Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
New remittance Scif Shared Document (TGVL973NGZ2A).pdf
|
PDF document, version 1.7
|
initial sample
|
 |
|
|
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0ace9ee3d914a5c0_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\3a4ae3940784292a_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bba29d2e6197e2f4_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bf0ac66ae1eb4a7f_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\cf3e34002cde7e9c_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d449e58cb15daaf1_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d88192ac53852604_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\de789e80edd740d6_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f0cf6dfa8a1afa3d_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f4a0d4ca2f3b95da_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f941376b2efdd6e6_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f971b7eda7fa05c3_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fd17b2d8331c91e8_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fdd733564de6fbcb_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\febb41df4ea2b63a_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\temp-index
|
Maple help database
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\the-real-index (copy)
|
Maple help database
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-211203111009Z-176.bmp
|
PC bitmap, Windows 3.x format, 107 x -152 x 32
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
|
SQLite 3.x database, last written using SQLite version 3024000
|
modified
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal
|
SQLite Rollback Journal
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt16.lst.2964
|
PostScript document text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt19.lst (copy)
|
PostScript document text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache.bin
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\0fdacf53-24b8-4334-ade0-47c2a132a59c.tmp
|
SysEx File -
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\14b5901d-1eb8-497c-99d2-8b31e328390b.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\957dcf57-b976-4c5c-a5d7-4b6b6f7eacbf.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\95aff0f2-50df-4f9a-b6cb-b44cb5a93d9b.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\19361086-a36d-4c6b-b1a7-840b4e64a006.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2bb34554-9280-4816-8aa9-ae221fa99fdf.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\30ff9de7-8037-473d-a558-a3c3dcd1e248.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\361b19f9-af58-4848-a65c-b4879eccdd18.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4ea203e0-bab3-456b-a4ad-31d52d4d7b0b.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5366f801-f723-45e0-a8ad-f42070d0c0a8.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\552b614b-0024-4c1b-9a00-94d8a46216d1.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9ed517bd-e9f9-4d16-b697-889f2c01a612.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old} (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old. (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.olddl (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Sessionxb (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last TabsOG (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State.. (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent StateV (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences. (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure PreferencesMP (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferencesjs (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferencesn (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\4d1721d2-2366-4b7b-8bfc-2d0441010c72.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent
State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent
State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\d9beffc0-e998-41a0-811f-a6c36bacefb3.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old. (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d75d824e-aae9-48eb-a725-e4afba888e16.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old.. (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\eca2e3b3-cb9e-452d-a2c8-50dd63e85c0f.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f5d6fe32-c16b-4f0f-a562-482b3ccb2701.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local StateMP (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache\r (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cacheth (copy)
|
SysEx File -
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\a98a3a03-03f1-44ac-a403-4ffd3e9f109f.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\f15c29c1-b680-4467-8359-a68011984ba6.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\f63a6f7b-ba72-4d0e-bc28-ebf9fbe21ff2.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\f8541a95-e2c7-4653-9878-726b1fea8344.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1bd9c88f-e967-4aec-a2f8-d2fd7f533590.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\42f9746b-605a-45be-a190-4311b7ea5858.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_1285696019\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_1285696019\download_file_types.pb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_1285696019\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_1285696019\manifest.json
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_202446947\LICENSE
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_202446947\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_202446947\crl-set
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_202446947\manifest.fingerprint
|
ASCII text, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_202446947\manifest.json
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_975500577\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_975500577\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_975500577\manifest.json
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6092_975500577\ssl_error_assistant.pb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6df50e69-2dad-48ad-920c-e481d6cb74ce.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\de71f659-4a42-4b55-8c1e-a4c81350ffc1.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\craw_background.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\craw_window.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\css\craw_window.css
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\html\craw_window.html
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\images\flapper.gif
|
GIF image data, version 89a, 30 x 30
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\images\topbar_floating_button.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\images\topbar_floating_button_close.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\images\topbar_floating_button_hover.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\images\topbar_floating_button_maximize.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\images\topbar_floating_button_pressed.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_1218574368\de71f659-4a42-4b55-8c1e-a4c81350ffc1.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\42f9746b-605a-45be-a190-4311b7ea5858.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\iw\messages.json
|
HTML document, ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\angular.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\background_script.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\cast_sender.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\common.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\feedback.css
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\feedback.html
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\feedback_script.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\material_css_min.css
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\mirroring_cast_streaming.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\mirroring_common.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\mirroring_hangouts.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6092_766454017\CRX_INSTALL\mirroring_webrtc.js
|
ASCII text, with very long lines
|
dropped
|
|
There are 289 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\Desktop\New remittance Scif Shared Document
(TGVL973NGZ2A).pdf
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" --type=renderer /prefetch:1 "C:\Users\user\Desktop\New
remittance Scif Shared Document (TGVL973NGZ2A).pdf
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --log-file="C:\Program Files (x86)\Adobe\Acrobat
Reader DC\Reader\AcroCEF\debug.log" --touch-events=enabled --field-trial-handle=1720,8702195072095390061,15627106000912345319,131072
--disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=18286048802128574136 --lang=en-US --disable-pack-loading
--log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.12.20035
Chrome/80.0.0.0" --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=18286048802128574136
--renderer-client-id=2 --mojo-platform-channel-handle=1732 --allow-no-sandbox-job /prefetch:1
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --field-trial-handle=1720,8702195072095390061,15627106000912345319,131072
--disable-features=VizDisplayCompositor --disable-pack-loading --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log"
--log-severity=disable --product-version="ReaderServices/19.12.20035 Chrome/80.0.0.0" --lang=en-US --gpu-preferences=KAAAAAAAAACAAwABAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA
--use-gl=swiftshader-webgl --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --service-request-channel-token=3768187353521161873
--mojo-platform-channel-handle=1748 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --log-file="C:\Program Files (x86)\Adobe\Acrobat
Reader DC\Reader\AcroCEF\debug.log" --touch-events=enabled --field-trial-handle=1720,8702195072095390061,15627106000912345319,131072
--disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=9415886863657161447 --lang=en-US --disable-pack-loading
--log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.12.20035
Chrome/80.0.0.0" --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=9415886863657161447
--renderer-client-id=4 --mojo-platform-channel-handle=1980 --allow-no-sandbox-job /prefetch:1
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --log-file="C:\Program Files (x86)\Adobe\Acrobat
Reader DC\Reader\AcroCEF\debug.log" --touch-events=enabled --field-trial-handle=1720,8702195072095390061,15627106000912345319,131072
--disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=4224506441275931073 --lang=en-US --disable-pack-loading
--log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.12.20035
Chrome/80.0.0.0" --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4224506441275931073
--renderer-client-id=5 --mojo-platform-channel-handle=1784 --allow-no-sandbox-job /prefetch:1
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation -- "https://bit.ly/3rhxy13#amJhY3VkQHNjaWYuY29t
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1576,3536686131890549724,3331413522711221589,131072
--lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1924 /prefetch:8
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud/#amJhY3VkQHNjaWYuY29tLo
|
unknown
|
|
|
|
https://889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud/#amJhY3VkQHNjaWYuY29t2
|
unknown
|
|
|
|
https://889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud/#amJhY3VkQHNjaWYuY29t
|
|
||
|
https://889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud/#amJhY3VkQHNjaWYuY29t
|
unknown
|
|
|
|
https://373573-3847.glitch.me/
|
52.55.94.26
|
|
|
|
https://apis.google.com/js/client.js
|
unknown
|
|
|
|
https://crash.corp.google.com/samples?reportid=&q=
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/report-to/apps-themes
|
unknown
|
|
|
|
https://ipinfo.io/json?token=ae2ec3372db6ec
|
34.117.59.81
|
|
|
|
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
|
unknown
|
|
|
|
https://373573-3847.glitch.me/#amJhY3VkQHNjaWYuY29t
|
unknown
|
|
|
|
https://preprod-hangouts-googleapis.sandbox.google.com
|
unknown
|
|
|
|
https://www.google.com
|
unknown
|
|
|
|
https://PrefSyncJob/com.adobe.acrobat.ADotCom/Resource/Sync/Upload/i
|
unknown
|
|
|
|
https://api.echosign.comHei
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/type#
|
unknown
|
|
|
|
https://373573-3847.glitch.me/#amJhY3VkQHNjaWYuY29tLogin
|
unknown
|
|
|
|
https://api.echosign.com
|
unknown
|
|
|
|
https://hangouts.google.com/hangouts/_/logpref
|
unknown
|
|
|
|
https://bit.ly/3rhxy13#amJhY3VkQHNjaWYuY29tLogin
|
unknown
|
|
|
|
https://creativecommons.org/publicdomain/zero/1.0/.
|
unknown
|
|
|
|
https://889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud/favicon.icoChIKBw3njUAO
|
unknown
|
|
|
|
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
|
unknown
|
|
|
|
https://github.com/madler/zlib/blob/master/zlib.h
|
unknown
|
|
|
|
https://www.google.com/tools/feedback
|
unknown
|
|
|
|
https://dns.google
|
unknown
|
|
|
|
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
|
unknown
|
|
|
|
http://ns.useplus.org/ldf/xmp/1.0/
|
unknown
|
|
|
|
https://support.google.com/chromecast/troubleshooter/2995236
|
unknown
|
|
|
|
https://373573-3847.glitch.me/T(
|
unknown
|
|
|
|
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
|
unknown
|
|
|
|
http://www.tcpdf.org.SJ2m
|
unknown
|
|
|
|
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
|
142.250.203.110
|
|
|
|
http://www.tcpdf.org)
|
unknown
|
|
|
|
https://bit.ly/3rhxy13
|
67.199.248.10
|
|
|
|
https://payments.google.com/payments/v4/js/integrator.js
|
unknown
|
|
|
|
https://www.google.com;
|
unknown
|
|
|
|
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
|
unknown
|
|
|
|
https://373573-3847.glitch.me/Referrer-Policy:
|
unknown
|
|
|
|
https://www.google.com/images/x2.gif
|
unknown
|
|
|
|
https://373573-3847.glitch.me/#amJhY3VkQHNjaWYuY29t2
|
unknown
|
|
|
|
https://889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud/style.css
|
169.46.89.154
|
|
|
|
https://www.google.com/images/dot2.gif
|
unknown
|
|
|
|
https://play.google.com/log?format=json&hasfast=true
|
unknown
|
|
|
|
http://tools.ietf.org/html/rfc1950
|
unknown
|
|
|
|
http://iptc.org/std/Iptc4xmpExt/2008-02-29/p
|
unknown
|
|
|
|
https://889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud/favicon.ico
|
169.46.89.154
|
|
|
|
http://www.aiim.org/pdfa/ns/schema#a
|
unknown
|
|
|
|
https://ims-na1.adobelogin.com
|
unknown
|
|
|
|
http://cipa.jp/exif/1.0/(15)P
|
unknown
|
|
|
|
https://docs.google.com
|
unknown
|
|
|
|
https://www.google.com/
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
|
|
http://cipa.jp/exif/1.0/(15)M
|
unknown
|
|
|
|
https://clients6.google.com
|
unknown
|
|
|
|
https://www.google.com/images/cleardot.gif
|
unknown
|
|
|
|
https://bit.ly/3rhxy13#amJhY3VkQHNjaWYuY29t)
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/schema#
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/type#)
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/apps-themesCross-Origin-Resource-Policy:
|
unknown
|
|
|
|
https://www.google.com/log?format=json&hasfast=true
|
unknown
|
|
|
|
https://bit.ly/3rhxy13#amJhY3VkQHNjaWYuY29t2
|
unknown
|
|
|
|
http://cipa.jp/exif/1.0/
|
unknown
|
|
|
|
https://sandbox.google.com/payments/v4/js/integrator.js
|
unknown
|
|
|
|
https://accounts.google.com/MergeSession
|
unknown
|
|
|
|
http://www.aiim.org/pdfe/ns/id/~
|
unknown
|
|
|
|
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
|
142.250.203.97
|
|
|
|
http://www.aiim.org/pdfa/ns/property#P
|
unknown
|
|
|
|
http://www.tcpdf.org
|
unknown
|
|
|
|
https://889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud/
|
169.46.89.154
|
|
|
|
https://889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud/style.cssM
|
unknown
|
|
|
|
https://bit.ly/3rhxy13#amJhY3VkQHNjaWYuY29t
|
unknown
|
|
|
|
https://hangouts.clients6.google.com
|
unknown
|
|
|
|
https://meet.google.com
|
unknown
|
|
|
|
https://PrefSyncJob/com.adobe.acrobat.ADotCom/Resource/Sync/Upload/
|
unknown
|
|
|
|
https://accounts.google.com
|
unknown
|
|
|
|
https://clients2.google.com/cr/report
|
unknown
|
|
|
|
http://www.npes.org/pdfx/ns/id/
|
unknown
|
|
|
|
http://angularjs.org
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/extension/
|
unknown
|
|
|
|
https://github.com/angular/material
|
unknown
|
|
|
|
https://apis.google.com
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/property#F
|
unknown
|
|
|
|
https://www-googleapis-staging.sandbox.google.com
|
unknown
|
|
|
|
https://clients2.google.com
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/property#
|
unknown
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
unknown
|
|
|
|
https://www.google.com/intl/en-US/chrome/blank.html
|
unknown
|
|
|
|
https://ogs.google.com
|
unknown
|
|
|
|
http://www.tcpdf.org)#x-ns#
|
unknown
|
|
|
|
https://373573-3847.glitch.me
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/id/
|
unknown
|
|
|
|
http://iptc.org/std/Iptc4xmpExt/2008-02-29/
|
unknown
|
|
|
|
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
|
172.217.168.45
|
|
|
|
http://www.aiim.org/pdfe/ns/id/
|
unknown
|
|
|
|
https://hangouts.google.com/
|
unknown
|
|
|
|
http://www.aiim.org/pdfe/ns/id/A
|
unknown
|
|
|
|
https://PrefSyncJob/com.adobe.acrobat.ADotCom/Resource/Sync/Upload/&
|
unknown
|
|
|
|
https://meetings.clients6.google.com
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/id/;
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
gstaticadssl.l.google.com
|
172.217.168.3
|
|
|
|
889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud
|
169.46.89.154
|
|
|
|
accounts.google.com
|
172.217.168.45
|
|
|
|
bit.ly
|
67.199.248.10
|
|
|
|
373573-3847.glitch.me
|
52.55.94.26
|
|
|
|
ipinfo.io
|
34.117.59.81
|
|
|
|
clients.l.google.com
|
142.250.203.110
|
|
|
|
googlehosted.l.googleusercontent.com
|
142.250.203.97
|
|
|
|
clients2.googleusercontent.com
|
unknown
|
|
|
|
clients2.google.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
34.117.59.81
|
ipinfo.io
|
United States
|
|
|
|
142.250.203.110
|
clients.l.google.com
|
United States
|
|
|
|
169.46.89.154
|
889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud
|
United States
|
|
|
|
172.217.168.45
|
accounts.google.com
|
United States
|
|
|
|
142.250.203.97
|
googlehosted.l.googleusercontent.com
|
United States
|
|
|
|
239.255.255.250
|
unknown
|
Reserved
|
|
|
|
172.217.168.3
|
gstaticadssl.l.google.com
|
United States
|
|
|
|
52.55.94.26
|
373573-3847.glitch.me
|
United States
|
|
|
|
67.199.248.10
|
bit.ly
|
United States
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
There are 1 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c1
|
aFS
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c1
|
tDIText
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c1
|
tFileName
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c1
|
tFileSource
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c1
|
sFileAncestors
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c1
|
sDI
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c1
|
sDate
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c1
|
uFileSize
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c1
|
uPageCount
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c2
|
aFS
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c2
|
tDIText
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c2
|
tFileName
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c2
|
sFileAncestors
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c2
|
sDI
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles\c2
|
sDate
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\SessionManagement\cWindowsCurrent\cWin0\cTab0\cPathInfo
|
sDI
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\SessionManagement\cWindowsCurrent\cWin0\cTab0\cPathInfo
|
tDIText
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\SessionManagement\cWindowsCurrent\cWin0\cTab0\cPathInfo
|
aFS
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\SessionManagement\cWindowsCurrent\cWin0\cTab0
|
tfilename
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\SessionManagement\cWindowsCurrent\cWin0
|
iTabCount
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\SessionManagement\cWindowsCurrent
|
iWinCount
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral
|
aDefaultRHPViewModeL
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral
|
bExpandRHPInViewer
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\NoTimeOut
|
smailto
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\TrustManager\cDefaultLaunchURLPerms
|
tHostPerms
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\ExitSection
|
bLastExitNormal
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\SessionManagement
|
bNormalExit
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral
|
uLastAppLaunchTimeStamp
|
|
|
|
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral
|
iNumReaderLaunches
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastWasDefault
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
ahfgeienlihckogmohjhadlkjgocpleb
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
kmendfapggjehodndflmmgagdbamhnfd
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
mfehgcgbbipciphmccgaenjidiccnmng
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
neajdppkdcdipfabeoofebfddakdcjhd
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nkeimhogjdpnpccoofpliimaahmaaome
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
prefs.preference_reset_time
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
|
state
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
|
StatusCodes
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
|
StatusCodes
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
|
state
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.reporting
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
module_blacklist_cache_md5_digest
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
media.storage_id_salt
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.last_account_id
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.account_id
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.prompt_seed
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_homepage
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
default_search_provider_data.template_url_data
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
safebrowsing.incidents_sent
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
pinned_tabs
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
search_provider_overrides
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_default_search
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
prefs.preference_reset_time
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.last_username
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
session.startup_urls
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
session.restore_on_startup
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.prompt_version
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_startup_urls
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.prompt_wave
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
homepage
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
homepage_is_newtabpage
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
browser.show_home_button
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics
|
user_experience_metrics.stability.exited_cleanly
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
|
lastrun
|
|
There are 63 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF4ECE5F000
|
unkown image
|
page readonly
|
|
|
|
508B000
|
heap default
|
page read and write
|
|
|
|
21B75A4C000
|
unkown
|
page read and write
|
|
|
|
CED8000
|
unkown
|
page read and write
|
|
|
|
24830050000
|
unkown image
|
page readonly
|
|
|
|
9299000
|
unkown
|
page read and write
|
|
|
|
7FF5E627E000
|
unkown image
|
page readonly
|
|
|
|
A5B1000
|
unkown
|
page read and write
|
|
|
|
7FF585B63000
|
unkown image
|
page readonly
|
|
|
|
6C50000
|
unkown image
|
page read and write
|
|
|
|
7FF4FFD9F000
|
unkown image
|
page readonly
|
|
|
|
4FD6000
|
heap default
|
page read and write
|
|
|
|
28FCF800000
|
unkown image
|
page readonly
|
|
|
|
2482F930000
|
unkown image
|
page readonly
|
|
|
|
B9E0000
|
unkown
|
page read and write
|
|
|
|
C10F000
|
stack
|
page read and write
|
|
|
|
AB00000
|
unkown
|
page read and write
|
|
|
|
B860000
|
unkown
|
page read and write
|
|
|
|
7DF5FBB92000
|
unkown image
|
page readonly
|
|
|
|
FF1E0000
|
unkown image
|
page readonly
|
|
|
|
2A91000
|
unkown image
|
page readonly
|
|
|
|
4C286FF000
|
stack
|
page read and write
|
|
|
|
C660000
|
unkown
|
page read and write
|
|
|
|
2ABD000
|
unkown image
|
page readonly
|
|
|
|
28F0000
|
unkown image
|
page readonly
|
|
|
|
21B75AC3000
|
unkown
|
page read and write
|
|
|
|
7FF5D6A33000
|
unkown image
|
page readonly
|
|
|
|
C4E0000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
5070000
|
unkown image
|
page readonly
|
|
|
|
1CFDA206000
|
heap default
|
page read and write
|
|
|
|
A6E4000
|
unkown
|
page read and write
|
|
|
|
28FD0060000
|
unkown
|
page read and write
|
|
|
|
C390000
|
unkown
|
page read and write
|
|
|
|
21B75A8C000
|
unkown
|
page read and write
|
|
|
|
B980000
|
unkown
|
page read and write
|
|
|
|
7DF502752000
|
unkown image
|
page readonly
|
|
|
|
7FF544E9A000
|
unkown image
|
page readonly
|
|
|
|
B9B0000
|
unkown
|
page read and write
|
|
|
|
C24F000
|
stack
|
page read and write
|
|
|
|
1098000
|
unkown image
|
page readonly
|
|
|
|
21B763B9000
|
unkown
|
page read and write
|
|
|
|
21B763B2000
|
unkown
|
page read and write
|
|
|
|
11D6A780000
|
unkown image
|
page readonly
|
|
|
|
BB17000
|
unkown image
|
page read and write
|
|
|
|
7DF502750000
|
unkown image
|
page readonly
|
|
|
|
7DF4F9A50000
|
unkown image
|
page readonly
|
|
|
|
B420000
|
unkown
|
page read and write
|
|
|
|
21B76380000
|
unkown
|
page read and write
|
|
|
|
B058000
|
unkown
|
page read and write
|
|
|
|
DE2A000
|
unkown
|
page read and write
|
|
|
|
1F1D6A65000
|
unkown
|
page read and write
|
|
|
|
21B763C1000
|
unkown
|
page read and write
|
|
|
|
C760000
|
unkown
|
page read and write
|
|
|
|
B2E4000
|
unkown
|
page read and write
|
|
|
|
CB8F000
|
stack
|
page read and write
|
|
|
|
7FF4ECD78000
|
unkown image
|
page readonly
|
|
|
|
11D6FB02000
|
unkown
|
page read and write
|
|
|
|
2936000
|
unkown image
|
page readonly
|
|
|
|
28FCF950000
|
unkown
|
page read and write
|
|
|
|
4FE0000
|
unkown
|
page read and write
|
|
|
|
2957000
|
unkown image
|
page readonly
|
|
|
|
21B76393000
|
unkown
|
page read and write
|
|
|
|
7FF5E353D000
|
unkown image
|
page readonly
|
|
|
|
1C2A5085000
|
unkown
|
page read and write
|
|
|
|
B850000
|
unkown
|
page read and write
|
|
|
|
6C70000
|
unkown image
|
page read and write
|
|
|
|
6C90000
|
unkown image
|
page read and write
|
|
|
|
B05D000
|
unkown
|
page read and write
|
|
|
|
2B37000
|
unkown image
|
page readonly
|
|
|
|
FF1C2000
|
unkown image
|
page readonly
|
|
|
|
893D000
|
stack
|
page read and write
|
|
|
|
24D94FC0000
|
unkown
|
page read and write
|
|
|
|
2A20000
|
unkown image
|
page readonly
|
|
|
|
6D0000
|
unkown
|
page execute read
|
|
|
|
8A90000
|
stack
|
page read and write
|
|
|
|
1CFDA0B0000
|
unkown image
|
page readonly
|
|
|
|
21B763A7000
|
unkown
|
page read and write
|
|
|
|
4F50000
|
unkown
|
page execute read
|
|
|
|
C630000
|
unkown
|
page read and write
|
|
|
|
B294000
|
unkown
|
page read and write
|
|
|
|
11D6F530000
|
unkown
|
page read and write
|
|
|
|
A4F0000
|
unkown
|
page read and write
|
|
|
|
B330FFE000
|
stack
|
page read and write
|
|
|
|
B870000
|
unkown
|
page read and write
|
|
|
|
B9F0000
|
unkown
|
page read and write
|
|
|
|
DE3B000
|
unkown
|
page read and write
|
|
|
|
BB17000
|
unkown image
|
page read and write
|
|
|
|
294C000
|
unkown image
|
page readonly
|
|
|
|
4F9A000
|
heap private
|
page read and write
|
|
|
|
21B76393000
|
unkown
|
page read and write
|
|
|
|
28A1000
|
unkown image
|
page readonly
|
|
|
|
F6BC1FC000
|
stack
|
page read and write
|
|
|
|
F6BC8FF000
|
stack
|
page read and write
|
|
|
|
7FF53FB08000
|
unkown image
|
page readonly
|
|
|
|
B47F000
|
unkown
|
page read and write
|
|
|
|
1001FE000
|
stack
|
page read and write
|
|
|
|
7DF499510000
|
unkown image
|
page readonly
|
|
|
|
7FF5E35CF000
|
unkown image
|
page readonly
|
|
|
|
C750000
|
unkown
|
page read and write
|
|
|
|
17EACA02000
|
unkown
|
page read and write
|
|
|
|
14FD47F000
|
stack
|
page read and write
|
|
|
|
1087000
|
unkown image
|
page readonly
|
|
|
|
BB00000
|
unkown image
|
page read and write
|
|
|
|
292F000
|
unkown image
|
page readonly
|
|
|
|
2482F950000
|
unkown image
|
page readonly
|
|
|
|
C750000
|
unkown
|
page read and write
|
|
|
|
8DC0000
|
unkown
|
page read and write
|
|
|
|
B9B0000
|
unkown
|
page read and write
|
|
|
|
21B76336000
|
unkown
|
page read and write
|
|
|
|
7FF585D34000
|
unkown image
|
page readonly
|
|
|
|
7FF544D3E000
|
unkown image
|
page readonly
|
|
|
|
C650000
|
unkown
|
page read and write
|
|
|
|
1F1D6A39000
|
unkown
|
page read and write
|
|
|
|
7FF53F963000
|
unkown image
|
page readonly
|
|
|
|
4FA0000
|
unkown image
|
page readonly
|
|
|
|
8D70000
|
unkown
|
page read and write
|
|
|
|
11D6FA2B000
|
unkown
|
page read and write
|
|
|
|
11D6F7D0000
|
unkown
|
page read and write
|
|
|
|
7FF544A80000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECB51000
|
unkown image
|
page readonly
|
|
|
|
DFAF000
|
stack
|
page read and write
|
|
|
|
B534000
|
unkown
|
page read and write
|
|
|
|
11D6A2B7000
|
unkown
|
page read and write
|
|
|
|
A86E000
|
stack
|
page read and write
|
|
|
|
B2F6000
|
unkown
|
page read and write
|
|
|
|
217E0AE0000
|
unkown
|
page read and write
|
|
|
|
B459000
|
unkown
|
page read and write
|
|
|
|
B800000
|
unkown
|
page read and write
|
|
|
|
7DF5AAC20000
|
unkown image
|
page readonly
|
|
|
|
B870000
|
unkown
|
page read and write
|
|
|
|
7DF5FBB90000
|
unkown image
|
page readonly
|
|
|
|
7DF528242000
|
unkown image
|
page readonly
|
|
|
|
6C50000
|
unkown image
|
page read and write
|
|
|
|
5834000
|
heap private
|
page read and write
|
|
|
|
C6E0000
|
unkown
|
page read and write
|
|
|
|
B810000
|
unkown
|
page read and write
|
|
|
|
11D6A286000
|
unkown
|
page read and write
|
|
|
|
C770000
|
unkown
|
page read and write
|
|
|
|
1C2A5400000
|
unkown image
|
page readonly
|
|
|
|
7DF59B640000
|
unkown image
|
page readonly
|
|
|
|
2B1B000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFCD7000
|
unkown image
|
page readonly
|
|
|
|
B459000
|
unkown
|
page read and write
|
|
|
|
11D6F4F0000
|
unkown
|
page read and write
|
|
|
|
7DF55A852000
|
unkown image
|
page readonly
|
|
|
|
2917000
|
unkown image
|
page readonly
|
|
|
|
DDDF000
|
unkown image
|
page readonly
|
|
|
|
2482F9B0000
|
unkown
|
page read and write
|
|
|
|
919F000
|
stack
|
page read and write
|
|
|
|
DE02000
|
unkown image
|
page readonly
|
|
|
|
7DF4EA300000
|
unkown image
|
page readonly
|
|
|
|
7DF555460000
|
unkown image
|
page readonly
|
|
|
|
A9ED000
|
stack
|
page read and write
|
|
|
|
8DD0000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD98000
|
unkown image
|
page readonly
|
|
|
|
17EAC4D0000
|
unkown image
|
page readonly
|
|
|
|
21B75ABC000
|
unkown
|
page read and write
|
|
|
|
ADCE000
|
unkown
|
page read and write
|
|
|
|
1C2A4FD0000
|
unkown image
|
page readonly
|
|
|
|
28A1000
|
unkown image
|
page readonly
|
|
|
|
C720000
|
unkown
|
page read and write
|
|
|
|
4FB0000
|
unkown image
|
page readonly
|
|
|
|
7FF595259000
|
unkown image
|
page readonly
|
|
|
|
7190000
|
unkown
|
page read and write
|
|
|
|
7FF59531B000
|
unkown image
|
page readonly
|
|
|
|
C24F000
|
stack
|
page read and write
|
|
|
|
88E0000
|
unkown image
|
page readonly
|
|
|
|
7FF51293F000
|
unkown image
|
page readonly
|
|
|
|
2482FB02000
|
unkown
|
page read and write
|
|
|
|
293F000
|
unkown image
|
page readonly
|
|
|
|
1CFC384B000
|
unkown
|
page read and write
|
|
|
|
7FF544DA5000
|
unkown image
|
page readonly
|
|
|
|
1CFC4002000
|
unkown
|
page read and write
|
|
|
|
7DF5EC440000
|
unkown image
|
page readonly
|
|
|
|
7FF5952E6000
|
unkown image
|
page readonly
|
|
|
|
28E6000
|
unkown image
|
page readonly
|
|
|
|
21B75A71000
|
unkown
|
page read and write
|
|
|
|
508B000
|
heap default
|
page read and write
|
|
|
|
7FF544E89000
|
unkown image
|
page readonly
|
|
|
|
A9ED000
|
stack
|
page read and write
|
|
|
|
7FF585AED000
|
unkown image
|
page readonly
|
|
|
|
57B0000
|
unkown image
|
page readonly
|
|
|
|
AAF0000
|
unkown image
|
page readonly
|
|
|
|
260C000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFCCC000
|
unkown image
|
page readonly
|
|
|
|
28CA000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECDA3000
|
unkown image
|
page readonly
|
|
|
|
C490000
|
unkown
|
page read and write
|
|
|
|
28AE000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECE4E000
|
unkown image
|
page readonly
|
|
|
|
11D6F7F0000
|
unkown
|
page read and write
|
|
|
|
7FF5952FD000
|
unkown image
|
page readonly
|
|
|
|
88E0000
|
unkown image
|
page readonly
|
|
|
|
DDBB000
|
unkown image
|
page readonly
|
|
|
|
2957000
|
unkown image
|
page readonly
|
|
|
|
7FF5E355A000
|
unkown image
|
page readonly
|
|
|
|
F982FE000
|
stack
|
page read and write
|
|
|
|
21B75AA5000
|
unkown
|
page read and write
|
|
|
|
14FD7FE000
|
stack
|
page read and write
|
|
|
|
7DF5FBB92000
|
unkown image
|
page readonly
|
|
|
|
7FF59524D000
|
unkown image
|
page readonly
|
|
|
|
7DF55A842000
|
unkown image
|
page readonly
|
|
|
|
8BB17F8000
|
stack
|
page read and write
|
|
|
|
2AA9000
|
unkown image
|
page readonly
|
|
|
|
1087000
|
unkown image
|
page readonly
|
|
|
|
2A99000
|
unkown image
|
page readonly
|
|
|
|
7FF53FB34000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECD38000
|
unkown image
|
page readonly
|
|
|
|
2957000
|
unkown image
|
page readonly
|
|
|
|
AFCD000
|
unkown
|
page read and write
|
|
|
|
B338000
|
unkown
|
page read and write
|
|
|
|
57B0000
|
unkown image
|
page readonly
|
|
|
|
A8AD000
|
stack
|
page read and write
|
|
|
|
2A7A000
|
unkown image
|
page readonly
|
|
|
|
260C000
|
unkown image
|
page readonly
|
|
|
|
2A70000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFD19000
|
unkown image
|
page readonly
|
|
|
|
1CFDAFE0000
|
unkown
|
page read and write
|
|
|
|
AEA8000
|
unkown
|
page read and write
|
|
|
|
C500000
|
unkown
|
page read and write
|
|
|
|
11D6FAFC000
|
unkown
|
page read and write
|
|
|
|
11D6FB09000
|
unkown
|
page read and write
|
|
|
|
B3313FC000
|
stack
|
page read and write
|
|
|
|
2A9C000
|
unkown image
|
page readonly
|
|
|
|
5171000
|
heap default
|
page read and write
|
|
|
|
7FF585D16000
|
unkown image
|
page readonly
|
|
|
|
1CFDA060000
|
unkown image
|
page read and write
|
|
|
|
8B80000
|
stack
|
page read and write
|
|
|
|
7FF544D13000
|
unkown image
|
page readonly
|
|
|
|
FF1C2000
|
unkown image
|
page readonly
|
|
|
|
7DF54B150000
|
unkown image
|
page readonly
|
|
|
|
1C2A4EA0000
|
unkown image
|
page readonly
|
|
|
|
FF0C0000
|
unkown image
|
page readonly
|
|
|
|
2A51000
|
unkown image
|
page readonly
|
|
|
|
B6C3000
|
unkown
|
page read and write
|
|
|
|
7DF5AAC10000
|
unkown image
|
page readonly
|
|
|
|
B900000
|
unkown
|
page read and write
|
|
|
|
DE2C000
|
unkown
|
page read and write
|
|
|
|
C620000
|
unkown
|
page read and write
|
|
|
|
C600000
|
unkown
|
page read and write
|
|
|
|
5810000
|
unkown
|
page read and write
|
|
|
|
21B76300000
|
unkown
|
page read and write
|
|
|
|
B7E0000
|
unkown
|
page read and write
|
|
|
|
11D6A400000
|
unkown image
|
page readonly
|
|
|
|
7FF53FB4F000
|
unkown image
|
page readonly
|
|
|
|
2482FA13000
|
unkown
|
page read and write
|
|
|
|
8B90000
|
stack
|
page read and write
|
|
|
|
BB49000
|
unkown image
|
page read and write
|
|
|
|
11D6AF61000
|
unkown
|
page read and write
|
|
|
|
11D6A298000
|
unkown
|
page read and write
|
|
|
|
8D40000
|
unkown
|
page read and write
|
|
|
|
CE26000
|
unkown
|
page read and write
|
|
|
|
21B75AA7000
|
unkown
|
page read and write
|
|
|
|
21B75A57000
|
unkown
|
page read and write
|
|
|
|
C3C0000
|
unkown
|
page read and write
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
C260000
|
unkown
|
page read and write
|
|
|
|
A76E000
|
stack
|
page read and write
|
|
|
|
2B25000
|
unkown image
|
page readonly
|
|
|
|
21B75A3C000
|
unkown
|
page read and write
|
|
|
|
F6BC6FE000
|
stack
|
page read and write
|
|
|
|
7FF5E3507000
|
unkown image
|
page readonly
|
|
|
|
286E000
|
unkown image
|
page readonly
|
|
|
|
B455000
|
unkown
|
page read and write
|
|
|
|
919F000
|
stack
|
page read and write
|
|
|
|
C3B0000
|
unkown
|
page read and write
|
|
|
|
8A80000
|
stack
|
page read and write
|
|
|
|
7FF5E3553000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECE18000
|
unkown image
|
page readonly
|
|
|
|
11D6A213000
|
unkown
|
page read and write
|
|
|
|
4FA0000
|
unkown image
|
page readonly
|
|
|
|
7DF54B160000
|
unkown image
|
page readonly
|
|
|
|
B9C0000
|
unkown
|
page read and write
|
|
|
|
AAEF000
|
stack
|
page read and write
|
|
|
|
7FF5D6956000
|
unkown image
|
page readonly
|
|
|
|
1CFDA1A8000
|
heap default
|
page read and write
|
|
|
|
1CFC384D000
|
unkown
|
page read and write
|
|
|
|
7FF53F628000
|
unkown image
|
page readonly
|
|
|
|
2AA9000
|
unkown image
|
page readonly
|
|
|
|
DDDF000
|
unkown image
|
page readonly
|
|
|
|
B300000
|
unkown
|
page read and write
|
|
|
|
B700000
|
unkown
|
page read and write
|
|
|
|
2A56000
|
unkown image
|
page readonly
|
|
|
|
8B10000
|
stack
|
page execute read
|
|
|
|
7FF59531F000
|
unkown image
|
page readonly
|
|
|
|
1CFDA070000
|
unkown
|
page read and write
|
|
|
|
28ED000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6A4C000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECB67000
|
unkown image
|
page readonly
|
|
|
|
2A64000
|
unkown image
|
page readonly
|
|
|
|
27E0000
|
unkown image
|
page readonly
|
|
|
|
A692000
|
unkown
|
page read and write
|
|
|
|
24D95730000
|
unkown image
|
page write copy
|
|
|
|
7FF544E5C000
|
unkown image
|
page readonly
|
|
|
|
7DF54B152000
|
unkown image
|
page readonly
|
|
|
|
28D7000
|
unkown image
|
page readonly
|
|
|
|
BA80000
|
unkown
|
page read and write
|
|
|
|
B5A4000
|
unkown
|
page read and write
|
|
|
|
4F03000
|
heap private
|
page read and write
|
|
|
|
C390000
|
unkown
|
page read and write
|
|
|
|
7DF453310000
|
unkown image
|
page readonly
|
|
|
|
7DF5F8F12000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFC54000
|
unkown image
|
page readonly
|
|
|
|
91E3000
|
unkown
|
page read and write
|
|
|
|
8D50000
|
unkown
|
page read and write
|
|
|
|
B9A0000
|
unkown
|
page read and write
|
|
|
|
2603000
|
unkown image
|
page readonly
|
|
|
|
DDD9000
|
unkown image
|
page readonly
|
|
|
|
7DF59B660000
|
unkown image
|
page readonly
|
|
|
|
7DF54B142000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A63000
|
unkown
|
page read and write
|
|
|
|
293C000
|
unkown image
|
page readonly
|
|
|
|
21B76393000
|
unkown
|
page read and write
|
|
|
|
A6E4000
|
unkown
|
page read and write
|
|
|
|
C340000
|
unkown
|
page read and write
|
|
|
|
2605000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6B2B000
|
unkown image
|
page readonly
|
|
|
|
B980000
|
unkown
|
page read and write
|
|
|
|
8D50000
|
unkown
|
page read and write
|
|
|
|
688627E000
|
stack
|
page read and write
|
|
|
|
8D60000
|
unkown
|
page read and write
|
|
|
|
4ED0000
|
unkown image
|
page read and write
|
|
|
|
7FF4FFDCE000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6818000
|
unkown image
|
page readonly
|
|
|
|
7190000
|
unkown
|
page read and write
|
|
|
|
B8B0000
|
unkown
|
page read and write
|
|
|
|
7FF585B9F000
|
unkown image
|
page readonly
|
|
|
|
BA90000
|
unkown
|
page read and write
|
|
|
|
B8C0000
|
unkown
|
page read and write
|
|
|
|
7FF585C9A000
|
unkown image
|
page readonly
|
|
|
|
BB79000
|
unkown image
|
page read and write
|
|
|
|
21B76202000
|
unkown
|
page read and write
|
|
|
|
2922000
|
unkown image
|
page readonly
|
|
|
|
BA40000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD2A000
|
unkown image
|
page readonly
|
|
|
|
7FF585BC4000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFB03000
|
unkown image
|
page readonly
|
|
|
|
A59E000
|
unkown
|
page read and write
|
|
|
|
5840000
|
unkown image
|
page readonly
|
|
|
|
AF2C000
|
unkown
|
page read and write
|
|
|
|
4FB0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFC8D000
|
unkown image
|
page readonly
|
|
|
|
24D94FA0000
|
unkown image
|
page readonly
|
|
|
|
BAC0000
|
unkown
|
page read and write
|
|
|
|
28AE000
|
unkown image
|
page readonly
|
|
|
|
1CFC3891000
|
unkown
|
page read and write
|
|
|
|
AF46000
|
unkown
|
page read and write
|
|
|
|
217E0FF0000
|
unkown image
|
page readonly
|
|
|
|
8B80000
|
stack
|
page read and write
|
|
|
|
B810000
|
unkown
|
page read and write
|
|
|
|
C4C0000
|
unkown
|
page read and write
|
|
|
|
905F000
|
stack
|
page read and write
|
|
|
|
1C2A5000000
|
unkown
|
page read and write
|
|
|
|
FF1D0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFA9E000
|
unkown image
|
page readonly
|
|
|
|
C340000
|
unkown
|
page read and write
|
|
|
|
B5A4000
|
unkown
|
page read and write
|
|
|
|
24D95088000
|
unkown
|
page read and write
|
|
|
|
21B75B13000
|
unkown
|
page read and write
|
|
|
|
7FF4ECC6D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E35FB000
|
unkown image
|
page readonly
|
|
|
|
B053000
|
unkown
|
page read and write
|
|
|
|
28FCF850000
|
heap default
|
page read and write
|
|
|
|
7DF5FBBA0000
|
unkown image
|
page readonly
|
|
|
|
2A91000
|
unkown image
|
page readonly
|
|
|
|
14FD1FA000
|
stack
|
page read and write
|
|
|
|
4C27E9B000
|
unkown
|
page read and write
|
|
|
|
1C2A5113000
|
unkown
|
page read and write
|
|
|
|
A5C9000
|
unkown
|
page read and write
|
|
|
|
217E0B7B000
|
heap default
|
page read and write
|
|
|
|
24D94F40000
|
unkown image
|
page readonly
|
|
|
|
7FF544F4B000
|
unkown image
|
page readonly
|
|
|
|
B6C3000
|
unkown
|
page read and write
|
|
|
|
B058000
|
unkown
|
page read and write
|
|
|
|
7FF585D08000
|
unkown image
|
page readonly
|
|
|
|
7DF528232000
|
unkown image
|
page readonly
|
|
|
|
FFBFEFD000
|
stack
|
page read and write
|
|
|
|
B8B0000
|
unkown
|
page read and write
|
|
|
|
8A60000
|
stack
|
page read and write
|
|
|
|
4EF0000
|
unkown
|
page execute read
|
|
|
|
A4F0000
|
unkown
|
page read and write
|
|
|
|
B830000
|
unkown
|
page read and write
|
|
|
|
DE44000
|
unkown
|
page read and write
|
|
|
|
4F60000
|
unkown
|
page execute read
|
|
|
|
11D6A918000
|
unkown
|
page read and write
|
|
|
|
7DF5AAC22000
|
unkown image
|
page readonly
|
|
|
|
ADC4000
|
unkown
|
page read and write
|
|
|
|
11D6F690000
|
unkown
|
page read and write
|
|
|
|
BA90000
|
unkown
|
page read and write
|
|
|
|
AD8C000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
unkown image
|
page readonly
|
|
|
|
B303000
|
unkown
|
page read and write
|
|
|
|
21B7639A000
|
unkown
|
page read and write
|
|
|
|
BAC0000
|
unkown
|
page read and write
|
|
|
|
2A1A000
|
unkown image
|
page readonly
|
|
|
|
217E09B0000
|
unkown image
|
page read and write
|
|
|
|
C80D000
|
unkown
|
page read and write
|
|
|
|
28F3000
|
unkown image
|
page readonly
|
|
|
|
7FF512879000
|
unkown image
|
page readonly
|
|
|
|
C3A0000
|
unkown
|
page read and write
|
|
|
|
B7E0000
|
unkown
|
page read and write
|
|
|
|
24830060000
|
unkown image
|
page readonly
|
|
|
|
2875000
|
unkown image
|
page readonly
|
|
|
|
AAF0000
|
unkown image
|
page readonly
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
5830000
|
heap private
|
page read and write
|
|
|
|
11D6F6B4000
|
unkown
|
page read and write
|
|
|
|
28FCFB02000
|
unkown
|
page read and write
|
|
|
|
7DF555452000
|
unkown image
|
page readonly
|
|
|
|
1CFDA330000
|
unkown
|
page read and write
|
|
|
|
21B76361000
|
unkown
|
page read and write
|
|
|
|
CC9F000
|
stack
|
page read and write
|
|
|
|
38596BA000
|
unkown
|
page read and write
|
|
|
|
CDE0000
|
unkown
|
page read and write
|
|
|
|
DE35000
|
unkown
|
page read and write
|
|
|
|
7FF53FB4F000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFDDB000
|
unkown image
|
page readonly
|
|
|
|
B9B0000
|
unkown
|
page read and write
|
|
|
|
8F5D000
|
stack
|
page read and write
|
|
|
|
4F00000
|
heap private
|
page read and write
|
|
|
|
BA20000
|
unkown
|
page read and write
|
|
|
|
7FF585D0F000
|
unkown image
|
page readonly
|
|
|
|
2B1B000
|
unkown image
|
page readonly
|
|
|
|
C400000
|
unkown
|
page read and write
|
|
|
|
C730000
|
unkown
|
page read and write
|
|
|
|
7FF595304000
|
unkown image
|
page readonly
|
|
|
|
4F70000
|
unkown image
|
page readonly
|
|
|
|
AC42000
|
unkown
|
page read and write
|
|
|
|
2636000
|
unkown image
|
page readonly
|
|
|
|
A5C9000
|
unkown
|
page read and write
|
|
|
|
2482FA67000
|
unkown
|
page read and write
|
|
|
|
8DC0000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDAE000
|
unkown image
|
page readonly
|
|
|
|
B2F2000
|
unkown
|
page read and write
|
|
|
|
7FF544F20000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3308000
|
unkown image
|
page readonly
|
|
|
|
7FF544E43000
|
unkown image
|
page readonly
|
|
|
|
B2F6000
|
unkown
|
page read and write
|
|
|
|
7FF4ECE5D000
|
unkown image
|
page readonly
|
|
|
|
B9D0000
|
unkown
|
page read and write
|
|
|
|
7FF4FF990000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6A83000
|
unkown image
|
page readonly
|
|
|
|
7FF5950DC000
|
unkown image
|
page readonly
|
|
|
|
21B76361000
|
unkown
|
page read and write
|
|
|
|
7FF53FA5C000
|
unkown image
|
page readonly
|
|
|
|
FF1D2000
|
unkown image
|
page readonly
|
|
|
|
AD08000
|
unkown
|
page read and write
|
|
|
|
286E000
|
unkown image
|
page readonly
|
|
|
|
B4F7000
|
unkown
|
page read and write
|
|
|
|
2ABD000
|
unkown image
|
page readonly
|
|
|
|
11D6A919000
|
unkown
|
page read and write
|
|
|
|
21B76190000
|
unkown image
|
page read and write
|
|
|
|
217E0B81000
|
unkown
|
page read and write
|
|
|
|
21B76362000
|
unkown
|
page read and write
|
|
|
|
FFBFF7F000
|
stack
|
page read and write
|
|
|
|
11D6FADA000
|
unkown
|
page read and write
|
|
|
|
7FF5952D8000
|
unkown image
|
page readonly
|
|
|
|
B4AD000
|
unkown
|
page read and write
|
|
|
|
B8E0000
|
unkown
|
page read and write
|
|
|
|
7FF544F3B000
|
unkown image
|
page readonly
|
|
|
|
7FF5E32C6000
|
unkown image
|
page readonly
|
|
|
|
A610000
|
unkown
|
page read and write
|
|
|
|
7DF502760000
|
unkown image
|
page readonly
|
|
|
|
C720000
|
unkown
|
page read and write
|
|
|
|
7FF5E5B0A000
|
unkown image
|
page readonly
|
|
|
|
5830000
|
heap private
|
page read and write
|
|
|
|
4E38000
|
unkown
|
page read and write
|
|
|
|
21B76386000
|
unkown
|
page read and write
|
|
|
|
CA8A000
|
stack
|
page read and write
|
|
|
|
8BB1B7C000
|
stack
|
page read and write
|
|
|
|
27E0000
|
unkown image
|
page readonly
|
|
|
|
2953000
|
unkown image
|
page readonly
|
|
|
|
21B7638B000
|
unkown
|
page read and write
|
|
|
|
A692000
|
unkown
|
page read and write
|
|
|
|
ACC6000
|
unkown
|
page read and write
|
|
|
|
DE10000
|
unkown
|
page read and write
|
|
|
|
CDE0000
|
unkown
|
page read and write
|
|
|
|
7DF400620000
|
unkown image
|
page readonly
|
|
|
|
AF00000
|
unkown
|
page read and write
|
|
|
|
B850000
|
unkown
|
page read and write
|
|
|
|
B2F6000
|
unkown
|
page read and write
|
|
|
|
21B763C2000
|
unkown
|
page read and write
|
|
|
|
8AA0000
|
stack
|
page read and write
|
|
|
|
7FF5E61D3000
|
unkown image
|
page readonly
|
|
|
|
7FF535785000
|
unkown image
|
page readonly
|
|
|
|
AE69000
|
unkown
|
page read and write
|
|
|
|
4FE0000
|
unkown
|
page read and write
|
|
|
|
7DF5F8F12000
|
unkown image
|
page readonly
|
|
|
|
8A70000
|
stack
|
page read and write
|
|
|
|
CE26000
|
unkown
|
page read and write
|
|
|
|
7FF53582D000
|
unkown image
|
page readonly
|
|
|
|
7FF53F8ED000
|
unkown image
|
page readonly
|
|
|
|
21B76393000
|
unkown
|
page read and write
|
|
|
|
4EF0000
|
unkown
|
page execute read
|
|
|
|
C290000
|
unkown
|
page read and write
|
|
|
|
21B75A49000
|
unkown
|
page read and write
|
|
|
|
BA30000
|
unkown
|
page read and write
|
|
|
|
2875000
|
unkown image
|
page readonly
|
|
|
|
7FF5950B2000
|
unkown image
|
page readonly
|
|
|
|
2A2D000
|
unkown image
|
page readonly
|
|
|
|
2A91000
|
unkown image
|
page readonly
|
|
|
|
909D000
|
stack
|
page read and write
|
|
|
|
2A9C000
|
unkown image
|
page readonly
|
|
|
|
B8F0000
|
unkown
|
page read and write
|
|
|
|
4FC0000
|
unkown
|
page read and write
|
|
|
|
11D6A256000
|
unkown
|
page read and write
|
|
|
|
7FF534FF4000
|
unkown image
|
page readonly
|
|
|
|
B3A3000
|
unkown
|
page read and write
|
|
|
|
7FF5D6B0E000
|
unkown image
|
page readonly
|
|
|
|
DE26000
|
unkown
|
page read and write
|
|
|
|
7FF595202000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECD8D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E2E5D000
|
unkown image
|
page readonly
|
|
|
|
B960000
|
unkown
|
page read and write
|
|
|
|
4FD6000
|
heap default
|
page read and write
|
|
|
|
1CFDA211000
|
unkown
|
page read and write
|
|
|
|
B555000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFC2F000
|
unkown image
|
page readonly
|
|
|
|
8BDD000
|
stack
|
page read and write
|
|
|
|
B970000
|
unkown
|
page read and write
|
|
|
|
4E38000
|
unkown
|
page read and write
|
|
|
|
BAF7000
|
unkown image
|
page read and write
|
|
|
|
1CFDA211000
|
unkown
|
page read and write
|
|
|
|
5171000
|
heap default
|
page read and write
|
|
|
|
4F00000
|
heap private
|
page read and write
|
|
|
|
1C2A5580000
|
unkown image
|
page readonly
|
|
|
|
7DF59B642000
|
unkown image
|
page readonly
|
|
|
|
72F000
|
unkown
|
page read and write
|
|
|
|
AC00000
|
unkown
|
page read and write
|
|
|
|
AC00000
|
unkown
|
page read and write
|
|
|
|
11D6FA61000
|
unkown
|
page read and write
|
|
|
|
5810000
|
unkown
|
page read and write
|
|
|
|
7FF59531F000
|
unkown image
|
page readonly
|
|
|
|
8AA0000
|
stack
|
page read and write
|
|
|
|
7DF59B650000
|
unkown image
|
page readonly
|
|
|
|
B2EA000
|
unkown
|
page read and write
|
|
|
|
C620000
|
unkown
|
page read and write
|
|
|
|
1CFC3D80000
|
unkown image
|
page readonly
|
|
|
|
B8F0000
|
unkown
|
page read and write
|
|
|
|
C3D0000
|
unkown
|
page read and write
|
|
|
|
AD4A000
|
unkown
|
page read and write
|
|
|
|
DE30000
|
unkown
|
page read and write
|
|
|
|
4FD0000
|
heap default
|
page read and write
|
|
|
|
5450000
|
unkown image
|
page readonly
|
|
|
|
4E3F000
|
unkown
|
page read and write
|
|
|
|
DDE8000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECE2B000
|
unkown image
|
page readonly
|
|
|
|
28C4000
|
unkown image
|
page readonly
|
|
|
|
C260000
|
unkown
|
page read and write
|
|
|
|
28FCFA3E000
|
unkown
|
page read and write
|
|
|
|
DE10000
|
unkown
|
page read and write
|
|
|
|
BB17000
|
unkown image
|
page read and write
|
|
|
|
7FF544E93000
|
unkown image
|
page readonly
|
|
|
|
DDF7000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECE5F000
|
unkown image
|
page readonly
|
|
|
|
B9B0000
|
unkown
|
page read and write
|
|
|
|
2917000
|
unkown image
|
page readonly
|
|
|
|
B840000
|
unkown
|
page read and write
|
|
|
|
A76E000
|
stack
|
page read and write
|
|
|
|
21B75930000
|
unkown image
|
page readonly
|
|
|
|
C610000
|
unkown
|
page read and write
|
|
|
|
DDBF000
|
unkown image
|
page readonly
|
|
|
|
BB3D000
|
unkown image
|
page read and write
|
|
|
|
11D6AB81000
|
unkown
|
page read and write
|
|
|
|
8B5D000
|
stack
|
page read and write
|
|
|
|
57B0000
|
unkown image
|
page readonly
|
|
|
|
8D50000
|
unkown
|
page read and write
|
|
|
|
11D6F950000
|
unkown
|
page read and write
|
|
|
|
5060000
|
unkown
|
page read and write
|
|
|
|
C660000
|
unkown
|
page read and write
|
|
|
|
24D94F90000
|
heap default
|
page read and write
|
|
|
|
2B2C000
|
unkown image
|
page readonly
|
|
|
|
11D6A200000
|
unkown
|
page read and write
|
|
|
|
7DF5AAC30000
|
unkown image
|
page readonly
|
|
|
|
14FDAFE000
|
stack
|
page read and write
|
|
|
|
21B763CD000
|
unkown
|
page read and write
|
|
|
|
21B75B02000
|
unkown
|
page read and write
|
|
|
|
21B76391000
|
unkown
|
page read and write
|
|
|
|
7FF5D69BE000
|
unkown image
|
page readonly
|
|
|
|
21B763A4000
|
unkown
|
page read and write
|
|
|
|
57D0000
|
unkown image
|
page readonly
|
|
|
|
11D6FB13000
|
unkown
|
page read and write
|
|
|
|
AD4A000
|
unkown
|
page read and write
|
|
|
|
9AB000
|
unkown
|
page read and write
|
|
|
|
1CFC3660000
|
unkown image
|
page readonly
|
|
|
|
7FF544E7D000
|
unkown image
|
page readonly
|
|
|
|
55E0000
|
unkown image
|
page readonly
|
|
|
|
B8F0000
|
unkown
|
page read and write
|
|
|
|
7DF5F8F20000
|
unkown image
|
page readonly
|
|
|
|
7FF53FA85000
|
unkown image
|
page readonly
|
|
|
|
8BB16FB000
|
stack
|
page read and write
|
|
|
|
B910000
|
unkown
|
page read and write
|
|
|
|
1F1D6A59000
|
unkown
|
page read and write
|
|
|
|
24D95013000
|
unkown
|
page read and write
|
|
|
|
8A3D000
|
stack
|
page read and write
|
|
|
|
11D6B180000
|
unkown image
|
page readonly
|
|
|
|
C470000
|
unkown
|
page read and write
|
|
|
|
B326000
|
unkown
|
page read and write
|
|
|
|
AF26000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCB8000
|
unkown image
|
page readonly
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
DE1F000
|
unkown
|
page read and write
|
|
|
|
7FF53F619000
|
unkown image
|
page readonly
|
|
|
|
B303000
|
unkown
|
page read and write
|
|
|
|
7FF53FA68000
|
unkown image
|
page readonly
|
|
|
|
28D7000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFCB0000
|
unkown image
|
page readonly
|
|
|
|
8A90000
|
stack
|
page read and write
|
|
|
|
2A37000
|
unkown image
|
page readonly
|
|
|
|
B910000
|
unkown
|
page read and write
|
|
|
|
C14D000
|
stack
|
page read and write
|
|
|
|
DFAF000
|
stack
|
page read and write
|
|
|
|
2482FA62000
|
unkown
|
page read and write
|
|
|
|
B9C0000
|
unkown
|
page read and write
|
|
|
|
C6D0000
|
unkown
|
page read and write
|
|
|
|
B990000
|
unkown
|
page read and write
|
|
|
|
C3A0000
|
unkown
|
page read and write
|
|
|
|
28CA000
|
unkown image
|
page readonly
|
|
|
|
7FF544CED000
|
unkown image
|
page readonly
|
|
|
|
2482F910000
|
unkown image
|
page read and write
|
|
|
|
AF4C000
|
unkown
|
page read and write
|
|
|
|
1F1D6900000
|
unkown image
|
page readonly
|
|
|
|
91BC000
|
unkown
|
page read and write
|
|
|
|
28FB000
|
unkown image
|
page readonly
|
|
|
|
8D70000
|
unkown
|
page read and write
|
|
|
|
8AD0000
|
stack
|
page read and write
|
|
|
|
17EAC160000
|
heap default
|
page read and write
|
|
|
|
B950000
|
unkown
|
page read and write
|
|
|
|
2482F930000
|
unkown image
|
page readonly
|
|
|
|
BB0F000
|
unkown image
|
page read and write
|
|
|
|
F983F7000
|
stack
|
page read and write
|
|
|
|
8AF0000
|
stack
|
page read and write
|
|
|
|
6C90000
|
unkown image
|
page read and write
|
|
|
|
7FF544C03000
|
unkown image
|
page readonly
|
|
|
|
21B76369000
|
unkown
|
page read and write
|
|
|
|
14FD3FB000
|
stack
|
page read and write
|
|
|
|
AC84000
|
unkown
|
page read and write
|
|
|
|
4E3F000
|
unkown
|
page read and write
|
|
|
|
17EAC213000
|
unkown
|
page read and write
|
|
|
|
8AC0000
|
stack
|
page read and write
|
|
|
|
919F000
|
stack
|
page read and write
|
|
|
|
1F1D6A57000
|
unkown
|
page read and write
|
|
|
|
AAF0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF911000
|
unkown image
|
page readonly
|
|
|
|
1007FE000
|
stack
|
page read and write
|
|
|
|
921D000
|
unkown
|
page read and write
|
|
|
|
9A7000
|
unkown
|
page read and write
|
|
|
|
28FCF800000
|
unkown image
|
page readonly
|
|
|
|
4E38000
|
unkown
|
page read and write
|
|
|
|
2953000
|
unkown image
|
page readonly
|
|
|
|
17EAC270000
|
unkown
|
page read and write
|
|
|
|
7FF5D65EF000
|
unkown image
|
page readonly
|
|
|
|
B57E000
|
unkown
|
page read and write
|
|
|
|
7FF5D68D2000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFADD000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6A58000
|
unkown image
|
page readonly
|
|
|
|
C760000
|
unkown
|
page read and write
|
|
|
|
7FF5E35C8000
|
unkown image
|
page readonly
|
|
|
|
7FF53FA43000
|
unkown image
|
page readonly
|
|
|
|
4EE0000
|
unkown
|
page read and write
|
|
|
|
5080000
|
heap default
|
page read and write
|
|
|
|
B508000
|
unkown
|
page read and write
|
|
|
|
1CFDA206000
|
unkown
|
page read and write
|
|
|
|
4C283FB000
|
stack
|
page read and write
|
|
|
|
21B7638E000
|
unkown
|
page read and write
|
|
|
|
7FF53F6B5000
|
unkown image
|
page readonly
|
|
|
|
28A6000
|
unkown image
|
page readonly
|
|
|
|
7FF5E602D000
|
unkown image
|
page readonly
|
|
|
|
11D6F698000
|
unkown
|
page read and write
|
|
|
|
21B7636D000
|
unkown
|
page read and write
|
|
|
|
4F03000
|
heap private
|
page read and write
|
|
|
|
7FF4ECCD4000
|
unkown image
|
page readonly
|
|
|
|
7FF53F3BB000
|
unkown image
|
page readonly
|
|
|
|
C430000
|
unkown
|
page read and write
|
|
|
|
7FF4FFB30000
|
unkown image
|
page readonly
|
|
|
|
C430000
|
unkown
|
page read and write
|
|
|
|
21B763A4000
|
unkown
|
page read and write
|
|
|
|
BA70000
|
unkown
|
page read and write
|
|
|
|
7FF5E61F5000
|
unkown image
|
page readonly
|
|
|
|
2A20000
|
unkown image
|
page readonly
|
|
|
|
217E0DE0000
|
heap private
|
page read and write
|
|
|
|
7FF4FFCB4000
|
unkown image
|
page readonly
|
|
|
|
B9E0000
|
unkown
|
page read and write
|
|
|
|
7FF5128FF000
|
unkown image
|
page readonly
|
|
|
|
C710000
|
unkown
|
page read and write
|
|
|
|
AAEF000
|
stack
|
page read and write
|
|
|
|
17EAC850000
|
unkown image
|
page readonly
|
|
|
|
4FD0000
|
heap default
|
page read and write
|
|
|
|
4F90000
|
heap private
|
page read and write
|
|
|
|
AC84000
|
unkown
|
page read and write
|
|
|
|
C6C0000
|
unkown
|
page read and write
|
|
|
|
50CA000
|
heap default
|
page read and write
|
|
|
|
8A70000
|
stack
|
page read and write
|
|
|
|
AEE2000
|
unkown
|
page read and write
|
|
|
|
21B76338000
|
unkown
|
page read and write
|
|
|
|
217E0B30000
|
unkown image
|
page readonly
|
|
|
|
7FF5E628F000
|
unkown image
|
page readonly
|
|
|
|
2A85000
|
unkown image
|
page readonly
|
|
|
|
2A99000
|
unkown image
|
page readonly
|
|
|
|
8AF0000
|
stack
|
page read and write
|
|
|
|
B05A000
|
unkown
|
page read and write
|
|
|
|
B326000
|
unkown
|
page read and write
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A3C000
|
unkown
|
page read and write
|
|
|
|
B053000
|
unkown
|
page read and write
|
|
|
|
A5E3000
|
unkown
|
page read and write
|
|
|
|
C750000
|
unkown
|
page read and write
|
|
|
|
7FF5445EB000
|
unkown image
|
page readonly
|
|
|
|
21B76802000
|
unkown
|
page read and write
|
|
|
|
B4AD000
|
unkown
|
page read and write
|
|
|
|
28E6000
|
unkown image
|
page readonly
|
|
|
|
21B7638E000
|
unkown
|
page read and write
|
|
|
|
CC9F000
|
stack
|
page read and write
|
|
|
|
24D95113000
|
unkown
|
page read and write
|
|
|
|
C440000
|
unkown
|
page read and write
|
|
|
|
7DF55A840000
|
unkown image
|
page readonly
|
|
|
|
57E0000
|
unkown
|
page read and write
|
|
|
|
AF2C000
|
unkown
|
page read and write
|
|
|
|
7FF4ECCC7000
|
unkown image
|
page readonly
|
|
|
|
B960000
|
unkown
|
page read and write
|
|
|
|
21B76802000
|
unkown
|
page read and write
|
|
|
|
28FCF7E0000
|
unkown image
|
page read and write
|
|
|
|
4FA0000
|
unkown image
|
page readonly
|
|
|
|
2A59000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A55000
|
unkown
|
page read and write
|
|
|
|
B9C0000
|
unkown
|
page read and write
|
|
|
|
4FD0000
|
heap default
|
page read and write
|
|
|
|
7FF5D688A000
|
unkown image
|
page readonly
|
|
|
|
CC9F000
|
stack
|
page read and write
|
|
|
|
B9E0000
|
unkown
|
page read and write
|
|
|
|
50CA000
|
heap default
|
page read and write
|
|
|
|
2A85000
|
unkown image
|
page readonly
|
|
|
|
DDB5000
|
unkown image
|
page readonly
|
|
|
|
2482F960000
|
unkown image
|
page readonly
|
|
|
|
7FF544E68000
|
unkown image
|
page readonly
|
|
|
|
8CDF000
|
stack
|
page read and write
|
|
|
|
B6A0000
|
unkown
|
page read and write
|
|
|
|
7FF544F1B000
|
unkown image
|
page readonly
|
|
|
|
55D0000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A4D000
|
unkown
|
page read and write
|
|
|
|
ACC6000
|
unkown
|
page read and write
|
|
|
|
7DF59B642000
|
unkown image
|
page readonly
|
|
|
|
2A95000
|
unkown image
|
page readonly
|
|
|
|
17EAC200000
|
unkown
|
page read and write
|
|
|
|
B420000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown
|
page execute read
|
|
|
|
3859AF9000
|
stack
|
page read and write
|
|
|
|
17EAC0F0000
|
unkown image
|
page read and write
|
|
|
|
AF00000
|
unkown
|
page read and write
|
|
|
|
BA00000
|
unkown
|
page read and write
|
|
|
|
21B75B16000
|
unkown
|
page read and write
|
|
|
|
FF1D2000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A5A000
|
unkown
|
page read and write
|
|
|
|
7DF555442000
|
unkown image
|
page readonly
|
|
|
|
BB0F000
|
unkown image
|
page read and write
|
|
|
|
11D6A7A0000
|
unkown image
|
page read and write
|
|
|
|
72F000
|
unkown
|
page read and write
|
|
|
|
17EAC170000
|
unkown image
|
page readonly
|
|
|
|
2963000
|
unkown image
|
page readonly
|
|
|
|
7FF5E35DB000
|
unkown image
|
page readonly
|
|
|
|
217E0B9F000
|
unkown
|
page read and write
|
|
|
|
C360000
|
unkown
|
page read and write
|
|
|
|
C6A0000
|
unkown image
|
page readonly
|
|
|
|
BB4D000
|
unkown image
|
page read and write
|
|
|
|
C470000
|
unkown
|
page read and write
|
|
|
|
7FF53FB20000
|
unkown image
|
page readonly
|
|
|
|
909D000
|
stack
|
page read and write
|
|
|
|
ADE8000
|
unkown
|
page read and write
|
|
|
|
A86E000
|
stack
|
page read and write
|
|
|
|
B4AD000
|
unkown
|
page read and write
|
|
|
|
C4A0000
|
unkown
|
page read and write
|
|
|
|
B08D000
|
unkown
|
page read and write
|
|
|
|
DE1B000
|
unkown
|
page read and write
|
|
|
|
282E000
|
unkown image
|
page readonly
|
|
|
|
2922000
|
unkown image
|
page readonly
|
|
|
|
7FF53F9C4000
|
unkown image
|
page readonly
|
|
|
|
7FF53F9A5000
|
unkown image
|
page readonly
|
|
|
|
1CFDA590000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFA59000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECB73000
|
unkown image
|
page readonly
|
|
|
|
293F000
|
unkown image
|
page readonly
|
|
|
|
7FF5E360F000
|
unkown image
|
page readonly
|
|
|
|
2A59000
|
unkown image
|
page readonly
|
|
|
|
7FF585D3B000
|
unkown image
|
page readonly
|
|
|
|
11D6A271000
|
unkown
|
page read and write
|
|
|
|
21B76385000
|
unkown
|
page read and write
|
|
|
|
7FF5D6A75000
|
unkown image
|
page readonly
|
|
|
|
C660000
|
unkown
|
page read and write
|
|
|
|
295B000
|
unkown image
|
page readonly
|
|
|
|
B715000
|
unkown
|
page read and write
|
|
|
|
28E6000
|
unkown image
|
page readonly
|
|
|
|
DDD9000
|
unkown image
|
page readonly
|
|
|
|
11D69FE0000
|
unkown image
|
page readonly
|
|
|
|
8D40000
|
unkown
|
page read and write
|
|
|
|
56B0000
|
unkown image
|
page readonly
|
|
|
|
8D70000
|
unkown
|
page read and write
|
|
|
|
C270000
|
unkown
|
page read and write
|
|
|
|
7FF5950E6000
|
unkown image
|
page readonly
|
|
|
|
2603000
|
unkown image
|
page readonly
|
|
|
|
11D6A800000
|
unkown
|
page read and write
|
|
|
|
21B76396000
|
unkown
|
page read and write
|
|
|
|
ABBE000
|
unkown
|
page read and write
|
|
|
|
88F0000
|
unkown
|
page execute read
|
|
|
|
893D000
|
stack
|
page read and write
|
|
|
|
7FF535793000
|
unkown image
|
page readonly
|
|
|
|
A5E3000
|
unkown
|
page read and write
|
|
|
|
28CA000
|
unkown image
|
page readonly
|
|
|
|
7FF53FAB5000
|
unkown image
|
page readonly
|
|
|
|
1087000
|
unkown image
|
page readonly
|
|
|
|
B890000
|
unkown
|
page read and write
|
|
|
|
F6BC0FE000
|
stack
|
page read and write
|
|
|
|
57A0000
|
unkown image
|
page readonly
|
|
|
|
C600000
|
unkown
|
page read and write
|
|
|
|
B3315FF000
|
stack
|
page read and write
|
|
|
|
7FF53F613000
|
unkown image
|
page readonly
|
|
|
|
7DF528242000
|
unkown image
|
page readonly
|
|
|
|
21B75AB1000
|
unkown
|
page read and write
|
|
|
|
1F1D6A70000
|
unkown
|
page read and write
|
|
|
|
5810000
|
unkown
|
page read and write
|
|
|
|
A5B1000
|
unkown
|
page read and write
|
|
|
|
5840000
|
unkown image
|
page readonly
|
|
|
|
C3B0000
|
unkown
|
page read and write
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
7DF5EC430000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A76000
|
unkown
|
page read and write
|
|
|
|
21B763B0000
|
unkown
|
page read and write
|
|
|
|
2B1B000
|
unkown image
|
page readonly
|
|
|
|
A6E4000
|
unkown
|
page read and write
|
|
|
|
2B37000
|
unkown image
|
page readonly
|
|
|
|
7FF512910000
|
unkown image
|
page readonly
|
|
|
|
DEAD000
|
stack
|
page read and write
|
|
|
|
260A000
|
unkown image
|
page readonly
|
|
|
|
8AE0000
|
stack
|
page read and write
|
|
|
|
1F1D6A62000
|
unkown
|
page read and write
|
|
|
|
7FF5E6260000
|
unkown image
|
page readonly
|
|
|
|
14FD6FA000
|
stack
|
page read and write
|
|
|
|
7FF4ECD6C000
|
unkown image
|
page readonly
|
|
|
|
2636000
|
unkown image
|
page readonly
|
|
|
|
7FF5E34E0000
|
unkown image
|
page readonly
|
|
|
|
281E000
|
unkown image
|
page readonly
|
|
|
|
11D6F9A0000
|
unkown
|
page read and write
|
|
|
|
7FF4ECD57000
|
unkown image
|
page readonly
|
|
|
|
1CFDB030000
|
unkown
|
page read and write
|
|
|
|
1F1D6A7F000
|
unkown
|
page read and write
|
|
|
|
7DF5AAC12000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFDDF000
|
unkown image
|
page readonly
|
|
|
|
C3E0000
|
unkown
|
page read and write
|
|
|
|
C640000
|
unkown
|
page read and write
|
|
|
|
4F40000
|
unkown
|
page execute read
|
|
|
|
C6A0000
|
unkown image
|
page readonly
|
|
|
|
C420000
|
unkown
|
page read and write
|
|
|
|
217E0B9F000
|
unkown
|
page read and write
|
|
|
|
B47F000
|
unkown
|
page read and write
|
|
|
|
7FF535789000
|
unkown image
|
page readonly
|
|
|
|
C3C0000
|
unkown
|
page read and write
|
|
|
|
7DF54B142000
|
unkown image
|
page readonly
|
|
|
|
7FF53FB4B000
|
unkown image
|
page readonly
|
|
|
|
DE57000
|
unkown
|
page read and write
|
|
|
|
21B76381000
|
unkown
|
page read and write
|
|
|
|
7FF5D694D000
|
unkown image
|
page readonly
|
|
|
|
55D0000
|
unkown image
|
page readonly
|
|
|
|
2AA9000
|
unkown image
|
page readonly
|
|
|
|
11D6F6C0000
|
unkown
|
page read and write
|
|
|
|
7FF4ECADF000
|
unkown image
|
page readonly
|
|
|
|
1C2A5064000
|
unkown
|
page read and write
|
|
|
|
DDD9000
|
unkown image
|
page readonly
|
|
|
|
C14D000
|
stack
|
page read and write
|
|
|
|
C770000
|
unkown
|
page read and write
|
|
|
|
A76E000
|
stack
|
page read and write
|
|
|
|
FF1D0000
|
unkown image
|
page readonly
|
|
|
|
F6BC4FD000
|
stack
|
page read and write
|
|
|
|
A86E000
|
stack
|
page read and write
|
|
|
|
4ED0000
|
unkown image
|
page read and write
|
|
|
|
B47F000
|
unkown
|
page read and write
|
|
|
|
21B7639F000
|
unkown
|
page read and write
|
|
|
|
508B000
|
heap default
|
page read and write
|
|
|
|
5171000
|
heap default
|
page read and write
|
|
|
|
B830000
|
unkown
|
page read and write
|
|
|
|
CB8F000
|
stack
|
page read and write
|
|
|
|
7FF595217000
|
unkown image
|
page readonly
|
|
|
|
DDCC000
|
unkown image
|
page readonly
|
|
|
|
91BC000
|
unkown
|
page read and write
|
|
|
|
B880000
|
unkown
|
page read and write
|
|
|
|
4E69000
|
unkown
|
page execute read
|
|
|
|
57A0000
|
unkown image
|
page readonly
|
|
|
|
7FF53579A000
|
unkown image
|
page readonly
|
|
|
|
1CFC3852000
|
unkown
|
page read and write
|
|
|
|
7FF544F16000
|
unkown image
|
page readonly
|
|
|
|
11D6FB05000
|
unkown
|
page read and write
|
|
|
|
AC42000
|
unkown
|
page read and write
|
|
|
|
DDE8000
|
unkown image
|
page readonly
|
|
|
|
AF00000
|
unkown
|
page read and write
|
|
|
|
DDE4000
|
unkown image
|
page readonly
|
|
|
|
11D6F69A000
|
unkown
|
page read and write
|
|
|
|
2482FB13000
|
unkown
|
page read and write
|
|
|
|
7FF5E3517000
|
unkown image
|
page readonly
|
|
|
|
AD4A000
|
unkown
|
page read and write
|
|
|
|
1C2A5029000
|
unkown
|
page read and write
|
|
|
|
27E7000
|
unkown image
|
page readonly
|
|
|
|
DE35000
|
unkown
|
page read and write
|
|
|
|
B13C000
|
unkown
|
page read and write
|
|
|
|
C690000
|
unkown image
|
page readonly
|
|
|
|
7FF53584F000
|
unkown image
|
page readonly
|
|
|
|
7FF53FA93000
|
unkown image
|
page readonly
|
|
|
|
A700000
|
unkown image
|
page readonly
|
|
|
|
14FD9FD000
|
stack
|
page read and write
|
|
|
|
21B7636F000
|
unkown
|
page read and write
|
|
|
|
B04E000
|
unkown
|
page read and write
|
|
|
|
7FF5D6A35000
|
unkown image
|
page readonly
|
|
|
|
C430000
|
unkown
|
page read and write
|
|
|
|
AB7C000
|
unkown
|
page read and write
|
|
|
|
11D6F580000
|
unkown
|
page read and write
|
|
|
|
CDE0000
|
unkown
|
page read and write
|
|
|
|
2B37000
|
unkown image
|
page readonly
|
|
|
|
B8C0000
|
unkown
|
page read and write
|
|
|
|
B03A000
|
unkown
|
page read and write
|
|
|
|
2B2C000
|
unkown image
|
page readonly
|
|
|
|
C6645F9000
|
stack
|
page read and write
|
|
|
|
21B7637D000
|
unkown
|
page read and write
|
|
|
|
7FF5354CF000
|
unkown image
|
page readonly
|
|
|
|
7FF5E33AD000
|
unkown image
|
page readonly
|
|
|
|
11D6F6D4000
|
unkown
|
page read and write
|
|
|
|
B16A000
|
unkown
|
page read and write
|
|
|
|
7FF5E35FE000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFDCB000
|
unkown image
|
page readonly
|
|
|
|
21B763B5000
|
unkown
|
page read and write
|
|
|
|
C6F0000
|
unkown
|
page read and write
|
|
|
|
B06A000
|
unkown
|
page read and write
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
BA30000
|
unkown
|
page read and write
|
|
|
|
DE3F000
|
unkown
|
page read and write
|
|
|
|
AF3A000
|
unkown
|
page read and write
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
8F5D000
|
stack
|
page read and write
|
|
|
|
1F1D6A2A000
|
unkown
|
page read and write
|
|
|
|
21B75A4D000
|
unkown
|
page read and write
|
|
|
|
8D60000
|
unkown
|
page read and write
|
|
|
|
BA60000
|
unkown
|
page read and write
|
|
|
|
7FF585C89000
|
unkown image
|
page readonly
|
|
|
|
1CFDA1ED000
|
unkown
|
page read and write
|
|
|
|
17EAC23C000
|
unkown
|
page read and write
|
|
|
|
8BDD000
|
stack
|
page read and write
|
|
|
|
1004FB000
|
stack
|
page read and write
|
|
|
|
905F000
|
stack
|
page read and write
|
|
|
|
A5B1000
|
unkown
|
page read and write
|
|
|
|
2A9C000
|
unkown image
|
page readonly
|
|
|
|
C730000
|
unkown
|
page read and write
|
|
|
|
1F1D6A6E000
|
unkown
|
page read and write
|
|
|
|
905F000
|
stack
|
page read and write
|
|
|
|
7FF4EC604000
|
unkown image
|
page readonly
|
|
|
|
21B76389000
|
unkown
|
page read and write
|
|
|
|
21B7638E000
|
unkown
|
page read and write
|
|
|
|
21B76800000
|
unkown
|
page read and write
|
|
|
|
BB17000
|
unkown image
|
page read and write
|
|
|
|
4E69000
|
unkown
|
page execute read
|
|
|
|
11D6FA89000
|
unkown
|
page read and write
|
|
|
|
A4F0000
|
unkown
|
page read and write
|
|
|
|
11D6AE00000
|
unkown
|
page read and write
|
|
|
|
ADE8000
|
unkown
|
page read and write
|
|
|
|
B830000
|
unkown
|
page read and write
|
|
|
|
7FF5D6B2E000
|
unkown image
|
page readonly
|
|
|
|
7FF544E57000
|
unkown image
|
page readonly
|
|
|
|
AB7C000
|
unkown
|
page read and write
|
|
|
|
DDE4000
|
unkown image
|
page readonly
|
|
|
|
292F000
|
unkown image
|
page readonly
|
|
|
|
4F95000
|
heap private
|
page read and write
|
|
|
|
5830000
|
heap private
|
page read and write
|
|
|
|
57C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5950EF000
|
unkown image
|
page readonly
|
|
|
|
1CFC3913000
|
unkown
|
page read and write
|
|
|
|
BA80000
|
unkown
|
page read and write
|
|
|
|
7FF4ECE44000
|
unkown image
|
page readonly
|
|
|
|
B300000
|
unkown
|
page read and write
|
|
|
|
11D6F6D0000
|
unkown
|
page read and write
|
|
|
|
C4D0000
|
unkown
|
page read and write
|
|
|
|
2A70000
|
unkown image
|
page readonly
|
|
|
|
ADC4000
|
unkown
|
page read and write
|
|
|
|
C760000
|
unkown
|
page read and write
|
|
|
|
260A000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A73000
|
unkown
|
page read and write
|
|
|
|
2A85000
|
unkown image
|
page readonly
|
|
|
|
7FF544F2D000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECD4C000
|
unkown image
|
page readonly
|
|
|
|
C6F0000
|
unkown
|
page read and write
|
|
|
|
7FF51284C000
|
unkown image
|
page readonly
|
|
|
|
7FF5E35F4000
|
unkown image
|
page readonly
|
|
|
|
AF2C000
|
unkown
|
page read and write
|
|
|
|
7FF5D6962000
|
unkown image
|
page readonly
|
|
|
|
11D6A919000
|
unkown
|
page read and write
|
|
|
|
B536000
|
unkown
|
page read and write
|
|
|
|
C978000
|
unkown
|
page read and write
|
|
|
|
7DF5FBB80000
|
unkown image
|
page readonly
|
|
|
|
21B76393000
|
unkown
|
page read and write
|
|
|
|
CCDE000
|
stack
|
page read and write
|
|
|
|
11D6F7F0000
|
unkown
|
page read and write
|
|
|
|
B1C7000
|
unkown
|
page read and write
|
|
|
|
7DF5F8F10000
|
unkown image
|
page readonly
|
|
|
|
4F40000
|
unkown
|
page execute read
|
|
|
|
1CFC387D000
|
unkown
|
page read and write
|
|
|
|
1CFDAFC0000
|
unkown
|
page readonly
|
|
|
|
6C90000
|
unkown image
|
page read and write
|
|
|
|
B54A000
|
unkown
|
page read and write
|
|
|
|
2AC4000
|
unkown image
|
page readonly
|
|
|
|
7FF512924000
|
unkown image
|
page readonly
|
|
|
|
C610000
|
unkown
|
page read and write
|
|
|
|
7FF5D6B1D000
|
unkown image
|
page readonly
|
|
|
|
21B75A00000
|
unkown
|
page read and write
|
|
|
|
B03A000
|
unkown
|
page read and write
|
|
|
|
B970000
|
unkown
|
page read and write
|
|
|
|
7190000
|
unkown
|
page read and write
|
|
|
|
DDDB000
|
unkown image
|
page readonly
|
|
|
|
C490000
|
unkown
|
page read and write
|
|
|
|
BA80000
|
unkown
|
page read and write
|
|
|
|
8CDF000
|
stack
|
page read and write
|
|
|
|
B930000
|
unkown
|
page read and write
|
|
|
|
7FF53F99F000
|
unkown image
|
page readonly
|
|
|
|
4FB0000
|
unkown image
|
page readonly
|
|
|
|
260A000
|
unkown image
|
page readonly
|
|
|
|
28FD0202000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCD3000
|
unkown image
|
page readonly
|
|
|
|
C670000
|
unkown
|
page read and write
|
|
|
|
2482FA29000
|
unkown
|
page read and write
|
|
|
|
21B76398000
|
unkown
|
page read and write
|
|
|
|
28FCFF90000
|
unkown image
|
page readonly
|
|
|
|
7DF55A860000
|
unkown image
|
page readonly
|
|
|
|
8DBD000
|
stack
|
page read and write
|
|
|
|
DE39000
|
unkown
|
page read and write
|
|
|
|
C4C0000
|
unkown
|
page read and write
|
|
|
|
8DD0000
|
unkown
|
page read and write
|
|
|
|
A9ED000
|
stack
|
page read and write
|
|
|
|
88E0000
|
unkown image
|
page readonly
|
|
|
|
1CFDA080000
|
unkown image
|
page readonly
|
|
|
|
28BB000
|
unkown image
|
page readonly
|
|
|
|
2936000
|
unkown image
|
page readonly
|
|
|
|
BA40000
|
unkown
|
page read and write
|
|
|
|
B3A3000
|
unkown
|
page read and write
|
|
|
|
11D6AF83000
|
unkown
|
page read and write
|
|
|
|
5790000
|
unkown
|
page read and write
|
|
|
|
C66467E000
|
stack
|
page read and write
|
|
|
|
C10F000
|
stack
|
page read and write
|
|
|
|
294C000
|
unkown image
|
page readonly
|
|
|
|
11D6A29B000
|
unkown
|
page read and write
|
|
|
|
2605000
|
unkown image
|
page readonly
|
|
|
|
DDCA000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECC2E000
|
unkown image
|
page readonly
|
|
|
|
BA70000
|
unkown
|
page read and write
|
|
|
|
7FF5853F1000
|
unkown image
|
page readonly
|
|
|
|
B800000
|
unkown
|
page read and write
|
|
|
|
8BB18F7000
|
stack
|
page read and write
|
|
|
|
7FF585595000
|
unkown image
|
page readonly
|
|
|
|
8BB119B000
|
unkown
|
page read and write
|
|
|
|
B06A000
|
unkown
|
page read and write
|
|
|
|
CDDF000
|
stack
|
page read and write
|
|
|
|
F9817B000
|
stack
|
page read and write
|
|
|
|
11D6A95A000
|
unkown
|
page read and write
|
|
|
|
BA60000
|
unkown
|
page read and write
|
|
|
|
4EE0000
|
unkown
|
page read and write
|
|
|
|
6C90000
|
unkown image
|
page read and write
|
|
|
|
4E3C000
|
unkown
|
page read and write
|
|
|
|
DE1B000
|
unkown
|
page read and write
|
|
|
|
1CFDA211000
|
unkown
|
page read and write
|
|
|
|
B056000
|
unkown
|
page read and write
|
|
|
|
8AE0000
|
stack
|
page read and write
|
|
|
|
11D6FB15000
|
unkown
|
page read and write
|
|
|
|
11D6F7F0000
|
unkown
|
page read and write
|
|
|
|
17EAC300000
|
unkown
|
page read and write
|
|
|
|
B8E0000
|
unkown
|
page read and write
|
|
|
|
DDBF000
|
unkown image
|
page readonly
|
|
|
|
4C284F7000
|
stack
|
page read and write
|
|
|
|
8AD0000
|
stack
|
page read and write
|
|
|
|
7FF5E5DC0000
|
unkown image
|
page readonly
|
|
|
|
21B76387000
|
unkown
|
page read and write
|
|
|
|
5834000
|
heap private
|
page read and write
|
|
|
|
B536000
|
unkown
|
page read and write
|
|
|
|
2ACD000
|
unkown image
|
page readonly
|
|
|
|
A5E3000
|
unkown
|
page read and write
|
|
|
|
7FF594BA0000
|
unkown image
|
page readonly
|
|
|
|
B8A0000
|
unkown
|
page read and write
|
|
|
|
14FD57E000
|
stack
|
page read and write
|
|
|
|
C978000
|
unkown
|
page read and write
|
|
|
|
7FF5D6B3D000
|
unkown image
|
page readonly
|
|
|
|
7DF5156D0000
|
unkown image
|
page readonly
|
|
|
|
28FCF980000
|
unkown
|
page read and write
|
|
|
|
7FF5E619C000
|
unkown image
|
page readonly
|
|
|
|
B9F0000
|
unkown
|
page read and write
|
|
|
|
91BC000
|
unkown
|
page read and write
|
|
|
|
B056000
|
unkown
|
page read and write
|
|
|
|
B16A000
|
unkown
|
page read and write
|
|
|
|
260A000
|
unkown image
|
page readonly
|
|
|
|
7DF5EC450000
|
unkown image
|
page readonly
|
|
|
|
921D000
|
unkown
|
page read and write
|
|
|
|
CF76000
|
unkown
|
page read and write
|
|
|
|
1CFDA2E0000
|
unkown image
|
page readonly
|
|
|
|
1F1D67D0000
|
unkown image
|
page readonly
|
|
|
|
1C2A5055000
|
unkown
|
page read and write
|
|
|
|
8BB147D000
|
stack
|
page read and write
|
|
|
|
1C2A4E90000
|
heap private
|
page read and write
|
|
|
|
B4A8000
|
unkown
|
page read and write
|
|
|
|
BB49000
|
unkown image
|
page read and write
|
|
|
|
17EAC308000
|
unkown
|
page read and write
|
|
|
|
7DF555460000
|
unkown image
|
page readonly
|
|
|
|
DDBB000
|
unkown image
|
page readonly
|
|
|
|
C350000
|
unkown
|
page read and write
|
|
|
|
17EAC110000
|
unkown image
|
page readonly
|
|
|
|
7DF5156E0000
|
unkown image
|
page readonly
|
|
|
|
7FF53FA7D000
|
unkown image
|
page readonly
|
|
|
|
DFAF000
|
stack
|
page read and write
|
|
|
|
2ABD000
|
unkown image
|
page readonly
|
|
|
|
B54A000
|
unkown
|
page read and write
|
|
|
|
88F0000
|
unkown
|
page execute read
|
|
|
|
7FF4FFC97000
|
unkown image
|
page readonly
|
|
|
|
21B7638C000
|
unkown
|
page read and write
|
|
|
|
2A20000
|
unkown image
|
page readonly
|
|
|
|
8B90000
|
stack
|
page read and write
|
|
|
|
21B76393000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown image
|
page readonly
|
|
|
|
B056000
|
unkown
|
page read and write
|
|
|
|
B1A2000
|
unkown
|
page read and write
|
|
|
|
905F000
|
stack
|
page read and write
|
|
|
|
7FF594B9B000
|
unkown image
|
page readonly
|
|
|
|
28FCFA34000
|
unkown
|
page read and write
|
|
|
|
1F1D6A40000
|
unkown
|
page read and write
|
|
|
|
4F95000
|
heap private
|
page read and write
|
|
|
|
4F9A000
|
heap private
|
page read and write
|
|
|
|
BB00000
|
unkown image
|
page read and write
|
|
|
|
B715000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
7DF5156F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6A6D000
|
unkown image
|
page readonly
|
|
|
|
7FF5121D9000
|
unkown image
|
page readonly
|
|
|
|
1CFDA0A0000
|
unkown image
|
page readonly
|
|
|
|
C440000
|
unkown
|
page read and write
|
|
|
|
AF3A000
|
unkown
|
page read and write
|
|
|
|
C4A0000
|
unkown
|
page read and write
|
|
|
|
B338000
|
unkown
|
page read and write
|
|
|
|
7FF544F4F000
|
unkown image
|
page readonly
|
|
|
|
4FE0000
|
unkown
|
page read and write
|
|
|
|
DDD0000
|
unkown image
|
page readonly
|
|
|
|
C00D000
|
stack
|
page read and write
|
|
|
|
4E3C000
|
unkown
|
page read and write
|
|
|
|
BA60000
|
unkown
|
page read and write
|
|
|
|
11D6FAAC000
|
unkown
|
page read and write
|
|
|
|
55E0000
|
unkown image
|
page readonly
|
|
|
|
11D6B160000
|
unkown image
|
page readonly
|
|
|
|
7FF585D1B000
|
unkown image
|
page readonly
|
|
|
|
7DF5AAC30000
|
unkown image
|
page readonly
|
|
|
|
21B76802000
|
unkown
|
page read and write
|
|
|
|
B990000
|
unkown
|
page read and write
|
|
|
|
B459000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
unkown image
|
page readonly
|
|
|
|
2A64000
|
unkown image
|
page readonly
|
|
|
|
D7B000
|
unkown image
|
page readonly
|
|
|
|
28C0000
|
unkown image
|
page readonly
|
|
|
|
C33D000
|
stack
|
page read and write
|
|
|
|
A700000
|
unkown image
|
page readonly
|
|
|
|
DE3F000
|
unkown
|
page read and write
|
|
|
|
B2EA000
|
unkown
|
page read and write
|
|
|
|
C740000
|
unkown
|
page read and write
|
|
|
|
4F50000
|
unkown
|
page execute read
|
|
|
|
2AA5000
|
unkown image
|
page readonly
|
|
|
|
2603000
|
unkown image
|
page readonly
|
|
|
|
B2E4000
|
unkown
|
page read and write
|
|
|
|
21B7638E000
|
unkown
|
page read and write
|
|
|
|
7FF4ECD10000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6A14000
|
unkown image
|
page readonly
|
|
|
|
B970000
|
unkown
|
page read and write
|
|
|
|
F97D8D000
|
stack
|
page read and write
|
|
|
|
1CFDA370000
|
heap private
|
page read and write
|
|
|
|
AE1E000
|
unkown
|
page read and write
|
|
|
|
B54A000
|
unkown
|
page read and write
|
|
|
|
7FF5D68DD000
|
unkown image
|
page readonly
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
4E69000
|
unkown
|
page execute read
|
|
|
|
11D6F500000
|
unkown
|
page read and write
|
|
|
|
7FF5E625B000
|
unkown image
|
page readonly
|
|
|
|
7FF544E85000
|
unkown image
|
page readonly
|
|
|
|
17EAC24D000
|
unkown
|
page read and write
|
|
|
|
21B7636D000
|
unkown
|
page read and write
|
|
|
|
8BB19FE000
|
stack
|
page read and write
|
|
|
|
BA00000
|
unkown
|
page read and write
|
|
|
|
5450000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFD15000
|
unkown image
|
page readonly
|
|
|
|
7FF53F93E000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A46000
|
unkown
|
page read and write
|
|
|
|
7FF4ECAE8000
|
unkown image
|
page readonly
|
|
|
|
8D40000
|
unkown
|
page read and write
|
|
|
|
B536000
|
unkown
|
page read and write
|
|
|
|
2A70000
|
unkown image
|
page readonly
|
|
|
|
5060000
|
unkown
|
page read and write
|
|
|
|
FF1C0000
|
unkown image
|
page readonly
|
|
|
|
11D6A273000
|
unkown
|
page read and write
|
|
|
|
CB90000
|
unkown
|
page read and write
|
|
|
|
B536000
|
unkown
|
page read and write
|
|
|
|
B880000
|
unkown
|
page read and write
|
|
|
|
1098000
|
unkown image
|
page readonly
|
|
|
|
7FF5952F0000
|
unkown image
|
page readonly
|
|
|
|
28B6000
|
unkown image
|
page readonly
|
|
|
|
A610000
|
unkown
|
page read and write
|
|
|
|
7FF544EB5000
|
unkown image
|
page readonly
|
|
|
|
C610000
|
unkown
|
page read and write
|
|
|
|
217E0B95000
|
unkown
|
page read and write
|
|
|
|
50AE000
|
heap default
|
page read and write
|
|
|
|
21B76368000
|
unkown
|
page read and write
|
|
|
|
7FF5D6B3F000
|
unkown image
|
page readonly
|
|
|
|
8A90000
|
stack
|
page read and write
|
|
|
|
7DF5EC440000
|
unkown image
|
page readonly
|
|
|
|
AB7C000
|
unkown
|
page read and write
|
|
|
|
7FF5065EE000
|
unkown image
|
page readonly
|
|
|
|
11D6A919000
|
unkown
|
page read and write
|
|
|
|
7DF555440000
|
unkown image
|
page readonly
|
|
|
|
1CFDA20A000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDDF000
|
unkown image
|
page readonly
|
|
|
|
AD08000
|
unkown
|
page read and write
|
|
|
|
C4A0000
|
unkown
|
page read and write
|
|
|
|
1098000
|
unkown image
|
page readonly
|
|
|
|
B890000
|
unkown
|
page read and write
|
|
|
|
21B76180000
|
unkown
|
page read and write
|
|
|
|
DE39000
|
unkown
|
page read and write
|
|
|
|
688667F000
|
stack
|
page read and write
|
|
|
|
C3F0000
|
unkown
|
page read and write
|
|
|
|
DE15000
|
unkown
|
page read and write
|
|
|
|
24D95029000
|
unkown
|
page read and write
|
|
|
|
28C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E624F000
|
unkown image
|
page readonly
|
|
|
|
1CFC3889000
|
unkown
|
page read and write
|
|
|
|
2A1A000
|
unkown image
|
page readonly
|
|
|
|
A610000
|
unkown
|
page read and write
|
|
|
|
AF38000
|
unkown
|
page read and write
|
|
|
|
2875000
|
unkown image
|
page readonly
|
|
|
|
B1A2000
|
unkown
|
page read and write
|
|
|
|
BAA0000
|
unkown
|
page read and write
|
|
|
|
7FF544E47000
|
unkown image
|
page readonly
|
|
|
|
C3F0000
|
unkown
|
page read and write
|
|
|
|
ADE8000
|
unkown
|
page read and write
|
|
|
|
ADC4000
|
unkown
|
page read and write
|
|
|
|
4E50000
|
unkown
|
page read and write
|
|
|
|
2A41000
|
unkown image
|
page readonly
|
|
|
|
11D6F533000
|
unkown
|
page read and write
|
|
|
|
B13C000
|
unkown
|
page read and write
|
|
|
|
286E000
|
unkown image
|
page readonly
|
|
|
|
DE2C000
|
unkown
|
page read and write
|
|
|
|
BB00000
|
unkown image
|
page read and write
|
|
|
|
21B76367000
|
unkown
|
page read and write
|
|
|
|
B294000
|
unkown
|
page read and write
|
|
|
|
7FF4ECC4E000
|
unkown image
|
page readonly
|
|
|
|
8AF0000
|
stack
|
page read and write
|
|
|
|
A692000
|
unkown
|
page read and write
|
|
|
|
11D6A959000
|
unkown
|
page read and write
|
|
|
|
B3A3000
|
unkown
|
page read and write
|
|
|
|
289D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E6274000
|
unkown image
|
page readonly
|
|
|
|
21B76385000
|
unkown
|
page read and write
|
|
|
|
CED8000
|
unkown
|
page read and write
|
|
|
|
28FCFA29000
|
unkown
|
page read and write
|
|
|
|
BA10000
|
unkown
|
page read and write
|
|
|
|
55D0000
|
unkown image
|
page readonly
|
|
|
|
7FF535820000
|
unkown image
|
page readonly
|
|
|
|
1087000
|
unkown image
|
page readonly
|
|
|
|
282B000
|
unkown image
|
page readonly
|
|
|
|
1CFC3630000
|
unkown image
|
page readonly
|
|
|
|
C3A0000
|
unkown
|
page read and write
|
|
|
|
DDC6000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6A2C000
|
unkown image
|
page readonly
|
|
|
|
1CFC384F000
|
unkown
|
page read and write
|
|
|
|
1006F7000
|
stack
|
page read and write
|
|
|
|
B8A0000
|
unkown
|
page read and write
|
|
|
|
BAFD000
|
unkown image
|
page read and write
|
|
|
|
9259000
|
unkown
|
page read and write
|
|
|
|
B860000
|
unkown
|
page read and write
|
|
|
|
C740000
|
unkown
|
page read and write
|
|
|
|
B920000
|
unkown
|
page read and write
|
|
|
|
11D6F6D0000
|
unkown
|
page read and write
|
|
|
|
4ED0000
|
unkown image
|
page read and write
|
|
|
|
8AE0000
|
stack
|
page read and write
|
|
|
|
7FF53584F000
|
unkown image
|
page readonly
|
|
|
|
7FF4EC501000
|
unkown image
|
page readonly
|
|
|
|
21B75AE0000
|
unkown
|
page read and write
|
|
|
|
282E000
|
unkown image
|
page readonly
|
|
|
|
21B76361000
|
unkown
|
page read and write
|
|
|
|
C650000
|
unkown
|
page read and write
|
|
|
|
2482F990000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECB70000
|
unkown image
|
page readonly
|
|
|
|
21B76362000
|
unkown
|
page read and write
|
|
|
|
B2E4000
|
unkown
|
page read and write
|
|
|
|
ADCE000
|
unkown
|
page read and write
|
|
|
|
7FF5E61A8000
|
unkown image
|
page readonly
|
|
|
|
2482FA5B000
|
unkown
|
page read and write
|
|
|
|
DE3B000
|
unkown
|
page read and write
|
|
|
|
B1C7000
|
unkown
|
page read and write
|
|
|
|
7FF51290B000
|
unkown image
|
page readonly
|
|
|
|
7DF528230000
|
unkown image
|
page readonly
|
|
|
|
21B76819000
|
unkown
|
page read and write
|
|
|
|
7FF5D6B3F000
|
unkown image
|
page readonly
|
|
|
|
B7C0000
|
unkown
|
page read and write
|
|
|
|
1F1D6C00000
|
unkown image
|
page readonly
|
|
|
|
7FF585D4B000
|
unkown image
|
page readonly
|
|
|
|
C6C0000
|
unkown
|
page read and write
|
|
|
|
11D6FB02000
|
unkown
|
page read and write
|
|
|
|
BA10000
|
unkown
|
page read and write
|
|
|
|
17EAC286000
|
unkown
|
page read and write
|
|
|
|
11D6B170000
|
unkown image
|
page readonly
|
|
|
|
BB3D000
|
unkown image
|
page read and write
|
|
|
|
C6A0000
|
unkown image
|
page readonly
|
|
|
|
217E09D0000
|
unkown image
|
page readonly
|
|
|
|
CF2C000
|
unkown
|
page read and write
|
|
|
|
4FD0000
|
heap default
|
page read and write
|
|
|
|
28C0000
|
unkown image
|
page readonly
|
|
|
|
11D6A276000
|
unkown
|
page read and write
|
|
|
|
21B75A9E000
|
unkown
|
page read and write
|
|
|
|
5070000
|
unkown image
|
page readonly
|
|
|
|
6C50000
|
unkown image
|
page read and write
|
|
|
|
28FCFA13000
|
unkown
|
page read and write
|
|
|
|
8AB0000
|
stack
|
page read and write
|
|
|
|
C680000
|
unkown
|
page read and write
|
|
|
|
DE57000
|
unkown
|
page read and write
|
|
|
|
2A85000
|
unkown image
|
page readonly
|
|
|
|
8D60000
|
unkown
|
page read and write
|
|
|
|
1F1D6A47000
|
unkown
|
page read and write
|
|
|
|
F6BC7FE000
|
stack
|
page read and write
|
|
|
|
B30B000
|
unkown
|
page read and write
|
|
|
|
24D95660000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECC18000
|
unkown image
|
page readonly
|
|
|
|
11D6A790000
|
unkown
|
page read and write
|
|
|
|
21B75A4E000
|
unkown
|
page read and write
|
|
|
|
7FF5D6A79000
|
unkown image
|
page readonly
|
|
|
|
C2B0000
|
unkown
|
page read and write
|
|
|
|
8B00000
|
stack
|
page read and write
|
|
|
|
4FD6000
|
heap default
|
page read and write
|
|
|
|
B1A2000
|
unkown
|
page read and write
|
|
|
|
28A1000
|
unkown image
|
page readonly
|
|
|
|
2963000
|
unkown image
|
page readonly
|
|
|
|
B0ED000
|
unkown
|
page read and write
|
|
|
|
C4F0000
|
unkown
|
page read and write
|
|
|
|
7FF4ECD67000
|
unkown image
|
page readonly
|
|
|
|
11D6AF80000
|
unkown
|
page read and write
|
|
|
|
ADCE000
|
unkown
|
page read and write
|
|
|
|
B7C0000
|
unkown
|
page read and write
|
|
|
|
28FB000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFDAB000
|
unkown image
|
page readonly
|
|
|
|
2B37000
|
unkown image
|
page readonly
|
|
|
|
B9A0000
|
unkown
|
page read and write
|
|
|
|
11D6A919000
|
unkown
|
page read and write
|
|
|
|
5830000
|
heap private
|
page read and write
|
|
|
|
5171000
|
heap default
|
page read and write
|
|
|
|
DDC6000
|
unkown image
|
page readonly
|
|
|
|
14FCF77000
|
stack
|
page read and write
|
|
|
|
DDB5000
|
unkown image
|
page readonly
|
|
|
|
11D6A95A000
|
unkown
|
page read and write
|
|
|
|
10007C000
|
unkown
|
page read and write
|
|
|
|
C290000
|
unkown
|
page read and write
|
|
|
|
21B76361000
|
unkown
|
page read and write
|
|
|
|
F6BC9FF000
|
stack
|
page read and write
|
|
|
|
88F0000
|
unkown
|
page execute read
|
|
|
|
C670000
|
unkown
|
page read and write
|
|
|
|
B4A8000
|
unkown
|
page read and write
|
|
|
|
DE48000
|
unkown
|
page read and write
|
|
|
|
21B75900000
|
heap private
|
page read and write
|
|
|
|
17EAC279000
|
unkown
|
page read and write
|
|
|
|
7FF512167000
|
unkown image
|
page readonly
|
|
|
|
1CFC3826000
|
unkown
|
page read and write
|
|
|
|
B900000
|
unkown
|
page read and write
|
|
|
|
C4B0000
|
unkown
|
page read and write
|
|
|
|
B4AD000
|
unkown
|
page read and write
|
|
|
|
1CFC3813000
|
unkown
|
page read and write
|
|
|
|
AC00000
|
unkown
|
page read and write
|
|
|
|
B13C000
|
unkown
|
page read and write
|
|
|
|
1C2A503C000
|
unkown
|
page read and write
|
|
|
|
B4F7000
|
unkown
|
page read and write
|
|
|
|
8A70000
|
stack
|
page read and write
|
|
|
|
1F1D7002000
|
unkown
|
page read and write
|
|
|
|
4FC0000
|
unkown
|
page read and write
|
|
|
|
21B76380000
|
unkown
|
page read and write
|
|
|
|
DDCC000
|
unkown image
|
page readonly
|
|
|
|
7FF5E628B000
|
unkown image
|
page readonly
|
|
|
|
C6E0000
|
unkown
|
page read and write
|
|
|
|
C4F0000
|
unkown
|
page read and write
|
|
|
|
5070000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A30000
|
unkown
|
page read and write
|
|
|
|
B4A8000
|
unkown
|
page read and write
|
|
|
|
7FF544F0F000
|
unkown image
|
page readonly
|
|
|
|
17EAC313000
|
unkown
|
page read and write
|
|
|
|
7FF53FB0F000
|
unkown image
|
page readonly
|
|
|
|
B3310FF000
|
stack
|
page read and write
|
|
|
|
7FF5E61C9000
|
unkown image
|
page readonly
|
|
|
|
2605000
|
unkown image
|
page readonly
|
|
|
|
289D000
|
unkown image
|
page readonly
|
|
|
|
4E50000
|
unkown
|
page read and write
|
|
|
|
7DF55A842000
|
unkown image
|
page readonly
|
|
|
|
4F60000
|
unkown
|
page execute read
|
|
|
|
FFBF7AC000
|
unkown
|
page read and write
|
|
|
|
7FF4ECD42000
|
unkown image
|
page readonly
|
|
|
|
B3312FB000
|
stack
|
page read and write
|
|
|
|
2A51000
|
unkown image
|
page readonly
|
|
|
|
B810000
|
unkown
|
page read and write
|
|
|
|
2A64000
|
unkown image
|
page readonly
|
|
|
|
2636000
|
unkown image
|
page readonly
|
|
|
|
B401000
|
unkown
|
page read and write
|
|
|
|
8B5D000
|
stack
|
page read and write
|
|
|
|
BAF7000
|
unkown image
|
page read and write
|
|
|
|
91A0000
|
unkown
|
page read and write
|
|
|
|
C2B0000
|
unkown
|
page read and write
|
|
|
|
C4E0000
|
unkown
|
page read and write
|
|
|
|
2922000
|
unkown image
|
page readonly
|
|
|
|
7FF4EC90F000
|
unkown image
|
page readonly
|
|
|
|
BA70000
|
unkown
|
page read and write
|
|
|
|
AD8C000
|
unkown
|
page read and write
|
|
|
|
B9C0000
|
unkown
|
page read and write
|
|
|
|
B6EA000
|
unkown
|
page read and write
|
|
|
|
7FF5E34D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5FBB90000
|
unkown image
|
page readonly
|
|
|
|
21B763A8000
|
unkown
|
page read and write
|
|
|
|
B6EA000
|
unkown
|
page read and write
|
|
|
|
8D70000
|
unkown
|
page read and write
|
|
|
|
217E0B40000
|
unkown image
|
page readonly
|
|
|
|
B840000
|
unkown
|
page read and write
|
|
|
|
7FF4FF984000
|
unkown image
|
page readonly
|
|
|
|
8A60000
|
stack
|
page read and write
|
|
|
|
FF1D2000
|
unkown image
|
page readonly
|
|
|
|
B420000
|
unkown
|
page read and write
|
|
|
|
7FF5D6A47000
|
unkown image
|
page readonly
|
|
|
|
11D6A030000
|
heap default
|
page read and write
|
|
|
|
F97D0B000
|
unkown
|
page read and write
|
|
|
|
7FF53577D000
|
unkown image
|
page readonly
|
|
|
|
C720000
|
unkown
|
page read and write
|
|
|
|
2AC4000
|
unkown image
|
page readonly
|
|
|
|
C460000
|
unkown
|
page read and write
|
|
|
|
B980000
|
unkown
|
page read and write
|
|
|
|
B508000
|
unkown
|
page read and write
|
|
|
|
21B763B5000
|
unkown
|
page read and write
|
|
|
|
A6E4000
|
unkown
|
page read and write
|
|
|
|
AEE2000
|
unkown
|
page read and write
|
|
|
|
C81B000
|
unkown
|
page read and write
|
|
|
|
4FA0000
|
unkown image
|
page readonly
|
|
|
|
11D6B070000
|
unkown
|
page read and write
|
|
|
|
217E0DF0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFB98000
|
unkown image
|
page readonly
|
|
|
|
7FF51218D000
|
unkown image
|
page readonly
|
|
|
|
AC42000
|
unkown
|
page read and write
|
|
|
|
11D6A22A000
|
unkown
|
page read and write
|
|
|
|
AF46000
|
unkown
|
page read and write
|
|
|
|
AF40000
|
unkown
|
page read and write
|
|
|
|
B08D000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
unkown image
|
page readonly
|
|
|
|
4EF0000
|
unkown
|
page execute read
|
|
|
|
9259000
|
unkown
|
page read and write
|
|
|
|
2482FA56000
|
unkown
|
page read and write
|
|
|
|
7DF5EC442000
|
unkown image
|
page readonly
|
|
|
|
DE1B000
|
unkown
|
page read and write
|
|
|
|
7FF53575D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E6248000
|
unkown image
|
page readonly
|
|
|
|
7FF51291D000
|
unkown image
|
page readonly
|
|
|
|
B950000
|
unkown
|
page read and write
|
|
|
|
21B76387000
|
unkown
|
page read and write
|
|
|
|
7FF5D6384000
|
unkown image
|
page readonly
|
|
|
|
9AB000
|
unkown
|
page read and write
|
|
|
|
7FF5E61BD000
|
unkown image
|
page readonly
|
|
|
|
7DF528250000
|
unkown image
|
page readonly
|
|
|
|
B890000
|
unkown
|
page read and write
|
|
|
|
21B763A7000
|
unkown
|
page read and write
|
|
|
|
BB4D000
|
unkown image
|
page read and write
|
|
|
|
7FF4ECCAF000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A51000
|
unkown
|
page read and write
|
|
|
|
7FF59520C000
|
unkown image
|
page readonly
|
|
|
|
21B763A8000
|
unkown
|
page read and write
|
|
|
|
4F90000
|
heap private
|
page read and write
|
|
|
|
28F3000
|
unkown image
|
page readonly
|
|
|
|
295B000
|
unkown image
|
page readonly
|
|
|
|
1CFC387D000
|
unkown
|
page read and write
|
|
|
|
FF1D0000
|
unkown image
|
page readonly
|
|
|
|
21B76819000
|
unkown
|
page read and write
|
|
|
|
AEA8000
|
unkown
|
page read and write
|
|
|
|
2A1A000
|
unkown image
|
page readonly
|
|
|
|
BB49000
|
unkown image
|
page read and write
|
|
|
|
FF1E0000
|
unkown image
|
page readonly
|
|
|
|
688657E000
|
stack
|
page read and write
|
|
|
|
C4B0000
|
unkown
|
page read and write
|
|
|
|
7DF555450000
|
unkown image
|
page readonly
|
|
|
|
24830202000
|
unkown
|
page read and write
|
|
|
|
DE35000
|
unkown
|
page read and write
|
|
|
|
1CFDA340000
|
unkown
|
page read and write
|
|
|
|
1F1D6A5C000
|
unkown
|
page read and write
|
|
|
|
11D6A918000
|
unkown
|
page read and write
|
|
|
|
B9D0000
|
unkown
|
page read and write
|
|
|
|
7DF502770000
|
unkown image
|
page readonly
|
|
|
|
C710000
|
unkown
|
page read and write
|
|
|
|
1CFDAFD0000
|
unkown
|
page read and write
|
|
|
|
11D6FAF6000
|
unkown
|
page read and write
|
|
|
|
B13C000
|
unkown
|
page read and write
|
|
|
|
7FF512883000
|
unkown image
|
page readonly
|
|
|
|
2482FA3D000
|
unkown
|
page read and write
|
|
|
|
B860000
|
unkown
|
page read and write
|
|
|
|
11D6A900000
|
unkown
|
page read and write
|
|
|
|
CB90000
|
unkown
|
page read and write
|
|
|
|
B870000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBAC000
|
unkown image
|
page readonly
|
|
|
|
8AB0000
|
stack
|
page read and write
|
|
|
|
8B10000
|
stack
|
page execute read
|
|
|
|
D7B000
|
unkown image
|
page readonly
|
|
|
|
2A99000
|
unkown image
|
page readonly
|
|
|
|
8CDF000
|
stack
|
page read and write
|
|
|
|
7DF555450000
|
unkown image
|
page readonly
|
|
|
|
8BDD000
|
stack
|
page read and write
|
|
|
|
24D94F20000
|
unkown image
|
page read and write
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
7FF5D669E000
|
unkown image
|
page readonly
|
|
|
|
C3C0000
|
unkown
|
page read and write
|
|
|
|
5450000
|
unkown image
|
page readonly
|
|
|
|
28FCF830000
|
unkown image
|
page readonly
|
|
|
|
24D94F60000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFD0D000
|
unkown image
|
page readonly
|
|
|
|
21B75A13000
|
unkown
|
page read and write
|
|
|
|
2A1A000
|
unkown image
|
page readonly
|
|
|
|
B920000
|
unkown
|
page read and write
|
|
|
|
7FF5E6256000
|
unkown image
|
page readonly
|
|
|
|
282B000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3575000
|
unkown image
|
page readonly
|
|
|
|
1CFDA2A0000
|
unkown
|
page read and write
|
|
|
|
A9ED000
|
stack
|
page read and write
|
|
|
|
B300000
|
unkown
|
page read and write
|
|
|
|
2A51000
|
unkown image
|
page readonly
|
|
|
|
DDB5000
|
unkown image
|
page readonly
|
|
|
|
1F1D69F0000
|
unkown
|
page read and write
|
|
|
|
7FF4ECB5D000
|
unkown image
|
page readonly
|
|
|
|
6D0000
|
unkown
|
page execute read
|
|
|
|
7FF4ECD99000
|
unkown image
|
page readonly
|
|
|
|
7DF59B650000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6AFF000
|
unkown image
|
page readonly
|
|
|
|
11D6F510000
|
unkown
|
page read and write
|
|
|
|
28FCFA02000
|
unkown
|
page read and write
|
|
|
|
7FF4ECA04000
|
unkown image
|
page readonly
|
|
|
|
1C2A506E000
|
unkown
|
page read and write
|
|
|
|
7FF51274D000
|
unkown image
|
page readonly
|
|
|
|
C410000
|
unkown
|
page read and write
|
|
|
|
B06A000
|
unkown
|
page read and write
|
|
|
|
260C000
|
unkown image
|
page readonly
|
|
|
|
AF40000
|
unkown
|
page read and write
|
|
|
|
DDB0000
|
unkown image
|
page readonly
|
|
|
|
1F1D67F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E627B000
|
unkown image
|
page readonly
|
|
|
|
AEA8000
|
unkown
|
page read and write
|
|
|
|
AF38000
|
unkown
|
page read and write
|
|
|
|
B7C0000
|
unkown
|
page read and write
|
|
|
|
21B76863000
|
unkown
|
page read and write
|
|
|
|
21B75A56000
|
unkown
|
page read and write
|
|
|
|
BA60000
|
unkown
|
page read and write
|
|
|
|
28FB000
|
unkown image
|
page readonly
|
|
|
|
B2F2000
|
unkown
|
page read and write
|
|
|
|
AC00000
|
unkown
|
page read and write
|
|
|
|
DE44000
|
unkown
|
page read and write
|
|
|
|
DDD5000
|
unkown image
|
page readonly
|
|
|
|
57C0000
|
unkown image
|
page readonly
|
|
|
|
FFBFDFE000
|
stack
|
page read and write
|
|
|
|
DE2C000
|
unkown
|
page read and write
|
|
|
|
C6C0000
|
unkown
|
page read and write
|
|
|
|
21B75960000
|
heap default
|
page read and write
|
|
|
|
F9827B000
|
stack
|
page read and write
|
|
|
|
7FF4ECBB0000
|
unkown image
|
page readonly
|
|
|
|
B508000
|
unkown
|
page read and write
|
|
|
|
1F1D6A85000
|
unkown
|
page read and write
|
|
|
|
DE26000
|
unkown
|
page read and write
|
|
|
|
C620000
|
unkown
|
page read and write
|
|
|
|
F6BBBFB000
|
unkown
|
page read and write
|
|
|
|
C460000
|
unkown
|
page read and write
|
|
|
|
B555000
|
unkown
|
page read and write
|
|
|
|
7FF4ECDC5000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6A8A000
|
unkown image
|
page readonly
|
|
|
|
C14D000
|
stack
|
page read and write
|
|
|
|
AB7C000
|
unkown
|
page read and write
|
|
|
|
28CA000
|
unkown image
|
page readonly
|
|
|
|
7190000
|
unkown
|
page read and write
|
|
|
|
B8E0000
|
unkown
|
page read and write
|
|
|
|
B04E000
|
unkown
|
page read and write
|
|
|
|
1CFC3829000
|
unkown
|
page read and write
|
|
|
|
4F03000
|
heap private
|
page read and write
|
|
|
|
AF2C000
|
unkown
|
page read and write
|
|
|
|
D7B000
|
unkown image
|
page readonly
|
|
|
|
7FF53FA9A000
|
unkown image
|
page readonly
|
|
|
|
B04E000
|
unkown
|
page read and write
|
|
|
|
1CFDA920000
|
unkown image
|
page readonly
|
|
|
|
B3A3000
|
unkown
|
page read and write
|
|
|
|
7FF4EC991000
|
unkown image
|
page readonly
|
|
|
|
294C000
|
unkown image
|
page readonly
|
|
|
|
9259000
|
unkown
|
page read and write
|
|
|
|
B058000
|
unkown
|
page read and write
|
|
|
|
BB4D000
|
unkown image
|
page read and write
|
|
|
|
7DF54B150000
|
unkown image
|
page readonly
|
|
|
|
B7D0000
|
unkown
|
page read and write
|
|
|
|
11D6F590000
|
unkown
|
page read and write
|
|
|
|
8AB0000
|
stack
|
page read and write
|
|
|
|
1CFC3620000
|
heap private
|
page read and write
|
|
|
|
C740000
|
unkown
|
page read and write
|
|
|
|
2ABD000
|
unkown image
|
page readonly
|
|
|
|
8A3D000
|
stack
|
page read and write
|
|
|
|
7FF4ECD0D000
|
unkown image
|
page readonly
|
|
|
|
21B75A52000
|
unkown
|
page read and write
|
|
|
|
217E0B70000
|
heap default
|
page read and write
|
|
|
|
B5CC000
|
unkown
|
page read and write
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
2872000
|
unkown image
|
page readonly
|
|
|
|
11D6F691000
|
unkown
|
page read and write
|
|
|
|
A9AD000
|
stack
|
page read and write
|
|
|
|
B300000
|
unkown
|
page read and write
|
|
|
|
7DF5AAC10000
|
unkown image
|
page readonly
|
|
|
|
DE62000
|
unkown
|
page read and write
|
|
|
|
21B763B3000
|
unkown
|
page read and write
|
|
|
|
893D000
|
stack
|
page read and write
|
|
|
|
B950000
|
unkown
|
page read and write
|
|
|
|
AF26000
|
unkown
|
page read and write
|
|
|
|
FFC007D000
|
stack
|
page read and write
|
|
|
|
7FF4ECD95000
|
unkown image
|
page readonly
|
|
|
|
21B7636D000
|
unkown
|
page read and write
|
|
|
|
21B7636F000
|
unkown
|
page read and write
|
|
|
|
AEA8000
|
unkown
|
page read and write
|
|
|
|
7FF585D4F000
|
unkown image
|
page readonly
|
|
|
|
BAFD000
|
unkown image
|
page read and write
|
|
|
|
7FF4FFD45000
|
unkown image
|
page readonly
|
|
|
|
AEE2000
|
unkown
|
page read and write
|
|
|
|
7FF4ECD20000
|
unkown image
|
page readonly
|
|
|
|
21B7638A000
|
unkown
|
page read and write
|
|
|
|
DEAD000
|
stack
|
page read and write
|
|
|
|
AD08000
|
unkown
|
page read and write
|
|
|
|
21B75990000
|
unkown
|
page read and write
|
|
|
|
56B0000
|
unkown image
|
page readonly
|
|
|
|
1CFC3846000
|
unkown
|
page read and write
|
|
|
|
C770000
|
unkown
|
page read and write
|
|
|
|
B2EA000
|
unkown
|
page read and write
|
|
|
|
8E1D000
|
stack
|
page read and write
|
|
|
|
2ACD000
|
unkown image
|
page readonly
|
|
|
|
7DF528240000
|
unkown image
|
page readonly
|
|
|
|
24D94F30000
|
heap private
|
page read and write
|
|
|
|
4F9A000
|
heap private
|
page read and write
|
|
|
|
CDDF000
|
stack
|
page read and write
|
|
|
|
7FF4FFA6A000
|
unkown image
|
page readonly
|
|
|
|
7DF5F8F00000
|
unkown image
|
page readonly
|
|
|
|
DEAD000
|
stack
|
page read and write
|
|
|
|
7DF54B152000
|
unkown image
|
page readonly
|
|
|
|
FF0C0000
|
unkown image
|
page readonly
|
|
|
|
C410000
|
unkown
|
page read and write
|
|
|
|
4E38000
|
unkown
|
page read and write
|
|
|
|
B338000
|
unkown
|
page read and write
|
|
|
|
7FF595285000
|
unkown image
|
page readonly
|
|
|
|
11D6A902000
|
unkown
|
page read and write
|
|
|
|
21B7636F000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown image
|
page readonly
|
|
|
|
11D6B4F0000
|
unkown
|
page read and write
|
|
|
|
8A60000
|
stack
|
page read and write
|
|
|
|
7FF4FFB01000
|
unkown image
|
page readonly
|
|
|
|
11D6F7F0000
|
unkown
|
page read and write
|
|
|
|
1008FF000
|
stack
|
page read and write
|
|
|
|
7FF5D6AA5000
|
unkown image
|
page readonly
|
|
|
|
1CFDA350000
|
unkown
|
page read and write
|
|
|
|
7DF426100000
|
unkown image
|
page readonly
|
|
|
|
8A70000
|
stack
|
page read and write
|
|
|
|
B960000
|
unkown
|
page read and write
|
|
|
|
7FF535816000
|
unkown image
|
page readonly
|
|
|
|
11D6FAE0000
|
unkown
|
page read and write
|
|
|
|
21B76393000
|
unkown
|
page read and write
|
|
|
|
DDDB000
|
unkown image
|
page readonly
|
|
|
|
28FCF7F0000
|
heap private
|
page read and write
|
|
|
|
C380000
|
unkown
|
page read and write
|
|
|
|
7FF4FFACA000
|
unkown image
|
page readonly
|
|
|
|
C80D000
|
unkown
|
page read and write
|
|
|
|
AEE2000
|
unkown
|
page read and write
|
|
|
|
7FF4FF99A000
|
unkown image
|
page readonly
|
|
|
|
BA80000
|
unkown
|
page read and write
|
|
|
|
B2E4000
|
unkown
|
page read and write
|
|
|
|
7FF53F91E000
|
unkown image
|
page readonly
|
|
|
|
24D95000000
|
unkown
|
page read and write
|
|
|
|
C480000
|
unkown
|
page read and write
|
|
|
|
7FF5D69B4000
|
unkown image
|
page readonly
|
|
|
|
21B76389000
|
unkown
|
page read and write
|
|
|
|
1C2A5200000
|
unkown image
|
page readonly
|
|
|
|
28F3000
|
unkown image
|
page readonly
|
|
|
|
C2E0000
|
unkown
|
page read and write
|
|
|
|
1CFDA080000
|
unkown image
|
page readonly
|
|
|
|
2B21000
|
unkown image
|
page readonly
|
|
|
|
21B758F0000
|
unkown image
|
page read and write
|
|
|
|
21B7639D000
|
unkown
|
page read and write
|
|
|
|
7DF555442000
|
unkown image
|
page readonly
|
|
|
|
B03A000
|
unkown
|
page read and write
|
|
|
|
7FF4FF9AC000
|
unkown image
|
page readonly
|
|
|
|
2482FA02000
|
unkown
|
page read and write
|
|
|
|
C3E0000
|
unkown
|
page read and write
|
|
|
|
217E0B9F000
|
unkown
|
page read and write
|
|
|
|
7FF53583E000
|
unkown image
|
page readonly
|
|
|
|
7FF585B1E000
|
unkown image
|
page readonly
|
|
|
|
21B763A2000
|
unkown
|
page read and write
|
|
|
|
B05A000
|
unkown
|
page read and write
|
|
|
|
2A41000
|
unkown image
|
page readonly
|
|
|
|
C690000
|
unkown image
|
page readonly
|
|
|
|
C6E0000
|
unkown
|
page read and write
|
|
|
|
C270000
|
unkown
|
page read and write
|
|
|
|
4F70000
|
unkown image
|
page readonly
|
|
|
|
21B75910000
|
unkown image
|
page readonly
|
|
|
|
AF26000
|
unkown
|
page read and write
|
|
|
|
CA8D000
|
stack
|
page read and write
|
|
|
|
1CFDAD80000
|
unkown
|
page read and write
|
|
|
|
B700000
|
unkown
|
page read and write
|
|
|
|
4F10000
|
unkown
|
page execute read
|
|
|
|
24D954D0000
|
unkown image
|
page readonly
|
|
|
|
C500000
|
unkown
|
page read and write
|
|
|
|
7DF5EC432000
|
unkown image
|
page readonly
|
|
|
|
1CFC3680000
|
heap default
|
page read and write
|
|
|
|
AF40000
|
unkown
|
page read and write
|
|
|
|
1CFDA1ED000
|
unkown
|
page read and write
|
|
|
|
24D952D0000
|
unkown image
|
page readonly
|
|
|
|
11D6FAD5000
|
unkown
|
page read and write
|
|
|
|
7FF59530E000
|
unkown image
|
page readonly
|
|
|
|
B04E000
|
unkown
|
page read and write
|
|
|
|
2A56000
|
unkown image
|
page readonly
|
|
|
|
28C0000
|
unkown image
|
page readonly
|
|
|
|
C650000
|
unkown
|
page read and write
|
|
|
|
7FF535808000
|
unkown image
|
page readonly
|
|
|
|
ABBE000
|
unkown
|
page read and write
|
|
|
|
7FF5445F1000
|
unkown image
|
page readonly
|
|
|
|
4F90000
|
heap private
|
page read and write
|
|
|
|
7FF4ECD53000
|
unkown image
|
page readonly
|
|
|
|
4EF0000
|
unkown
|
page execute read
|
|
|
|
11D6F6B0000
|
unkown
|
page read and write
|
|
|
|
28FB000
|
unkown image
|
page readonly
|
|
|
|
2A59000
|
unkown image
|
page readonly
|
|
|
|
DE48000
|
unkown
|
page read and write
|
|
|
|
24D950E4000
|
unkown
|
page read and write
|
|
|
|
7DF4A8AE0000
|
unkown image
|
page readonly
|
|
|
|
11D6FAF8000
|
unkown
|
page read and write
|
|
|
|
DDC6000
|
unkown image
|
page readonly
|
|
|
|
2A2D000
|
unkown image
|
page readonly
|
|
|
|
B8A0000
|
unkown
|
page read and write
|
|
|
|
260C000
|
unkown image
|
page readonly
|
|
|
|
B850000
|
unkown
|
page read and write
|
|
|
|
17EAC229000
|
unkown
|
page read and write
|
|
|
|
C730000
|
unkown
|
page read and write
|
|
|
|
11D69FE0000
|
unkown image
|
page readonly
|
|
|
|
8A60000
|
stack
|
page read and write
|
|
|
|
5770000
|
unkown
|
page read and write
|
|
|
|
CDDF000
|
stack
|
page read and write
|
|
|
|
7FF5E32B8000
|
unkown image
|
page readonly
|
|
|
|
7DF5EC442000
|
unkown image
|
page readonly
|
|
|
|
7FF535834000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF960000
|
unkown image
|
page readonly
|
|
|
|
21B75AE4000
|
unkown
|
page read and write
|
|
|
|
B420000
|
unkown
|
page read and write
|
|
|
|
AFA2000
|
unkown
|
page read and write
|
|
|
|
28FCF980000
|
unkown
|
page read and write
|
|
|
|
FF1C2000
|
unkown image
|
page readonly
|
|
|
|
3859BFC000
|
stack
|
page read and write
|
|
|
|
11D6FB05000
|
unkown
|
page read and write
|
|
|
|
2A9C000
|
unkown image
|
page readonly
|
|
|
|
B401000
|
unkown
|
page read and write
|
|
|
|
14FD8FA000
|
stack
|
page read and write
|
|
|
|
B8C0000
|
unkown
|
page read and write
|
|
|
|
4F00000
|
heap private
|
page read and write
|
|
|
|
1C2A4E80000
|
unkown image
|
page read and write
|
|
|
|
7FF5126CA000
|
unkown image
|
page readonly
|
|
|
|
282E000
|
unkown image
|
page readonly
|
|
|
|
B5CC000
|
unkown
|
page read and write
|
|
|
|
1CFC3900000
|
unkown
|
page read and write
|
|
|
|
DE26000
|
unkown
|
page read and write
|
|
|
|
21B76382000
|
unkown
|
page read and write
|
|
|
|
11D69FD0000
|
heap private
|
page read and write
|
|
|
|
C400000
|
unkown
|
page read and write
|
|
|
|
4F90000
|
heap private
|
page read and write
|
|
|
|
7FF53580F000
|
unkown image
|
page readonly
|
|
|
|
AD4A000
|
unkown
|
page read and write
|
|
|
|
7DF55A852000
|
unkown image
|
page readonly
|
|
|
|
BAC0000
|
unkown
|
page read and write
|
|
|
|
B880000
|
unkown
|
page read and write
|
|
|
|
21B75A29000
|
unkown
|
page read and write
|
|
|
|
8E1D000
|
stack
|
page read and write
|
|
|
|
7FF4FFCE7000
|
unkown image
|
page readonly
|
|
|
|
A4F0000
|
unkown
|
page read and write
|
|
|
|
C450000
|
unkown
|
page read and write
|
|
|
|
4F50000
|
unkown
|
page execute read
|
|
|
|
BB79000
|
unkown image
|
page read and write
|
|
|
|
1CFDAFB0000
|
unkown
|
page read and write
|
|
|
|
C4C0000
|
unkown
|
page read and write
|
|
|
|
B303000
|
unkown
|
page read and write
|
|
|
|
B05A000
|
unkown
|
page read and write
|
|
|
|
7FF5E3545000
|
unkown image
|
page readonly
|
|
|
|
7FF51292E000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECE1F000
|
unkown image
|
page readonly
|
|
|
|
B700000
|
unkown
|
page read and write
|
|
|
|
7FF59501D000
|
unkown image
|
page readonly
|
|
|
|
CF2C000
|
unkown
|
page read and write
|
|
|
|
B8C0000
|
unkown
|
page read and write
|
|
|
|
B4A8000
|
unkown
|
page read and write
|
|
|
|
4F95000
|
heap private
|
page read and write
|
|
|
|
B7C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E61C5000
|
unkown image
|
page readonly
|
|
|
|
7FF5E6187000
|
unkown image
|
page readonly
|
|
|
|
C4D0000
|
unkown
|
page read and write
|
|
|
|
8F1F000
|
stack
|
page read and write
|
|
|
|
7DF5F8F10000
|
unkown image
|
page readonly
|
|
|
|
57D0000
|
unkown image
|
page readonly
|
|
|
|
B0ED000
|
unkown
|
page read and write
|
|
|
|
BA50000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDBD000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFCF8000
|
unkown image
|
page readonly
|
|
|
|
C81B000
|
unkown
|
page read and write
|
|
|
|
1C2A5100000
|
unkown
|
page read and write
|
|
|
|
1F1D6A41000
|
unkown
|
page read and write
|
|
|
|
1F1D67B0000
|
unkown image
|
page read and write
|
|
|
|
8AC0000
|
stack
|
page read and write
|
|
|
|
7FF5D6A37000
|
unkown image
|
page readonly
|
|
|
|
217E0B00000
|
unkown
|
page read and write
|
|
|
|
2AA9000
|
unkown image
|
page readonly
|
|
|
|
1C2A5013000
|
unkown
|
page read and write
|
|
|
|
11D6F696000
|
unkown
|
page read and write
|
|
|
|
8DBD000
|
stack
|
page read and write
|
|
|
|
5450000
|
unkown image
|
page readonly
|
|
|
|
14FD5FF000
|
stack
|
page read and write
|
|
|
|
688677F000
|
stack
|
page read and write
|
|
|
|
B338000
|
unkown
|
page read and write
|
|
|
|
BA90000
|
unkown
|
page read and write
|
|
|
|
B5CC000
|
unkown
|
page read and write
|
|
|
|
F6BBFFB000
|
stack
|
page read and write
|
|
|
|
7FF4FFB74000
|
unkown image
|
page readonly
|
|
|
|
C710000
|
unkown
|
page read and write
|
|
|
|
8F1F000
|
stack
|
page read and write
|
|
|
|
BB79000
|
unkown image
|
page read and write
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
7FF585D4F000
|
unkown image
|
page readonly
|
|
|
|
56B0000
|
unkown image
|
page readonly
|
|
|
|
27E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E34F3000
|
unkown image
|
page readonly
|
|
|
|
7DF528240000
|
unkown image
|
page readonly
|
|
|
|
11D6A120000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFDA6000
|
unkown image
|
page readonly
|
|
|
|
14FD4FE000
|
stack
|
page read and write
|
|
|
|
21B76385000
|
unkown
|
page read and write
|
|
|
|
C450000
|
unkown
|
page read and write
|
|
|
|
1CFC3871000
|
unkown
|
page read and write
|
|
|
|
B326000
|
unkown
|
page read and write
|
|
|
|
21B76386000
|
unkown
|
page read and write
|
|
|
|
7FF53FB2D000
|
unkown image
|
page readonly
|
|
|
|
7FF585813000
|
unkown image
|
page readonly
|
|
|
|
C4E0000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown image
|
page readonly
|
|
|
|
A59E000
|
unkown
|
page read and write
|
|
|
|
5080000
|
heap default
|
page read and write
|
|
|
|
8AC0000
|
stack
|
page read and write
|
|
|
|
8D50000
|
unkown
|
page read and write
|
|
|
|
385973F000
|
stack
|
page read and write
|
|
|
|
21B7638B000
|
unkown
|
page read and write
|
|
|
|
BB49000
|
unkown image
|
page read and write
|
|
|
|
7DF5156E2000
|
unkown image
|
page readonly
|
|
|
|
BB3D000
|
unkown image
|
page read and write
|
|
|
|
1CFC3760000
|
unkown image
|
page readonly
|
|
|
|
AD8C000
|
unkown
|
page read and write
|
|
|
|
217E0DE5000
|
heap private
|
page read and write
|
|
|
|
C66414B000
|
unkown
|
page read and write
|
|
|
|
11D6A95A000
|
unkown
|
page read and write
|
|
|
|
B1A2000
|
unkown
|
page read and write
|
|
|
|
B960000
|
unkown
|
page read and write
|
|
|
|
4F10000
|
unkown
|
page execute read
|
|
|
|
1CFC3800000
|
unkown
|
page read and write
|
|
|
|
B930000
|
unkown
|
page read and write
|
|
|
|
7DF502762000
|
unkown image
|
page readonly
|
|
|
|
28F0000
|
unkown image
|
page readonly
|
|
|
|
28D7000
|
unkown image
|
page readonly
|
|
|
|
7DF59B652000
|
unkown image
|
page readonly
|
|
|
|
C270000
|
unkown
|
page read and write
|
|
|
|
21B763A8000
|
unkown
|
page read and write
|
|
|
|
BAFD000
|
unkown image
|
page read and write
|
|
|
|
BAFD000
|
unkown image
|
page read and write
|
|
|
|
909D000
|
stack
|
page read and write
|
|
|
|
C360000
|
unkown
|
page read and write
|
|
|
|
9259000
|
unkown
|
page read and write
|
|
|
|
28BB000
|
unkown image
|
page readonly
|
|
|
|
28BB000
|
unkown image
|
page readonly
|
|
|
|
7FF585C93000
|
unkown image
|
page readonly
|
|
|
|
B5A4000
|
unkown
|
page read and write
|
|
|
|
17EAC190000
|
unkown
|
page read and write
|
|
|
|
28FCFE00000
|
unkown image
|
page readonly
|
|
|
|
21B7636F000
|
unkown
|
page read and write
|
|
|
|
2A95000
|
unkown image
|
page readonly
|
|
|
|
2A8B000
|
unkown image
|
page readonly
|
|
|
|
1005FB000
|
stack
|
page read and write
|
|
|
|
50AE000
|
heap default
|
page read and write
|
|
|
|
91E3000
|
unkown
|
page read and write
|
|
|
|
7DF502760000
|
unkown image
|
page readonly
|
|
|
|
AF38000
|
unkown
|
page read and write
|
|
|
|
DDD5000
|
unkown image
|
page readonly
|
|
|
|
6885F9C000
|
unkown
|
page read and write
|
|
|
|
8F5D000
|
stack
|
page read and write
|
|
|
|
5840000
|
unkown image
|
page readonly
|
|
|
|
8AC0000
|
stack
|
page read and write
|
|
|
|
7FF4ECC73000
|
unkown image
|
page readonly
|
|
|
|
DDF7000
|
unkown image
|
page readonly
|
|
|
|
893D000
|
stack
|
page read and write
|
|
|
|
21B75910000
|
unkown image
|
page readonly
|
|
|
|
7FF53581B000
|
unkown image
|
page readonly
|
|
|
|
DDB0000
|
unkown image
|
page readonly
|
|
|
|
2872000
|
unkown image
|
page readonly
|
|
|
|
6D0000
|
unkown
|
page execute read
|
|
|
|
DDDB000
|
unkown image
|
page readonly
|
|
|
|
A5C9000
|
unkown
|
page read and write
|
|
|
|
11D6A802000
|
unkown
|
page read and write
|
|
|
|
B860000
|
unkown
|
page read and write
|
|
|
|
2A95000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECAE4000
|
unkown image
|
page readonly
|
|
|
|
AE69000
|
unkown
|
page read and write
|
|
|
|
11D6A000000
|
unkown image
|
page readonly
|
|
|
|
21B76393000
|
unkown
|
page read and write
|
|
|
|
2482FA72000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD23000
|
unkown image
|
page readonly
|
|
|
|
11D6A302000
|
unkown
|
page read and write
|
|
|
|
AB00000
|
unkown
|
page read and write
|
|
|
|
11D6B1A0000
|
unkown image
|
page readonly
|
|
|
|
11D6A110000
|
unkown image
|
page readonly
|
|
|
|
AF38000
|
unkown
|
page read and write
|
|
|
|
1CFDA201000
|
unkown
|
page read and write
|
|
|
|
DE02000
|
unkown image
|
page readonly
|
|
|
|
B8B0000
|
unkown
|
page read and write
|
|
|
|
A5E3000
|
unkown
|
page read and write
|
|
|
|
C630000
|
unkown
|
page read and write
|
|
|
|
6C70000
|
unkown image
|
page read and write
|
|
|
|
4FC0000
|
unkown
|
page read and write
|
|
|
|
28FCFA5A000
|
unkown
|
page read and write
|
|
|
|
2A41000
|
unkown image
|
page readonly
|
|
|
|
4EE0000
|
unkown
|
page read and write
|
|
|
|
C6F0000
|
unkown
|
page read and write
|
|
|
|
1C2A5102000
|
unkown
|
page read and write
|
|
|
|
DDBB000
|
unkown image
|
page readonly
|
|
|
|
2A2D000
|
unkown image
|
page readonly
|
|
|
|
AFA2000
|
unkown
|
page read and write
|
|
|
|
B54A000
|
unkown
|
page read and write
|
|
|
|
DE2A000
|
unkown
|
page read and write
|
|
|
|
7FF595263000
|
unkown image
|
page readonly
|
|
|
|
7FF512844000
|
unkown image
|
page readonly
|
|
|
|
88F0000
|
unkown
|
page execute read
|
|
|
|
7FF595255000
|
unkown image
|
page readonly
|
|
|
|
21B763CC000
|
unkown
|
page read and write
|
|
|
|
4F9A000
|
heap private
|
page read and write
|
|
|
|
7DF54B140000
|
unkown image
|
page readonly
|
|
|
|
BB0F000
|
unkown image
|
page read and write
|
|
|
|
28BB000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6B06000
|
unkown image
|
page readonly
|
|
|
|
1C2A5108000
|
unkown
|
page read and write
|
|
|
|
7FF51292B000
|
unkown image
|
page readonly
|
|
|
|
B810000
|
unkown
|
page read and write
|
|
|
|
24D95102000
|
unkown
|
page read and write
|
|
|
|
B910000
|
unkown
|
page read and write
|
|
|
|
2953000
|
unkown image
|
page readonly
|
|
|
|
7DF5EC432000
|
unkown image
|
page readonly
|
|
|
|
21B759C0000
|
unkown image
|
page readonly
|
|
|
|
DE10000
|
unkown
|
page read and write
|
|
|
|
1098000
|
unkown image
|
page readonly
|
|
|
|
4E3C000
|
unkown
|
page read and write
|
|
|
|
1CFDB030000
|
unkown
|
page read and write
|
|
|
|
B455000
|
unkown
|
page read and write
|
|
|
|
B1C7000
|
unkown
|
page read and write
|
|
|
|
A9AD000
|
stack
|
page read and write
|
|
|
|
B900000
|
unkown
|
page read and write
|
|
|
|
1CFC383C000
|
unkown
|
page read and write
|
|
|
|
8BB1A7F000
|
stack
|
page read and write
|
|
|
|
2B25000
|
unkown image
|
page readonly
|
|
|
|
7FF5952DF000
|
unkown image
|
page readonly
|
|
|
|
B7E0000
|
unkown
|
page read and write
|
|
|
|
C290000
|
unkown
|
page read and write
|
|
|
|
A8AD000
|
stack
|
page read and write
|
|
|
|
7FF585D20000
|
unkown image
|
page readonly
|
|
|
|
DDF7000
|
unkown image
|
page readonly
|
|
|
|
8AA0000
|
stack
|
page read and write
|
|
|
|
1F1D67D0000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A56000
|
unkown
|
page read and write
|
|
|
|
21B76387000
|
unkown
|
page read and write
|
|
|
|
C400000
|
unkown
|
page read and write
|
|
|
|
21B76363000
|
unkown
|
page read and write
|
|
|
|
1CFC3780000
|
unkown
|
page read and write
|
|
|
|
C420000
|
unkown
|
page read and write
|
|
|
|
BA50000
|
unkown
|
page read and write
|
|
|
|
7DF528232000
|
unkown image
|
page readonly
|
|
|
|
295B000
|
unkown image
|
page readonly
|
|
|
|
21B75A51000
|
unkown
|
page read and write
|
|
|
|
7DF59B652000
|
unkown image
|
page readonly
|
|
|
|
B08D000
|
unkown
|
page read and write
|
|
|
|
4E3F000
|
unkown
|
page read and write
|
|
|
|
7FF4FF584000
|
unkown image
|
page readonly
|
|
|
|
A692000
|
unkown
|
page read and write
|
|
|
|
1C2A506E000
|
unkown
|
page read and write
|
|
|
|
4FD6000
|
heap default
|
page read and write
|
|
|
|
8A90000
|
stack
|
page read and write
|
|
|
|
AD8C000
|
unkown
|
page read and write
|
|
|
|
72F000
|
unkown
|
page read and write
|
|
|
|
AFCD000
|
unkown
|
page read and write
|
|
|
|
7FF4ECC23000
|
unkown image
|
page readonly
|
|
|
|
B6A0000
|
unkown
|
page read and write
|
|
|
|
C450000
|
unkown
|
page read and write
|
|
|
|
2922000
|
unkown image
|
page readonly
|
|
|
|
91A0000
|
unkown
|
page read and write
|
|
|
|
24D94F40000
|
unkown image
|
page readonly
|
|
|
|
A8AD000
|
stack
|
page read and write
|
|
|
|
8DC0000
|
unkown
|
page read and write
|
|
|
|
DE3B000
|
unkown
|
page read and write
|
|
|
|
C260000
|
unkown
|
page read and write
|
|
|
|
7FF4EC938000
|
unkown image
|
page readonly
|
|
|
|
C6646F9000
|
stack
|
page read and write
|
|
|
|
2482FA79000
|
unkown
|
page read and write
|
|
|
|
24D94F70000
|
unkown image
|
page readonly
|
|
|
|
9299000
|
unkown
|
page read and write
|
|
|
|
B57E000
|
unkown
|
page read and write
|
|
|
|
B980000
|
unkown
|
page read and write
|
|
|
|
11D6F7B0000
|
unkown
|
page read and write
|
|
|
|
11D6FAF8000
|
unkown
|
page read and write
|
|
|
|
11D6A28D000
|
unkown
|
page read and write
|
|
|
|
2AA5000
|
unkown image
|
page readonly
|
|
|
|
B2EA000
|
unkown
|
page read and write
|
|
|
|
7FF53FA57000
|
unkown image
|
page readonly
|
|
|
|
BAC0000
|
unkown
|
page read and write
|
|
|
|
B930000
|
unkown
|
page read and write
|
|
|
|
11D6A010000
|
unkown image
|
page readonly
|
|
|
|
7FF544A28000
|
unkown image
|
page readonly
|
|
|
|
B8E0000
|
unkown
|
page read and write
|
|
|
|
1CFC3850000
|
unkown
|
page read and write
|
|
|
|
7FF4ECB53000
|
unkown image
|
page readonly
|
|
|
|
B7E0000
|
unkown
|
page read and write
|
|
|
|
C420000
|
unkown
|
page read and write
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
B534000
|
unkown
|
page read and write
|
|
|
|
8D60000
|
unkown
|
page read and write
|
|
|
|
1CFC3847000
|
unkown
|
page read and write
|
|
|
|
8AF0000
|
stack
|
page read and write
|
|
|
|
FFBFC7E000
|
stack
|
page read and write
|
|
|
|
B534000
|
unkown
|
page read and write
|
|
|
|
DE48000
|
unkown
|
page read and write
|
|
|
|
2963000
|
unkown image
|
page readonly
|
|
|
|
24D95802000
|
unkown
|
page read and write
|
|
|
|
AF4C000
|
unkown
|
page read and write
|
|
|
|
21B75A48000
|
unkown
|
page read and write
|
|
|
|
11D6F6C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E35E0000
|
unkown image
|
page readonly
|
|
|
|
2A64000
|
unkown image
|
page readonly
|
|
|
|
72F000
|
unkown
|
page read and write
|
|
|
|
7FF585CB5000
|
unkown image
|
page readonly
|
|
|
|
4F70000
|
unkown image
|
page readonly
|
|
|
|
2A8B000
|
unkown image
|
page readonly
|
|
|
|
DE1F000
|
unkown
|
page read and write
|
|
|
|
B9A0000
|
unkown
|
page read and write
|
|
|
|
1CFDA379000
|
heap private
|
page read and write
|
|
|
|
2AA5000
|
unkown image
|
page readonly
|
|
|
|
4ED0000
|
unkown image
|
page read and write
|
|
|
|
11D6A600000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECB83000
|
unkown image
|
page readonly
|
|
|
|
17EAC6D0000
|
unkown image
|
page readonly
|
|
|
|
CED8000
|
unkown
|
page read and write
|
|
|
|
2482FCD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E35ED000
|
unkown image
|
page readonly
|
|
|
|
4C27F9F000
|
stack
|
page read and write
|
|
|
|
7FF4FFB93000
|
unkown image
|
page readonly
|
|
|
|
17EAC140000
|
unkown image
|
page readonly
|
|
|
|
B57E000
|
unkown
|
page read and write
|
|
|
|
2936000
|
unkown image
|
page readonly
|
|
|
|
C00D000
|
stack
|
page read and write
|
|
|
|
7FF5D6A22000
|
unkown image
|
page readonly
|
|
|
|
B8D0000
|
unkown
|
page read and write
|
|
|
|
B058000
|
unkown
|
page read and write
|
|
|
|
1F1D6A7A000
|
unkown
|
page read and write
|
|
|
|
8B00000
|
stack
|
page read and write
|
|
|
|
21B75ED0000
|
unkown image
|
page readonly
|
|
|
|
21B76373000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
FF0C0000
|
unkown image
|
page readonly
|
|
|
|
BB00000
|
unkown image
|
page read and write
|
|
|
|
88E0000
|
unkown image
|
page readonly
|
|
|
|
7FF4EC923000
|
unkown image
|
page readonly
|
|
|
|
7FF585C43000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECE4B000
|
unkown image
|
page readonly
|
|
|
|
7FF585828000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECE30000
|
unkown image
|
page readonly
|
|
|
|
B0ED000
|
unkown
|
page read and write
|
|
|
|
7FF4ECC13000
|
unkown image
|
page readonly
|
|
|
|
BA90000
|
unkown
|
page read and write
|
|
|
|
B700000
|
unkown
|
page read and write
|
|
|
|
7DF4F6DD0000
|
unkown image
|
page readonly
|
|
|
|
7DF5F8F02000
|
unkown image
|
page readonly
|
|
|
|
7FF5E351D000
|
unkown image
|
page readonly
|
|
|
|
B401000
|
unkown
|
page read and write
|
|
|
|
17EAC130000
|
unkown image
|
page readonly
|
|
|
|
2A56000
|
unkown image
|
page readonly
|
|
|
|
7DF5156D2000
|
unkown image
|
page readonly
|
|
|
|
AFA2000
|
unkown
|
page read and write
|
|
|
|
7FF4EC4FB000
|
unkown image
|
page readonly
|
|
|
|
B330DFC000
|
stack
|
page read and write
|
|
|
|
B970000
|
unkown
|
page read and write
|
|
|
|
55D0000
|
unkown image
|
page readonly
|
|
|
|
7FF544A19000
|
unkown image
|
page readonly
|
|
|
|
28ED000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A00000
|
unkown
|
page read and write
|
|
|
|
28A6000
|
unkown image
|
page readonly
|
|
|
|
C4B0000
|
unkown
|
page read and write
|
|
|
|
C480000
|
unkown
|
page read and write
|
|
|
|
B6A0000
|
unkown
|
page read and write
|
|
|
|
1F1D6A64000
|
unkown
|
page read and write
|
|
|
|
7DF5AAC20000
|
unkown image
|
page readonly
|
|
|
|
FF1E0000
|
unkown image
|
page readonly
|
|
|
|
C24F000
|
stack
|
page read and write
|
|
|
|
7FF4FFAE7000
|
unkown image
|
page readonly
|
|
|
|
17EAC302000
|
unkown
|
page read and write
|
|
|
|
7FF544D9F000
|
unkown image
|
page readonly
|
|
|
|
1CFDA340000
|
unkown
|
page read and write
|
|
|
|
7DF59B660000
|
unkown image
|
page readonly
|
|
|
|
C10F000
|
stack
|
page read and write
|
|
|
|
C2E0000
|
unkown
|
page read and write
|
|
|
|
8DC0000
|
unkown
|
page read and write
|
|
|
|
21B75A4F000
|
unkown
|
page read and write
|
|
|
|
AAEF000
|
stack
|
page read and write
|
|
|
|
B4F7000
|
unkown
|
page read and write
|
|
|
|
AAEF000
|
stack
|
page read and write
|
|
|
|
217E0B96000
|
unkown
|
page read and write
|
|
|
|
11D69FC0000
|
unkown image
|
page read and write
|
|
|
|
2AC4000
|
unkown image
|
page readonly
|
|
|
|
28E6000
|
unkown image
|
page readonly
|
|
|
|
B990000
|
unkown
|
page read and write
|
|
|
|
4C27F1E000
|
stack
|
page read and write
|
|
|
|
C480000
|
unkown
|
page read and write
|
|
|
|
DDCC000
|
unkown image
|
page readonly
|
|
|
|
28FCFF80000
|
unkown image
|
page readonly
|
|
|
|
217E09D0000
|
unkown image
|
page readonly
|
|
|
|
AF40000
|
unkown
|
page read and write
|
|
|
|
1C2A4EF0000
|
heap default
|
page read and write
|
|
|
|
55E0000
|
unkown image
|
page readonly
|
|
|
|
AC84000
|
unkown
|
page read and write
|
|
|
|
C6D0000
|
unkown
|
page read and write
|
|
|
|
11D6F800000
|
unkown
|
page read and write
|
|
|
|
4F00000
|
heap private
|
page read and write
|
|
|
|
BAF7000
|
unkown image
|
page read and write
|
|
|
|
2482FED0000
|
unkown image
|
page readonly
|
|
|
|
CCDE000
|
stack
|
page read and write
|
|
|
|
293F000
|
unkown image
|
page readonly
|
|
|
|
7FF544F34000
|
unkown image
|
page readonly
|
|
|
|
8F1F000
|
stack
|
page read and write
|
|
|
|
7FF5E628F000
|
unkown image
|
page readonly
|
|
|
|
17EAC110000
|
unkown image
|
page readonly
|
|
|
|
1F1D6820000
|
heap default
|
page read and write
|
|
|
|
DE2A000
|
unkown
|
page read and write
|
|
|
|
B5CC000
|
unkown
|
page read and write
|
|
|
|
28C4000
|
unkown image
|
page readonly
|
|
|
|
91BC000
|
unkown
|
page read and write
|
|
|
|
4F40000
|
unkown
|
page execute read
|
|
|
|
1F1D6A6B000
|
unkown
|
page read and write
|
|
|
|
21B763B3000
|
unkown
|
page read and write
|
|
|
|
AAF0000
|
unkown image
|
page readonly
|
|
|
|
AE1E000
|
unkown
|
page read and write
|
|
|
|
B940000
|
unkown
|
page read and write
|
|
|
|
21B75A27000
|
unkown
|
page read and write
|
|
|
|
9A7000
|
unkown
|
page read and write
|
|
|
|
B57E000
|
unkown
|
page read and write
|
|
|
|
293C000
|
unkown image
|
page readonly
|
|
|
|
5070000
|
unkown image
|
page readonly
|
|
|
|
7FF544F3E000
|
unkown image
|
page readonly
|
|
|
|
B03A000
|
unkown
|
page read and write
|
|
|
|
7DF5156E0000
|
unkown image
|
page readonly
|
|
|
|
56B0000
|
unkown image
|
page readonly
|
|
|
|
28AE000
|
unkown image
|
page readonly
|
|
|
|
9299000
|
unkown
|
page read and write
|
|
|
|
1F1D6800000
|
unkown image
|
page readonly
|
|
|
|
C280000
|
unkown
|
page read and write
|
|
|
|
AF46000
|
unkown
|
page read and write
|
|
|
|
7FF53FB3B000
|
unkown image
|
page readonly
|
|
|
|
2ACD000
|
unkown image
|
page readonly
|
|
|
|
21B7635E000
|
unkown
|
page read and write
|
|
|
|
B715000
|
unkown
|
page read and write
|
|
|
|
AF3A000
|
unkown
|
page read and write
|
|
|
|
1C2A507A000
|
unkown
|
page read and write
|
|
|
|
7FF5357B3000
|
unkown image
|
page readonly
|
|
|
|
C350000
|
unkown
|
page read and write
|
|
|
|
B455000
|
unkown
|
page read and write
|
|
|
|
1F1D67C0000
|
heap private
|
page read and write
|
|
|
|
AE1E000
|
unkown
|
page read and write
|
|
|
|
7DF5FBB82000
|
unkown image
|
page readonly
|
|
|
|
21B75A4A000
|
unkown
|
page read and write
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
289D000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6806000
|
unkown image
|
page readonly
|
|
|
|
C640000
|
unkown
|
page read and write
|
|
|
|
2872000
|
unkown image
|
page readonly
|
|
|
|
C680000
|
unkown
|
page read and write
|
|
|
|
1CFC3610000
|
unkown image
|
page read and write
|
|
|
|
8B90000
|
stack
|
page read and write
|
|
|
|
3859B7E000
|
stack
|
page read and write
|
|
|
|
7FF4FFCA0000
|
unkown image
|
page readonly
|
|
|
|
7FF512906000
|
unkown image
|
page readonly
|
|
|
|
28B6000
|
unkown image
|
page readonly
|
|
|
|
F984FE000
|
stack
|
page read and write
|
|
|
|
21B76396000
|
unkown
|
page read and write
|
|
|
|
CA8D000
|
stack
|
page read and write
|
|
|
|
24D950CA000
|
unkown
|
page read and write
|
|
|
|
ABBE000
|
unkown
|
page read and write
|
|
|
|
11D6F760000
|
unkown
|
page read and write
|
|
|
|
1CFDA1A0000
|
heap default
|
page read and write
|
|
|
|
7FF585C7D000
|
unkown image
|
page readonly
|
|
|
|
7FF511FE9000
|
unkown image
|
page readonly
|
|
|
|
C690000
|
unkown image
|
page readonly
|
|
|
|
CB90000
|
unkown
|
page read and write
|
|
|
|
BA30000
|
unkown
|
page read and write
|
|
|
|
2B21000
|
unkown image
|
page readonly
|
|
|
|
21B76389000
|
unkown
|
page read and write
|
|
|
|
B3314FE000
|
stack
|
page read and write
|
|
|
|
A86E000
|
stack
|
page read and write
|
|
|
|
ABBE000
|
unkown
|
page read and write
|
|
|
|
BA30000
|
unkown
|
page read and write
|
|
|
|
7FF4ECB13000
|
unkown image
|
page readonly
|
|
|
|
C380000
|
unkown
|
page read and write
|
|
|
|
5834000
|
heap private
|
page read and write
|
|
|
|
8B00000
|
stack
|
page read and write
|
|
|
|
AC84000
|
unkown
|
page read and write
|
|
|
|
C410000
|
unkown
|
page read and write
|
|
|
|
1CFC3C00000
|
unkown image
|
page readonly
|
|
|
|
1CFC3902000
|
unkown
|
page read and write
|
|
|
|
1CFDA910000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFC17000
|
unkown image
|
page readonly
|
|
|
|
21B75940000
|
unkown image
|
page readonly
|
|
|
|
4F95000
|
heap private
|
page read and write
|
|
|
|
5080000
|
heap default
|
page read and write
|
|
|
|
B8B0000
|
unkown
|
page read and write
|
|
|
|
C680000
|
unkown
|
page read and write
|
|
|
|
1F1D6A42000
|
unkown
|
page read and write
|
|
|
|
B8A0000
|
unkown
|
page read and write
|
|
|
|
2A7A000
|
unkown image
|
page readonly
|
|
|
|
B850000
|
unkown
|
page read and write
|
|
|
|
A9AD000
|
stack
|
page read and write
|
|
|
|
4F40000
|
unkown
|
page execute read
|
|
|
|
B2F6000
|
unkown
|
page read and write
|
|
|
|
DE30000
|
unkown
|
page read and write
|
|
|
|
2A51000
|
unkown image
|
page readonly
|
|
|
|
10017E000
|
stack
|
page read and write
|
|
|
|
B0ED000
|
unkown
|
page read and write
|
|
|
|
1C2A4FF0000
|
unkown
|
page read and write
|
|
|
|
DDE8000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECCB5000
|
unkown image
|
page readonly
|
|
|
|
7FF59531D000
|
unkown image
|
page readonly
|
|
|
|
14FD77E000
|
stack
|
page read and write
|
|
|
|
17EAC100000
|
heap private
|
page read and write
|
|
|
|
DDDF000
|
unkown image
|
page readonly
|
|
|
|
C360000
|
unkown
|
page read and write
|
|
|
|
21B763A9000
|
unkown
|
page read and write
|
|
|
|
AE1E000
|
unkown
|
page read and write
|
|
|
|
7FF512875000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFB7D000
|
unkown image
|
page readonly
|
|
|
|
8F1F000
|
stack
|
page read and write
|
|
|
|
7FF5357B5000
|
unkown image
|
page readonly
|
|
|
|
11D6AF90000
|
unkown image
|
page read and write
|
|
|
|
2963000
|
unkown image
|
page readonly
|
|
|
|
11D6F7E0000
|
unkown
|
page read and write
|
|
|
|
8B10000
|
stack
|
page execute read
|
|
|
|
B326000
|
unkown
|
page read and write
|
|
|
|
C640000
|
unkown
|
page read and write
|
|
|
|
B940000
|
unkown
|
page read and write
|
|
|
|
2A56000
|
unkown image
|
page readonly
|
|
|
|
7DF5156D2000
|
unkown image
|
page readonly
|
|
|
|
7DF5F8F20000
|
unkown image
|
page readonly
|
|
|
|
50AE000
|
heap default
|
page read and write
|
|
|
|
7FF585D2D000
|
unkown image
|
page readonly
|
|
|
|
DDD0000
|
unkown image
|
page readonly
|
|
|
|
919F000
|
stack
|
page read and write
|
|
|
|
21B75A54000
|
unkown
|
page read and write
|
|
|
|
21B76802000
|
unkown
|
page read and write
|
|
|
|
24D950C1000
|
unkown
|
page read and write
|
|
|
|
8E1D000
|
stack
|
page read and write
|
|
|
|
7FF544F4F000
|
unkown image
|
page readonly
|
|
|
|
7FF585819000
|
unkown image
|
page readonly
|
|
|
|
21B76367000
|
unkown
|
page read and write
|
|
|
|
B053000
|
unkown
|
page read and write
|
|
|
|
B30B000
|
unkown
|
page read and write
|
|
|
|
F9807E000
|
stack
|
page read and write
|
|
|
|
C33D000
|
stack
|
page read and write
|
|
|
|
DDE4000
|
unkown image
|
page readonly
|
|
|
|
21B7636F000
|
unkown
|
page read and write
|
|
|
|
2957000
|
unkown image
|
page readonly
|
|
|
|
28C4000
|
unkown image
|
page readonly
|
|
|
|
91A0000
|
unkown
|
page read and write
|
|
|
|
5060000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page execute read
|
|
|
|
1CFC384C000
|
unkown
|
page read and write
|
|
|
|
7DF55A850000
|
unkown image
|
page readonly
|
|
|
|
B9F0000
|
unkown
|
page read and write
|
|
|
|
17EAC253000
|
unkown
|
page read and write
|
|
|
|
27E7000
|
unkown image
|
page readonly
|
|
|
|
28A6000
|
unkown image
|
page readonly
|
|
|
|
21B76050000
|
unkown image
|
page readonly
|
|
|
|
8BDD000
|
stack
|
page read and write
|
|
|
|
C3D0000
|
unkown
|
page read and write
|
|
|
|
B9D0000
|
unkown
|
page read and write
|
|
|
|
2B21000
|
unkown image
|
page readonly
|
|
|
|
1F1D6E00000
|
unkown image
|
page readonly
|
|
|
|
7DF5FBB80000
|
unkown image
|
page readonly
|
|
|
|
B870000
|
unkown
|
page read and write
|
|
|
|
24D95650000
|
unkown image
|
page readonly
|
|
|
|
21B76389000
|
unkown
|
page read and write
|
|
|
|
2482F920000
|
heap private
|
page read and write
|
|
|
|
24D9503E000
|
unkown
|
page read and write
|
|
|
|
7DF4135A0000
|
unkown image
|
page readonly
|
|
|
|
7FF585D3E000
|
unkown image
|
page readonly
|
|
|
|
4F10000
|
unkown
|
page execute read
|
|
|
|
B6C3000
|
unkown
|
page read and write
|
|
|
|
C3E0000
|
unkown
|
page read and write
|
|
|
|
24D95900000
|
unkown
|
page read and write
|
|
|
|
AF4C000
|
unkown
|
page read and write
|
|
|
|
BB4D000
|
unkown image
|
page read and write
|
|
|
|
1F1D6A74000
|
unkown
|
page read and write
|
|
|
|
FFBFCFC000
|
stack
|
page read and write
|
|
|
|
21B76385000
|
unkown
|
page read and write
|
|
|
|
292F000
|
unkown image
|
page readonly
|
|
|
|
AFCD000
|
unkown
|
page read and write
|
|
|
|
7DF502770000
|
unkown image
|
page readonly
|
|
|
|
21B76392000
|
unkown
|
page read and write
|
|
|
|
B534000
|
unkown
|
page read and write
|
|
|
|
14FDBFF000
|
stack
|
page read and write
|
|
|
|
7FF5D669A000
|
unkown image
|
page readonly
|
|
|
|
DDD0000
|
unkown image
|
page readonly
|
|
|
|
7FF544D1E000
|
unkown image
|
page readonly
|
|
|
|
AFCD000
|
unkown
|
page read and write
|
|
|
|
7FF59530B000
|
unkown image
|
page readonly
|
|
|
|
28B6000
|
unkown image
|
page readonly
|
|
|
|
B2F2000
|
unkown
|
page read and write
|
|
|
|
28B6000
|
unkown image
|
page readonly
|
|
|
|
295B000
|
unkown image
|
page readonly
|
|
|
|
8B80000
|
stack
|
page read and write
|
|
|
|
7FF5952EB000
|
unkown image
|
page readonly
|
|
|
|
4FE0000
|
unkown
|
page read and write
|
|
|
|
7FF4FFC90000
|
unkown image
|
page readonly
|
|
|
|
7DF502750000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECE3D000
|
unkown image
|
page readonly
|
|
|
|
2A8B000
|
unkown image
|
page readonly
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
B5A4000
|
unkown
|
page read and write
|
|
|
|
1CFC3A00000
|
unkown image
|
page readonly
|
|
|
|
1C2A508E000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown image
|
page readonly
|
|
|
|
921D000
|
unkown
|
page read and write
|
|
|
|
B401000
|
unkown
|
page read and write
|
|
|
|
C380000
|
unkown
|
page read and write
|
|
|
|
5770000
|
unkown
|
page read and write
|
|
|
|
B8D0000
|
unkown
|
page read and write
|
|
|
|
7FF4FF8E6000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A7B000
|
unkown
|
page read and write
|
|
|
|
7DF502762000
|
unkown image
|
page readonly
|
|
|
|
7FF585C47000
|
unkown image
|
page readonly
|
|
|
|
57C0000
|
unkown image
|
page readonly
|
|
|
|
C460000
|
unkown
|
page read and write
|
|
|
|
909D000
|
stack
|
page read and write
|
|
|
|
21B7638A000
|
unkown
|
page read and write
|
|
|
|
F6BC3FF000
|
stack
|
page read and write
|
|
|
|
B303000
|
unkown
|
page read and write
|
|
|
|
B8D0000
|
unkown
|
page read and write
|
|
|
|
B940000
|
unkown
|
page read and write
|
|
|
|
7FF595027000
|
unkown image
|
page readonly
|
|
|
|
6C70000
|
unkown image
|
page read and write
|
|
|
|
7FF512174000
|
unkown image
|
page readonly
|
|
|
|
5770000
|
unkown
|
page read and write
|
|
|
|
DE62000
|
unkown
|
page read and write
|
|
|
|
11D6A815000
|
unkown
|
page read and write
|
|
|
|
281E000
|
unkown image
|
page readonly
|
|
|
|
7FF585B13000
|
unkown image
|
page readonly
|
|
|
|
2A37000
|
unkown image
|
page readonly
|
|
|
|
8A80000
|
stack
|
page read and write
|
|
|
|
7FF5065EE000
|
unkown image
|
page readonly
|
|
|
|
4E3F000
|
unkown
|
page read and write
|
|
|
|
AE69000
|
unkown
|
page read and write
|
|
|
|
11D6A959000
|
unkown
|
page read and write
|
|
|
|
293F000
|
unkown image
|
page readonly
|
|
|
|
B05D000
|
unkown
|
page read and write
|
|
|
|
BA00000
|
unkown
|
page read and write
|
|
|
|
7FF59526A000
|
unkown image
|
page readonly
|
|
|
|
7DF55A860000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5F43000
|
unkown image
|
page readonly
|
|
|
|
7DF5F8F02000
|
unkown image
|
page readonly
|
|
|
|
8D40000
|
unkown
|
page read and write
|
|
|
|
BB79000
|
unkown image
|
page read and write
|
|
|
|
28ED000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A5F000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page execute read
|
|
|
|
2A99000
|
unkown image
|
page readonly
|
|
|
|
8AB0000
|
stack
|
page read and write
|
|
|
|
B7D0000
|
unkown
|
page read and write
|
|
|
|
11D6A23D000
|
unkown
|
page read and write
|
|
|
|
286E000
|
unkown image
|
page readonly
|
|
|
|
B7D0000
|
unkown
|
page read and write
|
|
|
|
2B25000
|
unkown image
|
page readonly
|
|
|
|
7FF5951F4000
|
unkown image
|
page readonly
|
|
|
|
ADC4000
|
unkown
|
page read and write
|
|
|
|
B9D0000
|
unkown
|
page read and write
|
|
|
|
7FF5D6B0B000
|
unkown image
|
page readonly
|
|
|
|
21B76385000
|
unkown
|
page read and write
|
|
|
|
B715000
|
unkown
|
page read and write
|
|
|
|
BAA0000
|
unkown
|
page read and write
|
|
|
|
2636000
|
unkown image
|
page readonly
|
|
|
|
7FF512769000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A13000
|
unkown
|
page read and write
|
|
|
|
7FF544A13000
|
unkown image
|
page readonly
|
|
|
|
1CFC3650000
|
unkown image
|
page readonly
|
|
|
|
4FB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5128A5000
|
unkown image
|
page readonly
|
|
|
|
7DF5F8F00000
|
unkown image
|
page readonly
|
|
|
|
294C000
|
unkown image
|
page readonly
|
|
|
|
2B2C000
|
unkown image
|
page readonly
|
|
|
|
A9AD000
|
stack
|
page read and write
|
|
|
|
B3309AC000
|
unkown
|
page read and write
|
|
|
|
C33D000
|
stack
|
page read and write
|
|
|
|
7FF544DC4000
|
unkown image
|
page readonly
|
|
|
|
C81B000
|
unkown
|
page read and write
|
|
|
|
9AB000
|
unkown
|
page read and write
|
|
|
|
27E7000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A61000
|
unkown
|
page read and write
|
|
|
|
AE69000
|
unkown
|
page read and write
|
|
|
|
A59E000
|
unkown
|
page read and write
|
|
|
|
21B76369000
|
unkown
|
page read and write
|
|
|
|
57D0000
|
unkown image
|
page readonly
|
|
|
|
7DF458710000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFDDD000
|
unkown image
|
page readonly
|
|
|
|
508B000
|
heap default
|
page read and write
|
|
|
|
DDCA000
|
unkown image
|
page readonly
|
|
|
|
7FF59519E000
|
unkown image
|
page readonly
|
|
|
|
4F20000
|
unkown
|
page execute read
|
|
|
|
C350000
|
unkown
|
page read and write
|
|
|
|
8B5D000
|
stack
|
page read and write
|
|
|
|
2AC4000
|
unkown image
|
page readonly
|
|
|
|
1CFDA1ED000
|
unkown
|
page read and write
|
|
|
|
21B7686A000
|
unkown
|
page read and write
|
|
|
|
4EE0000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
unkown image
|
page readonly
|
|
|
|
11D6FAED000
|
unkown
|
page read and write
|
|
|
|
24D950B9000
|
unkown
|
page read and write
|
|
|
|
28FCF930000
|
unkown image
|
page readonly
|
|
|
|
11D6FA0D000
|
unkown
|
page read and write
|
|
|
|
BA50000
|
unkown
|
page read and write
|
|
|
|
2A7A000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3549000
|
unkown image
|
page readonly
|
|
|
|
11D6A913000
|
unkown
|
page read and write
|
|
|
|
7FF585C57000
|
unkown image
|
page readonly
|
|
|
|
2B1B000
|
unkown image
|
page readonly
|
|
|
|
B056000
|
unkown
|
page read and write
|
|
|
|
B294000
|
unkown
|
page read and write
|
|
|
|
A5C9000
|
unkown
|
page read and write
|
|
|
|
28F3000
|
unkown image
|
page readonly
|
|
|
|
4F60000
|
unkown
|
page execute read
|
|
|
|
55E0000
|
unkown image
|
page readonly
|
|
|
|
91E3000
|
unkown
|
page read and write
|
|
|
|
7FF4ECE26000
|
unkown image
|
page readonly
|
|
|
|
21B75AC7000
|
unkown
|
page read and write
|
|
|
|
21B76389000
|
unkown
|
page read and write
|
|
|
|
11D6B190000
|
unkown image
|
page readonly
|
|
|
|
B800000
|
unkown
|
page read and write
|
|
|
|
28AE000
|
unkown image
|
page readonly
|
|
|
|
7FF53583B000
|
unkown image
|
page readonly
|
|
|
|
688647E000
|
stack
|
page read and write
|
|
|
|
57C0000
|
unkown image
|
page readonly
|
|
|
|
1CFDA790000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECE5B000
|
unkown image
|
page readonly
|
|
|
|
21B76396000
|
unkown
|
page read and write
|
|
|
|
B555000
|
unkown
|
page read and write
|
|
|
|
7FF4FF96F000
|
unkown image
|
page readonly
|
|
|
|
2ACD000
|
unkown image
|
page readonly
|
|
|
|
A59E000
|
unkown
|
page read and write
|
|
|
|
5790000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCEC000
|
unkown image
|
page readonly
|
|
|
|
21B75CD0000
|
unkown image
|
page readonly
|
|
|
|
B8D0000
|
unkown
|
page read and write
|
|
|
|
21B763A9000
|
unkown
|
page read and write
|
|
|
|
ADE8000
|
unkown
|
page read and write
|
|
|
|
7FF5D6B24000
|
unkown image
|
page readonly
|
|
|
|
B06A000
|
unkown
|
page read and write
|
|
|
|
8B10000
|
stack
|
page execute read
|
|
|
|
7FF595238000
|
unkown image
|
page readonly
|
|
|
|
A700000
|
unkown image
|
page readonly
|
|
|
|
11D6A95A000
|
unkown
|
page read and write
|
|
|
|
F985FF000
|
stack
|
page read and write
|
|
|
|
B880000
|
unkown
|
page read and write
|
|
|
|
FFC01FF000
|
stack
|
page read and write
|
|
|
|
7DF555440000
|
unkown image
|
page readonly
|
|
|
|
14FCB1B000
|
unkown
|
page read and write
|
|
|
|
91A0000
|
unkown
|
page read and write
|
|
|
|
11D6F7C0000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown image
|
page readonly
|
|
|
|
1CFC3630000
|
unkown image
|
page readonly
|
|
|
|
7DF528230000
|
unkown image
|
page readonly
|
|
|
|
7FF59522C000
|
unkown image
|
page readonly
|
|
|
|
7FF53F913000
|
unkown image
|
page readonly
|
|
|
|
57E0000
|
unkown
|
page read and write
|
|
|
|
7DF5156F0000
|
unkown image
|
page readonly
|
|
|
|
B920000
|
unkown
|
page read and write
|
|
|
|
8DBD000
|
stack
|
page read and write
|
|
|
|
7FF585C5C000
|
unkown image
|
page readonly
|
|
|
|
C440000
|
unkown
|
page read and write
|
|
|
|
BA20000
|
unkown
|
page read and write
|
|
|
|
C630000
|
unkown
|
page read and write
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
8B90000
|
stack
|
page read and write
|
|
|
|
7FF511FE1000
|
unkown image
|
page readonly
|
|
|
|
C500000
|
unkown
|
page read and write
|
|
|
|
1F1D6B02000
|
unkown
|
page read and write
|
|
|
|
2A7A000
|
unkown image
|
page readonly
|
|
|
|
BAA0000
|
unkown
|
page read and write
|
|
|
|
8B5D000
|
stack
|
page read and write
|
|
|
|
2A60000
|
unkown image
|
page readonly
|
|
|
|
ADCE000
|
unkown
|
page read and write
|
|
|
|
B294000
|
unkown
|
page read and write
|
|
|
|
7FF51286D000
|
unkown image
|
page readonly
|
|
|
|
B6EA000
|
unkown
|
page read and write
|
|
|
|
8AD0000
|
stack
|
page read and write
|
|
|
|
AB00000
|
unkown
|
page read and write
|
|
|
|
11D6F8E0000
|
unkown
|
page read and write
|
|
|
|
8DBD000
|
stack
|
page read and write
|
|
|
|
2A20000
|
unkown image
|
page readonly
|
|
|
|
C490000
|
unkown
|
page read and write
|
|
|
|
AF26000
|
unkown
|
page read and write
|
|
|
|
7FF5E5E3D000
|
unkown image
|
page readonly
|
|
|
|
C3F0000
|
unkown
|
page read and write
|
|
|
|
C470000
|
unkown
|
page read and write
|
|
|
|
8DD0000
|
unkown
|
page read and write
|
|
|
|
B16A000
|
unkown
|
page read and write
|
|
|
|
2B21000
|
unkown image
|
page readonly
|
|
|
|
217E1170000
|
unkown image
|
page readonly
|
|
|
|
ACC6000
|
unkown
|
page read and write
|
|
|
|
1F1D6F80000
|
unkown image
|
page readonly
|
|
|
|
9A7000
|
unkown
|
page read and write
|
|
|
|
21B76395000
|
unkown
|
page read and write
|
|
|
|
8BB14FE000
|
stack
|
page read and write
|
|
|
|
11D6FAB5000
|
unkown
|
page read and write
|
|
|
|
21B76130000
|
unkown image
|
page write copy
|
|
|
|
C280000
|
unkown
|
page read and write
|
|
|
|
1F1D6A7E000
|
unkown
|
page read and write
|
|
|
|
11D6FB02000
|
unkown
|
page read and write
|
|
|
|
292F000
|
unkown image
|
page readonly
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
8F5D000
|
stack
|
page read and write
|
|
|
|
38597BF000
|
stack
|
page read and write
|
|
|
|
8AD0000
|
stack
|
page read and write
|
|
|
|
C80D000
|
unkown
|
page read and write
|
|
|
|
7FF595228000
|
unkown image
|
page readonly
|
|
|
|
11D6FAFA000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCC2000
|
unkown image
|
page readonly
|
|
|
|
2A95000
|
unkown image
|
page readonly
|
|
|
|
7FF585A03000
|
unkown image
|
page readonly
|
|
|
|
7DF5FBBA0000
|
unkown image
|
page readonly
|
|
|
|
B6C3000
|
unkown
|
page read and write
|
|
|
|
BA10000
|
unkown
|
page read and write
|
|
|
|
C4D0000
|
unkown
|
page read and write
|
|
|
|
7DF5FBB82000
|
unkown image
|
page readonly
|
|
|
|
2875000
|
unkown image
|
page readonly
|
|
|
|
11D6F7A0000
|
unkown
|
page read and write
|
|
|
|
11D6A26C000
|
unkown
|
page read and write
|
|
|
|
B930000
|
unkown
|
page read and write
|
|
|
|
CA8D000
|
stack
|
page read and write
|
|
|
|
AF00000
|
unkown
|
page read and write
|
|
|
|
1F1D6A75000
|
unkown
|
page read and write
|
|
|
|
1CFDA375000
|
heap private
|
page read and write
|
|
|
|
DDCA000
|
unkown image
|
page readonly
|
|
|
|
1C2A5802000
|
unkown
|
page read and write
|
|
|
|
B920000
|
unkown
|
page read and write
|
|
|
|
B33117C000
|
stack
|
page read and write
|
|
|
|
A5B1000
|
unkown
|
page read and write
|
|
|
|
B840000
|
unkown
|
page read and write
|
|
|
|
50CA000
|
heap default
|
page read and write
|
|
|
|
11D6FB02000
|
unkown
|
page read and write
|
|
|
|
ACC6000
|
unkown
|
page read and write
|
|
|
|
91E3000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6AF8000
|
unkown image
|
page readonly
|
|
|
|
BB3D000
|
unkown image
|
page read and write
|
|
|
|
293C000
|
unkown image
|
page readonly
|
|
|
|
DE57000
|
unkown
|
page read and write
|
|
|
|
AF3A000
|
unkown
|
page read and write
|
|
|
|
11D6FA3C000
|
unkown
|
page read and write
|
|
|
|
FF1C0000
|
unkown image
|
page readonly
|
|
|
|
24D9506B000
|
unkown
|
page read and write
|
|
|
|
B8F0000
|
unkown
|
page read and write
|
|
|
|
8B80000
|
stack
|
page read and write
|
|
|
|
7FF53FB3E000
|
unkown image
|
page readonly
|
|
|
|
DE1F000
|
unkown
|
page read and write
|
|
|
|
28ED000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF95A000
|
unkown image
|
page readonly
|
|
|
|
57E0000
|
unkown
|
page read and write
|
|
|
|
B16A000
|
unkown
|
page read and write
|
|
|
|
4F03000
|
heap private
|
page read and write
|
|
|
|
7DF55A840000
|
unkown image
|
page readonly
|
|
|
|
AC42000
|
unkown
|
page read and write
|
|
|
|
7DF5156D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5EC450000
|
unkown image
|
page readonly
|
|
|
|
50CA000
|
heap default
|
page read and write
|
|
|
|
2482FA00000
|
unkown
|
page read and write
|
|
|
|
28A1000
|
unkown image
|
page readonly
|
|
|
|
BA40000
|
unkown
|
page read and write
|
|
|
|
7DF55A850000
|
unkown image
|
page readonly
|
|
|
|
7FF544F08000
|
unkown image
|
page readonly
|
|
|
|
21B75B08000
|
unkown
|
page read and write
|
|
|
|
21B76398000
|
unkown
|
page read and write
|
|
|
|
B33127D000
|
stack
|
page read and write
|
|
|
|
BA40000
|
unkown
|
page read and write
|
|
|
|
293C000
|
unkown image
|
page readonly
|
|
|
|
7DF59B640000
|
unkown image
|
page readonly
|
|
|
|
7DF54B160000
|
unkown image
|
page readonly
|
|
|
|
11D6F6B1000
|
unkown
|
page read and write
|
|
|
|
2936000
|
unkown image
|
page readonly
|
|
|
|
C978000
|
unkown
|
page read and write
|
|
|
|
B990000
|
unkown
|
page read and write
|
|
|
|
2482FA78000
|
unkown
|
page read and write
|
|
|
|
B940000
|
unkown
|
page read and write
|
|
|
|
C390000
|
unkown
|
page read and write
|
|
|
|
8AA0000
|
stack
|
page read and write
|
|
|
|
B555000
|
unkown
|
page read and write
|
|
|
|
4F60000
|
unkown
|
page execute read
|
|
|
|
C00D000
|
stack
|
page read and write
|
|
|
|
7DF5156E2000
|
unkown image
|
page readonly
|
|
|
|
F6BC5FF000
|
stack
|
page read and write
|
|
|
|
7FF53F803000
|
unkown image
|
page readonly
|
|
|
|
7DF5AAC22000
|
unkown image
|
page readonly
|
|
|
|
57D0000
|
unkown image
|
page readonly
|
|
|
|
8BB15FC000
|
stack
|
page read and write
|
|
|
|
7FF5128F8000
|
unkown image
|
page readonly
|
|
|
|
7FF5E360F000
|
unkown image
|
page readonly
|
|
|
|
8A80000
|
stack
|
page read and write
|
|
|
|
2482F980000
|
heap default
|
page read and write
|
|
|
|
2A59000
|
unkown image
|
page readonly
|
|
|
|
7FF585C85000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A58000
|
unkown
|
page read and write
|
|
|
|
7FF4FFAD1000
|
unkown image
|
page readonly
|
|
|
|
1C2A5027000
|
unkown
|
page read and write
|
|
|
|
7DF5AAC12000
|
unkown image
|
page readonly
|
|
|
|
B950000
|
unkown
|
page read and write
|
|
|
|
B459000
|
unkown
|
page read and write
|
|
|
|
8A3D000
|
stack
|
page read and write
|
|
|
|
DDBF000
|
unkown image
|
page readonly
|
|
|
|
5060000
|
unkown
|
page read and write
|
|
|
|
C66457A000
|
stack
|
page read and write
|
|
|
|
B9E0000
|
unkown
|
page read and write
|
|
|
|
6C50000
|
unkown image
|
page read and write
|
|
|
|
282B000
|
unkown image
|
page readonly
|
|
|
|
2605000
|
unkown image
|
page readonly
|
|
|
|
2A37000
|
unkown image
|
page readonly
|
|
|
|
217E09F0000
|
unkown image
|
page readonly
|
|
|
|
B9A0000
|
unkown
|
page read and write
|
|
|
|
1CFDA20D000
|
unkown
|
page read and write
|
|
|
|
6C70000
|
unkown image
|
page read and write
|
|
|
|
BA70000
|
unkown
|
page read and write
|
|
|
|
B08D000
|
unkown
|
page read and write
|
|
|
|
2872000
|
unkown image
|
page readonly
|
|
|
|
7FF4FFACC000
|
unkown image
|
page readonly
|
|
|
|
8A3D000
|
stack
|
page read and write
|
|
|
|
AB00000
|
unkown
|
page read and write
|
|
|
|
B053000
|
unkown
|
page read and write
|
|
|
|
21B763B0000
|
unkown
|
page read and write
|
|
|
|
1F1D6A7C000
|
unkown
|
page read and write
|
|
|
|
8DD0000
|
unkown
|
page read and write
|
|
|
|
7FF544D63000
|
unkown image
|
page readonly
|
|
|
|
28A6000
|
unkown image
|
page readonly
|
|
|
|
C600000
|
unkown
|
page read and write
|
|
|
|
B910000
|
unkown
|
page read and write
|
|
|
|
DE15000
|
unkown
|
page read and write
|
|
|
|
4C282FB000
|
stack
|
page read and write
|
|
|
|
B830000
|
unkown
|
page read and write
|
|
|
|
7DF5EC430000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF954000
|
unkown image
|
page readonly
|
|
|
|
7DF54B140000
|
unkown image
|
page readonly
|
|
|
|
CCDE000
|
stack
|
page read and write
|
|
|
|
7FF4ECD17000
|
unkown image
|
page readonly
|
|
|
|
DDB0000
|
unkown image
|
page readonly
|
|
|
|
21B75AFE000
|
unkown
|
page read and write
|
|
|
|
7FF4FF64B000
|
unkown image
|
page readonly
|
|
|
|
A8AD000
|
stack
|
page read and write
|
|
|
|
21B76385000
|
unkown
|
page read and write
|
|
|
|
AF46000
|
unkown
|
page read and write
|
|
|
|
28FCFA00000
|
unkown
|
page read and write
|
|
|
|
7FF594FAA000
|
unkown image
|
page readonly
|
|
|
|
4C285FF000
|
stack
|
page read and write
|
|
|
|
8A80000
|
stack
|
page read and write
|
|
|
|
DE30000
|
unkown
|
page read and write
|
|
|
|
4E50000
|
unkown
|
page read and write
|
|
|
|
11D6F69E000
|
unkown
|
page read and write
|
|
|
|
B508000
|
unkown
|
page read and write
|
|
|
|
5810000
|
unkown
|
page read and write
|
|
|
|
7FF4ECB81000
|
unkown image
|
page readonly
|
|
|
|
7FF512186000
|
unkown image
|
page readonly
|
|
|
|
B4F7000
|
unkown
|
page read and write
|
|
|
|
7FF512188000
|
unkown image
|
page readonly
|
|
|
|
14FD2FE000
|
stack
|
page read and write
|
|
|
|
CA8A000
|
stack
|
page read and write
|
|
|
|
11D6B150000
|
unkown image
|
page readonly
|
|
|
|
B7D0000
|
unkown
|
page read and write
|
|
|
|
CF2C000
|
unkown
|
page read and write
|
|
|
|
CE26000
|
unkown
|
page read and write
|
|
|
|
7FF4ECBFD000
|
unkown image
|
page readonly
|
|
|
|
AFA2000
|
unkown
|
page read and write
|
|
|
|
2A91000
|
unkown image
|
page readonly
|
|
|
|
1CFC3908000
|
unkown
|
page read and write
|
|
|
|
7FF53FA47000
|
unkown image
|
page readonly
|
|
|
|
11D6FA1D000
|
unkown
|
page read and write
|
|
|
|
7FF53FA89000
|
unkown image
|
page readonly
|
|
|
|
21B76393000
|
unkown
|
page read and write
|
|
|
|
7FF4FFAD3000
|
unkown image
|
page readonly
|
|
|
|
28FCF820000
|
unkown image
|
page readonly
|
|
|
|
7FF512777000
|
unkown image
|
page readonly
|
|
|
|
14FD0FC000
|
stack
|
page read and write
|
|
|
|
BB0F000
|
unkown image
|
page read and write
|
|
|
|
2A70000
|
unkown image
|
page readonly
|
|
|
|
7FF51293F000
|
unkown image
|
page readonly
|
|
|
|
CB8F000
|
stack
|
page read and write
|
|
|
|
B05D000
|
unkown
|
page read and write
|
|
|
|
7DF528250000
|
unkown image
|
page readonly
|
|
|
|
21B76385000
|
unkown
|
page read and write
|
|
|
|
BA50000
|
unkown
|
page read and write
|
|
|
|
DE3F000
|
unkown
|
page read and write
|
|
|
|
5080000
|
heap default
|
page read and write
|
|
|
|
2A37000
|
unkown image
|
page readonly
|
|
|
|
7FF595213000
|
unkown image
|
page readonly
|
|
|
|
BA10000
|
unkown
|
page read and write
|
|
|
|
7FF585B3E000
|
unkown image
|
page readonly
|
|
|
|
11D6F7E0000
|
unkown
|
page read and write
|
|
|
|
50AE000
|
heap default
|
page read and write
|
|
|
|
28D7000
|
unkown image
|
page readonly
|
|
|
|
1F1D6A60000
|
unkown
|
page read and write
|
|
|
|
2A8B000
|
unkown image
|
page readonly
|
|
|
|
1CFDA2C0000
|
unkown
|
page read and write
|
|
|
|
B05A000
|
unkown
|
page read and write
|
|
|
|
7DF502752000
|
unkown image
|
page readonly
|
|
|
|
28FCF980000
|
unkown
|
page read and write
|
|
|
|
2953000
|
unkown image
|
page readonly
|
|
|
|
14FCE7F000
|
stack
|
page read and write
|
|
|
|
7FF5E61DA000
|
unkown image
|
page readonly
|
|
|
|
C6D0000
|
unkown
|
page read and write
|
|
|
|
28FCFC00000
|
unkown image
|
page readonly
|
|
|
|
BA20000
|
unkown
|
page read and write
|
|
|
|
BAA0000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDC4000
|
unkown image
|
page readonly
|
|
|
|
8E1D000
|
stack
|
page read and write
|
|
|
|
11D6A313000
|
unkown
|
page read and write
|
|
|
|
7FF4ECDAA000
|
unkown image
|
page readonly
|
|
|
|
C3D0000
|
unkown
|
page read and write
|
|
|
|
21B76802000
|
unkown
|
page read and write
|
|
|
|
C340000
|
unkown
|
page read and write
|
|
|
|
8B00000
|
stack
|
page read and write
|
|
|
|
1C2A4EC0000
|
unkown image
|
page readonly
|
|
|
|
7FF585C68000
|
unkown image
|
page readonly
|
|
|
|
B6A0000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
unkown image
|
page readonly
|
|
|
|
9299000
|
unkown
|
page read and write
|
|
|
|
7FF585BA5000
|
unkown image
|
page readonly
|
|
|
|
DE15000
|
unkown
|
page read and write
|
|
|
|
7DF555452000
|
unkown image
|
page readonly
|
|
|
|
2917000
|
unkown image
|
page readonly
|
|
|
|
CF76000
|
unkown
|
page read and write
|
|
|
|
2A41000
|
unkown image
|
page readonly
|
|
|
|
7FF5853EB000
|
unkown image
|
page readonly
|
|
|
|
281E000
|
unkown image
|
page readonly
|
|
|
|
AF4C000
|
unkown
|
page read and write
|
|
|
|
7FF4FF580000
|
unkown image
|
page readonly
|
|
|
|
27E7000
|
unkown image
|
page readonly
|
|
|
|
B6EA000
|
unkown
|
page read and write
|
|
|
|
1F1D6A68000
|
unkown
|
page read and write
|
|
|
|
11D6F694000
|
unkown
|
page read and write
|
|
|
|
1CFDA380000
|
unkown
|
page read and write
|
|
|
|
217E0B86000
|
heap default
|
page read and write
|
|
|
|
7DF449010000
|
unkown image
|
page readonly
|
|
|
|
B890000
|
unkown
|
page read and write
|
|
|
|
B455000
|
unkown
|
page read and write
|
|
|
|
BA00000
|
unkown
|
page read and write
|
|
|
|
A76E000
|
stack
|
page read and write
|
|
|
|
11D6A2F9000
|
unkown
|
page read and write
|
|
|
|
9AB000
|
unkown
|
page read and write
|
|
|
|
7FF53FB16000
|
unkown image
|
page readonly
|
|
|
|
5834000
|
heap private
|
page read and write
|
|
|
|
A700000
|
unkown image
|
page readonly
|
|
|
|
B2F2000
|
unkown
|
page read and write
|
|
|
|
7FF53FB1B000
|
unkown image
|
page readonly
|
|
|
|
2AA5000
|
unkown image
|
page readonly
|
|
|
|
8CDF000
|
stack
|
page read and write
|
|
|
|
B30B000
|
unkown
|
page read and write
|
|
|
|
57E0000
|
unkown
|
page read and write
|
|
|
|
7FF4EC929000
|
unkown image
|
page readonly
|
|
|
|
CF76000
|
unkown
|
page read and write
|
|
|
|
7FF5E360D000
|
unkown image
|
page readonly
|
|
|
|
21B76372000
|
unkown
|
page read and write
|
|
|
|
21B76180000
|
unkown
|
page read and write
|
|
|
|
4F10000
|
unkown
|
page execute read
|
|
|
|
BAF7000
|
unkown image
|
page read and write
|
|
|
|
4E3C000
|
unkown
|
page read and write
|
|
|
|
21B75970000
|
unkown image
|
page readonly
|
|
|
|
4F70000
|
unkown image
|
page readonly
|
|
|
|
2482FA68000
|
unkown
|
page read and write
|
|
|
|
C2B0000
|
unkown
|
page read and write
|
|
|
|
C3B0000
|
unkown
|
page read and write
|
|
|
|
1C2A4EA0000
|
unkown image
|
page readonly
|
|
|
|
B840000
|
unkown
|
page read and write
|
|
|
|
5790000
|
unkown
|
page read and write
|
|
|
|
7FF5950BD000
|
unkown image
|
page readonly
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
8AE0000
|
stack
|
page read and write
|
|
|
|
5790000
|
unkown
|
page read and write
|
|
|
|
2B2C000
|
unkown image
|
page readonly
|
|
|
|
DE44000
|
unkown
|
page read and write
|
|
|
|
21B76345000
|
unkown
|
page read and write
|
|
|
|
21B763BA000
|
unkown
|
page read and write
|
|
|
|
281E000
|
unkown image
|
page readonly
|
|
|
|
2603000
|
unkown image
|
page readonly
|
|
|
|
11D6F690000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page execute read
|
|
|
|
B900000
|
unkown
|
page read and write
|
|
|
|
B800000
|
unkown
|
page read and write
|
|
|
|
1CFDA1E6000
|
unkown
|
page read and write
|
|
|
|
1C2A505E000
|
unkown
|
page read and write
|
|
|
|
282B000
|
unkown image
|
page readonly
|
|
|
|
7FF5E5DDF000
|
unkown image
|
page readonly
|
|
|
|
C2E0000
|
unkown
|
page read and write
|
|
|
|
21B7638E000
|
unkown
|
page read and write
|
|
|
|
FF1C0000
|
unkown image
|
page readonly
|
|
|
|
B1C7000
|
unkown
|
page read and write
|
|
|
|
11D6FA49000
|
unkown
|
page read and write
|
|
|
|
D7B000
|
unkown image
|
page readonly
|
|
|
|
5770000
|
unkown
|
page read and write
|
|
|
|
C4F0000
|
unkown
|
page read and write
|
|
|
|
7FF5E35D6000
|
unkown image
|
page readonly
|
|
|
|
4FC0000
|
unkown
|
page read and write
|
|
|
|
3859A7F000
|
stack
|
page read and write
|
|
|
|
2A2D000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF88F000
|
unkown image
|
page readonly
|
|
|
|
9A7000
|
unkown
|
page read and write
|
|
|
|
21B76180000
|
unkown
|
page read and write
|
|
|
|
B47F000
|
unkown
|
page read and write
|
|
|
|
68862FE000
|
stack
|
page read and write
|
|
|
|
7FF5D6B3B000
|
unkown image
|
page readonly
|
|
|
|
8BB1C7F000
|
stack
|
page read and write
|
|
|
|
DE02000
|
unkown image
|
page readonly
|
|
|
|
C280000
|
unkown
|
page read and write
|
|
|
|
B9F0000
|
unkown
|
page read and write
|
|
|
|
1F1D6A6A000
|
unkown
|
page read and write
|
|
|
|
289D000
|
unkown image
|
page readonly
|
|
|
|
DE62000
|
unkown
|
page read and write
|
|
|
|
B30B000
|
unkown
|
page read and write
|
|
|
|
1C2A4ED0000
|
unkown image
|
page readonly
|
|
|
|
28C4000
|
unkown image
|
page readonly
|
|
|
|
2B25000
|
unkown image
|
page readonly
|
|
|
|
282E000
|
unkown image
|
page readonly
|
|
|
|
4E69000
|
unkown
|
page execute read
|
|
|
|
BA20000
|
unkown
|
page read and write
|
|
|
|
5840000
|
unkown image
|
page readonly
|
|
|
|
921D000
|
unkown
|
page read and write
|
|
|
|
B05D000
|
unkown
|
page read and write
|
|
|
|
DDD5000
|
unkown image
|
page readonly
|
|
|
|
4F50000
|
unkown
|
page execute read
|
|
|
|
1000FE000
|
stack
|
page read and write
|
|
|
|
11D6FA00000
|
unkown
|
page read and write
|
|
|
|
C670000
|
unkown
|
page read and write
|
|
|
|
DE39000
|
unkown
|
page read and write
|
|
|
|
2917000
|
unkown image
|
page readonly
|
|
|
|
11D6F570000
|
unkown
|
page read and write
|
|
|
|
4E50000
|
unkown
|
page read and write
|
|
|
|
A610000
|
unkown
|
page read and write
|
|
|
|
CA8A000
|
stack
|
page read and write
|
|
|
|
57B0000
|
unkown image
|
page readonly
|
|
|
|
AD08000
|
unkown
|
page read and write
|
|
|
|
21B7639F000
|
unkown
|
page read and write
|
|
There are 2844 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://889ftr-https-redirrectcase-dynamic-forms.us-south.cf.appdomain.cloud/#amJhY3VkQHNjaWYuY29t
|
|