Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
covid.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\covid.exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\buyonegetone.exe
|
PE32+ executable (console) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\Documents\20210401\PowerShell_transcript.131521.mteVmlsc.20210401080426.txt
|
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mobsync.exe_44a5b269f1a49ba3186879c0fde267f2e16e4817_c086f9de_1b3be2ab\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mobsync.exe_7ec0eae3caa970bb3a358dd54d1dc4b33fa028_c086f9de_112408b2\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mobsync.exe_dec4da371fcafe4b9daf4e1d1160ddc76b221fb4_c086f9de_13a04abc\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER8BB2.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Apr 1 15:04:53 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER8ECF.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER8FF9.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERAD43.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Apr 1 15:05:01 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB0CF.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB350.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD916.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Apr 1 15:05:13 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDEB5.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE0E8.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\6CRF1DVL\www.youtube[1].xml
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\8LV1ZCXG\www.who[1].xml
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{918CB189-92FB-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{918CB18B-92FB-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{AB82FDC0-92FB-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\143.3d8bb49f121080f7c65c[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\176.b3b098a46f20d5583e41[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\992x312-pag-coronavirus-2[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 492x312,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\992x312-pag-coronavirus-2[2].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 492x312,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\A-year-in-pictures--A-shared-commitment-to-change-the-course-of-the-pandemic_WHO-Bangladesh--TA-3[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x511, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\DSC_8725_s[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 549x359, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RS34669_Covax_Sticker_CMYK_Covax_5_Sqaure_CovaxColours[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 549x367, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\accordion-footer-list.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\all[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\event[1].png
|
PNG image data, 131 x 131, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fa-solid-900[1].eot
|
Embedded OpenType (EOT), Font Awesome 5 Free family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fetch-polyfill[1].js
|
Pascal source, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\gtm[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\maxresdefault[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\print.min[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\publications-hero-image-thumb[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 549x315, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\remote[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\thumbs_covid-map.tmb-479v[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 479x269, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\thumbs_interactive-timeline.tmb-479v[1].png
|
PNG image data, 479 x 269, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\unnamed[1].jpg
|
[TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\widgets[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\www-player[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\140.61020b6c086bdb8bc696[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\142.feb3b57b86599b08d012[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\50060660951_bfa6a3fb80_o[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x512, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOmCnqEu92Fr1Mu4mxM[1].woff
|
Web Open Font Format, TrueType, length 19824, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\analytics[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\auto-complete.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\base[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\embed[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\geo-navigation.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\grid.min[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\gridTabs.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\kendo.ui.core.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\lazy.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main-navigation.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\modernizr-custom[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\picturefill.min[1].js
|
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\select2.full.min[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\step-tabs.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\syria4[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 636x424, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\thumbnail[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x460, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\www-embed-player[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\1[1].txt
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\210323_BLS21079_WHO_WHD_EN_web-banner_A.1[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 131x44, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\3-wha71-dg-tedros-opening-speech[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 549x366,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\992x312-pag-coronavirus-2[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 479x303,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\A-year-in-pictures--A-shared-commitment-to-change-the-course-of-the-pandemic_WHO-Bangladesh--TA-3[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 549x365, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\A-year-in-pictures--A-shared-commitment-to-change-the-course-of-the-pandemic_WHO-Bangladesh--TA-3[2].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 479x319, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ScriptResource[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\YHCW2021_webbanner[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 549x255, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\aRB5vtMgII7DALCmCUZFfhabFCI8RNJQqSbe_9t5ggE[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\accordion-list.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ad_status[1].js
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\addthis_widget[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fa-regular-400[1].eot
|
Embedded OpenType (EOT), Font Awesome 5 Free family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\favicon[1].ico
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\h-logo-blue[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\layers.fa6cd1947ce26e890d3d[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\main.min[1].css
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\moatframe[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\origin.min[1].css
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\publications-hero-image-thumb[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x589, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\sh.f48a1a04fe8dbf021b4cda1d[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\sh.f48a1a04fe8dbf021b4cda1d[2].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\yEIPefMsf70[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\210323_BLS21079_WHO_WHD_EN_web-banner_A.1[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 479x164, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\210323_BLS21079_WHO_WHD_EN_web-banner_A.1[2].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x262, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\3-wha71-dg-tedros-opening-speech[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 768x512,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\3-wha71-dg-tedros-opening-speech[2].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x682,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\DSC_8725_s[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 479x313, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\DSC_8725_s[2].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x503, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\FL794448.htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RS34669_Covax_Sticker_CMYK_Covax_5_Sqaure_CovaxColours[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 479x320, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RS34669_Covax_Sticker_CMYK_Covax_5_Sqaure_CovaxColours[2].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x513, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ScriptResource[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ScriptResource[2].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\Search-box.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\WebResource[1].js
|
UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\YHCW2021_webbanner[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x476, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\YHCW2021_webbanner[2].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x357, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\clarity[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\content-block.min[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\event[1].png
|
PNG image data, 565 x 569, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\event[2].png
|
PNG image data, 479 x 482, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\h-logo-blue[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\h-logo-white[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\image-resolution.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\js[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\language-selector.min[1].js
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\match-height.min[1].js
|
UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\publications-hero-image-thumb[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x441, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\responsive-background-image.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\slicknav.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3dqyvpjs.mb5.psm1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nnfqvlmt.og0.ps1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFC094D247FA2B2273.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFE20E719C21EBC887.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFE90822A1FC75C3D3.TMP
|
data
|
dropped
|
|
There are 123 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\covid.exe
|
'C:\Users\user\Desktop\covid.exe'
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
'C:\Windows\system32\windowspowershell\v1.0\powershell.exe' -sta -noprofile -executionpolicy bypass -encodedcommand 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
|
|
|
|
C:\Windows\System32\reg.exe
|
'C:\Windows\system32\reg.exe' add HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /v PromoJohn /t REG_SZ
/d C:\Users\user\AppData\Roaming\buyonegetone.exe /f
|
|
|
|
C:\Windows\System32\reg.exe
|
'C:\Windows\system32\reg.exe' add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v PromoJohn /t REG_SZ /d
C:\Users\user\AppData\Roaming\buyonegetone.exe /f
|
|
|
|
C:\Users\user\AppData\Roaming\buyonegetone.exe
|
'C:\Users\user\AppData\Roaming\buyonegetone.exe'
|
|
|
|
C:\Windows\System32\mobsync.exe
|
C:\Windows\System32\mobsync.exe
|
|
|
|
C:\Users\user\AppData\Roaming\buyonegetone.exe
|
'C:\Users\user\AppData\Roaming\buyonegetone.exe'
|
|
|
|
C:\Windows\System32\mobsync.exe
|
C:\Windows\System32\mobsync.exe
|
|
|
|
C:\Users\user\AppData\Roaming\buyonegetone.exe
|
'C:\Users\user\AppData\Roaming\buyonegetone.exe'
|
|
|
|
C:\Windows\System32\mobsync.exe
|
C:\Windows\System32\mobsync.exe
|
|
|
|
C:\Users\user\AppData\Roaming\buyonegetone.exe
|
'C:\Users\user\AppData\Roaming\buyonegetone.exe'
|
|
|
|
C:\Windows\System32\mobsync.exe
|
C:\Windows\System32\mobsync.exe
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' https://www.who.int/
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4168 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\System32\WerFault.exe
|
C:\Windows\system32\WerFault.exe -u -p 6888 -s 640
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\System32\WerFault.exe
|
C:\Windows\system32\WerFault.exe -u -p 6224 -s 636
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\System32\WerFault.exe
|
C:\Windows\system32\WerFault.exe -u -p 5504 -s 404
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
There are 12 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.who.int/publications/en/
|
unknown
|
|
|
|
http://code.jquery.com/
|
unknown
|
|
|
|
https://www.who.int/campaigns/
|
unknown
|
|
|
|
https://www.paho.org/hq/index.php?lang=en
|
unknown
|
|
|
|
https://www.afro.who.int/
|
unknown
|
|
|
|
https://www.who.int/home
|
unknown
|
|
|
|
https://contoso.com/License
|
unknown
|
|
|
|
https://www.who.int/T
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://www.who.int/images/default-source/infographics/logo-who.tmb-1200v.jpg?Culture=en&sfvrsn=
|
unknown
|
|
|
|
http://youtube.com/streaming/otf/durations/112015
|
unknown
|
|
|
|
https://www.who.int/emergencies/diseases/novel-coronavirus-2019
|
unknown
|
|
|
|
http://youtube.com/streaming/metadata/segment/102015
|
unknown
|
|
|
|
https://www.who.int/
|
unknown
|
|
|
|
https://youtu.be/
|
unknown
|
|
|
|
https://www.who.int/redirect-pages/mega-menu/emergencies/emergencies/democratic-republic-of-the-cong
|
unknown
|
|
|
|
http://schema.org
|
unknown
|
|
|
|
https://www.who.int/southeastasia
|
unknown
|
|
|
|
https://admin.youtube.com
|
unknown
|
|
|
|
https://www.who.int/es/home
|
unknown
|
|
|
|
https://platform.twitter.com/widgets.js
|
unknown
|
|
|
|
https://www.who.int/home/search?indexCatalogue=genericsearchindex1&wordsMode=AnyWord&searchQuery=
|
unknown
|
|
|
|
https://www.who.int/westernpacific/
|
unknown
|
|
|
|
https://contoso.com/
|
unknown
|
|
|
|
https://nuget.org/nuget.exe
|
unknown
|
|
|
|
https://www.who.int/emergencies/crises/cod/en/
|
unknown
|
|
|
|
https://www.youtube.com/embed/yEIPefMsf70
|
unknown
|
|
|
|
https://www.who.int/pt/home
|
unknown
|
|
|
|
https://stats.g.doubleclick.net/j/collect
|
unknown
|
|
|
|
https://www.who.int/about/governance/world-health-assembly/seventy-third-world-health-assembly
|
unknown
|
|
|
|
https://www.who.int/redirect-pages/page/novel-coronavirus-(covid-19)-situation-dashboard
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
|
|
|
https://www.who.int
|
unknown
|
|
|
|
https://www.who.int/ar/home
|
unknown
|
|
|
|
http://nuget.org/NuGet.exe
|
unknown
|
|
|
|
https://www.who.int/ResourcePackages/WHO/assets/dist/images/logos/en/h-logo-blue.svg
|
unknown
|
|
|
|
https://redux.js.org/api/store#subscribelistener
|
unknown
|
|
|
|
https://www.who.int/zh/home
|
unknown
|
|
|
|
https://www.youtube.com/generate_204?cpn=
|
unknown
|
|
|
|
https://s7.addthis.com/js/300/addthis_widget.js#pubid=ra-5803f964fe6c9599
|
unknown
|
|
|
|
http://pesterbdd.com/images/Pester.png
|
unknown
|
|
|
|
https://youtube.com/api/drm/fps?ek=uninitialized
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/soap/encoding/
|
unknown
|
|
|
|
https://www.who.int/redirect-pages/mega-menu/data/announcement/world-health-statistics-2020
|
unknown
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0.html
|
unknown
|
|
|
|
http://fontello.com
|
unknown
|
|
|
|
https://contoso.com/Icon
|
unknown
|
|
|
|
http://www.euro.who.int/en/home
|
unknown
|
|
|
|
http://fontello.comFont
|
unknown
|
|
|
|
https://www.who.int/ru/home
|
unknown
|
|
|
|
https://schema.org
|
unknown
|
|
|
|
https://www.who.int/emergencies/diseases/novel-coronavirus-2019/interactive-timeline
|
unknown
|
|
|
|
https://www.who.int/news-room/events
|
unknown
|
|
|
|
https://www.who.int/news/item#:ItemDefaultUrl
|
unknown
|
|
|
|
http://youtube.com/yt/2012/10/10
|
unknown
|
|
|
|
https://github.com/Pester/Pester
|
unknown
|
|
|
|
https://www.who.int/f
|
unknown
|
|
|
|
https://www.who.int/ictrp/search/en/
|
unknown
|
|
|
|
https://app.powerbi.com/
|
unknown
|
|
|
|
https://www.who.int/about/what-we-do/who-brochure
|
unknown
|
|
|
|
https://www.who.int/redirect-pages/mega-menu/emergencies/public-health-emergency--dashboard
|
unknown
|
|
|
|
https://www.google.%/ads/ga-audiences
|
unknown
|
|
|
|
https://www.who.int/about/who-we-are/privacy-policy
|
unknown
|
|
|
|
https://www.who.int/nt/
|
unknown
|
|
|
|
http://www.youtube.com/videoplayback
|
unknown
|
|
|
|
https://cdn.who.int/media/images/default-source/who_homepage/thumbs_covid-map.tmb-479v.jpg
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/wsdl/
|
unknown
|
|
|
|
https://www.who.int/campaigns/connecting-the-world-to-combat-coronavirus/how-to-report-misinformatio
|
unknown
|
|
|
|
https://www.who.int/news-room/releases
|
unknown
|
|
|
|
https://www.who.int/fr/home
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
https://covid19.who.int/
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
http://youtube.com/drm/2012/10/10
|
unknown
|
|
|
|
http://www.emro.who.int/index.html
|
unknown
|
|
|
|
https://cdn.who.int/media/images/default-source/who_homepage/thumbs_interactive-timeline.tmb-479v.pn
|
unknown
|
|
There are 66 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
googleads.g.doubleclick.net
|
172.217.168.2
|
|
|
|
fontawesome-cdn.fonticons.netdna-cdn.com
|
23.111.9.35
|
|
|
|
platform.twitter.map.fastly.net
|
199.232.136.157
|
|
|
|
www.who.int
|
unknown
|
|
|
|
m.addthis.com
|
unknown
|
|
|
|
v1.addthisedge.com
|
unknown
|
|
|
|
www.clarity.ms
|
unknown
|
|
|
|
s7.addthis.com
|
unknown
|
|
|
|
z.moatads.com
|
unknown
|
|
|
|
static.doubleclick.net
|
unknown
|
|
|
|
use.fontawesome.com
|
unknown
|
|
|
|
cdn.who.int
|
unknown
|
|
|
|
platform.twitter.com
|
unknown
|
|
|
|
www.youtube.com
|
unknown
|
|
|
|
c.clarity.ms
|
unknown
|
|
There are 5 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
108.177.15.154
|
unknown
|
United States
|
|
|
|
23.111.9.35
|
fontawesome-cdn.fonticons.netdna-cdn.com
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
172.217.168.68
|
unknown
|
United States
|
|
|
|
13.88.21.125
|
unknown
|
United States
|
|
|
|
172.217.168.3
|
unknown
|
United States
|
|
|
|
172.217.168.1
|
unknown
|
United States
|
|
|
|
172.217.168.2
|
googleads.g.doubleclick.net
|
United States
|
|
|
|
168.61.161.212
|
unknown
|
United States
|
|
|
|
65.9.58.114
|
unknown
|
United States
|
|
|
|
172.217.168.54
|
unknown
|
United States
|
|
|
|
199.232.136.157
|
platform.twitter.map.fastly.net
|
United States
|
|
|
|
168.62.194.64
|
unknown
|
United States
|
|
There are 3 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
@C:\Windows\System32\ieframe.dll,-55175
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{918CB189-92FB-11EB-90E4-ECF4BB862DED}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
AdminActive
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Type
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Flags
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Windows\System32\reg.exe
|
PromoJohn
|
|
|
|
C:\Windows\System32\reg.exe
|
PromoJohn
|
|
|
|
C:\Windows\System32\WerFault.exe
|
ProgramId
|
|
|
|
C:\Windows\System32\WerFault.exe
|
FileId
|
|
|
|
C:\Windows\System32\WerFault.exe
|
LowerCaseLongPath
|
|
|
|
C:\Windows\System32\WerFault.exe
|
LongPathHash
|
|
|
|
C:\Windows\System32\WerFault.exe
|
Name
|
|
|
|
C:\Windows\System32\WerFault.exe
|
Publisher
|
|
|
|
C:\Windows\System32\WerFault.exe
|
Version
|
|
|
|
C:\Windows\System32\WerFault.exe
|
BinFileVersion
|
|
|
|
C:\Windows\System32\WerFault.exe
|
BinaryType
|
|
|
|
C:\Windows\System32\WerFault.exe
|
ProductName
|
|
|
|
C:\Windows\System32\WerFault.exe
|
ProductVersion
|
|
|
|
C:\Windows\System32\WerFault.exe
|
LinkDate
|
|
|
|
C:\Windows\System32\WerFault.exe
|
BinProductVersion
|
|
|
|
C:\Windows\System32\WerFault.exe
|
Size
|
|
|
|
C:\Windows\System32\WerFault.exe
|
Language
|
|
|
|
C:\Windows\System32\WerFault.exe
|
IsPeFile
|
|
|
|
C:\Windows\System32\WerFault.exe
|
IsOsComponent
|
|
|
|
C:\Windows\System32\WerFault.exe
|
DeviceTicket
|
|
|
|
C:\Windows\System32\WerFault.exe
|
DeviceId
|
|
|
|
C:\Windows\System32\WerFault.exe
|
ApplicationFlags
|
|
|
|
C:\Windows\System32\WerFault.exe
|
ExceptionRecord
|
|
|
|
C:\Windows\System32\WerFault.exe
|
0018000565DBFCC3
|
|
|
|
C:\Windows\System32\WerFault.exe
|
ExceptionRecord
|
|
|
|
C:\Windows\System32\WerFault.exe
|
0018000565DBFCC3
|
|
|
|
C:\Windows\System32\WerFault.exe
|
DeviceTicket
|
|
|
|
C:\Windows\System32\WerFault.exe
|
ExceptionRecord
|
|
|
|
C:\Windows\System32\WerFault.exe
|
0018000565DBFCC3
|
|
|
|
C:\Windows\System32\WerFault.exe
|
DeviceTicket
|
|
There are 119 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1A41399D000
|
unkown
|
page read and write
|
|
|
|
7FF56355F000
|
unkown
|
page readonly
|
|
|
|
2692EA6B000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
1A42BAF0000
|
unkown image
|
page readonly
|
|
|
|
19F5000
|
heap private
|
page read and write
|
|
|
|
1A42C030000
|
unkown
|
page read and write
|
|
|
|
1A42B332000
|
unkown
|
page read and write
|
|
|
|
87055DE000
|
unkown
|
page read and write
|
|
|
|
1DA61740000
|
unkown
|
page readonly
|
|
|
|
1A42B427000
|
unkown
|
page read and write
|
|
|
|
1BF1E000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
1FC11C80000
|
heap default
|
page read and write
|
|
|
|
1A42B34F000
|
unkown
|
page read and write
|
|
|
|
18B65920000
|
unkown
|
page readonly
|
|
|
|
7FFAEEC70000
|
unkown
|
page read and write
|
|
|
|
1A41482F000
|
unkown
|
page read and write
|
|
|
|
1A42B41D000
|
unkown
|
page read and write
|
|
|
|
27F8B960000
|
heap private
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FFAEEA4C000
|
unkown
|
page execute and read and write
|
|
|
|
23F81490000
|
unkown
|
page execute and read and write
|
|
|
|
1A42B510000
|
unkown
|
page read and write
|
|
|
|
18B670C0000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF7E3D60000
|
unkown image
|
page readonly
|
|
|
|
1A412EA0000
|
heap private
|
page execute and read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
4C455FE000
|
unkown
|
page read and write
|
|
|
|
1FC11DE0000
|
unkown
|
page readonly
|
|
|
|
7FF5A441E000
|
unkown
|
page readonly
|
|
|
|
1A42B770000
|
unkown
|
page read and write
|
|
|
|
7FF54A072000
|
unkown
|
page readonly
|
|
|
|
23C04308000
|
unkown
|
page read and write
|
|
|
|
7FF563698000
|
unkown
|
page readonly
|
|
|
|
7FFAEECE0000
|
unkown
|
page read and write
|
|
|
|
53EF4C000
|
unkown
|
page read and write
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
7FF5A3BBD000
|
unkown
|
page readonly
|
|
|
|
7FF56A5DA000
|
unkown
|
page readonly
|
|
|
|
7FFAEEA0B000
|
unkown
|
page read and write
|
|
|
|
23BCB43D000
|
unkown
|
page read and write
|
|
|
|
1A42B403000
|
unkown
|
page read and write
|
|
|
|
1A423638000
|
unkown
|
page read and write
|
|
|
|
19FF2476000
|
unkown
|
page read and write
|
|
|
|
7FF686084000
|
unkown image
|
page readonly
|
|
|
|
1A42C070000
|
unkown
|
page read and write
|
|
|
|
1A4245B7000
|
unkown
|
page read and write
|
|
|
|
7FF5634B0000
|
unkown
|
page readonly
|
|
|
|
7FF505A48000
|
unkown
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
1B3CD5B0000
|
unkown
|
page readonly
|
|
|
|
7FF5EB101000
|
unkown
|
page readonly
|
|
|
|
24997ED0000
|
unkown
|
page read and write
|
|
|
|
1A42B389000
|
unkown
|
page read and write
|
|
|
|
24718CE000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
23BCB2E0000
|
heap private
|
page read and write
|
|
|
|
1A42B37D000
|
unkown
|
page read and write
|
|
|
|
1A42B8F1000
|
unkown
|
page readonly
|
|
|
|
7FF5743BA000
|
unkown
|
page readonly
|
|
|
|
1A413AE3000
|
unkown
|
page read and write
|
|
|
|
1A4143EE000
|
unkown
|
page read and write
|
|
|
|
1A42B436000
|
unkown
|
page read and write
|
|
|
|
7FF57453F000
|
unkown
|
page readonly
|
|
|
|
CE0827E000
|
unkown
|
page read and write
|
|
|
|
1A42B002000
|
unkown
|
page read and write
|
|
|
|
1DA61400000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF42A090000
|
unkown
|
page execute and read and write
|
|
|
|
23C04302000
|
unkown
|
page read and write
|
|
|
|
1FC11DD0000
|
unkown
|
page read and write
|
|
|
|
D35B8CC000
|
unkown
|
page read and write
|
|
|
|
1F953270000
|
unkown
|
page read and write
|
|
|
|
1A412D50000
|
heap private
|
page read and write
|
|
|
|
7FFAEEC40000
|
unkown
|
page read and write
|
|
|
|
7FF5EAEA8000
|
unkown
|
page readonly
|
|
|
|
1A42B423000
|
unkown
|
page read and write
|
|
|
|
23F816D0000
|
unkown
|
page readonly
|
|
|
|
18B65800000
|
unkown
|
page readonly
|
|
|
|
7FFAEEE4C000
|
unkown
|
page read and write
|
|
|
|
1EA21120000
|
unkown
|
page read and write
|
|
|
|
1DC42A60000
|
unkown
|
page read and write
|
|
|
|
7FF5EB076000
|
unkown
|
page readonly
|
|
|
|
24992A71000
|
unkown
|
page read and write
|
|
|
|
7FF51B378000
|
unkown
|
page readonly
|
|
|
|
1CC7A020000
|
heap private
|
page read and write
|
|
|
|
7FF503D40000
|
unkown
|
page readonly
|
|
|
|
158F000
|
heap default
|
page read and write
|
|
|
|
1FC11E46000
|
unkown
|
page read and write
|
|
|
|
1A42AF53000
|
unkown
|
page read and write
|
|
|
|
7FF569F58000
|
unkown
|
page readonly
|
|
|
|
DB512AB000
|
unkown
|
page read and write
|
|
|
|
7FF6FE100000
|
unkown image
|
page readonly
|
|
|
|
19F0000
|
heap private
|
page read and write
|
|
|
|
1BAA2C6D000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF5EB04F000
|
unkown
|
page readonly
|
|
|
|
7FF54AB25000
|
unkown
|
page readonly
|
|
|
|
7FF503D4D000
|
unkown
|
page readonly
|
|
|
|
19FF22A0000
|
unkown
|
page readonly
|
|
|
|
24998200000
|
unkown
|
page readonly
|
|
|
|
19FF245F000
|
unkown
|
page read and write
|
|
|
|
1FC11DD0000
|
unkown
|
page read and write
|
|
|
|
1A410FF0000
|
unkown
|
page readonly
|
|
|
|
1DA61730000
|
unkown
|
page readonly
|
|
|
|
7FF5A4397000
|
unkown
|
page readonly
|
|
|
|
1A42B946000
|
unkown
|
page readonly
|
|
|
|
24992A76000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
7FF7E3D61000
|
unkown image
|
page execute read
|
|
|
|
7FFAEED40000
|
unkown
|
page read and write
|
|
|
|
7FF505A91000
|
unkown
|
page readonly
|
|
|
|
7FF5EB109000
|
unkown
|
page readonly
|
|
|
|
7FF7E3DA4000
|
unkown image
|
page readonly
|
|
|
|
7FF503D9E000
|
unkown
|
page readonly
|
|
|
|
23F82E70000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
1A42B781000
|
unkown
|
page read and write
|
|
|
|
2692EA6C000
|
unkown
|
page read and write
|
|
|
|
1FC11E13000
|
unkown
|
page read and write
|
|
|
|
C70000
|
unkown image
|
page readonly
|
|
|
|
7FF59A46A000
|
unkown
|
page readonly
|
|
|
|
D35BC7D000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF563567000
|
unkown
|
page readonly
|
|
|
|
1871000
|
unkown
|
page read and write
|
|
|
|
1A412EE1000
|
unkown
|
page read and write
|
|
|
|
7FF6FE101000
|
unkown image
|
page execute read
|
|
|
|
7FF58985E000
|
unkown
|
page readonly
|
|
|
|
19FF2439000
|
unkown
|
page read and write
|
|
|
|
1A4142C2000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
C485C7B000
|
unkown
|
page read and write
|
|
|
|
7FF57457C000
|
unkown
|
page readonly
|
|
|
|
7FFAEECF0000
|
unkown
|
page read and write
|
|
|
|
1A42B8DD000
|
unkown
|
page readonly
|
|
|
|
1A42B7E0000
|
unkown
|
page readonly
|
|
|
|
1A410FB0000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF500F82000
|
unkown
|
page readonly
|
|
|
|
1A411190000
|
unkown
|
page readonly
|
|
|
|
7FF536916000
|
unkown
|
page readonly
|
|
|
|
7FF5636B8000
|
unkown
|
page readonly
|
|
|
|
7FF500F88000
|
unkown
|
page readonly
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
1FC11F18000
|
unkown
|
page read and write
|
|
|
|
3B2EDFA000
|
unkown
|
page read and write
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
23C041E0000
|
unkown
|
page readonly
|
|
|
|
7FF59A4DA000
|
unkown
|
page readonly
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
1A42B3C0000
|
unkown
|
page read and write
|
|
|
|
1A4146E6000
|
unkown
|
page read and write
|
|
|
|
1FC11DA0000
|
unkown
|
page read and write
|
|
|
|
B1328FE000
|
unkown
|
page read and write
|
|
|
|
7FF56A731000
|
unkown
|
page readonly
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
7FF59073E000
|
unkown
|
page readonly
|
|
|
|
7FF5EB086000
|
unkown
|
page readonly
|
|
|
|
24992A3D000
|
unkown
|
page read and write
|
|
|
|
18B67590000
|
unkown
|
page readonly
|
|
|
|
24997FB0000
|
unkown
|
page read and write
|
|
|
|
1BAA2C6D000
|
unkown
|
page read and write
|
|
|
|
1A42C040000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
7FF505A1E000
|
unkown
|
page readonly
|
|
|
|
1DA61770000
|
heap private
|
page read and write
|
|
|
|
1FC11E5B000
|
unkown
|
page read and write
|
|
|
|
7FF548557000
|
unkown
|
page readonly
|
|
|
|
7FF59A474000
|
unkown
|
page readonly
|
|
|
|
7FF5903C3000
|
unkown
|
page readonly
|
|
|
|
1A42C040000
|
unkown
|
page read and write
|
|
|
|
9035F7F000
|
unkown
|
page read and write
|
|
|
|
1F953600000
|
unkown
|
page readonly
|
|
|
|
1A412E80000
|
unkown
|
page execute and read and write
|
|
|
|
1A422F00000
|
unkown
|
page read and write
|
|
|
|
7FF59A46E000
|
unkown
|
page readonly
|
|
|
|
7FF54AA3F000
|
unkown
|
page readonly
|
|
|
|
7FF59074F000
|
unkown
|
page readonly
|
|
|
|
7FF5634FC000
|
unkown
|
page readonly
|
|
|
|
7FF505B66000
|
unkown
|
page readonly
|
|
|
|
1A42B405000
|
unkown
|
page read and write
|
|
|
|
1BAA2C13000
|
unkown
|
page read and write
|
|
|
|
1E556458000
|
heap default
|
page read and write
|
|
|
|
7FF562FA4000
|
unkown
|
page readonly
|
|
|
|
7FF563897000
|
unkown
|
page readonly
|
|
|
|
7FF56A6D7000
|
unkown
|
page readonly
|
|
|
|
7FF5630ED000
|
unkown
|
page readonly
|
|
|
|
24705F9000
|
unkown
|
page read and write
|
|
|
|
1A42B790000
|
unkown
|
page read and write
|
|
|
|
1BD80000
|
unkown
|
page readonly
|
|
|
|
7FF56A60C000
|
unkown
|
page readonly
|
|
|
|
3B2F0FD000
|
unkown
|
page read and write
|
|
|
|
7FFAEEC77000
|
unkown
|
page read and write
|
|
|
|
1A42BAF2000
|
unkown image
|
page readonly
|
|
|
|
7FF500F4A000
|
unkown
|
page readonly
|
|
|
|
7FF501014000
|
unkown
|
page readonly
|
|
|
|
7FF54A7F5000
|
unkown
|
page readonly
|
|
|
|
1A411180000
|
unkown
|
page read and write
|
|
|
|
53FB7F000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
19FF2455000
|
unkown
|
page read and write
|
|
|
|
1A412EC0000
|
unkown
|
page read and write
|
|
|
|
1CC7A26B000
|
unkown
|
page read and write
|
|
|
|
12F70130000
|
heap private
|
page read and write
|
|
|
|
7FF500D35000
|
unkown
|
page readonly
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF51B2E7000
|
unkown
|
page readonly
|
|
|
|
7FF501017000
|
unkown
|
page readonly
|
|
|
|
249980B6000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF7E3DA0000
|
unkown image
|
page read and write
|
|
|
|
2692EA68000
|
unkown
|
page read and write
|
|
|
|
B13231B000
|
unkown
|
page read and write
|
|
|
|
7FF503D47000
|
unkown
|
page readonly
|
|
|
|
7FFAEEC25000
|
unkown
|
page read and write
|
|
|
|
1A413ACA000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
7FF51B3AF000
|
unkown
|
page readonly
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
27F8B9E0000
|
unkown
|
page readonly
|
|
|
|
7FF54DE8A000
|
unkown
|
page readonly
|
|
|
|
7FF505C4E000
|
unkown
|
page readonly
|
|
|
|
7FF54A7F1000
|
unkown
|
page readonly
|
|
|
|
1A42B321000
|
unkown
|
page read and write
|
|
|
|
7FF59A546000
|
unkown
|
page readonly
|
|
|
|
1A42B435000
|
unkown
|
page read and write
|
|
|
|
1F953A02000
|
unkown
|
page read and write
|
|
|
|
7FF5A4425000
|
unkown
|
page readonly
|
|
|
|
7FF53690C000
|
unkown
|
page readonly
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
24992930000
|
unkown
|
page readonly
|
|
|
|
7FF57DC81000
|
unkown
|
page readonly
|
|
|
|
1DA61580000
|
unkown
|
page read and write
|
|
|
|
7DF473A20000
|
unkown
|
page execute and read and write
|
|
|
|
7FF56A6BC000
|
unkown
|
page readonly
|
|
|
|
1A42BA11000
|
unkown
|
page read and write
|
|
|
|
3240000
|
heap private
|
page execute and read and write
|
|
|
|
1A4145A1000
|
unkown
|
page read and write
|
|
|
|
19FF2474000
|
unkown
|
page read and write
|
|
|
|
7FF54AC57000
|
unkown
|
page readonly
|
|
|
|
1A42B770000
|
unkown
|
page read and write
|
|
|
|
7FF51B360000
|
unkown
|
page readonly
|
|
|
|
7FF56A5A5000
|
unkown
|
page readonly
|
|
|
|
7FF5A444D000
|
unkown
|
page readonly
|
|
|
|
7FF5744F0000
|
unkown
|
page readonly
|
|
|
|
24706FE000
|
unkown
|
page read and write
|
|
|
|
247077A000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
24716CE000
|
unkown
|
page read and write
|
|
|
|
B132A7C000
|
unkown
|
page read and write
|
|
|
|
7FF548644000
|
unkown
|
page readonly
|
|
|
|
1FC11E4B000
|
unkown
|
page read and write
|
|
|
|
7FFAEEAAC000
|
unkown
|
page execute and read and write
|
|
|
|
7FF574506000
|
unkown
|
page readonly
|
|
|
|
7FF562CCE000
|
unkown
|
page readonly
|
|
|
|
24993015000
|
unkown
|
page read and write
|
|
|
|
27F8BB13000
|
unkown
|
page read and write
|
|
|
|
1500000
|
unkown
|
page read and write
|
|
|
|
7FF505BD6000
|
unkown
|
page readonly
|
|
|
|
2692EA68000
|
unkown
|
page read and write
|
|
|
|
7FF590786000
|
unkown
|
page readonly
|
|
|
|
1A414536000
|
unkown
|
page read and write
|
|
|
|
7FF5A4144000
|
unkown
|
page readonly
|
|
|
|
1890000
|
unkown
|
page read and write
|
|
|
|
7FF54DF0D000
|
unkown
|
page readonly
|
|
|
|
18B65700000
|
unkown
|
page read and write
|
|
|
|
7FF5EB0A7000
|
unkown
|
page readonly
|
|
|
|
7DFC06702000
|
unkown
|
page readonly
|
|
|
|
27F8BA59000
|
unkown
|
page read and write
|
|
|
|
7FF590712000
|
unkown
|
page readonly
|
|
|
|
24992A13000
|
unkown
|
page read and write
|
|
|
|
1BAA2C6D000
|
unkown
|
page read and write
|
|
|
|
24997F70000
|
unkown
|
page read and write
|
|
|
|
7FF59A52D000
|
unkown
|
page readonly
|
|
|
|
1A42B500000
|
unkown
|
page read and write
|
|
|
|
18B655E0000
|
unkown
|
page readonly
|
|
|
|
1F953F40000
|
unkown
|
page readonly
|
|
|
|
1A413A3D000
|
unkown
|
page read and write
|
|
|
|
7FF589861000
|
unkown
|
page readonly
|
|
|
|
33BE000
|
unkown
|
page read and write
|
|
|
|
1A42B407000
|
unkown
|
page read and write
|
|
|
|
1CC7AA02000
|
unkown
|
page read and write
|
|
|
|
23A00CE0000
|
heap default
|
page read and write
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
7FF56A6AC000
|
unkown
|
page readonly
|
|
|
|
1A42B7A0000
|
unkown
|
page read and write
|
|
|
|
53F57C000
|
unkown
|
page read and write
|
|
|
|
7FF6FE144000
|
unkown image
|
page readonly
|
|
|
|
2692EA6A000
|
unkown
|
page read and write
|
|
|
|
7FF5906CB000
|
unkown
|
page readonly
|
|
|
|
7FF5903D4000
|
unkown
|
page readonly
|
|
|
|
1A414054000
|
unkown
|
page read and write
|
|
|
|
1CC7A180000
|
unkown
|
page read and write
|
|
|
|
27F8BC00000
|
unkown
|
page readonly
|
|
|
|
7FF51B051000
|
unkown
|
page readonly
|
|
|
|
1A414297000
|
unkown
|
page read and write
|
|
|
|
7FF56A478000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF54A8CF000
|
unkown
|
page readonly
|
|
|
|
7FF56382E000
|
unkown
|
page readonly
|
|
|
|
7FF51B22B000
|
unkown
|
page readonly
|
|
|
|
7FFAEEA20000
|
unkown
|
page read and write
|
|
|
|
7FF5630E9000
|
unkown
|
page readonly
|
|
|
|
7FF54AC36000
|
unkown
|
page readonly
|
|
|
|
2692EA13000
|
unkown
|
page read and write
|
|
|
|
24997DA0000
|
unkown
|
page read and write
|
|
|
|
7FF59A536000
|
unkown
|
page readonly
|
|
|
|
1CC7A229000
|
unkown
|
page read and write
|
|
|
|
23A00BB0000
|
unkown
|
page readonly
|
|
|
|
7FF56A46C000
|
unkown
|
page readonly
|
|
|
|
7FF501079000
|
unkown
|
page readonly
|
|
|
|
1A412EA6000
|
heap private
|
page execute and read and write
|
|
|
|
7FFAEEBD8000
|
unkown
|
page read and write
|
|
|
|
2692EA69000
|
unkown
|
page read and write
|
|
|
|
7FF56A6A1000
|
unkown
|
page readonly
|
|
|
|
7FFAEEF20000
|
unkown
|
page read and write
|
|
|
|
7FF54869E000
|
unkown
|
page readonly
|
|
|
|
7FF5A43BC000
|
unkown
|
page readonly
|
|
|
|
1A42B3C0000
|
unkown
|
page read and write
|
|
|
|
7FF5A41B0000
|
unkown
|
page readonly
|
|
|
|
1A413F77000
|
unkown
|
page read and write
|
|
|
|
23A00C80000
|
unkown
|
page read and write
|
|
|
|
1A42B430000
|
unkown
|
page read and write
|
|
|
|
27F8BA6A000
|
unkown
|
page read and write
|
|
|
|
18B67764000
|
unkown
|
page read and write
|
|
|
|
1A42B932000
|
unkown
|
page readonly
|
|
|
|
1A413BB4000
|
unkown
|
page read and write
|
|
|
|
4C4537B000
|
unkown
|
page read and write
|
|
|
|
1A42B860000
|
unkown
|
page readonly
|
|
|
|
7FF51B2F5000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
23A00F24000
|
heap private
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
7FF56A642000
|
unkown
|
page readonly
|
|
|
|
24993940000
|
unkown
|
page readonly
|
|
|
|
24993000000
|
unkown
|
page read and write
|
|
|
|
7FF5361C9000
|
unkown
|
page readonly
|
|
|
|
23C04282000
|
unkown
|
page read and write
|
|
|
|
7FF5EB016000
|
unkown
|
page readonly
|
|
|
|
1A411100000
|
unkown
|
page readonly
|
|
|
|
1B940000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
18B6566F000
|
unkown
|
page read and write
|
|
|
|
7FF54AC2C000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF536991000
|
unkown
|
page readonly
|
|
|
|
249980B6000
|
unkown
|
page read and write
|
|
|
|
1A42B37B000
|
unkown
|
page read and write
|
|
|
|
23F81680000
|
unkown
|
page read and write
|
|
|
|
18B65694000
|
unkown
|
page read and write
|
|
|
|
2692EA6A000
|
unkown
|
page read and write
|
|
|
|
19FF2390000
|
unkown
|
page read and write
|
|
|
|
1A412D68000
|
unkown
|
page read and write
|
|
|
|
7FF51A777000
|
unkown
|
page readonly
|
|
|
|
7FFAEEA22000
|
unkown
|
page read and write
|
|
|
|
1C11E000
|
unkown
|
page read and write
|
|
|
|
7FF58974C000
|
unkown
|
page readonly
|
|
|
|
7FF563710000
|
unkown
|
page readonly
|
|
|
|
1A42B276000
|
unkown
|
page read and write
|
|
|
|
24997D80000
|
unkown
|
page read and write
|
|
|
|
7FF5EAFDA000
|
unkown
|
page readonly
|
|
|
|
7FF56A5EA000
|
unkown
|
page readonly
|
|
|
|
18B65640000
|
unkown
|
page read and write
|
|
|
|
7FF562D00000
|
unkown
|
page readonly
|
|
|
|
1BAA2E00000
|
unkown
|
page readonly
|
|
|
|
1DC42AA0000
|
heap default
|
page read and write
|
|
|
|
7FF7E3D61000
|
unkown image
|
page execute read
|
|
|
|
19FF247D000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF50106E000
|
unkown
|
page readonly
|
|
|
|
7FFAEEDA0000
|
unkown
|
page read and write
|
|
|
|
19E0000
|
unkown
|
page readonly
|
|
|
|
1CC7A790000
|
unkown
|
page readonly
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
53F47E000
|
unkown
|
page read and write
|
|
|
|
7FF562CC9000
|
unkown
|
page readonly
|
|
|
|
1A42B3C0000
|
unkown
|
page read and write
|
|
|
|
19FF2402000
|
unkown
|
page read and write
|
|
|
|
7FF5EB109000
|
unkown
|
page readonly
|
|
|
|
7FF59A5C9000
|
unkown
|
page readonly
|
|
|
|
247164B000
|
unkown
|
page read and write
|
|
|
|
7FFAEEBB2000
|
unkown
|
page read and write
|
|
|
|
7FF500FC9000
|
unkown
|
page readonly
|
|
|
|
7FF56A3E7000
|
unkown
|
page readonly
|
|
|
|
7FF505BBD000
|
unkown
|
page readonly
|
|
|
|
1A42C000000
|
unkown
|
page read and write
|
|
|
|
1FC11E02000
|
unkown
|
page read and write
|
|
|
|
7FF59A564000
|
unkown
|
page readonly
|
|
|
|
1A42B857000
|
unkown
|
page readonly
|
|
|
|
7FF505B7A000
|
unkown
|
page readonly
|
|
|
|
1A4145CF000
|
unkown
|
page read and write
|
|
|
|
7FF51B407000
|
unkown
|
page readonly
|
|
|
|
1A42B782000
|
unkown
|
page read and write
|
|
|
|
27F8BA3C000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF5EAE8F000
|
unkown
|
page readonly
|
|
|
|
24997EC4000
|
unkown
|
page read and write
|
|
|
|
1A42B427000
|
unkown
|
page read and write
|
|
|
|
2692E980000
|
unkown
|
page write copy
|
|
|
|
24998061000
|
unkown
|
page read and write
|
|
|
|
7FF5368A6000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF59A4C2000
|
unkown
|
page readonly
|
|
|
|
7FF5A43BA000
|
unkown
|
page readonly
|
|
|
|
7FFAEEED0000
|
unkown
|
page read and write
|
|
|
|
24997FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5EB059000
|
unkown
|
page readonly
|
|
|
|
B132DFE000
|
unkown
|
page read and write
|
|
|
|
7FFAEEE34000
|
unkown
|
page read and write
|
|
|
|
1A42B42D000
|
unkown
|
page read and write
|
|
|
|
7FF5059DF000
|
unkown
|
page readonly
|
|
|
|
24998250000
|
unkown
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
1A42B501000
|
unkown
|
page read and write
|
|
|
|
7FF590801000
|
unkown
|
page readonly
|
|
|
|
7FF500E68000
|
unkown
|
page readonly
|
|
|
|
24993159000
|
unkown
|
page read and write
|
|
|
|
7FF51B3B9000
|
unkown
|
page readonly
|
|
|
|
18B675A0000
|
unkown
|
page read and write
|
|
|
|
7FF5A445C000
|
unkown
|
page readonly
|
|
|
|
1A42B276000
|
unkown
|
page read and write
|
|
|
|
7FF500CD4000
|
unkown
|
page readonly
|
|
|
|
7FF51B3D6000
|
unkown
|
page readonly
|
|
|
|
7FF5906D7000
|
unkown
|
page readonly
|
|
|
|
24992A56000
|
unkown
|
page read and write
|
|
|
|
24997EE0000
|
unkown
|
page read and write
|
|
|
|
7FF51A715000
|
unkown
|
page readonly
|
|
|
|
7FF5638EE000
|
unkown
|
page readonly
|
|
|
|
7FF54AB51000
|
unkown
|
page readonly
|
|
|
|
1A413B1D000
|
unkown
|
page read and write
|
|
|
|
1FC13A80000
|
unkown
|
page readonly
|
|
|
|
19FF2445000
|
unkown
|
page read and write
|
|
|
|
23C0426F000
|
unkown
|
page read and write
|
|
|
|
7FF503D52000
|
unkown
|
page readonly
|
|
|
|
7FF54AA78000
|
unkown
|
page readonly
|
|
|
|
23BCB3A0000
|
unkown
|
page read and write
|
|
|
|
7FF563876000
|
unkown
|
page readonly
|
|
|
|
B132FFF000
|
unkown
|
page read and write
|
|
|
|
7DFC066FD000
|
unkown
|
page readonly
|
|
|
|
7FF536890000
|
unkown
|
page readonly
|
|
|
|
7FF50074D000
|
unkown
|
page readonly
|
|
|
|
36F097E000
|
unkown
|
page read and write
|
|
|
|
1A42B510000
|
unkown
|
page read and write
|
|
|
|
CC059EF000
|
unkown
|
page read and write
|
|
|
|
1A411120000
|
unkown
|
page read and write
|
|
|
|
1A42B413000
|
unkown
|
page read and write
|
|
|
|
C72000
|
unkown image
|
page readonly
|
|
|
|
1A42B1B0000
|
unkown
|
page read and write
|
|
|
|
1DC42A40000
|
unkown
|
page read and write
|
|
|
|
1A42B406000
|
unkown
|
page read and write
|
|
|
|
23C04170000
|
heap private
|
page read and write
|
|
|
|
7FF503CF9000
|
unkown
|
page readonly
|
|
|
|
7FF54AB2C000
|
unkown
|
page readonly
|
|
|
|
7FF7E3D60000
|
unkown image
|
page readonly
|
|
|
|
7FF590795000
|
unkown
|
page readonly
|
|
|
|
7FF503CB6000
|
unkown
|
page readonly
|
|
|
|
19FF2454000
|
unkown
|
page read and write
|
|
|
|
24992FA0000
|
unkown
|
page read and write
|
|
|
|
80EFFF000
|
unkown
|
page read and write
|
|
|
|
7FF589807000
|
unkown
|
page readonly
|
|
|
|
1605000
|
heap default
|
page read and write
|
|
|
|
7FF51B3EC000
|
unkown
|
page readonly
|
|
|
|
7FFAEEAA6000
|
unkown
|
page read and write
|
|
|
|
7FF6FE12C000
|
unkown image
|
page readonly
|
|
|
|
1A414412000
|
unkown
|
page read and write
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
4642FF000
|
unkown
|
page read and write
|
|
|
|
23BCB3A0000
|
unkown
|
page read and write
|
|
|
|
7FF56A6D0000
|
unkown
|
page readonly
|
|
|
|
7FF5EB0FE000
|
unkown
|
page readonly
|
|
|
|
7FF5366BA000
|
unkown
|
page readonly
|
|
|
|
1F9538C0000
|
unkown
|
page write copy
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
24997ED0000
|
unkown
|
page read and write
|
|
|
|
23A00B40000
|
unkown
|
page readonly
|
|
|
|
1F9538B0000
|
unkown
|
page readonly
|
|
|
|
7FF5A4477000
|
unkown
|
page readonly
|
|
|
|
24998300000
|
unkown
|
page readonly
|
|
|
|
1CC7A302000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF5EB0A0000
|
unkown
|
page readonly
|
|
|
|
1EA21550000
|
unkown
|
page readonly
|
|
|
|
23C041F0000
|
unkown
|
page readonly
|
|
|
|
24997FF0000
|
unkown
|
page read and write
|
|
|
|
2692EA68000
|
unkown
|
page read and write
|
|
|
|
7FF505C51000
|
unkown
|
page readonly
|
|
|
|
1A42B3C0000
|
unkown
|
page read and write
|
|
|
|
4C4517E000
|
unkown
|
page read and write
|
|
|
|
7FF563573000
|
unkown
|
page readonly
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
2499803C000
|
unkown
|
page read and write
|
|
|
|
1A42C020000
|
unkown
|
page read and write
|
|
|
|
1A413891000
|
unkown
|
page read and write
|
|
|
|
1A42B3C0000
|
unkown
|
page read and write
|
|
|
|
7FF56A5E7000
|
unkown
|
page readonly
|
|
|
|
7FF5EAC43000
|
unkown
|
page readonly
|
|
|
|
7FF5897EC000
|
unkown
|
page readonly
|
|
|
|
24998015000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1FC13DC0000
|
unkown
|
page write copy
|
|
|
|
B13277C000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF51B372000
|
unkown
|
page readonly
|
|
|
|
7FF54862C000
|
unkown
|
page readonly
|
|
|
|
1A412D20000
|
unkown
|
page readonly
|
|
|
|
1550000
|
heap default
|
page read and write
|
|
|
|
7FF56A3F5000
|
unkown
|
page readonly
|
|
|
|
C72000
|
unkown image
|
page readonly
|
|
|
|
4C44C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5907A7000
|
unkown
|
page readonly
|
|
|
|
1DA61B10000
|
unkown
|
page readonly
|
|
|
|
7FFAEEC60000
|
unkown
|
page read and write
|
|
|
|
1A42C130000
|
unkown
|
page read and write
|
|
|
|
1A42B500000
|
unkown
|
page read and write
|
|
|
|
23C0422A000
|
unkown
|
page read and write
|
|
|
|
7FF57452E000
|
unkown
|
page readonly
|
|
|
|
7FF59A531000
|
unkown
|
page readonly
|
|
|
|
19FF7D000
|
unkown
|
page read and write
|
|
|
|
1A42AF47000
|
unkown
|
page read and write
|
|
|
|
1A42B3B1000
|
unkown
|
page read and write
|
|
|
|
1520000
|
unkown
|
page read and write
|
|
|
|
19FF2479000
|
unkown
|
page read and write
|
|
|
|
7FF51B280000
|
unkown
|
page readonly
|
|
|
|
23C04C00000
|
unkown
|
page readonly
|
|
|
|
1B3CD6A0000
|
unkown
|
page read and write
|
|
|
|
23C04313000
|
unkown
|
page read and write
|
|
|
|
14B33440000
|
unkown
|
page read and write
|
|
|
|
7FF59A505000
|
unkown
|
page readonly
|
|
|
|
7FF51B194000
|
unkown
|
page readonly
|
|
|
|
19FF244F000
|
unkown
|
page read and write
|
|
|
|
7FF505BDC000
|
unkown
|
page readonly
|
|
|
|
1A00000
|
unkown
|
page readonly
|
|
|
|
7FF563090000
|
unkown
|
page readonly
|
|
|
|
7FF54A84E000
|
unkown
|
page readonly
|
|
|
|
133C3000
|
unkown
|
page read and write
|
|
|
|
D35BDFC000
|
unkown
|
page read and write
|
|
|
|
53FA7F000
|
unkown
|
page read and write
|
|
|
|
7FF5EB03E000
|
unkown
|
page readonly
|
|
|
|
7FF536937000
|
unkown
|
page readonly
|
|
|
|
1A42C130000
|
unkown
|
page read and write
|
|
|
|
1A413995000
|
unkown
|
page read and write
|
|
|
|
C485F7F000
|
unkown
|
page read and write
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
1A413AB5000
|
unkown
|
page read and write
|
|
|
|
7FF57DBEE000
|
unkown
|
page readonly
|
|
|
|
7FF59A4EA000
|
unkown
|
page readonly
|
|
|
|
1A414758000
|
unkown
|
page read and write
|
|
|
|
7FF57419D000
|
unkown
|
page readonly
|
|
|
|
7FF54A888000
|
unkown
|
page readonly
|
|
|
|
7FF51B277000
|
unkown
|
page readonly
|
|
|
|
24997EA8000
|
unkown
|
page read and write
|
|
|
|
15BB000
|
heap default
|
page read and write
|
|
|
|
7FF56A739000
|
unkown
|
page readonly
|
|
|
|
23BCB6D0000
|
unkown
|
page readonly
|
|
|
|
23C044D0000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF54DE9E000
|
unkown
|
page readonly
|
|
|
|
18B658D0000
|
unkown
|
page write copy
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
7FF535D9A000
|
unkown
|
page readonly
|
|
|
|
7FF536999000
|
unkown
|
page readonly
|
|
|
|
1A412EB0000
|
unkown
|
page read and write
|
|
|
|
1A42B720000
|
unkown
|
page readonly
|
|
|
|
19FF2430000
|
unkown
|
page read and write
|
|
|
|
1A4146DD000
|
unkown
|
page read and write
|
|
|
|
23A00F30000
|
unkown
|
page readonly
|
|
|
|
1A42B2A9000
|
unkown
|
page read and write
|
|
|
|
24715CC000
|
unkown
|
page read and write
|
|
|
|
24992A25000
|
unkown
|
page read and write
|
|
|
|
7FFAEEE50000
|
unkown
|
page read and write
|
|
|
|
12F701F0000
|
heap default
|
page read and write
|
|
|
|
7FF54DF07000
|
unkown
|
page readonly
|
|
|
|
7FFAEED50000
|
unkown
|
page read and write
|
|
|
|
1A42B418000
|
unkown
|
page read and write
|
|
|
|
1E556240000
|
unkown
|
page readonly
|
|
|
|
7FF51B362000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF563765000
|
unkown
|
page readonly
|
|
|
|
7FFAEEB30000
|
unkown
|
page execute and read and write
|
|
|
|
7FF548410000
|
unkown
|
page readonly
|
|
|
|
24992AB2000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
1A414626000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
7FF589776000
|
unkown
|
page readonly
|
|
|
|
1E5563E4000
|
heap private
|
page read and write
|
|
|
|
1DA6157A000
|
heap default
|
page read and write
|
|
|
|
7FF51A7D9000
|
unkown
|
page readonly
|
|
|
|
7FF56A6C5000
|
unkown
|
page readonly
|
|
|
|
7FF6FE100000
|
unkown image
|
page readonly
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FFAEEE48000
|
unkown
|
page read and write
|
|
|
|
1F953400000
|
unkown
|
page readonly
|
|
|
|
7FF51B28C000
|
unkown
|
page readonly
|
|
|
|
18B6770A000
|
unkown
|
page read and write
|
|
|
|
1DC42DE0000
|
heap private
|
page read and write
|
|
|
|
7FF5A44DE000
|
unkown
|
page readonly
|
|
|
|
19FF2483000
|
unkown
|
page read and write
|
|
|
|
1A42B3B1000
|
unkown
|
page read and write
|
|
|
|
7FF562DB9000
|
unkown
|
page readonly
|
|
|
|
7FF503CCA000
|
unkown
|
page readonly
|
|
|
|
CE07F1B000
|
unkown
|
page read and write
|
|
|
|
7FFAEEA2D000
|
unkown
|
page execute and read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF53698E000
|
unkown
|
page readonly
|
|
|
|
1A42B409000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FFAEECC0000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF5EB06D000
|
unkown
|
page readonly
|
|
|
|
7FF56A6C7000
|
unkown
|
page readonly
|
|
|
|
C70000
|
unkown image
|
page readonly
|
|
|
|
7FFAEED30000
|
unkown
|
page read and write
|
|
|
|
7FF59A243000
|
unkown
|
page readonly
|
|
|
|
7FF56A547000
|
unkown
|
page readonly
|
|
|
|
1A42B520000
|
unkown
|
page read and write
|
|
|
|
7FF563802000
|
unkown
|
page readonly
|
|
|
|
1A42C000000
|
unkown
|
page readonly
|
|
|
|
23520270000
|
unkown
|
page read and write
|
|
|
|
24997EA0000
|
unkown
|
page read and write
|
|
|
|
1DA62FF0000
|
heap private
|
page read and write
|
|
|
|
7FF505760000
|
unkown
|
page readonly
|
|
|
|
7FF54AC09000
|
unkown
|
page readonly
|
|
|
|
7FFAEEDE0000
|
unkown
|
page read and write
|
|
|
|
7FF7E3D60000
|
unkown image
|
page readonly
|
|
|
|
B26E7CE000
|
unkown
|
page read and write
|
|
|
|
1A42B35D000
|
unkown
|
page read and write
|
|
|
|
1A412970000
|
unkown
|
page readonly
|
|
|
|
1A42B540000
|
unkown
|
page read and write
|
|
|
|
1BAA2C00000
|
unkown
|
page read and write
|
|
|
|
24997EE4000
|
unkown
|
page read and write
|
|
|
|
7FF7E3D60000
|
unkown image
|
page readonly
|
|
|
|
7FF562CC6000
|
unkown
|
page readonly
|
|
|
|
7FF5368CE000
|
unkown
|
page readonly
|
|
|
|
2692EA6A000
|
unkown
|
page read and write
|
|
|
|
19FF2290000
|
heap default
|
page read and write
|
|
|
|
7FF5637F2000
|
unkown
|
page readonly
|
|
|
|
1B3CD9A5000
|
heap private
|
page read and write
|
|
|
|
7FF54A9EC000
|
unkown
|
page readonly
|
|
|
|
23F816C0000
|
heap private
|
page read and write
|
|
|
|
27F8BA7B000
|
unkown
|
page read and write
|
|
|
|
1A42B3C0000
|
unkown
|
page read and write
|
|
|
|
7FF59A4D6000
|
unkown
|
page readonly
|
|
|
|
7FF7E3D61000
|
unkown image
|
page execute read
|
|
|
|
C485DF9000
|
unkown
|
page read and write
|
|
|
|
2692EA6A000
|
unkown
|
page read and write
|
|
|
|
7FF68606C000
|
unkown image
|
page readonly
|
|
|
|
7FF563369000
|
unkown
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
7FF54A96E000
|
unkown
|
page readonly
|
|
|
|
1BAA4670000
|
unkown
|
page read and write
|
|
|
|
7FF7E3DA0000
|
unkown image
|
page write copy
|
|
|
|
7FF5EB012000
|
unkown
|
page readonly
|
|
|
|
7FF686040000
|
unkown image
|
page readonly
|
|
|
|
1A42B500000
|
unkown
|
page readonly
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B3D1000
|
unkown
|
page read and write
|
|
|
|
7FF54DBD7000
|
unkown
|
page readonly
|
|
|
|
7FF5EAFF8000
|
unkown
|
page readonly
|
|
|
|
7FF5481E1000
|
unkown
|
page readonly
|
|
|
|
1A42AEE0000
|
unkown
|
page write copy
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF59A24C000
|
unkown
|
page readonly
|
|
|
|
7FF54A975000
|
unkown
|
page readonly
|
|
|
|
1FC13802000
|
unkown
|
page read and write
|
|
|
|
7FF574535000
|
unkown
|
page readonly
|
|
|
|
7FF54ABC2000
|
unkown
|
page readonly
|
|
|
|
24997EC0000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF505B68000
|
unkown
|
page readonly
|
|
|
|
81BFCFE000
|
unkown
|
page read and write
|
|
|
|
7FF500FEC000
|
unkown
|
page readonly
|
|
|
|
27F8BA00000
|
unkown
|
page read and write
|
|
|
|
1DA614D0000
|
unkown
|
page read and write
|
|
|
|
1A42B94A000
|
unkown
|
page readonly
|
|
|
|
1A42B002000
|
unkown
|
page read and write
|
|
|
|
7FF5897F7000
|
unkown
|
page readonly
|
|
|
|
7FF563640000
|
unkown
|
page readonly
|
|
|
|
4643FE000
|
unkown
|
page read and write
|
|
|
|
7FF5EAFEC000
|
unkown
|
page readonly
|
|
|
|
18B67602000
|
unkown
|
page read and write
|
|
|
|
7FF505A6D000
|
unkown
|
page readonly
|
|
|
|
1A4111CD000
|
unkown
|
page read and write
|
|
|
|
1A42B401000
|
unkown
|
page read and write
|
|
|
|
7FF59A54C000
|
unkown
|
page readonly
|
|
|
|
7FF5744E4000
|
unkown
|
page readonly
|
|
|
|
247154B000
|
unkown
|
page read and write
|
|
|
|
1A422F42000
|
unkown
|
page read and write
|
|
|
|
1A414874000
|
unkown
|
page read and write
|
|
|
|
7FFAEED10000
|
unkown
|
page read and write
|
|
|
|
1A414795000
|
unkown
|
page read and write
|
|
|
|
7FF500CE3000
|
unkown
|
page readonly
|
|
|
|
1A42C020000
|
unkown
|
page read and write
|
|
|
|
1A42B257000
|
unkown
|
page read and write
|
|
|
|
1A42C060000
|
unkown
|
page readonly
|
|
|
|
1A42C090000
|
unkown
|
page read and write
|
|
|
|
7FF563849000
|
unkown
|
page readonly
|
|
|
|
133C1000
|
unkown
|
page read and write
|
|
|
|
1A42B258000
|
unkown
|
page read and write
|
|
|
|
2692ECD0000
|
unkown
|
page readonly
|
|
|
|
1A42B37D000
|
unkown
|
page read and write
|
|
|
|
7FF51B3D1000
|
unkown
|
page readonly
|
|
|
|
7FF563866000
|
unkown
|
page readonly
|
|
|
|
7FF686041000
|
unkown image
|
page execute read
|
|
|
|
2692EA6E000
|
unkown
|
page read and write
|
|
|
|
1A42B430000
|
unkown
|
page read and write
|
|
|
|
18B65655000
|
unkown
|
page read and write
|
|
|
|
1EA21200000
|
heap private
|
page read and write
|
|
|
|
7FF5638F1000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF54AA89000
|
unkown
|
page readonly
|
|
|
|
7FF54DE78000
|
unkown
|
page readonly
|
|
|
|
23F814B0000
|
heap default
|
page read and write
|
|
|
|
7FF589772000
|
unkown
|
page readonly
|
|
|
|
1A42B550000
|
unkown
|
page read and write
|
|
|
|
1BAA2C3F000
|
unkown
|
page read and write
|
|
|
|
7FF5485EF000
|
unkown
|
page readonly
|
|
|
|
1FC11E40000
|
unkown
|
page read and write
|
|
|
|
247194B000
|
unkown
|
page read and write
|
|
|
|
7FF548598000
|
unkown
|
page readonly
|
|
|
|
7FF5481E5000
|
unkown
|
page readonly
|
|
|
|
24993770000
|
unkown
|
page read and write
|
|
|
|
14B33350000
|
unkown
|
page readonly
|
|
|
|
1890000
|
unkown
|
page read and write
|
|
|
|
18B655D0000
|
heap default
|
page read and write
|
|
|
|
1A42B85D000
|
unkown
|
page readonly
|
|
|
|
1A42B30F000
|
unkown
|
page read and write
|
|
|
|
DB513AF000
|
unkown
|
page read and write
|
|
|
|
1A42B781000
|
unkown
|
page read and write
|
|
|
|
7DF473A30000
|
unkown
|
page execute and read and write
|
|
|
|
1A42AF97000
|
unkown
|
page read and write
|
|
|
|
7FF5A43F2000
|
unkown
|
page readonly
|
|
|
|
7FF505BF4000
|
unkown
|
page readonly
|
|
|
|
7FFAEEF00000
|
unkown
|
page read and write
|
|
|
|
1E556440000
|
heap default
|
page read and write
|
|
|
|
1FC11C90000
|
unkown
|
page readonly
|
|
|
|
7FF53691C000
|
unkown
|
page readonly
|
|
|
|
23521C80000
|
heap private
|
page read and write
|
|
|
|
24701EE000
|
unkown
|
page read and write
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
1FC11DF0000
|
unkown
|
page readonly
|
|
|
|
19FF2464000
|
unkown
|
page read and write
|
|
|
|
7FF574592000
|
unkown
|
page readonly
|
|
|
|
1BAA2C6D000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page readonly
|
|
|
|
7FF574360000
|
unkown
|
page readonly
|
|
|
|
7FF686080000
|
unkown image
|
page write copy
|
|
|
|
19FF2462000
|
unkown
|
page read and write
|
|
|
|
7FF56A3A3000
|
unkown
|
page readonly
|
|
|
|
7FF5EB002000
|
unkown
|
page readonly
|
|
|
|
1A4110C0000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
1A42B40F000
|
unkown
|
page read and write
|
|
|
|
7FF54ABF5000
|
unkown
|
page readonly
|
|
|
|
7FF574566000
|
unkown
|
page readonly
|
|
|
|
18B67800000
|
unkown
|
page readonly
|
|
|
|
7FF548635000
|
unkown
|
page readonly
|
|
|
|
12F70110000
|
unkown
|
page read and write
|
|
|
|
7FF59A4FE000
|
unkown
|
page readonly
|
|
|
|
2692EB13000
|
unkown
|
page read and write
|
|
|
|
1A42B510000
|
unkown
|
page read and write
|
|
|
|
7FF51AFCE000
|
unkown
|
page readonly
|
|
|
|
1A4138A2000
|
unkown
|
page read and write
|
|
|
|
7FFAEEAD6000
|
unkown
|
page execute and read and write
|
|
|
|
1A42C047000
|
unkown
|
page read and write
|
|
|
|
7FFAEEC50000
|
unkown
|
page read and write
|
|
|
|
7FF5A42D8000
|
unkown
|
page readonly
|
|
|
|
81BFF7D000
|
unkown
|
page read and write
|
|
|
|
1A42B5C0000
|
unkown
|
page readonly
|
|
|
|
1A42B770000
|
unkown
|
page read and write
|
|
|
|
8705B7E000
|
unkown
|
page read and write
|
|
|
|
7FF5638F9000
|
unkown
|
page readonly
|
|
|
|
7FF54A9F8000
|
unkown
|
page readonly
|
|
|
|
4C4567F000
|
unkown
|
page read and write
|
|
|
|
23C04930000
|
unkown
|
page read and write
|
|
|
|
7FFAEEE10000
|
unkown
|
page read and write
|
|
|
|
1A42C000000
|
unkown
|
page read and write
|
|
|
|
DAA8BFE000
|
unkown
|
page read and write
|
|
|
|
18B675A0000
|
unkown
|
page read and write
|
|
|
|
1B3CD6D9000
|
heap default
|
page read and write
|
|
|
|
7FF500F4C000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF590809000
|
unkown
|
page readonly
|
|
|
|
1A42AFB3000
|
unkown
|
page read and write
|
|
|
|
1A42362F000
|
unkown
|
page read and write
|
|
|
|
23A026D0000
|
unkown
|
page readonly
|
|
|
|
19D0000
|
unkown
|
page readonly
|
|
|
|
7FF54DEE6000
|
unkown
|
page readonly
|
|
|
|
1E556370000
|
unkown
|
page read and write
|
|
|
|
7FF5485B6000
|
unkown
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
7FF5897D6000
|
unkown
|
page readonly
|
|
|
|
7FF54AA5E000
|
unkown
|
page readonly
|
|
|
|
81C00FD000
|
unkown
|
page read and write
|
|
|
|
7FF59A572000
|
unkown
|
page readonly
|
|
|
|
1A42B5E0000
|
unkown
|
page readonly
|
|
|
|
7FF7E3D60000
|
unkown image
|
page readonly
|
|
|
|
1DC42DF0000
|
unkown
|
page readonly
|
|
|
|
1A42C070000
|
unkown
|
page readonly
|
|
|
|
1A4133CC000
|
unkown
|
page read and write
|
|
|
|
B132CFC000
|
unkown
|
page read and write
|
|
|
|
24709FE000
|
unkown
|
page read and write
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
1A4142FE000
|
unkown
|
page read and write
|
|
|
|
7FF54860D000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
24993CF0000
|
unkown
|
page read and write
|
|
|
|
7FF54ACB9000
|
unkown
|
page readonly
|
|
|
|
7FFAEEAD0000
|
unkown
|
page execute and read and write
|
|
|
|
24998021000
|
unkown
|
page read and write
|
|
|
|
19FF2469000
|
unkown
|
page read and write
|
|
|
|
3B2EC7E000
|
unkown
|
page read and write
|
|
|
|
12F70140000
|
unkown
|
page read and write
|
|
|
|
18B675D0000
|
unkown
|
page readonly
|
|
|
|
7FF57437F000
|
unkown
|
page readonly
|
|
|
|
1A00FF000
|
unkown
|
page read and write
|
|
|
|
23C0424F000
|
unkown
|
page read and write
|
|
|
|
158D000
|
heap default
|
page read and write
|
|
|
|
7FFAEEDB0000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
12F701FB000
|
heap default
|
page read and write
|
|
|
|
32B0000
|
heap private
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
1CC7A276000
|
unkown
|
page read and write
|
|
|
|
7FF57422A000
|
unkown
|
page readonly
|
|
|
|
7FF54ABB2000
|
unkown
|
page readonly
|
|
|
|
1A4146A0000
|
unkown
|
page read and write
|
|
|
|
7FF686080000
|
unkown image
|
page read and write
|
|
|
|
7FF51B34C000
|
unkown
|
page readonly
|
|
|
|
81BFBFE000
|
unkown
|
page read and write
|
|
|
|
7FF51B33A000
|
unkown
|
page readonly
|
|
|
|
19FF2230000
|
heap private
|
page read and write
|
|
|
|
7FF5A4466000
|
unkown
|
page readonly
|
|
|
|
1A42B41A000
|
unkown
|
page read and write
|
|
|
|
18B67520000
|
unkown
|
page read and write
|
|
|
|
1A42B348000
|
unkown
|
page read and write
|
|
|
|
CE084FE000
|
unkown
|
page read and write
|
|
|
|
7FF50574A000
|
unkown
|
page readonly
|
|
|
|
4C456FF000
|
unkown
|
page read and write
|
|
|
|
1A41429E000
|
unkown
|
page read and write
|
|
|
|
1FC11E8F000
|
unkown
|
page read and write
|
|
|
|
F2DC5FE000
|
unkown
|
page read and write
|
|
|
|
7FF548647000
|
unkown
|
page readonly
|
|
|
|
7FF51B358000
|
unkown
|
page readonly
|
|
|
|
1A42B750000
|
unkown
|
page read and write
|
|
|
|
7FF56357C000
|
unkown
|
page readonly
|
|
|
|
1BAA2D02000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF5486A9000
|
unkown
|
page readonly
|
|
|
|
1FC137A0000
|
unkown
|
page read and write
|
|
|
|
7FF5742B5000
|
unkown
|
page readonly
|
|
|
|
2692E970000
|
heap default
|
page read and write
|
|
|
|
7FF5485E5000
|
unkown
|
page readonly
|
|
|
|
7FF590718000
|
unkown
|
page readonly
|
|
|
|
7FF5482DE000
|
unkown
|
page readonly
|
|
|
|
1BAA2B70000
|
unkown
|
page write copy
|
|
|
|
7FFAEEDCA000
|
unkown
|
page read and write
|
|
|
|
19FB4B000
|
unkown
|
page read and write
|
|
|
|
1A42B35D000
|
unkown
|
page read and write
|
|
|
|
1F9530C0000
|
heap private
|
page read and write
|
|
|
|
14B33450000
|
unkown
|
page read and write
|
|
|
|
1A423649000
|
unkown
|
page read and write
|
|
|
|
7FF574502000
|
unkown
|
page readonly
|
|
|
|
7FF57DC24000
|
unkown
|
page readonly
|
|
|
|
1A42B226000
|
unkown
|
page read and write
|
|
|
|
1B3CD540000
|
unkown
|
page readonly
|
|
|
|
12F702F0000
|
unkown
|
page readonly
|
|
|
|
1890000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
2692EA69000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
7FF54AB97000
|
unkown
|
page readonly
|
|
|
|
7FF500FF6000
|
unkown
|
page readonly
|
|
|
|
24992B13000
|
unkown
|
page read and write
|
|
|
|
B132BFB000
|
unkown
|
page read and write
|
|
|
|
1CC7A313000
|
unkown
|
page read and write
|
|
|
|
4C4507A000
|
unkown
|
page read and write
|
|
|
|
24992C00000
|
unkown
|
page readonly
|
|
|
|
1A42B41A000
|
unkown
|
page read and write
|
|
|
|
1F9532C7000
|
unkown
|
page read and write
|
|
|
|
7FF500F27000
|
unkown
|
page readonly
|
|
|
|
7FF54DC30000
|
unkown
|
page readonly
|
|
|
|
870555C000
|
unkown
|
page read and write
|
|
|
|
1BAA2C6D000
|
unkown
|
page read and write
|
|
|
|
23BCB370000
|
unkown
|
page read and write
|
|
|
|
7FF54ABB0000
|
unkown
|
page readonly
|
|
|
|
7FF54A830000
|
unkown
|
page readonly
|
|
|
|
7FF589525000
|
unkown
|
page readonly
|
|
|
|
14F7000
|
unkown
|
page read and write
|
|
|
|
1A42C000000
|
unkown
|
page read and write
|
|
|
|
1B93D000
|
unkown
|
page read and write
|
|
|
|
1BAA2BC0000
|
unkown
|
page readonly
|
|
|
|
235202A0000
|
unkown
|
page read and write
|
|
|
|
7FF5368FD000
|
unkown
|
page readonly
|
|
|
|
249980B7000
|
unkown
|
page read and write
|
|
|
|
1A4137CB000
|
unkown
|
page read and write
|
|
|
|
7FF59A56D000
|
unkown
|
page readonly
|
|
|
|
1A42C000000
|
unkown
|
page read and write
|
|
|
|
1FC12390000
|
unkown
|
page readonly
|
|
|
|
23520140000
|
unkown
|
page readonly
|
|
|
|
7FF59A519000
|
unkown
|
page readonly
|
|
|
|
7FF5903C7000
|
unkown
|
page readonly
|
|
|
|
7FF5481E3000
|
unkown
|
page readonly
|
|
|
|
7FF56A394000
|
unkown
|
page readonly
|
|
|
|
1A411116000
|
heap private
|
page read and write
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
1A42B265000
|
unkown
|
page read and write
|
|
|
|
1A4139CD000
|
unkown
|
page read and write
|
|
|
|
7FF5637D7000
|
unkown
|
page readonly
|
|
|
|
1A4144C4000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
23C0423C000
|
unkown
|
page read and write
|
|
|
|
1B3CD5A0000
|
unkown
|
page execute and read and write
|
|
|
|
1A42B427000
|
unkown
|
page read and write
|
|
|
|
7FF56A72E000
|
unkown
|
page readonly
|
|
|
|
7FF5A43F6000
|
unkown
|
page readonly
|
|
|
|
1F953302000
|
unkown
|
page read and write
|
|
|
|
18B65629000
|
unkown
|
page read and write
|
|
|
|
3B2E9FE000
|
unkown
|
page read and write
|
|
|
|
7FF548616000
|
unkown
|
page readonly
|
|
|
|
7FFAEEBA1000
|
unkown
|
page read and write
|
|
|
|
7FF501079000
|
unkown
|
page readonly
|
|
|
|
1A42B41A000
|
unkown
|
page read and write
|
|
|
|
7FF56A543000
|
unkown
|
page readonly
|
|
|
|
19FF244B000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
1A414402000
|
unkown
|
page read and write
|
|
|
|
C485D7E000
|
unkown
|
page read and write
|
|
|
|
1A42C000000
|
unkown
|
page read and write
|
|
|
|
1A42B37B000
|
unkown
|
page read and write
|
|
|
|
24993118000
|
unkown
|
page read and write
|
|
|
|
7FF563794000
|
unkown
|
page readonly
|
|
|
|
7FFAEEEE0000
|
unkown
|
page read and write
|
|
|
|
19FF245D000
|
unkown
|
page read and write
|
|
|
|
7FF574398000
|
unkown
|
page readonly
|
|
|
|
7FF563707000
|
unkown
|
page readonly
|
|
|
|
7FF536906000
|
unkown
|
page readonly
|
|
|
|
7FF56359B000
|
unkown
|
page readonly
|
|
|
|
7FF5EB02A000
|
unkown
|
page readonly
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF54A980000
|
unkown
|
page readonly
|
|
|
|
7FF7E3DA4000
|
unkown image
|
page readonly
|
|
|
|
23BCB402000
|
unkown
|
page read and write
|
|
|
|
7FFAEEAA0000
|
unkown
|
page read and write
|
|
|
|
7FF505B9F000
|
unkown
|
page readonly
|
|
|
|
7FF57456C000
|
unkown
|
page readonly
|
|
|
|
1DA613A0000
|
unkown
|
page readonly
|
|
|
|
7FF54ACB0000
|
unkown
|
page readonly
|
|
|
|
36F08FF000
|
unkown
|
page read and write
|
|
|
|
1A42B953000
|
unkown
|
page readonly
|
|
|
|
18B65570000
|
heap private
|
page read and write
|
|
|
|
1F953870000
|
unkown
|
page readonly
|
|
|
|
1A42B7B0000
|
unkown
|
page readonly
|
|
|
|
2692EC00000
|
unkown
|
page readonly
|
|
|
|
1BAA2C6D000
|
unkown
|
page read and write
|
|
|
|
7FF500F86000
|
unkown
|
page readonly
|
|
|
|
DAA875C000
|
unkown
|
page read and write
|
|
|
|
81BFE7E000
|
unkown
|
page read and write
|
|
|
|
1A42C020000
|
unkown
|
page read and write
|
|
|
|
7FF58978A000
|
unkown
|
page readonly
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
1A42B321000
|
unkown
|
page read and write
|
|
|
|
18B67530000
|
unkown
|
page readonly
|
|
|
|
7FF56A26D000
|
unkown
|
page readonly
|
|
|
|
1A42B030000
|
unkown
|
page readonly
|
|
|
|
2692EA6A000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
23A00CA0000
|
unkown
|
page read and write
|
|
|
|
24993102000
|
unkown
|
page read and write
|
|
|
|
53F77D000
|
unkown
|
page read and write
|
|
|
|
7FF500F9A000
|
unkown
|
page readonly
|
|
|
|
249982E0000
|
unkown
|
page readonly
|
|
|
|
1E556540000
|
unkown
|
page readonly
|
|
|
|
23BCB340000
|
heap default
|
page read and write
|
|
|
|
2692EA68000
|
unkown
|
page read and write
|
|
|
|
7FF5EADBE000
|
unkown
|
page readonly
|
|
|
|
7FF56A61C000
|
unkown
|
page readonly
|
|
|
|
1A42B25B000
|
unkown
|
page read and write
|
|
|
|
18B675A0000
|
unkown
|
page read and write
|
|
|
|
B549FE000
|
unkown
|
page read and write
|
|
|
|
24998320000
|
unkown
|
page readonly
|
|
|
|
1A410F33000
|
heap default
|
page read and write
|
|
|
|
7FF5485B8000
|
unkown
|
page readonly
|
|
|
|
1B3CD9A0000
|
heap private
|
page read and write
|
|
|
|
1FC11E5E000
|
unkown
|
page read and write
|
|
|
|
4C4547E000
|
unkown
|
page read and write
|
|
|
|
7FF5637A4000
|
unkown
|
page readonly
|
|
|
|
2692E910000
|
heap private
|
page read and write
|
|
|
|
19FF243D000
|
unkown
|
page read and write
|
|
|
|
7DF473A10000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5A44E1000
|
unkown
|
page readonly
|
|
|
|
1DA61720000
|
unkown
|
page readonly
|
|
|
|
4C459FF000
|
unkown
|
page read and write
|
|
|
|
7FF5EB08C000
|
unkown
|
page readonly
|
|
|
|
1DA614F0000
|
unkown
|
page read and write
|
|
|
|
7FF505ACC000
|
unkown
|
page readonly
|
|
|
|
7FF54ACB9000
|
unkown
|
page readonly
|
|
|
|
24992920000
|
unkown
|
page readonly
|
|
|
|
23BCB360000
|
unkown
|
page readonly
|
|
|
|
7FF56386C000
|
unkown
|
page readonly
|
|
|
|
12F6FFC0000
|
unkown
|
page readonly
|
|
|
|
7FF5368E9000
|
unkown
|
page readonly
|
|
|
|
7FF505BA9000
|
unkown
|
page readonly
|
|
|
|
24997FA8000
|
unkown
|
page write copy
|
|
|
|
1A414698000
|
unkown
|
page read and write
|
|
|
|
1A42B34F000
|
unkown
|
page read and write
|
|
|
|
181E000
|
unkown
|
page read and write
|
|
|
|
7FF51B404000
|
unkown
|
page readonly
|
|
|
|
7FF5A44E9000
|
unkown
|
page readonly
|
|
|
|
1A42B40B000
|
unkown
|
page read and write
|
|
|
|
24998200000
|
unkown
|
page read and write
|
|
|
|
7FF548626000
|
unkown
|
page readonly
|
|
|
|
1EA21210000
|
unkown
|
page readonly
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
1622000
|
heap default
|
page read and write
|
|
|
|
1A42B730000
|
unkown
|
page read and write
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
90360FF000
|
unkown
|
page read and write
|
|
|
|
1A414707000
|
unkown
|
page read and write
|
|
|
|
7FF51A7D1000
|
unkown
|
page readonly
|
|
|
|
19FF2461000
|
unkown
|
page read and write
|
|
|
|
7FFAEEF30000
|
unkown
|
page read and write
|
|
|
|
24997F94000
|
unkown
|
page readonly
|
|
|
|
1A42B308000
|
unkown
|
page read and write
|
|
|
|
7FF562E0E000
|
unkown
|
page readonly
|
|
|
|
7FF54DF69000
|
unkown
|
page readonly
|
|
|
|
7FF505750000
|
unkown
|
page readonly
|
|
|
|
24998240000
|
unkown
|
page readonly
|
|
|
|
7FF56A632000
|
unkown
|
page readonly
|
|
|
|
1A42B3C0000
|
unkown
|
page read and write
|
|
|
|
1EA21100000
|
unkown
|
page read and write
|
|
|
|
7FF54DEEC000
|
unkown
|
page readonly
|
|
|
|
7FF686040000
|
unkown image
|
page readonly
|
|
|
|
1A411160000
|
unkown
|
page read and write
|
|
|
|
7FF5A42F7000
|
unkown
|
page readonly
|
|
|
|
53FC7E000
|
unkown
|
page read and write
|
|
|
|
1A4111A0000
|
unkown
|
page read and write
|
|
|
|
27F8BB00000
|
unkown
|
page read and write
|
|
|
|
7FF50597A000
|
unkown
|
page readonly
|
|
|
|
7FF51B09E000
|
unkown
|
page readonly
|
|
|
|
1A42B41A000
|
unkown
|
page read and write
|
|
|
|
7FF6FE140000
|
unkown image
|
page read and write
|
|
|
|
7FF501007000
|
unkown
|
page readonly
|
|
|
|
7FF505A63000
|
unkown
|
page readonly
|
|
|
|
1A42B0A0000
|
unkown
|
page read and write
|
|
|
|
7FFAEED55000
|
unkown
|
page read and write
|
|
|
|
1BAA2C54000
|
unkown
|
page read and write
|
|
|
|
19FF2466000
|
unkown
|
page read and write
|
|
|
|
7FFAEEBF0000
|
unkown
|
page read and write
|
|
|
|
7FF57396C000
|
unkown
|
page readonly
|
|
|
|
7FF56A3EE000
|
unkown
|
page readonly
|
|
|
|
1A41462F000
|
unkown
|
page read and write
|
|
|
|
24993158000
|
unkown
|
page read and write
|
|
|
|
1C31E000
|
unkown
|
page read and write
|
|
|
|
7FF590700000
|
unkown
|
page readonly
|
|
|
|
7FF500FBF000
|
unkown
|
page readonly
|
|
|
|
23C04213000
|
unkown
|
page read and write
|
|
|
|
23A00BA0000
|
unkown
|
page execute and read and write
|
|
|
|
1A42B430000
|
unkown
|
page read and write
|
|
|
|
1DA61510000
|
unkown
|
page readonly
|
|
|
|
7FF505BF7000
|
unkown
|
page readonly
|
|
|
|
18B65719000
|
unkown
|
page read and write
|
|
|
|
7FF505A97000
|
unkown
|
page readonly
|
|
|
|
7FFAEEBE0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5634C4000
|
unkown
|
page readonly
|
|
|
|
1A42B510000
|
unkown
|
page read and write
|
|
|
|
7FF51B38A000
|
unkown
|
page readonly
|
|
|
|
7FF5368DF000
|
unkown
|
page readonly
|
|
|
|
19FF2446000
|
unkown
|
page read and write
|
|
|
|
7FF563703000
|
unkown
|
page readonly
|
|
|
|
27F8C400000
|
unkown
|
page readonly
|
|
|
|
23BCB350000
|
unkown
|
page readonly
|
|
|
|
3B2EF7A000
|
unkown
|
page read and write
|
|
|
|
7FF59A5C1000
|
unkown
|
page readonly
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
1A42B500000
|
unkown
|
page read and write
|
|
|
|
7FF56A66E000
|
unkown
|
page readonly
|
|
|
|
2692EA6B000
|
unkown
|
page read and write
|
|
|
|
19FF245D000
|
unkown
|
page read and write
|
|
|
|
1A4139F1000
|
unkown
|
page read and write
|
|
|
|
7FF548547000
|
unkown
|
page readonly
|
|
|
|
1880000
|
heap private
|
page execute and read and write
|
|
|
|
18B67733000
|
unkown
|
page read and write
|
|
|
|
7FF505BE5000
|
unkown
|
page readonly
|
|
|
|
9035EFE000
|
unkown
|
page read and write
|
|
|
|
7FFAEEBD4000
|
unkown
|
page read and write
|
|
|
|
7FF563563000
|
unkown
|
page readonly
|
|
|
|
1874000
|
unkown
|
page read and write
|
|
|
|
235202E0000
|
heap default
|
page read and write
|
|
|
|
18B675A0000
|
unkown
|
page read and write
|
|
|
|
3B2E97B000
|
unkown
|
page read and write
|
|
|
|
1A42B788000
|
unkown
|
page read and write
|
|
|
|
1A42C010000
|
unkown
|
page readonly
|
|
|
|
7FFAEEC20000
|
unkown
|
page read and write
|
|
|
|
7FF590702000
|
unkown
|
page readonly
|
|
|
|
1A42B3D1000
|
unkown
|
page read and write
|
|
|
|
1A42B580000
|
unkown
|
page read and write
|
|
|
|
7FF5A4456000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42C060000
|
unkown
|
page read and write
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
1FC11E5E000
|
unkown
|
page read and write
|
|
|
|
1A413A73000
|
unkown
|
page read and write
|
|
|
|
9035E7F000
|
unkown
|
page read and write
|
|
|
|
7FF5483D7000
|
unkown
|
page readonly
|
|
|
|
7FF5A43F8000
|
unkown
|
page readonly
|
|
|
|
1A42C000000
|
unkown
|
page read and write
|
|
|
|
7FF56A675000
|
unkown
|
page readonly
|
|
|
|
3B2F17E000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FFAEE9F3000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5907FE000
|
unkown
|
page readonly
|
|
|
|
19FF2400000
|
unkown
|
page read and write
|
|
|
|
23BCB3A0000
|
unkown
|
page read and write
|
|
|
|
1A42B781000
|
unkown
|
page read and write
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
7FF574549000
|
unkown
|
page readonly
|
|
|
|
24997F97000
|
unkown
|
page readonly
|
|
|
|
18B656A4000
|
unkown
|
page read and write
|
|
|
|
1A06FC000
|
unkown
|
page read and write
|
|
|
|
1A04FC000
|
unkown
|
page read and write
|
|
|
|
1A42B85A000
|
unkown
|
page readonly
|
|
|
|
7FF57DC7E000
|
unkown
|
page readonly
|
|
|
|
1FC11E00000
|
unkown
|
page read and write
|
|
|
|
18B6771D000
|
unkown
|
page read and write
|
|
|
|
7FF54A967000
|
unkown
|
page readonly
|
|
|
|
7FF562FCC000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B3C0000
|
unkown
|
page read and write
|
|
|
|
1A414650000
|
unkown
|
page read and write
|
|
|
|
7FF56A6A6000
|
unkown
|
page readonly
|
|
|
|
7FF505BC6000
|
unkown
|
page readonly
|
|
|
|
24992AFD000
|
unkown
|
page read and write
|
|
|
|
1FC11D60000
|
unkown
|
page readonly
|
|
|
|
1A42C080000
|
unkown
|
page read and write
|
|
|
|
7FFAEEA10000
|
unkown
|
page read and write
|
|
|
|
2692EA6C000
|
unkown
|
page read and write
|
|
|
|
7FF5A4487000
|
unkown
|
page readonly
|
|
|
|
7FF503D2C000
|
unkown
|
page readonly
|
|
|
|
1A423D04000
|
unkown
|
page read and write
|
|
|
|
7FF51B469000
|
unkown
|
page readonly
|
|
|
|
24993990000
|
unkown
|
page readonly
|
|
|
|
7FF54AB71000
|
unkown
|
page readonly
|
|
|
|
7FF573A00000
|
unkown
|
page readonly
|
|
|
|
7FF5485A0000
|
unkown
|
page readonly
|
|
|
|
14B335E0000
|
unkown
|
page readonly
|
|
|
|
24707F7000
|
unkown
|
page read and write
|
|
|
|
36F087C000
|
unkown
|
page read and write
|
|
|
|
1A42B2FD000
|
unkown
|
page read and write
|
|
|
|
1A42B33F000
|
unkown
|
page read and write
|
|
|
|
1A41440A000
|
unkown
|
page read and write
|
|
|
|
1A42B781000
|
unkown
|
page read and write
|
|
|
|
7FFAEEF10000
|
unkown
|
page execute and read and write
|
|
|
|
7FF59058F000
|
unkown
|
page readonly
|
|
|
|
7FF54AC21000
|
unkown
|
page readonly
|
|
|
|
24993100000
|
unkown
|
page read and write
|
|
|
|
7FF56A628000
|
unkown
|
page readonly
|
|
|
|
7FF5636E8000
|
unkown
|
page readonly
|
|
|
|
7FFAEEEF0000
|
unkown
|
page read and write
|
|
|
|
870587E000
|
unkown
|
page read and write
|
|
|
|
7FF5739FA000
|
unkown
|
page readonly
|
|
|
|
1CC7A200000
|
unkown
|
page read and write
|
|
|
|
7FF57DC89000
|
unkown
|
page readonly
|
|
|
|
DAE290B000
|
unkown
|
page read and write
|
|
|
|
24992A00000
|
unkown
|
page read and write
|
|
|
|
1A42B411000
|
unkown
|
page read and write
|
|
|
|
7FF5EB095000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF51B208000
|
unkown
|
page readonly
|
|
|
|
24993113000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
1A42B94F000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B78E000
|
unkown
|
page read and write
|
|
|
|
1897000
|
unkown
|
page read and write
|
|
|
|
7FF589869000
|
unkown
|
page readonly
|
|
|
|
CE087FD000
|
unkown
|
page read and write
|
|
|
|
7FFAEEC10000
|
unkown
|
page read and write
|
|
|
|
1A42B770000
|
unkown
|
page read and write
|
|
|
|
7FFAEECA0000
|
unkown
|
page read and write
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
7FF56A5AC000
|
unkown
|
page readonly
|
|
|
|
7FF5A4153000
|
unkown
|
page readonly
|
|
|
|
7FF5745F9000
|
unkown
|
page readonly
|
|
|
|
1F953B00000
|
unkown
|
page read and write
|
|
|
|
235203E0000
|
unkown
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
7FF56A6B6000
|
unkown
|
page readonly
|
|
|
|
7FF7E3DA0000
|
unkown image
|
page write copy
|
|
|
|
24992F90000
|
unkown
|
page readonly
|
|
|
|
7FF51A7D9000
|
unkown
|
page readonly
|
|
|
|
1F953313000
|
unkown
|
page read and write
|
|
|
|
1A410EF0000
|
heap default
|
page read and write
|
|
|
|
1A410E90000
|
unkown
|
page readonly
|
|
|
|
7FF5EB07C000
|
unkown
|
page readonly
|
|
|
|
7FF5A43A1000
|
unkown
|
page readonly
|
|
|
|
23C041D0000
|
heap default
|
page read and write
|
|
|
|
7FF5745EE000
|
unkown
|
page readonly
|
|
|
|
19FF245D000
|
unkown
|
page read and write
|
|
|
|
24992B02000
|
unkown
|
page read and write
|
|
|
|
1FC12000000
|
unkown
|
page readonly
|
|
|
|
24993002000
|
unkown
|
page read and write
|
|
|
|
2692EA68000
|
unkown
|
page read and write
|
|
|
|
7FFAEEC00000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF5A43FA000
|
unkown
|
page readonly
|
|
|
|
7FF5635A7000
|
unkown
|
page readonly
|
|
|
|
7FF56A617000
|
unkown
|
page readonly
|
|
|
|
7FF574324000
|
unkown
|
page readonly
|
|
|
|
18B675B0000
|
unkown
|
page readonly
|
|
|
|
2692EA6A000
|
unkown
|
page read and write
|
|
|
|
18B67540000
|
heap private
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
18B67700000
|
unkown
|
page read and write
|
|
|
|
7FF505C59000
|
unkown
|
page readonly
|
|
|
|
7FF5486A0000
|
unkown
|
page readonly
|
|
|
|
19FF246C000
|
unkown
|
page read and write
|
|
|
|
19FF2370000
|
unkown
|
page readonly
|
|
|
|
3B2EEFA000
|
unkown
|
page read and write
|
|
|
|
7FFAEEDC0000
|
unkown
|
page read and write
|
|
|
|
19FF244D000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
24993D00000
|
unkown
|
page read and write
|
|
|
|
19FF2600000
|
unkown
|
page readonly
|
|
|
|
7FFAEED20000
|
unkown
|
page read and write
|
|
|
|
1E55644B000
|
heap default
|
page read and write
|
|
|
|
1A42B3D1000
|
unkown
|
page read and write
|
|
|
|
7FF54A847000
|
unkown
|
page readonly
|
|
|
|
7FF5637BB000
|
unkown
|
page readonly
|
|
|
|
7FF589812000
|
unkown
|
page readonly
|
|
|
|
7FF51B3A5000
|
unkown
|
page readonly
|
|
|
|
1F9532CE000
|
unkown
|
page read and write
|
|
|
|
4C457F9000
|
unkown
|
page read and write
|
|
|
|
7FF54A049000
|
unkown
|
page readonly
|
|
|
|
CC058ED000
|
unkown
|
page read and write
|
|
|
|
1CC7A170000
|
unkown
|
page readonly
|
|
|
|
4C44F7D000
|
unkown
|
page read and write
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
1A41397B000
|
unkown
|
page read and write
|
|
|
|
7FF51AFD2000
|
unkown
|
page readonly
|
|
|
|
DB5132F000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF51B3CD000
|
unkown
|
page readonly
|
|
|
|
1A42B35D000
|
unkown
|
page read and write
|
|
|
|
DAA8AFF000
|
unkown
|
page read and write
|
|
|
|
1DA632E0000
|
heap private
|
page read and write
|
|
|
|
23BCB413000
|
unkown
|
page read and write
|
|
|
|
7FF54AB93000
|
unkown
|
page readonly
|
|
|
|
1A412EC0000
|
unkown
|
page read and write
|
|
|
|
24997D90000
|
unkown
|
page read and write
|
|
|
|
7FF51B1EF000
|
unkown
|
page readonly
|
|
|
|
7FF56A5F1000
|
unkown
|
page readonly
|
|
|
|
7FF5897E6000
|
unkown
|
page readonly
|
|
|
|
24992A54000
|
unkown
|
page read and write
|
|
|
|
14B334E0000
|
heap default
|
page read and write
|
|
|
|
7FFAEEE37000
|
unkown
|
page read and write
|
|
|
|
1A42C0D0000
|
unkown
|
page read and write
|
|
|
|
27F8B9F0000
|
unkown
|
page read and write
|
|
|
|
24992850000
|
unkown
|
page readonly
|
|
|
|
24993850000
|
unkown
|
page read and write
|
|
|
|
1E5563E0000
|
heap private
|
page read and write
|
|
|
|
1A42B409000
|
unkown
|
page read and write
|
|
|
|
19FF2C02000
|
unkown
|
page read and write
|
|
|
|
C485E79000
|
unkown
|
page read and write
|
|
|
|
7FF5A439A000
|
unkown
|
page readonly
|
|
|
|
C70000
|
unkown image
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
7FF5EB000000
|
unkown
|
page readonly
|
|
|
|
1BAA4770000
|
unkown
|
page readonly
|
|
|
|
7FF56371C000
|
unkown
|
page readonly
|
|
|
|
1CC7A25B000
|
unkown
|
page read and write
|
|
|
|
3B2ED7F000
|
unkown
|
page read and write
|
|
|
|
1A05FF000
|
unkown
|
page read and write
|
|
|
|
1A42B417000
|
unkown
|
page read and write
|
|
|
|
24992840000
|
heap default
|
page read and write
|
|
|
|
7FF56A739000
|
unkown
|
page readonly
|
|
|
|
7FF574594000
|
unkown
|
page readonly
|
|
|
|
1A42C020000
|
unkown
|
page read and write
|
|
|
|
7FF536999000
|
unkown
|
page readonly
|
|
|
|
463FCC000
|
unkown
|
page read and write
|
|
|
|
1A410F4F000
|
heap default
|
page read and write
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
19FF247A000
|
unkown
|
page read and write
|
|
|
|
7FF54A93C000
|
unkown
|
page readonly
|
|
|
|
1A413EA3000
|
unkown
|
page read and write
|
|
|
|
2692EB00000
|
unkown
|
page read and write
|
|
|
|
1A42B791000
|
unkown
|
page read and write
|
|
|
|
3B2EFFD000
|
unkown
|
page read and write
|
|
|
|
24998200000
|
unkown
|
page read and write
|
|
|
|
24998000000
|
unkown
|
page read and write
|
|
|
|
1A4111CD000
|
heap private
|
page read and write
|
|
|
|
3B2F07E000
|
unkown
|
page read and write
|
|
|
|
1A42C000000
|
unkown
|
page read and write
|
|
|
|
23F81430000
|
unkown
|
page readonly
|
|
|
|
1A413A6F000
|
unkown
|
page read and write
|
|
|
|
1A42BA11000
|
unkown
|
page read and write
|
|
|
|
1A42B305000
|
unkown
|
page read and write
|
|
|
|
23F814B8000
|
heap default
|
page read and write
|
|
|
|
7FFAEEAC0000
|
unkown
|
page read and write
|
|
|
|
1A42B530000
|
unkown
|
page read and write
|
|
|
|
1A4111D0000
|
unkown
|
page readonly
|
|
|
|
7FF500DE0000
|
unkown
|
page readonly
|
|
|
|
7FFAEEC80000
|
unkown
|
page read and write
|
|
|
|
7FF5637F0000
|
unkown
|
page readonly
|
|
|
|
2470579000
|
unkown
|
page read and write
|
|
|
|
1BAA2D00000
|
unkown
|
page read and write
|
|
|
|
1A01FF000
|
unkown
|
page read and write
|
|
|
|
1A42AFB3000
|
unkown
|
page read and write
|
|
|
|
2692EA49000
|
unkown
|
page read and write
|
|
|
|
18B671C0000
|
unkown
|
page readonly
|
|
|
|
7FF5EA492000
|
unkown
|
page readonly
|
|
|
|
F2DC3FE000
|
unkown
|
page read and write
|
|
|
|
7FF5EB018000
|
unkown
|
page readonly
|
|
|
|
7FF563515000
|
unkown
|
page readonly
|
|
|
|
7FF589778000
|
unkown
|
page readonly
|
|
|
|
7FF68606C000
|
unkown image
|
page readonly
|
|
|
|
7FF505B52000
|
unkown
|
page readonly
|
|
|
|
7FFAEEE50000
|
unkown
|
page execute and read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
33C1000
|
unkown
|
page read and write
|
|
|
|
24714CF000
|
unkown
|
page read and write
|
|
|
|
2692EA6E000
|
unkown
|
page read and write
|
|
|
|
1A42B400000
|
unkown
|
page read and write
|
|
|
|
1A41403B000
|
unkown
|
page read and write
|
|
|
|
1A413E36000
|
unkown
|
page read and write
|
|
|
|
7FF54DF12000
|
unkown
|
page readonly
|
|
|
|
7FF500D40000
|
unkown
|
page readonly
|
|
|
|
7FF54AC1D000
|
unkown
|
page readonly
|
|
|
|
7FFAEED70000
|
unkown
|
page read and write
|
|
|
|
7FF503D37000
|
unkown
|
page readonly
|
|
|
|
1A410FA2000
|
unkown
|
page read and write
|
|
|
|
1A41441B000
|
unkown
|
page read and write
|
|
|
|
1CC7A213000
|
unkown
|
page read and write
|
|
|
|
1BAA2C6D000
|
unkown
|
page read and write
|
|
|
|
1A42B427000
|
unkown
|
page read and write
|
|
|
|
1A42B34B000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
1FC11D80000
|
unkown
|
page read and write
|
|
|
|
2692EA6E000
|
unkown
|
page read and write
|
|
|
|
7FF574407000
|
unkown
|
page readonly
|
|
|
|
19FF2449000
|
unkown
|
page read and write
|
|
|
|
7FFAEEA03000
|
unkown
|
page read and write
|
|
|
|
7FF500E83000
|
unkown
|
page readonly
|
|
|
|
2692EA29000
|
unkown
|
page read and write
|
|
|
|
4C4527D000
|
unkown
|
page read and write
|
|
|
|
1A42B85F000
|
unkown
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
24708F8000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
F2DC4FF000
|
unkown
|
page read and write
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
1A42AF59000
|
unkown
|
page read and write
|
|
|
|
24992A8D000
|
unkown
|
page read and write
|
|
|
|
2692EA6C000
|
unkown
|
page read and write
|
|
|
|
8705C7F000
|
unkown
|
page read and write
|
|
|
|
7FF51B469000
|
unkown
|
page readonly
|
|
|
|
7FF500F2A000
|
unkown
|
page readonly
|
|
|
|
CE0847A000
|
unkown
|
page read and write
|
|
|
|
1A03FD000
|
unkown
|
page read and write
|
|
|
|
1B3CD680000
|
unkown
|
page read and write
|
|
|
|
7FF51B376000
|
unkown
|
page readonly
|
|
|
|
1A42B35F000
|
unkown
|
page read and write
|
|
|
|
3B2ECF9000
|
unkown
|
page read and write
|
|
|
|
7FF54DE72000
|
unkown
|
page readonly
|
|
|
|
1A413F3D000
|
unkown
|
page read and write
|
|
|
|
249927E0000
|
heap private
|
page read and write
|
|
|
|
1A42B781000
|
unkown
|
page read and write
|
|
|
|
7FF54DF00000
|
unkown
|
page readonly
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
7FF56A3BC000
|
unkown
|
page readonly
|
|
|
|
1A42B5D3000
|
heap private
|
page read and write
|
|
|
|
7FF563894000
|
unkown
|
page readonly
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
7FF56387C000
|
unkown
|
page readonly
|
|
|
|
1DA6154B000
|
heap default
|
page read and write
|
|
|
|
D35BCFF000
|
unkown
|
page read and write
|
|
|
|
81BFD7E000
|
unkown
|
page read and write
|
|
|
|
7FF505403000
|
unkown
|
page readonly
|
|
|
|
7FF51A774000
|
unkown
|
page readonly
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
23520290000
|
unkown
|
page read and write
|
|
|
|
1FC11F00000
|
unkown
|
page read and write
|
|
|
|
1BAA2C02000
|
unkown
|
page read and write
|
|
|
|
1A410EFA000
|
heap default
|
page read and write
|
|
|
|
7FF5744E8000
|
unkown
|
page readonly
|
|
|
|
1A413BD5000
|
unkown
|
page read and write
|
|
|
|
7FF54ABC8000
|
unkown
|
page readonly
|
|
|
|
27F8BCD0000
|
unkown
|
page readonly
|
|
|
|
1A4111CC000
|
unkown
|
page read and write
|
|
|
|
7FF563806000
|
unkown
|
page readonly
|
|
|
|
7FF54DF61000
|
unkown
|
page readonly
|
|
|
|
1A413AD2000
|
unkown
|
page read and write
|
|
|
|
24998000000
|
unkown
|
page read and write
|
|
|
|
1A42B430000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF5745F9000
|
unkown
|
page readonly
|
|
|
|
1A42B430000
|
unkown
|
page read and write
|
|
|
|
1DA61750000
|
heap private
|
page read and write
|
|
|
|
19CE000
|
unkown
|
page read and write
|
|
|
|
7FFAEEA00000
|
unkown
|
page read and write
|
|
|
|
7FF7E3DA4000
|
unkown image
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF59A4C0000
|
unkown
|
page readonly
|
|
|
|
1DA61581000
|
unkown
|
page read and write
|
|
|
|
7FF505B50000
|
unkown
|
page readonly
|
|
|
|
24997EA0000
|
unkown
|
page read and write
|
|
|
|
247067D000
|
unkown
|
page read and write
|
|
|
|
7FF6FE100000
|
unkown image
|
page readonly
|
|
|
|
2692EA69000
|
unkown
|
page read and write
|
|
|
|
27F8BA68000
|
unkown
|
page read and write
|
|
|
|
7FF563392000
|
unkown
|
page readonly
|
|
|
|
26930470000
|
unkown
|
page read and write
|
|
|
|
7FF590809000
|
unkown
|
page readonly
|
|
|
|
1A412ED0000
|
heap private
|
page execute and read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF5485A2000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
1A42AF58000
|
unkown
|
page read and write
|
|
|
|
27F8C060000
|
unkown
|
page readonly
|
|
|
|
B26EA7F000
|
unkown
|
page read and write
|
|
|
|
1F953120000
|
heap default
|
page read and write
|
|
|
|
7FF54A8CC000
|
unkown
|
page readonly
|
|
|
|
1A413AFF000
|
unkown
|
page read and write
|
|
|
|
1DA61540000
|
heap default
|
page read and write
|
|
|
|
1A412CB0000
|
unkown
|
page read and write
|
|
|
|
7FF563885000
|
unkown
|
page readonly
|
|
|
|
1A42B3B1000
|
unkown
|
page read and write
|
|
|
|
1BAA2D13000
|
unkown
|
page read and write
|
|
|
|
1A42B426000
|
unkown
|
page read and write
|
|
|
|
23BCBA60000
|
unkown
|
page readonly
|
|
|
|
7FFAEEBDC000
|
unkown
|
page read and write
|
|
|
|
1A42B417000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
19FF2429000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF503CB8000
|
unkown
|
page readonly
|
|
|
|
7FF54DEA5000
|
unkown
|
page readonly
|
|
|
|
7FF54ABFF000
|
unkown
|
page readonly
|
|
|
|
7FF5742C0000
|
unkown
|
page readonly
|
|
|
|
7FF51B1CE000
|
unkown
|
page readonly
|
|
|
|
1A412EB4000
|
unkown
|
page read and write
|
|
|
|
7FFAEEA14000
|
unkown
|
page read and write
|
|
|
|
7FF7E3DA4000
|
unkown image
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
24992FB0000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF503DA9000
|
unkown
|
page readonly
|
|
|
|
1BAA2B60000
|
heap default
|
page read and write
|
|
|
|
7FF54DECD000
|
unkown
|
page readonly
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
7FFAEE9F4000
|
unkown
|
page read and write
|
|
|
|
1F9532BF000
|
unkown
|
page read and write
|
|
|
|
7FF54DED6000
|
unkown
|
page readonly
|
|
|
|
7FFAEED80000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page readonly
|
|
|
|
1A410F2F000
|
heap default
|
page read and write
|
|
|
|
7FF6FE101000
|
unkown image
|
page execute read
|
|
|
|
CE085F7000
|
unkown
|
page read and write
|
|
|
|
1A412CE0000
|
unkown
|
page read and write
|
|
|
|
7FF56376C000
|
unkown
|
page readonly
|
|
|
|
19FF2447000
|
unkown
|
page read and write
|
|
|
|
1A42BA14000
|
unkown
|
page read and write
|
|
|
|
7FF574508000
|
unkown
|
page readonly
|
|
|
|
7FF56A5D1000
|
unkown
|
page readonly
|
|
|
|
24997EC1000
|
unkown
|
page read and write
|
|
|
|
18B0000
|
unkown
|
page read and write
|
|
|
|
1A42C004000
|
unkown
|
page read and write
|
|
|
|
1A4139C5000
|
unkown
|
page read and write
|
|
|
|
1A4110E0000
|
unkown
|
page read and write
|
|
|
|
7FF56A6D4000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
18C0000
|
heap private
|
page read and write
|
|
|
|
1CC7A265000
|
unkown
|
page read and write
|
|
|
|
7FF5A44E9000
|
unkown
|
page readonly
|
|
|
|
1A42B855000
|
unkown
|
page readonly
|
|
|
|
2692EA6C000
|
unkown
|
page read and write
|
|
|
|
7FFAEED90000
|
unkown
|
page read and write
|
|
|
|
1A42D750000
|
unkown
|
page read and write
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
1F953242000
|
unkown
|
page read and write
|
|
|
|
7FF5485F9000
|
unkown
|
page readonly
|
|
|
|
B548FF000
|
unkown
|
page read and write
|
|
|
|
7FF505B62000
|
unkown
|
page readonly
|
|
|
|
7FF500FE6000
|
unkown
|
page readonly
|
|
|
|
1BAA2B00000
|
heap private
|
page read and write
|
|
|
|
7FF5A423A000
|
unkown
|
page readonly
|
|
|
|
19E0000
|
unkown
|
page read and write
|
|
|
|
1A42B290000
|
unkown
|
page read and write
|
|
|
|
1CC7A080000
|
heap default
|
page read and write
|
|
|
|
7FF51B3E6000
|
unkown
|
page readonly
|
|
|
|
7FF56A646000
|
unkown
|
page readonly
|
|
|
|
1A42B500000
|
unkown
|
page read and write
|
|
|
|
7FF54AC45000
|
unkown
|
page readonly
|
|
|
|
7FF56A689000
|
unkown
|
page readonly
|
|
|
|
1FC11F13000
|
unkown
|
page read and write
|
|
|
|
1A4130EF000
|
unkown
|
page read and write
|
|
|
|
1A410F3D000
|
heap default
|
page read and write
|
|
|
|
1A42B265000
|
unkown
|
page read and write
|
|
|
|
D35BD7E000
|
unkown
|
page read and write
|
|
|
|
53F87F000
|
unkown
|
page read and write
|
|
|
|
1A42B405000
|
unkown
|
page read and write
|
|
|
|
7FF56A67F000
|
unkown
|
page readonly
|
|
|
|
26930570000
|
unkown
|
page readonly
|
|
|
|
7FFAEEDF0000
|
unkown
|
page read and write
|
|
|
|
7FF590776000
|
unkown
|
page readonly
|
|
|
|
B1329FE000
|
unkown
|
page read and write
|
|
|
|
1A42C000000
|
unkown
|
page read and write
|
|
|
|
1FC13A00000
|
unkown
|
page read and write
|
|
|
|
7FFAEECB0000
|
unkown
|
page read and write
|
|
|
|
1FC11F02000
|
unkown
|
page read and write
|
|
|
|
2692EA6E000
|
unkown
|
page read and write
|
|
|
|
1A42BA21000
|
unkown
|
page read and write
|
|
|
|
7FF56A4A0000
|
unkown
|
page readonly
|
|
|
|
2692EA02000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF7E3D8C000
|
unkown image
|
page readonly
|
|
|
|
2692EA6A000
|
unkown
|
page read and write
|
|
|
|
1B3CD6D0000
|
heap default
|
page read and write
|
|
|
|
7FF5EAF95000
|
unkown
|
page readonly
|
|
|
|
7FF54DEF7000
|
unkown
|
page readonly
|
|
|
|
7FF51B3F5000
|
unkown
|
page readonly
|
|
|
|
24993CF3000
|
unkown
|
page read and write
|
|
|
|
12F70110000
|
unkown
|
page read and write
|
|
|
|
247047E000
|
unkown
|
page read and write
|
|
|
|
7FF57DBC5000
|
unkown
|
page readonly
|
|
|
|
9035BAB000
|
unkown
|
page read and write
|
|
|
|
14B33440000
|
unkown
|
page read and write
|
|
|
|
1DA61775000
|
heap private
|
page read and write
|
|
|
|
7FF503D26000
|
unkown
|
page readonly
|
|
|
|
3B2EE7E000
|
unkown
|
page read and write
|
|
|
|
CE07F9E000
|
unkown
|
page read and write
|
|
|
|
1A42B2B8000
|
unkown
|
page read and write
|
|
|
|
7FF5485B2000
|
unkown
|
page readonly
|
|
|
|
19FF244E000
|
unkown
|
page read and write
|
|
|
|
7FF589530000
|
unkown
|
page readonly
|
|
|
|
7FF51B45E000
|
unkown
|
page readonly
|
|
|
|
12F70020000
|
unkown
|
page readonly
|
|
|
|
7FF590745000
|
unkown
|
page readonly
|
|
|
|
1A42C000000
|
unkown
|
page read and write
|
|
|
|
7FF5634B3000
|
unkown
|
page readonly
|
|
|
|
23C04F40000
|
unkown
|
page readonly
|
|
|
|
7FF589804000
|
unkown
|
page readonly
|
|
|
|
18B67723000
|
unkown
|
page read and write
|
|
|
|
903607A000
|
unkown
|
page read and write
|
|
|
|
23BCBE00000
|
unkown
|
page read and write
|
|
|
|
7FF56A3A7000
|
unkown
|
page readonly
|
|
|
|
7FF5A4480000
|
unkown
|
page readonly
|
|
|
|
18B65702000
|
unkown
|
page read and write
|
|
|
|
1A410FE5000
|
heap default
|
page read and write
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B28D000
|
unkown
|
page read and write
|
|
|
|
7FF563861000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF503D44000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF536930000
|
unkown
|
page readonly
|
|
|
|
7FF563602000
|
unkown
|
page readonly
|
|
|
|
7FF5EADC5000
|
unkown
|
page readonly
|
|
|
|
7FF5637CA000
|
unkown
|
page readonly
|
|
|
|
24993970000
|
unkown
|
page readonly
|
|
|
|
1A4142D4000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF51B03F000
|
unkown
|
page readonly
|
|
|
|
7FF574131000
|
unkown
|
page readonly
|
|
|
|
1A41474F000
|
unkown
|
page read and write
|
|
|
|
18B67702000
|
unkown
|
page read and write
|
|
|
|
7FF56A400000
|
unkown
|
page readonly
|
|
|
|
1A4111CC000
|
unkown
|
page read and write
|
|
|
|
1A4142CB000
|
unkown
|
page read and write
|
|
|
|
7FF54DCEF000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF54DC25000
|
unkown
|
page readonly
|
|
|
|
1EA21008000
|
heap default
|
page read and write
|
|
|
|
1E556390000
|
unkown
|
page read and write
|
|
|
|
7FF500F31000
|
unkown
|
page readonly
|
|
|
|
1A42C050000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF5EACD8000
|
unkown
|
page readonly
|
|
|
|
7FF574597000
|
unkown
|
page readonly
|
|
|
|
1EA21000000
|
heap default
|
page read and write
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
7FFAEEE00000
|
unkown
|
page read and write
|
|
|
|
1F953C00000
|
unkown
|
page readonly
|
|
|
|
7FF5635C0000
|
unkown
|
page readonly
|
|
|
|
7FF5EAEC8000
|
unkown
|
page readonly
|
|
|
|
18B6568A000
|
unkown
|
page read and write
|
|
|
|
7FF54AA71000
|
unkown
|
page readonly
|
|
|
|
1FC11C20000
|
heap private
|
page read and write
|
|
|
|
7FF54861C000
|
unkown
|
page readonly
|
|
|
|
23C04200000
|
unkown
|
page read and write
|
|
|
|
7FF51B400000
|
unkown
|
page readonly
|
|
|
|
1A410F77000
|
heap default
|
page read and write
|
|
|
|
1A42B32B000
|
unkown
|
page read and write
|
|
|
|
23BCB458000
|
unkown
|
page read and write
|
|
|
|
7FF54847A000
|
unkown
|
page readonly
|
|
|
|
7FF54AC26000
|
unkown
|
page readonly
|
|
|
|
7FF505A2A000
|
unkown
|
page readonly
|
|
|
|
7FF51B0B6000
|
unkown
|
page readonly
|
|
|
|
7FF536925000
|
unkown
|
page readonly
|
|
|
|
1EA21204000
|
heap private
|
page read and write
|
|
|
|
1A42C0A0000
|
unkown
|
page read and write
|
|
|
|
7FF574485000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF5745F1000
|
unkown
|
page readonly
|
|
|
|
7FF5EADD0000
|
unkown
|
page readonly
|
|
|
|
1A4142A4000
|
unkown
|
page read and write
|
|
|
|
7FF5A442F000
|
unkown
|
page readonly
|
|
|
|
7FF5743C9000
|
unkown
|
page readonly
|
|
|
|
7FFAEED60000
|
unkown
|
page read and write
|
|
|
|
27F8BA5E000
|
unkown
|
page read and write
|
|
|
|
1A42B770000
|
unkown
|
page read and write
|
|
|
|
903617F000
|
unkown
|
page read and write
|
|
|
|
7FF51B36D000
|
unkown
|
page readonly
|
|
|
|
1A42C0E0000
|
unkown
|
page read and write
|
|
|
|
1F953213000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF56383F000
|
unkown
|
page readonly
|
|
|
|
7FF59A560000
|
unkown
|
page readonly
|
|
|
|
7FF54A9DB000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B34F000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF5897CD000
|
unkown
|
page readonly
|
|
|
|
7FF7E3D8C000
|
unkown image
|
page readonly
|
|
|
|
7FF56A65A000
|
unkown
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
1CC7A090000
|
unkown
|
page readonly
|
|
|
|
7FFAEE9F0000
|
unkown
|
page read and write
|
|
|
|
7FF574585000
|
unkown
|
page readonly
|
|
|
|
7FF5630EB000
|
unkown
|
page readonly
|
|
|
|
4C44E77000
|
unkown
|
page read and write
|
|
|
|
7FF54AC54000
|
unkown
|
page readonly
|
|
|
|
7FFAEEBD2000
|
unkown
|
page read and write
|
|
|
|
7FF56312F000
|
unkown
|
page readonly
|
|
|
|
2470125000
|
unkown
|
page read and write
|
|
|
|
7FF56A4BF000
|
unkown
|
page readonly
|
|
|
|
1E5562A0000
|
unkown
|
page readonly
|
|
|
|
7FF54AC50000
|
unkown
|
page readonly
|
|
|
|
1FC11E69000
|
unkown
|
page read and write
|
|
|
|
1A42C0C0000
|
unkown
|
page read and write
|
|
|
|
14B334EB000
|
heap default
|
page read and write
|
|
|
|
7FF5A446C000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF51B39E000
|
unkown
|
page readonly
|
|
|
|
7FF56389D000
|
unkown
|
page readonly
|
|
|
|
1840000
|
unkown
|
page read and write
|
|
|
|
7FF54ABA8000
|
unkown
|
page readonly
|
|
|
|
7FF56A60A000
|
unkown
|
page readonly
|
|
|
|
7FF59A555000
|
unkown
|
page readonly
|
|
|
|
1CC7AC00000
|
unkown
|
page readonly
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
1F953200000
|
unkown
|
page read and write
|
|
|
|
7FFAEEB90000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
53F97F000
|
unkown
|
page read and write
|
|
|
|
2470A7F000
|
unkown
|
page read and write
|
|
|
|
7FF54DEB9000
|
unkown
|
page readonly
|
|
|
|
7FF5A4157000
|
unkown
|
page readonly
|
|
|
|
23F815B0000
|
unkown
|
page readonly
|
|
|
|
7FFAEEDD0000
|
unkown
|
page read and write
|
|
|
|
1DA61520000
|
unkown
|
page readonly
|
|
|
|
7FF54A8C6000
|
unkown
|
page readonly
|
|
|
|
7FF5897A5000
|
unkown
|
page readonly
|
|
|
|
1A42B37D000
|
unkown
|
page read and write
|
|
|
|
7FFAEE9FD000
|
unkown
|
page execute and read and write
|
|
|
|
7FF563890000
|
unkown
|
page readonly
|
|
|
|
1DC42AA9000
|
heap default
|
page read and write
|
|
|
|
1EA20F20000
|
unkown
|
page readonly
|
|
|
|
1650000
|
unkown
|
page readonly
|
|
|
|
19D0000
|
unkown
|
page read and write
|
|
|
|
7FF56A630000
|
unkown
|
page readonly
|
|
|
|
1FC11E77000
|
unkown
|
page read and write
|
|
|
|
1CC7A267000
|
unkown
|
page read and write
|
|
|
|
24997F70000
|
unkown
|
page write copy
|
|
|
|
7FF500FB5000
|
unkown
|
page readonly
|
|
|
|
7FF7E3D60000
|
unkown image
|
page readonly
|
|
|
|
7FF574576000
|
unkown
|
page readonly
|
|
|
|
1CC7A241000
|
unkown
|
page read and write
|
|
|
|
7FFAEEB92000
|
unkown
|
page read and write
|
|
|
|
7FF54DE4C000
|
unkown
|
page readonly
|
|
|
|
1A42B379000
|
unkown
|
page read and write
|
|
|
|
7FF5894D7000
|
unkown
|
page readonly
|
|
|
|
7FF54DE76000
|
unkown
|
page readonly
|
|
|
|
7FF58980D000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
24993960000
|
unkown
|
page readonly
|
|
|
|
27F8BA13000
|
unkown
|
page read and write
|
|
|
|
81BFFFF000
|
unkown
|
page read and write
|
|
|
|
2692EA6E000
|
unkown
|
page read and write
|
|
|
|
1E5563A0000
|
unkown
|
page read and write
|
|
|
|
1A413899000
|
unkown
|
page read and write
|
|
|
|
7FF503CE5000
|
unkown
|
page readonly
|
|
|
|
7FF536934000
|
unkown
|
page readonly
|
|
|
|
24997D50000
|
unkown
|
page readonly
|
|
|
|
1A42B25B000
|
unkown
|
page read and write
|
|
|
|
7FF59A53C000
|
unkown
|
page readonly
|
|
|
|
1A42B348000
|
unkown
|
page read and write
|
|
|
|
7FF500CE7000
|
unkown
|
page readonly
|
|
|
|
24701AD000
|
unkown
|
page read and write
|
|
|
|
7FF5635B5000
|
unkown
|
page readonly
|
|
|
|
7FF53671F000
|
unkown
|
page readonly
|
|
|
|
7FF5631B1000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
CC0596E000
|
unkown
|
page read and write
|
|
|
|
1A42BA2D000
|
unkown
|
page read and write
|
|
|
|
80EEFC000
|
unkown
|
page read and write
|
|
|
|
7FF54ABEE000
|
unkown
|
page readonly
|
|
|
|
1F9532E2000
|
unkown
|
page read and write
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
1A42B560000
|
unkown
|
page read and write
|
|
|
|
23F816C5000
|
heap private
|
page read and write
|
|
|
|
27F8BA02000
|
unkown
|
page read and write
|
|
|
|
1A42B408000
|
unkown
|
page read and write
|
|
|
|
1DC42BA0000
|
unkown
|
page readonly
|
|
|
|
7FF54A7F3000
|
unkown
|
page readonly
|
|
|
|
1A42B323000
|
unkown
|
page read and write
|
|
|
|
23BCB400000
|
unkown
|
page read and write
|
|
|
|
7FF54AA1E000
|
unkown
|
page readonly
|
|
|
|
7FF505BF0000
|
unkown
|
page readonly
|
|
|
|
7FF59A5BE000
|
unkown
|
page readonly
|
|
|
|
7FF54DBD3000
|
unkown
|
page readonly
|
|
|
|
1BAA2C6D000
|
unkown
|
page read and write
|
|
|
|
DAE298F000
|
unkown
|
page read and write
|
|
|
|
24993980000
|
unkown
|
page readonly
|
|
|
|
C485CFF000
|
unkown
|
page read and write
|
|
|
|
7FF563481000
|
unkown
|
page readonly
|
|
|
|
7FF500DCA000
|
unkown
|
page readonly
|
|
|
|
81BFA7C000
|
unkown
|
page read and write
|
|
|
|
7FFAEEA24000
|
unkown
|
page read and write
|
|
|
|
1C01E000
|
unkown
|
page read and write
|
|
|
|
1A42B404000
|
unkown
|
page read and write
|
|
|
|
1FC11D70000
|
unkown
|
page readonly
|
|
|
|
14B33420000
|
unkown
|
page read and write
|
|
|
|
1A42C001000
|
unkown
|
page read and write
|
|
|
|
1A42B5D0000
|
heap private
|
page read and write
|
|
|
|
1A42B425000
|
unkown
|
page read and write
|
|
|
|
1A42B33B000
|
unkown
|
page read and write
|
|
|
|
2692EA56000
|
unkown
|
page read and write
|
|
|
|
19FF2442000
|
unkown
|
page read and write
|
|
|
|
1F953130000
|
unkown
|
page readonly
|
|
|
|
7FF563835000
|
unkown
|
page readonly
|
|
|
|
7FF54858C000
|
unkown
|
page readonly
|
|
|
|
19FF2431000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
heap private
|
page read and write
|
|
|
|
1A42B500000
|
unkown
|
page read and write
|
|
|
|
7FFAEEB10000
|
unkown
|
page execute and read and write
|
|
|
|
7FFAEEBAD000
|
unkown
|
page read and write
|
|
|
|
7FF59A5C9000
|
unkown
|
page readonly
|
|
|
|
1A42B312000
|
unkown
|
page read and write
|
|
|
|
7FF56A45B000
|
unkown
|
page readonly
|
|
|
|
2692E9D0000
|
unkown
|
page readonly
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
C485EFF000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF58977A000
|
unkown
|
page readonly
|
|
|
|
7FF686084000
|
unkown image
|
page readonly
|
|
|
|
19FF2502000
|
unkown
|
page read and write
|
|
|
|
1A42B3E0000
|
unkown
|
page read and write
|
|
|
|
7FF5895EF000
|
unkown
|
page readonly
|
|
|
|
1F953229000
|
unkown
|
page read and write
|
|
|
|
7FF56A243000
|
unkown
|
page readonly
|
|
|
|
7FF54A053000
|
unkown
|
page readonly
|
|
|
|
1A413EE7000
|
unkown
|
page read and write
|
|
|
|
7FF548278000
|
unkown
|
page readonly
|
|
|
|
7FF500F8A000
|
unkown
|
page readonly
|
|
|
|
1A42B379000
|
unkown
|
page read and write
|
|
|
|
1820000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B500000
|
unkown
|
page read and write
|
|
|
|
1A414482000
|
unkown
|
page read and write
|
|
|
|
7FF5635AE000
|
unkown
|
page readonly
|
|
|
|
24992AA0000
|
unkown
|
page read and write
|
|
|
|
1A42B37D000
|
unkown
|
page read and write
|
|
|
|
19FF2440000
|
unkown
|
page read and write
|
|
|
|
1CC7A400000
|
unkown
|
page readonly
|
|
|
|
2692EA40000
|
unkown
|
page read and write
|
|
|
|
81C01FD000
|
unkown
|
page read and write
|
|
|
|
7FF56A648000
|
unkown
|
page readonly
|
|
|
|
7FF59A1DC000
|
unkown
|
page readonly
|
|
|
|
7FF54A8EA000
|
unkown
|
page readonly
|
|
|
|
7FF54DF04000
|
unkown
|
page readonly
|
|
|
|
7FFAEEED3000
|
unkown
|
page read and write
|
|
|
|
1FC11DD0000
|
unkown
|
page read and write
|
|
|
|
7FF58FB77000
|
unkown
|
page readonly
|
|
|
|
7FF563808000
|
unkown
|
page readonly
|
|
|
|
7FF59A567000
|
unkown
|
page readonly
|
|
|
|
7FF58979E000
|
unkown
|
page readonly
|
|
|
|
1A42B37B000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1BAA2D19000
|
unkown
|
page read and write
|
|
|
|
7FF51B3DC000
|
unkown
|
page readonly
|
|
|
|
24997D00000
|
unkown
|
page read and write
|
|
|
|
1A42B3C0000
|
unkown
|
page read and write
|
|
|
|
23BCB429000
|
unkown
|
page read and write
|
|
|
|
1A02FF000
|
unkown
|
page read and write
|
|
|
|
1CC7A1A0000
|
unkown
|
page readonly
|
|
|
|
7FF56381A000
|
unkown
|
page readonly
|
|
|
|
1A4142BA000
|
unkown
|
page read and write
|
|
|
|
1BAA2C29000
|
unkown
|
page read and write
|
|
|
|
2499809D000
|
unkown
|
page read and write
|
|
|
|
1A412F4A000
|
unkown
|
page read and write
|
|
|
|
24997FE0000
|
unkown
|
page read and write
|
|
|
|
7FF5630A5000
|
unkown
|
page readonly
|
|
|
|
7FFAEED00000
|
unkown
|
page read and write
|
|
|
|
1A413B26000
|
unkown
|
page read and write
|
|
|
|
1A42B37B000
|
unkown
|
page read and write
|
|
|
|
7FF54AB67000
|
unkown
|
page readonly
|
|
|
|
7FF56A69D000
|
unkown
|
page readonly
|
|
|
|
7FF5894D3000
|
unkown
|
page readonly
|
|
|
|
7FF54AB9C000
|
unkown
|
page readonly
|
|
|
|
7FF500FAE000
|
unkown
|
page readonly
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
1A42B35E000
|
unkown
|
page read and write
|
|
|
|
7FF57425D000
|
unkown
|
page readonly
|
|
|
|
19FF2413000
|
unkown
|
page read and write
|
|
|
|
7FF56A613000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF5EAED9000
|
unkown
|
page readonly
|
|
|
|
1F953880000
|
unkown
|
page read and write
|
|
|
|
1A4111C0000
|
heap private
|
page read and write
|
|
|
|
7FF59077C000
|
unkown
|
page readonly
|
|
|
|
7FF5897B9000
|
unkown
|
page readonly
|
|
|
|
7FF54DE7A000
|
unkown
|
page readonly
|
|
|
|
1FC11E2A000
|
unkown
|
page read and write
|
|
|
|
7FF503D16000
|
unkown
|
page readonly
|
|
|
|
7FF5A4484000
|
unkown
|
page readonly
|
|
|
|
7FF548561000
|
unkown
|
page readonly
|
|
|
|
249980AF000
|
unkown
|
page read and write
|
|
|
|
1DC42DE4000
|
heap private
|
page read and write
|
|
|
|
7FF6FE144000
|
unkown image
|
page readonly
|
|
|
|
1A42B379000
|
unkown
|
page read and write
|
|
|
|
23C04255000
|
unkown
|
page read and write
|
|
|
|
1190000
|
unkown
|
page readonly
|
|
|
|
24998049000
|
unkown
|
page read and write
|
|
|
|
14B34E60000
|
heap private
|
page read and write
|
|
|
|
7FF54A4F3000
|
unkown
|
page readonly
|
|
|
|
24992A7B000
|
unkown
|
page read and write
|
|
|
|
7FF54AA6C000
|
unkown
|
page readonly
|
|
|
|
7FF548611000
|
unkown
|
page readonly
|
|
|
|
1A4145D8000
|
unkown
|
page read and write
|
|
|
|
1B3CD9B0000
|
unkown
|
page readonly
|
|
|
|
1860000
|
unkown
|
page read and write
|
|
|
|
18B65713000
|
unkown
|
page read and write
|
|
|
|
1A42B500000
|
unkown
|
page read and write
|
|
|
|
24998200000
|
unkown
|
page read and write
|
|
|
|
23A00F20000
|
heap private
|
page read and write
|
|
|
|
7FF503D0D000
|
unkown
|
page readonly
|
|
|
|
7FF5486A9000
|
unkown
|
page readonly
|
|
|
|
7FFAEEC90000
|
unkown
|
page read and write
|
|
|
|
1A42B208000
|
unkown
|
page read and write
|
|
|
|
7FF589800000
|
unkown
|
page readonly
|
|
|
|
2499802F000
|
unkown
|
page read and write
|
|
|
|
7FF5630A0000
|
unkown
|
page readonly
|
|
|
|
1A42C110000
|
unkown
|
page readonly
|
|
|
|
2692EA6E000
|
unkown
|
page read and write
|
|
|
|
1C21E000
|
unkown
|
page read and write
|
|
|
|
23C04A02000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A412D30000
|
unkown
|
page readonly
|
|
|
|
12F700F0000
|
unkown
|
page read and write
|
|
|
|
7FF56A48A000
|
unkown
|
page readonly
|
|
|
|
1FC11E4E000
|
unkown
|
page read and write
|
|
|
|
7FF5634B7000
|
unkown
|
page readonly
|
|
|
|
7FF57455D000
|
unkown
|
page readonly
|
|
|
|
1A422F11000
|
unkown
|
page read and write
|
|
|
|
9035FFA000
|
unkown
|
page read and write
|
|
|
|
235202EB000
|
heap default
|
page read and write
|
|
|
|
24997D10000
|
unkown
|
page read and write
|
|
|
|
18B656BC000
|
unkown
|
page read and write
|
|
|
|
2692EA6E000
|
unkown
|
page read and write
|
|
|
|
1A42B403000
|
unkown
|
page read and write
|
|
|
|
7FF573E33000
|
unkown
|
page readonly
|
|
|
|
7FF5368D5000
|
unkown
|
page readonly
|
|
|
|
7FF54AC3C000
|
unkown
|
page readonly
|
|
|
|
7FF54AB87000
|
unkown
|
page readonly
|
|
|
|
27F8B9D0000
|
unkown
|
page readonly
|
|
|
|
23C04246000
|
unkown
|
page read and write
|
|
|
|
27F8B9C0000
|
heap default
|
page read and write
|
|
|
|
18B68010000
|
unkown
|
page read and write
|
|
|
|
B132EFF000
|
unkown
|
page read and write
|
|
|
|
2692EB02000
|
unkown
|
page read and write
|
|
|
|
19FF2473000
|
unkown
|
page read and write
|
|
|
|
1A42BA11000
|
unkown
|
page read and write
|
|
|
|
24993118000
|
unkown
|
page read and write
|
|
|
|
7FF5A4250000
|
unkown
|
page readonly
|
|
|
|
7FF56385D000
|
unkown
|
page readonly
|
|
|
|
7FF5368A8000
|
unkown
|
page readonly
|
|
|
|
7FF686040000
|
unkown image
|
page readonly
|
|
|
|
1F9537A0000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF505BCC000
|
unkown
|
page readonly
|
|
|
|
23C04300000
|
unkown
|
page read and write
|
|
|
|
7FF686041000
|
unkown image
|
page execute read
|
|
|
|
F2DC2FB000
|
unkown
|
page read and write
|
|
|
|
7FF51B042000
|
unkown
|
page readonly
|
|
|
|
B26E74C000
|
unkown
|
page read and write
|
|
|
|
7FF5638F9000
|
unkown
|
page readonly
|
|
|
|
2471746000
|
unkown
|
page read and write
|
|
|
|
7FF562DFF000
|
unkown
|
page readonly
|
|
|
|
1F9532D0000
|
unkown
|
page read and write
|
|
|
|
1A42C030000
|
unkown
|
page read and write
|
|
|
|
18B656C7000
|
unkown
|
page read and write
|
|
|
|
7FF59A4D8000
|
unkown
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
7FF574135000
|
unkown
|
page readonly
|
|
|
|
24997EAE000
|
unkown
|
page read and write
|
|
|
|
1A42C0B0000
|
unkown
|
page read and write
|
|
|
|
7FF505B8E000
|
unkown
|
page readonly
|
|
|
|
14B332F0000
|
unkown
|
page readonly
|
|
|
|
15F7000
|
heap default
|
page read and write
|
|
|
|
F2DBDCB000
|
unkown
|
page read and write
|
|
|
|
1A4139D7000
|
unkown
|
page read and write
|
|
|
|
7FF54DEDC000
|
unkown
|
page readonly
|
|
|
|
1B731000
|
unkown
|
page read and write
|
|
|
|
7FF563870000
|
unkown
|
page readonly
|
|
|
|
1A42B92E000
|
unkown
|
page readonly
|
|
|
|
7FF563785000
|
unkown
|
page readonly
|
|
|
|
2692EA00000
|
unkown
|
page read and write
|
|
|
|
18B6566F000
|
unkown
|
page read and write
|
|
|
|
7FFAEECD0000
|
unkown
|
page read and write
|
|
|
|
7FF505B95000
|
unkown
|
page readonly
|
|
|
|
7FF5EB045000
|
unkown
|
page readonly
|
|
|
|
1A42B416000
|
unkown
|
page read and write
|
|
|
|
1A42B411000
|
unkown
|
page read and write
|
|
|
|
24993950000
|
unkown
|
page readonly
|
|
|
|
1A414838000
|
unkown
|
page read and write
|
|
|
|
7FF54AA80000
|
unkown
|
page readonly
|
|
|
|
23BCB502000
|
unkown
|
page read and write
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF590771000
|
unkown
|
page readonly
|
|
|
|
7FF5630DE000
|
unkown
|
page readonly
|
|
|
|
1CC7A160000
|
unkown
|
page readonly
|
|
|
|
7FF54AB37000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF5EB0A4000
|
unkown
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
23BCBC02000
|
unkown
|
page read and write
|
|
|
|
7FFAEEBC0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF7E3D8C000
|
unkown image
|
page readonly
|
|
|
|
27F8BA28000
|
unkown
|
page read and write
|
|
|
|
7FFAEEE40000
|
unkown
|
page read and write
|
|
|
|
7FF5368BA000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF5630E4000
|
unkown
|
page readonly
|
|
|
|
7FF57DC89000
|
unkown
|
page readonly
|
|
|
|
7FF503CBA000
|
unkown
|
page readonly
|
|
|
|
B5450C000
|
unkown
|
page read and write
|
|
|
|
24997F74000
|
unkown
|
page readonly
|
|
|
|
249980AC000
|
unkown
|
page read and write
|
|
|
|
7FF590425000
|
unkown
|
page readonly
|
|
|
|
7FF6FE140000
|
unkown image
|
page write copy
|
|
|
|
19FF2380000
|
unkown
|
page readonly
|
|
|
|
7FF5A41A5000
|
unkown
|
page readonly
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
7FF54A8BD000
|
unkown
|
page readonly
|
|
|
|
7FF503CDE000
|
unkown
|
page readonly
|
|
|
|
7FF54A070000
|
unkown
|
page readonly
|
|
|
|
1DA61640000
|
unkown
|
page readonly
|
|
|
|
1A413ECE000
|
unkown
|
page read and write
|
|
|
|
1A42B750000
|
unkown
|
page read and write
|
|
|
|
7FF54DF5E000
|
unkown
|
page readonly
|
|
|
|
23520290000
|
unkown
|
page read and write
|
|
|
|
24992A29000
|
unkown
|
page read and write
|
|
|
|
2470AFB000
|
unkown
|
page read and write
|
|
|
|
7FF503D1C000
|
unkown
|
page readonly
|
|
|
|
1A4138D2000
|
unkown
|
page read and write
|
|
|
|
18B65613000
|
unkown
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF562FB4000
|
unkown
|
page readonly
|
|
|
|
1A410F37000
|
heap default
|
page read and write
|
|
|
|
CE086FE000
|
unkown
|
page read and write
|
|
|
|
7FF7E3D8C000
|
unkown image
|
page readonly
|
|
|
|
7FFAEEAF6000
|
unkown
|
page execute and read and write
|
|
|
|
1A422EE1000
|
unkown
|
page read and write
|
|
|
|
1A42B1A0000
|
unkown
|
page readonly
|
|
|
|
53F67F000
|
unkown
|
page read and write
|
|
|
|
1A42BA20000
|
unkown
|
page read and write
|
|
|
|
80F0FF000
|
unkown
|
page read and write
|
|
|
|
7FF56A49E000
|
unkown
|
page readonly
|
|
|
|
23A00CE8000
|
heap default
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF5A42F3000
|
unkown
|
page readonly
|
|
|
|
7FF5907A4000
|
unkown
|
page readonly
|
|
|
|
1A42B321000
|
unkown
|
page read and write
|
|
|
|
247097F000
|
unkown
|
page read and write
|
|
|
|
7FF51B460000
|
unkown
|
page readonly
|
|
|
|
7FFAEEE30000
|
unkown
|
page read and write
|
|
|
|
1F95328A000
|
unkown
|
page read and write
|
|
|
|
7FF5A440A000
|
unkown
|
page readonly
|
|
|
|
24993CD1000
|
unkown
|
page read and write
|
|
|
|
7FF5638A2000
|
unkown
|
page readonly
|
|
|
|
1FC11E4E000
|
unkown
|
page read and write
|
|
|
|
53F37B000
|
unkown
|
page read and write
|
|
|
|
7FF6FE12C000
|
unkown image
|
page readonly
|
|
|
|
156A000
|
heap default
|
page read and write
|
|
|
|
24997FAC000
|
unkown
|
page readonly
|
|
|
|
7FF7E3D61000
|
unkown image
|
page execute read
|
|
|
|
1A42B402000
|
unkown
|
page read and write
|
|
|
|
7FF500FDD000
|
unkown
|
page readonly
|
|
|
|
4C453FE000
|
unkown
|
page read and write
|
|
|
|
1DA62F50000
|
heap private
|
page read and write
|
|
|
|
24704FE000
|
unkown
|
page read and write
|
|
|
|
7FF503DA1000
|
unkown
|
page readonly
|
|
|
|
8705A7E000
|
unkown
|
page read and write
|
|
|
|
B132B7D000
|
unkown
|
page read and write
|
|
|
|
24993930000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF57DC27000
|
unkown
|
page readonly
|
|
|
|
7FF5897DC000
|
unkown
|
page readonly
|
|
|
|
1DC42C70000
|
unkown
|
page readonly
|
|
|
|
7FF56A528000
|
unkown
|
page readonly
|
|
|
|
7FF599D60000
|
unkown
|
page readonly
|
|
|
|
1A42AF30000
|
unkown
|
page read and write
|
|
|
|
24998260000
|
unkown
|
page readonly
|
|
|
|
7FF54855A000
|
unkown
|
page readonly
|
|
|
|
1A42B379000
|
unkown
|
page read and write
|
|
|
|
27F8BB02000
|
unkown
|
page read and write
|
|
|
|
7FF569F54000
|
unkown
|
page readonly
|
|
|
|
7FF54ABC6000
|
unkown
|
page readonly
|
|
|
|
4C454FE000
|
unkown
|
page read and write
|
|
|
|
7FF562CFA000
|
unkown
|
page readonly
|
|
|
|
7FF5EAE6E000
|
unkown
|
page readonly
|
|
|
|
1A42B3D0000
|
unkown
|
page read and write
|
|
|
|
1A42B570000
|
unkown
|
page read and write
|
|
|
|
1CC7A202000
|
unkown
|
page read and write
|
|
|
|
7FF500FFC000
|
unkown
|
page readonly
|
|
|
|
1A4111C5000
|
heap private
|
page read and write
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FFAEEE13000
|
unkown
|
page read and write
|
|
|
|
7FF59076D000
|
unkown
|
page readonly
|
|
|
|
7FF7E3DA0000
|
unkown image
|
page read and write
|
|
|
|
7FF5A4439000
|
unkown
|
page readonly
|
|
|
|
24997FD0000
|
unkown
|
page read and write
|
|
|
|
1A411110000
|
heap private
|
page read and write
|
|
|
|
19FF246A000
|
unkown
|
page read and write
|
|
|
|
18B656BA000
|
unkown
|
page read and write
|
|
|
|
23BCB600000
|
unkown
|
page readonly
|
|
|
|
1A42BA10000
|
unkown
|
page read and write
|
|
|
|
7FF54ACAE000
|
unkown
|
page readonly
|
|
|
|
1A42C010000
|
unkown
|
page read and write
|
|
|
|
7FF54ABDA000
|
unkown
|
page readonly
|
|
|
|
7FF56379A000
|
unkown
|
page readonly
|
|
|
|
7FF5903C0000
|
unkown
|
page readonly
|
|
|
|
23C04400000
|
unkown
|
page readonly
|
|
|
|
1BAA2ED0000
|
unkown
|
page readonly
|
|
|
|
7FF5744F2000
|
unkown
|
page readonly
|
|
|
|
7FF59078C000
|
unkown
|
page readonly
|
|
|
|
7FF5485DE000
|
unkown
|
page readonly
|
|
|
|
7FF51A7CE000
|
unkown
|
page readonly
|
|
|
|
18B65600000
|
unkown
|
page read and write
|
|
|
|
1A42B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF500E87000
|
unkown
|
page readonly
|
|
|
|
7FF505C59000
|
unkown
|
page readonly
|
|
|
|
1A42B780000
|
unkown
|
page read and write
|
|
|
|
7FF54AB7B000
|
unkown
|
page readonly
|
|
|
|
18C5000
|
heap private
|
page read and write
|
|
|
|
1E556390000
|
unkown
|
page read and write
|
|
|
|
27F8C202000
|
unkown
|
page read and write
|
|
|
|
7FF51B2DC000
|
unkown
|
page readonly
|
|
|
|
7FF590759000
|
unkown
|
page readonly
|
|
|
|
7FF501010000
|
unkown
|
page readonly
|
|
|
|
7FF5EADB7000
|
unkown
|
page readonly
|
|
|
|
7FFAEEC30000
|
unkown
|
page read and write
|
|
|
|
24992A93000
|
unkown
|
page read and write
|
|
|
|
18A0000
|
unkown
|
page read and write
|
|
|
|
7FF51A73E000
|
unkown
|
page readonly
|
|
|
|
1A42B431000
|
unkown
|
page read and write
|
|
|
|
1A42B750000
|
unkown
|
page read and write
|
|
|
|
1DA630EF000
|
heap private
|
page read and write
|
|
|
|
1A42B41A000
|
unkown
|
page read and write
|
|
|
|
1A42B401000
|
unkown
|
page read and write
|
|
|
|
23F816A0000
|
unkown
|
page read and write
|
|
|
|
7FF56A5E4000
|
unkown
|
page readonly
|
|
|
|
1A42B7C0000
|
unkown
|
page readonly
|
|
|
|
CE08375000
|
unkown
|
page read and write
|
|
|
|
7FF501071000
|
unkown
|
page readonly
|
|
|
|
7FFAEEA1D000
|
unkown
|
page execute and read and write
|
|
|
|
235201A0000
|
unkown
|
page readonly
|
|
|
|
CE088FF000
|
unkown
|
page read and write
|
|
|
|
2470879000
|
unkown
|
page read and write
|
|
|
|
DAE2C7F000
|
unkown
|
page read and write
|
|
|
|
1DA61780000
|
unkown
|
page readonly
|
|
|
|
1A42AFA2000
|
unkown
|
page read and write
|
|
There are 2088 hidden memdumps, click here to show them.