Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
RemitSwift119353 xlsx.htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{FB42B5BF-9B60-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FB42B5C1-9B60-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FB42B5C2-9B60-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Converged_v21033_AZXChPIB5jI3ijrmoNll5w2[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Print[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\arrow_px_up[1].gif
|
GIF image data, version 89a, 7 x 9
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\script[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\style[1].css
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\d7-808fb1[1].css
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\latest[1].eot
|
Embedded OpenType (EOT), Segoe UI family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\latest[2].eot
|
Embedded OpenType (EOT), Segoe UI Light family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\servicesagreement[1].htm
|
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\17-f90ef1[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\override[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\script[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\wcp-consent[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\0_pdvuot_2pyxh5ith335y8a2[1].jpg
|
JPEG image data, baseline, precision 8, 1920x1080, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\RE1Mu3b[1].png
|
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\favicon[1].ico
|
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jquery-1.7.2.min[1].js
|
HTML document, UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\mwfmdl2-v3.54[1].woff
|
Web Open Font Format, TrueType, length 26288, version 0.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF21D4BF00FAEEC794.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFA4B72BDCB6871BC2.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFFED1E8E288005E12.TMP
|
data
|
dropped
|
|
There are 22 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6780 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
file:///C:/Users/user/Desktop/RemitSwift119353%20xlsx.htm?rand=13InboxLightaspxn.1774256418&fid.4.1252899642&fid=1&fav.1&rand.13InboxLight.aspxn.1774256418&fid.1252899642&fid.1&fav.1&email=gunnar.grech@go.com.mt&loginpage=&.rand=13InboxLight.aspx?n=1774256418&fid=4
|
|
||
|
file:///C:/Users/user/Desktop/RemitSwift119353%20xlsx.htm
|
|
||
|
https://privacy.microsoft./en-GB/privacystatement
|
|
||
|
https://www.skype.com/go/store.reactivate.credit
|
unknown
|
|
|
|
https://www.skype.com/go/allrates
|
unknown
|
|
|
|
https://aka.ms/redeemrewards
|
unknown
|
|
|
|
https://ec.europa.eu/consumers/odr
|
unknown
|
|
|
|
https://www.skype.com/go/legal.broadcast
|
unknown
|
|
|
|
https://www.xbox.com/xbox-game-studios
|
unknown
|
|
|
|
https://www.xbox.com/xbox-game-studios)
|
unknown
|
|
|
|
https://privacy.micros
|
unknown
|
|
|
|
https://www.skype.com/go/legal
|
unknown
|
|
|
|
https://privacy.microsoft./en-GB/privacystatement
|
unknown
|
|
|
|
https://www.microsoft.
|
unknown
|
|
|
|
https://www.skype.com/go/emergency
|
unknown
|
|
|
|
https://ec.europa.eu/consumers/odr);
|
unknown
|
|
|
|
https://www.skype.com/go/emergency/
|
unknown
|
|
|
|
http://github.com/requirejs/almond/LICENSE
|
unknown
|
|
|
|
https://privacy.microsoft./en-GB/privacystatementsx.htm?rand=13InboxLightaspxn.1774256418&fid.4.1252
|
unknown
|
|
|
|
https://mixer.com/contact
|
unknown
|
|
There are 10 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
cs1100.wpc.omegacdn.net
|
152.199.23.37
|
|
|
|
cs1227.wpc.alphacdn.net
|
192.229.221.185
|
|
|
|
raktaxis.co.uk
|
217.160.0.18
|
|
|
|
logincdn.msauth.net
|
unknown
|
|
|
|
clientconfig.passport.net
|
unknown
|
|
|
|
aadcdn.msftauth.net
|
unknown
|
|
|
|
ajax.aspnetcdn.com
|
unknown
|
|
|
|
privacy.microsoft
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
217.160.0.18
|
raktaxis.co.uk
|
Germany
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
192.229.221.185
|
cs1227.wpc.alphacdn.net
|
United States
|
|
|
|
152.199.23.37
|
cs1100.wpc.omegacdn.net
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{FB42B5BF-9B60-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
There are 18 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5D8DEA000
|
unkown
|
page readonly
|
|
|
|
25DA1602000
|
unkown
|
page read and write
|
|
|
|
1A6B95AE000
|
unkown
|
page read and write
|
|
|
|
7FF5DB0AE000
|
unkown
|
page readonly
|
|
|
|
7FF53E71B000
|
unkown
|
page readonly
|
|
|
|
7FF53E9CE000
|
unkown
|
page readonly
|
|
|
|
241F2488000
|
unkown
|
page read and write
|
|
|
|
7FF5DB1BB000
|
unkown
|
page readonly
|
|
|
|
7FF5DB204000
|
unkown
|
page readonly
|
|
|
|
191D2DB0000
|
heap private
|
page read and write
|
|
|
|
7FF573D12000
|
unkown
|
page readonly
|
|
|
|
7FF54E94F000
|
unkown
|
page readonly
|
|
|
|
18BE72E3000
|
unkown
|
page read and write
|
|
|
|
1A6B74E6000
|
unkown
|
page read and write
|
|
|
|
1A6B9982000
|
unkown
|
page read and write
|
|
|
|
241F2457000
|
unkown
|
page read and write
|
|
|
|
18BE7D40000
|
unkown
|
page write copy
|
|
|
|
7FF53E9AA000
|
unkown
|
page readonly
|
|
|
|
7FF579312000
|
unkown
|
page readonly
|
|
|
|
4605C7B000
|
unkown
|
page read and write
|
|
|
|
1A6B956D000
|
unkown
|
page read and write
|
|
|
|
7FF59D5DC000
|
unkown
|
page readonly
|
|
|
|
18BE7942000
|
unkown
|
page read and write
|
|
|
|
1A6B7472000
|
unkown
|
page read and write
|
|
|
|
460627A000
|
unkown
|
page read and write
|
|
|
|
1A6B955F000
|
unkown
|
page read and write
|
|
|
|
7FF53EA52000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E66000
|
unkown
|
page readonly
|
|
|
|
385F9FF000
|
unkown
|
page read and write
|
|
|
|
7FF54EAA1000
|
unkown
|
page readonly
|
|
|
|
7FF544D9A000
|
unkown
|
page readonly
|
|
|
|
7FF54EB83000
|
unkown
|
page readonly
|
|
|
|
7FF5D8AAC000
|
unkown
|
page readonly
|
|
|
|
7FF53E96B000
|
unkown
|
page readonly
|
|
|
|
191D3055000
|
unkown
|
page read and write
|
|
|
|
7FF573C1E000
|
unkown
|
page readonly
|
|
|
|
7FF54EAC1000
|
unkown
|
page readonly
|
|
|
|
7FF59D5AE000
|
unkown
|
page readonly
|
|
|
|
7FF5791C2000
|
unkown
|
page readonly
|
|
|
|
58C8DBF000
|
unkown
|
page read and write
|
|
|
|
20E6AA02000
|
unkown
|
page read and write
|
|
|
|
7FF579264000
|
unkown
|
page readonly
|
|
|
|
7FF5D8651000
|
unkown
|
page readonly
|
|
|
|
7FF54ECAC000
|
unkown
|
page readonly
|
|
|
|
191D3102000
|
unkown
|
page read and write
|
|
|
|
A298DFA000
|
unkown
|
page read and write
|
|
|
|
7FF5D8C11000
|
unkown
|
page readonly
|
|
|
|
7FF59D604000
|
unkown
|
page readonly
|
|
|
|
46061FB000
|
unkown
|
page read and write
|
|
|
|
1B8AF3E0000
|
unkown
|
page readonly
|
|
|
|
7FF573C1A000
|
unkown
|
page readonly
|
|
|
|
191D2E20000
|
unkown
|
page readonly
|
|
|
|
3F3A5FE000
|
unkown
|
page read and write
|
|
|
|
241F2513000
|
unkown
|
page read and write
|
|
|
|
1A6B95D8000
|
unkown
|
page read and write
|
|
|
|
460657A000
|
unkown
|
page read and write
|
|
|
|
7FF578FE6000
|
unkown
|
page readonly
|
|
|
|
7FF54EC54000
|
unkown
|
page readonly
|
|
|
|
99C787F000
|
unkown
|
page read and write
|
|
|
|
7FF500207000
|
unkown
|
page readonly
|
|
|
|
7FF5DB218000
|
unkown
|
page readonly
|
|
|
|
18BE7967000
|
unkown
|
page read and write
|
|
|
|
1B8AD718000
|
unkown
|
page read and write
|
|
|
|
7FF5D8EE2000
|
unkown
|
page readonly
|
|
|
|
7FF59D5AA000
|
unkown
|
page readonly
|
|
|
|
1A6BA410000
|
unkown
|
page read and write
|
|
|
|
1A6B7589000
|
unkown
|
page read and write
|
|
|
|
18BE8000000
|
unkown
|
page readonly
|
|
|
|
F7EA97F000
|
unkown
|
page read and write
|
|
|
|
1A6B95F4000
|
unkown
|
page read and write
|
|
|
|
1A6B9802000
|
unkown
|
page read and write
|
|
|
|
7FF5D8DB3000
|
unkown
|
page readonly
|
|
|
|
3F3A8FF000
|
unkown
|
page read and write
|
|
|
|
241F2429000
|
unkown
|
page read and write
|
|
|
|
18BE79A8000
|
unkown
|
page read and write
|
|
|
|
21DC1A3F000
|
unkown
|
page read and write
|
|
|
|
7FF5DB19C000
|
unkown
|
page readonly
|
|
|
|
241F244F000
|
unkown
|
page read and write
|
|
|
|
18BE7E61000
|
unkown
|
page read and write
|
|
|
|
1A6B74B8000
|
unkown
|
page read and write
|
|
|
|
7FF5001DA000
|
unkown
|
page readonly
|
|
|
|
7FF59D573000
|
unkown
|
page readonly
|
|
|
|
180F71F0000
|
unkown
|
page read and write
|
|
|
|
18BE7D90000
|
unkown
|
page readonly
|
|
|
|
7FF5D8CF8000
|
unkown
|
page readonly
|
|
|
|
24159229000
|
unkown
|
page read and write
|
|
|
|
16E1F26B000
|
unkown
|
page read and write
|
|
|
|
7FF538F1D000
|
unkown
|
page readonly
|
|
|
|
F7EA87B000
|
unkown
|
page read and write
|
|
|
|
1A6B9900000
|
unkown
|
page read and write
|
|
|
|
7FF59D4B8000
|
unkown
|
page readonly
|
|
|
|
18BE7213000
|
unkown
|
page read and write
|
|
|
|
1A6B9905000
|
unkown
|
page read and write
|
|
|
|
7FF5739A0000
|
unkown
|
page readonly
|
|
|
|
7FF54E581000
|
unkown
|
page readonly
|
|
|
|
7FF5BB13F000
|
unkown
|
page readonly
|
|
|
|
18BE6FB0000
|
heap private
|
page read and write
|
|
|
|
7FF578EDC000
|
unkown
|
page readonly
|
|
|
|
7FF573B8C000
|
unkown
|
page readonly
|
|
|
|
7FF500026000
|
unkown
|
page readonly
|
|
|
|
4606A7D000
|
unkown
|
page read and write
|
|
|
|
18BE7020000
|
unkown
|
page readonly
|
|
|
|
460687F000
|
unkown
|
page read and write
|
|
|
|
18BE72E8000
|
unkown
|
page read and write
|
|
|
|
7FF54ED6A000
|
unkown
|
page readonly
|
|
|
|
18BE77D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D8C49000
|
unkown
|
page readonly
|
|
|
|
7FF54EAB6000
|
unkown
|
page readonly
|
|
|
|
7FF5BB115000
|
unkown
|
page readonly
|
|
|
|
25DA15FB000
|
unkown
|
page read and write
|
|
|
|
180F7302000
|
unkown
|
page read and write
|
|
|
|
25DA1602000
|
unkown
|
page read and write
|
|
|
|
7FF57928E000
|
unkown
|
page readonly
|
|
|
|
7FF4FFDB6000
|
unkown
|
page readonly
|
|
|
|
1A6BA610000
|
unkown
|
page read and write
|
|
|
|
7FF579291000
|
unkown
|
page readonly
|
|
|
|
1A6B74C1000
|
unkown
|
page read and write
|
|
|
|
7FF579041000
|
unkown
|
page readonly
|
|
|
|
7FF5BB178000
|
unkown
|
page readonly
|
|
|
|
1B8AD3C0000
|
heap private
|
page read and write
|
|
|
|
191D4AA0000
|
unkown
|
page readonly
|
|
|
|
1A6B7477000
|
unkown
|
page read and write
|
|
|
|
7FF5D8ED4000
|
unkown
|
page readonly
|
|
|
|
7FF544CA3000
|
unkown
|
page readonly
|
|
|
|
20E6AA54000
|
unkown
|
page read and write
|
|
|
|
3AE78FF000
|
unkown
|
page read and write
|
|
|
|
7FF54ED64000
|
unkown
|
page readonly
|
|
|
|
7FF500190000
|
unkown
|
page readonly
|
|
|
|
241F23F0000
|
unkown
|
page readonly
|
|
|
|
1A6B9576000
|
unkown
|
page read and write
|
|
|
|
7FF5001EA000
|
unkown
|
page readonly
|
|
|
|
7FF5D8DC4000
|
unkown
|
page readonly
|
|
|
|
18BE7E02000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD5E000
|
unkown
|
page readonly
|
|
|
|
7FF50021F000
|
unkown
|
page readonly
|
|
|
|
7FF53EA51000
|
unkown
|
page readonly
|
|
|
|
18BE72E9000
|
unkown
|
page read and write
|
|
|
|
7FF5387F7000
|
unkown
|
page readonly
|
|
|
|
1A6B74DA000
|
unkown
|
page read and write
|
|
|
|
7FF5DB091000
|
unkown
|
page readonly
|
|
|
|
18BE77E0000
|
unkown
|
page read and write
|
|
|
|
20E6AA29000
|
unkown
|
page read and write
|
|
|
|
18BE7967000
|
unkown
|
page read and write
|
|
|
|
18BE7967000
|
unkown
|
page read and write
|
|
|
|
46062FB000
|
unkown
|
page read and write
|
|
|
|
1A6B95F8000
|
unkown
|
page read and write
|
|
|
|
1B8AD68A000
|
unkown
|
page read and write
|
|
|
|
7FF5D8DBB000
|
unkown
|
page readonly
|
|
|
|
7FF59D409000
|
unkown
|
page readonly
|
|
|
|
18BE7200000
|
unkown
|
page read and write
|
|
|
|
7FF5BB201000
|
unkown
|
page readonly
|
|
|
|
18BE7E54000
|
unkown
|
page read and write
|
|
|
|
7FF59D27F000
|
unkown
|
page readonly
|
|
|
|
25DA17E5000
|
heap private
|
page read and write
|
|
|
|
1A6BA510000
|
unkown
|
page read and write
|
|
|
|
7FF54EC20000
|
unkown
|
page readonly
|
|
|
|
191D3113000
|
unkown
|
page read and write
|
|
|
|
1B8AF502000
|
unkown
|
page read and write
|
|
|
|
1B8AD6F0000
|
unkown
|
page read and write
|
|
|
|
46064FC000
|
unkown
|
page read and write
|
|
|
|
7FF54EB7B000
|
unkown
|
page readonly
|
|
|
|
7FF573C96000
|
unkown
|
page readonly
|
|
|
|
7FF5BAF31000
|
unkown
|
page readonly
|
|
|
|
1B8AF500000
|
unkown
|
page read and write
|
|
|
|
191D306B000
|
unkown
|
page read and write
|
|
|
|
6FFD279000
|
unkown
|
page read and write
|
|
|
|
7FF544DCC000
|
unkown
|
page readonly
|
|
|
|
7FF59D3D5000
|
unkown
|
page readonly
|
|
|
|
7FF54ECAF000
|
unkown
|
page readonly
|
|
|
|
1A6B7A60000
|
unkown
|
page readonly
|
|
|
|
3AE767A000
|
unkown
|
page read and write
|
|
|
|
7FF54ECEE000
|
unkown
|
page readonly
|
|
|
|
180F7229000
|
unkown
|
page read and write
|
|
|
|
1B8AD590000
|
unkown
|
page read and write
|
|
|
|
562CD79000
|
unkown
|
page read and write
|
|
|
|
7FF573997000
|
unkown
|
page readonly
|
|
|
|
7FF59D552000
|
unkown
|
page readonly
|
|
|
|
F7EA8FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DB226000
|
unkown
|
page readonly
|
|
|
|
7FF5BADDA000
|
unkown
|
page readonly
|
|
|
|
1B8AF0A0000
|
unkown
|
page readonly
|
|
|
|
2415ACF0000
|
unkown
|
page readonly
|
|
|
|
18BE71E0000
|
unkown
|
page read and write
|
|
|
|
7FF5BB17E000
|
unkown
|
page readonly
|
|
|
|
7FF5DB1C7000
|
unkown
|
page readonly
|
|
|
|
7FF50021C000
|
unkown
|
page readonly
|
|
|
|
24159313000
|
unkown
|
page read and write
|
|
|
|
1A6B746F000
|
unkown
|
page read and write
|
|
|
|
7FF5D8952000
|
unkown
|
page readonly
|
|
|
|
7FF5DB11C000
|
unkown
|
page readonly
|
|
|
|
7FF573C4F000
|
unkown
|
page readonly
|
|
|
|
1A6B746F000
|
unkown
|
page read and write
|
|
|
|
7FF59D6A1000
|
unkown
|
page readonly
|
|
|
|
18BE7955000
|
unkown
|
page read and write
|
|
|
|
385FD7E000
|
unkown
|
page read and write
|
|
|
|
A298D7F000
|
unkown
|
page read and write
|
|
|
|
7FF5D8D90000
|
unkown
|
page readonly
|
|
|
|
7FF59D550000
|
unkown
|
page readonly
|
|
|
|
7FF53E637000
|
unkown
|
page readonly
|
|
|
|
3AE757A000
|
unkown
|
page read and write
|
|
|
|
7FF5002D4000
|
unkown
|
page readonly
|
|
|
|
1A6B7478000
|
unkown
|
page read and write
|
|
|
|
1A6B7475000
|
unkown
|
page read and write
|
|
|
|
1A6B746B000
|
unkown
|
page read and write
|
|
|
|
1A6B7478000
|
unkown
|
page read and write
|
|
|
|
7FF5D8BAB000
|
unkown
|
page readonly
|
|
|
|
16E1F200000
|
unkown
|
page read and write
|
|
|
|
1A6B7469000
|
unkown
|
page read and write
|
|
|
|
7FF54E4DD000
|
unkown
|
page readonly
|
|
|
|
16E1F26B000
|
unkown
|
page read and write
|
|
|
|
18BE7802000
|
unkown
|
page read and write
|
|
|
|
1B8AF3F0000
|
unkown
|
page read and write
|
|
|
|
7FF544E11000
|
unkown
|
page readonly
|
|
|
|
7FF57926A000
|
unkown
|
page readonly
|
|
|
|
46067FB000
|
unkown
|
page read and write
|
|
|
|
1A6B746F000
|
unkown
|
page read and write
|
|
|
|
25DA17E0000
|
heap private
|
page read and write
|
|
|
|
7FF578FDB000
|
unkown
|
page readonly
|
|
|
|
7FF538EA0000
|
unkown
|
page readonly
|
|
|
|
1A6B9700000
|
unkown
|
page read and write
|
|
|
|
562C31E000
|
unkown
|
page read and write
|
|
|
|
7FF5DB0FD000
|
unkown
|
page readonly
|
|
|
|
7FF59D4AB000
|
unkown
|
page readonly
|
|
|
|
191D3200000
|
unkown
|
page readonly
|
|
|
|
7FF573C99000
|
unkown
|
page readonly
|
|
|
|
7FF5BB16E000
|
unkown
|
page readonly
|
|
|
|
1A6B9511000
|
unkown
|
page read and write
|
|
|
|
7FF5DB1E7000
|
unkown
|
page readonly
|
|
|
|
18BE7249000
|
unkown
|
page read and write
|
|
|
|
1A6B9370000
|
unkown
|
page readonly
|
|
|
|
7FF50024F000
|
unkown
|
page readonly
|
|
|
|
7FF5BB10A000
|
unkown
|
page readonly
|
|
|
|
1B8AD430000
|
unkown
|
page readonly
|
|
|
|
16E1F130000
|
unkown
|
page readonly
|
|
|
|
1A6B7536000
|
unkown
|
page read and write
|
|
|
|
7FF5D8DBF000
|
unkown
|
page readonly
|
|
|
|
241F244B000
|
unkown
|
page read and write
|
|
|
|
20E6ACD0000
|
unkown
|
page readonly
|
|
|
|
3F3A475000
|
unkown
|
page read and write
|
|
|
|
18BE724E000
|
unkown
|
page read and write
|
|
|
|
25DA15D0000
|
heap default
|
page read and write
|
|
|
|
18BE7957000
|
unkown
|
page read and write
|
|
|
|
1A6B748E000
|
unkown
|
page read and write
|
|
|
|
7FF5BB186000
|
unkown
|
page readonly
|
|
|
|
1A6B95F8000
|
unkown
|
page read and write
|
|
|
|
46063FB000
|
unkown
|
page read and write
|
|
|
|
1B8AD713000
|
unkown
|
page read and write
|
|
|
|
7FF53E1BD000
|
unkown
|
page readonly
|
|
|
|
7FF59D36B000
|
unkown
|
page readonly
|
|
|
|
180F728E000
|
unkown
|
page read and write
|
|
|
|
6FFD07B000
|
unkown
|
page read and write
|
|
|
|
7FF500024000
|
unkown
|
page readonly
|
|
|
|
1B8AD656000
|
unkown
|
page read and write
|
|
|
|
6FFD379000
|
unkown
|
page read and write
|
|
|
|
1A6B7479000
|
unkown
|
page read and write
|
|
|
|
18BE7933000
|
unkown
|
page read and write
|
|
|
|
25DA16E0000
|
unkown
|
page readonly
|
|
|
|
7FF59D6A2000
|
unkown
|
page readonly
|
|
|
|
7FF5D864D000
|
unkown
|
page readonly
|
|
|
|
7FF5D8CEB000
|
unkown
|
page readonly
|
|
|
|
180F71E0000
|
unkown
|
page readonly
|
|
|
|
562CB7F000
|
unkown
|
page read and write
|
|
|
|
16E1F252000
|
unkown
|
page read and write
|
|
|
|
7FF53E9B4000
|
unkown
|
page readonly
|
|
|
|
18BE7E02000
|
unkown
|
page read and write
|
|
|
|
18BE7247000
|
unkown
|
page read and write
|
|
|
|
7FF500269000
|
unkown
|
page readonly
|
|
|
|
18BE70F0000
|
unkown
|
page readonly
|
|
|
|
1A6B951B000
|
unkown
|
page read and write
|
|
|
|
18BE7308000
|
unkown
|
page read and write
|
|
|
|
1A6B9902000
|
unkown
|
page read and write
|
|
|
|
18BE77E0000
|
unkown
|
page read and write
|
|
|
|
1A6BA510000
|
unkown
|
page read and write
|
|
|
|
1A6B9A00000
|
unkown
|
page readonly
|
|
|
|
4605CFE000
|
unkown
|
page read and write
|
|
|
|
7FF4FFB43000
|
unkown
|
page readonly
|
|
|
|
7FF54EC85000
|
unkown
|
page readonly
|
|
|
|
18BE7942000
|
unkown
|
page read and write
|
|
|
|
1B8AF3F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D8E61000
|
unkown
|
page readonly
|
|
|
|
1B8AD550000
|
unkown
|
page readonly
|
|
|
|
1A6BA010000
|
unkown
|
page read and write
|
|
|
|
7FF53E923000
|
unkown
|
page readonly
|
|
|
|
1A6B746F000
|
unkown
|
page read and write
|
|
|
|
3F3A6F7000
|
unkown
|
page read and write
|
|
|
|
7FF538F84000
|
unkown
|
page readonly
|
|
|
|
241F3140000
|
unkown
|
page readonly
|
|
|
|
7FF5002E2000
|
unkown
|
page readonly
|
|
|
|
7FF5DB19A000
|
unkown
|
page readonly
|
|
|
|
3AE7779000
|
unkown
|
page read and write
|
|
|
|
1A6BA110000
|
unkown
|
page read and write
|
|
|
|
1B8AD6ED000
|
unkown
|
page read and write
|
|
|
|
7FF5D8ABA000
|
unkown
|
page readonly
|
|
|
|
7FF573D11000
|
unkown
|
page readonly
|
|
|
|
191D3000000
|
unkown
|
page read and write
|
|
|
|
7FF579288000
|
unkown
|
page readonly
|
|
|
|
7FF59D287000
|
unkown
|
page readonly
|
|
|
|
7FF5D8C31000
|
unkown
|
page readonly
|
|
|
|
7FF5DA8D7000
|
unkown
|
page readonly
|
|
|
|
180F71D0000
|
unkown
|
page readonly
|
|
|
|
25DA1610000
|
unkown
|
page read and write
|
|
|
|
7FF4FFAF1000
|
unkown
|
page readonly
|
|
|
|
7FF573A71000
|
unkown
|
page readonly
|
|
|
|
7FF53E960000
|
unkown
|
page readonly
|
|
|
|
A298F7F000
|
unkown
|
page read and write
|
|
|
|
7FF573B84000
|
unkown
|
page readonly
|
|
|
|
6FFD2FF000
|
unkown
|
page read and write
|
|
|
|
1A6BA000000
|
unkown
|
page read and write
|
|
|
|
562C7FE000
|
unkown
|
page read and write
|
|
|
|
7FF53E9D1000
|
unkown
|
page readonly
|
|
|
|
385FCF9000
|
unkown
|
page read and write
|
|
|
|
2415ABF0000
|
unkown
|
page read and write
|
|
|
|
4605D79000
|
unkown
|
page read and write
|
|
|
|
7FF5BAF35000
|
unkown
|
page readonly
|
|
|
|
46065FA000
|
unkown
|
page read and write
|
|
|
|
58C8D3B000
|
unkown
|
page read and write
|
|
|
|
1B8AD800000
|
unkown
|
page readonly
|
|
|
|
1A6BA313000
|
unkown
|
page read and write
|
|
|
|
7FF5DB1B0000
|
unkown
|
page readonly
|
|
|
|
1A6B746A000
|
unkown
|
page read and write
|
|
|
|
1A6B746E000
|
unkown
|
page read and write
|
|
|
|
7FF5BB148000
|
unkown
|
page readonly
|
|
|
|
18BE723C000
|
unkown
|
page read and write
|
|
|
|
7FF59D5BB000
|
unkown
|
page readonly
|
|
|
|
7FF544A5C000
|
unkown
|
page readonly
|
|
|
|
7FF59D694000
|
unkown
|
page readonly
|
|
|
|
20E6A990000
|
unkown
|
page write copy
|
|
|
|
241F2600000
|
unkown
|
page readonly
|
|
|
|
7FF53E98C000
|
unkown
|
page readonly
|
|
|
|
24159110000
|
heap default
|
page read and write
|
|
|
|
156D0CB000
|
unkown
|
page read and write
|
|
|
|
F7EA9FA000
|
unkown
|
page read and write
|
|
|
|
1B8AF630000
|
unkown
|
page readonly
|
|
|
|
7FF5D8DF5000
|
unkown
|
page readonly
|
|
|
|
20E6AA3F000
|
unkown
|
page read and write
|
|
|
|
7FF544E0E000
|
unkown
|
page readonly
|
|
|
|
7FF573C74000
|
unkown
|
page readonly
|
|
|
|
7FF573C37000
|
unkown
|
page readonly
|
|
|
|
7FF5BB110000
|
unkown
|
page readonly
|
|
|
|
7FF544601000
|
unkown
|
page readonly
|
|
|
|
7FF5BA96D000
|
unkown
|
page readonly
|
|
|
|
1A6B95F1000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFB6000
|
unkown
|
page readonly
|
|
|
|
562C9F7000
|
unkown
|
page read and write
|
|
|
|
7FF5DAF27000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD62000
|
unkown
|
page readonly
|
|
|
|
99C750F000
|
unkown
|
page read and write
|
|
|
|
7FF59D491000
|
unkown
|
page readonly
|
|
|
|
7FF53E9D6000
|
unkown
|
page readonly
|
|
|
|
1A6B9600000
|
unkown
|
page read and write
|
|
|
|
18BE77E0000
|
unkown
|
page readonly
|
|
|
|
21DC1D20000
|
unkown
|
page readonly
|
|
|
|
7FF544CA8000
|
unkown
|
page readonly
|
|
|
|
180F7400000
|
unkown
|
page readonly
|
|
|
|
18BE7226000
|
unkown
|
page read and write
|
|
|
|
21DC1CD0000
|
unkown
|
page write copy
|
|
|
|
7FF544E08000
|
unkown
|
page readonly
|
|
|
|
7FF57911B000
|
unkown
|
page readonly
|
|
|
|
25DA1602000
|
unkown
|
page read and write
|
|
|
|
1A6B95F2000
|
unkown
|
page read and write
|
|
|
|
7FF5BB10E000
|
unkown
|
page readonly
|
|
|
|
7FF4FFFF0000
|
unkown
|
page readonly
|
|
|
|
7FF54EB88000
|
unkown
|
page readonly
|
|
|
|
7FF538ED8000
|
unkown
|
page readonly
|
|
|
|
180F7289000
|
unkown
|
page read and write
|
|
|
|
18BE7313000
|
unkown
|
page read and write
|
|
|
|
18BE7980000
|
unkown
|
page read and write
|
|
|
|
18BE7967000
|
unkown
|
page read and write
|
|
|
|
46068FC000
|
unkown
|
page read and write
|
|
|
|
1A6B92D0000
|
unkown
|
page read and write
|
|
|
|
241F2470000
|
unkown
|
page read and write
|
|
|
|
18BE7A00000
|
unkown
|
page readonly
|
|
|
|
241F2427000
|
unkown
|
page read and write
|
|
|
|
156D4F9000
|
unkown
|
page read and write
|
|
|
|
7FF54E94A000
|
unkown
|
page readonly
|
|
|
|
191D3013000
|
unkown
|
page read and write
|
|
|
|
7FF5BA971000
|
unkown
|
page readonly
|
|
|
|
1B8AD6D1000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDB0000
|
unkown
|
page readonly
|
|
|
|
24159200000
|
unkown
|
page read and write
|
|
|
|
1A6B7400000
|
unkown
|
page read and write
|
|
|
|
7FF53E85B000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E69000
|
unkown
|
page readonly
|
|
|
|
7FF5791E3000
|
unkown
|
page readonly
|
|
|
|
1A6B95B4000
|
unkown
|
page read and write
|
|
|
|
7FF573C20000
|
unkown
|
page readonly
|
|
|
|
7FF5D8CF3000
|
unkown
|
page readonly
|
|
|
|
1A6B747D000
|
unkown
|
page read and write
|
|
|
|
1A6B8E70000
|
unkown
|
page read and write
|
|
|
|
7FF5DB294000
|
unkown
|
page readonly
|
|
|
|
7FF538EE4000
|
unkown
|
page readonly
|
|
|
|
1A6B9942000
|
unkown
|
page read and write
|
|
|
|
7FF54EC6A000
|
unkown
|
page readonly
|
|
|
|
18BE724D000
|
unkown
|
page read and write
|
|
|
|
7FF5D8E07000
|
unkown
|
page readonly
|
|
|
|
3AE7A7E000
|
unkown
|
page read and write
|
|
|
|
241F2458000
|
unkown
|
page read and write
|
|
|
|
7FF54EC4F000
|
unkown
|
page readonly
|
|
|
|
156D57F000
|
unkown
|
page read and write
|
|
|
|
7FF5DB229000
|
unkown
|
page readonly
|
|
|
|
99C748C000
|
unkown
|
page read and write
|
|
|
|
156D1CF000
|
unkown
|
page read and write
|
|
|
|
18BE7E02000
|
unkown
|
page read and write
|
|
|
|
18BE72F7000
|
unkown
|
page read and write
|
|
|
|
20E6C8D0000
|
unkown
|
page read and write
|
|
|
|
7FF5BAED6000
|
unkown
|
page readonly
|
|
|
|
7FF579079000
|
unkown
|
page readonly
|
|
|
|
7FF57921A000
|
unkown
|
page readonly
|
|
|
|
7FF53E781000
|
unkown
|
page readonly
|
|
|
|
1B8AD6CD000
|
unkown
|
page read and write
|
|
|
|
191D306B000
|
unkown
|
page read and write
|
|
|
|
7FF54EAD9000
|
unkown
|
page readonly
|
|
|
|
1A6B955C000
|
unkown
|
page read and write
|
|
|
|
20E6C570000
|
unkown
|
page readonly
|
|
|
|
7FF538F0E000
|
unkown
|
page readonly
|
|
|
|
16E20D10000
|
unkown
|
page readonly
|
|
|
|
7FF59D5C7000
|
unkown
|
page readonly
|
|
|
|
7FF5BAECB000
|
unkown
|
page readonly
|
|
|
|
7FF5BB1F4000
|
unkown
|
page readonly
|
|
|
|
7FF54ECDE000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE07000
|
unkown
|
page readonly
|
|
|
|
1A6BA410000
|
unkown
|
page read and write
|
|
|
|
18BE77C0000
|
unkown
|
page readonly
|
|
|
|
7FF573C9D000
|
unkown
|
page readonly
|
|
|
|
7FF59D69A000
|
unkown
|
page readonly
|
|
|
|
7FF573C0A000
|
unkown
|
page readonly
|
|
|
|
7FF53E9C8000
|
unkown
|
page readonly
|
|
|
|
1A6B7469000
|
unkown
|
page read and write
|
|
|
|
18BE7980000
|
unkown
|
page read and write
|
|
|
|
18BE72C0000
|
unkown
|
page read and write
|
|
|
|
241F26D0000
|
unkown
|
page readonly
|
|
|
|
99C758B000
|
unkown
|
page read and write
|
|
|
|
180F7C00000
|
unkown
|
page readonly
|
|
|
|
21DC1A29000
|
unkown
|
page read and write
|
|
|
|
1A6B747D000
|
unkown
|
page read and write
|
|
|
|
1B8AD613000
|
unkown
|
page read and write
|
|
|
|
241F2B30000
|
unkown
|
page readonly
|
|
|
|
3AE77FA000
|
unkown
|
page read and write
|
|
|
|
562C29B000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE05000
|
unkown
|
page readonly
|
|
|
|
1A6B75BA000
|
unkown
|
page read and write
|
|
|
|
16E1F229000
|
unkown
|
page read and write
|
|
|
|
1A6B7380000
|
heap default
|
page read and write
|
|
|
|
191D306B000
|
unkown
|
page read and write
|
|
|
|
18BE72B1000
|
unkown
|
page read and write
|
|
|
|
7FF53E868000
|
unkown
|
page readonly
|
|
|
|
7FF54E93C000
|
unkown
|
page readonly
|
|
|
|
3F3A7FF000
|
unkown
|
page read and write
|
|
|
|
7FF544BC1000
|
unkown
|
page readonly
|
|
|
|
7FF573B01000
|
unkown
|
page readonly
|
|
|
|
46060FC000
|
unkown
|
page read and write
|
|
|
|
7FF544D40000
|
unkown
|
page readonly
|
|
|
|
16E1F400000
|
unkown
|
page write copy
|
|
|
|
7FF544DB7000
|
unkown
|
page readonly
|
|
|
|
7FF5DB1FA000
|
unkown
|
page readonly
|
|
|
|
7FF573AC3000
|
unkown
|
page readonly
|
|
|
|
241F23E0000
|
heap default
|
page read and write
|
|
|
|
6FFD17A000
|
unkown
|
page read and write
|
|
|
|
58C907F000
|
unkown
|
page read and write
|
|
|
|
241F2459000
|
unkown
|
page read and write
|
|
|
|
7FF538EA5000
|
unkown
|
page readonly
|
|
|
|
24159400000
|
unkown
|
page write copy
|
|
|
|
7FF59CE11000
|
unkown
|
page readonly
|
|
|
|
1B8AF523000
|
unkown
|
page read and write
|
|
|
|
7FF544C81000
|
unkown
|
page readonly
|
|
|
|
7FF5DB22D000
|
unkown
|
page readonly
|
|
|
|
7FF538ECC000
|
unkown
|
page readonly
|
|
|
|
7FF59D5E8000
|
unkown
|
page readonly
|
|
|
|
21DC1C00000
|
unkown
|
page readonly
|
|
|
|
18BE71D0000
|
unkown
|
page readonly
|
|
|
|
1A6B9340000
|
unkown
|
page readonly
|
|
|
|
7FF54EAB4000
|
unkown
|
page readonly
|
|
|
|
1A6B9541000
|
unkown
|
page read and write
|
|
|
|
7FF54ED71000
|
unkown
|
page readonly
|
|
|
|
1B8AF513000
|
unkown
|
page read and write
|
|
|
|
1A6B747B000
|
unkown
|
page read and write
|
|
|
|
7FF573C6A000
|
unkown
|
page readonly
|
|
|
|
1B8AF554000
|
unkown
|
page read and write
|
|
|
|
7FF50009A000
|
unkown
|
page readonly
|
|
|
|
7FF5737E6000
|
unkown
|
page readonly
|
|
|
|
16E1F0C0000
|
heap private
|
page read and write
|
|
|
|
7FF500093000
|
unkown
|
page readonly
|
|
|
|
18BE7E02000
|
unkown
|
page read and write
|
|
|
|
241F2C02000
|
unkown
|
page read and write
|
|
|
|
18BE794A000
|
unkown
|
page read and write
|
|
|
|
7FF573C0C000
|
unkown
|
page readonly
|
|
|
|
7FF54EC12000
|
unkown
|
page readonly
|
|
|
|
7FF5387F3000
|
unkown
|
page readonly
|
|
|
|
7FF5001BB000
|
unkown
|
page readonly
|
|
|
|
25DA1611000
|
unkown
|
page read and write
|
|
|
|
7FF5DB29A000
|
unkown
|
page readonly
|
|
|
|
25DA15DB000
|
heap default
|
page read and write
|
|
|
|
1A6B9350000
|
unkown
|
page read and write
|
|
|
|
1A6B747A000
|
unkown
|
page read and write
|
|
|
|
7FF59D61E000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E1F000
|
unkown
|
page readonly
|
|
|
|
1A6B743F000
|
unkown
|
page read and write
|
|
|
|
18BE7945000
|
unkown
|
page read and write
|
|
|
|
1A6B9800000
|
unkown
|
page read and write
|
|
|
|
18BE724B000
|
unkown
|
page read and write
|
|
|
|
1B8AD5A0000
|
unkown
|
page readonly
|
|
|
|
7FF54E7E2000
|
unkown
|
page readonly
|
|
|
|
1A6B7470000
|
unkown
|
page read and write
|
|
|
|
7FF54EC43000
|
unkown
|
page readonly
|
|
|
|
7FF579220000
|
unkown
|
page readonly
|
|
|
|
241F243C000
|
unkown
|
page read and write
|
|
|
|
1A6B7513000
|
unkown
|
page read and write
|
|
|
|
1A6BA110000
|
unkown
|
page read and write
|
|
|
|
99C7A77000
|
unkown
|
page read and write
|
|
|
|
F7EAB7F000
|
unkown
|
page read and write
|
|
|
|
16E1F213000
|
unkown
|
page read and write
|
|
|
|
7FF54EAA5000
|
unkown
|
page readonly
|
|
|
|
7FF5DAD70000
|
unkown
|
page readonly
|
|
|
|
1B8AF3F0000
|
unkown
|
page read and write
|
|
|
|
1A6B749D000
|
unkown
|
page read and write
|
|
|
|
18BE72A6000
|
unkown
|
page read and write
|
|
|
|
7FF53E61C000
|
unkown
|
page readonly
|
|
|
|
7FF54EAD1000
|
unkown
|
page readonly
|
|
|
|
4605EFE000
|
unkown
|
page read and write
|
|
|
|
18BE72A7000
|
unkown
|
page read and write
|
|
|
|
7FF54E859000
|
unkown
|
page readonly
|
|
|
|
7FF544E84000
|
unkown
|
page readonly
|
|
|
|
58C917A000
|
unkown
|
page read and write
|
|
|
|
7FF5BAFF1000
|
unkown
|
page readonly
|
|
|
|
7FF5DB114000
|
unkown
|
page readonly
|
|
|
|
1B8AD641000
|
unkown
|
page read and write
|
|
|
|
7FF54EC97000
|
unkown
|
page readonly
|
|
|
|
7FF59D5B5000
|
unkown
|
page readonly
|
|
|
|
1B8AD629000
|
unkown
|
page read and write
|
|
|
|
7FF5D8DCF000
|
unkown
|
page readonly
|
|
|
|
7FF544B66000
|
unkown
|
page readonly
|
|
|
|
241F2E00000
|
unkown
|
page readonly
|
|
|
|
7FF59D60E000
|
unkown
|
page readonly
|
|
|
|
16E1F26B000
|
unkown
|
page read and write
|
|
|
|
18BE7302000
|
unkown
|
page read and write
|
|
|
|
18BE7944000
|
unkown
|
page read and write
|
|
|
|
1A6B9500000
|
unkown
|
page read and write
|
|
|
|
7FF54EC1C000
|
unkown
|
page readonly
|
|
|
|
7FF59D629000
|
unkown
|
page readonly
|
|
|
|
7FF579128000
|
unkown
|
page readonly
|
|
|
|
7FF54ECC4000
|
unkown
|
page readonly
|
|
|
|
1A6B74BB000
|
unkown
|
page read and write
|
|
|
|
7FF5D8E3A000
|
unkown
|
page readonly
|
|
|
|
25DA16D0000
|
unkown
|
page readonly
|
|
|
|
1B8AD6DD000
|
unkown
|
page read and write
|
|
|
|
7FF5D8E4E000
|
unkown
|
page readonly
|
|
|
|
21DC1A02000
|
unkown
|
page read and write
|
|
|
|
18BE7270000
|
unkown
|
page read and write
|
|
|
|
18BE7957000
|
unkown
|
page read and write
|
|
|
|
16E20C10000
|
unkown
|
page read and write
|
|
|
|
3AE76FE000
|
unkown
|
page read and write
|
|
|
|
7FF5737F5000
|
unkown
|
page readonly
|
|
|
|
7FF544DEA000
|
unkown
|
page readonly
|
|
|
|
385F8FB000
|
unkown
|
page read and write
|
|
|
|
58C927F000
|
unkown
|
page read and write
|
|
|
|
7FF5DB2A2000
|
unkown
|
page readonly
|
|
|
|
7FF59D5B0000
|
unkown
|
page readonly
|
|
|
|
180F7F40000
|
unkown
|
page readonly
|
|
|
|
180F7213000
|
unkown
|
page read and write
|
|
|
|
7FF57921E000
|
unkown
|
page readonly
|
|
|
|
7FF5DAF30000
|
unkown
|
page readonly
|
|
|
|
7FF579101000
|
unkown
|
page readonly
|
|
|
|
24159302000
|
unkown
|
page read and write
|
|
|
|
7FF5001BF000
|
unkown
|
page readonly
|
|
|
|
1A6B9563000
|
unkown
|
page read and write
|
|
|
|
562C39B000
|
unkown
|
page read and write
|
|
|
|
21DC19F0000
|
heap default
|
page read and write
|
|
|
|
2415923F000
|
unkown
|
page read and write
|
|
|
|
562CC78000
|
unkown
|
page read and write
|
|
|
|
7FF5D8AC7000
|
unkown
|
page readonly
|
|
|
|
1A6B74B1000
|
unkown
|
page read and write
|
|
|
|
18BE7E02000
|
unkown
|
page read and write
|
|
|
|
3AE797C000
|
unkown
|
page read and write
|
|
|
|
7FF54ECCA000
|
unkown
|
page readonly
|
|
|
|
7FF500041000
|
unkown
|
page readonly
|
|
|
|
18BE79A1000
|
unkown
|
page read and write
|
|
|
|
18BE793D000
|
unkown
|
page read and write
|
|
|
|
1A6B958A000
|
unkown
|
page read and write
|
|
|
|
7FF54EBCD000
|
unkown
|
page readonly
|
|
|
|
7FF500266000
|
unkown
|
page readonly
|
|
|
|
7FF544E19000
|
unkown
|
page readonly
|
|
|
|
7FF54ECE8000
|
unkown
|
page readonly
|
|
|
|
156D67E000
|
unkown
|
page read and write
|
|
|
|
7FF5002DA000
|
unkown
|
page readonly
|
|
|
|
3F3A27C000
|
unkown
|
page read and write
|
|
|
|
7FF544D63000
|
unkown
|
page readonly
|
|
|
|
1A6B7479000
|
unkown
|
page read and write
|
|
|
|
1A6B9882000
|
unkown
|
page read and write
|
|
|
|
7FF579237000
|
unkown
|
page readonly
|
|
|
|
3F3A37E000
|
unkown
|
page read and write
|
|
|
|
7FF5DB1F4000
|
unkown
|
page readonly
|
|
|
|
1A6B7477000
|
unkown
|
page read and write
|
|
|
|
21DC35E0000
|
unkown
|
page readonly
|
|
|
|
7FF5BADE7000
|
unkown
|
page readonly
|
|
|
|
1A6B9350000
|
unkown
|
page read and write
|
|
|
|
156D479000
|
unkown
|
page read and write
|
|
|
|
7FF53E98F000
|
unkown
|
page readonly
|
|
|
|
16E1F300000
|
unkown
|
page read and write
|
|
|
|
1A6B951F000
|
unkown
|
page read and write
|
|
|
|
7FF53E863000
|
unkown
|
page readonly
|
|
|
|
99C7C7F000
|
unkown
|
page read and write
|
|
|
|
1A6B76D0000
|
unkown
|
page readonly
|
|
|
|
7FF500244000
|
unkown
|
page readonly
|
|
|
|
7FF573B6D000
|
unkown
|
page readonly
|
|
|
|
241F244D000
|
unkown
|
page read and write
|
|
|
|
18BE792C000
|
unkown
|
page read and write
|
|
|
|
20E6A9E0000
|
unkown
|
page readonly
|
|
|
|
1A6B73E0000
|
unkown
|
page readonly
|
|
|
|
18BE794C000
|
unkown
|
page read and write
|
|
|
|
1A6B7475000
|
unkown
|
page read and write
|
|
|
|
7FF544DAB000
|
unkown
|
page readonly
|
|
|
|
1A6B74D1000
|
unkown
|
page read and write
|
|
|
|
46069FC000
|
unkown
|
page read and write
|
|
|
|
7FF5BB1FA000
|
unkown
|
page readonly
|
|
|
|
7FF5BB15A000
|
unkown
|
page readonly
|
|
|
|
7FF5BB127000
|
unkown
|
page readonly
|
|
|
|
24159120000
|
unkown
|
page readonly
|
|
|
|
7FF59CE0D000
|
unkown
|
page readonly
|
|
|
|
7FF5BB11B000
|
unkown
|
page readonly
|
|
|
|
191D2F40000
|
unkown
|
page readonly
|
|
|
|
7FF53E7B9000
|
unkown
|
page readonly
|
|
|
|
18BE7248000
|
unkown
|
page read and write
|
|
|
|
1A6B9350000
|
unkown
|
page read and write
|
|
|
|
1A6BA310000
|
unkown
|
page read and write
|
|
|
|
1B8AD5B0000
|
heap private
|
page read and write
|
|
|
|
7FF5D8EDA000
|
unkown
|
page readonly
|
|
|
|
4605E79000
|
unkown
|
page read and write
|
|
|
|
7FF573B1E000
|
unkown
|
page readonly
|
|
|
|
1A6B8F70000
|
unkown
|
page readonly
|
|
|
|
21DC1F20000
|
unkown
|
page readonly
|
|
|
|
7FF5DB1DF000
|
unkown
|
page readonly
|
|
|
|
7FF5D8D8C000
|
unkown
|
page readonly
|
|
|
|
7FF54EA58000
|
unkown
|
page readonly
|
|
|
|
1A6B747B000
|
unkown
|
page read and write
|
|
|
|
7FF5001FB000
|
unkown
|
page readonly
|
|
|
|
241F2B40000
|
unkown
|
page read and write
|
|
|
|
7FF538EFE000
|
unkown
|
page readonly
|
|
|
|
7FF544E92000
|
unkown
|
page readonly
|
|
|
|
18BE7288000
|
unkown
|
page read and write
|
|
|
|
7FF544E16000
|
unkown
|
page readonly
|
|
|
|
7FF5BB13C000
|
unkown
|
page readonly
|
|
|
|
180F7A02000
|
unkown
|
page read and write
|
|
|
|
241F2450000
|
unkown
|
page read and write
|
|
|
|
7FF5002E1000
|
unkown
|
page readonly
|
|
|
|
7FF5D8EE1000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E1C000
|
unkown
|
page readonly
|
|
|
|
1A6B7517000
|
unkown
|
page read and write
|
|
|
|
7FF544A6A000
|
unkown
|
page readonly
|
|
|
|
180F723C000
|
unkown
|
page read and write
|
|
|
|
7FF538F8A000
|
unkown
|
page readonly
|
|
|
|
1A6BA410000
|
unkown
|
page read and write
|
|
|
|
7FF5BB0B0000
|
unkown
|
page readonly
|
|
|
|
7FF59D376000
|
unkown
|
page readonly
|
|
|
|
18BE7229000
|
unkown
|
page read and write
|
|
|
|
1B8AF620000
|
unkown
|
page readonly
|
|
|
|
1A6B9544000
|
unkown
|
page read and write
|
|
|
|
7FF54EA3B000
|
unkown
|
page readonly
|
|
|
|
18BE7790000
|
unkown
|
page readonly
|
|
|
|
18BE77F0000
|
unkown
|
page read and write
|
|
|
|
18BE72C7000
|
unkown
|
page read and write
|
|
|
|
7FF5D8BCF000
|
unkown
|
page readonly
|
|
|
|
241F2400000
|
unkown
|
page read and write
|
|
|
|
7FF5D8BC8000
|
unkown
|
page readonly
|
|
|
|
1B8AD600000
|
unkown
|
page read and write
|
|
|
|
7FF573C25000
|
unkown
|
page readonly
|
|
|
|
7FF578A81000
|
unkown
|
page readonly
|
|
|
|
460677B000
|
unkown
|
page read and write
|
|
|
|
241F2490000
|
unkown
|
page read and write
|
|
|
|
7FF54ECF1000
|
unkown
|
page readonly
|
|
|
|
7FF59D618000
|
unkown
|
page readonly
|
|
|
|
7FF573C57000
|
unkown
|
page readonly
|
|
|
|
1A6B7579000
|
unkown
|
page read and write
|
|
|
|
1B8AEFA0000
|
unkown
|
page read and write
|
|
|
|
18BE793F000
|
unkown
|
page read and write
|
|
|
|
7FF53E9DD000
|
unkown
|
page readonly
|
|
|
|
241F2500000
|
unkown
|
page read and write
|
|
|
|
1A6B7477000
|
unkown
|
page read and write
|
|
|
|
18BE7988000
|
unkown
|
page read and write
|
|
|
|
18BE7939000
|
unkown
|
page read and write
|
|
|
|
20E6AA00000
|
unkown
|
page read and write
|
|
|
|
1A6BA210000
|
unkown
|
page read and write
|
|
|
|
7FF579296000
|
unkown
|
page readonly
|
|
|
|
7FF544E8A000
|
unkown
|
page readonly
|
|
|
|
7FF500258000
|
unkown
|
page readonly
|
|
|
|
21DC1A58000
|
unkown
|
page read and write
|
|
|
|
7FF54E957000
|
unkown
|
page readonly
|
|
|
|
18BE79A1000
|
unkown
|
page read and write
|
|
|
|
1A6BA310000
|
unkown
|
page read and write
|
|
|
|
20E6C470000
|
unkown
|
page read and write
|
|
|
|
7FF538EF4000
|
unkown
|
page readonly
|
|
|
|
460647B000
|
unkown
|
page read and write
|
|
|
|
7FF579304000
|
unkown
|
page readonly
|
|
|
|
7FF544DE4000
|
unkown
|
page readonly
|
|
|
|
7FF5001F5000
|
unkown
|
page readonly
|
|
|
|
7FF54EC5F000
|
unkown
|
page readonly
|
|
|
|
180F7256000
|
unkown
|
page read and write
|
|
|
|
1A6B7455000
|
unkown
|
page read and write
|
|
|
|
7FF544C9B000
|
unkown
|
page readonly
|
|
|
|
1B8AD702000
|
unkown
|
page read and write
|
|
|
|
562CAFF000
|
unkown
|
page read and write
|
|
|
|
1A6B752F000
|
unkown
|
page read and write
|
|
|
|
7FF538F91000
|
unkown
|
page readonly
|
|
|
|
7FF53E977000
|
unkown
|
page readonly
|
|
|
|
562C8F7000
|
unkown
|
page read and write
|
|
|
|
7FF544DA0000
|
unkown
|
page readonly
|
|
|
|
25DA15A0000
|
unkown
|
page read and write
|
|
|
|
7FF54EBC6000
|
unkown
|
page readonly
|
|
|
|
7FF5D8D92000
|
unkown
|
page readonly
|
|
|
|
18BE79A8000
|
unkown
|
page read and write
|
|
|
|
7FF53E1C1000
|
unkown
|
page readonly
|
|
|
|
7FF5001EE000
|
unkown
|
page readonly
|
|
|
|
1A6B95D1000
|
unkown
|
page read and write
|
|
|
|
562CE7E000
|
unkown
|
page read and write
|
|
|
|
18BE79A1000
|
unkown
|
page read and write
|
|
|
|
7FF54EC22000
|
unkown
|
page readonly
|
|
|
|
1A6B9535000
|
unkown
|
page read and write
|
|
|
|
16E1F26B000
|
unkown
|
page read and write
|
|
|
|
24159450000
|
unkown
|
page readonly
|
|
|
|
1A6B7472000
|
unkown
|
page read and write
|
|
|
|
1B8B0010000
|
unkown
|
page read and write
|
|
|
|
7FF544D42000
|
unkown
|
page readonly
|
|
|
|
21DC34E0000
|
unkown
|
page read and write
|
|
|
|
1A6B7470000
|
unkown
|
page read and write
|
|
|
|
7FF5BB018000
|
unkown
|
page readonly
|
|
|
|
18BE79A1000
|
unkown
|
page read and write
|
|
|
|
7FF5D8C15000
|
unkown
|
page readonly
|
|
|
|
180F7313000
|
unkown
|
page read and write
|
|
|
|
191D3100000
|
unkown
|
page read and write
|
|
|
|
7FF5D86F1000
|
unkown
|
page readonly
|
|
|
|
1A6B74AD000
|
unkown
|
page read and write
|
|
|
|
7FF59D27A000
|
unkown
|
page readonly
|
|
|
|
7FF5BAF69000
|
unkown
|
page readonly
|
|
|
|
16E1F26B000
|
unkown
|
page read and write
|
|
|
|
24159254000
|
unkown
|
page read and write
|
|
|
|
24159202000
|
unkown
|
page read and write
|
|
|
|
7FF500154000
|
unkown
|
page readonly
|
|
|
|
7FF573C7F000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E44000
|
unkown
|
page readonly
|
|
|
|
18BE793A000
|
unkown
|
page read and write
|
|
|
|
241590B0000
|
heap private
|
page read and write
|
|
|
|
7FF54E4E1000
|
unkown
|
page readonly
|
|
|
|
7FF5BB181000
|
unkown
|
page readonly
|
|
|
|
2415B060000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFAB000
|
unkown
|
page readonly
|
|
|
|
7FF578A7D000
|
unkown
|
page readonly
|
|
|
|
1B8AD67B000
|
unkown
|
page read and write
|
|
|
|
7FF5BB164000
|
unkown
|
page readonly
|
|
|
|
1A6B9743000
|
unkown
|
page read and write
|
|
|
|
18BE7900000
|
unkown
|
page read and write
|
|
|
|
1B8AD6A7000
|
unkown
|
page read and write
|
|
|
|
4606AFE000
|
unkown
|
page read and write
|
|
|
|
25DA15E1000
|
unkown
|
page read and write
|
|
|
|
7FF5001C4000
|
unkown
|
page readonly
|
|
|
|
1A6B7532000
|
unkown
|
page read and write
|
|
|
|
1A6B7390000
|
unkown
|
page write copy
|
|
|
|
1A6B7474000
|
unkown
|
page read and write
|
|
|
|
6FFD1FF000
|
unkown
|
page read and write
|
|
|
|
7FF54ECF9000
|
unkown
|
page readonly
|
|
|
|
1B8AD500000
|
unkown
|
page write copy
|
|
|
|
460617B000
|
unkown
|
page read and write
|
|
|
|
385FDFF000
|
unkown
|
page read and write
|
|
|
|
460667B000
|
unkown
|
page read and write
|
|
|
|
7FF5000F3000
|
unkown
|
page readonly
|
|
|
|
16E1F650000
|
unkown
|
page readonly
|
|
|
|
7FF544DA5000
|
unkown
|
page readonly
|
|
|
|
1A6BA510000
|
unkown
|
page read and write
|
|
|
|
7FF54EB61000
|
unkown
|
page readonly
|
|
|
|
7FF59D5FA000
|
unkown
|
page readonly
|
|
|
|
1A6BA710000
|
unkown
|
page read and write
|
|
|
|
18BE72E6000
|
unkown
|
page read and write
|
|
|
|
241591F0000
|
unkown
|
page readonly
|
|
|
|
191D2E10000
|
heap default
|
page read and write
|
|
|
|
A298EFF000
|
unkown
|
page read and write
|
|
|
|
7FF54EC80000
|
unkown
|
page readonly
|
|
|
|
7FF538EEA000
|
unkown
|
page readonly
|
|
|
|
1A6B92E0000
|
unkown
|
page readonly
|
|
|
|
1A6B748C000
|
unkown
|
page read and write
|
|
|
|
20E6A920000
|
heap private
|
page read and write
|
|
|
|
4605F7B000
|
unkown
|
page read and write
|
|
|
|
18BE7967000
|
unkown
|
page read and write
|
|
|
|
7FF54EC6C000
|
unkown
|
page readonly
|
|
|
|
191D306B000
|
unkown
|
page read and write
|
|
|
|
18BE79C2000
|
unkown
|
page read and write
|
|
|
|
1B8AD6C3000
|
unkown
|
page read and write
|
|
|
|
7FF5BADCC000
|
unkown
|
page readonly
|
|
|
|
7FF53E998000
|
unkown
|
page readonly
|
|
|
|
7FF5D8DF0000
|
unkown
|
page readonly
|
|
|
|
7FF5BB189000
|
unkown
|
page readonly
|
|
|
|
7FF5DB2A1000
|
unkown
|
page readonly
|
|
|
|
7FF4FFDC5000
|
unkown
|
page readonly
|
|
|
|
18BE7010000
|
heap default
|
page read and write
|
|
|
|
7FF5DB21E000
|
unkown
|
page readonly
|
|
|
|
20E6AB02000
|
unkown
|
page read and write
|
|
|
|
7FF573C88000
|
unkown
|
page readonly
|
|
|
|
7FF59D621000
|
unkown
|
page readonly
|
|
|
|
25DA15E6000
|
heap default
|
page read and write
|
|
|
|
1A6B9783000
|
unkown
|
page read and write
|
|
|
|
7FF53E95E000
|
unkown
|
page readonly
|
|
|
|
7FF5D8BB6000
|
unkown
|
page readonly
|
|
|
|
7FF57924F000
|
unkown
|
page readonly
|
|
|
|
1A6B74FF000
|
unkown
|
page read and write
|
|
|
|
191D306B000
|
unkown
|
page read and write
|
|
|
|
7FF5001F0000
|
unkown
|
page readonly
|
|
|
|
7FF5D8C26000
|
unkown
|
page readonly
|
|
|
|
1A6B74A1000
|
unkown
|
page read and write
|
|
|
|
7FF573C4C000
|
unkown
|
page readonly
|
|
|
|
18BE7944000
|
unkown
|
page read and write
|
|
|
|
7FF578EEF000
|
unkown
|
page readonly
|
|
|
|
F7EAA7A000
|
unkown
|
page read and write
|
|
|
|
7FF5DB001000
|
unkown
|
page readonly
|
|
|
|
1A6B7472000
|
unkown
|
page read and write
|
|
|
|
7FF500192000
|
unkown
|
page readonly
|
|
|
|
7FF5D8C41000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB10000
|
unkown
|
page readonly
|
|
|
|
1A6BA610000
|
unkown
|
page read and write
|
|
|
|
191D3029000
|
unkown
|
page read and write
|
|
|
|
7FF573D0A000
|
unkown
|
page readonly
|
|
|
|
7FF59D26C000
|
unkown
|
page readonly
|
|
|
|
180F7308000
|
unkown
|
page read and write
|
|
|
|
180F74D0000
|
unkown
|
page readonly
|
|
|
|
1A6BA410000
|
unkown
|
page read and write
|
|
|
|
7FF54EC7E000
|
unkown
|
page readonly
|
|
|
|
7FF54EA46000
|
unkown
|
page readonly
|
|
|
|
180F7270000
|
unkown
|
page read and write
|
|
|
|
7FF500234000
|
unkown
|
page readonly
|
|
|
|
7FF53E902000
|
unkown
|
page readonly
|
|
|
|
1A6B7413000
|
unkown
|
page read and write
|
|
|
|
16E1F26B000
|
unkown
|
page read and write
|
|
|
|
241F2455000
|
unkown
|
page read and write
|
|
|
|
18BE7967000
|
unkown
|
page read and write
|
|
|
|
1A6BA310000
|
unkown
|
page read and write
|
|
|
|
7FF59D4B3000
|
unkown
|
page readonly
|
|
|
|
241F244C000
|
unkown
|
page read and write
|
|
|
|
7FF5DAD85000
|
unkown
|
page readonly
|
|
|
|
180F7160000
|
heap private
|
page read and write
|
|
|
|
7FF5BB18D000
|
unkown
|
page readonly
|
|
|
|
18BE79A9000
|
unkown
|
page read and write
|
|
|
|
7FF573B1B000
|
unkown
|
page readonly
|
|
|
|
7FF53EA4A000
|
unkown
|
page readonly
|
|
|
|
1A6B9743000
|
unkown
|
page read and write
|
|
|
|
25DA15FA000
|
unkown
|
page read and write
|
|
|
|
7FF544BC5000
|
unkown
|
page readonly
|
|
|
|
7FF5D8DEE000
|
unkown
|
page readonly
|
|
|
|
191D2EF0000
|
unkown
|
page write copy
|
|
|
|
1A6B95EF000
|
unkown
|
page read and write
|
|
|
|
7FF59D5F4000
|
unkown
|
page readonly
|
|
|
|
562C67F000
|
unkown
|
page read and write
|
|
|
|
1A6B7479000
|
unkown
|
page read and write
|
|
|
|
1A6B74DA000
|
unkown
|
page read and write
|
|
|
|
7FF500143000
|
unkown
|
page readonly
|
|
|
|
16E1F314000
|
unkown
|
page read and write
|
|
|
|
58C90F9000
|
unkown
|
page read and write
|
|
|
|
4605DFE000
|
unkown
|
page read and write
|
|
|
|
16E1F23F000
|
unkown
|
page read and write
|
|
|
|
7FF544E1D000
|
unkown
|
page readonly
|
|
|
|
7FF5D8ABF000
|
unkown
|
page readonly
|
|
|
|
16E1F202000
|
unkown
|
page read and write
|
|
|
|
1B8AF3F0000
|
unkown
|
page read and write
|
|
|
|
16E1F26B000
|
unkown
|
page read and write
|
|
|
|
16E1F120000
|
heap default
|
page read and write
|
|
|
|
180F7250000
|
unkown
|
page read and write
|
|
|
|
7FF4FFF67000
|
unkown
|
page readonly
|
|
|
|
1A6B746F000
|
unkown
|
page read and write
|
|
|
|
7FF5D8DDA000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E27000
|
unkown
|
page readonly
|
|
|
|
25DA15F6000
|
unkown
|
page read and write
|
|
|
|
7FF5387C0000
|
unkown
|
page readonly
|
|
|
|
3AE74FF000
|
unkown
|
page read and write
|
|
|
|
385FC7A000
|
unkown
|
page read and write
|
|
|
|
3AE787D000
|
unkown
|
page read and write
|
|
|
|
7FF53E785000
|
unkown
|
page readonly
|
|
|
|
7FF544A77000
|
unkown
|
page readonly
|
|
|
|
7FF544BF9000
|
unkown
|
page readonly
|
|
|
|
7FF54ECF6000
|
unkown
|
page readonly
|
|
|
|
1B8AF600000
|
unkown
|
page readonly
|
|
|
|
7FF544E91000
|
unkown
|
page readonly
|
|
|
|
18BE7966000
|
unkown
|
page read and write
|
|
|
|
7FF50015C000
|
unkown
|
page readonly
|
|
|
|
7FF544A6F000
|
unkown
|
page readonly
|
|
|
|
7FF5D8DDC000
|
unkown
|
page readonly
|
|
|
|
7FF53E726000
|
unkown
|
page readonly
|
|
|
|
A298CFF000
|
unkown
|
page read and write
|
|
|
|
7FF57922B000
|
unkown
|
page readonly
|
|
|
|
7FF573D04000
|
unkown
|
page readonly
|
|
|
|
1A6B7429000
|
unkown
|
page read and write
|
|
|
|
3AE75FE000
|
unkown
|
page read and write
|
|
|
|
20E6AA13000
|
unkown
|
page read and write
|
|
|
|
7FF573C2B000
|
unkown
|
page readonly
|
|
|
|
1A6B9350000
|
unkown
|
page readonly
|
|
|
|
7FF544B5B000
|
unkown
|
page readonly
|
|
|
|
18BE79A8000
|
unkown
|
page read and write
|
|
|
|
191D3002000
|
unkown
|
page read and write
|
|
|
|
1A6BA210000
|
unkown
|
page read and write
|
|
|
|
7FF5D8DFB000
|
unkown
|
page readonly
|
|
|
|
191D306B000
|
unkown
|
page read and write
|
|
|
|
25DA1580000
|
unkown
|
page read and write
|
|
|
|
180F7200000
|
unkown
|
page read and write
|
|
|
|
191D306B000
|
unkown
|
page read and write
|
|
|
|
1A6B95C2000
|
unkown
|
page read and write
|
|
|
|
7FF538F08000
|
unkown
|
page readonly
|
|
|
|
1B8AF402000
|
unkown
|
page read and write
|
|
|
|
460637B000
|
unkown
|
page read and write
|
|
|
|
7FF4FF9A0000
|
unkown
|
page readonly
|
|
|
|
A298E79000
|
unkown
|
page read and write
|
|
|
|
21DC1A00000
|
unkown
|
page read and write
|
|
|
|
7FF50025E000
|
unkown
|
page readonly
|
|
|
|
A298C7A000
|
unkown
|
page read and write
|
|
|
|
7FF5BADDF000
|
unkown
|
page readonly
|
|
|
|
1A6B9402000
|
unkown
|
page read and write
|
|
|
|
7FF538EAB000
|
unkown
|
page readonly
|
|
|
|
99C7B7F000
|
unkown
|
page read and write
|
|
|
|
7FF5DB1AA000
|
unkown
|
page readonly
|
|
|
|
7FF5DB1AE000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E58000
|
unkown
|
page readonly
|
|
|
|
7FF5791C0000
|
unkown
|
page readonly
|
|
|
|
7FF579225000
|
unkown
|
page readonly
|
|
|
|
18BE7967000
|
unkown
|
page read and write
|
|
|
|
241F2508000
|
unkown
|
page read and write
|
|
|
|
7FF50023A000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E34000
|
unkown
|
page readonly
|
|
|
|
18BE7924000
|
unkown
|
page read and write
|
|
|
|
7FF500227000
|
unkown
|
page readonly
|
|
|
|
7FF5733D0000
|
unkown
|
page readonly
|
|
|
|
156D5FE000
|
unkown
|
page read and write
|
|
|
|
3AE747B000
|
unkown
|
page read and write
|
|
|
|
7FF5001DC000
|
unkown
|
page readonly
|
|
|
|
241F2413000
|
unkown
|
page read and write
|
|
|
|
7FF5000EE000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E5E000
|
unkown
|
page readonly
|
|
|
|
7FF538ECF000
|
unkown
|
page readonly
|
|
|
|
7FF5D89C9000
|
unkown
|
page readonly
|
|
|
|
1B8AD6BD000
|
unkown
|
page read and write
|
|
|
|
7FF5000EB000
|
unkown
|
page readonly
|
|
|
|
7FF579045000
|
unkown
|
page readonly
|
|
|
|
7FF5DB0AB000
|
unkown
|
page readonly
|
|
|
|
7FF5DB20F000
|
unkown
|
page readonly
|
|
|
|
25DA17F0000
|
unkown
|
page readonly
|
|
|
|
7FF54EC7A000
|
unkown
|
page readonly
|
|
|
|
7FF5BB013000
|
unkown
|
page readonly
|
|
|
|
7FF573B73000
|
unkown
|
page readonly
|
|
|
|
20E6AB13000
|
unkown
|
page read and write
|
|
|
|
7FF573C64000
|
unkown
|
page readonly
|
|
|
|
7FF53E9BE000
|
unkown
|
page readonly
|
|
|
|
1A6B95D5000
|
unkown
|
page read and write
|
|
|
|
21DC1990000
|
heap private
|
page read and write
|
|
|
|
16E1F450000
|
unkown
|
page readonly
|
|
|
|
1A6B95BF000
|
unkown
|
page read and write
|
|
|
|
7FF53E9A4000
|
unkown
|
page readonly
|
|
|
|
7FF5737E0000
|
unkown
|
page readonly
|
|
|
|
18BE77E0000
|
unkown
|
page read and write
|
|
|
|
7FF5DB1DC000
|
unkown
|
page readonly
|
|
|
|
7FF5BB0D3000
|
unkown
|
page readonly
|
|
|
|
7FF59D5DF000
|
unkown
|
page readonly
|
|
|
|
7FF57927E000
|
unkown
|
page readonly
|
|
|
|
7FF53E965000
|
unkown
|
page readonly
|
|
|
|
7FF500031000
|
unkown
|
page readonly
|
|
|
|
7FF5DB1B5000
|
unkown
|
page readonly
|
|
|
|
1A6B9591000
|
unkown
|
page read and write
|
|
|
|
7FF5445FD000
|
unkown
|
page readonly
|
|
|
|
191D306B000
|
unkown
|
page read and write
|
|
|
|
7FF53E62F000
|
unkown
|
page readonly
|
|
|
|
7FF5BB154000
|
unkown
|
page readonly
|
|
|
|
18BE7916000
|
unkown
|
page read and write
|
|
|
|
3F3A57B000
|
unkown
|
page read and write
|
|
|
|
7FF54ED72000
|
unkown
|
page readonly
|
|
|
|
1B8AD6DF000
|
unkown
|
page read and write
|
|
|
|
1A6B74E4000
|
unkown
|
page read and write
|
|
|
|
180F7300000
|
unkown
|
page read and write
|
|
|
|
18BE7944000
|
unkown
|
page read and write
|
|
|
|
7FF5BB202000
|
unkown
|
page readonly
|
|
|
|
7FF4FFCCE000
|
unkown
|
page readonly
|
|
|
|
18BE724A000
|
unkown
|
page read and write
|
|
|
|
460607A000
|
unkown
|
page read and write
|
|
|
|
7FF5DAD76000
|
unkown
|
page readonly
|
|
|
|
7FF5001CF000
|
unkown
|
page readonly
|
|
|
|
7FF4FFF70000
|
unkown
|
page readonly
|
|
|
|
1A6B747B000
|
unkown
|
page read and write
|
|
|
|
7FF50013D000
|
unkown
|
page readonly
|
|
|
|
24159213000
|
unkown
|
page read and write
|
|
|
|
7FF5000D1000
|
unkown
|
page readonly
|
|
|
|
25DA15F6000
|
heap default
|
page read and write
|
|
|
|
21DC1B02000
|
unkown
|
page read and write
|
|
|
|
25DA14B0000
|
unkown
|
page readonly
|
|
|
|
7FF579258000
|
unkown
|
page readonly
|
|
|
|
7FF54ECD4000
|
unkown
|
page readonly
|
|
|
|
1A6B7320000
|
heap private
|
page read and write
|
|
|
|
18BE7944000
|
unkown
|
page read and write
|
|
|
|
241F2454000
|
unkown
|
page read and write
|
|
|
|
F7EAAFF000
|
unkown
|
page read and write
|
|
|
|
7FF59D3D1000
|
unkown
|
page readonly
|
|
|
|
18BE7E00000
|
unkown
|
page read and write
|
|
|
|
7FF53E9D9000
|
unkown
|
page readonly
|
|
|
|
191D49A0000
|
unkown
|
page read and write
|
|
|
|
7FF579299000
|
unkown
|
page readonly
|
|
|
|
7FF579311000
|
unkown
|
page readonly
|
|
|
|
1B8AF50F000
|
unkown
|
page read and write
|
|
|
|
21DC1B13000
|
unkown
|
page read and write
|
|
|
|
7FF544D9E000
|
unkown
|
page readonly
|
|
|
|
4605FFB000
|
unkown
|
page read and write
|
|
|
|
7FF54ECB7000
|
unkown
|
page readonly
|
|
|
|
1A6B7469000
|
unkown
|
page read and write
|
|
|
|
241F2502000
|
unkown
|
page read and write
|
|
|
|
1B8AD717000
|
unkown
|
page read and write
|
|
|
|
18BE7967000
|
unkown
|
page read and write
|
|
|
|
7FF53E95A000
|
unkown
|
page readonly
|
|
|
|
180F71C0000
|
heap default
|
page read and write
|
|
|
|
18BE7939000
|
unkown
|
page read and write
|
|
|
|
7FF5BB0B2000
|
unkown
|
page readonly
|
|
|
|
7FF544DF4000
|
unkown
|
page readonly
|
|
|
|
21DC1A13000
|
unkown
|
page read and write
|
|
|
|
7FF544DFE000
|
unkown
|
page readonly
|
|
|
|
3F3A2FE000
|
unkown
|
page read and write
|
|
|
|
156D14E000
|
unkown
|
page read and write
|
|
|
|
385F97E000
|
unkown
|
page read and write
|
|
|
|
460697D000
|
unkown
|
page read and write
|
|
|
|
7FF53E841000
|
unkown
|
page readonly
|
|
|
|
16E1F302000
|
unkown
|
page read and write
|
|
|
|
7FF5DB103000
|
unkown
|
page readonly
|
|
|
|
7FF53EA44000
|
unkown
|
page readonly
|
|
|
|
7FF578EF7000
|
unkown
|
page readonly
|
|
|
|
20E6AC00000
|
unkown
|
page readonly
|
|
|
|
241F2380000
|
heap private
|
page read and write
|
|
|
|
7FF544DD8000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB47000
|
unkown
|
page readonly
|
|
|
|
20E6A980000
|
heap default
|
page read and write
|
|
|
|
1A6B7600000
|
unkown
|
page readonly
|
|
|
|
7FF579274000
|
unkown
|
page readonly
|
|
|
|
18BE793F000
|
unkown
|
page read and write
|
|
|
|
7FF573C8E000
|
unkown
|
page readonly
|
|
|
|
7FF53E900000
|
unkown
|
page readonly
|
|
|
|
191D303F000
|
unkown
|
page read and write
|
|
|
|
1B8AD420000
|
heap default
|
page read and write
|
|
|
|
7FF5BB00B000
|
unkown
|
page readonly
|
|
|
|
7FF5000F8000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD52000
|
unkown
|
page readonly
|
|
|
|
1A6B746A000
|
unkown
|
page read and write
|
|
|
|
7FF5D8D3D000
|
unkown
|
page readonly
|
|
|
|
58C91FE000
|
unkown
|
page read and write
|
|
|
|
7FF5DB053000
|
unkown
|
page readonly
|
|
|
|
1A6B9567000
|
unkown
|
page read and write
|
|
|
|
6FFD0FF000
|
unkown
|
page read and write
|
|
|
|
1A6B74BE000
|
unkown
|
page read and write
|
|
|
|
16E1F26B000
|
unkown
|
page read and write
|
|
|
|
7FF5D8D82000
|
unkown
|
page readonly
|
|
|
|
241F2452000
|
unkown
|
page read and write
|
|
|
|
7FF57924C000
|
unkown
|
page readonly
|
|
|
|
7FF579123000
|
unkown
|
page readonly
|
|
|
|
7FF5D8CD1000
|
unkown
|
page readonly
|
|
|
|
7FF54EC8B000
|
unkown
|
page readonly
|
|
|
|
7FF54EC4B000
|
unkown
|
page readonly
|
|
|
|
7FF57930A000
|
unkown
|
page readonly
|
|
|
|
3AE79F9000
|
unkown
|
page read and write
|
|
|
|
1A6B92F0000
|
heap private
|
page read and write
|
|
|
|
7FF5D8C24000
|
unkown
|
page readonly
|
|
|
|
1A6B9556000
|
unkown
|
page read and write
|
|
|
|
7FF59D62D000
|
unkown
|
page readonly
|
|
|
|
46066FB000
|
unkown
|
page read and write
|
|
|
|
7FF538F92000
|
unkown
|
page readonly
|
|
|
|
18BE7945000
|
unkown
|
page read and write
|
|
|
|
7FF544DCF000
|
unkown
|
page readonly
|
|
|
|
7FF59D626000
|
unkown
|
page readonly
|
|
|
|
7FF5D8D36000
|
unkown
|
page readonly
|
|
|
|
7FF54EA5F000
|
unkown
|
page readonly
|
|
|
|
18BE7400000
|
unkown
|
page readonly
|
|
|
|
18BE79C2000
|
unkown
|
page read and write
|
|
|
|
7FF57929D000
|
unkown
|
page readonly
|
|
|
|
7FF578EEA000
|
unkown
|
page readonly
|
|
|
|
7FF538F19000
|
unkown
|
page readonly
|
|
|
|
7FF53E62A000
|
unkown
|
page readonly
|
|
There are 1059 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
file:///C:/Users/user/Desktop/RemitSwift119353%20xlsx.htm?rand=13InboxLightaspxn.1774256418&fid.4.1252899642&fid=1&fav.1&rand.13InboxLight.aspxn.1774256418&fid.1252899642&fid.1&fav.1&email=gunnar.grech@go.com.mt&loginpage=&.rand=13InboxLight.aspx?n=1774256418&fid=4
|
|
|
|
file:///C:/Users/user/Desktop/RemitSwift119353%20xlsx.htm
|
|
|
|
https://www.microsoft.com/en-GB/servicesagreement/
|
|
|
|
https://privacy.microsoft./en-GB/privacystatement
|
|