Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
2zTgaLRFkL.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\www.msn[2].xml
|
ASCII text, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\QALADACS\contextual.media[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{8D788003-4BE3-11EC-90E5-ECF4BB570DC9}.dat
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{8D788005-4BE3-11EC-90E5-ECF4BB570DC9}.dat
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\264bf325-c7e4-4939-8912-2424a7abe532[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AA7XCQ3[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAPFmi4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAPQoxX[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQVPm6[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQW0Fs[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQXXJy[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQXevg[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQXiy5[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQXrMl[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQY2pC[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQYCIb[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQYUQR[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQYV96[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQYVTM[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQYvGE[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQZ3BL[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAQZ8Vf[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\AAud6Gv[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BB1ftEY0[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BBMW3y8[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BBUZVvV[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BBVuddh[2].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BBY7ARN[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\a8a064[1].gif
|
GIF image data, version 89a, 28 x 28
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\otSDKStub[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tag[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAKp8YX[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAMqFmF[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAPwesU[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAQXYTC[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAQY08U[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAQYPIL[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAQYSOX[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAQYULr[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAQYrvs[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\AAQYvQT[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\BB10MkbM[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\BB6Ma4a[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\BB7hg4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\cfdbd9[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\checksync[3].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\checksync[4].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\checksync[5].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\de-ch[2].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\iab2Data[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\nrrV52461[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\nrrV52461[2].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\otBannerSdk[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\otTCF-ie[2].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\17-361657-68ddb2ab[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\4996b9[1].woff
|
Web Open Font Format, TrueType, length 45633, version 1.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\55a804ab-e5c6-4b97-9319-86263d365d28[2].json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAOdxvW[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAQBdIv[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAQCmUS[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAQT0oN[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAQVtAu[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAQY5wp[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAQYUU3[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAQYYTT[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAQYqMl[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AAzb5EX[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\BB1fdtSt[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\a5ea21[2].ico
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\auction[2].htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\favicon[1].ico
|
MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\medianet[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\medianet[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\otCommonStyles[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\otFlat[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\otPcCenter[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\px[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\2d-0e97d4-185735b[1].css
|
UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\52-478955-68ddb2ab[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAOr6Ee[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAQTQg3[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAQXTtj[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAQY2dE[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAQY4m2[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAQY5UV[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAQY8Zl[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAQYCwH[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAQYSTg[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAQYWm8[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAQYd7s[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AAycUpK[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BB1aXBV1[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BB1cEP3G[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BB1cG73h[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BB1kc8s[1].png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BB7gRE[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BB7hjL[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BBPfCZL[1].png
|
GIF image data, version 89a, 50 x 50
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BBX2afX[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\de-ch[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\e151e5[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\jquery-2.1.1.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFA1E2BE88D585CFB5.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFBB4D173838662490.TMP
|
data
|
dropped
|
|
There are 106 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe "C:\Users\user\Desktop\2zTgaLRFkL.dll"
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32.exe /s C:\Users\user\Desktop\2zTgaLRFkL.dll
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\2zTgaLRFkL.dll",#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\2zTgaLRFkL.dll,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\2zTgaLRFkL.dll,abetfoehywujav
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\2zTgaLRFkL.dll,abjqkqaxstop
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\2zTgaLRFkL.dll",#1
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
C:\Program Files\Internet Explorer\iexplore.exe
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:764 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://assets.msn.com/staticsb/statics/latest/oneTrust/1.2/consent/55a804ab-e5c6-4b97-9319-86263d36
|
unknown
|
|
|
|
http://searchads.msn.net/.cfm?&&kp=1&
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/coronareisen
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/jacqueline-hofer-tritt-doch-nicht-zur-wiederwahl-an/ar-AAQTAnf?
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/sie-bew%c3%a4ltigen-alltagsstress-und-todesszenen/ar-AAQUall?oc
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_promotionalstripe_na
|
unknown
|
|
|
|
https://onedrive.live.com;Fotos
|
unknown
|
|
|
|
https://www.msn.com/de-ch/sport?ocid=StripeOCID
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
|
unknown
|
|
|
|
https://www.msn.com/de-ch/sport/fussball/der-fcz-zittert-und-steht-doch-ganz-oben/ar-AAQWrxt?ocid=hp
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/mehrere-tausend-menschen-demonstrieren-in-z%c3%bcrich/ar-AAQWtO
|
unknown
|
|
|
|
http://ogp.me/ns/fb#
|
unknown
|
|
|
|
https://www.botman.ninja/privacy-policy
|
unknown
|
|
|
|
https://outlook.live.com/mail/deeplink/compose;Kalender
|
unknown
|
|
|
|
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
|
unknown
|
|
|
|
https://www.queryclick.com/privacy-policy
|
unknown
|
|
|
|
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/t%c3%b6fffahrer-st%c3%bcrzt-nach-verfolgungsjagd-mit-der-polize
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/t%c3%b6fffahrer-liefert-sich-wilde-verfolgungsjagd-mit-der-poli
|
unknown
|
|
|
|
https://ir2.beap.gemini.yahoo.com/mbcsc?bv=1.0.0&es=1pthyrgGIS_CP6RinMZ9JLQidWOhQxu_ti3Yy1VE1q4K
|
unknown
|
|
|
|
https://btloader.com/tag?o=6208086025961472&upapi=true
|
172.67.70.134
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://www.skype.com/
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=245744&a=3064090&g=24545562
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/regional
|
unknown
|
|
|
|
https://srtb.msn.com:443/notify/viewedg?rid=89e9c689e4e442bc8decc0870f35ae96&r=infopane&i=1&
|
unknown
|
|
|
|
https://www.stroeer.de/werben-mit-stroeer/onlinewerbung/programmatic-data/sdi-datenschutz-b2c
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
|
unknown
|
|
|
|
https://amzn.to/2TTxhNg
|
unknown
|
|
|
|
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
|
unknown
|
|
|
|
https://client-s.gateway.messenger.live.com
|
unknown
|
|
|
|
https://secure.adnxs.com/clktrb?id=764680&t=1
|
unknown
|
|
|
|
https://www.msn.com/de-ch/
|
unknown
|
|
|
|
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
|
|
|
https://www.msn.com/de-ch
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
|
unknown
|
|
|
|
https://twitter.com/i/notifications;Ich
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
|
unknown
|
|
|
|
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
|
142.250.203.102
|
|
|
|
https://nextmillennium.io/privacy-policy/
|
unknown
|
|
|
|
https://silvermob.com/privacy
|
unknown
|
|
|
|
https://ad-delivery.net/px.gif?ch=1&e=0.4482105559414631
|
104.26.3.70
|
|
|
|
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://ogp.me/ns#
|
unknown
|
|
|
|
https://play.google.com/store/apps/details?id=com.microsoft.amp.apps.bingnews&hl=de-ch&refer
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;OneDrive-App
|
unknown
|
|
|
|
https://www.skype.com/de
|
unknown
|
|
|
|
https://www.tippsundtricks.co/lifehacks/schwamm-kuhlschrank/?utm_campaign=DECH-schwamm&utm_sourc
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
|
unknown
|
|
|
|
https://tools.applemediaservices.com/api/badges/download-on-the-app-store/black/de-de?"
|
unknown
|
|
|
|
https://www.skype.com/de/download-skype
|
unknown
|
|
|
|
https://beap.gemini.yahoo.com/mbclk?bv=1.0.0&es=MJ_W730GIS_QkG6Z3slmnzoRpVQc.g8KNhy8thvyLfijZDMu
|
unknown
|
|
|
|
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
|
|
|
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
|
unknown
|
|
|
|
https://onedrive.live.com;OneDrive-App
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/bei-den-%c3%a4rzten-schauen-die-beh%c3%b6rden-einfach-weg/ar-AA
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=295926&a=3064090&g=24886692
|
unknown
|
|
|
|
https://www.google.com/chrome/static/images/favicons/favicon-16x16.png
|
unknown
|
|
|
|
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
|
unknown
|
|
|
|
https://policies.oath.com/us/en/oath/privacy/index.html
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/googleData.json
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=195119&a=3064090&g=25021476
|
unknown
|
|
|
|
https://outlook.com/
|
unknown
|
|
|
|
https://play.google.com/intl/en_us/badges/images/generic/de_badge_web_generic.png"
|
unknown
|
|
|
|
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
|
|
|
https://www.stroeer.com/fileadmin/com/StroeerDSP_deviceStorage.json
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iabData.json
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;Aktuelle
|
unknown
|
|
|
|
https://cdn.flurry.com/adTemplates/templates/htmls/clips.html"
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
|
unknown
|
|
|
|
https://www.ebay.ch/?mkcid=1&mkrid=5222-53480-19255-0&siteid=193&campid=5338626668&t
|
unknown
|
|
|
|
https://doceree.com/.well-known/deviceStorage.json
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://web.vortex.data.msn.com/collect/v1/t.gif?name=%27Ms.Webi.PageView%27&ver=%272.1%27&a
|
unknown
|
|
|
|
https://www.msn.com/de-ch/sport/other/runter-rauf-runter-wie-gc-in-genf-vom-weg-abkommt/ar-AAQYdQe?o
|
unknown
|
|
|
|
https://www.bidstack.com/privacy-policy/
|
unknown
|
|
|
|
https://onedrive.live.com/about/en/download/
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/defektes-paket-mit-radioaktivem-inhalt-in-swiss-flieger-entdeck
|
unknown
|
|
|
|
https://s.yimg.com/lo/api/res/1.2/CHE6ysqAlt744fnx0c7isA--~A/Zmk9ZmlsbDt3PTYyMjtoPTM2ODthcHBpZD1nZW1
|
unknown
|
|
|
|
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_mestripe_logo_d
|
unknown
|
|
|
|
https://twitter.com/
|
unknown
|
|
|
|
https://www.stroeer.de/ssp-datenschutz
|
unknown
|
|
|
|
https://optimise-it.de/datenschutz
|
unknown
|
|
|
|
https://smartyads.com/privacy-policy
|
unknown
|
|
|
|
https://www.onlineumfragen.com/3index_2010_agb.cfm
|
unknown
|
|
|
|
https://outlook.live.com/calendar
|
unknown
|
|
|
|
https://onedrive.live.com/#qt=mru
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
contextual.media.net
|
2.18.160.23
|
|
|
|
dart.l.doubleclick.net
|
142.250.203.102
|
|
|
|
hblg.media.net
|
2.18.160.23
|
|
|
|
lg3.media.net
|
2.18.160.23
|
|
|
|
btloader.com
|
172.67.70.134
|
|
|
|
ad-delivery.net
|
104.26.3.70
|
|
|
|
assets.msn.com
|
unknown
|
|
|
|
web.vortex.data.msn.com
|
unknown
|
|
|
|
www.msn.com
|
unknown
|
|
|
|
ad.doubleclick.net
|
unknown
|
|
|
|
srtb.msn.com
|
unknown
|
|
|
|
cvision.media.net
|
unknown
|
|
There are 2 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
104.26.3.70
|
ad-delivery.net
|
United States
|
|
|
|
142.250.203.102
|
dart.l.doubleclick.net
|
United States
|
|
|
|
172.67.70.134
|
btloader.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
|
{8D788003-4BE3-11EC-90E5-ECF4BB570DC9}
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Blocked
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingLastYMD
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingBitmap
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingRandomizedBitmap
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DomainSuggestion
|
NextUpdateDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\www.msn.com
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\msn.com
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\msn.com
|
NumberOfSubdomains
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
There are 84 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
4620000
|
unkown
|
page execute and read and write
|
|
|
|
4600000
|
unkown
|
page read and write
|
|
|
|
2ED0000
|
stack
|
page execute and read and write
|
|
|
|
2EB0000
|
stack
|
page read and write
|
|
|
|
16B99A13000
|
unkown
|
page read and write
|
|
|
|
21CB735A000
|
unkown
|
page read and write
|
|
|
|
21CB7361000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5031C0000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC55000
|
unkown
|
page read and write
|
|
|
|
16B99B02000
|
unkown
|
page read and write
|
|
|
|
21CB7300000
|
unkown
|
page read and write
|
|
|
|
7DF577710000
|
unkown image
|
page readonly
|
|
|
|
21CB7335000
|
unkown
|
page read and write
|
|
|
|
7FF5B415F000
|
unkown image
|
page readonly
|
|
|
|
7FF567D0D000
|
unkown image
|
page readonly
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
21CB7359000
|
unkown
|
page read and write
|
|
|
|
2807000
|
unkown image
|
page readonly
|
|
|
|
26E5000
|
unkown image
|
page readonly
|
|
|
|
275B000
|
unkown image
|
page readonly
|
|
|
|
103672C000
|
unkown
|
page read and write
|
|
|
|
7FF5D1A94000
|
unkown image
|
page readonly
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
2AC07C000
|
stack
|
page read and write
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
16B99A8E000
|
unkown
|
page read and write
|
|
|
|
4665BFF000
|
stack
|
page read and write
|
|
|
|
7FE20000
|
unkown image
|
page readonly
|
|
|
|
221BC870000
|
unkown image
|
page readonly
|
|
|
|
21CB7371000
|
unkown
|
page read and write
|
|
|
|
7DF57D602000
|
unkown image
|
page readonly
|
|
|
|
7FF54EE57000
|
unkown image
|
page readonly
|
|
|
|
277D000
|
unkown image
|
page readonly
|
|
|
|
7FD40000
|
unkown image
|
page readonly
|
|
|
|
7DF51C510000
|
unkown image
|
page readonly
|
|
|
|
7FF567C49000
|
unkown image
|
page readonly
|
|
|
|
29866A50000
|
heap default
|
page read and write
|
|
|
|
1E7DFC74000
|
unkown
|
page read and write
|
|
|
|
21CB7365000
|
unkown
|
page read and write
|
|
|
|
7FF5D1BE3000
|
unkown image
|
page readonly
|
|
|
|
21CB7A9E000
|
unkown
|
page read and write
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
16B9F240000
|
unkown
|
page read and write
|
|
|
|
21CB7A78000
|
unkown
|
page read and write
|
|
|
|
28C9000
|
unkown image
|
page readonly
|
|
|
|
21CB7375000
|
unkown
|
page read and write
|
|
|
|
21CB735E000
|
unkown
|
page read and write
|
|
|
|
7FF5D19FF000
|
unkown image
|
page readonly
|
|
|
|
7DF43A190000
|
unkown image
|
page readonly
|
|
|
|
21CB7307000
|
unkown
|
page read and write
|
|
|
|
29866C4D000
|
unkown
|
page read and write
|
|
|
|
7FF506B5A000
|
unkown image
|
page readonly
|
|
|
|
7FF526678000
|
unkown image
|
page readonly
|
|
|
|
21CB7396000
|
unkown
|
page read and write
|
|
|
|
21CB6B13000
|
unkown
|
page read and write
|
|
|
|
7F600000
|
unkown image
|
page readonly
|
|
|
|
7FF5069D6000
|
unkown image
|
page readonly
|
|
|
|
298669F0000
|
heap private
|
page read and write
|
|
|
|
21CB7332000
|
unkown
|
page read and write
|
|
|
|
474E000
|
unkown
|
page read and write
|
|
|
|
27B5000
|
unkown image
|
page readonly
|
|
|
|
7FF5268C7000
|
unkown image
|
page readonly
|
|
|
|
21CB6ED0000
|
unkown image
|
page readonly
|
|
|
|
21CB7392000
|
unkown
|
page read and write
|
|
|
|
16B9ED70000
|
unkown
|
page read and write
|
|
|
|
547E2FB000
|
stack
|
page read and write
|
|
|
|
FC636FF000
|
stack
|
page read and write
|
|
|
|
21CB7350000
|
unkown
|
page read and write
|
|
|
|
21CB7A1F000
|
unkown
|
page read and write
|
|
|
|
7FF5D1858000
|
unkown image
|
page readonly
|
|
|
|
221BC302000
|
unkown
|
page read and write
|
|
|
|
21CB7330000
|
unkown
|
page read and write
|
|
|
|
2EF0000
|
unkown image
|
page readonly
|
|
|
|
1BAC71A0000
|
unkown image
|
page readonly
|
|
|
|
21CB7334000
|
unkown
|
page read and write
|
|
|
|
7FF5D1EAF000
|
unkown image
|
page readonly
|
|
|
|
73211000
|
unkown image
|
page execute read
|
|
|
|
16B9A313000
|
unkown
|
page read and write
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown image
|
page readonly
|
|
|
|
21CB739F000
|
unkown
|
page read and write
|
|
|
|
B9FD3FE000
|
stack
|
page read and write
|
|
|
|
2941000
|
unkown image
|
page readonly
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
21CB7130000
|
unkown
|
page read and write
|
|
|
|
276C000
|
unkown image
|
page readonly
|
|
|
|
21CB7A2E000
|
unkown
|
page read and write
|
|
|
|
16B99840000
|
unkown image
|
page read and write
|
|
|
|
21CB7329000
|
unkown
|
page read and write
|
|
|
|
7FF4ED576000
|
unkown image
|
page readonly
|
|
|
|
7FA80000
|
unkown image
|
page readonly
|
|
|
|
1E7DFA60000
|
unkown image
|
page readonly
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
7FF54F089000
|
unkown image
|
page readonly
|
|
|
|
7FF5269BE000
|
unkown image
|
page readonly
|
|
|
|
7FF5268B3000
|
unkown image
|
page readonly
|
|
|
|
2794000
|
unkown image
|
page readonly
|
|
|
|
7DF5C9A60000
|
unkown image
|
page readonly
|
|
|
|
2711000
|
unkown image
|
page readonly
|
|
|
|
7FED2000
|
unkown image
|
page readonly
|
|
|
|
21CB7354000
|
unkown
|
page read and write
|
|
|
|
10CE000
|
unkown
|
page read and write
|
|
|
|
27F1000
|
unkown image
|
page readonly
|
|
|
|
221BC229000
|
unkown
|
page read and write
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
21CB735E000
|
unkown
|
page read and write
|
|
|
|
7FF5B40C5000
|
unkown image
|
page readonly
|
|
|
|
29866C69000
|
unkown
|
page read and write
|
|
|
|
7FF5069A2000
|
unkown image
|
page readonly
|
|
|
|
7DF57D612000
|
unkown image
|
page readonly
|
|
|
|
3580000
|
unkown image
|
page readonly
|
|
|
|
7FF561DFB000
|
unkown image
|
page readonly
|
|
|
|
16B9F0DF000
|
unkown
|
page read and write
|
|
|
|
16B99AFE000
|
unkown
|
page read and write
|
|
|
|
21CB7307000
|
unkown
|
page read and write
|
|
|
|
21CB7AE9000
|
unkown
|
page read and write
|
|
|
|
7DF57D612000
|
unkown image
|
page readonly
|
|
|
|
2AC0000
|
heap default
|
page read and write
|
|
|
|
7FF5B3D04000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3CDA000
|
unkown image
|
page readonly
|
|
|
|
21CB7349000
|
unkown
|
page read and write
|
|
|
|
7DF5031B0000
|
unkown image
|
page readonly
|
|
|
|
7FF54EFCE000
|
unkown image
|
page readonly
|
|
|
|
29867190000
|
unkown image
|
page readonly
|
|
|
|
7FF506BCF000
|
unkown image
|
page readonly
|
|
|
|
288D000
|
unkown image
|
page readonly
|
|
|
|
2D9B000
|
unkown
|
page read and write
|
|
|
|
16B99AAB000
|
unkown
|
page read and write
|
|
|
|
27EB000
|
unkown image
|
page readonly
|
|
|
|
7FF567D0F000
|
unkown image
|
page readonly
|
|
|
|
16B9F2A0000
|
unkown
|
page read and write
|
|
|
|
280D000
|
unkown image
|
page readonly
|
|
|
|
21CB739D000
|
unkown
|
page read and write
|
|
|
|
FC6357E000
|
stack
|
page read and write
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
7DF564A60000
|
unkown image
|
page readonly
|
|
|
|
21CB7331000
|
unkown
|
page read and write
|
|
|
|
7FF52691A000
|
unkown image
|
page readonly
|
|
|
|
7FF561DD6000
|
unkown image
|
page readonly
|
|
|
|
16B9A215000
|
unkown
|
page read and write
|
|
|
|
2EB0000
|
heap private
|
page read and write
|
|
|
|
59C457B000
|
stack
|
page read and write
|
|
|
|
1E7DFC7D000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown image
|
page readonly
|
|
|
|
21CB7AF9000
|
unkown
|
page read and write
|
|
|
|
7FF4ED868000
|
unkown image
|
page readonly
|
|
|
|
21CB7335000
|
unkown
|
page read and write
|
|
|
|
16B9F208000
|
unkown
|
page read and write
|
|
|
|
16B9F05E000
|
unkown
|
page read and write
|
|
|
|
7DF5C9A50000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE3000
|
unkown
|
page read and write
|
|
|
|
1F0294A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3E53000
|
unkown image
|
page readonly
|
|
|
|
2761000
|
unkown image
|
page readonly
|
|
|
|
21CB734C000
|
unkown
|
page read and write
|
|
|
|
21CB6ACE000
|
unkown
|
page read and write
|
|
|
|
7DF53C2E0000
|
unkown image
|
page readonly
|
|
|
|
2857000
|
unkown image
|
page readonly
|
|
|
|
2FE0000
|
heap private
|
page read and write
|
|
|
|
2AAEFD40000
|
unkown image
|
page readonly
|
|
|
|
32C0000
|
heap private
|
page read and write
|
|
|
|
21CB7AF0000
|
unkown
|
page read and write
|
|
|
|
7FF561696000
|
unkown image
|
page readonly
|
|
|
|
7FF567C3D000
|
unkown image
|
page readonly
|
|
|
|
7FF54F033000
|
unkown image
|
page readonly
|
|
|
|
21CB736F000
|
unkown
|
page read and write
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
2917000
|
unkown image
|
page readonly
|
|
|
|
30F0000
|
heap default
|
page read and write
|
|
|
|
7321D000
|
unkown image
|
page readonly
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
7FEE2000
|
unkown image
|
page readonly
|
|
|
|
16B9F20E000
|
unkown
|
page read and write
|
|
|
|
7FF5D1BE1000
|
unkown image
|
page readonly
|
|
|
|
21CB7A42000
|
unkown
|
page read and write
|
|
|
|
21CB7A80000
|
unkown
|
page read and write
|
|
|
|
21CB7378000
|
unkown
|
page read and write
|
|
|
|
7FED0000
|
unkown image
|
page readonly
|
|
|
|
221BC244000
|
unkown
|
page read and write
|
|
|
|
7FF4ED588000
|
unkown image
|
page readonly
|
|
|
|
21CB7376000
|
unkown
|
page read and write
|
|
|
|
7FF4ED8AF000
|
unkown image
|
page readonly
|
|
|
|
2B60000
|
unkown image
|
page readonly
|
|
|
|
31F0000
|
unkown image
|
page readonly
|
|
|
|
27E4000
|
unkown image
|
page readonly
|
|
|
|
21CB7329000
|
unkown
|
page read and write
|
|
|
|
7FF52676D000
|
unkown image
|
page readonly
|
|
|
|
7DF51C502000
|
unkown image
|
page readonly
|
|
|
|
1036AFE000
|
stack
|
page read and write
|
|
|
|
1F0294B0000
|
unkown image
|
page readonly
|
|
|
|
7FF506B28000
|
unkown image
|
page readonly
|
|
|
|
2AAF0800000
|
unkown
|
page read and write
|
|
|
|
7FF506BFB000
|
unkown image
|
page readonly
|
|
|
|
16B99A73000
|
unkown
|
page read and write
|
|
|
|
7F610000
|
unkown image
|
page readonly
|
|
|
|
7DF57D620000
|
unkown image
|
page readonly
|
|
|
|
2957000
|
unkown image
|
page readonly
|
|
|
|
21CB7A8D000
|
unkown
|
page read and write
|
|
|
|
21CB7352000
|
unkown
|
page read and write
|
|
|
|
16B9EF40000
|
unkown
|
page read and write
|
|
|
|
7FF567C1C000
|
unkown image
|
page readonly
|
|
|
|
2C0A000
|
heap default
|
page read and write
|
|
|
|
2790000
|
unkown image
|
page readonly
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
21CB7371000
|
unkown
|
page read and write
|
|
|
|
2FF0000
|
unkown image
|
page readonly
|
|
|
|
21CB6B6B000
|
unkown
|
page read and write
|
|
|
|
7DF5E77F0000
|
unkown image
|
page readonly
|
|
|
|
21CB7329000
|
unkown
|
page read and write
|
|
|
|
7FEE0000
|
unkown image
|
page readonly
|
|
|
|
21CB7367000
|
unkown
|
page read and write
|
|
|
|
7F612000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC64000
|
unkown
|
page read and write
|
|
|
|
7DF5C9A50000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC59000
|
unkown
|
page read and write
|
|
|
|
FC630AC000
|
unkown
|
page read and write
|
|
|
|
21CB738B000
|
unkown
|
page read and write
|
|
|
|
7FF5B4095000
|
unkown image
|
page readonly
|
|
|
|
59C427A000
|
stack
|
page read and write
|
|
|
|
7FD22000
|
unkown image
|
page readonly
|
|
|
|
2CCE000
|
unkown
|
page read and write
|
|
|
|
21CB6B4A000
|
unkown
|
page read and write
|
|
|
|
21CB7356000
|
unkown
|
page read and write
|
|
|
|
284D000
|
unkown image
|
page readonly
|
|
|
|
21CB7A89000
|
unkown
|
page read and write
|
|
|
|
1E7DFC34000
|
unkown
|
page read and write
|
|
|
|
7FF5B3EB0000
|
unkown image
|
page readonly
|
|
|
|
21CB6A72000
|
unkown
|
page read and write
|
|
|
|
21CB7AE7000
|
unkown
|
page read and write
|
|
|
|
6A0000
|
unkown image
|
page readonly
|
|
|
|
277D000
|
unkown image
|
page readonly
|
|
|
|
1BAC7241000
|
unkown
|
page read and write
|
|
|
|
7FF506B03000
|
unkown image
|
page readonly
|
|
|
|
16B99A78000
|
unkown
|
page read and write
|
|
|
|
2E10000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC57000
|
unkown
|
page read and write
|
|
|
|
2DA2000
|
unkown
|
page read and write
|
|
|
|
2F8F000
|
stack
|
page read and write
|
|
|
|
21CB735C000
|
unkown
|
page read and write
|
|
|
|
7FF5B3F2C000
|
unkown image
|
page readonly
|
|
|
|
21CB7331000
|
unkown
|
page read and write
|
|
|
|
73231000
|
unkown image
|
page read and write
|
|
|
|
7FF567BC7000
|
unkown image
|
page readonly
|
|
|
|
1420000
|
heap private
|
page read and write
|
|
|
|
7FF506B75000
|
unkown image
|
page readonly
|
|
|
|
29867180000
|
unkown image
|
page readonly
|
|
|
|
125D000
|
unkown
|
page read and write
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
7FF506AF2000
|
unkown image
|
page readonly
|
|
|
|
4D00000
|
unkown
|
page read and write
|
|
|
|
16B9F2A0000
|
unkown
|
page read and write
|
|
|
|
7DF51C500000
|
unkown image
|
page readonly
|
|
|
|
95D2DEF000
|
stack
|
page read and write
|
|
|
|
7FF506BF4000
|
unkown image
|
page readonly
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
16B99A3D000
|
unkown
|
page read and write
|
|
|
|
28A5000
|
unkown image
|
page readonly
|
|
|
|
21CB6AAF000
|
unkown
|
page read and write
|
|
|
|
21CB7355000
|
unkown
|
page read and write
|
|
|
|
73233000
|
unkown image
|
page readonly
|
|
|
|
29866C13000
|
unkown
|
page read and write
|
|
|
|
21CB7378000
|
unkown
|
page read and write
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
21CB7355000
|
unkown
|
page read and write
|
|
|
|
21CB7B02000
|
unkown
|
page read and write
|
|
|
|
16B99AFE000
|
unkown
|
page read and write
|
|
|
|
1E7DFC45000
|
unkown
|
page read and write
|
|
|
|
7FF567CDB000
|
unkown image
|
page readonly
|
|
|
|
7FF54EF1C000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC76000
|
unkown
|
page read and write
|
|
|
|
1E7DFC13000
|
unkown
|
page read and write
|
|
|
|
21CB7398000
|
unkown
|
page read and write
|
|
|
|
7FF4ED88D000
|
unkown image
|
page readonly
|
|
|
|
28AD000
|
unkown image
|
page readonly
|
|
|
|
7FF567CCF000
|
unkown image
|
page readonly
|
|
|
|
21CB7A5F000
|
unkown
|
page read and write
|
|
|
|
4AF0000
|
heap private
|
page read and write
|
|
|
|
34D0000
|
unkown image
|
page readonly
|
|
|
|
21CB6A33000
|
unkown
|
page read and write
|
|
|
|
7FF5268DD000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4078000
|
unkown image
|
page readonly
|
|
|
|
21CB7AFB000
|
unkown
|
page read and write
|
|
|
|
1F0295BB000
|
heap default
|
page read and write
|
|
|
|
2AAEFD00000
|
unkown image
|
page readonly
|
|
|
|
7DF5031A0000
|
unkown image
|
page readonly
|
|
|
|
7DF564A40000
|
unkown image
|
page readonly
|
|
|
|
7DF577702000
|
unkown image
|
page readonly
|
|
|
|
21CB7B02000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown image
|
page readonly
|
|
|
|
7FED2000
|
unkown image
|
page readonly
|
|
|
|
21CB7333000
|
unkown
|
page read and write
|
|
|
|
28B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1A55000
|
unkown image
|
page readonly
|
|
|
|
2AAF0602000
|
unkown
|
page read and write
|
|
|
|
21CB7351000
|
unkown
|
page read and write
|
|
|
|
46A0000
|
heap private
|
page read and write
|
|
|
|
2DAF000
|
unkown
|
page read and write
|
|
|
|
7FB40000
|
unkown image
|
page readonly
|
|
|
|
73211000
|
unkown image
|
page execute read
|
|
|
|
21CB738A000
|
unkown
|
page read and write
|
|
|
|
2A70000
|
unkown
|
page read and write
|
|
|
|
221BC190000
|
heap private
|
page read and write
|
|
|
|
7FF506C0F000
|
unkown image
|
page readonly
|
|
|
|
2957000
|
unkown image
|
page readonly
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
16B99A8C000
|
unkown
|
page read and write
|
|
|
|
547DAFF000
|
stack
|
page read and write
|
|
|
|
7FF5B4010000
|
unkown image
|
page readonly
|
|
|
|
21CB7335000
|
unkown
|
page read and write
|
|
|
|
2B9E000
|
unkown
|
page read and write
|
|
|
|
21CB7351000
|
unkown
|
page read and write
|
|
|
|
21CB739A000
|
unkown
|
page read and write
|
|
|
|
21CB735A000
|
unkown
|
page read and write
|
|
|
|
27C5000
|
unkown image
|
page readonly
|
|
|
|
7FF54EF63000
|
unkown image
|
page readonly
|
|
|
|
21CB7390000
|
unkown
|
page read and write
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
7DF57D602000
|
unkown image
|
page readonly
|
|
|
|
29866D00000
|
unkown
|
page read and write
|
|
|
|
7FF506C0F000
|
unkown image
|
page readonly
|
|
|
|
7FF561DFE000
|
unkown image
|
page readonly
|
|
|
|
7FF561D75000
|
unkown image
|
page readonly
|
|
|
|
2ABF7E000
|
stack
|
page read and write
|
|
|
|
21CB7060000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3E4A000
|
unkown image
|
page readonly
|
|
|
|
547E6FC000
|
stack
|
page read and write
|
|
|
|
7FF5D1DF7000
|
unkown image
|
page readonly
|
|
|
|
2A90000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED724000
|
unkown image
|
page readonly
|
|
|
|
7FF5269BB000
|
unkown image
|
page readonly
|
|
|
|
7DF51C502000
|
unkown image
|
page readonly
|
|
|
|
6A0000
|
unkown image
|
page readonly
|
|
|
|
221BC180000
|
unkown image
|
page read and write
|
|
|
|
7FF526890000
|
unkown image
|
page readonly
|
|
|
|
21CB739C000
|
unkown
|
page read and write
|
|
|
|
2ABE7D000
|
stack
|
page read and write
|
|
|
|
7FF5069DF000
|
unkown image
|
page readonly
|
|
|
|
59C447F000
|
stack
|
page read and write
|
|
|
|
21CB7368000
|
unkown
|
page read and write
|
|
|
|
29866C40000
|
unkown
|
page read and write
|
|
|
|
2761000
|
unkown image
|
page readonly
|
|
|
|
21CB7367000
|
unkown
|
page read and write
|
|
|
|
27F5000
|
unkown image
|
page readonly
|
|
|
|
2D00000
|
unkown image
|
page readonly
|
|
|
|
275B000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC40000
|
unkown
|
page read and write
|
|
|
|
4ACE000
|
unkown
|
page read and write
|
|
|
|
21CB7367000
|
unkown
|
page read and write
|
|
|
|
21CB7313000
|
unkown
|
page read and write
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
7FF5D1ED4000
|
unkown image
|
page readonly
|
|
|
|
7FF54F0B5000
|
unkown image
|
page readonly
|
|
|
|
2B20000
|
heap default
|
page read and write
|
|
|
|
7FF54F0B3000
|
unkown image
|
page readonly
|
|
|
|
547DC7B000
|
stack
|
page read and write
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
21CB6ACE000
|
unkown
|
page read and write
|
|
|
|
21CB6960000
|
unkown
|
page read and write
|
|
|
|
16B9EF20000
|
unkown
|
page read and write
|
|
|
|
29866B50000
|
unkown
|
page read and write
|
|
|
|
16B9F200000
|
unkown
|
page read and write
|
|
|
|
285D000
|
unkown image
|
page readonly
|
|
|
|
4C3E000
|
unkown
|
page read and write
|
|
|
|
7FF5B4099000
|
unkown image
|
page readonly
|
|
|
|
16B9A300000
|
unkown
|
page read and write
|
|
|
|
905000
|
unkown
|
page read and write
|
|
|
|
221BC213000
|
unkown
|
page read and write
|
|
|
|
27B1000
|
unkown image
|
page readonly
|
|
|
|
21CB7377000
|
unkown
|
page read and write
|
|
|
|
7DF5031B2000
|
unkown image
|
page readonly
|
|
|
|
59C47F9000
|
stack
|
page read and write
|
|
|
|
21CB7360000
|
unkown
|
page read and write
|
|
|
|
30D0000
|
heap private
|
page read and write
|
|
|
|
2BA0000
|
unkown image
|
page readonly
|
|
|
|
286B000
|
unkown image
|
page readonly
|
|
|
|
29866A30000
|
unkown image
|
page readonly
|
|
|
|
7DF5C9A60000
|
unkown image
|
page readonly
|
|
|
|
2875000
|
unkown image
|
page readonly
|
|
|
|
2889000
|
unkown image
|
page readonly
|
|
|
|
7DF53C2D2000
|
unkown image
|
page readonly
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
547DA7B000
|
unkown
|
page read and write
|
|
|
|
16B9F0DF000
|
unkown
|
page read and write
|
|
|
|
7FF5B4017000
|
unkown image
|
page readonly
|
|
|
|
2EF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4126000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E33000
|
unkown image
|
page readonly
|
|
|
|
21CB7A6E000
|
unkown
|
page read and write
|
|
|
|
1F0296B0000
|
unkown
|
page read and write
|
|
|
|
21CB7307000
|
unkown
|
page read and write
|
|
|
|
7FF561DDB000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1EDB000
|
unkown image
|
page readonly
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
21CB7356000
|
unkown
|
page read and write
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
2E3B000
|
unkown
|
page read and write
|
|
|
|
7FF561DC8000
|
unkown image
|
page readonly
|
|
|
|
21CB736F000
|
unkown
|
page read and write
|
|
|
|
1370000
|
unkown image
|
page readonly
|
|
|
|
7FEF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5269CF000
|
unkown image
|
page readonly
|
|
|
|
21CB7371000
|
unkown
|
page read and write
|
|
|
|
1200000
|
unkown image
|
page readonly
|
|
|
|
1E7DFA80000
|
unkown image
|
page readonly
|
|
|
|
21CB732F000
|
unkown
|
page read and write
|
|
|
|
274A000
|
unkown image
|
page readonly
|
|
|
|
29866A00000
|
unkown image
|
page readonly
|
|
|
|
7FF561BAD000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1DDC000
|
unkown image
|
page readonly
|
|
|
|
7F620000
|
unkown image
|
page readonly
|
|
|
|
21CB7A56000
|
unkown
|
page read and write
|
|
|
|
7FF5B3E43000
|
unkown image
|
page readonly
|
|
|
|
2B50000
|
unkown image
|
page read and write
|
|
|
|
29866C65000
|
unkown
|
page read and write
|
|
|
|
73B000
|
unkown
|
page read and write
|
|
|
|
7FF5B3FD4000
|
unkown image
|
page readonly
|
|
|
|
4665CFE000
|
stack
|
page read and write
|
|
|
|
7FF4ED7C8000
|
unkown image
|
page readonly
|
|
|
|
21CB6A7E000
|
unkown
|
page read and write
|
|
|
|
1036A7D000
|
stack
|
page read and write
|
|
|
|
7FF54F085000
|
unkown image
|
page readonly
|
|
|
|
21CB736F000
|
unkown
|
page read and write
|
|
|
|
2765000
|
unkown image
|
page readonly
|
|
|
|
21CB6B6B000
|
unkown
|
page read and write
|
|
|
|
21CB7350000
|
unkown
|
page read and write
|
|
|
|
2901000
|
unkown image
|
page readonly
|
|
|
|
7321D000
|
unkown image
|
page readonly
|
|
|
|
7FF567554000
|
unkown image
|
page readonly
|
|
|
|
7DF564A60000
|
unkown image
|
page readonly
|
|
|
|
1E7E0180000
|
unkown image
|
page readonly
|
|
|
|
1E7E0000000
|
unkown image
|
page readonly
|
|
|
|
790000
|
heap private
|
page read and write
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C8D000
|
unkown image
|
page readonly
|
|
|
|
221BC1F0000
|
heap default
|
page read and write
|
|
|
|
21CB7AF0000
|
unkown
|
page read and write
|
|
|
|
293B000
|
unkown image
|
page readonly
|
|
|
|
21CB7ADF000
|
unkown
|
page read and write
|
|
|
|
7FF5B3913000
|
unkown image
|
page readonly
|
|
|
|
7FF56799A000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1EEF000
|
unkown image
|
page readonly
|
|
|
|
7FF567D0F000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC80000
|
unkown
|
page read and write
|
|
|
|
7DF564A52000
|
unkown image
|
page readonly
|
|
|
|
16B9F0E2000
|
unkown
|
page read and write
|
|
|
|
7FF5D1DFC000
|
unkown image
|
page readonly
|
|
|
|
7FC40000
|
unkown image
|
page readonly
|
|
|
|
2848000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C13000
|
unkown image
|
page readonly
|
|
|
|
7FF5266C8000
|
unkown image
|
page readonly
|
|
|
|
7FF54F10F000
|
unkown image
|
page readonly
|
|
|
|
7FD20000
|
unkown image
|
page readonly
|
|
|
|
21CB6B29000
|
unkown
|
page read and write
|
|
|
|
27FC000
|
unkown image
|
page readonly
|
|
|
|
21CB6A1F000
|
unkown
|
page read and write
|
|
|
|
4665EFF000
|
stack
|
page read and write
|
|
|
|
7FF506BDB000
|
unkown image
|
page readonly
|
|
|
|
7DF4E56B0000
|
unkown image
|
page readonly
|
|
|
|
29866C7B000
|
unkown
|
page read and write
|
|
|
|
2F90000
|
heap default
|
page read and write
|
|
|
|
7DF51C520000
|
unkown image
|
page readonly
|
|
|
|
7DF564A52000
|
unkown image
|
page readonly
|
|
|
|
21CB7334000
|
unkown
|
page read and write
|
|
|
|
4870000
|
unkown
|
page read and write
|
|
|
|
28B9000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE7000
|
unkown
|
page read and write
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
16B9F100000
|
unkown
|
page read and write
|
|
|
|
21CB6ACB000
|
unkown
|
page read and write
|
|
|
|
2BFB000
|
unkown
|
page read and write
|
|
|
|
21CB7A4F000
|
unkown
|
page read and write
|
|
|
|
7DF53C2C2000
|
unkown image
|
page readonly
|
|
|
|
21CB73A2000
|
unkown
|
page read and write
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
7DF5E7800000
|
unkown image
|
page readonly
|
|
|
|
16B99A59000
|
unkown
|
page read and write
|
|
|
|
221BC6E0000
|
unkown image
|
page readonly
|
|
|
|
7DF564A50000
|
unkown image
|
page readonly
|
|
|
|
7DF564A42000
|
unkown image
|
page readonly
|
|
|
|
2775000
|
unkown image
|
page readonly
|
|
|
|
16B9F02D000
|
unkown
|
page read and write
|
|
|
|
28A4000
|
unkown image
|
page readonly
|
|
|
|
2625000
|
unkown image
|
page readonly
|
|
|
|
21CB7350000
|
unkown
|
page read and write
|
|
|
|
7FF567BBD000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3EF8000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC26000
|
unkown
|
page read and write
|
|
|
|
2769000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4118000
|
unkown image
|
page readonly
|
|
|
|
16B9F221000
|
unkown
|
page read and write
|
|
|
|
73231000
|
unkown image
|
page read and write
|
|
|
|
7DF5E77E2000
|
unkown image
|
page readonly
|
|
|
|
7F620000
|
unkown image
|
page readonly
|
|
|
|
1BAC7990000
|
unkown image
|
page write copy
|
|
|
|
7FF5D1C11000
|
unkown image
|
page readonly
|
|
|
|
7FF54F11B000
|
unkown image
|
page readonly
|
|
|
|
7FF5269CF000
|
unkown image
|
page readonly
|
|
|
|
21CB7360000
|
unkown
|
page read and write
|
|
|
|
7FF54F09A000
|
unkown image
|
page readonly
|
|
|
|
21CB7AB1000
|
unkown
|
page read and write
|
|
|
|
2FDF000
|
unkown
|
page read and write
|
|
|
|
2D1A000
|
heap default
|
page read and write
|
|
|
|
7DF577710000
|
unkown image
|
page readonly
|
|
|
|
16B9ED80000
|
unkown
|
page read and write
|
|
|
|
7FF54F14F000
|
unkown image
|
page readonly
|
|
|
|
2AAEFE13000
|
unkown
|
page read and write
|
|
|
|
2AAEFD90000
|
unkown
|
page read and write
|
|
|
|
7FF506BC8000
|
unkown image
|
page readonly
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
2E60000
|
unkown
|
page read and write
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
7FF4ED56C000
|
unkown image
|
page readonly
|
|
|
|
2779000
|
unkown image
|
page readonly
|
|
|
|
7FF52698F000
|
unkown image
|
page readonly
|
|
|
|
2769000
|
unkown image
|
page readonly
|
|
|
|
7FF561D5A000
|
unkown image
|
page readonly
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
21CB737E000
|
unkown
|
page read and write
|
|
|
|
2738000
|
unkown image
|
page readonly
|
|
|
|
7DF53C2D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E25000
|
unkown image
|
page readonly
|
|
|
|
21CB7AF9000
|
unkown
|
page read and write
|
|
|
|
7FF526996000
|
unkown image
|
page readonly
|
|
|
|
21CB7354000
|
unkown
|
page read and write
|
|
|
|
7FF567BAD000
|
unkown image
|
page readonly
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
29866C02000
|
unkown
|
page read and write
|
|
|
|
1BAC71F0000
|
heap default
|
page read and write
|
|
|
|
21CB7377000
|
unkown
|
page read and write
|
|
|
|
7FF5B3F97000
|
unkown image
|
page readonly
|
|
|
|
281D000
|
unkown image
|
page readonly
|
|
|
|
73233000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1BA9000
|
unkown image
|
page readonly
|
|
|
|
7FF561E0F000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED8AD000
|
unkown image
|
page readonly
|
|
|
|
21CB7AB3000
|
unkown
|
page read and write
|
|
|
|
7DF5E77F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1B7A000
|
unkown image
|
page readonly
|
|
|
|
21CB7391000
|
unkown
|
page read and write
|
|
|
|
7FF54F093000
|
unkown image
|
page readonly
|
|
|
|
21CB7348000
|
unkown
|
page read and write
|
|
|
|
2917000
|
unkown image
|
page readonly
|
|
|
|
2776000
|
unkown image
|
page readonly
|
|
|
|
21CB7B00000
|
unkown
|
page read and write
|
|
|
|
7FF5B414E000
|
unkown image
|
page readonly
|
|
|
|
1BAC74D0000
|
unkown image
|
page readonly
|
|
|
|
7FF567A87000
|
unkown image
|
page readonly
|
|
|
|
16B9F0B2000
|
unkown
|
page read and write
|
|
|
|
21CB736F000
|
unkown
|
page read and write
|
|
|
|
16B9F250000
|
unkown
|
page read and write
|
|
|
|
7DF577712000
|
unkown image
|
page readonly
|
|
|
|
4665AFF000
|
stack
|
page read and write
|
|
|
|
7FF5B4038000
|
unkown image
|
page readonly
|
|
|
|
7DF57D620000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3F13000
|
unkown image
|
page readonly
|
|
|
|
21CB6A8C000
|
unkown
|
page read and write
|
|
|
|
7DF51C512000
|
unkown image
|
page readonly
|
|
|
|
283B000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE4000
|
unkown
|
page read and write
|
|
|
|
7F602000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1EA8000
|
unkown image
|
page readonly
|
|
|
|
7FF54F05C000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4057000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC79000
|
unkown
|
page read and write
|
|
|
|
21CB7361000
|
unkown
|
page read and write
|
|
|
|
7FF5B413D000
|
unkown image
|
page readonly
|
|
|
|
26FD000
|
unkown image
|
page readonly
|
|
|
|
2AB0000
|
unkown image
|
page readonly
|
|
|
|
21CB7379000
|
unkown
|
page read and write
|
|
|
|
7FF5D1C36000
|
unkown image
|
page readonly
|
|
|
|
28B5000
|
unkown image
|
page readonly
|
|
|
|
278D000
|
unkown image
|
page readonly
|
|
|
|
16B999B0000
|
unkown
|
page read and write
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
73231000
|
unkown image
|
page read and write
|
|
|
|
73211000
|
unkown image
|
page execute read
|
|
|
|
27C9000
|
unkown image
|
page readonly
|
|
|
|
4BFF000
|
unkown
|
page read and write
|
|
|
|
21CB7AF8000
|
unkown
|
page read and write
|
|
|
|
21CB73A0000
|
unkown
|
page read and write
|
|
|
|
2730000
|
unkown image
|
page readonly
|
|
|
|
21CB6A9E000
|
unkown
|
page read and write
|
|
|
|
30FA000
|
heap default
|
page read and write
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
21CB735A000
|
unkown
|
page read and write
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
7DF57D610000
|
unkown image
|
page readonly
|
|
|
|
2779000
|
unkown image
|
page readonly
|
|
|
|
21CB7398000
|
unkown
|
page read and write
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
21CB7B12000
|
unkown
|
page read and write
|
|
|
|
7FF506BED000
|
unkown image
|
page readonly
|
|
|
|
21CB7367000
|
unkown
|
page read and write
|
|
|
|
7FF506C0B000
|
unkown image
|
page readonly
|
|
|
|
2729000
|
unkown image
|
page readonly
|
|
|
|
2AAF0450000
|
unkown image
|
page readonly
|
|
|
|
670000
|
unkown image
|
page readonly
|
|
|
|
7FF567CF4000
|
unkown image
|
page readonly
|
|
|
|
A00000
|
unkown image
|
page readonly
|
|
|
|
7FF50689A000
|
unkown image
|
page readonly
|
|
|
|
1E7DFA50000
|
heap private
|
page read and write
|
|
|
|
21CB7A9E000
|
unkown
|
page read and write
|
|
|
|
7FF506B18000
|
unkown image
|
page readonly
|
|
|
|
21CB7ABF000
|
unkown
|
page read and write
|
|
|
|
7FF5D1DD2000
|
unkown image
|
page readonly
|
|
|
|
46659FD000
|
stack
|
page read and write
|
|
|
|
21CB738A000
|
unkown
|
page read and write
|
|
|
|
2734000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1EDE000
|
unkown image
|
page readonly
|
|
|
|
21CB7B12000
|
unkown
|
page read and write
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
21CB7362000
|
unkown
|
page read and write
|
|
|
|
165E000
|
heap default
|
page read and write
|
|
|
|
21CB735C000
|
unkown
|
page read and write
|
|
|
|
7FF5B3FAF000
|
unkown image
|
page readonly
|
|
|
|
7FF5268FD000
|
unkown image
|
page readonly
|
|
|
|
21CB6AF5000
|
unkown
|
page read and write
|
|
|
|
21CB7363000
|
unkown
|
page read and write
|
|
|
|
25D5000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED79C000
|
unkown image
|
page readonly
|
|
|
|
1F029480000
|
unkown image
|
page readonly
|
|
|
|
21CB7359000
|
unkown
|
page read and write
|
|
|
|
21CB737E000
|
unkown
|
page read and write
|
|
|
|
2F00000
|
heap default
|
page read and write
|
|
|
|
7FE20000
|
unkown image
|
page readonly
|
|
|
|
21CB7371000
|
unkown
|
page read and write
|
|
|
|
16B9F03B000
|
unkown
|
page read and write
|
|
|
|
274D000
|
unkown image
|
page readonly
|
|
|
|
884000
|
unkown
|
page read and write
|
|
|
|
2EC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C82000
|
unkown image
|
page readonly
|
|
|
|
21CB73A0000
|
unkown
|
page read and write
|
|
|
|
21CB7A8C000
|
unkown
|
page read and write
|
|
|
|
2AAEFCC0000
|
unkown image
|
page read and write
|
|
|
|
10CA000
|
unkown
|
page read and write
|
|
|
|
21CB7880000
|
unkown
|
page read and write
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC42000
|
unkown
|
page read and write
|
|
|
|
7FF4ED7BC000
|
unkown image
|
page readonly
|
|
|
|
2841000
|
unkown image
|
page readonly
|
|
|
|
221BC1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3C66000
|
unkown image
|
page readonly
|
|
|
|
1BAC7B32000
|
unkown
|
page read and write
|
|
|
|
21CB7363000
|
unkown
|
page read and write
|
|
|
|
7FA80000
|
unkown image
|
page readonly
|
|
|
|
547E7FC000
|
stack
|
page read and write
|
|
|
|
135C000
|
unkown
|
page read and write
|
|
|
|
470F000
|
unkown
|
page read and write
|
|
|
|
27EB000
|
unkown image
|
page readonly
|
|
|
|
21CB7374000
|
unkown
|
page read and write
|
|
|
|
7FF526905000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3EFD000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3C0F000
|
unkown image
|
page readonly
|
|
|
|
1BAC7313000
|
unkown
|
page read and write
|
|
|
|
7FF506BFE000
|
unkown image
|
page readonly
|
|
|
|
21CB735E000
|
unkown
|
page read and write
|
|
|
|
16B9F200000
|
unkown
|
page read and write
|
|
|
|
4665DFE000
|
stack
|
page read and write
|
|
|
|
21CB733B000
|
unkown
|
page read and write
|
|
|
|
4B7F000
|
unkown
|
page read and write
|
|
|
|
7FA90000
|
unkown image
|
page readonly
|
|
|
|
27ED000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3CEF000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED8AF000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC70000
|
unkown
|
page read and write
|
|
|
|
7FC52000
|
unkown image
|
page readonly
|
|
|
|
1BAC7190000
|
heap private
|
page read and write
|
|
|
|
2AAEFD10000
|
unkown image
|
page readonly
|
|
|
|
2B60000
|
unkown image
|
page readonly
|
|
|
|
27BC000
|
unkown image
|
page readonly
|
|
|
|
1BAC7180000
|
unkown image
|
page read and write
|
|
|
|
7FF506C0D000
|
unkown image
|
page readonly
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
28DD000
|
unkown image
|
page readonly
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
2775000
|
unkown image
|
page readonly
|
|
|
|
7FF561D28000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED35F000
|
unkown image
|
page readonly
|
|
|
|
2AAF02D0000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED7A3000
|
unkown image
|
page readonly
|
|
|
|
16B9EE10000
|
unkown
|
page read and write
|
|
|
|
2C00000
|
heap default
|
page read and write
|
|
|
|
21CB73A0000
|
unkown
|
page read and write
|
|
|
|
7FF5B414B000
|
unkown image
|
page readonly
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
221BC4D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1DE7000
|
unkown image
|
page readonly
|
|
|
|
2884000
|
unkown image
|
page readonly
|
|
|
|
21CB7354000
|
unkown
|
page read and write
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
7FF54F108000
|
unkown image
|
page readonly
|
|
|
|
287C000
|
unkown image
|
page readonly
|
|
|
|
2AA0000
|
heap private
|
page read and write
|
|
|
|
1E7DFC41000
|
unkown
|
page read and write
|
|
|
|
21CB6910000
|
unkown image
|
page readonly
|
|
|
|
880000
|
unkown
|
page read and write
|
|
|
|
7FD22000
|
unkown image
|
page readonly
|
|
|
|
7DF577720000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E1D000
|
unkown image
|
page readonly
|
|
|
|
21CB7377000
|
unkown
|
page read and write
|
|
|
|
21CB6AF3000
|
unkown
|
page read and write
|
|
|
|
21CB7200000
|
unkown
|
page read and write
|
|
|
|
21CB732F000
|
unkown
|
page read and write
|
|
|
|
275D000
|
unkown image
|
page readonly
|
|
|
|
7FF54F116000
|
unkown image
|
page readonly
|
|
|
|
1BAC7A02000
|
unkown
|
page read and write
|
|
|
|
21CB6B19000
|
unkown
|
page read and write
|
|
|
|
1F0297E0000
|
heap private
|
page read and write
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
221BC275000
|
unkown
|
page read and write
|
|
|
|
2865000
|
unkown image
|
page readonly
|
|
|
|
21CB739A000
|
unkown
|
page read and write
|
|
|
|
21CB732A000
|
unkown
|
page read and write
|
|
|
|
21CB7348000
|
unkown
|
page read and write
|
|
|
|
46654FB000
|
stack
|
page read and write
|
|
|
|
21CB7398000
|
unkown
|
page read and write
|
|
|
|
7FF54F043000
|
unkown image
|
page readonly
|
|
|
|
21CB6B17000
|
unkown
|
page read and write
|
|
|
|
1E7DFC85000
|
unkown
|
page read and write
|
|
|
|
7FF561E0F000
|
unkown image
|
page readonly
|
|
|
|
16B9AD60000
|
unkown
|
page read and write
|
|
|
|
7F500000
|
unkown image
|
page readonly
|
|
|
|
7FEE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1EBB000
|
unkown image
|
page readonly
|
|
|
|
21CB7358000
|
unkown
|
page read and write
|
|
|
|
7FF5D1EEB000
|
unkown image
|
page readonly
|
|
|
|
27CD000
|
unkown image
|
page readonly
|
|
|
|
1F0297E5000
|
heap private
|
page read and write
|
|
|
|
7FF5B4030000
|
unkown image
|
page readonly
|
|
|
|
16B9F220000
|
unkown
|
page read and write
|
|
|
|
21CB73A1000
|
unkown
|
page read and write
|
|
|
|
7FF5B3F20000
|
unkown image
|
page readonly
|
|
|
|
7DF5E7800000
|
unkown image
|
page readonly
|
|
|
|
16B99A95000
|
unkown
|
page read and write
|
|
|
|
2740000
|
unkown image
|
page readonly
|
|
|
|
21CB68E0000
|
unkown image
|
page readonly
|
|
|
|
46655FB000
|
stack
|
page read and write
|
|
|
|
7FF4ED0F4000
|
unkown image
|
page readonly
|
|
|
|
2A60000
|
unkown
|
page read and write
|
|
|
|
2807000
|
unkown image
|
page readonly
|
|
|
|
660000
|
unkown image
|
page read and write
|
|
|
|
7FEE2000
|
unkown image
|
page readonly
|
|
|
|
21CB7377000
|
unkown
|
page read and write
|
|
|
|
FC63A7D000
|
stack
|
page read and write
|
|
|
|
7FF506917000
|
unkown image
|
page readonly
|
|
|
|
2885000
|
unkown image
|
page readonly
|
|
|
|
289A000
|
unkown image
|
page readonly
|
|
|
|
3160000
|
unkown
|
page read and write
|
|
|
|
7FA82000
|
unkown image
|
page readonly
|
|
|
|
13D0000
|
unkown image
|
page readonly
|
|
|
|
2AAB000
|
unkown
|
page read and write
|
|
|
|
16B9F0AA000
|
unkown
|
page read and write
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
21CB7357000
|
unkown
|
page read and write
|
|
|
|
21CB735A000
|
unkown
|
page read and write
|
|
|
|
73211000
|
unkown image
|
page execute read
|
|
|
|
FC63AFE000
|
stack
|
page read and write
|
|
|
|
21CB735C000
|
unkown
|
page read and write
|
|
|
|
2BFC000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown image
|
page readonly
|
|
|
|
59C3DAF000
|
stack
|
page read and write
|
|
|
|
7FF5069AD000
|
unkown image
|
page readonly
|
|
|
|
7FF567CD6000
|
unkown image
|
page readonly
|
|
|
|
31F0000
|
unkown image
|
page readonly
|
|
|
|
2AC17E000
|
stack
|
page read and write
|
|
|
|
59C3D2C000
|
unkown
|
page read and write
|
|
|
|
21CB7050000
|
unkown image
|
page readonly
|
|
|
|
7FF526913000
|
unkown image
|
page readonly
|
|
|
|
46EF000
|
unkown
|
page read and write
|
|
|
|
7FAA0000
|
unkown image
|
page readonly
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
1E7DFAB0000
|
heap default
|
page read and write
|
|
|
|
21CB7AE3000
|
unkown
|
page read and write
|
|
|
|
21CB6B38000
|
unkown
|
page read and write
|
|
|
|
7FF561D07000
|
unkown image
|
page readonly
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
7FF54EF87000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC2F000
|
unkown
|
page read and write
|
|
|
|
2ABB7E000
|
stack
|
page read and write
|
|
|
|
1F0295B0000
|
heap default
|
page read and write
|
|
|
|
7FF506AE4000
|
unkown image
|
page readonly
|
|
|
|
21CB7380000
|
unkown
|
page read and write
|
|
|
|
7FF561D3D000
|
unkown image
|
page readonly
|
|
|
|
29866D02000
|
unkown
|
page read and write
|
|
|
|
21CB7396000
|
unkown
|
page read and write
|
|
|
|
7FF506B49000
|
unkown image
|
page readonly
|
|
|
|
95D2D6F000
|
stack
|
page read and write
|
|
|
|
2E50000
|
unkown image
|
page readonly
|
|
|
|
2B50000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE3000
|
unkown
|
page read and write
|
|
|
|
279D000
|
unkown image
|
page readonly
|
|
|
|
21CB7A8E000
|
unkown
|
page read and write
|
|
|
|
21CB7360000
|
unkown
|
page read and write
|
|
|
|
21CB68C0000
|
unkown image
|
page read and write
|
|
|
|
1360000
|
unkown image
|
page readonly
|
|
|
|
26FD000
|
unkown image
|
page readonly
|
|
|
|
21CB7377000
|
unkown
|
page read and write
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
2905000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1DC8000
|
unkown image
|
page readonly
|
|
|
|
2730000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC4C000
|
unkown
|
page read and write
|
|
|
|
7FF54F14F000
|
unkown image
|
page readonly
|
|
|
|
2821000
|
unkown image
|
page readonly
|
|
|
|
1BAC72DD000
|
unkown
|
page read and write
|
|
|
|
21CB737B000
|
unkown
|
page read and write
|
|
|
|
7FD20000
|
unkown image
|
page readonly
|
|
|
|
3070000
|
unkown image
|
page readonly
|
|
|
|
289D000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED89E000
|
unkown image
|
page readonly
|
|
|
|
16B99860000
|
unkown image
|
page readonly
|
|
|
|
2E10000
|
unkown image
|
page readonly
|
|
|
|
2AAEFCE0000
|
unkown image
|
page readonly
|
|
|
|
21CB7356000
|
unkown
|
page read and write
|
|
|
|
2836000
|
unkown image
|
page readonly
|
|
|
|
21CB6A00000
|
unkown
|
page read and write
|
|
|
|
1BAC726F000
|
unkown
|
page read and write
|
|
|
|
21CB739A000
|
unkown
|
page read and write
|
|
|
|
7FF5B415D000
|
unkown image
|
page readonly
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
16B9A8E0000
|
unkown
|
page read and write
|
|
|
|
16B99A00000
|
unkown
|
page read and write
|
|
|
|
1E7DFC2C000
|
unkown
|
page read and write
|
|
|
|
21CB7382000
|
unkown
|
page read and write
|
|
|
|
2684000
|
unkown image
|
page readonly
|
|
|
|
21CB736A000
|
unkown
|
page read and write
|
|
|
|
7FF5B3CE0000
|
unkown image
|
page readonly
|
|
|
|
2ABBFC000
|
stack
|
page read and write
|
|
|
|
7FF5B3C91000
|
unkown image
|
page readonly
|
|
|
|
1F029460000
|
unkown image
|
page read and write
|
|
|
|
2AAEFF13000
|
unkown
|
page read and write
|
|
|
|
7FF54F120000
|
unkown image
|
page readonly
|
|
|
|
7FF50644F000
|
unkown image
|
page readonly
|
|
|
|
21CB736F000
|
unkown
|
page read and write
|
|
|
|
7FF52699B000
|
unkown image
|
page readonly
|
|
|
|
478F000
|
unkown
|
page read and write
|
|
|
|
1BAC71A0000
|
unkown image
|
page readonly
|
|
|
|
2AAEFE02000
|
unkown
|
page read and write
|
|
|
|
21CB73AA000
|
unkown
|
page read and write
|
|
|
|
21CB6A3F000
|
unkown
|
page read and write
|
|
|
|
7FF4ED8AB000
|
unkown image
|
page readonly
|
|
|
|
221BC260000
|
unkown
|
page read and write
|
|
|
|
21CB6A29000
|
unkown
|
page read and write
|
|
|
|
7FF5B411F000
|
unkown image
|
page readonly
|
|
|
|
21CB7380000
|
unkown
|
page read and write
|
|
|
|
547E3FA000
|
stack
|
page read and write
|
|
|
|
7FF4ED876000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4067000
|
unkown image
|
page readonly
|
|
|
|
21CB7371000
|
unkown
|
page read and write
|
|
|
|
16B9A202000
|
unkown
|
page read and write
|
|
|
|
221BC200000
|
unkown
|
page read and write
|
|
|
|
21CB7329000
|
unkown
|
page read and write
|
|
|
|
21CB7374000
|
unkown
|
page read and write
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
7FF5B408D000
|
unkown image
|
page readonly
|
|
|
|
16B9F360000
|
unkown
|
page read and write
|
|
|
|
7DF5E77E0000
|
unkown image
|
page readonly
|
|
|
|
1BAC7229000
|
unkown
|
page read and write
|
|
|
|
6FC000
|
unkown
|
page read and write
|
|
|
|
278D000
|
unkown image
|
page readonly
|
|
|
|
1BAC7289000
|
unkown
|
page read and write
|
|
|
|
28FB000
|
unkown image
|
page readonly
|
|
|
|
7FF5B406C000
|
unkown image
|
page readonly
|
|
|
|
3080000
|
unkown image
|
page readonly
|
|
|
|
59C4A7C000
|
stack
|
page read and write
|
|
|
|
21CB736F000
|
unkown
|
page read and write
|
|
|
|
2AAF0460000
|
unkown image
|
page readonly
|
|
|
|
29867402000
|
unkown
|
page read and write
|
|
|
|
21CB7AB3000
|
unkown
|
page read and write
|
|
|
|
221BC313000
|
unkown
|
page read and write
|
|
|
|
2AC0000
|
unkown image
|
page readonly
|
|
|
|
7FF54F13E000
|
unkown image
|
page readonly
|
|
|
|
21CB7A5C000
|
unkown
|
page read and write
|
|
|
|
7DF577712000
|
unkown image
|
page readonly
|
|
|
|
13C0000
|
unkown
|
page read and write
|
|
|
|
2721000
|
unkown image
|
page readonly
|
|
|
|
7FEF0000
|
unkown image
|
page readonly
|
|
|
|
2B2A000
|
heap default
|
page read and write
|
|
|
|
21CB7AEF000
|
unkown
|
page read and write
|
|
|
|
21CB6930000
|
heap default
|
page read and write
|
|
|
|
21CB738A000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown image
|
page read and write
|
|
|
|
7FF567CDE000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1D64000
|
unkown image
|
page readonly
|
|
|
|
2BBC000
|
unkown
|
page read and write
|
|
|
|
28C5000
|
unkown image
|
page readonly
|
|
|
|
7FF54EE87000
|
unkown image
|
page readonly
|
|
|
|
4A8E000
|
unkown
|
page read and write
|
|
|
|
16B99A90000
|
unkown
|
page read and write
|
|
|
|
7FF5B3E4C000
|
unkown image
|
page readonly
|
|
|
|
21CB7335000
|
unkown
|
page read and write
|
|
|
|
21CB7335000
|
unkown
|
page read and write
|
|
|
|
547E4FC000
|
stack
|
page read and write
|
|
|
|
16B9F0AD000
|
unkown
|
page read and write
|
|
|
|
7FF4ED64D000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED72E000
|
unkown image
|
page readonly
|
|
|
|
21CB6A5D000
|
unkown
|
page read and write
|
|
|
|
7DF564A50000
|
unkown image
|
page readonly
|
|
|
|
7FF561D45000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC3D000
|
unkown
|
page read and write
|
|
|
|
7FF5D1E08000
|
unkown image
|
page readonly
|
|
|
|
7FA90000
|
unkown image
|
page readonly
|
|
|
|
2AB9FB000
|
stack
|
page read and write
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
7FF54EEE2000
|
unkown image
|
page readonly
|
|
|
|
21CB7A97000
|
unkown
|
page read and write
|
|
|
|
16B9F0E5000
|
unkown
|
page read and write
|
|
|
|
16B9F015000
|
unkown
|
page read and write
|
|
|
|
2890000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED7A7000
|
unkown image
|
page readonly
|
|
|
|
21CB735E000
|
unkown
|
page read and write
|
|
|
|
2861000
|
unkown image
|
page readonly
|
|
|
|
2DB2000
|
unkown
|
page read and write
|
|
|
|
276C000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE3000
|
unkown
|
page read and write
|
|
|
|
7FF4ED86F000
|
unkown image
|
page readonly
|
|
|
|
27AB000
|
unkown image
|
page readonly
|
|
|
|
1BAC72D0000
|
unkown
|
page read and write
|
|
|
|
2DA6000
|
unkown
|
page read and write
|
|
|
|
16B99AAD000
|
unkown
|
page read and write
|
|
|
|
21CB7391000
|
unkown
|
page read and write
|
|
|
|
21CB7AA3000
|
unkown
|
page read and write
|
|
|
|
21CB7331000
|
unkown
|
page read and write
|
|
|
|
21CB7382000
|
unkown
|
page read and write
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
16B99AB0000
|
unkown
|
page read and write
|
|
|
|
21CB7AD0000
|
unkown
|
page read and write
|
|
|
|
28E4000
|
unkown image
|
page readonly
|
|
|
|
7FF526935000
|
unkown image
|
page readonly
|
|
|
|
1F029B70000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED6BD000
|
unkown image
|
page readonly
|
|
|
|
73233000
|
unkown image
|
page readonly
|
|
|
|
2744000
|
unkown image
|
page readonly
|
|
|
|
2BA0000
|
unkown image
|
page readonly
|
|
|
|
21CB7371000
|
unkown
|
page read and write
|
|
|
|
2ABD7B000
|
stack
|
page read and write
|
|
|
|
7FF506454000
|
unkown image
|
page readonly
|
|
|
|
4BBE000
|
unkown
|
page read and write
|
|
|
|
1E7DFC29000
|
unkown
|
page read and write
|
|
|
|
2AAEFCE0000
|
unkown image
|
page readonly
|
|
|
|
7FF54EC0C000
|
unkown image
|
page readonly
|
|
|
|
1BAC76E0000
|
unkown image
|
page readonly
|
|
|
|
2729000
|
unkown image
|
page readonly
|
|
|
|
7FF526988000
|
unkown image
|
page readonly
|
|
|
|
7DF57D600000
|
unkown image
|
page readonly
|
|
|
|
7FC60000
|
unkown image
|
page readonly
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
2945000
|
unkown image
|
page readonly
|
|
|
|
21CB7351000
|
unkown
|
page read and write
|
|
|
|
7FF5B3CD4000
|
unkown image
|
page readonly
|
|
|
|
1F029470000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3EF4000
|
unkown image
|
page readonly
|
|
|
|
21CB7335000
|
unkown
|
page read and write
|
|
|
|
7FD32000
|
unkown image
|
page readonly
|
|
|
|
7FF561AC3000
|
unkown image
|
page readonly
|
|
|
|
7FF50690D000
|
unkown image
|
page readonly
|
|
|
|
2AAEFD30000
|
heap default
|
page read and write
|
|
|
|
7DF5031A2000
|
unkown image
|
page readonly
|
|
|
|
16B9F048000
|
unkown
|
page read and write
|
|
|
|
7FF4ED784000
|
unkown image
|
page readonly
|
|
|
|
21CB7AA3000
|
unkown
|
page read and write
|
|
|
|
2794000
|
unkown image
|
page readonly
|
|
|
|
21CB730F000
|
unkown
|
page read and write
|
|
|
|
7FF506B1C000
|
unkown image
|
page readonly
|
|
|
|
2726000
|
unkown image
|
page readonly
|
|
|
|
7DF51C512000
|
unkown image
|
page readonly
|
|
|
|
466E000
|
unkown
|
page read and write
|
|
|
|
7F980000
|
unkown image
|
page readonly
|
|
|
|
7FF54F12D000
|
unkown image
|
page readonly
|
|
|
|
7E0000
|
unkown image
|
page readonly
|
|
|
|
221BC950000
|
unkown
|
page read and write
|
|
|
|
21CB7395000
|
unkown
|
page read and write
|
|
|
|
21CB7AF6000
|
unkown
|
page read and write
|
|
|
|
7F610000
|
unkown image
|
page readonly
|
|
|
|
7FF5269A0000
|
unkown image
|
page readonly
|
|
|
|
59C4C7F000
|
stack
|
page read and write
|
|
|
|
7FF54EB68000
|
unkown image
|
page readonly
|
|
|
|
7FF5B4020000
|
unkown image
|
page readonly
|
|
|
|
2740000
|
unkown image
|
page readonly
|
|
|
|
7FD30000
|
unkown image
|
page readonly
|
|
|
|
7FE12000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC5E000
|
unkown
|
page read and write
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
7321D000
|
unkown image
|
page readonly
|
|
|
|
7FF506BE0000
|
unkown image
|
page readonly
|
|
|
|
2876000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3E81000
|
unkown image
|
page readonly
|
|
|
|
16B9F224000
|
unkown
|
page read and write
|
|
|
|
7FF567C17000
|
unkown image
|
page readonly
|
|
|
|
21CB7AC1000
|
unkown
|
page read and write
|
|
|
|
21CB68E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B40A3000
|
unkown image
|
page readonly
|
|
|
|
7DF5031A0000
|
unkown image
|
page readonly
|
|
|
|
720000
|
unkown image
|
page readonly
|
|
|
|
45CE000
|
unkown
|
page read and write
|
|
|
|
16B99B07000
|
unkown
|
page read and write
|
|
|
|
2840000
|
unkown image
|
page readonly
|
|
|
|
7DF51C500000
|
unkown image
|
page readonly
|
|
|
|
1E7DFBB0000
|
unkown
|
page read and write
|
|
|
|
547DFF9000
|
stack
|
page read and write
|
|
|
|
21CB732F000
|
unkown
|
page read and write
|
|
|
|
7FF54EB6B000
|
unkown image
|
page readonly
|
|
|
|
1E7DFB90000
|
unkown image
|
page readonly
|
|
|
|
46CE000
|
unkown
|
page read and write
|
|
|
|
2EE0000
|
unkown image
|
page readonly
|
|
|
|
2EA0000
|
unkown
|
page read and write
|
|
|
|
21CB6B49000
|
unkown
|
page read and write
|
|
|
|
7DF5E77F2000
|
unkown image
|
page readonly
|
|
|
|
4C7F000
|
unkown
|
page read and write
|
|
|
|
7FF5B415B000
|
unkown image
|
page readonly
|
|
|
|
547DCFF000
|
stack
|
page read and write
|
|
|
|
7FF54F134000
|
unkown image
|
page readonly
|
|
|
|
21CB7359000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
unkown image
|
page readonly
|
|
|
|
21CB6A8E000
|
unkown
|
page read and write
|
|
|
|
21CB7350000
|
unkown
|
page read and write
|
|
|
|
7DF5C9A52000
|
unkown image
|
page readonly
|
|
|
|
2807000
|
unkown image
|
page readonly
|
|
|
|
21CB7382000
|
unkown
|
page read and write
|
|
|
|
460E000
|
unkown
|
page read and write
|
|
|
|
221BC1A0000
|
unkown image
|
page readonly
|
|
|
|
27F5000
|
unkown image
|
page readonly
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
7FF5D1EEF000
|
unkown image
|
page readonly
|
|
|
|
21CB7AF4000
|
unkown
|
page read and write
|
|
|
|
547DDFA000
|
stack
|
page read and write
|
|
|
|
7FF567C53000
|
unkown image
|
page readonly
|
|
|
|
21CB7AF0000
|
unkown
|
page read and write
|
|
|
|
21CB7360000
|
unkown
|
page read and write
|
|
|
|
B9FCBDB000
|
unkown
|
page read and write
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
7DF5C9A70000
|
unkown image
|
page readonly
|
|
|
|
21CB7331000
|
unkown
|
page read and write
|
|
|
|
2BB0000
|
heap default
|
page read and write
|
|
|
|
7F602000
|
unkown image
|
page readonly
|
|
|
|
547E0FA000
|
stack
|
page read and write
|
|
|
|
21CB7A6C000
|
unkown
|
page read and write
|
|
|
|
7FF54EC0A000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED894000
|
unkown image
|
page readonly
|
|
|
|
21CB7A92000
|
unkown
|
page read and write
|
|
|
|
270D000
|
unkown image
|
page readonly
|
|
|
|
95D31FF000
|
stack
|
page read and write
|
|
|
|
16B9A302000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
2784000
|
unkown image
|
page readonly
|
|
|
|
221BC202000
|
unkown
|
page read and write
|
|
|
|
7321D000
|
unkown image
|
page readonly
|
|
|
|
468F000
|
unkown
|
page read and write
|
|
|
|
7FF5D1D6E000
|
unkown image
|
page readonly
|
|
|
|
21CB7AB1000
|
unkown
|
page read and write
|
|
|
|
285A000
|
unkown image
|
page readonly
|
|
|
|
7FF561D53000
|
unkown image
|
page readonly
|
|
|
|
1E7DFE00000
|
unkown image
|
page readonly
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
7DF5E77F2000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC5F000
|
unkown
|
page read and write
|
|
|
|
16B9F3A0000
|
unkown
|
page read and write
|
|
|
|
21CB7335000
|
unkown
|
page read and write
|
|
|
|
2779000
|
unkown image
|
page readonly
|
|
|
|
B9FD1FB000
|
stack
|
page read and write
|
|
|
|
7FE22000
|
unkown image
|
page readonly
|
|
|
|
33F0000
|
unkown image
|
page readonly
|
|
|
|
21CB7329000
|
unkown
|
page read and write
|
|
|
|
2755000
|
unkown image
|
page readonly
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
21CB7B12000
|
unkown
|
page read and write
|
|
|
|
7FF4ED6C6000
|
unkown image
|
page readonly
|
|
|
|
1036B7A000
|
unkown
|
page read and write
|
|
|
|
7FF5D1DC4000
|
unkown image
|
page readonly
|
|
|
|
21CB6B02000
|
unkown
|
page read and write
|
|
|
|
21CB735C000
|
unkown
|
page read and write
|
|
|
|
7FF4ED7FA000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1ECD000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE3000
|
unkown
|
page read and write
|
|
|
|
21CB6940000
|
unkown image
|
page readonly
|
|
|
|
7DF401070000
|
unkown image
|
page readonly
|
|
|
|
16B9A318000
|
unkown
|
page read and write
|
|
|
|
2AB0000
|
unkown image
|
page readonly
|
|
|
|
2871000
|
unkown image
|
page readonly
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
2784000
|
unkown image
|
page readonly
|
|
|
|
16B9F2A0000
|
unkown
|
page read and write
|
|
|
|
21CB7391000
|
unkown
|
page read and write
|
|
|
|
21CB735F000
|
unkown
|
page read and write
|
|
|
|
1E7DFA90000
|
unkown image
|
page readonly
|
|
|
|
7FF506B07000
|
unkown image
|
page readonly
|
|
|
|
7DF5C9A52000
|
unkown image
|
page readonly
|
|
|
|
7FF567A54000
|
unkown image
|
page readonly
|
|
|
|
7FF5619B7000
|
unkown image
|
page readonly
|
|
|
|
21CB7394000
|
unkown
|
page read and write
|
|
|
|
7FF4ED40E000
|
unkown image
|
page readonly
|
|
|
|
28AB000
|
unkown image
|
page readonly
|
|
|
|
7FF5B39B3000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3E1F000
|
unkown image
|
page readonly
|
|
|
|
16B9F0A1000
|
unkown
|
page read and write
|
|
|
|
2AAEFD90000
|
unkown
|
page read and write
|
|
|
|
2634000
|
unkown image
|
page readonly
|
|
|
|
2A80000
|
heap default
|
page read and write
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
1BAC7950000
|
unkown
|
page read and write
|
|
|
|
21CB6B4A000
|
unkown
|
page read and write
|
|
|
|
21CB737D000
|
unkown
|
page read and write
|
|
|
|
7FD40000
|
unkown image
|
page readonly
|
|
|
|
FF0000
|
unkown image
|
page read and write
|
|
|
|
29866E00000
|
unkown image
|
page readonly
|
|
|
|
16B9F0F6000
|
unkown
|
page read and write
|
|
|
|
2B30000
|
unkown image
|
page readonly
|
|
|
|
1BAC72E0000
|
unkown
|
page read and write
|
|
|
|
21CB69D0000
|
unkown
|
page read and write
|
|
|
|
7DF5031B2000
|
unkown image
|
page readonly
|
|
|
|
7FAA0000
|
unkown image
|
page readonly
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
21CB7331000
|
unkown
|
page read and write
|
|
|
|
16B9EF10000
|
unkown
|
page read and write
|
|
|
|
7FA92000
|
unkown image
|
page readonly
|
|
|
|
7FF567C07000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED7E5000
|
unkown image
|
page readonly
|
|
|
|
7DF564A40000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC6C000
|
unkown
|
page read and write
|
|
|
|
1E7DFC2E000
|
unkown
|
page read and write
|
|
|
|
21CB737E000
|
unkown
|
page read and write
|
|
|
|
21CB73A6000
|
unkown
|
page read and write
|
|
|
|
7FF5268A0000
|
unkown image
|
page readonly
|
|
|
|
21CB7360000
|
unkown
|
page read and write
|
|
|
|
21CB7377000
|
unkown
|
page read and write
|
|
|
|
2839000
|
unkown image
|
page readonly
|
|
|
|
7DF4755D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1DE3000
|
unkown image
|
page readonly
|
|
|
|
2721000
|
unkown image
|
page readonly
|
|
|
|
21CB6B38000
|
unkown
|
page read and write
|
|
|
|
29866B30000
|
unkown image
|
page readonly
|
|
|
|
221BC6D0000
|
unkown image
|
page readonly
|
|
|
|
2EA0000
|
stack
|
page read and write
|
|
|
|
7FF4ED7A5000
|
unkown image
|
page readonly
|
|
|
|
2ED5000
|
stack
|
page execute and read and write
|
|
|
|
2879000
|
unkown image
|
page readonly
|
|
|
|
95D33FF000
|
stack
|
page read and write
|
|
|
|
16B9A318000
|
unkown
|
page read and write
|
|
|
|
21CB7350000
|
unkown
|
page read and write
|
|
|
|
7FF5B4034000
|
unkown image
|
page readonly
|
|
|
|
16B9F0B0000
|
unkown
|
page read and write
|
|
|
|
7FF567C45000
|
unkown image
|
page readonly
|
|
|
|
2B9F000
|
stack
|
page read and write
|
|
|
|
21CB7378000
|
unkown
|
page read and write
|
|
|
|
B9FD0FB000
|
stack
|
page read and write
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
7FF567CFB000
|
unkown image
|
page readonly
|
|
|
|
7FF526708000
|
unkown image
|
page readonly
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
7FF4ED815000
|
unkown image
|
page readonly
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
1E7DFD02000
|
unkown
|
page read and write
|
|
|
|
7FF5B3D11000
|
unkown image
|
page readonly
|
|
|
|
4B3E000
|
unkown
|
page read and write
|
|
|
|
7FF5B3D19000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3E5D000
|
unkown image
|
page readonly
|
|
|
|
274A000
|
unkown image
|
page readonly
|
|
|
|
2AAEFE00000
|
unkown
|
page read and write
|
|
|
|
28ED000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED7B7000
|
unkown image
|
page readonly
|
|
|
|
21CB7398000
|
unkown
|
page read and write
|
|
|
|
7FD10000
|
unkown image
|
page readonly
|
|
|
|
7FF506A8E000
|
unkown image
|
page readonly
|
|
|
|
73231000
|
unkown image
|
page read and write
|
|
|
|
7FE30000
|
unkown image
|
page readonly
|
|
|
|
7FF54EE4D000
|
unkown image
|
page readonly
|
|
|
|
7FF567BC0000
|
unkown image
|
page readonly
|
|
|
|
21CB7335000
|
unkown
|
page read and write
|
|
|
|
2831000
|
unkown image
|
page readonly
|
|
|
|
21CB7ACE000
|
unkown
|
page read and write
|
|
|
|
32D0000
|
unkown image
|
page readonly
|
|
|
|
21CB7215000
|
unkown
|
page read and write
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
1E7DFC00000
|
unkown
|
page read and write
|
|
|
|
1E7DFA60000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3DEA000
|
unkown image
|
page readonly
|
|
|
|
2780000
|
unkown image
|
page readonly
|
|
|
|
21CB6A13000
|
unkown
|
page read and write
|
|
|
|
29866C5A000
|
unkown
|
page read and write
|
|
|
|
16B99890000
|
unkown image
|
page readonly
|
|
|
|
7DF57D610000
|
unkown image
|
page readonly
|
|
|
|
21CB7331000
|
unkown
|
page read and write
|
|
|
|
2711000
|
unkown image
|
page readonly
|
|
|
|
7DF53C2E0000
|
unkown image
|
page readonly
|
|
|
|
21CB7AED000
|
unkown
|
page read and write
|
|
|
|
21CB7335000
|
unkown
|
page read and write
|
|
|
|
1BAC7302000
|
unkown
|
page read and write
|
|
|
|
7FE12000
|
unkown image
|
page readonly
|
|
|
|
2AAEFE3E000
|
unkown
|
page read and write
|
|
|
|
7DF5C9A62000
|
unkown image
|
page readonly
|
|
|
|
21CB7A00000
|
unkown
|
page read and write
|
|
|
|
21CB735C000
|
unkown
|
page read and write
|
|
|
|
16B9EF40000
|
unkown
|
page read and write
|
|
|
|
16B9F0FA000
|
unkown
|
page read and write
|
|
|
|
7FF5B415F000
|
unkown image
|
page readonly
|
|
|
|
21CB7AB1000
|
unkown
|
page read and write
|
|
|
|
2807000
|
unkown image
|
page readonly
|
|
|
|
21CB6B4A000
|
unkown
|
page read and write
|
|
|
|
29867000000
|
unkown image
|
page readonly
|
|
|
|
2ABCFC000
|
stack
|
page read and write
|
|
|
|
21CB7330000
|
unkown
|
page read and write
|
|
|
|
7FF506AFC000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC6A000
|
unkown
|
page read and write
|
|
|
|
A5C000
|
unkown
|
page read and write
|
|
|
|
7FF5D1A08000
|
unkown image
|
page readonly
|
|
|
|
FC6397D000
|
stack
|
page read and write
|
|
|
|
16B9F0A4000
|
unkown
|
page read and write
|
|
|
|
21CB7AAD000
|
unkown
|
page read and write
|
|
|
|
1F0296F0000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED7E9000
|
unkown image
|
page readonly
|
|
|
|
7FD30000
|
unkown image
|
page readonly
|
|
|
|
7FF567CC8000
|
unkown image
|
page readonly
|
|
|
|
27A5000
|
unkown image
|
page readonly
|
|
|
|
2AAEFF02000
|
unkown
|
page read and write
|
|
|
|
7FF567CFE000
|
unkown image
|
page readonly
|
|
|
|
1BAC76D0000
|
unkown image
|
page readonly
|
|
|
|
221BC860000
|
unkown image
|
page readonly
|
|
|
|
7FF5B412B000
|
unkown image
|
page readonly
|
|
|
|
7DF5C9A70000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E55000
|
unkown image
|
page readonly
|
|
|
|
21CB7AB7000
|
unkown
|
page read and write
|
|
|
|
547DEFF000
|
stack
|
page read and write
|
|
|
|
7FF4ED6D2000
|
unkown image
|
page readonly
|
|
|
|
16B99B02000
|
unkown
|
page read and write
|
|
|
|
21CB7A53000
|
unkown
|
page read and write
|
|
|
|
21CB6B6B000
|
unkown
|
page read and write
|
|
|
|
1F029480000
|
unkown image
|
page readonly
|
|
|
|
7FF5B400D000
|
unkown image
|
page readonly
|
|
|
|
2AAEFD90000
|
unkown
|
page read and write
|
|
|
|
7FF506B53000
|
unkown image
|
page readonly
|
|
|
|
16B9EFE0000
|
unkown
|
page read and write
|
|
|
|
290C000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED89B000
|
unkown image
|
page readonly
|
|
|
|
466509B000
|
unkown
|
page read and write
|
|
|
|
7FF5269CD000
|
unkown image
|
page readonly
|
|
|
|
2761000
|
unkown image
|
page readonly
|
|
|
|
2ABA7F000
|
stack
|
page read and write
|
|
|
|
46658FE000
|
stack
|
page read and write
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
21CB7202000
|
unkown
|
page read and write
|
|
|
|
7DF53C2C0000
|
unkown image
|
page readonly
|
|
|
|
7FF561DE0000
|
unkown image
|
page readonly
|
|
|
|
7FA82000
|
unkown image
|
page readonly
|
|
|
|
21CB739D000
|
unkown
|
page read and write
|
|
|
|
21CB7B12000
|
unkown
|
page read and write
|
|
|
|
7FF5B412E000
|
unkown image
|
page readonly
|
|
|
|
1036BFF000
|
unkown
|
page read and write
|
|
|
|
21CB7380000
|
unkown
|
page read and write
|
|
|
|
29866C28000
|
unkown
|
page read and write
|
|
|
|
21CB68D0000
|
heap private
|
page read and write
|
|
|
|
279A000
|
unkown image
|
page readonly
|
|
|
|
29866D13000
|
unkown
|
page read and write
|
|
|
|
7DF5031C0000
|
unkown image
|
page readonly
|
|
|
|
21CB7390000
|
unkown
|
page read and write
|
|
|
|
21CB7351000
|
unkown
|
page read and write
|
|
|
|
7FF5B4053000
|
unkown image
|
page readonly
|
|
|
|
59C437A000
|
stack
|
page read and write
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
279D000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1E3A000
|
unkown image
|
page readonly
|
|
|
|
7F600000
|
unkown image
|
page readonly
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
7FF526909000
|
unkown image
|
page readonly
|
|
|
|
21CB735A000
|
unkown
|
page read and write
|
|
|
|
270D000
|
unkown image
|
page readonly
|
|
|
|
7FC60000
|
unkown image
|
page readonly
|
|
|
|
21CB6AD7000
|
unkown
|
page read and write
|
|
|
|
7FF5D1596000
|
unkown image
|
page readonly
|
|
|
|
21CB730E000
|
unkown
|
page read and write
|
|
|
|
21CB7335000
|
unkown
|
page read and write
|
|
|
|
2879000
|
unkown image
|
page readonly
|
|
|
|
2B10000
|
unkown
|
page read and write
|
|
|
|
16B9EF10000
|
unkown
|
page read and write
|
|
|
|
1BAC7B00000
|
unkown
|
page read and write
|
|
|
|
1E7DFC69000
|
unkown
|
page read and write
|
|
|
|
7FF5B4144000
|
unkown image
|
page readonly
|
|
|
|
21CB7355000
|
unkown
|
page read and write
|
|
|
|
16B9AD63000
|
unkown
|
page read and write
|
|
|
|
806000
|
unkown
|
page read and write
|
|
|
|
7FC20000
|
unkown image
|
page readonly
|
|
|
|
7FA92000
|
unkown image
|
page readonly
|
|
|
|
7DF577702000
|
unkown image
|
page readonly
|
|
|
|
21CB7A55000
|
unkown
|
page read and write
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
2EE0000
|
unkown image
|
page readonly
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
7FF4ED40A000
|
unkown image
|
page readonly
|
|
|
|
7DF53C2D0000
|
unkown image
|
page readonly
|
|
|
|
7FF561DCF000
|
unkown image
|
page readonly
|
|
|
|
21CB7352000
|
unkown
|
page read and write
|
|
|
|
21CB7370000
|
unkown
|
page read and write
|
|
|
|
3040000
|
unkown image
|
page readonly
|
|
|
|
27B9000
|
unkown image
|
page readonly
|
|
|
|
7DF53C2C2000
|
unkown image
|
page readonly
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
21CB7A66000
|
unkown
|
page read and write
|
|
|
|
21CB735C000
|
unkown
|
page read and write
|
|
|
|
2871000
|
unkown image
|
page readonly
|
|
|
|
16BA0000000
|
unkown
|
page read and write
|
|
|
|
25D5000
|
unkown image
|
page readonly
|
|
|
|
1E7DFC7C000
|
unkown
|
page read and write
|
|
|
|
16B99AB0000
|
unkown
|
page read and write
|
|
|
|
2AB3DC000
|
unkown
|
page read and write
|
|
|
|
27FC000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE3000
|
unkown
|
page read and write
|
|
|
|
16B9EF50000
|
unkown
|
page read and write
|
|
|
|
2726000
|
unkown image
|
page readonly
|
|
|
|
2F4E000
|
stack
|
page read and write
|
|
|
|
21CB7B02000
|
unkown
|
page read and write
|
|
|
|
1440000
|
heap default
|
page read and write
|
|
|
|
7DF5031A2000
|
unkown image
|
page readonly
|
|
|
|
21CB7367000
|
unkown
|
page read and write
|
|
|
|
7FF561AC9000
|
unkown image
|
page readonly
|
|
|
|
21CB6900000
|
unkown image
|
page readonly
|
|
|
|
16B9F102000
|
unkown
|
page read and write
|
|
|
|
21CB736A000
|
unkown
|
page read and write
|
|
|
|
4990000
|
unkown image
|
page readonly
|
|
|
|
7FF506B3D000
|
unkown image
|
page readonly
|
|
|
|
7DF4C7920000
|
unkown image
|
page readonly
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
16B99850000
|
heap private
|
page read and write
|
|
|
|
1BAC7860000
|
unkown image
|
page readonly
|
|
|
|
7FC42000
|
unkown image
|
page readonly
|
|
|
|
7DF564A42000
|
unkown image
|
page readonly
|
|
|
|
7FDD0000
|
unkown image
|
page readonly
|
|
|
|
1F0299F0000
|
unkown image
|
page readonly
|
|
|
|
7FED0000
|
unkown image
|
page readonly
|
|
|
|
7DF47B4D0000
|
unkown image
|
page readonly
|
|
|
|
7FC50000
|
unkown image
|
page readonly
|
|
|
|
21CB7395000
|
unkown
|
page read and write
|
|
|
|
21CB7330000
|
unkown
|
page read and write
|
|
|
|
7FF5D1DE5000
|
unkown image
|
page readonly
|
|
|
|
2634000
|
unkown image
|
page readonly
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
7DF5C9A62000
|
unkown image
|
page readonly
|
|
|
|
21CB7329000
|
unkown
|
page read and write
|
|
|
|
7FF567A26000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED7DD000
|
unkown image
|
page readonly
|
|
|
|
1640000
|
heap default
|
page read and write
|
|
|
|
16B99A29000
|
unkown
|
page read and write
|
|
|
|
21CB7382000
|
unkown
|
page read and write
|
|
|
|
7FF5069CC000
|
unkown image
|
page readonly
|
|
|
|
29866A00000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE5000
|
unkown
|
page read and write
|
|
|
|
7FF5D1E29000
|
unkown image
|
page readonly
|
|
|
|
21CB73A3000
|
unkown
|
page read and write
|
|
|
|
21CB736A000
|
unkown
|
page read and write
|
|
|
|
1BAC71D0000
|
unkown image
|
page readonly
|
|
|
|
21CB7398000
|
unkown
|
page read and write
|
|
|
|
1BAC7200000
|
unkown
|
page read and write
|
|
|
|
7FF5B3E51000
|
unkown image
|
page readonly
|
|
|
|
16B9EFE0000
|
unkown
|
page read and write
|
|
|
|
2765000
|
unkown image
|
page readonly
|
|
|
|
21CB6B4A000
|
unkown
|
page read and write
|
|
|
|
7FF54EF9F000
|
unkown image
|
page readonly
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
2BA0000
|
unkown
|
page read and write
|
|
|
|
21CB735B000
|
unkown
|
page read and write
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
28BC000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED87E000
|
unkown image
|
page readonly
|
|
|
|
7FC50000
|
unkown image
|
page readonly
|
|
|
|
16B99880000
|
unkown image
|
page readonly
|
|
|
|
7DF577720000
|
unkown image
|
page readonly
|
|
|
|
21CB735D000
|
unkown
|
page read and write
|
|
|
|
3570000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE5000
|
unkown
|
page read and write
|
|
|
|
21CB7337000
|
unkown
|
page read and write
|
|
|
|
29866C00000
|
unkown
|
page read and write
|
|
|
|
1F0296D0000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
4625000
|
unkown
|
page execute and read and write
|
|
|
|
21CB7350000
|
unkown
|
page read and write
|
|
|
|
7FF54ECF0000
|
unkown image
|
page readonly
|
|
|
|
2F9A000
|
heap default
|
page read and write
|
|
|
|
909000
|
unkown
|
page read and write
|
|
|
|
7FF506BD6000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3E83000
|
unkown image
|
page readonly
|
|
|
|
7FF567816000
|
unkown image
|
page readonly
|
|
|
|
21CB7358000
|
unkown
|
page read and write
|
|
|
|
7F612000
|
unkown image
|
page readonly
|
|
|
|
16B998B0000
|
heap default
|
page read and write
|
|
|
|
7F0000
|
unkown image
|
page read and write
|
|
|
|
2D0E000
|
unkown
|
page read and write
|
|
|
|
7FF5269AD000
|
unkown image
|
page readonly
|
|
|
|
7FF5269B4000
|
unkown image
|
page readonly
|
|
|
|
16B9EFE0000
|
unkown
|
page read and write
|
|
|
|
7FF567CED000
|
unkown image
|
page readonly
|
|
|
|
7FF561D1C000
|
unkown image
|
page readonly
|
|
|
|
2F00000
|
heap default
|
page read and write
|
|
|
|
21CB7381000
|
unkown
|
page read and write
|
|
|
|
7FF5B3F18000
|
unkown image
|
page readonly
|
|
|
|
221BC1D0000
|
unkown image
|
page readonly
|
|
|
|
7FC42000
|
unkown image
|
page readonly
|
|
|
|
21CB7A7E000
|
unkown
|
page read and write
|
|
|
|
2755000
|
unkown image
|
page readonly
|
|
|
|
1BAC7870000
|
unkown image
|
page readonly
|
|
|
|
21CB7310000
|
unkown
|
page read and write
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
2A5E000
|
stack
|
page read and write
|
|
|
|
7FE30000
|
unkown image
|
page readonly
|
|
|
|
7FF54F057000
|
unkown image
|
page readonly
|
|
|
|
294C000
|
unkown image
|
page readonly
|
|
|
|
21CB7390000
|
unkown
|
page read and write
|
|
|
|
7FE22000
|
unkown image
|
page readonly
|
|
|
|
221BCA02000
|
unkown
|
page read and write
|
|
|
|
21CB69D0000
|
unkown
|
page read and write
|
|
|
|
164B000
|
heap default
|
page read and write
|
|
|
|
7FF5B4042000
|
unkown image
|
page readonly
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
7FF54F07D000
|
unkown image
|
page readonly
|
|
|
|
21CB6A33000
|
unkown
|
page read and write
|
|
|
|
10367AE000
|
stack
|
page read and write
|
|
|
|
21CB7377000
|
unkown
|
page read and write
|
|
|
|
21CB7360000
|
unkown
|
page read and write
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
7FF5B404C000
|
unkown image
|
page readonly
|
|
|
|
21CB7354000
|
unkown
|
page read and write
|
|
|
|
1E7DFC77000
|
unkown
|
page read and write
|
|
|
|
7FC40000
|
unkown image
|
page readonly
|
|
|
|
21CB7ABB000
|
unkown
|
page read and write
|
|
|
|
2AAEFCD0000
|
heap private
|
page read and write
|
|
|
|
16B99A7C000
|
unkown
|
page read and write
|
|
|
|
21CB7A9A000
|
unkown
|
page read and write
|
|
|
|
21CB7A95000
|
unkown
|
page read and write
|
|
|
|
21CB7A42000
|
unkown
|
page read and write
|
|
|
|
2734000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED642000
|
unkown image
|
page readonly
|
|
|
|
16B99990000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1EED000
|
unkown image
|
page readonly
|
|
|
|
3650000
|
unkown image
|
page readonly
|
|
|
|
16B99860000
|
unkown image
|
page readonly
|
|
|
|
21CB6CD0000
|
unkown image
|
page readonly
|
|
|
|
16B99E00000
|
unkown image
|
page readonly
|
|
|
|
FC635FE000
|
stack
|
page read and write
|
|
|
|
2AAEFD60000
|
unkown
|
page read and write
|
|
|
|
7FF4ED792000
|
unkown image
|
page readonly
|
|
|
|
28CD000
|
unkown image
|
page readonly
|
|
|
|
21CB7390000
|
unkown
|
page read and write
|
|
|
|
21CB736F000
|
unkown
|
page read and write
|
|
|
|
1F0297F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B39A9000
|
unkown image
|
page readonly
|
|
|
|
16B9EE00000
|
unkown
|
page read and write
|
|
|
|
2CF0000
|
unkown image
|
page readonly
|
|
|
|
7FF54F13B000
|
unkown image
|
page readonly
|
|
|
|
7FF561D49000
|
unkown image
|
page readonly
|
|
|
|
21CB7ABA000
|
unkown
|
page read and write
|
|
|
|
16B9A200000
|
unkown
|
page read and write
|
|
|
|
2E00000
|
unkown image
|
page readonly
|
|
|
|
21CB7394000
|
unkown
|
page read and write
|
|
|
|
16B9F020000
|
unkown
|
page read and write
|
|
|
|
21CB7AE3000
|
unkown
|
page read and write
|
|
|
|
2AAF00D0000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED7F3000
|
unkown image
|
page readonly
|
|
|
|
7DF51C510000
|
unkown image
|
page readonly
|
|
|
|
7FD32000
|
unkown image
|
page readonly
|
|
|
|
21CB6B4A000
|
unkown
|
page read and write
|
|
|
|
21CB7369000
|
unkown
|
page read and write
|
|
|
|
2D97000
|
unkown
|
page read and write
|
|
|
|
16B9F000000
|
unkown
|
page read and write
|
|
|
|
16B9F230000
|
unkown
|
page read and write
|
|
|
|
7DF41A3D0000
|
unkown image
|
page readonly
|
|
|
|
21CB73A5000
|
unkown
|
page read and write
|
|
|
|
221BC1C0000
|
unkown image
|
page readonly
|
|
|
|
4660000
|
heap private
|
page read and write
|
|
|
|
21CB7397000
|
unkown
|
page read and write
|
|
|
|
1BAC71C0000
|
unkown image
|
page readonly
|
|
|
|
7FF561DF4000
|
unkown image
|
page readonly
|
|
|
|
3220000
|
heap private
|
page read and write
|
|
|
|
21CB6B4A000
|
unkown
|
page read and write
|
|
|
|
21CB7A66000
|
unkown
|
page read and write
|
|
|
|
27DD000
|
unkown image
|
page readonly
|
|
|
|
2725000
|
unkown image
|
page readonly
|
|
|
|
7FF567C5A000
|
unkown image
|
page readonly
|
|
|
|
2AAEFE29000
|
unkown
|
page read and write
|
|
|
|
1BAC7267000
|
unkown
|
page read and write
|
|
|
|
21CB7AF9000
|
unkown
|
page read and write
|
|
|
|
7DF53C2D2000
|
unkown image
|
page readonly
|
|
|
|
73233000
|
unkown image
|
page readonly
|
|
|
|
21CB7330000
|
unkown
|
page read and write
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
2D10000
|
heap default
|
page read and write
|
|
|
|
1200000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1EB6000
|
unkown image
|
page readonly
|
|
|
|
2857000
|
unkown image
|
page readonly
|
|
|
|
21CB7348000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown image
|
page read and write
|
|
|
|
1BAC72BF000
|
unkown
|
page read and write
|
|
|
|
1BAC7213000
|
unkown
|
page read and write
|
|
|
|
2738000
|
unkown image
|
page readonly
|
|
|
|
1E7DFA40000
|
unkown image
|
page read and write
|
|
|
|
27F1000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED87B000
|
unkown image
|
page readonly
|
|
|
|
21CB7351000
|
unkown
|
page read and write
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
7FF506B45000
|
unkown image
|
page readonly
|
|
|
|
21CB7ABD000
|
unkown
|
page read and write
|
|
|
|
7DF5E77E0000
|
unkown image
|
page readonly
|
|
|
|
21CB7329000
|
unkown
|
page read and write
|
|
|
|
73210000
|
unkown image
|
page readonly
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
A00000
|
unkown image
|
page readonly
|
|
|
|
21CB738A000
|
unkown
|
page read and write
|
|
|
|
221BC277000
|
unkown
|
page read and write
|
|
|
|
21CB7379000
|
unkown
|
page read and write
|
|
|
|
7FF5B40AA000
|
unkown image
|
page readonly
|
|
|
|
16B99F80000
|
unkown image
|
page readonly
|
|
|
|
7DF462910000
|
unkown image
|
page readonly
|
|
|
|
16B9EDF0000
|
unkown
|
page read and write
|
|
|
|
802000
|
unkown
|
page read and write
|
|
|
|
7FF561E0B000
|
unkown image
|
page readonly
|
|
|
|
2EC0000
|
unkown image
|
page readonly
|
|
|
|
7DF577700000
|
unkown image
|
page readonly
|
|
|
|
16B99AA0000
|
unkown
|
page read and write
|
|
|
|
7FF5D1DB0000
|
unkown image
|
page readonly
|
|
|
|
7FF567BFC000
|
unkown image
|
page readonly
|
|
|
|
2AAEFE58000
|
unkown
|
page read and write
|
|
|
|
284C000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE3000
|
unkown
|
page read and write
|
|
|
|
670000
|
unkown image
|
page readonly
|
|
|
|
21CB734E000
|
unkown
|
page read and write
|
|
|
|
4490000
|
unkown image
|
page readonly
|
|
|
|
FC637FD000
|
stack
|
page read and write
|
|
|
|
21CB7376000
|
unkown
|
page read and write
|
|
|
|
7DF51C520000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3E67000
|
unkown image
|
page readonly
|
|
|
|
7FF526686000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1C40000
|
unkown image
|
page readonly
|
|
|
|
FC6387E000
|
stack
|
page read and write
|
|
|
|
46656FE000
|
stack
|
page read and write
|
|
|
|
16B9A304000
|
unkown
|
page read and write
|
|
|
|
7DF577700000
|
unkown image
|
page readonly
|
|
|
|
1BAC72C9000
|
unkown
|
page read and write
|
|
|
|
2888000
|
unkown image
|
page readonly
|
|
|
|
21CB738E000
|
unkown
|
page read and write
|
|
|
|
2845000
|
unkown image
|
page readonly
|
|
|
|
16B99B14000
|
unkown
|
page read and write
|
|
|
|
16B9F051000
|
unkown
|
page read and write
|
|
|
|
7FF5D1EC0000
|
unkown image
|
page readonly
|
|
|
|
7FF567C75000
|
unkown image
|
page readonly
|
|
|
|
1E7E0402000
|
unkown
|
page read and write
|
|
|
|
1E7DFC65000
|
unkown
|
page read and write
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
7FF567ADE000
|
unkown image
|
page readonly
|
|
|
|
7FF526255000
|
unkown image
|
page readonly
|
|
|
|
70B000
|
unkown
|
page read and write
|
|
|
|
16B9F0FE000
|
unkown
|
page read and write
|
|
|
|
7FF567BF2000
|
unkown image
|
page readonly
|
|
|
|
21CB735E000
|
unkown
|
page read and write
|
|
|
|
4880000
|
unkown
|
page read and write
|
|
|
|
7FF5D199F000
|
unkown image
|
page readonly
|
|
|
|
21CB7AE5000
|
unkown
|
page read and write
|
|
|
|
21CB69D0000
|
unkown
|
page read and write
|
|
|
|
21CB737B000
|
unkown
|
page read and write
|
|
|
|
6CC000
|
unkown
|
page read and write
|
|
|
|
464E000
|
unkown
|
page read and write
|
|
|
|
7DF53C2C0000
|
unkown image
|
page readonly
|
|
|
|
21CB7352000
|
unkown
|
page read and write
|
|
|
|
21CB735A000
|
unkown
|
page read and write
|
|
|
|
21CB7370000
|
unkown
|
page read and write
|
|
|
|
16B99C00000
|
unkown image
|
page readonly
|
|
|
|
21CB7389000
|
unkown
|
page read and write
|
|
|
|
7DF5031B0000
|
unkown image
|
page readonly
|
|
|
|
29866A20000
|
unkown image
|
page readonly
|
|
|
|
16B9EF20000
|
unkown
|
page read and write
|
|
|
|
16B9AD70000
|
unkown
|
page read and write
|
|
|
|
95D2CEC000
|
unkown
|
page read and write
|
|
|
|
298669E0000
|
unkown image
|
page read and write
|
|
|
|
7FF5268D7000
|
unkown image
|
page readonly
|
|
|
|
95D32FE000
|
stack
|
page read and write
|
|
|
|
B9FD2FF000
|
stack
|
page read and write
|
|
|
|
21CB732E000
|
unkown
|
page read and write
|
|
|
|
7FF54EEED000
|
unkown image
|
page readonly
|
|
|
|
7FF567841000
|
unkown image
|
page readonly
|
|
|
|
7DF5E77E2000
|
unkown image
|
page readonly
|
|
|
|
7FC52000
|
unkown image
|
page readonly
|
|
|
|
2844000
|
unkown image
|
page readonly
|
|
|
|
7DF57D600000
|
unkown image
|
page readonly
|
|
|
|
21CB7350000
|
unkown
|
page read and write
|
|
|
|
16B9EF54000
|
unkown
|
page read and write
|
|
There are 1575 hidden memdumps, click here to show them.