Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
https://weqx-my.sharepoint.com/:o:/p/nickih/EnrEBisYJgFMjKj17xbO1GIBNQ6vJ8NR5nUhLWA-mDKPPA?e=5eaL3g
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\GG8[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\A7KUHRX2\weqx-my.sharepoint[1].xml
|
ASCII text, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\NW4Q9E12\www.onenote[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\SCNXCACF\onenote.officeapps.live[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D4C8E215-7D7B-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D4C8E217-7D7B-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{DB758347-7D7B-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EDE95C36-7D7B-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{F727EBEF-7D7B-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Blank10x10[1].gif
|
GIF image data, version 89a, 10 x 10
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\GetImage[1].png
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\GetImage[2].png
|
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Instrumentation[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\LearningTools[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\OneNote.box4.dll2[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Onedrive-logo[1].png
|
PNG image data, 170 x 114, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\aria-web-telemetry-2.9.0.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bootstrap.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\common.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\healthOffline.worker.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mem5YaGs126MiZpBA-UN_r8OUuhv[1].woff
|
Web Open Font Format, TrueType, length 18668, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mem6YaGs126MiZpBA-UFUK0Zdcs[1].woff
|
Web Open Font Format, TrueType, length 17440, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\memnYaGs126MiZpBA-UFUKWyV9hrIqU[1].woff
|
Web Open Font Format, TrueType, length 17668, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\microsoftlogo[1].png
|
PNG image data, 115 x 26, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\moeerrorux[1].css
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\officebg[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1420x1080, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\officebrowserfeedback_floodgate[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\officelogo[1].png
|
PNG image data, 163 x 75, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onenoteSync.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onenoteloadingspinner.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\oreonavpane.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\oreonotebookpane.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\oreosearchpane.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\otelFull.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\plt.resx-plt.chunk[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\progress[1].gif
|
GIF image data, version 89a, 24 x 24
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\suiteux.shell.consappdata[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\wacBoot.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AppSettingsHandler[1].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ColumnSelect[1].cur
|
MS Windows cursor resource - 1 icon, 32x32, hotspot @16x21
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\CommonDiagnostics[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\FavIcon_OneNote[1].ico
|
MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\Meetings_manifest[1].xml
|
XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\MicrosoftAjax[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\OfficeExtension.WacRuntime[1].js
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\OneNoteSimplified.Wac.TellMeModel[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\OneNoteSimplified.Wac.TellMeSuggestionModel[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\appChromeLazy.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\appIconsLazy.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\box42[1].png
|
PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\common50.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fontawesome-webfont[1].eot
|
Embedded OpenType (EOT), FontAwesome family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jSanity[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jquery-3.1.1.slim.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\js-cookie[1].js
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\landing-devices-bg[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\learningtools[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\listAll[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\login[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\mail[1].png
|
PNG image data, 100 x 87, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\mem5YaGs126MiZpBA-UN8rsOUuhv[1].woff
|
Web Open Font Format, TrueType, length 19072, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\memnYaGs126MiZpBA-UFUKXGUdhrIqU[1].woff
|
Web Open Font Format, TrueType, length 17492, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\microbg[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\office_strings[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\one[1].png
|
PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onenote-boot.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onenote-ribbon-sprite-lazy.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onenoteframe[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\outlook[1].png
|
PNG image data, 213 x 211, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\strings[1].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Box4Intl[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\CommonIntl[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\EditSurface[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\GG8[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Office365[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\OneNote.Refresh[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\OneNote.box4.dll1[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\OneNoteIntl[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\OneNote[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\OsfRuntimeOneNoteWAC[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Othermail[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\WoncaIntl[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\agavedefaulticon96x96[1].png
|
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bootstrap.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\css[1].css
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\es6-promise.auto.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fabricmdl2icons[1].woff
|
Web Open Font Format, TrueType, length 151924, version 0.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\font-awesome.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\mem8YaGs126MiZpBA-UFVZ0d[1].woff
|
Web Open Font Format, TrueType, length 18100, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\memnYaGs126MiZpBA-UFUKW-U9hrIqU[1].woff
|
Web Open Font Format, TrueType, length 17788, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\memnYaGs126MiZpBA-UFUKWiUNhrIqU[1].woff
|
Web Open Font Format, TrueType, length 17452, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onenote-web-16.00[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\oreolazy.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\pickadate.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ping[1].json
|
ASCII text, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\shellstrings[1].json
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\suiteux.shell.core[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\suiteux.shell.plus[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\wachostwebpack[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\webauth.implicit.msal.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\36796050726[1]
|
TrueType Font data, 19 tables, 1st "GDEF", 50 names, Unicode, \251 2018 Microsoft Corporation. All Rights Reserved.
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\44327025345[1]
|
TrueType Font data, 21 tables, 1st "EBDT", name offset 0x108c90
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\Acl1033[1].js
|
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BrowserUls[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\Doc[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\OneNote[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\Outlook[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\appChrome.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\bootstrap.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\bootstrap.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\box43[1].png
|
PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jquery-2.1.3.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\me[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\mem5YaGs126MiZpBA-UN7rgOUuhv[1].woff
|
Web Open Font Format, TrueType, length 18900, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\mem5YaGs126MiZpBA-UNirkOUuhv[1].woff
|
Web Open Font Format, TrueType, length 18696, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\moe_status_icons[1].png
|
PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\navigation.min[1].js
|
UTF-8 Unicode text, with very long lines, with LF, NEL line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\odsp.aria.lib[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\odsp.react.lib[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\office[1].js
|
ASCII text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\office[1].png
|
PNG image data, 512 x 512, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\officebrowserfeedback[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\officebrowserfeedbackstrings[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\onenote-intl-mlr.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\onenote-ribbon-intl.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\osfruntime_strings[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\oteljs_agave[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\require[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\style[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\tether.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\wacairspaceanimationlibrary[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\webmaillogo[1].png
|
PNG image data, 322 x 50, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\dat8826.tmp
|
Web Open Font Format, TrueType, length 3844, version 1.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\dat913F.tmp
|
Web Open Font Format, TrueType, length 2472, version 3.38012
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\dat9140.tmp
|
Web Open Font Format, TrueType, length 17016, version 4.4588
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF35C335082379C453.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF74528054443D755C.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF91D960B693E2849F.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFD3FED712A24E6211.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFE749372F252F96D6.TMP
|
data
|
dropped
|
|
There are 141 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5728 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Windows\System32\dllhost.exe
|
C:\Windows\system32\DllHost.exe /Processid:{49F171DD-B51A-40D3-9A6C-52D674CC729D}
|
|
|
|
C:\Windows\explorer.exe
|
|
||
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5728 CREDAT:17438 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://marinapayroll.com/OH2/GG8/Office365.phpo=YLt
|
unknown
|
|
|
|
https://marinapayroll.com/OH2/GG8/Outlook.phpH
|
unknown
|
|
|
|
https://marinapayroll.com/OH2/GG8/Outlook.phpp
|
unknown
|
|
|
|
https://marinapayroll.com/OH2/GG8/Outlook.phpBSign
|
unknown
|
|
|
|
https://marinapayroll.com/OH2/GG8/Outlook.php
|
|
||
|
https://marinapayroll.com/OH2/GG8/Outlook.php=
|
unknown
|
|
|
|
https://weqx-my.sharepoint.com/:o:/p/nickih/EnrEBisYJgFMjKj17xbO1GIBNQ6vJ8NR5nUhLWA-mDKPPA?e=5eaL3g
|
unknown
|
|
|
|
https://marinapayroll.com/OH2/GG8/Othermail.phpapayroll.com/OH2/GG8/Outlook.phpel
|
unknown
|
|
|
|
https://marinapayroll.com/OH2/GG8/Office365.php
|
unknown
|
|
|
|
http://search.chol.com/favicon.ico
|
unknown
|
|
|
|
http://www.mercadolivre.com.br/
|
unknown
|
|
|
|
http://www.merlin.com.pl/favicon.ico
|
unknown
|
|
|
|
http://www.dailymail.co.uk/
|
unknown
|
|
|
|
http://www.fontbureau.com/designers
|
unknown
|
|
|
|
http://fr.search.yahoo.com/
|
unknown
|
|
|
|
http://in.search.yahoo.com/
|
unknown
|
|
|
|
http://www.opensource.org/licenses/mit-license.php
|
unknown
|
|
|
|
https://github.com/twbs/bootstrap/graphs/contributors)
|
unknown
|
|
|
|
http://img.shopzilla.com/shopzilla/shopzilla.ico
|
unknown
|
|
|
|
https://weqx-my.sharepoint.com/favicon.ico
|
unknown
|
|
|
|
http://www.galapagosdesign.com/DPlease
|
unknown
|
|
|
|
http://msk.afisha.ru/
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://busca.igbusca.com.br//app/static/images/favicon.ico
|
unknown
|
|
|
|
http://www.ya.com/favicon.ico
|
unknown
|
|
|
|
http://www.etmall.com.tw/favicon.ico
|
unknown
|
|
|
|
https://augmentation.osi.office-int.net/OfficeAugmentation/SearchWeb/
|
unknown
|
|
|
|
http://it.search.dada.net/favicon.ico
|
unknown
|
|
|
|
http://search.hanafos.com/favicon.ico
|
unknown
|
|
|
|
http://cgi.search.biglobe.ne.jp/favicon.ico
|
unknown
|
|
|
|
http://search.msn.co.jp/results.aspx?q=
|
unknown
|
|
|
|
http://buscar.ozu.es/
|
unknown
|
|
|
|
http://www.microsofttranslator.com/BVPrev.aspx?ref=IE8Activity
|
unknown
|
|
|
|
http://www.ask.com/
|
unknown
|
|
|
|
http://www.google.it/
|
unknown
|
|
|
|
http://search.auction.co.kr/
|
unknown
|
|
|
|
http://www.amazon.de/
|
unknown
|
|
|
|
http://sads.myspace.com/
|
unknown
|
|
|
|
http://www.pchome.com.tw/favicon.ico
|
unknown
|
|
|
|
http://browse.guardian.co.uk/favicon.ico
|
unknown
|
|
|
|
http://google.pchome.com.tw/
|
unknown
|
|
|
|
http://list.taobao.com/browse/search_visual.htm?n=15&q=
|
unknown
|
|
|
|
http://www.rambler.ru/favicon.ico
|
unknown
|
|
|
|
http://uk.search.yahoo.com/
|
unknown
|
|
|
|
http://www.ozu.es/favicon.ico
|
unknown
|
|
|
|
http://search.sify.com/
|
unknown
|
|
|
|
http://openimage.interpark.com/interpark.ico
|
unknown
|
|
|
|
http://search.yahoo.co.jp/favicon.ico
|
unknown
|
|
|
|
http://www.gmarket.co.kr/
|
unknown
|
|
|
|
http://www.founder.com.cn/cn/bThe
|
unknown
|
|
|
|
http://search.nifty.com/
|
unknown
|
|
|
|
https://signup.live.com
|
unknown
|
|
|
|
http://www.google.si/
|
unknown
|
|
|
|
http://www.soso.com/
|
unknown
|
|
|
|
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-2.1.3.min.js
|
unknown
|
|
|
|
http://busca.orange.es/
|
unknown
|
|
|
|
http://cnweb.search.live.com/results.aspx?q=
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
http://auto.search.msn.com/response.asp?MT=
|
unknown
|
|
|
|
http://www.target.com/
|
unknown
|
|
|
|
https://marinapayroll.com/favicon.ico
|
unknown
|
|
|
|
http://search.orange.co.uk/favicon.ico
|
unknown
|
|
|
|
http://www.iask.com/
|
unknown
|
|
|
|
http://search.centrum.cz/favicon.ico
|
unknown
|
|
|
|
http://service2.bfast.com/
|
unknown
|
|
|
|
http://ariadna.elmundo.es/
|
unknown
|
|
|
|
http://www.news.com.au/favicon.ico
|
unknown
|
|
|
|
http://www.cdiscount.com/
|
unknown
|
|
|
|
http://www.tiscali.it/favicon.ico
|
unknown
|
|
|
|
http://it.search.yahoo.com/
|
unknown
|
|
|
|
http://www.ceneo.pl/favicon.ico
|
unknown
|
|
|
|
http://www.servicios.clarin.com/
|
unknown
|
|
|
|
http://search.daum.net/favicon.ico
|
unknown
|
|
|
|
http://www.kkbox.com.tw/
|
unknown
|
|
|
|
http://search.goo.ne.jp/favicon.ico
|
unknown
|
|
|
|
http://search.msn.com/results.aspx?q=
|
unknown
|
|
|
|
http://list.taobao.com/
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
http://www.taobao.com/favicon.ico
|
unknown
|
|
|
|
http://www.etmall.com.tw/
|
unknown
|
|
|
|
http://ie.search.yahoo.com/os?command=
|
unknown
|
|
|
|
https://onenote.officeapps.li
|
unknown
|
|
|
|
http://www.cnet.com/favicon.ico
|
unknown
|
|
|
|
http://www.linternaute.com/favicon.ico
|
unknown
|
|
|
|
http://www.amazon.co.uk/
|
unknown
|
|
|
|
http://www.cdiscount.com/favicon.ico
|
unknown
|
|
|
|
http://www.asharqalawsat.com/favicon.ico
|
unknown
|
|
|
|
http://www.google.fr/
|
unknown
|
|
|
|
http://search.gismeteo.ru/
|
unknown
|
|
|
|
http://www.rtl.de/
|
unknown
|
|
|
|
http://www.soso.com/favicon.ico
|
unknown
|
|
|
|
http://www.univision.com/favicon.ico
|
unknown
|
|
|
|
http://search.ipop.co.kr/
|
unknown
|
|
|
|
http://www.auction.co.kr/auction.ico
|
unknown
|
|
|
|
http://www.orange.fr/
|
unknown
|
|
|
|
http://video.globo.com/favicon.ico
|
unknown
|
|
|
|
http://www.google.co.uk/
|
unknown
|
|
|
|
http://www.founder.com.cn/cn
|
unknown
|
|
|
|
https://uci.officeapps.live-int.com/OfficeInsights/Agave/Web/
|
unknown
|
|
|
|
https://cdnjs.cloudflare.com/ajax/libs/tether/1.4.0/js/tether.min.js
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
marinapayroll.com
|
162.241.127.18
|
|
|
|
cdnjs.cloudflare.com
|
104.16.18.94
|
|
|
|
i-db3p-cor003.api.p001.1drv.com
|
40.90.136.179
|
|
|
|
onenoteonlinesync.onenote.com
|
unknown
|
|
|
|
code.jquery.com
|
unknown
|
|
|
|
maxcdn.bootstrapcdn.com
|
unknown
|
|
|
|
messaging.office.com
|
unknown
|
|
|
|
amcdn.msftauth.net
|
unknown
|
|
|
|
www.onenote.com
|
unknown
|
|
|
|
spoprod-a.akamaihd.net
|
unknown
|
|
|
|
storage.live.com
|
unknown
|
|
|
|
ajax.aspnetcdn.com
|
unknown
|
|
|
|
weqx-my.sharepoint.com
|
unknown
|
|
There are 3 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
40.90.136.179
|
i-db3p-cor003.api.p001.1drv.com
|
United States
|
unknown
|
|
|
|
162.241.127.18
|
marinapayroll.com
|
United States
|
unknown
|
|
|
|
104.16.18.94
|
cdnjs.cloudflare.com
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{D4C8E215-7D7B-11EB-90E4-ECF4BB862DED}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
AdminActive
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Type
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Flags
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Window_Placement
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
There are 150 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5C8565000
|
unkown
|
page readonly
|
|
|
|
13CD8202000
|
unkown
|
page read and write
|
|
|
|
7FF5140D0000
|
unkown
|
page readonly
|
|
|
|
1E7BE6DB000
|
unkown
|
page readonly
|
|
|
|
257B3A65000
|
unkown
|
page read and write
|
|
|
|
21F127E000
|
unkown
|
page read and write
|
|
|
|
13CD7A65000
|
unkown
|
page read and write
|
|
|
|
7FF5E81D2000
|
unkown
|
page readonly
|
|
|
|
7FF5C889C000
|
unkown
|
page readonly
|
|
|
|
14AB000
|
unkown
|
page readonly
|
|
|
|
1E7C1340000
|
unkown
|
page read and write
|
|
|
|
1E7C1790000
|
unkown
|
page read and write
|
|
|
|
3423000
|
unkown
|
page read and write
|
|
|
|
7FF5C85F8000
|
unkown
|
page readonly
|
|
|
|
7FF514781000
|
unkown
|
page readonly
|
|
|
|
4095000
|
unkown
|
page readonly
|
|
|
|
1E7BEA79000
|
unkown
|
page readonly
|
|
|
|
4C40000
|
unkown
|
page readonly
|
|
|
|
1E7BB810000
|
heap default
|
page read and write
|
|
|
|
7FF57AE7B000
|
unkown
|
page readonly
|
|
|
|
7FF5B7276000
|
unkown
|
page readonly
|
|
|
|
53A0000
|
unkown
|
page readonly
|
|
|
|
1E7BE0E0000
|
unkown
|
page read and write
|
|
|
|
21E26B30000
|
heap private
|
page read and write
|
|
|
|
7FF57AE2C000
|
unkown
|
page readonly
|
|
|
|
7FF5556B6000
|
unkown
|
page readonly
|
|
|
|
1B0F6B6E000
|
unkown
|
page read and write
|
|
|
|
1E7BDA20000
|
unkown
|
page read and write
|
|
|
|
1E7BFB50000
|
unkown
|
page read and write
|
|
|
|
257B3A29000
|
unkown
|
page read and write
|
|
|
|
1E891029000
|
unkown
|
page read and write
|
|
|
|
1E7BE291000
|
unkown
|
page read and write
|
|
|
|
186DAB30000
|
unkown
|
page read and write
|
|
|
|
1B0F163D000
|
unkown
|
page read and write
|
|
|
|
257B3A2E000
|
unkown
|
page read and write
|
|
|
|
292C3EE000
|
unkown
|
page read and write
|
|
|
|
86C4000
|
unkown
|
page read and write
|
|
|
|
3FD5000
|
unkown
|
page readonly
|
|
|
|
1E7BE927000
|
unkown
|
page readonly
|
|
|
|
7FD5000
|
unkown image
|
page readonly
|
|
|
|
5490000
|
unkown
|
page read and write
|
|
|
|
4065000
|
unkown
|
page readonly
|
|
|
|
7FF5519AC000
|
unkown
|
page readonly
|
|
|
|
7FF5D4429000
|
unkown
|
page readonly
|
|
|
|
1E7BFC30000
|
unkown
|
page read and write
|
|
|
|
1E7BEBBF000
|
unkown
|
page readonly
|
|
|
|
1E7BE902000
|
unkown
|
page readonly
|
|
|
|
7FF5C0C09000
|
unkown
|
page readonly
|
|
|
|
3271000
|
unkown
|
page read and write
|
|
|
|
13CD80B0000
|
unkown
|
page readonly
|
|
|
|
53A0000
|
unkown
|
page readonly
|
|
|
|
1E7BE1C0000
|
unkown
|
page read and write
|
|
|
|
1E7BF940000
|
unkown
|
page readonly
|
|
|
|
4F5A000
|
unkown
|
page read and write
|
|
|
|
1E7BF720000
|
unkown
|
page read and write
|
|
|
|
13B9EFE000
|
unkown
|
page read and write
|
|
|
|
4F40000
|
unkown
|
page read and write
|
|
|
|
7FF56DE40000
|
unkown
|
page readonly
|
|
|
|
1E7BF290000
|
unkown
|
page readonly
|
|
|
|
1E7C1AA0000
|
unkown
|
page read and write
|
|
|
|
7FF551621000
|
unkown
|
page readonly
|
|
|
|
7FF555642000
|
unkown
|
page readonly
|
|
|
|
7FF57AEDA000
|
unkown
|
page readonly
|
|
|
|
7FF5556C6000
|
unkown
|
page readonly
|
|
|
|
4920000
|
unkown
|
page readonly
|
|
|
|
1E7C0B50000
|
unkown
|
page read and write
|
|
|
|
1E89104B000
|
unkown
|
page read and write
|
|
|
|
A4CB000
|
unkown
|
page read and write
|
|
|
|
1398000
|
heap default
|
page read and write
|
|
|
|
190E124D000
|
unkown
|
page read and write
|
|
|
|
1B0F1702000
|
unkown
|
page read and write
|
|
|
|
257B3860000
|
unkown
|
page readonly
|
|
|
|
7FF57AFB0000
|
unkown
|
page readonly
|
|
|
|
21E26B35000
|
heap private
|
page read and write
|
|
|
|
1E7BE076000
|
unkown
|
page read and write
|
|
|
|
5030000
|
unkown
|
page readonly
|
|
|
|
7FF5147B4000
|
unkown
|
page readonly
|
|
|
|
8905000
|
unkown
|
page read and write
|
|
|
|
45B2000
|
unkown
|
page readonly
|
|
|
|
34AC000
|
unkown
|
page read and write
|
|
|
|
4E4A000
|
unkown
|
page read and write
|
|
|
|
14AB000
|
unkown
|
page readonly
|
|
|
|
7FF56DE0D000
|
unkown
|
page readonly
|
|
|
|
67C48FE000
|
unkown
|
page read and write
|
|
|
|
7FF551766000
|
unkown
|
page readonly
|
|
|
|
1E7C1940000
|
unkown
|
page read and write
|
|
|
|
7FF5C896F000
|
unkown
|
page readonly
|
|
|
|
7FF514C55000
|
unkown
|
page readonly
|
|
|
|
4AB2000
|
unkown
|
page readonly
|
|
|
|
7FF57A7F3000
|
unkown
|
page readonly
|
|
|
|
7FF5556E7000
|
unkown
|
page readonly
|
|
|
|
7FFB5BBCC000
|
unkown image
|
page read and write
|
|
|
|
7852000
|
unkown image
|
page readonly
|
|
|
|
1E7BEA65000
|
unkown
|
page readonly
|
|
|
|
7EF3000
|
unkown image
|
page readonly
|
|
|
|
400837B000
|
unkown
|
page read and write
|
|
|
|
4C60000
|
unkown
|
page readonly
|
|
|
|
8540000
|
unkown
|
page read and write
|
|
|
|
7FF5D43E8000
|
unkown
|
page readonly
|
|
|
|
257B3850000
|
heap default
|
page read and write
|
|
|
|
7FF5D4147000
|
unkown
|
page readonly
|
|
|
|
4EC58FE000
|
unkown
|
page read and write
|
|
|
|
1E7C1A20000
|
unkown
|
page read and write
|
|
|
|
1B0F169D000
|
unkown
|
page read and write
|
|
|
|
1E7BE160000
|
unkown
|
page read and write
|
|
|
|
1B0F1DF3000
|
unkown
|
page read and write
|
|
|
|
1CF0222A000
|
unkown
|
page read and write
|
|
|
|
1B0F2560000
|
unkown
|
page read and write
|
|
|
|
9D50000
|
unkown
|
page read and write
|
|
|
|
1CF02400000
|
unkown
|
page readonly
|
|
|
|
7FF57A814000
|
unkown
|
page readonly
|
|
|
|
1E7C1980000
|
unkown
|
page read and write
|
|
|
|
186DAE00000
|
unkown
|
page readonly
|
|
|
|
13B92FE000
|
unkown
|
page read and write
|
|
|
|
13CD7A55000
|
unkown
|
page read and write
|
|
|
|
1B0F6C67000
|
unkown
|
page write copy
|
|
|
|
7FF5C0ACD000
|
unkown
|
page readonly
|
|
|
|
1B0F1F59000
|
unkown
|
page read and write
|
|
|
|
1915A200000
|
unkown
|
page readonly
|
|
|
|
32C0000
|
unkown
|
page readonly
|
|
|
|
E30000
|
unkown
|
page read and write
|
|
|
|
1E7BF5A0000
|
unkown
|
page read and write
|
|
|
|
7FF5146C7000
|
unkown
|
page readonly
|
|
|
|
1E7BE258000
|
unkown
|
page read and write
|
|
|
|
7FF5C8683000
|
unkown
|
page readonly
|
|
|
|
1E7BF671000
|
unkown
|
page read and write
|
|
|
|
7FF5C8805000
|
unkown
|
page readonly
|
|
|
|
7FF5140CA000
|
unkown
|
page readonly
|
|
|
|
7FF5C86CB000
|
unkown
|
page readonly
|
|
|
|
4A30000
|
unkown
|
page readonly
|
|
|
|
7FF5D43FA000
|
unkown
|
page readonly
|
|
|
|
FF0000
|
unkown
|
page read and write
|
|
|
|
7FF5E82D9000
|
unkown
|
page readonly
|
|
|
|
186DAA60000
|
unkown
|
page readonly
|
|
|
|
7FF5518B7000
|
unkown
|
page readonly
|
|
|
|
7FF56DB70000
|
unkown
|
page readonly
|
|
|
|
190E124B000
|
unkown
|
page read and write
|
|
|
|
1E7BFB00000
|
unkown
|
page read and write
|
|
|
|
7FF514CC9000
|
unkown
|
page readonly
|
|
|
|
7FF57AD3F000
|
unkown
|
page readonly
|
|
|
|
1E7BD203000
|
heap private
|
page read and write
|
|
|
|
1A6A8370000
|
unkown
|
page readonly
|
|
|
|
8027000
|
unkown image
|
page readonly
|
|
|
|
3CC2000
|
unkown
|
page readonly
|
|
|
|
186DA487000
|
unkown
|
page read and write
|
|
|
|
7FF5C89C7000
|
unkown
|
page readonly
|
|
|
|
1E7C1A30000
|
unkown
|
page read and write
|
|
|
|
5A40000
|
unkown
|
page readonly
|
|
|
|
7FF5C8853000
|
unkown
|
page readonly
|
|
|
|
21E26B10000
|
unkown
|
page readonly
|
|
|
|
1E7BDF62000
|
unkown
|
page read and write
|
|
|
|
7FF5C0C54000
|
unkown
|
page readonly
|
|
|
|
19159E55000
|
unkown
|
page read and write
|
|
|
|
1915B7C0000
|
unkown
|
page read and write
|
|
|
|
7FF5519D7000
|
unkown
|
page readonly
|
|
|
|
1490000
|
unkown
|
page readonly
|
|
|
|
41BF000
|
unkown
|
page readonly
|
|
|
|
7FF5E81E2000
|
unkown
|
page readonly
|
|
|
|
1B0F2660000
|
unkown
|
page readonly
|
|
|
|
4970000
|
unkown
|
page readonly
|
|
|
|
7FF551847000
|
unkown
|
page readonly
|
|
|
|
4E61000
|
unkown
|
page read and write
|
|
|
|
4F10000
|
unkown
|
page read and write
|
|
|
|
7FF55196E000
|
unkown
|
page readonly
|
|
|
|
7FF5C0BDA000
|
unkown
|
page readonly
|
|
|
|
4AE0000
|
unkown
|
page readonly
|
|
|
|
7FF5C0BC8000
|
unkown
|
page readonly
|
|
|
|
7FF5DDFB9000
|
unkown
|
page readonly
|
|
|
|
1380000
|
unkown
|
page readonly
|
|
|
|
47B0000
|
unkown
|
page readonly
|
|
|
|
7FF5C865F000
|
unkown
|
page readonly
|
|
|
|
7FF56DDB6000
|
unkown
|
page readonly
|
|
|
|
7FF51405A000
|
unkown
|
page readonly
|
|
|
|
1E7BF055000
|
unkown
|
page readonly
|
|
|
|
871F000
|
unkown
|
page read and write
|
|
|
|
1E7BF6E0000
|
unkown
|
page read and write
|
|
|
|
1E890F50000
|
heap default
|
page read and write
|
|
|
|
1E7BFAF0000
|
unkown
|
page read and write
|
|
|
|
1E7BDB70000
|
unkown
|
page read and write
|
|
|
|
1E7BFB72000
|
unkown
|
page read and write
|
|
|
|
7D5BAFF000
|
unkown
|
page read and write
|
|
|
|
1E7BD8F0000
|
unkown
|
page read and write
|
|
|
|
13CD8400000
|
unkown
|
page readonly
|
|
|
|
7FAC000
|
unkown image
|
page readonly
|
|
|
|
1E7BD350000
|
heap private
|
page read and write
|
|
|
|
1B0F1F18000
|
unkown
|
page read and write
|
|
|
|
4D387E000
|
unkown
|
page read and write
|
|
|
|
4CA0000
|
unkown
|
page readonly
|
|
|
|
1A6A8424000
|
unkown
|
page read and write
|
|
|
|
13B9CFC000
|
unkown
|
page read and write
|
|
|
|
7FF5C855D000
|
unkown
|
page readonly
|
|
|
|
7FF57AEB0000
|
unkown
|
page readonly
|
|
|
|
1E7BDEDD000
|
unkown
|
page read and write
|
|
|
|
7FF514C19000
|
unkown
|
page readonly
|
|
|
|
186DAC02000
|
unkown
|
page read and write
|
|
|
|
1E7BF356000
|
unkown
|
page readonly
|
|
|
|
1CF024D0000
|
unkown
|
page readonly
|
|
|
|
7FF51494C000
|
unkown
|
page readonly
|
|
|
|
7FF5556E4000
|
unkown
|
page readonly
|
|
|
|
1E7BF480000
|
unkown
|
page readonly
|
|
|
|
7FF5C847D000
|
unkown
|
page readonly
|
|
|
|
1E7BE1E0000
|
unkown
|
page read and write
|
|
|
|
1E7BD2D0000
|
unkown
|
page read and write
|
|
|
|
1E7BD210000
|
unkown
|
page readonly
|
|
|
|
19159CE0000
|
unkown
|
page readonly
|
|
|
|
186DA370000
|
heap private
|
page read and write
|
|
|
|
7FF5146C4000
|
unkown
|
page readonly
|
|
|
|
34AE000
|
unkown
|
page read and write
|
|
|
|
1B0F16A4000
|
unkown
|
page read and write
|
|
|
|
7FF5C89C4000
|
unkown
|
page readonly
|
|
|
|
5480000
|
unkown
|
page readonly
|
|
|
|
7FF56DDE5000
|
unkown
|
page readonly
|
|
|
|
7FF57AF2C000
|
unkown
|
page readonly
|
|
|
|
7FF5E81D0000
|
unkown
|
page readonly
|
|
|
|
1E7BD360000
|
unkown
|
page readonly
|
|
|
|
1E7BD823000
|
unkown
|
page readonly
|
|
|
|
21E28420000
|
heap private
|
page read and write
|
|
|
|
7FF5C8262000
|
unkown
|
page readonly
|
|
|
|
7FF5C873C000
|
unkown
|
page readonly
|
|
|
|
1490000
|
unkown
|
page readonly
|
|
|
|
47C4000
|
unkown
|
page readonly
|
|
|
|
77D0000
|
unkown
|
page read and write
|
|
|
|
5800000
|
unkown
|
page read and write
|
|
|
|
190E10D0000
|
heap default
|
page read and write
|
|
|
|
1E7BE862000
|
unkown
|
page readonly
|
|
|
|
57D0000
|
unkown
|
page read and write
|
|
|
|
1A6A86D0000
|
unkown
|
page readonly
|
|
|
|
7FF514943000
|
unkown
|
page readonly
|
|
|
|
4900000
|
unkown
|
page readonly
|
|
|
|
5ADC000
|
unkown
|
page read and write
|
|
|
|
7FF5C8530000
|
unkown
|
page readonly
|
|
|
|
7FF56DE9E000
|
unkown
|
page readonly
|
|
|
|
1E7BF500000
|
unkown
|
page readonly
|
|
|
|
3FE9000
|
unkown
|
page readonly
|
|
|
|
1380000
|
unkown
|
page readonly
|
|
|
|
7FF5C87DC000
|
unkown
|
page readonly
|
|
|
|
77C66FF000
|
unkown
|
page read and write
|
|
|
|
F5DC000
|
unkown
|
page read and write
|
|
|
|
4F30000
|
unkown
|
page read and write
|
|
|
|
1E7BDA32000
|
unkown
|
page read and write
|
|
|
|
7FF54057F000
|
unkown
|
page readonly
|
|
|
|
1E7C0B31000
|
unkown
|
page read and write
|
|
|
|
1E7BF482000
|
unkown
|
page readonly
|
|
|
|
86BE000
|
unkown
|
page read and write
|
|
|
|
7FF5C8465000
|
unkown
|
page readonly
|
|
|
|
8837000
|
unkown
|
page read and write
|
|
|
|
7FFB5BA31000
|
unkown image
|
page execute read
|
|
|
|
7FF5C88D7000
|
unkown
|
page readonly
|
|
|
|
2771D7B000
|
unkown
|
page read and write
|
|
|
|
8020000
|
unkown image
|
page readonly
|
|
|
|
21E26980000
|
unkown
|
page readonly
|
|
|
|
1B0F6C30000
|
unkown
|
page read and write
|
|
|
|
1CF02C00000
|
unkown
|
page readonly
|
|
|
|
4C70000
|
unkown
|
page readonly
|
|
|
|
7FF5D43AA000
|
unkown
|
page readonly
|
|
|
|
7FF5C842E000
|
unkown
|
page readonly
|
|
|
|
55C0000
|
unkown
|
page readonly
|
|
|
|
1423000
|
heap default
|
page read and write
|
|
|
|
1E7BF6F0000
|
unkown
|
page read and write
|
|
|
|
1A6A8600000
|
unkown
|
page readonly
|
|
|
|
7FF56DC48000
|
unkown
|
page readonly
|
|
|
|
33D9000
|
unkown
|
page read and write
|
|
|
|
7D0E000
|
unkown image
|
page readonly
|
|
|
|
7FF5E82D9000
|
unkown
|
page readonly
|
|
|
|
2771A7E000
|
unkown
|
page read and write
|
|
|
|
3E87000
|
unkown
|
page readonly
|
|
|
|
1E7BE8B7000
|
unkown
|
page readonly
|
|
|
|
7FFB5BBC3000
|
unkown image
|
page read and write
|
|
|
|
2EE3000
|
heap private
|
page read and write
|
|
|
|
4FD0000
|
unkown
|
page read and write
|
|
|
|
F638000
|
unkown
|
page read and write
|
|
|
|
336B000
|
unkown
|
page read and write
|
|
|
|
7FF5C0C2C000
|
unkown
|
page readonly
|
|
|
|
4956000
|
unkown
|
page readonly
|
|
|
|
7FF5C853D000
|
unkown
|
page readonly
|
|
|
|
7FF5C8922000
|
unkown
|
page readonly
|
|
|
|
1E7BF8B0000
|
unkown
|
page read and write
|
|
|
|
7FF5C87AF000
|
unkown
|
page readonly
|
|
|
|
1E7BE2CF000
|
unkown
|
page read and write
|
|
|
|
7D5B3FF000
|
unkown
|
page read and write
|
|
|
|
37F0000
|
unkown
|
page readonly
|
|
|
|
1E7C1E70000
|
unkown
|
page read and write
|
|
|
|
4F6A000
|
unkown
|
page read and write
|
|
|
|
15C0000
|
unkown
|
page readonly
|
|
|
|
7FF56DA78000
|
unkown
|
page readonly
|
|
|
|
7FF540043000
|
unkown
|
page readonly
|
|
|
|
7F45000
|
unkown image
|
page readonly
|
|
|
|
7FF555749000
|
unkown
|
page readonly
|
|
|
|
7FF5C8258000
|
unkown
|
page readonly
|
|
|
|
7FF5E8111000
|
unkown
|
page readonly
|
|
|
|
83E0000
|
unkown
|
page readonly
|
|
|
|
1E7C1960000
|
unkown
|
page read and write
|
|
|
|
1B0F6CA0000
|
unkown
|
page read and write
|
|
|
|
55D0000
|
unkown
|
page read and write
|
|
|
|
1310000
|
unkown
|
page readonly
|
|
|
|
1E7C0A70000
|
unkown
|
page read and write
|
|
|
|
2EE0000
|
heap private
|
page read and write
|
|
|
|
1E7BE29E000
|
unkown
|
page read and write
|
|
|
|
1E7BDE50000
|
unkown
|
page readonly
|
|
|
|
CDCB000
|
unkown
|
page read and write
|
|
|
|
7FF551928000
|
unkown
|
page readonly
|
|
|
|
2771F7E000
|
unkown
|
page read and write
|
|
|
|
4EE0000
|
unkown
|
page readonly
|
|
|
|
1E7C1910000
|
unkown
|
page read and write
|
|
|
|
88C3000
|
unkown
|
page read and write
|
|
|
|
7FF56DDDE000
|
unkown
|
page readonly
|
|
|
|
7FF5C8419000
|
unkown
|
page readonly
|
|
|
|
1E7BEC36000
|
unkown
|
page readonly
|
|
|
|
FFDE9FE000
|
unkown
|
page read and write
|
|
|
|
1E7BEFE2000
|
unkown
|
page readonly
|
|
|
|
1E7C18C0000
|
unkown
|
page read and write
|
|
|
|
1E7BDDD0000
|
unkown
|
page read and write
|
|
|
|
EE3E000
|
unkown
|
page read and write
|
|
|
|
1CF02202000
|
unkown
|
page read and write
|
|
|
|
5139000
|
unkown
|
page read and write
|
|
|
|
7FF57AFB9000
|
unkown
|
page readonly
|
|
|
|
7FF554EF7000
|
unkown
|
page readonly
|
|
|
|
190E11B0000
|
unkown
|
page readonly
|
|
|
|
7FF5E8277000
|
unkown
|
page readonly
|
|
|
|
7FF5DDFD6000
|
unkown
|
page readonly
|
|
|
|
257B3A7A000
|
unkown
|
page read and write
|
|
|
|
1CF02200000
|
unkown
|
page read and write
|
|
|
|
13CD79F0000
|
unkown
|
page readonly
|
|
|
|
7FF5D4387000
|
unkown
|
page readonly
|
|
|
|
7FF5144CE000
|
unkown
|
page readonly
|
|
|
|
1E7C1A10000
|
unkown
|
page read and write
|
|
|
|
1E7BDB50000
|
unkown
|
page read and write
|
|
|
|
12F0000
|
unkown
|
page readonly
|
|
|
|
7FF555365000
|
unkown
|
page readonly
|
|
|
|
1290000
|
unkown
|
page readonly
|
|
|
|
1E7BFB92000
|
unkown
|
page read and write
|
|
|
|
7FF5C82BE000
|
unkown
|
page readonly
|
|
|
|
7FF5519A6000
|
unkown
|
page readonly
|
|
|
|
7FF5C85F6000
|
unkown
|
page readonly
|
|
|
|
1390000
|
heap default
|
page read and write
|
|
|
|
7FF5C873A000
|
unkown
|
page readonly
|
|
|
|
7FF55193D000
|
unkown
|
page readonly
|
|
|
|
15BA000
|
unkown
|
page read and write
|
|
|
|
7FF5146E3000
|
unkown
|
page readonly
|
|
|
|
1CF02302000
|
unkown
|
page read and write
|
|
|
|
77C677F000
|
unkown
|
page read and write
|
|
|
|
1B0F6B68000
|
unkown
|
page read and write
|
|
|
|
40083FE000
|
unkown
|
page read and write
|
|
|
|
3900000
|
unkown
|
page readonly
|
|
|
|
1B0F1F18000
|
unkown
|
page read and write
|
|
|
|
1E7C1090000
|
heap private
|
page read and write
|
|
|
|
7FF540637000
|
unkown
|
page readonly
|
|
|
|
3720000
|
unkown
|
page readonly
|
|
|
|
14E0000
|
unkown
|
page read and write
|
|
|
|
7FF5519D4000
|
unkown
|
page readonly
|
|
|
|
186DA42A000
|
unkown
|
page read and write
|
|
|
|
1E7C18D0000
|
unkown
|
page read and write
|
|
|
|
542D000
|
unkown
|
page read and write
|
|
|
|
4642000
|
unkown
|
page readonly
|
|
|
|
1E7BF0C2000
|
unkown
|
page readonly
|
|
|
|
2771B7F000
|
unkown
|
page read and write
|
|
|
|
21F13FF000
|
unkown
|
page read and write
|
|
|
|
292C977000
|
unkown
|
page read and write
|
|
|
|
1E891100000
|
unkown
|
page read and write
|
|
|
|
1E7BE6B4000
|
unkown
|
page readonly
|
|
|
|
C64B000
|
unkown
|
page read and write
|
|
|
|
1E7BE1D0000
|
unkown
|
page read and write
|
|
|
|
257B3A59000
|
unkown
|
page read and write
|
|
|
|
7FF555685000
|
unkown
|
page readonly
|
|
|
|
ED6000
|
unkown
|
page read and write
|
|
|
|
1E7BFC10000
|
heap private
|
page read and write
|
|
|
|
1E891013000
|
unkown
|
page read and write
|
|
|
|
1A6A8390000
|
unkown
|
page read and write
|
|
|
|
4FB0000
|
unkown
|
page read and write
|
|
|
|
7FF514BDA000
|
unkown
|
page readonly
|
|
|
|
5020000
|
unkown
|
page read and write
|
|
|
|
186DA3D0000
|
heap default
|
page read and write
|
|
|
|
7FF57AD80000
|
unkown
|
page readonly
|
|
|
|
1E7BEDEB000
|
unkown
|
page readonly
|
|
|
|
257B3C00000
|
unkown
|
page readonly
|
|
|
|
1E7BF3D2000
|
unkown
|
page readonly
|
|
|
|
4772000
|
unkown
|
page readonly
|
|
|
|
7FF514C36000
|
unkown
|
page readonly
|
|
|
|
FE0000
|
unkown
|
page readonly
|
|
|
|
5A50000
|
unkown
|
page read and write
|
|
|
|
340B000
|
unkown
|
page read and write
|
|
|
|
1E891000000
|
unkown
|
page read and write
|
|
|
|
7B8D000
|
unkown image
|
page readonly
|
|
|
|
F5F1000
|
unkown
|
page read and write
|
|
|
|
8889000
|
unkown
|
page read and write
|
|
|
|
7FF5517BF000
|
unkown
|
page readonly
|
|
|
|
340B000
|
unkown
|
page read and write
|
|
|
|
7FF56DEA9000
|
unkown
|
page readonly
|
|
|
|
1E7C1950000
|
unkown
|
page read and write
|
|
|
|
7FF57AF57000
|
unkown
|
page readonly
|
|
|
|
7FF5E7DCA000
|
unkown
|
page readonly
|
|
|
|
7FF5C0AF1000
|
unkown
|
page readonly
|
|
|
|
7FF5E8229000
|
unkown
|
page readonly
|
|
|
|
3E62000
|
unkown
|
page readonly
|
|
|
|
4EC587E000
|
unkown
|
page read and write
|
|
|
|
7FF5C877A000
|
unkown
|
page readonly
|
|
|
|
1E7BF3A2000
|
unkown
|
page readonly
|
|
|
|
7FF551942000
|
unkown
|
page readonly
|
|
|
|
45D7000
|
unkown
|
page readonly
|
|
|
|
7FF514483000
|
unkown
|
page readonly
|
|
|
|
7FF5DDFA5000
|
unkown
|
page readonly
|
|
|
|
1E7C1A70000
|
unkown
|
page read and write
|
|
|
|
1E7BE2E0000
|
unkown
|
page readonly
|
|
|
|
1520000
|
unkown
|
page read and write
|
|
|
|
7D5AD0B000
|
unkown
|
page read and write
|
|
|
|
7FF5D445C000
|
unkown
|
page readonly
|
|
|
|
257B3A63000
|
unkown
|
page read and write
|
|
|
|
21E26AF0000
|
unkown
|
page readonly
|
|
|
|
34AF000
|
unkown
|
page read and write
|
|
|
|
1B0F6E8D000
|
unkown
|
page read and write
|
|
|
|
7FF5D444C000
|
unkown
|
page readonly
|
|
|
|
3426000
|
unkown
|
page read and write
|
|
|
|
7D5BBFE000
|
unkown
|
page read and write
|
|
|
|
7FF51449C000
|
unkown
|
page readonly
|
|
|
|
1B0F6B90000
|
unkown
|
page read and write
|
|
|
|
7FF5C8483000
|
unkown
|
page readonly
|
|
|
|
7FF57AE51000
|
unkown
|
page readonly
|
|
|
|
7FF5C07B0000
|
unkown
|
page readonly
|
|
|
|
7FF5C87C8000
|
unkown
|
page readonly
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
3FB2000
|
unkown
|
page readonly
|
|
|
|
32E0000
|
unkown
|
page readonly
|
|
|
|
1E7BDFE0000
|
unkown
|
page read and write
|
|
|
|
257B3A64000
|
unkown
|
page read and write
|
|
|
|
1B0F6A60000
|
unkown
|
page read and write
|
|
|
|
400857E000
|
unkown
|
page read and write
|
|
|
|
7FF5E8265000
|
unkown
|
page readonly
|
|
|
|
1E7BF0A4000
|
unkown
|
page readonly
|
|
|
|
1E7BDD80000
|
unkown
|
page read and write
|
|
|
|
1CF02313000
|
unkown
|
page read and write
|
|
|
|
E7B3000
|
unkown
|
page readonly
|
|
|
|
1B0F2470000
|
unkown
|
page read and write
|
|
|
|
4D35FB000
|
unkown
|
page read and write
|
|
|
|
341E000
|
unkown
|
page read and write
|
|
|
|
1E7BDA52000
|
unkown
|
page read and write
|
|
|
|
7FF5C86A3000
|
unkown
|
page readonly
|
|
|
|
7FF5C88B5000
|
unkown
|
page readonly
|
|
|
|
4F7A000
|
unkown
|
page read and write
|
|
|
|
4A80000
|
unkown
|
page readonly
|
|
|
|
7FF57AEEE000
|
unkown
|
page readonly
|
|
|
|
D2D1000
|
unkown
|
page read and write
|
|
|
|
1210000
|
unkown
|
page readonly
|
|
|
|
7FF55567E000
|
unkown
|
page readonly
|
|
|
|
7FF56DDB8000
|
unkown
|
page readonly
|
|
|
|
190E1289000
|
unkown
|
page read and write
|
|
|
|
1E7BF7B0000
|
unkown
|
page read and write
|
|
|
|
1E7BB9E0000
|
unkown
|
page readonly
|
|
|
|
7FF54073F000
|
unkown
|
page readonly
|
|
|
|
4DE0000
|
unkown
|
page read and write
|
|
|
|
257B3A62000
|
unkown
|
page read and write
|
|
|
|
1B0F16AC000
|
unkown
|
page read and write
|
|
|
|
7FF514728000
|
unkown
|
page readonly
|
|
|
|
4890000
|
unkown
|
page readonly
|
|
|
|
21E26AE0000
|
unkown
|
page readonly
|
|
|
|
292CB7D000
|
unkown
|
page read and write
|
|
|
|
7FF5C892D000
|
unkown
|
page readonly
|
|
|
|
887D000
|
unkown
|
page read and write
|
|
|
|
1B0F6C34000
|
unkown
|
page readonly
|
|
|
|
1B0F6EB2000
|
unkown
|
page read and write
|
|
|
|
1E7BF8A0000
|
unkown
|
page read and write
|
|
|
|
1E7C0490000
|
unkown
|
page read and write
|
|
|
|
21E26820000
|
unkown
|
page readonly
|
|
|
|
7FF5C85B7000
|
unkown
|
page readonly
|
|
|
|
257B3A61000
|
unkown
|
page read and write
|
|
|
|
7FF5E80AA000
|
unkown
|
page readonly
|
|
|
|
1B0F2460000
|
unkown
|
page read and write
|
|
|
|
3FB9000
|
unkown
|
page readonly
|
|
|
|
1E7BE150000
|
unkown
|
page read and write
|
|
|
|
4C50000
|
unkown
|
page readonly
|
|
|
|
7FF51407C000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page readonly
|
|
|
|
1CF02150000
|
unkown
|
page readonly
|
|
|
|
1330000
|
unkown
|
page read and write
|
|
|
|
1E891108000
|
unkown
|
page read and write
|
|
|
|
7FF56DE35000
|
unkown
|
page readonly
|
|
|
|
1240000
|
unkown
|
page readonly
|
|
|
|
4F80000
|
unkown
|
page read and write
|
|
|
|
1E7C1A90000
|
unkown
|
page read and write
|
|
|
|
FFDE3CE000
|
unkown
|
page read and write
|
|
|
|
1E7BDB30000
|
unkown
|
page read and write
|
|
|
|
7FF5C80A6000
|
unkown
|
page readonly
|
|
|
|
7FF57AE9C000
|
unkown
|
page readonly
|
|
|
|
C7CB000
|
unkown
|
page read and write
|
|
|
|
21F167D000
|
unkown
|
page read and write
|
|
|
|
7FF5C0AF7000
|
unkown
|
page readonly
|
|
|
|
DE39000
|
unkown
|
page read and write
|
|
|
|
EB0B000
|
unkown
|
page read and write
|
|
|
|
1E7BE170000
|
unkown
|
page read and write
|
|
|
|
7FF5DE000000
|
unkown
|
page readonly
|
|
|
|
7FF55568F000
|
unkown
|
page readonly
|
|
|
|
7FF5C8991000
|
unkown
|
page readonly
|
|
|
|
7FF5D4195000
|
unkown
|
page readonly
|
|
|
|
257B4202000
|
unkown
|
page read and write
|
|
|
|
7FF5C88B8000
|
unkown
|
page readonly
|
|
|
|
35D0000
|
unkown
|
page read and write
|
|
|
|
7FF5C86DE000
|
unkown
|
page readonly
|
|
|
|
E0C0000
|
unkown
|
page read and write
|
|
|
|
1E7BFAA0000
|
unkown
|
page read and write
|
|
|
|
1E7BFC00000
|
unkown
|
page read and write
|
|
|
|
14D0000
|
unkown
|
page read and write
|
|
|
|
7FF5C8448000
|
unkown
|
page readonly
|
|
|
|
7FF5C86E5000
|
unkown
|
page readonly
|
|
|
|
1B0F6CC0000
|
unkown
|
page read and write
|
|
|
|
E20000
|
heap private
|
page read and write
|
|
|
|
1E7BFB00000
|
unkown
|
page read and write
|
|
|
|
1350000
|
unkown
|
page readonly
|
|
|
|
1A6A842A000
|
unkown
|
page read and write
|
|
|
|
7FF5DE004000
|
unkown
|
page readonly
|
|
|
|
7FF57ABCC000
|
unkown
|
page readonly
|
|
|
|
1E7BE932000
|
unkown
|
page readonly
|
|
|
|
7FF56DE26000
|
unkown
|
page readonly
|
|
|
|
7FF5C890C000
|
unkown
|
page readonly
|
|
|
|
7FFB5BBEA000
|
unkown image
|
page readonly
|
|
|
|
47AB000
|
unkown
|
page readonly
|
|
|
|
1330000
|
unkown
|
page read and write
|
|
|
|
EB44000
|
unkown
|
page read and write
|
|
|
|
21E26B40000
|
unkown
|
page readonly
|
|
|
|
13CD7A4E000
|
unkown
|
page read and write
|
|
|
|
21E28570000
|
heap private
|
page read and write
|
|
|
|
1E7BF6A0000
|
unkown
|
page read and write
|
|
|
|
49D2000
|
unkown
|
page readonly
|
|
|
|
3E92000
|
unkown
|
page readonly
|
|
|
|
7FF56DDEF000
|
unkown
|
page readonly
|
|
|
|
7FF5DDFDC000
|
unkown
|
page readonly
|
|
|
|
1E7BDBA8000
|
unkown
|
page read and write
|
|
|
|
33AF000
|
unkown
|
page read and write
|
|
|
|
7FF54075D000
|
unkown
|
page readonly
|
|
|
|
4B20000
|
unkown
|
page readonly
|
|
|
|
7E2A000
|
unkown image
|
page readonly
|
|
|
|
2E8F000
|
unkown
|
page read and write
|
|
|
|
7FF5C0C26000
|
unkown
|
page readonly
|
|
|
|
1E7C1390000
|
unkown
|
page read and write
|
|
|
|
7FF57AB4E000
|
unkown
|
page readonly
|
|
|
|
1E7C0B40000
|
unkown
|
page read and write
|
|
|
|
1E7BF007000
|
unkown
|
page readonly
|
|
|
|
55AE000
|
unkown
|
page read and write
|
|
|
|
12B0000
|
unkown
|
page readonly
|
|
|
|
7FF56DC2F000
|
unkown
|
page readonly
|
|
|
|
1E7BDCF0000
|
unkown
|
page read and write
|
|
|
|
7FF5519A1000
|
unkown
|
page readonly
|
|
|
|
7FF5C82C0000
|
unkown
|
page readonly
|
|
|
|
7FF514451000
|
unkown
|
page readonly
|
|
|
|
7FF5C8569000
|
unkown
|
page readonly
|
|
|
|
7FF5E81E6000
|
unkown
|
page readonly
|
|
|
|
88E6000
|
unkown
|
page read and write
|
|
|
|
13CD7B13000
|
unkown
|
page read and write
|
|
|
|
1B0F1B90000
|
unkown
|
page readonly
|
|
|
|
50BA000
|
unkown
|
page read and write
|
|
|
|
1E7BF760000
|
unkown
|
page read and write
|
|
|
|
7FF5DDFAF000
|
unkown
|
page readonly
|
|
|
|
7FF555658000
|
unkown
|
page readonly
|
|
|
|
1E7C0FB0000
|
heap private
|
page read and write
|
|
|
|
1A6A8413000
|
unkown
|
page read and write
|
|
|
|
1200000
|
unkown
|
page readonly
|
|
|
|
3FD5000
|
unkown
|
page readonly
|
|
|
|
1E7BF359000
|
unkown
|
page readonly
|
|
|
|
7FF51454C000
|
unkown
|
page readonly
|
|
|
|
4EC597D000
|
unkown
|
page read and write
|
|
|
|
7FFB5BB19000
|
unkown image
|
page readonly
|
|
|
|
13CD7B02000
|
unkown
|
page read and write
|
|
|
|
7FF5C878F000
|
unkown
|
page readonly
|
|
|
|
52C0000
|
unkown
|
page readonly
|
|
|
|
67C49F5000
|
unkown
|
page read and write
|
|
|
|
4FD0000
|
unkown
|
page read and write
|
|
|
|
1E7BDEE1000
|
unkown
|
page read and write
|
|
|
|
257B3B02000
|
unkown
|
page read and write
|
|
|
|
7FF5C8688000
|
unkown
|
page readonly
|
|
|
|
13CD7A50000
|
unkown
|
page read and write
|
|
|
|
8640000
|
unkown
|
page read and write
|
|
|
|
190E1202000
|
unkown
|
page read and write
|
|
|
|
1E7BE110000
|
unkown
|
page readonly
|
|
|
|
7FF540797000
|
unkown
|
page readonly
|
|
|
|
1E7BFB89000
|
heap private
|
page read and write
|
|
|
|
2E90000
|
unkown
|
page readonly
|
|
|
|
46A2000
|
unkown
|
page readonly
|
|
|
|
337D000
|
unkown
|
page read and write
|
|
|
|
1A6A8400000
|
unkown
|
page read and write
|
|
|
|
7FF555617000
|
unkown
|
page readonly
|
|
|
|
1B0F6D10000
|
unkown
|
page readonly
|
|
|
|
1E7C11C0000
|
heap private
|
page read and write
|
|
|
|
13CD7B08000
|
unkown
|
page read and write
|
|
|
|
7FF57AB30000
|
unkown
|
page readonly
|
|
|
|
47B2000
|
unkown
|
page readonly
|
|
|
|
7FF56DB65000
|
unkown
|
page readonly
|
|
|
|
7FF5407F9000
|
unkown
|
page readonly
|
|
|
|
46A4000
|
unkown
|
page readonly
|
|
|
|
13CD7A00000
|
unkown
|
page read and write
|
|
|
|
7FF540702000
|
unkown
|
page readonly
|
|
|
|
7FF5146B4000
|
unkown
|
page readonly
|
|
|
|
13CD7910000
|
unkown
|
page readonly
|
|
|
|
7FF56DC79000
|
unkown
|
page readonly
|
|
|
|
5340000
|
unkown
|
page readonly
|
|
|
|
5AE0000
|
unkown
|
page read and write
|
|
|
|
4669000
|
unkown
|
page readonly
|
|
|
|
7FF5D42C8000
|
unkown
|
page readonly
|
|
|
|
4007CFE000
|
unkown
|
page read and write
|
|
|
|
4DD0000
|
unkown
|
page readonly
|
|
|
|
7FF540603000
|
unkown
|
page readonly
|
|
|
|
7FF5C82BB000
|
unkown
|
page readonly
|
|
|
|
5350000
|
unkown
|
page read and write
|
|
|
|
4956000
|
unkown
|
page readonly
|
|
|
|
1E7BF7C0000
|
unkown
|
page read and write
|
|
|
|
5000000
|
unkown
|
page read and write
|
|
|
|
1E7BDEC0000
|
unkown
|
page readonly
|
|
|
|
4D3AFB000
|
unkown
|
page read and write
|
|
|
|
7FF551932000
|
unkown
|
page readonly
|
|
|
|
7FF5D4240000
|
unkown
|
page readonly
|
|
|
|
5020000
|
unkown
|
page read and write
|
|
|
|
C5CF000
|
unkown
|
page read and write
|
|
|
|
19159F02000
|
unkown
|
page read and write
|
|
|
|
4065000
|
unkown
|
page readonly
|
|
|
|
4042000
|
unkown
|
page readonly
|
|
|
|
7FF5146CA000
|
unkown
|
page readonly
|
|
|
|
7FF5DE069000
|
unkown
|
page readonly
|
|
|
|
1E7BF570000
|
unkown
|
page read and write
|
|
|
|
1B0F6BA4000
|
unkown
|
page read and write
|
|
|
|
1B0F6E2D000
|
unkown
|
page read and write
|
|
|
|
1CF02860000
|
unkown
|
page readonly
|
|
|
|
1E7BF0C4000
|
unkown
|
page readonly
|
|
|
|
1E7BD355000
|
heap private
|
page read and write
|
|
|
|
7FF551A39000
|
unkown
|
page readonly
|
|
|
|
E73D000
|
unkown
|
page readonly
|
|
|
|
4A30000
|
unkown
|
page readonly
|
|
|
|
190E1313000
|
unkown
|
page read and write
|
|
|
|
46E2000
|
unkown
|
page readonly
|
|
|
|
2771BFC000
|
unkown
|
page read and write
|
|
|
|
34B0000
|
unkown
|
page readonly
|
|
|
|
1E7C10B0000
|
unkown
|
page read and write
|
|
|
|
15C0000
|
unkown
|
page readonly
|
|
|
|
4840000
|
unkown
|
page readonly
|
|
|
|
4FA0000
|
unkown
|
page read and write
|
|
|
|
257B3A57000
|
unkown
|
page read and write
|
|
|
|
86A9000
|
unkown
|
page read and write
|
|
|
|
7FF5C89B5000
|
unkown
|
page readonly
|
|
|
|
1E7BF5C0000
|
unkown
|
page read and write
|
|
|
|
7FF540749000
|
unkown
|
page readonly
|
|
|
|
7FF55160F000
|
unkown
|
page readonly
|
|
|
|
1E7BDF38000
|
unkown
|
page read and write
|
|
|
|
341E000
|
unkown
|
page read and write
|
|
|
|
1E7BB899000
|
heap default
|
page read and write
|
|
|
|
257B3A6A000
|
unkown
|
page read and write
|
|
|
|
292CC7F000
|
unkown
|
page read and write
|
|
|
|
3423000
|
unkown
|
page read and write
|
|
|
|
1B0F6C64000
|
unkown
|
page write copy
|
|
|
|
7FF56DDA2000
|
unkown
|
page readonly
|
|
|
|
7FF514B74000
|
unkown
|
page readonly
|
|
|
|
1E7BF4B2000
|
unkown
|
page readonly
|
|
|
|
7FF5146BA000
|
unkown
|
page readonly
|
|
|
|
1E7BE957000
|
unkown
|
page readonly
|
|
|
|
1210000
|
unkown
|
page readonly
|
|
|
|
1E7C10A0000
|
heap private
|
page read and write
|
|
|
|
7FF5C8557000
|
unkown
|
page readonly
|
|
|
|
1E7C04C0000
|
unkown
|
page read and write
|
|
|
|
6840000
|
unkown
|
page read and write
|
|
|
|
3271000
|
unkown
|
page read and write
|
|
|
|
7863000
|
unkown image
|
page readonly
|
|
|
|
1300000
|
unkown
|
page readonly
|
|
|
|
7FF5E7DD0000
|
unkown
|
page readonly
|
|
|
|
4FF0000
|
unkown
|
page read and write
|
|
|
|
13CD7A65000
|
unkown
|
page read and write
|
|
|
|
46E2000
|
unkown
|
page readonly
|
|
|
|
1E7BF1C4000
|
unkown
|
page readonly
|
|
|
|
1E7BF600000
|
unkown
|
page read and write
|
|
|
|
1E7BDF4D000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page readonly
|
|
|
|
1B0F6EA4000
|
unkown
|
page read and write
|
|
|
|
292C775000
|
unkown
|
page read and write
|
|
|
|
7FF5C8818000
|
unkown
|
page readonly
|
|
|
|
1E7C1970000
|
unkown
|
page read and write
|
|
|
|
7FF5DDF8A000
|
unkown
|
page readonly
|
|
|
|
1E7BF830000
|
unkown
|
page read and write
|
|
|
|
7FF5147B7000
|
unkown
|
page readonly
|
|
|
|
7FF57AF45000
|
unkown
|
page readonly
|
|
|
|
2E0A000
|
unkown
|
page read and write
|
|
|
|
4A70000
|
unkown
|
page readonly
|
|
|
|
190E123A000
|
unkown
|
page read and write
|
|
|
|
4A60000
|
unkown
|
page readonly
|
|
|
|
1E7BF0C0000
|
unkown
|
page readonly
|
|
|
|
1E89103C000
|
unkown
|
page read and write
|
|
|
|
1B0F15F0000
|
unkown
|
page readonly
|
|
|
|
337D000
|
unkown
|
page read and write
|
|
|
|
1E7BDED2000
|
unkown
|
page read and write
|
|
|
|
40087FC000
|
unkown
|
page read and write
|
|
|
|
41BF000
|
unkown
|
page readonly
|
|
|
|
7FF56DDB2000
|
unkown
|
page readonly
|
|
|
|
14C0000
|
unkown
|
page read and write
|
|
|
|
6830000
|
unkown
|
page read and write
|
|
|
|
1427000
|
heap default
|
page read and write
|
|
|
|
1200000
|
unkown
|
page readonly
|
|
|
|
7FF56DDF9000
|
unkown
|
page readonly
|
|
|
|
7FF5C8414000
|
unkown
|
page readonly
|
|
|
|
186DA502000
|
unkown
|
page read and write
|
|
|
|
7FF5519D0000
|
unkown
|
page readonly
|
|
|
|
7FF5C8965000
|
unkown
|
page readonly
|
|
|
|
8872000
|
unkown
|
page read and write
|
|
|
|
4A40000
|
unkown
|
page readonly
|
|
|
|
1E7BB8D5000
|
heap default
|
page read and write
|
|
|
|
7FF5E814C000
|
unkown
|
page readonly
|
|
|
|
1E7BFBC0000
|
unkown
|
page read and write
|
|
|
|
1E7BDD90000
|
unkown
|
page read and write
|
|
|
|
7FF57A809000
|
unkown
|
page readonly
|
|
|
|
257B3A6D000
|
unkown
|
page read and write
|
|
|
|
7FF5E80ED000
|
unkown
|
page readonly
|
|
|
|
3F02000
|
unkown
|
page readonly
|
|
|
|
1E7BEA35000
|
unkown
|
page readonly
|
|
|
|
19159C70000
|
heap private
|
page read and write
|
|
|
|
7FF5E7FFA000
|
unkown
|
page readonly
|
|
|
|
7FF56DEA9000
|
unkown
|
page readonly
|
|
|
|
1E7BF192000
|
unkown
|
page readonly
|
|
|
|
1E891802000
|
unkown
|
page read and write
|
|
|
|
7FF5C08F0000
|
unkown
|
page readonly
|
|
|
|
7FF55573E000
|
unkown
|
page readonly
|
|
|
|
4042000
|
unkown
|
page readonly
|
|
|
|
13B94FA000
|
unkown
|
page read and write
|
|
|
|
1E7BFBB8000
|
unkown
|
page read and write
|
|
|
|
1E7BDD00000
|
unkown
|
page read and write
|
|
|
|
1E7BF520000
|
unkown
|
page readonly
|
|
|
|
7FF5E824C000
|
unkown
|
page readonly
|
|
|
|
1E7BDE60000
|
unkown
|
page readonly
|
|
|
|
1E7BFAB0000
|
unkown
|
page read and write
|
|
|
|
1CF02263000
|
unkown
|
page read and write
|
|
|
|
7FF5C0BC2000
|
unkown
|
page readonly
|
|
|
|
7FF51474E000
|
unkown
|
page readonly
|
|
|
|
67C4C77000
|
unkown
|
page read and write
|
|
|
|
13CD7A29000
|
unkown
|
page read and write
|
|
|
|
4D2F000
|
unkown
|
page read and write
|
|
|
|
87BF000
|
unkown
|
page read and write
|
|
|
|
13CD79E0000
|
unkown
|
page readonly
|
|
|
|
7FF514282000
|
unkown
|
page readonly
|
|
|
|
7FF56DD98000
|
unkown
|
page readonly
|
|
|
|
7FF51475F000
|
unkown
|
page readonly
|
|
|
|
7FF55195A000
|
unkown
|
page readonly
|
|
|
|
7FF5E8256000
|
unkown
|
page readonly
|
|
|
|
1E7BFBA2000
|
unkown
|
page read and write
|
|
|
|
7FF5407F9000
|
unkown
|
page readonly
|
|
|
|
7FF5C88A0000
|
unkown
|
page readonly
|
|
|
|
7D5B7FE000
|
unkown
|
page read and write
|
|
|
|
1E7C11B1000
|
unkown
|
page read and write
|
|
|
|
21E282E0000
|
unkown
|
page readonly
|
|
|
|
7FF5C85B1000
|
unkown
|
page readonly
|
|
|
|
7FF5C81BA000
|
unkown
|
page readonly
|
|
|
|
1E7BFB00000
|
unkown
|
page read and write
|
|
|
|
4A82000
|
unkown
|
page readonly
|
|
|
|
811D000
|
unkown
|
page read and write
|
|
|
|
F5EF000
|
unkown
|
page read and write
|
|
|
|
43A5000
|
unkown
|
page readonly
|
|
|
|
8052000
|
unkown image
|
page readonly
|
|
|
|
13B9FF9000
|
unkown
|
page read and write
|
|
|
|
15E5000
|
heap private
|
page read and write
|
|
|
|
3CDB000
|
unkown
|
page readonly
|
|
|
|
7FF5146A5000
|
unkown
|
page readonly
|
|
|
|
C94E000
|
unkown
|
page read and write
|
|
|
|
7FF5C8441000
|
unkown
|
page readonly
|
|
|
|
1E7BF320000
|
unkown
|
page readonly
|
|
|
|
7FF5140AC000
|
unkown
|
page readonly
|
|
|
|
7FF5C0BC6000
|
unkown
|
page readonly
|
|
|
|
7FF5C0C3C000
|
unkown
|
page readonly
|
|
|
|
7FF51432D000
|
unkown
|
page readonly
|
|
|
|
7FF5DDFF5000
|
unkown
|
page readonly
|
|
|
|
1E7BF640000
|
unkown
|
page read and write
|
|
|
|
4C40000
|
unkown
|
page readonly
|
|
|
|
1E7BF550000
|
unkown
|
page read and write
|
|
|
|
7CF8000
|
unkown image
|
page readonly
|
|
|
|
7FF5E825C000
|
unkown
|
page readonly
|
|
|
|
46A4000
|
unkown
|
page readonly
|
|
|
|
4F5A000
|
unkown
|
page read and write
|
|
|
|
7FF5147BD000
|
unkown
|
page readonly
|
|
|
|
67C4D7F000
|
unkown
|
page read and write
|
|
|
|
7D27000
|
unkown image
|
page readonly
|
|
|
|
15D0000
|
unkown
|
page readonly
|
|
|
|
2EB0000
|
unkown
|
page readonly
|
|
|
|
47CB000
|
unkown
|
page readonly
|
|
|
|
3FB9000
|
unkown
|
page readonly
|
|
|
|
F63C000
|
unkown
|
page read and write
|
|
|
|
7FF56DD8C000
|
unkown
|
page readonly
|
|
|
|
520C000
|
unkown
|
page read and write
|
|
|
|
4952000
|
unkown
|
page readonly
|
|
|
|
190E11D0000
|
unkown
|
page read and write
|
|
|
|
55AE000
|
unkown
|
page read and write
|
|
|
|
7FF5DD81D000
|
unkown
|
page readonly
|
|
|
|
1E7BDDE0000
|
unkown
|
page read and write
|
|
|
|
47AB000
|
unkown
|
page readonly
|
|
|
|
33BE000
|
unkown
|
page read and write
|
|
|
|
1B0F6A10000
|
unkown
|
page readonly
|
|
|
|
1E7C0530000
|
unkown
|
page read and write
|
|
|
|
C74E000
|
unkown
|
page read and write
|
|
|
|
1E7BF172000
|
unkown
|
page readonly
|
|
|
|
6100000
|
unkown
|
page read and write
|
|
|
|
A563000
|
unkown
|
page read and write
|
|
|
|
1E7C0A30000
|
unkown
|
page read and write
|
|
|
|
7FF5E80E3000
|
unkown
|
page readonly
|
|
|
|
7FF57AAF5000
|
unkown
|
page readonly
|
|
|
|
13B98FE000
|
unkown
|
page read and write
|
|
|
|
6010000
|
unkown
|
page readonly
|
|
|
|
1B0F6EB3000
|
unkown
|
page read and write
|
|
|
|
1B0F1E02000
|
unkown
|
page read and write
|
|
|
|
7FF5D4470000
|
unkown
|
page readonly
|
|
|
|
7FF514755000
|
unkown
|
page readonly
|
|
|
|
528C000
|
unkown
|
page read and write
|
|
|
|
4B20000
|
unkown
|
page readonly
|
|
|
|
7FF5C0CB1000
|
unkown
|
page readonly
|
|
|
|
1E7C1E73000
|
unkown
|
page read and write
|
|
|
|
7FF5C88D4000
|
unkown
|
page readonly
|
|
|
|
21E26AA0000
|
unkown
|
page readonly
|
|
|
|
7FF5DE069000
|
unkown
|
page readonly
|
|
|
|
7FF551A30000
|
unkown
|
page readonly
|
|
|
|
1E7BF810000
|
unkown
|
page read and write
|
|
|
|
7FF5D44D9000
|
unkown
|
page readonly
|
|
|
|
1E7BDAF0000
|
unkown
|
page read and write
|
|
|
|
1B0F6A40000
|
unkown
|
page read and write
|
|
|
|
1B0F1691000
|
unkown
|
page read and write
|
|
|
|
7D5AD8D000
|
unkown
|
page read and write
|
|
|
|
1E7BB83F000
|
heap default
|
page read and write
|
|
|
|
7FF5D43E2000
|
unkown
|
page readonly
|
|
|
|
1B0F6E1F000
|
unkown
|
page read and write
|
|
|
|
5A36000
|
unkown
|
page read and write
|
|
|
|
1E7C0460000
|
unkown
|
page read and write
|
|
|
|
495D000
|
unkown
|
page readonly
|
|
|
|
1E7BDFBD000
|
unkown
|
page read and write
|
|
|
|
5430000
|
unkown
|
page readonly
|
|
|
|
7FF5E820E000
|
unkown
|
page readonly
|
|
|
|
6300000
|
unkown
|
page read and write
|
|
|
|
86C0000
|
unkown
|
page read and write
|
|
|
|
1E7BDA68000
|
unkown
|
page read and write
|
|
|
|
27718FE000
|
unkown
|
page read and write
|
|
|
|
3E62000
|
unkown
|
page readonly
|
|
|
|
E0BE000
|
unkown
|
page read and write
|
|
|
|
1E7C1BC1000
|
unkown
|
page read and write
|
|
|
|
7FF551975000
|
unkown
|
page readonly
|
|
|
|
4C50000
|
unkown
|
page readonly
|
|
|
|
D2E8000
|
unkown
|
page read and write
|
|
|
|
7FF5D43AC000
|
unkown
|
page readonly
|
|
|
|
7740000
|
unkown
|
page readonly
|
|
|
|
5350000
|
unkown
|
page read and write
|
|
|
|
4970000
|
unkown
|
page readonly
|
|
|
|
7FF5E81FA000
|
unkown
|
page readonly
|
|
|
|
1E7BEBB9000
|
unkown
|
page readonly
|
|
|
|
7FF555652000
|
unkown
|
page readonly
|
|
|
|
1E7BB760000
|
heap private
|
page read and write
|
|
|
|
CAC9000
|
unkown
|
page read and write
|
|
|
|
7DF4D8BE1000
|
unkown
|
page execute read
|
|
|
|
3840000
|
unkown
|
page readonly
|
|
|
|
7F6E000
|
unkown image
|
page readonly
|
|
|
|
7FF5C8703000
|
unkown
|
page readonly
|
|
|
|
7FF5C8918000
|
unkown
|
page readonly
|
|
|
|
257B3A42000
|
unkown
|
page read and write
|
|
|
|
7FF5D4415000
|
unkown
|
page readonly
|
|
|
|
7FF514BEA000
|
unkown
|
page readonly
|
|
|
|
3EB7000
|
unkown
|
page readonly
|
|
|
|
4E4A000
|
unkown
|
page read and write
|
|
|
|
7FF5E7F2C000
|
unkown
|
page readonly
|
|
|
|
4DC8000
|
unkown
|
page read and write
|
|
|
|
3426000
|
unkown
|
page read and write
|
|
|
|
1459000
|
heap default
|
page read and write
|
|
|
|
2771CFD000
|
unkown
|
page read and write
|
|
|
|
77C667B000
|
unkown
|
page read and write
|
|
|
|
1E7BB8E5000
|
heap default
|
page read and write
|
|
|
|
87D1000
|
unkown
|
page read and write
|
|
|
|
1300000
|
unkown
|
page readonly
|
|
|
|
190E1400000
|
unkown
|
page readonly
|
|
|
|
7FF5C88F3000
|
unkown
|
page readonly
|
|
|
|
7FF51477D000
|
unkown
|
page readonly
|
|
|
|
7FF54051A000
|
unkown
|
page readonly
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
5139000
|
unkown
|
page read and write
|
|
|
|
7FF51404F000
|
unkown
|
page readonly
|
|
|
|
7FF5E80C8000
|
unkown
|
page readonly
|
|
|
|
7FF57AC75000
|
unkown
|
page readonly
|
|
|
|
4007F7A000
|
unkown
|
page read and write
|
|
|
|
1E7BF820000
|
unkown
|
page read and write
|
|
|
|
F5EB000
|
unkown
|
page read and write
|
|
|
|
32C0000
|
unkown
|
page readonly
|
|
|
|
13CD8060000
|
unkown
|
page read and write
|
|
|
|
21E26880000
|
heap default
|
page read and write
|
|
|
|
1E7BDAE0000
|
unkown
|
page read and write
|
|
|
|
1E7BF35D000
|
unkown
|
page readonly
|
|
|
|
4019000
|
unkown
|
page readonly
|
|
|
|
8049000
|
unkown image
|
page readonly
|
|
|
|
7FFE000
|
unkown image
|
page readonly
|
|
|
|
86DA000
|
unkown
|
page read and write
|
|
|
|
1E7BE2D7000
|
unkown
|
page read and write
|
|
|
|
7D5B4FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DDF78000
|
unkown
|
page readonly
|
|
|
|
E7AA000
|
unkown
|
page readonly
|
|
|
|
7FF5DDFEC000
|
unkown
|
page readonly
|
|
|
|
4EE0000
|
unkown
|
page readonly
|
|
|
|
1E7C1900000
|
unkown
|
page read and write
|
|
|
|
1E7C0535000
|
unkown
|
page read and write
|
|
|
|
7FF5C0C57000
|
unkown
|
page readonly
|
|
|
|
7FF57AF54000
|
unkown
|
page readonly
|
|
|
|
A24C000
|
unkown
|
page read and write
|
|
|
|
FFDE34C000
|
unkown
|
page read and write
|
|
|
|
7FF5C874A000
|
unkown
|
page readonly
|
|
|
|
21F12FE000
|
unkown
|
page read and write
|
|
|
|
56A1000
|
unkown
|
page read and write
|
|
|
|
7FF5D43EA000
|
unkown
|
page readonly
|
|
|
|
4625000
|
unkown
|
page readonly
|
|
|
|
7FF540300000
|
unkown
|
page readonly
|
|
|
|
E7A6000
|
unkown
|
page readonly
|
|
|
|
4959000
|
unkown
|
page readonly
|
|
|
|
257B3A3A000
|
unkown
|
page read and write
|
|
|
|
7FF5D44CE000
|
unkown
|
page readonly
|
|
|
|
1E7C1010000
|
unkown
|
page read and write
|
|
|
|
1B0F6E60000
|
unkown
|
page read and write
|
|
|
|
7FF5C841D000
|
unkown
|
page readonly
|
|
|
|
277177E000
|
unkown
|
page read and write
|
|
|
|
7FF5C899C000
|
unkown
|
page readonly
|
|
|
|
7FF5C84E3000
|
unkown
|
page readonly
|
|
|
|
4637000
|
unkown
|
page readonly
|
|
|
|
3720000
|
unkown
|
page readonly
|
|
|
|
1E7C0BA0000
|
unkown
|
page read and write
|
|
|
|
21F0DDB000
|
unkown
|
page read and write
|
|
|
|
190E1270000
|
unkown
|
page read and write
|
|
|
|
4D38FE000
|
unkown
|
page read and write
|
|
|
|
1B0F6CC0000
|
unkown
|
page read and write
|
|
|
|
E7AF000
|
unkown
|
page readonly
|
|
|
|
5480000
|
unkown
|
page readonly
|
|
|
|
784B000
|
unkown image
|
page readonly
|
|
|
|
1E7BF18B000
|
unkown
|
page readonly
|
|
|
|
21E26A90000
|
unkown
|
page readonly
|
|
|
|
735D000
|
unkown
|
page read and write
|
|
|
|
1E7C1321000
|
unkown
|
page read and write
|
|
|
|
7FF5144D5000
|
unkown
|
page readonly
|
|
|
|
7FF5C840F000
|
unkown
|
page readonly
|
|
|
|
4007E77000
|
unkown
|
page read and write
|
|
|
|
4079000
|
unkown
|
page readonly
|
|
|
|
7FF51447D000
|
unkown
|
page readonly
|
|
|
|
7FF5DD84D000
|
unkown
|
page readonly
|
|
|
|
7FF5C880F000
|
unkown
|
page readonly
|
|
|
|
7FF5C82B6000
|
unkown
|
page readonly
|
|
|
|
7FF514C72000
|
unkown
|
page readonly
|
|
|
|
1E7BF0E2000
|
unkown
|
page readonly
|
|
|
|
7FF5C88C2000
|
unkown
|
page readonly
|
|
|
|
7FF5DDD8A000
|
unkown
|
page readonly
|
|
|
|
1B0F2680000
|
unkown
|
page readonly
|
|
|
|
7D5B07E000
|
unkown
|
page read and write
|
|
|
|
7FF5C8408000
|
unkown
|
page readonly
|
|
|
|
1E7BFBF0000
|
unkown
|
page read and write
|
|
|
|
7FFB5BBD3000
|
unkown image
|
page readonly
|
|
|
|
86C8000
|
unkown
|
page read and write
|
|
|
|
7FF57AF21000
|
unkown
|
page readonly
|
|
|
|
1E7BF7E0000
|
unkown
|
page read and write
|
|
|
|
45D7000
|
unkown
|
page readonly
|
|
|
|
337B000
|
unkown
|
page read and write
|
|
|
|
400807A000
|
unkown
|
page read and write
|
|
|
|
7FF57ACF8000
|
unkown
|
page readonly
|
|
|
|
1B0F1600000
|
unkown
|
page read and write
|
|
|
|
86C2000
|
unkown
|
page read and write
|
|
|
|
14F0000
|
unkown
|
page read and write
|
|
|
|
3810000
|
unkown
|
page readonly
|
|
|
|
D38A000
|
unkown
|
page read and write
|
|
|
|
1B0F6A50000
|
unkown
|
page read and write
|
|
|
|
1E7BF540000
|
unkown
|
page read and write
|
|
|
|
1E7BF470000
|
unkown
|
page readonly
|
|
|
|
1E7BF92B000
|
unkown
|
page readonly
|
|
|
|
7FF5C88BF000
|
unkown
|
page readonly
|
|
|
|
7FF57AEB2000
|
unkown
|
page readonly
|
|
|
|
F5DE000
|
unkown
|
page read and write
|
|
|
|
186DA3E0000
|
unkown
|
page readonly
|
|
|
|
7FF5C82CD000
|
unkown
|
page readonly
|
|
|
|
885D000
|
unkown
|
page read and write
|
|
|
|
1E7C1350000
|
unkown
|
page read and write
|
|
|
|
7FF5141AA000
|
unkown
|
page readonly
|
|
|
|
7FF51447F000
|
unkown
|
page readonly
|
|
|
|
7FF51457E000
|
unkown
|
page readonly
|
|
|
|
EA44000
|
unkown
|
page read and write
|
|
|
|
886C000
|
unkown
|
page read and write
|
|
|
|
7FF555314000
|
unkown
|
page readonly
|
|
|
|
1E7BF067000
|
unkown
|
page readonly
|
|
|
|
4A10000
|
unkown
|
page readonly
|
|
|
|
A44E000
|
unkown
|
page read and write
|
|
|
|
4607000
|
unkown
|
page readonly
|
|
|
|
4A80000
|
unkown
|
page readonly
|
|
|
|
5440000
|
unkown
|
page readonly
|
|
|
|
4770000
|
unkown
|
page readonly
|
|
|
|
1E7BE180000
|
unkown
|
page read and write
|
|
|
|
7FF5C865C000
|
unkown
|
page readonly
|
|
|
|
7FF514630000
|
unkown
|
page readonly
|
|
|
|
ED6000
|
unkown
|
page read and write
|
|
|
|
8FAA000
|
unkown
|
page readonly
|
|
|
|
46C2000
|
unkown
|
page readonly
|
|
|
|
3EB7000
|
unkown
|
page readonly
|
|
|
|
7FF56DE44000
|
unkown
|
page readonly
|
|
|
|
7FF5C0C1D000
|
unkown
|
page readonly
|
|
|
|
1E7BDFD0000
|
unkown
|
page read and write
|
|
|
|
7FF54066C000
|
unkown
|
page readonly
|
|
|
|
7FF5C88CA000
|
unkown
|
page readonly
|
|
|
|
4005000
|
unkown
|
page readonly
|
|
|
|
F5C0000
|
unkown
|
page read and write
|
|
|
|
257B3A68000
|
unkown
|
page read and write
|
|
|
|
86B6000
|
unkown
|
page read and write
|
|
|
|
12B0000
|
unkown
|
page readonly
|
|
|
|
1270000
|
unkown
|
page readonly
|
|
|
|
1E7BEA42000
|
unkown
|
page readonly
|
|
|
|
67C487D000
|
unkown
|
page read and write
|
|
|
|
292C87B000
|
unkown
|
page read and write
|
|
|
|
1B0F6E4A000
|
unkown
|
page read and write
|
|
|
|
423C000
|
unkown
|
page readonly
|
|
|
|
4236000
|
unkown
|
page readonly
|
|
|
|
13CD7B00000
|
unkown
|
page read and write
|
|
|
|
7FF540790000
|
unkown
|
page readonly
|
|
|
|
1E7BE1A0000
|
unkown
|
page readonly
|
|
|
|
7FF5D4446000
|
unkown
|
page readonly
|
|
|
|
1E7BEA12000
|
unkown
|
page readonly
|
|
|
|
7FF5C8889000
|
unkown
|
page readonly
|
|
|
|
1E7BE03D000
|
unkown
|
page read and write
|
|
|
|
1CF02A02000
|
unkown
|
page read and write
|
|
|
|
4DF3000
|
unkown
|
page read and write
|
|
|
|
7FF5C8517000
|
unkown
|
page readonly
|
|
|
|
13BA0F1000
|
unkown
|
page read and write
|
|
|
|
12D0000
|
unkown
|
page readonly
|
|
|
|
186DA424000
|
unkown
|
page read and write
|
|
|
|
1B0F1674000
|
unkown
|
page read and write
|
|
|
|
1E7C0FF0000
|
unkown
|
page read and write
|
|
|
|
1915B8C0000
|
unkown
|
page readonly
|
|
|
|
495D000
|
unkown
|
page readonly
|
|
|
|
5470000
|
unkown
|
page readonly
|
|
|
|
7FF540708000
|
unkown
|
page readonly
|
|
|
|
1CF02252000
|
unkown
|
page read and write
|
|
|
|
8390000
|
unkown
|
page readonly
|
|
|
|
4FA0000
|
unkown
|
page read and write
|
|
|
|
1E7C19C0000
|
unkown
|
page read and write
|
|
|
|
7FF514C67000
|
unkown
|
page readonly
|
|
|
|
1E7BD1F0000
|
unkown
|
page readonly
|
|
|
|
8876000
|
unkown
|
page read and write
|
|
|
|
1E7BEA05000
|
unkown
|
page readonly
|
|
|
|
257B3A77000
|
unkown
|
page read and write
|
|
|
|
4642000
|
unkown
|
page readonly
|
|
|
|
1E7BFB00000
|
unkown
|
page read and write
|
|
|
|
1A6A8C02000
|
unkown
|
page read and write
|
|
|
|
7FF5C892F000
|
unkown
|
page readonly
|
|
|
|
3F27000
|
unkown
|
page readonly
|
|
|
|
7D5B9FF000
|
unkown
|
page read and write
|
|
|
|
7FF57AD78000
|
unkown
|
page readonly
|
|
|
|
3CA2000
|
unkown
|
page readonly
|
|
|
|
7FF514B6A000
|
unkown
|
page readonly
|
|
|
|
186DB140000
|
unkown
|
page readonly
|
|
|
|
1E7BDBB5000
|
unkown
|
page read and write
|
|
|
|
1CF02270000
|
unkown
|
page read and write
|
|
|
|
36D0000
|
unkown
|
page readonly
|
|
|
|
7FF5DD81A000
|
unkown
|
page readonly
|
|
|
|
EA84000
|
unkown
|
page read and write
|
|
|
|
4AB0000
|
unkown
|
page readonly
|
|
|
|
1B0F2690000
|
unkown
|
page readonly
|
|
|
|
1A6A83C0000
|
unkown
|
page read and write
|
|
|
|
7FF51434D000
|
unkown
|
page readonly
|
|
|
|
1E7BDCA0000
|
unkown
|
page read and write
|
|
|
|
77C5000
|
unkown
|
page read and write
|
|
|
|
1A6A8300000
|
heap private
|
page read and write
|
|
|
|
1E7C0527000
|
unkown
|
page read and write
|
|
|
|
55C0000
|
unkown
|
page readonly
|
|
|
|
1E891102000
|
unkown
|
page read and write
|
|
|
|
1E7C0A40000
|
unkown
|
page read and write
|
|
|
|
1CF02170000
|
unkown
|
page read and write
|
|
|
|
1E7BDAD0000
|
unkown
|
page read and write
|
|
|
|
7FF5144C7000
|
unkown
|
page readonly
|
|
|
|
7FF551612000
|
unkown
|
page readonly
|
|
|
|
1E7BDA12000
|
unkown
|
page read and write
|
|
|
|
7FF57AE97000
|
unkown
|
page readonly
|
|
|
|
1E7C1920000
|
heap private
|
page read and write
|
|
|
|
1B0F6D20000
|
unkown
|
page readonly
|
|
|
|
5390000
|
unkown
|
page readonly
|
|
|
|
1E89104F000
|
unkown
|
page read and write
|
|
|
|
1E7C11D0000
|
unkown
|
page readonly
|
|
|
|
13CD7A13000
|
unkown
|
page read and write
|
|
|
|
7FF551989000
|
unkown
|
page readonly
|
|
|
|
7FF54060D000
|
unkown
|
page readonly
|
|
|
|
1E7BDA80000
|
unkown
|
page read and write
|
|
|
|
1E7BF4D7000
|
unkown
|
page readonly
|
|
|
|
7FF5556D5000
|
unkown
|
page readonly
|
|
|
|
5430000
|
unkown
|
page readonly
|
|
|
|
7FF5C8533000
|
unkown
|
page readonly
|
|
|
|
4730000
|
unkown
|
page readonly
|
|
|
|
186DA3F0000
|
unkown
|
page readonly
|
|
|
|
1E7BFB62000
|
unkown
|
page read and write
|
|
|
|
1E891D40000
|
unkown
|
page readonly
|
|
|
|
5866000
|
unkown
|
page read and write
|
|
|
|
7FF5C88ED000
|
unkown
|
page readonly
|
|
|
|
7FF57AD5E000
|
unkown
|
page readonly
|
|
|
|
7FF5D443D000
|
unkown
|
page readonly
|
|
|
|
CD48000
|
unkown
|
page read and write
|
|
|
|
1E7BFA90000
|
unkown
|
page read and write
|
|
|
|
7FF57AC67000
|
unkown
|
page readonly
|
|
|
|
21F14FD000
|
unkown
|
page read and write
|
|
|
|
1E7BD9F2000
|
unkown
|
page read and write
|
|
|
|
7FF5145D8000
|
unkown
|
page readonly
|
|
|
|
7FF514C46000
|
unkown
|
page readonly
|
|
|
|
7FF5C88E1000
|
unkown
|
page readonly
|
|
|
|
1E7BD1A0000
|
unkown
|
page read and write
|
|
|
|
7FF555307000
|
unkown
|
page readonly
|
|
|
|
1CF02140000
|
heap default
|
page read and write
|
|
|
|
7FF5E805F000
|
unkown
|
page readonly
|
|
|
|
1E7BE9B2000
|
unkown
|
page readonly
|
|
|
|
7FF5556CC000
|
unkown
|
page readonly
|
|
|
|
7FF5556AD000
|
unkown
|
page readonly
|
|
|
|
4AA7000
|
unkown
|
page readonly
|
|
|
|
1E7C1990000
|
unkown
|
page read and write
|
|
|
|
1E7BF1A4000
|
unkown
|
page readonly
|
|
|
|
7FF5D4134000
|
unkown
|
page readonly
|
|
|
|
1E7BDAB0000
|
unkown
|
page read and write
|
|
|
|
7FF57AE93000
|
unkown
|
page readonly
|
|
|
|
5890000
|
unkown
|
page readonly
|
|
|
|
1E7C0F90000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A20000
|
unkown
|
page readonly
|
|
|
|
1CF0226B000
|
unkown
|
page read and write
|
|
|
|
1E7BEA72000
|
unkown
|
page readonly
|
|
|
|
1E7C18E0000
|
unkown
|
page read and write
|
|
|
|
45E2000
|
unkown
|
page readonly
|
|
|
|
86C6000
|
unkown
|
page read and write
|
|
|
|
19159E00000
|
unkown
|
page read and write
|
|
|
|
7FF514627000
|
unkown
|
page readonly
|
|
|
|
3352000
|
unkown
|
page read and write
|
|
|
|
7FF514522000
|
unkown
|
page readonly
|
|
|
|
1E7BDE10000
|
unkown
|
page readonly
|
|
|
|
49F0000
|
unkown
|
page readonly
|
|
|
|
190E1308000
|
unkown
|
page read and write
|
|
|
|
1A6A8380000
|
unkown
|
page readonly
|
|
|
|
1E7BF7A0000
|
unkown
|
page read and write
|
|
|
|
5000000
|
unkown
|
page read and write
|
|
|
|
3377000
|
unkown
|
page read and write
|
|
|
|
7FF5C88EB000
|
unkown
|
page readonly
|
|
|
|
4D3DFF000
|
unkown
|
page read and write
|
|
|
|
7FF5C8602000
|
unkown
|
page readonly
|
|
|
|
A1CC000
|
unkown
|
page read and write
|
|
|
|
478B000
|
unkown
|
page readonly
|
|
|
|
1B0F1800000
|
unkown
|
page readonly
|
|
|
|
33F4000
|
unkown
|
page read and write
|
|
|
|
1E7BFA60000
|
unkown
|
page readonly
|
|
|
|
7FF5C07AA000
|
unkown
|
page readonly
|
|
|
|
1E7BEFF5000
|
unkown
|
page readonly
|
|
|
|
21F177E000
|
unkown
|
page read and write
|
|
|
|
1E7BFA50000
|
unkown
|
page read and write
|
|
|
|
7FF5D4477000
|
unkown
|
page readonly
|
|
|
|
5A50000
|
unkown
|
page read and write
|
|
|
|
6850000
|
unkown
|
page readonly
|
|
|
|
1E7BF860000
|
unkown
|
page read and write
|
|
|
|
1E7C0A10000
|
unkown
|
page read and write
|
|
|
|
4952000
|
unkown
|
page readonly
|
|
|
|
1E7BE04E000
|
unkown
|
page read and write
|
|
|
|
400867F000
|
unkown
|
page read and write
|
|
|
|
1B0F6B80000
|
unkown
|
page read and write
|
|
|
|
37E0000
|
unkown
|
page read and write
|
|
|
|
1915A000000
|
unkown
|
page readonly
|
|
|
|
1A6A83C0000
|
unkown
|
page read and write
|
|
|
|
1E7BEA19000
|
unkown
|
page readonly
|
|
|
|
257B3A60000
|
unkown
|
page read and write
|
|
|
|
7FF57AC3C000
|
unkown
|
page readonly
|
|
|
|
1B0F6C70000
|
unkown
|
page read and write
|
|
|
|
45C5000
|
unkown
|
page readonly
|
|
|
|
7FF5E8215000
|
unkown
|
page readonly
|
|
|
|
86B2000
|
unkown
|
page read and write
|
|
|
|
1E7BB7F0000
|
unkown
|
page readonly
|
|
|
|
4AB0000
|
unkown
|
page readonly
|
|
|
|
3E87000
|
unkown
|
page readonly
|
|
|
|
190E10E0000
|
unkown
|
page readonly
|
|
|
|
7FF56DC0E000
|
unkown
|
page readonly
|
|
|
|
7FF5C83C3000
|
unkown
|
page readonly
|
|
|
|
4049000
|
unkown
|
page readonly
|
|
|
|
7FF5554CF000
|
unkown
|
page readonly
|
|
|
|
EAC3000
|
unkown
|
page read and write
|
|
|
|
5470000
|
unkown
|
page readonly
|
|
|
|
15D0000
|
unkown
|
page readonly
|
|
|
|
7FF56DD35000
|
unkown
|
page readonly
|
|
|
|
7FF5C897C000
|
unkown
|
page readonly
|
|
|
|
1E7BF069000
|
unkown
|
page readonly
|
|
|
|
7FF5C8938000
|
unkown
|
page readonly
|
|
|
|
277187C000
|
unkown
|
page read and write
|
|
|
|
7D5B1FD000
|
unkown
|
page read and write
|
|
|
|
5866000
|
unkown
|
page read and write
|
|
|
|
7FF513E90000
|
unkown
|
page readonly
|
|
|
|
7FF513E96000
|
unkown
|
page readonly
|
|
|
|
1B0F1677000
|
unkown
|
page read and write
|
|
|
|
7FF5C82B1000
|
unkown
|
page readonly
|
|
|
|
88F9000
|
unkown
|
page read and write
|
|
|
|
46A2000
|
unkown
|
page readonly
|
|
|
|
1510000
|
unkown
|
page readonly
|
|
|
|
7FF5C8436000
|
unkown
|
page readonly
|
|
|
|
7FF5C85A1000
|
unkown
|
page readonly
|
|
|
|
32D0000
|
unkown
|
page readonly
|
|
|
|
1B0F169F000
|
unkown
|
page read and write
|
|
|
|
1E7BD730000
|
unkown
|
page readonly
|
|
|
|
1E7BD200000
|
heap private
|
page read and write
|
|
|
|
1E7BF352000
|
unkown
|
page readonly
|
|
|
|
4049000
|
unkown
|
page readonly
|
|
|
|
1E7C0569000
|
unkown
|
page read and write
|
|
|
|
8907000
|
unkown
|
page read and write
|
|
|
|
1E7BF3F0000
|
unkown
|
page readonly
|
|
|
|
7FF5519C5000
|
unkown
|
page readonly
|
|
|
|
7FF540735000
|
unkown
|
page readonly
|
|
|
|
3377000
|
unkown
|
page read and write
|
|
|
|
1E7BFA70000
|
unkown
|
page read and write
|
|
|
|
1E7BF4A7000
|
unkown
|
page readonly
|
|
|
|
46E4000
|
unkown
|
page readonly
|
|
|
|
7FF5C86F0000
|
unkown
|
page readonly
|
|
|
|
7FF5C8563000
|
unkown
|
page readonly
|
|
|
|
478B000
|
unkown
|
page readonly
|
|
|
|
13CD7A70000
|
unkown
|
page read and write
|
|
|
|
15E0000
|
heap private
|
page read and write
|
|
|
|
7FF5C0C50000
|
unkown
|
page readonly
|
|
|
|
257B3A31000
|
unkown
|
page read and write
|
|
|
|
1E7BF1D0000
|
unkown
|
page readonly
|
|
|
|
4AA7000
|
unkown
|
page readonly
|
|
|
|
1250000
|
unkown
|
page readonly
|
|
|
|
7FF5C8539000
|
unkown
|
page readonly
|
|
|
|
7FF514C60000
|
unkown
|
page readonly
|
|
|
|
4900000
|
unkown
|
page readonly
|
|
|
|
7FF5407EE000
|
unkown
|
page readonly
|
|
|
|
7FF5146EA000
|
unkown
|
page readonly
|
|
|
|
5030000
|
unkown
|
page readonly
|
|
|
|
13CD78A0000
|
heap private
|
page read and write
|
|
|
|
7FF551686000
|
unkown
|
page readonly
|
|
|
|
8870000
|
unkown
|
page read and write
|
|
|
|
D2C0000
|
unkown
|
page read and write
|
|
|
|
1E7C1A00000
|
unkown
|
page read and write
|
|
|
|
1E7BDCD0000
|
unkown
|
page read and write
|
|
|
|
1E7BF042000
|
unkown
|
page readonly
|
|
|
|
1E7C1A50000
|
unkown
|
page read and write
|
|
|
|
3F57000
|
unkown
|
page readonly
|
|
|
|
7FF5C0BFF000
|
unkown
|
page readonly
|
|
|
|
7FF5C8932000
|
unkown
|
page readonly
|
|
|
|
7FF514BD8000
|
unkown
|
page readonly
|
|
|
|
186DA4CC000
|
unkown
|
page read and write
|
|
|
|
7FF57AE37000
|
unkown
|
page readonly
|
|
|
|
7FF5518AC000
|
unkown
|
page readonly
|
|
|
|
400847E000
|
unkown
|
page read and write
|
|
|
|
1E890F60000
|
unkown
|
page readonly
|
|
|
|
7FF56DDA0000
|
unkown
|
page readonly
|
|
|
|
1E7BDA42000
|
unkown
|
page read and write
|
|
|
|
3510000
|
unkown
|
page readonly
|
|
|
|
7FF513EC1000
|
unkown
|
page readonly
|
|
|
|
1E7BEC3C000
|
unkown
|
page readonly
|
|
|
|
43EB000
|
unkown
|
page readonly
|
|
|
|
1E7BF340000
|
unkown
|
page readonly
|
|
|
|
1E7BDB00000
|
unkown
|
page read and write
|
|
|
|
1B0F6C5C000
|
unkown
|
page readonly
|
|
|
|
1E7C052B000
|
unkown
|
page read and write
|
|
|
|
1E7C18F0000
|
unkown
|
page read and write
|
|
|
|
7FF5C0509000
|
unkown
|
page readonly
|
|
|
|
1E7BDD70000
|
unkown
|
page read and write
|
|
|
|
4072000
|
unkown
|
page readonly
|
|
|
|
1E7BF910000
|
unkown
|
page readonly
|
|
|
|
1E7BB910000
|
unkown
|
page readonly
|
|
|
|
4BA7000
|
unkown
|
page read and write
|
|
|
|
7FF5C0CAE000
|
unkown
|
page readonly
|
|
|
|
3CDB000
|
unkown
|
page readonly
|
|
|
|
8B40000
|
unkown
|
page readonly
|
|
|
|
4890000
|
unkown
|
page readonly
|
|
|
|
45F5000
|
unkown
|
page readonly
|
|
|
|
1980000
|
unkown
|
page readonly
|
|
|
|
4DE0000
|
unkown
|
page read and write
|
|
|
|
7FF57AF50000
|
unkown
|
page readonly
|
|
|
|
7FF514643000
|
unkown
|
page readonly
|
|
|
|
1B0F1C60000
|
unkown
|
page read and write
|
|
|
|
7FF5D3CF4000
|
unkown
|
page readonly
|
|
|
|
190E1300000
|
unkown
|
page read and write
|
|
|
|
49A2000
|
unkown
|
page readonly
|
|
|
|
4D34000
|
unkown
|
page read and write
|
|
|
|
7F83000
|
unkown image
|
page readonly
|
|
|
|
400827B000
|
unkown
|
page read and write
|
|
|
|
7FF57ACEC000
|
unkown
|
page readonly
|
|
|
|
41B9000
|
unkown
|
page readonly
|
|
|
|
7FF5C8857000
|
unkown
|
page readonly
|
|
|
|
7FF5C87CE000
|
unkown
|
page readonly
|
|
|
|
1E7BFB00000
|
unkown
|
page read and write
|
|
|
|
43AC000
|
unkown
|
page readonly
|
|
|
|
2E0A000
|
unkown
|
page read and write
|
|
|
|
7FF5D4143000
|
unkown
|
page readonly
|
|
|
|
7FF56DDCA000
|
unkown
|
page readonly
|
|
|
|
4005000
|
unkown
|
page readonly
|
|
|
|
1B0F6CC0000
|
unkown
|
page read and write
|
|
|
|
71E0000
|
unkown
|
page read and write
|
|
|
|
1E7BF430000
|
unkown
|
page readonly
|
|
|
|
1B0F1DD1000
|
unkown
|
page read and write
|
|
|
|
7FF55179E000
|
unkown
|
page readonly
|
|
|
|
675C000
|
unkown
|
page read and write
|
|
|
|
190E123C000
|
unkown
|
page read and write
|
|
|
|
83B0000
|
unkown
|
page readonly
|
|
|
|
1B0F1713000
|
unkown
|
page read and write
|
|
|
|
5390000
|
unkown
|
page readonly
|
|
|
|
7FF5C876C000
|
unkown
|
page readonly
|
|
|
|
1E7BFB00000
|
unkown
|
page read and write
|
|
|
|
1E7BF650000
|
unkown
|
page read and write
|
|
|
|
7FF514B6E000
|
unkown
|
page readonly
|
|
|
|
1B0F6DB0000
|
unkown
|
page read and write
|
|
|
|
4F7A000
|
unkown
|
page read and write
|
|
|
|
6860000
|
unkown
|
page read and write
|
|
|
|
1E7BF1CB000
|
unkown
|
page readonly
|
|
|
|
7820000
|
unkown image
|
page readonly
|
|
|
|
1E7BDD12000
|
unkown
|
page read and write
|
|
|
|
7FF5C8833000
|
unkown
|
page readonly
|
|
|
|
593C000
|
unkown
|
page read and write
|
|
|
|
1E7BF025000
|
unkown
|
page readonly
|
|
|
|
1E7BEDAC000
|
unkown
|
page readonly
|
|
|
|
1E7BDCB0000
|
unkown
|
page read and write
|
|
|
|
7FF5DDF76000
|
unkown
|
page readonly
|
|
|
|
1B0F2001000
|
unkown
|
page read and write
|
|
|
|
186DA600000
|
unkown
|
page readonly
|
|
|
|
EB82000
|
unkown
|
page read and write
|
|
|
|
1E7BDFF5000
|
unkown
|
page read and write
|
|
|
|
4A40000
|
unkown
|
page readonly
|
|
|
|
4840000
|
unkown
|
page readonly
|
|
|
|
7FF5C0C36000
|
unkown
|
page readonly
|
|
|
|
1E7BF890000
|
unkown
|
page read and write
|
|
|
|
7FF5C82CF000
|
unkown
|
page readonly
|
|
|
|
86CA000
|
unkown
|
page read and write
|
|
|
|
7FF555300000
|
unkown
|
page readonly
|
|
|
|
7FF555741000
|
unkown
|
page readonly
|
|
|
|
1500000
|
unkown
|
page readonly
|
|
|
|
1E891057000
|
unkown
|
page read and write
|
|
|
|
186DA400000
|
unkown
|
page read and write
|
|
|
|
4730000
|
unkown
|
page readonly
|
|
|
|
F4BE000
|
unkown
|
page read and write
|
|
|
|
D33A000
|
unkown
|
page read and write
|
|
|
|
4012000
|
unkown
|
page readonly
|
|
|
|
4670000
|
unkown
|
page readonly
|
|
|
|
7FF5146D1000
|
unkown
|
page readonly
|
|
|
|
7FF540794000
|
unkown
|
page readonly
|
|
|
|
1E7C1060000
|
unkown
|
page read and write
|
|
|
|
8815000
|
unkown
|
page read and write
|
|
|
|
1E7BDA00000
|
unkown
|
page read and write
|
|
|
|
1E7C1311000
|
unkown
|
page read and write
|
|
|
|
15BA000
|
unkown
|
page read and write
|
|
|
|
13B99FB000
|
unkown
|
page read and write
|
|
|
|
7FF55560B000
|
unkown
|
page readonly
|
|
|
|
7FF5E8270000
|
unkown
|
page readonly
|
|
|
|
1E7BF2E0000
|
unkown
|
page readonly
|
|
|
|
7FF514685000
|
unkown
|
page readonly
|
|
|
|
21E26A50000
|
unkown
|
page read and write
|
|
|
|
1E7BDDC0000
|
unkown
|
page read and write
|
|
|
|
2EA0000
|
unkown
|
page read and write
|
|
|
|
7FF5144FF000
|
unkown
|
page readonly
|
|
|
|
1E7BDED0000
|
unkown
|
page read and write
|
|
|
|
7FF514BC2000
|
unkown
|
page readonly
|
|
|
|
7FF5405CA000
|
unkown
|
page readonly
|
|
|
|
7FF5C8748000
|
unkown
|
page readonly
|
|
|
|
800C000
|
unkown image
|
page readonly
|
|
|
|
F53E000
|
unkown
|
page read and write
|
|
|
|
1B0F6BA0000
|
unkown
|
page read and write
|
|
|
|
1CF02190000
|
unkown
|
page readonly
|
|
|
|
13B95FC000
|
unkown
|
page read and write
|
|
|
|
13B97F9000
|
unkown
|
page read and write
|
|
|
|
1E7BD180000
|
unkown
|
page read and write
|
|
|
|
7FF5147B0000
|
unkown
|
page readonly
|
|
|
|
4A10000
|
unkown
|
page readonly
|
|
|
|
45F5000
|
unkown
|
page readonly
|
|
|
|
7FF57AF36000
|
unkown
|
page readonly
|
|
|
|
1B0F168D000
|
unkown
|
page read and write
|
|
|
|
1B0F1F59000
|
unkown
|
page read and write
|
|
|
|
190E1070000
|
heap private
|
page read and write
|
|
|
|
3FE2000
|
unkown
|
page readonly
|
|
|
|
7FF514C6D000
|
unkown
|
page readonly
|
|
|
|
77C67FA000
|
unkown
|
page read and write
|
|
|
|
1B0F1679000
|
unkown
|
page read and write
|
|
|
|
7FF57AE71000
|
unkown
|
page readonly
|
|
|
|
1E7BF661000
|
unkown
|
page read and write
|
|
|
|
1B0F1D70000
|
unkown
|
page read and write
|
|
|
|
4DF3000
|
unkown
|
page read and write
|
|
|
|
7FF5C8979000
|
unkown
|
page readonly
|
|
|
|
7FF5402F0000
|
unkown
|
page readonly
|
|
|
|
1E7BF1B2000
|
unkown
|
page readonly
|
|
|
|
2EC0000
|
unkown
|
page readonly
|
|
|
|
88BF000
|
unkown
|
page read and write
|
|
|
|
1B0F1F00000
|
unkown
|
page read and write
|
|
|
|
A349000
|
unkown
|
page read and write
|
|
|
|
1E7BF691000
|
unkown
|
page read and write
|
|
|
|
7FF55190A000
|
unkown
|
page readonly
|
|
|
|
9D49000
|
unkown
|
page read and write
|
|
|
|
257B3A3D000
|
unkown
|
page read and write
|
|
|
|
1E890EF0000
|
heap private
|
page read and write
|
|
|
|
257B3A74000
|
unkown
|
page read and write
|
|
|
|
1E7BE048000
|
unkown
|
page read and write
|
|
|
|
3320000
|
unkown
|
page readonly
|
|
|
|
13CD7A3C000
|
unkown
|
page read and write
|
|
|
|
7FF54077C000
|
unkown
|
page readonly
|
|
|
|
1E7BF070000
|
unkown
|
page readonly
|
|
|
|
7FF5145B8000
|
unkown
|
page readonly
|
|
|
|
40088FE000
|
unkown
|
page read and write
|
|
|
|
3CB4000
|
unkown
|
page readonly
|
|
|
|
46C4000
|
unkown
|
page readonly
|
|
|
|
1E7C0AA0000
|
unkown
|
page read and write
|
|
|
|
7718000
|
unkown
|
page read and write
|
|
|
|
46E4000
|
unkown
|
page readonly
|
|
|
|
1E7BDDA0000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page readonly
|
|
|
|
7FF540631000
|
unkown
|
page readonly
|
|
|
|
43A5000
|
unkown
|
page readonly
|
|
|
|
3CA2000
|
unkown
|
page readonly
|
|
|
|
1CF0225A000
|
unkown
|
page read and write
|
|
|
|
1E7C19B0000
|
unkown
|
page read and write
|
|
|
|
884B000
|
unkown
|
page read and write
|
|
|
|
1B0F6DA0000
|
unkown
|
page readonly
|
|
|
|
1E7BF6C0000
|
unkown
|
page read and write
|
|
|
|
4F90000
|
unkown
|
page readonly
|
|
|
|
73E0000
|
unkown
|
page read and write
|
|
|
|
8029000
|
unkown image
|
page readonly
|
|
|
|
1B0F6CC0000
|
unkown
|
page read and write
|
|
|
|
7FF514C3C000
|
unkown
|
page readonly
|
|
|
|
33BE000
|
unkown
|
page read and write
|
|
|
|
1E7BDB10000
|
unkown
|
page readonly
|
|
|
|
1E7BE6BB000
|
unkown
|
page readonly
|
|
|
|
1B0F6EAF000
|
unkown
|
page read and write
|
|
|
|
1E891113000
|
unkown
|
page read and write
|
|
|
|
47C4000
|
unkown
|
page readonly
|
|
|
|
1E7BB8B8000
|
heap default
|
page read and write
|
|
|
|
1CF0223F000
|
unkown
|
page read and write
|
|
|
|
27716FD000
|
unkown
|
page read and write
|
|
|
|
7FF5148DC000
|
unkown
|
page readonly
|
|
|
|
190E1213000
|
unkown
|
page read and write
|
|
|
|
7FF57AB47000
|
unkown
|
page readonly
|
|
|
|
7D5B8FF000
|
unkown
|
page read and write
|
|
|
|
1E7C19D0000
|
unkown
|
page read and write
|
|
|
|
5340000
|
unkown
|
page readonly
|
|
|
|
886E000
|
unkown
|
page read and write
|
|
|
|
1520000
|
unkown
|
page read and write
|
|
|
|
190E1880000
|
unkown
|
page readonly
|
|
|
|
1E7BE892000
|
unkown
|
page readonly
|
|
|
|
19159DB0000
|
unkown
|
page write copy
|
|
|
|
7FF514C4C000
|
unkown
|
page readonly
|
|
|
|
21E268BC000
|
heap default
|
page read and write
|
|
|
|
33D9000
|
unkown
|
page read and write
|
|
|
|
1E7BF7D0000
|
unkown
|
page read and write
|
|
|
|
7FF5402EA000
|
unkown
|
page readonly
|
|
|
|
186DA413000
|
unkown
|
page read and write
|
|
|
|
1E7BF840000
|
unkown
|
page read and write
|
|
|
|
4035000
|
unkown
|
page readonly
|
|
|
|
7FF5D440E000
|
unkown
|
page readonly
|
|
|
|
7D5B5FD000
|
unkown
|
page read and write
|
|
|
|
4D3BF7000
|
unkown
|
page read and write
|
|
|
|
1B0F29E0000
|
unkown
|
page read and write
|
|
|
|
DD3C000
|
unkown
|
page read and write
|
|
|
|
7FF5407F1000
|
unkown
|
page readonly
|
|
|
|
7FF57AD1E000
|
unkown
|
page readonly
|
|
|
|
7FF5C851A000
|
unkown
|
page readonly
|
|
|
|
CDD0000
|
unkown
|
page readonly
|
|
|
|
7FF5D3CF8000
|
unkown
|
page readonly
|
|
|
|
15F0000
|
unkown
|
page readonly
|
|
|
|
7FF5C8611000
|
unkown
|
page readonly
|
|
|
|
7FF5147C2000
|
unkown
|
page readonly
|
|
|
|
3330000
|
unkown
|
page read and write
|
|
|
|
FFDEAFF000
|
unkown
|
page read and write
|
|
|
|
2771E7C000
|
unkown
|
page read and write
|
|
|
|
32B9000
|
unkown
|
page read and write
|
|
|
|
7FF51463C000
|
unkown
|
page readonly
|
|
|
|
21F157F000
|
unkown
|
page read and write
|
|
|
|
257B3A41000
|
unkown
|
page read and write
|
|
|
|
7FF5C8649000
|
unkown
|
page readonly
|
|
|
|
4940000
|
unkown
|
page readonly
|
|
|
|
257B3A7B000
|
unkown
|
page read and write
|
|
|
|
7FF514C31000
|
unkown
|
page readonly
|
|
|
|
3CC2000
|
unkown
|
page readonly
|
|
|
|
7FF5C0A8A000
|
unkown
|
page readonly
|
|
|
|
1E7BF300000
|
unkown
|
page readonly
|
|
|
|
7FF5E8274000
|
unkown
|
page readonly
|
|
|
|
F675000
|
unkown
|
page read and write
|
|
|
|
4236000
|
unkown
|
page readonly
|
|
|
|
1E7BE6C2000
|
unkown
|
page readonly
|
|
|
|
7FF5C0CB9000
|
unkown
|
page readonly
|
|
|
|
1CF02266000
|
unkown
|
page read and write
|
|
|
|
1E7BE024000
|
unkown
|
page read and write
|
|
|
|
7FF5C0BEE000
|
unkown
|
page readonly
|
|
|
|
1B0F1500000
|
heap default
|
page read and write
|
|
|
|
1460000
|
heap default
|
page read and write
|
|
|
|
186DA4C0000
|
unkown
|
page read and write
|
|
|
|
4012000
|
unkown
|
page readonly
|
|
|
|
1E7C1AB0000
|
unkown
|
page read and write
|
|
|
|
1E7BDCE0000
|
unkown
|
page read and write
|
|
|
|
1E7BB770000
|
unkown
|
page readonly
|
|
|
|
7FF514C05000
|
unkown
|
page readonly
|
|
|
|
8861000
|
unkown
|
page read and write
|
|
|
|
1A6A8502000
|
unkown
|
page read and write
|
|
|
|
3E92000
|
unkown
|
page readonly
|
|
|
|
1B0F6EB2000
|
unkown
|
page read and write
|
|
|
|
520C000
|
unkown
|
page read and write
|
|
|
|
7FF514810000
|
unkown
|
page readonly
|
|
|
|
7FF551930000
|
unkown
|
page readonly
|
|
|
|
1E7C0A90000
|
unkown
|
page read and write
|
|
|
|
7FF55166E000
|
unkown
|
page readonly
|
|
|
|
7FF551A2E000
|
unkown
|
page readonly
|
|
|
|
7FF514786000
|
unkown
|
page readonly
|
|
|
|
1E7BE9E9000
|
unkown
|
page readonly
|
|
|
|
1E7BF6B0000
|
unkown
|
page read and write
|
|
|
|
1250000
|
unkown
|
page readonly
|
|
|
|
8035000
|
unkown image
|
page readonly
|
|
|
|
4655000
|
unkown
|
page readonly
|
|
|
|
7730000
|
unkown
|
page readonly
|
|
|
|
21F107E000
|
unkown
|
page read and write
|
|
|
|
1B0F6E13000
|
unkown
|
page read and write
|
|
|
|
46C4000
|
unkown
|
page readonly
|
|
|
|
4625000
|
unkown
|
page readonly
|
|
|
|
257B3A40000
|
unkown
|
page read and write
|
|
|
|
7FF5C87EE000
|
unkown
|
page readonly
|
|
|
|
1B0F1658000
|
unkown
|
page read and write
|
|
|
|
1B0F15E0000
|
unkown
|
page readonly
|
|
|
|
7FF514819000
|
unkown
|
page readonly
|
|
|
|
257B3930000
|
unkown
|
page readonly
|
|
|
|
19159E3F000
|
unkown
|
page read and write
|
|
|
|
257B3A5F000
|
unkown
|
page read and write
|
|
|
|
F10000
|
unkown
|
page readonly
|
|
|
|
1E7BF8E0000
|
unkown
|
page read and write
|
|
|
|
1B0F6B84000
|
unkown
|
page read and write
|
|
|
|
1E7BF440000
|
unkown
|
page readonly
|
|
|
|
13CD7A02000
|
unkown
|
page read and write
|
|
|
|
8869000
|
unkown
|
page read and write
|
|
|
|
1E7C1A60000
|
unkown
|
page read and write
|
|
|
|
7D15000
|
unkown image
|
page readonly
|
|
|
|
C8CB000
|
unkown
|
page read and write
|
|
|
|
5820000
|
unkown
|
page read and write
|
|
|
|
7FF5C84CA000
|
unkown
|
page readonly
|
|
|
|
1E7BF730000
|
unkown
|
page read and write
|
|
|
|
7FF5C0AC3000
|
unkown
|
page readonly
|
|
|
|
D4C0000
|
unkown
|
page readonly
|
|
|
|
257B3A7E000
|
unkown
|
page read and write
|
|
|
|
6556000
|
unkown
|
page read and write
|
|
|
|
5526000
|
unkown
|
page read and write
|
|
|
|
7FF5E8246000
|
unkown
|
page readonly
|
|
|
|
4C30000
|
unkown
|
page readonly
|
|
|
|
1E7BDA70000
|
unkown
|
page read and write
|
|
|
|
7FF5DDFE6000
|
unkown
|
page readonly
|
|
|
|
4A82000
|
unkown
|
page readonly
|
|
|
|
1B0F2640000
|
unkown
|
page readonly
|
|
|
|
4D3CFF000
|
unkown
|
page read and write
|
|
|
|
FE0000
|
unkown
|
page readonly
|
|
|
|
86A5000
|
unkown
|
page read and write
|
|
|
|
5A40000
|
unkown
|
page readonly
|
|
|
|
4C30000
|
unkown
|
page readonly
|
|
|
|
4E61000
|
unkown
|
page read and write
|
|
|
|
7FF5C8462000
|
unkown
|
page readonly
|
|
|
|
190E11C0000
|
unkown
|
page readonly
|
|
|
|
1E7BDB80000
|
unkown
|
page read and write
|
|
|
|
1B0F1613000
|
unkown
|
page read and write
|
|
|
|
8A40000
|
unkown
|
page read and write
|
|
|
|
7FF514052000
|
unkown
|
page readonly
|
|
|
|
E792000
|
unkown
|
page readonly
|
|
|
|
1B0F166F000
|
unkown
|
page read and write
|
|
|
|
1E7BF620000
|
unkown
|
page read and write
|
|
|
|
1398000
|
heap default
|
page read and write
|
|
|
|
7FF555640000
|
unkown
|
page readonly
|
|
|
|
45B2000
|
unkown
|
page readonly
|
|
|
|
13B96FF000
|
unkown
|
page read and write
|
|
|
|
3F57000
|
unkown
|
page readonly
|
|
|
|
3FE2000
|
unkown
|
page readonly
|
|
|
|
19159E13000
|
unkown
|
page read and write
|
|
|
|
13B9AFE000
|
unkown
|
page read and write
|
|
|
|
1E7BF012000
|
unkown
|
page readonly
|
|
|
|
7FF5C87F9000
|
unkown
|
page readonly
|
|
|
|
7FF57ABF4000
|
unkown
|
page readonly
|
|
|
|
40085FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C84C1000
|
unkown
|
page readonly
|
|
|
|
7FF540766000
|
unkown
|
page readonly
|
|
|
|
7FF57AD71000
|
unkown
|
page readonly
|
|
|
|
7FF5C88C4000
|
unkown
|
page readonly
|
|
|
|
3F27000
|
unkown
|
page readonly
|
|
|
|
257B3A13000
|
unkown
|
page read and write
|
|
|
|
21E26A70000
|
unkown
|
page read and write
|
|
|
|
4F80000
|
unkown
|
page read and write
|
|
|
|
7FF56DE2C000
|
unkown
|
page readonly
|
|
|
|
7FF54072E000
|
unkown
|
page readonly
|
|
|
|
1E7BE9D5000
|
unkown
|
page readonly
|
|
|
|
7FF56DC68000
|
unkown
|
page readonly
|
|
|
|
21E287FF000
|
heap private
|
page read and write
|
|
|
|
77E0000
|
unkown
|
page readonly
|
|
|
|
7CD1000
|
unkown image
|
page readonly
|
|
|
|
CB4A000
|
unkown
|
page read and write
|
|
|
|
7FF57AAF1000
|
unkown
|
page readonly
|
|
|
|
7D3F000
|
unkown image
|
page readonly
|
|
|
|
7FF5C80A0000
|
unkown
|
page readonly
|
|
|
|
1E7C0551000
|
unkown
|
page read and write
|
|
|
|
5140000
|
unkown
|
page write copy
|
|
|
|
7FF5406F0000
|
unkown
|
page readonly
|
|
|
|
4EC55AC000
|
unkown
|
page read and write
|
|
|
|
7FF514487000
|
unkown
|
page readonly
|
|
|
|
7FF5D44D9000
|
unkown
|
page readonly
|
|
|
|
1B0F6C58000
|
unkown
|
page write copy
|
|
|
|
14D0000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown
|
page read and write
|
|
|
|
7FF5C87D2000
|
unkown
|
page readonly
|
|
|
|
1E7BE262000
|
unkown
|
page read and write
|
|
|
|
7FF555749000
|
unkown
|
page readonly
|
|
|
|
1E7BE2D9000
|
unkown
|
page read and write
|
|
|
|
1B0F6DE0000
|
unkown
|
page readonly
|
|
|
|
57D0000
|
unkown
|
page read and write
|
|
|
|
1E7C192A000
|
heap private
|
page read and write
|
|
|
|
47A4000
|
unkown
|
page readonly
|
|
|
|
4A60000
|
unkown
|
page readonly
|
|
|
|
3510000
|
unkown
|
page readonly
|
|
|
|
8874000
|
unkown
|
page read and write
|
|
|
|
1E7BDE40000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A29000
|
unkown
|
page readonly
|
|
|
|
1230000
|
unkown
|
page readonly
|
|
|
|
34B0000
|
unkown
|
page readonly
|
|
|
|
1E7C1360000
|
unkown
|
page read and write
|
|
|
|
7FF5C82A7000
|
unkown
|
page readonly
|
|
|
|
1423000
|
heap default
|
page read and write
|
|
|
|
1B0F6E53000
|
unkown
|
page read and write
|
|
|
|
59B7000
|
unkown
|
page read and write
|
|
|
|
1E7C054D000
|
unkown
|
page read and write
|
|
|
|
4DC8000
|
unkown
|
page read and write
|
|
|
|
1E7BF850000
|
unkown
|
page read and write
|
|
|
|
1E7BE9B9000
|
unkown
|
page readonly
|
|
|
|
FFDE67E000
|
unkown
|
page read and write
|
|
|
|
A3CB000
|
unkown
|
page read and write
|
|
|
|
7FF5E8117000
|
unkown
|
page readonly
|
|
|
|
35D0000
|
unkown
|
page read and write
|
|
|
|
1E7BFB00000
|
unkown
|
page read and write
|
|
|
|
1B0F2650000
|
unkown
|
page readonly
|
|
|
|
1B0F1F13000
|
unkown
|
page read and write
|
|
|
|
7FF57AC80000
|
unkown
|
page readonly
|
|
|
|
1E7BFBD0000
|
unkown
|
page read and write
|
|
|
|
7FF514769000
|
unkown
|
page readonly
|
|
|
|
7FF51468C000
|
unkown
|
page readonly
|
|
|
|
8370000
|
unkown
|
page read and write
|
|
|
|
4FF0000
|
unkown
|
page read and write
|
|
|
|
1E7BF5D0000
|
unkown
|
page read and write
|
|
|
|
1E7BD8E0000
|
unkown
|
page read and write
|
|
|
|
4EC5AFC000
|
unkown
|
page read and write
|
|
|
|
4A70000
|
unkown
|
page readonly
|
|
|
|
1B0F6C90000
|
unkown
|
page read and write
|
|
|
|
7FF55159E000
|
unkown
|
page readonly
|
|
|
|
1E7BB8AA000
|
heap default
|
page read and write
|
|
|
|
1310000
|
unkown
|
page readonly
|
|
|
|
3280000
|
unkown
|
page read and write
|
|
|
|
7FF5C89C0000
|
unkown
|
page readonly
|
|
|
|
7FF5DE007000
|
unkown
|
page readonly
|
|
|
|
7FF5C8491000
|
unkown
|
page readonly
|
|
|
|
2EC0000
|
unkown
|
page readonly
|
|
|
|
257B3950000
|
unkown
|
page read and write
|
|
|
|
7FF5C84E6000
|
unkown
|
page readonly
|
|
|
|
1B0F1629000
|
unkown
|
page read and write
|
|
|
|
4079000
|
unkown
|
page readonly
|
|
|
|
1E7BF710000
|
unkown
|
page read and write
|
|
|
|
7FF57A81C000
|
unkown
|
page readonly
|
|
|
|
7C57000
|
unkown image
|
page readonly
|
|
|
|
D4D2000
|
unkown
|
page readonly
|
|
|
|
48E0000
|
unkown
|
page readonly
|
|
|
|
D2CE000
|
unkown
|
page read and write
|
|
|
|
7FF5C8428000
|
unkown
|
page readonly
|
|
|
|
49ED000
|
unkown
|
page readonly
|
|
|
|
1B0F6C80000
|
unkown
|
page read and write
|
|
|
|
7FF5D4467000
|
unkown
|
page readonly
|
|
|
|
3F32000
|
unkown
|
page readonly
|
|
|
|
1E7BEDA5000
|
unkown
|
page readonly
|
|
|
|
1510000
|
unkown
|
page readonly
|
|
|
|
1290000
|
unkown
|
page readonly
|
|
|
|
1E7BDB20000
|
unkown
|
page read and write
|
|
|
|
1E7C18A0000
|
unkown
|
page read and write
|
|
|
|
1B0F168B000
|
unkown
|
page read and write
|
|
|
|
7FF5C895E000
|
unkown
|
page readonly
|
|
|
|
257B3A46000
|
unkown
|
page read and write
|
|
|
|
1B0F6C30000
|
unkown
|
page write copy
|
|
|
|
1B0F6EAD000
|
unkown
|
page read and write
|
|
|
|
1E7BF1AB000
|
unkown
|
page readonly
|
|
|
|
7FF56DEA1000
|
unkown
|
page readonly
|
|
|
|
7FFB5BBD0000
|
unkown image
|
page read and write
|
|
|
|
9B40000
|
unkown
|
page read and write
|
|
|
|
7FF5C8907000
|
unkown
|
page readonly
|
|
|
|
1438000
|
heap default
|
page read and write
|
|
|
|
1E7C1370000
|
unkown
|
page read and write
|
|
|
|
1E7BF4E0000
|
unkown
|
page readonly
|
|
|
|
4F40000
|
unkown
|
page read and write
|
|
|
|
1E7BF0A2000
|
unkown
|
page readonly
|
|
|
|
528C000
|
unkown
|
page read and write
|
|
|
|
8857000
|
unkown
|
page read and write
|
|
|
|
15F0000
|
unkown
|
page readonly
|
|
|
|
5800000
|
unkown
|
page read and write
|
|
|
|
257B3A84000
|
unkown
|
page read and write
|
|
|
|
7FF5C868F000
|
unkown
|
page readonly
|
|
|
|
1E89106D000
|
unkown
|
page read and write
|
|
|
|
8220000
|
unkown
|
page readonly
|
|
|
|
7FF551850000
|
unkown
|
page readonly
|
|
|
|
1E890F70000
|
unkown
|
page readonly
|
|
|
|
7FF5C8730000
|
unkown
|
page readonly
|
|
|
|
47CB000
|
unkown
|
page readonly
|
|
|
|
7FF5D41A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C0AA8000
|
unkown
|
page readonly
|
|
|
|
83A0000
|
unkown
|
page readonly
|
|
|
|
7FF56DE47000
|
unkown
|
page readonly
|
|
|
|
1E7BFAC0000
|
unkown
|
page read and write
|
|
|
|
1464000
|
heap default
|
page read and write
|
|
|
|
1E7BD1E0000
|
unkown
|
page readonly
|
|
|
|
7FF5406F2000
|
unkown
|
page readonly
|
|
|
|
1464000
|
heap default
|
page read and write
|
|
|
|
F10000
|
unkown
|
page readonly
|
|
|
|
7FF57AF26000
|
unkown
|
page readonly
|
|
|
|
6820000
|
unkown
|
page readonly
|
|
|
|
50BA000
|
unkown
|
page read and write
|
|
|
|
7FF540776000
|
unkown
|
page readonly
|
|
|
|
47B2000
|
unkown
|
page readonly
|
|
|
|
67C45BB000
|
unkown
|
page read and write
|
|
|
|
3352000
|
unkown
|
page read and write
|
|
|
|
7FF5C825F000
|
unkown
|
page readonly
|
|
|
|
257B3A58000
|
unkown
|
page read and write
|
|
|
|
1E7C1330000
|
unkown
|
page read and write
|
|
|
|
7FF5DE061000
|
unkown
|
page readonly
|
|
|
|
A0CF000
|
unkown
|
page read and write
|
|
|
|
1500000
|
unkown
|
page readonly
|
|
|
|
4667000
|
unkown
|
page readonly
|
|
|
|
7FF51478C000
|
unkown
|
page readonly
|
|
|
|
1E7BF560000
|
unkown
|
page read and write
|
|
|
|
7FF5C8697000
|
unkown
|
page readonly
|
|
|
|
7FF5C8499000
|
unkown
|
page readonly
|
|
|
|
1E7BFB20000
|
unkown
|
page read and write
|
|
|
|
4C60000
|
unkown
|
page readonly
|
|
|
|
4607000
|
unkown
|
page readonly
|
|
|
|
48E0000
|
unkown
|
page readonly
|
|
|
|
7FF555303000
|
unkown
|
page readonly
|
|
|
|
5603000
|
unkown
|
page read and write
|
|
|
|
1B0F6B60000
|
unkown
|
page read and write
|
|
|
|
1E7BE9E2000
|
unkown
|
page readonly
|
|
|
|
4784000
|
unkown
|
page readonly
|
|
|
|
1E7BDBA0000
|
unkown
|
page read and write
|
|
|
|
45C5000
|
unkown
|
page readonly
|
|
|
|
2EE3000
|
heap private
|
page read and write
|
|
|
|
DEB8000
|
unkown
|
page read and write
|
|
|
|
7FF5C87E1000
|
unkown
|
page readonly
|
|
|
|
257B37F0000
|
heap private
|
page read and write
|
|
|
|
566F000
|
unkown
|
page read and write
|
|
|
|
13B9DF9000
|
unkown
|
page read and write
|
|
|
|
1E7C0548000
|
unkown
|
page read and write
|
|
|
|
1B0F6CC0000
|
unkown
|
page readonly
|
|
|
|
1E7BFC40000
|
unkown
|
page read and write
|
|
|
|
7FF5C8996000
|
unkown
|
page readonly
|
|
|
|
1E7BF3ED000
|
unkown
|
page readonly
|
|
|
|
7FF5C846A000
|
unkown
|
page readonly
|
|
|
|
7FF5146F7000
|
unkown
|
page readonly
|
|
|
|
13B93FE000
|
unkown
|
page read and write
|
|
|
|
6200000
|
unkown
|
page read and write
|
|
|
|
6010000
|
unkown
|
page readonly
|
|
|
|
8013000
|
unkown image
|
page readonly
|
|
|
|
4FE0000
|
unkown
|
page read and write
|
|
|
|
86D3000
|
unkown
|
page read and write
|
|
|
|
6815000
|
unkown
|
page read and write
|
|
|
|
7FF5C840A000
|
unkown
|
page readonly
|
|
|
|
7FF5B7272000
|
unkown
|
page readonly
|
|
|
|
7FF5DDDEF000
|
unkown
|
page readonly
|
|
|
|
7FF5C0B2C000
|
unkown
|
page readonly
|
|
|
|
7FF5515A2000
|
unkown
|
page readonly
|
|
|
|
7FF5C8840000
|
unkown
|
page readonly
|
|
|
|
5AE0000
|
unkown
|
page read and write
|
|
|
|
40084FF000
|
unkown
|
page read and write
|
|
|
|
7FF56DE16000
|
unkown
|
page readonly
|
|
|
|
7FF57AD6C000
|
unkown
|
page readonly
|
|
|
|
58B0000
|
unkown
|
page read and write
|
|
|
|
3CB4000
|
unkown
|
page readonly
|
|
|
|
1E7C0AB0000
|
unkown
|
page read and write
|
|
|
|
7FF5E821F000
|
unkown
|
page readonly
|
|
|
|
19159E02000
|
unkown
|
page read and write
|
|
|
|
7FF5E82D1000
|
unkown
|
page readonly
|
|
|
|
4B00000
|
unkown
|
page readonly
|
|
|
|
1E7BF680000
|
unkown
|
page read and write
|
|
|
|
7FF540706000
|
unkown
|
page readonly
|
|
|
|
1E7BF610000
|
unkown
|
page read and write
|
|
|
|
4D34000
|
unkown
|
page read and write
|
|
|
|
3290000
|
unkown
|
page readonly
|
|
|
|
7FFB5BBCE000
|
unkown image
|
page read and write
|
|
|
|
803C000
|
unkown image
|
page readonly
|
|
|
|
1E7BF4B0000
|
unkown
|
page readonly
|
|
|
|
15E0000
|
heap private
|
page read and write
|
|
|
|
7FF57AEFF000
|
unkown
|
page readonly
|
|
|
|
21E26ED0000
|
unkown
|
page readonly
|
|
|
|
33F4000
|
unkown
|
page read and write
|
|
|
|
336B000
|
unkown
|
page read and write
|
|
|
|
A04B000
|
unkown
|
page read and write
|
|
|
|
67C0000
|
unkown
|
page readonly
|
|
|
|
1B0F6CB0000
|
unkown
|
page read and write
|
|
|
|
7FF57AF09000
|
unkown
|
page readonly
|
|
|
|
7FF5E823D000
|
unkown
|
page readonly
|
|
|
|
13B9BFE000
|
unkown
|
page read and write
|
|
|
|
49D2000
|
unkown
|
page readonly
|
|
|
|
292CA7F000
|
unkown
|
page read and write
|
|
|
|
7FF5C8514000
|
unkown
|
page readonly
|
|
|
|
400817F000
|
unkown
|
page read and write
|
|
|
|
1E7C0470000
|
unkown
|
page read and write
|
|
|
|
7FF5DDFCD000
|
unkown
|
page readonly
|
|
|
|
7FF514690000
|
unkown
|
page readonly
|
|
|
|
13CD7A8A000
|
unkown
|
page read and write
|
|
|
|
190E1250000
|
unkown
|
page read and write
|
|
|
|
1E7C056D000
|
unkown
|
page read and write
|
|
|
|
7FF5C8430000
|
unkown
|
page readonly
|
|
|
|
1E7BDE70000
|
unkown
|
page write copy
|
|
|
|
7FF51453B000
|
unkown
|
page readonly
|
|
|
|
7FF5E81E8000
|
unkown
|
page readonly
|
|
|
|
14E0000
|
unkown
|
page read and write
|
|
|
|
277207F000
|
unkown
|
page read and write
|
|
|
|
1390000
|
heap default
|
page read and write
|
|
|
|
7D2F000
|
unkown image
|
page readonly
|
|
|
|
7FF5C84C6000
|
unkown
|
page readonly
|
|
|
|
1E7C1A40000
|
unkown
|
page read and write
|
|
|
|
43EB000
|
unkown
|
page readonly
|
|
|
|
C9CE000
|
unkown
|
page read and write
|
|
|
|
1E7C19A0000
|
unkown
|
page read and write
|
|
|
|
37C0000
|
unkown
|
page readonly
|
|
|
|
1E7C1890000
|
unkown
|
page read and write
|
|
|
|
1E7BB818000
|
heap default
|
page read and write
|
|
|
|
1E7BFBE0000
|
unkown
|
page read and write
|
|
|
|
1A6A845C000
|
unkown
|
page read and write
|
|
|
|
7FF5C85FF000
|
unkown
|
page readonly
|
|
|
|
7FF54076C000
|
unkown
|
page readonly
|
|
|
|
19159E29000
|
unkown
|
page read and write
|
|
|
|
7FF555699000
|
unkown
|
page readonly
|
|
|
|
4655000
|
unkown
|
page readonly
|
|
|
|
257B3A2D000
|
unkown
|
page read and write
|
|
|
|
257B3940000
|
unkown
|
page readonly
|
|
|
|
7FF51459F000
|
unkown
|
page readonly
|
|
|
|
7FF51425A000
|
unkown
|
page readonly
|
|
|
|
1E7BDE30000
|
unkown
|
page read and write
|
|
|
|
52C0000
|
unkown
|
page readonly
|
|
|
|
1E7C1922000
|
heap private
|
page read and write
|
|
|
|
7FF5C867D000
|
unkown
|
page readonly
|
|
|
|
5526000
|
unkown
|
page read and write
|
|
|
|
5440000
|
unkown
|
page readonly
|
|
|
|
7FF5D42E3000
|
unkown
|
page readonly
|
|
|
|
7FF5C8867000
|
unkown
|
page readonly
|
|
|
|
7FF5C80D1000
|
unkown
|
page readonly
|
|
|
|
1E7BF037000
|
unkown
|
page readonly
|
|
|
|
257B3A5C000
|
unkown
|
page read and write
|
|
|
|
1E7BDAA0000
|
unkown
|
page read and write
|
|
|
|
1A6A83C0000
|
unkown
|
page read and write
|
|
|
|
1E7BDDF0000
|
unkown
|
page read and write
|
|
|
|
3300000
|
unkown
|
page readonly
|
|
|
|
7FF5D441F000
|
unkown
|
page readonly
|
|
|
|
7FF5146DD000
|
unkown
|
page readonly
|
|
|
|
7FF51479C000
|
unkown
|
page readonly
|
|
|
|
1B0F16BA000
|
unkown
|
page read and write
|
|
|
|
3CBB000
|
unkown
|
page readonly
|
|
|
|
1E7BDD30000
|
unkown
|
page readonly
|
|
|
|
7FF57ABCF000
|
unkown
|
page readonly
|
|
|
|
7FF55191C000
|
unkown
|
page readonly
|
|
|
|
1B0F1E15000
|
unkown
|
page read and write
|
|
|
|
1E7BE6A2000
|
unkown
|
page readonly
|
|
|
|
7FF514726000
|
unkown
|
page readonly
|
|
|
|
7FF5517D8000
|
unkown
|
page readonly
|
|
|
|
7FF5DDF9E000
|
unkown
|
page readonly
|
|
|
|
1B0F16FC000
|
unkown
|
page read and write
|
|
|
|
1E7BDD20000
|
unkown
|
page read and write
|
|
|
|
7FF56DB5E000
|
unkown
|
page readonly
|
|
|
|
CBCF000
|
unkown
|
page read and write
|
|
|
|
47D0000
|
unkown
|
page readonly
|
|
|
|
7FF5DDF60000
|
unkown
|
page readonly
|
|
|
|
257B3A49000
|
unkown
|
page read and write
|
|
|
|
1CF02260000
|
unkown
|
page read and write
|
|
|
|
1E7BB8BE000
|
heap default
|
page read and write
|
|
|
|
257B3A75000
|
unkown
|
page read and write
|
|
|
|
1E7BF530000
|
unkown
|
page read and write
|
|
|
|
1E7BF8D0000
|
unkown
|
page read and write
|
|
|
|
190E1229000
|
unkown
|
page read and write
|
|
|
|
2EA0000
|
unkown
|
page read and write
|
|
|
|
1E7BF800000
|
unkown
|
page read and write
|
|
|
|
5773000
|
unkown
|
page read and write
|
|
|
|
5890000
|
unkown
|
page readonly
|
|
|
|
7FF5C87A4000
|
unkown
|
page readonly
|
|
|
|
CEE2000
|
unkown
|
page read and write
|
|
|
|
190E1A02000
|
unkown
|
page read and write
|
|
|
|
4FE0000
|
unkown
|
page read and write
|
|
|
|
4772000
|
unkown
|
page readonly
|
|
|
|
1B0F6D00000
|
unkown
|
page readonly
|
|
|
|
A2CB000
|
unkown
|
page read and write
|
|
|
|
7FF57AE25000
|
unkown
|
page readonly
|
|
|
|
DFBD000
|
unkown
|
page read and write
|
|
|
|
1E7C0A00000
|
unkown
|
page read and write
|
|
|
|
7FF5C89A6000
|
unkown
|
page readonly
|
|
|
|
1E7C0F50000
|
unkown
|
page read and write
|
|
|
|
7FF5146FC000
|
unkown
|
page readonly
|
|
|
|
4BA7000
|
unkown
|
page read and write
|
|
|
|
3FE9000
|
unkown
|
page readonly
|
|
|
|
1E7BDF42000
|
unkown
|
page read and write
|
|
|
|
1350000
|
unkown
|
page readonly
|
|
|
|
1E7BFAE0000
|
unkown
|
page read and write
|
|
|
|
7E8C000
|
unkown image
|
page readonly
|
|
|
|
E78E000
|
unkown
|
page readonly
|
|
|
|
1915A3A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C0BB0000
|
unkown
|
page readonly
|
|
|
|
1E7BD816000
|
unkown
|
page readonly
|
|
|
|
DDBE000
|
unkown
|
page read and write
|
|
|
|
7FF514BFE000
|
unkown
|
page readonly
|
|
|
|
4072000
|
unkown
|
page readonly
|
|
|
|
7F1C000
|
unkown image
|
page readonly
|
|
|
|
1E7BF900000
|
unkown
|
page readonly
|
|
|
|
8853000
|
unkown
|
page read and write
|
|
|
|
7FF5C86AC000
|
unkown
|
page readonly
|
|
|
|
1B0F1DF0000
|
unkown
|
page read and write
|
|
|
|
7FF57AEC8000
|
unkown
|
page readonly
|
|
|
|
4D2F000
|
unkown
|
page read and write
|
|
|
|
593C000
|
unkown
|
page read and write
|
|
|
|
1E7BD802000
|
unkown
|
page readonly
|
|
|
|
9ECB000
|
unkown
|
page read and write
|
|
|
|
56A1000
|
unkown
|
page read and write
|
|
|
|
7FF57AE67000
|
unkown
|
page readonly
|
|
|
|
1E7C0B60000
|
unkown
|
page read and write
|
|
|
|
3419000
|
unkown
|
page read and write
|
|
|
|
7FF57ABC6000
|
unkown
|
page readonly
|
|
|
|
7FF57AF1D000
|
unkown
|
page readonly
|
|
|
|
7FF514712000
|
unkown
|
page readonly
|
|
|
|
1E7BEA95000
|
unkown
|
page readonly
|
|
|
|
1E7BF0E4000
|
unkown
|
page readonly
|
|
|
|
1E7C0480000
|
unkown
|
page read and write
|
|
|
|
21F117F000
|
unkown
|
page read and write
|
|
|
|
77C68FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D43E6000
|
unkown
|
page readonly
|
|
|
|
1E7C179E000
|
unkown
|
page read and write
|
|
|
|
4AD7000
|
unkown
|
page readonly
|
|
|
|
7FF5C8920000
|
unkown
|
page readonly
|
|
|
|
12D0000
|
unkown
|
page readonly
|
|
|
|
1B0F6E86000
|
unkown
|
page read and write
|
|
|
|
1E7BFB00000
|
unkown
|
page read and write
|
|
|
|
7FF5C821D000
|
unkown
|
page readonly
|
|
|
|
7FF514493000
|
unkown
|
page readonly
|
|
|
|
7FF57AEA8000
|
unkown
|
page readonly
|
|
|
|
7FF551948000
|
unkown
|
page readonly
|
|
|
|
4792000
|
unkown
|
page readonly
|
|
|
|
1230000
|
unkown
|
page readonly
|
|
|
|
7FF5147A5000
|
unkown
|
page readonly
|
|
|
|
13B8F30000
|
unkown
|
page read and write
|
|
|
|
59B7000
|
unkown
|
page read and write
|
|
|
|
1E7BFB80000
|
heap private
|
page read and write
|
|
|
|
7FF5C885B000
|
unkown
|
page readonly
|
|
|
|
7EB5000
|
unkown image
|
page readonly
|
|
|
|
7FF57AEC6000
|
unkown
|
page readonly
|
|
|
|
5603000
|
unkown
|
page read and write
|
|
|
|
4784000
|
unkown
|
page readonly
|
|
|
|
19159CD0000
|
heap default
|
page read and write
|
|
|
|
5773000
|
unkown
|
page read and write
|
|
|
|
7FFB5BBC5000
|
unkown image
|
page read and write
|
|
|
|
7FF5C8770000
|
unkown
|
page readonly
|
|
|
|
4637000
|
unkown
|
page readonly
|
|
|
|
40086FF000
|
unkown
|
page read and write
|
|
|
|
7FF57AF3C000
|
unkown
|
page readonly
|
|
|
|
1B0F6E3D000
|
unkown
|
page read and write
|
|
|
|
7FF540785000
|
unkown
|
page readonly
|
|
|
|
7FF5C86A0000
|
unkown
|
page readonly
|
|
|
|
7FF57AFAE000
|
unkown
|
page readonly
|
|
|
|
7FF5518C5000
|
unkown
|
page readonly
|
|
|
|
4AE0000
|
unkown
|
page readonly
|
|
|
|
1E7BE1B0000
|
unkown
|
page read and write
|
|
|
|
7FF514BD6000
|
unkown
|
page readonly
|
|
|
|
190E1200000
|
unkown
|
page read and write
|
|
|
|
7FF514329000
|
unkown
|
page readonly
|
|
|
|
7FF57AEC2000
|
unkown
|
page readonly
|
|
|
|
7FF57ACDB000
|
unkown
|
page readonly
|
|
|
|
4667000
|
unkown
|
page readonly
|
|
|
|
7DC2000
|
unkown image
|
page readonly
|
|
|
|
3330000
|
unkown
|
page read and write
|
|
|
|
190E1C00000
|
unkown
|
page readonly
|
|
|
|
1E7BF700000
|
unkown
|
page read and write
|
|
|
|
7FF5C88A7000
|
unkown
|
page readonly
|
|
|
|
423C000
|
unkown
|
page readonly
|
|
|
|
1E7BF370000
|
unkown
|
page readonly
|
|
|
|
4959000
|
unkown
|
page readonly
|
|
|
|
38E0000
|
unkown
|
page readonly
|
|
|
|
7FF5405E8000
|
unkown
|
page readonly
|
|
|
|
21E2688B000
|
heap default
|
page read and write
|
|
|
|
7FF5C8266000
|
unkown
|
page readonly
|
|
|
|
3CD4000
|
unkown
|
page readonly
|
|
|
|
1E7BEFC5000
|
unkown
|
page readonly
|
|
|
|
E6C0000
|
unkown
|
page readonly
|
|
|
|
7FF5C8520000
|
unkown
|
page readonly
|
|
|
|
1E7BF770000
|
unkown
|
page read and write
|
|
|
|
4F90000
|
unkown
|
page readonly
|
|
|
|
7FF5D4391000
|
unkown
|
page readonly
|
|
|
|
5140000
|
unkown
|
page write copy
|
|
|
|
6560000
|
unkown
|
page read and write
|
|
|
|
7FF5E7DE0000
|
unkown
|
page readonly
|
|
|
|
32D0000
|
unkown
|
page readonly
|
|
|
|
1E7BF7F0000
|
unkown
|
page read and write
|
|
|
|
542D000
|
unkown
|
page read and write
|
|
|
|
7FF514C2D000
|
unkown
|
page readonly
|
|
|
|
86AB000
|
unkown
|
page read and write
|
|
|
|
7FF5C82C4000
|
unkown
|
page readonly
|
|
|
|
7FF5E809E000
|
unkown
|
page readonly
|
|
|
|
7FF51480E000
|
unkown
|
page readonly
|
|
|
|
1E7BDB90000
|
unkown
|
page read and write
|
|
|
|
7FF5C85A4000
|
unkown
|
page readonly
|
|
|
|
67C4B7B000
|
unkown
|
page read and write
|
|
|
|
1B0F2480000
|
unkown
|
page read and write
|
|
|
|
4019000
|
unkown
|
page readonly
|
|
|
|
5490000
|
unkown
|
page read and write
|
|
|
|
7FF5C89CD000
|
unkown
|
page readonly
|
|
|
|
FF0000
|
unkown
|
page read and write
|
|
|
|
1E7BF870000
|
unkown
|
page read and write
|
|
|
|
7FF51472A000
|
unkown
|
page readonly
|
|
|
|
46C2000
|
unkown
|
page readonly
|
|
|
|
186DA513000
|
unkown
|
page read and write
|
|
|
|
1E7BF460000
|
unkown
|
page readonly
|
|
|
|
4FC0000
|
unkown
|
page read and write
|
|
|
|
1E7BE887000
|
unkown
|
page readonly
|
|
|
|
13CD7A4A000
|
unkown
|
page read and write
|
|
|
|
3419000
|
unkown
|
page read and write
|
|
|
|
1E7BE278000
|
unkown
|
page read and write
|
|
|
|
4670000
|
unkown
|
page readonly
|
|
|
|
32E0000
|
unkown
|
page readonly
|
|
|
|
7FF514796000
|
unkown
|
page readonly
|
|
|
|
12F0000
|
unkown
|
page readonly
|
|
|
|
7FF5144E0000
|
unkown
|
page readonly
|
|
|
|
7D5B17B000
|
unkown
|
page read and write
|
|
|
|
1E7BF580000
|
unkown
|
page read and write
|
|
|
|
1E7BB7D0000
|
unkown
|
page read and write
|
|
|
|
1E7BF6D0000
|
unkown
|
page read and write
|
|
|
|
1E89108B000
|
unkown
|
page read and write
|
|
|
|
7FF5147BA000
|
unkown
|
page readonly
|
|
|
|
3CD4000
|
unkown
|
page readonly
|
|
|
|
7FFB5BA30000
|
unkown image
|
page readonly
|
|
|
|
4770000
|
unkown
|
page readonly
|
|
|
|
7FFB5BBCA000
|
unkown image
|
page read and write
|
|
|
|
7FF56DB57000
|
unkown
|
page readonly
|
|
|
|
C84C000
|
unkown
|
page read and write
|
|
|
|
88FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C8800000
|
unkown
|
page readonly
|
|
|
|
1E7BE100000
|
unkown
|
page readonly
|
|
|
|
7FF5C8657000
|
unkown
|
page readonly
|
|
|
|
4B00000
|
unkown
|
page readonly
|
|
|
|
7FF5C0CB9000
|
unkown
|
page readonly
|
|
|
|
7FF514708000
|
unkown
|
page readonly
|
|
|
|
7FF56DE1C000
|
unkown
|
page readonly
|
|
|
|
7FF57AD89000
|
unkown
|
page readonly
|
|
|
|
257B3A45000
|
unkown
|
page read and write
|
|
|
|
7FF5141B2000
|
unkown
|
page readonly
|
|
|
|
1E7BF170000
|
unkown
|
page readonly
|
|
|
|
1E7BD81F000
|
unkown
|
page readonly
|
|
|
|
1E7C1A80000
|
unkown
|
page read and write
|
|
|
|
7FF514CC9000
|
unkown
|
page readonly
|
|
|
|
EB06000
|
unkown
|
page read and write
|
|
|
|
1E7BDA90000
|
unkown
|
page read and write
|
|
|
|
D4C7000
|
unkown
|
page readonly
|
|
|
|
EEBB000
|
unkown
|
page read and write
|
|
|
|
1E7BDEFF000
|
unkown
|
page read and write
|
|
|
|
1E7BB8ED000
|
heap default
|
page read and write
|
|
|
|
21E26B00000
|
heap private
|
page read and write
|
|
|
|
14F0000
|
unkown
|
page read and write
|
|
|
|
7FF5405BE000
|
unkown
|
page readonly
|
|
|
|
1E7BE6D4000
|
unkown
|
page readonly
|
|
|
|
1E7BE300000
|
unkown
|
page readonly
|
|
|
|
3290000
|
unkown
|
page readonly
|
|
|
|
1E7BE07A000
|
unkown
|
page read and write
|
|
|
|
1E7C0A20000
|
unkown
|
page read and write
|
|
|
|
7FF514722000
|
unkown
|
page readonly
|
|
|
|
4F6A000
|
unkown
|
page read and write
|
|
|
|
7FF5556B1000
|
unkown
|
page readonly
|
|
|
|
1E7BEFD7000
|
unkown
|
page readonly
|
|
|
|
36D0000
|
unkown
|
page readonly
|
|
|
|
1E7BF790000
|
unkown
|
page read and write
|
|
|
|
7FF5C8836000
|
unkown
|
page readonly
|
|
|
|
4035000
|
unkown
|
page readonly
|
|
|
|
1B0F1E00000
|
unkown
|
page read and write
|
|
|
|
1E7C1040000
|
unkown
|
page read and write
|
|
|
|
1B0F14A0000
|
heap private
|
page read and write
|
|
|
|
1E7BF5E0000
|
unkown
|
page read and write
|
|
|
|
1E7BF630000
|
unkown
|
page read and write
|
|
|
|
1E7BF0E0000
|
unkown
|
page readonly
|
|
|
|
1240000
|
unkown
|
page readonly
|
|
|
|
7FFB5BBCD000
|
unkown image
|
page write copy
|
|
|
|
55D0000
|
unkown
|
page read and write
|
|
|
|
1CF02160000
|
unkown
|
page readonly
|
|
|
|
1B0F6B60000
|
unkown
|
page read and write
|
|
|
|
7FF5C0BB2000
|
unkown
|
page readonly
|
|
|
|
7EDE000
|
unkown image
|
page readonly
|
|
|
|
1E7BE130000
|
unkown
|
page read and write
|
|
|
|
3840000
|
unkown
|
page readonly
|
|
|
|
FFDE7FE000
|
unkown
|
page read and write
|
|
|
|
1E7BEA49000
|
unkown
|
page readonly
|
|
|
|
292C67E000
|
unkown
|
page read and write
|
|
|
|
7FF5C8936000
|
unkown
|
page readonly
|
|
|
|
186DA6D0000
|
unkown
|
page readonly
|
|
|
|
7FF5C09DA000
|
unkown
|
page readonly
|
|
|
|
7FF55185C000
|
unkown
|
page readonly
|
|
|
|
7FF5C8248000
|
unkown
|
page readonly
|
|
|
|
7FFB5BC2F000
|
unkown image
|
page readonly
|
|
|
|
1E7BDAC0000
|
unkown
|
page read and write
|
|
|
|
15E5000
|
heap private
|
page read and write
|
|
|
|
7FF56DD7A000
|
unkown
|
page readonly
|
|
|
|
1A6A843D000
|
unkown
|
page read and write
|
|
|
|
4AD7000
|
unkown
|
page readonly
|
|
|
|
7FF5C0A7E000
|
unkown
|
page readonly
|
|
|
|
7FF5DE05E000
|
unkown
|
page readonly
|
|
|
|
1E7BD1B0000
|
unkown
|
page read and write
|
|
|
|
4EF0000
|
unkown
|
page readonly
|
|
|
|
7FF5C8895000
|
unkown
|
page readonly
|
|
|
|
4EC5A7E000
|
unkown
|
page read and write
|
|
|
|
73D7000
|
unkown
|
page read and write
|
|
|
|
7FF5D4456000
|
unkown
|
page readonly
|
|
|
|
5ADC000
|
unkown
|
page read and write
|
|
|
|
13CD7C00000
|
unkown
|
page readonly
|
|
|
|
186DA4BB000
|
unkown
|
page read and write
|
|
|
|
1E7BF130000
|
unkown
|
page readonly
|
|
|
|
1E7C18B0000
|
unkown
|
page read and write
|
|
|
|
337B000
|
unkown
|
page read and write
|
|
|
|
47A4000
|
unkown
|
page readonly
|
|
|
|
7FF5C88FA000
|
unkown
|
page readonly
|
|
|
|
1E7BDB40000
|
unkown
|
page read and write
|
|
|
|
7FF5D44D1000
|
unkown
|
page readonly
|
|
|
|
4940000
|
unkown
|
page readonly
|
|
|
|
4CB0000
|
unkown
|
page readonly
|
|
|
|
7FF5C87C3000
|
unkown
|
page readonly
|
|
|
|
1B0F1510000
|
unkown
|
page readonly
|
|
|
|
67C4E7F000
|
unkown
|
page read and write
|
|
|
|
21F10FE000
|
unkown
|
page read and write
|
|
|
|
1E891200000
|
unkown
|
page readonly
|
|
|
|
186DA43E000
|
unkown
|
page read and write
|
|
|
|
7FF57AC6E000
|
unkown
|
page readonly
|
|
|
|
1E7BF990000
|
unkown
|
page readonly
|
|
|
|
4612000
|
unkown
|
page readonly
|
|
|
|
EFBF000
|
unkown
|
page read and write
|
|
|
|
67C4A7F000
|
unkown
|
page read and write
|
|
|
|
7D5B2FB000
|
unkown
|
page read and write
|
|
|
|
186DA46F000
|
unkown
|
page read and write
|
|
|
|
7FF5142D6000
|
unkown
|
page readonly
|
|
|
|
1E7BF590000
|
unkown
|
page read and write
|
|
|
|
45E2000
|
unkown
|
page readonly
|
|
|
|
7FF5C8668000
|
unkown
|
page readonly
|
|
|
|
1CF020E0000
|
heap private
|
page read and write
|
|
|
|
7FF5C8861000
|
unkown
|
page readonly
|
|
|
|
7FF57AE87000
|
unkown
|
page readonly
|
|
|
|
1E7C19F0000
|
unkown
|
page read and write
|
|
|
|
292C36C000
|
unkown
|
page read and write
|
|
|
|
1E7BE190000
|
unkown
|
page read and write
|
|
|
|
E20000
|
heap private
|
page read and write
|
|
|
|
1E7BF780000
|
unkown
|
page read and write
|
|
|
|
8360000
|
unkown
|
page read and write
|
|
|
|
14C0000
|
unkown
|
page read and write
|
|
|
|
46C0000
|
unkown
|
page readonly
|
|
|
|
1E7BF410000
|
unkown
|
page readonly
|
|
|
|
1427000
|
heap default
|
page read and write
|
|
|
|
1E891081000
|
unkown
|
page read and write
|
|
|
|
1A6A8360000
|
heap default
|
page read and write
|
|
|
|
7FF514BC0000
|
unkown
|
page readonly
|
|
|
|
186DAB60000
|
unkown
|
page readonly
|
|
|
|
7FF5C84FE000
|
unkown
|
page readonly
|
|
|
|
1438000
|
heap default
|
page read and write
|
|
|
|
4DD0000
|
unkown
|
page readonly
|
|
|
|
2EE0000
|
heap private
|
page read and write
|
|
|
|
1E7BDB60000
|
unkown
|
page read and write
|
|
|
|
7FF5C8250000
|
unkown
|
page readonly
|
|
|
|
7FF5C07C0000
|
unkown
|
page readonly
|
|
|
|
1E7BDEE7000
|
unkown
|
page read and write
|
|
|
|
1E7BD7AD000
|
unkown
|
page readonly
|
|
|
|
4CA0000
|
unkown
|
page readonly
|
|
|
|
13CD7900000
|
heap default
|
page read and write
|
|
|
|
1E7BD81A000
|
unkown
|
page readonly
|
|
|
|
1E7BF750000
|
unkown
|
page read and write
|
|
|
|
257B3A44000
|
unkown
|
page read and write
|
|
|
|
7FF5556BC000
|
unkown
|
page readonly
|
|
|
|
277167C000
|
unkown
|
page read and write
|
|
|
|
41B9000
|
unkown
|
page readonly
|
|
|
|
4FB0000
|
unkown
|
page read and write
|
|
|
|
1E7BD1C0000
|
unkown
|
page readonly
|
|
|
|
186DAD00000
|
unkown
|
page read and write
|
|
|
|
7FF56D664000
|
unkown
|
page readonly
|
|
|
|
33AF000
|
unkown
|
page read and write
|
|
|
|
7FF514558000
|
unkown
|
page readonly
|
|
|
|
186DAB70000
|
unkown
|
page write copy
|
|
|
|
4007C7C000
|
unkown
|
page read and write
|
|
|
|
1E7BE0D0000
|
unkown
|
page read and write
|
|
|
|
86E5000
|
unkown
|
page read and write
|
|
|
|
7FF5C898D000
|
unkown
|
page readonly
|
|
|
|
7FF514647000
|
unkown
|
page readonly
|
|
|
|
7FF53FFA9000
|
unkown
|
page readonly
|
|
|
|
3FB2000
|
unkown
|
page readonly
|
|
|
|
4095000
|
unkown
|
page readonly
|
|
|
|
1E7BD320000
|
unkown
|
page read and write
|
|
|
|
34AC000
|
unkown
|
page read and write
|
|
|
|
4FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5D438A000
|
unkown
|
page readonly
|
|
|
|
49ED000
|
unkown
|
page readonly
|
|
|
|
7FF5C8585000
|
unkown
|
page readonly
|
|
|
|
1E7BF8C0000
|
unkown
|
page read and write
|
|
|
|
7FF540049000
|
unkown
|
page readonly
|
|
|
|
43AC000
|
unkown
|
page readonly
|
|
|
|
4F10000
|
unkown
|
page read and write
|
|
|
|
1E7BEFB2000
|
unkown
|
page readonly
|
|
|
|
1270000
|
unkown
|
page readonly
|
|
|
|
7FF55197F000
|
unkown
|
page readonly
|
|
|
|
7060000
|
unkown
|
page read and write
|
|
|
|
DF3B000
|
unkown
|
page read and write
|
|
|
|
7FF5C8424000
|
unkown
|
page readonly
|
|
|
|
8440000
|
unkown
|
page read and write
|
|
|
|
4792000
|
unkown
|
page readonly
|
|
|
|
7FF57ABBD000
|
unkown
|
page readonly
|
|
|
|
1E7BDDB0000
|
unkown
|
page read and write
|
|
|
|
7FF5C89D2000
|
unkown
|
page readonly
|
|
|
|
38E0000
|
unkown
|
page readonly
|
|
|
|
3CBB000
|
unkown
|
page readonly
|
|
|
|
7FF5C87E8000
|
unkown
|
page readonly
|
|
|
|
1A6A8E00000
|
unkown
|
page read and write
|
|
|
|
1B0F6B81000
|
unkown
|
page read and write
|
|
|
|
1E7BFC20000
|
unkown
|
page read and write
|
|
|
|
CA49000
|
unkown
|
page read and write
|
|
|
|
257B3A6B000
|
unkown
|
page read and write
|
|
|
|
784E000
|
unkown image
|
page readonly
|
|
|
|
47B0000
|
unkown
|
page readonly
|
|
|
|
1B0F6B90000
|
unkown
|
page read and write
|
|
|
|
257B3A4E000
|
unkown
|
page read and write
|
|
|
|
1E7C1930000
|
unkown
|
page read and write
|
|
|
|
47D0000
|
unkown
|
page readonly
|
|
|
|
8380000
|
unkown
|
page read and write
|
|
|
|
7FF5519B6000
|
unkown
|
page readonly
|
|
|
|
7FF5C82A9000
|
unkown
|
page readonly
|
|
|
|
1E7BF880000
|
unkown
|
page read and write
|
|
|
|
7FF5C86D7000
|
unkown
|
page readonly
|
|
|
|
21E28700000
|
heap private
|
page read and write
|
|
|
|
7FF57AB88000
|
unkown
|
page readonly
|
|
|
|
1E7BFAD0000
|
unkown
|
page read and write
|
|
|
|
7FF551A39000
|
unkown
|
page readonly
|
|
|
|
4C70000
|
unkown
|
page readonly
|
|
|
|
1E8912D0000
|
unkown
|
page readonly
|
|
|
|
1E7BF740000
|
unkown
|
page read and write
|
|
|
|
1E7C0AD0000
|
unkown
|
page read and write
|
|
|
|
1E7BF1B0000
|
unkown
|
page readonly
|
|
|
|
7FF54071A000
|
unkown
|
page readonly
|
|
|
|
7FF514679000
|
unkown
|
page readonly
|
|
|
|
257B3A00000
|
unkown
|
page read and write
|
|
|
|
1B0F6E00000
|
unkown
|
page read and write
|
|
|
|
1A6A8A60000
|
unkown
|
page readonly
|
|
|
|
7FF5D4474000
|
unkown
|
page readonly
|
|
|
|
7FF5519BC000
|
unkown
|
page readonly
|
|
|
|
1E7C1380000
|
heap private
|
page read and write
|
|
|
|
1E7BD7FE000
|
unkown
|
page readonly
|
|
|
|
1B0F26A0000
|
unkown
|
page readonly
|
|
|
|
3F32000
|
unkown
|
page readonly
|
|
|
|
7FF5C875C000
|
unkown
|
page readonly
|
|
|
|
86CC000
|
unkown
|
page read and write
|
|
|
|
7FF55199D000
|
unkown
|
page readonly
|
|
|
|
32B8000
|
unkown
|
page read and write
|
|
|
|
190E1302000
|
unkown
|
page read and write
|
|
|
|
1E7BBD70000
|
unkown
|
page readonly
|
|
|
|
3800000
|
unkown
|
page readonly
|
|
|
|
FFDE8FE000
|
unkown
|
page read and write
|
|
|
|
46C0000
|
unkown
|
page readonly
|
|
|
|
1E7BFB00000
|
unkown
|
page read and write
|
|
|
|
1E7C0440000
|
unkown
|
page read and write
|
|
|
|
4CB0000
|
unkown
|
page readonly
|
|
|
|
3F02000
|
unkown
|
page readonly
|
|
|
|
4007D7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C8228000
|
unkown
|
page readonly
|
|
|
|
1CF02213000
|
unkown
|
page read and write
|
|
|
|
7FF5C894A000
|
unkown
|
page readonly
|
|
|
|
1E7BF184000
|
unkown
|
page readonly
|
|
|
|
1E7BE090000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A1E000
|
unkown
|
page readonly
|
|
|
|
D4C2000
|
unkown
|
page readonly
|
|
|
|
7FF5C85EC000
|
unkown
|
page readonly
|
|
|
|
E751000
|
unkown
|
page readonly
|
|
|
|
83C0000
|
unkown
|
page readonly
|
|
|
|
190E1252000
|
unkown
|
page read and write
|
|
|
|
49F0000
|
unkown
|
page readonly
|
|
|
|
1E7C0AE0000
|
unkown
|
page read and write
|
|
|
|
7FF514063000
|
unkown
|
page readonly
|
|
|
|
49A2000
|
unkown
|
page readonly
|
|
|
|
1E7BE0F0000
|
unkown
|
page readonly
|
|
|
|
7FF514C64000
|
unkown
|
page readonly
|
|
|
|
7D5B6FE000
|
unkown
|
page read and write
|
|
|
|
8120000
|
unkown
|
page read and write
|
|
|
|
7FF551946000
|
unkown
|
page readonly
|
|
|
|
7FF5C0C45000
|
unkown
|
page readonly
|
|
|
|
7FF57AEF5000
|
unkown
|
page readonly
|
|
|
|
7FF5C89AC000
|
unkown
|
page readonly
|
|
|
|
1E891A00000
|
unkown
|
page readonly
|
|
|
|
1B0F2670000
|
unkown
|
page readonly
|
|
|
|
7DB4000
|
unkown image
|
page readonly
|
|
|
|
1E7BE0B7000
|
unkown
|
page read and write
|
|
|
|
2E90000
|
unkown
|
page readonly
|
|
|
|
1E890F80000
|
unkown
|
page read and write
|
|
|
|
1980000
|
unkown
|
page readonly
|
|
|
|
4920000
|
unkown
|
page readonly
|
|
|
|
1E7BF240000
|
unkown
|
page readonly
|
|
|
|
1E7BFB42000
|
unkown
|
page read and write
|
|
|
|
7FF57AFB9000
|
unkown
|
page readonly
|
|
|
|
7FF514CC1000
|
unkown
|
page readonly
|
|
|
|
1E7BE0BB000
|
unkown
|
page read and write
|
|
|
|
7FF5D422A000
|
unkown
|
page readonly
|
|
|
|
C54A000
|
unkown
|
page read and write
|
|
|
|
3900000
|
unkown
|
page readonly
|
|
|
|
1E7BD7C1000
|
unkown
|
page readonly
|
|
|
|
7FF5C0A3F000
|
unkown
|
page readonly
|
|
|
|
257B3A5A000
|
unkown
|
page read and write
|
|
|
|
1E7BF9A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C0BF5000
|
unkown
|
page readonly
|
|
|
|
2EF0000
|
unkown
|
page readonly
|
|
|
|
7FF5C8693000
|
unkown
|
page readonly
|
|
|
|
566F000
|
unkown
|
page read and write
|
|
|
|
1E891051000
|
unkown
|
page read and write
|
|
|
|
2E8F000
|
unkown
|
page read and write
|
|
|
|
4EF0000
|
unkown
|
page readonly
|
|
|
|
77C687A000
|
unkown
|
page read and write
|
|
|
|
4AB2000
|
unkown
|
page readonly
|
|
|
|
7FF5C0503000
|
unkown
|
page readonly
|
|
|
|
5A36000
|
unkown
|
page read and write
|
|
|
|
7FF5517FB000
|
unkown
|
page readonly
|
|
|
|
7FF57ABF1000
|
unkown
|
page readonly
|
|
|
|
7FF5C8405000
|
unkown
|
page readonly
|
|
|
|
1B0F6DC0000
|
unkown
|
page readonly
|
|
|
|
4612000
|
unkown
|
page readonly
|
|
|
|
7FF5D42E7000
|
unkown
|
page readonly
|
|
|
|
2EF0000
|
unkown
|
page readonly
|
|
|
|
1E7BFA80000
|
unkown
|
page read and write
|
|
|
|
7FF51473A000
|
unkown
|
page readonly
|
|
|
|
7FF5E82CE000
|
unkown
|
page readonly
|
|
|
|
1A6A8402000
|
unkown
|
page read and write
|
|
|
|
1B0F1F02000
|
unkown
|
page read and write
|
|
|
|
4F30000
|
unkown
|
page read and write
|
|
|
|
4669000
|
unkown
|
page readonly
|
|
|
|
7FFB5BC37000
|
unkown image
|
page readonly
|
|
|
|
7FF514CBE000
|
unkown
|
page readonly
|
|
|
|
7FF5C884C000
|
unkown
|
page readonly
|
|
|
|
A4E1000
|
unkown
|
page read and write
|
|
There are 2292 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://marinapayroll.com/OH2/GG8
|
|
|
|
https://marinapayroll.com/OH2/GG8/Othermail.php
|
|
|
|
https://marinapayroll.com/OH2/GG8/Outlook.php
|
|
|
|
https://weqx-my.sharepoint.com/personal/nickih_weqx_com/_layouts/15/Doc.aspx?sourcedoc={2b06c47a-2618-4c01-8ca8-f5ef16ced462}&action=view&wd=target%28INV.one%7C9443cf35-fb3b-498e-91c9-fcab80cf65a6%2FSusan%20Kravchuk%20Shared%20PDF%20Document%20with%20you.%7C5a78a1a1-31bf-451a-9d39-43403f63116e%2F%29
|
|
|
|
https://marinapayroll.com/OH2/GG8/Office365.php
|
|