|
|
|
|
29C4B010000
|
unkown
|
page read and write
|
|
|
|
9E8B57E000
|
unkown
|
page read and write
|
|
|
|
9E8B17E000
|
unkown
|
page read and write
|
|
|
|
3C87F7E000
|
unkown
|
page read and write
|
|
|
|
1A089F90000
|
unkown
|
page readonly
|
|
|
|
3A50000
|
unkown
|
page readonly
|
|
|
|
7FF58B5A1000
|
unkown
|
page readonly
|
|
|
|
200E000
|
unkown
|
page read and write
|
|
|
|
86E000
|
unkown
|
page read and write
|
|
|
|
247F000
|
unkown
|
page read and write
|
|
|
|
7FF505850000
|
unkown
|
page readonly
|
|
|
|
22ABF270000
|
unkown
|
page read and write
|
|
|
|
7FF58B57F000
|
unkown
|
page readonly
|
|
|
|
F8E000
|
unkown
|
page read and write
|
|
|
|
7FF5E572C000
|
unkown
|
page readonly
|
|
|
|
22B0000
|
unkown
|
page readonly
|
|
|
|
308E000
|
unkown
|
page read and write
|
|
|
|
404000
|
unkown image
|
page execute and read and write
|
|
|
|
F16DC7C000
|
unkown
|
page read and write
|
|
|
|
7FF5CBECC000
|
unkown
|
page readonly
|
|
|
|
7FF591E20000
|
unkown
|
page readonly
|
|
|
|
7FF52E73A000
|
unkown
|
page readonly
|
|
|
|
2E20000
|
unkown
|
page read and write
|
|
|
|
200D07B0000
|
unkown
|
page readonly
|
|
|
|
22ABF010000
|
heap default
|
page read and write
|
|
|
|
7FF558D55000
|
unkown
|
page readonly
|
|
|
|
238F8602000
|
unkown
|
page read and write
|
|
|
|
29266002000
|
unkown
|
page read and write
|
|
|
|
1C4F8C69000
|
unkown
|
page read and write
|
|
|
|
18BC2200000
|
unkown
|
page read and write
|
|
|
|
7FF597017000
|
unkown
|
page readonly
|
|
|
|
7FF52E811000
|
unkown
|
page readonly
|
|
|
|
1C4F8A20000
|
unkown
|
page readonly
|
|
|
|
1C4F8D13000
|
unkown
|
page read and write
|
|
|
|
564000
|
unkown
|
page read and write
|
|
|
|
238F60D0000
|
unkown
|
page read and write
|
|
|
|
82F000
|
stack
|
page read and write
|
|
|
|
AB487C000
|
unkown
|
page read and write
|
|
|
|
3167000
|
unkown
|
page read and write
|
|
|
|
625000
|
unkown
|
page read and write
|
|
|
|
40F000
|
unkown image
|
page readonly
|
|
|
|
1001000
|
unkown
|
page read and write
|
|
|
|
7FF576182000
|
unkown
|
page readonly
|
|
|
|
29266052000
|
unkown
|
page read and write
|
|
|
|
31CE000
|
unkown
|
page read and write
|
|
|
|
7FF5E63BA000
|
unkown
|
page readonly
|
|
|
|
7FF587E36000
|
unkown
|
page readonly
|
|
|
|
7FF5CC199000
|
unkown
|
page readonly
|
|
|
|
26DC000
|
unkown
|
page read and write
|
|
|
|
238F60BB000
|
unkown
|
page read and write
|
|
|
|
238F9110000
|
unkown
|
page read and write
|
|
|
|
67B000
|
unkown
|
page read and write
|
|
|
|
676376B000
|
unkown
|
page read and write
|
|
|
|
2055000
|
heap private
|
page read and write
|
|
|
|
200D0900000
|
unkown
|
page read and write
|
|
|
|
32C000
|
unkown
|
page read and write
|
|
|
|
22C0000
|
unkown
|
page read and write
|
|
|
|
26D1000
|
unkown
|
page read and write
|
|
|
|
7FF5B1D25000
|
unkown
|
page readonly
|
|
|
|
1048000
|
unkown
|
page read and write
|
|
|
|
2155000
|
unkown
|
page read and write
|
|
|
|
3167000
|
unkown
|
page read and write
|
|
|
|
2B743702000
|
unkown
|
page read and write
|
|
|
|
29266013000
|
unkown
|
page read and write
|
|
|
|
1A08A202000
|
unkown
|
page read and write
|
|
|
|
21B3EA13000
|
unkown
|
page read and write
|
|
|
|
22692D20000
|
unkown
|
page readonly
|
|
|
|
226929C0000
|
unkown
|
page read and write
|
|
|
|
7FF58B4E7000
|
unkown
|
page readonly
|
|
|
|
7FF587BE3000
|
unkown
|
page readonly
|
|
|
|
1A089ACD000
|
unkown
|
page read and write
|
|
|
|
7FF58B517000
|
unkown
|
page readonly
|
|
|
|
2268D4A1000
|
unkown
|
page read and write
|
|
|
|
5D6000
|
unkown
|
page read and write
|
|
|
|
2040000
|
unkown
|
page read and write
|
|
|
|
216A000
|
unkown
|
page read and write
|
|
|
|
5FC000
|
unkown
|
page read and write
|
|
|
|
5FC000
|
unkown
|
page read and write
|
|
|
|
2DC867F000
|
unkown
|
page read and write
|
|
|
|
7FF5E5750000
|
unkown
|
page readonly
|
|
|
|
7FF5B1CF2000
|
unkown
|
page readonly
|
|
|
|
601000
|
unkown
|
page read and write
|
|
|
|
2109000
|
unkown
|
page read and write
|
|
|
|
7FF58B39E000
|
unkown
|
page readonly
|
|
|
|
5BE000
|
unkown
|
page read and write
|
|
|
|
31CE000
|
unkown
|
page read and write
|
|
|
|
21B3EC00000
|
unkown
|
page readonly
|
|
|
|
5130000
|
unkown
|
page readonly
|
|
|
|
7FF5E56DA000
|
unkown
|
page readonly
|
|
|
|
1C4F8E00000
|
unkown
|
page readonly
|
|
|
|
7FF587E45000
|
unkown
|
page readonly
|
|
|
|
BD8000
|
unkown
|
page read and write
|
|
|
|
7FF587542000
|
unkown
|
page readonly
|
|
|
|
2F8A000
|
unkown
|
page read and write
|
|
|
|
166405B0000
|
unkown
|
page read and write
|
|
|
|
3D2000
|
unkown
|
page read and write
|
|
|
|
238F613D000
|
unkown
|
page read and write
|
|
|
|
564000
|
unkown
|
page read and write
|
|
|
|
30E0000
|
unkown
|
page read and write
|
|
|
|
2C40000
|
unkown
|
page read and write
|
|
|
|
676477F000
|
unkown
|
page read and write
|
|
|
|
238F8343000
|
unkown
|
page read and write
|
|
|
|
238F5F90000
|
heap default
|
page read and write
|
|
|
|
2FA0000
|
unkown
|
page readonly
|
|
|
|
7FF5970DC000
|
unkown
|
page readonly
|
|
|
|
57F000
|
heap default
|
page read and write
|
|
|
|
22F0000
|
unkown
|
page readonly
|
|
|
|
D9FCFFA000
|
unkown
|
page read and write
|
|
|
|
22EF000
|
unkown
|
page read and write
|
|
|
|
40B000
|
unkown image
|
page readonly
|
|
|
|
7FF58B175000
|
unkown
|
page readonly
|
|
|
|
29C48EEC000
|
unkown
|
page read and write
|
|
|
|
29C48F02000
|
unkown
|
page read and write
|
|
|
|
29C490D0000
|
unkown
|
page readonly
|
|
|
|
2F5C000
|
unkown
|
page read and write
|
|
|
|
310D000
|
unkown
|
page read and write
|
|
|
|
3100000
|
unkown
|
page read and write
|
|
|
|
7FF5EDAEA000
|
unkown
|
page readonly
|
|
|
|
ECE93F9000
|
unkown
|
page read and write
|
|
|
|
FB4000
|
unkown
|
page read and write
|
|
|
|
7FF58B575000
|
unkown
|
page readonly
|
|
|
|
7FF50572C000
|
unkown
|
page readonly
|
|
|
|
6763C7A000
|
unkown
|
page read and write
|
|
|
|
DE30679000
|
unkown
|
page read and write
|
|
|
|
FBC000
|
unkown
|
page read and write
|
|
|
|
7FF5876F5000
|
unkown
|
page readonly
|
|
|
|
F98000
|
unkown
|
page read and write
|
|
|
|
2F42000
|
unkown
|
page read and write
|
|
|
|
2352E360000
|
heap private
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute and write copy
|
|
|
|
30E1000
|
unkown
|
page read and write
|
|
|
|
40D000
|
unkown image
|
page write copy
|
|
|
|
F51000
|
unkown image
|
page readonly
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
2DC7EFB000
|
unkown
|
page read and write
|
|
|
|
28191AA0000
|
heap default
|
page read and write
|
|
|
|
163AC258000
|
unkown
|
page read and write
|
|
|
|
28191C02000
|
unkown
|
page read and write
|
|
|
|
238F60B7000
|
unkown
|
page read and write
|
|
|
|
238F9110000
|
unkown
|
page read and write
|
|
|
|
7FF5ED86E000
|
unkown
|
page readonly
|
|
|
|
7FF5E6437000
|
unkown
|
page readonly
|
|
|
|
200D07C0000
|
unkown
|
page readonly
|
|
|
|
22692E30000
|
unkown
|
page readonly
|
|
|
|
238F61A1000
|
unkown
|
page read and write
|
|
|
|
7FF5CC125000
|
unkown
|
page readonly
|
|
|
|
1080000
|
unkown
|
page readonly
|
|
|
|
200D0802000
|
unkown
|
page read and write
|
|
|
|
7FF597116000
|
unkown
|
page readonly
|
|
|
|
7FF52E4D5000
|
unkown
|
page readonly
|
|
|
|
7FF5EB3BD000
|
unkown
|
page readonly
|
|
|
|
621000
|
unkown
|
page read and write
|
|
|
|
18BC2246000
|
unkown
|
page read and write
|
|
|
|
5CD000
|
unkown
|
page read and write
|
|
|
|
D30000
|
unkown
|
page readonly
|
|
|
|
7FF58B2F5000
|
unkown
|
page readonly
|
|
|
|
2B743580000
|
unkown
|
page write copy
|
|
|
|
210D000
|
unkown
|
page read and write
|
|
|
|
2469FFF000
|
unkown
|
page read and write
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
7FF52E7B4000
|
unkown
|
page readonly
|
|
|
|
6BE000
|
unkown
|
page read and write
|
|
|
|
D80000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown
|
page read and write
|
|
|
|
2B74363F000
|
unkown
|
page read and write
|
|
|
|
2352C890000
|
heap private
|
page read and write
|
|
|
|
238F8158000
|
unkown
|
page read and write
|
|
|
|
FAF000
|
unkown
|
page read and write
|
|
|
|
7FF597145000
|
unkown
|
page readonly
|
|
|
|
238F9610000
|
unkown
|
page read and write
|
|
|
|
2ABB000
|
unkown
|
page read and write
|
|
|
|
26D1000
|
unkown
|
page read and write
|
|
|
|
7FF52CC4C000
|
unkown
|
page readonly
|
|
|
|
FB2000
|
unkown
|
page read and write
|
|
|
|
7FF5EDB28000
|
unkown
|
page readonly
|
|
|
|
238F60BB000
|
unkown
|
page read and write
|
|
|
|
104C000
|
unkown
|
page read and write
|
|
|
|
7FF5ED771000
|
unkown
|
page readonly
|
|
|
|
274B000
|
unkown
|
page read and write
|
|
|
|
118E000
|
stack
|
page read and write
|
|
|
|
21B3E980000
|
unkown
|
page read and write
|
|
|
|
DD9337E000
|
unkown
|
page read and write
|
|
|
|
7FF5CC00C000
|
unkown
|
page readonly
|
|
|
|
61B000
|
unkown
|
page read and write
|
|
|
|
2AF0000
|
heap private
|
page read and write
|
|
|
|
238F62D0000
|
unkown
|
page readonly
|
|
|
|
2E4D000
|
unkown
|
page readonly
|
|
|
|
7FF5971FE000
|
unkown
|
page readonly
|
|
|
|
238F9210000
|
unkown
|
page read and write
|
|
|
|
7FF5B1CB7000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3126000
|
unkown
|
page read and write
|
|
|
|
7FF597013000
|
unkown
|
page readonly
|
|
|
|
26E4000
|
unkown
|
page read and write
|
|
|
|
33D5000
|
heap private
|
page read and write
|
|
|
|
ECE937F000
|
unkown
|
page read and write
|
|
|
|
246972B000
|
unkown
|
page read and write
|
|
|
|
163AC200000
|
unkown
|
page read and write
|
|
|
|
22ABF308000
|
unkown
|
page read and write
|
|
|
|
3118000
|
unkown
|
page read and write
|
|
|
|
2FD000
|
unkown
|
page read and write
|
|
|
|
22ABF255000
|
unkown
|
page read and write
|
|
|
|
1C4F89B0000
|
heap private
|
page read and write
|
|
|
|
7FF58ADF2000
|
unkown
|
page readonly
|
|
|
|
C7986FA000
|
unkown
|
page read and write
|
|
|
|
7FF587EB9000
|
unkown
|
page readonly
|
|
|
|
7FF5E63CE000
|
unkown
|
page readonly
|
|
|
|
3100000
|
unkown
|
page read and write
|
|
|
|
7FF596F70000
|
unkown
|
page readonly
|
|
|
|
3040000
|
unkown
|
page read and write
|
|
|
|
7FF597209000
|
unkown
|
page readonly
|
|
|
|
6763EFB000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page readonly
|
|
|
|
F8F000
|
unkown
|
page read and write
|
|
|
|
3107000
|
unkown
|
page read and write
|
|
|
|
7FF5CC047000
|
unkown
|
page readonly
|
|
|
|
26D0000
|
unkown
|
page read and write
|
|
|
|
FBB000
|
unkown
|
page read and write
|
|
|
|
2268DD02000
|
unkown
|
page read and write
|
|
|
|
24697AF000
|
unkown
|
page read and write
|
|
|
|
2FB7000
|
unkown
|
page read and write
|
|
|
|
200D2350000
|
unkown
|
page read and write
|
|
|
|
7FF5EB366000
|
unkown
|
page readonly
|
|
|
|
49F0000
|
unkown
|
page readonly
|
|
|
|
26E4000
|
unkown
|
page read and write
|
|
|
|
2FA000
|
unkown
|
page read and write
|
|
|
|
101D000
|
unkown
|
page read and write
|
|
|
|
2F93000
|
unkown
|
page readonly
|
|
|
|
5C9000
|
unkown
|
page read and write
|
|
|
|
4840000
|
unkown
|
page readonly
|
|
|
|
2268D473000
|
unkown
|
page read and write
|
|
|
|
7FF5E63DF000
|
unkown
|
page readonly
|
|
|
|
238F5FF0000
|
unkown
|
page readonly
|
|
|
|
7FF5EB368000
|
unkown
|
page readonly
|
|
|
|
7FF5E52C3000
|
unkown
|
page readonly
|
|
|
|
2F51000
|
unkown
|
page readonly
|
|
|
|
FDB000
|
unkown
|
page read and write
|
|
|
|
30F4000
|
unkown
|
page read and write
|
|
|
|
238F8482000
|
unkown
|
page read and write
|
|
|
|
4D50000
|
unkown
|
page readonly
|
|
|
|
5FC000
|
unkown
|
page read and write
|
|
|
|
300B000
|
unkown
|
page readonly
|
|
|
|
200D0902000
|
unkown
|
page read and write
|
|
|
|
238F8100000
|
unkown
|
page read and write
|
|
|
|
FE3000
|
unkown
|
page read and write
|
|
|
|
102B000
|
unkown
|
page read and write
|
|
|
|
104A000
|
unkown
|
page read and write
|
|
|
|
5A1000
|
unkown
|
page read and write
|
|
|
|
22D0000
|
heap private
|
page read and write
|
|
|
|
7FF558CD6000
|
unkown
|
page readonly
|
|
|
|
318D000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5E562C000
|
unkown
|
page readonly
|
|
|
|
3C2000
|
unkown
|
page read and write
|
|
|
|
18BC2400000
|
unkown
|
page readonly
|
|
|
|
7FF52CCA5000
|
unkown
|
page readonly
|
|
|
|
2DA7000
|
unkown
|
page readonly
|
|
|
|
7FF52E79C000
|
unkown
|
page readonly
|
|
|
|
5B5000
|
heap default
|
page read and write
|
|
|
|
2268D380000
|
unkown
|
page readonly
|
|
|
|
2058000
|
heap private
|
page read and write
|
|
|
|
7FF50567E000
|
unkown
|
page readonly
|
|
|
|
61B000
|
unkown
|
page read and write
|
|
|
|
7FF5CBEFE000
|
unkown
|
page readonly
|
|
|
|
1041000
|
unkown
|
page read and write
|
|
|
|
7FF52E487000
|
unkown
|
page readonly
|
|
|
|
7FF505809000
|
unkown
|
page readonly
|
|
|
|
30E1000
|
unkown
|
page read and write
|
|
|
|
7FF587DFF000
|
unkown
|
page readonly
|
|
|
|
7FF5E641C000
|
unkown
|
page readonly
|
|
|
|
2268D400000
|
unkown
|
page read and write
|
|
|
|
238F7F00000
|
heap private
|
page read and write
|
|
|
|
2F80000
|
unkown
|
page readonly
|
|
|
|
238F8110000
|
unkown
|
page read and write
|
|
|
|
7FF5922B7000
|
unkown
|
page readonly
|
|
|
|
7FF5CBCCD000
|
unkown
|
page readonly
|
|
|
|
2148000
|
unkown
|
page read and write
|
|
|
|
AC9000
|
heap private
|
page read and write
|
|
|
|
7FF5CC0A6000
|
unkown
|
page readonly
|
|
|
|
7FF576224000
|
unkown
|
page readonly
|
|
|
|
3CF000
|
unkown
|
page read and write
|
|
|
|
40F000
|
unkown image
|
page write copy
|
|
|
|
22692AB3000
|
unkown
|
page read and write
|
|
|
|
7FF5E5414000
|
unkown
|
page readonly
|
|
|
|
2C6D000
|
unkown
|
page read and write
|
|
|
|
2F60000
|
unkown
|
page readonly
|
|
|
|
2B743800000
|
unkown
|
page readonly
|
|
|
|
7FF52CC62000
|
unkown
|
page readonly
|
|
|
|
7FF587E2C000
|
unkown
|
page readonly
|
|
|
|
5170000
|
unkown
|
page read and write
|
|
|
|
2F63000
|
unkown
|
page read and write
|
|
|
|
7FF5CC0A8000
|
unkown
|
page readonly
|
|
|
|
29C48F16000
|
unkown
|
page read and write
|
|
|
|
5DE000
|
unkown
|
page read and write
|
|
|
|
136B000
|
unkown
|
page readonly
|
|
|
|
21B3E850000
|
heap default
|
page read and write
|
|
|
|
22ABF302000
|
unkown
|
page read and write
|
|
|
|
2250000
|
unkown
|
page read and write
|
|
|
|
F4C000
|
unkown image
|
page readonly
|
|
|
|
1041000
|
unkown
|
page read and write
|
|
|
|
7FF52CCB9000
|
unkown
|
page readonly
|
|
|
|
5AD000
|
heap default
|
page read and write
|
|
|
|
5F8000
|
unkown
|
page read and write
|
|
|
|
7FF5055DA000
|
unkown
|
page readonly
|
|
|
|
238F6040000
|
unkown
|
page read and write
|
|
|
|
22692D70000
|
unkown
|
page readonly
|
|
|
|
2B743700000
|
unkown
|
page read and write
|
|
|
|
7FF52E627000
|
unkown
|
page readonly
|
|
|
|
2AF5000
|
heap private
|
page read and write
|
|
|
|
7FF5CB7F9000
|
unkown
|
page readonly
|
|
|
|
ECE927B000
|
unkown
|
page read and write
|
|
|
|
22692CF0000
|
unkown
|
page read and write
|
|
|
|
520000
|
unkown
|
page read and write
|
|
|
|
7FF5EB402000
|
unkown
|
page readonly
|
|
|
|
20E0000
|
heap private
|
page read and write
|
|
|
|
7FF58B5C5000
|
unkown
|
page readonly
|
|
|
|
7FF5EDC39000
|
unkown
|
page readonly
|
|
|
|
16640713000
|
unkown
|
page read and write
|
|
|
|
7FF596869000
|
unkown
|
page readonly
|
|
|
|
16640580000
|
heap default
|
page read and write
|
|
|
|
7FF58B4A5000
|
unkown
|
page readonly
|
|
|
|
2B7434B0000
|
unkown
|
page readonly
|
|
|
|
16640602000
|
unkown
|
page read and write
|
|
|
|
238F606E000
|
unkown
|
page read and write
|
|
|
|
2F6A000
|
unkown
|
page read and write
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
3167000
|
unkown
|
page read and write
|
|
|
|
1A089A41000
|
unkown
|
page read and write
|
|
|
|
7FF587DB0000
|
unkown
|
page readonly
|
|
|
|
7FF5B1D4D000
|
unkown
|
page readonly
|
|
|
|
7FF58B589000
|
unkown
|
page readonly
|
|
|
|
7FF52CAEF000
|
unkown
|
page readonly
|
|
|
|
7FF5EDAF1000
|
unkown
|
page readonly
|
|
|
|
1C4F9190000
|
unkown
|
page readonly
|
|
|
|
2268D427000
|
unkown
|
page read and write
|
|
|
|
29C4AD30000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5B1DE9000
|
unkown
|
page readonly
|
|
|
|
7FF57620C000
|
unkown
|
page readonly
|
|
|
|
226929C0000
|
unkown
|
page read and write
|
|
|
|
564000
|
unkown
|
page read and write
|
|
|
|
3DC647D000
|
unkown
|
page read and write
|
|
|
|
5140000
|
unkown
|
page read and write
|
|
|
|
7FF5CC106000
|
unkown
|
page readonly
|
|
|
|
29C4AD20000
|
unkown
|
page read and write
|
|
|
|
1A0899E0000
|
unkown
|
page readonly
|
|
|
|
2469BFF000
|
unkown
|
page read and write
|
|
|
|
7FF58B3F1000
|
unkown
|
page readonly
|
|
|
|
F9D000
|
unkown
|
page read and write
|
|
|
|
2F1E000
|
unkown
|
page readonly
|
|
|
|
163AC240000
|
unkown
|
page read and write
|
|
|
|
7FF5CBFA7000
|
unkown
|
page readonly
|
|
|
|
26DC000
|
unkown
|
page read and write
|
|
|
|
2268D4AC000
|
unkown
|
page read and write
|
|
|
|
7FF5EB459000
|
unkown
|
page readonly
|
|
|
|
29265FC0000
|
heap default
|
page read and write
|
|
|
|
2620000
|
unkown
|
page execute and read and write
|
|
|
|
1158000
|
unkown
|
page read and write
|
|
|
|
564000
|
unkown
|
page read and write
|
|
|
|
7FF57618D000
|
unkown
|
page readonly
|
|
|
|
2FA5000
|
unkown
|
page readonly
|
|
|
|
7FF5922B0000
|
unkown
|
page readonly
|
|
|
|
7FF5CBE1C000
|
unkown
|
page readonly
|
|
|
|
662000
|
heap default
|
page read and write
|
|
|
|
29C4ACC0000
|
heap private
|
page read and write
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
194000
|
stack
|
page read and write
|
|
|
|
2268D495000
|
unkown
|
page read and write
|
|
|
|
26EB000
|
unkown
|
page read and write
|
|
|
|
7FF5E56EE000
|
unkown
|
page readonly
|
|
|
|
7FF575ED6000
|
unkown
|
page readonly
|
|
|
|
599000
|
heap default
|
page read and write
|
|
|
|
7FF558D4C000
|
unkown
|
page readonly
|
|
|
|
7FF5E55C7000
|
unkown
|
page readonly
|
|
|
|
7FF5E61EA000
|
unkown
|
page readonly
|
|
There are 2233 hidden memdumps, click here to show them.