Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
pan0ramic0.jpg.dll
|
MS-DOS executable, MZ for MS-DOS
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\www.msn[2].xml
|
ASCII text, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\URW0GA4Q\contextual.media[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{3671C482-5C7E-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3671C484-5C7E-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{45715FD2-5C7E-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{5B490171-5C7E-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\41-0bee62-68ddb2ab[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\4996b9[1].woff
|
Web Open Font Format, TrueType, length 45633, version 1.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\755f86[1].png
|
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAyuliQ[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB15AQNm[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1ardZ3[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cGyFI[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cWZVM[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cYLLX[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cYN9h[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cYNie[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cYSRo[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 311x333,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cYWZY[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 300x250,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cYXLK[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cZ4A0[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cZ6aY[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BBMW3y8[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BBnYSFZ[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\aadcdc47-f267-4b70-bc4e-4fdd88f9ef0d[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\cfdbd9[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\f489d89a-0e50-4a68-82ea-aa78359a514f[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\fcmain[1].js
|
HTML document, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\feAYj[1].avi
|
data
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\http___cdn.taboola.com_libtrc_static_thumbnails_07005b28918b6790561c342934626f1a[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAzb5EX[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1breIx[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cEP3G[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cG73h[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cXRiu[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 239x239, segment length 16, baseline, precision 8, 100x75,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cXsHn[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cYA3b[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 206x250,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cYFXc[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 311x333,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cYXM1[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cYZKx[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cYZUc[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 206x250,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cZ1Ru[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 311x333,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1cZ69Y[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1kKVy[1].png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BBVuddh[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BBY7ARN[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\a8a064[1].gif
|
GIF image data, version 89a, 28 x 28
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\de-ch[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\e151e5[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\iab2Data[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery-2.1.1.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\medianet[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\medianet[2].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\otTCF-ie[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\627[1].png
|
PNG image data, 1200 x 627, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\85-0f8009-68ddb2ab[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AA7XCQ3[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAuTnto[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB14EN7h[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1cXUie[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1cY10a[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 310x166,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1cY3NL[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1cYUGz[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 310x166,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1cYZkP[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1cYuNh[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1cZ04B[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 350x350, segment length 16, baseline, precision 8, 311x333,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB6Ma4a[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB7hjL[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BBIbVOm[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BBMQmHU[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BBO5Geh[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\a5ea21[1].ico
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\checksync[3].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\http___cdn.taboola.com_libtrc_static_thumbnails_0eae2fe61e6ffcfcfe353bd536e5886d[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\https___native-images.s3.amazonaws.com_2f58cec91d064649b793b7c678469176[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\nrrV63415[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\otPcCenter[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\otSDKStub[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\55a804ab-e5c6-4b97-9319-86263d365d28[1].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\58-acd805-185735b[1].css
|
UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB10MkbM[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB14hq0P[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cXQSk[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cXwvz[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cY5Mo[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cYP7S[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, baseline, precision 8, 311x333,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cYVyx[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cYWTM[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cYjaY[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cYoU0[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 100x75,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cYxrr[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cYzk8[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cZ1Ru[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1cZ1e1[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB7gRE[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BBPfCZL[1].png
|
GIF image data, version 89a, 50 x 50
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BBX2afX[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BBZ3zrM[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BBZbaoj[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BBZcsVW[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, baseline, precision 8, 206x250,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\auction[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\de-ch[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\fcmain[1].js
|
HTML document, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\otBannerSdk[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\otFlat[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF0789975C4846B9EA.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF624FA4DCADE9C61C.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF6B5F985CB4F40854.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF8236854A76AC5E2B.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0SX3DUGISWBHOUJUA7AY.temp
|
data
|
dropped
|
|
There are 119 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32.exe /s C:\Users\user\Desktop\pan0ramic0.jpg.dll
|
|
|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\pan0ramic0.jpg.dll'
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c 'C:\Program Files\Internet Explorer\iexplore.exe'
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
C:\Program Files\Internet Explorer\iexplore.exe
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5704 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5704 CREDAT:82962 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5704 CREDAT:17426 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.msn.com/de-ch/news/other/zkb-sagt-umstrittenen-erlebnisgarten-wegen-pandemie-ab/ar-BB1cX
|
unknown
|
|
|
|
http://searchads.msn.net/.cfm?&&kp=1&
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/coronareisen
|
unknown
|
|
|
|
https://www.remixd.com/privacy_policy.html
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/nach-dem-flockdown-parkpl%c3%a4tze-dienen-der-stadt-z%c3%bcrich
|
unknown
|
|
|
|
https://onedrive.live.com;Fotos
|
unknown
|
|
|
|
http://www.symantec.com
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
|
unknown
|
|
|
|
http://ogp.me/ns/fb#
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-ss&ued=htt
|
unknown
|
|
|
|
https://outlook.live.com/mail/deeplink/compose;Kalender
|
unknown
|
|
|
|
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
|
unknown
|
|
|
|
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://www.skype.com/
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/regional
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/nach-razzia-gegen-mutmassliche-neonazis-rechtsextreme-junge-tat
|
unknown
|
|
|
|
https://amzn.to/2TTxhNg
|
unknown
|
|
|
|
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
|
unknown
|
|
|
|
https://client-s.gateway.messenger.live.com
|
unknown
|
|
|
|
https://www.brightcom.com/privacy-policy/
|
unknown
|
|
|
|
https://www.msn.com/de-ch/
|
unknown
|
|
|
|
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-edge-dhp-river
|
unknown
|
|
|
|
https://bealion.com/politica-de-cookies
|
unknown
|
|
|
|
https://www.msn.com/de-ch
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
|
unknown
|
|
|
|
https://twitter.com/i/notifications;Ich
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=11518&awinaffid=696593&clickref=dech-edge-dhp-infopa
|
unknown
|
|
|
|
https://www.gadsme.com/privacy-policy/
|
unknown
|
|
|
|
https://portal.eu.numbereight.me/policies-license#software-privacy-notice
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/die-stadt-z%c3%bcrich-schnappt-sich-einen-begehrten-kita-stando
|
unknown
|
|
|
|
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://ogp.me/ns#
|
unknown
|
|
|
|
https://docs.prebid.org/privacy.html
|
unknown
|
|
|
|
https://dcdn.adnxs.com/shftr/https%253A%252F%252Fcrcdn01.adnxs.com%252Fcreative%252Fp%252F9123%252F2
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;OneDrive-App
|
unknown
|
|
|
|
https://www.skype.com/de
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
|
unknown
|
|
|
|
https://www.skype.com/de/download-skype
|
unknown
|
|
|
|
https://www.stroeer.de/fileadmin/de/Konvergenz_und_Konzepte/Daten_und_Technologien/Stroeer_SSP/Downl
|
unknown
|
|
|
|
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
|
|
|
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
|
unknown
|
|
|
|
https://channelpilot.co.uk/privacy-policy
|
unknown
|
|
|
|
https://onedrive.live.com;OneDrive-App
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
|
unknown
|
|
|
|
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
|
unknown
|
|
|
|
https://www.admo.tv/en/privacy-policy
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/in-schwamendingen-soll-die-gr%c3%b6sste-z%c3%bcrcher-schulanlag
|
unknown
|
|
|
|
https://www.bet365affiliates.com/UI/Pages/Affiliates/Affiliates.aspx?ContentPath
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/googleData.json
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/feuerwehr-sperrt-teile-der-altstadt-wegen-dachlawinen/ar-BB1cXQ
|
unknown
|
|
|
|
https://outlook.com/
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/ich-habe-mehrere-kritische-man%c3%b6ver-mit-autofahrern-erlebt/
|
unknown
|
|
|
|
https://rover.ebay.com/rover/1/5222-53480-19255-0/1?mpre=https%3A%2F%2Fwww.ebay.ch&campid=533862
|
unknown
|
|
|
|
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iabData.json
|
unknown
|
|
|
|
https://www.msn.com/de-ch/homepage/api/pdp/updatepdpdata"
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iab2Data.json
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;Aktuelle
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
|
unknown
|
|
|
|
https://www.msn.com/de-ch/homepage/api/modules/fetch"
|
unknown
|
|
|
|
https://mem.gfx.ms/meversion/?partner=msn&market=de-ch"
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://web.vortex.data.msn.com/collect/v1/t.gif?name=%27Ms.Webi.PageView%27&ver=%272.1%27&a
|
unknown
|
|
|
|
https://www.bidstack.com/privacy-policy/
|
unknown
|
|
|
|
https://onedrive.live.com/about/en/download/
|
unknown
|
|
|
|
http://popup.taboola.com/german
|
unknown
|
|
|
|
https://listonic.com/privacy/
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/aus-angst-vor-mutierten-viren-maskenpflicht-f%c3%bcr-z%c3%bcrch
|
unknown
|
|
|
|
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_mestripe_logo_d
|
unknown
|
|
|
|
https://twitter.com/
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=245744&a=3064090&g=24903118&epi=ch-de
|
unknown
|
|
|
|
https://quantyoo.de/datenschutz
|
unknown
|
|
|
|
https://outlook.live.com/calendar
|
unknown
|
|
|
|
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:au
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/kommentar-es-braucht-keine-staatlichen-kitas-in-der-stadt-z%c3%
|
unknown
|
|
|
|
https://onedrive.live.com/#qt=mru
|
unknown
|
|
|
|
https://api.taboola.com/2.0/json/msn-ch-de-home/recommendations.notify-click?app.type=desktop&ap
|
unknown
|
|
|
|
https://www.msn.com?form=MY01O4&OCID=MY01O4
|
unknown
|
|
|
|
https://www.vidstart.com/wp-content/uploads/2018/09/PrivacyPolicyPDF-Vidstart.pdf
|
unknown
|
|
|
|
https://support.skype.com
|
unknown
|
|
|
|
https://www.skyscanner.net/flights?associateid=API_B2B_19305_00001&vertical=custom&pageType=
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1
|
unknown
|
|
|
|
https://clk.tradedoubler.com/click?p=245744&a=3064090&g=21863656
|
unknown
|
|
|
|
https://www.xandr.com/privacy/platform-privacy-policy
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
contextual.media.net
|
104.76.200.23
|
|
|
|
tls13.taboola.map.fastly.net
|
151.101.1.44
|
|
|
|
ocsp.sca1b.amazontrust.com
|
143.204.214.142
|
|
|
|
hblg.media.net
|
104.76.200.23
|
|
|
|
lg3.media.net
|
104.76.200.23
|
|
|
|
web.vortex.data.msn.com
|
unknown
|
|
|
|
www.msn.com
|
unknown
|
|
|
|
srtb.msn.com
|
unknown
|
|
|
|
img.img-taboola.com
|
unknown
|
|
|
|
cvision.media.net
|
unknown
|
|
|
|
dcdn.adnxs.com
|
unknown
|
|
There are 1 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
unknown
|
|
|
|
143.204.214.142
|
unknown
|
United States
|
unknown
|
|
|
|
151.101.1.44
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\SysWOW64\regsvr32.exe
|
Identity Ordinal
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
Migrated7
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
Last Username
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
Last User ID
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
Identity Login
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{3671C482-5C7E-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Window_Placement
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
There are 114 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
4B78000
|
heap private
|
page read and write
|
|
|
|
4B78000
|
heap private
|
page read and write
|
|
|
|
4B78000
|
heap private
|
page read and write
|
|
|
|
4B78000
|
heap private
|
page read and write
|
|
|
|
4B78000
|
heap private
|
page read and write
|
|
|
|
4B78000
|
heap private
|
page read and write
|
|
|
|
4B78000
|
heap private
|
page read and write
|
|
|
|
4B78000
|
heap private
|
page read and write
|
|
|
|
4B78000
|
heap private
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF59A002000
|
unkown
|
page readonly
|
|
|
|
13781000000
|
unkown
|
page readonly
|
|
|
|
7FF525DDE000
|
unkown
|
page readonly
|
|
|
|
2435F73A000
|
unkown
|
page read and write
|
|
|
|
3230EF9000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5E92AC000
|
unkown
|
page readonly
|
|
|
|
2800000
|
heap private
|
page read and write
|
|
|
|
7FF5BABE6000
|
unkown
|
page readonly
|
|
|
|
7FF5B1A31000
|
unkown
|
page readonly
|
|
|
|
2435F742000
|
unkown
|
page read and write
|
|
|
|
1A08AE13000
|
unkown
|
page read and write
|
|
|
|
2740000
|
unkown
|
page readonly
|
|
|
|
2435EE4A000
|
unkown
|
page read and write
|
|
|
|
C7794FA000
|
unkown
|
page read and write
|
|
|
|
7FF5E9990000
|
unkown
|
page readonly
|
|
|
|
2435EF16000
|
unkown
|
page read and write
|
|
|
|
7FF5E966D000
|
unkown
|
page readonly
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
21300B13000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1F056E00000
|
unkown
|
page readonly
|
|
|
|
7FF5BAB44000
|
unkown
|
page readonly
|
|
|
|
1302FD02000
|
unkown
|
page read and write
|
|
|
|
2435F750000
|
unkown
|
page read and write
|
|
|
|
21300A54000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB87000
|
unkown
|
page readonly
|
|
|
|
7FF5D0ACF000
|
unkown
|
page readonly
|
|
|
|
2AC73CB0000
|
unkown
|
page read and write
|
|
|
|
3231179000
|
unkown
|
page read and write
|
|
|
|
17073D20000
|
heap default
|
page read and write
|
|
|
|
7FF5B183B000
|
unkown
|
page readonly
|
|
|
|
125474E0000
|
heap default
|
page read and write
|
|
|
|
23EE5E4D000
|
unkown
|
page read and write
|
|
|
|
7FF5D0AFB000
|
unkown
|
page readonly
|
|
|
|
3041F9C000
|
unkown
|
page read and write
|
|
|
|
139CB34B000
|
heap default
|
page read and write
|
|
|
|
1A08C810000
|
unkown
|
page read and write
|
|
|
|
17073F13000
|
unkown
|
page read and write
|
|
|
|
7FF599F5B000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC62000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
7FF5B1903000
|
unkown
|
page readonly
|
|
|
|
13030402000
|
unkown
|
page read and write
|
|
|
|
7FF565B84000
|
unkown
|
page readonly
|
|
|
|
2435EEE5000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1E28000
|
unkown
|
page readonly
|
|
|
|
139CCF40000
|
heap private
|
page read and write
|
|
|
|
7FF5B1706000
|
unkown
|
page readonly
|
|
|
|
7FF5998BD000
|
unkown
|
page readonly
|
|
|
|
23EE5E2A000
|
unkown
|
page read and write
|
|
|
|
21300AE9000
|
unkown
|
page read and write
|
|
|
|
1F99000
|
unkown
|
page readonly
|
|
|
|
7FF5E999B000
|
unkown
|
page readonly
|
|
|
|
7FF5B160F000
|
unkown
|
page readonly
|
|
|
|
1A08AE8D000
|
unkown
|
page read and write
|
|
|
|
47FB1BA000
|
unkown
|
page read and write
|
|
|
|
7FF5B1617000
|
unkown
|
page readonly
|
|
|
|
1FF5000
|
unkown
|
page readonly
|
|
|
|
7FF5D0A3D000
|
unkown
|
page readonly
|
|
|
|
7FF53C926000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
23EE5E46000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
7FF595665000
|
unkown
|
page readonly
|
|
|
|
7FF53C8FA000
|
unkown
|
page readonly
|
|
|
|
1A08AFB1000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5BA490000
|
unkown
|
page readonly
|
|
|
|
1FA3000
|
unkown
|
page readonly
|
|
|
|
139CB5F0000
|
unkown
|
page readonly
|
|
|
|
12547480000
|
unkown
|
page read and write
|
|
|
|
323127B000
|
unkown
|
page read and write
|
|
|
|
2435FC02000
|
unkown
|
page read and write
|
|
|
|
323157B000
|
unkown
|
page read and write
|
|
|
|
7FF5BA6D2000
|
unkown
|
page readonly
|
|
|
|
1FF7000
|
unkown
|
page readonly
|
|
|
|
1F056C13000
|
unkown
|
page read and write
|
|
|
|
7FF5B1761000
|
unkown
|
page readonly
|
|
|
|
1A08AEDD000
|
unkown
|
page read and write
|
|
|
|
42CC000
|
unkown
|
page readonly
|
|
|
|
474E000
|
unkown
|
page read and write
|
|
|
|
7FF5B1A24000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
2435F775000
|
unkown
|
page read and write
|
|
|
|
264F000
|
heap default
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF525EEB000
|
unkown
|
page readonly
|
|
|
|
7FF5D1AC3000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5D0652000
|
unkown
|
page readonly
|
|
|
|
1E2D000
|
unkown
|
page readonly
|
|
|
|
7FF4F1D31000
|
unkown
|
page readonly
|
|
|
|
3230E7A000
|
unkown
|
page read and write
|
|
|
|
21300AD7000
|
unkown
|
page read and write
|
|
|
|
D355F78000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
17075800000
|
unkown
|
page read and write
|
|
|
|
2435EED4000
|
unkown
|
page read and write
|
|
|
|
950D1AE000
|
unkown
|
page read and write
|
|
|
|
D648EFE000
|
unkown
|
page read and write
|
|
|
|
1669CFF000
|
unkown
|
page read and write
|
|
|
|
7FF525EDE000
|
unkown
|
page readonly
|
|
|
|
1A08D400000
|
unkown
|
page read and write
|
|
|
|
2435F74F000
|
unkown
|
page read and write
|
|
|
|
2435F75D000
|
unkown
|
page read and write
|
|
|
|
7FF5B15FC000
|
unkown
|
page readonly
|
|
|
|
1F056D00000
|
unkown
|
page read and write
|
|
|
|
7FF565C0C000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1FC5000
|
unkown
|
page readonly
|
|
|
|
7FF5D1BC0000
|
unkown
|
page readonly
|
|
|
|
17073E13000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF53C852000
|
unkown
|
page readonly
|
|
|
|
7FF53C6E6000
|
unkown
|
page readonly
|
|
|
|
7FF53C57A000
|
unkown
|
page readonly
|
|
|
|
7FF5D0A92000
|
unkown
|
page readonly
|
|
|
|
7FF565B73000
|
unkown
|
page readonly
|
|
|
|
202B000
|
unkown
|
page readonly
|
|
|
|
2435EDF0000
|
unkown
|
page readonly
|
|
|
|
1F056AA0000
|
heap default
|
page read and write
|
|
|
|
1A08CF74000
|
unkown
|
page read and write
|
|
|
|
2435F779000
|
unkown
|
page read and write
|
|
|
|
950D87F000
|
unkown
|
page read and write
|
|
|
|
2435EF13000
|
unkown
|
page read and write
|
|
|
|
1610000
|
heap default
|
page read and write
|
|
|
|
7FF525F4E000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2546B430000
|
unkown
|
page read and write
|
|
|
|
2435F731000
|
unkown
|
page read and write
|
|
|
|
7FF54695C000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1302FBA0000
|
heap default
|
page read and write
|
|
|
|
7FF525EE5000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF53C6D1000
|
unkown
|
page readonly
|
|
|
|
1A08D143000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1EC8000
|
unkown
|
page readonly
|
|
|
|
7FF53C6E4000
|
unkown
|
page readonly
|
|
|
|
1F8D000
|
unkown
|
page readonly
|
|
|
|
7FF525ECC000
|
unkown
|
page readonly
|
|
|
|
2AC73AEB000
|
heap default
|
page read and write
|
|
|
|
7FF59A08F000
|
unkown
|
page readonly
|
|
|
|
7FF565C1A000
|
unkown
|
page readonly
|
|
|
|
1302FC00000
|
unkown
|
page read and write
|
|
|
|
125474C0000
|
unkown
|
page readonly
|
|
|
|
7FF4F1CA8000
|
unkown
|
page readonly
|
|
|
|
7FF54D9B8000
|
unkown
|
page readonly
|
|
|
|
17868380000
|
unkown
|
page read and write
|
|
|
|
D6492FF000
|
unkown
|
page read and write
|
|
|
|
2546B450000
|
unkown
|
page read and write
|
|
|
|
7FF5D1CB2000
|
unkown
|
page readonly
|
|
|
|
7FF5BAB3F000
|
unkown
|
page readonly
|
|
|
|
7FF599E26000
|
unkown
|
page readonly
|
|
|
|
2435F75F000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F736000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
21302B00000
|
unkown
|
page read and write
|
|
|
|
7FF53C921000
|
unkown
|
page readonly
|
|
|
|
1CE357F000
|
unkown
|
page read and write
|
|
|
|
1F0586A0000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1A08E310000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F765000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2790000
|
unkown image
|
page execute and read and write
|
|
|
|
125475E0000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5BA471000
|
unkown
|
page readonly
|
|
|
|
2710000
|
unkown
|
page readonly
|
|
|
|
2435EEA4000
|
unkown
|
page read and write
|
|
|
|
7FF5BAADC000
|
unkown
|
page readonly
|
|
|
|
2435F786000
|
unkown
|
page read and write
|
|
|
|
2435F731000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF565C9D000
|
unkown
|
page readonly
|
|
|
|
178683F0000
|
heap private
|
page read and write
|
|
|
|
1A08AE8B000
|
unkown
|
page read and write
|
|
|
|
C779479000
|
unkown
|
page read and write
|
|
|
|
2435F7F7000
|
unkown
|
page read and write
|
|
|
|
21302850000
|
unkown
|
page readonly
|
|
|
|
1A08AEBB000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
7FF5BA970000
|
unkown
|
page readonly
|
|
|
|
1302FD00000
|
unkown
|
page read and write
|
|
|
|
2435ED40000
|
unkown
|
page readonly
|
|
|
|
2770000
|
unkown
|
page readonly
|
|
|
|
7FF5D187C000
|
unkown
|
page readonly
|
|
|
|
3230BEE000
|
unkown
|
page read and write
|
|
|
|
2435F75C000
|
unkown
|
page read and write
|
|
|
|
2435EF02000
|
unkown
|
page read and write
|
|
|
|
2435EE29000
|
unkown
|
page read and write
|
|
|
|
7FF5D1B62000
|
unkown
|
page readonly
|
|
|
|
7FF5BAA51000
|
unkown
|
page readonly
|
|
|
|
2435F766000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF54697A000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B1C000
|
unkown
|
page readonly
|
|
|
|
7FF4F1C45000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1A08AEBC000
|
unkown
|
page read and write
|
|
|
|
7FF5D1BBE000
|
unkown
|
page readonly
|
|
|
|
1A08E610000
|
unkown
|
page read and write
|
|
|
|
32317FC000
|
unkown
|
page read and write
|
|
|
|
7FF59A06B000
|
unkown
|
page readonly
|
|
|
|
1302FC5B000
|
unkown
|
page read and write
|
|
|
|
7FF5657E6000
|
unkown
|
page readonly
|
|
|
|
23EE5E3C000
|
unkown
|
page read and write
|
|
|
|
1A08AEBB000
|
unkown
|
page read and write
|
|
|
|
1A08CF87000
|
unkown
|
page read and write
|
|
|
|
7FF53C6F1000
|
unkown
|
page readonly
|
|
|
|
13780E36000
|
unkown
|
page read and write
|
|
|
|
13780E3F000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5E99A7000
|
unkown
|
page readonly
|
|
|
|
7FF525D31000
|
unkown
|
page readonly
|
|
|
|
950D97F000
|
unkown
|
page read and write
|
|
|
|
2435F777000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
41EE000
|
unkown
|
page read and write
|
|
|
|
2546B565000
|
unkown
|
page read and write
|
|
|
|
1E30000
|
unkown
|
page readonly
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
1F056C29000
|
unkown
|
page read and write
|
|
|
|
2546B556000
|
unkown
|
page read and write
|
|
|
|
1A08D600000
|
unkown
|
page readonly
|
|
|
|
1A08CFEF000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF525F34000
|
unkown
|
page readonly
|
|
|
|
7FF5D0A90000
|
unkown
|
page readonly
|
|
|
|
2435FC02000
|
unkown
|
page read and write
|
|
|
|
2435F744000
|
unkown
|
page read and write
|
|
|
|
7FF5D0AEA000
|
unkown
|
page readonly
|
|
|
|
1A08AE63000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1F82000
|
unkown
|
page readonly
|
|
|
|
1A08AE00000
|
unkown
|
page read and write
|
|
|
|
213008F0000
|
heap default
|
page read and write
|
|
|
|
2435F72F000
|
unkown
|
page read and write
|
|
|
|
7FF5B1A32000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435EEAF000
|
unkown
|
page read and write
|
|
|
|
23EE5E4A000
|
unkown
|
page read and write
|
|
|
|
C7795FC000
|
unkown
|
page read and write
|
|
|
|
2546B490000
|
unkown
|
page readonly
|
|
|
|
10E0000
|
unkown
|
page readonly
|
|
|
|
12547750000
|
heap private
|
page read and write
|
|
|
|
2AC73BE0000
|
unkown
|
page readonly
|
|
|
|
213023F0000
|
unkown
|
page read and write
|
|
|
|
213028C0000
|
unkown
|
page read and write
|
|
|
|
2435F7FC000
|
unkown
|
page read and write
|
|
|
|
139CD110000
|
heap private
|
page read and write
|
|
|
|
7FF53C111000
|
unkown
|
page readonly
|
|
|
|
2546B765000
|
heap private
|
page read and write
|
|
|
|
7FF59A152000
|
unkown
|
page readonly
|
|
|
|
2435F470000
|
unkown
|
page read and write
|
|
|
|
1A08CF5A000
|
unkown
|
page read and write
|
|
|
|
7FF5B1A2A000
|
unkown
|
page readonly
|
|
|
|
2435F76D000
|
unkown
|
page read and write
|
|
|
|
7FF565C99000
|
unkown
|
page readonly
|
|
|
|
7FF599E81000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF53C8C7000
|
unkown
|
page readonly
|
|
|
|
2435F73A000
|
unkown
|
page read and write
|
|
|
|
1E96000
|
unkown
|
page readonly
|
|
|
|
13780E29000
|
unkown
|
page read and write
|
|
|
|
7FF59A098000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F786000
|
unkown
|
page read and write
|
|
|
|
1A08D200000
|
unkown
|
page read and write
|
|
|
|
1ED0000
|
unkown
|
page readonly
|
|
|
|
32315FB000
|
unkown
|
page read and write
|
|
|
|
21302840000
|
unkown
|
page read and write
|
|
|
|
47FB13E000
|
unkown
|
page read and write
|
|
|
|
1E17000
|
unkown
|
page readonly
|
|
|
|
1A08CCF0000
|
unkown
|
page read and write
|
|
|
|
125474EB000
|
heap default
|
page read and write
|
|
|
|
7FF53C8DC000
|
unkown
|
page readonly
|
|
|
|
4F0F000
|
unkown
|
page read and write
|
|
|
|
21300C00000
|
unkown
|
page write copy
|
|
|
|
2650000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1A08CE02000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F778000
|
unkown
|
page read and write
|
|
|
|
D355D78000
|
unkown
|
page read and write
|
|
|
|
7FF5D0A8C000
|
unkown
|
page readonly
|
|
|
|
7FF594FB3000
|
unkown
|
page readonly
|
|
|
|
950D47E000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
D648FFA000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
213028B0000
|
unkown
|
page readonly
|
|
|
|
7FF525EE0000
|
unkown
|
page readonly
|
|
|
|
7FF5BA280000
|
unkown
|
page readonly
|
|
|
|
7FF5D06C9000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC5A000
|
unkown
|
page readonly
|
|
|
|
1A08E110000
|
unkown
|
page read and write
|
|
|
|
1669BFE000
|
unkown
|
page read and write
|
|
|
|
2435F75C000
|
unkown
|
page read and write
|
|
|
|
1A08AE67000
|
unkown
|
page read and write
|
|
|
|
21302B02000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
42F0000
|
heap private
|
page read and write
|
|
|
|
2435EE4E000
|
unkown
|
page read and write
|
|
|
|
7FF525EF7000
|
unkown
|
page readonly
|
|
|
|
1A08AEDD000
|
unkown
|
page read and write
|
|
|
|
7FF599F68000
|
unkown
|
page readonly
|
|
|
|
2435F7B6000
|
unkown
|
page read and write
|
|
|
|
42AB000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC54000
|
unkown
|
page readonly
|
|
|
|
7FF54699E000
|
unkown
|
page readonly
|
|
|
|
1DC2000
|
unkown
|
page readonly
|
|
|
|
7FF5D1ABB000
|
unkown
|
page readonly
|
|
|
|
1E2B000
|
unkown
|
page readonly
|
|
|
|
1F86000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
500F000
|
unkown
|
page read and write
|
|
|
|
1F056B80000
|
unkown
|
page write copy
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
139CB310000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5659A0000
|
unkown
|
page readonly
|
|
|
|
16699FB000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF525AB5000
|
unkown
|
page readonly
|
|
|
|
2026000
|
unkown
|
page readonly
|
|
|
|
7FF5E9922000
|
unkown
|
page readonly
|
|
|
|
7FF5BA6DE000
|
unkown
|
page readonly
|
|
|
|
7FF5E998E000
|
unkown
|
page readonly
|
|
|
|
950D12B000
|
unkown
|
page read and write
|
|
|
|
1302FC5A000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
213028D0000
|
unkown
|
page readonly
|
|
|
|
323107A000
|
unkown
|
page read and write
|
|
|
|
7FF5D0BD4000
|
unkown
|
page readonly
|
|
|
|
7FF5D08C8000
|
unkown
|
page readonly
|
|
|
|
7FF5B1940000
|
unkown
|
page readonly
|
|
|
|
12AD000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08CF85000
|
unkown
|
page read and write
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
7FF54D9FD000
|
unkown
|
page readonly
|
|
|
|
2435F75B000
|
unkown
|
page read and write
|
|
|
|
2003000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F733000
|
unkown
|
page read and write
|
|
|
|
2435F730000
|
unkown
|
page read and write
|
|
|
|
2AC73AB0000
|
unkown
|
page readonly
|
|
|
|
2435F786000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB70000
|
unkown
|
page readonly
|
|
|
|
2435F7B6000
|
unkown
|
page read and write
|
|
|
|
7FF525DC1000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2546B760000
|
heap private
|
page read and write
|
|
|
|
32310FB000
|
unkown
|
page read and write
|
|
|
|
7FF5956C8000
|
unkown
|
page readonly
|
|
|
|
1F056D13000
|
unkown
|
page read and write
|
|
|
|
2435F731000
|
unkown
|
page read and write
|
|
|
|
2AC73CF0000
|
unkown
|
page readonly
|
|
|
|
23EE5F02000
|
unkown
|
page read and write
|
|
|
|
21300C50000
|
unkown
|
page readonly
|
|
|
|
2E143CE000
|
unkown
|
page read and write
|
|
|
|
7FF5BAA6B000
|
unkown
|
page readonly
|
|
|
|
C1ACA7F000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
7FF5D0924000
|
unkown
|
page readonly
|
|
|
|
7FF53C8BB000
|
unkown
|
page readonly
|
|
|
|
47FB57E000
|
unkown
|
page read and write
|
|
|
|
1A08CF7E000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F775000
|
unkown
|
page read and write
|
|
|
|
4B7B000
|
heap private
|
page read and write
|
|
|
|
2435EEE1000
|
unkown
|
page read and write
|
|
|
|
23EE5D80000
|
unkown
|
page readonly
|
|
|
|
2435F756000
|
unkown
|
page read and write
|
|
|
|
1A08D012000
|
unkown
|
page read and write
|
|
|
|
7FF54D9F9000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1A08E000000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1302FC7D000
|
unkown
|
page read and write
|
|
|
|
178683F5000
|
heap private
|
page read and write
|
|
|
|
7FF53C850000
|
unkown
|
page readonly
|
|
|
|
161B000
|
heap default
|
page read and write
|
|
|
|
4B90000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435EEE9000
|
unkown
|
page read and write
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
C1AC78E000
|
unkown
|
page read and write
|
|
|
|
2435F779000
|
unkown
|
page read and write
|
|
|
|
7FF5D188F000
|
unkown
|
page readonly
|
|
|
|
4180000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5BA785000
|
unkown
|
page readonly
|
|
|
|
7FF525FD1000
|
unkown
|
page readonly
|
|
|
|
21300A74000
|
unkown
|
page read and write
|
|
|
|
7FF59A144000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5469AD000
|
unkown
|
page readonly
|
|
|
|
7FF525F5D000
|
unkown
|
page readonly
|
|
|
|
1F056AB0000
|
unkown
|
page readonly
|
|
|
|
139CD3CF000
|
heap private
|
page read and write
|
|
|
|
7FF5D0A82000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2E146FA000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08AEA4000
|
unkown
|
page read and write
|
|
|
|
2071000
|
unkown
|
page readonly
|
|
|
|
12547760000
|
unkown
|
page readonly
|
|
|
|
17075900000
|
unkown
|
page readonly
|
|
|
|
1A08ACC0000
|
heap private
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF525F48000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F731000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF565C8E000
|
unkown
|
page readonly
|
|
|
|
7FF59A151000
|
unkown
|
page readonly
|
|
|
|
17868790000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B5E000
|
unkown
|
page readonly
|
|
|
|
7FF5D1BBA000
|
unkown
|
page readonly
|
|
|
|
7FF59A14A000
|
unkown
|
page readonly
|
|
|
|
1CE34FE000
|
unkown
|
page read and write
|
|
|
|
1A08D000000
|
unkown
|
page read and write
|
|
|
|
1E25000
|
unkown
|
page readonly
|
|
|
|
23EE5D90000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08CFE3000
|
unkown
|
page read and write
|
|
|
|
7FF5E99DA000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B07000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
D3561FF000
|
unkown
|
page read and write
|
|
|
|
21300B14000
|
unkown
|
page read and write
|
|
|
|
7FF5956A4000
|
unkown
|
page readonly
|
|
|
|
7FF5D197B000
|
unkown
|
page readonly
|
|
|
|
4669000
|
heap private
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
7FF54D9EE000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
23EE5E55000
|
unkown
|
page read and write
|
|
|
|
E0990FF000
|
unkown
|
page read and write
|
|
|
|
7FF53C884000
|
unkown
|
page readonly
|
|
|
|
2435F775000
|
unkown
|
page read and write
|
|
|
|
32314FB000
|
unkown
|
page read and write
|
|
|
|
7FF546A21000
|
unkown
|
page readonly
|
|
|
|
7FF5E99C8000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF59568C000
|
unkown
|
page readonly
|
|
|
|
7FF53C87B000
|
unkown
|
page readonly
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
13780E51000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F78E000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F750000
|
unkown
|
page read and write
|
|
|
|
2435F7C7000
|
unkown
|
page read and write
|
|
|
|
7FF5D09F3000
|
unkown
|
page readonly
|
|
|
|
7FF5469A9000
|
unkown
|
page readonly
|
|
|
|
2546B57E000
|
unkown
|
page read and write
|
|
|
|
17868400000
|
unkown
|
page readonly
|
|
|
|
7FF5D0BDA000
|
unkown
|
page readonly
|
|
|
|
7FF525E33000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08AD30000
|
unkown
|
page readonly
|
|
|
|
1E58000
|
unkown
|
page readonly
|
|
|
|
1627000
|
heap default
|
page read and write
|
|
|
|
7FF5D1C31000
|
unkown
|
page readonly
|
|
|
|
1CE35FF000
|
unkown
|
page read and write
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
3E9B4FE000
|
unkown
|
page read and write
|
|
|
|
1302FC66000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5D0351000
|
unkown
|
page readonly
|
|
|
|
7FF5B19B1000
|
unkown
|
page readonly
|
|
|
|
4160000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5B1848000
|
unkown
|
page readonly
|
|
|
|
1FAA000
|
unkown
|
page readonly
|
|
|
|
7FF54D9E8000
|
unkown
|
page readonly
|
|
|
|
7FF59A0CE000
|
unkown
|
page readonly
|
|
|
|
1A08CC90000
|
heap private
|
page read and write
|
|
|
|
2435F74C000
|
unkown
|
page read and write
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
1A08CFEE000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08CCF0000
|
unkown
|
page readonly
|
|
|
|
7FF53C8F4000
|
unkown
|
page readonly
|
|
|
|
2435F720000
|
unkown
|
page read and write
|
|
|
|
7FF5E9A06000
|
unkown
|
page readonly
|
|
|
|
1FDB000
|
unkown
|
page readonly
|
|
|
|
2435FC61000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF565C0A000
|
unkown
|
page readonly
|
|
|
|
1A08D402000
|
unkown
|
page read and write
|
|
|
|
7FF546932000
|
unkown
|
page readonly
|
|
|
|
1A08E410000
|
unkown
|
page read and write
|
|
|
|
7FF565B1E000
|
unkown
|
page readonly
|
|
|
|
23EE5F08000
|
unkown
|
page read and write
|
|
|
|
21302860000
|
heap private
|
page read and write
|
|
|
|
1F0585A0000
|
unkown
|
page read and write
|
|
|
|
4750000
|
unkown
|
page read and write
|
|
|
|
7FF5BA745000
|
unkown
|
page readonly
|
|
|
|
42CF000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F749000
|
unkown
|
page read and write
|
|
|
|
7FF594FB7000
|
unkown
|
page readonly
|
|
|
|
2435F720000
|
unkown
|
page read and write
|
|
|
|
1A08AF29000
|
unkown
|
page read and write
|
|
|
|
E09907F000
|
unkown
|
page read and write
|
|
|
|
3230F7F000
|
unkown
|
page read and write
|
|
|
|
7FF4F1C78000
|
unkown
|
page readonly
|
|
|
|
12547420000
|
unkown
|
page readonly
|
|
|
|
23EE5E50000
|
unkown
|
page read and write
|
|
|
|
7FF5657E0000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F7B6000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2320000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF53C7FD000
|
unkown
|
page readonly
|
|
|
|
139CB260000
|
unkown
|
page readonly
|
|
|
|
7FF5D08AB000
|
unkown
|
page readonly
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
7FF5D1C28000
|
unkown
|
page readonly
|
|
|
|
2435F737000
|
unkown
|
page read and write
|
|
|
|
2AC73A50000
|
unkown
|
page readonly
|
|
|
|
2435F750000
|
unkown
|
page read and write
|
|
|
|
27F0000
|
unkown
|
page readonly
|
|
|
|
2435F770000
|
unkown
|
page read and write
|
|
|
|
2435EE6C000
|
unkown
|
page read and write
|
|
|
|
2760000
|
unkown
|
page readonly
|
|
|
|
7FF525D83000
|
unkown
|
page readonly
|
|
|
|
2435F733000
|
unkown
|
page read and write
|
|
|
|
7FF54D980000
|
unkown
|
page readonly
|
|
|
|
D64907F000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
3E9B11A000
|
unkown
|
page read and write
|
|
|
|
1302FC61000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF565D0A000
|
unkown
|
page readonly
|
|
|
|
7FF5D09EB000
|
unkown
|
page readonly
|
|
|
|
1A08AE97000
|
unkown
|
page read and write
|
|
|
|
1A08CF6C000
|
unkown
|
page read and write
|
|
|
|
3230FFA000
|
unkown
|
page read and write
|
|
|
|
7FF59A077000
|
unkown
|
page readonly
|
|
|
|
7FF5255F0000
|
unkown
|
page readonly
|
|
|
|
D6490FA000
|
unkown
|
page read and write
|
|
|
|
1A08AF13000
|
unkown
|
page read and write
|
|
|
|
1A08AEBB000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B1F000
|
unkown
|
page readonly
|
|
|
|
323177A000
|
unkown
|
page read and write
|
|
|
|
2435F7F8000
|
unkown
|
page read and write
|
|
|
|
13780DA0000
|
unkown
|
page write copy
|
|
|
|
323187C000
|
unkown
|
page read and write
|
|
|
|
2435ED70000
|
unkown
|
page readonly
|
|
|
|
139CB2C0000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
17073E29000
|
unkown
|
page read and write
|
|
|
|
7FF5D0915000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2807000
|
heap private
|
page read and write
|
|
|
|
1A08D0A4000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC61000
|
unkown
|
page readonly
|
|
|
|
2435EF08000
|
unkown
|
page read and write
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
2435F75C000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
32313FA000
|
unkown
|
page read and write
|
|
|
|
2435EEA0000
|
unkown
|
page read and write
|
|
|
|
2435F490000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5BAA73000
|
unkown
|
page readonly
|
|
|
|
2435F7B6000
|
unkown
|
page read and write
|
|
|
|
137828B0000
|
unkown
|
page readonly
|
|
|
|
1E13000
|
unkown
|
page readonly
|
|
|
|
7FF5D1986000
|
unkown
|
page readonly
|
|
|
|
7FF5BAB9C000
|
unkown
|
page readonly
|
|
|
|
20A3000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
D355E77000
|
unkown
|
page read and write
|
|
|
|
7FF5BA6E2000
|
unkown
|
page readonly
|
|
|
|
2435EE95000
|
unkown
|
page read and write
|
|
|
|
7FF5B1994000
|
unkown
|
page readonly
|
|
|
|
7FF4F1CBD000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
1A08D302000
|
unkown
|
page read and write
|
|
|
|
1F056BD0000
|
unkown
|
page readonly
|
|
|
|
7FF4F1D32000
|
unkown
|
page readonly
|
|
|
|
23EE60D0000
|
unkown
|
page readonly
|
|
|
|
304237C000
|
unkown
|
page read and write
|
|
|
|
7FF5B1945000
|
unkown
|
page readonly
|
|
|
|
1A08E110000
|
unkown
|
page read and write
|
|
|
|
7FF5D1BCB000
|
unkown
|
page readonly
|
|
|
|
23EE5D10000
|
heap private
|
page read and write
|
|
|
|
139CB300000
|
unkown
|
page readonly
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
7FF599E1B000
|
unkown
|
page readonly
|
|
|
|
7FF5D0AF0000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
268A000
|
heap default
|
page read and write
|
|
|
|
7FF5D0A36000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
23EE6800000
|
unkown
|
page readonly
|
|
|
|
3E9B5FF000
|
unkown
|
page read and write
|
|
|
|
2435F733000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF599D2A000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08CF2C000
|
unkown
|
page read and write
|
|
|
|
D6491FC000
|
unkown
|
page read and write
|
|
|
|
2435F7FB000
|
unkown
|
page read and write
|
|
|
|
2435F750000
|
unkown
|
page read and write
|
|
|
|
2435EEF8000
|
unkown
|
page read and write
|
|
|
|
7FF5B1978000
|
unkown
|
page readonly
|
|
|
|
7FF546998000
|
unkown
|
page readonly
|
|
|
|
7FF5D07BF000
|
unkown
|
page readonly
|
|
|
|
7FF5B19AE000
|
unkown
|
page readonly
|
|
|
|
7FF5E9A23000
|
unkown
|
page readonly
|
|
|
|
7FF53C57F000
|
unkown
|
page readonly
|
|
|
|
4170000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5BA736000
|
unkown
|
page readonly
|
|
|
|
7FF53C489000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF525EDA000
|
unkown
|
page readonly
|
|
|
|
21302C00000
|
unkown
|
page readonly
|
|
|
|
7FF5D07BA000
|
unkown
|
page readonly
|
|
|
|
1E8C000
|
unkown
|
page readonly
|
|
|
|
7FF54D9C4000
|
unkown
|
page readonly
|
|
|
|
1A08CCF0000
|
unkown
|
page read and write
|
|
|
|
139CB9F0000
|
unkown
|
page readonly
|
|
|
|
7FF59A0B4000
|
unkown
|
page readonly
|
|
|
|
7FF5BABA7000
|
unkown
|
page readonly
|
|
|
|
1669AF7000
|
unkown
|
page read and write
|
|
|
|
4140000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
D355AFE000
|
unkown
|
page read and write
|
|
|
|
7FF53C904000
|
unkown
|
page readonly
|
|
|
|
1A08AE41000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1A08AE73000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08E610000
|
unkown
|
page read and write
|
|
|
|
2546B57F000
|
unkown
|
page read and write
|
|
|
|
2435F470000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
17073E00000
|
unkown
|
page read and write
|
|
|
|
1F056C71000
|
unkown
|
page read and write
|
|
|
|
21300AA4000
|
unkown
|
page read and write
|
|
|
|
7FF54D9DE000
|
unkown
|
page readonly
|
|
|
|
7FF5D0926000
|
unkown
|
page readonly
|
|
|
|
7FF5BABD8000
|
unkown
|
page readonly
|
|
|
|
21300B02000
|
unkown
|
page read and write
|
|
|
|
2022000
|
unkown
|
page readonly
|
|
|
|
1FFF000
|
unkown
|
page readonly
|
|
|
|
422F000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1570000
|
heap default
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2656000
|
unkown
|
page read and write
|
|
|
|
D648BCB000
|
unkown
|
page read and write
|
|
|
|
2435F729000
|
unkown
|
page read and write
|
|
|
|
21302A02000
|
unkown
|
page read and write
|
|
|
|
7FF4F1CAE000
|
unkown
|
page readonly
|
|
|
|
2435F756000
|
unkown
|
page read and write
|
|
|
|
1A08B000000
|
unkown
|
page write copy
|
|
|
|
7FF5BAB6A000
|
unkown
|
page readonly
|
|
|
|
2435F73B000
|
unkown
|
page read and write
|
|
|
|
7FF5B1821000
|
unkown
|
page readonly
|
|
|
|
1A08AE55000
|
unkown
|
page read and write
|
|
|
|
1F0589F0000
|
unkown
|
page read and write
|
|
|
|
1A08D282000
|
unkown
|
page read and write
|
|
|
|
1A08E210000
|
unkown
|
page read and write
|
|
|
|
7FF5D1B83000
|
unkown
|
page readonly
|
|
|
|
7FF5B19B6000
|
unkown
|
page readonly
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5BA9B1000
|
unkown
|
page readonly
|
|
|
|
2435F777000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2785000
|
heap default
|
page read and write
|
|
|
|
1A08CCE0000
|
unkown
|
page readonly
|
|
|
|
7FF53C676000
|
unkown
|
page readonly
|
|
|
|
1A08D143000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5B160A000
|
unkown
|
page readonly
|
|
|
|
7FF5D19E1000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
4FCE000
|
unkown
|
page read and write
|
|
|
|
D356178000
|
unkown
|
page read and write
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
26C000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
2435F775000
|
unkown
|
page read and write
|
|
|
|
2435FC00000
|
unkown
|
page read and write
|
|
|
|
2720000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F733000
|
unkown
|
page read and write
|
|
|
|
7FF59A0D9000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2546B556000
|
heap default
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1E52000
|
unkown
|
page readonly
|
|
|
|
2546B56F000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF525F59000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B34000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
950D67B000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B69000
|
unkown
|
page readonly
|
|
|
|
1F056D02000
|
unkown
|
page read and write
|
|
|
|
2435F73B000
|
unkown
|
page read and write
|
|
|
|
2435F777000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB3B000
|
unkown
|
page readonly
|
|
|
|
7FF54DA71000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435EC50000
|
heap default
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1302FD08000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB5C000
|
unkown
|
page readonly
|
|
|
|
7FF5BAA1A000
|
unkown
|
page readonly
|
|
|
|
7FF599F41000
|
unkown
|
page readonly
|
|
|
|
D35607E000
|
unkown
|
page read and write
|
|
|
|
C1ACC7A000
|
unkown
|
page read and write
|
|
|
|
7FF5BA9C1000
|
unkown
|
page readonly
|
|
|
|
7FF595752000
|
unkown
|
page readonly
|
|
|
|
7FF5D03F1000
|
unkown
|
page readonly
|
|
|
|
7FF5BAAD4000
|
unkown
|
page readonly
|
|
|
|
7FF5BAB9F000
|
unkown
|
page readonly
|
|
|
|
2435F765000
|
unkown
|
page read and write
|
|
|
|
2435F733000
|
unkown
|
page read and write
|
|
|
|
1A08E110000
|
unkown
|
page read and write
|
|
|
|
7FF565C25000
|
unkown
|
page readonly
|
|
|
|
1CE31BF000
|
unkown
|
page read and write
|
|
|
|
200A000
|
unkown
|
page readonly
|
|
|
|
D355A7E000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F4B0000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF4F1CB9000
|
unkown
|
page readonly
|
|
|
|
7FF599E85000
|
unkown
|
page readonly
|
|
|
|
2435EE13000
|
unkown
|
page read and write
|
|
|
|
47FB67F000
|
unkown
|
page read and write
|
|
|
|
7FF4F1C9E000
|
unkown
|
page readonly
|
|
|
|
32316FD000
|
unkown
|
page read and write
|
|
|
|
7FF5D1BEF000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF565B1B000
|
unkown
|
page readonly
|
|
|
|
7FF5B1765000
|
unkown
|
page readonly
|
|
|
|
323147B000
|
unkown
|
page read and write
|
|
|
|
13780DF0000
|
unkown
|
page readonly
|
|
|
|
7FF565B6D000
|
unkown
|
page readonly
|
|
|
|
7FF5D0ABF000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2098000
|
unkown
|
page readonly
|
|
|
|
2435F470000
|
unkown
|
page read and write
|
|
|
|
7FF5E997C000
|
unkown
|
page readonly
|
|
|
|
C77957F000
|
unkown
|
page read and write
|
|
|
|
2750000
|
heap private
|
page read and write
|
|
|
|
2435F000000
|
unkown
|
page readonly
|
|
|
|
426C000
|
unkown
|
page read and write
|
|
|
|
13780F02000
|
unkown
|
page read and write
|
|
|
|
166967C000
|
unkown
|
page read and write
|
|
|
|
7FF5D1C3D000
|
unkown
|
page readonly
|
|
|
|
7FF525F17000
|
unkown
|
page readonly
|
|
|
|
3E9B57E000
|
unkown
|
page read and write
|
|
|
|
7FF5BA4C3000
|
unkown
|
page readonly
|
|
|
|
7FF565D12000
|
unkown
|
page readonly
|
|
|
|
2E1467E000
|
unkown
|
page read and write
|
|
|
|
1E1A000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF599EB9000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
7FF5E9A7A000
|
unkown
|
page readonly
|
|
|
|
2435F602000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F731000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2546B56F000
|
unkown
|
page read and write
|
|
|
|
D3562FE000
|
unkown
|
page read and write
|
|
|
|
1FFD000
|
unkown
|
page readonly
|
|
|
|
4F8F000
|
unkown
|
page read and write
|
|
|
|
1A08AF17000
|
unkown
|
page read and write
|
|
|
|
7FF53C89C000
|
unkown
|
page readonly
|
|
|
|
7FF5B1984000
|
unkown
|
page readonly
|
|
|
|
21300A3F000
|
unkown
|
page read and write
|
|
|
|
213028C0000
|
unkown
|
page read and write
|
|
|
|
2435F736000
|
unkown
|
page read and write
|
|
|
|
7FF59A0A4000
|
unkown
|
page readonly
|
|
|
|
42C1000
|
unkown
|
page execute read
|
|
|
|
21300900000
|
unkown
|
page readonly
|
|
|
|
2435F733000
|
unkown
|
page read and write
|
|
|
|
2435F74E000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF53C99A000
|
unkown
|
page readonly
|
|
|
|
1302FC5E000
|
unkown
|
page read and write
|
|
|
|
7FF5D188A000
|
unkown
|
page readonly
|
|
|
|
7FF525ECA000
|
unkown
|
page readonly
|
|
|
|
7FF5B196F000
|
unkown
|
page readonly
|
|
|
|
7FF53C7B3000
|
unkown
|
page readonly
|
|
|
|
C77909A000
|
unkown
|
page read and write
|
|
|
|
304257F000
|
unkown
|
page read and write
|
|
|
|
7FF5D1C14000
|
unkown
|
page readonly
|
|
|
|
1A08D183000
|
unkown
|
page read and write
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
166977D000
|
unkown
|
page read and write
|
|
|
|
23F0000
|
unkown
|
page read and write
|
|
|
|
1A08AFAD000
|
unkown
|
page read and write
|
|
|
|
2435F74E000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5D0931000
|
unkown
|
page readonly
|
|
|
|
16698FE000
|
unkown
|
page read and write
|
|
|
|
C77911F000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
208C000
|
unkown
|
page readonly
|
|
|
|
7FF54693B000
|
unkown
|
page readonly
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
20A3000
|
unkown
|
page readonly
|
|
|
|
2435F731000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B27000
|
unkown
|
page readonly
|
|
|
|
7FF5BA936000
|
unkown
|
page readonly
|
|
|
|
2435FC02000
|
unkown
|
page read and write
|
|
|
|
7FF53C918000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1669875000
|
unkown
|
page read and write
|
|
|
|
7FF53C87F000
|
unkown
|
page readonly
|
|
|
|
7FF59A05E000
|
unkown
|
page readonly
|
|
|
|
7FF5B196C000
|
unkown
|
page readonly
|
|
|
|
178681A0000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2075000
|
unkown
|
page readonly
|
|
|
|
1302FB40000
|
heap private
|
page read and write
|
|
|
|
1A08E510000
|
unkown
|
page read and write
|
|
|
|
2435F752000
|
unkown
|
page read and write
|
|
|
|
7FF5BABC4000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1F056C6D000
|
unkown
|
page read and write
|
|
|
|
2435EDA0000
|
unkown
|
page write copy
|
|
|
|
17073E5B000
|
unkown
|
page read and write
|
|
|
|
7FF565B01000
|
unkown
|
page readonly
|
|
|
|
7FF5BAA78000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1F056C00000
|
unkown
|
page read and write
|
|
|
|
1A08D282000
|
unkown
|
page read and write
|
|
|
|
323167B000
|
unkown
|
page read and write
|
|
|
|
2435F777000
|
unkown
|
page read and write
|
|
|
|
7FF5BABB4000
|
unkown
|
page readonly
|
|
|
|
1A08D100000
|
unkown
|
page read and write
|
|
|
|
2435F786000
|
unkown
|
page read and write
|
|
|
|
2435F733000
|
unkown
|
page read and write
|
|
|
|
2435EEC2000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2795000
|
unkown image
|
page execute and read and write
|
|
|
|
7FF53C412000
|
unkown
|
page readonly
|
|
|
|
1F056A40000
|
heap private
|
page read and write
|
|
|
|
7FF54D9D4000
|
unkown
|
page readonly
|
|
|
|
2546B770000
|
unkown
|
page readonly
|
|
|
|
2600000
|
heap default
|
page read and write
|
|
|
|
7FF5D1BF8000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
4150000
|
unkown
|
page readonly
|
|
|
|
2435F480000
|
unkown
|
page read and write
|
|
|
|
7FF5956DD000
|
unkown
|
page readonly
|
|
|
|
23EE6000000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
C1ACAFB000
|
unkown
|
page read and write
|
|
|
|
7FF5B198A000
|
unkown
|
page readonly
|
|
|
|
7FF525F0C000
|
unkown
|
page readonly
|
|
|
|
7FF53C8B5000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
7FF53C929000
|
unkown
|
page readonly
|
|
|
|
7FF5D0ABB000
|
unkown
|
page readonly
|
|
|
|
2AC73B08000
|
heap default
|
page read and write
|
|
|
|
213009D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D08CF000
|
unkown
|
page readonly
|
|
|
|
1A08AF6C000
|
unkown
|
page read and write
|
|
|
|
7FF53C842000
|
unkown
|
page readonly
|
|
|
|
2435EE4B000
|
unkown
|
page read and write
|
|
|
|
2435F73A000
|
unkown
|
page read and write
|
|
|
|
13780E13000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2790000
|
unkown image
|
page readonly
|
|
|
|
7FF546935000
|
unkown
|
page readonly
|
|
|
|
2546B566000
|
unkown
|
page read and write
|
|
|
|
7FF5E9785000
|
unkown
|
page readonly
|
|
|
|
7FF525C57000
|
unkown
|
page readonly
|
|
|
|
7FF565C6A000
|
unkown
|
page readonly
|
|
|
|
17073F02000
|
unkown
|
page read and write
|
|
|
|
7FF5D1CAA000
|
unkown
|
page readonly
|
|
|
|
2435F75A000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF565C2B000
|
unkown
|
page readonly
|
|
|
|
7FF5D1CB1000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF53C9A2000
|
unkown
|
page readonly
|
|
|
|
7FF565D11000
|
unkown
|
page readonly
|
|
|
|
2011000
|
unkown
|
page readonly
|
|
|
|
7FF5BAB12000
|
unkown
|
page readonly
|
|
|
|
30423FD000
|
unkown
|
page read and write
|
|
|
|
13780CD0000
|
unkown
|
page readonly
|
|
|
|
268A000
|
unkown
|
page read and write
|
|
|
|
7FF565C96000
|
unkown
|
page readonly
|
|
|
|
1CE30BC000
|
unkown
|
page read and write
|
|
|
|
1A08CF0A000
|
unkown
|
page read and write
|
|
|
|
7FF5D1AC8000
|
unkown
|
page readonly
|
|
|
|
23EE5F00000
|
unkown
|
page read and write
|
|
|
|
1A08CFBF000
|
unkown
|
page read and write
|
|
|
|
7FF594F80000
|
unkown
|
page readonly
|
|
|
|
7FF565C4C000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2084000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B3A000
|
unkown
|
page readonly
|
|
|
|
7FF5D1C2E000
|
unkown
|
page readonly
|
|
|
|
7FF53C8E7000
|
unkown
|
page readonly
|
|
|
|
2435F731000
|
unkown
|
page read and write
|
|
|
|
7FF53C7AB000
|
unkown
|
page readonly
|
|
|
|
323137E000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F460000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2546B480000
|
unkown
|
page readonly
|
|
|
|
7FF59A023000
|
unkown
|
page readonly
|
|
|
|
7FF5E966A000
|
unkown
|
page readonly
|
|
|
|
23EE5E00000
|
unkown
|
page read and write
|
|
|
|
7FF565330000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF53C84C000
|
unkown
|
page readonly
|
|
|
|
7FF53C89A000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1FCC000
|
unkown
|
page readonly
|
|
|
|
7FF5BAB10000
|
unkown
|
page readonly
|
|
|
|
7FF5E9A82000
|
unkown
|
page readonly
|
|
|
|
7FF5B193E000
|
unkown
|
page readonly
|
|
|
|
139CCE30000
|
heap private
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF565C88000
|
unkown
|
page readonly
|
|
|
|
2AC73AE0000
|
heap default
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1A08AEBB000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F775000
|
unkown
|
page read and write
|
|
|
|
7FF53C90E000
|
unkown
|
page readonly
|
|
|
|
213028C0000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435EEBB000
|
unkown
|
page read and write
|
|
|
|
1A08CD10000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08AEBB000
|
unkown
|
page read and write
|
|
|
|
139CB600000
|
unkown
|
page readonly
|
|
|
|
178683C0000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5D07AC000
|
unkown
|
page readonly
|
|
|
|
1302FBB0000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF53C8AE000
|
unkown
|
page readonly
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
1A08D342000
|
unkown
|
page read and write
|
|
|
|
1A08E010000
|
unkown
|
page read and write
|
|
|
|
1A08CF11000
|
unkown
|
page read and write
|
|
|
|
200F000
|
unkown
|
page readonly
|
|
|
|
41A0000
|
unkown
|
page execute and read and write
|
|
|
|
2435ED30000
|
unkown
|
page readonly
|
|
|
|
23EE5E13000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5D0AB3000
|
unkown
|
page readonly
|
|
|
|
2092000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F76D000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B66000
|
unkown
|
page readonly
|
|
|
|
1A08E010000
|
unkown
|
page read and write
|
|
|
|
7FF53C56C000
|
unkown
|
page readonly
|
|
|
|
2E1477A000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF525F56000
|
unkown
|
page readonly
|
|
|
|
2435F74E000
|
unkown
|
page read and write
|
|
|
|
4F4E000
|
unkown
|
page read and write
|
|
|
|
D64927D000
|
unkown
|
page read and write
|
|
|
|
7FF59574A000
|
unkown
|
page readonly
|
|
|
|
1A08CF11000
|
unkown
|
page read and write
|
|
|
|
12B1000
|
unkown
|
page read and write
|
|
|
|
7FF5B16FB000
|
unkown
|
page readonly
|
|
|
|
1A08AED9000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2730000
|
unkown
|
page readonly
|
|
|
|
2E147FE000
|
unkown
|
page read and write
|
|
|
|
7FF53C709000
|
unkown
|
page readonly
|
|
|
|
23EE5E6C000
|
unkown
|
page read and write
|
|
|
|
E098EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5D0949000
|
unkown
|
page readonly
|
|
|
|
2435EE49000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
23EE6B40000
|
unkown
|
page readonly
|
|
|
|
2435F470000
|
unkown
|
page readonly
|
|
|
|
1A08CFEA000
|
unkown
|
page read and write
|
|
|
|
2546B360000
|
unkown
|
page readonly
|
|
|
|
23EE5D70000
|
heap default
|
page read and write
|
|
|
|
7FF5E9A0D000
|
unkown
|
page readonly
|
|
|
|
7FF54D98B000
|
unkown
|
page readonly
|
|
|
|
7FF5D1C0A000
|
unkown
|
page readonly
|
|
|
|
7FF59A08C000
|
unkown
|
page readonly
|
|
|
|
2435F74E000
|
unkown
|
page read and write
|
|
|
|
7FF59568F000
|
unkown
|
page readonly
|
|
|
|
1A08AEBB000
|
unkown
|
page read and write
|
|
|
|
E098E7F000
|
unkown
|
page read and write
|
|
|
|
7FF595660000
|
unkown
|
page readonly
|
|
|
|
1FE9000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF565AC3000
|
unkown
|
page readonly
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
2810000
|
unkown
|
page readonly
|
|
|
|
139CB510000
|
unkown
|
page readonly
|
|
|
|
7FF5D08B6000
|
unkown
|
page readonly
|
|
|
|
1A08CFA6000
|
unkown
|
page read and write
|
|
|
|
2435FC54000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF53C791000
|
unkown
|
page readonly
|
|
|
|
7FF53C688000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
3230AEB000
|
unkown
|
page read and write
|
|
|
|
7FF5D1C39000
|
unkown
|
page readonly
|
|
|
|
139CB650000
|
heap private
|
page read and write
|
|
|
|
13030600000
|
unkown
|
page readonly
|
|
|
|
1FE0000
|
unkown
|
page readonly
|
|
|
|
7FF5B193A000
|
unkown
|
page readonly
|
|
|
|
7FF59A0AA000
|
unkown
|
page readonly
|
|
|
|
D64917A000
|
unkown
|
page read and write
|
|
|
|
21300A13000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B58000
|
unkown
|
page readonly
|
|
|
|
1CE313E000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
1A08E410000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
125474A0000
|
unkown
|
page read and write
|
|
|
|
7FF565C64000
|
unkown
|
page readonly
|
|
|
|
EDD000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
C1ACBFF000
|
unkown
|
page read and write
|
|
|
|
7FF59566B000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1302FBC0000
|
unkown
|
page readonly
|
|
|
|
1A08AEBB000
|
unkown
|
page read and write
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
213028F0000
|
unkown
|
page readonly
|
|
|
|
47FB0BB000
|
unkown
|
page read and write
|
|
|
|
1302FC29000
|
unkown
|
page read and write
|
|
|
|
2435F756000
|
unkown
|
page read and write
|
|
|
|
7FF54D9CA000
|
unkown
|
page readonly
|
|
|
|
7FF5BAAC3000
|
unkown
|
page readonly
|
|
|
|
139CB37C000
|
heap default
|
page read and write
|
|
|
|
7FF565C7F000
|
unkown
|
page readonly
|
|
|
|
1A08AEF0000
|
unkown
|
page read and write
|
|
|
|
2435F71C000
|
unkown
|
page read and write
|
|
|
|
7FF565C20000
|
unkown
|
page readonly
|
|
|
|
C1ACCFF000
|
unkown
|
page read and write
|
|
|
|
7FF5E99D4000
|
unkown
|
page readonly
|
|
|
|
21302B43000
|
unkown
|
page read and write
|
|
|
|
7FF59A0C8000
|
unkown
|
page readonly
|
|
|
|
7FF5B1957000
|
unkown
|
page readonly
|
|
|
|
1A08CF5D000
|
unkown
|
page read and write
|
|
|
|
2435F74E000
|
unkown
|
page read and write
|
|
|
|
7FF5BA92B000
|
unkown
|
page readonly
|
|
|
|
1A08AEE1000
|
unkown
|
page read and write
|
|
|
|
7FF5E99E4000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
1A08D084000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
13780C60000
|
heap private
|
page read and write
|
|
|
|
16696FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D0ADC000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5D0AEE000
|
unkown
|
page readonly
|
|
|
|
7FF53C994000
|
unkown
|
page readonly
|
|
|
|
7FF5D1C04000
|
unkown
|
page readonly
|
|
|
|
7FF525E4C000
|
unkown
|
page readonly
|
|
|
|
7FF5E9710000
|
unkown
|
page readonly
|
|
|
|
7FF59A0D1000
|
unkown
|
page readonly
|
|
|
|
4780000
|
heap private
|
page read and write
|
|
|
|
7FF5B1799000
|
unkown
|
page readonly
|
|
|
|
21300AC3000
|
unkown
|
page read and write
|
|
|
|
7FF5D1A19000
|
unkown
|
page readonly
|
|
|
|
7FF4F1C8A000
|
unkown
|
page readonly
|
|
|
|
1A08D053000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF599D37000
|
unkown
|
page readonly
|
|
|
|
7FF5D0ADA000
|
unkown
|
page readonly
|
|
|
|
1302FC3C000
|
unkown
|
page read and write
|
|
|
|
1FD3000
|
unkown
|
page readonly
|
|
|
|
7FF54DA64000
|
unkown
|
page readonly
|
|
|
|
7FF5BABE9000
|
unkown
|
page readonly
|
|
|
|
E098BBC000
|
unkown
|
page read and write
|
|
|
|
178683A0000
|
unkown
|
page read and write
|
|
|
|
7FF54DA6A000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF59A05A000
|
unkown
|
page readonly
|
|
|
|
1A08AE78000
|
unkown
|
page read and write
|
|
|
|
7FF5956BE000
|
unkown
|
page readonly
|
|
|
|
7FF5D034D000
|
unkown
|
page readonly
|
|
|
|
7FF525AA6000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
2435F763000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB75000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1A08AEBB000
|
unkown
|
page read and write
|
|
|
|
1A08B250000
|
unkown
|
page readonly
|
|
|
|
D3563FA000
|
unkown
|
page read and write
|
|
|
|
32311FB000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B61000
|
unkown
|
page readonly
|
|
|
|
7FF5D1C1E000
|
unkown
|
page readonly
|
|
|
|
7FF59A0D6000
|
unkown
|
page readonly
|
|
|
|
267B000
|
unkown
|
page read and write
|
|
|
|
2435F74F000
|
unkown
|
page read and write
|
|
|
|
7FF565B8C000
|
unkown
|
page readonly
|
|
|
|
7FF59A065000
|
unkown
|
page readonly
|
|
|
|
23EE6602000
|
unkown
|
page read and write
|
|
|
|
7FF5E99FE000
|
unkown
|
page readonly
|
|
|
|
1302FBD0000
|
unkown
|
page read and write
|
|
|
|
1A08CFD0000
|
unkown
|
page read and write
|
|
|
|
2435F7BA000
|
unkown
|
page read and write
|
|
|
|
13780CC0000
|
heap default
|
page read and write
|
|
|
|
7FF5D0941000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
1A08CC80000
|
unkown
|
page readonly
|
|
|
|
32318FF000
|
unkown
|
page read and write
|
|
|
|
2435EE00000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F800000
|
unkown
|
page readonly
|
|
|
|
17868280000
|
heap default
|
page read and write
|
|
|
|
2435F756000
|
unkown
|
page read and write
|
|
|
|
7FF53C9A1000
|
unkown
|
page readonly
|
|
|
|
17074000000
|
unkown
|
page write copy
|
|
|
|
7FF5BA730000
|
unkown
|
page readonly
|
|
|
|
1302FC8A000
|
unkown
|
page read and write
|
|
|
|
7FF5E997A000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1A08CFAF000
|
unkown
|
page read and write
|
|
|
|
2435F775000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB5A000
|
unkown
|
page readonly
|
|
|
|
2435F753000
|
unkown
|
page read and write
|
|
|
|
7FF53C8DF000
|
unkown
|
page readonly
|
|
|
|
D648E7E000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5BA4C7000
|
unkown
|
page readonly
|
|
|
|
7FF565C1E000
|
unkown
|
page readonly
|
|
|
|
47FB47E000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
17868288000
|
heap default
|
page read and write
|
|
|
|
2AC73CD0000
|
unkown
|
page read and write
|
|
|
|
7FF5BAA6E000
|
unkown
|
page readonly
|
|
|
|
D355C7E000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08B050000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B4E000
|
unkown
|
page readonly
|
|
|
|
1A08AF3B000
|
unkown
|
page read and write
|
|
|
|
1A08AF2C000
|
unkown
|
page read and write
|
|
|
|
139CB660000
|
unkown
|
page readonly
|
|
|
|
7FF5D07C7000
|
unkown
|
page readonly
|
|
|
|
4130000
|
unkown
|
page read and write
|
|
|
|
1A08AF6D000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5D1897000
|
unkown
|
page readonly
|
|
|
|
47FB4FA000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB4F000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5D1BD7000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
2435EEA5000
|
unkown
|
page read and write
|
|
|
|
13780E00000
|
unkown
|
page read and write
|
|
|
|
23EE5E89000
|
unkown
|
page read and write
|
|
|
|
7FF5998C1000
|
unkown
|
page readonly
|
|
|
|
1F056C6F000
|
unkown
|
page read and write
|
|
|
|
1A08E310000
|
unkown
|
page read and write
|
|
|
|
2435EC60000
|
unkown
|
page readonly
|
|
|
|
1A08AD20000
|
heap default
|
page read and write
|
|
|
|
23EE5F13000
|
unkown
|
page read and write
|
|
|
|
267B000
|
unkown
|
page read and write
|
|
|
|
1A08AE29000
|
unkown
|
page read and write
|
|
|
|
7FF546968000
|
unkown
|
page readonly
|
|
|
|
7FF5BABBA000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2AB000
|
unkown
|
page read and write
|
|
|
|
7FF5BABCF000
|
unkown
|
page readonly
|
|
|
|
7FF53C68F000
|
unkown
|
page readonly
|
|
|
|
7FF525F3F000
|
unkown
|
page readonly
|
|
|
|
7FF5B119D000
|
unkown
|
page readonly
|
|
|
|
7FF4F1C6C000
|
unkown
|
page readonly
|
|
|
|
7FF54D982000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
17074050000
|
unkown
|
page readonly
|
|
|
|
7FF599D2F000
|
unkown
|
page readonly
|
|
|
|
1A08CCF0000
|
unkown
|
page read and write
|
|
|
|
2435EE8A000
|
unkown
|
page read and write
|
|
|
|
1A08D073000
|
unkown
|
page read and write
|
|
|
|
7FF5BA9A4000
|
unkown
|
page readonly
|
|
|
|
2435F765000
|
unkown
|
page read and write
|
|
|
|
1A08CF00000
|
unkown
|
page read and write
|
|
|
|
139CD2D0000
|
heap private
|
page read and write
|
|
|
|
950D575000
|
unkown
|
page read and write
|
|
|
|
7FF4F1D24000
|
unkown
|
page readonly
|
|
|
|
1E3B000
|
unkown
|
page readonly
|
|
|
|
7FF5B19BD000
|
unkown
|
page readonly
|
|
|
|
2435F700000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
17073E40000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
1F056C55000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB7B000
|
unkown
|
page readonly
|
|
|
|
7FF59A060000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F715000
|
unkown
|
page read and write
|
|
|
|
7FF525FCA000
|
unkown
|
page readonly
|
|
|
|
7FF525FD2000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08AEDD000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5B194B000
|
unkown
|
page readonly
|
|
|
|
7FF525E44000
|
unkown
|
page readonly
|
|
|
|
12547755000
|
heap private
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF565C4F000
|
unkown
|
page readonly
|
|
|
|
1A08AEF8000
|
unkown
|
page read and write
|
|
|
|
7FF5BAA13000
|
unkown
|
page readonly
|
|
|
|
1A08AF7C000
|
unkown
|
page read and write
|
|
|
|
2546B551000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
42C0000
|
unkown
|
page read and write
|
|
|
|
1A08E410000
|
unkown
|
page read and write
|
|
|
|
7FF53C1B1000
|
unkown
|
page readonly
|
|
|
|
1040000
|
unkown
|
page read and write
|
|
|
|
7FF525F2A000
|
unkown
|
page readonly
|
|
|
|
23EE5E83000
|
unkown
|
page read and write
|
|
|
|
7FF4F1C40000
|
unkown
|
page readonly
|
|
|
|
1A08CF19000
|
unkown
|
page read and write
|
|
|
|
2BA0000
|
unkown
|
page readonly
|
|
|
|
1302FE00000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
7FF5956B4000
|
unkown
|
page readonly
|
|
|
|
C1AC70B000
|
unkown
|
page read and write
|
|
|
|
7FF5B18E2000
|
unkown
|
page readonly
|
|
|
|
1A08D242000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
139CB655000
|
heap private
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5D1421000
|
unkown
|
page readonly
|
|
|
|
7FF59A0DD000
|
unkown
|
page readonly
|
|
|
|
2435F786000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
7FF5D0AC4000
|
unkown
|
page readonly
|
|
|
|
1302FD13000
|
unkown
|
page read and write
|
|
|
|
2435F73A000
|
unkown
|
page read and write
|
|
|
|
7FF5D19E5000
|
unkown
|
page readonly
|
|
|
|
7FF5BA64E000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5E99BC000
|
unkown
|
page readonly
|
|
|
|
17074250000
|
unkown
|
page readonly
|
|
|
|
7FF5D0911000
|
unkown
|
page readonly
|
|
|
|
C77919F000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF54698F000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F78E000
|
unkown
|
page read and write
|
|
|
|
2435EBF0000
|
heap private
|
page read and write
|
|
|
|
7FF565D04000
|
unkown
|
page readonly
|
|
|
|
D648F79000
|
unkown
|
page read and write
|
|
|
|
17073D30000
|
unkown
|
page readonly
|
|
|
|
13780E02000
|
unkown
|
page read and write
|
|
|
|
7FF5D1AA1000
|
unkown
|
page readonly
|
|
|
|
137827B0000
|
unkown
|
page read and write
|
|
|
|
7FF5BA8F0000
|
unkown
|
page readonly
|
|
|
|
7FF5B19A8000
|
unkown
|
page readonly
|
|
|
|
2435F752000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF546A22000
|
unkown
|
page readonly
|
|
|
|
7FF546930000
|
unkown
|
page readonly
|
|
|
|
47FB5FD000
|
unkown
|
page read and write
|
|
|
|
7FF53C6D5000
|
unkown
|
page readonly
|
|
|
|
2E1487F000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF53C8B0000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF525C60000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1A08AEDD000
|
unkown
|
page read and write
|
|
|
|
7FF53C7B8000
|
unkown
|
page readonly
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
7FF525DDB000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1302FC13000
|
unkown
|
page read and write
|
|
|
|
2435ED50000
|
unkown
|
page read and write
|
|
|
|
7FF5956CE000
|
unkown
|
page readonly
|
|
|
|
7FF525F24000
|
unkown
|
page readonly
|
|
|
|
7FF5D09D1000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F737000
|
unkown
|
page read and write
|
|
|
|
7FF5BA787000
|
unkown
|
page readonly
|
|
|
|
21300AB8000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2780000
|
heap default
|
page read and write
|
|
|
|
7FF5B11A1000
|
unkown
|
page readonly
|
|
|
|
7FF525AA0000
|
unkown
|
page readonly
|
|
|
|
D35578C000
|
unkown
|
page read and write
|
|
|
|
213028C0000
|
unkown
|
page read and write
|
|
|
|
1A08CF1C000
|
unkown
|
page read and write
|
|
|
|
2435F779000
|
unkown
|
page read and write
|
|
|
|
7FF53C88F000
|
unkown
|
page readonly
|
|
|
|
1A08D143000
|
unkown
|
page read and write
|
|
|
|
7FF5BA9A6000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5D0BE2000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5E99EE000
|
unkown
|
page readonly
|
|
|
|
7FF5D141D000
|
unkown
|
page readonly
|
|
|
|
21302B43000
|
unkown
|
page read and write
|
|
|
|
7FF4F1C42000
|
unkown
|
page readonly
|
|
|
|
2435EE4D000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
139CB340000
|
heap default
|
page read and write
|
|
|
|
1A08C910000
|
unkown
|
page readonly
|
|
|
|
7FF5E9926000
|
unkown
|
page readonly
|
|
|
|
7FF53C10D000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
139CB440000
|
unkown
|
page readonly
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
1A08AF2B000
|
unkown
|
page read and write
|
|
|
|
21303010000
|
unkown
|
page read and write
|
|
|
|
1A08AF4C000
|
unkown
|
page read and write
|
|
|
|
7FF5956D9000
|
unkown
|
page readonly
|
|
|
|
21300A82000
|
unkown
|
page read and write
|
|
|
|
2435F7F9000
|
unkown
|
page read and write
|
|
|
|
7FF5BABDE000
|
unkown
|
page readonly
|
|
|
|
7FF5E99F8000
|
unkown
|
page readonly
|
|
|
|
7FF4F1C84000
|
unkown
|
page readonly
|
|
|
|
7FF546A14000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
1A08AE87000
|
unkown
|
page read and write
|
|
|
|
FDD000
|
unkown
|
page read and write
|
|
|
|
2435F754000
|
unkown
|
page read and write
|
|
|
|
1A08CFDB000
|
unkown
|
page read and write
|
|
|
|
2435EED1000
|
unkown
|
page read and write
|
|
|
|
42CD000
|
unkown
|
page read and write
|
|
|
|
2435F763000
|
unkown
|
page read and write
|
|
|
|
2435F751000
|
unkown
|
page read and write
|
|
|
|
2435F733000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1F056C3F000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
21300A00000
|
unkown
|
page read and write
|
|
|
|
7FF5468B1000
|
unkown
|
page readonly
|
|
|
|
1302FC7D000
|
unkown
|
page read and write
|
|
|
|
260A000
|
heap default
|
page read and write
|
|
|
|
1EC0000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B44000
|
unkown
|
page readonly
|
|
|
|
1A08D300000
|
unkown
|
page read and write
|
|
|
|
23EE5DA0000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
E098FFE000
|
unkown
|
page read and write
|
|
|
|
7FF5BAABD000
|
unkown
|
page readonly
|
|
|
|
7FF5D1B60000
|
unkown
|
page readonly
|
|
|
|
2546B56F000
|
unkown
|
page read and write
|
|
|
|
2435F7FA000
|
unkown
|
page read and write
|
|
|
|
1A08D202000
|
unkown
|
page read and write
|
|
|
|
7FF5D09F8000
|
unkown
|
page readonly
|
|
|
|
7FF5657F5000
|
unkown
|
page readonly
|
|
|
|
2435F730000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435EE3C000
|
unkown
|
page read and write
|
|
|
|
17073CC0000
|
heap private
|
page read and write
|
|
|
|
7FF565C37000
|
unkown
|
page readonly
|
|
|
|
7FF5D0AF5000
|
unkown
|
page readonly
|
|
|
|
7FF53C66B000
|
unkown
|
page readonly
|
|
|
|
7FF4F1D2A000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5BA8E7000
|
unkown
|
page readonly
|
|
|
|
7FF53C873000
|
unkown
|
page readonly
|
|
|
|
21302B12000
|
unkown
|
page read and write
|
|
|
|
2AC73AC0000
|
heap private
|
page read and write
|
|
|
|
7FF5D1C36000
|
unkown
|
page readonly
|
|
|
|
7FF546A1A000
|
unkown
|
page readonly
|
|
|
|
1302FC02000
|
unkown
|
page read and write
|
|
|
|
1F056C02000
|
unkown
|
page read and write
|
|
|
|
2435F779000
|
unkown
|
page read and write
|
|
|
|
7FF53C701000
|
unkown
|
page readonly
|
|
|
|
7FF546974000
|
unkown
|
page readonly
|
|
|
|
7FF5D1BEC000
|
unkown
|
page readonly
|
|
|
|
2435F75B000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1A08D039000
|
unkown
|
page read and write
|
|
|
|
7FF59A000000
|
unkown
|
page readonly
|
|
|
|
2435F7B8000
|
unkown
|
page read and write
|
|
|
|
46E8000
|
heap private
|
page read and write
|
|
|
|
2546B540000
|
heap default
|
page read and write
|
|
|
|
7FF54DA72000
|
unkown
|
page readonly
|
|
|
|
7FF5E9995000
|
unkown
|
page readonly
|
|
|
|
13030940000
|
unkown
|
page readonly
|
|
|
|
213024F0000
|
unkown
|
page readonly
|
|
|
|
1A08AED4000
|
unkown
|
page read and write
|
|
|
|
7FF525FC4000
|
unkown
|
page readonly
|
|
|
|
7FF565C74000
|
unkown
|
page readonly
|
|
|
|
7FF546984000
|
unkown
|
page readonly
|
|
|
|
1A08E110000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB6E000
|
unkown
|
page readonly
|
|
|
|
7FF5E9A74000
|
unkown
|
page readonly
|
|
|
|
30424FE000
|
unkown
|
page read and write
|
|
|
|
7FF54D985000
|
unkown
|
page readonly
|
|
|
|
21300890000
|
heap private
|
page read and write
|
|
|
|
7FF599D1C000
|
unkown
|
page readonly
|
|
|
|
7FF599F63000
|
unkown
|
page readonly
|
|
|
|
257B000
|
unkown
|
page read and write
|
|
|
|
7FF565C57000
|
unkown
|
page readonly
|
|
|
|
7FF59A0BE000
|
unkown
|
page readonly
|
|
|
|
21300AF0000
|
unkown
|
page read and write
|
|
|
|
257F000
|
unkown
|
page read and write
|
|
|
|
7FF595751000
|
unkown
|
page readonly
|
|
|
|
7FF53C8AA000
|
unkown
|
page readonly
|
|
|
|
7FF5465F5000
|
unkown
|
page readonly
|
|
|
|
2435F745000
|
unkown
|
page read and write
|
|
|
|
7FF5B18E0000
|
unkown
|
page readonly
|
|
|
|
7FF565997000
|
unkown
|
page readonly
|
|
|
|
7FF4F1C4B000
|
unkown
|
page readonly
|
|
|
|
C1ACB79000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
7FF53C91E000
|
unkown
|
page readonly
|
|
|
|
950D777000
|
unkown
|
page read and write
|
|
|
|
7FF525E2D000
|
unkown
|
page readonly
|
|
|
|
32312FB000
|
unkown
|
page read and write
|
|
|
|
139CB5E0000
|
unkown
|
page readonly
|
|
|
|
7FF5B1843000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
139CB2E0000
|
unkown
|
page read and write
|
|
|
|
2435F7FE000
|
unkown
|
page read and write
|
|
|
|
7FF53C587000
|
unkown
|
page readonly
|
|
|
|
264E000
|
unkown
|
page read and write
|
|
|
|
12547507000
|
heap default
|
page read and write
|
|
|
|
7FF4F1C94000
|
unkown
|
page readonly
|
|
|
|
3230B6E000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
|
|
7FF595698000
|
unkown
|
page readonly
|
|
|
|
2E1434B000
|
unkown
|
page read and write
|
|
|
|
7FF5E9A81000
|
unkown
|
page readonly
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
1302FED0000
|
unkown
|
page readonly
|
|
|
|
7FF525F0F000
|
unkown
|
page readonly
|
|
|
|
7FF595744000
|
unkown
|
page readonly
|
|
|
|
1A08CFDB000
|
unkown
|
page read and write
|
|
|
|
7FF5D1BC5000
|
unkown
|
page readonly
|
|
|
|
2AC73AC5000
|
heap private
|
page read and write
|
|
|
|
7FF5956AA000
|
unkown
|
page readonly
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5E9228000
|
unkown
|
page readonly
|
|
|
|
17073E02000
|
unkown
|
page read and write
|
|
|
|
7FF5E992C000
|
unkown
|
page readonly
|
|
|
|
7FF53C7F6000
|
unkown
|
page readonly
|
|
|
|
4B7A000
|
heap private
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
21300A29000
|
unkown
|
page read and write
|
|
|
|
7FF54D9AC000
|
unkown
|
page readonly
|
|
|
|
2435F75C000
|
unkown
|
page read and write
|
|
|
|
1A08CFC9000
|
unkown
|
page read and write
|
|
|
|
7FF5D1CA4000
|
unkown
|
page readonly
|
|
|
|
7FF5E9A09000
|
unkown
|
page readonly
|
|
|
|
7FF5B199E000
|
unkown
|
page readonly
|
|
|
|
7FF565A71000
|
unkown
|
page readonly
|
|
|
|
2435F775000
|
unkown
|
page read and write
|
|
|
|
4230000
|
unkown
|
page read and write
|
|
|
|
2435F74D000
|
unkown
|
page read and write
|
|
|
|
7FF5B19B9000
|
unkown
|
page readonly
|
|
|
|
7FF5D0BE1000
|
unkown
|
page readonly
|
|
|
|
2435EEE8000
|
unkown
|
page read and write
|
|
|
|
1A08CC70000
|
unkown
|
page read and write
|
|
|
|
1E23000
|
unkown
|
page readonly
|
|
|
|
2435F755000
|
unkown
|
page read and write
|
|
There are 1545 hidden memdumps, click here to show them.