Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
audio_cheri.riley@treetop.com_file.htm
|
HTML document, ASCII text, with no line terminators
|
initial sample
|
 |
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
 |
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\1ebbde17-9a82-41c3-a7bb-289361c56cfa.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\1ec7e948-9292-4d08-a74d-07e932d3320d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\36b7f1ac-a990-4327-ab64-286194a43c79.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\4871bfac-8d01-4056-83f8-87c710154a8a.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\4a772cdf-1c2f-4ef7-8441-d1edaed9138a.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\4c790279-8e8d-4147-bfab-d8b940e1477d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\634d9193-9bbc-40af-bd93-d9aace816ec8.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\6bce22a0-9319-48be-8603-6c1a8032c41f.tmp
|
SysEx File -
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\8d3b3211-a131-49e7-b213-955f15092e5a.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\91b738a5-14ed-4e5d-8c5c-54f6da51cbd7.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\92919595-9f76-42a6-bfcb-f55dd999a1ae.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\9c689873-e577-4a73-95dc-40852c18fb6a.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2222edd6-a419-4dee-b830-adedae1c0abc.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\946eb2dc-2451-4e87-b2fe-abfded2a8b72.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\21e667a9-1214-4ca0-9a39-2ebabc452c46.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\3e0de6c4-6962-46c5-96a8-7b6b1d2458f7.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\f9608479-6dc8-4552-aa92-e0e24261c17f.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\2a5f0dcb-d92e-438f-94e5-003dcda62a99.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\58943f74-7189-4396-8315-607374d71848.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\df837a08-30f9-4c60-8265-aa263f6953ee.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a0d648d4-cf7d-4101-aea1-410e84d0ec83.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a6da8e63-3b5a-4a9b-9153-1442bc2916cf.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\afefa4c5-16a6-4350-a4d8-b69a1dfc878d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\cb7ccd56-693f-4f31-bd9b-3ab65a3f0791.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d7cf1098-11e2-443c-996f-03c8a71426e7.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e242bcfd-a4af-45cd-a16a-6871f4c617ec.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e390495a-fe3b-41b7-a80e-210f3e7faa33.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f9510351-8504-4291-812a-35da44af02ed.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\9.19.0\Indexing in Progress
|
empty
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\scoped_dir6868_785586536\Ruleset Data
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\cce5b500-1ed6-4aab-b607-8b2714b2813b.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\e4d66e5e-d7f2-4fbc-9aa0-05422cfe7674.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\3a94ea7e-fd04-4802-8ea2-16cd43ee63aa.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\51e5668b-1c0d-4075-884f-fb7aad6a8166.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6868_1218504966\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6868_1400507617\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6868_1418553254\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6868_2057984965\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6868_532910252\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6868_607618670\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6868_925890476\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\b11569e6-fe25-4b3d-a5d0-45e0bf1f7704.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\ed9d3ab7-c7fb-4642-bd1f-f4d3ddcf75c2.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\3a94ea7e-fd04-4802-8ea2-16cd43ee63aa.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_23867426\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6868_294932430\b11569e6-fe25-4b3d-a5d0-45e0bf1f7704.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
There are 182 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'C:\Users\user\Desktop\audio_cheri.riley@treetop.com_file.htm'
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1504,3313749393455400725,13859779750281236468,131072
--lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1852 /prefetch:8
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://vogtfamily.com/quarantine/i/of1/qsuv6r3a9mj71exzwt80igydkbcfhln2o45pguyjxi9zem3rp5hw4lcd8t6qb0snkv1of7a2cnfb6x3iaspzohkdwu925lt0rm718gjeyv4q?data=Y2hlcmkucmlsZXlAdHJlZXRvcC5jb20=
|
|
||
|
https://dns.google
|
unknown
|
|
|
|
https://dicytateful.com/l.html#Y2hlcmkucmlsZXlAdHJlZXRvcC5jb20=
|
unknown
|
|
|
|
https://vogtfamily.com/quarantine/i/of1/?Y2hlcmkucmlsZXlAdHJlZXRvcC5jb20=D
|
unknown
|
|
|
|
https://dicytateful.com/l.html#Y2hlcmkucmlsZXlAdHJlZXRvcC5jb20=confirm
|
unknown
|
|
|
|
https://vogtfamily.com/quarantine/i/of1/images/favicon.ico
|
unknown
|
|
|
|
https://vogtfamily.com/quarantine/i/of1?Y2hlcmkucmlsZXlAdHJlZXRvcC5jb20=
|
unknown
|
|
|
|
https://vogtfamily.com/
|
unknown
|
|
|
|
https://vogtfamily.com/quarantine/i/of1/qsuv6r3a9mj71exzwt80igydkbcfhln2o45pguyjxi9zem3rp5hw4lcd8t6q
|
unknown
|
|
|
|
https://vogtfamily.com/quarantine/i/of1?Y2hlcmkucmlsZXlAdHJlZXRvcC5jb20=confirm
|
unknown
|
|
|
|
https://clients2.googleusercontent.com
|
unknown
|
|
|
|
https://vogtfamily.com/quarantine/i/of1/?Y2hlcmkucmlsZXlAdHJlZXRvcC5jb20=confirm
|
unknown
|
|
|
|
https://vogtfamily.com/quarantine/i/of1/?Y2hlcmkucmlsZXlAdHJlZXRvcC5jb20=
|
unknown
|
|
|
|
https://dicytateful.com
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
There are 5 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
vogtfamily.com
|
162.241.127.183
|
|
|
|
googlehosted.l.googleusercontent.com
|
172.217.23.33
|
|
|
|
dicytateful.com
|
162.241.124.180
|
|
|
|
clients2.googleusercontent.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
unknown
|
|
|
|
162.241.127.183
|
vogtfamily.com
|
United States
|
unknown
|
|
|
|
162.241.124.180
|
dicytateful.com
|
United States
|
unknown
|
|
|
|
192.168.2.5
|
unknown
|
unknown
|
unknown
|
|
|
|
239.255.255.250
|
unknown
|
Reserved
|
unknown
|
|
|
|
172.217.23.33
|
googlehosted.l.googleusercontent.com
|
United States
|
unknown
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
ahfgeienlihckogmohjhadlkjgocpleb
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
kmendfapggjehodndflmmgagdbamhnfd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mfehgcgbbipciphmccgaenjidiccnmng
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
neajdppkdcdipfabeoofebfddakdcjhd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nkeimhogjdpnpccoofpliimaahmaaome
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
dr
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.reporting
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
module_blacklist_cache_md5_digest
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
media.storage_id_salt
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_seed
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
default_search_provider_data.template_url_data
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
safebrowsing.incidents_sent
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pinned_tabs
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
search_provider_overrides
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_default_search
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_username
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.restore_on_startup
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_version
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.prompt_wave
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage_is_newtabpage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
browser.show_home_button
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
user_experience_metrics.stability.exited_cleanly
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
lastrun
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
There are 38 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF515781000
|
unkown
|
page readonly
|
|
|
|
7FF5510B6000
|
unkown
|
page readonly
|
|
|
|
4AD497E000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
231B4AA8000
|
unkown
|
page read and write
|
|
|
|
23826062000
|
unkown
|
page read and write
|
|
|
|
7FF5A8DB2000
|
unkown
|
page readonly
|
|
|
|
1AE99CC1000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
7FF5A5341000
|
unkown
|
page readonly
|
|
|
|
1AE9C310000
|
unkown
|
page read and write
|
|
|
|
7FF510B08000
|
unkown
|
page readonly
|
|
|
|
7FF5A8E7E000
|
unkown
|
page readonly
|
|
|
|
7FF5A50AF000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF5A52FF000
|
unkown
|
page readonly
|
|
|
|
2B4348A5000
|
unkown
|
page read and write
|
|
|
|
1E1987E000
|
unkown
|
page read and write
|
|
|
|
7FF58331D000
|
unkown
|
page readonly
|
|
|
|
1DD223C0000
|
unkown
|
page readonly
|
|
|
|
23825CEE000
|
unkown
|
page read and write
|
|
|
|
23826098000
|
unkown
|
page read and write
|
|
|
|
24E94E70000
|
unkown
|
page read and write
|
|
|
|
1AE9BF46000
|
unkown
|
page read and write
|
|
|
|
2382086C000
|
unkown
|
page read and write
|
|
|
|
7FF5A8BD6000
|
unkown
|
page readonly
|
|
|
|
1CE914F0000
|
heap default
|
page read and write
|
|
|
|
7FF510A9F000
|
unkown
|
page readonly
|
|
|
|
2B436700000
|
unkown
|
page read and write
|
|
|
|
7FF510886000
|
unkown
|
page readonly
|
|
|
|
1AE99C7E000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
23825CE8000
|
unkown
|
page read and write
|
|
|
|
2382089A000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
23826104000
|
unkown
|
page read and write
|
|
|
|
7FF5A52CA000
|
unkown
|
page readonly
|
|
|
|
198A11A0000
|
heap private
|
page read and write
|
|
|
|
1DD22459000
|
unkown
|
page read and write
|
|
|
|
7FF5A51CB000
|
unkown
|
page readonly
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
7FF5518C7000
|
unkown
|
page readonly
|
|
|
|
7FF5905BA000
|
unkown
|
page readonly
|
|
|
|
1B64879000
|
unkown
|
page read and write
|
|
|
|
FE14B7E000
|
unkown
|
page read and write
|
|
|
|
7FF55C40D000
|
unkown
|
page readonly
|
|
|
|
7FF5C2174000
|
unkown
|
page readonly
|
|
|
|
23821710000
|
unkown
|
page read and write
|
|
|
|
1E19AFA000
|
unkown
|
page read and write
|
|
|
|
7FF5A8E27000
|
unkown
|
page readonly
|
|
|
|
1AE9D000000
|
unkown
|
page read and write
|
|
|
|
23820760000
|
unkown
|
page readonly
|
|
|
|
1AE99D55000
|
unkown
|
page read and write
|
|
|
|
7FF5A10C6000
|
unkown
|
page readonly
|
|
|
|
231B5346000
|
unkown
|
page read and write
|
|
|
|
23821500000
|
unkown
|
page read and write
|
|
|
|
7FF5156D4000
|
unkown
|
page readonly
|
|
|
|
7FF5A52DB000
|
unkown
|
page readonly
|
|
|
|
23826089000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
231B5362000
|
unkown
|
page read and write
|
|
|
|
23825D10000
|
unkown
|
page read and write
|
|
|
|
7FF5A8F01000
|
unkown
|
page readonly
|
|
|
|
7FF5A52A4000
|
unkown
|
page readonly
|
|
|
|
231B5802000
|
unkown
|
page read and write
|
|
|
|
24E94E4E000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
1AE9BD2E000
|
unkown
|
page read and write
|
|
|
|
DA577F5000
|
unkown
|
page read and write
|
|
|
|
23825CE6000
|
unkown
|
page read and write
|
|
|
|
7FF5156EF000
|
unkown
|
page readonly
|
|
|
|
23821800000
|
unkown
|
page readonly
|
|
|
|
7FF5076E8000
|
unkown
|
page readonly
|
|
|
|
7FF590411000
|
unkown
|
page readonly
|
|
|
|
23825E30000
|
unkown
|
page read and write
|
|
|
|
7FF5A1125000
|
unkown
|
page readonly
|
|
|
|
7FF58FDD4000
|
unkown
|
page readonly
|
|
|
|
2034979000
|
unkown
|
page read and write
|
|
|
|
231B5802000
|
unkown
|
page read and write
|
|
|
|
7FF510A06000
|
unkown
|
page readonly
|
|
|
|
1E84F229000
|
unkown
|
page read and write
|
|
|
|
7FF55C390000
|
unkown
|
page readonly
|
|
|
|
23825E40000
|
unkown
|
page read and write
|
|
|
|
24E94E51000
|
unkown
|
page read and write
|
|
|
|
7FF5156C7000
|
unkown
|
page readonly
|
|
|
|
7FF5103C1000
|
unkown
|
page readonly
|
|
|
|
7FF5A5293000
|
unkown
|
page readonly
|
|
|
|
2B4348C4000
|
unkown
|
page read and write
|
|
|
|
231B5368000
|
unkown
|
page read and write
|
|
|
|
198A2DA0000
|
unkown
|
page read and write
|
|
|
|
CB8E27E000
|
unkown
|
page read and write
|
|
|
|
231B533C000
|
unkown
|
page read and write
|
|
|
|
FE14EFD000
|
unkown
|
page read and write
|
|
|
|
231B533F000
|
unkown
|
page read and write
|
|
|
|
2382115A000
|
unkown
|
page read and write
|
|
|
|
19D74970000
|
unkown
|
page read and write
|
|
|
|
1CE91613000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
1AE9BECC000
|
unkown
|
page read and write
|
|
|
|
231B5800000
|
unkown
|
page read and write
|
|
|
|
7FF5108BF000
|
unkown
|
page readonly
|
|
|
|
23825CE0000
|
unkown
|
page read and write
|
|
|
|
7FF507639000
|
unkown
|
page readonly
|
|
|
|
2B4365E0000
|
unkown
|
page read and write
|
|
|
|
7FF510965000
|
unkown
|
page readonly
|
|
|
|
23825E90000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF5A8AE7000
|
unkown
|
page readonly
|
|
|
|
4AD42FE000
|
unkown
|
page read and write
|
|
|
|
1AE9BEC8000
|
unkown
|
page read and write
|
|
|
|
7FF50783E000
|
unkown
|
page readonly
|
|
|
|
2382115A000
|
unkown
|
page read and write
|
|
|
|
7FF5108F4000
|
unkown
|
page readonly
|
|
|
|
7FF5C2987000
|
unkown
|
page readonly
|
|
|
|
238260F6000
|
unkown
|
page read and write
|
|
|
|
7FF5C2975000
|
unkown
|
page readonly
|
|
|
|
1AE9BDF8000
|
unkown
|
page read and write
|
|
|
|
7FF5A53B4000
|
unkown
|
page readonly
|
|
|
|
7FF59038B000
|
unkown
|
page readonly
|
|
|
|
7FF58FDCE000
|
unkown
|
page readonly
|
|
|
|
231B530A000
|
unkown
|
page read and write
|
|
|
|
2B43486D000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
7FF5A4F9A000
|
unkown
|
page readonly
|
|
|
|
7FF590473000
|
unkown
|
page readonly
|
|
|
|
7FF510B39000
|
unkown
|
page readonly
|
|
|
|
1AE99C29000
|
unkown
|
page read and write
|
|
|
|
7FF510B36000
|
unkown
|
page readonly
|
|
|
|
7FF5A8DB0000
|
unkown
|
page readonly
|
|
|
|
4AD44F7000
|
unkown
|
page read and write
|
|
|
|
23821118000
|
unkown
|
page read and write
|
|
|
|
2B434A00000
|
unkown
|
page readonly
|
|
|
|
24E95800000
|
unkown
|
page readonly
|
|
|
|
7FF590421000
|
unkown
|
page readonly
|
|
|
|
1AE99ED0000
|
unkown
|
page readonly
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
7FF51083F000
|
unkown
|
page readonly
|
|
|
|
7FF515250000
|
unkown
|
page readonly
|
|
|
|
231B5368000
|
unkown
|
page read and write
|
|
|
|
198A1400000
|
unkown
|
page read and write
|
|
|
|
7FF507782000
|
unkown
|
page readonly
|
|
|
|
7FF590142000
|
unkown
|
page readonly
|
|
|
|
7FF5A1305000
|
unkown
|
page readonly
|
|
|
|
23825F97000
|
unkown
|
page read and write
|
|
|
|
7FF5A52AF000
|
unkown
|
page readonly
|
|
|
|
1AE9C010000
|
unkown
|
page read and write
|
|
|
|
7FF50784E000
|
unkown
|
page readonly
|
|
|
|
1AE99D44000
|
unkown
|
page read and write
|
|
|
|
23825E40000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
238217F0000
|
unkown
|
page readonly
|
|
|
|
23825B90000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
231B539B000
|
unkown
|
page read and write
|
|
|
|
23821158000
|
unkown
|
page read and write
|
|
|
|
7FF5A8E48000
|
unkown
|
page readonly
|
|
|
|
1CE9165B000
|
unkown
|
page read and write
|
|
|
|
238260FD000
|
unkown
|
page read and write
|
|
|
|
7FF51567A000
|
unkown
|
page readonly
|
|
|
|
1AE9BE73000
|
unkown
|
page read and write
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
1AE9BF43000
|
unkown
|
page read and write
|
|
|
|
1AE99D76000
|
unkown
|
page read and write
|
|
|
|
2382610A000
|
unkown
|
page read and write
|
|
|
|
2B4347B0000
|
unkown
|
page readonly
|
|
|
|
7FF551470000
|
unkown
|
page readonly
|
|
|
|
7FF5A8E54000
|
unkown
|
page readonly
|
|
|
|
7FF5A5270000
|
unkown
|
page readonly
|
|
|
|
7FF510AEF000
|
unkown
|
page readonly
|
|
|
|
7FF5C299F000
|
unkown
|
page readonly
|
|
|
|
7FF59059B000
|
unkown
|
page readonly
|
|
|
|
23825CEA000
|
unkown
|
page read and write
|
|
|
|
1AE9BE00000
|
unkown
|
page read and write
|
|
|
|
7FF515695000
|
unkown
|
page readonly
|
|
|
|
23821118000
|
unkown
|
page read and write
|
|
|
|
231B5854000
|
unkown
|
page read and write
|
|
|
|
7FF510357000
|
unkown
|
page readonly
|
|
|
|
7FF590607000
|
unkown
|
page readonly
|
|
|
|
7FF583886000
|
unkown
|
page readonly
|
|
|
|
23826098000
|
unkown
|
page read and write
|
|
|
|
4AD46FF000
|
unkown
|
page read and write
|
|
|
|
23826000000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF5C2970000
|
unkown
|
page readonly
|
|
|
|
231B533E000
|
unkown
|
page read and write
|
|
|
|
7FF55C3BF000
|
unkown
|
page readonly
|
|
|
|
238260B5000
|
unkown
|
page read and write
|
|
|
|
231B4840000
|
heap private
|
page read and write
|
|
|
|
7FF5A53BA000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF5900AE000
|
unkown
|
page readonly
|
|
|
|
1AE9BC02000
|
unkown
|
page read and write
|
|
|
|
231B5373000
|
unkown
|
page read and write
|
|
|
|
23825F84000
|
unkown
|
page readonly
|
|
|
|
23820813000
|
unkown
|
page read and write
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
7FF51031D000
|
unkown
|
page readonly
|
|
|
|
7FF507834000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
23826018000
|
unkown
|
page read and write
|
|
|
|
7FF5A1208000
|
unkown
|
page readonly
|
|
|
|
19D74A00000
|
unkown
|
page read and write
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
1AE9BEC7000
|
unkown
|
page read and write
|
|
|
|
7FF5518BB000
|
unkown
|
page readonly
|
|
|
|
1E1A47A000
|
unkown
|
page read and write
|
|
|
|
7FF51569B000
|
unkown
|
page readonly
|
|
|
|
1AE9BEC7000
|
unkown
|
page read and write
|
|
|
|
238260FE000
|
unkown
|
page read and write
|
|
|
|
231B538A000
|
unkown
|
page read and write
|
|
|
|
1AE9BEC5000
|
unkown
|
page read and write
|
|
|
|
23825DB0000
|
unkown
|
page readonly
|
|
|
|
FE14BF9000
|
unkown
|
page read and write
|
|
|
|
2382119A000
|
unkown
|
page read and write
|
|
|
|
1AE9BAC0000
|
unkown
|
page read and write
|
|
|
|
7FF5A52E7000
|
unkown
|
page readonly
|
|
|
|
7FF5838E5000
|
unkown
|
page readonly
|
|
|
|
23821159000
|
unkown
|
page read and write
|
|
|
|
1AE9BDFD000
|
unkown
|
page read and write
|
|
|
|
7FF583A0D000
|
unkown
|
page readonly
|
|
|
|
7FF5906BA000
|
unkown
|
page readonly
|
|
|
|
1DD23FC0000
|
unkown
|
page readonly
|
|
|
|
231B5400000
|
unkown
|
page readonly
|
|
|
|
1AE99CC0000
|
unkown
|
page read and write
|
|
|
|
23825F60000
|
unkown
|
page read and write
|
|
|
|
1E84F28C000
|
unkown
|
page read and write
|
|
|
|
231B4AE7000
|
unkown
|
page read and write
|
|
|
|
1AE9C010000
|
unkown
|
page read and write
|
|
|
|
231B5334000
|
unkown
|
page read and write
|
|
|
|
231B4AE2000
|
unkown
|
page read and write
|
|
|
|
7FF5A11FB000
|
unkown
|
page readonly
|
|
|
|
7FF5A5216000
|
unkown
|
page readonly
|
|
|
|
7FF5517FD000
|
unkown
|
page readonly
|
|
|
|
238260F6000
|
unkown
|
page read and write
|
|
|
|
7FF5901E7000
|
unkown
|
page readonly
|
|
|
|
1E84F302000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF5A4EA9000
|
unkown
|
page readonly
|
|
|
|
7FF510B28000
|
unkown
|
page readonly
|
|
|
|
7B93BFD000
|
unkown
|
page read and write
|
|
|
|
1AE9BD39000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
23820876000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
2382609C000
|
unkown
|
page read and write
|
|
|
|
23825FE0000
|
unkown
|
page read and write
|
|
|
|
1CE91602000
|
unkown
|
page read and write
|
|
|
|
23825CE5000
|
unkown
|
page read and write
|
|
|
|
7B933EB000
|
unkown
|
page read and write
|
|
|
|
7FF5A8E15000
|
unkown
|
page readonly
|
|
|
|
1AE9C110000
|
unkown
|
page read and write
|
|
|
|
1AE9BD83000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
7FF5A1338000
|
unkown
|
page readonly
|
|
|
|
1AE9BB20000
|
unkown
|
page read and write
|
|
|
|
7FF583AF7000
|
unkown
|
page readonly
|
|
|
|
231B5802000
|
unkown
|
page read and write
|
|
|
|
23826250000
|
unkown
|
page read and write
|
|
|
|
7FF583A9F000
|
unkown
|
page readonly
|
|
|
|
1AE9BECA000
|
unkown
|
page read and write
|
|
|
|
1AE99CFE000
|
unkown
|
page read and write
|
|
|
|
1E84F313000
|
unkown
|
page read and write
|
|
|
|
7FF590614000
|
unkown
|
page readonly
|
|
|
|
7FF5839C8000
|
unkown
|
page readonly
|
|
|
|
231B5373000
|
unkown
|
page read and write
|
|
|
|
238208B7000
|
unkown
|
page read and write
|
|
|
|
7FF5106D7000
|
unkown
|
page readonly
|
|
|
|
23820FC1000
|
unkown
|
page read and write
|
|
|
|
2B43674B000
|
unkown
|
page read and write
|
|
|
|
1E1A2FB000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
7B9367E000
|
unkown
|
page read and write
|
|
|
|
7FF510A73000
|
unkown
|
page readonly
|
|
|
|
7FF5074AA000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
4C696F7000
|
unkown
|
page read and write
|
|
|
|
1AE9BDC7000
|
unkown
|
page read and write
|
|
|
|
231B5861000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
1AE9BE3E000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
7FF55C395000
|
unkown
|
page readonly
|
|
|
|
7FF515774000
|
unkown
|
page readonly
|
|
|
|
1A0BCC8C000
|
unkown
|
page read and write
|
|
|
|
7FF510BB2000
|
unkown
|
page readonly
|
|
|
|
7FF5A0B61000
|
unkown
|
page readonly
|
|
|
|
2382608B000
|
unkown
|
page read and write
|
|
|
|
7FF515410000
|
unkown
|
page readonly
|
|
|
|
19D74870000
|
heap default
|
page read and write
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
1AE9C310000
|
unkown
|
page read and write
|
|
|
|
7FF583901000
|
unkown
|
page readonly
|
|
|
|
7FF5A8EF4000
|
unkown
|
page readonly
|
|
|
|
1AE9BF43000
|
unkown
|
page read and write
|
|
|
|
7FF5A4FA7000
|
unkown
|
page readonly
|
|
|
|
231B53AA000
|
unkown
|
page read and write
|
|
|
|
1DD2244E000
|
unkown
|
page read and write
|
|
|
|
23825F40000
|
unkown
|
page read and write
|
|
|
|
2382608E000
|
unkown
|
page read and write
|
|
|
|
231B5334000
|
unkown
|
page read and write
|
|
|
|
2382608B000
|
unkown
|
page read and write
|
|
|
|
231B48B0000
|
unkown
|
page readonly
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
1AE99C9B000
|
unkown
|
page read and write
|
|
|
|
23825CEA000
|
unkown
|
page read and write
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
7FF59053C000
|
unkown
|
page readonly
|
|
|
|
1AE9BEC6000
|
unkown
|
page read and write
|
|
|
|
7FF5904D8000
|
unkown
|
page readonly
|
|
|
|
1A0BCBA0000
|
unkown
|
page readonly
|
|
|
|
23825F94000
|
unkown
|
page read and write
|
|
|
|
2B4365F0000
|
heap private
|
page read and write
|
|
|
|
1AE9BE3A000
|
unkown
|
page read and write
|
|
|
|
7FF515407000
|
unkown
|
page readonly
|
|
|
|
2ED7A7E000
|
unkown
|
page read and write
|
|
|
|
2B4348F2000
|
unkown
|
page read and write
|
|
|
|
7FF510A7F000
|
unkown
|
page readonly
|
|
|
|
24E94E00000
|
unkown
|
page read and write
|
|
|
|
7FF5905D5000
|
unkown
|
page readonly
|
|
|
|
231B5391000
|
unkown
|
page read and write
|
|
|
|
7FF5A8E3C000
|
unkown
|
page readonly
|
|
|
|
1E19EFC000
|
unkown
|
page read and write
|
|
|
|
7FF510BB1000
|
unkown
|
page readonly
|
|
|
|
7FF510898000
|
unkown
|
page readonly
|
|
|
|
7FF590350000
|
unkown
|
page readonly
|
|
|
|
23825DF0000
|
unkown
|
page read and write
|
|
|
|
7FF5C295C000
|
unkown
|
page readonly
|
|
|
|
7FF583AEF000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
1E84F180000
|
heap private
|
page read and write
|
|
|
|
7FF5A10BB000
|
unkown
|
page readonly
|
|
|
|
7FF5A0FCA000
|
unkown
|
page readonly
|
|
|
|
7FF551701000
|
unkown
|
page readonly
|
|
|
|
23826230000
|
unkown
|
page readonly
|
|
|
|
23825F74000
|
unkown
|
page readonly
|
|
|
|
7FF5155F4000
|
unkown
|
page readonly
|
|
|
|
7FF510ACB000
|
unkown
|
page readonly
|
|
|
|
7FF5108AB000
|
unkown
|
page readonly
|
|
|
|
4AD4A7F000
|
unkown
|
page read and write
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
23825DB4000
|
unkown
|
page read and write
|
|
|
|
1AE9BEC5000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF5077DE000
|
unkown
|
page readonly
|
|
|
|
1E1A57E000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
2B434620000
|
heap private
|
page read and write
|
|
|
|
7FF5A8C69000
|
unkown
|
page readonly
|
|
|
|
23825D20000
|
unkown
|
page read and write
|
|
|
|
1E84F213000
|
unkown
|
page read and write
|
|
|
|
23825D04000
|
unkown
|
page read and write
|
|
|
|
7FF551904000
|
unkown
|
page readonly
|
|
|
|
231B5370000
|
unkown
|
page read and write
|
|
|
|
231B50C0000
|
unkown
|
page read and write
|
|
|
|
7FF55191E000
|
unkown
|
page readonly
|
|
|
|
1AE9BDD8000
|
unkown
|
page read and write
|
|
|
|
231B5371000
|
unkown
|
page read and write
|
|
|
|
1AE9BDFD000
|
unkown
|
page read and write
|
|
|
|
2382088A000
|
unkown
|
page read and write
|
|
|
|
2382609C000
|
unkown
|
page read and write
|
|
|
|
1E84F24F000
|
unkown
|
page read and write
|
|
|
|
7FF5076DB000
|
unkown
|
page readonly
|
|
|
|
7FF5833C1000
|
unkown
|
page readonly
|
|
|
|
198A1454000
|
unkown
|
page read and write
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
1AE99CC1000
|
unkown
|
page read and write
|
|
|
|
231B5391000
|
unkown
|
page read and write
|
|
|
|
1CE91850000
|
unkown
|
page readonly
|
|
|
|
7FF515690000
|
unkown
|
page readonly
|
|
|
|
7FF59062F000
|
unkown
|
page readonly
|
|
|
|
7FF5905DB000
|
unkown
|
page readonly
|
|
|
|
231B5344000
|
unkown
|
page read and write
|
|
|
|
20349FF000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
1AE9BEC8000
|
unkown
|
page read and write
|
|
|
|
7FF583AAA000
|
unkown
|
page readonly
|
|
|
|
23825D10000
|
unkown
|
page read and write
|
|
|
|
23826220000
|
unkown
|
page read and write
|
|
|
|
23825CE0000
|
unkown
|
page read and write
|
|
|
|
1A0BCB80000
|
unkown
|
page read and write
|
|
|
|
7FF583A52000
|
unkown
|
page readonly
|
|
|
|
7FF5A53C2000
|
unkown
|
page readonly
|
|
|
|
23821159000
|
unkown
|
page read and write
|
|
|
|
1AE9E110000
|
unkown
|
page read and write
|
|
|
|
7FF510952000
|
unkown
|
page readonly
|
|
|
|
7FF5077E0000
|
unkown
|
page readonly
|
|
|
|
231B5368000
|
unkown
|
page read and write
|
|
|
|
7FF590347000
|
unkown
|
page readonly
|
|
|
|
7FF5C29D8000
|
unkown
|
page readonly
|
|
|
|
7FF583ABE000
|
unkown
|
page readonly
|
|
|
|
2B436850000
|
unkown
|
page read and write
|
|
|
|
1AE99BB0000
|
unkown
|
page readonly
|
|
|
|
FE14CFF000
|
unkown
|
page read and write
|
|
|
|
7FF5A5272000
|
unkown
|
page readonly
|
|
|
|
7FF551814000
|
unkown
|
page readonly
|
|
|
|
23821159000
|
unkown
|
page read and write
|
|
|
|
24E94F00000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF583ABA000
|
unkown
|
page readonly
|
|
|
|
2B0127F000
|
unkown
|
page read and write
|
|
|
|
23820827000
|
unkown
|
page read and write
|
|
|
|
238260C3000
|
unkown
|
page read and write
|
|
|
|
231B4AAC000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
2B4348BE000
|
unkown
|
page read and write
|
|
|
|
231B50C0000
|
unkown
|
page readonly
|
|
|
|
231B5369000
|
unkown
|
page read and write
|
|
|
|
1E1A07B000
|
unkown
|
page read and write
|
|
|
|
1AE9E010000
|
unkown
|
page read and write
|
|
|
|
23825FB0000
|
unkown
|
page read and write
|
|
|
|
2382115A000
|
unkown
|
page read and write
|
|
|
|
7FF5518AA000
|
unkown
|
page readonly
|
|
|
|
7FF5A1371000
|
unkown
|
page readonly
|
|
|
|
4C694F5000
|
unkown
|
page read and write
|
|
|
|
231B50D0000
|
unkown
|
page read and write
|
|
|
|
1A0BCC8E000
|
unkown
|
page read and write
|
|
|
|
203456A000
|
unkown
|
page read and write
|
|
|
|
7FF583AC5000
|
unkown
|
page readonly
|
|
|
|
1AE99C7E000
|
unkown
|
page read and write
|
|
|
|
1AE9BD11000
|
unkown
|
page read and write
|
|
|
|
23825E00000
|
unkown
|
page read and write
|
|
|
|
2ED771B000
|
unkown
|
page read and write
|
|
|
|
7FF510AF7000
|
unkown
|
page readonly
|
|
|
|
7FF510AD7000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF5078D1000
|
unkown
|
page readonly
|
|
|
|
7FF507605000
|
unkown
|
page readonly
|
|
|
|
7FF590190000
|
unkown
|
page readonly
|
|
|
|
23825DD0000
|
unkown
|
page read and write
|
|
|
|
2ED7C7C000
|
unkown
|
page read and write
|
|
|
|
7FF5A8D0B000
|
unkown
|
page readonly
|
|
|
|
1AE9BB20000
|
unkown
|
page readonly
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
1E19A79000
|
unkown
|
page read and write
|
|
|
|
231B5060000
|
unkown
|
page write copy
|
|
|
|
1AE9BF43000
|
unkown
|
page read and write
|
|
|
|
7FF5905E7000
|
unkown
|
page readonly
|
|
|
|
1AE9D142000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
1AE99C68000
|
unkown
|
page read and write
|
|
|
|
203487F000
|
unkown
|
page read and write
|
|
|
|
1AE99C00000
|
unkown
|
page read and write
|
|
|
|
7FF5518F4000
|
unkown
|
page readonly
|
|
|
|
1DD22502000
|
unkown
|
page read and write
|
|
|
|
23826090000
|
unkown
|
page read and write
|
|
|
|
7FF515256000
|
unkown
|
page readonly
|
|
|
|
7FF5C286E000
|
unkown
|
page readonly
|
|
|
|
7FF5A526C000
|
unkown
|
page readonly
|
|
|
|
7FF5107A7000
|
unkown
|
page readonly
|
|
|
|
7FF5A866D000
|
unkown
|
page readonly
|
|
|
|
1E195FA000
|
unkown
|
page read and write
|
|
|
|
198A1500000
|
unkown
|
page read and write
|
|
|
|
1A0BCA70000
|
unkown
|
page readonly
|
|
|
|
7FF5C28D4000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
23821B90000
|
unkown
|
page read and write
|
|
|
|
7FF507859000
|
unkown
|
page readonly
|
|
|
|
7FF590396000
|
unkown
|
page readonly
|
|
|
|
1AE9BECA000
|
unkown
|
page read and write
|
|
|
|
1AE9BAB0000
|
heap private
|
page read and write
|
|
|
|
1A0BCC5B000
|
heap default
|
page read and write
|
|
|
|
7FF5A13EA000
|
unkown
|
page readonly
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
7FF5518DF000
|
unkown
|
page readonly
|
|
|
|
2382610A000
|
unkown
|
page read and write
|
|
|
|
7FF507851000
|
unkown
|
page readonly
|
|
|
|
7FF5906C2000
|
unkown
|
page readonly
|
|
|
|
23820871000
|
unkown
|
page read and write
|
|
|
|
FE14AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5A8F02000
|
unkown
|
page readonly
|
|
|
|
1AE9BDAE000
|
unkown
|
page read and write
|
|
|
|
7FF583B04000
|
unkown
|
page readonly
|
|
|
|
7FF5108B1000
|
unkown
|
page readonly
|
|
|
|
1CE91490000
|
heap private
|
page read and write
|
|
|
|
23826098000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF5838F4000
|
unkown
|
page readonly
|
|
|
|
7FF5A12C3000
|
unkown
|
page readonly
|
|
|
|
23826234000
|
unkown
|
page readonly
|
|
|
|
231B50C0000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
2B436850000
|
unkown
|
page read and write
|
|
|
|
1A0BCC70000
|
unkown
|
page read and write
|
|
|
|
231B533D000
|
unkown
|
page read and write
|
|
|
|
4AD45FA000
|
unkown
|
page read and write
|
|
|
|
2B434813000
|
unkown
|
page read and write
|
|
|
|
2B00D7E000
|
unkown
|
page read and write
|
|
|
|
1B64A7F000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
1AE99C64000
|
unkown
|
page read and write
|
|
|
|
1AE9BD91000
|
unkown
|
page read and write
|
|
|
|
231B534D000
|
unkown
|
page read and write
|
|
|
|
7FF5A135E000
|
unkown
|
page readonly
|
|
|
|
23825D24000
|
unkown
|
page read and write
|
|
|
|
2382111A000
|
unkown
|
page read and write
|
|
|
|
7FF55181C000
|
unkown
|
page readonly
|
|
|
|
7FF5076C1000
|
unkown
|
page readonly
|
|
|
|
2B4348F5000
|
unkown
|
page read and write
|
|
|
|
23825FF7000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B5D000
|
unkown
|
page readonly
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
7FF5155FC000
|
unkown
|
page readonly
|
|
|
|
7FF5A8E78000
|
unkown
|
page readonly
|
|
|
|
231B5334000
|
unkown
|
page read and write
|
|
|
|
7FF5A1203000
|
unkown
|
page readonly
|
|
|
|
231B5370000
|
unkown
|
page read and write
|
|
|
|
24E94E4B000
|
unkown
|
page read and write
|
|
|
|
7FF5517AE000
|
unkown
|
page readonly
|
|
|
|
1E19CFA000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
7FF55C06A000
|
unkown
|
page readonly
|
|
|
|
1AE9BF00000
|
unkown
|
page read and write
|
|
|
|
1AE9BD28000
|
unkown
|
page read and write
|
|
|
|
4AD4D7C000
|
unkown
|
page read and write
|
|
|
|
7FF5077E5000
|
unkown
|
page readonly
|
|
|
|
7FF5107A4000
|
unkown
|
page readonly
|
|
|
|
7FF510716000
|
unkown
|
page readonly
|
|
|
|
24E94DE0000
|
unkown
|
page readonly
|
|
|
|
1AE9BB10000
|
unkown
|
page readonly
|
|
|
|
7FF5A5307000
|
unkown
|
page readonly
|
|
|
|
231B5340000
|
unkown
|
page read and write
|
|
|
|
DA57E78000
|
unkown
|
page read and write
|
|
|
|
23825D00000
|
unkown
|
page read and write
|
|
|
|
238260FD000
|
unkown
|
page read and write
|
|
|
|
1E19C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5C29CF000
|
unkown
|
page readonly
|
|
|
|
7FF5C296A000
|
unkown
|
page readonly
|
|
|
|
231B530A000
|
unkown
|
page read and write
|
|
|
|
7FF583BA4000
|
unkown
|
page readonly
|
|
|
|
7FF507818000
|
unkown
|
page readonly
|
|
|
|
7FF583A8F000
|
unkown
|
page readonly
|
|
|
|
7FF5518FA000
|
unkown
|
page readonly
|
|
|
|
7FF5A8E6E000
|
unkown
|
page readonly
|
|
|
|
23821840000
|
unkown
|
page readonly
|
|
|
|
2382609C000
|
unkown
|
page read and write
|
|
|
|
2B434800000
|
unkown
|
page read and write
|
|
|
|
1DD22350000
|
heap private
|
page read and write
|
|
|
|
7FF507848000
|
unkown
|
page readonly
|
|
|
|
7FF5A50F5000
|
unkown
|
page readonly
|
|
|
|
7FF583B1E000
|
unkown
|
page readonly
|
|
|
|
7FF5106D5000
|
unkown
|
page readonly
|
|
|
|
2382111A000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
7FF5156BF000
|
unkown
|
page readonly
|
|
|
|
7FF5A12FA000
|
unkown
|
page readonly
|
|
|
|
238260B5000
|
unkown
|
page read and write
|
|
|
|
1AE9BE12000
|
unkown
|
page read and write
|
|
|
|
1A0BCC7F000
|
unkown
|
page read and write
|
|
|
|
7FF5A8E1B000
|
unkown
|
page readonly
|
|
|
|
231B50C0000
|
unkown
|
page read and write
|
|
|
|
231B5802000
|
unkown
|
page read and write
|
|
|
|
7FF583ACB000
|
unkown
|
page readonly
|
|
|
|
7FF5A5349000
|
unkown
|
page readonly
|
|
|
|
1AE99D2F000
|
unkown
|
page read and write
|
|
|
|
7FF5A51D8000
|
unkown
|
page readonly
|
|
|
|
24E94E8C000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
7FF583B31000
|
unkown
|
page readonly
|
|
|
|
19D74B08000
|
unkown
|
page read and write
|
|
|
|
23820780000
|
unkown
|
page read and write
|
|
|
|
1AE99C54000
|
unkown
|
page read and write
|
|
|
|
23825E40000
|
unkown
|
page readonly
|
|
|
|
1E84F255000
|
unkown
|
page read and write
|
|
|
|
231B4ABD000
|
unkown
|
page read and write
|
|
|
|
4AD48FF000
|
unkown
|
page read and write
|
|
|
|
2B434889000
|
unkown
|
page read and write
|
|
|
|
23821850000
|
unkown
|
page readonly
|
|
|
|
7FF5906C1000
|
unkown
|
page readonly
|
|
|
|
1B648FF000
|
unkown
|
page read and write
|
|
|
|
7FF5A521D000
|
unkown
|
page readonly
|
|
|
|
7FF5A52FC000
|
unkown
|
page readonly
|
|
|
|
7FF5904B1000
|
unkown
|
page readonly
|
|
|
|
1AE99DC7000
|
unkown
|
page read and write
|
|
|
|
231B49A0000
|
unkown
|
page read and write
|
|
|
|
23825CEA000
|
unkown
|
page read and write
|
|
|
|
7FF583AEC000
|
unkown
|
page readonly
|
|
|
|
19D74B02000
|
unkown
|
page read and write
|
|
|
|
7FF5C2851000
|
unkown
|
page readonly
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
7FF5A532E000
|
unkown
|
page readonly
|
|
|
|
7FF51040E000
|
unkown
|
page readonly
|
|
|
|
1A0BCC70000
|
heap default
|
page read and write
|
|
|
|
231B5356000
|
unkown
|
page read and write
|
|
|
|
24E94C90000
|
heap private
|
page read and write
|
|
|
|
1AE9BEC6000
|
unkown
|
page read and write
|
|
|
|
7FF5C216E000
|
unkown
|
page readonly
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
2382609B000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
1A0BCB40000
|
unkown
|
page read and write
|
|
|
|
7FF51568E000
|
unkown
|
page readonly
|
|
|
|
7FF5A8E8D000
|
unkown
|
page readonly
|
|
|
|
1AE99C4B000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF8000
|
unkown
|
page read and write
|
|
|
|
19D75400000
|
unkown
|
page readonly
|
|
|
|
231B53A5000
|
unkown
|
page read and write
|
|
|
|
238260FC000
|
unkown
|
page read and write
|
|
|
|
7FF5839BB000
|
unkown
|
page readonly
|
|
|
|
1AE99CAE000
|
unkown
|
page read and write
|
|
|
|
2B00E75000
|
unkown
|
page read and write
|
|
|
|
1DD22400000
|
unkown
|
page read and write
|
|
|
|
7FF59063E000
|
unkown
|
page readonly
|
|
|
|
23825DEC000
|
unkown
|
page readonly
|
|
|
|
1AE9BB20000
|
unkown
|
page read and write
|
|
|
|
1AE99AF0000
|
heap private
|
page read and write
|
|
|
|
7FF5A8ADA000
|
unkown
|
page readonly
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
23825E50000
|
unkown
|
page read and write
|
|
|
|
1AE9C410000
|
unkown
|
page read and write
|
|
|
|
1AE9D042000
|
unkown
|
page read and write
|
|
|
|
1AE99C85000
|
unkown
|
page read and write
|
|
|
|
23821002000
|
unkown
|
page read and write
|
|
|
|
231B5347000
|
unkown
|
page read and write
|
|
|
|
238207F3000
|
unkown
|
page read and write
|
|
|
|
7FF5A5314000
|
unkown
|
page readonly
|
|
|
|
2382083C000
|
unkown
|
page read and write
|
|
|
|
24E94F02000
|
unkown
|
page read and write
|
|
|
|
7FF5154E1000
|
unkown
|
page readonly
|
|
|
|
1DD226D0000
|
unkown
|
page write copy
|
|
|
|
2B436850000
|
unkown
|
page read and write
|
|
|
|
1AE9BD1A000
|
unkown
|
page read and write
|
|
|
|
231B5300000
|
unkown
|
page read and write
|
|
|
|
7FF51086A000
|
unkown
|
page readonly
|
|
|
|
7FF510ABA000
|
unkown
|
page readonly
|
|
|
|
231B533E000
|
unkown
|
page read and write
|
|
|
|
7FF551476000
|
unkown
|
page readonly
|
|
|
|
7FF5A5338000
|
unkown
|
page readonly
|
|
|
|
7FF5C29E9000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
231B533D000
|
unkown
|
page read and write
|
|
|
|
7FF583A60000
|
unkown
|
page readonly
|
|
|
|
7FF5076E3000
|
unkown
|
page readonly
|
|
|
|
2B437010000
|
unkown
|
page read and write
|
|
|
|
198A1413000
|
unkown
|
page read and write
|
|
|
|
2382609C000
|
unkown
|
page read and write
|
|
|
|
1A0BCC50000
|
heap default
|
page read and write
|
|
|
|
7FF5905BC000
|
unkown
|
page readonly
|
|
|
|
23820770000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF5077EB000
|
unkown
|
page readonly
|
|
|
|
231B5315000
|
unkown
|
page read and write
|
|
|
|
23825DE8000
|
unkown
|
page write copy
|
|
|
|
CB8DF1E000
|
unkown
|
page read and write
|
|
|
|
4AD47FB000
|
unkown
|
page read and write
|
|
|
|
2034A7D000
|
unkown
|
page read and write
|
|
|
|
238260F6000
|
unkown
|
page read and write
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
1E84F23C000
|
unkown
|
page read and write
|
|
|
|
2382602D000
|
unkown
|
page read and write
|
|
|
|
7FF5838E1000
|
unkown
|
page readonly
|
|
|
|
2B4348DC000
|
unkown
|
page read and write
|
|
|
|
1AE99C97000
|
unkown
|
page read and write
|
|
|
|
198A1210000
|
unkown
|
page readonly
|
|
|
|
7FF5A8CF1000
|
unkown
|
page readonly
|
|
|
|
7FF5C297B000
|
unkown
|
page readonly
|
|
|
|
1E84F1E0000
|
heap default
|
page read and write
|
|
|
|
2B43487A000
|
unkown
|
page read and write
|
|
|
|
23826208000
|
unkown
|
page read and write
|
|
|
|
1AE9C000000
|
unkown
|
page read and write
|
|
|
|
2382115C000
|
unkown
|
page read and write
|
|
|
|
7FF510330000
|
unkown
|
page readonly
|
|
|
|
7FF5518B5000
|
unkown
|
page readonly
|
|
|
|
231B4B08000
|
unkown
|
page read and write
|
|
|
|
23825CEB000
|
unkown
|
page read and write
|
|
|
|
4AD43FA000
|
unkown
|
page read and write
|
|
|
|
231B5342000
|
unkown
|
page read and write
|
|
|
|
2B0137F000
|
unkown
|
page read and write
|
|
|
|
7FF510B14000
|
unkown
|
page readonly
|
|
|
|
7FF583A94000
|
unkown
|
page readonly
|
|
|
|
1AE9BDF7000
|
unkown
|
page read and write
|
|
|
|
7FF5906B4000
|
unkown
|
page readonly
|
|
|
|
23825E20000
|
unkown
|
page read and write
|
|
|
|
DA57AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5A53C1000
|
unkown
|
page readonly
|
|
|
|
7FF515571000
|
unkown
|
page readonly
|
|
|
|
2B436750000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF51096A000
|
unkown
|
page readonly
|
|
|
|
231B53AD000
|
unkown
|
page read and write
|
|
|
|
1E84F930000
|
unkown
|
page readonly
|
|
|
|
231B5371000
|
unkown
|
page read and write
|
|
|
|
1E84FC00000
|
unkown
|
page readonly
|
|
|
|
24E954A0000
|
unkown
|
page readonly
|
|
|
|
4AD4B7F000
|
unkown
|
page read and write
|
|
|
|
19D74B13000
|
unkown
|
page read and write
|
|
|
|
7FF5A1376000
|
unkown
|
page readonly
|
|
|
|
7FF5156DA000
|
unkown
|
page readonly
|
|
|
|
23821015000
|
unkown
|
page read and write
|
|
|
|
7FF590572000
|
unkown
|
page readonly
|
|
|
|
19D74A8F000
|
unkown
|
page read and write
|
|
|
|
7FF5A5121000
|
unkown
|
page readonly
|
|
|
|
24E94F13000
|
unkown
|
page read and write
|
|
|
|
7FF5A11E1000
|
unkown
|
page readonly
|
|
|
|
23821100000
|
unkown
|
page read and write
|
|
|
|
2382115A000
|
unkown
|
page read and write
|
|
|
|
1AE9C010000
|
unkown
|
page read and write
|
|
|
|
24E94CF0000
|
heap default
|
page read and write
|
|
|
|
1AE99C5C000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
1DD22600000
|
unkown
|
page readonly
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
1E84F4D0000
|
unkown
|
page readonly
|
|
|
|
23826220000
|
unkown
|
page readonly
|
|
|
|
23820800000
|
unkown
|
page read and write
|
|
|
|
7FF5A5129000
|
unkown
|
page readonly
|
|
|
|
1E19B7A000
|
unkown
|
page read and write
|
|
|
|
7FF5C26E7000
|
unkown
|
page readonly
|
|
|
|
231B534E000
|
unkown
|
page read and write
|
|
|
|
7FF590523000
|
unkown
|
page readonly
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
7FF5A4BD1000
|
unkown
|
page readonly
|
|
|
|
23825FE3000
|
unkown
|
page read and write
|
|
|
|
7FF58378A000
|
unkown
|
page readonly
|
|
|
|
238211DC000
|
unkown
|
page read and write
|
|
|
|
7FF5C29DE000
|
unkown
|
page readonly
|
|
|
|
1E1A0FB000
|
unkown
|
page read and write
|
|
|
|
7FF51087B000
|
unkown
|
page readonly
|
|
|
|
2B43671A000
|
unkown
|
page read and write
|
|
|
|
19D74B00000
|
unkown
|
page read and write
|
|
|
|
23821159000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
23825CE4000
|
unkown
|
page read and write
|
|
|
|
7FF5A50F1000
|
unkown
|
page readonly
|
|
|
|
1E84F202000
|
unkown
|
page read and write
|
|
|
|
198A1429000
|
unkown
|
page read and write
|
|
|
|
1AE9BD1B000
|
unkown
|
page read and write
|
|
|
|
7FF5A4E32000
|
unkown
|
page readonly
|
|
|
|
DA57CF7000
|
unkown
|
page read and write
|
|
|
|
231B4990000
|
unkown
|
page readonly
|
|
|
|
1AE9BE77000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
7FF5A12A0000
|
unkown
|
page readonly
|
|
|
|
23825E40000
|
unkown
|
page read and write
|
|
|
|
19D74A2A000
|
unkown
|
page read and write
|
|
|
|
7FF5A1317000
|
unkown
|
page readonly
|
|
|
|
7FF5905AF000
|
unkown
|
page readonly
|
|
|
|
1A0BCD50000
|
unkown
|
page readonly
|
|
|
|
1E1A37B000
|
unkown
|
page read and write
|
|
|
|
23826090000
|
unkown
|
page read and write
|
|
|
|
24E94DF0000
|
unkown
|
page read and write
|
|
|
|
24E95602000
|
unkown
|
page read and write
|
|
|
|
7FF5839C3000
|
unkown
|
page readonly
|
|
|
|
231B4A3C000
|
unkown
|
page read and write
|
|
|
|
231B5368000
|
unkown
|
page read and write
|
|
|
|
231B50E0000
|
unkown
|
page readonly
|
|
|
|
231B533F000
|
unkown
|
page read and write
|
|
|
|
1E19DFB000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
231B533D000
|
unkown
|
page read and write
|
|
|
|
231B5338000
|
unkown
|
page read and write
|
|
|
|
231B4A00000
|
unkown
|
page read and write
|
|
|
|
7FF5155DD000
|
unkown
|
page readonly
|
|
|
|
7FF583622000
|
unkown
|
page readonly
|
|
|
|
2382111A000
|
unkown
|
page read and write
|
|
|
|
1AE9BDD3000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
231B530D000
|
unkown
|
page read and write
|
|
|
|
7FF5C2A5A000
|
unkown
|
page readonly
|
|
|
|
231B533F000
|
unkown
|
page read and write
|
|
|
|
1AE9BDE9000
|
unkown
|
page read and write
|
|
|
|
7FF583699000
|
unkown
|
page readonly
|
|
|
|
23825E10000
|
unkown
|
page read and write
|
|
|
|
23826097000
|
unkown
|
page read and write
|
|
|
|
1AE9B670000
|
unkown
|
page read and write
|
|
|
|
7FF5A8E86000
|
unkown
|
page readonly
|
|
|
|
7FF58FF27000
|
unkown
|
page readonly
|
|
|
|
23820FE0000
|
unkown
|
page read and write
|
|
|
|
24E94DD0000
|
unkown
|
page readonly
|
|
|
|
7FF55C3BC000
|
unkown
|
page readonly
|
|
|
|
7FF583B2E000
|
unkown
|
page readonly
|
|
|
|
7FF51032B000
|
unkown
|
page readonly
|
|
|
|
23826224000
|
unkown
|
page readonly
|
|
|
|
7FF5A12A2000
|
unkown
|
page readonly
|
|
|
|
23820829000
|
unkown
|
page read and write
|
|
|
|
7FF55189A000
|
unkown
|
page readonly
|
|
|
|
2382608B000
|
unkown
|
page read and write
|
|
|
|
1AE9C410000
|
unkown
|
page read and write
|
|
|
|
7FF5A132F000
|
unkown
|
page readonly
|
|
|
|
1E194FB000
|
unkown
|
page read and write
|
|
|
|
7FF5156F8000
|
unkown
|
page readonly
|
|
|
|
7FF583321000
|
unkown
|
page readonly
|
|
|
|
23826087000
|
unkown
|
page read and write
|
|
|
|
2382610A000
|
unkown
|
page read and write
|
|
|
|
1AE99D34000
|
unkown
|
page read and write
|
|
|
|
23825F08000
|
unkown
|
page readonly
|
|
|
|
7FF5A8BCB000
|
unkown
|
page readonly
|
|
|
|
24E94D00000
|
unkown
|
page readonly
|
|
|
|
231B5A00000
|
unkown
|
page readonly
|
|
|
|
1E84FF40000
|
unkown
|
page readonly
|
|
|
|
7FF5A1344000
|
unkown
|
page readonly
|
|
|
|
7FF583BB2000
|
unkown
|
page readonly
|
|
|
|
2B43674B000
|
unkown
|
page read and write
|
|
|
|
23825FD0000
|
unkown
|
page read and write
|
|
|
|
7FF507780000
|
unkown
|
page readonly
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
7FF5C28DC000
|
unkown
|
page readonly
|
|
|
|
7FF5C2530000
|
unkown
|
page readonly
|
|
|
|
7FF583B0A000
|
unkown
|
page readonly
|
|
|
|
1AE99CC1000
|
unkown
|
page read and write
|
|
|
|
23825F30000
|
unkown
|
page read and write
|
|
|
|
1E84F400000
|
unkown
|
page readonly
|
|
|
|
7FF5A1121000
|
unkown
|
page readonly
|
|
|
|
19D74A3C000
|
unkown
|
page read and write
|
|
|
|
7FF5A531A000
|
unkown
|
page readonly
|
|
|
|
1AE9D002000
|
unkown
|
page read and write
|
|
|
|
7FF515709000
|
unkown
|
page readonly
|
|
|
|
7FF5518B0000
|
unkown
|
page readonly
|
|
|
|
2B4348FD000
|
unkown
|
page read and write
|
|
|
|
198A2EA0000
|
unkown
|
page readonly
|
|
|
|
7FF5A5096000
|
unkown
|
page readonly
|
|
|
|
1AE9C410000
|
unkown
|
page read and write
|
|
|
|
1A0BCC7F000
|
unkown
|
page read and write
|
|
|
|
2382609C000
|
unkown
|
page read and write
|
|
|
|
1A0BCC76000
|
unkown
|
page read and write
|
|
|
|
1AE99C83000
|
unkown
|
page read and write
|
|
|
|
1AE9BD00000
|
unkown
|
page read and write
|
|
|
|
7FF5108BD000
|
unkown
|
page readonly
|
|
|
|
23821830000
|
unkown
|
page readonly
|
|
|
|
7FF55BCE3000
|
unkown
|
page readonly
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
7FF583A83000
|
unkown
|
page readonly
|
|
|
|
231B4A8C000
|
unkown
|
page read and write
|
|
|
|
7FF510313000
|
unkown
|
page readonly
|
|
|
|
7FF5A8671000
|
unkown
|
page readonly
|
|
|
|
7FF551791000
|
unkown
|
page readonly
|
|
|
|
2B434916000
|
unkown
|
page read and write
|
|
|
|
2B00CFF000
|
unkown
|
page read and write
|
|
|
|
7FF55C474000
|
unkown
|
page readonly
|
|
|
|
7FF5A8D18000
|
unkown
|
page readonly
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
7FF583B39000
|
unkown
|
page readonly
|
|
|
|
2382609C000
|
unkown
|
page read and write
|
|
|
|
23825BC0000
|
unkown
|
page read and write
|
|
|
|
1AE9BD31000
|
unkown
|
page read and write
|
|
|
|
23820874000
|
unkown
|
page read and write
|
|
|
|
7FF5A5106000
|
unkown
|
page readonly
|
|
|
|
7FF5905CA000
|
unkown
|
page readonly
|
|
|
|
7FF5A8E64000
|
unkown
|
page readonly
|
|
|
|
7FF5107AA000
|
unkown
|
page readonly
|
|
|
|
4C6911E000
|
unkown
|
page read and write
|
|
|
|
231B535E000
|
unkown
|
page read and write
|
|
|
|
1CE91500000
|
unkown
|
page readonly
|
|
|
|
2B436602000
|
unkown
|
page read and write
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
1AE9C110000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
4C697FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C299C000
|
unkown
|
page readonly
|
|
|
|
7FF50782A000
|
unkown
|
page readonly
|
|
|
|
7FF55C481000
|
unkown
|
page readonly
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
7FF5C295A000
|
unkown
|
page readonly
|
|
|
|
7FF583AD7000
|
unkown
|
page readonly
|
|
|
|
7B939F7000
|
unkown
|
page read and write
|
|
|
|
1AE9BF43000
|
unkown
|
page read and write
|
|
|
|
7FF5A51D3000
|
unkown
|
page readonly
|
|
|
|
198A1200000
|
heap default
|
page read and write
|
|
|
|
231B4A29000
|
unkown
|
page read and write
|
|
|
|
1AE99C40000
|
unkown
|
page read and write
|
|
|
|
7FF583919000
|
unkown
|
page readonly
|
|
|
|
7FF5A508B000
|
unkown
|
page readonly
|
|
|
|
1B6455B000
|
unkown
|
page read and write
|
|
|
|
23820A00000
|
unkown
|
page readonly
|
|
|
|
1AE99E00000
|
unkown
|
page readonly
|
|
|
|
7FF590646000
|
unkown
|
page readonly
|
|
|
|
1AE9BB40000
|
unkown
|
page readonly
|
|
|
|
231B5373000
|
unkown
|
page read and write
|
|
|
|
231B4B13000
|
unkown
|
page read and write
|
|
|
|
7FF583A8B000
|
unkown
|
page readonly
|
|
|
|
7FF5C28C3000
|
unkown
|
page readonly
|
|
|
|
1AE99C93000
|
unkown
|
page read and write
|
|
|
|
231B49F0000
|
unkown
|
page readonly
|
|
|
|
7FF510B04000
|
unkown
|
page readonly
|
|
|
|
231B5368000
|
unkown
|
page read and write
|
|
|
|
7FF5C296E000
|
unkown
|
page readonly
|
|
|
|
1CE91800000
|
unkown
|
page write copy
|
|
|
|
7FF55192D000
|
unkown
|
page readonly
|
|
|
|
7FF5077F7000
|
unkown
|
page readonly
|
|
|
|
231B5338000
|
unkown
|
page read and write
|
|
|
|
7FF5518AE000
|
unkown
|
page readonly
|
|
|
|
7FF5A8EFA000
|
unkown
|
page readonly
|
|
|
|
7FF510AEC000
|
unkown
|
page readonly
|
|
|
|
1E1A27D000
|
unkown
|
page read and write
|
|
|
|
7FF5A5262000
|
unkown
|
page readonly
|
|
|
|
2382608B000
|
unkown
|
page read and write
|
|
|
|
23821158000
|
unkown
|
page read and write
|
|
|
|
23825FE0000
|
unkown
|
page read and write
|
|
|
|
238260C6000
|
unkown
|
page read and write
|
|
|
|
231B4AC3000
|
unkown
|
page read and write
|
|
|
|
7FF5A0FBC000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
23825BD0000
|
unkown
|
page read and write
|
|
|
|
7FF5A533E000
|
unkown
|
page readonly
|
|
|
|
2382603F000
|
unkown
|
page read and write
|
|
|
|
7FF5A4F9F000
|
unkown
|
page readonly
|
|
|
|
1AE9BEC9000
|
unkown
|
page read and write
|
|
|
|
24E95000000
|
unkown
|
page readonly
|
|
|
|
2382600D000
|
unkown
|
page read and write
|
|
|
|
7FF5A137D000
|
unkown
|
page readonly
|
|
|
|
231B53B9000
|
unkown
|
page read and write
|
|
|
|
7FF5518DC000
|
unkown
|
page readonly
|
|
|
|
CB8E37E000
|
unkown
|
page read and write
|
|
|
|
231B5202000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
23825BE0000
|
unkown
|
page read and write
|
|
|
|
7FF5A132C000
|
unkown
|
page readonly
|
|
|
|
1E84F308000
|
unkown
|
page read and write
|
|
|
|
7FF514E94000
|
unkown
|
page readonly
|
|
|
|
7FF5078CA000
|
unkown
|
page readonly
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
231B50B0000
|
unkown
|
page readonly
|
|
|
|
2B436890000
|
unkown
|
page readonly
|
|
|
|
7FF5A1354000
|
unkown
|
page readonly
|
|
|
|
7FF590638000
|
unkown
|
page readonly
|
|
|
|
1E1A67D000
|
unkown
|
page read and write
|
|
|
|
23826097000
|
unkown
|
page read and write
|
|
|
|
7FF551918000
|
unkown
|
page readonly
|
|
|
|
2ED7B79000
|
unkown
|
page read and write
|
|
|
|
19D74C00000
|
unkown
|
page readonly
|
|
|
|
7B936FF000
|
unkown
|
page read and write
|
|
|
|
23826091000
|
unkown
|
page read and write
|
|
|
|
7FF583BB1000
|
unkown
|
page readonly
|
|
|
|
7FF55C3F8000
|
unkown
|
page readonly
|
|
|
|
1AE9D142000
|
unkown
|
page read and write
|
|
|
|
7FF5A5346000
|
unkown
|
page readonly
|
|
|
|
2382608B000
|
unkown
|
page read and write
|
|
|
|
7FF5C26F0000
|
unkown
|
page readonly
|
|
|
|
198A1330000
|
unkown
|
page readonly
|
|
|
|
198A1502000
|
unkown
|
page read and write
|
|
|
|
7FF5078D2000
|
unkown
|
page readonly
|
|
|
|
7FF583A62000
|
unkown
|
page readonly
|
|
|
|
7FF551926000
|
unkown
|
page readonly
|
|
|
|
7FF55BCE7000
|
unkown
|
page readonly
|
|
|
|
7FF58389F000
|
unkown
|
page readonly
|
|
|
|
2B436860000
|
unkown
|
page readonly
|
|
|
|
7FF5A52D5000
|
unkown
|
page readonly
|
|
|
|
1DD22440000
|
unkown
|
page read and write
|
|
|
|
2382609B000
|
unkown
|
page read and write
|
|
|
|
7FF510A60000
|
unkown
|
page readonly
|
|
|
|
7FF5A52D0000
|
unkown
|
page readonly
|
|
|
|
1CE930F0000
|
unkown
|
page readonly
|
|
|
|
231B5343000
|
unkown
|
page read and write
|
|
|
|
7FF510AAC000
|
unkown
|
page readonly
|
|
|
|
DA57D7F000
|
unkown
|
page read and write
|
|
|
|
2382089C000
|
unkown
|
page read and write
|
|
|
|
1CE91702000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
7FF5A5104000
|
unkown
|
page readonly
|
|
|
|
23826090000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
7FF583A06000
|
unkown
|
page readonly
|
|
|
|
1A0BCBB0000
|
unkown
|
page readonly
|
|
|
|
7FF58377C000
|
unkown
|
page readonly
|
|
|
|
1AE99C4C000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
1AE9D200000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
231B4C00000
|
unkown
|
page readonly
|
|
|
|
4C695FB000
|
unkown
|
page read and write
|
|
|
|
1AE99CC1000
|
unkown
|
page read and write
|
|
|
|
23820680000
|
heap default
|
page read and write
|
|
|
|
1AE9C210000
|
unkown
|
page read and write
|
|
|
|
7FF55C47A000
|
unkown
|
page readonly
|
|
|
|
1AE9BD95000
|
unkown
|
page read and write
|
|
|
|
7FF515533000
|
unkown
|
page readonly
|
|
|
|
231B533F000
|
unkown
|
page read and write
|
|
|
|
7FF5A4B31000
|
unkown
|
page readonly
|
|
|
|
7FF5A52CE000
|
unkown
|
page readonly
|
|
|
|
7FF5103DC000
|
unkown
|
page readonly
|
|
|
|
1AE99B60000
|
unkown
|
page write copy
|
|
|
|
231B5338000
|
unkown
|
page read and write
|
|
|
|
23826091000
|
unkown
|
page read and write
|
|
|
|
1AE9BEC8000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
1DD22413000
|
unkown
|
page read and write
|
|
|
|
7FF5C27C1000
|
unkown
|
page readonly
|
|
|
|
1DD223B0000
|
heap default
|
page read and write
|
|
|
|
23821000000
|
unkown
|
page read and write
|
|
|
|
7FF583AAC000
|
unkown
|
page readonly
|
|
|
|
23821118000
|
unkown
|
page read and write
|
|
|
|
23825CE1000
|
unkown
|
page read and write
|
|
|
|
1CE915D0000
|
unkown
|
page readonly
|
|
|
|
1DD22402000
|
unkown
|
page read and write
|
|
|
|
1E1A17B000
|
unkown
|
page read and write
|
|
|
|
1CE91629000
|
unkown
|
page read and write
|
|
|
|
7FF590570000
|
unkown
|
page readonly
|
|
|
|
1E84F200000
|
unkown
|
page read and write
|
|
|
|
231B4980000
|
unkown
|
page readonly
|
|
|
|
7FF51096F000
|
unkown
|
page readonly
|
|
|
|
7FF551994000
|
unkown
|
page readonly
|
|
|
|
1AE9BEC6000
|
unkown
|
page read and write
|
|
|
|
7FF5A529F000
|
unkown
|
page readonly
|
|
|
|
CB8E2F9000
|
unkown
|
page read and write
|
|
|
|
7FF515706000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
1CE91643000
|
unkown
|
page read and write
|
|
|
|
7FF5C2A62000
|
unkown
|
page readonly
|
|
|
|
23825E30000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
7FF5A52BA000
|
unkown
|
page readonly
|
|
|
|
7FF583AC0000
|
unkown
|
page readonly
|
|
|
|
7FF5A8DD3000
|
unkown
|
page readonly
|
|
|
|
231B533C000
|
unkown
|
page read and write
|
|
|
|
7FF5A8E3F000
|
unkown
|
page readonly
|
|
|
|
7FF5C2A61000
|
unkown
|
page readonly
|
|
|
|
2382119B000
|
unkown
|
page read and write
|
|
|
|
7FF5A8D13000
|
unkown
|
page readonly
|
|
|
|
23820FF0000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
231B4AEA000
|
unkown
|
page read and write
|
|
|
|
7FF58FED1000
|
unkown
|
page readonly
|
|
|
|
7FF510741000
|
unkown
|
page readonly
|
|
|
|
1AE9C013000
|
unkown
|
page read and write
|
|
|
|
7FF507041000
|
unkown
|
page readonly
|
|
|
|
23820913000
|
unkown
|
page read and write
|
|
|
|
24E94E02000
|
unkown
|
page read and write
|
|
|
|
23826020000
|
unkown
|
page read and write
|
|
|
|
19D75202000
|
unkown
|
page read and write
|
|
|
|
23826098000
|
unkown
|
page read and write
|
|
|
|
7FF5156A7000
|
unkown
|
page readonly
|
|
|
|
7FF5074B7000
|
unkown
|
page readonly
|
|
|
|
7FF5A8C35000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
23820856000
|
unkown
|
page read and write
|
|
|
|
7FF510751000
|
unkown
|
page readonly
|
|
|
|
1AE99CC8000
|
unkown
|
page read and write
|
|
|
|
7FF510B2E000
|
unkown
|
page readonly
|
|
|
|
1AE9BE84000
|
unkown
|
page read and write
|
|
|
|
19D74A22000
|
unkown
|
page read and write
|
|
|
|
238260FC000
|
unkown
|
page read and write
|
|
|
|
7FF5156E4000
|
unkown
|
page readonly
|
|
|
|
7FF510AAA000
|
unkown
|
page readonly
|
|
|
|
19D74950000
|
unkown
|
page readonly
|
|
|
|
FE14F7F000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
DA5767E000
|
unkown
|
page read and write
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
23825E80000
|
unkown
|
page readonly
|
|
|
|
7FF515265000
|
unkown
|
page readonly
|
|
|
|
4C6909B000
|
unkown
|
page read and write
|
|
|
|
FE14A7B000
|
unkown
|
page read and write
|
|
|
|
7FF55C482000
|
unkown
|
page readonly
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF5A5324000
|
unkown
|
page readonly
|
|
|
|
23821600000
|
unkown
|
page read and write
|
|
|
|
7FF5A8E5A000
|
unkown
|
page readonly
|
|
|
|
CB8E3FD000
|
unkown
|
page read and write
|
|
|
|
198A1513000
|
unkown
|
page read and write
|
|
|
|
7FF5155E3000
|
unkown
|
page readonly
|
|
|
|
1A0BCC61000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
231B535E000
|
unkown
|
page read and write
|
|
|
|
1AE9D100000
|
unkown
|
page read and write
|
|
|
|
7FF5839A1000
|
unkown
|
page readonly
|
|
|
|
238260FD000
|
unkown
|
page read and write
|
|
|
|
7FF5078C4000
|
unkown
|
page readonly
|
|
|
|
7FF5C29C4000
|
unkown
|
page readonly
|
|
|
|
7FF5C2A54000
|
unkown
|
page readonly
|
|
|
|
231B4AA6000
|
unkown
|
page read and write
|
|
|
|
231B533E000
|
unkown
|
page read and write
|
|
|
|
7FF5904CE000
|
unkown
|
page readonly
|
|
|
|
7FF5A8E0E000
|
unkown
|
page readonly
|
|
|
|
2B4362A0000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
238260FF000
|
unkown
|
page read and write
|
|
|
|
2B0117D000
|
unkown
|
page read and write
|
|
|
|
1AE99D75000
|
unkown
|
page read and write
|
|
|
|
7FF5A136E000
|
unkown
|
page readonly
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
DA579F7000
|
unkown
|
page read and write
|
|
|
|
7FF590132000
|
unkown
|
page readonly
|
|
|
|
7FF510981000
|
unkown
|
page readonly
|
|
|
|
1E84F1F0000
|
unkown
|
page readonly
|
|
|
|
2ED7AF9000
|
unkown
|
page read and write
|
|
|
|
23825CE0000
|
unkown
|
page read and write
|
|
|
|
1E84F940000
|
unkown
|
page read and write
|
|
|
|
24E94E3C000
|
unkown
|
page read and write
|
|
|
|
2B43483F000
|
unkown
|
page read and write
|
|
|
|
7FF5905CE000
|
unkown
|
page readonly
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
7FF55C3EE000
|
unkown
|
page readonly
|
|
|
|
7FF5901A5000
|
unkown
|
page readonly
|
|
|
|
7FF51567C000
|
unkown
|
page readonly
|
|
|
|
19D74810000
|
heap private
|
page read and write
|
|
|
|
7FF51558E000
|
unkown
|
page readonly
|
|
|
|
7FF590624000
|
unkown
|
page readonly
|
|
|
|
7FF510622000
|
unkown
|
page readonly
|
|
|
|
238260F6000
|
unkown
|
page read and write
|
|
|
|
7FF5901E5000
|
unkown
|
page readonly
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
23821118000
|
unkown
|
page read and write
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
7FF5A8E10000
|
unkown
|
page readonly
|
|
|
|
23825D01000
|
unkown
|
page read and write
|
|
|
|
23825F50000
|
unkown
|
page read and write
|
|
|
|
23825CE5000
|
unkown
|
page read and write
|
|
|
|
19D74A55000
|
unkown
|
page read and write
|
|
|
|
23826218000
|
unkown
|
page readonly
|
|
|
|
FE14C7A000
|
unkown
|
page read and write
|
|
|
|
7FF5A130B000
|
unkown
|
page readonly
|
|
|
|
1AE99D44000
|
unkown
|
page read and write
|
|
|
|
1A0BCB70000
|
heap private
|
page read and write
|
|
|
|
4AD4AFF000
|
unkown
|
page read and write
|
|
|
|
231B533F000
|
unkown
|
page read and write
|
|
|
|
7FF5904CB000
|
unkown
|
page readonly
|
|
|
|
7FF55C3DA000
|
unkown
|
page readonly
|
|
|
|
1AE9BDBE000
|
unkown
|
page read and write
|
|
|
|
23825DD4000
|
unkown
|
page readonly
|
|
|
|
231B5340000
|
unkown
|
page read and write
|
|
|
|
23821820000
|
unkown
|
page readonly
|
|
|
|
238260AA000
|
unkown
|
page read and write
|
|
|
|
7FF5C29E6000
|
unkown
|
page readonly
|
|
|
|
1B645DF000
|
unkown
|
page read and write
|
|
|
|
231B5378000
|
unkown
|
page read and write
|
|
|
|
7FF583B28000
|
unkown
|
page readonly
|
|
|
|
1AE9BD3F000
|
unkown
|
page read and write
|
|
|
|
7FF5A13F1000
|
unkown
|
page readonly
|
|
|
|
231B5370000
|
unkown
|
page read and write
|
|
|
|
1AE9BF83000
|
unkown
|
page read and write
|
|
|
|
2382608B000
|
unkown
|
page read and write
|
|
|
|
23821158000
|
unkown
|
page read and write
|
|
|
|
238260C0000
|
unkown
|
page read and write
|
|
|
|
231B5320000
|
unkown
|
page read and write
|
|
|
|
23821118000
|
unkown
|
page read and write
|
|
|
|
24E94E24000
|
unkown
|
page read and write
|
|
|
|
1A0BCB75000
|
heap private
|
page read and write
|
|
|
|
23825CEE000
|
unkown
|
page read and write
|
|
|
|
1AE99BF0000
|
unkown
|
page readonly
|
|
|
|
7FF51577A000
|
unkown
|
page readonly
|
|
|
|
2382115C000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF7000
|
unkown
|
page read and write
|
|
|
|
7FF510911000
|
unkown
|
page readonly
|
|
|
|
1AE99D33000
|
unkown
|
page read and write
|
|
|
|
1AE9BD38000
|
unkown
|
page read and write
|
|
|
|
2B434913000
|
unkown
|
page read and write
|
|
|
|
2B434680000
|
heap default
|
page read and write
|
|
|
|
198A143F000
|
unkown
|
page read and write
|
|
|
|
7FF55190F000
|
unkown
|
page readonly
|
|
|
|
1AE9C210000
|
unkown
|
page read and write
|
|
|
|
7FF510ABE000
|
unkown
|
page readonly
|
|
|
|
2B00F7B000
|
unkown
|
page read and write
|
|
|
|
7FF5C2536000
|
unkown
|
page readonly
|
|
|
|
7FF510BA4000
|
unkown
|
page readonly
|
|
|
|
7FF5519A1000
|
unkown
|
page readonly
|
|
|
|
231B4B16000
|
unkown
|
page read and write
|
|
|
|
7FF590404000
|
unkown
|
page readonly
|
|
|
|
7FF551803000
|
unkown
|
page readonly
|
|
|
|
23826240000
|
unkown
|
page read and write
|
|
|
|
7FF50780C000
|
unkown
|
page readonly
|
|
|
|
23826090000
|
unkown
|
page read and write
|
|
|
|
1AE99DB6000
|
unkown
|
page read and write
|
|
|
|
4C698FF000
|
unkown
|
page read and write
|
|
|
|
20348FE000
|
unkown
|
page read and write
|
|
|
|
19D74880000
|
unkown
|
page readonly
|
|
|
|
DA573DC000
|
unkown
|
page read and write
|
|
|
|
DA57BFB000
|
unkown
|
page read and write
|
|
|
|
1AE99D37000
|
unkown
|
page read and write
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
2B436840000
|
unkown
|
page readonly
|
|
|
|
23825CEF000
|
unkown
|
page read and write
|
|
|
|
7FF507601000
|
unkown
|
page readonly
|
|
|
|
238260A0000
|
unkown
|
page read and write
|
|
|
|
23821620000
|
unkown
|
page read and write
|
|
|
|
7FF5C29A7000
|
unkown
|
page readonly
|
|
|
|
23825FC0000
|
unkown
|
page read and write
|
|
|
|
7FF514E8E000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
23825CE0000
|
unkown
|
page read and write
|
|
|
|
7FF55C3E4000
|
unkown
|
page readonly
|
|
|
|
7FF515782000
|
unkown
|
page readonly
|
|
|
|
19D74960000
|
unkown
|
page readonly
|
|
|
|
231B5368000
|
unkown
|
page read and write
|
|
|
|
CB8DE9B000
|
unkown
|
page read and write
|
|
|
|
2382608C000
|
unkown
|
page read and write
|
|
|
|
2382604C000
|
unkown
|
page read and write
|
|
|
|
1E19FFB000
|
unkown
|
page read and write
|
|
|
|
20345EF000
|
unkown
|
page read and write
|
|
|
|
7FF5A5111000
|
unkown
|
page readonly
|
|
|
|
238260A4000
|
unkown
|
page read and write
|
|
|
|
23825F88000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
1AE9BEC9000
|
unkown
|
page read and write
|
|
|
|
7FF5A134A000
|
unkown
|
page readonly
|
|
|
|
231B5368000
|
unkown
|
page read and write
|
|
|
|
7FF551929000
|
unkown
|
page readonly
|
|
|
|
19D74A02000
|
unkown
|
page read and write
|
|
|
|
2B4361A0000
|
unkown
|
page read and write
|
|
|
|
231B53CA000
|
unkown
|
page read and write
|
|
|
|
1CE91600000
|
unkown
|
page read and write
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
24E94F08000
|
unkown
|
page read and write
|
|
|
|
7FF5A12FE000
|
unkown
|
page readonly
|
|
|
|
23826098000
|
unkown
|
page read and write
|
|
|
|
7FF510A83000
|
unkown
|
page readonly
|
|
|
|
7FF5838F6000
|
unkown
|
page readonly
|
|
|
|
7FF510B1F000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
FE14D79000
|
unkown
|
page read and write
|
|
|
|
1AE99DB7000
|
unkown
|
page read and write
|
|
|
|
7FF5A13E4000
|
unkown
|
page readonly
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
23821118000
|
unkown
|
page read and write
|
|
|
|
1AE99CC1000
|
unkown
|
page read and write
|
|
|
|
238260FD000
|
unkown
|
page read and write
|
|
|
|
231B5336000
|
unkown
|
page read and write
|
|
|
|
7FF5517AB000
|
unkown
|
page readonly
|
|
|
|
1AE99CA9000
|
unkown
|
page read and write
|
|
|
|
7FF5A0FD7000
|
unkown
|
page readonly
|
|
|
|
1E84F270000
|
unkown
|
page read and write
|
|
|
|
231B539E000
|
unkown
|
page read and write
|
|
|
|
23821119000
|
unkown
|
page read and write
|
|
|
|
23821159000
|
unkown
|
page read and write
|
|
|
|
1AE99CD2000
|
unkown
|
page read and write
|
|
|
|
2382110F000
|
unkown
|
page read and write
|
|
|
|
7FF5A8C31000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
23820790000
|
unkown
|
page read and write
|
|
|
|
231B535E000
|
unkown
|
page read and write
|
|
|
|
231B533F000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
231B48A0000
|
heap default
|
page read and write
|
|
|
|
FE14E7C000
|
unkown
|
page read and write
|
|
|
|
23825CE5000
|
unkown
|
page read and write
|
|
|
|
1AE99D85000
|
unkown
|
page read and write
|
|
|
|
7FF5A4B2D000
|
unkown
|
page readonly
|
|
|
|
1AE99D13000
|
unkown
|
page read and write
|
|
|
|
7FF5A1379000
|
unkown
|
page readonly
|
|
|
|
7FF583911000
|
unkown
|
page readonly
|
|
|
|
23826260000
|
unkown
|
page read and write
|
|
|
|
1E199FB000
|
unkown
|
page read and write
|
|
|
|
1AE9BEA7000
|
unkown
|
page read and write
|
|
|
|
19D74A13000
|
unkown
|
page read and write
|
|
|
|
7FF55C39B000
|
unkown
|
page readonly
|
|
|
|
7FF5A8E0A000
|
unkown
|
page readonly
|
|
|
|
4AD4EFB000
|
unkown
|
page read and write
|
|
|
|
7FF59061A000
|
unkown
|
page readonly
|
|
|
|
1AE9BEC7000
|
unkown
|
page read and write
|
|
|
|
7FF5A1300000
|
unkown
|
page readonly
|
|
|
|
7FF551627000
|
unkown
|
page readonly
|
|
|
|
7FF583B36000
|
unkown
|
page readonly
|
|
|
|
7FF5905FC000
|
unkown
|
page readonly
|
|
|
|
1AE9BDF6000
|
unkown
|
page read and write
|
|
|
|
7FF507856000
|
unkown
|
page readonly
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
DA57F78000
|
unkown
|
page read and write
|
|
|
|
1CE92FF0000
|
unkown
|
page read and write
|
|
|
|
2B436880000
|
unkown
|
page readonly
|
|
|
|
231B531C000
|
unkown
|
page read and write
|
|
|
|
7FF5905A4000
|
unkown
|
page readonly
|
|
|
|
231B535E000
|
unkown
|
page read and write
|
|
|
|
7FF5905D0000
|
unkown
|
page readonly
|
|
|
|
1E19D7B000
|
unkown
|
page read and write
|
|
|
|
23825D20000
|
unkown
|
page read and write
|
|
|
|
2B434857000
|
unkown
|
page read and write
|
|
|
|
7FF59051D000
|
unkown
|
page readonly
|
|
|
|
7FF5518E7000
|
unkown
|
page readonly
|
|
|
|
7FF55C409000
|
unkown
|
page readonly
|
|
|
|
2B434690000
|
unkown
|
page readonly
|
|
|
|
2382609C000
|
unkown
|
page read and write
|
|
|
|
7FF55C3D4000
|
unkown
|
page readonly
|
|
|
|
198A12E0000
|
unkown
|
page write copy
|
|
|
|
DA576FF000
|
unkown
|
page read and write
|
|
|
|
238260FD000
|
unkown
|
page read and write
|
|
|
|
231B4AB0000
|
unkown
|
page read and write
|
|
|
|
231B5358000
|
unkown
|
page read and write
|
|
|
|
231B535E000
|
unkown
|
page read and write
|
|
|
|
23826090000
|
unkown
|
page read and write
|
|
|
|
23821119000
|
unkown
|
page read and write
|
|
|
|
7FF55199A000
|
unkown
|
page readonly
|
|
|
|
23825F77000
|
unkown
|
page readonly
|
|
|
|
1AE9BDF8000
|
unkown
|
page read and write
|
|
|
|
7FF583797000
|
unkown
|
page readonly
|
|
|
|
7B93AFF000
|
unkown
|
page read and write
|
|
|
|
7FF5904D3000
|
unkown
|
page readonly
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
1AE9C510000
|
unkown
|
page read and write
|
|
|
|
24E94E13000
|
unkown
|
page read and write
|
|
|
|
1AE9BD12000
|
unkown
|
page read and write
|
|
|
|
23821158000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
1AE9BD1E000
|
unkown
|
page read and write
|
|
|
|
1AE9BE36000
|
unkown
|
page read and write
|
|
|
|
23821810000
|
unkown
|
page readonly
|
|
|
|
7FF5905FF000
|
unkown
|
page readonly
|
|
|
|
7FF51089F000
|
unkown
|
page readonly
|
|
|
|
7FF510A94000
|
unkown
|
page readonly
|
|
|
|
231B53CA000
|
unkown
|
page read and write
|
|
|
|
7FF5A0FCF000
|
unkown
|
page readonly
|
|
|
|
2382115B000
|
unkown
|
page read and write
|
|
|
|
4AD427B000
|
unkown
|
page read and write
|
|
|
|
238260D4000
|
unkown
|
page read and write
|
|
|
|
1AE99CC7000
|
unkown
|
page read and write
|
|
|
|
7FF58378F000
|
unkown
|
page readonly
|
|
|
|
231B5324000
|
unkown
|
page read and write
|
|
|
|
1AE99C13000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF5000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF58387B000
|
unkown
|
page readonly
|
|
|
|
7FF5C2545000
|
unkown
|
page readonly
|
|
|
|
23825E40000
|
unkown
|
page read and write
|
|
|
|
2B4348D4000
|
unkown
|
page read and write
|
|
|
|
7FF51558B000
|
unkown
|
page readonly
|
|
|
|
7FF55C3FE000
|
unkown
|
page readonly
|
|
|
|
7FF551485000
|
unkown
|
page readonly
|
|
|
|
7FF5156FE000
|
unkown
|
page readonly
|
|
|
|
19D74A4F000
|
unkown
|
page read and write
|
|
|
|
7FF5077DA000
|
unkown
|
page readonly
|
|
|
|
2B01077000
|
unkown
|
page read and write
|
|
|
|
1E19BFA000
|
unkown
|
page read and write
|
|
|
|
198A1402000
|
unkown
|
page read and write
|
|
|
|
1AE9BEC9000
|
unkown
|
page read and write
|
|
|
|
1AE99DB8000
|
unkown
|
page read and write
|
|
|
|
7B93CFF000
|
unkown
|
page read and write
|
|
|
|
231B534F000
|
unkown
|
page read and write
|
|
|
|
7FF50759B000
|
unkown
|
page readonly
|
|
|
|
7FF510BAA000
|
unkown
|
page readonly
|
|
|
|
23825FC4000
|
unkown
|
page readonly
|
|
|
|
23821200000
|
unkown
|
page read and write
|
|
|
|
7FF51568A000
|
unkown
|
page readonly
|
|
|
|
23825CE4000
|
unkown
|
page read and write
|
|
|
|
7FF5C2813000
|
unkown
|
page readonly
|
|
|
|
1AE9BE3B000
|
unkown
|
page read and write
|
|
|
|
23821113000
|
unkown
|
page read and write
|
|
|
|
231B535E000
|
unkown
|
page read and write
|
|
|
|
1E1A5FC000
|
unkown
|
page read and write
|
|
|
|
231B533C000
|
unkown
|
page read and write
|
|
|
|
2B434902000
|
unkown
|
page read and write
|
|
|
|
7B938FB000
|
unkown
|
page read and write
|
|
|
|
1E1997F000
|
unkown
|
page read and write
|
|
|
|
231B53A5000
|
unkown
|
page read and write
|
|
|
|
23826098000
|
unkown
|
page read and write
|
|
|
|
7FF5902AA000
|
unkown
|
page readonly
|
|
|
|
1AE9BD3A000
|
unkown
|
page read and write
|
|
|
|
231B4AEC000
|
unkown
|
page read and write
|
|
|
|
7FF551753000
|
unkown
|
page readonly
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
7FF510AC5000
|
unkown
|
page readonly
|
|
|
|
1E1A1FB000
|
unkown
|
page read and write
|
|
|
|
7FF590196000
|
unkown
|
page readonly
|
|
|
|
7FF510A2C000
|
unkown
|
page readonly
|
|
|
|
231B533C000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
7FF5A4F8C000
|
unkown
|
page readonly
|
|
|
|
231B4A9F000
|
unkown
|
page read and write
|
|
|
|
23825DB0000
|
unkown
|
page read and write
|
|
|
|
2B436850000
|
unkown
|
page read and write
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
198A1600000
|
unkown
|
page readonly
|
|
|
|
1E84F300000
|
unkown
|
page read and write
|
|
|
|
7FF510AC0000
|
unkown
|
page readonly
|
|
|
|
23820D90000
|
unkown
|
page readonly
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
1E84FA02000
|
unkown
|
page read and write
|
|
|
|
23826214000
|
unkown
|
page read and write
|
|
|
|
1AE9BD37000
|
unkown
|
page read and write
|
|
|
|
7FF590406000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
23821623000
|
unkown
|
page read and write
|
|
|
|
23826011000
|
unkown
|
page read and write
|
|
|
|
23825FEC000
|
unkown
|
page readonly
|
|
|
|
231B5345000
|
unkown
|
page read and write
|
|
|
|
7FF5C28BD000
|
unkown
|
page readonly
|
|
|
|
23821630000
|
unkown
|
page read and write
|
|
|
|
1A0BCC7F000
|
unkown
|
page read and write
|
|
|
|
7FF5519A2000
|
unkown
|
page readonly
|
|
|
|
231B533E000
|
unkown
|
page read and write
|
|
|
|
FE14DFA000
|
unkown
|
page read and write
|
|
|
|
7FF5C29B4000
|
unkown
|
page readonly
|
|
|
|
1B649FF000
|
unkown
|
page read and write
|
|
|
|
1AE9BECB000
|
unkown
|
page read and write
|
|
|
|
7FF5156BC000
|
unkown
|
page readonly
|
|
|
|
238260A5000
|
unkown
|
page read and write
|
|
|
|
231B535E000
|
unkown
|
page read and write
|
|
|
|
7FF5A8E89000
|
unkown
|
page readonly
|
|
|
|
1AE9BB20000
|
unkown
|
page read and write
|
|
|
|
238260F6000
|
unkown
|
page read and write
|
|
|
|
238208F9000
|
unkown
|
page read and write
|
|
|
|
2B00C7B000
|
unkown
|
page read and write
|
|
|
|
7FF510A0D000
|
unkown
|
page readonly
|
|
|
|
19D74A6E000
|
unkown
|
page read and write
|
|
|
|
1AE99CC1000
|
unkown
|
page read and write
|
|
|
|
1AE9C142000
|
unkown
|
page read and write
|
|
|
|
7FF5A52BC000
|
unkown
|
page readonly
|
|
|
|
7FF590534000
|
unkown
|
page readonly
|
|
|
|
1AE9D082000
|
unkown
|
page read and write
|
|
|
|
1AE9BEC8000
|
unkown
|
page read and write
|
|
|
|
231B49C0000
|
unkown
|
page readonly
|
|
|
|
231B5338000
|
unkown
|
page read and write
|
|
|
|
2382115C000
|
unkown
|
page read and write
|
|
|
|
1E1A3FC000
|
unkown
|
page read and write
|
|
|
|
4AD49FE000
|
unkown
|
page read and write
|
|
|
|
23826090000
|
unkown
|
page read and write
|
|
|
|
2B434760000
|
unkown
|
page write copy
|
|
|
|
1AE9D082000
|
unkown
|
page read and write
|
|
|
|
1E1A4FB000
|
unkown
|
page read and write
|
|
|
|
1AE9B770000
|
unkown
|
page readonly
|
|
|
|
23821118000
|
unkown
|
page read and write
|
|
|
|
7FF583B14000
|
unkown
|
page readonly
|
|
|
|
7FF5903D0000
|
unkown
|
page readonly
|
|
|
|
7FF5A8ACC000
|
unkown
|
page readonly
|
|
|
|
23820620000
|
heap private
|
page read and write
|
|
|
|
2382111A000
|
unkown
|
page read and write
|
|
|
|
1DD22720000
|
unkown
|
page readonly
|
|
|
|
1AE9BD60000
|
unkown
|
page read and write
|
|
|
|
1AE99C6D000
|
unkown
|
page read and write
|
|
|
|
2B4347F0000
|
unkown
|
page readonly
|
|
|
|
7FF5108F6000
|
unkown
|
page readonly
|
|
|
|
1AE9BE53000
|
unkown
|
page read and write
|
|
|
|
1E198FB000
|
unkown
|
page read and write
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
23821118000
|
unkown
|
page read and write
|
|
|
|
23826090000
|
unkown
|
page read and write
|
|
|
|
23820888000
|
unkown
|
page read and write
|
|
|
|
1AE9D102000
|
unkown
|
page read and write
|
|
|
|
231B5329000
|
unkown
|
page read and write
|
|
|
|
2B436702000
|
unkown
|
page read and write
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF59013E000
|
unkown
|
page readonly
|
|
|
|
7FF5A1368000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
7FF50785D000
|
unkown
|
page readonly
|
|
|
|
23825EA0000
|
unkown
|
page readonly
|
|
|
|
231B5389000
|
unkown
|
page read and write
|
|
|
|
231B531C000
|
unkown
|
page read and write
|
|
|
|
231B5357000
|
unkown
|
page read and write
|
|
|
|
231B4A13000
|
unkown
|
page read and write
|
|
|
|
2ED779E000
|
unkown
|
page read and write
|
|
|
|
7FF5A1159000
|
unkown
|
page readonly
|
|
|
|
23820690000
|
unkown
|
page readonly
|
|
|
|
1B6497A000
|
unkown
|
page read and write
|
|
|
|
23826102000
|
unkown
|
page read and write
|
|
|
|
7FF5A50A8000
|
unkown
|
page readonly
|
|
|
|
7FF51570D000
|
unkown
|
page readonly
|
|
|
|
231B5368000
|
unkown
|
page read and write
|
|
|
|
23825FF4000
|
unkown
|
page read and write
|
|
|
|
7FF5077A3000
|
unkown
|
page readonly
|
|
|
|
1AE9C510000
|
unkown
|
page read and write
|
|
|
|
7FF5C29ED000
|
unkown
|
page readonly
|
|
|
|
7FF5A8ADF000
|
unkown
|
page readonly
|
|
|
|
7FF5A8E81000
|
unkown
|
page readonly
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
7FF50749C000
|
unkown
|
page readonly
|
|
|
|
CB8DF99000
|
unkown
|
page read and write
|
|
|
|
238260A4000
|
unkown
|
page read and write
|
|
|
|
238260A4000
|
unkown
|
page read and write
|
|
|
|
2382115A000
|
unkown
|
page read and write
|
|
|
|
231B4A58000
|
unkown
|
page read and write
|
|
|
|
7FF5075A6000
|
unkown
|
page readonly
|
|
|
|
7FF583A5C000
|
unkown
|
page readonly
|
|
|
|
1DD22429000
|
unkown
|
page read and write
|
|
|
|
1AE99CAA000
|
unkown
|
page read and write
|
|
|
|
231B533D000
|
unkown
|
page read and write
|
|
|
|
7FF55C3C8000
|
unkown
|
page readonly
|
|
|
|
7FF55189C000
|
unkown
|
page readonly
|
|
|
|
7FF59059F000
|
unkown
|
page readonly
|
|
|
|
1AE9C110000
|
unkown
|
page read and write
|
|
|
|
1A0BCC77000
|
unkown
|
page read and write
|
|
|
|
7FF590649000
|
unkown
|
page readonly
|
|
|
|
4AD4C7A000
|
unkown
|
page read and write
|
|
|
|
1AE9BF43000
|
unkown
|
page read and write
|
|
|
|
1AE9BEA4000
|
unkown
|
page read and write
|
|
|
|
2B434829000
|
unkown
|
page read and write
|
|
|
|
7FF50703D000
|
unkown
|
page readonly
|
|
|
|
7FF507824000
|
unkown
|
page readonly
|
|
|
|
23826200000
|
unkown
|
page read and write
|
|
|
|
231B5337000
|
unkown
|
page read and write
|
|
|
|
2ED7BFE000
|
unkown
|
page read and write
|
|
|
|
7FF50780F000
|
unkown
|
page readonly
|
|
|
|
1A0BCC66000
|
heap default
|
page read and write
|
|
|
|
1E19F7B000
|
unkown
|
page read and write
|
|
|
|
1AE9E110000
|
unkown
|
page read and write
|
|
|
|
231B4B02000
|
unkown
|
page read and write
|
|
|
|
231B4AF8000
|
unkown
|
page read and write
|
|
|
|
1DD23EC0000
|
unkown
|
page read and write
|
|
|
|
23825CE1000
|
unkown
|
page read and write
|
|
|
|
7FF5074AF000
|
unkown
|
page readonly
|
|
|
|
1E19E7B000
|
unkown
|
page read and write
|
|
|
|
7FF510901000
|
unkown
|
page readonly
|
|
|
|
1AE99B50000
|
heap default
|
page read and write
|
|
|
|
1E1957E000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF7000
|
unkown
|
page read and write
|
|
|
|
7FF583BAA000
|
unkown
|
page readonly
|
|
|
|
2B4348CA000
|
unkown
|
page read and write
|
|
|
|
7FF510359000
|
unkown
|
page readonly
|
|
|
|
7FF51079A000
|
unkown
|
page readonly
|
|
|
|
7FF583898000
|
unkown
|
page readonly
|
|
|
|
7FF58FF23000
|
unkown
|
page readonly
|
|
|
|
198A1370000
|
unkown
|
page read and write
|
|
|
|
DA578F8000
|
unkown
|
page read and write
|
|
|
|
7FF5A51B1000
|
unkown
|
page readonly
|
|
|
|
7FF5A13F2000
|
unkown
|
page readonly
|
|
|
|
23825F20000
|
unkown
|
page readonly
|
|
|
|
19D75060000
|
unkown
|
page readonly
|
|
|
|
7FF59047A000
|
unkown
|
page readonly
|
|
|
|
23820902000
|
unkown
|
page read and write
|
|
|
|
2382088F000
|
unkown
|
page read and write
|
|
|
|
1AE99C60000
|
unkown
|
page read and write
|
|
|
|
7FF5C286B000
|
unkown
|
page readonly
|
|
|
|
7FF5A529B000
|
unkown
|
page readonly
|
|
|
|
231B5335000
|
unkown
|
page read and write
|
|
|
|
1AE9BDF8000
|
unkown
|
page read and write
|
|
|
|
2382608B000
|
unkown
|
page read and write
|
|
|
|
231B5368000
|
unkown
|
page read and write
|
|
|
|
231B5360000
|
unkown
|
page read and write
|
|
|
|
231B533D000
|
unkown
|
page read and write
|
|
|
|
1AE9BD78000
|
unkown
|
page read and write
|
|
|
|
7FF5C29BA000
|
unkown
|
page readonly
|
|
|
|
238207F0000
|
unkown
|
page read and write
|
|
|
|
4C6919E000
|
unkown
|
page read and write
|
|
There are 1505 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://vogtfamily.com/quarantine/i/of1/qsuv6r3a9mj71exzwt80igydkbcfhln2o45pguyjxi9zem3rp5hw4lcd8t6qb0snkv1of7a2cnfb6x3iaspzohkdwu925lt0rm718gjeyv4q?data=Y2hlcmkucmlsZXlAdHJlZXRvcC5jb20=
|
|