Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
research-1315978726.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
||
C:\Users\user\Desktop\~$research-1315978726.xlsb
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\061EEC91-AC6C-4F94-9CAD-C3CC9D0CDD97
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\13596CDF.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\277D16D6.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3EB26154.png
|
PNG image data, 246 x 108, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5535D682.png
|
PNG image data, 490 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B37BC9E9.png
|
PNG image data, 521 x 246, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C30A6945.png
|
PNG image data, 934 x 29, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\5BA40000
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
||
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\werty1.dll
|
||
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\werty2.dll
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
https://ecs.office.com/config/v2/Office
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://store.officeppe.com/addinstemplate
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://ncus.contentsync.
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://wus2.contentsync.
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://templatelogging.office.com/client/log
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://management.azure.com/
|
unknown
|
||
https://login.windows.net/common/oauth2/authorize
|
unknown
|
||
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://graph.windows.net/
|
unknown
|
||
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
||
https://devnull.onenote.com
|
unknown
|
||
https://ncus.pagecontentsync.
|
unknown
|
||
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
||
https://messaging.office.com/
|
unknown
|
||
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://augloop.office.com/v2
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
https://skyapi.live.net/Activity/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
||
https://dataservice.o365filtering.com
|
unknown
|
||
https://api.cortana.ai
|
unknown
|
||
https://onedrive.live.com
|
unknown
|
||
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
||
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
||
https://directory.services.
|
unknown
|
||
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
||
https://staging.cortana.ai
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
maciascriminallaw.com
|
192.254.225.103
|
||
jeparainternational.com
|
216.172.184.23
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
192.254.225.103
|
maciascriminallaw.com
|
United States
|
||
216.172.184.23
|
jeparainternational.com
|
United States
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
n#?
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
o#?
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A2C5
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A8D0
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A9CA
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4AA95
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4ABBE
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
j4?
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
There are 52 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
7FF59FD40000
|
unkown
|
page readonly
|
||
1564BBB4000
|
unkown
|
page read and write
|
||
7FF5A23CE000
|
unkown
|
page readonly
|
||
7FF53D3FA000
|
unkown
|
page readonly
|
||
7FF4EC3F6000
|
unkown
|
page readonly
|
||
7FF5602FF000
|
unkown
|
page readonly
|
||
28399D90000
|
unkown
|
page write copy
|
||
1ACC8670000
|
unkown
|
page read and write
|
||
7FF56D56A000
|
unkown
|
page readonly
|
||
19E12595000
|
heap private
|
page read and write
|
||
7FF541042000
|
unkown
|
page readonly
|
||
153B99F0000
|
unkown
|
page readonly
|
||
2FD3000
|
unkown
|
page read and write
|
||
7FF5CCE88000
|
unkown
|
page readonly
|
||
20369E6A000
|
unkown
|
page read and write
|
||
1ACC8410000
|
heap private
|
page read and write
|
||
23B7E613000
|
unkown
|
page read and write
|
||
7FF5CCB2A000
|
unkown
|
page readonly
|
||
2839D110000
|
unkown
|
page read and write
|
||
7FF5410CC000
|
unkown
|
page readonly
|
||
1564BB93000
|
unkown
|
page read and write
|
||
23B7E460000
|
unkown
|
page readonly
|
||
2E00000
|
unkown
|
page readonly
|
||
255B000
|
unkown
|
page readonly
|
||
7FF56D54C000
|
unkown
|
page readonly
|
||
C7B91DA000
|
unkown
|
page read and write
|
||
7FF56D41E000
|
unkown
|
page readonly
|
||
7FF5CC7A3000
|
unkown
|
page readonly
|
||
1564BB2C000
|
unkown
|
page read and write
|
||
1564BB54000
|
unkown
|
page read and write
|
||
28399E55000
|
unkown
|
page read and write
|
||
28399ED8000
|
unkown
|
page read and write
|
||
7FF5082F7000
|
unkown
|
page readonly
|
||
2036A250000
|
unkown
|
page readonly
|
||
20369E6A000
|
unkown
|
page read and write
|
||
1564B2EB000
|
unkown
|
page read and write
|
||
1564BB74000
|
unkown
|
page read and write
|
||
7FF53D79E000
|
unkown
|
page readonly
|
||
7FF4EC62E000
|
unkown
|
page readonly
|
||
7FF56D297000
|
unkown
|
page readonly
|
||
1ACC8713000
|
unkown
|
page read and write
|
||
7FF53D81A000
|
unkown
|
page readonly
|
||
7FF5A22B1000
|
unkown
|
page readonly
|
||
2839BE02000
|
unkown
|
page read and write
|
||
1564BBC5000
|
unkown
|
page read and write
|
||
7FF5081DE000
|
unkown
|
page readonly
|
||
3CFD079000
|
unkown
|
page read and write
|
||
D1C6779000
|
unkown
|
page read and write
|
||
E95D57B000
|
unkown
|
page read and write
|
||
2839C182000
|
unkown
|
page read and write
|
||
1F2B8870000
|
unkown
|
page read and write
|
||
7FF53D67D000
|
unkown
|
page readonly
|
||
7FF53D70F000
|
unkown
|
page readonly
|
||
7FF5A2449000
|
unkown
|
page readonly
|
||
7FF5D34E7000
|
unkown
|
page readonly
|
||
20369E13000
|
unkown
|
page read and write
|
||
9DD347B000
|
unkown
|
page read and write
|
||
7FF507EA6000
|
unkown
|
page readonly
|
||
7FF512637000
|
unkown
|
page readonly
|
||
7FF53D62B000
|
unkown
|
page readonly
|
||
7FF5083D1000
|
unkown
|
page readonly
|
||
1564BB8B000
|
unkown
|
page read and write
|
||
423DE7F000
|
unkown
|
page read and write
|
||
178186E0000
|
heap default
|
page read and write
|
||
7FF5D2E79000
|
unkown
|
page readonly
|
||
7FF4F6F68000
|
unkown
|
page readonly
|
||
28399E29000
|
unkown
|
page read and write
|
||
2839BC70000
|
unkown
|
page readonly
|
||
1564B2A9000
|
unkown
|
page read and write
|
||
7FF5A23D5000
|
unkown
|
page readonly
|
||
7FF5082CC000
|
unkown
|
page readonly
|
||
23B7E530000
|
unkown
|
page readonly
|
||
7FF5D375C000
|
unkown
|
page readonly
|
||
2A3A000
|
unkown
|
page readonly
|
||
7FF5A2424000
|
unkown
|
page readonly
|
||
30C0000
|
unkown
|
page readonly
|
||
7FF59FDB9000
|
unkown
|
page readonly
|
||
1564B302000
|
unkown
|
page read and write
|
||
2839BC90000
|
unkown
|
page read and write
|
||
7FF53D73B000
|
unkown
|
page readonly
|
||
7FF4EBE8D000
|
unkown
|
page readonly
|
||
1ACC863C000
|
unkown
|
page read and write
|
||
28399E6C000
|
unkown
|
page read and write
|
||
7FF53D508000
|
unkown
|
page readonly
|
||
19E12590000
|
heap private
|
page read and write
|
||
1564BB58000
|
unkown
|
page read and write
|
||
2839BCB0000
|
unkown
|
page read and write
|
||
7FF50832A000
|
unkown
|
page readonly
|
||
7FF50830C000
|
unkown
|
page readonly
|
||
E95CFCB000
|
unkown
|
page read and write
|
||
1F2BA2A0000
|
unkown
|
page readonly
|
||
7FF59FDAE000
|
unkown
|
page readonly
|
||
D1C6BFB000
|
unkown
|
page read and write
|
||
153B9A4F000
|
unkown
|
page read and write
|
||
1F2B8A00000
|
unkown
|
page readonly
|
||
1ACC8480000
|
unkown
|
page readonly
|
||
7FF53D730000
|
unkown
|
page readonly
|
||
7FF5D37BA000
|
unkown
|
page readonly
|
||
7FF4F6FF1000
|
unkown
|
page readonly
|
||
C7B957F000
|
unkown
|
page read and write
|
||
1ACC8800000
|
unkown
|
page readonly
|
||
7FF5083D2000
|
unkown
|
page readonly
|
||
2839C000000
|
unkown
|
page read and write
|
||
4B31A7E000
|
unkown
|
page read and write
|
||
7FF507E52000
|
unkown
|
page readonly
|
||
7FF5121F5000
|
unkown
|
page readonly
|
||
7FF5D2E7F000
|
unkown
|
page readonly
|
||
7FF51262B000
|
unkown
|
page readonly
|
||
20369D30000
|
unkown
|
page readonly
|
||
22E63CA1000
|
unkown
|
page read and write
|
||
153B9A8E000
|
unkown
|
page read and write
|
||
D1C687A000
|
unkown
|
page read and write
|
||
8FC000
|
unkown
|
page read and write
|
||
1ACC8649000
|
unkown
|
page read and write
|
||
7FF51251E000
|
unkown
|
page readonly
|
||
2839BC80000
|
unkown
|
page read and write
|
||
2839B7A0000
|
unkown
|
page read and write
|
||
23B7E450000
|
heap default
|
page read and write
|
||
7FF56D596000
|
unkown
|
page readonly
|
||
22E63BF0000
|
unkown
|
page readonly
|
||
2839D310000
|
unkown
|
page read and write
|
||
153B9B13000
|
unkown
|
page read and write
|
||
7FF541063000
|
unkown
|
page readonly
|
||
1564B2D7000
|
unkown
|
page read and write
|
||
7FF5079EF000
|
unkown
|
page readonly
|
||
1564BB53000
|
unkown
|
page read and write
|
||
7FF53D7A1000
|
unkown
|
page readonly
|
||
7FF53D611000
|
unkown
|
page readonly
|
||
1F2B886E000
|
unkown
|
page read and write
|
||
9DD36FF000
|
unkown
|
page read and write
|
||
23B7E702000
|
unkown
|
page read and write
|
||
1564BB67000
|
unkown
|
page read and write
|
||
23B7E681000
|
unkown
|
page read and write
|
||
23B7E713000
|
unkown
|
page read and write
|
||
2839BF84000
|
unkown
|
page read and write
|
||
2EB46965000
|
heap private
|
page read and write
|
||
C7B95F9000
|
unkown
|
page read and write
|
||
7FF5A2393000
|
unkown
|
page readonly
|
||
7FF5081E3000
|
unkown
|
page readonly
|
||
2B05000
|
unkown
|
page readonly
|
||
3CFD179000
|
unkown
|
page read and write
|
||
7FF53D71A000
|
unkown
|
page readonly
|
||
7FF4F6F38000
|
unkown
|
page readonly
|
||
20369E6A000
|
unkown
|
page read and write
|
||
4B314FA000
|
unkown
|
page read and write
|
||
7FF4F6F79000
|
unkown
|
page readonly
|
||
287D000
|
unkown
|
page readonly
|
||
7FF507E42000
|
unkown
|
page readonly
|
||
7FF5D37D8000
|
unkown
|
page readonly
|
||
23B7EC60000
|
unkown
|
page readonly
|
||
17818708000
|
heap default
|
page read and write
|
||
7FF51264C000
|
unkown
|
page readonly
|
||
7FF4EC684000
|
unkown
|
page readonly
|
||
7FF59FD78000
|
unkown
|
page readonly
|
||
2839BF52000
|
unkown
|
page read and write
|
||
2EB46670000
|
heap default
|
page read and write
|
||
7FF50830F000
|
unkown
|
page readonly
|
||
7FF5410EA000
|
unkown
|
page readonly
|
||
1F2B8802000
|
unkown
|
page read and write
|
||
7FF5080E0000
|
unkown
|
page readonly
|
||
1564BB87000
|
unkown
|
page read and write
|
||
4B3187B000
|
unkown
|
page read and write
|
||
28F5000
|
unkown
|
page readonly
|
||
7FF53D6FF000
|
unkown
|
page readonly
|
||
7FF5410B7000
|
unkown
|
page readonly
|
||
153B9B08000
|
unkown
|
page read and write
|
||
2839C102000
|
unkown
|
page read and write
|
||
7FF56D48C000
|
unkown
|
page readonly
|
||
1F2B8869000
|
unkown
|
page read and write
|
||
7FF50833F000
|
unkown
|
page readonly
|
||
7FF4EC69E000
|
unkown
|
page readonly
|
||
2839BF2F000
|
unkown
|
page read and write
|
||
7FF50824C000
|
unkown
|
page readonly
|
||
1564BB53000
|
unkown
|
page read and write
|
||
E95D87C000
|
unkown
|
page read and write
|
||
280A7FB000
|
unkown
|
page read and write
|
||
280AB7F000
|
unkown
|
page read and write
|
||
7FF4EC6A6000
|
unkown
|
page readonly
|
||
2EB46677000
|
heap default
|
page read and write
|
||
2C6E000
|
unkown
|
page read and write
|
||
20369F00000
|
unkown
|
page read and write
|
||
7FF5D3787000
|
unkown
|
page readonly
|
||
7FF5A20A7000
|
unkown
|
page readonly
|
||
7FF50834E000
|
unkown
|
page readonly
|
||
28A2000
|
unkown
|
page readonly
|
||
7FF5D37E6000
|
unkown
|
page readonly
|
||
7FF560221000
|
unkown
|
page readonly
|
||
1564BB8D000
|
unkown
|
page read and write
|
||
D1C6F7B000
|
unkown
|
page read and write
|
||
121927B000
|
unkown
|
page read and write
|
||
2839C03E000
|
unkown
|
page read and write
|
||
3489B4E000
|
unkown
|
page read and write
|
||
1564BB90000
|
unkown
|
page read and write
|
||
7FF5D37CF000
|
unkown
|
page readonly
|
||
7FF4EC65C000
|
unkown
|
page readonly
|
||
1564BB5B000
|
unkown
|
page read and write
|
||
1315C7F000
|
unkown
|
page read and write
|
||
1564BB5B000
|
unkown
|
page read and write
|
||
7FF5A1C31000
|
unkown
|
page readonly
|
||
1564B100000
|
unkown
|
page readonly
|
||
23B7E64F000
|
unkown
|
page read and write
|
||
2A93000
|
unkown
|
page readonly
|
||
303B000
|
unkown
|
page read and write
|
||
7FF5A242E000
|
unkown
|
page readonly
|
||
7FF5D379C000
|
unkown
|
page readonly
|
||
1564BB43000
|
unkown
|
page read and write
|
||
7FF5CCECD000
|
unkown
|
page readonly
|
||
12197FF000
|
unkown
|
page read and write
|
||
F8F6D0C000
|
unkown
|
page read and write
|
||
7FF4EC538000
|
unkown
|
page readonly
|
||
21CE7613000
|
unkown
|
page read and write
|
||
1564BB67000
|
unkown
|
page read and write
|
||
1564B910000
|
unkown
|
page read and write
|
||
7FF51258C000
|
unkown
|
page readonly
|
||
7FF53D676000
|
unkown
|
page readonly
|
||
3CFD1FE000
|
unkown
|
page read and write
|
||
D1C631B000
|
unkown
|
page read and write
|
||
7FF50818A000
|
unkown
|
page readonly
|
||
D1C6B7A000
|
unkown
|
page read and write
|
||
2839C084000
|
unkown
|
page read and write
|
||
1564B229000
|
unkown
|
page read and write
|
||
28399E91000
|
unkown
|
page read and write
|
||
1F2B8610000
|
heap default
|
page read and write
|
||
2839BF95000
|
unkown
|
page read and write
|
||
7FF59FD94000
|
unkown
|
page readonly
|
||
2A8F000
|
unkown
|
page readonly
|
||
153B9A02000
|
unkown
|
page read and write
|
||
1ACC8613000
|
unkown
|
page read and write
|
||
1564BC00000
|
unkown
|
page readonly
|
||
20369E6A000
|
unkown
|
page read and write
|
||
2ABB000
|
unkown
|
page readonly
|
||
7FF5A22D8000
|
unkown
|
page readonly
|
||
4740000
|
unkown
|
page readonly
|
||
4BF0000
|
unkown
|
page readonly
|
||
7FF512699000
|
unkown
|
page readonly
|
||
7FF541108000
|
unkown
|
page readonly
|
||
1564BB84000
|
unkown
|
page read and write
|
||
7FF51266A000
|
unkown
|
page readonly
|
||
7FF56D371000
|
unkown
|
page readonly
|
||
423D9FA000
|
unkown
|
page read and write
|
||
7FF5083CA000
|
unkown
|
page readonly
|
||
7FF5D34F0000
|
unkown
|
page readonly
|
||
4B311F5000
|
unkown
|
page read and write
|
||
7FF5602A0000
|
unkown
|
page readonly
|
||
7FF56D54F000
|
unkown
|
page readonly
|
||
1564BB5B000
|
unkown
|
page read and write
|
||
7FF5CCEB8000
|
unkown
|
page readonly
|
||
7FF4EC5D0000
|
unkown
|
page readonly
|
||
1564BB67000
|
unkown
|
page read and write
|
||
7FF5082AB000
|
unkown
|
page readonly
|
||
7FF53D6D2000
|
unkown
|
page readonly
|
||
7FF507FBA000
|
unkown
|
page readonly
|
||
7FF5D36C3000
|
unkown
|
page readonly
|
||
7FF56D574000
|
unkown
|
page readonly
|
||
1ACC8600000
|
unkown
|
page read and write
|
||
7FF51261E000
|
unkown
|
page readonly
|
||
7FF5A23E7000
|
unkown
|
page readonly
|
||
7FF540901000
|
unkown
|
page readonly
|
||
1564BBD4000
|
unkown
|
page read and write
|
||
1564B23C000
|
unkown
|
page read and write
|
||
7FF4EC698000
|
unkown
|
page readonly
|
||
7FF4F6F00000
|
unkown
|
page readonly
|
||
28399F3C000
|
unkown
|
page read and write
|
||
2839C242000
|
unkown
|
page read and write
|
||
2860000
|
unkown
|
page readonly
|
||
1564BB54000
|
unkown
|
page read and write
|
||
D1C6DFA000
|
unkown
|
page read and write
|
||
7FF4EC67A000
|
unkown
|
page readonly
|
||
D1C67FE000
|
unkown
|
page read and write
|
||
2A85000
|
unkown
|
page readonly
|
||
7FF512712000
|
unkown
|
page readonly
|
||
2B33000
|
unkown
|
page readonly
|
||
2DFC000
|
unkown
|
page read and write
|
||
7FF4EC511000
|
unkown
|
page readonly
|
||
7FF59FD42000
|
unkown
|
page readonly
|
||
20369E57000
|
unkown
|
page read and write
|
||
1564BBCE000
|
unkown
|
page read and write
|
||
3489F7E000
|
unkown
|
page read and write
|
||
153B99D0000
|
heap default
|
page read and write
|
||
1564BB67000
|
unkown
|
page read and write
|
||
7FF53CF8D000
|
unkown
|
page readonly
|
||
1F2B886B000
|
unkown
|
page read and write
|
||
280AA7E000
|
unkown
|
page read and write
|
||
1564BB6F000
|
unkown
|
page read and write
|
||
7FF5602E4000
|
unkown
|
page readonly
|
||
9DD34FE000
|
unkown
|
page read and write
|
||
7FF56D604000
|
unkown
|
page readonly
|
||
7FF5A24C2000
|
unkown
|
page readonly
|
||
2845000
|
unkown
|
page readonly
|
||
7FF5D366B000
|
unkown
|
page readonly
|
||
7FF5410AB000
|
unkown
|
page readonly
|
||
19E125A0000
|
unkown
|
page readonly
|
||
D1C6CFB000
|
unkown
|
page read and write
|
||
1564BB82000
|
unkown
|
page read and write
|
||
7FF4EC2FF000
|
unkown
|
page readonly
|
||
23B7E62A000
|
unkown
|
page read and write
|
||
20369E70000
|
unkown
|
page read and write
|
||
7FF508324000
|
unkown
|
page readonly
|
||
7FF5D37C4000
|
unkown
|
page readonly
|
||
E95D3F5000
|
unkown
|
page read and write
|
||
7FF4EC2FA000
|
unkown
|
page readonly
|
||
1F2B886E000
|
unkown
|
page read and write
|
||
7FF540E5B000
|
unkown
|
page readonly
|
||
7FF4F6F05000
|
unkown
|
page readonly
|
||
7FF56D3C3000
|
unkown
|
page readonly
|
||
7FF511D29000
|
unkown
|
page readonly
|
||
1564BB93000
|
unkown
|
page read and write
|
||
7FF5CCE7C000
|
unkown
|
page readonly
|
||
22E63BC0000
|
unkown
|
page read and write
|
||
7FF5082CA000
|
unkown
|
page readonly
|
||
17818695000
|
heap private
|
page read and write
|
||
1564BB34000
|
unkown
|
page read and write
|
||
1564B2C8000
|
unkown
|
page read and write
|
||
7FF5D37A7000
|
unkown
|
page readonly
|
||
7FF4EC635000
|
unkown
|
page readonly
|
||
7FF5D37B4000
|
unkown
|
page readonly
|
||
9A0000
|
unkown
|
page read and write
|
||
7FF56D1FA000
|
unkown
|
page readonly
|
||
1564BB67000
|
unkown
|
page read and write
|
||
1564C054000
|
unkown
|
page read and write
|
||
4B316FC000
|
unkown
|
page read and write
|
||
1ACC8E02000
|
unkown
|
page read and write
|
||
1564B870000
|
unkown
|
page readonly
|
||
17818610000
|
unkown
|
page readonly
|
||
7FF53D031000
|
unkown
|
page readonly
|
||
1F2B8869000
|
unkown
|
page read and write
|
||
7FF4F6F54000
|
unkown
|
page readonly
|
||
7FF508280000
|
unkown
|
page readonly
|
||
7FF56D520000
|
unkown
|
page readonly
|
||
2839C03A000
|
unkown
|
page read and write
|
||
2839BFBC000
|
unkown
|
page read and write
|
||
4B310FE000
|
unkown
|
page read and write
|
||
7FF59FE2A000
|
unkown
|
page readonly
|
||
7FF4F6F44000
|
unkown
|
page readonly
|
||
7FF5A24BA000
|
unkown
|
page readonly
|
||
1ACC8470000
|
heap default
|
page read and write
|
||
1564B2B3000
|
unkown
|
page read and write
|
||
3CFD0FE000
|
unkown
|
page read and write
|
||
7FF5CCF42000
|
unkown
|
page readonly
|
||
2839C100000
|
unkown
|
page read and write
|
||
1564B313000
|
unkown
|
page read and write
|
||
7FF508060000
|
unkown
|
page readonly
|
||
20369CC0000
|
heap private
|
page read and write
|
||
3489EFF000
|
unkown
|
page read and write
|
||
7FF4EC62A000
|
unkown
|
page readonly
|
||
20369E6A000
|
unkown
|
page read and write
|
||
7FF540EC1000
|
unkown
|
page readonly
|
||
23B7E800000
|
unkown
|
page readonly
|
||
1ACC8650000
|
unkown
|
page read and write
|
||
178185D0000
|
unkown
|
page read and write
|
||
28399E95000
|
unkown
|
page read and write
|
||
7FF5D35C1000
|
unkown
|
page readonly
|
||
1564BB9E000
|
unkown
|
page read and write
|
||
7FF5082AF000
|
unkown
|
page readonly
|
||
20369E00000
|
unkown
|
page read and write
|
||
2A55000
|
unkown
|
page readonly
|
||
2877000
|
unkown
|
page readonly
|
||
1564BB67000
|
unkown
|
page read and write
|
||
1564BB93000
|
unkown
|
page read and write
|
||
1ACC8560000
|
unkown
|
page readonly
|
||
7FF5D37ED000
|
unkown
|
page readonly
|
||
4B3177F000
|
unkown
|
page read and write
|
||
7FF54109A000
|
unkown
|
page readonly
|
||
7FF5A2408000
|
unkown
|
page readonly
|
||
2A9F000
|
unkown
|
page readonly
|
||
21CE763F000
|
unkown
|
page read and write
|
||
1564B2A4000
|
unkown
|
page read and write
|
||
2EB46650000
|
unkown
|
page read and write
|
||
178185F0000
|
unkown
|
page read and write
|
||
7FF541116000
|
unkown
|
page readonly
|
||
A31000
|
heap default
|
page read and write
|
||
28399E68000
|
unkown
|
page read and write
|
||
276B000
|
unkown
|
page readonly
|
||
13159CB000
|
unkown
|
page read and write
|
||
7FF4EC451000
|
unkown
|
page readonly
|
||
7FF56D537000
|
unkown
|
page readonly
|
||
7FF5080A6000
|
unkown
|
page readonly
|
||
C7B947F000
|
unkown
|
page read and write
|
||
1ACC8570000
|
unkown
|
page read and write
|
||
7FF560308000
|
unkown
|
page readonly
|
||
1564BB34000
|
unkown
|
page read and write
|
||
2839D000000
|
unkown
|
page read and write
|
||
7FF5D3613000
|
unkown
|
page readonly
|
||
7FF5082DA000
|
unkown
|
page readonly
|
||
B10000
|
heap default
|
page read and write
|
||
23B7E63C000
|
unkown
|
page read and write
|
||
7FF56CC2F000
|
unkown
|
page readonly
|
||
9DD357E000
|
unkown
|
page read and write
|
||
1564B24D000
|
unkown
|
page read and write
|
||
7FF512688000
|
unkown
|
page readonly
|
||
E95D677000
|
unkown
|
page read and write
|
||
1F2B8869000
|
unkown
|
page read and write
|
||
7FF5123A0000
|
unkown
|
page readonly
|
||
7FF4EC6A1000
|
unkown
|
page readonly
|
||
2EB4667E000
|
heap default
|
page read and write
|
||
1219475000
|
unkown
|
page read and write
|
||
1F2B886E000
|
unkown
|
page read and write
|
||
1ACC8700000
|
unkown
|
page read and write
|
||
7FF5410E4000
|
unkown
|
page readonly
|
||
32A0000
|
heap default
|
page read and write
|
||
1564BB8B000
|
unkown
|
page read and write
|
||
7FF54111D000
|
unkown
|
page readonly
|
||
7FF51268E000
|
unkown
|
page readonly
|
||
2FA0000
|
unkown
|
page readonly
|
||
7FF541040000
|
unkown
|
page readonly
|
||
7FF4EC3EB000
|
unkown
|
page readonly
|
||
7FF5A244D000
|
unkown
|
page readonly
|
||
E95D77F000
|
unkown
|
page read and write
|
||
7FF4EC533000
|
unkown
|
page readonly
|
||
7FF5A23FF000
|
unkown
|
page readonly
|
||
7FF53D407000
|
unkown
|
page readonly
|
||
D1C66FA000
|
unkown
|
page read and write
|
||
7FF4EC630000
|
unkown
|
page readonly
|
||
7FF512674000
|
unkown
|
page readonly
|
||
28399C50000
|
heap private
|
page read and write
|
||
2839C202000
|
unkown
|
page read and write
|
||
21CE7702000
|
unkown
|
page read and write
|
||
D1C68FA000
|
unkown
|
page read and write
|
||
1564BB53000
|
unkown
|
page read and write
|
||
1564BBA6000
|
unkown
|
page read and write
|
||
1564BA02000
|
unkown
|
page read and write
|
||
7FF51260A000
|
unkown
|
page readonly
|
||
7FF5CCE55000
|
unkown
|
page readonly
|
||
F8F707E000
|
unkown
|
page read and write
|
||
2F90000
|
heap private
|
page read and write
|
||
23B7E600000
|
unkown
|
page read and write
|
||
153B9B00000
|
unkown
|
page read and write
|
||
E95D27E000
|
unkown
|
page read and write
|
||
2036B800000
|
unkown
|
page read and write
|
||
1F2B8870000
|
unkown
|
page read and write
|
||
7FF4EC714000
|
unkown
|
page readonly
|
||
7FF5D3651000
|
unkown
|
page readonly
|
||
7FF508356000
|
unkown
|
page readonly
|
||
22E63CA6000
|
heap default
|
page read and write
|
||
1F2B8902000
|
unkown
|
page read and write
|
||
7FF5A22CB000
|
unkown
|
page readonly
|
||
2839BF00000
|
unkown
|
page read and write
|
||
7FF5CCE5B000
|
unkown
|
page readonly
|
||
7FF56D0E0000
|
unkown
|
page readonly
|
||
2EB46630000
|
unkown
|
page read and write
|
||
21CE7580000
|
heap default
|
page read and write
|
||
1564BB7C000
|
unkown
|
page read and write
|
||
2A29000
|
unkown
|
page readonly
|
||
1564B2E4000
|
unkown
|
page read and write
|
||
1564B910000
|
unkown
|
page read and write
|
||
1564B930000
|
unkown
|
page readonly
|
||
28399F2D000
|
unkown
|
page read and write
|
||
1564BB58000
|
unkown
|
page read and write
|
||
19E12390000
|
unkown
|
page readonly
|
||
7FF53D581000
|
unkown
|
page readonly
|
||
7FF5083C4000
|
unkown
|
page readonly
|
||
7FF508057000
|
unkown
|
page readonly
|
||
4B313F7000
|
unkown
|
page read and write
|
||
22E63C90000
|
heap default
|
page read and write
|
||
22E63CC0000
|
unkown
|
page read and write
|
||
7FF508183000
|
unkown
|
page readonly
|
||
23B7E602000
|
unkown
|
page read and write
|
||
21CE7629000
|
unkown
|
page read and write
|
||
22E63AD0000
|
unkown
|
page readonly
|
||
7FF508114000
|
unkown
|
page readonly
|
||
2839BFBA000
|
unkown
|
page read and write
|
||
153BA130000
|
unkown
|
page read and write
|
||
23B7E68C000
|
unkown
|
page read and write
|
||
7FF5082B4000
|
unkown
|
page readonly
|
||
7FF5D3861000
|
unkown
|
page readonly
|
||
7FF5CCE94000
|
unkown
|
page readonly
|
||
2B01000
|
unkown
|
page readonly
|
||
280A3BE000
|
unkown
|
page read and write
|
||
D1C6C7A000
|
unkown
|
page read and write
|
||
23B7E700000
|
unkown
|
page read and write
|
||
7FF5CCEC9000
|
unkown
|
page readonly
|
||
1564BBD4000
|
unkown
|
page read and write
|
||
7FF53D71C000
|
unkown
|
page readonly
|
||
1F2B886E000
|
unkown
|
page read and write
|
||
153B9A2A000
|
unkown
|
page read and write
|
||
22E63CC0000
|
unkown
|
page read and write
|
||
1564BB8D000
|
unkown
|
page read and write
|
||
7FF53D798000
|
unkown
|
page readonly
|
||
28399F5D000
|
unkown
|
page read and write
|
||
D1C6E79000
|
unkown
|
page read and write
|
||
7FF540E66000
|
unkown
|
page readonly
|
||
4B312F7000
|
unkown
|
page read and write
|
||
2839C200000
|
unkown
|
page read and write
|
||
7FF560392000
|
unkown
|
page readonly
|
||
3489FFF000
|
unkown
|
page read and write
|
||
1ACC864B000
|
unkown
|
page read and write
|
||
7FF512501000
|
unkown
|
page readonly
|
||
7FF512696000
|
unkown
|
page readonly
|
||
1564BB58000
|
unkown
|
page read and write
|
||
1564C061000
|
unkown
|
page read and write
|
||
7FF56D51A000
|
unkown
|
page readonly
|
||
280A33E000
|
unkown
|
page read and write
|
||
7FF5410D8000
|
unkown
|
page readonly
|
||
7FF56D60A000
|
unkown
|
page readonly
|
||
7FF59FDBD000
|
unkown
|
page readonly
|
||
7FF53D3EC000
|
unkown
|
page readonly
|
||
7FF507EB5000
|
unkown
|
page readonly
|
||
2918000
|
unkown
|
page readonly
|
||
7FF53D50F000
|
unkown
|
page readonly
|
||
7FF4EC5F3000
|
unkown
|
page readonly
|
||
1564BB53000
|
unkown
|
page read and write
|
||
19E12270000
|
unkown
|
page readonly
|
||
7FF59FE31000
|
unkown
|
page readonly
|
||
7FF512711000
|
unkown
|
page readonly
|
||
7FF5A23CA000
|
unkown
|
page readonly
|
||
153B9970000
|
heap private
|
page read and write
|
||
1564B8F0000
|
unkown
|
page readonly
|
||
C7B967F000
|
unkown
|
page read and write
|
||
7FF5410A5000
|
unkown
|
page readonly
|
||
1564BB83000
|
unkown
|
page read and write
|
||
2839BF8D000
|
unkown
|
page read and write
|
||
1564BB43000
|
unkown
|
page read and write
|
||
1564B2EE000
|
unkown
|
page read and write
|
||
7FF56D401000
|
unkown
|
page readonly
|
||
1564BB93000
|
unkown
|
page read and write
|
||
30D0000
|
unkown
|
page readonly
|
||
2839BF8B000
|
unkown
|
page read and write
|
||
7FF53D78E000
|
unkown
|
page readonly
|
||
7FF53D735000
|
unkown
|
page readonly
|
||
7FF5D375A000
|
unkown
|
page readonly
|
||
7FF4F6F5E000
|
unkown
|
page readonly
|
||
21CE78D0000
|
unkown
|
page readonly
|
||
1564BB8C000
|
unkown
|
page read and write
|
||
7FF50809B000
|
unkown
|
page readonly
|
||
7FF4EC489000
|
unkown
|
page readonly
|
||
7FF5D3775000
|
unkown
|
page readonly
|
||
1564BB8D000
|
unkown
|
page read and write
|
||
2853000
|
unkown
|
page readonly
|
||
7FF5082BF000
|
unkown
|
page readonly
|
||
2839BFBE000
|
unkown
|
page read and write
|
||
1564BB78000
|
unkown
|
page read and write
|
||
7FF560384000
|
unkown
|
page readonly
|
||
7FF53D4EB000
|
unkown
|
page readonly
|
||
7FF5408FD000
|
unkown
|
page readonly
|
||
1564BB8D000
|
unkown
|
page read and write
|
||
D1C69FB000
|
unkown
|
page read and write
|
||
7FF507C37000
|
unkown
|
page readonly
|
||
7FF53D7A6000
|
unkown
|
page readonly
|
||
20369E6A000
|
unkown
|
page read and write
|
||
7FF53D774000
|
unkown
|
page readonly
|
||
272D000
|
unkown
|
page readonly
|
||
7FF5082DE000
|
unkown
|
page readonly
|
||
1564B2A8000
|
unkown
|
page read and write
|
||
7FF56D557000
|
unkown
|
page readonly
|
||
1564B200000
|
unkown
|
page read and write
|
||
7FF540D6A000
|
unkown
|
page readonly
|
||
1ACC868D000
|
unkown
|
page read and write
|
||
28399E9E000
|
unkown
|
page read and write
|
||
22E63E90000
|
unkown
|
page readonly
|
||
7FF5081C1000
|
unkown
|
page readonly
|
||
2FD7000
|
unkown
|
page read and write
|
||
7FF56D52B000
|
unkown
|
page readonly
|
||
7FF5602EA000
|
unkown
|
page readonly
|
||
7FF507E4E000
|
unkown
|
page readonly
|
||
7FF4EC722000
|
unkown
|
page readonly
|
||
21CE75E0000
|
unkown
|
page readonly
|
||
7FF540D5C000
|
unkown
|
page readonly
|
||
7FF50822D000
|
unkown
|
page readonly
|
||
287F000
|
unkown
|
page readonly
|
||
23B7E550000
|
unkown
|
page read and write
|
||
28399E00000
|
unkown
|
page read and write
|
||
2839D310000
|
unkown
|
page read and write
|
||
2EB46970000
|
unkown
|
page readonly
|
||
1564B287000
|
unkown
|
page read and write
|
||
1564BB79000
|
unkown
|
page read and write
|
||
7FF5A2372000
|
unkown
|
page readonly
|
||
22E63CB7000
|
unkown
|
page read and write
|
||
1564C002000
|
unkown
|
page read and write
|
||
7FF54110E000
|
unkown
|
page readonly
|
||
7FF507BE1000
|
unkown
|
page readonly
|
||
7FF5CCE50000
|
unkown
|
page readonly
|
||
20369E33000
|
unkown
|
page read and write
|
||
7FF59FDA8000
|
unkown
|
page readonly
|
||
1564BB8B000
|
unkown
|
page read and write
|
||
1564BB14000
|
unkown
|
page read and write
|
||
7FF512584000
|
unkown
|
page readonly
|
||
2839BF15000
|
unkown
|
page read and write
|
||
7FF5082E5000
|
unkown
|
page readonly
|
||
7FF5D3336000
|
unkown
|
page readonly
|
||
2839C302000
|
unkown
|
page read and write
|
||
1564BB67000
|
unkown
|
page read and write
|
||
1564BB43000
|
unkown
|
page read and write
|
||
28399F13000
|
unkown
|
page read and write
|
||
7FF508116000
|
unkown
|
page readonly
|
||
1564C002000
|
unkown
|
page read and write
|
||
7FF5A218B000
|
unkown
|
page readonly
|
||
7FF56D525000
|
unkown
|
page readonly
|
||
3170000
|
unkown
|
page readonly
|
||
3CFD27F000
|
unkown
|
page read and write
|
||
D1C6AFB000
|
unkown
|
page read and write
|
||
1564BB34000
|
unkown
|
page read and write
|
||
2839C282000
|
unkown
|
page read and write
|
||
2B28000
|
unkown
|
page readonly
|
||
1564B900000
|
unkown
|
page readonly
|
||
1564C000000
|
unkown
|
page read and write
|
||
1ACC866D000
|
unkown
|
page read and write
|
||
3489BCE000
|
unkown
|
page read and write
|
||
1564C200000
|
unkown
|
page readonly
|
||
7FF59FD8A000
|
unkown
|
page readonly
|
||
1564BB67000
|
unkown
|
page read and write
|
||
2923000
|
unkown
|
page readonly
|
||
1F2B883F000
|
unkown
|
page read and write
|
||
32AA000
|
heap default
|
page read and write
|
||
7FF56038A000
|
unkown
|
page readonly
|
||
7FF5CCE7F000
|
unkown
|
page readonly
|
||
7FF5CC7A7000
|
unkown
|
page readonly
|
||
7FF5A24C1000
|
unkown
|
page readonly
|
||
1315E7E000
|
unkown
|
page read and write
|
||
12195FE000
|
unkown
|
page read and write
|
||
178186E7000
|
heap default
|
page read and write
|
||
3440000
|
heap private
|
page read and write
|
||
1F2B8913000
|
unkown
|
page read and write
|
||
7FF560391000
|
unkown
|
page readonly
|
||
7FF508282000
|
unkown
|
page readonly
|
||
7FF4F6F4A000
|
unkown
|
page readonly
|
||
7FF512573000
|
unkown
|
page readonly
|
||
1F2BA1A0000
|
unkown
|
page read and write
|
||
2839C300000
|
unkown
|
page read and write
|
||
1ACC8687000
|
unkown
|
page read and write
|
||
C7B94FF000
|
unkown
|
page read and write
|
||
20369F02000
|
unkown
|
page read and write
|
||
1564BB84000
|
unkown
|
page read and write
|
||
2869000
|
unkown
|
page readonly
|
||
2B14000
|
unkown
|
page readonly
|
||
7FF56D51E000
|
unkown
|
page readonly
|
||
280A87F000
|
unkown
|
page read and write
|
||
7FF53D555000
|
unkown
|
page readonly
|
||
153B9A13000
|
unkown
|
page read and write
|
||
17818500000
|
unkown
|
page readonly
|
||
1564BB5B000
|
unkown
|
page read and write
|
||
7FF5D3345000
|
unkown
|
page readonly
|
||
1F2B8900000
|
unkown
|
page read and write
|
||
7FF4F6F02000
|
unkown
|
page readonly
|
||
7FF51256D000
|
unkown
|
page readonly
|
||
7FF5124C3000
|
unkown
|
page readonly
|
||
7FF56030E000
|
unkown
|
page readonly
|
||
28399CC0000
|
unkown
|
page readonly
|
||
7FF56D599000
|
unkown
|
page readonly
|
||
1564BB53000
|
unkown
|
page read and write
|
||
23B7EE02000
|
unkown
|
page read and write
|
||
7FF56D564000
|
unkown
|
page readonly
|
||
7FF56D58E000
|
unkown
|
page readonly
|
||
7FF56D59D000
|
unkown
|
page readonly
|
||
1ACC9000000
|
unkown
|
page readonly
|
||
7FF4EC307000
|
unkown
|
page readonly
|
||
2839C036000
|
unkown
|
page read and write
|
||
7FF56D473000
|
unkown
|
page readonly
|
||
3450000
|
unkown
|
page readonly
|
||
23B7E655000
|
unkown
|
page read and write
|
||
1564BB93000
|
unkown
|
page read and write
|
||
7FF53D564000
|
unkown
|
page readonly
|
||
7FF541111000
|
unkown
|
page readonly
|
||
2904000
|
unkown
|
page readonly
|
||
2A87000
|
unkown
|
page readonly
|
||
2839C400000
|
unkown
|
page readonly
|
||
7FF5CCEBE000
|
unkown
|
page readonly
|
||
2839B8A0000
|
unkown
|
page readonly
|
||
7FF4EC5D2000
|
unkown
|
page readonly
|
||
28399DE0000
|
unkown
|
page readonly
|
||
7FF512704000
|
unkown
|
page readonly
|
||
2839BFB6000
|
unkown
|
page read and write
|
||
28399EB9000
|
unkown
|
page read and write
|
||
7FF5410A0000
|
unkown
|
page readonly
|
||
1F2B886E000
|
unkown
|
page read and write
|
||
22E63E80000
|
heap private
|
page read and write
|
||
2839BFCA000
|
unkown
|
page read and write
|
||
7FF53D309000
|
unkown
|
page readonly
|
||
7FF507EF7000
|
unkown
|
page readonly
|
||
1564B308000
|
unkown
|
page read and write
|
||
28399CB0000
|
heap default
|
page read and write
|
||
7FF5082EB000
|
unkown
|
page readonly
|
||
1F2B8870000
|
unkown
|
page read and write
|
||
7FF5CCF3A000
|
unkown
|
page readonly
|
||
7FF5D3854000
|
unkown
|
page readonly
|
||
7FF53D571000
|
unkown
|
page readonly
|
||
1564BB93000
|
unkown
|
page read and write
|
||
7FF5A2438000
|
unkown
|
page readonly
|
||
7FF5CCF34000
|
unkown
|
page readonly
|
||
D1C6FFC000
|
unkown
|
page read and write
|
||
1564BB5B000
|
unkown
|
page read and write
|
||
2AB6000
|
unkown
|
page readonly
|
||
28399F1A000
|
unkown
|
page read and write
|
||
2839BCE0000
|
unkown
|
page readonly
|
||
7FF56D0F5000
|
unkown
|
page readonly
|
||
1564B2EF000
|
unkown
|
page read and write
|
||
7FF56D484000
|
unkown
|
page readonly
|
||
7FF5D3862000
|
unkown
|
page readonly
|
||
7FF4EC65F000
|
unkown
|
page readonly
|
||
7FF5A2229000
|
unkown
|
page readonly
|
||
1564B910000
|
unkown
|
page readonly
|
||
7FF4EC668000
|
unkown
|
page readonly
|
||
1ACC8708000
|
unkown
|
page read and write
|
||
7FF5D37DE000
|
unkown
|
page readonly
|
||
7FF51264F000
|
unkown
|
page readonly
|
||
A1A000
|
heap default
|
page read and write
|
||
D1C6A7B000
|
unkown
|
page read and write
|
||
2C72000
|
unkown
|
page read and write
|
||
7FF540FA3000
|
unkown
|
page readonly
|
||
1ACC8629000
|
unkown
|
page read and write
|
||
7FF5A241A000
|
unkown
|
page readonly
|
||
7FF541191000
|
unkown
|
page readonly
|
||
1564B8A0000
|
unkown
|
page write copy
|
||
288A000
|
unkown
|
page readonly
|
||
12198FD000
|
unkown
|
page read and write
|
||
7FF4F6F0B000
|
unkown
|
page readonly
|
||
1ACC8C60000
|
unkown
|
page readonly
|
||
7FF5D36BD000
|
unkown
|
page readonly
|
||
2A70000
|
unkown
|
page readonly
|
||
4B3197B000
|
unkown
|
page read and write
|
||
280A2BC000
|
unkown
|
page read and write
|
||
7FF54109E000
|
unkown
|
page readonly
|
||
28A6000
|
unkown
|
page readonly
|
||
153B99E0000
|
unkown
|
page readonly
|
||
20369E6A000
|
unkown
|
page read and write
|
||
7FF53D589000
|
unkown
|
page readonly
|
||
2839C142000
|
unkown
|
page read and write
|
||
7FF53D704000
|
unkown
|
page readonly
|
||
1F2B8829000
|
unkown
|
page read and write
|
||
153BA740000
|
unkown
|
page readonly
|
||
19E12340000
|
unkown
|
page read and write
|
||
1F2B886F000
|
unkown
|
page read and write
|
||
7FF512397000
|
unkown
|
page readonly
|
||
7FF4F6FEA000
|
unkown
|
page readonly
|
||
7FF5A1C2D000
|
unkown
|
page readonly
|
||
2839BC80000
|
unkown
|
page read and write
|
||
7FF560319000
|
unkown
|
page readonly
|
||
7FF508334000
|
unkown
|
page readonly
|
||
A10000
|
heap default
|
page read and write
|
||
2EB46560000
|
unkown
|
page readonly
|
||
7FF512620000
|
unkown
|
page readonly
|
||
7FF51269D000
|
unkown
|
page readonly
|
||
7FF5602A5000
|
unkown
|
page readonly
|
||
21CE7800000
|
unkown
|
page readonly
|
||
7FF56D588000
|
unkown
|
page readonly
|
||
2839A000000
|
unkown
|
page readonly
|
||
1564BB93000
|
unkown
|
page read and write
|
||
153B9B02000
|
unkown
|
page read and write
|
||
7FF59FD45000
|
unkown
|
page readonly
|
||
7FF4EC647000
|
unkown
|
page readonly
|
||
7FF5A24B4000
|
unkown
|
page readonly
|
||
2819000
|
unkown
|
page readonly
|
||
7FF5081E8000
|
unkown
|
page readonly
|
||
2839C073000
|
unkown
|
page read and write
|
||
22E63CB6000
|
unkown
|
page read and write
|
||
7FF540F81000
|
unkown
|
page readonly
|
||
F8F71FE000
|
unkown
|
page read and write
|
||
7FF5602A2000
|
unkown
|
page readonly
|
||
7FF4EC455000
|
unkown
|
page readonly
|
||
21CE7590000
|
unkown
|
page write copy
|
||
1F2B886F000
|
unkown
|
page read and write
|
||
7FF53D6CC000
|
unkown
|
page readonly
|
||
1564B920000
|
unkown
|
page read and write
|
||
7FF507EF5000
|
unkown
|
page readonly
|
||
1564B090000
|
heap private
|
page read and write
|
||
7FF5A2370000
|
unkown
|
page readonly
|
||
1564BB8D000
|
unkown
|
page read and write
|
||
7FF53D6F3000
|
unkown
|
page readonly
|
||
2839BC20000
|
heap private
|
page read and write
|
||
7FF56D611000
|
unkown
|
page readonly
|
||
2839BCC0000
|
unkown
|
page readonly
|
||
7FF5CCE9A000
|
unkown
|
page readonly
|
||
7FF5D3770000
|
unkown
|
page readonly
|
||
1564BB53000
|
unkown
|
page read and write
|
||
153BA202000
|
unkown
|
page read and write
|
||
7FF5410CF000
|
unkown
|
page readonly
|
||
7FF4EC2EC000
|
unkown
|
page readonly
|
||
2839BC80000
|
unkown
|
page read and write
|
||
2839C053000
|
unkown
|
page read and write
|
||
E95D2FE000
|
unkown
|
page read and write
|
||
153B9A22000
|
unkown
|
page read and write
|
||
7FF59FE32000
|
unkown
|
page readonly
|
||
30A0000
|
unkown
|
page read and write
|
||
1564B1E0000
|
unkown
|
page readonly
|
||
1564BB84000
|
unkown
|
page read and write
|
||
1ACC866D000
|
unkown
|
page read and write
|
||
1564BB18000
|
unkown
|
page read and write
|
||
7FF507C33000
|
unkown
|
page readonly
|
||
12199FF000
|
unkown
|
page read and write
|
||
7FF512471000
|
unkown
|
page readonly
|
||
3CFCD0B000
|
unkown
|
page read and write
|
||
7FF4F6F7D000
|
unkown
|
page readonly
|
||
7FF56D0E6000
|
unkown
|
page readonly
|
||
7FF5A23D0000
|
unkown
|
page readonly
|
||
7FF53D638000
|
unkown
|
page readonly
|
||
7FF53D292000
|
unkown
|
page readonly
|
||
28AB000
|
unkown
|
page readonly
|
||
7FF53D767000
|
unkown
|
page readonly
|
||
2AB2000
|
unkown
|
page readonly
|
||
1564B1F0000
|
unkown
|
page read and write
|
||
20369F13000
|
unkown
|
page read and write
|
||
2750000
|
unkown
|
page readonly
|
||
F8F6D8E000
|
unkown
|
page read and write
|
||
7FF56D50A000
|
unkown
|
page readonly
|
||
2A5C000
|
unkown
|
page readonly
|
||
2A63000
|
unkown
|
page readonly
|
||
1315D7A000
|
unkown
|
page read and write
|
||
281C000
|
unkown
|
page readonly
|
||
1564B1D0000
|
unkown
|
page readonly
|
||
21CE7602000
|
unkown
|
page read and write
|
||
1564B2FE000
|
unkown
|
page read and write
|
||
28399E7F000
|
unkown
|
page read and write
|
||
C7B96FC000
|
unkown
|
page read and write
|
||
20369D20000
|
heap default
|
page read and write
|
||
153B9A70000
|
unkown
|
page read and write
|
||
7FF508131000
|
unkown
|
page readonly
|
||
12196F7000
|
unkown
|
page read and write
|
||
3489ACC000
|
unkown
|
page read and write
|
||
7FF5602D8000
|
unkown
|
page readonly
|
||
1564B0F0000
|
heap default
|
page read and write
|
||
1F2B8856000
|
unkown
|
page read and write
|
||
22E63CB1000
|
heap default
|
page read and write
|
||
7FF4EC674000
|
unkown
|
page readonly
|
||
7FF5D376E000
|
unkown
|
page readonly
|
||
7FF53D821000
|
unkown
|
page readonly
|
||
1F2B8800000
|
unkown
|
page read and write
|
||
7FF5D366E000
|
unkown
|
page readonly
|
||
23B7E708000
|
unkown
|
page read and write
|
||
1F2B8620000
|
unkown
|
page readonly
|
||
4890000
|
heap private
|
page read and write
|
||
1F2B8813000
|
unkown
|
page read and write
|
||
9DD377A000
|
unkown
|
page read and write
|
||
7FF53D72E000
|
unkown
|
page readonly
|
||
7FF4EC721000
|
unkown
|
page readonly
|
||
7FF5A2196000
|
unkown
|
page readonly
|
||
7FF540FA8000
|
unkown
|
page readonly
|
||
7FF54118A000
|
unkown
|
page readonly
|
||
7FF5079E9000
|
unkown
|
page readonly
|
||
7FF4EC52B000
|
unkown
|
page readonly
|
||
1564BB86000
|
unkown
|
page read and write
|
||
19E123C6000
|
heap default
|
page read and write
|
||
7FF4EBE91000
|
unkown
|
page readonly
|
||
7FF5D37E9000
|
unkown
|
page readonly
|
||
7FF5A209A000
|
unkown
|
page readonly
|
||
1564C002000
|
unkown
|
page read and write
|
||
2036A050000
|
unkown
|
page readonly
|
||
7FF59FD6C000
|
unkown
|
page readonly
|
||
7FF51251B000
|
unkown
|
page readonly
|
||
2839BCA0000
|
unkown
|
page read and write
|
||
9DD35FA000
|
unkown
|
page read and write
|
||
7FF5A23FC000
|
unkown
|
page readonly
|
||
D1C6EFD000
|
unkown
|
page read and write
|
||
1564B27F000
|
unkown
|
page read and write
|
||
7FF511D2F000
|
unkown
|
page readonly
|
||
1315DF9000
|
unkown
|
page read and write
|
||
7FF5D379F000
|
unkown
|
page readonly
|
||
7FF53D6D0000
|
unkown
|
page readonly
|
||
7FF53D6C2000
|
unkown
|
page readonly
|
||
2AA1000
|
unkown
|
page readonly
|
||
153B9A55000
|
unkown
|
page read and write
|
||
23B7F000000
|
unkown
|
page readonly
|
||
153B9C00000
|
unkown
|
page readonly
|
||
1564BB34000
|
unkown
|
page read and write
|
||
2EB46960000
|
heap private
|
page read and write
|
||
1564BB93000
|
unkown
|
page read and write
|
||
1564BB67000
|
unkown
|
page read and write
|
||
7FF541184000
|
unkown
|
page readonly
|
||
1564BB54000
|
unkown
|
page read and write
|
||
7FF512664000
|
unkown
|
page readonly
|
||
19E123C0000
|
heap default
|
page read and write
|
||
1315CFE000
|
unkown
|
page read and write
|
||
20369E29000
|
unkown
|
page read and write
|
||
9DD367A000
|
unkown
|
page read and write
|
||
178187E0000
|
unkown
|
page readonly
|
||
2EB46500000
|
unkown
|
page readonly
|
||
284C000
|
unkown
|
page readonly
|
||
28399EF5000
|
unkown
|
page read and write
|
||
20369E6A000
|
unkown
|
page read and write
|
||
7FF5602AB000
|
unkown
|
page readonly
|
||
7FF53D75F000
|
unkown
|
page readonly
|
||
7FF5D385A000
|
unkown
|
page readonly
|
||
1ACC8702000
|
unkown
|
page read and write
|
||
7FF56031D000
|
unkown
|
page readonly
|
||
7FF508317000
|
unkown
|
page readonly
|
||
7FF53D77A000
|
unkown
|
page readonly
|
||
1564BB8A000
|
unkown
|
page read and write
|
||
7FF59FE24000
|
unkown
|
page readonly
|
||
7FF51261A000
|
unkown
|
page readonly
|
||
1564B400000
|
unkown
|
page readonly
|
||
1564BB87000
|
unkown
|
page read and write
|
||
7FF56D46D000
|
unkown
|
page readonly
|
||
7FF4EC6AD000
|
unkown
|
page readonly
|
||
7FF5A21F1000
|
unkown
|
page readonly
|
||
2960000
|
unkown
|
page readonly
|
||
7FF5A243E000
|
unkown
|
page readonly
|
||
7FF5410F4000
|
unkown
|
page readonly
|
||
28399E8B000
|
unkown
|
page read and write
|
||
2839BF12000
|
unkown
|
page read and write
|
||
2839D210000
|
unkown
|
page read and write
|
||
7FF540F9B000
|
unkown
|
page readonly
|
||
153B9A8A000
|
unkown
|
page read and write
|
||
7FF541192000
|
unkown
|
page readonly
|
||
32C1000
|
heap default
|
page read and write
|
||
121957B000
|
unkown
|
page read and write
|
||
4B315FE000
|
unkown
|
page read and write
|
||
2839BF6B000
|
unkown
|
page read and write
|
||
D1C667E000
|
unkown
|
page read and write
|
||
2A2C000
|
unkown
|
page readonly
|
||
D1C707D000
|
unkown
|
page read and write
|
||
7FF53D566000
|
unkown
|
page readonly
|
||
7FF540D6F000
|
unkown
|
page readonly
|
||
28F1000
|
unkown
|
page readonly
|
||
7FF4F6F2C000
|
unkown
|
page readonly
|
||
251D000
|
unkown
|
page readonly
|
||
2A79000
|
unkown
|
page readonly
|
||
7FF540EF9000
|
unkown
|
page readonly
|
||
7FF53D72A000
|
unkown
|
page readonly
|
||
7FF5D36D4000
|
unkown
|
page readonly
|
||
2839BC10000
|
unkown
|
page readonly
|
||
1564B252000
|
unkown
|
page read and write
|
||
7FF53D633000
|
unkown
|
page readonly
|
||
F8F717F000
|
unkown
|
page read and write
|
||
1F2B8740000
|
unkown
|
page readonly
|
||
7FF59FD84000
|
unkown
|
page readonly
|
||
7FF541119000
|
unkown
|
page readonly
|
||
7FF5A209F000
|
unkown
|
page readonly
|
||
2912000
|
unkown
|
page readonly
|
||
2A6C000
|
unkown
|
page readonly
|
||
178184A0000
|
unkown
|
page readonly
|
||
7FF508348000
|
unkown
|
page readonly
|
||
28399F02000
|
unkown
|
page read and write
|
||
2A8D000
|
unkown
|
page readonly
|
||
1564BB5B000
|
unkown
|
page read and write
|
||
7FF4F6FE4000
|
unkown
|
page readonly
|
||
4B30D9C000
|
unkown
|
page read and write
|
||
7FF508233000
|
unkown
|
page readonly
|
||
21CE9170000
|
unkown
|
page readonly
|
||
2EB46900000
|
unkown
|
page readonly
|
||
7FF5D377B000
|
unkown
|
page readonly
|
||
7FF56D41B000
|
unkown
|
page readonly
|
||
7FF540EC5000
|
unkown
|
page readonly
|
||
2839BC00000
|
unkown
|
page read and write
|
||
7FF56CC29000
|
unkown
|
page readonly
|
||
7FF507EA0000
|
unkown
|
page readonly
|
||
1564B270000
|
unkown
|
page read and write
|
||
7FF5CCEA4000
|
unkown
|
page readonly
|
||
7FF51267F000
|
unkown
|
page readonly
|
||
7FF5D376A000
|
unkown
|
page readonly
|
||
28399E13000
|
unkown
|
page read and write
|
||
2036B900000
|
unkown
|
page readonly
|
||
7FF508121000
|
unkown
|
page readonly
|
||
7FF508359000
|
unkown
|
page readonly
|
||
22E63C00000
|
unkown
|
page readonly
|
||
7FF53D75C000
|
unkown
|
page readonly
|
||
1564BB93000
|
unkown
|
page read and write
|
||
4B3107E000
|
unkown
|
page read and write
|
||
7FF4EC63B000
|
unkown
|
page readonly
|
||
423DD7E000
|
unkown
|
page read and write
|
||
7FF5A23DB000
|
unkown
|
page readonly
|
||
7FF51270A000
|
unkown
|
page readonly
|
||
D1C70FF000
|
unkown
|
page read and write
|
||
E95D47E000
|
unkown
|
page read and write
|
||
7FF5602F4000
|
unkown
|
page readonly
|
||
288F000
|
unkown
|
page readonly
|
||
2036A000000
|
unkown
|
page write copy
|
||
1564B910000
|
unkown
|
page read and write
|
||
7FF53D3FF000
|
unkown
|
page readonly
|
||
22E63E85000
|
heap private
|
page read and write
|
||
2839C012000
|
unkown
|
page read and write
|
||
23B7E3F0000
|
heap private
|
page read and write
|
||
19E12360000
|
unkown
|
page read and write
|
||
7FF5121E0000
|
unkown
|
page readonly
|
||
7FF5A208C000
|
unkown
|
page readonly
|
||
1564BB34000
|
unkown
|
page read and write
|
||
D1C6D7B000
|
unkown
|
page read and write
|
||
7FF53CF91000
|
unkown
|
page readonly
|
||
7FF507DBE000
|
unkown
|
page readonly
|
||
7FF5082E0000
|
unkown
|
page readonly
|
||
1564B257000
|
unkown
|
page read and write
|
||
F8F727E000
|
unkown
|
page read and write
|
||
7FF59FD4B000
|
unkown
|
page readonly
|
||
7FF512657000
|
unkown
|
page readonly
|
||
1564BB00000
|
unkown
|
page read and write
|
||
2B22000
|
unkown
|
page readonly
|
||
7FF55FF65000
|
unkown
|
page readonly
|
||
178186EE000
|
heap default
|
page read and write
|
||
7FF5121E6000
|
unkown
|
page readonly
|
||
1564B213000
|
unkown
|
page read and write
|
||
2891000
|
unkown
|
page readonly
|
||
23B7E622000
|
unkown
|
page read and write
|
||
1564BB8F000
|
unkown
|
page read and write
|
||
23B7E66F000
|
unkown
|
page read and write
|
||
12192FD000
|
unkown
|
page read and write
|
||
7FF53D7A9000
|
unkown
|
page readonly
|
||
153B9A3C000
|
unkown
|
page read and write
|
||
7FF4F6F6E000
|
unkown
|
page readonly
|
||
280A977000
|
unkown
|
page read and write
|
||
2839D010000
|
unkown
|
page read and write
|
||
7FF56D50C000
|
unkown
|
page readonly
|
||
285C000
|
unkown
|
page readonly
|
||
1F2B86F0000
|
unkown
|
page write copy
|
||
17818690000
|
heap private
|
page read and write
|
||
2883000
|
unkown
|
page readonly
|
||
20369E3C000
|
unkown
|
page read and write
|
||
22E63CB0000
|
unkown
|
page read and write
|
||
7FF53D784000
|
unkown
|
page readonly
|
||
7FF59FD9E000
|
unkown
|
page readonly
|
||
1564B2C1000
|
unkown
|
page read and write
|
||
7FF5410FE000
|
unkown
|
page readonly
|
||
7FF5602CC000
|
unkown
|
page readonly
|
||
20369E02000
|
unkown
|
page read and write
|
||
1ACC8655000
|
unkown
|
page read and write
|
||
28399EE2000
|
unkown
|
page read and write
|
||
7FF5CCF41000
|
unkown
|
page readonly
|
||
2B33000
|
unkown
|
page readonly
|
||
7FF508244000
|
unkown
|
page readonly
|
||
121937E000
|
unkown
|
page read and write
|
||
93B000
|
unkown
|
page read and write
|
||
7FF53D747000
|
unkown
|
page readonly
|
||
7FF53D814000
|
unkown
|
page readonly
|
||
7FF5A2441000
|
unkown
|
page readonly
|
||
7FF53D4F6000
|
unkown
|
page readonly
|
||
7FF5A2446000
|
unkown
|
page readonly
|
||
28399E3F000
|
unkown
|
page read and write
|
||
7FF53D551000
|
unkown
|
page readonly
|
||
7FF51260C000
|
unkown
|
page readonly
|
||
1ACC8550000
|
unkown
|
page readonly
|
||
28399F5D000
|
unkown
|
page read and write
|
||
2923000
|
unkown
|
page readonly
|
||
1564C002000
|
unkown
|
page read and write
|
||
3CFCD8F000
|
unkown
|
page read and write
|
||
21CE7520000
|
heap private
|
page read and write
|
||
D1C639E000
|
unkown
|
page read and write
|
||
21CE7655000
|
unkown
|
page read and write
|
||
153B9CD0000
|
unkown
|
page readonly
|
||
7FF540D77000
|
unkown
|
page readonly
|
||
1564B253000
|
unkown
|
page read and write
|
||
2839BC80000
|
unkown
|
page read and write
|
||
3160000
|
heap default
|
page read and write
|
||
7FF5081DB000
|
unkown
|
page readonly
|
||
7FF56D612000
|
unkown
|
page readonly
|
||
7FF5A22D3000
|
unkown
|
page readonly
|
||
7FF53D822000
|
unkown
|
page readonly
|
||
7FF5CCEAE000
|
unkown
|
page readonly
|
||
9D0000
|
unkown
|
page readonly
|
||
7FF4EC71A000
|
unkown
|
page readonly
|
||
7FF4EC68E000
|
unkown
|
page readonly
|
||
7FF4F6FF2000
|
unkown
|
page readonly
|
||
282A000
|
unkown
|
page readonly
|
||
21CE7600000
|
unkown
|
page read and write
|
||
7FF5D3330000
|
unkown
|
page readonly
|
||
423DDFE000
|
unkown
|
page read and write
|
||
D1C697A000
|
unkown
|
page read and write
|
||
1F2B85B0000
|
heap private
|
page read and write
|
||
2875000
|
unkown
|
page readonly
|
||
23B7E540000
|
unkown
|
page readonly
|
||
22E63CC0000
|
unkown
|
page read and write
|
||
1ACC864D000
|
unkown
|
page read and write
|
||
153BA400000
|
unkown
|
page readonly
|
||
7FF5A21F5000
|
unkown
|
page readonly
|
||
4D10000
|
heap private
|
page read and write
|
||
7FF53D6FB000
|
unkown
|
page readonly
|
||
153B9A00000
|
unkown
|
page read and write
|
||
21CE9070000
|
unkown
|
page read and write
|
||
7FF512625000
|
unkown
|
page readonly
|
||
1564BB5B000
|
unkown
|
page read and write
|
||
7FF5A2414000
|
unkown
|
page readonly
|
||
19E124C0000
|
unkown
|
page readonly
|
||
28399E6E000
|
unkown
|
page read and write
|
||
20369E31000
|
unkown
|
page read and write
|
||
7FF5D36DC000
|
unkown
|
page readonly
|
||
7FF56D57F000
|
unkown
|
page readonly
|
||
9C0000
|
unkown
|
page readonly
|
||
22E63BA0000
|
unkown
|
page read and write
|
||
7FF4EC6A9000
|
unkown
|
page readonly
|
||
2A9A000
|
unkown
|
page readonly
|
There are 1055 hidden memdumps, click here to show them.