Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
2021-02-18 Fivoor - Overleg - Kwartaaloverleg.docx
|
Microsoft Word 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\NY1GEO55\dotnet.microsoft[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\OFGISG8J\docs.microsoft[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{3A9550DE-77F5-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3A9550E0-77F5-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{518F19A3-77F5-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\OfficeFileCache\CentralTable.accdb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\OfficeFileCache\CentralTable.ini
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\OfficeFileCache\CentralTable.laccdb
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\C35D0C9B-162A-4BE1-BAF9-F09B9C11FBF9
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\25299F9C.png
|
PNG image data, 654 x 923, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\6C0FD40A.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1024x224,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\EF142ED.png
|
PNG image data, 175 x 81, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{31CB24EF-1DEB-4C38-BB46-32AB8B1362AD}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{A3851AEE-AECA-436C-8A5A-BC14FD1EA042}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{D5993233-DA6C-4F31-A159-3A5C447B0181}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{F7D58E8D-739A-48B6-B99E-11D35D7AABFB}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\12971179[1].jpg
|
JPEG image data, baseline, precision 8, 32x32, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\17-f90ef1[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1x1clear[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\21000428[1].jpg
|
JPEG image data, baseline, precision 8, 32x32, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\4734691[1].jpg
|
JPEG image data, baseline, precision 8, 32x32, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\65-478888[1].css
|
UTF-8 Unicode (with BOM) text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RE4DRie[1].png
|
PNG image data, 1259 x 472, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RE4pkvE[1].png
|
PNG image data, 40 x 40, 8-bit gray+alpha, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RE4pxBu[1].png
|
PNG image data, 40 x 40, 8-bit gray+alpha, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RE4rriw[1].png
|
PNG image data, 40 x 40, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RE4sQDc[1].png
|
PNG image data, 40 x 40, 2-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\SegoeUI-Roman-VF_web[1].woff
|
Web Open Font Format, TrueType, length 149700, version 1.66
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ZSQPH9MF.htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bootstrap-custom.min[1].css
|
UTF-8 Unicode (with BOM) text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\common[1].css
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\configuration[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\customers-godaddy[1].png
|
PNG image data, 637 x 177, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\customers-ups[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\downloadshome[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\facebook[1].png
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon[1].ico
|
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\home-hero-bg[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\home.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\iis-new-logo[1].png
|
PNG image data, 94 x 70, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jsll-4[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\microsoft-logo2[1].png
|
PNG image data, 89 x 19, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\new-features-introduced-in-iis-10-1709[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\scripts-jquery-validate[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\sprite[1].png
|
PNG image data, 140 x 540, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\swimlane-aspnet-extends-dotnet[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\toc[1].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\twitter[1].png
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\18338075[1].jpg
|
JPEG image data, baseline, precision 8, 32x32, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\94-3cd1e0[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\97269d6d.site-ltr[1].css
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\MeControl_mDEQjNo-v8fzxvfr-ss1Pw2[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\RE4qZxW[1].wdp
|
JPEG-XR
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\a4-539297[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\a96de1e1.conceptual[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ai.0[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\build-2020-background[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1792x300, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\configreference[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\customers-raygun[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\customers-stackoverflow[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\docons.225ca470[1].eot
|
Embedded OpenType (EOT), docons family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\dotnetmdl2-icons[1].woff
|
Web Open Font Format, TrueType, length 13256, version 0.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\downloads[1].css
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\favicon[1].ico
|
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fb[1].png
|
PNG image data, 16 x 16, 4-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\free-code-editor-tools-bot-desk[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\iis-new-logo[1].png
|
PNG image data, 94 x 70, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\iisstart[1].png
|
PNG image data, 960 x 600, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jquery-3.3.1.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jsll-4[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\login[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main[1].js
|
ASCII text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\meBoot.min[1].js
|
ASCII text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\me[1].htm
|
HTML document, ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\meversion[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\microsoft-logo2[1].png
|
PNG image data, 89 x 19, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\mwfmdl2-v3.54[1].woff
|
Web Open Font Format, TrueType, length 26288, version 0.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\social[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\spot-azure-accessible-everywhere[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\swimlane-subscribe-to-news-tips[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\tech-empower-results[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\twitter[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\3605364[1].png
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\38636870[1].jpg
|
JPEG image data, baseline, precision 8, 32x32, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\4643903[1].jpg
|
JPEG image data, baseline, precision 8, 32x32, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\6RJ6ZB23.htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\IIS-Administration[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\RE4H9G0[1].wdp
|
JPEG-XR
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\RE4pndL[1].png
|
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\XDCN866V.htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bluebird.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators, with escape sequences
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\cartcount[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\cookie-consent.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\customers-ge-aviation[1].png
|
PNG image data, 511 x 173, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\e3-082b89[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\favicon[1].ico
|
MS Windows icon resource - 9 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\favicon[2].ico
|
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fb[1].png
|
PNG image data, 16 x 16, 4-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fetch.umd.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\general.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\google-analytics.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\hero-download[1].png
|
PNG image data, 221 x 217, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\hero-home[1].png
|
PNG image data, 252 x 209, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\iframe[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\instagram[1].png
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\latest[1].woff2
|
Web Open Font Format (Version 2), TrueType, length 34052, version 0.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\linkedin[1].png
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\main.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\meCore.min[1].js
|
ASCII text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\scripts-all[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\signin[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\swimlane-community-documentation[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\template.min[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\twitter[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\url.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\youtube[1].png
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\2KY6T3OZ.htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\8c3bc838.index-docs[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BOWGV9MI.htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\JeongHwan[1].png
|
PNG image data, 59 x 59, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RE1Mu3b[1].png
|
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RE3NYMe[1].wdp
|
JPEG-XR
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RE4DfTp[1].wdp
|
JPEG-XR
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RE4E4rT[1].wdp
|
JPEG-XR
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RE4HCqV[1].wdp
|
JPEG-XR
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RE4MEu6[1].png
|
PNG image data, 1259 x 472, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RE4MWFF[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1600x600,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RE4N4wN[1].wdp
|
JPEG-XR
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RE4rzE2[1].wdp
|
JPEG-XR
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\Y7IZGHQR.htm
|
HTML document, ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\analytics[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\aspnet[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\b5-6bb6f8[1].css
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\customers-alaska[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\de-ch[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\downloads[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\f0a172e9.index-polyfills[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\favicon[1].ico
|
MS Windows icon resource - 9 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\home[1].css
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jquery-3.5.1.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\languages[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\latest[1].woff
|
Web Open Font Format, TrueType, length 33744, version 0.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\learn[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\override[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\peterviola[1].png
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 59x59, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\platform[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\social[1].css
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\sprite-logins[1].png
|
PNG image data, 122 x 132, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\swimlane-security[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\toc[1].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\toc[2].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\toc[3].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\wcp-consent[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\wcp-consent[2].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\cscheme.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\filelist.xml
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\header.htm
|
HTML document, Non-ISO extended-ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\img001.png
|
PNG image data, 654 x 923, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\img002.gif
|
GIF image data, version 89a, 715 x 1030
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\img003.png
|
PNG image data, 175 x 81, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\img004.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 175x81, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\img005.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1024x224,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\item0001.xml
|
XML 1.0 document, ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\item0003.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\item0005.xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\item0007.xml
|
XML 1.0 document, ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\props002.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\props004.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\props006.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\props008.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\imgs\theme.thm
|
Microsoft OOXML
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mso6FBC.tmp
|
GIF image data, version 89a, 15 x 15
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF3D8F722CCD3B64D6.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF9CCE09D2F943CBFB.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFA5BF9203C9345D8D.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\2021-02-18 Fivoor - Overleg - Kwartaaloverleg.docx.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:43
2020, mtime=Fri Feb 26 04:40:42 2021, atime=Fri Feb 26 04:40:36 2021, length=182929, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
|
Little-endian UTF-16 Unicode text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\TMWD7P9YIM1YICLIXKJS.temp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$21-02-18 Fivoor - Overleg - Kwartaaloverleg.docx
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-CNRY.FSD
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-{5F669EE6-C8B8-44F5-8B10-98F08F0A9EC5}.FSD
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSF-CTBL.FSF
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSD-CNRY.FSD
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSD-{FDF085F0-5246-4600-A9C1-70EEFDDBBCBC}.FSD
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSF-{0E1EEE64-E8C6-4E2A-9759-63CF07FD8988}.FSF
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{0E989C07-30AB-4901-9D2A-3CE504568F55}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\msoB8E3.tmp
|
GIF image data, version 89a, 15 x 15
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{2EA589A8-80DC-4151-A705-FB65CDDF635A}
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{68E33153-79B5-4476-8353-B4DAFDE9644D}
|
data
|
dropped
|
|
There are 188 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
C:\Program Files (x86)\Microsoft Office\Office16\MsoSync.exe
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
C:\Program Files (x86)\Microsoft Office\Office16\MsoSync.exe
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6732 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://outlook.live.com/owa/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://www.iis.net/?utm_medium=iis-deploymentLHome
|
unknown
|
|
|
|
https://www.iis.net/downloadsus/IIS-Administration/
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://products.office.com/de-ch/academic/compare-office-365-education-plans
|
unknown
|
|
|
|
https://assets.onestore.ms
|
unknown
|
|
|
|
https://github.com/MicrosoftDocs/IIS.Administration-docs/blob/live/IIS-Administration/index.md
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://login.iis.net/favicon.ico
|
unknown
|
|
|
|
https://tools.ietf.org/html/rfc6797
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://github.com/MicrosoftDocs/iis-docs/blob/live/iis/configuration/index.md
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://forums.asp.net/
|
unknown
|
|
|
|
https://forums.iis.net/members/saucecontrol.aspx
|
unknown
|
|
|
|
https://www.twitter.com/inetsrv/
|
unknown
|
|
|
|
https://github.com/twbs/bootstrap/graphs/contributors)
|
unknown
|
|
|
|
https://sn.webrootcloudav.com/oudav.com/
|
unknown
|
|
|
|
https://github.com/nschonni.png?size=32
|
unknown
|
|
|
|
https://blogs.iis.net/iisteam/introducing-iis-cors-1-0
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://publisher.liveperson.net/iframe-le-tag/iframe.html?lpsite=60270350&lpsection=store-sales-de-
|
unknown
|
|
|
|
https://stats.g.doubleclick.net/j/collect
|
unknown
|
|
|
|
https://www.iis.net/favicon.ico
|
unknown
|
|
|
|
https://skyversion.webrootcloudav.com
|
unknown
|
|
|
|
https://manage.iis.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://www.microsoftstore.com.cn/checkout
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://wus2-000.pagecontentsync.
|
unknown
|
|
|
|
https://www.microsoftstore.com.cn/cart
|
unknown
|
|
|
|
https://www.iis.net/?utm_medium=iis-deployment
|
|
||
|
https://forums.iis.net/members/$
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://www.microsoftstore.com.cn/software/microsoft-365
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
http://fontello.comIcon
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://github.com/shirhatti
|
unknown
|
|
|
|
http://github.com/jquery/jquery-tmpl
|
unknown
|
|
|
|
https://www.surveymonkey.com/r/netcoresupport_dotnetwebsite
|
unknown
|
|
|
|
https://blogs.iis.net/
|
unknown
|
|
|
|
https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7
|
unknown
|
|
|
|
https://jquery.com/
|
unknown
|
|
|
|
http://gambit.ph
|
unknown
|
|
|
|
https://dotnet.microso
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://g59.p4.webrootcloudav.com
|
unknown
|
|
|
|
https://github.com/MicrosoftDocs/iis-docs/blob/live/iis/get-started/whats-new-in-iis-10-version-1709
|
unknown
|
|
|
|
https://www.microsoft.
|
unknown
|
|
|
|
https://github.com/js-cookie/js-cookie
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://github.com/aFarkas/lazysizes
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://github.com/Rich-Lang.png?size=32
|
unknown
|
|
|
|
https://sizzlejs.com/
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://www.iis.net/configreference
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://www.microsoftstore.com.cn/microsoft-365/microsoft-365
|
unknown
|
|
|
|
https://www.iis.net/downloads
|
unknown
|
|
|
|
https://www.iis.net/?utm_medium=iis-deployment#hero
|
unknown
|
|
|
|
http://schema.org/BreadcrumbList
|
unknown
|
|
|
|
https://blogs.iis.net/adminapi
|
unknown
|
|
|
|
https://github.com/MicrosoftDocs/iis-docs/blob/22f8c6108ea9ed9330333ede82568276a3162b34/iis/configur
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://www.skype.com/de/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://www.clarity.ms/tag/
|
unknown
|
|
|
|
https://login.iis.net/account/login?ReturnUrl=https://www.iis.net/
|
|
||
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://sn.webrootcloudav.com/
|
unknown
|
|
|
|
https://www.iis.net/com/de-ch/n?ReturnUrl=https://www.iis.net/
|
unknown
|
|
|
|
https://github.com/
|
unknown
|
|
|
|
https://www.iis.net
|
unknown
|
|
|
|
https://www.microsoftstore.com.cn/hardware/surface
|
unknown
|
|
|
|
https://blogs.iis.net/iisteam/url-rewrite-v2-1
|
unknown
|
|
|
|
https://forums.iis.net/1080.aspx
|
unknown
|
|
|
|
https://www.iis.net/?utm_medium=iis-deployment#herojH
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
lemontree1.sharepoint.com
|
unknown
|
|
|
|
sni1gl.wpc.gammacdn.net
|
152.199.21.175
|
|
|
|
avatars.githubusercontent.com
|
185.199.108.133
|
|
|
|
microsoftwindows.112.2o7.net
|
15.237.136.106
|
|
|
|
github.com
|
140.82.121.3
|
|
|
|
asp.net
|
40.118.185.161
|
|
|
|
cs1227.wpc.alphacdn.net
|
192.229.221.185
|
|
|
|
liveperson.map.fastly.net
|
151.101.1.192
|
|
|
|
waws-prod-bay-029.sip.azurewebsites.windows.net
|
40.118.185.161
|
|
|
|
sn.webrootcloudav.com
|
34.253.10.100
|
|
|
|
logincdn.msauth.net
|
unknown
|
|
|
|
www.asp.net
|
unknown
|
|
|
|
login.iis.net
|
unknown
|
|
|
|
assets.onestore.ms
|
unknown
|
|
|
|
mem.gfx.ms
|
unknown
|
|
|
|
www.iis.net
|
unknown
|
|
|
|
publisher.liveperson.net
|
unknown
|
|
|
|
dc.services.visualstudio.com
|
unknown
|
|
|
|
consentdeliveryfd.azurefd.net
|
unknown
|
|
There are 9 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
40.118.185.161
|
unknown
|
United States
|
unknown
|
|
|
|
151.101.1.192
|
unknown
|
United States
|
unknown
|
|
|
|
140.82.121.3
|
unknown
|
United States
|
unknown
|
|
|
|
34.253.10.100
|
unknown
|
United States
|
unknown
|
|
|
|
192.229.221.185
|
unknown
|
United States
|
unknown
|
|
|
|
185.199.108.133
|
unknown
|
Netherlands
|
unknown
|
|
|
|
152.199.21.175
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
,n:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
-n:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
so:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
br:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AceFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AceFilesIntl_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
CacheId
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
WxpFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Version
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
17A6C
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Cambria Math
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Century Gothic
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Verdana
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Tahoma
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Cambria
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
20074
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
File Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Datetime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Position
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
VisiFlm
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AutoGrammar
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AutosaveInterval
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
NavPaneAdvertised
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
PreferredView
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
WORDFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AceFilesIntl_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AceFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
WxpFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
20074
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Toolbars
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Position
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Settings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
c/;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
d/;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
CacheMaintenanceGuid
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
TimeCacheMaintenanceStart
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
CacheMigrationAttempted
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
AceFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
AceFilesIntl_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
WxpFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
;!;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
<!;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
|
en-US
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{3A9550DE-77F5-11EB-90E4-ECF4BB862DED}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
AdminActive
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
?#4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
j&4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
i+4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
WORDFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Blob
|
|
There are 199 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
20AEFB50000
|
unkown
|
page read and write
|
|
|
|
23A847EB000
|
unkown
|
page read and write
|
|
|
|
7FF59C241000
|
unkown
|
page readonly
|
|
|
|
7FF50FFD9000
|
unkown
|
page readonly
|
|
|
|
7FF5ECDF5000
|
unkown
|
page readonly
|
|
|
|
24CFF950000
|
unkown
|
page readonly
|
|
|
|
7FF5C452A000
|
unkown
|
page readonly
|
|
|
|
24CFFB7C000
|
unkown
|
page read and write
|
|
|
|
7FF5C4511000
|
unkown
|
page readonly
|
|
|
|
2C232550000
|
unkown
|
page readonly
|
|
|
|
7FF59C86C000
|
unkown
|
page readonly
|
|
|
|
1D7C683D000
|
unkown
|
page read and write
|
|
|
|
23A8268D000
|
unkown
|
page read and write
|
|
|
|
23A84530000
|
unkown
|
page readonly
|
|
|
|
7FF543460000
|
unkown
|
page readonly
|
|
|
|
24CFFB4E000
|
unkown
|
page read and write
|
|
|
|
1DBE1780000
|
unkown
|
page read and write
|
|
|
|
7FF51E1BA000
|
unkown
|
page readonly
|
|
|
|
23A82680000
|
unkown
|
page read and write
|
|
|
|
7FF59C18F000
|
unkown
|
page readonly
|
|
|
|
24CFFB59000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2E6000
|
unkown
|
page readonly
|
|
|
|
19956A6E000
|
unkown
|
page read and write
|
|
|
|
7FF51E247000
|
unkown
|
page readonly
|
|
|
|
7FF5ED5B9000
|
unkown
|
page readonly
|
|
|
|
7FF55E602000
|
unkown
|
page readonly
|
|
|
|
7FF5959CE000
|
unkown
|
page readonly
|
|
|
|
7FF57506A000
|
unkown
|
page readonly
|
|
|
|
1DBE1540000
|
unkown
|
page read and write
|
|
|
|
7FF55B70C000
|
unkown
|
page readonly
|
|
|
|
20AEFB90000
|
unkown
|
page write copy
|
|
|
|
7FF5ECD6A000
|
unkown
|
page readonly
|
|
|
|
28CE548D000
|
unkown
|
page read and write
|
|
|
|
7FF5444DD000
|
unkown
|
page readonly
|
|
|
|
7FF59BEA4000
|
unkown
|
page readonly
|
|
|
|
7FF5444D4000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2B9000
|
unkown
|
page readonly
|
|
|
|
220D1C29000
|
unkown
|
page read and write
|
|
|
|
7FF4F7CA8000
|
unkown
|
page readonly
|
|
|
|
7FF5C4250000
|
unkown
|
page readonly
|
|
|
|
2C232610000
|
unkown
|
page readonly
|
|
|
|
7FF59B9C0000
|
unkown
|
page readonly
|
|
|
|
F851E7D000
|
unkown
|
page read and write
|
|
|
|
24CFF200000
|
unkown
|
page read and write
|
|
|
|
7FF543507000
|
unkown
|
page readonly
|
|
|
|
7FF5C474E000
|
unkown
|
page readonly
|
|
|
|
1D7C6AD0000
|
unkown
|
page readonly
|
|
|
|
23A84736000
|
unkown
|
page read and write
|
|
|
|
253ACC02000
|
unkown
|
page read and write
|
|
|
|
7FF5C44BE000
|
unkown
|
page readonly
|
|
|
|
20E6D3F5000
|
heap private
|
page read and write
|
|
|
|
23A85010000
|
unkown
|
page read and write
|
|
|
|
1DBDC918000
|
unkown
|
page read and write
|
|
|
|
1DBDD130000
|
unkown
|
page readonly
|
|
|
|
7FF51E1B2000
|
unkown
|
page readonly
|
|
|
|
7FF59B833000
|
unkown
|
page readonly
|
|
|
|
7FF51E237000
|
unkown
|
page readonly
|
|
|
|
220D1D13000
|
unkown
|
page read and write
|
|
|
|
26BE4900000
|
unkown
|
page read and write
|
|
|
|
23A84983000
|
unkown
|
page read and write
|
|
|
|
7FF5C45CC000
|
unkown
|
page readonly
|
|
|
|
23A8277A000
|
unkown
|
page read and write
|
|
|
|
7FF55E6A0000
|
unkown
|
page readonly
|
|
|
|
24CFF229000
|
unkown
|
page read and write
|
|
|
|
7FF574FBC000
|
unkown
|
page readonly
|
|
|
|
23A82690000
|
unkown
|
page read and write
|
|
|
|
7FF4F7D91000
|
unkown
|
page readonly
|
|
|
|
7FF502786000
|
unkown
|
page readonly
|
|
|
|
1FFCE26B000
|
unkown
|
page read and write
|
|
|
|
FD22EFB000
|
unkown
|
page read and write
|
|
|
|
19956B02000
|
unkown
|
page read and write
|
|
|
|
253AC600000
|
unkown
|
page readonly
|
|
|
|
7FF575042000
|
unkown
|
page readonly
|
|
|
|
7FF59BEB7000
|
unkown
|
page readonly
|
|
|
|
91D247E000
|
unkown
|
page read and write
|
|
|
|
220D1B20000
|
heap default
|
page read and write
|
|
|
|
C9032FF000
|
unkown
|
page read and write
|
|
|
|
7FF51E17A000
|
unkown
|
page readonly
|
|
|
|
1DBE17A0000
|
unkown
|
page read and write
|
|
|
|
220D1C3F000
|
unkown
|
page read and write
|
|
|
|
1FFCE400000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7A9000
|
unkown
|
page readonly
|
|
|
|
20AF0140000
|
unkown
|
page readonly
|
|
|
|
24CFFB62000
|
unkown
|
page read and write
|
|
|
|
24CFFB23000
|
unkown
|
page read and write
|
|
|
|
20E6D1DF000
|
unkown
|
page read and write
|
|
|
|
20E6CFD0000
|
unkown
|
page readonly
|
|
|
|
7FF5ED437000
|
unkown
|
page readonly
|
|
|
|
7FF502708000
|
unkown
|
page readonly
|
|
|
|
7FF5DF84E000
|
unkown
|
page readonly
|
|
|
|
7FF59C1B1000
|
unkown
|
page readonly
|
|
|
|
23A84767000
|
unkown
|
page read and write
|
|
|
|
7FF54367C000
|
unkown
|
page readonly
|
|
|
|
24CFFB81000
|
unkown
|
page read and write
|
|
|
|
7FF53CDD1000
|
unkown
|
page readonly
|
|
|
|
A0562FE000
|
unkown
|
page read and write
|
|
|
|
24CFF2EB000
|
unkown
|
page read and write
|
|
|
|
2C232D30000
|
unkown
|
page readonly
|
|
|
|
7FF5DF711000
|
unkown
|
page readonly
|
|
|
|
7FF55E4F8000
|
unkown
|
page readonly
|
|
|
|
7FF5ED130000
|
unkown
|
page readonly
|
|
|
|
1D7C6869000
|
unkown
|
page read and write
|
|
|
|
91D2BFB000
|
unkown
|
page read and write
|
|
|
|
FE01CFE000
|
unkown
|
page read and write
|
|
|
|
7FF5BDE70000
|
unkown
|
page readonly
|
|
|
|
7FF59C1E4000
|
unkown
|
page readonly
|
|
|
|
1F3654A0000
|
unkown
|
page read and write
|
|
|
|
7FF55B7B5000
|
unkown
|
page readonly
|
|
|
|
23A847FA000
|
unkown
|
page read and write
|
|
|
|
24CFFB5E000
|
unkown
|
page read and write
|
|
|
|
28CE548C000
|
unkown
|
page read and write
|
|
|
|
23A847EC000
|
unkown
|
page read and write
|
|
|
|
23A826D1000
|
unkown
|
page read and write
|
|
|
|
7FF59C82F000
|
unkown
|
page readonly
|
|
|
|
7FF59B8FA000
|
unkown
|
page readonly
|
|
|
|
1DBDC113000
|
unkown
|
page read and write
|
|
|
|
253AC2F0000
|
heap private
|
page read and write
|
|
|
|
C9031F9000
|
unkown
|
page read and write
|
|
|
|
1DBE1671000
|
unkown
|
page read and write
|
|
|
|
23A82675000
|
unkown
|
page read and write
|
|
|
|
91D2679000
|
unkown
|
page read and write
|
|
|
|
7FF575040000
|
unkown
|
page readonly
|
|
|
|
7FF5C4611000
|
unkown
|
page readonly
|
|
|
|
7FF5C4260000
|
unkown
|
page readonly
|
|
|
|
7FF575140000
|
unkown
|
page readonly
|
|
|
|
7FF5ED5AE000
|
unkown
|
page readonly
|
|
|
|
7FF55E57C000
|
unkown
|
page readonly
|
|
|
|
1D45F602000
|
unkown
|
page read and write
|
|
|
|
20238200000
|
unkown
|
page read and write
|
|
|
|
1DBDC0AD000
|
unkown
|
page read and write
|
|
|
|
7FF59BF7C000
|
unkown
|
page readonly
|
|
|
|
7FF51E1B6000
|
unkown
|
page readonly
|
|
|
|
23A8268F000
|
unkown
|
page read and write
|
|
|
|
7FF51E15A000
|
unkown
|
page readonly
|
|
|
|
7FF5BDE60000
|
unkown
|
page readonly
|
|
|
|
19956A72000
|
unkown
|
page read and write
|
|
|
|
1D7C6829000
|
unkown
|
page read and write
|
|
|
|
1DBDC7C1000
|
unkown
|
page read and write
|
|
|
|
7FF5ED4C8000
|
unkown
|
page readonly
|
|
|
|
1F365590000
|
unkown
|
page write copy
|
|
|
|
91D25FF000
|
unkown
|
page read and write
|
|
|
|
7FF595A16000
|
unkown
|
page readonly
|
|
|
|
7FF51E0B3000
|
unkown
|
page readonly
|
|
|
|
7FF53C523000
|
unkown
|
page readonly
|
|
|
|
7FF59BA1E000
|
unkown
|
page readonly
|
|
|
|
7FF50FF65000
|
unkown
|
page readonly
|
|
|
|
7FF59B938000
|
unkown
|
page readonly
|
|
|
|
C90337A000
|
unkown
|
page read and write
|
|
|
|
23A847FD000
|
unkown
|
page read and write
|
|
|
|
7FF5ED526000
|
unkown
|
page readonly
|
|
|
|
20AEF8D0000
|
unkown
|
page readonly
|
|
|
|
24CFFB5C000
|
unkown
|
page read and write
|
|
|
|
253AC46A000
|
unkown
|
page read and write
|
|
|
|
1D7C6848000
|
unkown
|
page read and write
|
|
|
|
19956B00000
|
unkown
|
page read and write
|
|
|
|
1DBE1674000
|
unkown
|
page read and write
|
|
|
|
7FF5957BA000
|
unkown
|
page readonly
|
|
|
|
23A84900000
|
unkown
|
page read and write
|
|
|
|
7FF54347F000
|
unkown
|
page readonly
|
|
|
|
1DBE1744000
|
unkown
|
page readonly
|
|
|
|
7FF5443DA000
|
unkown
|
page readonly
|
|
|
|
7FF5C446F000
|
unkown
|
page readonly
|
|
|
|
7FF50FDE3000
|
unkown
|
page readonly
|
|
|
|
7FF5ED389000
|
unkown
|
page readonly
|
|
|
|
6A80E7C000
|
unkown
|
page read and write
|
|
|
|
7FF5ED1EA000
|
unkown
|
page readonly
|
|
|
|
7FF55B361000
|
unkown
|
page readonly
|
|
|
|
7FF5BE262000
|
unkown
|
page readonly
|
|
|
|
20AEFD12000
|
unkown
|
page read and write
|
|
|
|
1DBDC0FD000
|
unkown
|
page read and write
|
|
|
|
1D7C6845000
|
unkown
|
page read and write
|
|
|
|
DB86FF000
|
unkown
|
page read and write
|
|
|
|
1DBE1790000
|
unkown
|
page read and write
|
|
|
|
1DBE18B1000
|
unkown
|
page read and write
|
|
|
|
7FF59B9B7000
|
unkown
|
page readonly
|
|
|
|
7FF5BE1DC000
|
unkown
|
page readonly
|
|
|
|
23A85110000
|
unkown
|
page read and write
|
|
|
|
7FF5DF851000
|
unkown
|
page readonly
|
|
|
|
23A82691000
|
unkown
|
page read and write
|
|
|
|
23A82737000
|
unkown
|
page read and write
|
|
|
|
26A6668E000
|
unkown
|
page read and write
|
|
|
|
20AEF6D0000
|
unkown
|
page readonly
|
|
|
|
7FF5ED521000
|
unkown
|
page readonly
|
|
|
|
23A82678000
|
unkown
|
page read and write
|
|
|
|
1DBDD120000
|
unkown
|
page readonly
|
|
|
|
7FF5444BC000
|
unkown
|
page readonly
|
|
|
|
1DBE175C000
|
unkown
|
page readonly
|
|
|
|
7FF502769000
|
unkown
|
page readonly
|
|
|
|
7FF4F7C92000
|
unkown
|
page readonly
|
|
|
|
7FF5DF762000
|
unkown
|
page readonly
|
|
|
|
23A82758000
|
unkown
|
page read and write
|
|
|
|
1FFCE256000
|
unkown
|
page read and write
|
|
|
|
24CFF910000
|
unkown
|
page readonly
|
|
|
|
7FF59C8E9000
|
unkown
|
page readonly
|
|
|
|
26A66590000
|
unkown
|
page readonly
|
|
|
|
7FF57513E000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7BD000
|
unkown
|
page readonly
|
|
|
|
1DBDC7F0000
|
unkown
|
page read and write
|
|
|
|
7FF544539000
|
unkown
|
page readonly
|
|
|
|
7FF4F79B5000
|
unkown
|
page readonly
|
|
|
|
28CE5400000
|
unkown
|
page read and write
|
|
|
|
220D1B30000
|
unkown
|
page readonly
|
|
|
|
28CE5429000
|
unkown
|
page read and write
|
|
|
|
7FF542D6D000
|
unkown
|
page readonly
|
|
|
|
7FF5750BC000
|
unkown
|
page readonly
|
|
|
|
6A805CB000
|
unkown
|
page read and write
|
|
|
|
23A8268E000
|
unkown
|
page read and write
|
|
|
|
7FF55B75E000
|
unkown
|
page readonly
|
|
|
|
20238302000
|
unkown
|
page read and write
|
|
|
|
26A6663C000
|
unkown
|
page read and write
|
|
|
|
1DBE1724000
|
unkown
|
page readonly
|
|
|
|
7FF5C4607000
|
unkown
|
page readonly
|
|
|
|
1FC72410000
|
unkown
|
page read and write
|
|
|
|
23A84602000
|
unkown
|
page read and write
|
|
|
|
7FF55E51D000
|
unkown
|
page readonly
|
|
|
|
23A8479E000
|
unkown
|
page read and write
|
|
|
|
1D7C684B000
|
unkown
|
page read and write
|
|
|
|
7FF59B790000
|
unkown
|
page readonly
|
|
|
|
26BE482E000
|
unkown
|
page read and write
|
|
|
|
24D00002000
|
unkown
|
page read and write
|
|
|
|
1D7C686C000
|
unkown
|
page read and write
|
|
|
|
7FF59B8FC000
|
unkown
|
page readonly
|
|
|
|
7FF5444C5000
|
unkown
|
page readonly
|
|
|
|
7FF4F7CDF000
|
unkown
|
page readonly
|
|
|
|
20AEF470000
|
unkown
|
page read and write
|
|
|
|
7FF54366C000
|
unkown
|
page readonly
|
|
|
|
23A84A02000
|
unkown
|
page read and write
|
|
|
|
28CE5413000
|
unkown
|
page read and write
|
|
|
|
7FF502755000
|
unkown
|
page readonly
|
|
|
|
7FF5DF78E000
|
unkown
|
page readonly
|
|
|
|
19956A29000
|
unkown
|
page read and write
|
|
|
|
7FF59C053000
|
unkown
|
page readonly
|
|
|
|
20AEFB40000
|
unkown
|
page readonly
|
|
|
|
7FF55E686000
|
unkown
|
page readonly
|
|
|
|
23A84843000
|
unkown
|
page read and write
|
|
|
|
7FF5959A8000
|
unkown
|
page readonly
|
|
|
|
7FF50FACA000
|
unkown
|
page readonly
|
|
|
|
23A847B7000
|
unkown
|
page read and write
|
|
|
|
2C232670000
|
heap default
|
page read and write
|
|
|
|
7FF55E618000
|
unkown
|
page readonly
|
|
|
|
1FC7165F000
|
unkown
|
page read and write
|
|
|
|
7FF5C46C6000
|
unkown
|
page readonly
|
|
|
|
23A844B0000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2AF000
|
unkown
|
page readonly
|
|
|
|
7FF54449D000
|
unkown
|
page readonly
|
|
|
|
19956A6C000
|
unkown
|
page read and write
|
|
|
|
2C234320000
|
heap private
|
page read and write
|
|
|
|
7FF574EAE000
|
unkown
|
page readonly
|
|
|
|
23A82613000
|
unkown
|
page read and write
|
|
|
|
220D1C76000
|
unkown
|
page read and write
|
|
|
|
23A82779000
|
unkown
|
page read and write
|
|
|
|
7FF502796000
|
unkown
|
page readonly
|
|
|
|
24CFF120000
|
unkown
|
page readonly
|
|
|
|
7FF5BE13A000
|
unkown
|
page readonly
|
|
|
|
19956C00000
|
unkown
|
page readonly
|
|
|
|
23A847F9000
|
unkown
|
page read and write
|
|
|
|
7FF57501A000
|
unkown
|
page readonly
|
|
|
|
7FF5ED5B0000
|
unkown
|
page readonly
|
|
|
|
1FC71AC0000
|
unkown
|
page readonly
|
|
|
|
7FF502353000
|
unkown
|
page readonly
|
|
|
|
20AEFD00000
|
unkown
|
page read and write
|
|
|
|
1D7C6864000
|
unkown
|
page read and write
|
|
|
|
23A8267B000
|
unkown
|
page read and write
|
|
|
|
7FF5443E4000
|
unkown
|
page readonly
|
|
|
|
67F5DFE000
|
unkown
|
page read and write
|
|
|
|
2C2329A0000
|
unkown
|
page readonly
|
|
|
|
1DBE182D000
|
unkown
|
page read and write
|
|
|
|
7FF50259F000
|
unkown
|
page readonly
|
|
|
|
1DBDD170000
|
unkown
|
page readonly
|
|
|
|
8E9BEFE000
|
unkown
|
page read and write
|
|
|
|
24CFFB60000
|
unkown
|
page read and write
|
|
|
|
7FF5ED4EE000
|
unkown
|
page readonly
|
|
|
|
F85217F000
|
unkown
|
page read and write
|
|
|
|
7FF5C45F1000
|
unkown
|
page readonly
|
|
|
|
26BE4813000
|
unkown
|
page read and write
|
|
|
|
23A84170000
|
unkown
|
page readonly
|
|
|
|
7FF574EE8000
|
unkown
|
page readonly
|
|
|
|
7FF502712000
|
unkown
|
page readonly
|
|
|
|
7FF5ED4A8000
|
unkown
|
page readonly
|
|
|
|
20238202000
|
unkown
|
page read and write
|
|
|
|
20AEFB80000
|
unkown
|
page readonly
|
|
|
|
7FF5DF667000
|
unkown
|
page readonly
|
|
|
|
7FF5025E9000
|
unkown
|
page readonly
|
|
|
|
23A82656000
|
unkown
|
page read and write
|
|
|
|
7FF544446000
|
unkown
|
page readonly
|
|
|
|
24CFFB3B000
|
unkown
|
page read and write
|
|
|
|
24CFFB7F000
|
unkown
|
page read and write
|
|
|
|
7FF5C4597000
|
unkown
|
page readonly
|
|
|
|
7FF55B3F8000
|
unkown
|
page readonly
|
|
|
|
CFBA6FF000
|
unkown
|
page read and write
|
|
|
|
7FF574F0A000
|
unkown
|
page readonly
|
|
|
|
26BE46D0000
|
heap default
|
page read and write
|
|
|
|
7FF5DF4C7000
|
unkown
|
page readonly
|
|
|
|
7FF5BE35E000
|
unkown
|
page readonly
|
|
|
|
1DBE1550000
|
unkown
|
page read and write
|
|
|
|
24CFF400000
|
unkown
|
page readonly
|
|
|
|
4DEF577000
|
unkown
|
page read and write
|
|
|
|
7FF50FF77000
|
unkown
|
page readonly
|
|
|
|
24CFF0B0000
|
heap private
|
page read and write
|
|
|
|
7FF5444D0000
|
unkown
|
page readonly
|
|
|
|
1FFCE050000
|
heap private
|
page read and write
|
|
|
|
1FFCE213000
|
unkown
|
page read and write
|
|
|
|
7FF51DF13000
|
unkown
|
page readonly
|
|
|
|
1DBDC071000
|
unkown
|
page read and write
|
|
|
|
7FF59C17E000
|
unkown
|
page readonly
|
|
|
|
199569E0000
|
unkown
|
page readonly
|
|
|
|
7FF59C038000
|
unkown
|
page readonly
|
|
|
|
7FF51E216000
|
unkown
|
page readonly
|
|
|
|
7FF59BF05000
|
unkown
|
page readonly
|
|
|
|
1F364060000
|
unkown
|
page readonly
|
|
|
|
23A8478C000
|
unkown
|
page read and write
|
|
|
|
202380F0000
|
heap default
|
page read and write
|
|
|
|
20238268000
|
unkown
|
page read and write
|
|
|
|
19956A72000
|
unkown
|
page read and write
|
|
|
|
20E6D1E1000
|
unkown
|
page read and write
|
|
|
|
7FF5DF72A000
|
unkown
|
page readonly
|
|
|
|
7FF51E20D000
|
unkown
|
page readonly
|
|
|
|
7FF4F7D01000
|
unkown
|
page readonly
|
|
|
|
67F590B000
|
unkown
|
page read and write
|
|
|
|
7FF4F7D37000
|
unkown
|
page readonly
|
|
|
|
24CFFB5E000
|
unkown
|
page read and write
|
|
|
|
1DBE17B0000
|
unkown
|
page read and write
|
|
|
|
1D7C6710000
|
heap private
|
page read and write
|
|
|
|
6A809FC000
|
unkown
|
page read and write
|
|
|
|
1F363A5A000
|
unkown
|
page read and write
|
|
|
|
7FF51E1B8000
|
unkown
|
page readonly
|
|
|
|
3EC037E000
|
unkown
|
page read and write
|
|
|
|
1D7C685F000
|
unkown
|
page read and write
|
|
|
|
7FF5C43DC000
|
unkown
|
page readonly
|
|
|
|
1DBE18B4000
|
unkown
|
page read and write
|
|
|
|
1DBDC200000
|
unkown
|
page readonly
|
|
|
|
23A85010000
|
unkown
|
page read and write
|
|
|
|
4DEFFFB000
|
unkown
|
page read and write
|
|
|
|
7FF4F7CA2000
|
unkown
|
page readonly
|
|
|
|
7FF5C4637000
|
unkown
|
page readonly
|
|
|
|
1F363CD0000
|
unkown
|
page readonly
|
|
|
|
19956A56000
|
unkown
|
page read and write
|
|
|
|
26A66520000
|
heap private
|
page read and write
|
|
|
|
7FF5DF70A000
|
unkown
|
page readonly
|
|
|
|
23A828D0000
|
unkown
|
page readonly
|
|
|
|
26A66800000
|
unkown
|
page readonly
|
|
|
|
20AEF413000
|
unkown
|
page read and write
|
|
|
|
7FF5ED4FF000
|
unkown
|
page readonly
|
|
|
|
23A84736000
|
unkown
|
page read and write
|
|
|
|
2C232900000
|
unkown
|
page readonly
|
|
|
|
7FF50FFCE000
|
unkown
|
page readonly
|
|
|
|
24CFFB81000
|
unkown
|
page read and write
|
|
|
|
24CFFB64000
|
unkown
|
page read and write
|
|
|
|
1D7C6844000
|
unkown
|
page read and write
|
|
|
|
1FFCE26D000
|
unkown
|
page read and write
|
|
|
|
1FC71658000
|
unkown
|
page read and write
|
|
|
|
7FF55B5FA000
|
unkown
|
page readonly
|
|
|
|
7FF544531000
|
unkown
|
page readonly
|
|
|
|
19956A6E000
|
unkown
|
page read and write
|
|
|
|
7FF5ED1BD000
|
unkown
|
page readonly
|
|
|
|
7FF53C661000
|
unkown
|
page readonly
|
|
|
|
7FF55E48F000
|
unkown
|
page readonly
|
|
|
|
7FF5ECD75000
|
unkown
|
page readonly
|
|
|
|
7FF542D71000
|
unkown
|
page readonly
|
|
|
|
7FF53CD15000
|
unkown
|
page readonly
|
|
|
|
7FF5C3EFC000
|
unkown
|
page readonly
|
|
|
|
26A6662A000
|
unkown
|
page read and write
|
|
|
|
20E6D0A0000
|
unkown
|
page read and write
|
|
|
|
7FF5ED51D000
|
unkown
|
page readonly
|
|
|
|
7FF59C138000
|
unkown
|
page readonly
|
|
|
|
7FF5434BA000
|
unkown
|
page readonly
|
|
|
|
1D7C6780000
|
unkown
|
page readonly
|
|
|
|
7FF59C0E1000
|
unkown
|
page readonly
|
|
|
|
1DBE1854000
|
unkown
|
page read and write
|
|
|
|
7FF51E010000
|
unkown
|
page readonly
|
|
|
|
26A6668A000
|
unkown
|
page read and write
|
|
|
|
23A826F2000
|
unkown
|
page read and write
|
|
|
|
7FF4F7957000
|
unkown
|
page readonly
|
|
|
|
1FFCE229000
|
unkown
|
page read and write
|
|
|
|
445F07F000
|
unkown
|
page read and write
|
|
|
|
23A84A00000
|
unkown
|
page read and write
|
|
|
|
7FF4F7D16000
|
unkown
|
page readonly
|
|
|
|
28CE548F000
|
unkown
|
page read and write
|
|
|
|
7FF542D67000
|
unkown
|
page readonly
|
|
|
|
24CFFB2D000
|
unkown
|
page read and write
|
|
|
|
91D2CFB000
|
unkown
|
page read and write
|
|
|
|
7FF5C46D6000
|
unkown
|
page readonly
|
|
|
|
20238313000
|
unkown
|
page read and write
|
|
|
|
26A66700000
|
unkown
|
page read and write
|
|
|
|
7FF59B8D7000
|
unkown
|
page readonly
|
|
|
|
7FF54363F000
|
unkown
|
page readonly
|
|
|
|
23A84B02000
|
unkown
|
page read and write
|
|
|
|
24CFFB5B000
|
unkown
|
page read and write
|
|
|
|
24CFF870000
|
unkown
|
page read and write
|
|
|
|
7FF55B736000
|
unkown
|
page readonly
|
|
|
|
24CFFB38000
|
unkown
|
page read and write
|
|
|
|
7FF5ED1CF000
|
unkown
|
page readonly
|
|
|
|
1F363A8B000
|
unkown
|
page read and write
|
|
|
|
23A84943000
|
unkown
|
page read and write
|
|
|
|
20238279000
|
unkown
|
page read and write
|
|
|
|
7FF543608000
|
unkown
|
page readonly
|
|
|
|
7FF5BDE5A000
|
unkown
|
page readonly
|
|
|
|
1FC71618000
|
heap default
|
page read and write
|
|
|
|
24CFFB52000
|
unkown
|
page read and write
|
|
|
|
7FF54332A000
|
unkown
|
page readonly
|
|
|
|
24CFF2A4000
|
unkown
|
page read and write
|
|
|
|
7FF5ED4F5000
|
unkown
|
page readonly
|
|
|
|
7FF55B829000
|
unkown
|
page readonly
|
|
|
|
23A847FF000
|
unkown
|
page read and write
|
|
|
|
26A6664A000
|
unkown
|
page read and write
|
|
|
|
26BE4E80000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2DC000
|
unkown
|
page readonly
|
|
|
|
7FF502722000
|
unkown
|
page readonly
|
|
|
|
26A66650000
|
unkown
|
page read and write
|
|
|
|
1DBE18B5000
|
unkown
|
page read and write
|
|
|
|
24CFFB3D000
|
unkown
|
page read and write
|
|
|
|
6A80CFE000
|
unkown
|
page read and write
|
|
|
|
7FF59C1E0000
|
unkown
|
page readonly
|
|
|
|
23A848B5000
|
unkown
|
page read and write
|
|
|
|
7FF55E66D000
|
unkown
|
page readonly
|
|
|
|
7FF51E1F9000
|
unkown
|
page readonly
|
|
|
|
67F5D7A000
|
unkown
|
page read and write
|
|
|
|
7FF5443DE000
|
unkown
|
page readonly
|
|
|
|
7FF59BF10000
|
unkown
|
page readonly
|
|
|
|
C90347D000
|
unkown
|
page read and write
|
|
|
|
24CFFB64000
|
unkown
|
page read and write
|
|
|
|
24CFF2E9000
|
unkown
|
page read and write
|
|
|
|
7FF5C4291000
|
unkown
|
page readonly
|
|
|
|
1D45FE00000
|
unkown
|
page read and write
|
|
|
|
7FF5DF859000
|
unkown
|
page readonly
|
|
|
|
2C2325D0000
|
unkown
|
page read and write
|
|
|
|
7FF59C1CC000
|
unkown
|
page readonly
|
|
|
|
23A8471F000
|
unkown
|
page read and write
|
|
|
|
3EC007C000
|
unkown
|
page read and write
|
|
|
|
C9030FE000
|
unkown
|
page read and write
|
|
|
|
23A84A42000
|
unkown
|
page read and write
|
|
|
|
24D00000000
|
unkown
|
page read and write
|
|
|
|
1F365570000
|
unkown
|
page readonly
|
|
|
|
7FF59C7F8000
|
unkown
|
page readonly
|
|
|
|
1DBDD4C0000
|
unkown
|
page read and write
|
|
|
|
FE02478000
|
unkown
|
page read and write
|
|
|
|
7FF55E547000
|
unkown
|
page readonly
|
|
|
|
220D1C50000
|
unkown
|
page read and write
|
|
|
|
23A82671000
|
unkown
|
page read and write
|
|
|
|
24CFFB60000
|
unkown
|
page read and write
|
|
|
|
1FC715E0000
|
unkown
|
page read and write
|
|
|
|
FD0FF7B000
|
unkown
|
page read and write
|
|
|
|
24CFF2CB000
|
unkown
|
page read and write
|
|
|
|
7FF59C85C000
|
unkown
|
page readonly
|
|
|
|
7FF5C4648000
|
unkown
|
page readonly
|
|
|
|
23A84864000
|
unkown
|
page read and write
|
|
|
|
7FF5C4695000
|
unkown
|
page readonly
|
|
|
|
24CFFB38000
|
unkown
|
page read and write
|
|
|
|
7FF5BE361000
|
unkown
|
page readonly
|
|
|
|
7FF50FAE0000
|
unkown
|
page readonly
|
|
|
|
9FDC3FE000
|
unkown
|
page read and write
|
|
|
|
7FF5ED52C000
|
unkown
|
page readonly
|
|
|
|
202381D0000
|
unkown
|
page readonly
|
|
|
|
7FF5DF77A000
|
unkown
|
page readonly
|
|
|
|
7FF53CCE6000
|
unkown
|
page readonly
|
|
|
|
91D327E000
|
unkown
|
page read and write
|
|
|
|
23A8268E000
|
unkown
|
page read and write
|
|
|
|
1DBE1758000
|
unkown
|
page write copy
|
|
|
|
7FF55B6D7000
|
unkown
|
page readonly
|
|
|
|
1D7C6831000
|
unkown
|
page read and write
|
|
|
|
23A826C5000
|
unkown
|
page read and write
|
|
|
|
9FDC0FF000
|
unkown
|
page read and write
|
|
|
|
7FF5ED33F000
|
unkown
|
page readonly
|
|
|
|
23A84943000
|
unkown
|
page read and write
|
|
|
|
7FF5C4387000
|
unkown
|
page readonly
|
|
|
|
23A82678000
|
unkown
|
page read and write
|
|
|
|
7FF50FF46000
|
unkown
|
page readonly
|
|
|
|
7FF543423000
|
unkown
|
page readonly
|
|
|
|
7FF5C4563000
|
unkown
|
page readonly
|
|
|
|
28CE53E0000
|
unkown
|
page read and write
|
|
|
|
28CE5456000
|
unkown
|
page read and write
|
|
|
|
1DBE1530000
|
unkown
|
page read and write
|
|
|
|
7FF59C7FA000
|
unkown
|
page readonly
|
|
|
|
7FF59B9AC000
|
unkown
|
page readonly
|
|
|
|
7FF543649000
|
unkown
|
page readonly
|
|
|
|
26BE483C000
|
unkown
|
page read and write
|
|
|
|
24CFF2F6000
|
unkown
|
page read and write
|
|
|
|
7FF5435E4000
|
unkown
|
page readonly
|
|
|
|
1F363A4A000
|
unkown
|
page read and write
|
|
|
|
28CE547B000
|
unkown
|
page read and write
|
|
|
|
7FF59C1E7000
|
unkown
|
page readonly
|
|
|
|
7FF55B365000
|
unkown
|
page readonly
|
|
|
|
7FF59BA29000
|
unkown
|
page readonly
|
|
|
|
7FF50273A000
|
unkown
|
page readonly
|
|
|
|
220D2270000
|
unkown
|
page readonly
|
|
|
|
7FF4F7CE9000
|
unkown
|
page readonly
|
|
|
|
CFBA3FB000
|
unkown
|
page read and write
|
|
|
|
7FF574D22000
|
unkown
|
page readonly
|
|
|
|
9FDBF75000
|
unkown
|
page read and write
|
|
|
|
7FF5ED425000
|
unkown
|
page readonly
|
|
|
|
7FF55E42A000
|
unkown
|
page readonly
|
|
|
|
7FF50FED0000
|
unkown
|
page readonly
|
|
|
|
7FF574CAE000
|
unkown
|
page readonly
|
|
|
|
7FF5C4666000
|
unkown
|
page readonly
|
|
|
|
7FF5ED49C000
|
unkown
|
page readonly
|
|
|
|
24CFFB62000
|
unkown
|
page read and write
|
|
|
|
24CFFB3B000
|
unkown
|
page read and write
|
|
|
|
91D297B000
|
unkown
|
page read and write
|
|
|
|
7FF4F7D1C000
|
unkown
|
page readonly
|
|
|
|
4DEFA7F000
|
unkown
|
page read and write
|
|
|
|
7FF59B9C7000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2CD000
|
unkown
|
page readonly
|
|
|
|
24CFFB9D000
|
unkown
|
page read and write
|
|
|
|
220D1E00000
|
unkown
|
page readonly
|
|
|
|
20E6D3F0000
|
heap private
|
page read and write
|
|
|
|
7FF502710000
|
unkown
|
page readonly
|
|
|
|
24CFF1F0000
|
unkown
|
page readonly
|
|
|
|
1D7C687A000
|
unkown
|
page read and write
|
|
|
|
253AC400000
|
unkown
|
page read and write
|
|
|
|
7FF55DD90000
|
unkown
|
page readonly
|
|
|
|
7FF5C4759000
|
unkown
|
page readonly
|
|
|
|
7FF5750C6000
|
unkown
|
page readonly
|
|
|
|
FE01FFE000
|
unkown
|
page read and write
|
|
|
|
7FF5ED23C000
|
unkown
|
page readonly
|
|
|
|
23A84570000
|
unkown
|
page read and write
|
|
|
|
23A84B00000
|
unkown
|
page read and write
|
|
|
|
7FF59C0EA000
|
unkown
|
page readonly
|
|
|
|
1D7C6883000
|
unkown
|
page read and write
|
|
|
|
9FDC2FF000
|
unkown
|
page read and write
|
|
|
|
A0563FE000
|
unkown
|
page read and write
|
|
|
|
23A84811000
|
unkown
|
page read and write
|
|
|
|
7FF595A37000
|
unkown
|
page readonly
|
|
|
|
7FF544430000
|
unkown
|
page readonly
|
|
|
|
7FF5ED47B000
|
unkown
|
page readonly
|
|
|
|
7FF51E161000
|
unkown
|
page readonly
|
|
|
|
7FF55B720000
|
unkown
|
page readonly
|
|
|
|
24CFFB55000
|
unkown
|
page read and write
|
|
|
|
7FF574F60000
|
unkown
|
page readonly
|
|
|
|
26A67000000
|
unkown
|
page readonly
|
|
|
|
7FF50FF56000
|
unkown
|
page readonly
|
|
|
|
7FF59C0F4000
|
unkown
|
page readonly
|
|
|
|
7FF55B779000
|
unkown
|
page readonly
|
|
|
|
7FF5DF76A000
|
unkown
|
page readonly
|
|
|
|
24D00054000
|
unkown
|
page read and write
|
|
|
|
24CFFB00000
|
unkown
|
page read and write
|
|
|
|
24CFFB64000
|
unkown
|
page read and write
|
|
|
|
7FF59BECC000
|
unkown
|
page readonly
|
|
|
|
1DBE1AD0000
|
unkown
|
page readonly
|
|
|
|
1DBE17F0000
|
unkown
|
page readonly
|
|
|
|
6A80BFF000
|
unkown
|
page read and write
|
|
|
|
7FF574ECF000
|
unkown
|
page readonly
|
|
|
|
8E9C17E000
|
unkown
|
page read and write
|
|
|
|
3EC00FE000
|
unkown
|
page read and write
|
|
|
|
220D2402000
|
unkown
|
page read and write
|
|
|
|
28CE53A0000
|
unkown
|
page readonly
|
|
|
|
7FF51DA8C000
|
unkown
|
page readonly
|
|
|
|
1D7C6770000
|
heap default
|
page read and write
|
|
|
|
F8518FB000
|
unkown
|
page read and write
|
|
|
|
20E6D1C6000
|
unkown
|
page read and write
|
|
|
|
19956A72000
|
unkown
|
page read and write
|
|
|
|
23A82672000
|
unkown
|
page read and write
|
|
|
|
6A811FD000
|
unkown
|
page read and write
|
|
|
|
1DBDD160000
|
unkown
|
page readonly
|
|
|
|
23A84736000
|
unkown
|
page read and write
|
|
|
|
7FF55E200000
|
unkown
|
page readonly
|
|
|
|
1FC72420000
|
unkown
|
page read and write
|
|
|
|
2C23441F000
|
heap private
|
page read and write
|
|
|
|
F851B7D000
|
unkown
|
page read and write
|
|
|
|
7FF5DF79F000
|
unkown
|
page readonly
|
|
|
|
220D1C71000
|
unkown
|
page read and write
|
|
|
|
1F365470000
|
unkown
|
page read and write
|
|
|
|
1FFCE26B000
|
unkown
|
page read and write
|
|
|
|
7FF5C4633000
|
unkown
|
page readonly
|
|
|
|
24CFF2DA000
|
unkown
|
page read and write
|
|
|
|
91D26FF000
|
unkown
|
page read and write
|
|
|
|
1FFCE1E0000
|
unkown
|
page readonly
|
|
|
|
445F0FE000
|
unkown
|
page read and write
|
|
|
|
7FF5026EA000
|
unkown
|
page readonly
|
|
|
|
23A82800000
|
unkown
|
page readonly
|
|
|
|
1D45FB90000
|
unkown
|
page read and write
|
|
|
|
7FF59C08C000
|
unkown
|
page readonly
|
|
|
|
7FF5C436C000
|
unkown
|
page readonly
|
|
|
|
26BE4889000
|
unkown
|
page read and write
|
|
|
|
7FF4F7D25000
|
unkown
|
page readonly
|
|
|
|
FD106FF000
|
unkown
|
page read and write
|
|
|
|
7FF54335D000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7F4000
|
unkown
|
page readonly
|
|
|
|
7FF543585000
|
unkown
|
page readonly
|
|
|
|
1D7C6874000
|
unkown
|
page read and write
|
|
|
|
23A8274B000
|
unkown
|
page read and write
|
|
|
|
7FF5ED1CC000
|
unkown
|
page readonly
|
|
|
|
26BE47B0000
|
unkown
|
page readonly
|
|
|
|
1D45F510000
|
unkown
|
page readonly
|
|
|
|
253AC350000
|
heap default
|
page read and write
|
|
|
|
20E6D1DF000
|
unkown
|
page read and write
|
|
|
|
23A84847000
|
unkown
|
page read and write
|
|
|
|
1DBDC815000
|
unkown
|
page read and write
|
|
|
|
7FF5ECD98000
|
unkown
|
page readonly
|
|
|
|
23A82713000
|
unkown
|
page read and write
|
|
|
|
6A80FFC000
|
unkown
|
page read and write
|
|
|
|
91D29FD000
|
unkown
|
page read and write
|
|
|
|
1DBDC800000
|
unkown
|
page read and write
|
|
|
|
1DBDC078000
|
unkown
|
page read and write
|
|
|
|
7FF5444A1000
|
unkown
|
page readonly
|
|
|
|
24CFFBC1000
|
unkown
|
page read and write
|
|
|
|
7FF50275F000
|
unkown
|
page readonly
|
|
|
|
7FF59B693000
|
unkown
|
page readonly
|
|
|
|
1D45F600000
|
unkown
|
page read and write
|
|
|
|
7FF55E541000
|
unkown
|
page readonly
|
|
|
|
23A8267C000
|
unkown
|
page read and write
|
|
|
|
1D7C6861000
|
unkown
|
page read and write
|
|
|
|
23A82758000
|
unkown
|
page read and write
|
|
|
|
23A82738000
|
unkown
|
page read and write
|
|
|
|
7FF5ED280000
|
unkown
|
page readonly
|
|
|
|
7FF5ED14E000
|
unkown
|
page readonly
|
|
|
|
23A8268E000
|
unkown
|
page read and write
|
|
|
|
24CFFA02000
|
unkown
|
page read and write
|
|
|
|
1FC71710000
|
unkown
|
page read and write
|
|
|
|
7FF50FF1F000
|
unkown
|
page readonly
|
|
|
|
7FF53CCE8000
|
unkown
|
page readonly
|
|
|
|
253AC360000
|
unkown
|
page readonly
|
|
|
|
7FF5ED188000
|
unkown
|
page readonly
|
|
|
|
20238090000
|
heap private
|
page read and write
|
|
|
|
24CFFB86000
|
unkown
|
page read and write
|
|
|
|
26A66613000
|
unkown
|
page read and write
|
|
|
|
1DBDC802000
|
unkown
|
page read and write
|
|
|
|
26BE4891000
|
unkown
|
page read and write
|
|
|
|
7FF5DF5C0000
|
unkown
|
page readonly
|
|
|
|
7FF5433C0000
|
unkown
|
page readonly
|
|
|
|
7FF50FFD1000
|
unkown
|
page readonly
|
|
|
|
20238213000
|
unkown
|
page read and write
|
|
|
|
4DEFCFD000
|
unkown
|
page read and write
|
|
|
|
7FF59B95E000
|
unkown
|
page readonly
|
|
|
|
91D2FFD000
|
unkown
|
page read and write
|
|
|
|
7FF5ED5B9000
|
unkown
|
page readonly
|
|
|
|
24D00002000
|
unkown
|
page read and write
|
|
|
|
7FF51E2A9000
|
unkown
|
page readonly
|
|
|
|
19956A6C000
|
unkown
|
page read and write
|
|
|
|
7FF4F7B1F000
|
unkown
|
page readonly
|
|
|
|
24CFFB81000
|
unkown
|
page read and write
|
|
|
|
1DBE17B0000
|
unkown
|
page read and write
|
|
|
|
7FF59C1AD000
|
unkown
|
page readonly
|
|
|
|
9FDC07B000
|
unkown
|
page read and write
|
|
|
|
1D7C6834000
|
unkown
|
page read and write
|
|
|
|
1F363A68000
|
unkown
|
page read and write
|
|
|
|
20E6D1B0000
|
heap default
|
page read and write
|
|
|
|
7FF574CB2000
|
unkown
|
page readonly
|
|
|
|
FD0FFFF000
|
unkown
|
page read and write
|
|
|
|
28CE5600000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7F0000
|
unkown
|
page readonly
|
|
|
|
26A66708000
|
unkown
|
page read and write
|
|
|
|
220D1C4E000
|
unkown
|
page read and write
|
|
|
|
7FF5C438A000
|
unkown
|
page readonly
|
|
|
|
7FF5C4662000
|
unkown
|
page readonly
|
|
|
|
1F363B00000
|
unkown
|
page read and write
|
|
|
|
445F1F9000
|
unkown
|
page read and write
|
|
|
|
23A82658000
|
unkown
|
page read and write
|
|
|
|
3EC02FD000
|
unkown
|
page read and write
|
|
|
|
24CFFB9F000
|
unkown
|
page read and write
|
|
|
|
1D7C686A000
|
unkown
|
page read and write
|
|
|
|
20238C00000
|
unkown
|
page readonly
|
|
|
|
2C232678000
|
heap default
|
page read and write
|
|
|
|
7FF5ED371000
|
unkown
|
page readonly
|
|
|
|
7FF54414C000
|
unkown
|
page readonly
|
|
|
|
91D2B7B000
|
unkown
|
page read and write
|
|
|
|
7FF53C52A000
|
unkown
|
page readonly
|
|
|
|
1F365800000
|
unkown
|
page readonly
|
|
|
|
1DBE1747000
|
unkown
|
page readonly
|
|
|
|
1F363A4A000
|
unkown
|
page read and write
|
|
|
|
19958470000
|
unkown
|
page read and write
|
|
|
|
23A82629000
|
unkown
|
page read and write
|
|
|
|
23A85110000
|
unkown
|
page read and write
|
|
|
|
3409D7A000
|
unkown
|
page read and write
|
|
|
|
1DBDC760000
|
unkown
|
page read and write
|
|
|
|
1FFCFBA0000
|
unkown
|
page read and write
|
|
|
|
1FC71840000
|
unkown
|
page read and write
|
|
|
|
7FF50FEE6000
|
unkown
|
page readonly
|
|
|
|
7FF53C52C000
|
unkown
|
page readonly
|
|
|
|
7FF595A30000
|
unkown
|
page readonly
|
|
|
|
23A82673000
|
unkown
|
page read and write
|
|
|
|
24CFFBA7000
|
unkown
|
page read and write
|
|
|
|
26BE4855000
|
unkown
|
page read and write
|
|
|
|
23A84723000
|
unkown
|
page read and write
|
|
|
|
7FF55E1FA000
|
unkown
|
page readonly
|
|
|
|
7FF5ED42C000
|
unkown
|
page readonly
|
|
|
|
23A84550000
|
unkown
|
page read and write
|
|
|
|
23A8267E000
|
unkown
|
page read and write
|
|
|
|
7FF53CD5C000
|
unkown
|
page readonly
|
|
|
|
26A66580000
|
heap default
|
page read and write
|
|
|
|
7FF59C0B5000
|
unkown
|
page readonly
|
|
|
|
220D21A0000
|
unkown
|
page readonly
|
|
|
|
7FF55B796000
|
unkown
|
page readonly
|
|
|
|
24CFFB7E000
|
unkown
|
page read and write
|
|
|
|
24CFFBA2000
|
unkown
|
page read and write
|
|
|
|
24CFF26F000
|
unkown
|
page read and write
|
|
|
|
7FF575052000
|
unkown
|
page readonly
|
|
|
|
7FF55E64F000
|
unkown
|
page readonly
|
|
|
|
CFBA0FE000
|
unkown
|
page read and write
|
|
|
|
28CE546F000
|
unkown
|
page read and write
|
|
|
|
A05627A000
|
unkown
|
page read and write
|
|
|
|
7FF59B96F000
|
unkown
|
page readonly
|
|
|
|
7FF4F7CFD000
|
unkown
|
page readonly
|
|
|
|
24CFFB33000
|
unkown
|
page read and write
|
|
|
|
1DBDD040000
|
unkown
|
page read and write
|
|
|
|
7FF5ED4B0000
|
unkown
|
page readonly
|
|
|
|
7FF5ED1C6000
|
unkown
|
page readonly
|
|
|
|
A05637F000
|
unkown
|
page read and write
|
|
|
|
253AC413000
|
unkown
|
page read and write
|
|
|
|
FE02678000
|
unkown
|
page read and write
|
|
|
|
24CFF890000
|
unkown
|
page readonly
|
|
|
|
7FF502819000
|
unkown
|
page readonly
|
|
|
|
7FF59C156000
|
unkown
|
page readonly
|
|
|
|
1D45FBC0000
|
unkown
|
page read and write
|
|
|
|
7FF5026FC000
|
unkown
|
page readonly
|
|
|
|
91D2A7A000
|
unkown
|
page read and write
|
|
|
|
20E6D400000
|
unkown
|
page readonly
|
|
|
|
26BE4908000
|
unkown
|
page read and write
|
|
|
|
7FF55B722000
|
unkown
|
page readonly
|
|
|
|
7FF55E6A4000
|
unkown
|
page readonly
|
|
|
|
23A847DC000
|
unkown
|
page read and write
|
|
|
|
7FF59C11A000
|
unkown
|
page readonly
|
|
|
|
1DBE17B0000
|
unkown
|
page read and write
|
|
|
|
7FF5025B8000
|
unkown
|
page readonly
|
|
|
|
23A85110000
|
unkown
|
page read and write
|
|
|
|
1F363B02000
|
unkown
|
page read and write
|
|
|
|
7FF595A25000
|
unkown
|
page readonly
|
|
|
|
7FF53CD3D000
|
unkown
|
page readonly
|
|
|
|
1F365560000
|
unkown
|
page read and write
|
|
|
|
1FC718A5000
|
heap private
|
page read and write
|
|
|
|
7FF5C41C9000
|
unkown
|
page readonly
|
|
|
|
DB7F3B000
|
unkown
|
page read and write
|
|
|
|
1DBE1650000
|
unkown
|
page read and write
|
|
|
|
7FF55B590000
|
unkown
|
page readonly
|
|
|
|
220D1C00000
|
unkown
|
page read and write
|
|
|
|
23A8266D000
|
unkown
|
page read and write
|
|
|
|
1D45F702000
|
unkown
|
page read and write
|
|
|
|
7FF53CDD9000
|
unkown
|
page readonly
|
|
|
|
28CE5502000
|
unkown
|
page read and write
|
|
|
|
28CE5513000
|
unkown
|
page read and write
|
|
|
|
7FF55B829000
|
unkown
|
page readonly
|
|
|
|
7FF57504D000
|
unkown
|
page readonly
|
|
|
|
7FF5ED554000
|
unkown
|
page readonly
|
|
|
|
19956920000
|
heap private
|
page read and write
|
|
|
|
7FF55B363000
|
unkown
|
page readonly
|
|
|
|
1D7C7002000
|
unkown
|
page read and write
|
|
|
|
91D21DB000
|
unkown
|
page read and write
|
|
|
|
23A8269E000
|
unkown
|
page read and write
|
|
|
|
FD10577000
|
unkown
|
page read and write
|
|
|
|
FE0237F000
|
unkown
|
page read and write
|
|
|
|
7FF59B93A000
|
unkown
|
page readonly
|
|
|
|
1D7C67A0000
|
unkown
|
page read and write
|
|
|
|
20E6D1DF000
|
unkown
|
page read and write
|
|
|
|
7FF53C531000
|
unkown
|
page readonly
|
|
|
|
202381F0000
|
unkown
|
page read and write
|
|
|
|
24CFF790000
|
unkown
|
page readonly
|
|
|
|
91D28FB000
|
unkown
|
page read and write
|
|
|
|
7FF51E240000
|
unkown
|
page readonly
|
|
|
|
7FF5ED497000
|
unkown
|
page readonly
|
|
|
|
1DBE18A4000
|
unkown
|
page read and write
|
|
|
|
26BE4670000
|
heap private
|
page read and write
|
|
|
|
1DBDC000000
|
unkown
|
page read and write
|
|
|
|
C90317E000
|
unkown
|
page read and write
|
|
|
|
7FF574F6C000
|
unkown
|
page readonly
|
|
|
|
7FF5750AD000
|
unkown
|
page readonly
|
|
|
|
19956A72000
|
unkown
|
page read and write
|
|
|
|
23A84983000
|
unkown
|
page read and write
|
|
|
|
7FF53CC4C000
|
unkown
|
page readonly
|
|
|
|
7FF5ED31E000
|
unkown
|
page readonly
|
|
|
|
7FF5444AC000
|
unkown
|
page readonly
|
|
|
|
7FF59C1C6000
|
unkown
|
page readonly
|
|
|
|
7FF55B820000
|
unkown
|
page readonly
|
|
|
|
1D7C6813000
|
unkown
|
page read and write
|
|
|
|
1D7C6847000
|
unkown
|
page read and write
|
|
|
|
7FF51E098000
|
unkown
|
page readonly
|
|
|
|
7FF51E244000
|
unkown
|
page readonly
|
|
|
|
1FC71600000
|
unkown
|
page readonly
|
|
|
|
C8AF17F000
|
unkown
|
page read and write
|
|
|
|
26BE4A00000
|
unkown
|
page readonly
|
|
|
|
1F363A42000
|
unkown
|
page read and write
|
|
|
|
1DBE1670000
|
unkown
|
page read and write
|
|
|
|
19956A6C000
|
unkown
|
page read and write
|
|
|
|
20E6D1C6000
|
heap default
|
page read and write
|
|
|
|
7FF54452E000
|
unkown
|
page readonly
|
|
|
|
7FF50FDAA000
|
unkown
|
page readonly
|
|
|
|
7FF53C657000
|
unkown
|
page readonly
|
|
|
|
1DBE1A00000
|
unkown
|
page readonly
|
|
|
|
7FF595A99000
|
unkown
|
page readonly
|
|
|
|
7FF5ED36C000
|
unkown
|
page readonly
|
|
|
|
24CFF930000
|
unkown
|
page readonly
|
|
|
|
7FF4F7964000
|
unkown
|
page readonly
|
|
|
|
DB88FC000
|
unkown
|
page read and write
|
|
|
|
1DBDC7E3000
|
unkown
|
page read and write
|
|
|
|
7FF5435E8000
|
unkown
|
page readonly
|
|
|
|
24CFF227000
|
unkown
|
page read and write
|
|
|
|
1FFCE302000
|
unkown
|
page read and write
|
|
|
|
20AEFA70000
|
unkown
|
page readonly
|
|
|
|
1D7C6902000
|
unkown
|
page read and write
|
|
|
|
24CFFBA3000
|
unkown
|
page read and write
|
|
|
|
23A84580000
|
unkown
|
page readonly
|
|
|
|
DB85FE000
|
unkown
|
page read and write
|
|
|
|
23A84823000
|
unkown
|
page read and write
|
|
|
|
6A80EFB000
|
unkown
|
page read and write
|
|
|
|
7FF5C44DF000
|
unkown
|
page readonly
|
|
|
|
19956990000
|
unkown
|
page write copy
|
|
|
|
1F365580000
|
unkown
|
page readonly
|
|
|
|
7FF59C0BC000
|
unkown
|
page readonly
|
|
|
|
23A844C0000
|
unkown
|
page readonly
|
|
|
|
220D2280000
|
unkown
|
page read and write
|
|
|
|
4DEFEFE000
|
unkown
|
page read and write
|
|
|
|
7FF5DF4C3000
|
unkown
|
page readonly
|
|
|
|
7FF59C0F7000
|
unkown
|
page readonly
|
|
|
|
91D2E7B000
|
unkown
|
page read and write
|
|
|
|
1D45F430000
|
heap default
|
page read and write
|
|
|
|
7FF575099000
|
unkown
|
page readonly
|
|
|
|
7FF53CC03000
|
unkown
|
page readonly
|
|
|
|
1FC71850000
|
unkown
|
page read and write
|
|
|
|
7FF4F7D8E000
|
unkown
|
page readonly
|
|
|
|
7FF5BE158000
|
unkown
|
page readonly
|
|
|
|
26BE4800000
|
unkown
|
page read and write
|
|
|
|
1FFCE23F000
|
unkown
|
page read and write
|
|
|
|
7FF5C46E5000
|
unkown
|
page readonly
|
|
|
|
253AC454000
|
unkown
|
page read and write
|
|
|
|
7FF59BD7D000
|
unkown
|
page readonly
|
|
|
|
1DBDC913000
|
unkown
|
page read and write
|
|
|
|
1DBDD180000
|
unkown
|
page readonly
|
|
|
|
19958570000
|
unkown
|
page readonly
|
|
|
|
1D7C686E000
|
unkown
|
page read and write
|
|
|
|
7FF59BF6B000
|
unkown
|
page readonly
|
|
|
|
1FC71E50000
|
unkown
|
page readonly
|
|
|
|
23A8268D000
|
unkown
|
page read and write
|
|
|
|
FD1047B000
|
unkown
|
page read and write
|
|
|
|
7FF59BFAE000
|
unkown
|
page readonly
|
|
|
|
7FF5024E0000
|
unkown
|
page readonly
|
|
|
|
1FFCE26D000
|
unkown
|
page read and write
|
|
|
|
23A848D6000
|
unkown
|
page read and write
|
|
|
|
24CFFB29000
|
unkown
|
page read and write
|
|
|
|
7FF50257E000
|
unkown
|
page readonly
|
|
|
|
19956A6E000
|
unkown
|
page read and write
|
|
|
|
7FF544448000
|
unkown
|
page readonly
|
|
|
|
7FF51E2A9000
|
unkown
|
page readonly
|
|
|
|
7FF5ED493000
|
unkown
|
page readonly
|
|
|
|
F851A7F000
|
unkown
|
page read and write
|
|
|
|
19956A6D000
|
unkown
|
page read and write
|
|
|
|
7FF5027B0000
|
unkown
|
page readonly
|
|
|
|
7FF55B81E000
|
unkown
|
page readonly
|
|
|
|
253AD140000
|
unkown
|
page readonly
|
|
|
|
7FF5DF859000
|
unkown
|
page readonly
|
|
|
|
7FF574E74000
|
unkown
|
page readonly
|
|
|
|
19956CD0000
|
unkown
|
page readonly
|
|
|
|
7FF55E612000
|
unkown
|
page readonly
|
|
|
|
7FF574D7E000
|
unkown
|
page readonly
|
|
|
|
1D45F629000
|
unkown
|
page read and write
|
|
|
|
7FF51DF17000
|
unkown
|
page readonly
|
|
|
|
23A8473F000
|
unkown
|
page read and write
|
|
|
|
7FF50FE17000
|
unkown
|
page readonly
|
|
|
|
7FF5027A5000
|
unkown
|
page readonly
|
|
|
|
7FF5C4591000
|
unkown
|
page readonly
|
|
|
|
19956A6C000
|
unkown
|
page read and write
|
|
|
|
19956A72000
|
unkown
|
page read and write
|
|
|
|
7FF5BE29E000
|
unkown
|
page readonly
|
|
|
|
24CFF29D000
|
unkown
|
page read and write
|
|
|
|
91D2EFB000
|
unkown
|
page read and write
|
|
|
|
202381E0000
|
unkown
|
page readonly
|
|
|
|
7FF50FDC8000
|
unkown
|
page readonly
|
|
|
|
26BE484F000
|
unkown
|
page read and write
|
|
|
|
1FFCE200000
|
unkown
|
page read and write
|
|
|
|
7FF5ED509000
|
unkown
|
page readonly
|
|
|
|
7FF5ED557000
|
unkown
|
page readonly
|
|
|
|
23A82680000
|
unkown
|
page read and write
|
|
|
|
7FF59B818000
|
unkown
|
page readonly
|
|
|
|
7FF51E1DE000
|
unkown
|
page readonly
|
|
|
|
26A66622000
|
unkown
|
page read and write
|
|
|
|
7FF5ED4B2000
|
unkown
|
page readonly
|
|
|
|
7FF5ED545000
|
unkown
|
page readonly
|
|
|
|
1DBE1694000
|
unkown
|
page read and write
|
|
|
|
28CE547B000
|
unkown
|
page read and write
|
|
|
|
20238400000
|
unkown
|
page readonly
|
|
|
|
9FDC1F7000
|
unkown
|
page read and write
|
|
|
|
7FF5DF707000
|
unkown
|
page readonly
|
|
|
|
7FF59C839000
|
unkown
|
page readonly
|
|
|
|
7FF55E4CE000
|
unkown
|
page readonly
|
|
|
|
23A8267A000
|
unkown
|
page read and write
|
|
|
|
1DBE18AA000
|
unkown
|
page read and write
|
|
|
|
7FF55B79C000
|
unkown
|
page readonly
|
|
|
|
1D7C6A00000
|
unkown
|
page readonly
|
|
|
|
7FF5436EE000
|
unkown
|
page readonly
|
|
|
|
28CE548E000
|
unkown
|
page read and write
|
|
|
|
23A82690000
|
unkown
|
page read and write
|
|
|
|
7FF55E709000
|
unkown
|
page readonly
|
|
|
|
1DBDC750000
|
unkown
|
page read and write
|
|
|
|
7FF50FF74000
|
unkown
|
page readonly
|
|
|
|
4DEF7FD000
|
unkown
|
page read and write
|
|
|
|
7FF543235000
|
unkown
|
page readonly
|
|
|
|
7FF5ED471000
|
unkown
|
page readonly
|
|
|
|
3EBFBEB000
|
unkown
|
page read and write
|
|
|
|
26BE5200000
|
unkown
|
page readonly
|
|
|
|
FE01E7D000
|
unkown
|
page read and write
|
|
|
|
DB837E000
|
unkown
|
page read and write
|
|
|
|
24CFFB7B000
|
unkown
|
page read and write
|
|
|
|
220D1C6C000
|
unkown
|
page read and write
|
|
|
|
7FF53CB73000
|
unkown
|
page readonly
|
|
|
|
26BE5002000
|
unkown
|
page read and write
|
|
|
|
24CFFBA0000
|
unkown
|
page read and write
|
|
|
|
7FF59C8DE000
|
unkown
|
page readonly
|
|
|
|
1DBDC092000
|
unkown
|
page read and write
|
|
|
|
7FF5435F0000
|
unkown
|
page readonly
|
|
|
|
220D2000000
|
unkown
|
page readonly
|
|
|
|
7FF59C0FA000
|
unkown
|
page readonly
|
|
|
|
7FF5C4652000
|
unkown
|
page readonly
|
|
|
|
19956A6E000
|
unkown
|
page read and write
|
|
|
|
445ED8E000
|
unkown
|
page read and write
|
|
|
|
1F3654E0000
|
unkown
|
page read and write
|
|
|
|
28CE547B000
|
unkown
|
page read and write
|
|
|
|
2C232840000
|
unkown
|
page readonly
|
|
|
|
1D7C6846000
|
unkown
|
page read and write
|
|
|
|
253AC6D0000
|
unkown
|
page readonly
|
|
|
|
7FF4F7D06000
|
unkown
|
page readonly
|
|
|
|
7FF59B996000
|
unkown
|
page readonly
|
|
|
|
7FF5ED4C2000
|
unkown
|
page readonly
|
|
|
|
7FF5BE304000
|
unkown
|
page readonly
|
|
|
|
91D2D7A000
|
unkown
|
page read and write
|
|
|
|
1DBE1650000
|
unkown
|
page read and write
|
|
|
|
23A8267E000
|
unkown
|
page read and write
|
|
|
|
220D22A0000
|
unkown
|
page readonly
|
|
|
|
24CFFBBB000
|
unkown
|
page read and write
|
|
|
|
1FC723F0000
|
unkown
|
page read and write
|
|
|
|
7FF5C46F7000
|
unkown
|
page readonly
|
|
|
|
7FF59C140000
|
unkown
|
page readonly
|
|
|
|
1FFCE26D000
|
unkown
|
page read and write
|
|
|
|
220D1C02000
|
unkown
|
page read and write
|
|
|
|
24CFFB59000
|
unkown
|
page read and write
|
|
|
|
1DBDC08B000
|
unkown
|
page read and write
|
|
|
|
19956980000
|
heap default
|
page read and write
|
|
|
|
7FF5BE173000
|
unkown
|
page readonly
|
|
|
|
1F363A74000
|
unkown
|
page read and write
|
|
|
|
1D7C6790000
|
unkown
|
page readonly
|
|
|
|
CFBA5FD000
|
unkown
|
page read and write
|
|
|
|
7FF5DF7DC000
|
unkown
|
page readonly
|
|
|
|
7FF5C467A000
|
unkown
|
page readonly
|
|
|
|
7FF59B77A000
|
unkown
|
page readonly
|
|
|
|
23A82570000
|
unkown
|
page write copy
|
|
|
|
28CE547B000
|
unkown
|
page read and write
|
|
|
|
2C2325B0000
|
unkown
|
page read and write
|
|
|
|
91D32FE000
|
unkown
|
page read and write
|
|
|
|
23A82560000
|
heap default
|
page read and write
|
|
|
|
24D00002000
|
unkown
|
page read and write
|
|
|
|
23A847ED000
|
unkown
|
page read and write
|
|
|
|
23A82680000
|
unkown
|
page read and write
|
|
|
|
7FF543498000
|
unkown
|
page readonly
|
|
|
|
7FF5C46A9000
|
unkown
|
page readonly
|
|
|
|
23A84713000
|
unkown
|
page read and write
|
|
|
|
23A84836000
|
unkown
|
page read and write
|
|
|
|
7FF53CBE7000
|
unkown
|
page readonly
|
|
|
|
7FF5C468E000
|
unkown
|
page readonly
|
|
|
|
7FF50FEE8000
|
unkown
|
page readonly
|
|
|
|
7FF55B732000
|
unkown
|
page readonly
|
|
|
|
7FF54362E000
|
unkown
|
page readonly
|
|
|
|
7FF59C882000
|
unkown
|
page readonly
|
|
|
|
24CFFB5A000
|
unkown
|
page read and write
|
|
|
|
7FF5ED2DB000
|
unkown
|
page readonly
|
|
|
|
1F365560000
|
unkown
|
page read and write
|
|
|
|
1DBE1A10000
|
unkown
|
page readonly
|
|
|
|
1D45F800000
|
unkown
|
page readonly
|
|
|
|
1DBE1770000
|
unkown
|
page read and write
|
|
|
|
3409C7E000
|
unkown
|
page read and write
|
|
|
|
4DEFAFE000
|
unkown
|
page read and write
|
|
|
|
7FF544432000
|
unkown
|
page readonly
|
|
|
|
1F363B1C000
|
unkown
|
page read and write
|
|
|
|
7FF51DFFA000
|
unkown
|
page readonly
|
|
|
|
7FF5C4759000
|
unkown
|
page readonly
|
|
|
|
7FF53CD65000
|
unkown
|
page readonly
|
|
|
|
3EC047D000
|
unkown
|
page read and write
|
|
|
|
7FF53CDD9000
|
unkown
|
page readonly
|
|
|
|
6A80D7C000
|
unkown
|
page read and write
|
|
|
|
23A85000000
|
unkown
|
page read and write
|
|
|
|
7FF502819000
|
unkown
|
page readonly
|
|
|
|
7FF59C185000
|
unkown
|
page readonly
|
|
|
|
91D2779000
|
unkown
|
page read and write
|
|
|
|
7FF55E6A7000
|
unkown
|
page readonly
|
|
|
|
67F598F000
|
unkown
|
page read and write
|
|
|
|
24CFFB7B000
|
unkown
|
page read and write
|
|
|
|
1D7C6841000
|
unkown
|
page read and write
|
|
|
|
24CFFB1D000
|
unkown
|
page read and write
|
|
|
|
7FF51DF04000
|
unkown
|
page readonly
|
|
|
|
253AC484000
|
unkown
|
page read and write
|
|
|
|
7FF5027B7000
|
unkown
|
page readonly
|
|
|
|
7FF57508F000
|
unkown
|
page readonly
|
|
|
|
DB87FC000
|
unkown
|
page read and write
|
|
|
|
7FF4F73FE000
|
unkown
|
page readonly
|
|
|
|
A0564FE000
|
unkown
|
page read and write
|
|
|
|
7FF543D1E000
|
unkown
|
page readonly
|
|
|
|
F85148C000
|
unkown
|
page read and write
|
|
|
|
1F363A2A000
|
unkown
|
page read and write
|
|
|
|
7FF5BE272000
|
unkown
|
page readonly
|
|
|
|
24CFFB4F000
|
unkown
|
page read and write
|
|
|
|
7FF51E226000
|
unkown
|
page readonly
|
|
|
|
C9033FC000
|
unkown
|
page read and write
|
|
|
|
7FF55B738000
|
unkown
|
page readonly
|
|
|
|
26BE4865000
|
unkown
|
page read and write
|
|
|
|
23A84717000
|
unkown
|
page read and write
|
|
|
|
26BE4871000
|
unkown
|
page read and write
|
|
|
|
7FF50FF15000
|
unkown
|
page readonly
|
|
|
|
7FF59B213000
|
unkown
|
page readonly
|
|
|
|
7FF50FE4C000
|
unkown
|
page readonly
|
|
|
|
F851D7D000
|
unkown
|
page read and write
|
|
|
|
7FF5DF4B4000
|
unkown
|
page readonly
|
|
|
|
7FF55B78D000
|
unkown
|
page readonly
|
|
|
|
26A66E02000
|
unkown
|
page read and write
|
|
|
|
1DBE1658000
|
unkown
|
page read and write
|
|
|
|
7FF5444E2000
|
unkown
|
page readonly
|
|
|
|
7FF55B765000
|
unkown
|
page readonly
|
|
|
|
23A826E6000
|
unkown
|
page read and write
|
|
|
|
24CFF2D4000
|
unkown
|
page read and write
|
|
|
|
7FF55E33B000
|
unkown
|
page readonly
|
|
|
|
7FF59C1D7000
|
unkown
|
page readonly
|
|
|
|
9FDBB2B000
|
unkown
|
page read and write
|
|
|
|
23A82600000
|
unkown
|
page read and write
|
|
|
|
1DBDBF90000
|
heap private
|
page read and write
|
|
|
|
1F3639E0000
|
unkown
|
page read and write
|
|
|
|
7FF50274E000
|
unkown
|
page readonly
|
|
|
|
7FF5BE0EF000
|
unkown
|
page readonly
|
|
|
|
1FC7165F000
|
unkown
|
page read and write
|
|
|
|
7FF59C199000
|
unkown
|
page readonly
|
|
|
|
7FF53CD29000
|
unkown
|
page readonly
|
|
|
|
1FC718B0000
|
unkown
|
page read and write
|
|
|
|
1DBE17B0000
|
unkown
|
page readonly
|
|
|
|
24CFF2BA000
|
unkown
|
page read and write
|
|
|
|
23A85013000
|
unkown
|
page read and write
|
|
|
|
23A8268E000
|
unkown
|
page read and write
|
|
|
|
1F363A02000
|
unkown
|
page read and write
|
|
|
|
1DBE183C000
|
unkown
|
page read and write
|
|
|
|
1FC71730000
|
unkown
|
page readonly
|
|
|
|
7FF5C463C000
|
unkown
|
page readonly
|
|
|
|
CFBA07B000
|
unkown
|
page read and write
|
|
|
|
26BE47C0000
|
unkown
|
page readonly
|
|
|
|
7FF51DF65000
|
unkown
|
page readonly
|
|
|
|
24D00002000
|
unkown
|
page read and write
|
|
|
|
23A84540000
|
unkown
|
page read and write
|
|
|
|
24CFFB81000
|
unkown
|
page read and write
|
|
|
|
19956B13000
|
unkown
|
page read and write
|
|
|
|
24CFF28B000
|
unkown
|
page read and write
|
|
|
|
7FF5C46DC000
|
unkown
|
page readonly
|
|
|
|
7FF5025D8000
|
unkown
|
page readonly
|
|
|
|
1DBDC07B000
|
unkown
|
page read and write
|
|
|
|
23A84530000
|
unkown
|
page read and write
|
|
|
|
26A668D0000
|
unkown
|
page readonly
|
|
|
|
23A826D9000
|
unkown
|
page read and write
|
|
|
|
4DEF10B000
|
unkown
|
page read and write
|
|
|
|
7FF5BE08A000
|
unkown
|
page readonly
|
|
|
|
1F365602000
|
unkown
|
page read and write
|
|
|
|
7FF53CD46000
|
unkown
|
page readonly
|
|
|
|
1F363950000
|
heap private
|
page read and write
|
|
|
|
1DBE165E000
|
unkown
|
page read and write
|
|
|
|
7FF50278C000
|
unkown
|
page readonly
|
|
|
|
20AEF4B9000
|
unkown
|
page read and write
|
|
|
|
24D00002000
|
unkown
|
page read and write
|
|
|
|
26A665B0000
|
unkown
|
page read and write
|
|
|
|
26A6664D000
|
unkown
|
page read and write
|
|
|
|
7FF5ED26E000
|
unkown
|
page readonly
|
|
|
|
7FF55E701000
|
unkown
|
page readonly
|
|
|
|
28CE548E000
|
unkown
|
page read and write
|
|
|
|
1F363A5A000
|
unkown
|
page read and write
|
|
|
|
7FF5C460A000
|
unkown
|
page readonly
|
|
|
|
FD22DFB000
|
unkown
|
page read and write
|
|
|
|
1DBE1AB0000
|
unkown
|
page readonly
|
|
|
|
20E6D1C1000
|
unkown
|
page read and write
|
|
|
|
7FF5750E4000
|
unkown
|
page readonly
|
|
|
|
1DBDCF60000
|
unkown
|
page read and write
|
|
|
|
1F363C00000
|
unkown
|
page readonly
|
|
|
|
A056479000
|
unkown
|
page read and write
|
|
|
|
20AEF4CA000
|
unkown
|
page read and write
|
|
|
|
7FF4F7D34000
|
unkown
|
page readonly
|
|
|
|
7FF59C866000
|
unkown
|
page readonly
|
|
|
|
DB89FE000
|
unkown
|
page read and write
|
|
|
|
2023827F000
|
unkown
|
page read and write
|
|
|
|
1DBE1888000
|
unkown
|
page read and write
|
|
|
|
253AC457000
|
unkown
|
page read and write
|
|
|
|
19956A72000
|
unkown
|
page read and write
|
|
|
|
7FF595990000
|
unkown
|
page readonly
|
|
|
|
C8AF27C000
|
unkown
|
page read and write
|
|
|
|
7FF51E21C000
|
unkown
|
page readonly
|
|
|
|
3409DFA000
|
unkown
|
page read and write
|
|
|
|
23A84807000
|
unkown
|
page read and write
|
|
|
|
7FF55B45E000
|
unkown
|
page readonly
|
|
|
|
7FF595A1C000
|
unkown
|
page readonly
|
|
|
|
24CFFBC1000
|
unkown
|
page read and write
|
|
|
|
1FFCE26D000
|
unkown
|
page read and write
|
|
|
|
7FF5441BC000
|
unkown
|
page readonly
|
|
|
|
24CFFB88000
|
unkown
|
page read and write
|
|
|
|
19956A6E000
|
unkown
|
page read and write
|
|
|
|
7FF5ED53C000
|
unkown
|
page readonly
|
|
|
|
1D7C6840000
|
unkown
|
page read and write
|
|
|
|
7FF59B932000
|
unkown
|
page readonly
|
|
|
|
23A847E1000
|
unkown
|
page read and write
|
|
|
|
7FF5BE1A1000
|
unkown
|
page readonly
|
|
|
|
1DBE1500000
|
unkown
|
page readonly
|
|
|
|
1DBDC4D0000
|
unkown
|
page readonly
|
|
|
|
FE01F78000
|
unkown
|
page read and write
|
|
|
|
7FF543602000
|
unkown
|
page readonly
|
|
|
|
1DBDC900000
|
unkown
|
page read and write
|
|
|
|
7FF50FF29000
|
unkown
|
page readonly
|
|
|
|
7FF543692000
|
unkown
|
page readonly
|
|
|
|
4DEFDFF000
|
unkown
|
page read and write
|
|
|
|
19956A6D000
|
unkown
|
page read and write
|
|
|
|
253AC513000
|
unkown
|
page read and write
|
|
|
|
7FF5BE17D000
|
unkown
|
page readonly
|
|
|
|
19956A6E000
|
unkown
|
page read and write
|
|
|
|
24CFFB5D000
|
unkown
|
page read and write
|
|
|
|
7FF50FF0E000
|
unkown
|
page readonly
|
|
|
|
7FF55E645000
|
unkown
|
page readonly
|
|
|
|
23A826F8000
|
unkown
|
page read and write
|
|
|
|
23A8268D000
|
unkown
|
page read and write
|
|
|
|
1DBDD150000
|
unkown
|
page readonly
|
|
|
|
7FF55B6C7000
|
unkown
|
page readonly
|
|
|
|
7FF5750E7000
|
unkown
|
page readonly
|
|
|
|
2C232990000
|
heap private
|
page read and write
|
|
|
|
7FF50FD5F000
|
unkown
|
page readonly
|
|
|
|
23A84774000
|
unkown
|
page read and write
|
|
|
|
20AEF400000
|
unkown
|
page read and write
|
|
|
|
7FF59BF9A000
|
unkown
|
page readonly
|
|
|
|
7FF59C875000
|
unkown
|
page readonly
|
|
|
|
20AEF429000
|
unkown
|
page read and write
|
|
|
|
23A82680000
|
unkown
|
page read and write
|
|
|
|
7FF5DF5AA000
|
unkown
|
page readonly
|
|
|
|
253AC380000
|
unkown
|
page read and write
|
|
|
|
7FF55E6FE000
|
unkown
|
page readonly
|
|
|
|
1DBDC076000
|
unkown
|
page read and write
|
|
|
|
7FF50FEFA000
|
unkown
|
page readonly
|
|
|
|
7FF5C447A000
|
unkown
|
page readonly
|
|
|
|
7FF59BFCF000
|
unkown
|
page readonly
|
|
|
|
26A665A0000
|
unkown
|
page readonly
|
|
|
|
7FF50FEE2000
|
unkown
|
page readonly
|
|
|
|
28CE548E000
|
unkown
|
page read and write
|
|
|
|
7FF543685000
|
unkown
|
page readonly
|
|
|
|
8E9C37F000
|
unkown
|
page read and write
|
|
|
|
26BE4865000
|
unkown
|
page read and write
|
|
|
|
1FC714B0000
|
unkown
|
page read and write
|
|
|
|
23A8267E000
|
unkown
|
page read and write
|
|
|
|
24CFFB2D000
|
unkown
|
page read and write
|
|
|
|
24CFF110000
|
heap default
|
page read and write
|
|
|
|
7FF5DF7CC000
|
unkown
|
page readonly
|
|
|
|
67F5E7F000
|
unkown
|
page read and write
|
|
|
|
7FF501E91000
|
unkown
|
page readonly
|
|
|
|
7FF59C249000
|
unkown
|
page readonly
|
|
|
|
1DBE1720000
|
unkown
|
page read and write
|
|
|
|
91D2F7B000
|
unkown
|
page read and write
|
|
|
|
7FF5023E8000
|
unkown
|
page readonly
|
|
|
|
24CFFB5C000
|
unkown
|
page read and write
|
|
|
|
20AEFE00000
|
unkown
|
page readonly
|
|
|
|
FE01C7B000
|
unkown
|
page read and write
|
|
|
|
253ACE00000
|
unkown
|
page readonly
|
|
|
|
7FF5750B6000
|
unkown
|
page readonly
|
|
|
|
23A84800000
|
unkown
|
page read and write
|
|
|
|
19956A6C000
|
unkown
|
page read and write
|
|
|
|
7FF5C4567000
|
unkown
|
page readonly
|
|
|
|
20238A02000
|
unkown
|
page read and write
|
|
|
|
1DBE1720000
|
unkown
|
page write copy
|
|
|
|
1FFCE190000
|
unkown
|
page write copy
|
|
|
|
7FF5750B1000
|
unkown
|
page readonly
|
|
|
|
1FC7165F000
|
unkown
|
page read and write
|
|
|
|
1FC72470000
|
unkown
|
page read and write
|
|
|
|
7FF51E29E000
|
unkown
|
page readonly
|
|
|
|
7FF55B7AC000
|
unkown
|
page readonly
|
|
|
|
7FF5C41CD000
|
unkown
|
page readonly
|
|
|
|
FD1067F000
|
unkown
|
page read and write
|
|
|
|
23A8268F000
|
unkown
|
page read and write
|
|
|
|
20AEFC02000
|
unkown
|
page read and write
|
|
|
|
28CE5350000
|
unkown
|
page write copy
|
|
|
|
7FF51E22C000
|
unkown
|
page readonly
|
|
|
|
23A8471F000
|
unkown
|
page read and write
|
|
|
|
7FF575085000
|
unkown
|
page readonly
|
|
|
|
19956A6C000
|
unkown
|
page read and write
|
|
|
|
20238100000
|
unkown
|
page readonly
|
|
|
|
26BE4826000
|
unkown
|
page read and write
|
|
|
|
28CE548E000
|
unkown
|
page read and write
|
|
|
|
1D7C6849000
|
unkown
|
page read and write
|
|
|
|
7FF4F7C90000
|
unkown
|
page readonly
|
|
|
|
7FF5BE369000
|
unkown
|
page readonly
|
|
|
|
1D45FBC0000
|
unkown
|
page read and write
|
|
|
|
7FF52D4EC000
|
unkown
|
page readonly
|
|
|
|
19956A00000
|
unkown
|
page read and write
|
|
|
|
C90327A000
|
unkown
|
page read and write
|
|
|
|
1DBE1680000
|
unkown
|
page read and write
|
|
|
|
7FF59BEB3000
|
unkown
|
page readonly
|
|
|
|
2C234270000
|
heap private
|
page read and write
|
|
|
|
7FF5C424A000
|
unkown
|
page readonly
|
|
|
|
26A66600000
|
unkown
|
page read and write
|
|
|
|
19956A6D000
|
unkown
|
page read and write
|
|
|
|
7FF50FD9E000
|
unkown
|
page readonly
|
|
|
|
24CFFB23000
|
unkown
|
page read and write
|
|
|
|
7FF50FE11000
|
unkown
|
page readonly
|
|
|
|
7FF595A34000
|
unkown
|
page readonly
|
|
|
|
1DBDC056000
|
unkown
|
page read and write
|
|
|
|
7FF5C46BD000
|
unkown
|
page readonly
|
|
|
|
24CFF930000
|
unkown
|
page read and write
|
|
|
|
7FF51E0B7000
|
unkown
|
page readonly
|
|
|
|
7FF542F35000
|
unkown
|
page readonly
|
|
|
|
23A8484B000
|
unkown
|
page read and write
|
|
|
|
FD227DB000
|
unkown
|
page read and write
|
|
|
|
1D7C687C000
|
unkown
|
page read and write
|
|
|
|
7FF55E659000
|
unkown
|
page readonly
|
|
|
|
7FF5750E0000
|
unkown
|
page readonly
|
|
|
|
24CFFB7F000
|
unkown
|
page read and write
|
|
|
|
7FF5DF7C6000
|
unkown
|
page readonly
|
|
|
|
7FF5BE1A7000
|
unkown
|
page readonly
|
|
|
|
24CFF2EC000
|
unkown
|
page read and write
|
|
|
|
1D7C6862000
|
unkown
|
page read and write
|
|
|
|
2C232770000
|
unkown
|
page readonly
|
|
|
|
7FF5C4498000
|
unkown
|
page readonly
|
|
|
|
8E9BE7B000
|
unkown
|
page read and write
|
|
|
|
F85237F000
|
unkown
|
page read and write
|
|
|
|
7FF55E63E000
|
unkown
|
page readonly
|
|
|
|
7FF5024D5000
|
unkown
|
page readonly
|
|
|
|
23A8268D000
|
unkown
|
page read and write
|
|
|
|
19956A6D000
|
unkown
|
page read and write
|
|
|
|
7FF50FED2000
|
unkown
|
page readonly
|
|
|
|
28CE6DA0000
|
unkown
|
page read and write
|
|
|
|
7FF502728000
|
unkown
|
page readonly
|
|
|
|
CFBA2FF000
|
unkown
|
page read and write
|
|
|
|
7FF55E62A000
|
unkown
|
page readonly
|
|
|
|
253AC370000
|
unkown
|
page readonly
|
|
|
|
7FF4F7953000
|
unkown
|
page readonly
|
|
|
|
20E6D100000
|
unkown
|
page readonly
|
|
|
|
4DEFD7F000
|
unkown
|
page read and write
|
|
|
|
1FFCFCA0000
|
unkown
|
page readonly
|
|
|
|
7FF50277D000
|
unkown
|
page readonly
|
|
|
|
7FF54329D000
|
unkown
|
page readonly
|
|
|
|
1D45F5F0000
|
unkown
|
page readonly
|
|
|
|
20E6D1E1000
|
unkown
|
page read and write
|
|
|
|
7FF59B98D000
|
unkown
|
page readonly
|
|
|
|
7FF50FF3D000
|
unkown
|
page readonly
|
|
|
|
1F3639C0000
|
unkown
|
page readonly
|
|
|
|
7FF544489000
|
unkown
|
page readonly
|
|
|
|
8E9BF7E000
|
unkown
|
page read and write
|
|
|
|
7FF59C81E000
|
unkown
|
page readonly
|
|
|
|
7FF50FFD9000
|
unkown
|
page readonly
|
|
|
|
7FF59BEF7000
|
unkown
|
page readonly
|
|
|
|
24CFFB50000
|
unkown
|
page read and write
|
|
|
|
7FF5441B3000
|
unkown
|
page readonly
|
|
|
|
7FF5C4473000
|
unkown
|
page readonly
|
|
|
|
1FC721E0000
|
unkown
|
page read and write
|
|
|
|
23A847CB000
|
unkown
|
page read and write
|
|
|
|
20AEF440000
|
unkown
|
page read and write
|
|
|
|
23A825C0000
|
unkown
|
page readonly
|
|
|
|
7FF575058000
|
unkown
|
page readonly
|
|
|
|
7FF5ED147000
|
unkown
|
page readonly
|
|
|
|
7FF57507E000
|
unkown
|
page readonly
|
|
|
|
FD10375000
|
unkown
|
page read and write
|
|
|
|
FE020F7000
|
unkown
|
page read and write
|
|
|
|
23A847E1000
|
unkown
|
page read and write
|
|
|
|
7FF55B557000
|
unkown
|
page readonly
|
|
|
|
7FF5ED550000
|
unkown
|
page readonly
|
|
|
|
1DBDBFF0000
|
heap default
|
page read and write
|
|
|
|
7FF59C057000
|
unkown
|
page readonly
|
|
|
|
7FF59C127000
|
unkown
|
page readonly
|
|
|
|
23A84779000
|
unkown
|
page read and write
|
|
|
|
9FDBE7E000
|
unkown
|
page read and write
|
|
|
|
4DEF6F9000
|
unkown
|
page read and write
|
|
|
|
1FC71860000
|
unkown
|
page read and write
|
|
|
|
1D7C687D000
|
unkown
|
page read and write
|
|
|
|
C8AF0FD000
|
unkown
|
page read and write
|
|
|
|
7FF5BE12E000
|
unkown
|
page readonly
|
|
|
|
7FF54365D000
|
unkown
|
page readonly
|
|
|
|
1D7C6842000
|
unkown
|
page read and write
|
|
|
|
7FF50FF70000
|
unkown
|
page readonly
|
|
|
|
20E6D1E1000
|
unkown
|
page read and write
|
|
|
|
7FF55E616000
|
unkown
|
page readonly
|
|
|
|
7FF575056000
|
unkown
|
page readonly
|
|
|
|
1DBE1A90000
|
unkown
|
page readonly
|
|
|
|
23A84983000
|
unkown
|
page read and write
|
|
|
|
7FF59BA29000
|
unkown
|
page readonly
|
|
|
|
23A847B4000
|
unkown
|
page read and write
|
|
|
|
7FF502811000
|
unkown
|
page readonly
|
|
|
|
7FF5ED0F1000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2D6000
|
unkown
|
page readonly
|
|
|
|
7FF542DC6000
|
unkown
|
page readonly
|
|
|
|
19956A6E000
|
unkown
|
page read and write
|
|
|
|
7DFD23371000
|
unkown
|
page readonly
|
|
|
|
F85227E000
|
unkown
|
page read and write
|
|
|
|
7FF5DF72C000
|
unkown
|
page readonly
|
|
|
|
1D7C6863000
|
unkown
|
page read and write
|
|
|
|
24CFF302000
|
unkown
|
page read and write
|
|
|
|
1D7C6867000
|
unkown
|
page read and write
|
|
|
|
1F363B13000
|
unkown
|
page read and write
|
|
|
|
1FFCE0B0000
|
heap default
|
page read and write
|
|
|
|
24CFFB7F000
|
unkown
|
page read and write
|
|
|
|
7FF53CCEA000
|
unkown
|
page readonly
|
|
|
|
20238790000
|
unkown
|
page readonly
|
|
|
|
1FC71610000
|
heap default
|
page read and write
|
|
|
|
7FF5444B6000
|
unkown
|
page readonly
|
|
|
|
20AEFD3A000
|
unkown
|
page read and write
|
|
|
|
7FF5DF03C000
|
unkown
|
page readonly
|
|
|
|
7FF5C4548000
|
unkown
|
page readonly
|
|
|
|
7FF59B684000
|
unkown
|
page readonly
|
|
|
|
7FF5444A6000
|
unkown
|
page readonly
|
|
|
|
7FF59B94A000
|
unkown
|
page readonly
|
|
|
|
24CFF940000
|
unkown
|
page read and write
|
|
|
|
7FF51E157000
|
unkown
|
page readonly
|
|
|
|
28CE5435000
|
unkown
|
page read and write
|
|
|
|
7FF59B6E5000
|
unkown
|
page readonly
|
|
|
|
7FF53C666000
|
unkown
|
page readonly
|
|
|
|
7FF59C825000
|
unkown
|
page readonly
|
|
|
|
24CFF930000
|
unkown
|
page read and write
|
|
|
|
19956A13000
|
unkown
|
page read and write
|
|
|
|
23A82690000
|
unkown
|
page read and write
|
|
|
|
7FF55B6E1000
|
unkown
|
page readonly
|
|
|
|
23A84782000
|
unkown
|
page read and write
|
|
|
|
1DBDC7E0000
|
unkown
|
page read and write
|
|
|
|
24CFF2E5000
|
unkown
|
page read and write
|
|
|
|
7FF5959DF000
|
unkown
|
page readonly
|
|
|
|
7FF4F7CD5000
|
unkown
|
page readonly
|
|
|
|
7FF59C84D000
|
unkown
|
page readonly
|
|
|
|
23A847E2000
|
unkown
|
page read and write
|
|
|
|
FE02578000
|
unkown
|
page read and write
|
|
|
|
7FF5C436F000
|
unkown
|
page readonly
|
|
|
|
23A84C00000
|
unkown
|
page readonly
|
|
|
|
7FF59C1D5000
|
unkown
|
page readonly
|
|
|
|
1D7C6866000
|
unkown
|
page read and write
|
|
|
|
7FF5C450C000
|
unkown
|
page readonly
|
|
|
|
91D30FC000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2A5000
|
unkown
|
page readonly
|
|
|
|
7FF59B837000
|
unkown
|
page readonly
|
|
|
|
7FF54445A000
|
unkown
|
page readonly
|
|
|
|
4DEF9FB000
|
unkown
|
page read and write
|
|
|
|
1DBE17B0000
|
unkown
|
page read and write
|
|
|
|
7FF4F7D99000
|
unkown
|
page readonly
|
|
|
|
7FF5BE307000
|
unkown
|
page readonly
|
|
|
|
23A8471F000
|
unkown
|
page read and write
|
|
|
|
445F17A000
|
unkown
|
page read and write
|
|
|
|
91D317D000
|
unkown
|
page read and write
|
|
|
|
1D7C6802000
|
unkown
|
page read and write
|
|
|
|
26BE4913000
|
unkown
|
page read and write
|
|
|
|
7FF5DF7D6000
|
unkown
|
page readonly
|
|
|
|
2C2326AB000
|
heap default
|
page read and write
|
|
|
|
1D7C6873000
|
unkown
|
page read and write
|
|
|
|
7FF55E67C000
|
unkown
|
page readonly
|
|
|
|
28CE5270000
|
heap default
|
page read and write
|
|
|
|
7FF59581F000
|
unkown
|
page readonly
|
|
|
|
1D7C685E000
|
unkown
|
page read and write
|
|
|
|
220D1C66000
|
unkown
|
page read and write
|
|
|
|
7FF59C8E9000
|
unkown
|
page readonly
|
|
|
|
7FF59C23E000
|
unkown
|
page readonly
|
|
|
|
1D45F613000
|
unkown
|
page read and write
|
|
|
|
7FF5959BA000
|
unkown
|
page readonly
|
|
|
|
91D2C7B000
|
unkown
|
page read and write
|
|
|
|
1DBE1690000
|
unkown
|
page read and write
|
|
|
|
23A82678000
|
unkown
|
page read and write
|
|
|
|
20E6D0F0000
|
unkown
|
page readonly
|
|
|
|
7FF59C16A000
|
unkown
|
page readonly
|
|
|
|
23A85310000
|
unkown
|
page read and write
|
|
|
|
23A847FA000
|
unkown
|
page read and write
|
|
|
|
7FF575149000
|
unkown
|
page readonly
|
|
|
|
91D287B000
|
unkown
|
page read and write
|
|
|
|
20238228000
|
unkown
|
page read and write
|
|
|
|
67F5C7E000
|
unkown
|
page read and write
|
|
|
|
23A85410000
|
unkown
|
page read and write
|
|
|
|
7FF4F7C5B000
|
unkown
|
page readonly
|
|
|
|
7FF55B7C4000
|
unkown
|
page readonly
|
|
|
|
7FF59B8DA000
|
unkown
|
page readonly
|
|
|
|
24CFFB63000
|
unkown
|
page read and write
|
|
|
|
CFBA4F7000
|
unkown
|
page read and write
|
|
|
|
7FF5DF768000
|
unkown
|
page readonly
|
|
|
|
1D45F520000
|
unkown
|
page readonly
|
|
|
|
253AC462000
|
unkown
|
page read and write
|
|
|
|
7FF59C517000
|
unkown
|
page readonly
|
|
|
|
34099CB000
|
unkown
|
page read and write
|
|
|
|
28CE547B000
|
unkown
|
page read and write
|
|
|
|
7FF5959E9000
|
unkown
|
page readonly
|
|
|
|
6A810FE000
|
unkown
|
page read and write
|
|
|
|
C90307B000
|
unkown
|
page read and write
|
|
|
|
20E6D1D6000
|
unkown
|
page read and write
|
|
|
|
26BE47D0000
|
unkown
|
page read and write
|
|
|
|
7FF52D4EC000
|
unkown
|
page readonly
|
|
|
|
7FF4F7950000
|
unkown
|
page readonly
|
|
|
|
23A8272E000
|
unkown
|
page read and write
|
|
|
|
7FF544539000
|
unkown
|
page readonly
|
|
|
|
445F2F9000
|
unkown
|
page read and write
|
|
|
|
7FF5024C7000
|
unkown
|
page readonly
|
|
|
|
23A8278A000
|
unkown
|
page read and write
|
|
|
|
24CFF23C000
|
unkown
|
page read and write
|
|
|
|
7FF55E4DA000
|
unkown
|
page readonly
|
|
|
|
7FF53CD0E000
|
unkown
|
page readonly
|
|
|
|
2C2325F0000
|
unkown
|
page readonly
|
|
|
|
91D2DFB000
|
unkown
|
page read and write
|
|
|
|
26A66670000
|
unkown
|
page read and write
|
|
|
|
7FF59BF88000
|
unkown
|
page readonly
|
|
|
|
7FF55E600000
|
unkown
|
page readonly
|
|
|
|
28CE548C000
|
unkown
|
page read and write
|
|
|
|
1DBDC09F000
|
unkown
|
page read and write
|
|
|
|
19956A02000
|
unkown
|
page read and write
|
|
|
|
1FFCE26B000
|
unkown
|
page read and write
|
|
|
|
23A84070000
|
unkown
|
page read and write
|
|
|
|
7FF5C46F0000
|
unkown
|
page readonly
|
|
|
|
7FF595A99000
|
unkown
|
page readonly
|
|
|
|
7FF595104000
|
unkown
|
page readonly
|
|
|
|
23A82690000
|
unkown
|
page read and write
|
|
|
|
19956A42000
|
unkown
|
page read and write
|
|
|
|
7FF5436F1000
|
unkown
|
page readonly
|
|
|
|
20238264000
|
unkown
|
page read and write
|
|
|
|
445F27E000
|
unkown
|
page read and write
|
|
|
|
24CFFB8F000
|
unkown
|
page read and write
|
|
|
|
20238240000
|
unkown
|
page read and write
|
|
|
|
20238259000
|
unkown
|
page read and write
|
|
|
|
23A84500000
|
heap private
|
page read and write
|
|
|
|
7FF5C4751000
|
unkown
|
page readonly
|
|
|
|
24CFFB49000
|
unkown
|
page read and write
|
|
|
|
23A84769000
|
unkown
|
page read and write
|
|
|
|
23A8476F000
|
unkown
|
page read and write
|
|
|
|
1DBDC03D000
|
unkown
|
page read and write
|
|
|
|
1D45F651000
|
unkown
|
page read and write
|
|
|
|
20AEF3F0000
|
heap default
|
page read and write
|
|
|
|
FD22FFE000
|
unkown
|
page read and write
|
|
|
|
26BE4852000
|
unkown
|
page read and write
|
|
|
|
220D1C13000
|
unkown
|
page read and write
|
|
|
|
1F363A00000
|
unkown
|
page read and write
|
|
|
|
F85207E000
|
unkown
|
page read and write
|
|
|
|
7FF5959A6000
|
unkown
|
page readonly
|
|
|
|
1DBE1861000
|
unkown
|
page read and write
|
|
|
|
1FFCE202000
|
unkown
|
page read and write
|
|
|
|
7FF51E1EF000
|
unkown
|
page readonly
|
|
|
|
1FFCE300000
|
unkown
|
page read and write
|
|
|
|
1FC718A9000
|
heap private
|
page read and write
|
|
|
|
7FF59C11C000
|
unkown
|
page readonly
|
|
|
|
7FF59C142000
|
unkown
|
page readonly
|
|
|
|
24CFFB23000
|
unkown
|
page read and write
|
|
|
|
7FF50FAD0000
|
unkown
|
page readonly
|
|
|
|
7FF543694000
|
unkown
|
page readonly
|
|
|
|
7FF55B7A6000
|
unkown
|
page readonly
|
|
|
|
7FF59C1BC000
|
unkown
|
page readonly
|
|
|
|
7FF59C249000
|
unkown
|
page readonly
|
|
|
|
23A82640000
|
unkown
|
page read and write
|
|
|
|
7FF51E1E5000
|
unkown
|
page readonly
|
|
|
|
23A85410000
|
unkown
|
page read and write
|
|
|
|
24CFFB50000
|
unkown
|
page read and write
|
|
|
|
23A8471F000
|
unkown
|
page read and write
|
|
|
|
23A84794000
|
unkown
|
page read and write
|
|
|
|
7FF53CD56000
|
unkown
|
page readonly
|
|
|
|
1D7C6852000
|
unkown
|
page read and write
|
|
|
|
28CE5210000
|
heap private
|
page read and write
|
|
|
|
1D7C685C000
|
unkown
|
page read and write
|
|
|
|
2C232650000
|
unkown
|
page readonly
|
|
|
|
7FF59B6F0000
|
unkown
|
page readonly
|
|
|
|
7FF595A91000
|
unkown
|
page readonly
|
|
|
|
7FF55B6DA000
|
unkown
|
page readonly
|
|
|
|
23A8268D000
|
unkown
|
page read and write
|
|
|
|
7FF5959FD000
|
unkown
|
page readonly
|
|
|
|
1D7C683A000
|
unkown
|
page read and write
|
|
|
|
20238300000
|
unkown
|
page read and write
|
|
|
|
23A8267E000
|
unkown
|
page read and write
|
|
|
|
7FF595A0C000
|
unkown
|
page readonly
|
|
|
|
20E6D1D5000
|
unkown
|
page read and write
|
|
|
|
7FF5ED4C6000
|
unkown
|
page readonly
|
|
|
|
220D2600000
|
unkown
|
page readonly
|
|
|
|
4DEF8FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C469F000
|
unkown
|
page readonly
|
|
|
|
1F363B18000
|
unkown
|
page read and write
|
|
|
|
7FF5C4420000
|
unkown
|
page readonly
|
|
|
|
7FF5C4415000
|
unkown
|
page readonly
|
|
|
|
3EC01FF000
|
unkown
|
page read and write
|
|
|
|
28CE6EA0000
|
unkown
|
page readonly
|
|
|
|
24CFFBBB000
|
unkown
|
page read and write
|
|
|
|
7FF542D77000
|
unkown
|
page readonly
|
|
|
|
7FF5ED2F8000
|
unkown
|
page readonly
|
|
|
|
FD108FF000
|
unkown
|
page read and write
|
|
|
|
7FF5ED2EC000
|
unkown
|
page readonly
|
|
|
|
1DBDC102000
|
unkown
|
page read and write
|
|
|
|
7FF50279C000
|
unkown
|
page readonly
|
|
|
|
1DBDC02A000
|
unkown
|
page read and write
|
|
|
|
7FF55B7C7000
|
unkown
|
page readonly
|
|
|
|
7FF59B697000
|
unkown
|
page readonly
|
|
|
|
23A826CD000
|
unkown
|
page read and write
|
|
|
|
26BE484C000
|
unkown
|
page read and write
|
|
|
|
3409E7F000
|
unkown
|
page read and write
|
|
|
|
1DBE188D000
|
unkown
|
page read and write
|
|
|
|
23A84721000
|
unkown
|
page read and write
|
|
|
|
24CFF860000
|
unkown
|
page readonly
|
|
|
|
1FFCE26B000
|
unkown
|
page read and write
|
|
|
|
24CFFC00000
|
unkown
|
page readonly
|
|
|
|
7FF502726000
|
unkown
|
page readonly
|
|
|
|
1DBE2000000
|
unkown
|
page read and write
|
|
|
|
C8AF1FE000
|
unkown
|
page read and write
|
|
|
|
26BE4902000
|
unkown
|
page read and write
|
|
|
|
23A85210000
|
unkown
|
page read and write
|
|
|
|
7FF5026A5000
|
unkown
|
page readonly
|
|
|
|
1F363A59000
|
unkown
|
page read and write
|
|
|
|
7FF50FF4C000
|
unkown
|
page readonly
|
|
|
|
7FF55E695000
|
unkown
|
page readonly
|
|
|
|
FD107FC000
|
unkown
|
page read and write
|
|
|
|
23A8471E000
|
unkown
|
page read and write
|
|
|
|
7FF50FDED000
|
unkown
|
page readonly
|
|
|
|
19956A6D000
|
unkown
|
page read and write
|
|
|
|
8E9C27E000
|
unkown
|
page read and write
|
|
|
|
20AEF513000
|
unkown
|
page read and write
|
|
|
|
1DBE1800000
|
unkown
|
page read and write
|
|
|
|
FE022FF000
|
unkown
|
page read and write
|
|
|
|
7FF55E68C000
|
unkown
|
page readonly
|
|
|
|
19956A72000
|
unkown
|
page read and write
|
|
|
|
7FF53CD4C000
|
unkown
|
page readonly
|
|
|
|
253AC43C000
|
unkown
|
page read and write
|
|
|
|
7FF5ED451000
|
unkown
|
page readonly
|
|
|
|
23A85210000
|
unkown
|
page read and write
|
|
|
|
23A84700000
|
unkown
|
page read and write
|
|
|
|
7FF53C613000
|
unkown
|
page readonly
|
|
|
|
7FF59B936000
|
unkown
|
page readonly
|
|
|
|
7FF59BEFE000
|
unkown
|
page readonly
|
|
|
|
7FF59B9A6000
|
unkown
|
page readonly
|
|
|
|
9FDBBAD000
|
unkown
|
page read and write
|
|
|
|
7FF59C12C000
|
unkown
|
page readonly
|
|
|
|
28CE5280000
|
unkown
|
page readonly
|
|
|
|
7FF5DF648000
|
unkown
|
page readonly
|
|
|
|
1DBE1760000
|
unkown
|
page read and write
|
|
|
|
23A84736000
|
unkown
|
page read and write
|
|
|
|
23A84560000
|
unkown
|
page read and write
|
|
|
|
7FF5DF515000
|
unkown
|
page readonly
|
|
|
|
CFBA17E000
|
unkown
|
page read and write
|
|
|
|
7FF595A8E000
|
unkown
|
page readonly
|
|
|
|
7FF543231000
|
unkown
|
page readonly
|
|
|
|
24CFF8C0000
|
unkown
|
page write copy
|
|
|
|
7FF5435F2000
|
unkown
|
page readonly
|
|
|
|
7FF57502C000
|
unkown
|
page readonly
|
|
|
|
23A85010000
|
unkown
|
page read and write
|
|
|
|
23A84895000
|
unkown
|
page read and write
|
|
|
|
1DBE1814000
|
unkown
|
page read and write
|
|
|
|
1D45FBC0000
|
unkown
|
page read and write
|
|
|
|
7FF5BE260000
|
unkown
|
page readonly
|
|
|
|
253AC429000
|
unkown
|
page read and write
|
|
|
|
1DBE18B4000
|
unkown
|
page read and write
|
|
|
|
7FF5436F9000
|
unkown
|
page readonly
|
|
|
|
91D27FA000
|
unkown
|
page read and write
|
|
|
|
23A84761000
|
unkown
|
page read and write
|
|
|
|
23A8268D000
|
unkown
|
page read and write
|
|
|
|
1FFCE313000
|
unkown
|
page read and write
|
|
|
|
FD22CFB000
|
unkown
|
page read and write
|
|
|
|
7FF5ED0F3000
|
unkown
|
page readonly
|
|
|
|
23A84790000
|
unkown
|
page read and write
|
|
|
|
7FF5024CE000
|
unkown
|
page readonly
|
|
|
|
7FF5ED275000
|
unkown
|
page readonly
|
|
|
|
7FF5C4668000
|
unkown
|
page readonly
|
|
|
|
7FF5BE300000
|
unkown
|
page readonly
|
|
|
|
7FF53CC45000
|
unkown
|
page readonly
|
|
|
|
DB84FF000
|
unkown
|
page read and write
|
|
|
|
67F5CFA000
|
unkown
|
page read and write
|
|
|
|
7FF5444D7000
|
unkown
|
page readonly
|
|
|
|
23A82690000
|
unkown
|
page read and write
|
|
|
|
23A84748000
|
unkown
|
page read and write
|
|
|
|
7FF50FCFA000
|
unkown
|
page readonly
|
|
|
|
7FF575038000
|
unkown
|
page readonly
|
|
|
|
23A84B02000
|
unkown
|
page read and write
|
|
|
|
23A82500000
|
heap private
|
page read and write
|
|
|
|
7FF544475000
|
unkown
|
page readonly
|
|
|
|
7FF574D31000
|
unkown
|
page readonly
|
|
|
|
23A84530000
|
unkown
|
page read and write
|
|
|
|
3409CFE000
|
unkown
|
page read and write
|
|
|
|
1D7C6860000
|
unkown
|
page read and write
|
|
|
|
1DBDC2D0000
|
unkown
|
page readonly
|
|
|
|
7FF4F7C67000
|
unkown
|
page readonly
|
|
|
|
1DBE1849000
|
unkown
|
page read and write
|
|
|
|
1FC718A0000
|
heap private
|
page read and write
|
|
|
|
26BE4829000
|
unkown
|
page read and write
|
|
|
|
7FF543666000
|
unkown
|
page readonly
|
|
|
|
1DBDC08D000
|
unkown
|
page read and write
|
|
|
|
1FFCE0C0000
|
unkown
|
page readonly
|
|
|
|
1DBDC918000
|
unkown
|
page read and write
|
|
|
|
253AC446000
|
unkown
|
page read and write
|
|
|
|
7FF59C158000
|
unkown
|
page readonly
|
|
|
|
2C232660000
|
unkown
|
page readonly
|
|
|
|
1D45F440000
|
unkown
|
page readonly
|
|
|
|
23A8268D000
|
unkown
|
page read and write
|
|
|
|
7FF54446E000
|
unkown
|
page readonly
|
|
|
|
7FF574F57000
|
unkown
|
page readonly
|
|
|
|
91D2AFB000
|
unkown
|
page read and write
|
|
|
|
23A8268E000
|
unkown
|
page read and write
|
|
|
|
7FF59BA21000
|
unkown
|
page readonly
|
|
|
|
26A67340000
|
unkown
|
page readonly
|
|
|
|
7FF5DF795000
|
unkown
|
page readonly
|
|
|
|
7FF5DF766000
|
unkown
|
page readonly
|
|
|
|
1FC71800000
|
unkown
|
page readonly
|
|
|
|
220D1AC0000
|
heap private
|
page read and write
|
|
|
|
23A84A02000
|
unkown
|
page read and write
|
|
|
|
7FF55B791000
|
unkown
|
page readonly
|
|
|
|
7FF5750D5000
|
unkown
|
page readonly
|
|
|
|
7FF5ED487000
|
unkown
|
page readonly
|
|
|
|
2C232600000
|
heap private
|
page read and write
|
|
|
|
CFBA275000
|
unkown
|
page read and write
|
|
|
|
C8AED1C000
|
unkown
|
page read and write
|
|
|
|
26A66702000
|
unkown
|
page read and write
|
|
|
|
7FF53CDCE000
|
unkown
|
page readonly
|
|
|
|
23A827BA000
|
unkown
|
page read and write
|
|
|
|
A05657E000
|
unkown
|
page read and write
|
|
|
|
23A826F3000
|
unkown
|
page read and write
|
|
|
|
23A82674000
|
unkown
|
page read and write
|
|
|
|
7FF5ED35E000
|
unkown
|
page readonly
|
|
|
|
26BE46E0000
|
unkown
|
page readonly
|
|
|
|
91D307B000
|
unkown
|
page read and write
|
|
|
|
7FF543697000
|
unkown
|
page readonly
|
|
|
|
7FF595A06000
|
unkown
|
page readonly
|
|
|
|
1D7C684C000
|
unkown
|
page read and write
|
|
|
|
23A8267D000
|
unkown
|
page read and write
|
|
|
|
7FF5C4650000
|
unkown
|
page readonly
|
|
|
|
253AC502000
|
unkown
|
page read and write
|
|
|
|
23A847F9000
|
unkown
|
page read and write
|
|
|
|
7FF59BFB0000
|
unkown
|
page readonly
|
|
|
|
19956A6E000
|
unkown
|
page read and write
|
|
|
|
7FF55B718000
|
unkown
|
page readonly
|
|
|
|
7FF5BE276000
|
unkown
|
page readonly
|
|
|
|
7FF5DF663000
|
unkown
|
page readonly
|
|
|
|
FE021FA000
|
unkown
|
page read and write
|
|
|
|
1F3639D0000
|
unkown
|
page readonly
|
|
|
|
7FF5C3E9D000
|
unkown
|
page readonly
|
|
|
|
7FF50FF5C000
|
unkown
|
page readonly
|
|
|
|
7FF5ED467000
|
unkown
|
page readonly
|
|
|
|
7FF51DF70000
|
unkown
|
page readonly
|
|
|
|
28CE543F000
|
unkown
|
page read and write
|
|
|
|
23A847B3000
|
unkown
|
page read and write
|
|
|
|
23A82674000
|
unkown
|
page read and write
|
|
|
|
4DF01FE000
|
unkown
|
page read and write
|
|
|
|
24CFF313000
|
unkown
|
page read and write
|
|
|
|
20E6D1ED000
|
unkown
|
page read and write
|
|
|
|
26A66713000
|
unkown
|
page read and write
|
|
|
|
F851F7F000
|
unkown
|
page read and write
|
|
|
|
7FF5434C9000
|
unkown
|
page readonly
|
|
|
|
7FF5959D5000
|
unkown
|
page readonly
|
|
|
|
445ED0B000
|
unkown
|
page read and write
|
|
|
|
7FF59B965000
|
unkown
|
page readonly
|
|
|
|
24CFF920000
|
unkown
|
page readonly
|
|
|
|
24CFFB13000
|
unkown
|
page read and write
|
|
|
|
1D45FC02000
|
unkown
|
page read and write
|
|
|
|
4DEFB7F000
|
unkown
|
page read and write
|
|
|
|
1DBE14C0000
|
unkown
|
page read and write
|
|
|
|
7FF5027B4000
|
unkown
|
page readonly
|
|
|
|
7FF4F7CCE000
|
unkown
|
page readonly
|
|
|
|
7FF5BE369000
|
unkown
|
page readonly
|
|
|
|
23A85210000
|
unkown
|
page read and write
|
|
|
|
7FF4F7D99000
|
unkown
|
page readonly
|
|
|
|
24CFFB6F000
|
unkown
|
page read and write
|
|
|
|
23A84520000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7E7000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2EC000
|
unkown
|
page readonly
|
|
|
|
3EC05FE000
|
unkown
|
page read and write
|
|
|
|
1D7C6800000
|
unkown
|
page read and write
|
|
|
|
7FF5436F9000
|
unkown
|
page readonly
|
|
|
|
7FF5BE28A000
|
unkown
|
page readonly
|
|
|
|
7FF5C3EA3000
|
unkown
|
page readonly
|
|
|
|
7FF5C451E000
|
unkown
|
page readonly
|
|
|
|
1DBDC013000
|
unkown
|
page read and write
|
|
|
|
24CFFB41000
|
unkown
|
page read and write
|
|
|
|
23A8268E000
|
unkown
|
page read and write
|
|
|
|
23A8278A000
|
unkown
|
page read and write
|
|
|
|
28CE5402000
|
unkown
|
page read and write
|
|
|
|
7FF5ED267000
|
unkown
|
page readonly
|
|
|
|
220D1D02000
|
unkown
|
page read and write
|
|
|
|
1DBDC902000
|
unkown
|
page read and write
|
|
|
|
253AC508000
|
unkown
|
page read and write
|
|
|
|
20E6D1BB000
|
heap default
|
page read and write
|
|
|
|
7FF574FD5000
|
unkown
|
page readonly
|
|
|
|
7FF5ED4DA000
|
unkown
|
page readonly
|
|
|
|
1F363A49000
|
unkown
|
page read and write
|
|
|
|
7FF5ED0F5000
|
unkown
|
page readonly
|
|
|
|
4DEFBFE000
|
unkown
|
page read and write
|
|
|
|
23A84719000
|
unkown
|
page read and write
|
|
|
|
20AEF4C2000
|
unkown
|
page read and write
|
|
|
|
7FF59C856000
|
unkown
|
page readonly
|
|
|
|
FE01D7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C46F4000
|
unkown
|
page readonly
|
|
|
|
7FF574D1F000
|
unkown
|
page readonly
|
|
|
|
23A84761000
|
unkown
|
page read and write
|
|
|
|
23A847AE000
|
unkown
|
page read and write
|
|
|
|
23A84813000
|
unkown
|
page read and write
|
|
|
|
7FF51E2A1000
|
unkown
|
page readonly
|
|
|
|
1DBDC740000
|
unkown
|
page readonly
|
|
|
|
1DBE1680000
|
unkown
|
page read and write
|
|
|
|
7FF51E1CA000
|
unkown
|
page readonly
|
|
|
|
7FF5ED536000
|
unkown
|
page readonly
|
|
|
|
7FF59C1B6000
|
unkown
|
page readonly
|
|
|
|
28CE548D000
|
unkown
|
page read and write
|
|
|
|
23A847EB000
|
unkown
|
page read and write
|
|
|
|
7FF50F660000
|
unkown
|
page readonly
|
|
|
|
20E6D0C0000
|
unkown
|
page read and write
|
|
|
|
23A85210000
|
unkown
|
page read and write
|
|
|
|
24CFF930000
|
unkown
|
page read and write
|
|
|
|
1F3639B0000
|
heap default
|
page read and write
|
|
|
|
CFBA7FF000
|
unkown
|
page read and write
|
|
|
|
7FF59B9C4000
|
unkown
|
page readonly
|
|
|
|
20AEF502000
|
unkown
|
page read and write
|
|
|
|
1DBDD140000
|
unkown
|
page readonly
|
|
|
|
24CFFB88000
|
unkown
|
page read and write
|
|
|
|
91D31FC000
|
unkown
|
page read and write
|
|
|
|
3409EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5DF7F7000
|
unkown
|
page readonly
|
|
|
|
7FF55B76F000
|
unkown
|
page readonly
|
|
|
|
26A66655000
|
unkown
|
page read and write
|
|
|
|
20AEF390000
|
heap private
|
page read and write
|
|
|
|
7FF55E210000
|
unkown
|
page readonly
|
|
|
|
23A8266E000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2F5000
|
unkown
|
page readonly
|
|
|
|
7FF59C8E1000
|
unkown
|
page readonly
|
|
|
|
1DBDC670000
|
unkown
|
page readonly
|
|
|
|
7FF542D7A000
|
unkown
|
page readonly
|
|
|
|
FD1027E000
|
unkown
|
page read and write
|
|
|
|
7FF543676000
|
unkown
|
page readonly
|
|
|
|
1D45F3D0000
|
heap private
|
page read and write
|
|
|
|
7FF55E709000
|
unkown
|
page readonly
|
|
|
|
23A847C6000
|
unkown
|
page read and write
|
|
|
|
7FF5C46CC000
|
unkown
|
page readonly
|
|
|
|
1F363A13000
|
unkown
|
page read and write
|
|
|
|
2C232995000
|
heap private
|
page read and write
|
|
|
|
7FF575149000
|
unkown
|
page readonly
|
|
|
|
7FF574FC7000
|
unkown
|
page readonly
|
|
|
|
7FF55E513000
|
unkown
|
page readonly
|
|
|
|
7FF5ED378000
|
unkown
|
page readonly
|
|
|
|
7FF543606000
|
unkown
|
page readonly
|
|
|
|
7FF55E676000
|
unkown
|
page readonly
|
|
|
|
19956A6D000
|
unkown
|
page read and write
|
|
|
|
1DBDC09D000
|
unkown
|
page read and write
|
|
|
|
7FF574D96000
|
unkown
|
page readonly
|
|
|
|
7FF543635000
|
unkown
|
page readonly
|
|
|
|
7FF59BD53000
|
unkown
|
page readonly
|
|
|
|
7FF59B979000
|
unkown
|
page readonly
|
|
|
|
7FF59B99C000
|
unkown
|
page readonly
|
|
|
|
24CFF2C3000
|
unkown
|
page read and write
|
|
|
|
7FF54444A000
|
unkown
|
page readonly
|
|
|
|
7FF59BA33000
|
unkown
|
page readonly
|
|
|
|
7FF59C101000
|
unkown
|
page readonly
|
|
|
|
7FF4F7D0C000
|
unkown
|
page readonly
|
|
|
|
2C234140000
|
heap private
|
page read and write
|
|
|
|
91D24FF000
|
unkown
|
page read and write
|
|
|
|
1FC72400000
|
unkown
|
page readonly
|
|
|
|
253AC500000
|
unkown
|
page read and write
|
|
|
|
23A8268F000
|
unkown
|
page read and write
|
|
|
|
7FF5DF520000
|
unkown
|
page readonly
|
|
|
|
23A85310000
|
unkown
|
page read and write
|
|
|
|
7FF59C152000
|
unkown
|
page readonly
|
|
|
|
20AEF600000
|
unkown
|
page readonly
|
|
|
|
1DBE181F000
|
unkown
|
page read and write
|
|
|
|
7FF5433B5000
|
unkown
|
page readonly
|
|
|
|
23A84773000
|
unkown
|
page read and write
|
|
|
|
7FF5ED380000
|
unkown
|
page readonly
|
|
|
|
6A812FF000
|
unkown
|
page read and write
|
|
|
|
23A84A82000
|
unkown
|
page read and write
|
|
|
|
23A82673000
|
unkown
|
page read and write
|
|
|
|
7FF51E17C000
|
unkown
|
page readonly
|
|
|
|
7FF5C448C000
|
unkown
|
page readonly
|
|
|
|
1FC71510000
|
unkown
|
page readonly
|
|
|
|
7FF59B8E1000
|
unkown
|
page readonly
|
|
|
|
7FF59C123000
|
unkown
|
page readonly
|
|
|
|
1D45F640000
|
unkown
|
page read and write
|
|
|
|
23A84530000
|
unkown
|
page read and write
|
|
|
|
1F365560000
|
unkown
|
page read and write
|
|
|
|
24CFFB5A000
|
unkown
|
page read and write
|
|
|
|
7FF5BE278000
|
unkown
|
page readonly
|
|
|
|
24CFF213000
|
unkown
|
page read and write
|
|
|
|
91D257A000
|
unkown
|
page read and write
|
|
|
|
7FF5750CC000
|
unkown
|
page readonly
|
|
|
|
7FF50280E000
|
unkown
|
page readonly
|
|
There are 1734 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://www.iis.net/downloads
|
|
|
|
https://privacy.microsoft.com/en-us/privacystatement
|
|
|
|
https://login.iis.net/account/login?ReturnUrl=https://www.iis.net/
|
|
|
|
https://dotnet.microsoft.com/
|
|
|
|
https://www.microsoft.com/de-ch/
|
|
|
|
https://www.iis.net/?utm_medium=iis-deployment
|
|
|
|
https://www.iis.net/
|
|
|
|
https://docs.microsoft.com/en-us/iis/configuration/
|
|
|
|
https://www.iis.net/?utm_medium=iis-deployment#hero
|
|
|
|
https://docs.microsoft.com/en-us/iis/get-started/whats-new-in-iis-10-version-1709/new-features-introduced-in-iis-10-1709
|
|
|
|
https://dotnet.microsoft.com/apps/aspnet
|
|
|
|
https://docs.microsoft.com/en-us/IIS-Administration/
|
|
There are 2 hidden doms, click here to show them.