Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
a04.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\www.msn[2].xml
|
ASCII text, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\URW0GA4Q\contextual.media[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{AE6AEE69-2775-11EC-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{078013E1-2776-11EC-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{AE6AEE6B-2775-11EC-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B857F74E-2775-11EC-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{E5354AB5-2775-11EC-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{F1E5E2AC-2775-11EC-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{F1E5E2AE-2775-11EC-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\2a816201-f959-4e73-b937-c8856613c1b1[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\4996b9[1].woff
|
Web Open Font Format, TrueType, length 45633, version 1.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAMqFmF[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAORHel[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAOZtDm[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAP7w5W[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAP7yvI[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAP9YY7[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAP9r3b[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAPa34D[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAPaEWW[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAPaKlK[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAPaLRV[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAPadFc[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAPaiCX[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAPaldW[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAPaqLI[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AAPatbE[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB15AQNm[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB1cEP3G[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BB6Ma4a[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BBVuddh[2].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BBY7ARN[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\a5ea21[1].ico
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\checksync[3].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\e151e5[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\otBannerSdk[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\52-478955-68ddb2ab[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAL6HKN[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AANuZgF[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAP5ZJ9[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAP8otc[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAP9B2S[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAP9Bwt[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAPaEWW[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAPaEgA[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAPaEqq[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAPaajT[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAPajQ1[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAPaom7[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\AAuTnto[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB1aXBV1[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB7gRE[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BB7hjL[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\auction[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\cksync[1].gif
|
GIF image data, version 87a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\https___console.brax-cdn.com_creatives_a6cb1edf-85ae-42d3-8ce3-0c3ef2d08771_679db3c1-e62f-47d5-bd90-53b48f4ed0c6_1000x600_9a0f5b727e2a50702107d4e4fbcb72f2[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\iab2Data[2].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\location[1].js
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\nrrV72800[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\nrrV72800[2].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\otSDKStub[2].js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\otTCF-ie[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\px[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\55a804ab-e5c6-4b97-9319-86263d365d28[1].json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAKp8YX[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAOSsrG[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAOxXYp[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAP9FFk[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAPaF44[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAPaJfY[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAPabaD[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAPafV9[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAPan0r[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AAParbZ[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AArXDyz[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB14EN7h[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB14hq0P[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1aQdUI[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1cG73h[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1ftEY0[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BB1kvzy[1].png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BBJrII1[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\BBPfCZL[1].png
|
GIF image data, version 89a, 50 x 50
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\cfdbd9[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\http___cdn.taboola.com_libtrc_static_thumbnails_b3b730df929ed7084f256b53000dc655[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\http___cdn.taboola.com_libtrc_static_thumbnails_ceedb38b7c05f6380193a62666745514[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\https___console.brax-cdn.com_creatives_a6cb1edf-85ae-42d3-8ce3-0c3ef2d08771_46fb1684-fb46-4b92-97d6-73c06aebbfee_1000x600_bdf0634e74df9e1a3c17cd78afe8adb9[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\https___s3.amazonaws.com_shinez-pictures_1617177826938a14141d3bca4cb41620f72354f58c4ff[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\otPcCenter[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\tag[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\17-361657-68ddb2ab[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\2d-0e97d4-185735b[1].css
|
UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AA6wTdK[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AALnEih[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AANf6qa[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AAP9No8[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AAPabFF[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AAPajmd[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AAPasOE[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AAPaubw[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AAPawMj[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB10MkbM[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB116fUs[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB1fdtSt[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB7hg4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BBX2afX[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BBXXVfm[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\a8a064[1].gif
|
GIF image data, version 89a, 28 x 28
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\de-ch[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\de-ch[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\favicon[1].ico
|
MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\http___cdn.taboola.com_libtrc_static_thumbnails_171f8b8d6097fca0bfa9b18571e0f954[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jquery-2.1.1.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\medianet[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\medianet[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\otFlat[2].json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF089A6B92B8B468A8.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF3C0DFDDDFC29F1F0.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFAFF8881E6374BF6C.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFBF4FFB19552D8CDC.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFCE6F4D6F07D43360.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFD54DA9B6AE4A4ED1.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFF3589949295E4D6F.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\28c8b86deab549a1.customDestinations-ms (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ARUU92NEV262I79KAFPG.temp
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\NUIAG1F98M3TYTKEDYOI.temp
|
data
|
dropped
|
|
There are 130 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\a04.dll'
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32.exe /s C:\Users\user\Desktop\a04.dll
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\a04.dll',#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\a04.dll,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\a04.dll',#1
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
C:\Program Files\Internet Explorer\iexplore.exe
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2792 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2792 CREDAT:82960 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2792 CREDAT:17424 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2792 CREDAT:17432 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2792 CREDAT:82984 /prefetch:2
|
|
There are 1 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://app10.laptok.at/KiETfhAdcEl7/hLoS0_2BEdS/nu4Yf9GnANVyXk/YgUltJ7zs6xEJ2nloxeBs/eATUXgJAO922GcgP/GiUgV17y_2BdX4O/qFWwhpMGMf37wi_2BX/lkJe3cdrN/7WVmaELlUteTQIErFhWc/URRkn6I1CeKadfr0Tg_/2BWPYNHHR_2F2UImJAlhjY/i7YonJ3Ydwnd_/2BgOgiB9/MYuujPMMxg18nymjpE2JqFD/0fVq8D9YsD/phg5UsKLZOQl7kqi1/VTS_2FsAFu3G/3TrEzzwsBKW/3MeaiWTLCHCZlD/OY9S51u3L9nBtrZ_2BZx7/0yqRxDj4x6MboGVE/Q0bFKfsJ98F/gfX
|
87.106.18.141
|
|
|
|
http://app10.laptok.at/favicon.ico
|
87.106.18.141
|
|
|
|
http://app10.laptok.at/tej6GHOV/2OZDNZM15j8d4LuzyBm1CPL/pFWNHMsgBq/Me_2BiCKfGmnsgtGg/Rke8C0lda6
|
unknown
|
|
|
|
http://app10.laptok.at/iyCuS9ekK6/ZKYlS2pL4_2F6YN5g/m2OzU2ez_2Fk/8F_2BnXwn7_/2BP90eUCGBXbRD/RIrhhRbI
|
unknown
|
|
|
|
http://searchads.msn.net/.cfm?&&kp=1&
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/coronareisen
|
unknown
|
|
|
|
https://contextualtag.media.net
|
unknown
|
|
|
|
https://www.msn.com/de-ch/finanzen/nachrichten/schweizer-arbeitsmarkt-auf-dem-weg-zum-vorkrisennivea
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_promotionalstripe_na
|
unknown
|
|
|
|
https://onedrive.live.com;Fotos
|
unknown
|
|
|
|
https://www.msn.com/de-ch/sport?ocid=StripeOCID
|
unknown
|
|
|
|
https://x.bidswitch.net/ul_cb/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1
|
18.156.81.187
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://ups.analytics.yahoo.com/ups/58222/sync?_origin=1&uid=2766163126684138000V10&apid=UPbaae6187-2775-11ec-83da-02a5fb3287ae&verify=true
|
18.156.0.31
|
|
|
|
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
|
unknown
|
|
|
|
http://ogp.me/ns/fb#
|
unknown
|
|
|
|
https://rtb.mfadsrvr.com/sync?ssp=bidswitch&bidswitch_ssp_id=medianet&bsw_user_id=ed0d0c9d-eb5e-460c-94bd-331d1d38e375
|
18.195.217.206
|
|
|
|
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A%2F%2Fconsole.brax-cdn.com%2Fcreatives%2Fa6cb1edf-85ae-42d3-8ce3-0c3ef2d08771%2F46fb1684-fb46-4b92-97d6-73c06aebbfee_1000x600_bdf0634e74df9e1a3c17cd78afe8adb9.png
|
151.101.1.44
|
|
|
|
https://www.msn.com/de-ch/news/other/auto-nach-unfall-mit-milit%c3%a4rblachen-abgedeckt/ar-AALgoO8?o
|
unknown
|
|
|
|
https://ups.analytics.yahoo.com/ups/58222/sync?_origin=1&uid=2766163126684138000V10
|
18.156.0.31
|
|
|
|
https://www.msn.com/de-ch/news/other/was-passierte-nur-drei-minuten-nach-dem-start/ar-AAP7LCM?ocid=h
|
unknown
|
|
|
|
https://outlook.live.com/mail/deeplink/compose;Kalender
|
unknown
|
|
|
|
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
|
unknown
|
|
|
|
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2Fceedb38b7c05f6380193a62666745514.jpg
|
151.101.1.44
|
|
|
|
https://rtb.mfadsrvr.com/ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=medianet&bsw_user_id=ed0d0c9d-eb5e-460c-94bd-331d1d38e375
|
18.195.217.206
|
|
|
|
https://www.msn.com/de-ch/news/other/mann-54-wird-von-wurzelstock-getroffen-und-kommt-ums-leben/ar-A
|
unknown
|
|
|
|
https://btloader.com/tag?o=6208086025961472&upapi=true
|
104.26.7.139
|
|
|
|
https://secure.adnxs.com/clktrb?id=762232
|
unknown
|
|
|
|
https://match.adsrvr.org/track/cmb/generic?ttd_pid=8m33zk4&ttd_tpi=1
|
76.223.111.131
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/gericht-verurteilt-mehrfachen-raser-zu-30-monaten-freiheitsstra
|
unknown
|
|
|
|
https://www.skype.com/
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=245744&a=3064090&g=24545562
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/regional
|
unknown
|
|
|
|
https://x.bidswitch.net/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1
|
18.156.81.187
|
|
|
|
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
|
unknown
|
|
|
|
https://amzn.to/2TTxhNg
|
unknown
|
|
|
|
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
|
unknown
|
|
|
|
https://client-s.gateway.messenger.live.com
|
unknown
|
|
|
|
https://cm.g.doubleclick.net/pixel?cs=1&google_nid=media&google_cm=1&google_hm=Mjc2NjE2MzExNjY4NDE2ODAwMFYxMA%3D%3D&google_sc=1
|
142.250.203.98
|
|
|
|
https://www.msn.com/de-ch/
|
unknown
|
|
|
|
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-edge-dhp-river
|
unknown
|
|
|
|
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A%2F%2Fconsole.brax-cdn.com%2Fcreatives%2Fa6cb1edf-85ae-42d3-8ce3-0c3ef2d08771%2F679db3c1-e62f-47d5-bd90-53b48f4ed0c6_1000x600_9a0f5b727e2a50702107d4e4fbcb72f2.png
|
151.101.1.44
|
|
|
|
https://www.msn.com/de-ch
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
|
unknown
|
|
|
|
https://twitter.com/i/notifications;Ich
|
unknown
|
|
|
|
https://www.awin1.com/cread.php?awinmid=11518&awinaffid=696593&clickref=dech-edge-dhp-infopa
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
|
unknown
|
|
|
|
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
|
172.217.168.38
|
|
|
|
https://id.rlcdn.com/710489.gif
|
35.244.174.68
|
|
|
|
https://cm.g.doubleclick.net/pixel?cs=1&google_nid=media&google_cm=1&google_hm=Mjc2NjE2MzEyNjY4NDEzODAwMFYxMA%3D%3D&google_sc=1
|
142.250.203.98
|
|
|
|
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
|
unknown
|
|
|
|
https://pixel.advertising.com/ups/58222/sync?_origin=1&uid=2766163126684138000V10
|
18.197.99.6
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://ogp.me/ns#
|
unknown
|
|
|
|
https://play.google.com/store/apps/details?id=com.microsoft.amp.apps.bingnews&hl=de-ch&refer
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/spezialisten-suchen-mit-sonarsonde-in-200-metern-tiefe-nach-ver
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;OneDrive-App
|
unknown
|
|
|
|
https://www.skype.com/de
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/schulleitung-warnt-eltern-vor-lebensbedrohlichem-ohnmacht-spiel
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/schweiz/bund-registriert-erneut-weniger-neue-corona-ansteckung
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
|
unknown
|
|
|
|
https://tools.applemediaservices.com/api/badges/download-on-the-app-store/black/de-de?"
|
unknown
|
|
|
|
https://www.skype.com/de/download-skype
|
unknown
|
|
|
|
https://ad-delivery.net/px.gif?ch=1&e=0.8749585328117704
|
172.67.69.19
|
|
|
|
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F171f8b8d6097fca0bfa9b18571e0f954.jpg
|
151.101.1.44
|
|
|
|
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
|
|
|
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
|
unknown
|
|
|
|
https://onedrive.live.com;OneDrive-App
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=295926&a=3064090&g=24886692
|
unknown
|
|
|
|
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
104.20.184.68
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
|
unknown
|
|
|
|
https://match.adsrvr.org/track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1
|
76.223.111.131
|
|
|
|
https://cdn.cookielaw.org/vendorlist/googleData.json
|
unknown
|
|
|
|
https://outlook.com/
|
unknown
|
|
|
|
https://play.google.com/intl/en_us/badges/images/generic/de_badge_web_generic.png"
|
unknown
|
|
|
|
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
|
|
|
https://www.stroeer.com/fileadmin/com/StroeerDSP_deviceStorage.json
|
unknown
|
|
|
|
https://ups.analytics.yahoo.com/ups/58222/sync?_origin=1&uid=2766163126684138000V10&verify=true
|
18.156.0.31
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iabData.json
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iab2Data.json
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;Aktuelle
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/die-araberinnen-und-araber-kehren-zur%c3%bcck/ar-AAPbaLO?ocid=h
|
unknown
|
|
|
|
https://www.ebay.ch/?mkcid=1&mkrid=5222-53480-19255-0&siteid=193&campid=5338626668&t
|
unknown
|
|
|
|
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A%2F%2Fs3.amazonaws.com%2Fshinez-pictures%2F1617177826938a14141d3bca4cb41620f72354f58c4ff.jpg
|
151.101.1.44
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://web.vortex.data.msn.com/collect/v1/t.gif?name=%27Ms.Webi.PageView%27&ver=%272.1%27&a
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
app10.laptok.at
|
87.106.18.141
|
|
|
|
dart.l.doubleclick.net
|
172.217.168.38
|
|
|
|
tls13.taboola.map.fastly.net
|
151.101.1.44
|
|
|
|
prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud
|
18.197.99.6
|
|
|
|
a97adde81b00f2ca4.awsglobalaccelerator.com
|
76.223.111.131
|
|
|
|
elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com
|
18.195.217.206
|
|
|
|
windowsupdate.s.llnwi.net
|
178.79.242.0
|
|
|
|
ad-delivery.net
|
172.67.69.19
|
|
|
|
contextual.media.net
|
95.100.216.34
|
|
|
|
cs.media.net
|
95.100.216.34
|
|
|
|
elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com
|
18.156.81.187
|
|
|
|
cm.g.doubleclick.net
|
142.250.203.98
|
|
|
|
hblg.media.net
|
95.100.216.34
|
|
|
|
lg3.media.net
|
95.100.216.34
|
|
|
|
btloader.com
|
104.26.7.139
|
|
|
|
id.rlcdn.com
|
35.244.174.68
|
|
|
|
prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud
|
18.156.0.31
|
|
|
|
geolocation.onetrust.com
|
104.20.184.68
|
|
|
|
x.bidswitch.net
|
unknown
|
|
|
|
www.msn.com
|
unknown
|
|
|
|
ad.doubleclick.net
|
unknown
|
|
|
|
srtb.msn.com
|
unknown
|
|
|
|
ups.analytics.yahoo.com
|
unknown
|
|
|
|
img.img-taboola.com
|
unknown
|
|
|
|
web.vortex.data.msn.com
|
unknown
|
|
|
|
rtb.mfadsrvr.com
|
unknown
|
|
|
|
pixel.advertising.com
|
unknown
|
|
|
|
cvision.media.net
|
unknown
|
|
|
|
match.adsrvr.org
|
unknown
|
|
There are 19 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
87.106.18.141
|
app10.laptok.at
|
Germany
|
|
|
|
18.195.217.206
|
elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com
|
United States
|
|
|
|
172.67.69.19
|
ad-delivery.net
|
United States
|
|
|
|
18.156.81.187
|
elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com
|
United States
|
|
|
|
76.223.111.131
|
a97adde81b00f2ca4.awsglobalaccelerator.com
|
United States
|
|
|
|
151.101.1.44
|
tls13.taboola.map.fastly.net
|
United States
|
|
|
|
104.26.7.139
|
btloader.com
|
United States
|
|
|
|
104.20.184.68
|
geolocation.onetrust.com
|
United States
|
|
|
|
18.197.99.6
|
prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud
|
United States
|
|
|
|
18.156.0.31
|
prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud
|
United States
|
|
|
|
35.244.174.68
|
id.rlcdn.com
|
United States
|
|
|
|
142.250.203.98
|
cm.g.doubleclick.net
|
United States
|
|
|
|
172.217.168.38
|
dart.l.doubleclick.net
|
United States
|
|
There are 3 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
|
{AE6AEE69-2775-11EC-90EB-ECF4BBEA1588}
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Blocked
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Blocked
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingLastYMD
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingBitmap
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingRandomizedBitmap
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DomainSuggestion
|
NextUpdateDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
|
Window_Placement
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Blocked
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Blocked
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Blocked
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Blocked
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\www.msn.com
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\msn.com
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\msn.com
|
NumberOfSubdomains
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
There are 137 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
4FF8000
|
heap private
|
page read and write
|
|
|
|
5AF8000
|
heap private
|
page read and write
|
|
|
|
5568000
|
heap private
|
page read and write
|
|
|
|
5568000
|
heap private
|
page read and write
|
|
|
|
5568000
|
heap private
|
page read and write
|
|
|
|
5AF8000
|
heap private
|
page read and write
|
|
|
|
5568000
|
heap private
|
page read and write
|
|
|
|
5AF8000
|
heap private
|
page read and write
|
|
|
|
10F9000
|
heap private
|
page read and write
|
|
|
|
4FF8000
|
heap private
|
page read and write
|
|
|
|
BB0000
|
unkown
|
page execute and read and write
|
|
|
|
38F8000
|
heap private
|
page read and write
|
|
|
|
30A9000
|
heap private
|
page read and write
|
|
|
|
5AF8000
|
heap private
|
page read and write
|
|
|
|
38F8000
|
heap private
|
page read and write
|
|
|
|
4FF8000
|
heap private
|
page read and write
|
|
|
|
38F8000
|
heap private
|
page read and write
|
|
|
|
38F8000
|
heap private
|
page read and write
|
|
|
|
50D9000
|
heap private
|
page read and write
|
|
|
|
5568000
|
heap private
|
page read and write
|
|
|
|
5AF8000
|
heap private
|
page read and write
|
|
|
|
38F8000
|
heap private
|
page read and write
|
|
|
|
FF0000
|
unkown
|
page execute and read and write
|
|
|
|
5568000
|
heap private
|
page read and write
|
|
|
|
5AF8000
|
heap private
|
page read and write
|
|
|
|
4FF8000
|
heap private
|
page read and write
|
|
|
|
5568000
|
heap private
|
page read and write
|
|
|
|
38F8000
|
heap private
|
page read and write
|
|
|
|
6B0000
|
unkown
|
page execute and read and write
|
|
|
|
4FF8000
|
heap private
|
page read and write
|
|
|
|
4FF8000
|
heap private
|
page read and write
|
|
|
|
5568000
|
heap private
|
page read and write
|
|
|
|
32C0000
|
unkown
|
page execute and read and write
|
|
|
|
4CB9000
|
heap private
|
page read and write
|
|
|
|
38F8000
|
heap private
|
page read and write
|
|
|
|
38F8000
|
heap private
|
page read and write
|
|
|
|
38F8000
|
heap private
|
page read and write
|
|
|
|
5AF8000
|
heap private
|
page read and write
|
|
|
|
4FF8000
|
heap private
|
page read and write
|
|
|
|
4FF8000
|
heap private
|
page read and write
|
|
|
|
5AF8000
|
heap private
|
page read and write
|
|
|
|
4FF8000
|
heap private
|
page read and write
|
|
|
|
5AF8000
|
heap private
|
page read and write
|
|
|
|
5568000
|
heap private
|
page read and write
|
|
|
|
19232508000
|
unkown
|
page read and write
|
|
|
|
2AA0BD80000
|
unkown
|
page read and write
|
|
|
|
2AA0BD7B000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5D9F51000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA0C7000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2BDCF88F000
|
unkown
|
page read and write
|
|
|
|
7DF514380000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
FC9000
|
unkown image
|
page readonly
|
|
|
|
2DC8000
|
unkown image
|
page readonly
|
|
|
|
2AA0B390000
|
unkown image
|
page readonly
|
|
|
|
341E000
|
unkown
|
page read and write
|
|
|
|
7FE52000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF061000
|
unkown image
|
page readonly
|
|
|
|
2291BC13000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
1178000
|
heap private
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF23C000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7D96FFB000
|
unkown
|
page read and write
|
|
|
|
7DF5EF200000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2EE3000
|
unkown image
|
page readonly
|
|
|
|
120A000
|
heap default
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2EBA000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF25A000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5215BF000
|
unkown image
|
page readonly
|
|
|
|
7FF52148B000
|
unkown image
|
page readonly
|
|
|
|
680000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9FFC000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
482E000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6B9000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD89000
|
unkown
|
page read and write
|
|
|
|
7FF4FF278000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B92C4000
|
unkown image
|
page readonly
|
|
|
|
463A000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8E000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7DF57F800000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
3529000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
B22000
|
unkown
|
page read and write
|
|
|
|
6E09D000
|
unkown image
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD91000
|
unkown
|
page read and write
|
|
|
|
2533E03C000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0C220000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7F3A0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
3500000
|
heap private
|
page read and write
|
|
|
|
7FF5214E3000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2FA2000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
FD4E19B000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2807000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7DF412250000
|
unkown image
|
page readonly
|
|
|
|
2AA0B4C6000
|
unkown
|
page read and write
|
|
|
|
2F81000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0C202000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
BC0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B980000
|
unkown image
|
page readonly
|
|
|
|
7DF514390000
|
unkown image
|
page readonly
|
|
|
|
2EE3000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown image
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF4FF20A000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD81000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
BB0000
|
unkown image
|
page read and write
|
|
|
|
2AA0B260000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF0F1000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF21B000
|
unkown image
|
page readonly
|
|
|
|
6E092000
|
unkown image
|
page readonly
|
|
|
|
7DF57F7F0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E050000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0C202000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF215000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2291BB60000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B93F4000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0B290000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5D985A000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF521595000
|
unkown image
|
page readonly
|
|
|
|
2291BC5E000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF56A6FD000
|
unkown image
|
page readonly
|
|
|
|
984000
|
unkown
|
page read and write
|
|
|
|
2291BE00000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
E20B27B000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2BDCF86F000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0C202000
|
unkown
|
page read and write
|
|
|
|
2AA0BDBA000
|
unkown
|
page read and write
|
|
|
|
2925000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD70000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2CB0000
|
heap private
|
page read and write
|
|
|
|
7DF4ED0D0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2EBA000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF521606000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD91000
|
unkown
|
page read and write
|
|
|
|
2AA0B463000
|
unkown
|
page read and write
|
|
|
|
7FF521433000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD78000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5215DA000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2F36000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2903000
|
unkown image
|
page readonly
|
|
|
|
7F380000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
38FA000
|
heap private
|
page read and write
|
|
|
|
7FF5DA10D000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5DA0EF000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
34FE000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
3538000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BDBA000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD08000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
6E092000
|
unkown image
|
page readonly
|
|
|
|
6F0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2533DFC0000
|
heap default
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A71000
|
unkown image
|
page execute read
|
|
|
|
7DF536720000
|
unkown image
|
page readonly
|
|
|
|
2533DF90000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
E20B9F8000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF1FA000
|
unkown image
|
page readonly
|
|
|
|
2AA0BDAC000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF4FF289000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B9290000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0B4F8000
|
unkown
|
page read and write
|
|
|
|
3501000
|
unkown
|
page read and write
|
|
|
|
E20B2FE000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8F000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2F07000
|
unkown image
|
page readonly
|
|
|
|
2CFE000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
32EA000
|
unkown image
|
page read and write
|
|
|
|
2291BC61000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8D000
|
unkown
|
page read and write
|
|
|
|
7FF4FF0B3000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD8F000
|
unkown
|
page read and write
|
|
|
|
2802000
|
unkown image
|
page readonly
|
|
|
|
7DF536710000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
EBEA0FF000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD86000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
295B000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B94A7000
|
unkown image
|
page readonly
|
|
|
|
E20B47C000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2291BC00000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2BDCF7A0000
|
unkown
|
page read and write
|
|
|
|
7FF5215D4000
|
unkown image
|
page readonly
|
|
|
|
7DF5EF202000
|
unkown image
|
page readonly
|
|
|
|
2AA0BDB2000
|
unkown
|
page read and write
|
|
|
|
2533E06C000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2BDCF877000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD72000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD06000
|
unkown
|
page read and write
|
|
|
|
7FF569FD3000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FE9E0000
|
unkown image
|
page readonly
|
|
|
|
7DF536700000
|
unkown image
|
page readonly
|
|
|
|
7FF5B916A000
|
unkown image
|
page readonly
|
|
|
|
29B000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8C000
|
unkown
|
page read and write
|
|
|
|
19232513000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
6E5AE000
|
unkown image
|
page write copy
|
|
|
|
F90000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B938B000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E09F000
|
unkown image
|
page execute and read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
4600000
|
unkown image
|
page readonly
|
|
|
|
2BDCF760000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2291BC79000
|
unkown
|
page read and write
|
|
|
|
2E60000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B9464000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
D92000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
6E050000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0C200000
|
unkown
|
page read and write
|
|
|
|
2AA0B454000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0B4A0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5B94FE000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E056000
|
unkown image
|
page readonly
|
|
|
|
6E092000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E050000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0C202000
|
unkown
|
page read and write
|
|
|
|
2AA0B4A7000
|
unkown
|
page read and write
|
|
|
|
7FF4FF174000
|
unkown image
|
page readonly
|
|
|
|
E11000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
AB0000
|
heap default
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0B465000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF2FA000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF56A6CA000
|
unkown image
|
page readonly
|
|
|
|
7DF5EF220000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BDDE000
|
unkown
|
page read and write
|
|
|
|
7FF5B9002000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
E20B37E000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF4FF286000
|
unkown image
|
page readonly
|
|
|
|
6BA000
|
unkown image
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF536720000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD81000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B3D0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD82000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2F1A000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD94000
|
unkown
|
page read and write
|
|
|
|
2291BC5F000
|
unkown
|
page read and write
|
|
|
|
32E1000
|
unkown image
|
page execute read
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
6E051000
|
unkown image
|
page execute read
|
|
|
|
34BA000
|
heap default
|
page read and write
|
|
|
|
7C2000
|
unkown
|
page read and write
|
|
|
|
1750000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2BDCF866000
|
heap default
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FE42000
|
unkown image
|
page readonly
|
|
|
|
29D3000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
47E0000
|
heap private
|
page read and write
|
|
|
|
BC0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B948A000
|
unkown image
|
page readonly
|
|
|
|
6E5AE000
|
unkown image
|
page write copy
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF536710000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2533E002000
|
unkown
|
page read and write
|
|
|
|
2AA0B46A000
|
unkown
|
page read and write
|
|
|
|
E20BA7E000
|
unkown
|
page read and write
|
|
|
|
7DF57F810000
|
unkown image
|
page readonly
|
|
|
|
2BDCFAE5000
|
heap private
|
page read and write
|
|
|
|
6E050000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
292F000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2533E050000
|
unkown
|
page read and write
|
|
|
|
10C0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
5B8F000
|
unkown
|
page read and write
|
|
|
|
2AA0B45F000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BDBA000
|
unkown
|
page read and write
|
|
|
|
FB0000
|
unkown
|
page execute and read and write
|
|
|
|
7DF57F7F2000
|
unkown image
|
page readonly
|
|
|
|
2533E2D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B94E4000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA17A000
|
unkown image
|
page readonly
|
|
|
|
2AA0BAD0000
|
unkown
|
page read and write
|
|
|
|
2E92000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF56A6E8000
|
unkown image
|
page readonly
|
|
|
|
7F3B2000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B9490000
|
unkown image
|
page readonly
|
|
|
|
28C9000
|
unkown image
|
page readonly
|
|
|
|
19232370000
|
heap default
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
1258000
|
unkown
|
page read and write
|
|
|
|
7DF5143A0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
3C0F000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
1221000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FE60000
|
unkown image
|
page readonly
|
|
|
|
7F242000
|
unkown image
|
page readonly
|
|
|
|
2EEB000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9207000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA0DA000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD9B000
|
unkown
|
page read and write
|
|
|
|
2291BD00000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2ECD000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2291C000000
|
unkown image
|
page readonly
|
|
|
|
32EC000
|
unkown image
|
page readonly
|
|
|
|
2291BA30000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2291BC5C000
|
unkown
|
page read and write
|
|
|
|
7DF5EF220000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9C56000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
6E09F000
|
unkown image
|
page execute and read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7DF47D6C0000
|
unkown image
|
page readonly
|
|
|
|
2DC8000
|
unkown image
|
page readonly
|
|
|
|
2AA0BDA7000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8F000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
4940000
|
heap private
|
page read and write
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD9B000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD86000
|
unkown
|
page read and write
|
|
|
|
2533E07E000
|
unkown
|
page read and write
|
|
|
|
7DF536712000
|
unkown image
|
page readonly
|
|
|
|
2EB3000
|
unkown image
|
page readonly
|
|
|
|
2D30000
|
heap private
|
page read and write
|
|
|
|
2533E013000
|
unkown
|
page read and write
|
|
|
|
2D9D000
|
unkown
|
page read and write
|
|
|
|
7FF5B9582000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2D1B000
|
unkown image
|
page readonly
|
|
|
|
2533E088000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
19232470000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0B800000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8C000
|
unkown
|
page read and write
|
|
|
|
7DF514382000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2291BA10000
|
unkown image
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2BDCF876000
|
unkown
|
page read and write
|
|
|
|
A90000
|
heap default
|
page read and write
|
|
|
|
10B0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5B947C000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BDA8000
|
unkown
|
page read and write
|
|
|
|
7F3C0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF4FF17C000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0B467000
|
unkown
|
page read and write
|
|
|
|
2AA0BD88000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2533DF60000
|
heap private
|
page read and write
|
|
|
|
2BDCF760000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
1180000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2BDCF740000
|
unkown image
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FE60000
|
unkown image
|
page readonly
|
|
|
|
7DF5CE612000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
4BAF000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
555000
|
heap default
|
page read and write
|
|
|
|
7FF4FF227000
|
unkown image
|
page readonly
|
|
|
|
2F13000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
740000
|
heap default
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11DB000
|
heap default
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B45D000
|
unkown
|
page read and write
|
|
|
|
2AA0BD59000
|
unkown
|
page read and write
|
|
|
|
2AA0BD1A000
|
unkown
|
page read and write
|
|
|
|
7B3000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
E15000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD81000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5B93FC000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BDAA000
|
unkown
|
page read and write
|
|
|
|
2AA0BD89000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2533E113000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B486000
|
unkown
|
page read and write
|
|
|
|
2BDCF88D000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
6E055000
|
unkown image
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
293A000
|
unkown image
|
page readonly
|
|
|
|
556B000
|
heap private
|
page read and write
|
|
|
|
FB0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF5EF210000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
3D0F000
|
unkown
|
page read and write
|
|
|
|
6E05E000
|
unkown image
|
page execute read
|
|
|
|
2AA0BDA2000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5B93DD000
|
unkown image
|
page readonly
|
|
|
|
FB0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BDAC000
|
unkown
|
page read and write
|
|
|
|
6E5AE000
|
unkown image
|
page write copy
|
|
|
|
7FF521150000
|
unkown image
|
page readonly
|
|
|
|
FE0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E053000
|
unkown image
|
page readonly
|
|
|
|
13D0000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2DDA000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF56A771000
|
unkown image
|
page readonly
|
|
|
|
2AA0B47A000
|
unkown
|
page read and write
|
|
|
|
7DF5CE600000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
27E8000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2BDCF7C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5B94F8000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5DA08E000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7DF536712000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5B9210000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
79B000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8D000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD83000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
C8E000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2291C180000
|
unkown image
|
page readonly
|
|
|
|
15D0000
|
unkown image
|
page readonly
|
|
|
|
2AA0BAD0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9F33000
|
unkown image
|
page readonly
|
|
|
|
2EA9000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2EF0000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
37B0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7DF5EF200000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2DDA000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7F3D0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2F94000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2DE7000
|
unkown image
|
page readonly
|
|
|
|
7FF5B945B000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF52159B000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
56EF000
|
unkown
|
page read and write
|
|
|
|
7F390000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
28DA000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2F21000
|
unkown image
|
page readonly
|
|
|
|
13CE000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2F1F000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD72000
|
unkown
|
page read and write
|
|
|
|
32E9000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BAD0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
6E092000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF26F000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA0F8000
|
unkown image
|
page readonly
|
|
|
|
7DF5CE610000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD5E000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7F382000
|
unkown image
|
page readonly
|
|
|
|
1000000
|
unkown image
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF4FEF87000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5214DD000
|
unkown image
|
page readonly
|
|
|
|
7DF5CE610000
|
unkown image
|
page readonly
|
|
|
|
2956000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
68E9FF7000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA0BC000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
550000
|
heap default
|
page read and write
|
|
|
|
7FF4FF10E000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2291BC29000
|
unkown
|
page read and write
|
|
|
|
6BC000
|
unkown image
|
page readonly
|
|
|
|
7DF5EF212000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B9398000
|
unkown image
|
page readonly
|
|
|
|
2D87000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0C202000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0B45A000
|
unkown
|
page read and write
|
|
|
|
2AA0BD80000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF536702000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD92000
|
unkown
|
page read and write
|
|
|
|
2291BA80000
|
heap default
|
page read and write
|
|
|
|
7FF52158A000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
102D000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0C263000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BDA6000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5DA07A000
|
unkown image
|
page readonly
|
|
|
|
2291BB80000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2533E650000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
68EA1FE000
|
unkown
|
page read and write
|
|
|
|
33DD000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
32D0000
|
heap private
|
page read and write
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2EAC000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF210000
|
unkown image
|
page readonly
|
|
|
|
2E50000
|
heap private
|
page read and write
|
|
|
|
192326D0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
1160000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD00000
|
unkown
|
page read and write
|
|
|
|
2F1F000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5215EF000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD89000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
2F1A000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
1130000
|
unkown image
|
page readonly
|
|
|
|
7F3B0000
|
unkown image
|
page readonly
|
|
|
|
556A000
|
heap private
|
page read and write
|
|
|
|
7FF5B94BF000
|
unkown image
|
page readonly
|
|
|
|
2BDCF7F0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
19232320000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B4B1000
|
unkown
|
page read and write
|
|
|
|
27EC000
|
unkown image
|
page readonly
|
|
|
|
7FF5214FC000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD8F000
|
unkown
|
page read and write
|
|
|
|
273B000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7F3B0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2EF9000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5D9F8B000
|
unkown image
|
page readonly
|
|
|
|
7FF52157A000
|
unkown image
|
page readonly
|
|
|
|
3340000
|
unkown
|
page read and write
|
|
|
|
7FF52160D000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD86000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
192328D0000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
19232413000
|
unkown
|
page read and write
|
|
|
|
7FF5DA174000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
2AA0BDB5000
|
unkown
|
page read and write
|
|
|
|
A7A000
|
unkown image
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2EDC000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
5AFA000
|
heap private
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2F85000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
6E056000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BDCE000
|
unkown
|
page read and write
|
|
|
|
7FF5D9EE1000
|
unkown image
|
page readonly
|
|
|
|
988000
|
unkown
|
page read and write
|
|
|
|
2AA0B45B000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
B22000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6B1000
|
unkown image
|
page execute read
|
|
|
|
32E0000
|
unkown image
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF2F4000
|
unkown image
|
page readonly
|
|
|
|
29C2000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
7FE52000
|
unkown image
|
page readonly
|
|
|
|
7D972FE000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2291BA30000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2533E108000
|
unkown
|
page read and write
|
|
|
|
BC0000
|
unkown
|
page read and write
|
|
|
|
56AE000
|
unkown
|
page read and write
|
|
|
|
7FF5B9506000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF521307000
|
unkown image
|
page readonly
|
|
|
|
7FF5B8DE7000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD88000
|
unkown
|
page read and write
|
|
|
|
D96000
|
unkown
|
page read and write
|
|
|
|
2FA2000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B94D4000
|
unkown image
|
page readonly
|
|
|
|
7FF5B946F000
|
unkown image
|
page readonly
|
|
|
|
6E050000
|
unkown image
|
page readonly
|
|
|
|
2AA0B4BF000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2533E056000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
7FF5B9351000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD92000
|
unkown
|
page read and write
|
|
|
|
F80000
|
unkown
|
page read and write
|
|
|
|
A79000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BDBD000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2533E4D0000
|
unkown image
|
page readonly
|
|
|
|
2291BC79000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E056000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B948E000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
19232380000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0B502000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5215C7000
|
unkown image
|
page readonly
|
|
|
|
6F0000
|
unkown image
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
6E09F000
|
unkown image
|
page execute and read and write
|
|
|
|
2AA0B461000
|
unkown
|
page read and write
|
|
|
|
640000
|
unkown
|
page execute and read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7F242000
|
unkown image
|
page readonly
|
|
|
|
2AA0B240000
|
unkown image
|
page read and write
|
|
|
|
2AA0C202000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF5CE602000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD70000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD92000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0C202000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8D000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BDCB000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FEDE5000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9860000
|
unkown image
|
page readonly
|
|
|
|
48EF000
|
unkown
|
page read and write
|
|
|
|
2BDCF861000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
6E5B0000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD81000
|
unkown
|
page read and write
|
|
|
|
7FF5B9443000
|
unkown image
|
page readonly
|
|
|
|
19232300000
|
unkown image
|
page read and write
|
|
|
|
2533E049000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2F32000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B43C000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF4CC4D0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF5CE600000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF521165000
|
unkown image
|
page readonly
|
|
|
|
7FF521681000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2F0F000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
3E0F000
|
unkown
|
page read and write
|
|
|
|
7FF5DA109000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF57F810000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0B4E9000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD82000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7F382000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
4B6E000
|
unkown
|
page read and write
|
|
|
|
4B0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown
|
page read and write
|
|
|
|
106C000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2ED5000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
6E053000
|
unkown image
|
page readonly
|
|
|
|
7FF4FE9DA000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BAE0000
|
unkown image
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B8C5A000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
6E09D000
|
unkown image
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD18000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF56A35A000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD7A000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
AE8000
|
heap default
|
page read and write
|
|
|
|
2291BA20000
|
heap private
|
page read and write
|
|
|
|
1760000
|
unkown image
|
page readonly
|
|
|
|
7FF56A6C4000
|
unkown image
|
page readonly
|
|
|
|
68E9C7E000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A20000
|
unkown image
|
page readonly
|
|
|
|
19232500000
|
unkown
|
page read and write
|
|
|
|
2AA0BD82000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF52167A000
|
unkown image
|
page readonly
|
|
|
|
7FF5B938E000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD0C000
|
unkown
|
page read and write
|
|
|
|
7F392000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
28F5000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5215E4000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF521590000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
2AA0BD81000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B508000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5DA07C000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD4F000
|
unkown
|
page read and write
|
|
|
|
7DF57F800000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
68E9EFF000
|
unkown
|
page read and write
|
|
|
|
34BE000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD7C000
|
unkown
|
page read and write
|
|
|
|
4760000
|
heap private
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2533DFF0000
|
unkown
|
page read and write
|
|
|
|
2F05000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7D96B7E000
|
unkown
|
page read and write
|
|
|
|
7FF5B94C7000
|
unkown image
|
page readonly
|
|
|
|
353A000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2EEB000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2291BC54000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2ED5000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2E1C000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD70000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
FD4E4FD000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0B4EA000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E056000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2533E04E000
|
unkown
|
page read and write
|
|
|
|
2AA0B250000
|
heap private
|
page read and write
|
|
|
|
6E050000
|
unkown image
|
page readonly
|
|
|
|
7FF5B957A000
|
unkown image
|
page readonly
|
|
|
|
7FF4FF264000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF56A6DE000
|
unkown image
|
page readonly
|
|
|
|
7FF56A764000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
1010000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
6E055000
|
unkown image
|
page read and write
|
|
|
|
2AA0B3B0000
|
unkown
|
page read and write
|
|
|
|
34F2000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0C26A000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7B1000
|
unkown
|
page read and write
|
|
|
|
7FF5B94EF000
|
unkown image
|
page readonly
|
|
|
|
7FF5214F4000
|
unkown image
|
page readonly
|
|
|
|
2533DFA0000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
6E5B0000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD71000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7DF57F802000
|
unkown image
|
page readonly
|
|
|
|
6E055000
|
unkown image
|
page read and write
|
|
|
|
2F3B000
|
unkown image
|
page readonly
|
|
|
|
7FF4FEDD6000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E051000
|
unkown image
|
page execute read
|
|
|
|
2BDCF850000
|
heap default
|
page read and write
|
|
|
|
2EAC000
|
unkown image
|
page readonly
|
|
|
|
A7C000
|
unkown image
|
page readonly
|
|
|
|
2AA0C202000
|
unkown
|
page read and write
|
|
|
|
7FF5DA0E4000
|
unkown image
|
page readonly
|
|
|
|
34D8000
|
unkown
|
page read and write
|
|
|
|
7FF4FEF90000
|
unkown image
|
page readonly
|
|
|
|
BC0000
|
unkown image
|
page readonly
|
|
|
|
660000
|
unkown
|
page read and write
|
|
|
|
D80000
|
heap private
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B9509000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7DF514380000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BDA9000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
3940000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
E20B579000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B92D1000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
E20B6F7000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E05E000
|
unkown image
|
page execute read
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2F0F000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5DA090000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF56A772000
|
unkown image
|
page readonly
|
|
|
|
19232479000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
78D000
|
unkown
|
page read and write
|
|
|
|
7FF5B924B000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
1923243C000
|
unkown
|
page read and write
|
|
|
|
7FF5B90A5000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
353B000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0B280000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
19232484000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
10AB000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
FD4E6FB000
|
unkown
|
page read and write
|
|
|
|
2F3B000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7D96BFE000
|
unkown
|
page read and write
|
|
|
|
2AA0BD96000
|
unkown
|
page read and write
|
|
|
|
7FF5215FE000
|
unkown image
|
page readonly
|
|
|
|
2952000
|
unkown image
|
page readonly
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
19232449000
|
unkown
|
page read and write
|
|
|
|
2AA0BD72000
|
unkown
|
page read and write
|
|
|
|
7FF5DA08A000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF56A685000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2ECD000
|
unkown image
|
page readonly
|
|
|
|
6E09D000
|
unkown image
|
page read and write
|
|
|
|
2BDCF870000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
477E000
|
unkown
|
page read and write
|
|
|
|
7FF5DA182000
|
unkown image
|
page readonly
|
|
|
|
7D970F7000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
unkown image
|
page read and write
|
|
|
|
2AA0BDAA000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD4D000
|
unkown
|
page read and write
|
|
|
|
29B4000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2BDCFAE0000
|
heap private
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2F0D000
|
unkown image
|
page readonly
|
|
|
|
1150000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5213E1000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2291BD08000
|
unkown
|
page read and write
|
|
|
|
2AA0B4E7000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2FA8000
|
unkown image
|
page readonly
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
7DF57F7F0000
|
unkown image
|
page readonly
|
|
|
|
2AA0B516000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2533DF70000
|
unkown image
|
page readonly
|
|
|
|
6E2E0000
|
unkown image
|
page readonly
|
|
|
|
4BEE000
|
unkown
|
page read and write
|
|
|
|
2291BA60000
|
unkown image
|
page readonly
|
|
|
|
5700000
|
heap private
|
page read and write
|
|
|
|
2BDCF881000
|
unkown
|
page read and write
|
|
|
|
2AA0B513000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0B400000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
290B000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
FD4E97F000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
29C8000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C65000
|
unkown image
|
page readonly
|
|
|
|
7DF514382000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
B31000
|
heap default
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B9432000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2F05000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD74000
|
unkown
|
page read and write
|
|
|
|
2AA0C203000
|
unkown
|
page read and write
|
|
|
|
2AA0BD74000
|
unkown
|
page read and write
|
|
|
|
353A000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B8F6E000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
6E050000
|
unkown image
|
page readonly
|
|
|
|
2AA0BDA5000
|
unkown
|
page read and write
|
|
|
|
2D87000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD88000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
19232A50000
|
unkown image
|
page readonly
|
|
|
|
2933000
|
unkown image
|
page readonly
|
|
|
|
FCA000
|
unkown image
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
3529000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
1110000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2533E000000
|
unkown
|
page read and write
|
|
|
|
7FF5B9581000
|
unkown image
|
page readonly
|
|
|
|
7FF5B8FF2000
|
unkown image
|
page readonly
|
|
|
|
3320000
|
unkown
|
page read and write
|
|
|
|
7FF56A680000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2DE2000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF56A6AF000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD99000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B9495000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
5B4E000
|
unkown
|
page read and write
|
|
|
|
7DF5EF212000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD74000
|
unkown
|
page read and write
|
|
|
|
FD4EA7F000
|
unkown
|
page read and write
|
|
|
|
E3D000
|
unkown
|
page read and write
|
|
|
|
7F380000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
68E9D7B000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD7E000
|
unkown
|
page read and write
|
|
|
|
4AEE000
|
unkown
|
page read and write
|
|
|
|
7F3D0000
|
unkown image
|
page readonly
|
|
|
|
FA0000
|
unkown
|
page execute and read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7F252000
|
unkown image
|
page readonly
|
|
|
|
7DF5CE612000
|
unkown image
|
page readonly
|
|
|
|
7FF52157C000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6B0000
|
unkown image
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2919000
|
unkown image
|
page readonly
|
|
|
|
4FFA000
|
heap private
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B9065000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B9393000
|
unkown image
|
page readonly
|
|
|
|
1160000
|
unkown
|
page execute and read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B260000
|
unkown image
|
page readonly
|
|
|
|
5170000
|
heap private
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
19232350000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B4AC000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2F36000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page execute and read and write
|
|
|
|
7FF4FF163000
|
unkown image
|
page readonly
|
|
|
|
2AA0B429000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
28D3000
|
unkown image
|
page readonly
|
|
|
|
2DCC000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD80000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2F81000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
55EB000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
74A000
|
heap default
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8D000
|
unkown
|
page read and write
|
|
|
|
7FF5D9E07000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9430000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
EBEA07E000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BDB2000
|
unkown
|
page read and write
|
|
|
|
7FF5D9E10000
|
unkown image
|
page readonly
|
|
|
|
2291BC66000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
6E09D000
|
unkown image
|
page read and write
|
|
|
|
2291BD02000
|
unkown
|
page read and write
|
|
|
|
1010000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2533E802000
|
unkown
|
page read and write
|
|
|
|
2AA0BD86000
|
unkown
|
page read and write
|
|
|
|
293F000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9371000
|
unkown image
|
page readonly
|
|
|
|
7FF5B93E3000
|
unkown image
|
page readonly
|
|
|
|
7D96EFC000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
31E0000
|
unkown image
|
page readonly
|
|
|
|
7F3A0000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD88000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF52158E000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2291BC68000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD23000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
29D3000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E053000
|
unkown image
|
page readonly
|
|
|
|
2AA0B600000
|
unkown image
|
page readonly
|
|
|
|
7DF514390000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF520D6F000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0B45C000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
27FA000
|
unkown image
|
page readonly
|
|
|
|
6E055000
|
unkown image
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
35B0000
|
unkown image
|
page readonly
|
|
|
|
7DF4345D0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
FB0000
|
unkown
|
page read and write
|
|
|
|
7FF5B94DA000
|
unkown image
|
page readonly
|
|
|
|
FD4E877000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
E20B5FF000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF27E000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD97000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
EBE9F79000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7DF514392000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11CB000
|
unkown
|
page read and write
|
|
|
|
292D000
|
unkown image
|
page readonly
|
|
|
|
7FF5215A7000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9FF4000
|
unkown image
|
page readonly
|
|
|
|
34F3000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2BDCF780000
|
unkown image
|
page readonly
|
|
|
|
6E5AE000
|
unkown image
|
page write copy
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2F32000
|
unkown image
|
page readonly
|
|
|
|
38FB000
|
heap private
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5D9FDD000
|
unkown image
|
page readonly
|
|
|
|
5C0F000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF1FC000
|
unkown image
|
page readonly
|
|
|
|
47BF000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C50000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD97000
|
unkown
|
page read and write
|
|
|
|
7FF4FF10B000
|
unkown image
|
page readonly
|
|
|
|
19232320000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD7E000
|
unkown
|
page read and write
|
|
|
|
670000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD9A000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
4C0000
|
unkown image
|
page readonly
|
|
|
|
7F140000
|
unkown image
|
page readonly
|
|
|
|
6E05E000
|
unkown image
|
page execute read
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF56A6D4000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2FB3000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD92000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7F250000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF521156000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B92E1000
|
unkown image
|
page readonly
|
|
|
|
2E9B000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
1248000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
FB0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BDA6000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D92000
|
unkown image
|
page readonly
|
|
|
|
2533E029000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
FD4E47E000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8D000
|
unkown
|
page read and write
|
|
|
|
7D96AFB000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF0D1000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
19232457000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
75C000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7D971FF000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
7DF5CE620000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9050000
|
unkown image
|
page readonly
|
|
|
|
2EB3000
|
unkown image
|
page readonly
|
|
|
|
7F260000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2BDCF881000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5DA0FE000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2D1B000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
EBE9EFF000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7C2000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2D20000
|
heap private
|
page read and write
|
|
|
|
2AA0BD88000
|
unkown
|
page read and write
|
|
|
|
2291BC8A000
|
unkown
|
page read and write
|
|
|
|
3505000
|
unkown
|
page read and write
|
|
|
|
1258000
|
heap default
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF254000
|
unkown image
|
page readonly
|
|
|
|
5BCE000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7F3C0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2DE7000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8B000
|
unkown
|
page read and write
|
|
|
|
2291C402000
|
unkown
|
page read and write
|
|
|
|
2291BD13000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
FD4E77E000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
1180000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
3930000
|
unkown image
|
page readonly
|
|
|
|
5AFB000
|
heap private
|
page read and write
|
|
|
|
19232340000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
19232502000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF56A6F9000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2F0D000
|
unkown image
|
page readonly
|
|
|
|
7DF5143A0000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2BDCF881000
|
unkown
|
page read and write
|
|
|
|
11D0000
|
heap default
|
page read and write
|
|
|
|
EBE9E7F000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
3128000
|
heap private
|
page read and write
|
|
|
|
2FB3000
|
unkown image
|
page readonly
|
|
|
|
2DE2000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
29F000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD79000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD80000
|
unkown
|
page read and write
|
|
|
|
4D60000
|
heap private
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
640000
|
unkown
|
page read and write
|
|
|
|
55AC000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD83000
|
unkown
|
page read and write
|
|
|
|
7FF5B9056000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF569FD7000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
unkown image
|
page readonly
|
|
|
|
2291BC64000
|
unkown
|
page read and write
|
|
|
|
6A0000
|
heap private
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5DA095000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11A0000
|
unkown image
|
page readonly
|
|
|
|
7DF57F7F2000
|
unkown image
|
page readonly
|
|
|
|
7FD40000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD95000
|
unkown
|
page read and write
|
|
|
|
5158000
|
heap private
|
page read and write
|
|
|
|
EBE9FFE000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7F392000
|
unkown image
|
page readonly
|
|
|
|
2F07000
|
unkown image
|
page readonly
|
|
|
|
19232310000
|
heap private
|
page read and write
|
|
|
|
2AA0BDA8000
|
unkown
|
page read and write
|
|
|
|
4AB000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7F252000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD8A000
|
unkown
|
page read and write
|
|
|
|
2AA0B47A000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
3538000
|
unkown
|
page read and write
|
|
|
|
7FF4FF28D000
|
unkown image
|
page readonly
|
|
|
|
AD9000
|
heap default
|
page read and write
|
|
|
|
2AA0BD99000
|
unkown
|
page read and write
|
|
|
|
630000
|
unkown
|
page execute and read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
68E992B000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF536702000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
4B2F000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FE42000
|
unkown image
|
page readonly
|
|
|
|
7DF57F802000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
48AE000
|
unkown
|
page read and write
|
|
|
|
2F21000
|
unkown image
|
page readonly
|
|
|
|
27A7000
|
unkown image
|
page readonly
|
|
|
|
7FF521310000
|
unkown image
|
page readonly
|
|
|
|
28FC000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
192323A0000
|
unkown
|
page read and write
|
|
|
|
2291BC83000
|
unkown
|
page read and write
|
|
|
|
34D9000
|
unkown
|
page read and write
|
|
|
|
2291BC69000
|
unkown
|
page read and write
|
|
|
|
7F2B0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
68EA0FF000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2DCC000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD6B000
|
unkown
|
page read and write
|
|
|
|
7FF52148E000
|
unkown image
|
page readonly
|
|
|
|
2AA0BDA3000
|
unkown
|
page read and write
|
|
|
|
2FA8000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FE40000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FEDD0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD87000
|
unkown
|
page read and write
|
|
|
|
7FF56A76A000
|
unkown image
|
page readonly
|
|
|
|
2800000
|
unkown image
|
page readonly
|
|
|
|
7FF5D9F8E000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF521682000
|
unkown image
|
page readonly
|
|
|
|
2C6B000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5DA0BF000
|
unkown image
|
page readonly
|
|
|
|
2AA0B2B0000
|
heap default
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BA60000
|
unkown image
|
page write copy
|
|
|
|
7FF5B8FFE000
|
unkown image
|
page readonly
|
|
|
|
68E9E7B000
|
unkown
|
page read and write
|
|
|
|
2AA0BD96000
|
unkown
|
page read and write
|
|
|
|
2AA0BD74000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2927000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF56A68B000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
504F000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2FB3000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF23F000
|
unkown image
|
page readonly
|
|
|
|
7FF521471000
|
unkown image
|
page readonly
|
|
|
|
2291BC3C000
|
unkown
|
page read and write
|
|
|
|
E20B8FA000
|
unkown
|
page read and write
|
|
|
|
A95000
|
heap default
|
page read and write
|
|
|
|
2BDCFCF0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5DA0D4000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B460000
|
unkown
|
page read and write
|
|
|
|
A50000
|
unkown
|
page execute and read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
19232451000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7F390000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
6E051000
|
unkown image
|
page execute read
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2FB3000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
FCC000
|
unkown image
|
page readonly
|
|
|
|
7FF5DA09B000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
1923242A000
|
unkown
|
page read and write
|
|
|
|
6E050000
|
unkown image
|
page readonly
|
|
|
|
34B0000
|
heap default
|
page read and write
|
|
|
|
2533DF70000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E09F000
|
unkown image
|
page execute and read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5DA181000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
3502000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2E92000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2EA9000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
ABA000
|
heap default
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD81000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF4FF301000
|
unkown image
|
page readonly
|
|
|
|
510000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF514392000
|
unkown image
|
page readonly
|
|
|
|
2533E100000
|
unkown
|
page read and write
|
|
|
|
486F000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF4FF247000
|
unkown image
|
page readonly
|
|
|
|
C4D000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2533DFD0000
|
unkown image
|
page readonly
|
|
|
|
2BDCF866000
|
unkown
|
page read and write
|
|
|
|
2AA0BD9B000
|
unkown
|
page read and write
|
|
|
|
7FF5B94BC000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5B949B000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11B0000
|
heap private
|
page read and write
|
|
|
|
7FF5B8DE3000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2DDE000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BDB1000
|
unkown
|
page read and write
|
|
|
|
7FF5B92C6000
|
unkown image
|
page readonly
|
|
|
|
4C00000
|
heap private
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E5B0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B4DF000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5DA0A7000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF521609000
|
unkown image
|
page readonly
|
|
|
|
7B0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF5EF202000
|
unkown image
|
page readonly
|
|
|
|
7FE40000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BDAA000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD86000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2F85000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
1248000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
4D38000
|
heap private
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5D9F71000
|
unkown image
|
page readonly
|
|
|
|
1030000
|
heap default
|
page read and write
|
|
|
|
2AA0B413000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2910000
|
unkown image
|
page readonly
|
|
|
|
2AA0BDA3000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7DF5EF210000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD81000
|
unkown
|
page read and write
|
|
|
|
7FF5215F8000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
2AA0BDBA000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E051000
|
unkown image
|
page execute read
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B945F000
|
unkown image
|
page readonly
|
|
|
|
2EF9000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
46C000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B9333000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B947A000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF56A6AC000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7F3C2000
|
unkown image
|
page readonly
|
|
|
|
7DF5CE620000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
28BB000
|
unkown image
|
page readonly
|
|
|
|
530000
|
unkown image
|
page readonly
|
|
|
|
2AA0C202000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2EDC000
|
unkown image
|
page readonly
|
|
|
|
3390000
|
heap default
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD98000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5DA106000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
19232C02000
|
unkown
|
page read and write
|
|
|
|
1190000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
FB0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2F94000
|
unkown image
|
page readonly
|
|
|
|
2533E102000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
E20B7FF000
|
unkown
|
page read and write
|
|
|
|
28CC000
|
unkown image
|
page readonly
|
|
|
|
7FF56A6EE000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF15D000
|
unkown image
|
page readonly
|
|
|
|
68E99AD000
|
unkown
|
page read and write
|
|
|
|
7FF5B8C60000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2BDCFE70000
|
unkown image
|
page readonly
|
|
|
|
29A5000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown image
|
page readonly
|
|
|
|
2AA0BDB3000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2291BC57000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF521674000
|
unkown image
|
page readonly
|
|
|
|
7DF536700000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD82000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7DF5CE602000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
F3B000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page read and write
|
|
|
|
2F13000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7F3C2000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
2AA0BD86000
|
unkown
|
page read and write
|
|
|
|
2AA0BD81000
|
unkown
|
page read and write
|
|
|
|
A00000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7F3B2000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0C21E000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF56A6B8000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9256000
|
unkown image
|
page readonly
|
|
|
|
2AA0C21E000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF5B90A7000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2291BC5A000
|
unkown
|
page read and write
|
|
|
|
4FFB000
|
heap private
|
page read and write
|
|
|
|
2EF0000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2533DF50000
|
unkown image
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2BDCFAF0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
7F250000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2941000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7F260000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B9574000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
6E053000
|
unkown image
|
page readonly
|
|
|
|
6E05E000
|
unkown image
|
page execute read
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
FC1000
|
unkown image
|
page execute read
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
28B2000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BD99000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2E9B000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B933A000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
6E5B0000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
19232400000
|
unkown
|
page read and write
|
|
|
|
2AA0BC02000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF521451000
|
unkown image
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
29A1000
|
unkown image
|
page readonly
|
|
|
|
1923244A000
|
unkown
|
page read and write
|
|
|
|
114C000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5215BC000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
EBE9BFA000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2AA0B468000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
2AA0BDAA000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2BDCF800000
|
unkown image
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
D4C000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4FF302000
|
unkown image
|
page readonly
|
|
|
|
2291BA50000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF5D9FE3000
|
unkown image
|
page readonly
|
|
|
|
2AA0BD84000
|
unkown
|
page read and write
|
|
|
|
2AA0BD95000
|
unkown
|
page read and write
|
|
|
|
2AA0BD93000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
11C0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
5170000
|
unkown image
|
page readonly
|
|
|
|
3395000
|
heap default
|
page read and write
|
|
|
|
FB0000
|
unkown
|
page read and write
|
|
|
|
7FF4FF20E000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
There are 2266 hidden memdumps, click here to show them.