Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
DEMLwnv0Nt.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$DEMLwnv0Nt.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\AA310D15-039E-4B86-9827-EDEE6B2EFE37
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\40EEFE67.png
|
PNG image data, 246 x 108, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5D8EF53C.png
|
PNG image data, 934 x 29, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A8D45C0D.png
|
PNG image data, 490 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\EC9CD47E.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\EE1210F0.png
|
PNG image data, 521 x 246, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F11A7C31.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\96C40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\werty1.dll
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\werty2.dll
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
dreamhimalayan.com
|
192.185.113.120
|
|
|
|
forfacks.com
|
192.185.48.167
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.48.167
|
forfacks.com
|
United States
|
|
|
|
192.185.113.120
|
dreamhimalayan.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
}'
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
~'
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B8AE
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C272
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C4D4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C5CE
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C6F7
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
a;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 52 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
1F18B28A000
|
unkown
|
page read and write
|
|
|
|
21168B52000
|
unkown
|
page read and write
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
21168B56000
|
unkown
|
page read and write
|
|
|
|
7FF51A14A000
|
unkown
|
page readonly
|
|
|
|
7FF5C9934000
|
unkown
|
page readonly
|
|
|
|
2AF9000
|
unkown
|
page readonly
|
|
|
|
7FF5C9ABA000
|
unkown
|
page readonly
|
|
|
|
1C538490000
|
unkown
|
page readonly
|
|
|
|
243C3513000
|
unkown
|
page read and write
|
|
|
|
2CF61A00000
|
unkown
|
page readonly
|
|
|
|
6169B7F000
|
unkown
|
page read and write
|
|
|
|
7FF50FDA3000
|
unkown
|
page readonly
|
|
|
|
21169102000
|
unkown
|
page read and write
|
|
|
|
7FF5073A4000
|
unkown
|
page readonly
|
|
|
|
7FF50EF4F000
|
unkown
|
page readonly
|
|
|
|
21168B5B000
|
unkown
|
page read and write
|
|
|
|
7FF50FECC000
|
unkown
|
page readonly
|
|
|
|
7FF53A7A1000
|
unkown
|
page readonly
|
|
|
|
7FF5C95A5000
|
unkown
|
page readonly
|
|
|
|
21168B32000
|
unkown
|
page read and write
|
|
|
|
1FAC7D9D000
|
unkown
|
page read and write
|
|
|
|
7FF5993DD000
|
unkown
|
page readonly
|
|
|
|
2ECC000
|
unkown
|
page read and write
|
|
|
|
7FF507163000
|
unkown
|
page readonly
|
|
|
|
7FF50A061000
|
unkown
|
page readonly
|
|
|
|
439387A000
|
unkown
|
page read and write
|
|
|
|
14C99200000
|
unkown
|
page read and write
|
|
|
|
1001F9000
|
unkown
|
page read and write
|
|
|
|
F5D63FA000
|
unkown
|
page read and write
|
|
|
|
1FAC5DE0000
|
unkown
|
page readonly
|
|
|
|
7FF50FF19000
|
unkown
|
page readonly
|
|
|
|
9F4D67E000
|
unkown
|
page read and write
|
|
|
|
2769000
|
unkown
|
page readonly
|
|
|
|
7FF50FEB7000
|
unkown
|
page readonly
|
|
|
|
211682AA000
|
unkown
|
page read and write
|
|
|
|
F9ED59D000
|
unkown
|
page read and write
|
|
|
|
1FAC5D90000
|
heap private
|
page read and write
|
|
|
|
1C5385DC000
|
unkown
|
page read and write
|
|
|
|
2CF6104F000
|
unkown
|
page read and write
|
|
|
|
7FF5C99E7000
|
unkown
|
page readonly
|
|
|
|
7FF50A054000
|
unkown
|
page readonly
|
|
|
|
7FF50FD9E000
|
unkown
|
page readonly
|
|
|
|
7FF50FA12000
|
unkown
|
page readonly
|
|
|
|
7FF50FF91000
|
unkown
|
page readonly
|
|
|
|
1FAC5EDB000
|
unkown
|
page read and write
|
|
|
|
7FF50FF08000
|
unkown
|
page readonly
|
|
|
|
2116824E000
|
unkown
|
page read and write
|
|
|
|
7FF59D9D8000
|
unkown
|
page readonly
|
|
|
|
7FF53A72A000
|
unkown
|
page readonly
|
|
|
|
1FAC80C4000
|
unkown
|
page read and write
|
|
|
|
14C99190000
|
unkown
|
page readonly
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
28BCF500000
|
unkown
|
page read and write
|
|
|
|
2F90000
|
unkown
|
page readonly
|
|
|
|
28BCF502000
|
unkown
|
page read and write
|
|
|
|
1FAC5E13000
|
unkown
|
page read and write
|
|
|
|
1FAC7D71000
|
unkown
|
page read and write
|
|
|
|
211689D0000
|
unkown
|
page readonly
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
1FAC5EFF000
|
unkown
|
page read and write
|
|
|
|
1FAC5F02000
|
unkown
|
page read and write
|
|
|
|
1C5385DC000
|
unkown
|
page read and write
|
|
|
|
7FF50FE0C000
|
unkown
|
page readonly
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
61696F8000
|
unkown
|
page read and write
|
|
|
|
7FF5C991D000
|
unkown
|
page readonly
|
|
|
|
F5D67FB000
|
unkown
|
page read and write
|
|
|
|
14C9ABA0000
|
unkown
|
page read and write
|
|
|
|
2B2B000
|
unkown
|
page read and write
|
|
|
|
21168B4A000
|
unkown
|
page read and write
|
|
|
|
7FF50FE7F000
|
unkown
|
page readonly
|
|
|
|
7FF53A407000
|
unkown
|
page readonly
|
|
|
|
21168316000
|
unkown
|
page read and write
|
|
|
|
1F18B160000
|
unkown
|
page readonly
|
|
|
|
1FAC9210000
|
unkown
|
page read and write
|
|
|
|
7FF5C9A4D000
|
unkown
|
page readonly
|
|
|
|
7FF599241000
|
unkown
|
page readonly
|
|
|
|
211689C0000
|
unkown
|
page readonly
|
|
|
|
7FF50FAB7000
|
unkown
|
page readonly
|
|
|
|
21168B52000
|
unkown
|
page read and write
|
|
|
|
21168B59000
|
unkown
|
page read and write
|
|
|
|
7FF59DB3E000
|
unkown
|
page readonly
|
|
|
|
2CF6108D000
|
unkown
|
page read and write
|
|
|
|
7FF599263000
|
unkown
|
page readonly
|
|
|
|
43936FE000
|
unkown
|
page read and write
|
|
|
|
7FF50EF3A000
|
unkown
|
page readonly
|
|
|
|
B1EF37F000
|
unkown
|
page read and write
|
|
|
|
1C5385A0000
|
heap default
|
page read and write
|
|
|
|
2760000
|
unkown
|
page readonly
|
|
|
|
7FF59DBC1000
|
unkown
|
page readonly
|
|
|
|
7FF51A15B000
|
unkown
|
page readonly
|
|
|
|
8CD8DFA000
|
unkown
|
page read and write
|
|
|
|
F5D68FA000
|
unkown
|
page read and write
|
|
|
|
19F88C13000
|
unkown
|
page read and write
|
|
|
|
1F18BF40000
|
unkown
|
page readonly
|
|
|
|
7FF50FE74000
|
unkown
|
page readonly
|
|
|
|
28BCF43C000
|
unkown
|
page read and write
|
|
|
|
2409000
|
unkown
|
page readonly
|
|
|
|
21168B00000
|
unkown
|
page read and write
|
|
|
|
7FF59D79A000
|
unkown
|
page readonly
|
|
|
|
1FAC5F19000
|
unkown
|
page read and write
|
|
|
|
2BE4000
|
unkown
|
page readonly
|
|
|
|
7FF599181000
|
unkown
|
page readonly
|
|
|
|
1FAC5EBA000
|
unkown
|
page read and write
|
|
|
|
7FF59DA93000
|
unkown
|
page readonly
|
|
|
|
21168313000
|
unkown
|
page read and write
|
|
|
|
243C346B000
|
unkown
|
page read and write
|
|
|
|
F5D65FB000
|
unkown
|
page read and write
|
|
|
|
19F88B40000
|
heap private
|
page read and write
|
|
|
|
7FF50FEAB000
|
unkown
|
page readonly
|
|
|
|
7FF50EFE1000
|
unkown
|
page readonly
|
|
|
|
21168B90000
|
unkown
|
page read and write
|
|
|
|
1FAC8012000
|
unkown
|
page read and write
|
|
|
|
7FF59DAAF000
|
unkown
|
page readonly
|
|
|
|
1FAC7D7A000
|
unkown
|
page read and write
|
|
|
|
7FF59D8A8000
|
unkown
|
page readonly
|
|
|
|
7FF59D6A9000
|
unkown
|
page readonly
|
|
|
|
1FAC7DD8000
|
unkown
|
page read and write
|
|
|
|
243C346B000
|
unkown
|
page read and write
|
|
|
|
2B6F000
|
unkown
|
page readonly
|
|
|
|
2EA0000
|
heap default
|
page read and write
|
|
|
|
1F18B4D0000
|
unkown
|
page readonly
|
|
|
|
1FAC8063000
|
unkown
|
page read and write
|
|
|
|
1FAC5EBF000
|
unkown
|
page read and write
|
|
|
|
243C346E000
|
unkown
|
page read and write
|
|
|
|
1FAC5D30000
|
unkown
|
page readonly
|
|
|
|
1F18B302000
|
unkown
|
page read and write
|
|
|
|
7FF53A784000
|
unkown
|
page readonly
|
|
|
|
7FF5993BE000
|
unkown
|
page readonly
|
|
|
|
3360000
|
heap default
|
page read and write
|
|
|
|
1FAC5E80000
|
unkown
|
page read and write
|
|
|
|
7FF59DABC000
|
unkown
|
page readonly
|
|
|
|
7FF50F6C8000
|
unkown
|
page readonly
|
|
|
|
14C99060000
|
heap default
|
page read and write
|
|
|
|
21168B5C000
|
unkown
|
page read and write
|
|
|
|
7FF51A14E000
|
unkown
|
page readonly
|
|
|
|
10017E000
|
unkown
|
page read and write
|
|
|
|
1FAC7D17000
|
unkown
|
page read and write
|
|
|
|
21168B45000
|
unkown
|
page read and write
|
|
|
|
7FF507336000
|
unkown
|
page readonly
|
|
|
|
2818000
|
unkown
|
page readonly
|
|
|
|
7FF50720D000
|
unkown
|
page readonly
|
|
|
|
7FF50EFD4000
|
unkown
|
page readonly
|
|
|
|
7FF5C9821000
|
unkown
|
page readonly
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
7FF59D8F5000
|
unkown
|
page readonly
|
|
|
|
1C538560000
|
unkown
|
page read and write
|
|
|
|
21169200000
|
unkown
|
page readonly
|
|
|
|
F9EDB77000
|
unkown
|
page read and write
|
|
|
|
F5D6AFB000
|
unkown
|
page read and write
|
|
|
|
21168250000
|
unkown
|
page read and write
|
|
|
|
211689D0000
|
unkown
|
page read and write
|
|
|
|
7FF599268000
|
unkown
|
page readonly
|
|
|
|
211682EC000
|
unkown
|
page read and write
|
|
|
|
7FF5C99BC000
|
unkown
|
page readonly
|
|
|
|
7FF5C9AB4000
|
unkown
|
page readonly
|
|
|
|
2777000
|
unkown
|
page readonly
|
|
|
|
21168150000
|
heap private
|
page read and write
|
|
|
|
7FF59901C000
|
unkown
|
page readonly
|
|
|
|
2CF61046000
|
unkown
|
page read and write
|
|
|
|
7FF50FA0E000
|
unkown
|
page readonly
|
|
|
|
43937FF000
|
unkown
|
page read and write
|
|
|
|
7FF59D78C000
|
unkown
|
page readonly
|
|
|
|
7FF53A7A9000
|
unkown
|
page readonly
|
|
|
|
1FAC5F3B000
|
unkown
|
page read and write
|
|
|
|
7FF59D904000
|
unkown
|
page readonly
|
|
|
|
7FF507213000
|
unkown
|
page readonly
|
|
|
|
3091000
|
heap default
|
page read and write
|
|
|
|
7FF53A551000
|
unkown
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page readonly
|
|
|
|
2CF61802000
|
unkown
|
page read and write
|
|
|
|
7FF59D32D000
|
unkown
|
page readonly
|
|
|
|
1F18B300000
|
unkown
|
page read and write
|
|
|
|
21168C00000
|
unkown
|
page readonly
|
|
|
|
2B5D000
|
unkown
|
page readonly
|
|
|
|
1FAC5F13000
|
unkown
|
page read and write
|
|
|
|
1C5385DE000
|
unkown
|
page read and write
|
|
|
|
1FAC8202000
|
unkown
|
page read and write
|
|
|
|
2753000
|
unkown
|
page readonly
|
|
|
|
21168B50000
|
unkown
|
page read and write
|
|
|
|
7FF53A75C000
|
unkown
|
page readonly
|
|
|
|
8CD8D79000
|
unkown
|
page read and write
|
|
|
|
7FF5993A4000
|
unkown
|
page readonly
|
|
|
|
1F18BC00000
|
unkown
|
page readonly
|
|
|
|
2BB0000
|
unkown
|
page readonly
|
|
|
|
7FF5C974F000
|
unkown
|
page readonly
|
|
|
|
2CF61000000
|
unkown
|
page read and write
|
|
|
|
7FF50FDA8000
|
unkown
|
page readonly
|
|
|
|
21168B90000
|
unkown
|
page read and write
|
|
|
|
7FF50FC17000
|
unkown
|
page readonly
|
|
|
|
2CF61013000
|
unkown
|
page read and write
|
|
|
|
7FF50EDEE000
|
unkown
|
page readonly
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
7FF50EEF5000
|
unkown
|
page readonly
|
|
|
|
7FF51A17C000
|
unkown
|
page readonly
|
|
|
|
439377A000
|
unkown
|
page read and write
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
243C346B000
|
unkown
|
page read and write
|
|
|
|
7FF50FCA0000
|
unkown
|
page readonly
|
|
|
|
243C33A0000
|
unkown
|
page readonly
|
|
|
|
35D0000
|
unkown
|
page readonly
|
|
|
|
21168B76000
|
unkown
|
page read and write
|
|
|
|
1FAC7D00000
|
unkown
|
page read and write
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
21168BCA000
|
unkown
|
page read and write
|
|
|
|
7FF51A234000
|
unkown
|
page readonly
|
|
|
|
7FF519E27000
|
unkown
|
page readonly
|
|
|
|
2CF61052000
|
unkown
|
page read and write
|
|
|
|
F5D66FD000
|
unkown
|
page read and write
|
|
|
|
7FF51A17F000
|
unkown
|
page readonly
|
|
|
|
1FAC5EFF000
|
unkown
|
page read and write
|
|
|
|
F5D637A000
|
unkown
|
page read and write
|
|
|
|
7FF5072AC000
|
unkown
|
page readonly
|
|
|
|
B1EF177000
|
unkown
|
page read and write
|
|
|
|
243C346E000
|
unkown
|
page read and write
|
|
|
|
7FF50FD43000
|
unkown
|
page readonly
|
|
|
|
243C3429000
|
unkown
|
page read and write
|
|
|
|
1F18B23C000
|
unkown
|
page read and write
|
|
|
|
14C99202000
|
unkown
|
page read and write
|
|
|
|
1FAC5ECA000
|
unkown
|
page read and write
|
|
|
|
28BCF455000
|
unkown
|
page read and write
|
|
|
|
1FAC9000000
|
unkown
|
page read and write
|
|
|
|
1004FE000
|
unkown
|
page read and write
|
|
|
|
8F2D07E000
|
unkown
|
page read and write
|
|
|
|
7FF50FC1F000
|
unkown
|
page readonly
|
|
|
|
2783000
|
unkown
|
page readonly
|
|
|
|
1FAC5F02000
|
unkown
|
page read and write
|
|
|
|
2CF61100000
|
unkown
|
page read and write
|
|
|
|
2AEC000
|
unkown
|
page read and write
|
|
|
|
243C3402000
|
unkown
|
page read and write
|
|
|
|
7FF50EF69000
|
unkown
|
page readonly
|
|
|
|
28BCF250000
|
heap default
|
page read and write
|
|
|
|
1FAC7DB4000
|
unkown
|
page read and write
|
|
|
|
7FF59D9B1000
|
unkown
|
page readonly
|
|
|
|
7FF506AE8000
|
unkown
|
page readonly
|
|
|
|
6169978000
|
unkown
|
page read and write
|
|
|
|
7FF51A0F2000
|
unkown
|
page readonly
|
|
|
|
7FF59DACA000
|
unkown
|
page readonly
|
|
|
|
21168B45000
|
unkown
|
page read and write
|
|
|
|
1FAC5EF1000
|
unkown
|
page read and write
|
|
|
|
7FF5C9596000
|
unkown
|
page readonly
|
|
|
|
1FAC5D70000
|
unkown
|
page read and write
|
|
|
|
1C5385B2000
|
unkown
|
page read and write
|
|
|
|
21168B38000
|
unkown
|
page read and write
|
|
|
|
2F0B000
|
unkown
|
page read and write
|
|
|
|
211689F0000
|
unkown
|
page readonly
|
|
|
|
7FF5C99D0000
|
unkown
|
page readonly
|
|
|
|
34D0000
|
heap default
|
page read and write
|
|
|
|
7FF509FA8000
|
unkown
|
page readonly
|
|
|
|
7FF50FE6F000
|
unkown
|
page readonly
|
|
|
|
7FF59DA9B000
|
unkown
|
page readonly
|
|
|
|
7FF53A638000
|
unkown
|
page readonly
|
|
|
|
2723000
|
unkown
|
page readonly
|
|
|
|
21168B76000
|
unkown
|
page read and write
|
|
|
|
21168B53000
|
unkown
|
page read and write
|
|
|
|
7FF519E1A000
|
unkown
|
page readonly
|
|
|
|
1FAC7E30000
|
unkown
|
page readonly
|
|
|
|
28BCFC02000
|
unkown
|
page read and write
|
|
|
|
211689D0000
|
unkown
|
page read and write
|
|
|
|
28BCF260000
|
unkown
|
page readonly
|
|
|
|
1FAC6000000
|
unkown
|
page readonly
|
|
|
|
7FF5072EC000
|
unkown
|
page readonly
|
|
|
|
7FF50703F000
|
unkown
|
page readonly
|
|
|
|
7FF59D921000
|
unkown
|
page readonly
|
|
|
|
2B5F000
|
unkown
|
page readonly
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
211684D0000
|
unkown
|
page readonly
|
|
|
|
7FF53A4F6000
|
unkown
|
page readonly
|
|
|
|
19F88BB0000
|
unkown
|
page write copy
|
|
|
|
7FF5C99D5000
|
unkown
|
page readonly
|
|
|
|
21168B39000
|
unkown
|
page read and write
|
|
|
|
8F2D57E000
|
unkown
|
page read and write
|
|
|
|
21168B90000
|
unkown
|
page read and write
|
|
|
|
7FF599444000
|
unkown
|
page readonly
|
|
|
|
14C99254000
|
unkown
|
page read and write
|
|
|
|
7FF5071BE000
|
unkown
|
page readonly
|
|
|
|
14C9ACA0000
|
unkown
|
page readonly
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
7FF5993B4000
|
unkown
|
page readonly
|
|
|
|
2BF8000
|
unkown
|
page readonly
|
|
|
|
7FF5C9A2F000
|
unkown
|
page readonly
|
|
|
|
7FF519FA9000
|
unkown
|
page readonly
|
|
|
|
1F18B250000
|
unkown
|
page read and write
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
243C346B000
|
unkown
|
page read and write
|
|
|
|
21168B45000
|
unkown
|
page read and write
|
|
|
|
F9EDC7F000
|
unkown
|
page read and write
|
|
|
|
2812000
|
unkown
|
page readonly
|
|
|
|
7FF59911B000
|
unkown
|
page readonly
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
21168B88000
|
unkown
|
page read and write
|
|
|
|
211682BC000
|
unkown
|
page read and write
|
|
|
|
7FF50FE9E000
|
unkown
|
page readonly
|
|
|
|
B1EF27F000
|
unkown
|
page read and write
|
|
|
|
243C3500000
|
unkown
|
page read and write
|
|
|
|
F5D6779000
|
unkown
|
page read and write
|
|
|
|
7FF50FF16000
|
unkown
|
page readonly
|
|
|
|
7FF509F9F000
|
unkown
|
page readonly
|
|
|
|
7FF53A77A000
|
unkown
|
page readonly
|
|
|
|
1FAC8182000
|
unkown
|
page read and write
|
|
|
|
21168B75000
|
unkown
|
page read and write
|
|
|
|
7FF5C9A14000
|
unkown
|
page readonly
|
|
|
|
21168B32000
|
unkown
|
page read and write
|
|
|
|
211689E0000
|
unkown
|
page read and write
|
|
|
|
2CF60FF0000
|
unkown
|
page read and write
|
|
|
|
2CF61102000
|
unkown
|
page read and write
|
|
|
|
1FAC7DF0000
|
unkown
|
page read and write
|
|
|
|
7FF50A062000
|
unkown
|
page readonly
|
|
|
|
21168B75000
|
unkown
|
page read and write
|
|
|
|
7FF5C98B1000
|
unkown
|
page readonly
|
|
|
|
7FF509FE9000
|
unkown
|
page readonly
|
|
|
|
28BCF600000
|
unkown
|
page readonly
|
|
|
|
7FF5C9923000
|
unkown
|
page readonly
|
|
|
|
28BCF330000
|
unkown
|
page readonly
|
|
|
|
7FF5073AA000
|
unkown
|
page readonly
|
|
|
|
1FAC7BE0000
|
unkown
|
page read and write
|
|
|
|
7FF59DBC2000
|
unkown
|
page readonly
|
|
|
|
7FF59DAD0000
|
unkown
|
page readonly
|
|
|
|
2CF6103C000
|
unkown
|
page read and write
|
|
|
|
7FF5993C8000
|
unkown
|
page readonly
|
|
|
|
8F2D47F000
|
unkown
|
page read and write
|
|
|
|
1FAC5E55000
|
unkown
|
page read and write
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
7FF50FB7A000
|
unkown
|
page readonly
|
|
|
|
7FF506E86000
|
unkown
|
page readonly
|
|
|
|
7FF59DADB000
|
unkown
|
page readonly
|
|
|
|
1FAC7D9B000
|
unkown
|
page read and write
|
|
|
|
21168B85000
|
unkown
|
page read and write
|
|
|
|
7FF51A053000
|
unkown
|
page readonly
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
7FF5C9A07000
|
unkown
|
page readonly
|
|
|
|
21168B45000
|
unkown
|
page read and write
|
|
|
|
7FF5072D7000
|
unkown
|
page readonly
|
|
|
|
7FF59DB24000
|
unkown
|
page readonly
|
|
|
|
7FF51A1A4000
|
unkown
|
page readonly
|
|
|
|
1FAC9110000
|
unkown
|
page read and write
|
|
|
|
F5D697A000
|
unkown
|
page read and write
|
|
|
|
1FAC5EFF000
|
unkown
|
page read and write
|
|
|
|
7FF509FCE000
|
unkown
|
page readonly
|
|
|
|
19F88D00000
|
unkown
|
page read and write
|
|
|
|
278F000
|
unkown
|
page readonly
|
|
|
|
9F4D35B000
|
unkown
|
page read and write
|
|
|
|
1FAC5F5C000
|
unkown
|
page read and write
|
|
|
|
7FF509FC4000
|
unkown
|
page readonly
|
|
|
|
616987D000
|
unkown
|
page read and write
|
|
|
|
7FF59DB38000
|
unkown
|
page readonly
|
|
|
|
7FF50FEFF000
|
unkown
|
page readonly
|
|
|
|
21168B76000
|
unkown
|
page read and write
|
|
|
|
1C538785000
|
heap private
|
page read and write
|
|
|
|
7FF50F7A1000
|
unkown
|
page readonly
|
|
|
|
7FF507328000
|
unkown
|
page readonly
|
|
|
|
243C346B000
|
unkown
|
page read and write
|
|
|
|
7FF507224000
|
unkown
|
page readonly
|
|
|
|
28BCF400000
|
unkown
|
page read and write
|
|
|
|
7FF50EEEE000
|
unkown
|
page readonly
|
|
|
|
7FF50FEEA000
|
unkown
|
page readonly
|
|
|
|
1FAC8084000
|
unkown
|
page read and write
|
|
|
|
211682E3000
|
unkown
|
page read and write
|
|
|
|
7FF506E80000
|
unkown
|
page readonly
|
|
|
|
7FF5C9A3E000
|
unkown
|
page readonly
|
|
|
|
9F4D8FD000
|
unkown
|
page read and write
|
|
|
|
9F4D3DE000
|
unkown
|
page read and write
|
|
|
|
1FAC7DF9000
|
unkown
|
page read and write
|
|
|
|
28BCF450000
|
unkown
|
page read and write
|
|
|
|
2823000
|
unkown
|
page readonly
|
|
|
|
28BCF485000
|
unkown
|
page read and write
|
|
|
|
275C000
|
unkown
|
page readonly
|
|
|
|
F5D687B000
|
unkown
|
page read and write
|
|
|
|
61693F7000
|
unkown
|
page read and write
|
|
|
|
7FF50FD9B000
|
unkown
|
page readonly
|
|
|
|
211682C3000
|
unkown
|
page read and write
|
|
|
|
7FF507339000
|
unkown
|
page readonly
|
|
|
|
211681C0000
|
unkown
|
page readonly
|
|
|
|
2804000
|
unkown
|
page readonly
|
|
|
|
B1EEFFB000
|
unkown
|
page read and write
|
|
|
|
F9ED9FB000
|
unkown
|
page read and write
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
14C99070000
|
unkown
|
page readonly
|
|
|
|
1F18B28E000
|
unkown
|
page read and write
|
|
|
|
28BCF46C000
|
unkown
|
page read and write
|
|
|
|
7FF5C9590000
|
unkown
|
page readonly
|
|
|
|
243C3210000
|
heap private
|
page read and write
|
|
|
|
7FF51A1C1000
|
unkown
|
page readonly
|
|
|
|
7FF5C99CA000
|
unkown
|
page readonly
|
|
|
|
7FF509F70000
|
unkown
|
page readonly
|
|
|
|
307A000
|
heap default
|
page read and write
|
|
|
|
7FF51A1C6000
|
unkown
|
page readonly
|
|
|
|
2CF6104B000
|
unkown
|
page read and write
|
|
|
|
28BCF350000
|
unkown
|
page read and write
|
|
|
|
1FAC5DF0000
|
unkown
|
page read and write
|
|
|
|
7FF50FEA0000
|
unkown
|
page readonly
|
|
|
|
3080000
|
unkown
|
page read and write
|
|
|
|
1F18B26F000
|
unkown
|
page read and write
|
|
|
|
2116828A000
|
unkown
|
page read and write
|
|
|
|
7FF509FED000
|
unkown
|
page readonly
|
|
|
|
21168B75000
|
unkown
|
page read and write
|
|
|
|
7FF599302000
|
unkown
|
page readonly
|
|
|
|
F5D6BFC000
|
unkown
|
page read and write
|
|
|
|
28BCF340000
|
unkown
|
page readonly
|
|
|
|
1F18B313000
|
unkown
|
page read and write
|
|
|
|
21168B45000
|
unkown
|
page read and write
|
|
|
|
21168B50000
|
unkown
|
page read and write
|
|
|
|
21168B75000
|
unkown
|
page read and write
|
|
|
|
2B3C000
|
unkown
|
page readonly
|
|
|
|
278A000
|
unkown
|
page readonly
|
|
|
|
7FF53A78E000
|
unkown
|
page readonly
|
|
|
|
27A2000
|
unkown
|
page readonly
|
|
|
|
7FF59D929000
|
unkown
|
page readonly
|
|
|
|
7FF59925B000
|
unkown
|
page readonly
|
|
|
|
3730000
|
heap private
|
page read and write
|
|
|
|
1F18B202000
|
unkown
|
page read and write
|
|
|
|
14C99240000
|
unkown
|
page read and write
|
|
|
|
243C3280000
|
unkown
|
page readonly
|
|
|
|
21168B85000
|
unkown
|
page read and write
|
|
|
|
1FAC7D35000
|
unkown
|
page read and write
|
|
|
|
3070000
|
heap default
|
page read and write
|
|
|
|
2A30000
|
unkown
|
page readonly
|
|
|
|
7FF509FBA000
|
unkown
|
page readonly
|
|
|
|
7FF5072CB000
|
unkown
|
page readonly
|
|
|
|
7FF50EC67000
|
unkown
|
page readonly
|
|
|
|
21168B75000
|
unkown
|
page read and write
|
|
|
|
7FF5993D1000
|
unkown
|
page readonly
|
|
|
|
7FF53A730000
|
unkown
|
page readonly
|
|
|
|
21168B62000
|
unkown
|
page read and write
|
|
|
|
7FF59DACE000
|
unkown
|
page readonly
|
|
|
|
2CF61113000
|
unkown
|
page read and write
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
243C346E000
|
unkown
|
page read and write
|
|
|
|
7FF51A242000
|
unkown
|
page readonly
|
|
|
|
28BCF513000
|
unkown
|
page read and write
|
|
|
|
7FF51A031000
|
unkown
|
page readonly
|
|
|
|
7FF50EDEB000
|
unkown
|
page readonly
|
|
|
|
21168271000
|
unkown
|
page read and write
|
|
|
|
7FF50EF34000
|
unkown
|
page readonly
|
|
|
|
2B49000
|
unkown
|
page readonly
|
|
|
|
1FAC7BF0000
|
unkown
|
page read and write
|
|
|
|
7FF53A79E000
|
unkown
|
page readonly
|
|
|
|
21168B85000
|
unkown
|
page read and write
|
|
|
|
7FF5C993C000
|
unkown
|
page readonly
|
|
|
|
7FF5993AA000
|
unkown
|
page readonly
|
|
|
|
14C99000000
|
heap private
|
page read and write
|
|
|
|
7FF59938C000
|
unkown
|
page readonly
|
|
|
|
2B0A000
|
unkown
|
page readonly
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
7FF53A821000
|
unkown
|
page readonly
|
|
|
|
7FF53A814000
|
unkown
|
page readonly
|
|
|
|
28BCF413000
|
unkown
|
page read and write
|
|
|
|
272A000
|
unkown
|
page readonly
|
|
|
|
34DA000
|
heap default
|
page read and write
|
|
|
|
1FAC5E29000
|
unkown
|
page read and write
|
|
|
|
1FAC7E20000
|
unkown
|
page readonly
|
|
|
|
7FF59DBBA000
|
unkown
|
page readonly
|
|
|
|
21168B75000
|
unkown
|
page read and write
|
|
|
|
21168400000
|
unkown
|
page readonly
|
|
|
|
2116823C000
|
unkown
|
page read and write
|
|
|
|
1FAC5EFA000
|
unkown
|
page read and write
|
|
|
|
B1EEBFE000
|
unkown
|
page read and write
|
|
|
|
7FF599365000
|
unkown
|
page readonly
|
|
|
|
1FAC7D4E000
|
unkown
|
page read and write
|
|
|
|
21169002000
|
unkown
|
page read and write
|
|
|
|
7FF50FE40000
|
unkown
|
page readonly
|
|
|
|
7FF5C98CB000
|
unkown
|
page readonly
|
|
|
|
1F18B400000
|
unkown
|
page readonly
|
|
|
|
277D000
|
unkown
|
page readonly
|
|
|
|
2BD1000
|
unkown
|
page readonly
|
|
|
|
10057C000
|
unkown
|
page read and write
|
|
|
|
21168B3E000
|
unkown
|
page read and write
|
|
|
|
21168B50000
|
unkown
|
page read and write
|
|
|
|
1FAC5F3B000
|
unkown
|
page read and write
|
|
|
|
1FAC9310000
|
unkown
|
page read and write
|
|
|
|
7FF59D79F000
|
unkown
|
page readonly
|
|
|
|
7FF5C99BA000
|
unkown
|
page readonly
|
|
|
|
1FAC5BA0000
|
heap private
|
page read and write
|
|
|
|
7FF50EE3D000
|
unkown
|
page readonly
|
|
|
|
7FF50FE9A000
|
unkown
|
page readonly
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
21168B3E000
|
unkown
|
page read and write
|
|
|
|
1FAC5F5C000
|
unkown
|
page read and write
|
|
|
|
1FAC5F02000
|
unkown
|
page read and write
|
|
|
|
1FAC80D2000
|
unkown
|
page read and write
|
|
|
|
7FF50EE54000
|
unkown
|
page readonly
|
|
|
|
1FAC5F2E000
|
unkown
|
page read and write
|
|
|
|
7FF59935A000
|
unkown
|
page readonly
|
|
|
|
F5D6B7C000
|
unkown
|
page read and write
|
|
|
|
243C346B000
|
unkown
|
page read and write
|
|
|
|
243C346D000
|
unkown
|
page read and write
|
|
|
|
1FAC8102000
|
unkown
|
page read and write
|
|
|
|
1FAC9310000
|
unkown
|
page read and write
|
|
|
|
21168B76000
|
unkown
|
page read and write
|
|
|
|
211682A6000
|
unkown
|
page read and write
|
|
|
|
1FAC5EEF000
|
unkown
|
page read and write
|
|
|
|
14C99400000
|
unkown
|
page readonly
|
|
|
|
2791000
|
unkown
|
page readonly
|
|
|
|
2D8E000
|
unkown
|
page read and write
|
|
|
|
7FF50FDF3000
|
unkown
|
page readonly
|
|
|
|
7FF59DA9F000
|
unkown
|
page readonly
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
28BCF1F0000
|
heap private
|
page read and write
|
|
|
|
7FF59DAFC000
|
unkown
|
page readonly
|
|
|
|
7FF59DB41000
|
unkown
|
page readonly
|
|
|
|
7FF50EF6D000
|
unkown
|
page readonly
|
|
|
|
7FF59DAD5000
|
unkown
|
page readonly
|
|
|
|
21169002000
|
unkown
|
page read and write
|
|
|
|
243C346E000
|
unkown
|
page read and write
|
|
|
|
2116909B000
|
unkown
|
page read and write
|
|
|
|
1FAC5E74000
|
unkown
|
page read and write
|
|
|
|
21168BCA000
|
unkown
|
page read and write
|
|
|
|
1FAC5DF0000
|
unkown
|
page read and write
|
|
|
|
21168B75000
|
unkown
|
page read and write
|
|
|
|
7FF50722C000
|
unkown
|
page readonly
|
|
|
|
14C9924A000
|
unkown
|
page read and write
|
|
|
|
7FF50FC66000
|
unkown
|
page readonly
|
|
|
|
211681E0000
|
unkown
|
page read and write
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
21168200000
|
unkown
|
page read and write
|
|
|
|
14C99229000
|
unkown
|
page read and write
|
|
|
|
8CD8CFF000
|
unkown
|
page read and write
|
|
|
|
7FF519F71000
|
unkown
|
page readonly
|
|
|
|
2B8B000
|
unkown
|
page readonly
|
|
|
|
61695FF000
|
unkown
|
page read and write
|
|
|
|
F5D69FB000
|
unkown
|
page read and write
|
|
|
|
21168B2A000
|
unkown
|
page read and write
|
|
|
|
243C346B000
|
unkown
|
page read and write
|
|
|
|
7FF59DBB4000
|
unkown
|
page readonly
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
9F4D7FE000
|
unkown
|
page read and write
|
|
|
|
28BCFE00000
|
unkown
|
page readonly
|
|
|
|
1FAC7C02000
|
unkown
|
page read and write
|
|
|
|
7FF53A4EB000
|
unkown
|
page readonly
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
7FF51A1B8000
|
unkown
|
page readonly
|
|
|
|
21168B85000
|
unkown
|
page read and write
|
|
|
|
7FF5C9873000
|
unkown
|
page readonly
|
|
|
|
7FF5C9747000
|
unkown
|
page readonly
|
|
|
|
7FF50EFDA000
|
unkown
|
page readonly
|
|
|
|
21168B21000
|
unkown
|
page read and write
|
|
|
|
19F8AAF0000
|
unkown
|
page read and write
|
|
|
|
7FF53A6D2000
|
unkown
|
page readonly
|
|
|
|
21168B52000
|
unkown
|
page read and write
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
7FF50EFE2000
|
unkown
|
page readonly
|
|
|
|
7FF51A155000
|
unkown
|
page readonly
|
|
|
|
27F5000
|
unkown
|
page readonly
|
|
|
|
1FAC5F1C000
|
unkown
|
page read and write
|
|
|
|
7FF50730A000
|
unkown
|
page readonly
|
|
|
|
1000FF000
|
unkown
|
page read and write
|
|
|
|
7FF59DB46000
|
unkown
|
page readonly
|
|
|
|
1FAC8200000
|
unkown
|
page read and write
|
|
|
|
1FAC5F9E000
|
unkown
|
page read and write
|
|
|
|
1C5385A7000
|
heap default
|
page read and write
|
|
|
|
7FF59DAA4000
|
unkown
|
page readonly
|
|
|
|
1FAC5F6C000
|
unkown
|
page read and write
|
|
|
|
9F4D6F9000
|
unkown
|
page read and write
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
7FF51A188000
|
unkown
|
page readonly
|
|
|
|
1FAC5F02000
|
unkown
|
page read and write
|
|
|
|
19F88C54000
|
unkown
|
page read and write
|
|
|
|
F5D667B000
|
unkown
|
page read and write
|
|
|
|
7FF5C99DB000
|
unkown
|
page readonly
|
|
|
|
3740000
|
unkown
|
page readonly
|
|
|
|
7FF599126000
|
unkown
|
page readonly
|
|
|
|
1FAC7D69000
|
unkown
|
page read and write
|
|
|
|
1FAC7D6D000
|
unkown
|
page read and write
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
14C99258000
|
unkown
|
page read and write
|
|
|
|
7FF50EAB0000
|
unkown
|
page readonly
|
|
|
|
7FF50F7F7000
|
unkown
|
page readonly
|
|
|
|
2B86000
|
unkown
|
page readonly
|
|
|
|
211689B0000
|
unkown
|
page readonly
|
|
|
|
7FF599451000
|
unkown
|
page readonly
|
|
|
|
243C3350000
|
unkown
|
page write copy
|
|
|
|
21169002000
|
unkown
|
page read and write
|
|
|
|
7FF519E1F000
|
unkown
|
page readonly
|
|
|
|
7FF59DA72000
|
unkown
|
page readonly
|
|
|
|
1FAC9510000
|
unkown
|
page read and write
|
|
|
|
243C3413000
|
unkown
|
page read and write
|
|
|
|
7FF50EF1F000
|
unkown
|
page readonly
|
|
|
|
21168B91000
|
unkown
|
page read and write
|
|
|
|
3450000
|
heap private
|
page read and write
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
243C3459000
|
unkown
|
page read and write
|
|
|
|
7FF50F7F3000
|
unkown
|
page readonly
|
|
|
|
6169A7E000
|
unkown
|
page read and write
|
|
|
|
7FF50EEF0000
|
unkown
|
page readonly
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
10047A000
|
unkown
|
page read and write
|
|
|
|
243C346E000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
1FAC5E3F000
|
unkown
|
page read and write
|
|
|
|
8F2CD4C000
|
unkown
|
page read and write
|
|
|
|
2FA0000
|
unkown
|
page readonly
|
|
|
|
7FF50FEF4000
|
unkown
|
page readonly
|
|
|
|
7FF50EEFB000
|
unkown
|
page readonly
|
|
|
|
2D8A000
|
unkown
|
page read and write
|
|
|
|
7FF5993CE000
|
unkown
|
page readonly
|
|
|
|
7FF50EEDC000
|
unkown
|
page readonly
|
|
|
|
1FAC78A0000
|
unkown
|
page readonly
|
|
|
|
7FF50FA75000
|
unkown
|
page readonly
|
|
|
|
211689D0000
|
unkown
|
page read and write
|
|
|
|
1FAC8100000
|
unkown
|
page read and write
|
|
|
|
21168B45000
|
unkown
|
page read and write
|
|
|
|
F5D6C7E000
|
unkown
|
page read and write
|
|
|
|
7FF59DB07000
|
unkown
|
page readonly
|
|
|
|
1FAC7D8C000
|
unkown
|
page read and write
|
|
|
|
7FF53A6F3000
|
unkown
|
page readonly
|
|
|
|
7FF51A1CD000
|
unkown
|
page readonly
|
|
|
|
1FAC80CA000
|
unkown
|
page read and write
|
|
|
|
1FAC5F9D000
|
unkown
|
page read and write
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
7FF5C9A1A000
|
unkown
|
page readonly
|
|
|
|
28BCFA60000
|
unkown
|
page readonly
|
|
|
|
21168302000
|
unkown
|
page read and write
|
|
|
|
1C5385DC000
|
unkown
|
page read and write
|
|
|
|
7FF53A798000
|
unkown
|
page readonly
|
|
|
|
2CF612D0000
|
unkown
|
page readonly
|
|
|
|
7FF50FAB5000
|
unkown
|
page readonly
|
|
|
|
1FAC9010000
|
unkown
|
page read and write
|
|
|
|
21168B76000
|
unkown
|
page read and write
|
|
|
|
7FF53A73B000
|
unkown
|
page readonly
|
|
|
|
1C538780000
|
heap private
|
page read and write
|
|
|
|
7FF51A150000
|
unkown
|
page readonly
|
|
|
|
27AB000
|
unkown
|
page readonly
|
|
|
|
7FF507314000
|
unkown
|
page readonly
|
|
|
|
F5D62FE000
|
unkown
|
page read and write
|
|
|
|
211681B0000
|
heap default
|
page read and write
|
|
|
|
7FF5991B9000
|
unkown
|
page readonly
|
|
|
|
243C3270000
|
heap default
|
page read and write
|
|
|
|
7FF5C9A24000
|
unkown
|
page readonly
|
|
|
|
7FF5C9A49000
|
unkown
|
page readonly
|
|
|
|
7FF51A167000
|
unkown
|
page readonly
|
|
|
|
1FAC5EC6000
|
unkown
|
page read and write
|
|
|
|
7FF59D7A7000
|
unkown
|
page readonly
|
|
|
|
21168B15000
|
unkown
|
page read and write
|
|
|
|
1FAC7D8B000
|
unkown
|
page read and write
|
|
|
|
439331B000
|
unkown
|
page read and write
|
|
|
|
7FF506E95000
|
unkown
|
page readonly
|
|
|
|
243C4DA0000
|
unkown
|
page read and write
|
|
|
|
7FF50EF44000
|
unkown
|
page readonly
|
|
|
|
211681D0000
|
unkown
|
page readonly
|
|
|
|
2650000
|
unkown
|
page readonly
|
|
|
|
F5D627E000
|
unkown
|
page read and write
|
|
|
|
2116824C000
|
unkown
|
page read and write
|
|
|
|
2B2C000
|
unkown
|
page readonly
|
|
|
|
8CD89AB000
|
unkown
|
page read and write
|
|
|
|
7FF50FF92000
|
unkown
|
page readonly
|
|
|
|
6168E8C000
|
unkown
|
page read and write
|
|
|
|
1C538790000
|
unkown
|
page readonly
|
|
|
|
27F1000
|
unkown
|
page readonly
|
|
|
|
439367B000
|
unkown
|
page read and write
|
|
|
|
7FF5C99CE000
|
unkown
|
page readonly
|
|
|
|
7FF50EF07000
|
unkown
|
page readonly
|
|
|
|
2EB0000
|
unkown
|
page readonly
|
|
|
|
7FF50FF8A000
|
unkown
|
page readonly
|
|
|
|
7FF50EEEA000
|
unkown
|
page readonly
|
|
|
|
7FF50EEDA000
|
unkown
|
page readonly
|
|
|
|
7FF50FEE4000
|
unkown
|
page readonly
|
|
|
|
19F88C02000
|
unkown
|
page read and write
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
277F000
|
unkown
|
page readonly
|
|
|
|
21168229000
|
unkown
|
page read and write
|
|
|
|
7FF50FA60000
|
unkown
|
page readonly
|
|
|
|
7FF59DB49000
|
unkown
|
page readonly
|
|
|
|
7FF59DABA000
|
unkown
|
page readonly
|
|
|
|
1FAC9210000
|
unkown
|
page read and write
|
|
|
|
19F88D13000
|
unkown
|
page read and write
|
|
|
|
243C3600000
|
unkown
|
page readonly
|
|
|
|
7FF51A19A000
|
unkown
|
page readonly
|
|
|
|
7FF50EC70000
|
unkown
|
page readonly
|
|
|
|
F9ED8F5000
|
unkown
|
page read and write
|
|
|
|
7FF59D8F1000
|
unkown
|
page readonly
|
|
|
|
7FF59944A000
|
unkown
|
page readonly
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page readonly
|
|
|
|
7FF50FE04000
|
unkown
|
page readonly
|
|
|
|
28BCF429000
|
unkown
|
page read and write
|
|
|
|
7FF50FF84000
|
unkown
|
page readonly
|
|
|
|
1FAC9310000
|
unkown
|
page read and write
|
|
|
|
1FAC7DC8000
|
unkown
|
page read and write
|
|
|
|
7FF509C4A000
|
unkown
|
page readonly
|
|
|
|
7FF50731F000
|
unkown
|
page readonly
|
|
|
|
2B82000
|
unkown
|
page readonly
|
|
|
|
F5D647F000
|
unkown
|
page read and write
|
|
|
|
7FF5C99FF000
|
unkown
|
page readonly
|
|
|
|
7FF5993D9000
|
unkown
|
page readonly
|
|
|
|
21169002000
|
unkown
|
page read and write
|
|
|
|
2116903C000
|
unkown
|
page read and write
|
|
|
|
1C5385B6000
|
heap default
|
page read and write
|
|
|
|
1FAC803A000
|
unkown
|
page read and write
|
|
|
|
19F890D0000
|
unkown
|
page readonly
|
|
|
|
1C5386B0000
|
unkown
|
page readonly
|
|
|
|
2CF61029000
|
unkown
|
page read and write
|
|
|
|
7FF50FE6B000
|
unkown
|
page readonly
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
21169054000
|
unkown
|
page read and write
|
|
|
|
1FAC5ED7000
|
unkown
|
page read and write
|
|
|
|
2116829F000
|
unkown
|
page read and write
|
|
|
|
2B55000
|
unkown
|
page readonly
|
|
|
|
1FAC7D2D000
|
unkown
|
page read and write
|
|
|
|
7FF50ED93000
|
unkown
|
page readonly
|
|
|
|
1FAC7D23000
|
unkown
|
page read and write
|
|
|
|
7FF51A113000
|
unkown
|
page readonly
|
|
|
|
1F18B22A000
|
unkown
|
page read and write
|
|
|
|
21168B4B000
|
unkown
|
page read and write
|
|
|
|
21168B76000
|
unkown
|
page read and write
|
|
|
|
7FF50EF66000
|
unkown
|
page readonly
|
|
|
|
1FAC7D9F000
|
unkown
|
page read and write
|
|
|
|
21168308000
|
unkown
|
page read and write
|
|
|
|
243C3400000
|
unkown
|
page read and write
|
|
|
|
2CF6107A000
|
unkown
|
page read and write
|
|
|
|
7FF599037000
|
unkown
|
page readonly
|
|
|
|
7FF59DA62000
|
unkown
|
page readonly
|
|
|
|
F5D64FA000
|
unkown
|
page read and write
|
|
|
|
2B71000
|
unkown
|
page readonly
|
|
|
|
F9ED49B000
|
unkown
|
page read and write
|
|
|
|
19F88BA0000
|
heap default
|
page read and write
|
|
|
|
27E9000
|
unkown
|
page readonly
|
|
|
|
7FF53A747000
|
unkown
|
page readonly
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
7FF5072BE000
|
unkown
|
page readonly
|
|
|
|
F9EDA7E000
|
unkown
|
page read and write
|
|
|
|
7FF53A735000
|
unkown
|
page readonly
|
|
|
|
1FAC8000000
|
unkown
|
page read and write
|
|
|
|
7FF509FDE000
|
unkown
|
page readonly
|
|
|
|
8CD8E7F000
|
unkown
|
page read and write
|
|
|
|
1FAC9110000
|
unkown
|
page read and write
|
|
|
|
7FF51A1AE000
|
unkown
|
page readonly
|
|
|
|
7FF53A768000
|
unkown
|
page readonly
|
|
|
|
21168B75000
|
unkown
|
page read and write
|
|
|
|
8F2D377000
|
unkown
|
page read and write
|
|
|
|
F5D657A000
|
unkown
|
page read and write
|
|
|
|
7FF59938F000
|
unkown
|
page readonly
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
2AFC000
|
unkown
|
page readonly
|
|
|
|
616977E000
|
unkown
|
page read and write
|
|
|
|
7FF53A555000
|
unkown
|
page readonly
|
|
|
|
7FF53A3FF000
|
unkown
|
page readonly
|
|
|
|
7FF50FCE1000
|
unkown
|
page readonly
|
|
|
|
7FF50FDED000
|
unkown
|
page readonly
|
|
|
|
2CF60FD0000
|
unkown
|
page readonly
|
|
|
|
1FAC8282000
|
unkown
|
page read and write
|
|
|
|
211682EA000
|
unkown
|
page read and write
|
|
|
|
27A6000
|
unkown
|
page readonly
|
|
|
|
7FF53A7AD000
|
unkown
|
page readonly
|
|
|
|
4910000
|
unkown
|
page readonly
|
|
|
|
1FAC7DCB000
|
unkown
|
page read and write
|
|
|
|
21168B57000
|
unkown
|
page read and write
|
|
|
|
1FAC5CE0000
|
unkown
|
page write copy
|
|
|
|
21169002000
|
unkown
|
page read and write
|
|
|
|
243C346B000
|
unkown
|
page read and write
|
|
|
|
1F18B255000
|
unkown
|
page read and write
|
|
|
|
21168B76000
|
unkown
|
page read and write
|
|
|
|
21168930000
|
unkown
|
page readonly
|
|
|
|
7FF599185000
|
unkown
|
page readonly
|
|
|
|
7FF50FD81000
|
unkown
|
page readonly
|
|
|
|
7FF50FCF1000
|
unkown
|
page readonly
|
|
|
|
21168B31000
|
unkown
|
page read and write
|
|
|
|
7FF599360000
|
unkown
|
page readonly
|
|
|
|
7FF50FC5B000
|
unkown
|
page readonly
|
|
|
|
7FF50F97E000
|
unkown
|
page readonly
|
|
|
|
28BCF508000
|
unkown
|
page read and write
|
|
|
|
7FF50FE8A000
|
unkown
|
page readonly
|
|
|
|
1FAC5EC6000
|
unkown
|
page read and write
|
|
|
|
1FAC5DF0000
|
unkown
|
page read and write
|
|
|
|
7FF50733D000
|
unkown
|
page readonly
|
|
|
|
19F88C29000
|
unkown
|
page read and write
|
|
|
|
14C99140000
|
unkown
|
page write copy
|
|
|
|
7FF59935E000
|
unkown
|
page readonly
|
|
|
|
1F18B0E0000
|
heap private
|
page read and write
|
|
|
|
7FF5993D6000
|
unkown
|
page readonly
|
|
|
|
1FAC5C10000
|
unkown
|
page readonly
|
|
|
|
1FAC5E00000
|
unkown
|
page read and write
|
|
|
|
7FF519F0B000
|
unkown
|
page readonly
|
|
|
|
2CF61D40000
|
unkown
|
page readonly
|
|
|
|
34F1000
|
heap default
|
page read and write
|
|
|
|
2775000
|
unkown
|
page readonly
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
2CF60F60000
|
heap private
|
page read and write
|
|
|
|
2823000
|
unkown
|
page readonly
|
|
|
|
1FAC7D95000
|
unkown
|
page read and write
|
|
|
|
7FF50EF1C000
|
unkown
|
page readonly
|
|
|
|
14C99213000
|
unkown
|
page read and write
|
|
|
|
2BD5000
|
unkown
|
page readonly
|
|
|
|
7FF507111000
|
unkown
|
page readonly
|
|
|
|
1FAC5F02000
|
unkown
|
page read and write
|
|
|
|
7FF5C9A38000
|
unkown
|
page readonly
|
|
|
|
1F18B249000
|
unkown
|
page read and write
|
|
|
|
2B03000
|
unkown
|
page readonly
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
1FAC5DF0000
|
unkown
|
page read and write
|
|
|
|
7FF5098C3000
|
unkown
|
page readonly
|
|
|
|
1FAC9410000
|
unkown
|
page read and write
|
|
|
|
1C5385C7000
|
unkown
|
page read and write
|
|
|
|
8F2CDCE000
|
unkown
|
page read and write
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
211682B0000
|
unkown
|
page read and write
|
|
|
|
2B25000
|
unkown
|
page readonly
|
|
|
|
1FAC5D80000
|
unkown
|
page readonly
|
|
|
|
19F88E00000
|
unkown
|
page readonly
|
|
|
|
7FF5071BB000
|
unkown
|
page readonly
|
|
|
|
1FAC8043000
|
unkown
|
page read and write
|
|
|
|
7FF50EF5E000
|
unkown
|
page readonly
|
|
|
|
7FF5071A1000
|
unkown
|
page readonly
|
|
|
|
7FF59D8AF000
|
unkown
|
page readonly
|
|
|
|
21168B76000
|
unkown
|
page read and write
|
|
|
|
B1EEAFB000
|
unkown
|
page read and write
|
|
|
|
21168B50000
|
unkown
|
page read and write
|
|
|
|
243C346E000
|
unkown
|
page read and write
|
|
|
|
1F18BA02000
|
unkown
|
page read and write
|
|
|
|
2C03000
|
unkown
|
page readonly
|
|
|
|
19F88ED0000
|
unkown
|
page readonly
|
|
|
|
7FF5072AA000
|
unkown
|
page readonly
|
|
|
|
21168B32000
|
unkown
|
page read and write
|
|
|
|
1F18B140000
|
heap default
|
page read and write
|
|
|
|
7FF50FE42000
|
unkown
|
page readonly
|
|
|
|
7FF59DA16000
|
unkown
|
page readonly
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
8F2D27B000
|
unkown
|
page read and write
|
|
|
|
7FF519F16000
|
unkown
|
page readonly
|
|
|
|
1FAC8182000
|
unkown
|
page read and write
|
|
|
|
7FF50EDD1000
|
unkown
|
page readonly
|
|
|
|
7FF5072F7000
|
unkown
|
page readonly
|
|
|
|
7FF53A6D0000
|
unkown
|
page readonly
|
|
|
|
7FF5072BA000
|
unkown
|
page readonly
|
|
|
|
2C03000
|
unkown
|
page readonly
|
|
|
|
1C538580000
|
unkown
|
page read and write
|
|
|
|
7FF5C98CE000
|
unkown
|
page readonly
|
|
|
|
9F4D97D000
|
unkown
|
page read and write
|
|
|
|
1FAC5EDF000
|
unkown
|
page read and write
|
|
|
|
2E50000
|
heap private
|
page read and write
|
|
|
|
1C5385C8000
|
unkown
|
page read and write
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
19F8A790000
|
unkown
|
page readonly
|
|
|
|
7FF5073B1000
|
unkown
|
page readonly
|
|
|
|
7FF5C9A46000
|
unkown
|
page readonly
|
|
|
|
211682ED000
|
unkown
|
page read and write
|
|
|
|
21169000000
|
unkown
|
page read and write
|
|
|
|
1FAC5EFF000
|
unkown
|
page read and write
|
|
|
|
21168A02000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown
|
page readonly
|
|
|
|
7FF599398000
|
unkown
|
page readonly
|
|
|
|
7FF53A774000
|
unkown
|
page readonly
|
|
|
|
1F18B308000
|
unkown
|
page read and write
|
|
|
|
21168213000
|
unkown
|
page read and write
|
|
|
|
7FF5072EF000
|
unkown
|
page readonly
|
|
|
|
7FF50732E000
|
unkown
|
page readonly
|
|
|
|
2CF61088000
|
unkown
|
page read and write
|
|
|
|
F9EDD7E000
|
unkown
|
page read and write
|
|
|
|
B1EF07E000
|
unkown
|
page read and write
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
21168B5B000
|
unkown
|
page read and write
|
|
|
|
7FF599452000
|
unkown
|
page readonly
|
|
|
|
7FF51A1C9000
|
unkown
|
page readonly
|
|
|
|
7FF507304000
|
unkown
|
page readonly
|
|
|
|
2CF61108000
|
unkown
|
page read and write
|
|
|
|
7FF59DAFF000
|
unkown
|
page readonly
|
|
|
|
1FAC5F5D000
|
unkown
|
page read and write
|
|
|
|
2B33000
|
unkown
|
page readonly
|
|
|
|
439339F000
|
unkown
|
page read and write
|
|
|
|
2BF2000
|
unkown
|
page readonly
|
|
|
|
21168B55000
|
unkown
|
page read and write
|
|
|
|
8F2D175000
|
unkown
|
page read and write
|
|
|
|
7FF59D906000
|
unkown
|
page readonly
|
|
|
|
2116903C000
|
unkown
|
page read and write
|
|
|
|
1FAC9113000
|
unkown
|
page read and write
|
|
|
|
9F4D77A000
|
unkown
|
page read and write
|
|
|
|
1FAC8036000
|
unkown
|
page read and write
|
|
|
|
7FF50FD4A000
|
unkown
|
page readonly
|
|
|
|
19F8A690000
|
unkown
|
page read and write
|
|
|
|
243C346B000
|
unkown
|
page read and write
|
|
|
|
10007A000
|
unkown
|
page read and write
|
|
|
|
7FF53A633000
|
unkown
|
page readonly
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
7FF5C9AC2000
|
unkown
|
page readonly
|
|
|
|
7FF50EE43000
|
unkown
|
page readonly
|
|
|
|
1C5386C0000
|
unkown
|
page readonly
|
|
|
|
7FF509FD8000
|
unkown
|
page readonly
|
|
|
|
7FF50FEA5000
|
unkown
|
page readonly
|
|
|
|
2CF6104D000
|
unkown
|
page read and write
|
|
|
|
7FF51A1BE000
|
unkown
|
page readonly
|
|
|
|
1F18B24D000
|
unkown
|
page read and write
|
|
|
|
7FF59902F000
|
unkown
|
page readonly
|
|
|
|
7FF509F75000
|
unkown
|
page readonly
|
|
|
|
21168BA6000
|
unkown
|
page read and write
|
|
|
|
271C000
|
unkown
|
page readonly
|
|
|
|
7FF599300000
|
unkown
|
page readonly
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
7FF53A611000
|
unkown
|
page readonly
|
|
|
|
7FF53A7A6000
|
unkown
|
page readonly
|
|
|
|
2B57000
|
unkown
|
page readonly
|
|
|
|
7FF59D9CB000
|
unkown
|
page readonly
|
|
|
|
7FF59DA70000
|
unkown
|
page readonly
|
|
|
|
21168BC1000
|
unkown
|
page read and write
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
243C346A000
|
unkown
|
page read and write
|
|
|
|
7FF519F75000
|
unkown
|
page readonly
|
|
|
|
7FF50EE5C000
|
unkown
|
page readonly
|
|
|
|
2B6A000
|
unkown
|
page readonly
|
|
|
|
7FF51A04B000
|
unkown
|
page readonly
|
|
|
|
7FF50EF27000
|
unkown
|
page readonly
|
|
|
|
21169043000
|
unkown
|
page read and write
|
|
|
|
7FF5199AD000
|
unkown
|
page readonly
|
|
|
|
7FF51A194000
|
unkown
|
page readonly
|
|
|
|
7FF50FA66000
|
unkown
|
page readonly
|
|
|
|
1FAC9510000
|
unkown
|
page read and write
|
|
|
|
21168B90000
|
unkown
|
page read and write
|
|
|
|
7FF50FF0E000
|
unkown
|
page readonly
|
|
|
|
307C000
|
unkown
|
page read and write
|
|
|
|
2CF61002000
|
unkown
|
page read and write
|
|
|
|
F5D6CFD000
|
unkown
|
page read and write
|
|
|
|
19F88C3F000
|
unkown
|
page read and write
|
|
|
|
1FAC5C00000
|
heap default
|
page read and write
|
|
|
|
1F18B200000
|
unkown
|
page read and write
|
|
|
|
6168F8E000
|
unkown
|
page read and write
|
|
|
|
243C4EA0000
|
unkown
|
page readonly
|
|
|
|
7FF51A058000
|
unkown
|
page readonly
|
|
|
|
7FF539F8D000
|
unkown
|
page readonly
|
|
|
|
19F88C00000
|
unkown
|
page read and write
|
|
|
|
14C99302000
|
unkown
|
page read and write
|
|
|
|
7FF59D911000
|
unkown
|
page readonly
|
|
|
|
7FF53A822000
|
unkown
|
page readonly
|
|
|
|
7FF50EAC5000
|
unkown
|
page readonly
|
|
|
|
7FF50ED41000
|
unkown
|
page readonly
|
|
|
|
2CF60FC0000
|
heap default
|
page read and write
|
|
|
|
1F18B213000
|
unkown
|
page read and write
|
|
|
|
274C000
|
unkown
|
page readonly
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
21168960000
|
unkown
|
page write copy
|
|
|
|
7FF51A23A000
|
unkown
|
page readonly
|
|
|
|
7FF51A0F0000
|
unkown
|
page readonly
|
|
|
|
7FF599323000
|
unkown
|
page readonly
|
|
|
|
7FF50A05A000
|
unkown
|
page readonly
|
|
|
|
1FAC5EE0000
|
unkown
|
page read and write
|
|
|
|
F5D5F9B000
|
unkown
|
page read and write
|
|
|
|
7FF59DB14000
|
unkown
|
page readonly
|
|
|
|
21168B85000
|
unkown
|
page read and write
|
|
|
|
1FAC8142000
|
unkown
|
page read and write
|
|
|
|
2116909B000
|
unkown
|
page read and write
|
|
|
|
7FF5C91F8000
|
unkown
|
page readonly
|
|
|
|
7FF53A72E000
|
unkown
|
page readonly
|
|
|
|
7FF59D3D1000
|
unkown
|
page readonly
|
|
|
|
21168B76000
|
unkown
|
page read and write
|
|
|
|
7FF509FB4000
|
unkown
|
page readonly
|
|
|
|
B1EEB7D000
|
unkown
|
page read and write
|
|
|
|
2CF6106F000
|
unkown
|
page read and write
|
|
|
|
7FF50FE8C000
|
unkown
|
page readonly
|
|
|
|
7FF53A3FA000
|
unkown
|
page readonly
|
|
|
|
7FF50EF58000
|
unkown
|
page readonly
|
|
|
|
7FF5072C5000
|
unkown
|
page readonly
|
|
|
|
2CF61055000
|
unkown
|
page read and write
|
|
|
|
28BCF44A000
|
unkown
|
page read and write
|
|
|
|
2CF61200000
|
unkown
|
page readonly
|
|
|
|
7FF50FA02000
|
unkown
|
page readonly
|
|
|
|
21169100000
|
unkown
|
page read and write
|
|
|
|
2745000
|
unkown
|
page readonly
|
|
|
|
2BC0000
|
unkown
|
page readonly
|
|
|
|
1FAC77A0000
|
unkown
|
page read and write
|
|
|
|
6168F0E000
|
unkown
|
page read and write
|
|
|
|
7FF53A75F000
|
unkown
|
page readonly
|
|
|
|
7FF59DB1A000
|
unkown
|
page readonly
|
|
|
|
7FF59D9D3000
|
unkown
|
page readonly
|
|
|
|
7FF53A589000
|
unkown
|
page readonly
|
|
|
|
1F18B150000
|
unkown
|
page readonly
|
|
|
|
2719000
|
unkown
|
page readonly
|
|
|
|
7FF59DA6C000
|
unkown
|
page readonly
|
|
|
|
7FF519E0C000
|
unkown
|
page readonly
|
|
|
|
211682FB000
|
unkown
|
page read and write
|
|
|
|
7FF53A62B000
|
unkown
|
page readonly
|
|
|
|
7FF59D88B000
|
unkown
|
page readonly
|
|
|
|
7FF50FCD6000
|
unkown
|
page readonly
|
|
|
|
2CF60FE0000
|
unkown
|
page readonly
|
|
|
|
8CD8C7E000
|
unkown
|
page read and write
|
|
|
|
1FAC5EA8000
|
unkown
|
page read and write
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
7FF51A241000
|
unkown
|
page readonly
|
|
|
|
243C346B000
|
unkown
|
page read and write
|
|
|
|
1F18B170000
|
unkown
|
page read and write
|
|
|
|
21168B65000
|
unkown
|
page read and write
|
|
|
|
243C346C000
|
unkown
|
page read and write
|
|
|
|
7FF59DAE7000
|
unkown
|
page readonly
|
|
|
|
7FF507037000
|
unkown
|
page readonly
|
|
|
|
1FAC7E00000
|
unkown
|
page readonly
|
|
|
|
F5D6A7B000
|
unkown
|
page read and write
|
|
|
|
7FF5073B2000
|
unkown
|
page readonly
|
|
|
|
21168B21000
|
unkown
|
page read and write
|
|
|
|
7FF598BBD000
|
unkown
|
page readonly
|
|
|
|
1FAC7DEC000
|
unkown
|
page read and write
|
|
|
|
7FF509F9C000
|
unkown
|
page readonly
|
|
|
|
243C3441000
|
unkown
|
page read and write
|
|
|
|
21168B75000
|
unkown
|
page read and write
|
|
|
|
7FF599377000
|
unkown
|
page readonly
|
|
|
|
28BCF44D000
|
unkown
|
page read and write
|
|
|
|
7FF59DA1D000
|
unkown
|
page readonly
|
|
|
|
61694F7000
|
unkown
|
page read and write
|
|
|
|
7FF50FECF000
|
unkown
|
page readonly
|
|
|
|
243C3502000
|
unkown
|
page read and write
|
|
|
|
1FAC7D9B000
|
unkown
|
page read and write
|
|
|
|
7FF50FCD4000
|
unkown
|
page readonly
|
|
|
|
7FF59D632000
|
unkown
|
page readonly
|
|
|
|
7FF5098C7000
|
unkown
|
page readonly
|
|
|
|
7FF509F7B000
|
unkown
|
page readonly
|
|
|
|
7FF5C9AC1000
|
unkown
|
page readonly
|
|
|
|
243C346D000
|
unkown
|
page read and write
|
|
|
|
7FF59902A000
|
unkown
|
page readonly
|
|
|
|
7FF50FED7000
|
unkown
|
page readonly
|
|
|
|
21168BA7000
|
unkown
|
page read and write
|
|
|
|
7FF59DB2E000
|
unkown
|
page readonly
|
|
|
|
7FF53A3EC000
|
unkown
|
page readonly
|
|
|
|
9F4D87F000
|
unkown
|
page read and write
|
|
|
|
F9ED51E000
|
unkown
|
page read and write
|
|
|
|
21168B39000
|
unkown
|
page read and write
|
|
|
|
19F88D02000
|
unkown
|
page read and write
|
|
|
|
7FF59936B000
|
unkown
|
page readonly
|
|
|
|
7FF59D896000
|
unkown
|
page readonly
|
|
|
|
3060000
|
heap private
|
page read and write
|
|
|
|
7FF5C99FC000
|
unkown
|
page readonly
|
|
|
|
2B63000
|
unkown
|
page readonly
|
|
|
|
7FF5072C0000
|
unkown
|
page readonly
|
|
|
|
7FF53A81A000
|
unkown
|
page readonly
|
|
|
|
21168B85000
|
unkown
|
page read and write
|
|
|
|
7FF50EAB6000
|
unkown
|
page readonly
|
|
There are 1015 hidden memdumps, click here to show them.