Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
racial.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\www.msn[2].xml
|
ASCII text, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\QALADACS\contextual.media[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2E23CC91-C4E5-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{2E23CC93-C4E5-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{393C2722-C4E5-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\2d-0e97d4-185735b[1].css
|
UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\55a804ab-e5c6-4b97-9319-86263d365d28[1].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKDiAr[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKE5Vf[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFBJq[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFMJ4[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFR67[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFRHX[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFSYx[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFTyM[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFV9l[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFXdN[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFkc2[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFlfu[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKFpl8[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKG0VJ[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAKp8YX[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BB14EN7h[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BB15AQNm[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BB1ardZ3[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BB1cEP3G[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BB1ftEY0[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BB7hg4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BBPfCZL[1].png
|
GIF image data, version 89a, 50 x 50
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BBVuddh[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BBY7ARN[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BBlBV0U[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\52-478955-68ddb2ab[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKDho5[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKEBOL[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKFH7n[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKFIMX[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKFP6N[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKFQj8[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKFTm9[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKFYw0[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKFmGU[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKG7IT[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAm2UN1[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\BB10MkbM[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\BB14hq0P[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\BB1dCSOZ[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\a5ea21[1].ico
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\adb3478e-c94c-4cdb-9882-fa384ccec861[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\cfdbd9[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\de-ch[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\iab2Data[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jquery-2.1.1.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\location[1].js
|
ASCII text, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AA3e6zI[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AA6SFRQ[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAKFHlM[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAKFJtV[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAKFMgy[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAKFPFy[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAKFQyR[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAKFUAE[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAKFl7X[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAKGa5C[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAuTnto[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\BB14Ue5t[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\BB1aXITZ[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\BB1cG73h[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\BB1kvzy[1].png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\BBJrII1[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\a8a064[1].gif
|
GIF image data, version 89a, 28 x 28
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\auction[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\e151e5[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\http___cdn.taboola.com_libtrc_static_thumbnails_566beadde66192716c0b46800525eaec[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\http___cdn.taboola.com_libtrc_static_thumbnails_8fc99439150f903c02347a26453474e6[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\http___cdn.taboola.com_libtrc_static_thumbnails_bb08781aa271862226e3d45146478e49[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\http___cdn.taboola.com_libtrc_static_thumbnails_ca18ae4dd84cc30cab15deedea56e97c[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\otTCF-ie[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\17-361657-68ddb2ab[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\264bf325-c7e4-4939-8912-2424a7abe532[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\4996b9[1].woff
|
Web Open Font Format, TrueType, length 45633, version 1.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAKF3dk[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAKFH4C[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAKFJtT[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAKFRFo[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAKFRex[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAKFVDv[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAKG0Vp[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAKwTqp[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BB1gqGZR[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BB6Ma4a[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BB7gRE[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BBX2afX[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BBnYSFZ[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\de-ch[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\http___cdn.taboola.com_libtrc_static_thumbnails_13d9e22d233a8b5bed9efa499c3cc1fc[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\http___cdn.taboola.com_libtrc_static_thumbnails_dbb7356dfe1dd7497a916e39184f8a6d[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\medianet[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\medianet[2].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\nrrV56260[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\otBannerSdk[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\otFlat[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\otPcCenter[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\otSDKStub[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF7B54F15D70B46580.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFC29536E5399398B6.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFEA03D070EFE2E83F.TMP
|
data
|
dropped
|
|
There are 112 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\racial.dll'
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32.exe /s C:\Users\user\Desktop\racial.dll
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\racial.dll',#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\racial.dll,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\racial.dll',#1
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
C:\Program Files\Internet Explorer\iexplore.exe
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5932 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
|
unknown
|
|
|
|
https://tools.applemediaservices.com/api/badges/download-on-the-app-store/black/de-de?"
|
unknown
|
|
|
|
https://www.skype.com/de/download-skype
|
unknown
|
|
|
|
http://searchads.msn.net/.cfm?&&kp=1&
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/coronareisen
|
unknown
|
|
|
|
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
|
|
|
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
|
unknown
|
|
|
|
https://onedrive.live.com;OneDrive-App
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_promotionalstripe_na
|
unknown
|
|
|
|
https://onedrive.live.com;Fotos
|
unknown
|
|
|
|
https://www.msn.com/de-ch/sport?ocid=StripeOCID
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=295926&a=3064090&g=24886692
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/26-j%c3%a4hriger-mann-stirbt-nach-sturz-auf-vorpla
|
unknown
|
|
|
|
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/eye-tracking-bei-online-pr%c3%bcfungen-keiner-%c3%
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
|
unknown
|
|
|
|
http://ogp.me/ns/fb#
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-ss&ued=htt
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/googleData.json
|
unknown
|
|
|
|
https://outlook.com/
|
unknown
|
|
|
|
https://outlook.live.com/mail/deeplink/compose;Kalender
|
unknown
|
|
|
|
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
|
unknown
|
|
|
|
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
|
unknown
|
|
|
|
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
|
|
|
https://www.stroeer.com/fileadmin/com/StroeerDSP_deviceStorage.json
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iabData.json
|
unknown
|
|
|
|
https://www.msn.com/de-ch/homepage/api/pdp/updatepdpdata"
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iab2Data.json
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;Aktuelle
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://www.skype.com/
|
unknown
|
|
|
|
https://www.ebay.ch/?mkcid=1&mkrid=5222-53480-19255-0&siteid=193&campid=5338626668&t
|
unknown
|
|
|
|
https://www.msn.com/de-ch/homepage/api/modules/fetch"
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
|
unknown
|
|
|
|
https://mem.gfx.ms/meversion/?partner=msn&market=de-ch"
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/regional
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://web.vortex.data.msn.com/collect/v1/t.gif?name=%27Ms.Webi.PageView%27&ver=%272.1%27&a
|
unknown
|
|
|
|
https://www.stroeer.de/konvergenz-konzepte/daten-technologien/stroeer-ssp/datenschutz-ssp.html
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/trotz-breiter-protestwelle-sollen-die-maag-hallen-
|
unknown
|
|
|
|
https://www.bidstack.com/privacy-policy/
|
unknown
|
|
|
|
https://onedrive.live.com/about/en/download/
|
unknown
|
|
|
|
http://popup.taboola.com/german
|
unknown
|
|
|
|
https://amzn.to/2TTxhNg
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/junger-mann-stirbt-nach-sturz-von-einer-mauer-bei-der-eth/ar-AA
|
unknown
|
|
|
|
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
|
unknown
|
|
|
|
https://client-s.gateway.messenger.live.com
|
unknown
|
|
|
|
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_mestripe_logo_d
|
unknown
|
|
|
|
https://www.msn.com/de-ch/
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/gr%c3%bcne-fordern-regierung-soll-zeitungen-f%c3%b6rdern/ar-AAK
|
unknown
|
|
|
|
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-edge-dhp-river
|
unknown
|
|
|
|
https://twitter.com/
|
unknown
|
|
|
|
https://www.msn.com/de-ch
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=245744&a=3064090&g=24903118&epi=ch-de
|
unknown
|
|
|
|
https://twitter.com/i/notifications;Ich
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=11518&awinaffid=696593&clickref=dech-edge-dhp-infopa
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/walt-disney-sprach-ihn-an-und-pl%c3%b6tzlich-stand-sein-leben-k
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
|
unknown
|
|
|
|
https://outlook.live.com/calendar
|
unknown
|
|
|
|
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:au
|
unknown
|
|
|
|
https://onedrive.live.com/#qt=mru
|
unknown
|
|
|
|
https://api.taboola.com/2.0/json/msn-ch-de-home/recommendations.notify-click?app.type=desktop&ap
|
unknown
|
|
|
|
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
|
unknown
|
|
|
|
https://www.msn.com?form=MY01O4&OCID=MY01O4
|
unknown
|
|
|
|
https://support.skype.com
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
|
unknown
|
|
|
|
https://www.skyscanner.net/flights?associateid=API_B2B_19305_00001&vertical=custom&pageType=
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1
|
unknown
|
|
|
|
http://ogp.me/ns#
|
unknown
|
|
|
|
https://clk.tradedoubler.com/click?p=245744&a=3064090&g=21863656
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&http
|
unknown
|
|
|
|
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_shop_de&utm
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;OneDrive-App
|
unknown
|
|
|
|
https://www.skype.com/de
|
unknown
|
|
|
|
https://login.skype.com/login/oauth/microsoft?client_id=738133
|
unknown
|
|
|
|
https://onedrive.live.com?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/k%c3%b6nnen-seil-oder-hochbahnen-z%c3%bcrichs-verk
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/wer-bekommt-im-kanton-z%c3%bcrich-pr%c3%a4mienverb
|
unknown
|
|
There are 85 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
contextual.media.net
|
23.57.80.37
|
|
|
|
tls13.taboola.map.fastly.net
|
151.101.1.44
|
|
|
|
hblg.media.net
|
23.57.80.37
|
|
|
|
lg3.media.net
|
23.57.80.37
|
|
|
|
geolocation.onetrust.com
|
104.20.185.68
|
|
|
|
web.vortex.data.msn.com
|
unknown
|
|
|
|
www.msn.com
|
unknown
|
|
|
|
srtb.msn.com
|
unknown
|
|
|
|
img.img-taboola.com
|
unknown
|
|
|
|
cvision.media.net
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
104.20.185.68
|
geolocation.onetrust.com
|
United States
|
|
|
|
151.101.1.44
|
tls13.taboola.map.fastly.net
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{2E23CC91-C4E5-11EB-90E5-ECF4BB570DC9}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
There are 97 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1390000
|
unkown
|
page execute and read and write
|
|
|
|
BE0000
|
unkown
|
page execute and read and write
|
|
|
|
CA0000
|
unkown
|
page execute and read and write
|
|
|
|
3030000
|
unkown
|
page execute and read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
282CE654000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5DFAFB000
|
unkown
|
page readonly
|
|
|
|
3026000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
26646E50000
|
heap private
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
282CE668000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF594AD8000
|
unkown
|
page readonly
|
|
|
|
6D658FF000
|
unkown
|
page read and write
|
|
|
|
7FF4EDB47000
|
unkown
|
page readonly
|
|
|
|
29A6000
|
unkown
|
page readonly
|
|
|
|
24927669000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF512900000
|
unkown
|
page readonly
|
|
|
|
2B3DB502000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
2A87000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5DF641000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2450CC9B000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
5D3977E000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
245086F0000
|
unkown
|
page readonly
|
|
|
|
ED931CB000
|
unkown
|
page read and write
|
|
|
|
3014000
|
unkown
|
page readonly
|
|
|
|
3000000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CCD000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2B3DB513000
|
unkown
|
page read and write
|
|
|
|
6DE70000
|
unkown image
|
page read and write
|
|
|
|
7FF4EDB7D000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D18000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
D5D12FF000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5C947D000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5126CD000
|
unkown
|
page readonly
|
|
|
|
22A65BC0000
|
unkown
|
page readonly
|
|
|
|
6DE7D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E3D3D000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
20B2EE2E000
|
unkown
|
page read and write
|
|
|
|
7FF5128FB000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF4EDB93000
|
unkown
|
page readonly
|
|
|
|
6DDF0000
|
unkown image
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3014000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF55CC2D000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
12DE000
|
unkown
|
page read and write
|
|
|
|
7FF55CEEF000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
6DDF6000
|
unkown image
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5DFADE000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
24927E00000
|
unkown
|
page readonly
|
|
|
|
2224CB02000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA53000
|
unkown
|
page readonly
|
|
|
|
7FF4EDB33000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5C8BE0000
|
unkown
|
page readonly
|
|
|
|
BC0000
|
heap default
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2817000
|
unkown
|
page readonly
|
|
|
|
6DE49000
|
unkown image
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
24507E15000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
5D390FE000
|
unkown
|
page read and write
|
|
|
|
7FF5125D5000
|
unkown
|
page readonly
|
|
|
|
C90000
|
unkown
|
page execute and read and write
|
|
|
|
449A6FE000
|
unkown
|
page read and write
|
|
|
|
20B2EE4F000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5AA6EF000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
249273E0000
|
heap private
|
page read and write
|
|
|
|
FFDDBCE000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CC3000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
6D65AFF000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC20000
|
unkown
|
page readonly
|
|
|
|
D997EFC000
|
unkown
|
page read and write
|
|
|
|
24508A90000
|
unkown
|
page read and write
|
|
|
|
282CE4A0000
|
heap default
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
22A65C3D000
|
unkown
|
page read and write
|
|
|
|
307D000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5C946E000
|
unkown
|
page readonly
|
|
|
|
2E97000
|
unkown
|
page readonly
|
|
|
|
7FF51283C000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5AA561000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
24507C60000
|
unkown
|
page readonly
|
|
|
|
6DE7C000
|
unkown image
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2450CE21000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5AA5BF000
|
unkown
|
page readonly
|
|
|
|
245075C0000
|
unkown
|
page read and write
|
|
|
|
245076A3000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3055000
|
unkown
|
page readonly
|
|
|
|
7FF594AAC000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
24927713000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
22A65BD0000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
20B2EE5F000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC34000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
6DDF0000
|
unkown image
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
12CF000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5DF79A000
|
unkown
|
page readonly
|
|
|
|
CE0000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5C9388000
|
unkown
|
page readonly
|
|
|
|
30F5000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
2EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5AA1BC000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
22A65D02000
|
unkown
|
page read and write
|
|
|
|
7FF5AA5AA000
|
unkown
|
page readonly
|
|
|
|
BD0000
|
unkown
|
page execute and read and write
|
|
|
|
20B2EE00000
|
unkown
|
page read and write
|
|
|
|
20B2EE4B000
|
unkown
|
page read and write
|
|
|
|
7FF5AA995000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
BC88F7E000
|
unkown
|
page read and write
|
|
|
|
7FF5124EB000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3320000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5949CD000
|
unkown
|
page readonly
|
|
|
|
7FF5DFACF000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
19FE3A6F000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5C9212000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C00000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
24927700000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
24507E00000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
B8A000
|
heap default
|
page read and write
|
|
|
|
2450CC40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
6DE49000
|
unkown image
|
page readonly
|
|
|
|
304A000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2FFD000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF51291E000
|
unkown
|
page readonly
|
|
|
|
3055000
|
unkown
|
page readonly
|
|
|
|
7FF5DFAD6000
|
unkown
|
page readonly
|
|
|
|
2224D200000
|
unkown
|
page readonly
|
|
|
|
26645070000
|
heap private
|
page read and write
|
|
|
|
7FF5AA900000
|
unkown
|
page readonly
|
|
|
|
D9979EB000
|
unkown
|
page read and write
|
|
|
|
7FF512743000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
29FD000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF51271E000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
282CE4B0000
|
unkown
|
page readonly
|
|
|
|
2492767A000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3021000
|
unkown
|
page readonly
|
|
|
|
24927640000
|
unkown
|
page read and write
|
|
|
|
7FF594AA2000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF594AF9000
|
unkown
|
page readonly
|
|
|
|
1370000
|
unkown
|
page execute and read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5E394D000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
20B2EE42000
|
unkown
|
page read and write
|
|
|
|
19FE3FD0000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
24927530000
|
unkown
|
page readonly
|
|
|
|
7FF5AA200000
|
unkown
|
page readonly
|
|
|
|
E4B000
|
unkown
|
page read and write
|
|
|
|
26645050000
|
unkown
|
page readonly
|
|
|
|
7FF5DF9AD000
|
unkown
|
page readonly
|
|
|
|
7FF5AA973000
|
unkown
|
page readonly
|
|
|
|
6DDFE000
|
unkown image
|
page execute read
|
|
|
|
245075D0000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D4B000
|
unkown
|
page readonly
|
|
|
|
7FF515810000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2B3DB400000
|
unkown
|
page read and write
|
|
|
|
7FF594B9D000
|
unkown
|
page readonly
|
|
|
|
2224CA00000
|
unkown
|
page read and write
|
|
|
|
7FF512848000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
449ADFF000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
2DDF000
|
unkown
|
page read and write
|
|
|
|
D20000
|
unkown
|
page readonly
|
|
|
|
BC88EFE000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5123F3000
|
unkown
|
page readonly
|
|
|
|
2B3DB42A000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
B60000
|
unkown
|
page readonly
|
|
|
|
BC889FA000
|
unkown
|
page read and write
|
|
|
|
7FF5C9438000
|
unkown
|
page readonly
|
|
|
|
20B2EE76000
|
unkown
|
page read and write
|
|
|
|
20B2EE49000
|
unkown
|
page read and write
|
|
|
|
7FF59471A000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC4F000
|
unkown
|
page readonly
|
|
|
|
26644FE0000
|
unkown
|
page readonly
|
|
|
|
2224CA6F000
|
unkown
|
page read and write
|
|
|
|
7FF5AA8DD000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
26644D70000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5DF9F2000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
24507F13000
|
unkown
|
page read and write
|
|
|
|
6DDF0000
|
unkown image
|
page readonly
|
|
|
|
1850000
|
unkown
|
page readonly
|
|
|
|
3065000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D30000
|
unkown
|
page readonly
|
|
|
|
D9987FF000
|
unkown
|
page read and write
|
|
|
|
D997FFE000
|
unkown
|
page read and write
|
|
|
|
7FF59466F000
|
unkown
|
page readonly
|
|
|
|
2D2C000
|
unkown
|
page read and write
|
|
|
|
19FE4590000
|
unkown
|
page readonly
|
|
|
|
BC890FF000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5C9187000
|
unkown
|
page readonly
|
|
|
|
24507DC1000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3030000
|
unkown
|
page readonly
|
|
|
|
7FF55CF2F000
|
unkown
|
page readonly
|
|
|
|
2F34000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
19FE3ABA000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3107000
|
unkown
|
page readonly
|
|
|
|
7FF5128EF000
|
unkown
|
page readonly
|
|
|
|
7FF594AED000
|
unkown
|
page readonly
|
|
|
|
7FF5157F8000
|
unkown
|
page readonly
|
|
|
|
282CE702000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
476F000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF55CF2F000
|
unkown
|
page readonly
|
|
|
|
7FF4EDC2D000
|
unkown
|
page readonly
|
|
|
|
6DDF1000
|
unkown image
|
page execute read
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
CC0000
|
unkown
|
page readonly
|
|
|
|
D5D0B7C000
|
unkown
|
page read and write
|
|
|
|
7FF55CF1B000
|
unkown
|
page readonly
|
|
|
|
5180000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA75000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF594AB7000
|
unkown
|
page readonly
|
|
|
|
2224CA13000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
6DDF0000
|
unkown image
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
6DDFE000
|
unkown image
|
page execute read
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5AA965000
|
unkown
|
page readonly
|
|
|
|
6DE71000
|
unkown image
|
page execute and read and write
|
|
|
|
282CE440000
|
heap private
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
298D000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
24507702000
|
unkown
|
page read and write
|
|
|
|
20B2ED60000
|
unkown
|
page readonly
|
|
|
|
7FF51291B000
|
unkown
|
page readonly
|
|
|
|
2450CEE8000
|
unkown
|
page write copy
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
449AC7D000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1180000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF51292B000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
FFDDB4E000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2450CC4D000
|
unkown
|
page read and write
|
|
|
|
7FF5AA8E7000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
245075B0000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D5B000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5DFAFE000
|
unkown
|
page readonly
|
|
|
|
7FF51287A000
|
unkown
|
page readonly
|
|
|
|
4DB0000
|
heap private
|
page read and write
|
|
|
|
7FF594BA4000
|
unkown
|
page readonly
|
|
|
|
7FF5C9377000
|
unkown
|
page readonly
|
|
|
|
245076FF000
|
unkown
|
page read and write
|
|
|
|
7FF512785000
|
unkown
|
page readonly
|
|
|
|
D5D0BFE000
|
unkown
|
page read and write
|
|
|
|
24508610000
|
unkown
|
page read and write
|
|
|
|
7FF5AAA1B000
|
unkown
|
page readonly
|
|
|
|
24507696000
|
unkown
|
page read and write
|
|
|
|
26644FC0000
|
unkown
|
page read and write
|
|
|
|
C2A000
|
heap default
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
24507800000
|
unkown
|
page readonly
|
|
|
|
282D00A0000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
CB0000
|
heap private
|
page read and write
|
|
|
|
7FF55CD3D000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3075000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2450767B000
|
unkown
|
page read and write
|
|
|
|
5D394FD000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
128D000
|
unkown
|
page read and write
|
|
|
|
7FF5AA923000
|
unkown
|
page readonly
|
|
|
|
304A000
|
unkown
|
page readonly
|
|
|
|
7FF515779000
|
unkown
|
page readonly
|
|
|
|
7FF5E3BFF000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
5D38F7E000
|
unkown
|
page read and write
|
|
|
|
7FF55CEF6000
|
unkown
|
page readonly
|
|
|
|
30F1000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3107000
|
unkown
|
page readonly
|
|
|
|
19FE3A00000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2B3DB3F0000
|
unkown
|
page readonly
|
|
|
|
7FF5DFA5A000
|
unkown
|
page readonly
|
|
|
|
22A66600000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
6DDF1000
|
unkown image
|
page execute read
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
9A4000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
B80000
|
heap default
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF515824000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2F34000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
20B2EE66000
|
unkown
|
page read and write
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
3040000
|
unkown
|
page readonly
|
|
|
|
7FF5153E6000
|
unkown
|
page readonly
|
|
|
|
20B2EE40000
|
unkown
|
page read and write
|
|
|
|
7FF5AA908000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
103D000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5124E5000
|
unkown
|
page readonly
|
|
|
|
7FF5DF9C7000
|
unkown
|
page readonly
|
|
|
|
24507530000
|
heap private
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2224CA81000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
308D000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
282CE5D0000
|
unkown
|
page readonly
|
|
|
|
282CE713000
|
unkown
|
page read and write
|
|
|
|
7FF55CF00000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2B3DB478000
|
unkown
|
page read and write
|
|
|
|
2450CEC0000
|
unkown
|
page write copy
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5C9354000
|
unkown
|
page readonly
|
|
|
|
7FF5E3C57000
|
unkown
|
page readonly
|
|
|
|
A5F07EC000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5AA7FC000
|
unkown
|
page readonly
|
|
|
|
3065000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5128E8000
|
unkown
|
page readonly
|
|
|
|
7FF5126F3000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF4EDB10000
|
unkown
|
page readonly
|
|
|
|
D5D13FF000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page readonly
|
|
|
|
D9982FD000
|
unkown
|
page read and write
|
|
|
|
6D659FE000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
6DDF0000
|
unkown image
|
page readonly
|
|
|
|
7FF4EDC08000
|
unkown
|
page readonly
|
|
|
|
22A65ED0000
|
unkown
|
page readonly
|
|
|
|
7FF5E3C99000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
24507E02000
|
unkown
|
page read and write
|
|
|
|
2450CEC0000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5DFB0F000
|
unkown
|
page readonly
|
|
|
|
D9983FF000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
449AD7F000
|
unkown
|
page read and write
|
|
|
|
7FF55CE3C000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
282CE602000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF594BBB000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA07000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2B3DBE00000
|
unkown
|
page readonly
|
|
|
|
6D657FB000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF4EDBB5000
|
unkown
|
page readonly
|
|
|
|
6DE49000
|
unkown image
|
page readonly
|
|
|
|
3038000
|
unkown
|
page readonly
|
|
|
|
20B2ED70000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2450CC53000
|
unkown
|
page read and write
|
|
|
|
19FE3A24000
|
unkown
|
page read and write
|
|
|
|
19FE3A2A000
|
unkown
|
page read and write
|
|
|
|
20B2EE7D000
|
unkown
|
page read and write
|
|
|
|
7FF51583B000
|
unkown
|
page readonly
|
|
|
|
2450CAA0000
|
unkown
|
page readonly
|
|
|
|
281A000
|
unkown
|
page readonly
|
|
|
|
7FF5C938C000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
D997CFD000
|
unkown
|
page read and write
|
|
|
|
24508530000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
26644FA0000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5AA721000
|
unkown
|
page readonly
|
|
|
|
6D652CC000
|
unkown
|
page read and write
|
|
|
|
7FF515783000
|
unkown
|
page readonly
|
|
|
|
2450CF30000
|
unkown
|
page read and write
|
|
|
|
5D3927F000
|
unkown
|
page read and write
|
|
|
|
7FF5E3A43000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5AAA2B000
|
unkown
|
page readonly
|
|
|
|
20B2EE3D000
|
unkown
|
page read and write
|
|
|
|
2B3DB370000
|
heap private
|
page read and write
|
|
|
|
C80000
|
unkown
|
page execute and read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
24927628000
|
unkown
|
page read and write
|
|
|
|
7FF5DF9C0000
|
unkown
|
page readonly
|
|
|
|
2450CCB1000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
D9986FE000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5AA91C000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF51580B000
|
unkown
|
page readonly
|
|
|
|
24508750000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
486D000
|
unkown
|
page read and write
|
|
|
|
2224C850000
|
unkown
|
page readonly
|
|
|
|
B80000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
47EE000
|
unkown
|
page read and write
|
|
|
|
7FF4EDB89000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
29EC000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF4EDB57000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2450CC00000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5C9446000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
19FE3AC2000
|
unkown
|
page read and write
|
|
|
|
7FF5E3C8D000
|
unkown
|
page readonly
|
|
|
|
ED9347E000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
6DE70000
|
unkown image
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
19FE3A89000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
9CB000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC0F000
|
unkown
|
page readonly
|
|
|
|
7FF594A3E000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D1F000
|
unkown
|
page readonly
|
|
|
|
22A65BA0000
|
heap default
|
page read and write
|
|
|
|
7FF55CE48000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
B30000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
309D000
|
unkown
|
page readonly
|
|
|
|
BC8907F000
|
unkown
|
page read and write
|
|
|
|
19FE3FA0000
|
unkown
|
page read and write
|
|
|
|
7FF5AA7E3000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5AA93C000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5AA867000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
19FE4540000
|
unkown
|
page write copy
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2A6B000
|
unkown
|
page readonly
|
|
|
|
7FF5C910A000
|
unkown
|
page readonly
|
|
|
|
4A90000
|
heap private
|
page read and write
|
|
|
|
7FF5AA737000
|
unkown
|
page readonly
|
|
|
|
28B4000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2450CE0E000
|
unkown
|
page read and write
|
|
|
|
282CE613000
|
unkown
|
page read and write
|
|
|
|
7FF5C93C3000
|
unkown
|
page readonly
|
|
|
|
2450CE24000
|
unkown
|
page read and write
|
|
|
|
24507590000
|
heap default
|
page read and write
|
|
|
|
7FF51576D000
|
unkown
|
page readonly
|
|
|
|
282CE800000
|
unkown
|
page readonly
|
|
|
|
306C000
|
unkown
|
page readonly
|
|
|
|
6DDF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C921D000
|
unkown
|
page readonly
|
|
|
|
19FE3930000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
A8C000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown
|
page readonly
|
|
|
|
7FF512869000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF594B7F000
|
unkown
|
page readonly
|
|
|
|
3079000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
11AB000
|
heap default
|
page read and write
|
|
|
|
7FF5E3D2B000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF55CE93000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5AA5D3000
|
unkown
|
page readonly
|
|
|
|
4BBE000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
24508710000
|
unkown
|
page readonly
|
|
|
|
D9981FF000
|
unkown
|
page read and write
|
|
|
|
D9985FE000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5AA536000
|
unkown
|
page readonly
|
|
|
|
2B3DBC02000
|
unkown
|
page read and write
|
|
|
|
300D000
|
unkown
|
page readonly
|
|
|
|
29CA000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
30F1000
|
unkown
|
page readonly
|
|
|
|
7FF55CE04000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3730000
|
unkown
|
page readonly
|
|
|
|
2224C920000
|
unkown
|
page readonly
|
|
|
|
22A65E00000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5E3C95000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
19FE4200000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2450763D000
|
unkown
|
page read and write
|
|
|
|
7FF55CE40000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D44000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
6DDF3000
|
unkown image
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
19FE3C00000
|
unkown
|
page readonly
|
|
|
|
7FF5128F6000
|
unkown
|
page readonly
|
|
|
|
3040000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
29B0000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
BC88E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C9464000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2450CBF0000
|
unkown
|
page read and write
|
|
|
|
29E9000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
6DE70000
|
unkown image
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
26645410000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF51583F000
|
unkown
|
page readonly
|
|
|
|
2E4B000
|
unkown
|
page read and write
|
|
|
|
20B2EC80000
|
heap default
|
page read and write
|
|
|
|
26646960000
|
heap private
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2224CA8D000
|
unkown
|
page read and write
|
|
|
|
7FF51582B000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CA3000
|
unkown
|
page readonly
|
|
|
|
B70000
|
unkown
|
page readonly
|
|
|
|
20B2EC20000
|
heap private
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
24507DE3000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF4ED906000
|
unkown
|
page readonly
|
|
|
|
3069000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
D9984FF000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF594BAB000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5C92FE000
|
unkown
|
page readonly
|
|
|
|
7FF5AA9FB000
|
unkown
|
page readonly
|
|
|
|
24927BA0000
|
unkown
|
page read and write
|
|
|
|
A5F0A7E000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
ACB000
|
unkown
|
page read and write
|
|
|
|
2450CEC4000
|
unkown
|
page readonly
|
|
|
|
7FF55CAFF000
|
unkown
|
page readonly
|
|
|
|
26646820000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2450CC5F000
|
unkown
|
page read and write
|
|
|
|
2A1D000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
24507F58000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D5F000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
BC884BC000
|
unkown
|
page read and write
|
|
|
|
7FF5125E3000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
9C7000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
6DDF0000
|
unkown image
|
page readonly
|
|
|
|
20B2EE02000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
19FE3B02000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
6DDF6000
|
unkown image
|
page readonly
|
|
|
|
7FF515758000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF4EDB20000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
6DDF3000
|
unkown image
|
page readonly
|
|
|
|
7FF5157A5000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3180000
|
heap default
|
page read and write
|
|
|
|
7FF5126FE000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3011000
|
unkown
|
page readonly
|
|
|
|
7FF5C923C000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3094000
|
unkown
|
page readonly
|
|
|
|
7FF55CDE0000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
12A0000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
22A66402000
|
unkown
|
page read and write
|
|
|
|
20B2EE30000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF512865000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5DF9FC000
|
unkown
|
page readonly
|
|
|
|
7FF5DF9BD000
|
unkown
|
page readonly
|
|
|
|
19FE3840000
|
heap default
|
page read and write
|
|
|
|
7FF5155DD000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
24507DE0000
|
unkown
|
page read and write
|
|
|
|
7FF5DFAED000
|
unkown
|
page readonly
|
|
|
|
7FF5AA7CD000
|
unkown
|
page readonly
|
|
|
|
7FF5AA6BA000
|
unkown
|
page readonly
|
|
|
|
2450D030000
|
unkown
|
page readonly
|
|
|
|
124F000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
20B2EE6C000
|
unkown
|
page read and write
|
|
|
|
449A3BB000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA3D000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2450CC30000
|
unkown
|
page read and write
|
|
|
|
24507677000
|
unkown
|
page read and write
|
|
|
|
2450CCAF000
|
unkown
|
page read and write
|
|
|
|
C90000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
BA0000
|
unkown
|
page readonly
|
|
|
|
7FF55CEFB000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2224C930000
|
unkown
|
page readonly
|
|
|
|
2824000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2B3DB413000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2B3DBB50000
|
unkown
|
page readonly
|
|
|
|
22A66330000
|
unkown
|
page read and write
|
|
|
|
7FF5AA72D000
|
unkown
|
page readonly
|
|
|
|
20B2ED80000
|
unkown
|
page read and write
|
|
|
|
2450CAD0000
|
unkown
|
page read and write
|
|
|
|
7FF5C9362000
|
unkown
|
page readonly
|
|
|
|
24507657000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF55CDDD000
|
unkown
|
page readonly
|
|
|
|
305B000
|
unkown
|
page readonly
|
|
|
|
4D10000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
20B2EE39000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
26644FF0000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF512823000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5C945D000
|
unkown
|
page readonly
|
|
|
|
7FF5DF354000
|
unkown
|
page readonly
|
|
|
|
6DDF1000
|
unkown image
|
page execute read
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
24927656000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF59495D000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF594BBD000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF55CF1E000
|
unkown
|
page readonly
|
|
|
|
7FF594B8B000
|
unkown
|
page readonly
|
|
|
|
300D000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
24927440000
|
heap default
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
20B2EE6A000
|
unkown
|
page read and write
|
|
|
|
2224C7E0000
|
heap private
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2A71000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
29A9000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5154F3000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
24507713000
|
unkown
|
page read and write
|
|
|
|
19FE3A68000
|
unkown
|
page read and write
|
|
|
|
7FF5E3A05000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
BC88CF9000
|
unkown
|
page read and write
|
|
|
|
9A8000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF51292F000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3320000
|
unkown
|
page readonly
|
|
|
|
20B2EE4D000
|
unkown
|
page read and write
|
|
|
|
2224CC00000
|
unkown
|
page readonly
|
|
|
|
7FF5AA71A000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF594BBF000
|
unkown
|
page readonly
|
|
|
|
20B2EF02000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
5D38EFD000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
26645040000
|
unkown
|
page readonly
|
|
|
|
2A0D000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5C9246000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3075000
|
unkown
|
page readonly
|
|
|
|
6DDF5000
|
unkown image
|
page read and write
|
|
|
|
3026000
|
unkown
|
page readonly
|
|
|
|
20B2EE48000
|
unkown
|
page read and write
|
|
|
|
E70000
|
heap private
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5AA95D000
|
unkown
|
page readonly
|
|
|
|
7FF5C917D000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
2450CF50000
|
unkown
|
page read and write
|
|
|
|
2B3DB468000
|
unkown
|
page read and write
|
|
|
|
24927702000
|
unkown
|
page read and write
|
|
|
|
14B0000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF4ED3C0000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5AA5A4000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5C9450000
|
unkown
|
page readonly
|
|
|
|
7FF55CE65000
|
unkown
|
page readonly
|
|
|
|
BF0000
|
heap private
|
page read and write
|
|
|
|
2A14000
|
unkown
|
page readonly
|
|
|
|
19FE3A43000
|
unkown
|
page read and write
|
|
|
|
5578000
|
unkown
|
page read and write
|
|
|
|
7FF512895000
|
unkown
|
page readonly
|
|
|
|
22A65C63000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2450CF10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
A5F0CFE000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
28AC000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page execute and read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5AA9FE000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF4EDB85000
|
unkown
|
page readonly
|
|
|
|
7FF5DF8DE000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
20B2EE44000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA49000
|
unkown
|
page readonly
|
|
|
|
19FE3ACB000
|
unkown
|
page read and write
|
|
|
|
282CE600000
|
unkown
|
page read and write
|
|
|
|
ED936FD000
|
unkown
|
page read and write
|
|
|
|
449A8FE000
|
unkown
|
page read and write
|
|
|
|
E30000
|
heap private
|
page read and write
|
|
|
|
7FF5E3C70000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5949D6000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
26646C8F000
|
heap private
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
29E1000
|
unkown
|
page readonly
|
|
|
|
282CE66D000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA45000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
D5D107B000
|
unkown
|
page read and write
|
|
|
|
7FF594B03000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
6DDF3000
|
unkown image
|
page readonly
|
|
|
|
7FF5AA9F6000
|
unkown
|
page readonly
|
|
|
|
125D000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
5D3987F000
|
unkown
|
page read and write
|
|
|
|
3010000
|
unkown
|
page execute and read and write
|
|
|
|
305B000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
20B2EE29000
|
unkown
|
page read and write
|
|
|
|
6DDF5000
|
unkown image
|
page read and write
|
|
|
|
6DDF6000
|
unkown image
|
page readonly
|
|
|
|
B90000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
5D393FC000
|
unkown
|
page read and write
|
|
|
|
B60000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
306C000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3021000
|
unkown
|
page readonly
|
|
|
|
7FF594AB5000
|
unkown
|
page readonly
|
|
|
|
7FF5C9373000
|
unkown
|
page readonly
|
|
|
|
A5F0B7E000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
282CE580000
|
unkown
|
page write copy
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
306A000
|
heap default
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF51290D000
|
unkown
|
page readonly
|
|
|
|
2224CA29000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
2450CE00000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF594B78000
|
unkown
|
page readonly
|
|
|
|
7FF5AA937000
|
unkown
|
page readonly
|
|
|
|
7FF4ED440000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2B3DB3D0000
|
heap default
|
page read and write
|
|
|
|
6DE7C000
|
unkown image
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
26646A60000
|
heap private
|
page read and write
|
|
|
|
7FF55CC55000
|
unkown
|
page readonly
|
|
|
|
449AB7F000
|
unkown
|
page read and write
|
|
|
|
22A65C02000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
20B2EE4E000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5DFADB000
|
unkown
|
page readonly
|
|
|
|
2450CEEC000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
24508720000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
29F9000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
245076B1000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF55CE37000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5AAA1E000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
22A65B40000
|
heap private
|
page read and write
|
|
|
|
6DE71000
|
unkown image
|
page execute and read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
A5F0AFE000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3061000
|
unkown
|
page readonly
|
|
|
|
7FF5C947B000
|
unkown
|
page readonly
|
|
|
|
24927520000
|
unkown
|
page readonly
|
|
|
|
2450CF00000
|
unkown
|
page read and write
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
BB0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5DFB0F000
|
unkown
|
page readonly
|
|
|
|
24507F18000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5DF887000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
24507F00000
|
unkown
|
page read and write
|
|
|
|
19FE4100000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
2450D070000
|
unkown
|
page readonly
|
|
|
|
48AE000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF4EDB9A000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
2224D002000
|
unkown
|
page read and write
|
|
|
|
7FF55CCA7000
|
unkown
|
page readonly
|
|
|
|
282CFFA0000
|
unkown
|
page read and write
|
|
|
|
449A67E000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
297D000
|
unkown
|
page readonly
|
|
|
|
20B2EE2D000
|
unkown
|
page read and write
|
|
|
|
7FF5AA7C4000
|
unkown
|
page readonly
|
|
|
|
2450CE08000
|
unkown
|
page read and write
|
|
|
|
2A87000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
ED934FE000
|
unkown
|
page read and write
|
|
|
|
3034000
|
unkown
|
page readonly
|
|
|
|
3038000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2E97000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
ED9357A000
|
unkown
|
page read and write
|
|
|
|
449AAFD000
|
unkown
|
page read and write
|
|
|
|
7FF5123F9000
|
unkown
|
page readonly
|
|
|
|
307D000
|
unkown
|
page readonly
|
|
|
|
2450CF50000
|
unkown
|
page read and write
|
|
|
|
7FF55CD1E000
|
unkown
|
page readonly
|
|
|
|
20B2EE58000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
24508700000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2450CE34000
|
unkown
|
page read and write
|
|
|
|
BC88DFB000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
A5F0BFD000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
20B2EE60000
|
unkown
|
page read and write
|
|
|
|
24507F02000
|
unkown
|
page read and write
|
|
|
|
2E47000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2CD0000
|
heap private
|
page read and write
|
|
|
|
7FF55CB12000
|
unkown
|
page readonly
|
|
|
|
24508730000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
20B2EE41000
|
unkown
|
page read and write
|
|
|
|
7FF5C924F000
|
unkown
|
page readonly
|
|
|
|
3069000
|
unkown
|
page readonly
|
|
|
|
7FF594AC7000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF512873000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
6DDF6000
|
unkown image
|
page readonly
|
|
|
|
2450D050000
|
unkown
|
page readonly
|
|
|
|
7FF515775000
|
unkown
|
page readonly
|
|
|
|
7FF5127A4000
|
unkown
|
page readonly
|
|
|
|
D9980FF000
|
unkown
|
page read and write
|
|
|
|
7FF4ED8F8000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2224C840000
|
heap default
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA1C000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
5D3967D000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
4BFF000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF4ED948000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
4CF8000
|
heap private
|
page read and write
|
|
|
|
3030000
|
unkown
|
page readonly
|
|
|
|
7FF51582E000
|
unkown
|
page readonly
|
|
|
|
19FE3B13000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
22A65BB0000
|
unkown
|
page readonly
|
|
|
|
2991000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5AA7E8000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D26000
|
unkown
|
page readonly
|
|
|
|
309D000
|
unkown
|
page readonly
|
|
|
|
7FF5DFA17000
|
unkown
|
page readonly
|
|
|
|
7FF55CE7A000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
308D000
|
unkown
|
page readonly
|
|
|
|
7FF5E3C6C000
|
unkown
|
page readonly
|
|
|
|
BC88BFE000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5AA948000
|
unkown
|
page readonly
|
|
|
|
3029000
|
unkown
|
page readonly
|
|
|
|
24508740000
|
unkown
|
page readonly
|
|
|
|
2450CF50000
|
unkown
|
page read and write
|
|
|
|
7FF5E3BC7000
|
unkown
|
page readonly
|
|
|
|
30F5000
|
unkown
|
page readonly
|
|
|
|
2450CE20000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
5D38E7B000
|
unkown
|
page read and write
|
|
|
|
476E000
|
unkown
|
page read and write
|
|
|
|
19FE3850000
|
unkown
|
page readonly
|
|
|
|
20B2EE32000
|
unkown
|
page read and write
|
|
|
|
30EB000
|
unkown
|
page readonly
|
|
|
|
7FF5AA904000
|
unkown
|
page readonly
|
|
|
|
7FF594A94000
|
unkown
|
page readonly
|
|
|
|
7FF5AA0A9000
|
unkown
|
page readonly
|
|
|
|
24507629000
|
unkown
|
page read and write
|
|
|
|
2DF0000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5DF616000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC16000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
20B2EE83000
|
unkown
|
page read and write
|
|
|
|
47AF000
|
unkown
|
page read and write
|
|
|
|
6DDF5000
|
unkown image
|
page read and write
|
|
|
|
BC888F7000
|
unkown
|
page read and write
|
|
|
|
2B3DB441000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
FFDE0FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C93B9000
|
unkown
|
page readonly
|
|
|
|
2450768D000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
47EF000
|
unkown
|
page read and write
|
|
|
|
24508101000
|
unkown
|
page read and write
|
|
|
|
30EB000
|
unkown
|
page readonly
|
|
|
|
2B3DB600000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2B3DB6D0000
|
unkown
|
page readonly
|
|
|
|
7FF5C947F000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF594AF5000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
24927600000
|
unkown
|
page read and write
|
|
|
|
7FF594A34000
|
unkown
|
page readonly
|
|
|
|
20B2EE61000
|
unkown
|
page read and write
|
|
|
|
2450CED0000
|
unkown
|
page readonly
|
|
|
|
2DD0000
|
unkown
|
page read and write
|
|
|
|
2224CB13000
|
unkown
|
page read and write
|
|
|
|
6DE49000
|
unkown image
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
2224CFA0000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
19FE37E0000
|
heap private
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
20B2EE3B000
|
unkown
|
page read and write
|
|
|
|
3061000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
13FE000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
29E5000
|
unkown
|
page readonly
|
|
|
|
13BD000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC4F000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF55CF0D000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2B3DB3E0000
|
unkown
|
page readonly
|
|
|
|
7FF5AA09F000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
11A0000
|
heap default
|
page read and write
|
|
|
|
D997DFB000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
20B2EE7A000
|
unkown
|
page read and write
|
|
|
|
282CE66F000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
19FE3F90000
|
unkown
|
page readonly
|
|
|
|
19FE3920000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5AAA2D000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5AA8A4000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2B3DBA60000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5C93E5000
|
unkown
|
page readonly
|
|
|
|
2224CA46000
|
unkown
|
page read and write
|
|
|
|
245078D0000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF55CE73000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
245075A0000
|
unkown
|
page readonly
|
|
|
|
7FF594BBF000
|
unkown
|
page readonly
|
|
|
|
BC892FE000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
6DE7C000
|
unkown image
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
6DE7D000
|
unkown image
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C20000
|
heap default
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5AA1C9000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5DFAC8000
|
unkown
|
page readonly
|
|
|
|
7FF5AA912000
|
unkown
|
page readonly
|
|
|
|
7FF594AB3000
|
unkown
|
page readonly
|
|
|
|
29D5000
|
unkown
|
page readonly
|
|
|
|
24507691000
|
unkown
|
page read and write
|
|
|
|
7FF51574C000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF594B0A000
|
unkown
|
page readonly
|
|
|
|
7FF5E3C78000
|
unkown
|
page readonly
|
|
|
|
2450CAF0000
|
unkown
|
page read and write
|
|
|
|
5D3997F000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
20B2F602000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2450CED4000
|
unkown
|
page readonly
|
|
|
|
2E9A000
|
unkown
|
page readonly
|
|
|
|
282CE700000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF55CEE8000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3107000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
6DDFE000
|
unkown image
|
page execute read
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
26644DD0000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2EA4000
|
unkown
|
page readonly
|
|
|
|
2B3DB402000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
6DE7D000
|
unkown image
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC4D000
|
unkown
|
page readonly
|
|
|
|
282CE629000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
2450CFB0000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
6DE7D000
|
unkown image
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5AA9E8000
|
unkown
|
page readonly
|
|
|
|
7FF5E3C0A000
|
unkown
|
page readonly
|
|
|
|
7FF5AA780000
|
unkown
|
page readonly
|
|
|
|
7FF5AAA14000
|
unkown
|
page readonly
|
|
|
|
22A65C56000
|
unkown
|
page read and write
|
|
|
|
2450CC23000
|
unkown
|
page read and write
|
|
|
|
4D00000
|
heap private
|
page read and write
|
|
|
|
7FF5AAA2F000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5DF826000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2E9A000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
D5D10FE000
|
unkown
|
page read and write
|
|
|
|
F50000
|
heap private
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
24507F59000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
20B2EE46000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
22A66330000
|
unkown
|
page read and write
|
|
|
|
6DDFE000
|
unkown image
|
page execute read
|
|
|
|
7FF5AA8F0000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF594898000
|
unkown
|
page readonly
|
|
|
|
7FF512837000
|
unkown
|
page readonly
|
|
|
|
33A0000
|
unkown
|
page readonly
|
|
|
|
2A75000
|
unkown
|
page readonly
|
|
|
|
129F000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF594952000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5AA9EF000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF55CB1A000
|
unkown
|
page readonly
|
|
|
|
4C79000
|
heap private
|
page read and write
|
|
|
|
2450CF90000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3011000
|
unkown
|
page readonly
|
|
|
|
7FF5DFAF4000
|
unkown
|
page readonly
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
7FF55CF2B000
|
unkown
|
page readonly
|
|
|
|
22A65C00000
|
unkown
|
page read and write
|
|
|
|
482F000
|
unkown
|
page read and write
|
|
|
|
2450CC12000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5E3C03000
|
unkown
|
page readonly
|
|
|
|
24927613000
|
unkown
|
page read and write
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
A5F0D7C000
|
unkown
|
page read and write
|
|
|
|
7FF515806000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
5D3907B000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
22A65C13000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
6DDF3000
|
unkown image
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF59471E000
|
unkown
|
page readonly
|
|
|
|
D5D0F7C000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
30FC000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF51578A000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
20B2EE13000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2A7C000
|
unkown
|
page readonly
|
|
|
|
7FF5157FF000
|
unkown
|
page readonly
|
|
|
|
7FF5AA751000
|
unkown
|
page readonly
|
|
|
|
26644EDC000
|
heap default
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF55CF14000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
30FC000
|
unkown
|
page readonly
|
|
|
|
2DF0000
|
heap private
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2224CA3C000
|
unkown
|
page read and write
|
|
|
|
19FE3A66000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
22A66330000
|
unkown
|
page read and write
|
|
|
|
26645030000
|
unkown
|
page readonly
|
|
|
|
20B2EE3A000
|
unkown
|
page read and write
|
|
|
|
29F5000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC3B000
|
unkown
|
page readonly
|
|
|
|
7FF51285D000
|
unkown
|
page readonly
|
|
|
|
2B3DB476000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
20B2EE47000
|
unkown
|
page read and write
|
|
|
|
FFDDFFE000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF51277F000
|
unkown
|
page readonly
|
|
|
|
26645075000
|
heap private
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF512914000
|
unkown
|
page readonly
|
|
|
|
3029000
|
unkown
|
page readonly
|
|
|
|
2EA4000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2450CCAC000
|
unkown
|
page read and write
|
|
|
|
2FF0000
|
heap private
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2B3DB452000
|
unkown
|
page read and write
|
|
|
|
7FF515082000
|
unkown
|
page readonly
|
|
|
|
7FF5AA97A000
|
unkown
|
page readonly
|
|
|
|
19FE4002000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF594BAE000
|
unkown
|
page readonly
|
|
|
|
29B4000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2224CF90000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF55CE5D000
|
unkown
|
page readonly
|
|
|
|
7FF55CE69000
|
unkown
|
page readonly
|
|
|
|
4900000
|
heap private
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
22A66260000
|
unkown
|
page readonly
|
|
|
|
1160000
|
unkown
|
page readonly
|
|
|
|
6DDF5000
|
unkown image
|
page read and write
|
|
|
|
A90000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
48B0000
|
heap private
|
page read and write
|
|
|
|
24507600000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
24507F18000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2450CF50000
|
unkown
|
page readonly
|
|
|
|
2450CE00000
|
unkown
|
page read and write
|
|
|
|
7FF5C943F000
|
unkown
|
page readonly
|
|
|
|
3034000
|
unkown
|
page readonly
|
|
|
|
7FF5C93CA000
|
unkown
|
page readonly
|
|
|
|
24927602000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
2D6B000
|
unkown
|
page read and write
|
|
|
|
4B7F000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF5AA927000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
26646B90000
|
heap private
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
CD0000
|
heap default
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5DF295000
|
unkown
|
page readonly
|
|
|
|
2B3DB470000
|
unkown
|
page read and write
|
|
|
|
FFDDACC000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
449A9FE000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF594402000
|
unkown
|
page readonly
|
|
|
|
7FF5949E2000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3079000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5AA753000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
16B0000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
20B2EE69000
|
unkown
|
page read and write
|
|
|
|
D5D11F7000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
E4F000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D5F000
|
unkown
|
page readonly
|
|
|
|
24507DF0000
|
unkown
|
page read and write
|
|
|
|
2B3DB45B000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5C936C000
|
unkown
|
page readonly
|
|
|
|
7FF5AA8E0000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
ED9367F000
|
unkown
|
page read and write
|
|
|
|
7FF4ED9ED000
|
unkown
|
page readonly
|
|
|
|
2450CE30000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3060000
|
heap default
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
24927C02000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
24927B90000
|
unkown
|
page readonly
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
2450CAE0000
|
unkown
|
page read and write
|
|
|
|
7FF51292F000
|
unkown
|
page readonly
|
|
|
|
7EC000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5E3956000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
24927450000
|
unkown
|
page readonly
|
|
|
|
7FF5AA969000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
24508500000
|
unkown
|
page read and write
|
|
|
|
7FF4EDB5D000
|
unkown
|
page readonly
|
|
|
|
5D3937E000
|
unkown
|
page read and write
|
|
|
|
F60000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
BC88FFF000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
6DDF0000
|
unkown image
|
page readonly
|
|
|
|
1190000
|
heap default
|
page read and write
|
|
|
|
7FF5C93B5000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC1B000
|
unkown
|
page readonly
|
|
|
|
7FF5AAA2F000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
6DE71000
|
unkown image
|
page execute and read and write
|
|
|
|
24927664000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
20B2F000000
|
unkown
|
page readonly
|
|
|
|
335E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D4E000
|
unkown
|
page readonly
|
|
|
|
1380000
|
unkown
|
page execute and read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3390000
|
heap private
|
page read and write
|
|
|
|
7FF594886000
|
unkown
|
page readonly
|
|
|
|
47AE000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
20B2EE45000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5C947F000
|
unkown
|
page readonly
|
|
|
|
BD0000
|
unkown
|
page read and write
|
|
|
|
7FF5DFB0D000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
6DE7C000
|
unkown image
|
page read and write
|
|
|
|
6DE70000
|
unkown image
|
page read and write
|
|
|
|
29DB000
|
unkown
|
page readonly
|
|
|
|
7FF5C944B000
|
unkown
|
page readonly
|
|
|
|
D5D0E7E000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
D997C7E000
|
unkown
|
page read and write
|
|
|
|
D9988FE000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2450CBF0000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
6DDF1000
|
unkown image
|
page execute read
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5C93AD000
|
unkown
|
page readonly
|
|
|
|
7FF55CC37000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
26645080000
|
unkown
|
page readonly
|
|
|
|
2450CF20000
|
unkown
|
page read and write
|
|
|
|
5D3957B000
|
unkown
|
page read and write
|
|
|
|
7FF5C9398000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2450CF50000
|
unkown
|
page read and write
|
|
|
|
7FF5AA87F000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
2FFD000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
22A65C29000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF55CDE7000
|
unkown
|
page readonly
|
|
|
|
2450CFA0000
|
unkown
|
page readonly
|
|
|
|
449A87E000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CC5000
|
unkown
|
page readonly
|
|
|
|
7FF51583F000
|
unkown
|
page readonly
|
|
|
|
29C0000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF4EDC3E000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
20B2EC90000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF5C946B000
|
unkown
|
page readonly
|
|
|
|
BC88AFE000
|
unkown
|
page read and write
|
|
|
|
7FF594B25000
|
unkown
|
page readonly
|
|
|
|
24507671000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
20B2EE32000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5AA4DF000
|
unkown
|
page readonly
|
|
|
|
7FF5AAA0D000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
A3B000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
6DE71000
|
unkown image
|
page execute and read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF5AA71C000
|
unkown
|
page readonly
|
|
|
|
282CE63F000
|
unkown
|
page read and write
|
|
|
|
282CE66B000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF512408000
|
unkown
|
page readonly
|
|
|
|
7FF55C5DA000
|
unkown
|
page readonly
|
|
|
|
7FF55CB0D000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
2B3DBB30000
|
unkown
|
page read and write
|
|
|
|
3094000
|
unkown
|
page readonly
|
|
|
|
113C000
|
unkown
|
page read and write
|
|
|
|
7FF5AA204000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
7FF594ACC000
|
unkown
|
page readonly
|
|
|
|
FFDE1FE000
|
unkown
|
page read and write
|
|
|
|
7FF5AA723000
|
unkown
|
page readonly
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
E1E000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF512827000
|
unkown
|
page readonly
|
|
|
|
24927800000
|
unkown
|
page readonly
|
|
|
|
7FF594B86000
|
unkown
|
page readonly
|
|
|
|
3107000
|
unkown
|
page readonly
|
|
|
|
26644EA0000
|
heap default
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
7FF594B8E000
|
unkown
|
page readonly
|
|
|
|
20B2EE79000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
7FF5AA5B0000
|
unkown
|
page readonly
|
|
|
|
ED935FA000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
7FF515737000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page read and write
|
|
|
|
24507613000
|
unkown
|
page read and write
|
|
|
|
2450CE20000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
|
|
19FE3A13000
|
unkown
|
page read and write
|
|
|
|
1400000
|
unkown
|
page read and write
|
|
There are 1792 hidden memdumps, click here to show them.