Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
presentation.jar
|
Java archive data (JAR)
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\broker.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\ProgramData\Oracle\Java\.oracle_jre_usage\cce3fe3b0d8d83e2.timestamp
|
ASCII text, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\8P7RGF10\consent-pref.trustarc[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\www.java[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\QALADACS\consent.trustarc[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{587A773D-AD11-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{587A773F-AD11-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{587A7740-AD11-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Oracleacademy(2)[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RDK3MCH1.htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\T79A9-GDDN2-93ZD5-M6HUR-X83QX[1].js
|
C source, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\a[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\caas_contenttypemap[1].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\get[1].gif
|
GIF image data, version 89a, 133 x 18
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\get[1].htm
|
HTML document, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\loading[1].gif
|
GIF image data, version 89a, 31 x 31
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\print[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\render[1].js
|
exported SGML document, UTF-8 Unicode text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\require[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\s_code_remote[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\trustarc-logo-small[1].png
|
PNG image data, 198 x 34, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\v1[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\67B873F492AD87C25B322202223D7A22.cache[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\JavaGreenfoot[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\cookie_iframe[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\en[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\header[1].js
|
ASCII text, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\i18n.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\javamagazine(2)[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jv0_search_btn[1].gif
|
GIF image data, version 89a, 19 x 18
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jv0dl_a[1].png
|
PNG image data, 672 x 128, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\layout[1].htm
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\oldcss[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\render[1].js
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\setupLibs[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\theme.deferred.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\10.cache[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\EuPreferenceManager[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\GoJava[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\JavaAlice[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\config[1].json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\cookie_inneriframe[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\favicon[1].ico
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\java_home_photo2[1].jpg
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 320x303,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\jv0ht[1].gif
|
GIF image data, version 89a, 351 x 173
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\layout[1].htm
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\metrics_group1[1].js
|
C source, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\promise-polyfill.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\render[1].js
|
exported SGML document, UTF-8 Unicode text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\renderer[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\1.cache[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\6.cache[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\JavaOne(2)(2)[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\controller[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\defaultpreferencemanager.nocache[1].js
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\footer.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\header[1].js
|
ASCII text, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\infinity_common[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\items[1].json
|
HTML document, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\jv0_oracle[1].gif
|
GIF image data, version 89a, 91 x 22
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\jv0h[1].jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS4 Macintosh, datetime=2011:01:25 18:25:40], baseline, precision 8, 777x95, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\notice[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\notice[2].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\screen[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\theme.min[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF2325F288D49BCE72.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF9714AB46683C8430.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFF8CC430F3DF27DB4.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\83aa4cc77f591dfc2374580bbd95f6ba_d06ed635-68f6-4e9a-955c-4899f5f57b9a
|
data
|
dropped
|
|
|
|
C:\jar\META-INF\MANIFEST.MF
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\jar\META-INF\SECURE_VIEWER.RSA
|
data
|
dropped
|
|
|
|
C:\jar\META-INF\SECURE_VIEWER.SF
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\jar\Secure_Viewer.class
|
compiled Java class data, version 52.0 (Java 1.8)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\6BAUBVPU\consent-pref.trustarc[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\EQAWN5DV\www.java[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\IB42RK38\consent.trustarc[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D4340500-AD0F-11EB-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D4340502-AD0F-11EB-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D4340503-AD0F-11EB-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\wlm7n14\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\JavaGreenfoot[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\T79A9-GDDN2-93ZD5-M6HUR-X83QX[1].js
|
C source, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\a[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\caas_contenttypemap[1].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\footer.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\get[1].gif
|
GIF image data, version 89a, 133 x 18
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\infinity_common[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\javamagazine(2)[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\layout[1].htm
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\metrics_group1[1].js
|
C source, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\print[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\render[1].js
|
exported SGML document, UTF-8 Unicode text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\require[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\trustarc-logo-small[1].png
|
PNG image data, 198 x 34, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\6.cache[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\JavaAlice[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\Oracleacademy(2)[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\controller[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\header[1].js
|
ASCII text, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\header[2].js
|
ASCII text, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\items[1].json
|
HTML document, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\jv0dl_a[1].png
|
PNG image data, 672 x 128, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\jv0h[1].jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS4 Macintosh, datetime=2011:01:25 18:25:40], baseline, precision 8, 777x95, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\loading[1].gif
|
GIF image data, version 89a, 31 x 31
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\notice[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\notice[2].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\s_code_remote[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\screen[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\theme.min[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\10.cache[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\2B2KCDL9.htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\67B873F492AD87C25B322202223D7A22.cache[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\EuPreferenceManager[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\config[1].json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\cookie_inneriframe[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\favicon[1].ico
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\i18n.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\java_home_photo2[1].jpg
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 320x303,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\jv0_oracle[1].gif
|
GIF image data, version 89a, 91 x 22
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\layout[1].htm
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\promise-polyfill.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\render[1].js
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\render[2].js
|
exported SGML document, UTF-8 Unicode text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\1.cache[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\GoJava[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\JavaOne(2)(2)[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x132, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\cookie_iframe[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\defaultpreferencemanager.nocache[1].js
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\en[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\get[1].htm
|
HTML document, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\jv0_search_btn[1].gif
|
GIF image data, version 89a, 19 x 18
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\jv0ht[1].gif
|
GIF image data, version 89a, 351 x 173
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\oldcss[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\renderer[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\setupLibs[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\theme.deferred.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\v1[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF23476C21BA7AE237.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFC3C698C18811D67C.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFF893335E5A47C1F6.TMP
|
data
|
dropped
|
|
There are 141 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\cmd.exe
|
C:\Windows\system32\cmd.exe /c 7za.exe x -y -oC:\jar 'C:\Users\user\Desktop\presentation.jar'
|
|
|
|
C:\Windows\System32\cmd.exe
|
'C:\Windows\System32\cmd.exe' /c java.exe -jar 'C:\Users\user\Desktop\presentation.jar' Secure_Viewer >> C:\cmdlinestart.log
2>&1
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe
|
java.exe -jar 'C:\Users\user\Desktop\presentation.jar' Secure_Viewer
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' https://www.java.com/
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6296 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32.exe /s C:\Users\user\AppData\Local\broker.dll
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c ''C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe' -javaagent:'C:\Users\user\AppData\Local\Temp\jartracer.jar'
-jar 'C:\Users\user\Desktop\presentation.jar'' >> C:\cmdlinestart.log 2>&1
|
|
|
|
C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe
|
'C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe' -javaagent:'C:\Users\user\AppData\Local\Temp\jartracer.jar' -jar
'C:\Users\user\Desktop\presentation.jar'
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6900 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Windows\System32\7za.exe
|
7za.exe x -y -oC:\jar 'C:\Users\user\Desktop\presentation.jar'
|
|
|
|
C:\Windows\SysWOW64\icacls.exe
|
C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant 'everyone':(OI)(CI)M
|
|
There are 3 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://search.chol.com/favicon.ico
|
unknown
|
|
|
|
http://www.mercadolivre.com.br/
|
unknown
|
|
|
|
http://www.merlin.com.pl/favicon.ico
|
unknown
|
|
|
|
http://search.ebay.de/
|
unknown
|
|
|
|
http://www.mtv.com/
|
unknown
|
|
|
|
http://www.rambler.ru/
|
unknown
|
|
|
|
http://www.nifty.com/favicon.ico
|
unknown
|
|
|
|
http://www.dailymail.co.uk/
|
unknown
|
|
|
|
http://www3.fnac.com/favicon.ico
|
unknown
|
|
|
|
https://s2.go-mpulse.net/boomerang/
|
unknown
|
|
|
|
http://buscar.ya.com/
|
unknown
|
|
|
|
http://search.yahoo.com/favicon.ico
|
unknown
|
|
|
|
https://consent-pref.trustarc.com/defaultpreferencemanager/67B873F492AD87C25B322202223D7A22.cache.ht
|
unknown
|
|
|
|
http://www.chambersign.org1
|
unknown
|
|
|
|
http://repository.swisssign.com/0
|
unknown
|
|
|
|
http://www.sogou.com/favicon.ico
|
unknown
|
|
|
|
HTTP://WWW.CHAMBERSIGN.ORG
|
unknown
|
|
|
|
http://asp.usatoday.com/
|
unknown
|
|
|
|
http://consent.trustarc.com/bannermsg?
|
unknown
|
|
|
|
http://fr.search.yahoo.com/
|
unknown
|
|
|
|
http://rover.ebay.com
|
unknown
|
|
|
|
http://in.search.yahoo.com/
|
unknown
|
|
|
|
http://img.shopzilla.com/shopzilla/shopzilla.ico
|
unknown
|
|
|
|
http://search.ebay.in/
|
unknown
|
|
|
|
http://image.excite.co.jp/jp/favicon/lep.ico
|
unknown
|
|
|
|
http://%s.com
|
unknown
|
|
|
|
http://msk.afisha.ru/
|
unknown
|
|
|
|
https://prefmgr-cookie.truste-svc.net/cookie_js/cookie_iframe.html?parent=https://consent-pref.trust
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://busca.igbusca.com.br//app/static/images/favicon.ico
|
unknown
|
|
|
|
http://policy.camerfirma.com0
|
unknown
|
|
|
|
http://search.rediff.com/
|
unknown
|
|
|
|
https://static.oracle.com/cdn/cec/v21.2.1.30/_sitesclouddelivery/renderer/renderer.js
|
unknown
|
|
|
|
http://www.ya.com/favicon.ico
|
unknown
|
|
|
|
http://bugs.webkit.org/show_bug.cgi?id=3810
|
unknown
|
|
|
|
http://www.etmall.com.tw/favicon.ico
|
unknown
|
|
|
|
http://it.search.dada.net/favicon.ico
|
unknown
|
|
|
|
http://search.naver.com/
|
unknown
|
|
|
|
http://www.google.ru/
|
unknown
|
|
|
|
http://cps.letsencrypt.org0
|
unknown
|
|
|
|
http://search.hanafos.com/favicon.ico
|
unknown
|
|
|
|
http://cps.letsencrypt.orgs&h
|
unknown
|
|
|
|
http://cgi.search.biglobe.ne.jp/favicon.ico
|
unknown
|
|
|
|
http://www.certplus.com/CRL/class2.crl
|
unknown
|
|
|
|
http://bugreport.sun.com/bugreport/
|
unknown
|
|
|
|
http://www.abril.com.br/favicon.ico
|
unknown
|
|
|
|
http://search.daum.net/
|
unknown
|
|
|
|
http://java.oracle.com/
|
unknown
|
|
|
|
http://search.naver.com/favicon.ico
|
unknown
|
|
|
|
http://search.msn.co.jp/results.aspx?q=
|
unknown
|
|
|
|
http://www.clarin.com/favicon.ico
|
unknown
|
|
|
|
http://buscar.ozu.es/
|
unknown
|
|
|
|
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
|
unknown
|
|
|
|
http://kr.search.yahoo.com/
|
unknown
|
|
|
|
http://search.about.com/
|
unknown
|
|
|
|
http://ocsp.sectigo.com
|
unknown
|
|
|
|
http://busca.igbusca.com.br/
|
unknown
|
|
|
|
http://www.microsofttranslator.com/BVPrev.aspx?ref=IE8Activity
|
unknown
|
|
|
|
http://www.ask.com/
|
unknown
|
|
|
|
http://www.priceminister.com/favicon.ico
|
unknown
|
|
|
|
http://cps.chambersign.org/cps/chambersroot.html
|
unknown
|
|
|
|
http://www.cjmall.com/
|
unknown
|
|
|
|
http://search.centrum.cz/
|
unknown
|
|
|
|
http://www.certplus.com/CRL/class3P.crl
|
unknown
|
|
|
|
http://suche.t-online.de/
|
unknown
|
|
|
|
http://www.google.it/
|
unknown
|
|
|
|
http://search.auction.co.kr/
|
unknown
|
|
|
|
http://www.ceneo.pl/
|
unknown
|
|
|
|
http://www.amazon.de/
|
unknown
|
|
|
|
http://crl.securetrust.com/STCA.crl
|
unknown
|
|
|
|
http://sads.myspace.com/
|
unknown
|
|
|
|
https://consent.trustarc.com/get?name=crossdomain.html&domain=oracle.com
|
unknown
|
|
|
|
http://busca.buscape.com.br/favicon.ico
|
unknown
|
|
|
|
http://www.pchome.com.tw/favicon.ico
|
unknown
|
|
|
|
http://browse.guardian.co.uk/favicon.ico
|
unknown
|
|
|
|
http://google.pchome.com.tw/
|
unknown
|
|
|
|
http://list.taobao.com/browse/search_visual.htm?n=15&q=
|
unknown
|
|
|
|
http://www.rambler.ru/favicon.ico
|
unknown
|
|
|
|
https://consent.trustarc.com/log
|
unknown
|
|
|
|
http://uk.search.yahoo.com/
|
unknown
|
|
|
|
http://espanol.search.yahoo.com/
|
unknown
|
|
|
|
http://r3.o.lencr.org
|
unknown
|
|
|
|
http://www.ozu.es/favicon.ico
|
unknown
|
|
|
|
http://search.sify.com/
|
unknown
|
|
|
|
http://openimage.interpark.com/interpark.ico
|
unknown
|
|
|
|
http://search.yahoo.co.jp/favicon.ico
|
unknown
|
|
|
|
http://search.ebay.com/
|
unknown
|
|
|
|
http://www.gmarket.co.kr/
|
unknown
|
|
|
|
http://ocsp.sectigo.com0
|
unknown
|
|
|
|
http://search.nifty.com/
|
unknown
|
|
|
|
http://searchresults.news.com.au/
|
unknown
|
|
|
|
http://www.google.si/
|
unknown
|
|
|
|
http://www.google.cz/
|
unknown
|
|
|
|
http://www.soso.com/
|
unknown
|
|
|
|
http://www.univision.com/
|
unknown
|
|
|
|
http://search.ebay.it/
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
http://images.joins.com/ui_c/fvc_joins.ico
|
unknown
|
|
|
|
https://github.com/requirejs/requirejs/blob/master/LICENSE
|
unknown
|
|
|
|
http://www.asharqalawsat.com/
|
unknown
|
|
|
|
http://www.chambersign.orgs
|
unknown
|
|
|
|
http://busca.orange.es/
|
unknown
|
|
There are 92 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
app.buboleinov.com
|
34.86.224.8
|
|
|
|
consent-pref.trustarc.com
|
143.204.98.13
|
|
|
|
consent-st.trustarc.com
|
143.204.98.16
|
|
|
|
oracle.112.2o7.net
|
15.237.76.117
|
|
|
|
docs.cyberservices.biz
|
50.87.249.219
|
|
|
|
prefmgr-cookie.truste-svc.net
|
34.202.206.65
|
|
|
|
consent.trustarc.com
|
13.224.193.90
|
|
|
|
static.oracle.com
|
unknown
|
|
|
|
www.oracle.com
|
unknown
|
|
|
|
s.go-mpulse.net
|
unknown
|
|
|
|
c.oracleinfinity.io
|
unknown
|
|
|
|
6852bd06.akstat.io
|
unknown
|
|
|
|
www.java.com
|
unknown
|
|
|
|
c.go-mpulse.net
|
unknown
|
|
|
|
dc.oracleinfinity.io
|
unknown
|
|
|
|
684dd30c.akstat.io
|
unknown
|
|
There are 6 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
34.202.206.65
|
prefmgr-cookie.truste-svc.net
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
50.87.249.219
|
docs.cyberservices.biz
|
United States
|
|
|
|
143.204.98.13
|
consent-pref.trustarc.com
|
United States
|
|
|
|
13.224.193.90
|
consent.trustarc.com
|
United States
|
|
|
|
143.204.98.16
|
consent-st.trustarc.com
|
United States
|
|
|
|
15.237.76.117
|
oracle.112.2o7.net
|
United States
|
|
|
|
35.181.18.61
|
oracle.112.2o7.net
|
United States
|
|
|
|
143.204.98.126
|
consent-st.trustarc.com
|
United States
|
|
|
|
143.204.98.25
|
consent-pref.trustarc.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe
|
{17FE9752-0B5A-4665-84CD-569794602F5C} {7F9185B0-CB92-43C5-80A9-92277A4F7B54} 0xFFFF
|
|
|
|
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe
|
@C:\Windows\System32\ieframe.dll,-55175
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{587A773D-AD11-11EB-90E5-ECF4BB570DC9}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
MFV
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Enable
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Size
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
InitHits
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Factor
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{D4340500-AD0F-11EB-90E5-ECF4BB2D2496}
|
|
There are 65 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2DC0000
|
unkown
|
page execute and read and write
|
|
|
|
1567000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF5E67ED000
|
unkown
|
page readonly
|
|
|
|
31BE000
|
unkown
|
page execute and read and write
|
|
|
|
21337FF4000
|
unkown
|
page read and write
|
|
|
|
7FF565E17000
|
unkown
|
page readonly
|
|
|
|
7FF522E18000
|
unkown
|
page readonly
|
|
|
|
7FF59D2D4000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
4D70000
|
heap private
|
page read and write
|
|
|
|
2965000
|
unkown
|
page readonly
|
|
|
|
76C000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF565FEA000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
5491000
|
unkown
|
page read and write
|
|
|
|
124C000
|
unkown
|
page read and write
|
|
|
|
5408000
|
unkown
|
page read and write
|
|
|
|
7FF565FAC000
|
unkown
|
page readonly
|
|
|
|
548C000
|
unkown
|
page read and write
|
|
|
|
4B60000
|
unkown image
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5E0700000
|
unkown
|
page readonly
|
|
|
|
5483000
|
unkown
|
page read and write
|
|
|
|
7FF59CFE8000
|
unkown
|
page readonly
|
|
|
|
7FF5E68E7000
|
unkown
|
page readonly
|
|
|
|
1F5A8520000
|
unkown
|
page readonly
|
|
|
|
21337D00000
|
heap private
|
page read and write
|
|
|
|
15FFFFB0000
|
unkown
|
page readonly
|
|
|
|
16FD6272000
|
unkown
|
page read and write
|
|
|
|
21337FDB000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF55CB33000
|
unkown
|
page readonly
|
|
|
|
7FF588144000
|
unkown
|
page readonly
|
|
|
|
29A2000
|
unkown
|
page readonly
|
|
|
|
7FF522D34000
|
unkown
|
page readonly
|
|
|
|
7FF5E0707000
|
unkown
|
page readonly
|
|
|
|
9B0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF522D67000
|
unkown
|
page readonly
|
|
|
|
14F0BE00000
|
unkown
|
page readonly
|
|
|
|
563F000
|
unkown
|
page read and write
|
|
|
|
7FF572DFA000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2A17000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
2421D858000
|
unkown
|
page read and write
|
|
|
|
18F96900000
|
unkown
|
page readonly
|
|
|
|
7FF59D1C0000
|
unkown
|
page readonly
|
|
|
|
7FF4F2562000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF58799D000
|
unkown
|
page readonly
|
|
|
|
7FF579A13000
|
unkown
|
page readonly
|
|
|
|
A976000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
21338202000
|
unkown
|
page read and write
|
|
|
|
1300000
|
unkown
|
page readonly
|
|
|
|
158E3000
|
unkown
|
page read and write
|
|
|
|
2D80000
|
unkown
|
page readonly
|
|
|
|
16FD626F000
|
unkown
|
page read and write
|
|
|
|
7FF4EF414000
|
unkown
|
page readonly
|
|
|
|
7FF579ADF000
|
unkown
|
page readonly
|
|
|
|
7FF50056F000
|
unkown
|
page readonly
|
|
|
|
2731EA00000
|
unkown
|
page readonly
|
|
|
|
7FF522E5B000
|
unkown
|
page readonly
|
|
|
|
14F09D02000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
213360D0000
|
unkown
|
page readonly
|
|
|
|
32DE000
|
heap default
|
page read and write
|
|
|
|
AA10000
|
unkown
|
page read and write
|
|
|
|
1686D000
|
unkown
|
page readonly
|
|
|
|
3750000
|
unkown
|
page readonly
|
|
|
|
1B3B603D000
|
unkown
|
page read and write
|
|
|
|
12D0000
|
unkown
|
page read and write
|
|
|
|
14F09C13000
|
unkown
|
page read and write
|
|
|
|
83A07B000
|
unkown
|
page read and write
|
|
|
|
6EE647F000
|
unkown
|
page read and write
|
|
|
|
1B3B6079000
|
unkown
|
page read and write
|
|
|
|
7FF587F4E000
|
unkown
|
page readonly
|
|
|
|
1644DA28000
|
unkown
|
page read and write
|
|
|
|
1B3B605A000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF522D30000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6854000
|
unkown
|
page readonly
|
|
|
|
52C1000
|
unkown
|
page read and write
|
|
|
|
7FF56609B000
|
unkown
|
page readonly
|
|
|
|
7FF522BFD000
|
unkown
|
page readonly
|
|
|
|
7FF4F255D000
|
unkown
|
page readonly
|
|
|
|
F725FE000
|
unkown
|
page read and write
|
|
|
|
7FF565DA7000
|
unkown
|
page readonly
|
|
|
|
16DA0000
|
unkown
|
page read and write
|
|
|
|
21337F58000
|
unkown
|
page read and write
|
|
|
|
7FF522D42000
|
unkown
|
page readonly
|
|
|
|
7FF58800D000
|
unkown
|
page readonly
|
|
|
|
28F1F513000
|
unkown
|
page read and write
|
|
|
|
21335EA8000
|
unkown
|
page read and write
|
|
|
|
2B58000
|
unkown
|
page readonly
|
|
|
|
C6E6875000
|
unkown
|
page read and write
|
|
|
|
7FF4F297B000
|
unkown
|
page readonly
|
|
|
|
14F0BA90000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
16000200000
|
unkown
|
page readonly
|
|
|
|
7FF5A9DBE000
|
unkown
|
page readonly
|
|
|
|
1644DA64000
|
unkown
|
page read and write
|
|
|
|
18F96890000
|
heap private
|
page read and write
|
|
|
|
21335EDE000
|
unkown
|
page read and write
|
|
|
|
1B3B6083000
|
unkown
|
page read and write
|
|
|
|
15FFFCD0000
|
unkown
|
page readonly
|
|
|
|
1644D810000
|
heap default
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
15FFF960000
|
heap private
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
5396000
|
unkown
|
page read and write
|
|
|
|
F71FFC000
|
unkown
|
page read and write
|
|
|
|
5313000
|
unkown
|
page read and write
|
|
|
|
21338000000
|
unkown
|
page read and write
|
|
|
|
16FD7C00000
|
unkown
|
page read and write
|
|
|
|
1F5A8520000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF572C75000
|
unkown
|
page readonly
|
|
|
|
1F5A33D0000
|
unkown
|
page readonly
|
|
|
|
3550000
|
unkown
|
page readonly
|
|
|
|
2939000
|
unkown
|
page readonly
|
|
|
|
16FD6256000
|
unkown
|
page read and write
|
|
|
|
7FF5A036E000
|
unkown
|
page readonly
|
|
|
|
31C2000
|
unkown
|
page execute and read and write
|
|
|
|
199AE7B0000
|
unkown
|
page read and write
|
|
|
|
327C000
|
unkown
|
page read and write
|
|
|
|
1B3B6042000
|
unkown
|
page read and write
|
|
|
|
7FF55C886000
|
unkown
|
page readonly
|
|
|
|
1644DB02000
|
unkown
|
page read and write
|
|
|
|
16FD60B0000
|
heap private
|
page read and write
|
|
|
|
199ACE00000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5880A3000
|
unkown
|
page readonly
|
|
|
|
3B81F7E000
|
unkown
|
page read and write
|
|
|
|
7FF5880C3000
|
unkown
|
page readonly
|
|
|
|
16FD623F000
|
unkown
|
page read and write
|
|
|
|
7FF5E0566000
|
unkown
|
page readonly
|
|
|
|
2ACB4FA000
|
unkown
|
page read and write
|
|
|
|
7FF579B1B000
|
unkown
|
page readonly
|
|
|
|
DD7A7FE000
|
unkown
|
page read and write
|
|
|
|
7FF59D1FD000
|
unkown
|
page readonly
|
|
|
|
7FF4F2964000
|
unkown
|
page readonly
|
|
|
|
168C2000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1B3B605E000
|
unkown
|
page read and write
|
|
|
|
5180000
|
unkown
|
page read and write
|
|
|
|
555C000
|
unkown
|
page read and write
|
|
|
|
7FF565F4D000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1F5A80B0000
|
unkown
|
page read and write
|
|
|
|
2421D760000
|
heap default
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
83E000
|
unkown
|
page read and write
|
|
|
|
93322FB000
|
unkown
|
page read and write
|
|
|
|
7FF500528000
|
unkown
|
page readonly
|
|
|
|
1630000
|
heap private
|
page read and write
|
|
|
|
7FF59D1D3000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF565FD9000
|
unkown
|
page readonly
|
|
|
|
1F5A2C71000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2ACB17B000
|
unkown
|
page read and write
|
|
|
|
7FF522AEA000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF58815B000
|
unkown
|
page readonly
|
|
|
|
F727FF000
|
unkown
|
page read and write
|
|
|
|
12A415EB000
|
heap default
|
page read and write
|
|
|
|
7FF572B32000
|
unkown
|
page readonly
|
|
|
|
12A43190000
|
heap private
|
page read and write
|
|
|
|
B37FAFF000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
549A000
|
unkown
|
page read and write
|
|
|
|
53A6000
|
unkown
|
page read and write
|
|
|
|
2731DEE0000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
5355000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
886000
|
heap default
|
page read and write
|
|
|
|
2731DED0000
|
heap default
|
page read and write
|
|
|
|
7FF59D2A8000
|
unkown
|
page readonly
|
|
|
|
1E5F9000000
|
unkown
|
page readonly
|
|
|
|
195977E000
|
unkown
|
page read and write
|
|
|
|
7FF572F20000
|
unkown
|
page readonly
|
|
|
|
7FF5E66A6000
|
unkown
|
page readonly
|
|
|
|
2B13000
|
unkown
|
page readonly
|
|
|
|
7FF5E69C4000
|
unkown
|
page readonly
|
|
|
|
12A416D0000
|
unkown
|
page readonly
|
|
|
|
1E5F8E4F000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1F5A3CC0000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF5E69AE000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
12A41790000
|
unkown
|
page readonly
|
|
|
|
7FF579A6A000
|
unkown
|
page readonly
|
|
|
|
21337F5A000
|
unkown
|
page read and write
|
|
|
|
16A65000
|
unkown
|
page read and write
|
|
|
|
7FF5A9B6D000
|
unkown
|
page readonly
|
|
|
|
1572000
|
heap default
|
page read and write
|
|
|
|
21335E29000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
21335E7F000
|
unkown
|
page read and write
|
|
|
|
3182000
|
unkown
|
page execute and read and write
|
|
|
|
86F000
|
unkown
|
page read and write
|
|
|
|
1F5A2C29000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
2A17000
|
unkown
|
page readonly
|
|
|
|
A8D4000
|
unkown
|
page read and write
|
|
|
|
15835000
|
unkown
|
page read and write
|
|
|
|
1F5A2B90000
|
unkown
|
page read and write
|
|
|
|
16A5B000
|
unkown
|
page read and write
|
|
|
|
1567000
|
unkown
|
page read and write
|
|
|
|
1B3B6013000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6919000
|
unkown
|
page readonly
|
|
|
|
1F5A8400000
|
unkown
|
page read and write
|
|
|
|
7FF5E699F000
|
unkown
|
page readonly
|
|
|
|
7FF5E06FD000
|
unkown
|
page readonly
|
|
|
|
12A41B20000
|
unkown
|
page readonly
|
|
|
|
DD7AA7D000
|
unkown
|
page read and write
|
|
|
|
21339610000
|
unkown
|
page read and write
|
|
|
|
2944000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
9331EFB000
|
unkown
|
page read and write
|
|
|
|
21339000000
|
unkown
|
page read and write
|
|
|
|
16A35000
|
unkown
|
page read and write
|
|
|
|
31CA000
|
unkown
|
page execute and read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF5E6772000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5E653A000
|
unkown
|
page readonly
|
|
|
|
169E8000
|
unkown
|
page read and write
|
|
|
|
7FF5A9B9F000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1584000
|
heap default
|
page read and write
|
|
|
|
16000002000
|
unkown
|
page read and write
|
|
|
|
12A42F30000
|
unkown
|
page readonly
|
|
|
|
7FF5E0793000
|
unkown
|
page readonly
|
|
|
|
166CE000
|
unkown
|
page read and write
|
|
|
|
7FF522D8D000
|
unkown
|
page readonly
|
|
|
|
546D000
|
unkown
|
page read and write
|
|
|
|
7FF55CBA0000
|
unkown
|
page readonly
|
|
|
|
169E8000
|
unkown
|
page read and write
|
|
|
|
7FF522D17000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1F5A82B7000
|
unkown
|
page read and write
|
|
|
|
14F0B6B0000
|
unkown
|
page readonly
|
|
|
|
9331DFB000
|
unkown
|
page read and write
|
|
|
|
21338342000
|
unkown
|
page read and write
|
|
|
|
1F5A33C0000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1644DB13000
|
unkown
|
page read and write
|
|
|
|
1F5A3B00000
|
unkown
|
page read and write
|
|
|
|
16A25000
|
unkown
|
page read and write
|
|
|
|
7FF5A943A000
|
unkown
|
page readonly
|
|
|
|
7FF5795E9000
|
unkown
|
page readonly
|
|
|
|
8473DF9000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF4F282A000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
15808000
|
unkown
|
page read and write
|
|
|
|
12A4316F000
|
heap private
|
page read and write
|
|
|
|
7FF5E6728000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
21335EC7000
|
unkown
|
page read and write
|
|
|
|
7FF5E69DF000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
70F65FE000
|
unkown
|
page read and write
|
|
|
|
2421D7C0000
|
unkown
|
page read and write
|
|
|
|
15FFFA75000
|
unkown
|
page read and write
|
|
|
|
7FF4F27B7000
|
unkown
|
page readonly
|
|
|
|
7FF4EF57D000
|
unkown
|
page readonly
|
|
|
|
21335F88000
|
unkown
|
page read and write
|
|
|
|
1F5A3402000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
2DC9000
|
unkown
|
page readonly
|
|
|
|
7FF4F28C3000
|
unkown
|
page readonly
|
|
|
|
7FF57996F000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
839C7B000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
158CB000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2731E590000
|
unkown
|
page readonly
|
|
|
|
7FF572D87000
|
unkown
|
page readonly
|
|
|
|
B3000FC000
|
unkown
|
page read and write
|
|
|
|
5264000
|
unkown
|
page read and write
|
|
|
|
F71DFB000
|
unkown
|
page read and write
|
|
|
|
1644D8F0000
|
unkown
|
page readonly
|
|
|
|
14F0BD00000
|
unkown
|
page read and write
|
|
|
|
161E0000
|
unkown
|
page readonly
|
|
|
|
1B3B6076000
|
unkown
|
page read and write
|
|
|
|
7FF572CA0000
|
unkown
|
page readonly
|
|
|
|
54B1000
|
unkown
|
page read and write
|
|
|
|
7FF52290F000
|
unkown
|
page readonly
|
|
|
|
1E5F8DA0000
|
unkown
|
page readonly
|
|
|
|
70F5F2E000
|
unkown
|
page read and write
|
|
|
|
7FF4EF558000
|
unkown
|
page readonly
|
|
|
|
7FF55CC5B000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF572F3B000
|
unkown
|
page readonly
|
|
|
|
14F0BAA0000
|
unkown
|
page readonly
|
|
|
|
16FD6313000
|
unkown
|
page read and write
|
|
|
|
1F5A2BA0000
|
unkown
|
page read and write
|
|
|
|
7FF5229D4000
|
unkown
|
page readonly
|
|
|
|
14F09D17000
|
unkown
|
page read and write
|
|
|
|
7FF50055B000
|
unkown
|
page readonly
|
|
|
|
AA0D000
|
unkown
|
page read and write
|
|
|
|
21335EBD000
|
unkown
|
page read and write
|
|
|
|
12A43250000
|
heap private
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
1F5A8200000
|
unkown
|
page read and write
|
|
|
|
7FF4F2837000
|
unkown
|
page readonly
|
|
|
|
7FF4EF069000
|
unkown
|
page readonly
|
|
|
|
7FF522E44000
|
unkown
|
page readonly
|
|
|
|
2421D802000
|
unkown
|
page read and write
|
|
|
|
21338182000
|
unkown
|
page read and write
|
|
|
|
AA17000
|
unkown
|
page read and write
|
|
|
|
168DA000
|
unkown
|
page readonly
|
|
|
|
7FF4EF078000
|
unkown
|
page readonly
|
|
|
|
9331E7C000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
2975000
|
unkown
|
page readonly
|
|
|
|
7FF5A9D8F000
|
unkown
|
page readonly
|
|
|
|
A7A7000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
545E000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
18F96B02000
|
unkown
|
page read and write
|
|
|
|
18F96A02000
|
unkown
|
page read and write
|
|
|
|
C6E6BFE000
|
unkown
|
page read and write
|
|
|
|
21337F8F000
|
unkown
|
page read and write
|
|
|
|
16A65000
|
unkown
|
page read and write
|
|
|
|
7FF5A007D000
|
unkown
|
page readonly
|
|
|
|
1F5A2E00000
|
unkown
|
page readonly
|
|
|
|
2731E044000
|
unkown
|
page read and write
|
|
|
|
2133803A000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4D9000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF587E85000
|
unkown
|
page readonly
|
|
|
|
14F0BD02000
|
unkown
|
page read and write
|
|
|
|
7FF4F297F000
|
unkown
|
page readonly
|
|
|
|
7FF5795F8000
|
unkown
|
page readonly
|
|
|
|
A0F000
|
unkown
|
page read and write
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
1644DA40000
|
unkown
|
page read and write
|
|
|
|
7FF5E0356000
|
unkown
|
page readonly
|
|
|
|
21337D60000
|
unkown
|
page read and write
|
|
|
|
7FF4EF566000
|
unkown
|
page readonly
|
|
|
|
16E0000
|
unkown
|
page read and write
|
|
|
|
5497000
|
unkown
|
page read and write
|
|
|
|
1F5A81C8000
|
unkown
|
page read and write
|
|
|
|
2ACB8FE000
|
unkown
|
page read and write
|
|
|
|
7FF5879A1000
|
unkown
|
page readonly
|
|
|
|
2DCC000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
1F5A82A5000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
2A05000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
15808000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
DD7AAFF000
|
unkown
|
page read and write
|
|
|
|
1F5A2C95000
|
unkown
|
page read and write
|
|
|
|
93325FF000
|
unkown
|
page read and write
|
|
|
|
9331BFB000
|
unkown
|
page read and write
|
|
|
|
7FF59D2DE000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF588034000
|
unkown
|
page readonly
|
|
|
|
7FF5E69DF000
|
unkown
|
page readonly
|
|
|
|
5456000
|
unkown
|
page read and write
|
|
|
|
7FF522D99000
|
unkown
|
page readonly
|
|
|
|
7FF565D9D000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
21335EE7000
|
unkown
|
page read and write
|
|
|
|
93320FB000
|
unkown
|
page read and write
|
|
|
|
14FB000
|
heap default
|
page read and write
|
|
|
|
7FF4F202B000
|
unkown
|
page readonly
|
|
|
|
7FF4F26A5000
|
unkown
|
page readonly
|
|
|
|
7FF5229E0000
|
unkown
|
page readonly
|
|
|
|
2ACB6F9000
|
unkown
|
page read and write
|
|
|
|
7FF4EF584000
|
unkown
|
page readonly
|
|
|
|
1B3B5FD0000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
B37FD7C000
|
unkown
|
page read and write
|
|
|
|
15E20000
|
unkown
|
page readonly
|
|
|
|
7FF587ED7000
|
unkown
|
page readonly
|
|
|
|
7FF5E677D000
|
unkown
|
page readonly
|
|
|
|
16FD6271000
|
unkown
|
page read and write
|
|
|
|
7FF4EF38E000
|
unkown
|
page readonly
|
|
|
|
16FD626B000
|
unkown
|
page read and write
|
|
|
|
7FF522E1F000
|
unkown
|
page readonly
|
|
|
|
15FFFA40000
|
unkown
|
page read and write
|
|
|
|
7FF59CFA6000
|
unkown
|
page readonly
|
|
|
|
2731E000000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
15D8F000
|
unkown
|
page read and write
|
|
|
|
2731DFD0000
|
unkown
|
page read and write
|
|
|
|
7FF5A9435000
|
unkown
|
page readonly
|
|
|
|
5476000
|
unkown
|
page read and write
|
|
|
|
7FF4F2938000
|
unkown
|
page readonly
|
|
|
|
2731E200000
|
unkown
|
page readonly
|
|
|
|
7FF522B51000
|
unkown
|
page readonly
|
|
|
|
7FF522B4A000
|
unkown
|
page readonly
|
|
|
|
3080000
|
unkown
|
page readonly
|
|
|
|
30A5000
|
heap default
|
page read and write
|
|
|
|
7FF587D3D000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1F5A8494000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0237000
|
unkown
|
page readonly
|
|
|
|
83A17E000
|
unkown
|
page read and write
|
|
|
|
7FF59D2C0000
|
unkown
|
page readonly
|
|
|
|
195987E000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4B8000
|
unkown
|
page readonly
|
|
|
|
93323FB000
|
unkown
|
page read and write
|
|
|
|
933187E000
|
unkown
|
page read and write
|
|
|
|
7FF5880AA000
|
unkown
|
page readonly
|
|
|
|
567B000
|
unkown
|
page read and write
|
|
|
|
7FF58813D000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF522E5F000
|
unkown
|
page readonly
|
|
|
|
544A000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
543A000
|
unkown
|
page read and write
|
|
|
|
15A60000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
213380B4000
|
unkown
|
page read and write
|
|
|
|
7FF522DC5000
|
unkown
|
page readonly
|
|
|
|
7FF5E083B000
|
unkown
|
page readonly
|
|
|
|
7FF565C6F000
|
unkown
|
page readonly
|
|
|
|
7FF522D10000
|
unkown
|
page readonly
|
|
|
|
F722FD000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF493000
|
unkown
|
page readonly
|
|
|
|
32D6000
|
heap default
|
page read and write
|
|
|
|
7FF5A9B8C000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF572E7D000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
3B8153B000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
5365000
|
unkown
|
page read and write
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
54DE000
|
unkown
|
page read and write
|
|
|
|
12A416E0000
|
unkown
|
page readonly
|
|
|
|
21335EE9000
|
unkown
|
page read and write
|
|
|
|
16FD6300000
|
unkown
|
page read and write
|
|
|
|
195967D000
|
unkown
|
page read and write
|
|
|
|
557E000
|
unkown
|
page read and write
|
|
|
|
1B3B6041000
|
unkown
|
page read and write
|
|
|
|
1E5F9800000
|
unkown
|
page readonly
|
|
|
|
14F09AC0000
|
heap default
|
page read and write
|
|
|
|
2421D770000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
1563000
|
unkown
|
page read and write
|
|
|
|
7FF5E080F000
|
unkown
|
page readonly
|
|
|
|
7FF5004A9000
|
unkown
|
page readonly
|
|
|
|
2731ED40000
|
unkown
|
page readonly
|
|
|
|
B37FE7F000
|
unkown
|
page read and write
|
|
|
|
5386000
|
unkown
|
page read and write
|
|
|
|
1E5F8F08000
|
unkown
|
page read and write
|
|
|
|
155C000
|
unkown
|
page read and write
|
|
|
|
1B3B6040000
|
unkown
|
page read and write
|
|
|
|
547A000
|
unkown
|
page read and write
|
|
|
|
A30000
|
heap default
|
page read and write
|
|
|
|
1B3B6032000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1644DB00000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF579994000
|
unkown
|
page readonly
|
|
|
|
7FF4F282D000
|
unkown
|
page readonly
|
|
|
|
7FF4EF4A7000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF5E077D000
|
unkown
|
page readonly
|
|
|
|
7FF4F2873000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
52A1000
|
unkown
|
page read and write
|
|
|
|
7FF4F2524000
|
unkown
|
page readonly
|
|
|
|
7FF565E8E000
|
unkown
|
page readonly
|
|
|
|
7FF572DFD000
|
unkown
|
page readonly
|
|
|
|
5333000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF59D1E7000
|
unkown
|
page readonly
|
|
|
|
7FF4F28E3000
|
unkown
|
page readonly
|
|
|
|
933267E000
|
unkown
|
page read and write
|
|
|
|
14F09BA0000
|
unkown
|
page write copy
|
|
|
|
213380CA000
|
unkown
|
page read and write
|
|
|
|
7FF59D2DB000
|
unkown
|
page readonly
|
|
|
|
1B3B6802000
|
unkown
|
page read and write
|
|
|
|
3028000
|
unkown
|
page read and write
|
|
|
|
7FF588099000
|
unkown
|
page readonly
|
|
|
|
B3002FC000
|
unkown
|
page read and write
|
|
|
|
28F1F470000
|
unkown
|
page read and write
|
|
|
|
70F5FAE000
|
unkown
|
page read and write
|
|
|
|
165FF000
|
unkown
|
page read and write
|
|
|
|
21335F2F000
|
unkown
|
page read and write
|
|
|
|
15FFF9F0000
|
unkown
|
page read and write
|
|
|
|
7FF5E059D000
|
unkown
|
page readonly
|
|
|
|
1F5A4001000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1644D9D0000
|
unkown
|
page readonly
|
|
|
|
15FFFA5B000
|
unkown
|
page read and write
|
|
|
|
1090000
|
unkown
|
page read and write
|
|
|
|
1644DA13000
|
unkown
|
page read and write
|
|
|
|
7FF5A016E000
|
unkown
|
page readonly
|
|
|
|
155C000
|
unkown
|
page read and write
|
|
|
|
21335F37000
|
unkown
|
page read and write
|
|
|
|
93324FC000
|
unkown
|
page read and write
|
|
|
|
7FF50056F000
|
unkown
|
page readonly
|
|
|
|
7FF579B04000
|
unkown
|
page readonly
|
|
|
|
1B3B604E000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF5E084F000
|
unkown
|
page readonly
|
|
|
|
21337F95000
|
unkown
|
page read and write
|
|
|
|
7FF4EF3EF000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
4BD3000
|
unkown image
|
page execute and write copy
|
|
|
|
21339110000
|
unkown
|
page read and write
|
|
|
|
4CDC000
|
unkown image
|
page readonly
|
|
|
|
31FD000
|
unkown
|
page read and write
|
|
|
|
1F5A3390000
|
unkown
|
page readonly
|
|
|
|
56CF000
|
unkown
|
page read and write
|
|
|
|
7FF4EECE5000
|
unkown
|
page readonly
|
|
|
|
7FF4EF063000
|
unkown
|
page readonly
|
|
|
|
2ACB1FE000
|
unkown
|
page read and write
|
|
|
|
3B822FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A028C000
|
unkown
|
page readonly
|
|
|
|
7FF5E69CB000
|
unkown
|
page readonly
|
|
|
|
7FF59D229000
|
unkown
|
page readonly
|
|
|
|
7FF579A4D000
|
unkown
|
page readonly
|
|
|
|
7FF579AFD000
|
unkown
|
page readonly
|
|
|
|
A971000
|
unkown
|
page read and write
|
|
|
|
7FF56605F000
|
unkown
|
page readonly
|
|
|
|
7FF566084000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
14F09D13000
|
unkown
|
page read and write
|
|
|
|
7FF572AF0000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
15A5F000
|
unkown
|
page read and write
|
|
|
|
7FF5A02E3000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF579AEB000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF522966000
|
unkown
|
page readonly
|
|
|
|
7FF5004A5000
|
unkown
|
page readonly
|
|
|
|
15CAD000
|
unkown
|
page read and write
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
21335E5E000
|
unkown
|
page read and write
|
|
|
|
7FF4F286C000
|
unkown
|
page readonly
|
|
|
|
28F1F451000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
25D0000
|
unkown
|
page read and write
|
|
|
|
1F5A84D0000
|
unkown
|
page read and write
|
|
|
|
7FF5E081E000
|
unkown
|
page readonly
|
|
|
|
7FF5798BD000
|
unkown
|
page readonly
|
|
|
|
7FF4EF363000
|
unkown
|
page readonly
|
|
|
|
7FF56609F000
|
unkown
|
page readonly
|
|
|
|
1644D820000
|
unkown
|
page readonly
|
|
|
|
2911000
|
unkown
|
page readonly
|
|
|
|
7FF579A55000
|
unkown
|
page readonly
|
|
|
|
2421DA00000
|
unkown
|
page readonly
|
|
|
|
1B3B6066000
|
unkown
|
page read and write
|
|
|
|
1E5F8E8B000
|
unkown
|
page read and write
|
|
|
|
7FF5E081B000
|
unkown
|
page readonly
|
|
|
|
21337FCA000
|
unkown
|
page read and write
|
|
|
|
1E5F8CD0000
|
unkown
|
page readonly
|
|
|
|
7FF5E082D000
|
unkown
|
page readonly
|
|
|
|
7FF59D08D000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5E690D000
|
unkown
|
page readonly
|
|
|
|
7FF5A9D05000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF5A037B000
|
unkown
|
page readonly
|
|
|
|
2731E113000
|
unkown
|
page read and write
|
|
|
|
1E5F8E3C000
|
unkown
|
page read and write
|
|
|
|
15740000
|
unkown
|
page read and write
|
|
|
|
7FF588095000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
3B81CFF000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
18F983F0000
|
unkown
|
page read and write
|
|
|
|
1F5A33F3000
|
unkown
|
page read and write
|
|
|
|
1F5A8261000
|
unkown
|
page read and write
|
|
|
|
7FF572B1F000
|
unkown
|
page readonly
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
7FF5E68D7000
|
unkown
|
page readonly
|
|
|
|
E2E000
|
unkown
|
page read and write
|
|
|
|
21335ED0000
|
unkown
|
page read and write
|
|
|
|
21339310000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6224000
|
unkown
|
page readonly
|
|
|
|
7FF4FFBD2000
|
unkown
|
page readonly
|
|
|
|
933247C000
|
unkown
|
page read and write
|
|
|
|
7FF58815F000
|
unkown
|
page readonly
|
|
|
|
7FF522A00000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
8C0000
|
heap default
|
page read and write
|
|
|
|
5271000
|
unkown
|
page read and write
|
|
|
|
21338302000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF579AF0000
|
unkown
|
page readonly
|
|
|
|
1F5A3518000
|
unkown
|
page read and write
|
|
|
|
7FF572CC7000
|
unkown
|
page readonly
|
|
|
|
12A416F0000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
D1227B000
|
unkown
|
page read and write
|
|
|
|
1F5A2CFF000
|
unkown
|
page read and write
|
|
|
|
2FA0000
|
unkown
|
page read and write
|
|
|
|
7FF572C57000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
15902000
|
unkown
|
page read and write
|
|
|
|
A987000
|
unkown
|
page read and write
|
|
|
|
7FF4F2887000
|
unkown
|
page readonly
|
|
|
|
2700000
|
unkown
|
page read and write
|
|
|
|
14F09C29000
|
unkown
|
page read and write
|
|
|
|
7FF55CC7E000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
54BA000
|
unkown
|
page read and write
|
|
|
|
5486000
|
unkown
|
page read and write
|
|
|
|
7FF5797D3000
|
unkown
|
page readonly
|
|
|
|
21337FB0000
|
unkown
|
page read and write
|
|
|
|
7FF500536000
|
unkown
|
page readonly
|
|
|
|
7FF5729FF000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
A98D000
|
unkown
|
page read and write
|
|
|
|
93326FD000
|
unkown
|
page read and write
|
|
|
|
8473EFF000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
321F000
|
unkown
|
page execute and read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1567000
|
unkown
|
page read and write
|
|
|
|
7FF5A9CD8000
|
unkown
|
page readonly
|
|
|
|
7FF4F26A1000
|
unkown
|
page readonly
|
|
|
|
199ACE29000
|
unkown
|
page read and write
|
|
|
|
7FF522E3D000
|
unkown
|
page readonly
|
|
|
|
21338142000
|
unkown
|
page read and write
|
|
|
|
18F96A3F000
|
unkown
|
page read and write
|
|
|
|
7FF5A9DB4000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF5E69DD000
|
unkown
|
page readonly
|
|
|
|
D2E000
|
unkown
|
page read and write
|
|
|
|
7FF5E6802000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF59D2EF000
|
unkown
|
page readonly
|
|
|
|
7FF5E69AB000
|
unkown
|
page readonly
|
|
|
|
7FF5E079A000
|
unkown
|
page readonly
|
|
|
|
7FF5E05C7000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
54A5000
|
unkown
|
page read and write
|
|
|
|
7FF55CC8F000
|
unkown
|
page readonly
|
|
|
|
7FF572F08000
|
unkown
|
page readonly
|
|
|
|
7FF4F2877000
|
unkown
|
page readonly
|
|
|
|
A980000
|
unkown
|
page read and write
|
|
|
|
2F02000
|
unkown
|
page read and write
|
|
|
|
7FF5E075C000
|
unkown
|
page readonly
|
|
|
|
1F5A8620000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5798EE000
|
unkown
|
page readonly
|
|
|
|
55FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E6998000
|
unkown
|
page readonly
|
|
|
|
21338040000
|
unkown
|
page read and write
|
|
|
|
1E5F8DC0000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
30B0000
|
unkown
|
page readonly
|
|
|
|
1F5A2C79000
|
unkown
|
page read and write
|
|
|
|
7FF566058000
|
unkown
|
page readonly
|
|
|
|
7FF59CF98000
|
unkown
|
page readonly
|
|
|
|
7FF4F297F000
|
unkown
|
page readonly
|
|
|
|
1F5A84C7000
|
unkown
|
page write copy
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
14F0BD45000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
1B3B605C000
|
unkown
|
page read and write
|
|
|
|
7FF55CBFD000
|
unkown
|
page readonly
|
|
|
|
21339410000
|
unkown
|
page read and write
|
|
|
|
2C27000
|
unkown
|
page readonly
|
|
|
|
5428000
|
unkown
|
page read and write
|
|
|
|
82E000
|
unkown
|
page read and write
|
|
|
|
21335EBB000
|
unkown
|
page read and write
|
|
|
|
5489000
|
unkown
|
page read and write
|
|
|
|
7FF5A02C3000
|
unkown
|
page readonly
|
|
|
|
C6E68FF000
|
unkown
|
page read and write
|
|
|
|
8473D7A000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A034B000
|
unkown
|
page readonly
|
|
|
|
1F5A2C76000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF579A63000
|
unkown
|
page readonly
|
|
|
|
2DC0000
|
unkown
|
page read and write
|
|
|
|
16FD626B000
|
unkown
|
page read and write
|
|
|
|
548F000
|
unkown
|
page read and write
|
|
|
|
7FF4F2858000
|
unkown
|
page readonly
|
|
|
|
3B81FFE000
|
unkown
|
page read and write
|
|
|
|
54D7000
|
unkown
|
page read and write
|
|
|
|
21338142000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
565E000
|
unkown
|
page read and write
|
|
|
|
5344000
|
unkown
|
page read and write
|
|
|
|
7FF572F0F000
|
unkown
|
page readonly
|
|
|
|
7FF4F288C000
|
unkown
|
page readonly
|
|
|
|
21339310000
|
unkown
|
page read and write
|
|
|
|
1644D900000
|
unkown
|
page readonly
|
|
|
|
7FF4EF56B000
|
unkown
|
page readonly
|
|
|
|
7FF5004D5000
|
unkown
|
page readonly
|
|
|
|
7FF59FF4F000
|
unkown
|
page readonly
|
|
|
|
1561000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF572E32000
|
unkown
|
page readonly
|
|
|
|
2989000
|
unkown
|
page readonly
|
|
|
|
4BD4000
|
unkown image
|
page execute and read and write
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
52D2000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF55CBC9000
|
unkown
|
page readonly
|
|
|
|
3B821FD000
|
unkown
|
page read and write
|
|
|
|
7FF56607D000
|
unkown
|
page readonly
|
|
|
|
7FF579AD8000
|
unkown
|
page readonly
|
|
|
|
7FF588010000
|
unkown
|
page readonly
|
|
|
|
1597E000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2421DE60000
|
unkown
|
page readonly
|
|
|
|
1B3B6102000
|
unkown
|
page read and write
|
|
|
|
7FF5E0747000
|
unkown
|
page readonly
|
|
|
|
7FF5E6159000
|
unkown
|
page readonly
|
|
|
|
7FF59D1B0000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
14F09AD0000
|
unkown
|
page readonly
|
|
|
|
1F5A33A0000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
5520000
|
unkown
|
page read and write
|
|
|
|
1567000
|
unkown
|
page read and write
|
|
|
|
1B3B5EF0000
|
unkown
|
page readonly
|
|
|
|
1E5F8F13000
|
unkown
|
page read and write
|
|
|
|
1668F000
|
unkown
|
page read and write
|
|
|
|
4B60000
|
unkown image
|
page readonly
|
|
|
|
5252000
|
unkown
|
page read and write
|
|
|
|
7FF50047C000
|
unkown
|
page readonly
|
|
|
|
B37FF7C000
|
unkown
|
page read and write
|
|
|
|
7FF522CAF000
|
unkown
|
page readonly
|
|
|
|
14F09C00000
|
unkown
|
page read and write
|
|
|
|
7FF5E648F000
|
unkown
|
page readonly
|
|
|
|
18F96A56000
|
unkown
|
page read and write
|
|
|
|
DD7AC7D000
|
unkown
|
page read and write
|
|
|
|
3180000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5A037F000
|
unkown
|
page readonly
|
|
|
|
7FF588017000
|
unkown
|
page readonly
|
|
|
|
2D60000
|
unkown
|
page read and write
|
|
|
|
1E5F9470000
|
unkown
|
page readonly
|
|
|
|
572C000
|
unkown
|
page read and write
|
|
|
|
7FF4F26D0000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF572F4D000
|
unkown
|
page readonly
|
|
|
|
1F5A81F0000
|
unkown
|
page read and write
|
|
|
|
6EE61FB000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
14F09CF0000
|
unkown
|
page read and write
|
|
|
|
158B3000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
28F1F400000
|
unkown
|
page read and write
|
|
|
|
1B3B6046000
|
unkown
|
page read and write
|
|
|
|
21338032000
|
unkown
|
page read and write
|
|
|
|
F719EC000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
5180000
|
unkown
|
page readonly
|
|
|
|
15FFF9E0000
|
unkown
|
page readonly
|
|
|
|
7FF4EF4AC000
|
unkown
|
page readonly
|
|
|
|
7FF5E0020000
|
unkown
|
page readonly
|
|
|
|
7FF5A0364000
|
unkown
|
page readonly
|
|
|
|
7FF55C87D000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1E5F8E02000
|
unkown
|
page read and write
|
|
|
|
15FFF9C0000
|
heap default
|
page read and write
|
|
|
|
2BAD000
|
unkown
|
page readonly
|
|
|
|
21339410000
|
unkown
|
page read and write
|
|
|
|
7FF579975000
|
unkown
|
page readonly
|
|
|
|
D124F9000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
1F5A8490000
|
unkown
|
page read and write
|
|
|
|
7FF522BF4000
|
unkown
|
page readonly
|
|
|
|
12F0000
|
heap default
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
2731E900000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
16A05000
|
unkown
|
page read and write
|
|
|
|
12A41710000
|
heap private
|
page read and write
|
|
|
|
61417FE000
|
unkown
|
page read and write
|
|
|
|
21339310000
|
unkown
|
page read and write
|
|
|
|
7FF5E0789000
|
unkown
|
page readonly
|
|
|
|
2CFB000
|
unkown
|
page read and write
|
|
|
|
1B3B6059000
|
unkown
|
page read and write
|
|
|
|
7FF5A9D13000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
26A8000
|
unkown
|
page readonly
|
|
|
|
26F5000
|
heap private
|
page read and write
|
|
|
|
168BE000
|
unkown
|
page readonly
|
|
|
|
1F5A3559000
|
unkown
|
page read and write
|
|
|
|
5526000
|
unkown
|
page read and write
|
|
|
|
7FF4EF36E000
|
unkown
|
page readonly
|
|
|
|
839F7B000
|
unkown
|
page read and write
|
|
|
|
199AE8B0000
|
unkown
|
page readonly
|
|
|
|
7FF522D57000
|
unkown
|
page readonly
|
|
|
|
7FF4F295D000
|
unkown
|
page readonly
|
|
|
|
7FF4F294B000
|
unkown
|
page readonly
|
|
|
|
B37F75C000
|
unkown
|
page read and write
|
|
|
|
21338100000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
C6E6AFE000
|
unkown
|
page read and write
|
|
|
|
21335E00000
|
unkown
|
page read and write
|
|
|
|
14F09E00000
|
unkown
|
page readonly
|
|
|
|
1F5A80C0000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
18F96A34000
|
unkown
|
page read and write
|
|
|
|
15C6F000
|
unkown
|
page read and write
|
|
|
|
7FF5E084F000
|
unkown
|
page readonly
|
|
|
|
1E5F9602000
|
unkown
|
page read and write
|
|
|
|
7FF579B1F000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
12A41785000
|
heap private
|
page read and write
|
|
|
|
16720000
|
unkown
|
page read and write
|
|
|
|
159CE000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF59D23A000
|
unkown
|
page readonly
|
|
|
|
15FFFA02000
|
unkown
|
page read and write
|
|
|
|
108C000
|
unkown
|
page read and write
|
|
|
|
7FF4F256A000
|
unkown
|
page readonly
|
|
|
|
199ACCE0000
|
unkown
|
page readonly
|
|
|
|
1563000
|
unkown
|
page read and write
|
|
|
|
549E000
|
unkown
|
page read and write
|
|
|
|
21338043000
|
unkown
|
page read and write
|
|
|
|
21338182000
|
unkown
|
page read and write
|
|
|
|
18F96A00000
|
unkown
|
page read and write
|
|
|
|
7FF579A27000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
14F09CBF000
|
unkown
|
page read and write
|
|
|
|
12A41780000
|
heap private
|
page read and write
|
|
|
|
1F5A8282000
|
unkown
|
page read and write
|
|
|
|
933277D000
|
unkown
|
page read and write
|
|
|
|
15FFFC00000
|
unkown
|
page readonly
|
|
|
|
7FF5A9DA0000
|
unkown
|
page readonly
|
|
|
|
7FF500488000
|
unkown
|
page readonly
|
|
|
|
7FF5A9D1A000
|
unkown
|
page readonly
|
|
|
|
3B8207F000
|
unkown
|
page read and write
|
|
|
|
2421DAD0000
|
unkown
|
page readonly
|
|
|
|
7FF579AE6000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
54E4000
|
unkown
|
page read and write
|
|
|
|
2EA0000
|
unkown
|
page read and write
|
|
|
|
7FF50056B000
|
unkown
|
page readonly
|
|
|
|
1F5A4020000
|
unkown
|
page read and write
|
|
|
|
4B61000
|
unkown image
|
page execute read
|
|
|
|
7FF5E685E000
|
unkown
|
page readonly
|
|
|
|
21337FEB000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown
|
page readonly
|
|
|
|
1F5A2C8F000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
1644DA7D000
|
unkown
|
page read and write
|
|
|
|
AA4A000
|
unkown
|
page read and write
|
|
|
|
7FF500223000
|
unkown
|
page readonly
|
|
|
|
1F5A2B70000
|
unkown
|
page readonly
|
|
|
|
7FF4EF505000
|
unkown
|
page readonly
|
|
|
|
1F5A2C00000
|
unkown
|
page read and write
|
|
|
|
31BA000
|
unkown
|
page execute and read and write
|
|
|
|
21337CE0000
|
unkown
|
page read and write
|
|
|
|
12A415B0000
|
heap default
|
page read and write
|
|
|
|
21336460000
|
unkown
|
page readonly
|
|
|
|
7FF572AF4000
|
unkown
|
page readonly
|
|
|
|
2CBC000
|
unkown
|
page read and write
|
|
|
|
29AD000
|
unkown
|
page readonly
|
|
|
|
4B63000
|
unkown image
|
page readonly
|
|
|
|
D122FE000
|
unkown
|
page read and write
|
|
|
|
1F5A2B60000
|
heap default
|
page read and write
|
|
|
|
29FB000
|
unkown
|
page readonly
|
|
|
|
7FF5E0834000
|
unkown
|
page readonly
|
|
|
|
1567000
|
unkown
|
page read and write
|
|
|
|
1F5A33E0000
|
unkown
|
page readonly
|
|
|
|
14F0BD14000
|
unkown
|
page read and write
|
|
|
|
21337F23000
|
unkown
|
page read and write
|
|
|
|
1F5A82CA000
|
unkown
|
page read and write
|
|
|
|
7FF522B67000
|
unkown
|
page readonly
|
|
|
|
7FF5A0298000
|
unkown
|
page readonly
|
|
|
|
7FF56606B000
|
unkown
|
page readonly
|
|
|
|
31D2000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5E6945000
|
unkown
|
page readonly
|
|
|
|
87E000
|
unkown
|
page read and write
|
|
|
|
7FF59D2B6000
|
unkown
|
page readonly
|
|
|
|
14F09CA4000
|
unkown
|
page read and write
|
|
|
|
A7A0000
|
unkown
|
page read and write
|
|
|
|
5A58000
|
heap private
|
page read and write
|
|
|
|
28F1F2C0000
|
heap private
|
page read and write
|
|
|
|
F720FE000
|
unkown
|
page read and write
|
|
|
|
3175000
|
heap private
|
page read and write
|
|
|
|
2DCA000
|
unkown
|
page read and write
|
|
|
|
14F09BF0000
|
unkown
|
page readonly
|
|
|
|
14F09CC4000
|
unkown
|
page read and write
|
|
|
|
1671E000
|
unkown
|
page read and write
|
|
|
|
28F1F330000
|
unkown
|
page readonly
|
|
|
|
2731E0BF000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
280D000
|
unkown
|
page readonly
|
|
|
|
7FF565C7D000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
329A000
|
heap default
|
page read and write
|
|
|
|
213380C5000
|
unkown
|
page read and write
|
|
|
|
7FF4EF570000
|
unkown
|
page readonly
|
|
|
|
546A000
|
unkown
|
page read and write
|
|
|
|
5480000
|
unkown
|
page read and write
|
|
|
|
2731E0E0000
|
unkown
|
page read and write
|
|
|
|
1F5A2C91000
|
unkown
|
page read and write
|
|
|
|
7FF5E69DB000
|
unkown
|
page readonly
|
|
|
|
3540000
|
heap private
|
page read and write
|
|
|
|
199ACF13000
|
unkown
|
page read and write
|
|
|
|
5B6F000
|
unkown
|
page read and write
|
|
|
|
2421D780000
|
unkown
|
page readonly
|
|
|
|
7FF4EF59B000
|
unkown
|
page readonly
|
|
|
|
7FF4F2687000
|
unkown
|
page readonly
|
|
|
|
14F09A60000
|
heap private
|
page read and write
|
|
|
|
18F984F0000
|
unkown
|
page readonly
|
|
|
|
15F9F000
|
unkown
|
page read and write
|
|
|
|
7FF500554000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1584D000
|
unkown
|
page read and write
|
|
|
|
7FF572E28000
|
unkown
|
page readonly
|
|
|
|
21339510000
|
unkown
|
page read and write
|
|
|
|
7FF59D2BB000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4CD000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF572F16000
|
unkown
|
page readonly
|
|
|
|
16EA0000
|
unkown
|
page read and write
|
|
|
|
DD7A87F000
|
unkown
|
page read and write
|
|
|
|
21338182000
|
unkown
|
page read and write
|
|
|
|
53D8000
|
unkown
|
page read and write
|
|
|
|
1B3B5FC0000
|
unkown
|
page readonly
|
|
|
|
15D3E000
|
unkown
|
page read and write
|
|
|
|
870000
|
heap default
|
page read and write
|
|
|
|
4D40000
|
heap private
|
page read and write
|
|
|
|
7FF55CBF5000
|
unkown
|
page readonly
|
|
|
|
7FF55C46A000
|
unkown
|
page readonly
|
|
|
|
7FF5E6923000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2421E002000
|
unkown
|
page read and write
|
|
|
|
16FD6272000
|
unkown
|
page read and write
|
|
|
|
12E0000
|
unkown
|
page readonly
|
|
|
|
16A44000
|
unkown
|
page read and write
|
|
|
|
7FF55CBA8000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
54E1000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A9DBB000
|
unkown
|
page readonly
|
|
|
|
7FF4F28B9000
|
unkown
|
page readonly
|
|
|
|
54C6000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
21336000000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
16FD6200000
|
unkown
|
page read and write
|
|
|
|
7FF5229DA000
|
unkown
|
page readonly
|
|
|
|
21337F90000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
14F09C3F000
|
unkown
|
page read and write
|
|
|
|
15A0E000
|
unkown
|
page read and write
|
|
|
|
7FF55CBBD000
|
unkown
|
page readonly
|
|
|
|
21337D60000
|
unkown
|
page readonly
|
|
|
|
7FF572E85000
|
unkown
|
page readonly
|
|
|
|
14F0BA20000
|
unkown
|
page readonly
|
|
|
|
21338300000
|
unkown
|
page read and write
|
|
|
|
15FFFA68000
|
unkown
|
page read and write
|
|
|
|
21335EBE000
|
unkown
|
page read and write
|
|
|
|
15290000
|
unkown
|
page read and write
|
|
|
|
12A41590000
|
unkown
|
page readonly
|
|
|
|
21339010000
|
unkown
|
page read and write
|
|
|
|
7FF565FB0000
|
unkown
|
page readonly
|
|
|
|
7FF572F2D000
|
unkown
|
page readonly
|
|
|
|
F726FE000
|
unkown
|
page read and write
|
|
|
|
21337F4B000
|
unkown
|
page read and write
|
|
|
|
7FF59D233000
|
unkown
|
page readonly
|
|
|
|
16FD6450000
|
unkown
|
page readonly
|
|
|
|
7FF55CB3A000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
DD7AD7D000
|
unkown
|
page read and write
|
|
|
|
21339210000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
15F4E000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF5A0338000
|
unkown
|
page readonly
|
|
|
|
7FF566003000
|
unkown
|
page readonly
|
|
|
|
9C0000
|
unkown
|
page read and write
|
|
|
|
7FF587F6D000
|
unkown
|
page readonly
|
|
|
|
21339310000
|
unkown
|
page read and write
|
|
|
|
A7F6000
|
unkown
|
page read and write
|
|
|
|
7FF50055E000
|
unkown
|
page readonly
|
|
|
|
28F1F487000
|
unkown
|
page read and write
|
|
|
|
2ACB7FA000
|
unkown
|
page read and write
|
|
|
|
1620000
|
unkown
|
page read and write
|
|
|
|
16FD626C000
|
unkown
|
page read and write
|
|
|
|
1B3B603B000
|
unkown
|
page read and write
|
|
|
|
1F5A82B1000
|
unkown
|
page read and write
|
|
|
|
7FF55CC74000
|
unkown
|
page readonly
|
|
|
|
2B95000
|
unkown
|
page readonly
|
|
|
|
7FF5E083E000
|
unkown
|
page readonly
|
|
|
|
1F5A81CE000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
1F5A84B8000
|
unkown
|
page write copy
|
|
|
|
1F5A84F0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF522C2C000
|
unkown
|
page readonly
|
|
|
|
5697000
|
unkown
|
page read and write
|
|
|
|
7FF572E07000
|
unkown
|
page readonly
|
|
|
|
52B1000
|
unkown
|
page read and write
|
|
|
|
1F5A8500000
|
unkown
|
page read and write
|
|
|
|
7FF57278D000
|
unkown
|
page readonly
|
|
|
|
5261000
|
unkown
|
page read and write
|
|
|
|
614137B000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
877000
|
heap default
|
page read and write
|
|
|
|
1B3B6002000
|
unkown
|
page read and write
|
|
|
|
28F1F508000
|
unkown
|
page read and write
|
|
|
|
3B823FA000
|
unkown
|
page read and write
|
|
|
|
561000
|
unkown
|
page read and write
|
|
|
|
21337F86000
|
unkown
|
page read and write
|
|
|
|
7FF5E692A000
|
unkown
|
page readonly
|
|
|
|
1B3B607A000
|
unkown
|
page read and write
|
|
|
|
28F1F500000
|
unkown
|
page read and write
|
|
|
|
7FF5A0230000
|
unkown
|
page readonly
|
|
|
|
7FF5A9D35000
|
unkown
|
page readonly
|
|
|
|
7FF5A00F7000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF5A9A5A000
|
unkown
|
page readonly
|
|
|
|
16FD6400000
|
unkown
|
page write copy
|
|
|
|
21335E84000
|
unkown
|
page read and write
|
|
|
|
7FF4F2862000
|
unkown
|
page readonly
|
|
|
|
7FF57990E000
|
unkown
|
page readonly
|
|
|
|
54A9000
|
unkown
|
page read and write
|
|
|
|
2731E074000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
3010000
|
unkown
|
page read and write
|
|
|
|
16A65000
|
unkown
|
page read and write
|
|
|
|
9331AFB000
|
unkown
|
page read and write
|
|
|
|
933207A000
|
unkown
|
page read and write
|
|
|
|
1644D7B0000
|
heap private
|
page read and write
|
|
|
|
54CB000
|
unkown
|
page read and write
|
|
|
|
847398B000
|
unkown
|
page read and write
|
|
|
|
2ACB87E000
|
unkown
|
page read and write
|
|
|
|
161D0000
|
heap private
|
page read and write
|
|
|
|
1E5F8E29000
|
unkown
|
page read and write
|
|
|
|
296B000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
A771000
|
unkown
|
page read and write
|
|
|
|
2731E0D0000
|
unkown
|
page read and write
|
|
|
|
7FF5A95A0000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF253000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
5418000
|
unkown
|
page read and write
|
|
|
|
16A3C000
|
unkown
|
page read and write
|
|
|
|
69C000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
61413FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E0732000
|
unkown
|
page readonly
|
|
|
|
7FF522B53000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2421D700000
|
heap private
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF522E5D000
|
unkown
|
page readonly
|
|
|
|
14F0BA90000
|
unkown
|
page read and write
|
|
|
|
7FF5E0094000
|
unkown
|
page readonly
|
|
|
|
168D6000
|
unkown
|
page readonly
|
|
|
|
556C000
|
unkown
|
page read and write
|
|
|
|
2B49000
|
unkown
|
page readonly
|
|
|
|
1E5F8C60000
|
heap private
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
933227B000
|
unkown
|
page read and write
|
|
|
|
7FF55CB9C000
|
unkown
|
page readonly
|
|
|
|
16F50000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1F5A8600000
|
unkown
|
page readonly
|
|
|
|
7FF5E061E000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
14F09C79000
|
unkown
|
page read and write
|
|
|
|
21338200000
|
unkown
|
page read and write
|
|
|
|
9331D79000
|
unkown
|
page read and write
|
|
|
|
21337D60000
|
unkown
|
page read and write
|
|
|
|
1F5A81E1000
|
unkown
|
page read and write
|
|
|
|
1F5A2B00000
|
heap private
|
page read and write
|
|
|
|
18F96A29000
|
unkown
|
page read and write
|
|
|
|
7FF579A17000
|
unkown
|
page readonly
|
|
|
|
7FF4F242F000
|
unkown
|
page readonly
|
|
|
|
155C000
|
unkown
|
page read and write
|
|
|
|
21337F00000
|
unkown
|
page read and write
|
|
|
|
7FF4EF58E000
|
unkown
|
page readonly
|
|
|
|
12A41580000
|
unkown
|
page readonly
|
|
|
|
614187F000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
14F0BA30000
|
heap private
|
page read and write
|
|
|
|
7FF4F296E000
|
unkown
|
page readonly
|
|
|
|
2C27000
|
unkown
|
page readonly
|
|
|
|
7FF59FF62000
|
unkown
|
page readonly
|
|
|
|
4CD9000
|
unkown image
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
21339410000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1F5A84C4000
|
unkown
|
page write copy
|
|
|
|
3290000
|
heap default
|
page read and write
|
|
|
|
7FF522D95000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
21335EE3000
|
unkown
|
page read and write
|
|
|
|
1F5A8218000
|
unkown
|
page read and write
|
|
|
|
6EE5DCE000
|
unkown
|
page read and write
|
|
|
|
21337D80000
|
unkown
|
page readonly
|
|
|
|
7FF5E0381000
|
unkown
|
page readonly
|
|
|
|
21339010000
|
unkown
|
page read and write
|
|
|
|
A96A000
|
unkown
|
page read and write
|
|
|
|
2731DFB0000
|
unkown
|
page readonly
|
|
|
|
54BD000
|
unkown
|
page read and write
|
|
|
|
7FF55C973000
|
unkown
|
page readonly
|
|
|
|
21337FFA000
|
unkown
|
page read and write
|
|
|
|
2985000
|
unkown
|
page readonly
|
|
|
|
12A41560000
|
unkown
|
page read and write
|
|
|
|
7FF4F276E000
|
unkown
|
page readonly
|
|
|
|
21338102000
|
unkown
|
page read and write
|
|
|
|
614197E000
|
unkown
|
page read and write
|
|
|
|
1F5A8241000
|
unkown
|
page read and write
|
|
|
|
7FF500467000
|
unkown
|
page readonly
|
|
|
|
7FF55CC60000
|
unkown
|
page readonly
|
|
|
|
1F5A2C59000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF50049D000
|
unkown
|
page readonly
|
|
|
|
7FF572D5D000
|
unkown
|
page readonly
|
|
|
|
16FD6272000
|
unkown
|
page read and write
|
|
|
|
14F09C63000
|
unkown
|
page read and write
|
|
|
|
1F5A824E000
|
unkown
|
page read and write
|
|
|
|
2940000
|
unkown
|
page readonly
|
|
|
|
28F1F800000
|
unkown
|
page readonly
|
|
|
|
A992000
|
unkown
|
page read and write
|
|
|
|
7FF4F28AD000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
5673000
|
unkown
|
page read and write
|
|
|
|
7FF4EF3B3000
|
unkown
|
page readonly
|
|
|
|
D12479000
|
unkown
|
page read and write
|
|
|
|
7FF5E0816000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1558000
|
heap default
|
page read and write
|
|
|
|
53B6000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF587D2F000
|
unkown
|
page readonly
|
|
|
|
1F5A2CA2000
|
unkown
|
page read and write
|
|
|
|
2950000
|
unkown
|
page readonly
|
|
|
|
7FF5A9D09000
|
unkown
|
page readonly
|
|
|
|
7FF572E68000
|
unkown
|
page readonly
|
|
|
|
1644DA02000
|
unkown
|
page read and write
|
|
|
|
DD7A97E000
|
unkown
|
page read and write
|
|
|
|
7FF55CC7B000
|
unkown
|
page readonly
|
|
|
|
7FF5E073C000
|
unkown
|
page readonly
|
|
|
|
3030000
|
unkown
|
page read and write
|
|
|
|
7FF572E57000
|
unkown
|
page readonly
|
|
|
|
7FF4F296B000
|
unkown
|
page readonly
|
|
|
|
7FF5004B3000
|
unkown
|
page readonly
|
|
|
|
2B85000
|
unkown
|
page readonly
|
|
|
|
7FF5229EF000
|
unkown
|
page readonly
|
|
|
|
1F5A84E0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
199AEC20000
|
unkown
|
page read and write
|
|
|
|
12A415BB000
|
heap default
|
page read and write
|
|
|
|
7FF4EF3F5000
|
unkown
|
page readonly
|
|
|
|
614167F000
|
unkown
|
page read and write
|
|
|
|
7FF572DEF000
|
unkown
|
page readonly
|
|
|
|
7FF579A85000
|
unkown
|
page readonly
|
|
|
|
7FF58808D000
|
unkown
|
page readonly
|
|
|
|
28F1F413000
|
unkown
|
page read and write
|
|
|
|
16A40000
|
unkown
|
page read and write
|
|
|
|
1B3B5FE0000
|
unkown
|
page read and write
|
|
|
|
155C000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
199ACC70000
|
heap private
|
page read and write
|
|
|
|
7FF5A9C4E000
|
unkown
|
page readonly
|
|
|
|
1F5A8404000
|
unkown
|
page read and write
|
|
|
|
7FF55CC8F000
|
unkown
|
page readonly
|
|
|
|
7FF565FE3000
|
unkown
|
page readonly
|
|
|
|
323E000
|
unkown
|
page read and write
|
|
|
|
141E000
|
unkown
|
page read and write
|
|
|
|
15FFFA6B000
|
unkown
|
page read and write
|
|
|
|
199ACE5A000
|
unkown
|
page read and write
|
|
|
|
5375000
|
unkown
|
page read and write
|
|
|
|
7FF522630000
|
unkown
|
page readonly
|
|
|
|
169C1000
|
unkown
|
page read and write
|
|
|
|
12A43070000
|
heap private
|
page read and write
|
|
|
|
14F0BA10000
|
unkown
|
page read and write
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
5461000
|
unkown
|
page read and write
|
|
|
|
14F09C88000
|
unkown
|
page read and write
|
|
|
|
16FD626F000
|
unkown
|
page read and write
|
|
|
|
7FF4F2830000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0287000
|
unkown
|
page readonly
|
|
|
|
21337F7D000
|
unkown
|
page read and write
|
|
|
|
21335F57000
|
unkown
|
page read and write
|
|
|
|
14AE000
|
unkown
|
page read and write
|
|
|
|
3280000
|
heap private
|
page read and write
|
|
|
|
21337D50000
|
unkown
|
page readonly
|
|
|
|
30A0000
|
heap default
|
page read and write
|
|
|
|
16FD626F000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
21335E62000
|
unkown
|
page read and write
|
|
|
|
7FF572E24000
|
unkown
|
page readonly
|
|
|
|
3B81DF9000
|
unkown
|
page read and write
|
|
|
|
7FF55CC56000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
12F5000
|
heap default
|
page read and write
|
|
|
|
28F1F600000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF579B0B000
|
unkown
|
page readonly
|
|
|
|
21337FB2000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
28F1F502000
|
unkown
|
page read and write
|
|
|
|
21335EBD000
|
unkown
|
page read and write
|
|
|
|
5663000
|
unkown
|
page read and write
|
|
|
|
7FF572E00000
|
unkown
|
page readonly
|
|
|
|
7FF565FCD000
|
unkown
|
page readonly
|
|
|
|
9A0000
|
unkown
|
page readonly
|
|
|
|
199ACDB0000
|
unkown
|
page write copy
|
|
|
|
1F5A3415000
|
unkown
|
page read and write
|
|
|
|
1F5A8020000
|
unkown
|
page read and write
|
|
|
|
21335DA0000
|
unkown
|
page write copy
|
|
|
|
7FF572E5C000
|
unkown
|
page readonly
|
|
|
|
7FF5798E3000
|
unkown
|
page readonly
|
|
|
|
933197E000
|
unkown
|
page read and write
|
|
|
|
7FF5E69CE000
|
unkown
|
page readonly
|
|
|
|
54B7000
|
unkown
|
page read and write
|
|
|
|
4BD2000
|
unkown image
|
page execute and read and write
|
|
|
|
199AD000000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
28F1F320000
|
heap default
|
page read and write
|
|
|
|
1700000
|
unkown
|
page readonly
|
|
|
|
710000
|
heap default
|
page read and write
|
|
|
|
14F0C010000
|
unkown
|
page read and write
|
|
|
|
15CFE000
|
unkown
|
page read and write
|
|
|
|
28F1F456000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
5660000
|
heap private
|
page read and write
|
|
|
|
30A0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
15C1E000
|
unkown
|
page read and write
|
|
|
|
3B81BFB000
|
unkown
|
page read and write
|
|
|
|
2731E670000
|
unkown
|
page write copy
|
|
|
|
7FF572F4F000
|
unkown
|
page readonly
|
|
|
|
F724FE000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1F5A8560000
|
unkown
|
page readonly
|
|
|
|
31D9000
|
unkown
|
page execute and read and write
|
|
|
|
9CE000
|
unkown
|
page read and write
|
|
|
|
7FF522D4C000
|
unkown
|
page readonly
|
|
|
|
7FF5A0350000
|
unkown
|
page readonly
|
|
|
|
28F1FE00000
|
unkown
|
page readonly
|
|
|
|
2DC1000
|
unkown
|
page execute read
|
|
|
|
1B3B605F000
|
unkown
|
page read and write
|
|
|
|
1B3B6060000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4EA000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
54B4000
|
unkown
|
page read and write
|
|
|
|
1B3B6029000
|
unkown
|
page read and write
|
|
|
|
167F0000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF587D42000
|
unkown
|
page readonly
|
|
|
|
7FF5A9CBC000
|
unkown
|
page readonly
|
|
|
|
199AD200000
|
unkown
|
page readonly
|
|
|
|
1B3B606A000
|
unkown
|
page read and write
|
|
|
|
7FF522B4C000
|
unkown
|
page readonly
|
|
|
|
155C000
|
unkown
|
page read and write
|
|
|
|
A38000
|
heap default
|
page read and write
|
|
|
|
7FF5225DF000
|
unkown
|
page readonly
|
|
|
|
933257A000
|
unkown
|
page read and write
|
|
|
|
2421D7C0000
|
unkown
|
page read and write
|
|
|
|
1F5A81E0000
|
unkown
|
page read and write
|
|
|
|
1F5A84BC000
|
unkown
|
page readonly
|
|
|
|
3B825FF000
|
unkown
|
page read and write
|
|
|
|
7FF565FA7000
|
unkown
|
page readonly
|
|
|
|
7FF5A9D9B000
|
unkown
|
page readonly
|
|
|
|
1F5A2B80000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
F723FF000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2731E0C8000
|
unkown
|
page read and write
|
|
|
|
7FF5A0290000
|
unkown
|
page readonly
|
|
|
|
1B3B5EE0000
|
heap default
|
page read and write
|
|
|
|
7FF5A9CB2000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF5E68D3000
|
unkown
|
page readonly
|
|
|
|
525E000
|
unkown
|
page read and write
|
|
|
|
55BF000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF59D21D000
|
unkown
|
page readonly
|
|
|
|
1B3B606C000
|
unkown
|
page read and write
|
|
|
|
14F0BAC0000
|
unkown
|
page readonly
|
|
|
|
2731E802000
|
unkown
|
page read and write
|
|
|
|
2731DFC0000
|
unkown
|
page readonly
|
|
|
|
156B000
|
unkown
|
page read and write
|
|
|
|
7FF565FD5000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCE4000
|
unkown
|
page readonly
|
|
|
|
21337D60000
|
unkown
|
page read and write
|
|
|
|
7FF572791000
|
unkown
|
page readonly
|
|
|
|
7FF58811F000
|
unkown
|
page readonly
|
|
|
|
7FF4F28B5000
|
unkown
|
page readonly
|
|
|
|
7FF572F1B000
|
unkown
|
page readonly
|
|
|
|
7FF572F34000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF522BB0000
|
unkown
|
page readonly
|
|
|
|
7FF4F267D000
|
unkown
|
page readonly
|
|
|
|
4D1A000
|
unkown
|
page read and write
|
|
|
|
1F5A80A0000
|
unkown
|
page read and write
|
|
|
|
AA25000
|
unkown
|
page read and write
|
|
|
|
7FF5A9D96000
|
unkown
|
page readonly
|
|
|
|
7FF522B81000
|
unkown
|
page readonly
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
3219000
|
unkown
|
page execute and read and write
|
|
|
|
DD7A35C000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
14F09CEB000
|
unkown
|
page read and write
|
|
|
|
7FF522991000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2731E08A000
|
unkown
|
page read and write
|
|
|
|
2421E200000
|
unkown
|
page read and write
|
|
|
|
70F63FF000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
28F1FC02000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown
|
page readonly
|
|
|
|
7FF522D53000
|
unkown
|
page readonly
|
|
|
|
21339410000
|
unkown
|
page read and write
|
|
|
|
15FFFA29000
|
unkown
|
page read and write
|
|
|
|
21335D90000
|
heap default
|
page read and write
|
|
|
|
2979000
|
unkown
|
page readonly
|
|
|
|
52E3000
|
unkown
|
page read and write
|
|
|
|
980000
|
heap private
|
page read and write
|
|
|
|
16FD6229000
|
unkown
|
page read and write
|
|
|
|
21339410000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF4EF58B000
|
unkown
|
page readonly
|
|
|
|
3B8227E000
|
unkown
|
page read and write
|
|
|
|
7FF566066000
|
unkown
|
page readonly
|
|
|
|
50E9000
|
heap private
|
page read and write
|
|
|
|
28F1F44B000
|
unkown
|
page read and write
|
|
|
|
7FF522C97000
|
unkown
|
page readonly
|
|
|
|
7FF5E653E000
|
unkown
|
page readonly
|
|
|
|
21338094000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF5224DA000
|
unkown
|
page readonly
|
|
|
|
7FF565DC5000
|
unkown
|
page readonly
|
|
|
|
4DA000
|
unkown
|
page read and write
|
|
|
|
1F5A81C0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
5560000
|
unkown
|
page read and write
|
|
|
|
16FD6110000
|
heap default
|
page read and write
|
|
|
|
53E8000
|
unkown
|
page read and write
|
|
|
|
54DA000
|
unkown
|
page read and write
|
|
|
|
7FF58806C000
|
unkown
|
page readonly
|
|
|
|
161BE000
|
unkown
|
page read and write
|
|
|
|
21335EDF000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
5291000
|
unkown
|
page read and write
|
|
|
|
1567000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4D5000
|
unkown
|
page readonly
|
|
|
|
7FF56574B000
|
unkown
|
page readonly
|
|
|
|
54AE000
|
unkown
|
page read and write
|
|
|
|
21337980000
|
unkown
|
page readonly
|
|
|
|
1F5A8520000
|
unkown
|
page read and write
|
|
|
|
167BC000
|
unkown
|
page read and write
|
|
|
|
21339210000
|
unkown
|
page read and write
|
|
|
|
15FFFB13000
|
unkown
|
page read and write
|
|
|
|
165AE000
|
unkown
|
page read and write
|
|
|
|
7FF566070000
|
unkown
|
page readonly
|
|
|
|
5B2E000
|
unkown
|
page read and write
|
|
|
|
54C1000
|
unkown
|
page read and write
|
|
|
|
15780000
|
unkown
|
page read and write
|
|
|
|
19592CC000
|
unkown
|
page read and write
|
|
|
|
4B6F000
|
unkown image
|
page execute read
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
3B81EFB000
|
unkown
|
page read and write
|
|
|
|
7FF5224D0000
|
unkown
|
page readonly
|
|
|
|
F721FF000
|
unkown
|
page read and write
|
|
|
|
1F5A82B4000
|
unkown
|
page read and write
|
|
|
|
1F5A8225000
|
unkown
|
page read and write
|
|
|
|
1F5A3502000
|
unkown
|
page read and write
|
|
|
|
7FF4F297D000
|
unkown
|
page readonly
|
|
|
|
1532000
|
heap default
|
page read and write
|
|
|
|
16FD6213000
|
unkown
|
page read and write
|
|
|
|
7FF4F2946000
|
unkown
|
page readonly
|
|
|
|
7FF4EF55F000
|
unkown
|
page readonly
|
|
|
|
7FF5A9DAD000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF4EF59F000
|
unkown
|
page readonly
|
|
|
|
295A000
|
unkown
|
page readonly
|
|
|
|
9331F7D000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF5795E3000
|
unkown
|
page readonly
|
|
|
|
7FF5A9DCF000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF55CB2F000
|
unkown
|
page readonly
|
|
|
|
7FF588070000
|
unkown
|
page readonly
|
|
|
|
1F5A8030000
|
unkown
|
page read and write
|
|
|
|
1F5A81F0000
|
unkown
|
page read and write
|
|
|
|
1E5F8E13000
|
unkown
|
page read and write
|
|
|
|
7FF522E26000
|
unkown
|
page readonly
|
|
|
|
21337F34000
|
unkown
|
page read and write
|
|
|
|
568E000
|
unkown
|
page read and write
|
|
|
|
7FF579B1F000
|
unkown
|
page readonly
|
|
|
|
7FF5A9DCB000
|
unkown
|
page readonly
|
|
|
|
4B66000
|
unkown image
|
page readonly
|
|
|
|
5AAE000
|
unkown
|
page read and write
|
|
|
|
5168000
|
heap private
|
page read and write
|
|
|
|
1F5A3BE0000
|
unkown
|
page read and write
|
|
|
|
1F5A8310000
|
unkown
|
page read and write
|
|
|
|
16A3D000
|
unkown
|
page read and write
|
|
|
|
7FF5A9B62000
|
unkown
|
page readonly
|
|
|
|
2936000
|
unkown
|
page readonly
|
|
|
|
1F5A2C41000
|
unkown
|
page read and write
|
|
|
|
1F5A81C0000
|
unkown
|
page read and write
|
|
|
|
4D6000
|
unkown
|
page read and write
|
|
|
|
16FD626E000
|
unkown
|
page read and write
|
|
|
|
1E5F8F00000
|
unkown
|
page read and write
|
|
|
|
199ACE13000
|
unkown
|
page read and write
|
|
|
|
7FF579933000
|
unkown
|
page readonly
|
|
|
|
7FF59FF6A000
|
unkown
|
page readonly
|
|
|
|
1B3B6069000
|
unkown
|
page read and write
|
|
|
|
21337FA6000
|
unkown
|
page read and write
|
|
|
|
7FF5225DD000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1644DA69000
|
unkown
|
page read and write
|
|
|
|
7FF522E5F000
|
unkown
|
page readonly
|
|
|
|
A758000
|
unkown
|
page read and write
|
|
|
|
2A01000
|
unkown
|
page readonly
|
|
|
|
720000
|
unkown
|
page readonly
|
|
|
|
1644DA5A000
|
unkown
|
page read and write
|
|
|
|
9E0000
|
unkown
|
page read and write
|
|
|
|
54D4000
|
unkown
|
page read and write
|
|
|
|
7FF5E68D5000
|
unkown
|
page readonly
|
|
|
|
970000
|
unkown
|
page readonly
|
|
|
|
18F96C50000
|
unkown
|
page readonly
|
|
|
|
6EE657F000
|
unkown
|
page read and write
|
|
|
|
2ACB77D000
|
unkown
|
page read and write
|
|
|
|
15FFFED0000
|
unkown
|
page readonly
|
|
|
|
7FF522D0D000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
16FD6272000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
28F1FA80000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
heap private
|
page read and write
|
|
|
|
12A41470000
|
unkown
|
page readonly
|
|
|
|
7FF5E69BD000
|
unkown
|
page readonly
|
|
|
|
5303000
|
unkown
|
page read and write
|
|
|
|
4B94000
|
unkown image
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
B3003FF000
|
unkown
|
page read and write
|
|
|
|
8D0000
|
unkown
|
page readonly
|
|
|
|
7FF522E2B000
|
unkown
|
page readonly
|
|
|
|
21335DF0000
|
unkown
|
page readonly
|
|
|
|
614177A000
|
unkown
|
page read and write
|
|
|
|
2A0C000
|
unkown
|
page readonly
|
|
|
|
7FF572E3C000
|
unkown
|
page readonly
|
|
|
|
7FF5A9CDC000
|
unkown
|
page readonly
|
|
|
|
16FD626C000
|
unkown
|
page read and write
|
|
|
|
545C000
|
unkown
|
page read and write
|
|
|
|
14F0BC02000
|
unkown
|
page read and write
|
|
|
|
B37FB7C000
|
unkown
|
page read and write
|
|
|
|
7FF572A35000
|
unkown
|
page readonly
|
|
|
|
53F8000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF522A03000
|
unkown
|
page readonly
|
|
|
|
2921000
|
unkown
|
page readonly
|
|
|
|
21335E80000
|
unkown
|
page read and write
|
|
|
|
7FF4EF59F000
|
unkown
|
page readonly
|
|
|
|
7FF565F74000
|
unkown
|
page readonly
|
|
|
|
14F0BA90000
|
unkown
|
page read and write
|
|
|
|
18F968F0000
|
heap default
|
page read and write
|
|
|
|
1F5A3559000
|
unkown
|
page read and write
|
|
|
|
7FF588118000
|
unkown
|
page readonly
|
|
|
|
16FD6202000
|
unkown
|
page read and write
|
|
|
|
14F0BD45000
|
unkown
|
page read and write
|
|
|
|
2421D813000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
16A39000
|
unkown
|
page read and write
|
|
|
|
F71C7F000
|
unkown
|
page read and write
|
|
|
|
7FF5A00A5000
|
unkown
|
page readonly
|
|
|
|
2731E102000
|
unkown
|
page read and write
|
|
|
|
7FF5E69A6000
|
unkown
|
page readonly
|
|
|
|
7FF587E5D000
|
unkown
|
page readonly
|
|
|
|
7FF4F2520000
|
unkown
|
page readonly
|
|
|
|
7FF5A9AD7000
|
unkown
|
page readonly
|
|
|
|
7FF572E9A000
|
unkown
|
page readonly
|
|
|
|
2421D7C0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF522E4B000
|
unkown
|
page readonly
|
|
|
|
1F5A3500000
|
unkown
|
page read and write
|
|
|
|
1E5F8E00000
|
unkown
|
page read and write
|
|
|
|
7FF572E89000
|
unkown
|
page readonly
|
|
|
|
933237D000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF55CBC5000
|
unkown
|
page readonly
|
|
|
|
7FF522B83000
|
unkown
|
page readonly
|
|
|
|
1644DA00000
|
unkown
|
page read and write
|
|
|
|
7FF5A037F000
|
unkown
|
page readonly
|
|
|
|
16F0000
|
heap private
|
page read and write
|
|
|
|
21335E5A000
|
unkown
|
page read and write
|
|
|
|
7FF572E47000
|
unkown
|
page readonly
|
|
|
|
1567000
|
unkown
|
page read and write
|
|
|
|
F71EFF000
|
unkown
|
page read and write
|
|
|
|
7FF4EF497000
|
unkown
|
page readonly
|
|
|
|
1F5A8070000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1644E200000
|
unkown
|
page readonly
|
|
|
|
16A13000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
1663D000
|
unkown
|
page read and write
|
|
|
|
2421D829000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
21335F46000
|
unkown
|
page read and write
|
|
|
|
3B81977000
|
unkown
|
page read and write
|
|
|
|
15FFFA13000
|
unkown
|
page read and write
|
|
|
|
AA6A000
|
unkown
|
page read and write
|
|
|
|
26F0000
|
heap private
|
page read and write
|
|
|
|
B37FFFC000
|
unkown
|
page read and write
|
|
|
|
155C000
|
unkown
|
page read and write
|
|
|
|
7FF59D2CD000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF5A9B96000
|
unkown
|
page readonly
|
|
|
|
7FF522B1F000
|
unkown
|
page readonly
|
|
|
|
2903000
|
unkown
|
page readonly
|
|
|
|
93315CB000
|
unkown
|
page read and write
|
|
|
|
9331FFB000
|
unkown
|
page read and write
|
|
|
|
7FF5E67F6000
|
unkown
|
page readonly
|
|
|
|
21337F8C000
|
unkown
|
page read and write
|
|
|
|
7FF4F28CA000
|
unkown
|
page readonly
|
|
|
|
21339210000
|
unkown
|
page read and write
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
7FF500540000
|
unkown
|
page readonly
|
|
|
|
7FF50053B000
|
unkown
|
page readonly
|
|
|
|
14F0B5B0000
|
unkown
|
page read and write
|
|
|
|
16F7000
|
heap private
|
page read and write
|
|
|
|
1F5A2ED0000
|
unkown
|
page readonly
|
|
|
|
1F5A8232000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF55CC8B000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
4B65000
|
unkown image
|
page read and write
|
|
|
|
2ACB67A000
|
unkown
|
page read and write
|
|
|
|
7FF5A0254000
|
unkown
|
page readonly
|
|
|
|
2ACB57B000
|
unkown
|
page read and write
|
|
|
|
7FF59C94C000
|
unkown
|
page readonly
|
|
|
|
7FF572F3E000
|
unkown
|
page readonly
|
|
|
|
5200000
|
unkown
|
page read and write
|
|
|
|
5AEF000
|
unkown
|
page read and write
|
|
|
|
7FF579A38000
|
unkown
|
page readonly
|
|
|
|
6EE5CCB000
|
unkown
|
page read and write
|
|
|
|
B3001FE000
|
unkown
|
page read and write
|
|
|
|
7FF56609F000
|
unkown
|
page readonly
|
|
|
|
3B81AFB000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1F5A3701000
|
unkown
|
page read and write
|
|
|
|
7FF5A033F000
|
unkown
|
page readonly
|
|
|
|
7FF5E68B4000
|
unkown
|
page readonly
|
|
|
|
5281000
|
unkown
|
page read and write
|
|
|
|
55D000
|
unkown
|
page read and write
|
|
|
|
16FD61F0000
|
unkown
|
page readonly
|
|
|
|
8BE000
|
unkown
|
page read and write
|
|
|
|
7FF5E0785000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
8473E7F000
|
unkown
|
page read and write
|
|
|
|
7FF522B5D000
|
unkown
|
page readonly
|
|
|
|
7FF59D2EF000
|
unkown
|
page readonly
|
|
|
|
28F1F43C000
|
unkown
|
page read and write
|
|
|
|
7FF4F281F000
|
unkown
|
page readonly
|
|
|
|
C6E677B000
|
unkown
|
page read and write
|
|
|
|
1F5A2D02000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF55CBF3000
|
unkown
|
page readonly
|
|
|
|
14F0BA80000
|
unkown
|
page readonly
|
|
|
|
199ACE02000
|
unkown
|
page read and write
|
|
|
|
1F5A8640000
|
unkown
|
page readonly
|
|
|
|
7FF5A02CA000
|
unkown
|
page readonly
|
|
|
|
1644D9E0000
|
unkown
|
page read and write
|
|
|
|
1B3B6057000
|
unkown
|
page read and write
|
|
|
|
1F5A8490000
|
unkown
|
page write copy
|
|
|
|
1B3B6048000
|
unkown
|
page read and write
|
|
|
|
2421D790000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF522D6C000
|
unkown
|
page readonly
|
|
|
|
1E5F8E57000
|
unkown
|
page read and write
|
|
|
|
298D000
|
unkown
|
page readonly
|
|
|
|
7FF572C4D000
|
unkown
|
page readonly
|
|
|
|
1567000
|
unkown
|
page read and write
|
|
|
|
7FF5E68CC000
|
unkown
|
page readonly
|
|
|
|
15913000
|
unkown
|
page read and write
|
|
|
|
7FF5A9CA4000
|
unkown
|
page readonly
|
|
|
|
15F0000
|
unkown
|
page read and write
|
|
|
|
7FF5E06ED000
|
unkown
|
page readonly
|
|
|
|
7FF5A0346000
|
unkown
|
page readonly
|
|
|
|
28BE000
|
unkown
|
page readonly
|
|
|
|
933217A000
|
unkown
|
page read and write
|
|
|
|
7FF50030D000
|
unkown
|
page readonly
|
|
|
|
D1257F000
|
unkown
|
page read and write
|
|
|
|
7FF55CC48000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
93318FB000
|
unkown
|
page read and write
|
|
|
|
2C0B000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
83A27B000
|
unkown
|
page read and write
|
|
|
|
9331B7A000
|
unkown
|
page read and write
|
|
|
|
21339610000
|
unkown
|
page read and write
|
|
|
|
15FFF9D0000
|
unkown
|
page readonly
|
|
|
|
7FF50052F000
|
unkown
|
page readonly
|
|
|
|
7FF522D38000
|
unkown
|
page readonly
|
|
|
|
5323000
|
unkown
|
page read and write
|
|
|
|
7FF4F278D000
|
unkown
|
page readonly
|
|
|
|
12CE000
|
unkown
|
page read and write
|
|
|
|
1F5A2D13000
|
unkown
|
page read and write
|
|
|
|
291D000
|
unkown
|
page readonly
|
|
|
|
1F5A8286000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF4F271D000
|
unkown
|
page readonly
|
|
|
|
9331A7F000
|
unkown
|
page read and write
|
|
|
|
21337E02000
|
unkown
|
page read and write
|
|
|
|
8473CFE000
|
unkown
|
page read and write
|
|
|
|
7FF522C13000
|
unkown
|
page readonly
|
|
|
|
155C000
|
unkown
|
page read and write
|
|
|
|
1644DC00000
|
unkown
|
page readonly
|
|
|
|
54E7000
|
unkown
|
page read and write
|
|
|
|
21335F36000
|
unkown
|
page read and write
|
|
|
|
7FF5E6915000
|
unkown
|
page readonly
|
|
|
|
7FF59D255000
|
unkown
|
page readonly
|
|
|
|
7FF59FA2B000
|
unkown
|
page readonly
|
|
|
|
7FF4F26A3000
|
unkown
|
page readonly
|
|
|
|
7FF5E66B8000
|
unkown
|
page readonly
|
|
|
|
7FF5A022D000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
DD7AB7E000
|
unkown
|
page read and write
|
|
|
|
A750000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1F5A82B9000
|
unkown
|
page read and write
|
|
|
|
2D90000
|
unkown
|
page readonly
|
|
|
|
93321FA000
|
unkown
|
page read and write
|
|
|
|
28C1000
|
unkown
|
page readonly
|
|
|
|
7FF4EF147000
|
unkown
|
page readonly
|
|
|
|
7FF5A02B9000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
1B3B607D000
|
unkown
|
page read and write
|
|
|
|
16FD6120000
|
unkown
|
page readonly
|
|
|
|
C6E63FC000
|
unkown
|
page read and write
|
|
|
|
7FF565C8A000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
16881000
|
unkown
|
page readonly
|
|
|
|
28F20140000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
157BC000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
2832000
|
unkown
|
page readonly
|
|
|
|
1644E002000
|
unkown
|
page read and write
|
|
|
|
12A41410000
|
unkown
|
page readonly
|
|
|
|
1E5F8CC0000
|
heap default
|
page read and write
|
|
|
|
7FF522CD4000
|
unkown
|
page readonly
|
|
|
|
15FFFA00000
|
unkown
|
page read and write
|
|
|
|
19596FC000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
547D000
|
unkown
|
page read and write
|
|
|
|
1B3B5E80000
|
heap private
|
page read and write
|
|
|
|
28F1F44E000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
16FD626F000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
54FE000
|
unkown
|
page read and write
|
|
|
|
2B89000
|
unkown
|
page readonly
|
|
|
|
1B3B6044000
|
unkown
|
page read and write
|
|
|
|
7FF572B3A000
|
unkown
|
page readonly
|
|
|
|
21335E42000
|
unkown
|
page read and write
|
|
|
|
2ACB47F000
|
unkown
|
page read and write
|
|
|
|
52F3000
|
unkown
|
page read and write
|
|
|
|
7FF5A9DCF000
|
unkown
|
page readonly
|
|
|
|
7FF4F26F7000
|
unkown
|
page readonly
|
|
|
|
14F0BA90000
|
unkown
|
page read and write
|
|
|
|
6EE6377000
|
unkown
|
page read and write
|
|
|
|
7FF572CED000
|
unkown
|
page readonly
|
|
|
|
21339110000
|
unkown
|
page read and write
|
|
|
|
28F1F48E000
|
unkown
|
page read and write
|
|
|
|
1F5A8570000
|
unkown
|
page readonly
|
|
|
|
14D0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF4E3000
|
unkown
|
page readonly
|
|
|
|
7FF5E0757000
|
unkown
|
page readonly
|
|
|
|
1F5A2C7B000
|
unkown
|
page read and write
|
|
|
|
1F5A8289000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF55CC6D000
|
unkown
|
page readonly
|
|
|
|
7FF59D2ED000
|
unkown
|
page readonly
|
|
|
|
7FF4F2950000
|
unkown
|
page readonly
|
|
|
|
7FF579A59000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
18F96B13000
|
unkown
|
page read and write
|
|
|
|
7FF5A018D000
|
unkown
|
page readonly
|
|
|
|
7FF58814E000
|
unkown
|
page readonly
|
|
|
|
7FF5A035D000
|
unkown
|
page readonly
|
|
|
|
21335F34000
|
unkown
|
page read and write
|
|
|
|
169A1000
|
unkown
|
page read and write
|
|
|
|
21337F63000
|
unkown
|
page read and write
|
|
|
|
54A2000
|
unkown
|
page read and write
|
|
|
|
1B3B6045000
|
unkown
|
page read and write
|
|
|
|
7FF4F254F000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
199ACCD0000
|
heap default
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
299D000
|
unkown
|
page readonly
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
1E5F8E52000
|
unkown
|
page read and write
|
|
|
|
7FF588067000
|
unkown
|
page readonly
|
|
|
|
21335F77000
|
unkown
|
page read and write
|
|
|
|
7FF5A9CE8000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
16FD6302000
|
unkown
|
page read and write
|
|
|
|
7FF4F2898000
|
unkown
|
page readonly
|
|
|
|
7FF5E04DA000
|
unkown
|
page readonly
|
|
|
|
1676C000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
16FD7D00000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A9CC7000
|
unkown
|
page readonly
|
|
|
|
7FF572D3E000
|
unkown
|
page readonly
|
|
|
|
7FF565F50000
|
unkown
|
page readonly
|
|
|
|
A9E4000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
169E8000
|
unkown
|
page read and write
|
|
|
|
C6E69F7000
|
unkown
|
page read and write
|
|
|
|
7FF5E0808000
|
unkown
|
page readonly
|
|
|
|
1E5F8E4C000
|
unkown
|
page read and write
|
|
|
|
28F1FA70000
|
unkown
|
page readonly
|
|
|
|
A7E9000
|
unkown
|
page read and write
|
|
|
|
7FF522D78000
|
unkown
|
page readonly
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
18F969D0000
|
unkown
|
page readonly
|
|
|
|
7FF588126000
|
unkown
|
page readonly
|
|
|
|
16A13000
|
unkown
|
page read and write
|
|
|
|
21339610000
|
unkown
|
page read and write
|
|
|
|
C6E667E000
|
unkown
|
page read and write
|
|
|
|
7FF5A9DCD000
|
unkown
|
page readonly
|
|
|
|
A778000
|
unkown
|
page read and write
|
|
|
|
C6E66FE000
|
unkown
|
page read and write
|
|
|
|
1F5A8320000
|
unkown
|
page read and write
|
|
|
|
7FF5E68EC000
|
unkown
|
page readonly
|
|
|
|
158E9000
|
unkown
|
page read and write
|
|
|
|
7FF588130000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A02AD000
|
unkown
|
page readonly
|
|
|
|
7FF5A0087000
|
unkown
|
page readonly
|
|
|
|
3170000
|
heap private
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5E68C2000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF565EAD000
|
unkown
|
page readonly
|
|
|
|
21337CF0000
|
unkown
|
page readonly
|
|
|
|
145D000
|
unkown
|
page read and write
|
|
|
|
7FF5E68F8000
|
unkown
|
page readonly
|
|
|
|
2EFE000
|
unkown
|
page read and write
|
|
|
|
7FF522E4E000
|
unkown
|
page readonly
|
|
|
|
6EE5D4E000
|
unkown
|
page read and write
|
|
|
|
8473C7E000
|
unkown
|
page read and write
|
|
|
|
1E5F8E71000
|
unkown
|
page read and write
|
|
|
|
21337F7C000
|
unkown
|
page read and write
|
|
|
|
7FF5004BA000
|
unkown
|
page readonly
|
|
|
|
7FF55CB87000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
5267000
|
unkown
|
page read and write
|
|
|
|
7FF55CC4F000
|
unkown
|
page readonly
|
|
|
|
1656F000
|
unkown
|
page read and write
|
|
|
|
7FF4F2465000
|
unkown
|
page readonly
|
|
|
|
21335F29000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
70F5EAB000
|
unkown
|
page read and write
|
|
|
|
70F64FE000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
2421D800000
|
unkown
|
page read and write
|
|
|
|
6EE627E000
|
unkown
|
page read and write
|
|
|
|
66D000
|
unkown
|
page read and write
|
|
|
|
2731E013000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
16A13000
|
unkown
|
page read and write
|
|
|
|
7FF522C18000
|
unkown
|
page readonly
|
|
|
|
7FF579B0E000
|
unkown
|
page readonly
|
|
|
|
1B3B6200000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
9331CFB000
|
unkown
|
page read and write
|
|
|
|
21338400000
|
unkown
|
page readonly
|
|
|
|
12A41540000
|
unkown
|
page read and write
|
|
|
|
C2F000
|
unkown
|
page read and write
|
|
|
|
21335E6F000
|
unkown
|
page read and write
|
|
|
|
1F5A3513000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1E5F8DB0000
|
unkown
|
page readonly
|
|
|
|
297C000
|
unkown
|
page readonly
|
|
|
|
7FF56608B000
|
unkown
|
page readonly
|
|
|
|
1F5A3260000
|
unkown
|
page readonly
|
|
|
|
1F5A2CB2000
|
unkown
|
page read and write
|
|
|
|
7FF5A036B000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF4F2854000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
9331C7B000
|
unkown
|
page read and write
|
|
|
|
61418FD000
|
unkown
|
page read and write
|
|
|
|
1F5A3400000
|
unkown
|
page read and write
|
|
|
|
93319FA000
|
unkown
|
page read and write
|
|
|
|
D123FE000
|
unkown
|
page read and write
|
|
|
|
5468000
|
unkown
|
page read and write
|
|
|
|
168E3000
|
unkown
|
page readonly
|
|
|
|
14F0000
|
heap default
|
page read and write
|
|
|
|
7FF5E07B5000
|
unkown
|
page readonly
|
|
|
|
4B6E000
|
unkown image
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2731E660000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
28F1F42C000
|
unkown
|
page read and write
|
|
|
|
199ACE40000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF59D2AF000
|
unkown
|
page readonly
|
|
|
|
7FF579A2C000
|
unkown
|
page readonly
|
|
|
|
FDC000
|
unkown
|
page read and write
|
|
|
|
7FF55CBD3000
|
unkown
|
page readonly
|
|
|
|
7FF522DAA000
|
unkown
|
page readonly
|
|
|
|
3B820FF000
|
unkown
|
page read and write
|
|
|
|
93327FC000
|
unkown
|
page read and write
|
|
|
|
7FF59D225000
|
unkown
|
page readonly
|
|
|
|
2C15000
|
unkown
|
page readonly
|
|
|
|
7FF59FF5D000
|
unkown
|
page readonly
|
|
|
|
D1237F000
|
unkown
|
page read and write
|
|
|
|
21337F71000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
7FF5A02B5000
|
unkown
|
page readonly
|
|
|
|
21337880000
|
unkown
|
page read and write
|
|
|
|
61416FA000
|
unkown
|
page read and write
|
|
|
|
53C8000
|
unkown
|
page read and write
|
|
|
|
2731E029000
|
unkown
|
page read and write
|
|
|
|
1F5A2C13000
|
unkown
|
page read and write
|
|
|
|
2421D840000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
16FD626A000
|
unkown
|
page read and write
|
|
|
|
168DF000
|
unkown
|
page readonly
|
|
|
|
5470000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
1F5A33B0000
|
unkown
|
page readonly
|
|
|
|
21335E13000
|
unkown
|
page read and write
|
|
|
|
2421D902000
|
unkown
|
page read and write
|
|
|
|
7FF588078000
|
unkown
|
page readonly
|
|
|
|
1F5A8580000
|
unkown
|
page readonly
|
|
|
|
2971000
|
unkown
|
page readonly
|
|
|
|
12A41B76000
|
unkown
|
page readonly
|
|
|
|
7FF587E67000
|
unkown
|
page readonly
|
|
|
|
155C000
|
unkown
|
page read and write
|
|
|
|
7FF572E93000
|
unkown
|
page readonly
|
|
|
|
7FF565C82000
|
unkown
|
page readonly
|
|
|
|
7FF58812B000
|
unkown
|
page readonly
|
|
|
|
15FFFB02000
|
unkown
|
page read and write
|
|
|
|
7FF572E43000
|
unkown
|
page readonly
|
|
|
|
5473000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF58815F000
|
unkown
|
page readonly
|
|
|
|
7FF522E2E000
|
unkown
|
page readonly
|
|
|
|
7FF572C71000
|
unkown
|
page readonly
|
|
|
|
18F96C00000
|
unkown
|
page write copy
|
|
|
|
65D000
|
unkown
|
page read and write
|
|
|
|
1542000
|
heap default
|
page read and write
|
|
|
|
14B0000
|
unkown
|
page readonly
|
|
|
|
21335F13000
|
unkown
|
page read and write
|
|
|
|
7FF5A9ACD000
|
unkown
|
page readonly
|
|
|
|
5256000
|
unkown
|
page read and write
|
|
|
|
21337F58000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
21338282000
|
unkown
|
page read and write
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
54C3000
|
unkown
|
page read and write
|
|
|
|
7FF572F4F000
|
unkown
|
page readonly
|
|
|
|
520C000
|
unkown
|
page read and write
|
|
|
|
7FF59D1F7000
|
unkown
|
page readonly
|
|
|
|
553F000
|
unkown
|
page read and write
|
|
|
|
7FF5A9CC3000
|
unkown
|
page readonly
|
|
|
|
1B3B6061000
|
unkown
|
page read and write
|
|
|
|
7FF56608E000
|
unkown
|
page readonly
|
|
|
|
1B3B6058000
|
unkown
|
page read and write
|
|
|
|
7FF522D20000
|
unkown
|
page readonly
|
|
|
|
7FF572B2D000
|
unkown
|
page readonly
|
|
|
|
7FF5E084D000
|
unkown
|
page readonly
|
|
|
|
7FF4F293F000
|
unkown
|
page readonly
|
|
|
|
7FF58814B000
|
unkown
|
page readonly
|
|
|
|
1F5A33F0000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
7FF572EB3000
|
unkown
|
page readonly
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
2731DE70000
|
heap private
|
page read and write
|
|
|
|
5494000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A9D88000
|
unkown
|
page readonly
|
|
|
|
2916000
|
unkown
|
page readonly
|
|
|
|
2ACB5FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A9CFD000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
16A37000
|
unkown
|
page read and write
|
|
|
|
7FF565FB8000
|
unkown
|
page readonly
|
|
|
|
7FF587D4A000
|
unkown
|
page readonly
|
|
|
|
7FF572C73000
|
unkown
|
page readonly
|
|
|
|
1568000
|
unkown
|
page read and write
|
|
|
|
1F5A8520000
|
unkown
|
page read and write
|
|
|
|
1B3B6000000
|
unkown
|
page read and write
|
|
|
|
18F96A13000
|
unkown
|
page read and write
|
|
|
|
7FF4EF33D000
|
unkown
|
page readonly
|
|
|
|
199ACF02000
|
unkown
|
page read and write
|
|
|
|
1F5A81E4000
|
unkown
|
page read and write
|
|
|
|
28F1F429000
|
unkown
|
page read and write
|
|
|
|
7FF572F4B000
|
unkown
|
page readonly
|
|
|
|
21337FE7000
|
unkown
|
page read and write
|
|
|
|
1E5F8F02000
|
unkown
|
page read and write
|
|
|
|
155E000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
21338063000
|
unkown
|
page read and write
|
|
|
|
21335D30000
|
heap private
|
page read and write
|
|
|
|
7FF565F57000
|
unkown
|
page readonly
|
|
|
|
169A0000
|
unkown
|
page read and write
|
|
|
|
1F5A3518000
|
unkown
|
page read and write
|
|
|
|
7FF522DA3000
|
unkown
|
page readonly
|
|
There are 1957 hidden memdumps, click here to show them.