Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
BullGuard.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\1KXVR9NE\www.msn[1].xml
|
ASCII text, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZCI2O84A\contextual.media[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{3179B5A6-6A83-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3179B5A8-6A83-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3C3C5B5C-6A83-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{5259CE1D-6A83-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AA7XCQ3[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cEP3G[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cG73h[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1duLiL[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1dv3MB[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1dv8Kb[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1dv8y5[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1dvcIh[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1dvd9M[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1dvdtu[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 206x250,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBPfCZL[1].png
|
GIF image data, version 89a, 50 x 50
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBXXVfm[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBiAZc[1].png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\a8a064[1].gif
|
GIF image data, version 89a, 28 x 28
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\e151e5[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\f489d89a-0e50-4a68-82ea-aa78359a514f[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_3a983995348ee3a5056fbc620a4f628c[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_520d86410f26dcd2a8cf0ececf933186[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_70e11c440c0bef9f6c7634313dadb192[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_831afd7b16ef15301070d350663f9c7a[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_a6569e15149fa05a519807cceb558995[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_ef236c77cc33b5f40ce01cc528caafad[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\https___console.brax-cdn.com_creatives_b9476698-227d-4478-b354-042472d9181c_TB1813_1200x800_1000x600_dc50ae7dd7f119b94c09edb195c1bb8e[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\https___console.brax-cdn.com_creatives_b9476698-227d-4478-b354-042472d9181c_TB1851-CH_nulltarif_calculation_hg_bubble_1200x800_1000x600_bd539020df8cb8e09d440cb063f92083[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\medianet[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\medianet[2].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\nrrV63415[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\otBannerSdk[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\otFlat[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\37509a60-7d3b-427c-ac74-457c92ddca4d[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\58-acd805-185735b[1].css
|
UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\85-0f8009-68ddb2ab[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB10MkbM[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB15AQNm[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB19Ex49[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1d4aLV[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1dpyE6[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1duDXY[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1duESP[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1duIZo[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1dv1R6[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 311x333,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1dv4Va[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1dv59A[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1dv6ek[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 310x166,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1dv7GM[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB6Ma4a[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB7hjL[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBK9Hzy[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBVuddh[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBX2afX[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBaK3KR[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\auction[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\de-ch[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\de-ch[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\iab2Data[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jquery-2.1.1.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\otTCF-ie[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\4996b9[1].woff
|
Web Open Font Format, TrueType, length 45633, version 1.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\755f86[1].png
|
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AA3DGHW[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AArXDyz[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AAyuliQ[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB14EN7h[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1duNct[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1duQRB[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1duTsC[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1duUkj[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1duefr[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1dv5w9[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1dvcIo[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 206x250,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1dveQH[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 206x250,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1dvfdc[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1dvhnL[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 311x333,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1dvhvE[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB7hg4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BBO5Geh[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\a5ea21[1].ico
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\cfdbd9[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\http___cdn.taboola.com_libtrc_static_thumbnails_06326605864354eef8d69459f54ecc0c[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\location[1].js
|
ASCII text, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\nrrV63415[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\otPcCenter[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\41-0bee62-68ddb2ab[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\55a804ab-e5c6-4b97-9319-86263d365d28[1].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AAzjSw3[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB14hq0P[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB17milU[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1duOsY[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1duXF6[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1duXez[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1dv0Lm[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1dv1Sp[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1dv1qI[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1dv3Uw[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 300x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1dv7Zs[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1dvdfw[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1dvdi3[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 311x333,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1dveNu[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB7gRE[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BBOLLMj[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BBUE92F[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BBnYSFZ[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fcmain[1].js
|
HTML document, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fcmain[2].js
|
HTML document, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\otSDKStub[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\y[1].avi
|
data
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF13F433069AD9A7BE.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF461BE834C20F1F8F.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF4D14CF95BAA0867A.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF6CA96D1CD0A19866.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1ZZ92VS1GPNEU7CPZOZC.temp
|
data
|
dropped
|
|
There are 127 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32.exe /s C:\Users\user\Desktop\BullGuard.dll
|
|
|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\BullGuard.dll'
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c 'C:\Program Files\Internet Explorer\iexplore.exe'
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
C:\Program Files\Internet Explorer\iexplore.exe
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4088 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4088 CREDAT:17426 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4088 CREDAT:17430 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
|
unknown
|
|
|
|
https://www.skype.com/de/download-skype
|
unknown
|
|
|
|
https://www.stroeer.de/fileadmin/de/Konvergenz_und_Konzepte/Daten_und_Technologien/Stroeer_SSP/Downl
|
unknown
|
|
|
|
http://searchads.msn.net/.cfm?&&kp=1&
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/coronareisen
|
unknown
|
|
|
|
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
|
|
|
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
|
unknown
|
|
|
|
https://onedrive.live.com;OneDrive-App
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
|
unknown
|
|
|
|
https://onedrive.live.com;Fotos
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/z%c3%bcrcher-lehrer-werden-um-die-papizeit-geprellt/ar-BB1duPlU
|
unknown
|
|
|
|
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/massenansammlung-in-z%c3%bcrich-drei-menschen-t%c3%a4tlich-ange
|
unknown
|
|
|
|
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
|
unknown
|
|
|
|
http://ogp.me/ns/fb#
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-ss&ued=htt
|
unknown
|
|
|
|
http://ocsp.sca1b.amazontrust.com/images/JzxKy3Mr/7ak2_2FubAL0hgQNPmIL9Va/iBHhrMaA9s/LFOuALm_2BYEsJqje/TWeUx7UxHQBk/dxhkmyU1OGD/tPF0uqxzJ3F79x/iQdmT_2FhJihBRwcGP1Mu/6YEk0ltV8eb_2FO5/gjDtVZ5sdMNO5Jj/AsfoMd2ZBtct_2BlKV/_2BobvRca/tfgd7MbRHv4D_2BgMXmg/H7rXCWrYeFk/y.avi
|
143.204.15.29
|
|
|
|
https://www.msn.com/de-ch/news/other/polizei-l%c3%b6st-autoposer-treffen-am-z%c3%bcrcher-mythenquai-
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/googleData.json
|
unknown
|
|
|
|
https://outlook.com/
|
unknown
|
|
|
|
https://outlook.live.com/mail/deeplink/compose;Kalender
|
unknown
|
|
|
|
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
|
unknown
|
|
|
|
https://rover.ebay.com/rover/1/5222-53480-19255-0/1?mpre=https%3A%2F%2Fwww.ebay.ch&campid=533862
|
unknown
|
|
|
|
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
|
unknown
|
|
|
|
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
|
|
|
https://www.stroeer.com/fileadmin/com/StroeerDSP_deviceStorage.json
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iabData.json
|
unknown
|
|
|
|
https://www.msn.com/de-ch/homepage/api/pdp/updatepdpdata"
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iab2Data.json
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;Aktuelle
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://www.skype.com/
|
unknown
|
|
|
|
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ce_sharpen%2Ch_311%2Cw_207%2Cc_fill%
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/in-albisrieden-w%c3%bctet-die-abrissbirne-die-wohnforscherin-sa
|
unknown
|
|
|
|
https://www.msn.com/de-ch/homepage/api/modules/fetch"
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
|
unknown
|
|
|
|
https://mem.gfx.ms/meversion/?partner=msn&market=de-ch"
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/regional
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/svp-fordert-kameras-in-innenstadt-wegen-gewalt/ar-BB1dsYch?ocid
|
unknown
|
|
|
|
https://web.vortex.data.msn.com/collect/v1/t.gif?name=%27Ms.Webi.PageView%27&ver=%272.1%27&a
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/rekordhohe-arbeitslosigkeit-im-gastgewerbe/ar-BB1dupXH?ocid=hpl
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
|
unknown
|
|
|
|
https://www.bidstack.com/privacy-policy/
|
unknown
|
|
|
|
https://onedrive.live.com/about/en/download/
|
unknown
|
|
|
|
http://popup.taboola.com/german
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/lernfahrer-17-fl%c3%bcchtet-mit-hohem-tempo-vor-polizei/ar-BB1d
|
unknown
|
|
|
|
https://amzn.to/2TTxhNg
|
unknown
|
|
|
|
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
|
unknown
|
|
|
|
https://client-s.gateway.messenger.live.com
|
unknown
|
|
|
|
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_mestripe_logo_d
|
unknown
|
|
|
|
https://www.msn.com/de-ch/
|
unknown
|
|
|
|
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-edge-dhp-river
|
unknown
|
|
|
|
https://twitter.com/
|
unknown
|
|
|
|
https://www.msn.com/de-ch
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=245744&a=3064090&g=24903118&epi=ch-de
|
unknown
|
|
|
|
https://twitter.com/i/notifications;Ich
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=11518&awinaffid=696593&clickref=dech-edge-dhp-infopa
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
|
unknown
|
|
|
|
https://outlook.live.com/calendar
|
unknown
|
|
|
|
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:au
|
unknown
|
|
|
|
https://onedrive.live.com/#qt=mru
|
unknown
|
|
|
|
https://api.taboola.com/2.0/json/msn-ch-de-home/recommendations.notify-click?app.type=desktop&ap
|
unknown
|
|
|
|
https://i.geistm.com/l/HFCH_DTS_LP?bcid=5f11845dac990841e182d491&bhid=60140a72c5b18a0414cccb9c&a
|
unknown
|
|
|
|
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
|
unknown
|
|
|
|
https://www.msn.com?form=MY01O4&OCID=MY01O4
|
unknown
|
|
|
|
https://support.skype.com
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
|
unknown
|
|
|
|
https://www.skyscanner.net/flights?associateid=API_B2B_19305_00001&vertical=custom&pageType=
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1
|
unknown
|
|
|
|
http://ogp.me/ns#
|
unknown
|
|
|
|
https://clk.tradedoubler.com/click?p=245744&a=3064090&g=21863656
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&http
|
unknown
|
|
|
|
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_shop_de&utm
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;OneDrive-App
|
unknown
|
|
|
|
https://www.skype.com/de
|
unknown
|
|
|
|
https://login.skype.com/login/oauth/microsoft?client_id=738133
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/autoposertreffen-aufgel%c3%b6st-20-bussen-wegen-illegalen-party
|
unknown
|
|
|
|
https://onedrive.live.com?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
|
There are 84 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
atomproc.com
|
2.57.184.165
|
|
|
|
contextual.media.net
|
2.18.68.31
|
|
|
|
tls13.taboola.map.fastly.net
|
151.101.1.44
|
|
|
|
ocsp.sca1b.amazontrust.com
|
143.204.15.29
|
|
|
|
hblg.media.net
|
2.18.68.31
|
|
|
|
lg3.media.net
|
2.18.68.31
|
|
|
|
geolocation.onetrust.com
|
104.20.184.68
|
|
|
|
web.vortex.data.msn.com
|
unknown
|
|
|
|
www.msn.com
|
unknown
|
|
|
|
srtb.msn.com
|
unknown
|
|
|
|
img.img-taboola.com
|
unknown
|
|
|
|
cvision.media.net
|
unknown
|
|
There are 2 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
104.20.184.68
|
unknown
|
United States
|
unknown
|
|
|
|
143.204.15.29
|
unknown
|
United States
|
unknown
|
|
|
|
151.101.1.44
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{3179B5A6-6A83-11EB-90E4-ECF4BB862DED}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
AdminActive
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Window_Placement
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
There are 102 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
4B58000
|
heap private
|
page read and write
|
|
|
|
4B58000
|
heap private
|
page read and write
|
|
|
|
4B58000
|
heap private
|
page read and write
|
|
|
|
4B58000
|
heap private
|
page read and write
|
|
|
|
4B58000
|
heap private
|
page read and write
|
|
|
|
4B58000
|
heap private
|
page read and write
|
|
|
|
4B58000
|
heap private
|
page read and write
|
|
|
|
4B58000
|
heap private
|
page read and write
|
|
|
|
4B58000
|
heap private
|
page read and write
|
|
|
|
21C31430000
|
unkown
|
page read and write
|
|
|
|
7FF512AFA000
|
unkown
|
page readonly
|
|
|
|
1E6ADED0000
|
unkown
|
page readonly
|
|
|
|
3330000
|
unkown
|
page readonly
|
|
|
|
12BA2966000
|
unkown
|
page read and write
|
|
|
|
12BA5510000
|
unkown
|
page read and write
|
|
|
|
7FF5B0F88000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF542FC6000
|
unkown
|
page readonly
|
|
|
|
21396390000
|
unkown
|
page readonly
|
|
|
|
26D69121000
|
unkown
|
page read and write
|
|
|
|
7FF4F3B16000
|
unkown
|
page readonly
|
|
|
|
20F887E000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4F6000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
9043479000
|
unkown
|
page read and write
|
|
|
|
7FF53CEC3000
|
unkown
|
page readonly
|
|
|
|
7FF4EDF03000
|
unkown
|
page readonly
|
|
|
|
12BA47EA000
|
unkown
|
page read and write
|
|
|
|
7FF512AD2000
|
unkown
|
page readonly
|
|
|
|
26D69197000
|
unkown
|
page read and write
|
|
|
|
7FF5A84A0000
|
unkown
|
page readonly
|
|
|
|
2F5B000
|
unkown
|
page readonly
|
|
|
|
29DF2F9000
|
unkown
|
page read and write
|
|
|
|
7FF53CBE2000
|
unkown
|
page readonly
|
|
|
|
7FF5D1D3C000
|
unkown
|
page readonly
|
|
|
|
204B304D000
|
unkown
|
page read and write
|
|
|
|
7FF53D241000
|
unkown
|
page readonly
|
|
|
|
26D69161000
|
unkown
|
page read and write
|
|
|
|
7FF5A85A1000
|
unkown
|
page readonly
|
|
|
|
7FF555F94000
|
unkown
|
page readonly
|
|
|
|
204B3049000
|
unkown
|
page read and write
|
|
|
|
12BA2935000
|
unkown
|
page read and write
|
|
|
|
54918FE000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4EC000
|
unkown
|
page readonly
|
|
|
|
7FF55A5AA000
|
unkown
|
page readonly
|
|
|
|
7FF5DA579000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF500011000
|
unkown
|
page readonly
|
|
|
|
7FF5B0F72000
|
unkown
|
page readonly
|
|
|
|
7FF53D1B1000
|
unkown
|
page readonly
|
|
|
|
7FF58BD5A000
|
unkown
|
page readonly
|
|
|
|
7FF53D249000
|
unkown
|
page readonly
|
|
|
|
26D69188000
|
unkown
|
page read and write
|
|
|
|
23BD3800000
|
unkown
|
page read and write
|
|
|
|
26D69661000
|
unkown
|
page read and write
|
|
|
|
7FF4F3474000
|
unkown
|
page readonly
|
|
|
|
7FF55A606000
|
unkown
|
page readonly
|
|
|
|
12BA5210000
|
unkown
|
page read and write
|
|
|
|
7FF4EDFF2000
|
unkown
|
page readonly
|
|
|
|
7FF5002AA000
|
unkown
|
page readonly
|
|
|
|
26D691AA000
|
unkown
|
page read and write
|
|
|
|
7FF5004CE000
|
unkown
|
page readonly
|
|
|
|
26D6919D000
|
unkown
|
page read and write
|
|
|
|
12BA28A2000
|
unkown
|
page read and write
|
|
|
|
2841D580000
|
unkown
|
page readonly
|
|
|
|
21C31C02000
|
unkown
|
page read and write
|
|
|
|
29FD17F000
|
unkown
|
page read and write
|
|
|
|
7FF57FEC1000
|
unkown
|
page readonly
|
|
|
|
21C31432000
|
unkown
|
page read and write
|
|
|
|
12BA28DB000
|
unkown
|
page read and write
|
|
|
|
8489B7C000
|
unkown
|
page read and write
|
|
|
|
12BA4C02000
|
unkown
|
page read and write
|
|
|
|
7FF5128A0000
|
unkown
|
page readonly
|
|
|
|
7FF4FFCE9000
|
unkown
|
page readonly
|
|
|
|
7FF4EDF0D000
|
unkown
|
page readonly
|
|
|
|
7FF5A846B000
|
unkown
|
page readonly
|
|
|
|
200BA113000
|
unkown
|
page read and write
|
|
|
|
200BF053000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF555FEE000
|
unkown
|
page readonly
|
|
|
|
7FF5DA48A000
|
unkown
|
page readonly
|
|
|
|
7FF58B6F4000
|
unkown
|
page readonly
|
|
|
|
7FF500311000
|
unkown
|
page readonly
|
|
|
|
7FF5E0FC5000
|
unkown
|
page readonly
|
|
|
|
1E6ADE20000
|
unkown
|
page readonly
|
|
|
|
7FF57FE05000
|
unkown
|
page readonly
|
|
|
|
26D68FC0000
|
unkown
|
page readonly
|
|
|
|
5898C7C000
|
unkown
|
page read and write
|
|
|
|
7FF4F381F000
|
unkown
|
page readonly
|
|
|
|
7FF542F2A000
|
unkown
|
page readonly
|
|
|
|
204B3052000
|
unkown
|
page read and write
|
|
|
|
7FF5957C6000
|
unkown
|
page readonly
|
|
|
|
7FF595657000
|
unkown
|
page readonly
|
|
|
|
4DF000
|
unkown
|
page readonly
|
|
|
|
12BA47AC000
|
unkown
|
page read and write
|
|
|
|
23BD5830000
|
unkown
|
page readonly
|
|
|
|
7FF5DA4B5000
|
unkown
|
page readonly
|
|
|
|
7FF555F85000
|
unkown
|
page readonly
|
|
|
|
21395C40000
|
heap private
|
page read and write
|
|
|
|
12BA4AD8000
|
unkown
|
page read and write
|
|
|
|
12BA45E0000
|
unkown
|
page readonly
|
|
|
|
7FF5003C8000
|
unkown
|
page readonly
|
|
|
|
26D69185000
|
unkown
|
page read and write
|
|
|
|
17D505EF000
|
unkown
|
page read and write
|
|
|
|
84897FB000
|
unkown
|
page read and write
|
|
|
|
3114000
|
unkown
|
page readonly
|
|
|
|
7FF555DCA000
|
unkown
|
page readonly
|
|
|
|
7FF512AAA000
|
unkown
|
page readonly
|
|
|
|
1C74DD02000
|
unkown
|
page read and write
|
|
|
|
103C73B000
|
unkown
|
page read and write
|
|
|
|
1E32B790000
|
unkown
|
page readonly
|
|
|
|
12BA47CF000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
12BA5410000
|
unkown
|
page read and write
|
|
|
|
7FF5E15B5000
|
unkown
|
page readonly
|
|
|
|
23BD5700000
|
unkown
|
page read and write
|
|
|
|
7FF58BE40000
|
unkown
|
page readonly
|
|
|
|
12BA2968000
|
unkown
|
page read and write
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
145F6780000
|
heap default
|
page read and write
|
|
|
|
200B9914000
|
unkown
|
page read and write
|
|
|
|
7FF512B65000
|
unkown
|
page readonly
|
|
|
|
3072000
|
unkown
|
page readonly
|
|
|
|
7FF5DA49A000
|
unkown
|
page readonly
|
|
|
|
23BD5720000
|
unkown
|
page read and write
|
|
|
|
7FF4F3C09000
|
unkown
|
page readonly
|
|
|
|
12BA5310000
|
unkown
|
page read and write
|
|
|
|
23BD3813000
|
unkown
|
page read and write
|
|
|
|
7FF4F381C000
|
unkown
|
page readonly
|
|
|
|
185EF0CD000
|
unkown
|
page read and write
|
|
|
|
145F6790000
|
unkown
|
page write copy
|
|
|
|
7FF58BB17000
|
unkown
|
page readonly
|
|
|
|
204B2E30000
|
unkown
|
page readonly
|
|
|
|
800607E000
|
unkown
|
page read and write
|
|
|
|
26D688A7000
|
unkown
|
page read and write
|
|
|
|
7FF542D20000
|
unkown
|
page readonly
|
|
|
|
7FF595758000
|
unkown
|
page readonly
|
|
|
|
7FF512B29000
|
unkown
|
page readonly
|
|
|
|
12BA41A0000
|
unkown
|
page read and write
|
|
|
|
3077000
|
unkown
|
page readonly
|
|
|
|
1D8E8002000
|
unkown
|
page read and write
|
|
|
|
26D69181000
|
unkown
|
page read and write
|
|
|
|
7FF57FB85000
|
unkown
|
page readonly
|
|
|
|
7FF5E0E5D000
|
unkown
|
page readonly
|
|
|
|
7FF542F68000
|
unkown
|
page readonly
|
|
|
|
1280000
|
heap default
|
page read and write
|
|
|
|
1E6ADC08000
|
heap default
|
page read and write
|
|
|
|
17D505EF000
|
unkown
|
page read and write
|
|
|
|
26D69177000
|
unkown
|
page read and write
|
|
|
|
7FF555F7C000
|
unkown
|
page readonly
|
|
|
|
200B986F000
|
unkown
|
page read and write
|
|
|
|
12BA28BC000
|
unkown
|
page read and write
|
|
|
|
200BF08B000
|
unkown
|
page read and write
|
|
|
|
7FF543059000
|
unkown
|
page readonly
|
|
|
|
200BEDB4000
|
unkown
|
page read and write
|
|
|
|
145F6834000
|
unkown
|
page read and write
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
7FF58BE1C000
|
unkown
|
page readonly
|
|
|
|
26D68F30000
|
unkown
|
page readonly
|
|
|
|
200BEEB0000
|
unkown
|
page read and write
|
|
|
|
21395D90000
|
unkown
|
page readonly
|
|
|
|
307C000
|
unkown
|
page readonly
|
|
|
|
7FF55A5FC000
|
unkown
|
page readonly
|
|
|
|
2A040FB000
|
unkown
|
page read and write
|
|
|
|
12BA4772000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
23BD38C6000
|
unkown
|
page read and write
|
|
|
|
200BEED0000
|
unkown
|
page read and write
|
|
|
|
7FF5001F3000
|
unkown
|
page readonly
|
|
|
|
12BA27F0000
|
unkown
|
page readonly
|
|
|
|
204B308C000
|
unkown
|
page read and write
|
|
|
|
7FF4EE03F000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF57FDD2000
|
unkown
|
page readonly
|
|
|
|
21C31463000
|
unkown
|
page read and write
|
|
|
|
23BD386A000
|
unkown
|
page read and write
|
|
|
|
200B988B000
|
unkown
|
page read and write
|
|
|
|
7FF511C16000
|
unkown
|
page readonly
|
|
|
|
145F67E0000
|
unkown
|
page readonly
|
|
|
|
12BA2977000
|
unkown
|
page read and write
|
|
|
|
12BA47C6000
|
unkown
|
page read and write
|
|
|
|
12BA4B43000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
12BA5310000
|
unkown
|
page read and write
|
|
|
|
200BF0B2000
|
unkown
|
page read and write
|
|
|
|
145F6720000
|
heap private
|
page read and write
|
|
|
|
7FF55A5C5000
|
unkown
|
page readonly
|
|
|
|
7FF5B0FAE000
|
unkown
|
page readonly
|
|
|
|
7FF4F3B02000
|
unkown
|
page readonly
|
|
|
|
7FF5DA507000
|
unkown
|
page readonly
|
|
|
|
7FF512AE6000
|
unkown
|
page readonly
|
|
|
|
7FF5A8174000
|
unkown
|
page readonly
|
|
|
|
7FF500477000
|
unkown
|
page readonly
|
|
|
|
1E6ADEC5000
|
heap private
|
page read and write
|
|
|
|
12BA4A84000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
21395E00000
|
unkown
|
page read and write
|
|
|
|
12BA5010000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF53D15A000
|
unkown
|
page readonly
|
|
|
|
12BA4B83000
|
unkown
|
page read and write
|
|
|
|
300D000
|
unkown
|
page readonly
|
|
|
|
7FF4EDBF0000
|
unkown
|
page readonly
|
|
|
|
12BA4732000
|
unkown
|
page read and write
|
|
|
|
7FF5956BC000
|
unkown
|
page readonly
|
|
|
|
26D69121000
|
unkown
|
page read and write
|
|
|
|
145F6902000
|
unkown
|
page read and write
|
|
|
|
12BA2927000
|
unkown
|
page read and write
|
|
|
|
1D8E7FE0000
|
heap default
|
page read and write
|
|
|
|
2A041FB000
|
unkown
|
page read and write
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
23BD5733000
|
unkown
|
page read and write
|
|
|
|
7FF512A45000
|
unkown
|
page readonly
|
|
|
|
1D8E8A00000
|
unkown
|
page readonly
|
|
|
|
12BA2855000
|
unkown
|
page read and write
|
|
|
|
7FF5955AE000
|
unkown
|
page readonly
|
|
|
|
2E62000
|
unkown
|
page readonly
|
|
|
|
26D688F8000
|
unkown
|
page read and write
|
|
|
|
12BA2925000
|
unkown
|
page read and write
|
|
|
|
48B287F000
|
unkown
|
page read and write
|
|
|
|
7FF57FD9C000
|
unkown
|
page readonly
|
|
|
|
7FF59566C000
|
unkown
|
page readonly
|
|
|
|
2841CBE0000
|
unkown
|
page read and write
|
|
|
|
2841D4B0000
|
unkown
|
page readonly
|
|
|
|
1E6AE260000
|
unkown
|
page readonly
|
|
|
|
1D8E82D0000
|
unkown
|
page readonly
|
|
|
|
2A043FC000
|
unkown
|
page read and write
|
|
|
|
200B9877000
|
unkown
|
page read and write
|
|
|
|
7FF58BE35000
|
unkown
|
page readonly
|
|
|
|
1E329C00000
|
unkown
|
page read and write
|
|
|
|
848987F000
|
unkown
|
page read and write
|
|
|
|
3082000
|
unkown
|
page readonly
|
|
|
|
7FF55A689000
|
unkown
|
page readonly
|
|
|
|
7FF512AD0000
|
unkown
|
page readonly
|
|
|
|
7FF58BDF9000
|
unkown
|
page readonly
|
|
|
|
2109043C000
|
unkown
|
page read and write
|
|
|
|
7FF511BE9000
|
unkown
|
page readonly
|
|
|
|
200BF0AC000
|
unkown
|
page read and write
|
|
|
|
23BD5880000
|
unkown
|
page readonly
|
|
|
|
2F57000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF511C06000
|
unkown
|
page readonly
|
|
|
|
1C74DB70000
|
heap default
|
page read and write
|
|
|
|
7FF5A84B2000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5001FA000
|
unkown
|
page readonly
|
|
|
|
204B2FF0000
|
unkown
|
page read and write
|
|
|
|
17D50980000
|
heap private
|
page read and write
|
|
|
|
12BA473C000
|
unkown
|
page read and write
|
|
|
|
23BD38A8000
|
unkown
|
page read and write
|
|
|
|
E60000
|
heap private
|
page read and write
|
|
|
|
7FF4EDEBE000
|
unkown
|
page readonly
|
|
|
|
29FCDA9000
|
unkown
|
page read and write
|
|
|
|
7FF58BDA0000
|
unkown
|
page readonly
|
|
|
|
90435F9000
|
unkown
|
page read and write
|
|
|
|
200B9891000
|
unkown
|
page read and write
|
|
|
|
7FF512B70000
|
unkown
|
page readonly
|
|
|
|
26D688BD000
|
unkown
|
page read and write
|
|
|
|
7FF555DE8000
|
unkown
|
page readonly
|
|
|
|
200B96D0000
|
heap private
|
page read and write
|
|
|
|
21395CA0000
|
heap default
|
page read and write
|
|
|
|
26D6888D000
|
unkown
|
page read and write
|
|
|
|
5898F7E000
|
unkown
|
page read and write
|
|
|
|
549113F000
|
unkown
|
page read and write
|
|
|
|
7FF57F710000
|
unkown
|
page readonly
|
|
|
|
7FF58BD98000
|
unkown
|
page readonly
|
|
|
|
21395E5C000
|
unkown
|
page read and write
|
|
|
|
7FF57FE57000
|
unkown
|
page readonly
|
|
|
|
7FF595785000
|
unkown
|
page readonly
|
|
|
|
23BD5840000
|
unkown
|
page read and write
|
|
|
|
12BA26F0000
|
unkown
|
page write copy
|
|
|
|
2841CDC0000
|
unkown
|
page read and write
|
|
|
|
7FF4EDBEA000
|
unkown
|
page readonly
|
|
|
|
12BA5210000
|
unkown
|
page read and write
|
|
|
|
12BA4AC5000
|
unkown
|
page read and write
|
|
|
|
7FF53D1BC000
|
unkown
|
page readonly
|
|
|
|
200BA002000
|
unkown
|
page read and write
|
|
|
|
7FF4F3780000
|
unkown
|
page readonly
|
|
|
|
6093FFF000
|
unkown
|
page read and write
|
|
|
|
26D69176000
|
unkown
|
page read and write
|
|
|
|
1D8E8013000
|
unkown
|
page read and write
|
|
|
|
7FF512B74000
|
unkown
|
page readonly
|
|
|
|
7FF5A8511000
|
unkown
|
page readonly
|
|
|
|
29FD1FD000
|
unkown
|
page read and write
|
|
|
|
7FF542F66000
|
unkown
|
page readonly
|
|
|
|
1C74DB10000
|
heap private
|
page read and write
|
|
|
|
12BA4AD0000
|
unkown
|
page read and write
|
|
|
|
48B1FFC000
|
unkown
|
page read and write
|
|
|
|
26D69188000
|
unkown
|
page read and write
|
|
|
|
7FF542F9F000
|
unkown
|
page readonly
|
|
|
|
7FF500446000
|
unkown
|
page readonly
|
|
|
|
2841CE10000
|
heap default
|
page read and write
|
|
|
|
1039000
|
unkown
|
page read and write
|
|
|
|
204B3013000
|
unkown
|
page read and write
|
|
|
|
12BA5010000
|
unkown
|
page read and write
|
|
|
|
7FF5B0FEC000
|
unkown
|
page readonly
|
|
|
|
12BA4D00000
|
unkown
|
page read and write
|
|
|
|
29FD07E000
|
unkown
|
page read and write
|
|
|
|
1E329C41000
|
unkown
|
page read and write
|
|
|
|
CBC607F000
|
unkown
|
page read and write
|
|
|
|
CBC599B000
|
unkown
|
page read and write
|
|
|
|
7FF58BDB6000
|
unkown
|
page readonly
|
|
|
|
7FF4F3BA0000
|
unkown
|
page readonly
|
|
|
|
26D6915A000
|
unkown
|
page read and write
|
|
|
|
310B000
|
unkown
|
page readonly
|
|
|
|
7FF500391000
|
unkown
|
page readonly
|
|
|
|
26D688EB000
|
unkown
|
page read and write
|
|
|
|
26D6916C000
|
unkown
|
page read and write
|
|
|
|
7FF53D142000
|
unkown
|
page readonly
|
|
|
|
204B3000000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4E6000
|
unkown
|
page readonly
|
|
|
|
5491479000
|
unkown
|
page read and write
|
|
|
|
7FF4F38C5000
|
unkown
|
page readonly
|
|
|
|
1DC927A000
|
unkown
|
page read and write
|
|
|
|
7FF511BFD000
|
unkown
|
page readonly
|
|
|
|
23BD3919000
|
unkown
|
page read and write
|
|
|
|
7FF50028C000
|
unkown
|
page readonly
|
|
|
|
7FF4EE01A000
|
unkown
|
page readonly
|
|
|
|
200BF0B8000
|
unkown
|
page read and write
|
|
|
|
128B000
|
heap default
|
page read and write
|
|
|
|
7FF595799000
|
unkown
|
page readonly
|
|
|
|
7FF58BD7C000
|
unkown
|
page readonly
|
|
|
|
7FF53D1D5000
|
unkown
|
page readonly
|
|
|
|
12BA4B43000
|
unkown
|
page read and write
|
|
|
|
12BA474D000
|
unkown
|
page read and write
|
|
|
|
3028000
|
unkown
|
page readonly
|
|
|
|
145F8270000
|
unkown
|
page read and write
|
|
|
|
1C74DC02000
|
unkown
|
page read and write
|
|
|
|
7FF512A7A000
|
unkown
|
page readonly
|
|
|
|
21090456000
|
unkown
|
page read and write
|
|
|
|
7FF542FD6000
|
unkown
|
page readonly
|
|
|
|
7FF5DA240000
|
unkown
|
page readonly
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
23BD51A0000
|
unkown
|
page read and write
|
|
|
|
7FF5126E3000
|
unkown
|
page readonly
|
|
|
|
7FF51293E000
|
unkown
|
page readonly
|
|
|
|
12BA47E2000
|
unkown
|
page read and write
|
|
|
|
12BA4760000
|
unkown
|
page read and write
|
|
|
|
17D505D1000
|
unkown
|
page read and write
|
|
|
|
7FF512A8A000
|
unkown
|
page readonly
|
|
|
|
185EEFB0000
|
unkown
|
page readonly
|
|
|
|
7FF53D1B6000
|
unkown
|
page readonly
|
|
|
|
848935E000
|
unkown
|
page read and write
|
|
|
|
7FF543051000
|
unkown
|
page readonly
|
|
|
|
12BA47A8000
|
unkown
|
page read and write
|
|
|
|
26D691D4000
|
unkown
|
page read and write
|
|
|
|
1D8E8070000
|
unkown
|
page read and write
|
|
|
|
17D507B0000
|
unkown
|
page readonly
|
|
|
|
7FF511C1C000
|
unkown
|
page readonly
|
|
|
|
1C74DC3F000
|
unkown
|
page read and write
|
|
|
|
7FF5001A0000
|
unkown
|
page readonly
|
|
|
|
21C3146C000
|
unkown
|
page read and write
|
|
|
|
21C3144B000
|
unkown
|
page read and write
|
|
|
|
21C31441000
|
unkown
|
page read and write
|
|
|
|
7FF58BBDC000
|
unkown
|
page readonly
|
|
|
|
145F6829000
|
unkown
|
page read and write
|
|
|
|
7FF5955CF000
|
unkown
|
page readonly
|
|
|
|
2A042FB000
|
unkown
|
page read and write
|
|
|
|
7FF57FEC9000
|
unkown
|
page readonly
|
|
|
|
204B3100000
|
unkown
|
page read and write
|
|
|
|
7FF4ED944000
|
unkown
|
page readonly
|
|
|
|
26D69182000
|
unkown
|
page read and write
|
|
|
|
12BA28DC000
|
unkown
|
page read and write
|
|
|
|
7FF595740000
|
unkown
|
page readonly
|
|
|
|
21C31461000
|
unkown
|
page read and write
|
|
|
|
7FF555AEA000
|
unkown
|
page readonly
|
|
|
|
185EFA00000
|
unkown
|
page readonly
|
|
|
|
7FF542CB4000
|
unkown
|
page readonly
|
|
|
|
12BA28EC000
|
unkown
|
page read and write
|
|
|
|
7FF4EDE1A000
|
unkown
|
page readonly
|
|
|
|
26D69165000
|
unkown
|
page read and write
|
|
|
|
12BA2790000
|
unkown
|
page read and write
|
|
|
|
7FF4F37D8000
|
unkown
|
page readonly
|
|
|
|
7FF51285C000
|
unkown
|
page readonly
|
|
|
|
185EF102000
|
unkown
|
page read and write
|
|
|
|
200BF04A000
|
unkown
|
page read and write
|
|
|
|
8489977000
|
unkown
|
page read and write
|
|
|
|
2A0417B000
|
unkown
|
page read and write
|
|
|
|
7FF4F3B12000
|
unkown
|
page readonly
|
|
|
|
210903D0000
|
unkown
|
page readonly
|
|
|
|
CCF000
|
unkown
|
page read and write
|
|
|
|
7FF4F3743000
|
unkown
|
page readonly
|
|
|
|
21090429000
|
unkown
|
page read and write
|
|
|
|
7FF5A84EF000
|
unkown
|
page readonly
|
|
|
|
26D69177000
|
unkown
|
page read and write
|
|
|
|
7FF57FD9A000
|
unkown
|
page readonly
|
|
|
|
12BA47B6000
|
unkown
|
page read and write
|
|
|
|
7FF53D23E000
|
unkown
|
page readonly
|
|
|
|
5FE000
|
unkown
|
page read and write
|
|
|
|
12BA2902000
|
unkown
|
page read and write
|
|
|
|
3128000
|
unkown
|
page readonly
|
|
|
|
12BA477D000
|
unkown
|
page read and write
|
|
|
|
589917D000
|
unkown
|
page read and write
|
|
|
|
7FF5E15AC000
|
unkown
|
page readonly
|
|
|
|
549157F000
|
unkown
|
page read and write
|
|
|
|
12BA4796000
|
unkown
|
page read and write
|
|
|
|
7FF4EE006000
|
unkown
|
page readonly
|
|
|
|
48B277C000
|
unkown
|
page read and write
|
|
|
|
200BEC90000
|
unkown
|
page read and write
|
|
|
|
26D6916F000
|
unkown
|
page read and write
|
|
|
|
26D69190000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
26D687D0000
|
unkown
|
page readonly
|
|
|
|
1E329C29000
|
unkown
|
page read and write
|
|
|
|
ECD000
|
unkown
|
page read and write
|
|
|
|
7FF55A67E000
|
unkown
|
page readonly
|
|
|
|
CE0000
|
heap private
|
page read and write
|
|
|
|
21090470000
|
unkown
|
page read and write
|
|
|
|
21C3142E000
|
unkown
|
page read and write
|
|
|
|
7FF58BB2C000
|
unkown
|
page readonly
|
|
|
|
29DF1FB000
|
unkown
|
page read and write
|
|
|
|
7FF500371000
|
unkown
|
page readonly
|
|
|
|
12BA288D000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
185EF0BC000
|
unkown
|
page read and write
|
|
|
|
7FF5E1596000
|
unkown
|
page readonly
|
|
|
|
7FF542DAA000
|
unkown
|
page readonly
|
|
|
|
7FF5B1014000
|
unkown
|
page readonly
|
|
|
|
3010000
|
unkown
|
page readonly
|
|
|
|
7FF5D1D3C000
|
unkown
|
page readonly
|
|
|
|
1E6ADEC0000
|
heap private
|
page read and write
|
|
|
|
CBC627E000
|
unkown
|
page read and write
|
|
|
|
7FF4F3857000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF4F38D0000
|
unkown
|
page readonly
|
|
|
|
200BF0B0000
|
unkown
|
page read and write
|
|
|
|
21C31483000
|
unkown
|
page read and write
|
|
|
|
10006000
|
unkown image
|
page readonly
|
|
|
|
7FF595742000
|
unkown
|
page readonly
|
|
|
|
1D8E805A000
|
unkown
|
page read and write
|
|
|
|
204B2F00000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA571000
|
unkown
|
page readonly
|
|
|
|
7FF542CC7000
|
unkown
|
page readonly
|
|
|
|
CBC5DFB000
|
unkown
|
page read and write
|
|
|
|
3064000
|
unkown
|
page readonly
|
|
|
|
12BA289D000
|
unkown
|
page read and write
|
|
|
|
7FF511BA8000
|
unkown
|
page readonly
|
|
|
|
7FF4F3816000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
21C3144D000
|
unkown
|
page read and write
|
|
|
|
21090C02000
|
unkown
|
page read and write
|
|
|
|
200B9902000
|
unkown
|
page read and write
|
|
|
|
7FF59572C000
|
unkown
|
page readonly
|
|
|
|
7FF5B0FDD000
|
unkown
|
page readonly
|
|
|
|
12BA5210000
|
unkown
|
page read and write
|
|
|
|
12BA4B00000
|
unkown
|
page read and write
|
|
|
|
7FF57FCB8000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1DC93FE000
|
unkown
|
page read and write
|
|
|
|
12BA4E00000
|
unkown
|
page read and write
|
|
|
|
7FF512A91000
|
unkown
|
page readonly
|
|
|
|
17D505EF000
|
unkown
|
page read and write
|
|
|
|
7FF542FF7000
|
unkown
|
page readonly
|
|
|
|
26D68908000
|
unkown
|
page read and write
|
|
|
|
2A0467B000
|
unkown
|
page read and write
|
|
|
|
2A037CE000
|
unkown
|
page read and write
|
|
|
|
7FF4ED970000
|
unkown
|
page readonly
|
|
|
|
12BA5000000
|
unkown
|
page read and write
|
|
|
|
21090600000
|
unkown
|
page readonly
|
|
|
|
26D69172000
|
unkown
|
page read and write
|
|
|
|
7FF555F02000
|
unkown
|
page readonly
|
|
|
|
7FF5E159C000
|
unkown
|
page readonly
|
|
|
|
7FF57FCD3000
|
unkown
|
page readonly
|
|
|
|
26D69152000
|
unkown
|
page read and write
|
|
|
|
4CDCBAE000
|
unkown
|
page read and write
|
|
|
|
549167A000
|
unkown
|
page read and write
|
|
|
|
54E000
|
unkown
|
page read and write
|
|
|
|
12BA5710000
|
unkown
|
page read and write
|
|
|
|
12BA289F000
|
unkown
|
page read and write
|
|
|
|
200BEFD0000
|
unkown
|
page readonly
|
|
|
|
103CA7E000
|
unkown
|
page read and write
|
|
|
|
145F6AD0000
|
unkown
|
page readonly
|
|
|
|
7FF53D1F2000
|
unkown
|
page readonly
|
|
|
|
12BA4B43000
|
unkown
|
page read and write
|
|
|
|
4CDCE7F000
|
unkown
|
page read and write
|
|
|
|
1E329B40000
|
heap private
|
page read and write
|
|
|
|
17D50580000
|
unkown
|
page read and write
|
|
|
|
26D69199000
|
unkown
|
page read and write
|
|
|
|
2A0447B000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF57FCD7000
|
unkown
|
page readonly
|
|
|
|
26D69198000
|
unkown
|
page read and write
|
|
|
|
26D68851000
|
unkown
|
page read and write
|
|
|
|
17D505E9000
|
unkown
|
page read and write
|
|
|
|
26D69162000
|
unkown
|
page read and write
|
|
|
|
7FF5953AE000
|
unkown
|
page readonly
|
|
|
|
7FF5DA44C000
|
unkown
|
page readonly
|
|
|
|
7FF55A689000
|
unkown
|
page readonly
|
|
|
|
26D69100000
|
unkown
|
page read and write
|
|
|
|
200BEE70000
|
unkown
|
page read and write
|
|
|
|
26D688E2000
|
unkown
|
page read and write
|
|
|
|
7FF4F3B95000
|
unkown
|
page readonly
|
|
|
|
7FF4F3948000
|
unkown
|
page readonly
|
|
|
|
7FF50041F000
|
unkown
|
page readonly
|
|
|
|
21395F02000
|
unkown
|
page read and write
|
|
|
|
204B3800000
|
unkown
|
page readonly
|
|
|
|
7FF5128FB000
|
unkown
|
page readonly
|
|
|
|
26D69602000
|
unkown
|
page read and write
|
|
|
|
54914FA000
|
unkown
|
page read and write
|
|
|
|
26D691D4000
|
unkown
|
page read and write
|
|
|
|
4CDCB2A000
|
unkown
|
page read and write
|
|
|
|
204B3200000
|
unkown
|
page readonly
|
|
|
|
4CDCF79000
|
unkown
|
page read and write
|
|
|
|
7FF4F3ACB000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1E6ADBC0000
|
unkown
|
page read and write
|
|
|
|
200BAC00000
|
unkown
|
page read and write
|
|
|
|
2841DBA0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4FC000
|
unkown
|
page readonly
|
|
|
|
23BD5840000
|
unkown
|
page read and write
|
|
|
|
26D69165000
|
unkown
|
page read and write
|
|
|
|
26D68885000
|
unkown
|
page read and write
|
|
|
|
12BA4B83000
|
unkown
|
page read and write
|
|
|
|
23BD570A000
|
unkown
|
page read and write
|
|
|
|
1260000
|
heap default
|
page read and write
|
|
|
|
7FF5B0DDE000
|
unkown
|
page readonly
|
|
|
|
7FF57FDDA000
|
unkown
|
page readonly
|
|
|
|
210903E0000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
12BA5210000
|
unkown
|
page read and write
|
|
|
|
7FF57FC1A000
|
unkown
|
page readonly
|
|
|
|
7FF58BB70000
|
unkown
|
page readonly
|
|
|
|
145F683E000
|
unkown
|
page read and write
|
|
|
|
1D8E8200000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
23BD3859000
|
unkown
|
page read and write
|
|
|
|
7FF5A8535000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFE0000
|
unkown
|
page readonly
|
|
|
|
7FF500317000
|
unkown
|
page readonly
|
|
|
|
7FF58BCB3000
|
unkown
|
page readonly
|
|
|
|
204B3056000
|
unkown
|
page read and write
|
|
|
|
1E32B690000
|
unkown
|
page read and write
|
|
|
|
7FF542FCC000
|
unkown
|
page readonly
|
|
|
|
1E6ADC3E000
|
heap default
|
page read and write
|
|
|
|
29DE9FB000
|
unkown
|
page read and write
|
|
|
|
26D68FB0000
|
unkown
|
page readonly
|
|
|
|
7FF5B0DFF000
|
unkown
|
page readonly
|
|
|
|
7FF55A615000
|
unkown
|
page readonly
|
|
|
|
21395DD0000
|
unkown
|
page read and write
|
|
|
|
200BA159000
|
unkown
|
page read and write
|
|
|
|
304D000
|
unkown
|
page readonly
|
|
|
|
7FF58BE0D000
|
unkown
|
page readonly
|
|
|
|
7FF4F3A75000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2A048FD000
|
unkown
|
page read and write
|
|
|
|
7FF512A87000
|
unkown
|
page readonly
|
|
|
|
304A000
|
unkown
|
page readonly
|
|
|
|
7FF5B0839000
|
unkown
|
page readonly
|
|
|
|
2A03C7A000
|
unkown
|
page read and write
|
|
|
|
7FF5E1629000
|
unkown
|
page readonly
|
|
|
|
26D688A0000
|
unkown
|
page read and write
|
|
|
|
7FF50020C000
|
unkown
|
page readonly
|
|
|
|
7FF555FF9000
|
unkown
|
page readonly
|
|
|
|
7FF5E149C000
|
unkown
|
page readonly
|
|
|
|
26D68902000
|
unkown
|
page read and write
|
|
|
|
7FF555EF0000
|
unkown
|
page readonly
|
|
|
|
1DC8E8B000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2A03AFA000
|
unkown
|
page read and write
|
|
|
|
26D6914C000
|
unkown
|
page read and write
|
|
|
|
A288778000
|
unkown
|
page read and write
|
|
|
|
23BD6010000
|
unkown
|
page read and write
|
|
|
|
7FF58BE37000
|
unkown
|
page readonly
|
|
|
|
2841CE5B000
|
unkown
|
page read and write
|
|
|
|
7FF58BDB2000
|
unkown
|
page readonly
|
|
|
|
7FF57FB90000
|
unkown
|
page readonly
|
|
|
|
26D69002000
|
unkown
|
page read and write
|
|
|
|
200B989C000
|
unkown
|
page read and write
|
|
|
|
7FF512AE8000
|
unkown
|
page readonly
|
|
|
|
7FF5000EF000
|
unkown
|
page readonly
|
|
|
|
185EF02A000
|
unkown
|
page read and write
|
|
|
|
7FF4F3AD7000
|
unkown
|
page readonly
|
|
|
|
7FF53CE83000
|
unkown
|
page readonly
|
|
|
|
200BA7E0000
|
unkown
|
page read and write
|
|
|
|
200BF0B9000
|
unkown
|
page read and write
|
|
|
|
23BD3902000
|
unkown
|
page read and write
|
|
|
|
30B5000
|
unkown
|
page readonly
|
|
|
|
12BA28C9000
|
unkown
|
page read and write
|
|
|
|
7FF57FDEA000
|
unkown
|
page readonly
|
|
|
|
12BA5010000
|
unkown
|
page read and write
|
|
|
|
549187D000
|
unkown
|
page read and write
|
|
|
|
2A0477D000
|
unkown
|
page read and write
|
|
|
|
26D68750000
|
heap private
|
page read and write
|
|
|
|
70A000
|
heap default
|
page read and write
|
|
|
|
7FF5A85A9000
|
unkown
|
page readonly
|
|
|
|
7FF4EE0EE000
|
unkown
|
page readonly
|
|
|
|
4DC000
|
unkown
|
page readonly
|
|
|
|
2841CDD0000
|
unkown
|
page read and write
|
|
|
|
12BA4AD6000
|
unkown
|
page read and write
|
|
|
|
7FF5B1071000
|
unkown
|
page readonly
|
|
|
|
7FF5DA42A000
|
unkown
|
page readonly
|
|
|
|
7FF5957E0000
|
unkown
|
page readonly
|
|
|
|
12BA5410000
|
unkown
|
page read and write
|
|
|
|
609388B000
|
unkown
|
page read and write
|
|
|
|
26D69173000
|
unkown
|
page read and write
|
|
|
|
200B9856000
|
unkown
|
page read and write
|
|
|
|
7FF5E1536000
|
unkown
|
page readonly
|
|
|
|
12BA5010000
|
unkown
|
page read and write
|
|
|
|
200BEEF0000
|
unkown
|
page read and write
|
|
|
|
26D69800000
|
unkown
|
page readonly
|
|
|
|
1E6ADC0E000
|
heap default
|
page read and write
|
|
|
|
200BF220000
|
unkown
|
page read and write
|
|
|
|
7FF542FF0000
|
unkown
|
page readonly
|
|
|
|
7FF555F49000
|
unkown
|
page readonly
|
|
|
|
23BD5743000
|
unkown
|
page read and write
|
|
|
|
FCD000
|
unkown
|
page read and write
|
|
|
|
26D69600000
|
unkown
|
page read and write
|
|
|
|
7FF4F396E000
|
unkown
|
page readonly
|
|
|
|
7FF4F39C8000
|
unkown
|
page readonly
|
|
|
|
7FF543059000
|
unkown
|
page readonly
|
|
|
|
145F6813000
|
unkown
|
page read and write
|
|
|
|
7FF542F0A000
|
unkown
|
page readonly
|
|
|
|
12BA47A8000
|
unkown
|
page read and write
|
|
|
|
200BEE60000
|
unkown
|
page read and write
|
|
|
|
185EF06D000
|
unkown
|
page read and write
|
|
|
|
26D69116000
|
unkown
|
page read and write
|
|
|
|
CBC637D000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1E6AF970000
|
heap private
|
page read and write
|
|
|
|
7FF4F347F000
|
unkown
|
page readonly
|
|
|
|
7FF512AB3000
|
unkown
|
page readonly
|
|
|
|
7FF542FDC000
|
unkown
|
page readonly
|
|
|
|
7FF5B0C48000
|
unkown
|
page readonly
|
|
|
|
21C31413000
|
unkown
|
page read and write
|
|
|
|
4CDD07F000
|
unkown
|
page read and write
|
|
|
|
7FF5DA427000
|
unkown
|
page readonly
|
|
|
|
7FF542FBD000
|
unkown
|
page readonly
|
|
|
|
12BA4D42000
|
unkown
|
page read and write
|
|
|
|
29FD0FA000
|
unkown
|
page read and write
|
|
|
|
7FF5A84DE000
|
unkown
|
page readonly
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
23BD52A0000
|
unkown
|
page readonly
|
|
|
|
26D687E0000
|
unkown
|
page read and write
|
|
|
|
7FF542E48000
|
unkown
|
page readonly
|
|
|
|
12BA2610000
|
heap default
|
page read and write
|
|
|
|
7FF4F38BE000
|
unkown
|
page readonly
|
|
|
|
23BD3680000
|
unkown
|
page readonly
|
|
|
|
21C31449000
|
unkown
|
page read and write
|
|
|
|
12BA286E000
|
unkown
|
page read and write
|
|
|
|
7FF53D17E000
|
unkown
|
page readonly
|
|
|
|
7FF58B9DD000
|
unkown
|
page readonly
|
|
|
|
12BA4B43000
|
unkown
|
page read and write
|
|
|
|
7FF58BB5E000
|
unkown
|
page readonly
|
|
|
|
7FF4F3C00000
|
unkown
|
page readonly
|
|
|
|
7FF53D1E7000
|
unkown
|
page readonly
|
|
|
|
7FF5E1629000
|
unkown
|
page readonly
|
|
|
|
1C74DC29000
|
unkown
|
page read and write
|
|
|
|
26D68F60000
|
unkown
|
page write copy
|
|
|
|
26D68813000
|
unkown
|
page read and write
|
|
|
|
23BD55E0000
|
heap private
|
page read and write
|
|
|
|
12BA2926000
|
unkown
|
page read and write
|
|
|
|
90432FF000
|
unkown
|
page read and write
|
|
|
|
7FF5129E7000
|
unkown
|
page readonly
|
|
|
|
7FF55A624000
|
unkown
|
page readonly
|
|
|
|
7FF555D1A000
|
unkown
|
page readonly
|
|
|
|
7FF4EDF37000
|
unkown
|
page readonly
|
|
|
|
7FF50044C000
|
unkown
|
page readonly
|
|
|
|
7FF50040E000
|
unkown
|
page readonly
|
|
|
|
63F000
|
unkown
|
page read and write
|
|
|
|
2A044FD000
|
unkown
|
page read and write
|
|
|
|
204B3602000
|
unkown
|
page read and write
|
|
|
|
7FF5A8477000
|
unkown
|
page readonly
|
|
|
|
CBC5F7B000
|
unkown
|
page read and write
|
|
|
|
7FF4F3B8C000
|
unkown
|
page readonly
|
|
|
|
12BA47EA000
|
unkown
|
page read and write
|
|
|
|
7FF512B3D000
|
unkown
|
page readonly
|
|
|
|
12BA4C00000
|
unkown
|
page read and write
|
|
|
|
4CDCFFF000
|
unkown
|
page read and write
|
|
|
|
1E329E00000
|
unkown
|
page readonly
|
|
|
|
48B23FD000
|
unkown
|
page read and write
|
|
|
|
7FF4EE06C000
|
unkown
|
page readonly
|
|
|
|
7FF58BDCA000
|
unkown
|
page readonly
|
|
|
|
200BF08F000
|
unkown
|
page read and write
|
|
|
|
185EF200000
|
unkown
|
page readonly
|
|
|
|
7FF5B1079000
|
unkown
|
page readonly
|
|
|
|
200BEFF0000
|
unkown
|
page readonly
|
|
|
|
7FF512895000
|
unkown
|
page readonly
|
|
|
|
7FF53D249000
|
unkown
|
page readonly
|
|
|
|
200BEEC0000
|
unkown
|
page read and write
|
|
|
|
7FF595576000
|
unkown
|
page readonly
|
|
|
|
12BA28BC000
|
unkown
|
page read and write
|
|
|
|
21C31340000
|
unkown
|
page readonly
|
|
|
|
12BA2913000
|
unkown
|
page read and write
|
|
|
|
200BA104000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF512AB7000
|
unkown
|
page readonly
|
|
|
|
145F8370000
|
unkown
|
page readonly
|
|
|
|
7FF512B15000
|
unkown
|
page readonly
|
|
|
|
7FF57F714000
|
unkown
|
page readonly
|
|
|
|
12BA4800000
|
unkown
|
page readonly
|
|
|
|
21C31432000
|
unkown
|
page read and write
|
|
|
|
200B9800000
|
unkown
|
page read and write
|
|
|
|
7FF53D1CC000
|
unkown
|
page readonly
|
|
|
|
7FF5DA431000
|
unkown
|
page readonly
|
|
|
|
23BD5840000
|
unkown
|
page read and write
|
|
|
|
4B5A000
|
heap private
|
page read and write
|
|
|
|
26D69602000
|
unkown
|
page read and write
|
|
|
|
1C74F770000
|
unkown
|
page readonly
|
|
|
|
26D68829000
|
unkown
|
page read and write
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
1258000
|
heap private
|
page read and write
|
|
|
|
26D69134000
|
unkown
|
page read and write
|
|
|
|
1E6ADE40000
|
unkown
|
page readonly
|
|
|
|
7FF542D15000
|
unkown
|
page readonly
|
|
|
|
26D69161000
|
unkown
|
page read and write
|
|
|
|
200B9760000
|
unkown
|
page read and write
|
|
|
|
200BEDB1000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2A03CFA000
|
unkown
|
page read and write
|
|
|
|
200BF0A3000
|
unkown
|
page read and write
|
|
|
|
12BA45F0000
|
unkown
|
page read and write
|
|
|
|
7FF542FA9000
|
unkown
|
page readonly
|
|
|
|
609398E000
|
unkown
|
page read and write
|
|
|
|
54911BF000
|
unkown
|
page read and write
|
|
|
|
26D69121000
|
unkown
|
page read and write
|
|
|
|
1E329D02000
|
unkown
|
page read and write
|
|
|
|
4B5B000
|
heap private
|
page read and write
|
|
|
|
12BA5410000
|
unkown
|
page read and write
|
|
|
|
7FF5A85A9000
|
unkown
|
page readonly
|
|
|
|
12BA5310000
|
unkown
|
page read and write
|
|
|
|
7DFD26DBD000
|
unkown
|
page readonly
|
|
|
|
26D6919B000
|
unkown
|
page read and write
|
|
|
|
7FF58BD8C000
|
unkown
|
page readonly
|
|
|
|
6093DFF000
|
unkown
|
page read and write
|
|
|
|
1D8E8000000
|
unkown
|
page read and write
|
|
|
|
12BA4B43000
|
unkown
|
page read and write
|
|
|
|
12BA5210000
|
unkown
|
page read and write
|
|
|
|
A287D4E000
|
unkown
|
page read and write
|
|
|
|
185EF000000
|
unkown
|
page read and write
|
|
|
|
7FF512918000
|
unkown
|
page readonly
|
|
|
|
7FF55A627000
|
unkown
|
page readonly
|
|
|
|
200BA015000
|
unkown
|
page read and write
|
|
|
|
4B70000
|
unkown
|
page readonly
|
|
|
|
7FF500456000
|
unkown
|
page readonly
|
|
|
|
7FF512A71000
|
unkown
|
page readonly
|
|
|
|
12BA4B43000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown
|
page read and write
|
|
|
|
7FF5A8160000
|
unkown
|
page readonly
|
|
|
|
7FF57FB24000
|
unkown
|
page readonly
|
|
|
|
7FF595496000
|
unkown
|
page readonly
|
|
|
|
21C312D0000
|
heap private
|
page read and write
|
|
|
|
7FF4F3AC1000
|
unkown
|
page readonly
|
|
|
|
7FF512A4C000
|
unkown
|
page readonly
|
|
|
|
7FF4F3AE3000
|
unkown
|
page readonly
|
|
|
|
12BA2872000
|
unkown
|
page read and write
|
|
|
|
7FF5B0FF6000
|
unkown
|
page readonly
|
|
|
|
26D6919F000
|
unkown
|
page read and write
|
|
|
|
103CAFA000
|
unkown
|
page read and write
|
|
|
|
7FF5B0FE6000
|
unkown
|
page readonly
|
|
|
|
21C31350000
|
unkown
|
page readonly
|
|
|
|
26D69187000
|
unkown
|
page read and write
|
|
|
|
26D69602000
|
unkown
|
page read and write
|
|
|
|
200BEFE0000
|
unkown
|
page read and write
|
|
|
|
21090402000
|
unkown
|
page read and write
|
|
|
|
10005000
|
unkown image
|
page read and write
|
|
|
|
7FF4F3487000
|
unkown
|
page readonly
|
|
|
|
21C3142F000
|
unkown
|
page read and write
|
|
|
|
7FF59541F000
|
unkown
|
page readonly
|
|
|
|
200BF016000
|
unkown
|
page read and write
|
|
|
|
200B9902000
|
unkown
|
page read and write
|
|
|
|
7FF58BE44000
|
unkown
|
page readonly
|
|
|
|
1230000
|
unkown
|
page read and write
|
|
|
|
20F8E7F000
|
unkown
|
page read and write
|
|
|
|
7FF58BB13000
|
unkown
|
page readonly
|
|
|
|
7FF4F3841000
|
unkown
|
page readonly
|
|
|
|
7FF4ED94A000
|
unkown
|
page readonly
|
|
|
|
1E0000
|
unkown
|
page readonly
|
|
|
|
13F0000
|
unkown
|
page readonly
|
|
|
|
7FF4F3B7C000
|
unkown
|
page readonly
|
|
|
|
12BA4ACC000
|
unkown
|
page read and write
|
|
|
|
29FCD2E000
|
unkown
|
page read and write
|
|
|
|
185EEF80000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
200BEEF0000
|
unkown
|
page read and write
|
|
|
|
54916FB000
|
unkown
|
page read and write
|
|
|
|
2EBA000
|
unkown
|
page readonly
|
|
|
|
12BA4713000
|
unkown
|
page read and write
|
|
|
|
7FF5DA387000
|
unkown
|
page readonly
|
|
|
|
26D69166000
|
unkown
|
page read and write
|
|
|
|
12BA288C000
|
unkown
|
page read and write
|
|
|
|
200B9740000
|
unkown
|
page readonly
|
|
|
|
2109048D000
|
unkown
|
page read and write
|
|
|
|
26D69198000
|
unkown
|
page read and write
|
|
|
|
12BA4C82000
|
unkown
|
page read and write
|
|
|
|
7FF5A851C000
|
unkown
|
page readonly
|
|
|
|
7FF5E1453000
|
unkown
|
page readonly
|
|
|
|
1D8E8029000
|
unkown
|
page read and write
|
|
|
|
23BD3913000
|
unkown
|
page read and write
|
|
|
|
21C31439000
|
unkown
|
page read and write
|
|
|
|
7FF55A580000
|
unkown
|
page readonly
|
|
|
|
7FF55A681000
|
unkown
|
page readonly
|
|
|
|
3100000
|
unkown
|
page readonly
|
|
|
|
185EF024000
|
unkown
|
page read and write
|
|
|
|
21090400000
|
unkown
|
page read and write
|
|
|
|
7FF5003FA000
|
unkown
|
page readonly
|
|
|
|
549177B000
|
unkown
|
page read and write
|
|
|
|
26D68800000
|
unkown
|
page read and write
|
|
|
|
7FF555844000
|
unkown
|
page readonly
|
|
|
|
7FF58B6F0000
|
unkown
|
page readonly
|
|
|
|
7FF58BE16000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF50045C000
|
unkown
|
page readonly
|
|
|
|
7FF58BB65000
|
unkown
|
page readonly
|
|
|
|
7FF5A84E5000
|
unkown
|
page readonly
|
|
|
|
904337E000
|
unkown
|
page read and write
|
|
|
|
7FF511459000
|
unkown
|
page readonly
|
|
|
|
7FF555F66000
|
unkown
|
page readonly
|
|
|
|
23BD3610000
|
heap private
|
page read and write
|
|
|
|
2841D120000
|
unkown
|
page readonly
|
|
|
|
12BA477C000
|
unkown
|
page read and write
|
|
|
|
21C31600000
|
unkown
|
page readonly
|
|
|
|
7FF4F398F000
|
unkown
|
page readonly
|
|
|
|
185EF660000
|
unkown
|
page readonly
|
|
|
|
58991FF000
|
unkown
|
page read and write
|
|
|
|
7FF4F3445000
|
unkown
|
page readonly
|
|
|
|
200BF0B8000
|
unkown
|
page read and write
|
|
|
|
7FF511BCE000
|
unkown
|
page readonly
|
|
|
|
12BA4AD0000
|
unkown
|
page read and write
|
|
|
|
4760000
|
heap private
|
page read and write
|
|
|
|
21090500000
|
unkown
|
page read and write
|
|
|
|
7FF57FEBE000
|
unkown
|
page readonly
|
|
|
|
7FF4F3AF8000
|
unkown
|
page readonly
|
|
|
|
12BA4B83000
|
unkown
|
page read and write
|
|
|
|
54917FC000
|
unkown
|
page read and write
|
|
|
|
12BA2899000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
12BA28BD000
|
unkown
|
page read and write
|
|
|
|
7FF555F08000
|
unkown
|
page readonly
|
|
|
|
7FF5DA579000
|
unkown
|
page readonly
|
|
|
|
12BA4B43000
|
unkown
|
page read and write
|
|
|
|
7FF5B0834000
|
unkown
|
page readonly
|
|
|
|
21396602000
|
unkown
|
page read and write
|
|
|
|
3066000
|
unkown
|
page readonly
|
|
|
|
7FF555F35000
|
unkown
|
page readonly
|
|
|
|
7FF4F3B59000
|
unkown
|
page readonly
|
|
|
|
7FF555F90000
|
unkown
|
page readonly
|
|
|
|
12BA28C7000
|
unkown
|
page read and write
|
|
|
|
7FF542F8E000
|
unkown
|
page readonly
|
|
|
|
12BA28BE000
|
unkown
|
page read and write
|
|
|
|
26D691D8000
|
unkown
|
page read and write
|
|
|
|
7FF500387000
|
unkown
|
page readonly
|
|
|
|
1E6ADC00000
|
heap default
|
page read and write
|
|
|
|
2A03BFE000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCEF000
|
unkown
|
page readonly
|
|
|
|
2A0487D000
|
unkown
|
page read and write
|
|
|
|
21395CB0000
|
unkown
|
page readonly
|
|
|
|
7FF542DC0000
|
unkown
|
page readonly
|
|
|
|
26D691D4000
|
unkown
|
page read and write
|
|
|
|
2A03D7A000
|
unkown
|
page read and write
|
|
|
|
7FF4F3AA1000
|
unkown
|
page readonly
|
|
|
|
7FF5E15A6000
|
unkown
|
page readonly
|
|
|
|
26D688AA000
|
unkown
|
page read and write
|
|
|
|
200BEDD0000
|
unkown
|
page read and write
|
|
|
|
7FF55A60C000
|
unkown
|
page readonly
|
|
|
|
23BD5870000
|
unkown
|
page readonly
|
|
|
|
200B983F000
|
unkown
|
page read and write
|
|
|
|
7FF555DBE000
|
unkown
|
page readonly
|
|
|
|
1E329BA0000
|
heap default
|
page read and write
|
|
|
|
7FF58BD57000
|
unkown
|
page readonly
|
|
|
|
904327C000
|
unkown
|
page read and write
|
|
|
|
200BED90000
|
unkown
|
page read and write
|
|
|
|
23BD5840000
|
unkown
|
page read and write
|
|
|
|
7FF512BCE000
|
unkown
|
page readonly
|
|
|
|
200B9AD0000
|
unkown
|
page readonly
|
|
|
|
200BA159000
|
unkown
|
page read and write
|
|
|
|
21C3144E000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
204B3113000
|
unkown
|
page read and write
|
|
|
|
10C000
|
unkown
|
page read and write
|
|
|
|
7FF4F3AE7000
|
unkown
|
page readonly
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
200B97F3000
|
unkown
|
page read and write
|
|
|
|
2841CE82000
|
unkown
|
page read and write
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
2841CD99000
|
heap private
|
page read and write
|
|
|
|
7FF5B0D35000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
21C3143A000
|
unkown
|
page read and write
|
|
|
|
8489A7E000
|
unkown
|
page read and write
|
|
|
|
1C74DB80000
|
unkown
|
page write copy
|
|
|
|
7FF512AAC000
|
unkown
|
page readonly
|
|
|
|
7FF555E37000
|
unkown
|
page readonly
|
|
|
|
7FF58BC0E000
|
unkown
|
page readonly
|
|
|
|
54910BB000
|
unkown
|
page read and write
|
|
|
|
7FF58B9B3000
|
unkown
|
page readonly
|
|
|
|
21C31445000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page readonly
|
|
|
|
7FF4F3AB7000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
4CDCEFC000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E46000
|
unkown
|
page readonly
|
|
|
|
7FF555FF1000
|
unkown
|
page readonly
|
|
|
|
7FF555F1A000
|
unkown
|
page readonly
|
|
|
|
7FF5DA1E7000
|
unkown
|
page readonly
|
|
|
|
21C3143E000
|
unkown
|
page read and write
|
|
|
|
7FF58BC10000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF595849000
|
unkown
|
page readonly
|
|
|
|
7FF500470000
|
unkown
|
page readonly
|
|
|
|
12BA2620000
|
unkown
|
page readonly
|
|
|
|
A28867F000
|
unkown
|
page read and write
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
7FF58BE26000
|
unkown
|
page readonly
|
|
|
|
7FF542E63000
|
unkown
|
page readonly
|
|
|
|
7FF5957D5000
|
unkown
|
page readonly
|
|
|
|
21C3146A000
|
unkown
|
page read and write
|
|
|
|
23BD3900000
|
unkown
|
page read and write
|
|
|
|
12BA28BC000
|
unkown
|
page read and write
|
|
|
|
7FF59574D000
|
unkown
|
page readonly
|
|
|
|
200BA118000
|
unkown
|
page read and write
|
|
|
|
7FF50025F000
|
unkown
|
page readonly
|
|
|
|
7FF4EE0F1000
|
unkown
|
page readonly
|
|
|
|
145F6856000
|
unkown
|
page read and write
|
|
|
|
7FF5B1010000
|
unkown
|
page readonly
|
|
|
|
48B267E000
|
unkown
|
page read and write
|
|
|
|
7FF50043D000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1E329BB0000
|
unkown
|
page write copy
|
|
|
|
5B0000
|
heap default
|
page read and write
|
|
|
|
17D507A0000
|
unkown
|
page readonly
|
|
|
|
21C31474000
|
unkown
|
page read and write
|
|
|
|
261000
|
unkown
|
page read and write
|
|
|
|
1E32A0D0000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF58BE2C000
|
unkown
|
page readonly
|
|
|
|
7FF595660000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF542FF4000
|
unkown
|
page readonly
|
|
|
|
26D68916000
|
unkown
|
page read and write
|
|
|
|
7FF51295F000
|
unkown
|
page readonly
|
|
|
|
7FF5956C7000
|
unkown
|
page readonly
|
|
|
|
7FF55A5BE000
|
unkown
|
page readonly
|
|
|
|
1E6AF7F0000
|
heap private
|
page read and write
|
|
|
|
CBC647E000
|
unkown
|
page read and write
|
|
|
|
7FF595840000
|
unkown
|
page readonly
|
|
|
|
7FF58BC2F000
|
unkown
|
page readonly
|
|
|
|
7FF5957B1000
|
unkown
|
page readonly
|
|
|
|
21091140000
|
unkown
|
page readonly
|
|
|
|
26D69200000
|
unkown
|
page readonly
|
|
|
|
21396000000
|
unkown
|
page readonly
|
|
|
|
29FCCAB000
|
unkown
|
page read and write
|
|
|
|
7FF5E153A000
|
unkown
|
page readonly
|
|
|
|
185EF0C4000
|
unkown
|
page read and write
|
|
|
|
7FF57FE36000
|
unkown
|
page readonly
|
|
|
|
30A5000
|
unkown
|
page readonly
|
|
|
|
7FF5E13C3000
|
unkown
|
page readonly
|
|
|
|
7FF512834000
|
unkown
|
page readonly
|
|
|
|
7FF5E0EB1000
|
unkown
|
page readonly
|
|
|
|
C8E000
|
unkown
|
page read and write
|
|
|
|
12BA5710000
|
unkown
|
page read and write
|
|
|
|
7FF5A8516000
|
unkown
|
page readonly
|
|
|
|
7FF51270D000
|
unkown
|
page readonly
|
|
|
|
A2885F7000
|
unkown
|
page read and write
|
|
|
|
145F6A00000
|
unkown
|
page readonly
|
|
|
|
21C31400000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA517000
|
unkown
|
page readonly
|
|
|
|
200BEDB0000
|
unkown
|
page read and write
|
|
|
|
7FF512B41000
|
unkown
|
page readonly
|
|
|
|
200BA102000
|
unkown
|
page read and write
|
|
|
|
200BF021000
|
unkown
|
page read and write
|
|
|
|
26D69161000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
12BA4602000
|
unkown
|
page read and write
|
|
|
|
7FF4EE097000
|
unkown
|
page readonly
|
|
|
|
26D6919B000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
21C3142C000
|
unkown
|
page read and write
|
|
|
|
21C3142A000
|
unkown
|
page read and write
|
|
|
|
23BD38BE000
|
unkown
|
page read and write
|
|
|
|
200BEC00000
|
unkown
|
page read and write
|
|
|
|
7FF57FE3C000
|
unkown
|
page readonly
|
|
|
|
23BD3829000
|
unkown
|
page read and write
|
|
|
|
21C31467000
|
unkown
|
page read and write
|
|
|
|
7FF512847000
|
unkown
|
page readonly
|
|
|
|
7FF512B5C000
|
unkown
|
page readonly
|
|
|
|
7FF4FFC9D000
|
unkown
|
page readonly
|
|
|
|
26D6883C000
|
unkown
|
page read and write
|
|
|
|
21395E3D000
|
unkown
|
page read and write
|
|
|
|
17D505E8000
|
unkown
|
page read and write
|
|
|
|
210903F0000
|
unkown
|
page read and write
|
|
|
|
7FF53D158000
|
unkown
|
page readonly
|
|
|
|
7FF5003E8000
|
unkown
|
page readonly
|
|
|
|
7FF5E0E63000
|
unkown
|
page readonly
|
|
|
|
1E6ADDD0000
|
unkown
|
page readonly
|
|
|
|
12BA4796000
|
unkown
|
page read and write
|
|
|
|
589907E000
|
unkown
|
page read and write
|
|
|
|
7FF5003E6000
|
unkown
|
page readonly
|
|
|
|
2841CE63000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
23BD5723000
|
unkown
|
page read and write
|
|
|
|
26D69157000
|
unkown
|
page read and write
|
|
|
|
7FF5A8526000
|
unkown
|
page readonly
|
|
|
|
200B9A00000
|
unkown
|
page readonly
|
|
|
|
12BA4E02000
|
unkown
|
page read and write
|
|
|
|
2841D910000
|
unkown
|
page read and write
|
|
|
|
12BA2841000
|
unkown
|
page read and write
|
|
|
|
21C31502000
|
unkown
|
page read and write
|
|
|
|
26D68913000
|
unkown
|
page read and write
|
|
|
|
2A046FA000
|
unkown
|
page read and write
|
|
|
|
7FF58BBCB000
|
unkown
|
page readonly
|
|
|
|
7FF51145D000
|
unkown
|
page readonly
|
|
|
|
58992FD000
|
unkown
|
page read and write
|
|
|
|
12BA288A000
|
unkown
|
page read and write
|
|
|
|
12BA2938000
|
unkown
|
page read and write
|
|
|
|
7FF512BD9000
|
unkown
|
page readonly
|
|
|
|
7FF5A7D5A000
|
unkown
|
page readonly
|
|
|
|
26D688C4000
|
unkown
|
page read and write
|
|
|
|
7FF5129C8000
|
unkown
|
page readonly
|
|
|
|
7FF58BEA9000
|
unkown
|
page readonly
|
|
|
|
26D691A9000
|
unkown
|
page read and write
|
|
|
|
7FF58BBFA000
|
unkown
|
page readonly
|
|
|
|
12BA28BC000
|
unkown
|
page read and write
|
|
|
|
7FF5B0FFC000
|
unkown
|
page readonly
|
|
|
|
12BA2829000
|
unkown
|
page read and write
|
|
|
|
204B306F000
|
unkown
|
page read and write
|
|
|
|
23BD3750000
|
unkown
|
page write copy
|
|
|
|
7FF5957B6000
|
unkown
|
page readonly
|
|
|
|
12BA2937000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5A850D000
|
unkown
|
page readonly
|
|
|
|
26D691D6000
|
unkown
|
page read and write
|
|
|
|
185EEF50000
|
heap default
|
page read and write
|
|
|
|
26D688EE000
|
unkown
|
page read and write
|
|
|
|
26D69161000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4AE000
|
unkown
|
page readonly
|
|
|
|
12BA25B0000
|
heap private
|
page read and write
|
|
|
|
7FF58BD4A000
|
unkown
|
page readonly
|
|
|
|
200BA000000
|
unkown
|
page read and write
|
|
|
|
7FF5DA2E0000
|
unkown
|
page readonly
|
|
|
|
7FF5A84F9000
|
unkown
|
page readonly
|
|
|
|
3120000
|
unkown
|
page readonly
|
|
|
|
7FF59577E000
|
unkown
|
page readonly
|
|
|
|
8005F7D000
|
unkown
|
page read and write
|
|
|
|
21C3145F000
|
unkown
|
page read and write
|
|
|
|
7FF5DA1D4000
|
unkown
|
page readonly
|
|
|
|
200B98BA000
|
unkown
|
page read and write
|
|
|
|
21C31446000
|
unkown
|
page read and write
|
|
|
|
7FF5A8167000
|
unkown
|
page readonly
|
|
|
|
12BA2780000
|
unkown
|
page readonly
|
|
|
|
204B3051000
|
unkown
|
page read and write
|
|
|
|
7FF542F95000
|
unkown
|
page readonly
|
|
|
|
21090360000
|
heap private
|
page read and write
|
|
|
|
26D688A6000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC00000
|
unkown
|
page readonly
|
|
|
|
7FF595849000
|
unkown
|
page readonly
|
|
|
|
7FF4EE002000
|
unkown
|
page readonly
|
|
|
|
21395DD0000
|
unkown
|
page read and write
|
|
|
|
7FF58BCB7000
|
unkown
|
page readonly
|
|
|
|
7FF57FE4C000
|
unkown
|
page readonly
|
|
|
|
7FF4F3797000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF53D1ED000
|
unkown
|
page readonly
|
|
|
|
7FF59578F000
|
unkown
|
page readonly
|
|
|
|
26D69165000
|
unkown
|
page read and write
|
|
|
|
200BEC80000
|
unkown
|
page read and write
|
|
|
|
7FF55A596000
|
unkown
|
page readonly
|
|
|
|
7FF5E1437000
|
unkown
|
page readonly
|
|
|
|
609390E000
|
unkown
|
page read and write
|
|
|
|
12BA2924000
|
unkown
|
page read and write
|
|
|
|
7FF500291000
|
unkown
|
page readonly
|
|
|
|
26D69178000
|
unkown
|
page read and write
|
|
|
|
103D000
|
unkown
|
page read and write
|
|
|
|
185EF03E000
|
unkown
|
page read and write
|
|
|
|
7FF53CE5C000
|
unkown
|
page readonly
|
|
|
|
200BEE60000
|
unkown
|
page read and write
|
|
|
|
7FF5B0E38000
|
unkown
|
page readonly
|
|
|
|
200BEDD0000
|
unkown
|
page read and write
|
|
|
|
12BA28DE000
|
unkown
|
page read and write
|
|
|
|
26D68857000
|
unkown
|
page read and write
|
|
|
|
CBC677E000
|
unkown
|
page read and write
|
|
|
|
23BD5764000
|
unkown
|
page read and write
|
|
|
|
7FF512424000
|
unkown
|
page readonly
|
|
|
|
2841DB50000
|
unkown
|
page read and write
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
7FF555FF9000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF555E31000
|
unkown
|
page readonly
|
|
|
|
21090508000
|
unkown
|
page read and write
|
|
|
|
D70000
|
unkown
|
page read and write
|
|
|
|
500000
|
heap private
|
page read and write
|
|
|
|
7FF53D1E4000
|
unkown
|
page readonly
|
|
|
|
7FF5B0E18000
|
unkown
|
page readonly
|
|
|
|
6093EFE000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFCA000
|
unkown
|
page readonly
|
|
|
|
7FF53D16A000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF4F379E000
|
unkown
|
page readonly
|
|
|
|
7FF58BDDE000
|
unkown
|
page readonly
|
|
|
|
12BA5010000
|
unkown
|
page read and write
|
|
|
|
7FF50029E000
|
unkown
|
page readonly
|
|
|
|
7FF51288E000
|
unkown
|
page readonly
|
|
|
|
7FF5E161E000
|
unkown
|
page readonly
|
|
|
|
26D69156000
|
unkown
|
page read and write
|
|
|
|
7FF542F7A000
|
unkown
|
page readonly
|
|
|
|
1E6ADE80000
|
heap private
|
page read and write
|
|
|
|
3093000
|
unkown
|
page readonly
|
|
|
|
21090513000
|
unkown
|
page read and write
|
|
|
|
1E6ADBE0000
|
unkown
|
page read and write
|
|
|
|
7FF5B0F70000
|
unkown
|
page readonly
|
|
|
|
21090502000
|
unkown
|
page read and write
|
|
|
|
23BD5602000
|
unkown
|
page read and write
|
|
|
|
7FF5DA235000
|
unkown
|
page readonly
|
|
|
|
7FF5003B3000
|
unkown
|
page readonly
|
|
|
|
8005FFD000
|
unkown
|
page read and write
|
|
|
|
7FF5B1079000
|
unkown
|
page readonly
|
|
|
|
7FF555F6C000
|
unkown
|
page readonly
|
|
|
|
7FF512843000
|
unkown
|
page readonly
|
|
|
|
17D506C0000
|
unkown
|
page readonly
|
|
|
|
204B3029000
|
unkown
|
page read and write
|
|
|
|
21090488000
|
unkown
|
page read and write
|
|
|
|
7FF57FE60000
|
unkown
|
page readonly
|
|
|
|
7FF5E0FCC000
|
unkown
|
page readonly
|
|
|
|
700000
|
heap default
|
page read and write
|
|
|
|
7FF4F3BA4000
|
unkown
|
page readonly
|
|
|
|
12BA2871000
|
unkown
|
page read and write
|
|
|
|
7FF55A620000
|
unkown
|
page readonly
|
|
|
|
7FF555F97000
|
unkown
|
page readonly
|
|
|
|
7FF50010B000
|
unkown
|
page readonly
|
|
|
|
12BA4AD3000
|
unkown
|
page read and write
|
|
|
|
7FF4F3741000
|
unkown
|
page readonly
|
|
|
|
2841CD60000
|
unkown
|
page readonly
|
|
|
|
12BA4A00000
|
unkown
|
page read and write
|
|
|
|
1DC92FA000
|
unkown
|
page read and write
|
|
|
|
12BA4ACD000
|
unkown
|
page read and write
|
|
|
|
7FF500474000
|
unkown
|
page readonly
|
|
|
|
7FF4EE008000
|
unkown
|
page readonly
|
|
|
|
7FF5003D2000
|
unkown
|
page readonly
|
|
|
|
7FF4F38B7000
|
unkown
|
page readonly
|
|
|
|
7FF5003E2000
|
unkown
|
page readonly
|
|
|
|
7FF555E0D000
|
unkown
|
page readonly
|
|
|
|
7FF4EDF6C000
|
unkown
|
page readonly
|
|
|
|
7FF4EDFF0000
|
unkown
|
page readonly
|
|
|
|
21C3143C000
|
unkown
|
page read and write
|
|
|
|
7FF511BAA000
|
unkown
|
page readonly
|
|
|
|
7FF58BD15000
|
unkown
|
page readonly
|
|
|
|
7FF5B0F9A000
|
unkown
|
page readonly
|
|
|
|
2A045F9000
|
unkown
|
page read and write
|
|
|
|
7FF4EE0F9000
|
unkown
|
page readonly
|
|
|
|
800000
|
unkown
|
page readonly
|
|
|
|
7FF559E40000
|
unkown
|
page readonly
|
|
|
|
7FF58BE47000
|
unkown
|
page readonly
|
|
|
|
29DF4FF000
|
unkown
|
page read and write
|
|
|
|
904357E000
|
unkown
|
page read and write
|
|
|
|
26D69130000
|
unkown
|
page read and write
|
|
|
|
7FF57FEC9000
|
unkown
|
page readonly
|
|
|
|
7FF57FB37000
|
unkown
|
page readonly
|
|
|
|
7FF5DA56E000
|
unkown
|
page readonly
|
|
|
|
7FF58BC98000
|
unkown
|
page readonly
|
|
|
|
1D0000
|
unkown
|
page readonly
|
|
|
|
12BA28CD000
|
unkown
|
page read and write
|
|
|
|
23BD38D2000
|
unkown
|
page read and write
|
|
|
|
12BA2967000
|
unkown
|
page read and write
|
|
|
|
2841CD95000
|
heap private
|
page read and write
|
|
|
|
7FF555EF2000
|
unkown
|
page readonly
|
|
|
|
1D8E8740000
|
unkown
|
page read and write
|
|
|
|
7FF57FC30000
|
unkown
|
page readonly
|
|
|
|
26D69168000
|
unkown
|
page read and write
|
|
|
|
26D69174000
|
unkown
|
page read and write
|
|
|
|
145F6800000
|
unkown
|
page read and write
|
|
|
|
7FF542F2C000
|
unkown
|
page readonly
|
|
|
|
7FF5B0E49000
|
unkown
|
page readonly
|
|
|
|
7FF55A3AA000
|
unkown
|
page readonly
|
|
|
|
200BEE60000
|
unkown
|
page read and write
|
|
|
|
12BA2800000
|
unkown
|
page read and write
|
|
|
|
12BA2924000
|
unkown
|
page read and write
|
|
|
|
A2882F7000
|
unkown
|
page read and write
|
|
|
|
7FF5B106E000
|
unkown
|
page readonly
|
|
|
|
23BD38D5000
|
unkown
|
page read and write
|
|
|
|
7FF5002ED000
|
unkown
|
page readonly
|
|
|
|
7FF58BDB8000
|
unkown
|
page readonly
|
|
|
|
1D8E8113000
|
unkown
|
page read and write
|
|
|
|
185EF932000
|
unkown
|
page read and write
|
|
|
|
7FF512ABC000
|
unkown
|
page readonly
|
|
|
|
1C74DC55000
|
unkown
|
page read and write
|
|
|
|
185EF730000
|
unkown
|
page write copy
|
|
|
|
20F8B7E000
|
unkown
|
page read and write
|
|
|
|
200BF000000
|
unkown
|
page read and write
|
|
|
|
26D688D9000
|
unkown
|
page read and write
|
|
|
|
7FF4F39BC000
|
unkown
|
page readonly
|
|
|
|
48B1B9C000
|
unkown
|
page read and write
|
|
|
|
200B9907000
|
unkown
|
page read and write
|
|
|
|
7FF5DA486000
|
unkown
|
page readonly
|
|
|
|
A287DC9000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1D8E8102000
|
unkown
|
page read and write
|
|
|
|
7FF55A598000
|
unkown
|
page readonly
|
|
|
|
21C31360000
|
unkown
|
page read and write
|
|
|
|
145F86D0000
|
unkown
|
page read and write
|
|
|
|
2A03EFB000
|
unkown
|
page read and write
|
|
|
|
26D68FE0000
|
unkown
|
page read and write
|
|
|
|
7FF5957CC000
|
unkown
|
page readonly
|
|
|
|
7FF53D0EE000
|
unkown
|
page readonly
|
|
|
|
7FF5B0F82000
|
unkown
|
page readonly
|
|
|
|
12BA4742000
|
unkown
|
page read and write
|
|
|
|
7FF595756000
|
unkown
|
page readonly
|
|
|
|
2A0374B000
|
unkown
|
page read and write
|
|
|
|
12BA28BB000
|
unkown
|
page read and write
|
|
|
|
7FF555E03000
|
unkown
|
page readonly
|
|
|
|
7FF57FB33000
|
unkown
|
page readonly
|
|
|
|
200BEDC0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA488000
|
unkown
|
page readonly
|
|
|
|
21C31460000
|
unkown
|
page read and write
|
|
|
|
7FF555F76000
|
unkown
|
page readonly
|
|
|
|
26D688B1000
|
unkown
|
page read and write
|
|
|
|
4D1000
|
unkown
|
page execute read
|
|
|
|
26D688EE000
|
unkown
|
page read and write
|
|
|
|
2841CF10000
|
unkown
|
page read and write
|
|
|
|
21C31447000
|
unkown
|
page read and write
|
|
|
|
7FF57FDD8000
|
unkown
|
page readonly
|
|
|
|
26D69154000
|
unkown
|
page read and write
|
|
|
|
185EF900000
|
unkown
|
page read and write
|
|
|
|
7FF500429000
|
unkown
|
page readonly
|
|
|
|
1C74DE00000
|
unkown
|
page readonly
|
|
|
|
200BF060000
|
unkown
|
page read and write
|
|
|
|
2841CE3D000
|
heap default
|
page read and write
|
|
|
|
21396460000
|
unkown
|
page read and write
|
|
|
|
7FF4F392B000
|
unkown
|
page readonly
|
|
|
|
17D505A0000
|
unkown
|
page read and write
|
|
|
|
23BD37F0000
|
unkown
|
page readonly
|
|
|
|
7FF4F3BA7000
|
unkown
|
page readonly
|
|
|
|
7FF53D0EA000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
200B98A7000
|
unkown
|
page read and write
|
|
|
|
7FF5002E7000
|
unkown
|
page readonly
|
|
|
|
21090413000
|
unkown
|
page read and write
|
|
|
|
7FF511BDF000
|
unkown
|
page readonly
|
|
|
|
7FF57FE19000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF4EE049000
|
unkown
|
page readonly
|
|
|
|
7FF4EE035000
|
unkown
|
page readonly
|
|
|
|
7FF5953B2000
|
unkown
|
page readonly
|
|
|
|
200B9875000
|
unkown
|
page read and write
|
|
|
|
7FF5118C7000
|
unkown
|
page readonly
|
|
|
|
7FF53D1AD000
|
unkown
|
page readonly
|
|
|
|
26D69186000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
12BA4ACD000
|
unkown
|
page read and write
|
|
|
|
7FF4F39C1000
|
unkown
|
page readonly
|
|
|
|
12BA45E0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4C9000
|
unkown
|
page readonly
|
|
|
|
26D69179000
|
unkown
|
page read and write
|
|
|
|
21395E24000
|
unkown
|
page read and write
|
|
|
|
23BD38EC000
|
unkown
|
page read and write
|
|
|
|
7FF555D7F000
|
unkown
|
page readonly
|
|
|
|
7FF5E0EB6000
|
unkown
|
page readonly
|
|
|
|
23BD3870000
|
unkown
|
page read and write
|
|
|
|
12BA28BE000
|
unkown
|
page read and write
|
|
|
|
23BD3A00000
|
unkown
|
page readonly
|
|
|
|
7FF5B0F4A000
|
unkown
|
page readonly
|
|
|
|
7FF58BD87000
|
unkown
|
page readonly
|
|
|
|
1D8E7F80000
|
heap private
|
page read and write
|
|
|
|
7FF511C99000
|
unkown
|
page readonly
|
|
|
|
7FF595422000
|
unkown
|
page readonly
|
|
|
|
7FF50038A000
|
unkown
|
page readonly
|
|
|
|
7FF5A8163000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
29DE8FA000
|
unkown
|
page read and write
|
|
|
|
7FF5A84B8000
|
unkown
|
page readonly
|
|
|
|
185EEF70000
|
unkown
|
page readonly
|
|
|
|
7FF57FE2D000
|
unkown
|
page readonly
|
|
|
|
7FF57FE64000
|
unkown
|
page readonly
|
|
|
|
26D6915B000
|
unkown
|
page read and write
|
|
|
|
7FF512AE2000
|
unkown
|
page readonly
|
|
|
|
3106000
|
unkown
|
page readonly
|
|
|
|
7FF512B4C000
|
unkown
|
page readonly
|
|
|
|
7FF4EDECA000
|
unkown
|
page readonly
|
|
|
|
7FF5DA4BF000
|
unkown
|
page readonly
|
|
|
|
7FF5DA1E3000
|
unkown
|
page readonly
|
|
|
|
12BA5310000
|
unkown
|
page read and write
|
|
|
|
7FF5004D1000
|
unkown
|
page readonly
|
|
|
|
7FF55A5CF000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1E6ADDE0000
|
unkown
|
page readonly
|
|
|
|
7FF4F3745000
|
unkown
|
page readonly
|
|
|
|
7FF57FD7A000
|
unkown
|
page readonly
|
|
|
|
7FF512940000
|
unkown
|
page readonly
|
|
|
|
29DECFB000
|
unkown
|
page read and write
|
|
|
|
7FF55A5D9000
|
unkown
|
page readonly
|
|
|
|
200BA118000
|
unkown
|
page read and write
|
|
|
|
23BD386A000
|
unkown
|
page read and write
|
|
|
|
12BA2946000
|
unkown
|
page read and write
|
|
|
|
2A03B7A000
|
unkown
|
page read and write
|
|
|
|
7FF4F3C09000
|
unkown
|
page readonly
|
|
|
|
21395D80000
|
unkown
|
page readonly
|
|
|
|
12BA4C02000
|
unkown
|
page read and write
|
|
|
|
1E329C13000
|
unkown
|
page read and write
|
|
|
|
12BA5710000
|
unkown
|
page read and write
|
|
|
|
D2E000
|
unkown
|
page read and write
|
|
|
|
23BD3670000
|
heap default
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
12BA5510000
|
unkown
|
page read and write
|
|
|
|
21C31469000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2A03E7A000
|
unkown
|
page read and write
|
|
|
|
1DC8F8E000
|
unkown
|
page read and write
|
|
|
|
7FF5B0FB5000
|
unkown
|
page readonly
|
|
|
|
26D69163000
|
unkown
|
page read and write
|
|
|
|
12BA5210000
|
unkown
|
page read and write
|
|
|
|
23BD37A0000
|
unkown
|
page readonly
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
7FF55A5F6000
|
unkown
|
page readonly
|
|
|
|
7FF5DA368000
|
unkown
|
page readonly
|
|
|
|
21C31442000
|
unkown
|
page read and write
|
|
|
|
200BEC70000
|
unkown
|
page read and write
|
|
|
|
7FF5E1579000
|
unkown
|
page readonly
|
|
|
|
2841CE62000
|
unkown
|
page read and write
|
|
|
|
20F8AFB000
|
unkown
|
page read and write
|
|
|
|
7FF4F3B3E000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2A03DFA000
|
unkown
|
page read and write
|
|
|
|
200BF089000
|
unkown
|
page read and write
|
|
|
|
7FF57FE67000
|
unkown
|
page readonly
|
|
|
|
103CB79000
|
unkown
|
page read and write
|
|
|
|
7FF4F39AE000
|
unkown
|
page readonly
|
|
|
|
200BED98000
|
unkown
|
page read and write
|
|
|
|
7FF500218000
|
unkown
|
page readonly
|
|
|
|
20F85DC000
|
unkown
|
page read and write
|
|
|
|
7FF5DA2CA000
|
unkown
|
page readonly
|
|
|
|
90433FE000
|
unkown
|
page read and write
|
|
|
|
D6F000
|
unkown
|
page read and write
|
|
|
|
7FF512AC8000
|
unkown
|
page readonly
|
|
|
|
26D6917D000
|
unkown
|
page read and write
|
|
|
|
7FF5E155E000
|
unkown
|
page readonly
|
|
|
|
7FF4F3B71000
|
unkown
|
page readonly
|
|
|
|
200BEEE0000
|
unkown
|
page read and write
|
|
|
|
7FF511C91000
|
unkown
|
page readonly
|
|
|
|
204B3108000
|
unkown
|
page read and write
|
|
|
|
185EF2D0000
|
unkown
|
page readonly
|
|
|
|
200B9879000
|
unkown
|
page read and write
|
|
|
|
1E329ED0000
|
unkown
|
page readonly
|
|
|
|
48B247B000
|
unkown
|
page read and write
|
|
|
|
7FF4EDEE8000
|
unkown
|
page readonly
|
|
|
|
26D69156000
|
unkown
|
page read and write
|
|
|
|
7FF4F3B2A000
|
unkown
|
page readonly
|
|
|
|
21C31464000
|
unkown
|
page read and write
|
|
|
|
7FF59576A000
|
unkown
|
page readonly
|
|
|
|
7FF53D156000
|
unkown
|
page readonly
|
|
|
|
7FF57FE0F000
|
unkown
|
page readonly
|
|
|
|
200BF03D000
|
unkown
|
page read and write
|
|
|
|
7FF595431000
|
unkown
|
page readonly
|
|
|
|
7FF5A84A2000
|
unkown
|
page readonly
|
|
|
|
12BA296A000
|
unkown
|
page read and write
|
|
|
|
58F000
|
unkown
|
page read and write
|
|
|
|
26D69602000
|
unkown
|
page read and write
|
|
|
|
7FF58BD61000
|
unkown
|
page readonly
|
|
|
|
2A047FE000
|
unkown
|
page read and write
|
|
|
|
5898EFC000
|
unkown
|
page read and write
|
|
|
|
2841CDB0000
|
unkown
|
page read and write
|
|
|
|
26D69145000
|
unkown
|
page read and write
|
|
|
|
200BA8C0000
|
unkown
|
page readonly
|
|
|
|
7FF542F62000
|
unkown
|
page readonly
|
|
|
|
7FF53D1E0000
|
unkown
|
page readonly
|
|
|
|
7FF5E0FC7000
|
unkown
|
page readonly
|
|
|
|
21C31462000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
21C316D0000
|
unkown
|
page readonly
|
|
|
|
7FF4F3AEC000
|
unkown
|
page readonly
|
|
|
|
200B9813000
|
unkown
|
page read and write
|
|
|
|
7FF512B56000
|
unkown
|
page readonly
|
|
|
|
29DE36B000
|
unkown
|
page read and write
|
|
|
|
23BD37E0000
|
unkown
|
page read and write
|
|
|
|
7FF55A5ED000
|
unkown
|
page readonly
|
|
|
|
7FF511C25000
|
unkown
|
page readonly
|
|
|
|
185EF802000
|
unkown
|
page read and write
|
|
|
|
12BA28BE000
|
unkown
|
page read and write
|
|
|
|
12BA287A000
|
unkown
|
page read and write
|
|
|
|
7FF542CC3000
|
unkown
|
page readonly
|
|
|
|
7FF512A84000
|
unkown
|
page readonly
|
|
|
|
26D68AD0000
|
unkown
|
page readonly
|
|
|
|
7FF5B0D40000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF512BD1000
|
unkown
|
page readonly
|
|
|
|
7FF4EE094000
|
unkown
|
page readonly
|
|
|
|
26D6916D000
|
unkown
|
page read and write
|
|
|
|
26D69165000
|
unkown
|
page read and write
|
|
|
|
200BEDD4000
|
unkown
|
page read and write
|
|
|
|
204B303C000
|
unkown
|
page read and write
|
|
|
|
12BA4700000
|
unkown
|
page read and write
|
|
|
|
26D68FD0000
|
unkown
|
page read and write
|
|
|
|
2A03F7A000
|
unkown
|
page read and write
|
|
|
|
21C3147D000
|
unkown
|
page read and write
|
|
|
|
7FF5DA510000
|
unkown
|
page readonly
|
|
|
|
12BA5010000
|
unkown
|
page read and write
|
|
|
|
26D68FD0000
|
unkown
|
page read and write
|
|
|
|
12BA2946000
|
unkown
|
page read and write
|
|
|
|
7FF5B0FBF000
|
unkown
|
page readonly
|
|
|
|
21C31432000
|
unkown
|
page read and write
|
|
|
|
7FF5B0D2E000
|
unkown
|
page readonly
|
|
|
|
12BA4A53000
|
unkown
|
page read and write
|
|
|
|
7FF5E1621000
|
unkown
|
page readonly
|
|
|
|
29DEBFD000
|
unkown
|
page read and write
|
|
|
|
185EFD40000
|
unkown
|
page readonly
|
|
|
|
26D6915B000
|
unkown
|
page read and write
|
|
|
|
1D8E8760000
|
unkown
|
page readonly
|
|
|
|
7FF511C32000
|
unkown
|
page readonly
|
|
|
|
26D6914E000
|
unkown
|
page read and write
|
|
|
|
12BA28BC000
|
unkown
|
page read and write
|
|
|
|
10003000
|
unkown image
|
page readonly
|
|
|
|
7FF5003D0000
|
unkown
|
page readonly
|
|
|
|
7FF51292A000
|
unkown
|
page readonly
|
|
|
|
12BA5610000
|
unkown
|
page read and write
|
|
|
|
7FF53D0F4000
|
unkown
|
page readonly
|
|
|
|
48B22FC000
|
unkown
|
page read and write
|
|
|
|
7FF4F3A87000
|
unkown
|
page readonly
|
|
|
|
2EC3000
|
unkown
|
page readonly
|
|
|
|
200BED9E000
|
unkown
|
page read and write
|
|
|
|
12BA42A0000
|
unkown
|
page readonly
|
|
|
|
200B97F0000
|
unkown
|
page read and write
|
|
|
|
7FF511C8E000
|
unkown
|
page readonly
|
|
|
|
7FF4FFFD0000
|
unkown
|
page readonly
|
|
|
|
7FF4FFC99000
|
unkown
|
page readonly
|
|
|
|
7FF5A8544000
|
unkown
|
page readonly
|
|
|
|
1C74DC00000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA383000
|
unkown
|
page readonly
|
|
|
|
7FF55A40F000
|
unkown
|
page readonly
|
|
|
|
103C7BE000
|
unkown
|
page read and write
|
|
|
|
2841CD90000
|
heap private
|
page read and write
|
|
|
|
12BA5310000
|
unkown
|
page read and write
|
|
|
|
7FF59547E000
|
unkown
|
page readonly
|
|
|
|
1D8E8062000
|
unkown
|
page read and write
|
|
|
|
258000
|
unkown
|
page read and write
|
|
|
|
48B227F000
|
unkown
|
page read and write
|
|
|
|
7FF4F3B4F000
|
unkown
|
page readonly
|
|
|
|
26D69195000
|
unkown
|
page read and write
|
|
|
|
21C31402000
|
unkown
|
page read and write
|
|
|
|
12BA5010000
|
unkown
|
page read and write
|
|
|
|
7FF5002E3000
|
unkown
|
page readonly
|
|
|
|
7FF5957AD000
|
unkown
|
page readonly
|
|
|
|
200BEF40000
|
unkown
|
page readonly
|
|
|
|
12BA4AA4000
|
unkown
|
page read and write
|
|
|
|
204B308A000
|
unkown
|
page read and write
|
|
|
|
12BA28BA000
|
unkown
|
page read and write
|
|
|
|
7FF53D1C6000
|
unkown
|
page readonly
|
|
|
|
7FF57FD81000
|
unkown
|
page readonly
|
|
|
|
48B217E000
|
unkown
|
page read and write
|
|
|
|
7FF58BDA2000
|
unkown
|
page readonly
|
|
|
|
7FF542F11000
|
unkown
|
page readonly
|
|
|
|
26D69165000
|
unkown
|
page read and write
|
|
|
|
12BA28BC000
|
unkown
|
page read and write
|
|
|
|
185EEEF0000
|
heap private
|
page read and write
|
|
|
|
7FF512B1F000
|
unkown
|
page readonly
|
|
|
|
26D691A9000
|
unkown
|
page read and write
|
|
|
|
2F55000
|
unkown
|
page readonly
|
|
|
|
23BD3840000
|
unkown
|
page read and write
|
|
|
|
200BA100000
|
unkown
|
page read and write
|
|
|
|
7FF5B0F68000
|
unkown
|
page readonly
|
|
|
|
185EF113000
|
unkown
|
page read and write
|
|
|
|
200BEEF0000
|
unkown
|
page read and write
|
|
|
|
7FF59560B000
|
unkown
|
page readonly
|
|
|
|
17D505C0000
|
heap default
|
page read and write
|
|
|
|
7FF58BB04000
|
unkown
|
page readonly
|
|
|
|
7FF5001EF000
|
unkown
|
page readonly
|
|
|
|
7FF5957BC000
|
unkown
|
page readonly
|
|
|
|
7FF512B0E000
|
unkown
|
page readonly
|
|
|
|
7FF50023E000
|
unkown
|
page readonly
|
|
|
|
254000
|
unkown
|
page read and write
|
|
|
|
204B3B40000
|
unkown
|
page readonly
|
|
|
|
7FF5003B7000
|
unkown
|
page readonly
|
|
|
|
7FF4F380D000
|
unkown
|
page readonly
|
|
|
|
12BA2926000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
1E6AF8EF000
|
heap private
|
page read and write
|
|
|
|
7FF500107000
|
unkown
|
page readonly
|
|
|
|
7FF57FE46000
|
unkown
|
page readonly
|
|
|
|
21C3143B000
|
unkown
|
page read and write
|
|
|
|
7FF542FE7000
|
unkown
|
page readonly
|
|
|
|
77F000
|
unkown
|
page read and write
|
|
|
|
5898DFF000
|
unkown
|
page read and write
|
|
|
|
17D505CB000
|
heap default
|
page read and write
|
|
|
|
48B257D000
|
unkown
|
page read and write
|
|
|
|
2A0407A000
|
unkown
|
page read and write
|
|
|
|
200BED90000
|
unkown
|
page read and write
|
|
|
|
7FF4EDE7F000
|
unkown
|
page readonly
|
|
|
|
200B98FC000
|
unkown
|
page read and write
|
|
|
|
26D69654000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
26D6919D000
|
unkown
|
page read and write
|
|
|
|
2A03A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4DD000
|
unkown
|
page readonly
|
|
|
|
1E6ADD00000
|
unkown
|
page readonly
|
|
|
|
7FF5003BC000
|
unkown
|
page readonly
|
|
|
|
21395DA0000
|
unkown
|
page read and write
|
|
|
|
A28887F000
|
unkown
|
page read and write
|
|
|
|
200BF02F000
|
unkown
|
page read and write
|
|
|
|
1D8E8802000
|
unkown
|
page read and write
|
|
|
|
7FF58BD54000
|
unkown
|
page readonly
|
|
|
|
7FF4F3BFE000
|
unkown
|
page readonly
|
|
|
|
21C3147A000
|
unkown
|
page read and write
|
|
|
|
7FF5004D9000
|
unkown
|
page readonly
|
|
|
|
7FF542F6A000
|
unkown
|
page readonly
|
|
|
|
21C3144A000
|
unkown
|
page read and write
|
|
|
|
7FF5DA482000
|
unkown
|
page readonly
|
|
|
|
7FF58BD1C000
|
unkown
|
page readonly
|
|
|
|
200B9FF0000
|
unkown
|
page read and write
|
|
|
|
67C000
|
unkown
|
page read and write
|
|
|
|
7FF500415000
|
unkown
|
page readonly
|
|
|
|
7FF512B67000
|
unkown
|
page readonly
|
|
|
|
26D69157000
|
unkown
|
page read and write
|
|
|
|
7FF4EE02E000
|
unkown
|
page readonly
|
|
|
|
7FF54304E000
|
unkown
|
page readonly
|
|
|
|
7FF5E0E3F000
|
unkown
|
page readonly
|
|
|
|
7FF58BEA1000
|
unkown
|
page readonly
|
|
|
|
A28807E000
|
unkown
|
page read and write
|
|
|
|
7FF512887000
|
unkown
|
page readonly
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2841CD50000
|
unkown
|
page readonly
|
|
|
|
7FF5B0BB3000
|
unkown
|
page readonly
|
|
|
|
12BA4B43000
|
unkown
|
page read and write
|
|
|
|
26D6915D000
|
unkown
|
page read and write
|
|
|
|
7FF58BDE5000
|
unkown
|
page readonly
|
|
|
|
7FF4F3B18000
|
unkown
|
page readonly
|
|
|
|
7FF4FFF49000
|
unkown
|
page readonly
|
|
|
|
12BA5510000
|
unkown
|
page read and write
|
|
|
|
7FF50034C000
|
unkown
|
page readonly
|
|
|
|
200BEEF0000
|
unkown
|
page readonly
|
|
|
|
21395DD0000
|
unkown
|
page read and write
|
|
|
|
CBC667E000
|
unkown
|
page read and write
|
|
|
|
7FF5B0FC9000
|
unkown
|
page readonly
|
|
|
|
7FF4F393C000
|
unkown
|
page readonly
|
|
|
|
7FF512BD9000
|
unkown
|
page readonly
|
|
|
|
A2884F8000
|
unkown
|
page read and write
|
|
|
|
7FF5DA44A000
|
unkown
|
page readonly
|
|
|
|
1DC937E000
|
unkown
|
page read and write
|
|
|
|
7FF555B00000
|
unkown
|
page readonly
|
|
|
|
10001000
|
unkown image
|
page execute read
|
|
|
|
7FF4EE076000
|
unkown
|
page readonly
|
|
|
|
7FF5B0F05000
|
unkown
|
page readonly
|
|
|
|
26D69193000
|
unkown
|
page read and write
|
|
|
|
7FF4F3B45000
|
unkown
|
page readonly
|
|
|
|
200BF200000
|
unkown
|
page readonly
|
|
|
|
200BEF30000
|
unkown
|
page readonly
|
|
|
|
12BA4B43000
|
unkown
|
page read and write
|
|
|
|
1E329C02000
|
unkown
|
page read and write
|
|
|
|
200BF072000
|
unkown
|
page read and write
|
|
|
|
7FF5A859E000
|
unkown
|
page readonly
|
|
|
|
1297000
|
heap default
|
page read and write
|
|
|
|
185EF013000
|
unkown
|
page read and write
|
|
|
|
204B2DC0000
|
heap private
|
page read and write
|
|
|
|
A287CCB000
|
unkown
|
page read and write
|
|
|
|
185EF088000
|
unkown
|
page read and write
|
|
|
|
2A03FFF000
|
unkown
|
page read and write
|
|
|
|
6BB000
|
unkown
|
page read and write
|
|
|
|
8005BEC000
|
unkown
|
page read and write
|
|
|
|
74C000
|
unkown
|
page read and write
|
|
|
|
11D9000
|
heap private
|
page read and write
|
|
|
|
1C74DED0000
|
unkown
|
page readonly
|
|
|
|
2841CE62000
|
unkown
|
page read and write
|
|
|
|
1D8E8660000
|
unkown
|
page readonly
|
|
|
|
1C74F670000
|
unkown
|
page read and write
|
|
|
|
302F000
|
unkown
|
page readonly
|
|
|
|
301E000
|
unkown
|
page readonly
|
|
|
|
7FF5E158D000
|
unkown
|
page readonly
|
|
|
|
12BA2740000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF58BB57000
|
unkown
|
page readonly
|
|
|
|
26D69182000
|
unkown
|
page read and write
|
|
|
|
2A0457B000
|
unkown
|
page read and write
|
|
|
|
26D68FF0000
|
unkown
|
page readonly
|
|
|
|
12BA2874000
|
unkown
|
page read and write
|
|
|
|
200BEEA0000
|
unkown
|
page read and write
|
|
|
|
7FF5E1538000
|
unkown
|
page readonly
|
|
|
|
7FF542F07000
|
unkown
|
page readonly
|
|
|
|
7FF4FFF4D000
|
unkown
|
page readonly
|
|
|
|
1E329C56000
|
unkown
|
page read and write
|
|
|
|
7FF5DA514000
|
unkown
|
page readonly
|
|
|
|
7FF4EE085000
|
unkown
|
page readonly
|
|
|
|
7FF53D140000
|
unkown
|
page readonly
|
|
|
|
103CBFE000
|
unkown
|
page read and write
|
|
|
|
7FF4EE05D000
|
unkown
|
page readonly
|
|
|
|
7FF4F39D9000
|
unkown
|
page readonly
|
|
|
|
1E6ADC0A000
|
heap default
|
page read and write
|
|
|
|
7FF57FDD6000
|
unkown
|
page readonly
|
|
|
|
12BA5310000
|
unkown
|
page read and write
|
|
|
|
200B9730000
|
heap default
|
page read and write
|
|
|
|
7FF53D185000
|
unkown
|
page readonly
|
|
|
|
7FF5E1495000
|
unkown
|
page readonly
|
|
|
|
54915FB000
|
unkown
|
page read and write
|
|
|
|
7FF4EE066000
|
unkown
|
page readonly
|
|
|
|
26D69177000
|
unkown
|
page read and write
|
|
|
|
7FF4F3B6D000
|
unkown
|
page readonly
|
|
|
|
26D69134000
|
unkown
|
page read and write
|
|
|
|
7FF512420000
|
unkown
|
page readonly
|
|
|
|
12BA47F3000
|
unkown
|
page read and write
|
|
|
|
7FF500195000
|
unkown
|
page readonly
|
|
|
|
26D687B0000
|
heap default
|
page read and write
|
|
|
|
7FF555F5D000
|
unkown
|
page readonly
|
|
|
|
12BA4810000
|
unkown
|
page readonly
|
|
|
|
1C74DBD0000
|
unkown
|
page readonly
|
|
|
|
26D68871000
|
unkown
|
page read and write
|
|
|
|
26D69127000
|
unkown
|
page read and write
|
|
|
|
20F8C77000
|
unkown
|
page read and write
|
|
|
|
7FF5004D9000
|
unkown
|
page readonly
|
|
|
|
7FF5B0F5C000
|
unkown
|
page readonly
|
|
|
|
2841DB20000
|
unkown
|
page read and write
|
|
|
|
20F8D7F000
|
unkown
|
page read and write
|
|
|
|
1E6ADB60000
|
unkown
|
page readonly
|
|
|
|
7FF555C2B000
|
unkown
|
page readonly
|
|
|
|
7FF58BDEF000
|
unkown
|
page readonly
|
|
|
|
26D69163000
|
unkown
|
page read and write
|
|
|
|
84893DE000
|
unkown
|
page read and write
|
|
|
|
7FF555F06000
|
unkown
|
page readonly
|
|
|
|
1D8E8077000
|
unkown
|
page read and write
|
|
|
|
26D687C0000
|
unkown
|
page readonly
|
|
|
|
2841DB30000
|
unkown
|
page readonly
|
|
|
|
2841CC40000
|
unkown
|
page readonly
|
|
|
|
30A0000
|
unkown
|
page readonly
|
|
|
|
7FF5A852C000
|
unkown
|
page readonly
|
|
|
|
7FF57FDFE000
|
unkown
|
page readonly
|
|
|
|
23BD3883000
|
unkown
|
page read and write
|
|
|
|
21C3147C000
|
unkown
|
page read and write
|
|
|
|
7FF5956D5000
|
unkown
|
page readonly
|
|
|
|
200BEDC0000
|
unkown
|
page read and write
|
|
|
|
7FF5B0D27000
|
unkown
|
page readonly
|
|
|
|
1E6AF670000
|
unkown
|
page readonly
|
|
|
|
7FF555F2E000
|
unkown
|
page readonly
|
|
|
|
1E6ADE30000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
23BD3881000
|
unkown
|
page read and write
|
|
|
|
7FF500465000
|
unkown
|
page readonly
|
|
|
|
21395E13000
|
unkown
|
page read and write
|
|
|
|
4DD000
|
unkown
|
page read and write
|
|
|
|
26D69177000
|
unkown
|
page read and write
|
|
|
|
7FF4F39D0000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
26D68A00000
|
unkown
|
page readonly
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
1E6AF900000
|
heap private
|
page read and write
|
|
|
|
7FF4EE0F9000
|
unkown
|
page readonly
|
|
|
|
7FF51290C000
|
unkown
|
page readonly
|
|
|
|
17D50990000
|
unkown
|
page readonly
|
|
|
|
1D8E8730000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
84892DB000
|
unkown
|
page read and write
|
|
|
|
200B9750000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5957E7000
|
unkown
|
page readonly
|
|
|
|
7FF511C0C000
|
unkown
|
page readonly
|
|
|
|
7FF5E1565000
|
unkown
|
page readonly
|
|
|
|
CBC657E000
|
unkown
|
page read and write
|
|
|
|
185EEF60000
|
unkown
|
page readonly
|
|
|
|
29DEFFF000
|
unkown
|
page read and write
|
|
|
|
7FF5D9DC0000
|
unkown
|
page readonly
|
|
|
|
26D691B0000
|
unkown
|
page read and write
|
|
|
|
7FF555E6C000
|
unkown
|
page readonly
|
|
|
|
26D68FD0000
|
unkown
|
page read and write
|
|
|
|
7FF511C99000
|
unkown
|
page readonly
|
|
|
|
21395E02000
|
unkown
|
page read and write
|
|
|
|
7FF5129E3000
|
unkown
|
page readonly
|
|
|
|
12BA4D02000
|
unkown
|
page read and write
|
|
|
|
12BA4B43000
|
unkown
|
page read and write
|
|
|
|
21C3142D000
|
unkown
|
page read and write
|
|
|
|
7FF4EE090000
|
unkown
|
page readonly
|
|
|
|
7FF4F3A7C000
|
unkown
|
page readonly
|
|
|
|
200B9829000
|
unkown
|
page read and write
|
|
|
|
21C3146E000
|
unkown
|
page read and write
|
|
|
|
12BA45F0000
|
unkown
|
page read and write
|
|
|
|
7FF595738000
|
unkown
|
page readonly
|
|
|
|
7FF4F388C000
|
unkown
|
page readonly
|
|
|
|
145F6802000
|
unkown
|
page read and write
|
|
|
|
7FF5A832F000
|
unkown
|
page readonly
|
|
|
|
12BA28D9000
|
unkown
|
page read and write
|
|
|
|
26D69190000
|
unkown
|
page read and write
|
|
|
|
1C74DC13000
|
unkown
|
page read and write
|
|
|
|
204B3102000
|
unkown
|
page read and write
|
|
|
|
7FF58BD83000
|
unkown
|
page readonly
|
|
|
|
12BA28A6000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page readonly
|
|
|
|
12BA4A12000
|
unkown
|
page read and write
|
|
|
|
7FF57FD77000
|
unkown
|
page readonly
|
|
|
|
800617F000
|
unkown
|
page read and write
|
|
|
|
1D8E803D000
|
unkown
|
page read and write
|
|
|
|
200BEEF0000
|
unkown
|
page read and write
|
|
|
|
7FF542E67000
|
unkown
|
page readonly
|
|
|
|
7FF4F3B86000
|
unkown
|
page readonly
|
|
|
|
2841CE5B000
|
unkown
|
page read and write
|
|
|
|
204B2E20000
|
heap default
|
page read and write
|
|
|
|
12BA2813000
|
unkown
|
page read and write
|
|
|
|
26D69161000
|
unkown
|
page read and write
|
|
|
|
7FF555AF0000
|
unkown
|
page readonly
|
|
|
|
A2883FF000
|
unkown
|
page read and write
|
|
|
|
3080000
|
unkown
|
page readonly
|
|
|
|
1D8E7FF0000
|
unkown
|
page readonly
|
|
|
|
7FF5D9DC4000
|
unkown
|
page readonly
|
|
|
|
1E329C48000
|
unkown
|
page read and write
|
|
|
|
7FF555F3F000
|
unkown
|
page readonly
|
|
|
|
17D50985000
|
heap private
|
page read and write
|
|
|
|
21090450000
|
unkown
|
page read and write
|
|
|
|
14B000
|
unkown
|
page read and write
|
|
|
|
12BA4A54000
|
unkown
|
page read and write
|
|
|
|
26D6916F000
|
unkown
|
page read and write
|
|
|
|
21395E2A000
|
unkown
|
page read and write
|
|
|
|
26D69602000
|
unkown
|
page read and write
|
|
|
|
7FF4EE07C000
|
unkown
|
page readonly
|
|
|
|
26D6918D000
|
unkown
|
page read and write
|
|
|
|
2A0427B000
|
unkown
|
page read and write
|
|
|
|
7FF512B46000
|
unkown
|
page readonly
|
|
|
|
1DC8F0E000
|
unkown
|
page read and write
|
|
|
|
7FF53D199000
|
unkown
|
page readonly
|
|
|
|
2A0437B000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
26D6915C000
|
unkown
|
page read and write
|
|
|
|
2841CD10000
|
unkown
|
page read and write
|
|
|
|
26D6919A000
|
unkown
|
page read and write
|
|
|
|
CBC687E000
|
unkown
|
page read and write
|
|
|
|
7FF5957E4000
|
unkown
|
page readonly
|
|
|
|
7FF58BD7A000
|
unkown
|
page readonly
|
|
|
|
210903C0000
|
heap default
|
page read and write
|
|
|
|
200B98FC000
|
unkown
|
page read and write
|
|
|
|
7FF512B77000
|
unkown
|
page readonly
|
|
|
|
7FF595752000
|
unkown
|
page readonly
|
|
|
|
7FF5A8547000
|
unkown
|
page readonly
|
|
|
|
21090E00000
|
unkown
|
page readonly
|
|
|
|
7FF5B0F86000
|
unkown
|
page readonly
|
|
|
|
2841CD30000
|
unkown
|
page read and write
|
|
|
|
12BA286B000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2841CE18000
|
heap default
|
page read and write
|
|
|
|
7FF5002C8000
|
unkown
|
page readonly
|
|
|
|
7FF59583E000
|
unkown
|
page readonly
|
|
|
|
204B2FE0000
|
unkown
|
page readonly
|
|
|
|
7FF4F3B00000
|
unkown
|
page readonly
|
|
|
|
23BD5850000
|
unkown
|
page readonly
|
|
|
|
21C31444000
|
unkown
|
page read and write
|
|
|
|
A288175000
|
unkown
|
page read and write
|
|
|
|
12BA5110000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF58BE9E000
|
unkown
|
page readonly
|
|
|
|
3021000
|
unkown
|
page readonly
|
|
|
|
12BA2A00000
|
unkown
|
page readonly
|
|
|
|
21C31473000
|
unkown
|
page read and write
|
|
|
|
7FF53CECC000
|
unkown
|
page readonly
|
|
|
|
200BF08D000
|
unkown
|
page read and write
|
|
|
|
26D6919F000
|
unkown
|
page read and write
|
|
|
|
7FF5000EC000
|
unkown
|
page readonly
|
|
|
|
12BA5610000
|
unkown
|
page read and write
|
|
|
|
103CC7F000
|
unkown
|
page read and write
|
|
|
|
7FF54286A000
|
unkown
|
page readonly
|
|
|
|
7FF5B1005000
|
unkown
|
page readonly
|
|
|
|
26D69127000
|
unkown
|
page read and write
|
|
|
|
7FF58BE11000
|
unkown
|
page readonly
|
|
|
|
5B5000
|
heap default
|
page read and write
|
|
|
|
3056000
|
unkown
|
page readonly
|
|
|
|
7FF58BBE8000
|
unkown
|
page readonly
|
|
|
|
3128000
|
unkown
|
page readonly
|
|
|
|
7FF4EDF31000
|
unkown
|
page readonly
|
|
|
|
90434FC000
|
unkown
|
page read and write
|
|
|
|
200B98AA000
|
unkown
|
page read and write
|
|
|
|
12BA4D82000
|
unkown
|
page read and write
|
|
|
|
210906D0000
|
unkown
|
page readonly
|
|
|
|
2841DB40000
|
unkown
|
page read and write
|
|
|
|
26D68FD0000
|
unkown
|
page readonly
|
|
|
|
7FF58BEA9000
|
unkown
|
page readonly
|
|
|
|
7FF4F3B76000
|
unkown
|
page readonly
|
|
|
|
7FF59571A000
|
unkown
|
page readonly
|
|
|
|
30BA000
|
unkown
|
page readonly
|
|
|
|
7FF50015C000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5955E8000
|
unkown
|
page readonly
|
|
|
|
A2881FE000
|
unkown
|
page read and write
|
|
|
|
23BD5702000
|
unkown
|
page read and write
|
|
|
|
7FF5A81C5000
|
unkown
|
page readonly
|
|
|
|
29DEAFE000
|
unkown
|
page read and write
|
|
|
|
12BA4798000
|
unkown
|
page read and write
|
|
|
|
17D505D6000
|
heap default
|
page read and write
|
|
|
|
20F88FE000
|
unkown
|
page read and write
|
|
|
|
7FF511BD5000
|
unkown
|
page readonly
|
|
|
|
7FF5B1017000
|
unkown
|
page readonly
|
|
|
|
7FF55584A000
|
unkown
|
page readonly
|
|
|
|
12BA27A0000
|
heap private
|
page read and write
|
|
|
|
21C31330000
|
heap default
|
page read and write
|
|
There are 1772 hidden memdumps, click here to show them.