Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
myResume_787.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$myResume_787.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\77C43E78-5473-430D-A2CF-3011B6265ED8
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8AFFEE0A.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1011x567,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\20B40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
'C:\Windows\System32\rundll32.exe' C:\YvfpvrE\UVqsCZG\zSdSPJb.dll,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://wus2-000.contentsync.
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://wus2-000.pagecontentsync.
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
http://209.141.51.196/Lk9tdZ
|
209.141.51.196
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://ncus-000.contentsync.
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://contentstorage.omex.office.net/addinclassifier/officeentities
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
209.141.51.196
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
&z;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'z;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A8E0
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4AE1F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B0CF
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
zi;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 49 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
21D0A151000
|
unkown
|
page read and write
|
|
|
|
7FF5CC810000
|
unkown
|
page readonly
|
|
|
|
2E9E8FC000
|
unkown
|
page read and write
|
|
|
|
21D0A161000
|
unkown
|
page read and write
|
|
|
|
21CD6213000
|
unkown
|
page read and write
|
|
|
|
21D098B1000
|
unkown
|
page read and write
|
|
|
|
21D0A14F000
|
unkown
|
page read and write
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
25649D20000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3DA000
|
unkown
|
page readonly
|
|
|
|
21CD628D000
|
unkown
|
page read and write
|
|
|
|
8F0000
|
unkown
|
page read and write
|
|
|
|
7FF53ACF9000
|
unkown
|
page readonly
|
|
|
|
7FF5CCD34000
|
unkown
|
page readonly
|
|
|
|
7FF53AF8A000
|
unkown
|
page readonly
|
|
|
|
263E000
|
unkown
|
page readonly
|
|
|
|
7FF519183000
|
unkown
|
page readonly
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
7FF56CE5B000
|
unkown
|
page readonly
|
|
|
|
7FF4EC2D1000
|
unkown
|
page readonly
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
7FF5D28B5000
|
unkown
|
page readonly
|
|
|
|
21CD68C0000
|
unkown
|
page readonly
|
|
|
|
7FF4EC44F000
|
unkown
|
page readonly
|
|
|
|
2564D082000
|
unkown
|
page read and write
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
24BBA613000
|
unkown
|
page read and write
|
|
|
|
7FF5D2D56000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D0F000
|
unkown
|
page readonly
|
|
|
|
54D047E000
|
unkown
|
page read and write
|
|
|
|
21D0A137000
|
unkown
|
page read and write
|
|
|
|
7FF4EC167000
|
unkown
|
page readonly
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
7FF4EC45E000
|
unkown
|
page readonly
|
|
|
|
1887350A000
|
unkown
|
page read and write
|
|
|
|
7FF4EC434000
|
unkown
|
page readonly
|
|
|
|
7FF4EC224000
|
unkown
|
page readonly
|
|
|
|
21D09889000
|
unkown
|
page read and write
|
|
|
|
21D09E70000
|
unkown
|
page read and write
|
|
|
|
18871514000
|
unkown
|
page read and write
|
|
|
|
2564BAB0000
|
unkown
|
page readonly
|
|
|
|
7FF56CFA4000
|
unkown
|
page readonly
|
|
|
|
25649C5F000
|
unkown
|
page read and write
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
7CB13FB000
|
unkown
|
page read and write
|
|
|
|
25649CBA000
|
unkown
|
page read and write
|
|
|
|
27AF000
|
unkown
|
page readonly
|
|
|
|
21D0A14C000
|
unkown
|
page read and write
|
|
|
|
2B00000
|
unkown
|
page read and write
|
|
|
|
7FF5D53DE000
|
unkown
|
page readonly
|
|
|
|
21B76420000
|
unkown
|
page read and write
|
|
|
|
2564C510000
|
unkown
|
page read and write
|
|
|
|
21CD6250000
|
unkown
|
page read and write
|
|
|
|
5CD0000
|
heap private
|
page read and write
|
|
|
|
21D0A148000
|
unkown
|
page read and write
|
|
|
|
7FF53ACC5000
|
unkown
|
page readonly
|
|
|
|
18871290000
|
heap private
|
page read and write
|
|
|
|
21D095F0000
|
heap private
|
page read and write
|
|
|
|
7FF56CD81000
|
unkown
|
page readonly
|
|
|
|
7FF53AE3C000
|
unkown
|
page readonly
|
|
|
|
2775000
|
unkown
|
page readonly
|
|
|
|
7FF53ADED000
|
unkown
|
page readonly
|
|
|
|
52D99BF000
|
unkown
|
page read and write
|
|
|
|
7FF4EC33D000
|
unkown
|
page readonly
|
|
|
|
16125B00000
|
unkown
|
page read and write
|
|
|
|
21D0986A000
|
unkown
|
page read and write
|
|
|
|
7FF4EC2F8000
|
unkown
|
page readonly
|
|
|
|
21D0A15E000
|
unkown
|
page read and write
|
|
|
|
7FF4EC444000
|
unkown
|
page readonly
|
|
|
|
7CB0E7C000
|
unkown
|
page read and write
|
|
|
|
54D03FA000
|
unkown
|
page read and write
|
|
|
|
16125A54000
|
unkown
|
page read and write
|
|
|
|
7FF5D53BA000
|
unkown
|
page readonly
|
|
|
|
21D09660000
|
unkown
|
page readonly
|
|
|
|
2564BD87000
|
unkown
|
page read and write
|
|
|
|
744EF7A000
|
unkown
|
page read and write
|
|
|
|
7FF53AC5B000
|
unkown
|
page readonly
|
|
|
|
1FFBFC5F000
|
unkown
|
page read and write
|
|
|
|
21D0A168000
|
unkown
|
page read and write
|
|
|
|
7FF56CF8F000
|
unkown
|
page readonly
|
|
|
|
7FF53A6FD000
|
unkown
|
page readonly
|
|
|
|
7FF56CF02000
|
unkown
|
page readonly
|
|
|
|
21D09E90000
|
unkown
|
page readonly
|
|
|
|
900000
|
heap default
|
page read and write
|
|
|
|
188732C0000
|
unkown
|
page read and write
|
|
|
|
2564BDF2000
|
unkown
|
page read and write
|
|
|
|
7FF5D502C000
|
unkown
|
page readonly
|
|
|
|
21D0A602000
|
unkown
|
page read and write
|
|
|
|
277C000
|
unkown
|
page readonly
|
|
|
|
21D0A1DB000
|
unkown
|
page read and write
|
|
|
|
2564C310000
|
unkown
|
page read and write
|
|
|
|
7FF53AEE4000
|
unkown
|
page readonly
|
|
|
|
7FF50CF08000
|
unkown
|
page readonly
|
|
|
|
7FF5192FD000
|
unkown
|
page readonly
|
|
|
|
25649CF8000
|
unkown
|
page read and write
|
|
|
|
7FF5D526B000
|
unkown
|
page readonly
|
|
|
|
7FF519364000
|
unkown
|
page readonly
|
|
|
|
2564BD31000
|
unkown
|
page read and write
|
|
|
|
B4428FF000
|
unkown
|
page read and write
|
|
|
|
7FF5192AF000
|
unkown
|
page readonly
|
|
|
|
25649C63000
|
unkown
|
page read and write
|
|
|
|
21D09E70000
|
unkown
|
page read and write
|
|
|
|
7FF53AF11000
|
unkown
|
page readonly
|
|
|
|
18871413000
|
unkown
|
page read and write
|
|
|
|
21D09916000
|
unkown
|
page read and write
|
|
|
|
24BBA8D0000
|
unkown
|
page readonly
|
|
|
|
21D0985D000
|
unkown
|
page read and write
|
|
|
|
7FF5192EE000
|
unkown
|
page readonly
|
|
|
|
2564BDFC000
|
unkown
|
page read and write
|
|
|
|
2564BE43000
|
unkown
|
page read and write
|
|
|
|
B4426F7000
|
unkown
|
page read and write
|
|
|
|
53CDEFB000
|
unkown
|
page read and write
|
|
|
|
21D0A15E000
|
unkown
|
page read and write
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
7FF51917B000
|
unkown
|
page readonly
|
|
|
|
2564BE00000
|
unkown
|
page read and write
|
|
|
|
7CB127B000
|
unkown
|
page read and write
|
|
|
|
7FF5CCCB8000
|
unkown
|
page readonly
|
|
|
|
27B3000
|
unkown
|
page readonly
|
|
|
|
7FF53AE32000
|
unkown
|
page readonly
|
|
|
|
25649C29000
|
unkown
|
page read and write
|
|
|
|
21D0A14A000
|
unkown
|
page read and write
|
|
|
|
2564C410000
|
unkown
|
page read and write
|
|
|
|
27BA000
|
unkown
|
page readonly
|
|
|
|
2564BE3A000
|
unkown
|
page read and write
|
|
|
|
54D04FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D5370000
|
unkown
|
page readonly
|
|
|
|
7FF5D51C9000
|
unkown
|
page readonly
|
|
|
|
7FF5D5302000
|
unkown
|
page readonly
|
|
|
|
7CB10FA000
|
unkown
|
page read and write
|
|
|
|
7FF5D53A7000
|
unkown
|
page readonly
|
|
|
|
18873600000
|
unkown
|
page readonly
|
|
|
|
2564D042000
|
unkown
|
page read and write
|
|
|
|
21CD6120000
|
unkown
|
page readonly
|
|
|
|
7FF5D514F000
|
unkown
|
page readonly
|
|
|
|
25649C00000
|
unkown
|
page read and write
|
|
|
|
21D098E9000
|
unkown
|
page read and write
|
|
|
|
7FF56C7BD000
|
unkown
|
page readonly
|
|
|
|
21D0A18E000
|
unkown
|
page read and write
|
|
|
|
21D0A661000
|
unkown
|
page read and write
|
|
|
|
21D097F0000
|
unkown
|
page readonly
|
|
|
|
21D0A15E000
|
unkown
|
page read and write
|
|
|
|
21D0A155000
|
unkown
|
page read and write
|
|
|
|
744ECFE000
|
unkown
|
page read and write
|
|
|
|
24BBA702000
|
unkown
|
page read and write
|
|
|
|
21D0A143000
|
unkown
|
page read and write
|
|
|
|
7FF5D536A000
|
unkown
|
page readonly
|
|
|
|
21D0A14F000
|
unkown
|
page read and write
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
25649CE4000
|
unkown
|
page read and write
|
|
|
|
D429B77000
|
unkown
|
page read and write
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
188714BF000
|
unkown
|
page read and write
|
|
|
|
D42954B000
|
unkown
|
page read and write
|
|
|
|
21D0A150000
|
unkown
|
page read and write
|
|
|
|
7FF5D51A4000
|
unkown
|
page readonly
|
|
|
|
2564BD7D000
|
unkown
|
page read and write
|
|
|
|
7FF56CFDD000
|
unkown
|
page readonly
|
|
|
|
7FF5D534F000
|
unkown
|
page readonly
|
|
|
|
7FF5CCCC9000
|
unkown
|
page readonly
|
|
|
|
7FF56CF00000
|
unkown
|
page readonly
|
|
|
|
7FF5D530C000
|
unkown
|
page readonly
|
|
|
|
2564BF82000
|
unkown
|
page read and write
|
|
|
|
7FF53AE9A000
|
unkown
|
page readonly
|
|
|
|
7FF5D51A6000
|
unkown
|
page readonly
|
|
|
|
7FF518AE1000
|
unkown
|
page readonly
|
|
|
|
25649AC0000
|
unkown
|
page readonly
|
|
|
|
7FF53ACC1000
|
unkown
|
page readonly
|
|
|
|
744EBFA000
|
unkown
|
page read and write
|
|
|
|
21D0A150000
|
unkown
|
page read and write
|
|
|
|
21D0A149000
|
unkown
|
page read and write
|
|
|
|
7FF50CFBA000
|
unkown
|
page readonly
|
|
|
|
7FF4EC231000
|
unkown
|
page readonly
|
|
|
|
7FF5D539C000
|
unkown
|
page readonly
|
|
|
|
7FF53AF19000
|
unkown
|
page readonly
|
|
|
|
21CD6249000
|
unkown
|
page read and write
|
|
|
|
7FF4EC007000
|
unkown
|
page readonly
|
|
|
|
53CDDF5000
|
unkown
|
page read and write
|
|
|
|
24BBA63C000
|
unkown
|
page read and write
|
|
|
|
21D0A1B7000
|
unkown
|
page read and write
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
7FF519372000
|
unkown
|
page readonly
|
|
|
|
2564BDF4000
|
unkown
|
page read and write
|
|
|
|
2564B6A0000
|
unkown
|
page readonly
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
188732C0000
|
unkown
|
page read and write
|
|
|
|
188714C5000
|
unkown
|
page read and write
|
|
|
|
2564BDE1000
|
unkown
|
page read and write
|
|
|
|
21B76502000
|
unkown
|
page read and write
|
|
|
|
25649BE0000
|
unkown
|
page readonly
|
|
|
|
21D09E70000
|
unkown
|
page read and write
|
|
|
|
7FF56D04A000
|
unkown
|
page readonly
|
|
|
|
21D0A150000
|
unkown
|
page read and write
|
|
|
|
25649CB9000
|
unkown
|
page read and write
|
|
|
|
7FF50CF1A000
|
unkown
|
page readonly
|
|
|
|
2E9E9F9000
|
unkown
|
page read and write
|
|
|
|
B4425FE000
|
unkown
|
page read and write
|
|
|
|
2564BDFC000
|
unkown
|
page read and write
|
|
|
|
7FF519161000
|
unkown
|
page readonly
|
|
|
|
18871500000
|
unkown
|
page read and write
|
|
|
|
7FF56CF6B000
|
unkown
|
page readonly
|
|
|
|
21D0985B000
|
unkown
|
page read and write
|
|
|
|
2564BF00000
|
unkown
|
page read and write
|
|
|
|
21D0A149000
|
unkown
|
page read and write
|
|
|
|
7FF4EC343000
|
unkown
|
page readonly
|
|
|
|
2C4A000
|
heap default
|
page read and write
|
|
|
|
7FF5192E8000
|
unkown
|
page readonly
|
|
|
|
21D0A15E000
|
unkown
|
page read and write
|
|
|
|
7FF50CF4D000
|
unkown
|
page readonly
|
|
|
|
25649CBA000
|
unkown
|
page read and write
|
|
|
|
7CB0F7A000
|
unkown
|
page read and write
|
|
|
|
25649CDA000
|
unkown
|
page read and write
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
21D0A15E000
|
unkown
|
page read and write
|
|
|
|
21D0A002000
|
unkown
|
page read and write
|
|
|
|
21D0A1B6000
|
unkown
|
page read and write
|
|
|
|
7FF56CF65000
|
unkown
|
page readonly
|
|
|
|
D42987E000
|
unkown
|
page read and write
|
|
|
|
7FF56D044000
|
unkown
|
page readonly
|
|
|
|
2564C000000
|
unkown
|
page read and write
|
|
|
|
21B76402000
|
unkown
|
page read and write
|
|
|
|
18871502000
|
unkown
|
page read and write
|
|
|
|
1FFBFB70000
|
unkown
|
page readonly
|
|
|
|
2564C210000
|
unkown
|
page read and write
|
|
|
|
7FF56CE63000
|
unkown
|
page readonly
|
|
|
|
744EA7B000
|
unkown
|
page read and write
|
|
|
|
21B763B0000
|
unkown
|
page write copy
|
|
|
|
2564BD4C000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3C4000
|
unkown
|
page readonly
|
|
|
|
1FFBFB85000
|
heap private
|
page read and write
|
|
|
|
7FF5D4BCD000
|
unkown
|
page readonly
|
|
|
|
2564D002000
|
unkown
|
page read and write
|
|
|
|
7FF4EC392000
|
unkown
|
page readonly
|
|
|
|
7FF51928B000
|
unkown
|
page readonly
|
|
|
|
9F0000
|
unkown
|
page readonly
|
|
|
|
25649CFC000
|
unkown
|
page read and write
|
|
|
|
16125A13000
|
unkown
|
page read and write
|
|
|
|
21D0A14A000
|
unkown
|
page read and write
|
|
|
|
188732C0000
|
unkown
|
page read and write
|
|
|
|
21CD61F0000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D17000
|
unkown
|
page readonly
|
|
|
|
2C6A000
|
unkown
|
page read and write
|
|
|
|
7FF4FF5C9000
|
unkown
|
page readonly
|
|
|
|
21D0A15E000
|
unkown
|
page read and write
|
|
|
|
7FF5D53CE000
|
unkown
|
page readonly
|
|
|
|
60E0000
|
unkown
|
page read and write
|
|
|
|
7FF4EBCF1000
|
unkown
|
page readonly
|
|
|
|
7FF5CCD42000
|
unkown
|
page readonly
|
|
|
|
7FF56CF8C000
|
unkown
|
page readonly
|
|
|
|
2C6E000
|
unkown
|
page read and write
|
|
|
|
25649C7C000
|
unkown
|
page read and write
|
|
|
|
21D0A137000
|
unkown
|
page read and write
|
|
|
|
7FF4EC29A000
|
unkown
|
page readonly
|
|
|
|
61B0000
|
unkown
|
page read and write
|
|
|
|
16125A29000
|
unkown
|
page read and write
|
|
|
|
1FFBFC56000
|
unkown
|
page read and write
|
|
|
|
21D098A7000
|
unkown
|
page read and write
|
|
|
|
7FF53AE9E000
|
unkown
|
page readonly
|
|
|
|
15482BB0000
|
heap private
|
page read and write
|
|
|
|
24BBA708000
|
unkown
|
page read and write
|
|
|
|
21D0A117000
|
unkown
|
page read and write
|
|
|
|
7FF53AEAB000
|
unkown
|
page readonly
|
|
|
|
21D0A132000
|
unkown
|
page read and write
|
|
|
|
7CB0B7A000
|
unkown
|
page read and write
|
|
|
|
7FF4FF54E000
|
unkown
|
page readonly
|
|
|
|
7FF4FF21F000
|
unkown
|
page readonly
|
|
|
|
21D0A171000
|
unkown
|
page read and write
|
|
|
|
21CD6302000
|
unkown
|
page read and write
|
|
|
|
2C69000
|
unkown
|
page read and write
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
7FF4FF567000
|
unkown
|
page readonly
|
|
|
|
7FF4EC170000
|
unkown
|
page readonly
|
|
|
|
7FF519297000
|
unkown
|
page readonly
|
|
|
|
53CD9DC000
|
unkown
|
page read and write
|
|
|
|
B4427FF000
|
unkown
|
page read and write
|
|
|
|
7FF4EBF5E000
|
unkown
|
page readonly
|
|
|
|
7FF53ACE1000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC3C000
|
unkown
|
page readonly
|
|
|
|
2848000
|
unkown
|
page readonly
|
|
|
|
21D0A144000
|
unkown
|
page read and write
|
|
|
|
2564BAA0000
|
unkown
|
page readonly
|
|
|
|
2E9E97E000
|
unkown
|
page read and write
|
|
|
|
89B000
|
stack
|
page read and write
|
|
|
|
2C6D000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3EE000
|
unkown
|
page readonly
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
7FF4EBF62000
|
unkown
|
page readonly
|
|
|
|
2564BA70000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D0C000
|
unkown
|
page readonly
|
|
|
|
7FF53AC7F000
|
unkown
|
page readonly
|
|
|
|
7FF5D2CDE000
|
unkown
|
page readonly
|
|
|
|
5CD3000
|
heap private
|
page read and write
|
|
|
|
7FF4FF5A4000
|
unkown
|
page readonly
|
|
|
|
1FFBFB30000
|
unkown
|
page read and write
|
|
|
|
7FF4EBFC5000
|
unkown
|
page readonly
|
|
|
|
2C6D000
|
unkown
|
page read and write
|
|
|
|
2564BDF2000
|
unkown
|
page read and write
|
|
|
|
744EE7D000
|
unkown
|
page read and write
|
|
|
|
21B76400000
|
unkown
|
page read and write
|
|
|
|
21D0A153000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3BB000
|
unkown
|
page readonly
|
|
|
|
25649C5C000
|
unkown
|
page read and write
|
|
|
|
21D0A134000
|
unkown
|
page read and write
|
|
|
|
21CD6110000
|
heap default
|
page read and write
|
|
|
|
7FF5CCC4A000
|
unkown
|
page readonly
|
|
|
|
7FF53AEA0000
|
unkown
|
page readonly
|
|
|
|
7FF56CD26000
|
unkown
|
page readonly
|
|
|
|
7FF5D5310000
|
unkown
|
page readonly
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
2790000
|
unkown
|
page readonly
|
|
|
|
21D09829000
|
unkown
|
page read and write
|
|
|
|
7FF5D5462000
|
unkown
|
page readonly
|
|
|
|
21D0A177000
|
unkown
|
page read and write
|
|
|
|
276D000
|
unkown
|
page readonly
|
|
|
|
2C77000
|
unkown
|
page read and write
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
7FF53AB6A000
|
unkown
|
page readonly
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
7CB0AF9000
|
unkown
|
page read and write
|
|
|
|
2564BA00000
|
unkown
|
page readonly
|
|
|
|
7FF4EC2F3000
|
unkown
|
page readonly
|
|
|
|
21D0A136000
|
unkown
|
page read and write
|
|
|
|
7FF4FF588000
|
unkown
|
page readonly
|
|
|
|
7FF4FF4F0000
|
unkown
|
page readonly
|
|
|
|
54CFFFB000
|
unkown
|
page read and write
|
|
|
|
24BBA713000
|
unkown
|
page read and write
|
|
|
|
21D0A15C000
|
unkown
|
page read and write
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
7FF5D2B83000
|
unkown
|
page readonly
|
|
|
|
7FF4FF641000
|
unkown
|
page readonly
|
|
|
|
21CD6257000
|
unkown
|
page read and write
|
|
|
|
7FF53AB77000
|
unkown
|
page readonly
|
|
|
|
21D0A602000
|
unkown
|
page read and write
|
|
|
|
21D09740000
|
unkown
|
page readonly
|
|
|
|
25649D13000
|
unkown
|
page read and write
|
|
|
|
7FF5D2C2D000
|
unkown
|
page readonly
|
|
|
|
7FF4EC2EE000
|
unkown
|
page readonly
|
|
|
|
2AF0000
|
unkown
|
page readonly
|
|
|
|
7FF519285000
|
unkown
|
page readonly
|
|
|
|
7FF53AF84000
|
unkown
|
page readonly
|
|
|
|
7FF50C827000
|
unkown
|
page readonly
|
|
|
|
21D0A168000
|
unkown
|
page read and write
|
|
|
|
2564BDE4000
|
unkown
|
page read and write
|
|
|
|
7FF5D5136000
|
unkown
|
page readonly
|
|
|
|
1FFBFC46000
|
heap default
|
page read and write
|
|
|
|
21B77DC0000
|
unkown
|
page read and write
|
|
|
|
21D0A136000
|
unkown
|
page read and write
|
|
|
|
2564BD64000
|
unkown
|
page read and write
|
|
|
|
744EC7A000
|
unkown
|
page read and write
|
|
|
|
21CD6860000
|
unkown
|
page readonly
|
|
|
|
27C1000
|
unkown
|
page readonly
|
|
|
|
21D0A1CA000
|
unkown
|
page read and write
|
|
|
|
21D0A171000
|
unkown
|
page read and write
|
|
|
|
24BBA5D0000
|
heap default
|
page read and write
|
|
|
|
7FF519220000
|
unkown
|
page readonly
|
|
|
|
24BBA681000
|
unkown
|
page read and write
|
|
|
|
7FF5D2CEB000
|
unkown
|
page readonly
|
|
|
|
21D09865000
|
unkown
|
page read and write
|
|
|
|
7FF53AA02000
|
unkown
|
page readonly
|
|
|
|
7FF53ACD4000
|
unkown
|
page readonly
|
|
|
|
24BBA700000
|
unkown
|
page read and write
|
|
|
|
21D0A1CA000
|
unkown
|
page read and write
|
|
|
|
1FFBFC55000
|
unkown
|
page read and write
|
|
|
|
7FF4EBC08000
|
unkown
|
page readonly
|
|
|
|
21CD6264000
|
unkown
|
page read and write
|
|
|
|
7FF519280000
|
unkown
|
page readonly
|
|
|
|
21D0A149000
|
unkown
|
page read and write
|
|
|
|
27A5000
|
unkown
|
page readonly
|
|
|
|
188732D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D2A000
|
unkown
|
page readonly
|
|
|
|
7FF5D537B000
|
unkown
|
page readonly
|
|
|
|
25649C40000
|
unkown
|
page read and write
|
|
|
|
7FF53AF16000
|
unkown
|
page readonly
|
|
|
|
21D09650000
|
heap default
|
page read and write
|
|
|
|
7FF5190A5000
|
unkown
|
page readonly
|
|
|
|
21D09908000
|
unkown
|
page read and write
|
|
|
|
7FF50CF24000
|
unkown
|
page readonly
|
|
|
|
1FFBFC5F000
|
unkown
|
page read and write
|
|
|
|
475CBCB000
|
unkown
|
page read and write
|
|
|
|
1FFBFC41000
|
unkown
|
page read and write
|
|
|
|
21CD6229000
|
unkown
|
page read and write
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
21D0A143000
|
unkown
|
page read and write
|
|
|
|
7CB107A000
|
unkown
|
page read and write
|
|
|
|
54D027F000
|
unkown
|
page read and write
|
|
|
|
7FF53AE8C000
|
unkown
|
page readonly
|
|
|
|
7CB0CFA000
|
unkown
|
page read and write
|
|
|
|
18873260000
|
heap private
|
page read and write
|
|
|
|
2564D142000
|
unkown
|
page read and write
|
|
|
|
7FF50CFC1000
|
unkown
|
page readonly
|
|
|
|
7FF5D24F8000
|
unkown
|
page readonly
|
|
|
|
27A7000
|
unkown
|
page readonly
|
|
|
|
7FF5D28A0000
|
unkown
|
page readonly
|
|
|
|
7FF5CCAF3000
|
unkown
|
page readonly
|
|
|
|
7FF53AE6B000
|
unkown
|
page readonly
|
|
|
|
7FF5D53E9000
|
unkown
|
page readonly
|
|
|
|
7FF5D4ED2000
|
unkown
|
page readonly
|
|
|
|
21D0A15E000
|
unkown
|
page read and write
|
|
|
|
52D9DFF000
|
unkown
|
page read and write
|
|
|
|
7FF53AB6F000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC3A000
|
unkown
|
page readonly
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
7FF519371000
|
unkown
|
page readonly
|
|
|
|
18873500000
|
unkown
|
page read and write
|
|
|
|
7FF56CE68000
|
unkown
|
page readonly
|
|
|
|
7FF5CCBA3000
|
unkown
|
page readonly
|
|
|
|
744EFFE000
|
unkown
|
page read and write
|
|
|
|
2564BDB2000
|
unkown
|
page read and write
|
|
|
|
7FF4EC1F0000
|
unkown
|
page readonly
|
|
|
|
2564BA30000
|
unkown
|
page read and write
|
|
|
|
7FF56CC2F000
|
unkown
|
page readonly
|
|
|
|
2564C410000
|
unkown
|
page read and write
|
|
|
|
7FF519188000
|
unkown
|
page readonly
|
|
|
|
21D0A170000
|
unkown
|
page read and write
|
|
|
|
7FF5D2CE5000
|
unkown
|
page readonly
|
|
|
|
52D9E7A000
|
unkown
|
page read and write
|
|
|
|
7FF5CC816000
|
unkown
|
page readonly
|
|
|
|
2853000
|
unkown
|
page readonly
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
2564C310000
|
unkown
|
page read and write
|
|
|
|
7FF5D5387000
|
unkown
|
page readonly
|
|
|
|
7FF4FF59A000
|
unkown
|
page readonly
|
|
|
|
24BBAE02000
|
unkown
|
page read and write
|
|
|
|
7CB09FB000
|
unkown
|
page read and write
|
|
|
|
7FF5CCAA1000
|
unkown
|
page readonly
|
|
|
|
21D098C5000
|
unkown
|
page read and write
|
|
|
|
18871519000
|
unkown
|
page read and write
|
|
|
|
B44257B000
|
unkown
|
page read and write
|
|
|
|
7FF4FF594000
|
unkown
|
page readonly
|
|
|
|
21CD6313000
|
unkown
|
page read and write
|
|
|
|
7FF53AA79000
|
unkown
|
page readonly
|
|
|
|
7FF5CCCBE000
|
unkown
|
page readonly
|
|
|
|
21D0A14F000
|
unkown
|
page read and write
|
|
|
|
7FF56CFB4000
|
unkown
|
page readonly
|
|
|
|
7CB14FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D2DC4000
|
unkown
|
page readonly
|
|
|
|
21D09E80000
|
unkown
|
page read and write
|
|
|
|
7FF5D535C000
|
unkown
|
page readonly
|
|
|
|
7FF5CCBBC000
|
unkown
|
page readonly
|
|
|
|
7FF5D512B000
|
unkown
|
page readonly
|
|
|
|
21D0A1CA000
|
unkown
|
page read and write
|
|
|
|
15482E56000
|
unkown
|
page read and write
|
|
|
|
21CD624B000
|
unkown
|
page read and write
|
|
|
|
2564C010000
|
unkown
|
page read and write
|
|
|
|
16125B02000
|
unkown
|
page read and write
|
|
|
|
7FF4FF550000
|
unkown
|
page readonly
|
|
|
|
21B76800000
|
unkown
|
page readonly
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
25649D22000
|
unkown
|
page read and write
|
|
|
|
7FF4EBECE000
|
unkown
|
page readonly
|
|
|
|
161259E0000
|
unkown
|
page read and write
|
|
|
|
25649E00000
|
unkown
|
page readonly
|
|
|
|
2799000
|
unkown
|
page readonly
|
|
|
|
2B17000
|
heap private
|
page read and write
|
|
|
|
21CD6C00000
|
unkown
|
page readonly
|
|
|
|
25649D32000
|
unkown
|
page read and write
|
|
|
|
7FF56CF98000
|
unkown
|
page readonly
|
|
|
|
B442475000
|
unkown
|
page read and write
|
|
|
|
2ACE000
|
stack
|
page read and write
|
|
|
|
188732B0000
|
unkown
|
page readonly
|
|
|
|
7FF5D2BC1000
|
unkown
|
page readonly
|
|
|
|
7FF56CFD9000
|
unkown
|
page readonly
|
|
|
|
18873250000
|
unkown
|
page readonly
|
|
|
|
21D09770000
|
unkown
|
page readonly
|
|
|
|
7FF5D545A000
|
unkown
|
page readonly
|
|
|
|
21D09800000
|
unkown
|
page read and write
|
|
|
|
2564BD5A000
|
unkown
|
page read and write
|
|
|
|
21CD6252000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC7F000
|
unkown
|
page readonly
|
|
|
|
21D0A1A5000
|
unkown
|
page read and write
|
|
|
|
21D0A168000
|
unkown
|
page read and write
|
|
|
|
646000
|
unkown
|
page read and write
|
|
|
|
53CE077000
|
unkown
|
page read and write
|
|
|
|
21D0A154000
|
unkown
|
page read and write
|
|
|
|
21CD6A02000
|
unkown
|
page read and write
|
|
|
|
7FF5D5312000
|
unkown
|
page readonly
|
|
|
|
7FF4EC4D4000
|
unkown
|
page readonly
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
475CFF9000
|
unkown
|
page read and write
|
|
|
|
21D0A15F000
|
unkown
|
page read and write
|
|
|
|
7FF5D2CE0000
|
unkown
|
page readonly
|
|
|
|
154848A0000
|
unkown
|
page readonly
|
|
|
|
7FF5D5344000
|
unkown
|
page readonly
|
|
|
|
25649CB9000
|
unkown
|
page read and write
|
|
|
|
7FF53AE40000
|
unkown
|
page readonly
|
|
|
|
7FF4FF55B000
|
unkown
|
page readonly
|
|
|
|
24BBA5E0000
|
unkown
|
page readonly
|
|
|
|
7FF5D535A000
|
unkown
|
page readonly
|
|
|
|
2564C310000
|
unkown
|
page read and write
|
|
|
|
21B762E0000
|
unkown
|
page readonly
|
|
|
|
7FF4EC4E1000
|
unkown
|
page readonly
|
|
|
|
2564C610000
|
unkown
|
page read and write
|
|
|
|
15482E40000
|
unkown
|
page read and write
|
|
|
|
7FF5CCD3A000
|
unkown
|
page readonly
|
|
|
|
21D0A654000
|
unkown
|
page read and write
|
|
|
|
21D0A175000
|
unkown
|
page read and write
|
|
|
|
1FFBFC46000
|
unkown
|
page read and write
|
|
|
|
7FF53AE74000
|
unkown
|
page readonly
|
|
|
|
2564BD6C000
|
unkown
|
page read and write
|
|
|
|
7FF4EC1B6000
|
unkown
|
page readonly
|
|
|
|
54D02FF000
|
unkown
|
page read and write
|
|
|
|
21D0A14B000
|
unkown
|
page read and write
|
|
|
|
7FF5192DE000
|
unkown
|
page readonly
|
|
|
|
15482C10000
|
heap default
|
page read and write
|
|
|
|
154847A0000
|
unkown
|
page read and write
|
|
|
|
2B20000
|
unkown
|
page readonly
|
|
|
|
D429A7A000
|
unkown
|
page read and write
|
|
|
|
B4422FE000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3F5000
|
unkown
|
page readonly
|
|
|
|
24BBA670000
|
unkown
|
page read and write
|
|
|
|
7FF51927E000
|
unkown
|
page readonly
|
|
|
|
7FF4EC35C000
|
unkown
|
page readonly
|
|
|
|
21CD6300000
|
unkown
|
page read and write
|
|
|
|
21D0A154000
|
unkown
|
page read and write
|
|
|
|
7FF5CCCC6000
|
unkown
|
page readonly
|
|
|
|
7FF56CD85000
|
unkown
|
page readonly
|
|
|
|
2564C110000
|
unkown
|
page read and write
|
|
|
|
2564BF82000
|
unkown
|
page read and write
|
|
|
|
24BBA570000
|
heap private
|
page read and write
|
|
|
|
21D098E6000
|
unkown
|
page read and write
|
|
|
|
7FF5D51C1000
|
unkown
|
page readonly
|
|
|
|
7FF5D5195000
|
unkown
|
page readonly
|
|
|
|
21D09E70000
|
unkown
|
page readonly
|
|
|
|
7FF50CFB4000
|
unkown
|
page readonly
|
|
|
|
7FF53AECC000
|
unkown
|
page readonly
|
|
|
|
7FF5CCB4E000
|
unkown
|
page readonly
|
|
|
|
24BBA655000
|
unkown
|
page read and write
|
|
|
|
7FF56D052000
|
unkown
|
page readonly
|
|
|
|
188712F0000
|
heap default
|
page read and write
|
|
|
|
7FF53AE7F000
|
unkown
|
page readonly
|
|
|
|
7FF5D5273000
|
unkown
|
page readonly
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
7FF50CF49000
|
unkown
|
page readonly
|
|
|
|
21D0A176000
|
unkown
|
page read and write
|
|
|
|
7FF50CEDB000
|
unkown
|
page readonly
|
|
|
|
21D0A144000
|
unkown
|
page read and write
|
|
|
|
21D098E8000
|
unkown
|
page read and write
|
|
|
|
7FF4FF458000
|
unkown
|
page readonly
|
|
|
|
7FF5CCB31000
|
unkown
|
page readonly
|
|
|
|
2564C010000
|
unkown
|
page read and write
|
|
|
|
18871650000
|
unkown
|
page readonly
|
|
|
|
7FF53AD81000
|
unkown
|
page readonly
|
|
|
|
21B77EC0000
|
unkown
|
page readonly
|
|
|
|
2E9E87A000
|
unkown
|
page read and write
|
|
|
|
53CE17E000
|
unkown
|
page read and write
|
|
|
|
21D0A144000
|
unkown
|
page read and write
|
|
|
|
21D098AD000
|
unkown
|
page read and write
|
|
|
|
21D0A15F000
|
unkown
|
page read and write
|
|
|
|
7FF4FF21A000
|
unkown
|
page readonly
|
|
|
|
21CD6200000
|
unkown
|
page read and write
|
|
|
|
7FF53AE8A000
|
unkown
|
page readonly
|
|
|
|
7FF5192B8000
|
unkown
|
page readonly
|
|
|
|
7FF5D52B6000
|
unkown
|
page readonly
|
|
|
|
7FF519046000
|
unkown
|
page readonly
|
|
|
|
7FF5D2DCA000
|
unkown
|
page readonly
|
|
|
|
7FF5D2C33000
|
unkown
|
page readonly
|
|
|
|
7FF50C823000
|
unkown
|
page readonly
|
|
|
|
7CB0A7F000
|
unkown
|
page read and write
|
|
|
|
7FF5192F6000
|
unkown
|
page readonly
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
2753000
|
unkown
|
page readonly
|
|
|
|
2C89000
|
unkown
|
page read and write
|
|
|
|
2B10000
|
heap private
|
page read and write
|
|
|
|
475D07F000
|
unkown
|
page read and write
|
|
|
|
7FF56CFAA000
|
unkown
|
page readonly
|
|
|
|
27BF000
|
unkown
|
page readonly
|
|
|
|
21D0A150000
|
unkown
|
page read and write
|
|
|
|
7FF56CFD6000
|
unkown
|
page readonly
|
|
|
|
2564BA80000
|
unkown
|
page read and write
|
|
|
|
21D0A143000
|
unkown
|
page read and write
|
|
|
|
24BBA5F0000
|
unkown
|
page readonly
|
|
|
|
21D0A13E000
|
unkown
|
page read and write
|
|
|
|
7FF518F4F000
|
unkown
|
page readonly
|
|
|
|
7FF5D2CCC000
|
unkown
|
page readonly
|
|
|
|
1FFBFD30000
|
unkown
|
page readonly
|
|
|
|
15483000000
|
unkown
|
page readonly
|
|
|
|
7FF53AEA5000
|
unkown
|
page readonly
|
|
|
|
21D0A141000
|
unkown
|
page read and write
|
|
|
|
18873564000
|
unkown
|
page read and write
|
|
|
|
16125A00000
|
unkown
|
page read and write
|
|
|
|
52D9D7F000
|
unkown
|
page read and write
|
|
|
|
910000
|
unkown
|
page readonly
|
|
|
|
2C75000
|
unkown
|
page read and write
|
|
|
|
D429C7F000
|
unkown
|
page read and write
|
|
|
|
21D0A13F000
|
unkown
|
page read and write
|
|
|
|
7FF5D4BD1000
|
unkown
|
page readonly
|
|
|
|
7FF53AE42000
|
unkown
|
page readonly
|
|
|
|
16125A02000
|
unkown
|
page read and write
|
|
|
|
25649CB9000
|
unkown
|
page read and write
|
|
|
|
7FF5CCCAF000
|
unkown
|
page readonly
|
|
|
|
24BBA600000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3F0000
|
unkown
|
page readonly
|
|
|
|
475CEFE000
|
unkown
|
page read and write
|
|
|
|
7FF5D2D34000
|
unkown
|
page readonly
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
7FF53ADE6000
|
unkown
|
page readonly
|
|
|
|
7FF5D5047000
|
unkown
|
page readonly
|
|
|
|
7FF4EC3FB000
|
unkown
|
page readonly
|
|
|
|
7FF5D5454000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC94000
|
unkown
|
page readonly
|
|
|
|
2E9E59E000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3DC000
|
unkown
|
page readonly
|
|
|
|
25649D72000
|
unkown
|
page read and write
|
|
|
|
7CB0DFA000
|
unkown
|
page read and write
|
|
|
|
18874010000
|
unkown
|
page read and write
|
|
|
|
16125B13000
|
unkown
|
page read and write
|
|
|
|
18871454000
|
unkown
|
page read and write
|
|
|
|
7FF5190D9000
|
unkown
|
page readonly
|
|
|
|
D429FF8000
|
unkown
|
page read and write
|
|
|
|
21D0A602000
|
unkown
|
page read and write
|
|
|
|
15482F02000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC5B000
|
unkown
|
page readonly
|
|
|
|
7FF56CF5A000
|
unkown
|
page readonly
|
|
|
|
21CD6870000
|
unkown
|
page read and write
|
|
|
|
7FF5D2D48000
|
unkown
|
page readonly
|
|
|
|
2834000
|
unkown
|
page readonly
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
7FF53A701000
|
unkown
|
page readonly
|
|
|
|
7FF4FF20C000
|
unkown
|
page readonly
|
|
|
|
7FF56C7C1000
|
unkown
|
page readonly
|
|
|
|
7FF53AC78000
|
unkown
|
page readonly
|
|
|
|
21CD623C000
|
unkown
|
page read and write
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
7FF519243000
|
unkown
|
page readonly
|
|
|
|
161259A0000
|
unkown
|
page readonly
|
|
|
|
2C40000
|
heap default
|
page read and write
|
|
|
|
7FF4EC3EA000
|
unkown
|
page readonly
|
|
|
|
7FF53AED7000
|
unkown
|
page readonly
|
|
|
|
21D0A150000
|
unkown
|
page read and write
|
|
|
|
7CB087E000
|
unkown
|
page read and write
|
|
|
|
7FF51903B000
|
unkown
|
page readonly
|
|
|
|
7FF50CF38000
|
unkown
|
page readonly
|
|
|
|
7CB147C000
|
unkown
|
page read and write
|
|
|
|
2564BA10000
|
heap private
|
page read and write
|
|
|
|
2AE0000
|
unkown
|
page readonly
|
|
|
|
25649D62000
|
unkown
|
page read and write
|
|
|
|
7FF5192F1000
|
unkown
|
page readonly
|
|
|
|
7FF4FF316000
|
unkown
|
page readonly
|
|
|
|
2564BD49000
|
unkown
|
page read and write
|
|
|
|
15482E13000
|
unkown
|
page read and write
|
|
|
|
A4E000
|
unkown
|
page read and write
|
|
|
|
2452000
|
unkown
|
page readonly
|
|
|
|
16125A34000
|
unkown
|
page read and write
|
|
|
|
7FF5CCB4B000
|
unkown
|
page readonly
|
|
|
|
21D09813000
|
unkown
|
page read and write
|
|
|
|
7FF56CD1B000
|
unkown
|
page readonly
|
|
|
|
25649C13000
|
unkown
|
page read and write
|
|
|
|
275A000
|
unkown
|
page readonly
|
|
|
|
16125810000
|
heap private
|
page read and write
|
|
|
|
7FF53AEEA000
|
unkown
|
page readonly
|
|
|
|
2564BA80000
|
unkown
|
page read and write
|
|
|
|
D429975000
|
unkown
|
page read and write
|
|
|
|
7FF5192C4000
|
unkown
|
page readonly
|
|
|
|
21D09913000
|
unkown
|
page read and write
|
|
|
|
A50000
|
unkown
|
page readonly
|
|
|
|
7CB08FE000
|
unkown
|
page read and write
|
|
|
|
21D0A155000
|
unkown
|
page read and write
|
|
|
|
21D0983C000
|
unkown
|
page read and write
|
|
|
|
7CB0EFB000
|
unkown
|
page read and write
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
7FF5D2DD2000
|
unkown
|
page readonly
|
|
|
|
2564C110000
|
unkown
|
page read and write
|
|
|
|
15482CF0000
|
unkown
|
page write copy
|
|
|
|
53CDF7E000
|
unkown
|
page read and write
|
|
|
|
7FF4EC41C000
|
unkown
|
page readonly
|
|
|
|
21D0985C000
|
unkown
|
page read and write
|
|
|
|
24BBA629000
|
unkown
|
page read and write
|
|
|
|
21D0A602000
|
unkown
|
page read and write
|
|
|
|
2564D102000
|
unkown
|
page read and write
|
|
|
|
7FF50CF3E000
|
unkown
|
page readonly
|
|
|
|
21D0A14F000
|
unkown
|
page read and write
|
|
|
|
2564C010000
|
unkown
|
page read and write
|
|
|
|
21D0A150000
|
unkown
|
page read and write
|
|
|
|
7FF56CF77000
|
unkown
|
page readonly
|
|
|
|
25649CBA000
|
unkown
|
page read and write
|
|
|
|
7FF50CEFF000
|
unkown
|
page readonly
|
|
|
|
475CF7A000
|
unkown
|
page read and write
|
|
|
|
18873240000
|
unkown
|
page read and write
|
|
|
|
2564B5A0000
|
unkown
|
page read and write
|
|
|
|
D429D78000
|
unkown
|
page read and write
|
|
|
|
2564C310000
|
unkown
|
page read and write
|
|
|
|
21CD6286000
|
unkown
|
page read and write
|
|
|
|
21D0A12D000
|
unkown
|
page read and write
|
|
|
|
25649CBD000
|
unkown
|
page read and write
|
|
|
|
16125A3F000
|
unkown
|
page read and write
|
|
|
|
21CD626F000
|
unkown
|
page read and write
|
|
|
|
2564BD68000
|
unkown
|
page read and write
|
|
|
|
7FF4EC458000
|
unkown
|
page readonly
|
|
|
|
21B76455000
|
unkown
|
page read and write
|
|
|
|
25649D63000
|
unkown
|
page read and write
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
188714A3000
|
unkown
|
page read and write
|
|
|
|
7FF5D2DD1000
|
unkown
|
page readonly
|
|
|
|
25649CBA000
|
unkown
|
page read and write
|
|
|
|
7FF4FF634000
|
unkown
|
page readonly
|
|
|
|
2564BF42000
|
unkown
|
page read and write
|
|
|
|
21D0A151000
|
unkown
|
page read and write
|
|
|
|
21D0A14A000
|
unkown
|
page read and write
|
|
|
|
21D0A128000
|
unkown
|
page read and write
|
|
|
|
7FF5CCBB4000
|
unkown
|
page readonly
|
|
|
|
2680000
|
unkown
|
page readonly
|
|
|
|
1FFBFC5F000
|
unkown
|
page read and write
|
|
|
|
7FF56CC2A000
|
unkown
|
page readonly
|
|
|
|
7CB117A000
|
unkown
|
page read and write
|
|
|
|
21D0A1DB000
|
unkown
|
page read and write
|
|
|
|
7FF50CED0000
|
unkown
|
page readonly
|
|
|
|
7FF56CC37000
|
unkown
|
page readonly
|
|
|
|
21CD60B0000
|
heap private
|
page read and write
|
|
|
|
2783000
|
unkown
|
page readonly
|
|
|
|
25649C8B000
|
unkown
|
page read and write
|
|
|
|
7FF56CDB9000
|
unkown
|
page readonly
|
|
|
|
21CD6255000
|
unkown
|
page read and write
|
|
|
|
18873533000
|
unkown
|
page read and write
|
|
|
|
7FF53ADA3000
|
unkown
|
page readonly
|
|
|
|
7CB11FC000
|
unkown
|
page read and write
|
|
|
|
21D0A14D000
|
unkown
|
page read and write
|
|
|
|
7FF53A7A1000
|
unkown
|
page readonly
|
|
|
|
2C65000
|
unkown
|
page read and write
|
|
|
|
7FF5D2CF7000
|
unkown
|
page readonly
|
|
|
|
25649CF1000
|
unkown
|
page read and write
|
|
|
|
25649CC8000
|
unkown
|
page read and write
|
|
|
|
2564C410000
|
unkown
|
page read and write
|
|
|
|
7FF5D2CCA000
|
unkown
|
page readonly
|
|
|
|
27D6000
|
unkown
|
page readonly
|
|
|
|
7FF4FF5C1000
|
unkown
|
page readonly
|
|
|
|
21D0A15E000
|
unkown
|
page read and write
|
|
|
|
7FF4FF227000
|
unkown
|
page readonly
|
|
|
|
52D9C7F000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC87000
|
unkown
|
page readonly
|
|
|
|
15482E00000
|
unkown
|
page read and write
|
|
|
|
7FF4EC241000
|
unkown
|
page readonly
|
|
|
|
18871300000
|
unkown
|
page readonly
|
|
|
|
744EDFA000
|
unkown
|
page read and write
|
|
|
|
7FF5D52BD000
|
unkown
|
page readonly
|
|
|
|
21D098D5000
|
unkown
|
page read and write
|
|
|
|
21B76600000
|
unkown
|
page readonly
|
|
|
|
21D0A1A5000
|
unkown
|
page read and write
|
|
|
|
7FF5D5278000
|
unkown
|
page readonly
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
21CD6308000
|
unkown
|
page read and write
|
|
|
|
7FF4FF513000
|
unkown
|
page readonly
|
|
|
|
7FF56CF23000
|
unkown
|
page readonly
|
|
|
|
21D0A144000
|
unkown
|
page read and write
|
|
|
|
7FF53AF0E000
|
unkown
|
page readonly
|
|
|
|
161274A0000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D4E000
|
unkown
|
page readonly
|
|
|
|
7FF5D503A000
|
unkown
|
page readonly
|
|
|
|
7FF4EC226000
|
unkown
|
page readonly
|
|
|
|
7FF4EC3BF000
|
unkown
|
page readonly
|
|
|
|
25649CF1000
|
unkown
|
page read and write
|
|
|
|
7FF4FF54A000
|
unkown
|
page readonly
|
|
|
|
25649D41000
|
unkown
|
page read and write
|
|
|
|
7FF4FF63A000
|
unkown
|
page readonly
|
|
|
|
7FF4FF642000
|
unkown
|
page readonly
|
|
|
|
7FF4EC4DA000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC55000
|
unkown
|
page readonly
|
|
|
|
24BBA800000
|
unkown
|
page readonly
|
|
|
|
25649CBA000
|
unkown
|
page read and write
|
|
|
|
475CE7E000
|
unkown
|
page read and write
|
|
|
|
7FF4EC4E2000
|
unkown
|
page readonly
|
|
|
|
21D0A14C000
|
unkown
|
page read and write
|
|
|
|
2564D142000
|
unkown
|
page read and write
|
|
|
|
7FF5D53B4000
|
unkown
|
page readonly
|
|
|
|
53CE27E000
|
unkown
|
page read and write
|
|
|
|
21CD6400000
|
unkown
|
page readonly
|
|
|
|
7FF4EC43A000
|
unkown
|
page readonly
|
|
|
|
5C6E000
|
unkown
|
page read and write
|
|
|
|
27DB000
|
unkown
|
page readonly
|
|
|
|
52D9CF9000
|
unkown
|
page read and write
|
|
|
|
21D09853000
|
unkown
|
page read and write
|
|
|
|
21D0A168000
|
unkown
|
page read and write
|
|
|
|
2564BDF0000
|
unkown
|
page read and write
|
|
|
|
7FF5192D4000
|
unkown
|
page readonly
|
|
|
|
7FF56CFBE000
|
unkown
|
page readonly
|
|
|
|
21D098BF000
|
unkown
|
page read and write
|
|
|
|
7FF5D4F49000
|
unkown
|
page readonly
|
|
|
|
21D0A150000
|
unkown
|
page read and write
|
|
|
|
7FF5D2D3F000
|
unkown
|
page readonly
|
|
|
|
188713D0000
|
unkown
|
page readonly
|
|
|
|
16125950000
|
unkown
|
page write copy
|
|
|
|
1887351E000
|
unkown
|
page read and write
|
|
|
|
7FF5D5333000
|
unkown
|
page readonly
|
|
|
|
2564BD31000
|
unkown
|
page read and write
|
|
|
|
744EAFF000
|
unkown
|
page read and write
|
|
|
|
21B76429000
|
unkown
|
page read and write
|
|
|
|
7FF4FF375000
|
unkown
|
page readonly
|
|
|
|
2632000
|
unkown
|
page readonly
|
|
|
|
21D0A144000
|
unkown
|
page read and write
|
|
|
|
7FF5D5251000
|
unkown
|
page readonly
|
|
|
|
1FFBFB10000
|
unkown
|
page read and write
|
|
|
|
21D0A200000
|
unkown
|
page readonly
|
|
|
|
7CB0BFB000
|
unkown
|
page read and write
|
|
|
|
7FF4FF371000
|
unkown
|
page readonly
|
|
|
|
18871400000
|
unkown
|
page read and write
|
|
|
|
53CDCFE000
|
unkown
|
page read and write
|
|
|
|
7FF5D5148000
|
unkown
|
page readonly
|
|
|
|
25649B90000
|
unkown
|
page write copy
|
|
|
|
7FF4EC354000
|
unkown
|
page readonly
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
B44237E000
|
unkown
|
page read and write
|
|
|
|
7FF4FF5CD000
|
unkown
|
page readonly
|
|
|
|
7FF5D2B31000
|
unkown
|
page readonly
|
|
|
|
7FF5D2BDB000
|
unkown
|
page readonly
|
|
|
|
744EEFC000
|
unkown
|
page read and write
|
|
|
|
18873402000
|
unkown
|
page read and write
|
|
|
|
2564D000000
|
unkown
|
page read and write
|
|
|
|
21D0A14F000
|
unkown
|
page read and write
|
|
|
|
21D0A155000
|
unkown
|
page read and write
|
|
|
|
7FF53AD9B000
|
unkown
|
page readonly
|
|
|
|
1FFBFB60000
|
unkown
|
page readonly
|
|
|
|
25649CDB000
|
unkown
|
page read and write
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
7FF4EC469000
|
unkown
|
page readonly
|
|
|
|
21D0A100000
|
unkown
|
page read and write
|
|
|
|
25649C94000
|
unkown
|
page read and write
|
|
|
|
7FF5CC9D0000
|
unkown
|
page readonly
|
|
|
|
2564C210000
|
unkown
|
page read and write
|
|
|
|
15482E29000
|
unkown
|
page read and write
|
|
|
|
2C89000
|
unkown
|
page read and write
|
|
|
|
7FF53ACF1000
|
unkown
|
page readonly
|
|
|
|
2564BD17000
|
unkown
|
page read and write
|
|
|
|
7FF4EC466000
|
unkown
|
page readonly
|
|
|
|
21D09A00000
|
unkown
|
page readonly
|
|
|
|
24BBB340000
|
unkown
|
page readonly
|
|
|
|
7FF53AE63000
|
unkown
|
page readonly
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
188732F0000
|
unkown
|
page readonly
|
|
|
|
7FF56CFC8000
|
unkown
|
page readonly
|
|
|
|
7FF5CC9C7000
|
unkown
|
page readonly
|
|
|
|
7FF5D2C44000
|
unkown
|
page readonly
|
|
|
|
16125880000
|
unkown
|
page readonly
|
|
|
|
2564BD28000
|
unkown
|
page read and write
|
|
|
|
7FF5CC825000
|
unkown
|
page readonly
|
|
|
|
7FF4FF5C6000
|
unkown
|
page readonly
|
|
|
|
15482C20000
|
unkown
|
page readonly
|
|
|
|
5CAF000
|
stack
|
page read and write
|
|
|
|
D42A0FE000
|
unkown
|
page read and write
|
|
|
|
2E9E49B000
|
unkown
|
page read and write
|
|
|
|
7FF5D53E6000
|
unkown
|
page readonly
|
|
|
|
2564C410000
|
unkown
|
page read and write
|
|
|
|
7FF4FF5BE000
|
unkown
|
page readonly
|
|
|
|
7FF50CF14000
|
unkown
|
page readonly
|
|
|
|
54D0379000
|
unkown
|
page read and write
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
2853000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D5D000
|
unkown
|
page readonly
|
|
|
|
2E9EA79000
|
unkown
|
page read and write
|
|
|
|
21D098E2000
|
unkown
|
page read and write
|
|
|
|
25649AB0000
|
heap default
|
page read and write
|
|
|
|
7FF5D536E000
|
unkown
|
page readonly
|
|
|
|
7FF4EC41F000
|
unkown
|
page readonly
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC67000
|
unkown
|
page readonly
|
|
|
|
2564BD00000
|
unkown
|
page read and write
|
|
|
|
2564BE63000
|
unkown
|
page read and write
|
|
|
|
24BBA64F000
|
unkown
|
page read and write
|
|
|
|
2564BDCB000
|
unkown
|
page read and write
|
|
|
|
21D0A14B000
|
unkown
|
page read and write
|
|
|
|
21D09750000
|
unkown
|
page read and write
|
|
|
|
64A000
|
unkown
|
page read and write
|
|
|
|
7FF4FEDAD000
|
unkown
|
page readonly
|
|
|
|
1FFBFC3B000
|
heap default
|
page read and write
|
|
|
|
7FF4FF5B8000
|
unkown
|
page readonly
|
|
|
|
18873502000
|
unkown
|
page read and write
|
|
|
|
7FF4FF5AE000
|
unkown
|
page readonly
|
|
|
|
7FF50CFC2000
|
unkown
|
page readonly
|
|
|
|
25649C56000
|
unkown
|
page read and write
|
|
|
|
7FF5D28A6000
|
unkown
|
page readonly
|
|
|
|
7FF5192CA000
|
unkown
|
page readonly
|
|
|
|
2564BD9D000
|
unkown
|
page read and write
|
|
|
|
7FF4EC2EB000
|
unkown
|
page readonly
|
|
|
|
7FF53AE6F000
|
unkown
|
page readonly
|
|
|
|
21D0A14B000
|
unkown
|
page read and write
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
21D0A144000
|
unkown
|
page read and write
|
|
|
|
18871479000
|
unkown
|
page read and write
|
|
|
|
21D0A600000
|
unkown
|
page read and write
|
|
|
|
7CB0D7B000
|
unkown
|
page read and write
|
|
|
|
7FF56CFD1000
|
unkown
|
page readonly
|
|
|
|
7FF4EC3CF000
|
unkown
|
page readonly
|
|
|
|
7FF53ACD6000
|
unkown
|
page readonly
|
|
|
|
7FF5D5461000
|
unkown
|
page readonly
|
|
|
|
21D0A153000
|
unkown
|
page read and write
|
|
|
|
21B76270000
|
heap private
|
page read and write
|
|
|
|
475D0FF000
|
unkown
|
page read and write
|
|
|
|
25649D02000
|
unkown
|
page read and write
|
|
|
|
21CD6253000
|
unkown
|
page read and write
|
|
|
|
18871600000
|
unkown
|
page write copy
|
|
|
|
15482D40000
|
unkown
|
page readonly
|
|
|
|
21D0A161000
|
unkown
|
page read and write
|
|
|
|
21D0A15E000
|
unkown
|
page read and write
|
|
|
|
7FF5D4C71000
|
unkown
|
page readonly
|
|
|
|
A00000
|
unkown
|
page readonly
|
|
|
|
7FF4EC427000
|
unkown
|
page readonly
|
|
|
|
25649A50000
|
heap private
|
page read and write
|
|
|
|
7FF53AEFE000
|
unkown
|
page readonly
|
|
|
|
2564BF02000
|
unkown
|
page read and write
|
|
|
|
21B762D0000
|
heap default
|
page read and write
|
|
|
|
2564C110000
|
unkown
|
page read and write
|
|
|
|
7FF5D2A60000
|
unkown
|
page readonly
|
|
|
|
2564C410000
|
unkown
|
page read and write
|
|
|
|
7FF4FF44B000
|
unkown
|
page readonly
|
|
|
|
7FF53ADA8000
|
unkown
|
page readonly
|
|
|
|
52D993A000
|
unkown
|
page read and write
|
|
|
|
7FF5CCCA4000
|
unkown
|
page readonly
|
|
|
|
21CD624E000
|
unkown
|
page read and write
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
21D0A168000
|
unkown
|
page read and write
|
|
|
|
2564C210000
|
unkown
|
page read and write
|
|
|
|
161273A0000
|
unkown
|
page read and write
|
|
|
|
7FF5D5191000
|
unkown
|
page readonly
|
|
|
|
744EB7E000
|
unkown
|
page read and write
|
|
|
|
2564C610000
|
unkown
|
page read and write
|
|
|
|
21D0A14B000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC9A000
|
unkown
|
page readonly
|
|
|
|
25649D02000
|
unkown
|
page read and write
|
|
|
|
7FF5D53C4000
|
unkown
|
page readonly
|
|
|
|
21D098A9000
|
unkown
|
page read and write
|
|
|
|
24BBAD30000
|
unkown
|
page read and write
|
|
|
|
7FF5D539F000
|
unkown
|
page readonly
|
|
|
|
2842000
|
unkown
|
page readonly
|
|
|
|
7FF4FF30B000
|
unkown
|
page readonly
|
|
|
|
7FF4FF453000
|
unkown
|
page readonly
|
|
|
|
7FF5D533F000
|
unkown
|
page readonly
|
|
|
|
7FF5D2BDE000
|
unkown
|
page readonly
|
|
|
|
7FF56CF60000
|
unkown
|
page readonly
|
|
|
|
7FF53AC66000
|
unkown
|
page readonly
|
|
|
|
21B76413000
|
unkown
|
page read and write
|
|
|
|
7FF5D503F000
|
unkown
|
page readonly
|
|
|
|
7FF50CF2E000
|
unkown
|
page readonly
|
|
|
|
7FF518F57000
|
unkown
|
page readonly
|
|
|
|
21CD624D000
|
unkown
|
page read and write
|
|
|
|
7FF518F4A000
|
unkown
|
page readonly
|
|
|
|
7FF51927A000
|
unkown
|
page readonly
|
|
|
|
25649CE4000
|
unkown
|
page read and write
|
|
|
|
2825000
|
unkown
|
page readonly
|
|
|
|
18872EF0000
|
unkown
|
page readonly
|
|
|
|
27D2000
|
unkown
|
page readonly
|
|
|
|
2564BE12000
|
unkown
|
page read and write
|
|
|
|
21D0A13E000
|
unkown
|
page read and write
|
|
|
|
21CD6258000
|
unkown
|
page read and write
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF4EC407000
|
unkown
|
page readonly
|
|
|
|
D429E78000
|
unkown
|
page read and write
|
|
|
|
7FF4FF431000
|
unkown
|
page readonly
|
|
|
|
7FF4EBD47000
|
unkown
|
page readonly
|
|
|
|
7FF5D2CDA000
|
unkown
|
page readonly
|
|
|
|
18872DF0000
|
unkown
|
page read and write
|
|
|
|
7CB0FFB000
|
unkown
|
page read and write
|
|
|
|
7FF5CC468000
|
unkown
|
page readonly
|
|
|
|
21D0A170000
|
unkown
|
page read and write
|
|
|
|
7FF5D2D59000
|
unkown
|
page readonly
|
|
|
|
2C10000
|
unkown
|
page read and write
|
|
|
|
2564BA80000
|
unkown
|
page read and write
|
|
|
|
21D09EB0000
|
unkown
|
page readonly
|
|
|
|
21D0A159000
|
unkown
|
page read and write
|
|
|
|
7FF50CEFC000
|
unkown
|
page readonly
|
|
|
|
7FF518ADD000
|
unkown
|
page readonly
|
|
|
|
2749000
|
unkown
|
page readonly
|
|
|
|
21D09902000
|
unkown
|
page read and write
|
|
|
|
7FF51936A000
|
unkown
|
page readonly
|
|
|
|
7CB05DB000
|
unkown
|
page read and write
|
|
|
|
2C6D000
|
unkown
|
page read and write
|
|
|
|
7FF4EBD43000
|
unkown
|
page readonly
|
|
|
|
7FF56CF5E000
|
unkown
|
page readonly
|
|
|
|
2C65000
|
unkown
|
page read and write
|
|
|
|
21D09E60000
|
unkown
|
page readonly
|
|
|
|
1FFBFB80000
|
heap private
|
page read and write
|
|
|
|
21CD6264000
|
unkown
|
page read and write
|
|
|
|
7FF5D533B000
|
unkown
|
page readonly
|
|
|
|
21D0A148000
|
unkown
|
page read and write
|
|
|
|
7FF5CCCCD000
|
unkown
|
page readonly
|
|
|
|
21D0A144000
|
unkown
|
page read and write
|
|
|
|
2564BDED000
|
unkown
|
page read and write
|
|
|
|
7FF53AF08000
|
unkown
|
page readonly
|
|
|
|
21D0A151000
|
unkown
|
page read and write
|
|
|
|
18871487000
|
unkown
|
page read and write
|
|
|
|
7FF56CFCE000
|
unkown
|
page readonly
|
|
|
|
21D0A14F000
|
unkown
|
page read and write
|
|
|
|
7FF4FF4F2000
|
unkown
|
page readonly
|
|
|
|
D4295CE000
|
unkown
|
page read and write
|
|
|
|
7FF56CE41000
|
unkown
|
page readonly
|
|
|
|
85B000
|
unkown
|
page read and write
|
|
|
|
21D0A176000
|
unkown
|
page read and write
|
|
|
|
21D0A150000
|
unkown
|
page read and write
|
|
|
|
21B76440000
|
unkown
|
page read and write
|
|
|
|
2564D100000
|
unkown
|
page read and write
|
|
|
|
7FF53AECF000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D24000
|
unkown
|
page readonly
|
|
|
|
7FF50CED5000
|
unkown
|
page readonly
|
|
|
|
7CB12FD000
|
unkown
|
page read and write
|
|
|
|
7FF4FF57F000
|
unkown
|
page readonly
|
|
|
|
21D0A17A000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC4E000
|
unkown
|
page readonly
|
|
|
|
7FF519222000
|
unkown
|
page readonly
|
|
|
|
25649CCA000
|
unkown
|
page read and write
|
|
|
|
21D0A189000
|
unkown
|
page read and write
|
|
|
|
744ED7A000
|
unkown
|
page read and write
|
|
|
|
7FF4EC1AB000
|
unkown
|
page readonly
|
|
|
|
D429EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5D51B1000
|
unkown
|
page readonly
|
|
|
|
2564BDED000
|
unkown
|
page read and write
|
|
|
|
2564BDEC000
|
unkown
|
page read and write
|
|
|
|
7FF5CCB9D000
|
unkown
|
page readonly
|
|
|
|
7FF4EC390000
|
unkown
|
page readonly
|
|
|
|
21D0A150000
|
unkown
|
page read and write
|
|
|
|
7FF4FEDB1000
|
unkown
|
page readonly
|
|
|
|
7FF53AEB7000
|
unkown
|
page readonly
|
|
|
|
21D0A171000
|
unkown
|
page read and write
|
|
|
|
7FF5D5375000
|
unkown
|
page readonly
|
|
|
|
7FF56D051000
|
unkown
|
page readonly
|
|
|
|
21D09730000
|
unkown
|
page readonly
|
|
|
|
2821000
|
unkown
|
page readonly
|
|
|
|
25649D21000
|
unkown
|
page read and write
|
|
|
|
21D0A154000
|
unkown
|
page read and write
|
|
|
|
7FF53AF92000
|
unkown
|
page readonly
|
|
|
|
2564C210000
|
unkown
|
page read and write
|
|
|
|
7FF4EBFB0000
|
unkown
|
page readonly
|
|
|
|
7FF4FF3A9000
|
unkown
|
page readonly
|
|
|
|
21D0A15F000
|
unkown
|
page read and write
|
|
|
|
21D0A18E000
|
unkown
|
page read and write
|
|
|
|
7FF53AEF4000
|
unkown
|
page readonly
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
2564BA80000
|
unkown
|
page readonly
|
|
|
|
7FF5192F9000
|
unkown
|
page readonly
|
|
|
|
7FF4FF555000
|
unkown
|
page readonly
|
|
|
|
18871440000
|
unkown
|
page read and write
|
|
|
|
21D0A168000
|
unkown
|
page read and write
|
|
|
|
188732C0000
|
unkown
|
page read and write
|
|
|
|
7FF5190A1000
|
unkown
|
page readonly
|
|
|
|
7FF4FF57C000
|
unkown
|
page readonly
|
|
|
|
21D098F6000
|
unkown
|
page read and write
|
|
|
|
2C6D000
|
unkown
|
page read and write
|
|
|
|
16125870000
|
heap default
|
page read and write
|
|
|
|
15482E02000
|
unkown
|
page read and write
|
|
|
|
7FF5CCD41000
|
unkown
|
page readonly
|
|
|
|
7FF4EBFB6000
|
unkown
|
page readonly
|
|
|
|
2564BC02000
|
unkown
|
page read and write
|
|
|
|
18871429000
|
unkown
|
page read and write
|
|
|
|
1FFBFA40000
|
unkown
|
page readonly
|
|
|
|
7FF4EC005000
|
unkown
|
page readonly
|
|
|
|
18873523000
|
unkown
|
page read and write
|
|
|
|
24C3000
|
unkown
|
page readonly
|
|
|
|
16125C00000
|
unkown
|
page readonly
|
|
|
|
2B1A000
|
heap private
|
page read and write
|
|
|
|
7FF518F3C000
|
unkown
|
page readonly
|
|
|
|
2564D102000
|
unkown
|
page read and write
|
|
|
|
2564BE32000
|
unkown
|
page read and write
|
|
|
|
24BBB000000
|
unkown
|
page readonly
|
|
|
|
21D0A136000
|
unkown
|
page read and write
|
|
|
|
7FF53AF91000
|
unkown
|
page readonly
|
|
|
|
7FF4EC293000
|
unkown
|
page readonly
|
|
|
|
21D0A14D000
|
unkown
|
page read and write
|
|
|
|
21D0A159000
|
unkown
|
page read and write
|
|
|
|
21D0A157000
|
unkown
|
page read and write
|
|
|
|
7CB0C79000
|
unkown
|
page read and write
|
|
|
|
25649C94000
|
unkown
|
page read and write
|
|
|
|
2D40000
|
unkown
|
page readonly
|
|
|
|
7CB097A000
|
unkown
|
page read and write
|
|
|
|
B44227C000
|
unkown
|
page read and write
|
|
|
|
7FF5D2C4C000
|
unkown
|
page readonly
|
|
|
|
2E9E51E000
|
unkown
|
page read and write
|
|
|
|
25649CA4000
|
unkown
|
page read and write
|
|
|
|
7FF4EBF52000
|
unkown
|
page readonly
|
|
|
|
7FF5D2A57000
|
unkown
|
page readonly
|
|
|
|
7FF56CC1C000
|
unkown
|
page readonly
|
|
|
|
5CE0000
|
unkown
|
page readonly
|
|
|
|
27AD000
|
unkown
|
page readonly
|
|
|
|
7FF5192AC000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC7C000
|
unkown
|
page readonly
|
|
|
|
25649D1E000
|
unkown
|
page read and write
|
|
|
|
278C000
|
unkown
|
page readonly
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
7FF50C765000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC50000
|
unkown
|
page readonly
|
|
|
|
5DA0000
|
unkown
|
page readonly
|
|
|
|
2564BE94000
|
unkown
|
page read and write
|
|
|
|
7FF5D53D8000
|
unkown
|
page readonly
|
|
|
|
7FF53AB5C000
|
unkown
|
page readonly
|
|
|
|
21D0A136000
|
unkown
|
page read and write
|
|
|
|
21D0A152000
|
unkown
|
page read and write
|
|
|
|
1FFBFC30000
|
heap default
|
page read and write
|
|
|
|
7CB137C000
|
unkown
|
page read and write
|
|
|
|
7FF5D53E1000
|
unkown
|
page readonly
|
|
|
|
53CDC7D000
|
unkown
|
page read and write
|
|
|
|
21D097A0000
|
unkown
|
page write copy
|
|
|
|
21D0A159000
|
unkown
|
page read and write
|
|
|
|
21D0A14C000
|
unkown
|
page read and write
|
|
There are 1081 hidden memdumps, click here to show them.