Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Strategic Procurement Services Supplier Notice COVID19 June 30 2021.pdf
|
PDF document, version 1.7
|
initial sample
|
 |
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0ace9ee3d914a5c0_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\3a4ae3940784292a_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bba29d2e6197e2f4_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bf0ac66ae1eb4a7f_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\cf3e34002cde7e9c_0
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d449e58cb15daaf1_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d88192ac53852604_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\de789e80edd740d6_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f0cf6dfa8a1afa3d_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f4a0d4ca2f3b95da_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f941376b2efdd6e6_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f971b7eda7fa05c3_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fd17b2d8331c91e8_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fdd733564de6fbcb_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\febb41df4ea2b63a_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\temp-index
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-210706235403Z-235.bmp
|
PC bitmap, Windows 3.x format, 117 x -152 x 32
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
|
SQLite 3.x database, last written using SQLite version 3024000
|
modified
|
|
|
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache.bin
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{A3D7A502-DEB5-11EB-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{A3D7A504-DEB5-11EB-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{AB09A3DF-DEB5-11EB-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\wlm7n14\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\209943939_1211950259242452_4312132841934873397_n[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x640, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\210548092_204008588391281_120189877407358761_n[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x443, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\646589415962224[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\EKKT6VV0.htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\_0000_0082003-17ab-f017-emory[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920],
baseline, precision 8, 1920x1080, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\_0000_0101401-15bm-f613-experience[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920],
baseline, precision 8, 1920x1080, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\_0001_0110803-12bm-f123-apply[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920],
baseline, precision 8, 1920x1080, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\_0003_0050902-11kh200-_man_alumni[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=452, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=820],
baseline, precision 8, 820x452, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\_0005_0063001-17sn-608-hs[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=452, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=820],
baseline, precision 8, 820x452, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\_0006_mm21502-19jk-f055-monks02-global[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=756, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=756],
baseline, precision 8, 756x756, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\analytics[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\enquire.min[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\eu-logo-shield[1].svg
|
SVG Scalable Vector Graphics image
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\fa-regular-400[1].eot
|
Embedded OpenType (EOT), Font Awesome 5 Free Regular family
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\fa-solid-900[1].eot
|
Embedded OpenType (EOT), Font Awesome 5 Free Solid family
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\fading-hero-events[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\fbevents[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\filterable-handler[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\image[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\index[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\index[2].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\index[3].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\o-0TIpQlx3QUlC5A4PNr4Az5ZuyDzWs[1].woff
|
Web Open Font Format, TrueType, length 19572, version 1.1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\pattern-bg-blue[1].svg
|
SVG Scalable Vector Graphics image
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\quantcast[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\quick-guides[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\rules-p-N9sBKx_5YpWtv[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\search-module[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\select-events[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\site[1].css
|
assembler source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\site[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\site[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\student-sitting-on-grass-quad[1].jpg
|
JPEG image data, baseline, precision 8, 432x244, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\vaccine[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\widgets[1].js
|
UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\646589415962224[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\_0000_0052802-15kh-f178-_man_research[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=452, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=820],
baseline, precision 8, 820x452, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\_0000_0102205-15kh-f152-_raw_arts[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=756, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=756],
baseline, precision 8, 756x756, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\_0003_0033001-14kh-f325-_raw_atlanta[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=756, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=756],
baseline, precision 8, 756x756, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\_0004_0110903-17ab-f001-give[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=452, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=820],
baseline, precision 8, 820x452, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\additional[1].css
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\all[1].css
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\angle-grid-bg[1].svg
|
SVG Scalable Vector Graphics image
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\background_gradient[1]
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\calendar-events[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\calendar-handler[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\count-up-events[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\countup.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\decal-on-floor-600x339[1].jpg
|
[TIFF image data, little-endian, direntries=15, height=3200, bps=194, PhotometricIntepretation=RGB, description=0071401-20KH
Return to Campus scenes COVID 19. Shot for CPA, Laura Redfern, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left,
width=4800], baseline, precision 8, 432x244, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\eu-logo-footer[1].svg
|
SVG Scalable Vector Graphics image
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\fading-hero-module[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\favicon[1].ico
|
MS Windows icon resource - 1 icon, 16x16
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\fbevents[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\filterable-events[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\green-operatingstatus-meter[1].svg
|
SVG Scalable Vector Graphics image
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\index[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\jquery-3.3.1.min[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\jquery-ui.min[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\jquery.selectboxit.min[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\js[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\our-campuses[1].jpg
|
JPEG image data, baseline, precision 8, 756x756, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\proxy[1].json
|
HTML document, ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\scroll-to-handler[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\select-module[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\site-wide-announcement-generated[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\standard-template-v3.min[1].js
|
UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\standard-template-v3[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\woman-walking-near-shuttle-600x339[1].jpg
|
[TIFF image data, little-endian, direntries=16, height=3200, bps=206, PhotometricIntepretation=RGB, description=0071301-20KH
Return to Campus during COVID 19. Shot for CPA, Laura Redfern, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left,
width=4800], baseline, precision 8, 432x244, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\0031101-19sn-0120-crop[1].jpg
|
Environmental Portrait of Biomedical Researchers Dr. Keira Davis & Dr. Winfield S, manufacturer=Canon, model=Canon EOS 5D
Mark III, orientation=upper-left, width=5760], progressive, precision 8, 1000x667, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\0040903-19kh-f006-crop[1].jpg
|
[TIFF image data, little-endian, direntries=15, height=3840, bps=194, PhotometricIntepretation=RGB, description=0040903-19KH,
manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, width=5760], baseline, precision 8, 1000x667, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\209791495_2894810837403710_4743673010356783954_n[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x800, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\646589415962224[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\HTxwL3I-JCGChYJ8VI-L6OO_au7B4873z3bWvw[1].woff
|
Web Open Font Format, TrueType, length 24224, version 1.1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\HTxyL3I-JCGChYJ8VI-L6OO_au7B6xTrB3Xmu4kA[1].woff
|
Web Open Font Format, TrueType, length 25980, version 1.1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\_0001_mm92001-17jk-f048-test01-hc[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=452, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=820],
baseline, precision 8, 820x452, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\_0002_0082702-13bm-f124-community[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=452, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=820],
baseline, precision 8, 820x452, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\_0004_0032302-16bm-f008-explore[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=756, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=756],
baseline, precision 8, 756x756, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\count-up-module[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\datatables.min[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\datetime-datejs[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\emory-forward-header[1].jpg
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2660x480, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\emoryuniversity-94f943a0-d879-4b6f-82e3-e826e6eb8c87[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\f[1].txt
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\fa-brands-400[1].eot
|
Embedded OpenType (EOT), Font Awesome 5 Brands Regular family
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\fading-hero-handler[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\fbevents[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\feat-twf-economy[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 432x289, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\green-gatheringrisk-meter[1].svg
|
SVG Scalable Vector Graphics image
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\hero-cbsc-1[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1921x823, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\info_48[1]
|
PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\js[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\juicer[1].js
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\navcancl[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\o-0IIpQlx3QUlC5A4PNr5TRG[1].woff
|
Web Open Font Format, TrueType, length 19284, version 1.1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\o-0NIpQlx3QUlC5A4PNjXhFVZNyH[1].woff
|
Web Open Font Format, TrueType, length 19372, version 1.1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\o-0OIpQlx3QUlC5A4PNr4ARCQ_8[1].woff
|
Web Open Font Format, TrueType, length 18560, version 1.1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\quant[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\rnCt-xNNww_2s0amA9M8onrmSg[1].woff
|
Web Open Font Format, TrueType, length 26068, version 1.1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\scroll-to-module[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\scrollmagic.min[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\search-events[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\select-handler[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\siteanalyze_66356337[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\E5DowQdXEAQ3ZpV[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 520x347, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\E5NtlwMVoAkqT-K[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x512, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\E5PMLksXoAUGfPA[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 520x347, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\ErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\_0002_0041304-18sn-0397-diversity[1].jpg
|
[TIFF image data, big-endian, direntries=12, height=756, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=756],
baseline, precision 8, 756x756, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\angle-grid-bg[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\bullet[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\calendar-module[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\compiled[1].css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\count-up-handler[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\emergency-notice-generated[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\fenves-756x756[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 756x756, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\filterable-module[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\forward[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\hallway-with-covid-sign-600x339[1].jpg
|
[TIFF image data, little-endian, direntries=15, height=3200, bps=194, PhotometricIntepretation=RGB, description=0071401-20KH
Return to Campus scenes COVID 19. Shot for CPA, Laura Redfern, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left,
width=4800], baseline, precision 8, 432x244, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\healthy-behaviors[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\if-you-feel-sick[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\index[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\index[2].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\jquery.scrollmagic.min[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\js[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\js[2].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\mix-and-match-covid[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 520x347, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\nebo-initializer[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\operating-condition-status[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\popper.min[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\rnCr-xNNww_2s0amA9M5kn4[1].woff
|
Web Open Font Format, TrueType, length 24988, version 1.1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\rnCs-xNNww_2s0amA9uCt23BafA[1].woff
|
Web Open Font Format, TrueType, length 26236, version 1.1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\rnCu-xNNww_2s0amA9M8qsHDWfSFWw[1].woff
|
Web Open Font Format, TrueType, length 27444, version 1.1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\scroll-to-events[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\search-handler[1].js
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\sign-in-garden-sized[1].jpg
|
[TIFF image data, little-endian, direntries=15, height=3840, bps=194, PhotometricIntepretation=RGB, description=0071301-20KH
Return to Campus during COVID 19. Shot for CPA, Laura Redfern, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left,
width=5760], baseline, precision 8, 432x244, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\site[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\site[1].js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\student-reading-book-in-library[1].jpg
|
JPEG image data, baseline, precision 8, 432x244, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\students-walking-on-quad-masks-sized[1].jpg
|
[TIFF image data, little-endian, direntries=16, height=3840, bps=206, PhotometricIntepretation=RGB, description=0071301-20KH
Return to Campus during COVID 19. Shot for CPA, Laura Redfern, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left,
width=5760], baseline, precision 8, 432x244, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\sunflare-on-building-600x339[1].jpg
|
[TIFF image data, little-endian, direntries=16, height=3840, bps=206, PhotometricIntepretation=RGB, description=0061101-20KH
Social Media campus scenes. Shot for CPA, Megan McCrainey, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left,
width=5760], baseline, precision 8, 576x325, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\world-refugee[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 432x289, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF379104D6D93A8FD1.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF45EDF6B42CD1443A.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF9E2257D23287B822.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IGTDN2HGTHOC89OJX2UP.temp
|
data
|
dropped
|
|
There are 188 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe' 'C:\Users\user\Desktop\Strategic Procurement Services
Supplier Notice COVID19 June 30 2021.pdf'
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe' --type=renderer /prefetch:1 'C:\Users\user\Desktop\Strategic
Procurement Services Supplier Notice COVID19 June 30 2021.pdf'
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --backgroundcolor=16514043
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat
Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1720,11394891864812701617,5421238245506412973,131072
--disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=3994307663767611292 --lang=en-US --disable-pack-loading
--log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035
Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=3994307663767611292
--renderer-client-id=2 --mojo-platform-channel-handle=1752 --allow-no-sandbox-job /prefetch:1
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=gpu-process --field-trial-handle=1720,11394891864812701617,5421238245506412973,131072
--disable-features=VizDisplayCompositor --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log'
--log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --lang=en-US --gpu-preferences=KAAAAAAAAACAAwABAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA
--use-gl=swiftshader-webgl --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --service-request-channel-token=2914443920406660741
--mojo-platform-channel-handle=1772 --allow-no-sandbox-job --ignored=' --type=renderer ' /prefetch:2
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat
Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1720,11394891864812701617,5421238245506412973,131072
--disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=10280300687710209152 --lang=en-US --disable-pack-loading
--log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035
Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10280300687710209152
--renderer-client-id=4 --mojo-platform-channel-handle=1852 --allow-no-sandbox-job /prefetch:1
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
|
'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat
Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1720,11394891864812701617,5421238245506412973,131072
--disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=5121740222193972291 --lang=en-US --disable-pack-loading
--log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035
Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=5121740222193972291
--renderer-client-id=5 --mojo-platform-channel-handle=2240 --allow-no-sandbox-job /prefetch:1
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' https://www.emory.edu/forward/
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2424 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://PrefSyncJob/com.adobe.acrobat.ADotCom/Resource/Sync/Upload/F
|
unknown
|
|
|
|
https://www.emory.edu/forward/
|
unknown
|
|
|
|
https://stats.g.doubleclick.net/g/collect
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/vaccine.html5
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/operating-condition-status.html
|
|
||
|
https://t.co/iQY7jLHtCE
|
unknown
|
|
|
|
https://img.juicer.io/ig/image/CQ08_Rurm_w?s=31eeb678ba450e258e669b94acfd8e7e090f5e3a
|
unknown
|
|
|
|
https://www.cdc.gov/vaccines/covid-19/retail-pharmacy-program/participating-pharmacies.html)
|
unknown
|
|
|
|
https://goizueta.emory.edu/forward
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/healthy-behaviors.html
|
unknown
|
|
|
|
https://www.twitter.com/EmoryUniversity
|
unknown
|
|
|
|
https://med.emory.edu/about/supporting-our-people/covid/index.html
|
unknown
|
|
|
|
https://twitter.com/EmoryUniversity
|
unknown
|
|
|
|
https://fontawesome.comhttps://fontawesome.comFont
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/operating-condition-status.html
|
unknown
|
|
|
|
https://www.emory.edu/forward/_includes/images/site-wide/students-walking-on-quad-masks-sized.jpg
|
unknown
|
|
|
|
https://www.emory.edu/forward/#main
|
unknown
|
|
|
|
https://fontawesome.com
|
unknown
|
|
|
|
https://www.youtube.com/iframe_api
|
unknown
|
|
|
|
https://twitter.com/EmoryUniversity/status/1409882601742127117
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/dashboard/Root
|
unknown
|
|
|
|
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/type#
|
unknown
|
|
|
|
https://github.com/twbs/bootstrap/graphs/contributors)
|
unknown
|
|
|
|
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/operating-condition-status.htmltOperating
|
unknown
|
|
|
|
http://scrollmagic.io
|
unknown
|
|
|
|
https://template.emory.edu/sites/standard-BS4-template/public/_includes/images/eu-logo-shield.svg
|
unknown
|
|
|
|
https://www.emory.edu/forward/index.html
|
unknown
|
|
|
|
https://api.echosign.com
|
unknown
|
|
|
|
https://connect.facebook.net/en_US/fbevents.js
|
unknown
|
|
|
|
https://www.emory.edu/forward/i
|
unknown
|
|
|
|
http://www.osmf.org/drm/default
|
unknown
|
|
|
|
https://api.echosign.comRL
|
unknown
|
|
|
|
http://www.osmf.org/elementId%http://www.osmf.org/temporal/embedded$http://www.osmf.org/temporal/dyn
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/id/7WJ
|
unknown
|
|
|
|
https://www.emory.edu/forward/_includes/images/site-wide/decal-on-floor-600x339.jpg
|
unknown
|
|
|
|
https://www.hr.emory.edu/eu/working-covid-19/campus-scenarios.html
|
unknown
|
|
|
|
http://equityandinclusion.emory.edu/about/resources/eoaa.html
|
unknown
|
|
|
|
http://opensource.org/licenses/MIT).
|
unknown
|
|
|
|
https://datatables.net/download
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/healthy-behaviors.htmlbHealthy
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/property#2-29/
|
unknown
|
|
|
|
http://www.or.emory.edu
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/vaccine.html
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/type#ty#rceRef#g
|
unknown
|
|
|
|
https://securelb.imodules.com/s/1705/giving/index.aspx?sid=1705&gid=3&pgid=600&cid=1358&
|
unknown
|
|
|
|
http://ns.useplus.org/ldf/xmp/1.0/
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/dashboard/index.html
|
|
||
|
http://communications.emory.edu//resources/copyright.html
|
unknown
|
|
|
|
https://covidvaccine.emoryhealthcare.org/Scheduling/covid19/#/
|
unknown
|
|
|
|
https://hr.emory.edu/eu/index.html
|
unknown
|
|
|
|
https://www.emory.edu/forward/
|
|
||
|
https://links.emory.edu/9O
|
unknown
|
|
|
|
https://www.emory.edu/forward/#main
|
|
||
|
https://www.emory.edu/forward/covid-19/if-you-feel-sick.html
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/healthy-behaviors.html
|
|
||
|
https://links.emory.edu/9R
|
unknown
|
|
|
|
https://pbs.twimg.com/media/E5DowQdXEAQ3ZpV.jpg
|
unknown
|
|
|
|
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
|
unknown
|
|
|
|
http://iptc.org/std/Iptc4xmpExt/2008-02-29/I
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/quick-guides.htmlXQuick
|
unknown
|
|
|
|
https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cdc.gov%2Fpublichealthgateway%
|
unknown
|
|
|
|
https://img.juicer.io/ig/image/CQ6NVSHLrmj?s=de34196e55bb13adfa7f9048c1a6206122d5554e
|
unknown
|
|
|
|
https://twitter.com/FrontPharmacol
|
unknown
|
|
|
|
https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.vaccines.gov%2F&data=04%7C01%7
|
unknown
|
|
|
|
https://cct.google/taggy/agent.js
|
unknown
|
|
|
|
https://www.gs.emory.edu/fall2020/index.html
|
unknown
|
|
|
|
http://nursing.emory.edu/audience-guides/emory-forward-nursing-faqs.html
|
unknown
|
|
|
|
https://www.cdc.gov/coronavirus/2019-ncov/symptoms-testing/symptoms.html
|
unknown
|
|
|
|
https://www.emory.edu/home/search.html
|
unknown
|
|
|
|
https://vimeo.com/emoryuniversity/review/508010295/6e35486985
|
unknown
|
|
|
|
https://twitter.com/CDCgov
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/index.html
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/vaccine.html
|
|
||
|
https://gca.emory.edu/community/index.html
|
unknown
|
|
|
|
https://twitter.com/EmoryUniversity/status/1410695610735509504
|
unknown
|
|
|
|
https://www.emory.edu/forward/)
|
unknown
|
|
|
|
https://search.emory.edu/?q=
|
unknown
|
|
|
|
https://github.com/twbs/bootstrap/blob/master/LICENSE)
|
unknown
|
|
|
|
https://stats.g.doubleclick.net/g/collect?v=2&
|
unknown
|
|
|
|
https://www.instagram.com/p/CQ6UUR-rGqB/
|
unknown
|
|
|
|
https://www.emory.edu/home/index.htmlHHome
|
unknown
|
|
|
|
https://www.emoryhealthcare.org/
|
unknown
|
|
|
|
https://ims-na1.adobelogin.com
|
unknown
|
|
|
|
https://healthportal.oxford.emory.edu
|
unknown
|
|
|
|
https://sph.emory.edu/news/news-release/2020/06/rollins-returns-fall-2020.html
|
unknown
|
|
|
|
https://www.emory.edu/home/index.html
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/quick-guides.html
|
unknown
|
|
|
|
https://template.emory.edu/shared-assets/feed/trumba.php
|
unknown
|
|
|
|
https://pbs.twimg.com/profile_images/1148259851593801728/4b116t7M_normal.png
|
unknown
|
|
|
|
https://www.emory.edu/forward/search.html
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/testing/index.html
|
unknown
|
|
|
|
http://giving.emory.edu/ways-to-give/index.html
|
unknown
|
|
|
|
https://www.cdc.gov/vaccines/covid-19/retail-pharmacy-program/participating-pharmacies.html
|
unknown
|
|
|
|
https://www.emory.edu/forward/covid-19/index.html
|
|
||
|
https://www.emory.edu/forward/Root
|
unknown
|
|
|
|
https://www.emory.edu/forward/_includes/images/site-wide/operating-status/green-operatingstatus-mete
|
unknown
|
|
|
|
http://ns.useplus.org/ldf/xmp/1.0/imensions#
|
unknown
|
|
|
|
http://www.aiim.org/pdfa/ns/schema#
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
www.google.de
|
142.250.201.195
|
|
|
|
siteimproveanalytics.com
|
172.64.172.12
|
|
|
|
d2fashanjl7d9f.cloudfront.net
|
13.224.99.16
|
|
|
|
stats.l.doubleclick.net
|
64.233.166.155
|
|
|
|
global.px.quantserve.com
|
91.228.74.133
|
|
|
|
www.emory.edu
|
170.140.125.16
|
|
|
|
fontawesome-cdn.fonticons.netdna-cdn.com
|
23.111.9.35
|
|
|
|
ana-cf-col-elb-78-567119012.eu-central-1.elb.amazonaws.com
|
18.195.138.231
|
|
|
|
cs491.wac.edgecastcdn.net
|
192.229.233.25
|
|
|
|
emory.edu
|
170.140.125.20
|
|
|
|
scontent.cdninstagram.com
|
157.240.17.63
|
|
|
|
img.juicer.io
|
104.26.12.87
|
|
|
|
scontent.xx.fbcdn.net
|
157.240.17.15
|
|
|
|
template.emory.edu
|
170.140.125.169
|
|
|
|
googleads.g.doubleclick.net
|
172.217.16.98
|
|
|
|
www.juicer.io
|
104.26.13.87
|
|
|
|
cdnjs.cloudflare.com
|
104.16.18.94
|
|
|
|
cs672.wac.edgecastcdn.net
|
192.229.233.50
|
|
|
|
pbs.twimg.com
|
unknown
|
|
|
|
secure.quantserve.com
|
unknown
|
|
|
|
pixel.quantserve.com
|
unknown
|
|
|
|
66356337.global.siteimproveanalytics.io
|
unknown
|
|
|
|
connect.facebook.net
|
unknown
|
|
|
|
rules.quantcount.com
|
unknown
|
|
|
|
stats.g.doubleclick.net
|
unknown
|
|
|
|
use.fontawesome.com
|
unknown
|
|
|
|
code.jquery.com
|
unknown
|
|
|
|
platform.twitter.com
|
unknown
|
|
There are 18 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
23.111.9.35
|
fontawesome-cdn.fonticons.netdna-cdn.com
|
United States
|
|
|
|
192.229.233.25
|
cs491.wac.edgecastcdn.net
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
172.217.16.98
|
googleads.g.doubleclick.net
|
United States
|
|
|
|
157.240.17.15
|
scontent.xx.fbcdn.net
|
United States
|
|
|
|
170.140.125.169
|
template.emory.edu
|
United States
|
|
|
|
104.26.13.87
|
www.juicer.io
|
United States
|
|
|
|
104.16.18.94
|
cdnjs.cloudflare.com
|
United States
|
|
|
|
18.195.138.231
|
ana-cf-col-elb-78-567119012.eu-central-1.elb.amazonaws.com
|
United States
|
|
|
|
170.140.125.16
|
www.emory.edu
|
United States
|
|
|
|
91.228.74.198
|
unknown
|
United Kingdom
|
|
|
|
91.228.74.133
|
global.px.quantserve.com
|
United Kingdom
|
|
|
|
192.229.233.50
|
cs672.wac.edgecastcdn.net
|
United States
|
|
|
|
157.240.17.63
|
scontent.cdninstagram.com
|
United States
|
|
|
|
172.64.172.12
|
siteimproveanalytics.com
|
United States
|
|
|
|
64.233.166.155
|
stats.l.doubleclick.net
|
United States
|
|
|
|
13.224.99.16
|
d2fashanjl7d9f.cloudfront.net
|
United States
|
|
|
|
104.26.12.87
|
img.juicer.io
|
United States
|
|
|
|
170.140.125.20
|
emory.edu
|
United States
|
|
There are 9 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
aFS
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
tDIText
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
tFileName
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
tFileSource
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
sFileAncestors
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
sDI
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
sDate
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
uFileSize
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
uPageCount
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
aFS
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
tDIText
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
tFileName
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
sFileAncestors
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
sDI
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
sDate
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
{17FE9752-0B5A-4665-84CD-569794602F5C} {7F9185B0-CB92-43C5-80A9-92277A4F7B54} 0xFFFF
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
@C:\Windows\System32\ieframe.dll,-55175
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
sDI
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
tDIText
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
aFS
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
tfilename
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
iTabCount
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
iWinCount
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
aDefaultRHPViewModeL
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
bExpandRHPInViewer
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
smailto
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
tHostPerms
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
bLastExitNormal
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
bNormalExit
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
uLastAppLaunchTimeStamp
|
|
|
|
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
|
iNumReaderLaunches
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{A3D7A502-DEB5-11EB-90E5-ECF4BB2D2496}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Type
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Flags
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
There are 70 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
C5F0000
|
unkown
|
page read and write
|
|
|
|
558D000
|
heap default
|
page read and write
|
|
|
|
A6BB000
|
unkown
|
page readonly
|
|
|
|
1E658200000
|
unkown
|
page readonly
|
|
|
|
111EF4C8000
|
unkown
|
page read and write
|
|
|
|
25347320000
|
heap default
|
page read and write
|
|
|
|
111EF192000
|
unkown
|
page read and write
|
|
|
|
EE14000
|
unkown
|
page read and write
|
|
|
|
F268000
|
unkown
|
page read and write
|
|
|
|
A502000
|
unkown
|
page readonly
|
|
|
|
BA60000
|
unkown
|
page read and write
|
|
|
|
111ED0B6000
|
unkown
|
page read and write
|
|
|
|
23A17002000
|
unkown
|
page read and write
|
|
|
|
B4F7000
|
unkown
|
page read and write
|
|
|
|
5820000
|
heap private
|
page read and write
|
|
|
|
7FF5E0DBD000
|
unkown
|
page readonly
|
|
|
|
DD10000
|
unkown
|
page read and write
|
|
|
|
7FF51CAE6000
|
unkown
|
page readonly
|
|
|
|
B2DB000
|
unkown
|
page read and write
|
|
|
|
7FF5E0CF5000
|
unkown
|
page readonly
|
|
|
|
7FF4FFF6D000
|
unkown
|
page readonly
|
|
|
|
7FF505257000
|
unkown
|
page readonly
|
|
|
|
CDB2000
|
unkown
|
page read and write
|
|
|
|
E9E6000
|
unkown
|
page read and write
|
|
|
|
23A16B43000
|
unkown
|
page read and write
|
|
|
|
B411000
|
unkown
|
page read and write
|
|
|
|
23A162E9000
|
unkown
|
page read and write
|
|
|
|
7FF5BF6EA000
|
unkown
|
page readonly
|
|
|
|
2A68000
|
unkown
|
page readonly
|
|
|
|
5805000
|
heap private
|
page read and write
|
|
|
|
A7D0000
|
unkown
|
page readonly
|
|
|
|
111EF119000
|
unkown
|
page read and write
|
|
|
|
2CE5000
|
unkown
|
page readonly
|
|
|
|
ECE0000
|
unkown
|
page read and write
|
|
|
|
111EF1FE000
|
unkown
|
page read and write
|
|
|
|
1E65D2F0000
|
unkown
|
page read and write
|
|
|
|
7FF5BF5D0000
|
unkown
|
page readonly
|
|
|
|
7FF505118000
|
unkown
|
page readonly
|
|
|
|
23A16B5E000
|
unkown
|
page read and write
|
|
|
|
111EF159000
|
unkown
|
page read and write
|
|
|
|
7FF500027000
|
unkown
|
page readonly
|
|
|
|
23A16B51000
|
unkown
|
page read and write
|
|
|
|
BDFA000
|
unkown
|
page read and write
|
|
|
|
E99B000
|
unkown
|
page readonly
|
|
|
|
1479EE5A000
|
unkown
|
page read and write
|
|
|
|
7FF51CAD2000
|
unkown
|
page readonly
|
|
|
|
B478000
|
unkown
|
page read and write
|
|
|
|
60E8C7B000
|
unkown
|
page read and write
|
|
|
|
7FF4FFF66000
|
unkown
|
page readonly
|
|
|
|
7FF5BF49F000
|
unkown
|
page readonly
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
23A16B56000
|
unkown
|
page read and write
|
|
|
|
7FF5E09F9000
|
unkown
|
page readonly
|
|
|
|
2BD4000
|
unkown
|
page readonly
|
|
|
|
23A17002000
|
unkown
|
page read and write
|
|
|
|
7FF59FCEA000
|
unkown
|
page readonly
|
|
|
|
E9DF000
|
unkown
|
page read and write
|
|
|
|
7FF59FD74000
|
unkown
|
page readonly
|
|
|
|
7FF500016000
|
unkown
|
page readonly
|
|
|
|
F3F3000
|
unkown
|
page read and write
|
|
|
|
23A162E1000
|
unkown
|
page read and write
|
|
|
|
2A99000
|
unkown
|
page readonly
|
|
|
|
7FF59FB24000
|
unkown
|
page readonly
|
|
|
|
2D31000
|
unkown
|
page readonly
|
|
|
|
236D5913000
|
unkown
|
page read and write
|
|
|
|
8D65000
|
unkown
|
page readonly
|
|
|
|
7FF59FCB4000
|
unkown
|
page readonly
|
|
|
|
111EF4C7000
|
unkown
|
page read and write
|
|
|
|
2D66000
|
unkown
|
page readonly
|
|
|
|
8C97000
|
unkown
|
page readonly
|
|
|
|
236D5780000
|
heap default
|
page read and write
|
|
|
|
AC00000
|
unkown
|
page read and write
|
|
|
|
1E658E70000
|
unkown
|
page read and write
|
|
|
|
7FF59F83A000
|
unkown
|
page readonly
|
|
|
|
FC2000
|
unkown
|
page readonly
|
|
|
|
111F0010000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page readonly
|
|
|
|
2CE1000
|
unkown
|
page readonly
|
|
|
|
7FF5422CC000
|
unkown
|
page readonly
|
|
|
|
1E65D620000
|
unkown
|
page read and write
|
|
|
|
7FF51CA80000
|
unkown
|
page readonly
|
|
|
|
2B36000
|
unkown
|
page readonly
|
|
|
|
111EF100000
|
unkown
|
page read and write
|
|
|
|
5188000
|
unkown
|
page read and write
|
|
|
|
7FF550577000
|
unkown
|
page readonly
|
|
|
|
111EF642000
|
unkown
|
page read and write
|
|
|
|
111EF4C8000
|
unkown
|
page read and write
|
|
|
|
57C0000
|
unkown
|
page read and write
|
|
|
|
F217000
|
unkown
|
page read and write
|
|
|
|
5520000
|
unkown
|
page execute read
|
|
|
|
5540000
|
unkown
|
page execute read
|
|
|
|
BC65000
|
unkown
|
page read and write
|
|
|
|
7FF4FFF1F000
|
unkown
|
page readonly
|
|
|
|
A2DB000
|
unkown
|
page readonly
|
|
|
|
111EF166000
|
unkown
|
page read and write
|
|
|
|
7FF5BF396000
|
unkown
|
page readonly
|
|
|
|
23A16B2F000
|
unkown
|
page read and write
|
|
|
|
7FF51CA55000
|
unkown
|
page readonly
|
|
|
|
F015000
|
unkown
|
page read and write
|
|
|
|
EDA0000
|
unkown
|
page read and write
|
|
|
|
2A78000
|
unkown
|
page readonly
|
|
|
|
7ECD000
|
unkown
|
page read and write
|
|
|
|
8D3A000
|
unkown
|
page readonly
|
|
|
|
111EF1C7000
|
unkown
|
page read and write
|
|
|
|
21C54EC5000
|
heap private
|
page read and write
|
|
|
|
CB9A000
|
unkown
|
page read and write
|
|
|
|
7650000
|
unkown
|
page read and write
|
|
|
|
23A16248000
|
unkown
|
page read and write
|
|
|
|
A620000
|
unkown
|
page readonly
|
|
|
|
7FF5E0E34000
|
unkown
|
page readonly
|
|
|
|
A5B2000
|
unkown
|
page readonly
|
|
|
|
A842000
|
unkown
|
page readonly
|
|
|
|
8D67000
|
unkown
|
page readonly
|
|
|
|
95BD000
|
unkown
|
page read and write
|
|
|
|
1E657DD0000
|
heap private
|
page read and write
|
|
|
|
B01F000
|
stack
|
page read and write
|
|
|
|
23A16B40000
|
unkown
|
page read and write
|
|
|
|
23A16B24000
|
unkown
|
page read and write
|
|
|
|
111EF117000
|
unkown
|
page read and write
|
|
|
|
8D32000
|
unkown
|
page readonly
|
|
|
|
556B000
|
heap default
|
page read and write
|
|
|
|
236D5813000
|
unkown
|
page read and write
|
|
|
|
A0AF000
|
unkown
|
page readonly
|
|
|
|
236D57A0000
|
unkown
|
page readonly
|
|
|
|
A970000
|
unkown
|
page readonly
|
|
|
|
111EF130000
|
unkown
|
page read and write
|
|
|
|
1E658D61000
|
unkown
|
page read and write
|
|
|
|
2D66000
|
unkown
|
page readonly
|
|
|
|
9F25000
|
unkown
|
page readonly
|
|
|
|
8B9F000
|
unkown
|
page readonly
|
|
|
|
B076000
|
unkown
|
page read and write
|
|
|
|
92DC000
|
unkown
|
page read and write
|
|
|
|
1E65D65E000
|
unkown
|
page read and write
|
|
|
|
B5F1000
|
unkown
|
page read and write
|
|
|
|
E71E000
|
unkown
|
page read and write
|
|
|
|
28BD000
|
unkown
|
page readonly
|
|
|
|
1479EE58000
|
unkown
|
page read and write
|
|
|
|
EA22000
|
unkown
|
page read and write
|
|
|
|
B407000
|
unkown
|
page read and write
|
|
|
|
7FF55048D000
|
unkown
|
page readonly
|
|
|
|
1E658600000
|
unkown
|
page read and write
|
|
|
|
B930000
|
unkown
|
page read and write
|
|
|
|
2B3A000
|
unkown
|
page readonly
|
|
|
|
9DA7000
|
unkown
|
page readonly
|
|
|
|
96BF000
|
stack
|
page read and write
|
|
|
|
9F09000
|
unkown
|
page readonly
|
|
|
|
2D6E000
|
unkown
|
page readonly
|
|
|
|
25347400000
|
unkown
|
page read and write
|
|
|
|
580A000
|
heap private
|
page read and write
|
|
|
|
60E917D000
|
unkown
|
page read and write
|
|
|
|
ED14000
|
unkown
|
page read and write
|
|
|
|
74DCC7F000
|
unkown
|
page read and write
|
|
|
|
7FF550537000
|
unkown
|
page readonly
|
|
|
|
21C54C90000
|
unkown
|
page read and write
|
|
|
|
2D94000
|
unkown
|
page readonly
|
|
|
|
2B09000
|
unkown
|
page readonly
|
|
|
|
C800000
|
unkown
|
page read and write
|
|
|
|
7FF550385000
|
unkown
|
page readonly
|
|
|
|
21C54DD0000
|
unkown
|
page readonly
|
|
|
|
111ED0D7000
|
unkown
|
page read and write
|
|
|
|
E93C5FB000
|
unkown
|
page read and write
|
|
|
|
A682000
|
unkown
|
page readonly
|
|
|
|
111EF147000
|
unkown
|
page read and write
|
|
|
|
26835C24000
|
unkown
|
page read and write
|
|
|
|
1E65D689000
|
unkown
|
page read and write
|
|
|
|
B068000
|
unkown
|
page read and write
|
|
|
|
26835C8D000
|
unkown
|
page read and write
|
|
|
|
1479EE29000
|
unkown
|
page read and write
|
|
|
|
23A16B79000
|
unkown
|
page read and write
|
|
|
|
7FF51CAF7000
|
unkown
|
page readonly
|
|
|
|
E9D0000
|
unkown
|
page read and write
|
|
|
|
111F0110000
|
unkown
|
page read and write
|
|
|
|
524D000
|
unkown
|
page read and write
|
|
|
|
AC30000
|
unkown
|
page readonly
|
|
|
|
A9D0000
|
unkown
|
page readonly
|
|
|
|
23A169F0000
|
unkown
|
page read and write
|
|
|
|
EF6C000
|
unkown
|
page read and write
|
|
|
|
7FF52792B000
|
unkown
|
page readonly
|
|
|
|
2CA1000
|
unkown
|
page readonly
|
|
|
|
7FF5052F6000
|
unkown
|
page readonly
|
|
|
|
7FF51CB96000
|
unkown
|
page readonly
|
|
|
|
518C000
|
unkown
|
page read and write
|
|
|
|
7FF5052C4000
|
unkown
|
page readonly
|
|
|
|
21B578E000
|
unkown
|
page read and write
|
|
|
|
BFE0000
|
unkown
|
page read and write
|
|
|
|
25347C02000
|
unkown
|
page read and write
|
|
|
|
934E000
|
unkown
|
page read and write
|
|
|
|
1479ED40000
|
unkown
|
page write copy
|
|
|
|
81502DA000
|
unkown
|
page read and write
|
|
|
|
EFCB000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE35000
|
unkown
|
page readonly
|
|
|
|
1E658718000
|
unkown
|
page read and write
|
|
|
|
111EF400000
|
unkown
|
page read and write
|
|
|
|
EE95000
|
unkown
|
page read and write
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
7FF5E0B1D000
|
unkown
|
page readonly
|
|
|
|
1529DAD0000
|
unkown
|
page read and write
|
|
|
|
111EEFC0000
|
unkown
|
page read and write
|
|
|
|
96BF000
|
stack
|
page read and write
|
|
|
|
60E8B7E000
|
unkown
|
page read and write
|
|
|
|
7FF504DB7000
|
unkown
|
page readonly
|
|
|
|
977B000
|
unkown
|
page read and write
|
|
|
|
7FF59FDB3000
|
unkown
|
page readonly
|
|
|
|
111ED055000
|
unkown
|
page read and write
|
|
|
|
620612B000
|
unkown
|
page read and write
|
|
|
|
9BAB000
|
unkown
|
page readonly
|
|
|
|
534C000
|
unkown
|
page read and write
|
|
|
|
5188000
|
unkown
|
page read and write
|
|
|
|
957F000
|
stack
|
page read and write
|
|
|
|
BA20000
|
unkown
|
page read and write
|
|
|
|
C560000
|
unkown
|
page read and write
|
|
|
|
111EF179000
|
unkown
|
page read and write
|
|
|
|
23A16B52000
|
unkown
|
page read and write
|
|
|
|
E98A000
|
unkown
|
page readonly
|
|
|
|
7FF5051FF000
|
unkown
|
page readonly
|
|
|
|
A9C7000
|
unkown
|
page readonly
|
|
|
|
7FF5BDFA6000
|
unkown
|
page readonly
|
|
|
|
7FF59F59B000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C23000
|
unkown
|
page readonly
|
|
|
|
9F85000
|
unkown
|
page readonly
|
|
|
|
EFFB000
|
unkown
|
page read and write
|
|
|
|
23A1719B000
|
unkown
|
page read and write
|
|
|
|
111F0710000
|
unkown
|
page read and write
|
|
|
|
912A000
|
unkown
|
page read and write
|
|
|
|
23A16B3D000
|
unkown
|
page read and write
|
|
|
|
23A16253000
|
unkown
|
page read and write
|
|
|
|
EEF2000
|
unkown
|
page read and write
|
|
|
|
7650000
|
unkown
|
page read and write
|
|
|
|
D503BB000
|
unkown
|
page read and write
|
|
|
|
916C000
|
unkown
|
page read and write
|
|
|
|
21B5A7E000
|
unkown
|
page read and write
|
|
|
|
23A169F0000
|
unkown
|
page read and write
|
|
|
|
23A16BC3000
|
unkown
|
page read and write
|
|
|
|
9D82000
|
unkown
|
page readonly
|
|
|
|
23A16B4B000
|
unkown
|
page read and write
|
|
|
|
7FF5E06DE000
|
unkown
|
page readonly
|
|
|
|
8F50000
|
unkown
|
page readonly
|
|
|
|
26835C4A000
|
unkown
|
page read and write
|
|
|
|
111ECFE0000
|
unkown
|
page readonly
|
|
|
|
23A16200000
|
unkown
|
page read and write
|
|
|
|
23A16B51000
|
unkown
|
page read and write
|
|
|
|
7FF51CBA2000
|
unkown
|
page readonly
|
|
|
|
23A16B55000
|
unkown
|
page read and write
|
|
|
|
23A1624A000
|
unkown
|
page read and write
|
|
|
|
2B97000
|
unkown
|
page readonly
|
|
|
|
7FF5E0BD4000
|
unkown
|
page readonly
|
|
|
|
D50779000
|
unkown
|
page read and write
|
|
|
|
147A08A0000
|
unkown
|
page readonly
|
|
|
|
21C54ED0000
|
unkown
|
page readonly
|
|
|
|
60E8FFF000
|
unkown
|
page read and write
|
|
|
|
26835C70000
|
unkown
|
page read and write
|
|
|
|
1E65D5D0000
|
unkown
|
page read and write
|
|
|
|
23A16B81000
|
unkown
|
page read and write
|
|
|
|
7FF59F59F000
|
unkown
|
page readonly
|
|
|
|
7FF5504B6000
|
unkown
|
page readonly
|
|
|
|
2B10000
|
unkown
|
page readonly
|
|
|
|
7FF0000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B76000
|
unkown
|
page readonly
|
|
|
|
111EF1FE000
|
unkown
|
page read and write
|
|
|
|
EE6F000
|
unkown
|
page read and write
|
|
|
|
2D73000
|
unkown
|
page readonly
|
|
|
|
7FF59FBD8000
|
unkown
|
page readonly
|
|
|
|
7FF50522A000
|
unkown
|
page readonly
|
|
|
|
9F39000
|
unkown
|
page readonly
|
|
|
|
F2D5000
|
unkown
|
page read and write
|
|
|
|
AF1D000
|
unkown
|
page read and write
|
|
|
|
1E65D611000
|
unkown
|
page read and write
|
|
|
|
1E65D910000
|
unkown
|
page readonly
|
|
|
|
E440000
|
unkown
|
page read and write
|
|
|
|
26835C7F000
|
unkown
|
page read and write
|
|
|
|
23A16B69000
|
unkown
|
page read and write
|
|
|
|
F342000
|
unkown
|
page read and write
|
|
|
|
26835C02000
|
unkown
|
page read and write
|
|
|
|
23A169F0000
|
unkown
|
page read and write
|
|
|
|
7FF59FDC7000
|
unkown
|
page readonly
|
|
|
|
BA10000
|
unkown
|
page read and write
|
|
|
|
8D7A000
|
unkown
|
page readonly
|
|
|
|
A6C0000
|
unkown
|
page readonly
|
|
|
|
A5D0000
|
unkown
|
page readonly
|
|
|
|
1E65D850000
|
unkown
|
page readonly
|
|
|
|
7FF59FCE6000
|
unkown
|
page readonly
|
|
|
|
2534749B000
|
unkown
|
page read and write
|
|
|
|
23A16B61000
|
unkown
|
page read and write
|
|
|
|
9D52000
|
unkown
|
page readonly
|
|
|
|
23A162B3000
|
unkown
|
page read and write
|
|
|
|
7FF51CA94000
|
unkown
|
page readonly
|
|
|
|
A12C000
|
unkown
|
page readonly
|
|
|
|
8F60000
|
unkown
|
page read and write
|
|
|
|
23A16B5D000
|
unkown
|
page read and write
|
|
|
|
B41D000
|
unkown
|
page read and write
|
|
|
|
C300000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E37000
|
unkown
|
page readonly
|
|
|
|
5830000
|
unkown
|
page readonly
|
|
|
|
CC10000
|
unkown
|
page read and write
|
|
|
|
C05D000
|
unkown
|
page read and write
|
|
|
|
E9EC000
|
unkown
|
page read and write
|
|
|
|
BB67000
|
unkown
|
page read and write
|
|
|
|
111ED000000
|
unkown
|
page read and write
|
|
|
|
A4C7000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B38000
|
unkown
|
page readonly
|
|
|
|
BA00000
|
unkown
|
page read and write
|
|
|
|
8D7A000
|
unkown
|
page readonly
|
|
|
|
7FF59F659000
|
unkown
|
page readonly
|
|
|
|
F24D000
|
unkown
|
page read and write
|
|
|
|
7FF550483000
|
unkown
|
page readonly
|
|
|
|
E34F000
|
unkown
|
page read and write
|
|
|
|
5770000
|
unkown
|
page readonly
|
|
|
|
7FF51CB5D000
|
unkown
|
page readonly
|
|
|
|
23A17002000
|
unkown
|
page read and write
|
|
|
|
7FF59FCBF000
|
unkown
|
page readonly
|
|
|
|
2B10000
|
unkown
|
page readonly
|
|
|
|
F022000
|
unkown
|
page read and write
|
|
|
|
7FF5BF6E6000
|
unkown
|
page readonly
|
|
|
|
23A16B54000
|
unkown
|
page read and write
|
|
|
|
F41D000
|
unkown
|
page read and write
|
|
|
|
1E65808C000
|
unkown
|
page read and write
|
|
|
|
620647E000
|
unkown
|
page read and write
|
|
|
|
1E6580FC000
|
unkown
|
page read and write
|
|
|
|
111ED06D000
|
unkown
|
page read and write
|
|
|
|
B830000
|
unkown
|
page read and write
|
|
|
|
7FF51C875000
|
unkown
|
page readonly
|
|
|
|
7590000
|
unkown
|
page readonly
|
|
|
|
E995000
|
unkown
|
page readonly
|
|
|
|
7E60000
|
unkown
|
page readonly
|
|
|
|
1529D130000
|
unkown
|
page readonly
|
|
|
|
7FF550471000
|
unkown
|
page readonly
|
|
|
|
7FF5052BD000
|
unkown
|
page readonly
|
|
|
|
23A16B2F000
|
unkown
|
page read and write
|
|
|
|
23A16B40000
|
unkown
|
page read and write
|
|
|
|
7FF550366000
|
unkown
|
page readonly
|
|
|
|
C15F000
|
stack
|
page read and write
|
|
|
|
B05A000
|
unkown
|
page read and write
|
|
|
|
1E658602000
|
unkown
|
page read and write
|
|
|
|
289D000
|
unkown
|
page readonly
|
|
|
|
111EF436000
|
unkown
|
page read and write
|
|
|
|
5780000
|
heap private
|
page read and write
|
|
|
|
EE44000
|
unkown
|
page read and write
|
|
|
|
C520000
|
unkown
|
page read and write
|
|
|
|
1E65D8D0000
|
unkown
|
page readonly
|
|
|
|
2D7E000
|
unkown
|
page readonly
|
|
|
|
DBE0000
|
unkown
|
page read and write
|
|
|
|
8F40000
|
unkown
|
page readonly
|
|
|
|
7E80000
|
unkown
|
page readonly
|
|
|
|
7FF54262D000
|
unkown
|
page readonly
|
|
|
|
216DFB000
|
unkown
|
page read and write
|
|
|
|
57C0000
|
unkown
|
page read and write
|
|
|
|
DC60000
|
unkown
|
page read and write
|
|
|
|
556B000
|
heap default
|
page read and write
|
|
|
|
B5ED000
|
unkown
|
page read and write
|
|
|
|
F030000
|
unkown
|
page read and write
|
|
|
|
7FCF000
|
stack
|
page read and write
|
|
|
|
D059000
|
unkown
|
page read and write
|
|
|
|
23A17002000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E21000
|
unkown
|
page readonly
|
|
|
|
23A16B52000
|
unkown
|
page read and write
|
|
|
|
5550000
|
unkown
|
page execute read
|
|
|
|
E970000
|
unkown
|
page readonly
|
|
|
|
F4E3000
|
unkown
|
page read and write
|
|
|
|
5392000
|
unkown
|
page execute read
|
|
|
|
8F9E000
|
unkown
|
page read and write
|
|
|
|
1479EE13000
|
unkown
|
page read and write
|
|
|
|
8D7D000
|
unkown
|
page readonly
|
|
|
|
23A16B24000
|
unkown
|
page read and write
|
|
|
|
8D3A000
|
unkown
|
page readonly
|
|
|
|
2B0D000
|
unkown
|
page readonly
|
|
|
|
1E658D80000
|
unkown
|
page read and write
|
|
|
|
9E17000
|
unkown
|
page readonly
|
|
|
|
1398000
|
unkown
|
page readonly
|
|
|
|
B860000
|
unkown
|
page read and write
|
|
|
|
2898000
|
unkown
|
page readonly
|
|
|
|
C600000
|
unkown
|
page read and write
|
|
|
|
23A17003000
|
unkown
|
page read and write
|
|
|
|
B8B0000
|
unkown
|
page read and write
|
|
|
|
111ED160000
|
unkown
|
page read and write
|
|
|
|
23A16B62000
|
unkown
|
page read and write
|
|
|
|
B189000
|
unkown
|
page read and write
|
|
|
|
92A0000
|
unkown
|
page read and write
|
|
|
|
111EF17B000
|
unkown
|
page read and write
|
|
|
|
111ED0C6000
|
unkown
|
page read and write
|
|
|
|
A559000
|
unkown
|
page readonly
|
|
|
|
2B97000
|
unkown
|
page readonly
|
|
|
|
111ED093000
|
unkown
|
page read and write
|
|
|
|
8D65000
|
unkown
|
page readonly
|
|
|
|
2D31000
|
unkown
|
page readonly
|
|
|
|
2A7F000
|
unkown
|
page readonly
|
|
|
|
23A16B91000
|
unkown
|
page read and write
|
|
|
|
2B45000
|
unkown
|
page readonly
|
|
|
|
7FF51C892000
|
unkown
|
page readonly
|
|
|
|
B880000
|
unkown
|
page read and write
|
|
|
|
F30A000
|
unkown
|
page read and write
|
|
|
|
23A1708E000
|
unkown
|
page read and write
|
|
|
|
21757F000
|
unkown
|
page read and write
|
|
|
|
26835D08000
|
unkown
|
page read and write
|
|
|
|
F345000
|
unkown
|
page read and write
|
|
|
|
7FF54280C000
|
unkown
|
page readonly
|
|
|
|
2BDC000
|
unkown
|
page readonly
|
|
|
|
C2B0000
|
unkown
|
page read and write
|
|
|
|
E9A4000
|
unkown
|
page readonly
|
|
|
|
1E65D498000
|
unkown
|
page read and write
|
|
|
|
EDCC000
|
unkown
|
page read and write
|
|
|
|
23A16B40000
|
unkown
|
page read and write
|
|
|
|
7FF52792B000
|
unkown
|
page readonly
|
|
|
|
7FF5BDEC3000
|
unkown
|
page readonly
|
|
|
|
C540000
|
unkown
|
page read and write
|
|
|
|
8D11000
|
unkown
|
page readonly
|
|
|
|
23A16980000
|
unkown
|
page write copy
|
|
|
|
8D6A000
|
unkown
|
page readonly
|
|
|
|
1E658759000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E72000
|
unkown
|
page readonly
|
|
|
|
236D5902000
|
unkown
|
page read and write
|
|
|
|
AC9E000
|
unkown
|
page read and write
|
|
|
|
947D000
|
unkown
|
page read and write
|
|
|
|
7FF0000
|
unkown
|
page readonly
|
|
|
|
5800000
|
heap private
|
page read and write
|
|
|
|
E9EA000
|
unkown
|
page read and write
|
|
|
|
1E658F50000
|
unkown
|
page readonly
|
|
|
|
1E658078000
|
unkown
|
page read and write
|
|
|
|
B9E0000
|
unkown
|
page read and write
|
|
|
|
8DA0000
|
unkown
|
page readonly
|
|
|
|
A9F0000
|
unkown
|
page readonly
|
|
|
|
C4D0000
|
unkown
|
page read and write
|
|
|
|
5810000
|
unkown
|
page read and write
|
|
|
|
7FF5BDFA3000
|
unkown
|
page readonly
|
|
|
|
23A16302000
|
unkown
|
page read and write
|
|
|
|
A0A9000
|
unkown
|
page readonly
|
|
|
|
7FF5422C5000
|
unkown
|
page readonly
|
|
|
|
1479EE00000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFD4000
|
unkown
|
page readonly
|
|
|
|
DCE0000
|
unkown
|
page read and write
|
|
|
|
1E65D6B3000
|
unkown
|
page read and write
|
|
|
|
7FF59FAD0000
|
unkown
|
page readonly
|
|
|
|
7FF5BDEF6000
|
unkown
|
page readonly
|
|
|
|
2BAD000
|
unkown
|
page readonly
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
7FF5E0B74000
|
unkown
|
page readonly
|
|
|
|
7FF5E0D6F000
|
unkown
|
page readonly
|
|
|
|
23A162AA000
|
unkown
|
page read and write
|
|
|
|
7FF59FB87000
|
unkown
|
page readonly
|
|
|
|
23A17002000
|
unkown
|
page read and write
|
|
|
|
7FF5BF719000
|
unkown
|
page readonly
|
|
|
|
25347800000
|
unkown
|
page readonly
|
|
|
|
111EF453000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF77000
|
unkown
|
page readonly
|
|
|
|
111EF412000
|
unkown
|
page read and write
|
|
|
|
111ED15E000
|
unkown
|
page read and write
|
|
|
|
26835D02000
|
unkown
|
page read and write
|
|
|
|
9B92000
|
unkown
|
page readonly
|
|
|
|
F326000
|
unkown
|
page read and write
|
|
|
|
23A16229000
|
unkown
|
page read and write
|
|
|
|
8CF6000
|
unkown
|
page readonly
|
|
|
|
26835C13000
|
unkown
|
page read and write
|
|
|
|
23A16B3F000
|
unkown
|
page read and write
|
|
|
|
A930000
|
unkown
|
page readonly
|
|
|
|
2A76000
|
unkown
|
page readonly
|
|
|
|
23A16B56000
|
unkown
|
page read and write
|
|
|
|
1E65D63F000
|
unkown
|
page read and write
|
|
|
|
111EF200000
|
unkown
|
page readonly
|
|
|
|
23A17002000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D8D000
|
unkown
|
page readonly
|
|
|
|
111ED09B000
|
unkown
|
page read and write
|
|
|
|
5380000
|
unkown
|
page read and write
|
|
|
|
5420000
|
unkown
|
page readonly
|
|
|
|
DE8F000
|
stack
|
page read and write
|
|
|
|
111EF583000
|
unkown
|
page read and write
|
|
|
|
B7DE000
|
unkown
|
page read and write
|
|
|
|
CBED000
|
unkown
|
page read and write
|
|
|
|
5380000
|
unkown
|
page read and write
|
|
|
|
23A16213000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C1D000
|
unkown
|
page readonly
|
|
|
|
23A16B47000
|
unkown
|
page read and write
|
|
|
|
CE04000
|
unkown
|
page read and write
|
|
|
|
A780000
|
unkown
|
page readonly
|
|
|
|
23A16B70000
|
unkown
|
page read and write
|
|
|
|
1E65D5F0000
|
unkown
|
page read and write
|
|
|
|
518C000
|
unkown
|
page read and write
|
|
|
|
23A16B93000
|
unkown
|
page read and write
|
|
|
|
23A17200000
|
unkown
|
page readonly
|
|
|
|
23A16B51000
|
unkown
|
page read and write
|
|
|
|
9022000
|
unkown
|
page read and write
|
|
|
|
9232000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBCF000
|
unkown
|
page readonly
|
|
|
|
9743000
|
unkown
|
page read and write
|
|
|
|
7FF5BF79A000
|
unkown
|
page readonly
|
|
|
|
F542000
|
unkown
|
page read and write
|
|
|
|
7FF5E082A000
|
unkown
|
page readonly
|
|
|
|
7FF59F96F000
|
unkown
|
page readonly
|
|
|
|
2B45000
|
unkown
|
page readonly
|
|
|
|
973C000
|
unkown
|
page read and write
|
|
|
|
111ED072000
|
unkown
|
page read and write
|
|
|
|
111EF1E0000
|
unkown
|
page read and write
|
|
|
|
E14D000
|
unkown
|
page read and write
|
|
|
|
2BBD000
|
unkown
|
page readonly
|
|
|
|
A6A2000
|
unkown
|
page readonly
|
|
|
|
25347456000
|
unkown
|
page read and write
|
|
|
|
2CDA000
|
unkown
|
page readonly
|
|
|
|
ADDE000
|
unkown
|
page read and write
|
|
|
|
FC2000
|
unkown
|
page readonly
|
|
|
|
B276000
|
unkown
|
page read and write
|
|
|
|
E97B000
|
unkown
|
page readonly
|
|
|
|
23A162F6000
|
unkown
|
page read and write
|
|
|
|
ECB5000
|
unkown
|
page read and write
|
|
|
|
9743000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C1F000
|
unkown
|
page readonly
|
|
|
|
71D0000
|
unkown
|
page readonly
|
|
|
|
23A17102000
|
unkown
|
page read and write
|
|
|
|
1E65D59C000
|
unkown
|
page readonly
|
|
|
|
BB4D000
|
unkown
|
page read and write
|
|
|
|
111EEFE0000
|
unkown
|
page readonly
|
|
|
|
5670000
|
unkown
|
page readonly
|
|
|
|
F05E000
|
unkown
|
page read and write
|
|
|
|
9220000
|
unkown
|
page read and write
|
|
|
|
7FF51C996000
|
unkown
|
page readonly
|
|
|
|
8819000
|
unkown
|
page readonly
|
|
|
|
5410000
|
heap private
|
page read and write
|
|
|
|
B429000
|
unkown
|
page read and write
|
|
|
|
216BFA000
|
unkown
|
page read and write
|
|
|
|
7FF59FB6F000
|
unkown
|
page readonly
|
|
|
|
1E65D840000
|
unkown
|
page readonly
|
|
|
|
C630000
|
unkown
|
page read and write
|
|
|
|
23A16BAD000
|
unkown
|
page read and write
|
|
|
|
620697E000
|
unkown
|
page read and write
|
|
|
|
74DC87E000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFEB000
|
unkown
|
page readonly
|
|
|
|
7FF4FFF4A000
|
unkown
|
page readonly
|
|
|
|
7FF542A31000
|
unkown
|
page readonly
|
|
|
|
7FF542994000
|
unkown
|
page readonly
|
|
|
|
7FF59F843000
|
unkown
|
page readonly
|
|
|
|
B4EC000
|
unkown
|
page read and write
|
|
|
|
57B0000
|
unkown
|
page readonly
|
|
|
|
9BC4000
|
unkown
|
page readonly
|
|
|
|
CFEE000
|
unkown
|
page read and write
|
|
|
|
23A16B4B000
|
unkown
|
page read and write
|
|
|
|
7FF51C776000
|
unkown
|
page readonly
|
|
|
|
8C97000
|
unkown
|
page readonly
|
|
|
|
2172FB000
|
unkown
|
page read and write
|
|
|
|
9220000
|
unkown
|
page read and write
|
|
|
|
F048000
|
unkown
|
page read and write
|
|
|
|
B264000
|
unkown
|
page read and write
|
|
|
|
7FF51CABD000
|
unkown
|
page readonly
|
|
|
|
7E70000
|
unkown
|
page readonly
|
|
|
|
5392000
|
unkown
|
page execute read
|
|
|
|
7FF4FFF77000
|
unkown
|
page readonly
|
|
|
|
111EF132000
|
unkown
|
page read and write
|
|
|
|
74DCB77000
|
unkown
|
page read and write
|
|
|
|
2C9B000
|
unkown
|
page readonly
|
|
|
|
EC5B000
|
unkown
|
page read and write
|
|
|
|
7FF5BF7C2000
|
unkown
|
page readonly
|
|
|
|
111ED13E000
|
unkown
|
page read and write
|
|
|
|
60E8979000
|
unkown
|
page read and write
|
|
|
|
111EF168000
|
unkown
|
page read and write
|
|
|
|
7FF505148000
|
unkown
|
page readonly
|
|
|
|
F435000
|
unkown
|
page read and write
|
|
|
|
7FF59FD0D000
|
unkown
|
page readonly
|
|
|
|
7FF59F871000
|
unkown
|
page readonly
|
|
|
|
2A56000
|
unkown
|
page readonly
|
|
|
|
B536000
|
unkown
|
page read and write
|
|
|
|
7FF5E0644000
|
unkown
|
page readonly
|
|
|
|
7FF59FD17000
|
unkown
|
page readonly
|
|
|
|
7FF59FDC7000
|
unkown
|
page readonly
|
|
|
|
21C54D00000
|
unkown
|
page read and write
|
|
|
|
23A16F50000
|
unkown
|
page readonly
|
|
|
|
23A16B93000
|
unkown
|
page read and write
|
|
|
|
F1E1000
|
unkown
|
page read and write
|
|
|
|
23A16B66000
|
unkown
|
page read and write
|
|
|
|
2D9D000
|
unkown
|
page readonly
|
|
|
|
CDBC000
|
unkown
|
page read and write
|
|
|
|
916C000
|
unkown
|
page read and write
|
|
|
|
7FF5E0CE1000
|
unkown
|
page readonly
|
|
|
|
B175000
|
unkown
|
page read and write
|
|
|
|
111EF600000
|
unkown
|
page read and write
|
|
|
|
21651B000
|
unkown
|
page read and write
|
|
|
|
236D5800000
|
unkown
|
page read and write
|
|
|
|
8F60000
|
unkown
|
page read and write
|
|
|
|
C94D000
|
unkown
|
page read and write
|
|
|
|
E4DE000
|
unkown
|
page read and write
|
|
|
|
E9F0000
|
unkown
|
page read and write
|
|
|
|
BA90000
|
unkown
|
page read and write
|
|
|
|
111EF11D000
|
unkown
|
page read and write
|
|
|
|
7FF5E09D2000
|
unkown
|
page readonly
|
|
|
|
23A16B2E000
|
unkown
|
page read and write
|
|
|
|
8D7D000
|
unkown
|
page readonly
|
|
|
|
F492000
|
unkown
|
page read and write
|
|
|
|
EA17000
|
unkown
|
page read and write
|
|
|
|
A527000
|
unkown
|
page readonly
|
|
|
|
9222000
|
unkown
|
page read and write
|
|
|
|
111EF119000
|
unkown
|
page read and write
|
|
|
|
7FF542A47000
|
unkown
|
page readonly
|
|
|
|
236D586F000
|
unkown
|
page read and write
|
|
|
|
2D8F000
|
unkown
|
page readonly
|
|
|
|
1E658FB0000
|
unkown
|
page readonly
|
|
|
|
25347500000
|
unkown
|
page read and write
|
|
|
|
E98C000
|
unkown
|
page readonly
|
|
|
|
1529D060000
|
unkown
|
page readonly
|
|
|
|
5348000
|
unkown
|
page read and write
|
|
|
|
2BA3000
|
unkown
|
page readonly
|
|
|
|
111EF162000
|
unkown
|
page read and write
|
|
|
|
71D0000
|
unkown
|
page readonly
|
|
|
|
BB99000
|
unkown
|
page read and write
|
|
|
|
23A16B2E000
|
unkown
|
page read and write
|
|
|
|
236D6002000
|
unkown
|
page read and write
|
|
|
|
6206BF9000
|
unkown
|
page read and write
|
|
|
|
111EF10B000
|
unkown
|
page read and write
|
|
|
|
AB8A000
|
unkown
|
page read and write
|
|
|
|
7FF55046F000
|
unkown
|
page readonly
|
|
|
|
C7B0000
|
unkown
|
page read and write
|
|
|
|
26835BE0000
|
unkown
|
page readonly
|
|
|
|
7FF550566000
|
unkown
|
page readonly
|
|
|
|
7FF51CA77000
|
unkown
|
page readonly
|
|
|
|
76C2277000
|
unkown
|
page read and write
|
|
|
|
12DF000
|
unkown
|
page readonly
|
|
|
|
7FF4FFDE7000
|
unkown
|
page readonly
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
1E658113000
|
unkown
|
page read and write
|
|
|
|
7FF59F877000
|
unkown
|
page readonly
|
|
|
|
C590000
|
unkown
|
page read and write
|
|
|
|
7FF542A5A000
|
unkown
|
page readonly
|
|
|
|
23A16BA3000
|
unkown
|
page read and write
|
|
|
|
2D5B000
|
unkown
|
page readonly
|
|
|
|
2A78000
|
unkown
|
page readonly
|
|
|
|
C890000
|
unkown
|
page read and write
|
|
|
|
23A16B71000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E4A000
|
unkown
|
page readonly
|
|
|
|
111EF119000
|
unkown
|
page read and write
|
|
|
|
111ED090000
|
unkown
|
page read and write
|
|
|
|
B05E000
|
unkown
|
page read and write
|
|
|
|
21717B000
|
unkown
|
page read and write
|
|
|
|
2B3C000
|
unkown
|
page readonly
|
|
|
|
7FF542438000
|
unkown
|
page readonly
|
|
|
|
C4F0000
|
unkown
|
page read and write
|
|
|
|
F2AC000
|
unkown
|
page read and write
|
|
|
|
EEF7000
|
unkown
|
page read and write
|
|
|
|
23A16B21000
|
unkown
|
page read and write
|
|
|
|
CE32000
|
unkown
|
page read and write
|
|
|
|
23A16B21000
|
unkown
|
page read and write
|
|
|
|
B820000
|
unkown
|
page read and write
|
|
|
|
97F0000
|
unkown
|
page readonly
|
|
|
|
111EF119000
|
unkown
|
page read and write
|
|
|
|
BA50000
|
unkown
|
page read and write
|
|
|
|
4FE0000
|
unkown
|
page execute read
|
|
|
|
2534748A000
|
unkown
|
page read and write
|
|
|
|
111F0510000
|
unkown
|
page read and write
|
|
|
|
7FF550233000
|
unkown
|
page readonly
|
|
|
|
23A16BA3000
|
unkown
|
page read and write
|
|
|
|
1529DD40000
|
unkown
|
page read and write
|
|
|
|
26835C4D000
|
unkown
|
page read and write
|
|
|
|
111EEFB0000
|
unkown
|
page read and write
|
|
|
|
23A16C00000
|
unkown
|
page readonly
|
|
|
|
23A1703C000
|
unkown
|
page read and write
|
|
|
|
2CD2000
|
unkown
|
page readonly
|
|
|
|
C990000
|
unkown
|
page read and write
|
|
|
|
74DC54B000
|
unkown
|
page read and write
|
|
|
|
1E65808E000
|
unkown
|
page read and write
|
|
|
|
7FF5BF4EF000
|
unkown
|
page readonly
|
|
|
|
216CFB000
|
unkown
|
page read and write
|
|
|
|
B110000
|
unkown
|
page read and write
|
|
|
|
C2C0000
|
unkown
|
page read and write
|
|
|
|
7FF504F71000
|
unkown
|
page readonly
|
|
|
|
7FF5BDF07000
|
unkown
|
page readonly
|
|
|
|
236D5790000
|
unkown
|
page readonly
|
|
|
|
7FF5E0DC9000
|
unkown
|
page readonly
|
|
|
|
7FF59FA95000
|
unkown
|
page readonly
|
|
|
|
111EF1CF000
|
unkown
|
page read and write
|
|
|
|
6206777000
|
unkown
|
page read and write
|
|
|
|
23A16B36000
|
unkown
|
page read and write
|
|
|
|
8C13000
|
unkown
|
page readonly
|
|
|
|
21659E000
|
unkown
|
page read and write
|
|
|
|
5520000
|
unkown
|
page execute read
|
|
|
|
B950000
|
unkown
|
page read and write
|
|
|
|
111EEFA0000
|
unkown
|
page read and write
|
|
|
|
7FF50524D000
|
unkown
|
page readonly
|
|
|
|
111F0110000
|
unkown
|
page read and write
|
|
|
|
9EC5000
|
unkown
|
page readonly
|
|
|
|
23A16B3D000
|
unkown
|
page read and write
|
|
|
|
23A16B3F000
|
unkown
|
page read and write
|
|
|
|
216F7B000
|
unkown
|
page read and write
|
|
|
|
C960000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF8A000
|
unkown
|
page readonly
|
|
|
|
111F0010000
|
unkown
|
page read and write
|
|
|
|
111F0410000
|
unkown
|
page read and write
|
|
|
|
23A16B59000
|
unkown
|
page read and write
|
|
|
|
B5D0000
|
unkown
|
page read and write
|
|
|
|
E99F000
|
unkown
|
page readonly
|
|
|
|
7FF51CAED000
|
unkown
|
page readonly
|
|
|
|
1529CF10000
|
unkown
|
page read and write
|
|
|
|
111ECFD0000
|
heap default
|
page read and write
|
|
|
|
2D45000
|
unkown
|
page readonly
|
|
|
|
B232000
|
unkown
|
page read and write
|
|
|
|
23A16B21000
|
unkown
|
page read and write
|
|
|
|
7FF51C899000
|
unkown
|
page readonly
|
|
|
|
1E65D340000
|
unkown
|
page readonly
|
|
|
|
90E8000
|
unkown
|
page read and write
|
|
|
|
2BC0000
|
unkown
|
page readonly
|
|
|
|
C840000
|
unkown
|
page read and write
|
|
|
|
8C6E000
|
unkown
|
page readonly
|
|
|
|
7FF55052D000
|
unkown
|
page readonly
|
|
|
|
111EEF90000
|
unkown
|
page readonly
|
|
|
|
23A16B24000
|
unkown
|
page read and write
|
|
|
|
111EF682000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D96000
|
unkown
|
page readonly
|
|
|
|
E986000
|
unkown
|
page readonly
|
|
|
|
8EAD000
|
unkown
|
page readonly
|
|
|
|
1E65D300000
|
unkown
|
page read and write
|
|
|
|
C820000
|
unkown
|
page read and write
|
|
|
|
23A161D0000
|
heap default
|
page read and write
|
|
|
|
21B5B79000
|
unkown
|
page read and write
|
|
|
|
23A16B71000
|
unkown
|
page read and write
|
|
|
|
2A7F000
|
unkown
|
page readonly
|
|
|
|
7FF5E0D83000
|
unkown
|
page readonly
|
|
|
|
7FE0000
|
unkown
|
page read and write
|
|
|
|
7FF505259000
|
unkown
|
page readonly
|
|
|
|
F464000
|
unkown
|
page read and write
|
|
|
|
2DB8000
|
unkown
|
page readonly
|
|
|
|
EDBC000
|
unkown
|
page read and write
|
|
|
|
7FF51C9B0000
|
unkown
|
page readonly
|
|
|
|
DD30000
|
unkown
|
page read and write
|
|
|
|
E400000
|
unkown
|
page read and write
|
|
|
|
23A16B21000
|
unkown
|
page read and write
|
|
|
|
23A16B51000
|
unkown
|
page read and write
|
|
|
|
111EF198000
|
unkown
|
page read and write
|
|
|
|
E61D000
|
unkown
|
page read and write
|
|
|
|
CDCD000
|
unkown
|
page read and write
|
|
|
|
6FF0000
|
unkown
|
page read and write
|
|
|
|
2A56000
|
unkown
|
page readonly
|
|
|
|
E9C2000
|
unkown
|
page readonly
|
|
|
|
A515000
|
unkown
|
page readonly
|
|
|
|
111ED0E3000
|
unkown
|
page read and write
|
|
|
|
2B3C000
|
unkown
|
page readonly
|
|
|
|
23A16B3E000
|
unkown
|
page read and write
|
|
|
|
23A16B69000
|
unkown
|
page read and write
|
|
|
|
23A16BA2000
|
unkown
|
page read and write
|
|
|
|
2ACB000
|
unkown
|
page readonly
|
|
|
|
9064000
|
unkown
|
page read and write
|
|
|
|
23A16B81000
|
unkown
|
page read and write
|
|
|
|
26835D13000
|
unkown
|
page read and write
|
|
|
|
E93C0BB000
|
unkown
|
page read and write
|
|
|
|
7FF51C904000
|
unkown
|
page readonly
|
|
|
|
8FE0000
|
unkown
|
page read and write
|
|
|
|
23A16249000
|
unkown
|
page read and write
|
|
|
|
B12F000
|
unkown
|
page read and write
|
|
|
|
2CBE000
|
unkown
|
page readonly
|
|
|
|
EFE0000
|
unkown
|
page read and write
|
|
|
|
23A16B51000
|
unkown
|
page read and write
|
|
|
|
F232000
|
unkown
|
page read and write
|
|
|
|
E97F000
|
unkown
|
page readonly
|
|
|
|
7FF59FD84000
|
unkown
|
page readonly
|
|
|
|
B064000
|
unkown
|
page read and write
|
|
|
|
1479EF02000
|
unkown
|
page read and write
|
|
|
|
111EF1FC000
|
unkown
|
page read and write
|
|
|
|
BAA0000
|
unkown
|
page read and write
|
|
|
|
23A16BA2000
|
unkown
|
page read and write
|
|
|
|
23A16B3D000
|
unkown
|
page read and write
|
|
|
|
54F0000
|
unkown
|
page read and write
|
|
|
|
F2EF000
|
unkown
|
page read and write
|
|
|
|
E5DF000
|
stack
|
page read and write
|
|
|
|
EFAF000
|
unkown
|
page read and write
|
|
|
|
111EF157000
|
unkown
|
page read and write
|
|
|
|
2D82000
|
unkown
|
page readonly
|
|
|
|
216E7B000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D59000
|
unkown
|
page readonly
|
|
|
|
2AC4000
|
unkown
|
page readonly
|
|
|
|
1E658075000
|
unkown
|
page read and write
|
|
|
|
2B52000
|
unkown
|
page readonly
|
|
|
|
2BC0000
|
unkown
|
page readonly
|
|
|
|
23A16B92000
|
unkown
|
page read and write
|
|
|
|
236D5888000
|
unkown
|
page read and write
|
|
|
|
7FF59FA0B000
|
unkown
|
page readonly
|
|
|
|
F335000
|
unkown
|
page read and write
|
|
|
|
A730000
|
unkown
|
page readonly
|
|
|
|
23A1624B000
|
unkown
|
page read and write
|
|
|
|
111ED0B6000
|
unkown
|
page read and write
|
|
|
|
7FF5BF5B6000
|
unkown
|
page readonly
|
|
|
|
7FF500027000
|
unkown
|
page readonly
|
|
|
|
7FF59FB00000
|
unkown
|
page readonly
|
|
|
|
E9B7000
|
unkown
|
page readonly
|
|
|
|
23A16B92000
|
unkown
|
page read and write
|
|
|
|
76C1EFE000
|
unkown
|
page read and write
|
|
|
|
1E658056000
|
unkown
|
page read and write
|
|
|
|
7FF505115000
|
unkown
|
page readonly
|
|
|
|
A960000
|
unkown
|
page readonly
|
|
|
|
111F0610000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D50000
|
unkown
|
page readonly
|
|
|
|
7FF59FCD3000
|
unkown
|
page readonly
|
|
|
|
5823000
|
heap private
|
page read and write
|
|
|
|
7FF5428C8000
|
unkown
|
page readonly
|
|
|
|
23A16B92000
|
unkown
|
page read and write
|
|
|
|
C5C0000
|
unkown
|
page read and write
|
|
|
|
7FF550380000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B4F000
|
unkown
|
page readonly
|
|
|
|
111ED09D000
|
unkown
|
page read and write
|
|
|
|
96C0000
|
unkown
|
page read and write
|
|
|
|
216FFB000
|
unkown
|
page read and write
|
|
|
|
91AE000
|
unkown
|
page read and write
|
|
|
|
DECD000
|
unkown
|
page read and write
|
|
|
|
EA08000
|
unkown
|
page read and write
|
|
|
|
2BBD000
|
unkown
|
page readonly
|
|
|
|
7FF59FCDD000
|
unkown
|
page readonly
|
|
|
|
111EF189000
|
unkown
|
page read and write
|
|
|
|
7FF5BF6CF000
|
unkown
|
page readonly
|
|
|
|
7FF5E0DCE000
|
unkown
|
page readonly
|
|
|
|
111ED200000
|
unkown
|
page readonly
|
|
|
|
111ED0E1000
|
unkown
|
page read and write
|
|
|
|
111ED0E3000
|
unkown
|
page read and write
|
|
|
|
23A16B71000
|
unkown
|
page read and write
|
|
|
|
ECFA000
|
unkown
|
page read and write
|
|
|
|
7FF59FB6D000
|
unkown
|
page readonly
|
|
|
|
7FF5052B4000
|
unkown
|
page readonly
|
|
|
|
EF82000
|
unkown
|
page read and write
|
|
|
|
7FF5BF774000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B80000
|
unkown
|
page readonly
|
|
|
|
111EEF40000
|
heap private
|
page read and write
|
|
|
|
23A169F0000
|
unkown
|
page readonly
|
|
|
|
1479EE3F000
|
unkown
|
page read and write
|
|
|
|
111EF583000
|
unkown
|
page read and write
|
|
|
|
21C54CC0000
|
unkown
|
page readonly
|
|
|
|
9360000
|
unkown
|
page read and write
|
|
|
|
111ED070000
|
unkown
|
page read and write
|
|
|
|
C7AD000
|
unkown
|
page read and write
|
|
|
|
2CC1000
|
unkown
|
page readonly
|
|
|
|
134D000
|
unkown
|
page readonly
|
|
|
|
23A16960000
|
unkown
|
page readonly
|
|
|
|
B9D0000
|
unkown
|
page read and write
|
|
|
|
5784000
|
heap private
|
page read and write
|
|
|
|
9248000
|
unkown
|
page read and write
|
|
|
|
2BE5000
|
unkown
|
page readonly
|
|
|
|
7FF59FCF2000
|
unkown
|
page readonly
|
|
|
|
2A73000
|
unkown
|
page readonly
|
|
|
|
8D6A000
|
unkown
|
page readonly
|
|
|
|
B900000
|
unkown
|
page read and write
|
|
|
|
2D94000
|
unkown
|
page readonly
|
|
|
|
1529DAE0000
|
unkown
|
page read and write
|
|
|
|
21727C000
|
unkown
|
page read and write
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C17000
|
unkown
|
page readonly
|
|
|
|
23A16B2F000
|
unkown
|
page read and write
|
|
|
|
7FF4FFF3D000
|
unkown
|
page readonly
|
|
|
|
9E47000
|
unkown
|
page readonly
|
|
|
|
B8C0000
|
unkown
|
page read and write
|
|
|
|
5830000
|
unkown
|
page readonly
|
|
|
|
8D2B000
|
unkown
|
page readonly
|
|
|
|
5810000
|
unkown
|
page read and write
|
|
|
|
23A17000000
|
unkown
|
page read and write
|
|
|
|
1E658D90000
|
unkown
|
page read and write
|
|
|
|
2B0D000
|
unkown
|
page readonly
|
|
|
|
F020000
|
unkown
|
page read and write
|
|
|
|
23A16B24000
|
unkown
|
page read and write
|
|
|
|
289D000
|
unkown
|
page readonly
|
|
|
|
7FF5504C7000
|
unkown
|
page readonly
|
|
|
|
111ED0F1000
|
unkown
|
page read and write
|
|
|
|
CF08000
|
unkown
|
page read and write
|
|
|
|
E430000
|
unkown
|
page read and write
|
|
|
|
7FF5429CD000
|
unkown
|
page readonly
|
|
|
|
111EF1F5000
|
unkown
|
page read and write
|
|
|
|
5BC0000
|
unkown
|
page readonly
|
|
|
|
973C000
|
unkown
|
page read and write
|
|
|
|
B06E000
|
unkown
|
page read and write
|
|
|
|
8CA7000
|
unkown
|
page readonly
|
|
|
|
7FF542301000
|
unkown
|
page readonly
|
|
|
|
2A76000
|
unkown
|
page readonly
|
|
|
|
1529D730000
|
unkown
|
page readonly
|
|
|
|
A5D2000
|
unkown
|
page readonly
|
|
|
|
111EF14F000
|
unkown
|
page read and write
|
|
|
|
111EEFD0000
|
unkown
|
page read and write
|
|
|
|
A4D2000
|
unkown
|
page readonly
|
|
|
|
7FF550337000
|
unkown
|
page readonly
|
|
|
|
23A169E0000
|
unkown
|
page readonly
|
|
|
|
7FF5BF388000
|
unkown
|
page readonly
|
|
|
|
F1B5000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF09000
|
unkown
|
page readonly
|
|
|
|
AEDD000
|
unkown
|
page read and write
|
|
|
|
23A16BD6000
|
unkown
|
page read and write
|
|
|
|
7FF59F846000
|
unkown
|
page readonly
|
|
|
|
111ECF70000
|
heap private
|
page read and write
|
|
|
|
2B56000
|
unkown
|
page readonly
|
|
|
|
7590000
|
unkown
|
page readonly
|
|
|
|
1E65D5F0000
|
unkown
|
page read and write
|
|
|
|
111ED11E000
|
unkown
|
page read and write
|
|
|
|
A8E0000
|
unkown
|
page readonly
|
|
|
|
23A16B61000
|
unkown
|
page read and write
|
|
|
|
7FF5050F6000
|
unkown
|
page readonly
|
|
|
|
E93C777000
|
unkown
|
page read and write
|
|
|
|
23A17003000
|
unkown
|
page read and write
|
|
|
|
2169FF000
|
unkown
|
page read and write
|
|
|
|
111F0000000
|
unkown
|
page read and write
|
|
|
|
F44A000
|
unkown
|
page read and write
|
|
|
|
5805000
|
heap private
|
page read and write
|
|
|
|
BAB0000
|
unkown
|
page read and write
|
|
|
|
7510000
|
unkown
|
page read and write
|
|
|
|
EC8A000
|
unkown
|
page read and write
|
|
|
|
5510000
|
unkown
|
page execute read
|
|
|
|
7FF5BF784000
|
unkown
|
page readonly
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
EF28000
|
unkown
|
page read and write
|
|
|
|
7FF51C768000
|
unkown
|
page readonly
|
|
|
|
A5B0000
|
unkown
|
page readonly
|
|
|
|
A900000
|
unkown
|
page readonly
|
|
|
|
EE2D000
|
unkown
|
page read and write
|
|
|
|
5400000
|
heap default
|
page read and write
|
|
|
|
23A1624E000
|
unkown
|
page read and write
|
|
|
|
1E65D64C000
|
unkown
|
page read and write
|
|
|
|
7FF51CB93000
|
unkown
|
page readonly
|
|
|
|
BBC9000
|
unkown
|
page read and write
|
|
|
|
1529CE40000
|
unkown
|
page readonly
|
|
|
|
7FF4FFF33000
|
unkown
|
page readonly
|
|
|
|
1E65D662000
|
unkown
|
page read and write
|
|
|
|
7FF59FBB6000
|
unkown
|
page readonly
|
|
|
|
7FF550563000
|
unkown
|
page readonly
|
|
|
|
23A16313000
|
unkown
|
page read and write
|
|
|
|
236D5900000
|
unkown
|
page read and write
|
|
|
|
23A16B48000
|
unkown
|
page read and write
|
|
|
|
23A16B3E000
|
unkown
|
page read and write
|
|
|
|
2ACB000
|
unkown
|
page readonly
|
|
|
|
60E8A7A000
|
unkown
|
page read and write
|
|
|
|
9064000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D54000
|
unkown
|
page readonly
|
|
|
|
A849000
|
unkown
|
page readonly
|
|
|
|
23A16B5D000
|
unkown
|
page read and write
|
|
|
|
7FF550577000
|
unkown
|
page readonly
|
|
|
|
5400000
|
heap default
|
page read and write
|
|
|
|
E990000
|
unkown
|
page readonly
|
|
|
|
CE2F000
|
unkown
|
page read and write
|
|
|
|
A892000
|
unkown
|
page readonly
|
|
|
|
1E65D560000
|
unkown
|
page write copy
|
|
|
|
534C000
|
unkown
|
page read and write
|
|
|
|
A4F7000
|
unkown
|
page readonly
|
|
|
|
7FF5BDF64000
|
unkown
|
page readonly
|
|
|
|
1E65D600000
|
unkown
|
page read and write
|
|
|
|
62061AE000
|
unkown
|
page read and write
|
|
|
|
7FF5429D9000
|
unkown
|
page readonly
|
|
|
|
21B5AF9000
|
unkown
|
page read and write
|
|
|
|
F13E000
|
unkown
|
page read and write
|
|
|
|
7FF505226000
|
unkown
|
page readonly
|
|
|
|
5406000
|
heap default
|
page read and write
|
|
|
|
26835D00000
|
unkown
|
page read and write
|
|
|
|
90A6000
|
unkown
|
page read and write
|
|
|
|
2CC1000
|
unkown
|
page readonly
|
|
|
|
23A16B5D000
|
unkown
|
page read and write
|
|
|
|
7FF59FD7D000
|
unkown
|
page readonly
|
|
|
|
111F0710000
|
unkown
|
page read and write
|
|
|
|
96E2000
|
unkown
|
page read and write
|
|
|
|
EEC4000
|
unkown
|
page read and write
|
|
|
|
BAF0000
|
unkown
|
page read and write
|
|
|
|
8858000
|
unkown
|
page readonly
|
|
|
|
95BD000
|
unkown
|
page read and write
|
|
|
|
7FF5BF78B000
|
unkown
|
page readonly
|
|
|
|
111EF109000
|
unkown
|
page read and write
|
|
|
|
7FF5E0640000
|
unkown
|
page readonly
|
|
|
|
236D5AD0000
|
unkown
|
page readonly
|
|
|
|
23A16B5E000
|
unkown
|
page read and write
|
|
|
|
91F0000
|
unkown
|
page read and write
|
|
|
|
1E65D560000
|
unkown
|
page read and write
|
|
|
|
1529D185000
|
heap private
|
page read and write
|
|
|
|
60E8DFE000
|
unkown
|
page read and write
|
|
|
|
9BB2000
|
unkown
|
page readonly
|
|
|
|
DC80000
|
unkown
|
page read and write
|
|
|
|
23A16B93000
|
unkown
|
page read and write
|
|
|
|
111EF484000
|
unkown
|
page read and write
|
|
|
|
8150679000
|
unkown
|
page read and write
|
|
|
|
7FF5503F5000
|
unkown
|
page readonly
|
|
|
|
1E65D4C0000
|
unkown
|
page read and write
|
|
|
|
A830000
|
unkown
|
page readonly
|
|
|
|
B63D000
|
unkown
|
page read and write
|
|
|
|
23A16B2E000
|
unkown
|
page read and write
|
|
|
|
9360000
|
unkown
|
page read and write
|
|
|
|
A4A2000
|
unkown
|
page readonly
|
|
|
|
B890000
|
unkown
|
page read and write
|
|
|
|
2D82000
|
unkown
|
page readonly
|
|
|
|
7FF5E0ABA000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C33000
|
unkown
|
page readonly
|
|
|
|
21737C000
|
unkown
|
page read and write
|
|
|
|
92A0000
|
unkown
|
page read and write
|
|
|
|
111EF195000
|
unkown
|
page read and write
|
|
|
|
23A1701D000
|
unkown
|
page read and write
|
|
|
|
60E8CFF000
|
unkown
|
page read and write
|
|
|
|
C650000
|
unkown
|
page readonly
|
|
|
|
23A16B24000
|
unkown
|
page read and write
|
|
|
|
7FF5504C9000
|
unkown
|
page readonly
|
|
|
|
7FF51CAF9000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE68000
|
unkown
|
page readonly
|
|
|
|
23A16B21000
|
unkown
|
page read and write
|
|
|
|
7FF51C77A000
|
unkown
|
page readonly
|
|
|
|
288E000
|
unkown
|
page readonly
|
|
|
|
23A16B92000
|
unkown
|
page read and write
|
|
|
|
26836400000
|
unkown
|
page readonly
|
|
|
|
7FF5E0CEE000
|
unkown
|
page readonly
|
|
|
|
7FF5BF706000
|
unkown
|
page readonly
|
|
|
|
7FF59FBD5000
|
unkown
|
page readonly
|
|
|
|
AB3F000
|
unkown
|
page read and write
|
|
|
|
111ED102000
|
unkown
|
page read and write
|
|
|
|
23A16289000
|
unkown
|
page read and write
|
|
|
|
7FF51C87F000
|
unkown
|
page readonly
|
|
|
|
AB39000
|
unkown
|
page read and write
|
|
|
|
2BC6000
|
unkown
|
page readonly
|
|
|
|
7FF5BF675000
|
unkown
|
page readonly
|
|
|
|
8C13000
|
unkown
|
page readonly
|
|
|
|
2CEB000
|
unkown
|
page readonly
|
|
|
|
1E658F60000
|
unkown
|
page readonly
|
|
|
|
21B570B000
|
unkown
|
page read and write
|
|
|
|
AA20000
|
unkown
|
page read and write
|
|
|
|
C950000
|
unkown
|
page read and write
|
|
|
|
A67B000
|
unkown
|
page readonly
|
|
|
|
C870000
|
unkown
|
page read and write
|
|
|
|
2171FB000
|
unkown
|
page read and write
|
|
|
|
2CA1000
|
unkown
|
page readonly
|
|
|
|
2D48000
|
unkown
|
page readonly
|
|
|
|
C2D0000
|
unkown
|
page read and write
|
|
|
|
2534742A000
|
unkown
|
page read and write
|
|
|
|
111ED013000
|
unkown
|
page read and write
|
|
|
|
23A16B43000
|
unkown
|
page read and write
|
|
|
|
97D0000
|
unkown
|
page readonly
|
|
|
|
1E65D6B6000
|
unkown
|
page read and write
|
|
|
|
CDCF000
|
unkown
|
page read and write
|
|
|
|
B647000
|
unkown
|
page read and write
|
|
|
|
2D78000
|
unkown
|
page readonly
|
|
|
|
23A1623C000
|
unkown
|
page read and write
|
|
|
|
F3C5000
|
unkown
|
page read and write
|
|
|
|
E24F000
|
stack
|
page read and write
|
|
|
|
DC00000
|
unkown
|
page read and write
|
|
|
|
23A16BA3000
|
unkown
|
page read and write
|
|
|
|
9E22000
|
unkown
|
page readonly
|
|
|
|
5510000
|
unkown
|
page execute read
|
|
|
|
A810000
|
unkown
|
page readonly
|
|
|
|
A9A0000
|
unkown
|
page readonly
|
|
|
|
1E657E40000
|
unkown
|
page readonly
|
|
|
|
CD34000
|
unkown
|
page read and write
|
|
|
|
C4E0000
|
unkown
|
page read and write
|
|
|
|
7FE0000
|
unkown
|
page read and write
|
|
|
|
7FF4FFF46000
|
unkown
|
page readonly
|
|
|
|
EE57000
|
unkown
|
page read and write
|
|
|
|
23A16B3D000
|
unkown
|
page read and write
|
|
|
|
BC14000
|
unkown
|
page read and write
|
|
|
|
8C1A000
|
unkown
|
page readonly
|
|
|
|
111EEF30000
|
unkown
|
page readonly
|
|
|
|
A5D4000
|
unkown
|
page readonly
|
|
|
|
7FF505302000
|
unkown
|
page readonly
|
|
|
|
7FF542297000
|
unkown
|
page readonly
|
|
|
|
1529D180000
|
heap private
|
page read and write
|
|
|
|
2D8F000
|
unkown
|
page readonly
|
|
|
|
1385000
|
unkown
|
page readonly
|
|
|
|
8D11000
|
unkown
|
page readonly
|
|
|
|
74DCD7F000
|
unkown
|
page read and write
|
|
|
|
23A16B60000
|
unkown
|
page read and write
|
|
|
|
9EA2000
|
unkown
|
page readonly
|
|
|
|
A660000
|
unkown
|
page readonly
|
|
|
|
23A162A8000
|
unkown
|
page read and write
|
|
|
|
1E65D5E0000
|
unkown
|
page read and write
|
|
|
|
1529CF90000
|
unkown
|
page read and write
|
|
|
|
2CAE000
|
unkown
|
page readonly
|
|
|
|
76C1BAB000
|
unkown
|
page read and write
|
|
|
|
21C54CD0000
|
heap default
|
page read and write
|
|
|
|
A7F0000
|
unkown
|
page readonly
|
|
|
|
60E8D7E000
|
unkown
|
page read and write
|
|
|
|
B178000
|
unkown
|
page read and write
|
|
|
|
2BA3000
|
unkown
|
page readonly
|
|
|
|
E999000
|
unkown
|
page readonly
|
|
|
|
D5087F000
|
unkown
|
page read and write
|
|
|
|
7FF51C93A000
|
unkown
|
page readonly
|
|
|
|
8D6F000
|
unkown
|
page readonly
|
|
|
|
111EF119000
|
unkown
|
page read and write
|
|
|
|
23A16B3A000
|
unkown
|
page read and write
|
|
|
|
C8A0000
|
unkown
|
page read and write
|
|
|
|
23A16B53000
|
unkown
|
page read and write
|
|
|
|
7FF4FFAD7000
|
unkown
|
page readonly
|
|
|
|
1E65D830000
|
unkown
|
page readonly
|
|
|
|
7FF51CA51000
|
unkown
|
page readonly
|
|
|
|
934E000
|
unkown
|
page read and write
|
|
|
|
2CDA000
|
unkown
|
page readonly
|
|
|
|
111ED15F000
|
unkown
|
page read and write
|
|
|
|
96E2000
|
unkown
|
page read and write
|
|
|
|
7FF59FBD0000
|
unkown
|
page readonly
|
|
|
|
8C62000
|
unkown
|
page readonly
|
|
|
|
7FF5E0BBB000
|
unkown
|
page readonly
|
|
|
|
26835A20000
|
heap default
|
page read and write
|
|
|
|
7FF59FD77000
|
unkown
|
page readonly
|
|
|
|
7FF5428B1000
|
unkown
|
page readonly
|
|
|
|
A997000
|
unkown
|
page readonly
|
|
|
|
8C1A000
|
unkown
|
page readonly
|
|
|
|
2534743C000
|
unkown
|
page read and write
|
|
|
|
2168FA000
|
unkown
|
page read and write
|
|
|
|
F057000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E27000
|
unkown
|
page readonly
|
|
|
|
F18D000
|
unkown
|
page read and write
|
|
|
|
7E60000
|
unkown
|
page readonly
|
|
|
|
111EF1F2000
|
unkown
|
page read and write
|
|
|
|
B980000
|
unkown
|
page read and write
|
|
|
|
A6A0000
|
unkown
|
page readonly
|
|
|
|
F478000
|
unkown
|
page read and write
|
|
|
|
7FF4FFC91000
|
unkown
|
page readonly
|
|
|
|
2B5D000
|
unkown
|
page readonly
|
|
|
|
5790000
|
unkown
|
page read and write
|
|
|
|
5770000
|
unkown
|
page readonly
|
|
|
|
2896000
|
unkown
|
page readonly
|
|
|
|
7FF5BDECE000
|
unkown
|
page readonly
|
|
|
|
21C54D0E000
|
unkown
|
page read and write
|
|
|
|
111F0110000
|
unkown
|
page read and write
|
|
|
|
2D78000
|
unkown
|
page readonly
|
|
|
|
9F62000
|
unkown
|
page readonly
|
|
|
|
76C20FB000
|
unkown
|
page read and write
|
|
|
|
23A16B53000
|
unkown
|
page read and write
|
|
|
|
23A16B30000
|
unkown
|
page read and write
|
|
|
|
C5B0000
|
unkown
|
page read and write
|
|
|
|
9EF5000
|
unkown
|
page readonly
|
|
|
|
23A16A02000
|
unkown
|
page read and write
|
|
|
|
BF3E000
|
unkown
|
page read and write
|
|
|
|
55AA000
|
heap default
|
page read and write
|
|
|
|
7FF5BF495000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B62000
|
unkown
|
page readonly
|
|
|
|
E93C87E000
|
unkown
|
page read and write
|
|
|
|
DC40000
|
unkown
|
page read and write
|
|
|
|
7FF550572000
|
unkown
|
page readonly
|
|
|
|
A532000
|
unkown
|
page readonly
|
|
|
|
C640000
|
unkown
|
page read and write
|
|
|
|
E3B0000
|
unkown
|
page read and write
|
|
|
|
7FF5E09A2000
|
unkown
|
page readonly
|
|
|
|
7FF51C8DE000
|
unkown
|
page readonly
|
|
|
|
23A16B1E000
|
unkown
|
page read and write
|
|
|
|
1E65D8F0000
|
unkown
|
page readonly
|
|
|
|
9708000
|
unkown
|
page read and write
|
|
|
|
26835E00000
|
unkown
|
page readonly
|
|
|
|
534F000
|
unkown
|
page read and write
|
|
|
|
7FF59FD71000
|
unkown
|
page readonly
|
|
|
|
7FF4FFF52000
|
unkown
|
page readonly
|
|
|
|
A295000
|
unkown
|
page readonly
|
|
|
|
7FF51CBA7000
|
unkown
|
page readonly
|
|
|
|
7ECD000
|
unkown
|
page read and write
|
|
|
|
B67B000
|
unkown
|
page read and write
|
|
|
|
23A16BA2000
|
unkown
|
page read and write
|
|
|
|
7FF5E0CB1000
|
unkown
|
page readonly
|
|
|
|
7FF4FFFDD000
|
unkown
|
page readonly
|
|
|
|
8CF6000
|
unkown
|
page readonly
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
23A16B64000
|
unkown
|
page read and write
|
|
|
|
111ED16F000
|
unkown
|
page read and write
|
|
|
|
C510000
|
unkown
|
page read and write
|
|
|
|
25348140000
|
unkown
|
page readonly
|
|
|
|
21707C000
|
unkown
|
page read and write
|
|
|
|
12DF000
|
unkown
|
page readonly
|
|
|
|
5560000
|
heap default
|
page read and write
|
|
|
|
23A17002000
|
unkown
|
page read and write
|
|
|
|
7FF5052C7000
|
unkown
|
page readonly
|
|
|
|
9F55000
|
unkown
|
page readonly
|
|
|
|
7FF5E0DA2000
|
unkown
|
page readonly
|
|
|
|
2CB7000
|
unkown
|
page readonly
|
|
|
|
74DC5CE000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF6D000
|
unkown
|
page readonly
|
|
|
|
236D584A000
|
unkown
|
page read and write
|
|
|
|
7FF5052CB000
|
unkown
|
page readonly
|
|
|
|
81506FF000
|
unkown
|
page read and write
|
|
|
|
7FF59FC75000
|
unkown
|
page readonly
|
|
|
|
7FF5429C6000
|
unkown
|
page readonly
|
|
|
|
F272000
|
unkown
|
page read and write
|
|
|
|
21C54EC0000
|
heap private
|
page read and write
|
|
|
|
EC4D000
|
unkown
|
page read and write
|
|
|
|
9022000
|
unkown
|
page read and write
|
|
|
|
5823000
|
heap private
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page readonly
|
|
|
|
111EF002000
|
unkown
|
page read and write
|
|
|
|
216D7B000
|
unkown
|
page read and write
|
|
|
|
7FF5BF6DE000
|
unkown
|
page readonly
|
|
|
|
74DC975000
|
unkown
|
page read and write
|
|
|
|
4FE0000
|
unkown
|
page execute read
|
|
|
|
580A000
|
heap private
|
page read and write
|
|
|
|
1479EE02000
|
unkown
|
page read and write
|
|
|
|
111EF119000
|
unkown
|
page read and write
|
|
|
|
23A16B2F000
|
unkown
|
page read and write
|
|
|
|
CD24000
|
unkown
|
page read and write
|
|
|
|
E00D000
|
unkown
|
page read and write
|
|
|
|
9F02000
|
unkown
|
page readonly
|
|
|
|
912A000
|
unkown
|
page read and write
|
|
|
|
A920000
|
unkown
|
page readonly
|
|
|
|
E410000
|
unkown
|
page read and write
|
|
|
|
1E658702000
|
unkown
|
page read and write
|
|
|
|
1E65D380000
|
unkown
|
page read and write
|
|
|
|
A4B5000
|
unkown
|
page readonly
|
|
|
|
7FF5E0CB8000
|
unkown
|
page readonly
|
|
|
|
2D48000
|
unkown
|
page readonly
|
|
|
|
26835C3C000
|
unkown
|
page read and write
|
|
|
|
1E65D4D0000
|
unkown
|
page read and write
|
|
|
|
C570000
|
unkown
|
page read and write
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
23A1703C000
|
unkown
|
page read and write
|
|
|
|
23A16BAD000
|
unkown
|
page read and write
|
|
|
|
1529DD30000
|
unkown
|
page readonly
|
|
|
|
21C54D0D000
|
unkown
|
page read and write
|
|
|
|
BB47000
|
unkown
|
page read and write
|
|
|
|
23A16BA2000
|
unkown
|
page read and write
|
|
|
|
23A16B88000
|
unkown
|
page read and write
|
|
|
|
DC20000
|
unkown
|
page read and write
|
|
|
|
BAC0000
|
unkown
|
page read and write
|
|
|
|
111ED0BA000
|
unkown
|
page read and write
|
|
|
|
7FF5BDEC5000
|
unkown
|
page readonly
|
|
|
|
7FF50521D000
|
unkown
|
page readonly
|
|
|
|
CC90000
|
unkown
|
page read and write
|
|
|
|
7FF5BF787000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE38000
|
unkown
|
page readonly
|
|
|
|
6FD0000
|
unkown
|
page read and write
|
|
|
|
90E8000
|
unkown
|
page read and write
|
|
|
|
8F40000
|
unkown
|
page readonly
|
|
|
|
7FF5052B1000
|
unkown
|
page readonly
|
|
|
|
111EF1EE000
|
unkown
|
page read and write
|
|
|
|
E450000
|
unkown
|
page read and write
|
|
|
|
F4CD000
|
unkown
|
page read and write
|
|
|
|
9F69000
|
unkown
|
page readonly
|
|
|
|
60E87F7000
|
unkown
|
page read and write
|
|
|
|
7FF59F922000
|
unkown
|
page readonly
|
|
|
|
1529CF30000
|
unkown
|
page readonly
|
|
|
|
1E65807A000
|
unkown
|
page read and write
|
|
|
|
7FF5BF6F2000
|
unkown
|
page readonly
|
|
|
|
7FF5E0E24000
|
unkown
|
page readonly
|
|
|
|
7FF51CA9F000
|
unkown
|
page readonly
|
|
|
|
1E658615000
|
unkown
|
page read and write
|
|
|
|
7FF59FA9F000
|
unkown
|
page readonly
|
|
|
|
111EEFA0000
|
unkown
|
page read and write
|
|
|
|
7FF59FCA4000
|
unkown
|
page readonly
|
|
|
|
EE98000
|
unkown
|
page read and write
|
|
|
|
7FF55054A000
|
unkown
|
page readonly
|
|
|
|
5348000
|
unkown
|
page read and write
|
|
|
|
23A16B65000
|
unkown
|
page read and write
|
|
|
|
AA10000
|
unkown
|
page readonly
|
|
|
|
A69B000
|
unkown
|
page readonly
|
|
|
|
1E658000000
|
unkown
|
page read and write
|
|
|
|
A674000
|
unkown
|
page readonly
|
|
|
|
CFC2000
|
unkown
|
page read and write
|
|
|
|
111ED08F000
|
unkown
|
page read and write
|
|
|
|
111EF543000
|
unkown
|
page read and write
|
|
|
|
5670000
|
unkown
|
page readonly
|
|
|
|
8DA0000
|
unkown
|
page readonly
|
|
|
|
7FF5BF5D8000
|
unkown
|
page readonly
|
|
|
|
1E65809E000
|
unkown
|
page read and write
|
|
|
|
1529CF51000
|
heap default
|
page read and write
|
|
|
|
111EF682000
|
unkown
|
page read and write
|
|
|
|
26835C4B000
|
unkown
|
page read and write
|
|
|
|
23A16B55000
|
unkown
|
page read and write
|
|
|
|
8BE7000
|
unkown
|
page readonly
|
|
|
|
B9F0000
|
unkown
|
page read and write
|
|
|
|
7FF59FC3E000
|
unkown
|
page readonly
|
|
|
|
8EAD000
|
unkown
|
page readonly
|
|
|
|
EE84000
|
unkown
|
page read and write
|
|
|
|
A126000
|
unkown
|
page readonly
|
|
|
|
23A16B81000
|
unkown
|
page read and write
|
|
|
|
7FF500022000
|
unkown
|
page readonly
|
|
|
|
54F0000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D7F000
|
unkown
|
page readonly
|
|
|
|
1529DDA0000
|
unkown
|
page read and write
|
|
|
|
23A16B40000
|
unkown
|
page read and write
|
|
|
|
B8D0000
|
unkown
|
page read and write
|
|
|
|
2534746F000
|
unkown
|
page read and write
|
|
|
|
CE1D000
|
unkown
|
page read and write
|
|
|
|
23A162A6000
|
unkown
|
page read and write
|
|
|
|
23A16B48000
|
unkown
|
page read and write
|
|
|
|
23A16B1E000
|
unkown
|
page read and write
|
|
|
|
1E65D490000
|
unkown
|
page read and write
|
|
|
|
111EF1F6000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF67000
|
unkown
|
page readonly
|
|
|
|
815077E000
|
unkown
|
page read and write
|
|
|
|
B9C0000
|
unkown
|
page read and write
|
|
|
|
ED3E000
|
unkown
|
page read and write
|
|
|
|
7FF54297F000
|
unkown
|
page readonly
|
|
|
|
E85F000
|
stack
|
page read and write
|
|
|
|
1E65D65A000
|
unkown
|
page read and write
|
|
|
|
8C07000
|
unkown
|
page readonly
|
|
|
|
E9F5000
|
unkown
|
page read and write
|
|
|
|
21C54CF6000
|
unkown
|
page read and write
|
|
|
|
F2B9000
|
unkown
|
page read and write
|
|
|
|
23A1624D000
|
unkown
|
page read and write
|
|
|
|
23A16270000
|
unkown
|
page read and write
|
|
|
|
7FF5BF7B6000
|
unkown
|
page readonly
|
|
|
|
60E8F7F000
|
unkown
|
page read and write
|
|
|
|
23A1713C000
|
unkown
|
page read and write
|
|
|
|
134D000
|
unkown
|
page readonly
|
|
|
|
BB5F000
|
unkown
|
page read and write
|
|
|
|
7FF51C61A000
|
unkown
|
page readonly
|
|
|
|
236D5829000
|
unkown
|
page read and write
|
|
|
|
23A16B61000
|
unkown
|
page read and write
|
|
|
|
A557000
|
unkown
|
page readonly
|
|
|
|
1E65D587000
|
unkown
|
page readonly
|
|
|
|
1E65D4B0000
|
unkown
|
page read and write
|
|
|
|
7E70000
|
unkown
|
page readonly
|
|
|
|
23A16B2F000
|
unkown
|
page read and write
|
|
|
|
7FF59FCA0000
|
unkown
|
page readonly
|
|
|
|
23A16B91000
|
unkown
|
page read and write
|
|
|
|
BA40000
|
unkown
|
page read and write
|
|
|
|
7FF50509A000
|
unkown
|
page readonly
|
|
|
|
7FF51CB64000
|
unkown
|
page readonly
|
|
|
|
7FF5BF697000
|
unkown
|
page readonly
|
|
|
|
2C9B000
|
unkown
|
page readonly
|
|
|
|
7FF55030A000
|
unkown
|
page readonly
|
|
|
|
7FF5BF70D000
|
unkown
|
page readonly
|
|
|
|
25347502000
|
unkown
|
page read and write
|
|
|
|
23A162A1000
|
unkown
|
page read and write
|
|
|
|
7FF550524000
|
unkown
|
page readonly
|
|
|
|
7E50000
|
unkown
|
page readonly
|
|
|
|
74DCA7B000
|
unkown
|
page read and write
|
|
|
|
1E65D687000
|
unkown
|
page read and write
|
|
|
|
5500000
|
unkown
|
page execute read
|
|
|
|
1E658D83000
|
unkown
|
page read and write
|
|
|
|
B9A0000
|
unkown
|
page read and write
|
|
|
|
6FF0000
|
unkown
|
page read and write
|
|
|
|
7FF51C8CF000
|
unkown
|
page readonly
|
|
|
|
7FF51C9E8000
|
unkown
|
page readonly
|
|
|
|
111F0310000
|
unkown
|
page read and write
|
|
|
|
7510000
|
unkown
|
page read and write
|
|
|
|
26835C4F000
|
unkown
|
page read and write
|
|
|
|
9ED9000
|
unkown
|
page readonly
|
|
|
|
111EF700000
|
unkown
|
page read and write
|
|
|
|
1E658759000
|
unkown
|
page read and write
|
|
|
|
111ED12D000
|
unkown
|
page read and write
|
|
|
|
7FF5BDBFB000
|
unkown
|
page readonly
|
|
|
|
9EA9000
|
unkown
|
page readonly
|
|
|
|
23A16B71000
|
unkown
|
page read and write
|
|
|
|
B920000
|
unkown
|
page read and write
|
|
|
|
8B9F000
|
unkown
|
page readonly
|
|
|
|
23A161F0000
|
unkown
|
page readonly
|
|
|
|
1E65D5A0000
|
unkown
|
page read and write
|
|
|
|
26835C51000
|
unkown
|
page read and write
|
|
|
|
7FF542A3D000
|
unkown
|
page readonly
|
|
|
|
81503DF000
|
unkown
|
page read and write
|
|
|
|
1E658102000
|
unkown
|
page read and write
|
|
|
|
F3DB000
|
unkown
|
page read and write
|
|
|
|
1529D170000
|
unkown
|
page read and write
|
|
|
|
B190000
|
unkown
|
page read and write
|
|
|
|
2BE5000
|
unkown
|
page readonly
|
|
|
|
7FF550496000
|
unkown
|
page readonly
|
|
|
|
23A16B62000
|
unkown
|
page read and write
|
|
|
|
E3C0000
|
unkown
|
page read and write
|
|
|
|
111ED320000
|
unkown
|
page readonly
|
|
|
|
1E65D49E000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown
|
page readonly
|
|
|
|
BA70000
|
unkown
|
page read and write
|
|
|
|
8D2B000
|
unkown
|
page readonly
|
|
|
|
7FF5E0D38000
|
unkown
|
page readonly
|
|
|
|
AAE4000
|
unkown
|
page read and write
|
|
|
|
7FF5BDED6000
|
unkown
|
page readonly
|
|
|
|
5560000
|
heap default
|
page read and write
|
|
|
|
C8C0000
|
unkown
|
page read and write
|
|
|
|
57F0000
|
unkown
|
page read and write
|
|
|
|
C860000
|
unkown
|
page read and write
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
7FF5E0BB0000
|
unkown
|
page readonly
|
|
|
|
236D5855000
|
unkown
|
page read and write
|
|
|
|
23A16B13000
|
unkown
|
page read and write
|
|
|
|
97D0000
|
unkown
|
page readonly
|
|
|
|
A5B4000
|
unkown
|
page readonly
|
|
|
|
23A16BC3000
|
unkown
|
page read and write
|
|
|
|
1385000
|
unkown
|
page readonly
|
|
|
|
E93C4F5000
|
unkown
|
page read and write
|
|
|
|
5660000
|
unkown
|
page execute read
|
|
|
|
B020000
|
unkown
|
page read and write
|
|
|
|
A9A2000
|
unkown
|
page readonly
|
|
|
|
D507FA000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D47000
|
unkown
|
page readonly
|
|
|
|
23A16B93000
|
unkown
|
page read and write
|
|
|
|
60E937E000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFD1000
|
unkown
|
page readonly
|
|
|
|
DCC0000
|
unkown
|
page read and write
|
|
|
|
1E65D370000
|
unkown
|
page read and write
|
|
|
|
25347E00000
|
unkown
|
page readonly
|
|
|
|
21C54CF7000
|
unkown
|
page read and write
|
|
|
|
8BE7000
|
unkown
|
page readonly
|
|
|
|
23A16B59000
|
unkown
|
page read and write
|
|
|
|
236D6200000
|
unkown
|
page readonly
|
|
|
|
C830000
|
unkown
|
page read and write
|
|
|
|
1E658029000
|
unkown
|
page read and write
|
|
|
|
2A68000
|
unkown
|
page readonly
|
|
|
|
23A16B5E000
|
unkown
|
page read and write
|
|
|
|
23A16BAF000
|
unkown
|
page read and write
|
|
|
|
BB8D000
|
unkown
|
page read and write
|
|
|
|
8D32000
|
unkown
|
page readonly
|
|
|
|
7FF5BF4EB000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B69000
|
unkown
|
page readonly
|
|
|
|
7FF505213000
|
unkown
|
page readonly
|
|
|
|
1529CF8E000
|
unkown
|
page read and write
|
|
|
|
8F50000
|
unkown
|
page readonly
|
|
|
|
111EF164000
|
unkown
|
page read and write
|
|
|
|
9430000
|
unkown
|
page read and write
|
|
|
|
1529D040000
|
unkown
|
page read and write
|
|
|
|
23A16B64000
|
unkown
|
page read and write
|
|
|
|
111EEF20000
|
unkown
|
page read and write
|
|
|
|
23A16B66000
|
unkown
|
page read and write
|
|
|
|
111ED113000
|
unkown
|
page read and write
|
|
|
|
7FF51C9E1000
|
unkown
|
page readonly
|
|
|
|
1E658700000
|
unkown
|
page read and write
|
|
|
|
111EF143000
|
unkown
|
page read and write
|
|
|
|
C880000
|
unkown
|
page read and write
|
|
|
|
9DF2000
|
unkown
|
page readonly
|
|
|
|
111EEFA0000
|
unkown
|
page read and write
|
|
|
|
CCF8000
|
unkown
|
page read and write
|
|
|
|
111ED2D0000
|
unkown
|
page write copy
|
|
|
|
60E83DC000
|
unkown
|
page read and write
|
|
|
|
76C237E000
|
unkown
|
page read and write
|
|
|
|
C500000
|
unkown
|
page read and write
|
|
|
|
216EFA000
|
unkown
|
page read and write
|
|
|
|
21C54D00000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page readonly
|
|
|
|
23A16930000
|
unkown
|
page read and write
|
|
|
|
288E000
|
unkown
|
page readonly
|
|
|
|
7FF4FFFE7000
|
unkown
|
page readonly
|
|
|
|
7FF51CAFE000
|
unkown
|
page readonly
|
|
|
|
1E658713000
|
unkown
|
page read and write
|
|
|
|
7FF59FC77000
|
unkown
|
page readonly
|
|
|
|
1E658718000
|
unkown
|
page read and write
|
|
|
|
957F000
|
stack
|
page read and write
|
|
|
|
B8A0000
|
unkown
|
page read and write
|
|
|
|
2170FB000
|
unkown
|
page read and write
|
|
|
|
111EEBC0000
|
unkown
|
page readonly
|
|
|
|
CFA8000
|
unkown
|
page read and write
|
|
|
|
7FF51C8E0000
|
unkown
|
page readonly
|
|
|
|
7FF51C686000
|
unkown
|
page readonly
|
|
|
|
7FF5E0AE6000
|
unkown
|
page readonly
|
|
|
|
1E65D5F0000
|
unkown
|
page read and write
|
|
|
|
7FF542A44000
|
unkown
|
page readonly
|
|
|
|
BB50000
|
unkown
|
page read and write
|
|
|
|
23A16F40000
|
unkown
|
page read and write
|
|
|
|
2D73000
|
unkown
|
page readonly
|
|
|
|
28BD000
|
unkown
|
page readonly
|
|
|
|
E350000
|
unkown
|
page readonly
|
|
|
|
E9DB000
|
unkown
|
page read and write
|
|
|
|
B9B0000
|
unkown
|
page read and write
|
|
|
|
F377000
|
unkown
|
page read and write
|
|
|
|
21687E000
|
unkown
|
page read and write
|
|
|
|
ECF5000
|
unkown
|
page read and write
|
|
|
|
76C217E000
|
unkown
|
page read and write
|
|
|
|
C2E0000
|
unkown
|
page read and write
|
|
|
|
7FF51CB57000
|
unkown
|
page readonly
|
|
|
|
7FF5501E1000
|
unkown
|
page readonly
|
|
|
|
7FF51CAC6000
|
unkown
|
page readonly
|
|
|
|
111EF183000
|
unkown
|
page read and write
|
|
|
|
E420000
|
unkown
|
page read and write
|
|
|
|
F4F3000
|
unkown
|
page read and write
|
|
|
|
1529DD20000
|
unkown
|
page read and write
|
|
|
|
25347513000
|
unkown
|
page read and write
|
|
|
|
EDD2000
|
unkown
|
page read and write
|
|
|
|
23A16B44000
|
unkown
|
page read and write
|
|
|
|
ED38000
|
unkown
|
page read and write
|
|
|
|
EF98000
|
unkown
|
page read and write
|
|
|
|
7FF59FB5A000
|
unkown
|
page readonly
|
|
|
|
111EF185000
|
unkown
|
page read and write
|
|
|
|
111EF13F000
|
unkown
|
page read and write
|
|
|
|
23A16BA2000
|
unkown
|
page read and write
|
|
|
|
23A16B2F000
|
unkown
|
page read and write
|
|
|
|
236D57B0000
|
unkown
|
page read and write
|
|
|
|
26835A30000
|
unkown
|
page readonly
|
|
|
|
23A17026000
|
unkown
|
page read and write
|
|
|
|
23A16B57000
|
unkown
|
page read and write
|
|
|
|
8858000
|
unkown
|
page readonly
|
|
|
|
1E65D390000
|
unkown
|
page read and write
|
|
|
|
23A16400000
|
unkown
|
page readonly
|
|
|
|
7FF5E0E77000
|
unkown
|
page readonly
|
|
|
|
111EF1B6000
|
unkown
|
page read and write
|
|
|
|
A592000
|
unkown
|
page readonly
|
|
|
|
5780000
|
heap private
|
page read and write
|
|
|
|
111EF192000
|
unkown
|
page read and write
|
|
|
|
25347450000
|
unkown
|
page read and write
|
|
|
|
111EF4A4000
|
unkown
|
page read and write
|
|
|
|
23A16B5F000
|
unkown
|
page read and write
|
|
|
|
6FD0000
|
unkown
|
page read and write
|
|
|
|
A560000
|
unkown
|
page readonly
|
|
|
|
97F0000
|
unkown
|
page readonly
|
|
|
|
7FF5E0D44000
|
unkown
|
page readonly
|
|
|
|
25347A80000
|
unkown
|
page read and write
|
|
|
|
EE55000
|
unkown
|
page read and write
|
|
|
|
C610000
|
unkown
|
page read and write
|
|
|
|
2BAD000
|
unkown
|
page readonly
|
|
|
|
B423000
|
unkown
|
page read and write
|
|
|
|
F3D5000
|
unkown
|
page read and write
|
|
|
|
23A16BC3000
|
unkown
|
page read and write
|
|
|
|
C980000
|
unkown
|
page read and write
|
|
|
|
2CB9000
|
unkown
|
page readonly
|
|
|
|
7E80000
|
unkown
|
page readonly
|
|
|
|
23A17100000
|
unkown
|
page read and write
|
|
|
|
236D5908000
|
unkown
|
page read and write
|
|
|
|
B850000
|
unkown
|
page read and write
|
|
|
|
B2B5000
|
unkown
|
page read and write
|
|
|
|
25347330000
|
unkown
|
page readonly
|
|
|
|
25347413000
|
unkown
|
page read and write
|
|
|
|
23A16B92000
|
unkown
|
page read and write
|
|
|
|
C8D0000
|
unkown
|
page read and write
|
|
|
|
C5E0000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE16000
|
unkown
|
page readonly
|
|
|
|
111EF15A000
|
unkown
|
page read and write
|
|
|
|
CB9C000
|
unkown
|
page read and write
|
|
|
|
BEED000
|
unkown
|
page read and write
|
|
|
|
111F0210000
|
unkown
|
page read and write
|
|
|
|
9BA4000
|
unkown
|
page readonly
|
|
|
|
111EF500000
|
unkown
|
page read and write
|
|
|
|
7FF5BD78F000
|
unkown
|
page readonly
|
|
|
|
2174FC000
|
unkown
|
page read and write
|
|
|
|
1529CDE0000
|
unkown
|
page read and write
|
|
|
|
B940000
|
unkown
|
page read and write
|
|
|
|
7FF5BDFB7000
|
unkown
|
page readonly
|
|
|
|
111EF43A000
|
unkown
|
page read and write
|
|
|
|
BB9D000
|
unkown
|
page read and write
|
|
|
|
81507FA000
|
unkown
|
page read and write
|
|
|
|
1E65D5B0000
|
unkown
|
page read and write
|
|
|
|
EEDB000
|
unkown
|
page read and write
|
|
|
|
26836740000
|
unkown
|
page readonly
|
|
|
|
111ED0B6000
|
unkown
|
page read and write
|
|
|
|
23A16B1E000
|
unkown
|
page read and write
|
|
|
|
2BD4000
|
unkown
|
page readonly
|
|
|
|
23A17017000
|
unkown
|
page read and write
|
|
|
|
111EF164000
|
unkown
|
page read and write
|
|
|
|
2AA7000
|
unkown
|
page readonly
|
|
|
|
E3D0000
|
unkown
|
page read and write
|
|
|
|
CDC5000
|
unkown
|
page read and write
|
|
|
|
F517000
|
unkown
|
page read and write
|
|
|
|
23A17002000
|
unkown
|
page read and write
|
|
|
|
6206AF9000
|
unkown
|
page read and write
|
|
|
|
E9FF000
|
unkown
|
page read and write
|
|
|
|
5420000
|
unkown
|
page readonly
|
|
|
|
9708000
|
unkown
|
page read and write
|
|
|
|
E9F9000
|
unkown
|
page read and write
|
|
|
|
C4AD000
|
unkown
|
page read and write
|
|
|
|
B652000
|
unkown
|
page read and write
|
|
|
|
26835BF0000
|
unkown
|
page read and write
|
|
|
|
23A16B28000
|
unkown
|
page read and write
|
|
|
|
1529DD50000
|
unkown
|
page read and write
|
|
|
|
7FF5052DA000
|
unkown
|
page readonly
|
|
|
|
DFCF000
|
stack
|
page read and write
|
|
|
|
E3F0000
|
unkown
|
page read and write
|
|
|
|
8CA7000
|
unkown
|
page readonly
|
|
|
|
9248000
|
unkown
|
page read and write
|
|
|
|
1E65D4D4000
|
unkown
|
page read and write
|
|
|
|
2B36000
|
unkown
|
page readonly
|
|
|
|
23A17002000
|
unkown
|
page read and write
|
|
|
|
7FF5BDEFD000
|
unkown
|
page readonly
|
|
|
|
76C1E7E000
|
unkown
|
page read and write
|
|
|
|
BDA9000
|
unkown
|
page read and write
|
|
|
|
216979000
|
unkown
|
page read and write
|
|
|
|
8C07000
|
unkown
|
page readonly
|
|
|
|
1E65D680000
|
unkown
|
page read and write
|
|
|
|
7FF59FD9A000
|
unkown
|
page readonly
|
|
|
|
2D5D000
|
unkown
|
page readonly
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
8C6E000
|
unkown
|
page readonly
|
|
|
|
7FF5BF77D000
|
unkown
|
page readonly
|
|
|
|
111EF543000
|
unkown
|
page read and write
|
|
|
|
1479EC00000
|
heap private
|
page read and write
|
|
|
|
EE04000
|
unkown
|
page read and write
|
|
|
|
7FF59FC08000
|
unkown
|
page readonly
|
|
|
|
1E658F80000
|
unkown
|
page readonly
|
|
|
|
7FF51CA47000
|
unkown
|
page readonly
|
|
|
|
7FF51C61E000
|
unkown
|
page readonly
|
|
|
|
7FF5E0BAE000
|
unkown
|
page readonly
|
|
|
|
23A16B3D000
|
unkown
|
page read and write
|
|
|
|
23A16B93000
|
unkown
|
page read and write
|
|
|
|
E3E0000
|
unkown
|
page read and write
|
|
|
|
F18A000
|
unkown
|
page read and write
|
|
|
|
21C54CFE000
|
unkown
|
page read and write
|
|
|
|
A6B4000
|
unkown
|
page readonly
|
|
|
|
B437000
|
unkown
|
page read and write
|
|
|
|
1E657E30000
|
heap default
|
page read and write
|
|
|
|
23A17102000
|
unkown
|
page read and write
|
|
|
|
2CB9000
|
unkown
|
page readonly
|
|
|
|
C580000
|
unkown
|
page read and write
|
|
|
|
2BC6000
|
unkown
|
page readonly
|
|
|
|
5550000
|
unkown
|
page execute read
|
|
|
|
7FF5E0B7A000
|
unkown
|
page readonly
|
|
|
|
21C54DE0000
|
unkown
|
page read and write
|
|
|
|
23A16BA3000
|
unkown
|
page read and write
|
|
|
|
2888000
|
unkown
|
page readonly
|
|
|
|
5660000
|
unkown
|
page execute read
|
|
|
|
23A16B44000
|
unkown
|
page read and write
|
|
|
|
9232000
|
unkown
|
page read and write
|
|
|
|
7FF5E0D9A000
|
unkown
|
page readonly
|
|
|
|
7FF5E08EA000
|
unkown
|
page readonly
|
|
|
|
7FF51C397000
|
unkown
|
page readonly
|
|
|
|
60E907E000
|
unkown
|
page read and write
|
|
|
|
1479EC70000
|
unkown
|
page readonly
|
|
|
|
23A16247000
|
unkown
|
page read and write
|
|
|
|
1E65D5C0000
|
unkown
|
page read and write
|
|
|
|
A29C000
|
unkown
|
page readonly
|
|
|
|
111EF702000
|
unkown
|
page read and write
|
|
|
|
2AB5000
|
unkown
|
page readonly
|
|
|
|
BA80000
|
unkown
|
page read and write
|
|
|
|
7FF59FB73000
|
unkown
|
page readonly
|
|
|
|
7FF5BF6D3000
|
unkown
|
page readonly
|
|
|
|
1E65D5F0000
|
unkown
|
page read and write
|
|
|
|
2173FC000
|
unkown
|
page read and write
|
|
|
|
111EF210000
|
unkown
|
page readonly
|
|
|
|
2896000
|
unkown
|
page readonly
|
|
|
|
23A16170000
|
heap private
|
page read and write
|
|
|
|
21C54D00000
|
unkown
|
page read and write
|
|
|
|
236D6540000
|
unkown
|
page readonly
|
|
|
|
ED03000
|
unkown
|
page read and write
|
|
|
|
815035E000
|
unkown
|
page read and write
|
|
|
|
7FF5503B8000
|
unkown
|
page readonly
|
|
|
|
7FF55053B000
|
unkown
|
page readonly
|
|
|
|
111EF12D000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDBA000
|
unkown
|
page readonly
|
|
|
|
23A16BB2000
|
unkown
|
page read and write
|
|
|
|
23A162D6000
|
unkown
|
page read and write
|
|
|
|
23A1719B000
|
unkown
|
page read and write
|
|
|
|
23A16B33000
|
unkown
|
page read and write
|
|
|
|
1E658092000
|
unkown
|
page read and write
|
|
|
|
23A16B5F000
|
unkown
|
page read and write
|
|
|
|
1E657F10000
|
unkown
|
page readonly
|
|
|
|
F3B0000
|
unkown
|
page read and write
|
|
|
|
111EF119000
|
unkown
|
page read and write
|
|
|
|
7FF505201000
|
unkown
|
page readonly
|
|
|
|
7FF5BF777000
|
unkown
|
page readonly
|
|
|
|
7FF505246000
|
unkown
|
page readonly
|
|
|
|
111ED0E3000
|
unkown
|
page read and write
|
|
|
|
BB10000
|
unkown
|
page read and write
|
|
|
|
7FF4FFF2F000
|
unkown
|
page readonly
|
|
|
|
21B5BFF000
|
unkown
|
page read and write
|
|
|
|
111EF602000
|
unkown
|
page read and write
|
|
|
|
7FF5052B7000
|
unkown
|
page readonly
|
|
|
|
57F0000
|
unkown
|
page read and write
|
|
|
|
1E658590000
|
unkown
|
page read and write
|
|
|
|
23A16B92000
|
unkown
|
page read and write
|
|
|
|
111ED084000
|
unkown
|
page read and write
|
|
|
|
7FF505110000
|
unkown
|
page readonly
|
|
|
|
D508F9000
|
unkown
|
page read and write
|
|
|
|
7FF51CACA000
|
unkown
|
page readonly
|
|
|
|
7FF59FD87000
|
unkown
|
page readonly
|
|
|
|
1479F000000
|
unkown
|
page readonly
|
|
|
|
62069FF000
|
unkown
|
page read and write
|
|
|
|
7FF542A73000
|
unkown
|
page readonly
|
|
|
|
2B56000
|
unkown
|
page readonly
|
|
|
|
CC18000
|
unkown
|
page read and write
|
|
|
|
8C62000
|
unkown
|
page readonly
|
|
|
|
2B3A000
|
unkown
|
page readonly
|
|
|
|
C530000
|
unkown
|
page read and write
|
|
|
|
B910000
|
unkown
|
page read and write
|
|
|
|
9430000
|
unkown
|
page read and write
|
|
|
|
7FF51CBA7000
|
unkown
|
page readonly
|
|
|
|
25347600000
|
unkown
|
page readonly
|
|
|
|
7FF51C9B8000
|
unkown
|
page readonly
|
|
|
|
111EF157000
|
unkown
|
page read and write
|
|
|
|
947D000
|
unkown
|
page read and write
|
|
|
|
23A16B68000
|
unkown
|
page read and write
|
|
|
|
26835B00000
|
unkown
|
page readonly
|
|
|
|
AC40000
|
unkown
|
page readonly
|
|
|
|
7FF55047F000
|
unkown
|
page readonly
|
|
|
|
111ED0E3000
|
unkown
|
page read and write
|
|
|
|
8FE0000
|
unkown
|
page read and write
|
|
|
|
2CBE000
|
unkown
|
page readonly
|
|
|
|
7FF542898000
|
unkown
|
page readonly
|
|
|
|
E75D000
|
unkown
|
page read and write
|
|
|
|
1529CF8F000
|
unkown
|
page read and write
|
|
|
|
A8DD000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B23000
|
unkown
|
page readonly
|
|
|
|
5800000
|
heap private
|
page read and write
|
|
|
|
2CB7000
|
unkown
|
page readonly
|
|
|
|
2D9D000
|
unkown
|
page readonly
|
|
|
|
111EF119000
|
unkown
|
page read and write
|
|
|
|
7FF550388000
|
unkown
|
page readonly
|
|
|
|
23A16B2E000
|
unkown
|
page read and write
|
|
|
|
2A99000
|
unkown
|
page readonly
|
|
|
|
23A16B21000
|
unkown
|
page read and write
|
|
|
|
111EF15E000
|
unkown
|
page read and write
|
|
|
|
23A16B5E000
|
unkown
|
page read and write
|
|
|
|
D5097F000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE30000
|
unkown
|
page readonly
|
|
|
|
B990000
|
unkown
|
page read and write
|
|
|
|
F52D000
|
unkown
|
page read and write
|
|
|
|
7FF51CA89000
|
unkown
|
page readonly
|
|
|
|
F29E000
|
unkown
|
page read and write
|
|
|
|
23A162BD000
|
unkown
|
page read and write
|
|
|
|
8D6F000
|
unkown
|
page readonly
|
|
|
|
ECA0000
|
unkown
|
page read and write
|
|
|
|
5760000
|
unkown
|
page readonly
|
|
|
|
23A162C7000
|
unkown
|
page read and write
|
|
|
|
CE4A000
|
unkown
|
page read and write
|
|
|
|
558D000
|
heap default
|
page read and write
|
|
|
|
7FF5BF7C7000
|
unkown
|
page readonly
|
|
|
|
C4B0000
|
unkown
|
page read and write
|
|
|
|
C850000
|
unkown
|
page read and write
|
|
|
|
A860000
|
unkown
|
page readonly
|
|
|
|
7FF505185000
|
unkown
|
page readonly
|
|
|
|
111EF1CF000
|
unkown
|
page read and write
|
|
|
|
1E65D6B1000
|
unkown
|
page read and write
|
|
|
|
1529D189000
|
heap private
|
page read and write
|
|
|
|
7FF4FFEA5000
|
unkown
|
page readonly
|
|
|
|
7FF505307000
|
unkown
|
page readonly
|
|
|
|
76C247F000
|
unkown
|
page read and write
|
|
|
|
111F0510000
|
unkown
|
page read and write
|
|
|
|
23A16256000
|
unkown
|
page read and write
|
|
|
|
7FF550521000
|
unkown
|
page readonly
|
|
|
|
1E65D4B4000
|
unkown
|
page read and write
|
|
|
|
23A17002000
|
unkown
|
page read and write
|
|
|
|
111ED0DC000
|
unkown
|
page read and write
|
|
|
|
F558000
|
unkown
|
page read and write
|
|
|
|
23A16B38000
|
unkown
|
page read and write
|
|
|
|
2BDC000
|
unkown
|
page readonly
|
|
|
|
23A16B30000
|
unkown
|
page read and write
|
|
|
|
7FF51CB67000
|
unkown
|
page readonly
|
|
|
|
BAE0000
|
unkown
|
page read and write
|
|
|
|
23A16B93000
|
unkown
|
page read and write
|
|
|
|
236D5A00000
|
unkown
|
page readonly
|
|
|
|
E9FB000
|
unkown
|
page read and write
|
|
|
|
23A16B36000
|
unkown
|
page read and write
|
|
|
|
23A16308000
|
unkown
|
page read and write
|
|
|
|
23A16B94000
|
unkown
|
page read and write
|
|
|
|
5410000
|
heap private
|
page read and write
|
|
|
|
23A16BB2000
|
unkown
|
page read and write
|
|
|
|
CF7B000
|
unkown
|
page read and write
|
|
|
|
23A16BAD000
|
unkown
|
page read and write
|
|
|
|
EF54000
|
unkown
|
page read and write
|
|
|
|
216B7B000
|
unkown
|
page read and write
|
|
|
|
2A73000
|
unkown
|
page readonly
|
|
|
|
E10F000
|
stack
|
page read and write
|
|
|
|
E93C67E000
|
unkown
|
page read and write
|
|
|
|
C5D0000
|
unkown
|
page read and write
|
|
|
|
2CE5000
|
unkown
|
page readonly
|
|
|
|
7FF5BF717000
|
unkown
|
page readonly
|
|
|
|
2A91000
|
unkown
|
page readonly
|
|
|
|
937E000
|
unkown
|
page read and write
|
|
|
|
7FF542A37000
|
unkown
|
page readonly
|
|
|
|
ED85000
|
unkown
|
page read and write
|
|
|
|
90A6000
|
unkown
|
page read and write
|
|
|
|
23A16B65000
|
unkown
|
page read and write
|
|
|
|
E9D5000
|
unkown
|
page read and write
|
|
|
|
111F0410000
|
unkown
|
page read and write
|
|
|
|
1E65D564000
|
unkown
|
page readonly
|
|
|
|
111EF152000
|
unkown
|
page read and write
|
|
|
|
23A16B24000
|
unkown
|
page read and write
|
|
|
|
ED6F000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFE4000
|
unkown
|
page readonly
|
|
|
|
7FF54228F000
|
unkown
|
page readonly
|
|
|
|
1E657FF0000
|
unkown
|
page readonly
|
|
|
|
C46C000
|
unkown
|
page read and write
|
|
|
|
CCB0000
|
unkown
|
page read and write
|
|
|
|
1479EC60000
|
heap default
|
page read and write
|
|
|
|
96C0000
|
unkown
|
page read and write
|
|
|
|
57D0000
|
unkown
|
page read and write
|
|
|
|
7FF59FAFE000
|
unkown
|
page readonly
|
|
|
|
1529CF8E000
|
unkown
|
page read and write
|
|
|
|
2D6E000
|
unkown
|
page readonly
|
|
|
|
7FF5429D7000
|
unkown
|
page readonly
|
|
|
|
23A16B3D000
|
unkown
|
page read and write
|
|
|
|
7FCF000
|
stack
|
page read and write
|
|
|
|
60E8EFD000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF74000
|
unkown
|
page readonly
|
|
|
|
534F000
|
unkown
|
page read and write
|
|
|
|
7FF5E082F000
|
unkown
|
page readonly
|
|
|
|
111F0210000
|
unkown
|
page read and write
|
|
|
|
A694000
|
unkown
|
page readonly
|
|
|
|
7FF5BF7B3000
|
unkown
|
page readonly
|
|
|
|
7FF504DB1000
|
unkown
|
page readonly
|
|
|
|
CDC2000
|
unkown
|
page read and write
|
|
|
|
91AE000
|
unkown
|
page read and write
|
|
|
|
620667B000
|
unkown
|
page read and write
|
|
|
|
216A7B000
|
unkown
|
page read and write
|
|
|
|
C400000
|
unkown
|
page read and write
|
|
|
|
EF11000
|
unkown
|
page read and write
|
|
|
|
1E658F90000
|
unkown
|
page readonly
|
|
|
|
2D45000
|
unkown
|
page readonly
|
|
|
|
2B52000
|
unkown
|
page readonly
|
|
|
|
1E65D6AC000
|
unkown
|
page read and write
|
|
|
|
7FF542A87000
|
unkown
|
page readonly
|
|
|
|
9BCB000
|
unkown
|
page readonly
|
|
|
|
C29F000
|
stack
|
page read and write
|
|
|
|
7FF5429A6000
|
unkown
|
page readonly
|
|
|
|
5406000
|
heap default
|
page read and write
|
|
|
|
7FF59FA31000
|
unkown
|
page readonly
|
|
|
|
7FF51CA57000
|
unkown
|
page readonly
|
|
|
|
7FF51C91F000
|
unkown
|
page readonly
|
|
|
|
7FF5504BD000
|
unkown
|
page readonly
|
|
|
|
1E65D584000
|
unkown
|
page readonly
|
|
|
|
111F0110000
|
unkown
|
page read and write
|
|
|
|
1E65D62D000
|
unkown
|
page read and write
|
|
|
|
5784000
|
heap private
|
page read and write
|
|
|
|
B970000
|
unkown
|
page read and write
|
|
|
|
23A164D0000
|
unkown
|
page readonly
|
|
|
|
5760000
|
unkown
|
page readonly
|
|
|
|
7E50000
|
unkown
|
page readonly
|
|
|
|
F4B8000
|
unkown
|
page read and write
|
|
|
|
C620000
|
unkown
|
page read and write
|
|
|
|
23A16B41000
|
unkown
|
page read and write
|
|
|
|
A8C2000
|
unkown
|
page readonly
|
|
|
|
7FF504FC3000
|
unkown
|
page readonly
|
|
|
|
7FF5E0E63000
|
unkown
|
page readonly
|
|
|
|
1529CF40000
|
heap default
|
page read and write
|
|
|
|
B8E0000
|
unkown
|
page read and write
|
|
|
|
1398000
|
unkown
|
page readonly
|
|
|
|
BAD0000
|
unkown
|
page read and write
|
|
|
|
9222000
|
unkown
|
page read and write
|
|
|
|
7FF4FFF79000
|
unkown
|
page readonly
|
|
|
|
1E657F20000
|
unkown
|
page readonly
|
|
|
|
2CAE000
|
unkown
|
page readonly
|
|
|
|
F012000
|
unkown
|
page read and write
|
|
|
|
E975000
|
unkown
|
page readonly
|
|
|
|
B3C7000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C0A000
|
unkown
|
page readonly
|
|
|
|
7FF5E0DC7000
|
unkown
|
page readonly
|
|
|
|
E9A8000
|
unkown
|
page readonly
|
|
|
|
7FF55049A000
|
unkown
|
page readonly
|
|
|
|
23A1708E000
|
unkown
|
page read and write
|
|
|
|
1E65803F000
|
unkown
|
page read and write
|
|
|
|
7FF51CAB3000
|
unkown
|
page readonly
|
|
|
|
111ED03F000
|
unkown
|
page read and write
|
|
|
|
111ED06E000
|
unkown
|
page read and write
|
|
|
|
1529D3A0000
|
unkown
|
page readonly
|
|
|
|
7FF5E0D71000
|
unkown
|
page readonly
|
|
|
|
B066000
|
unkown
|
page read and write
|
|
|
|
2B09000
|
unkown
|
page readonly
|
|
|
|
23A16BAD000
|
unkown
|
page read and write
|
|
|
|
23A16B6E000
|
unkown
|
page read and write
|
|
|
|
F391000
|
unkown
|
page read and write
|
|
|
|
E93C97E000
|
unkown
|
page read and write
|
|
|
|
1E658F70000
|
unkown
|
page readonly
|
|
|
|
2AA7000
|
unkown
|
page readonly
|
|
|
|
2A91000
|
unkown
|
page readonly
|
|
|
|
2B5D000
|
unkown
|
page readonly
|
|
|
|
23A16B30000
|
unkown
|
page read and write
|
|
|
|
7FF5BF53F000
|
unkown
|
page readonly
|
|
|
|
5820000
|
heap private
|
page read and write
|
|
|
|
2D5D000
|
unkown
|
page readonly
|
|
|
|
2534749F000
|
unkown
|
page read and write
|
|
|
|
7FF5BF7C7000
|
unkown
|
page readonly
|
|
|
|
23A169D0000
|
unkown
|
page readonly
|
|
|
|
5BC0000
|
unkown
|
page readonly
|
|
|
|
B5A1000
|
unkown
|
page read and write
|
|
|
|
7FF59FCC1000
|
unkown
|
page readonly
|
|
|
|
B421000
|
unkown
|
page read and write
|
|
|
|
111ED0E3000
|
unkown
|
page read and write
|
|
|
|
CA9A000
|
unkown
|
page read and write
|
|
|
|
1E65D490000
|
unkown
|
page read and write
|
|
|
|
C810000
|
unkown
|
page read and write
|
|
|
|
1E65D5F0000
|
unkown
|
page readonly
|
|
|
|
C970000
|
unkown
|
page read and write
|
|
|
|
7FF5422C7000
|
unkown
|
page readonly
|
|
|
|
21C54CE7000
|
heap default
|
page read and write
|
|
|
|
7FF59F655000
|
unkown
|
page readonly
|
|
|
|
23A16BA2000
|
unkown
|
page read and write
|
|
|
|
21C54CDB000
|
heap default
|
page read and write
|
|
|
|
AC50000
|
unkown
|
page readonly
|
|
|
|
2D7E000
|
unkown
|
page readonly
|
|
|
|
7FF505307000
|
unkown
|
page readonly
|
|
|
|
E490000
|
unkown
|
page readonly
|
|
|
|
DD70000
|
unkown
|
page read and write
|
|
|
|
7FF542A34000
|
unkown
|
page readonly
|
|
|
|
26835C4E000
|
unkown
|
page read and write
|
|
|
|
1479ED90000
|
unkown
|
page readonly
|
|
|
|
8819000
|
unkown
|
page readonly
|
|
|
|
B445000
|
unkown
|
page read and write
|
|
|
|
236D5850000
|
unkown
|
page read and write
|
|
|
|
23A16B59000
|
unkown
|
page read and write
|
|
|
|
7FF59FCCF000
|
unkown
|
page readonly
|
|
|
|
268359C0000
|
heap private
|
page read and write
|
|
|
|
111EF543000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C47000
|
unkown
|
page readonly
|
|
|
|
7FF4FFFFA000
|
unkown
|
page readonly
|
|
|
|
CE0E000
|
unkown
|
page read and write
|
|
|
|
6206CFF000
|
unkown
|
page read and write
|
|
|
|
111EF188000
|
unkown
|
page read and write
|
|
|
|
E93C1BE000
|
unkown
|
page read and write
|
|
|
|
23A16B92000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCE3000
|
unkown
|
page readonly
|
|
|
|
AD9E000
|
unkown
|
page read and write
|
|
|
|
147A07A0000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E2D000
|
unkown
|
page readonly
|
|
|
|
7FF5BDF7B000
|
unkown
|
page readonly
|
|
|
|
23A16B40000
|
unkown
|
page read and write
|
|
|
|
1529CFA8000
|
heap default
|
page read and write
|
|
|
|
23A16B44000
|
unkown
|
page read and write
|
|
|
|
253472C0000
|
heap private
|
page read and write
|
|
|
|
BF8F000
|
unkown
|
page read and write
|
|
|
|
977B000
|
unkown
|
page read and write
|
|
|
|
7FF51CA84000
|
unkown
|
page readonly
|
|
|
|
2AC4000
|
unkown
|
page readonly
|
|
|
|
F42D000
|
unkown
|
page read and write
|
|
|
|
7FF51CAA1000
|
unkown
|
page readonly
|
|
|
|
23A16B61000
|
unkown
|
page read and write
|
|
|
|
23A16BB2000
|
unkown
|
page read and write
|
|
|
|
C5A0000
|
unkown
|
page read and write
|
|
|
|
5540000
|
unkown
|
page execute read
|
|
|
|
7FF550527000
|
unkown
|
page readonly
|
|
|
|
1529DA70000
|
unkown
|
page read and write
|
|
|
|
23A16B6F000
|
unkown
|
page read and write
|
|
|
|
57B0000
|
unkown
|
page readonly
|
|
|
|
21C54BA0000
|
unkown
|
page readonly
|
|
|
|
2CEB000
|
unkown
|
page readonly
|
|
|
|
7FF5E0D64000
|
unkown
|
page readonly
|
|
|
|
21C54C70000
|
unkown
|
page read and write
|
|
|
|
7FF5050C7000
|
unkown
|
page readonly
|
|
|
|
7FF550534000
|
unkown
|
page readonly
|
|
|
|
7FF5BEFB7000
|
unkown
|
page readonly
|
|
|
|
7FF4FFF21000
|
unkown
|
page readonly
|
|
|
|
7FF50520F000
|
unkown
|
page readonly
|
|
|
|
23A16BAE000
|
unkown
|
page read and write
|
|
|
|
F3DE000
|
unkown
|
page read and write
|
|
|
|
C550000
|
unkown
|
page read and write
|
|
|
|
7FF505232000
|
unkown
|
page readonly
|
|
|
|
111ED11D000
|
unkown
|
page read and write
|
|
|
|
7FF5428C1000
|
unkown
|
page readonly
|
|
|
|
23A16BA3000
|
unkown
|
page read and write
|
|
|
|
7FF5E0DB6000
|
unkown
|
page readonly
|
|
|
|
111EF14D000
|
unkown
|
page read and write
|
|
|
|
2898000
|
unkown
|
page readonly
|
|
|
|
9ED2000
|
unkown
|
page readonly
|
|
|
|
23A16B62000
|
unkown
|
page read and write
|
|
|
|
1E6585A0000
|
unkown
|
page read and write
|
|
|
|
F408000
|
unkown
|
page read and write
|
|
|
|
21C54CE2000
|
unkown
|
page read and write
|
|
|
|
23A16B5A000
|
unkown
|
page read and write
|
|
|
|
2AB5000
|
unkown
|
page readonly
|
|
|
|
C19D000
|
unkown
|
page read and write
|
|
|
|
7FF5E0E66000
|
unkown
|
page readonly
|
|
|
|
7FF550021000
|
unkown
|
page readonly
|
|
|
|
23A1713C000
|
unkown
|
page read and write
|
|
|
|
111EEAC0000
|
unkown
|
page read and write
|
|
|
|
23A16BA1000
|
unkown
|
page read and write
|
|
|
|
9D77000
|
unkown
|
page readonly
|
|
|
|
111EF1FF000
|
unkown
|
page read and write
|
|
|
|
CDDD000
|
unkown
|
page read and write
|
|
|
|
A662000
|
unkown
|
page readonly
|
|
|
|
CDBE000
|
unkown
|
page read and write
|
|
|
|
1E65D4C0000
|
unkown
|
page read and write
|
|
|
|
6206879000
|
unkown
|
page read and write
|
|
|
|
7FF59FCA9000
|
unkown
|
page readonly
|
|
|
|
7FF59FB0B000
|
unkown
|
page readonly
|
|
|
|
7FF5E09EC000
|
unkown
|
page readonly
|
|
|
|
7FF59FC45000
|
unkown
|
page readonly
|
|
|
|
7FF59FDC2000
|
unkown
|
page readonly
|
|
|
|
F53B000
|
unkown
|
page read and write
|
|
|
|
7FF51CB7A000
|
unkown
|
page readonly
|
|
|
|
7FF51CAAF000
|
unkown
|
page readonly
|
|
|
|
1E65D6B6000
|
unkown
|
page read and write
|
|
|
|
21C54CFE000
|
unkown
|
page read and write
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
BA30000
|
unkown
|
page read and write
|
|
|
|
1E658013000
|
unkown
|
page read and write
|
|
|
|
23A16B93000
|
unkown
|
page read and write
|
|
|
|
AACD000
|
unkown
|
page read and write
|
|
|
|
1529D190000
|
unkown
|
page read and write
|
|
|
|
1E65D6A2000
|
unkown
|
page read and write
|
|
|
|
216C7B000
|
unkown
|
page read and write
|
|
|
|
21C54CFE000
|
unkown
|
page read and write
|
|
|
|
9F32000
|
unkown
|
page readonly
|
|
|
|
2D5B000
|
unkown
|
page readonly
|
|
|
|
ED2A000
|
unkown
|
page read and write
|
|
|
|
5790000
|
unkown
|
page read and write
|
|
|
|
2888000
|
unkown
|
page readonly
|
|
|
|
26835C00000
|
unkown
|
page read and write
|
|
|
|
B072000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFD7000
|
unkown
|
page readonly
|
|
|
|
111ED0BE000
|
unkown
|
page read and write
|
|
|
|
B431000
|
unkown
|
page read and write
|
|
|
|
236D584E000
|
unkown
|
page read and write
|
|
|
|
7FF542A87000
|
unkown
|
page readonly
|
|
|
|
23A16BA1000
|
unkown
|
page read and write
|
|
|
|
1E658FA0000
|
unkown
|
page readonly
|
|
|
|
91F0000
|
unkown
|
page read and write
|
|
|
|
EF3E000
|
unkown
|
page read and write
|
|
|
|
23A16B82000
|
unkown
|
page read and write
|
|
|
|
A545000
|
unkown
|
page readonly
|
|
|
|
7FF5BDF61000
|
unkown
|
page readonly
|
|
|
|
57D0000
|
unkown
|
page read and write
|
|
|
|
92DC000
|
unkown
|
page read and write
|
|
|
|
A84D000
|
unkown
|
page readonly
|
|
|
|
1479EE4A000
|
unkown
|
page read and write
|
|
|
|
B960000
|
unkown
|
page read and write
|
|
|
|
A972000
|
unkown
|
page readonly
|
|
|
|
1E65D598000
|
unkown
|
page write copy
|
|
|
|
8F9E000
|
unkown
|
page read and write
|
|
|
|
23A161E0000
|
unkown
|
page readonly
|
|
|
|
7FF5BF39A000
|
unkown
|
page readonly
|
|
|
|
7FF51C8CB000
|
unkown
|
page readonly
|
|
|
|
8D67000
|
unkown
|
page readonly
|
|
|
|
23A16B61000
|
unkown
|
page read and write
|
|
|
|
1529CF87000
|
unkown
|
page read and write
|
|
|
|
1E658070000
|
unkown
|
page read and write
|
|
|
|
1E65D4B1000
|
unkown
|
page read and write
|
|
|
|
23A17102000
|
unkown
|
page read and write
|
|
|
|
E460000
|
unkown
|
page execute read
|
|
|
|
25347A70000
|
unkown
|
page readonly
|
|
|
|
937E000
|
unkown
|
page read and write
|
|
|
|
7FF5504A2000
|
unkown
|
page readonly
|
|
|
|
A4E5000
|
unkown
|
page readonly
|
|
|
|
A846000
|
unkown
|
page readonly
|
|
|
|
21747B000
|
unkown
|
page read and write
|
|
|
|
C8E0000
|
unkown
|
page read and write
|
|
|
|
7FF500013000
|
unkown
|
page readonly
|
|
|
|
7FF5BDFB7000
|
unkown
|
page readonly
|
|
|
|
7FF550027000
|
unkown
|
page readonly
|
|
|
|
E93C13D000
|
unkown
|
page read and write
|
|
|
|
7FF5052F3000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B45000
|
unkown
|
page readonly
|
|
|
|
ECCB000
|
unkown
|
page read and write
|
|
|
|
A950000
|
unkown
|
page readonly
|
|
|
|
2DB8000
|
unkown
|
page readonly
|
|
|
|
23A16B40000
|
unkown
|
page read and write
|
|
|
|
B1D3000
|
unkown
|
page read and write
|
|
|
|
C660000
|
unkown
|
page execute read
|
|
|
|
23A16B93000
|
unkown
|
page read and write
|
|
|
|
23A16B2E000
|
unkown
|
page read and write
|
|
|
|
236D583C000
|
unkown
|
page read and write
|
|
|
|
C8B0000
|
unkown
|
page read and write
|
|
|
|
2CE1000
|
unkown
|
page readonly
|
|
|
|
7FF542A4B000
|
unkown
|
page readonly
|
|
|
|
C6AD000
|
unkown
|
page read and write
|
|
|
|
B8F0000
|
unkown
|
page read and write
|
|
|
|
7FF5BD78B000
|
unkown
|
page readonly
|
|
|
|
5500000
|
unkown
|
page execute read
|
|
|
|
111ED02A000
|
unkown
|
page read and write
|
|
|
|
A594000
|
unkown
|
page readonly
|
|
|
|
1E6592F0000
|
unkown
|
page read and write
|
|
|
|
7FF51C8EB000
|
unkown
|
page readonly
|
|
|
|
23A16B61000
|
unkown
|
page read and write
|
|
|
|
111ED0E2000
|
unkown
|
page read and write
|
|
|
|
7FF4FFAD1000
|
unkown
|
page readonly
|
|
|
|
111EEFA0000
|
unkown
|
page read and write
|
|
|
|
7FF59FD19000
|
unkown
|
page readonly
|
|
|
|
524D000
|
unkown
|
page read and write
|
|
|
|
26836202000
|
unkown
|
page read and write
|
|
|
|
7FF59FD06000
|
unkown
|
page readonly
|
|
|
|
55AA000
|
heap default
|
page read and write
|
|
|
|
216AFA000
|
unkown
|
page read and write
|
|
|
|
236D5720000
|
heap private
|
page read and write
|
|
|
|
7FF55011F000
|
unkown
|
page readonly
|
|
|
|
7FF51CB54000
|
unkown
|
page readonly
|
|
|
|
25347508000
|
unkown
|
page read and write
|
|
|
|
7FF5BF677000
|
unkown
|
page readonly
|
|
|
|
7FF542A76000
|
unkown
|
page readonly
|
|
|
|
EA04000
|
unkown
|
page read and write
|
|
|
|
2CD2000
|
unkown
|
page readonly
|
|
|
|
B0BF000
|
unkown
|
page read and write
|
|
|
|
1529CF49000
|
heap default
|
page read and write
|
|
|
|
23A16B00000
|
unkown
|
page read and write
|
|
|
|
7FF59FDB6000
|
unkown
|
page readonly
|
|
|
|
7FF5E0D25000
|
unkown
|
page readonly
|
|
There are 2013 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://www.emory.edu/forward/covid-19/index.html
|
|
|
|
https://www.emory.edu/forward/covid-19/quick-guides.html
|
|
|
|
https://www.emory.edu/forward/#main
|
|
|
|
https://www.emory.edu/forward/covid-19/if-you-feel-sick.html
|
|
|
|
https://www.emory.edu/forward/covid-19/dashboard/index.html
|
|
|
|
https://www.emory.edu/forward/covid-19/vaccine.html
|
|
|
|
https://www.emory.edu/forward/
|
|
|
|
https://www.emory.edu/forward/covid-19/healthy-behaviors.html
|
|
|
|
https://www.emory.edu/forward/covid-19/operating-condition-status.html
|
|
|
|
https://www.emory.edu/home/index.html
|
|
|
|
https://www.emory.edu/forward/index.html
|
|
|
|
https://www.emory.edu/forward/covid-19/testing/index.html
|
|
There are 2 hidden doms, click here to show them.