Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
WTXuYxax6d.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\EQAWN5DV\www.msn[2].xml
|
ASCII text, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\IB42RK38\contextual.media[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{5EF2C13C-4C8E-11EC-90E5-ECF4BB2D2496}.dat
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{5EF2C13E-4C8E-11EC-90E5-ECF4BB2D2496}.dat
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\wlm7n14\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\4996b9[2].woff
|
Web Open Font Format, TrueType, length 45633, version 1.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\55a804ab-e5c6-4b97-9319-86263d365d28[1].json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\AAHxkqw[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\AAQT0oN[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\AAQVPm6[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\AAQVTlD[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\AAQXiHB[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\AAQXmCn[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\AAud6Gv[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\BB1dTzfp[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\BB1fdtSt[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\BB1ftEY0[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\BB6Ma4a[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\BBXXVfm[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\BBY7ARN[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\BBZbaoj[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\de-ch[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\iab2Data[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\medianet[3].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\medianet[4].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\otCommonStyles[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\otFlat[2].json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\otPcCenter[2].json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\otTCF-ie[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\tag[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\17-361657-68ddb2ab[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\3b2da2d4-7a38-47c3-b162-f33e769f51f5[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AA6wTdK[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AA7XCQ3[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAMqFmF[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAOdxvW[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAOr6Ee[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAPFmi4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAPwrS4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAQVtAu[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAQW6nE[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAQWRAi[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAQWZxV[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAQWoU7[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAQX9oS[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAQXfYg[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAQXfgx[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAQXkUK[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAQXnHc[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\AAzb5EX[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\BB7hjL[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\BBkwUr[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\a5ea21[1].ico
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\cfdbd9[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\checksync[3].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\checksync[4].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\otSDKStub[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAKp8YX[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAPQoxX[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAPf39f[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQUJZI[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQUhxV[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQVisl[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQW0Fs[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQX4Y6[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQXaYx[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQXdUx[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQXevg[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQXf3x[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQXiy5[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQXmH5[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQXpWY[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\AAQXqrn[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\BB7hg4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\BBVuddh[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\nrrV52461[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\otBannerSdk[2].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\2d-0e97d4-185735b[1].css
|
UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\52-478955-68ddb2ab[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\AAQCmUS[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\AAQQSrK[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\AAQTQg3[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\AAQWMEO[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\AAQWN27[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\AAQWZ1M[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\AAQWeGa[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\AAQXgGS[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\AAQXqYx[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\AAycUpK[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\BB1aXBV1[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\BB1cEP3G[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\BB1cG73h[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\BB1kc8s[1].png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\BB7gRE[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\BBJBnUn[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\BBPfCZL[1].png
|
GIF image data, version 89a, 50 x 50
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\BBX2afX[2].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\a8a064[1].gif
|
GIF image data, version 89a, 28 x 28
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\de-ch[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\e151e5[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\jquery-2.1.1.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF45825F63611628F7.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFCCE32108ABF6B532.TMP
|
data
|
dropped
|
|
There are 105 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe "C:\Users\user\Desktop\WTXuYxax6d.dll"
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32.exe /s C:\Users\user\Desktop\WTXuYxax6d.dll
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\WTXuYxax6d.dll",#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\WTXuYxax6d.dll,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\WTXuYxax6d.dll,azfdnkcrayghb
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\WTXuYxax6d.dll,bngggbakts
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\WTXuYxax6d.dll",#1
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
C:\Program Files\Internet Explorer\iexplore.exe
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:7020 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://technoshoper.com/H
|
unknown
|
|
|
|
http://avolebukoneh.website
|
unknown
|
|
|
|
https://technoshoper.com/glik/qu_2BrFb5C/WnN6ktioLVJSC7NZ8/8U42mL0TVXds/GucNTaVpvRD/cGAaQnoHqkvTq7/u
|
unknown
|
|
|
|
http://technoshoper.com
|
unknown
|
|
|
|
https://technoshoper.com/k
|
unknown
|
|
|
|
https://technoshoper.com/Y
|
unknown
|
|
|
|
https://technoshoper.com/glik/DGgts_2FWsor6_2F7EcO1Do/0g4WUbLA1T/K9_2Bu0NIeWan9Hma/XZBvL_2BDNj7/jAap
|
unknown
|
|
|
|
https://technoshoper.com/glik/rHKCmFtHVZPPm/wqY5wPH_/2F29vTv7wl_2FGq_2BrLvy6/oSB1MCzJ6Y/1nsQKibmjik_
|
unknown
|
|
|
|
https://aka.ms/MicrosoftEdgeDownload"
|
unknown
|
|
|
|
https://avolebukoneh.website/e
|
unknown
|
|
|
|
https://assets.msn.com/staticsb/statics/latest/oneTrust/1.2/consent/55a804ab-e5c6-4b97-9319-86263d36
|
unknown
|
|
|
|
http://searchads.msn.net/.cfm?&&kp=1&
|
unknown
|
|
|
|
http://schemas.mic
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/coronareisen
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_promotionalstripe_na
|
unknown
|
|
|
|
https://onedrive.live.com;Fotos
|
unknown
|
|
|
|
https://www.msn.com/de-ch/sport?ocid=StripeOCID
|
unknown
|
|
|
|
https://avolebukoneh.website/glik/kUbizXMZCF/wcseO9tQzGMWY7_2B/Eo6XsQr55EXJ/TJZ97_2F328/3bdZBpl1pP_2
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
|
unknown
|
|
|
|
http://ogp.me/ns/fb#
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/er-schrie-g%c3%b6nd-weg-verpisst-euch-dann-gab-er-gas/ar-AAR0rV
|
unknown
|
|
|
|
https://www.botman.ninja/privacy-policy
|
unknown
|
|
|
|
https://outlook.live.com/mail/deeplink/compose;Kalender
|
unknown
|
|
|
|
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
|
unknown
|
|
|
|
https://www.queryclick.com/privacy-policy
|
unknown
|
|
|
|
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/t%c3%b6fffahrer-st%c3%bcrzt-nach-verfolgungsjagd-mit-der-polize
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/t%c3%b6fffahrer-liefert-sich-wilde-verfolgungsjagd-mit-der-poli
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/whistleblower-verliert-vor-gericht-gegen-z%c3%bcrcher-unispital
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/%c3%b6ffentliche-terrassen-und-mehr-velowege-dar%c3%bcber-stimm
|
unknown
|
|
|
|
https://avolebukoneh.website/lI
|
unknown
|
|
|
|
https://btloader.com/tag?o=6208086025961472&upapi=true
|
104.26.7.139
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://avolebukoneh.website/l
|
unknown
|
|
|
|
https://www.skype.com/
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=245744&a=3064090&g=24545562
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/regional
|
unknown
|
|
|
|
https://www.stroeer.de/werben-mit-stroeer/onlinewerbung/programmatic-data/sdi-datenschutz-b2c
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
|
unknown
|
|
|
|
https://amzn.to/2TTxhNg
|
unknown
|
|
|
|
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
|
unknown
|
|
|
|
https://client-s.gateway.messenger.live.com
|
unknown
|
|
|
|
https://secure.adnxs.com/clktrb?id=764680&t=1
|
unknown
|
|
|
|
https://www.msn.com/de-ch/
|
unknown
|
|
|
|
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
|
|
|
https://www.msn.com/de-ch
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
|
unknown
|
|
|
|
https://twitter.com/i/notifications;Ich
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/kann-bei-diesem-tempo-und-so-vielen-passagieren-nicht-einfach-b
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
|
unknown
|
|
|
|
https://nextmillennium.io/privacy-policy/
|
unknown
|
|
|
|
https://silvermob.com/privacy
|
unknown
|
|
|
|
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://ogp.me/ns#
|
unknown
|
|
|
|
https://play.google.com/store/apps/details?id=com.microsoft.amp.apps.bingnews&hl=de-ch&refer
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;OneDrive-App
|
unknown
|
|
|
|
https://www.skype.com/de
|
unknown
|
|
|
|
https://www.tippsundtricks.co/lifehacks/schwamm-kuhlschrank/?utm_campaign=DECH-schwamm&utm_sourc
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
|
unknown
|
|
|
|
https://tools.applemediaservices.com/api/badges/download-on-the-app-store/black/de-de?"
|
unknown
|
|
|
|
https://www.skype.com/de/download-skype
|
unknown
|
|
|
|
https://avolebukoneh.website/glik/pAGZhq9MI53nZ7OH/rIg4LX9fBTj6pjl/8TeMZNhc43A_2FVYsQ/YCg3QZ_2F/BXKX
|
unknown
|
|
|
|
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
|
|
|
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
|
unknown
|
|
|
|
https://avolebukoneh.website/glik/oPO1MTCZATyGVB9JDx/_2BxLrMZv/XGH5EgNCAONySOCpr4U_/2F_2FSC6yLxw_2BR
|
unknown
|
|
|
|
https://onedrive.live.com;OneDrive-App
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
|
unknown
|
|
|
|
https://www.google.com/chrome/static/images/favicons/favicon-16x16.png
|
unknown
|
|
|
|
https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c
|
unknown
|
|
|
|
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
|
unknown
|
|
|
|
http://avolebukoneh.website/glik/.lwe.bmp08899
|
unknown
|
|
|
|
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
|
unknown
|
|
|
|
https://assets.onestore.ms/cdnfiles/onestorerolling-1605-16000/shell/common/respond-proxy.html
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
|
unknown
|
|
|
|
http://avolebukoneh.website/glik/.lwe.bmp088991256473871MNTYAIDA1010010B
|
unknown
|
|
|
|
https://avolebukoneh.website/glik/KwktcAgJA3haqk0/Ms0fL0B4XccTTFIyK9/usG_2BHjp/uyERKVkE6Su_2Fw3uS2y/
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/googleData.json
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=195119&a=3064090&g=25021476
|
unknown
|
|
|
|
https://outlook.com/
|
unknown
|
|
|
|
https://play.google.com/intl/en_us/badges/images/generic/de_badge_web_generic.png"
|
unknown
|
|
|
|
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
|
|
|
https://www.stroeer.com/fileadmin/com/StroeerDSP_deviceStorage.json
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iabData.json
|
unknown
|
|
|
|
https://www.msn.com/de-ch/homepage/api/pdp/updatepdpdata"
|
unknown
|
|
|
|
https://docs.microsoft.co
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;Aktuelle
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
|
unknown
|
|
|
|
https://www.ebay.ch/?mkcid=1&mkrid=5222-53480-19255-0&siteid=193&campid=5338626668&t
|
unknown
|
|
|
|
https://www.msn.com/de-ch/homepage/api/modules/fetch"
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
technoshoper.com
|
45.9.20.245
|
|
|
|
avolebukoneh.website
|
unknown
|
|
|
|
contextual.media.net
|
2.18.160.23
|
|
|
|
hblg.media.net
|
2.18.160.23
|
|
|
|
lg3.media.net
|
2.18.160.23
|
|
|
|
btloader.com
|
104.26.7.139
|
|
|
|
assets.msn.com
|
unknown
|
|
|
|
web.vortex.data.msn.com
|
unknown
|
|
|
|
www.msn.com
|
unknown
|
|
|
|
cvision.media.net
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
45.9.20.245
|
technoshoper.com
|
Russian Federation
|
|
|
|
104.26.7.139
|
btloader.com
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
|
{5EF2C13C-4C8E-11EC-90E5-ECF4BB2D2496}
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Blocked
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingLastYMD
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingBitmap
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingRandomizedBitmap
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DomainSuggestion
|
NextUpdateDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\www.msn.com
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\msn.com
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\msn.com
|
NumberOfSubdomains
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
There are 84 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
53B8000
|
heap private
|
page read and write
|
|
|
|
52F8000
|
heap private
|
page read and write
|
|
|
|
52F8000
|
heap private
|
page read and write
|
|
|
|
4D49000
|
heap private
|
page read and write
|
|
|
|
4FD8000
|
heap private
|
page read and write
|
|
|
|
4FD8000
|
heap private
|
page read and write
|
|
|
|
4FD8000
|
heap private
|
page read and write
|
|
|
|
1AE8000
|
heap private
|
page read and write
|
|
|
|
2B80000
|
stack
|
page execute and read and write
|
|
|
|
1AE8000
|
heap private
|
page read and write
|
|
|
|
4FD8000
|
heap private
|
page read and write
|
|
|
|
53B8000
|
heap private
|
page read and write
|
|
|
|
513D000
|
heap private
|
page read and write
|
|
|
|
1AE8000
|
heap private
|
page read and write
|
|
|
|
A50000
|
stack
|
page read and write
|
|
|
|
52F8000
|
heap private
|
page read and write
|
|
|
|
523B000
|
heap private
|
page read and write
|
|
|
|
53B8000
|
heap private
|
page read and write
|
|
|
|
A60000
|
stack
|
page execute and read and write
|
|
|
|
53B8000
|
heap private
|
page read and write
|
|
|
|
4E5B000
|
heap private
|
page read and write
|
|
|
|
53B8000
|
heap private
|
page read and write
|
|
|
|
53B8000
|
heap private
|
page read and write
|
|
|
|
52F8000
|
heap private
|
page read and write
|
|
|
|
1AE8000
|
heap private
|
page read and write
|
|
|
|
4C5F000
|
heap private
|
page read and write
|
|
|
|
1AE8000
|
heap private
|
page read and write
|
|
|
|
4D5D000
|
heap private
|
page read and write
|
|
|
|
A40000
|
stack
|
page read and write
|
|
|
|
53B8000
|
heap private
|
page read and write
|
|
|
|
1AE8000
|
heap private
|
page read and write
|
|
|
|
52F8000
|
heap private
|
page read and write
|
|
|
|
52F8000
|
heap private
|
page read and write
|
|
|
|
52F8000
|
heap private
|
page read and write
|
|
|
|
4FD8000
|
heap private
|
page read and write
|
|
|
|
49A9000
|
heap private
|
page read and write
|
|
|
|
53B8000
|
heap private
|
page read and write
|
|
|
|
4FD8000
|
heap private
|
page read and write
|
|
|
|
4FD8000
|
heap private
|
page read and write
|
|
|
|
507D000
|
heap private
|
page read and write
|
|
|
|
4EA9000
|
heap private
|
page read and write
|
|
|
|
4FD8000
|
heap private
|
page read and write
|
|
|
|
53B8000
|
heap private
|
page read and write
|
|
|
|
870000
|
unkown
|
page read and write
|
|
|
|
B40000
|
unkown
|
page read and write
|
|
|
|
4FD8000
|
heap private
|
page read and write
|
|
|
|
1299000
|
heap private
|
page read and write
|
|
|
|
9F0000
|
unkown
|
page execute and read and write
|
|
|
|
1AE8000
|
heap private
|
page read and write
|
|
|
|
186D000
|
heap private
|
page read and write
|
|
|
|
176F000
|
heap private
|
page read and write
|
|
|
|
503F000
|
heap private
|
page read and write
|
|
|
|
1AE8000
|
heap private
|
page read and write
|
|
|
|
1AE8000
|
heap private
|
page read and write
|
|
|
|
9E0000
|
unkown
|
page read and write
|
|
|
|
196B000
|
heap private
|
page read and write
|
|
|
|
880000
|
unkown
|
page read and write
|
|
|
|
920000
|
unkown
|
page execute and read and write
|
|
|
|
517B000
|
heap private
|
page read and write
|
|
|
|
53B8000
|
heap private
|
page read and write
|
|
|
|
4F7F000
|
heap private
|
page read and write
|
|
|
|
52F8000
|
heap private
|
page read and write
|
|
|
|
2B70000
|
stack
|
page read and write
|
|
|
|
4FD8000
|
heap private
|
page read and write
|
|
|
|
1AE8000
|
heap private
|
page read and write
|
|
|
|
52F8000
|
heap private
|
page read and write
|
|
|
|
52F8000
|
heap private
|
page read and write
|
|
|
|
990000
|
unkown
|
page read and write
|
|
|
|
318E000
|
stack
|
page read and write
|
|
|
|
7FF59F224000
|
unkown image
|
page readonly
|
|
|
|
8A0000
|
unkown image
|
page read and write
|
|
|
|
2F76000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
16F1000
|
heap private
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
2891000
|
unkown image
|
page readonly
|
|
|
|
7FAE2000
|
unkown image
|
page readonly
|
|
|
|
2F97000
|
heap default
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
A76000
|
unkown
|
page read and write
|
|
|
|
1CF0EBC0000
|
unkown image
|
page readonly
|
|
|
|
589D000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2797055B000
|
unkown
|
page read and write
|
|
|
|
980000
|
unkown image
|
page readonly
|
|
|
|
1CF13990000
|
unkown
|
page read and write
|
|
|
|
7FF59F256000
|
unkown image
|
page readonly
|
|
|
|
4A3000
|
unkown
|
page read and write
|
|
|
|
8C3000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
2B2E000
|
unkown image
|
page readonly
|
|
|
|
860000
|
unkown image
|
page readonly
|
|
|
|
A5E000
|
heap default
|
page read and write
|
|
|
|
7FF5E8F81000
|
unkown image
|
page readonly
|
|
|
|
3520000
|
unkown image
|
page readonly
|
|
|
|
2796FC3C000
|
unkown
|
page read and write
|
|
|
|
279705A3000
|
unkown
|
page read and write
|
|
|
|
3190000
|
heap private
|
page read and write
|
|
|
|
B52497E000
|
stack
|
page read and write
|
|
|
|
279A000
|
unkown image
|
page readonly
|
|
|
|
7FF59F0E5000
|
unkown image
|
page readonly
|
|
|
|
7FF59B0C7000
|
unkown image
|
page readonly
|
|
|
|
1E07E527000
|
unkown
|
page read and write
|
|
|
|
2E3F8802000
|
unkown
|
page read and write
|
|
|
|
2ED0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
9A7000
|
unkown
|
page read and write
|
|
|
|
1D407300000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
1E07F390000
|
unkown
|
page read and write
|
|
|
|
2B70000
|
unkown image
|
page readonly
|
|
|
|
2796FB40000
|
unkown image
|
page readonly
|
|
|
|
27970A00000
|
unkown
|
page read and write
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
2796FC13000
|
unkown
|
page read and write
|
|
|
|
7FF572ED2000
|
unkown image
|
page readonly
|
|
|
|
7FF59AE97000
|
unkown image
|
page readonly
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
2895000
|
unkown image
|
page readonly
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
7FF5120E1000
|
unkown image
|
page readonly
|
|
|
|
7DF409200000
|
unkown image
|
page readonly
|
|
|
|
2867000
|
unkown image
|
page readonly
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
1CF0E413000
|
unkown
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
2797059B000
|
unkown
|
page read and write
|
|
|
|
9E2000
|
unkown
|
page read and write
|
|
|
|
54FB000
|
unkown
|
page read and write
|
|
|
|
B5B4F9000
|
stack
|
page read and write
|
|
|
|
7FF70000
|
unkown image
|
page readonly
|
|
|
|
7FF517344000
|
unkown image
|
page readonly
|
|
|
|
7FF572E9B000
|
unkown image
|
page readonly
|
|
|
|
4990000
|
unkown
|
page read and write
|
|
|
|
43D0000
|
stack
|
page read and write
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
2932000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
unkown image
|
page readonly
|
|
|
|
5899000
|
unkown
|
page read and write
|
|
|
|
985000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2258C7E000
|
stack
|
page read and write
|
|
|
|
53BA000
|
heap private
|
page read and write
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
54F1000
|
unkown
|
page read and write
|
|
|
|
1E07F330000
|
unkown
|
page read and write
|
|
|
|
A5D000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
7FF59F267000
|
unkown image
|
page readonly
|
|
|
|
A91000
|
unkown image
|
page execute read
|
|
|
|
7FF5120E4000
|
unkown image
|
page readonly
|
|
|
|
DA40F7A000
|
stack
|
page read and write
|
|
|
|
9E2000
|
unkown
|
page read and write
|
|
|
|
27970516000
|
unkown
|
page read and write
|
|
|
|
7FF511EBC000
|
unkown image
|
page readonly
|
|
|
|
63D000
|
unkown
|
page read and write
|
|
|
|
7FF59AFC1000
|
unkown image
|
page readonly
|
|
|
|
2FDA000
|
unkown
|
page read and write
|
|
|
|
7FF572DCF000
|
unkown image
|
page readonly
|
|
|
|
453E000
|
stack
|
page read and write
|
|
|
|
2797057E000
|
unkown
|
page read and write
|
|
|
|
7FBB0000
|
unkown image
|
page readonly
|
|
|
|
2796FC4F000
|
unkown
|
page read and write
|
|
|
|
2F4A000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
7DF57CC70000
|
unkown image
|
page readonly
|
|
|
|
A10000
|
unkown image
|
page readonly
|
|
|
|
536F000
|
stack
|
page read and write
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
2E3F7FD0000
|
unkown image
|
page readonly
|
|
|
|
7FF59AE5A000
|
unkown image
|
page readonly
|
|
|
|
92E000
|
unkown
|
page read and write
|
|
|
|
7FF5014E7000
|
unkown image
|
page readonly
|
|
|
|
7FF517541000
|
unkown image
|
page readonly
|
|
|
|
1E07E3E0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FB92000
|
unkown image
|
page readonly
|
|
|
|
7FF501447000
|
unkown image
|
page readonly
|
|
|
|
7FF59F027000
|
unkown image
|
page readonly
|
|
|
|
1D407280000
|
unkown
|
page read and write
|
|
|
|
52FD000
|
heap private
|
page read and write
|
|
|
|
1D40723C000
|
unkown
|
page read and write
|
|
|
|
3360000
|
unkown image
|
page readonly
|
|
|
|
290D000
|
unkown image
|
page readonly
|
|
|
|
7FF572DFA000
|
unkown image
|
page readonly
|
|
|
|
1CF13C52000
|
unkown
|
page read and write
|
|
|
|
1CF13CF9000
|
unkown
|
page read and write
|
|
|
|
895000
|
unkown
|
page read and write
|
|
|
|
571B000
|
unkown
|
page read and write
|
|
|
|
46A0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
7FF517517000
|
unkown image
|
page readonly
|
|
|
|
7FF572DDF000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
4AC0000
|
unkown
|
page read and write
|
|
|
|
2E3F808E000
|
unkown
|
page read and write
|
|
|
|
2FEF000
|
unkown
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
1D407213000
|
unkown
|
page read and write
|
|
|
|
27970A02000
|
unkown
|
page read and write
|
|
|
|
A81000
|
unkown image
|
page execute read
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
1CF13CA2000
|
unkown
|
page read and write
|
|
|
|
1E07E527000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7FF5120ED000
|
unkown image
|
page readonly
|
|
|
|
9D0000
|
unkown image
|
page readonly
|
|
|
|
A7B000
|
heap default
|
page read and write
|
|
|
|
7FF5E8FAA000
|
unkown image
|
page readonly
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
EDE000
|
stack
|
page read and write
|
|
|
|
7DF5F2D90000
|
unkown image
|
page readonly
|
|
|
|
2F4B000
|
heap default
|
page read and write
|
|
|
|
736D0000
|
unkown image
|
page readonly
|
|
|
|
268F000
|
unkown image
|
page readonly
|
|
|
|
2E3F8088000
|
unkown
|
page read and write
|
|
|
|
A20000
|
heap default
|
page read and write
|
|
|
|
A75000
|
unkown
|
page read and write
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF5012CE000
|
unkown image
|
page readonly
|
|
|
|
A87000
|
unkown
|
page read and write
|
|
|
|
2796FCF7000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
2923000
|
unkown image
|
page readonly
|
|
|
|
291E000
|
unkown image
|
page readonly
|
|
|
|
4A28000
|
heap private
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF517642000
|
unkown image
|
page readonly
|
|
|
|
27970584000
|
unkown
|
page read and write
|
|
|
|
1CF13998000
|
unkown
|
page read and write
|
|
|
|
1CF0E300000
|
unkown image
|
page readonly
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
294D000
|
unkown image
|
page readonly
|
|
|
|
7FF517566000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF5172B7000
|
unkown image
|
page readonly
|
|
|
|
2C1D000
|
unkown image
|
page readonly
|
|
|
|
8FC000
|
unkown
|
page read and write
|
|
|
|
4FDD000
|
heap private
|
page read and write
|
|
|
|
279705C3000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2FEF000
|
unkown
|
page read and write
|
|
|
|
27970582000
|
unkown
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
2916000
|
unkown image
|
page readonly
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
2BB1000
|
unkown image
|
page execute read
|
|
|
|
2E3F7FF0000
|
unkown
|
page read and write
|
|
|
|
7FF59B0B6000
|
unkown image
|
page readonly
|
|
|
|
2E3F8113000
|
unkown
|
page read and write
|
|
|
|
1D407302000
|
unkown
|
page read and write
|
|
|
|
27970592000
|
unkown
|
page read and write
|
|
|
|
7FF59E992000
|
unkown image
|
page readonly
|
|
|
|
7FF51758D000
|
unkown image
|
page readonly
|
|
|
|
736EF000
|
unkown image
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
7FB00000
|
unkown image
|
page readonly
|
|
|
|
54FA000
|
unkown
|
page read and write
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
2968000
|
unkown image
|
page readonly
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A87000
|
unkown
|
page read and write
|
|
|
|
882000
|
unkown
|
page read and write
|
|
|
|
7FF51759E000
|
unkown image
|
page readonly
|
|
|
|
3C0000
|
unkown image
|
page readonly
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
3000000
|
unkown
|
page read and write
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
F843FFB000
|
stack
|
page read and write
|
|
|
|
2796FC57000
|
unkown
|
page read and write
|
|
|
|
7FF59ED17000
|
unkown image
|
page readonly
|
|
|
|
2F63000
|
unkown
|
page read and write
|
|
|
|
2662000
|
unkown image
|
page readonly
|
|
|
|
8E0000
|
unkown image
|
page readonly
|
|
|
|
1E07E450000
|
unkown
|
page read and write
|
|
|
|
7FA90000
|
unkown image
|
page readonly
|
|
|
|
7DF5F2D72000
|
unkown image
|
page readonly
|
|
|
|
2796FAD0000
|
heap private
|
page read and write
|
|
|
|
53BA000
|
heap private
|
page read and write
|
|
|
|
2796FC58000
|
unkown
|
page read and write
|
|
|
|
310D000
|
stack
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
7DF41F2B0000
|
unkown image
|
page readonly
|
|
|
|
4FDE000
|
heap private
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
285E000
|
unkown image
|
page readonly
|
|
|
|
2797055B000
|
unkown
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
7FF59EFFA000
|
unkown image
|
page readonly
|
|
|
|
2FEF000
|
unkown
|
page read and write
|
|
|
|
7FF517308000
|
unkown image
|
page readonly
|
|
|
|
2FF6000
|
heap default
|
page read and write
|
|
|
|
1E07E527000
|
unkown
|
page read and write
|
|
|
|
B524A7F000
|
stack
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
5810000
|
unkown
|
page read and write
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
27970592000
|
unkown
|
page read and write
|
|
|
|
1AED000
|
heap private
|
page read and write
|
|
|
|
7DF4A6ED0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
9AA000
|
unkown
|
page read and write
|
|
|
|
7F000000
|
unkown image
|
page readonly
|
|
|
|
A90000
|
unkown image
|
page read and write
|
|
|
|
B03000
|
unkown
|
page read and write
|
|
|
|
8A8000
|
unkown
|
page read and write
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
3008000
|
unkown
|
page read and write
|
|
|
|
A9F000
|
unkown
|
page read and write
|
|
|
|
28F8000
|
unkown image
|
page readonly
|
|
|
|
1E07E524000
|
unkown
|
page read and write
|
|
|
|
B02000
|
unkown
|
page read and write
|
|
|
|
3D01000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
288A000
|
unkown image
|
page readonly
|
|
|
|
1CF0E476000
|
unkown
|
page read and write
|
|
|
|
589D000
|
unkown
|
page read and write
|
|
|
|
D8D000
|
unkown image
|
page read and write
|
|
|
|
1E07F310000
|
unkown
|
page read and write
|
|
|
|
2795000
|
unkown image
|
page readonly
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
893000
|
unkown
|
page read and write
|
|
|
|
22A9ABB9000
|
unkown
|
page read and write
|
|
|
|
895000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
3002000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
AFA000
|
unkown
|
page read and write
|
|
|
|
7FF5E8F16000
|
unkown image
|
page readonly
|
|
|
|
A76000
|
unkown
|
page read and write
|
|
|
|
1CF0E47B000
|
unkown
|
page read and write
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
288A000
|
unkown image
|
page readonly
|
|
|
|
7FF572E29000
|
unkown image
|
page readonly
|
|
|
|
736EC000
|
unkown image
|
page write copy
|
|
|
|
AA3000
|
unkown
|
page read and write
|
|
|
|
27970A02000
|
unkown
|
page read and write
|
|
|
|
27970592000
|
unkown
|
page read and write
|
|
|
|
7FF5E8F8D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E8F1D000
|
unkown image
|
page readonly
|
|
|
|
28F5000
|
unkown image
|
page readonly
|
|
|
|
A0C000
|
unkown
|
page read and write
|
|
|
|
7FF59AFD3000
|
unkown image
|
page readonly
|
|
|
|
27970561000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
22590FE000
|
stack
|
page read and write
|
|
|
|
BCB000
|
unkown
|
page read and write
|
|
|
|
1CF13880000
|
unkown
|
page read and write
|
|
|
|
27970A02000
|
unkown
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
22A9ABAE000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
736E1000
|
unkown image
|
page readonly
|
|
|
|
2F76000
|
unkown
|
page read and write
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
980000
|
unkown image
|
page readonly
|
|
|
|
7DF5213F0000
|
unkown image
|
page readonly
|
|
|
|
7FAE2000
|
unkown image
|
page readonly
|
|
|
|
2932000
|
unkown image
|
page readonly
|
|
|
|
1F5C4A67000
|
unkown
|
page read and write
|
|
|
|
7FF50126F000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF5E8FC3000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
5711000
|
unkown
|
page read and write
|
|
|
|
1E07E525000
|
unkown
|
page read and write
|
|
|
|
7FF60000
|
unkown image
|
page readonly
|
|
|
|
1CF13CF1000
|
unkown
|
page read and write
|
|
|
|
2796FCBA000
|
unkown
|
page read and write
|
|
|
|
D90000
|
heap default
|
page read and write
|
|
|
|
225899E000
|
stack
|
page read and write
|
|
|
|
22A9ABC0000
|
unkown
|
page read and write
|
|
|
|
7FF501265000
|
unkown image
|
page readonly
|
|
|
|
94B000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown image
|
page readonly
|
|
|
|
1CF0E2E0000
|
unkown image
|
page readonly
|
|
|
|
A0C000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
53EF000
|
stack
|
page read and write
|
|
|
|
7DF5A9000000
|
unkown image
|
page readonly
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
290D000
|
unkown image
|
page readonly
|
|
|
|
96E000
|
unkown
|
page read and write
|
|
|
|
8A8000
|
unkown
|
page read and write
|
|
|
|
4780000
|
stack
|
page read and write
|
|
|
|
A76000
|
unkown
|
page read and write
|
|
|
|
1CF139B0000
|
unkown
|
page read and write
|
|
|
|
BC7000
|
unkown
|
page read and write
|
|
|
|
5503000
|
unkown
|
page read and write
|
|
|
|
30CC000
|
stack
|
page read and write
|
|
|
|
27970584000
|
unkown
|
page read and write
|
|
|
|
22A9A990000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B97000
|
unkown image
|
page readonly
|
|
|
|
7FF5012A0000
|
unkown image
|
page readonly
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
7FF501557000
|
unkown image
|
page readonly
|
|
|
|
90B000
|
unkown
|
page read and write
|
|
|
|
36EF000
|
stack
|
page read and write
|
|
|
|
2795000
|
unkown image
|
page readonly
|
|
|
|
1D407200000
|
unkown
|
page read and write
|
|
|
|
1CF13990000
|
unkown
|
page read and write
|
|
|
|
1CF0E4AD000
|
unkown
|
page read and write
|
|
|
|
1F5C4920000
|
heap default
|
page read and write
|
|
|
|
3290000
|
unkown image
|
page readonly
|
|
|
|
A0C000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
1D407180000
|
unkown image
|
page readonly
|
|
|
|
7DF50B332000
|
unkown image
|
page readonly
|
|
|
|
2F76000
|
unkown
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
1E07F0D0000
|
unkown
|
page read and write
|
|
|
|
7FF59F078000
|
unkown image
|
page readonly
|
|
|
|
28E1000
|
unkown image
|
page readonly
|
|
|
|
A77000
|
unkown
|
page read and write
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7DF5F2D72000
|
unkown image
|
page readonly
|
|
|
|
2F4A000
|
unkown
|
page read and write
|
|
|
|
7FF59F227000
|
unkown image
|
page readonly
|
|
|
|
73B000
|
unkown
|
page read and write
|
|
|
|
2F73000
|
unkown
|
page read and write
|
|
|
|
2796FCEC000
|
unkown
|
page read and write
|
|
|
|
273A000
|
unkown image
|
page readonly
|
|
|
|
574D000
|
stack
|
page read and write
|
|
|
|
A76000
|
unkown
|
page read and write
|
|
|
|
22A9A9B0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9010000
|
unkown image
|
page readonly
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
7FF51754F000
|
unkown image
|
page readonly
|
|
|
|
3002000
|
heap default
|
page read and write
|
|
|
|
27970580000
|
unkown
|
page read and write
|
|
|
|
2F76000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
7DF57CC80000
|
unkown image
|
page readonly
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
9E2000
|
heap default
|
page read and write
|
|
|
|
590000
|
unkown image
|
page readonly
|
|
|
|
1E07E53F000
|
unkown
|
page read and write
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
7DF5A9020000
|
unkown image
|
page readonly
|
|
|
|
22A9AB00000
|
unkown image
|
page readonly
|
|
|
|
574C000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
7FF59F1AD000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
9E2000
|
unkown
|
page read and write
|
|
|
|
2E3F8102000
|
unkown
|
page read and write
|
|
|
|
7FF572987000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2932000
|
unkown image
|
page readonly
|
|
|
|
7DF50B340000
|
unkown image
|
page readonly
|
|
|
|
4BE0000
|
heap private
|
page read and write
|
|
|
|
11B7AFE000
|
stack
|
page read and write
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
2E3F82D0000
|
unkown image
|
page readonly
|
|
|
|
950000
|
unkown image
|
page readonly
|
|
|
|
5503000
|
unkown
|
page read and write
|
|
|
|
B5B57E000
|
stack
|
page read and write
|
|
|
|
7DF5213E2000
|
unkown image
|
page readonly
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
7DF5A4E70000
|
unkown image
|
page readonly
|
|
|
|
7FF59B084000
|
unkown image
|
page readonly
|
|
|
|
7FF5175F4000
|
unkown image
|
page readonly
|
|
|
|
895000
|
heap default
|
page read and write
|
|
|
|
2797055D000
|
unkown
|
page read and write
|
|
|
|
7FF59AF45000
|
unkown image
|
page readonly
|
|
|
|
318D000
|
stack
|
page read and write
|
|
|
|
3002000
|
unkown
|
page read and write
|
|
|
|
A8F000
|
unkown image
|
page readonly
|
|
|
|
7FF511D01000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2BC5000
|
unkown image
|
page readonly
|
|
|
|
7FF517586000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2796FC54000
|
unkown
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
882000
|
unkown
|
page read and write
|
|
|
|
1E07E4A0000
|
heap private
|
page read and write
|
|
|
|
1CF0F300000
|
unkown image
|
page read and write
|
|
|
|
7FF572E8D000
|
unkown image
|
page readonly
|
|
|
|
22A9ABAE000
|
unkown
|
page read and write
|
|
|
|
736EF000
|
unkown image
|
page read and write
|
|
|
|
1AEA000
|
heap private
|
page read and write
|
|
|
|
291E000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9000000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF501474000
|
unkown image
|
page readonly
|
|
|
|
3B3F000
|
stack
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
4AFC000
|
stack
|
page read and write
|
|
|
|
3002000
|
unkown
|
page read and write
|
|
|
|
5711000
|
unkown
|
page read and write
|
|
|
|
290D000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A6D000
|
stack
|
page read and write
|
|
|
|
1E07E6A0000
|
unkown
|
page read and write
|
|
|
|
AA5000
|
heap default
|
page read and write
|
|
|
|
810000
|
heap default
|
page read and write
|
|
|
|
4ABD000
|
stack
|
page read and write
|
|
|
|
2FF3000
|
unkown
|
page read and write
|
|
|
|
2FFE000
|
unkown
|
page read and write
|
|
|
|
7FAF0000
|
unkown image
|
page readonly
|
|
|
|
279705A1000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A30000
|
heap private
|
page read and write
|
|
|
|
7FF5012D0000
|
unkown image
|
page readonly
|
|
|
|
7FF59F262000
|
unkown image
|
page readonly
|
|
|
|
4BE1000
|
heap private
|
page read and write
|
|
|
|
273A000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
152B000
|
stack
|
page read and write
|
|
|
|
1CF13CEA000
|
unkown
|
page read and write
|
|
|
|
736E1000
|
unkown image
|
page readonly
|
|
|
|
22A9B000000
|
unkown image
|
page readonly
|
|
|
|
2FF3000
|
heap default
|
page read and write
|
|
|
|
7FF51761A000
|
unkown image
|
page readonly
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
1F5C4B13000
|
unkown
|
page read and write
|
|
|
|
7FF5014BA000
|
unkown image
|
page readonly
|
|
|
|
7FF501386000
|
unkown image
|
page readonly
|
|
|
|
A25000
|
unkown
|
page read and write
|
|
|
|
2796FC4E000
|
unkown
|
page read and write
|
|
|
|
1F5C4B08000
|
unkown
|
page read and write
|
|
|
|
7FA90000
|
unkown image
|
page readonly
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
1F5C48F0000
|
unkown image
|
page readonly
|
|
|
|
2867000
|
unkown image
|
page readonly
|
|
|
|
7FF59B087000
|
unkown image
|
page readonly
|
|
|
|
2FD5000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
4310000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
22A9A970000
|
unkown image
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
2E3F804E000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF72000
|
unkown image
|
page readonly
|
|
|
|
2BEF000
|
stack
|
page read and write
|
|
|
|
1D407100000
|
unkown image
|
page read and write
|
|
|
|
53AE000
|
stack
|
page read and write
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
7FF5014C2000
|
unkown image
|
page readonly
|
|
|
|
27970512000
|
unkown
|
page read and write
|
|
|
|
7FF59AB71000
|
unkown image
|
page readonly
|
|
|
|
736D0000
|
unkown image
|
page readonly
|
|
|
|
1CF13870000
|
unkown
|
page read and write
|
|
|
|
493C000
|
stack
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
2867000
|
unkown image
|
page readonly
|
|
|
|
57CE000
|
stack
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
5711000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown image
|
page readonly
|
|
|
|
7FF501415000
|
unkown image
|
page readonly
|
|
|
|
7FF59F211000
|
unkown image
|
page readonly
|
|
|
|
3008000
|
unkown
|
page read and write
|
|
|
|
2919000
|
unkown image
|
page readonly
|
|
|
|
2F76000
|
unkown
|
page read and write
|
|
|
|
8E0000
|
unkown image
|
page readonly
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
1E07E470000
|
unkown image
|
page readonly
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
22591FF000
|
stack
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7FF517403000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9002000
|
unkown image
|
page readonly
|
|
|
|
7FAF2000
|
unkown image
|
page readonly
|
|
|
|
1D407252000
|
unkown
|
page read and write
|
|
|
|
1F5C5080000
|
unkown
|
page read and write
|
|
|
|
A75000
|
unkown
|
page read and write
|
|
|
|
2F76000
|
unkown
|
page read and write
|
|
|
|
52FA000
|
heap private
|
page read and write
|
|
|
|
7FF5E8F27000
|
unkown image
|
page readonly
|
|
|
|
286F000
|
unkown image
|
page readonly
|
|
|
|
DDF000
|
stack
|
page read and write
|
|
|
|
DA40EFE000
|
stack
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
1CF13AB0000
|
unkown
|
page read and write
|
|
|
|
2797058F000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF50148F000
|
unkown image
|
page readonly
|
|
|
|
2FF3000
|
unkown
|
page read and write
|
|
|
|
D4D000
|
stack
|
page read and write
|
|
|
|
2895000
|
unkown image
|
page readonly
|
|
|
|
2944000
|
unkown image
|
page readonly
|
|
|
|
8E0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF5E8EE3000
|
unkown image
|
page readonly
|
|
|
|
7FF5E8EE5000
|
unkown image
|
page readonly
|
|
|
|
2E3F8650000
|
unkown image
|
page readonly
|
|
|
|
3003000
|
unkown
|
page read and write
|
|
|
|
7FE90000
|
unkown image
|
page readonly
|
|
|
|
1AEA000
|
heap private
|
page read and write
|
|
|
|
3002000
|
unkown
|
page read and write
|
|
|
|
7FF59EED1000
|
unkown image
|
page readonly
|
|
|
|
2BDD000
|
unkown image
|
page readonly
|
|
|
|
7FF501592000
|
unkown image
|
page readonly
|
|
|
|
1CF13CAE000
|
unkown
|
page read and write
|
|
|
|
2796FC5D000
|
unkown
|
page read and write
|
|
|
|
7FF5120FB000
|
unkown image
|
page readonly
|
|
|
|
1F5C48C0000
|
heap private
|
page read and write
|
|
|
|
7FF501554000
|
unkown image
|
page readonly
|
|
|
|
8A8000
|
unkown
|
page read and write
|
|
|
|
7FF512137000
|
unkown image
|
page readonly
|
|
|
|
7FF59F18A000
|
unkown image
|
page readonly
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
1318000
|
heap private
|
page read and write
|
|
|
|
B02000
|
unkown
|
page read and write
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
1E07F0C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E8F9B000
|
unkown image
|
page readonly
|
|
|
|
1CF0ED59000
|
unkown
|
page read and write
|
|
|
|
1D407110000
|
heap private
|
page read and write
|
|
|
|
4E5D000
|
stack
|
page read and write
|
|
|
|
736EC000
|
unkown image
|
page write copy
|
|
|
|
A87000
|
unkown
|
page read and write
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
859000
|
unkown
|
page read and write
|
|
|
|
1E07F050000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
27970595000
|
unkown
|
page read and write
|
|
|
|
8C4000
|
unkown
|
page read and write
|
|
|
|
279705A2000
|
unkown
|
page read and write
|
|
|
|
7DF51BED2000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
7FF501544000
|
unkown image
|
page readonly
|
|
|
|
A94000
|
heap default
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
4FDD000
|
heap private
|
page read and write
|
|
|
|
54F1000
|
unkown
|
page read and write
|
|
|
|
7FF59AED8000
|
unkown image
|
page readonly
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
7FF59AED5000
|
unkown image
|
page readonly
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
286F000
|
unkown image
|
page readonly
|
|
|
|
1CF0E3F0000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
1CF139B4000
|
unkown
|
page read and write
|
|
|
|
B5B679000
|
stack
|
page read and write
|
|
|
|
275B000
|
unkown image
|
page readonly
|
|
|
|
B03000
|
unkown
|
page read and write
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2BBF000
|
unkown image
|
page readonly
|
|
|
|
26A0000
|
unkown image
|
page readonly
|
|
|
|
2796FC70000
|
unkown
|
page read and write
|
|
|
|
269B000
|
unkown image
|
page readonly
|
|
|
|
3C0000
|
unkown image
|
page readonly
|
|
|
|
736EF000
|
unkown image
|
page read and write
|
|
|
|
960000
|
unkown image
|
page readonly
|
|
|
|
5711000
|
unkown
|
page read and write
|
|
|
|
D81000
|
unkown image
|
page execute read
|
|
|
|
27970586000
|
unkown
|
page read and write
|
|
|
|
1D407170000
|
heap default
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
56CE000
|
stack
|
page read and write
|
|
|
|
1CF13CE4000
|
unkown
|
page read and write
|
|
|
|
2BBD000
|
unkown image
|
page read and write
|
|
|
|
5503000
|
unkown
|
page read and write
|
|
|
|
7FF572DED000
|
unkown image
|
page readonly
|
|
|
|
2796FC5A000
|
unkown
|
page read and write
|
|
|
|
1A69000
|
heap private
|
page read and write
|
|
|
|
736D0000
|
unkown image
|
page readonly
|
|
|
|
54FE000
|
unkown
|
page read and write
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
27970350000
|
unkown
|
page read and write
|
|
|
|
9FC000
|
unkown
|
page read and write
|
|
|
|
2796FCA5000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
7FF59AFBF000
|
unkown image
|
page readonly
|
|
|
|
736D0000
|
unkown image
|
page readonly
|
|
|
|
290B000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown image
|
page readonly
|
|
|
|
2FF3000
|
unkown
|
page read and write
|
|
|
|
589A000
|
unkown
|
page read and write
|
|
|
|
7FF572E81000
|
unkown image
|
page readonly
|
|
|
|
1D00000
|
unkown image
|
page readonly
|
|
|
|
7FF511CFE000
|
unkown image
|
page readonly
|
|
|
|
5502000
|
unkown
|
page read and write
|
|
|
|
A5D000
|
unkown
|
page read and write
|
|
|
|
3D00000
|
unkown
|
page read and write
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
1F5C4A00000
|
unkown
|
page read and write
|
|
|
|
2BC8000
|
unkown image
|
page readonly
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
2258FF7000
|
stack
|
page read and write
|
|
|
|
27970A02000
|
unkown
|
page read and write
|
|
|
|
11B7E77000
|
stack
|
page read and write
|
|
|
|
4F28000
|
heap private
|
page read and write
|
|
|
|
1CF13AF0000
|
unkown
|
page read and write
|
|
|
|
1F5C48B0000
|
unkown image
|
page read and write
|
|
|
|
3008000
|
unkown
|
page read and write
|
|
|
|
2796FC4B000
|
unkown
|
page read and write
|
|
|
|
291E000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
B05000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown
|
page read and write
|
|
|
|
7DF50B342000
|
unkown image
|
page readonly
|
|
|
|
48FE000
|
stack
|
page read and write
|
|
|
|
7FF59F1B9000
|
unkown image
|
page readonly
|
|
|
|
830000
|
heap default
|
page read and write
|
|
|
|
293C000
|
unkown image
|
page readonly
|
|
|
|
2E3F7F90000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
2796FAE0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
B524477000
|
stack
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
2796FB10000
|
unkown image
|
page readonly
|
|
|
|
2A2B000
|
unkown image
|
page readonly
|
|
|
|
4630000
|
heap private
|
page read and write
|
|
|
|
F843EFF000
|
stack
|
page read and write
|
|
|
|
5718000
|
unkown
|
page read and write
|
|
|
|
27970584000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF572CE8000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
heap default
|
page read and write
|
|
|
|
7FF59A7F2000
|
unkown image
|
page readonly
|
|
|
|
7FF517357000
|
unkown image
|
page readonly
|
|
|
|
2796FAE0000
|
unkown image
|
page readonly
|
|
|
|
736D0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
16C0000
|
unkown
|
page read and write
|
|
|
|
7FF5172F3000
|
unkown image
|
page readonly
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
7FBB0000
|
unkown image
|
page readonly
|
|
|
|
225891C000
|
unkown
|
page read and write
|
|
|
|
8A8000
|
unkown
|
page read and write
|
|
|
|
7FF511F48000
|
unkown image
|
page readonly
|
|
|
|
882000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
279705DE000
|
unkown
|
page read and write
|
|
|
|
2B3F000
|
unkown image
|
page readonly
|
|
|
|
1CF0E4A5000
|
unkown
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
86F000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
7DF5A4E62000
|
unkown image
|
page readonly
|
|
|
|
7FAE0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7FF59AEB6000
|
unkown image
|
page readonly
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
11B7F7F000
|
stack
|
page read and write
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
3B40000
|
unkown
|
page read and write
|
|
|
|
54C000
|
unkown
|
page read and write
|
|
|
|
2A14000
|
unkown image
|
page readonly
|
|
|
|
11B778C000
|
unkown
|
page read and write
|
|
|
|
A0B000
|
unkown
|
page read and write
|
|
|
|
7FF59F23A000
|
unkown image
|
page readonly
|
|
|
|
A2A000
|
heap default
|
page read and write
|
|
|
|
B5249FE000
|
stack
|
page read and write
|
|
|
|
7FF5173F3000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7DF57CC72000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7F002000
|
unkown image
|
page readonly
|
|
|
|
B524F7F000
|
stack
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
882000
|
unkown
|
page read and write
|
|
|
|
4990000
|
unkown
|
page read and write
|
|
|
|
1AEA000
|
heap private
|
page read and write
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
2F75000
|
unkown
|
page read and write
|
|
|
|
7FF517481000
|
unkown image
|
page readonly
|
|
|
|
7FF517534000
|
unkown image
|
page readonly
|
|
|
|
F8441FF000
|
stack
|
page read and write
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
2C30000
|
unkown image
|
page readonly
|
|
|
|
7FF59B074000
|
unkown image
|
page readonly
|
|
|
|
7FF517417000
|
unkown image
|
page readonly
|
|
|
|
7FF5174B1000
|
unkown image
|
page readonly
|
|
|
|
275B000
|
unkown image
|
page readonly
|
|
|
|
314D000
|
stack
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
E15E6FE000
|
stack
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
2891000
|
unkown image
|
page readonly
|
|
|
|
2867000
|
unkown image
|
page readonly
|
|
|
|
1D407258000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
92E000
|
unkown
|
page read and write
|
|
|
|
1E07EC30000
|
unkown image
|
page readonly
|
|
|
|
2BDB000
|
unkown image
|
page readonly
|
|
|
|
7FF5013A0000
|
unkown image
|
page readonly
|
|
|
|
292E000
|
unkown image
|
page readonly
|
|
|
|
2797058C000
|
unkown
|
page read and write
|
|
|
|
28F5000
|
unkown image
|
page readonly
|
|
|
|
7FF572DE3000
|
unkown image
|
page readonly
|
|
|
|
54F4000
|
unkown
|
page read and write
|
|
|
|
7FF517172000
|
unkown image
|
page readonly
|
|
|
|
3008000
|
unkown
|
page read and write
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
736D0000
|
unkown image
|
page readonly
|
|
|
|
2796FC69000
|
unkown
|
page read and write
|
|
|
|
5896000
|
unkown
|
page read and write
|
|
|
|
45BB000
|
stack
|
page read and write
|
|
|
|
AFE000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
2795000
|
unkown image
|
page readonly
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
9F5000
|
unkown
|
page execute and read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
33A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A4E80000
|
unkown image
|
page readonly
|
|
|
|
2944000
|
unkown image
|
page readonly
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
7FF72000
|
unkown image
|
page readonly
|
|
|
|
2932000
|
unkown image
|
page readonly
|
|
|
|
736F2000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
859000
|
unkown
|
page read and write
|
|
|
|
7FF59B019000
|
unkown image
|
page readonly
|
|
|
|
F1E000
|
stack
|
page read and write
|
|
|
|
9BA000
|
unkown
|
page read and write
|
|
|
|
2BB1000
|
unkown image
|
page readonly
|
|
|
|
7FF572ED7000
|
unkown image
|
page readonly
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
2968000
|
unkown image
|
page readonly
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
7FF5014AD000
|
unkown image
|
page readonly
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
7FAF0000
|
unkown image
|
page readonly
|
|
|
|
1CF13890000
|
unkown
|
page read and write
|
|
|
|
279705B4000
|
unkown
|
page read and write
|
|
|
|
27970562000
|
unkown
|
page read and write
|
|
|
|
7FF517350000
|
unkown image
|
page readonly
|
|
|
|
960000
|
unkown image
|
page readonly
|
|
|
|
49F000
|
unkown
|
page read and write
|
|
|
|
7FEA2000
|
unkown image
|
page readonly
|
|
|
|
2797057E000
|
unkown
|
page read and write
|
|
|
|
2FF8000
|
heap default
|
page read and write
|
|
|
|
5715000
|
unkown
|
page read and write
|
|
|
|
22A9AAA0000
|
unkown
|
page read and write
|
|
|
|
893000
|
unkown
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF59B00D000
|
unkown image
|
page readonly
|
|
|
|
7FF50156A000
|
unkown image
|
page readonly
|
|
|
|
7FF517553000
|
unkown image
|
page readonly
|
|
|
|
22A9AB92000
|
unkown
|
page read and write
|
|
|
|
589D000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2928000
|
unkown image
|
page readonly
|
|
|
|
7DF51BED2000
|
unkown image
|
page readonly
|
|
|
|
1D4076D0000
|
unkown image
|
page readonly
|
|
|
|
2796FBB0000
|
unkown image
|
page write copy
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
1CF0EC02000
|
unkown
|
page read and write
|
|
|
|
279705B2000
|
unkown
|
page read and write
|
|
|
|
877000
|
unkown
|
page read and write
|
|
|
|
7FF512056000
|
unkown image
|
page readonly
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
1F5C4900000
|
unkown image
|
page readonly
|
|
|
|
A7C000
|
unkown
|
page read and write
|
|
|
|
7FF572A97000
|
unkown image
|
page readonly
|
|
|
|
37EF000
|
stack
|
page read and write
|
|
|
|
3002000
|
unkown
|
page read and write
|
|
|
|
93C000
|
unkown
|
page read and write
|
|
|
|
1E07E535000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
7EFF2000
|
unkown image
|
page readonly
|
|
|
|
1B00000
|
unkown image
|
page readonly
|
|
|
|
7FF501491000
|
unkown image
|
page readonly
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
7FF511862000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF511869000
|
unkown image
|
page readonly
|
|
|
|
3197000
|
heap private
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
736F2000
|
unkown image
|
page readonly
|
|
|
|
7FF59F075000
|
unkown image
|
page readonly
|
|
|
|
4F59000
|
heap private
|
page read and write
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
2FDA000
|
unkown
|
page read and write
|
|
|
|
1530000
|
unkown image
|
page readonly
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
DA40FF9000
|
stack
|
page read and write
|
|
|
|
2B6B000
|
unkown image
|
page readonly
|
|
|
|
2744000
|
unkown image
|
page readonly
|
|
|
|
1CF0E502000
|
unkown
|
page read and write
|
|
|
|
7FF511870000
|
unkown image
|
page readonly
|
|
|
|
7FF51738B000
|
unkown image
|
page readonly
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
736EB000
|
unkown image
|
page read and write
|
|
|
|
3008000
|
unkown
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FA72000
|
unkown image
|
page readonly
|
|
|
|
1CF13D02000
|
unkown
|
page read and write
|
|
|
|
90D000
|
unkown
|
page read and write
|
|
|
|
2744000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
8B0000
|
unkown image
|
page readonly
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
2F69000
|
unkown
|
page read and write
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
457C000
|
stack
|
page read and write
|
|
|
|
52FE000
|
heap private
|
page read and write
|
|
|
|
E15E3BC000
|
unkown
|
page read and write
|
|
|
|
27970A02000
|
unkown
|
page read and write
|
|
|
|
7EFF0000
|
unkown image
|
page readonly
|
|
|
|
7FF62000
|
unkown image
|
page readonly
|
|
|
|
5891000
|
unkown
|
page read and write
|
|
|
|
7FF59B0C2000
|
unkown image
|
page readonly
|
|
|
|
22A9AB10000
|
unkown image
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
2796FAC0000
|
unkown image
|
page read and write
|
|
|
|
7FF60000
|
unkown image
|
page readonly
|
|
|
|
7DF4A2D30000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
1CF0E49F000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
unkown
|
page read and write
|
|
|
|
2258EFB000
|
stack
|
page read and write
|
|
|
|
9A7000
|
heap default
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
992000
|
heap default
|
page read and write
|
|
|
|
22A9AAC0000
|
unkown
|
page read and write
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
1CF0E492000
|
unkown
|
page read and write
|
|
|
|
7FF59F217000
|
unkown image
|
page readonly
|
|
|
|
1CF0E513000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7FF5120F7000
|
unkown image
|
page readonly
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
870000
|
unkown
|
page read and write
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
7FF501541000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
3090000
|
unkown image
|
page readonly
|
|
|
|
9D0000
|
unkown image
|
page readonly
|
|
|
|
9A9000
|
unkown
|
page read and write
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
E15EA77000
|
stack
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
5501000
|
unkown
|
page read and write
|
|
|
|
7FF572EAA000
|
unkown image
|
page readonly
|
|
|
|
58B000
|
unkown
|
page read and write
|
|
|
|
2968000
|
unkown image
|
page readonly
|
|
|
|
2258D7B000
|
stack
|
page read and write
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
292E000
|
unkown image
|
page readonly
|
|
|
|
2CEE000
|
unkown
|
page read and write
|
|
|
|
54FE000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
heap default
|
page read and write
|
|
|
|
7FAF2000
|
unkown image
|
page readonly
|
|
|
|
2932000
|
unkown image
|
page readonly
|
|
|
|
2EF0000
|
unkown image
|
page readonly
|
|
|
|
4BBE000
|
stack
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
1CF13AF0000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
27970587000
|
unkown
|
page read and write
|
|
|
|
1CF0E478000
|
unkown
|
page read and write
|
|
|
|
4F00000
|
heap private
|
page read and write
|
|
|
|
7FD90000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
5279000
|
heap private
|
page read and write
|
|
|
|
7FF511F61000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7DF5F2D82000
|
unkown image
|
page readonly
|
|
|
|
279705BF000
|
unkown
|
page read and write
|
|
|
|
9AA000
|
unkown
|
page read and write
|
|
|
|
7FF59F070000
|
unkown image
|
page readonly
|
|
|
|
7FF59F173000
|
unkown image
|
page readonly
|
|
|
|
1E07F340000
|
unkown
|
page read and write
|
|
|
|
7FF59A7EC000
|
unkown image
|
page readonly
|
|
|
|
7FF517604000
|
unkown image
|
page readonly
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
34B0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
34E0000
|
unkown image
|
page readonly
|
|
|
|
1CF0ED18000
|
unkown
|
page read and write
|
|
|
|
294D000
|
unkown image
|
page readonly
|
|
|
|
52FB000
|
heap private
|
page read and write
|
|
|
|
8C4000
|
unkown
|
page read and write
|
|
|
|
7FBA2000
|
unkown image
|
page readonly
|
|
|
|
2796FED0000
|
unkown image
|
page readonly
|
|
|
|
AC0000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
7FF59F214000
|
unkown image
|
page readonly
|
|
|
|
54FB000
|
unkown
|
page read and write
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
7FF501470000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
291E000
|
unkown image
|
page readonly
|
|
|
|
3008000
|
unkown
|
page read and write
|
|
|
|
4EDD000
|
stack
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
27970592000
|
unkown
|
page read and write
|
|
|
|
736EB000
|
unkown image
|
page read and write
|
|
|
|
2891000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
279705AC000
|
unkown
|
page read and write
|
|
|
|
4B3D000
|
stack
|
page read and write
|
|
|
|
7FF59B071000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
B00000
|
unkown image
|
page readonly
|
|
|
|
4FDA000
|
heap private
|
page read and write
|
|
|
|
B02000
|
unkown
|
page read and write
|
|
|
|
1D407140000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
293F000
|
unkown image
|
page readonly
|
|
|
|
7FF5013A5000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
2847000
|
unkown image
|
page readonly
|
|
|
|
5503000
|
unkown
|
page read and write
|
|
|
|
3330000
|
unkown image
|
page readonly
|
|
|
|
2FEF000
|
unkown
|
page read and write
|
|
|
|
43F0000
|
stack
|
page read and write
|
|
|
|
1E07E51F000
|
unkown
|
page read and write
|
|
|
|
1E07E430000
|
unkown
|
page read and write
|
|
|
|
28F8000
|
unkown image
|
page readonly
|
|
|
|
1CF0EB90000
|
unkown image
|
page readonly
|
|
|
|
27970350000
|
unkown
|
page read and write
|
|
|
|
2F90000
|
heap default
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
1E07E400000
|
unkown image
|
page readonly
|
|
|
|
2797057F000
|
unkown
|
page read and write
|
|
|
|
A5D000
|
unkown
|
page read and write
|
|
|
|
8A8000
|
unkown
|
page read and write
|
|
|
|
1F5C4A67000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
878000
|
unkown
|
page read and write
|
|
|
|
7DF50B332000
|
unkown image
|
page readonly
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
736F2000
|
unkown image
|
page readonly
|
|
|
|
7FF5014DD000
|
unkown image
|
page readonly
|
|
|
|
53BB000
|
heap private
|
page read and write
|
|
|
|
2778000
|
unkown image
|
page readonly
|
|
|
|
1E07F320000
|
unkown
|
page readonly
|
|
|
|
289B000
|
unkown image
|
page readonly
|
|
|
|
9A0000
|
heap default
|
page read and write
|
|
|
|
A09000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
736D1000
|
unkown image
|
page execute read
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
7FF51755D000
|
unkown image
|
page readonly
|
|
|
|
7FF501583000
|
unkown image
|
page readonly
|
|
|
|
2796FCE3000
|
unkown
|
page read and write
|
|
|
|
7FF50133D000
|
unkown image
|
page readonly
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
2797057B000
|
unkown
|
page read and write
|
|
|
|
292E000
|
unkown image
|
page readonly
|
|
|
|
2882000
|
unkown image
|
page readonly
|
|
|
|
4FDA000
|
heap private
|
page read and write
|
|
|
|
7FF5E8F97000
|
unkown image
|
page readonly
|
|
|
|
1CF0E2C0000
|
unkown image
|
page read and write
|
|
|
|
7FF59B017000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
1F5C4F90000
|
unkown image
|
page readonly
|
|
|
|
1E07E410000
|
unkown image
|
page readonly
|
|
|
|
A25000
|
unkown
|
page read and write
|
|
|
|
7FF572E94000
|
unkown image
|
page readonly
|
|
|
|
2778000
|
unkown image
|
page readonly
|
|
|
|
7FF572E1D000
|
unkown image
|
page readonly
|
|
|
|
7DF51BED0000
|
unkown image
|
page readonly
|
|
|
|
7FF511F78000
|
unkown image
|
page readonly
|
|
|
|
1F5C4A70000
|
unkown
|
page read and write
|
|
|
|
2796FC5C000
|
unkown
|
page read and write
|
|
|
|
7FF59F17D000
|
unkown image
|
page readonly
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
7FF5013D8000
|
unkown image
|
page readonly
|
|
|
|
53BE000
|
heap private
|
page read and write
|
|
|
|
7DF50B342000
|
unkown image
|
page readonly
|
|
|
|
279705B7000
|
unkown
|
page read and write
|
|
|
|
7FF501367000
|
unkown image
|
page readonly
|
|
|
|
7FF5172BA000
|
unkown image
|
page readonly
|
|
|
|
7FF572ED7000
|
unkown image
|
page readonly
|
|
|
|
F8440F7000
|
stack
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
546C000
|
stack
|
page read and write
|
|
|
|
53BC000
|
heap private
|
page read and write
|
|
|
|
7FF50132A000
|
unkown image
|
page readonly
|
|
|
|
7FF501484000
|
unkown image
|
page readonly
|
|
|
|
1CF13C2D000
|
unkown
|
page read and write
|
|
|
|
1AEE000
|
heap private
|
page read and write
|
|
|
|
7FF62000
|
unkown image
|
page readonly
|
|
|
|
285E000
|
unkown image
|
page readonly
|
|
|
|
5717000
|
unkown
|
page read and write
|
|
|
|
3150000
|
heap private
|
page read and write
|
|
|
|
893000
|
unkown
|
page read and write
|
|
|
|
7FF512123000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
677000
|
unkown
|
page read and write
|
|
|
|
7FF5013A8000
|
unkown image
|
page readonly
|
|
|
|
7FF59ED11000
|
unkown image
|
page readonly
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
2B24000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF50133F000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
8A6000
|
unkown
|
page read and write
|
|
|
|
54FB000
|
unkown
|
page read and write
|
|
|
|
28E1000
|
unkown image
|
page readonly
|
|
|
|
7FF5175F7000
|
unkown image
|
page readonly
|
|
|
|
1CF13AD0000
|
unkown
|
page read and write
|
|
|
|
895000
|
unkown
|
page read and write
|
|
|
|
27970595000
|
unkown
|
page read and write
|
|
|
|
1F5C4A2A000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
7FF59AFCF000
|
unkown image
|
page readonly
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
7DF5F2D90000
|
unkown image
|
page readonly
|
|
|
|
815000
|
heap default
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
985000
|
heap default
|
page read and write
|
|
|
|
27970560000
|
unkown
|
page read and write
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
53BD000
|
heap private
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
2E3F8013000
|
unkown
|
page read and write
|
|
|
|
8B0000
|
unkown image
|
page readonly
|
|
|
|
8C4000
|
unkown
|
page read and write
|
|
|
|
7FF517599000
|
unkown image
|
page readonly
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
7FF50154D000
|
unkown image
|
page readonly
|
|
|
|
4DC8000
|
heap private
|
page read and write
|
|
|
|
7FF512126000
|
unkown image
|
page readonly
|
|
|
|
B524B7F000
|
stack
|
page read and write
|
|
|
|
2D70000
|
unkown image
|
page readonly
|
|
|
|
7DF521400000
|
unkown image
|
page readonly
|
|
|
|
3A3E000
|
stack
|
page read and write
|
|
|
|
1F5C4B00000
|
unkown
|
page read and write
|
|
|
|
7FF500CC2000
|
unkown image
|
page readonly
|
|
|
|
2EE0000
|
unkown
|
page read and write
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
90C000
|
unkown
|
page read and write
|
|
|
|
2FEF000
|
unkown
|
page read and write
|
|
|
|
3003000
|
unkown
|
page read and write
|
|
|
|
1D407150000
|
unkown image
|
page readonly
|
|
|
|
574C000
|
unkown
|
page read and write
|
|
|
|
2F76000
|
unkown
|
page read and write
|
|
|
|
27970595000
|
unkown
|
page read and write
|
|
|
|
11B7A7E000
|
stack
|
page read and write
|
|
|
|
7FF501547000
|
unkown image
|
page readonly
|
|
|
|
7FF5014D6000
|
unkown image
|
page readonly
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
1E07E4D8000
|
heap default
|
page read and write
|
|
|
|
7FF51186B000
|
unkown image
|
page readonly
|
|
|
|
2FF1000
|
unkown
|
page read and write
|
|
|
|
7FB00000
|
unkown image
|
page readonly
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
A20000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
B52457A000
|
stack
|
page read and write
|
|
|
|
7FF572EC3000
|
unkown image
|
page readonly
|
|
|
|
54F9000
|
unkown
|
page read and write
|
|
|
|
22A9ABAE000
|
unkown
|
page read and write
|
|
|
|
7DF5A4E60000
|
unkown image
|
page readonly
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
1F5C4A4F000
|
unkown
|
page read and write
|
|
|
|
1D407308000
|
unkown
|
page read and write
|
|
|
|
7FF516FFA000
|
unkown image
|
page readonly
|
|
|
|
22A9A990000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
2BB0000
|
unkown
|
page read and write
|
|
|
|
2C38000
|
unkown image
|
page readonly
|
|
|
|
5718000
|
unkown
|
page read and write
|
|
|
|
A87000
|
unkown
|
page read and write
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
9FC000
|
unkown
|
page read and write
|
|
|
|
2797055D000
|
unkown
|
page read and write
|
|
|
|
2796FB00000
|
unkown image
|
page readonly
|
|
|
|
893000
|
unkown
|
page read and write
|
|
|
|
7FE92000
|
unkown image
|
page readonly
|
|
|
|
7FF5120F4000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
D95000
|
heap default
|
page read and write
|
|
|
|
7FF517633000
|
unkown image
|
page readonly
|
|
|
|
1CF0ED13000
|
unkown
|
page read and write
|
|
|
|
2FDA000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF59F186000
|
unkown image
|
page readonly
|
|
|
|
7FF517346000
|
unkown image
|
page readonly
|
|
|
|
2F74000
|
unkown
|
page read and write
|
|
|
|
1CF0EBD0000
|
unkown image
|
page readonly
|
|
|
|
90D000
|
unkown
|
page read and write
|
|
|
|
2797058F000
|
unkown
|
page read and write
|
|
|
|
11B7D7E000
|
stack
|
page read and write
|
|
|
|
985000
|
unkown
|
page read and write
|
|
|
|
288A000
|
unkown image
|
page readonly
|
|
|
|
981000
|
heap default
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
279705BF000
|
unkown
|
page read and write
|
|
|
|
DA40E7F000
|
stack
|
page read and write
|
|
|
|
AFF000
|
unkown
|
page read and write
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
4B7B000
|
stack
|
page read and write
|
|
|
|
5717000
|
unkown
|
page read and write
|
|
|
|
1CF13D04000
|
unkown
|
page read and write
|
|
|
|
2F4A000
|
unkown
|
page read and write
|
|
|
|
F843C7B000
|
unkown
|
page read and write
|
|
|
|
DA40B9A000
|
unkown
|
page read and write
|
|
|
|
F843CFD000
|
stack
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
B30000
|
unkown image
|
page readonly
|
|
|
|
A0C000
|
heap default
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2796FB80000
|
unkown image
|
page readonly
|
|
|
|
B04000
|
unkown
|
page read and write
|
|
|
|
7FF59E98C000
|
unkown image
|
page readonly
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
B52487B000
|
stack
|
page read and write
|
|
|
|
3002000
|
unkown
|
page read and write
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
2F76000
|
unkown
|
page read and write
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
3003000
|
unkown
|
page read and write
|
|
|
|
11B807F000
|
stack
|
page read and write
|
|
|
|
2FF1000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7F010000
|
unkown image
|
page readonly
|
|
|
|
7FF5175FD000
|
unkown image
|
page readonly
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
7FF59AFE6000
|
unkown image
|
page readonly
|
|
|
|
A40000
|
heap default
|
page read and write
|
|
|
|
E15EDF9000
|
stack
|
page read and write
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
7FF5174F5000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7DF5F2D80000
|
unkown image
|
page readonly
|
|
|
|
2A65000
|
unkown image
|
page readonly
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF59F22B000
|
unkown image
|
page readonly
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
2E3F8029000
|
unkown
|
page read and write
|
|
|
|
2796FC29000
|
unkown
|
page read and write
|
|
|
|
7FF501343000
|
unkown image
|
page readonly
|
|
|
|
1CF13AF0000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
92E000
|
unkown
|
page read and write
|
|
|
|
1E07EAB0000
|
unkown image
|
page readonly
|
|
|
|
7FB92000
|
unkown image
|
page readonly
|
|
|
|
7FF511F71000
|
unkown image
|
page readonly
|
|
|
|
2A0A000
|
unkown image
|
page readonly
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
2C14000
|
unkown image
|
page readonly
|
|
|
|
7F000000
|
unkown image
|
page readonly
|
|
|
|
B52467A000
|
stack
|
page read and write
|
|
|
|
2796FB30000
|
heap default
|
page read and write
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
7FF501597000
|
unkown image
|
page readonly
|
|
|
|
290B000
|
unkown image
|
page readonly
|
|
|
|
7FA80000
|
unkown image
|
page readonly
|
|
|
|
589A000
|
unkown
|
page read and write
|
|
|
|
7FF59AB77000
|
unkown image
|
page readonly
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
1CF0E3D1000
|
unkown
|
page read and write
|
|
|
|
7FF5014A3000
|
unkown image
|
page readonly
|
|
|
|
7DF5213F2000
|
unkown image
|
page readonly
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
A2E000
|
stack
|
page read and write
|
|
|
|
43D0000
|
stack
|
page read and write
|
|
|
|
1E07E8B0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FBA2000
|
unkown image
|
page readonly
|
|
|
|
7FF59F161000
|
unkown image
|
page readonly
|
|
|
|
2968000
|
unkown image
|
page readonly
|
|
|
|
1D407254000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
589A000
|
unkown
|
page read and write
|
|
|
|
5501000
|
unkown
|
page read and write
|
|
|
|
2B65000
|
unkown image
|
page readonly
|
|
|
|
4990000
|
unkown
|
page read and write
|
|
|
|
7FEA0000
|
unkown image
|
page readonly
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
2BBC000
|
unkown image
|
page readonly
|
|
|
|
736D1000
|
unkown image
|
page execute read
|
|
|
|
7FF59AFEA000
|
unkown image
|
page readonly
|
|
|
|
7FF5119B1000
|
unkown image
|
page readonly
|
|
|
|
2796FC50000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
3008000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
4FC1000
|
heap private
|
page read and write
|
|
|
|
290D000
|
unkown image
|
page readonly
|
|
|
|
570F000
|
stack
|
page read and write
|
|
|
|
7EEF0000
|
unkown image
|
page readonly
|
|
|
|
A0F000
|
unkown
|
page read and write
|
|
|
|
2796FCCB000
|
unkown
|
page read and write
|
|
|
|
7FF59F21D000
|
unkown image
|
page readonly
|
|
|
|
8C3000
|
unkown
|
page read and write
|
|
|
|
1CF13800000
|
unkown
|
page read and write
|
|
|
|
9BA000
|
heap default
|
page read and write
|
|
|
|
912000
|
unkown
|
page read and write
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
7DF57CC82000
|
unkown image
|
page readonly
|
|
|
|
1F5C4E00000
|
unkown image
|
page readonly
|
|
|
|
7DF5A4E72000
|
unkown image
|
page readonly
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
9F0000
|
unkown image
|
page readonly
|
|
|
|
27970569000
|
unkown
|
page read and write
|
|
|
|
27970402000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
1CF0E330000
|
heap default
|
page read and write
|
|
|
|
93B000
|
unkown
|
page read and write
|
|
|
|
288D000
|
unkown image
|
page readonly
|
|
|
|
940000
|
unkown image
|
page readonly
|
|
|
|
B524AFE000
|
stack
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
1CF0E458000
|
unkown
|
page read and write
|
|
|
|
7FF517572000
|
unkown image
|
page readonly
|
|
|
|
1F5C4A82000
|
unkown
|
page read and write
|
|
|
|
1F5C5202000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
96E000
|
unkown
|
page read and write
|
|
|
|
3087000
|
heap private
|
page read and write
|
|
|
|
7FF516EAE000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
1CF0E429000
|
unkown
|
page read and write
|
|
|
|
7FF572E16000
|
unkown image
|
page readonly
|
|
|
|
7FF51737E000
|
unkown image
|
page readonly
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
7FF512087000
|
unkown image
|
page readonly
|
|
|
|
736EC000
|
unkown image
|
page write copy
|
|
|
|
273A000
|
unkown image
|
page readonly
|
|
|
|
7FF517520000
|
unkown image
|
page readonly
|
|
|
|
52FD000
|
heap private
|
page read and write
|
|
|
|
7DF57CC70000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
1D40728E000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
unkown image
|
page readonly
|
|
|
|
96F000
|
heap default
|
page read and write
|
|
|
|
7FF51756A000
|
unkown image
|
page readonly
|
|
|
|
3001000
|
unkown
|
page read and write
|
|
|
|
2944000
|
unkown image
|
page readonly
|
|
|
|
89A000
|
unkown
|
page read and write
|
|
|
|
1CF0E340000
|
unkown image
|
page readonly
|
|
|
|
7FF59F16F000
|
unkown image
|
page readonly
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
7FF516FFF000
|
unkown image
|
page readonly
|
|
|
|
2796FC55000
|
unkown
|
page read and write
|
|
|
|
7FA80000
|
unkown image
|
page readonly
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
7FA70000
|
unkown image
|
page readonly
|
|
|
|
2FC0000
|
heap default
|
page read and write
|
|
|
|
22A9AE80000
|
unkown image
|
page readonly
|
|
|
|
7FF59B08B000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
3001000
|
unkown
|
page read and write
|
|
|
|
7FF517315000
|
unkown image
|
page readonly
|
|
|
|
1E07E3C0000
|
unkown image
|
page read and write
|
|
|
|
2F63000
|
unkown
|
page read and write
|
|
|
|
7FF572CC6000
|
unkown image
|
page readonly
|
|
|
|
A9F000
|
unkown
|
page read and write
|
|
|
|
2923000
|
unkown image
|
page readonly
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
1D407850000
|
unkown image
|
page readonly
|
|
|
|
1D407120000
|
unkown image
|
page readonly
|
|
|
|
22A9AAF0000
|
unkown image
|
page readonly
|
|
|
|
A90000
|
unkown image
|
page readonly
|
|
|
|
2FF5000
|
unkown
|
page read and write
|
|
|
|
1CF0E400000
|
unkown
|
page read and write
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
2E3F8100000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
28F5000
|
unkown image
|
page readonly
|
|
|
|
1CF0ED00000
|
unkown
|
page read and write
|
|
|
|
2744000
|
unkown image
|
page readonly
|
|
|
|
2847000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown image
|
page readonly
|
|
|
|
44FD000
|
stack
|
page read and write
|
|
|
|
1CF0EBB0000
|
unkown image
|
page readonly
|
|
|
|
7FF59AC87000
|
unkown image
|
page readonly
|
|
|
|
E0B000
|
stack
|
page read and write
|
|
|
|
7FA72000
|
unkown image
|
page readonly
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
1CF13AA0000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown image
|
page readonly
|
|
|
|
A0F000
|
unkown
|
page read and write
|
|
|
|
7DF5213F0000
|
unkown image
|
page readonly
|
|
|
|
1CF0ED59000
|
unkown
|
page read and write
|
|
|
|
7FA70000
|
unkown image
|
page readonly
|
|
|
|
31A0000
|
heap private
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
3080000
|
heap private
|
page read and write
|
|
|
|
2BEE000
|
unkown image
|
page readonly
|
|
|
|
7FF5171A2000
|
unkown image
|
page readonly
|
|
|
|
8A0000
|
unkown image
|
page readonly
|
|
|
|
1CF0EBE0000
|
unkown image
|
page readonly
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
2FDA000
|
unkown
|
page read and write
|
|
|
|
7FF5E8F84000
|
unkown image
|
page readonly
|
|
|
|
7FF51731F000
|
unkown image
|
page readonly
|
|
|
|
7DF51BEF0000
|
unkown image
|
page readonly
|
|
|
|
2E3F7FA0000
|
unkown image
|
page readonly
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
2F73000
|
unkown
|
page read and write
|
|
|
|
2928000
|
unkown image
|
page readonly
|
|
|
|
2F4A000
|
unkown
|
page read and write
|
|
|
|
882000
|
unkown
|
page read and write
|
|
|
|
22A9ABB9000
|
unkown
|
page read and write
|
|
|
|
7DF57CC90000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
47A0000
|
stack
|
page read and write
|
|
|
|
4780000
|
stack
|
page read and write
|
|
|
|
22A9ABB9000
|
unkown
|
page read and write
|
|
|
|
22A9AB60000
|
heap private
|
page read and write
|
|
|
|
580F000
|
stack
|
page read and write
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
1CF0EA60000
|
unkown image
|
page readonly
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
7DF5213F2000
|
unkown image
|
page readonly
|
|
|
|
1CF13CFB000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF517488000
|
unkown image
|
page readonly
|
|
|
|
736F2000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7DF57CC80000
|
unkown image
|
page readonly
|
|
|
|
7DF5213E2000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FB90000
|
unkown image
|
page readonly
|
|
|
|
8C3000
|
unkown
|
page read and write
|
|
|
|
2C65000
|
unkown
|
page read and write
|
|
|
|
268F000
|
unkown image
|
page readonly
|
|
|
|
8DA000
|
unkown
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
7FF5E87AB000
|
unkown image
|
page readonly
|
|
|
|
1CF1399E000
|
unkown
|
page read and write
|
|
|
|
54F6000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
7DF5A4E80000
|
unkown image
|
page readonly
|
|
|
|
54F7000
|
unkown
|
page read and write
|
|
|
|
8A6000
|
unkown
|
page read and write
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
7FF59AF08000
|
unkown image
|
page readonly
|
|
|
|
B524D7D000
|
stack
|
page read and write
|
|
|
|
295F000
|
unkown image
|
page readonly
|
|
|
|
E15E97E000
|
stack
|
page read and write
|
|
|
|
2F73000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
288A000
|
unkown image
|
page readonly
|
|
|
|
2E3F807D000
|
unkown
|
page read and write
|
|
|
|
A37000
|
heap private
|
page read and write
|
|
|
|
314B000
|
stack
|
page read and write
|
|
|
|
2FF5000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page read and write
|
|
|
|
7DF5A4E60000
|
unkown image
|
page readonly
|
|
|
|
7FF70000
|
unkown image
|
page readonly
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
B52477E000
|
stack
|
page read and write
|
|
|
|
273A000
|
unkown image
|
page readonly
|
|
|
|
52FA000
|
heap private
|
page read and write
|
|
|
|
2797058B000
|
unkown
|
page read and write
|
|
|
|
2E7B000
|
stack
|
page read and write
|
|
|
|
AA0000
|
heap default
|
page read and write
|
|
|
|
5898000
|
unkown
|
page read and write
|
|
|
|
2797055C000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
27970350000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
279A000
|
unkown image
|
page readonly
|
|
|
|
1F5C48D0000
|
unkown image
|
page readonly
|
|
|
|
3D01000
|
unkown
|
page read and write
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
2968000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9012000
|
unkown image
|
page readonly
|
|
|
|
286F000
|
unkown image
|
page readonly
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
22A9ABA7000
|
unkown
|
page read and write
|
|
|
|
2CD1000
|
unkown
|
page read and write
|
|
|
|
83A000
|
heap default
|
page read and write
|
|
|
|
1D40724E000
|
unkown
|
page read and write
|
|
|
|
E1C000
|
stack
|
page read and write
|
|
|
|
B5B5FF000
|
stack
|
page read and write
|
|
|
|
7FF80000
|
unkown image
|
page readonly
|
|
|
|
2F00000
|
unkown image
|
page readonly
|
|
|
|
2C69000
|
unkown
|
page read and write
|
|
|
|
1E07E4E0000
|
heap default
|
page read and write
|
|
|
|
5896000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
4FDA000
|
heap private
|
page read and write
|
|
|
|
1CF0EBA0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
3008000
|
unkown
|
page read and write
|
|
|
|
2796FD02000
|
unkown
|
page read and write
|
|
|
|
2F10000
|
heap default
|
page read and write
|
|
|
|
A30000
|
unkown image
|
page readonly
|
|
|
|
8C3000
|
unkown
|
page read and write
|
|
|
|
289B000
|
unkown image
|
page readonly
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
1CF0E2E0000
|
unkown image
|
page readonly
|
|
|
|
90B000
|
unkown
|
page read and write
|
|
|
|
A5E000
|
unkown
|
page read and write
|
|
|
|
2895000
|
unkown image
|
page readonly
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
1CF0F3E0000
|
unkown
|
page read and write
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
9FA000
|
heap default
|
page read and write
|
|
|
|
1703000
|
heap private
|
page read and write
|
|
|
|
22A9AB65000
|
heap private
|
page read and write
|
|
|
|
736EC000
|
unkown image
|
page write copy
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
1D407229000
|
unkown
|
page read and write
|
|
|
|
A87000
|
unkown
|
page read and write
|
|
|
|
2796FD08000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
736E1000
|
unkown image
|
page readonly
|
|
|
|
8C3000
|
unkown
|
page read and write
|
|
|
|
7FF501016000
|
unkown image
|
page readonly
|
|
|
|
7FF59B09A000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
279705A1000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
2796FC4A000
|
unkown
|
page read and write
|
|
|
|
7DF5A9010000
|
unkown image
|
page readonly
|
|
|
|
2E3F84D0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7FF5171BC000
|
unkown image
|
page readonly
|
|
|
|
1CF13AE0000
|
unkown
|
page read and write
|
|
|
|
7FF51753F000
|
unkown image
|
page readonly
|
|
|
|
9B6000
|
unkown
|
page read and write
|
|
|
|
2796FD13000
|
unkown
|
page read and write
|
|
|
|
4A30000
|
unkown
|
page read and write
|
|
|
|
7FA82000
|
unkown image
|
page readonly
|
|
|
|
279705A3000
|
unkown
|
page read and write
|
|
|
|
7FF59F037000
|
unkown image
|
page readonly
|
|
|
|
27970250000
|
unkown image
|
page readonly
|
|
|
|
7F010000
|
unkown image
|
page readonly
|
|
|
|
7FF5172ED000
|
unkown image
|
page readonly
|
|
|
|
F843D7F000
|
stack
|
page read and write
|
|
|
|
1CF0EF01000
|
unkown
|
page read and write
|
|
|
|
497F000
|
stack
|
page read and write
|
|
|
|
2FF6000
|
unkown
|
page read and write
|
|
|
|
2797057E000
|
unkown
|
page read and write
|
|
|
|
4FD3000
|
heap private
|
page read and write
|
|
|
|
2797055C000
|
unkown
|
page read and write
|
|
|
|
27970595000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown image
|
page readonly
|
|
|
|
7FF59B07D000
|
unkown image
|
page readonly
|
|
|
|
7FF59F1A6000
|
unkown image
|
page readonly
|
|
|
|
1CF13CA0000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
930000
|
heap default
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
589A000
|
unkown
|
page read and write
|
|
|
|
2796FCC1000
|
unkown
|
page read and write
|
|
|
|
27970583000
|
unkown
|
page read and write
|
|
|
|
54F8000
|
unkown
|
page read and write
|
|
|
|
28E1000
|
unkown image
|
page readonly
|
|
|
|
1CF13C00000
|
unkown
|
page read and write
|
|
|
|
736D0000
|
unkown image
|
page readonly
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
35EE000
|
stack
|
page read and write
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
E15EC7A000
|
stack
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
3002000
|
unkown
|
page read and write
|
|
|
|
895000
|
unkown
|
page read and write
|
|
|
|
90B000
|
unkown
|
page read and write
|
|
|
|
7FF512076000
|
unkown image
|
page readonly
|
|
|
|
B00000
|
stack
|
page read and write
|
|
|
|
1F5C4A75000
|
unkown
|
page read and write
|
|
|
|
5503000
|
unkown
|
page read and write
|
|
|
|
A25000
|
unkown
|
page read and write
|
|
|
|
890000
|
unkown image
|
page read and write
|
|
|
|
289B000
|
unkown image
|
page readonly
|
|
|
|
97B000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
1CF0EC00000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
2968000
|
unkown image
|
page readonly
|
|
|
|
28F8000
|
unkown image
|
page readonly
|
|
|
|
2C0C000
|
unkown image
|
page readonly
|
|
|
|
1F5C4A55000
|
unkown
|
page read and write
|
|
|
|
7FB90000
|
unkown image
|
page readonly
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
4FDB000
|
heap private
|
page read and write
|
|
|
|
7DF419DA0000
|
unkown image
|
page readonly
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
7FA82000
|
unkown image
|
page readonly
|
|
|
|
A76000
|
unkown
|
page read and write
|
|
|
|
A0D000
|
unkown
|
page read and write
|
|
|
|
2882000
|
unkown image
|
page readonly
|
|
|
|
3BFD000
|
stack
|
page read and write
|
|
|
|
2F4A000
|
unkown
|
page read and write
|
|
|
|
7FF572C97000
|
unkown image
|
page readonly
|
|
|
|
7FF59F15F000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
11B7BFC000
|
stack
|
page read and write
|
|
|
|
908000
|
unkown
|
page read and write
|
|
|
|
E15E7FC000
|
stack
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF5E8FD7000
|
unkown image
|
page readonly
|
|
|
|
3007000
|
unkown
|
page read and write
|
|
|
|
5501000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
2797055F000
|
unkown
|
page read and write
|
|
|
|
7FF50149F000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF572DD1000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF501445000
|
unkown image
|
page readonly
|
|
|
|
27970561000
|
unkown
|
page read and write
|
|
|
|
8D0000
|
unkown image
|
page read and write
|
|
|
|
7FF500D6B000
|
unkown image
|
page readonly
|
|
|
|
A8D000
|
unkown image
|
page read and write
|
|
|
|
2928000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF501157000
|
unkown image
|
page readonly
|
|
|
|
2796FCD2000
|
unkown
|
page read and write
|
|
|
|
2882000
|
unkown image
|
page readonly
|
|
|
|
27970599000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7DF5F2D70000
|
unkown image
|
page readonly
|
|
|
|
7FF5171C9000
|
unkown image
|
page readonly
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
7DF51BED0000
|
unkown image
|
page readonly
|
|
|
|
289B000
|
unkown image
|
page readonly
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
2E3F7F70000
|
unkown image
|
page readonly
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page read and write
|
|
|
|
3E10000
|
unkown
|
page read and write
|
|
|
|
7FF5E8F29000
|
unkown image
|
page readonly
|
|
|
|
2A48000
|
unkown image
|
page readonly
|
|
|
|
4F01000
|
heap private
|
page read and write
|
|
|
|
A9C000
|
unkown image
|
page readonly
|
|
|
|
93B000
|
heap default
|
page read and write
|
|
|
|
992000
|
unkown
|
page read and write
|
|
|
|
7FF51202F000
|
unkown image
|
page readonly
|
|
|
|
54FB000
|
unkown
|
page read and write
|
|
|
|
7DF57CC72000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF572DF6000
|
unkown image
|
page readonly
|
|
|
|
2E3F806F000
|
unkown
|
page read and write
|
|
|
|
7FE90000
|
unkown image
|
page readonly
|
|
|
|
2F4A000
|
unkown
|
page read and write
|
|
|
|
7FF5175F1000
|
unkown image
|
page readonly
|
|
|
|
4E0000
|
unkown image
|
page read and write
|
|
|
|
1E07E4A9000
|
heap private
|
page read and write
|
|
|
|
27970563000
|
unkown
|
page read and write
|
|
|
|
27970584000
|
unkown
|
page read and write
|
|
|
|
1CF0ED02000
|
unkown
|
page read and write
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
1D407313000
|
unkown
|
page read and write
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
2796FC81000
|
unkown
|
page read and write
|
|
|
|
7FF59B0B3000
|
unkown image
|
page readonly
|
|
|
|
7FF59AED0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7FF501013000
|
unkown image
|
page readonly
|
|
|
|
1CF0EA50000
|
unkown image
|
page readonly
|
|
|
|
7DF57CC82000
|
unkown image
|
page readonly
|
|
|
|
1F5C4E10000
|
unkown image
|
page readonly
|
|
|
|
8A8000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
2BFE000
|
unkown image
|
page readonly
|
|
|
|
86F000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
2B5A000
|
unkown image
|
page readonly
|
|
|
|
53BA000
|
heap private
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
2960000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
7DF5F2D70000
|
unkown image
|
page readonly
|
|
|
|
7FF5E8FC6000
|
unkown image
|
page readonly
|
|
|
|
7DF521400000
|
unkown image
|
page readonly
|
|
|
|
7FF572981000
|
unkown image
|
page readonly
|
|
|
|
38ED000
|
stack
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
22A9AC80000
|
unkown image
|
page readonly
|
|
|
|
962000
|
unkown
|
page read and write
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
980000
|
unkown
|
page read and write
|
|
|
|
4FC0000
|
heap private
|
page read and write
|
|
|
|
5711000
|
unkown
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
2960000
|
unkown image
|
page readonly
|
|
|
|
279700D0000
|
unkown image
|
page readonly
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
39ED000
|
stack
|
page read and write
|
|
|
|
7FF5012DB000
|
unkown image
|
page readonly
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF5173E7000
|
unkown image
|
page readonly
|
|
|
|
1CF0E2D0000
|
heap private
|
page read and write
|
|
|
|
7DF57CC90000
|
unkown image
|
page readonly
|
|
|
|
279705C0000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
7F002000
|
unkown image
|
page readonly
|
|
|
|
7FF59AD31000
|
unkown image
|
page readonly
|
|
|
|
925000
|
unkown
|
page execute and read and write
|
|
|
|
A5D000
|
unkown
|
page read and write
|
|
|
|
8C3000
|
unkown
|
page read and write
|
|
|
|
882000
|
unkown
|
page read and write
|
|
|
|
A87000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
589A000
|
unkown
|
page read and write
|
|
|
|
2258DFE000
|
stack
|
page read and write
|
|
|
|
2CD5000
|
unkown
|
page read and write
|
|
|
|
2F4A000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
7FF59EE27000
|
unkown image
|
page readonly
|
|
|
|
7DF51BEF0000
|
unkown image
|
page readonly
|
|
|
|
2F76000
|
unkown
|
page read and write
|
|
|
|
1CF0E310000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
9A7000
|
unkown
|
page read and write
|
|
|
|
27970510000
|
unkown
|
page read and write
|
|
|
|
1E07E4D0000
|
heap default
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
7DF50B330000
|
unkown image
|
page readonly
|
|
|
|
E15EB7F000
|
stack
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
7DF5A4E70000
|
unkown image
|
page readonly
|
|
|
|
7FF572EC6000
|
unkown image
|
page readonly
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
950000
|
unkown image
|
page readonly
|
|
|
|
1CF13AC0000
|
unkown
|
page read and write
|
|
|
|
2F73000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
A87000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
2744000
|
unkown image
|
page readonly
|
|
|
|
7FF5E8EF6000
|
unkown image
|
page readonly
|
|
|
|
F20000
|
heap private
|
page read and write
|
|
|
|
1CF0ED18000
|
unkown
|
page read and write
|
|
|
|
9B0000
|
unkown
|
page read and write
|
|
|
|
1CF139D0000
|
unkown
|
page read and write
|
|
|
|
7DF50B340000
|
unkown image
|
page readonly
|
|
|
|
7DF50B350000
|
unkown image
|
page readonly
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
1F5C4C00000
|
unkown image
|
page readonly
|
|
|
|
2796FCDA000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
A89000
|
unkown
|
page read and write
|
|
|
|
7FF572E27000
|
unkown image
|
page readonly
|
|
|
|
7FF5012F4000
|
unkown image
|
page readonly
|
|
|
|
7F9E0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9012000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
279705B4000
|
unkown
|
page read and write
|
|
|
|
2FF7000
|
unkown
|
page read and write
|
|
|
|
736D0000
|
unkown image
|
page readonly
|
|
|
|
7FF500CBC000
|
unkown image
|
page readonly
|
|
|
|
294D000
|
unkown image
|
page readonly
|
|
|
|
27970584000
|
unkown
|
page read and write
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
7FF516E0E000
|
unkown image
|
page readonly
|
|
|
|
4F13000
|
heap private
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A06000
|
unkown
|
page read and write
|
|
|
|
736EB000
|
unkown image
|
page read and write
|
|
|
|
54F7000
|
unkown
|
page read and write
|
|
|
|
2E3F804B000
|
unkown
|
page read and write
|
|
|
|
D50000
|
heap private
|
page read and write
|
|
|
|
7DF4F0C40000
|
unkown image
|
page readonly
|
|
|
|
7FF572B41000
|
unkown image
|
page readonly
|
|
|
|
2B37000
|
unkown image
|
page readonly
|
|
|
|
1D4074D0000
|
unkown image
|
page readonly
|
|
|
|
2FF4000
|
unkown
|
page read and write
|
|
|
|
7FF517508000
|
unkown image
|
page readonly
|
|
|
|
497B000
|
stack
|
page read and write
|
|
|
|
292E000
|
unkown image
|
page readonly
|
|
|
|
B5248FE000
|
stack
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
A76000
|
unkown
|
page read and write
|
|
|
|
1CF0EC15000
|
unkown
|
page read and write
|
|
|
|
1CF0E48B000
|
unkown
|
page read and write
|
|
|
|
2968000
|
unkown image
|
page readonly
|
|
|
|
7FBA0000
|
unkown image
|
page readonly
|
|
|
|
288D000
|
unkown image
|
page readonly
|
|
|
|
8A8000
|
unkown
|
page read and write
|
|
|
|
B1E000
|
unkown
|
page read and write
|
|
|
|
1F5C4A3C000
|
unkown
|
page read and write
|
|
|
|
7FF59B077000
|
unkown image
|
page readonly
|
|
|
|
1CF0E455000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7DF51BEE0000
|
unkown image
|
page readonly
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
22A9AB80000
|
heap default
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
1AED000
|
heap private
|
page read and write
|
|
|
|
43D0000
|
stack
|
page read and write
|
|
|
|
1CF0E360000
|
unkown
|
page read and write
|
|
|
|
7DF5213E0000
|
unkown image
|
page readonly
|
|
|
|
308D000
|
stack
|
page read and write
|
|
|
|
1CF0E471000
|
unkown
|
page read and write
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
4B30000
|
heap private
|
page read and write
|
|
|
|
E90000
|
heap private
|
page read and write
|
|
|
|
2691000
|
unkown image
|
page readonly
|
|
|
|
279705B2000
|
unkown
|
page read and write
|
|
|
|
27970585000
|
unkown
|
page read and write
|
|
|
|
7FF501458000
|
unkown image
|
page readonly
|
|
|
|
736D0000
|
unkown image
|
page readonly
|
|
|
|
E7E000
|
stack
|
page read and write
|
|
|
|
1CF13D04000
|
unkown
|
page read and write
|
|
|
|
2691000
|
unkown image
|
page readonly
|
|
|
|
2796FC9E000
|
unkown
|
page read and write
|
|
|
|
7FF517597000
|
unkown image
|
page readonly
|
|
|
|
A9D000
|
unkown image
|
page read and write
|
|
|
|
27970A02000
|
unkown
|
page read and write
|
|
|
|
269B000
|
unkown image
|
page readonly
|
|
|
|
9BA000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
1CF13C14000
|
unkown
|
page read and write
|
|
|
|
279705B4000
|
unkown
|
page read and write
|
|
|
|
2B17000
|
unkown image
|
page readonly
|
|
|
|
1CF13C3B000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7DF51BEE0000
|
unkown image
|
page readonly
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
5896000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF572E84000
|
unkown image
|
page readonly
|
|
|
|
9C0000
|
unkown
|
page read and write
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
2BE6000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
992000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
7FF5173A4000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF500E25000
|
unkown image
|
page readonly
|
|
|
|
A87000
|
unkown
|
page read and write
|
|
|
|
1E07E3D0000
|
unkown
|
page read and write
|
|
|
|
2BAF000
|
stack
|
page read and write
|
|
|
|
27970500000
|
unkown
|
page read and write
|
|
|
|
B52427B000
|
unkown
|
page read and write
|
|
|
|
2796FC49000
|
unkown
|
page read and write
|
|
|
|
2E3F8000000
|
unkown
|
page read and write
|
|
|
|
1D407270000
|
unkown
|
page read and write
|
|
|
|
736D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5174BE000
|
unkown image
|
page readonly
|
|
|
|
2923000
|
unkown image
|
page readonly
|
|
|
|
92E000
|
unkown
|
page read and write
|
|
|
|
7FF5173DA000
|
unkown image
|
page readonly
|
|
|
|
2854000
|
unkown image
|
page readonly
|
|
|
|
A5D000
|
unkown
|
page read and write
|
|
|
|
9E0000
|
unkown
|
page read and write
|
|
|
|
7FF501041000
|
unkown image
|
page readonly
|
|
|
|
7FF517647000
|
unkown image
|
page readonly
|
|
|
|
8C3000
|
unkown
|
page read and write
|
|
|
|
2F4A000
|
unkown
|
page read and write
|
|
|
|
E15ECFE000
|
stack
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
3002000
|
unkown
|
page read and write
|
|
|
|
1E07F060000
|
unkown
|
page read and write
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
7FF501597000
|
unkown image
|
page readonly
|
|
|
|
7FF51734A000
|
unkown image
|
page readonly
|
|
|
|
5899000
|
unkown
|
page read and write
|
|
|
|
2E3F8051000
|
unkown
|
page read and write
|
|
|
|
4FDC000
|
heap private
|
page read and write
|
|
|
|
4A7D000
|
stack
|
page read and write
|
|
|
|
49D0000
|
heap private
|
page read and write
|
|
|
|
7FF51210A000
|
unkown image
|
page readonly
|
|
|
|
A94000
|
unkown
|
page read and write
|
|
|
|
2796FC4C000
|
unkown
|
page read and write
|
|
|
|
D80000
|
unkown image
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
2854000
|
unkown image
|
page readonly
|
|
|
|
870000
|
unkown
|
page read and write
|
|
|
|
52FC000
|
heap private
|
page read and write
|
|
|
|
7FAE0000
|
unkown image
|
page readonly
|
|
|
|
7FF517332000
|
unkown image
|
page readonly
|
|
|
|
8A0000
|
unkown image
|
page readonly
|
|
|
|
1703000
|
heap private
|
page read and write
|
|
|
|
27970584000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF51207D000
|
unkown image
|
page readonly
|
|
|
|
7FF59F1B7000
|
unkown image
|
page readonly
|
|
|
|
293C000
|
unkown image
|
page readonly
|
|
|
|
A5E000
|
unkown
|
page read and write
|
|
|
|
B01000
|
unkown
|
page read and write
|
|
|
|
1CF0EBF0000
|
unkown
|
page read and write
|
|
|
|
2F73000
|
unkown
|
page read and write
|
|
|
|
28F5000
|
unkown image
|
page readonly
|
|
|
|
1AEF000
|
heap private
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
7DF51BEE2000
|
unkown image
|
page readonly
|
|
|
|
1CF139B1000
|
unkown
|
page read and write
|
|
|
|
2796FC69000
|
unkown
|
page read and write
|
|
|
|
7FF5120E7000
|
unkown image
|
page readonly
|
|
|
|
2797055C000
|
unkown
|
page read and write
|
|
|
|
54F8000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
290B000
|
unkown image
|
page readonly
|
|
|
|
2797055F000
|
unkown
|
page read and write
|
|
|
|
48BD000
|
stack
|
page read and write
|
|
|
|
7FF517339000
|
unkown image
|
page readonly
|
|
|
|
2E3F8108000
|
unkown
|
page read and write
|
|
|
|
2968000
|
unkown image
|
page readonly
|
|
|
|
2B61000
|
unkown image
|
page readonly
|
|
|
|
2E3F803C000
|
unkown
|
page read and write
|
|
|
|
2796FB60000
|
unkown
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
7FA90000
|
unkown image
|
page readonly
|
|
|
|
F8442FF000
|
stack
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF512089000
|
unkown image
|
page readonly
|
|
|
|
895000
|
unkown
|
page read and write
|
|
|
|
736E1000
|
unkown image
|
page readonly
|
|
|
|
54F7000
|
unkown
|
page read and write
|
|
|
|
290B000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF517636000
|
unkown image
|
page readonly
|
|
|
|
4F40000
|
unkown
|
page read and write
|
|
|
|
2891000
|
unkown image
|
page readonly
|
|
|
|
7FBA0000
|
unkown image
|
page readonly
|
|
|
|
1F5C4B02000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
3130000
|
unkown image
|
page readonly
|
|
|
|
28E1000
|
unkown image
|
page readonly
|
|
|
|
A8C000
|
unkown image
|
page readonly
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
882000
|
unkown
|
page read and write
|
|
|
|
2BAE000
|
stack
|
page read and write
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
7EFF2000
|
unkown image
|
page readonly
|
|
|
|
1E07E514000
|
heap default
|
page read and write
|
|
|
|
7FF4F6FDB000
|
unkown image
|
page readonly
|
|
|
|
736D1000
|
unkown image
|
page execute read
|
|
|
|
293F000
|
unkown image
|
page readonly
|
|
|
|
1D407120000
|
unkown image
|
page readonly
|
|
|
|
7FF5173EF000
|
unkown image
|
page readonly
|
|
|
|
7FF5173ED000
|
unkown image
|
page readonly
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
7FE60000
|
unkown image
|
page readonly
|
|
|
|
990000
|
unkown image
|
page readonly
|
|
|
|
7FF59F0A8000
|
unkown image
|
page readonly
|
|
|
|
7FF500E29000
|
unkown image
|
page readonly
|
|
|
|
26A0000
|
unkown image
|
page readonly
|
|
|
|
7FF501357000
|
unkown image
|
page readonly
|
|
|
|
7FF59F253000
|
unkown image
|
page readonly
|
|
|
|
22A9ABC1000
|
unkown
|
page read and write
|
|
|
|
30B0000
|
heap private
|
page read and write
|
|
|
|
7FF5014B6000
|
unkown image
|
page readonly
|
|
|
|
A9F000
|
unkown
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
16F0000
|
heap private
|
page read and write
|
|
|
|
7FF517607000
|
unkown image
|
page readonly
|
|
|
|
22A9ABA6000
|
unkown
|
page read and write
|
|
|
|
2E3F7F50000
|
unkown image
|
page read and write
|
|
|
|
279705B5000
|
unkown
|
page read and write
|
|
|
|
27970581000
|
unkown
|
page read and write
|
|
|
|
7FF5E8F87000
|
unkown image
|
page readonly
|
|
|
|
5896000
|
unkown
|
page read and write
|
|
|
|
2FDA000
|
unkown
|
page read and write
|
|
|
|
7FF572CE0000
|
unkown image
|
page readonly
|
|
|
|
9BA000
|
unkown
|
page read and write
|
|
|
|
4780000
|
stack
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
890000
|
heap default
|
page read and write
|
|
|
|
1CF13D00000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
7FE92000
|
unkown image
|
page readonly
|
|
|
|
89C000
|
unkown
|
page read and write
|
|
|
|
4ABD000
|
stack
|
page read and write
|
|
|
|
1CF13AF0000
|
unkown
|
page read and write
|
|
|
|
2FEF000
|
unkown
|
page read and write
|
|
|
|
A0C000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2FEF000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
7FF5174C5000
|
unkown image
|
page readonly
|
|
|
|
1CF13A60000
|
unkown
|
page read and write
|
|
|
|
3002000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
8F0000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7FF517514000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
1CF139D4000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2960000
|
unkown image
|
page readonly
|
|
|
|
1D4071A0000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
3008000
|
unkown
|
page read and write
|
|
|
|
2796FCEA000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
AE0000
|
unkown image
|
page readonly
|
|
|
|
7FF517380000
|
unkown image
|
page readonly
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
4830000
|
heap private
|
page read and write
|
|
|
|
7DF5A4E62000
|
unkown image
|
page readonly
|
|
|
|
9B0000
|
unkown
|
page read and write
|
|
|
|
9A5000
|
heap default
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
2970000
|
unkown image
|
page readonly
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
2797055D000
|
unkown
|
page read and write
|
|
|
|
67B000
|
unkown
|
page read and write
|
|
|
|
7DF51BEE2000
|
unkown image
|
page readonly
|
|
|
|
54FE000
|
unkown
|
page read and write
|
|
|
|
736D1000
|
unkown image
|
page execute read
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
4BF3000
|
heap private
|
page read and write
|
|
|
|
4E9C000
|
stack
|
page read and write
|
|
|
|
7FF572E97000
|
unkown image
|
page readonly
|
|
|
|
D8C000
|
unkown image
|
page readonly
|
|
|
|
1E07E535000
|
unkown
|
page read and write
|
|
|
|
7DF47AB40000
|
unkown image
|
page readonly
|
|
|
|
7FF572D55000
|
unkown image
|
page readonly
|
|
|
|
7FEA2000
|
unkown image
|
page readonly
|
|
|
|
27970597000
|
unkown
|
page read and write
|
|
|
|
7FF59AFF2000
|
unkown image
|
page readonly
|
|
|
|
7EFF0000
|
unkown image
|
page readonly
|
|
|
|
7DF5F2D82000
|
unkown image
|
page readonly
|
|
|
|
985000
|
unkown
|
page read and write
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
296B000
|
unkown image
|
page readonly
|
|
|
|
54FA000
|
unkown
|
page read and write
|
|
|
|
9F0000
|
heap default
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
9E2000
|
unkown
|
page read and write
|
|
|
|
285E000
|
unkown image
|
page readonly
|
|
|
|
2795000
|
unkown image
|
page readonly
|
|
|
|
1CF0E6D0000
|
unkown image
|
page readonly
|
|
|
|
2796FCED000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A75000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7FF501586000
|
unkown image
|
page readonly
|
|
|
|
54FB000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FEA0000
|
unkown image
|
page readonly
|
|
|
|
52FA000
|
heap private
|
page read and write
|
|
|
|
8A1000
|
unkown
|
page read and write
|
|
|
|
AFA000
|
unkown
|
page read and write
|
|
|
|
7DF50B350000
|
unkown image
|
page readonly
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown image
|
page read and write
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
A9F000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
27970360000
|
unkown image
|
page read and write
|
|
|
|
1CF0E370000
|
unkown image
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
E15E67E000
|
stack
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
5470000
|
unkown
|
page read and write
|
|
|
|
54FA000
|
unkown
|
page read and write
|
|
|
|
899000
|
unkown
|
page read and write
|
|
|
|
5339000
|
heap private
|
page read and write
|
|
|
|
7FF80000
|
unkown image
|
page readonly
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
2E3F7F70000
|
unkown image
|
page readonly
|
|
|
|
5710000
|
unkown
|
page read and write
|
|
|
|
2797058E000
|
unkown
|
page read and write
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
A82000
|
unkown
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
7FF5E8F94000
|
unkown image
|
page readonly
|
|
|
|
D8F000
|
unkown image
|
page readonly
|
|
|
|
54F8000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
8C3000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
16B0000
|
unkown image
|
page readonly
|
|
|
|
2FFE000
|
unkown
|
page read and write
|
|
|
|
3CFD000
|
stack
|
page read and write
|
|
|
|
2796FC00000
|
unkown
|
page read and write
|
|
|
|
736EB000
|
unkown image
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
142F000
|
stack
|
page read and write
|
|
|
|
7FF572CE5000
|
unkown image
|
page readonly
|
|
|
|
2E3F7FC0000
|
heap default
|
page read and write
|
|
|
|
279705A1000
|
unkown
|
page read and write
|
|
|
|
1CF0E3F3000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF512044000
|
unkown image
|
page readonly
|
|
|
|
285E000
|
unkown image
|
page readonly
|
|
|
|
7FF59AFDD000
|
unkown image
|
page readonly
|
|
|
|
1F5C4A13000
|
unkown
|
page read and write
|
|
|
|
7FF59F192000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
9AA000
|
heap default
|
page read and write
|
|
|
|
1CF0E8D0000
|
unkown image
|
page readonly
|
|
|
|
1D40728A000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
1CF13C48000
|
unkown
|
page read and write
|
|
|
|
DA410FF000
|
stack
|
page read and write
|
|
|
|
820000
|
unkown image
|
page readonly
|
|
|
|
7FF572E87000
|
unkown image
|
page readonly
|
|
|
|
2BF3000
|
unkown image
|
page readonly
|
|
|
|
7FF59F267000
|
unkown image
|
page readonly
|
|
|
|
1D407A02000
|
unkown
|
page read and write
|
|
|
|
27970561000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
3003000
|
unkown
|
page read and write
|
|
|
|
7DF5A9002000
|
unkown image
|
page readonly
|
|
|
|
2FEF000
|
unkown
|
page read and write
|
|
|
|
2923000
|
unkown image
|
page readonly
|
|
|
|
27970A6A000
|
unkown
|
page read and write
|
|
|
|
2E3F8002000
|
unkown
|
page read and write
|
|
|
|
7FF59AE87000
|
unkown image
|
page readonly
|
|
|
|
2797057C000
|
unkown
|
page read and write
|
|
|
|
7FF501047000
|
unkown image
|
page readonly
|
|
|
|
1CF139C0000
|
unkown
|
page read and write
|
|
|
|
A00000
|
unkown
|
page read and write
|
|
|
|
5897000
|
unkown
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
|
|
A75000
|
unkown
|
page read and write
|
|
|
|
90E000
|
unkown
|
page read and write
|
|
|
|
2919000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6FDB000
|
unkown image
|
page readonly
|
|
|
|
5890000
|
unkown
|
page read and write
|
|
|
|
7DF5213E0000
|
unkown image
|
page readonly
|
|
|
|
542D000
|
stack
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
736EF000
|
unkown image
|
page read and write
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
44B0000
|
heap private
|
page read and write
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
7FF5014E9000
|
unkown image
|
page readonly
|
|
|
|
7FF512137000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
8BC000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF501201000
|
unkown image
|
page readonly
|
|
|
|
1CF13C1F000
|
unkown
|
page read and write
|
|
|
|
5503000
|
unkown
|
page read and write
|
|
|
|
11B7CFB000
|
stack
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF572CA7000
|
unkown image
|
page readonly
|
|
|
|
1E07EC40000
|
unkown image
|
page readonly
|
|
|
|
2FD8000
|
unkown
|
page read and write
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
AA5000
|
unkown
|
page read and write
|
|
|
|
2F1A000
|
heap default
|
page read and write
|
|
|
|
22A9AB8B000
|
heap default
|
page read and write
|
|
|
|
7FF5E8EEE000
|
unkown image
|
page readonly
|
|
|
|
279705B2000
|
unkown
|
page read and write
|
|
|
|
2A6A000
|
unkown image
|
page readonly
|
|
|
|
286F000
|
unkown image
|
page readonly
|
|
|
|
2FEE000
|
unkown
|
page read and write
|
|
|
|
8C3000
|
unkown
|
page read and write
|
|
|
|
A0B000
|
unkown
|
page read and write
|
|
|
|
1CF0E4FD000
|
unkown
|
page read and write
|
|
|
|
1E07E3E0000
|
unkown image
|
page readonly
|
|
|
|
2895000
|
unkown image
|
page readonly
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
7FF59B006000
|
unkown image
|
page readonly
|
|
|
|
7FEB0000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF517529000
|
unkown image
|
page readonly
|
|
|
|
2F97000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
stack
|
page read and write
|
|
|
|
1AEB000
|
heap private
|
page read and write
|
|
|
|
2C02000
|
unkown image
|
page readonly
|
|
|
|
54F0000
|
unkown
|
page read and write
|
|
|
|
B5B14B000
|
unkown
|
page read and write
|
|
|
|
2F64000
|
unkown
|
page read and write
|
|
|
|
92E000
|
unkown
|
page read and write
|
|
|
|
992000
|
unkown
|
page read and write
|
|
|
|
2C38000
|
unkown image
|
page readonly
|
|
|
|
1CF139C0000
|
unkown
|
page read and write
|
|
|
|
2F4A000
|
unkown
|
page read and write
|
|
|
|
2F68000
|
unkown
|
page read and write
|
|
|
|
7FF5E8FD7000
|
unkown image
|
page readonly
|
|
|
|
3530000
|
unkown image
|
page readonly
|
|
|
|
53BD000
|
heap private
|
page read and write
|
|
|
|
49EE000
|
stack
|
page read and write
|
|
|
|
4A2F000
|
stack
|
page read and write
|
|
|
|
7DF5A4E72000
|
unkown image
|
page readonly
|
|
|
|
3008000
|
unkown
|
page read and write
|
|
|
|
7FF59F056000
|
unkown image
|
page readonly
|
|
|
|
B524C7B000
|
stack
|
page read and write
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
28F8000
|
unkown image
|
page readonly
|
|
|
|
4F0000
|
unkown image
|
page readonly
|
|
|
|
2FDA000
|
unkown
|
page read and write
|
|
|
|
2916000
|
unkown image
|
page readonly
|
|
|
|
E15E8F7000
|
stack
|
page read and write
|
|
|
|
7FF59B0C7000
|
unkown image
|
page readonly
|
|
|
|
2797056A000
|
unkown
|
page read and write
|
|
|
|
7DF5F2D80000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
578C000
|
stack
|
page read and write
|
|
|
|
2BB0000
|
unkown image
|
page read and write
|
|
|
|
7FF517524000
|
unkown image
|
page readonly
|
|
|
|
2944000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
27970580000
|
unkown
|
page read and write
|
|
|
|
870000
|
unkown
|
page read and write
|
|
|
|
27970A63000
|
unkown
|
page read and write
|
|
|
|
1E07E4A5000
|
heap private
|
page read and write
|
|
|
|
2796FD16000
|
unkown
|
page read and write
|
|
|
|
2B85000
|
stack
|
page execute and read and write
|
|
|
|
DA4107E000
|
stack
|
page read and write
|
|
|
|
5711000
|
unkown
|
page read and write
|
|
|
|
2CF2000
|
unkown
|
page read and write
|
|
|
|
27970595000
|
unkown
|
page read and write
|
|
|
|
1AEC000
|
heap private
|
page read and write
|
|
|
|
2961000
|
unkown image
|
page readonly
|
|
|
|
7FF572E02000
|
unkown image
|
page readonly
|
|
|
|
AFB000
|
unkown
|
page read and write
|
|
|
|
294D000
|
unkown image
|
page readonly
|
|
|
|
A4A000
|
heap default
|
page read and write
|
|
|
|
963000
|
unkown
|
page read and write
|
|
|
|
4AF0000
|
heap private
|
page read and write
|
|
|
|
7FF5010F2000
|
unkown image
|
page readonly
|
|
|
|
7DF5A9020000
|
unkown image
|
page readonly
|
|
|
|
2960000
|
unkown image
|
page readonly
|
|
|
|
A82000
|
heap default
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
A87000
|
unkown
|
page read and write
|
|
|
|
2797054B000
|
unkown
|
page read and write
|
|
|
|
279705BD000
|
unkown
|
page read and write
|
|
|
|
568B000
|
stack
|
page read and write
|
|
|
|
3120000
|
heap private
|
page read and write
|
|
|
|
A76000
|
heap default
|
page read and write
|
|
|
|
1CF13C5F000
|
unkown
|
page read and write
|
|
|
|
2882000
|
unkown image
|
page readonly
|
|
|
|
A65000
|
stack
|
page execute and read and write
|
|
|
|
1F5C48D0000
|
unkown image
|
page readonly
|
|
|
|
7FF572C6A000
|
unkown image
|
page readonly
|
|
|
|
2F70000
|
heap default
|
page read and write
|
|
|
|
2E3F7F60000
|
heap private
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
27970590000
|
unkown
|
page read and write
|
|
|
|
7FF501479000
|
unkown image
|
page readonly
|
|
|
|
A76000
|
unkown
|
page read and write
|
|
|
|
279705AC000
|
unkown
|
page read and write
|
|
|
|
22A9AB97000
|
heap default
|
page read and write
|
|
|
|
2662000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
2F4A000
|
unkown
|
page read and write
|
|
|
|
5711000
|
unkown
|
page read and write
|
|
|
|
940000
|
unkown
|
page read and write
|
|
|
|
7DF50B330000
|
unkown image
|
page readonly
|
|
|
|
2928000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
stack
|
page read and write
|
|
|
|
7FF5173EA000
|
unkown image
|
page readonly
|
|
|
|
3050000
|
unkown image
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
7FF572D18000
|
unkown image
|
page readonly
|
|
|
|
1CF0F800000
|
unkown
|
page read and write
|
|
|
|
1CF0E440000
|
unkown
|
page read and write
|
|
|
|
22A9AB96000
|
unkown
|
page read and write
|
|
|
|
279705C3000
|
unkown
|
page read and write
|
|
|
|
2FF8000
|
unkown
|
page read and write
|
|
There are 2352 hidden memdumps, click here to show them.