Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
sign.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\1IJD8WQ7\contextual.media[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\GQTX6NA7\www.msn[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{5D0C8C95-5276-11EC-90E9-ECF4BB862DED}.dat
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{5D0C8C97-5276-11EC-90E9-ECF4BB862DED}.dat
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\2d-0e97d4-185735b[1].css
|
UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\52-478955-68ddb2ab[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AAKp8YX[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AANf6qa[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AAQBdIv[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AARfBRG[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AARff5P[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AARg6mK[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AARga9S[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AARgmtt[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AARgoFZ[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AARgob3[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AARgou4[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AARgvCZ[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AARgwtm[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1aXBV1[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cEP3G[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cG73h[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gyWh5[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1kMP0[1].png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBPfCZL[1].png
|
GIF image data, version 89a, 50 x 50
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBX2afX[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\de-ch[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery-2.1.1.min[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\39ab3103-8560-4a55-bfc4-401f897cf6f2[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\5096d619-1503-4dc7-8fad-e2ece705fa8a[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AAQCgDb[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AARfMnc[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AARfw7b[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AARgAR8[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AARgeRz[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AARglz8[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AARgnyF[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AARgo1i[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AARgof8[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AAuTnto[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB10MkbM[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB7hg4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB7hjL[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBH3Kvo[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBJrII1[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\cfdbd9[1].png
|
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\de-ch[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\favicon[1].ico
|
MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\iab2Data[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\otSDKStub[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\otTCF-ie[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\px[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\17-361657-68ddb2ab[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\55a804ab-e5c6-4b97-9319-86263d365d28[1].json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AAKurDi[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AAMqFmF[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AAQby46[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARdTbN[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARfFmd[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARfQzY[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARfTXl[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARftOL[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARg1bv[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARgo1H[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARgr0v[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARgs6G[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARgtdN[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARgvvY[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AARgz6q[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1ftEY0[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB6Ma4a[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BBY7ARN[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\a5ea21[1].ico
|
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\a8a064[1].gif
|
GIF image data, version 89a, 28 x 28
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\e151e5[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tag[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\4996b9[1].woff
|
Web Open Font Format, TrueType, length 45633, version 1.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AANuZgF[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AAPFmi4[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AARbIzX[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AARfNgc[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AARg9pP[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AARgbQ8[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AARgd7C[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AARgqt4[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AARgrHg[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AARgw5H[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AARgyMO[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AARgyT7[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AAzb5EX[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gyTJJ[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB7gRE[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BBF08Nm[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BBVuddh[1].png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\checksync[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\checksync[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\medianet[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\medianet[2].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\nrrV52461[1].js
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\otBannerSdk[1].js
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\otCommonStyles[1].css
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\otFlat[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\otPcCenter[1].json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF13D9319CFEBB59CA.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF485BA4CE75C65002.TMP
|
data
|
dropped
|
|
There are 108 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll64.exe
|
loaddll64.exe "C:\Users\user\Desktop\sign.dll"
|
|
|
|
C:\Windows\System32\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\sign.dll",#1
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32.exe /s C:\Users\user\Desktop\sign.dll
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\sign.dll",#1
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
C:\Program Files\Internet Explorer\iexplore.exe
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\sign.dll,DllCanUnloadNow
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6504 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\sign.dll,DllGetActivationFactory
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\sign.dll,DllGetClassObject
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://assets.msn.com/staticsb/statics/latest/oneTrust/1.2/consent/55a804ab-e5c6-4b97-9319-86263d36
|
unknown
|
|
|
|
http://searchads.msn.net/.cfm?&&kp=1&
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/coronareisen
|
unknown
|
|
|
|
https://www.google.com/favicon.ico~
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_promotionalstripe_na
|
unknown
|
|
|
|
https://onedrive.live.com;Fotos
|
unknown
|
|
|
|
https://www.msn.com/de-ch/sport?ocid=StripeOCID
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/die-jungen-gr%c3%bcnen-sind-dem-kantonsrat-zu-wenig-radikal/ar-
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
|
unknown
|
|
|
|
http://ogp.me/ns/fb#
|
unknown
|
|
|
|
https://www.botman.ninja/privacy-policy
|
unknown
|
|
|
|
https://outlook.live.com/mail/deeplink/compose;Kalender
|
unknown
|
|
|
|
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
|
unknown
|
|
|
|
https://www.queryclick.com/privacy-policy
|
unknown
|
|
|
|
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/z%c3%bcrcher-kantonsrat-will-staatliche-kitas-mit-millionen-unt
|
unknown
|
|
|
|
https://btloader.com/tag?o=6208086025961472&upapi=true
|
104.26.6.139
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://www.skype.com/
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/nach-corona-stopp-stadtz%c3%bcrcher-bev%c3%b6lkerung-w%c3%a4chs
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/regional
|
unknown
|
|
|
|
https://www.stroeer.de/werben-mit-stroeer/onlinewerbung/programmatic-data/sdi-datenschutz-b2c
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
|
unknown
|
|
|
|
https://www.tippsundtricks.co/saubermachen/reinige-dusche-spulmaschinentab/?utm_campaign=DECH-spulit
|
unknown
|
|
|
|
https://amzn.to/2TTxhNg
|
unknown
|
|
|
|
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
|
unknown
|
|
|
|
https://client-s.gateway.messenger.live.com
|
unknown
|
|
|
|
https://secure.adnxs.com/clktrb?id=764680&t=1
|
unknown
|
|
|
|
https://www.msn.com/de-ch/
|
unknown
|
|
|
|
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
|
unknown
|
|
|
|
https://www.msn.com/de-ch
|
unknown
|
|
|
|
https://www.tippsundtricks.co/gesundheit/stueck-seife-bettwasche/?utm_campaign=DECH-bedsoap&utm_
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
|
unknown
|
|
|
|
https://twitter.com/i/notifications;Ich
|
unknown
|
|
|
|
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
|
unknown
|
|
|
|
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
|
142.250.180.134
|
|
|
|
https://nextmillennium.io/privacy-policy/
|
unknown
|
|
|
|
https://silvermob.com/privacy
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/20-kilo-marihuana-und-70-kilo-khat-am-flughafen-z%c3%bcrich-ent
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=273363&a=3064090&g=24940322
|
unknown
|
|
|
|
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://ogp.me/ns#
|
unknown
|
|
|
|
https://play.google.com/store/apps/details?id=com.microsoft.amp.apps.bingnews&hl=de-ch&refer
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;OneDrive-App
|
unknown
|
|
|
|
https://www.skype.com/de
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
|
unknown
|
|
|
|
https://tools.applemediaservices.com/api/badges/download-on-the-app-store/black/de-de?"
|
unknown
|
|
|
|
https://www.skype.com/de/download-skype
|
unknown
|
|
|
|
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
|
unknown
|
|
|
|
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
|
unknown
|
|
|
|
https://onedrive.live.com;OneDrive-App
|
unknown
|
|
|
|
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
|
unknown
|
|
|
|
https://clkde.tradedoubler.com/click?p=295926&a=3064090&g=24886692
|
unknown
|
|
|
|
https://www.google.com/chrome/static/images/favicons/favicon-16x16.png
|
unknown
|
|
|
|
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/googleData.json
|
unknown
|
|
|
|
https://www.msn.com/de-ch/nachrichten/schweiz/stadtz%c3%bcrcher-sagen-ja-zu-%c3%b6ffentlichen-terras
|
unknown
|
|
|
|
https://outlook.com/
|
unknown
|
|
|
|
https://play.google.com/intl/en_us/badges/images/generic/de_badge_web_generic.png"
|
unknown
|
|
|
|
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
|
unknown
|
|
|
|
https://www.stroeer.com/fileadmin/com/StroeerDSP_deviceStorage.json
|
unknown
|
|
|
|
https://cdn.cookielaw.org/vendorlist/iabData.json
|
unknown
|
|
|
|
https://www.msn.com/de-ch/homepage/api/pdp/updatepdpdata"
|
unknown
|
|
|
|
https://onedrive.live.com/?qt=mru;Aktuelle
|
unknown
|
|
|
|
https://www.msn.com/de-ch/?ocid=iehp
|
unknown
|
|
|
|
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/der-schnee-machte-den-z%c3%bcrcher-trams-und-bussen-zu-schaffen
|
unknown
|
|
|
|
https://www.ebay.ch/?mkcid=1&mkrid=5222-53480-19255-0&siteid=193&campid=5338626668&t
|
unknown
|
|
|
|
https://www.msn.com/de-ch/homepage/api/modules/fetch"
|
unknown
|
|
|
|
https://doceree.com/.well-known/deviceStorage.json
|
unknown
|
|
|
|
https://ad-delivery.net/px.gif?ch=1&e=0.8829098672686784
|
172.67.69.19
|
|
|
|
https://mem.gfx.ms/meversion/?partner=msn&market=de-ch"
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://web.vortex.data.msn.com/collect/v1/t.gif?name=%27Ms.Webi.PageView%27&ver=%272.1%27&a
|
unknown
|
|
|
|
https://www.bidstack.com/privacy-policy/
|
unknown
|
|
|
|
https://onedrive.live.com/about/en/download/
|
unknown
|
|
|
|
https://www.tippsundtricks.co/lifehacks/kochendes-wasser-auto/?utm_campaign=DECH-cardent&utm_sou
|
unknown
|
|
|
|
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_mestripe_logo_d
|
unknown
|
|
|
|
https://twitter.com/
|
unknown
|
|
|
|
https://www.stroeer.de/ssp-datenschutz
|
unknown
|
|
|
|
https://optimise-it.de/datenschutz
|
unknown
|
|
|
|
https://smartyads.com/privacy-policy
|
unknown
|
|
|
|
https://www.msn.com/de-ch/news/other/n%c3%a4chtliche-ausfahrt-endet-mit-sechs-verletzten/ar-AARdLXJ?
|
unknown
|
|
|
|
https://www.onlineumfragen.com/3index_2010_agb.cfm
|
unknown
|
|
|
|
https://outlook.live.com/calendar
|
unknown
|
|
|
|
https://onedrive.live.com/#qt=mru
|
unknown
|
|
|
|
https://www.msn.com/de-ch/sport/other/der-fcz-hat-die-leidenschaft-die-basel-und-yb-derzeit-fehlt/ar
|
unknown
|
|
|
|
https://www.msn.com?form=MY01O4&OCID=MY01O4
|
unknown
|
|
|
|
https://support.skype.com
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
contextual.media.net
|
2.18.160.23
|
|
|
|
dart.l.doubleclick.net
|
142.250.180.134
|
|
|
|
hblg.media.net
|
2.18.160.23
|
|
|
|
lg3.media.net
|
2.18.160.23
|
|
|
|
btloader.com
|
104.26.6.139
|
|
|
|
ad-delivery.net
|
172.67.69.19
|
|
|
|
assets.msn.com
|
unknown
|
|
|
|
web.vortex.data.msn.com
|
unknown
|
|
|
|
www.msn.com
|
unknown
|
|
|
|
ad.doubleclick.net
|
unknown
|
|
|
|
srtb.msn.com
|
unknown
|
|
|
|
cvision.media.net
|
unknown
|
|
There are 2 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
172.67.69.19
|
ad-delivery.net
|
United States
|
|
|
|
142.250.180.134
|
dart.l.doubleclick.net
|
United States
|
|
|
|
104.26.6.139
|
btloader.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
|
{5D0C8C95-5276-11EC-90E9-ECF4BB862DED}
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery
|
AdminActive
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
|
Blocked
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Count
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
Time
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
|
LoadTimeArray
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingLastYMD
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingBitmap
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
|
CVListPingRandomizedBitmap
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
DecayDateQueue
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
|
LastProcessed
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DomainSuggestion
|
NextUpdateDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\msn.com
|
NumberOfSubdomains
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
NumberOfSubdomains
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\www.msn.com
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\msn.com
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\contextual.media.net
|
NULL
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\media.net
|
Total
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\Total
|
NULL
|
|
There are 86 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF58DB2A000
|
unkown image
|
page readonly
|
|
|
|
7DF58D9D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE6AD000
|
unkown image
|
page readonly
|
|
|
|
7FF5D70E2000
|
unkown image
|
page readonly
|
|
|
|
F4A44FC000
|
stack
|
page read and write
|
|
|
|
1C87D267000
|
unkown
|
page read and write
|
|
|
|
7FF5C13C9000
|
unkown image
|
page readonly
|
|
|
|
18579813000
|
unkown
|
page read and write
|
|
|
|
7FF5D77F6000
|
unkown image
|
page readonly
|
|
|
|
7FF56FCCC000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2F99000
|
unkown image
|
page readonly
|
|
|
|
1D025C70000
|
unkown image
|
page read and write
|
|
|
|
25846102000
|
unkown
|
page read and write
|
|
|
|
209A1B0E000
|
unkown
|
page read and write
|
|
|
|
257F3708000
|
unkown
|
page read and write
|
|
|
|
7FF57AA48000
|
unkown image
|
page readonly
|
|
|
|
1E54D869000
|
unkown
|
page read and write
|
|
|
|
28D627F0000
|
unkown
|
page read and write
|
|
|
|
137497F000
|
stack
|
page read and write
|
|
|
|
1C011C02000
|
unkown
|
page read and write
|
|
|
|
7FF5C17BE000
|
unkown image
|
page readonly
|
|
|
|
1D025D37000
|
unkown
|
page read and write
|
|
|
|
7FF501C06000
|
unkown image
|
page readonly
|
|
|
|
B08EF7E000
|
stack
|
page read and write
|
|
|
|
7FF501E5B000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2FC1000
|
unkown image
|
page readonly
|
|
|
|
7FF58DAFB000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2475000
|
unkown image
|
page readonly
|
|
|
|
18579D80000
|
unkown image
|
page readonly
|
|
|
|
7FF587934000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1CE0000
|
unkown image
|
page readonly
|
|
|
|
7FF54E500000
|
unkown image
|
page readonly
|
|
|
|
7FF587A34000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB51B000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD3C1000
|
unkown image
|
page readonly
|
|
|
|
1C26B86F000
|
unkown
|
page read and write
|
|
|
|
7F5A17D000
|
stack
|
page read and write
|
|
|
|
1C59D562000
|
heap default
|
page read and write
|
|
|
|
7FF56FE39000
|
unkown image
|
page readonly
|
|
|
|
1CF38020000
|
unkown image
|
page readonly
|
|
|
|
62011EE000
|
stack
|
page read and write
|
|
|
|
7FF4FB563000
|
unkown image
|
page readonly
|
|
|
|
185797F0000
|
unkown
|
page read and write
|
|
|
|
7DF5D0252000
|
unkown image
|
page readonly
|
|
|
|
18579670000
|
unkown image
|
page readonly
|
|
|
|
7FF58DAD7000
|
unkown image
|
page readonly
|
|
|
|
7DF58D9F0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB622000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2F0B000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1780000
|
unkown image
|
page readonly
|
|
|
|
1C011478000
|
unkown
|
page read and write
|
|
|
|
25846580000
|
unkown image
|
page readonly
|
|
|
|
7FF587A45000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2EE7000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE4B6000
|
unkown image
|
page readonly
|
|
|
|
1C87D2EA000
|
unkown
|
page read and write
|
|
|
|
7DF5956B2000
|
unkown image
|
page readonly
|
|
|
|
185797A0000
|
unkown image
|
page readonly
|
|
|
|
7FF501D8C000
|
unkown image
|
page readonly
|
|
|
|
1C87CFF0000
|
unkown image
|
page readonly
|
|
|
|
7DF58D9D2000
|
unkown image
|
page readonly
|
|
|
|
620147E000
|
stack
|
page read and write
|
|
|
|
7FF5BC8BD000
|
unkown image
|
page readonly
|
|
|
|
257F3530000
|
unkown image
|
page readonly
|
|
|
|
1C87DF63000
|
unkown
|
page read and write
|
|
|
|
7FF551470000
|
unkown image
|
page readonly
|
|
|
|
7FF5D78CA000
|
unkown image
|
page readonly
|
|
|
|
B08EBFB000
|
stack
|
page read and write
|
|
|
|
2332FA90000
|
unkown image
|
page readonly
|
|
|
|
24620064000
|
unkown
|
page read and write
|
|
|
|
1C011600000
|
unkown image
|
page readonly
|
|
|
|
209A1AA0000
|
unkown
|
page read and write
|
|
|
|
7FF5D78E1000
|
unkown image
|
page readonly
|
|
|
|
1C87D9A2000
|
unkown
|
page read and write
|
|
|
|
1C87D2E2000
|
unkown
|
page read and write
|
|
|
|
7DF5E5550000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE097000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB4F1000
|
unkown image
|
page readonly
|
|
|
|
7DF5C5C50000
|
unkown image
|
page readonly
|
|
|
|
1C87D9A3000
|
unkown
|
page read and write
|
|
|
|
1D025D4C000
|
unkown
|
page read and write
|
|
|
|
19DABE10000
|
unkown image
|
page readonly
|
|
|
|
25846069000
|
unkown
|
page read and write
|
|
|
|
7FF5BC6F3000
|
unkown image
|
page readonly
|
|
|
|
7FF4F4185000
|
unkown image
|
page readonly
|
|
|
|
2332FB92000
|
unkown
|
page read and write
|
|
|
|
7DF5CA5A2000
|
unkown image
|
page readonly
|
|
|
|
1C87CFD0000
|
unkown image
|
page readonly
|
|
|
|
7DF57DAD0000
|
unkown image
|
page readonly
|
|
|
|
7FF501EF4000
|
unkown image
|
page readonly
|
|
|
|
1CF37FF0000
|
unkown image
|
page readonly
|
|
|
|
7FF58DA05000
|
unkown image
|
page readonly
|
|
|
|
18F000E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE299000
|
unkown image
|
page readonly
|
|
|
|
7FF5C0F5D000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE5F2000
|
unkown image
|
page readonly
|
|
|
|
28D5F26C000
|
unkown
|
page read and write
|
|
|
|
1C011459000
|
unkown
|
page read and write
|
|
|
|
1C26B813000
|
unkown
|
page read and write
|
|
|
|
7FF5D75DD000
|
unkown image
|
page readonly
|
|
|
|
7FF56FD6A000
|
unkown image
|
page readonly
|
|
|
|
7D7BA78000
|
stack
|
page read and write
|
|
|
|
1C87D213000
|
unkown
|
page read and write
|
|
|
|
F59387B000
|
unkown
|
page read and write
|
|
|
|
18F0026B000
|
unkown
|
page read and write
|
|
|
|
7FF4F420D000
|
unkown image
|
page readonly
|
|
|
|
1C87D97B000
|
unkown
|
page read and write
|
|
|
|
231210C0000
|
heap private
|
page read and write
|
|
|
|
CF27F0E000
|
stack
|
page read and write
|
|
|
|
7DF501F72000
|
unkown image
|
page readonly
|
|
|
|
7FF4F3F82000
|
unkown image
|
page readonly
|
|
|
|
725457E000
|
stack
|
page read and write
|
|
|
|
18F7FFF0000
|
heap default
|
page read and write
|
|
|
|
7FF54E3F7000
|
unkown image
|
page readonly
|
|
|
|
1C87D998000
|
unkown
|
page read and write
|
|
|
|
7FF5B7ED9000
|
unkown image
|
page readonly
|
|
|
|
7FF587947000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2C45000
|
unkown image
|
page readonly
|
|
|
|
1C87D987000
|
unkown
|
page read and write
|
|
|
|
7FF5C2275000
|
unkown image
|
page readonly
|
|
|
|
1C59E380000
|
unkown
|
page read and write
|
|
|
|
28D624A0000
|
heap private
|
page read and write
|
|
|
|
7FF58DAD3000
|
unkown image
|
page readonly
|
|
|
|
1C87DF02000
|
unkown
|
page read and write
|
|
|
|
7FF501EFA000
|
unkown image
|
page readonly
|
|
|
|
14A0000
|
unkown image
|
page readonly
|
|
|
|
1C01147C000
|
unkown
|
page read and write
|
|
|
|
7FF5CD29B000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC867000
|
unkown image
|
page readonly
|
|
|
|
1F5C57D000
|
stack
|
page read and write
|
|
|
|
7FF5C23FF000
|
unkown image
|
page readonly
|
|
|
|
7DF57DAD2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1613000
|
unkown image
|
page readonly
|
|
|
|
7FF5C253B000
|
unkown image
|
page readonly
|
|
|
|
209A1B21000
|
unkown
|
page read and write
|
|
|
|
7FF5BC941000
|
unkown image
|
page readonly
|
|
|
|
25845E10000
|
unkown image
|
page readonly
|
|
|
|
CF2827E000
|
stack
|
page read and write
|
|
|
|
7FF5CD3CA000
|
unkown image
|
page readonly
|
|
|
|
1C011444000
|
unkown
|
page read and write
|
|
|
|
7FF501CAF000
|
unkown image
|
page readonly
|
|
|
|
209A1AC0000
|
unkown image
|
page readonly
|
|
|
|
257F362A000
|
unkown
|
page read and write
|
|
|
|
7FF58D980000
|
unkown image
|
page readonly
|
|
|
|
7DF5CA5B2000
|
unkown image
|
page readonly
|
|
|
|
7DF5092B2000
|
unkown image
|
page readonly
|
|
|
|
18579A00000
|
unkown image
|
page readonly
|
|
|
|
23121610000
|
unkown image
|
page readonly
|
|
|
|
1E54D800000
|
unkown
|
page read and write
|
|
|
|
1C87D973000
|
unkown
|
page read and write
|
|
|
|
7FF4F42D9000
|
unkown image
|
page readonly
|
|
|
|
25845DF0000
|
unkown image
|
page read and write
|
|
|
|
7FF58D7AF000
|
unkown image
|
page readonly
|
|
|
|
257F3560000
|
heap default
|
page read and write
|
|
|
|
7DF50FB82000
|
unkown image
|
page readonly
|
|
|
|
7DF4BEAF0000
|
unkown image
|
page readonly
|
|
|
|
28D5F0A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE5DF000
|
unkown image
|
page readonly
|
|
|
|
23332E50000
|
unkown image
|
page readonly
|
|
|
|
1E54D760000
|
unkown
|
page read and write
|
|
|
|
28D5F265000
|
unkown
|
page read and write
|
|
|
|
1C26BA00000
|
unkown image
|
page readonly
|
|
|
|
1C87D98B000
|
unkown
|
page read and write
|
|
|
|
1C26BC00000
|
unkown image
|
page readonly
|
|
|
|
7DF5D0250000
|
unkown image
|
page readonly
|
|
|
|
7FF501E87000
|
unkown image
|
page readonly
|
|
|
|
1C59D490000
|
unkown
|
page read and write
|
|
|
|
7FF4F4220000
|
unkown image
|
page readonly
|
|
|
|
25846200000
|
unkown image
|
page readonly
|
|
|
|
7FF5C17DA000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2E15000
|
unkown image
|
page readonly
|
|
|
|
7FF58D961000
|
unkown image
|
page readonly
|
|
|
|
7FF5C23DB000
|
unkown image
|
page readonly
|
|
|
|
2332FB10000
|
unkown
|
page read and write
|
|
|
|
7DF59B820000
|
unkown image
|
page readonly
|
|
|
|
7FF501BD7000
|
unkown image
|
page readonly
|
|
|
|
1C59DC50000
|
unkown image
|
page readonly
|
|
|
|
7FF5D780E000
|
unkown image
|
page readonly
|
|
|
|
7DF5092C0000
|
unkown image
|
page readonly
|
|
|
|
1C87D982000
|
unkown
|
page read and write
|
|
|
|
1C87D96C000
|
unkown
|
page read and write
|
|
|
|
7FF501BE2000
|
unkown image
|
page readonly
|
|
|
|
18F00919000
|
unkown
|
page read and write
|
|
|
|
7D7B27E000
|
stack
|
page read and write
|
|
|
|
7FF57FCEA000
|
unkown image
|
page readonly
|
|
|
|
1C011485000
|
unkown
|
page read and write
|
|
|
|
7FF4F41D1000
|
unkown image
|
page readonly
|
|
|
|
7FF4F4301000
|
unkown image
|
page readonly
|
|
|
|
2332FEC5000
|
heap private
|
page read and write
|
|
|
|
7FF54E50E000
|
unkown image
|
page readonly
|
|
|
|
2B2E000
|
stack
|
page read and write
|
|
|
|
1C87D973000
|
unkown
|
page read and write
|
|
|
|
28D5F070000
|
unkown image
|
page readonly
|
|
|
|
1CF38350000
|
heap private
|
page read and write
|
|
|
|
18F7FFC0000
|
unkown image
|
page readonly
|
|
|
|
23330250000
|
unkown image
|
page readonly
|
|
|
|
1C87D998000
|
unkown
|
page read and write
|
|
|
|
1C011431000
|
unkown
|
page read and write
|
|
|
|
B38FA7B000
|
unkown
|
page read and write
|
|
|
|
7FF5CD325000
|
unkown image
|
page readonly
|
|
|
|
7FF57F5FE000
|
unkown image
|
page readonly
|
|
|
|
13745FB000
|
stack
|
page read and write
|
|
|
|
7FF5CE53F000
|
unkown image
|
page readonly
|
|
|
|
2332FECB000
|
heap private
|
page read and write
|
|
|
|
1C87D95E000
|
unkown
|
page read and write
|
|
|
|
7FF5C24FD000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF4E0000
|
unkown image
|
page readonly
|
|
|
|
7DF5E5552000
|
unkown image
|
page readonly
|
|
|
|
7DF588752000
|
unkown image
|
page readonly
|
|
|
|
7FF587A51000
|
unkown image
|
page readonly
|
|
|
|
7FF57AAC2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F4117000
|
unkown image
|
page readonly
|
|
|
|
19DABECE000
|
heap default
|
page read and write
|
|
|
|
7FF5C1677000
|
unkown image
|
page readonly
|
|
|
|
18F0093B000
|
unkown
|
page read and write
|
|
|
|
7FF501E33000
|
unkown image
|
page readonly
|
|
|
|
1C26B883000
|
unkown
|
page read and write
|
|
|
|
7FFC664A0000
|
unkown image
|
page readonly
|
|
|
|
1C59D52D000
|
unkown
|
page read and write
|
|
|
|
7FF5CE714000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE657000
|
unkown image
|
page readonly
|
|
|
|
7FF501CFB000
|
unkown image
|
page readonly
|
|
|
|
1C87D956000
|
unkown
|
page read and write
|
|
|
|
1C59D525000
|
unkown
|
page read and write
|
|
|
|
24620100000
|
unkown
|
page read and write
|
|
|
|
7FF56FD6F000
|
unkown image
|
page readonly
|
|
|
|
28D628F0000
|
unkown
|
page read and write
|
|
|
|
1E54D874000
|
unkown
|
page read and write
|
|
|
|
19DABE40000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E2C000
|
unkown image
|
page readonly
|
|
|
|
1C87D975000
|
unkown
|
page read and write
|
|
|
|
7DF57DAD2000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB651000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE71A000
|
unkown image
|
page readonly
|
|
|
|
18F0022A000
|
unkown
|
page read and write
|
|
|
|
DF0000
|
unkown image
|
page readonly
|
|
|
|
7FF58DB94000
|
unkown image
|
page readonly
|
|
|
|
7DF59B810000
|
unkown image
|
page readonly
|
|
|
|
1C87D9B1000
|
unkown
|
page read and write
|
|
|
|
1C87D780000
|
unkown image
|
page readonly
|
|
|
|
7FF57A643000
|
unkown image
|
page readonly
|
|
|
|
1C87DF02000
|
unkown
|
page read and write
|
|
|
|
7DF5C5C30000
|
unkown image
|
page readonly
|
|
|
|
7FF587977000
|
unkown image
|
page readonly
|
|
|
|
28D60C20000
|
unkown
|
page read and write
|
|
|
|
7DF5DC3A0000
|
unkown image
|
page readonly
|
|
|
|
7FF57FC93000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF4C0000
|
unkown image
|
page readonly
|
|
|
|
7DF55C260000
|
unkown image
|
page readonly
|
|
|
|
7DF5DC3A2000
|
unkown image
|
page readonly
|
|
|
|
7FF54E465000
|
unkown image
|
page readonly
|
|
|
|
7FF57A659000
|
unkown image
|
page readonly
|
|
|
|
7DF5DB040000
|
unkown image
|
page readonly
|
|
|
|
23122BC0000
|
unkown
|
page read and write
|
|
|
|
2332FED0000
|
unkown image
|
page readonly
|
|
|
|
52B11F9000
|
stack
|
page read and write
|
|
|
|
7FF58DBA1000
|
unkown image
|
page readonly
|
|
|
|
25845F60000
|
unkown
|
page read and write
|
|
|
|
1C26B800000
|
unkown
|
page read and write
|
|
|
|
18579D90000
|
unkown image
|
page readonly
|
|
|
|
209A1A60000
|
unkown
|
page read and write
|
|
|
|
2462006E000
|
unkown
|
page read and write
|
|
|
|
25846400000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB4D1000
|
unkown image
|
page readonly
|
|
|
|
257F38D0000
|
unkown image
|
page readonly
|
|
|
|
23332E43000
|
heap private
|
page read and write
|
|
|
|
7DF50FB72000
|
unkown image
|
page readonly
|
|
|
|
7FF58DAD0000
|
unkown image
|
page readonly
|
|
|
|
25846590000
|
unkown image
|
page readonly
|
|
|
|
2312128B000
|
unkown
|
page read and write
|
|
|
|
7FF4FB5CD000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB5CA000
|
unkown image
|
page readonly
|
|
|
|
7DF5092D0000
|
unkown image
|
page readonly
|
|
|
|
7FF58DBAA000
|
unkown image
|
page readonly
|
|
|
|
1E54D710000
|
unkown image
|
page readonly
|
|
|
|
1E54D902000
|
unkown
|
page read and write
|
|
|
|
7DF4996E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C0EE1000
|
unkown image
|
page readonly
|
|
|
|
7FF5B25C6000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB57E000
|
unkown image
|
page readonly
|
|
|
|
1C87D2B1000
|
unkown
|
page read and write
|
|
|
|
7DF4E3410000
|
unkown image
|
page readonly
|
|
|
|
1C87DE21000
|
unkown
|
page read and write
|
|
|
|
28D5F271000
|
unkown
|
page read and write
|
|
|
|
7FF54E5DA000
|
unkown image
|
page readonly
|
|
|
|
7DF50FB90000
|
unkown image
|
page readonly
|
|
|
|
28D5F264000
|
unkown
|
page read and write
|
|
|
|
7FF5B7EE3000
|
unkown image
|
page readonly
|
|
|
|
1C87D2ED000
|
unkown
|
page read and write
|
|
|
|
7FF4F425E000
|
unkown image
|
page readonly
|
|
|
|
F4A3F7D000
|
stack
|
page read and write
|
|
|
|
7FF5870C1000
|
unkown image
|
page readonly
|
|
|
|
7DF5D0252000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2FC1000
|
unkown image
|
page readonly
|
|
|
|
7DF5DB030000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1769000
|
unkown image
|
page readonly
|
|
|
|
1E54D740000
|
unkown image
|
page readonly
|
|
|
|
2332FAB0000
|
unkown
|
page read and write
|
|
|
|
7FF57A29D000
|
unkown image
|
page readonly
|
|
|
|
1C87D91A000
|
unkown
|
page read and write
|
|
|
|
7FF54E5B9000
|
unkown image
|
page readonly
|
|
|
|
1C87D9D9000
|
unkown
|
page read and write
|
|
|
|
257F3700000
|
unkown
|
page read and write
|
|
|
|
2332FB97000
|
unkown
|
page read and write
|
|
|
|
7FF5CD27B000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7F47000
|
unkown image
|
page readonly
|
|
|
|
257F3C50000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB59B000
|
unkown image
|
page readonly
|
|
|
|
7FF501E1D000
|
unkown image
|
page readonly
|
|
|
|
7FF5016B4000
|
unkown image
|
page readonly
|
|
|
|
257F3600000
|
unkown
|
page read and write
|
|
|
|
1857985E000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E41000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7FCA000
|
unkown image
|
page readonly
|
|
|
|
257F3540000
|
unkown image
|
page readonly
|
|
|
|
7FF57FD6A000
|
unkown image
|
page readonly
|
|
|
|
2461FED0000
|
unkown image
|
page readonly
|
|
|
|
28D5F1DB000
|
heap private
|
page read and write
|
|
|
|
7FF57FCED000
|
unkown image
|
page readonly
|
|
|
|
1C87D974000
|
unkown
|
page read and write
|
|
|
|
18F002CC000
|
unkown
|
page read and write
|
|
|
|
7FF56FE61000
|
unkown image
|
page readonly
|
|
|
|
7FF4F422E000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB5A5000
|
unkown image
|
page readonly
|
|
|
|
1D025C90000
|
unkown image
|
page readonly
|
|
|
|
B44D77E000
|
stack
|
page read and write
|
|
|
|
12B0000
|
unkown image
|
page readonly
|
|
|
|
1CF38156000
|
unkown
|
page read and write
|
|
|
|
18F000D0000
|
heap private
|
page read and write
|
|
|
|
2584607B000
|
unkown
|
page read and write
|
|
|
|
7FF58DAA7000
|
unkown image
|
page readonly
|
|
|
|
7FF5C11BD000
|
unkown image
|
page readonly
|
|
|
|
7FF5C17B2000
|
unkown image
|
page readonly
|
|
|
|
257F3510000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2F3D000
|
unkown image
|
page readonly
|
|
|
|
7FF587707000
|
unkown image
|
page readonly
|
|
|
|
575CAFF000
|
stack
|
page read and write
|
|
|
|
7FF5CE297000
|
unkown image
|
page readonly
|
|
|
|
1C87D262000
|
unkown
|
page read and write
|
|
|
|
1C87D99C000
|
unkown
|
page read and write
|
|
|
|
1C87D100000
|
unkown image
|
page readonly
|
|
|
|
7FF58799B000
|
unkown image
|
page readonly
|
|
|
|
1C87D973000
|
unkown
|
page read and write
|
|
|
|
7FF5B7CA2000
|
unkown image
|
page readonly
|
|
|
|
1C87DD90000
|
unkown image
|
page read and write
|
|
|
|
231210D0000
|
unkown image
|
page readonly
|
|
|
|
25846113000
|
unkown
|
page read and write
|
|
|
|
1CF38163000
|
unkown
|
page read and write
|
|
|
|
7FF56FDD7000
|
unkown image
|
page readonly
|
|
|
|
1C87D9BD000
|
unkown
|
page read and write
|
|
|
|
257F3570000
|
unkown image
|
page readonly
|
|
|
|
1C87D974000
|
unkown
|
page read and write
|
|
|
|
7FF56FE4A000
|
unkown image
|
page readonly
|
|
|
|
1C87D97F000
|
unkown
|
page read and write
|
|
|
|
7FF501F01000
|
unkown image
|
page readonly
|
|
|
|
7FF5C185A000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE09B000
|
unkown image
|
page readonly
|
|
|
|
24620410000
|
unkown image
|
page readonly
|
|
|
|
1C87D900000
|
unkown
|
page read and write
|
|
|
|
1CF3835B000
|
heap private
|
page read and write
|
|
|
|
1C87D9A2000
|
unkown
|
page read and write
|
|
|
|
7FF5B7FB4000
|
unkown image
|
page readonly
|
|
|
|
7DF57DAC2000
|
unkown image
|
page readonly
|
|
|
|
7FF57FC90000
|
unkown image
|
page readonly
|
|
|
|
18579800000
|
unkown
|
page read and write
|
|
|
|
7FF5879CA000
|
unkown image
|
page readonly
|
|
|
|
1C59D4C0000
|
heap private
|
page read and write
|
|
|
|
7FF4F4112000
|
unkown image
|
page readonly
|
|
|
|
7DF5C5C32000
|
unkown image
|
page readonly
|
|
|
|
620116B000
|
unkown
|
page read and write
|
|
|
|
1430000
|
unkown image
|
page readonly
|
|
|
|
7FF57FD49000
|
unkown image
|
page readonly
|
|
|
|
2332FB30000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD2A1000
|
unkown image
|
page readonly
|
|
|
|
7FF56BC81000
|
unkown image
|
page readonly
|
|
|
|
7DF501F70000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB462000
|
unkown image
|
page readonly
|
|
|
|
7FF501CD1000
|
unkown image
|
page readonly
|
|
|
|
7FF5C17AB000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD3D1000
|
unkown image
|
page readonly
|
|
|
|
1C011290000
|
unkown image
|
page readonly
|
|
|
|
7FF58DAC3000
|
unkown image
|
page readonly
|
|
|
|
7DF5C0C30000
|
unkown image
|
page readonly
|
|
|
|
7FF587A3A000
|
unkown image
|
page readonly
|
|
|
|
1C26B5F0000
|
unkown image
|
page readonly
|
|
|
|
25845E10000
|
unkown image
|
page readonly
|
|
|
|
1F5C17C000
|
stack
|
page read and write
|
|
|
|
7FF4F4255000
|
unkown image
|
page readonly
|
|
|
|
209A3560000
|
unkown
|
page read and write
|
|
|
|
18F0023E000
|
unkown
|
page read and write
|
|
|
|
1C59E0A0000
|
unkown
|
page read and write
|
|
|
|
2584603E000
|
unkown
|
page read and write
|
|
|
|
7DF5956C2000
|
unkown image
|
page readonly
|
|
|
|
1C26B913000
|
unkown
|
page read and write
|
|
|
|
7FF57FC76000
|
unkown image
|
page readonly
|
|
|
|
1C87D99C000
|
unkown
|
page read and write
|
|
|
|
7FF5B2D8D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7E4B000
|
unkown image
|
page readonly
|
|
|
|
7FF57AAEA000
|
unkown image
|
page readonly
|
|
|
|
7FF57FD5A000
|
unkown image
|
page readonly
|
|
|
|
1C87DE02000
|
unkown
|
page read and write
|
|
|
|
7FF54E5D1000
|
unkown image
|
page readonly
|
|
|
|
231217A0000
|
unkown image
|
page readonly
|
|
|
|
1C011446000
|
unkown
|
page read and write
|
|
|
|
1857A002000
|
unkown
|
page read and write
|
|
|
|
1C87D998000
|
unkown
|
page read and write
|
|
|
|
7DF5D0250000
|
unkown image
|
page readonly
|
|
|
|
24620108000
|
unkown
|
page read and write
|
|
|
|
1C87DE03000
|
unkown
|
page read and write
|
|
|
|
1C59D539000
|
heap default
|
page read and write
|
|
|
|
7DF5C5C40000
|
unkown image
|
page readonly
|
|
|
|
7DF5C0C32000
|
unkown image
|
page readonly
|
|
|
|
18579829000
|
unkown
|
page read and write
|
|
|
|
7FF5CD3A2000
|
unkown image
|
page readonly
|
|
|
|
23121300000
|
unkown
|
page read and write
|
|
|
|
7F59CFC000
|
stack
|
page read and write
|
|
|
|
7FF5B2F37000
|
unkown image
|
page readonly
|
|
|
|
1C87D2C6000
|
unkown
|
page read and write
|
|
|
|
7FF56FDB5000
|
unkown image
|
page readonly
|
|
|
|
7DF58D9D2000
|
unkown image
|
page readonly
|
|
|
|
23121600000
|
unkown image
|
page readonly
|
|
|
|
7FF4F424B000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2D90000
|
unkown image
|
page readonly
|
|
|
|
1CF38290000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7E51000
|
unkown image
|
page readonly
|
|
|
|
24620053000
|
unkown
|
page read and write
|
|
|
|
1C87DE02000
|
unkown
|
page read and write
|
|
|
|
18579660000
|
heap private
|
page read and write
|
|
|
|
28D5F264000
|
unkown
|
page read and write
|
|
|
|
7FF58DB9A000
|
unkown image
|
page readonly
|
|
|
|
7DF55C252000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7CB4000
|
unkown image
|
page readonly
|
|
|
|
52B1379000
|
stack
|
page read and write
|
|
|
|
7FF5BC877000
|
unkown image
|
page readonly
|
|
|
|
257F3654000
|
unkown
|
page read and write
|
|
|
|
7FF5CD34D000
|
unkown image
|
page readonly
|
|
|
|
7FF56F51B000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7EA1000
|
unkown image
|
page readonly
|
|
|
|
23333B50000
|
unkown
|
page read and write
|
|
|
|
7FF4F427D000
|
unkown image
|
page readonly
|
|
|
|
2462002C000
|
unkown
|
page read and write
|
|
|
|
28D5F24B000
|
heap default
|
page read and write
|
|
|
|
7FF54E4EF000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1672000
|
unkown image
|
page readonly
|
|
|
|
1C011445000
|
unkown
|
page read and write
|
|
|
|
7FF5CE5B5000
|
unkown image
|
page readonly
|
|
|
|
2332FA40000
|
unkown image
|
page read and write
|
|
|
|
1C87D9B3000
|
unkown
|
page read and write
|
|
|
|
1C87D987000
|
unkown
|
page read and write
|
|
|
|
7FF5BC853000
|
unkown image
|
page readonly
|
|
|
|
7FF54E55D000
|
unkown image
|
page readonly
|
|
|
|
209A1B2F000
|
unkown
|
page read and write
|
|
|
|
7DF57DAC0000
|
unkown image
|
page readonly
|
|
|
|
2332FB00000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1CC1000
|
unkown image
|
page readonly
|
|
|
|
7D7B67E000
|
stack
|
page read and write
|
|
|
|
CE0000
|
unkown image
|
page read and write
|
|
|
|
7FF5B7B1D000
|
unkown image
|
page readonly
|
|
|
|
7FF57A99F000
|
unkown image
|
page readonly
|
|
|
|
7FF57FC7F000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC5C5000
|
unkown image
|
page readonly
|
|
|
|
52B0D7B000
|
unkown
|
page read and write
|
|
|
|
1CF37FE0000
|
unkown image
|
page readonly
|
|
|
|
7DF588770000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE3B5000
|
unkown image
|
page readonly
|
|
|
|
209A1DBB000
|
heap private
|
page read and write
|
|
|
|
7FF5B7DE7000
|
unkown image
|
page readonly
|
|
|
|
25846002000
|
unkown
|
page read and write
|
|
|
|
7FF5CD3B4000
|
unkown image
|
page readonly
|
|
|
|
257F3E02000
|
unkown
|
page read and write
|
|
|
|
2332FA50000
|
unkown image
|
page readonly
|
|
|
|
209A1A40000
|
unkown
|
page read and write
|
|
|
|
1C87D998000
|
unkown
|
page read and write
|
|
|
|
1CF38010000
|
unkown image
|
page readonly
|
|
|
|
137467E000
|
stack
|
page read and write
|
|
|
|
1C26B84E000
|
unkown
|
page read and write
|
|
|
|
7FF57A9DE000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7EC7000
|
unkown image
|
page readonly
|
|
|
|
1C87D98E000
|
unkown
|
page read and write
|
|
|
|
7FF58DB27000
|
unkown image
|
page readonly
|
|
|
|
7FF58DAB9000
|
unkown image
|
page readonly
|
|
|
|
1C87D992000
|
unkown
|
page read and write
|
|
|
|
1C87D97E000
|
unkown
|
page read and write
|
|
|
|
7FF5CD2FE000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB64A000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE6AA000
|
unkown image
|
page readonly
|
|
|
|
28D62430000
|
unkown
|
page read and write
|
|
|
|
7FF56FDBE000
|
unkown image
|
page readonly
|
|
|
|
1C87D9C0000
|
unkown
|
page read and write
|
|
|
|
2332FBA3000
|
unkown
|
page read and write
|
|
|
|
725467F000
|
stack
|
page read and write
|
|
|
|
1C26B5F0000
|
unkown image
|
page readonly
|
|
|
|
1C59D4E0000
|
heap default
|
page read and write
|
|
|
|
7DF588760000
|
unkown image
|
page readonly
|
|
|
|
1C011462000
|
unkown
|
page read and write
|
|
|
|
7FF54E535000
|
unkown image
|
page readonly
|
|
|
|
1E54D802000
|
unkown
|
page read and write
|
|
|
|
1C87D26C000
|
unkown
|
page read and write
|
|
|
|
7FF5CE43B000
|
unkown image
|
page readonly
|
|
|
|
7FF56FDDD000
|
unkown image
|
page readonly
|
|
|
|
28D5F1F0000
|
unkown image
|
page readonly
|
|
|
|
1CF38270000
|
unkown
|
page read and write
|
|
|
|
7DF5CA5C0000
|
unkown image
|
page readonly
|
|
|
|
7DF57DAE0000
|
unkown image
|
page readonly
|
|
|
|
1C01143A000
|
unkown
|
page read and write
|
|
|
|
9D45BF7000
|
stack
|
page read and write
|
|
|
|
1C59D440000
|
unkown image
|
page readonly
|
|
|
|
1CF38130000
|
heap default
|
page read and write
|
|
|
|
7FF5CE452000
|
unkown image
|
page readonly
|
|
|
|
575CB7D000
|
stack
|
page read and write
|
|
|
|
B38FD7B000
|
stack
|
page read and write
|
|
|
|
1CF384A0000
|
unkown image
|
page readonly
|
|
|
|
1F5C3FD000
|
stack
|
page read and write
|
|
|
|
7FF56FD2B000
|
unkown image
|
page readonly
|
|
|
|
7D7B8FF000
|
stack
|
page read and write
|
|
|
|
1C87D98F000
|
unkown
|
page read and write
|
|
|
|
7FF5B777A000
|
unkown image
|
page readonly
|
|
|
|
1C87D268000
|
unkown
|
page read and write
|
|
|
|
7DF50FB90000
|
unkown image
|
page readonly
|
|
|
|
1C59D4B0000
|
unkown image
|
page readonly
|
|
|
|
28D5F286000
|
unkown
|
page read and write
|
|
|
|
1C87D958000
|
unkown
|
page read and write
|
|
|
|
7FFC685D0000
|
unkown image
|
page readonly
|
|
|
|
7DF588762000
|
unkown image
|
page readonly
|
|
|
|
7DF5092B2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F42F1000
|
unkown image
|
page readonly
|
|
|
|
7FF57AADA000
|
unkown image
|
page readonly
|
|
|
|
1C87D99B000
|
unkown
|
page read and write
|
|
|
|
7DF5C5C32000
|
unkown image
|
page readonly
|
|
|
|
7DF5DC390000
|
unkown image
|
page readonly
|
|
|
|
1C87DE02000
|
unkown
|
page read and write
|
|
|
|
7FF5CE4E5000
|
unkown image
|
page readonly
|
|
|
|
1D025D21000
|
unkown
|
page read and write
|
|
|
|
7FF501E8D000
|
unkown image
|
page readonly
|
|
|
|
1C01143D000
|
unkown
|
page read and write
|
|
|
|
7FF5B7EDF000
|
unkown image
|
page readonly
|
|
|
|
1C87CFD0000
|
unkown image
|
page readonly
|
|
|
|
24620590000
|
unkown image
|
page readonly
|
|
|
|
1C87D255000
|
unkown
|
page read and write
|
|
|
|
1D025D36000
|
unkown
|
page read and write
|
|
|
|
1C87D992000
|
unkown
|
page read and write
|
|
|
|
7FF5D7833000
|
unkown image
|
page readonly
|
|
|
|
1E54D6D0000
|
heap private
|
page read and write
|
|
|
|
1374777000
|
stack
|
page read and write
|
|
|
|
7DF5C5C42000
|
unkown image
|
page readonly
|
|
|
|
7FF57FD71000
|
unkown image
|
page readonly
|
|
|
|
7FF54E5B2000
|
unkown image
|
page readonly
|
|
|
|
7DF5092C0000
|
unkown image
|
page readonly
|
|
|
|
CF27E8B000
|
unkown
|
page read and write
|
|
|
|
7DF588762000
|
unkown image
|
page readonly
|
|
|
|
7DF501F62000
|
unkown image
|
page readonly
|
|
|
|
1D025C90000
|
unkown image
|
page readonly
|
|
|
|
7FF56FE44000
|
unkown image
|
page readonly
|
|
|
|
1C87D000000
|
unkown image
|
page readonly
|
|
|
|
1D026050000
|
heap private
|
page read and write
|
|
|
|
1C87D98E000
|
unkown
|
page read and write
|
|
|
|
7FF5D77F3000
|
unkown image
|
page readonly
|
|
|
|
2332FB70000
|
heap default
|
page read and write
|
|
|
|
1C26B83C000
|
unkown
|
page read and write
|
|
|
|
2332FB40000
|
unkown
|
page read and write
|
|
|
|
2461FEC0000
|
heap private
|
page read and write
|
|
|
|
2332FBAF000
|
unkown
|
page read and write
|
|
|
|
1C87D9A2000
|
unkown
|
page read and write
|
|
|
|
7FF5CE48F000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE481000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2D46000
|
unkown image
|
page readonly
|
|
|
|
1C87D97B000
|
unkown
|
page read and write
|
|
|
|
24620113000
|
unkown
|
page read and write
|
|
|
|
1CF3813A000
|
heap default
|
page read and write
|
|
|
|
18579802000
|
unkown
|
page read and write
|
|
|
|
257F3702000
|
unkown
|
page read and write
|
|
|
|
7FF551460000
|
unkown image
|
page readonly
|
|
|
|
2332FB96000
|
unkown
|
page read and write
|
|
|
|
28D5F1B0000
|
unkown
|
page read and write
|
|
|
|
7FF5CE500000
|
unkown image
|
page readonly
|
|
|
|
18F7FFA0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F4301000
|
unkown image
|
page readonly
|
|
|
|
209A1B17000
|
unkown
|
page read and write
|
|
|
|
2332FBB5000
|
unkown
|
page read and write
|
|
|
|
7FF4FB2D5000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2EB7000
|
unkown image
|
page readonly
|
|
|
|
1C87D98E000
|
unkown
|
page read and write
|
|
|
|
7FF5CE721000
|
unkown image
|
page readonly
|
|
|
|
7FF58795F000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC8BA000
|
unkown image
|
page readonly
|
|
|
|
7FF5C107F000
|
unkown image
|
page readonly
|
|
|
|
7FF56FE51000
|
unkown image
|
page readonly
|
|
|
|
1C01147F000
|
unkown
|
page read and write
|
|
|
|
1CF38156000
|
unkown
|
page read and write
|
|
|
|
7FF5CE304000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC88B000
|
unkown image
|
page readonly
|
|
|
|
7FFC6C7A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CDF32000
|
unkown image
|
page readonly
|
|
|
|
209A1920000
|
unkown image
|
page readonly
|
|
|
|
1C87D99C000
|
unkown
|
page read and write
|
|
|
|
1C87DE02000
|
unkown
|
page read and write
|
|
|
|
7FFC685D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5DC392000
|
unkown image
|
page readonly
|
|
|
|
7FF5D78B2000
|
unkown image
|
page readonly
|
|
|
|
F4A42FF000
|
stack
|
page read and write
|
|
|
|
1C59E090000
|
unkown
|
page read and write
|
|
|
|
1D0263E0000
|
unkown image
|
page readonly
|
|
|
|
7DF5956B0000
|
unkown image
|
page readonly
|
|
|
|
7DF57DAC0000
|
unkown image
|
page readonly
|
|
|
|
2312124A000
|
unkown
|
page read and write
|
|
|
|
24620000000
|
unkown
|
page read and write
|
|
|
|
1C87D982000
|
unkown
|
page read and write
|
|
|
|
7FF5C2543000
|
unkown image
|
page readonly
|
|
|
|
1C26B878000
|
unkown
|
page read and write
|
|
|
|
725477E000
|
stack
|
page read and write
|
|
|
|
1C59D450000
|
unkown image
|
page readonly
|
|
|
|
24620102000
|
unkown
|
page read and write
|
|
|
|
7FF5CE709000
|
unkown image
|
page readonly
|
|
|
|
18579650000
|
unkown image
|
page read and write
|
|
|
|
1C01143B000
|
unkown
|
page read and write
|
|
|
|
23333350000
|
unkown
|
page read and write
|
|
|
|
7DF55C240000
|
unkown image
|
page readonly
|
|
|
|
23333250000
|
unkown
|
page read and write
|
|
|
|
7DF5DC392000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE6A7000
|
unkown image
|
page readonly
|
|
|
|
1C87D7A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2ED3000
|
unkown image
|
page readonly
|
|
|
|
1C59D400000
|
unkown image
|
page read and write
|
|
|
|
7FF5C25F1000
|
unkown image
|
page readonly
|
|
|
|
209A1DB0000
|
heap private
|
page read and write
|
|
|
|
18F000F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7FD1000
|
unkown image
|
page readonly
|
|
|
|
209A1B1D000
|
unkown
|
page read and write
|
|
|
|
1C87D26A000
|
unkown
|
page read and write
|
|
|
|
7FF5C0F61000
|
unkown image
|
page readonly
|
|
|
|
1C59D8C0000
|
unkown image
|
page readonly
|
|
|
|
1C87D23C000
|
unkown
|
page read and write
|
|
|
|
B39007B000
|
stack
|
page read and write
|
|
|
|
1C87D959000
|
unkown
|
page read and write
|
|
|
|
1C87D9A0000
|
unkown
|
page read and write
|
|
|
|
575C79A000
|
unkown
|
page read and write
|
|
|
|
7FF5BC941000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7EDD000
|
unkown image
|
page readonly
|
|
|
|
1C87D97A000
|
unkown
|
page read and write
|
|
|
|
7FF5CE58B000
|
unkown image
|
page readonly
|
|
|
|
1C01147B000
|
unkown
|
page read and write
|
|
|
|
23121213000
|
unkown
|
page read and write
|
|
|
|
7FF54E557000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE643000
|
unkown image
|
page readonly
|
|
|
|
7F5A2FC000
|
stack
|
page read and write
|
|
|
|
B44D4FB000
|
stack
|
page read and write
|
|
|
|
7FF57F43B000
|
unkown image
|
page readonly
|
|
|
|
F4A40FF000
|
stack
|
page read and write
|
|
|
|
1C87D98A000
|
unkown
|
page read and write
|
|
|
|
7FF58DABF000
|
unkown image
|
page readonly
|
|
|
|
1E54D83F000
|
unkown
|
page read and write
|
|
|
|
1C26B900000
|
unkown
|
page read and write
|
|
|
|
7FF501E1A000
|
unkown image
|
page readonly
|
|
|
|
1C87DF63000
|
unkown
|
page read and write
|
|
|
|
25846802000
|
unkown
|
page read and write
|
|
|
|
7DF59B810000
|
unkown image
|
page readonly
|
|
|
|
7FF54E53E000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB4FB000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE63F000
|
unkown image
|
page readonly
|
|
|
|
1C87D9C0000
|
unkown
|
page read and write
|
|
|
|
7FF5CD2F3000
|
unkown image
|
page readonly
|
|
|
|
7FF58DA0B000
|
unkown image
|
page readonly
|
|
|
|
1C59E350000
|
unkown
|
page read and write
|
|
|
|
7FF56FD43000
|
unkown image
|
page readonly
|
|
|
|
9D45EFE000
|
stack
|
page read and write
|
|
|
|
7FF5C0F66000
|
unkown image
|
page readonly
|
|
|
|
1C59D4E8000
|
heap default
|
page read and write
|
|
|
|
1CF38230000
|
unkown
|
page read and write
|
|
|
|
7FF4F4181000
|
unkown image
|
page readonly
|
|
|
|
7DF5D0270000
|
unkown image
|
page readonly
|
|
|
|
1C26B848000
|
unkown
|
page read and write
|
|
|
|
B08E77E000
|
stack
|
page read and write
|
|
|
|
7FF5CE67B000
|
unkown image
|
page readonly
|
|
|
|
9D45DFD000
|
stack
|
page read and write
|
|
|
|
7FF54E55A000
|
unkown image
|
page readonly
|
|
|
|
7FF5C161C000
|
unkown image
|
page readonly
|
|
|
|
7FF5C13B3000
|
unkown image
|
page readonly
|
|
|
|
23122E50000
|
unkown
|
page read and write
|
|
|
|
1C87D600000
|
unkown image
|
page readonly
|
|
|
|
F5939FE000
|
stack
|
page read and write
|
|
|
|
7DF5DB040000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7B41000
|
unkown image
|
page readonly
|
|
|
|
F4A43FD000
|
stack
|
page read and write
|
|
|
|
7FF57FB82000
|
unkown image
|
page readonly
|
|
|
|
185797F0000
|
unkown
|
page read and write
|
|
|
|
23121202000
|
unkown
|
page read and write
|
|
|
|
1C87D96B000
|
unkown
|
page read and write
|
|
|
|
23121329000
|
unkown
|
page read and write
|
|
|
|
7DF58D9E2000
|
unkown image
|
page readonly
|
|
|
|
1C26B640000
|
heap default
|
page read and write
|
|
|
|
2332FBAF000
|
unkown
|
page read and write
|
|
|
|
1E54D6E0000
|
unkown image
|
page readonly
|
|
|
|
1E54D6C0000
|
unkown image
|
page read and write
|
|
|
|
1C87D978000
|
unkown
|
page read and write
|
|
|
|
1C59DC40000
|
unkown image
|
page readonly
|
|
|
|
25846051000
|
unkown
|
page read and write
|
|
|
|
1CF3815E000
|
unkown
|
page read and write
|
|
|
|
2461FED0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C25DA000
|
unkown image
|
page readonly
|
|
|
|
7DF5D0270000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD2E3000
|
unkown image
|
page readonly
|
|
|
|
1C87D020000
|
heap default
|
page read and write
|
|
|
|
7FF54E4EA000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB467000
|
unkown image
|
page readonly
|
|
|
|
7FF58DAE7000
|
unkown image
|
page readonly
|
|
|
|
19DABED8000
|
heap default
|
page read and write
|
|
|
|
7FF551462000
|
unkown image
|
page readonly
|
|
|
|
1C87D2EC000
|
unkown
|
page read and write
|
|
|
|
7FF501E23000
|
unkown image
|
page readonly
|
|
|
|
1C26B610000
|
unkown image
|
page readonly
|
|
|
|
7FF56FD83000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE4FD000
|
unkown image
|
page readonly
|
|
|
|
7FF4F427A000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE4E1000
|
unkown image
|
page readonly
|
|
|
|
1C59E3D0000
|
unkown
|
page read and write
|
|
|
|
7FF58D691000
|
unkown image
|
page readonly
|
|
|
|
7FF57AA42000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2E45000
|
unkown image
|
page readonly
|
|
|
|
F4A41FF000
|
stack
|
page read and write
|
|
|
|
1C26B853000
|
unkown
|
page read and write
|
|
|
|
7DF5C5C50000
|
unkown image
|
page readonly
|
|
|
|
1CF3B3A0000
|
unkown
|
page read and write
|
|
|
|
7F5A1FB000
|
stack
|
page read and write
|
|
|
|
18F00780000
|
unkown image
|
page readonly
|
|
|
|
1C59D52D000
|
unkown
|
page read and write
|
|
|
|
7FF54E5E1000
|
unkown image
|
page readonly
|
|
|
|
2312124A000
|
unkown
|
page read and write
|
|
|
|
7FF56FDDA000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE4E9000
|
unkown image
|
page readonly
|
|
|
|
257F3AD0000
|
unkown image
|
page readonly
|
|
|
|
18F7FFA0000
|
unkown image
|
page readonly
|
|
|
|
B08E6FC000
|
unkown
|
page read and write
|
|
|
|
7DF5D0260000
|
unkown image
|
page readonly
|
|
|
|
7FF54E481000
|
unkown image
|
page readonly
|
|
|
|
7FF57FC7D000
|
unkown image
|
page readonly
|
|
|
|
7DF501F72000
|
unkown image
|
page readonly
|
|
|
|
2461FF00000
|
unkown image
|
page readonly
|
|
|
|
24620064000
|
unkown
|
page read and write
|
|
|
|
1C87DE02000
|
unkown
|
page read and write
|
|
|
|
7FF56F892000
|
unkown image
|
page readonly
|
|
|
|
7FF501E1F000
|
unkown image
|
page readonly
|
|
|
|
7FF56F89D000
|
unkown image
|
page readonly
|
|
|
|
B08EE7E000
|
stack
|
page read and write
|
|
|
|
7FF5D7800000
|
unkown image
|
page readonly
|
|
|
|
7DF58D9D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE730000
|
unkown image
|
page readonly
|
|
|
|
2461FEF0000
|
unkown image
|
page readonly
|
|
|
|
7FF57AAEE000
|
unkown image
|
page readonly
|
|
|
|
7DF48B8A0000
|
unkown image
|
page readonly
|
|
|
|
7FF501E63000
|
unkown image
|
page readonly
|
|
|
|
B44DB7F000
|
stack
|
page read and write
|
|
|
|
209A1910000
|
unkown image
|
page readonly
|
|
|
|
7F59FFF000
|
stack
|
page read and write
|
|
|
|
24620802000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E1B000
|
unkown image
|
page readonly
|
|
|
|
1C87DE02000
|
unkown
|
page read and write
|
|
|
|
7DF5C5C40000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE585000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE476000
|
unkown image
|
page readonly
|
|
|
|
18F7FFD0000
|
unkown image
|
page readonly
|
|
|
|
18F00900000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F1E000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB573000
|
unkown image
|
page readonly
|
|
|
|
7DF5956B0000
|
unkown image
|
page readonly
|
|
|
|
7FF58DA31000
|
unkown image
|
page readonly
|
|
|
|
1D025D10000
|
heap default
|
page read and write
|
|
|
|
10974FB000
|
unkown
|
page read and write
|
|
|
|
7DFD17ED1000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE217000
|
unkown image
|
page readonly
|
|
|
|
10976FE000
|
stack
|
page read and write
|
|
|
|
257F3649000
|
unkown
|
page read and write
|
|
|
|
7FF57FD42000
|
unkown image
|
page readonly
|
|
|
|
1C01146C000
|
unkown
|
page read and write
|
|
|
|
1CF386A0000
|
unkown image
|
page readonly
|
|
|
|
9D458FD000
|
stack
|
page read and write
|
|
|
|
24620013000
|
unkown
|
page read and write
|
|
|
|
7FF5C142C000
|
unkown image
|
page readonly
|
|
|
|
7DF5CA5A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2513000
|
unkown image
|
page readonly
|
|
|
|
7FF57A9FD000
|
unkown image
|
page readonly
|
|
|
|
7FF5C176F000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD34A000
|
unkown image
|
page readonly
|
|
|
|
7FF57FC86000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7D2F000
|
unkown image
|
page readonly
|
|
|
|
209A1DB5000
|
heap private
|
page read and write
|
|
|
|
B44DD7E000
|
stack
|
page read and write
|
|
|
|
B44DF7F000
|
stack
|
page read and write
|
|
|
|
7DF5C0C22000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF4C2000
|
unkown image
|
page readonly
|
|
|
|
1E54D700000
|
unkown image
|
page readonly
|
|
|
|
7FF587973000
|
unkown image
|
page readonly
|
|
|
|
23331670000
|
unkown image
|
page read and write
|
|
|
|
7FF58D99B000
|
unkown image
|
page readonly
|
|
|
|
9D45CFF000
|
stack
|
page read and write
|
|
|
|
7FF5D77EF000
|
unkown image
|
page readonly
|
|
|
|
7FF57FD54000
|
unkown image
|
page readonly
|
|
|
|
18579902000
|
unkown
|
page read and write
|
|
|
|
1C87D99E000
|
unkown
|
page read and write
|
|
|
|
7FF5C0F4F000
|
unkown image
|
page readonly
|
|
|
|
209A1DC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5877D6000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7FA2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C251E000
|
unkown image
|
page readonly
|
|
|
|
7DF5092B0000
|
unkown image
|
page readonly
|
|
|
|
7DF5C0C20000
|
unkown image
|
page readonly
|
|
|
|
7DF5E5542000
|
unkown image
|
page readonly
|
|
|
|
7FF57AA1E000
|
unkown image
|
page readonly
|
|
|
|
2332FB8E000
|
unkown
|
page read and write
|
|
|
|
257F3713000
|
unkown
|
page read and write
|
|
|
|
1C87D1F0000
|
unkown
|
page read and write
|
|
|
|
7DF588752000
|
unkown image
|
page readonly
|
|
|
|
28D5F25B000
|
unkown
|
page read and write
|
|
|
|
7FF57A9FF000
|
unkown image
|
page readonly
|
|
|
|
7FF56BC81000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB55A000
|
unkown image
|
page readonly
|
|
|
|
1C26B908000
|
unkown
|
page read and write
|
|
|
|
1CF38152000
|
unkown
|
page read and write
|
|
|
|
1C26B84B000
|
unkown
|
page read and write
|
|
|
|
18F00287000
|
unkown
|
page read and write
|
|
|
|
7FF5CE3F7000
|
unkown image
|
page readonly
|
|
|
|
209A1940000
|
unkown image
|
page readonly
|
|
|
|
2462004D000
|
unkown
|
page read and write
|
|
|
|
7FF5D78DA000
|
unkown image
|
page readonly
|
|
|
|
7DF588750000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD1E7000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC84F000
|
unkown image
|
page readonly
|
|
|
|
1CF3B4B0000
|
unkown
|
page read and write
|
|
|
|
7FF5CD307000
|
unkown image
|
page readonly
|
|
|
|
1C87DE6A000
|
unkown
|
page read and write
|
|
|
|
7FF551472000
|
unkown image
|
page readonly
|
|
|
|
1CF37FD0000
|
unkown image
|
page read and write
|
|
|
|
7DF59B830000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD3BA000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB55F000
|
unkown image
|
page readonly
|
|
|
|
18F002C5000
|
unkown
|
page read and write
|
|
|
|
7FF5B7EB3000
|
unkown image
|
page readonly
|
|
|
|
7DF588770000
|
unkown image
|
page readonly
|
|
|
|
1E54D856000
|
unkown
|
page read and write
|
|
|
|
209A1AF0000
|
heap default
|
page read and write
|
|
|
|
7FF587A41000
|
unkown image
|
page readonly
|
|
|
|
7FF5C256A000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7FC1000
|
unkown image
|
page readonly
|
|
|
|
25846066000
|
unkown
|
page read and write
|
|
|
|
1C59D420000
|
unkown image
|
page readonly
|
|
|
|
7FF56FAE5000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2445000
|
unkown image
|
page readonly
|
|
|
|
7DF5956C2000
|
unkown image
|
page readonly
|
|
|
|
1C87D26D000
|
unkown
|
page read and write
|
|
|
|
7FF58D835000
|
unkown image
|
page readonly
|
|
|
|
7FF57AA6A000
|
unkown image
|
page readonly
|
|
|
|
19DABDD0000
|
unkown image
|
page read and write
|
|
|
|
7DF5CA5B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD271000
|
unkown image
|
page readonly
|
|
|
|
1C011280000
|
heap private
|
page read and write
|
|
|
|
1C59D55B000
|
unkown
|
page read and write
|
|
|
|
B44DA7D000
|
stack
|
page read and write
|
|
|
|
7FF5C23C0000
|
unkown image
|
page readonly
|
|
|
|
7FF56FD97000
|
unkown image
|
page readonly
|
|
|
|
1C011400000
|
unkown
|
page read and write
|
|
|
|
7DF501F80000
|
unkown image
|
page readonly
|
|
|
|
2461FEB0000
|
unkown image
|
page read and write
|
|
|
|
7DF5CA5A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD3D1000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1773000
|
unkown image
|
page readonly
|
|
|
|
7FF4F4216000
|
unkown image
|
page readonly
|
|
|
|
7DF5C5C30000
|
unkown image
|
page readonly
|
|
|
|
7FF56FD76000
|
unkown image
|
page readonly
|
|
|
|
7FF56FD73000
|
unkown image
|
page readonly
|
|
|
|
2332FB96000
|
unkown
|
page read and write
|
|
|
|
DB0000
|
unkown image
|
page readonly
|
|
|
|
7DF4C3B00000
|
unkown image
|
page readonly
|
|
|
|
23123240000
|
unkown image
|
page write copy
|
|
|
|
1C59D52F000
|
unkown
|
page read and write
|
|
|
|
209A1A90000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE667000
|
unkown image
|
page readonly
|
|
|
|
1C01145A000
|
unkown
|
page read and write
|
|
|
|
7D7B37C000
|
stack
|
page read and write
|
|
|
|
18F001D0000
|
unkown
|
page read and write
|
|
|
|
7FF5CE683000
|
unkown image
|
page readonly
|
|
|
|
7FF501F0A000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7F4D000
|
unkown image
|
page readonly
|
|
|
|
1C26B720000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1002000
|
unkown image
|
page readonly
|
|
|
|
7FF57FB87000
|
unkown image
|
page readonly
|
|
|
|
7DF50FB80000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2567000
|
unkown image
|
page readonly
|
|
|
|
1E54D876000
|
unkown
|
page read and write
|
|
|
|
7FF5C24F9000
|
unkown image
|
page readonly
|
|
|
|
117E000
|
stack
|
page read and write
|
|
|
|
19DABDF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7D6F000
|
unkown image
|
page readonly
|
|
|
|
1F5C6FE000
|
stack
|
page read and write
|
|
|
|
7FF5BC931000
|
unkown image
|
page readonly
|
|
|
|
7FF5C24FF000
|
unkown image
|
page readonly
|
|
|
|
257F3613000
|
unkown
|
page read and write
|
|
|
|
137487E000
|
stack
|
page read and write
|
|
|
|
7FF57AA6D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2DAB000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2FA4000
|
unkown image
|
page readonly
|
|
|
|
209A1AD0000
|
unkown
|
page read and write
|
|
|
|
7FF5D7803000
|
unkown image
|
page readonly
|
|
|
|
1C011441000
|
unkown
|
page read and write
|
|
|
|
7FF5879A8000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD2F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD2DD000
|
unkown image
|
page readonly
|
|
|
|
1C87D987000
|
unkown
|
page read and write
|
|
|
|
7F5A5FF000
|
stack
|
page read and write
|
|
|
|
257F364C000
|
unkown
|
page read and write
|
|
|
|
1C0113E0000
|
unkown
|
page read and write
|
|
|
|
1C011800000
|
unkown image
|
page readonly
|
|
|
|
25845E00000
|
heap private
|
page read and write
|
|
|
|
7FF5B7B19000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC8B7000
|
unkown image
|
page readonly
|
|
|
|
7FF5C16DC000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7F1B000
|
unkown image
|
page readonly
|
|
|
|
28D5F480000
|
unkown image
|
page readonly
|
|
|
|
1C87D99E000
|
unkown
|
page read and write
|
|
|
|
1C26BE02000
|
unkown
|
page read and write
|
|
|
|
1C011980000
|
unkown image
|
page readonly
|
|
|
|
1C87D7F0000
|
unkown
|
page read and write
|
|
|
|
7DF55C242000
|
unkown image
|
page readonly
|
|
|
|
7DF58D9E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE731000
|
unkown image
|
page readonly
|
|
|
|
7FF5C174F000
|
unkown image
|
page readonly
|
|
|
|
1C87D987000
|
unkown
|
page read and write
|
|
|
|
7DF5E5540000
|
unkown image
|
page readonly
|
|
|
|
7DF5092D0000
|
unkown image
|
page readonly
|
|
|
|
1C87D7F0000
|
unkown
|
page read and write
|
|
|
|
1C26B5E0000
|
heap private
|
page read and write
|
|
|
|
7FF5B2EE3000
|
unkown image
|
page readonly
|
|
|
|
1C59D4C5000
|
heap private
|
page read and write
|
|
|
|
7FF5BC912000
|
unkown image
|
page readonly
|
|
|
|
641C53E000
|
stack
|
page read and write
|
|
|
|
7FF57AA17000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2D71000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1861000
|
unkown image
|
page readonly
|
|
|
|
25846000000
|
unkown
|
page read and write
|
|
|
|
7FF5BC84D000
|
unkown image
|
page readonly
|
|
|
|
1C26B5D0000
|
unkown image
|
page read and write
|
|
|
|
7FF5CD31B000
|
unkown image
|
page readonly
|
|
|
|
7FF5879A3000
|
unkown image
|
page readonly
|
|
|
|
7DF57DAE0000
|
unkown image
|
page readonly
|
|
|
|
7FF57F39E000
|
unkown image
|
page readonly
|
|
|
|
7FF551460000
|
unkown image
|
page readonly
|
|
|
|
257F3670000
|
unkown
|
page read and write
|
|
|
|
B38FE7B000
|
stack
|
page read and write
|
|
|
|
7FF551480000
|
unkown image
|
page readonly
|
|
|
|
725427E000
|
stack
|
page read and write
|
|
|
|
1E54D730000
|
heap default
|
page read and write
|
|
|
|
1C59D52D000
|
unkown
|
page read and write
|
|
|
|
7FF5BC893000
|
unkown image
|
page readonly
|
|
|
|
209A1B2F000
|
unkown
|
page read and write
|
|
|
|
1E54DE50000
|
unkown image
|
page readonly
|
|
|
|
1E54DE60000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE613000
|
unkown image
|
page readonly
|
|
|
|
7FF57F5F9000
|
unkown image
|
page readonly
|
|
|
|
CF27F8E000
|
stack
|
page read and write
|
|
|
|
7FF5B7EF0000
|
unkown image
|
page readonly
|
|
|
|
233300D0000
|
unkown image
|
page readonly
|
|
|
|
7FF57AA4E000
|
unkown image
|
page readonly
|
|
|
|
1D025F00000
|
unkown image
|
page readonly
|
|
|
|
1C87D90E000
|
unkown
|
page read and write
|
|
|
|
209A1B13000
|
unkown
|
page read and write
|
|
|
|
28D5F25B000
|
unkown
|
page read and write
|
|
|
|
7FF56FD8E000
|
unkown image
|
page readonly
|
|
|
|
1C87D2FB000
|
unkown
|
page read and write
|
|
|
|
7FF5D78D1000
|
unkown image
|
page readonly
|
|
|
|
1C011458000
|
unkown
|
page read and write
|
|
|
|
7FF54E461000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF4D0000
|
unkown image
|
page readonly
|
|
|
|
11BB000
|
heap default
|
page read and write
|
|
|
|
7FF5016BA000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC924000
|
unkown image
|
page readonly
|
|
|
|
52B12F9000
|
stack
|
page read and write
|
|
|
|
2312123D000
|
unkown
|
page read and write
|
|
|
|
25845E60000
|
heap default
|
page read and write
|
|
|
|
209A1B36000
|
unkown
|
page read and write
|
|
|
|
28D5F25F000
|
unkown
|
page read and write
|
|
|
|
7DF45A110000
|
unkown image
|
page readonly
|
|
|
|
7FF57A9E7000
|
unkown image
|
page readonly
|
|
|
|
1C87D95C000
|
unkown
|
page read and write
|
|
|
|
7FF5B7FCE000
|
unkown image
|
page readonly
|
|
|
|
1C0112C0000
|
unkown image
|
page readonly
|
|
|
|
62014FD000
|
stack
|
page read and write
|
|
|
|
575CBF9000
|
stack
|
page read and write
|
|
|
|
7FF551470000
|
unkown image
|
page readonly
|
|
|
|
1C87D25D000
|
unkown
|
page read and write
|
|
|
|
7DF5C0C40000
|
unkown image
|
page readonly
|
|
|
|
7FF501E3E000
|
unkown image
|
page readonly
|
|
|
|
7FF4F41CB000
|
unkown image
|
page readonly
|
|
|
|
1C87D7F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D78E1000
|
unkown image
|
page readonly
|
|
|
|
7DF5DC3B0000
|
unkown image
|
page readonly
|
|
|
|
1C87D2BF000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F13000
|
unkown image
|
page readonly
|
|
|
|
F59397E000
|
stack
|
page read and write
|
|
|
|
7FF501EE2000
|
unkown image
|
page readonly
|
|
|
|
B08EAFB000
|
stack
|
page read and write
|
|
|
|
1C59DAC0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F420F000
|
unkown image
|
page readonly
|
|
|
|
18F00302000
|
unkown
|
page read and write
|
|
|
|
18F007A0000
|
unkown image
|
page write copy
|
|
|
|
7FF587A51000
|
unkown image
|
page readonly
|
|
|
|
7DF501F70000
|
unkown image
|
page readonly
|
|
|
|
7FF57AAE1000
|
unkown image
|
page readonly
|
|
|
|
7FF57AA10000
|
unkown image
|
page readonly
|
|
|
|
7FF4F42D2000
|
unkown image
|
page readonly
|
|
|
|
7DF5092C2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C256D000
|
unkown image
|
page readonly
|
|
|
|
1C87D26E000
|
unkown
|
page read and write
|
|
|
|
7DF55C260000
|
unkown image
|
page readonly
|
|
|
|
1D025EF0000
|
unkown image
|
page readonly
|
|
|
|
7FF57FBDC000
|
unkown image
|
page readonly
|
|
|
|
7FF57A657000
|
unkown image
|
page readonly
|
|
|
|
257F364F000
|
unkown
|
page read and write
|
|
|
|
7FF5B7BDD000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2F92000
|
unkown image
|
page readonly
|
|
|
|
137419E000
|
stack
|
page read and write
|
|
|
|
7DF5CA5B2000
|
unkown image
|
page readonly
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
7FF56FE5A000
|
unkown image
|
page readonly
|
|
|
|
7DF5E5540000
|
unkown image
|
page readonly
|
|
|
|
1C59E3D0000
|
unkown
|
page read and write
|
|
|
|
1C011442000
|
unkown
|
page read and write
|
|
|
|
1C87D91A000
|
unkown
|
page read and write
|
|
|
|
7FF5CD055000
|
unkown image
|
page readonly
|
|
|
|
1C011432000
|
unkown
|
page read and write
|
|
|
|
2332FB9E000
|
unkown
|
page read and write
|
|
|
|
10975FE000
|
stack
|
page read and write
|
|
|
|
7FF5B794C000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB63A000
|
unkown image
|
page readonly
|
|
|
|
209A1B0E000
|
unkown
|
page read and write
|
|
|
|
28D62370000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC863000
|
unkown image
|
page readonly
|
|
|
|
7FF4F4223000
|
unkown image
|
page readonly
|
|
|
|
7DF5956D0000
|
unkown image
|
page readonly
|
|
|
|
1C011457000
|
unkown
|
page read and write
|
|
|
|
7FF4F41A1000
|
unkown image
|
page readonly
|
|
|
|
1D025CF0000
|
unkown
|
page read and write
|
|
|
|
7DF5C0C20000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE307000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1861000
|
unkown image
|
page readonly
|
|
|
|
1C87D973000
|
unkown
|
page read and write
|
|
|
|
1C87D975000
|
unkown
|
page read and write
|
|
|
|
7FF5CD052000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB521000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7F07000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1783000
|
unkown image
|
page readonly
|
|
|
|
1C87D9A2000
|
unkown
|
page read and write
|
|
|
|
1C87D90D000
|
unkown
|
page read and write
|
|
|
|
7FF58DB03000
|
unkown image
|
page readonly
|
|
|
|
B44D0EB000
|
unkown
|
page read and write
|
|
|
|
1C87D94C000
|
unkown
|
page read and write
|
|
|
|
7FF5C1504000
|
unkown image
|
page readonly
|
|
|
|
1E54DAD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2BBF000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1527000
|
unkown image
|
page readonly
|
|
|
|
B08E7FE000
|
stack
|
page read and write
|
|
|
|
7DF59B822000
|
unkown image
|
page readonly
|
|
|
|
25845E30000
|
unkown image
|
page readonly
|
|
|
|
18F00400000
|
unkown image
|
page readonly
|
|
|
|
7D7BB7D000
|
stack
|
page read and write
|
|
|
|
1C87D2D5000
|
unkown
|
page read and write
|
|
|
|
7FF58D1B6000
|
unkown image
|
page readonly
|
|
|
|
18F00600000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2376000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB55D000
|
unkown image
|
page readonly
|
|
|
|
209A1B32000
|
unkown
|
page read and write
|
|
|
|
19DABE20000
|
unkown image
|
page readonly
|
|
|
|
209A2140000
|
unkown image
|
page readonly
|
|
|
|
7DF4CE120000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1059000
|
unkown image
|
page readonly
|
|
|
|
209A1AF8000
|
heap default
|
page read and write
|
|
|
|
1D025D40000
|
unkown
|
page read and write
|
|
|
|
1C87D973000
|
unkown
|
page read and write
|
|
|
|
23121266000
|
unkown
|
page read and write
|
|
|
|
28D5F200000
|
unkown
|
page read and write
|
|
|
|
257F367D000
|
unkown
|
page read and write
|
|
|
|
7FF54E503000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7FA9000
|
unkown image
|
page readonly
|
|
|
|
7FF56FE61000
|
unkown image
|
page readonly
|
|
|
|
24620680000
|
unkown
|
page read and write
|
|
|
|
7DF5092C2000
|
unkown image
|
page readonly
|
|
|
|
7FF5B77FD000
|
unkown image
|
page readonly
|
|
|
|
257F363C000
|
unkown
|
page read and write
|
|
|
|
7DF58D9E2000
|
unkown image
|
page readonly
|
|
|
|
7D7B87A000
|
stack
|
page read and write
|
|
|
|
23121120000
|
heap default
|
page read and write
|
|
|
|
7FF5CE72A000
|
unkown image
|
page readonly
|
|
|
|
7FF5C24E7000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7EFE000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE639000
|
unkown image
|
page readonly
|
|
|
|
257F3500000
|
heap private
|
page read and write
|
|
|
|
7DF5DB032000
|
unkown image
|
page readonly
|
|
|
|
18F00912000
|
unkown
|
page read and write
|
|
|
|
1C011467000
|
unkown
|
page read and write
|
|
|
|
52B127E000
|
stack
|
page read and write
|
|
|
|
28D5F261000
|
unkown
|
page read and write
|
|
|
|
28D5F1D0000
|
heap private
|
page read and write
|
|
|
|
B44DE7E000
|
stack
|
page read and write
|
|
|
|
7FF5C1532000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1832000
|
unkown image
|
page readonly
|
|
|
|
1C01144E000
|
unkown
|
page read and write
|
|
|
|
7FF587710000
|
unkown image
|
page readonly
|
|
|
|
7FF5D785D000
|
unkown image
|
page readonly
|
|
|
|
1C87DD40000
|
unkown image
|
page write copy
|
|
|
|
185797F0000
|
unkown
|
page read and write
|
|
|
|
7FF57FCCE000
|
unkown image
|
page readonly
|
|
|
|
7FF501E6E000
|
unkown image
|
page readonly
|
|
|
|
1C87D972000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F3A000
|
unkown image
|
page readonly
|
|
|
|
7FF501CD7000
|
unkown image
|
page readonly
|
|
|
|
257F3590000
|
unkown
|
page read and write
|
|
|
|
7DF55C242000
|
unkown image
|
page readonly
|
|
|
|
7FF56FDAB000
|
unkown image
|
page readonly
|
|
|
|
7FF5C25C2000
|
unkown image
|
page readonly
|
|
|
|
2332FAD0000
|
unkown
|
page read and write
|
|
|
|
1C011270000
|
unkown image
|
page read and write
|
|
|
|
7DF55C252000
|
unkown image
|
page readonly
|
|
|
|
7FF57A8BD000
|
unkown image
|
page readonly
|
|
|
|
7FF58DA35000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE5E1000
|
unkown image
|
page readonly
|
|
|
|
1D025CD0000
|
unkown
|
page read and write
|
|
|
|
7FF56FE32000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1787000
|
unkown image
|
page readonly
|
|
|
|
7FF5C184A000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7D56000
|
unkown image
|
page readonly
|
|
|
|
7DF5CA5C0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB641000
|
unkown image
|
page readonly
|
|
|
|
1C011440000
|
unkown
|
page read and write
|
|
|
|
1C011413000
|
unkown
|
page read and write
|
|
|
|
1C59E0A0000
|
unkown
|
page read and write
|
|
|
|
7FF4FB651000
|
unkown image
|
page readonly
|
|
|
|
1C59E100000
|
unkown
|
page read and write
|
|
|
|
7DF5DB030000
|
unkown image
|
page readonly
|
|
|
|
7FF57FB0A000
|
unkown image
|
page readonly
|
|
|
|
7DF5CA5B0000
|
unkown image
|
page readonly
|
|
|
|
7DF4CD390000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE402000
|
unkown image
|
page readonly
|
|
|
|
2332FB96000
|
unkown
|
page read and write
|
|
|
|
7DF59B820000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE653000
|
unkown image
|
page readonly
|
|
|
|
9D45AFB000
|
stack
|
page read and write
|
|
|
|
7FF57AA03000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2EC9000
|
unkown image
|
page readonly
|
|
|
|
7DF4DA260000
|
unkown image
|
page readonly
|
|
|
|
1C87D99A000
|
unkown
|
page read and write
|
|
|
|
1D026060000
|
unkown image
|
page readonly
|
|
|
|
1C87D95A000
|
unkown
|
page read and write
|
|
|
|
1F5C1FC000
|
stack
|
page read and write
|
|
|
|
7FF5C2510000
|
unkown image
|
page readonly
|
|
|
|
7FF5C23BD000
|
unkown image
|
page readonly
|
|
|
|
28D5F1D5000
|
heap private
|
page read and write
|
|
|
|
2332FB79000
|
heap default
|
page read and write
|
|
|
|
7FF5CD2DF000
|
unkown image
|
page readonly
|
|
|
|
7DF588750000
|
unkown image
|
page readonly
|
|
|
|
28D5F26C000
|
unkown
|
page read and write
|
|
|
|
641C87E000
|
stack
|
page read and write
|
|
|
|
7DF5CF4D2000
|
unkown image
|
page readonly
|
|
|
|
28D5F190000
|
unkown
|
page read and write
|
|
|
|
1C59D6B0000
|
unkown
|
page read and write
|
|
|
|
7DF5956B2000
|
unkown image
|
page readonly
|
|
|
|
1C87D973000
|
unkown
|
page read and write
|
|
|
|
1C87D974000
|
unkown
|
page read and write
|
|
|
|
1C87D998000
|
unkown
|
page read and write
|
|
|
|
24620200000
|
unkown image
|
page readonly
|
|
|
|
7DF50FB70000
|
unkown image
|
page readonly
|
|
|
|
18579670000
|
unkown image
|
page readonly
|
|
|
|
1C87D973000
|
unkown
|
page read and write
|
|
|
|
7FF5C1851000
|
unkown image
|
page readonly
|
|
|
|
7FF5C15FF000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2FAA000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE0AC000
|
unkown image
|
page readonly
|
|
|
|
7FF551480000
|
unkown image
|
page readonly
|
|
|
|
1C59E370000
|
unkown
|
page read and write
|
|
|
|
28D624A3000
|
heap private
|
page read and write
|
|
|
|
7FF587970000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2471000
|
unkown image
|
page readonly
|
|
|
|
7D7B97F000
|
stack
|
page read and write
|
|
|
|
1C87D91C000
|
unkown
|
page read and write
|
|
|
|
7FF57A9D3000
|
unkown image
|
page readonly
|
|
|
|
7FFC68FD0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F42FA000
|
unkown image
|
page readonly
|
|
|
|
1C87D987000
|
unkown
|
page read and write
|
|
|
|
1D025D4E000
|
unkown
|
page read and write
|
|
|
|
231210F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE542000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD3A9000
|
unkown image
|
page readonly
|
|
|
|
7DF501F60000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE474000
|
unkown image
|
page readonly
|
|
|
|
7DF58D9F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE60A000
|
unkown image
|
page readonly
|
|
|
|
7FF5C245C000
|
unkown image
|
page readonly
|
|
|
|
209A1B17000
|
unkown
|
page read and write
|
|
|
|
7FF5CE5B1000
|
unkown image
|
page readonly
|
|
|
|
7DF5DB050000
|
unkown image
|
page readonly
|
|
|
|
1C87D95C000
|
unkown
|
page read and write
|
|
|
|
B08EC7E000
|
stack
|
page read and write
|
|
|
|
7FF5C25D4000
|
unkown image
|
page readonly
|
|
|
|
7FF57F394000
|
unkown image
|
page readonly
|
|
|
|
19DABED4000
|
heap default
|
page read and write
|
|
|
|
7FF5C15E6000
|
unkown image
|
page readonly
|
|
|
|
23121302000
|
unkown
|
page read and write
|
|
|
|
7FF5CD251000
|
unkown image
|
page readonly
|
|
|
|
28D5F240000
|
heap default
|
page read and write
|
|
|
|
7DF588760000
|
unkown image
|
page readonly
|
|
|
|
7FF501DE1000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2503000
|
unkown image
|
page readonly
|
|
|
|
1D025CB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5C0C22000
|
unkown image
|
page readonly
|
|
|
|
7FF57A83E000
|
unkown image
|
page readonly
|
|
|
|
7FF54E4F3000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1855000
|
unkown image
|
page readonly
|
|
|
|
B44D67D000
|
stack
|
page read and write
|
|
|
|
7FF58DBB1000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2EE0000
|
unkown image
|
page readonly
|
|
|
|
7DF501F62000
|
unkown image
|
page readonly
|
|
|
|
7DF5C5C42000
|
unkown image
|
page readonly
|
|
|
|
2332FA60000
|
unkown image
|
page readonly
|
|
|
|
7FF56FD80000
|
unkown image
|
page readonly
|
|
|
|
52B1179000
|
stack
|
page read and write
|
|
|
|
1CF38355000
|
heap private
|
page read and write
|
|
|
|
7FF5BC860000
|
unkown image
|
page readonly
|
|
|
|
7FF54E5C4000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB570000
|
unkown image
|
page readonly
|
|
|
|
28D5F800000
|
unkown image
|
page readonly
|
|
|
|
1C59D410000
|
unkown
|
page read and write
|
|
|
|
1C59D557000
|
heap default
|
page read and write
|
|
|
|
1CF37FF0000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB5C7000
|
unkown image
|
page readonly
|
|
|
|
7FF5C13C7000
|
unkown image
|
page readonly
|
|
|
|
7FF5C25C9000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2ECF000
|
unkown image
|
page readonly
|
|
|
|
18F002BB000
|
unkown
|
page read and write
|
|
|
|
1C87D98B000
|
unkown
|
page read and write
|
|
|
|
7D7AF7C000
|
unkown
|
page read and write
|
|
|
|
7FF5C20D1000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE627000
|
unkown image
|
page readonly
|
|
|
|
7DF50FB72000
|
unkown image
|
page readonly
|
|
|
|
7FF58D697000
|
unkown image
|
page readonly
|
|
|
|
7FF54E4F6000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE60E000
|
unkown image
|
page readonly
|
|
|
|
1D026260000
|
unkown image
|
page readonly
|
|
|
|
1CF3B8F0000
|
unkown
|
page read and write
|
|
|
|
7FF4F420A000
|
unkown image
|
page readonly
|
|
|
|
1E54DCD0000
|
unkown image
|
page readonly
|
|
|
|
7FF57A7E6000
|
unkown image
|
page readonly
|
|
|
|
1C59D420000
|
unkown image
|
page readonly
|
|
|
|
7DF501F80000
|
unkown image
|
page readonly
|
|
|
|
23121100000
|
unkown image
|
page readonly
|
|
|
|
257F3602000
|
unkown
|
page read and write
|
|
|
|
2312125A000
|
unkown
|
page read and write
|
|
|
|
7FF57AAF1000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF4C0000
|
unkown image
|
page readonly
|
|
|
|
7D7B577000
|
stack
|
page read and write
|
|
|
|
7FF5B7DE2000
|
unkown image
|
page readonly
|
|
|
|
209A4CB0000
|
unkown image
|
page readonly
|
|
|
|
7FF58DBB1000
|
unkown image
|
page readonly
|
|
|
|
7DF5DC3B0000
|
unkown image
|
page readonly
|
|
|
|
7DF5092B0000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF4D2000
|
unkown image
|
page readonly
|
|
|
|
7FF501E07000
|
unkown image
|
page readonly
|
|
|
|
7D7B77C000
|
stack
|
page read and write
|
|
|
|
1C87D200000
|
unkown
|
page read and write
|
|
|
|
641C5BE000
|
stack
|
page read and write
|
|
|
|
1C26B620000
|
unkown image
|
page readonly
|
|
|
|
7FF57A31D000
|
unkown image
|
page readonly
|
|
|
|
7FF57FC83000
|
unkown image
|
page readonly
|
|
|
|
7DF50FB82000
|
unkown image
|
page readonly
|
|
|
|
7DF493580000
|
unkown image
|
page readonly
|
|
|
|
7FF58DABD000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD347000
|
unkown image
|
page readonly
|
|
|
|
1C59D562000
|
unkown
|
page read and write
|
|
|
|
1C87D25F000
|
unkown
|
page read and write
|
|
|
|
1C26BD80000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE702000
|
unkown image
|
page readonly
|
|
|
|
1C87DE02000
|
unkown
|
page read and write
|
|
|
|
257F3510000
|
unkown image
|
page readonly
|
|
|
|
7DF57DAC2000
|
unkown image
|
page readonly
|
|
|
|
7FF44F330000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD2DA000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD1E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC045000
|
unkown image
|
page readonly
|
|
|
|
7DF59B812000
|
unkown image
|
page readonly
|
|
|
|
7FF5D783E000
|
unkown image
|
page readonly
|
|
|
|
18579840000
|
unkown
|
page read and write
|
|
|
|
B44DC7F000
|
stack
|
page read and write
|
|
|
|
7FF5C254E000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD32E000
|
unkown image
|
page readonly
|
|
|
|
1CF38110000
|
unkown
|
page read and write
|
|
|
|
7DF5D0260000
|
unkown image
|
page readonly
|
|
|
|
1C87D802000
|
unkown
|
page read and write
|
|
|
|
7FF5CCB7E000
|
unkown image
|
page readonly
|
|
|
|
1C011502000
|
unkown
|
page read and write
|
|
|
|
7FF501F10000
|
unkown image
|
page readonly
|
|
|
|
2332FB9E000
|
unkown
|
page read and write
|
|
|
|
1C87D28B000
|
unkown
|
page read and write
|
|
|
|
7FF501E47000
|
unkown image
|
page readonly
|
|
|
|
1C59E360000
|
unkown
|
page readonly
|
|
|
|
7FF5CE650000
|
unkown image
|
page readonly
|
|
|
|
7FF57AAC9000
|
unkown image
|
page readonly
|
|
|
|
1CF3815E000
|
unkown
|
page read and write
|
|
|
|
7FF5C244B000
|
unkown image
|
page readonly
|
|
|
|
28D5F090000
|
unkown image
|
page readonly
|
|
|
|
2332FA60000
|
unkown image
|
page readonly
|
|
|
|
1C87D966000
|
unkown
|
page read and write
|
|
|
|
7FF4FB2D2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F4213000
|
unkown image
|
page readonly
|
|
|
|
1C59E110000
|
unkown
|
page read and write
|
|
|
|
7FF5C1844000
|
unkown image
|
page readonly
|
|
|
|
25846100000
|
unkown
|
page read and write
|
|
|
|
24620029000
|
unkown
|
page read and write
|
|
|
|
1C0112B0000
|
unkown image
|
page readonly
|
|
|
|
1CF39C40000
|
unkown
|
page read and write
|
|
|
|
1C87D266000
|
unkown
|
page read and write
|
|
|
|
1C87D308000
|
unkown
|
page read and write
|
|
|
|
1F5BCDB000
|
unkown
|
page read and write
|
|
|
|
7FF5C2527000
|
unkown image
|
page readonly
|
|
|
|
7DF5E5552000
|
unkown image
|
page readonly
|
|
|
|
B44D97F000
|
stack
|
page read and write
|
|
|
|
18F00802000
|
unkown
|
page read and write
|
|
|
|
7FF5C178E000
|
unkown image
|
page readonly
|
|
|
|
7FF54E5CA000
|
unkown image
|
page readonly
|
|
|
|
7DF3FFE30000
|
unkown image
|
page readonly
|
|
|
|
7DF5DC3A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1081000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7E55000
|
unkown image
|
page readonly
|
|
|
|
7FF5D78C4000
|
unkown image
|
page readonly
|
|
|
|
1C87DE6A000
|
unkown
|
page read and write
|
|
|
|
23332E40000
|
heap private
|
page read and write
|
|
|
|
72542FE000
|
stack
|
page read and write
|
|
|
|
7FF5BC89E000
|
unkown image
|
page readonly
|
|
|
|
7FF501DFE000
|
unkown image
|
page readonly
|
|
|
|
7FF57FD71000
|
unkown image
|
page readonly
|
|
|
|
7FF5C17DD000
|
unkown image
|
page readonly
|
|
|
|
7FF54E48B000
|
unkown image
|
page readonly
|
|
|
|
13744FB000
|
stack
|
page read and write
|
|
|
|
25846013000
|
unkown
|
page read and write
|
|
|
|
7FF56FD01000
|
unkown image
|
page readonly
|
|
|
|
7FF57A9A1000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1095000
|
unkown image
|
page readonly
|
|
|
|
7FF551472000
|
unkown image
|
page readonly
|
|
|
|
7FF57AAD4000
|
unkown image
|
page readonly
|
|
|
|
1CF38157000
|
unkown
|
page read and write
|
|
|
|
209A1950000
|
unkown image
|
page readonly
|
|
|
|
25846028000
|
unkown
|
page read and write
|
|
|
|
7FF587A22000
|
unkown image
|
page readonly
|
|
|
|
23121313000
|
unkown
|
page read and write
|
|
|
|
575CC7E000
|
stack
|
page read and write
|
|
|
|
7FF587912000
|
unkown image
|
page readonly
|
|
|
|
1C011465000
|
unkown
|
page read and write
|
|
|
|
7FF5C25F1000
|
unkown image
|
page readonly
|
|
|
|
1490000
|
heap private
|
page read and write
|
|
|
|
7FF56FCFB000
|
unkown image
|
page readonly
|
|
|
|
2462003C000
|
unkown
|
page read and write
|
|
|
|
18F00200000
|
unkown
|
page read and write
|
|
|
|
2312125A000
|
unkown
|
page read and write
|
|
|
|
1C01146A000
|
unkown
|
page read and write
|
|
|
|
7FF5D785A000
|
unkown image
|
page readonly
|
|
|
|
F4A3B3B000
|
unkown
|
page read and write
|
|
|
|
209A1920000
|
unkown image
|
page readonly
|
|
|
|
1C87D98B000
|
unkown
|
page read and write
|
|
|
|
7253FCB000
|
unkown
|
page read and write
|
|
|
|
7DF59B830000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7F4A000
|
unkown image
|
page readonly
|
|
|
|
7FF4F42EA000
|
unkown image
|
page readonly
|
|
|
|
18579E60000
|
unkown
|
page read and write
|
|
|
|
1CF3B4A3000
|
heap private
|
page read and write
|
|
|
|
7FF5C20D7000
|
unkown image
|
page readonly
|
|
|
|
1C26B824000
|
unkown
|
page read and write
|
|
|
|
D9B000
|
unkown
|
page read and write
|
|
|
|
7FF501F11000
|
unkown image
|
page readonly
|
|
|
|
1C87D992000
|
unkown
|
page read and write
|
|
|
|
7FF501C96000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2AA1000
|
unkown image
|
page readonly
|
|
|
|
2312122A000
|
unkown
|
page read and write
|
|
|
|
7FF5CE63D000
|
unkown image
|
page readonly
|
|
|
|
9D4558C000
|
unkown
|
page read and write
|
|
|
|
7F5989B000
|
unkown
|
page read and write
|
|
|
|
7FF58DB0E000
|
unkown image
|
page readonly
|
|
|
|
F4A46FC000
|
stack
|
page read and write
|
|
|
|
7DF5DB042000
|
unkown image
|
page readonly
|
|
|
|
7FF58D936000
|
unkown image
|
page readonly
|
|
|
|
D00000
|
unkown image
|
page readonly
|
|
|
|
209A1FC0000
|
unkown image
|
page readonly
|
|
|
|
23121247000
|
unkown
|
page read and write
|
|
|
|
1C87D989000
|
unkown
|
page read and write
|
|
|
|
7DF59B812000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB4D5000
|
unkown image
|
page readonly
|
|
|
|
7DF59B822000
|
unkown image
|
page readonly
|
|
|
|
7FF5879AE000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7F22000
|
unkown image
|
page readonly
|
|
|
|
1C26B902000
|
unkown
|
page read and write
|
|
|
|
25845F40000
|
unkown image
|
page readonly
|
|
|
|
1C87D260000
|
unkown
|
page read and write
|
|
|
|
1F5C47F000
|
stack
|
page read and write
|
|
|
|
9D4587E000
|
stack
|
page read and write
|
|
|
|
7DF5D0262000
|
unkown image
|
page readonly
|
|
|
|
7FF58797E000
|
unkown image
|
page readonly
|
|
|
|
7FF5C23A1000
|
unkown image
|
page readonly
|
|
|
|
1E54D6E0000
|
unkown image
|
page readonly
|
|
|
|
7DF486620000
|
unkown image
|
page readonly
|
|
|
|
7DF5CF4E0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F4237000
|
unkown image
|
page readonly
|
|
|
|
1C011463000
|
unkown
|
page read and write
|
|
|
|
7FF54E52B000
|
unkown image
|
page readonly
|
|
|
|
28D5F264000
|
unkown
|
page read and write
|
|
|
|
1C26BDA0000
|
unkown
|
page read and write
|
|
|
|
7DF407180000
|
unkown image
|
page readonly
|
|
|
|
1C87D97B000
|
unkown
|
page read and write
|
|
|
|
7FF57AA13000
|
unkown image
|
page readonly
|
|
|
|
7FF56F89B000
|
unkown image
|
page readonly
|
|
|
|
1C87D302000
|
unkown
|
page read and write
|
|
|
|
7DF55C250000
|
unkown image
|
page readonly
|
|
|
|
1495000
|
heap private
|
page read and write
|
|
|
|
7FF587A29000
|
unkown image
|
page readonly
|
|
|
|
18F7FF80000
|
unkown image
|
page read and write
|
|
|
|
7F5A07C000
|
stack
|
page read and write
|
|
|
|
7FF4FB634000
|
unkown image
|
page readonly
|
|
|
|
7FF58D97D000
|
unkown image
|
page readonly
|
|
|
|
F5938FE000
|
stack
|
page read and write
|
|
|
|
1CF3B4A0000
|
heap private
|
page read and write
|
|
|
|
7FF587963000
|
unkown image
|
page readonly
|
|
|
|
185796C0000
|
heap default
|
page read and write
|
|
|
|
185797C0000
|
unkown
|
page read and write
|
|
|
|
7DF5C0C40000
|
unkown image
|
page readonly
|
|
|
|
1CF3B390000
|
unkown image
|
page readonly
|
|
|
|
23122BE0000
|
unkown
|
page read and write
|
|
|
|
1C87D923000
|
unkown
|
page read and write
|
|
|
|
1C87D313000
|
unkown
|
page read and write
|
|
|
|
7FF54E517000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2FB1000
|
unkown image
|
page readonly
|
|
|
|
1C87D400000
|
unkown image
|
page readonly
|
|
|
|
7DF5DC390000
|
unkown image
|
page readonly
|
|
|
|
7F5A3FF000
|
stack
|
page read and write
|
|
|
|
231210D0000
|
unkown image
|
page readonly
|
|
|
|
1C87D9A2000
|
unkown
|
page read and write
|
|
|
|
7FF4FB629000
|
unkown image
|
page readonly
|
|
|
|
1C87D25E000
|
unkown
|
page read and write
|
|
|
|
7FF5B2EF7000
|
unkown image
|
page readonly
|
|
|
|
7FF5C174B000
|
unkown image
|
page readonly
|
|
|
|
28D5F258000
|
unkown
|
page read and write
|
|
|
|
28D5F268000
|
unkown
|
page read and write
|
|
|
|
7FF54E3F2000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE51B000
|
unkown image
|
page readonly
|
|
|
|
B38FF7F000
|
stack
|
page read and write
|
|
|
|
7FF5CE211000
|
unkown image
|
page readonly
|
|
|
|
19DABDF0000
|
unkown image
|
page readonly
|
|
|
|
7FF501E30000
|
unkown image
|
page readonly
|
|
|
|
28D5F220000
|
unkown image
|
page readonly
|
|
|
|
10D0000
|
unkown
|
page read and write
|
|
|
|
DD0000
|
unkown
|
page read and write
|
|
|
|
7FF56F509000
|
unkown image
|
page readonly
|
|
|
|
24620400000
|
unkown image
|
page readonly
|
|
|
|
1C87D974000
|
unkown
|
page read and write
|
|
|
|
7FF5C1839000
|
unkown image
|
page readonly
|
|
|
|
1C87D99F000
|
unkown
|
page read and write
|
|
|
|
2332FA80000
|
unkown image
|
page readonly
|
|
|
|
1E54D913000
|
unkown
|
page read and write
|
|
|
|
7FF54E5E1000
|
unkown image
|
page readonly
|
|
|
|
7FF57FD61000
|
unkown image
|
page readonly
|
|
|
|
7FF57A9F9000
|
unkown image
|
page readonly
|
|
|
|
28D5F264000
|
unkown
|
page read and write
|
|
|
|
7F59EFE000
|
stack
|
page read and write
|
|
|
|
7FF5B7F2E000
|
unkown image
|
page readonly
|
|
|
|
7DF5956C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE547000
|
unkown image
|
page readonly
|
|
|
|
7DF58D9E0000
|
unkown image
|
page readonly
|
|
|
|
7FF501C6F000
|
unkown image
|
page readonly
|
|
|
|
7FF551462000
|
unkown image
|
page readonly
|
|
|
|
1CF38820000
|
unkown image
|
page readonly
|
|
|
|
1C87D9D2000
|
unkown
|
page read and write
|
|
|
|
28D5F070000
|
unkown image
|
page readonly
|
|
|
|
7FF58DA1C000
|
unkown image
|
page readonly
|
|
|
|
7DF50FB80000
|
unkown image
|
page readonly
|
|
|
|
7FF58DB82000
|
unkown image
|
page readonly
|
|
|
|
1C87D229000
|
unkown
|
page read and write
|
|
|
|
7DF5E5550000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB587000
|
unkown image
|
page readonly
|
|
|
|
1CF3814E000
|
unkown
|
page read and write
|
|
|
|
23123210000
|
unkown
|
page read and write
|
|
|
|
1C87D9C0000
|
unkown
|
page read and write
|
|
|
|
7FF501E8A000
|
unkown image
|
page readonly
|
|
|
|
257F367F000
|
unkown
|
page read and write
|
|
|
|
1C87D9BF000
|
unkown
|
page read and write
|
|
|
|
7FF5B2ECD000
|
unkown image
|
page readonly
|
|
|
|
7FF57AA3B000
|
unkown image
|
page readonly
|
|
|
|
209A5200000
|
unkown
|
page read and write
|
|
|
|
B08ED77000
|
stack
|
page read and write
|
|
|
|
23123210000
|
unkown
|
page read and write
|
|
|
|
1C87D97B000
|
unkown
|
page read and write
|
|
|
|
575CCFF000
|
stack
|
page read and write
|
|
|
|
1C87D972000
|
unkown
|
page read and write
|
|
|
|
7FF54E262000
|
unkown image
|
page readonly
|
|
|
|
28D5F060000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7EF3000
|
unkown image
|
page readonly
|
|
|
|
18579690000
|
unkown image
|
page readonly
|
|
|
|
7FF58DB2D000
|
unkown image
|
page readonly
|
|
|
|
7FF5C25EA000
|
unkown image
|
page readonly
|
|
|
|
28D5F680000
|
unkown image
|
page readonly
|
|
|
|
1C87CFB0000
|
unkown image
|
page read and write
|
|
|
|
7FF5CD2E6000
|
unkown image
|
page readonly
|
|
|
|
1D025D40000
|
unkown
|
page read and write
|
|
|
|
7FF4FB566000
|
unkown image
|
page readonly
|
|
|
|
1D026055000
|
heap private
|
page read and write
|
|
|
|
7FF5CE59C000
|
unkown image
|
page readonly
|
|
|
|
7DF55C250000
|
unkown image
|
page readonly
|
|
|
|
1D025D40000
|
unkown
|
page read and write
|
|
|
|
7DFE93DA8000
|
unkown image
|
page readonly
|
|
|
|
7DF55C240000
|
unkown image
|
page readonly
|
|
|
|
7DF40DA40000
|
unkown image
|
page readonly
|
|
|
|
7FF58795D000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD255000
|
unkown image
|
page readonly
|
|
|
|
7FF501E37000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2517000
|
unkown image
|
page readonly
|
|
|
|
209A1B12000
|
unkown
|
page read and write
|
|
|
|
209A1D63000
|
heap private
|
page read and write
|
|
|
|
7FF57FD65000
|
unkown image
|
page readonly
|
|
|
|
7DF5E5560000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE42D000
|
unkown image
|
page readonly
|
|
|
|
1C59D4C9000
|
heap private
|
page read and write
|
|
|
|
1CF3814E000
|
unkown
|
page read and write
|
|
|
|
7FF56FD6D000
|
unkown image
|
page readonly
|
|
|
|
1C87D2A8000
|
unkown
|
page read and write
|
|
|
|
1C0113C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2DCF000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC92A000
|
unkown image
|
page readonly
|
|
|
|
1C87D973000
|
unkown
|
page read and write
|
|
|
|
7FF58725E000
|
unkown image
|
page readonly
|
|
|
|
257F34F0000
|
unkown image
|
page read and write
|
|
|
|
7FF5879C7000
|
unkown image
|
page readonly
|
|
|
|
7FFC67BB0000
|
unkown image
|
page readonly
|
|
|
|
257F368A000
|
unkown
|
page read and write
|
|
|
|
7D7B477000
|
stack
|
page read and write
|
|
|
|
7FF5B7EBE000
|
unkown image
|
page readonly
|
|
|
|
7DF5DB032000
|
unkown image
|
page readonly
|
|
|
|
185796A0000
|
unkown image
|
page readonly
|
|
|
|
1C87D998000
|
unkown
|
page read and write
|
|
|
|
7DF5CF4C2000
|
unkown image
|
page readonly
|
|
|
|
7FF57AA67000
|
unkown image
|
page readonly
|
|
|
|
7FF5D78D5000
|
unkown image
|
page readonly
|
|
|
|
7FF57FCBB000
|
unkown image
|
page readonly
|
|
|
|
1C01146E000
|
unkown
|
page read and write
|
|
|
|
1C011429000
|
unkown
|
page read and write
|
|
|
|
7DF4D8F00000
|
unkown image
|
page readonly
|
|
|
|
1C59D470000
|
unkown
|
page read and write
|
|
|
|
1C87DF00000
|
unkown
|
page read and write
|
|
|
|
7FF5D77ED000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE61E000
|
unkown image
|
page readonly
|
|
|
|
1C87DE00000
|
unkown
|
page read and write
|
|
|
|
1C0112E0000
|
heap default
|
page read and write
|
|
|
|
23122E10000
|
unkown
|
page read and write
|
|
|
|
209A1B21000
|
unkown
|
page read and write
|
|
|
|
7FFC664A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC6C6000
|
unkown image
|
page readonly
|
|
|
|
1C011460000
|
unkown
|
page read and write
|
|
|
|
7DF5CF4D0000
|
unkown image
|
page readonly
|
|
|
|
7FF501EE9000
|
unkown image
|
page readonly
|
|
|
|
209A50B0000
|
unkown
|
page read and write
|
|
|
|
7DF5956D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC837000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7EF7000
|
unkown image
|
page readonly
|
|
|
|
7FF58DADE000
|
unkown image
|
page readonly
|
|
|
|
7DF5DC3A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7ED4000
|
unkown image
|
page readonly
|
|
|
|
23121400000
|
unkown image
|
page readonly
|
|
|
|
7FF5C164B000
|
unkown image
|
page readonly
|
|
|
|
7FF54E4B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE65E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2AA7000
|
unkown image
|
page readonly
|
|
|
|
28D5F050000
|
unkown image
|
page read and write
|
|
|
|
209A1D60000
|
heap private
|
page read and write
|
|
|
|
7FF5C25E1000
|
unkown image
|
page readonly
|
|
|
|
7FF54E4AB000
|
unkown image
|
page readonly
|
|
|
|
575CA7F000
|
stack
|
page read and write
|
|
|
|
7FF4F4277000
|
unkown image
|
page readonly
|
|
|
|
7FF4F3F85000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC041000
|
unkown image
|
page readonly
|
|
|
|
1CF38156000
|
unkown
|
page read and write
|
|
|
|
23122C02000
|
unkown
|
page read and write
|
|
|
|
1C87D987000
|
unkown
|
page read and write
|
|
|
|
7FF54DC04000
|
unkown image
|
page readonly
|
|
|
|
7DF5D0262000
|
unkown image
|
page readonly
|
|
|
|
1C87D9A0000
|
unkown
|
page read and write
|
|
|
|
7FF58791E000
|
unkown image
|
page readonly
|
|
|
|
1E54D813000
|
unkown
|
page read and write
|
|
|
|
2461FF20000
|
heap default
|
page read and write
|
|
|
|
7FF5BC86E000
|
unkown image
|
page readonly
|
|
|
|
1D025D26000
|
heap default
|
page read and write
|
|
|
|
7DF4C8470000
|
unkown image
|
page readonly
|
|
|
|
7DF5E5560000
|
unkown image
|
page readonly
|
|
|
|
7FF5CE68E000
|
unkown image
|
page readonly
|
|
|
|
1E54E002000
|
unkown
|
page read and write
|
|
|
|
11B0000
|
heap default
|
page read and write
|
|
|
|
18F00213000
|
unkown
|
page read and write
|
|
|
|
1C87D98F000
|
unkown
|
page read and write
|
|
|
|
641C4BB000
|
unkown
|
page read and write
|
|
|
|
7FF5D7807000
|
unkown image
|
page readonly
|
|
|
|
7FF587959000
|
unkown image
|
page readonly
|
|
|
|
7FF5D78B9000
|
unkown image
|
page readonly
|
|
|
|
2332FEC0000
|
heap private
|
page read and write
|
|
|
|
231210B0000
|
unkown image
|
page read and write
|
|
|
|
7DF5DB050000
|
unkown image
|
page readonly
|
|
|
|
1C87D975000
|
unkown
|
page read and write
|
|
|
|
1C87DE02000
|
unkown
|
page read and write
|
|
|
|
725447E000
|
stack
|
page read and write
|
|
|
|
7FF4F41AB000
|
unkown image
|
page readonly
|
|
|
|
1E54D85A000
|
unkown
|
page read and write
|
|
|
|
D00000
|
unkown image
|
page readonly
|
|
|
|
1C87D998000
|
unkown
|
page read and write
|
|
|
|
7D7AFFF000
|
stack
|
page read and write
|
|
|
|
7FF58D9BF000
|
unkown image
|
page readonly
|
|
|
|
7DF5C0C32000
|
unkown image
|
page readonly
|
|
|
|
7FF5C176D000
|
unkown image
|
page readonly
|
|
|
|
18579C00000
|
unkown image
|
page readonly
|
|
|
|
7FF57A98E000
|
unkown image
|
page readonly
|
|
|
|
7DF501F60000
|
unkown image
|
page readonly
|
|
|
|
7FF5CDD36000
|
unkown image
|
page readonly
|
|
|
|
209A1900000
|
unkown image
|
page read and write
|
|
|
|
209A1B26000
|
unkown
|
page read and write
|
|
|
|
7FF5B2EEE000
|
unkown image
|
page readonly
|
|
|
|
7FF5C1757000
|
unkown image
|
page readonly
|
|
|
|
7FF587A4A000
|
unkown image
|
page readonly
|
|
|
|
7DF50FB70000
|
unkown image
|
page readonly
|
|
|
|
7FF57AAE5000
|
unkown image
|
page readonly
|
|
|
|
2C10000
|
heap private
|
page read and write
|
|
|
|
7FF5B7CA5000
|
unkown image
|
page readonly
|
|
|
|
23123210000
|
unkown
|
page read and write
|
|
|
|
7FF58776A000
|
unkown image
|
page readonly
|
|
|
|
1C87D99C000
|
unkown
|
page read and write
|
|
|
|
2332FB8E000
|
unkown
|
page read and write
|
|
|
|
7DF5C0C30000
|
unkown image
|
page readonly
|
|
|
|
23121790000
|
unkown image
|
page readonly
|
|
|
|
7DF5DB042000
|
unkown image
|
page readonly
|
|
|
|
7DF47B990000
|
unkown image
|
page readonly
|
|
|
|
19DABEC0000
|
heap default
|
page read and write
|
|
|
|
7FF58DB89000
|
unkown image
|
page readonly
|
|
|
|
7DF57DAD0000
|
unkown image
|
page readonly
|
|
|
|
18F00313000
|
unkown
|
page read and write
|
|
|
|
25845E40000
|
unkown image
|
page readonly
|
|
|
|
7FF501BF4000
|
unkown image
|
page readonly
|
|
|
|
1CF38260000
|
unkown image
|
page readonly
|
|
|
|
7FF5B7FBA000
|
unkown image
|
page readonly
|
|
|
|
1C87D316000
|
unkown
|
page read and write
|
|
|
|
137409B000
|
unkown
|
page read and write
|
|
|
|
1C01145E000
|
unkown
|
page read and write
|
|
|
|
1E54D82A000
|
unkown
|
page read and write
|
|
|
|
1C87D91C000
|
unkown
|
page read and write
|
|
|
|
7DF5E5542000
|
unkown image
|
page readonly
|
|
|
|
7FF54E4ED000
|
unkown image
|
page readonly
|
|
|
|
7FF4F42E4000
|
unkown image
|
page readonly
|
|
|
|
7DF5CA5A0000
|
unkown image
|
page readonly
|
|
|
|
7F5A4FD000
|
stack
|
page read and write
|
|
|
|
1C87D973000
|
unkown
|
page read and write
|
|
|
|
7FF4FACCE000
|
unkown image
|
page readonly
|
|
|
|
7FF57FCC2000
|
unkown image
|
page readonly
|
|
|
|
7FF54E265000
|
unkown image
|
page readonly
|
|
|
|
23121200000
|
unkown
|
page read and write
|
|
|
|
24620089000
|
unkown
|
page read and write
|
|
|
|
1C87CFC0000
|
heap private
|
page read and write
|
|
|
|
1C011290000
|
unkown image
|
page readonly
|
|
|
|
18579856000
|
unkown
|
page read and write
|
|
|
|
7FF5CE495000
|
unkown image
|
page readonly
|
|
|
|
1C011447000
|
unkown
|
page read and write
|
|
|
|
7FF57A86B000
|
unkown image
|
page readonly
|
|
|
|
7FF5BC93A000
|
unkown image
|
page readonly
|
|
|
|
7FF501DF3000
|
unkown image
|
page readonly
|
|
|
|
7FF5C17D7000
|
unkown image
|
page readonly
|
|
|
|
7FF5D782B000
|
unkown image
|
page readonly
|
|
|
|
7DF5956C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5C15DB000
|
unkown image
|
page readonly
|
|
|
|
7FF5879CD000
|
unkown image
|
page readonly
|
|
|
|
23121257000
|
unkown
|
page read and write
|
|
|
|
7FF4FB5AE000
|
unkown image
|
page readonly
|
|
|
|
137411E000
|
stack
|
page read and write
|
|
|
|
7FF5B2FBA000
|
unkown image
|
page readonly
|
|
|
|
1C87D2A7000
|
unkown
|
page read and write
|
|
There are 1667 hidden memdumps, click here to show them.