Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
6613n246zm543w.xlsb
|
Zip archive data, at least v2.0 to extract
|
initial sample
|
 |
|
|
C:\Users\Public\block.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\presentation[1].dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
downloaded
|
|
|
|
C:\Users\user\Desktop\~$6613n246zm543w.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{0D9072B0-AC38-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{E4D8D27E-AC37-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{FF57CED6-AC37-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0D9072B2-AC38-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{E4D8D280-AC37-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FF57CED8-AC37-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\51B28365-1D64-4B17-A13C-644DC8E32C4F
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\633836DC.png
|
PNG image data, 240 x 52, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\AC906D1E.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B005EF51.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CB32712D.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 169x94,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F6BD7E87.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\background_gradient[1]
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\bullet[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\http_404[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\info_48[1]
|
PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\ErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\background_gradient[1]
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\bullet[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\background_gradient[1]
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\info_48[1]
|
PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\ErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\ErrorPageTemplate[2]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\bullet[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\http_404[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\http_404[2]
|
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\info_48[1]
|
PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\FAD40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF4DA5B59B47D462E7.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF596DB306FCC36A54.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFC4112F6E645ECEC7.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFD87FF62AF0A6347E.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFE7296AD5C85F4BE9.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFEF08F5C4CE8758CE.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
There are 48 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s C:\Users\Public\block.dll
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:1260 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5828 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4996 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
http://chat.billionady.com/pGAWsdPZsgmlp8IeD/HimMWYQD3vgj/nWrp3CJhfHJ/OCZulU9DF2vABL/EGqK7P_2BoREnVK
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
http://docs.atu.ngr.mybluehost.me/presentation.dll
|
162.241.24.47
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
http://app.buboleinov.com/z641zbWI8F5NGo_/2BArU_2BbQAq9y6CQ2/iYglxzTUG/6THXjDZRni2_2BHtJ8xS/hQVd4Naf0x6FbAwTSzE/j2W2tGJ3BJZvVbX11_2BUV/fpUC_2B6Q9mfu/3o2_2B46/OLYUaNQoAWvs_2FbvG_2BKH/7iWhqlNtvD/J2yWSfQ76dcAKMFuZ/3mJsX_2Bs0FH/qiS1vq47Ihl/qYjn0Yg7_2Fs22/uUYx5ZbSNGvuUqs3cskdX/qwpRyPlhL_2FkPNb/1rre5N02_2FaPz2/bBs8grMdfh07gYK5nT/9gtPy0LuP/wYiN2jeiY_2BAyR8pqAH/pP4fdKjSstJgODzp7LO/GGc_2F8syE1Y/XZR_2F6_2/Fm
|
34.86.224.8
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
http://app.buboleinov.com/z641zbWI8F5NGo_/2BArU_2BbQAq9y6CQ2/iYglxzTUG/6THXjDZRni2_2BHtJ8xS/hQVd4Naf
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
http://app3.maintorna.com/F8d0aGGV7/IFlLstzk2tyypfn_2Fmm/U_2BnTF3_2BdKngQdqp/axZO_2FFau1L_2Bp8DkKab/4wB0QgN10EkpX/AcOnUpOy/sx6xA_2BQgCwb8YrqbLddxV/OJDcwH612j/SgvuMvjnhyj_2BJZu/QEAjCzH7iakZ/oq21_2FJOeJ/SwjqqZOEiD8hxw/G5RB86oNRHPQeS1WmQofx/9xSmKamg1DMw2k9J/4izLK3dr4GQOE25/kgxEQPFLWO2XCIrGa5/PGMRBxlzM/0Ejxm5VgBpRdVV0sXhjU/M_2BEEG31ubNw2v0Fmu/Lkyp4hip_2Fjy_2FVx4B63/WkF_2BbbsvI0l/DMReAFgM/oHuJg
|
34.86.224.8
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
http://chat.billionady.com/pGAWsdPZsgmlp8IeD/HimMWYQD3vgj/nWrp3CJhfHJ/OCZulU9DF2vABL/EGqK7P_2BoREnVKXUKrMq/O25bJi9K6cy2wBFt/EYfe_2FKkVGOswo/zrljXUlqaCddZUQdMz/46rOG0TD7/jSwGOmqtlI1lhZnMTkpj/OVdYkB6bCvlTi8j76Hq/ls7qgwy0MLToWsmBH4qSen/tk209OxMyhspY/JW_2B_2B/JDgZlFf6GkmqLMRn5B4cp37/KRW8p6Kt3j/I1_2FzkkwDlUgXN_2/B8sJnr99OISw/18ko4KjrRQ1/26TtcKYNzHhDSL/9AqfJNAejPb1kyuCVpyID/xExOyq0w/s
|
34.86.224.8
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
http://app3.maintorna.com/F8d0aGGV7/IFlLstzk2tyypfn_2Fmm/U_2BnTF3_2BdKngQdqp/axZO_2FFau1L_2Bp8DkKab/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
app3.maintorna.com
|
34.86.224.8
|
|
|
|
chat.billionady.com
|
34.86.224.8
|
|
|
|
app.buboleinov.com
|
34.86.224.8
|
|
|
|
docs.atu.ngr.mybluehost.me
|
162.241.24.47
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
162.241.24.47
|
docs.atu.ngr.mybluehost.me
|
United States
|
|
|
|
34.86.224.8
|
app3.maintorna.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
f&?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
g&?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CED6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4D649
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4D83D
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4DA02
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4DBB7
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
r<?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{E4D8D27E-AC37-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{FF57CED6-AC37-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{0D9072B0-AC38-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
There are 92 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
5098000
|
heap private
|
page read and write
|
|
|
|
5098000
|
heap private
|
page read and write
|
|
|
|
5098000
|
heap private
|
page read and write
|
|
|
|
5098000
|
heap private
|
page read and write
|
|
|
|
5098000
|
heap private
|
page read and write
|
|
|
|
5098000
|
heap private
|
page read and write
|
|
|
|
5098000
|
heap private
|
page read and write
|
|
|
|
41D0000
|
unkown
|
page execute and read and write
|
|
|
|
5098000
|
heap private
|
page read and write
|
|
|
|
7FF55A26B000
|
unkown
|
page readonly
|
|
|
|
2C2FA64D000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22721450000
|
unkown
|
page readonly
|
|
|
|
18C7B3F0000
|
unkown
|
page read and write
|
|
|
|
1D1EC2D5000
|
unkown
|
page read and write
|
|
|
|
7FF59FABF000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
131E1767000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59FDDC000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EE700000
|
unkown
|
page read and write
|
|
|
|
20498C29000
|
unkown
|
page read and write
|
|
|
|
2426AC56000
|
unkown
|
page read and write
|
|
|
|
20C03B65000
|
unkown
|
page read and write
|
|
|
|
1D1EC25E000
|
unkown
|
page read and write
|
|
|
|
7FF5242DF000
|
unkown
|
page readonly
|
|
|
|
20498C13000
|
unkown
|
page read and write
|
|
|
|
2239D1A0000
|
heap private
|
page read and write
|
|
|
|
7FF523FF7000
|
unkown
|
page readonly
|
|
|
|
1D1EE432000
|
unkown
|
page read and write
|
|
|
|
7FF55A2DC000
|
unkown
|
page readonly
|
|
|
|
7FF595900000
|
unkown
|
page readonly
|
|
|
|
1F58000
|
unkown
|
page readonly
|
|
|
|
2426AC02000
|
unkown
|
page read and write
|
|
|
|
1D1EE313000
|
unkown
|
page read and write
|
|
|
|
2A0BC900000
|
unkown
|
page read and write
|
|
|
|
7FF5190AD000
|
unkown
|
page readonly
|
|
|
|
7FF5B816F000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5BBAD9000
|
unkown
|
page readonly
|
|
|
|
7FF5E3B8F000
|
unkown
|
page readonly
|
|
|
|
1D1EE3D6000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5785F0000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1E04B920000
|
unkown
|
page readonly
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
7FF5241CD000
|
unkown
|
page readonly
|
|
|
|
20498C40000
|
unkown
|
page read and write
|
|
|
|
7FF55A35C000
|
unkown
|
page readonly
|
|
|
|
2C2FA5D0000
|
unkown
|
page read and write
|
|
|
|
20C03B52000
|
unkown
|
page read and write
|
|
|
|
22721400000
|
unkown
|
page write copy
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF578881000
|
unkown
|
page readonly
|
|
|
|
1D1EC29E000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2C2FA68A000
|
unkown
|
page read and write
|
|
|
|
7FF5242F6000
|
unkown
|
page readonly
|
|
|
|
7FF595A4A000
|
unkown
|
page readonly
|
|
|
|
131DF800000
|
unkown
|
page readonly
|
|
|
|
20C03B20000
|
unkown
|
page read and write
|
|
|
|
7FF59562F000
|
unkown
|
page readonly
|
|
|
|
1D1EC35D000
|
unkown
|
page read and write
|
|
|
|
1E04BA63000
|
unkown
|
page read and write
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
7FF5B654A000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EF010000
|
unkown
|
page read and write
|
|
|
|
2C2FA600000
|
unkown
|
page read and write
|
|
|
|
20C03B76000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2FA007A000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20B5000
|
unkown
|
page readonly
|
|
|
|
7FF57ABCB000
|
unkown
|
page readonly
|
|
|
|
7FF58D4A1000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF58D3C7000
|
unkown
|
page readonly
|
|
|
|
7FF5E3A7F000
|
unkown
|
page readonly
|
|
|
|
1D1EE800000
|
unkown
|
page readonly
|
|
|
|
7FF51905F000
|
unkown
|
page readonly
|
|
|
|
DBB17A000
|
unkown
|
page read and write
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EC2D6000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22C85602000
|
unkown
|
page read and write
|
|
|
|
131E1490000
|
unkown
|
page readonly
|
|
|
|
1D1EC2BA000
|
unkown
|
page read and write
|
|
|
|
20C03B1A000
|
unkown
|
page read and write
|
|
|
|
2085000
|
unkown
|
page readonly
|
|
|
|
A83D979000
|
unkown
|
page read and write
|
|
|
|
7FF5242EE000
|
unkown
|
page readonly
|
|
|
|
1D1EE35A000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B654E000
|
unkown
|
page readonly
|
|
|
|
7FF5789D2000
|
unkown
|
page readonly
|
|
|
|
28AA000
|
unkown
|
page read and write
|
|
|
|
20C03B5B000
|
unkown
|
page read and write
|
|
|
|
20C0324B000
|
unkown
|
page read and write
|
|
|
|
22C3EF02000
|
unkown
|
page read and write
|
|
|
|
7FF5B655B000
|
unkown
|
page readonly
|
|
|
|
DBB4FE000
|
unkown
|
page read and write
|
|
|
|
7FF578983000
|
unkown
|
page readonly
|
|
|
|
E029E7C000
|
unkown
|
page read and write
|
|
|
|
7FF57AAE1000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59FED4000
|
unkown
|
page readonly
|
|
|
|
48E0000
|
unkown
|
page readonly
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EF210000
|
unkown
|
page read and write
|
|
|
|
22C3CE6C000
|
unkown
|
page read and write
|
|
|
|
7FF59FEDA000
|
unkown
|
page readonly
|
|
|
|
2F9FFFF000
|
unkown
|
page read and write
|
|
|
|
1E04C400000
|
unkown
|
page readonly
|
|
|
|
7FF5789FF000
|
unkown
|
page readonly
|
|
|
|
1D20DFF000
|
unkown
|
page read and write
|
|
|
|
7FF58D49A000
|
unkown
|
page readonly
|
|
|
|
7FF5787A7000
|
unkown
|
page readonly
|
|
|
|
20C03B57000
|
unkown
|
page read and write
|
|
|
|
7FF5788DA000
|
unkown
|
page readonly
|
|
|
|
1D1EF310000
|
unkown
|
page read and write
|
|
|
|
20C031B0000
|
unkown
|
page readonly
|
|
|
|
1D1EC27A000
|
unkown
|
page read and write
|
|
|
|
1E04BA9D000
|
unkown
|
page read and write
|
|
|
|
20498E00000
|
unkown
|
page readonly
|
|
|
|
20C03B38000
|
unkown
|
page read and write
|
|
|
|
131E1460000
|
unkown
|
page readonly
|
|
|
|
2426AAE0000
|
heap default
|
page read and write
|
|
|
|
27F0000
|
unkown
|
page read and write
|
|
|
|
1D1EC32D000
|
unkown
|
page read and write
|
|
|
|
1D1EC251000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59FBC8000
|
unkown
|
page readonly
|
|
|
|
1D1EC2E2000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF58D176000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
131E1726000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
7FF5B6513000
|
unkown
|
page readonly
|
|
|
|
2239D46E000
|
unkown
|
page read and write
|
|
|
|
20C03B6E000
|
unkown
|
page read and write
|
|
|
|
131E0FA0000
|
unkown
|
page read and write
|
|
|
|
1D1EC296000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5241EC000
|
unkown
|
page readonly
|
|
|
|
7FF57A8CA000
|
unkown
|
page readonly
|
|
|
|
7FF578830000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5959DD000
|
unkown
|
page readonly
|
|
|
|
20C03B8A000
|
unkown
|
page read and write
|
|
|
|
22C3E870000
|
unkown
|
page read and write
|
|
|
|
7FF5BBA3B000
|
unkown
|
page readonly
|
|
|
|
20C03B57000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57ABEA000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5E3DDC000
|
unkown
|
page readonly
|
|
|
|
22C3EF43000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B621A000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B62000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5E3DDF000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
205C000
|
unkown
|
page readonly
|
|
|
|
7FF55A213000
|
unkown
|
page readonly
|
|
|
|
22C3ED40000
|
unkown
|
page read and write
|
|
|
|
7FF578A8F000
|
unkown
|
page readonly
|
|
|
|
28F0000
|
heap default
|
page read and write
|
|
|
|
1D1EE325000
|
unkown
|
page read and write
|
|
|
|
22C3CE00000
|
unkown
|
page read and write
|
|
|
|
20C03B59000
|
unkown
|
page read and write
|
|
|
|
7FF519084000
|
unkown
|
page readonly
|
|
|
|
509B000
|
heap private
|
page read and write
|
|
|
|
7FF5E3BD5000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1E04B910000
|
heap default
|
page read and write
|
|
|
|
20C03B6D000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20498D02000
|
unkown
|
page read and write
|
|
|
|
20C03B30000
|
unkown
|
page read and write
|
|
|
|
131E1700000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF58D209000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EC2E8000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22C3F010000
|
unkown
|
page read and write
|
|
|
|
7FF5B6641000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EC2A7000
|
unkown
|
page read and write
|
|
|
|
7FF58D3DF000
|
unkown
|
page readonly
|
|
|
|
7FF5242D4000
|
unkown
|
page readonly
|
|
|
|
7FF5B84B7000
|
unkown
|
page readonly
|
|
|
|
20C03B5F000
|
unkown
|
page read and write
|
|
|
|
1D1EE3AB000
|
unkown
|
page read and write
|
|
|
|
28FB000
|
unkown
|
page read and write
|
|
|
|
20C03B62000
|
unkown
|
page read and write
|
|
|
|
3AC97F9000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C04003000
|
unkown
|
page read and write
|
|
|
|
7FF57A9BB000
|
unkown
|
page readonly
|
|
|
|
7FF59FE66000
|
unkown
|
page readonly
|
|
|
|
1D1EE110000
|
unkown
|
page readonly
|
|
|
|
1D1EC2EC000
|
unkown
|
page read and write
|
|
|
|
7FF595A44000
|
unkown
|
page readonly
|
|
|
|
7FF59FD8C000
|
unkown
|
page readonly
|
|
|
|
2C2FA68D000
|
unkown
|
page read and write
|
|
|
|
1D1EE328000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2049A770000
|
unkown
|
page readonly
|
|
|
|
F5AD17E000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B65A4000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EE300000
|
unkown
|
page read and write
|
|
|
|
7FF57C3FA000
|
unkown
|
page readonly
|
|
|
|
2FA0379000
|
unkown
|
page read and write
|
|
|
|
2FA047B000
|
unkown
|
page read and write
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
7FF58D426000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EC2CB000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF52427A000
|
unkown
|
page readonly
|
|
|
|
20C03B58000
|
unkown
|
page read and write
|
|
|
|
28E0000
|
unkown
|
page read and write
|
|
|
|
131DF63F000
|
unkown
|
page read and write
|
|
|
|
A83DAFA000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF595781000
|
unkown
|
page readonly
|
|
|
|
1D1EC302000
|
unkown
|
page read and write
|
|
|
|
20C03BB3000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57AA34000
|
unkown
|
page readonly
|
|
|
|
7FF59FDFB000
|
unkown
|
page readonly
|
|
|
|
7FF59FE34000
|
unkown
|
page readonly
|
|
|
|
7FF5B8463000
|
unkown
|
page readonly
|
|
|
|
4CD9DDE000
|
unkown
|
page read and write
|
|
|
|
4410000
|
heap private
|
page read and write
|
|
|
|
22C3EF48000
|
unkown
|
page read and write
|
|
|
|
7FF55A2C3000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CB3000
|
unkown
|
page readonly
|
|
|
|
7FF5B65C1000
|
unkown
|
page readonly
|
|
|
|
2F9FEFB000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
131E14A0000
|
unkown
|
page readonly
|
|
|
|
76823EB000
|
unkown
|
page read and write
|
|
|
|
7FF58D07A000
|
unkown
|
page readonly
|
|
|
|
20C031A0000
|
unkown
|
page readonly
|
|
|
|
7FF57AC4A000
|
unkown
|
page readonly
|
|
|
|
1E04C0C0000
|
unkown
|
page readonly
|
|
|
|
22C3ED40000
|
unkown
|
page read and write
|
|
|
|
22C3CE29000
|
unkown
|
page read and write
|
|
|
|
18C7B481000
|
unkown
|
page read and write
|
|
|
|
7FF57A8BC000
|
unkown
|
page readonly
|
|
|
|
22C3CE86000
|
unkown
|
page read and write
|
|
|
|
22C85668000
|
unkown
|
page read and write
|
|
|
|
7FF57ABEC000
|
unkown
|
page readonly
|
|
|
|
7FF519098000
|
unkown
|
page readonly
|
|
|
|
7FF5959B4000
|
unkown
|
page readonly
|
|
|
|
22C3D000000
|
unkown
|
page readonly
|
|
|
|
A83D87E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3B76000
|
unkown
|
page readonly
|
|
|
|
7FF5E3E94000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2700000
|
heap default
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
D8E16FE000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5BB4DD000
|
unkown
|
page readonly
|
|
|
|
7FF5E3C01000
|
unkown
|
page readonly
|
|
|
|
2C2FA629000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
38A267B000
|
unkown
|
page read and write
|
|
|
|
7FF524285000
|
unkown
|
page readonly
|
|
|
|
2C2FA708000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
509B000
|
heap private
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59F6F1000
|
unkown
|
page readonly
|
|
|
|
2C2FA66F000
|
unkown
|
page read and write
|
|
|
|
66DB3000
|
unkown image
|
page readonly
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22721302000
|
unkown
|
page read and write
|
|
|
|
20C032BE000
|
unkown
|
page read and write
|
|
|
|
1F92000
|
unkown
|
page readonly
|
|
|
|
7FF595785000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
381497F000
|
unkown
|
page read and write
|
|
|
|
1D1EC2D9000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EE110000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
66DB0000
|
unkown image
|
page readonly
|
|
|
|
2A0BC700000
|
heap default
|
page read and write
|
|
|
|
2239D46E000
|
unkown
|
page read and write
|
|
|
|
22C85670000
|
unkown
|
page read and write
|
|
|
|
7FF578A2E000
|
unkown
|
page readonly
|
|
|
|
2FA027B000
|
unkown
|
page read and write
|
|
|
|
1E04C070000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
38A287A000
|
unkown
|
page read and write
|
|
|
|
7FF51907A000
|
unkown
|
page readonly
|
|
|
|
20C03B8B000
|
unkown
|
page read and write
|
|
|
|
1D1EE38E000
|
unkown
|
page read and write
|
|
|
|
7FF578A98000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1E04BA00000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B69000
|
unkown
|
page read and write
|
|
|
|
7FF58D07F000
|
unkown
|
page readonly
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
22C3CF14000
|
unkown
|
page read and write
|
|
|
|
7FF5E3DB0000
|
unkown
|
page readonly
|
|
|
|
18C7B430000
|
unkown
|
page readonly
|
|
|
|
22C85420000
|
heap private
|
page read and write
|
|
|
|
20C03316000
|
unkown
|
page read and write
|
|
|
|
2F9FE7E000
|
unkown
|
page read and write
|
|
|
|
7FF578994000
|
unkown
|
page readonly
|
|
|
|
7FF5B6594000
|
unkown
|
page readonly
|
|
|
|
7FF5240D1000
|
unkown
|
page readonly
|
|
|
|
22C3CEEF000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B69000
|
unkown
|
page read and write
|
|
|
|
7FF51905C000
|
unkown
|
page readonly
|
|
|
|
20C03B63000
|
unkown
|
page read and write
|
|
|
|
7FF595923000
|
unkown
|
page readonly
|
|
|
|
20C032E6000
|
unkown
|
page read and write
|
|
|
|
7FF578A5F000
|
unkown
|
page readonly
|
|
|
|
7FF5242FD000
|
unkown
|
page readonly
|
|
|
|
E02A17B000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03BB7000
|
unkown
|
page read and write
|
|
|
|
7FF578383000
|
unkown
|
page readonly
|
|
|
|
7FF519121000
|
unkown
|
page readonly
|
|
|
|
7FF59FEE2000
|
unkown
|
page readonly
|
|
|
|
20C03B56000
|
unkown
|
page read and write
|
|
|
|
22721229000
|
unkown
|
page read and write
|
|
|
|
131DF600000
|
unkown
|
page read and write
|
|
|
|
2A0BC855000
|
unkown
|
page read and write
|
|
|
|
131E2010000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C85668000
|
unkown
|
page read and write
|
|
|
|
7FF5E3DAE000
|
unkown
|
page readonly
|
|
|
|
20C03BDB000
|
unkown
|
page read and write
|
|
|
|
7FF595A51000
|
unkown
|
page readonly
|
|
|
|
431E000
|
unkown
|
page read and write
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
2239D330000
|
unkown
|
page readonly
|
|
|
|
22C85668000
|
unkown
|
page read and write
|
|
|
|
1D1EE582000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2239D429000
|
unkown
|
page read and write
|
|
|
|
D8E1DF8000
|
unkown
|
page read and write
|
|
|
|
1D1EE3F3000
|
unkown
|
page read and write
|
|
|
|
22C8566C000
|
unkown
|
page read and write
|
|
|
|
1F90000
|
unkown
|
page readonly
|
|
|
|
7FF5BBD6A000
|
unkown
|
page readonly
|
|
|
|
18C7B486000
|
unkown
|
page read and write
|
|
|
|
7FF57C426000
|
unkown
|
page readonly
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
D8E1EF8000
|
unkown
|
page read and write
|
|
|
|
7FF57AC68000
|
unkown
|
page readonly
|
|
|
|
20C03B44000
|
unkown
|
page read and write
|
|
|
|
1E04BA5D000
|
unkown
|
page read and write
|
|
|
|
1D1EF510000
|
unkown
|
page read and write
|
|
|
|
7FF578B22000
|
unkown
|
page readonly
|
|
|
|
20C03B48000
|
unkown
|
page read and write
|
|
|
|
20C03B6F000
|
unkown
|
page read and write
|
|
|
|
7FF578A0F000
|
unkown
|
page readonly
|
|
|
|
7FF5E3A87000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D42000
|
unkown
|
page readonly
|
|
|
|
D8E1A7A000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5959C8000
|
unkown
|
page readonly
|
|
|
|
7FF5959BE000
|
unkown
|
page readonly
|
|
|
|
429C000
|
unkown
|
page read and write
|
|
|
|
20C03B20000
|
unkown
|
page read and write
|
|
|
|
7FF57C3DF000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF58D404000
|
unkown
|
page readonly
|
|
|
|
7FF5B8440000
|
unkown
|
page readonly
|
|
|
|
7FF595977000
|
unkown
|
page readonly
|
|
|
|
7FF5E3DFA000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59FE1F000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2426AC29000
|
unkown
|
page read and write
|
|
|
|
768277A000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2426AE50000
|
unkown
|
page readonly
|
|
|
|
20C03B59000
|
unkown
|
page read and write
|
|
|
|
7FF5B8442000
|
unkown
|
page readonly
|
|
|
|
7FF57A45D000
|
unkown
|
page readonly
|
|
|
|
20C03BDB000
|
unkown
|
page read and write
|
|
|
|
D8E177E000
|
unkown
|
page read and write
|
|
|
|
2F9FB5B000
|
unkown
|
page read and write
|
|
|
|
20C03B20000
|
unkown
|
page read and write
|
|
|
|
E02A277000
|
unkown
|
page read and write
|
|
|
|
1D1EF710000
|
unkown
|
page read and write
|
|
|
|
22C85655000
|
unkown
|
page read and write
|
|
|
|
1D1EC2E9000
|
unkown
|
page read and write
|
|
|
|
7FF59FD82000
|
unkown
|
page readonly
|
|
|
|
22721202000
|
unkown
|
page read and write
|
|
|
|
2C2FA5B0000
|
unkown
|
page readonly
|
|
|
|
7FF58D373000
|
unkown
|
page readonly
|
|
|
|
2528000
|
unkown
|
page read and write
|
|
|
|
20C03308000
|
unkown
|
page read and write
|
|
|
|
1D1EC31B000
|
unkown
|
page read and write
|
|
|
|
20C03A02000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B5F000
|
unkown
|
page read and write
|
|
|
|
2970000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
F5ACFFB000
|
unkown
|
page read and write
|
|
|
|
7FF57BBC9000
|
unkown
|
page readonly
|
|
|
|
1D1EF610000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59FE4E000
|
unkown
|
page readonly
|
|
|
|
20C03B5B000
|
unkown
|
page read and write
|
|
|
|
7FF57ABC3000
|
unkown
|
page readonly
|
|
|
|
2A0BC813000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B5B000
|
unkown
|
page read and write
|
|
|
|
1D1EC302000
|
unkown
|
page read and write
|
|
|
|
A83D59B000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22C3CF19000
|
unkown
|
page read and write
|
|
|
|
20C03B5F000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2239D200000
|
heap default
|
page read and write
|
|
|
|
290A000
|
unkown
|
page read and write
|
|
|
|
7FF57ABFA000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
B0CACFE000
|
unkown
|
page read and write
|
|
|
|
7FF58D4A2000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5BBD72000
|
unkown
|
page readonly
|
|
|
|
7FF52427E000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2239D2E0000
|
unkown
|
page write copy
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
1E04BB08000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B71000
|
unkown
|
page read and write
|
|
|
|
7FF595A52000
|
unkown
|
page readonly
|
|
|
|
76827F9000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B68000
|
unkown
|
page read and write
|
|
|
|
20C03870000
|
unkown
|
page write copy
|
|
|
|
20C03249000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2C2FA63C000
|
unkown
|
page read and write
|
|
|
|
2F9FBDE000
|
unkown
|
page read and write
|
|
|
|
20C03B76000
|
unkown
|
page read and write
|
|
|
|
1D1EF010000
|
unkown
|
page read and write
|
|
|
|
7FF55A3ED000
|
unkown
|
page readonly
|
|
|
|
131DF6A6000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF578A74000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1E04BB00000
|
unkown
|
page read and write
|
|
|
|
7FF578A1C000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF58D06C000
|
unkown
|
page readonly
|
|
|
|
7FF5B6375000
|
unkown
|
page readonly
|
|
|
|
7FF57870A000
|
unkown
|
page readonly
|
|
|
|
7FF55A375000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2FA07FF000
|
unkown
|
page read and write
|
|
|
|
22C85702000
|
unkown
|
page read and write
|
|
|
|
1D1EC313000
|
unkown
|
page read and write
|
|
|
|
7FF58D3B0000
|
unkown
|
page readonly
|
|
|
|
66EFF000
|
unkown image
|
page read and write
|
|
|
|
1D1EE440000
|
unkown
|
page read and write
|
|
|
|
1D1EDD70000
|
unkown
|
page readonly
|
|
|
|
7FF55A3E6000
|
unkown
|
page readonly
|
|
|
|
2239D46C000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCFD000
|
unkown
|
page readonly
|
|
|
|
7FF57C494000
|
unkown
|
page readonly
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
7FF5242E8000
|
unkown
|
page readonly
|
|
|
|
2426AAF0000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57ABCF000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
50EE000
|
unkown
|
page read and write
|
|
|
|
27FA000
|
unkown
|
page read and write
|
|
|
|
7FF55A454000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B72000
|
unkown
|
page read and write
|
|
|
|
22C3CEB8000
|
unkown
|
page read and write
|
|
|
|
7FF59FD92000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2C2FA5C0000
|
unkown
|
page readonly
|
|
|
|
22C85668000
|
unkown
|
page read and write
|
|
|
|
7FF58D3B5000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59FE69000
|
unkown
|
page readonly
|
|
|
|
20C03B91000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B56000
|
unkown
|
page read and write
|
|
|
|
7FF5E3BE6000
|
unkown
|
page readonly
|
|
|
|
38A28FF000
|
unkown
|
page read and write
|
|
|
|
1D1EF410000
|
unkown
|
page read and write
|
|
|
|
1D1EE3DD000
|
unkown
|
page read and write
|
|
|
|
48C8000
|
heap private
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCDE000
|
unkown
|
page readonly
|
|
|
|
D8E17F7000
|
unkown
|
page read and write
|
|
|
|
1D1EC400000
|
unkown
|
page readonly
|
|
|
|
1D1EC2E9000
|
unkown
|
page read and write
|
|
|
|
131E2013000
|
unkown
|
page read and write
|
|
|
|
2049A670000
|
unkown
|
page read and write
|
|
|
|
7FF5959D6000
|
unkown
|
page readonly
|
|
|
|
7FF5B657F000
|
unkown
|
page readonly
|
|
|
|
2163000
|
unkown
|
page readonly
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
7FF59FEE1000
|
unkown
|
page readonly
|
|
|
|
2C2FA650000
|
unkown
|
page read and write
|
|
|
|
1D1EC264000
|
unkown
|
page read and write
|
|
|
|
1E04BB13000
|
unkown
|
page read and write
|
|
|
|
7FF57AB08000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5E3EA2000
|
unkown
|
page readonly
|
|
|
|
22C8566E000
|
unkown
|
page read and write
|
|
|
|
7FF57C40F000
|
unkown
|
page readonly
|
|
|
|
22C3CE79000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C0324D000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF57AC37000
|
unkown
|
page readonly
|
|
|
|
7FF51911A000
|
unkown
|
page readonly
|
|
|
|
7FF5B64F2000
|
unkown
|
page readonly
|
|
|
|
7FF55A36E000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C3EF45000
|
unkown
|
page read and write
|
|
|
|
2A0BC802000
|
unkown
|
page read and write
|
|
|
|
20C03B1B000
|
unkown
|
page read and write
|
|
|
|
7FF57C418000
|
unkown
|
page readonly
|
|
|
|
20C03B20000
|
unkown
|
page read and write
|
|
|
|
1D1EE443000
|
unkown
|
page read and write
|
|
|
|
509A000
|
heap private
|
page read and write
|
|
|
|
7FF578647000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
38147FE000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B850E000
|
unkown
|
page readonly
|
|
|
|
7FF57AB92000
|
unkown
|
page readonly
|
|
|
|
7FF52436A000
|
unkown
|
page readonly
|
|
|
|
20C03B8E000
|
unkown
|
page read and write
|
|
|
|
18C7B49F000
|
unkown
|
page read and write
|
|
|
|
20C03B58000
|
unkown
|
page read and write
|
|
|
|
20C03B6D000
|
unkown
|
page read and write
|
|
|
|
7FF5B84AB000
|
unkown
|
page readonly
|
|
|
|
7FF595637000
|
unkown
|
page readonly
|
|
|
|
7FF5242B7000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
227210F0000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B30000
|
unkown
|
page read and write
|
|
|
|
DBADBE000
|
unkown
|
page read and write
|
|
|
|
20C03B65000
|
unkown
|
page read and write
|
|
|
|
20C032D4000
|
unkown
|
page read and write
|
|
|
|
7FF559F45000
|
unkown
|
page readonly
|
|
|
|
27F1000
|
unkown
|
page execute read
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C3ECD0000
|
unkown
|
page readonly
|
|
|
|
131DF5D0000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1E04BA2D000
|
unkown
|
page read and write
|
|
|
|
1D1EC213000
|
unkown
|
page read and write
|
|
|
|
20C03B56000
|
unkown
|
page read and write
|
|
|
|
20C03200000
|
unkown
|
page read and write
|
|
|
|
7FF57C291000
|
unkown
|
page readonly
|
|
|
|
20C04061000
|
unkown
|
page read and write
|
|
|
|
2FA01FB000
|
unkown
|
page read and write
|
|
|
|
DBB279000
|
unkown
|
page read and write
|
|
|
|
22C86FA0000
|
unkown
|
page read and write
|
|
|
|
20C03B8E000
|
unkown
|
page read and write
|
|
|
|
1D1EC2E8000
|
unkown
|
page read and write
|
|
|
|
22C3CDD0000
|
unkown
|
page readonly
|
|
|
|
7FF5E3A7A000
|
unkown
|
page readonly
|
|
|
|
18C7B486000
|
heap default
|
page read and write
|
|
|
|
20C0401D000
|
unkown
|
page read and write
|
|
|
|
A83DA7F000
|
unkown
|
page read and write
|
|
|
|
20C03B5C000
|
unkown
|
page read and write
|
|
|
|
44D0000
|
heap private
|
page read and write
|
|
|
|
1D1EE368000
|
unkown
|
page read and write
|
|
|
|
1D1EC1E0000
|
unkown
|
page readonly
|
|
|
|
7FF55A3C4000
|
unkown
|
page readonly
|
|
|
|
22C85668000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B644B000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EE3F3000
|
unkown
|
page read and write
|
|
|
|
131E1470000
|
unkown
|
page readonly
|
|
|
|
131DF6E5000
|
unkown
|
page read and write
|
|
|
|
7FF5E3EA1000
|
unkown
|
page readonly
|
|
|
|
22722BF0000
|
unkown
|
page read and write
|
|
|
|
7FF57850E000
|
unkown
|
page readonly
|
|
|
|
7FF5B620C000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03900000
|
unkown
|
page readonly
|
|
|
|
7FF57C2AB000
|
unkown
|
page readonly
|
|
|
|
22C3CED6000
|
unkown
|
page read and write
|
|
|
|
38148FA000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D7F000
|
unkown
|
page readonly
|
|
|
|
20C038E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C032D8000
|
unkown
|
page read and write
|
|
|
|
2710000
|
unkown
|
page readonly
|
|
|
|
7FF59FAC7000
|
unkown
|
page readonly
|
|
|
|
3AC98FF000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B56000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF57ABD4000
|
unkown
|
page readonly
|
|
|
|
7FF578A3B000
|
unkown
|
page readonly
|
|
|
|
509B000
|
heap private
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
131E1723000
|
unkown
|
page read and write
|
|
|
|
7FF57892E000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59FE3A000
|
unkown
|
page readonly
|
|
|
|
131DF71B000
|
unkown
|
page read and write
|
|
|
|
2426AC13000
|
unkown
|
page read and write
|
|
|
|
3AC93DB000
|
unkown
|
page read and write
|
|
|
|
2426AA80000
|
heap private
|
page read and write
|
|
|
|
7FF57C3AA000
|
unkown
|
page readonly
|
|
|
|
7FF595960000
|
unkown
|
page readonly
|
|
|
|
22C3ED70000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D2127D000
|
unkown
|
page read and write
|
|
|
|
7FF5B65BE000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B32000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF524364000
|
unkown
|
page readonly
|
|
|
|
22C85670000
|
unkown
|
page read and write
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
7FF59F952000
|
unkown
|
page readonly
|
|
|
|
7FF5BBC8B000
|
unkown
|
page readonly
|
|
|
|
7FF578A35000
|
unkown
|
page readonly
|
|
|
|
131E1764000
|
unkown
|
page read and write
|
|
|
|
DBB57F000
|
unkown
|
page read and write
|
|
|
|
1D1EC269000
|
unkown
|
page read and write
|
|
|
|
7FF57AC6E000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5E3E04000
|
unkown
|
page readonly
|
|
|
|
7FF5B6567000
|
unkown
|
page readonly
|
|
|
|
7FF5BBCF6000
|
unkown
|
page readonly
|
|
|
|
22C85668000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B6227000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
A83D8FE000
|
unkown
|
page read and write
|
|
|
|
18C7B498000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C032D1000
|
unkown
|
page read and write
|
|
|
|
7FF58CC0D000
|
unkown
|
page readonly
|
|
|
|
7FF57ACF1000
|
unkown
|
page readonly
|
|
|
|
7FF5BBC7A000
|
unkown
|
page readonly
|
|
|
|
2A0BC83C000
|
unkown
|
page read and write
|
|
|
|
7FF5241E4000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
38A297D000
|
unkown
|
page read and write
|
|
|
|
1D1EF000000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59FD3D000
|
unkown
|
page readonly
|
|
|
|
1D5C000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57C4A2000
|
unkown
|
page readonly
|
|
|
|
22C3CEF8000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF58D2AB000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B6458000
|
unkown
|
page readonly
|
|
|
|
1D2107F000
|
unkown
|
page read and write
|
|
|
|
20C03B91000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59F64D000
|
unkown
|
page readonly
|
|
|
|
7FF5E3BE4000
|
unkown
|
page readonly
|
|
|
|
4CA0000
|
heap private
|
page read and write
|
|
|
|
4CDA0FE000
|
unkown
|
page read and write
|
|
|
|
2135000
|
unkown
|
page readonly
|
|
|
|
20C04054000
|
unkown
|
page read and write
|
|
|
|
7FF559B8F000
|
unkown
|
page readonly
|
|
|
|
1D1EE494000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20BD000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B6316000
|
unkown
|
page readonly
|
|
|
|
7FF5BBC22000
|
unkown
|
page readonly
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
26C0000
|
unkown
|
page read and write
|
|
|
|
1D1EF410000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57AB03000
|
unkown
|
page readonly
|
|
|
|
E02A075000
|
unkown
|
page read and write
|
|
|
|
7FF5E3989000
|
unkown
|
page readonly
|
|
|
|
7FF57A501000
|
unkown
|
page readonly
|
|
|
|
7FF51903B000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B6B000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCCA000
|
unkown
|
page readonly
|
|
|
|
20C03B80000
|
unkown
|
page read and write
|
|
|
|
20C038E0000
|
unkown
|
page read and write
|
|
|
|
7FF59FE58000
|
unkown
|
page readonly
|
|
|
|
20C03B67000
|
unkown
|
page read and write
|
|
|
|
A83DC7D000
|
unkown
|
page read and write
|
|
|
|
1D1EE335000
|
unkown
|
page read and write
|
|
|
|
20C03B8E000
|
unkown
|
page read and write
|
|
|
|
7FF57AC44000
|
unkown
|
page readonly
|
|
|
|
7FF58D1D5000
|
unkown
|
page readonly
|
|
|
|
7FF5B65AE000
|
unkown
|
page readonly
|
|
|
|
2C2FA613000
|
unkown
|
page read and write
|
|
|
|
7FF55A1C1000
|
unkown
|
page readonly
|
|
|
|
A83DCFE000
|
unkown
|
page read and write
|
|
|
|
22C3CEA4000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5E3E18000
|
unkown
|
page readonly
|
|
|
|
1E04B9F0000
|
unkown
|
page readonly
|
|
|
|
20C03B3C000
|
unkown
|
page read and write
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57AC05000
|
unkown
|
page readonly
|
|
|
|
22C3CEE9000
|
unkown
|
page read and write
|
|
|
|
DBB0FA000
|
unkown
|
page read and write
|
|
|
|
206A000
|
unkown
|
page readonly
|
|
|
|
22721080000
|
heap private
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03229000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B8519000
|
unkown
|
page readonly
|
|
|
|
7FF5788D3000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EF310000
|
unkown
|
page read and write
|
|
|
|
20C03B84000
|
unkown
|
page read and write
|
|
|
|
7FF57AC5E000
|
unkown
|
page readonly
|
|
|
|
2272123F000
|
unkown
|
page read and write
|
|
|
|
2FA067D000
|
unkown
|
page read and write
|
|
|
|
7FF57AB46000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
38146FE000
|
unkown
|
page read and write
|
|
|
|
7FF57C3BB000
|
unkown
|
page readonly
|
|
|
|
20C032D8000
|
unkown
|
page read and write
|
|
|
|
7FF55A36A000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57A8CF000
|
unkown
|
page readonly
|
|
|
|
7FF5B839B000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF55A45A000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59598F000
|
unkown
|
page readonly
|
|
|
|
7FF59FCEB000
|
unkown
|
page readonly
|
|
|
|
1E04C060000
|
unkown
|
page readonly
|
|
|
|
7FF519030000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
F5AD277000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF523A9F000
|
unkown
|
page readonly
|
|
|
|
2C2FA470000
|
heap private
|
page read and write
|
|
|
|
2A0BCEB0000
|
unkown
|
page readonly
|
|
|
|
2093000
|
unkown
|
page readonly
|
|
|
|
131DF6C1000
|
unkown
|
page read and write
|
|
|
|
1D1EF710000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
DBB1FF000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B5F000
|
unkown
|
page read and write
|
|
|
|
3AC96FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B82C1000
|
unkown
|
page readonly
|
|
|
|
F5ACE7B000
|
unkown
|
page read and write
|
|
|
|
267B000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
131E1702000
|
unkown
|
page read and write
|
|
|
|
7FF57C2AE000
|
unkown
|
page readonly
|
|
|
|
1D1EE202000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EE582000
|
unkown
|
page read and write
|
|
|
|
D8E1FFF000
|
unkown
|
page read and write
|
|
|
|
2A0BC710000
|
unkown
|
page readonly
|
|
|
|
20C032D8000
|
unkown
|
page read and write
|
|
|
|
20C03B38000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
131DF714000
|
unkown
|
page read and write
|
|
|
|
2FA04FB000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CAB000
|
unkown
|
page readonly
|
|
|
|
18C7B4B0000
|
unkown
|
page read and write
|
|
|
|
1D1EE361000
|
unkown
|
page read and write
|
|
|
|
20C032A5000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2870000
|
heap default
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2158000
|
unkown
|
page readonly
|
|
|
|
1D1EC2E8000
|
unkown
|
page read and write
|
|
|
|
4110000
|
unkown
|
page read and write
|
|
|
|
2C2FA713000
|
unkown
|
page read and write
|
|
|
|
5098000
|
heap private
|
page read and write
|
|
|
|
131DF652000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCAF000
|
unkown
|
page readonly
|
|
|
|
1D1EC261000
|
unkown
|
page read and write
|
|
|
|
66DFA000
|
unkown image
|
page read and write
|
|
|
|
7FF55A461000
|
unkown
|
page readonly
|
|
|
|
20C03B59000
|
unkown
|
page read and write
|
|
|
|
20A0000
|
unkown
|
page readonly
|
|
|
|
7FF519074000
|
unkown
|
page readonly
|
|
|
|
7FF524297000
|
unkown
|
page readonly
|
|
|
|
420D000
|
unkown
|
page read and write
|
|
|
|
7FF5E3E9A000
|
unkown
|
page readonly
|
|
|
|
20C03B3D000
|
unkown
|
page read and write
|
|
|
|
1D1EE502000
|
unkown
|
page read and write
|
|
|
|
3814879000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03060000
|
heap private
|
page read and write
|
|
|
|
7FF5B825B000
|
unkown
|
page readonly
|
|
|
|
20C038D0000
|
unkown
|
page readonly
|
|
|
|
2A0BC872000
|
unkown
|
page read and write
|
|
|
|
7FF59FDBF000
|
unkown
|
page readonly
|
|
|
|
20C03B28000
|
unkown
|
page read and write
|
|
|
|
20C03B6C000
|
unkown
|
page read and write
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
2152000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF578A7A000
|
unkown
|
page readonly
|
|
|
|
7FF57AC00000
|
unkown
|
page readonly
|
|
|
|
7FF57AA25000
|
unkown
|
page readonly
|
|
|
|
7FF5B84A5000
|
unkown
|
page readonly
|
|
|
|
7FF595841000
|
unkown
|
page readonly
|
|
|
|
20C03B84000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C85629000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59FDBB000
|
unkown
|
page readonly
|
|
|
|
1E04BA3C000
|
unkown
|
page read and write
|
|
|
|
22C3E970000
|
unkown
|
page readonly
|
|
|
|
7FF5B6453000
|
unkown
|
page readonly
|
|
|
|
7FF57C429000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59FE5E000
|
unkown
|
page readonly
|
|
|
|
B0CA87E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3DE7000
|
unkown
|
page readonly
|
|
|
|
7FF57AA36000
|
unkown
|
page readonly
|
|
|
|
7FF59FC41000
|
unkown
|
page readonly
|
|
|
|
20C032E1000
|
unkown
|
page read and write
|
|
|
|
2426C5F0000
|
unkown
|
page read and write
|
|
|
|
7FF559F30000
|
unkown
|
page readonly
|
|
|
|
7FF5BBC43000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22C3EF85000
|
unkown
|
page read and write
|
|
|
|
7FF58D352000
|
unkown
|
page readonly
|
|
|
|
1D1EC23F000
|
unkown
|
page read and write
|
|
|
|
DBB3FD000
|
unkown
|
page read and write
|
|
|
|
1E04BA61000
|
unkown
|
page read and write
|
|
|
|
1D1EE3D5000
|
unkown
|
page read and write
|
|
|
|
20C03253000
|
unkown
|
page read and write
|
|
|
|
20C03B8A000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B82F9000
|
unkown
|
page readonly
|
|
|
|
7FF57C2FD000
|
unkown
|
page readonly
|
|
|
|
2FA02F9000
|
unkown
|
page read and write
|
|
|
|
2163000
|
unkown
|
page readonly
|
|
|
|
7FF59FDDA000
|
unkown
|
page readonly
|
|
|
|
20498BA0000
|
unkown
|
page readonly
|
|
|
|
1D210FA000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03BA3000
|
unkown
|
page read and write
|
|
|
|
7FF5B663A000
|
unkown
|
page readonly
|
|
|
|
18C7B497000
|
unkown
|
page read and write
|
|
|
|
2FA00FA000
|
unkown
|
page read and write
|
|
|
|
7FF57AB4D000
|
unkown
|
page readonly
|
|
|
|
7FF57BBCF000
|
unkown
|
page readonly
|
|
|
|
7FF55A0F0000
|
unkown
|
page readonly
|
|
|
|
7FF5E3DB5000
|
unkown
|
page readonly
|
|
|
|
22C85800000
|
unkown
|
page readonly
|
|
|
|
1D1EC2EB000
|
unkown
|
page read and write
|
|
|
|
2A0BD200000
|
unkown
|
page readonly
|
|
|
|
20C04000000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C032E9000
|
unkown
|
page read and write
|
|
|
|
7FF578A2A000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D52000
|
unkown
|
page readonly
|
|
|
|
20C03B5C000
|
unkown
|
page read and write
|
|
|
|
7FF59FDF0000
|
unkown
|
page readonly
|
|
|
|
7FF58D40E000
|
unkown
|
page readonly
|
|
|
|
7FF5242AC000
|
unkown
|
page readonly
|
|
|
|
7FF57C4A1000
|
unkown
|
page readonly
|
|
|
|
7FF5BB93C000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20498B50000
|
unkown
|
page write copy
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
509A000
|
heap private
|
page read and write
|
|
|
|
22C85490000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCEE000
|
unkown
|
page readonly
|
|
|
|
1D1EF710000
|
unkown
|
page read and write
|
|
|
|
7FF5BBC80000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF57AA51000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
4CDA1FF000
|
unkown
|
page read and write
|
|
|
|
131DF440000
|
heap private
|
page read and write
|
|
|
|
20C03B5F000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
204D000
|
unkown
|
page readonly
|
|
|
|
20C031C0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B8584000
|
unkown
|
page readonly
|
|
|
|
7FF57C42D000
|
unkown
|
page readonly
|
|
|
|
20C3000
|
unkown
|
page readonly
|
|
|
|
7FF578B1A000
|
unkown
|
page readonly
|
|
|
|
D8E167B000
|
unkown
|
page read and write
|
|
|
|
20C03B5C000
|
unkown
|
page read and write
|
|
|
|
1D1EE306000
|
unkown
|
page read and write
|
|
|
|
7FF524000000
|
unkown
|
page readonly
|
|
|
|
E02A47F000
|
unkown
|
page read and write
|
|
|
|
7FF5E3B88000
|
unkown
|
page readonly
|
|
|
|
66DB5000
|
unkown image
|
page read and write
|
|
|
|
1D1EC258000
|
unkown
|
page read and write
|
|
|
|
7FF57ABDF000
|
unkown
|
page readonly
|
|
|
|
20C03B8F000
|
unkown
|
page read and write
|
|
|
|
E029F7E000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1E04BA29000
|
unkown
|
page read and write
|
|
|
|
7FF5BBAA1000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EF510000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5BB957000
|
unkown
|
page readonly
|
|
|
|
7FF5951BD000
|
unkown
|
page readonly
|
|
|
|
DBAD3B000
|
unkown
|
page read and write
|
|
|
|
7FF59FE61000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03282000
|
unkown
|
page read and write
|
|
|
|
2A0BC870000
|
unkown
|
page read and write
|
|
|
|
2C2FA700000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22C8566E000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B5F000
|
unkown
|
page read and write
|
|
|
|
7FF57A9D8000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22C85670000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF523E40000
|
unkown
|
page readonly
|
|
|
|
20C03B60000
|
unkown
|
page read and write
|
|
|
|
66DBE000
|
unkown image
|
page readonly
|
|
|
|
1E04BA13000
|
unkown
|
page read and write
|
|
|
|
7FF5B83A3000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B8381000
|
unkown
|
page readonly
|
|
|
|
7FF519035000
|
unkown
|
page readonly
|
|
|
|
7FF578911000
|
unkown
|
page readonly
|
|
|
|
2A0BCA00000
|
unkown
|
page readonly
|
|
|
|
B0CA8FE000
|
unkown
|
page read and write
|
|
|
|
7FF5B858A000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5E3E21000
|
unkown
|
page readonly
|
|
|
|
2C2FA4E0000
|
unkown
|
page readonly
|
|
|
|
7FF578864000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
4CDA07A000
|
unkown
|
page read and write
|
|
|
|
227211C0000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59FE27000
|
unkown
|
page readonly
|
|
|
|
7FF57C127000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EC2BA000
|
unkown
|
page read and write
|
|
|
|
7FF5241D3000
|
unkown
|
page readonly
|
|
|
|
A83D9F9000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20498C00000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03213000
|
unkown
|
page read and write
|
|
|
|
2043000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D50000
|
unkown
|
page readonly
|
|
|
|
7FF58D421000
|
unkown
|
page readonly
|
|
|
|
20C04200000
|
unkown
|
page readonly
|
|
|
|
22721200000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
E029EFD000
|
unkown
|
page read and write
|
|
|
|
20C03B61000
|
unkown
|
page read and write
|
|
|
|
7FF578B21000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2239D46C000
|
unkown
|
page read and write
|
|
|
|
7FF5959AA000
|
unkown
|
page readonly
|
|
|
|
7FF5B84CC000
|
unkown
|
page readonly
|
|
|
|
131E1410000
|
heap private
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B13000
|
unkown
|
page read and write
|
|
|
|
66F02000
|
unkown image
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B32000
|
unkown
|
page read and write
|
|
|
|
7FF55A37B000
|
unkown
|
page readonly
|
|
|
|
7FF59FC26000
|
unkown
|
page readonly
|
|
|
|
7FF57C3DC000
|
unkown
|
page readonly
|
|
|
|
2239D402000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57C130000
|
unkown
|
page readonly
|
|
|
|
7FF57AAFB000
|
unkown
|
page readonly
|
|
|
|
2A0BC913000
|
unkown
|
page read and write
|
|
|
|
2820000
|
unkown
|
page execute and read and write
|
|
|
|
7FF57899C000
|
unkown
|
page readonly
|
|
|
|
18C7B7F0000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C031F0000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20BF000
|
unkown
|
page readonly
|
|
|
|
4849000
|
heap private
|
page read and write
|
|
|
|
7FF57AC0B000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
3AC967F000
|
unkown
|
page read and write
|
|
|
|
2A0BC6A0000
|
heap private
|
page read and write
|
|
|
|
20C03B5B000
|
unkown
|
page read and write
|
|
|
|
7FF559F36000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D21179000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5BBB88000
|
unkown
|
page readonly
|
|
|
|
26E0000
|
unkown
|
page readonly
|
|
|
|
7FF57C3B5000
|
unkown
|
page readonly
|
|
|
|
7FF52428B000
|
unkown
|
page readonly
|
|
|
|
1D1EC1A0000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EC0E0000
|
heap private
|
page read and write
|
|
|
|
1D1EF610000
|
unkown
|
page read and write
|
|
|
|
1D1EE642000
|
unkown
|
page read and write
|
|
|
|
20C03B00000
|
unkown
|
page read and write
|
|
|
|
7FF57ACE4000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5789D0000
|
unkown
|
page readonly
|
|
|
|
7FF55A39C000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5E3E1E000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
66DFB000
|
unkown image
|
page execute and read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B8266000
|
unkown
|
page readonly
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
22C40000000
|
unkown
|
page readonly
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
B0CAA75000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
3AC987E000
|
unkown
|
page read and write
|
|
|
|
7FF59FDCF000
|
unkown
|
page readonly
|
|
|
|
1D1EE353000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D9A000
|
unkown
|
page readonly
|
|
|
|
287A000
|
heap default
|
page read and write
|
|
|
|
7FF59FDEE000
|
unkown
|
page readonly
|
|
|
|
20C04002000
|
unkown
|
page read and write
|
|
|
|
A83DB7A000
|
unkown
|
page read and write
|
|
|
|
7FF5B8591000
|
unkown
|
page readonly
|
|
|
|
22721213000
|
unkown
|
page read and write
|
|
|
|
20C03B51000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
B0CADFE000
|
unkown
|
page read and write
|
|
|
|
7FF59596B000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2FA077C000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57897D000
|
unkown
|
page readonly
|
|
|
|
1D1EE3E4000
|
unkown
|
page read and write
|
|
|
|
22C3EF12000
|
unkown
|
page read and write
|
|
|
|
7FF578B14000
|
unkown
|
page readonly
|
|
|
|
7FF57AA59000
|
unkown
|
page readonly
|
|
|
|
7FF57A762000
|
unkown
|
page readonly
|
|
|
|
2239D46E000
|
unkown
|
page read and write
|
|
|
|
7FF5959A4000
|
unkown
|
page readonly
|
|
|
|
1D1EF110000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
131DF702000
|
unkown
|
page read and write
|
|
|
|
7FF5B815C000
|
unkown
|
page readonly
|
|
|
|
131DF718000
|
unkown
|
page read and write
|
|
|
|
7FF55A2D4000
|
unkown
|
page readonly
|
|
|
|
20D1000
|
unkown
|
page readonly
|
|
|
|
1F77000
|
unkown
|
page readonly
|
|
|
|
7FF5BBC7E000
|
unkown
|
page readonly
|
|
|
|
20C03B9F000
|
unkown
|
page read and write
|
|
|
|
F5AD37F000
|
unkown
|
page read and write
|
|
|
|
20C03B1D000
|
unkown
|
page read and write
|
|
|
|
22C85700000
|
unkown
|
page read and write
|
|
|
|
7FF59FC24000
|
unkown
|
page readonly
|
|
|
|
4210000
|
heap private
|
page read and write
|
|
|
|
7FF5B7CFD000
|
unkown
|
page readonly
|
|
|
|
20C03B55000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF57C41E000
|
unkown
|
page readonly
|
|
|
|
7FF595902000
|
unkown
|
page readonly
|
|
|
|
7FF59FD90000
|
unkown
|
page readonly
|
|
|
|
7FF524371000
|
unkown
|
page readonly
|
|
|
|
7FF578938000
|
unkown
|
page readonly
|
|
|
|
7FF578871000
|
unkown
|
page readonly
|
|
|
|
7FF5BBCF1000
|
unkown
|
page readonly
|
|
|
|
7FF57AC2F000
|
unkown
|
page readonly
|
|
|
|
1D1EE3F6000
|
unkown
|
page read and write
|
|
|
|
7FF57ABA2000
|
unkown
|
page readonly
|
|
|
|
7FF5B6642000
|
unkown
|
page readonly
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
1D1EE347000
|
unkown
|
page read and write
|
|
|
|
7FF58D3DC000
|
unkown
|
page readonly
|
|
|
|
7FF578A84000
|
unkown
|
page readonly
|
|
|
|
22C3D0D0000
|
unkown
|
page readonly
|
|
|
|
2FA06FC000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EE110000
|
unkown
|
page read and write
|
|
|
|
7FF5242C4000
|
unkown
|
page readonly
|
|
|
|
2850000
|
heap private
|
page read and write
|
|
|
|
7FF523E46000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF523A99000
|
unkown
|
page readonly
|
|
|
|
F5ACEFE000
|
unkown
|
page read and write
|
|
|
|
7FF55A3CF000
|
unkown
|
page readonly
|
|
|
|
1D1EF210000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5E360D000
|
unkown
|
page readonly
|
|
|
|
F5ACF7E000
|
unkown
|
page read and write
|
|
|
|
7FF5B84E4000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B84EA000
|
unkown
|
page readonly
|
|
|
|
7FF5E36B1000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59FDB3000
|
unkown
|
page readonly
|
|
|
|
2C2FB000000
|
unkown
|
page readonly
|
|
|
|
1E04BA58000
|
unkown
|
page read and write
|
|
|
|
7FF58D350000
|
unkown
|
page readonly
|
|
|
|
2C2FA655000
|
unkown
|
page read and write
|
|
|
|
76826FF000
|
unkown
|
page read and write
|
|
|
|
7FF57AA21000
|
unkown
|
page readonly
|
|
|
|
1D1EC2E9000
|
unkown
|
page read and write
|
|
|
|
2239D600000
|
unkown
|
page readonly
|
|
|
|
7FF58D2B8000
|
unkown
|
page readonly
|
|
|
|
7FF5BB94A000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF55A3E9000
|
unkown
|
page readonly
|
|
|
|
7FF55A35A000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
381477E000
|
unkown
|
page read and write
|
|
|
|
7FF578249000
|
unkown
|
page readonly
|
|
|
|
227210E0000
|
heap default
|
page read and write
|
|
|
|
7FF524280000
|
unkown
|
page readonly
|
|
|
|
7FF5B6555000
|
unkown
|
page readonly
|
|
|
|
7FF55A0E7000
|
unkown
|
page readonly
|
|
|
|
7FF5E3E26000
|
unkown
|
page readonly
|
|
|
|
20C03B7C000
|
unkown
|
page read and write
|
|
|
|
7FF58D087000
|
unkown
|
page readonly
|
|
|
|
7FF5E3E29000
|
unkown
|
page readonly
|
|
|
|
7FF578645000
|
unkown
|
page readonly
|
|
|
|
7FF595863000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EC33C000
|
unkown
|
page read and write
|
|
|
|
20C032A4000
|
unkown
|
page read and write
|
|
|
|
7FF59585B000
|
unkown
|
page readonly
|
|
|
|
66DBF000
|
unkown image
|
page execute read
|
|
|
|
20CA000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2426AC00000
|
unkown
|
page read and write
|
|
|
|
20C03B8A000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2239EDA0000
|
unkown
|
page read and write
|
|
|
|
1D1EDC70000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF55A3B4000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B5B000
|
unkown
|
page read and write
|
|
|
|
7FF51908E000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
509B000
|
heap private
|
page read and write
|
|
|
|
1D1EE110000
|
unkown
|
page read and write
|
|
|
|
7FF5B82C5000
|
unkown
|
page readonly
|
|
|
|
E02A37F000
|
unkown
|
page read and write
|
|
|
|
18C7B7E5000
|
heap private
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2239D46A000
|
unkown
|
page read and write
|
|
|
|
7FF5E3BD1000
|
unkown
|
page readonly
|
|
|
|
7FF5B65C9000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5BBC20000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C85613000
|
unkown
|
page read and write
|
|
|
|
20C03B56000
|
unkown
|
page read and write
|
|
|
|
381467B000
|
unkown
|
page read and write
|
|
|
|
131E1470000
|
unkown
|
page read and write
|
|
|
|
7FF5BBC97000
|
unkown
|
page readonly
|
|
|
|
7FF5BBCAC000
|
unkown
|
page readonly
|
|
|
|
7FF5242CA000
|
unkown
|
page readonly
|
|
|
|
7FF5B84CF000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C04002000
|
unkown
|
page read and write
|
|
|
|
7FF5959D1000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B77000
|
unkown
|
page read and write
|
|
|
|
1D1EC259000
|
unkown
|
page read and write
|
|
|
|
7FF59F9C9000
|
unkown
|
page readonly
|
|
|
|
7FF5BBB7B000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF57C49A000
|
unkown
|
page readonly
|
|
|
|
B0CA97B000
|
unkown
|
page read and write
|
|
|
|
1E04BB02000
|
unkown
|
page read and write
|
|
|
|
208C000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59FAAC000
|
unkown
|
page readonly
|
|
|
|
20C030C0000
|
heap default
|
page read and write
|
|
|
|
20C032D1000
|
unkown
|
page read and write
|
|
|
|
1D1EC2CB000
|
unkown
|
page read and write
|
|
|
|
20C03B69000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF595998000
|
unkown
|
page readonly
|
|
|
|
7FF5789FB000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
D8E1C7F000
|
unkown
|
page read and write
|
|
|
|
20C03B90000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CF6000
|
unkown
|
page readonly
|
|
|
|
18C7B420000
|
unkown
|
page readonly
|
|
|
|
7FF52417E000
|
unkown
|
page readonly
|
|
|
|
7FF578A1A000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B8E000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03C00000
|
unkown
|
page readonly
|
|
|
|
7FF5E3C91000
|
unkown
|
page readonly
|
|
|
|
2426AE00000
|
unkown
|
page write copy
|
|
|
|
2063000
|
unkown
|
page readonly
|
|
|
|
7FF58D3BB000
|
unkown
|
page readonly
|
|
|
|
7FF59FDF5000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CFD000
|
unkown
|
page readonly
|
|
|
|
7FF55A3D8000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
131DF580000
|
unkown
|
page write copy
|
|
|
|
20C03B39000
|
unkown
|
page read and write
|
|
|
|
768267F000
|
unkown
|
page read and write
|
|
|
|
7FF59FE44000
|
unkown
|
page readonly
|
|
|
|
7FF59FDEA000
|
unkown
|
page readonly
|
|
|
|
20C0328A000
|
unkown
|
page read and write
|
|
|
|
7FF57BF76000
|
unkown
|
page readonly
|
|
|
|
2C2FAC80000
|
unkown
|
page readonly
|
|
|
|
7FF59FABA000
|
unkown
|
page readonly
|
|
|
|
7FF57ABFE000
|
unkown
|
page readonly
|
|
|
|
7FF58D16B000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C3CF02000
|
unkown
|
page read and write
|
|
|
|
22C3EE02000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
509B000
|
heap private
|
page read and write
|
|
|
|
7FF57A7D9000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
252C000
|
unkown
|
page read and write
|
|
|
|
7FF578933000
|
unkown
|
page readonly
|
|
|
|
20C03B3B000
|
unkown
|
page read and write
|
|
|
|
7FF59FE07000
|
unkown
|
page readonly
|
|
|
|
66E00000
|
unkown image
|
page read and write
|
|
|
|
7FF58D3FA000
|
unkown
|
page readonly
|
|
|
|
7FF57AC71000
|
unkown
|
page readonly
|
|
|
|
1D1EF110000
|
unkown
|
page read and write
|
|
|
|
2C2FA64B000
|
unkown
|
page read and write
|
|
|
|
7FF57A8D7000
|
unkown
|
page readonly
|
|
|
|
7FF57859E000
|
unkown
|
page readonly
|
|
|
|
7FF57C39C000
|
unkown
|
page readonly
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
1D1EF410000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22C85713000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C85670000
|
unkown
|
page read and write
|
|
|
|
1D1EE329000
|
unkown
|
page read and write
|
|
|
|
20C03B3B000
|
unkown
|
page read and write
|
|
|
|
1D1EF110000
|
unkown
|
page read and write
|
|
|
|
20498C64000
|
unkown
|
page read and write
|
|
|
|
2144000
|
unkown
|
page readonly
|
|
|
|
7FF58D2B3000
|
unkown
|
page readonly
|
|
|
|
22C3CE13000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22C855B0000
|
unkown
|
page readonly
|
|
|
|
2A0BC908000
|
unkown
|
page read and write
|
|
|
|
28E0000
|
unkown
|
page read and write
|
|
|
|
7FF578605000
|
unkown
|
page readonly
|
|
|
|
7FF57ACF2000
|
unkown
|
page readonly
|
|
|
|
1D1EF410000
|
unkown
|
page read and write
|
|
|
|
2059000
|
unkown
|
page readonly
|
|
|
|
7FF57C253000
|
unkown
|
page readonly
|
|
|
|
7FF58D429000
|
unkown
|
page readonly
|
|
|
|
7FF52417B000
|
unkown
|
page readonly
|
|
|
|
7FF5B84A0000
|
unkown
|
page readonly
|
|
|
|
20C03313000
|
unkown
|
page read and write
|
|
|
|
131DF629000
|
unkown
|
page read and write
|
|
|
|
7FF578AA9000
|
unkown
|
page readonly
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF58D41E000
|
unkown
|
page readonly
|
|
|
|
2F9FF7A000
|
unkown
|
page read and write
|
|
|
|
20C0324A000
|
unkown
|
page read and write
|
|
|
|
20E6000
|
unkown
|
page readonly
|
|
|
|
66DB0000
|
unkown image
|
page readonly
|
|
|
|
1D1EE600000
|
unkown
|
page read and write
|
|
|
|
1E04B8B0000
|
heap private
|
page read and write
|
|
|
|
7FF5E3912000
|
unkown
|
page readonly
|
|
|
|
7FF57AB9C000
|
unkown
|
page readonly
|
|
|
|
20C03B8F000
|
unkown
|
page read and write
|
|
|
|
7FF5B6431000
|
unkown
|
page readonly
|
|
|
|
131E13F0000
|
unkown
|
page read and write
|
|
|
|
22C85670000
|
unkown
|
page read and write
|
|
|
|
7FF5E3C09000
|
unkown
|
page readonly
|
|
|
|
2C2FA702000
|
unkown
|
page read and write
|
|
|
|
18C7B470000
|
heap default
|
page read and write
|
|
|
|
1D1EC277000
|
unkown
|
page read and write
|
|
|
|
20C032C5000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D7B000
|
unkown
|
page readonly
|
|
|
|
7FF5B84F4000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EE43C000
|
unkown
|
page read and write
|
|
|
|
1D1EC150000
|
unkown
|
page write copy
|
|
|
|
20C03270000
|
unkown
|
page read and write
|
|
|
|
20C032F4000
|
unkown
|
page read and write
|
|
|
|
20C0329E000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF524161000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCF9000
|
unkown
|
page readonly
|
|
|
|
1D1EE440000
|
unkown
|
page read and write
|
|
|
|
7FF57A9DF000
|
unkown
|
page readonly
|
|
|
|
7FF57A9C6000
|
unkown
|
page readonly
|
|
|
|
20C03BCB000
|
unkown
|
page read and write
|
|
|
|
7FF57C3B0000
|
unkown
|
page readonly
|
|
|
|
20C03302000
|
unkown
|
page read and write
|
|
|
|
2131000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CB8000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B64F0000
|
unkown
|
page readonly
|
|
|
|
2239EEA0000
|
unkown
|
page readonly
|
|
|
|
7FF5BB94F000
|
unkown
|
page readonly
|
|
|
|
4C9F000
|
unkown
|
page read and write
|
|
|
|
20A9000
|
unkown
|
page readonly
|
|
|
|
4CDA17A000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
DBB2FA000
|
unkown
|
page read and write
|
|
|
|
2D00000
|
unkown
|
page readonly
|
|
|
|
7FF55A251000
|
unkown
|
page readonly
|
|
|
|
1D1EE3CC000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
263C000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C038E0000
|
unkown
|
page read and write
|
|
|
|
2239D500000
|
unkown
|
page read and write
|
|
|
|
28E0000
|
unkown
|
page read and write
|
|
|
|
20C03B6F000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF58D3AE000
|
unkown
|
page readonly
|
|
|
|
1D1EF310000
|
unkown
|
page read and write
|
|
|
|
20C038F0000
|
unkown
|
page read and write
|
|
|
|
20C04002000
|
unkown
|
page read and write
|
|
|
|
7FF55A26E000
|
unkown
|
page readonly
|
|
|
|
7FF5190A9000
|
unkown
|
page readonly
|
|
|
|
7FF519122000
|
unkown
|
page readonly
|
|
|
|
7FF57ACEA000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20CF000
|
unkown
|
page readonly
|
|
|
|
18C7B49F000
|
unkown
|
page read and write
|
|
|
|
D8E1CFF000
|
unkown
|
page read and write
|
|
|
|
22C3CD10000
|
heap private
|
page read and write
|
|
|
|
7FF5B6634000
|
unkown
|
page readonly
|
|
|
|
7FF5B65CD000
|
unkown
|
page readonly
|
|
|
|
1D1EE477000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCD4000
|
unkown
|
page readonly
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2239D46C000
|
unkown
|
page read and write
|
|
|
|
7FF5787AF000
|
unkown
|
page readonly
|
|
|
|
7FF59FBCF000
|
unkown
|
page readonly
|
|
|
|
22C8563F000
|
unkown
|
page read and write
|
|
|
|
7FF55A2BD000
|
unkown
|
page readonly
|
|
|
|
20B7000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C3EF85000
|
unkown
|
page read and write
|
|
|
|
131E1470000
|
unkown
|
page read and write
|
|
|
|
7FF5B6588000
|
unkown
|
page readonly
|
|
|
|
1D1EE463000
|
unkown
|
page read and write
|
|
|
|
2FA03FB000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D20D7A000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
509B000
|
heap private
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B5C000
|
unkown
|
page read and write
|
|
|
|
7FF57C3AE000
|
unkown
|
page readonly
|
|
|
|
20C03B31000
|
unkown
|
page read and write
|
|
|
|
2A0BC7F0000
|
unkown
|
page readonly
|
|
|
|
1D1EF210000
|
unkown
|
page read and write
|
|
|
|
7FF57C404000
|
unkown
|
page readonly
|
|
|
|
7FF5B851D000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2239D513000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B6550000
|
unkown
|
page readonly
|
|
|
|
20C03B55000
|
unkown
|
page read and write
|
|
|
|
7FF5BBC85000
|
unkown
|
page readonly
|
|
|
|
131E1602000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
768287F000
|
unkown
|
page read and write
|
|
|
|
7FF5E3BF1000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EC2EF000
|
unkown
|
page read and write
|
|
|
|
2239D400000
|
unkown
|
page read and write
|
|
|
|
2A0BC890000
|
unkown
|
page read and write
|
|
|
|
22C85480000
|
heap default
|
page read and write
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
7FF57AC54000
|
unkown
|
page readonly
|
|
|
|
20498AE0000
|
heap private
|
page read and write
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
7FF5242F9000
|
unkown
|
page readonly
|
|
|
|
7FF57892B000
|
unkown
|
page readonly
|
|
|
|
7FF5785A2000
|
unkown
|
page readonly
|
|
|
|
2A0BC88C000
|
unkown
|
page read and write
|
|
|
|
2239D454000
|
unkown
|
page read and write
|
|
|
|
18C7B3D0000
|
unkown
|
page read and write
|
|
|
|
7FF59561C000
|
unkown
|
page readonly
|
|
|
|
DBB47C000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2A0BC7E0000
|
unkown
|
page readonly
|
|
|
|
7FF5B84FE000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
D8E197F000
|
unkown
|
page read and write
|
|
|
|
20C03B3E000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF57C314000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF578592000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C3ED50000
|
unkown
|
page readonly
|
|
|
|
7FF59FBAB000
|
unkown
|
page readonly
|
|
|
|
1D1EC262000
|
unkown
|
page read and write
|
|
|
|
7FF5BBD71000
|
unkown
|
page readonly
|
|
|
|
1D1EC229000
|
unkown
|
page read and write
|
|
|
|
1D1EC29E000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D9A000
|
unkown
|
page readonly
|
|
|
|
7FF518987000
|
unkown
|
page readonly
|
|
|
|
7FF57AC76000
|
unkown
|
page readonly
|
|
|
|
18C7B7E0000
|
heap private
|
page read and write
|
|
|
|
509A000
|
heap private
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B75000
|
unkown
|
page read and write
|
|
|
|
20C03BCF000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF57C3E7000
|
unkown
|
page readonly
|
|
|
|
7FF5E3DAA000
|
unkown
|
page readonly
|
|
|
|
20C03B56000
|
unkown
|
page read and write
|
|
|
|
7FF595868000
|
unkown
|
page readonly
|
|
|
|
20C03B78000
|
unkown
|
page read and write
|
|
|
|
1D1EE500000
|
unkown
|
page read and write
|
|
|
|
7FF57BF85000
|
unkown
|
page readonly
|
|
|
|
7FF58D3AA000
|
unkown
|
page readonly
|
|
|
|
7FF55A3DE000
|
unkown
|
page readonly
|
|
|
|
7FF52426A000
|
unkown
|
page readonly
|
|
|
|
22722CF0000
|
unkown
|
page readonly
|
|
|
|
509B000
|
heap private
|
page read and write
|
|
|
|
7FF59598C000
|
unkown
|
page readonly
|
|
|
|
131E1470000
|
unkown
|
page read and write
|
|
|
|
22C3ED40000
|
unkown
|
page read and write
|
|
|
|
7FF5E3DF4000
|
unkown
|
page readonly
|
|
|
|
1D1EE702000
|
unkown
|
page read and write
|
|
|
|
2239D46E000
|
unkown
|
page read and write
|
|
|
|
22C3CE57000
|
unkown
|
page read and write
|
|
|
|
1E04C202000
|
unkown
|
page read and write
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
20C03B76000
|
unkown
|
page read and write
|
|
|
|
20EB000
|
unkown
|
page readonly
|
|
|
|
20E2000
|
unkown
|
page readonly
|
|
|
|
7FF58D3E8000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27FC000
|
unkown
|
page readonly
|
|
|
|
7FF5957B9000
|
unkown
|
page readonly
|
|
|
|
20C03BC5000
|
unkown
|
page read and write
|
|
|
|
22C870A0000
|
unkown
|
page readonly
|
|
|
|
20C03B8A000
|
unkown
|
page read and write
|
|
|
|
20C03B76000
|
unkown
|
page read and write
|
|
|
|
7FF59FCD1000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C3ED30000
|
unkown
|
page readonly
|
|
|
|
2FA057B000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C032D8000
|
unkown
|
page read and write
|
|
|
|
20C03B56000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
18C7B4AF000
|
unkown
|
page read and write
|
|
|
|
22C3CE6E000
|
unkown
|
page read and write
|
|
|
|
7FF5B8177000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B6371000
|
unkown
|
page readonly
|
|
|
|
7FF55A387000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59FBB6000
|
unkown
|
page readonly
|
|
|
|
20C03255000
|
unkown
|
page read and write
|
|
|
|
28BC000
|
unkown
|
page read and write
|
|
|
|
7FF5BBB61000
|
unkown
|
page readonly
|
|
|
|
22C85600000
|
unkown
|
page read and write
|
|
|
|
131E10A0000
|
unkown
|
page readonly
|
|
|
|
2A0BD002000
|
unkown
|
page read and write
|
|
|
|
20C03B3A000
|
unkown
|
page read and write
|
|
|
|
20C03B6E000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C85668000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCB8000
|
unkown
|
page readonly
|
|
|
|
7FF55A370000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20498C02000
|
unkown
|
page read and write
|
|
|
|
1D1EE400000
|
unkown
|
page read and write
|
|
|
|
7FF5B8592000
|
unkown
|
page readonly
|
|
|
|
7FF57C39A000
|
unkown
|
page readonly
|
|
|
|
7FF578866000
|
unkown
|
page readonly
|
|
|
|
28E0000
|
unkown
|
page read and write
|
|
|
|
22C85670000
|
unkown
|
page read and write
|
|
|
|
7FF57C201000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
38A27FF000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EE130000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EE3E5000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
131DF6C5000
|
unkown
|
page read and write
|
|
|
|
2239D440000
|
unkown
|
page read and write
|
|
|
|
1D1EC2E8000
|
unkown
|
page read and write
|
|
|
|
20C032E8000
|
unkown
|
page read and write
|
|
|
|
1D1EC31B000
|
unkown
|
page read and write
|
|
|
|
7FF578A47000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59FC11000
|
unkown
|
page readonly
|
|
|
|
7FF595965000
|
unkown
|
page readonly
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
1D1EC31D000
|
unkown
|
page read and write
|
|
|
|
20498ED0000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5959D9000
|
unkown
|
page readonly
|
|
|
|
B0CABF7000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B657C000
|
unkown
|
page readonly
|
|
|
|
20C032A9000
|
unkown
|
page read and write
|
|
|
|
20C03B1D000
|
unkown
|
page read and write
|
|
|
|
131DF4B0000
|
unkown
|
page readonly
|
|
|
|
7FF578A67000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2239D502000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B67000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B8508000
|
unkown
|
page readonly
|
|
|
|
7FF58D494000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
435F000
|
unkown
|
page read and write
|
|
|
|
7FF5959CE000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59571B000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B63A9000
|
unkown
|
page readonly
|
|
|
|
7FF5B816A000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EC36E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3DC7000
|
unkown
|
page readonly
|
|
|
|
2705000
|
heap default
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C03B5C000
|
unkown
|
page read and write
|
|
|
|
7FF58D42D000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
38149FA000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
66DB1000
|
unkown image
|
page execute read
|
|
|
|
1D1EF110000
|
unkown
|
page read and write
|
|
|
|
1D1EE316000
|
unkown
|
page read and write
|
|
|
|
1D1EE602000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2FA05FA000
|
unkown
|
page read and write
|
|
|
|
18C7B570000
|
unkown
|
page readonly
|
|
|
|
7FF52426C000
|
unkown
|
page readonly
|
|
|
|
2426AC3F000
|
unkown
|
page read and write
|
|
|
|
66DB6000
|
unkown image
|
page readonly
|
|
|
|
22C85670000
|
unkown
|
page read and write
|
|
|
|
7FF5E3B6B000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C3CEB2000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B1D000
|
unkown
|
page read and write
|
|
|
|
1D1EC4D0000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57AC2C000
|
unkown
|
page readonly
|
|
|
|
20C03B8A000
|
unkown
|
page read and write
|
|
|
|
22721255000
|
unkown
|
page read and write
|
|
|
|
1D1EE100000
|
unkown
|
page readonly
|
|
|
|
7FF524123000
|
unkown
|
page readonly
|
|
|
|
2C2FAE02000
|
unkown
|
page read and write
|
|
|
|
1D1EF010000
|
unkown
|
page read and write
|
|
|
|
7FF5BBD64000
|
unkown
|
page readonly
|
|
|
|
22C3ED40000
|
unkown
|
page read and write
|
|
|
|
7FF59FD36000
|
unkown
|
page readonly
|
|
|
|
7FF5E3A6C000
|
unkown
|
page readonly
|
|
|
|
2426AD02000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EE348000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
B0CAAFF000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EC2E8000
|
unkown
|
page read and write
|
|
|
|
7FF578387000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C030D0000
|
unkown
|
page readonly
|
|
|
|
7FF55A3BA000
|
unkown
|
page readonly
|
|
|
|
1D1EE3D6000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF58D3F4000
|
unkown
|
page readonly
|
|
|
|
38A2779000
|
unkown
|
page read and write
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
20C03B40000
|
unkown
|
page read and write
|
|
|
|
512F000
|
unkown
|
page read and write
|
|
|
|
20C032AF000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C85668000
|
unkown
|
page read and write
|
|
|
|
1D1EE315000
|
unkown
|
page read and write
|
|
|
|
7FF578A30000
|
unkown
|
page readonly
|
|
|
|
2A0BCE60000
|
unkown
|
page read and write
|
|
|
|
1D1EE349000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EE306000
|
unkown
|
page read and write
|
|
|
|
7FF51909E000
|
unkown
|
page readonly
|
|
|
|
509A000
|
heap private
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B80000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCE8000
|
unkown
|
page readonly
|
|
|
|
7FF5B65B8000
|
unkown
|
page readonly
|
|
|
|
2426C6F0000
|
unkown
|
page readonly
|
|
|
|
20C03250000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D73000
|
unkown
|
page readonly
|
|
|
|
1D1EE307000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D9C000
|
unkown
|
page readonly
|
|
|
|
2426ABC0000
|
unkown
|
page readonly
|
|
|
|
7FF57C3C7000
|
unkown
|
page readonly
|
|
|
|
1E04BA9F000
|
unkown
|
page read and write
|
|
|
|
7FF578331000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59FC31000
|
unkown
|
page readonly
|
|
|
|
7FF5E3DBB000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF59FCF3000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B659A000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59FC49000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF57ABA0000
|
unkown
|
page readonly
|
|
|
|
7FF57AC17000
|
unkown
|
page readonly
|
|
|
|
7FF5BBB83000
|
unkown
|
page readonly
|
|
|
|
2A0BC84F000
|
unkown
|
page read and write
|
|
|
|
7FF595726000
|
unkown
|
page readonly
|
|
|
|
20C03B51000
|
unkown
|
page read and write
|
|
|
|
7FF55A462000
|
unkown
|
page readonly
|
|
|
|
20C03B48000
|
unkown
|
page read and write
|
|
|
|
27F9000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D211FF000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF58D291000
|
unkown
|
page readonly
|
|
|
|
1D1EE380000
|
unkown
|
page read and write
|
|
|
|
7FF523E55000
|
unkown
|
page readonly
|
|
|
|
7FF5B8516000
|
unkown
|
page readonly
|
|
|
|
B0CA5DC000
|
unkown
|
page read and write
|
|
|
|
7FF5B5DAD000
|
unkown
|
page readonly
|
|
|
|
2FA017A000
|
unkown
|
page read and write
|
|
|
|
7FF59FC15000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF578A9E000
|
unkown
|
page readonly
|
|
|
|
28E0000
|
unkown
|
page read and write
|
|
|
|
7FF57AC79000
|
unkown
|
page readonly
|
|
|
|
22C3CE3F000
|
unkown
|
page read and write
|
|
|
|
20C03B51000
|
unkown
|
page read and write
|
|
|
|
26F0000
|
unkown
|
page readonly
|
|
|
|
22C3ECE0000
|
heap private
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EE3EA000
|
unkown
|
page read and write
|
|
|
|
1D1EE3B4000
|
unkown
|
page read and write
|
|
|
|
20C03B8A000
|
unkown
|
page read and write
|
|
|
|
7FF59FDC4000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1D1EC200000
|
unkown
|
page read and write
|
|
|
|
20C038C0000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EE0B0000
|
heap private
|
page read and write
|
|
|
|
7FF5242AF000
|
unkown
|
page readonly
|
|
|
|
1D1EC2E8000
|
unkown
|
page read and write
|
|
|
|
7FF57C3F4000
|
unkown
|
page readonly
|
|
|
|
1D1EC1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D8F000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D84000
|
unkown
|
page readonly
|
|
|
|
20C04002000
|
unkown
|
page read and write
|
|
|
|
7FF5B84D8000
|
unkown
|
page readonly
|
|
|
|
7FF518D0A000
|
unkown
|
page readonly
|
|
|
|
7FF59FCF8000
|
unkown
|
page readonly
|
|
|
|
7FF5BBAA5000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF59FE1C000
|
unkown
|
page readonly
|
|
|
|
22C85560000
|
unkown
|
page write copy
|
|
|
|
131DF4A0000
|
heap default
|
page read and write
|
|
|
|
20C03B57000
|
unkown
|
page read and write
|
|
|
|
20C0323C000
|
unkown
|
page read and write
|
|
|
|
209B000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22C3ECC0000
|
unkown
|
page read and write
|
|
|
|
131DF681000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
1D1EE326000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
1E04BC00000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
20C0320B000
|
unkown
|
page read and write
|
|
|
|
7FF518983000
|
unkown
|
page readonly
|
|
|
|
20C038E0000
|
unkown
|
page readonly
|
|
|
|
DBB07E000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF578A5C000
|
unkown
|
page readonly
|
|
|
|
3AC9779000
|
unkown
|
page read and write
|
|
|
|
2239D210000
|
unkown
|
page readonly
|
|
|
|
20498B40000
|
heap default
|
page read and write
|
|
|
|
7FF5787F6000
|
unkown
|
page readonly
|
|
|
|
7FF55A39F000
|
unkown
|
page readonly
|
|
|
|
7FF5BBA46000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5787EB000
|
unkown
|
page readonly
|
|
|
|
131DF675000
|
unkown
|
page read and write
|
|
|
|
1D1EC2EB000
|
unkown
|
page read and write
|
|
|
|
7FF5B8511000
|
unkown
|
page readonly
|
|
|
|
7FF519114000
|
unkown
|
page readonly
|
|
|
|
1D1EC140000
|
heap default
|
page read and write
|
|
|
|
131E1400000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
22C3CD70000
|
heap default
|
page read and write
|
|
|
|
131DF700000
|
unkown
|
page read and write
|
|
|
|
131E171A000
|
unkown
|
page read and write
|
|
|
|
1D1EE702000
|
unkown
|
page read and write
|
|
|
|
7FF578A04000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
22C3EF00000
|
unkown
|
page read and write
|
|
|
|
20C032D1000
|
unkown
|
page read and write
|
|
|
|
7FF57C31C000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
28EF000
|
unkown
|
page read and write
|
|
|
|
7FF58D418000
|
unkown
|
page readonly
|
|
|
|
2A0BC800000
|
unkown
|
page read and write
|
|
|
|
7FF5785F6000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
4CD9D5B000
|
unkown
|
page read and write
|
|
|
|
7FF58D1D1000
|
unkown
|
page readonly
|
|
|
|
7FF578AA6000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
20C03B31000
|
unkown
|
page read and write
|
|
|
|
28AE000
|
unkown
|
page read and write
|
|
|
|
7FF57BF70000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
F5AD47F000
|
unkown
|
page read and write
|
|
|
|
42DA000
|
unkown
|
page read and write
|
|
|
|
7FF59595E000
|
unkown
|
page readonly
|
|
|
|
7FF5B849E000
|
unkown
|
page readonly
|
|
|
|
7FF5BBCC4000
|
unkown
|
page readonly
|
|
|
|
4C5E000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2239D413000
|
unkown
|
page read and write
|
|
|
|
7FF524372000
|
unkown
|
page readonly
|
|
|
|
20C03B84000
|
unkown
|
page read and write
|
|
|
|
20C03B3A000
|
unkown
|
page read and write
|
|
|
|
20C03B55000
|
unkown
|
page read and write
|
|
|
|
7FF519068000
|
unkown
|
page readonly
|
|
|
|
2239D468000
|
unkown
|
page read and write
|
|
|
|
2C2FA4D0000
|
heap default
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2A0BC82A000
|
unkown
|
page read and write
|
|
|
|
1E04BA69000
|
unkown
|
page read and write
|
|
|
|
7FF59562A000
|
unkown
|
page readonly
|
|
|
|
7FF59595A000
|
unkown
|
page readonly
|
|
|
|
425E000
|
unkown
|
page read and write
|
|
|
|
DBB379000
|
unkown
|
page read and write
|
|
|
|
20C03B8B000
|
unkown
|
page read and write
|
|
|
|
7FF5B65C6000
|
unkown
|
page readonly
|
|
|
|
22C3CD80000
|
unkown
|
page write copy
|
|
|
|
2C2FA800000
|
unkown
|
page readonly
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
7FF5B849A000
|
unkown
|
page readonly
|
|
|
|
7FF5B630B000
|
unkown
|
page readonly
|
|
|
|
7FF5B621F000
|
unkown
|
page readonly
|
|
|
|
A83DBFD000
|
unkown
|
page read and write
|
|
|
|
38A26FF000
|
unkown
|
page read and write
|
|
|
|
20C03B55000
|
unkown
|
page read and write
|
|
|
|
18C7B49F000
|
unkown
|
page read and write
|
|
|
|
20C04002000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
7FF5E3E0E000
|
unkown
|
page readonly
|
|
|
|
7FF5B83A8000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D4C000
|
unkown
|
page readonly
|
|
|
|
7FF55A3A7000
|
unkown
|
page readonly
|
|
|
|
D8E1B77000
|
unkown
|
page read and write
|
|
|
|
1D1EE3F4000
|
unkown
|
page read and write
|
|
|
|
2A0BC902000
|
unkown
|
page read and write
|
|
|
|
20C03400000
|
unkown
|
page readonly
|
|
|
|
131DF613000
|
unkown
|
page read and write
|
|
|
|
7FF57AA41000
|
unkown
|
page readonly
|
|
|
|
7FF57C303000
|
unkown
|
page readonly
|
|
|
|
131E170A000
|
unkown
|
page read and write
|
|
There are 1904 hidden memdumps, click here to show them.