Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
https://www.getrave.ca/content/6955686/599b179c-6797-4b93-b928-4e4ef96fabfc/323e9aaa-c071-4673-ba30-7129f8459847/COVID-19_Guidance_for_Food_Premises.pdf
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0ace9ee3d914a5c0_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\3a4ae3940784292a_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bba29d2e6197e2f4_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bf0ac66ae1eb4a7f_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\cf3e34002cde7e9c_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d449e58cb15daaf1_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d88192ac53852604_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\de789e80edd740d6_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f0cf6dfa8a1afa3d_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f4a0d4ca2f3b95da_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f941376b2efdd6e6_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f971b7eda7fa05c3_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fd17b2d8331c91e8_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fdd733564de6fbcb_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\febb41df4ea2b63a_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\temp-index
|
Maple help database
|
modified
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
|
SQLite 3.x database, last written using SQLite version 3024000
|
modified
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache.bin
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{300A0064-CD18-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{300A0066-CD18-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{300A0067-CD18-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\COVID-19_Guidance_for_Food_Premises[1].pdf
|
PDF document, version 1.7
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\acrord32_sbx\A9R8wtubp_1m2pv24_5d8.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF6BA14F25A0E6B823.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF71F58F6AA0B63BF7.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFAA560BC5C50C511B.TMP
|
data
|
dropped
|
|
There are 53 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6596 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe' /o /eo /l /b /ac /id 6676
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe' --type=renderer /prefetch:1 /o /eo /l /b /ac /id 6676
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --backgroundcolor=16514043
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat
Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1668,16580496791106040018,12926254681689914639,131072
--disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=10239579510597668333 --lang=en-US --disable-pack-loading
--log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035
Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10239579510597668333
--renderer-client-id=2 --mojo-platform-channel-handle=1692 --allow-no-sandbox-job /prefetch:1
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=gpu-process --field-trial-handle=1668,16580496791106040018,12926254681689914639,131072
--disable-features=VizDisplayCompositor --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log'
--log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --lang=en-US --gpu-preferences=KAAAAAAAAACAAwABAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA
--use-gl=swiftshader-webgl --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --service-request-channel-token=2337483784384888965
--mojo-platform-channel-handle=1700 --allow-no-sandbox-job --ignored=' --type=renderer ' /prefetch:2
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat
Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1668,16580496791106040018,12926254681689914639,131072
--disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=15245644756762629242 --lang=en-US --disable-pack-loading
--log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035
Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=15245644756762629242
--renderer-client-id=4 --mojo-platform-channel-handle=1852 --allow-no-sandbox-job /prefetch:1
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat
Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1668,16580496791106040018,12926254681689914639,131072
--disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=7424766846130001476 --lang=en-US --disable-pack-loading
--log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035
Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=7424766846130001476
--renderer-client-id=5 --mojo-platform-channel-handle=1728 --allow-no-sandbox-job /prefetch:1
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.ontario.ca/page/resources-prevent-covid-19-workplace)
|
unknown
|
|
|
|
https://www.york.ca/wps/wcm/connect/yorkpublic/b5a69a18-1bb9-4dbe-a219-546b1e602a32/202032_40_
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://www.getrave.ca/content/6955686/599b179c-6797-4b93-b928-4e4ef96fabfc/323e9aaa-c071-4673-ba30-
|
unknown
|
|
|
|
https://www.canada.ca/en/public-health/services/diseases/coronavirus-disease-covid-19/covid-alert.ht
|
unknown
|
|
|
|
https://www.york.ca/wps/wcm/connect/yorkpublic/8b46e61b-af4d-4787-a77b-4100b75df288/202032-64_Physic
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://www.york.ca/wps/wcm/connect/yorkpublic/ee9868ec-9778-49d4-bbdd-0fe9ab893feb/202032_47_
|
unknown
|
|
|
|
https://www.canada.ca/en/health-canada/services/drugs-health-products/disinfectants/covid-19/list.ht
|
unknown
|
|
|
|
https://www.ontario.ca/page/develop-your-covid-19-workplace-safety-plan)
|
unknown
|
|
|
|
https://www.york.ca/wps/portal/yorkhome/health/yr/covid-19/resourcesfactsheetsandvideos/covid19resou
|
unknown
|
|
|
|
https://www.ontario.ca/page/enhancing-public-health-and-workplace-safety-measures-provincewide-shutd
|
unknown
|
|
|
|
https://www.york.ca/wps/wcm/connect/yorkpublic/895d5afe-82c5-4595-bb56-3abdd6bc8af8/202032_48_Assess
|
unknown
|
|
|
|
https://www.york.ca/wps/wcm/connect/yorkpublic/8b46e61b-af4d-4787-a77b-4100b75df288/202032-03b_Pract
|
unknown
|
|
|
|
https://www.york.ca/wps/wcm/connect/yorkpublic/fc123a83-1f2f-489b-a525-0dd68d5b2f73/48_Assessment
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://www.wsps.ca/WSPS/media/Site/Resources/Downloads/covid-19-retail-health-and-safety-guidance.p
|
unknown
|
|
|
|
https://www.york.ca/wps/wcm/connect/yorkpublic/fb2ac24e-7d80-4b5b-89ee-60d650f785d1/202032_49_
|
unknown
|
|
|
|
https://covid-19.ontario.ca/covid-19-help-businesses-ontario)
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
https://www.ontario.ca/page/reopening-ontario)
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
https://www.ontario.ca/laws/regulation/170493)
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
https://www.ontario.ca/laws/regulation/200082)
|
unknown
|
|
|
|
https://www.york.ca/wps/portal/yorkhome/health/yr/covid-19/symptomstransmissiontreatmentandtesting/)
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://www.ontario.ca/page/restaurant-and-food-services-health-and-safety-during-covid-19)
|
unknown
|
|
|
|
https://www.wsps.ca/WSPS/media/Site/Resources/Downloads/covid-19-sales-health-and-safety-guidance.pd
|
unknown
|
|
|
|
http://www.york.ca/mandatorymasks)
|
unknown
|
|
|
|
https://www.ontario.ca/page/ministry-labour-training-skills-development)
|
unknown
|
|
|
|
https://www.york.ca/wps/wcm/connect/yorkpublic/5637cc20-d777-496f-a57d-0754abe81490/202032-10e_lower
|
unknown
|
|
There are 22 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
getrave.ca
|
69.10.147.140
|
|
|
|
www.getrave.ca
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
69.10.147.140
|
getrave.ca
|
Canada
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{300A0064-CD18-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
aDefaultRHPViewModeL
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
bExpandRHPInViewer
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
smailto
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
bLastExitNormal
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
uLastAppLaunchTimeStamp
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
iNumReaderLaunches
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
bMaximizeNextDocument
|
|
There are 22 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5CD997000
|
unkown
|
page readonly
|
|
|
|
1944691A000
|
unkown
|
page read and write
|
|
|
|
26923D69000
|
unkown
|
page read and write
|
|
|
|
7FF509FB4000
|
unkown
|
page readonly
|
|
|
|
B67617A000
|
unkown
|
page read and write
|
|
|
|
7FF5046BA000
|
unkown
|
page readonly
|
|
|
|
194489EC000
|
unkown
|
page read and write
|
|
|
|
18D02600000
|
unkown
|
page readonly
|
|
|
|
D8AAF7D000
|
unkown
|
page read and write
|
|
|
|
29EDC64B000
|
unkown
|
page read and write
|
|
|
|
9063FF8000
|
unkown
|
page read and write
|
|
|
|
7FF533C19000
|
unkown
|
page readonly
|
|
|
|
26923D63000
|
unkown
|
page read and write
|
|
|
|
29EDC510000
|
unkown
|
page write copy
|
|
|
|
19449410000
|
unkown
|
page read and write
|
|
|
|
19448A12000
|
unkown
|
page read and write
|
|
|
|
7FF5CD577000
|
unkown
|
page readonly
|
|
|
|
2568A308000
|
unkown
|
page read and write
|
|
|
|
7FF5D0E0B000
|
unkown
|
page readonly
|
|
|
|
7FF5047B6000
|
unkown
|
page readonly
|
|
|
|
1EB1EE6D000
|
unkown
|
page read and write
|
|
|
|
7FF5D1013000
|
unkown
|
page readonly
|
|
|
|
7FF5CDA71000
|
unkown
|
page readonly
|
|
|
|
7FF57AC17000
|
unkown
|
page readonly
|
|
|
|
7FF509B30000
|
unkown
|
page readonly
|
|
|
|
26924202000
|
unkown
|
page read and write
|
|
|
|
22EB29AB000
|
heap default
|
page read and write
|
|
|
|
19448650000
|
unkown
|
page readonly
|
|
|
|
29EDC600000
|
unkown
|
page read and write
|
|
|
|
25BC1970000
|
unkown
|
page readonly
|
|
|
|
1EB1F000000
|
unkown
|
page readonly
|
|
|
|
19446700000
|
heap default
|
page read and write
|
|
|
|
7FF5A82B4000
|
unkown
|
page readonly
|
|
|
|
26923D12000
|
unkown
|
page read and write
|
|
|
|
7FF5CDC64000
|
unkown
|
page readonly
|
|
|
|
7FF5D113A000
|
unkown
|
page readonly
|
|
|
|
25BBFD10000
|
heap private
|
page read and write
|
|
|
|
26923D86000
|
unkown
|
page read and write
|
|
|
|
26923D9A000
|
unkown
|
page read and write
|
|
|
|
65423AE000
|
unkown
|
page read and write
|
|
|
|
7FF5A826A000
|
unkown
|
page readonly
|
|
|
|
22EB29B2000
|
unkown
|
page read and write
|
|
|
|
1944687A000
|
unkown
|
page read and write
|
|
|
|
7FF509F9C000
|
unkown
|
page readonly
|
|
|
|
7FF533BA5000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB6D000
|
unkown
|
page readonly
|
|
|
|
25BBFE3F000
|
unkown
|
page read and write
|
|
|
|
26923D9B000
|
unkown
|
page read and write
|
|
|
|
7FF5CD521000
|
unkown
|
page readonly
|
|
|
|
798E07E000
|
unkown
|
page read and write
|
|
|
|
18D01B60000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC4F000
|
unkown
|
page readonly
|
|
|
|
7FF5C7AFC000
|
unkown
|
page readonly
|
|
|
|
7FF5CD7F5000
|
unkown
|
page readonly
|
|
|
|
29EDC602000
|
unkown
|
page read and write
|
|
|
|
26923D18000
|
unkown
|
page read and write
|
|
|
|
7FF5D1134000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
7FF5D0EA9000
|
unkown
|
page readonly
|
|
|
|
29EDC702000
|
unkown
|
page read and write
|
|
|
|
7FF509CE7000
|
unkown
|
page readonly
|
|
|
|
25BBFE13000
|
unkown
|
page read and write
|
|
|
|
18D01B50000
|
heap default
|
page read and write
|
|
|
|
7FF5C7BC1000
|
unkown
|
page readonly
|
|
|
|
19448934000
|
unkown
|
page read and write
|
|
|
|
19448900000
|
unkown
|
page read and write
|
|
|
|
22EB29C6000
|
unkown
|
page read and write
|
|
|
|
26924190000
|
unkown
|
page read and write
|
|
|
|
65427FB000
|
unkown
|
page read and write
|
|
|
|
7FF5CDBF4000
|
unkown
|
page readonly
|
|
|
|
26923DA3000
|
unkown
|
page read and write
|
|
|
|
29EDC3D0000
|
heap private
|
page read and write
|
|
|
|
7FF5B99A8000
|
unkown
|
page readonly
|
|
|
|
7FF5CDD12000
|
unkown
|
page readonly
|
|
|
|
7FF5A8244000
|
unkown
|
page readonly
|
|
|
|
29A45670000
|
unkown
|
page read and write
|
|
|
|
9063DF9000
|
unkown
|
page read and write
|
|
|
|
7FF5CD426000
|
unkown
|
page readonly
|
|
|
|
2568A302000
|
unkown
|
page read and write
|
|
|
|
7FF533BD8000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A32000
|
unkown
|
page readonly
|
|
|
|
22EB29B7000
|
heap default
|
page read and write
|
|
|
|
19446902000
|
unkown
|
page read and write
|
|
|
|
85BC6FD000
|
unkown
|
page read and write
|
|
|
|
269233D0000
|
heap private
|
page read and write
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
7FF5C7B49000
|
unkown
|
page readonly
|
|
|
|
29EDC430000
|
heap default
|
page read and write
|
|
|
|
7FF533B40000
|
unkown
|
page readonly
|
|
|
|
7FF504A4E000
|
unkown
|
page readonly
|
|
|
|
1EB1FB40000
|
unkown
|
page readonly
|
|
|
|
26923D5C000
|
unkown
|
page read and write
|
|
|
|
2568A24B000
|
unkown
|
page read and write
|
|
|
|
7FF509FC4000
|
unkown
|
page readonly
|
|
|
|
7FF533BAB000
|
unkown
|
page readonly
|
|
|
|
25BC00D0000
|
unkown
|
page readonly
|
|
|
|
19F3B902000
|
unkown
|
page read and write
|
|
|
|
29A45310000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC20000
|
unkown
|
page readonly
|
|
|
|
26923670000
|
unkown
|
page read and write
|
|
|
|
29EDC672000
|
unkown
|
page read and write
|
|
|
|
7FF5D1055000
|
unkown
|
page readonly
|
|
|
|
29A43720000
|
heap default
|
page read and write
|
|
|
|
7FF509B45000
|
unkown
|
page readonly
|
|
|
|
194489C0000
|
unkown
|
page read and write
|
|
|
|
7FF509F6A000
|
unkown
|
page readonly
|
|
|
|
22EB29A0000
|
heap default
|
page read and write
|
|
|
|
29EDC670000
|
unkown
|
page read and write
|
|
|
|
19448943000
|
unkown
|
page read and write
|
|
|
|
7FF5A82A7000
|
unkown
|
page readonly
|
|
|
|
7FF509FA7000
|
unkown
|
page readonly
|
|
|
|
7FF5A82E9000
|
unkown
|
page readonly
|
|
|
|
7FF509E13000
|
unkown
|
page readonly
|
|
|
|
7FF5A8361000
|
unkown
|
page readonly
|
|
|
|
7FF54373D000
|
unkown
|
page readonly
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
26923D48000
|
unkown
|
page read and write
|
|
|
|
7FF533BFE000
|
unkown
|
page readonly
|
|
|
|
7FF57ACF1000
|
unkown
|
page readonly
|
|
|
|
7FF57AF16000
|
unkown
|
page readonly
|
|
|
|
25BBFF02000
|
unkown
|
page read and write
|
|
|
|
7FF54360D000
|
unkown
|
page readonly
|
|
|
|
7FF50A061000
|
unkown
|
page readonly
|
|
|
|
7FF504A34000
|
unkown
|
page readonly
|
|
|
|
7FF533966000
|
unkown
|
page readonly
|
|
|
|
7FF5B95FC000
|
unkown
|
page readonly
|
|
|
|
29EDC713000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
7FF5A81B6000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC88000
|
unkown
|
page readonly
|
|
|
|
1944895F000
|
unkown
|
page read and write
|
|
|
|
19F3B86C000
|
unkown
|
page read and write
|
|
|
|
22EB2AC0000
|
unkown
|
page readonly
|
|
|
|
269236D5000
|
unkown
|
page read and write
|
|
|
|
7FF543714000
|
unkown
|
page readonly
|
|
|
|
26923D98000
|
unkown
|
page read and write
|
|
|
|
7FF5D1088000
|
unkown
|
page readonly
|
|
|
|
8E5ADFF000
|
unkown
|
page read and write
|
|
|
|
26923D79000
|
unkown
|
page read and write
|
|
|
|
1944897C000
|
unkown
|
page read and write
|
|
|
|
7FF504A61000
|
unkown
|
page readonly
|
|
|
|
26923D00000
|
unkown
|
page read and write
|
|
|
|
1944693B000
|
unkown
|
page read and write
|
|
|
|
18D01D08000
|
unkown
|
page read and write
|
|
|
|
19448E00000
|
unkown
|
page readonly
|
|
|
|
18D01C02000
|
unkown
|
page read and write
|
|
|
|
26923708000
|
unkown
|
page read and write
|
|
|
|
890D1FB000
|
unkown
|
page read and write
|
|
|
|
26923DD9000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
26923D86000
|
unkown
|
page read and write
|
|
|
|
19448B82000
|
unkown
|
page read and write
|
|
|
|
7FF5C7BC2000
|
unkown
|
page readonly
|
|
|
|
194482F0000
|
unkown
|
page readonly
|
|
|
|
7FF5CD7E0000
|
unkown
|
page readonly
|
|
|
|
7FF5A8287000
|
unkown
|
page readonly
|
|
|
|
7FF5436F7000
|
unkown
|
page readonly
|
|
|
|
7FF57AEEA000
|
unkown
|
page readonly
|
|
|
|
85BC7FD000
|
unkown
|
page read and write
|
|
|
|
7FF5B9994000
|
unkown
|
page readonly
|
|
|
|
2568A200000
|
unkown
|
page read and write
|
|
|
|
7FF5B96FB000
|
unkown
|
page readonly
|
|
|
|
7FF509F75000
|
unkown
|
page readonly
|
|
|
|
26924202000
|
unkown
|
page read and write
|
|
|
|
26923652000
|
unkown
|
page read and write
|
|
|
|
7FF509DC1000
|
unkown
|
page readonly
|
|
|
|
7FF543624000
|
unkown
|
page readonly
|
|
|
|
7FF5A827B000
|
unkown
|
page readonly
|
|
|
|
1EB1EE29000
|
unkown
|
page read and write
|
|
|
|
7FF57AF19000
|
unkown
|
page readonly
|
|
|
|
7FF509F70000
|
unkown
|
page readonly
|
|
|
|
26923D82000
|
unkown
|
page read and write
|
|
|
|
7FF5A8362000
|
unkown
|
page readonly
|
|
|
|
906377E000
|
unkown
|
page read and write
|
|
|
|
19F3BA00000
|
unkown
|
page readonly
|
|
|
|
8E5AF7C000
|
unkown
|
page read and write
|
|
|
|
85BC47E000
|
unkown
|
page read and write
|
|
|
|
26923800000
|
unkown
|
page readonly
|
|
|
|
29EDC674000
|
unkown
|
page read and write
|
|
|
|
26923D98000
|
unkown
|
page read and write
|
|
|
|
19448660000
|
unkown
|
page read and write
|
|
|
|
7FF5A816B000
|
unkown
|
page readonly
|
|
|
|
26923D98000
|
unkown
|
page read and write
|
|
|
|
7FF533B9A000
|
unkown
|
page readonly
|
|
|
|
26923D9A000
|
unkown
|
page read and write
|
|
|
|
26923D6C000
|
unkown
|
page read and write
|
|
|
|
26923DC7000
|
unkown
|
page read and write
|
|
|
|
7FF543736000
|
unkown
|
page readonly
|
|
|
|
7FF5046C7000
|
unkown
|
page readonly
|
|
|
|
7FF5B9706000
|
unkown
|
page readonly
|
|
|
|
2568AF40000
|
unkown
|
page readonly
|
|
|
|
890D179000
|
unkown
|
page read and write
|
|
|
|
7FF533BF4000
|
unkown
|
page readonly
|
|
|
|
26923D28000
|
unkown
|
page read and write
|
|
|
|
7FF5CD835000
|
unkown
|
page readonly
|
|
|
|
19F3B83F000
|
unkown
|
page read and write
|
|
|
|
26924261000
|
unkown
|
page read and write
|
|
|
|
7FF5A825A000
|
unkown
|
page readonly
|
|
|
|
7FF57AE0C000
|
unkown
|
page readonly
|
|
|
|
29EDC560000
|
unkown
|
page readonly
|
|
|
|
7FF5A80A6000
|
unkown
|
page readonly
|
|
|
|
7FF509FDE000
|
unkown
|
page readonly
|
|
|
|
7FF5C7AFF000
|
unkown
|
page readonly
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
7FF5D0F53000
|
unkown
|
page readonly
|
|
|
|
7FF5A80C1000
|
unkown
|
page readonly
|
|
|
|
26923716000
|
unkown
|
page read and write
|
|
|
|
7FF5D0D27000
|
unkown
|
page readonly
|
|
|
|
26924190000
|
unkown
|
page read and write
|
|
|
|
2568A257000
|
unkown
|
page read and write
|
|
|
|
7FF5046BF000
|
unkown
|
page readonly
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A31000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
22EB29DE000
|
unkown
|
page read and write
|
|
|
|
7FF5436AA000
|
unkown
|
page readonly
|
|
|
|
19448985000
|
unkown
|
page read and write
|
|
|
|
2568A256000
|
unkown
|
page read and write
|
|
|
|
7FF5D10CD000
|
unkown
|
page readonly
|
|
|
|
269236F9000
|
unkown
|
page read and write
|
|
|
|
29EDC672000
|
unkown
|
page read and write
|
|
|
|
269236FB000
|
unkown
|
page read and write
|
|
|
|
7FF5A82BA000
|
unkown
|
page readonly
|
|
|
|
19F3B913000
|
unkown
|
page read and write
|
|
|
|
19446880000
|
unkown
|
page read and write
|
|
|
|
29A45210000
|
unkown
|
page read and write
|
|
|
|
7FF509FE9000
|
unkown
|
page readonly
|
|
|
|
B67627E000
|
unkown
|
page read and write
|
|
|
|
26923600000
|
unkown
|
page read and write
|
|
|
|
7FF5436AC000
|
unkown
|
page readonly
|
|
|
|
26923D3A000
|
unkown
|
page read and write
|
|
|
|
26923D9C000
|
unkown
|
page read and write
|
|
|
|
29EDC672000
|
unkown
|
page read and write
|
|
|
|
90632DC000
|
unkown
|
page read and write
|
|
|
|
25BBFD80000
|
unkown
|
page write copy
|
|
|
|
7FF5339C1000
|
unkown
|
page readonly
|
|
|
|
2568A258000
|
unkown
|
page read and write
|
|
|
|
7FF5B9903000
|
unkown
|
page readonly
|
|
|
|
7FF5CD78E000
|
unkown
|
page readonly
|
|
|
|
798E0FE000
|
unkown
|
page read and write
|
|
|
|
7FF533AA8000
|
unkown
|
page readonly
|
|
|
|
2568A246000
|
unkown
|
page read and write
|
|
|
|
19449210000
|
unkown
|
page read and write
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
26924202000
|
unkown
|
page read and write
|
|
|
|
7FF5D1142000
|
unkown
|
page readonly
|
|
|
|
D8AAB7F000
|
unkown
|
page read and write
|
|
|
|
7FF5B99BD000
|
unkown
|
page readonly
|
|
|
|
D8AAC75000
|
unkown
|
page read and write
|
|
|
|
19F3B86A000
|
unkown
|
page read and write
|
|
|
|
85BC87C000
|
unkown
|
page read and write
|
|
|
|
7FF5CDB8C000
|
unkown
|
page readonly
|
|
|
|
26923D82000
|
unkown
|
page read and write
|
|
|
|
26923D79000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
2568A202000
|
unkown
|
page read and write
|
|
|
|
19F3D270000
|
unkown
|
page read and write
|
|
|
|
798DDDB000
|
unkown
|
page read and write
|
|
|
|
22EB2AB0000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
7FF57AEAB000
|
unkown
|
page readonly
|
|
|
|
7FF57AEA5000
|
unkown
|
page readonly
|
|
|
|
7FF57AECC000
|
unkown
|
page readonly
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
7FF5B9940000
|
unkown
|
page readonly
|
|
|
|
29A43730000
|
unkown
|
page readonly
|
|
|
|
26923D92000
|
unkown
|
page read and write
|
|
|
|
7FF5A7F47000
|
unkown
|
page readonly
|
|
|
|
19448913000
|
unkown
|
page read and write
|
|
|
|
1EB1EF02000
|
unkown
|
page read and write
|
|
|
|
7FF5C7423000
|
unkown
|
page readonly
|
|
|
|
65422AC000
|
unkown
|
page read and write
|
|
|
|
7FF5C7BB4000
|
unkown
|
page readonly
|
|
|
|
7FF509CF0000
|
unkown
|
page readonly
|
|
|
|
B675DEB000
|
unkown
|
page read and write
|
|
|
|
7FF5CDC1E000
|
unkown
|
page readonly
|
|
|
|
7FF5C7BBA000
|
unkown
|
page readonly
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
26923D4E000
|
unkown
|
page read and write
|
|
|
|
194486C0000
|
unkown
|
page readonly
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
D6E967A000
|
unkown
|
page read and write
|
|
|
|
29EDC66E000
|
unkown
|
page read and write
|
|
|
|
26923430000
|
heap default
|
page read and write
|
|
|
|
19F3B86A000
|
unkown
|
page read and write
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
8E5AEFF000
|
unkown
|
page read and write
|
|
|
|
29A43913000
|
unkown
|
page read and write
|
|
|
|
8E5AC7A000
|
unkown
|
page read and write
|
|
|
|
7FF509EBD000
|
unkown
|
page readonly
|
|
|
|
7FF5CD9DB000
|
unkown
|
page readonly
|
|
|
|
22EB2C50000
|
heap private
|
page read and write
|
|
|
|
1EB1EE4F000
|
unkown
|
page read and write
|
|
|
|
7FF5339C5000
|
unkown
|
page readonly
|
|
|
|
D6E96FA000
|
unkown
|
page read and write
|
|
|
|
7FF57AF0E000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB73000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC57000
|
unkown
|
page readonly
|
|
|
|
19449110000
|
unkown
|
page read and write
|
|
|
|
7FF5437AA000
|
unkown
|
page readonly
|
|
|
|
19448991000
|
unkown
|
page read and write
|
|
|
|
7FF5B960F000
|
unkown
|
page readonly
|
|
|
|
7FF5049B3000
|
unkown
|
page readonly
|
|
|
|
7FF5A825C000
|
unkown
|
page readonly
|
|
|
|
7FF504A6D000
|
unkown
|
page readonly
|
|
|
|
7FF5CD837000
|
unkown
|
page readonly
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
29A43813000
|
unkown
|
page read and write
|
|
|
|
7FF5CDA54000
|
unkown
|
page readonly
|
|
|
|
7FF50A062000
|
unkown
|
page readonly
|
|
|
|
7FF5CDBC0000
|
unkown
|
page readonly
|
|
|
|
269236EB000
|
unkown
|
page read and write
|
|
|
|
19446879000
|
unkown
|
page read and write
|
|
|
|
7FF5CDC4C000
|
unkown
|
page readonly
|
|
|
|
890D27E000
|
unkown
|
page read and write
|
|
|
|
26923D69000
|
unkown
|
page read and write
|
|
|
|
18D01C00000
|
unkown
|
page read and write
|
|
|
|
19448960000
|
unkown
|
page read and write
|
|
|
|
7FF5CDC25000
|
unkown
|
page readonly
|
|
|
|
194489E4000
|
unkown
|
page read and write
|
|
|
|
19448C00000
|
unkown
|
page read and write
|
|
|
|
7FF5CDACA000
|
unkown
|
page readonly
|
|
|
|
7FF5A823F000
|
unkown
|
page readonly
|
|
|
|
7FF5A8233000
|
unkown
|
page readonly
|
|
|
|
26923C02000
|
unkown
|
page read and write
|
|
|
|
7FF5D0E71000
|
unkown
|
page readonly
|
|
|
|
26923D4A000
|
unkown
|
page read and write
|
|
|
|
26923D99000
|
unkown
|
page read and write
|
|
|
|
26923D86000
|
unkown
|
page read and write
|
|
|
|
7FF5CDD04000
|
unkown
|
page readonly
|
|
|
|
19F3B86B000
|
unkown
|
page read and write
|
|
|
|
7FF509EDC000
|
unkown
|
page readonly
|
|
|
|
19F3B780000
|
heap default
|
page read and write
|
|
|
|
7FF57AC20000
|
unkown
|
page readonly
|
|
|
|
7FF5CDBC2000
|
unkown
|
page readonly
|
|
|
|
890CDCB000
|
unkown
|
page read and write
|
|
|
|
194489AF000
|
unkown
|
page read and write
|
|
|
|
19446855000
|
unkown
|
page read and write
|
|
|
|
26923D5D000
|
unkown
|
page read and write
|
|
|
|
26923D83000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
29EDC672000
|
unkown
|
page read and write
|
|
|
|
19F3B790000
|
unkown
|
page write copy
|
|
|
|
2568A0E0000
|
heap private
|
page read and write
|
|
|
|
1944695B000
|
unkown
|
page read and write
|
|
|
|
7FF5C77AA000
|
unkown
|
page readonly
|
|
|
|
7FF5A7B71000
|
unkown
|
page readonly
|
|
|
|
7FF5D10C6000
|
unkown
|
page readonly
|
|
|
|
29A43856000
|
unkown
|
page read and write
|
|
|
|
26923D37000
|
unkown
|
page read and write
|
|
|
|
26923BE0000
|
unkown
|
page readonly
|
|
|
|
2568A140000
|
heap default
|
page read and write
|
|
|
|
7FF5CDB28000
|
unkown
|
page readonly
|
|
|
|
2568A4D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D0F31000
|
unkown
|
page readonly
|
|
|
|
2568A28A000
|
unkown
|
page read and write
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
7FF57AA60000
|
unkown
|
page readonly
|
|
|
|
7FF57AD43000
|
unkown
|
page readonly
|
|
|
|
7FF5B919D000
|
unkown
|
page readonly
|
|
|
|
7FF5A8210000
|
unkown
|
page readonly
|
|
|
|
85BC37A000
|
unkown
|
page read and write
|
|
|
|
194489F1000
|
unkown
|
page read and write
|
|
|
|
7FF5046AC000
|
unkown
|
page readonly
|
|
|
|
26923D6B000
|
unkown
|
page read and write
|
|
|
|
26923D69000
|
unkown
|
page read and write
|
|
|
|
7FF5A82E6000
|
unkown
|
page readonly
|
|
|
|
7FF504849000
|
unkown
|
page readonly
|
|
|
|
1EB1EE56000
|
unkown
|
page read and write
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
1EB1EF13000
|
unkown
|
page read and write
|
|
|
|
90633DE000
|
unkown
|
page read and write
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
26923D32000
|
unkown
|
page read and write
|
|
|
|
7FF509ED4000
|
unkown
|
page readonly
|
|
|
|
26923D96000
|
unkown
|
page read and write
|
|
|
|
26923626000
|
unkown
|
page read and write
|
|
|
|
7FF57ADED000
|
unkown
|
page readonly
|
|
|
|
D8AB17E000
|
unkown
|
page read and write
|
|
|
|
18D01AF0000
|
heap private
|
page read and write
|
|
|
|
19448A84000
|
unkown
|
page read and write
|
|
|
|
22EB29CE000
|
unkown
|
page read and write
|
|
|
|
7FF509770000
|
unkown
|
page readonly
|
|
|
|
26924243000
|
unkown
|
page read and write
|
|
|
|
26923DB9000
|
unkown
|
page read and write
|
|
|
|
7FF57AF1D000
|
unkown
|
page readonly
|
|
|
|
7FF509EC3000
|
unkown
|
page readonly
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
85BC2F9000
|
unkown
|
page read and write
|
|
|
|
1944692B000
|
unkown
|
page read and write
|
|
|
|
25BBFE29000
|
unkown
|
page read and write
|
|
|
|
7FF5D0D0C000
|
unkown
|
page readonly
|
|
|
|
1EB1F540000
|
unkown
|
page read and write
|
|
|
|
7FF509FD8000
|
unkown
|
page readonly
|
|
|
|
7FF57AEA0000
|
unkown
|
page readonly
|
|
|
|
7FF54372E000
|
unkown
|
page readonly
|
|
|
|
26924202000
|
unkown
|
page read and write
|
|
|
|
18D02940000
|
unkown
|
page readonly
|
|
|
|
19446A50000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC0C000
|
unkown
|
page readonly
|
|
|
|
7FF5A7DD2000
|
unkown
|
page readonly
|
|
|
|
7FF5A8036000
|
unkown
|
page readonly
|
|
|
|
D6E929B000
|
unkown
|
page read and write
|
|
|
|
85BC5FA000
|
unkown
|
page read and write
|
|
|
|
19446800000
|
unkown
|
page read and write
|
|
|
|
B67607E000
|
unkown
|
page read and write
|
|
|
|
26923686000
|
unkown
|
page read and write
|
|
|
|
194489A6000
|
unkown
|
page read and write
|
|
|
|
7FF509F87000
|
unkown
|
page readonly
|
|
|
|
26923D31000
|
unkown
|
page read and write
|
|
|
|
D8AAE77000
|
unkown
|
page read and write
|
|
|
|
7FF57AD9B000
|
unkown
|
page readonly
|
|
|
|
7FF5437B1000
|
unkown
|
page readonly
|
|
|
|
269236A6000
|
unkown
|
page read and write
|
|
|
|
18D01C4E000
|
unkown
|
page read and write
|
|
|
|
7FF57AD9E000
|
unkown
|
page readonly
|
|
|
|
7FF5D0D1F000
|
unkown
|
page readonly
|
|
|
|
26923D95000
|
unkown
|
page read and write
|
|
|
|
19F3BAD0000
|
unkown
|
page readonly
|
|
|
|
7FF543704000
|
unkown
|
page readonly
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
18D01B80000
|
unkown
|
page read and write
|
|
|
|
19446918000
|
unkown
|
page read and write
|
|
|
|
29EDC674000
|
unkown
|
page read and write
|
|
|
|
7FF5A8270000
|
unkown
|
page readonly
|
|
|
|
7FF5436C0000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC0A000
|
unkown
|
page readonly
|
|
|
|
7FF509FBA000
|
unkown
|
page readonly
|
|
|
|
7FF5A8178000
|
unkown
|
page readonly
|
|
|
|
19448710000
|
unkown
|
page readonly
|
|
|
|
D3297AF000
|
unkown
|
page read and write
|
|
|
|
269236B1000
|
unkown
|
page read and write
|
|
|
|
29A43C50000
|
unkown
|
page readonly
|
|
|
|
7FF5B9848000
|
unkown
|
page readonly
|
|
|
|
7FF504A1C000
|
unkown
|
page readonly
|
|
|
|
7FF5CDA20000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB1B000
|
unkown
|
page readonly
|
|
|
|
7FF53385C000
|
unkown
|
page readonly
|
|
|
|
7FF57AECF000
|
unkown
|
page readonly
|
|
|
|
85BC8FD000
|
unkown
|
page read and write
|
|
|
|
9063EF8000
|
unkown
|
page read and write
|
|
|
|
7FF5CD9A0000
|
unkown
|
page readonly
|
|
|
|
7FF543295000
|
unkown
|
page readonly
|
|
|
|
85BC4FB000
|
unkown
|
page read and write
|
|
|
|
7FF504990000
|
unkown
|
page readonly
|
|
|
|
7FF57AE8A000
|
unkown
|
page readonly
|
|
|
|
7FF57AA66000
|
unkown
|
page readonly
|
|
|
|
7FF5A82D8000
|
unkown
|
page readonly
|
|
|
|
26924190000
|
unkown
|
page read and write
|
|
|
|
194486F0000
|
unkown
|
page read and write
|
|
|
|
25BBFE00000
|
unkown
|
page read and write
|
|
|
|
7FF5B993A000
|
unkown
|
page readonly
|
|
|
|
26923D92000
|
unkown
|
page read and write
|
|
|
|
7FF5CDC99000
|
unkown
|
page readonly
|
|
|
|
1944897C000
|
unkown
|
page read and write
|
|
|
|
26924254000
|
unkown
|
page read and write
|
|
|
|
7FF5D107F000
|
unkown
|
page readonly
|
|
|
|
19446873000
|
unkown
|
page read and write
|
|
|
|
7FF543563000
|
unkown
|
page readonly
|
|
|
|
1944685A000
|
unkown
|
page read and write
|
|
|
|
7FF504A58000
|
unkown
|
page readonly
|
|
|
|
7FF5A8173000
|
unkown
|
page readonly
|
|
|
|
19F3B800000
|
unkown
|
page read and write
|
|
|
|
269236EC000
|
unkown
|
page read and write
|
|
|
|
7FF5047AB000
|
unkown
|
page readonly
|
|
|
|
7FF5C7B1A000
|
unkown
|
page readonly
|
|
|
|
7FF5C7AD5000
|
unkown
|
page readonly
|
|
|
|
7FF5B998A000
|
unkown
|
page readonly
|
|
|
|
890D0FE000
|
unkown
|
page read and write
|
|
|
|
19F3B86B000
|
unkown
|
page read and write
|
|
|
|
7FF543613000
|
unkown
|
page readonly
|
|
|
|
26923629000
|
unkown
|
page read and write
|
|
|
|
7FF509776000
|
unkown
|
page readonly
|
|
|
|
7FF533BE4000
|
unkown
|
page readonly
|
|
|
|
26924140000
|
unkown
|
page write copy
|
|
|
|
7FF5C7B14000
|
unkown
|
page readonly
|
|
|
|
7FF533C1D000
|
unkown
|
page readonly
|
|
|
|
29A43800000
|
unkown
|
page read and write
|
|
|
|
7FF5D104E000
|
unkown
|
page readonly
|
|
|
|
19448802000
|
unkown
|
page read and write
|
|
|
|
18D01B70000
|
unkown
|
page readonly
|
|
|
|
7FF5049EA000
|
unkown
|
page readonly
|
|
|
|
26923D5A000
|
unkown
|
page read and write
|
|
|
|
26923D8B000
|
unkown
|
page read and write
|
|
|
|
19F3B86A000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
26923D98000
|
unkown
|
page read and write
|
|
|
|
7FF5CDC37000
|
unkown
|
page readonly
|
|
|
|
26923D5D000
|
unkown
|
page read and write
|
|
|
|
19448B02000
|
unkown
|
page read and write
|
|
|
|
19449310000
|
unkown
|
page read and write
|
|
|
|
7FF5A7E49000
|
unkown
|
page readonly
|
|
|
|
19446A00000
|
unkown
|
page write copy
|
|
|
|
890D2FA000
|
unkown
|
page read and write
|
|
|
|
2568A239000
|
unkown
|
page read and write
|
|
|
|
7FF5A7F3F000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
7FF504A07000
|
unkown
|
page readonly
|
|
|
|
7FF5B99B9000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC6A000
|
unkown
|
page readonly
|
|
|
|
19448B42000
|
unkown
|
page read and write
|
|
|
|
18D01C48000
|
unkown
|
page read and write
|
|
|
|
29EDC674000
|
unkown
|
page read and write
|
|
|
|
2568A23C000
|
unkown
|
page read and write
|
|
|
|
26923D69000
|
unkown
|
page read and write
|
|
|
|
194468C6000
|
unkown
|
page read and write
|
|
|
|
7FF5CDC7F000
|
unkown
|
page readonly
|
|
|
|
7FF504815000
|
unkown
|
page readonly
|
|
|
|
7FF5048F3000
|
unkown
|
page readonly
|
|
|
|
7FF5D104A000
|
unkown
|
page readonly
|
|
|
|
7FF54362C000
|
unkown
|
page readonly
|
|
|
|
26924202000
|
unkown
|
page read and write
|
|
|
|
D3296AB000
|
unkown
|
page read and write
|
|
|
|
7FF533BCC000
|
unkown
|
page readonly
|
|
|
|
7FF57AEE4000
|
unkown
|
page readonly
|
|
|
|
26923D92000
|
unkown
|
page read and write
|
|
|
|
7FF5CD6FE000
|
unkown
|
page readonly
|
|
|
|
7FF504A28000
|
unkown
|
page readonly
|
|
|
|
7FF5C7427000
|
unkown
|
page readonly
|
|
|
|
7FF57AF84000
|
unkown
|
page readonly
|
|
|
|
7FF5B9761000
|
unkown
|
page readonly
|
|
|
|
85BC279000
|
unkown
|
page read and write
|
|
|
|
7FF504A1F000
|
unkown
|
page readonly
|
|
|
|
7FF5C7AD0000
|
unkown
|
page readonly
|
|
|
|
7FF509FCF000
|
unkown
|
page readonly
|
|
|
|
7FF50A05A000
|
unkown
|
page readonly
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
7FF509F5C000
|
unkown
|
page readonly
|
|
|
|
194486D0000
|
unkown
|
page read and write
|
|
|
|
25BBFD70000
|
heap default
|
page read and write
|
|
|
|
7FF5A82CE000
|
unkown
|
page readonly
|
|
|
|
D8AB07F000
|
unkown
|
page read and write
|
|
|
|
7FF5CDAC3000
|
unkown
|
page readonly
|
|
|
|
194481F0000
|
unkown
|
page read and write
|
|
|
|
26923D6B000
|
unkown
|
page read and write
|
|
|
|
7FF5A835A000
|
unkown
|
page readonly
|
|
|
|
D32972F000
|
unkown
|
page read and write
|
|
|
|
26923D96000
|
unkown
|
page read and write
|
|
|
|
7FF504A66000
|
unkown
|
page readonly
|
|
|
|
7FF5B9A2A000
|
unkown
|
page readonly
|
|
|
|
7FF57AEB7000
|
unkown
|
page readonly
|
|
|
|
7FF509F6E000
|
unkown
|
page readonly
|
|
|
|
19448A00000
|
unkown
|
page read and write
|
|
|
|
7FF533A81000
|
unkown
|
page readonly
|
|
|
|
7FF5C7B08000
|
unkown
|
page readonly
|
|
|
|
7FF533BEA000
|
unkown
|
page readonly
|
|
|
|
7FF5D1094000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
798E1F5000
|
unkown
|
page read and write
|
|
|
|
19446710000
|
unkown
|
page readonly
|
|
|
|
26923D95000
|
unkown
|
page read and write
|
|
|
|
D6E97FF000
|
unkown
|
page read and write
|
|
|
|
798E2FB000
|
unkown
|
page read and write
|
|
|
|
7FF5436EF000
|
unkown
|
page readonly
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
26923D94000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
7FF5A824F000
|
unkown
|
page readonly
|
|
|
|
26923D5C000
|
unkown
|
page read and write
|
|
|
|
7FF5A82E1000
|
unkown
|
page readonly
|
|
|
|
26923D69000
|
unkown
|
page read and write
|
|
|
|
26923D5C000
|
unkown
|
page read and write
|
|
|
|
7FF57AEFF000
|
unkown
|
page readonly
|
|
|
|
7FF5D0E16000
|
unkown
|
page readonly
|
|
|
|
7FF5A8095000
|
unkown
|
page readonly
|
|
|
|
7FF5B9984000
|
unkown
|
page readonly
|
|
|
|
7FF5A804F000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB23000
|
unkown
|
page readonly
|
|
|
|
1EB1ED80000
|
heap private
|
page read and write
|
|
|
|
26923D36000
|
unkown
|
page read and write
|
|
|
|
2568A271000
|
unkown
|
page read and write
|
|
|
|
2568A253000
|
unkown
|
page read and write
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
7FF5C7B4D000
|
unkown
|
page readonly
|
|
|
|
1EB1F602000
|
unkown
|
page read and write
|
|
|
|
7FF5D105B000
|
unkown
|
page readonly
|
|
|
|
7FF533C8A000
|
unkown
|
page readonly
|
|
|
|
7FF5C7B2E000
|
unkown
|
page readonly
|
|
|
|
1EB1EE51000
|
unkown
|
page read and write
|
|
|
|
7FF5A7F2C000
|
unkown
|
page readonly
|
|
|
|
85BC17A000
|
unkown
|
page read and write
|
|
|
|
19449010000
|
unkown
|
page read and write
|
|
|
|
7FF533C08000
|
unkown
|
page readonly
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
26923D63000
|
unkown
|
page read and write
|
|
|
|
9063B7E000
|
unkown
|
page read and write
|
|
|
|
8E5AD7F000
|
unkown
|
page read and write
|
|
|
|
26923D28000
|
unkown
|
page read and write
|
|
|
|
7FF57A6A6000
|
unkown
|
page readonly
|
|
|
|
29EDC672000
|
unkown
|
page read and write
|
|
|
|
7FF5435BE000
|
unkown
|
page readonly
|
|
|
|
2568AA02000
|
unkown
|
page read and write
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
7FF5A826E000
|
unkown
|
page readonly
|
|
|
|
269236C5000
|
unkown
|
page read and write
|
|
|
|
7FF5CD8FA000
|
unkown
|
page readonly
|
|
|
|
798E67D000
|
unkown
|
page read and write
|
|
|
|
7FF57AED7000
|
unkown
|
page readonly
|
|
|
|
7FF5048F8000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB01000
|
unkown
|
page readonly
|
|
|
|
194489A7000
|
unkown
|
page read and write
|
|
|
|
269236E8000
|
unkown
|
page read and write
|
|
|
|
25BBFDD0000
|
unkown
|
page readonly
|
|
|
|
7FF57AEF4000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC96000
|
unkown
|
page readonly
|
|
|
|
26923440000
|
unkown
|
page readonly
|
|
|
|
26923D99000
|
unkown
|
page read and write
|
|
|
|
7FF5A8048000
|
unkown
|
page readonly
|
|
|
|
65428F7000
|
unkown
|
page read and write
|
|
|
|
194489F7000
|
unkown
|
page read and write
|
|
|
|
7FF5048EB000
|
unkown
|
page readonly
|
|
|
|
19448670000
|
heap private
|
page read and write
|
|
|
|
7FF533C11000
|
unkown
|
page readonly
|
|
|
|
29EDE0A0000
|
unkown
|
page readonly
|
|
|
|
194486D0000
|
unkown
|
page read and write
|
|
|
|
7FF5B98E2000
|
unkown
|
page readonly
|
|
|
|
7FF5B99B1000
|
unkown
|
page readonly
|
|
|
|
29A43A50000
|
unkown
|
page readonly
|
|
|
|
194486D0000
|
unkown
|
page read and write
|
|
|
|
7FF5B9957000
|
unkown
|
page readonly
|
|
|
|
7FF5B9A24000
|
unkown
|
page readonly
|
|
|
|
19448700000
|
unkown
|
page read and write
|
|
|
|
29EDC440000
|
unkown
|
page readonly
|
|
|
|
7FF5A8202000
|
unkown
|
page readonly
|
|
|
|
194486E0000
|
unkown
|
page read and write
|
|
|
|
19F3B900000
|
unkown
|
page read and write
|
|
|
|
26923D56000
|
unkown
|
page read and write
|
|
|
|
26923D95000
|
unkown
|
page read and write
|
|
|
|
7FF5A80C9000
|
unkown
|
page readonly
|
|
|
|
1EB1EDF0000
|
unkown
|
page readonly
|
|
|
|
7FF509F7B000
|
unkown
|
page readonly
|
|
|
|
D6E939E000
|
unkown
|
page read and write
|
|
|
|
906335F000
|
unkown
|
page read and write
|
|
|
|
19446813000
|
unkown
|
page read and write
|
|
|
|
B6760FE000
|
unkown
|
page read and write
|
|
|
|
7FF54371F000
|
unkown
|
page readonly
|
|
|
|
7FF57AE9E000
|
unkown
|
page readonly
|
|
|
|
7FF5436BE000
|
unkown
|
page readonly
|
|
|
|
26923D8D000
|
unkown
|
page read and write
|
|
|
|
7FF542F22000
|
unkown
|
page readonly
|
|
|
|
85BBDAE000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
7FF543728000
|
unkown
|
page readonly
|
|
|
|
7FF5C7B24000
|
unkown
|
page readonly
|
|
|
|
890D07E000
|
unkown
|
page read and write
|
|
|
|
18D01C4B000
|
unkown
|
page read and write
|
|
|
|
19F3B813000
|
unkown
|
page read and write
|
|
|
|
19F3B86D000
|
unkown
|
page read and write
|
|
|
|
D8AAA7B000
|
unkown
|
page read and write
|
|
|
|
22EB2AD0000
|
unkown
|
page read and write
|
|
|
|
7FF57AE8C000
|
unkown
|
page readonly
|
|
|
|
7FF5B9617000
|
unkown
|
page readonly
|
|
|
|
7FF5B983B000
|
unkown
|
page readonly
|
|
|
|
7FF533C16000
|
unkown
|
page readonly
|
|
|
|
19448730000
|
unkown
|
page readonly
|
|
|
|
7FF504A3A000
|
unkown
|
page readonly
|
|
|
|
7FF504992000
|
unkown
|
page readonly
|
|
|
|
29A43802000
|
unkown
|
page read and write
|
|
|
|
7FF5D109A000
|
unkown
|
page readonly
|
|
|
|
19449210000
|
unkown
|
page read and write
|
|
|
|
7FF533C84000
|
unkown
|
page readonly
|
|
|
|
85BC57A000
|
unkown
|
page read and write
|
|
|
|
29EDC659000
|
unkown
|
page read and write
|
|
|
|
7FF5D10C9000
|
unkown
|
page readonly
|
|
|
|
19448945000
|
unkown
|
page read and write
|
|
|
|
26923D71000
|
unkown
|
page read and write
|
|
|
|
6542AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5B9945000
|
unkown
|
page readonly
|
|
|
|
7FF5B9765000
|
unkown
|
page readonly
|
|
|
|
2568A170000
|
unkown
|
page read and write
|
|
|
|
1EB1EF08000
|
unkown
|
page read and write
|
|
|
|
26923D9A000
|
unkown
|
page read and write
|
|
|
|
9063A77000
|
unkown
|
page read and write
|
|
|
|
7FF533877000
|
unkown
|
page readonly
|
|
|
|
7FF5437B2000
|
unkown
|
page readonly
|
|
|
|
25BBFE02000
|
unkown
|
page read and write
|
|
|
|
18D01C2A000
|
unkown
|
page read and write
|
|
|
|
7FF5436EC000
|
unkown
|
page readonly
|
|
|
|
8E5AE79000
|
unkown
|
page read and write
|
|
|
|
7FF504A5E000
|
unkown
|
page readonly
|
|
|
|
7FF5CDD11000
|
unkown
|
page readonly
|
|
|
|
1EB1F530000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC8E000
|
unkown
|
page readonly
|
|
|
|
1EB1EE4A000
|
unkown
|
page read and write
|
|
|
|
7FF5B9843000
|
unkown
|
page readonly
|
|
|
|
18D01C86000
|
unkown
|
page read and write
|
|
|
|
19449110000
|
unkown
|
page read and write
|
|
|
|
7FF543286000
|
unkown
|
page readonly
|
|
|
|
26923D82000
|
unkown
|
page read and write
|
|
|
|
7FF5CD7E6000
|
unkown
|
page readonly
|
|
|
|
25BC1870000
|
unkown
|
page read and write
|
|
|
|
D6E977F000
|
unkown
|
page read and write
|
|
|
|
7FF5D1067000
|
unkown
|
page readonly
|
|
|
|
26923713000
|
unkown
|
page read and write
|
|
|
|
B6761F9000
|
unkown
|
page read and write
|
|
|
|
7FF5B994B000
|
unkown
|
page readonly
|
|
|
|
7FF5D10BE000
|
unkown
|
page readonly
|
|
|
|
7FF5C7B3E000
|
unkown
|
page readonly
|
|
|
|
D329AFA000
|
unkown
|
page read and write
|
|
|
|
7FF5B9821000
|
unkown
|
page readonly
|
|
|
|
7FF533BA0000
|
unkown
|
page readonly
|
|
|
|
18D02402000
|
unkown
|
page read and write
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
18D01C13000
|
unkown
|
page read and write
|
|
|
|
29EDC671000
|
unkown
|
page read and write
|
|
|
|
26923D5A000
|
unkown
|
page read and write
|
|
|
|
7FF5D0E75000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB84000
|
unkown
|
page readonly
|
|
|
|
29EDDFA0000
|
unkown
|
page read and write
|
|
|
|
1EB1EE53000
|
unkown
|
page read and write
|
|
|
|
194466A0000
|
heap private
|
page read and write
|
|
|
|
7FF5B993E000
|
unkown
|
page readonly
|
|
|
|
7FF533B42000
|
unkown
|
page readonly
|
|
|
|
7FF5A80A4000
|
unkown
|
page readonly
|
|
|
|
7FF5A829F000
|
unkown
|
page readonly
|
|
|
|
19446829000
|
unkown
|
page read and write
|
|
|
|
8E5ACFF000
|
unkown
|
page read and write
|
|
|
|
7FF57AA75000
|
unkown
|
page readonly
|
|
|
|
9063877000
|
unkown
|
page read and write
|
|
|
|
7FF509E51000
|
unkown
|
page readonly
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
26923D9C000
|
unkown
|
page read and write
|
|
|
|
7FF5A829C000
|
unkown
|
page readonly
|
|
|
|
9063BFF000
|
unkown
|
page read and write
|
|
|
|
7FF504AE1000
|
unkown
|
page readonly
|
|
|
|
194486D0000
|
unkown
|
page read and write
|
|
|
|
29EDC640000
|
unkown
|
page read and write
|
|
|
|
7FF5049EE000
|
unkown
|
page readonly
|
|
|
|
7FF5A8275000
|
unkown
|
page readonly
|
|
|
|
7FF509FE6000
|
unkown
|
page readonly
|
|
|
|
7FF5435BB000
|
unkown
|
page readonly
|
|
|
|
29A43A00000
|
unkown
|
page write copy
|
|
|
|
1EB1F0D0000
|
unkown
|
page readonly
|
|
|
|
7FF504ADA000
|
unkown
|
page readonly
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
7FF53395B000
|
unkown
|
page readonly
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
7FF53386F000
|
unkown
|
page readonly
|
|
|
|
26923D9A000
|
unkown
|
page read and write
|
|
|
|
7FF5A80B1000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
2568A160000
|
unkown
|
page readonly
|
|
|
|
194489C0000
|
unkown
|
page read and write
|
|
|
|
7FF57ADF3000
|
unkown
|
page readonly
|
|
|
|
85BC07E000
|
unkown
|
page read and write
|
|
|
|
7FF5CDBEB000
|
unkown
|
page readonly
|
|
|
|
26923D94000
|
unkown
|
page read and write
|
|
|
|
26923BB0000
|
unkown
|
page readonly
|
|
|
|
7FF57AF08000
|
unkown
|
page readonly
|
|
|
|
26923672000
|
unkown
|
page read and write
|
|
|
|
18D01C3C000
|
unkown
|
page read and write
|
|
|
|
7FF504811000
|
unkown
|
page readonly
|
|
|
|
19446840000
|
unkown
|
page read and write
|
|
|
|
2568A250000
|
unkown
|
page read and write
|
|
|
|
7FF5B9978000
|
unkown
|
page readonly
|
|
|
|
7FF5D1050000
|
unkown
|
page readonly
|
|
|
|
7FF5D0FF0000
|
unkown
|
page readonly
|
|
|
|
7FF5A82C4000
|
unkown
|
page readonly
|
|
|
|
D329B7F000
|
unkown
|
page read and write
|
|
|
|
1EB1EE3C000
|
unkown
|
page read and write
|
|
|
|
26923680000
|
unkown
|
page read and write
|
|
|
|
26923D98000
|
unkown
|
page read and write
|
|
|
|
D8AAD7B000
|
unkown
|
page read and write
|
|
|
|
2568A313000
|
unkown
|
page read and write
|
|
|
|
26923DAF000
|
unkown
|
page read and write
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
85BC97F000
|
unkown
|
page read and write
|
|
|
|
26923D89000
|
unkown
|
page read and write
|
|
|
|
7FF543437000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
26923702000
|
unkown
|
page read and write
|
|
|
|
7FF5049F0000
|
unkown
|
page readonly
|
|
|
|
22EB2890000
|
unkown
|
page readonly
|
|
|
|
85BC67A000
|
unkown
|
page read and write
|
|
|
|
7FF5A802B000
|
unkown
|
page readonly
|
|
|
|
26923D80000
|
unkown
|
page read and write
|
|
|
|
7FF504A44000
|
unkown
|
page readonly
|
|
|
|
2692363C000
|
unkown
|
page read and write
|
|
|
|
7FF5436BA000
|
unkown
|
page readonly
|
|
|
|
18D01D13000
|
unkown
|
page read and write
|
|
|
|
7FF5436D7000
|
unkown
|
page readonly
|
|
|
|
7FF509F9F000
|
unkown
|
page readonly
|
|
|
|
26923D69000
|
unkown
|
page read and write
|
|
|
|
269236A2000
|
unkown
|
page read and write
|
|
|
|
26924400000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC2B000
|
unkown
|
page readonly
|
|
|
|
29A4383F000
|
unkown
|
page read and write
|
|
|
|
7FF5B996C000
|
unkown
|
page readonly
|
|
|
|
25BC0000000
|
unkown
|
page readonly
|
|
|
|
7FF57AE04000
|
unkown
|
page readonly
|
|
|
|
19449000000
|
unkown
|
page read and write
|
|
|
|
2568AC00000
|
unkown
|
page readonly
|
|
|
|
9063CFB000
|
unkown
|
page read and write
|
|
|
|
7FF543511000
|
unkown
|
page readonly
|
|
|
|
22EB2C55000
|
heap private
|
page read and write
|
|
|
|
7FF5436C5000
|
unkown
|
page readonly
|
|
|
|
7FF5048D1000
|
unkown
|
page readonly
|
|
|
|
7FF509E6B000
|
unkown
|
page readonly
|
|
|
|
90640FC000
|
unkown
|
page read and write
|
|
|
|
7FF5437A4000
|
unkown
|
page readonly
|
|
|
|
7FF533AA3000
|
unkown
|
page readonly
|
|
|
|
18D01C70000
|
unkown
|
page read and write
|
|
|
|
18D01C53000
|
unkown
|
page read and write
|
|
|
|
7FF5A7F3A000
|
unkown
|
page readonly
|
|
|
|
26923D98000
|
unkown
|
page read and write
|
|
|
|
1EB1EE4C000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
29EDC672000
|
unkown
|
page read and write
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
7FF504AE2000
|
unkown
|
page readonly
|
|
|
|
19449410000
|
unkown
|
page read and write
|
|
|
|
26924200000
|
unkown
|
page read and write
|
|
|
|
7FF5D0F58000
|
unkown
|
page readonly
|
|
|
|
1EB1EE13000
|
unkown
|
page read and write
|
|
|
|
7FF5B99AE000
|
unkown
|
page readonly
|
|
|
|
2568A150000
|
unkown
|
page readonly
|
|
|
|
29A43829000
|
unkown
|
page read and write
|
|
|
|
18D01ED0000
|
unkown
|
page readonly
|
|
|
|
7FF5D08AD000
|
unkown
|
page readonly
|
|
|
|
26923D62000
|
unkown
|
page read and write
|
|
|
|
29EDC613000
|
unkown
|
page read and write
|
|
|
|
29A436C0000
|
heap private
|
page read and write
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
7FF509FED000
|
unkown
|
page readonly
|
|
|
|
26923D60000
|
unkown
|
page read and write
|
|
|
|
7FF5A823B000
|
unkown
|
page readonly
|
|
|
|
7FF543280000
|
unkown
|
page readonly
|
|
|
|
7FF509B36000
|
unkown
|
page readonly
|
|
|
|
7FF54370A000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
85BC0FA000
|
unkown
|
page read and write
|
|
|
|
22EB29CE000
|
unkown
|
page read and write
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
269241B0000
|
unkown
|
page readonly
|
|
|
|
22EB29CE000
|
unkown
|
page read and write
|
|
|
|
19448C42000
|
unkown
|
page read and write
|
|
|
|
7FF533BCF000
|
unkown
|
page readonly
|
|
|
|
18D01D02000
|
unkown
|
page read and write
|
|
|
|
19F3B856000
|
unkown
|
page read and write
|
|
|
|
7FF5A7ACD000
|
unkown
|
page readonly
|
|
|
|
26923D68000
|
unkown
|
page read and write
|
|
|
|
7FF5A820C000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC1A000
|
unkown
|
page readonly
|
|
|
|
7FF504AD4000
|
unkown
|
page readonly
|
|
|
|
29EDC66E000
|
unkown
|
page read and write
|
|
|
|
7FF5A8354000
|
unkown
|
page readonly
|
|
|
|
1EB1EDE0000
|
heap default
|
page read and write
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
19449510000
|
unkown
|
page read and write
|
|
|
|
7FF5339F9000
|
unkown
|
page readonly
|
|
|
|
19F3B720000
|
heap private
|
page read and write
|
|
|
|
26923D92000
|
unkown
|
page read and write
|
|
|
|
7FF57AE9A000
|
unkown
|
page readonly
|
|
|
|
85BBD2B000
|
unkown
|
page read and write
|
|
|
|
2568A213000
|
unkown
|
page read and write
|
|
|
|
19446913000
|
unkown
|
page read and write
|
|
|
|
85BC3FB000
|
unkown
|
page read and write
|
|
|
|
26923D27000
|
unkown
|
page read and write
|
|
|
|
22EB2C60000
|
unkown
|
page readonly
|
|
|
|
19448A32000
|
unkown
|
page read and write
|
|
|
|
7FF504A69000
|
unkown
|
page readonly
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
7FF533B63000
|
unkown
|
page readonly
|
|
|
|
26923BF0000
|
unkown
|
page readonly
|
|
|
|
19449210000
|
unkown
|
page read and write
|
|
|
|
7FF57A6A0000
|
unkown
|
page readonly
|
|
|
|
7FF5A8091000
|
unkown
|
page readonly
|
|
|
|
85BC77B000
|
unkown
|
page read and write
|
|
|
|
26923510000
|
unkown
|
page readonly
|
|
|
|
26923D85000
|
unkown
|
page read and write
|
|
|
|
7FF5D10A4000
|
unkown
|
page readonly
|
|
|
|
7FF5CDA56000
|
unkown
|
page readonly
|
|
|
|
29A43902000
|
unkown
|
page read and write
|
|
|
|
1EB1F800000
|
unkown
|
page readonly
|
|
|
|
18D01C2C000
|
unkown
|
page read and write
|
|
|
|
7FF5A81BD000
|
unkown
|
page readonly
|
|
|
|
1EB1EE8B000
|
unkown
|
page read and write
|
|
|
|
7FF5C7ADB000
|
unkown
|
page readonly
|
|
|
|
2692364F000
|
unkown
|
page read and write
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
19448C02000
|
unkown
|
page read and write
|
|
|
|
65426F5000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
19F3B829000
|
unkown
|
page read and write
|
|
|
|
7FF5D0FF2000
|
unkown
|
page readonly
|
|
|
|
798E57F000
|
unkown
|
page read and write
|
|
|
|
1EB1EE02000
|
unkown
|
page read and write
|
|
|
|
19449510000
|
unkown
|
page read and write
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
26923D99000
|
unkown
|
page read and write
|
|
|
|
7FF5A8212000
|
unkown
|
page readonly
|
|
|
|
7FF5436CB000
|
unkown
|
page readonly
|
|
|
|
7FF50424D000
|
unkown
|
page readonly
|
|
|
|
26923D98000
|
unkown
|
page read and write
|
|
|
|
7FF5D10AE000
|
unkown
|
page readonly
|
|
|
|
22EB29C5000
|
unkown
|
page read and write
|
|
|
|
7FF5D10C1000
|
unkown
|
page readonly
|
|
|
|
26923D39000
|
unkown
|
page read and write
|
|
|
|
19446867000
|
unkown
|
page read and write
|
|
|
|
7FF5A82DE000
|
unkown
|
page readonly
|
|
|
|
2568A400000
|
unkown
|
page readonly
|
|
|
|
26923D69000
|
unkown
|
page read and write
|
|
|
|
7FF533C91000
|
unkown
|
page readonly
|
|
|
|
7FF5CDD0A000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
7FF57AF91000
|
unkown
|
page readonly
|
|
|
|
26923D92000
|
unkown
|
page read and write
|
|
|
|
D329A79000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
7FF533B9E000
|
unkown
|
page readonly
|
|
|
|
18D01E00000
|
unkown
|
page readonly
|
|
|
|
7FF5049F5000
|
unkown
|
page readonly
|
|
|
|
29A43900000
|
unkown
|
page read and write
|
|
|
|
7FF5D10B8000
|
unkown
|
page readonly
|
|
|
|
7FF509F5A000
|
unkown
|
page readonly
|
|
|
|
798E477000
|
unkown
|
page read and write
|
|
|
|
26923D31000
|
unkown
|
page read and write
|
|
|
|
7FF5B999E000
|
unkown
|
page readonly
|
|
|
|
7FF5435A1000
|
unkown
|
page readonly
|
|
|
|
19F3B86B000
|
unkown
|
page read and write
|
|
|
|
7FF5A8151000
|
unkown
|
page readonly
|
|
|
|
7FF5CD573000
|
unkown
|
page readonly
|
|
|
|
194468F7000
|
unkown
|
page read and write
|
|
|
|
26923D5C000
|
unkown
|
page read and write
|
|
|
|
194468E1000
|
unkown
|
page read and write
|
|
|
|
7FF533A9B000
|
unkown
|
page readonly
|
|
|
|
1944685E000
|
unkown
|
page read and write
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
19F3B868000
|
unkown
|
page read and write
|
|
|
|
26923D37000
|
unkown
|
page read and write
|
|
|
|
194489EC000
|
unkown
|
page read and write
|
|
|
|
29EDC66E000
|
unkown
|
page read and write
|
|
|
|
194489F1000
|
unkown
|
page read and write
|
|
|
|
26923D94000
|
unkown
|
page read and write
|
|
|
|
7FF5CDBEF000
|
unkown
|
page readonly
|
|
|
|
7FF5CD420000
|
unkown
|
page readonly
|
|
|
|
7FF5D107C000
|
unkown
|
page readonly
|
|
|
|
2568A24D000
|
unkown
|
page read and write
|
|
|
|
7FF5D0F4B000
|
unkown
|
page readonly
|
|
|
|
7FF5CD9E6000
|
unkown
|
page readonly
|
|
|
|
7FF5CDA61000
|
unkown
|
page readonly
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
7FF5B960A000
|
unkown
|
page readonly
|
|
|
|
26923D99000
|
unkown
|
page read and write
|
|
|
|
7FF5B99B6000
|
unkown
|
page readonly
|
|
|
|
26923D94000
|
unkown
|
page read and write
|
|
|
|
7FF57AF92000
|
unkown
|
page readonly
|
|
|
|
22EB2960000
|
unkown
|
page read and write
|
|
|
|
7FF5CDC74000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
194489E4000
|
unkown
|
page read and write
|
|
|
|
269235F0000
|
unkown
|
page readonly
|
|
|
|
2568A229000
|
unkown
|
page read and write
|
|
|
|
26923D8D000
|
unkown
|
page read and write
|
|
|
|
7FF5CD782000
|
unkown
|
page readonly
|
|
|
|
7FF53386A000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
D8AAAFF000
|
unkown
|
page read and write
|
|
|
|
1EB1EE00000
|
unkown
|
page read and write
|
|
|
|
29EDC672000
|
unkown
|
page read and write
|
|
|
|
7FF5333FD000
|
unkown
|
page readonly
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
7FF5D1141000
|
unkown
|
page readonly
|
|
|
|
26923613000
|
unkown
|
page read and write
|
|
|
|
D6E931E000
|
unkown
|
page read and write
|
|
|
|
269241A0000
|
unkown
|
page read and write
|
|
|
|
26923E00000
|
unkown
|
page readonly
|
|
|
|
26923D97000
|
unkown
|
page read and write
|
|
|
|
7FF5C7B38000
|
unkown
|
page readonly
|
|
|
|
19448A43000
|
unkown
|
page read and write
|
|
|
|
19448B00000
|
unkown
|
page read and write
|
|
|
|
906397B000
|
unkown
|
page read and write
|
|
|
|
7FF5CDB1E000
|
unkown
|
page readonly
|
|
|
|
7FF543739000
|
unkown
|
page readonly
|
|
|
|
7FF533BB7000
|
unkown
|
page readonly
|
|
|
|
7FF57AF8A000
|
unkown
|
page readonly
|
|
|
|
7FF5CD792000
|
unkown
|
page readonly
|
|
|
|
26923B90000
|
unkown
|
page read and write
|
|
|
|
7FF5B9799000
|
unkown
|
page readonly
|
|
|
|
26923D7C000
|
unkown
|
page read and write
|
|
|
|
26923D41000
|
unkown
|
page read and write
|
|
|
|
29EDC800000
|
unkown
|
page readonly
|
|
|
|
65429FE000
|
unkown
|
page read and write
|
|
|
|
29EDC674000
|
unkown
|
page read and write
|
|
|
|
26924190000
|
unkown
|
page readonly
|
|
|
|
7FF5D0D1A000
|
unkown
|
page readonly
|
|
|
|
654232E000
|
unkown
|
page read and write
|
|
|
|
7FF533C0E000
|
unkown
|
page readonly
|
|
|
|
22EB2980000
|
unkown
|
page read and write
|
|
|
|
85BC1FE000
|
unkown
|
page read and write
|
|
|
|
26923D48000
|
unkown
|
page read and write
|
|
|
|
26924202000
|
unkown
|
page read and write
|
|
|
|
269236E2000
|
unkown
|
page read and write
|
|
|
|
29EDC629000
|
unkown
|
page read and write
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
1EB1EF00000
|
unkown
|
page read and write
|
|
|
|
194467E0000
|
unkown
|
page readonly
|
|
|
|
2568A300000
|
unkown
|
page read and write
|
|
|
|
29EDC700000
|
unkown
|
page read and write
|
|
|
|
7FF57AD81000
|
unkown
|
page readonly
|
|
|
|
269236BE000
|
unkown
|
page read and write
|
|
|
|
7FF5049FB000
|
unkown
|
page readonly
|
|
|
|
26923D86000
|
unkown
|
page read and write
|
|
|
|
1944695B000
|
unkown
|
page read and write
|
|
|
|
19F3B7E0000
|
unkown
|
page readonly
|
|
|
|
22EB29DD000
|
unkown
|
page read and write
|
|
|
|
7FF5CDBFF000
|
unkown
|
page readonly
|
|
|
|
7FF533C92000
|
unkown
|
page readonly
|
|
|
|
7FF5B98E0000
|
unkown
|
page readonly
|
|
|
|
7FF509E6E000
|
unkown
|
page readonly
|
|
|
|
19F3D370000
|
unkown
|
page readonly
|
|
|
|
26923D6A000
|
unkown
|
page read and write
|
|
|
|
19F3B802000
|
unkown
|
page read and write
|
|
|
|
7FF50A054000
|
unkown
|
page readonly
|
|
|
|
798E37F000
|
unkown
|
page read and write
|
|
|
|
25BBFE57000
|
unkown
|
page read and write
|
|
|
|
26924202000
|
unkown
|
page read and write
|
|
|
|
19448951000
|
unkown
|
page read and write
|
|
|
|
19F3B86B000
|
unkown
|
page read and write
|
|
|
|
7FF5B996F000
|
unkown
|
page readonly
|
|
|
|
194468D2000
|
unkown
|
page read and write
|
|
There are 1017 hidden memdumps, click here to show them.