Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
viVrtGR9Wg.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$viVrtGR9Wg.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\2A67B087-45F1-4236-B3FB-851D3F1CEFAA
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\25AE9BF8.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\6AB7CC6.png
|
PNG image data, 934 x 29, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8F1AED13.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\ACF69EDA.png
|
PNG image data, 521 x 246, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B73ABB99.png
|
PNG image data, 246 x 108, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D9C23A0F.png
|
PNG image data, 490 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\DDC40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\werty1.dll
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\werty2.dll
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
forfacks.com
|
192.185.48.167
|
|
|
|
dreamhimalayan.com
|
192.185.113.120
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.48.167
|
forfacks.com
|
United States
|
|
|
|
192.185.113.120
|
dreamhimalayan.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
v(?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
w(?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C3DA
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CAEE
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CC46
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CD11
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CE69
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
b;?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 52 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2BC9000
|
unkown
|
page read and write
|
|
|
|
75070FA000
|
unkown
|
page read and write
|
|
|
|
20B26202000
|
unkown
|
page read and write
|
|
|
|
7FF5CD963000
|
unkown
|
page readonly
|
|
|
|
7FF5484E6000
|
unkown
|
page readonly
|
|
|
|
1B8110FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4B8000
|
unkown
|
page readonly
|
|
|
|
7FF5946F5000
|
unkown
|
page readonly
|
|
|
|
2655000
|
unkown
|
page readonly
|
|
|
|
75071FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DA331000
|
unkown
|
page readonly
|
|
|
|
2A2A6BC0000
|
unkown
|
page readonly
|
|
|
|
7FF5760D2000
|
unkown
|
page readonly
|
|
|
|
7FF5485B7000
|
unkown
|
page readonly
|
|
|
|
227C000
|
unkown
|
page readonly
|
|
|
|
8AF158B000
|
unkown
|
page read and write
|
|
|
|
7FF5DA467000
|
unkown
|
page readonly
|
|
|
|
A3BD075000
|
unkown
|
page read and write
|
|
|
|
26643800000
|
unkown
|
page read and write
|
|
|
|
A3BD3FF000
|
unkown
|
page read and write
|
|
|
|
2733000
|
unkown
|
page readonly
|
|
|
|
1E71586F000
|
unkown
|
page read and write
|
|
|
|
20B26302000
|
unkown
|
page read and write
|
|
|
|
7FF5CDA84000
|
unkown
|
page readonly
|
|
|
|
27490AA0000
|
unkown
|
page readonly
|
|
|
|
7FF5C5AE5000
|
unkown
|
page readonly
|
|
|
|
2302000
|
unkown
|
page readonly
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
20B26203000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8BA000
|
unkown
|
page readonly
|
|
|
|
F8E3FF5000
|
unkown
|
page read and write
|
|
|
|
1B8110E6000
|
unkown
|
page read and write
|
|
|
|
27491310000
|
unkown
|
page read and write
|
|
|
|
7FF5DA488000
|
unkown
|
page readonly
|
|
|
|
7FF5C5BD1000
|
unkown
|
page readonly
|
|
|
|
1E71583F000
|
unkown
|
page read and write
|
|
|
|
20B26200000
|
unkown
|
page read and write
|
|
|
|
2693000
|
unkown
|
page readonly
|
|
|
|
274909F2000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
unkown
|
page readonly
|
|
|
|
7FF5DA34B000
|
unkown
|
page readonly
|
|
|
|
2748EC00000
|
unkown
|
page readonly
|
|
|
|
20B25D47000
|
unkown
|
page read and write
|
|
|
|
20B25D31000
|
unkown
|
page read and write
|
|
|
|
9E50A7E000
|
unkown
|
page read and write
|
|
|
|
A98BD7A000
|
unkown
|
page read and write
|
|
|
|
20B26400000
|
unkown
|
page readonly
|
|
|
|
3110000
|
heap private
|
page read and write
|
|
|
|
2ED0C802000
|
unkown
|
page read and write
|
|
|
|
2748EAEA000
|
unkown
|
page read and write
|
|
|
|
7FF5483F9000
|
unkown
|
page readonly
|
|
|
|
182C1350000
|
unkown
|
page write copy
|
|
|
|
182C146C000
|
unkown
|
page read and write
|
|
|
|
182C146E000
|
unkown
|
page read and write
|
|
|
|
20B26302000
|
unkown
|
page read and write
|
|
|
|
2A2A6E00000
|
unkown
|
page readonly
|
|
|
|
21B0000
|
unkown
|
page readonly
|
|
|
|
7FF58314B000
|
unkown
|
page readonly
|
|
|
|
29C0000
|
unkown
|
page read and write
|
|
|
|
2ED0C029000
|
unkown
|
page read and write
|
|
|
|
20B26302000
|
unkown
|
page read and write
|
|
|
|
7FF5B46DC000
|
unkown
|
page readonly
|
|
|
|
2DA0000
|
unkown
|
page readonly
|
|
|
|
7FF5485A0000
|
unkown
|
page readonly
|
|
|
|
B3F63FA000
|
unkown
|
page read and write
|
|
|
|
9E5087E000
|
unkown
|
page read and write
|
|
|
|
20B2621D000
|
unkown
|
page read and write
|
|
|
|
7FF576222000
|
unkown
|
page readonly
|
|
|
|
20B25D67000
|
unkown
|
page read and write
|
|
|
|
9E505BB000
|
unkown
|
page read and write
|
|
|
|
1E715802000
|
unkown
|
page read and write
|
|
|
|
7FF5CDA08000
|
unkown
|
page readonly
|
|
|
|
285C000
|
unkown
|
page read and write
|
|
|
|
20B25400000
|
unkown
|
page read and write
|
|
|
|
2ED0C013000
|
unkown
|
page read and write
|
|
|
|
20B25D5E000
|
unkown
|
page read and write
|
|
|
|
20B25D47000
|
unkown
|
page read and write
|
|
|
|
7FF5C5ADE000
|
unkown
|
page readonly
|
|
|
|
20B25DB4000
|
unkown
|
page read and write
|
|
|
|
27491210000
|
unkown
|
page read and write
|
|
|
|
27491510000
|
unkown
|
page read and write
|
|
|
|
2D70000
|
unkown
|
page read and write
|
|
|
|
7FF548540000
|
unkown
|
page readonly
|
|
|
|
7FF5483F1000
|
unkown
|
page readonly
|
|
|
|
3120000
|
unkown
|
page readonly
|
|
|
|
289B000
|
unkown
|
page read and write
|
|
|
|
7FF5C5A2D000
|
unkown
|
page readonly
|
|
|
|
7FF5CDA11000
|
unkown
|
page readonly
|
|
|
|
27490938000
|
unkown
|
page read and write
|
|
|
|
7FF582FA5000
|
unkown
|
page readonly
|
|
|
|
7FF583293000
|
unkown
|
page readonly
|
|
|
|
2A2A6C00000
|
unkown
|
page read and write
|
|
|
|
7FF5C5BC4000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A88000
|
unkown
|
page readonly
|
|
|
|
7FF5AF7BE000
|
unkown
|
page readonly
|
|
|
|
182C2EA0000
|
unkown
|
page readonly
|
|
|
|
7FF583107000
|
unkown
|
page readonly
|
|
|
|
2748EB1B000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8C0000
|
unkown
|
page readonly
|
|
|
|
7FF5B49E3000
|
unkown
|
page readonly
|
|
|
|
7FF5C5ADA000
|
unkown
|
page readonly
|
|
|
|
7FF5DA45B000
|
unkown
|
page readonly
|
|
|
|
7FF576168000
|
unkown
|
page readonly
|
|
|
|
29D66C00000
|
unkown
|
page read and write
|
|
|
|
2ED0C08F000
|
unkown
|
page read and write
|
|
|
|
20B2623C000
|
unkown
|
page read and write
|
|
|
|
A3BD1FF000
|
unkown
|
page read and write
|
|
|
|
7FF57621A000
|
unkown
|
page readonly
|
|
|
|
20B25D68000
|
unkown
|
page read and write
|
|
|
|
20B25D55000
|
unkown
|
page read and write
|
|
|
|
27490A70000
|
unkown
|
page read and write
|
|
|
|
26643840000
|
unkown
|
page read and write
|
|
|
|
1B811070000
|
unkown
|
page read and write
|
|
|
|
F8E447E000
|
unkown
|
page read and write
|
|
|
|
20B25DD6000
|
unkown
|
page read and write
|
|
|
|
29D66E00000
|
unkown
|
page readonly
|
|
|
|
7FF5946FB000
|
unkown
|
page readonly
|
|
|
|
7FF54837F000
|
unkown
|
page readonly
|
|
|
|
1E71586B000
|
unkown
|
page read and write
|
|
|
|
2629000
|
unkown
|
page readonly
|
|
|
|
2283000
|
unkown
|
page readonly
|
|
|
|
20B25DB3000
|
unkown
|
page read and write
|
|
|
|
2748EA6A000
|
unkown
|
page read and write
|
|
|
|
2ED0BFA0000
|
heap default
|
page read and write
|
|
|
|
2ED0C083000
|
unkown
|
page read and write
|
|
|
|
7FF5AF928000
|
unkown
|
page readonly
|
|
|
|
7FF58337A000
|
unkown
|
page readonly
|
|
|
|
7FF5CD9A5000
|
unkown
|
page readonly
|
|
|
|
20B25D47000
|
unkown
|
page read and write
|
|
|
|
20B25471000
|
unkown
|
page read and write
|
|
|
|
20B25DA6000
|
unkown
|
page read and write
|
|
|
|
20B25BD0000
|
unkown
|
page read and write
|
|
|
|
7FF547DFD000
|
unkown
|
page readonly
|
|
|
|
27490D00000
|
unkown
|
page read and write
|
|
|
|
7FF582FA7000
|
unkown
|
page readonly
|
|
|
|
7FF5DA47C000
|
unkown
|
page readonly
|
|
|
|
7FF5833DA000
|
unkown
|
page readonly
|
|
|
|
7FF594728000
|
unkown
|
page readonly
|
|
|
|
182C1429000
|
unkown
|
page read and write
|
|
|
|
2C3B000
|
unkown
|
page read and write
|
|
|
|
7FF5761A6000
|
unkown
|
page readonly
|
|
|
|
7FF5AF637000
|
unkown
|
page readonly
|
|
|
|
7FF57602B000
|
unkown
|
page readonly
|
|
|
|
29D66C29000
|
unkown
|
page read and write
|
|
|
|
274909FC000
|
unkown
|
page read and write
|
|
|
|
20B2633C000
|
unkown
|
page read and write
|
|
|
|
20B25D60000
|
unkown
|
page read and write
|
|
|
|
7FF5B46EA000
|
unkown
|
page readonly
|
|
|
|
27490E42000
|
unkown
|
page read and write
|
|
|
|
20B25DA5000
|
unkown
|
page read and write
|
|
|
|
A3BD2F7000
|
unkown
|
page read and write
|
|
|
|
20B25429000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A6A000
|
unkown
|
page readonly
|
|
|
|
20B2628E000
|
unkown
|
page read and write
|
|
|
|
2D90000
|
unkown
|
page readonly
|
|
|
|
7FF57615F000
|
unkown
|
page readonly
|
|
|
|
20B25D15000
|
unkown
|
page read and write
|
|
|
|
182C1280000
|
unkown
|
page readonly
|
|
|
|
7FF5C5ACC000
|
unkown
|
page readonly
|
|
|
|
7FF5B46EF000
|
unkown
|
page readonly
|
|
|
|
7FF5CD66F000
|
unkown
|
page readonly
|
|
|
|
7FF5833D4000
|
unkown
|
page readonly
|
|
|
|
20B25DA6000
|
unkown
|
page read and write
|
|
|
|
7FF5832F4000
|
unkown
|
page readonly
|
|
|
|
22D7000
|
unkown
|
page readonly
|
|
|
|
20B25DC0000
|
unkown
|
page read and write
|
|
|
|
29D66C3F000
|
unkown
|
page read and write
|
|
|
|
7FF548608000
|
unkown
|
page readonly
|
|
|
|
7FF5DA53A000
|
unkown
|
page readonly
|
|
|
|
2A2A6D08000
|
unkown
|
page read and write
|
|
|
|
182C146E000
|
unkown
|
page read and write
|
|
|
|
7FF582B9B000
|
unkown
|
page readonly
|
|
|
|
7FF5C5AE0000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8CB000
|
unkown
|
page readonly
|
|
|
|
2ED0C04B000
|
unkown
|
page read and write
|
|
|
|
20B253A0000
|
heap default
|
page read and write
|
|
|
|
7FF5CDA0E000
|
unkown
|
page readonly
|
|
|
|
750717C000
|
unkown
|
page read and write
|
|
|
|
20B26300000
|
unkown
|
page read and write
|
|
|
|
2733000
|
unkown
|
page readonly
|
|
|
|
7FF58336F000
|
unkown
|
page readonly
|
|
|
|
2685000
|
unkown
|
page readonly
|
|
|
|
7FF5DA494000
|
unkown
|
page readonly
|
|
|
|
A98B8F7000
|
unkown
|
page read and write
|
|
|
|
2A2A6C55000
|
unkown
|
page read and write
|
|
|
|
7FF5DA413000
|
unkown
|
page readonly
|
|
|
|
7FF5CD9FE000
|
unkown
|
page readonly
|
|
|
|
7FF583406000
|
unkown
|
page readonly
|
|
|
|
7FF54858C000
|
unkown
|
page readonly
|
|
|
|
7FF5DA11F000
|
unkown
|
page readonly
|
|
|
|
2748EAF6000
|
unkown
|
page read and write
|
|
|
|
2ED0C200000
|
unkown
|
page readonly
|
|
|
|
20B25DA6000
|
unkown
|
page read and write
|
|
|
|
7FF5833FE000
|
unkown
|
page readonly
|
|
|
|
7FF54826A000
|
unkown
|
page readonly
|
|
|
|
29D66C02000
|
unkown
|
page read and write
|
|
|
|
20B25D12000
|
unkown
|
page read and write
|
|
|
|
7FF5B49C2000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A2B000
|
unkown
|
page readonly
|
|
|
|
268D000
|
unkown
|
page readonly
|
|
|
|
20B254B0000
|
unkown
|
page read and write
|
|
|
|
2364000
|
unkown
|
page readonly
|
|
|
|
2748EA75000
|
unkown
|
page read and write
|
|
|
|
27491000000
|
unkown
|
page read and write
|
|
|
|
20B25D62000
|
unkown
|
page read and write
|
|
|
|
B3F627F000
|
unkown
|
page read and write
|
|
|
|
7FF5DA47F000
|
unkown
|
page readonly
|
|
|
|
27490A40000
|
unkown
|
page readonly
|
|
|
|
7FF57612E000
|
unkown
|
page readonly
|
|
|
|
7FF5C5B3F000
|
unkown
|
page readonly
|
|
|
|
20B253F0000
|
unkown
|
page readonly
|
|
|
|
7FF5AF904000
|
unkown
|
page readonly
|
|
|
|
7FF57615C000
|
unkown
|
page readonly
|
|
|
|
2ED0C027000
|
unkown
|
page read and write
|
|
|
|
2ED0CA00000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A1A000
|
unkown
|
page readonly
|
|
|
|
182C146A000
|
unkown
|
page read and write
|
|
|
|
7FF5760F3000
|
unkown
|
page readonly
|
|
|
|
20B25C02000
|
unkown
|
page read and write
|
|
|
|
7FF5B4901000
|
unkown
|
page readonly
|
|
|
|
20B25BA0000
|
unkown
|
page readonly
|
|
|
|
A3BD17B000
|
unkown
|
page read and write
|
|
|
|
2D80000
|
heap private
|
page read and write
|
|
|
|
A98B1CB000
|
unkown
|
page read and write
|
|
|
|
1B8110D6000
|
heap default
|
page read and write
|
|
|
|
2748EA5D000
|
unkown
|
page read and write
|
|
|
|
2ED0BFB0000
|
unkown
|
page readonly
|
|
|
|
81C65FA000
|
unkown
|
page read and write
|
|
|
|
7506EFB000
|
unkown
|
page read and write
|
|
|
|
2ED0BF40000
|
heap private
|
page read and write
|
|
|
|
A3BCE7B000
|
unkown
|
page read and write
|
|
|
|
7FF5C59DB000
|
unkown
|
page readonly
|
|
|
|
29E0000
|
unkown
|
page readonly
|
|
|
|
7FF58338A000
|
unkown
|
page readonly
|
|
|
|
7FF5AF90A000
|
unkown
|
page readonly
|
|
|
|
20B2633C000
|
unkown
|
page read and write
|
|
|
|
2748E9B0000
|
unkown
|
page readonly
|
|
|
|
182C2DA0000
|
unkown
|
page read and write
|
|
|
|
2705000
|
unkown
|
page readonly
|
|
|
|
2EB0000
|
heap default
|
page read and write
|
|
|
|
7FF5B4A4C000
|
unkown
|
page readonly
|
|
|
|
20B25DA5000
|
unkown
|
page read and write
|
|
|
|
266453E0000
|
unkown
|
page readonly
|
|
|
|
20B25BC0000
|
unkown
|
page readonly
|
|
|
|
7FF576214000
|
unkown
|
page readonly
|
|
|
|
20B25D12000
|
unkown
|
page read and write
|
|
|
|
27490AB0000
|
unkown
|
page readonly
|
|
|
|
7FF59471C000
|
unkown
|
page readonly
|
|
|
|
2279000
|
unkown
|
page readonly
|
|
|
|
A98B5F5000
|
unkown
|
page read and write
|
|
|
|
2A2A7940000
|
unkown
|
page readonly
|
|
|
|
27490976000
|
unkown
|
page read and write
|
|
|
|
A98BE7B000
|
unkown
|
page read and write
|
|
|
|
1B8110FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C56A0000
|
unkown
|
page readonly
|
|
|
|
7FF5CD99E000
|
unkown
|
page readonly
|
|
|
|
29F0000
|
unkown
|
page readonly
|
|
|
|
232E000
|
unkown
|
page readonly
|
|
|
|
7FF583332000
|
unkown
|
page readonly
|
|
|
|
7FF594758000
|
unkown
|
page readonly
|
|
|
|
182C1500000
|
unkown
|
page read and write
|
|
|
|
26643813000
|
unkown
|
page read and write
|
|
|
|
7506AFF000
|
unkown
|
page read and write
|
|
|
|
7FF5CD9AB000
|
unkown
|
page readonly
|
|
|
|
29D66D02000
|
unkown
|
page read and write
|
|
|
|
7FF5C56B5000
|
unkown
|
page readonly
|
|
|
|
7FF5CD7F9000
|
unkown
|
page readonly
|
|
|
|
7FF57612A000
|
unkown
|
page readonly
|
|
|
|
F8E4277000
|
unkown
|
page read and write
|
|
|
|
7FF5CD9E4000
|
unkown
|
page readonly
|
|
|
|
2748EA3C000
|
unkown
|
page read and write
|
|
|
|
7FF594744000
|
unkown
|
page readonly
|
|
|
|
7FF58338E000
|
unkown
|
page readonly
|
|
|
|
7FF5DA358000
|
unkown
|
page readonly
|
|
|
|
27490D02000
|
unkown
|
page read and write
|
|
|
|
20B25D94000
|
unkown
|
page read and write
|
|
|
|
7FF5DA455000
|
unkown
|
page readonly
|
|
|
|
7FF57598D000
|
unkown
|
page readonly
|
|
|
|
7FF576221000
|
unkown
|
page readonly
|
|
|
|
20B2639B000
|
unkown
|
page read and write
|
|
|
|
39C337A000
|
unkown
|
page read and write
|
|
|
|
29D66F20000
|
unkown
|
page readonly
|
|
|
|
2ABA000
|
heap default
|
page read and write
|
|
|
|
7FF5484A3000
|
unkown
|
page readonly
|
|
|
|
20B25DA6000
|
unkown
|
page read and write
|
|
|
|
1E715902000
|
unkown
|
page read and write
|
|
|
|
7FF5AF939000
|
unkown
|
page readonly
|
|
|
|
A98BC7B000
|
unkown
|
page read and write
|
|
|
|
20B25BB0000
|
unkown
|
page readonly
|
|
|
|
7FF5DA216000
|
unkown
|
page readonly
|
|
|
|
7FF5AF9AA000
|
unkown
|
page readonly
|
|
|
|
7FF5832E3000
|
unkown
|
page readonly
|
|
|
|
20B25502000
|
unkown
|
page read and write
|
|
|
|
20B25D00000
|
unkown
|
page read and write
|
|
|
|
20B25D58000
|
unkown
|
page read and write
|
|
|
|
26643B20000
|
unkown
|
page readonly
|
|
|
|
7506CFB000
|
unkown
|
page read and write
|
|
|
|
7FF54825C000
|
unkown
|
page readonly
|
|
|
|
7FF5833A7000
|
unkown
|
page readonly
|
|
|
|
20B25450000
|
unkown
|
page read and write
|
|
|
|
20B2543C000
|
unkown
|
page read and write
|
|
|
|
29D66ED0000
|
unkown
|
page write copy
|
|
|
|
1B8110EF000
|
unkown
|
page read and write
|
|
|
|
2748EA00000
|
unkown
|
page read and write
|
|
|
|
7FF5484ED000
|
unkown
|
page readonly
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
2306000
|
unkown
|
page readonly
|
|
|
|
20B25DA3000
|
unkown
|
page read and write
|
|
|
|
268F000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A9D000
|
unkown
|
page readonly
|
|
|
|
7FF548277000
|
unkown
|
page readonly
|
|
|
|
27491210000
|
unkown
|
page read and write
|
|
|
|
7FF5CD9F4000
|
unkown
|
page readonly
|
|
|
|
7FF5B4841000
|
unkown
|
page readonly
|
|
|
|
7506B7A000
|
unkown
|
page read and write
|
|
|
|
1B8110CB000
|
heap default
|
page read and write
|
|
|
|
27490C00000
|
unkown
|
page read and write
|
|
|
|
7FF5485CC000
|
unkown
|
page readonly
|
|
|
|
7FF5C5B0F000
|
unkown
|
page readonly
|
|
|
|
A98B47E000
|
unkown
|
page read and write
|
|
|
|
B3F647F000
|
unkown
|
page read and write
|
|
|
|
7FF5831C6000
|
unkown
|
page readonly
|
|
|
|
20B25DA5000
|
unkown
|
page read and write
|
|
|
|
20B253B0000
|
unkown
|
page readonly
|
|
|
|
2A2A6D00000
|
unkown
|
page read and write
|
|
|
|
1E715900000
|
unkown
|
page read and write
|
|
|
|
1E7156A0000
|
heap default
|
page read and write
|
|
|
|
2A2A6BE0000
|
unkown
|
page read and write
|
|
|
|
8AF187E000
|
unkown
|
page read and write
|
|
|
|
27490913000
|
unkown
|
page read and write
|
|
|
|
2701000
|
unkown
|
page readonly
|
|
|
|
2A2A6C3C000
|
unkown
|
page read and write
|
|
|
|
2722000
|
unkown
|
page readonly
|
|
|
|
B3F64F9000
|
unkown
|
page read and write
|
|
|
|
182C146A000
|
unkown
|
page read and write
|
|
|
|
2748E820000
|
heap private
|
page read and write
|
|
|
|
1E71586F000
|
unkown
|
page read and write
|
|
|
|
7FF548532000
|
unkown
|
page readonly
|
|
|
|
7FF5C56A6000
|
unkown
|
page readonly
|
|
|
|
7FF5DA4C9000
|
unkown
|
page readonly
|
|
|
|
2378000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8AA000
|
unkown
|
page readonly
|
|
|
|
20B25BC0000
|
unkown
|
page read and write
|
|
|
|
26643902000
|
unkown
|
page read and write
|
|
|
|
7FF5DA3F0000
|
unkown
|
page readonly
|
|
|
|
2679000
|
unkown
|
page readonly
|
|
|
|
7FF5485F4000
|
unkown
|
page readonly
|
|
|
|
7FF5484A8000
|
unkown
|
page readonly
|
|
|
|
20B25451000
|
unkown
|
page read and write
|
|
|
|
20B25D68000
|
unkown
|
page read and write
|
|
|
|
7FF576130000
|
unkown
|
page readonly
|
|
|
|
20B25D51000
|
unkown
|
page read and write
|
|
|
|
9E5097A000
|
unkown
|
page read and write
|
|
|
|
2A2A6C4F000
|
unkown
|
page read and write
|
|
|
|
2748E9F0000
|
unkown
|
page read and write
|
|
|
|
1E71586B000
|
unkown
|
page read and write
|
|
|
|
7FF5DA534000
|
unkown
|
page readonly
|
|
|
|
7FF5CD75B000
|
unkown
|
page readonly
|
|
|
|
20B254A5000
|
unkown
|
page read and write
|
|
|
|
44B0000
|
heap private
|
page read and write
|
|
|
|
20B25D60000
|
unkown
|
page read and write
|
|
|
|
22D5000
|
unkown
|
page readonly
|
|
|
|
2728000
|
unkown
|
page readonly
|
|
|
|
7FF5AF480000
|
unkown
|
page readonly
|
|
|
|
22C9000
|
unkown
|
page readonly
|
|
|
|
2748E880000
|
heap default
|
page read and write
|
|
|
|
27491210000
|
unkown
|
page read and write
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
182C1502000
|
unkown
|
page read and write
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
7FF5947E1000
|
unkown
|
page readonly
|
|
|
|
20B25DB5000
|
unkown
|
page read and write
|
|
|
|
7FF5B4B04000
|
unkown
|
page readonly
|
|
|
|
A98BB79000
|
unkown
|
page read and write
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
7FF5483D4000
|
unkown
|
page readonly
|
|
|
|
7FF548619000
|
unkown
|
page readonly
|
|
|
|
75068FE000
|
unkown
|
page read and write
|
|
|
|
20B2549F000
|
unkown
|
page read and write
|
|
|
|
274907F0000
|
heap private
|
page read and write
|
|
|
|
7FF5AF495000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A58000
|
unkown
|
page readonly
|
|
|
|
2748EA60000
|
unkown
|
page read and write
|
|
|
|
1B8110EF000
|
unkown
|
page read and write
|
|
|
|
7FF575F55000
|
unkown
|
page readonly
|
|
|
|
7FF5947D4000
|
unkown
|
page readonly
|
|
|
|
20B25D65000
|
unkown
|
page read and write
|
|
|
|
7FF5DA10C000
|
unkown
|
page readonly
|
|
|
|
7FF54860E000
|
unkown
|
page readonly
|
|
|
|
182C1210000
|
heap private
|
page read and write
|
|
|
|
1B810FA0000
|
unkown
|
page readonly
|
|
|
|
7FF5AF813000
|
unkown
|
page readonly
|
|
|
|
1E71586B000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8EF000
|
unkown
|
page readonly
|
|
|
|
182C1454000
|
unkown
|
page read and write
|
|
|
|
81C687E000
|
unkown
|
page read and write
|
|
|
|
2A2A6C70000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A74000
|
unkown
|
page readonly
|
|
|
|
7FF583330000
|
unkown
|
page readonly
|
|
|
|
7FF5AF711000
|
unkown
|
page readonly
|
|
|
|
7FF5C52E5000
|
unkown
|
page readonly
|
|
|
|
1E715813000
|
unkown
|
page read and write
|
|
|
|
81C697E000
|
unkown
|
page read and write
|
|
|
|
2EBA000
|
heap default
|
page read and write
|
|
|
|
2670000
|
unkown
|
page readonly
|
|
|
|
7FF548179000
|
unkown
|
page readonly
|
|
|
|
750687B000
|
unkown
|
page read and write
|
|
|
|
39C3779000
|
unkown
|
page read and write
|
|
|
|
22F1000
|
unkown
|
page readonly
|
|
|
|
7FF576184000
|
unkown
|
page readonly
|
|
|
|
7FF575E07000
|
unkown
|
page readonly
|
|
|
|
9E508FE000
|
unkown
|
page read and write
|
|
|
|
27490C12000
|
unkown
|
page read and write
|
|
|
|
7FF54858A000
|
unkown
|
page readonly
|
|
|
|
7FF5CD89B000
|
unkown
|
page readonly
|
|
|
|
274909C1000
|
unkown
|
page read and write
|
|
|
|
F8E3E7E000
|
unkown
|
page read and write
|
|
|
|
1B8113E0000
|
unkown
|
page readonly
|
|
|
|
26643854000
|
unkown
|
page read and write
|
|
|
|
2A2A6BB0000
|
heap default
|
page read and write
|
|
|
|
20B25D3C000
|
unkown
|
page read and write
|
|
|
|
2A2A6D13000
|
unkown
|
page read and write
|
|
|
|
20B25D60000
|
unkown
|
page read and write
|
|
|
|
7FF5CD766000
|
unkown
|
page readonly
|
|
|
|
7506C79000
|
unkown
|
page read and write
|
|
|
|
8AF1979000
|
unkown
|
page read and write
|
|
|
|
7FF5C5AEB000
|
unkown
|
page readonly
|
|
|
|
7FF5DA44A000
|
unkown
|
page readonly
|
|
|
|
2ED0C055000
|
unkown
|
page read and write
|
|
|
|
22B3000
|
unkown
|
page readonly
|
|
|
|
7FF5947DA000
|
unkown
|
page readonly
|
|
|
|
7FF5C5BCA000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8AC000
|
unkown
|
page readonly
|
|
|
|
274909A0000
|
unkown
|
page read and write
|
|
|
|
22AC000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8F7000
|
unkown
|
page readonly
|
|
|
|
7FF5B46F7000
|
unkown
|
page readonly
|
|
|
|
7FF5DA11A000
|
unkown
|
page readonly
|
|
|
|
9E50B7F000
|
unkown
|
page read and write
|
|
|
|
7FF5DA450000
|
unkown
|
page readonly
|
|
|
|
266437F0000
|
heap default
|
page read and write
|
|
|
|
8AF1A7F000
|
unkown
|
page read and write
|
|
|
|
2748EB2D000
|
unkown
|
page read and write
|
|
|
|
26B2000
|
unkown
|
page readonly
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
2748EA53000
|
unkown
|
page read and write
|
|
|
|
20B25DB5000
|
unkown
|
page read and write
|
|
|
|
7FF5832FC000
|
unkown
|
page readonly
|
|
|
|
7FF576147000
|
unkown
|
page readonly
|
|
|
|
F8E3BEB000
|
unkown
|
page read and write
|
|
|
|
20B2544D000
|
unkown
|
page read and write
|
|
|
|
20B2544E000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8D7000
|
unkown
|
page readonly
|
|
|
|
27490E00000
|
unkown
|
page read and write
|
|
|
|
22A5000
|
unkown
|
page readonly
|
|
|
|
2748E960000
|
unkown
|
page write copy
|
|
|
|
A98B6F9000
|
unkown
|
page read and write
|
|
|
|
182C1402000
|
unkown
|
page read and write
|
|
|
|
7FF5C5B59000
|
unkown
|
page readonly
|
|
|
|
7FF5CD1FD000
|
unkown
|
page readonly
|
|
|
|
2748EB3D000
|
unkown
|
page read and write
|
|
|
|
20B25D67000
|
unkown
|
page read and write
|
|
|
|
20B254C5000
|
unkown
|
page read and write
|
|
|
|
29D66B90000
|
heap private
|
page read and write
|
|
|
|
7FF583110000
|
unkown
|
page readonly
|
|
|
|
7FF5DA20B000
|
unkown
|
page readonly
|
|
|
|
7FF5B4B0A000
|
unkown
|
page readonly
|
|
|
|
27490A50000
|
unkown
|
page read and write
|
|
|
|
20B25BC0000
|
unkown
|
page read and write
|
|
|
|
26643D20000
|
unkown
|
page readonly
|
|
|
|
7FF576198000
|
unkown
|
page readonly
|
|
|
|
7FF5CD9B7000
|
unkown
|
page readonly
|
|
|
|
7FF5B4928000
|
unkown
|
page readonly
|
|
|
|
7FF5AF763000
|
unkown
|
page readonly
|
|
|
|
182C1413000
|
unkown
|
page read and write
|
|
|
|
20B25D47000
|
unkown
|
page read and write
|
|
|
|
F8E3EFE000
|
unkown
|
page read and write
|
|
|
|
7FF5C59C1000
|
unkown
|
page readonly
|
|
|
|
7FF5DA4C1000
|
unkown
|
page readonly
|
|
|
|
2714000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A7E000
|
unkown
|
page readonly
|
|
|
|
2ED0C000000
|
unkown
|
page read and write
|
|
|
|
20B26202000
|
unkown
|
page read and write
|
|
|
|
20B253D0000
|
unkown
|
page read and write
|
|
|
|
20B25453000
|
unkown
|
page read and write
|
|
|
|
7FF59475E000
|
unkown
|
page readonly
|
|
|
|
20B25BC0000
|
unkown
|
page read and write
|
|
|
|
20B25458000
|
unkown
|
page read and write
|
|
|
|
7FF5485AB000
|
unkown
|
page readonly
|
|
|
|
7FF5CD9A0000
|
unkown
|
page readonly
|
|
|
|
20B25DA5000
|
unkown
|
page read and write
|
|
|
|
7FF5C5A4C000
|
unkown
|
page readonly
|
|
|
|
7FF583233000
|
unkown
|
page readonly
|
|
|
|
20B253C0000
|
unkown
|
page readonly
|
|
|
|
29D66C66000
|
unkown
|
page read and write
|
|
|
|
20B26202000
|
unkown
|
page read and write
|
|
|
|
266452E0000
|
unkown
|
page read and write
|
|
|
|
7FF583409000
|
unkown
|
page readonly
|
|
|
|
182C1513000
|
unkown
|
page read and write
|
|
|
|
27491410000
|
unkown
|
page read and write
|
|
|
|
230B000
|
unkown
|
page readonly
|
|
|
|
7FF583298000
|
unkown
|
page readonly
|
|
|
|
7FF5C5B56000
|
unkown
|
page readonly
|
|
|
|
20B25DA5000
|
unkown
|
page read and write
|
|
|
|
7FF576038000
|
unkown
|
page readonly
|
|
|
|
26A1000
|
unkown
|
page readonly
|
|
|
|
20B25482000
|
unkown
|
page read and write
|
|
|
|
20B25DA6000
|
unkown
|
page read and write
|
|
|
|
2749098B000
|
unkown
|
page read and write
|
|
|
|
2A2A6ED0000
|
unkown
|
page readonly
|
|
|
|
1B8111D0000
|
unkown
|
page readonly
|
|
|
|
7FF5DA4CD000
|
unkown
|
page readonly
|
|
|
|
182C146A000
|
unkown
|
page read and write
|
|
|
|
7FF583156000
|
unkown
|
page readonly
|
|
|
|
7FF5DA127000
|
unkown
|
page readonly
|
|
|
|
26F8000
|
unkown
|
page read and write
|
|
|
|
2372000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8EC000
|
unkown
|
page readonly
|
|
|
|
7FF5CDA1D000
|
unkown
|
page readonly
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4A4000
|
unkown
|
page readonly
|
|
|
|
20B25D5A000
|
unkown
|
page read and write
|
|
|
|
1E715640000
|
heap private
|
page read and write
|
|
|
|
7FF548692000
|
unkown
|
page readonly
|
|
|
|
B3F637F000
|
unkown
|
page read and write
|
|
|
|
7FF5CDA91000
|
unkown
|
page readonly
|
|
|
|
7FF58347A000
|
unkown
|
page readonly
|
|
|
|
A3BCEFE000
|
unkown
|
page read and write
|
|
|
|
7506E7B000
|
unkown
|
page read and write
|
|
|
|
7FF5833C7000
|
unkown
|
page readonly
|
|
|
|
7FF5DA2A9000
|
unkown
|
page readonly
|
|
|
|
26643AD0000
|
unkown
|
page write copy
|
|
|
|
2A2A7600000
|
unkown
|
page readonly
|
|
|
|
20B25455000
|
unkown
|
page read and write
|
|
|
|
274909E6000
|
unkown
|
page read and write
|
|
|
|
F8E437F000
|
unkown
|
page read and write
|
|
|
|
20B25DA6000
|
unkown
|
page read and write
|
|
|
|
A98BA7E000
|
unkown
|
page read and write
|
|
|
|
20B254E1000
|
unkown
|
page read and write
|
|
|
|
7FF5DA541000
|
unkown
|
page readonly
|
|
|
|
7506F7D000
|
unkown
|
page read and write
|
|
|
|
228A000
|
unkown
|
page readonly
|
|
|
|
2A2A6B50000
|
heap private
|
page read and write
|
|
|
|
20B25413000
|
unkown
|
page read and write
|
|
|
|
20B25BE0000
|
unkown
|
page readonly
|
|
|
|
F8E40FB000
|
unkown
|
page read and write
|
|
|
|
7FF54859E000
|
unkown
|
page readonly
|
|
|
|
7FF594734000
|
unkown
|
page readonly
|
|
|
|
7FF5833E4000
|
unkown
|
page readonly
|
|
|
|
7FF5483E1000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A91000
|
unkown
|
page readonly
|
|
|
|
750697E000
|
unkown
|
page read and write
|
|
|
|
7FF5DA49A000
|
unkown
|
page readonly
|
|
|
|
7FF5CD65C000
|
unkown
|
page readonly
|
|
|
|
7FF5485A5000
|
unkown
|
page readonly
|
|
|
|
39C37FF000
|
unkown
|
page read and write
|
|
|
|
7FF5CD99A000
|
unkown
|
page readonly
|
|
|
|
1E715913000
|
unkown
|
page read and write
|
|
|
|
7FF5C5ACA000
|
unkown
|
page readonly
|
|
|
|
7FF5C5B4E000
|
unkown
|
page readonly
|
|
|
|
81C69FC000
|
unkown
|
page read and write
|
|
|
|
7FF5C5983000
|
unkown
|
page readonly
|
|
|
|
7FF57618E000
|
unkown
|
page readonly
|
|
|
|
27490D42000
|
unkown
|
page read and write
|
|
|
|
2ED0C04E000
|
unkown
|
page read and write
|
|
|
|
7FF54859A000
|
unkown
|
page readonly
|
|
|
|
7FF548691000
|
unkown
|
page readonly
|
|
|
|
2351000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A1E000
|
unkown
|
page readonly
|
|
|
|
7FF5485D7000
|
unkown
|
page readonly
|
|
|
|
20B256D0000
|
unkown
|
page readonly
|
|
|
|
7FF582CE3000
|
unkown
|
page readonly
|
|
|
|
7FF5AF80D000
|
unkown
|
page readonly
|
|
|
|
7FF5485E4000
|
unkown
|
page readonly
|
|
|
|
20B25516000
|
unkown
|
page read and write
|
|
|
|
7FF54868A000
|
unkown
|
page readonly
|
|
|
|
7FF575EEB000
|
unkown
|
page readonly
|
|
|
|
29D66C13000
|
unkown
|
page read and write
|
|
|
|
7FF5AF640000
|
unkown
|
page readonly
|
|
|
|
20B2544C000
|
unkown
|
page read and write
|
|
|
|
20B25DA5000
|
unkown
|
page read and write
|
|
|
|
274903A0000
|
unkown
|
page read and write
|
|
|
|
2663000
|
unkown
|
page readonly
|
|
|
|
20B25D5C000
|
unkown
|
page read and write
|
|
|
|
7FF59473A000
|
unkown
|
page readonly
|
|
|
|
22C0000
|
unkown
|
page readonly
|
|
|
|
20B25DB5000
|
unkown
|
page read and write
|
|
|
|
7FF5B4879000
|
unkown
|
page readonly
|
|
|
|
2D90000
|
unkown
|
page readonly
|
|
|
|
7FF5DA4C6000
|
unkown
|
page readonly
|
|
|
|
7FF548542000
|
unkown
|
page readonly
|
|
|
|
7FF5AF9A4000
|
unkown
|
page readonly
|
|
|
|
22E3000
|
unkown
|
page readonly
|
|
|
|
7FF5485FE000
|
unkown
|
page readonly
|
|
|
|
26643829000
|
unkown
|
page read and write
|
|
|
|
1B810F55000
|
heap private
|
page read and write
|
|
|
|
7FF582C92000
|
unkown
|
page readonly
|
|
|
|
22EF000
|
unkown
|
page readonly
|
|
|
|
7FF5760D0000
|
unkown
|
page readonly
|
|
|
|
20B25DB5000
|
unkown
|
page read and write
|
|
|
|
27490D42000
|
unkown
|
page read and write
|
|
|
|
7FF583395000
|
unkown
|
page readonly
|
|
|
|
7FF5483C5000
|
unkown
|
page readonly
|
|
|
|
20B25D57000
|
unkown
|
page read and write
|
|
|
|
20B2545A000
|
unkown
|
page read and write
|
|
|
|
2A30000
|
heap default
|
page read and write
|
|
|
|
7FF54853C000
|
unkown
|
page readonly
|
|
|
|
7FF575F51000
|
unkown
|
page readonly
|
|
|
|
1E71586F000
|
unkown
|
page read and write
|
|
|
|
20B254D6000
|
unkown
|
page read and write
|
|
|
|
1E715780000
|
unkown
|
page write copy
|
|
|
|
7FF5AF0CB000
|
unkown
|
page readonly
|
|
|
|
7FF5833BC000
|
unkown
|
page readonly
|
|
|
|
9E50AFA000
|
unkown
|
page read and write
|
|
|
|
1E715873000
|
unkown
|
page read and write
|
|
|
|
27490A50000
|
unkown
|
page read and write
|
|
|
|
2748EB14000
|
unkown
|
page read and write
|
|
|
|
7FF5CDA8A000
|
unkown
|
page readonly
|
|
|
|
39C36FE000
|
unkown
|
page read and write
|
|
|
|
7FF5B491B000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8BE000
|
unkown
|
page readonly
|
|
|
|
7FF58339B000
|
unkown
|
page readonly
|
|
|
|
7FF576174000
|
unkown
|
page readonly
|
|
|
|
1E715855000
|
unkown
|
page read and write
|
|
|
|
7FF5CD66A000
|
unkown
|
page readonly
|
|
|
|
7FF5DA271000
|
unkown
|
page readonly
|
|
|
|
7FF54849B000
|
unkown
|
page readonly
|
|
|
|
7FF583390000
|
unkown
|
page readonly
|
|
|
|
2ED0CD40000
|
unkown
|
page readonly
|
|
|
|
7FF5B4B11000
|
unkown
|
page readonly
|
|
|
|
7FF583271000
|
unkown
|
page readonly
|
|
|
|
7FF54835B000
|
unkown
|
page readonly
|
|
|
|
20B25D55000
|
unkown
|
page read and write
|
|
|
|
27490A60000
|
unkown
|
page read and write
|
|
|
|
20B25D68000
|
unkown
|
page read and write
|
|
|
|
7FF5AF936000
|
unkown
|
page readonly
|
|
|
|
27491010000
|
unkown
|
page read and write
|
|
|
|
7FF5C52EB000
|
unkown
|
page readonly
|
|
|
|
20B26202000
|
unkown
|
page read and write
|
|
|
|
2355000
|
unkown
|
page readonly
|
|
|
|
1E71586B000
|
unkown
|
page read and write
|
|
|
|
20B25D32000
|
unkown
|
page read and write
|
|
|
|
7FF5AF824000
|
unkown
|
page readonly
|
|
|
|
22DF000
|
unkown
|
page readonly
|
|
|
|
7FF5CD8A8000
|
unkown
|
page readonly
|
|
|
|
750707B000
|
unkown
|
page read and write
|
|
|
|
7FF5C5BD2000
|
unkown
|
page readonly
|
|
|
|
20B25D48000
|
unkown
|
page read and write
|
|
|
|
7FF548574000
|
unkown
|
page readonly
|
|
|
|
182C1600000
|
unkown
|
page readonly
|
|
|
|
29D686E0000
|
unkown
|
page read and write
|
|
|
|
263A000
|
unkown
|
page readonly
|
|
|
|
A3BCF7E000
|
unkown
|
page read and write
|
|
|
|
7FF5CDA16000
|
unkown
|
page readonly
|
|
|
|
7FF5B49C0000
|
unkown
|
page readonly
|
|
|
|
2ED0C050000
|
unkown
|
page read and write
|
|
|
|
7FF5DA4BE000
|
unkown
|
page readonly
|
|
|
|
20B26202000
|
unkown
|
page read and write
|
|
|
|
2748EAF3000
|
unkown
|
page read and write
|
|
|
|
2748EA13000
|
unkown
|
page read and write
|
|
|
|
7506BFA000
|
unkown
|
page read and write
|
|
|
|
7FF58328B000
|
unkown
|
page readonly
|
|
|
|
20B25DC0000
|
unkown
|
page read and write
|
|
|
|
2A2A6D02000
|
unkown
|
page read and write
|
|
|
|
7FF594769000
|
unkown
|
page readonly
|
|
|
|
2AB0000
|
heap default
|
page read and write
|
|
|
|
7FF5CDA19000
|
unkown
|
page readonly
|
|
|
|
8AF19FA000
|
unkown
|
page read and write
|
|
|
|
A98B7F7000
|
unkown
|
page read and write
|
|
|
|
20B254E3000
|
unkown
|
page read and write
|
|
|
|
27490C84000
|
unkown
|
page read and write
|
|
|
|
7FF548481000
|
unkown
|
page readonly
|
|
|
|
182C1270000
|
heap default
|
page read and write
|
|
|
|
20B25D21000
|
unkown
|
page read and write
|
|
|
|
7FF5831D1000
|
unkown
|
page readonly
|
|
|
|
1B811090000
|
unkown
|
page read and write
|
|
|
|
20B25D56000
|
unkown
|
page read and write
|
|
|
|
20B25D63000
|
unkown
|
page read and write
|
|
|
|
7FF5C5A33000
|
unkown
|
page readonly
|
|
|
|
1E715800000
|
unkown
|
page read and write
|
|
|
|
20B25D32000
|
unkown
|
page read and write
|
|
|
|
7FF5831C4000
|
unkown
|
page readonly
|
|
|
|
2ED0C2D0000
|
unkown
|
page readonly
|
|
|
|
20B2628E000
|
unkown
|
page read and write
|
|
|
|
7FF576135000
|
unkown
|
page readonly
|
|
|
|
7FF5C5860000
|
unkown
|
page readonly
|
|
|
|
7506A79000
|
unkown
|
page read and write
|
|
|
|
7FF5CD942000
|
unkown
|
page readonly
|
|
|
|
2748EAD2000
|
unkown
|
page read and write
|
|
|
|
7FF548366000
|
unkown
|
page readonly
|
|
|
|
2748EB02000
|
unkown
|
page read and write
|
|
|
|
20B2545B000
|
unkown
|
page read and write
|
|
|
|
B3F62FE000
|
unkown
|
page read and write
|
|
|
|
F8E417E000
|
unkown
|
page read and write
|
|
|
|
20B25D4A000
|
unkown
|
page read and write
|
|
|
|
2748EA81000
|
unkown
|
page read and write
|
|
|
|
7FF5833F8000
|
unkown
|
page readonly
|
|
|
|
27490987000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A99000
|
unkown
|
page readonly
|
|
|
|
2A2A6C13000
|
unkown
|
page read and write
|
|
|
|
39C387C000
|
unkown
|
page read and write
|
|
|
|
7FF548616000
|
unkown
|
page readonly
|
|
|
|
1E715839000
|
unkown
|
page read and write
|
|
|
|
20B25DD6000
|
unkown
|
page read and write
|
|
|
|
2CA0000
|
unkown
|
page readonly
|
|
|
|
20B25D60000
|
unkown
|
page read and write
|
|
|
|
43A0000
|
unkown
|
page readonly
|
|
|
|
7FF5D9CAD000
|
unkown
|
page readonly
|
|
|
|
7FF5AF93D000
|
unkown
|
page readonly
|
|
|
|
26645740000
|
unkown
|
page read and write
|
|
|
|
7FF5AF91F000
|
unkown
|
page readonly
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
7FF57613B000
|
unkown
|
page readonly
|
|
|
|
29FC000
|
unkown
|
page read and write
|
|
|
|
7FF5483D6000
|
unkown
|
page readonly
|
|
|
|
7FF548563000
|
unkown
|
page readonly
|
|
|
|
7FF582F56000
|
unkown
|
page readonly
|
|
|
|
27490A80000
|
unkown
|
page readonly
|
|
|
|
7FF5DA3F2000
|
unkown
|
page readonly
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
7FF575DFF000
|
unkown
|
page readonly
|
|
|
|
7FF5C59DE000
|
unkown
|
page readonly
|
|
|
|
26F4000
|
unkown
|
page read and write
|
|
|
|
20B2623C000
|
unkown
|
page read and write
|
|
|
|
7FF5C5A44000
|
unkown
|
page readonly
|
|
|
|
2ED0C03C000
|
unkown
|
page read and write
|
|
|
|
20B25E00000
|
unkown
|
page readonly
|
|
|
|
26643790000
|
heap private
|
page read and write
|
|
|
|
7FF582CE7000
|
unkown
|
page readonly
|
|
|
|
2383000
|
unkown
|
page readonly
|
|
|
|
2ED1000
|
heap default
|
page read and write
|
|
|
|
7FF5DA275000
|
unkown
|
page readonly
|
|
|
|
7506D79000
|
unkown
|
page read and write
|
|
|
|
7FF547EA2000
|
unkown
|
page readonly
|
|
|
|
7FF5AF9B2000
|
unkown
|
page readonly
|
|
|
|
2A2A6BD0000
|
unkown
|
page readonly
|
|
|
|
20B25600000
|
unkown
|
page readonly
|
|
|
|
27491110000
|
unkown
|
page read and write
|
|
|
|
1E715829000
|
unkown
|
page read and write
|
|
|
|
A98B4FE000
|
unkown
|
page read and write
|
|
|
|
20B254BE000
|
unkown
|
page read and write
|
|
|
|
20B25DA6000
|
unkown
|
page read and write
|
|
|
|
29D687E0000
|
unkown
|
page readonly
|
|
|
|
7FF5B4845000
|
unkown
|
page readonly
|
|
|
|
8AF1AFF000
|
unkown
|
page read and write
|
|
|
|
2AD1000
|
heap default
|
page read and write
|
|
|
|
1B8110C0000
|
heap default
|
page read and write
|
|
|
|
20B25D48000
|
unkown
|
page read and write
|
|
|
|
7FF5AF7A1000
|
unkown
|
page readonly
|
|
|
|
7FF5CD7C5000
|
unkown
|
page readonly
|
|
|
|
7FF5C5857000
|
unkown
|
page readonly
|
|
|
|
27490951000
|
unkown
|
page read and write
|
|
|
|
27490C43000
|
unkown
|
page read and write
|
|
|
|
7FF58337C000
|
unkown
|
page readonly
|
|
|
|
20B25D3A000
|
unkown
|
page read and write
|
|
|
|
7FF548684000
|
unkown
|
page readonly
|
|
|
|
7FF5AF7BB000
|
unkown
|
page readonly
|
|
|
|
7FF59471F000
|
unkown
|
page readonly
|
|
|
|
2E10000
|
heap default
|
page read and write
|
|
|
|
26B6000
|
unkown
|
page readonly
|
|
|
|
20B25DA5000
|
unkown
|
page read and write
|
|
|
|
2748EAC2000
|
unkown
|
page read and write
|
|
|
|
7FF58328E000
|
unkown
|
page readonly
|
|
|
|
7FF5AF92E000
|
unkown
|
page readonly
|
|
|
|
29D67120000
|
unkown
|
page readonly
|
|
|
|
29D66BF0000
|
heap default
|
page read and write
|
|
|
|
2749094E000
|
unkown
|
page read and write
|
|
|
|
2560000
|
unkown
|
page readonly
|
|
|
|
1B8111E0000
|
unkown
|
page readonly
|
|
|
|
20B25DC1000
|
unkown
|
page read and write
|
|
|
|
27491510000
|
unkown
|
page read and write
|
|
|
|
265C000
|
unkown
|
page readonly
|
|
|
|
7FF582F65000
|
unkown
|
page readonly
|
|
|
|
7FF5946F0000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A96000
|
unkown
|
page readonly
|
|
|
|
274904A0000
|
unkown
|
page readonly
|
|
|
|
2748EB1C000
|
unkown
|
page read and write
|
|
|
|
7FF576011000
|
unkown
|
page readonly
|
|
|
|
7FF57619E000
|
unkown
|
page readonly
|
|
|
|
2633000
|
unkown
|
page readonly
|
|
|
|
7506DFB000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A64000
|
unkown
|
page readonly
|
|
|
|
20B25D73000
|
unkown
|
page read and write
|
|
|
|
22DD000
|
unkown
|
page readonly
|
|
|
|
20B25DC0000
|
unkown
|
page read and write
|
|
|
|
7FF582F50000
|
unkown
|
page readonly
|
|
|
|
7FF548611000
|
unkown
|
page readonly
|
|
|
|
2748EB5D000
|
unkown
|
page read and write
|
|
|
|
7FF5CD9EA000
|
unkown
|
page readonly
|
|
|
|
7FF5C5B24000
|
unkown
|
page readonly
|
|
|
|
7FF57617A000
|
unkown
|
page readonly
|
|
|
|
1B8110CD000
|
heap default
|
page read and write
|
|
|
|
20B25DA6000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A25000
|
unkown
|
page readonly
|
|
|
|
2ED0C071000
|
unkown
|
page read and write
|
|
|
|
7FF594043000
|
unkown
|
page readonly
|
|
|
|
20B25340000
|
heap private
|
page read and write
|
|
|
|
2FB0000
|
unkown
|
page readonly
|
|
|
|
7FF5CD9D8000
|
unkown
|
page readonly
|
|
|
|
7FF5C5AF7000
|
unkown
|
page readonly
|
|
|
|
262C000
|
unkown
|
page readonly
|
|
|
|
7FF5DA4AE000
|
unkown
|
page readonly
|
|
|
|
7506FFB000
|
unkown
|
page read and write
|
|
|
|
7FF5761A9000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A8E000
|
unkown
|
page readonly
|
|
|
|
27490966000
|
unkown
|
page read and write
|
|
|
|
7FF576033000
|
unkown
|
page readonly
|
|
|
|
20B25B50000
|
unkown
|
page write copy
|
|
|
|
27491110000
|
unkown
|
page read and write
|
|
|
|
20B25D62000
|
unkown
|
page read and write
|
|
|
|
2ED0C100000
|
unkown
|
page read and write
|
|
|
|
26643A00000
|
unkown
|
page readonly
|
|
|
|
274907E0000
|
unkown
|
page readonly
|
|
|
|
2748E890000
|
unkown
|
page readonly
|
|
|
|
2748EA3F000
|
unkown
|
page read and write
|
|
|
|
1B8110D1000
|
unkown
|
page read and write
|
|
|
|
7FF59476D000
|
unkown
|
page readonly
|
|
|
|
20B26202000
|
unkown
|
page read and write
|
|
|
|
182C1400000
|
unkown
|
page read and write
|
|
|
|
7FF575EF6000
|
unkown
|
page readonly
|
|
|
|
2ED0C108000
|
unkown
|
page read and write
|
|
|
|
7FF58335F000
|
unkown
|
page readonly
|
|
|
|
7FF5CD940000
|
unkown
|
page readonly
|
|
|
|
27490910000
|
unkown
|
page read and write
|
|
|
|
7FF594047000
|
unkown
|
page readonly
|
|
|
|
7FF5CD9CC000
|
unkown
|
page readonly
|
|
|
|
274909F4000
|
unkown
|
page read and write
|
|
|
|
7FF5B427D000
|
unkown
|
page readonly
|
|
|
|
269F000
|
unkown
|
page readonly
|
|
|
|
26BB000
|
unkown
|
page readonly
|
|
|
|
20B254A9000
|
unkown
|
page read and write
|
|
|
|
7FF5CD7C1000
|
unkown
|
page readonly
|
|
|
|
75069FA000
|
unkown
|
page read and write
|
|
|
|
39C367F000
|
unkown
|
page read and write
|
|
|
|
7FF575DFA000
|
unkown
|
page readonly
|
|
|
|
2BCD000
|
unkown
|
page read and write
|
|
|
|
2A2A6C2A000
|
unkown
|
page read and write
|
|
|
|
7FF5CD8A3000
|
unkown
|
page readonly
|
|
|
|
1B810F50000
|
heap private
|
page read and write
|
|
|
|
20B25D3E000
|
unkown
|
page read and write
|
|
|
|
7FF5833EF000
|
unkown
|
page readonly
|
|
|
|
20B25D53000
|
unkown
|
page read and write
|
|
|
|
2687000
|
unkown
|
page readonly
|
|
|
|
27491310000
|
unkown
|
page read and write
|
|
|
|
26643900000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8C5000
|
unkown
|
page readonly
|
|
|
|
20B25D68000
|
unkown
|
page read and write
|
|
|
|
7FF5CD9CF000
|
unkown
|
page readonly
|
|
|
|
7FF548102000
|
unkown
|
page readonly
|
|
|
|
7FF5483C1000
|
unkown
|
page readonly
|
|
|
|
1B8110EF000
|
unkown
|
page read and write
|
|
|
|
9E509FC000
|
unkown
|
page read and write
|
|
|
|
7FF5761A1000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A37000
|
unkown
|
page readonly
|
|
|
|
7FF5C5B34000
|
unkown
|
page readonly
|
|
|
|
7FF59474E000
|
unkown
|
page readonly
|
|
|
|
7FF5832DD000
|
unkown
|
page readonly
|
|
|
|
20B254FB000
|
unkown
|
page read and write
|
|
|
|
27491310000
|
unkown
|
page read and write
|
|
|
|
182C1440000
|
unkown
|
page read and write
|
|
|
|
7FF5485CF000
|
unkown
|
page readonly
|
|
|
|
1E71586B000
|
unkown
|
page read and write
|
|
|
|
7FF5B4B12000
|
unkown
|
page readonly
|
|
|
|
20B25513000
|
unkown
|
page read and write
|
|
|
|
7FF583481000
|
unkown
|
page readonly
|
|
|
|
81C657F000
|
unkown
|
page read and write
|
|
|
|
20B25508000
|
unkown
|
page read and write
|
|
|
|
20B26202000
|
unkown
|
page read and write
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
20B25489000
|
unkown
|
page read and write
|
|
|
|
20B25456000
|
unkown
|
page read and write
|
|
|
|
7FF5C5B2A000
|
unkown
|
page readonly
|
|
|
|
7FF5B47E6000
|
unkown
|
page readonly
|
|
|
|
182C146C000
|
unkown
|
page read and write
|
|
|
|
7FF5B4A20000
|
unkown
|
page readonly
|
|
|
|
269A000
|
unkown
|
page readonly
|
|
|
|
7FF5C5B0C000
|
unkown
|
page readonly
|
|
|
|
7FF5DA542000
|
unkown
|
page readonly
|
|
|
|
1E7156B0000
|
unkown
|
page readonly
|
|
|
|
2A2A7402000
|
unkown
|
page read and write
|
|
|
|
20B25D73000
|
unkown
|
page read and write
|
|
|
|
2ED0C113000
|
unkown
|
page read and write
|
|
|
|
7FF5CDA92000
|
unkown
|
page readonly
|
|
|
|
182C146C000
|
unkown
|
page read and write
|
|
|
|
B3F5FEB000
|
unkown
|
page read and write
|
|
|
|
7FF5CD677000
|
unkown
|
page readonly
|
|
|
|
81C68F9000
|
unkown
|
page read and write
|
|
|
|
20B25DD6000
|
unkown
|
page read and write
|
|
|
|
7FF5485EA000
|
unkown
|
page readonly
|
|
|
|
7FF5DA353000
|
unkown
|
page readonly
|
|
|
|
27490E02000
|
unkown
|
page read and write
|
|
|
|
7FF5B47DB000
|
unkown
|
page readonly
|
|
|
|
7FF5B4923000
|
unkown
|
page readonly
|
|
|
|
2ED0BFC0000
|
unkown
|
page readonly
|
|
|
|
2A2A6C84000
|
unkown
|
page read and write
|
|
|
|
7FF54857F000
|
unkown
|
page readonly
|
|
|
|
27490A50000
|
unkown
|
page read and write
|
|
|
|
20B26202000
|
unkown
|
page read and write
|
|
|
|
20B25D6A000
|
unkown
|
page read and write
|
|
|
|
20B25D95000
|
unkown
|
page read and write
|
|
|
|
20B25D53000
|
unkown
|
page read and write
|
|
|
|
A98B9FE000
|
unkown
|
page read and write
|
|
|
|
7FF583364000
|
unkown
|
page readonly
|
|
|
|
26643913000
|
unkown
|
page read and write
|
|
|
|
2748EAE3000
|
unkown
|
page read and write
|
|
|
|
7FF54856F000
|
unkown
|
page readonly
|
|
|
|
7FF54856B000
|
unkown
|
page readonly
|
|
|
|
7FF5AF9B1000
|
unkown
|
page readonly
|
|
|
|
A3BD4FD000
|
unkown
|
page read and write
|
|
|
|
7FF54826F000
|
unkown
|
page readonly
|
|
|
|
22BC000
|
unkown
|
page readonly
|
|
|
|
7FF582EFE000
|
unkown
|
page readonly
|
|
|
|
20B25DA6000
|
unkown
|
page read and write
|
|
|
|
20B254A6000
|
unkown
|
page read and write
|
|
|
|
1B8110E5000
|
unkown
|
page read and write
|
|
|
|
7FF5833BF000
|
unkown
|
page readonly
|
|
|
|
7FF5C5B17000
|
unkown
|
page readonly
|
|
|
|
26643802000
|
unkown
|
page read and write
|
|
|
|
7FF5C5B5D000
|
unkown
|
page readonly
|
|
|
|
7FF548378000
|
unkown
|
page readonly
|
|
|
|
7FF5761AD000
|
unkown
|
page readonly
|
|
|
|
20B2639B000
|
unkown
|
page read and write
|
|
|
|
2748EAE6000
|
unkown
|
page read and write
|
|
|
|
20B25DB8000
|
unkown
|
page read and write
|
|
|
|
750727F000
|
unkown
|
page read and write
|
|
|
|
1F7E000
|
unkown
|
page readonly
|
|
|
|
7FF583482000
|
unkown
|
page readonly
|
|
|
|
20B25DA5000
|
unkown
|
page read and write
|
|
|
|
1E715A00000
|
unkown
|
page readonly
|
|
|
|
27490A50000
|
unkown
|
page read and write
|
|
|
|
7FF5AF486000
|
unkown
|
page readonly
|
|
|
|
7FF5C5931000
|
unkown
|
page readonly
|
|
|
|
7FF5AF914000
|
unkown
|
page readonly
|
|
|
|
22EA000
|
unkown
|
page readonly
|
|
|
|
7FF5AF82C000
|
unkown
|
page readonly
|
|
|
|
266C000
|
unkown
|
page readonly
|
|
|
|
1E7171A0000
|
unkown
|
page read and write
|
|
|
|
30C0000
|
heap private
|
page read and write
|
|
|
|
39C33FF000
|
unkown
|
page read and write
|
|
|
|
7FF582EF2000
|
unkown
|
page readonly
|
|
|
|
7FF58335B000
|
unkown
|
page readonly
|
|
|
|
27490802000
|
unkown
|
page read and write
|
|
|
|
7FF575F89000
|
unkown
|
page readonly
|
|
|
|
182C13A0000
|
unkown
|
page readonly
|
|
|
|
7FF5DA44E000
|
unkown
|
page readonly
|
|
|
|
1E7172A0000
|
unkown
|
page readonly
|
|
|
|
7FF582F02000
|
unkown
|
page readonly
|
|
|
|
7FF583190000
|
unkown
|
page readonly
|
|
|
|
2ED0C102000
|
unkown
|
page read and write
|
|
|
|
2748EA29000
|
unkown
|
page read and write
|
|
|
|
7FF5947E2000
|
unkown
|
page readonly
|
|
|
|
27490900000
|
unkown
|
page read and write
|
|
|
|
20B25D31000
|
unkown
|
page read and write
|
|
|
|
7FF582E6E000
|
unkown
|
page readonly
|
|
|
|
7FF583474000
|
unkown
|
page readonly
|
|
|
|
20B25D05000
|
unkown
|
page read and write
|
|
|
|
7FF5AF0C5000
|
unkown
|
page readonly
|
|
|
|
8AF18FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C5B48000
|
unkown
|
page readonly
|
|
|
|
20B25DC0000
|
unkown
|
page read and write
|
|
|
|
1E7157D0000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A4F000
|
unkown
|
page readonly
|
|
|
|
7FF58323A000
|
unkown
|
page readonly
|
|
|
|
81C64FB000
|
unkown
|
page read and write
|
|
|
|
7FF582B95000
|
unkown
|
page readonly
|
|
|
|
7FF5CD881000
|
unkown
|
page readonly
|
|
|
|
2ED0BFD0000
|
unkown
|
page read and write
|
|
|
|
20B25D5A000
|
unkown
|
page read and write
|
|
|
|
2383000
|
unkown
|
page readonly
|
|
|
|
7FF575DEC000
|
unkown
|
page readonly
|
|
|
|
7FF5831E1000
|
unkown
|
page readonly
|
|
There are 961 hidden memdumps, click here to show them.