Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
initial sample
|
||||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{936DC963-5585-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{936DC965-5585-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\xlsx[1].png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\spoguestaccess-a0017cc2[1].js
|
ASCII text, with very long lines
|
downloaded
|
||
C:\Users\user\AppData\Local\Temp\~DF3A4ED906E2C2A4CC.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DFF5BAC88AD18566F0.TMP
|
data
|
dropped
|
||
C:\Users\user\Desktop\cmdline.out
|
ASCII text, with CRLF line terminators
|
modified
|
||
C:\Users\user\Desktop\download\.wget-hsts
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Desktop\download\Ec_oHive0IlGh0zKWdNWJqwBv4CGuicjIXG6ZM__kHKiUQ@email=Bill.Sparrow@99restaurants.com&e=4%3AtJjRLx&at=9
|
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
|
dropped
|
There are 9 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Windows\SysWOW64\cmd.exe
|
C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P 'C:\Users\user\Desktop\download' --no-check-certificate --content-disposition
--user-agent='Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko' 'https://partnersinhealth.sharepoint.com/:x:/s/COVIDCommunityTeam-Massachusetts-EIU-EpidemicIntelligenceUnit/Ec_oHive0IlGh0zKWdNWJqwBv4CGuicjIXG6ZM__kHKiUQ?email=Bill.Sparrow%4099restaurants.com&e=4%3atJjRLx&at=9'
> cmdline.out 2>&1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\SysWOW64\wget.exe
|
wget -t 2 -v -T 60 -P 'C:\Users\user\Desktop\download' --no-check-certificate --content-disposition --user-agent='Mozilla/5.0
(Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko' 'https://partnersinhealth.sharepoint.com/:x:/s/COVIDCommunityTeam-Massachusetts-EIU-EpidemicIntelligenceUnit/Ec_oHive0IlGh0zKWdNWJqwBv4CGuicjIXG6ZM__kHKiUQ?email=Bill.Sparrow%4099restaurants.com&e=4%3atJjRLx&at=9'
|
||
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' C:\Users\user\Desktop\download\Ec_oHive0IlGh0zKWdNWJqwBv4CGuicjIXG6ZM__kHKiUQ@email=Bill.Sparrow@99restaurants.com&e=4%3AtJjRLx&at=9.html
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:464 CREDAT:17410 /prefetch:2
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://www.nytimes.com/
|
unknown
|
||
https://spoprod-a.akamaihd.net/files/fabric-cdn-prod_20201008.001/assets/item-types/
|
unknown
|
||
https://github.com/microsoft/fluentui/wiki/Using-icons
|
unknown
|
||
https://partnersinhealth.sharepoint.com/sites/COVIDCommunityTeam-Massachusetts-EIU-EpidemicIntellige
|
unknown
|
||
http://www.youtube.com/
|
unknown
|
||
http://www.wikipedia.com/
|
unknown
|
||
http://www.amazon.com/
|
unknown
|
||
http://www.live.com/
|
unknown
|
||
https://spoprod-a.akamaihd.net
|
unknown
|
||
http://www.reddit.com/
|
unknown
|
||
http://www.twitter.com/
|
unknown
|
||
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js
|
unknown
|
||
https://static2.sharepointonline.com/files/fabric/assets
|
unknown
|
||
https://partnersinhealth.sharepoint.com/:x:/s/COVIDCommunityTeam-Massachusetts-EIU-EpidemicIntellige
|
unknown
|
There are 4 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
18164-ipv4.farm.prod.aa-rt.sharepoint.com
|
40.108.137.41
|
||
partnersinhealth.sharepoint.com
|
unknown
|
||
spoprod-a.akamaihd.net
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
---|---|---|---|---|---|
40.108.137.41
|
unknown
|
United States
|
unknown
|
||
192.168.2.1
|
unknown
|
unknown
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files\internet explorer\iexplore.exe
|
{936DC963-5585-11EB-90E4-ECF4BB862DED}
|
||
C:\Program Files\internet explorer\iexplore.exe
|
AdminActive
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
||
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
There are 7 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
237B866B000
|
unkown
|
page read and write
|
||
7FF54DF20000
|
unkown
|
page readonly
|
||
7FF5D6415000
|
unkown
|
page readonly
|
||
201DCFFE000
|
unkown
|
page read and write
|
||
7FF5D641F000
|
unkown
|
page readonly
|
||
7FF502588000
|
unkown
|
page readonly
|
||
7FF5A95FD000
|
unkown
|
page readonly
|
||
8DD9D7E000
|
unkown
|
page read and write
|
||
7FF534F90000
|
unkown
|
page readonly
|
||
7FF5776B7000
|
unkown
|
page readonly
|
||
201D7A56000
|
unkown
|
page read and write
|
||
B21000
|
unkown
|
page read and write
|
||
201D79C0000
|
unkown
|
page read and write
|
||
7FF5B9E42000
|
unkown
|
page readonly
|
||
7FF50D70A000
|
unkown
|
page readonly
|
||
1D234860000
|
unkown
|
page read and write
|
||
7FF577719000
|
unkown
|
page readonly
|
||
7FF535625000
|
unkown
|
page readonly
|
||
7FF5A4908000
|
unkown
|
page readonly
|
||
7FF535396000
|
unkown
|
page readonly
|
||
1CF53878000
|
heap default
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
201DD0F8000
|
unkown
|
page write copy
|
||
6C4B15B000
|
unkown
|
page read and write
|
||
118CFE4A000
|
unkown
|
page read and write
|
||
7FF54DD4A000
|
unkown
|
page readonly
|
||
7CBB7E000
|
unkown
|
page read and write
|
||
7FF5D7FA9000
|
unkown
|
page readonly
|
||
7FF57770E000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
201DCED0000
|
unkown
|
page read and write
|
||
7FF50DF09000
|
unkown
|
page readonly
|
||
7FF5A9699000
|
unkown
|
page readonly
|
||
7FF502601000
|
unkown
|
page readonly
|
||
118D17E0000
|
unkown
|
page readonly
|
||
7FF5351D1000
|
unkown
|
page readonly
|
||
237B88D0000
|
unkown
|
page readonly
|
||
7FF54DF80000
|
unkown
|
page readonly
|
||
7FF577711000
|
unkown
|
page readonly
|
||
263C7129000
|
unkown
|
page read and write
|
||
30D717F000
|
unkown
|
page read and write
|
||
7FF5B9DE5000
|
unkown
|
page readonly
|
||
7FF5B9E0D000
|
unkown
|
page readonly
|
||
7FF534FA7000
|
unkown
|
page readonly
|
||
201D8A10000
|
unkown
|
page read and write
|
||
7FF5D7FA1000
|
unkown
|
page readonly
|
||
7FF5AF025000
|
unkown
|
page readonly
|
||
B68000
|
unkown
|
page read and write
|
||
263C6813000
|
unkown
|
page read and write
|
||
7FF502699000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
28AD6600000
|
unkown
|
page readonly
|
||
9C000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF53F1B9000
|
unkown
|
page readonly
|
||
7FF5025E9000
|
unkown
|
page readonly
|
||
7FF5A4A19000
|
unkown
|
page readonly
|
||
201D7A52000
|
unkown
|
page read and write
|
||
7FF5D6429000
|
unkown
|
page readonly
|
||
7FF53560A000
|
unkown
|
page readonly
|
||
BC5D2FE000
|
unkown
|
page read and write
|
||
7FF50DEC8000
|
unkown
|
page readonly
|
||
2AD000
|
unkown
|
page read and write
|
||
201D8302000
|
unkown
|
page read and write
|
||
9AD207F000
|
unkown
|
page read and write
|
||
7FF5771D6000
|
unkown
|
page readonly
|
||
1A2AFA40000
|
unkown
|
page read and write
|
||
14B0000
|
heap private
|
page read and write
|
||
28AD63B0000
|
unkown
|
page readonly
|
||
201DD2AE000
|
unkown
|
page read and write
|
||
7FF50260C000
|
unkown
|
page readonly
|
||
263C7110000
|
unkown
|
page read and write
|
||
7FF535363000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
1D234875000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5353B7000
|
unkown
|
page readonly
|
||
201DD2AB000
|
unkown
|
page read and write
|
||
7FF5AF0D5000
|
unkown
|
page readonly
|
||
7FF53F136000
|
unkown
|
page readonly
|
||
8628EFD000
|
unkown
|
page read and write
|
||
7FF535322000
|
unkown
|
page readonly
|
||
28AD6E00000
|
unkown
|
page readonly
|
||
7FF5A92B5000
|
unkown
|
page readonly
|
||
6C4B7FB000
|
unkown
|
page read and write
|
||
7FF5D6470000
|
unkown
|
page readonly
|
||
201DD1D0000
|
unkown
|
page readonly
|
||
7FF5A9625000
|
unkown
|
page readonly
|
||
7FF53528C000
|
unkown
|
page readonly
|
||
263C7540000
|
unkown
|
page readonly
|
||
7FF5D63AA000
|
unkown
|
page readonly
|
||
7FF53502F000
|
unkown
|
page readonly
|
||
201D7A9A000
|
unkown
|
page read and write
|
||
237B8613000
|
unkown
|
page read and write
|
||
1A6932D0000
|
unkown
|
page readonly
|
||
263C7200000
|
unkown
|
page readonly
|
||
7FF54DE98000
|
unkown
|
page readonly
|
||
7FF5AF116000
|
unkown
|
page readonly
|
||
7FF50261C000
|
unkown
|
page readonly
|
||
7FF576E4F000
|
unkown
|
page readonly
|
||
7FF535639000
|
unkown
|
page readonly
|
||
1DAF0AE0000
|
unkown
|
page readonly
|
||
FABAAFF000
|
unkown
|
page read and write
|
||
5D33A7F000
|
unkown
|
page read and write
|
||
263C714B000
|
unkown
|
page read and write
|
||
2A1B6B40000
|
unkown
|
page readonly
|
||
237B8560000
|
unkown
|
page readonly
|
||
1C963385000
|
heap private
|
page read and write
|
||
118CFD40000
|
unkown
|
page readonly
|
||
28AD64E4000
|
unkown
|
page read and write
|
||
1BA8F060000
|
heap private
|
page read and write
|
||
118D1802000
|
unkown
|
page read and write
|
||
1D234C00000
|
unkown
|
page readonly
|
||
8DD989C000
|
unkown
|
page read and write
|
||
7CBC7F000
|
unkown
|
page read and write
|
||
118CFDB0000
|
unkown
|
page read and write
|
||
1D234858000
|
unkown
|
page read and write
|
||
1D23487E000
|
unkown
|
page read and write
|
||
7FF502268000
|
unkown
|
page readonly
|
||
7FF5AF0CE000
|
unkown
|
page readonly
|
||
7FF53565C000
|
unkown
|
page readonly
|
||
7FF57734B000
|
unkown
|
page readonly
|
||
2A1B5D90000
|
unkown
|
page readonly
|
||
562AA7F000
|
unkown
|
page read and write
|
||
7CBF7C000
|
unkown
|
page read and write
|
||
263C7102000
|
unkown
|
page read and write
|
||
1DAF0EE0000
|
unkown
|
page readonly
|
||
1D23486F000
|
unkown
|
page read and write
|
||
1A2AFC00000
|
unkown
|
page readonly
|
||
3621CC000
|
unkown
|
page read and write
|
||
7FF5D645C000
|
unkown
|
page readonly
|
||
7FF5A8DE5000
|
unkown
|
page readonly
|
||
9AD1C8B000
|
unkown
|
page read and write
|
||
7FF5A4255000
|
unkown
|
page readonly
|
||
1D234829000
|
unkown
|
page read and write
|
||
7FF5025CE000
|
unkown
|
page readonly
|
||
1A693450000
|
unkown
|
page readonly
|
||
7FF535297000
|
unkown
|
page readonly
|
||
263C7177000
|
unkown
|
page read and write
|
||
201D7A8C000
|
unkown
|
page read and write
|
||
201DD150000
|
unkown
|
page read and write
|
||
FABACFF000
|
unkown
|
page read and write
|
||
FABA5FC000
|
unkown
|
page read and write
|
||
201DD256000
|
unkown
|
page read and write
|
||
1D234845000
|
unkown
|
page read and write
|
||
7DFA1A135000
|
unkown
|
page readonly
|
||
201D8900000
|
unkown
|
page read and write
|
||
7FF5025DF000
|
unkown
|
page readonly
|
||
237B8602000
|
unkown
|
page read and write
|
||
201D7990000
|
heap default
|
page read and write
|
||
7FF53F145000
|
unkown
|
page readonly
|
||
7FF5B9E26000
|
unkown
|
page readonly
|
||
7FF534C2F000
|
unkown
|
page readonly
|
||
28AD646B000
|
unkown
|
page read and write
|
||
1CF53AF0000
|
heap private
|
page read and write
|
||
B60000
|
unkown
|
page read and write
|
||
F4F000
|
stack
|
page read and write
|
||
201DD0C8000
|
unkown
|
page readonly
|
||
263C67A0000
|
unkown
|
page read and write
|
||
28AD6429000
|
unkown
|
page read and write
|
||
7FF54DEAA000
|
unkown
|
page readonly
|
||
7FF54DAEE000
|
unkown
|
page readonly
|
||
263C7015000
|
unkown
|
page read and write
|
||
7FF5A49B2000
|
unkown
|
page readonly
|
||
7FF5021D3000
|
unkown
|
page readonly
|
||
1D2346C0000
|
heap private
|
page read and write
|
||
7FF50DEB0000
|
unkown
|
page readonly
|
||
1A2AF9F0000
|
unkown
|
page read and write
|
||
1BA8D660000
|
unkown
|
page readonly
|
||
B29000
|
unkown
|
page read and write
|
||
1D234884000
|
unkown
|
page read and write
|
||
30D6F7E000
|
unkown
|
page read and write
|
||
7FF535326000
|
unkown
|
page readonly
|
||
7FF5D63D2000
|
unkown
|
page readonly
|
||
7FF5A4780000
|
unkown
|
page readonly
|
||
7FF5355E2000
|
unkown
|
page readonly
|
||
1A693318000
|
heap default
|
page read and write
|
||
201DD034000
|
unkown
|
page read and write
|
||
7FF5352FC000
|
unkown
|
page readonly
|
||
7FF5350CE000
|
unkown
|
page readonly
|
||
31D907E000
|
unkown
|
page read and write
|
||
201D81F0000
|
unkown
|
page read and write
|
||
7FF54DCEE000
|
unkown
|
page readonly
|
||
263C714F000
|
unkown
|
page read and write
|
||
B25000
|
unkown
|
page read and write
|
||
201D7A00000
|
unkown
|
page read and write
|
||
7FF577686000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
201DCEA0000
|
unkown
|
page readonly
|
||
7FF53540E000
|
unkown
|
page readonly
|
||
1DAF0C0E000
|
heap default
|
page read and write
|
||
FABA8FE000
|
unkown
|
page read and write
|
||
30D69BB000
|
unkown
|
page read and write
|
||
7FF502625000
|
unkown
|
page readonly
|
||
7FF502637000
|
unkown
|
page readonly
|
||
7FF50DFB9000
|
unkown
|
page readonly
|
||
1BA8D5E0000
|
unkown
|
page read and write
|
||
118CFD60000
|
unkown
|
page read and write
|
||
201D8930000
|
unkown
|
page read and write
|
||
7FF53566C000
|
unkown
|
page readonly
|
||
7FF5A9606000
|
unkown
|
page readonly
|
||
7FF5A4955000
|
unkown
|
page readonly
|
||
7FF54DE80000
|
unkown
|
page readonly
|
||
7FF535285000
|
unkown
|
page readonly
|
||
7FF5A961C000
|
unkown
|
page readonly
|
||
263C6902000
|
unkown
|
page read and write
|
||
7FF5A46E0000
|
unkown
|
page readonly
|
||
237B8800000
|
unkown
|
page readonly
|
||
1D234846000
|
unkown
|
page read and write
|
||
5D3397E000
|
unkown
|
page read and write
|
||
7FF50DEC6000
|
unkown
|
page readonly
|
||
7FF5A4904000
|
unkown
|
page readonly
|
||
7FF5D7F0D000
|
unkown
|
page readonly
|
||
7FF5A4551000
|
unkown
|
page readonly
|
||
201DD2B0000
|
unkown
|
page read and write
|
||
7FF54DECF000
|
unkown
|
page readonly
|
||
1BA8D44D000
|
heap default
|
page read and write
|
||
28AD6360000
|
unkown
|
page readonly
|
||
7FF502551000
|
unkown
|
page readonly
|
||
7FF54DE82000
|
unkown
|
page readonly
|
||
7FF5D7EB8000
|
unkown
|
page readonly
|
||
201DCFF0000
|
unkown
|
page read and write
|
||
201D8202000
|
unkown
|
page read and write
|
||
7FF57763A000
|
unkown
|
page readonly
|
||
1D234844000
|
unkown
|
page read and write
|
||
FABA37B000
|
unkown
|
page read and write
|
||
201DD24C000
|
unkown
|
page read and write
|
||
7CB59B000
|
unkown
|
page read and write
|
||
2A1B5D50000
|
unkown
|
page readonly
|
||
201D81E3000
|
unkown
|
page read and write
|
||
7FF5D63E8000
|
unkown
|
page readonly
|
||
263C6A00000
|
unkown
|
page readonly
|
||
201DD010000
|
unkown
|
page read and write
|
||
7FF5A95DF000
|
unkown
|
page readonly
|
||
C6C7B7E000
|
unkown
|
page read and write
|
||
7FF50DEF5000
|
unkown
|
page readonly
|
||
7FF5B9E9E000
|
unkown
|
page readonly
|
||
7FF5A497D000
|
unkown
|
page readonly
|
||
1BA8D6E5000
|
heap private
|
page read and write
|
||
2B1000
|
unkown
|
page read and write
|
||
237B8700000
|
unkown
|
page read and write
|
||
1DAF0A80000
|
unkown
|
page readonly
|
||
201DD21F000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
2A1B5C10000
|
heap private
|
page read and write
|
||
7FF576E58000
|
unkown
|
page readonly
|
||
7FF502634000
|
unkown
|
page readonly
|
||
7FF5352B1000
|
unkown
|
page readonly
|
||
7FF5A498C000
|
unkown
|
page readonly
|
||
FABA9FE000
|
unkown
|
page read and write
|
||
7FF5AF0FD000
|
unkown
|
page readonly
|
||
7FF534FE8000
|
unkown
|
page readonly
|
||
263C7171000
|
unkown
|
page read and write
|
||
2A1B5C70000
|
heap default
|
page read and write
|
||
B69000
|
unkown
|
page read and write
|
||
7FF5025A6000
|
unkown
|
page readonly
|
||
7FF53F1B1000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
201D7A97000
|
unkown
|
page read and write
|
||
118CFDF0000
|
unkown
|
page read and write
|
||
201DD130000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
562AB7E000
|
unkown
|
page read and write
|
||
1D234861000
|
unkown
|
page read and write
|
||
7FF5A9699000
|
unkown
|
page readonly
|
||
7FF54DDFC000
|
unkown
|
page readonly
|
||
7FF534E63000
|
unkown
|
page readonly
|
||
7FF5B9EA1000
|
unkown
|
page readonly
|
||
7FF5D6365000
|
unkown
|
page readonly
|
||
1A2AF9B0000
|
unkown
|
page readonly
|
||
BC5CEFF000
|
unkown
|
page read and write
|
||
8628C7D000
|
unkown
|
page read and write
|
||
237B8628000
|
unkown
|
page read and write
|
||
7FF53E9EC000
|
unkown
|
page readonly
|
||
7FF53531B000
|
unkown
|
page readonly
|
||
263C67E0000
|
unkown
|
page readonly
|
||
BC5CA7C000
|
unkown
|
page read and write
|
||
7FF5D6474000
|
unkown
|
page readonly
|
||
7FF5A495F000
|
unkown
|
page readonly
|
||
201DD23F000
|
unkown
|
page read and write
|
||
B22000
|
unkown
|
page read and write
|
||
86288FE000
|
unkown
|
page read and write
|
||
7FF5A9590000
|
unkown
|
page readonly
|
||
C6C727C000
|
unkown
|
page read and write
|
||
1D234841000
|
unkown
|
page read and write
|
||
263C683D000
|
unkown
|
page read and write
|
||
7FF5025A2000
|
unkown
|
page readonly
|
||
7FF535675000
|
unkown
|
page readonly
|
||
201DD29E000
|
unkown
|
page read and write
|
||
7FF5D62A9000
|
unkown
|
page readonly
|
||
7FF5022CE000
|
unkown
|
page readonly
|
||
A90000
|
unkown
|
page read and write
|
||
263C7002000
|
unkown
|
page read and write
|
||
237B9000000
|
unkown
|
page readonly
|
||
201D81E0000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
134F000
|
stack
|
page read and write
|
||
7FF53F1B9000
|
unkown
|
page readonly
|
||
201D8B40000
|
unkown
|
page readonly
|
||
7FF5B9EA9000
|
unkown
|
page readonly
|
||
7FF5D618E000
|
unkown
|
page readonly
|
||
263C685D000
|
unkown
|
page read and write
|
||
7FF50DEEE000
|
unkown
|
page readonly
|
||
1BA8F380000
|
heap private
|
page read and write
|
||
FABA4FF000
|
unkown
|
page read and write
|
||
7FF50DCDA000
|
unkown
|
page readonly
|
||
1CF53AF5000
|
heap private
|
page read and write
|
||
7FF534F53000
|
unkown
|
page readonly
|
||
7FF54DE8D000
|
unkown
|
page readonly
|
||
263C6770000
|
heap default
|
page read and write
|
||
118CFE49000
|
unkown
|
page read and write
|
||
1A2AFA2A000
|
unkown
|
page read and write
|
||
7FF54DE78000
|
unkown
|
page readonly
|
||
1D234874000
|
unkown
|
page read and write
|
||
B2D000
|
unkown
|
page read and write
|
||
1D234902000
|
unkown
|
page read and write
|
||
28AD6488000
|
unkown
|
page read and write
|
||
B23000
|
unkown
|
page read and write
|
||
7FF54DF89000
|
unkown
|
page readonly
|
||
6C4BEFD000
|
unkown
|
page read and write
|
||
1BA8D670000
|
unkown
|
page readonly
|
||
7FF5B9DB8000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5D7F1C000
|
unkown
|
page readonly
|
||
7FF50268E000
|
unkown
|
page readonly
|
||
1BA8D650000
|
unkown
|
page readonly
|
||
1BA8D3F0000
|
unkown
|
page read and write
|
||
2A1B5D60000
|
unkown
|
page readonly
|
||
201DD1F0000
|
unkown
|
page readonly
|
||
1A6931E0000
|
unkown
|
page readonly
|
||
1CF53870000
|
heap default
|
page read and write
|
||
1DAF0ED5000
|
heap private
|
page read and write
|
||
1D234800000
|
unkown
|
page read and write
|
||
6C4BDFF000
|
unkown
|
page read and write
|
||
28AD6380000
|
unkown
|
page read and write
|
||
7FF5A467D000
|
unkown
|
page readonly
|
||
1DAF0BB0000
|
unkown
|
page read and write
|
||
201DD0C0000
|
unkown
|
page read and write
|
||
201D7A74000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
1D23485A000
|
unkown
|
page read and write
|
||
7FF5B9E2C000
|
unkown
|
page readonly
|
||
201DD460000
|
unkown
|
page readonly
|
||
7FF5D63E6000
|
unkown
|
page readonly
|
||
1C963740000
|
unkown
|
page readonly
|
||
118CFE5A000
|
unkown
|
page read and write
|
||
201DD150000
|
unkown
|
page readonly
|
||
201DD150000
|
unkown
|
page read and write
|
||
7FF5023C7000
|
unkown
|
page readonly
|
||
7FF53F109000
|
unkown
|
page readonly
|
||
1BA8D6E0000
|
heap private
|
page read and write
|
||
9AD20FF000
|
unkown
|
page read and write
|
||
562A67C000
|
unkown
|
page read and write
|
||
7FF502616000
|
unkown
|
page readonly
|
||
36267F000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5B9EA9000
|
unkown
|
page readonly
|
||
118CFE4A000
|
unkown
|
page read and write
|
||
118CFE3D000
|
unkown
|
page read and write
|
||
263C6900000
|
unkown
|
page read and write
|
||
1D234865000
|
unkown
|
page read and write
|
||
7FF5D6298000
|
unkown
|
page readonly
|
||
7FF53502C000
|
unkown
|
page readonly
|
||
31D90FF000
|
unkown
|
page read and write
|
||
201DD140000
|
unkown
|
page read and write
|
||
7FF5A4922000
|
unkown
|
page readonly
|
||
7FF54DCB4000
|
unkown
|
page readonly
|
||
118D0390000
|
unkown
|
page readonly
|
||
263C7135000
|
unkown
|
page read and write
|
||
263C7162000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5352DB000
|
unkown
|
page readonly
|
||
201D7930000
|
heap private
|
page read and write
|
||
7FF5D7F26000
|
unkown
|
page readonly
|
||
7FF5356E1000
|
unkown
|
page readonly
|
||
7FF5D7EE5000
|
unkown
|
page readonly
|
||
7FF502547000
|
unkown
|
page readonly
|
||
5D33B7E000
|
unkown
|
page read and write
|
||
7FF5025A8000
|
unkown
|
page readonly
|
||
7FF5775F7000
|
unkown
|
page readonly
|
||
1D235002000
|
unkown
|
page read and write
|
||
7FF5352E7000
|
unkown
|
page readonly
|
||
237B867C000
|
unkown
|
page read and write
|
||
201D8B50000
|
unkown
|
page readonly
|
||
562A97B000
|
unkown
|
page read and write
|
||
114F000
|
stack
|
page read and write
|
||
7FF5D7FA9000
|
unkown
|
page readonly
|
||
7FF5351D8000
|
unkown
|
page readonly
|
||
28AD6D00000
|
unkown
|
page read and write
|
||
C6C74FE000
|
unkown
|
page read and write
|
||
263C7100000
|
unkown
|
page read and write
|
||
7FF5D6465000
|
unkown
|
page readonly
|
||
7FF577696000
|
unkown
|
page readonly
|
||
1D234E80000
|
unkown
|
page read and write
|
||
7FF5B9DBA000
|
unkown
|
page readonly
|
||
7FF5776B0000
|
unkown
|
page readonly
|
||
7FF53519F000
|
unkown
|
page readonly
|
||
1CF53990000
|
unkown
|
page read and write
|
||
7FF53568D000
|
unkown
|
page readonly
|
||
7FF5A9250000
|
unkown
|
page readonly
|
||
7FF54DEF1000
|
unkown
|
page readonly
|
||
6C4B8FF000
|
unkown
|
page read and write
|
||
263C6790000
|
unkown
|
page readonly
|
||
7FF5353A5000
|
unkown
|
page readonly
|
||
7FF53517E000
|
unkown
|
page readonly
|
||
28AD6451000
|
unkown
|
page read and write
|
||
7FF53F13C000
|
unkown
|
page readonly
|
||
201D8B20000
|
unkown
|
page readonly
|
||
7FF534F55000
|
unkown
|
page readonly
|
||
1A693180000
|
unkown
|
page readonly
|
||
B10000
|
heap default
|
page read and write
|
||
237B8C60000
|
unkown
|
page readonly
|
||
B68000
|
unkown
|
page read and write
|
||
7FF5D640E000
|
unkown
|
page readonly
|
||
201DCEF0000
|
unkown
|
page read and write
|
||
1D234A00000
|
unkown
|
page readonly
|
||
7FF535651000
|
unkown
|
page readonly
|
||
237B8550000
|
unkown
|
page readonly
|
||
2A1B5E02000
|
unkown
|
page read and write
|
||
1D234840000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
263C7169000
|
unkown
|
page read and write
|
||
30D6E7E000
|
unkown
|
page read and write
|
||
3624FE000
|
unkown
|
page read and write
|
||
31D8F7F000
|
unkown
|
page read and write
|
||
379F000
|
stack
|
page read and write
|
||
1A2AF9C0000
|
unkown
|
page read and write
|
||
7FF502592000
|
unkown
|
page readonly
|
||
862857B000
|
unkown
|
page read and write
|
||
1D23483D000
|
unkown
|
page read and write
|
||
1BA8D390000
|
unkown
|
page readonly
|
||
7FF5A9637000
|
unkown
|
page readonly
|
||
263C682A000
|
unkown
|
page read and write
|
||
1A693445000
|
heap private
|
page read and write
|
||
7FF535158000
|
unkown
|
page readonly
|
||
7FF5D7F2C000
|
unkown
|
page readonly
|
||
201DD2AD000
|
unkown
|
page read and write
|
||
7FF54DF27000
|
unkown
|
page readonly
|
||
7FF50DFAE000
|
unkown
|
page readonly
|
||
201D7A76000
|
unkown
|
page read and write
|
||
7FF5D625F000
|
unkown
|
page readonly
|
||
7FF5352FC000
|
unkown
|
page readonly
|
||
A4E000
|
unkown
|
page read and write
|
||
7FF5D63FA000
|
unkown
|
page readonly
|
||
7FF50254A000
|
unkown
|
page readonly
|
||
237B84E0000
|
heap private
|
page read and write
|
||
118CFC00000
|
heap private
|
page read and write
|
||
7FF57749F000
|
unkown
|
page readonly
|
||
7FF5A479F000
|
unkown
|
page readonly
|
||
263C6913000
|
unkown
|
page read and write
|
||
7FF57767D000
|
unkown
|
page readonly
|
||
7FF54DAF2000
|
unkown
|
page readonly
|
||
1CF53790000
|
unkown
|
page readonly
|
||
562A87F000
|
unkown
|
page read and write
|
||
7FF57769C000
|
unkown
|
page readonly
|
||
7FF535386000
|
unkown
|
page readonly
|
||
6C4BAFE000
|
unkown
|
page read and write
|
||
7FF534B91000
|
unkown
|
page readonly
|
||
118CFF00000
|
unkown
|
page read and write
|
||
118CFF13000
|
unkown
|
page read and write
|
||
237B8657000
|
unkown
|
page read and write
|
||
7FF5A47E9000
|
unkown
|
page readonly
|
||
BC5D0FB000
|
unkown
|
page read and write
|
||
1BA8D437000
|
heap default
|
page read and write
|
||
7FF5775A5000
|
unkown
|
page readonly
|
||
201DD150000
|
unkown
|
page read and write
|
||
1D234868000
|
unkown
|
page read and write
|
||
237B8702000
|
unkown
|
page read and write
|
||
1D23486D000
|
unkown
|
page read and write
|
||
201D7A6C000
|
unkown
|
page read and write
|
||
201D8300000
|
unkown
|
page read and write
|
||
6C4BD7A000
|
unkown
|
page read and write
|
||
C6C72FE000
|
unkown
|
page read and write
|
||
1D23483A000
|
unkown
|
page read and write
|
||
7FF577253000
|
unkown
|
page readonly
|
||
7FF5A4926000
|
unkown
|
page readonly
|
||
1A6933E0000
|
unkown
|
page read and write
|
||
7FF53564D000
|
unkown
|
page readonly
|
||
1D234857000
|
unkown
|
page read and write
|
||
2A1B5E40000
|
unkown
|
page read and write
|
||
7FF577597000
|
unkown
|
page readonly
|
||
7FF5A9253000
|
unkown
|
page readonly
|
||
7FF535312000
|
unkown
|
page readonly
|
||
2A1B6000000
|
unkown
|
page readonly
|
||
263C7137000
|
unkown
|
page read and write
|
||
AEE000
|
unkown
|
page read and write
|
||
7FF54DD28000
|
unkown
|
page readonly
|
||
2A1B5D70000
|
unkown
|
page read and write
|
||
7FF5D6278000
|
unkown
|
page readonly
|
||
7FF5353B0000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
1D234831000
|
unkown
|
page read and write
|
||
1A6932B0000
|
unkown
|
page read and write
|
||
7FF53535F000
|
unkown
|
page readonly
|
||
7FF535355000
|
unkown
|
page readonly
|
||
7FF5A9264000
|
unkown
|
page readonly
|
||
7FF53F0F5000
|
unkown
|
page readonly
|
||
7FF5D6477000
|
unkown
|
page readonly
|
||
7FF5A4827000
|
unkown
|
page readonly
|
||
1C963276000
|
heap default
|
page read and write
|
||
8628A7E000
|
unkown
|
page read and write
|
||
1D23484E000
|
unkown
|
page read and write
|
||
7FF53561E000
|
unkown
|
page readonly
|
||
1D234E70000
|
unkown
|
page readonly
|
||
7FF5A4969000
|
unkown
|
page readonly
|
||
263C6710000
|
heap private
|
page read and write
|
||
7FF50DF3C000
|
unkown
|
page readonly
|
||
7FF502690000
|
unkown
|
page readonly
|
||
1D23487B000
|
unkown
|
page read and write
|
||
14C0000
|
unkown
|
page readonly
|
||
7FF50D70C000
|
unkown
|
page readonly
|
||
201D8318000
|
unkown
|
page read and write
|
||
7FF50DF1D000
|
unkown
|
page readonly
|
||
13CE000
|
unkown
|
page read and write
|
||
263C710E000
|
unkown
|
page read and write
|
||
1D23485F000
|
unkown
|
page read and write
|
||
7FF577610000
|
unkown
|
page readonly
|
||
7FF54DEBE000
|
unkown
|
page readonly
|
||
263C7113000
|
unkown
|
page read and write
|
||
7FF5775FC000
|
unkown
|
page readonly
|
||
BC5CF7C000
|
unkown
|
page read and write
|
||
8628CFF000
|
unkown
|
page read and write
|
||
8628B7E000
|
unkown
|
page read and write
|
||
C6C757F000
|
unkown
|
page read and write
|
||
7E006F591000
|
unkown
|
page readonly
|
||
7FF50257C000
|
unkown
|
page readonly
|
||
201D7A13000
|
unkown
|
page read and write
|
||
BC5D4FF000
|
unkown
|
page read and write
|
||
1D23486B000
|
unkown
|
page read and write
|
||
1C963270000
|
heap default
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5D7F35000
|
unkown
|
page readonly
|
||
1A2AFA02000
|
unkown
|
page read and write
|
||
C6C747B000
|
unkown
|
page read and write
|
||
7FF5A9567000
|
unkown
|
page readonly
|
||
201DD1A0000
|
unkown
|
page readonly
|
||
7FF5A4996000
|
unkown
|
page readonly
|
||
7FF54DE15000
|
unkown
|
page readonly
|
||
7FF534C55000
|
unkown
|
page readonly
|
||
7CBE7C000
|
unkown
|
page read and write
|
||
1CF53970000
|
unkown
|
page read and write
|
||
1DAF0BF0000
|
unkown
|
page readonly
|
||
28AD6C02000
|
unkown
|
page read and write
|
||
7FF502606000
|
unkown
|
page readonly
|
||
118CFDF0000
|
unkown
|
page read and write
|
||
7FF502537000
|
unkown
|
page readonly
|
||
201DD400000
|
unkown
|
page readonly
|
||
2A1B5C80000
|
unkown
|
page readonly
|
||
C6C7779000
|
unkown
|
page read and write
|
||
7FF5A9601000
|
unkown
|
page readonly
|
||
7FF5D60A8000
|
unkown
|
page readonly
|
||
118CFE02000
|
unkown
|
page read and write
|
||
1A2AF990000
|
heap default
|
page read and write
|
||
7FF5A49B4000
|
unkown
|
page readonly
|
||
201DD0E4000
|
unkown
|
page readonly
|
||
B6A000
|
unkown
|
page read and write
|
||
201DD288000
|
unkown
|
page read and write
|
||
6C4BB7F000
|
unkown
|
page read and write
|
||
7FF5D7F9E000
|
unkown
|
page readonly
|
||
7FF54DEFC000
|
unkown
|
page readonly
|
||
36247F000
|
unkown
|
page read and write
|
||
7FF535687000
|
unkown
|
page readonly
|
||
7FF5355FA000
|
unkown
|
page readonly
|
||
7FF5A422B000
|
unkown
|
page readonly
|
||
263C712E000
|
unkown
|
page read and write
|
||
2A1B6602000
|
unkown
|
page read and write
|
||
C58000
|
heap default
|
page read and write
|
||
118CFE67000
|
unkown
|
page read and write
|
||
28AD6290000
|
unkown
|
page readonly
|
||
1A2B0060000
|
unkown
|
page readonly
|
||
7FF5351E9000
|
unkown
|
page readonly
|
||
A8E000
|
unkown
|
page read and write
|
||
7FF5352F3000
|
unkown
|
page readonly
|
||
7FF5D64D9000
|
unkown
|
page readonly
|
||
1BA8EE90000
|
unkown
|
page readonly
|
||
7FF5A4A0E000
|
unkown
|
page readonly
|
||
237B8540000
|
heap default
|
page read and write
|
||
31D8FFF000
|
unkown
|
page read and write
|
||
7FF5B9DF9000
|
unkown
|
page readonly
|
||
7FF535308000
|
unkown
|
page readonly
|
||
7FF5A46D5000
|
unkown
|
page readonly
|
||
201D8215000
|
unkown
|
page read and write
|
||
7FF535656000
|
unkown
|
page readonly
|
||
7FF53558A000
|
unkown
|
page readonly
|
||
7FF535594000
|
unkown
|
page readonly
|
||
7FF53536C000
|
unkown
|
page readonly
|
||
7FF5D61A0000
|
unkown
|
page readonly
|
||
201DD100000
|
unkown
|
page read and write
|
||
1BA8D600000
|
unkown
|
page readonly
|
||
7FF5A95CE000
|
unkown
|
page readonly
|
||
7FF5D64D9000
|
unkown
|
page readonly
|
||
28AD64BA000
|
unkown
|
page read and write
|
||
118CFE00000
|
unkown
|
page read and write
|
||
7FF5351E0000
|
unkown
|
page readonly
|
||
237B8713000
|
unkown
|
page read and write
|
||
201D8E90000
|
unkown
|
page read and write
|
||
7FF54DF06000
|
unkown
|
page readonly
|
||
1BA8D6C0000
|
heap private
|
page read and write
|
||
2A1B5E71000
|
unkown
|
page read and write
|
||
5D3387C000
|
unkown
|
page read and write
|
||
7FF5353B4000
|
unkown
|
page readonly
|
||
201DD2B2000
|
unkown
|
page read and write
|
||
7FF5A499C000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
28AD64C2000
|
unkown
|
page read and write
|
||
7FF53558E000
|
unkown
|
page readonly
|
||
8DD9C7D000
|
unkown
|
page read and write
|
||
7FF5A494E000
|
unkown
|
page readonly
|
||
201D79D0000
|
unkown
|
page read and write
|
||
1BA8D41E000
|
heap default
|
page read and write
|
||
7FF5D6195000
|
unkown
|
page readonly
|
||
7FF5D623E000
|
unkown
|
page readonly
|
||
263C7164000
|
unkown
|
page read and write
|
||
28AD6990000
|
unkown
|
page readonly
|
||
2A1B6800000
|
unkown
|
page readonly
|
||
6C4BBFF000
|
unkown
|
page read and write
|
||
7FF5A4A11000
|
unkown
|
page readonly
|
||
7FF54DD97000
|
unkown
|
page readonly
|
||
201DD0E0000
|
unkown
|
page write copy
|
||
1A2B0202000
|
unkown
|
page read and write
|
||
263C7000000
|
unkown
|
page read and write
|
||
7FF5AF191000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5A95D5000
|
unkown
|
page readonly
|
||
B60000
|
unkown
|
page read and write
|
||
263C7148000
|
unkown
|
page read and write
|
||
7FF535680000
|
unkown
|
page readonly
|
||
6C4B6FD000
|
unkown
|
page read and write
|
||
118CFF02000
|
unkown
|
page read and write
|
||
7FF53F11E000
|
unkown
|
page readonly
|
||
7FF5AF18E000
|
unkown
|
page readonly
|
||
118D0000000
|
unkown
|
page readonly
|
||
3625FF000
|
unkown
|
page read and write
|
||
201D8060000
|
unkown
|
page readonly
|
||
7FF5A48A5000
|
unkown
|
page readonly
|
||
7FF5D6446000
|
unkown
|
page readonly
|
||
7FF53F12C000
|
unkown
|
page readonly
|
||
7FF5AF106000
|
unkown
|
page readonly
|
||
118CFE59000
|
unkown
|
page read and write
|
||
8DD9DFE000
|
unkown
|
page read and write
|
||
28AD6370000
|
unkown
|
page readonly
|
||
7FF54DE96000
|
unkown
|
page readonly
|
||
7FF53F0CA000
|
unkown
|
page readonly
|
||
118CFF18000
|
unkown
|
page read and write
|
||
7FF54DE5A000
|
unkown
|
page readonly
|
||
7FF5B9E1C000
|
unkown
|
page readonly
|
||
263C6832000
|
unkown
|
page read and write
|
||
1A2AF9F0000
|
unkown
|
page read and write
|
||
201D8200000
|
unkown
|
page read and write
|
||
7FF53537D000
|
unkown
|
page readonly
|
||
7FF5A960C000
|
unkown
|
page readonly
|
||
7FF5D7F16000
|
unkown
|
page readonly
|
||
2BD000
|
unkown
|
page read and write
|
||
28AD6513000
|
unkown
|
page read and write
|
||
1A2AFA13000
|
unkown
|
page read and write
|
||
30D6CFE000
|
unkown
|
page read and write
|
||
7FF577073000
|
unkown
|
page readonly
|
||
1A2AFA00000
|
unkown
|
page read and write
|
||
7FF5350D5000
|
unkown
|
page readonly
|
||
7FF534DB2000
|
unkown
|
page readonly
|
||
7FF54DF7E000
|
unkown
|
page readonly
|
||
C50000
|
heap default
|
page read and write
|
||
1D234863000
|
unkown
|
page read and write
|
||
28AD6413000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
1BA8F2AF000
|
heap private
|
page read and write
|
||
9AD217F000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
201DD263000
|
unkown
|
page read and write
|
||
319F000
|
stack
|
page read and write
|
||
263C7167000
|
unkown
|
page read and write
|
||
C8C000
|
heap default
|
page read and write
|
||
359F000
|
stack
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
201D81C1000
|
unkown
|
page read and write
|
||
201DD150000
|
unkown
|
page read and write
|
||
28AD6400000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF50DF54000
|
unkown
|
page readonly
|
||
201D7AB7000
|
unkown
|
page read and write
|
||
118CFE86000
|
unkown
|
page read and write
|
||
2A1B5E6C000
|
unkown
|
page read and write
|
||
7FF5351BE000
|
unkown
|
page readonly
|
||
7FF5A47B8000
|
unkown
|
page readonly
|
||
7FF535419000
|
unkown
|
page readonly
|
||
263C7148000
|
unkown
|
page read and write
|
||
7FF5A9592000
|
unkown
|
page readonly
|
||
7FF50DF45000
|
unkown
|
page readonly
|
||
118D17A0000
|
unkown
|
page read and write
|
||
B2D000
|
unkown
|
page read and write
|
||
7FF53509C000
|
unkown
|
page readonly
|
||
6C4BC7F000
|
unkown
|
page read and write
|
||
7FF5D63C8000
|
unkown
|
page readonly
|
||
7FF54DF24000
|
unkown
|
page readonly
|
||
7CBD7F000
|
unkown
|
page read and write
|
||
7FF5A4765000
|
unkown
|
page readonly
|
||
7FF54DBD6000
|
unkown
|
page readonly
|
||
118CFD80000
|
unkown
|
page read and write
|
||
1D234720000
|
heap default
|
page read and write
|
||
FAB9F3B000
|
unkown
|
page read and write
|
||
7FF50246A000
|
unkown
|
page readonly
|
||
7FF5A955B000
|
unkown
|
page readonly
|
||
1C963170000
|
unkown
|
page readonly
|
||
7FF50DF2C000
|
unkown
|
page readonly
|
||
7FF534C31000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
31D8E7A000
|
unkown
|
page read and write
|
||
201D8318000
|
unkown
|
page read and write
|
||
C6C797E000
|
unkown
|
page read and write
|
||
7FF5025FD000
|
unkown
|
page readonly
|
||
7FF5AF10C000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5352C7000
|
unkown
|
page readonly
|
||
7FF50DFB1000
|
unkown
|
page readonly
|
||
201D7AF9000
|
unkown
|
page read and write
|
||
263C7134000
|
unkown
|
page read and write
|
||
201D8B10000
|
unkown
|
page readonly
|
||
7FF54DBBE000
|
unkown
|
page readonly
|
||
6C4B9FB000
|
unkown
|
page read and write
|
||
201DD0CC000
|
unkown
|
page write copy
|
||
5D33AFF000
|
unkown
|
page read and write
|
||
7FF5356E9000
|
unkown
|
page readonly
|
||
7FF535684000
|
unkown
|
page readonly
|
||
118CFE60000
|
unkown
|
page read and write
|
||
263C687C000
|
unkown
|
page read and write
|
||
263C68AD000
|
unkown
|
page read and write
|
||
C6C7A7B000
|
unkown
|
page read and write
|
||
7FF57761D000
|
unkown
|
page readonly
|
||
201D8B00000
|
unkown
|
page readonly
|
||
118D1A40000
|
unkown
|
page readonly
|
||
1A6932E0000
|
heap default
|
page read and write
|
||
1D23487D000
|
unkown
|
page read and write
|
||
1D234842000
|
unkown
|
page read and write
|
||
118CFC60000
|
heap default
|
page read and write
|
||
7FF50DFB9000
|
unkown
|
page readonly
|
||
7FF535692000
|
unkown
|
page readonly
|
||
7FF5A9257000
|
unkown
|
page readonly
|
||
2A1B5E13000
|
unkown
|
page read and write
|
||
7FF5B9E16000
|
unkown
|
page readonly
|
||
201DD190000
|
unkown
|
page readonly
|
||
7FF54DDA0000
|
unkown
|
page readonly
|
||
1A2AF9F0000
|
unkown
|
page read and write
|
||
118CFDF0000
|
unkown
|
page read and write
|
||
7FF5352F7000
|
unkown
|
page readonly
|
||
140E000
|
unkown
|
page read and write
|
||
263C6893000
|
unkown
|
page read and write
|
||
263C6800000
|
unkown
|
page read and write
|
||
118CFD50000
|
unkown
|
page readonly
|
||
7FF5AF199000
|
unkown
|
page readonly
|
||
7FF5021D5000
|
unkown
|
page readonly
|
||
118CFE2A000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF502400000
|
unkown
|
page readonly
|
||
1BA8D610000
|
unkown
|
page readonly
|
||
201DD020000
|
unkown
|
page read and write
|
||
7FF5776B4000
|
unkown
|
page readonly
|
||
1D234730000
|
unkown
|
page readonly
|
||
201DD030000
|
unkown
|
page read and write
|
||
201D7A3D000
|
unkown
|
page read and write
|
||
862897E000
|
unkown
|
page read and write
|
||
1A2AF9A0000
|
unkown
|
page readonly
|
||
263C7177000
|
unkown
|
page read and write
|
||
1A2AFA5C000
|
unkown
|
page read and write
|
||
7FF57744C000
|
unkown
|
page readonly
|
||
B26000
|
unkown
|
page read and write
|
||
201DCFF0000
|
unkown
|
page read and write
|
||
7FF5A4555000
|
unkown
|
page readonly
|
||
8DD9CFC000
|
unkown
|
page read and write
|
||
BC5D3FC000
|
unkown
|
page read and write
|
||
7FF53513B000
|
unkown
|
page readonly
|
||
7FF5D6456000
|
unkown
|
page readonly
|
||
237B8600000
|
unkown
|
page read and write
|
||
7FF5AE9CC000
|
unkown
|
page readonly
|
||
7FF50DF50000
|
unkown
|
page readonly
|
||
B16000
|
heap default
|
page read and write
|
||
7FF535310000
|
unkown
|
page readonly
|
||
7FF54DEC5000
|
unkown
|
page readonly
|
||
1D234837000
|
unkown
|
page read and write
|
||
7FF5AF0A8000
|
unkown
|
page readonly
|
||
201DD011000
|
unkown
|
page read and write
|
||
201D7B13000
|
unkown
|
page read and write
|
||
7FF535410000
|
unkown
|
page readonly
|
||
7FF54DEF6000
|
unkown
|
page readonly
|
||
30D707E000
|
unkown
|
page read and write
|
||
1D23485C000
|
unkown
|
page read and write
|
||
7FF5774B8000
|
unkown
|
page readonly
|
||
1BA8D510000
|
unkown
|
page readonly
|
||
BC5D1FC000
|
unkown
|
page read and write
|
||
201D7CD0000
|
unkown
|
page readonly
|
||
1A6932EB000
|
heap default
|
page read and write
|
||
FABA7FD000
|
unkown
|
page read and write
|
||
7FF5355E0000
|
unkown
|
page readonly
|
||
7FF53F1AE000
|
unkown
|
page readonly
|
||
FABA6FF000
|
unkown
|
page read and write
|
||
118D1D80000
|
unkown
|
page write copy
|
||
7CC17C000
|
unkown
|
page read and write
|
||
201DD215000
|
unkown
|
page read and write
|
||
7FF534B87000
|
unkown
|
page readonly
|
||
7FF5D63BC000
|
unkown
|
page readonly
|
||
7FF54DF15000
|
unkown
|
page readonly
|
||
7FF5A968E000
|
unkown
|
page readonly
|
||
7FF53538C000
|
unkown
|
page readonly
|
||
7FF5A95A8000
|
unkown
|
page readonly
|
||
1BA8D417000
|
heap default
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5A9691000
|
unkown
|
page readonly
|
||
263C7171000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF54DF0C000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
263C6E60000
|
unkown
|
page readonly
|
||
7FF54DE92000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5D63E2000
|
unkown
|
page readonly
|
||
28AD64CB000
|
unkown
|
page read and write
|
||
1C963240000
|
unkown
|
page read and write
|
||
7FF5D64D1000
|
unkown
|
page readonly
|
||
7FF534FAE000
|
unkown
|
page readonly
|
||
1D234849000
|
unkown
|
page read and write
|
||
1DAF0ED0000
|
heap private
|
page read and write
|
||
7FF577719000
|
unkown
|
page readonly
|
||
237B863C000
|
unkown
|
page read and write
|
||
7FF54DED9000
|
unkown
|
page readonly
|
||
1D23486A000
|
unkown
|
page read and write
|
||
28AD6A60000
|
unkown
|
page write copy
|
||
7FF50DF26000
|
unkown
|
page readonly
|
||
7FF5AF11C000
|
unkown
|
page readonly
|
||
7FF5D7EF9000
|
unkown
|
page readonly
|
||
7FF5350E0000
|
unkown
|
page readonly
|
||
1DAF0C06000
|
heap default
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
263C7171000
|
unkown
|
page read and write
|
||
1A2AFA55000
|
unkown
|
page read and write
|
||
7FF5D7EBA000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
1D234813000
|
unkown
|
page read and write
|
||
9CC000
|
stack
|
page read and write
|
||
201D7A2A000
|
unkown
|
page read and write
|
||
BC5CC7C000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
201DCEE0000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5351CC000
|
unkown
|
page readonly
|
||
BC5D07E000
|
unkown
|
page read and write
|
||
7FF502699000
|
unkown
|
page readonly
|
||
7FF5A416E000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
2A1B5E2A000
|
unkown
|
page read and write
|
||
118CFC70000
|
unkown
|
page readonly
|
||
7FF5356DE000
|
unkown
|
page readonly
|
||
1D234864000
|
unkown
|
page read and write
|
||
7FF577669000
|
unkown
|
page readonly
|
||
7FF5355F6000
|
unkown
|
page readonly
|
||
B2D000
|
unkown
|
page read and write
|
||
201D79B0000
|
unkown
|
page readonly
|
||
201DD2AD000
|
unkown
|
page read and write
|
||
7FF5A95A2000
|
unkown
|
page readonly
|
||
263C7165000
|
unkown
|
page read and write
|
||
237B8E02000
|
unkown
|
page read and write
|
||
118CFE8B000
|
unkown
|
page read and write
|
||
7FF54DEED000
|
unkown
|
page readonly
|
||
201DD120000
|
unkown
|
page read and write
|
||
7FF5A49A5000
|
unkown
|
page readonly
|
||
7FF5356E9000
|
unkown
|
page readonly
|
||
7FF50DF36000
|
unkown
|
page readonly
|
||
7FF53F045000
|
unkown
|
page readonly
|
||
201D7AA8000
|
unkown
|
page read and write
|
||
7FF5B9E35000
|
unkown
|
page readonly
|
||
1E0000
|
unkown
|
page readonly
|
||
2A1B5E76000
|
unkown
|
page read and write
|
||
7FF57764E000
|
unkown
|
page readonly
|
||
7FF50DF57000
|
unkown
|
page readonly
|
||
1BA8DA80000
|
unkown
|
page readonly
|
||
7FF5D644C000
|
unkown
|
page readonly
|
||
7CB9FE000
|
unkown
|
page read and write
|
||
7FF53534E000
|
unkown
|
page readonly
|
||
7FF5AF199000
|
unkown
|
page readonly
|
||
1C963390000
|
unkown
|
page read and write
|
||
7FF5A49B7000
|
unkown
|
page readonly
|
||
7FF5D64CE000
|
unkown
|
page readonly
|
||
1C963370000
|
unkown
|
page readonly
|
||
7FF5AF0E9000
|
unkown
|
page readonly
|
||
201D7B02000
|
unkown
|
page read and write
|
||
118CFF1C000
|
unkown
|
page read and write
|
||
7FF5A9616000
|
unkown
|
page readonly
|
||
7FF502590000
|
unkown
|
page readonly
|
||
201D8AF0000
|
unkown
|
page readonly
|
||
7FF5B9DDE000
|
unkown
|
page readonly
|
||
7FF5A45BD000
|
unkown
|
page readonly
|
||
201D8313000
|
unkown
|
page read and write
|
||
118CFE13000
|
unkown
|
page read and write
|
||
1A2B0400000
|
unkown
|
page read and write
|
||
100000
|
unkown
|
page readonly
|
||
7FF5350C7000
|
unkown
|
page readonly
|
||
7FF5D6013000
|
unkown
|
page readonly
|
||
7FF57765F000
|
unkown
|
page readonly
|
||
7FF577655000
|
unkown
|
page readonly
|
||
2A1B5E66000
|
unkown
|
page read and write
|
||
7FF54DB71000
|
unkown
|
page readonly
|
||
28AD6AB0000
|
unkown
|
page readonly
|
||
201DD020000
|
unkown
|
page read and write
|
||
7FF577628000
|
unkown
|
page readonly
|
||
237B8570000
|
unkown
|
page read and write
|
||
7FF5772E8000
|
unkown
|
page readonly
|
||
7FF5A4740000
|
unkown
|
page readonly
|
||
201D7C00000
|
unkown
|
page readonly
|
||
7FF54DE6C000
|
unkown
|
page readonly
|
||
7FF53501D000
|
unkown
|
page readonly
|
||
C91000
|
heap default
|
page read and write
|
||
1C96327E000
|
heap default
|
page read and write
|
||
263C710E000
|
unkown
|
page read and write
|
||
9AD1D8F000
|
unkown
|
page read and write
|
||
7FF50DEFF000
|
unkown
|
page readonly
|
||
7FF5D7EDE000
|
unkown
|
page readonly
|
||
263C7177000
|
unkown
|
page read and write
|
||
7FF5355F8000
|
unkown
|
page readonly
|
||
2A1B5F02000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
1D234862000
|
unkown
|
page read and write
|
||
7FF535328000
|
unkown
|
page readonly
|
||
7FF53539C000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
263C6AD0000
|
unkown
|
page readonly
|
||
7FF577612000
|
unkown
|
page readonly
|
||
7FF54DF89000
|
unkown
|
page readonly
|
||
C6C787E000
|
unkown
|
page read and write
|
||
263C6780000
|
unkown
|
page readonly
|
||
6C4C0FE000
|
unkown
|
page read and write
|
||
7FF5A4910000
|
unkown
|
page readonly
|
||
263C6832000
|
unkown
|
page read and write
|
||
7FF5AF125000
|
unkown
|
page readonly
|
||
201D8359000
|
unkown
|
page read and write
|
||
28AD6280000
|
heap default
|
page read and write
|
||
A0E000
|
unkown
|
page read and write
|
||
2A1B5E5A000
|
unkown
|
page read and write
|
||
7FF5352D1000
|
unkown
|
page readonly
|
||
FABABFE000
|
unkown
|
page read and write
|
||
7FF54DB62000
|
unkown
|
page readonly
|
||
7FF5A47DA000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
2C60000
|
unkown
|
page readonly
|
||
7FF5A941F000
|
unkown
|
page readonly
|
||
201D7A71000
|
unkown
|
page read and write
|
||
201D8359000
|
unkown
|
page read and write
|
||
1A2AFB02000
|
unkown
|
page read and write
|
||
2A1B6390000
|
unkown
|
page readonly
|
||
7FF5A4986000
|
unkown
|
page readonly
|
||
3626FE000
|
unkown
|
page read and write
|
||
7FF5D7F42000
|
unkown
|
page readonly
|
||
B20000
|
unkown
|
page read and write
|
||
1F0000
|
unkown
|
page read and write
|
||
7FF535026000
|
unkown
|
page readonly
|
||
201DCFF8000
|
unkown
|
page read and write
|
||
201D79A0000
|
unkown
|
page readonly
|
||
7FF5AF0AA000
|
unkown
|
page readonly
|
||
1C963380000
|
heap private
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
1DAF0BD0000
|
unkown
|
page read and write
|
||
7FF53F0C8000
|
unkown
|
page readonly
|
||
14B6000
|
heap private
|
page read and write
|
||
7FF5776A5000
|
unkown
|
page readonly
|
||
7FF5A4928000
|
unkown
|
page readonly
|
||
7FF54DDAC000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF534ECE000
|
unkown
|
page readonly
|
||
7FF53514C000
|
unkown
|
page readonly
|
||
5D338FE000
|
unkown
|
page read and write
|
||
201D7A86000
|
unkown
|
page read and write
|
||
6C4B577000
|
unkown
|
page read and write
|
||
7FF50DEDA000
|
unkown
|
page readonly
|
||
7FF53533A000
|
unkown
|
page readonly
|
||
1A693440000
|
heap private
|
page read and write
|
||
8628DFD000
|
unkown
|
page read and write
|
||
201DD014000
|
unkown
|
page read and write
|
||
201DD200000
|
unkown
|
page read and write
|
||
7FF535369000
|
unkown
|
page readonly
|
||
118CFE5A000
|
unkown
|
page read and write
|
||
118D17F0000
|
unkown
|
page readonly
|
||
7FF5D63D0000
|
unkown
|
page readonly
|
||
7FF5A9634000
|
unkown
|
page readonly
|
||
263C7177000
|
unkown
|
page read and write
|
||
2A1B5E00000
|
unkown
|
page read and write
|
||
7FF5A4A19000
|
unkown
|
page readonly
|
||
1DAF0C00000
|
heap default
|
page read and write
|
||
7FF5D5C38000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF5D643D000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
1D0000
|
unkown
|
page read and write
|
||
1D234859000
|
unkown
|
page read and write
|
||
7FF5A4912000
|
unkown
|
page readonly
|
||
7CC07E000
|
unkown
|
page read and write
|
||
201DD22D000
|
unkown
|
page read and write
|
||
1BA8D410000
|
heap default
|
page read and write
|
||
263C7151000
|
unkown
|
page read and write
|
||
7FF57768C000
|
unkown
|
page readonly
|
||
7FF577626000
|
unkown
|
page readonly
|
||
7FF535381000
|
unkown
|
page readonly
|
||
7FF5A95E9000
|
unkown
|
page readonly
|
||
7FF535419000
|
unkown
|
page readonly
|
||
1A2AF930000
|
heap private
|
page read and write
|
||
BC5CDFE000
|
unkown
|
page read and write
|
||
201D8B30000
|
unkown
|
page readonly
|
||
28AD6502000
|
unkown
|
page read and write
|
||
7FF5021D1000
|
unkown
|
page readonly
|
||
C6C767C000
|
unkown
|
page read and write
|
||
7FF5025D5000
|
unkown
|
page readonly
|
||
28AD6220000
|
heap private
|
page read and write
|
||
2A1B5F13000
|
unkown
|
page read and write
|
||
7FF535666000
|
unkown
|
page readonly
|
||
7FF534F51000
|
unkown
|
page readonly
|
||
3350000
|
heap private
|
page read and write
|
||
201DD0FC000
|
unkown
|
page readonly
|
||
1C9633B0000
|
unkown
|
page readonly
|
||
30D6C7E000
|
unkown
|
page read and write
|
||
1BA8D6F0000
|
unkown
|
page readonly
|
||
7FF5D6187000
|
unkown
|
page readonly
|
||
7FF54DB5F000
|
unkown
|
page readonly
|
||
201DD110000
|
unkown
|
page read and write
|
||
86289FF000
|
unkown
|
page read and write
|
||
1BA8F1B0000
|
heap private
|
page read and write
|
||
1A2AFCD0000
|
unkown
|
page readonly
|
||
263C686F000
|
unkown
|
page read and write
|
||
7FF54DD0F000
|
unkown
|
page readonly
|
||
263C716F000
|
unkown
|
page read and write
|
||
263C716F000
|
unkown
|
page read and write
|
||
7FF50DD3F000
|
unkown
|
page readonly
|
||
201DD2AB000
|
unkown
|
page read and write
|
||
7FF54DE07000
|
unkown
|
page readonly
|
||
6C4BA7E000
|
unkown
|
page read and write
|
There are 1021 hidden memdumps, click here to show them.