Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
FaxGUO65DE.391343-Faa.html
|
HTML document, ASCII text, with very long lines, with no line terminators
|
initial sample
|
 |
|
|
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\0c8905e4-0eea-4031-a341-56a1d44fef1e.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\0f74cee8-bcc6-4f83-9d77-8d7dedeb11da.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\10a24adc-6356-40c4-8194-c2ff6acdc302.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\15f077e4-76fc-4782-82d5-bd515273f018.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\2e2403cd-f5e2-40e7-b00d-f0ffd1c0a30a.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\451bb0f2-c234-4d8a-b123-cde8acbd3508.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\45a0bebc-173a-49ee-8c7c-49b1d21d0005.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\6fc45d5a-7051-42cf-a0d7-3f112d5a8de5.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\78aabb7c-3411-4062-957c-78028fe66214.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\8c761c80-e8a4-4e53-b309-2d50f41442ca.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\93ca1303-1a1e-48b5-8a90-0756dd68ed5b.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\99eb8427-dea0-4709-a115-6683e2d006b3.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\072addb4-21e6-4435-842f-17509488d57f.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\20701080-1c40-45e8-8b45-b20d3fc9bd35.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\31ac1b3f-5e80-4daf-90f8-52a885e851f3.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\33add364-8d7c-4032-a69f-050e55ec5a9d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\371d7741-983a-428c-a209-e6e434457d4a.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4fad2d6a-14c1-450d-81ba-7a2712e1add9.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\63f4f935-ed0e-4841-b779-aa27ee3bcb49.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\651feb4d-327e-4579-a24e-b580a89aab4e.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\77aba684-cd4e-41ea-91ef-ffa63d7b957b.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8ed7e37b-16b0-44d2-b273-2db800d0d9e8.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9d814999-61f9-4ba2-98cb-33abe8dd7e3e.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\05711a550dadec40_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0a84b4865e821e28_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0dc5eef33ad111af_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\308e7fc8113abdbe_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3a73391f8ed26ca1_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\73f1d653d4203c94_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\803cf0699cd0ec28_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\949d2b57c43cbcd6_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a64bbd896a35b6e4_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e95e6990d8e3994c_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f12d30eb3faa08de_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
|
MS Windows COFF PowerPC object file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index (copy)
|
MS Windows COFF PowerPC object file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old. (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Sessionx (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabsnd (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State- (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State7b (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old=} (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferencesSE (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferencesTM (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferencesld (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure PreferencesTM (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.oldo_ (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\08c913db-5cb6-4b8b-87b6-0c98e2cef01f.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent
State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old.
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\9cfc5b08-e1ad-4151-8053-4dc99a0c34c2.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent
State.. (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old.
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.oldon
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.oldTM
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\bd7fafed-456e-4f07-993c-3780862af6a2.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\bea5e71b-96d8-47ff-8aca-6b6e3cf923e4.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\bfbae70a-68ae-4b98-93b0-4f11cede6c5c.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c9a3db0c-bead-413a-a4e6-9666734a6d46.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e0c1a327-dc4e-4b34-94b4-4ab5f759a904.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ea5947ca-07ee-4d4d-84f1-90db68fe373d.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.oldl" (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State. (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\9.29.4\Indexing in Progress
|
empty
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\scoped_dir4196_1748234936\Ruleset
Data
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\ae01ae08-1a4b-4e8f-9903-98b05e354279.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\b68ded50-ae92-4196-b96f-0b42d76bd2a8.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\c15f9218-e026-418c-a7ae-c7889be1771f.tmp
|
SysEx File -
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\0351fd98-eb2c-472c-bd22-c1192b8d7020.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\0a3a796a-7bdb-4bf8-b605-a89885ee1282.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4196_1231411245\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4196_1232482680\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4196_1393984814\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4196_1590846621\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4196_1880475830\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4196_274302937\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4196_63893395\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4196_785809725\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4196_891129223\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7ae7451a-a796-4b44-bd81-41a41bf0a5bd.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\aeafe024-37b7-4ab2-ac24-556c94ff4598.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_1689008162\aeafe024-37b7-4ab2-ac24-556c94ff4598.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\7ae7451a-a796-4b44-bd81-41a41bf0a5bd.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4196_556766957\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
There are 237 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'C:\Users\user\Desktop\FaxGUO65DE.391343-Faa.html'
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1604,4792883648345856641,18011343366932447717,131072
--lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1716 /prefetch:8
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
file:///C:/Users/user/Desktop/FaxGUO65DE.391343-Faa.html
|
|
||
|
https://dns.google
|
unknown
|
|
|
|
https://ogs.google.com
|
unknown
|
|
|
|
https://support.google.com/chromecast/troubleshooter/2995236
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/js/Button.js?v=1342177280
|
unknown
|
|
|
|
https://play.google.com
|
unknown
|
|
|
|
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
|
172.217.168.78
|
|
|
|
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
|
172.217.168.13
|
|
|
|
https://payments.google.com/payments/v4/js/integrator.js
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
|
152.199.23.37
|
|
|
|
https://www.google.com;
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/ScriptResource.axd?d=q5w5thCcfM-puGUfx2IvVvou0xwZRExIT95KU
|
unknown
|
|
|
|
https://hangouts.google.com/
|
unknown
|
|
|
|
https://microsoftonline.com/:t
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/ScriptResource.axd?d=dKkdrB5w_YByjM1hzQdaPGMZwL6KMOpdrP-i7
|
unknown
|
|
|
|
https://sandbox.google.com/payments/v4/js/integrator.js
|
unknown
|
|
|
|
http://3.139.50.24/prv.php?id=christina.young@faa.gov
|
3.139.50.24
|
|
|
|
https://passwordreset.microsoftonline.com/js/Common.js
|
unknown
|
|
|
|
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
|
172.217.168.65
|
|
|
|
https://www.google.com
|
unknown
|
|
|
|
https://microsoftonline.com/
|
unknown
|
|
|
|
https://microsoftonline.com/=
|
unknown
|
|
|
|
https://ajax.aspnetcdn.com/
|
unknown
|
|
|
|
https://client.hip.live.com/GetHIP/GetWLSPHIP0/WLSPHIP0?fid=90d9bd4be3de4c77b59cbc6894182b46&id=2825
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/favicon.ico?v=1342177280
|
unknown
|
|
|
|
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
|
unknown
|
|
|
|
https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
|
unknown
|
|
|
|
https://accounts.google.com
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/WebResource.axd?d=K8SG-wKQphiVYLlIdWNflHCKk9laM7b9jg1MsaXM
|
unknown
|
|
|
|
https://support.google.com/chromecast/answer/2998456
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
|
152.199.23.37
|
|
|
|
https://microsoftonline.com/l
|
unknown
|
|
|
|
https://clients2.googleusercontent.com
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2frep
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/ScriptResource.axd?d=OUH-1awPDbalk0VCLValPdS0n633hJORT180q
|
unknown
|
|
|
|
https://apis.google.com
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/js/Webtrends.js
|
unknown
|
|
|
|
https://microsoftonline.com/5
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/WebResource.axd?d=HAV6PjMKiAmtAvxBgE9JDGqR1xYgZB9pt2QBI2F1
|
unknown
|
|
|
|
https://www.google.com/
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
|
|
https://passwordreset.microsoftonline.com/js/Captcha.js?v=1342177280
|
unknown
|
|
|
|
https://clients2.google.com
|
unknown
|
|
|
|
https://clients2.google.com/service/update2/crx
|
unknown
|
|
There are 35 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
cs1100.wpc.omegacdn.net
|
152.199.23.37
|
|
|
|
accounts.google.com
|
172.217.168.13
|
|
|
|
clients.l.google.com
|
172.217.168.78
|
|
|
|
googlehosted.l.googleusercontent.com
|
172.217.168.65
|
|
|
|
clients2.googleusercontent.com
|
unknown
|
|
|
|
passwordreset.microsoftonline.com
|
unknown
|
|
|
|
clients2.google.com
|
unknown
|
|
|
|
code.jquery.com
|
unknown
|
|
|
|
aadcdn.msftauth.net
|
unknown
|
|
|
|
aadcdn.msauth.net
|
unknown
|
|
|
|
ajax.aspnetcdn.com
|
unknown
|
|
|
|
client.hip.live.com
|
unknown
|
|
|
|
eus.client.hip.live.com
|
unknown
|
|
There are 3 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
172.217.168.13
|
accounts.google.com
|
United States
|
|
|
|
172.217.168.78
|
clients.l.google.com
|
United States
|
|
|
|
239.255.255.250
|
unknown
|
Reserved
|
|
|
|
172.217.168.65
|
googlehosted.l.googleusercontent.com
|
United States
|
|
|
|
3.139.50.24
|
unknown
|
United States
|
|
|
|
152.199.23.37
|
cs1100.wpc.omegacdn.net
|
United States
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
ahfgeienlihckogmohjhadlkjgocpleb
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
kmendfapggjehodndflmmgagdbamhnfd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mfehgcgbbipciphmccgaenjidiccnmng
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
neajdppkdcdipfabeoofebfddakdcjhd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nkeimhogjdpnpccoofpliimaahmaaome
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.reporting
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
module_blacklist_cache_md5_digest
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
media.storage_id_salt
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_seed
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
default_search_provider_data.template_url_data
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
safebrowsing.incidents_sent
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pinned_tabs
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
search_provider_overrides
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_default_search
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_username
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.restore_on_startup
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_version
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.prompt_wave
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage_is_newtabpage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
browser.show_home_button
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
user_experience_metrics.stability.exited_cleanly
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
lastrun
|
|
There are 32 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF522407000
|
unkown image
|
page readonly
|
|
|
|
7FF50FDAC000
|
unkown image
|
page readonly
|
|
|
|
232B4DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5EB94C000
|
unkown image
|
page readonly
|
|
|
|
2BD22980000
|
unkown image
|
page readonly
|
|
|
|
7FF5D70D0000
|
unkown image
|
page readonly
|
|
|
|
232B4DC4000
|
unkown
|
page read and write
|
|
|
|
7DF4FA350000
|
unkown image
|
page readonly
|
|
|
|
2116D990000
|
heap private
|
page read and write
|
|
|
|
7DF5E98E2000
|
unkown image
|
page readonly
|
|
|
|
7FF55A949000
|
unkown image
|
page readonly
|
|
|
|
2A92DC85000
|
unkown
|
page read and write
|
|
|
|
7FF5A7BA1000
|
unkown image
|
page readonly
|
|
|
|
7FF55AA88000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7565000
|
unkown image
|
page readonly
|
|
|
|
7FF5A78FD000
|
unkown image
|
page readonly
|
|
|
|
7FF57B7DA000
|
unkown image
|
page readonly
|
|
|
|
7FF5422F8000
|
unkown image
|
page readonly
|
|
|
|
7FF5D75D1000
|
unkown image
|
page readonly
|
|
|
|
208DBFD4000
|
unkown
|
page read and write
|
|
|
|
2ACF6102000
|
unkown
|
page read and write
|
|
|
|
7DF5FDCD2000
|
unkown image
|
page readonly
|
|
|
|
7DD4278000
|
unkown
|
page read and write
|
|
|
|
7DF58AAC2000
|
unkown image
|
page readonly
|
|
|
|
7FF520432000
|
unkown image
|
page readonly
|
|
|
|
232B4D90000
|
unkown
|
page read and write
|
|
|
|
7FF53C140000
|
unkown image
|
page readonly
|
|
|
|
208DC100000
|
unkown
|
page read and write
|
|
|
|
15891A5C000
|
unkown
|
page read and write
|
|
|
|
7FF5D7529000
|
unkown image
|
page readonly
|
|
|
|
7FF522747000
|
unkown image
|
page readonly
|
|
|
|
232B4C02000
|
unkown
|
page read and write
|
|
|
|
208DC04E000
|
unkown
|
page read and write
|
|
|
|
2BE62F00000
|
unkown
|
page read and write
|
|
|
|
7FF5D7EC0000
|
unkown image
|
page readonly
|
|
|
|
7DF532820000
|
unkown image
|
page readonly
|
|
|
|
7FF50FDB5000
|
unkown image
|
page readonly
|
|
|
|
15892202000
|
unkown
|
page read and write
|
|
|
|
208DC310000
|
unkown
|
page read and write
|
|
|
|
7FF52048D000
|
unkown image
|
page readonly
|
|
|
|
78BDB7E000
|
unkown
|
page read and write
|
|
|
|
7FF5D7D18000
|
unkown image
|
page readonly
|
|
|
|
7DF58DDB0000
|
unkown image
|
page readonly
|
|
|
|
E78B277000
|
unkown
|
page read and write
|
|
|
|
7FF522540000
|
unkown image
|
page readonly
|
|
|
|
208DC12F000
|
unkown
|
page read and write
|
|
|
|
21A52402000
|
unkown
|
page read and write
|
|
|
|
7FF53C370000
|
unkown image
|
page readonly
|
|
|
|
7FF522757000
|
unkown image
|
page readonly
|
|
|
|
232B448A000
|
unkown
|
page read and write
|
|
|
|
7FF5424F0000
|
unkown image
|
page readonly
|
|
|
|
208DD010000
|
unkown
|
page read and write
|
|
|
|
7DF58AAB0000
|
unkown image
|
page readonly
|
|
|
|
232B4D9A000
|
unkown
|
page read and write
|
|
|
|
7FF5786C2000
|
unkown image
|
page readonly
|
|
|
|
7FF52248D000
|
unkown image
|
page readonly
|
|
|
|
7FF55A670000
|
unkown image
|
page readonly
|
|
|
|
232B4D7B000
|
unkown
|
page read and write
|
|
|
|
208DC041000
|
unkown
|
page read and write
|
|
|
|
2BE620C0000
|
unkown
|
page read and write
|
|
|
|
7DF56CE90000
|
unkown image
|
page readonly
|
|
|
|
2116DB18000
|
unkown
|
page read and write
|
|
|
|
7FF5D7A30000
|
unkown image
|
page readonly
|
|
|
|
7DF5E98E0000
|
unkown image
|
page readonly
|
|
|
|
208DC128000
|
unkown
|
page read and write
|
|
|
|
7FF5D7F29000
|
unkown image
|
page readonly
|
|
|
|
7FF55A93E000
|
unkown image
|
page readonly
|
|
|
|
2116FB40000
|
unkown image
|
page write copy
|
|
|
|
E78B17B000
|
unkown
|
page read and write
|
|
|
|
208DC2F0000
|
unkown
|
page read and write
|
|
|
|
208DC12A000
|
unkown
|
page read and write
|
|
|
|
208DC12C000
|
unkown
|
page read and write
|
|
|
|
7FF52248F000
|
unkown image
|
page readonly
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
7FF55A983000
|
unkown image
|
page readonly
|
|
|
|
272DBC49000
|
unkown
|
page read and write
|
|
|
|
7FF522810000
|
unkown image
|
page readonly
|
|
|
|
7FF5D75D9000
|
unkown image
|
page readonly
|
|
|
|
272DC402000
|
unkown
|
page read and write
|
|
|
|
7DF5FDCE0000
|
unkown image
|
page readonly
|
|
|
|
7DF58AAD0000
|
unkown image
|
page readonly
|
|
|
|
232B444B000
|
unkown
|
page read and write
|
|
|
|
232B44D7000
|
unkown
|
page read and write
|
|
|
|
2BE62116000
|
unkown
|
page read and write
|
|
|
|
208DC0A1000
|
unkown
|
page read and write
|
|
|
|
7FF522879000
|
unkown image
|
page readonly
|
|
|
|
22526881000
|
unkown
|
page read and write
|
|
|
|
232B4D82000
|
unkown
|
page read and write
|
|
|
|
7FF541990000
|
unkown image
|
page readonly
|
|
|
|
232B4DA0000
|
unkown
|
page read and write
|
|
|
|
208DC520000
|
unkown
|
page read and write
|
|
|
|
208D6A77000
|
unkown
|
page read and write
|
|
|
|
7FF50FD96000
|
unkown image
|
page readonly
|
|
|
|
232B4DA8000
|
unkown
|
page read and write
|
|
|
|
7FF53C3FC000
|
unkown image
|
page readonly
|
|
|
|
7FF52262C000
|
unkown image
|
page readonly
|
|
|
|
208DC134000
|
unkown
|
page read and write
|
|
|
|
2BE6211E000
|
unkown
|
page read and write
|
|
|
|
208DC12E000
|
unkown
|
page read and write
|
|
|
|
208DC12F000
|
unkown
|
page read and write
|
|
|
|
7DF4E77A0000
|
unkown image
|
page readonly
|
|
|
|
1F0D3050000
|
unkown image
|
page readonly
|
|
|
|
2BE62F80000
|
unkown
|
page read and write
|
|
|
|
232B4D9A000
|
unkown
|
page read and write
|
|
|
|
7DD4177000
|
unkown
|
page read and write
|
|
|
|
232B4320000
|
unkown image
|
page readonly
|
|
|
|
22526700000
|
unkown image
|
page read and write
|
|
|
|
208DBFB1000
|
unkown
|
page read and write
|
|
|
|
2BE629A0000
|
unkown image
|
page readonly
|
|
|
|
21A51B70000
|
unkown image
|
page readonly
|
|
|
|
1B631DD0000
|
unkown image
|
page readonly
|
|
|
|
7FF55A66A000
|
unkown image
|
page readonly
|
|
|
|
D0F99FB000
|
unkown
|
page read and write
|
|
|
|
232B4D7B000
|
unkown
|
page read and write
|
|
|
|
7DF58DDC2000
|
unkown image
|
page readonly
|
|
|
|
7DD3B8B000
|
unkown
|
page read and write
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
7FF5D74E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5227B5000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCB1A000
|
unkown image
|
page readonly
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
208DC180000
|
unkown
|
page read and write
|
|
|
|
272DBC79000
|
unkown
|
page read and write
|
|
|
|
7DF5B9FF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7CAF000
|
unkown image
|
page readonly
|
|
|
|
208DC17A000
|
unkown
|
page read and write
|
|
|
|
208DC143000
|
unkown
|
page read and write
|
|
|
|
7DF5E98D2000
|
unkown image
|
page readonly
|
|
|
|
7FF57AEDD000
|
unkown image
|
page readonly
|
|
|
|
7DF5EEF00000
|
unkown image
|
page readonly
|
|
|
|
2116F490000
|
unkown
|
page read and write
|
|
|
|
7FF55A2E4000
|
unkown image
|
page readonly
|
|
|
|
F30D3FE000
|
unkown
|
page read and write
|
|
|
|
7DF554860000
|
unkown image
|
page readonly
|
|
|
|
272DBC2C000
|
unkown
|
page read and write
|
|
|
|
2ACF6200000
|
unkown image
|
page readonly
|
|
|
|
208DC17C000
|
unkown
|
page read and write
|
|
|
|
2ACF5EC0000
|
unkown image
|
page readonly
|
|
|
|
AB222FE000
|
unkown
|
page read and write
|
|
|
|
208DC10E000
|
unkown
|
page read and write
|
|
|
|
208D6A7B000
|
unkown
|
page read and write
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
15891A3B000
|
unkown
|
page read and write
|
|
|
|
7FF5A7AB9000
|
unkown image
|
page readonly
|
|
|
|
7DF5FDCF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCB90000
|
unkown image
|
page readonly
|
|
|
|
7FF5204A6000
|
unkown image
|
page readonly
|
|
|
|
F74AD8C000
|
unkown
|
page read and write
|
|
|
|
7FF5D744C000
|
unkown image
|
page readonly
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
7FF53C048000
|
unkown image
|
page readonly
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
7FF5A796C000
|
unkown image
|
page readonly
|
|
|
|
2ACF6108000
|
unkown
|
page read and write
|
|
|
|
208D6A71000
|
unkown
|
page read and write
|
|
|
|
7FF5227F6000
|
unkown image
|
page readonly
|
|
|
|
208D71C0000
|
unkown image
|
page readonly
|
|
|
|
2A92DD00000
|
unkown
|
page read and write
|
|
|
|
7FF5DC0EC000
|
unkown image
|
page readonly
|
|
|
|
232B42F0000
|
unkown image
|
page readonly
|
|
|
|
6A8307F000
|
unkown
|
page read and write
|
|
|
|
7FF50F5C8000
|
unkown image
|
page readonly
|
|
|
|
7DF58AAB2000
|
unkown image
|
page readonly
|
|
|
|
7FF57BAB9000
|
unkown image
|
page readonly
|
|
|
|
208DC128000
|
unkown
|
page read and write
|
|
|
|
208DC140000
|
unkown
|
page read and write
|
|
|
|
2BD22428000
|
unkown
|
page read and write
|
|
|
|
272DBBF0000
|
unkown image
|
page readonly
|
|
|
|
1B631E80000
|
unkown
|
page read and write
|
|
|
|
7DF532830000
|
unkown image
|
page readonly
|
|
|
|
208DC133000
|
unkown
|
page read and write
|
|
|
|
7FF57B9C8000
|
unkown image
|
page readonly
|
|
|
|
21870013000
|
unkown
|
page read and write
|
|
|
|
7FF5DCB97000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA000000
|
unkown image
|
page readonly
|
|
|
|
2A92DC47000
|
unkown
|
page read and write
|
|
|
|
2A92E180000
|
unkown image
|
page readonly
|
|
|
|
AB2227B000
|
unkown
|
page read and write
|
|
|
|
7DF554852000
|
unkown image
|
page readonly
|
|
|
|
21A51ED0000
|
unkown image
|
page readonly
|
|
|
|
7DF5EA232000
|
unkown image
|
page readonly
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
7FF55AB71000
|
unkown image
|
page readonly
|
|
|
|
208D6900000
|
unkown image
|
page readonly
|
|
|
|
232B4DA1000
|
unkown
|
page read and write
|
|
|
|
7FF5D76BB000
|
unkown image
|
page readonly
|
|
|
|
208DC0F2000
|
unkown
|
page read and write
|
|
|
|
7FF5A7C39000
|
unkown image
|
page readonly
|
|
|
|
6A82AFE000
|
unkown
|
page read and write
|
|
|
|
21A51C6A000
|
unkown
|
page read and write
|
|
|
|
15891A57000
|
unkown
|
page read and write
|
|
|
|
2BE62405000
|
heap private
|
page read and write
|
|
|
|
7FF5D74D0000
|
unkown image
|
page readonly
|
|
|
|
208D7E01000
|
unkown
|
page read and write
|
|
|
|
7FF50FD14000
|
unkown image
|
page readonly
|
|
|
|
232B4508000
|
unkown
|
page read and write
|
|
|
|
7FF5A7CE9000
|
unkown image
|
page readonly
|
|
|
|
7FF54247A000
|
unkown image
|
page readonly
|
|
|
|
15891A32000
|
unkown
|
page read and write
|
|
|
|
7FF5DCB08000
|
unkown image
|
page readonly
|
|
|
|
22526CD0000
|
unkown image
|
page readonly
|
|
|
|
7FF53C305000
|
unkown image
|
page readonly
|
|
|
|
208DC17B000
|
unkown
|
page read and write
|
|
|
|
2186FE50000
|
unkown image
|
page readonly
|
|
|
|
208DC0FA000
|
unkown
|
page read and write
|
|
|
|
2ACF5FE0000
|
unkown
|
page read and write
|
|
|
|
1B631D60000
|
unkown
|
page read and write
|
|
|
|
7FF5DCB85000
|
unkown image
|
page readonly
|
|
|
|
7FF53B8AA000
|
unkown image
|
page readonly
|
|
|
|
D0F95FE000
|
unkown
|
page read and write
|
|
|
|
208D735F000
|
unkown
|
page read and write
|
|
|
|
7DF5EA230000
|
unkown image
|
page readonly
|
|
|
|
7FF542367000
|
unkown image
|
page readonly
|
|
|
|
2BD222E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7E6F000
|
unkown image
|
page readonly
|
|
|
|
208DC128000
|
unkown
|
page read and write
|
|
|
|
2A7FAFE000
|
unkown
|
page read and write
|
|
|
|
232B4D9E000
|
unkown
|
page read and write
|
|
|
|
13F097E000
|
unkown
|
page read and write
|
|
|
|
232B4370000
|
unkown
|
page read and write
|
|
|
|
232B4D8C000
|
unkown
|
page read and write
|
|
|
|
2116E060000
|
unkown image
|
page readonly
|
|
|
|
7FF5204AC000
|
unkown image
|
page readonly
|
|
|
|
2A92DC58000
|
unkown
|
page read and write
|
|
|
|
7FF5D74D2000
|
unkown image
|
page readonly
|
|
|
|
7FF52040C000
|
unkown image
|
page readonly
|
|
|
|
2A92DC00000
|
unkown
|
page read and write
|
|
|
|
7FF5EA0CF000
|
unkown image
|
page readonly
|
|
|
|
7DD45FF000
|
unkown
|
page read and write
|
|
|
|
7FF5220AF000
|
unkown image
|
page readonly
|
|
|
|
208DC104000
|
unkown
|
page read and write
|
|
|
|
208DC061000
|
unkown
|
page read and write
|
|
|
|
232B4B60000
|
unkown
|
page read and write
|
|
|
|
2A92DC89000
|
unkown
|
page read and write
|
|
|
|
7FF5420BE000
|
unkown image
|
page readonly
|
|
|
|
232B42E0000
|
heap private
|
page read and write
|
|
|
|
7DF5FC480000
|
unkown image
|
page readonly
|
|
|
|
7FF57B9B0000
|
unkown image
|
page readonly
|
|
|
|
2116DA59000
|
unkown
|
page read and write
|
|
|
|
208D7319000
|
unkown
|
page read and write
|
|
|
|
7FF5A7CE9000
|
unkown image
|
page readonly
|
|
|
|
2ACF603C000
|
unkown
|
page read and write
|
|
|
|
7FF50F257000
|
unkown image
|
page readonly
|
|
|
|
7FF50FD38000
|
unkown image
|
page readonly
|
|
|
|
7FF50FE29000
|
unkown image
|
page readonly
|
|
|
|
2BE62620000
|
unkown image
|
page readonly
|
|
|
|
7FF55AB6E000
|
unkown image
|
page readonly
|
|
|
|
7FF57B5B0000
|
unkown image
|
page readonly
|
|
|
|
7FF522879000
|
unkown image
|
page readonly
|
|
|
|
2ACF6400000
|
unkown image
|
page readonly
|
|
|
|
208DC136000
|
unkown
|
page read and write
|
|
|
|
7DF5EA220000
|
unkown image
|
page readonly
|
|
|
|
AB2247F000
|
unkown
|
page read and write
|
|
|
|
22526860000
|
unkown
|
page read and write
|
|
|
|
7FF5A7BF6000
|
unkown image
|
page readonly
|
|
|
|
1F0D3010000
|
heap private
|
page read and write
|
|
|
|
7DF58AAB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5A77E0000
|
unkown image
|
page readonly
|
|
|
|
7FF53C1FF000
|
unkown image
|
page readonly
|
|
|
|
15891B02000
|
unkown
|
page read and write
|
|
|
|
7FF55A89A000
|
unkown image
|
page readonly
|
|
|
|
1B631C50000
|
unkown image
|
page readonly
|
|
|
|
F74B97C000
|
unkown
|
page read and write
|
|
|
|
7FF5D7EC7000
|
unkown image
|
page readonly
|
|
|
|
2A92DC4B000
|
unkown
|
page read and write
|
|
|
|
7FF55AB10000
|
unkown image
|
page readonly
|
|
|
|
7DF5B9FF0000
|
unkown image
|
page readonly
|
|
|
|
208DC135000
|
unkown
|
page read and write
|
|
|
|
7FF5A79A5000
|
unkown image
|
page readonly
|
|
|
|
232B4447000
|
unkown
|
page read and write
|
|
|
|
7DF522130000
|
unkown image
|
page readonly
|
|
|
|
7FF522870000
|
unkown image
|
page readonly
|
|
|
|
232B4DDA000
|
unkown
|
page read and write
|
|
|
|
7FF5424DC000
|
unkown image
|
page readonly
|
|
|
|
5CAC0FF000
|
unkown
|
page read and write
|
|
|
|
7DF56CE82000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7F21000
|
unkown image
|
page readonly
|
|
|
|
272DBC3C000
|
unkown
|
page read and write
|
|
|
|
15891A60000
|
unkown
|
page read and write
|
|
|
|
2BE61FC0000
|
unkown
|
page read and write
|
|
|
|
208D69F0000
|
unkown
|
page read and write
|
|
|
|
7FF55A968000
|
unkown image
|
page readonly
|
|
|
|
232B4DA9000
|
unkown
|
page read and write
|
|
|
|
232B4A50000
|
unkown image
|
page readonly
|
|
|
|
7FF522788000
|
unkown image
|
page readonly
|
|
|
|
7FF57AEC5000
|
unkown image
|
page readonly
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
7FF522814000
|
unkown image
|
page readonly
|
|
|
|
2ACF5EE0000
|
heap default
|
page read and write
|
|
|
|
7FF522768000
|
unkown image
|
page readonly
|
|
|
|
7FF5D74E8000
|
unkown image
|
page readonly
|
|
|
|
7FF542559000
|
unkown image
|
page readonly
|
|
|
|
208D735D000
|
unkown
|
page read and write
|
|
|
|
208D68F0000
|
heap private
|
page read and write
|
|
|
|
7FF5227EC000
|
unkown image
|
page readonly
|
|
|
|
2116F5A0000
|
unkown
|
page read and write
|
|
|
|
7FF520520000
|
unkown image
|
page readonly
|
|
|
|
7FF57AED7000
|
unkown image
|
page readonly
|
|
|
|
208DC310000
|
unkown
|
page read and write
|
|
|
|
208D6A58000
|
unkown
|
page read and write
|
|
|
|
232B4413000
|
unkown
|
page read and write
|
|
|
|
7FF5424C6000
|
unkown image
|
page readonly
|
|
|
|
D0F957E000
|
unkown
|
page read and write
|
|
|
|
7FF5421A6000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7C2F000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7556000
|
unkown image
|
page readonly
|
|
|
|
7DF5EA222000
|
unkown image
|
page readonly
|
|
|
|
208DC460000
|
unkown
|
page read and write
|
|
|
|
1B631E76000
|
unkown
|
page read and write
|
|
|
|
272DBD00000
|
unkown
|
page read and write
|
|
|
|
7FF55AAFC000
|
unkown image
|
page readonly
|
|
|
|
22526876000
|
unkown
|
page read and write
|
|
|
|
208DC000000
|
unkown
|
page read and write
|
|
|
|
7FF57BAB9000
|
unkown image
|
page readonly
|
|
|
|
7FF5225B8000
|
unkown image
|
page readonly
|
|
|
|
272DBC70000
|
unkown
|
page read and write
|
|
|
|
208D736F000
|
unkown
|
page read and write
|
|
|
|
7FF520065000
|
unkown image
|
page readonly
|
|
|
|
7FF5EA0FC000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7454000
|
unkown image
|
page readonly
|
|
|
|
2186FE40000
|
heap private
|
page read and write
|
|
|
|
232B4DA0000
|
unkown
|
page read and write
|
|
|
|
208D739B000
|
unkown
|
page read and write
|
|
|
|
2116DB00000
|
unkown
|
page read and write
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
272DC0D0000
|
unkown image
|
page readonly
|
|
|
|
208DC133000
|
unkown
|
page read and write
|
|
|
|
232B5202000
|
unkown
|
page read and write
|
|
|
|
232B5302000
|
unkown
|
page read and write
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
208D6B13000
|
unkown
|
page read and write
|
|
|
|
232B4340000
|
heap default
|
page read and write
|
|
|
|
15891A45000
|
unkown
|
page read and write
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
208DBFB8000
|
unkown
|
page read and write
|
|
|
|
7FF50FA8D000
|
unkown image
|
page readonly
|
|
|
|
208D6B02000
|
unkown
|
page read and write
|
|
|
|
7FF5EB8E8000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7B9A000
|
unkown image
|
page readonly
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
7FF53C3BF000
|
unkown image
|
page readonly
|
|
|
|
78BD97E000
|
unkown
|
page read and write
|
|
|
|
7FF50FB53000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7BC7000
|
unkown image
|
page readonly
|
|
|
|
7FF542468000
|
unkown image
|
page readonly
|
|
|
|
7FF54237C000
|
unkown image
|
page readonly
|
|
|
|
7FF578687000
|
unkown image
|
page readonly
|
|
|
|
7DF56CE72000
|
unkown image
|
page readonly
|
|
|
|
7FF5423D7000
|
unkown image
|
page readonly
|
|
|
|
21870400000
|
unkown image
|
page readonly
|
|
|
|
15891960000
|
unkown
|
page read and write
|
|
|
|
208DC2C0000
|
unkown
|
page read and write
|
|
|
|
232B4DA0000
|
unkown
|
page read and write
|
|
|
|
7FF57BA3C000
|
unkown image
|
page readonly
|
|
|
|
7FF5424F4000
|
unkown image
|
page readonly
|
|
|
|
208DBFB0000
|
unkown
|
page read and write
|
|
|
|
7DF5FC492000
|
unkown image
|
page readonly
|
|
|
|
208DC131000
|
unkown
|
page read and write
|
|
|
|
7DF5E98F0000
|
unkown image
|
page readonly
|
|
|
|
208DC0F4000
|
unkown
|
page read and write
|
|
|
|
208D6920000
|
unkown image
|
page readonly
|
|
|
|
208DBEB0000
|
unkown
|
page read and write
|
|
|
|
272DBC29000
|
unkown
|
page read and write
|
|
|
|
208D735C000
|
unkown
|
page read and write
|
|
|
|
7DF48BC80000
|
unkown image
|
page readonly
|
|
|
|
232B4429000
|
unkown
|
page read and write
|
|
|
|
272DBC85000
|
unkown
|
page read and write
|
|
|
|
7FF5D7D3D000
|
unkown image
|
page readonly
|
|
|
|
7DF54E780000
|
unkown image
|
page readonly
|
|
|
|
2ACF6056000
|
unkown
|
page read and write
|
|
|
|
7DF554862000
|
unkown image
|
page readonly
|
|
|
|
7DF56CE80000
|
unkown image
|
page readonly
|
|
|
|
2BD22402000
|
unkown
|
page read and write
|
|
|
|
7FF50F961000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7916000
|
unkown image
|
page readonly
|
|
|
|
7FF522631000
|
unkown image
|
page readonly
|
|
|
|
7FF5D753D000
|
unkown image
|
page readonly
|
|
|
|
232B4DB3000
|
unkown
|
page read and write
|
|
|
|
7DF532840000
|
unkown image
|
page readonly
|
|
|
|
13F087A000
|
unkown
|
page read and write
|
|
|
|
22526913000
|
unkown
|
page read and write
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
7FF5223B5000
|
unkown image
|
page readonly
|
|
|
|
E78B07E000
|
unkown
|
page read and write
|
|
|
|
7FF5225DE000
|
unkown image
|
page readonly
|
|
|
|
15891A77000
|
unkown
|
page read and write
|
|
|
|
232B4D4F000
|
unkown
|
page read and write
|
|
|
|
232B4D91000
|
unkown
|
page read and write
|
|
|
|
232B444A000
|
unkown
|
page read and write
|
|
|
|
2116DA2A000
|
unkown
|
page read and write
|
|
|
|
7FF5DCAF0000
|
unkown image
|
page readonly
|
|
|
|
6A82D7B000
|
unkown
|
page read and write
|
|
|
|
1F0D3170000
|
unkown
|
page read and write
|
|
|
|
7FF53C479000
|
unkown image
|
page readonly
|
|
|
|
15891A5F000
|
unkown
|
page read and write
|
|
|
|
7FF52279A000
|
unkown image
|
page readonly
|
|
|
|
2BD2243C000
|
unkown
|
page read and write
|
|
|
|
232B4DBC000
|
unkown
|
page read and write
|
|
|
|
7FF50FE21000
|
unkown image
|
page readonly
|
|
|
|
208DC114000
|
unkown
|
page read and write
|
|
|
|
7FF55AABF000
|
unkown image
|
page readonly
|
|
|
|
7FF522486000
|
unkown image
|
page readonly
|
|
|
|
78BDC7E000
|
unkown
|
page read and write
|
|
|
|
2A92DC52000
|
unkown
|
page read and write
|
|
|
|
F167F7E000
|
unkown
|
page read and write
|
|
|
|
7FF520420000
|
unkown image
|
page readonly
|
|
|
|
15891A62000
|
unkown
|
page read and write
|
|
|
|
272DC250000
|
unkown image
|
page readonly
|
|
|
|
208DC104000
|
unkown
|
page read and write
|
|
|
|
1F0D3302000
|
unkown
|
page read and write
|
|
|
|
7FF5226EC000
|
unkown image
|
page readonly
|
|
|
|
1B631E8F000
|
unkown
|
page read and write
|
|
|
|
7FF55A98D000
|
unkown image
|
page readonly
|
|
|
|
208DC114000
|
unkown
|
page read and write
|
|
|
|
208DBFB0000
|
unkown
|
page read and write
|
|
|
|
7FF57B8F1000
|
unkown image
|
page readonly
|
|
|
|
7FF5224FC000
|
unkown image
|
page readonly
|
|
|
|
F30D4F9000
|
unkown
|
page read and write
|
|
|
|
22526876000
|
unkown
|
page read and write
|
|
|
|
7FF53C3C9000
|
unkown image
|
page readonly
|
|
|
|
21A51B80000
|
unkown image
|
page readonly
|
|
|
|
208DC10E000
|
unkown
|
page read and write
|
|
|
|
232B4DB2000
|
unkown
|
page read and write
|
|
|
|
7FF5A7AA1000
|
unkown image
|
page readonly
|
|
|
|
2BD222F0000
|
unkown image
|
page readonly
|
|
|
|
7FF55AB05000
|
unkown image
|
page readonly
|
|
|
|
1B6322D0000
|
unkown image
|
page readonly
|
|
|
|
2ACF6000000
|
unkown
|
page read and write
|
|
|
|
7FF5227E6000
|
unkown image
|
page readonly
|
|
|
|
272DBBC0000
|
unkown image
|
page readonly
|
|
|
|
E78ABBB000
|
unkown
|
page read and write
|
|
|
|
208D6CD0000
|
unkown image
|
page readonly
|
|
|
|
2A92DE00000
|
unkown image
|
page readonly
|
|
|
|
7DF5EEEF0000
|
unkown image
|
page readonly
|
|
|
|
208DC104000
|
unkown
|
page read and write
|
|
|
|
208D7358000
|
unkown
|
page read and write
|
|
|
|
7FF55AAC9000
|
unkown image
|
page readonly
|
|
|
|
232B4D6F000
|
unkown
|
page read and write
|
|
|
|
7FF52275C000
|
unkown image
|
page readonly
|
|
|
|
1F0D3790000
|
unkown image
|
page readonly
|
|
|
|
232B43B0000
|
unkown image
|
page write copy
|
|
|
|
21A51C7D000
|
unkown
|
page read and write
|
|
|
|
7FF5EB1FA000
|
unkown image
|
page readonly
|
|
|
|
7FF53C417000
|
unkown image
|
page readonly
|
|
|
|
7FF55AAF6000
|
unkown image
|
page readonly
|
|
|
|
15891A7B000
|
unkown
|
page read and write
|
|
|
|
7FF54242A000
|
unkown image
|
page readonly
|
|
|
|
7DF5EA232000
|
unkown image
|
page readonly
|
|
|
|
7FF542466000
|
unkown image
|
page readonly
|
|
|
|
7FF57B92C000
|
unkown image
|
page readonly
|
|
|
|
2ACF6053000
|
unkown
|
page read and write
|
|
|
|
1B631DC0000
|
unkown image
|
page readonly
|
|
|
|
1F0D3020000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7CF9000
|
unkown image
|
page readonly
|
|
|
|
AB2195B000
|
unkown
|
page read and write
|
|
|
|
208DC10A000
|
unkown
|
page read and write
|
|
|
|
7DF54E790000
|
unkown image
|
page readonly
|
|
|
|
7FF50FCB5000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB211000
|
unkown image
|
page readonly
|
|
|
|
21870113000
|
unkown
|
page read and write
|
|
|
|
7DF522140000
|
unkown image
|
page readonly
|
|
|
|
7FF54243C000
|
unkown image
|
page readonly
|
|
|
|
232B4DD1000
|
unkown
|
page read and write
|
|
|
|
208DC10E000
|
unkown
|
page read and write
|
|
|
|
7FF5786C8000
|
unkown image
|
page readonly
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
208D735A000
|
unkown
|
page read and write
|
|
|
|
15891A3D000
|
unkown
|
page read and write
|
|
|
|
7FF5D754C000
|
unkown image
|
page readonly
|
|
|
|
7FF5203C7000
|
unkown image
|
page readonly
|
|
|
|
2116DA8C000
|
unkown
|
page read and write
|
|
|
|
D0F9AF7000
|
unkown
|
page read and write
|
|
|
|
7FF5DCBF9000
|
unkown image
|
page readonly
|
|
|
|
2BE6211E000
|
unkown
|
page read and write
|
|
|
|
7FF5223F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5787B9000
|
unkown image
|
page readonly
|
|
|
|
7FF5A77DA000
|
unkown image
|
page readonly
|
|
|
|
7FF53C1DE000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7EA6000
|
unkown image
|
page readonly
|
|
|
|
232B4DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5DCB2E000
|
unkown image
|
page readonly
|
|
|
|
2ACF5E90000
|
unkown image
|
page readonly
|
|
|
|
208DC0E9000
|
unkown
|
page read and write
|
|
|
|
7FF5786B2000
|
unkown image
|
page readonly
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
2116DA5B000
|
unkown
|
page read and write
|
|
|
|
272DBB70000
|
unkown image
|
page read and write
|
|
|
|
232B4D7B000
|
unkown
|
page read and write
|
|
|
|
208DC112000
|
unkown
|
page read and write
|
|
|
|
7DF4ECDC0000
|
unkown image
|
page readonly
|
|
|
|
232B5202000
|
unkown
|
page read and write
|
|
|
|
7FF5EA0D9000
|
unkown image
|
page readonly
|
|
|
|
7FF521CCF000
|
unkown image
|
page readonly
|
|
|
|
7DF534B72000
|
unkown image
|
page readonly
|
|
|
|
7FF52259B000
|
unkown image
|
page readonly
|
|
|
|
232B44E4000
|
unkown
|
page read and write
|
|
|
|
232B4D48000
|
unkown
|
page read and write
|
|
|
|
7FF5D7D9C000
|
unkown image
|
page readonly
|
|
|
|
15891A49000
|
unkown
|
page read and write
|
|
|
|
7FF5424A9000
|
unkown image
|
page readonly
|
|
|
|
2BE62040000
|
unkown
|
page read and write
|
|
|
|
2186FFA0000
|
unkown
|
page read and write
|
|
|
|
7DF522120000
|
unkown image
|
page readonly
|
|
|
|
E78B37D000
|
unkown
|
page read and write
|
|
|
|
7DF5FC480000
|
unkown image
|
page readonly
|
|
|
|
208DBFE0000
|
unkown
|
page read and write
|
|
|
|
7FF50FD65000
|
unkown image
|
page readonly
|
|
|
|
2ACF6802000
|
unkown
|
page read and write
|
|
|
|
7FF5EA122000
|
unkown image
|
page readonly
|
|
|
|
7FF57B9F5000
|
unkown image
|
page readonly
|
|
|
|
1B631E8D000
|
unkown
|
page read and write
|
|
|
|
7FF520479000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCBF9000
|
unkown image
|
page readonly
|
|
|
|
7DF532822000
|
unkown image
|
page readonly
|
|
|
|
7FF55AB79000
|
unkown image
|
page readonly
|
|
|
|
7FF578757000
|
unkown image
|
page readonly
|
|
|
|
208D7358000
|
unkown
|
page read and write
|
|
|
|
208DBFBE000
|
unkown
|
page read and write
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
232B4D17000
|
unkown
|
page read and write
|
|
|
|
2116DA4B000
|
unkown
|
page read and write
|
|
|
|
7FF53C414000
|
unkown image
|
page readonly
|
|
|
|
7FF542141000
|
unkown image
|
page readonly
|
|
|
|
15891A33000
|
unkown
|
page read and write
|
|
|
|
208D735D000
|
unkown
|
page read and write
|
|
|
|
15891A6B000
|
unkown
|
page read and write
|
|
|
|
22526770000
|
heap default
|
page read and write
|
|
|
|
232B4453000
|
unkown
|
page read and write
|
|
|
|
7FF542132000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCB5D000
|
unkown image
|
page readonly
|
|
|
|
7DF5E98E2000
|
unkown image
|
page readonly
|
|
|
|
232B4483000
|
unkown
|
page read and write
|
|
|
|
7FF520529000
|
unkown image
|
page readonly
|
|
|
|
2BD223F0000
|
unkown image
|
page readonly
|
|
|
|
208D71E0000
|
unkown image
|
page readonly
|
|
|
|
208D7580000
|
unkown
|
page read and write
|
|
|
|
1F0D3070000
|
heap default
|
page read and write
|
|
|
|
7FF5D76C1000
|
unkown image
|
page readonly
|
|
|
|
7DF5E98F0000
|
unkown image
|
page readonly
|
|
|
|
78BDA77000
|
unkown
|
page read and write
|
|
|
|
232B4D6F000
|
unkown
|
page read and write
|
|
|
|
2BE62820000
|
unkown image
|
page readonly
|
|
|
|
2186FE80000
|
unkown image
|
page readonly
|
|
|
|
208DC130000
|
unkown
|
page read and write
|
|
|
|
208DC0F8000
|
unkown
|
page read and write
|
|
|
|
7FF5786FF000
|
unkown image
|
page readonly
|
|
|
|
208DC104000
|
unkown
|
page read and write
|
|
|
|
7DD3E7E000
|
unkown
|
page read and write
|
|
|
|
AB2257F000
|
unkown
|
page read and write
|
|
|
|
21A51B50000
|
unkown image
|
page readonly
|
|
|
|
1F0D3240000
|
unkown
|
page read and write
|
|
|
|
7FF578736000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7E79000
|
unkown image
|
page readonly
|
|
|
|
2A92DC3C000
|
unkown
|
page read and write
|
|
|
|
7FF5EB84C000
|
unkown image
|
page readonly
|
|
|
|
7DF54E780000
|
unkown image
|
page readonly
|
|
|
|
208D7200000
|
unkown
|
page read and write
|
|
|
|
7FF55AAEC000
|
unkown image
|
page readonly
|
|
|
|
7DF58AAC0000
|
unkown image
|
page readonly
|
|
|
|
21A51C02000
|
unkown
|
page read and write
|
|
|
|
AB223FF000
|
unkown
|
page read and write
|
|
|
|
2BE61FD0000
|
unkown image
|
page readonly
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
2187003E000
|
unkown
|
page read and write
|
|
|
|
2A92DA50000
|
unkown image
|
page readonly
|
|
|
|
1B631D95000
|
heap private
|
page read and write
|
|
|
|
7FF5A7A0A000
|
unkown image
|
page readonly
|
|
|
|
2116DEE0000
|
unkown image
|
page readonly
|
|
|
|
7DF5EA222000
|
unkown image
|
page readonly
|
|
|
|
158918D0000
|
heap private
|
page read and write
|
|
|
|
7FF5A7A4E000
|
unkown image
|
page readonly
|
|
|
|
5CABF7C000
|
unkown
|
page read and write
|
|
|
|
208D6AFF000
|
unkown
|
page read and write
|
|
|
|
7FF57B9C2000
|
unkown image
|
page readonly
|
|
|
|
2116F4B0000
|
unkown
|
page read and write
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
208DC17F000
|
unkown
|
page read and write
|
|
|
|
7FF5422DF000
|
unkown image
|
page readonly
|
|
|
|
7DF532832000
|
unkown image
|
page readonly
|
|
|
|
232B4D90000
|
unkown
|
page read and write
|
|
|
|
21870029000
|
unkown
|
page read and write
|
|
|
|
7FF55AB14000
|
unkown image
|
page readonly
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
232B44A1000
|
unkown
|
page read and write
|
|
|
|
7FF55AA9A000
|
unkown image
|
page readonly
|
|
|
|
208DC139000
|
unkown
|
page read and write
|
|
|
|
208D7900000
|
unkown image
|
page read and write
|
|
|
|
78BD67E000
|
unkown
|
page read and write
|
|
|
|
7FF5A7BF8000
|
unkown image
|
page readonly
|
|
|
|
2A92DD08000
|
unkown
|
page read and write
|
|
|
|
7DF534B90000
|
unkown image
|
page readonly
|
|
|
|
7DF5FDCE2000
|
unkown image
|
page readonly
|
|
|
|
1F0D31A0000
|
unkown
|
page read and write
|
|
|
|
232B4513000
|
unkown
|
page read and write
|
|
|
|
7DF5B9FE0000
|
unkown image
|
page readonly
|
|
|
|
208DC146000
|
unkown
|
page read and write
|
|
|
|
208D6ED0000
|
unkown image
|
page readonly
|
|
|
|
7FF57B9C6000
|
unkown image
|
page readonly
|
|
|
|
7DF5FDCD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5424F7000
|
unkown image
|
page readonly
|
|
|
|
7DF554862000
|
unkown image
|
page readonly
|
|
|
|
232B4D00000
|
unkown
|
page read and write
|
|
|
|
7FF5D7EC4000
|
unkown image
|
page readonly
|
|
|
|
7FF5226E5000
|
unkown image
|
page readonly
|
|
|
|
7DF5EEF10000
|
unkown image
|
page readonly
|
|
|
|
7FF50FD22000
|
unkown image
|
page readonly
|
|
|
|
7FF50FE1E000
|
unkown image
|
page readonly
|
|
|
|
7FF5A79B0000
|
unkown image
|
page readonly
|
|
|
|
232B4D73000
|
unkown
|
page read and write
|
|
|
|
208DC133000
|
unkown
|
page read and write
|
|
|
|
7FF55AB79000
|
unkown image
|
page readonly
|
|
|
|
208DC134000
|
unkown
|
page read and write
|
|
|
|
7DF554850000
|
unkown image
|
page readonly
|
|
|
|
649E57E000
|
unkown
|
page read and write
|
|
|
|
7FF55AAE6000
|
unkown image
|
page readonly
|
|
|
|
208DC105000
|
unkown
|
page read and write
|
|
|
|
1F0D3A02000
|
unkown
|
page read and write
|
|
|
|
208D7E20000
|
unkown
|
page read and write
|
|
|
|
7FF5D7D67000
|
unkown image
|
page readonly
|
|
|
|
2116DCD0000
|
unkown image
|
page readonly
|
|
|
|
208D735A000
|
unkown
|
page read and write
|
|
|
|
7FF5D750E000
|
unkown image
|
page readonly
|
|
|
|
7DF58DDD0000
|
unkown image
|
page readonly
|
|
|
|
272DC340000
|
unkown
|
page read and write
|
|
|
|
7FF5A7C56000
|
unkown image
|
page readonly
|
|
|
|
232B4400000
|
unkown
|
page read and write
|
|
|
|
7FF5200F8000
|
unkown image
|
page readonly
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
7FF57867B000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7B5B000
|
unkown image
|
page readonly
|
|
|
|
21A51C70000
|
unkown
|
page read and write
|
|
|
|
2186FF80000
|
unkown image
|
page readonly
|
|
|
|
232B443C000
|
unkown
|
page read and write
|
|
|
|
7FF5D7515000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7821000
|
unkown image
|
page readonly
|
|
|
|
232B4449000
|
unkown
|
page read and write
|
|
|
|
7FF52046F000
|
unkown image
|
page readonly
|
|
|
|
208DC134000
|
unkown
|
page read and write
|
|
|
|
232B4451000
|
unkown
|
page read and write
|
|
|
|
208D7300000
|
unkown
|
page read and write
|
|
|
|
1F0D3252000
|
unkown
|
page read and write
|
|
|
|
7FF5DCB6C000
|
unkown image
|
page readonly
|
|
|
|
7FF53C3B5000
|
unkown image
|
page readonly
|
|
|
|
7FF50FBAF000
|
unkown image
|
page readonly
|
|
|
|
232B5202000
|
unkown
|
page read and write
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
7FF53C34A000
|
unkown image
|
page readonly
|
|
|
|
7FF57B5AA000
|
unkown image
|
page readonly
|
|
|
|
208D71B0000
|
unkown image
|
page readonly
|
|
|
|
7FF57BA36000
|
unkown image
|
page readonly
|
|
|
|
232B4D9A000
|
unkown
|
page read and write
|
|
|
|
208D6AA3000
|
unkown
|
page read and write
|
|
|
|
7FF5A7CDE000
|
unkown image
|
page readonly
|
|
|
|
232B4D78000
|
unkown
|
page read and write
|
|
|
|
2ACF5EB0000
|
unkown image
|
page readonly
|
|
|
|
5CAC4FC000
|
unkown
|
page read and write
|
|
|
|
7FF55A7AF000
|
unkown image
|
page readonly
|
|
|
|
208DD000000
|
unkown
|
page read and write
|
|
|
|
7FF50FD20000
|
unkown image
|
page readonly
|
|
|
|
232B44C6000
|
unkown
|
page read and write
|
|
|
|
22527002000
|
unkown
|
page read and write
|
|
|
|
2A92DC46000
|
unkown
|
page read and write
|
|
|
|
232B4B30000
|
unkown image
|
page readonly
|
|
|
|
2BE620B0000
|
unkown
|
page read and write
|
|
|
|
13F08FF000
|
unkown
|
page read and write
|
|
|
|
9CBAFAB000
|
unkown
|
page read and write
|
|
|
|
5CAC1FF000
|
unkown
|
page read and write
|
|
|
|
7FF57872C000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7C66000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCB66000
|
unkown image
|
page readonly
|
|
|
|
7FF542495000
|
unkown image
|
page readonly
|
|
|
|
208D6980000
|
unkown
|
page read and write
|
|
|
|
208DC12B000
|
unkown
|
page read and write
|
|
|
|
7DF5FDCE0000
|
unkown image
|
page readonly
|
|
|
|
2116DA02000
|
unkown
|
page read and write
|
|
|
|
7FF53C238000
|
unkown image
|
page readonly
|
|
|
|
208DC030000
|
unkown
|
page read and write
|
|
|
|
232B44F9000
|
unkown
|
page read and write
|
|
|
|
208DBFB0000
|
unkown
|
page read and write
|
|
|
|
7FF55A680000
|
unkown image
|
page readonly
|
|
|
|
7DF5EA240000
|
unkown image
|
page readonly
|
|
|
|
15891A00000
|
unkown
|
page read and write
|
|
|
|
7FF5DC97F000
|
unkown image
|
page readonly
|
|
|
|
7FF522753000
|
unkown image
|
page readonly
|
|
|
|
7FF5A77F0000
|
unkown image
|
page readonly
|
|
|
|
6A82E77000
|
unkown
|
page read and write
|
|
|
|
7DF5EEF00000
|
unkown image
|
page readonly
|
|
|
|
208DC4C0000
|
unkown
|
page read and write
|
|
|
|
7FF5A7C87000
|
unkown image
|
page readonly
|
|
|
|
208DBE50000
|
unkown
|
page read and write
|
|
|
|
7FF5A7A03000
|
unkown image
|
page readonly
|
|
|
|
15891A42000
|
unkown
|
page read and write
|
|
|
|
7FF5D7E38000
|
unkown image
|
page readonly
|
|
|
|
D0F9B7F000
|
unkown
|
page read and write
|
|
|
|
7FF5A7C84000
|
unkown image
|
page readonly
|
|
|
|
2BE62F10000
|
unkown
|
page readonly
|
|
|
|
272DBC52000
|
unkown
|
page read and write
|
|
|
|
21870802000
|
unkown
|
page read and write
|
|
|
|
7FF5EB9D9000
|
unkown image
|
page readonly
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
208DBFBF000
|
unkown
|
page read and write
|
|
|
|
AB2267E000
|
unkown
|
page read and write
|
|
|
|
7FF5D73C8000
|
unkown image
|
page readonly
|
|
|
|
7DF5FC4A0000
|
unkown image
|
page readonly
|
|
|
|
208DBFB5000
|
unkown
|
page read and write
|
|
|
|
2ACF607B000
|
unkown
|
page read and write
|
|
|
|
7FF5EB946000
|
unkown image
|
page readonly
|
|
|
|
9CBB47F000
|
unkown
|
page read and write
|
|
|
|
AB21F79000
|
unkown
|
page read and write
|
|
|
|
7FF57BAB1000
|
unkown image
|
page readonly
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
7FF5227DD000
|
unkown image
|
page readonly
|
|
|
|
7FF522448000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7E5E000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCBEE000
|
unkown image
|
page readonly
|
|
|
|
7FF520290000
|
unkown image
|
page readonly
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
208D6990000
|
unkown image
|
page read and write
|
|
|
|
649DBFB000
|
unkown
|
page read and write
|
|
|
|
15891A33000
|
unkown
|
page read and write
|
|
|
|
208DC114000
|
unkown
|
page read and write
|
|
|
|
2BE62060000
|
unkown image
|
page readonly
|
|
|
|
1B631F50000
|
unkown image
|
page readonly
|
|
|
|
1F0D3400000
|
unkown image
|
page readonly
|
|
|
|
232B4D9E000
|
unkown
|
page read and write
|
|
|
|
2BD22513000
|
unkown
|
page read and write
|
|
|
|
7FF5EB845000
|
unkown image
|
page readonly
|
|
|
|
232B4B60000
|
unkown
|
page read and write
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
7FF50FD5E000
|
unkown image
|
page readonly
|
|
|
|
7FF522727000
|
unkown image
|
page readonly
|
|
|
|
7FF50FB90000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7BCC000
|
unkown image
|
page readonly
|
|
|
|
2ACF5FC0000
|
unkown image
|
page readonly
|
|
|
|
208DC015000
|
unkown
|
page read and write
|
|
|
|
208D735F000
|
unkown
|
page read and write
|
|
|
|
7FF522805000
|
unkown image
|
page readonly
|
|
|
|
225267A0000
|
unkown
|
page read and write
|
|
|
|
7FF50FD9C000
|
unkown image
|
page readonly
|
|
|
|
F30D67E000
|
unkown
|
page read and write
|
|
|
|
2ACF6013000
|
unkown
|
page read and write
|
|
|
|
7DD3FFC000
|
unkown
|
page read and write
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
5CAC2FF000
|
unkown
|
page read and write
|
|
|
|
21A52250000
|
unkown image
|
page readonly
|
|
|
|
232B4B60000
|
unkown
|
page read and write
|
|
|
|
21870200000
|
unkown image
|
page readonly
|
|
|
|
649E27F000
|
unkown
|
page read and write
|
|
|
|
7FF5EA189000
|
unkown image
|
page readonly
|
|
|
|
7FF57B9EE000
|
unkown image
|
page readonly
|
|
|
|
7DF5FC482000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCB94000
|
unkown image
|
page readonly
|
|
|
|
7DF522130000
|
unkown image
|
page readonly
|
|
|
|
7DF58DDB0000
|
unkown image
|
page readonly
|
|
|
|
21A51C13000
|
unkown
|
page read and write
|
|
|
|
649DD7F000
|
unkown
|
page read and write
|
|
|
|
208DC104000
|
unkown
|
page read and write
|
|
|
|
208DC10A000
|
unkown
|
page read and write
|
|
|
|
7FF520418000
|
unkown image
|
page readonly
|
|
|
|
232B4D78000
|
unkown
|
page read and write
|
|
|
|
272DBBE0000
|
heap default
|
page read and write
|
|
|
|
7FF5EA0C5000
|
unkown image
|
page readonly
|
|
|
|
7DF58DDB2000
|
unkown image
|
page readonly
|
|
|
|
7DF532822000
|
unkown image
|
page readonly
|
|
|
|
208DC17A000
|
unkown
|
page read and write
|
|
|
|
2BD22463000
|
unkown
|
page read and write
|
|
|
|
22526720000
|
unkown image
|
page readonly
|
|
|
|
5CAC3FC000
|
unkown
|
page read and write
|
|
|
|
208DC17E000
|
unkown
|
page read and write
|
|
|
|
7FF5202FA000
|
unkown image
|
page readonly
|
|
|
|
7FF50FBC8000
|
unkown image
|
page readonly
|
|
|
|
7FF5227BF000
|
unkown image
|
page readonly
|
|
|
|
7FF50FD8D000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7C4D000
|
unkown image
|
page readonly
|
|
|
|
208DC10F000
|
unkown
|
page read and write
|
|
|
|
7DF5EEEF0000
|
unkown image
|
page readonly
|
|
|
|
21A51D13000
|
unkown
|
page read and write
|
|
|
|
218700B8000
|
unkown
|
page read and write
|
|
|
|
208D6930000
|
unkown image
|
page readonly
|
|
|
|
232B4D98000
|
unkown
|
page read and write
|
|
|
|
7FF5A7AD8000
|
unkown image
|
page readonly
|
|
|
|
1F0D31A0000
|
unkown
|
page read and write
|
|
|
|
7FF5A7BAB000
|
unkown image
|
page readonly
|
|
|
|
2A92DB80000
|
unkown image
|
page readonly
|
|
|
|
2BE62000000
|
unkown image
|
page readonly
|
|
|
|
7FF52051E000
|
unkown image
|
page readonly
|
|
|
|
2A92DA30000
|
unkown image
|
page read and write
|
|
|
|
7FF5D7E20000
|
unkown image
|
page readonly
|
|
|
|
7FF5D73ED000
|
unkown image
|
page readonly
|
|
|
|
208D6A13000
|
unkown
|
page read and write
|
|
|
|
1B631E66000
|
heap default
|
page read and write
|
|
|
|
7FF5D7411000
|
unkown image
|
page readonly
|
|
|
|
7FF54249F000
|
unkown image
|
page readonly
|
|
|
|
7FF50FE29000
|
unkown image
|
page readonly
|
|
|
|
15891A4E000
|
unkown
|
page read and write
|
|
|
|
232B4D6F000
|
unkown
|
page read and write
|
|
|
|
7FF53C3EC000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7759000
|
unkown image
|
page readonly
|
|
|
|
2ACF604C000
|
unkown
|
page read and write
|
|
|
|
2BE620D0000
|
heap default
|
page read and write
|
|
|
|
7FF5D75CE000
|
unkown image
|
page readonly
|
|
|
|
208DC17A000
|
unkown
|
page read and write
|
|
|
|
208DC0F6000
|
unkown
|
page read and write
|
|
|
|
208DC104000
|
unkown
|
page read and write
|
|
|
|
15891A67000
|
unkown
|
page read and write
|
|
|
|
2BD22990000
|
unkown image
|
page readonly
|
|
|
|
7FF57BA45000
|
unkown image
|
page readonly
|
|
|
|
7DF56CE82000
|
unkown image
|
page readonly
|
|
|
|
6A82B7E000
|
unkown
|
page read and write
|
|
|
|
7DF554852000
|
unkown image
|
page readonly
|
|
|
|
22526902000
|
unkown
|
page read and write
|
|
|
|
15891A2F000
|
unkown
|
page read and write
|
|
|
|
208D6A8D000
|
unkown
|
page read and write
|
|
|
|
7FF52247D000
|
unkown image
|
page readonly
|
|
|
|
208DD010000
|
unkown
|
page read and write
|
|
|
|
7FF57B87E000
|
unkown image
|
page readonly
|
|
|
|
232B5263000
|
unkown
|
page read and write
|
|
|
|
7FF5424CC000
|
unkown image
|
page readonly
|
|
|
|
5CAC6FE000
|
unkown
|
page read and write
|
|
|
|
F30D2FF000
|
unkown
|
page read and write
|
|
|
|
F74B37F000
|
unkown
|
page read and write
|
|
|
|
2186FE50000
|
unkown image
|
page readonly
|
|
|
|
F16807F000
|
unkown
|
page read and write
|
|
|
|
7FF57BA2C000
|
unkown image
|
page readonly
|
|
|
|
13F0AFF000
|
unkown
|
page read and write
|
|
|
|
7FF522711000
|
unkown image
|
page readonly
|
|
|
|
2BE622A0000
|
unkown image
|
page readonly
|
|
|
|
2A7FCFE000
|
unkown
|
page read and write
|
|
|
|
7FF5EA17E000
|
unkown image
|
page readonly
|
|
|
|
2BD22310000
|
heap default
|
page read and write
|
|
|
|
7FF5D7E36000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB266000
|
unkown image
|
page readonly
|
|
|
|
208D735D000
|
unkown
|
page read and write
|
|
|
|
7FF521CCD000
|
unkown image
|
page readonly
|
|
|
|
7FF522640000
|
unkown image
|
page readonly
|
|
|
|
208D6A91000
|
unkown
|
page read and write
|
|
|
|
22526AD0000
|
unkown image
|
page readonly
|
|
|
|
272DBB90000
|
unkown image
|
page readonly
|
|
|
|
2BE62140000
|
heap default
|
page read and write
|
|
|
|
7FF5DC91A000
|
unkown image
|
page readonly
|
|
|
|
2116F5A0000
|
unkown
|
page read and write
|
|
|
|
7FF522817000
|
unkown image
|
page readonly
|
|
|
|
272DBD08000
|
unkown
|
page read and write
|
|
|
|
7DF452720000
|
unkown image
|
page readonly
|
|
|
|
2BD22A70000
|
unkown
|
page read and write
|
|
|
|
7FF5EA0ED000
|
unkown image
|
page readonly
|
|
|
|
2BE61FD0000
|
unkown image
|
page readonly
|
|
|
|
232B4DA2000
|
unkown
|
page read and write
|
|
|
|
232B4D90000
|
unkown
|
page read and write
|
|
|
|
649E07F000
|
unkown
|
page read and write
|
|
|
|
7DF54E782000
|
unkown image
|
page readonly
|
|
|
|
208DC111000
|
unkown
|
page read and write
|
|
|
|
7DF5EA230000
|
unkown image
|
page readonly
|
|
|
|
7DF5B9FE0000
|
unkown image
|
page readonly
|
|
|
|
208DC128000
|
unkown
|
page read and write
|
|
|
|
208DC115000
|
unkown
|
page read and write
|
|
|
|
208DC110000
|
unkown
|
page read and write
|
|
|
|
7FF5A7AF7000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB9D9000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7577000
|
unkown image
|
page readonly
|
|
|
|
158918E0000
|
unkown image
|
page readonly
|
|
|
|
7DF54E770000
|
unkown image
|
page readonly
|
|
|
|
7FF520422000
|
unkown image
|
page readonly
|
|
|
|
208DC128000
|
unkown
|
page read and write
|
|
|
|
7DF4E80F0000
|
unkown image
|
page readonly
|
|
|
|
232B4516000
|
unkown
|
page read and write
|
|
|
|
232B4488000
|
unkown
|
page read and write
|
|
|
|
7DF5B9FE2000
|
unkown image
|
page readonly
|
|
|
|
2BD22479000
|
unkown
|
page read and write
|
|
|
|
7FF5D7F1E000
|
unkown image
|
page readonly
|
|
|
|
F74B4FC000
|
unkown
|
page read and write
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
272DBC4B000
|
unkown
|
page read and write
|
|
|
|
7FF520436000
|
unkown image
|
page readonly
|
|
|
|
2A7FEFF000
|
unkown
|
page read and write
|
|
|
|
7FF5423E5000
|
unkown image
|
page readonly
|
|
|
|
232B4DA4000
|
unkown
|
page read and write
|
|
|
|
7FF50FDC7000
|
unkown image
|
page readonly
|
|
|
|
7FF577FE9000
|
unkown image
|
page readonly
|
|
|
|
2BE62410000
|
unkown
|
page read and write
|
|
|
|
7FF5786EE000
|
unkown image
|
page readonly
|
|
|
|
7FF5424C1000
|
unkown image
|
page readonly
|
|
|
|
2A92DD13000
|
unkown
|
page read and write
|
|
|
|
7FF57BA54000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCB35000
|
unkown image
|
page readonly
|
|
|
|
6A82F7F000
|
unkown
|
page read and write
|
|
|
|
7FF50FAE5000
|
unkown image
|
page readonly
|
|
|
|
208DC131000
|
unkown
|
page read and write
|
|
|
|
7DF554850000
|
unkown image
|
page readonly
|
|
|
|
7FF522786000
|
unkown image
|
page readonly
|
|
|
|
7DF532832000
|
unkown image
|
page readonly
|
|
|
|
7FF53C405000
|
unkown image
|
page readonly
|
|
|
|
7DF5FC492000
|
unkown image
|
page readonly
|
|
|
|
7FF578370000
|
unkown image
|
page readonly
|
|
|
|
7FF50F965000
|
unkown image
|
page readonly
|
|
|
|
232B4DA0000
|
unkown
|
page read and write
|
|
|
|
7FF53C127000
|
unkown image
|
page readonly
|
|
|
|
2BE623C0000
|
unkown
|
page read and write
|
|
|
|
21870932000
|
unkown
|
page read and write
|
|
|
|
AB2297B000
|
unkown
|
page read and write
|
|
|
|
2BD222B0000
|
heap private
|
page read and write
|
|
|
|
2116DA00000
|
unkown
|
page read and write
|
|
|
|
D0F94FC000
|
unkown
|
page read and write
|
|
|
|
7DF488980000
|
unkown image
|
page readonly
|
|
|
|
7FF55AA82000
|
unkown image
|
page readonly
|
|
|
|
208DC300000
|
unkown
|
page read and write
|
|
|
|
2A92DD02000
|
unkown
|
page read and write
|
|
|
|
208DC111000
|
unkown
|
page read and write
|
|
|
|
7FF5204C4000
|
unkown image
|
page readonly
|
|
|
|
15891A13000
|
unkown
|
page read and write
|
|
|
|
7FF50FBF9000
|
unkown image
|
page readonly
|
|
|
|
2186FE70000
|
unkown image
|
page readonly
|
|
|
|
7FF5EA098000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB915000
|
unkown image
|
page readonly
|
|
|
|
2ACF5E90000
|
unkown image
|
page readonly
|
|
|
|
9CBB4FE000
|
unkown
|
page read and write
|
|
|
|
7DF5E98D0000
|
unkown image
|
page readonly
|
|
|
|
15891900000
|
unkown image
|
page readonly
|
|
|
|
2A92DC4D000
|
unkown
|
page read and write
|
|
|
|
2ACF6100000
|
unkown
|
page read and write
|
|
|
|
208DC12C000
|
unkown
|
page read and write
|
|
|
|
7FF5D755C000
|
unkown image
|
page readonly
|
|
|
|
208DC12A000
|
unkown
|
page read and write
|
|
|
|
208D71D0000
|
unkown image
|
page readonly
|
|
|
|
2116D9D0000
|
unkown image
|
page readonly
|
|
|
|
2116D9A0000
|
unkown image
|
page readonly
|
|
|
|
F74B1FB000
|
unkown
|
page read and write
|
|
|
|
7FF5D7E22000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7E32000
|
unkown image
|
page readonly
|
|
|
|
7DF5FC482000
|
unkown image
|
page readonly
|
|
|
|
208DC104000
|
unkown
|
page read and write
|
|
|
|
649DE7B000
|
unkown
|
page read and write
|
|
|
|
1B631C30000
|
unkown image
|
page read and write
|
|
|
|
208DC13B000
|
unkown
|
page read and write
|
|
|
|
208D735F000
|
unkown
|
page read and write
|
|
|
|
7FF578373000
|
unkown image
|
page readonly
|
|
|
|
272DBD13000
|
unkown
|
page read and write
|
|
|
|
21A51C5B000
|
unkown
|
page read and write
|
|
|
|
F74B67B000
|
unkown
|
page read and write
|
|
|
|
2BD22502000
|
unkown
|
page read and write
|
|
|
|
2ACF5E70000
|
unkown image
|
page read and write
|
|
|
|
272DBC13000
|
unkown
|
page read and write
|
|
|
|
2116D9A0000
|
unkown image
|
page readonly
|
|
|
|
232B4D82000
|
unkown
|
page read and write
|
|
|
|
232B4B70000
|
unkown image
|
page read and write
|
|
|
|
5CAC5FE000
|
unkown
|
page read and write
|
|
|
|
7FF55A9B7000
|
unkown image
|
page readonly
|
|
|
|
5CABB4B000
|
unkown
|
page read and write
|
|
|
|
F30D57E000
|
unkown
|
page read and write
|
|
|
|
7FF53C388000
|
unkown image
|
page readonly
|
|
|
|
232B4DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5203E1000
|
unkown image
|
page readonly
|
|
|
|
7FF57B889000
|
unkown image
|
page readonly
|
|
|
|
7FF57BA1D000
|
unkown image
|
page readonly
|
|
|
|
208D68E0000
|
unkown image
|
page read and write
|
|
|
|
1B631E77000
|
unkown
|
page read and write
|
|
|
|
7FF50FDC4000
|
unkown image
|
page readonly
|
|
|
|
208D69F3000
|
unkown
|
page read and write
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
2A92DA40000
|
heap private
|
page read and write
|
|
|
|
7FF5D73A9000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7B5C000
|
unkown image
|
page readonly
|
|
|
|
7FF57871D000
|
unkown image
|
page readonly
|
|
|
|
2116DA49000
|
unkown
|
page read and write
|
|
|
|
7DF58DDC2000
|
unkown image
|
page readonly
|
|
|
|
21A52260000
|
unkown image
|
page readonly
|
|
|
|
1F0D3040000
|
unkown image
|
page readonly
|
|
|
|
208D71F0000
|
unkown
|
page read and write
|
|
|
|
7FF53C372000
|
unkown image
|
page readonly
|
|
|
|
2A92DC4C000
|
unkown
|
page read and write
|
|
|
|
22526740000
|
unkown image
|
page readonly
|
|
|
|
E78AEFD000
|
unkown
|
page read and write
|
|
|
|
232B4470000
|
unkown
|
page read and write
|
|
|
|
2BD22C02000
|
unkown
|
page read and write
|
|
|
|
7DF534B90000
|
unkown image
|
page readonly
|
|
|
|
7FF521CC2000
|
unkown image
|
page readonly
|
|
|
|
7FF54254E000
|
unkown image
|
page readonly
|
|
|
|
208D735F000
|
unkown
|
page read and write
|
|
|
|
208DBFB0000
|
unkown
|
page read and write
|
|
|
|
21A51C41000
|
unkown
|
page read and write
|
|
|
|
7FF50FDC2000
|
unkown image
|
page readonly
|
|
|
|
7FF5204C7000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB965000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7A20000
|
unkown image
|
page readonly
|
|
|
|
7FF5420C2000
|
unkown image
|
page readonly
|
|
|
|
7DF532830000
|
unkown image
|
page readonly
|
|
|
|
208D7313000
|
unkown
|
page read and write
|
|
|
|
15891A2D000
|
unkown
|
page read and write
|
|
|
|
7FF5D735F000
|
unkown image
|
page readonly
|
|
|
|
208DC139000
|
unkown
|
page read and write
|
|
|
|
7FF5A7C75000
|
unkown image
|
page readonly
|
|
|
|
158918E0000
|
unkown image
|
page readonly
|
|
|
|
208DC310000
|
unkown
|
page read and write
|
|
|
|
208DC13B000
|
unkown
|
page read and write
|
|
|
|
7FF50FAF0000
|
unkown image
|
page readonly
|
|
|
|
208DC0D3000
|
unkown
|
page read and write
|
|
|
|
7FF5D7570000
|
unkown image
|
page readonly
|
|
|
|
208DC510000
|
unkown
|
page read and write
|
|
|
|
232B4456000
|
unkown
|
page read and write
|
|
|
|
9CBB77F000
|
unkown
|
page read and write
|
|
|
|
232B44AE000
|
unkown
|
page read and write
|
|
|
|
7FF5EB9CE000
|
unkown image
|
page readonly
|
|
|
|
208DC108000
|
unkown
|
page read and write
|
|
|
|
208DC12F000
|
unkown
|
page read and write
|
|
|
|
208DBFE0000
|
unkown
|
page read and write
|
|
|
|
7FF5787B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7E8D000
|
unkown image
|
page readonly
|
|
|
|
7FF50FD18000
|
unkown image
|
page readonly
|
|
|
|
2116D980000
|
unkown image
|
page read and write
|
|
|
|
7FF5227C9000
|
unkown image
|
page readonly
|
|
|
|
208DC0F8000
|
unkown
|
page read and write
|
|
|
|
13F09FA000
|
unkown
|
page read and write
|
|
|
|
208D6A29000
|
unkown
|
page read and write
|
|
|
|
1F0D3020000
|
unkown image
|
page readonly
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
7FF5227FC000
|
unkown image
|
page readonly
|
|
|
|
208DBE20000
|
unkown
|
page read and write
|
|
|
|
7FF5220AD000
|
unkown image
|
page readonly
|
|
|
|
15891940000
|
unkown image
|
page readonly
|
|
|
|
232B4350000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7BE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D720B000
|
unkown image
|
page readonly
|
|
|
|
7FF57B5C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5787B9000
|
unkown image
|
page readonly
|
|
|
|
7FF5D70E0000
|
unkown image
|
page readonly
|
|
|
|
2116DB13000
|
unkown
|
page read and write
|
|
|
|
2A92DC50000
|
unkown
|
page read and write
|
|
|
|
7FF520438000
|
unkown image
|
page readonly
|
|
|
|
7DF554860000
|
unkown image
|
page readonly
|
|
|
|
7FF5423CC000
|
unkown image
|
page readonly
|
|
|
|
1B631C70000
|
unkown image
|
page readonly
|
|
|
|
208DC10E000
|
unkown
|
page read and write
|
|
|
|
7FF5D7E96000
|
unkown image
|
page readonly
|
|
|
|
2116DED0000
|
unkown image
|
page readonly
|
|
|
|
7FF578745000
|
unkown image
|
page readonly
|
|
|
|
208DBFD1000
|
unkown
|
page read and write
|
|
|
|
7DF5FC490000
|
unkown image
|
page readonly
|
|
|
|
7DF54E772000
|
unkown image
|
page readonly
|
|
|
|
7FF52015E000
|
unkown image
|
page readonly
|
|
|
|
7FF5424D6000
|
unkown image
|
page readonly
|
|
|
|
7FF52261E000
|
unkown image
|
page readonly
|
|
|
|
2BD22477000
|
unkown
|
page read and write
|
|
|
|
2116DA25000
|
unkown
|
page read and write
|
|
|
|
232B4D15000
|
unkown
|
page read and write
|
|
|
|
7FF52240E000
|
unkown image
|
page readonly
|
|
|
|
208D7358000
|
unkown
|
page read and write
|
|
|
|
78BD8FB000
|
unkown
|
page read and write
|
|
|
|
7FF5422BE000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7C5C000
|
unkown image
|
page readonly
|
|
|
|
15891A61000
|
unkown
|
page read and write
|
|
|
|
208D6A96000
|
unkown
|
page read and write
|
|
|
|
7FF50FD79000
|
unkown image
|
page readonly
|
|
|
|
232B4502000
|
unkown
|
page read and write
|
|
|
|
7FF53C39A000
|
unkown image
|
page readonly
|
|
|
|
7FF520257000
|
unkown image
|
page readonly
|
|
|
|
7DF58DDB2000
|
unkown image
|
page readonly
|
|
|
|
6A82C7C000
|
unkown
|
page read and write
|
|
|
|
21870900000
|
unkown
|
page read and write
|
|
|
|
232B444D000
|
unkown
|
page read and write
|
|
|
|
2186FEA0000
|
heap default
|
page read and write
|
|
|
|
7FF578726000
|
unkown image
|
page readonly
|
|
|
|
208DC10E000
|
unkown
|
page read and write
|
|
|
|
7FF53C12E000
|
unkown image
|
page readonly
|
|
|
|
208DC05E000
|
unkown
|
page read and write
|
|
|
|
AB21C7F000
|
unkown
|
page read and write
|
|
|
|
7FF5A7CE1000
|
unkown image
|
page readonly
|
|
|
|
232B4455000
|
unkown
|
page read and write
|
|
|
|
7FF5EA09A000
|
unkown image
|
page readonly
|
|
|
|
7FF50F9CD000
|
unkown image
|
page readonly
|
|
|
|
208DBFBA000
|
unkown
|
page read and write
|
|
|
|
7FF522731000
|
unkown image
|
page readonly
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
2BE62CF0000
|
unkown
|
page read and write
|
|
|
|
7FF5DC013000
|
unkown image
|
page readonly
|
|
|
|
7DF44C640000
|
unkown image
|
page readonly
|
|
|
|
208DC130000
|
unkown
|
page read and write
|
|
|
|
2A92DC7C000
|
unkown
|
page read and write
|
|
|
|
7FF5EB803000
|
unkown image
|
page readonly
|
|
|
|
208DC0E7000
|
unkown
|
page read and write
|
|
|
|
7FF55AB17000
|
unkown image
|
page readonly
|
|
|
|
1B631D90000
|
heap private
|
page read and write
|
|
|
|
22526908000
|
unkown
|
page read and write
|
|
|
|
2ACF6580000
|
unkown image
|
page readonly
|
|
|
|
7DF4FBBA0000
|
unkown image
|
page readonly
|
|
|
|
2BE620D8000
|
heap default
|
page read and write
|
|
|
|
7DF58DDD0000
|
unkown image
|
page readonly
|
|
|
|
2A7FDFE000
|
unkown
|
page read and write
|
|
|
|
7FF578384000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB7E7000
|
unkown image
|
page readonly
|
|
|
|
2A92DC4F000
|
unkown
|
page read and write
|
|
|
|
F74B47F000
|
unkown
|
page read and write
|
|
|
|
22526829000
|
unkown
|
page read and write
|
|
|
|
7FF57BA09000
|
unkown image
|
page readonly
|
|
|
|
208D7501000
|
unkown
|
page read and write
|
|
|
|
7DF522122000
|
unkown image
|
page readonly
|
|
|
|
2ACF6113000
|
unkown
|
page read and write
|
|
|
|
232B5202000
|
unkown
|
page read and write
|
|
|
|
7FF5EB956000
|
unkown image
|
page readonly
|
|
|
|
7FF54248E000
|
unkown image
|
page readonly
|
|
|
|
208DC19B000
|
unkown
|
page read and write
|
|
|
|
208DBFBB000
|
unkown
|
page read and write
|
|
|
|
208DC10E000
|
unkown
|
page read and write
|
|
|
|
208DC1B4000
|
unkown
|
page read and write
|
|
|
|
1B631E61000
|
unkown
|
page read and write
|
|
|
|
232B4D90000
|
unkown
|
page read and write
|
|
|
|
7FF578709000
|
unkown image
|
page readonly
|
|
|
|
7DF56CE70000
|
unkown image
|
page readonly
|
|
|
|
208D7319000
|
unkown
|
page read and write
|
|
|
|
232B4D80000
|
unkown
|
page read and write
|
|
|
|
649E67F000
|
unkown
|
page read and write
|
|
|
|
22526866000
|
unkown
|
page read and write
|
|
|
|
208DC17E000
|
unkown
|
page read and write
|
|
|
|
232B4D8D000
|
unkown
|
page read and write
|
|
|
|
2A7FA7B000
|
unkown
|
page read and write
|
|
|
|
7FF5A7A9C000
|
unkown image
|
page readonly
|
|
|
|
7FF57B8CD000
|
unkown image
|
page readonly
|
|
|
|
7FF5E994E000
|
unkown image
|
page readonly
|
|
|
|
7DF522132000
|
unkown image
|
page readonly
|
|
|
|
7DF56CE80000
|
unkown image
|
page readonly
|
|
|
|
7FF55AAAE000
|
unkown image
|
page readonly
|
|
|
|
208DC108000
|
unkown
|
page read and write
|
|
|
|
7FF52273B000
|
unkown image
|
page readonly
|
|
|
|
208DBFF4000
|
unkown
|
page read and write
|
|
|
|
2A92DC13000
|
unkown
|
page read and write
|
|
|
|
232B48D0000
|
unkown image
|
page readonly
|
|
|
|
7DD447E000
|
unkown
|
page read and write
|
|
|
|
208D735A000
|
unkown
|
page read and write
|
|
|
|
208D73A0000
|
unkown
|
page read and write
|
|
|
|
208D6ABA000
|
unkown
|
page read and write
|
|
|
|
2BD22400000
|
unkown
|
page read and write
|
|
|
|
AB2207F000
|
unkown
|
page read and write
|
|
|
|
208DBFB0000
|
unkown
|
page read and write
|
|
|
|
7FF57B8F7000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7B21000
|
unkown image
|
page readonly
|
|
|
|
272DBED0000
|
unkown image
|
page readonly
|
|
|
|
208D79E0000
|
unkown
|
page read and write
|
|
|
|
208D6900000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7BD8000
|
unkown image
|
page readonly
|
|
|
|
F30D37F000
|
unkown
|
page read and write
|
|
|
|
7FF5D74E6000
|
unkown image
|
page readonly
|
|
|
|
1B631E5B000
|
heap default
|
page read and write
|
|
|
|
7FF5DCB49000
|
unkown image
|
page readonly
|
|
|
|
1B631E50000
|
heap default
|
page read and write
|
|
|
|
7FF5A775D000
|
unkown image
|
page readonly
|
|
|
|
232B4DA3000
|
unkown
|
page read and write
|
|
|
|
2BE61FF0000
|
unkown image
|
page readonly
|
|
|
|
7FF53C135000
|
unkown image
|
page readonly
|
|
|
|
7FF57B9DA000
|
unkown image
|
page readonly
|
|
|
|
7FF53C382000
|
unkown image
|
page readonly
|
|
|
|
232B44A8000
|
unkown
|
page read and write
|
|
|
|
7DD407E000
|
unkown
|
page read and write
|
|
|
|
7DF56CE70000
|
unkown image
|
page readonly
|
|
|
|
9CBB9FC000
|
unkown
|
page read and write
|
|
|
|
7FF57B9FF000
|
unkown image
|
page readonly
|
|
|
|
272DBC50000
|
unkown
|
page read and write
|
|
|
|
AB2237E000
|
unkown
|
page read and write
|
|
|
|
1B631C50000
|
unkown image
|
page readonly
|
|
|
|
15891A59000
|
unkown
|
page read and write
|
|
|
|
232B4DCB000
|
unkown
|
page read and write
|
|
|
|
2116DA5B000
|
unkown
|
page read and write
|
|
|
|
1B631DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5EB90E000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7C4A000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7EAC000
|
unkown image
|
page readonly
|
|
|
|
15891A41000
|
unkown
|
page read and write
|
|
|
|
208DC4D0000
|
unkown
|
page read and write
|
|
|
|
208DC182000
|
unkown
|
page read and write
|
|
|
|
208D7319000
|
unkown
|
page read and write
|
|
|
|
E78B57F000
|
unkown
|
page read and write
|
|
|
|
7DF5FC490000
|
unkown image
|
page readonly
|
|
|
|
232B4448000
|
unkown
|
page read and write
|
|
|
|
208D7190000
|
unkown image
|
page readonly
|
|
|
|
232B4DC8000
|
unkown
|
page read and write
|
|
|
|
7FF55AA70000
|
unkown image
|
page readonly
|
|
|
|
21870087000
|
unkown
|
page read and write
|
|
|
|
7FF542370000
|
unkown image
|
page readonly
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
2A92E000000
|
unkown image
|
page readonly
|
|
|
|
7FF522638000
|
unkown image
|
page readonly
|
|
|
|
22526780000
|
unkown image
|
page readonly
|
|
|
|
7DF534B82000
|
unkown image
|
page readonly
|
|
|
|
208DBFBB000
|
unkown
|
page read and write
|
|
|
|
208DC132000
|
unkown
|
page read and write
|
|
|
|
AB21E7A000
|
unkown
|
page read and write
|
|
|
|
7FF5D7A1A000
|
unkown image
|
page readonly
|
|
|
|
13F0B7F000
|
unkown
|
page read and write
|
|
|
|
7FF5783D5000
|
unkown image
|
page readonly
|
|
|
|
208DC13B000
|
unkown
|
page read and write
|
|
|
|
272DBD02000
|
unkown
|
page read and write
|
|
|
|
7FF52286E000
|
unkown image
|
page readonly
|
|
|
|
7FF5D73E3000
|
unkown image
|
page readonly
|
|
|
|
22526878000
|
unkown
|
page read and write
|
|
|
|
7FF5EB8E6000
|
unkown image
|
page readonly
|
|
|
|
208DC10E000
|
unkown
|
page read and write
|
|
|
|
7FF57BA57000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB1F5000
|
unkown image
|
page readonly
|
|
|
|
15892050000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7E9C000
|
unkown image
|
page readonly
|
|
|
|
7DF554870000
|
unkown image
|
page readonly
|
|
|
|
208DC10A000
|
unkown
|
page read and write
|
|
|
|
208D7358000
|
unkown
|
page read and write
|
|
|
|
7DF5EA240000
|
unkown image
|
page readonly
|
|
|
|
7FF5204B5000
|
unkown image
|
page readonly
|
|
|
|
208D71A0000
|
unkown image
|
page readonly
|
|
|
|
7FF50F260000
|
unkown image
|
page readonly
|
|
|
|
7FF5EA0F6000
|
unkown image
|
page readonly
|
|
|
|
2BE62400000
|
heap private
|
page read and write
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
7FF53C3DD000
|
unkown image
|
page readonly
|
|
|
|
232B5202000
|
unkown
|
page read and write
|
|
|
|
2BD222A0000
|
unkown image
|
page read and write
|
|
|
|
7FF5A7BE2000
|
unkown image
|
page readonly
|
|
|
|
7FF522649000
|
unkown image
|
page readonly
|
|
|
|
7DD4578000
|
unkown
|
page read and write
|
|
|
|
208DC128000
|
unkown
|
page read and write
|
|
|
|
7FF5D74FA000
|
unkown image
|
page readonly
|
|
|
|
7DF4306F0000
|
unkown image
|
page readonly
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
649E37F000
|
unkown
|
page read and write
|
|
|
|
7DD3EFE000
|
unkown
|
page read and write
|
|
|
|
9CBB5FF000
|
unkown
|
page read and write
|
|
|
|
7FF5225AC000
|
unkown image
|
page readonly
|
|
|
|
232B4DBC000
|
unkown
|
page read and write
|
|
|
|
7FF5A745A000
|
unkown image
|
page readonly
|
|
|
|
208DBE90000
|
unkown
|
page read and write
|
|
|
|
232B444E000
|
unkown
|
page read and write
|
|
|
|
208D6960000
|
unkown image
|
page readonly
|
|
|
|
2ACF6029000
|
unkown
|
page read and write
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
7DF522122000
|
unkown image
|
page readonly
|
|
|
|
7FF5787AE000
|
unkown image
|
page readonly
|
|
|
|
7FF5227AE000
|
unkown image
|
page readonly
|
|
|
|
2A92DC29000
|
unkown
|
page read and write
|
|
|
|
78BD3CB000
|
unkown
|
page read and write
|
|
|
|
208D7800000
|
unkown
|
page read and write
|
|
|
|
7FF542450000
|
unkown image
|
page readonly
|
|
|
|
7DF58DDC0000
|
unkown image
|
page readonly
|
|
|
|
2A92DA70000
|
unkown image
|
page readonly
|
|
|
|
7FF5E9951000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7A28000
|
unkown image
|
page readonly
|
|
|
|
232B4D5C000
|
unkown
|
page read and write
|
|
|
|
78BD6FE000
|
unkown
|
page read and write
|
|
|
|
232B5202000
|
unkown
|
page read and write
|
|
|
|
208DC09E000
|
unkown
|
page read and write
|
|
|
|
21A51C29000
|
unkown
|
page read and write
|
|
|
|
232B4DA0000
|
unkown
|
page read and write
|
|
|
|
232B5203000
|
unkown
|
page read and write
|
|
|
|
7FF50FC37000
|
unkown image
|
page readonly
|
|
|
|
1F0D3000000
|
unkown image
|
page read and write
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
7FF5424BD000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7B27000
|
unkown image
|
page readonly
|
|
|
|
7FF5D75D9000
|
unkown image
|
page readonly
|
|
|
|
208DBFF0000
|
unkown
|
page read and write
|
|
|
|
208D7050000
|
unkown image
|
page readonly
|
|
|
|
208D7202000
|
unkown
|
page read and write
|
|
|
|
2BD22500000
|
unkown
|
page read and write
|
|
|
|
7DF534B80000
|
unkown image
|
page readonly
|
|
|
|
7DF534B72000
|
unkown image
|
page readonly
|
|
|
|
2A7FB7E000
|
unkown
|
page read and write
|
|
|
|
7FF520061000
|
unkown image
|
page readonly
|
|
|
|
15891910000
|
unkown image
|
page readonly
|
|
|
|
7DF534B80000
|
unkown image
|
page readonly
|
|
|
|
208D7358000
|
unkown
|
page read and write
|
|
|
|
7DF522140000
|
unkown image
|
page readonly
|
|
|
|
21A51B50000
|
unkown image
|
page readonly
|
|
|
|
208DBFB6000
|
unkown
|
page read and write
|
|
|
|
272DBB80000
|
heap private
|
page read and write
|
|
|
|
208DBFB5000
|
unkown
|
page read and write
|
|
|
|
7FF522018000
|
unkown image
|
page readonly
|
|
|
|
F30D479000
|
unkown
|
page read and write
|
|
|
|
2A92DC55000
|
unkown
|
page read and write
|
|
|
|
F167E7E000
|
unkown
|
page read and write
|
|
|
|
2BE6211E000
|
unkown
|
page read and write
|
|
|
|
7FF5DCBF1000
|
unkown image
|
page readonly
|
|
|
|
7FF5424E5000
|
unkown image
|
page readonly
|
|
|
|
7FF5EA0BE000
|
unkown image
|
page readonly
|
|
|
|
2A92DBA0000
|
unkown
|
page read and write
|
|
|
|
7FF53C410000
|
unkown image
|
page readonly
|
|
|
|
7FF522772000
|
unkown image
|
page readonly
|
|
|
|
2BD22457000
|
unkown
|
page read and write
|
|
|
|
232B4D1F000
|
unkown
|
page read and write
|
|
|
|
208DBFB4000
|
unkown
|
page read and write
|
|
|
|
2A92DC7E000
|
unkown
|
page read and write
|
|
|
|
7DF54E772000
|
unkown image
|
page readonly
|
|
|
|
7FF578754000
|
unkown image
|
page readonly
|
|
|
|
6A82A7C000
|
unkown
|
page read and write
|
|
|
|
7FF57853F000
|
unkown image
|
page readonly
|
|
|
|
7DF58AAB0000
|
unkown image
|
page readonly
|
|
|
|
232B4310000
|
unkown image
|
page readonly
|
|
|
|
208D7060000
|
unkown image
|
page readonly
|
|
|
|
1B631E8C000
|
unkown
|
page read and write
|
|
|
|
7FF53C35C000
|
unkown image
|
page readonly
|
|
|
|
208D7215000
|
unkown
|
page read and write
|
|
|
|
272DBC4D000
|
unkown
|
page read and write
|
|
|
|
7FF5A74AE000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7A1C000
|
unkown image
|
page readonly
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
22526800000
|
unkown
|
page read and write
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
2116F602000
|
unkown
|
page read and write
|
|
|
|
21A51BD0000
|
unkown
|
page read and write
|
|
|
|
2A92DC59000
|
unkown
|
page read and write
|
|
|
|
7FF5A7AF3000
|
unkown image
|
page readonly
|
|
|
|
15891A40000
|
unkown
|
page read and write
|
|
|
|
208DC10A000
|
unkown
|
page read and write
|
|
|
|
1F0D3213000
|
unkown
|
page read and write
|
|
|
|
E78B47F000
|
unkown
|
page read and write
|
|
|
|
7FF5A7A6F000
|
unkown image
|
page readonly
|
|
|
|
7FF520465000
|
unkown image
|
page readonly
|
|
|
|
7FF53C479000
|
unkown image
|
page readonly
|
|
|
|
232B4DA0000
|
unkown
|
page read and write
|
|
|
|
7DF532820000
|
unkown image
|
page readonly
|
|
|
|
15891930000
|
heap default
|
page read and write
|
|
|
|
21A51B40000
|
heap private
|
page read and write
|
|
|
|
1F0D3258000
|
unkown
|
page read and write
|
|
|
|
7FF5D7E65000
|
unkown image
|
page readonly
|
|
|
|
7FF54218E000
|
unkown image
|
page readonly
|
|
|
|
1F0D3860000
|
unkown
|
page read and write
|
|
|
|
7FF53C218000
|
unkown image
|
page readonly
|
|
|
|
F167D7B000
|
unkown
|
page read and write
|
|
|
|
232B4DB5000
|
unkown
|
page read and write
|
|
|
|
208DC280000
|
unkown
|
page read and write
|
|
|
|
7DF5EA220000
|
unkown image
|
page readonly
|
|
|
|
13F0A79000
|
unkown
|
page read and write
|
|
|
|
232B46D0000
|
unkown image
|
page readonly
|
|
|
|
7FF53C46E000
|
unkown image
|
page readonly
|
|
|
|
208DC320000
|
unkown
|
page read and write
|
|
|
|
7FF5A7C1E000
|
unkown image
|
page readonly
|
|
|
|
7DF5FC4A0000
|
unkown image
|
page readonly
|
|
|
|
7FF53C471000
|
unkown image
|
page readonly
|
|
|
|
7FF52203A000
|
unkown image
|
page readonly
|
|
|
|
F74B5FD000
|
unkown
|
page read and write
|
|
|
|
22526710000
|
heap private
|
page read and write
|
|
|
|
15891A58000
|
unkown
|
page read and write
|
|
|
|
7DF5EEEF2000
|
unkown image
|
page readonly
|
|
|
|
9CBB6FD000
|
unkown
|
page read and write
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
232B4DA0000
|
unkown
|
page read and write
|
|
|
|
21A51C60000
|
unkown
|
page read and write
|
|
|
|
2116DA13000
|
unkown
|
page read and write
|
|
|
|
7FF5A74B1000
|
unkown image
|
page readonly
|
|
|
|
208DBFBA000
|
unkown
|
page read and write
|
|
|
|
208DBEA0000
|
unkown
|
page read and write
|
|
|
|
7FF5DC016000
|
unkown image
|
page readonly
|
|
|
|
2116D9F0000
|
heap default
|
page read and write
|
|
|
|
7FF5D6D6B000
|
unkown image
|
page readonly
|
|
|
|
649E17D000
|
unkown
|
page read and write
|
|
|
|
232B44EA000
|
unkown
|
page read and write
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
7DF5EEEF2000
|
unkown image
|
page readonly
|
|
|
|
7FF57BAAE000
|
unkown image
|
page readonly
|
|
|
|
7DF5FDCF0000
|
unkown image
|
page readonly
|
|
|
|
208D6A00000
|
unkown
|
page read and write
|
|
|
|
208DC133000
|
unkown
|
page read and write
|
|
|
|
272DBC9B000
|
unkown
|
page read and write
|
|
|
|
7DF5FDCD0000
|
unkown image
|
page readonly
|
|
|
|
232B4D7B000
|
unkown
|
page read and write
|
|
|
|
21A51B30000
|
unkown image
|
page read and write
|
|
|
|
232B4DA2000
|
unkown
|
page read and write
|
|
|
|
7FF53C368000
|
unkown image
|
page readonly
|
|
|
|
208DC450000
|
unkown
|
page read and write
|
|
|
|
9CBB87D000
|
unkown
|
page read and write
|
|
|
|
2116DA4B000
|
unkown
|
page read and write
|
|
|
|
7FF57B8A8000
|
unkown image
|
page readonly
|
|
|
|
7DF5E98E0000
|
unkown image
|
page readonly
|
|
|
|
15891CD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5EA115000
|
unkown image
|
page readonly
|
|
|
|
2BD22413000
|
unkown
|
page read and write
|
|
|
|
7FF5A79FF000
|
unkown image
|
page readonly
|
|
|
|
7FF5786F5000
|
unkown image
|
page readonly
|
|
|
|
2186FE30000
|
unkown image
|
page read and write
|
|
|
|
2A92DC57000
|
unkown
|
page read and write
|
|
|
|
232B5202000
|
unkown
|
page read and write
|
|
|
|
7FF5A7C6C000
|
unkown image
|
page readonly
|
|
|
|
7FF57BA26000
|
unkown image
|
page readonly
|
|
|
|
232B5202000
|
unkown
|
page read and write
|
|
|
|
7DF5E98D0000
|
unkown image
|
page readonly
|
|
|
|
15891ED0000
|
unkown image
|
page readonly
|
|
|
|
232B4DC8000
|
unkown
|
page read and write
|
|
|
|
15891A46000
|
unkown
|
page read and write
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
7FF53C3F6000
|
unkown image
|
page readonly
|
|
|
|
21870580000
|
unkown image
|
page readonly
|
|
|
|
22526750000
|
unkown image
|
page readonly
|
|
|
|
7FF55AAB5000
|
unkown image
|
page readonly
|
|
|
|
2BE61FB0000
|
unkown image
|
page read and write
|
|
|
|
2A92DC70000
|
unkown
|
page read and write
|
|
|
|
2BE62F30000
|
unkown
|
page read and write
|
|
|
|
232B521D000
|
unkown
|
page read and write
|
|
|
|
7DF522120000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCB7C000
|
unkown image
|
page readonly
|
|
|
|
7DF5B9FF2000
|
unkown image
|
page readonly
|
|
|
|
2116DA3F000
|
unkown
|
page read and write
|
|
|
|
7FF5D70CA000
|
unkown image
|
page readonly
|
|
|
|
21870102000
|
unkown
|
page read and write
|
|
|
|
208DC023000
|
unkown
|
page read and write
|
|
|
|
7FF54245D000
|
unkown image
|
page readonly
|
|
|
|
208DC2E0000
|
unkown
|
page read and write
|
|
|
|
F167A7B000
|
unkown
|
page read and write
|
|
|
|
15891A29000
|
unkown
|
page read and write
|
|
|
|
7FF55A9EC000
|
unkown image
|
page readonly
|
|
|
|
22526813000
|
unkown
|
page read and write
|
|
|
|
7FF5D7CEE000
|
unkown image
|
page readonly
|
|
|
|
21A51BA0000
|
heap default
|
page read and write
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
7FF542550000
|
unkown image
|
page readonly
|
|
|
|
2A92DA50000
|
unkown image
|
page readonly
|
|
|
|
7FF50F24D000
|
unkown image
|
page readonly
|
|
|
|
7FF542462000
|
unkown image
|
page readonly
|
|
|
|
208D6950000
|
heap default
|
page read and write
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
1F0D3600000
|
unkown image
|
page readonly
|
|
|
|
7DF58AAC2000
|
unkown image
|
page readonly
|
|
|
|
21A51C67000
|
unkown
|
page read and write
|
|
|
|
7DF54E790000
|
unkown image
|
page readonly
|
|
|
|
208DC10A000
|
unkown
|
page read and write
|
|
|
|
7DF5E98D2000
|
unkown image
|
page readonly
|
|
|
|
232B5200000
|
unkown
|
page read and write
|
|
|
|
7FF520491000
|
unkown image
|
page readonly
|
|
|
|
7FF57BA50000
|
unkown image
|
page readonly
|
|
|
|
7DF5EEF10000
|
unkown image
|
page readonly
|
|
|
|
2116F5A0000
|
unkown
|
page read and write
|
|
|
|
7FF5EA10C000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB1F3000
|
unkown image
|
page readonly
|
|
|
|
7FF5203D7000
|
unkown image
|
page readonly
|
|
|
|
2BD22600000
|
unkown image
|
page readonly
|
|
|
|
7DF4B7EB0000
|
unkown image
|
page readonly
|
|
|
|
D0F9D7F000
|
unkown
|
page read and write
|
|
|
|
208DC193000
|
unkown
|
page read and write
|
|
|
|
7FF522782000
|
unkown image
|
page readonly
|
|
|
|
208DC137000
|
unkown
|
page read and write
|
|
|
|
2BD222C0000
|
unkown image
|
page readonly
|
|
|
|
7FF52045E000
|
unkown image
|
page readonly
|
|
|
|
7DF56CE72000
|
unkown image
|
page readonly
|
|
|
|
232B4DA8000
|
unkown
|
page read and write
|
|
|
|
208DC10E000
|
unkown
|
page read and write
|
|
|
|
208DC106000
|
unkown
|
page read and write
|
|
|
|
208DC0D8000
|
unkown
|
page read and write
|
|
|
|
208D7319000
|
unkown
|
page read and write
|
|
|
|
7FF5225FF000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA000000
|
unkown image
|
page readonly
|
|
|
|
7FF5EA106000
|
unkown image
|
page readonly
|
|
|
|
7FF577BC3000
|
unkown image
|
page readonly
|
|
|
|
2BE62409000
|
heap private
|
page read and write
|
|
|
|
218700C9000
|
unkown
|
page read and write
|
|
|
|
7DF534B70000
|
unkown image
|
page readonly
|
|
|
|
7FF5226F7000
|
unkown image
|
page readonly
|
|
|
|
208DC2A0000
|
unkown
|
page read and write
|
|
|
|
2A92DA80000
|
unkown image
|
page readonly
|
|
|
|
1F0D3229000
|
unkown
|
page read and write
|
|
|
|
2BD222C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7C25000
|
unkown image
|
page readonly
|
|
|
|
7FF520496000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC04D000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB8EA000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7546000
|
unkown image
|
page readonly
|
|
|
|
2BD22800000
|
unkown image
|
page readonly
|
|
|
|
7FF5A78FF000
|
unkown image
|
page readonly
|
|
|
|
7DF41FFF0000
|
unkown image
|
page readonly
|
|
|
|
15891A7E000
|
unkown
|
page read and write
|
|
|
|
208D735F000
|
unkown
|
page read and write
|
|
|
|
2ACF604F000
|
unkown
|
page read and write
|
|
|
|
2BE62020000
|
unkown
|
page read and write
|
|
|
|
7DF5B9FF2000
|
unkown image
|
page readonly
|
|
|
|
AB21D77000
|
unkown
|
page read and write
|
|
|
|
208DBFB1000
|
unkown
|
page read and write
|
|
|
|
2116F4E0000
|
unkown
|
page read and write
|
|
|
|
7FF522527000
|
unkown image
|
page readonly
|
|
|
|
208DC12A000
|
unkown
|
page read and write
|
|
|
|
649E47F000
|
unkown
|
page read and write
|
|
|
|
7DF554870000
|
unkown image
|
page readonly
|
|
|
|
7FF542452000
|
unkown image
|
page readonly
|
|
|
|
7DF5FDCD2000
|
unkown image
|
page readonly
|
|
|
|
21A520D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7BF2000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7574000
|
unkown image
|
page readonly
|
|
|
|
2116DA75000
|
unkown
|
page read and write
|
|
|
|
E78AE7E000
|
unkown
|
page read and write
|
|
|
|
2ACF6070000
|
unkown
|
page read and write
|
|
|
|
272DBB90000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB93D000
|
unkown image
|
page readonly
|
|
|
|
7FF53C249000
|
unkown image
|
page readonly
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
208DC10A000
|
unkown
|
page read and write
|
|
|
|
218700C3000
|
unkown
|
page read and write
|
|
|
|
2116E070000
|
unkown image
|
page readonly
|
|
|
|
2BE62F20000
|
unkown
|
page read and write
|
|
|
|
2ACF6050000
|
unkown
|
page read and write
|
|
|
|
232B5202000
|
unkown
|
page read and write
|
|
|
|
7FF54212F000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB20D000
|
unkown image
|
page readonly
|
|
|
|
7FF522067000
|
unkown image
|
page readonly
|
|
|
|
7FF5EA181000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7EB5000
|
unkown image
|
page readonly
|
|
|
|
7DF534B70000
|
unkown image
|
page readonly
|
|
|
|
7DD46FC000
|
unkown
|
page read and write
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
2A92DAA0000
|
heap default
|
page read and write
|
|
|
|
7FF55AA86000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7D33000
|
unkown image
|
page readonly
|
|
|
|
1B631E80000
|
unkown
|
page read and write
|
|
|
|
208DC430000
|
unkown
|
page read and write
|
|
|
|
208DC470000
|
unkown
|
page read and write
|
|
|
|
7FF57873C000
|
unkown image
|
page readonly
|
|
|
|
208D739F000
|
unkown
|
page read and write
|
|
|
|
7DF534B82000
|
unkown image
|
page readonly
|
|
|
|
1F0D3780000
|
unkown image
|
page readonly
|
|
|
|
649D7BC000
|
unkown
|
page read and write
|
|
|
|
208DBE53000
|
unkown
|
page read and write
|
|
|
|
208DC19B000
|
unkown
|
page read and write
|
|
|
|
15891A6D000
|
unkown
|
page read and write
|
|
|
|
2116D9C0000
|
unkown image
|
page readonly
|
|
|
|
232B4DCB000
|
unkown
|
page read and write
|
|
|
|
2116DA64000
|
unkown
|
page read and write
|
|
|
|
7FF5D7417000
|
unkown image
|
page readonly
|
|
|
|
232B4D90000
|
unkown
|
page read and write
|
|
|
|
232B44B2000
|
unkown
|
page read and write
|
|
|
|
15891A44000
|
unkown
|
page read and write
|
|
|
|
7DF54E782000
|
unkown image
|
page readonly
|
|
|
|
1F0D3150000
|
unkown image
|
page readonly
|
|
|
|
208D6A41000
|
unkown
|
page read and write
|
|
|
|
7FF5A7AAE000
|
unkown image
|
page readonly
|
|
|
|
7DF532840000
|
unkown image
|
page readonly
|
|
|
|
7FF5D739E000
|
unkown image
|
page readonly
|
|
|
|
1F0D31A0000
|
unkown
|
page read and write
|
|
|
|
7FF5EB261000
|
unkown image
|
page readonly
|
|
|
|
7FF5203DA000
|
unkown image
|
page readonly
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
7DF58AAD0000
|
unkown image
|
page readonly
|
|
|
|
272DBC00000
|
unkown
|
page read and write
|
|
|
|
2116DB02000
|
unkown
|
page read and write
|
|
|
|
2A7FFFF000
|
unkown
|
page read and write
|
|
|
|
232B4D90000
|
unkown
|
page read and write
|
|
|
|
F30D27B000
|
unkown
|
page read and write
|
|
|
|
7DF5EEF02000
|
unkown image
|
page readonly
|
|
|
|
208DBFD0000
|
unkown
|
page read and write
|
|
|
|
232B525D000
|
unkown
|
page read and write
|
|
|
|
F74BA7F000
|
unkown
|
page read and write
|
|
|
|
208DBFBA000
|
unkown
|
page read and write
|
|
|
|
21A51BB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCB06000
|
unkown image
|
page readonly
|
|
|
|
21870660000
|
unkown image
|
page write copy
|
|
|
|
22526720000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7B81000
|
unkown image
|
page readonly
|
|
|
|
1F0D3202000
|
unkown
|
page read and write
|
|
|
|
232B4DB9000
|
unkown
|
page read and write
|
|
|
|
7DF5B9FE2000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7C80000
|
unkown image
|
page readonly
|
|
|
|
1B631E80000
|
unkown
|
page read and write
|
|
|
|
7FF578377000
|
unkown image
|
page readonly
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
7FF50F5EA000
|
unkown image
|
page readonly
|
|
|
|
F74B77D000
|
unkown
|
page read and write
|
|
|
|
7FF57B8C3000
|
unkown image
|
page readonly
|
|
|
|
21870000000
|
unkown
|
page read and write
|
|
|
|
7FF57B83F000
|
unkown image
|
page readonly
|
|
|
|
7FF55A8FF000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB95C000
|
unkown image
|
page readonly
|
|
|
|
7DD47F8000
|
unkown
|
page read and write
|
|
|
|
232B5263000
|
unkown
|
page read and write
|
|
|
|
7FF5D72FA000
|
unkown image
|
page readonly
|
|
|
|
7DF58AAC0000
|
unkown image
|
page readonly
|
|
|
|
7DF56CE90000
|
unkown image
|
page readonly
|
|
|
|
15891A7A000
|
unkown
|
page read and write
|
|
|
|
208D7318000
|
unkown
|
page read and write
|
|
|
|
1B631E8E000
|
unkown
|
page read and write
|
|
|
|
22526900000
|
unkown
|
page read and write
|
|
|
|
7FF5EB773000
|
unkown image
|
page readonly
|
|
|
|
208DC10A000
|
unkown
|
page read and write
|
|
|
|
15891A5A000
|
unkown
|
page read and write
|
|
|
|
7DF5EEF02000
|
unkown image
|
page readonly
|
|
|
|
7FF52049C000
|
unkown image
|
page readonly
|
|
|
|
208DBFF0000
|
unkown
|
page read and write
|
|
|
|
AB224FE000
|
unkown
|
page read and write
|
|
|
|
7FF5EB9D1000
|
unkown image
|
page readonly
|
|
|
|
7FF578721000
|
unkown image
|
page readonly
|
|
|
|
7FF50FD6F000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7F29000
|
unkown image
|
page readonly
|
|
|
|
7DF54E770000
|
unkown image
|
page readonly
|
|
|
|
232B42D0000
|
unkown image
|
page read and write
|
|
|
|
7FF522535000
|
unkown image
|
page readonly
|
|
|
|
2A92E402000
|
unkown
|
page read and write
|
|
|
|
2ACF5E80000
|
heap private
|
page read and write
|
|
|
|
F74B87E000
|
unkown
|
page read and write
|
|
|
|
7FF57B9B2000
|
unkown image
|
page readonly
|
|
|
|
15891A6A000
|
unkown
|
page read and write
|
|
|
|
208DC10E000
|
unkown
|
page read and write
|
|
|
|
7DF432A40000
|
unkown image
|
page readonly
|
|
|
|
7FF5227E1000
|
unkown image
|
page readonly
|
|
|
|
7FF5DC0EC000
|
unkown image
|
page readonly
|
|
|
|
7FF5D6D71000
|
unkown image
|
page readonly
|
|
|
|
F30D5F9000
|
unkown
|
page read and write
|
|
|
|
7FF55AA72000
|
unkown image
|
page readonly
|
|
|
|
7FF50FD36000
|
unkown image
|
page readonly
|
|
|
|
158918C0000
|
unkown image
|
page read and write
|
|
|
|
7FF53C386000
|
unkown image
|
page readonly
|
|
|
|
7FF53C3E6000
|
unkown image
|
page readonly
|
|
|
|
AB2217A000
|
unkown
|
page read and write
|
|
|
|
208DC2D0000
|
unkown
|
page read and write
|
|
|
|
7DD4377000
|
unkown
|
page read and write
|
|
|
|
208DC19E000
|
unkown
|
page read and write
|
|
|
|
7FF50FD32000
|
unkown image
|
page readonly
|
|
|
|
7FF50FDA6000
|
unkown image
|
page readonly
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
D0F9C7F000
|
unkown
|
page read and write
|
|
|
|
7DF58DDC0000
|
unkown image
|
page readonly
|
|
|
|
7DF522132000
|
unkown image
|
page readonly
|
|
|
|
208DC102000
|
unkown
|
page read and write
|
|
|
|
7FF5D751F000
|
unkown image
|
page readonly
|
|
|
|
7FF55A9B1000
|
unkown image
|
page readonly
|
|
|
|
7FF50F263000
|
unkown image
|
page readonly
|
|
|
|
7DF5FDCE2000
|
unkown image
|
page readonly
|
|
|
|
AB2277E000
|
unkown
|
page read and write
|
|
|
|
7FF5786B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7C0A000
|
unkown image
|
page readonly
|
|
|
|
208D7359000
|
unkown
|
page read and write
|
|
|
|
2116F520000
|
unkown
|
page read and write
|
|
|
|
232B42F0000
|
unkown image
|
page readonly
|
|
|
|
7FF53C3AE000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7D61000
|
unkown image
|
page readonly
|
|
|
|
272DBC4A000
|
unkown
|
page read and write
|
|
|
|
2187006D000
|
unkown
|
page read and write
|
|
|
|
7FF5A7BC3000
|
unkown image
|
page readonly
|
|
|
|
7FF5EB929000
|
unkown image
|
page readonly
|
|
|
|
7FF522770000
|
unkown image
|
page readonly
|
|
|
|
7FF5A7B97000
|
unkown image
|
page readonly
|
|
|
|
7FF5DCB3F000
|
unkown image
|
page readonly
|
|
|
|
15891A84000
|
unkown
|
page read and write
|
|
|
|
7FF5EB159000
|
unkown image
|
page readonly
|
|
|
|
1F0D3200000
|
unkown
|
page read and write
|
|
|
|
232B44BF000
|
unkown
|
page read and write
|
|
|
|
7FF5DCB76000
|
unkown image
|
page readonly
|
|
|
|
22526E50000
|
unkown image
|
page readonly
|
|
|
|
22526852000
|
unkown
|
page read and write
|
|
|
|
2252683C000
|
unkown
|
page read and write
|
|
|
|
7FF52252E000
|
unkown image
|
page readonly
|
|
|
|
7FF5EA189000
|
unkown image
|
page readonly
|
|
|
|
1B632150000
|
unkown image
|
page readonly
|
|
|
|
7FF542559000
|
unkown image
|
page readonly
|
|
|
|
272DBBB0000
|
unkown image
|
page readonly
|
|
|
|
208DC12A000
|
unkown
|
page read and write
|
|
|
|
208DBFB7000
|
unkown
|
page read and write
|
|
|
|
7FF50FBEA000
|
unkown image
|
page readonly
|
|
|
|
7FF5D7E4A000
|
unkown image
|
page readonly
|
|
|
|
7FF542448000
|
unkown image
|
page readonly
|
|
|
|
232B5300000
|
unkown
|
page read and write
|
|
|
|
208DC13B000
|
unkown
|
page read and write
|
|
|
|
2ACF6086000
|
unkown
|
page read and write
|
|
|
|
21A51D02000
|
unkown
|
page read and write
|
|
|
|
208DBFB6000
|
unkown
|
page read and write
|
|
|
|
208DC0FF000
|
unkown
|
page read and write
|
|
|
|
21A51C00000
|
unkown
|
page read and write
|
|
|
|
7FF5A7AFD000
|
unkown image
|
page readonly
|
|
|
|
7DF46AD40000
|
unkown image
|
page readonly
|
|
|
|
7FF520529000
|
unkown image
|
page readonly
|
|
|
|
7FF5223B1000
|
unkown image
|
page readonly
|
|
|
|
21870590000
|
unkown image
|
page readonly
|
|
|
|
7FF55AADD000
|
unkown image
|
page readonly
|
|
There are 1652 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
file:///C:/Users/user/Desktop/FaxGUO65DE.391343-Faa.html
|
|
|
|
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQIIAYWSu4vTAADGm_au1zvQO0VEEeQGBxXS5tU8Kg49m0uba5LWJO0lgyVt0jyaV9u0aTIdTo43OdwkIg4nLk4iiDffdIuLoyCIgxxOiou9v8Dlgw9-fMv321jDi2QRKkL3c3ARrtzBUKysEX0KpDQcBTEKhkANQ3AQLaM4ikCwXobQydWNrQP6258nN7_Sr3efvnn1-fzvMXDbiqJwWimV4jguBsOhPTCKg8AruZqv2775HgDOAOA7ABxlVw0flMXj7BRHCRzFSJzCcQzBYAinigrCJbzE2mqXjlSmjSgJBPEevWhKZswz7YhH5ITzOJj3VFeoWY66ZHlGhjlmyTs0xj1a8qluNbuspUijiPd4m5eqsSApy53O6Et2U6jOIgu5iGBip8av7PowmHi9MJhGR7nn2YlpRA1nFOm2WWtFCian7LSh2qbLNxGQjOtE0yL0RJtbLT1g91TIjljHpgYttGeIC7_pDQfueMF1zJDSGMVE6WqDEXFWwtvKUBLS_VQQSXjIk464GzHJqDkLU6xOmi5EJCEqzOmpk87mCYmEYrutN4ZUn9ujPTcZDagIdvpwYKhpDZwlrTFIWb3I1H1kZIug2yCEMcu0SEXq-QuC1z153JrLUoDAEYjUFTFs99vYXOt03J2eXN-btYxJzbGZVNUbEJ4ws2RB7ldHeNmtph6PonKP6gwm83A6ZQPJEbvxu1x-eaYX-Ke5y0Fo-La-HU6Coe0aZyvAj5XrhfxW4UZmO3P3GpSrFAobW5mL9nsFeLm6tEU-qDz4ufmRfvvi3q2TT4eZ09VSXVW7jiA1-qQSsIsBYcCxxPnCTuQmlkSNISTAm_N-jdEI7CFcgQ_zwGE-f5q_0qj1eFoSpSpfqz6uIT3oPA88W8t8WP-PfyeXMv8A0&mkt=en-US&hosted=0&device_platform=Windows+10
|
|