Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
audit-78958169.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$audit-78958169.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\werty2.dll
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\04DD18EA-EB39-43EF-8561-8310CF9A47D6
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\2F8551B.png
|
PNG image data, 490 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\566DD3D4.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CAA60556.png
|
PNG image data, 521 x 246, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D5AE39C5.png
|
PNG image data, 246 x 108, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E91A6D02.png
|
PNG image data, 934 x 29, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F5F4895F.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\fasol[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\BF940000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
There are 3 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\werty1.dll
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\werty2.dll
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.dreamhimalayan.com
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
http://trade.welcomenepal.com/useful-contact/trekking-agencies
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/dolpo-region-trek.html
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/everest-base-camp-helicopter-tour.html
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/nepal-short-and-easy-trek.html
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/blog/everest-base-camp-trek-a-complete-guide/
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/welcome.html
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/poon-hill-trek.html
|
unknown
|
|
|
|
https://www.jscache.com/wejs?wtype=selfserveprop&uniq=109&locationId=6894456&lang=en_US&
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/booking.html
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://www.tripadvisor.com/img/cdsi/img2/branding/150_logo-11900-2.png
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/island-peak-climbing.html
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/everest-kalapathar-trek.html
|
unknown
|
|
|
|
https://embed.tawk.to/5b1e29123604f81d726bebcb/default
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/pagegallery/5twit.png
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://thetravelista.net/2018/04/25/2-week-nepal-itinerary/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/blog/8-things-to-do-in-thamel/
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/images/logo-01.png
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/review.html
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/guides-porters-hire.html
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/pagegallery/100ntb.png
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com/embed?
|
unknown
|
|
|
|
https://augloop.office.com
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/terms-and-conditions.html
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/annapurna-region.html
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/pagegallery/48visa.jpg
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/classic-nepal-tour.html
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/team.html
|
unknown
|
|
|
|
https://api.diagnostics.office.com
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/pagegallery/22trekking-spot.jpg
|
unknown
|
|
|
|
https://store.office.de/addinstemplate
|
unknown
|
|
|
|
https://wus2.pagecontentsync.
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/datasets
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/nepal.html
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/pagegallery/37travelista.jpg
|
unknown
|
|
|
|
https://cortana.ai/api
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/kathmandu-day-tour.html
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/payment-process.html
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/nepal-family-tour.html
|
unknown
|
|
|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/pagegallery/49gov.png
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
http://www.dreamhimalayan.com/team.html
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
http://xenatechnepal.com
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://www.dreamhimalayan.com/slider/budget-everest-base-camp-trek47.jpg
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
dreamhimalayan.com
|
192.185.113.120
|
|
|
|
forfacks.com
|
192.185.48.167
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.48.167
|
forfacks.com
|
United States
|
|
|
|
192.185.113.120
|
dreamhimalayan.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
$`?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
%`?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
497B9
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
49CCA
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
49E31
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
49EFC
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
49FF6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1p?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 52 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF572161000
|
unkown
|
page readonly
|
|
|
|
7FF574A96000
|
unkown
|
page readonly
|
|
|
|
7FF5612E4000
|
unkown
|
page readonly
|
|
|
|
7FF574CD5000
|
unkown
|
page readonly
|
|
|
|
24F7C6E0000
|
unkown
|
page read and write
|
|
|
|
13F29A54000
|
unkown
|
page read and write
|
|
|
|
7FF5721BA000
|
unkown
|
page readonly
|
|
|
|
7FF59488B000
|
unkown
|
page readonly
|
|
|
|
6B5DA9B000
|
unkown
|
page read and write
|
|
|
|
13F2BD00000
|
unkown
|
page read and write
|
|
|
|
29E03163000
|
unkown
|
page read and write
|
|
|
|
29E03145000
|
unkown
|
page read and write
|
|
|
|
29E0314C000
|
unkown
|
page read and write
|
|
|
|
29E03135000
|
unkown
|
page read and write
|
|
|
|
29E03128000
|
unkown
|
page read and write
|
|
|
|
7FF574D4D000
|
unkown
|
page readonly
|
|
|
|
2A34000
|
unkown
|
page readonly
|
|
|
|
29E0314B000
|
unkown
|
page read and write
|
|
|
|
7FF5CF00C000
|
unkown
|
page readonly
|
|
|
|
13F29AF7000
|
unkown
|
page read and write
|
|
|
|
7FF591F5E000
|
unkown
|
page readonly
|
|
|
|
7FF571EE5000
|
unkown
|
page readonly
|
|
|
|
1F02EC6A000
|
unkown
|
page read and write
|
|
|
|
E77EC7E000
|
unkown
|
page read and write
|
|
|
|
29E03166000
|
unkown
|
page read and write
|
|
|
|
2851000
|
unkown
|
page readonly
|
|
|
|
29E03155000
|
unkown
|
page read and write
|
|
|
|
7FF514494000
|
unkown
|
page readonly
|
|
|
|
29E03128000
|
unkown
|
page read and write
|
|
|
|
7FF5CE6E7000
|
unkown
|
page readonly
|
|
|
|
22706313000
|
unkown
|
page read and write
|
|
|
|
7FF574D46000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF4C000
|
unkown
|
page readonly
|
|
|
|
29E031B1000
|
unkown
|
page read and write
|
|
|
|
7FF594761000
|
unkown
|
page readonly
|
|
|
|
7FF5722B0000
|
unkown
|
page readonly
|
|
|
|
29E02A13000
|
unkown
|
page read and write
|
|
|
|
D857C9B000
|
unkown
|
page read and write
|
|
|
|
29E03140000
|
unkown
|
page read and write
|
|
|
|
7FF572110000
|
unkown
|
page readonly
|
|
|
|
29E031B1000
|
unkown
|
page read and write
|
|
|
|
29E0313B000
|
unkown
|
page read and write
|
|
|
|
D857D9E000
|
unkown
|
page read and write
|
|
|
|
7FF59362F000
|
unkown
|
page readonly
|
|
|
|
264D000
|
unkown
|
page readonly
|
|
|
|
38CE57F000
|
unkown
|
page read and write
|
|
|
|
2947CB90000
|
unkown
|
page write copy
|
|
|
|
2B640813000
|
unkown
|
page read and write
|
|
|
|
13F29A62000
|
unkown
|
page read and write
|
|
|
|
29E0314B000
|
unkown
|
page read and write
|
|
|
|
2F92000
|
unkown
|
page read and write
|
|
|
|
7FF55F754000
|
unkown
|
page readonly
|
|
|
|
13F29AE3000
|
unkown
|
page read and write
|
|
|
|
E77E67E000
|
unkown
|
page read and write
|
|
|
|
7FF574C93000
|
unkown
|
page readonly
|
|
|
|
1F02EC02000
|
unkown
|
page read and write
|
|
|
|
2B640A00000
|
unkown
|
page readonly
|
|
|
|
29E02FF0000
|
unkown
|
page readonly
|
|
|
|
13F2BB4A000
|
unkown
|
page read and write
|
|
|
|
7FF5612CF000
|
unkown
|
page readonly
|
|
|
|
29E035B0000
|
unkown
|
page readonly
|
|
|
|
29E02A00000
|
unkown
|
page read and write
|
|
|
|
13F2BCC5000
|
unkown
|
page read and write
|
|
|
|
7FF5612D8000
|
unkown
|
page readonly
|
|
|
|
7FF514099000
|
unkown
|
page readonly
|
|
|
|
29E03602000
|
unkown
|
page read and write
|
|
|
|
7FF59371B000
|
unkown
|
page readonly
|
|
|
|
D85857F000
|
unkown
|
page read and write
|
|
|
|
7FF574BB1000
|
unkown
|
page readonly
|
|
|
|
7FF5142E1000
|
unkown
|
page readonly
|
|
|
|
2947CD00000
|
unkown
|
page read and write
|
|
|
|
29E02AE2000
|
unkown
|
page read and write
|
|
|
|
3BF347C000
|
unkown
|
page read and write
|
|
|
|
3BF357C000
|
unkown
|
page read and write
|
|
|
|
7FF59477B000
|
unkown
|
page readonly
|
|
|
|
7FF57499A000
|
unkown
|
page readonly
|
|
|
|
7FF571E72000
|
unkown
|
page readonly
|
|
|
|
29E0314C000
|
unkown
|
page read and write
|
|
|
|
29E03174000
|
unkown
|
page read and write
|
|
|
|
7FF591F61000
|
unkown
|
page readonly
|
|
|
|
29A5000
|
unkown
|
page readonly
|
|
|
|
29E0314D000
|
unkown
|
page read and write
|
|
|
|
7FF5931C1000
|
unkown
|
page readonly
|
|
|
|
13F29B13000
|
unkown
|
page read and write
|
|
|
|
7FF5CF017000
|
unkown
|
page readonly
|
|
|
|
7FF593A44000
|
unkown
|
page readonly
|
|
|
|
319D8B000
|
unkown
|
page read and write
|
|
|
|
1F02EC6A000
|
unkown
|
page read and write
|
|
|
|
7FF5144BA000
|
unkown
|
page readonly
|
|
|
|
7FF55F738000
|
unkown
|
page readonly
|
|
|
|
13F2BCCF000
|
unkown
|
page read and write
|
|
|
|
7FF5145AA000
|
unkown
|
page readonly
|
|
|
|
7FF574CDB000
|
unkown
|
page readonly
|
|
|
|
7FF59362A000
|
unkown
|
page readonly
|
|
|
|
7FF5CE6E1000
|
unkown
|
page readonly
|
|
|
|
2B641002000
|
unkown
|
page read and write
|
|
|
|
29E031B1000
|
unkown
|
page read and write
|
|
|
|
2947CB80000
|
heap default
|
page read and write
|
|
|
|
13F29A29000
|
unkown
|
page read and write
|
|
|
|
29E03166000
|
unkown
|
page read and write
|
|
|
|
29E03193000
|
unkown
|
page read and write
|
|
|
|
29E03135000
|
unkown
|
page read and write
|
|
|
|
24F7AC41000
|
unkown
|
page read and write
|
|
|
|
2B640861000
|
unkown
|
page read and write
|
|
|
|
29E03702000
|
unkown
|
page read and write
|
|
|
|
7FF591DD1000
|
unkown
|
page readonly
|
|
|
|
3BF2EF9000
|
unkown
|
page read and write
|
|
|
|
27D5000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF33000
|
unkown
|
page readonly
|
|
|
|
7FF5939CE000
|
unkown
|
page readonly
|
|
|
|
7FF513DC1000
|
unkown
|
page readonly
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
24F7AB90000
|
heap private
|
page read and write
|
|
|
|
29E0314B000
|
unkown
|
page read and write
|
|
|
|
7FF574DC2000
|
unkown
|
page readonly
|
|
|
|
29E02910000
|
unkown
|
page readonly
|
|
|
|
29E03002000
|
unkown
|
page read and write
|
|
|
|
13F2C310000
|
unkown
|
page read and write
|
|
|
|
24F7B120000
|
unkown
|
page readonly
|
|
|
|
29E03155000
|
unkown
|
page read and write
|
|
|
|
13F2BD42000
|
unkown
|
page read and write
|
|
|
|
7FF591FDA000
|
unkown
|
page readonly
|
|
|
|
7FF574D14000
|
unkown
|
page readonly
|
|
|
|
31C1000
|
heap default
|
page read and write
|
|
|
|
7FF560F5C000
|
unkown
|
page readonly
|
|
|
|
29E02A4B000
|
unkown
|
page read and write
|
|
|
|
29E03156000
|
unkown
|
page read and write
|
|
|
|
29E03166000
|
unkown
|
page read and write
|
|
|
|
7FF574CE7000
|
unkown
|
page readonly
|
|
|
|
7FF56138A000
|
unkown
|
page readonly
|
|
|
|
29E03127000
|
unkown
|
page read and write
|
|
|
|
29E0317F000
|
unkown
|
page read and write
|
|
|
|
7FF5CF059000
|
unkown
|
page readonly
|
|
|
|
2B64083C000
|
unkown
|
page read and write
|
|
|
|
29E03602000
|
unkown
|
page read and write
|
|
|
|
7FF5CF0C4000
|
unkown
|
page readonly
|
|
|
|
7FF5723FA000
|
unkown
|
page readonly
|
|
|
|
71B000
|
unkown
|
page read and write
|
|
|
|
2B640802000
|
unkown
|
page read and write
|
|
|
|
29E03185000
|
unkown
|
page read and write
|
|
|
|
7FF5CEFCA000
|
unkown
|
page readonly
|
|
|
|
13F298E0000
|
heap default
|
page read and write
|
|
|
|
1F02ED00000
|
unkown
|
page read and write
|
|
|
|
2855000
|
unkown
|
page readonly
|
|
|
|
7FF55F76E000
|
unkown
|
page readonly
|
|
|
|
13F2BD02000
|
unkown
|
page read and write
|
|
|
|
3BF317B000
|
unkown
|
page read and write
|
|
|
|
7FF593868000
|
unkown
|
page readonly
|
|
|
|
7FF5612A0000
|
unkown
|
page readonly
|
|
|
|
7FF56105B000
|
unkown
|
page readonly
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
29E03141000
|
unkown
|
page read and write
|
|
|
|
1405BB02000
|
unkown
|
page read and write
|
|
|
|
2B640866000
|
unkown
|
page read and write
|
|
|
|
29E031BB000
|
unkown
|
page read and write
|
|
|
|
29E031A0000
|
unkown
|
page read and write
|
|
|
|
3400000
|
unkown
|
page readonly
|
|
|
|
29E031A0000
|
unkown
|
page read and write
|
|
|
|
29E03800000
|
unkown
|
page readonly
|
|
|
|
29E03148000
|
unkown
|
page read and write
|
|
|
|
29E03124000
|
unkown
|
page read and write
|
|
|
|
C9DD3FA000
|
unkown
|
page read and write
|
|
|
|
1405BC00000
|
unkown
|
page readonly
|
|
|
|
297C000
|
unkown
|
page readonly
|
|
|
|
29E031C6000
|
unkown
|
page read and write
|
|
|
|
7FF572327000
|
unkown
|
page readonly
|
|
|
|
28E10CE5000
|
heap private
|
page read and write
|
|
|
|
BD1CB7F000
|
unkown
|
page read and write
|
|
|
|
29DB000
|
unkown
|
page readonly
|
|
|
|
2947CC6F000
|
unkown
|
page read and write
|
|
|
|
892000
|
unkown
|
page read and write
|
|
|
|
1F02EA00000
|
heap default
|
page read and write
|
|
|
|
7FF56131D000
|
unkown
|
page readonly
|
|
|
|
13F2C310000
|
unkown
|
page read and write
|
|
|
|
13F2BB55000
|
unkown
|
page read and write
|
|
|
|
29E031A0000
|
unkown
|
page read and write
|
|
|
|
7FF5145A4000
|
unkown
|
page readonly
|
|
|
|
29B3000
|
unkown
|
page readonly
|
|
|
|
29E0313D000
|
unkown
|
page read and write
|
|
|
|
7FF514504000
|
unkown
|
page readonly
|
|
|
|
29E03180000
|
unkown
|
page read and write
|
|
|
|
2947CD13000
|
unkown
|
page read and write
|
|
|
|
13F29AD6000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown
|
page readonly
|
|
|
|
31A07E000
|
unkown
|
page read and write
|
|
|
|
1405BA00000
|
unkown
|
page read and write
|
|
|
|
13F29B5B000
|
unkown
|
page read and write
|
|
|
|
7FF571F25000
|
unkown
|
page readonly
|
|
|
|
7FF594440000
|
unkown
|
page readonly
|
|
|
|
7FF574A8B000
|
unkown
|
page readonly
|
|
|
|
1F02EC6A000
|
unkown
|
page read and write
|
|
|
|
29E03163000
|
unkown
|
page read and write
|
|
|
|
29E03180000
|
unkown
|
page read and write
|
|
|
|
7FF5CEFE0000
|
unkown
|
page readonly
|
|
|
|
29E03590000
|
unkown
|
page read and write
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
7FF5144EF000
|
unkown
|
page readonly
|
|
|
|
7FF5948D4000
|
unkown
|
page readonly
|
|
|
|
C9DCF7F000
|
unkown
|
page read and write
|
|
|
|
247D000
|
unkown
|
page readonly
|
|
|
|
7FF591EEE000
|
unkown
|
page readonly
|
|
|
|
7FF594964000
|
unkown
|
page readonly
|
|
|
|
7FF514460000
|
unkown
|
page readonly
|
|
|
|
7FF594723000
|
unkown
|
page readonly
|
|
|
|
2B640829000
|
unkown
|
page read and write
|
|
|
|
6B5DB1E000
|
unkown
|
page read and write
|
|
|
|
2A25000
|
unkown
|
page readonly
|
|
|
|
29E03181000
|
unkown
|
page read and write
|
|
|
|
22706302000
|
unkown
|
page read and write
|
|
|
|
22706190000
|
unkown
|
page readonly
|
|
|
|
22706255000
|
unkown
|
page read and write
|
|
|
|
7FF5931BD000
|
unkown
|
page readonly
|
|
|
|
28E10A00000
|
heap default
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
C9DCA7B000
|
unkown
|
page read and write
|
|
|
|
D8581FB000
|
unkown
|
page read and write
|
|
|
|
29E03590000
|
unkown
|
page read and write
|
|
|
|
29D6000
|
unkown
|
page readonly
|
|
|
|
13F29AE7000
|
unkown
|
page read and write
|
|
|
|
7FF57233C000
|
unkown
|
page readonly
|
|
|
|
2B64085F000
|
unkown
|
page read and write
|
|
|
|
7FF593A52000
|
unkown
|
page readonly
|
|
|
|
13F2BC00000
|
unkown
|
page read and write
|
|
|
|
7FF593781000
|
unkown
|
page readonly
|
|
|
|
7FF591F07000
|
unkown
|
page readonly
|
|
|
|
1405D3A0000
|
unkown
|
page read and write
|
|
|
|
29E03190000
|
unkown
|
page read and write
|
|
|
|
7FF514452000
|
unkown
|
page readonly
|
|
|
|
7FF591E92000
|
unkown
|
page readonly
|
|
|
|
7FF5939DD000
|
unkown
|
page readonly
|
|
|
|
7FF5CEEDE000
|
unkown
|
page readonly
|
|
|
|
7FF5611A3000
|
unkown
|
page readonly
|
|
|
|
7FF5142E5000
|
unkown
|
page readonly
|
|
|
|
3070000
|
heap default
|
page read and write
|
|
|
|
7FF593A51000
|
unkown
|
page readonly
|
|
|
|
13F29B1B000
|
unkown
|
page read and write
|
|
|
|
7FF5CEEC1000
|
unkown
|
page readonly
|
|
|
|
2A53000
|
unkown
|
page readonly
|
|
|
|
13F2BB5E000
|
unkown
|
page read and write
|
|
|
|
29E02AB1000
|
unkown
|
page read and write
|
|
|
|
C9DCE77000
|
unkown
|
page read and write
|
|
|
|
2AC0000
|
unkown
|
page readonly
|
|
|
|
13F2B4F0000
|
unkown
|
page readonly
|
|
|
|
29E03144000
|
unkown
|
page read and write
|
|
|
|
29E03156000
|
unkown
|
page read and write
|
|
|
|
7FF591E90000
|
unkown
|
page readonly
|
|
|
|
7FF5CEE83000
|
unkown
|
page readonly
|
|
|
|
7FF594600000
|
unkown
|
page readonly
|
|
|
|
29E0312D000
|
unkown
|
page read and write
|
|
|
|
29E03181000
|
unkown
|
page read and write
|
|
|
|
7FF5CF056000
|
unkown
|
page readonly
|
|
|
|
3070000
|
unkown
|
page readonly
|
|
|
|
7FF5144C5000
|
unkown
|
page readonly
|
|
|
|
7FF593977000
|
unkown
|
page readonly
|
|
|
|
2270628A000
|
unkown
|
page read and write
|
|
|
|
7FF594455000
|
unkown
|
page readonly
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
29E02C00000
|
unkown
|
page readonly
|
|
|
|
29E02FB0000
|
unkown
|
page readonly
|
|
|
|
29AF000
|
unkown
|
page readonly
|
|
|
|
E77E6FE000
|
unkown
|
page read and write
|
|
|
|
7FF572090000
|
unkown
|
page readonly
|
|
|
|
13F2BBF4000
|
unkown
|
page read and write
|
|
|
|
13F29A82000
|
unkown
|
page read and write
|
|
|
|
1F02EC13000
|
unkown
|
page read and write
|
|
|
|
2779000
|
unkown
|
page readonly
|
|
|
|
7FF561311000
|
unkown
|
page readonly
|
|
|
|
7FF591F34000
|
unkown
|
page readonly
|
|
|
|
7FF59477E000
|
unkown
|
page readonly
|
|
|
|
7FF594446000
|
unkown
|
page readonly
|
|
|
|
4D50000
|
heap private
|
page read and write
|
|
|
|
7FF59487E000
|
unkown
|
page readonly
|
|
|
|
7FF591D15000
|
unkown
|
page readonly
|
|
|
|
7FF5144BE000
|
unkown
|
page readonly
|
|
|
|
29E03132000
|
unkown
|
page read and write
|
|
|
|
29E03590000
|
unkown
|
page readonly
|
|
|
|
13F29B2A000
|
unkown
|
page read and write
|
|
|
|
2A53000
|
unkown
|
page readonly
|
|
|
|
29E0314C000
|
unkown
|
page read and write
|
|
|
|
3BF2AFE000
|
unkown
|
page read and write
|
|
|
|
22706308000
|
unkown
|
page read and write
|
|
|
|
38CE37E000
|
unkown
|
page read and write
|
|
|
|
7FF5948E8000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFDA000
|
unkown
|
page readonly
|
|
|
|
29E03184000
|
unkown
|
page read and write
|
|
|
|
1F02E9A0000
|
heap private
|
page read and write
|
|
|
|
7FF561263000
|
unkown
|
page readonly
|
|
|
|
13F2C110000
|
unkown
|
page read and write
|
|
|
|
13F2BD82000
|
unkown
|
page read and write
|
|
|
|
13F2B8F0000
|
unkown
|
page readonly
|
|
|
|
7FF51451E000
|
unkown
|
page readonly
|
|
|
|
13F2BBE9000
|
unkown
|
page read and write
|
|
|
|
7FF561181000
|
unkown
|
page readonly
|
|
|
|
7FF514406000
|
unkown
|
page readonly
|
|
|
|
7FF5948EE000
|
unkown
|
page readonly
|
|
|
|
29E03192000
|
unkown
|
page read and write
|
|
|
|
24F7AD00000
|
unkown
|
page read and write
|
|
|
|
7FF5CF024000
|
unkown
|
page readonly
|
|
|
|
3080000
|
unkown
|
page readonly
|
|
|
|
2B64088A000
|
unkown
|
page read and write
|
|
|
|
13F2BE42000
|
unkown
|
page read and write
|
|
|
|
29E03122000
|
unkown
|
page read and write
|
|
|
|
7FF561240000
|
unkown
|
page readonly
|
|
|
|
BD1CAF9000
|
unkown
|
page read and write
|
|
|
|
29E03135000
|
unkown
|
page read and write
|
|
|
|
13F29AC1000
|
unkown
|
page read and write
|
|
|
|
7FF514539000
|
unkown
|
page readonly
|
|
|
|
D857D1D000
|
unkown
|
page read and write
|
|
|
|
7FF5612F4000
|
unkown
|
page readonly
|
|
|
|
7FF5947D3000
|
unkown
|
page readonly
|
|
|
|
24F7CB40000
|
unkown
|
page read and write
|
|
|
|
3BF32FD000
|
unkown
|
page read and write
|
|
|
|
7FF5CF0CA000
|
unkown
|
page readonly
|
|
|
|
1405B7C0000
|
heap private
|
page read and write
|
|
|
|
29E03170000
|
unkown
|
page read and write
|
|
|
|
31A27F000
|
unkown
|
page read and write
|
|
|
|
1405BA54000
|
unkown
|
page read and write
|
|
|
|
3BF2DFB000
|
unkown
|
page read and write
|
|
|
|
7FF5CEBB5000
|
unkown
|
page readonly
|
|
|
|
7FF591F6D000
|
unkown
|
page readonly
|
|
|
|
6B5DEF9000
|
unkown
|
page read and write
|
|
|
|
13F2C110000
|
unkown
|
page read and write
|
|
|
|
2983000
|
unkown
|
page readonly
|
|
|
|
7FF574D08000
|
unkown
|
page readonly
|
|
|
|
7FF560F77000
|
unkown
|
page readonly
|
|
|
|
13F2B8B0000
|
unkown
|
page read and write
|
|
|
|
27EA000
|
unkown
|
page readonly
|
|
|
|
7FF593998000
|
unkown
|
page readonly
|
|
|
|
7FF574C70000
|
unkown
|
page readonly
|
|
|
|
2947CC6B000
|
unkown
|
page read and write
|
|
|
|
7FF51429F000
|
unkown
|
page readonly
|
|
|
|
7FF572364000
|
unkown
|
page readonly
|
|
|
|
7FF591EFB000
|
unkown
|
page readonly
|
|
|
|
28E10A26000
|
unkown
|
page read and write
|
|
|
|
7FF594880000
|
unkown
|
page readonly
|
|
|
|
D858377000
|
unkown
|
page read and write
|
|
|
|
13F298F0000
|
unkown
|
page readonly
|
|
|
|
29E03149000
|
unkown
|
page read and write
|
|
|
|
7FF572386000
|
unkown
|
page readonly
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
7FF5CEE31000
|
unkown
|
page readonly
|
|
|
|
29E0312E000
|
unkown
|
page read and write
|
|
|
|
13F29AE1000
|
unkown
|
page read and write
|
|
|
|
13F2C010000
|
unkown
|
page read and write
|
|
|
|
28E10A11000
|
unkown
|
page read and write
|
|
|
|
7FF5721F1000
|
unkown
|
page readonly
|
|
|
|
2947CC59000
|
unkown
|
page read and write
|
|
|
|
29E03170000
|
unkown
|
page read and write
|
|
|
|
7FF5CF05D000
|
unkown
|
page readonly
|
|
|
|
1F02EC6A000
|
unkown
|
page read and write
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
2883000
|
unkown
|
page readonly
|
|
|
|
3BF34FC000
|
unkown
|
page read and write
|
|
|
|
29E02AA2000
|
unkown
|
page read and write
|
|
|
|
7FF55F768000
|
unkown
|
page readonly
|
|
|
|
7FF513D21000
|
unkown
|
page readonly
|
|
|
|
7FF5948F9000
|
unkown
|
page readonly
|
|
|
|
C9DCD7A000
|
unkown
|
page read and write
|
|
|
|
13F29AB6000
|
unkown
|
page read and write
|
|
|
|
7FF574BD3000
|
unkown
|
page readonly
|
|
|
|
7FF571F27000
|
unkown
|
page readonly
|
|
|
|
13F2B8B0000
|
unkown
|
page read and write
|
|
|
|
29E031A0000
|
unkown
|
page read and write
|
|
|
|
7FF55F057000
|
unkown
|
page readonly
|
|
|
|
1F02EA10000
|
unkown
|
page readonly
|
|
|
|
13F2BBF6000
|
unkown
|
page read and write
|
|
|
|
2947CC6F000
|
unkown
|
page read and write
|
|
|
|
3BF307B000
|
unkown
|
page read and write
|
|
|
|
29E03126000
|
unkown
|
page read and write
|
|
|
|
7FF514022000
|
unkown
|
page readonly
|
|
|
|
7FF571C11000
|
unkown
|
page readonly
|
|
|
|
2947CD02000
|
unkown
|
page read and write
|
|
|
|
29E03122000
|
unkown
|
page read and write
|
|
|
|
A60000
|
heap private
|
page read and write
|
|
|
|
7FF57225D000
|
unkown
|
page readonly
|
|
|
|
29E03170000
|
unkown
|
page read and write
|
|
|
|
1405BA13000
|
unkown
|
page read and write
|
|
|
|
7FF51418F000
|
unkown
|
page readonly
|
|
|
|
28E10A3F000
|
unkown
|
page read and write
|
|
|
|
7FF574DC1000
|
unkown
|
page readonly
|
|
|
|
13F2BBF0000
|
unkown
|
page read and write
|
|
|
|
29E02A81000
|
unkown
|
page read and write
|
|
|
|
7FF591F4E000
|
unkown
|
page readonly
|
|
|
|
3BF327A000
|
unkown
|
page read and write
|
|
|
|
7FF572274000
|
unkown
|
page readonly
|
|
|
|
7FF5939D6000
|
unkown
|
page readonly
|
|
|
|
7FF57227C000
|
unkown
|
page readonly
|
|
|
|
29E0313F000
|
unkown
|
page read and write
|
|
|
|
27DF000
|
unkown
|
page readonly
|
|
|
|
268B000
|
unkown
|
page readonly
|
|
|
|
3BF35FF000
|
unkown
|
page read and write
|
|
|
|
28E10990000
|
unkown
|
page read and write
|
|
|
|
E77E97F000
|
unkown
|
page read and write
|
|
|
|
7FF56119B000
|
unkown
|
page readonly
|
|
|
|
29E031A2000
|
unkown
|
page read and write
|
|
|
|
7FF574AF1000
|
unkown
|
page readonly
|
|
|
|
24BB000
|
unkown
|
page readonly
|
|
|
|
1F02EC56000
|
unkown
|
page read and write
|
|
|
|
7FF5939A4000
|
unkown
|
page readonly
|
|
|
|
13F2BD82000
|
unkown
|
page read and write
|
|
|
|
7FF593726000
|
unkown
|
page readonly
|
|
|
|
13F2B8B0000
|
unkown
|
page read and write
|
|
|
|
7FF591751000
|
unkown
|
page readonly
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
13F2BD82000
|
unkown
|
page read and write
|
|
|
|
29E035A0000
|
unkown
|
page read and write
|
|
|
|
2B640902000
|
unkown
|
page read and write
|
|
|
|
13F2B910000
|
unkown
|
page readonly
|
|
|
|
29E03162000
|
unkown
|
page read and write
|
|
|
|
24F7AC00000
|
unkown
|
page read and write
|
|
|
|
7FF591DF8000
|
unkown
|
page readonly
|
|
|
|
2DC0000
|
unkown
|
page read and write
|
|
|
|
29E03133000
|
unkown
|
page read and write
|
|
|
|
7FF572401000
|
unkown
|
page readonly
|
|
|
|
13F2BB8F000
|
unkown
|
page read and write
|
|
|
|
7FF591BBA000
|
unkown
|
page readonly
|
|
|
|
7FF561392000
|
unkown
|
page readonly
|
|
|
|
7FF593841000
|
unkown
|
page readonly
|
|
|
|
7FF591FE2000
|
unkown
|
page readonly
|
|
|
|
7FF593900000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF44000
|
unkown
|
page readonly
|
|
|
|
7FF5CF04E000
|
unkown
|
page readonly
|
|
|
|
29E0313D000
|
unkown
|
page read and write
|
|
|
|
3BF2D7A000
|
unkown
|
page read and write
|
|
|
|
7FF572218000
|
unkown
|
page readonly
|
|
|
|
29E03192000
|
unkown
|
page read and write
|
|
|
|
13F29C00000
|
unkown
|
page write copy
|
|
|
|
7FF5612CC000
|
unkown
|
page readonly
|
|
|
|
7FF593863000
|
unkown
|
page readonly
|
|
|
|
2270623C000
|
unkown
|
page read and write
|
|
|
|
29E0316F000
|
unkown
|
page read and write
|
|
|
|
2DF0000
|
unkown
|
page readonly
|
|
|
|
7FF561308000
|
unkown
|
page readonly
|
|
|
|
29E03127000
|
unkown
|
page read and write
|
|
|
|
7FF5939AA000
|
unkown
|
page readonly
|
|
|
|
7FF59398F000
|
unkown
|
page readonly
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
13F29ABF000
|
unkown
|
page read and write
|
|
|
|
7FF5722EF000
|
unkown
|
page readonly
|
|
|
|
7FF56130E000
|
unkown
|
page readonly
|
|
|
|
29E0314B000
|
unkown
|
page read and write
|
|
|
|
2947CC00000
|
unkown
|
page read and write
|
|
|
|
7FF561242000
|
unkown
|
page readonly
|
|
|
|
7FF574AF5000
|
unkown
|
page readonly
|
|
|
|
7FF591DEB000
|
unkown
|
page readonly
|
|
|
|
29E03126000
|
unkown
|
page read and write
|
|
|
|
7FF514531000
|
unkown
|
page readonly
|
|
|
|
2A48000
|
unkown
|
page readonly
|
|
|
|
7FF513D1D000
|
unkown
|
page readonly
|
|
|
|
7FF5CF0D2000
|
unkown
|
page readonly
|
|
|
|
29E0314B000
|
unkown
|
page read and write
|
|
|
|
13F29A13000
|
unkown
|
page read and write
|
|
|
|
29E0312E000
|
unkown
|
page read and write
|
|
|
|
38CE2FE000
|
unkown
|
page read and write
|
|
|
|
28E10CF0000
|
unkown
|
page readonly
|
|
|
|
29E031B1000
|
unkown
|
page read and write
|
|
|
|
7FF5144C0000
|
unkown
|
page readonly
|
|
|
|
7FF574CCE000
|
unkown
|
page readonly
|
|
|
|
2F96000
|
unkown
|
page read and write
|
|
|
|
7FF574CCA000
|
unkown
|
page readonly
|
|
|
|
27F1000
|
unkown
|
page readonly
|
|
|
|
22706110000
|
heap private
|
page read and write
|
|
|
|
7FF5CEFEB000
|
unkown
|
page readonly
|
|
|
|
29E0318B000
|
unkown
|
page read and write
|
|
|
|
7FF514514000
|
unkown
|
page readonly
|
|
|
|
7FF51440D000
|
unkown
|
page readonly
|
|
|
|
29E03114000
|
unkown
|
page read and write
|
|
|
|
29E03540000
|
unkown
|
page write copy
|
|
|
|
2947CC6D000
|
unkown
|
page read and write
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
3BF33FA000
|
unkown
|
page read and write
|
|
|
|
7FF51427B000
|
unkown
|
page readonly
|
|
|
|
7FF594897000
|
unkown
|
page readonly
|
|
|
|
7FF55F7F1000
|
unkown
|
page readonly
|
|
|
|
7FF560F6F000
|
unkown
|
page readonly
|
|
|
|
13F29AB7000
|
unkown
|
page read and write
|
|
|
|
1F02ED13000
|
unkown
|
page read and write
|
|
|
|
7FF5144AC000
|
unkown
|
page readonly
|
|
|
|
29E03190000
|
unkown
|
page read and write
|
|
|
|
7FF593960000
|
unkown
|
page readonly
|
|
|
|
29E0313D000
|
unkown
|
page read and write
|
|
|
|
7FF5937B9000
|
unkown
|
page readonly
|
|
|
|
7FF5948F6000
|
unkown
|
page readonly
|
|
|
|
24F7AF20000
|
unkown
|
page readonly
|
|
|
|
2A21000
|
unkown
|
page readonly
|
|
|
|
E77E7F5000
|
unkown
|
page read and write
|
|
|
|
1F02EC3F000
|
unkown
|
page read and write
|
|
|
|
7FF574CFC000
|
unkown
|
page readonly
|
|
|
|
2B640900000
|
unkown
|
page read and write
|
|
|
|
13F2BB15000
|
unkown
|
page read and write
|
|
|
|
29E02A3C000
|
unkown
|
page read and write
|
|
|
|
7FF5CF0D1000
|
unkown
|
page readonly
|
|
|
|
7FF5CEBA0000
|
unkown
|
page readonly
|
|
|
|
29E03144000
|
unkown
|
page read and write
|
|
|
|
7FF591DF3000
|
unkown
|
page readonly
|
|
|
|
1405B830000
|
unkown
|
page readonly
|
|
|
|
7FF514286000
|
unkown
|
page readonly
|
|
|
|
E77E3DB000
|
unkown
|
page read and write
|
|
|
|
27C9000
|
unkown
|
page readonly
|
|
|
|
13F2B840000
|
unkown
|
page readonly
|
|
|
|
7FF591F69000
|
unkown
|
page readonly
|
|
|
|
7FF574CFF000
|
unkown
|
page readonly
|
|
|
|
7FF593785000
|
unkown
|
page readonly
|
|
|
|
29E031A0000
|
unkown
|
page read and write
|
|
|
|
29E03131000
|
unkown
|
page read and write
|
|
|
|
2D1C000
|
unkown
|
page read and write
|
|
|
|
7FF591EF5000
|
unkown
|
page readonly
|
|
|
|
29E03149000
|
unkown
|
page read and write
|
|
|
|
7FF593923000
|
unkown
|
page readonly
|
|
|
|
29E02840000
|
unkown
|
page readonly
|
|
|
|
24F7AC13000
|
unkown
|
page read and write
|
|
|
|
29E0314A000
|
unkown
|
page read and write
|
|
|
|
7FF55F779000
|
unkown
|
page readonly
|
|
|
|
29E0314D000
|
unkown
|
page read and write
|
|
|
|
27DD000
|
unkown
|
page readonly
|
|
|
|
29E0314D000
|
unkown
|
page read and write
|
|
|
|
29E0312A000
|
unkown
|
page read and write
|
|
|
|
29E03144000
|
unkown
|
page read and write
|
|
|
|
29E03132000
|
unkown
|
page read and write
|
|
|
|
7FF55F70B000
|
unkown
|
page readonly
|
|
|
|
7FF5948CA000
|
unkown
|
page readonly
|
|
|
|
29E031A2000
|
unkown
|
page read and write
|
|
|
|
2A42000
|
unkown
|
page readonly
|
|
|
|
29E031C4000
|
unkown
|
page read and write
|
|
|
|
BD1C73F000
|
unkown
|
page read and write
|
|
|
|
7FF57237E000
|
unkown
|
page readonly
|
|
|
|
6B5DE7A000
|
unkown
|
page read and write
|
|
|
|
7FF514462000
|
unkown
|
page readonly
|
|
|
|
7FF574CD0000
|
unkown
|
page readonly
|
|
|
|
7FF59486C000
|
unkown
|
page readonly
|
|
|
|
7FF51448B000
|
unkown
|
page readonly
|
|
|
|
22706202000
|
unkown
|
page read and write
|
|
|
|
227064D0000
|
unkown
|
page readonly
|
|
|
|
2806000
|
unkown
|
page readonly
|
|
|
|
13F29B3A000
|
unkown
|
page read and write
|
|
|
|
13F29AC0000
|
unkown
|
page read and write
|
|
|
|
7FF5CEFCC000
|
unkown
|
page readonly
|
|
|
|
A9396FE000
|
unkown
|
page read and write
|
|
|
|
7FF593F87000
|
unkown
|
page readonly
|
|
|
|
7FF572347000
|
unkown
|
page readonly
|
|
|
|
29E03181000
|
unkown
|
page read and write
|
|
|
|
7FF574D41000
|
unkown
|
page readonly
|
|
|
|
7FF5722E4000
|
unkown
|
page readonly
|
|
|
|
7FF591F58000
|
unkown
|
page readonly
|
|
|
|
29E03139000
|
unkown
|
page read and write
|
|
|
|
13F2C310000
|
unkown
|
page read and write
|
|
|
|
7FF574D1A000
|
unkown
|
page readonly
|
|
|
|
7FF5612AB000
|
unkown
|
page readonly
|
|
|
|
29E03654000
|
unkown
|
page read and write
|
|
|
|
7FF593F81000
|
unkown
|
page readonly
|
|
|
|
C9DD2FB000
|
unkown
|
page read and write
|
|
|
|
29A7000
|
unkown
|
page readonly
|
|
|
|
2883000
|
unkown
|
page readonly
|
|
|
|
38CE5FF000
|
unkown
|
page read and write
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
2947CC40000
|
unkown
|
page read and write
|
|
|
|
7FF5144F7000
|
unkown
|
page readonly
|
|
|
|
A93939B000
|
unkown
|
page read and write
|
|
|
|
29E03700000
|
unkown
|
page read and write
|
|
|
|
7FF571E7E000
|
unkown
|
page readonly
|
|
|
|
2999000
|
unkown
|
page readonly
|
|
|
|
29E02A4F000
|
unkown
|
page read and write
|
|
|
|
7FF591F44000
|
unkown
|
page readonly
|
|
|
|
7FF59398C000
|
unkown
|
page readonly
|
|
|
|
29E0317F000
|
unkown
|
page read and write
|
|
|
|
7FF591BC7000
|
unkown
|
page readonly
|
|
|
|
3BF2BFE000
|
unkown
|
page read and write
|
|
|
|
7FF574531000
|
unkown
|
page readonly
|
|
|
|
7FF5611A8000
|
unkown
|
page readonly
|
|
|
|
7FF5143BB000
|
unkown
|
page readonly
|
|
|
|
7FF55F75E000
|
unkown
|
page readonly
|
|
|
|
7FF57220E000
|
unkown
|
page readonly
|
|
|
|
13F2BB5A000
|
unkown
|
page read and write
|
|
|
|
1F02EC00000
|
unkown
|
page read and write
|
|
|
|
13F29AD4000
|
unkown
|
page read and write
|
|
|
|
7FF5CF034000
|
unkown
|
page readonly
|
|
|
|
29E03148000
|
unkown
|
page read and write
|
|
|
|
7FF561316000
|
unkown
|
page readonly
|
|
|
|
7FF571C63000
|
unkown
|
page readonly
|
|
|
|
A939779000
|
unkown
|
page read and write
|
|
|
|
13F2BBB4000
|
unkown
|
page read and write
|
|
|
|
1F02EC6A000
|
unkown
|
page read and write
|
|
|
|
7FF55F744000
|
unkown
|
page readonly
|
|
|
|
2B640913000
|
unkown
|
page read and write
|
|
|
|
29E03130000
|
unkown
|
page read and write
|
|
|
|
13F2D000000
|
unkown
|
page readonly
|
|
|
|
7FF5610F9000
|
unkown
|
page readonly
|
|
|
|
13F2BE00000
|
unkown
|
page read and write
|
|
|
|
29E03163000
|
unkown
|
page read and write
|
|
|
|
7FF5CF048000
|
unkown
|
page readonly
|
|
|
|
BD1C6BA000
|
unkown
|
page read and write
|
|
|
|
7FF57231B000
|
unkown
|
page readonly
|
|
|
|
7FF593637000
|
unkown
|
page readonly
|
|
|
|
2B640690000
|
unkown
|
page readonly
|
|
|
|
38CE47A000
|
unkown
|
page read and write
|
|
|
|
13F2BCC4000
|
unkown
|
page read and write
|
|
|
|
13F2BBAA000
|
unkown
|
page read and write
|
|
|
|
7FF574B29000
|
unkown
|
page readonly
|
|
|
|
7FF574BD8000
|
unkown
|
page readonly
|
|
|
|
29E03137000
|
unkown
|
page read and write
|
|
|
|
13F29A67000
|
unkown
|
page read and write
|
|
|
|
7FF57230E000
|
unkown
|
page readonly
|
|
|
|
2947E770000
|
unkown
|
page readonly
|
|
|
|
29E0316F000
|
unkown
|
page read and write
|
|
|
|
29E03122000
|
unkown
|
page read and write
|
|
|
|
227061A0000
|
unkown
|
page read and write
|
|
|
|
1405B900000
|
unkown
|
page write copy
|
|
|
|
13F29C50000
|
unkown
|
page readonly
|
|
|
|
7FF591F3A000
|
unkown
|
page readonly
|
|
|
|
2D9A000
|
heap default
|
page read and write
|
|
|
|
7FF55F053000
|
unkown
|
page readonly
|
|
|
|
13F29AF7000
|
unkown
|
page read and write
|
|
|
|
29E03194000
|
unkown
|
page read and write
|
|
|
|
7FF591BBF000
|
unkown
|
page readonly
|
|
|
|
7FF5143A1000
|
unkown
|
page readonly
|
|
|
|
29E0316F000
|
unkown
|
page read and write
|
|
|
|
298C000
|
unkown
|
page readonly
|
|
|
|
28E10A30000
|
unkown
|
page read and write
|
|
|
|
7FF59486A000
|
unkown
|
page readonly
|
|
|
|
29BF000
|
unkown
|
page readonly
|
|
|
|
31A1FA000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page readonly
|
|
|
|
2880000
|
unkown
|
page readonly
|
|
|
|
13F2C110000
|
unkown
|
page read and write
|
|
|
|
7FF514319000
|
unkown
|
page readonly
|
|
|
|
13F2B8C0000
|
unkown
|
page read and write
|
|
|
|
29E03135000
|
unkown
|
page read and write
|
|
|
|
7FF5CEFF7000
|
unkown
|
page readonly
|
|
|
|
7FF5721B3000
|
unkown
|
page readonly
|
|
|
|
7FF5CF03F000
|
unkown
|
page readonly
|
|
|
|
7FF59385B000
|
unkown
|
page readonly
|
|
|
|
29E03139000
|
unkown
|
page read and write
|
|
|
|
7FF57499F000
|
unkown
|
page readonly
|
|
|
|
6DC000
|
unkown
|
page read and write
|
|
|
|
22706170000
|
heap default
|
page read and write
|
|
|
|
1405BA3F000
|
unkown
|
page read and write
|
|
|
|
29E02B16000
|
unkown
|
page read and write
|
|
|
|
24F7AC02000
|
unkown
|
page read and write
|
|
|
|
24F7AC29000
|
unkown
|
page read and write
|
|
|
|
13F29AFC000
|
unkown
|
page read and write
|
|
|
|
13F29880000
|
heap private
|
page read and write
|
|
|
|
13F29A5E000
|
unkown
|
page read and write
|
|
|
|
27A5000
|
unkown
|
page readonly
|
|
|
|
24F7AE00000
|
unkown
|
page readonly
|
|
|
|
7FF561319000
|
unkown
|
page readonly
|
|
|
|
7B0000
|
unkown
|
page readonly
|
|
|
|
27B3000
|
unkown
|
page readonly
|
|
|
|
29E03144000
|
unkown
|
page read and write
|
|
|
|
7FF57230A000
|
unkown
|
page readonly
|
|
|
|
7FF5947EC000
|
unkown
|
page readonly
|
|
|
|
29E03661000
|
unkown
|
page read and write
|
|
|
|
7FF571A17000
|
unkown
|
page readonly
|
|
|
|
13F29A00000
|
unkown
|
page read and write
|
|
|
|
28E10A3E000
|
unkown
|
page read and write
|
|
|
|
13F2BB4C000
|
unkown
|
page read and write
|
|
|
|
3BF31FB000
|
unkown
|
page read and write
|
|
|
|
29E03600000
|
unkown
|
page read and write
|
|
|
|
13F2BB66000
|
unkown
|
page read and write
|
|
|
|
29E031A4000
|
unkown
|
page read and write
|
|
|
|
7FF514298000
|
unkown
|
page readonly
|
|
|
|
7FF5948B7000
|
unkown
|
page readonly
|
|
|
|
7FF55F72C000
|
unkown
|
page readonly
|
|
|
|
24F7AD13000
|
unkown
|
page read and write
|
|
|
|
31A179000
|
unkown
|
page read and write
|
|
|
|
7FF55F74A000
|
unkown
|
page readonly
|
|
|
|
7FF5722FC000
|
unkown
|
page readonly
|
|
|
|
3BF337B000
|
unkown
|
page read and write
|
|
|
|
2975000
|
unkown
|
page readonly
|
|
|
|
7FF59174D000
|
unkown
|
page readonly
|
|
|
|
29E02AA6000
|
unkown
|
page read and write
|
|
|
|
2953000
|
unkown
|
page readonly
|
|
|
|
7FF51452E000
|
unkown
|
page readonly
|
|
|
|
7FF5948AC000
|
unkown
|
page readonly
|
|
|
|
13F2C310000
|
unkown
|
page read and write
|
|
|
|
6B5DB9F000
|
unkown
|
page read and write
|
|
|
|
29E03130000
|
unkown
|
page read and write
|
|
|
|
29E03133000
|
unkown
|
page read and write
|
|
|
|
2783000
|
unkown
|
page readonly
|
|
|
|
7FF5CF02A000
|
unkown
|
page readonly
|
|
|
|
7FF5720D6000
|
unkown
|
page readonly
|
|
|
|
29E03661000
|
unkown
|
page read and write
|
|
|
|
E77E8FB000
|
unkown
|
page read and write
|
|
|
|
7FF5CEFDE000
|
unkown
|
page readonly
|
|
|
|
A93987E000
|
unkown
|
page read and write
|
|
|
|
29E02AF8000
|
unkown
|
page read and write
|
|
|
|
13F2BBF0000
|
unkown
|
page read and write
|
|
|
|
3BF2F7C000
|
unkown
|
page read and write
|
|
|
|
6B5DFFF000
|
unkown
|
page read and write
|
|
|
|
29E03134000
|
unkown
|
page read and write
|
|
|
|
29E03180000
|
unkown
|
page read and write
|
|
|
|
2947CC13000
|
unkown
|
page read and write
|
|
|
|
7FF5722DB000
|
unkown
|
page readonly
|
|
|
|
7FF574C72000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFE5000
|
unkown
|
page readonly
|
|
|
|
1F02EC29000
|
unkown
|
page read and write
|
|
|
|
29E02AA7000
|
unkown
|
page read and write
|
|
|
|
7FF57236F000
|
unkown
|
page readonly
|
|
|
|
13F29AD6000
|
unkown
|
page read and write
|
|
|
|
7FF574D49000
|
unkown
|
page readonly
|
|
|
|
7FF5723F4000
|
unkown
|
page readonly
|
|
|
|
29E031A0000
|
unkown
|
page read and write
|
|
|
|
29E03126000
|
unkown
|
page read and write
|
|
|
|
29E0316F000
|
unkown
|
page read and write
|
|
|
|
7FF591CB6000
|
unkown
|
page readonly
|
|
|
|
7FF514311000
|
unkown
|
page readonly
|
|
|
|
2802000
|
unkown
|
page readonly
|
|
|
|
22706A02000
|
unkown
|
page read and write
|
|
|
|
7FF5144D7000
|
unkown
|
page readonly
|
|
|
|
31A0000
|
heap default
|
page read and write
|
|
|
|
38CE4FA000
|
unkown
|
page read and write
|
|
|
|
29E03174000
|
unkown
|
page read and write
|
|
|
|
29E03128000
|
unkown
|
page read and write
|
|
|
|
13F2B8D0000
|
unkown
|
page read and write
|
|
|
|
13F2C210000
|
unkown
|
page read and write
|
|
|
|
7FF514528000
|
unkown
|
page readonly
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
3BF2E7B000
|
unkown
|
page read and write
|
|
|
|
7FF5CF00F000
|
unkown
|
page readonly
|
|
|
|
7FF572213000
|
unkown
|
page readonly
|
|
|
|
13F29B1A000
|
unkown
|
page read and write
|
|
|
|
7FF5143C3000
|
unkown
|
page readonly
|
|
|
|
29E03135000
|
unkown
|
page read and write
|
|
|
|
29E03166000
|
unkown
|
page read and write
|
|
|
|
2B640800000
|
unkown
|
page read and write
|
|
|
|
29E03654000
|
unkown
|
page read and write
|
|
|
|
2B640780000
|
unkown
|
page read and write
|
|
|
|
28E10A30000
|
unkown
|
page read and write
|
|
|
|
29E03180000
|
unkown
|
page read and write
|
|
|
|
7FF572151000
|
unkown
|
page readonly
|
|
|
|
3BF30FB000
|
unkown
|
page read and write
|
|
|
|
24F7AD02000
|
unkown
|
page read and write
|
|
|
|
7FF57452D000
|
unkown
|
page readonly
|
|
|
|
29E0312A000
|
unkown
|
page read and write
|
|
|
|
13F2BB4D000
|
unkown
|
page read and write
|
|
|
|
BD1C7BF000
|
unkown
|
page read and write
|
|
|
|
31A2F9000
|
unkown
|
page read and write
|
|
|
|
7FF572087000
|
unkown
|
page readonly
|
|
|
|
2C30000
|
heap default
|
page read and write
|
|
|
|
29AD000
|
unkown
|
page readonly
|
|
|
|
7FF51448F000
|
unkown
|
page readonly
|
|
|
|
2B640770000
|
unkown
|
page readonly
|
|
|
|
29E031A2000
|
unkown
|
page read and write
|
|
|
|
24F7C7E0000
|
unkown
|
page readonly
|
|
|
|
28E109B0000
|
unkown
|
page read and write
|
|
|
|
29E03602000
|
unkown
|
page read and write
|
|
|
|
13F29B02000
|
unkown
|
page read and write
|
|
|
|
7FF5610C5000
|
unkown
|
page readonly
|
|
|
|
13F2BB86000
|
unkown
|
page read and write
|
|
|
|
13F299C0000
|
unkown
|
page readonly
|
|
|
|
7FF55F700000
|
unkown
|
page readonly
|
|
|
|
29E03602000
|
unkown
|
page read and write
|
|
|
|
7FF572144000
|
unkown
|
page readonly
|
|
|
|
29E03162000
|
unkown
|
page read and write
|
|
|
|
29E03200000
|
unkown
|
page readonly
|
|
|
|
7FF5142F6000
|
unkown
|
page readonly
|
|
|
|
7FF561391000
|
unkown
|
page readonly
|
|
|
|
6B5DF7E000
|
unkown
|
page read and write
|
|
|
|
33F0000
|
heap private
|
page read and write
|
|
|
|
7FF572354000
|
unkown
|
page readonly
|
|
|
|
2947CB20000
|
heap private
|
page read and write
|
|
|
|
7FF59496A000
|
unkown
|
page readonly
|
|
|
|
7FF561384000
|
unkown
|
page readonly
|
|
|
|
7FF5CED57000
|
unkown
|
page readonly
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
13F29AC5000
|
unkown
|
page read and write
|
|
|
|
28E109E0000
|
unkown
|
page readonly
|
|
|
|
29E03602000
|
unkown
|
page read and write
|
|
|
|
7FF5946D1000
|
unkown
|
page readonly
|
|
|
|
29E0314D000
|
unkown
|
page read and write
|
|
|
|
3060000
|
heap private
|
page read and write
|
|
|
|
7FF5CEF2D000
|
unkown
|
page readonly
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
7FF572378000
|
unkown
|
page readonly
|
|
|
|
22706400000
|
unkown
|
page readonly
|
|
|
|
7FF55F72F000
|
unkown
|
page readonly
|
|
|
|
7FF572310000
|
unkown
|
page readonly
|
|
|
|
295A000
|
unkown
|
page readonly
|
|
|
|
7FF57498C000
|
unkown
|
page readonly
|
|
|
|
7FF591EB3000
|
unkown
|
page readonly
|
|
|
|
29E0312E000
|
unkown
|
page read and write
|
|
|
|
29E03144000
|
unkown
|
page read and write
|
|
|
|
29E03193000
|
unkown
|
page read and write
|
|
|
|
7FF593902000
|
unkown
|
page readonly
|
|
|
|
27BC000
|
unkown
|
page readonly
|
|
|
|
29E0314A000
|
unkown
|
page read and write
|
|
|
|
29E0317B000
|
unkown
|
page read and write
|
|
|
|
C9DD077000
|
unkown
|
page read and write
|
|
|
|
3BF2C7A000
|
unkown
|
page read and write
|
|
|
|
29E0313F000
|
unkown
|
page read and write
|
|
|
|
7FF55F77D000
|
unkown
|
page readonly
|
|
|
|
13F2C310000
|
unkown
|
page read and write
|
|
|
|
2270622A000
|
unkown
|
page read and write
|
|
|
|
29E03144000
|
unkown
|
page read and write
|
|
|
|
22706200000
|
unkown
|
page read and write
|
|
|
|
7FF55F7EA000
|
unkown
|
page readonly
|
|
|
|
29E03170000
|
unkown
|
page read and write
|
|
|
|
BD1CA7E000
|
unkown
|
page read and write
|
|
|
|
29E02A70000
|
unkown
|
page read and write
|
|
|
|
29E02A59000
|
unkown
|
page read and write
|
|
|
|
29E03122000
|
unkown
|
page read and write
|
|
|
|
2B640620000
|
heap private
|
page read and write
|
|
|
|
29E031A1000
|
unkown
|
page read and write
|
|
|
|
C9DD1FF000
|
unkown
|
page read and write
|
|
|
|
2947CED0000
|
unkown
|
page readonly
|
|
|
|
7FF591D11000
|
unkown
|
page readonly
|
|
|
|
2947CC6B000
|
unkown
|
page read and write
|
|
|
|
3BF2B7A000
|
unkown
|
page read and write
|
|
|
|
7FF55F705000
|
unkown
|
page readonly
|
|
|
|
7FF5939B4000
|
unkown
|
page readonly
|
|
|
|
28E108C0000
|
unkown
|
page readonly
|
|
|
|
7FF514536000
|
unkown
|
page readonly
|
|
|
|
29E02B13000
|
unkown
|
page read and write
|
|
|
|
13F2B850000
|
heap private
|
page read and write
|
|
|
|
2D90000
|
heap default
|
page read and write
|
|
|
|
1405B950000
|
unkown
|
page readonly
|
|
|
|
13F2C000000
|
unkown
|
page read and write
|
|
|
|
2270624F000
|
unkown
|
page read and write
|
|
|
|
29E03170000
|
unkown
|
page read and write
|
|
|
|
29E02F90000
|
unkown
|
page read and write
|
|
|
|
1F02ED02000
|
unkown
|
page read and write
|
|
|
|
29E02AE9000
|
unkown
|
page read and write
|
|
|
|
29E03170000
|
unkown
|
page read and write
|
|
|
|
2B64085B000
|
unkown
|
page read and write
|
|
|
|
29E0314D000
|
unkown
|
page read and write
|
|
|
|
29E0312F000
|
unkown
|
page read and write
|
|
|
|
28E10CE0000
|
heap private
|
page read and write
|
|
|
|
7FF591EF0000
|
unkown
|
page readonly
|
|
|
|
7FF574D2E000
|
unkown
|
page readonly
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
1F02EC6A000
|
unkown
|
page read and write
|
|
|
|
7FF591BAC000
|
unkown
|
page readonly
|
|
|
|
13F29A7C000
|
unkown
|
page read and write
|
|
|
|
2947CC6B000
|
unkown
|
page read and write
|
|
|
|
13F2BBC5000
|
unkown
|
page read and write
|
|
|
|
7FF59396B000
|
unkown
|
page readonly
|
|
|
|
7FF593A4A000
|
unkown
|
page readonly
|
|
|
|
2947CBE0000
|
unkown
|
page readonly
|
|
|
|
7FF5749A7000
|
unkown
|
page readonly
|
|
|
|
1F02EC6A000
|
unkown
|
page read and write
|
|
|
|
7FF57235A000
|
unkown
|
page readonly
|
|
|
|
7FF5948C4000
|
unkown
|
page readonly
|
|
|
|
7FF514483000
|
unkown
|
page readonly
|
|
|
|
2B640E60000
|
unkown
|
page readonly
|
|
|
|
7FF59361C000
|
unkown
|
page readonly
|
|
|
|
7FF5722FA000
|
unkown
|
page readonly
|
|
|
|
29E03170000
|
unkown
|
page read and write
|
|
|
|
1F02EE00000
|
unkown
|
page readonly
|
|
|
|
A93967E000
|
unkown
|
page read and write
|
|
|
|
29E02830000
|
heap default
|
page read and write
|
|
|
|
7FF574DB4000
|
unkown
|
page readonly
|
|
|
|
7FF591D49000
|
unkown
|
page readonly
|
|
|
|
29E02A88000
|
unkown
|
page read and write
|
|
|
|
29E0312E000
|
unkown
|
page read and write
|
|
|
|
13F2B8E0000
|
unkown
|
page read and write
|
|
|
|
2878000
|
unkown
|
page readonly
|
|
|
|
24F7AC57000
|
unkown
|
page read and write
|
|
|
|
2B640680000
|
heap default
|
page read and write
|
|
|
|
7FF574BCB000
|
unkown
|
page readonly
|
|
|
|
7FF591CAB000
|
unkown
|
page readonly
|
|
|
|
278A000
|
unkown
|
page readonly
|
|
|
|
7FF5CED60000
|
unkown
|
page readonly
|
|
|
|
E77EB7F000
|
unkown
|
page read and write
|
|
|
|
7FF57233F000
|
unkown
|
page readonly
|
|
|
|
13F29AD2000
|
unkown
|
page read and write
|
|
|
|
29E02ABD000
|
unkown
|
page read and write
|
|
|
|
29E0314A000
|
unkown
|
page read and write
|
|
|
|
1F0306A0000
|
unkown
|
page readonly
|
|
|
|
22706300000
|
unkown
|
page read and write
|
|
|
|
C9DCAFE000
|
unkown
|
page read and write
|
|
|
|
29E03190000
|
unkown
|
page read and write
|
|
|
|
29E02A54000
|
unkown
|
page read and write
|
|
|
|
29E0314C000
|
unkown
|
page read and write
|
|
|
|
29E03128000
|
unkown
|
page read and write
|
|
|
|
7FF561066000
|
unkown
|
page readonly
|
|
|
|
3BF2FFB000
|
unkown
|
page read and write
|
|
|
|
29E0313B000
|
unkown
|
page read and write
|
|
|
|
1F02EC6A000
|
unkown
|
page read and write
|
|
|
|
7FF591F28000
|
unkown
|
page readonly
|
|
|
|
29E02A29000
|
unkown
|
page read and write
|
|
|
|
13F2BCC4000
|
unkown
|
page read and write
|
|
|
|
C9DD178000
|
unkown
|
page read and write
|
|
|
|
2947CC6D000
|
unkown
|
page read and write
|
|
|
|
7FF5722B2000
|
unkown
|
page readonly
|
|
|
|
7FF5CEBA6000
|
unkown
|
page readonly
|
|
|
|
38CE3FE000
|
unkown
|
page read and write
|
|
|
|
13F2BE02000
|
unkown
|
page read and write
|
|
|
|
E77EA77000
|
unkown
|
page read and write
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
2B640851000
|
unkown
|
page read and write
|
|
|
|
29E03135000
|
unkown
|
page read and write
|
|
|
|
13F2BC12000
|
unkown
|
page read and write
|
|
|
|
7FF5CEEDB000
|
unkown
|
page readonly
|
|
|
|
29E03135000
|
unkown
|
page read and write
|
|
|
|
88E000
|
unkown
|
page read and write
|
|
|
|
1405BA29000
|
unkown
|
page read and write
|
|
|
|
7FF560F6A000
|
unkown
|
page readonly
|
|
|
|
3BF2CFF000
|
unkown
|
page read and write
|
|
|
|
7FF5145B2000
|
unkown
|
page readonly
|
|
|
|
13F2B3F0000
|
unkown
|
page read and write
|
|
|
|
13F2C210000
|
unkown
|
page read and write
|
|
|
|
7FF5143C8000
|
unkown
|
page readonly
|
|
|
|
26B0000
|
unkown
|
page readonly
|
|
|
|
29E03143000
|
unkown
|
page read and write
|
|
|
|
7FF56129A000
|
unkown
|
page readonly
|
|
|
|
29E0313F000
|
unkown
|
page read and write
|
|
|
|
7FF591F1C000
|
unkown
|
page readonly
|
|
|
|
2C40000
|
unkown
|
page readonly
|
|
|
|
7FF5610C1000
|
unkown
|
page readonly
|
|
|
|
7FF51418A000
|
unkown
|
page readonly
|
|
|
|
29E0316A000
|
unkown
|
page read and write
|
|
|
|
29BA000
|
unkown
|
page readonly
|
|
|
|
7FF5939C8000
|
unkown
|
page readonly
|
|
|
|
7FF5948FD000
|
unkown
|
page readonly
|
|
|
|
7FF560AFD000
|
unkown
|
page readonly
|
|
|
|
29E0312F000
|
unkown
|
page read and write
|
|
|
|
13F2BA02000
|
unkown
|
page read and write
|
|
|
|
2947CE00000
|
unkown
|
page readonly
|
|
|
|
13F2BCCE000
|
unkown
|
page read and write
|
|
|
|
29E036A6000
|
unkown
|
page read and write
|
|
|
|
7FF5948AF000
|
unkown
|
page readonly
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
13F2B830000
|
unkown
|
page read and write
|
|
|
|
22706F40000
|
unkown
|
page readonly
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
7FF572402000
|
unkown
|
page readonly
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
24F7AED0000
|
unkown
|
page write copy
|
|
|
|
7FF574DBA000
|
unkown
|
page readonly
|
|
|
|
22706180000
|
unkown
|
page readonly
|
|
|
|
7FF591F1F000
|
unkown
|
page readonly
|
|
|
|
27EF000
|
unkown
|
page readonly
|
|
|
|
A9398FF000
|
unkown
|
page read and write
|
|
|
|
7FF51417C000
|
unkown
|
page readonly
|
|
|
|
7FF593965000
|
unkown
|
page readonly
|
|
|
|
7FF59395E000
|
unkown
|
page readonly
|
|
|
|
13F2C210000
|
unkown
|
page read and write
|
|
|
|
7FF594972000
|
unkown
|
page readonly
|
|
|
|
7FF514301000
|
unkown
|
page readonly
|
|
|
|
1405D4A0000
|
unkown
|
page readonly
|
|
|
|
13F29ABF000
|
unkown
|
page read and write
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
27AC000
|
unkown
|
page readonly
|
|
|
|
29E0314C000
|
unkown
|
page read and write
|
|
|
|
29E0315F000
|
unkown
|
page read and write
|
|
|
|
7FF5939BE000
|
unkown
|
page readonly
|
|
|
|
28E10A16000
|
heap default
|
page read and write
|
|
|
|
27D7000
|
unkown
|
page readonly
|
|
|
|
29E03602000
|
unkown
|
page read and write
|
|
|
|
7FF5722DF000
|
unkown
|
page readonly
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
BD1CBFD000
|
unkown
|
page read and write
|
|
|
|
13F2BC84000
|
unkown
|
page read and write
|
|
|
|
A9397F9000
|
unkown
|
page read and write
|
|
|
|
13F2C210000
|
unkown
|
page read and write
|
|
|
|
7FF591EEA000
|
unkown
|
page readonly
|
|
|
|
7FF571C67000
|
unkown
|
page readonly
|
|
|
|
2B641200000
|
unkown
|
page readonly
|
|
|
|
31AA000
|
heap default
|
page read and write
|
|
|
|
29E0314D000
|
unkown
|
page read and write
|
|
|
|
7FF594885000
|
unkown
|
page readonly
|
|
|
|
D85827F000
|
unkown
|
page read and write
|
|
|
|
2949000
|
unkown
|
page readonly
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
7FF594971000
|
unkown
|
page readonly
|
|
|
|
7FF55F7E4000
|
unkown
|
page readonly
|
|
|
|
294C000
|
unkown
|
page readonly
|
|
|
|
29E03590000
|
unkown
|
page read and write
|
|
|
|
7FF5612A5000
|
unkown
|
page readonly
|
|
|
|
29E03163000
|
unkown
|
page read and write
|
|
|
|
28E10A30000
|
unkown
|
page read and write
|
|
|
|
7FF574D3E000
|
unkown
|
page readonly
|
|
|
|
2947CC02000
|
unkown
|
page read and write
|
|
|
|
7FF571ED0000
|
unkown
|
page readonly
|
|
|
|
1F02EB30000
|
unkown
|
page readonly
|
|
|
|
1405BA02000
|
unkown
|
page read and write
|
|
|
|
22706213000
|
unkown
|
page read and write
|
|
|
|
7FF5945F7000
|
unkown
|
page readonly
|
|
|
|
31A37A000
|
unkown
|
page read and write
|
|
|
|
24F7ABF0000
|
heap default
|
page read and write
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
29E03126000
|
unkown
|
page read and write
|
|
|
|
7FF59487A000
|
unkown
|
page readonly
|
|
|
|
13F2BC43000
|
unkown
|
page read and write
|
|
|
|
7FF574D38000
|
unkown
|
page readonly
|
|
|
|
2B640760000
|
unkown
|
page readonly
|
|
|
|
29E027D0000
|
heap private
|
page read and write
|
|
|
|
2947CC6F000
|
unkown
|
page read and write
|
|
|
|
29E03185000
|
unkown
|
page read and write
|
|
|
|
29E03180000
|
unkown
|
page read and write
|
|
|
|
13F2C010000
|
unkown
|
page read and write
|
|
|
|
29E02FE0000
|
unkown
|
page readonly
|
|
|
|
28E109F0000
|
unkown
|
page readonly
|
|
|
|
13F2BBF4000
|
unkown
|
page read and write
|
|
|
|
13F2BB00000
|
unkown
|
page read and write
|
|
|
|
1405B820000
|
heap default
|
page read and write
|
|
|
|
13F2BB76000
|
unkown
|
page read and write
|
|
|
|
1F02EAE0000
|
unkown
|
page write copy
|
|
|
|
29E03128000
|
unkown
|
page read and write
|
|
|
|
D85847F000
|
unkown
|
page read and write
|
|
|
|
29E03122000
|
unkown
|
page read and write
|
|
|
|
7FF51445C000
|
unkown
|
page readonly
|
|
|
|
22706C00000
|
unkown
|
page readonly
|
|
|
|
27E3000
|
unkown
|
page readonly
|
|
|
|
13F2BCC6000
|
unkown
|
page read and write
|
|
|
|
2DB1000
|
heap default
|
page read and write
|
|
|
|
7FF574D24000
|
unkown
|
page readonly
|
|
|
|
7FF5612EA000
|
unkown
|
page readonly
|
|
|
|
29E03132000
|
unkown
|
page read and write
|
|
|
|
7FF5145B1000
|
unkown
|
page readonly
|
|
|
|
2D5B000
|
unkown
|
page read and write
|
|
|
|
2947E670000
|
unkown
|
page read and write
|
|
|
|
13F2BBA1000
|
unkown
|
page read and write
|
|
|
|
2B64088E000
|
unkown
|
page read and write
|
|
|
|
7FF5720CB000
|
unkown
|
page readonly
|
|
|
|
29E03129000
|
unkown
|
page read and write
|
|
|
|
29E0312A000
|
unkown
|
page read and write
|
|
|
|
13F2B8A0000
|
unkown
|
page readonly
|
|
|
|
29E02B02000
|
unkown
|
page read and write
|
|
|
|
29E0318A000
|
unkown
|
page read and write
|
|
|
|
13F2B8B0000
|
unkown
|
page read and write
|
|
|
|
7FF5144EC000
|
unkown
|
page readonly
|
|
|
|
7FF51450A000
|
unkown
|
page readonly
|
|
|
|
7FF5947CD000
|
unkown
|
page readonly
|
|
|
|
277C000
|
unkown
|
page readonly
|
|
|
|
7FF51449F000
|
unkown
|
page readonly
|
|
|
|
7FF560B01000
|
unkown
|
page readonly
|
|
|
|
7FF55F7F2000
|
unkown
|
page readonly
|
|
|
|
7FF57220B000
|
unkown
|
page readonly
|
|
|
|
13F2BBE9000
|
unkown
|
page read and write
|
|
|
|
7FF5144CB000
|
unkown
|
page readonly
|
|
|
|
2B640908000
|
unkown
|
page read and write
|
|
|
|
2947CC29000
|
unkown
|
page read and write
|
|
|
|
28E10A27000
|
unkown
|
page read and write
|
|
|
|
7FF591FD4000
|
unkown
|
page readonly
|
|
|
|
280B000
|
unkown
|
page readonly
|
|
|
|
13F29AE8000
|
unkown
|
page read and write
|
|
|
|
13F29ABF000
|
unkown
|
page read and write
|
|
|
|
7FF59395A000
|
unkown
|
page readonly
|
|
|
|
7FF5948DF000
|
unkown
|
page readonly
|
|
|
|
7FF5612B7000
|
unkown
|
page readonly
|
|
|
|
1F0305A0000
|
unkown
|
page read and write
|
|
|
|
29E03147000
|
unkown
|
page read and write
|
|
|
|
7FF571A11000
|
unkown
|
page readonly
|
|
|
|
31A0FE000
|
unkown
|
page read and write
|
|
|
|
2864000
|
unkown
|
page readonly
|
|
|
|
13F29A5A000
|
unkown
|
page read and write
|
|
|
|
29D2000
|
unkown
|
page readonly
|
|
|
|
13F29A40000
|
unkown
|
page read and write
|
|
|
|
7FF5939D1000
|
unkown
|
page readonly
|
|
|
|
2872000
|
unkown
|
page readonly
|
|
|
|
29E0314B000
|
unkown
|
page read and write
|
|
|
|
29E03135000
|
unkown
|
page read and write
|
|
|
|
3BF2A7B000
|
unkown
|
page read and write
|
|
|
|
29E02AC4000
|
unkown
|
page read and write
|
|
|
|
7FF572263000
|
unkown
|
page readonly
|
|
|
|
7FF5144AA000
|
unkown
|
page readonly
|
|
|
|
29E03127000
|
unkown
|
page read and write
|
|
|
|
7FF571DEE000
|
unkown
|
page readonly
|
|
|
|
29E029F0000
|
unkown
|
page readonly
|
|
|
|
7FF591FE1000
|
unkown
|
page readonly
|
|
|
|
13F2BB2A000
|
unkown
|
page read and write
|
|
|
|
29E03116000
|
unkown
|
page read and write
|
|
|
|
2990000
|
unkown
|
page readonly
|
|
|
|
13F2BBC5000
|
unkown
|
page read and write
|
|
|
|
7FF572146000
|
unkown
|
page readonly
|
|
|
|
2270626E000
|
unkown
|
page read and write
|
|
|
|
7FF5939D9000
|
unkown
|
page readonly
|
|
|
|
C9DCB7E000
|
unkown
|
page read and write
|
|
|
|
7FF514197000
|
unkown
|
page readonly
|
|
|
|
13F29AB5000
|
unkown
|
page read and write
|
|
|
|
29C1000
|
unkown
|
page readonly
|
|
|
|
29E03132000
|
unkown
|
page read and write
|
|
|
|
7FF5142F4000
|
unkown
|
page readonly
|
|
|
|
7FF572389000
|
unkown
|
page readonly
|
|
|
|
7FF56129E000
|
unkown
|
page readonly
|
|
|
|
7FF5612FE000
|
unkown
|
page readonly
|
|
|
|
27C0000
|
unkown
|
page readonly
|
|
|
|
7FF572315000
|
unkown
|
page readonly
|
|
|
|
7FF571ED6000
|
unkown
|
page readonly
|
|
|
|
29E02B08000
|
unkown
|
page read and write
|
|
|
|
38CE27B000
|
unkown
|
page read and write
|
|
|
|
7FF591F66000
|
unkown
|
page readonly
|
|
|
|
29E03100000
|
unkown
|
page read and write
|
|
|
|
7FF5947E4000
|
unkown
|
page readonly
|
|
|
|
7FF571E82000
|
unkown
|
page readonly
|
|
There are 1075 hidden memdumps, click here to show them.