Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Delivery_Information_7038598.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\sat1_0609_2[1].dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
downloaded
|
||
C:\Users\user\Desktop\~$Delivery_Information_7038598.xlsb
|
data
|
dropped
|
||
C:\Users\user\kdldyeff.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\020EDADF-4CF2-4A17-8391-1EC74C095F72
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\31495E89.png
|
PNG image data, 168 x 72, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\40C82274.png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CCF47EA8.png
|
PNG image data, 288 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E47A0A7F.png
|
PNG image data, 178 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F7C562F6.png
|
PNG image data, 264 x 113, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\8AA40000
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
There are 2 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
||
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\kdldyeff.dll
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
https://ecs.office.com/config/v2/Office
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
http://185.180.199.121/sat1_0609_2.dll
|
185.180.199.121
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://store.officeppe.com/addinstemplate
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://ncus.contentsync.
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://wus2.contentsync.
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
http://ocsp.sectigo.com0
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://templatelogging.office.com/client/log
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://management.azure.com/
|
unknown
|
||
https://login.windows.net/common/oauth2/authorize
|
unknown
|
||
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://graph.windows.net/
|
unknown
|
||
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
||
https://devnull.onenote.com
|
unknown
|
||
https://ncus.pagecontentsync.
|
unknown
|
||
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
||
https://messaging.office.com/
|
unknown
|
||
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://augloop.office.com/v2
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
https://skyapi.live.net/Activity/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
||
https://dataservice.o365filtering.com
|
unknown
|
||
https://sectigo.com/CPS0
|
unknown
|
||
https://api.cortana.ai
|
unknown
|
||
https://onedrive.live.com
|
unknown
|
There are 90 hidden URLs, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
185.180.199.121
|
unknown
|
Netherlands
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
3,>
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4,>
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A025
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A6CC
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A92E
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4ABAE
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
x`>
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
There are 52 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
7FF5B7DF4000
|
unkown
|
page readonly
|
||
1D28A761000
|
unkown
|
page read and write
|
||
7FF5B7D54000
|
unkown
|
page readonly
|
||
7FF50AC6A000
|
unkown
|
page readonly
|
||
1D28A761000
|
unkown
|
page read and write
|
||
1D28A744000
|
unkown
|
page read and write
|
||
1A2A2138000
|
unkown
|
page read and write
|
||
4BC0000
|
unkown
|
page read and write
|
||
31CEAFB000
|
unkown
|
page read and write
|
||
7FF4F7614000
|
unkown
|
page readonly
|
||
1A2A20D0000
|
unkown
|
page read and write
|
||
1A2A4402000
|
unkown
|
page read and write
|
||
2B32DC29000
|
unkown
|
page read and write
|
||
7FF4F759B000
|
unkown
|
page readonly
|
||
7FF5CE0D8000
|
unkown
|
page readonly
|
||
288A000
|
unkown
|
page readonly
|
||
1A2A417A000
|
unkown
|
page read and write
|
||
1D28A7AE000
|
unkown
|
page read and write
|
||
1D289ED6000
|
unkown
|
page read and write
|
||
2FF0000
|
unkown
|
page readonly
|
||
7FF5BA199000
|
unkown
|
page readonly
|
||
1A2FB7A000
|
unkown
|
page read and write
|
||
7FF58CF81000
|
unkown
|
page readonly
|
||
1AF9E84E000
|
unkown
|
page read and write
|
||
31CF6FB000
|
unkown
|
page read and write
|
||
7FF4ECC23000
|
unkown
|
page readonly
|
||
7FF5CE0CE000
|
unkown
|
page readonly
|
||
7FF5B7D7E000
|
unkown
|
page readonly
|
||
1D28A759000
|
unkown
|
page read and write
|
||
1AF9E84E000
|
unkown
|
page read and write
|
||
7FF50AC74000
|
unkown
|
page readonly
|
||
7FF4ECCEC000
|
unkown
|
page readonly
|
||
28F1000
|
unkown
|
page readonly
|
||
B0D33AE000
|
unkown
|
page read and write
|
||
1AF9E750000
|
unkown
|
page readonly
|
||
7FF5BA12B000
|
unkown
|
page readonly
|
||
1D28A77E000
|
unkown
|
page read and write
|
||
1A2A5410000
|
unkown
|
page read and write
|
||
2B32DC88000
|
unkown
|
page read and write
|
||
28D5000
|
unkown
|
page readonly
|
||
7FF5B7A87000
|
unkown
|
page readonly
|
||
252F202A000
|
unkown
|
page read and write
|
||
1A2A2128000
|
unkown
|
page read and write
|
||
D841F75000
|
unkown
|
page read and write
|
||
1D28A798000
|
unkown
|
page read and write
|
||
7FF58CC66000
|
unkown
|
page readonly
|
||
7FF5BA174000
|
unkown
|
page readonly
|
||
7FF5BA19D000
|
unkown
|
page readonly
|
||
9F160FE000
|
unkown
|
page read and write
|
||
319A000
|
heap default
|
page read and write
|
||
1D28A755000
|
unkown
|
page read and write
|
||
4F7DC7F000
|
unkown
|
page read and write
|
||
7FF4ECBD1000
|
unkown
|
page readonly
|
||
124E8E51000
|
unkown
|
page read and write
|
||
1D28A789000
|
unkown
|
page read and write
|
||
1AF9E760000
|
unkown
|
page readonly
|
||
1D28A745000
|
unkown
|
page read and write
|
||
7FF4ECD8B000
|
unkown
|
page readonly
|
||
1A2A214B000
|
unkown
|
page read and write
|
||
7FF4EC477000
|
unkown
|
page readonly
|
||
7FF4F7817000
|
unkown
|
page readonly
|
||
4F7D8BA000
|
unkown
|
page read and write
|
||
1A2A41C3000
|
unkown
|
page read and write
|
||
7FF5B7D10000
|
unkown
|
page readonly
|
||
1A2A4442000
|
unkown
|
page read and write
|
||
11CFAA13000
|
unkown
|
page read and write
|
||
11CFA950000
|
unkown
|
page readonly
|
||
1D28A790000
|
unkown
|
page read and write
|
||
2B32DC13000
|
unkown
|
page read and write
|
||
287C000
|
unkown
|
page readonly
|
||
1D28A75E000
|
unkown
|
page read and write
|
||
1D28AC61000
|
unkown
|
page read and write
|
||
1A2A4196000
|
unkown
|
page read and write
|
||
7FF5CDF51000
|
unkown
|
page readonly
|
||
9F15E7E000
|
unkown
|
page read and write
|
||
1A2A1F10000
|
heap default
|
page read and write
|
||
2902000
|
unkown
|
page readonly
|
||
1F48AC28000
|
unkown
|
page read and write
|
||
1D289E3C000
|
unkown
|
page read and write
|
||
1D28A767000
|
unkown
|
page read and write
|
||
7FF58D06F000
|
unkown
|
page readonly
|
||
7FF5DBFFB000
|
unkown
|
page readonly
|
||
1AF9E850000
|
unkown
|
page read and write
|
||
1D28A745000
|
unkown
|
page read and write
|
||
28A5000
|
unkown
|
page readonly
|
||
7FF5B7D1B000
|
unkown
|
page readonly
|
||
1AF9E84E000
|
unkown
|
page read and write
|
||
9F163F9000
|
unkown
|
page read and write
|
||
7FF5DC06D000
|
unkown
|
page readonly
|
||
67290000
|
unkown image
|
page readonly
|
||
1D28A761000
|
unkown
|
page read and write
|
||
1D28A4B0000
|
unkown
|
page write copy
|
||
90BB0FE000
|
unkown
|
page read and write
|
||
2B32DC50000
|
unkown
|
page read and write
|
||
7FF5DC0D4000
|
unkown
|
page readonly
|
||
31CE53F000
|
unkown
|
page read and write
|
||
1A2A4137000
|
unkown
|
page read and write
|
||
1D28A520000
|
unkown
|
page readonly
|
||
7FF5CE15A000
|
unkown
|
page readonly
|
||
1A2A2072000
|
unkown
|
page read and write
|
||
1D28A76D000
|
unkown
|
page read and write
|
||
1A2A1EB0000
|
heap private
|
page read and write
|
||
7FF5B740D000
|
unkown
|
page readonly
|
||
1A2A2097000
|
unkown
|
page read and write
|
||
7FF5BA204000
|
unkown
|
page readonly
|
||
1D28A76C000
|
unkown
|
page read and write
|
||
1A2A4288000
|
unkown
|
page read and write
|
||
1D28A78B000
|
unkown
|
page read and write
|
||
7FF5CE09C000
|
unkown
|
page readonly
|
||
7FF50AC20000
|
unkown
|
page readonly
|
||
7FF4F7824000
|
unkown
|
page readonly
|
||
1A2A2081000
|
unkown
|
page read and write
|
||
1A2A41DB000
|
unkown
|
page read and write
|
||
7FF4ECDE8000
|
unkown
|
page readonly
|
||
7FF4F73B9000
|
unkown
|
page readonly
|
||
1D28A520000
|
unkown
|
page read and write
|
||
1A2F87E000
|
unkown
|
page read and write
|
||
2B32DD13000
|
unkown
|
page read and write
|
||
11CFAC00000
|
unkown
|
page readonly
|
||
1D28A7AD000
|
unkown
|
page read and write
|
||
1D289DF0000
|
unkown
|
page readonly
|
||
252F2200000
|
unkown
|
page readonly
|
||
11CFAA6F000
|
unkown
|
page read and write
|
||
31CEA7F000
|
unkown
|
page read and write
|
||
7FF4ECDFD000
|
unkown
|
page readonly
|
||
7FF50AC1E000
|
unkown
|
page readonly
|
||
7FF4ECE71000
|
unkown
|
page readonly
|
||
1D28A460000
|
unkown
|
page read and write
|
||
7FF5DC069000
|
unkown
|
page readonly
|
||
7FF50AC9D000
|
unkown
|
page readonly
|
||
7FF4F782A000
|
unkown
|
page readonly
|
||
1D289EC5000
|
unkown
|
page read and write
|
||
252F1F90000
|
heap default
|
page read and write
|
||
1A2A3EE0000
|
unkown
|
page read and write
|
||
11CFA880000
|
unkown
|
page readonly
|
||
1D28A510000
|
unkown
|
page readonly
|
||
7FF5B7D89000
|
unkown
|
page readonly
|
||
1A2A20FD000
|
unkown
|
page read and write
|
||
7FF4ECDDF000
|
unkown
|
page readonly
|
||
31CF7FE000
|
unkown
|
page read and write
|
||
7FF5DBD6F000
|
unkown
|
page readonly
|
||
7FF58CC75000
|
unkown
|
page readonly
|
||
7FF4F7605000
|
unkown
|
page readonly
|
||
2B32DC7B000
|
unkown
|
page read and write
|
||
1A2A203F000
|
unkown
|
page read and write
|
||
1D289DE0000
|
unkown
|
page readonly
|
||
1D289EF1000
|
unkown
|
page read and write
|
||
7FF50AC0A000
|
unkown
|
page readonly
|
||
7FF5B7B61000
|
unkown
|
page readonly
|
||
1A2A2169000
|
unkown
|
page read and write
|
||
1D28A769000
|
unkown
|
page read and write
|
||
3190000
|
heap default
|
page read and write
|
||
1A2A4382000
|
unkown
|
page read and write
|
||
7FF58CE5B000
|
unkown
|
page readonly
|
||
1D28A769000
|
unkown
|
page read and write
|
||
2972000
|
unkown
|
page readonly
|
||
7FF5CDE95000
|
unkown
|
page readonly
|
||
28C9000
|
unkown
|
page readonly
|
||
7FF4F7834000
|
unkown
|
page readonly
|
||
1F48AC00000
|
unkown
|
page read and write
|
||
7FF5CE06A000
|
unkown
|
page readonly
|
||
7FF5B7CFA000
|
unkown
|
page readonly
|
||
1D28A746000
|
unkown
|
page read and write
|
||
27B0000
|
unkown
|
page readonly
|
||
2B32DC52000
|
unkown
|
page read and write
|
||
1A2A20AA000
|
unkown
|
page read and write
|
||
1A2A4300000
|
unkown
|
page read and write
|
||
2B32DE00000
|
unkown
|
page readonly
|
||
9F16678000
|
unkown
|
page read and write
|
||
7FF5CE0BA000
|
unkown
|
page readonly
|
||
1A2A2013000
|
unkown
|
page read and write
|
||
7FF50AD11000
|
unkown
|
page readonly
|
||
1D28A74D000
|
unkown
|
page read and write
|
||
1D28A520000
|
unkown
|
page read and write
|
||
1AF9E850000
|
unkown
|
page read and write
|
||
7FF4F70E1000
|
unkown
|
page readonly
|
||
7FF5CDD2C000
|
unkown
|
page readonly
|
||
1A2A4302000
|
unkown
|
page read and write
|
||
1A2A1F20000
|
unkown
|
page readonly
|
||
7FF5CE0DE000
|
unkown
|
page readonly
|
||
1D28A745000
|
unkown
|
page read and write
|
||
1D28A77C000
|
unkown
|
page read and write
|
||
1D28A796000
|
unkown
|
page read and write
|
||
2B32DC4A000
|
unkown
|
page read and write
|
||
124EA7A0000
|
unkown
|
page read and write
|
||
124E9000000
|
unkown
|
page readonly
|
||
7FF4F7041000
|
unkown
|
page readonly
|
||
7FF58CF9E000
|
unkown
|
page readonly
|
||
1F48AC13000
|
unkown
|
page read and write
|
||
11CFA810000
|
heap private
|
page read and write
|
||
1A2A4213000
|
unkown
|
page read and write
|
||
1D28A798000
|
unkown
|
page read and write
|
||
1D28AC00000
|
unkown
|
page read and write
|
||
7FF5BA16A000
|
unkown
|
page readonly
|
||
1D28A77E000
|
unkown
|
page read and write
|
||
7FF4ECE72000
|
unkown
|
page readonly
|
||
7FF58CC60000
|
unkown
|
page readonly
|
||
7FF50AA71000
|
unkown
|
page readonly
|
||
1A2A5310000
|
unkown
|
page read and write
|
||
31CECFB000
|
unkown
|
page read and write
|
||
7FF4ECE6A000
|
unkown
|
page readonly
|
||
252F2066000
|
unkown
|
page read and write
|
||
1AF9E831000
|
unkown
|
page read and write
|
||
7FF4ECCE4000
|
unkown
|
page readonly
|
||
1D28AC02000
|
unkown
|
page read and write
|
||
11CFAB02000
|
unkown
|
page read and write
|
||
7FF4F7342000
|
unkown
|
page readonly
|
||
1A2A3F00000
|
unkown
|
page read and write
|
||
7FF4ECC7B000
|
unkown
|
page readonly
|
||
1D28A745000
|
unkown
|
page read and write
|
||
2B32DBD0000
|
unkown
|
page readonly
|
||
1A2A3F20000
|
unkown
|
page readonly
|
||
252F2802000
|
unkown
|
page read and write
|
||
7FF4F77F7000
|
unkown
|
page readonly
|
||
7FF5DBFF0000
|
unkown
|
page readonly
|
||
7FF58D074000
|
unkown
|
page readonly
|
||
7FF5CE0A8000
|
unkown
|
page readonly
|
||
1AF9E820000
|
heap default
|
page read and write
|
||
1D28A76C000
|
unkown
|
page read and write
|
||
28BC000
|
unkown
|
page readonly
|
||
1A2F56B000
|
unkown
|
page read and write
|
||
11CFB060000
|
unkown
|
page readonly
|
||
1A2A418E000
|
unkown
|
page read and write
|
||
7FF4F77AF000
|
unkown
|
page readonly
|
||
1AF9E700000
|
unkown
|
page read and write
|
||
1D28A520000
|
unkown
|
page read and write
|
||
252F203C000
|
unkown
|
page read and write
|
||
1D289D00000
|
heap default
|
page read and write
|
||
1D289EA2000
|
unkown
|
page read and write
|
||
1D28A756000
|
unkown
|
page read and write
|
||
1D28A76E000
|
unkown
|
page read and write
|
||
7FF4F77B4000
|
unkown
|
page readonly
|
||
7FF4ECDD4000
|
unkown
|
page readonly
|
||
1D28A769000
|
unkown
|
page read and write
|
||
1D28A745000
|
unkown
|
page read and write
|
||
31CEEFB000
|
unkown
|
page read and write
|
||
7FF5B9A77000
|
unkown
|
page readonly
|
||
7FF58CC12000
|
unkown
|
page readonly
|
||
252F208B000
|
unkown
|
page read and write
|
||
7FF50AB84000
|
unkown
|
page readonly
|
||
3108000
|
unkown
|
page read and write
|
||
252F22D0000
|
unkown
|
page readonly
|
||
7FF4ECDF9000
|
unkown
|
page readonly
|
||
1D28A742000
|
unkown
|
page read and write
|
||
7FF5B7D86000
|
unkown
|
page readonly
|
||
7FF5CDE36000
|
unkown
|
page readonly
|
||
1A2A4100000
|
unkown
|
page read and write
|
||
7FF58D116000
|
unkown
|
page readonly
|
||
1F48AD15000
|
unkown
|
page read and write
|
||
7FF4ECE64000
|
unkown
|
page readonly
|
||
7FF4F7631000
|
unkown
|
page readonly
|
||
7FF5B79EA000
|
unkown
|
page readonly
|
||
7FF4ECD6A000
|
unkown
|
page readonly
|
||
1D28A713000
|
unkown
|
page read and write
|
||
7FF4F77DE000
|
unkown
|
page readonly
|
||
7FF5CE162000
|
unkown
|
page readonly
|
||
1D28A744000
|
unkown
|
page read and write
|
||
9F161F7000
|
unkown
|
page read and write
|
||
1F48AB30000
|
unkown
|
page readonly
|
||
1A2A2179000
|
unkown
|
page read and write
|
||
7FF4F7772000
|
unkown
|
page readonly
|
||
1A2A428C000
|
unkown
|
page read and write
|
||
1D28A77E000
|
unkown
|
page read and write
|
||
31CE4BB000
|
unkown
|
page read and write
|
||
2964000
|
unkown
|
page readonly
|
||
2B32DC02000
|
unkown
|
page read and write
|
||
31CEDFB000
|
unkown
|
page read and write
|
||
7FF5DC0E2000
|
unkown
|
page readonly
|
||
7FF4ECD7E000
|
unkown
|
page readonly
|
||
7FF4F749C000
|
unkown
|
page readonly
|
||
1D289E56000
|
unkown
|
page read and write
|
||
7FF5BA18E000
|
unkown
|
page readonly
|
||
7FF5B78D6000
|
unkown
|
page readonly
|
||
7FF5DBFDC000
|
unkown
|
page readonly
|
||
31CE87A000
|
unkown
|
page read and write
|
||
7FF58CEF1000
|
unkown
|
page readonly
|
||
1F48AD02000
|
unkown
|
page read and write
|
||
7FF5B7407000
|
unkown
|
page readonly
|
||
124E8E02000
|
unkown
|
page read and write
|
||
7FF4F77BF000
|
unkown
|
page readonly
|
||
D84207B000
|
unkown
|
page read and write
|
||
1A2A20FF000
|
unkown
|
page read and write
|
||
1A2A3EE0000
|
unkown
|
page read and write
|
||
7FF50AC4F000
|
unkown
|
page readonly
|
||
1D28A725000
|
unkown
|
page read and write
|
||
7FF5B99B5000
|
unkown
|
page readonly
|
||
1F48AC02000
|
unkown
|
page read and write
|
||
28D7000
|
unkown
|
page readonly
|
||
7FF58CFA8000
|
unkown
|
page readonly
|
||
7FF5B7D6F000
|
unkown
|
page readonly
|
||
2B32DC72000
|
unkown
|
page read and write
|
||
7FF50AC8E000
|
unkown
|
page readonly
|
||
7FF58CFED000
|
unkown
|
page readonly
|
||
7FF5DBFB3000
|
unkown
|
page readonly
|
||
7FF50AC37000
|
unkown
|
page readonly
|
||
7FF5B7D27000
|
unkown
|
page readonly
|
||
7FF50A7E0000
|
unkown
|
page readonly
|
||
252F2100000
|
unkown
|
page read and write
|
||
7FF50AD04000
|
unkown
|
page readonly
|
||
1D28A744000
|
unkown
|
page read and write
|
||
7FF50A430000
|
unkown
|
page readonly
|
||
7FF50AC25000
|
unkown
|
page readonly
|
||
1D28A7A2000
|
unkown
|
page read and write
|
||
1D28A7AF000
|
unkown
|
page read and write
|
||
1D289EDE000
|
unkown
|
page read and write
|
||
31CF0FB000
|
unkown
|
page read and write
|
||
1A2A418D000
|
unkown
|
page read and write
|
||
90BAD7B000
|
unkown
|
page read and write
|
||
1D289E51000
|
unkown
|
page read and write
|
||
7FF58CED4000
|
unkown
|
page readonly
|
||
90BAB7E000
|
unkown
|
page read and write
|
||
2B32DB60000
|
heap private
|
page read and write
|
||
252F1FC0000
|
unkown
|
page read and write
|
||
1A2FA7A000
|
unkown
|
page read and write
|
||
1D28A750000
|
unkown
|
page read and write
|
||
1A2A4382000
|
unkown
|
page read and write
|
||
1A2A4113000
|
unkown
|
page read and write
|
||
7FF5B7C5D000
|
unkown
|
page readonly
|
||
1D28A77C000
|
unkown
|
page read and write
|
||
7FF5B78D0000
|
unkown
|
page readonly
|
||
2983000
|
unkown
|
page readonly
|
||
1AF9E846000
|
unkown
|
page read and write
|
||
1A2A5310000
|
unkown
|
page read and write
|
||
9F164F7000
|
unkown
|
page read and write
|
||
31CE97E000
|
unkown
|
page read and write
|
||
7FF58D108000
|
unkown
|
page readonly
|
||
1D28A771000
|
unkown
|
page read and write
|
||
7FF58CCB7000
|
unkown
|
page readonly
|
||
1AF9E920000
|
unkown
|
page readonly
|
||
7FF5CDD47000
|
unkown
|
page readonly
|
||
7FF5B7C0E000
|
unkown
|
page readonly
|
||
1F48AD23000
|
unkown
|
page read and write
|
||
31CE5BE000
|
unkown
|
page read and write
|
||
7FF5CDE2B000
|
unkown
|
page readonly
|
||
1D28A78E000
|
unkown
|
page read and write
|
||
2B32DC00000
|
unkown
|
page read and write
|
||
7FF4F78D1000
|
unkown
|
page readonly
|
||
7FF5B7D15000
|
unkown
|
page readonly
|
||
1D28A74D000
|
unkown
|
page read and write
|
||
28EA000
|
unkown
|
page readonly
|
||
1D28A767000
|
unkown
|
page read and write
|
||
7FF5B7DFA000
|
unkown
|
page readonly
|
||
1D28A79B000
|
unkown
|
page read and write
|
||
2906000
|
unkown
|
page readonly
|
||
1A2A4243000
|
unkown
|
page read and write
|
||
1D28A76E000
|
unkown
|
page read and write
|
||
7FF58CFA3000
|
unkown
|
page readonly
|
||
258C000
|
unkown
|
page readonly
|
||
7FF5DC04F000
|
unkown
|
page readonly
|
||
7FF58D004000
|
unkown
|
page readonly
|
||
90BAFFF000
|
unkown
|
page read and write
|
||
7FF5B7C0B000
|
unkown
|
page readonly
|
||
7FF4EC940000
|
unkown
|
page readonly
|
||
7FF5B7D3F000
|
unkown
|
page readonly
|
||
7FF5CE0E9000
|
unkown
|
page readonly
|
||
7FF5CDE91000
|
unkown
|
page readonly
|
||
1A2A20BF000
|
unkown
|
page read and write
|
||
1A2A2029000
|
unkown
|
page read and write
|
||
1A2A3F40000
|
unkown
|
page readonly
|
||
1D28A800000
|
unkown
|
page readonly
|
||
7FF5B7D64000
|
unkown
|
page readonly
|
||
7FF4ECD85000
|
unkown
|
page readonly
|
||
7FF4EC615000
|
unkown
|
page readonly
|
||
7FF4F7780000
|
unkown
|
page readonly
|
||
7FF4F780F000
|
unkown
|
page readonly
|
||
4F7D93F000
|
unkown
|
page read and write
|
||
1AB0B7E000
|
unkown
|
page read and write
|
||
1A2A1FF0000
|
unkown
|
page readonly
|
||
2EF0000
|
unkown
|
page readonly
|
||
252F2002000
|
unkown
|
page read and write
|
||
2983000
|
unkown
|
page readonly
|
||
7FF58CEE1000
|
unkown
|
page readonly
|
||
124E8C20000
|
unkown
|
page readonly
|
||
1D28AC02000
|
unkown
|
page read and write
|
||
252F2113000
|
unkown
|
page read and write
|
||
252F2102000
|
unkown
|
page read and write
|
||
124EA8A0000
|
unkown
|
page readonly
|
||
11CFB202000
|
unkown
|
page read and write
|
||
7FF58D184000
|
unkown
|
page readonly
|
||
7FF4ECC7E000
|
unkown
|
page readonly
|
||
31CEF7C000
|
unkown
|
page read and write
|
||
1D28A602000
|
unkown
|
page read and write
|
||
7FF58C9F7000
|
unkown
|
page readonly
|
||
7FF58D192000
|
unkown
|
page readonly
|
||
11CFAA3C000
|
unkown
|
page read and write
|
||
1D289E70000
|
unkown
|
page read and write
|
||
D841B1C000
|
unkown
|
page read and write
|
||
1D28A78C000
|
unkown
|
page read and write
|
||
7FF5BA212000
|
unkown
|
page readonly
|
||
7FF58D00C000
|
unkown
|
page readonly
|
||
31CF5FB000
|
unkown
|
page read and write
|
||
7FF5CE033000
|
unkown
|
page readonly
|
||
7FF5B7C7C000
|
unkown
|
page readonly
|
||
2B32DC49000
|
unkown
|
page read and write
|
||
7FF5B7D3C000
|
unkown
|
page readonly
|
||
1A2A3F10000
|
unkown
|
page read and write
|
||
7FF50AC64000
|
unkown
|
page readonly
|
||
11CFAB08000
|
unkown
|
page read and write
|
||
7FF50AC7F000
|
unkown
|
page readonly
|
||
252F1F30000
|
heap private
|
page read and write
|
||
25BB000
|
unkown
|
page readonly
|
||
1A2A2000000
|
unkown
|
page read and write
|
||
4F7DDFD000
|
unkown
|
page read and write
|
||
28EF000
|
unkown
|
page readonly
|
||
7FF5BA17E000
|
unkown
|
page readonly
|
||
1D28AC02000
|
unkown
|
page read and write
|
||
7FF5DC03A000
|
unkown
|
page readonly
|
||
31CF2FD000
|
unkown
|
page read and write
|
||
2955000
|
unkown
|
page readonly
|
||
1AF9E847000
|
unkown
|
page read and write
|
||
7FF4ECD6C000
|
unkown
|
page readonly
|
||
7FF58D0CC000
|
unkown
|
page readonly
|
||
7FF5CDD3A000
|
unkown
|
page readonly
|
||
1A2A4200000
|
unkown
|
page read and write
|
||
7FF50AC0C000
|
unkown
|
page readonly
|
||
7FF5BA20A000
|
unkown
|
page readonly
|
||
1D28A000000
|
unkown
|
page readonly
|
||
1D289E4F000
|
unkown
|
page read and write
|
||
7FF50AC2B000
|
unkown
|
page readonly
|
||
7FF58D09A000
|
unkown
|
page readonly
|
||
1A2A216A000
|
unkown
|
page read and write
|
||
1D28A72C000
|
unkown
|
page read and write
|
||
1A2A4400000
|
unkown
|
page read and write
|
||
90BAAFE000
|
unkown
|
page read and write
|
||
7FF4F78C4000
|
unkown
|
page readonly
|
||
7FF50AAC3000
|
unkown
|
page readonly
|
||
1D28A75F000
|
unkown
|
page read and write
|
||
1A2A418C000
|
unkown
|
page read and write
|
||
1F48AAC0000
|
unkown
|
page read and write
|
||
7FF50AC57000
|
unkown
|
page readonly
|
||
1A2A4254000
|
unkown
|
page read and write
|
||
28C0000
|
unkown
|
page readonly
|
||
124E8E1F000
|
unkown
|
page read and write
|
||
7FF5CE0ED000
|
unkown
|
page readonly
|
||
1A2A2055000
|
unkown
|
page read and write
|
||
7FF5B9A73000
|
unkown
|
page readonly
|
||
1A2A3ED0000
|
unkown
|
page readonly
|
||
7FF4ECD97000
|
unkown
|
page readonly
|
||
7FF5CE09F000
|
unkown
|
page readonly
|
||
1D28A789000
|
unkown
|
page read and write
|
||
7FF4F780C000
|
unkown
|
page readonly
|
||
1A2A2114000
|
unkown
|
page read and write
|
||
1A2F9FE000
|
unkown
|
page read and write
|
||
7FF4ECC61000
|
unkown
|
page readonly
|
||
9F15B0B000
|
unkown
|
page read and write
|
||
7FF4F76E8000
|
unkown
|
page readonly
|
||
31CEB7B000
|
unkown
|
page read and write
|
||
1A2A4342000
|
unkown
|
page read and write
|
||
11CFA960000
|
unkown
|
page readonly
|
||
7FF4ECD7A000
|
unkown
|
page readonly
|
||
1D28A784000
|
unkown
|
page read and write
|
||
B0D32AD000
|
unkown
|
page read and write
|
||
7FF4F784E000
|
unkown
|
page readonly
|
||
7FF5B7E02000
|
unkown
|
page readonly
|
||
7FF4F7848000
|
unkown
|
page readonly
|
||
1D28A7AD000
|
unkown
|
page read and write
|
||
7FF4F77E0000
|
unkown
|
page readonly
|
||
1D28A722000
|
unkown
|
page read and write
|
||
252F2055000
|
unkown
|
page read and write
|
||
1A2A41BA000
|
unkown
|
page read and write
|
||
1D28A761000
|
unkown
|
page read and write
|
||
9F1607A000
|
unkown
|
page read and write
|
||
2B32E600000
|
unkown
|
page readonly
|
||
2FC0000
|
unkown
|
page read and write
|
||
1D28A77C000
|
unkown
|
page read and write
|
||
31CE9FA000
|
unkown
|
page read and write
|
||
252F208F000
|
unkown
|
page read and write
|
||
1AB087E000
|
unkown
|
page read and write
|
||
1D28AC61000
|
unkown
|
page read and write
|
||
1D28A7AD000
|
unkown
|
page read and write
|
||
1A2A4162000
|
unkown
|
page read and write
|
||
11CFAA55000
|
unkown
|
page read and write
|
||
7FF50AB1E000
|
unkown
|
page readonly
|
||
1D28A7D9000
|
unkown
|
page read and write
|
||
7FF5B7C74000
|
unkown
|
page readonly
|
||
1D28A74D000
|
unkown
|
page read and write
|
||
7FF58CE17000
|
unkown
|
page readonly
|
||
1A2A3E70000
|
heap private
|
page read and write
|
||
1A2A4542000
|
unkown
|
page read and write
|
||
7FF5CDF73000
|
unkown
|
page readonly
|
||
1A2A3E80000
|
unkown
|
page readonly
|
||
1D28A78D000
|
unkown
|
page read and write
|
||
1A2F97C000
|
unkown
|
page read and write
|
||
1D28A540000
|
unkown
|
page readonly
|
||
7FF5CE075000
|
unkown
|
page readonly
|
||
7FF4EC47D000
|
unkown
|
page readonly
|
||
7FF58CF4A000
|
unkown
|
page readonly
|
||
4F7DD7E000
|
unkown
|
page read and write
|
||
1A2A2129000
|
unkown
|
page read and write
|
||
7FF58D08C000
|
unkown
|
page readonly
|
||
2CD9000
|
unkown
|
page read and write
|
||
7FF5DB7F6000
|
unkown
|
page readonly
|
||
28B3000
|
unkown
|
page readonly
|
||
310F000
|
unkown
|
page read and write
|
||
1D28A778000
|
unkown
|
page read and write
|
||
7FF4ECDAF000
|
unkown
|
page readonly
|
||
2B32DC3C000
|
unkown
|
page read and write
|
||
7FF58D07F000
|
unkown
|
page readonly
|
||
1D289CA0000
|
heap private
|
page read and write
|
||
1D289E00000
|
unkown
|
page read and write
|
||
11CFA870000
|
heap default
|
page read and write
|
||
7FF5DBF86000
|
unkown
|
page readonly
|
||
7FF5CDEC9000
|
unkown
|
page readonly
|
||
2B32E940000
|
unkown
|
page readonly
|
||
1A2A4342000
|
unkown
|
page read and write
|
||
7FF4ECCCD000
|
unkown
|
page readonly
|
||
7FF58CFF3000
|
unkown
|
page readonly
|
||
7FF58C9A1000
|
unkown
|
page readonly
|
||
31CED7B000
|
unkown
|
page read and write
|
||
7FF4F7851000
|
unkown
|
page readonly
|
||
28DF000
|
unkown
|
page readonly
|
||
31CF57B000
|
unkown
|
page read and write
|
||
D84227F000
|
unkown
|
page read and write
|
||
9F15B8E000
|
unkown
|
page read and write
|
||
7FF4F76DB000
|
unkown
|
page readonly
|
||
1D28A777000
|
unkown
|
page read and write
|
||
7FF5CE0E6000
|
unkown
|
page readonly
|
||
1A2A5010000
|
unkown
|
page read and write
|
||
11CFAA2A000
|
unkown
|
page read and write
|
||
1D28A76C000
|
unkown
|
page read and write
|
||
D841B9F000
|
unkown
|
page read and write
|
||
7FF58D0EA000
|
unkown
|
page readonly
|
||
1A2A5410000
|
unkown
|
page read and write
|
||
31CF17A000
|
unkown
|
page read and write
|
||
7FF5B78E5000
|
unkown
|
page readonly
|
||
309C000
|
unkown
|
page read and write
|
||
1A2A4196000
|
unkown
|
page read and write
|
||
1D28A753000
|
unkown
|
page read and write
|
||
124E8BB0000
|
heap private
|
page read and write
|
||
1D28A74C000
|
unkown
|
page read and write
|
||
2B32DBF0000
|
unkown
|
page read and write
|
||
7FF4F7616000
|
unkown
|
page readonly
|
||
7FF5B7D47000
|
unkown
|
page readonly
|
||
7FF50AB73000
|
unkown
|
page readonly
|
||
1A2A418B000
|
unkown
|
page read and write
|
||
7FF5B7D78000
|
unkown
|
page readonly
|
||
1A2A41E4000
|
unkown
|
page read and write
|
||
7FF5DC0E1000
|
unkown
|
page readonly
|
||
1D28A77E000
|
unkown
|
page read and write
|
||
7FF58D040000
|
unkown
|
page readonly
|
||
1A2A419B000
|
unkown
|
page read and write
|
||
1A2A5000000
|
unkown
|
page read and write
|
||
1D28A753000
|
unkown
|
page read and write
|
||
1AF9E7C0000
|
heap private
|
page read and write
|
||
11CFAB00000
|
unkown
|
page read and write
|
||
1A2A4257000
|
unkown
|
page read and write
|
||
1F48AE02000
|
unkown
|
page read and write
|
||
7FF5DC0DA000
|
unkown
|
page readonly
|
||
7FF58CF43000
|
unkown
|
page readonly
|
||
1A2A5210000
|
unkown
|
page read and write
|
||
1D28A768000
|
unkown
|
page read and write
|
||
D84237F000
|
unkown
|
page read and write
|
||
1D28A75A000
|
unkown
|
page read and write
|
||
252F1FB0000
|
unkown
|
page readonly
|
||
7FF4F76E3000
|
unkown
|
page readonly
|
||
7FF5BA14F000
|
unkown
|
page readonly
|
||
1D28A756000
|
unkown
|
page read and write
|
||
3050000
|
heap default
|
page read and write
|
||
7FF5B7BB3000
|
unkown
|
page readonly
|
||
1A2A42A5000
|
unkown
|
page read and write
|
||
7FF4EC955000
|
unkown
|
page readonly
|
||
D842177000
|
unkown
|
page read and write
|
||
1A2A2123000
|
unkown
|
page read and write
|
||
7FF5B7C63000
|
unkown
|
page readonly
|
||
2FE0000
|
unkown
|
page readonly
|
||
1A2A4482000
|
unkown
|
page read and write
|
||
2B32DD08000
|
unkown
|
page read and write
|
||
31CF07B000
|
unkown
|
page read and write
|
||
7FF5BA164000
|
unkown
|
page readonly
|
||
1A2A3EF0000
|
unkown
|
page read and write
|
||
7FF5B7CFC000
|
unkown
|
page readonly
|
||
1D28A74E000
|
unkown
|
page read and write
|
||
124E8E13000
|
unkown
|
page read and write
|
||
31CF67C000
|
unkown
|
page read and write
|
||
1D28A767000
|
unkown
|
page read and write
|
||
30C0000
|
heap private
|
page read and write
|
||
7FF50AD12000
|
unkown
|
page readonly
|
||
1A2A5210000
|
unkown
|
page read and write
|
||
1D289E29000
|
unkown
|
page read and write
|
||
31CEE7B000
|
unkown
|
page read and write
|
||
1A2A4002000
|
unkown
|
page read and write
|
||
31CF47B000
|
unkown
|
page read and write
|
||
1A2FBFC000
|
unkown
|
page read and write
|
||
31CF37B000
|
unkown
|
page read and write
|
||
7FF58C9F3000
|
unkown
|
page readonly
|
||
7FF58D0A5000
|
unkown
|
page readonly
|
||
1AF9E850000
|
unkown
|
page read and write
|
||
1D28AD00000
|
unkown
|
page read and write
|
||
1D28A783000
|
unkown
|
page read and write
|
||
7FF5BA120000
|
unkown
|
page readonly
|
||
7FF5BA188000
|
unkown
|
page readonly
|
||
7FF58CE66000
|
unkown
|
page readonly
|
||
1A2A20B3000
|
unkown
|
page read and write
|
||
1D28A74E000
|
unkown
|
page read and write
|
||
7FF5CE070000
|
unkown
|
page readonly
|
||
7FF50AB8C000
|
unkown
|
page readonly
|
||
124E8F02000
|
unkown
|
page read and write
|
||
3470000
|
heap private
|
page read and write
|
||
124E8E00000
|
unkown
|
page read and write
|
||
7FF4F74AF000
|
unkown
|
page readonly
|
||
2B32E402000
|
unkown
|
page read and write
|
||
7FF5CE07B000
|
unkown
|
page readonly
|
||
1D28A745000
|
unkown
|
page read and write
|
||
2E9B000
|
unkown
|
page read and write
|
||
7FF5CDF6B000
|
unkown
|
page readonly
|
||
1AB0AFB000
|
unkown
|
page read and write
|
||
1D28A71F000
|
unkown
|
page read and write
|
||
7FF4F7782000
|
unkown
|
page readonly
|
||
1A2FAFA000
|
unkown
|
page read and write
|
||
7FF58CD79000
|
unkown
|
page readonly
|
||
124E8CF0000
|
unkown
|
page write copy
|
||
7FF58D0FF000
|
unkown
|
page readonly
|
||
1A2F8F9000
|
unkown
|
page read and write
|
||
1D28A752000
|
unkown
|
page read and write
|
||
1D28A783000
|
unkown
|
page read and write
|
||
1F48AD00000
|
unkown
|
page read and write
|
||
7FF50AC96000
|
unkown
|
page readonly
|
||
7FF58D0D7000
|
unkown
|
page readonly
|
||
1D289EB0000
|
unkown
|
page read and write
|
||
7FF58D0F4000
|
unkown
|
page readonly
|
||
7FF58D06B000
|
unkown
|
page readonly
|
||
124E8E69000
|
unkown
|
page read and write
|
||
7FF58D08A000
|
unkown
|
page readonly
|
||
7FF50AC88000
|
unkown
|
page readonly
|
||
7FF4F76C1000
|
unkown
|
page readonly
|
||
7FF4F7639000
|
unkown
|
page readonly
|
||
4F7DCF9000
|
unkown
|
page read and write
|
||
1D28A7AF000
|
unkown
|
page read and write
|
||
7FF4F77CC000
|
unkown
|
page readonly
|
||
7FF58D191000
|
unkown
|
page readonly
|
||
7FF4F75B8000
|
unkown
|
page readonly
|
||
7FF50AC1A000
|
unkown
|
page readonly
|
||
7FF5CD8D1000
|
unkown
|
page readonly
|
||
1D28A77F000
|
unkown
|
page read and write
|
||
7FF4F77AB000
|
unkown
|
page readonly
|
||
7FF5DC01F000
|
unkown
|
page readonly
|
||
31CF1FB000
|
unkown
|
page read and write
|
||
1D28A743000
|
unkown
|
page read and write
|
||
7FF4F703D000
|
unkown
|
page readonly
|
||
7FF4ECAF7000
|
unkown
|
page readonly
|
||
124E8E54000
|
unkown
|
page read and write
|
||
1D28AC02000
|
unkown
|
page read and write
|
||
7FF5CE0C4000
|
unkown
|
page readonly
|
||
1A2A4500000
|
unkown
|
page read and write
|
||
3480000
|
unkown
|
page readonly
|
||
7FF5CE161000
|
unkown
|
page readonly
|
||
1D28A77D000
|
unkown
|
page read and write
|
||
1A2A4274000
|
unkown
|
page read and write
|
||
1D289F16000
|
unkown
|
page read and write
|
||
1A2A2250000
|
unkown
|
page readonly
|
||
31CF77C000
|
unkown
|
page read and write
|
||
1D289E13000
|
unkown
|
page read and write
|
||
7FF5DC027000
|
unkown
|
page readonly
|
||
1D28A759000
|
unkown
|
page read and write
|
||
7FF58CCB5000
|
unkown
|
page readonly
|
||
7FF4F7601000
|
unkown
|
page readonly
|
||
7FF50A997000
|
unkown
|
page readonly
|
||
1D28A74E000
|
unkown
|
page read and write
|
||
1D289F08000
|
unkown
|
page read and write
|
||
1D28A700000
|
unkown
|
page read and write
|
||
124E8D40000
|
unkown
|
page readonly
|
||
7FF4F77EB000
|
unkown
|
page readonly
|
||
1D28A7AF000
|
unkown
|
page read and write
|
||
7FF58D18A000
|
unkown
|
page readonly
|
||
1F48AB20000
|
heap default
|
page read and write
|
||
1D28A77C000
|
unkown
|
page read and write
|
||
1D28A7AF000
|
unkown
|
page read and write
|
||
1D28A769000
|
unkown
|
page read and write
|
||
1D289E7B000
|
unkown
|
page read and write
|
||
1D289F13000
|
unkown
|
page read and write
|
||
28AC000
|
unkown
|
page readonly
|
||
2883000
|
unkown
|
page readonly
|
||
7FF5B7D8D000
|
unkown
|
page readonly
|
||
11CFB400000
|
unkown
|
page readonly
|
||
1AB0C77000
|
unkown
|
page read and write
|
||
7FF58D10E000
|
unkown
|
page readonly
|
||
1D289EA6000
|
unkown
|
page read and write
|
||
9F1677F000
|
unkown
|
page read and write
|
||
1D289EBF000
|
unkown
|
page read and write
|
||
1D28AC54000
|
unkown
|
page read and write
|
||
1A2A2200000
|
unkown
|
page write copy
|
||
1D28A757000
|
unkown
|
page read and write
|
||
1A2A20AA000
|
unkown
|
page read and write
|
||
1A2A4600000
|
unkown
|
page readonly
|
||
7FF50A7F5000
|
unkown
|
page readonly
|
||
90BAA7C000
|
unkown
|
page read and write
|
||
9F1657E000
|
unkown
|
page read and write
|
||
1D28A761000
|
unkown
|
page read and write
|
||
1D28A76B000
|
unkown
|
page read and write
|
||
7FF50AC4C000
|
unkown
|
page readonly
|
||
11CFAB13000
|
unkown
|
page read and write
|
||
7FF5BA211000
|
unkown
|
page readonly
|
||
1A2A5110000
|
unkown
|
page read and write
|
||
1A2A42D6000
|
unkown
|
page read and write
|
||
7FF4ECDCA000
|
unkown
|
page readonly
|
||
1A2F5EE000
|
unkown
|
page read and write
|
||
1D28A480000
|
unkown
|
page readonly
|
||
7FF58CF9B000
|
unkown
|
page readonly
|
||
7FF4ECDC4000
|
unkown
|
page readonly
|
||
1D28A769000
|
unkown
|
page read and write
|
||
1A2A3AF0000
|
unkown
|
page readonly
|
||
7FF4ECDF6000
|
unkown
|
page readonly
|
||
1D28A78C000
|
unkown
|
page read and write
|
||
1D289EA6000
|
unkown
|
page read and write
|
||
7FF4ECCD3000
|
unkown
|
page readonly
|
||
7FF58CC0E000
|
unkown
|
page readonly
|
||
1D28A746000
|
unkown
|
page read and write
|
||
1D28A76F000
|
unkown
|
page read and write
|
||
1D289EE8000
|
unkown
|
page read and write
|
||
7FF50AC99000
|
unkown
|
page readonly
|
||
1A2A20EB000
|
unkown
|
page read and write
|
||
1D28A7BE000
|
unkown
|
page read and write
|
||
1D28A753000
|
unkown
|
page read and write
|
||
1D28A500000
|
unkown
|
page readonly
|
||
7FF50A324000
|
unkown
|
page readonly
|
||
7FF4F77E5000
|
unkown
|
page readonly
|
||
7FF5B7D0E000
|
unkown
|
page readonly
|
||
7FF50A31E000
|
unkown
|
page readonly
|
||
1D28A769000
|
unkown
|
page read and write
|
||
7FF58D0AB000
|
unkown
|
page readonly
|
||
7FF5BA125000
|
unkown
|
page readonly
|
||
2CDD000
|
unkown
|
page read and write
|
||
124E8E29000
|
unkown
|
page read and write
|
||
1D28A790000
|
unkown
|
page read and write
|
||
252F2000000
|
unkown
|
page read and write
|
||
11CFAA4F000
|
unkown
|
page read and write
|
||
3010000
|
unkown
|
page execute and read and write
|
||
1D28A756000
|
unkown
|
page read and write
|
||
7FF50AB1B000
|
unkown
|
page readonly
|
||
1D28A7D3000
|
unkown
|
page read and write
|
||
31CEBF9000
|
unkown
|
page read and write
|
||
7FF4F772D000
|
unkown
|
page readonly
|
||
1D289D10000
|
unkown
|
page readonly
|
||
7FF5DC066000
|
unkown
|
page readonly
|
||
2E5C000
|
unkown
|
page read and write
|
||
7FF5CE0E1000
|
unkown
|
page readonly
|
||
1A2A2083000
|
unkown
|
page read and write
|
||
1A2A20A4000
|
unkown
|
page read and write
|
||
7FF4ECDEE000
|
unkown
|
page readonly
|
||
2B32DC27000
|
unkown
|
page read and write
|
||
1D28AD02000
|
unkown
|
page read and write
|
||
1D28AE00000
|
unkown
|
page readonly
|
||
7FF4F7859000
|
unkown
|
page readonly
|
||
1AB0D7E000
|
unkown
|
page read and write
|
||
7FF50AB6D000
|
unkown
|
page readonly
|
||
7FF5CD8CD000
|
unkown
|
page readonly
|
||
7FF5CDF78000
|
unkown
|
page readonly
|
||
2978000
|
unkown
|
page readonly
|
||
252F2013000
|
unkown
|
page read and write
|
||
7FF5DBFDA000
|
unkown
|
page readonly
|
||
7FF4F74B7000
|
unkown
|
page readonly
|
||
7FF5CE06E000
|
unkown
|
page readonly
|
||
31CF3FB000
|
unkown
|
page read and write
|
||
1D28A73D000
|
unkown
|
page read and write
|
||
252F1FA0000
|
unkown
|
page readonly
|
||
7FF5B7D5A000
|
unkown
|
page readonly
|
||
2B32DBC0000
|
heap default
|
page read and write
|
||
1D28A74E000
|
unkown
|
page read and write
|
||
7FF5BA14C000
|
unkown
|
page readonly
|
||
7FF5B7E01000
|
unkown
|
page readonly
|
||
7FF50AD0A000
|
unkown
|
page readonly
|
||
7FF5B7D0A000
|
unkown
|
page readonly
|
||
7FF5CDD3F000
|
unkown
|
page readonly
|
||
7FF58C79D000
|
unkown
|
page readonly
|
||
252F2108000
|
unkown
|
page read and write
|
||
7FF58CED6000
|
unkown
|
page readonly
|
||
1D28A744000
|
unkown
|
page read and write
|
||
7FF50A7E6000
|
unkown
|
page readonly
|
||
7FF58CB7E000
|
unkown
|
page readonly
|
||
7FF58C797000
|
unkown
|
page readonly
|
||
9F162FF000
|
unkown
|
page read and write
|
||
11CFAA80000
|
unkown
|
page read and write
|
||
7FF4ECDB7000
|
unkown
|
page readonly
|
||
7FF5CE012000
|
unkown
|
page readonly
|
||
B0D3A7E000
|
unkown
|
page read and write
|
||
31CF4FB000
|
unkown
|
page read and write
|
||
7FF4ECD80000
|
unkown
|
page readonly
|
||
1D28A798000
|
unkown
|
page read and write
|
||
7FF4ECDAC000
|
unkown
|
page readonly
|
||
1AF9E630000
|
unkown
|
page readonly
|
||
2B32DC4C000
|
unkown
|
page read and write
|
||
11CFAA00000
|
unkown
|
page read and write
|
||
2B32DBE0000
|
unkown
|
page readonly
|
||
1D28A76E000
|
unkown
|
page read and write
|
||
1AF9E836000
|
heap default
|
page read and write
|
||
11CFA970000
|
unkown
|
page read and write
|
||
7FF4F77A3000
|
unkown
|
page readonly
|
||
31CE8FA000
|
unkown
|
page read and write
|
||
7FF4F75A6000
|
unkown
|
page readonly
|
||
2B32DC70000
|
unkown
|
page read and write
|
||
1D28A7BE000
|
unkown
|
page read and write
|
||
1A2A3EE0000
|
unkown
|
page read and write
|
||
1D28A745000
|
unkown
|
page read and write
|
||
1A2A4141000
|
unkown
|
page read and write
|
||
1AF9E7C5000
|
heap private
|
page read and write
|
||
1D28A757000
|
unkown
|
page read and write
|
||
7FF4F777C000
|
unkown
|
page readonly
|
||
1D28A730000
|
unkown
|
page read and write
|
||
1A2A20CC000
|
unkown
|
page read and write
|
||
7FF58D09E000
|
unkown
|
page readonly
|
||
2B32DD02000
|
unkown
|
page read and write
|
||
7FF5B7BF1000
|
unkown
|
page readonly
|
||
1A2A416C000
|
unkown
|
page read and write
|
||
2B32DD00000
|
unkown
|
page read and write
|
||
7FF58D0B7000
|
unkown
|
page readonly
|
||
7FF4F74AA000
|
unkown
|
page readonly
|
||
31CEFFB000
|
unkown
|
page read and write
|
||
1D28A759000
|
unkown
|
page read and write
|
||
7FF4F7621000
|
unkown
|
page readonly
|
||
90BAEF7000
|
unkown
|
page read and write
|
||
1D28A761000
|
unkown
|
page read and write
|
||
1A2A3E60000
|
unkown
|
page read and write
|
||
252F2D40000
|
unkown
|
page readonly
|
||
290B000
|
unkown
|
page readonly
|
||
1A2A3EE0000
|
unkown
|
page read and write
|
||
7FF4F77DA000
|
unkown
|
page readonly
|
||
252F2060000
|
unkown
|
page read and write
|
||
1D28A7AD000
|
unkown
|
page read and write
|
||
1AB059C000
|
unkown
|
page read and write
|
||
7FF58D0CF000
|
unkown
|
page readonly
|
||
1A2A5410000
|
unkown
|
page read and write
|
||
1A2A209B000
|
unkown
|
page read and write
|
||
1D28A725000
|
unkown
|
page read and write
|
||
1D28A753000
|
unkown
|
page read and write
|
||
7FF5DC044000
|
unkown
|
page readonly
|
||
252F2A00000
|
unkown
|
page readonly
|
||
4F7D9BF000
|
unkown
|
page read and write
|
||
7FF5CE087000
|
unkown
|
page readonly
|
||
7FF58D0A0000
|
unkown
|
page readonly
|
||
28DD000
|
unkown
|
page readonly
|
||
1D28A75E000
|
unkown
|
page read and write
|
||
7FF58D119000
|
unkown
|
page readonly
|
||
1D289F02000
|
unkown
|
page read and write
|
||
1D28A754000
|
unkown
|
page read and write
|
||
7FF58CEA0000
|
unkown
|
page readonly
|
||
1D28AC02000
|
unkown
|
page read and write
|
||
7FF5CE0B4000
|
unkown
|
page readonly
|
||
7FF5DC034000
|
unkown
|
page readonly
|
||
7FF4F7726000
|
unkown
|
page readonly
|
||
28E3000
|
unkown
|
page readonly
|
||
1D289E81000
|
unkown
|
page read and write
|
||
7FF58CC02000
|
unkown
|
page readonly
|
||
D841E7E000
|
unkown
|
page read and write
|
||
2951000
|
unkown
|
page readonly
|
||
1AB08FD000
|
unkown
|
page read and write
|
||
7FF58D0E4000
|
unkown
|
page readonly
|
||
124E8E3F000
|
unkown
|
page read and write
|
||
2B32DC4E000
|
unkown
|
page read and write
|
||
7FF4EC946000
|
unkown
|
page readonly
|
||
1A2A41D7000
|
unkown
|
page read and write
|
||
7FF5BA158000
|
unkown
|
page readonly
|
||
7FF4F78D2000
|
unkown
|
page readonly
|
||
1A2A4502000
|
unkown
|
page read and write
|
||
31CF27C000
|
unkown
|
page read and write
|
||
2879000
|
unkown
|
page readonly
|
||
1D28A7AD000
|
unkown
|
page read and write
|
||
124E8C10000
|
heap default
|
page read and write
|
||
1A2A2127000
|
unkown
|
page read and write
|
||
1AB0E7E000
|
unkown
|
page read and write
|
||
1A2A5313000
|
unkown
|
page read and write
|
||
1D289E4B000
|
unkown
|
page read and write
|
||
7FF4F783E000
|
unkown
|
page readonly
|
||
1A2A39F0000
|
unkown
|
page read and write
|
||
7FF5CE154000
|
unkown
|
page readonly
|
||
7FF5CE010000
|
unkown
|
page readonly
|
||
1D28A75E000
|
unkown
|
page read and write
|
||
7FF4F75BF000
|
unkown
|
page readonly
|
||
90BADFE000
|
unkown
|
page read and write
|
||
1D28A71F000
|
unkown
|
page read and write
|
||
1D28A530000
|
unkown
|
page read and write
|
||
7FF4F7856000
|
unkown
|
page readonly
|
||
7FF58D042000
|
unkown
|
page readonly
|
||
1D28AC02000
|
unkown
|
page read and write
|
||
2B32DED0000
|
unkown
|
page readonly
|
||
1D28A77B000
|
unkown
|
page read and write
|
||
1AF9E720000
|
unkown
|
page read and write
|
||
1A2A2102000
|
unkown
|
page read and write
|
||
7FF4F78CA000
|
unkown
|
page readonly
|
||
7FF50AB01000
|
unkown
|
page readonly
|
||
31CEC7B000
|
unkown
|
page read and write
|
||
7FF4F77CA000
|
unkown
|
page readonly
|
||
1D28A754000
|
unkown
|
page read and write
|
There are 872 hidden memdumps, click here to show them.