Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
COVID19open_closedPodsVACCINE_LETTER2B.docx
|
Microsoft Word 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2B1065E4-70B6-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{2B1065E6-70B6-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{43C50248-70B6-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\698A8F31.png
|
PNG image data, 293 x 295, 1-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{684EC546-5172-4E4C-A638-EBF4CDF1FB1E}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{9766F8FA-474A-4D26-9B90-1E4FEFAFF644}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{B268D7D1-175E-4774-8B62-5FC8DD9A2BB9}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\400x25officialsite[1].gif
|
GIF image data, version 89a, 400 x 25
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\a-large[1].png
|
PNG image data, 16 x 13, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\arrow_ltblue[1].gif
|
GIF image data, version 89a, 11 x 11
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\background-hi-lite[1].png
|
PNG image data, 34 x 400, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\contribute[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\element_main[1].js
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\emergency[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\flags[1].gif
|
GIF image data, version 89a, 133 x 27
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\flu-fighters[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\googlelogo_color_42x16dp[1].png
|
PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\granite-advantage[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x95, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\icon-twitter-bird[1].gif
|
GIF image data, version 89a, 21 x 20
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mediumA[1].gif
|
GIF image data, version 89a, 16 x 13
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\nheasy-sm[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x57, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans-bold-italic[1].woff
|
Web Open Font Format, TrueType, length 65060, version 1.10
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans-bold[1].woff
|
Web Open Font Format, TrueType, length 70188, version 1.10
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans-italic[1].woff
|
Web Open Font Format, TrueType, length 65184, version 1.10
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans-semibold-italic[1].woff
|
Web Open Font Format, TrueType, length 65888, version 1.10
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans-semibold[1].woff
|
Web Open Font Format, TrueType, length 69884, version 1.10
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans[1].woff
|
Web Open Font Format, TrueType, length 67524, version 1.10
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\print[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\search-btn[1].png
|
PNG image data, 36 x 30, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\the-doorway[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x112, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\trans[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\translate_24dp[1].png
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\translate_24dp[2].png
|
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\YEY3408P.htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\arrow_blue0[1].gif
|
GIF image data, version 89a, 11 x 11
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\arrow_gold0[1].gif
|
GIF image data, version 89a, 11 x 11
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\arrow_green0[1].gif
|
GIF image data, version 89a, 11 x 11
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\button-sysc[1].gif
|
GIF image data, version 89a, 149 x 121
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\carbon-monoxide[1].jpg
|
[TIFF image data, little-endian, direntries=12, height=292, bps=158, PhotometricIntepretation=RGB, orientation=upper-left,
width=600], baseline, precision 8, 515x251, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\coronavirus[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 525x295, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\covid19[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\current-map-small[1].png
|
PNG image data, 296 x 371, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\encodesanscondensed-bold[1].woff
|
Web Open Font Format, TrueType, length 70596, version 0.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\heart-month[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\icon_flash[1].gif
|
GIF image data, version 89a, 16 x 16
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jquery-1.2.6.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jquery.jshowoff.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jshowoff[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\lg-screen[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\mcm-logo[1].jpg
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 150x79, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\menu-triangle[1].png
|
PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\office[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x150,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\print[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\sm-screen[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\state-seal-20perc[1].png
|
PNG image data, 290 x 272, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\trirong-bold-italic[1].woff
|
Web Open Font Format, TrueType, length 104636, version 1.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\trirong-bold[1].woff
|
Web Open Font Format, TrueType, length 92188, version 1.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\trirong-italic[1].woff
|
Web Open Font Format, TrueType, length 97836, version 1.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\trirong-regular[1].woff
|
Web Open Font Format, TrueType, length 91200, version 1.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\xls-icon[1].gif
|
GIF image data, version 89a, 16 x 16
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\1000x100-jpg-header06[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x100, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\button-glencliff[1].gif
|
GIF image data, version 89a, 149 x 121
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\button-nhh[1].gif
|
GIF image data, version 89a, 162 x 127
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\calendar-graphic[1].png
|
PNG image data, 170 x 126, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\covid-19-collage[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1170x283, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\covid19[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\cumulative-map-small[1].png
|
PNG image data, 296 x 371, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ds[1].gif
|
GIF image data, version 89a, 1 x 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\facebook-btn[1].png
|
PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\favicon[1].ico
|
MS Windows icon resource - 2 icons, 16x16, 32x32
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\footer_seal[1].gif
|
GIF image data, version 89a, 25 x 25
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\gcd-seal[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 180x64, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\icon-fb-like[1].gif
|
GIF image data, version 89a, 42 x 20
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\icon-sp[1].gif
|
GIF image data, version 89a, 19 x 29
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\icon_pdf[1].gif
|
GIF image data, version 89a, 16 x 16
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\iconseal[1].gif
|
GIF image data, version 89a, 25 x 25
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\index[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\mental-health[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\pdf-icon[1].gif
|
GIF image data, version 89a, 16 x 16
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\school-safety[1].png
|
PNG image data, 150 x 49, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\seniors[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\smallA[1].gif
|
GIF image data, version 89a, 16 x 13
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\teens[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\textsizer2[1].js
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\textsizer[1].js
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\1095b[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\a-med[1].png
|
PNG image data, 16 x 13, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\a-small[1].png
|
PNG image data, 16 x 13, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\adults[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\base[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\blkbk[1].gif
|
GIF image data, version 89a, 10 x 1500
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bullet02[1].gif
|
GIF image data, version 89a, 10 x 10
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\cms[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\covid-alert[1].png
|
PNG image data, 730 x 50, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\december-hours[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\disabilities[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\families[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\flags-translate-transp[1].png
|
PNG image data, 80 x 21, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\fostercare[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\icon-html5[1].gif
|
GIF image data, version 89a, 14 x 16
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\index[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\largeA[1].gif
|
GIF image data, version 89a, 16 x 13
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\main[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\nh-carepath-logo[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 150x120,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\official-nh[1].png
|
PNG image data, 347 x 31, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\search-icon[1].gif
|
GIF image data, version 89a, 18 x 18
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\trans[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\translateelement[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\twitter-btn[1].png
|
PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\vape[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\women[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF3D4A1489E2E6071E.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFD9E6F99855018120.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFE0551548F1A31EE1.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\COVID19open_closedPodsVACCINE_LETTER2B.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 13:47:09
2020, mtime=Tue Feb 16 23:21:38 2021, atime=Tue Feb 16 23:21:35 2021, length=22673, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
|
Little-endian UTF-16 Unicode text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M3FZ67K18CPBR90X7AEC.temp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$VID19open_closedPodsVACCINE_LETTER2B.docx
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
|
PNG image data, 16 x 16, 4-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{0B411F14-70B5-11EB-ADCF-ECF4BBB5915B}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0B411F16-70B5-11EB-ADCF-ECF4BBB5915B}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{21E37B5F-70B5-11EB-ADCF-ECF4BBB5915B}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\lr5drzg\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\arrow_blue0[1].gif
|
GIF image data, version 89a, 11 x 11
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\arrow_ltblue[1].gif
|
GIF image data, version 89a, 11 x 11
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\button-glencliff[1].gif
|
GIF image data, version 89a, 149 x 121
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\button-nhh[1].gif
|
GIF image data, version 89a, 162 x 127
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\favicon[1].ico
|
MS Windows icon resource - 2 icons, 16x16, 32x32
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\granite-advantage[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x95, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\iconseal[1].gif
|
GIF image data, version 89a, 25 x 25
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\index[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jshowoff[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\largeA[1].gif
|
GIF image data, version 89a, 16 x 13
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\search-icon[1].gif
|
GIF image data, version 89a, 18 x 18
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\seniors[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\the-doorway[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x112, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\translateelement[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\women[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\400x25officialsite[1].gif
|
GIF image data, version 89a, 400 x 25
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\4MUVPDOK.htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\arrow_green0[1].gif
|
GIF image data, version 89a, 11 x 11
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\bullet02[1].gif
|
GIF image data, version 89a, 10 x 10
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\button-sysc[1].gif
|
GIF image data, version 89a, 149 x 121
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\calendar-graphic[1].png
|
PNG image data, 170 x 126, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\carbon-monoxide[1].jpg
|
[TIFF image data, little-endian, direntries=12, height=292, bps=158, PhotometricIntepretation=RGB, orientation=upper-left,
width=600], baseline, precision 8, 515x251, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\covid-alert[1].png
|
PNG image data, 730 x 50, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\disabilities[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\families[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\icon-sp[1].gif
|
GIF image data, version 89a, 19 x 29
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\icon_flash[1].gif
|
GIF image data, version 89a, 16 x 16
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery.jshowoff.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\office[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x150,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\print[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\teens[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\textsizer[1].js
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\1000x100-jpg-header06[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x100, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\adults[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\blkbk[1].gif
|
GIF image data, version 89a, 10 x 1500
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\contribute[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ds[1].gif
|
GIF image data, version 89a, 1 x 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\emergency[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\flags[1].gif
|
GIF image data, version 89a, 133 x 27
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\flu-fighters[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\heart-month[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\icon-fb-like[1].gif
|
GIF image data, version 89a, 42 x 20
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\icon-twitter-bird[1].gif
|
GIF image data, version 89a, 21 x 20
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\icon_pdf[1].gif
|
GIF image data, version 89a, 16 x 16
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\index[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\main[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\mediumA[1].gif
|
GIF image data, version 89a, 16 x 13
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\smallA[1].gif
|
GIF image data, version 89a, 16 x 13
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\urlblockindex[1].bin
|
data
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\1095b[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\arrow_gold0[1].gif
|
GIF image data, version 89a, 11 x 11
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\base[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\coronavirus[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 525x295, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\december-hours[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\element_main[1].js
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\favicon[1].ico
|
PNG image data, 16 x 16, 4-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\fostercare[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\gcd-seal[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 180x64, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\icon-html5[1].gif
|
GIF image data, version 89a, 14 x 16
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery-1.2.6.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\mcm-logo[1].jpg
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 150x79, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\mental-health[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\nh-carepath-logo[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 150x120,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\nheasy-sm[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x57, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\school-safety[1].png
|
PNG image data, 150 x 49, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\trans[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\vape[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\EDE79FE8.png
|
PNG image data, 293 x 295, 1-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{A7F4CFE5-FD14-491B-BD17-FD822CEDA35F}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{AD3EC36A-00F7-42F0-AE81-4807857507A1}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B4CD7B63-97C0-4A14-814E-1968BCE52029}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF18054AB76B5B25D5.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF2979F9B86784BA93.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF901D34AC6B03FD18.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\W8HCR2ZX.txt
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\GBLNFL6087EMVG9NCJ7Z.temp
|
data
|
dropped
|
|
There are 208 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5696 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2420 CREDAT:275457 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://twitter.com/NHPubHealth
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/teens.htm
|
|
||
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/women.htm
|
|
||
|
https://www.dhhs.nh.gov/foryou/seniors.htm
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/disabilities.htm
|
|
||
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://www.nh.gov/policy/accessibility.htm
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/#translateilities.htmt
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/favicon.ico~
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-medium.woff)
|
unknown
|
|
|
|
https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-regular.woff)
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/adults.htmm
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://www.nh.gov/covid19
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/about/index.htmies.htm
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/adults.htm
|
unknown
|
|
|
|
https://dashboard.nh.gov/#/site/DHHS/views/COVID-19LrgMaps/MAPCumulativeLrg.pdf
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://www.servicelink.nh.gov/
|
unknown
|
|
|
|
https://wus2-000.pagecontentsync.
|
unknown
|
|
|
|
https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-bold-italic.woff)
|
unknown
|
|
|
|
https://www.dhhs.nh.gov
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/women.htmmr
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/women.htm
|
unknown
|
|
|
|
https://www.doj.nh.gov/covid-19-scams/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://www.nh.gov
|
unknown
|
|
|
|
https://dashboard.nh.gov/#/site/DHHS/views/COVID19InteractiveMapDashboard/Town-ActiveCases-Data.csv?
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/index.htmjNew
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/families.htm
|
unknown
|
|
|
|
https://www.hhs.gov/sites/default/files/ocr-bulletin-3-28-20.pdf
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/dphs/cdcs/covid19/crisis-soc-medical-ad-comm.htm
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/index.htmilities.htmd
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-bold.woff)
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/#skip/www.dhhs.nh.gov/favicon.ico
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/seniors.htm
|
|
||
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/families.htmx
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://www.who.int/health-topics/coronavirus
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://www.nh.gov/file-format/pdf.htm
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/index.htmilities.htm
|
unknown
|
|
|
|
https://www.nh.gov/index.htm
|
unknown
|
|
|
|
https://www.nh.gov/covid19/resources-guidance/vaccination-planning.htm
|
unknown
|
|
|
|
https://www.dhhs.nh.go
|
unknown
|
|
|
|
http://www.dynamicdrive.com)
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/
|
unknown
|
|
|
|
http://coveringnewhampshire.org/
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/about/index.htm
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
http://txkang.com
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/women.htmm
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://www.nh.gov/covid19/X
|
unknown
|
|
|
|
http://ekallevig.com/jshowoff
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://www.nh.gov/covid19/index.htm
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/index.htm
|
|
||
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://www.nhcarepath.dhhs.nh.gov/
|
unknown
|
|
|
|
https://onedrive.live.com/embed?
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/favicon.ico
|
unknown
|
|
|
|
http://www.broofa.com
|
unknown
|
|
|
|
https://search.nh.gov/dhhs-search.htm
|
unknown
|
|
|
|
https://www.nh.gov/covv/R
|
unknown
|
|
|
|
http://www.ssa.gov/
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/adults.htmmt
|
unknown
|
|
|
|
https://www.nh.gov/covid198This
|
unknown
|
|
|
|
http://www.servicelink.nh.gov/
|
unknown
|
|
|
|
http://www.recovery.gov
|
unknown
|
|
|
|
https://schoolsafetyresources.nh.gov/
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/seniors.htmv
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/#translateilities.htm
|
unknown
|
|
|
|
https://www.nh.gov/cov
|
unknown
|
|
|
|
https://www.nh.gov/disclaimer.html
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/teens.htmm
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/ps://www.dhhs.nh.gov/favicon.ico
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/#translate
|
unknown
|
|
|
|
https://www.stablenh.com/
|
unknown
|
|
|
|
https://www.nh.gov/covid19://www.dhhs.nh.gov/favicon.ico
|
unknown
|
|
|
|
https://www.servicelink.nh.gov/locator/index.htm
|
unknown
|
|
|
|
https://www.servicelink.nh.gov
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/#translate
|
|
||
|
https://www.dhhs.nh.gov/R
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/#skip
|
unknown
|
|
|
|
https://www.nh.gov/covid19R
|
unknown
|
|
|
|
http://thedoorway.nh.gov/
|
unknown
|
|
|
|
https://business.nh.gov/Sign_Up/cal.asp?w=grid&y=7
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/about/index.htmies.htmp
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/#skipj
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/jNew
|
unknown
|
|
|
|
https://prd.blogs.nh.gov/dos/hsem/?page_id=11170
|
unknown
|
|
|
|
https://nheasy.nh.gov/dcyf/#/
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/foryou/teens.htmmr
|
unknown
|
|
|
|
https://www.nh.gov/wai/index.html
|
unknown
|
|
|
|
https://www.cms.gov/
|
unknown
|
|
|
|
http://www.dhhs.nh.gov/
|
199.192.8.2
|
|
|
|
https://www.dhhs.nh.gov/foryou/disabilitiesRoot
|
unknown
|
|
|
|
https://www.dhhs.nh.gov/#skip
|
|
||
|
https://www.dhhs.nh.gov/Root
|
unknown
|
|
|
|
https://twitter.com/NHDHHSPIO
|
unknown
|
|
There are 129 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
www.dhhs.state.nh.us
|
199.192.8.2
|
|
|
|
www.app-support.nh.gov
|
199.192.8.2
|
|
|
|
www.nh.gov
|
199.192.8.2
|
|
|
|
www.dhhs.nh.gov
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
unknown
|
|
|
|
199.192.8.2
|
unknown
|
United States
|
unknown
|
|
|
|
192.168.2.22
|
unknown
|
unknown
|
unknown
|
|
|
|
192.168.2.255
|
unknown
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
wk:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
xk:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
,m:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
qq:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
1AFD3
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Options Version
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Data
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Data
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Cambria Math
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Segoe UI
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
247BE
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
File Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Datetime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Position
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
VisiFlm
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AutoGrammar
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AutosaveInterval
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
PreferredView
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
WORDFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
247BE
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Position
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Settings
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{2B1065E4-70B6-11EB-90E5-ECF4BB570DC9}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
MFV
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
w*7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
`+7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
7-7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ECABE
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Arial Unicode MS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Batang
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@BatangChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@DFKai-SB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Dotum
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@DotumChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@FangSong
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Gulim
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@GulimChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Gungsuh
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@GungsuhChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@KaiTi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Malgun Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Meiryo
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Meiryo UI
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Microsoft JhengHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Microsoft YaHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU_HKSCS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU_HKSCS-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS Mincho
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS PGothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS PMincho
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS UI Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@NSimSun
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@PMingLiU
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@PMingLiU-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@SimHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@SimSun
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@SimSun-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Agency FB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Aharoni
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Algerian
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Andalus
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Angsana New
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
AngsanaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Aparajita
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arabic Typesetting
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Black
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Narrow
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Rounded MT Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Unicode MS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Baskerville Old Face
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Batang
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
BatangChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bauhaus 93
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bell MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Berlin Sans FB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Berlin Sans FB Demi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bernard MT Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Blackadder ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT Black
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT Poster Compressed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Book Antiqua
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bookman Old Style
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bookshelf Symbol 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bradley Hand ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Britannic Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Broadway
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Browallia New
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
BrowalliaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Brush Script MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Calibri
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Calibri Light
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Californian FB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Calisto MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cambria
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cambria Math
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Candara
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Castellar
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Centaur
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Century
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Century Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Century Schoolbook
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Chiller
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Colonna MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Comic Sans MS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Consolas
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Constantia
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cooper Black
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Copperplate Gothic Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Copperplate Gothic Light
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Corbel
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cordia New
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
CordiaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Courier New
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Curlz MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DaunPenh
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
David
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DFKai-SB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DilleniaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DokChampa
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Dotum
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DotumChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Ebrima
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Edwardian Script ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Elephant
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Engravers MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Bold ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Demi ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Light ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Medium ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Estrangelo Edessa
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
EucrosiaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Euphemia
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
FangSong
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Felix Titling
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Footlight MT Light
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Forte
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Book
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Demi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Demi Cond
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Heavy
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Medium
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Medium Cond
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
FrankRuehl
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
FreesiaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Freestyle Script
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
French Script MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gabriola
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Garamond
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gautami
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Georgia
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gigi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans MT Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans MT Ext Condensed Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans Ultra Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans Ultra Bold Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gisha
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gloucester MT Extra Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Goudy Old Style
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Goudy Stout
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gulim
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
GulimChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gungsuh
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
GungsuhChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Haettenschweiler
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Harlow Solid Italic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Harrington
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
High Tower Text
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Impact
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Imprint MT Shadow
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Informal Roman
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
IrisUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Iskoola Pota
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
JasmineUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Jokerman
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Juice ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
KaiTi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kalinga
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kartika
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Khmer UI
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
KodchiangUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kokila
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kristen ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kunstler Script
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lao UI
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Latha
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Leelawadee
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Levenim MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
LilyUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Bright
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Calligraphy
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Console
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Fax
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Handwriting
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Sans
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Sans Typewriter
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Sans Unicode
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Magneto
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Maiandra GD
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Malgun Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Mangal
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Marlett
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Matura MT Script Capitals
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Meiryo
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Meiryo UI
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Himalaya
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft JhengHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft New Tai Lue
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft PhagsPa
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Sans Serif
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Tai Le
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Uighur
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft YaHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Yi Baiti
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU_HKSCS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU_HKSCS-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Miriam
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Miriam Fixed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Mistral
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Modern No. 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Mongolian Baiti
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Monotype Corsiva
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MoolBoran
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Mincho
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Outlook
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS PGothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS PMincho
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Reference Sans Serif
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Reference Specialty
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS UI Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MT Extra
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MV Boli
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Narkisim
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Niagara Engraved
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Niagara Solid
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NSimSun
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Nyala
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
OCR A Extended
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Old English Text MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Onyx
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Palace Script MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Palatino Linotype
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Papyrus
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Parchment
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Perpetua
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Perpetua Titling MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Plantagenet Cherokee
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Playbill
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
PMingLiU
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
PMingLiU-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Poor Richard
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Pristina
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Raavi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rage Italic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Ravie
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rockwell
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rockwell Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rockwell Extra Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rod
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Sakkal Majalla
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Script MT Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe Print
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe Script
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI Light
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI Semibold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI Symbol
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Shonar Bangla
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Showcard Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Shruti
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SimHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Simplified Arabic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Simplified Arabic Fixed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SimSun
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SimSun-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Snap ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Stencil
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Sylfaen
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Symbol
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tahoma
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tempus Sans ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Times New Roman
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Traditional Arabic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Trebuchet MS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tunga
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tw Cen MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tw Cen MT Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tw Cen MT Condensed Extra Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Utsaah
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vani
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Verdana
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vijaya
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Viner Hand ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vivaldi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vladimir Script
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vrinda
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Webdings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wide Latin
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wingdings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wingdings 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wingdings 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
F40E7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
WORDFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
F40E7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Settings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ZoomApp
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MTTF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MTTA
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
{0B411F14-70B5-11EB-ADCF-ECF4BBB5915B}
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
ChangeNotice
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
NextCheckForUpdateLowDateTime
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
NextCheckForUpdateHighDateTime
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
NextCheckForUpdateLowDateTime
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
NextCheckForUpdateHighDateTime
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
NavTimeArray
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
SavedLegacySettings
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
There are 470 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2C5FDF9000
|
unkown
|
page read and write
|
|
|
|
2240ED00000
|
unkown
|
page readonly
|
|
|
|
7FF55ADF7000
|
unkown
|
page readonly
|
|
|
|
7FF533D8F000
|
unkown
|
page readonly
|
|
|
|
165E14E0000
|
unkown
|
page readonly
|
|
|
|
7FF5CE9E4000
|
unkown
|
page readonly
|
|
|
|
1D466C60000
|
unkown
|
page readonly
|
|
|
|
7FF56087E000
|
unkown
|
page readonly
|
|
|
|
1A3B5FF0000
|
unkown
|
page read and write
|
|
|
|
7FF5602D4000
|
unkown
|
page readonly
|
|
|
|
1531C7B000
|
unkown
|
page read and write
|
|
|
|
25C44E8B000
|
unkown
|
page read and write
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
21DDECF0000
|
unkown
|
page write copy
|
|
|
|
7FF533A97000
|
unkown
|
page readonly
|
|
|
|
165E1FEE000
|
unkown
|
page read and write
|
|
|
|
25C45F00000
|
unkown
|
page readonly
|
|
|
|
165E1F69000
|
unkown
|
page read and write
|
|
|
|
2240EA80000
|
heap private
|
page read and write
|
|
|
|
7FF4F979C000
|
unkown
|
page readonly
|
|
|
|
25C45000000
|
unkown
|
page readonly
|
|
|
|
1621604F000
|
unkown
|
page read and write
|
|
|
|
7FF53C3C4000
|
unkown
|
page readonly
|
|
|
|
7FF511CD9000
|
unkown
|
page readonly
|
|
|
|
25B1B262000
|
unkown
|
page read and write
|
|
|
|
7FF53D62B000
|
unkown
|
page readonly
|
|
|
|
7FF5562DE000
|
unkown
|
page readonly
|
|
|
|
207E4C10000
|
unkown
|
page readonly
|
|
|
|
7FF582C4F000
|
unkown
|
page readonly
|
|
|
|
7FF4F9472000
|
unkown
|
page readonly
|
|
|
|
7FF560630000
|
unkown
|
page readonly
|
|
|
|
7FF582A7E000
|
unkown
|
page readonly
|
|
|
|
7FF5D7174000
|
unkown
|
page readonly
|
|
|
|
7FF53D5C3000
|
unkown
|
page readonly
|
|
|
|
7FF4F96C7000
|
unkown
|
page readonly
|
|
|
|
1673FBE0000
|
unkown
|
page readonly
|
|
|
|
7FF5CEAFB000
|
unkown
|
page readonly
|
|
|
|
1A3B6078000
|
unkown
|
page read and write
|
|
|
|
25C4A661000
|
unkown
|
page read and write
|
|
|
|
1673FCC4000
|
unkown
|
page read and write
|
|
|
|
56626FA000
|
unkown
|
page read and write
|
|
|
|
F1F4CFF000
|
unkown
|
page read and write
|
|
|
|
7FF4F97A8000
|
unkown
|
page readonly
|
|
|
|
165E2402000
|
unkown
|
page read and write
|
|
|
|
18BC0447000
|
unkown
|
page read and write
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
207E4E3A000
|
unkown
|
page read and write
|
|
|
|
7FF53BF93000
|
unkown
|
page readonly
|
|
|
|
7FF53C3AB000
|
unkown
|
page readonly
|
|
|
|
7FF5609DA000
|
unkown
|
page readonly
|
|
|
|
25C4A590000
|
unkown
|
page read and write
|
|
|
|
165E1FF9000
|
unkown
|
page read and write
|
|
|
|
165E1613000
|
unkown
|
page read and write
|
|
|
|
165E1F71000
|
unkown
|
page read and write
|
|
|
|
7FF533D56000
|
unkown
|
page readonly
|
|
|
|
F7914FD000
|
unkown
|
page read and write
|
|
|
|
165E1F3B000
|
unkown
|
page read and write
|
|
|
|
16741AD0000
|
unkown
|
page read and write
|
|
|
|
165E1FA5000
|
unkown
|
page read and write
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
2202E83F000
|
unkown
|
page read and write
|
|
|
|
E8144FF000
|
unkown
|
page read and write
|
|
|
|
7FF511CEA000
|
unkown
|
page readonly
|
|
|
|
16215E90000
|
heap default
|
page read and write
|
|
|
|
7FF5AFCCA000
|
unkown
|
page readonly
|
|
|
|
7FF511CCD000
|
unkown
|
page readonly
|
|
|
|
25C45718000
|
unkown
|
page read and write
|
|
|
|
7FF533D8B000
|
unkown
|
page readonly
|
|
|
|
7FF5DA6B5000
|
unkown
|
page readonly
|
|
|
|
25C4A503000
|
unkown
|
page readonly
|
|
|
|
7FF53C2F0000
|
unkown
|
page readonly
|
|
|
|
15311FB000
|
unkown
|
page read and write
|
|
|
|
7FF542A3F000
|
unkown
|
page readonly
|
|
|
|
7FF58FFAE000
|
unkown
|
page readonly
|
|
|
|
1A3B609B000
|
unkown
|
page read and write
|
|
|
|
7FF5CE91D000
|
unkown
|
page readonly
|
|
|
|
18BC0461000
|
unkown
|
page read and write
|
|
|
|
18BC0432000
|
unkown
|
page read and write
|
|
|
|
1A3B6060000
|
heap default
|
page read and write
|
|
|
|
7FF5AFB1D000
|
unkown
|
page readonly
|
|
|
|
7FF51B2B3000
|
unkown
|
page readonly
|
|
|
|
207E4BEE000
|
unkown
|
page read and write
|
|
|
|
C2617E000
|
unkown
|
page read and write
|
|
|
|
7FF53938F000
|
unkown
|
page readonly
|
|
|
|
7FF51B0C9000
|
unkown
|
page readonly
|
|
|
|
25C4A460000
|
unkown
|
page read and write
|
|
|
|
7FF5CA16B000
|
unkown
|
page readonly
|
|
|
|
7FF58FFBD000
|
unkown
|
page readonly
|
|
|
|
25C4A500000
|
unkown
|
page read and write
|
|
|
|
165E1F50000
|
unkown
|
page read and write
|
|
|
|
207E5010000
|
unkown
|
page read and write
|
|
|
|
7FF511D5F000
|
unkown
|
page readonly
|
|
|
|
7FF58FEF9000
|
unkown
|
page readonly
|
|
|
|
7FF55643A000
|
unkown
|
page readonly
|
|
|
|
165E1F38000
|
unkown
|
page read and write
|
|
|
|
7FF5560DA000
|
unkown
|
page readonly
|
|
|
|
7FF54284D000
|
unkown
|
page readonly
|
|
|
|
E8149FE000
|
unkown
|
page read and write
|
|
|
|
165E1F4D000
|
unkown
|
page read and write
|
|
|
|
7FF5564AF000
|
unkown
|
page readonly
|
|
|
|
7FF53936D000
|
unkown
|
page readonly
|
|
|
|
7FF53934F000
|
unkown
|
page readonly
|
|
|
|
7FF55AFFC000
|
unkown
|
page readonly
|
|
|
|
7FF533B24000
|
unkown
|
page readonly
|
|
|
|
7FF58FEF5000
|
unkown
|
page readonly
|
|
|
|
207E2D83000
|
unkown
|
page read and write
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
96AE79000
|
unkown
|
page read and write
|
|
|
|
165E1F54000
|
unkown
|
page read and write
|
|
|
|
207E2D64000
|
unkown
|
page read and write
|
|
|
|
207E2CEE000
|
unkown
|
page read and write
|
|
|
|
7FF55AFF8000
|
unkown
|
page readonly
|
|
|
|
165E16DF000
|
unkown
|
page read and write
|
|
|
|
7FF55B01D000
|
unkown
|
page readonly
|
|
|
|
165E1F54000
|
unkown
|
page read and write
|
|
|
|
7FF560781000
|
unkown
|
page readonly
|
|
|
|
23D2F26A000
|
unkown
|
page read and write
|
|
|
|
7FF5BCE65000
|
unkown
|
page readonly
|
|
|
|
7FF5AFCD0000
|
unkown
|
page readonly
|
|
|
|
25C4A870000
|
unkown
|
page readonly
|
|
|
|
1C164E13000
|
unkown
|
page read and write
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
7FF542A06000
|
unkown
|
page readonly
|
|
|
|
7FF55B0CD000
|
unkown
|
page readonly
|
|
|
|
7FF51B3CE000
|
unkown
|
page readonly
|
|
|
|
7942FF000
|
unkown
|
page read and write
|
|
|
|
25B1B860000
|
unkown
|
page readonly
|
|
|
|
5662879000
|
unkown
|
page read and write
|
|
|
|
165E1F5F000
|
unkown
|
page read and write
|
|
|
|
F1F4F7C000
|
unkown
|
page read and write
|
|
|
|
25B1B268000
|
unkown
|
page read and write
|
|
|
|
793B9E000
|
unkown
|
page read and write
|
|
|
|
1EB504B9000
|
unkown
|
page read and write
|
|
|
|
18BC0429000
|
unkown
|
page read and write
|
|
|
|
165E1F22000
|
unkown
|
page read and write
|
|
|
|
7FF533896000
|
unkown
|
page readonly
|
|
|
|
7FF511878000
|
unkown
|
page readonly
|
|
|
|
7FF55AF6E000
|
unkown
|
page readonly
|
|
|
|
25C45460000
|
unkown
|
page readonly
|
|
|
|
7FF5BD555000
|
unkown
|
page readonly
|
|
|
|
7FF4F95B1000
|
unkown
|
page readonly
|
|
|
|
7FF511D6B000
|
unkown
|
page readonly
|
|
|
|
23D2F0C0000
|
heap private
|
page read and write
|
|
|
|
25B1B270000
|
unkown
|
page read and write
|
|
|
|
7FF533CDA000
|
unkown
|
page readonly
|
|
|
|
7FF5DA75D000
|
unkown
|
page readonly
|
|
|
|
E8141FF000
|
unkown
|
page read and write
|
|
|
|
7FF533D74000
|
unkown
|
page readonly
|
|
|
|
7FF53BFBD000
|
unkown
|
page readonly
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
7FF4F97D3000
|
unkown
|
page readonly
|
|
|
|
7FF5429F8000
|
unkown
|
page readonly
|
|
|
|
7FF5560D2000
|
unkown
|
page readonly
|
|
|
|
207E4B56000
|
unkown
|
page read and write
|
|
|
|
7FF5CEAED000
|
unkown
|
page readonly
|
|
|
|
153217B000
|
unkown
|
page read and write
|
|
|
|
EA37EFF000
|
unkown
|
page read and write
|
|
|
|
25C45D30000
|
unkown
|
page read and write
|
|
|
|
23D2F26A000
|
unkown
|
page read and write
|
|
|
|
9554275000
|
unkown
|
page read and write
|
|
|
|
7FF4F9764000
|
unkown
|
page readonly
|
|
|
|
7FF542935000
|
unkown
|
page readonly
|
|
|
|
7FF5AFDF0000
|
unkown
|
page readonly
|
|
|
|
7FF53D578000
|
unkown
|
page readonly
|
|
|
|
7FF58FEA3000
|
unkown
|
page readonly
|
|
|
|
96A9CB000
|
unkown
|
page read and write
|
|
|
|
1EB50320000
|
heap private
|
page read and write
|
|
|
|
25C4A580000
|
unkown
|
page read and write
|
|
|
|
7FF511C93000
|
unkown
|
page readonly
|
|
|
|
25B1B24F000
|
unkown
|
page read and write
|
|
|
|
7FF533BDF000
|
unkown
|
page readonly
|
|
|
|
7FF5BD563000
|
unkown
|
page readonly
|
|
|
|
25C4A450000
|
unkown
|
page read and write
|
|
|
|
7FF5AFE1F000
|
unkown
|
page readonly
|
|
|
|
793FFE000
|
unkown
|
page read and write
|
|
|
|
7FF5D70BD000
|
unkown
|
page readonly
|
|
|
|
7FF5CA0B5000
|
unkown
|
page readonly
|
|
|
|
1EB50D00000
|
unkown
|
page read and write
|
|
|
|
25C4A560000
|
unkown
|
page read and write
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
207E46A0000
|
unkown
|
page readonly
|
|
|
|
1A3B611C000
|
unkown
|
page read and write
|
|
|
|
7FF5609BD000
|
unkown
|
page readonly
|
|
|
|
2240EADB000
|
heap default
|
page read and write
|
|
|
|
7FF533B43000
|
unkown
|
page readonly
|
|
|
|
165E1F37000
|
unkown
|
page read and write
|
|
|
|
7FF51B3C3000
|
unkown
|
page readonly
|
|
|
|
2240EA60000
|
unkown
|
page readonly
|
|
|
|
7FF51B455000
|
unkown
|
page readonly
|
|
|
|
7FF511D66000
|
unkown
|
page readonly
|
|
|
|
7FF5560A3000
|
unkown
|
page readonly
|
|
|
|
16741E00000
|
unkown
|
page readonly
|
|
|
|
7FF53D58D000
|
unkown
|
page readonly
|
|
|
|
9B87DF7000
|
unkown
|
page read and write
|
|
|
|
7FF5829B5000
|
unkown
|
page readonly
|
|
|
|
1E0BC66F000
|
unkown
|
page read and write
|
|
|
|
7FF58FC68000
|
unkown
|
page readonly
|
|
|
|
165E1F50000
|
unkown
|
page read and write
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
1C164F02000
|
unkown
|
page read and write
|
|
|
|
9B87A7E000
|
unkown
|
page read and write
|
|
|
|
1A3B609B000
|
unkown
|
page read and write
|
|
|
|
7FF542983000
|
unkown
|
page readonly
|
|
|
|
95543FE000
|
unkown
|
page read and write
|
|
|
|
3E3D3FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D9FBE000
|
unkown
|
page readonly
|
|
|
|
7FF5CE9BD000
|
unkown
|
page readonly
|
|
|
|
1A3B6037000
|
heap default
|
page read and write
|
|
|
|
1A3B6092000
|
unkown
|
page read and write
|
|
|
|
7FF4F9874000
|
unkown
|
page readonly
|
|
|
|
1A3B6B3B000
|
unkown
|
page read and write
|
|
|
|
7FF533B2D000
|
unkown
|
page readonly
|
|
|
|
26D67A70000
|
unkown
|
page read and write
|
|
|
|
7FF533C64000
|
unkown
|
page readonly
|
|
|
|
165E1713000
|
unkown
|
page read and write
|
|
|
|
25C45F10000
|
unkown
|
page readonly
|
|
|
|
207E4E3A000
|
unkown
|
page read and write
|
|
|
|
7FF58FFBF000
|
unkown
|
page readonly
|
|
|
|
7FF53D22F000
|
unkown
|
page readonly
|
|
|
|
7FF542A0B000
|
unkown
|
page readonly
|
|
|
|
25C4A890000
|
unkown
|
page readonly
|
|
|
|
165E16AA000
|
unkown
|
page read and write
|
|
|
|
7FF538F7D000
|
unkown
|
page readonly
|
|
|
|
18BC0471000
|
unkown
|
page read and write
|
|
|
|
21DDF000000
|
unkown
|
page readonly
|
|
|
|
23D2F272000
|
unkown
|
page read and write
|
|
|
|
165E1F36000
|
unkown
|
page read and write
|
|
|
|
88898F8000
|
unkown
|
page read and write
|
|
|
|
207E2B70000
|
unkown
|
page readonly
|
|
|
|
7FF5D70F3000
|
unkown
|
page readonly
|
|
|
|
16216660000
|
unkown
|
page readonly
|
|
|
|
1A3B609C000
|
unkown
|
page read and write
|
|
|
|
7FF56099C000
|
unkown
|
page readonly
|
|
|
|
7FF55B029000
|
unkown
|
page readonly
|
|
|
|
7FF51B474000
|
unkown
|
page readonly
|
|
|
|
165E1F49000
|
unkown
|
page read and write
|
|
|
|
7FF53C157000
|
unkown
|
page readonly
|
|
|
|
1A3B60FD000
|
unkown
|
page read and write
|
|
|
|
1A3B60A8000
|
unkown
|
page read and write
|
|
|
|
165E1F6F000
|
unkown
|
page read and write
|
|
|
|
165E1FF6000
|
unkown
|
page read and write
|
|
|
|
96AEFE000
|
unkown
|
page read and write
|
|
|
|
7FF582997000
|
unkown
|
page readonly
|
|
|
|
165E1F4B000
|
unkown
|
page read and write
|
|
|
|
7FF5564DB000
|
unkown
|
page readonly
|
|
|
|
25B1BC00000
|
unkown
|
page readonly
|
|
|
|
16216100000
|
unkown
|
page read and write
|
|
|
|
7FF55B0B6000
|
unkown
|
page readonly
|
|
|
|
21DDEE43000
|
unkown
|
page read and write
|
|
|
|
7FF4F987E000
|
unkown
|
page readonly
|
|
|
|
165E1CE0000
|
unkown
|
page readonly
|
|
|
|
7FF5BCE67000
|
unkown
|
page readonly
|
|
|
|
1C164BB0000
|
heap private
|
page read and write
|
|
|
|
7FF53D242000
|
unkown
|
page readonly
|
|
|
|
25C4A2A0000
|
unkown
|
page read and write
|
|
|
|
7FF51B5B8000
|
unkown
|
page readonly
|
|
|
|
165E16A6000
|
unkown
|
page read and write
|
|
|
|
7FF5CA164000
|
unkown
|
page readonly
|
|
|
|
25C45530000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA73000
|
unkown
|
page readonly
|
|
|
|
165E1F6F000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA53000
|
unkown
|
page readonly
|
|
|
|
7FF54298A000
|
unkown
|
page readonly
|
|
|
|
165E1FF4000
|
unkown
|
page read and write
|
|
|
|
7FF53C39F000
|
unkown
|
page readonly
|
|
|
|
793E7B000
|
unkown
|
page read and write
|
|
|
|
1A3B6B34000
|
unkown
|
page read and write
|
|
|
|
26D67D20000
|
unkown
|
page readonly
|
|
|
|
7FF511D8E000
|
unkown
|
page readonly
|
|
|
|
355CBFE000
|
unkown
|
page read and write
|
|
|
|
7FF5AFD13000
|
unkown
|
page readonly
|
|
|
|
165E1F16000
|
unkown
|
page read and write
|
|
|
|
7FF5D6E0E000
|
unkown
|
page readonly
|
|
|
|
1C164E00000
|
unkown
|
page read and write
|
|
|
|
18BC047A000
|
unkown
|
page read and write
|
|
|
|
165E1FE9000
|
unkown
|
page read and write
|
|
|
|
566267A000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA49000
|
unkown
|
page readonly
|
|
|
|
1A3B6DD0000
|
unkown
|
page read and write
|
|
|
|
2C5F975000
|
unkown
|
page read and write
|
|
|
|
153187B000
|
unkown
|
page read and write
|
|
|
|
207E4B58000
|
unkown
|
page read and write
|
|
|
|
7FF5DA74B000
|
unkown
|
page readonly
|
|
|
|
7FF582BC5000
|
unkown
|
page readonly
|
|
|
|
7FF53C3BD000
|
unkown
|
page readonly
|
|
|
|
7FF58FF0A000
|
unkown
|
page readonly
|
|
|
|
7FF582C60000
|
unkown
|
page readonly
|
|
|
|
7FF58FFBF000
|
unkown
|
page readonly
|
|
|
|
7FF533AB1000
|
unkown
|
page readonly
|
|
|
|
7FF53D570000
|
unkown
|
page readonly
|
|
|
|
165E1F4B000
|
unkown
|
page read and write
|
|
|
|
25C45702000
|
unkown
|
page read and write
|
|
|
|
7FF542947000
|
unkown
|
page readonly
|
|
|
|
8889AF9000
|
unkown
|
page read and write
|
|
|
|
25B1B262000
|
unkown
|
page read and write
|
|
|
|
7FF53D65B000
|
unkown
|
page readonly
|
|
|
|
15315FB000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
7FF5D70C5000
|
unkown
|
page readonly
|
|
|
|
88894AB000
|
unkown
|
page read and write
|
|
|
|
1A3B6B3D000
|
unkown
|
page read and write
|
|
|
|
165E15B0000
|
unkown
|
page readonly
|
|
|
|
25C45D20000
|
unkown
|
page read and write
|
|
|
|
7FF53D5A3000
|
unkown
|
page readonly
|
|
|
|
7FF5D6925000
|
unkown
|
page readonly
|
|
|
|
165E1FE8000
|
unkown
|
page read and write
|
|
|
|
7FF560634000
|
unkown
|
page readonly
|
|
|
|
7FF53D213000
|
unkown
|
page readonly
|
|
|
|
7FF5CEA20000
|
unkown
|
page readonly
|
|
|
|
1673FCE7000
|
unkown
|
page read and write
|
|
|
|
25C4A649000
|
unkown
|
page read and write
|
|
|
|
15320FB000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
2202E802000
|
unkown
|
page read and write
|
|
|
|
25C4A6B1000
|
unkown
|
page read and write
|
|
|
|
7FF4F9375000
|
unkown
|
page readonly
|
|
|
|
1673FB10000
|
unkown
|
page readonly
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
165E1FE9000
|
unkown
|
page read and write
|
|
|
|
165E2402000
|
unkown
|
page read and write
|
|
|
|
165E1F44000
|
unkown
|
page read and write
|
|
|
|
7FF5335DA000
|
unkown
|
page readonly
|
|
|
|
25B1BA02000
|
unkown
|
page read and write
|
|
|
|
7D92C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5C9A19000
|
unkown
|
page readonly
|
|
|
|
165E1F4C000
|
unkown
|
page read and write
|
|
|
|
18BC0B40000
|
unkown
|
page read and write
|
|
|
|
7FF511C97000
|
unkown
|
page readonly
|
|
|
|
25B1B255000
|
unkown
|
page read and write
|
|
|
|
16215F80000
|
unkown
|
page readonly
|
|
|
|
1C164E3F000
|
unkown
|
page read and write
|
|
|
|
165E1662000
|
unkown
|
page read and write
|
|
|
|
7FF5427DD000
|
unkown
|
page readonly
|
|
|
|
2DA58064000
|
unkown
|
page read and write
|
|
|
|
1E0BC64F000
|
unkown
|
page read and write
|
|
|
|
165E1F53000
|
unkown
|
page read and write
|
|
|
|
165E2461000
|
unkown
|
page read and write
|
|
|
|
7FF51B5FB000
|
unkown
|
page readonly
|
|
|
|
1E0BC5E0000
|
unkown
|
page read and write
|
|
|
|
2C5F57E000
|
unkown
|
page read and write
|
|
|
|
165E1F58000
|
unkown
|
page read and write
|
|
|
|
7FF4F9740000
|
unkown
|
page readonly
|
|
|
|
7FF533D48000
|
unkown
|
page readonly
|
|
|
|
207E5010000
|
unkown
|
page read and write
|
|
|
|
25C4A63C000
|
unkown
|
page read and write
|
|
|
|
7FF582C8F000
|
unkown
|
page readonly
|
|
|
|
1A3B611C000
|
unkown
|
page read and write
|
|
|
|
165E15D0000
|
unkown
|
page read and write
|
|
|
|
7FF5564CD000
|
unkown
|
page readonly
|
|
|
|
1531BFB000
|
unkown
|
page read and write
|
|
|
|
7FF4F9783000
|
unkown
|
page readonly
|
|
|
|
16216013000
|
unkown
|
page read and write
|
|
|
|
1E0BC708000
|
unkown
|
page read and write
|
|
|
|
207E4B5F000
|
unkown
|
page read and write
|
|
|
|
2A553CF7000
|
unkown
|
page read and write
|
|
|
|
7FF533C87000
|
unkown
|
page readonly
|
|
|
|
7FF542284000
|
unkown
|
page readonly
|
|
|
|
7FF5D716D000
|
unkown
|
page readonly
|
|
|
|
165E164F000
|
unkown
|
page read and write
|
|
|
|
7FF5CE6FA000
|
unkown
|
page readonly
|
|
|
|
18BC0413000
|
unkown
|
page read and write
|
|
|
|
7FF53D50D000
|
unkown
|
page readonly
|
|
|
|
7FF51B5EE000
|
unkown
|
page readonly
|
|
|
|
1A3B60A7000
|
unkown
|
page read and write
|
|
|
|
207E4B92000
|
unkown
|
page read and write
|
|
|
|
207E4C10000
|
unkown
|
page read and write
|
|
|
|
7FF5BD585000
|
unkown
|
page readonly
|
|
|
|
1A3B60A3000
|
unkown
|
page read and write
|
|
|
|
26D67A6A000
|
unkown
|
page read and write
|
|
|
|
1A3B60A3000
|
heap default
|
page read and write
|
|
|
|
7FF542914000
|
unkown
|
page readonly
|
|
|
|
7FF58FECD000
|
unkown
|
page readonly
|
|
|
|
207E2DA6000
|
unkown
|
page read and write
|
|
|
|
7FF55B025000
|
unkown
|
page readonly
|
|
|
|
7FF5D6928000
|
unkown
|
page readonly
|
|
|
|
165E1F39000
|
unkown
|
page read and write
|
|
|
|
7FF53938B000
|
unkown
|
page readonly
|
|
|
|
7FF5BD5D8000
|
unkown
|
page readonly
|
|
|
|
165E1F90000
|
unkown
|
page read and write
|
|
|
|
7FF560A5B000
|
unkown
|
page readonly
|
|
|
|
207E2A50000
|
unkown
|
page readonly
|
|
|
|
7FF533BC7000
|
unkown
|
page readonly
|
|
|
|
165E1653000
|
unkown
|
page read and write
|
|
|
|
207E2D23000
|
unkown
|
page read and write
|
|
|
|
1E0BC700000
|
unkown
|
page read and write
|
|
|
|
1673FC00000
|
unkown
|
page read and write
|
|
|
|
7FF5CE6ED000
|
unkown
|
page readonly
|
|
|
|
7FF55B0A8000
|
unkown
|
page readonly
|
|
|
|
7FF5AFCCD000
|
unkown
|
page readonly
|
|
|
|
23D2F313000
|
unkown
|
page read and write
|
|
|
|
7FF511CB8000
|
unkown
|
page readonly
|
|
|
|
355C59E000
|
unkown
|
page read and write
|
|
|
|
7FF5BD54D000
|
unkown
|
page readonly
|
|
|
|
165E1F41000
|
unkown
|
page read and write
|
|
|
|
23D2F213000
|
unkown
|
page read and write
|
|
|
|
16741D02000
|
unkown
|
page read and write
|
|
|
|
1E0BD140000
|
unkown
|
page readonly
|
|
|
|
7FF542979000
|
unkown
|
page readonly
|
|
|
|
7FF511D05000
|
unkown
|
page readonly
|
|
|
|
16741D00000
|
unkown
|
page read and write
|
|
|
|
1A3B60A7000
|
unkown
|
page read and write
|
|
|
|
7FF5DA6E5000
|
unkown
|
page readonly
|
|
|
|
7FF5DA764000
|
unkown
|
page readonly
|
|
|
|
7FF58FF25000
|
unkown
|
page readonly
|
|
|
|
2202E750000
|
unkown
|
page write copy
|
|
|
|
21DDEF13000
|
unkown
|
page read and write
|
|
|
|
207E4E3A000
|
unkown
|
page read and write
|
|
|
|
207E45A0000
|
unkown
|
page read and write
|
|
|
|
16741D13000
|
unkown
|
page read and write
|
|
|
|
2C5F9FE000
|
unkown
|
page read and write
|
|
|
|
7FF5608A3000
|
unkown
|
page readonly
|
|
|
|
1531CFB000
|
unkown
|
page read and write
|
|
|
|
7D9307F000
|
unkown
|
page read and write
|
|
|
|
7FF55AEAC000
|
unkown
|
page readonly
|
|
|
|
7FF539287000
|
unkown
|
page readonly
|
|
|
|
1EB504C0000
|
unkown
|
page read and write
|
|
|
|
1A3B60E6000
|
unkown
|
page read and write
|
|
|
|
7FF4F985B000
|
unkown
|
page readonly
|
|
|
|
1A3B611C000
|
unkown
|
page read and write
|
|
|
|
165E1F47000
|
unkown
|
page read and write
|
|
|
|
165E1FE8000
|
unkown
|
page read and write
|
|
|
|
165E1FF9000
|
unkown
|
page read and write
|
|
|
|
7FF55B0DE000
|
unkown
|
page readonly
|
|
|
|
7FF58FF78000
|
unkown
|
page readonly
|
|
|
|
207E4B35000
|
unkown
|
page read and write
|
|
|
|
9B877EB000
|
unkown
|
page read and write
|
|
|
|
3E3D27F000
|
unkown
|
page read and write
|
|
|
|
7FF5335DF000
|
unkown
|
page readonly
|
|
|
|
7FF5392FD000
|
unkown
|
page readonly
|
|
|
|
165E16A0000
|
unkown
|
page read and write
|
|
|
|
2A553CD6000
|
heap default
|
page read and write
|
|
|
|
7FF533CC9000
|
unkown
|
page readonly
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
165E1F37000
|
unkown
|
page read and write
|
|
|
|
1D46661F000
|
unkown
|
page read and write
|
|
|
|
26D67A68000
|
unkown
|
page read and write
|
|
|
|
9B87AFE000
|
unkown
|
page read and write
|
|
|
|
165E16BE000
|
unkown
|
page read and write
|
|
|
|
7FF5BD559000
|
unkown
|
page readonly
|
|
|
|
3E3CF9F000
|
unkown
|
page read and write
|
|
|
|
7FF53C28D000
|
unkown
|
page readonly
|
|
|
|
16215F90000
|
unkown
|
page read and write
|
|
|
|
7FF55AFD2000
|
unkown
|
page readonly
|
|
|
|
1A3B60D1000
|
unkown
|
page read and write
|
|
|
|
21DE08A0000
|
unkown
|
page readonly
|
|
|
|
C2667D000
|
unkown
|
page read and write
|
|
|
|
207E6082000
|
unkown
|
page read and write
|
|
|
|
1EB504E3000
|
unkown
|
page read and write
|
|
|
|
23D2F202000
|
unkown
|
page read and write
|
|
|
|
165E1F35000
|
unkown
|
page read and write
|
|
|
|
7FF5CEAF4000
|
unkown
|
page readonly
|
|
|
|
7941FE000
|
unkown
|
page read and write
|
|
|
|
7FF560A6D000
|
unkown
|
page readonly
|
|
|
|
25C45F30000
|
unkown
|
page readonly
|
|
|
|
7FF54278A000
|
unkown
|
page readonly
|
|
|
|
1D467000000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
7FF53C297000
|
unkown
|
page readonly
|
|
|
|
25C4A534000
|
unkown
|
page write copy
|
|
|
|
7FF55AE8D000
|
unkown
|
page readonly
|
|
|
|
2A553DC0000
|
unkown
|
page read and write
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
7FF560714000
|
unkown
|
page readonly
|
|
|
|
7FF5C9F0A000
|
unkown
|
page readonly
|
|
|
|
165E1F00000
|
unkown
|
page read and write
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
165E1FFA000
|
unkown
|
page read and write
|
|
|
|
18BC0460000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
E8147FF000
|
unkown
|
page read and write
|
|
|
|
7FF53922F000
|
unkown
|
page readonly
|
|
|
|
7FF5BD5EB000
|
unkown
|
page readonly
|
|
|
|
1EB5046D000
|
unkown
|
page read and write
|
|
|
|
7FF556267000
|
unkown
|
page readonly
|
|
|
|
165E1F47000
|
unkown
|
page read and write
|
|
|
|
7FF53343A000
|
unkown
|
page readonly
|
|
|
|
7FF542A24000
|
unkown
|
page readonly
|
|
|
|
7FF5CEA45000
|
unkown
|
page readonly
|
|
|
|
207E2C8C000
|
unkown
|
page read and write
|
|
|
|
7FF4F973A000
|
unkown
|
page readonly
|
|
|
|
1A3B60A3000
|
unkown
|
page read and write
|
|
|
|
26D67A00000
|
unkown
|
page read and write
|
|
|
|
7FF533CC5000
|
unkown
|
page readonly
|
|
|
|
7FF533933000
|
unkown
|
page readonly
|
|
|
|
18BC0600000
|
unkown
|
page readonly
|
|
|
|
7FF533567000
|
unkown
|
page readonly
|
|
|
|
7FF53935B000
|
unkown
|
page readonly
|
|
|
|
7FF4F9860000
|
unkown
|
page readonly
|
|
|
|
26D67A68000
|
unkown
|
page read and write
|
|
|
|
7FF582B97000
|
unkown
|
page readonly
|
|
|
|
207E2D45000
|
unkown
|
page read and write
|
|
|
|
7FF5392F3000
|
unkown
|
page readonly
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
21DDEE00000
|
unkown
|
page read and write
|
|
|
|
7FF5564B6000
|
unkown
|
page readonly
|
|
|
|
7FF5BD517000
|
unkown
|
page readonly
|
|
|
|
207E4B68000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
7FF55AEB6000
|
unkown
|
page readonly
|
|
|
|
207E5210000
|
unkown
|
page read and write
|
|
|
|
7FF533B48000
|
unkown
|
page readonly
|
|
|
|
1673FB00000
|
heap default
|
page read and write
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
56627FA000
|
unkown
|
page read and write
|
|
|
|
25C45700000
|
unkown
|
page read and write
|
|
|
|
96AC7F000
|
unkown
|
page read and write
|
|
|
|
165E1F8A000
|
unkown
|
page read and write
|
|
|
|
1C164E54000
|
unkown
|
page read and write
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
1A3B608D000
|
unkown
|
page read and write
|
|
|
|
165E1D10000
|
unkown
|
page readonly
|
|
|
|
7FF53390A000
|
unkown
|
page readonly
|
|
|
|
1673FC3F000
|
unkown
|
page read and write
|
|
|
|
3E3D37A000
|
unkown
|
page read and write
|
|
|
|
7FF5DA54E000
|
unkown
|
page readonly
|
|
|
|
1A3B60A1000
|
unkown
|
page read and write
|
|
|
|
153167A000
|
unkown
|
page read and write
|
|
|
|
2202E813000
|
unkown
|
page read and write
|
|
|
|
7FF5DA5F4000
|
unkown
|
page readonly
|
|
|
|
26D67B13000
|
unkown
|
page read and write
|
|
|
|
7FF55AFC4000
|
unkown
|
page readonly
|
|
|
|
7FF5CE9C0000
|
unkown
|
page readonly
|
|
|
|
C6FDF7C000
|
unkown
|
page read and write
|
|
|
|
25C44F02000
|
unkown
|
page read and write
|
|
|
|
7FF53C3DF000
|
unkown
|
page readonly
|
|
|
|
7FF5424EF000
|
unkown
|
page readonly
|
|
|
|
207E4ED1000
|
unkown
|
page read and write
|
|
|
|
1531D7B000
|
unkown
|
page read and write
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
1A3B609B000
|
unkown
|
page read and write
|
|
|
|
16216000000
|
unkown
|
page read and write
|
|
|
|
165E1F3A000
|
unkown
|
page read and write
|
|
|
|
2DA58065000
|
unkown
|
page read and write
|
|
|
|
18BC046B000
|
unkown
|
page read and write
|
|
|
|
207E2C3F000
|
unkown
|
page read and write
|
|
|
|
165E1F6A000
|
unkown
|
page read and write
|
|
|
|
7FF582BA0000
|
unkown
|
page readonly
|
|
|
|
167415F0000
|
unkown
|
page read and write
|
|
|
|
7FF511B3D000
|
unkown
|
page readonly
|
|
|
|
7FF5D7160000
|
unkown
|
page readonly
|
|
|
|
165E1F36000
|
unkown
|
page read and write
|
|
|
|
7FF560940000
|
unkown
|
page readonly
|
|
|
|
1530E7B000
|
unkown
|
page read and write
|
|
|
|
1D4668D0000
|
unkown
|
page readonly
|
|
|
|
2202E800000
|
unkown
|
page read and write
|
|
|
|
23D2F272000
|
unkown
|
page read and write
|
|
|
|
165E1FE8000
|
unkown
|
page read and write
|
|
|
|
1A3B6B39000
|
unkown
|
page read and write
|
|
|
|
7FF5564EB000
|
unkown
|
page readonly
|
|
|
|
7FF5DA5D5000
|
unkown
|
page readonly
|
|
|
|
165E1F44000
|
unkown
|
page read and write
|
|
|
|
25C4A6A7000
|
unkown
|
page read and write
|
|
|
|
7FF51B3EE000
|
unkown
|
page readonly
|
|
|
|
7FF556433000
|
unkown
|
page readonly
|
|
|
|
23D30C00000
|
unkown
|
page read and write
|
|
|
|
18BC043D000
|
unkown
|
page read and write
|
|
|
|
7FF58287A000
|
unkown
|
page readonly
|
|
|
|
7FF542718000
|
unkown
|
page readonly
|
|
|
|
7FF51B5E4000
|
unkown
|
page readonly
|
|
|
|
7FF5CE6C3000
|
unkown
|
page readonly
|
|
|
|
7FF5561F7000
|
unkown
|
page readonly
|
|
|
|
7FF5AFDEB000
|
unkown
|
page readonly
|
|
|
|
165E1FE9000
|
unkown
|
page read and write
|
|
|
|
7FF54294C000
|
unkown
|
page readonly
|
|
|
|
2240EAA0000
|
heap default
|
page read and write
|
|
|
|
7FF55ADED000
|
unkown
|
page readonly
|
|
|
|
165E1F47000
|
unkown
|
page read and write
|
|
|
|
23D2F270000
|
unkown
|
page read and write
|
|
|
|
7D923BB000
|
unkown
|
page read and write
|
|
|
|
7FF560568000
|
unkown
|
page readonly
|
|
|
|
7FF5BD5E6000
|
unkown
|
page readonly
|
|
|
|
7FF582B3D000
|
unkown
|
page readonly
|
|
|
|
9C4177C000
|
unkown
|
page read and write
|
|
|
|
7FF560718000
|
unkown
|
page readonly
|
|
|
|
1673FE00000
|
unkown
|
page write copy
|
|
|
|
7FF5AFD27000
|
unkown
|
page readonly
|
|
|
|
7FF533A1A000
|
unkown
|
page readonly
|
|
|
|
15316FA000
|
unkown
|
page read and write
|
|
|
|
2240E8F0000
|
unkown
|
page readonly
|
|
|
|
23D2F26A000
|
unkown
|
page read and write
|
|
|
|
165E2000000
|
unkown
|
page readonly
|
|
|
|
1D466540000
|
unkown
|
page readonly
|
|
|
|
7FF5AF9C4000
|
unkown
|
page readonly
|
|
|
|
7FF51B467000
|
unkown
|
page readonly
|
|
|
|
7FF55B0ED000
|
unkown
|
page readonly
|
|
|
|
7FF5AFD63000
|
unkown
|
page readonly
|
|
|
|
EA37F79000
|
unkown
|
page read and write
|
|
|
|
7FF53D5AA000
|
unkown
|
page readonly
|
|
|
|
7FF51159D000
|
unkown
|
page readonly
|
|
|
|
7FF53C0E7000
|
unkown
|
page readonly
|
|
|
|
7FF53C30D000
|
unkown
|
page readonly
|
|
|
|
2DA57F10000
|
unkown
|
page readonly
|
|
|
|
1A3B6089000
|
unkown
|
page read and write
|
|
|
|
207E2C53000
|
unkown
|
page read and write
|
|
|
|
165E1F4E000
|
unkown
|
page read and write
|
|
|
|
7FF51B5BF000
|
unkown
|
page readonly
|
|
|
|
165E1F36000
|
unkown
|
page read and write
|
|
|
|
7FF5AF9FD000
|
unkown
|
page readonly
|
|
|
|
165E1F50000
|
unkown
|
page read and write
|
|
|
|
1D466658000
|
unkown
|
page read and write
|
|
|
|
7FF560783000
|
unkown
|
page readonly
|
|
|
|
25C4A60F000
|
unkown
|
page read and write
|
|
|
|
2DA5805A000
|
unkown
|
page read and write
|
|
|
|
25C4A600000
|
unkown
|
page read and write
|
|
|
|
8889E7F000
|
unkown
|
page read and write
|
|
|
|
7FF53D65F000
|
unkown
|
page readonly
|
|
|
|
7FF5AFD17000
|
unkown
|
page readonly
|
|
|
|
23D2F120000
|
heap default
|
page read and write
|
|
|
|
7FF5CE817000
|
unkown
|
page readonly
|
|
|
|
7FF560A7E000
|
unkown
|
page readonly
|
|
|
|
7FF5BDE2E000
|
unkown
|
page readonly
|
|
|
|
2DA58590000
|
unkown
|
page read and write
|
|
|
|
165E1F75000
|
unkown
|
page read and write
|
|
|
|
21DDEC20000
|
unkown
|
page readonly
|
|
|
|
25C4A8B0000
|
unkown
|
page readonly
|
|
|
|
25B1B313000
|
unkown
|
page read and write
|
|
|
|
165E1F43000
|
unkown
|
page read and write
|
|
|
|
7FF5C97CD000
|
unkown
|
page readonly
|
|
|
|
7FF55B0BB000
|
unkown
|
page readonly
|
|
|
|
25C4A430000
|
unkown
|
page read and write
|
|
|
|
7FF53356A000
|
unkown
|
page readonly
|
|
|
|
7FF51B507000
|
unkown
|
page readonly
|
|
|
|
1D466590000
|
unkown
|
page read and write
|
|
|
|
25C44E57000
|
unkown
|
page read and write
|
|
|
|
793B1E000
|
unkown
|
page read and write
|
|
|
|
25C44D70000
|
heap private
|
page read and write
|
|
|
|
207E4E73000
|
unkown
|
page read and write
|
|
|
|
7FF533A7A000
|
unkown
|
page readonly
|
|
|
|
7FF511BEF000
|
unkown
|
page readonly
|
|
|
|
207E6000000
|
unkown
|
page read and write
|
|
|
|
7FF511D84000
|
unkown
|
page readonly
|
|
|
|
7FF4F97BD000
|
unkown
|
page readonly
|
|
|
|
7FF5CA16E000
|
unkown
|
page readonly
|
|
|
|
1A3B6000000
|
unkown
|
page read and write
|
|
|
|
165E1F35000
|
unkown
|
page read and write
|
|
|
|
207E2D1E000
|
unkown
|
page read and write
|
|
|
|
2DA58013000
|
unkown
|
page read and write
|
|
|
|
165E1F46000
|
unkown
|
page read and write
|
|
|
|
7FF5564D4000
|
unkown
|
page readonly
|
|
|
|
2A553CE9000
|
unkown
|
page read and write
|
|
|
|
7FF53923A000
|
unkown
|
page readonly
|
|
|
|
25B1B200000
|
unkown
|
page read and write
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
165E1CF0000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA1C000
|
unkown
|
page readonly
|
|
|
|
2DA58113000
|
unkown
|
page read and write
|
|
|
|
2202EA00000
|
unkown
|
page readonly
|
|
|
|
18BC0B30000
|
unkown
|
page readonly
|
|
|
|
165E1F87000
|
unkown
|
page read and write
|
|
|
|
7FF58FEED000
|
unkown
|
page readonly
|
|
|
|
2240ECF5000
|
heap private
|
page read and write
|
|
|
|
1E0BC613000
|
unkown
|
page read and write
|
|
|
|
7FF53C3DF000
|
unkown
|
page readonly
|
|
|
|
7FF5AFE04000
|
unkown
|
page readonly
|
|
|
|
5C05ADB000
|
unkown
|
page read and write
|
|
|
|
7FF5AFB45000
|
unkown
|
page readonly
|
|
|
|
165E1F71000
|
unkown
|
page read and write
|
|
|
|
7D92D7C000
|
unkown
|
page read and write
|
|
|
|
1D466530000
|
heap default
|
page read and write
|
|
|
|
18BC046A000
|
unkown
|
page read and write
|
|
|
|
566277E000
|
unkown
|
page read and write
|
|
|
|
7FF53D23D000
|
unkown
|
page readonly
|
|
|
|
7FF556408000
|
unkown
|
page readonly
|
|
|
|
18BC046D000
|
unkown
|
page read and write
|
|
|
|
25C45F40000
|
unkown
|
page readonly
|
|
|
|
96AD7E000
|
unkown
|
page read and write
|
|
|
|
7FF58FF8B000
|
unkown
|
page readonly
|
|
|
|
165E1F4C000
|
unkown
|
page read and write
|
|
|
|
23D2F26A000
|
unkown
|
page read and write
|
|
|
|
7FF58FFAB000
|
unkown
|
page readonly
|
|
|
|
1A3B5E20000
|
unkown
|
page read and write
|
|
|
|
7FF55B0EF000
|
unkown
|
page readonly
|
|
|
|
21DDEE56000
|
unkown
|
page read and write
|
|
|
|
7FF5AF9D3000
|
unkown
|
page readonly
|
|
|
|
7FF56078D000
|
unkown
|
page readonly
|
|
|
|
165E1FFE000
|
unkown
|
page read and write
|
|
|
|
7FF4F9768000
|
unkown
|
page readonly
|
|
|
|
1A3B60BC000
|
unkown
|
page read and write
|
|
|
|
165E164D000
|
unkown
|
page read and write
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
207E2C90000
|
unkown
|
page read and write
|
|
|
|
7FF560987000
|
unkown
|
page readonly
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
207E4E00000
|
unkown
|
page read and write
|
|
|
|
7FF5CA08C000
|
unkown
|
page readonly
|
|
|
|
18BC0502000
|
unkown
|
page read and write
|
|
|
|
7FF4F97DA000
|
unkown
|
page readonly
|
|
|
|
7FF5CA13F000
|
unkown
|
page readonly
|
|
|
|
7FF560843000
|
unkown
|
page readonly
|
|
|
|
7FF5CA14B000
|
unkown
|
page readonly
|
|
|
|
25C4A6B2000
|
unkown
|
page read and write
|
|
|
|
7FF51B44F000
|
unkown
|
page readonly
|
|
|
|
2A553F80000
|
unkown
|
page readonly
|
|
|
|
16741A50000
|
unkown
|
page read and write
|
|
|
|
7FF560225000
|
unkown
|
page readonly
|
|
|
|
7FF5CE80D000
|
unkown
|
page readonly
|
|
|
|
F79147E000
|
unkown
|
page read and write
|
|
|
|
25C44DF0000
|
unkown
|
page readonly
|
|
|
|
1A3B5FF0000
|
unkown
|
page read and write
|
|
|
|
1EB50600000
|
unkown
|
page readonly
|
|
|
|
15318FA000
|
unkown
|
page read and write
|
|
|
|
1531A7A000
|
unkown
|
page read and write
|
|
|
|
7FF5CA146000
|
unkown
|
page readonly
|
|
|
|
7FF539360000
|
unkown
|
page readonly
|
|
|
|
207E4B45000
|
unkown
|
page read and write
|
|
|
|
1EB50502000
|
unkown
|
page read and write
|
|
|
|
1D466550000
|
unkown
|
page readonly
|
|
|
|
165E1FEA000
|
unkown
|
page read and write
|
|
|
|
25C4A43E000
|
unkown
|
page read and write
|
|
|
|
207E4B97000
|
unkown
|
page read and write
|
|
|
|
7FF55B03A000
|
unkown
|
page readonly
|
|
|
|
7FF560559000
|
unkown
|
page readonly
|
|
|
|
165E1D00000
|
unkown
|
page read and write
|
|
|
|
7FF5609C9000
|
unkown
|
page readonly
|
|
|
|
955407B000
|
unkown
|
page read and write
|
|
|
|
7FF5392C5000
|
unkown
|
page readonly
|
|
|
|
C2637D000
|
unkown
|
page read and write
|
|
|
|
23D2F450000
|
unkown
|
page readonly
|
|
|
|
7FF5DA6B9000
|
unkown
|
page readonly
|
|
|
|
165E1FE8000
|
unkown
|
page read and write
|
|
|
|
25B1B120000
|
unkown
|
page readonly
|
|
|
|
7FF4F984F000
|
unkown
|
page readonly
|
|
|
|
16215E30000
|
heap private
|
page read and write
|
|
|
|
153147B000
|
unkown
|
page read and write
|
|
|
|
7FF53D24A000
|
unkown
|
page readonly
|
|
|
|
C6FDCFF000
|
unkown
|
page read and write
|
|
|
|
25B1B213000
|
unkown
|
page read and write
|
|
|
|
5C05F79000
|
unkown
|
page read and write
|
|
|
|
7FF560A8F000
|
unkown
|
page readonly
|
|
|
|
7FF5D70DA000
|
unkown
|
page readonly
|
|
|
|
1A3B5FA0000
|
unkown
|
page readonly
|
|
|
|
7FF5DA687000
|
unkown
|
page readonly
|
|
|
|
165E1FEA000
|
unkown
|
page read and write
|
|
|
|
7FF5AFE1B000
|
unkown
|
page readonly
|
|
|
|
25C44E75000
|
unkown
|
page read and write
|
|
|
|
7FF53C3CE000
|
unkown
|
page readonly
|
|
|
|
7FF511C14000
|
unkown
|
page readonly
|
|
|
|
25C4A540000
|
unkown
|
page read and write
|
|
|
|
7FF5AFB97000
|
unkown
|
page readonly
|
|
|
|
207E2BC0000
|
unkown
|
page readonly
|
|
|
|
7FF53D367000
|
unkown
|
page readonly
|
|
|
|
25C45EF0000
|
unkown
|
page readonly
|
|
|
|
1EB503B0000
|
unkown
|
page read and write
|
|
|
|
2240EA50000
|
unkown
|
page readonly
|
|
|
|
7FF56070E000
|
unkown
|
page readonly
|
|
|
|
23D2F300000
|
unkown
|
page read and write
|
|
|
|
25B1B870000
|
unkown
|
page read and write
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
25C44E8D000
|
unkown
|
page read and write
|
|
|
|
C2627E000
|
unkown
|
page read and write
|
|
|
|
7FF5609D3000
|
unkown
|
page readonly
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
207E5010000
|
unkown
|
page read and write
|
|
|
|
7FF556429000
|
unkown
|
page readonly
|
|
|
|
165E1F71000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
7FF51B543000
|
unkown
|
page readonly
|
|
|
|
207E4C10000
|
unkown
|
page read and write
|
|
|
|
25B1B229000
|
unkown
|
page read and write
|
|
|
|
7FF533A8D000
|
unkown
|
page readonly
|
|
|
|
7FF5D717B000
|
unkown
|
page readonly
|
|
|
|
7FF55B055000
|
unkown
|
page readonly
|
|
|
|
26D67A29000
|
unkown
|
page read and write
|
|
|
|
165E1FA4000
|
unkown
|
page read and write
|
|
|
|
E8142FC000
|
unkown
|
page read and write
|
|
|
|
25C45615000
|
unkown
|
page read and write
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
566230F000
|
unkown
|
page read and write
|
|
|
|
25C4A655000
|
unkown
|
page read and write
|
|
|
|
9B87FFF000
|
unkown
|
page read and write
|
|
|
|
7FF5CA17F000
|
unkown
|
page readonly
|
|
|
|
207E4BB0000
|
unkown
|
page read and write
|
|
|
|
165E14D0000
|
heap default
|
page read and write
|
|
|
|
1A3B60A8000
|
unkown
|
page read and write
|
|
|
|
21DDEE13000
|
unkown
|
page read and write
|
|
|
|
7FF58FF9D000
|
unkown
|
page readonly
|
|
|
|
7FF560A74000
|
unkown
|
page readonly
|
|
|
|
955417D000
|
unkown
|
page read and write
|
|
|
|
7FF4F988F000
|
unkown
|
page readonly
|
|
|
|
7FF5AFA0A000
|
unkown
|
page readonly
|
|
|
|
224109F0000
|
heap private
|
page read and write
|
|
|
|
7FF53D65F000
|
unkown
|
page readonly
|
|
|
|
1673FCBE000
|
unkown
|
page read and write
|
|
|
|
7FF582B64000
|
unkown
|
page readonly
|
|
|
|
1C164E29000
|
unkown
|
page read and write
|
|
|
|
2202E829000
|
unkown
|
page read and write
|
|
|
|
207E5010000
|
unkown
|
page read and write
|
|
|
|
7FF53391F000
|
unkown
|
page readonly
|
|
|
|
1531179000
|
unkown
|
page read and write
|
|
|
|
207E2D64000
|
unkown
|
page read and write
|
|
|
|
165E16E8000
|
unkown
|
page read and write
|
|
|
|
2240EA70000
|
unkown
|
page readonly
|
|
|
|
1D466624000
|
unkown
|
page read and write
|
|
|
|
165E1F38000
|
unkown
|
page read and write
|
|
|
|
2DA58800000
|
unkown
|
page readonly
|
|
|
|
7FF5D7156000
|
unkown
|
page readonly
|
|
|
|
1EB50486000
|
unkown
|
page read and write
|
|
|
|
7FF58FEC7000
|
unkown
|
page readonly
|
|
|
|
207E4B62000
|
unkown
|
page read and write
|
|
|
|
2C6007E000
|
unkown
|
page read and write
|
|
|
|
18BC0457000
|
unkown
|
page read and write
|
|
|
|
F79137A000
|
unkown
|
page read and write
|
|
|
|
23D2F130000
|
unkown
|
page readonly
|
|
|
|
23D2F257000
|
unkown
|
page read and write
|
|
|
|
1EB5043D000
|
unkown
|
page read and write
|
|
|
|
7FF55AFDC000
|
unkown
|
page readonly
|
|
|
|
165E1F21000
|
unkown
|
page read and write
|
|
|
|
165E1F75000
|
unkown
|
page read and write
|
|
|
|
207E2A40000
|
heap default
|
page read and write
|
|
|
|
7FF538F86000
|
unkown
|
page readonly
|
|
|
|
7FF53BFAF000
|
unkown
|
page readonly
|
|
|
|
1673FC13000
|
unkown
|
page read and write
|
|
|
|
7FF560228000
|
unkown
|
page readonly
|
|
|
|
2A553E20000
|
unkown
|
page readonly
|
|
|
|
7FF5DA77F000
|
unkown
|
page readonly
|
|
|
|
7FF5D9FC4000
|
unkown
|
page readonly
|
|
|
|
18BC045A000
|
unkown
|
page read and write
|
|
|
|
355C87E000
|
unkown
|
page read and write
|
|
|
|
1A3B60A7000
|
unkown
|
page read and write
|
|
|
|
7FF5609C5000
|
unkown
|
page readonly
|
|
|
|
207E5010000
|
unkown
|
page read and write
|
|
|
|
18BC047E000
|
unkown
|
page read and write
|
|
|
|
7FF53383F000
|
unkown
|
page readonly
|
|
|
|
C263FE000
|
unkown
|
page read and write
|
|
|
|
7FF533CF5000
|
unkown
|
page readonly
|
|
|
|
2DA58602000
|
unkown
|
page read and write
|
|
|
|
1A3B6030000
|
heap default
|
page read and write
|
|
|
|
EA37E7F000
|
unkown
|
page read and write
|
|
|
|
1EB50B30000
|
unkown
|
page write copy
|
|
|
|
F1F4EFE000
|
unkown
|
page read and write
|
|
|
|
15319FD000
|
unkown
|
page read and write
|
|
|
|
16216055000
|
unkown
|
page read and write
|
|
|
|
7FF5609A8000
|
unkown
|
page readonly
|
|
|
|
1C1667A0000
|
unkown
|
page read and write
|
|
|
|
7FF51B413000
|
unkown
|
page readonly
|
|
|
|
7FF56053F000
|
unkown
|
page readonly
|
|
|
|
1673FC8A000
|
unkown
|
page read and write
|
|
|
|
566228B000
|
unkown
|
page read and write
|
|
|
|
7FF53D517000
|
unkown
|
page readonly
|
|
|
|
7FF5AFDE6000
|
unkown
|
page readonly
|
|
|
|
7FF5AFD6A000
|
unkown
|
page readonly
|
|
|
|
165E16EB000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCBF000
|
unkown
|
page readonly
|
|
|
|
165E1F33000
|
unkown
|
page read and write
|
|
|
|
25C44E29000
|
unkown
|
page read and write
|
|
|
|
1A3B6020000
|
unkown
|
page read and write
|
|
|
|
165E1FE9000
|
unkown
|
page read and write
|
|
|
|
7FF5CE887000
|
unkown
|
page readonly
|
|
|
|
2C5F4FB000
|
unkown
|
page read and write
|
|
|
|
7FF51B4F3000
|
unkown
|
page readonly
|
|
|
|
2A553CF0000
|
unkown
|
page read and write
|
|
|
|
2A553CE8000
|
unkown
|
page read and write
|
|
|
|
16742010000
|
unkown
|
page read and write
|
|
|
|
7FF560A4F000
|
unkown
|
page readonly
|
|
|
|
7FF5CA15D000
|
unkown
|
page readonly
|
|
|
|
7FF5563F7000
|
unkown
|
page readonly
|
|
|
|
25C4A320000
|
unkown
|
page read and write
|
|
|
|
16741A60000
|
unkown
|
page readonly
|
|
|
|
165E1F5C000
|
unkown
|
page read and write
|
|
|
|
7FF5CEACF000
|
unkown
|
page readonly
|
|
|
|
7FF58FF86000
|
unkown
|
page readonly
|
|
|
|
26D67A68000
|
unkown
|
page read and write
|
|
|
|
23D2F229000
|
unkown
|
page read and write
|
|
|
|
7FF5560BF000
|
unkown
|
page readonly
|
|
|
|
16741AE0000
|
unkown
|
page readonly
|
|
|
|
5C05FFE000
|
unkown
|
page read and write
|
|
|
|
7FF582C7E000
|
unkown
|
page readonly
|
|
|
|
165E16B1000
|
unkown
|
page read and write
|
|
|
|
7FF582BDA000
|
unkown
|
page readonly
|
|
|
|
25C45901000
|
unkown
|
page read and write
|
|
|
|
25C4A290000
|
unkown
|
page read and write
|
|
|
|
7FF5605C1000
|
unkown
|
page readonly
|
|
|
|
7FF5564EF000
|
unkown
|
page readonly
|
|
|
|
7FF511869000
|
unkown
|
page readonly
|
|
|
|
25C44DE0000
|
unkown
|
page readonly
|
|
|
|
2A553CF0000
|
unkown
|
page read and write
|
|
|
|
165E1F49000
|
unkown
|
page read and write
|
|
|
|
7FF58FE90000
|
unkown
|
page readonly
|
|
|
|
7FF5D70D3000
|
unkown
|
page readonly
|
|
|
|
1531DFB000
|
unkown
|
page read and write
|
|
|
|
21DDEBB0000
|
heap private
|
page read and write
|
|
|
|
7FF538B66000
|
unkown
|
page readonly
|
|
|
|
25C4A800000
|
unkown
|
page readonly
|
|
|
|
1673FC54000
|
unkown
|
page read and write
|
|
|
|
165E1F35000
|
unkown
|
page read and write
|
|
|
|
F790FCB000
|
unkown
|
page read and write
|
|
|
|
165E1FFD000
|
unkown
|
page read and write
|
|
|
|
7FF5AFE1F000
|
unkown
|
page readonly
|
|
|
|
7FF53C3A6000
|
unkown
|
page readonly
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
7FF4F9797000
|
unkown
|
page readonly
|
|
|
|
16215F70000
|
unkown
|
page readonly
|
|
|
|
165E1CD0000
|
unkown
|
page readonly
|
|
|
|
7FF5BD60E000
|
unkown
|
page readonly
|
|
|
|
18BC0464000
|
unkown
|
page read and write
|
|
|
|
7FF53D56C000
|
unkown
|
page readonly
|
|
|
|
1E0BC3B0000
|
heap private
|
page read and write
|
|
|
|
165E1655000
|
unkown
|
page read and write
|
|
|
|
7FF511CD5000
|
unkown
|
page readonly
|
|
|
|
2DA57E40000
|
unkown
|
page readonly
|
|
|
|
7FF5CA17F000
|
unkown
|
page readonly
|
|
|
|
F1F4C7A000
|
unkown
|
page read and write
|
|
|
|
207E4E53000
|
unkown
|
page read and write
|
|
|
|
7FF5DA73F000
|
unkown
|
page readonly
|
|
|
|
207E4B59000
|
unkown
|
page read and write
|
|
|
|
153197B000
|
unkown
|
page read and write
|
|
|
|
7FF5CA0AD000
|
unkown
|
page readonly
|
|
|
|
C264FD000
|
unkown
|
page read and write
|
|
|
|
7FF582C56000
|
unkown
|
page readonly
|
|
|
|
1A3B6310000
|
unkown
|
page read and write
|
|
|
|
7FF5DA249000
|
unkown
|
page readonly
|
|
|
|
23D2F272000
|
unkown
|
page read and write
|
|
|
|
5C06079000
|
unkown
|
page read and write
|
|
|
|
167416F0000
|
unkown
|
page readonly
|
|
|
|
7FF56093D000
|
unkown
|
page readonly
|
|
|
|
165E2454000
|
unkown
|
page read and write
|
|
|
|
7FF53C290000
|
unkown
|
page readonly
|
|
|
|
1D466702000
|
unkown
|
page read and write
|
|
|
|
8889F7F000
|
unkown
|
page read and write
|
|
|
|
7FF533904000
|
unkown
|
page readonly
|
|
|
|
165E1FEA000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8CF000
|
unkown
|
page readonly
|
|
|
|
7FF582843000
|
unkown
|
page readonly
|
|
|
|
207E2CCB000
|
unkown
|
page read and write
|
|
|
|
7FF511D7D000
|
unkown
|
page readonly
|
|
|
|
165E1FFD000
|
unkown
|
page read and write
|
|
|
|
18BC0484000
|
unkown
|
page read and write
|
|
|
|
165E163C000
|
unkown
|
page read and write
|
|
|
|
1E0BC63C000
|
unkown
|
page read and write
|
|
|
|
165E1FE9000
|
unkown
|
page read and write
|
|
|
|
16741AD0000
|
unkown
|
page read and write
|
|
|
|
7FF51B5CB000
|
unkown
|
page readonly
|
|
|
|
207E2C00000
|
unkown
|
page read and write
|
|
|
|
16216802000
|
unkown
|
page read and write
|
|
|
|
7FF53D44E000
|
unkown
|
page readonly
|
|
|
|
165E1F4C000
|
unkown
|
page read and write
|
|
|
|
7FF560A56000
|
unkown
|
page readonly
|
|
|
|
165E16EA000
|
unkown
|
page read and write
|
|
|
|
7FF582BF3000
|
unkown
|
page readonly
|
|
|
|
1673FCCB000
|
unkown
|
page read and write
|
|
|
|
165E16A7000
|
unkown
|
page read and write
|
|
|
|
165E2400000
|
unkown
|
page read and write
|
|
|
|
165E1C80000
|
unkown
|
page write copy
|
|
|
|
1A3B6520000
|
unkown
|
page readonly
|
|
|
|
7FF539348000
|
unkown
|
page readonly
|
|
|
|
7FF556425000
|
unkown
|
page readonly
|
|
|
|
2240E9C0000
|
unkown
|
page read and write
|
|
|
|
1673FAA0000
|
heap private
|
page read and write
|
|
|
|
25C45713000
|
unkown
|
page read and write
|
|
|
|
7FF5CA0B9000
|
unkown
|
page readonly
|
|
|
|
18BC0477000
|
unkown
|
page read and write
|
|
|
|
7FF511D9F000
|
unkown
|
page readonly
|
|
|
|
2A553BF0000
|
unkown
|
page readonly
|
|
|
|
7FF5DA77B000
|
unkown
|
page readonly
|
|
|
|
7FF542A3D000
|
unkown
|
page readonly
|
|
|
|
16741AC0000
|
unkown
|
page readonly
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
7FF5563A0000
|
unkown
|
page readonly
|
|
|
|
165E1F7C000
|
unkown
|
page read and write
|
|
|
|
26D695C0000
|
unkown
|
page readonly
|
|
|
|
1A3B60A3000
|
unkown
|
page read and write
|
|
|
|
26D67A6A000
|
unkown
|
page read and write
|
|
|
|
207E4E15000
|
unkown
|
page read and write
|
|
|
|
165E1F1E000
|
unkown
|
page read and write
|
|
|
|
18BC0C02000
|
unkown
|
page read and write
|
|
|
|
7FF4F972F000
|
unkown
|
page readonly
|
|
|
|
207E2BB0000
|
unkown
|
page read and write
|
|
|
|
1A3B6305000
|
heap private
|
page read and write
|
|
|
|
25C45D23000
|
unkown
|
page read and write
|
|
|
|
7FF542856000
|
unkown
|
page readonly
|
|
|
|
7FF511CE3000
|
unkown
|
page readonly
|
|
|
|
26D67A54000
|
unkown
|
page read and write
|
|
|
|
7FF5BDE2E000
|
unkown
|
page readonly
|
|
|
|
1EB50429000
|
unkown
|
page read and write
|
|
|
|
165E1FEA000
|
unkown
|
page read and write
|
|
|
|
18BC045E000
|
unkown
|
page read and write
|
|
|
|
18BC045C000
|
unkown
|
page read and write
|
|
|
|
26D67A68000
|
unkown
|
page read and write
|
|
|
|
165E1FF9000
|
unkown
|
page read and write
|
|
|
|
7FF5D70C9000
|
unkown
|
page readonly
|
|
|
|
7FF560904000
|
unkown
|
page readonly
|
|
|
|
7FF53C343000
|
unkown
|
page readonly
|
|
|
|
207E2D2A000
|
unkown
|
page read and write
|
|
|
|
1E0BC800000
|
unkown
|
page readonly
|
|
|
|
165E1F34000
|
unkown
|
page read and write
|
|
|
|
1A3B6DD0000
|
unkown
|
page read and write
|
|
|
|
26D67A69000
|
unkown
|
page read and write
|
|
|
|
1EB50400000
|
unkown
|
page read and write
|
|
|
|
7FF5563C4000
|
unkown
|
page readonly
|
|
|
|
207E2C13000
|
unkown
|
page read and write
|
|
|
|
18BC0472000
|
unkown
|
page read and write
|
|
|
|
207E4E3E000
|
unkown
|
page read and write
|
|
|
|
9C415FD000
|
unkown
|
page read and write
|
|
|
|
2A553F70000
|
heap private
|
page read and write
|
|
|
|
7FF5DA593000
|
unkown
|
page readonly
|
|
|
|
207E4E3E000
|
unkown
|
page read and write
|
|
|
|
207E4B13000
|
unkown
|
page read and write
|
|
|
|
207E2DB7000
|
unkown
|
page read and write
|
|
|
|
7FF58FF90000
|
unkown
|
page readonly
|
|
|
|
7FF53D63D000
|
unkown
|
page readonly
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
7FF5CA0E5000
|
unkown
|
page readonly
|
|
|
|
7FF55AEBF000
|
unkown
|
page readonly
|
|
|
|
165E1F71000
|
unkown
|
page read and write
|
|
|
|
2202E7A0000
|
unkown
|
page readonly
|
|
|
|
23D2F26A000
|
unkown
|
page read and write
|
|
|
|
7FF5CE835000
|
unkown
|
page readonly
|
|
|
|
7FF533D7E000
|
unkown
|
page readonly
|
|
|
|
7FF511D9F000
|
unkown
|
page readonly
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
EA37CFE000
|
unkown
|
page read and write
|
|
|
|
26D67CD0000
|
unkown
|
page write copy
|
|
|
|
26D67A68000
|
unkown
|
page read and write
|
|
|
|
7FF53C1CE000
|
unkown
|
page readonly
|
|
|
|
7FF5CEAD6000
|
unkown
|
page readonly
|
|
|
|
25C4A438000
|
unkown
|
page read and write
|
|
|
|
1A3B60A3000
|
unkown
|
page read and write
|
|
|
|
1D4664D0000
|
heap private
|
page read and write
|
|
|
|
1A3B6D90000
|
unkown
|
page read and write
|
|
|
|
7FF53C3DB000
|
unkown
|
page readonly
|
|
|
|
1EB506D0000
|
unkown
|
page readonly
|
|
|
|
207E2C80000
|
unkown
|
page read and write
|
|
|
|
7FF533C7C000
|
unkown
|
page readonly
|
|
|
|
165E1F44000
|
unkown
|
page read and write
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
9B87EFF000
|
unkown
|
page read and write
|
|
|
|
E8146FE000
|
unkown
|
page read and write
|
|
|
|
E814AFF000
|
unkown
|
page read and write
|
|
|
|
1A3B6B34000
|
unkown
|
page read and write
|
|
|
|
7FF53C398000
|
unkown
|
page readonly
|
|
|
|
207E4B21000
|
unkown
|
page read and write
|
|
|
|
1EB504CA000
|
unkown
|
page read and write
|
|
|
|
1A3B6B39000
|
unkown
|
page read and write
|
|
|
|
7FF4F969D000
|
unkown
|
page readonly
|
|
|
|
7FF4F97C9000
|
unkown
|
page readonly
|
|
|
|
18BC0400000
|
unkown
|
page read and write
|
|
|
|
165E1F71000
|
unkown
|
page read and write
|
|
|
|
7FF511CA7000
|
unkown
|
page readonly
|
|
|
|
207E5310000
|
unkown
|
page read and write
|
|
|
|
7FF53D385000
|
unkown
|
page readonly
|
|
|
|
7FF582BA8000
|
unkown
|
page readonly
|
|
|
|
7FF5561ED000
|
unkown
|
page readonly
|
|
|
|
7FF511CAC000
|
unkown
|
page readonly
|
|
|
|
7FF58FFA4000
|
unkown
|
page readonly
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
18BC046F000
|
unkown
|
page read and write
|
|
|
|
165E1FFA000
|
unkown
|
page read and write
|
|
|
|
207E4B73000
|
unkown
|
page read and write
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
1621606F000
|
unkown
|
page read and write
|
|
|
|
7FF5AFBBD000
|
unkown
|
page readonly
|
|
|
|
F1F4E7A000
|
unkown
|
page read and write
|
|
|
|
7FF5564BB000
|
unkown
|
page readonly
|
|
|
|
7FF4F9772000
|
unkown
|
page readonly
|
|
|
|
165E16C5000
|
unkown
|
page read and write
|
|
|
|
7FF51B39D000
|
unkown
|
page readonly
|
|
|
|
207E2D33000
|
unkown
|
page read and write
|
|
|
|
1EB50390000
|
unkown
|
page readonly
|
|
|
|
165E15C0000
|
unkown
|
page readonly
|
|
|
|
165E1F39000
|
unkown
|
page read and write
|
|
|
|
7FF53C3B0000
|
unkown
|
page readonly
|
|
|
|
7FF58F65F000
|
unkown
|
page readonly
|
|
|
|
1C164D80000
|
unkown
|
page read and write
|
|
|
|
7FF53D64B000
|
unkown
|
page readonly
|
|
|
|
165E1F43000
|
unkown
|
page read and write
|
|
|
|
7FF511597000
|
unkown
|
page readonly
|
|
|
|
7FF5607E0000
|
unkown
|
page readonly
|
|
|
|
1D466590000
|
unkown
|
page read and write
|
|
|
|
7FF5BD52C000
|
unkown
|
page readonly
|
|
|
|
1E0BC420000
|
unkown
|
page readonly
|
|
|
|
7FF55B0DB000
|
unkown
|
page readonly
|
|
|
|
1531FFD000
|
unkown
|
page read and write
|
|
|
|
165E1600000
|
unkown
|
page read and write
|
|
|
|
165E1CF0000
|
unkown
|
page read and write
|
|
|
|
1A3B630C000
|
heap private
|
page read and write
|
|
|
|
165E1F24000
|
unkown
|
page read and write
|
|
|
|
2A553CD6000
|
unkown
|
page read and write
|
|
|
|
25C4A6B1000
|
unkown
|
page read and write
|
|
|
|
165E1F44000
|
unkown
|
page read and write
|
|
|
|
15312FB000
|
unkown
|
page read and write
|
|
|
|
7FF533D8F000
|
unkown
|
page readonly
|
|
|
|
165E1F50000
|
unkown
|
page read and write
|
|
|
|
207E2CC5000
|
unkown
|
page read and write
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCF4000
|
unkown
|
page readonly
|
|
|
|
165E1F21000
|
unkown
|
page read and write
|
|
|
|
18BC0475000
|
unkown
|
page read and write
|
|
|
|
7FF511B63000
|
unkown
|
page readonly
|
|
|
|
7FF5609F5000
|
unkown
|
page readonly
|
|
|
|
165E1CF0000
|
unkown
|
page readonly
|
|
|
|
7FF53C32A000
|
unkown
|
page readonly
|
|
|
|
7FF5AF905000
|
unkown
|
page readonly
|
|
|
|
25C4A50C000
|
unkown
|
page write copy
|
|
|
|
207E4E84000
|
unkown
|
page read and write
|
|
|
|
25C4A570000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
165E1FFF000
|
unkown
|
page read and write
|
|
|
|
7FF5DA77F000
|
unkown
|
page readonly
|
|
|
|
7FF560A8D000
|
unkown
|
page readonly
|
|
|
|
7FF582B9C000
|
unkown
|
page readonly
|
|
|
|
7FF53D567000
|
unkown
|
page readonly
|
|
|
|
7FF55641D000
|
unkown
|
page readonly
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
25C450D0000
|
unkown
|
page readonly
|
|
|
|
7FF5608F7000
|
unkown
|
page readonly
|
|
|
|
165E1F64000
|
unkown
|
page read and write
|
|
|
|
7FF4F958D000
|
unkown
|
page readonly
|
|
|
|
15317FB000
|
unkown
|
page read and write
|
|
|
|
165E1FA6000
|
unkown
|
page read and write
|
|
|
|
7D92F7C000
|
unkown
|
page read and write
|
|
|
|
7FF5564EF000
|
unkown
|
page readonly
|
|
|
|
25C4A430000
|
unkown
|
page read and write
|
|
|
|
7FF5AFB41000
|
unkown
|
page readonly
|
|
|
|
1673FD00000
|
unkown
|
page read and write
|
|
|
|
7FF560743000
|
unkown
|
page readonly
|
|
|
|
2DA57FF0000
|
unkown
|
page readonly
|
|
|
|
2240ECF0000
|
heap private
|
page read and write
|
|
|
|
1EB50D32000
|
unkown
|
page read and write
|
|
|
|
7FF53D644000
|
unkown
|
page readonly
|
|
|
|
7FF4F9747000
|
unkown
|
page readonly
|
|
|
|
18BC047B000
|
unkown
|
page read and write
|
|
|
|
7FF533C50000
|
unkown
|
page readonly
|
|
|
|
7FF5607B3000
|
unkown
|
page readonly
|
|
|
|
21DDED40000
|
unkown
|
page readonly
|
|
|
|
7FF51B5DD000
|
unkown
|
page readonly
|
|
|
|
7FF4F967E000
|
unkown
|
page readonly
|
|
|
|
207E5010000
|
unkown
|
page read and write
|
|
|
|
165E1F45000
|
unkown
|
page read and write
|
|
|
|
56629FF000
|
unkown
|
page read and write
|
|
|
|
165E1FF6000
|
unkown
|
page read and write
|
|
|
|
25C44E70000
|
unkown
|
page read and write
|
|
|
|
2DA58102000
|
unkown
|
page read and write
|
|
|
|
2240F090000
|
unkown
|
page readonly
|
|
|
|
165E1670000
|
unkown
|
page read and write
|
|
|
|
7FF5D718F000
|
unkown
|
page readonly
|
|
|
|
25C4A500000
|
unkown
|
page readonly
|
|
|
|
15321FB000
|
unkown
|
page read and write
|
|
|
|
25C44E9F000
|
unkown
|
page read and write
|
|
|
|
7FF533CA8000
|
unkown
|
page readonly
|
|
|
|
165E1F34000
|
unkown
|
page read and write
|
|
|
|
7FF58FF7F000
|
unkown
|
page readonly
|
|
|
|
224107FF000
|
heap private
|
page read and write
|
|
|
|
7FF53C3CB000
|
unkown
|
page readonly
|
|
|
|
25B1B1F0000
|
unkown
|
page readonly
|
|
|
|
95545FF000
|
unkown
|
page read and write
|
|
|
|
7FF53C315000
|
unkown
|
page readonly
|
|
|
|
7FF5C97CA000
|
unkown
|
page readonly
|
|
|
|
7FF4F962D000
|
unkown
|
page readonly
|
|
|
|
7FF582C74000
|
unkown
|
page readonly
|
|
|
|
7FF5AFD0C000
|
unkown
|
page readonly
|
|
|
|
7FF4F97C5000
|
unkown
|
page readonly
|
|
|
|
1E0BC702000
|
unkown
|
page read and write
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
7FF5C9F8D000
|
unkown
|
page readonly
|
|
|
|
7FF5AFE1D000
|
unkown
|
page readonly
|
|
|
|
207E4C30000
|
unkown
|
page readonly
|
|
|
|
2DA58002000
|
unkown
|
page read and write
|
|
|
|
15314FB000
|
unkown
|
page read and write
|
|
|
|
7D92A7E000
|
unkown
|
page read and write
|
|
|
|
16741A70000
|
heap private
|
page read and write
|
|
|
|
2202E855000
|
unkown
|
page read and write
|
|
|
|
207E2D74000
|
unkown
|
page read and write
|
|
|
|
EA37D7E000
|
unkown
|
page read and write
|
|
|
|
7FF533D8D000
|
unkown
|
page readonly
|
|
|
|
7FF542A2B000
|
unkown
|
page readonly
|
|
|
|
7D9297F000
|
unkown
|
page read and write
|
|
|
|
7FF54296D000
|
unkown
|
page readonly
|
|
|
|
E813E7C000
|
unkown
|
page read and write
|
|
|
|
7FF5AFD4D000
|
unkown
|
page readonly
|
|
|
|
7FF53D534000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC0E000
|
unkown
|
page readonly
|
|
|
|
1530EFE000
|
unkown
|
page read and write
|
|
|
|
7FF5CA0C3000
|
unkown
|
page readonly
|
|
|
|
8889EFE000
|
unkown
|
page read and write
|
|
|
|
7FF4F988B000
|
unkown
|
page readonly
|
|
|
|
7FF51B5FF000
|
unkown
|
page readonly
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
7FF5BD5DF000
|
unkown
|
page readonly
|
|
|
|
165E1F7B000
|
unkown
|
page read and write
|
|
|
|
7FF5AFD83000
|
unkown
|
page readonly
|
|
|
|
165E1F71000
|
unkown
|
page read and write
|
|
|
|
165E1F21000
|
unkown
|
page read and write
|
|
|
|
1D46661B000
|
unkown
|
page read and write
|
|
|
|
1A3B60A3000
|
unkown
|
page read and write
|
|
|
|
7FF5D717E000
|
unkown
|
page readonly
|
|
|
|
25C44E79000
|
unkown
|
page read and write
|
|
|
|
7FF55B0D4000
|
unkown
|
page readonly
|
|
|
|
25B1B300000
|
unkown
|
page read and write
|
|
|
|
7FF5BD5F0000
|
unkown
|
page readonly
|
|
|
|
E81407B000
|
unkown
|
page read and write
|
|
|
|
2A553DE0000
|
unkown
|
page read and write
|
|
|
|
793F75000
|
unkown
|
page read and write
|
|
|
|
18BC0479000
|
unkown
|
page read and write
|
|
|
|
1A3B60A3000
|
unkown
|
page read and write
|
|
|
|
7FF542A1D000
|
unkown
|
page readonly
|
|
|
|
1C165000000
|
unkown
|
page readonly
|
|
|
|
1A3B6DE0000
|
unkown
|
page read and write
|
|
|
|
7FF560A8F000
|
unkown
|
page readonly
|
|
|
|
7FF5AFB43000
|
unkown
|
page readonly
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
7FF53929C000
|
unkown
|
page readonly
|
|
|
|
7FF53938F000
|
unkown
|
page readonly
|
|
|
|
7FF5AFD38000
|
unkown
|
page readonly
|
|
|
|
26D694C0000
|
unkown
|
page read and write
|
|
|
|
7FF4F9434000
|
unkown
|
page readonly
|
|
|
|
EA37DFA000
|
unkown
|
page read and write
|
|
|
|
165E1689000
|
unkown
|
page read and write
|
|
|
|
2A553F75000
|
heap private
|
page read and write
|
|
|
|
7FF5BD56A000
|
unkown
|
page readonly
|
|
|
|
26D67C00000
|
unkown
|
page readonly
|
|
|
|
7FF4F946D000
|
unkown
|
page readonly
|
|
|
|
1673FC29000
|
unkown
|
page read and write
|
|
|
|
7FF5392BD000
|
unkown
|
page readonly
|
|
|
|
207E2CD1000
|
unkown
|
page read and write
|
|
|
|
165E1F5F000
|
unkown
|
page read and write
|
|
|
|
7FF533D6D000
|
unkown
|
page readonly
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
1A3B6B32000
|
unkown
|
page read and write
|
|
|
|
207E4E12000
|
unkown
|
page read and write
|
|
|
|
16741AD0000
|
unkown
|
page read and write
|
|
|
|
7D927FC000
|
unkown
|
page read and write
|
|
|
|
18BC0465000
|
unkown
|
page read and write
|
|
|
|
25C4A590000
|
unkown
|
page read and write
|
|
|
|
7FF582C8F000
|
unkown
|
page readonly
|
|
|
|
7FF542A3F000
|
unkown
|
page readonly
|
|
|
|
7FF4F9607000
|
unkown
|
page readonly
|
|
|
|
7FF5CEB0F000
|
unkown
|
page readonly
|
|
|
|
1A3B607F000
|
unkown
|
page read and write
|
|
|
|
165E1F43000
|
unkown
|
page read and write
|
|
|
|
25C45E10000
|
unkown
|
page read and write
|
|
|
|
2DA58200000
|
unkown
|
page readonly
|
|
|
|
153137A000
|
unkown
|
page read and write
|
|
|
|
2A553E10000
|
unkown
|
page readonly
|
|
|
|
165E1E02000
|
unkown
|
page read and write
|
|
|
|
25C45718000
|
unkown
|
page read and write
|
|
|
|
23D2F240000
|
unkown
|
page read and write
|
|
|
|
7FF5602CE000
|
unkown
|
page readonly
|
|
|
|
7FF56097C000
|
unkown
|
page readonly
|
|
|
|
207E2DC6000
|
unkown
|
page read and write
|
|
|
|
7FF53D46D000
|
unkown
|
page readonly
|
|
|
|
7FF5560CD000
|
unkown
|
page readonly
|
|
|
|
7FF5DA51D000
|
unkown
|
page readonly
|
|
|
|
23D2F272000
|
unkown
|
page read and write
|
|
|
|
1A3B6300000
|
heap private
|
page read and write
|
|
|
|
1A3B5FE0000
|
unkown
|
page read and write
|
|
|
|
F7913F9000
|
unkown
|
page read and write
|
|
|
|
1A3B611C000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
7FF511D58000
|
unkown
|
page readonly
|
|
|
|
18BC0463000
|
unkown
|
page read and write
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
165E1F44000
|
unkown
|
page read and write
|
|
|
|
25C4A2E0000
|
unkown
|
page readonly
|
|
|
|
23D30D00000
|
unkown
|
page readonly
|
|
|
|
25C4A550000
|
unkown
|
page read and write
|
|
|
|
25C45540000
|
unkown
|
page read and write
|
|
|
|
16216102000
|
unkown
|
page read and write
|
|
|
|
7FF560968000
|
unkown
|
page readonly
|
|
|
|
165E164B000
|
unkown
|
page read and write
|
|
|
|
7FF58298D000
|
unkown
|
page readonly
|
|
|
|
7FF5564C0000
|
unkown
|
page readonly
|
|
|
|
7FF5D718F000
|
unkown
|
page readonly
|
|
|
|
1530FFF000
|
unkown
|
page read and write
|
|
|
|
1A3B6B3B000
|
unkown
|
page read and write
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
7FF5AFB70000
|
unkown
|
page readonly
|
|
|
|
7FF533D5E000
|
unkown
|
page readonly
|
|
|
|
207E6002000
|
unkown
|
page read and write
|
|
|
|
7FF5C97E0000
|
unkown
|
page readonly
|
|
|
|
16216200000
|
unkown
|
page readonly
|
|
|
|
23D2F272000
|
unkown
|
page read and write
|
|
|
|
7FF5DA6C3000
|
unkown
|
page readonly
|
|
|
|
1E0BCC02000
|
unkown
|
page read and write
|
|
|
|
1A3B6B36000
|
unkown
|
page read and write
|
|
|
|
7FF511863000
|
unkown
|
page readonly
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
7FF542862000
|
unkown
|
page readonly
|
|
|
|
2C5FF78000
|
unkown
|
page read and write
|
|
|
|
18BC0462000
|
unkown
|
page read and write
|
|
|
|
165E2600000
|
unkown
|
page readonly
|
|
|
|
7FF5BD60B000
|
unkown
|
page readonly
|
|
|
|
2A553CE3000
|
unkown
|
page read and write
|
|
|
|
2240EA00000
|
unkown
|
page readonly
|
|
|
|
26D67A69000
|
unkown
|
page read and write
|
|
|
|
165E1708000
|
unkown
|
page read and write
|
|
|
|
1A3B6B32000
|
unkown
|
page read and write
|
|
|
|
7FF5DA543000
|
unkown
|
page readonly
|
|
|
|
7FF533AB3000
|
unkown
|
page readonly
|
|
|
|
1C1668A0000
|
unkown
|
page readonly
|
|
|
|
153127B000
|
unkown
|
page read and write
|
|
|
|
165E1FEC000
|
unkown
|
page read and write
|
|
|
|
7FF5D714F000
|
unkown
|
page readonly
|
|
|
|
566238E000
|
unkown
|
page read and write
|
|
|
|
165E1F35000
|
unkown
|
page read and write
|
|
|
|
1C164CF0000
|
unkown
|
page write copy
|
|
|
|
3E3CF1B000
|
unkown
|
page read and write
|
|
|
|
7FF5392F5000
|
unkown
|
page readonly
|
|
|
|
7FF533C3D000
|
unkown
|
page readonly
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
7FF53BFCA000
|
unkown
|
page readonly
|
|
|
|
165E1F4D000
|
unkown
|
page read and write
|
|
|
|
7FF58FCB8000
|
unkown
|
page readonly
|
|
|
|
2202E902000
|
unkown
|
page read and write
|
|
|
|
1A3B610C000
|
unkown
|
page read and write
|
|
|
|
165E1F44000
|
unkown
|
page read and write
|
|
|
|
1A3B607F000
|
unkown
|
page read and write
|
|
|
|
165E1F71000
|
unkown
|
page read and write
|
|
|
|
26D67A6C000
|
unkown
|
page read and write
|
|
|
|
7FF4F987B000
|
unkown
|
page readonly
|
|
|
|
1EB503E0000
|
unkown
|
page readonly
|
|
|
|
1A3B60A7000
|
unkown
|
page read and write
|
|
|
|
1D46663D000
|
unkown
|
page read and write
|
|
|
|
1C164E02000
|
unkown
|
page read and write
|
|
|
|
7FF533AE0000
|
unkown
|
page readonly
|
|
|
|
165E164E000
|
unkown
|
page read and write
|
|
|
|
7FF55B0EF000
|
unkown
|
page readonly
|
|
|
|
7FF5DA5CF000
|
unkown
|
page readonly
|
|
|
|
18BC06D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D715B000
|
unkown
|
page readonly
|
|
|
|
207E2CA5000
|
unkown
|
page read and write
|
|
|
|
26D679C0000
|
unkown
|
page readonly
|
|
|
|
207E4B89000
|
unkown
|
page read and write
|
|
|
|
165E2402000
|
unkown
|
page read and write
|
|
|
|
25C4A520000
|
unkown
|
page write copy
|
|
|
|
25C45D01000
|
unkown
|
page read and write
|
|
|
|
153227B000
|
unkown
|
page read and write
|
|
|
|
2202EAD0000
|
unkown
|
page readonly
|
|
|
|
165E1F37000
|
unkown
|
page read and write
|
|
|
|
165E1F42000
|
unkown
|
page read and write
|
|
|
|
7FF5DA56E000
|
unkown
|
page readonly
|
|
|
|
2C5FE7F000
|
unkown
|
page read and write
|
|
|
|
18BC045F000
|
unkown
|
page read and write
|
|
|
|
25C4A451000
|
unkown
|
page read and write
|
|
|
|
26D67A40000
|
unkown
|
page read and write
|
|
|
|
7FF5564DE000
|
unkown
|
page readonly
|
|
|
|
7FF560A60000
|
unkown
|
page readonly
|
|
|
|
7FF53C0DD000
|
unkown
|
page readonly
|
|
|
|
7FF5D709D000
|
unkown
|
page readonly
|
|
|
|
1C164C20000
|
unkown
|
page readonly
|
|
|
|
207E2D52000
|
unkown
|
page read and write
|
|
|
|
165E1FF4000
|
unkown
|
page read and write
|
|
|
|
207E2D63000
|
unkown
|
page read and write
|
|
|
|
1A3B62E0000
|
unkown
|
page readonly
|
|
|
|
7FF5AFDD8000
|
unkown
|
page readonly
|
|
|
|
22030270000
|
unkown
|
page read and write
|
|
|
|
7FF5DA258000
|
unkown
|
page readonly
|
|
|
|
7FF533D5B000
|
unkown
|
page readonly
|
|
|
|
165E1F50000
|
unkown
|
page read and write
|
|
|
|
7FF53D510000
|
unkown
|
page readonly
|
|
|
|
7FF53C2B4000
|
unkown
|
page readonly
|
|
|
|
207E2C56000
|
unkown
|
page read and write
|
|
|
|
153207C000
|
unkown
|
page read and write
|
|
|
|
165E1FF4000
|
unkown
|
page read and write
|
|
|
|
26D67B02000
|
unkown
|
page read and write
|
|
|
|
7FF4F933F000
|
unkown
|
page readonly
|
|
|
|
56628FD000
|
unkown
|
page read and write
|
|
|
|
7FF5AF9EF000
|
unkown
|
page readonly
|
|
|
|
7FF5CEB0F000
|
unkown
|
page readonly
|
|
|
|
2DA57F20000
|
unkown
|
page readonly
|
|
|
|
207E4F83000
|
unkown
|
page read and write
|
|
|
|
165E1FB2000
|
unkown
|
page read and write
|
|
|
|
1673FC7B000
|
unkown
|
page read and write
|
|
|
|
207E4B71000
|
unkown
|
page read and write
|
|
|
|
207E4B30000
|
unkown
|
page read and write
|
|
|
|
7FF55B008000
|
unkown
|
page readonly
|
|
|
|
165E1F74000
|
unkown
|
page read and write
|
|
|
|
165E1F75000
|
unkown
|
page read and write
|
|
|
|
25C4A537000
|
unkown
|
page write copy
|
|
|
|
7FF5AFC57000
|
unkown
|
page readonly
|
|
|
|
165E1F82000
|
unkown
|
page read and write
|
|
|
|
25C44DD0000
|
heap default
|
page read and write
|
|
|
|
888A17F000
|
unkown
|
page read and write
|
|
|
|
7FF5429FF000
|
unkown
|
page readonly
|
|
|
|
16216108000
|
unkown
|
page read and write
|
|
|
|
165E1F43000
|
unkown
|
page read and write
|
|
|
|
7FF55639D000
|
unkown
|
page readonly
|
|
|
|
7FF511C07000
|
unkown
|
page readonly
|
|
|
|
7FF511D70000
|
unkown
|
page readonly
|
|
|
|
2240EBA0000
|
unkown
|
page readonly
|
|
|
|
1A3B607F000
|
unkown
|
page read and write
|
|
|
|
355CAFE000
|
unkown
|
page read and write
|
|
|
|
207E5210000
|
unkown
|
page read and write
|
|
|
|
7FF53BFC2000
|
unkown
|
page readonly
|
|
|
|
7FF55AFE7000
|
unkown
|
page readonly
|
|
|
|
7FF533C47000
|
unkown
|
page readonly
|
|
|
|
2C5F87D000
|
unkown
|
page read and write
|
|
|
|
25C45758000
|
unkown
|
page read and write
|
|
|
|
7FF55B0C0000
|
unkown
|
page readonly
|
|
|
|
7FF5AFD02000
|
unkown
|
page readonly
|
|
|
|
7FF5BD3BD000
|
unkown
|
page readonly
|
|
|
|
207E4B9E000
|
unkown
|
page read and write
|
|
|
|
1A3B60A3000
|
unkown
|
page read and write
|
|
|
|
7FF511B8E000
|
unkown
|
page readonly
|
|
|
|
7FF5C97D9000
|
unkown
|
page readonly
|
|
|
|
F79127F000
|
unkown
|
page read and write
|
|
|
|
C6FDE7A000
|
unkown
|
page read and write
|
|
|
|
165E1662000
|
unkown
|
page read and write
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
21DE07A0000
|
unkown
|
page read and write
|
|
|
|
16741D44000
|
unkown
|
page read and write
|
|
|
|
7FF51B565000
|
unkown
|
page readonly
|
|
|
|
7FF5563FC000
|
unkown
|
page readonly
|
|
|
|
7FF4F95E0000
|
unkown
|
page readonly
|
|
|
|
25C45759000
|
unkown
|
page read and write
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
7FF5C9FA9000
|
unkown
|
page readonly
|
|
|
|
7FF53D630000
|
unkown
|
page readonly
|
|
|
|
18BC043B000
|
unkown
|
page read and write
|
|
|
|
7FF53D3D7000
|
unkown
|
page readonly
|
|
|
|
7FF582BC9000
|
unkown
|
page readonly
|
|
|
|
1A3B611C000
|
unkown
|
page read and write
|
|
|
|
25B1B0B0000
|
heap private
|
page read and write
|
|
|
|
207E4EA4000
|
unkown
|
page read and write
|
|
|
|
207E2C29000
|
unkown
|
page read and write
|
|
|
|
7FF53C1ED000
|
unkown
|
page readonly
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
7FF53C2F8000
|
unkown
|
page readonly
|
|
|
|
1A3B6B80000
|
unkown
|
page read and write
|
|
|
|
165E1FFF000
|
unkown
|
page read and write
|
|
|
|
207E4C00000
|
unkown
|
page readonly
|
|
|
|
1A3B6DE0000
|
unkown
|
page read and write
|
|
|
|
7FF5BD538000
|
unkown
|
page readonly
|
|
|
|
165E1470000
|
heap private
|
page read and write
|
|
|
|
7FF53D595000
|
unkown
|
page readonly
|
|
|
|
7FF5AFD59000
|
unkown
|
page readonly
|
|
|
|
165E1FFA000
|
unkown
|
page read and write
|
|
|
|
7FF5392A0000
|
unkown
|
page readonly
|
|
|
|
7FF560947000
|
unkown
|
page readonly
|
|
|
|
26D67A68000
|
unkown
|
page read and write
|
|
|
|
7FF560553000
|
unkown
|
page readonly
|
|
|
|
15313FB000
|
unkown
|
page read and write
|
|
|
|
7FF533C72000
|
unkown
|
page readonly
|
|
|
|
7FF542A0E000
|
unkown
|
page readonly
|
|
|
|
25C4A5D0000
|
unkown
|
page readonly
|
|
|
|
7FF58286D000
|
unkown
|
page readonly
|
|
|
|
2C5F5F9000
|
unkown
|
page read and write
|
|
|
|
7FF5608E5000
|
unkown
|
page readonly
|
|
|
|
7FF5CEA28000
|
unkown
|
page readonly
|
|
|
|
165E1F4A000
|
unkown
|
page read and write
|
|
|
|
2DA5806F000
|
unkown
|
page read and write
|
|
|
|
7FF560983000
|
unkown
|
page readonly
|
|
|
|
7FF51AE3E000
|
unkown
|
page readonly
|
|
|
|
16741C02000
|
unkown
|
page read and write
|
|
|
|
1673FD17000
|
unkown
|
page read and write
|
|
|
|
7FF53D61F000
|
unkown
|
page readonly
|
|
|
|
207E4BD1000
|
unkown
|
page read and write
|
|
|
|
7FF54292C000
|
unkown
|
page readonly
|
|
|
|
3E3D47A000
|
unkown
|
page read and write
|
|
|
|
7FF556400000
|
unkown
|
page readonly
|
|
|
|
23D2F26A000
|
unkown
|
page read and write
|
|
|
|
207E2C94000
|
unkown
|
page read and write
|
|
|
|
207E4C10000
|
unkown
|
page read and write
|
|
|
|
7FF5CA138000
|
unkown
|
page readonly
|
|
|
|
165E1F36000
|
unkown
|
page read and write
|
|
|
|
7FF533C83000
|
unkown
|
page readonly
|
|
|
|
1A3B62F0000
|
unkown
|
page read and write
|
|
|
|
165E1F44000
|
unkown
|
page read and write
|
|
|
|
25C4A460000
|
unkown
|
page read and write
|
|
|
|
7D92E7E000
|
unkown
|
page read and write
|
|
|
|
25C44EA7000
|
unkown
|
page read and write
|
|
|
|
7FF511D9B000
|
unkown
|
page readonly
|
|
|
|
22410600000
|
heap private
|
page read and write
|
|
|
|
165E1F36000
|
unkown
|
page read and write
|
|
|
|
7FF582BD3000
|
unkown
|
page readonly
|
|
|
|
7D92AFC000
|
unkown
|
page read and write
|
|
|
|
7FF582A07000
|
unkown
|
page readonly
|
|
|
|
95544F7000
|
unkown
|
page read and write
|
|
|
|
207E4BF4000
|
unkown
|
page read and write
|
|
|
|
7FF5CEA17000
|
unkown
|
page readonly
|
|
|
|
95546FE000
|
unkown
|
page read and write
|
|
|
|
7FF53D618000
|
unkown
|
page readonly
|
|
|
|
7FF51B4F7000
|
unkown
|
page readonly
|
|
|
|
1E0BC4F0000
|
unkown
|
page readonly
|
|
|
|
7FF5564A8000
|
unkown
|
page readonly
|
|
|
|
2202E740000
|
heap default
|
page read and write
|
|
|
|
25C46290000
|
unkown
|
page read and write
|
|
|
|
207E5013000
|
unkown
|
page read and write
|
|
|
|
1673FE50000
|
unkown
|
page readonly
|
|
|
|
165E1F4D000
|
unkown
|
page read and write
|
|
|
|
1A3B5FF0000
|
unkown
|
page read and write
|
|
|
|
793A9C000
|
unkown
|
page read and write
|
|
|
|
7FF51B535000
|
unkown
|
page readonly
|
|
|
|
1E0BCE00000
|
unkown
|
page readonly
|
|
|
|
7FF533C04000
|
unkown
|
page readonly
|
|
|
|
7FF51B52D000
|
unkown
|
page readonly
|
|
|
|
7FF560972000
|
unkown
|
page readonly
|
|
|
|
165E1F34000
|
unkown
|
page read and write
|
|
|
|
7FF556215000
|
unkown
|
page readonly
|
|
|
|
F1F4DFF000
|
unkown
|
page read and write
|
|
|
|
9B87B7B000
|
unkown
|
page read and write
|
|
|
|
165E1F5C000
|
unkown
|
page read and write
|
|
|
|
7FF533D4F000
|
unkown
|
page readonly
|
|
|
|
207E2D27000
|
unkown
|
page read and write
|
|
|
|
1531B7F000
|
unkown
|
page read and write
|
|
|
|
2A553CF0000
|
unkown
|
page read and write
|
|
|
|
2240EA10000
|
unkown
|
page readonly
|
|
|
|
7FF4F973D000
|
unkown
|
page readonly
|
|
|
|
25C4A310000
|
unkown
|
page read and write
|
|
|
|
7FF51B518000
|
unkown
|
page readonly
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
1A3B5F50000
|
unkown
|
page read and write
|
|
|
|
7FF511D8B000
|
unkown
|
page readonly
|
|
|
|
7FF53C105000
|
unkown
|
page readonly
|
|
|
|
7FF51B0D8000
|
unkown
|
page readonly
|
|
|
|
2DA58000000
|
unkown
|
page read and write
|
|
|
|
7FF5AFD55000
|
unkown
|
page readonly
|
|
|
|
1673FCA6000
|
unkown
|
page read and write
|
|
|
|
C6FDD7E000
|
unkown
|
page read and write
|
|
|
|
7FF5DA746000
|
unkown
|
page readonly
|
|
|
|
7FF4F986D000
|
unkown
|
page readonly
|
|
|
|
165E1F90000
|
unkown
|
page read and write
|
|
|
|
207E4ED3000
|
unkown
|
page read and write
|
|
|
|
25B1B308000
|
unkown
|
page read and write
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
7FF5BD61B000
|
unkown
|
page readonly
|
|
|
|
23D2F650000
|
unkown
|
page readonly
|
|
|
|
1531EFB000
|
unkown
|
page read and write
|
|
|
|
7FF5BD61F000
|
unkown
|
page readonly
|
|
|
|
7FF55A916000
|
unkown
|
page readonly
|
|
|
|
165E1FB6000
|
unkown
|
page read and write
|
|
|
|
18BC0474000
|
unkown
|
page read and write
|
|
|
|
165E1FB2000
|
unkown
|
page read and write
|
|
|
|
7FF5D7148000
|
unkown
|
page readonly
|
|
|
|
165E1FE8000
|
unkown
|
page read and write
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
2C5FAF7000
|
unkown
|
page read and write
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
1EB50380000
|
heap default
|
page read and write
|
|
|
|
165E1F71000
|
unkown
|
page read and write
|
|
|
|
165E1F36000
|
unkown
|
page read and write
|
|
|
|
26D67950000
|
heap private
|
page read and write
|
|
|
|
7FF582C7B000
|
unkown
|
page readonly
|
|
|
|
7FF5CEA3D000
|
unkown
|
page readonly
|
|
|
|
7FF5DA750000
|
unkown
|
page readonly
|
|
|
|
7FF5AF9C0000
|
unkown
|
page readonly
|
|
|
|
165E1F35000
|
unkown
|
page read and write
|
|
|
|
1A3B6091000
|
unkown
|
page read and write
|
|
|
|
7FF542937000
|
unkown
|
page readonly
|
|
|
|
165E1FFD000
|
unkown
|
page read and write
|
|
|
|
1E0BC629000
|
unkown
|
page read and write
|
|
|
|
7FF54259E000
|
unkown
|
page readonly
|
|
|
|
1A3B60A3000
|
unkown
|
page read and write
|
|
|
|
1A3B5E80000
|
unkown
|
page readonly
|
|
|
|
26D67A6A000
|
unkown
|
page read and write
|
|
|
|
7FF58FD5D000
|
unkown
|
page readonly
|
|
|
|
7FF542A2E000
|
unkown
|
page readonly
|
|
|
|
7FF5DA677000
|
unkown
|
page readonly
|
|
|
|
7FF582A9D000
|
unkown
|
page readonly
|
|
|
|
207E2CDD000
|
unkown
|
page read and write
|
|
|
|
7FF5392D3000
|
unkown
|
page readonly
|
|
|
|
1EB50C02000
|
unkown
|
page read and write
|
|
|
|
16741AD0000
|
unkown
|
page read and write
|
|
|
|
165E1F7D000
|
unkown
|
page read and write
|
|
|
|
F7912FE000
|
unkown
|
page read and write
|
|
|
|
165E1F6F000
|
unkown
|
page read and write
|
|
|
|
7FF533A7C000
|
unkown
|
page readonly
|
|
|
|
7D92BFC000
|
unkown
|
page read and write
|
|
|
|
25C45602000
|
unkown
|
page read and write
|
|
|
|
165E1F59000
|
unkown
|
page read and write
|
|
|
|
7FF582872000
|
unkown
|
page readonly
|
|
|
|
7FF5429A5000
|
unkown
|
page readonly
|
|
|
|
7FF5AFA02000
|
unkown
|
page readonly
|
|
|
|
7FF58FEB7000
|
unkown
|
page readonly
|
|
|
|
207E2C7C000
|
unkown
|
page read and write
|
|
|
|
1D466613000
|
unkown
|
page read and write
|
|
|
|
7FF560853000
|
unkown
|
page readonly
|
|
|
|
2240E890000
|
unkown
|
page readonly
|
|
|
|
207E2B20000
|
unkown
|
page write copy
|
|
|
|
2A553CE1000
|
unkown
|
page read and write
|
|
|
|
16741D44000
|
unkown
|
page read and write
|
|
|
|
1EB50513000
|
unkown
|
page read and write
|
|
|
|
7FF560A8B000
|
unkown
|
page readonly
|
|
|
|
7FF539233000
|
unkown
|
page readonly
|
|
|
|
7FF4F95B3000
|
unkown
|
page readonly
|
|
|
|
2A553CF6000
|
unkown
|
page read and write
|
|
|
|
9B87C75000
|
unkown
|
page read and write
|
|
|
|
7FF533930000
|
unkown
|
page readonly
|
|
|
|
165E1F72000
|
unkown
|
page read and write
|
|
|
|
1A3B6010000
|
unkown
|
page read and write
|
|
|
|
95540FE000
|
unkown
|
page read and write
|
|
|
|
7FF53C2E7000
|
unkown
|
page readonly
|
|
|
|
165E1F51000
|
unkown
|
page read and write
|
|
|
|
E8148FE000
|
unkown
|
page read and write
|
|
|
|
7FF55AD7A000
|
unkown
|
page readonly
|
|
|
|
25C44F13000
|
unkown
|
page read and write
|
|
|
|
7FF4F988D000
|
unkown
|
page readonly
|
|
|
|
165E1F4E000
|
unkown
|
page read and write
|
|
|
|
25C4A6AF000
|
unkown
|
page read and write
|
|
|
|
21DDEF02000
|
unkown
|
page read and write
|
|
|
|
7FF53C319000
|
unkown
|
page readonly
|
|
|
|
2DA5803F000
|
unkown
|
page read and write
|
|
|
|
7FF5AFE0B000
|
unkown
|
page readonly
|
|
|
|
1D466602000
|
unkown
|
page read and write
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
7FF539374000
|
unkown
|
page readonly
|
|
|
|
25B1B110000
|
heap default
|
page read and write
|
|
|
|
1A3B6B30000
|
unkown
|
page read and write
|
|
|
|
7FF533A83000
|
unkown
|
page readonly
|
|
|
|
7FF5CA150000
|
unkown
|
page readonly
|
|
|
|
1A3B60A7000
|
unkown
|
page read and write
|
|
|
|
165E1F5A000
|
unkown
|
page read and write
|
|
|
|
165E1F43000
|
unkown
|
page read and write
|
|
|
|
1C164D40000
|
unkown
|
page readonly
|
|
|
|
207E6042000
|
unkown
|
page read and write
|
|
|
|
7FF55AFE3000
|
unkown
|
page readonly
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
2DA57DD0000
|
heap private
|
page read and write
|
|
|
|
207E2D18000
|
unkown
|
page read and write
|
|
|
|
7FF51B50C000
|
unkown
|
page readonly
|
|
|
|
1D466E02000
|
unkown
|
page read and write
|
|
|
|
2DA585B0000
|
unkown
|
page readonly
|
|
|
|
22030370000
|
unkown
|
page readonly
|
|
|
|
1A3B610C000
|
unkown
|
page read and write
|
|
|
|
7FF4F977C000
|
unkown
|
page readonly
|
|
|
|
7FF5AFCD7000
|
unkown
|
page readonly
|
|
|
|
8889CFA000
|
unkown
|
page read and write
|
|
|
|
165E1FE9000
|
unkown
|
page read and write
|
|
|
|
7FF5428BE000
|
unkown
|
page readonly
|
|
|
|
1D466651000
|
unkown
|
page read and write
|
|
|
|
7FF560797000
|
unkown
|
page readonly
|
|
|
|
2DA58064000
|
unkown
|
page read and write
|
|
|
|
153107A000
|
unkown
|
page read and write
|
|
|
|
165E1F56000
|
unkown
|
page read and write
|
|
|
|
16216113000
|
unkown
|
page read and write
|
|
|
|
26D67A70000
|
unkown
|
page read and write
|
|
|
|
1A3B6B36000
|
unkown
|
page read and write
|
|
|
|
26D67A69000
|
unkown
|
page read and write
|
|
|
|
C25E7C000
|
unkown
|
page read and write
|
|
|
|
207E2CCA000
|
unkown
|
page read and write
|
|
|
|
25C4A524000
|
unkown
|
page readonly
|
|
|
|
7FF542922000
|
unkown
|
page readonly
|
|
|
|
21DDEE29000
|
unkown
|
page read and write
|
|
|
|
23D2F26A000
|
unkown
|
page read and write
|
|
|
|
7FF51AE44000
|
unkown
|
page readonly
|
|
|
|
7FF53D64E000
|
unkown
|
page readonly
|
|
|
|
16215EA0000
|
unkown
|
page readonly
|
|
|
|
165E1F74000
|
unkown
|
page read and write
|
|
|
|
21DDEE02000
|
unkown
|
page read and write
|
|
|
|
1621603C000
|
unkown
|
page read and write
|
|
|
|
15310FF000
|
unkown
|
page read and write
|
|
|
|
7FF542A3B000
|
unkown
|
page readonly
|
|
|
|
7FF51B5FF000
|
unkown
|
page readonly
|
|
|
|
165E1FED000
|
unkown
|
page read and write
|
|
|
|
7FF58FF03000
|
unkown
|
page readonly
|
|
|
|
207E5210000
|
unkown
|
page read and write
|
|
|
|
7FF55B0AF000
|
unkown
|
page readonly
|
|
|
|
7FF53C323000
|
unkown
|
page readonly
|
|
|
|
7FF4F97F3000
|
unkown
|
page readonly
|
|
|
|
1A3B60FD000
|
unkown
|
page read and write
|
|
|
|
23D2F26A000
|
unkown
|
page read and write
|
|
|
|
25C44E94000
|
unkown
|
page read and write
|
|
|
|
E8145FD000
|
unkown
|
page read and write
|
|
|
|
7FF5DA76B000
|
unkown
|
page readonly
|
|
|
|
25C4A6AD000
|
unkown
|
page read and write
|
|
|
|
165E1702000
|
unkown
|
page read and write
|
|
|
|
25C44E00000
|
unkown
|
page read and write
|
|
|
|
7FF5AFDDF000
|
unkown
|
page readonly
|
|
|
|
165E1FEF000
|
unkown
|
page read and write
|
|
|
|
355CCFF000
|
unkown
|
page read and write
|
|
|
|
7FF5CEB0B000
|
unkown
|
page readonly
|
|
|
|
1EB50E00000
|
unkown
|
page readonly
|
|
|
|
153157B000
|
unkown
|
page read and write
|
|
|
|
2A553CD1000
|
unkown
|
page read and write
|
|
|
|
7FF55B033000
|
unkown
|
page readonly
|
|
|
|
165E1F28000
|
unkown
|
page read and write
|
|
|
|
9C4147C000
|
unkown
|
page read and write
|
|
|
|
1A3B6309000
|
heap private
|
page read and write
|
|
|
|
7FF533941000
|
unkown
|
page readonly
|
|
|
|
165E1F34000
|
unkown
|
page read and write
|
|
|
|
207E5000000
|
unkown
|
page read and write
|
|
|
|
25B1B23C000
|
unkown
|
page read and write
|
|
|
|
7FF5428B4000
|
unkown
|
page readonly
|
|
|
|
165E16CB000
|
unkown
|
page read and write
|
|
|
|
7FF5562FD000
|
unkown
|
page readonly
|
|
|
|
7FF54259A000
|
unkown
|
page readonly
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
7FF56085E000
|
unkown
|
page readonly
|
|
|
|
25C4A590000
|
unkown
|
page readonly
|
|
|
|
7FF582B40000
|
unkown
|
page readonly
|
|
|
|
207E2D13000
|
unkown
|
page read and write
|
|
|
|
165E1F47000
|
unkown
|
page read and write
|
|
|
|
2C5FCFF000
|
unkown
|
page read and write
|
|
|
|
566297D000
|
unkown
|
page read and write
|
|
|
|
F1F4D79000
|
unkown
|
page read and write
|
|
|
|
7FF5CE8FE000
|
unkown
|
page readonly
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
23D2F272000
|
unkown
|
page read and write
|
|
|
|
2DA57E30000
|
heap default
|
page read and write
|
|
|
|
7FF542958000
|
unkown
|
page readonly
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
2240EAAB000
|
heap default
|
page read and write
|
|
|
|
7FF582C8B000
|
unkown
|
page readonly
|
|
|
|
25C4A474000
|
unkown
|
page read and write
|
|
|
|
165E16D2000
|
unkown
|
page read and write
|
|
|
|
1E0BC5D0000
|
unkown
|
page readonly
|
|
|
|
7FF53C2EC000
|
unkown
|
page readonly
|
|
|
|
207E2D22000
|
unkown
|
page read and write
|
|
|
|
207E29E0000
|
heap private
|
page read and write
|
|
|
|
2DA58075000
|
unkown
|
page read and write
|
|
|
|
165E1FFE000
|
unkown
|
page read and write
|
|
|
|
7FF4F945F000
|
unkown
|
page readonly
|
|
|
|
7FF560A7B000
|
unkown
|
page readonly
|
|
|
|
23D2F200000
|
unkown
|
page read and write
|
|
|
|
165E1F3C000
|
unkown
|
page read and write
|
|
|
|
7FF4F988F000
|
unkown
|
page readonly
|
|
|
|
25C45600000
|
unkown
|
page read and write
|
|
|
|
16216029000
|
unkown
|
page read and write
|
|
|
|
16216080000
|
unkown
|
page read and write
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
207E2DA4000
|
unkown
|
page read and write
|
|
|
|
23D2F400000
|
unkown
|
page write copy
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
7FF582C48000
|
unkown
|
page readonly
|
|
|
|
7FF5CA084000
|
unkown
|
page readonly
|
|
|
|
1EB504E1000
|
unkown
|
page read and write
|
|
|
|
165E1FF5000
|
unkown
|
page read and write
|
|
|
|
16216A00000
|
unkown
|
page readonly
|
|
|
|
165E1F5B000
|
unkown
|
page read and write
|
|
|
|
1A3B5F70000
|
unkown
|
page read and write
|
|
|
|
7FF55AE82000
|
unkown
|
page readonly
|
|
|
|
18BC0467000
|
unkown
|
page read and write
|
|
|
|
7FF4F9430000
|
unkown
|
page readonly
|
|
|
|
165E1FB0000
|
unkown
|
page read and write
|
|
|
|
165E1F72000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCF8000
|
unkown
|
page readonly
|
|
|
|
1A3B67F0000
|
unkown
|
page readonly
|
|
|
|
165E1F5F000
|
unkown
|
page read and write
|
|
|
|
18BC0380000
|
heap private
|
page read and write
|
|
|
|
7FF533CBD000
|
unkown
|
page readonly
|
|
|
|
1A3B5F90000
|
unkown
|
page readonly
|
|
|
|
7FF4F947A000
|
unkown
|
page readonly
|
|
|
|
22410700000
|
heap private
|
page read and write
|
|
|
|
207E4BE2000
|
unkown
|
page read and write
|
|
|
|
1A3B611C000
|
unkown
|
page read and write
|
|
|
|
7FF5CE9C7000
|
unkown
|
page readonly
|
|
|
|
7FF5CEAC8000
|
unkown
|
page readonly
|
|
|
|
7FF5C97DB000
|
unkown
|
page readonly
|
|
|
|
C6FDDF9000
|
unkown
|
page read and write
|
|
|
|
7FF533C9C000
|
unkown
|
page readonly
|
|
|
|
165E15F0000
|
unkown
|
page readonly
|
|
|
|
1EB50413000
|
unkown
|
page read and write
|
|
|
|
7FF560A48000
|
unkown
|
page readonly
|
|
|
|
7FF5CEA5A000
|
unkown
|
page readonly
|
|
|
|
7FF5607B1000
|
unkown
|
page readonly
|
|
|
|
207E2DE7000
|
unkown
|
page read and write
|
|
|
|
7FF4F95B5000
|
unkown
|
page readonly
|
|
|
|
2A553CF0000
|
unkown
|
page read and write
|
|
|
|
7FF5C9FB7000
|
unkown
|
page readonly
|
|
|
|
207E2D21000
|
unkown
|
page read and write
|
|
|
|
7FF58FE80000
|
unkown
|
page readonly
|
|
|
|
7FF5427D2000
|
unkown
|
page readonly
|
|
|
|
207E4E22000
|
unkown
|
page read and write
|
|
|
|
7FF5DA76E000
|
unkown
|
page readonly
|
|
|
|
21DDEC10000
|
heap default
|
page read and write
|
|
|
|
25C44E13000
|
unkown
|
page read and write
|
|
|
|
7FF5DA673000
|
unkown
|
page readonly
|
|
|
|
7FF5DA68C000
|
unkown
|
page readonly
|
|
|
|
1673FD13000
|
unkown
|
page read and write
|
|
|
|
207E4E77000
|
unkown
|
page read and write
|
|
|
|
25C44EFD000
|
unkown
|
page read and write
|
|
|
|
7FF533CD3000
|
unkown
|
page readonly
|
|
|
|
165E1F7D000
|
unkown
|
page read and write
|
|
|
|
7FF511BF5000
|
unkown
|
page readonly
|
|
|
|
165E1FA6000
|
unkown
|
page read and write
|
|
|
|
165E1716000
|
unkown
|
page read and write
|
|
|
|
7FF5607A3000
|
unkown
|
page readonly
|
|
|
|
7FF5BD1CE000
|
unkown
|
page readonly
|
|
|
|
16741B00000
|
unkown
|
page readonly
|
|
|
|
7FF5CE6F2000
|
unkown
|
page readonly
|
|
|
|
888A07F000
|
unkown
|
page read and write
|
|
|
|
7FF4F9856000
|
unkown
|
page readonly
|
|
|
|
207E4B00000
|
unkown
|
page read and write
|
|
|
|
1A3B60E6000
|
unkown
|
page read and write
|
|
|
|
165E1F46000
|
unkown
|
page read and write
|
|
|
|
7FF5D70F5000
|
unkown
|
page readonly
|
|
|
|
7FF511A53000
|
unkown
|
page readonly
|
|
|
|
7FF51B54A000
|
unkown
|
page readonly
|
|
|
|
7FF560848000
|
unkown
|
page readonly
|
|
|
|
7FF533910000
|
unkown
|
page readonly
|
|
|
|
7FF533D7B000
|
unkown
|
page readonly
|
|
|
|
7FF542706000
|
unkown
|
page readonly
|
|
|
|
7FF511BB3000
|
unkown
|
page readonly
|
|
|
|
7FF5DA243000
|
unkown
|
page readonly
|
|
|
|
C260FE000
|
unkown
|
page read and write
|
|
|
|
165E1F51000
|
unkown
|
page read and write
|
|
|
|
7FF5CEAFE000
|
unkown
|
page readonly
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
207E5010000
|
unkown
|
page read and write
|
|
|
|
96ADF9000
|
unkown
|
page read and write
|
|
|
|
26D67A02000
|
unkown
|
page read and write
|
|
|
|
25C45F50000
|
unkown
|
page readonly
|
|
|
|
18BC03F0000
|
unkown
|
page readonly
|
|
|
|
7FF5AFD2C000
|
unkown
|
page readonly
|
|
|
|
26D67A13000
|
unkown
|
page read and write
|
|
|
|
7FF5DA698000
|
unkown
|
page readonly
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
1EB504E7000
|
unkown
|
page read and write
|
|
|
|
7FF539073000
|
unkown
|
page readonly
|
|
|
|
7FF51B5C6000
|
unkown
|
page readonly
|
|
|
|
1A3B5FF0000
|
unkown
|
page read and write
|
|
|
|
1E0BC655000
|
unkown
|
page read and write
|
|
|
|
96AF7F000
|
unkown
|
page read and write
|
|
|
|
7FF5563A7000
|
unkown
|
page readonly
|
|
|
|
C6FDC7B000
|
unkown
|
page read and write
|
|
|
|
1E0BC713000
|
unkown
|
page read and write
|
|
|
|
7FF5CEAE0000
|
unkown
|
page readonly
|
|
|
|
7FF5338C1000
|
unkown
|
page readonly
|
|
|
|
165E1F50000
|
unkown
|
page read and write
|
|
|
|
23D2F302000
|
unkown
|
page read and write
|
|
|
|
8889DFB000
|
unkown
|
page read and write
|
|
|
|
207E4F43000
|
unkown
|
page read and write
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
165E16F9000
|
unkown
|
page read and write
|
|
|
|
7FF53937B000
|
unkown
|
page readonly
|
|
|
|
26D67B00000
|
unkown
|
page read and write
|
|
|
|
25B1B268000
|
unkown
|
page read and write
|
|
|
|
7FF542933000
|
unkown
|
page readonly
|
|
|
|
7FF5607A0000
|
unkown
|
page readonly
|
|
|
|
207E2D19000
|
unkown
|
page read and write
|
|
|
|
7FF51B5D0000
|
unkown
|
page readonly
|
|
|
|
8889BFE000
|
unkown
|
page read and write
|
|
|
|
18BC0459000
|
unkown
|
page read and write
|
|
|
|
18BC044E000
|
unkown
|
page read and write
|
|
|
|
355C51C000
|
unkown
|
page read and write
|
|
|
|
7FF5392C9000
|
unkown
|
page readonly
|
|
|
|
7FF533A4F000
|
unkown
|
page readonly
|
|
|
|
1C164C10000
|
heap default
|
page read and write
|
|
|
|
165E1FE7000
|
unkown
|
page read and write
|
|
|
|
1530F79000
|
unkown
|
page read and write
|
|
|
|
207E2CF0000
|
unkown
|
page read and write
|
|
|
|
2DA58029000
|
unkown
|
page read and write
|
|
|
|
355C9FE000
|
unkown
|
page read and write
|
|
|
|
25B1B400000
|
unkown
|
page readonly
|
|
|
|
7FF53D626000
|
unkown
|
page readonly
|
|
|
|
1531F7B000
|
unkown
|
page read and write
|
|
|
|
7FF5AFB27000
|
unkown
|
page readonly
|
|
|
|
25C4A61F000
|
unkown
|
page read and write
|
|
|
|
165E1F4F000
|
unkown
|
page read and write
|
|
|
|
25C4A454000
|
unkown
|
page read and write
|
|
|
|
1E0BC67D000
|
unkown
|
page read and write
|
|
|
|
1EB503A0000
|
unkown
|
page readonly
|
|
|
|
25C4A330000
|
unkown
|
page read and write
|
|
|
|
7FF582B47000
|
unkown
|
page readonly
|
|
|
|
7FF55B0EB000
|
unkown
|
page readonly
|
|
|
|
7FF53393F000
|
unkown
|
page readonly
|
|
|
|
1D466590000
|
unkown
|
page read and write
|
|
|
|
7FF5608DF000
|
unkown
|
page readonly
|
|
|
|
7FF5C97D4000
|
unkown
|
page readonly
|
|
|
|
207E4BEC000
|
unkown
|
page read and write
|
|
|
|
7FF4F9443000
|
unkown
|
page readonly
|
|
|
|
7FF53D599000
|
unkown
|
page readonly
|
|
|
|
1E0BC68A000
|
unkown
|
page read and write
|
|
|
|
207E4B59000
|
unkown
|
page read and write
|
|
|
|
9C4167F000
|
unkown
|
page read and write
|
|
|
|
1A3B60A3000
|
unkown
|
page read and write
|
|
|
|
165E1F34000
|
unkown
|
page read and write
|
|
|
|
207E2D20000
|
unkown
|
page read and write
|
|
|
|
955437B000
|
unkown
|
page read and write
|
|
|
|
1A3B611C000
|
unkown
|
page read and write
|
|
|
|
207E4A02000
|
unkown
|
page read and write
|
|
|
|
23D2F272000
|
unkown
|
page read and write
|
|
|
|
7FF51B5EB000
|
unkown
|
page readonly
|
|
|
|
207E2BD0000
|
heap private
|
page read and write
|
|
|
|
25C45F20000
|
unkown
|
page readonly
|
|
|
|
96ACFE000
|
unkown
|
page read and write
|
|
|
|
207E4ED9000
|
unkown
|
page read and write
|
|
|
|
3E3D2FB000
|
unkown
|
page read and write
|
|
|
|
1A3B60BC000
|
unkown
|
page read and write
|
|
|
|
7FF5DA433000
|
unkown
|
page readonly
|
|
|
|
25C4A67D000
|
unkown
|
page read and write
|
|
|
|
7FF533A81000
|
unkown
|
page readonly
|
|
|
|
7FF5BD604000
|
unkown
|
page readonly
|
|
|
|
7FF542975000
|
unkown
|
page readonly
|
|
|
|
C6FDEFE000
|
unkown
|
page read and write
|
|
|
|
7FF533C97000
|
unkown
|
page readonly
|
|
|
|
207E5010000
|
unkown
|
page read and write
|
|
|
|
207E4C40000
|
unkown
|
page readonly
|
|
|
|
7FF5DA6AD000
|
unkown
|
page readonly
|
|
|
|
25C4A5E0000
|
unkown
|
page readonly
|
|
|
|
165E1629000
|
unkown
|
page read and write
|
|
|
|
1A3B6B30000
|
unkown
|
page read and write
|
|
|
|
25C44E40000
|
unkown
|
page read and write
|
|
|
|
25C4A470000
|
unkown
|
page read and write
|
|
|
|
1673FD02000
|
unkown
|
page read and write
|
|
|
|
1A3B60A7000
|
unkown
|
page read and write
|
|
|
|
23D2F272000
|
unkown
|
page read and write
|
|
|
|
207E5110000
|
unkown
|
page read and write
|
|
|
|
7FF5BD2D3000
|
unkown
|
page readonly
|
|
|
|
EA37C7B000
|
unkown
|
page read and write
|
|
|
|
207E2CCC000
|
unkown
|
page read and write
|
|
|
|
1A3B60A3000
|
unkown
|
page read and write
|
|
|
|
7FF5CE6DF000
|
unkown
|
page readonly
|
|
|
|
7FF5DA5E7000
|
unkown
|
page readonly
|
|
|
|
7FF56089D000
|
unkown
|
page readonly
|
|
|
|
7FF58F620000
|
unkown
|
page readonly
|
|
|
|
165E164A000
|
unkown
|
page read and write
|
|
|
|
165E2402000
|
unkown
|
page read and write
|
|
|
|
26D679B0000
|
heap default
|
page read and write
|
|
|
|
7FF533C60000
|
unkown
|
page readonly
|
|
|
|
1EB50A60000
|
unkown
|
page readonly
|
|
|
|
7FF51B539000
|
unkown
|
page readonly
|
|
|
|
5C05EF9000
|
unkown
|
page read and write
|
|
|
|
25B1B28A000
|
unkown
|
page read and write
|
|
|
|
7FF582BBD000
|
unkown
|
page readonly
|
|
|
|
7FF53D35D000
|
unkown
|
page readonly
|
|
|
|
7FF4F9787000
|
unkown
|
page readonly
|
|
|
|
25B1B302000
|
unkown
|
page read and write
|
|
|
|
7FF511B6E000
|
unkown
|
page readonly
|
|
|
|
18BC0468000
|
unkown
|
page read and write
|
|
|
|
7FF560997000
|
unkown
|
page readonly
|
|
|
|
165E1FFF000
|
unkown
|
page read and write
|
|
|
|
7FF58285F000
|
unkown
|
page readonly
|
|
|
|
7FF533B5C000
|
unkown
|
page readonly
|
|
|
|
1A3B60D1000
|
unkown
|
page read and write
|
|
|
|
1E0BC600000
|
unkown
|
page read and write
|
|
|
|
207E4F00000
|
unkown
|
page read and write
|
|
|
|
165E1F32000
|
unkown
|
page read and write
|
|
|
|
165E1F3B000
|
unkown
|
page read and write
|
|
|
|
207E4EC5000
|
unkown
|
page read and write
|
|
|
|
207E2DA5000
|
unkown
|
page read and write
|
|
|
|
888A0FF000
|
unkown
|
page read and write
|
|
|
|
25B1B8C0000
|
unkown
|
page readonly
|
|
|
|
7FF5BD61F000
|
unkown
|
page readonly
|
|
|
|
7FF533C68000
|
unkown
|
page readonly
|
|
|
|
165E1CF0000
|
unkown
|
page read and write
|
|
|
|
1531AFA000
|
unkown
|
page read and write
|
|
|
|
7FF58FC76000
|
unkown
|
page readonly
|
|
|
|
7FF5DA6CA000
|
unkown
|
page readonly
|
|
|
|
2202E7E0000
|
unkown
|
page read and write
|
|
|
|
7FF5AFE0E000
|
unkown
|
page readonly
|
|
|
|
9C416FE000
|
unkown
|
page read and write
|
|
|
|
7FF53937E000
|
unkown
|
page readonly
|
|
|
|
1EB51140000
|
unkown
|
page readonly
|
|
|
|
25C4A590000
|
unkown
|
page read and write
|
|
|
|
1531E7B000
|
unkown
|
page read and write
|
|
|
|
2202E6E0000
|
heap private
|
page read and write
|
|
|
|
7FF5392A8000
|
unkown
|
page readonly
|
|
|
|
7FF4F9848000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC2D000
|
unkown
|
page readonly
|
|
|
|
2C5FBF8000
|
unkown
|
page read and write
|
|
|
|
165E1800000
|
unkown
|
page readonly
|
|
|
|
1E0BC410000
|
heap default
|
page read and write
|
|
|
|
2240E9E0000
|
unkown
|
page read and write
|
|
|
|
88899FA000
|
unkown
|
page read and write
|
|
|
|
207E2CA9000
|
unkown
|
page read and write
|
|
|
|
2A553CC0000
|
heap default
|
page read and write
|
|
|
|
18BC03E0000
|
heap default
|
page read and write
|
|
|
|
25C4A590000
|
unkown
|
page read and write
|
|
|
|
153177B000
|
unkown
|
page read and write
|
|
|
|
7FF4F9597000
|
unkown
|
page readonly
|
|
|
|
9B87CFE000
|
unkown
|
page read and write
|
|
|
|
7FF5DA738000
|
unkown
|
page readonly
|
|
|
|
888A37F000
|
unkown
|
page read and write
|
|
|
|
7940F7000
|
unkown
|
page read and write
|
|
|
|
165E1F46000
|
unkown
|
page read and write
|
|
|
|
7FF533C40000
|
unkown
|
page readonly
|
|
|
|
207E4E3E000
|
unkown
|
page read and write
|
|
|
|
1A3B6720000
|
unkown
|
page readonly
|
|
|
|
1E0BC602000
|
unkown
|
page read and write
|
|
|
|
165E1FEB000
|
unkown
|
page read and write
|
|
|
|
7FF5AFDFD000
|
unkown
|
page readonly
|
|
|
|
1D466800000
|
unkown
|
page readonly
|
|
|
|
7FF539356000
|
unkown
|
page readonly
|
|
|
|
7FF5CEADB000
|
unkown
|
page readonly
|
|
|
|
7FF582C6D000
|
unkown
|
page readonly
|
|
|
|
1D466560000
|
unkown
|
page read and write
|
|
|
|
26D67A6A000
|
unkown
|
page read and write
|
|
|
|
7FF582C5B000
|
unkown
|
page readonly
|
|
|
|
25C4A62C000
|
unkown
|
page read and write
|
|
|
|
7FF56082D000
|
unkown
|
page readonly
|
|
|
|
7FF556453000
|
unkown
|
page readonly
|
|
|
|
7FF51B0C3000
|
unkown
|
page readonly
|
|
|
|
1D466600000
|
unkown
|
page read and write
|
|
|
|
207E2E00000
|
unkown
|
page readonly
|
|
There are 1966 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://www.dhhs.nh.gov/index.htm
|
|
|
|
https://www.dhhs.nh.gov/#skip
|
|
|
|
https://www.nh.gov/covid19/
|
|
|
|
https://www.dhhs.nh.gov/foryou/disabilities.htm
|
|
|
|
https://www.dhhs.nh.gov/foryou/women.htm
|
|
|
|
https://www.dhhs.nh.gov/foryou/adults.htm
|
|
|
|
https://www.dhhs.nh.gov/foryou/teens.htm
|
|
|
|
https://www.dhhs.nh.gov/foryou/seniors.htm
|
|
|
|
https://www.dhhs.nh.gov/
|
|
|
|
https://www.dhhs.nh.gov/#translate
|
|
|
|
https://www.dhhs.nh.gov/foryou/families.htm
|
|
|
|
https://www.dhhs.nh.gov/about/index.htm
|
|
There are 2 hidden doms, click here to show them.