Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
CTR00068CP1XML.XML
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{51D9031F-77AB-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{51D90321-77AB-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\xmltreeview[1]
|
ASCII text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF57804EB26D01F0F9.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFABAAF56B4E43D88B.TMP
|
data
|
dropped
|
|
There are 5 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\MSOXMLED.EXE
|
'C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLED.EXE' /verb open 'C:\Users\user\Desktop\CTR00068CP1XML.XML'
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' C:\Users\user\Desktop\CTR00068CP1XML.XML
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4584 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\MSOXMLED.EXE
|
{17FE9752-0B5A-4665-84CD-569794602F5C} {7F9185B0-CB92-43C5-80A9-92277A4F7B54} 0xFFFF
|
|
|
|
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\MSOXMLED.EXE
|
C:\Program Files\Internet Explorer\iexplore.exe.FriendlyAppName
|
|
|
|
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\MSOXMLED.EXE
|
C:\Program Files\Internet Explorer\iexplore.exe.ApplicationCompany
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{51D9031F-77AB-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
There are 9 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
7FF59078E000
|
unkown
|
page readonly
|
|
|
|
A3D18F5000
|
unkown
|
page read and write
|
|
|
|
7FF590021000
|
unkown
|
page readonly
|
|
|
|
26144D61000
|
unkown
|
page read and write
|
|
|
|
26144D25000
|
unkown
|
page read and write
|
|
|
|
7FF553228000
|
unkown
|
page readonly
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
A3D1F78000
|
unkown
|
page read and write
|
|
|
|
7FF55323D000
|
unkown
|
page readonly
|
|
|
|
26144D61000
|
unkown
|
page read and write
|
|
|
|
26144D25000
|
unkown
|
page read and write
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
16D2EE00000
|
unkown
|
page read and write
|
|
|
|
26144D77000
|
unkown
|
page read and write
|
|
|
|
26144D61000
|
unkown
|
page read and write
|
|
|
|
7FF5BACA8000
|
unkown
|
page readonly
|
|
|
|
26144D65000
|
unkown
|
page read and write
|
|
|
|
7FF590764000
|
unkown
|
page readonly
|
|
|
|
7FF590556000
|
unkown
|
page readonly
|
|
|
|
16D308A0000
|
unkown
|
page readonly
|
|
|
|
284E8C00000
|
unkown
|
page readonly
|
|
|
|
7FF4F978C000
|
unkown
|
page readonly
|
|
|
|
26144DA7000
|
unkown
|
page read and write
|
|
|
|
16D31202000
|
unkown
|
page read and write
|
|
|
|
26145202000
|
unkown
|
page read and write
|
|
|
|
16D2EF13000
|
unkown
|
page read and write
|
|
|
|
7FF5532B1000
|
unkown
|
page readonly
|
|
|
|
7FF590282000
|
unkown
|
page readonly
|
|
|
|
1EED5708000
|
unkown
|
page read and write
|
|
|
|
7FF590623000
|
unkown
|
page readonly
|
|
|
|
26144DCE000
|
unkown
|
page read and write
|
|
|
|
26144AD0000
|
unkown
|
page readonly
|
|
|
|
212D7452000
|
unkown
|
page read and write
|
|
|
|
A3D19FB000
|
unkown
|
page read and write
|
|
|
|
7FF559C74000
|
unkown
|
page readonly
|
|
|
|
26144DB3000
|
unkown
|
page read and write
|
|
|
|
26144D91000
|
unkown
|
page read and write
|
|
|
|
16D2EF34000
|
unkown
|
page read and write
|
|
|
|
16D30CB0000
|
unkown
|
page readonly
|
|
|
|
7FF5C022A000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC3A000
|
unkown
|
page readonly
|
|
|
|
16D2EF02000
|
unkown
|
page read and write
|
|
|
|
7FF5C01AC000
|
unkown
|
page readonly
|
|
|
|
26144D61000
|
unkown
|
page read and write
|
|
|
|
7FF5BACB6000
|
unkown
|
page readonly
|
|
|
|
261443F0000
|
unkown
|
page readonly
|
|
|
|
26144D4D000
|
unkown
|
page read and write
|
|
|
|
7FF590725000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC6C000
|
unkown
|
page readonly
|
|
|
|
212D73C0000
|
unkown
|
page readonly
|
|
|
|
7FF5BAD31000
|
unkown
|
page readonly
|
|
|
|
7FF552E8F000
|
unkown
|
page readonly
|
|
|
|
1470B902000
|
unkown
|
page read and write
|
|
|
|
26144D1E000
|
unkown
|
page read and write
|
|
|
|
7FF5BAD24000
|
unkown
|
page readonly
|
|
|
|
212D7400000
|
unkown
|
page read and write
|
|
|
|
16D2EE84000
|
unkown
|
page read and write
|
|
|
|
7FF5C0324000
|
unkown
|
page readonly
|
|
|
|
7FF5906E3000
|
unkown
|
page readonly
|
|
|
|
FA1A97E000
|
unkown
|
page read and write
|
|
|
|
261444DD000
|
unkown
|
page read and write
|
|
|
|
16D31302000
|
unkown
|
page read and write
|
|
|
|
7FF5BFFC0000
|
unkown
|
page readonly
|
|
|
|
16D2EE29000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC94000
|
unkown
|
page readonly
|
|
|
|
26144D35000
|
unkown
|
page read and write
|
|
|
|
7FF59D7AE000
|
unkown
|
page readonly
|
|
|
|
16D31382000
|
unkown
|
page read and write
|
|
|
|
26144D66000
|
unkown
|
page read and write
|
|
|
|
7FF5C018D000
|
unkown
|
page readonly
|
|
|
|
26144D57000
|
unkown
|
page read and write
|
|
|
|
26144D4B000
|
unkown
|
page read and write
|
|
|
|
212D7720000
|
unkown
|
page readonly
|
|
|
|
A3D1D78000
|
unkown
|
page read and write
|
|
|
|
16D31026000
|
unkown
|
page read and write
|
|
|
|
16D2EF27000
|
unkown
|
page read and write
|
|
|
|
284E8400000
|
unkown
|
page read and write
|
|
|
|
261444D5000
|
unkown
|
page read and write
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
7FF4F99D8000
|
unkown
|
page readonly
|
|
|
|
42C8CFB000
|
unkown
|
page read and write
|
|
|
|
81E6D7B000
|
unkown
|
page read and write
|
|
|
|
FA1ADFF000
|
unkown
|
page read and write
|
|
|
|
81E70FF000
|
unkown
|
page read and write
|
|
|
|
42C8AFA000
|
unkown
|
page read and write
|
|
|
|
1470B86D000
|
unkown
|
page read and write
|
|
|
|
1470B86C000
|
unkown
|
page read and write
|
|
|
|
7FF5BAA06000
|
unkown
|
page readonly
|
|
|
|
16D2EF22000
|
unkown
|
page read and write
|
|
|
|
7FF5C0193000
|
unkown
|
page readonly
|
|
|
|
16D2EE98000
|
unkown
|
page read and write
|
|
|
|
26144D61000
|
unkown
|
page read and write
|
|
|
|
7FF5C0294000
|
unkown
|
page readonly
|
|
|
|
7FF5C028A000
|
unkown
|
page readonly
|
|
|
|
26144DE2000
|
unkown
|
page read and write
|
|
|
|
7FF59D376000
|
unkown
|
page readonly
|
|
|
|
293EA610000
|
unkown
|
page readonly
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
7FF5BFE15000
|
unkown
|
page readonly
|
|
|
|
1470B780000
|
heap default
|
page read and write
|
|
|
|
26144D57000
|
unkown
|
page read and write
|
|
|
|
FA1AB7B000
|
unkown
|
page read and write
|
|
|
|
419087A000
|
unkown
|
page read and write
|
|
|
|
7FF552F86000
|
unkown
|
page readonly
|
|
|
|
16D310D5000
|
unkown
|
page read and write
|
|
|
|
284E8429000
|
unkown
|
page read and write
|
|
|
|
1470B86D000
|
unkown
|
page read and write
|
|
|
|
1470B829000
|
unkown
|
page read and write
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
7FF5906C2000
|
unkown
|
page readonly
|
|
|
|
7FF559C98000
|
unkown
|
page readonly
|
|
|
|
261444D5000
|
unkown
|
page read and write
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
7FF5530BB000
|
unkown
|
page readonly
|
|
|
|
16D31088000
|
unkown
|
page read and write
|
|
|
|
26144D7B000
|
unkown
|
page read and write
|
|
|
|
16D2EE6E000
|
unkown
|
page read and write
|
|
|
|
16D32310000
|
unkown
|
page read and write
|
|
|
|
81E6A7C000
|
unkown
|
page read and write
|
|
|
|
26144D1E000
|
unkown
|
page read and write
|
|
|
|
26144D62000
|
unkown
|
page read and write
|
|
|
|
7FF5531BE000
|
unkown
|
page readonly
|
|
|
|
16D32110000
|
unkown
|
page read and write
|
|
|
|
26145261000
|
unkown
|
page read and write
|
|
|
|
7FF5BAAEA000
|
unkown
|
page readonly
|
|
|
|
26144DBC000
|
unkown
|
page read and write
|
|
|
|
1470B868000
|
unkown
|
page read and write
|
|
|
|
16D30F38000
|
unkown
|
page read and write
|
|
|
|
16D2EEC9000
|
unkown
|
page read and write
|
|
|
|
26144413000
|
unkown
|
page read and write
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
16D30F3F000
|
unkown
|
page read and write
|
|
|
|
1470B86F000
|
unkown
|
page read and write
|
|
|
|
16D30F46000
|
unkown
|
page read and write
|
|
|
|
42C91FC000
|
unkown
|
page read and write
|
|
|
|
293EA600000
|
heap private
|
page read and write
|
|
|
|
16D32110000
|
unkown
|
page read and write
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
1470B86D000
|
unkown
|
page read and write
|
|
|
|
7FF590774000
|
unkown
|
page readonly
|
|
|
|
7FF5BA7AE000
|
unkown
|
page readonly
|
|
|
|
26144D55000
|
unkown
|
page read and write
|
|
|
|
7FF553214000
|
unkown
|
page readonly
|
|
|
|
26144D99000
|
unkown
|
page read and write
|
|
|
|
42C887A000
|
unkown
|
page read and write
|
|
|
|
26144D75000
|
unkown
|
page read and write
|
|
|
|
212D7402000
|
unkown
|
page read and write
|
|
|
|
7FF4F99B1000
|
unkown
|
page readonly
|
|
|
|
284E8990000
|
unkown
|
page read and write
|
|
|
|
81E6FFF000
|
unkown
|
page read and write
|
|
|
|
42C927B000
|
unkown
|
page read and write
|
|
|
|
26145254000
|
unkown
|
page read and write
|
|
|
|
7FF552E8A000
|
unkown
|
page readonly
|
|
|
|
16D2EE6C000
|
unkown
|
page read and write
|
|
|
|
26145202000
|
unkown
|
page read and write
|
|
|
|
7FF59D6FD000
|
unkown
|
page readonly
|
|
|
|
16D2EDC0000
|
unkown
|
page readonly
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
26144DB9000
|
unkown
|
page read and write
|
|
|
|
212D7600000
|
unkown
|
page readonly
|
|
|
|
7FF59D7B5000
|
unkown
|
page readonly
|
|
|
|
16D310D7000
|
unkown
|
page read and write
|
|
|
|
26144D68000
|
unkown
|
page read and write
|
|
|
|
261444DD000
|
unkown
|
page read and write
|
|
|
|
42C867F000
|
unkown
|
page read and write
|
|
|
|
81E6DFE000
|
unkown
|
page read and write
|
|
|
|
7FF590757000
|
unkown
|
page readonly
|
|
|
|
7FF59D714000
|
unkown
|
page readonly
|
|
|
|
16D30C50000
|
unkown
|
page readonly
|
|
|
|
261444EF000
|
unkown
|
page read and write
|
|
|
|
261444D5000
|
unkown
|
page read and write
|
|
|
|
7FF552FE5000
|
unkown
|
page readonly
|
|
|
|
7FF4F9A70000
|
unkown
|
page readonly
|
|
|
|
16D2EF45000
|
unkown
|
page read and write
|
|
|
|
26144D5D000
|
unkown
|
page read and write
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
26144D61000
|
unkown
|
page read and write
|
|
|
|
261442C0000
|
heap default
|
page read and write
|
|
|
|
7FF5BAC45000
|
unkown
|
page readonly
|
|
|
|
284E81D0000
|
heap private
|
page read and write
|
|
|
|
1EED5560000
|
unkown
|
page readonly
|
|
|
|
7FF590737000
|
unkown
|
page readonly
|
|
|
|
261444F8000
|
unkown
|
page read and write
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
7FF5BA9FB000
|
unkown
|
page readonly
|
|
|
|
2614444A000
|
unkown
|
page read and write
|
|
|
|
7FF58FF7D000
|
unkown
|
page readonly
|
|
|
|
1470B869000
|
unkown
|
page read and write
|
|
|
|
7FF4F9AE7000
|
unkown
|
page readonly
|
|
|
|
7FF5594C5000
|
unkown
|
page readonly
|
|
|
|
7FF590666000
|
unkown
|
page readonly
|
|
|
|
16D31400000
|
unkown
|
page readonly
|
|
|
|
16D30E02000
|
unkown
|
page read and write
|
|
|
|
26144DD7000
|
unkown
|
page read and write
|
|
|
|
7FF4F98F5000
|
unkown
|
page readonly
|
|
|
|
7FF5C024B000
|
unkown
|
page readonly
|
|
|
|
7FF59080A000
|
unkown
|
page readonly
|
|
|
|
7FF59066D000
|
unkown
|
page readonly
|
|
|
|
26144D39000
|
unkown
|
page read and write
|
|
|
|
42C93FC000
|
unkown
|
page read and write
|
|
|
|
293EA2CE000
|
unkown
|
page read and write
|
|
|
|
1470B813000
|
unkown
|
page read and write
|
|
|
|
7FF590561000
|
unkown
|
page readonly
|
|
|
|
26144D72000
|
unkown
|
page read and write
|
|
|
|
26144D61000
|
unkown
|
page read and write
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
16D30C70000
|
unkown
|
page read and write
|
|
|
|
7FF4F932D000
|
unkown
|
page readonly
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
1470B869000
|
unkown
|
page read and write
|
|
|
|
7FF5BA855000
|
unkown
|
page readonly
|
|
|
|
1EED5420000
|
heap private
|
page read and write
|
|
|
|
26144DD5000
|
unkown
|
page read and write
|
|
|
|
26144D4F000
|
unkown
|
page read and write
|
|
|
|
26144DB9000
|
unkown
|
page read and write
|
|
|
|
16D31057000
|
unkown
|
page read and write
|
|
|
|
7FF5532A4000
|
unkown
|
page readonly
|
|
|
|
7FF5C013B000
|
unkown
|
page readonly
|
|
|
|
26144D96000
|
unkown
|
page read and write
|
|
|
|
7FF4F99D3000
|
unkown
|
page readonly
|
|
|
|
7FF4F9ACA000
|
unkown
|
page readonly
|
|
|
|
16D32210000
|
unkown
|
page read and write
|
|
|
|
7FF5902F9000
|
unkown
|
page readonly
|
|
|
|
1470B868000
|
unkown
|
page read and write
|
|
|
|
16D31000000
|
unkown
|
page read and write
|
|
|
|
16D310DF000
|
unkown
|
page read and write
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC57000
|
unkown
|
page readonly
|
|
|
|
7FF590571000
|
unkown
|
page readonly
|
|
|
|
212D7429000
|
unkown
|
page read and write
|
|
|
|
293EA2A7000
|
heap default
|
page read and write
|
|
|
|
7FF4F9896000
|
unkown
|
page readonly
|
|
|
|
7FF59072B000
|
unkown
|
page readonly
|
|
|
|
81E6AFE000
|
unkown
|
page read and write
|
|
|
|
16D30F2E000
|
unkown
|
page read and write
|
|
|
|
26144D5C000
|
unkown
|
page read and write
|
|
|
|
16D2ECA0000
|
unkown
|
page readonly
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
6F919FE000
|
unkown
|
page read and write
|
|
|
|
7FF4F9A72000
|
unkown
|
page readonly
|
|
|
|
7FF59D89A000
|
unkown
|
page readonly
|
|
|
|
212D76D0000
|
unkown
|
page write copy
|
|
|
|
16D2EC30000
|
heap private
|
page read and write
|
|
|
|
16D310A8000
|
unkown
|
page read and write
|
|
|
|
16D30FEB000
|
unkown
|
page read and write
|
|
|
|
42C83AE000
|
unkown
|
page read and write
|
|
|
|
7FF4F979A000
|
unkown
|
page readonly
|
|
|
|
7FF5906B2000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC0F000
|
unkown
|
page readonly
|
|
|
|
7FF5BA815000
|
unkown
|
page readonly
|
|
|
|
7FF4F9BC2000
|
unkown
|
page readonly
|
|
|
|
16D2EE3F000
|
unkown
|
page read and write
|
|
|
|
293EA2CE000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC77000
|
unkown
|
page readonly
|
|
|
|
26144AE0000
|
unkown
|
page readonly
|
|
|
|
16D30FE0000
|
unkown
|
page read and write
|
|
|
|
261443C0000
|
unkown
|
page read and write
|
|
|
|
212D743F000
|
unkown
|
page read and write
|
|
|
|
26144DCE000
|
unkown
|
page read and write
|
|
|
|
26144D4D000
|
unkown
|
page read and write
|
|
|
|
16D2F000000
|
unkown
|
page readonly
|
|
|
|
1470B900000
|
unkown
|
page read and write
|
|
|
|
26144DA3000
|
unkown
|
page read and write
|
|
|
|
26144D6B000
|
unkown
|
page read and write
|
|
|
|
26144D1E000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC2C000
|
unkown
|
page readonly
|
|
|
|
26144DA3000
|
unkown
|
page read and write
|
|
|
|
7FF5BA593000
|
unkown
|
page readonly
|
|
|
|
26144DD7000
|
unkown
|
page read and write
|
|
|
|
7FF5903EA000
|
unkown
|
page readonly
|
|
|
|
7FF590796000
|
unkown
|
page readonly
|
|
|
|
A3D153E000
|
unkown
|
page read and write
|
|
|
|
A3D15BF000
|
unkown
|
page read and write
|
|
|
|
A3D1FFF000
|
unkown
|
page read and write
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
7FF59D527000
|
unkown
|
page readonly
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
16D2EEB2000
|
unkown
|
page read and write
|
|
|
|
26144453000
|
unkown
|
page read and write
|
|
|
|
16D32010000
|
unkown
|
page read and write
|
|
|
|
16D30F91000
|
unkown
|
page read and write
|
|
|
|
26144D65000
|
unkown
|
page read and write
|
|
|
|
7FF559C8E000
|
unkown
|
page readonly
|
|
|
|
261444D5000
|
unkown
|
page read and write
|
|
|
|
284E8310000
|
unkown
|
page readonly
|
|
|
|
7FF5BFA3F000
|
unkown
|
page readonly
|
|
|
|
7FF5BAD2A000
|
unkown
|
page readonly
|
|
|
|
16D2EEB2000
|
unkown
|
page read and write
|
|
|
|
1EED5600000
|
unkown
|
page read and write
|
|
|
|
284E844A000
|
unkown
|
page read and write
|
|
|
|
7FF553239000
|
unkown
|
page readonly
|
|
|
|
7FF559D21000
|
unkown
|
page readonly
|
|
|
|
C8EB5FE000
|
unkown
|
page read and write
|
|
|
|
A3D1C7E000
|
unkown
|
page read and write
|
|
|
|
7FF4F9B41000
|
unkown
|
page readonly
|
|
|
|
1EED562A000
|
unkown
|
page read and write
|
|
|
|
1EED5656000
|
unkown
|
page read and write
|
|
|
|
7FF5BFFB7000
|
unkown
|
page readonly
|
|
|
|
293EA605000
|
heap private
|
page read and write
|
|
|
|
7FF5BA857000
|
unkown
|
page readonly
|
|
|
|
7FF5BAAE3000
|
unkown
|
page readonly
|
|
|
|
7FF5530C8000
|
unkown
|
page readonly
|
|
|
|
7FF552E7C000
|
unkown
|
page readonly
|
|
|
|
16D2EF35000
|
unkown
|
page read and write
|
|
|
|
26144D99000
|
unkown
|
page read and write
|
|
|
|
C8EB57A000
|
unkown
|
page read and write
|
|
|
|
7FF5BA43F000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC2A000
|
unkown
|
page readonly
|
|
|
|
284E8502000
|
unkown
|
page read and write
|
|
|
|
293EA3A0000
|
unkown
|
page readonly
|
|
|
|
7FF559D22000
|
unkown
|
page readonly
|
|
|
|
1EED5E02000
|
unkown
|
page read and write
|
|
|
|
7FF5903F7000
|
unkown
|
page readonly
|
|
|
|
7FF5BA806000
|
unkown
|
page readonly
|
|
|
|
1470B869000
|
unkown
|
page read and write
|
|
|
|
284E8500000
|
unkown
|
page read and write
|
|
|
|
293EA2A0000
|
heap default
|
page read and write
|
|
|
|
7FF553160000
|
unkown
|
page readonly
|
|
|
|
7FF5C026C000
|
unkown
|
page readonly
|
|
|
|
26144D97000
|
unkown
|
page read and write
|
|
|
|
261444DD000
|
unkown
|
page read and write
|
|
|
|
26144AF0000
|
unkown
|
page read and write
|
|
|
|
7FF4F979F000
|
unkown
|
page readonly
|
|
|
|
7FF59074C000
|
unkown
|
page readonly
|
|
|
|
1EED5713000
|
unkown
|
page read and write
|
|
|
|
26144260000
|
heap private
|
page read and write
|
|
|
|
7FF590799000
|
unkown
|
page readonly
|
|
|
|
26144D4D000
|
unkown
|
page read and write
|
|
|
|
42C8F7B000
|
unkown
|
page read and write
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
1470BAD0000
|
unkown
|
page readonly
|
|
|
|
26144D21000
|
unkown
|
page read and write
|
|
|
|
26144C02000
|
unkown
|
page read and write
|
|
|
|
7FF59D82D000
|
unkown
|
page readonly
|
|
|
|
6F9197A000
|
unkown
|
page read and write
|
|
|
|
7FF59D804000
|
unkown
|
page readonly
|
|
|
|
16D2EF65000
|
unkown
|
page read and write
|
|
|
|
26144D24000
|
unkown
|
page read and write
|
|
|
|
1470B802000
|
unkown
|
page read and write
|
|
|
|
7FF55322E000
|
unkown
|
page readonly
|
|
|
|
7FF4F9B49000
|
unkown
|
page readonly
|
|
|
|
26144D35000
|
unkown
|
page read and write
|
|
|
|
7FF5BA9C0000
|
unkown
|
page readonly
|
|
|
|
7FF4F9B08000
|
unkown
|
page readonly
|
|
|
|
42C917D000
|
unkown
|
page read and write
|
|
|
|
261444D5000
|
unkown
|
page read and write
|
|
|
|
7FF5531F8000
|
unkown
|
page readonly
|
|
|
|
212D7502000
|
unkown
|
page read and write
|
|
|
|
7FF4F9B46000
|
unkown
|
page readonly
|
|
|
|
26144D25000
|
unkown
|
page read and write
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
7FF552E97000
|
unkown
|
page readonly
|
|
|
|
16D310C9000
|
unkown
|
page read and write
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
7FF5BAA76000
|
unkown
|
page readonly
|
|
|
|
16D30FFF000
|
unkown
|
page read and write
|
|
|
|
26144D46000
|
unkown
|
page read and write
|
|
|
|
7FF5BAA81000
|
unkown
|
page readonly
|
|
|
|
6F9187E000
|
unkown
|
page read and write
|
|
|
|
7FF5C02B6000
|
unkown
|
page readonly
|
|
|
|
7FF559C35000
|
unkown
|
page readonly
|
|
|
|
7FF5C00E3000
|
unkown
|
page readonly
|
|
|
|
7FF553183000
|
unkown
|
page readonly
|
|
|
|
16D307A0000
|
unkown
|
page read and write
|
|
|
|
42C88FB000
|
unkown
|
page read and write
|
|
|
|
7FF5BA7B2000
|
unkown
|
page readonly
|
|
|
|
26144D72000
|
unkown
|
page read and write
|
|
|
|
284E843C000
|
unkown
|
page read and write
|
|
|
|
7FF5531C0000
|
unkown
|
page readonly
|
|
|
|
7FF5BACB9000
|
unkown
|
page readonly
|
|
|
|
42C8779000
|
unkown
|
page read and write
|
|
|
|
26144AE0000
|
unkown
|
page read and write
|
|
|
|
26144D4E000
|
unkown
|
page read and write
|
|
|
|
26144DB9000
|
unkown
|
page read and write
|
|
|
|
2614444D000
|
unkown
|
page read and write
|
|
|
|
FA1ABFE000
|
unkown
|
page read and write
|
|
|
|
7FF559D1A000
|
unkown
|
page readonly
|
|
|
|
16D30C60000
|
unkown
|
page read and write
|
|
|
|
7FF5C023E000
|
unkown
|
page readonly
|
|
|
|
42C89FB000
|
unkown
|
page read and write
|
|
|
|
7FF5C023A000
|
unkown
|
page readonly
|
|
|
|
7FF5906EF000
|
unkown
|
page readonly
|
|
|
|
7FF59D7FA000
|
unkown
|
page readonly
|
|
|
|
26144D1E000
|
unkown
|
page read and write
|
|
|
|
284E8513000
|
unkown
|
page read and write
|
|
|
|
7FF5C032A000
|
unkown
|
page readonly
|
|
|
|
16D2EC90000
|
heap default
|
page read and write
|
|
|
|
26144D61000
|
unkown
|
page read and write
|
|
|
|
7FF5531EF000
|
unkown
|
page readonly
|
|
|
|
26144D4E000
|
unkown
|
page read and write
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
7FF5903EF000
|
unkown
|
page readonly
|
|
|
|
261444BF000
|
unkown
|
page read and write
|
|
|
|
7FF4F9B4D000
|
unkown
|
page readonly
|
|
|
|
261444B2000
|
unkown
|
page read and write
|
|
|
|
284E8450000
|
unkown
|
page read and write
|
|
|
|
42C8D7B000
|
unkown
|
page read and write
|
|
|
|
16D31183000
|
unkown
|
page read and write
|
|
|
|
42C92FC000
|
unkown
|
page read and write
|
|
|
|
16D30C60000
|
unkown
|
page read and write
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
7FF59D6AB000
|
unkown
|
page readonly
|
|
|
|
7FF59D7AA000
|
unkown
|
page readonly
|
|
|
|
16D30FE3000
|
unkown
|
page read and write
|
|
|
|
26144513000
|
unkown
|
page read and write
|
|
|
|
1EED563C000
|
unkown
|
page read and write
|
|
|
|
26144D38000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB3B000
|
unkown
|
page readonly
|
|
|
|
7FF59D818000
|
unkown
|
page readonly
|
|
|
|
1470B86A000
|
unkown
|
page read and write
|
|
|
|
16D30F57000
|
unkown
|
page read and write
|
|
|
|
1EED5480000
|
heap default
|
page read and write
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
16D31342000
|
unkown
|
page read and write
|
|
|
|
26144D24000
|
unkown
|
page read and write
|
|
|
|
7FF59D691000
|
unkown
|
page readonly
|
|
|
|
261444A8000
|
unkown
|
page read and write
|
|
|
|
7FF59076A000
|
unkown
|
page readonly
|
|
|
|
16D30C80000
|
unkown
|
page read and write
|
|
|
|
261442D0000
|
unkown
|
page readonly
|
|
|
|
1470B720000
|
heap private
|
page read and write
|
|
|
|
7FF5531EC000
|
unkown
|
page readonly
|
|
|
|
7FF5BABE2000
|
unkown
|
page readonly
|
|
|
|
7FF5BAD32000
|
unkown
|
page readonly
|
|
|
|
7FF590812000
|
unkown
|
page readonly
|
|
|
|
6F915DE000
|
unkown
|
page read and write
|
|
|
|
26144D38000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC9F000
|
unkown
|
page readonly
|
|
|
|
7FF5BAA40000
|
unkown
|
page readonly
|
|
|
|
41909FF000
|
unkown
|
page read and write
|
|
|
|
7FF590788000
|
unkown
|
page readonly
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
7FF5C0284000
|
unkown
|
page readonly
|
|
|
|
26144D60000
|
unkown
|
page read and write
|
|
|
|
7FF59D7DF000
|
unkown
|
page readonly
|
|
|
|
16D31143000
|
unkown
|
page read and write
|
|
|
|
26144D46000
|
unkown
|
page read and write
|
|
|
|
42C8E7A000
|
unkown
|
page read and write
|
|
|
|
FA1AEFF000
|
unkown
|
page read and write
|
|
|
|
16D32410000
|
unkown
|
page read and write
|
|
|
|
7FF559C7A000
|
unkown
|
page readonly
|
|
|
|
7FF5BAB21000
|
unkown
|
page readonly
|
|
|
|
7FF5C02B9000
|
unkown
|
page readonly
|
|
|
|
26144D42000
|
unkown
|
page read and write
|
|
|
|
212D8FC0000
|
unkown
|
page readonly
|
|
|
|
293EA290000
|
unkown
|
page readonly
|
|
|
|
42C90FB000
|
unkown
|
page read and write
|
|
|
|
16D2EE50000
|
unkown
|
page read and write
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
7FF5904FF000
|
unkown
|
page readonly
|
|
|
|
16D31077000
|
unkown
|
page read and write
|
|
|
|
42C947F000
|
unkown
|
page read and write
|
|
|
|
26144D4D000
|
unkown
|
page read and write
|
|
|
|
7FF5531CB000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC14000
|
unkown
|
page readonly
|
|
|
|
7FF5BFE06000
|
unkown
|
page readonly
|
|
|
|
7FF5C0121000
|
unkown
|
page readonly
|
|
|
|
42C832B000
|
unkown
|
page read and write
|
|
|
|
7FF59D7B0000
|
unkown
|
page readonly
|
|
|
|
7FF59D894000
|
unkown
|
page readonly
|
|
|
|
16D30F28000
|
unkown
|
page read and write
|
|
|
|
6F9155B000
|
unkown
|
page read and write
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
7FF59071E000
|
unkown
|
page readonly
|
|
|
|
7FF59071A000
|
unkown
|
page readonly
|
|
|
|
7FF59061B000
|
unkown
|
page readonly
|
|
|
|
16D31242000
|
unkown
|
page read and write
|
|
|
|
284E8F40000
|
unkown
|
page readonly
|
|
|
|
1EED5C60000
|
unkown
|
page readonly
|
|
|
|
16D30C20000
|
unkown
|
page readonly
|
|
|
|
26144D58000
|
unkown
|
page read and write
|
|
|
|
7FF5530C3000
|
unkown
|
page readonly
|
|
|
|
7FF590720000
|
unkown
|
page readonly
|
|
|
|
212D7413000
|
unkown
|
page read and write
|
|
|
|
26144451000
|
unkown
|
page read and write
|
|
|
|
293EA240000
|
unkown
|
page read and write
|
|
|
|
7FF4F9ADB000
|
unkown
|
page readonly
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
7FF590804000
|
unkown
|
page readonly
|
|
|
|
16D2EE13000
|
unkown
|
page read and write
|
|
|
|
C8EB1AF000
|
unkown
|
page read and write
|
|
|
|
26144DD5000
|
unkown
|
page read and write
|
|
|
|
7FF59D370000
|
unkown
|
page readonly
|
|
|
|
81E6B7D000
|
unkown
|
page read and write
|
|
|
|
16D2EE70000
|
unkown
|
page read and write
|
|
|
|
7FF59077E000
|
unkown
|
page readonly
|
|
|
|
1470B86D000
|
unkown
|
page read and write
|
|
|
|
26144DA7000
|
unkown
|
page read and write
|
|
|
|
7FF5531C5000
|
unkown
|
page readonly
|
|
|
|
2614448B000
|
unkown
|
page read and write
|
|
|
|
7FF5903DC000
|
unkown
|
page readonly
|
|
|
|
16D32210000
|
unkown
|
page read and write
|
|
|
|
1470B913000
|
unkown
|
page read and write
|
|
|
|
7FF5C02A8000
|
unkown
|
page readonly
|
|
|
|
7FF5BAB43000
|
unkown
|
page readonly
|
|
|
|
7FF4F9B38000
|
unkown
|
page readonly
|
|
|
|
284E8508000
|
unkown
|
page read and write
|
|
|
|
7FF4F9B1A000
|
unkown
|
page readonly
|
|
|
|
261444D5000
|
unkown
|
page read and write
|
|
|
|
16D30FAE000
|
unkown
|
page read and write
|
|
|
|
16D32110000
|
unkown
|
page read and write
|
|
|
|
7FF5BFE00000
|
unkown
|
page readonly
|
|
|
|
284E8455000
|
unkown
|
page read and write
|
|
|
|
2614443C000
|
unkown
|
page read and write
|
|
|
|
26144E00000
|
unkown
|
page readonly
|
|
|
|
261444D9000
|
unkown
|
page read and write
|
|
|
|
26144D5E000
|
unkown
|
page read and write
|
|
|
|
42C937D000
|
unkown
|
page read and write
|
|
|
|
261444A8000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC3E000
|
unkown
|
page readonly
|
|
|
|
26145200000
|
unkown
|
page read and write
|
|
|
|
16D2EF75000
|
unkown
|
page read and write
|
|
|
|
16D2EEC0000
|
unkown
|
page read and write
|
|
|
|
16D30C90000
|
unkown
|
page readonly
|
|
|
|
1470B790000
|
unkown
|
page write copy
|
|
|
|
16D31019000
|
unkown
|
page read and write
|
|
|
|
1470B800000
|
unkown
|
page read and write
|
|
|
|
16D2EF24000
|
unkown
|
page read and write
|
|
|
|
1EED5570000
|
unkown
|
page readonly
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
284E844D000
|
unkown
|
page read and write
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
1EED5602000
|
unkown
|
page read and write
|
|
|
|
1EED5580000
|
unkown
|
page read and write
|
|
|
|
26144D24000
|
unkown
|
page read and write
|
|
|
|
7FF5BA71E000
|
unkown
|
page readonly
|
|
|
|
7FF5BAB93000
|
unkown
|
page readonly
|
|
|
|
16D30F83000
|
unkown
|
page read and write
|
|
|
|
42C8B7D000
|
unkown
|
page read and write
|
|
|
|
7FF5C0240000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC84000
|
unkown
|
page readonly
|
|
|
|
C8EB47F000
|
unkown
|
page read and write
|
|
|
|
26144D64000
|
unkown
|
page read and write
|
|
|
|
26144D51000
|
unkown
|
page read and write
|
|
|
|
16D30FBF000
|
unkown
|
page read and write
|
|
|
|
7FF553162000
|
unkown
|
page readonly
|
|
|
|
293EA2CE000
|
unkown
|
page read and write
|
|
|
|
26144D4E000
|
unkown
|
page read and write
|
|
|
|
16D32210000
|
unkown
|
page read and write
|
|
|
|
42C897A000
|
unkown
|
page read and write
|
|
|
|
7FF59D8A1000
|
unkown
|
page readonly
|
|
|
|
26144D58000
|
unkown
|
page read and write
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
26145202000
|
unkown
|
page read and write
|
|
|
|
26144429000
|
unkown
|
page read and write
|
|
|
|
1470D270000
|
unkown
|
page read and write
|
|
|
|
7FF4F9AFC000
|
unkown
|
page readonly
|
|
|
|
FA1A8FE000
|
unkown
|
page read and write
|
|
|
|
7FF590554000
|
unkown
|
page readonly
|
|
|
|
42C8DFB000
|
unkown
|
page read and write
|
|
|
|
7FF5530A1000
|
unkown
|
page readonly
|
|
|
|
41905CE000
|
unkown
|
page read and write
|
|
|
|
7FF59D385000
|
unkown
|
page readonly
|
|
|
|
2614444B000
|
unkown
|
page read and write
|
|
|
|
7FF552A1D000
|
unkown
|
page readonly
|
|
|
|
1470BA00000
|
unkown
|
page readonly
|
|
|
|
7FF553019000
|
unkown
|
page readonly
|
|
|
|
7FF4F99CB000
|
unkown
|
page readonly
|
|
|
|
26144471000
|
unkown
|
page read and write
|
|
|
|
16D30F53000
|
unkown
|
page read and write
|
|
|
|
1470B86F000
|
unkown
|
page read and write
|
|
|
|
7FF59D7F4000
|
unkown
|
page readonly
|
|
|
|
16D30FDF000
|
unkown
|
page read and write
|
|
|
|
16D2EEB2000
|
unkown
|
page read and write
|
|
|
|
16D30CA0000
|
unkown
|
page read and write
|
|
|
|
16D30FE4000
|
unkown
|
page read and write
|
|
|
|
26144A70000
|
unkown
|
page write copy
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
7FF559C9E000
|
unkown
|
page readonly
|
|
|
|
2614444F000
|
unkown
|
page read and write
|
|
|
|
1EED5671000
|
unkown
|
page read and write
|
|
|
|
16D2EEF7000
|
unkown
|
page read and write
|
|
|
|
261444C6000
|
unkown
|
page read and write
|
|
|
|
7FF5904E6000
|
unkown
|
page readonly
|
|
|
|
7FF559C30000
|
unkown
|
page readonly
|
|
|
|
419054E000
|
unkown
|
page read and write
|
|
|
|
1EED5700000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB3E000
|
unkown
|
page readonly
|
|
|
|
7FF553204000
|
unkown
|
page readonly
|
|
|
|
26144DB9000
|
unkown
|
page read and write
|
|
|
|
16D32013000
|
unkown
|
page read and write
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
16D31100000
|
unkown
|
page read and write
|
|
|
|
7FF5906C0000
|
unkown
|
page readonly
|
|
|
|
26144600000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC4B000
|
unkown
|
page readonly
|
|
|
|
7FF59D653000
|
unkown
|
page readonly
|
|
|
|
7FF59D7BB000
|
unkown
|
page readonly
|
|
|
|
1470B857000
|
unkown
|
page read and write
|
|
|
|
1EED5666000
|
unkown
|
page read and write
|
|
|
|
16D30F62000
|
unkown
|
page read and write
|
|
|
|
261444E5000
|
unkown
|
page read and write
|
|
|
|
26144D62000
|
unkown
|
page read and write
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
7FF59D81E000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC1F000
|
unkown
|
page readonly
|
|
|
|
7FF590545000
|
unkown
|
page readonly
|
|
|
|
16D31143000
|
unkown
|
page read and write
|
|
|
|
7FF5BA7A2000
|
unkown
|
page readonly
|
|
|
|
7FF590601000
|
unkown
|
page readonly
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
42C907A000
|
unkown
|
page read and write
|
|
|
|
7FF59074F000
|
unkown
|
page readonly
|
|
|
|
26144427000
|
unkown
|
page read and write
|
|
|
|
16D31282000
|
unkown
|
page read and write
|
|
|
|
16D2EEAF000
|
unkown
|
page read and write
|
|
|
|
16D30F13000
|
unkown
|
page read and write
|
|
|
|
7FF4F9ACE000
|
unkown
|
page readonly
|
|
|
|
1470B86F000
|
unkown
|
page read and write
|
|
|
|
26144D29000
|
unkown
|
page read and write
|
|
|
|
FA1ACF7000
|
unkown
|
page read and write
|
|
|
|
16D2ED70000
|
unkown
|
page write copy
|
|
|
|
293EA2C6000
|
unkown
|
page read and write
|
|
|
|
1EED5613000
|
unkown
|
page read and write
|
|
|
|
16D32010000
|
unkown
|
page read and write
|
|
|
|
81E6EF7000
|
unkown
|
page read and write
|
|
|
|
284E8600000
|
unkown
|
page readonly
|
|
|
|
7FF59D8A2000
|
unkown
|
page readonly
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
7FF59D829000
|
unkown
|
page readonly
|
|
|
|
7FF590811000
|
unkown
|
page readonly
|
|
|
|
7FF4F9A93000
|
unkown
|
page readonly
|
|
|
|
7FF5C022C000
|
unkown
|
page readonly
|
|
|
|
2614444C000
|
unkown
|
page read and write
|
|
|
|
16D30FC3000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC0B000
|
unkown
|
page readonly
|
|
|
|
7FF590791000
|
unkown
|
page readonly
|
|
|
|
A3D1B77000
|
unkown
|
page read and write
|
|
|
|
7FF559583000
|
unkown
|
page readonly
|
|
|
|
261444D5000
|
unkown
|
page read and write
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
26144D00000
|
unkown
|
page read and write
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
26144D4F000
|
unkown
|
page read and write
|
|
|
|
7FF5906EB000
|
unkown
|
page readonly
|
|
|
|
16D30F51000
|
unkown
|
page read and write
|
|
|
|
26144D57000
|
unkown
|
page read and write
|
|
|
|
1470B86F000
|
unkown
|
page read and write
|
|
|
|
293EA2B1000
|
unkown
|
page read and write
|
|
|
|
7FF4F9B2E000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC40000
|
unkown
|
page readonly
|
|
|
|
7FF4F9B3E000
|
unkown
|
page readonly
|
|
|
|
16D31200000
|
unkown
|
page read and write
|
|
|
|
7FF559C5F000
|
unkown
|
page readonly
|
|
|
|
7FF5BAA74000
|
unkown
|
page readonly
|
|
|
|
7FF5532B2000
|
unkown
|
page readonly
|
|
|
|
293EA470000
|
unkown
|
page readonly
|
|
|
|
16D31300000
|
unkown
|
page read and write
|
|
|
|
26144D24000
|
unkown
|
page read and write
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
7FF4F98F1000
|
unkown
|
page readonly
|
|
|
|
1EED564E000
|
unkown
|
page read and write
|
|
|
|
7FF559CA9000
|
unkown
|
page readonly
|
|
|
|
7FF4F9B24000
|
unkown
|
page readonly
|
|
|
|
7FF59D80F000
|
unkown
|
page readonly
|
|
|
|
1EED5702000
|
unkown
|
page read and write
|
|
|
|
7FF590541000
|
unkown
|
page readonly
|
|
|
|
7FF59070A000
|
unkown
|
page readonly
|
|
|
|
1EED6000000
|
unkown
|
page readonly
|
|
|
|
42C87FF000
|
unkown
|
page read and write
|
|
|
|
7FF59D7E7000
|
unkown
|
page readonly
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
26144D6A000
|
unkown
|
page read and write
|
|
|
|
FA1A87C000
|
unkown
|
page read and write
|
|
|
|
7FF5BA597000
|
unkown
|
page readonly
|
|
|
|
81E6C75000
|
unkown
|
page read and write
|
|
|
|
7FF553236000
|
unkown
|
page readonly
|
|
|
|
6F918FA000
|
unkown
|
page read and write
|
|
|
|
16D31183000
|
unkown
|
page read and write
|
|
|
|
7FF5BAB48000
|
unkown
|
page readonly
|
|
|
|
284E83F0000
|
unkown
|
page readonly
|
|
|
|
284E8487000
|
unkown
|
page read and write
|
|
|
|
7FF4F9BBA000
|
unkown
|
page readonly
|
|
|
|
16D2EEAF000
|
unkown
|
page read and write
|
|
|
|
26144502000
|
unkown
|
page read and write
|
|
|
|
16D30FED000
|
unkown
|
page read and write
|
|
|
|
16D30F13000
|
unkown
|
page read and write
|
|
|
|
1EED5666000
|
unkown
|
page read and write
|
|
|
|
26144D53000
|
unkown
|
page read and write
|
|
|
|
284E8240000
|
unkown
|
page readonly
|
|
|
|
16D2EF66000
|
unkown
|
page read and write
|
|
|
|
42C8FFB000
|
unkown
|
page read and write
|
|
|
|
26144AE0000
|
unkown
|
page read and write
|
|
|
|
26144DB9000
|
unkown
|
page read and write
|
|
|
|
16D32210000
|
unkown
|
page read and write
|
|
|
|
419097F000
|
unkown
|
page read and write
|
|
|
|
7FF59D7DC000
|
unkown
|
page readonly
|
|
|
|
7FF5C01A4000
|
unkown
|
page readonly
|
|
|
|
7FF5BA541000
|
unkown
|
page readonly
|
|
|
|
16D32000000
|
unkown
|
page read and write
|
|
|
|
C8EB67D000
|
unkown
|
page read and write
|
|
|
|
7FF559C68000
|
unkown
|
page readonly
|
|
|
|
7FF5904DB000
|
unkown
|
page readonly
|
|
|
|
26144AE0000
|
unkown
|
page read and write
|
|
|
|
26144400000
|
unkown
|
page read and write
|
|
|
|
1470B868000
|
unkown
|
page read and write
|
|
|
|
16D32010000
|
unkown
|
page read and write
|
|
|
|
7FF5906BC000
|
unkown
|
page readonly
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
16D30F3C000
|
unkown
|
page read and write
|
|
|
|
7FF559CAD000
|
unkown
|
page readonly
|
|
|
|
7FF5BABE0000
|
unkown
|
page readonly
|
|
|
|
261443A0000
|
unkown
|
page readonly
|
|
|
|
26144DBA000
|
unkown
|
page read and write
|
|
|
|
26144D78000
|
unkown
|
page read and write
|
|
|
|
16D2EEEE000
|
unkown
|
page read and write
|
|
|
|
26144D68000
|
unkown
|
page read and write
|
|
|
|
7FF5906FF000
|
unkown
|
page readonly
|
|
|
|
C8EB4F9000
|
unkown
|
page read and write
|
|
|
|
1EED5650000
|
unkown
|
page read and write
|
|
|
|
7FF590579000
|
unkown
|
page readonly
|
|
|
|
42C8BFB000
|
unkown
|
page read and write
|
|
|
|
261444DD000
|
unkown
|
page read and write
|
|
|
|
26144D58000
|
unkown
|
page read and write
|
|
|
|
26144D61000
|
unkown
|
page read and write
|
|
|
|
7FF5BAA91000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC6F000
|
unkown
|
page readonly
|
|
|
|
261444DD000
|
unkown
|
page read and write
|
|
|
|
7FF5531D7000
|
unkown
|
page readonly
|
|
|
|
7FF5C0332000
|
unkown
|
page readonly
|
|
|
|
7FF5C029F000
|
unkown
|
page readonly
|
|
|
|
7FF5BAB8D000
|
unkown
|
page readonly
|
|
|
|
26144D68000
|
unkown
|
page read and write
|
|
|
|
26144D13000
|
unkown
|
page read and write
|
|
|
|
26144B00000
|
unkown
|
page readonly
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
1470B868000
|
unkown
|
page read and write
|
|
|
|
26144D53000
|
unkown
|
page read and write
|
|
|
|
7FF55321E000
|
unkown
|
page readonly
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
7FF5C026F000
|
unkown
|
page readonly
|
|
|
|
26144DB9000
|
unkown
|
page read and write
|
|
|
|
16D32110000
|
unkown
|
page read and write
|
|
|
|
261444DD000
|
unkown
|
page read and write
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
C8EB12A000
|
unkown
|
page read and write
|
|
|
|
1EED564B000
|
unkown
|
page read and write
|
|
|
|
26144D79000
|
unkown
|
page read and write
|
|
|
|
7FF5C02AE000
|
unkown
|
page readonly
|
|
|
|
42C8C7B000
|
unkown
|
page read and write
|
|
|
|
7FF59D6AE000
|
unkown
|
page readonly
|
|
|
|
A3D14BB000
|
unkown
|
page read and write
|
|
|
|
16D310CE000
|
unkown
|
page read and write
|
|
|
|
1470B868000
|
unkown
|
page read and write
|
|
|
|
212D8EC0000
|
unkown
|
page read and write
|
|
|
|
16D30FDF000
|
unkown
|
page read and write
|
|
|
|
7FF59D79A000
|
unkown
|
page readonly
|
|
|
|
16D2EFA6000
|
unkown
|
page read and write
|
|
|
|
A3D1E78000
|
unkown
|
page read and write
|
|
|
|
26144D91000
|
unkown
|
page read and write
|
|
|
|
284E8413000
|
unkown
|
page read and write
|
|
|
|
7FF5906F4000
|
unkown
|
page readonly
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
26144D5A000
|
unkown
|
page read and write
|
|
|
|
7FF5C0091000
|
unkown
|
page readonly
|
|
|
|
7FF5BABA4000
|
unkown
|
page readonly
|
|
|
|
7FF59D7C7000
|
unkown
|
page readonly
|
|
|
|
7FF552FE1000
|
unkown
|
page readonly
|
|
|
|
16D30F00000
|
unkown
|
page read and write
|
|
|
|
1470B83F000
|
unkown
|
page read and write
|
|
|
|
26144DA3000
|
unkown
|
page read and write
|
|
|
|
26144D65000
|
unkown
|
page read and write
|
|
|
|
26144D5E000
|
unkown
|
page read and write
|
|
|
|
7FF4F9BB4000
|
unkown
|
page readonly
|
|
|
|
7FF4F9AFF000
|
unkown
|
page readonly
|
|
|
|
7FF59D79C000
|
unkown
|
page readonly
|
|
|
|
26144D24000
|
unkown
|
page read and write
|
|
|
|
16D2EE9E000
|
unkown
|
page read and write
|
|
|
|
26144D3A000
|
unkown
|
page read and write
|
|
|
|
26144D58000
|
unkown
|
page read and write
|
|
|
|
7FF5532AA000
|
unkown
|
page readonly
|
|
|
|
26144D54000
|
unkown
|
page read and write
|
|
|
|
26144D64000
|
unkown
|
page read and write
|
|
|
|
16D30FD8000
|
unkown
|
page read and write
|
|
|
|
42C8A7C000
|
unkown
|
page read and write
|
|
|
|
261444DD000
|
unkown
|
page read and write
|
|
|
|
26144D66000
|
unkown
|
page read and write
|
|
|
|
26144D4E000
|
unkown
|
page read and write
|
|
|
|
16D31016000
|
unkown
|
page read and write
|
|
|
|
7FF590628000
|
unkown
|
page readonly
|
|
|
|
26144508000
|
unkown
|
page read and write
|
|
|
|
261444D9000
|
unkown
|
page read and write
|
|
|
|
261443B0000
|
unkown
|
page readonly
|
|
|
|
1470B868000
|
unkown
|
page read and write
|
|
|
|
7FF5C0331000
|
unkown
|
page readonly
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
1EED5490000
|
unkown
|
page readonly
|
|
|
|
7FF559587000
|
unkown
|
page readonly
|
|
|
|
16D2EEAF000
|
unkown
|
page read and write
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
7FF559D14000
|
unkown
|
page readonly
|
|
|
|
26144D1E000
|
unkown
|
page read and write
|
|
|
|
26144D55000
|
unkown
|
page read and write
|
|
|
|
7FF553231000
|
unkown
|
page readonly
|
|
|
|
212D9300000
|
unkown
|
page read and write
|
|
|
|
284E8230000
|
heap default
|
page read and write
|
|
|
|
293EA2B6000
|
heap default
|
page read and write
|
|
|
|
26144450000
|
unkown
|
page read and write
|
|
|
|
7FF559C84000
|
unkown
|
page readonly
|
|
|
|
261444DD000
|
unkown
|
page read and write
|
|
|
|
16D2EE97000
|
unkown
|
page read and write
|
|
|
|
26145400000
|
unkown
|
page readonly
|
|
|
|
7FF4F9BC1000
|
unkown
|
page readonly
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
16D2EEB2000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC8A000
|
unkown
|
page readonly
|
|
|
|
16D30C60000
|
unkown
|
page read and write
|
|
|
|
26144AC0000
|
unkown
|
page readonly
|
|
|
|
212D73B0000
|
heap default
|
page read and write
|
|
|
|
16D2EF34000
|
unkown
|
page read and write
|
|
|
|
16D2EEF9000
|
unkown
|
page read and write
|
|
|
|
7FF4F988B000
|
unkown
|
page readonly
|
|
|
|
7FF5C0277000
|
unkown
|
page readonly
|
|
|
|
16D31282000
|
unkown
|
page read and write
|
|
|
|
7FF5531BA000
|
unkown
|
page readonly
|
|
|
|
1470B868000
|
unkown
|
page read and write
|
|
|
|
41908F9000
|
unkown
|
page read and write
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
42C86FB000
|
unkown
|
page read and write
|
|
|
|
261444A3000
|
unkown
|
page read and write
|
|
|
|
7FF5BABAC000
|
unkown
|
page readonly
|
|
|
|
212D7350000
|
heap private
|
page read and write
|
|
|
|
16D31143000
|
unkown
|
page read and write
|
|
|
|
7FF5C02BD000
|
unkown
|
page readonly
|
|
|
|
7FF5C013E000
|
unkown
|
page readonly
|
|
|
|
7FF4F9AD5000
|
unkown
|
page readonly
|
|
|
|
1EED5800000
|
unkown
|
page readonly
|
|
|
|
26144D98000
|
unkown
|
page read and write
|
|
|
|
7FF59D601000
|
unkown
|
page readonly
|
|
|
|
42C8EFB000
|
unkown
|
page read and write
|
|
|
|
16D30BE0000
|
unkown
|
page read and write
|
|
|
|
26144D2B000
|
unkown
|
page read and write
|
|
|
|
1EED5653000
|
unkown
|
page read and write
|
|
|
|
1470B7E0000
|
unkown
|
page readonly
|
|
|
|
7FF4F9AD0000
|
unkown
|
page readonly
|
|
|
|
7FF5C0245000
|
unkown
|
page readonly
|
|
|
|
26144D65000
|
unkown
|
page read and write
|
|
|
|
1470B86D000
|
unkown
|
page read and write
|
|
|
|
26144D59000
|
unkown
|
page read and write
|
|
|
|
7FF5BACAE000
|
unkown
|
page readonly
|
|
|
|
16D32110000
|
unkown
|
page read and write
|
|
|
|
7FF4F9B14000
|
unkown
|
page readonly
|
|
|
|
7FF55320A000
|
unkown
|
page readonly
|
|
|
|
A3D1A7E000
|
unkown
|
page read and write
|
|
|
|
1470D370000
|
unkown
|
page readonly
|
|
|
|
16D30C60000
|
unkown
|
page read and write
|
|
|
|
7FF5904F8000
|
unkown
|
page readonly
|
|
|
|
1470B86B000
|
unkown
|
page read and write
|
|
|
|
26144516000
|
unkown
|
page read and write
|
|
|
|
7FF59D71C000
|
unkown
|
page readonly
|
|
|
|
FA1AA75000
|
unkown
|
page read and write
|
|
|
|
1EED568C000
|
unkown
|
page read and write
|
|
|
|
16D31242000
|
unkown
|
page read and write
|
|
|
|
7FF4F9929000
|
unkown
|
page readonly
|
|
|
|
26144D24000
|
unkown
|
page read and write
|
|
|
|
16D2EE84000
|
unkown
|
page read and write
|
|
|
|
1EED568F000
|
unkown
|
page read and write
|
|
|
|
16D30F96000
|
unkown
|
page read and write
|
|
|
|
261444D9000
|
unkown
|
page read and write
|
|
|
|
26144D6A000
|
unkown
|
page read and write
|
|
|
|
7FF559C3B000
|
unkown
|
page readonly
|
|
|
|
7FF4F97A7000
|
unkown
|
page readonly
|
|
|
|
7FF552F7B000
|
unkown
|
page readonly
|
|
|
|
293EA260000
|
unkown
|
page read and write
|
|
|
|
7FF5BA9B7000
|
unkown
|
page readonly
|
|
|
|
6F91A7F000
|
unkown
|
page read and write
|
|
|
|
16D2EF23000
|
unkown
|
page read and write
|
|
|
|
26144D56000
|
unkown
|
page read and write
|
|
|
|
26144D58000
|
unkown
|
page read and write
|
|
|
|
41904CB000
|
unkown
|
page read and write
|
|
|
|
7FF5BA800000
|
unkown
|
page readonly
|
|
|
|
7FF59070C000
|
unkown
|
page readonly
|
|
|
|
7FF5C0257000
|
unkown
|
page readonly
|
|
|
|
7FF59D826000
|
unkown
|
page readonly
|
|
|
|
7FF559C5C000
|
unkown
|
page readonly
|
|
|
|
284E846C000
|
unkown
|
page read and write
|
|
|
|
284E8A02000
|
unkown
|
page read and write
|
|
|
|
26144DB9000
|
unkown
|
page read and write
|
|
|
|
16D30F28000
|
unkown
|
page read and write
|
|
|
|
16D30BF0000
|
heap private
|
page read and write
|
|
|
|
7FF59D703000
|
unkown
|
page readonly
|
|
|
|
16D2EF65000
|
unkown
|
page read and write
|
|
|
|
293EA2C7000
|
unkown
|
page read and write
|
|
There are 877 hidden memdumps, click here to show them.