Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
6ccd0000.bilper.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\www.msn[2].xml
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\URW0GA4Q\contextual.media[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{51398716-ACBC-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{51398718-ACBC-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\52-478955-68ddb2ab[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAzjSw3[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB14EN7h[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB14hq0P[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB15AQNm[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368,
frames 3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1dCSOZ[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1gbJwB[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1gkGJb[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1gkSzr[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1gkXk3[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1gkZLA[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1gkZod[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1gl6Gj[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1gl8nk[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1gldCZ[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB6Ma4a[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BBOLLMj[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\a087b85d-b587-4286-b0ee-078d1c9a0535[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\a8a064[1].gif
|
GIF image data, version 89a, 28 x 28
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\aadcdc47-f267-4b70-bc4e-4fdd88f9ef0d[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery-2.1.1.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\location[1].js
|
ASCII text, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\medianet[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\medianet[2].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\otFlat[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\17-361657-68ddb2ab[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\2d-0e97d4-185735b[1].css
|
UTF-8 Unicode text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AA6wTdK[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AA7XCQ3[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAyuliQ[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB10MkbM[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1fV7TT[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1ftEY0[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1gj4Xc[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1gkSmD[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1gkVaQ[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1gl13k[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1gl258[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1gl3Yj[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1gl8uZ[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1glbdN[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1gldiI[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB7hg4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BBY7ARN[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BBnYSFZ[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\cfdbd9[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\de-ch[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\fcmain[1].js
|
HTML document, ASCII text, with very long lines, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\iab2Data[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\1599143076228-3140[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 622x367, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAuTnto[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1bjIri[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1cEP3G[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1cG73h[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1gj6Xu[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1gkM5V[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1gkXm3[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1gl3CU[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1gl3fv[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1gl3iX[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1gl8q9[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB5kTiV[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BBK9Ri5[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BBUZVvV[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BBVuddh[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BBX2afX[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BBih5H[1].png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\e151e5[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\http___cdn.taboola.com_libtrc_static_thumbnails_705322f466ee4e70b10d73d39074748e[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\http___cdn.taboola.com_libtrc_static_thumbnails_GETTY_IMAGES_SKP_1211840846__1v9WbJ7j[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\http___cdn.taboola.com_libtrc_static_thumbnails_bca509ed102719cf60fbcdf8739ff083[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\nrrV27271[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\otTCF-ie[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\4996b9[1].woff
|
Web Open Font Format, TrueType, length 45633, version 1.0
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\55a804ab-e5c6-4b97-9319-86263d365d28[1].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AA8uJZv[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB19K9zb[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1giL6z[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1gjf9R[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1gjtRw[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1gkGOZ[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1gkGPP[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1gkUDu[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1gkUFI[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1gkUfy[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1gkVo6[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1gl8nk[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB5kJAC[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB7gRE[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BBPfCZL[1].png
|
GIF image data, version 89a, 50 x 50
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BBRUB0d[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\a5ea21[1].ico
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\auction[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\de-ch[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\fcmain[1].js
|
HTML document, ASCII text, with very long lines, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\http___cdn.taboola.com_libtrc_static_thumbnails_0b1d4ccdd763949ef17fd57fbd2ddae6[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\http___cdn.taboola.com_libtrc_static_thumbnails_1e82b6ce08a43a6c5447835aefdf3367[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\http___cdn.taboola.com_libtrc_static_thumbnails_25d3a15e34bf9f4ad528fc533b81d965[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\otBannerSdk[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\otPcCenter[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\otSDKStub[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Temp\~DF541F43C609FFB7E2.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DF89FF7A3EA7A6DAC1.TMP
|
data
|
dropped
|
There are 112 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32.exe /s C:\Users\user\Desktop\6ccd0000.bilper.dll
|
||
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\6ccd0000.bilper.dll'
|
||
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\6ccd0000.bilper.dll',#1
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\6ccd0000.bilper.dll',#1
|
||
C:\Program Files\internet explorer\iexplore.exe
|
C:\Program Files\Internet Explorer\iexplore.exe
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\6ccd0000.bilper.dll,DllRegisterServer
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5684 CREDAT:17410 /prefetch:2
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
|
unknown
|
||
https://www.skype.com/de/download-skype
|
unknown
|
||
http://searchads.msn.net/.cfm?&&kp=1&
|
unknown
|
||
https://contextual.media.net/medianet.php?cid=8CU157172
|
unknown
|
||
https://www.msn.com/de-ch/nachrichten/coronareisen
|
unknown
|
||
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
||
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
|
unknown
|
||
https://onedrive.live.com;OneDrive-App
|
unknown
|
||
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
|
unknown
|
||
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_promotionalstripe_na
|
unknown
|
||
https://onedrive.live.com;Fotos
|
unknown
|
||
https://clkde.tradedoubler.com/click?p=295926&a=3064090&g=24886692
|
unknown
|
||
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
unknown
|
||
http://www.amazon.com/
|
unknown
|
||
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
|
unknown
|
||
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
|
unknown
|
||
https://srtb.msn.com:443/notify/viewedg?rid=c1e9117e385f48b69e2586dc53f89581&r=infopane&i=2&
|
unknown
|
||
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
|
unknown
|
||
http://ogp.me/ns/fb#
|
unknown
|
||
http://www.twitter.com/
|
unknown
|
||
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
|
unknown
|
||
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-ss&ued=htt
|
unknown
|
||
https://policies.oath.com/us/en/oath/privacy/index.html
|
unknown
|
||
https://cdn.cookielaw.org/vendorlist/googleData.json
|
unknown
|
||
https://s.yimg.com/lo/api/res/1.2/BXjlWewXmZ47HeV5NPvUYA--~A/Zmk9ZmlsbDt3PTYyMjtoPTM2ODthcHBpZD1nZW1
|
unknown
|
||
https://outlook.com/
|
unknown
|
||
https://outlook.live.com/mail/deeplink/compose;Kalender
|
unknown
|
||
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
|
unknown
|
||
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
|
unknown
|
||
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
||
https://www.stroeer.com/fileadmin/com/StroeerDSP_deviceStorage.json
|
unknown
|
||
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
|
unknown
|
||
https://cdn.cookielaw.org/vendorlist/iabData.json
|
unknown
|
||
https://www.msn.com/de-ch/homepage/api/pdp/updatepdpdata"
|
unknown
|
||
https://tools.applemediaservices.com/api/badges/download-on-the-app-store/black/en-us?"
|
unknown
|
||
https://cdn.cookielaw.org/vendorlist/iab2Data.json
|
unknown
|
||
https://onedrive.live.com/?qt=mru;Aktuelle
|
unknown
|
||
https://cdn.flurry.com/adTemplates/templates/htmls/clips.html"
|
unknown
|
||
https://www.msn.com/de-ch/?ocid=iehp
|
unknown
|
||
https://web.vortex.data.msn.com/collect/v1
|
unknown
|
||
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
|
unknown
|
||
http://www.reddit.com/
|
unknown
|
||
https://www.skype.com/
|
unknown
|
||
https://www.ebay.ch/?mkcid=1&mkrid=5222-53480-19255-0&siteid=193&campid=5338626668&t
|
unknown
|
||
https://www.msn.com/de-ch/homepage/api/modules/fetch"
|
unknown
|
||
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
|
unknown
|
||
https://mem.gfx.ms/meversion/?partner=msn&market=de-ch"
|
unknown
|
||
https://www.msn.com/de-ch/nachrichten/regional
|
unknown
|
||
http://www.nytimes.com/
|
unknown
|
||
https://web.vortex.data.msn.com/collect/v1/t.gif?name=%27Ms.Webi.PageView%27&ver=%272.1%27&a
|
unknown
|
||
https://www.stroeer.de/konvergenz-konzepte/daten-technologien/stroeer-ssp/datenschutz-ssp.html
|
unknown
|
||
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
|
unknown
|
||
https://www.bidstack.com/privacy-policy/
|
unknown
|
||
https://onedrive.live.com/about/en/download/
|
unknown
|
||
http://popup.taboola.com/german
|
unknown
|
||
https://amzn.to/2TTxhNg
|
unknown
|
||
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
|
unknown
|
||
https://client-s.gateway.messenger.live.com
|
unknown
|
||
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_mestripe_logo_d
|
unknown
|
||
https://www.msn.com/de-ch/
|
unknown
|
||
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
|
unknown
|
||
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
||
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-edge-dhp-river
|
unknown
|
||
https://twitter.com/
|
unknown
|
||
https://beap.gemini.yahoo.com/mbclk?bv=1.0.0&es=MbNFDAAGIS8ybfi5QcIZys3hqmOjoHRPHMH9lPtWuMt6I6Qd
|
unknown
|
||
https://www.msn.com/de-ch
|
unknown
|
||
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
|
unknown
|
||
https://clkde.tradedoubler.com/click?p=245744&a=3064090&g=24903118&epi=ch-de
|
unknown
|
||
https://twitter.com/i/notifications;Ich
|
unknown
|
||
https://www.awin1.com/cread.php?awinmid=11518&awinaffid=696593&clickref=dech-edge-dhp-infopa
|
unknown
|
||
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
|
unknown
|
||
https://outlook.live.com/calendar
|
unknown
|
||
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:au
|
unknown
|
||
https://onedrive.live.com/#qt=mru
|
unknown
|
||
https://api.taboola.com/2.0/json/msn-ch-de-home/recommendations.notify-click?app.type=desktop&ap
|
unknown
|
||
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
|
unknown
|
||
https://www.msn.com?form=MY01O4&OCID=MY01O4
|
unknown
|
||
https://support.skype.com
|
unknown
|
||
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
|
unknown
|
||
https://www.skyscanner.net/flights?associateid=API_B2B_19305_00001&vertical=custom&pageType=
|
unknown
|
||
http://www.youtube.com/
|
unknown
|
||
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1
|
unknown
|
||
http://ogp.me/ns#
|
unknown
|
||
https://clk.tradedoubler.com/click?p=245744&a=3064090&g=21863656
|
unknown
|
||
http://www.wikipedia.com/
|
unknown
|
||
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&http
|
unknown
|
||
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_shop_de&utm
|
unknown
|
||
http://www.live.com/
|
unknown
|
||
https://onedrive.live.com/?qt=mru;OneDrive-App
|
unknown
|
||
https://www.skype.com/de
|
unknown
|
||
https://login.skype.com/login/oauth/microsoft?client_id=738133
|
unknown
|
||
https://onedrive.live.com?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
||
https://ir2.beap.gemini.yahoo.com/mbcsc?bv=1.0.0&es=fQ7kdc4GIS.xVAQOzJHbN9AmCA4x1v5rjinx8DJo92hQ
|
unknown
|
There are 83 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
contextual.media.net
|
184.30.24.22
|
||
tls13.taboola.map.fastly.net
|
151.101.1.44
|
||
hblg.media.net
|
184.30.24.22
|
||
lg3.media.net
|
184.30.24.22
|
||
geolocation.onetrust.com
|
104.20.184.68
|
||
edge.gycpi.b.yahoodns.net
|
87.248.118.23
|
||
s.yimg.com
|
unknown
|
||
web.vortex.data.msn.com
|
unknown
|
||
www.msn.com
|
unknown
|
||
srtb.msn.com
|
unknown
|
||
img.img-taboola.com
|
unknown
|
||
cvision.media.net
|
unknown
|
There are 2 hidden domains, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
192.168.2.1
|
unknown
|
unknown
|
||
104.20.184.68
|
geolocation.onetrust.com
|
United States
|
||
87.248.118.23
|
edge.gycpi.b.yahoodns.net
|
United Kingdom
|
||
151.101.1.44
|
tls13.taboola.map.fastly.net
|
United States
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files\internet explorer\iexplore.exe
|
{51398716-ACBC-11EB-90EB-ECF4BBEA1588}
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
||
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
There are 79 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
1592CA57000
|
unkown
|
page read and write
|
||
7FF591D8F000
|
unkown
|
page readonly
|
||
1D897990000
|
unkown
|
page read and write
|
||
14EF9338000
|
unkown
|
page read and write
|
||
7FF5A77FA000
|
unkown
|
page readonly
|
||
1760B960000
|
unkown
|
page write copy
|
||
14EF9338000
|
unkown
|
page read and write
|
||
1F39932E000
|
unkown
|
page read and write
|
||
19E71430000
|
unkown
|
page readonly
|
||
7FF5579B2000
|
unkown
|
page readonly
|
||
7FF591DAA000
|
unkown
|
page readonly
|
||
7FF557DA4000
|
unkown
|
page readonly
|
||
2A15000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
2A4D000
|
unkown
|
page readonly
|
||
14EF9802000
|
unkown
|
page read and write
|
||
7FF55D657000
|
unkown
|
page readonly
|
||
7FF528BF2000
|
unkown
|
page readonly
|
||
23D0000
|
unkown
|
page readonly
|
||
7FF57979C000
|
unkown
|
page readonly
|
||
2BFD4FE000
|
unkown
|
page read and write
|
||
14EF9800000
|
unkown
|
page read and write
|
||
7FF528A03000
|
unkown
|
page readonly
|
||
14EF9339000
|
unkown
|
page read and write
|
||
7FF557CE3000
|
unkown
|
page readonly
|
||
7FF508100000
|
unkown
|
page readonly
|
||
2416000
|
unkown
|
page readonly
|
||
1F39B3F7000
|
unkown
|
page read and write
|
||
14EF9377000
|
unkown
|
page read and write
|
||
7FF557D48000
|
unkown
|
page readonly
|
||
1F399380000
|
unkown
|
page read and write
|
||
6CCD0000
|
unkown image
|
page readonly
|
||
19BD89F0000
|
heap private
|
page read and write
|
||
1D951510000
|
unkown
|
page readonly
|
||
7FF5797B0000
|
unkown
|
page readonly
|
||
14EF9338000
|
unkown
|
page read and write
|
||
2AD4000
|
unkown
|
page readonly
|
||
2AE8000
|
unkown
|
page readonly
|
||
1F3992C7000
|
unkown
|
page read and write
|
||
7FF5B65EE000
|
unkown
|
page readonly
|
||
1F39B782000
|
unkown
|
page read and write
|
||
29F3000
|
unkown
|
page readonly
|
||
7FF557E8A000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
7FF55D1E1000
|
unkown
|
page readonly
|
||
29F3000
|
unkown
|
page readonly
|
||
7FF578FFC000
|
unkown
|
page readonly
|
||
2488000
|
unkown
|
page readonly
|
||
7FF557EAE000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF52EEB1000
|
unkown
|
page readonly
|
||
1F39927B000
|
unkown
|
page read and write
|
||
1D897A4B000
|
unkown
|
page read and write
|
||
1390000
|
unkown
|
page readonly
|
||
14EF932A000
|
unkown
|
page read and write
|
||
14EF933B000
|
unkown
|
page read and write
|
||
2A61000
|
unkown
|
page readonly
|
||
1D897B13000
|
unkown
|
page read and write
|
||
1D95166E000
|
unkown
|
page read and write
|
||
7FF55D888000
|
unkown
|
page readonly
|
||
7FF5797DF000
|
unkown
|
page readonly
|
||
CE88CFE000
|
unkown
|
page read and write
|
||
B80000
|
unkown
|
page readonly
|
||
2D6F000
|
unkown
|
page read and write
|
||
12D1BC02000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF591CA1000
|
unkown
|
page readonly
|
||
2A5F000
|
unkown
|
page readonly
|
||
14EF933B000
|
unkown
|
page read and write
|
||
7FF5288C6000
|
unkown
|
page readonly
|
||
14EF93AA000
|
unkown
|
page read and write
|
||
14EF9397000
|
unkown
|
page read and write
|
||
14EF932A000
|
unkown
|
page read and write
|
||
14EF9356000
|
unkown
|
page read and write
|
||
7FF591C11000
|
unkown
|
page readonly
|
||
CE0000
|
unkown
|
page readonly
|
||
6CCD0000
|
unkown image
|
page readonly
|
||
19E71500000
|
unkown
|
page write copy
|
||
7FF50B9DF000
|
unkown
|
page readonly
|
||
18980520000
|
heap default
|
page read and write
|
||
1592EA40000
|
unkown
|
page readonly
|
||
7FF591E2E000
|
unkown
|
page readonly
|
||
7FF55D954000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
2883000
|
unkown
|
page read and write
|
||
14EF932C000
|
unkown
|
page read and write
|
||
12D1BE00000
|
unkown
|
page readonly
|
||
2BAF000
|
unkown
|
page read and write
|
||
1592EA20000
|
unkown
|
page readonly
|
||
7FF557D3E000
|
unkown
|
page readonly
|
||
1592C970000
|
unkown
|
page readonly
|
||
35728FF000
|
unkown
|
page read and write
|
||
2AC1000
|
unkown
|
page readonly
|
||
2D30000
|
unkown
|
page readonly
|
||
7FF591EA4000
|
unkown
|
page readonly
|
||
19E730A0000
|
unkown
|
page readonly
|
||
1592CA85000
|
unkown
|
page read and write
|
||
1D9515E0000
|
unkown
|
page readonly
|
||
7FF557E0F000
|
unkown
|
page readonly
|
||
6CCD0000
|
unkown image
|
page readonly
|
||
14EF932B000
|
unkown
|
page read and write
|
||
7FF55D9AF000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF55D96C000
|
unkown
|
page readonly
|
||
7FF5A783C000
|
unkown
|
page readonly
|
||
1D95166F000
|
unkown
|
page read and write
|
||
6563E7A000
|
unkown
|
page read and write
|
||
2BFD479000
|
unkown
|
page read and write
|
||
14EF9345000
|
unkown
|
page read and write
|
||
2AD0000
|
unkown
|
page read and write
|
||
7FF52EDD7000
|
unkown
|
page readonly
|
||
19E71602000
|
unkown
|
page read and write
|
||
14EF932C000
|
unkown
|
page read and write
|
||
1F3992DC000
|
unkown
|
page read and write
|
||
D5BCB79000
|
unkown
|
page read and write
|
||
7FF591A97000
|
unkown
|
page readonly
|
||
14EF932A000
|
unkown
|
page read and write
|
||
7D0000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
7FF50852C000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF528B6E000
|
unkown
|
page readonly
|
||
2E66000
|
unkown
|
page read and write
|
||
14EF932B000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF557DE2000
|
unkown
|
page readonly
|
||
14EF93A7000
|
unkown
|
page read and write
|
||
155F000
|
unkown
|
page read and write
|
||
14EF9338000
|
unkown
|
page read and write
|
||
14EF90F0000
|
unkown
|
page read and write
|
||
14E6DF8000
|
unkown
|
page read and write
|
||
1F399213000
|
unkown
|
page read and write
|
||
14EF9337000
|
unkown
|
page read and write
|
||
14EF933B000
|
unkown
|
page read and write
|
||
14EF932A000
|
unkown
|
page read and write
|
||
14EF93A9000
|
unkown
|
page read and write
|
||
14EF9397000
|
unkown
|
page read and write
|
||
7FF528925000
|
unkown
|
page readonly
|
||
1898052B000
|
heap default
|
page read and write
|
||
237D87E000
|
unkown
|
page read and write
|
||
7FF508631000
|
unkown
|
page readonly
|
||
7FF50BD15000
|
unkown
|
page readonly
|
||
3140000
|
heap private
|
page read and write
|
||
7FF5A7827000
|
unkown
|
page readonly
|
||
1F39936F000
|
unkown
|
page read and write
|
||
14EF9345000
|
unkown
|
page read and write
|
||
7FF591C01000
|
unkown
|
page readonly
|
||
7FF528B44000
|
unkown
|
page readonly
|
||
1F39B700000
|
unkown
|
page read and write
|
||
7FF591CC8000
|
unkown
|
page readonly
|
||
7FF55D73B000
|
unkown
|
page readonly
|
||
1592CAC0000
|
unkown
|
page read and write
|
||
169F000
|
unkown
|
page read and write
|
||
7FF55D91C000
|
unkown
|
page readonly
|
||
1F39B170000
|
unkown
|
page readonly
|
||
1F39928C000
|
unkown
|
page read and write
|
||
7FF557F2A000
|
unkown
|
page readonly
|
||
14EF9400000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
29EC000
|
unkown
|
page readonly
|
||
1D951702000
|
unkown
|
page read and write
|
||
1592EA10000
|
unkown
|
page read and write
|
||
7FF52EE14000
|
unkown
|
page readonly
|
||
7FF557C40000
|
unkown
|
page readonly
|
||
2AC1000
|
unkown
|
page readonly
|
||
1F39B432000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
1109000
|
unkown
|
page read and write
|
||
7FF591D8B000
|
unkown
|
page readonly
|
||
7FF5B6682000
|
unkown
|
page readonly
|
||
1F39BA00000
|
unkown
|
page readonly
|
||
7FF52EB86000
|
unkown
|
page readonly
|
||
1760BA00000
|
unkown
|
page read and write
|
||
14EF9329000
|
unkown
|
page read and write
|
||
7FF55D7C1000
|
unkown
|
page readonly
|
||
14EF932A000
|
unkown
|
page read and write
|
||
14EF935F000
|
unkown
|
page read and write
|
||
12D1BC8A000
|
unkown
|
page read and write
|
||
1F39C110000
|
unkown
|
page read and write
|
||
7FF591D0D000
|
unkown
|
page readonly
|
||
1F39B347000
|
unkown
|
page read and write
|
||
7FF591CC3000
|
unkown
|
page readonly
|
||
1D9514A0000
|
heap private
|
page read and write
|
||
14EF9343000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
1F399302000
|
unkown
|
page read and write
|
||
1F3991A0000
|
heap default
|
page read and write
|
||
7FF57980F000
|
unkown
|
page readonly
|
||
1F39B682000
|
unkown
|
page read and write
|
||
1D951500000
|
heap default
|
page read and write
|
||
7FF5A7763000
|
unkown
|
page readonly
|
||
656477C000
|
unkown
|
page read and write
|
||
6563EFA000
|
unkown
|
page read and write
|
||
14EF88D0000
|
unkown
|
page readonly
|
||
7FF528AFA000
|
unkown
|
page readonly
|
||
1760BA58000
|
unkown
|
page read and write
|
||
1F39934E000
|
unkown
|
page read and write
|
||
14EF933B000
|
unkown
|
page read and write
|
||
1D951613000
|
unkown
|
page read and write
|
||
1D951656000
|
unkown
|
page read and write
|
||
7FF557E57000
|
unkown
|
page readonly
|
||
87A000
|
unkown
|
page read and write
|
||
7FF55D9E8000
|
unkown
|
page readonly
|
||
2493000
|
unkown
|
page readonly
|
||
7FF557D3B000
|
unkown
|
page readonly
|
||
14EF9348000
|
unkown
|
page read and write
|
||
2887000
|
unkown
|
page read and write
|
||
14EF8A8A000
|
unkown
|
page read and write
|
||
14EF9324000
|
unkown
|
page read and write
|
||
2AC5000
|
unkown
|
page readonly
|
||
1F39B140000
|
unkown
|
page readonly
|
||
D275FE000
|
unkown
|
page read and write
|
||
19BD8C52000
|
unkown
|
page read and write
|
||
7FF5A785A000
|
unkown
|
page readonly
|
||
2461000
|
unkown
|
page readonly
|
||
1F39B385000
|
unkown
|
page read and write
|
||
D272FE000
|
unkown
|
page read and write
|
||
7FF508632000
|
unkown
|
page readonly
|
||
14E6B7F000
|
unkown
|
page read and write
|
||
14EF9356000
|
unkown
|
page read and write
|
||
14EF9388000
|
unkown
|
page read and write
|
||
18980546000
|
unkown
|
page read and write
|
||
7FF508545000
|
unkown
|
page readonly
|
||
1592EA10000
|
unkown
|
page read and write
|
||
14EF9331000
|
unkown
|
page read and write
|
||
14EF932B000
|
unkown
|
page read and write
|
||
14EF9300000
|
unkown
|
page read and write
|
||
7FF5A73D0000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
65648FB000
|
unkown
|
page read and write
|
||
1F399200000
|
unkown
|
page read and write
|
||
1592CA00000
|
unkown
|
page read and write
|
||
14EF9337000
|
unkown
|
page read and write
|
||
14EF933B000
|
unkown
|
page read and write
|
||
2B00000
|
unkown
|
page readonly
|
||
1290000
|
heap default
|
page read and write
|
||
7FF528B0B000
|
unkown
|
page readonly
|
||
14EF932A000
|
unkown
|
page read and write
|
||
7FF5A73D6000
|
unkown
|
page readonly
|
||
237D97A000
|
unkown
|
page read and write
|
||
7FF591D60000
|
unkown
|
page readonly
|
||
1F3992D0000
|
unkown
|
page read and write
|
||
7FF557C76000
|
unkown
|
page readonly
|
||
7FF55DA64000
|
unkown
|
page readonly
|
||
1F39C010000
|
unkown
|
page read and write
|
||
7FF55D96A000
|
unkown
|
page readonly
|
||
14EF89B0000
|
unkown
|
page readonly
|
||
14EF937F000
|
unkown
|
page read and write
|
||
CE88F7B000
|
unkown
|
page read and write
|
||
1F399371000
|
unkown
|
page read and write
|
||
1F39C310000
|
unkown
|
page read and write
|
||
1F39B463000
|
unkown
|
page read and write
|
||
14EF9338000
|
unkown
|
page read and write
|
||
21BDDFF000
|
unkown
|
page read and write
|
||
7FF528921000
|
unkown
|
page readonly
|
||
CF0000
|
unkown
|
page read and write
|
||
7FF50BD27000
|
unkown
|
page readonly
|
||
1D951602000
|
unkown
|
page read and write
|
||
2AC5000
|
unkown
|
page readonly
|
||
2BFD3FD000
|
unkown
|
page read and write
|
||
2B91C7E000
|
unkown
|
page read and write
|
||
7FF557C06000
|
unkown
|
page readonly
|
||
7FF557C81000
|
unkown
|
page readonly
|
||
14EF933B000
|
unkown
|
page read and write
|
||
1592CA42000
|
unkown
|
page read and write
|
||
7FF55D9EE000
|
unkown
|
page readonly
|
||
656487B000
|
unkown
|
page read and write
|
||
1F39B400000
|
unkown
|
page read and write
|
||
1760BA02000
|
unkown
|
page read and write
|
||
B1B000
|
unkown
|
page read and write
|
||
1F399269000
|
unkown
|
page read and write
|
||
14EF932B000
|
unkown
|
page read and write
|
||
7FF5A7901000
|
unkown
|
page readonly
|
||
1F39B38C000
|
unkown
|
page read and write
|
||
1F39B502000
|
unkown
|
page read and write
|
||
7FF5797AA000
|
unkown
|
page readonly
|
||
12D1BB90000
|
unkown
|
page readonly
|
||
1F3992D4000
|
unkown
|
page read and write
|
||
14EF932C000
|
unkown
|
page read and write
|
||
1F39B602000
|
unkown
|
page read and write
|
||
14EF8A5F000
|
unkown
|
page read and write
|
||
2B921FF000
|
unkown
|
page read and write
|
||
14EF9802000
|
unkown
|
page read and write
|
||
19BD8D02000
|
unkown
|
page read and write
|
||
7FF528B71000
|
unkown
|
page readonly
|
||
2A5F000
|
unkown
|
page readonly
|
||
1F39C510000
|
unkown
|
page read and write
|
||
14EF8B02000
|
unkown
|
page read and write
|
||
1D951850000
|
unkown
|
page readonly
|
||
1F399271000
|
unkown
|
page read and write
|
||
2BFD07E000
|
unkown
|
page read and write
|
||
14EF9324000
|
unkown
|
page read and write
|
||
14EF932A000
|
unkown
|
page read and write
|
||
7FF557D93000
|
unkown
|
page readonly
|
||
19E71420000
|
heap default
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
14EF9324000
|
unkown
|
page read and write
|
||
7FF5A788D000
|
unkown
|
page readonly
|
||
7FF5B65D4000
|
unkown
|
page readonly
|
||
7FF5B660D000
|
unkown
|
page readonly
|
||
14EF8A8A000
|
unkown
|
page read and write
|
||
7FF50BD64000
|
unkown
|
page readonly
|
||
14EF90E0000
|
unkown
|
page read and write
|
||
7FF55D64F000
|
unkown
|
page readonly
|
||
7FF5579AE000
|
unkown
|
page readonly
|
||
1D897A13000
|
unkown
|
page read and write
|
||
7FF5B6595000
|
unkown
|
page readonly
|
||
14EF8A21000
|
unkown
|
page read and write
|
||
14E6C78000
|
unkown
|
page read and write
|
||
7FF5B65E4000
|
unkown
|
page readonly
|
||
7FF50BD89000
|
unkown
|
page readonly
|
||
7FF528B79000
|
unkown
|
page readonly
|
||
1F39B602000
|
unkown
|
page read and write
|
||
2A72000
|
unkown
|
page readonly
|
||
1F39932B000
|
unkown
|
page read and write
|
||
14EF90E0000
|
unkown
|
page read and write
|
||
7FF528B76000
|
unkown
|
page readonly
|
||
7FF50BD48000
|
unkown
|
page readonly
|
||
1F399279000
|
unkown
|
page read and write
|
||
14EF9345000
|
unkown
|
page read and write
|
||
1592C7E0000
|
heap private
|
page read and write
|
||
7FF52EE04000
|
unkown
|
page readonly
|
||
7FF55D8CD000
|
unkown
|
page readonly
|
||
7FF508493000
|
unkown
|
page readonly
|
||
19E71550000
|
unkown
|
page readonly
|
||
2AF3000
|
unkown
|
page readonly
|
||
1F39B345000
|
unkown
|
page read and write
|
||
1D951700000
|
unkown
|
page read and write
|
||
237DA79000
|
unkown
|
page read and write
|
||
CE88FFE000
|
unkown
|
page read and write
|
||
14EF9356000
|
unkown
|
page read and write
|
||
12D1BC4B000
|
unkown
|
page read and write
|
||
19BD8C3C000
|
unkown
|
page read and write
|
||
1F3992D4000
|
unkown
|
page read and write
|
||
7FF579601000
|
unkown
|
page readonly
|
||
7FF5287CF000
|
unkown
|
page readonly
|
||
2A23000
|
unkown
|
page readonly
|
||
18980360000
|
unkown
|
page readonly
|
||
7FF50BACB000
|
unkown
|
page readonly
|
||
7FF55D883000
|
unkown
|
page readonly
|
||
1F3992D3000
|
unkown
|
page read and write
|
||
21BD7AB000
|
unkown
|
page read and write
|
||
7FF50BD8D000
|
unkown
|
page readonly
|
||
7FF5085B9000
|
unkown
|
page readonly
|
||
14EF932D000
|
unkown
|
page read and write
|
||
7FF50843B000
|
unkown
|
page readonly
|
||
1F39B110000
|
heap private
|
page read and write
|
||
14EF9366000
|
unkown
|
page read and write
|
||
1F39B3F5000
|
unkown
|
page read and write
|
||
7FF557A00000
|
unkown
|
page readonly
|
||
14EF933D000
|
unkown
|
page read and write
|
||
14EF9345000
|
unkown
|
page read and write
|
||
29E9000
|
unkown
|
page readonly
|
||
7FF5A770B000
|
unkown
|
page readonly
|
||
1F3996D0000
|
unkown
|
page readonly
|
||
D2727B000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
14EF9338000
|
unkown
|
page read and write
|
||
7FF508391000
|
unkown
|
page readonly
|
||
7FF50B571000
|
unkown
|
page readonly
|
||
7FF52E621000
|
unkown
|
page readonly
|
||
1592E3A0000
|
unkown
|
page read and write
|
||
7FF50853E000
|
unkown
|
page readonly
|
||
14EF9388000
|
unkown
|
page read and write
|
||
14EF932E000
|
unkown
|
page read and write
|
||
1F39B3D6000
|
unkown
|
page read and write
|
||
1D897B02000
|
unkown
|
page read and write
|
||
14EF9339000
|
unkown
|
page read and write
|
||
18980485000
|
heap private
|
page read and write
|
||
1F39B494000
|
unkown
|
page read and write
|
||
31B0000
|
heap default
|
page read and write
|
||
19BD8D13000
|
unkown
|
page read and write
|
||
14EF9388000
|
unkown
|
page read and write
|
||
125E000
|
unkown
|
page read and write
|
||
29EC000
|
unkown
|
page readonly
|
||
14EF90E0000
|
unkown
|
page read and write
|
||
14EF933B000
|
unkown
|
page read and write
|
||
14EF932C000
|
unkown
|
page read and write
|
||
7FF50BD81000
|
unkown
|
page readonly
|
||
7FF55D9F1000
|
unkown
|
page readonly
|
||
2A0D000
|
unkown
|
page readonly
|
||
14EF9324000
|
unkown
|
page read and write
|
||
7FF5B659B000
|
unkown
|
page readonly
|
||
A1A000
|
heap default
|
page read and write
|
||
7FF5A7661000
|
unkown
|
page readonly
|
||
1F39B3E2000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
2A45000
|
unkown
|
page readonly
|
||
14EF9335000
|
unkown
|
page read and write
|
||
14EF9324000
|
unkown
|
page read and write
|
||
2BF0000
|
heap private
|
page read and write
|
||
7FF5085B6000
|
unkown
|
page readonly
|
||
19BD8C4B000
|
unkown
|
page read and write
|
||
14EF9388000
|
unkown
|
page read and write
|
||
1F39C410000
|
unkown
|
page read and write
|
||
7FF508577000
|
unkown
|
page readonly
|
||
7FF55D920000
|
unkown
|
page readonly
|
||
7FF50BBF1000
|
unkown
|
page readonly
|
||
1592E802000
|
unkown
|
page read and write
|
||
65644FB000
|
unkown
|
page read and write
|
||
19E71654000
|
unkown
|
page read and write
|
||
12D1BC4E000
|
unkown
|
page read and write
|
||
2D20000
|
heap default
|
page read and write
|
||
1592E4A0000
|
unkown
|
page readonly
|
||
7FF579703000
|
unkown
|
page readonly
|
||
7FF52EA8F000
|
unkown
|
page readonly
|
||
7B0000
|
unkown
|
page readonly
|
||
7FF5085AE000
|
unkown
|
page readonly
|
||
7FF591DD7000
|
unkown
|
page readonly
|
||
1D897980000
|
unkown
|
page readonly
|
||
14EF9356000
|
unkown
|
page read and write
|
||
7FF5B65FE000
|
unkown
|
page readonly
|
||
1F39B3AC000
|
unkown
|
page read and write
|
||
7FF57971C000
|
unkown
|
page readonly
|
||
1F39B150000
|
unkown
|
page read and write
|
||
14EF9326000
|
unkown
|
page read and write
|
||
7FF55D746000
|
unkown
|
page readonly
|
||
7FF557E2A000
|
unkown
|
page readonly
|
||
7FF591DAC000
|
unkown
|
page readonly
|
||
65649FA000
|
unkown
|
page read and write
|
||
C90000
|
heap default
|
page read and write
|
||
D278FD000
|
unkown
|
page read and write
|
||
7FF5798A2000
|
unkown
|
page readonly
|
||
12D1BC2A000
|
unkown
|
page read and write
|
||
357238A000
|
unkown
|
page read and write
|
||
1592CB14000
|
unkown
|
page read and write
|
||
279B000
|
unkown
|
page read and write
|
||
7FF528A08000
|
unkown
|
page readonly
|
||
7FF557E3E000
|
unkown
|
page readonly
|
||
14EF9324000
|
unkown
|
page read and write
|
||
7FF50B9E7000
|
unkown
|
page readonly
|
||
BB0000
|
heap default
|
page read and write
|
||
1F39B800000
|
unkown
|
page read and write
|
||
656497A000
|
unkown
|
page read and write
|
||
7FF50B9DA000
|
unkown
|
page readonly
|
||
7FF52EDCB000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
23FF000
|
unkown
|
page readonly
|
||
BC0000
|
unkown
|
page readonly
|
||
7FF528AC3000
|
unkown
|
page readonly
|
||
7FF55D87B000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
14EF9338000
|
unkown
|
page read and write
|
||
1D898202000
|
unkown
|
page read and write
|
||
1592CC00000
|
unkown
|
page readonly
|
||
14EF9A00000
|
unkown
|
page readonly
|
||
1760D470000
|
unkown
|
page read and write
|
||
1F39B368000
|
unkown
|
page read and write
|
||
14EF9388000
|
unkown
|
page read and write
|
||
7FF557E40000
|
unkown
|
page readonly
|
||
7FF5796FD000
|
unkown
|
page readonly
|
||
1F39B702000
|
unkown
|
page read and write
|
||
7FF55D7D9000
|
unkown
|
page readonly
|
||
12D1BA40000
|
heap private
|
page read and write
|
||
14EF9338000
|
unkown
|
page read and write
|
||
14EF9323000
|
unkown
|
page read and write
|
||
14EF89C0000
|
unkown
|
page read and write
|
||
7FF50853A000
|
unkown
|
page readonly
|
||
6CCD0000
|
unkown image
|
page readonly
|
||
14EF9388000
|
unkown
|
page read and write
|
||
1760BC00000
|
unkown
|
page readonly
|
||
7FF591EAA000
|
unkown
|
page readonly
|
||
6EC000
|
unkown
|
page read and write
|
||
1F3991B0000
|
unkown
|
page write copy
|
||
1592CADC000
|
unkown
|
page read and write
|
||
7FF557E2C000
|
unkown
|
page readonly
|
||
1F399313000
|
unkown
|
page read and write
|
||
7FF55D9C4000
|
unkown
|
page readonly
|
||
1F399282000
|
unkown
|
page read and write
|
||
2AD4000
|
unkown
|
page readonly
|
||
7FF507D5F000
|
unkown
|
page readonly
|
||
14EF9338000
|
unkown
|
page read and write
|
||
1D897A52000
|
unkown
|
page read and write
|
||
7FF5B626A000
|
unkown
|
page readonly
|
||
7FF591E28000
|
unkown
|
page readonly
|
||
14EF933B000
|
unkown
|
page read and write
|
||
7FF55D75F000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
23FA000
|
unkown
|
page readonly
|
||
D5BCA7A000
|
unkown
|
page read and write
|
||
18980560000
|
unkown
|
page read and write
|
||
7FF52EE31000
|
unkown
|
page readonly
|
||
7FF55D63C000
|
unkown
|
page readonly
|
||
1898054F000
|
unkown
|
page read and write
|
||
2B91CFE000
|
unkown
|
page read and write
|
||
1F3992FC000
|
unkown
|
page read and write
|
||
19BD8B40000
|
unkown
|
page readonly
|
||
CE88C7B000
|
unkown
|
page read and write
|
||
7FF5287CA000
|
unkown
|
page readonly
|
||
14EF9338000
|
unkown
|
page read and write
|
||
2401000
|
unkown
|
page readonly
|
||
7FF50BC13000
|
unkown
|
page readonly
|
||
14EF8AE1000
|
unkown
|
page read and write
|
||
7FF5797B5000
|
unkown
|
page readonly
|
||
7FF528B38000
|
unkown
|
page readonly
|
||
1592E948000
|
unkown
|
page read and write
|
||
7FF5085A8000
|
unkown
|
page readonly
|
||
1F39B390000
|
unkown
|
page read and write
|
||
7FF5B6590000
|
unkown
|
page readonly
|
||
2B920FE000
|
unkown
|
page read and write
|
||
7FF5287BC000
|
unkown
|
page readonly
|
||
1D95166E000
|
unkown
|
page read and write
|
||
7FF52EE28000
|
unkown
|
page readonly
|
||
1592F010000
|
unkown
|
page read and write
|
||
7FF591E14000
|
unkown
|
page readonly
|
||
7FF50848D000
|
unkown
|
page readonly
|
||
14EF9380000
|
unkown
|
page read and write
|
||
1592E902000
|
unkown
|
page read and write
|
||
14EF933B000
|
unkown
|
page read and write
|
||
B4E000
|
unkown
|
page read and write
|
||
1D95166F000
|
unkown
|
page read and write
|
||
7FF557E9F000
|
unkown
|
page readonly
|
||
14EF8B13000
|
unkown
|
page read and write
|
||
7FF52ED60000
|
unkown
|
page readonly
|
||
1F399232000
|
unkown
|
page read and write
|
||
1592C840000
|
heap default
|
page read and write
|
||
2BFD0FF000
|
unkown
|
page read and write
|
||
7FF55791E000
|
unkown
|
page readonly
|
||
2A5A000
|
unkown
|
page readonly
|
||
7FF50BC0B000
|
unkown
|
page readonly
|
||
1592E917000
|
unkown
|
page read and write
|
||
1D897A4D000
|
unkown
|
page read and write
|
||
14EF8AE3000
|
unkown
|
page read and write
|
||
2AF3000
|
unkown
|
page readonly
|
||
1D898400000
|
unkown
|
page readonly
|
||
65647FB000
|
unkown
|
page read and write
|
||
7FF5A777C000
|
unkown
|
page readonly
|
||
2A1C000
|
unkown
|
page readonly
|
||
14EF9335000
|
unkown
|
page read and write
|
||
14EF934C000
|
unkown
|
page read and write
|
||
7FF50856F000
|
unkown
|
page readonly
|
||
1F399271000
|
unkown
|
page read and write
|
||
2B4E000
|
unkown
|
page read and write
|
||
7FF52ECA1000
|
unkown
|
page readonly
|
||
1F39B365000
|
unkown
|
page read and write
|
||
7FF5916C1000
|
unkown
|
page readonly
|
||
7FF5A73E5000
|
unkown
|
page readonly
|
||
656417B000
|
unkown
|
page read and write
|
||
14EF935F000
|
unkown
|
page read and write
|
||
1F3992C7000
|
unkown
|
page read and write
|
||
1592CB16000
|
unkown
|
page read and write
|
||
7FF55D943000
|
unkown
|
page readonly
|
||
1760B9B0000
|
unkown
|
page readonly
|
||
7FF591D94000
|
unkown
|
page readonly
|
||
14EF9338000
|
unkown
|
page read and write
|
||
2920000
|
unkown
|
page readonly
|
||
7FF591DBA000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
14E677E000
|
unkown
|
page read and write
|
||
21BDA7E000
|
unkown
|
page read and write
|
||
7FF591BE1000
|
unkown
|
page readonly
|
||
1D95166F000
|
unkown
|
page read and write
|
||
14EF9344000
|
unkown
|
page read and write
|
||
1F39B3F9000
|
unkown
|
page read and write
|
||
21BDCF9000
|
unkown
|
page read and write
|
||
7FF591D52000
|
unkown
|
page readonly
|
||
7FF50BE01000
|
unkown
|
page readonly
|
||
1592CA29000
|
unkown
|
page read and write
|
||
1592E989000
|
unkown
|
page read and write
|
||
14EF90E0000
|
unkown
|
page readonly
|
||
7FF50BD0A000
|
unkown
|
page readonly
|
||
7FF52EA8A000
|
unkown
|
page readonly
|
||
14EF9337000
|
unkown
|
page read and write
|
||
1F39B782000
|
unkown
|
page read and write
|
||
14EF9202000
|
unkown
|
page read and write
|
||
1F3992FD000
|
unkown
|
page read and write
|
||
7FF579804000
|
unkown
|
page readonly
|
||
14EF932E000
|
unkown
|
page read and write
|
||
7FF5A7886000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
18980430000
|
unkown
|
page read and write
|
||
1592CA83000
|
unkown
|
page read and write
|
||
6563B7E000
|
unkown
|
page read and write
|
||
1D897A3C000
|
unkown
|
page read and write
|
||
2A2C000
|
unkown
|
page readonly
|
||
12D1BD02000
|
unkown
|
page read and write
|
||
7FF5B65BC000
|
unkown
|
page readonly
|
||
14E6FF8000
|
unkown
|
page read and write
|
||
7FF5082C0000
|
unkown
|
page readonly
|
||
14EF9335000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
14EF8A62000
|
unkown
|
page read and write
|
||
14EF9393000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF5A7810000
|
unkown
|
page readonly
|
||
7FF50BB69000
|
unkown
|
page readonly
|
||
14EF933B000
|
unkown
|
page read and write
|
||
14EF8AC3000
|
unkown
|
page read and write
|
||
7FF55D7B6000
|
unkown
|
page readonly
|
||
14EF9324000
|
unkown
|
page read and write
|
||
14EF9365000
|
unkown
|
page read and write
|
||
7FF591E36000
|
unkown
|
page readonly
|
||
7FF5083E3000
|
unkown
|
page readonly
|
||
1F39B383000
|
unkown
|
page read and write
|
||
7FF52EE0A000
|
unkown
|
page readonly
|
||
1F39B0F0000
|
unkown
|
page readonly
|
||
19BD9402000
|
unkown
|
page read and write
|
||
12D1BBA0000
|
unkown
|
page read and write
|
||
1F39B150000
|
unkown
|
page readonly
|
||
1592C9C0000
|
unkown
|
page readonly
|
||
7FF5A7590000
|
unkown
|
page readonly
|
||
7FF5B65BF000
|
unkown
|
page readonly
|
||
1F39C410000
|
unkown
|
page read and write
|
||
1F3994D0000
|
unkown
|
page readonly
|
||
1D951600000
|
unkown
|
page read and write
|
||
14EF90C0000
|
unkown
|
page readonly
|
||
7FF55D64A000
|
unkown
|
page readonly
|
||
23E7000
|
unkown
|
page readonly
|
||
7FF57979A000
|
unkown
|
page readonly
|
||
CE891FF000
|
unkown
|
page read and write
|
||
14EF932B000
|
unkown
|
page read and write
|
||
7FF557E94000
|
unkown
|
page readonly
|
||
7FF557A15000
|
unkown
|
page readonly
|
||
1F399370000
|
unkown
|
page read and write
|
||
7FF579691000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
1F39B443000
|
unkown
|
page read and write
|
||
14EF9377000
|
unkown
|
page read and write
|
||
14EF9338000
|
unkown
|
page read and write
|
||
159E000
|
unkown
|
page read and write
|
||
14E66FE000
|
unkown
|
page read and write
|
||
14EF9356000
|
unkown
|
page read and write
|
||
7FF557F32000
|
unkown
|
page readonly
|
||
2482000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
1592EA50000
|
unkown
|
page readonly
|
||
7FF528BE4000
|
unkown
|
page readonly
|
||
7FF55D97E000
|
unkown
|
page readonly
|
||
14EF9329000
|
unkown
|
page read and write
|
||
1592EA10000
|
unkown
|
page read and write
|
||
1D897970000
|
unkown
|
page readonly
|
||
4610000
|
heap private
|
page read and write
|
||
7FF55D7B4000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF591621000
|
unkown
|
page readonly
|
||
7FF5A78FA000
|
unkown
|
page readonly
|
||
6CCD1000
|
unkown image
|
page execute read
|
||
1D897B00000
|
unkown
|
page read and write
|
||
7FF5B65DA000
|
unkown
|
page readonly
|
||
14EF933B000
|
unkown
|
page read and write
|
||
14EF933B000
|
unkown
|
page read and write
|
||
14EF8A00000
|
unkown
|
page read and write
|
||
7FF50B56D000
|
unkown
|
page readonly
|
||
14EF8A3C000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
2A53000
|
unkown
|
page readonly
|
||
6564A7C000
|
unkown
|
page read and write
|
||
7FF579826000
|
unkown
|
page readonly
|
||
14E6A77000
|
unkown
|
page read and write
|
||
1F39AC90000
|
unkown
|
page read and write
|
||
7FF591DBE000
|
unkown
|
page readonly
|
||
7FF508584000
|
unkown
|
page readonly
|
||
14EF9338000
|
unkown
|
page read and write
|
||
1F39B500000
|
unkown
|
page read and write
|
||
357267E000
|
unkown
|
page read and write
|
||
7FF557E1F000
|
unkown
|
page readonly
|
||
1592E900000
|
unkown
|
page read and write
|
||
7FF55D9F9000
|
unkown
|
page readonly
|
||
1592CACA000
|
unkown
|
page read and write
|
||
7FF57989A000
|
unkown
|
page readonly
|
||
7FF5796AB000
|
unkown
|
page readonly
|
||
1F39B383000
|
unkown
|
page read and write
|
||
12D1BAA0000
|
heap default
|
page read and write
|
||
1F39C210000
|
unkown
|
page read and write
|
||
1592CAC3000
|
unkown
|
page read and write
|
||
1F39C010000
|
unkown
|
page read and write
|
||
7FF50B9CC000
|
unkown
|
page readonly
|
||
7FF5797DC000
|
unkown
|
page readonly
|
||
14EF932B000
|
unkown
|
page read and write
|
||
2BFD2FA000
|
unkown
|
page read and write
|
||
7FF508540000
|
unkown
|
page readonly
|
||
7FF591D62000
|
unkown
|
page readonly
|
||
7FF557D21000
|
unkown
|
page readonly
|
||
19E71629000
|
unkown
|
page read and write
|
||
1760BB02000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
14EF9854000
|
unkown
|
page read and write
|
||
7FF557EB9000
|
unkown
|
page readonly
|
||
19BD8A60000
|
unkown
|
page readonly
|
||
F9C000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
12D1BC3C000
|
unkown
|
page read and write
|
||
7FF52EA7C000
|
unkown
|
page readonly
|
||
2A7B000
|
unkown
|
page readonly
|
||
1D897C00000
|
unkown
|
page readonly
|
||
7FF579370000
|
unkown
|
page readonly
|
||
7FF55D7A1000
|
unkown
|
page readonly
|
||
19BD8C02000
|
unkown
|
page read and write
|
||
23CC000
|
unkown
|
page readonly
|
||
2A4D000
|
unkown
|
page readonly
|
||
14EF9345000
|
unkown
|
page read and write
|
||
7FF5B6609000
|
unkown
|
page readonly
|
||
1F39B313000
|
unkown
|
page read and write
|
||
14EF9338000
|
unkown
|
page read and write
|
||
7FF52EE36000
|
unkown
|
page readonly
|
||
237D9FF000
|
unkown
|
page read and write
|
||
14EF933A000
|
unkown
|
page read and write
|
||
14EF93BA000
|
unkown
|
page read and write
|
||
7FF557CEA000
|
unkown
|
page readonly
|
||
7FF5A7864000
|
unkown
|
page readonly
|
||
7FF52ECBB000
|
unkown
|
page readonly
|
||
238C000
|
unkown
|
page readonly
|
||
1F39932F000
|
unkown
|
page read and write
|
||
7FF508106000
|
unkown
|
page readonly
|
||
7FF52EDC0000
|
unkown
|
page readonly
|
||
14E6EF9000
|
unkown
|
page read and write
|
||
7FF55D9B7000
|
unkown
|
page readonly
|
||
1592CAF5000
|
unkown
|
page read and write
|
||
14EF9340000
|
unkown
|
page read and write
|
||
1D951800000
|
unkown
|
page write copy
|
||
CE892FF000
|
unkown
|
page read and write
|
||
14EF9327000
|
unkown
|
page read and write
|
||
1D897890000
|
heap default
|
page read and write
|
||
2A47000
|
unkown
|
page readonly
|
||
7FF52EE39000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
1200000
|
unkown
|
page read and write
|
||
7FF5A7815000
|
unkown
|
page readonly
|
||
7FF557DE0000
|
unkown
|
page readonly
|
||
19BD8D08000
|
unkown
|
page read and write
|
||
7FF5287D7000
|
unkown
|
page readonly
|
||
1F39B3FB000
|
unkown
|
page read and write
|
||
129B000
|
heap default
|
page read and write
|
||
30B0000
|
heap private
|
page read and write
|
||
2A76000
|
unkown
|
page readonly
|
||
1D898060000
|
unkown
|
page readonly
|
||
14EF93A9000
|
unkown
|
page read and write
|
||
7FF55D98B000
|
unkown
|
page readonly
|
||
7FF52EEB2000
|
unkown
|
page readonly
|
||
1F399276000
|
unkown
|
page read and write
|
||
7FF52835D000
|
unkown
|
page readonly
|
||
23A0000
|
unkown
|
page readonly
|
||
14EF93BC000
|
unkown
|
page read and write
|
||
189804A0000
|
unkown
|
page readonly
|
||
7FF55D559000
|
unkown
|
page readonly
|
||
19BD9600000
|
unkown
|
page readonly
|
||
14EF9388000
|
unkown
|
page read and write
|
||
19BD8C70000
|
unkown
|
page read and write
|
||
656447D000
|
unkown
|
page read and write
|
||
7FF591D06000
|
unkown
|
page readonly
|
||
1F39B802000
|
unkown
|
page read and write
|
||
D276F7000
|
unkown
|
page read and write
|
||
CE88D7D000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF591E31000
|
unkown
|
page readonly
|
||
7FF557E14000
|
unkown
|
page readonly
|
||
7FF591B9F000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF5A7774000
|
unkown
|
page readonly
|
||
14EF9356000
|
unkown
|
page read and write
|
||
14EF9335000
|
unkown
|
page read and write
|
||
19BD8A50000
|
heap default
|
page read and write
|
||
7FF52EBE1000
|
unkown
|
page readonly
|
||
7FF591B86000
|
unkown
|
page readonly
|
||
1F39B150000
|
unkown
|
page read and write
|
||
7FF52EDEC000
|
unkown
|
page readonly
|
||
19E71800000
|
unkown
|
page readonly
|
||
7FF50BB31000
|
unkown
|
page readonly
|
||
7FF52EE2E000
|
unkown
|
page readonly
|
||
14EF8C00000
|
unkown
|
page readonly
|
||
7FF528B4A000
|
unkown
|
page readonly
|
||
7FF50BCB2000
|
unkown
|
page readonly
|
||
2A7B000
|
unkown
|
page readonly
|
||
1D8978A0000
|
unkown
|
page readonly
|
||
7FF52ED83000
|
unkown
|
page readonly
|
||
1898055E000
|
unkown
|
page read and write
|
||
1898055E000
|
unkown
|
page read and write
|
||
2AE2000
|
unkown
|
page readonly
|
||
14EF9315000
|
unkown
|
page read and write
|
||
1D897A7C000
|
unkown
|
page read and write
|
||
7FF52EDBA000
|
unkown
|
page readonly
|
||
357287F000
|
unkown
|
page read and write
|
||
65645FB000
|
unkown
|
page read and write
|
||
241B000
|
unkown
|
page readonly
|
||
14E6CFF000
|
unkown
|
page read and write
|
||
7FF59161D000
|
unkown
|
page readonly
|
||
65640FA000
|
unkown
|
page read and write
|
||
2474000
|
unkown
|
page readonly
|
||
2A53000
|
unkown
|
page readonly
|
||
14EF88C0000
|
heap default
|
page read and write
|
||
237D56B000
|
unkown
|
page read and write
|
||
14EF9356000
|
unkown
|
page read and write
|
||
14EF9338000
|
unkown
|
page read and write
|
||
7FF50858A000
|
unkown
|
page readonly
|
||
19BD8C13000
|
unkown
|
page read and write
|
||
14EF89E0000
|
unkown
|
page readonly
|
||
2A00000
|
unkown
|
page readonly
|
||
1F39C000000
|
unkown
|
page read and write
|
||
2A76000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
7FF50BD3F000
|
unkown
|
page readonly
|
||
14EF93C9000
|
unkown
|
page read and write
|
||
7FF55D997000
|
unkown
|
page readonly
|
||
D5BCC7F000
|
unkown
|
page read and write
|
||
7FF5289FB000
|
unkown
|
page readonly
|
||
14EF932A000
|
unkown
|
page read and write
|
||
1D897A6C000
|
unkown
|
page read and write
|
||
7FF579714000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
D5BC7CE000
|
unkown
|
page read and write
|
||
23D9000
|
unkown
|
page readonly
|
||
7FF591DEF000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF528B54000
|
unkown
|
page readonly
|
||
23ED000
|
unkown
|
page readonly
|
||
7FF55D94B000
|
unkown
|
page readonly
|
||
19E71702000
|
unkown
|
page read and write
|
||
7FF557BC0000
|
unkown
|
page readonly
|
||
14EF9338000
|
unkown
|
page read and write
|
||
E9D000
|
unkown
|
page read and write
|
||
1260000
|
unkown
|
page read and write
|
||
7FF5798A1000
|
unkown
|
page readonly
|
||
14EF9323000
|
unkown
|
page read and write
|
||
7FF5A702F000
|
unkown
|
page readonly
|
||
14EF9388000
|
unkown
|
page read and write
|
||
7FF52ECC3000
|
unkown
|
page readonly
|
||
21BDBFA000
|
unkown
|
page read and write
|
||
7FF50BD86000
|
unkown
|
page readonly
|
||
7FF591C19000
|
unkown
|
page readonly
|
||
14EF932A000
|
unkown
|
page read and write
|
||
12D1C402000
|
unkown
|
page read and write
|
||
1D95163F000
|
unkown
|
page read and write
|
||
14EF9345000
|
unkown
|
page read and write
|
||
14EF93A9000
|
unkown
|
page read and write
|
||
6CCD6000
|
unkown image
|
page readonly
|
||
14EF9324000
|
unkown
|
page read and write
|
||
19BD8B30000
|
unkown
|
page readonly
|
||
14EF8A29000
|
unkown
|
page read and write
|
||
7FF591BE5000
|
unkown
|
page readonly
|
||
C70000
|
unkown
|
page readonly
|
||
D277FF000
|
unkown
|
page read and write
|
||
14EF9329000
|
unkown
|
page read and write
|
||
14E6875000
|
unkown
|
page read and write
|
||
32B0000
|
unkown
|
page readonly
|
||
7E0000
|
unkown
|
page readonly
|
||
7FF5A77FC000
|
unkown
|
page readonly
|
||
2BFD17A000
|
unkown
|
page read and write
|
||
7FF5A78F4000
|
unkown
|
page readonly
|
||
14EF93C9000
|
unkown
|
page read and write
|
||
7FF557793000
|
unkown
|
page readonly
|
||
7FF52ECC8000
|
unkown
|
page readonly
|
||
14EF9324000
|
unkown
|
page read and write
|
||
7FF557C74000
|
unkown
|
page readonly
|
||
1F39C310000
|
unkown
|
page read and write
|
||
14EF9323000
|
unkown
|
page read and write
|
||
7FF528959000
|
unkown
|
page readonly
|
||
7FF557E6F000
|
unkown
|
page readonly
|
||
23C3000
|
unkown
|
page readonly
|
||
6563FFA000
|
unkown
|
page read and write
|
||
656437C000
|
unkown
|
page read and write
|
||
7FF557F31000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF50BCB0000
|
unkown
|
page readonly
|
||
1F39B542000
|
unkown
|
page read and write
|
||
237B000
|
unkown
|
page readonly
|
||
14EF9345000
|
unkown
|
page read and write
|
||
7FF591A8F000
|
unkown
|
page readonly
|
||
7FF591DCB000
|
unkown
|
page readonly
|
||
1F39B39B000
|
unkown
|
page read and write
|
||
14EF9342000
|
unkown
|
page read and write
|
||
1F39B100000
|
unkown
|
page read and write
|
||
14EF9802000
|
unkown
|
page read and write
|
||
14EF9345000
|
unkown
|
page read and write
|
||
1F399258000
|
unkown
|
page read and write
|
||
14EF933B000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
14EF932C000
|
unkown
|
page read and write
|
||
14EF8860000
|
heap private
|
page read and write
|
||
7FF52EE3D000
|
unkown
|
page readonly
|
||
C50000
|
unkown
|
page read and write
|
||
7FF508115000
|
unkown
|
page readonly
|
||
1760BA41000
|
unkown
|
page read and write
|
||
6CCD0000
|
unkown image
|
page readonly
|
||
65646FF000
|
unkown
|
page read and write
|
||
1D897B08000
|
unkown
|
page read and write
|
||
1D897A87000
|
unkown
|
page read and write
|
||
14EF9386000
|
unkown
|
page read and write
|
||
7FF591A7C000
|
unkown
|
page readonly
|
||
1760B8F0000
|
heap private
|
page read and write
|
||
14EF8A8C000
|
unkown
|
page read and write
|
||
1D897830000
|
heap private
|
page read and write
|
||
7FF579385000
|
unkown
|
page readonly
|
||
7FF50BD10000
|
unkown
|
page readonly
|
||
7FF52EBE5000
|
unkown
|
page readonly
|
||
7FF557BFB000
|
unkown
|
page readonly
|
||
7FF579653000
|
unkown
|
page readonly
|
||
7FF5085BD000
|
unkown
|
page readonly
|
||
35726FF000
|
unkown
|
page read and write
|
||
1F3992FD000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF50BD3C000
|
unkown
|
page readonly
|
||
1592C850000
|
unkown
|
page readonly
|
||
7FF50854B000
|
unkown
|
page readonly
|
||
14EF9345000
|
unkown
|
page read and write
|
||
19BD8D00000
|
unkown
|
page read and write
|
||
2225000
|
unkown
|
page readonly
|
||
7FF528B05000
|
unkown
|
page readonly
|
||
14EF935E000
|
unkown
|
page read and write
|
||
1F39B3BF000
|
unkown
|
page read and write
|
||
19BD8B50000
|
unkown
|
page read and write
|
||
7FF557E6C000
|
unkown
|
page readonly
|
||
1D9530F0000
|
unkown
|
page readonly
|
||
7FF557DAC000
|
unkown
|
page readonly
|
||
7FF557D8D000
|
unkown
|
page readonly
|
||
1F39B33D000
|
unkown
|
page read and write
|
||
21BDB7A000
|
unkown
|
page read and write
|
||
7FF55D94F000
|
unkown
|
page readonly
|
||
1F3992C7000
|
unkown
|
page read and write
|
||
876000
|
unkown
|
page read and write
|
||
14EF9324000
|
unkown
|
page read and write
|
||
7FF5797F4000
|
unkown
|
page readonly
|
||
7FF591E39000
|
unkown
|
page readonly
|
||
2389000
|
unkown
|
page readonly
|
||
7FF55D95F000
|
unkown
|
page readonly
|
||
14EF935E000
|
unkown
|
page read and write
|
||
65643FA000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
1F39932D000
|
unkown
|
page read and write
|
||
19E71600000
|
unkown
|
page read and write
|
||
7FF528B5E000
|
unkown
|
page readonly
|
||
14EF9323000
|
unkown
|
page read and write
|
||
2493000
|
unkown
|
page readonly
|
||
14EF8A13000
|
unkown
|
page read and write
|
||
2A0D000
|
unkown
|
page readonly
|
||
6563BFE000
|
unkown
|
page read and write
|
||
14EF9388000
|
unkown
|
page read and write
|
||
14EF9345000
|
unkown
|
page read and write
|
||
14EF9348000
|
unkown
|
page read and write
|
||
7FF557F24000
|
unkown
|
page readonly
|
||
2CD0000
|
heap private
|
page read and write
|
||
656427C000
|
unkown
|
page read and write
|
||
14EF89A0000
|
unkown
|
page readonly
|
||
1898054F000
|
unkown
|
page read and write
|
||
14EF9323000
|
unkown
|
page read and write
|
||
B8F000
|
unkown
|
page read and write
|
||
7FF528B17000
|
unkown
|
page readonly
|
||
7FF52EB7B000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
2B60000
|
heap default
|
page read and write
|
||
18980547000
|
unkown
|
page read and write
|
||
1F39C110000
|
unkown
|
page read and write
|
||
1898054F000
|
unkown
|
page read and write
|
||
7FF50852A000
|
unkown
|
page readonly
|
||
7FF579829000
|
unkown
|
page readonly
|
||
14EF935F000
|
unkown
|
page read and write
|
||
14EF9388000
|
unkown
|
page read and write
|
||
2A30000
|
unkown
|
page readonly
|
||
7FF5A780E000
|
unkown
|
page readonly
|
||
14EF933A000
|
unkown
|
page read and write
|
||
7FF50BD78000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF591D9F000
|
unkown
|
page readonly
|
||
7FF557797000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
1F3992D0000
|
unkown
|
page read and write
|
||
7FF55D758000
|
unkown
|
page readonly
|
||
19BD8C4F000
|
unkown
|
page read and write
|
||
14EF9326000
|
unkown
|
page read and write
|
||
7FF52EDEF000
|
unkown
|
page readonly
|
||
7FF55D9D4000
|
unkown
|
page readonly
|
||
7FF591BF6000
|
unkown
|
page readonly
|
||
1592EA10000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF55D9DE000
|
unkown
|
page readonly
|
||
14EF8A57000
|
unkown
|
page read and write
|
||
7FF591E0A000
|
unkown
|
page readonly
|
||
19BD8E00000
|
unkown
|
page readonly
|
||
7FF5B6674000
|
unkown
|
page readonly
|
||
14EF9338000
|
unkown
|
page read and write
|
||
23E5000
|
unkown
|
page readonly
|
||
18980561000
|
unkown
|
page read and write
|
||
14EF937F000
|
unkown
|
page read and write
|
||
14EF932C000
|
unkown
|
page read and write
|
||
14EF9366000
|
unkown
|
page read and write
|
||
7F0000
|
unkown
|
page read and write
|
||
1D95166F000
|
unkown
|
page read and write
|
||
21BDC7E000
|
unkown
|
page read and write
|
||
7FF55D8C6000
|
unkown
|
page readonly
|
||
2A00000
|
unkown
|
page readonly
|
||
14EF9388000
|
unkown
|
page read and write
|
||
2920000
|
unkown
|
page readonly
|
||
31B0000
|
unkown
|
page readonly
|
||
29DB000
|
unkown
|
page readonly
|
||
1F39B150000
|
unkown
|
page read and write
|
||
7FF50BDFA000
|
unkown
|
page readonly
|
||
1F39B742000
|
unkown
|
page read and write
|
||
14EF9337000
|
unkown
|
page read and write
|
||
7FF508594000
|
unkown
|
page readonly
|
||
7FF55D912000
|
unkown
|
page readonly
|
||
7FF55D922000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
2A23000
|
unkown
|
page readonly
|
||
1D951629000
|
unkown
|
page read and write
|
||
7FF557C91000
|
unkown
|
page readonly
|
||
14EF8A5D000
|
unkown
|
page read and write
|
||
14EF9356000
|
unkown
|
page read and write
|
||
7FF55D861000
|
unkown
|
page readonly
|
||
7FF55D9CA000
|
unkown
|
page readonly
|
||
2A39000
|
unkown
|
page readonly
|
||
7FF508557000
|
unkown
|
page readonly
|
||
14EF9348000
|
unkown
|
page read and write
|
||
7FF55D985000
|
unkown
|
page readonly
|
||
7FF5797E7000
|
unkown
|
page readonly
|
||
7FF591B7B000
|
unkown
|
page readonly
|
||
14EF8AC8000
|
unkown
|
page read and write
|
||
1F39C110000
|
unkown
|
page read and write
|
||
19BD8C29000
|
unkown
|
page read and write
|
||
7FF5B667A000
|
unkown
|
page readonly
|
||
19BD8C4E000
|
unkown
|
page read and write
|
||
2412000
|
unkown
|
page readonly
|
||
7FF591DF7000
|
unkown
|
page readonly
|
||
6563F7F000
|
unkown
|
page read and write
|
||
7C0000
|
heap private
|
page read and write
|
||
1F39B600000
|
unkown
|
page read and write
|
||
14EF9338000
|
unkown
|
page read and write
|
||
1592CA97000
|
unkown
|
page read and write
|
||
1F3992A5000
|
unkown
|
page read and write
|
||
18980536000
|
heap default
|
page read and write
|
||
12D1BAB0000
|
unkown
|
page readonly
|
||
14EF9388000
|
unkown
|
page read and write
|
||
2A00000
|
unkown
|
page readonly
|
||
2A4F000
|
unkown
|
page readonly
|
||
7FF50BAD6000
|
unkown
|
page readonly
|
||
2A4F000
|
unkown
|
page readonly
|
||
7FF591DEC000
|
unkown
|
page readonly
|
||
2A30000
|
unkown
|
page readonly
|
||
18980620000
|
unkown
|
page readonly
|
||
14EF9070000
|
unkown
|
page write copy
|
||
14EF933B000
|
unkown
|
page read and write
|
||
12D1BC56000
|
unkown
|
page read and write
|
||
29FC000
|
unkown
|
page readonly
|
||
7FF579376000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
14EF932C000
|
unkown
|
page read and write
|
||
1F399278000
|
unkown
|
page read and write
|
||
1760BA29000
|
unkown
|
page read and write
|
||
7FF55D97A000
|
unkown
|
page readonly
|
||
19BD8C7D000
|
unkown
|
page read and write
|
||
1592C9D0000
|
heap private
|
page read and write
|
||
21BDAFE000
|
unkown
|
page read and write
|
||
12D1C600000
|
unkown
|
page readonly
|
||
1898055E000
|
unkown
|
page read and write
|
||
19BD9260000
|
unkown
|
page readonly
|
||
14EF932A000
|
unkown
|
page read and write
|
||
7FF591A8A000
|
unkown
|
page readonly
|
||
14EF9324000
|
unkown
|
page read and write
|
||
1210000
|
heap default
|
page read and write
|
||
7FF5B5EE7000
|
unkown
|
page readonly
|
||
12D1BD13000
|
unkown
|
page read and write
|
||
7FF5797FA000
|
unkown
|
page readonly
|
||
7FF528B00000
|
unkown
|
page readonly
|
||
14EF9356000
|
unkown
|
page read and write
|
||
1F39933E000
|
unkown
|
page read and write
|
||
7FF579894000
|
unkown
|
page readonly
|
||
7FF50BD5A000
|
unkown
|
page readonly
|
||
C80000
|
unkown
|
page readonly
|
||
7FF528AFE000
|
unkown
|
page readonly
|
||
237D5EE000
|
unkown
|
page read and write
|
||
7FF5A7878000
|
unkown
|
page readonly
|
||
23B5000
|
unkown
|
page readonly
|
||
7FF55DA6A000
|
unkown
|
page readonly
|
||
7FF528B7D000
|
unkown
|
page readonly
|
||
14EF93C9000
|
unkown
|
page read and write
|
||
1D952FF0000
|
unkown
|
page read and write
|
||
1592C9B0000
|
unkown
|
page read and write
|
||
7FF591CBB000
|
unkown
|
page readonly
|
||
1F39B3FB000
|
unkown
|
page read and write
|
||
7FF528B2C000
|
unkown
|
page readonly
|
||
7FF5797BB000
|
unkown
|
page readonly
|
||
7FF50859F000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
7FF591B98000
|
unkown
|
page readonly
|
||
1F399241000
|
unkown
|
page read and write
|
||
14EF933A000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF557741000
|
unkown
|
page readonly
|
||
7FF55D7D1000
|
unkown
|
page readonly
|
||
14EF9338000
|
unkown
|
page read and write
|
||
1D897A2A000
|
unkown
|
page read and write
|
||
12D1BC13000
|
unkown
|
page read and write
|
||
65641FA000
|
unkown
|
page read and write
|
||
7FF579527000
|
unkown
|
page readonly
|
||
1F39B642000
|
unkown
|
page read and write
|
||
1F39B385000
|
unkown
|
page read and write
|
||
D5BCBFE000
|
unkown
|
page read and write
|
||
2886000
|
unkown
|
page readonly
|
||
7FF5B6681000
|
unkown
|
page readonly
|
||
2AF3000
|
unkown
|
page readonly
|
||
14EF9323000
|
unkown
|
page read and write
|
||
7FF50862A000
|
unkown
|
page readonly
|
||
14EF933C000
|
unkown
|
page read and write
|
||
6CCD3000
|
unkown image
|
page readonly
|
||
18980490000
|
unkown
|
page readonly
|
||
7FF528AA2000
|
unkown
|
page readonly
|
||
7FF5A781B000
|
unkown
|
page readonly
|
||
23F3000
|
unkown
|
page readonly
|
||
7FF55D4E2000
|
unkown
|
page readonly
|
||
29E9000
|
unkown
|
page readonly
|
||
7FF5790B2000
|
unkown
|
page readonly
|
||
656467A000
|
unkown
|
page read and write
|
||
1760B950000
|
heap default
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
14EF90D0000
|
unkown
|
page readonly
|
||
14EF9357000
|
unkown
|
page read and write
|
||
12D1BB80000
|
unkown
|
page readonly
|
||
7FF5A7889000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
14EF932C000
|
unkown
|
page read and write
|
||
19E713C0000
|
heap private
|
page read and write
|
||
2465000
|
unkown
|
page readonly
|
||
12D1BC51000
|
unkown
|
page read and write
|
||
14EF9388000
|
unkown
|
page read and write
|
||
14EF9324000
|
unkown
|
page read and write
|
||
18980450000
|
unkown
|
page read and write
|
||
7FF528361000
|
unkown
|
page readonly
|
||
2BFD27F000
|
unkown
|
page read and write
|
||
2B91EFB000
|
unkown
|
page read and write
|
||
1D897A8D000
|
unkown
|
page read and write
|
||
18980531000
|
unkown
|
page read and write
|
||
7FF591E04000
|
unkown
|
page readonly
|
||
2AE8000
|
unkown
|
page readonly
|
||
14EF9324000
|
unkown
|
page read and write
|
||
1592EA00000
|
unkown
|
page readonly
|
||
1592CAC2000
|
unkown
|
page read and write
|
||
7FF528B2F000
|
unkown
|
page readonly
|
||
14EF9388000
|
unkown
|
page read and write
|
||
1760BCD0000
|
unkown
|
page readonly
|
||
7FF52EE1E000
|
unkown
|
page readonly
|
||
2A61000
|
unkown
|
page readonly
|
||
7FF55DA71000
|
unkown
|
page readonly
|
||
14EF8ABD000
|
unkown
|
page read and write
|
||
2E6A000
|
unkown
|
page read and write
|
||
14EF932B000
|
unkown
|
page read and write
|
||
14EF8AB2000
|
unkown
|
page read and write
|
||
7FF52EEAA000
|
unkown
|
page readonly
|
||
1780000
|
heap private
|
page read and write
|
||
14EF9345000
|
unkown
|
page read and write
|
||
A10000
|
heap default
|
page read and write
|
||
7FF557E45000
|
unkown
|
page readonly
|
||
14EF9345000
|
unkown
|
page read and write
|
||
7FF50BCD3000
|
unkown
|
page readonly
|
||
14EF937F000
|
unkown
|
page read and write
|
||
7FF557A55000
|
unkown
|
page readonly
|
||
2886000
|
unkown
|
page readonly
|
||
7FF50BD7E000
|
unkown
|
page readonly
|
||
1592CAA7000
|
unkown
|
page read and write
|
||
14EF9388000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF528AA0000
|
unkown
|
page readonly
|
||
1F39B390000
|
unkown
|
page read and write
|
||
12D1BC70000
|
unkown
|
page read and write
|
||
14EF933D000
|
unkown
|
page read and write
|
||
7FF50BB35000
|
unkown
|
page readonly
|
||
7FF5A770E000
|
unkown
|
page readonly
|
||
14EF8AF8000
|
unkown
|
page read and write
|
||
35727FA000
|
unkown
|
page read and write
|
||
7FF5B5EE3000
|
unkown
|
page readonly
|
||
2A5A000
|
unkown
|
page readonly
|
||
1592CAED000
|
unkown
|
page read and write
|
||
7FF5289E1000
|
unkown
|
page readonly
|
||
790000
|
unkown
|
page read and write
|
||
1760D570000
|
unkown
|
page readonly
|
||
19E7163F000
|
unkown
|
page read and write
|
||
7FF50843E000
|
unkown
|
page readonly
|
||
7FF57982D000
|
unkown
|
page readonly
|
||
14E697A000
|
unkown
|
page read and write
|
||
18980480000
|
heap private
|
page read and write
|
||
7FF557D43000
|
unkown
|
page readonly
|
||
D5BC74B000
|
unkown
|
page read and write
|
||
14EF9359000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF55D9F6000
|
unkown
|
page readonly
|
||
2393000
|
unkown
|
page readonly
|
||
19E72FA0000
|
unkown
|
page read and write
|
||
14EF9100000
|
unkown
|
page readonly
|
||
CDE000
|
unkown
|
page read and write
|
||
1F39C210000
|
unkown
|
page read and write
|
||
656457B000
|
unkown
|
page read and write
|
||
7FF50BD0E000
|
unkown
|
page readonly
|
||
1D95166E000
|
unkown
|
page read and write
|
||
1D897A49000
|
unkown
|
page read and write
|
||
2AE2000
|
unkown
|
page readonly
|
||
7FF528BF1000
|
unkown
|
page readonly
|
||
7FF508624000
|
unkown
|
page readonly
|
||
14EF93A9000
|
unkown
|
page read and write
|
||
7FF557EB6000
|
unkown
|
page readonly
|
||
7FF5288BB000
|
unkown
|
page readonly
|
||
14EF9345000
|
unkown
|
page read and write
|
||
7FF5A76F1000
|
unkown
|
page readonly
|
||
7FF557E3A000
|
unkown
|
page readonly
|
||
14EF8B08000
|
unkown
|
page read and write
|
||
7FF52EDF8000
|
unkown
|
page readonly
|
||
1F399229000
|
unkown
|
page read and write
|
||
14EF933B000
|
unkown
|
page read and write
|
||
14EF93CB000
|
unkown
|
page read and write
|
||
14EF9393000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF5A775D000
|
unkown
|
page readonly
|
||
29DB000
|
unkown
|
page readonly
|
||
14EF935A000
|
unkown
|
page read and write
|
||
7FF5A7587000
|
unkown
|
page readonly
|
||
1F39B3EF000
|
unkown
|
page read and write
|
||
7FF5084A4000
|
unkown
|
page readonly
|
||
1592E949000
|
unkown
|
page read and write
|
||
14EF9333000
|
unkown
|
page read and write
|
||
1760BA13000
|
unkown
|
page read and write
|
||
14EF932A000
|
unkown
|
page read and write
|
||
7FF52ED62000
|
unkown
|
page readonly
|
||
1D897A55000
|
unkown
|
page read and write
|
||
1D897A4F000
|
unkown
|
page read and write
|
||
1F39B365000
|
unkown
|
page read and write
|
||
14EF8B16000
|
unkown
|
page read and write
|
||
14EF932A000
|
unkown
|
page read and write
|
||
7FF5797C7000
|
unkown
|
page readonly
|
||
1F39B502000
|
unkown
|
page read and write
|
||
7FF52EA97000
|
unkown
|
page readonly
|
||
14EF932B000
|
unkown
|
page read and write
|
||
6CCD5000
|
unkown image
|
page write copy
|
||
7FF591922000
|
unkown
|
page readonly
|
||
D2757B000
|
unkown
|
page read and write
|
||
1F39B316000
|
unkown
|
page read and write
|
||
7FF50BD6E000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page readonly
|
||
7FF50BD1B000
|
unkown
|
page readonly
|
||
14EF9353000
|
unkown
|
page read and write
|
||
14EF9336000
|
unkown
|
page read and write
|
||
31BA000
|
heap default
|
page read and write
|
||
7FF557EA8000
|
unkown
|
page readonly
|
||
7FF50BDF4000
|
unkown
|
page readonly
|
||
1D95166F000
|
unkown
|
page read and write
|
||
7FF5A7854000
|
unkown
|
page readonly
|
||
239C000
|
unkown
|
page readonly
|
||
7FF50856C000
|
unkown
|
page readonly
|
||
2B91DF5000
|
unkown
|
page read and write
|
||
2D2A000
|
heap default
|
page read and write
|
||
7FF55DA72000
|
unkown
|
page readonly
|
||
14EF933B000
|
unkown
|
page read and write
|
||
7FF50BD54000
|
unkown
|
page readonly
|
||
D2737E000
|
unkown
|
page read and write
|
||
7FF52E61D000
|
unkown
|
page readonly
|
||
1F39C510000
|
unkown
|
page read and write
|
||
2A47000
|
unkown
|
page readonly
|
||
7FF5A7847000
|
unkown
|
page readonly
|
||
14EF9386000
|
unkown
|
page read and write
|
||
7FF557E77000
|
unkown
|
page readonly
|
||
1F3992E8000
|
unkown
|
page read and write
|
||
7FF591DC5000
|
unkown
|
page readonly
|
||
14EF932A000
|
unkown
|
page read and write
|
||
2E20000
|
unkown
|
page readonly
|
||
7FF5A76B3000
|
unkown
|
page readonly
|
||
7FF55D9AC000
|
unkown
|
page readonly
|
||
19BD8C8A000
|
unkown
|
page read and write
|
||
2AF0000
|
unkown
|
page readonly
|
||
14EF9346000
|
unkown
|
page read and write
|
||
7FF55D7A5000
|
unkown
|
page readonly
|
||
7FF55D980000
|
unkown
|
page readonly
|
||
7FF591999000
|
unkown
|
page readonly
|
||
2AF3000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
1592CA13000
|
unkown
|
page read and write
|
||
1F39B3D8000
|
unkown
|
page read and write
|
||
14EF9802000
|
unkown
|
page read and write
|
||
2BFCD9B000
|
unkown
|
page read and write
|
||
12D1BD00000
|
unkown
|
page read and write
|
||
7FF55D281000
|
unkown
|
page readonly
|
||
7FF5A7902000
|
unkown
|
page readonly
|
||
29FC000
|
unkown
|
page readonly
|
||
7FF591EB1000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
7FF50BC18000
|
unkown
|
page readonly
|
||
7FF557B1A000
|
unkown
|
page readonly
|
||
65642FB000
|
unkown
|
page read and write
|
||
12D1BD08000
|
unkown
|
page read and write
|
||
7FF50BE02000
|
unkown
|
page readonly
|
||
1F39B398000
|
unkown
|
page read and write
|
||
1592CA94000
|
unkown
|
page read and write
|
||
1D897A00000
|
unkown
|
page read and write
|
||
1D95166E000
|
unkown
|
page read and write
|
||
D5BCAFE000
|
unkown
|
page read and write
|
||
1F39925D000
|
unkown
|
page read and write
|
||
2A45000
|
unkown
|
page readonly
|
||
14EF932B000
|
unkown
|
page read and write
|
||
2BFD1F9000
|
unkown
|
page read and write
|
||
1F399300000
|
unkown
|
page read and write
|
||
7FF55D1DD000
|
unkown
|
page readonly
|
||
14EF933B000
|
unkown
|
page read and write
|
||
7FF5A783F000
|
unkown
|
page readonly
|
||
7FF557A57000
|
unkown
|
page readonly
|
||
7FF591D5C000
|
unkown
|
page readonly
|
||
14EF932B000
|
unkown
|
page read and write
|
||
7FF5796AE000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
7FF557E84000
|
unkown
|
page readonly
|
||
14EF932C000
|
unkown
|
page read and write
|
||
2A1C000
|
unkown
|
page readonly
|
||
CE890F7000
|
unkown
|
page read and write
|
||
7FF528B68000
|
unkown
|
page readonly
|
||
1F39B202000
|
unkown
|
page read and write
|
||
7FF5084AC000
|
unkown
|
page readonly
|
||
6563AFB000
|
unkown
|
page read and write
|
||
14EF932C000
|
unkown
|
page read and write
|
||
7FF579818000
|
unkown
|
page readonly
|
||
2B91FF7000
|
unkown
|
page read and write
|
||
1F399400000
|
unkown
|
page readonly
|
||
12D1C260000
|
unkown
|
page readonly
|
||
14E667B000
|
unkown
|
page read and write
|
||
14EF9345000
|
unkown
|
page read and write
|
||
7FF5579A2000
|
unkown
|
page readonly
|
||
14EF9345000
|
unkown
|
page read and write
|
||
7FF5797AE000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
23BC000
|
unkown
|
page readonly
|
||
23EF000
|
unkown
|
page readonly
|
||
7FF557E0B000
|
unkown
|
page readonly
|
||
14EF9802000
|
unkown
|
page read and write
|
||
7FF508421000
|
unkown
|
page readonly
|
||
19E71613000
|
unkown
|
page read and write
|
||
1592CB02000
|
unkown
|
page read and write
|
||
1F39B39A000
|
unkown
|
page read and write
|
||
7FF5B65C8000
|
unkown
|
page readonly
|
||
7FF591D83000
|
unkown
|
page readonly
|
||
2A39000
|
unkown
|
page readonly
|
||
7FF557E4B000
|
unkown
|
page readonly
|
||
7FF557A06000
|
unkown
|
page readonly
|
||
2B919EC000
|
unkown
|
page read and write
|
||
7FF5A786F000
|
unkown
|
page readonly
|
||
7FF52EC19000
|
unkown
|
page readonly
|
||
1D951713000
|
unkown
|
page read and write
|
||
7FF52EDBE000
|
unkown
|
page readonly
|
||
7FF591BF4000
|
unkown
|
page readonly
|
||
7FF557BB7000
|
unkown
|
page readonly
|
||
14EF9349000
|
unkown
|
page read and write
|
||
1F39B300000
|
unkown
|
page read and write
|
||
7FF591E1E000
|
unkown
|
page readonly
|
||
7FF52EEA4000
|
unkown
|
page readonly
|
||
14EF932A000
|
unkown
|
page read and write
|
||
7FF591DC0000
|
unkown
|
page readonly
|
||
14EF9388000
|
unkown
|
page read and write
|
||
14EF9389000
|
unkown
|
page read and write
|
||
3572779000
|
unkown
|
page read and write
|
||
14EF9349000
|
unkown
|
page read and write
|
||
7FF5B65F8000
|
unkown
|
page readonly
|
||
14EF932B000
|
unkown
|
page read and write
|
||
72B000
|
unkown
|
page read and write
|
||
1F39B582000
|
unkown
|
page read and write
|
||
19BD8C00000
|
unkown
|
page read and write
|
||
14EF932D000
|
unkown
|
page read and write
|
||
1D953450000
|
unkown
|
page read and write
|
||
2A15000
|
unkown
|
page readonly
|
||
7FF55765F000
|
unkown
|
page readonly
|
||
14EF93CB000
|
unkown
|
page read and write
|
||
656407A000
|
unkown
|
page read and write
|
||
21BDD7C000
|
unkown
|
page read and write
|
||
2A72000
|
unkown
|
page readonly
|
||
ADC000
|
unkown
|
page read and write
|
||
2A2C000
|
unkown
|
page readonly
|
||
7FF528BEA000
|
unkown
|
page readonly
|
||
14EF9336000
|
unkown
|
page read and write
|
||
1F39AD90000
|
unkown
|
page readonly
|
||
1592E989000
|
unkown
|
page read and write
|
||
14EF932C000
|
unkown
|
page read and write
|
||
7FF5A780A000
|
unkown
|
page readonly
|
||
275C000
|
unkown
|
page read and write
|
||
7FF5A787E000
|
unkown
|
page readonly
|
||
1F399290000
|
unkown
|
page read and write
|
||
7FF52EDC5000
|
unkown
|
page readonly
|
||
7FF57981E000
|
unkown
|
page readonly
|
||
7FF591EB2000
|
unkown
|
page readonly
|
||
19BD8C55000
|
unkown
|
page read and write
|
||
14EF932A000
|
unkown
|
page read and write
|
||
1592C920000
|
unkown
|
page write copy
|
||
1592CA83000
|
unkown
|
page read and write
|
||
14EF9861000
|
unkown
|
page read and write
|
||
1105000
|
unkown
|
page read and write
|
||
14EF932E000
|
unkown
|
page read and write
|
||
237D8FB000
|
unkown
|
page read and write
|
||
7FF5082B7000
|
unkown
|
page readonly
|
||
1F399140000
|
heap private
|
page read and write
|
||
12D1BC00000
|
unkown
|
page read and write
|
||
2BFD37B000
|
unkown
|
page read and write
|
||
19BD8C8D000
|
unkown
|
page read and write
|
||
14EF9324000
|
unkown
|
page read and write
|
There are 1374 hidden memdumps, click here to show them.