Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
http://nuangaybantiep.xyz
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D4CEB370-B8F8-11EB-90E6-ECF4BB82F7E0}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D4CEB372-B8F8-11EB-90E6-ECF4BB82F7E0}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D4CEB373-B8F8-11EB-90E6-ECF4BB82F7E0}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF127082AAC6B3CA3B.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF1281205735BA4C5B.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF5A2E1F16002E720D.TMP
|
data
|
modified
|
|
There are 2 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5636 CREDAT:17410 /prefetch:2
|
 |
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://nuangaybantiep.xyz/
|
unknown
|
|
|
|
http://nuangaybantiep.xyz/Root
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
nuangaybantiep.xyz
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{D4CEB370-B8F8-11EB-90E6-ECF4BB82F7E0}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
There are 9 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF59320B000
|
unkown
|
page readonly
|
|
|
|
7FF558C36000
|
unkown
|
page readonly
|
|
|
|
16070880000
|
unkown
|
page read and write
|
|
|
|
7FF582FB3000
|
unkown
|
page readonly
|
|
|
|
1E780D82000
|
unkown
|
page read and write
|
|
|
|
68BBDFD000
|
unkown
|
page read and write
|
|
|
|
7FF50632A000
|
unkown
|
page readonly
|
|
|
|
7FF59321B000
|
unkown
|
page readonly
|
|
|
|
17F4C413000
|
unkown
|
page read and write
|
|
|
|
7FF592F09000
|
unkown
|
page readonly
|
|
|
|
1E780CA8000
|
unkown
|
page read and write
|
|
|
|
7FF583123000
|
unkown
|
page readonly
|
|
|
|
1BD63429000
|
unkown
|
page read and write
|
|
|
|
1F8BDE60000
|
heap private
|
page read and write
|
|
|
|
1CB1F231000
|
unkown
|
page read and write
|
|
|
|
1E782E05000
|
unkown
|
page read and write
|
|
|
|
1F1363C0000
|
unkown
|
page read and write
|
|
|
|
7FF5CEEB0000
|
unkown
|
page readonly
|
|
|
|
1F1364B8000
|
unkown
|
page read and write
|
|
|
|
7FF558BCD000
|
unkown
|
page readonly
|
|
|
|
A2FB4B000
|
unkown
|
page read and write
|
|
|
|
1BD63E00000
|
unkown
|
page readonly
|
|
|
|
7FF58308C000
|
unkown
|
page readonly
|
|
|
|
1F8BDC70000
|
unkown
|
page readonly
|
|
|
|
A417EFB000
|
unkown
|
page read and write
|
|
|
|
11E47FE000
|
unkown
|
page read and write
|
|
|
|
1E783010000
|
unkown
|
page read and write
|
|
|
|
1E782E8C000
|
unkown
|
page read and write
|
|
|
|
7FF5CD314000
|
unkown
|
page readonly
|
|
|
|
1BD63A60000
|
unkown
|
page readonly
|
|
|
|
7FF50655C000
|
unkown
|
page readonly
|
|
|
|
7FF58288A000
|
unkown
|
page readonly
|
|
|
|
1E782E02000
|
unkown
|
page read and write
|
|
|
|
7FF5065C2000
|
unkown
|
page readonly
|
|
|
|
17F4C489000
|
unkown
|
page read and write
|
|
|
|
7FF5CD2E9000
|
unkown
|
page readonly
|
|
|
|
A417C7B000
|
unkown
|
page read and write
|
|
|
|
1F13642E000
|
unkown
|
page read and write
|
|
|
|
11E4CFE000
|
unkown
|
page read and write
|
|
|
|
A416F2B000
|
unkown
|
page read and write
|
|
|
|
7FF58310C000
|
unkown
|
page readonly
|
|
|
|
A41827A000
|
unkown
|
page read and write
|
|
|
|
7FF558C92000
|
unkown
|
page readonly
|
|
|
|
7FF5EF916000
|
unkown
|
page readonly
|
|
|
|
184A48A0000
|
unkown
|
page read and write
|
|
|
|
184A2D80000
|
heap private
|
page read and write
|
|
|
|
16070855000
|
unkown
|
page read and write
|
|
|
|
A308FF000
|
unkown
|
page read and write
|
|
|
|
16070913000
|
unkown
|
page read and write
|
|
|
|
7FF582F35000
|
unkown
|
page readonly
|
|
|
|
1E780CAC000
|
unkown
|
page read and write
|
|
|
|
184A49A0000
|
unkown
|
page readonly
|
|
|
|
7FF5E82AC000
|
unkown
|
page readonly
|
|
|
|
1F8BC660000
|
unkown
|
page readonly
|
|
|
|
1F1362C1000
|
unkown
|
page read and write
|
|
|
|
1E782C23000
|
unkown
|
page read and write
|
|
|
|
1BD63468000
|
unkown
|
page read and write
|
|
|
|
7FF5E7F72000
|
unkown
|
page readonly
|
|
|
|
7FF593313000
|
unkown
|
page readonly
|
|
|
|
7FF5E830B000
|
unkown
|
page readonly
|
|
|
|
A41877C000
|
unkown
|
page read and write
|
|
|
|
7FF506568000
|
unkown
|
page readonly
|
|
|
|
162A13E000
|
unkown
|
page read and write
|
|
|
|
179533F0000
|
unkown
|
page read and write
|
|
|
|
7FF558BC7000
|
unkown
|
page readonly
|
|
|
|
A4188FD000
|
unkown
|
page read and write
|
|
|
|
7FF583099000
|
unkown
|
page readonly
|
|
|
|
1CB1F080000
|
unkown
|
page readonly
|
|
|
|
184A4870000
|
unkown
|
page readonly
|
|
|
|
7FF593251000
|
unkown
|
page readonly
|
|
|
|
1F1362AE000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF52000
|
unkown
|
page readonly
|
|
|
|
1E782C00000
|
unkown
|
page read and write
|
|
|
|
1F131415000
|
unkown
|
page read and write
|
|
|
|
7FF592FD9000
|
unkown
|
page readonly
|
|
|
|
F75D7E000
|
unkown
|
page read and write
|
|
|
|
7FF582C89000
|
unkown
|
page readonly
|
|
|
|
162A6FE000
|
unkown
|
page read and write
|
|
|
|
1E780D2C000
|
unkown
|
page read and write
|
|
|
|
7FF5EF933000
|
unkown
|
page readonly
|
|
|
|
1F8BDD50000
|
unkown
|
page readonly
|
|
|
|
68BBEFE000
|
unkown
|
page read and write
|
|
|
|
1CB1F284000
|
unkown
|
page read and write
|
|
|
|
1F131D40000
|
unkown
|
page readonly
|
|
|
|
1F131402000
|
unkown
|
page read and write
|
|
|
|
1F136110000
|
unkown
|
page read and write
|
|
|
|
17F4CA70000
|
unkown
|
page readonly
|
|
|
|
7FF5EF926000
|
unkown
|
page readonly
|
|
|
|
1F1320D1000
|
unkown
|
page read and write
|
|
|
|
68BBD7E000
|
unkown
|
page read and write
|
|
|
|
1F130C40000
|
heap default
|
page read and write
|
|
|
|
16070902000
|
unkown
|
page read and write
|
|
|
|
1607083C000
|
unkown
|
page read and write
|
|
|
|
184A2E8C000
|
unkown
|
page read and write
|
|
|
|
184A30D0000
|
unkown
|
page readonly
|
|
|
|
7FF5CD535000
|
unkown
|
page readonly
|
|
|
|
A2FBCD000
|
unkown
|
page read and write
|
|
|
|
7FF5932F6000
|
unkown
|
page readonly
|
|
|
|
1F136380000
|
unkown
|
page readonly
|
|
|
|
7FF506535000
|
unkown
|
page readonly
|
|
|
|
1E780CB3000
|
unkown
|
page read and write
|
|
|
|
A417D7A000
|
unkown
|
page read and write
|
|
|
|
16070864000
|
unkown
|
page read and write
|
|
|
|
17F4C3D0000
|
unkown
|
page readonly
|
|
|
|
A304FF000
|
unkown
|
page read and write
|
|
|
|
1F1362A0000
|
unkown
|
page read and write
|
|
|
|
1E780D52000
|
unkown
|
page read and write
|
|
|
|
17F4CD00000
|
unkown
|
page read and write
|
|
|
|
1F136600000
|
unkown
|
page read and write
|
|
|
|
1E782E9D000
|
unkown
|
page read and write
|
|
|
|
886859B000
|
unkown
|
page read and write
|
|
|
|
A41867B000
|
unkown
|
page read and write
|
|
|
|
7FF50663C000
|
unkown
|
page readonly
|
|
|
|
1E782AD0000
|
unkown
|
page readonly
|
|
|
|
1E780D61000
|
unkown
|
page read and write
|
|
|
|
1E782E02000
|
unkown
|
page read and write
|
|
|
|
1E780C00000
|
unkown
|
page read and write
|
|
|
|
7FF5061B1000
|
unkown
|
page readonly
|
|
|
|
7FF5CD575000
|
unkown
|
page readonly
|
|
|
|
A417B7A000
|
unkown
|
page read and write
|
|
|
|
7FF582F3A000
|
unkown
|
page readonly
|
|
|
|
7FF582DEF000
|
unkown
|
page readonly
|
|
|
|
7FF593120000
|
unkown
|
page readonly
|
|
|
|
1F130D20000
|
unkown
|
page readonly
|
|
|
|
1F130E58000
|
unkown
|
page read and write
|
|
|
|
7FF5CED42000
|
unkown
|
page readonly
|
|
|
|
1F130E98000
|
unkown
|
page read and write
|
|
|
|
7FF5CD2EF000
|
unkown
|
page readonly
|
|
|
|
7FF5E8319000
|
unkown
|
page readonly
|
|
|
|
2C8887F000
|
unkown
|
page read and write
|
|
|
|
1CB1F010000
|
heap private
|
page read and write
|
|
|
|
7FF5CEF4C000
|
unkown
|
page readonly
|
|
|
|
17F4C4DF000
|
unkown
|
page read and write
|
|
|
|
1F8BE450000
|
heap private
|
page read and write
|
|
|
|
1E782CF9000
|
unkown
|
page read and write
|
|
|
|
1E782EDB000
|
unkown
|
page read and write
|
|
|
|
1F1363F0000
|
unkown
|
page read and write
|
|
|
|
D2E96FE000
|
unkown
|
page read and write
|
|
|
|
1F8BE170000
|
heap private
|
page read and write
|
|
|
|
A4177FA000
|
unkown
|
page read and write
|
|
|
|
7FF5E831C000
|
unkown
|
page readonly
|
|
|
|
D2E8FF8000
|
unkown
|
page read and write
|
|
|
|
7FF5931E0000
|
unkown
|
page readonly
|
|
|
|
D2E8BBB000
|
unkown
|
page read and write
|
|
|
|
1F131D30000
|
unkown
|
page readonly
|
|
|
|
1E780CAE000
|
unkown
|
page read and write
|
|
|
|
2C886FD000
|
unkown
|
page read and write
|
|
|
|
17F4C4A9000
|
unkown
|
page read and write
|
|
|
|
A41807B000
|
unkown
|
page read and write
|
|
|
|
1F131D90000
|
unkown
|
page readonly
|
|
|
|
1E780C99000
|
unkown
|
page read and write
|
|
|
|
7FF5CD606000
|
unkown
|
page readonly
|
|
|
|
1BD63380000
|
heap default
|
page read and write
|
|
|
|
7FF506589000
|
unkown
|
page readonly
|
|
|
|
7FF5EF8B9000
|
unkown
|
page readonly
|
|
|
|
7FF592B13000
|
unkown
|
page readonly
|
|
|
|
7FF50654B000
|
unkown
|
page readonly
|
|
|
|
1E782EED000
|
unkown
|
page read and write
|
|
|
|
7FF558D0C000
|
unkown
|
page readonly
|
|
|
|
16070868000
|
unkown
|
page read and write
|
|
|
|
7FF506565000
|
unkown
|
page readonly
|
|
|
|
7FF5CEEC6000
|
unkown
|
page readonly
|
|
|
|
1BD63472000
|
unkown
|
page read and write
|
|
|
|
1E780E00000
|
unkown
|
page readonly
|
|
|
|
1E783110000
|
unkown
|
page read and write
|
|
|
|
7FF5EF080000
|
unkown
|
page readonly
|
|
|
|
7FF593249000
|
unkown
|
page readonly
|
|
|
|
7FF558C1B000
|
unkown
|
page readonly
|
|
|
|
1F1364A4000
|
unkown
|
page read and write
|
|
|
|
1F8BDD40000
|
unkown
|
page readonly
|
|
|
|
7FF593228000
|
unkown
|
page readonly
|
|
|
|
1F1363A8000
|
unkown
|
page write copy
|
|
|
|
1CB1F400000
|
unkown
|
page readonly
|
|
|
|
7FF593190000
|
unkown
|
page readonly
|
|
|
|
88688FE000
|
unkown
|
page read and write
|
|
|
|
1CB1F200000
|
unkown
|
page read and write
|
|
|
|
D2E927B000
|
unkown
|
page read and write
|
|
|
|
162A1BE000
|
unkown
|
page read and write
|
|
|
|
1E783110000
|
unkown
|
page read and write
|
|
|
|
7FF593305000
|
unkown
|
page readonly
|
|
|
|
1F1366F0000
|
unkown
|
page read and write
|
|
|
|
7FF5E83A3000
|
unkown
|
page readonly
|
|
|
|
1F130E8F000
|
unkown
|
page read and write
|
|
|
|
7FF5EF869000
|
unkown
|
page readonly
|
|
|
|
1E782A80000
|
unkown
|
page readonly
|
|
|
|
184A2E6E000
|
unkown
|
page read and write
|
|
|
|
A41727A000
|
unkown
|
page read and write
|
|
|
|
184A2DE0000
|
heap default
|
page read and write
|
|
|
|
7FF593234000
|
unkown
|
page readonly
|
|
|
|
11E497C000
|
unkown
|
page read and write
|
|
|
|
17F4CD51000
|
unkown
|
page read and write
|
|
|
|
184A4910000
|
unkown
|
page read and write
|
|
|
|
1E782A30000
|
unkown
|
page read and write
|
|
|
|
7FF5065CC000
|
unkown
|
page readonly
|
|
|
|
1F136700000
|
unkown
|
page readonly
|
|
|
|
1F132100000
|
unkown
|
page read and write
|
|
|
|
184A2E4B000
|
unkown
|
page read and write
|
|
|
|
2C8857D000
|
unkown
|
page read and write
|
|
|
|
7FF5E82D1000
|
unkown
|
page readonly
|
|
|
|
1F131502000
|
unkown
|
page read and write
|
|
|
|
1E780CAB000
|
unkown
|
page read and write
|
|
|
|
1F8BC380000
|
unkown
|
page readonly
|
|
|
|
1E780D42000
|
unkown
|
page read and write
|
|
|
|
7FF505E53000
|
unkown
|
page readonly
|
|
|
|
7FF5CEEDC000
|
unkown
|
page readonly
|
|
|
|
F7617C000
|
unkown
|
page read and write
|
|
|
|
179533F0000
|
unkown
|
page read and write
|
|
|
|
7FF582DC3000
|
unkown
|
page readonly
|
|
|
|
16070802000
|
unkown
|
page read and write
|
|
|
|
17F4C2F0000
|
unkown
|
page readonly
|
|
|
|
2C8817E000
|
unkown
|
page read and write
|
|
|
|
A307FF000
|
unkown
|
page read and write
|
|
|
|
17953502000
|
unkown
|
page read and write
|
|
|
|
1E782E82000
|
unkown
|
page read and write
|
|
|
|
7FF5CEEEB000
|
unkown
|
page readonly
|
|
|
|
1E780D61000
|
unkown
|
page read and write
|
|
|
|
11E46FE000
|
unkown
|
page read and write
|
|
|
|
7FF506591000
|
unkown
|
page readonly
|
|
|
|
1E781190000
|
unkown
|
page readonly
|
|
|
|
7FF58302C000
|
unkown
|
page readonly
|
|
|
|
162A5FB000
|
unkown
|
page read and write
|
|
|
|
1BD63513000
|
unkown
|
page read and write
|
|
|
|
1E782EF6000
|
unkown
|
page read and write
|
|
|
|
A302FF000
|
unkown
|
page read and write
|
|
|
|
7FF5064CC000
|
unkown
|
page readonly
|
|
|
|
7FF5E8251000
|
unkown
|
page readonly
|
|
|
|
7FF5931E4000
|
unkown
|
page readonly
|
|
|
|
A418879000
|
unkown
|
page read and write
|
|
|
|
A41857B000
|
unkown
|
page read and write
|
|
|
|
D2E947A000
|
unkown
|
page read and write
|
|
|
|
7FF59321F000
|
unkown
|
page readonly
|
|
|
|
7FF50621D000
|
unkown
|
page readonly
|
|
|
|
1E780C13000
|
unkown
|
page read and write
|
|
|
|
7FF558C44000
|
unkown
|
page readonly
|
|
|
|
162A0BC000
|
unkown
|
page read and write
|
|
|
|
1CB1F213000
|
unkown
|
page read and write
|
|
|
|
1F1363D0000
|
unkown
|
page read and write
|
|
|
|
2C887FF000
|
unkown
|
page read and write
|
|
|
|
1E780CA5000
|
unkown
|
page read and write
|
|
|
|
7FF593282000
|
unkown
|
page readonly
|
|
|
|
1BD63413000
|
unkown
|
page read and write
|
|
|
|
1E780CA5000
|
unkown
|
page read and write
|
|
|
|
184A2E13000
|
unkown
|
page read and write
|
|
|
|
7FF506653000
|
unkown
|
page readonly
|
|
|
|
7FF58301C000
|
unkown
|
page readonly
|
|
|
|
7FF558C38000
|
unkown
|
page readonly
|
|
|
|
17F4C4D1000
|
unkown
|
page read and write
|
|
|
|
184A2E4A000
|
unkown
|
page read and write
|
|
|
|
1F8BC3C0000
|
heap default
|
page read and write
|
|
|
|
1F1364AE000
|
unkown
|
page read and write
|
|
|
|
7FF5CD538000
|
unkown
|
page readonly
|
|
|
|
16070900000
|
unkown
|
page read and write
|
|
|
|
7FF58300D000
|
unkown
|
page readonly
|
|
|
|
1F131513000
|
unkown
|
page read and write
|
|
|
|
1F1362A8000
|
unkown
|
page read and write
|
|
|
|
1F136660000
|
unkown
|
page readonly
|
|
|
|
1F1362E0000
|
unkown
|
page read and write
|
|
|
|
7FF5CD615000
|
unkown
|
page readonly
|
|
|
|
184A2E5F000
|
unkown
|
page read and write
|
|
|
|
7FF582CFA000
|
unkown
|
page readonly
|
|
|
|
A417A7B000
|
unkown
|
page read and write
|
|
|
|
7FF583075000
|
unkown
|
page readonly
|
|
|
|
7FF558C8C000
|
unkown
|
page readonly
|
|
|
|
17F4CD02000
|
unkown
|
page read and write
|
|
|
|
11E49FB000
|
unkown
|
page read and write
|
|
|
|
1F1366E0000
|
unkown
|
page readonly
|
|
|
|
7FF592B07000
|
unkown
|
page readonly
|
|
|
|
7FF593265000
|
unkown
|
page readonly
|
|
|
|
17F4C4CD000
|
unkown
|
page read and write
|
|
|
|
1F130E29000
|
unkown
|
page read and write
|
|
|
|
1E7826C0000
|
unkown
|
page readonly
|
|
|
|
7FF593004000
|
unkown
|
page readonly
|
|
|
|
1F131559000
|
unkown
|
page read and write
|
|
|
|
1F1363E0000
|
unkown
|
page read and write
|
|
|
|
7FF582C8B000
|
unkown
|
page readonly
|
|
|
|
7FF583038000
|
unkown
|
page readonly
|
|
|
|
7FF5CEEA4000
|
unkown
|
page readonly
|
|
|
|
7FF506636000
|
unkown
|
page readonly
|
|
|
|
17953C02000
|
unkown
|
page read and write
|
|
|
|
7FF5932FC000
|
unkown
|
page readonly
|
|
|
|
184A2E72000
|
unkown
|
page read and write
|
|
|
|
7FF558C75000
|
unkown
|
page readonly
|
|
|
|
1E780CF8000
|
unkown
|
page read and write
|
|
|
|
1E780DC3000
|
unkown
|
page read and write
|
|
|
|
7FF5061B5000
|
unkown
|
page readonly
|
|
|
|
D2E937F000
|
unkown
|
page read and write
|
|
|
|
A417F7B000
|
unkown
|
page read and write
|
|
|
|
1F1362E4000
|
unkown
|
page read and write
|
|
|
|
D2E967E000
|
unkown
|
page read and write
|
|
|
|
1E780BA0000
|
unkown
|
page write copy
|
|
|
|
1E780AD0000
|
unkown
|
page readonly
|
|
|
|
F7637F000
|
unkown
|
page read and write
|
|
|
|
7FF592E68000
|
unkown
|
page readonly
|
|
|
|
7FF58309C000
|
unkown
|
page readonly
|
|
|
|
7FF583040000
|
unkown
|
page readonly
|
|
|
|
1CB1F257000
|
unkown
|
page read and write
|
|
|
|
7FF558C2F000
|
unkown
|
page readonly
|
|
|
|
184A2DF0000
|
unkown
|
page readonly
|
|
|
|
1F131400000
|
unkown
|
page read and write
|
|
|
|
1CB1F170000
|
unkown
|
page read and write
|
|
|
|
7FF55890A000
|
unkown
|
page readonly
|
|
|
|
7FF5E7F0B000
|
unkown
|
page readonly
|
|
|
|
7FF593200000
|
unkown
|
page readonly
|
|
|
|
F75E7F000
|
unkown
|
page read and write
|
|
|
|
D2E987F000
|
unkown
|
page read and write
|
|
|
|
7FF5CE72E000
|
unkown
|
page readonly
|
|
|
|
1F136384000
|
unkown
|
page readonly
|
|
|
|
7FF592EA6000
|
unkown
|
page readonly
|
|
|
|
7FF5EF8A9000
|
unkown
|
page readonly
|
|
|
|
7FF583092000
|
unkown
|
page readonly
|
|
|
|
1E782CE9000
|
unkown
|
page read and write
|
|
|
|
11E457C000
|
unkown
|
page read and write
|
|
|
|
7FF593313000
|
unkown
|
page readonly
|
|
|
|
7FF5E8321000
|
unkown
|
page readonly
|
|
|
|
7FF5E8285000
|
unkown
|
page readonly
|
|
|
|
1E782E42000
|
unkown
|
page read and write
|
|
|
|
7FF5CD1F2000
|
unkown
|
page readonly
|
|
|
|
1F130EA5000
|
unkown
|
page read and write
|
|
|
|
1F8BDFA0000
|
heap private
|
page read and write
|
|
|
|
16070770000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF66000
|
unkown
|
page readonly
|
|
|
|
1F1362D0000
|
unkown
|
page read and write
|
|
|
|
7FF5CD52F000
|
unkown
|
page readonly
|
|
|
|
7FF5CD3D5000
|
unkown
|
page readonly
|
|
|
|
17F4CC02000
|
unkown
|
page read and write
|
|
|
|
A416FAE000
|
unkown
|
page read and write
|
|
|
|
17F4C990000
|
unkown
|
page readonly
|
|
|
|
1F131518000
|
unkown
|
page read and write
|
|
|
|
17953A60000
|
unkown
|
page readonly
|
|
|
|
184A2F13000
|
unkown
|
page read and write
|
|
|
|
68BBFFE000
|
unkown
|
page read and write
|
|
|
|
184A2E3D000
|
unkown
|
page read and write
|
|
|
|
7FF5CD561000
|
unkown
|
page readonly
|
|
|
|
1F136190000
|
unkown
|
page read and write
|
|
|
|
16070680000
|
heap default
|
page read and write
|
|
|
|
7FF582E82000
|
unkown
|
page readonly
|
|
|
|
1F136600000
|
unkown
|
page read and write
|
|
|
|
11E4BFF000
|
unkown
|
page read and write
|
|
|
|
1E782AB0000
|
unkown
|
page readonly
|
|
|
|
1CB1F790000
|
unkown
|
page readonly
|
|
|
|
7FF558D23000
|
unkown
|
page readonly
|
|
|
|
F75CFC000
|
unkown
|
page read and write
|
|
|
|
7FF5CD510000
|
unkown
|
page readonly
|
|
|
|
7FF592F03000
|
unkown
|
page readonly
|
|
|
|
7FF58291C000
|
unkown
|
page readonly
|
|
|
|
7FF593296000
|
unkown
|
page readonly
|
|
|
|
1F131390000
|
unkown
|
page readonly
|
|
|
|
1BD63390000
|
unkown
|
page readonly
|
|
|
|
7FF5CD559000
|
unkown
|
page readonly
|
|
|
|
17953400000
|
unkown
|
page read and write
|
|
|
|
7FF5EF850000
|
unkown
|
page readonly
|
|
|
|
1E780CCE000
|
unkown
|
page read and write
|
|
|
|
7FF59300F000
|
unkown
|
page readonly
|
|
|
|
1F8BC3CE000
|
heap default
|
page read and write
|
|
|
|
A303FD000
|
unkown
|
page read and write
|
|
|
|
1F1362C0000
|
unkown
|
page read and write
|
|
|
|
1E783010000
|
unkown
|
page read and write
|
|
|
|
1F130E93000
|
unkown
|
page read and write
|
|
|
|
7FF506581000
|
unkown
|
page readonly
|
|
|
|
17F4CE00000
|
unkown
|
page readonly
|
|
|
|
7FF592E79000
|
unkown
|
page readonly
|
|
|
|
1F8BC390000
|
unkown
|
page readonly
|
|
|
|
7FF5EF89C000
|
unkown
|
page readonly
|
|
|
|
7FF583116000
|
unkown
|
page readonly
|
|
|
|
1F136640000
|
unkown
|
page readonly
|
|
|
|
A417DFB000
|
unkown
|
page read and write
|
|
|
|
A417FFB000
|
unkown
|
page read and write
|
|
|
|
7FF593101000
|
unkown
|
page readonly
|
|
|
|
1F1362C4000
|
unkown
|
page read and write
|
|
|
|
F7647F000
|
unkown
|
page read and write
|
|
|
|
A305FF000
|
unkown
|
page read and write
|
|
|
|
1F8BC270000
|
unkown
|
page readonly
|
|
|
|
1E7825B0000
|
unkown
|
page read and write
|
|
|
|
7FF5065BB000
|
unkown
|
page readonly
|
|
|
|
7FF5EF8B6000
|
unkown
|
page readonly
|
|
|
|
17953413000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF61000
|
unkown
|
page readonly
|
|
|
|
7FF558C40000
|
unkown
|
page readonly
|
|
|
|
1F131500000
|
unkown
|
page read and write
|
|
|
|
1F131559000
|
unkown
|
page read and write
|
|
|
|
11E414C000
|
unkown
|
page read and write
|
|
|
|
17F4C4BA000
|
unkown
|
page read and write
|
|
|
|
1E782A90000
|
unkown
|
page read and write
|
|
|
|
1F13643D000
|
unkown
|
page read and write
|
|
|
|
7FF582872000
|
unkown
|
page readonly
|
|
|
|
7FF5CCD78000
|
unkown
|
page readonly
|
|
|
|
1E780CAB000
|
unkown
|
page read and write
|
|
|
|
A41847A000
|
unkown
|
page read and write
|
|
|
|
1F131D70000
|
unkown
|
page readonly
|
|
|
|
A2FE7D000
|
unkown
|
page read and write
|
|
|
|
7FF582A8C000
|
unkown
|
page readonly
|
|
|
|
7FF5930DD000
|
unkown
|
page readonly
|
|
|
|
A41837B000
|
unkown
|
page read and write
|
|
|
|
7FF5E7F6D000
|
unkown
|
page readonly
|
|
|
|
A41797A000
|
unkown
|
page read and write
|
|
|
|
17F4D140000
|
unkown
|
page readonly
|
|
|
|
184A4990000
|
unkown
|
page read and write
|
|
|
|
1CB1FA02000
|
unkown
|
page read and write
|
|
|
|
7FF593185000
|
unkown
|
page readonly
|
|
|
|
7FF5931F5000
|
unkown
|
page readonly
|
|
|
|
7FF5E8395000
|
unkown
|
page readonly
|
|
|
|
A4178FC000
|
unkown
|
page read and write
|
|
|
|
17F4C502000
|
unkown
|
page read and write
|
|
|
|
1F130E91000
|
unkown
|
page read and write
|
|
|
|
1E782CF0000
|
unkown
|
page read and write
|
|
|
|
7FF5CEEF1000
|
unkown
|
page readonly
|
|
|
|
A417CFB000
|
unkown
|
page read and write
|
|
|
|
1E780DCC000
|
unkown
|
page read and write
|
|
|
|
7FF5CD4B3000
|
unkown
|
page readonly
|
|
|
|
1F1313A0000
|
unkown
|
page read and write
|
|
|
|
184A49C0000
|
unkown
|
page read and write
|
|
|
|
1F8BC40C000
|
unkown
|
page read and write
|
|
|
|
1E780CAD000
|
unkown
|
page read and write
|
|
|
|
7FF592FDF000
|
unkown
|
page readonly
|
|
|
|
184A48D0000
|
unkown
|
page read and write
|
|
|
|
17F4C2E0000
|
heap default
|
page read and write
|
|
|
|
7FF5063E5000
|
unkown
|
page readonly
|
|
|
|
16070879000
|
unkown
|
page read and write
|
|
|
|
7FF5CD59C000
|
unkown
|
page readonly
|
|
|
|
7FF5EF871000
|
unkown
|
page readonly
|
|
|
|
7FF582EED000
|
unkown
|
page readonly
|
|
|
|
1F136449000
|
unkown
|
page read and write
|
|
|
|
1F136370000
|
unkown
|
page read and write
|
|
|
|
1BD63320000
|
heap private
|
page read and write
|
|
|
|
184A3000000
|
unkown
|
page readonly
|
|
|
|
F7627D000
|
unkown
|
page read and write
|
|
|
|
1F136400000
|
unkown
|
page read and write
|
|
|
|
1F130D30000
|
unkown
|
page readonly
|
|
|
|
1E782EE3000
|
unkown
|
page read and write
|
|
|
|
D2E9B7E000
|
unkown
|
page read and write
|
|
|
|
1E780CC1000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF5C000
|
unkown
|
page readonly
|
|
|
|
A4179FB000
|
unkown
|
page read and write
|
|
|
|
7FF5CEFD5000
|
unkown
|
page readonly
|
|
|
|
1F131C50000
|
unkown
|
page read and write
|
|
|
|
1F8BC650000
|
heap private
|
page read and write
|
|
|
|
1BD63454000
|
unkown
|
page read and write
|
|
|
|
1CB1F150000
|
unkown
|
page readonly
|
|
|
|
7FF558C51000
|
unkown
|
page readonly
|
|
|
|
17F4C280000
|
heap private
|
page read and write
|
|
|
|
17F4C400000
|
unkown
|
page read and write
|
|
|
|
F75F7F000
|
unkown
|
page read and write
|
|
|
|
A41777B000
|
unkown
|
page read and write
|
|
|
|
7FF5CD58C000
|
unkown
|
page readonly
|
|
|
|
16070690000
|
unkown
|
page readonly
|
|
|
|
1E780CF6000
|
unkown
|
page read and write
|
|
|
|
179533A0000
|
unkown
|
page readonly
|
|
|
|
7FF50633C000
|
unkown
|
page readonly
|
|
|
|
1F1364B4000
|
unkown
|
page read and write
|
|
|
|
1E780D61000
|
unkown
|
page read and write
|
|
|
|
1E780C55000
|
unkown
|
page read and write
|
|
|
|
1F136720000
|
unkown
|
page readonly
|
|
|
|
1E782CEC000
|
unkown
|
page read and write
|
|
|
|
1E782C06000
|
unkown
|
page read and write
|
|
|
|
7FF59301E000
|
unkown
|
page readonly
|
|
|
|
1E782A90000
|
unkown
|
page read and write
|
|
|
|
1F130E72000
|
unkown
|
page read and write
|
|
|
|
7FF592AC6000
|
unkown
|
page readonly
|
|
|
|
D2E997D000
|
unkown
|
page read and write
|
|
|
|
1F130F13000
|
unkown
|
page read and write
|
|
|
|
1F1361A0000
|
unkown
|
page read and write
|
|
|
|
1F136423000
|
unkown
|
page read and write
|
|
|
|
7FF583011000
|
unkown
|
page readonly
|
|
|
|
A4174FA000
|
unkown
|
page read and write
|
|
|
|
179533B0000
|
unkown
|
page readonly
|
|
|
|
7FF5EF692000
|
unkown
|
page readonly
|
|
|
|
1E783010000
|
unkown
|
page read and write
|
|
|
|
F7607F000
|
unkown
|
page read and write
|
|
|
|
7FF582C78000
|
unkown
|
page readonly
|
|
|
|
7FF592B0C000
|
unkown
|
page readonly
|
|
|
|
7FF582E8A000
|
unkown
|
page readonly
|
|
|
|
17F4C429000
|
unkown
|
page read and write
|
|
|
|
A41757A000
|
unkown
|
page read and write
|
|
|
|
1E780D42000
|
unkown
|
page read and write
|
|
|
|
184A4990000
|
unkown
|
page read and write
|
|
|
|
1E782E42000
|
unkown
|
page read and write
|
|
|
|
D2E957B000
|
unkown
|
page read and write
|
|
|
|
7FF5065E4000
|
unkown
|
page readonly
|
|
|
|
1E780D61000
|
unkown
|
page read and write
|
|
|
|
1E780CAB000
|
unkown
|
page read and write
|
|
|
|
7FF558485000
|
unkown
|
page readonly
|
|
|
|
1BD6345B000
|
unkown
|
page read and write
|
|
|
|
7FF506574000
|
unkown
|
page readonly
|
|
|
|
68BBCFE000
|
unkown
|
page read and write
|
|
|
|
7FF5930C0000
|
unkown
|
page readonly
|
|
|
|
1F1363AC000
|
unkown
|
page readonly
|
|
|
|
7FF5EF8C4000
|
unkown
|
page readonly
|
|
|
|
1CB1F23D000
|
unkown
|
page read and write
|
|
|
|
1E782C13000
|
unkown
|
page read and write
|
|
|
|
16071002000
|
unkown
|
page read and write
|
|
|
|
184A4880000
|
unkown
|
page read and write
|
|
|
|
1E780C60000
|
unkown
|
page read and write
|
|
|
|
1F130EA3000
|
unkown
|
page read and write
|
|
|
|
1E783010000
|
unkown
|
page read and write
|
|
|
|
17F4C4D6000
|
unkown
|
page read and write
|
|
|
|
1E782CFD000
|
unkown
|
page read and write
|
|
|
|
7FF5CD30D000
|
unkown
|
page readonly
|
|
|
|
7FF5EF848000
|
unkown
|
page readonly
|
|
|
|
1F131D60000
|
unkown
|
page readonly
|
|
|
|
7FF5E8386000
|
unkown
|
page readonly
|
|
|
|
A4185FB000
|
unkown
|
page read and write
|
|
|
|
1E780C63000
|
unkown
|
page read and write
|
|
|
|
17953600000
|
unkown
|
page readonly
|
|
|
|
1E780D51000
|
unkown
|
page read and write
|
|
|
|
7FF582909000
|
unkown
|
page readonly
|
|
|
|
184A2E00000
|
unkown
|
page read and write
|
|
|
|
184A2F00000
|
unkown
|
page read and write
|
|
|
|
7FF5CD551000
|
unkown
|
page readonly
|
|
|
|
1CB1F302000
|
unkown
|
page read and write
|
|
|
|
1F136416000
|
unkown
|
page read and write
|
|
|
|
A306FF000
|
unkown
|
page read and write
|
|
|
|
16070D90000
|
unkown
|
page readonly
|
|
|
|
2C8807B000
|
unkown
|
page read and write
|
|
|
|
7FF5CD599000
|
unkown
|
page readonly
|
|
|
|
1E783010000
|
unkown
|
page read and write
|
|
|
|
1E780D51000
|
unkown
|
page read and write
|
|
|
|
162A7FB000
|
unkown
|
page read and write
|
|
|
|
7FF583051000
|
unkown
|
page readonly
|
|
|
|
7FF5CD51C000
|
unkown
|
page readonly
|
|
|
|
1E782E02000
|
unkown
|
page read and write
|
|
|
|
1F130C50000
|
unkown
|
page readonly
|
|
|
|
1F136400000
|
unkown
|
page read and write
|
|
|
|
1E782EED000
|
unkown
|
page read and write
|
|
|
|
7FF5E82B5000
|
unkown
|
page readonly
|
|
|
|
A417AFB000
|
unkown
|
page read and write
|
|
|
|
7FF5E82F5000
|
unkown
|
page readonly
|
|
|
|
7FF582F11000
|
unkown
|
page readonly
|
|
|
|
16070760000
|
unkown
|
page readonly
|
|
|
|
A41787B000
|
unkown
|
page read and write
|
|
|
|
7FF5CD544000
|
unkown
|
page readonly
|
|
|
|
7FF5CD5A6000
|
unkown
|
page readonly
|
|
|
|
184A2E5A000
|
unkown
|
page read and write
|
|
|
|
7FF5931D4000
|
unkown
|
page readonly
|
|
|
|
7FF5CECFB000
|
unkown
|
page readonly
|
|
|
|
1BD63600000
|
unkown
|
page readonly
|
|
|
|
17F4C513000
|
unkown
|
page read and write
|
|
|
|
184A4990000
|
unkown
|
page read and write
|
|
|
|
184A2E5B000
|
unkown
|
page read and write
|
|
|
|
7FF558C59000
|
unkown
|
page readonly
|
|
|
|
17F4C4FE000
|
unkown
|
page read and write
|
|
|
|
A41897F000
|
unkown
|
page read and write
|
|
|
|
1F1364B1000
|
unkown
|
page read and write
|
|
|
|
7FF592AFB000
|
unkown
|
page readonly
|
|
|
|
7FF5063B2000
|
unkown
|
page readonly
|
|
|
|
7FF5EF8A2000
|
unkown
|
page readonly
|
|
|
|
184A3460000
|
unkown
|
page readonly
|
|
|
|
7FF5E8326000
|
unkown
|
page readonly
|
|
|
|
1E780D13000
|
unkown
|
page read and write
|
|
|
|
1F130E8D000
|
unkown
|
page read and write
|
|
|
|
17953402000
|
unkown
|
page read and write
|
|
|
|
1F136461000
|
unkown
|
page read and write
|
|
|
|
7FF506540000
|
unkown
|
page readonly
|
|
|
|
7FF5E82C0000
|
unkown
|
page readonly
|
|
|
|
16070828000
|
unkown
|
page read and write
|
|
|
|
7FF506653000
|
unkown
|
page readonly
|
|
|
|
1F1364B2000
|
unkown
|
page read and write
|
|
|
|
A4187FC000
|
unkown
|
page read and write
|
|
|
|
F759CE000
|
unkown
|
page read and write
|
|
|
|
1F1363B0000
|
unkown
|
page read and write
|
|
|
|
1E780C9D000
|
unkown
|
page read and write
|
|
|
|
1F8BC340000
|
unkown
|
page read and write
|
|
|
|
7FF5EF854000
|
unkown
|
page readonly
|
|
|
|
A417E7B000
|
unkown
|
page read and write
|
|
|
|
1E780DCF000
|
unkown
|
page read and write
|
|
|
|
7FF592EE2000
|
unkown
|
page readonly
|
|
|
|
1F8BC360000
|
unkown
|
page read and write
|
|
|
|
1F130EB4000
|
unkown
|
page read and write
|
|
|
|
7FF593289000
|
unkown
|
page readonly
|
|
|
|
1F130E13000
|
unkown
|
page read and write
|
|
|
|
7FF583106000
|
unkown
|
page readonly
|
|
|
|
7FF5E8069000
|
unkown
|
page readonly
|
|
|
|
1BD63C02000
|
unkown
|
page read and write
|
|
|
|
68BBC7C000
|
unkown
|
page read and write
|
|
|
|
2C885FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E816D000
|
unkown
|
page readonly
|
|
|
|
1BD63463000
|
unkown
|
page read and write
|
|
|
|
1CB1F202000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF00000
|
unkown
|
page readonly
|
|
|
|
A41767B000
|
unkown
|
page read and write
|
|
|
|
1E780CC3000
|
unkown
|
page read and write
|
|
|
|
184A2E63000
|
unkown
|
page read and write
|
|
|
|
1F1313B0000
|
unkown
|
page read and write
|
|
|
|
7FF5E8312000
|
unkown
|
page readonly
|
|
|
|
1E782AA0000
|
unkown
|
page read and write
|
|
|
|
1BD63400000
|
unkown
|
page read and write
|
|
|
|
7FF5065A5000
|
unkown
|
page readonly
|
|
|
|
1BD633D0000
|
unkown
|
page readonly
|
|
|
|
7FF5EF845000
|
unkown
|
page readonly
|
|
|
|
179533F0000
|
unkown
|
page read and write
|
|
|
|
16070800000
|
unkown
|
page read and write
|
|
|
|
1F131B70000
|
unkown
|
page read and write
|
|
|
|
1BD63502000
|
unkown
|
page read and write
|
|
|
|
7FF585F63000
|
unkown
|
page readonly
|
|
|
|
1BD636D0000
|
unkown
|
page readonly
|
|
|
|
7FF5E838C000
|
unkown
|
page readonly
|
|
|
|
8868CFF000
|
unkown
|
page read and write
|
|
|
|
7FF558C61000
|
unkown
|
page readonly
|
|
|
|
7FF5CEEEF000
|
unkown
|
page readonly
|
|
|
|
7FF5E7EF8000
|
unkown
|
page readonly
|
|
|
|
1F130E00000
|
unkown
|
page read and write
|
|
|
|
7FF558BC3000
|
unkown
|
page readonly
|
|
|
|
7FF50641E000
|
unkown
|
page readonly
|
|
|
|
2C8837E000
|
unkown
|
page read and write
|
|
|
|
7FF583044000
|
unkown
|
page readonly
|
|
|
|
1E782A90000
|
unkown
|
page read and write
|
|
|
|
1F131D50000
|
unkown
|
page readonly
|
|
|
|
7FF5E83A3000
|
unkown
|
page readonly
|
|
|
|
7FF5EF861000
|
unkown
|
page readonly
|
|
|
|
1F8BDD60000
|
unkown
|
page readonly
|
|
|
|
184A2F02000
|
unkown
|
page read and write
|
|
|
|
7FF506570000
|
unkown
|
page readonly
|
|
|
|
1F136180000
|
unkown
|
page read and write
|
|
|
|
17953330000
|
heap private
|
page read and write
|
|
|
|
1F1320F3000
|
unkown
|
page read and write
|
|
|
|
7FF5E8253000
|
unkown
|
page readonly
|
|
|
|
7FF5931C1000
|
unkown
|
page readonly
|
|
|
|
184A2E2A000
|
unkown
|
page read and write
|
|
|
|
7FF582881000
|
unkown
|
page readonly
|
|
|
|
1BD63441000
|
unkown
|
page read and write
|
|
|
|
16070620000
|
heap private
|
page read and write
|
|
|
|
17953440000
|
unkown
|
page read and write
|
|
|
|
7FF593045000
|
unkown
|
page readonly
|
|
|
|
17F4CA80000
|
unkown
|
page write copy
|
|
|
|
7FF5CD623000
|
unkown
|
page readonly
|
|
|
|
17F4C471000
|
unkown
|
page read and write
|
|
|
|
1F8BC655000
|
heap private
|
page read and write
|
|
|
|
7FF5930AB000
|
unkown
|
page readonly
|
|
|
|
184A2F18000
|
unkown
|
page read and write
|
|
|
|
1E783110000
|
unkown
|
page read and write
|
|
|
|
1E782C34000
|
unkown
|
page read and write
|
|
|
|
F7594D000
|
unkown
|
page read and write
|
|
|
|
7FF592E7B000
|
unkown
|
page readonly
|
|
|
|
17F4C3C0000
|
unkown
|
page readonly
|
|
|
|
1795342A000
|
unkown
|
page read and write
|
|
|
|
7FF5CD623000
|
unkown
|
page readonly
|
|
|
|
1E780C58000
|
unkown
|
page read and write
|
|
|
|
7FF5CEC99000
|
unkown
|
page readonly
|
|
|
|
2C882FE000
|
unkown
|
page read and write
|
|
|
|
1F8BC860000
|
unkown
|
page readonly
|
|
|
|
1F8BC3FA000
|
heap default
|
page read and write
|
|
|
|
1F136600000
|
unkown
|
page readonly
|
|
|
|
7FF5E829C000
|
unkown
|
page readonly
|
|
|
|
179536D0000
|
unkown
|
page readonly
|
|
|
|
D2E97FE000
|
unkown
|
page read and write
|
|
|
|
7FF506524000
|
unkown
|
page readonly
|
|
|
|
16070780000
|
unkown
|
page read and write
|
|
|
|
1E780A60000
|
heap private
|
page read and write
|
|
|
|
1E780C29000
|
unkown
|
page read and write
|
|
|
|
1E782E02000
|
unkown
|
page read and write
|
|
|
|
7FF59318C000
|
unkown
|
page readonly
|
|
|
|
16070A00000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF59000
|
unkown
|
page readonly
|
|
|
|
179533C0000
|
unkown
|
page read and write
|
|
|
|
7FF5CD3B5000
|
unkown
|
page readonly
|
|
|
|
1CB1F070000
|
heap default
|
page read and write
|
|
|
|
A309FE000
|
unkown
|
page read and write
|
|
|
|
1F136374000
|
unkown
|
page readonly
|
|
|
|
8868AFF000
|
unkown
|
page read and write
|
|
|
|
A4186FB000
|
unkown
|
page read and write
|
|
|
|
1E780CB5000
|
unkown
|
page read and write
|
|
|
|
7FF582918000
|
unkown
|
page readonly
|
|
|
|
7FF5CD52B000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF11000
|
unkown
|
page readonly
|
|
|
|
A4181FB000
|
unkown
|
page read and write
|
|
|
|
1F130E6C000
|
unkown
|
page read and write
|
|
|
|
7FF506465000
|
unkown
|
page readonly
|
|
|
|
1CB1F23A000
|
unkown
|
page read and write
|
|
|
|
1E780CAB000
|
unkown
|
page read and write
|
|
|
|
11E447D000
|
unkown
|
page read and write
|
|
|
|
11E4AFC000
|
unkown
|
page read and write
|
|
|
|
7FF5830A6000
|
unkown
|
page readonly
|
|
|
|
7FF592FFD000
|
unkown
|
page readonly
|
|
|
|
1F136487000
|
unkown
|
page read and write
|
|
|
|
7FF5EF83F000
|
unkown
|
page readonly
|
|
|
|
1E783110000
|
unkown
|
page read and write
|
|
|
|
1BD63402000
|
unkown
|
page read and write
|
|
|
|
1E780C60000
|
unkown
|
page read and write
|
|
|
|
7FF5CD540000
|
unkown
|
page readonly
|
|
|
|
7FF50646A000
|
unkown
|
page readonly
|
|
|
|
2C8847F000
|
unkown
|
page read and write
|
|
|
|
7FF5CEC95000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFCC000
|
unkown
|
page readonly
|
|
|
|
7FF506549000
|
unkown
|
page readonly
|
|
|
|
7FF5CEEF8000
|
unkown
|
page readonly
|
|
|
|
A4172FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E82C4000
|
unkown
|
page readonly
|
|
|
|
A301FE000
|
unkown
|
page read and write
|
|
|
|
1F1320F0000
|
unkown
|
page read and write
|
|
|
|
17F4C444000
|
unkown
|
page read and write
|
|
|
|
1F136650000
|
unkown
|
page readonly
|
|
|
|
1E780D61000
|
unkown
|
page read and write
|
|
|
|
A4184FD000
|
unkown
|
page read and write
|
|
|
|
1F8BE26F000
|
heap private
|
page read and write
|
|
|
|
7FF5064E3000
|
unkown
|
page readonly
|
|
|
|
7FF593241000
|
unkown
|
page readonly
|
|
|
|
1E780AC0000
|
heap default
|
page read and write
|
|
|
|
7FF5CD411000
|
unkown
|
page readonly
|
|
|
|
7FF583123000
|
unkown
|
page readonly
|
|
|
|
7FF582EB5000
|
unkown
|
page readonly
|
|
|
|
7FF5E7B4C000
|
unkown
|
page readonly
|
|
|
|
A2FFFF000
|
unkown
|
page read and write
|
|
|
|
7FF558D16000
|
unkown
|
page readonly
|
|
|
|
7FF5E82B8000
|
unkown
|
page readonly
|
|
|
|
1F131518000
|
unkown
|
page read and write
|
|
|
|
1F136370000
|
unkown
|
page write copy
|
|
|
|
A41817B000
|
unkown
|
page read and write
|
|
|
|
7FF5E8290000
|
unkown
|
page readonly
|
|
|
|
7FF592E84000
|
unkown
|
page readonly
|
|
|
|
68BBF7D000
|
unkown
|
page read and write
|
|
|
|
17F4C600000
|
unkown
|
page readonly
|
|
|
|
2C880FE000
|
unkown
|
page read and write
|
|
|
|
7FF5EF933000
|
unkown
|
page readonly
|
|
|
|
1E782A20000
|
heap private
|
page read and write
|
|
|
|
7FF5CD592000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFC6000
|
unkown
|
page readonly
|
|
|
|
1F130E3F000
|
unkown
|
page read and write
|
|
|
|
D2E8EFE000
|
unkown
|
page read and write
|
|
|
|
1BD633A0000
|
unkown
|
page readonly
|
|
|
|
D2E917A000
|
unkown
|
page read and write
|
|
|
|
A417BFA000
|
unkown
|
page read and write
|
|
|
|
1CB1F160000
|
unkown
|
page readonly
|
|
|
|
184A4A02000
|
unkown
|
page read and write
|
|
|
|
7FF5CEFE3000
|
unkown
|
page readonly
|
|
|
|
7FF583035000
|
unkown
|
page readonly
|
|
|
|
D2E907E000
|
unkown
|
page read and write
|
|
|
|
A4183FB000
|
unkown
|
page read and write
|
|
|
|
1E782EF6000
|
unkown
|
page read and write
|
|
|
|
17F4CD53000
|
unkown
|
page read and write
|
|
|
|
7FF50655F000
|
unkown
|
page readonly
|
|
|
|
A4180FB000
|
unkown
|
page read and write
|
|
|
|
17953E00000
|
unkown
|
page read and write
|
|
|
|
7FF5932A4000
|
unkown
|
page readonly
|
|
|
|
1E782E4A000
|
unkown
|
page read and write
|
|
|
|
1E780CA9000
|
unkown
|
page read and write
|
|
|
|
7FF5CD5B4000
|
unkown
|
page readonly
|
|
|
|
1E782E0A000
|
unkown
|
page read and write
|
|
|
|
7FF5931EC000
|
unkown
|
page readonly
|
|
|
|
1F1364BA000
|
unkown
|
page read and write
|
|
|
|
184A4F40000
|
unkown
|
page write copy
|
|
|
|
A2FF7B000
|
unkown
|
page read and write
|
|
|
|
D2E8E7E000
|
unkown
|
page read and write
|
|
|
|
1795345C000
|
unkown
|
page read and write
|
|
|
|
7FF558C99000
|
unkown
|
page readonly
|
|
|
|
1F131000000
|
unkown
|
page readonly
|
|
|
|
7FF558913000
|
unkown
|
page readonly
|
|
|
|
1F136100000
|
unkown
|
page read and write
|
|
|
|
7FF558D23000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFE3000
|
unkown
|
page readonly
|
|
|
|
17F4C3E0000
|
unkown
|
page read and write
|
|
|
|
7FF5CD4F4000
|
unkown
|
page readonly
|
|
|
|
A41747A000
|
unkown
|
page read and write
|
|
|
|
A4175FB000
|
unkown
|
page read and write
|
|
|
|
7FF5930BB000
|
unkown
|
page readonly
|
|
|
|
7FF5930C5000
|
unkown
|
page readonly
|
|
|
|
7FF593230000
|
unkown
|
page readonly
|
|
|
|
184A4C00000
|
unkown
|
page readonly
|
|
|
|
1E780CA7000
|
unkown
|
page read and write
|
|
|
|
184A2E4B000
|
unkown
|
page read and write
|
|
|
|
1E782EB6000
|
unkown
|
page read and write
|
|
|
|
1E782A90000
|
unkown
|
page read and write
|
|
|
|
7FF5CCD7E000
|
unkown
|
page readonly
|
|
|
|
1F8BC3CB000
|
heap default
|
page read and write
|
|
|
|
7FF59303F000
|
unkown
|
page readonly
|
|
|
|
1E783010000
|
unkown
|
page read and write
|
|
|
|
1E782E02000
|
unkown
|
page read and write
|
|
|
|
7FF5EF5B8000
|
unkown
|
page readonly
|
|
|
|
1E780BF0000
|
unkown
|
page readonly
|
|
|
|
8868BFF000
|
unkown
|
page read and write
|
|
|
|
1F1362A0000
|
unkown
|
page read and write
|
|
|
|
1F130EFF000
|
unkown
|
page read and write
|
|
|
|
D2E977E000
|
unkown
|
page read and write
|
|
|
|
7FF592ABC000
|
unkown
|
page readonly
|
|
|
|
7FF5E82AF000
|
unkown
|
page readonly
|
|
|
|
16070813000
|
unkown
|
page read and write
|
|
|
|
7FF5CD382000
|
unkown
|
page readonly
|
|
|
|
184A2E5B000
|
unkown
|
page read and write
|
|
|
|
A41737A000
|
unkown
|
page read and write
|
|
|
|
7FF5EF885000
|
unkown
|
page readonly
|
|
|
|
7FF5931F0000
|
unkown
|
page readonly
|
|
|
|
1F136150000
|
unkown
|
page readonly
|
|
|
|
1F130E74000
|
unkown
|
page read and write
|
|
|
|
A4176F9000
|
unkown
|
page read and write
|
|
|
|
7FF592B03000
|
unkown
|
page readonly
|
|
|
|
17953390000
|
heap default
|
page read and write
|
|
|
|
7FF5EF8AC000
|
unkown
|
page readonly
|
|
|
|
17F4C4F1000
|
unkown
|
page read and write
|
|
|
|
A4173FF000
|
unkown
|
page read and write
|
|
|
|
162A8FF000
|
unkown
|
page read and write
|
|
|
|
1E783110000
|
unkown
|
page read and write
|
|
|
|
7FF505DF8000
|
unkown
|
page readonly
|
|
|
|
D2E95FE000
|
unkown
|
page read and write
|
|
|
|
7FF5CD505000
|
unkown
|
page readonly
|
|
|
|
1F131D80000
|
unkown
|
page readonly
|
|
|
|
184A2E02000
|
unkown
|
page read and write
|
|
|
|
7FF558C9C000
|
unkown
|
page readonly
|
|
|
|
1E780C3F000
|
unkown
|
page read and write
|
|
|
|
A300FD000
|
unkown
|
page read and write
|
|
|
|
1E782C41000
|
unkown
|
page read and write
|
|
|
|
11E487B000
|
unkown
|
page read and write
|
|
|
|
1F136600000
|
unkown
|
page read and write
|
|
|
|
16071200000
|
unkown
|
page readonly
|
|
|
|
7FF5E7F09000
|
unkown
|
page readonly
|
|
|
|
F758CB000
|
unkown
|
page read and write
|
|
|
|
7FF5CE724000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF35000
|
unkown
|
page readonly
|
|
|
|
1F130BE0000
|
heap private
|
page read and write
|
|
|
|
1BD63478000
|
unkown
|
page read and write
|
|
|
|
7FF558A39000
|
unkown
|
page readonly
|
|
|
|
7FF5EF07B000
|
unkown
|
page readonly
|
|
|
|
1E783010000
|
unkown
|
page read and write
|
|
|
|
7FF558CB4000
|
unkown
|
page readonly
|
|
|
|
886887E000
|
unkown
|
page read and write
|
|
|
|
1BD633B0000
|
unkown
|
page read and write
|
|
|
|
7FF558CA6000
|
unkown
|
page readonly
|
|
|
|
7FF593072000
|
unkown
|
page readonly
|
|
|
|
7FF593021000
|
unkown
|
page readonly
|
|
|
|
1E782C2C000
|
unkown
|
page read and write
|
|
|
|
1E780CFC000
|
unkown
|
page read and write
|
|
|
|
7FF5CEEF5000
|
unkown
|
page readonly
|
|
|
|
184A49B0000
|
unkown
|
page readonly
|
|
|
|
7FF558D06000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF04000
|
unkown
|
page readonly
|
|
|
|
1E782A10000
|
unkown
|
page readonly
|
|
|
|
1F130F02000
|
unkown
|
page read and write
|
|
|
|
7FF59327B000
|
unkown
|
page readonly
|
|
|
|
7FF5E8240000
|
unkown
|
page readonly
|
|
|
|
11E41CE000
|
unkown
|
page read and write
|
|
|
|
1F8BC210000
|
unkown
|
page readonly
|
|
|
|
7FF5065D6000
|
unkown
|
page readonly
|
|
|
|
1E780C7F000
|
unkown
|
page read and write
|
|
|
|
D2E9A7C000
|
unkown
|
page read and write
|
|
|
|
7FF58302F000
|
unkown
|
page readonly
|
|
|
|
7FF59328C000
|
unkown
|
page readonly
|
|
|
|
1CB1F22A000
|
unkown
|
page read and write
|
|
|
|
7FF506645000
|
unkown
|
page readonly
|
|
|
|
A4182FB000
|
unkown
|
page read and write
|
|
|
|
1E780CA0000
|
unkown
|
page read and write
|
|
|
|
1F1362D0000
|
unkown
|
page read and write
|
|
|
|
7FF593225000
|
unkown
|
page readonly
|
|
|
|
7FF5E810A000
|
unkown
|
page readonly
|
|
|
|
7FF5065C9000
|
unkown
|
page readonly
|
|
There are 831 hidden memdumps, click here to show them.