Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
pmnt_spec_031624191.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$pmnt_spec_031624191.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\B551316F-5B82-4CB7-8AC0-4588B707D346
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\1CC0D8C9.png
|
PNG image data, 288 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\77CC1836.png
|
PNG image data, 168 x 72, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9458C9B4.png
|
PNG image data, 178 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9B73F625.png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C448BEBF.png
|
PNG image data, 264 x 113, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\93C10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\jbeiwmje.dll
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://loki.delve.office.com/api/v1/configuration/officewin32/
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
185.180.199.125
|
unknown
|
Netherlands
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
-d:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
|d:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1B84F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C213
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C494
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
<y:
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxTelemetrySent
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 51 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5627CD000
|
unkown
|
page readonly
|
|
|
|
7FF56761D000
|
unkown
|
page readonly
|
|
|
|
274EA489000
|
unkown
|
page read and write
|
|
|
|
1C27D002000
|
unkown
|
page read and write
|
|
|
|
22F07F60000
|
unkown
|
page readonly
|
|
|
|
1C27B7B0000
|
unkown
|
page read and write
|
|
|
|
2639FB02000
|
unkown
|
page read and write
|
|
|
|
7FF5B2AD8000
|
unkown
|
page readonly
|
|
|
|
1C1F85E0000
|
unkown
|
page readonly
|
|
|
|
240B7210000
|
unkown
|
page read and write
|
|
|
|
7FF5560AB000
|
unkown
|
page readonly
|
|
|
|
269D0C6A000
|
unkown
|
page read and write
|
|
|
|
7FF5B4D44000
|
unkown
|
page readonly
|
|
|
|
200EE313000
|
unkown
|
page read and write
|
|
|
|
250C106E000
|
unkown
|
page read and write
|
|
|
|
D045FF5000
|
unkown
|
page read and write
|
|
|
|
7FF5675F7000
|
unkown
|
page readonly
|
|
|
|
7FF57B6CF000
|
unkown
|
page readonly
|
|
|
|
274EA380000
|
unkown
|
page readonly
|
|
|
|
1A24C63C000
|
unkown
|
page read and write
|
|
|
|
7FF5B4C8D000
|
unkown
|
page readonly
|
|
|
|
1D19DF08000
|
unkown
|
page read and write
|
|
|
|
254227A000
|
unkown
|
page read and write
|
|
|
|
1A24C6E8000
|
unkown
|
page read and write
|
|
|
|
7FF53E271000
|
unkown
|
page readonly
|
|
|
|
1C27D042000
|
unkown
|
page read and write
|
|
|
|
7FF56AEFB000
|
unkown
|
page readonly
|
|
|
|
274EAC02000
|
unkown
|
page read and write
|
|
|
|
250C1100000
|
unkown
|
page read and write
|
|
|
|
240B2C00000
|
unkown
|
page readonly
|
|
|
|
7FF58E739000
|
unkown
|
page readonly
|
|
|
|
1F5E4880000
|
heap private
|
page read and write
|
|
|
|
240B743D000
|
unkown
|
page read and write
|
|
|
|
7FF578C7B000
|
unkown
|
page readonly
|
|
|
|
7FF5B42AB000
|
unkown
|
page readonly
|
|
|
|
240B2415000
|
unkown
|
page read and write
|
|
|
|
7FF53E456000
|
unkown
|
page readonly
|
|
|
|
DE9AAFD000
|
unkown
|
page read and write
|
|
|
|
7FF58E7FF000
|
unkown
|
page readonly
|
|
|
|
274EA45B000
|
unkown
|
page read and write
|
|
|
|
7FF56AE07000
|
unkown
|
page readonly
|
|
|
|
269D0ED0000
|
unkown
|
page write copy
|
|
|
|
1C27BFC6000
|
unkown
|
page read and write
|
|
|
|
7FF578B47000
|
unkown
|
page readonly
|
|
|
|
7FF578460000
|
unkown
|
page readonly
|
|
|
|
7FF57B6DB000
|
unkown
|
page readonly
|
|
|
|
7FF50E412000
|
unkown
|
page readonly
|
|
|
|
254267D000
|
unkown
|
page read and write
|
|
|
|
7FF59C0E0000
|
unkown
|
page readonly
|
|
|
|
144CD513000
|
unkown
|
page read and write
|
|
|
|
240B1B60000
|
unkown
|
page read and write
|
|
|
|
7FF53DF84000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown
|
page readonly
|
|
|
|
250C1029000
|
unkown
|
page read and write
|
|
|
|
7FF59C049000
|
unkown
|
page readonly
|
|
|
|
1A24C6D1000
|
unkown
|
page read and write
|
|
|
|
7FF59C10D000
|
unkown
|
page readonly
|
|
|
|
250C1113000
|
unkown
|
page read and write
|
|
|
|
7FF57B617000
|
unkown
|
page readonly
|
|
|
|
16C367F0000
|
unkown
|
page read and write
|
|
|
|
274EA413000
|
unkown
|
page read and write
|
|
|
|
3F8D37A000
|
unkown
|
page read and write
|
|
|
|
7FF5766E8000
|
unkown
|
page readonly
|
|
|
|
1C27C010000
|
unkown
|
page read and write
|
|
|
|
7FF59BFC7000
|
unkown
|
page readonly
|
|
|
|
250C103F000
|
unkown
|
page read and write
|
|
|
|
1A24CCC0000
|
unkown
|
page read and write
|
|
|
|
7FF56CC4E000
|
unkown
|
page readonly
|
|
|
|
2D062A45000
|
unkown
|
page read and write
|
|
|
|
7FF5767CF000
|
unkown
|
page readonly
|
|
|
|
240B70F0000
|
unkown
|
page read and write
|
|
|
|
1A24C4A0000
|
heap default
|
page read and write
|
|
|
|
7FF578C74000
|
unkown
|
page readonly
|
|
|
|
1F5E4C00000
|
unkown
|
page readonly
|
|
|
|
7FF56CC5B000
|
unkown
|
page readonly
|
|
|
|
7FF5B4243000
|
unkown
|
page readonly
|
|
|
|
DE9B07F000
|
unkown
|
page read and write
|
|
|
|
DD66D7F000
|
unkown
|
page read and write
|
|
|
|
7FF57E775000
|
unkown
|
page readonly
|
|
|
|
1C27E010000
|
unkown
|
page read and write
|
|
|
|
7FF59BFFC000
|
unkown
|
page readonly
|
|
|
|
2997000
|
unkown
|
page readonly
|
|
|
|
88904F9000
|
unkown
|
page read and write
|
|
|
|
1C279F72000
|
unkown
|
page read and write
|
|
|
|
7FF57EA2D000
|
unkown
|
page readonly
|
|
|
|
7FF56CB78000
|
unkown
|
page readonly
|
|
|
|
2912C413000
|
unkown
|
page read and write
|
|
|
|
250C1056000
|
unkown
|
page read and write
|
|
|
|
240B742F000
|
unkown
|
page read and write
|
|
|
|
1C27BF73000
|
unkown
|
page read and write
|
|
|
|
7FF50E769000
|
unkown
|
page readonly
|
|
|
|
2D062A13000
|
unkown
|
page read and write
|
|
|
|
23DA65C0000
|
unkown
|
page readonly
|
|
|
|
7FF5789B1000
|
unkown
|
page readonly
|
|
|
|
1C27C110000
|
unkown
|
page read and write
|
|
|
|
1A24C613000
|
unkown
|
page read and write
|
|
|
|
2541EFA000
|
unkown
|
page read and write
|
|
|
|
7FF56AEED000
|
unkown
|
page readonly
|
|
|
|
7FF562446000
|
unkown
|
page readonly
|
|
|
|
274EA513000
|
unkown
|
page read and write
|
|
|
|
7FF58E74A000
|
unkown
|
page readonly
|
|
|
|
7FF57EBD3000
|
unkown
|
page readonly
|
|
|
|
7FF59BE17000
|
unkown
|
page readonly
|
|
|
|
16C37002000
|
unkown
|
page read and write
|
|
|
|
7FF56287D000
|
unkown
|
page readonly
|
|
|
|
7FF578B97000
|
unkown
|
page readonly
|
|
|
|
7FF5626AD000
|
unkown
|
page readonly
|
|
|
|
269D0B50000
|
heap private
|
page read and write
|
|
|
|
12896FB000
|
unkown
|
page read and write
|
|
|
|
88903F9000
|
unkown
|
page read and write
|
|
|
|
7FF5671B9000
|
unkown
|
page readonly
|
|
|
|
7FF59BEDE000
|
unkown
|
page readonly
|
|
|
|
2D062A63000
|
unkown
|
page read and write
|
|
|
|
1C279E6D000
|
unkown
|
page read and write
|
|
|
|
7FF53E4B7000
|
unkown
|
page readonly
|
|
|
|
7FF556098000
|
unkown
|
page readonly
|
|
|
|
250C1200000
|
unkown
|
page readonly
|
|
|
|
7FF57B6F4000
|
unkown
|
page readonly
|
|
|
|
1C279F02000
|
unkown
|
page read and write
|
|
|
|
7FF57B2ED000
|
unkown
|
page readonly
|
|
|
|
1C27D0C4000
|
unkown
|
page read and write
|
|
|
|
7FF59C0ED000
|
unkown
|
page readonly
|
|
|
|
7FF5676DB000
|
unkown
|
page readonly
|
|
|
|
6D647FD000
|
unkown
|
page read and write
|
|
|
|
7FF57B6ED000
|
unkown
|
page readonly
|
|
|
|
7FF5627D9000
|
unkown
|
page readonly
|
|
|
|
7FF565847000
|
unkown
|
page readonly
|
|
|
|
7FF56CC1F000
|
unkown
|
page readonly
|
|
|
|
1C27BF10000
|
unkown
|
page read and write
|
|
|
|
274EA600000
|
unkown
|
page readonly
|
|
|
|
22F07F8B000
|
heap default
|
page read and write
|
|
|
|
7FF578804000
|
unkown
|
page readonly
|
|
|
|
240B1CFC000
|
unkown
|
page read and write
|
|
|
|
1D19DCB0000
|
heap private
|
page read and write
|
|
|
|
200EEC00000
|
unkown
|
page readonly
|
|
|
|
7FF59C028000
|
unkown
|
page readonly
|
|
|
|
7FF578833000
|
unkown
|
page readonly
|
|
|
|
D04617B000
|
unkown
|
page read and write
|
|
|
|
23DA636B000
|
heap default
|
page read and write
|
|
|
|
25419AE000
|
unkown
|
page read and write
|
|
|
|
240B2C20000
|
unkown
|
page readonly
|
|
|
|
7FF56C9FD000
|
unkown
|
page readonly
|
|
|
|
7FF57B628000
|
unkown
|
page readonly
|
|
|
|
7FF5560CB000
|
unkown
|
page readonly
|
|
|
|
7FF56AF0B000
|
unkown
|
page readonly
|
|
|
|
1C27BFB6000
|
unkown
|
page read and write
|
|
|
|
7FF5560CE000
|
unkown
|
page readonly
|
|
|
|
16C367C0000
|
heap default
|
page read and write
|
|
|
|
1C27BC90000
|
unkown
|
page read and write
|
|
|
|
7FF5B2BAE000
|
unkown
|
page readonly
|
|
|
|
61BB5FB000
|
unkown
|
page read and write
|
|
|
|
7FF57EB87000
|
unkown
|
page readonly
|
|
|
|
7FF57EBDA000
|
unkown
|
page readonly
|
|
|
|
240B6F90000
|
unkown
|
page read and write
|
|
|
|
7FF5B493D000
|
unkown
|
page readonly
|
|
|
|
7FF56AEC8000
|
unkown
|
page readonly
|
|
|
|
144CD402000
|
unkown
|
page read and write
|
|
|
|
9C000
|
unkown
|
page read and write
|
|
|
|
61BB97C000
|
unkown
|
page read and write
|
|
|
|
7FF5560B0000
|
unkown
|
page readonly
|
|
|
|
1C1F83A0000
|
unkown
|
page read and write
|
|
|
|
7FF578C8B000
|
unkown
|
page readonly
|
|
|
|
1C1F7690000
|
unkown
|
page read and write
|
|
|
|
7FF59BF84000
|
unkown
|
page readonly
|
|
|
|
250C1102000
|
unkown
|
page read and write
|
|
|
|
1D19E800000
|
unkown
|
page readonly
|
|
|
|
7FF5B4245000
|
unkown
|
page readonly
|
|
|
|
274EA330000
|
heap default
|
page read and write
|
|
|
|
1A24C590000
|
unkown
|
page readonly
|
|
|
|
200EE1C0000
|
unkown
|
page readonly
|
|
|
|
7FF578B40000
|
unkown
|
page readonly
|
|
|
|
7FF53E64C000
|
unkown
|
page readonly
|
|
|
|
9FE0CFB000
|
unkown
|
page read and write
|
|
|
|
240B7250000
|
unkown
|
page readonly
|
|
|
|
7FF578C5E000
|
unkown
|
page readonly
|
|
|
|
1C279E55000
|
unkown
|
page read and write
|
|
|
|
7FF567655000
|
unkown
|
page readonly
|
|
|
|
28D0000
|
unkown
|
page readonly
|
|
|
|
2912C451000
|
unkown
|
page read and write
|
|
|
|
7FF53E50E000
|
unkown
|
page readonly
|
|
|
|
7FF5675E3000
|
unkown
|
page readonly
|
|
|
|
1C1F76F0000
|
unkown
|
page read and write
|
|
|
|
2D062A83000
|
unkown
|
page read and write
|
|
|
|
7FF5767CF000
|
unkown
|
page readonly
|
|
|
|
240B7484000
|
unkown
|
page read and write
|
|
|
|
1C279F41000
|
unkown
|
page read and write
|
|
|
|
7FF5B4B6D000
|
unkown
|
page readonly
|
|
|
|
7FF5B2698000
|
unkown
|
page readonly
|
|
|
|
250C1000000
|
unkown
|
page read and write
|
|
|
|
7FF5675E7000
|
unkown
|
page readonly
|
|
|
|
7FF5B42CB000
|
unkown
|
page readonly
|
|
|
|
288D000
|
unkown
|
page readonly
|
|
|
|
9165777000
|
unkown
|
page read and write
|
|
|
|
240B74B4000
|
unkown
|
page read and write
|
|
|
|
200EE241000
|
unkown
|
page read and write
|
|
|
|
28F1000
|
unkown
|
page readonly
|
|
|
|
1D19DE82000
|
unkown
|
page read and write
|
|
|
|
7FF55609F000
|
unkown
|
page readonly
|
|
|
|
2D062A7A000
|
unkown
|
page read and write
|
|
|
|
2D062A5C000
|
unkown
|
page read and write
|
|
|
|
1C27BF62000
|
unkown
|
page read and write
|
|
|
|
DD66B7E000
|
unkown
|
page read and write
|
|
|
|
2912C44A000
|
unkown
|
page read and write
|
|
|
|
7FF578AC7000
|
unkown
|
page readonly
|
|
|
|
7FF5766B2000
|
unkown
|
page readonly
|
|
|
|
7FF50E740000
|
unkown
|
page readonly
|
|
|
|
1A24C6C8000
|
unkown
|
page read and write
|
|
|
|
2912CE00000
|
unkown
|
page readonly
|
|
|
|
1C279F41000
|
unkown
|
page read and write
|
|
|
|
7FF59BF65000
|
unkown
|
page readonly
|
|
|
|
7FF59BD98000
|
unkown
|
page readonly
|
|
|
|
3F8D4FF000
|
unkown
|
page read and write
|
|
|
|
250C106D000
|
unkown
|
page read and write
|
|
|
|
28C0000
|
unkown
|
page readonly
|
|
|
|
240B7487000
|
unkown
|
page read and write
|
|
|
|
250C106C000
|
unkown
|
page read and write
|
|
|
|
144CD2E0000
|
heap private
|
page read and write
|
|
|
|
7FF53E70B000
|
unkown
|
page readonly
|
|
|
|
240B7330000
|
unkown
|
page readonly
|
|
|
|
240B7270000
|
unkown
|
page readonly
|
|
|
|
7FF578934000
|
unkown
|
page readonly
|
|
|
|
2912C44F000
|
unkown
|
page read and write
|
|
|
|
7FF53E683000
|
unkown
|
page readonly
|
|
|
|
2912C3D0000
|
unkown
|
page read and write
|
|
|
|
2905000
|
unkown
|
page readonly
|
|
|
|
240B1B40000
|
unkown
|
page readonly
|
|
|
|
7FF5B4D4B000
|
unkown
|
page readonly
|
|
|
|
7FF57B70F000
|
unkown
|
page readonly
|
|
|
|
200EE790000
|
unkown
|
page readonly
|
|
|
|
250C1067000
|
unkown
|
page read and write
|
|
|
|
1C27C110000
|
unkown
|
page read and write
|
|
|
|
7FF56AE1C000
|
unkown
|
page readonly
|
|
|
|
7FF59C0DB000
|
unkown
|
page readonly
|
|
|
|
1D19DDF0000
|
unkown
|
page readonly
|
|
|
|
22F07FB1000
|
heap default
|
page read and write
|
|
|
|
23DA7F20000
|
heap private
|
page read and write
|
|
|
|
7FF57B653000
|
unkown
|
page readonly
|
|
|
|
7FF57B40D000
|
unkown
|
page readonly
|
|
|
|
7FF56AE75000
|
unkown
|
page readonly
|
|
|
|
7FF55600D000
|
unkown
|
page readonly
|
|
|
|
2D062A3A000
|
unkown
|
page read and write
|
|
|
|
2639FA58000
|
unkown
|
page read and write
|
|
|
|
31C95DB000
|
unkown
|
page read and write
|
|
|
|
7FF50E737000
|
unkown
|
page readonly
|
|
|
|
7FF578A5C000
|
unkown
|
page readonly
|
|
|
|
1D19DE5E000
|
unkown
|
page read and write
|
|
|
|
2541DFF000
|
unkown
|
page read and write
|
|
|
|
7FF5B295D000
|
unkown
|
page readonly
|
|
|
|
9165877000
|
unkown
|
page read and write
|
|
|
|
7FF555FF8000
|
unkown
|
page readonly
|
|
|
|
200EE229000
|
unkown
|
page read and write
|
|
|
|
25426FD000
|
unkown
|
page read and write
|
|
|
|
74E6AF9000
|
unkown
|
page read and write
|
|
|
|
88902FF000
|
unkown
|
page read and write
|
|
|
|
1289575000
|
unkown
|
page read and write
|
|
|
|
7FF565606000
|
unkown
|
page readonly
|
|
|
|
7FF58E5EE000
|
unkown
|
page readonly
|
|
|
|
240B74A1000
|
unkown
|
page read and write
|
|
|
|
2D062A69000
|
unkown
|
page read and write
|
|
|
|
2912C46F000
|
unkown
|
page read and write
|
|
|
|
240B1C29000
|
unkown
|
page read and write
|
|
|
|
7FF555D85000
|
unkown
|
page readonly
|
|
|
|
23DA7C30000
|
unkown
|
page readonly
|
|
|
|
240B70E0000
|
unkown
|
page read and write
|
|
|
|
7FF5676D4000
|
unkown
|
page readonly
|
|
|
|
E156C7C000
|
unkown
|
page read and write
|
|
|
|
16C36F60000
|
unkown
|
page write copy
|
|
|
|
9FE0DFE000
|
unkown
|
page read and write
|
|
|
|
16C36913000
|
unkown
|
page read and write
|
|
|
|
23DA7E50000
|
heap private
|
page read and write
|
|
|
|
1D19E602000
|
unkown
|
page read and write
|
|
|
|
1D19DE57000
|
unkown
|
page read and write
|
|
|
|
7FF57886C000
|
unkown
|
page readonly
|
|
|
|
7FF565916000
|
unkown
|
page readonly
|
|
|
|
2541C7E000
|
unkown
|
page read and write
|
|
|
|
1A24CCC0000
|
unkown
|
page read and write
|
|
|
|
7FF5B2683000
|
unkown
|
page readonly
|
|
|
|
240B1E00000
|
unkown
|
page readonly
|
|
|
|
9FE127F000
|
unkown
|
page read and write
|
|
|
|
7FF578464000
|
unkown
|
page readonly
|
|
|
|
7FF565833000
|
unkown
|
page readonly
|
|
|
|
1F5E4A02000
|
unkown
|
page read and write
|
|
|
|
7FF56AC58000
|
unkown
|
page readonly
|
|
|
|
7FF5B29AE000
|
unkown
|
page readonly
|
|
|
|
22F07F80000
|
heap default
|
page read and write
|
|
|
|
1C27BCA0000
|
unkown
|
page readonly
|
|
|
|
1C279F34000
|
unkown
|
page read and write
|
|
|
|
16C367E0000
|
unkown
|
page readonly
|
|
|
|
7FF57EBC5000
|
unkown
|
page readonly
|
|
|
|
240B2518000
|
unkown
|
page read and write
|
|
|
|
240B70B0000
|
unkown
|
page read and write
|
|
|
|
7FF565857000
|
unkown
|
page readonly
|
|
|
|
A3567FE000
|
unkown
|
page read and write
|
|
|
|
1C27BC20000
|
unkown
|
page read and write
|
|
|
|
1C27BF06000
|
unkown
|
page read and write
|
|
|
|
250C106C000
|
unkown
|
page read and write
|
|
|
|
7FF565934000
|
unkown
|
page readonly
|
|
|
|
7FF57EC4F000
|
unkown
|
page readonly
|
|
|
|
7FF556015000
|
unkown
|
page readonly
|
|
|
|
7FF5787C1000
|
unkown
|
page readonly
|
|
|
|
240B2AE0000
|
unkown
|
page read and write
|
|
|
|
7FF5676C0000
|
unkown
|
page readonly
|
|
|
|
1C27D042000
|
unkown
|
page read and write
|
|
|
|
AF59DFF000
|
unkown
|
page read and write
|
|
|
|
1A24C6BD000
|
unkown
|
page read and write
|
|
|
|
240B70B8000
|
unkown
|
page read and write
|
|
|
|
7FF56593B000
|
unkown
|
page readonly
|
|
|
|
16C37100000
|
unkown
|
page read and write
|
|
|
|
7FF578C56000
|
unkown
|
page readonly
|
|
|
|
7FF5B2B8B000
|
unkown
|
page readonly
|
|
|
|
240B70D1000
|
unkown
|
page read and write
|
|
|
|
7FF59BBBF000
|
unkown
|
page readonly
|
|
|
|
7FF578C6D000
|
unkown
|
page readonly
|
|
|
|
7FF59C03D000
|
unkown
|
page readonly
|
|
|
|
1C27BF30000
|
unkown
|
page read and write
|
|
|
|
7FF565648000
|
unkown
|
page readonly
|
|
|
|
1C1F7A70000
|
unkown
|
page read and write
|
|
|
|
D04607F000
|
unkown
|
page read and write
|
|
|
|
A3566FF000
|
unkown
|
page read and write
|
|
|
|
7FF50E3E2000
|
unkown
|
page readonly
|
|
|
|
7FF57E86D000
|
unkown
|
page readonly
|
|
|
|
7FF59B8A8000
|
unkown
|
page readonly
|
|
|
|
1C27C113000
|
unkown
|
page read and write
|
|
|
|
7FF5B4CAA000
|
unkown
|
page readonly
|
|
|
|
263A13F0000
|
unkown
|
page read and write
|
|
|
|
269D0C67000
|
unkown
|
page read and write
|
|
|
|
D045E7E000
|
unkown
|
page read and write
|
|
|
|
7FF57E997000
|
unkown
|
page readonly
|
|
|
|
240B19F0000
|
heap private
|
page read and write
|
|
|
|
2D062A41000
|
unkown
|
page read and write
|
|
|
|
7FF5766BC000
|
unkown
|
page readonly
|
|
|
|
7FF5B4D3D000
|
unkown
|
page readonly
|
|
|
|
1F5E4A3D000
|
unkown
|
page read and write
|
|
|
|
269D26C0000
|
unkown
|
page read and write
|
|
|
|
2D062830000
|
heap private
|
page read and write
|
|
|
|
7FF58E2D8000
|
unkown
|
page readonly
|
|
|
|
7FF5B4D26000
|
unkown
|
page readonly
|
|
|
|
16C36A00000
|
unkown
|
page readonly
|
|
|
|
1C279EBC000
|
unkown
|
page read and write
|
|
|
|
25424FC000
|
unkown
|
page read and write
|
|
|
|
7FF555F7F000
|
unkown
|
page readonly
|
|
|
|
1C27D102000
|
unkown
|
page read and write
|
|
|
|
23DA7D40000
|
heap private
|
page read and write
|
|
|
|
7FF56262A000
|
unkown
|
page readonly
|
|
|
|
200EE1B0000
|
unkown
|
page readonly
|
|
|
|
691000
|
heap default
|
page read and write
|
|
|
|
23DA6615000
|
heap private
|
page read and write
|
|
|
|
7FF5B2B90000
|
unkown
|
page readonly
|
|
|
|
274EA440000
|
unkown
|
page read and write
|
|
|
|
7FF576705000
|
unkown
|
page readonly
|
|
|
|
16C36902000
|
unkown
|
page read and write
|
|
|
|
7FF5560C4000
|
unkown
|
page readonly
|
|
|
|
916567B000
|
unkown
|
page read and write
|
|
|
|
7FF555FD7000
|
unkown
|
page readonly
|
|
|
|
16C368B8000
|
unkown
|
page read and write
|
|
|
|
240B71B4000
|
unkown
|
page write copy
|
|
|
|
7FF565920000
|
unkown
|
page readonly
|
|
|
|
7FF57EB7C000
|
unkown
|
page readonly
|
|
|
|
269D0C6B000
|
unkown
|
page read and write
|
|
|
|
7FF57EA7E000
|
unkown
|
page readonly
|
|
|
|
1F5E4A5C000
|
unkown
|
page read and write
|
|
|
|
7FF56AE05000
|
unkown
|
page readonly
|
|
|
|
16C368BF000
|
unkown
|
page read and write
|
|
|
|
7FF5B4C34000
|
unkown
|
page readonly
|
|
|
|
7FF59C053000
|
unkown
|
page readonly
|
|
|
|
DE9AC7E000
|
unkown
|
page read and write
|
|
|
|
200EE257000
|
unkown
|
page read and write
|
|
|
|
1C27D100000
|
unkown
|
page read and write
|
|
|
|
7FF50E80D000
|
unkown
|
page readonly
|
|
|
|
1C27BF00000
|
unkown
|
page read and write
|
|
|
|
31C9C77000
|
unkown
|
page read and write
|
|
|
|
144CD429000
|
unkown
|
page read and write
|
|
|
|
289D000
|
unkown
|
page readonly
|
|
|
|
7FF5B250F000
|
unkown
|
page readonly
|
|
|
|
7FF5766A4000
|
unkown
|
page readonly
|
|
|
|
7FF5676B6000
|
unkown
|
page readonly
|
|
|
|
1C27C000000
|
unkown
|
page read and write
|
|
|
|
1C27C210000
|
unkown
|
page read and write
|
|
|
|
1A24C6E2000
|
unkown
|
page read and write
|
|
|
|
7FF57645A000
|
unkown
|
page readonly
|
|
|
|
274EAA60000
|
unkown
|
page readonly
|
|
|
|
7FF50E6DD000
|
unkown
|
page readonly
|
|
|
|
1C27D082000
|
unkown
|
page read and write
|
|
|
|
240B1BC1000
|
unkown
|
page read and write
|
|
|
|
7FF59BFBD000
|
unkown
|
page readonly
|
|
|
|
7FF578626000
|
unkown
|
page readonly
|
|
|
|
1D19DF00000
|
unkown
|
page read and write
|
|
|
|
23DA61C0000
|
unkown
|
page readonly
|
|
|
|
250C0FC0000
|
heap default
|
page read and write
|
|
|
|
7FF53E71D000
|
unkown
|
page readonly
|
|
|
|
7FF578846000
|
unkown
|
page readonly
|
|
|
|
AF5967B000
|
unkown
|
page read and write
|
|
|
|
2912C2E0000
|
unkown
|
page readonly
|
|
|
|
269D0C6A000
|
unkown
|
page read and write
|
|
|
|
7FF53E724000
|
unkown
|
page readonly
|
|
|
|
7FF56CB8D000
|
unkown
|
page readonly
|
|
|
|
2639FC50000
|
unkown
|
page readonly
|
|
|
|
269D0D00000
|
unkown
|
page read and write
|
|
|
|
2D062A59000
|
unkown
|
page read and write
|
|
|
|
31C98FE000
|
unkown
|
page read and write
|
|
|
|
240B7210000
|
unkown
|
page read and write
|
|
|
|
254237B000
|
unkown
|
page read and write
|
|
|
|
7FF5560A6000
|
unkown
|
page readonly
|
|
|
|
240B1CA0000
|
unkown
|
page read and write
|
|
|
|
28FC000
|
unkown
|
page readonly
|
|
|
|
7FF5652B0000
|
unkown
|
page readonly
|
|
|
|
7FF58E59D000
|
unkown
|
page readonly
|
|
|
|
7FF578C48000
|
unkown
|
page readonly
|
|
|
|
1C27C310000
|
unkown
|
page read and write
|
|
|
|
7FF578810000
|
unkown
|
page readonly
|
|
|
|
61BBAFB000
|
unkown
|
page read and write
|
|
|
|
1C27BFB5000
|
unkown
|
page read and write
|
|
|
|
2D062A6A000
|
unkown
|
page read and write
|
|
|
|
7FF56ABE8000
|
unkown
|
page readonly
|
|
|
|
1C279DB0000
|
unkown
|
page write copy
|
|
|
|
200EE300000
|
unkown
|
page read and write
|
|
|
|
1C27BFA4000
|
unkown
|
page read and write
|
|
|
|
7FF5767A0000
|
unkown
|
page readonly
|
|
|
|
144CD502000
|
unkown
|
page read and write
|
|
|
|
7FF59C075000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
heap private
|
page read and write
|
|
|
|
7FF50E75D000
|
unkown
|
page readonly
|
|
|
|
1C27E010000
|
unkown
|
page read and write
|
|
|
|
7FF57884B000
|
unkown
|
page readonly
|
|
|
|
1C1F85F0000
|
unkown
|
page read and write
|
|
|
|
3F6000
|
unkown
|
page read and write
|
|
|
|
7FF5766D8000
|
unkown
|
page readonly
|
|
|
|
7FF57B38D000
|
unkown
|
page readonly
|
|
|
|
31C9AFB000
|
unkown
|
page read and write
|
|
|
|
7FF578BA8000
|
unkown
|
page readonly
|
|
|
|
7FF56AE3D000
|
unkown
|
page readonly
|
|
|
|
7FF5676DE000
|
unkown
|
page readonly
|
|
|
|
7FF57EC7E000
|
unkown
|
page readonly
|
|
|
|
1C27C410000
|
unkown
|
page read and write
|
|
|
|
74E6BFF000
|
unkown
|
page read and write
|
|
|
|
1C279F63000
|
unkown
|
page read and write
|
|
|
|
7FF578C5B000
|
unkown
|
page readonly
|
|
|
|
7FF53E246000
|
unkown
|
page readonly
|
|
|
|
7FF57EB64000
|
unkown
|
page readonly
|
|
|
|
2D062A5A000
|
unkown
|
page read and write
|
|
|
|
7FF58E72D000
|
unkown
|
page readonly
|
|
|
|
3FA000
|
unkown
|
page read and write
|
|
|
|
1A24C4B0000
|
unkown
|
page readonly
|
|
|
|
1C27BC40000
|
heap private
|
page read and write
|
|
|
|
1F5E4F90000
|
unkown
|
page readonly
|
|
|
|
1C27D002000
|
unkown
|
page read and write
|
|
|
|
7FF56C5C5000
|
unkown
|
page readonly
|
|
|
|
7FF58E7BF000
|
unkown
|
page readonly
|
|
|
|
D046277000
|
unkown
|
page read and write
|
|
|
|
1C27D0E3000
|
unkown
|
page read and write
|
|
|
|
240B7210000
|
unkown
|
page read and write
|
|
|
|
240B70B0000
|
unkown
|
page read and write
|
|
|
|
144CD360000
|
unkown
|
page readonly
|
|
|
|
7FF53E637000
|
unkown
|
page readonly
|
|
|
|
7FF5B4298000
|
unkown
|
page readonly
|
|
|
|
16C36800000
|
unkown
|
page read and write
|
|
|
|
7FF565810000
|
unkown
|
page readonly
|
|
|
|
7FF5B4223000
|
unkown
|
page readonly
|
|
|
|
12895FE000
|
unkown
|
page read and write
|
|
|
|
74E6B79000
|
unkown
|
page read and write
|
|
|
|
7FF53E6FF000
|
unkown
|
page readonly
|
|
|
|
7FF50E52D000
|
unkown
|
page readonly
|
|
|
|
7FF578997000
|
unkown
|
page readonly
|
|
|
|
240B1C13000
|
unkown
|
page read and write
|
|
|
|
7FF56589A000
|
unkown
|
page readonly
|
|
|
|
1C27A000000
|
unkown
|
page readonly
|
|
|
|
28C4000
|
unkown
|
page readonly
|
|
|
|
7FF578B60000
|
unkown
|
page readonly
|
|
|
|
7FF50E63D000
|
unkown
|
page readonly
|
|
|
|
7FF5671B3000
|
unkown
|
page readonly
|
|
|
|
1C27E110000
|
unkown
|
page read and write
|
|
|
|
250C2BC0000
|
unkown
|
page readonly
|
|
|
|
7FF58E707000
|
unkown
|
page readonly
|
|
|
|
7FF50E41A000
|
unkown
|
page readonly
|
|
|
|
1C279C70000
|
heap private
|
page read and write
|
|
|
|
1C279F21000
|
unkown
|
page read and write
|
|
|
|
250C1002000
|
unkown
|
page read and write
|
|
|
|
269D0E00000
|
unkown
|
page readonly
|
|
|
|
7FF57EAC7000
|
unkown
|
page readonly
|
|
|
|
7FF59C10F000
|
unkown
|
page readonly
|
|
|
|
240B1C60000
|
unkown
|
page read and write
|
|
|
|
23DA62D0000
|
unkown
|
page readonly
|
|
|
|
7FF578A48000
|
unkown
|
page readonly
|
|
|
|
7FF58E70C000
|
unkown
|
page readonly
|
|
|
|
1C279F62000
|
unkown
|
page read and write
|
|
|
|
7FF59BF1D000
|
unkown
|
page readonly
|
|
|
|
1D19DF13000
|
unkown
|
page read and write
|
|
|
|
1D19DE8D000
|
unkown
|
page read and write
|
|
|
|
7FF53E5DD000
|
unkown
|
page readonly
|
|
|
|
1C1F7A65000
|
heap private
|
page read and write
|
|
|
|
7FF567633000
|
unkown
|
page readonly
|
|
|
|
7FF5B2983000
|
unkown
|
page readonly
|
|
|
|
DE9AB7F000
|
unkown
|
page read and write
|
|
|
|
269D0C6A000
|
unkown
|
page read and write
|
|
|
|
7FF5B2AF9000
|
unkown
|
page readonly
|
|
|
|
269D0C6A000
|
unkown
|
page read and write
|
|
|
|
7FF55604D000
|
unkown
|
page readonly
|
|
|
|
7FF57B6FB000
|
unkown
|
page readonly
|
|
|
|
7FF57B05F000
|
unkown
|
page readonly
|
|
|
|
7FF58E2C9000
|
unkown
|
page readonly
|
|
|
|
7FF53E5F7000
|
unkown
|
page readonly
|
|
|
|
1C27BF04000
|
unkown
|
page read and write
|
|
|
|
144CD43C000
|
unkown
|
page read and write
|
|
|
|
7FF57EA07000
|
unkown
|
page readonly
|
|
|
|
7FF567625000
|
unkown
|
page readonly
|
|
|
|
144CD460000
|
unkown
|
page read and write
|
|
|
|
7FF57EC56000
|
unkown
|
page readonly
|
|
|
|
1A24C800000
|
unkown
|
page readonly
|
|
|
|
1D19DD10000
|
heap default
|
page read and write
|
|
|
|
1C27BC90000
|
unkown
|
page read and write
|
|
|
|
240B1C90000
|
unkown
|
page read and write
|
|
|
|
7FF56591B000
|
unkown
|
page readonly
|
|
|
|
7FF5766C7000
|
unkown
|
page readonly
|
|
|
|
7FF58E674000
|
unkown
|
page readonly
|
|
|
|
7FF57B2FA000
|
unkown
|
page readonly
|
|
|
|
240B71B7000
|
unkown
|
page write copy
|
|
|
|
7FF57897C000
|
unkown
|
page readonly
|
|
|
|
1C279E98000
|
unkown
|
page read and write
|
|
|
|
7FF56CC2B000
|
unkown
|
page readonly
|
|
|
|
7FF5B2B78000
|
unkown
|
page readonly
|
|
|
|
2D062A6E000
|
unkown
|
page read and write
|
|
|
|
7FF565908000
|
unkown
|
page readonly
|
|
|
|
200EEA02000
|
unkown
|
page read and write
|
|
|
|
7FF578BF5000
|
unkown
|
page readonly
|
|
|
|
1C27BFE6000
|
unkown
|
page read and write
|
|
|
|
A356679000
|
unkown
|
page read and write
|
|
|
|
61BB1EB000
|
unkown
|
page read and write
|
|
|
|
7FF58E4B3000
|
unkown
|
page readonly
|
|
|
|
8890379000
|
unkown
|
page read and write
|
|
|
|
1F5E49C0000
|
unkown
|
page readonly
|
|
|
|
144CD340000
|
heap default
|
page read and write
|
|
|
|
1C27BC90000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown
|
page readonly
|
|
|
|
7FF578B64000
|
unkown
|
page readonly
|
|
|
|
7FF57B6FE000
|
unkown
|
page readonly
|
|
|
|
7FF5B4C70000
|
unkown
|
page readonly
|
|
|
|
1C1F7900000
|
unkown
|
page readonly
|
|
|
|
7FF578B9C000
|
unkown
|
page readonly
|
|
|
|
1F5E5070000
|
unkown
|
page read and write
|
|
|
|
250C106E000
|
unkown
|
page read and write
|
|
|
|
7FF59BED3000
|
unkown
|
page readonly
|
|
|
|
7FF58E5CE000
|
unkown
|
page readonly
|
|
|
|
7FF5767AD000
|
unkown
|
page readonly
|
|
|
|
888FF3B000
|
unkown
|
page read and write
|
|
|
|
250C1067000
|
unkown
|
page read and write
|
|
|
|
240B70D4000
|
unkown
|
page read and write
|
|
|
|
1A24C440000
|
heap private
|
page read and write
|
|
|
|
2D062A31000
|
unkown
|
page read and write
|
|
|
|
7FF57B70B000
|
unkown
|
page readonly
|
|
|
|
200EE26A000
|
unkown
|
page read and write
|
|
|
|
7FF578C7E000
|
unkown
|
page readonly
|
|
|
|
7FF58E655000
|
unkown
|
page readonly
|
|
|
|
269D0D02000
|
unkown
|
page read and write
|
|
|
|
3F8D3F9000
|
unkown
|
page read and write
|
|
|
|
28E5000
|
unkown
|
page readonly
|
|
|
|
1A24C682000
|
unkown
|
page read and write
|
|
|
|
7FF5656ED000
|
unkown
|
page readonly
|
|
|
|
7FF57EC7B000
|
unkown
|
page readonly
|
|
|
|
240B2BE0000
|
unkown
|
page readonly
|
|
|
|
1C1F7A69000
|
heap private
|
page read and write
|
|
|
|
1C27C210000
|
unkown
|
page read and write
|
|
|
|
7FF58E7C6000
|
unkown
|
page readonly
|
|
|
|
2D062A60000
|
unkown
|
page read and write
|
|
|
|
7FF5B2AF5000
|
unkown
|
page readonly
|
|
|
|
16C36824000
|
unkown
|
page read and write
|
|
|
|
2D062A79000
|
unkown
|
page read and write
|
|
|
|
7FF5B422A000
|
unkown
|
page readonly
|
|
|
|
140000
|
unkown
|
page read and write
|
|
|
|
7FF58E7CB000
|
unkown
|
page readonly
|
|
|
|
7FF578B68000
|
unkown
|
page readonly
|
|
|
|
2639F900000
|
heap default
|
page read and write
|
|
|
|
7FF578B87000
|
unkown
|
page readonly
|
|
|
|
7FF5622F9000
|
unkown
|
page readonly
|
|
|
|
7FF56288B000
|
unkown
|
page readonly
|
|
|
|
7FF50E4AD000
|
unkown
|
page readonly
|
|
|
|
7FF58E6F7000
|
unkown
|
page readonly
|
|
|
|
240B7422000
|
unkown
|
page read and write
|
|
|
|
7FF56587D000
|
unkown
|
page readonly
|
|
|
|
7FF567503000
|
unkown
|
page readonly
|
|
|
|
7FF56ACAD000
|
unkown
|
page readonly
|
|
|
|
1C279F31000
|
unkown
|
page read and write
|
|
|
|
7FF5B2B7F000
|
unkown
|
page readonly
|
|
|
|
1C27D182000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page readonly
|
|
|
|
7FF5B4AD7000
|
unkown
|
page readonly
|
|
|
|
1C279F22000
|
unkown
|
page read and write
|
|
|
|
1C27BF34000
|
unkown
|
page read and write
|
|
|
|
7FF56AADC000
|
unkown
|
page readonly
|
|
|
|
1C27BF43000
|
unkown
|
page read and write
|
|
|
|
7FF53E70E000
|
unkown
|
page readonly
|
|
|
|
7FF555F47000
|
unkown
|
page readonly
|
|
|
|
7FF5B4CC3000
|
unkown
|
page readonly
|
|
|
|
240B1C00000
|
unkown
|
page read and write
|
|
|
|
1A24C6A1000
|
unkown
|
page read and write
|
|
|
|
1F5E5070000
|
unkown
|
page read and write
|
|
|
|
144CD48D000
|
unkown
|
page read and write
|
|
|
|
22F07FAF000
|
heap default
|
page read and write
|
|
|
|
200EE070000
|
heap private
|
page read and write
|
|
|
|
7FF58E7DD000
|
unkown
|
page readonly
|
|
|
|
28B9000
|
unkown
|
page readonly
|
|
|
|
7FF57EB68000
|
unkown
|
page readonly
|
|
|
|
2912C270000
|
heap private
|
page read and write
|
|
|
|
7FF56AD26000
|
unkown
|
page readonly
|
|
|
|
240B70BE000
|
unkown
|
page read and write
|
|
|
|
1C27C310000
|
unkown
|
page read and write
|
|
|
|
7FF56AE49000
|
unkown
|
page readonly
|
|
|
|
7FF53E48D000
|
unkown
|
page readonly
|
|
|
|
274EA6D0000
|
unkown
|
page readonly
|
|
|
|
240B6FA0000
|
unkown
|
page read and write
|
|
|
|
1C1F8600000
|
unkown
|
page read and write
|
|
|
|
7FF57B487000
|
unkown
|
page readonly
|
|
|
|
240B2C10000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A67000
|
unkown
|
page readonly
|
|
|
|
7FF56AD1D000
|
unkown
|
page readonly
|
|
|
|
7FF562866000
|
unkown
|
page readonly
|
|
|
|
240B1D02000
|
unkown
|
page read and write
|
|
|
|
7FF57664E000
|
unkown
|
page readonly
|
|
|
|
7FF50E82F000
|
unkown
|
page readonly
|
|
|
|
269D0F20000
|
unkown
|
page readonly
|
|
|
|
7FF5B4219000
|
unkown
|
page readonly
|
|
|
|
7FF5B42C4000
|
unkown
|
page readonly
|
|
|
|
7FF56CC5F000
|
unkown
|
page readonly
|
|
|
|
7FF59BBD9000
|
unkown
|
page readonly
|
|
|
|
889057F000
|
unkown
|
page read and write
|
|
|
|
74E6A7F000
|
unkown
|
page read and write
|
|
|
|
7FF57659F000
|
unkown
|
page readonly
|
|
|
|
274EA350000
|
unkown
|
page readonly
|
|
|
|
1C1F7766000
|
unkown
|
page read and write
|
|
|
|
7FF57EC48000
|
unkown
|
page readonly
|
|
|
|
7FF5560DB000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A85000
|
unkown
|
page readonly
|
|
|
|
7FF5B4D1F000
|
unkown
|
page readonly
|
|
|
|
274EAE00000
|
unkown
|
page readonly
|
|
|
|
297B000
|
unkown
|
page readonly
|
|
|
|
AF59CFF000
|
unkown
|
page read and write
|
|
|
|
7FF567608000
|
unkown
|
page readonly
|
|
|
|
1C27C310000
|
unkown
|
page read and write
|
|
|
|
16C37200000
|
unkown
|
page readonly
|
|
|
|
250C12D0000
|
unkown
|
page write copy
|
|
|
|
25427FD000
|
unkown
|
page read and write
|
|
|
|
7FF56CC5F000
|
unkown
|
page readonly
|
|
|
|
7FF57897A000
|
unkown
|
page readonly
|
|
|
|
1A24C6A8000
|
unkown
|
page read and write
|
|
|
|
240B71F0000
|
unkown
|
page read and write
|
|
|
|
E15675C000
|
unkown
|
page read and write
|
|
|
|
16C3686B000
|
unkown
|
page read and write
|
|
|
|
7FF57EC8B000
|
unkown
|
page readonly
|
|
|
|
274EA2D0000
|
heap private
|
page read and write
|
|
|
|
7FF5676A8000
|
unkown
|
page readonly
|
|
|
|
1D19E470000
|
unkown
|
page read and write
|
|
|
|
7FF57B435000
|
unkown
|
page readonly
|
|
|
|
22F08225000
|
heap private
|
page read and write
|
|
|
|
550000
|
heap default
|
page read and write
|
|
|
|
2639FA29000
|
unkown
|
page read and write
|
|
|
|
7FF5B4D2B000
|
unkown
|
page readonly
|
|
|
|
7FF56AA6E000
|
unkown
|
page readonly
|
|
|
|
25425FB000
|
unkown
|
page read and write
|
|
|
|
1C27BF59000
|
unkown
|
page read and write
|
|
|
|
240B7183000
|
unkown
|
page readonly
|
|
|
|
61BBDFE000
|
unkown
|
page read and write
|
|
|
|
61BBA7C000
|
unkown
|
page read and write
|
|
|
|
7FF58E14F000
|
unkown
|
page readonly
|
|
|
|
7FF57B5BD000
|
unkown
|
page readonly
|
|
|
|
16C36887000
|
unkown
|
page read and write
|
|
|
|
1C279ECC000
|
unkown
|
page read and write
|
|
|
|
1C1F7766000
|
unkown
|
page read and write
|
|
|
|
7FF56289F000
|
unkown
|
page readonly
|
|
|
|
7FF5B2792000
|
unkown
|
page readonly
|
|
|
|
D045BEB000
|
unkown
|
page read and write
|
|
|
|
25423FA000
|
unkown
|
page read and write
|
|
|
|
9FE10FE000
|
unkown
|
page read and write
|
|
|
|
2912C3C0000
|
unkown
|
page readonly
|
|
|
|
1C27C410000
|
unkown
|
page read and write
|
|
|
|
7FF5B4C0D000
|
unkown
|
page readonly
|
|
|
|
2D062A61000
|
unkown
|
page read and write
|
|
|
|
1F5E48E0000
|
heap default
|
page read and write
|
|
|
|
7FF556045000
|
unkown
|
page readonly
|
|
|
|
1C279CD0000
|
heap default
|
page read and write
|
|
|
|
1C27D002000
|
unkown
|
page read and write
|
|
|
|
7FF5B42DF000
|
unkown
|
page readonly
|
|
|
|
31C99F5000
|
unkown
|
page read and write
|
|
|
|
7FF59BDC3000
|
unkown
|
page readonly
|
|
|
|
1F5E4B02000
|
unkown
|
page read and write
|
|
|
|
240B2190000
|
unkown
|
page readonly
|
|
|
|
7FF59C0FB000
|
unkown
|
page readonly
|
|
|
|
7FF56CC26000
|
unkown
|
page readonly
|
|
|
|
240B1C69000
|
unkown
|
page read and write
|
|
|
|
7FF58E7FF000
|
unkown
|
page readonly
|
|
|
|
7FF5B4912000
|
unkown
|
page readonly
|
|
|
|
7FF59BE20000
|
unkown
|
page readonly
|
|
|
|
7FF578BDA000
|
unkown
|
page readonly
|
|
|
|
7FF5676CD000
|
unkown
|
page readonly
|
|
|
|
7FF5627D5000
|
unkown
|
page readonly
|
|
|
|
7FF57EBC9000
|
unkown
|
page readonly
|
|
|
|
7FF58E7E4000
|
unkown
|
page readonly
|
|
|
|
7FF57613C000
|
unkown
|
page readonly
|
|
|
|
254247F000
|
unkown
|
page read and write
|
|
|
|
1D19DE5B000
|
unkown
|
page read and write
|
|
|
|
254207B000
|
unkown
|
page read and write
|
|
|
|
7FF576562000
|
unkown
|
page readonly
|
|
|
|
7FF57B5C7000
|
unkown
|
page readonly
|
|
|
|
274EA477000
|
unkown
|
page read and write
|
|
|
|
25A0000
|
unkown
|
page readonly
|
|
|
|
7FF57EC60000
|
unkown
|
page readonly
|
|
|
|
1F5E4A2A000
|
unkown
|
page read and write
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
1C1F7766000
|
unkown
|
page read and write
|
|
|
|
7FF578630000
|
unkown
|
page readonly
|
|
|
|
7FF56594D000
|
unkown
|
page readonly
|
|
|
|
7FF576735000
|
unkown
|
page readonly
|
|
|
|
1C27B8B0000
|
unkown
|
page readonly
|
|
|
|
269D0C40000
|
unkown
|
page read and write
|
|
|
|
7FF5B4D5F000
|
unkown
|
page readonly
|
|
|
|
7FF50E793000
|
unkown
|
page readonly
|
|
|
|
1C1F7A60000
|
heap private
|
page read and write
|
|
|
|
240B2559000
|
unkown
|
page read and write
|
|
|
|
128917B000
|
unkown
|
page read and write
|
|
|
|
7FF58E7D0000
|
unkown
|
page readonly
|
|
|
|
1F5E5070000
|
unkown
|
page read and write
|
|
|
|
7FF50E814000
|
unkown
|
page readonly
|
|
|
|
2639FA02000
|
unkown
|
page read and write
|
|
|
|
240B7210000
|
unkown
|
page read and write
|
|
|
|
7FF5B42B0000
|
unkown
|
page readonly
|
|
|
|
7FF56221E000
|
unkown
|
page readonly
|
|
|
|
7FF53E622000
|
unkown
|
page readonly
|
|
|
|
7FF53E675000
|
unkown
|
page readonly
|
|
|
|
7FF57B61C000
|
unkown
|
page readonly
|
|
|
|
23DA62E0000
|
unkown
|
page readonly
|
|
|
|
1C1F85D0000
|
unkown
|
page read and write
|
|
|
|
240B70F4000
|
unkown
|
page read and write
|
|
|
|
7FF5658B5000
|
unkown
|
page readonly
|
|
|
|
7FF57E9B5000
|
unkown
|
page readonly
|
|
|
|
7FF58E7EE000
|
unkown
|
page readonly
|
|
|
|
DE9AD7D000
|
unkown
|
page read and write
|
|
|
|
240B1C8C000
|
unkown
|
page read and write
|
|
|
|
7FF57EA9D000
|
unkown
|
page readonly
|
|
|
|
7FF5B2BBF000
|
unkown
|
page readonly
|
|
|
|
240B1B30000
|
unkown
|
page readonly
|
|
|
|
7FF50E7EF000
|
unkown
|
page readonly
|
|
|
|
240B7210000
|
unkown
|
page readonly
|
|
|
|
AF59AFE000
|
unkown
|
page read and write
|
|
|
|
6D63FDC000
|
unkown
|
page read and write
|
|
|
|
7FF57894F000
|
unkown
|
page readonly
|
|
|
|
7FF57E834000
|
unkown
|
page readonly
|
|
|
|
1C27C110000
|
unkown
|
page read and write
|
|
|
|
7FF59BBE8000
|
unkown
|
page readonly
|
|
|
|
22F08430000
|
unkown
|
page readonly
|
|
|
|
7FF5B2515000
|
unkown
|
page readonly
|
|
|
|
9FE15FF000
|
unkown
|
page read and write
|
|
|
|
2997000
|
unkown
|
page readonly
|
|
|
|
7FF59BE0D000
|
unkown
|
page readonly
|
|
|
|
7FF58E3D2000
|
unkown
|
page readonly
|
|
|
|
9FE06DB000
|
unkown
|
page read and write
|
|
|
|
7FF5789E0000
|
unkown
|
page readonly
|
|
|
|
240B23C0000
|
unkown
|
page read and write
|
|
|
|
254192B000
|
unkown
|
page read and write
|
|
|
|
2D062A4E000
|
unkown
|
page read and write
|
|
|
|
240B70D0000
|
unkown
|
page read and write
|
|
|
|
7FF555F8A000
|
unkown
|
page readonly
|
|
|
|
240B71A0000
|
unkown
|
page write copy
|
|
|
|
7FF556019000
|
unkown
|
page readonly
|
|
|
|
1C279EE2000
|
unkown
|
page read and write
|
|
|
|
7FF576596000
|
unkown
|
page readonly
|
|
|
|
2912C508000
|
unkown
|
page read and write
|
|
|
|
7FF56AEFE000
|
unkown
|
page readonly
|
|
|
|
2912C600000
|
unkown
|
page readonly
|
|
|
|
7FF57B620000
|
unkown
|
page readonly
|
|
|
|
7FF57EBBD000
|
unkown
|
page readonly
|
|
|
|
31C9B7E000
|
unkown
|
page read and write
|
|
|
|
7FF56AECF000
|
unkown
|
page readonly
|
|
|
|
7FF5B4C67000
|
unkown
|
page readonly
|
|
|
|
2639FA42000
|
unkown
|
page read and write
|
|
|
|
AF59FFE000
|
unkown
|
page read and write
|
|
|
|
16C36760000
|
heap private
|
page read and write
|
|
|
|
22F08230000
|
unkown
|
page readonly
|
|
|
|
7FF56AEF4000
|
unkown
|
page readonly
|
|
|
|
2D062A27000
|
unkown
|
page read and write
|
|
|
|
7FF56ADF2000
|
unkown
|
page readonly
|
|
|
|
1A24C5A0000
|
unkown
|
page read and write
|
|
|
|
7FF50E40D000
|
unkown
|
page readonly
|
|
|
|
7FF57B70F000
|
unkown
|
page readonly
|
|
|
|
240B70E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B2A15000
|
unkown
|
page readonly
|
|
|
|
28B6000
|
unkown
|
page readonly
|
|
|
|
916509B000
|
unkown
|
page read and write
|
|
|
|
7FF57890D000
|
unkown
|
page readonly
|
|
|
|
7FF56AE17000
|
unkown
|
page readonly
|
|
|
|
7FF57B5C0000
|
unkown
|
page readonly
|
|
|
|
AF597FE000
|
unkown
|
page read and write
|
|
|
|
7FF56ADE4000
|
unkown
|
page readonly
|
|
|
|
200EE302000
|
unkown
|
page read and write
|
|
|
|
1C279E00000
|
unkown
|
page read and write
|
|
|
|
6EB0FFE000
|
unkown
|
page read and write
|
|
|
|
7FF56AD32000
|
unkown
|
page readonly
|
|
|
|
274EA402000
|
unkown
|
page read and write
|
|
|
|
7FF57EB9C000
|
unkown
|
page readonly
|
|
|
|
1D19DE66000
|
unkown
|
page read and write
|
|
|
|
670000
|
heap default
|
page read and write
|
|
|
|
2639F910000
|
unkown
|
page readonly
|
|
|
|
A3563DF000
|
unkown
|
page read and write
|
|
|
|
7FF53E73F000
|
unkown
|
page readonly
|
|
|
|
1C279E29000
|
unkown
|
page read and write
|
|
|
|
7FF5B4CA3000
|
unkown
|
page readonly
|
|
|
|
7FF56C913000
|
unkown
|
page readonly
|
|
|
|
1C27BC30000
|
unkown
|
page readonly
|
|
|
|
7FF5B4C95000
|
unkown
|
page readonly
|
|
|
|
22F07E30000
|
unkown
|
page readonly
|
|
|
|
1C1F78E0000
|
unkown
|
page read and write
|
|
|
|
2912C2D0000
|
heap default
|
page read and write
|
|
|
|
2D062C00000
|
unkown
|
page readonly
|
|
|
|
240B71A4000
|
unkown
|
page readonly
|
|
|
|
298C000
|
unkown
|
page readonly
|
|
|
|
2912C502000
|
unkown
|
page read and write
|
|
|
|
7FF5767BE000
|
unkown
|
page readonly
|
|
|
|
7E00C3E41000
|
unkown
|
page readonly
|
|
|
|
7FF5B4D5F000
|
unkown
|
page readonly
|
|
|
|
7FF58E735000
|
unkown
|
page readonly
|
|
|
|
7FF56A754000
|
unkown
|
page readonly
|
|
|
|
7FF58E7B8000
|
unkown
|
page readonly
|
|
|
|
7FF5560BD000
|
unkown
|
page readonly
|
|
|
|
7FF56CB57000
|
unkown
|
page readonly
|
|
|
|
7FF578A43000
|
unkown
|
page readonly
|
|
|
|
1C27BF02000
|
unkown
|
page read and write
|
|
|
|
269D27C0000
|
unkown
|
page readonly
|
|
|
|
7FF57B4FE000
|
unkown
|
page readonly
|
|
|
|
16C36813000
|
unkown
|
page read and write
|
|
|
|
250C1013000
|
unkown
|
page read and write
|
|
|
|
7FF56CB99000
|
unkown
|
page readonly
|
|
|
|
1C27BCB0000
|
unkown
|
page readonly
|
|
|
|
7FF567545000
|
unkown
|
page readonly
|
|
|
|
7FF5676EB000
|
unkown
|
page readonly
|
|
|
|
1C279F22000
|
unkown
|
page read and write
|
|
|
|
269D0D13000
|
unkown
|
page read and write
|
|
|
|
888FFBE000
|
unkown
|
page read and write
|
|
|
|
200EE0D0000
|
heap default
|
page read and write
|
|
|
|
7FF5B298E000
|
unkown
|
page readonly
|
|
|
|
7FF57EBA8000
|
unkown
|
page readonly
|
|
|
|
1D19DE61000
|
unkown
|
page read and write
|
|
|
|
7FF5B3A74000
|
unkown
|
page readonly
|
|
|
|
2639F9E0000
|
unkown
|
page readonly
|
|
|
|
1A24C580000
|
unkown
|
page readonly
|
|
|
|
240B2F60000
|
unkown
|
page read and write
|
|
|
|
7FF50E555000
|
unkown
|
page readonly
|
|
|
|
7FF53E68A000
|
unkown
|
page readonly
|
|
|
|
2D062A40000
|
unkown
|
page read and write
|
|
|
|
7FF56AD84000
|
unkown
|
page readonly
|
|
|
|
23DA6160000
|
unkown
|
page readonly
|
|
|
|
144CD466000
|
unkown
|
page read and write
|
|
|
|
1D19DE51000
|
unkown
|
page read and write
|
|
|
|
1C1F7910000
|
unkown
|
page readonly
|
|
|
|
2D062A44000
|
unkown
|
page read and write
|
|
|
|
7FF50E5A7000
|
unkown
|
page readonly
|
|
|
|
1F5E4A00000
|
unkown
|
page read and write
|
|
|
|
240B7180000
|
unkown
|
page read and write
|
|
|
|
254217B000
|
unkown
|
page read and write
|
|
|
|
144CD6D0000
|
unkown
|
page readonly
|
|
|
|
7FF5767B4000
|
unkown
|
page readonly
|
|
|
|
7FF578B50000
|
unkown
|
page readonly
|
|
|
|
250C0F60000
|
heap private
|
page read and write
|
|
|
|
7FF578981000
|
unkown
|
page readonly
|
|
|
|
61BBCFE000
|
unkown
|
page read and write
|
|
|
|
269D0C00000
|
unkown
|
page read and write
|
|
|
|
200EE27D000
|
unkown
|
page read and write
|
|
|
|
7FF5B420D000
|
unkown
|
page readonly
|
|
|
|
7FF56748D000
|
unkown
|
page readonly
|
|
|
|
7FF57B6D6000
|
unkown
|
page readonly
|
|
|
|
1D19DD20000
|
unkown
|
page readonly
|
|
|
|
12897F7000
|
unkown
|
page read and write
|
|
|
|
7FF57E9E0000
|
unkown
|
page readonly
|
|
|
|
7FF56CB6C000
|
unkown
|
page readonly
|
|
|
|
240B1BF0000
|
unkown
|
page read and write
|
|
|
|
AF59EFF000
|
unkown
|
page read and write
|
|
|
|
6EB12FA000
|
unkown
|
page read and write
|
|
|
|
7FF5560DF000
|
unkown
|
page readonly
|
|
|
|
7FF5B2BBB000
|
unkown
|
page readonly
|
|
|
|
7FF5B2B25000
|
unkown
|
page readonly
|
|
|
|
7FF5B2B86000
|
unkown
|
page readonly
|
|
|
|
7FF59C045000
|
unkown
|
page readonly
|
|
|
|
240B7260000
|
unkown
|
page readonly
|
|
|
|
1D19DF02000
|
unkown
|
page read and write
|
|
|
|
1A24CC60000
|
unkown
|
page write copy
|
|
|
|
7FF59C0CF000
|
unkown
|
page readonly
|
|
|
|
2D062A5F000
|
unkown
|
page read and write
|
|
|
|
240B1B50000
|
unkown
|
page read and write
|
|
|
|
7FF53E6A5000
|
unkown
|
page readonly
|
|
|
|
274EA450000
|
unkown
|
page read and write
|
|
|
|
1C27D102000
|
unkown
|
page read and write
|
|
|
|
1F5E49E0000
|
unkown
|
page read and write
|
|
|
|
6EB147F000
|
unkown
|
page read and write
|
|
|
|
7FF57898D000
|
unkown
|
page readonly
|
|
|
|
240B72F0000
|
unkown
|
page readonly
|
|
|
|
7FF5B2873000
|
unkown
|
page readonly
|
|
|
|
2D0628A0000
|
unkown
|
page readonly
|
|
|
|
74E67FF000
|
unkown
|
page read and write
|
|
|
|
7FF59BF5F000
|
unkown
|
page readonly
|
|
|
|
7FF56AE45000
|
unkown
|
page readonly
|
|
|
|
7FF56AEDE000
|
unkown
|
page readonly
|
|
|
|
1C27BE02000
|
unkown
|
page read and write
|
|
|
|
7FF56CC18000
|
unkown
|
page readonly
|
|
|
|
7FF57EC6D000
|
unkown
|
page readonly
|
|
|
|
7FF5B4D30000
|
unkown
|
page readonly
|
|
|
|
AF5A0FF000
|
unkown
|
page read and write
|
|
|
|
7FF578B83000
|
unkown
|
page readonly
|
|
|
|
E156AFD000
|
unkown
|
page read and write
|
|
|
|
240B1C3D000
|
unkown
|
page read and write
|
|
|
|
7FF56285F000
|
unkown
|
page readonly
|
|
|
|
7FF5B2ACC000
|
unkown
|
page readonly
|
|
|
|
2912C43C000
|
unkown
|
page read and write
|
|
|
|
7FF57B6E0000
|
unkown
|
page readonly
|
|
|
|
7FF57658C000
|
unkown
|
page readonly
|
|
|
|
7FF56AF0D000
|
unkown
|
page readonly
|
|
|
|
16C36F50000
|
unkown
|
page readonly
|
|
|
|
7FF578A2D000
|
unkown
|
page readonly
|
|
|
|
274EA502000
|
unkown
|
page read and write
|
|
|
|
269D0C6A000
|
unkown
|
page read and write
|
|
|
|
27C4000
|
unkown
|
page readonly
|
|
|
|
6D645FE000
|
unkown
|
page read and write
|
|
|
|
170000
|
unkown
|
page readonly
|
|
|
|
2912C446000
|
unkown
|
page read and write
|
|
|
|
2912C429000
|
unkown
|
page read and write
|
|
|
|
144CE140000
|
unkown
|
page readonly
|
|
|
|
7FF57B645000
|
unkown
|
page readonly
|
|
|
|
240B718C000
|
unkown
|
page write copy
|
|
|
|
2639FA00000
|
unkown
|
page read and write
|
|
|
|
144CD400000
|
unkown
|
page read and write
|
|
|
|
2D062A57000
|
unkown
|
page read and write
|
|
|
|
7FF5B2A34000
|
unkown
|
page readonly
|
|
|
|
12899FF000
|
unkown
|
page read and write
|
|
|
|
1A24C688000
|
unkown
|
page read and write
|
|
|
|
1C27BCD0000
|
unkown
|
page readonly
|
|
|
|
1D19DE13000
|
unkown
|
page read and write
|
|
|
|
7FF57B673000
|
unkown
|
page readonly
|
|
|
|
9FE0AF7000
|
unkown
|
page read and write
|
|
|
|
7FF53E5F0000
|
unkown
|
page readonly
|
|
|
|
2D062980000
|
unkown
|
page readonly
|
|
|
|
7FF556023000
|
unkown
|
page readonly
|
|
|
|
240B7400000
|
unkown
|
page read and write
|
|
|
|
7FF5764CD000
|
unkown
|
page readonly
|
|
|
|
DD6687E000
|
unkown
|
page read and write
|
|
|
|
7FF58E718000
|
unkown
|
page readonly
|
|
|
|
144CD600000
|
unkown
|
page readonly
|
|
|
|
7FF5B2BA4000
|
unkown
|
page readonly
|
|
|
|
7FF56CC30000
|
unkown
|
page readonly
|
|
|
|
D045EFE000
|
unkown
|
page read and write
|
|
|
|
7FF53E6F8000
|
unkown
|
page readonly
|
|
|
|
7FF5B2AB3000
|
unkown
|
page readonly
|
|
|
|
7FF5B42BD000
|
unkown
|
page readonly
|
|
|
|
1C1F7A40000
|
unkown
|
page read and write
|
|
|
|
7FF57656D000
|
unkown
|
page readonly
|
|
|
|
250C106E000
|
unkown
|
page read and write
|
|
|
|
2912CC02000
|
unkown
|
page read and write
|
|
|
|
23DA801F000
|
heap private
|
page read and write
|
|
|
|
7FF59BE60000
|
unkown
|
page readonly
|
|
|
|
31C9D7E000
|
unkown
|
page read and write
|
|
|
|
7FF576796000
|
unkown
|
page readonly
|
|
|
|
7FF56AED6000
|
unkown
|
page readonly
|
|
|
|
269D0C29000
|
unkown
|
page read and write
|
|
|
|
7FF5B4215000
|
unkown
|
page readonly
|
|
|
|
254277D000
|
unkown
|
page read and write
|
|
|
|
7FF57EBF3000
|
unkown
|
page readonly
|
|
|
|
144CD350000
|
unkown
|
page readonly
|
|
|
|
7FF53E72E000
|
unkown
|
page readonly
|
|
|
|
7FF50E7F6000
|
unkown
|
page readonly
|
|
|
|
250C1067000
|
unkown
|
page read and write
|
|
|
|
7FF57E9B3000
|
unkown
|
page readonly
|
|
|
|
7FF578B3D000
|
unkown
|
page readonly
|
|
|
|
16C3683E000
|
unkown
|
page read and write
|
|
|
|
7FF53E3CA000
|
unkown
|
page readonly
|
|
|
|
1C27A200000
|
unkown
|
page readonly
|
|
|
|
7FF56AF0F000
|
unkown
|
page readonly
|
|
|
|
61BB7FF000
|
unkown
|
page read and write
|
|
|
|
7FF56AE5A000
|
unkown
|
page readonly
|
|
|
|
1A24C6B3000
|
unkown
|
page read and write
|
|
|
|
7FF57EB2F000
|
unkown
|
page readonly
|
|
|
|
7FF5B4D18000
|
unkown
|
page readonly
|
|
|
|
7FF578C8F000
|
unkown
|
page readonly
|
|
|
|
7FF5674DE000
|
unkown
|
page readonly
|
|
|
|
6D646FE000
|
unkown
|
page read and write
|
|
|
|
1C279CE0000
|
unkown
|
page readonly
|
|
|
|
1C1F7A20000
|
unkown
|
page read and write
|
|
|
|
7FF59BFF2000
|
unkown
|
page readonly
|
|
|
|
7FF59BE31000
|
unkown
|
page readonly
|
|
|
|
1F5E48F0000
|
unkown
|
page readonly
|
|
|
|
7FF58E613000
|
unkown
|
page readonly
|
|
|
|
7FF59C0FE000
|
unkown
|
page readonly
|
|
|
|
1C279E13000
|
unkown
|
page read and write
|
|
|
|
7FF50E7E8000
|
unkown
|
page readonly
|
|
|
|
240B2400000
|
unkown
|
page read and write
|
|
|
|
7FF576788000
|
unkown
|
page readonly
|
|
|
|
7FF5655F8000
|
unkown
|
page readonly
|
|
|
|
1F5E49D0000
|
unkown
|
page readonly
|
|
|
|
7FF5B4C17000
|
unkown
|
page readonly
|
|
|
|
7FF578796000
|
unkown
|
page readonly
|
|
|
|
7FF53E5ED000
|
unkown
|
page readonly
|
|
|
|
916511E000
|
unkown
|
page read and write
|
|
|
|
2D062A7C000
|
unkown
|
page read and write
|
|
|
|
7FF53E647000
|
unkown
|
page readonly
|
|
|
|
7FF5B42A6000
|
unkown
|
page readonly
|
|
|
|
7FF5B2689000
|
unkown
|
page readonly
|
|
|
|
7FF50E800000
|
unkown
|
page readonly
|
|
|
|
7FF50E81E000
|
unkown
|
page readonly
|
|
|
|
7FF57EB40000
|
unkown
|
page readonly
|
|
|
|
7FF5621EA000
|
unkown
|
page readonly
|
|
|
|
12891FE000
|
unkown
|
page read and write
|
|
|
|
1C1F7718000
|
heap default
|
page read and write
|
|
|
|
7FF57E73F000
|
unkown
|
page readonly
|
|
|
|
144CD500000
|
unkown
|
page read and write
|
|
|
|
7FF578ADF000
|
unkown
|
page readonly
|
|
|
|
7FF58E7FB000
|
unkown
|
page readonly
|
|
|
|
22F07F50000
|
unkown
|
page readonly
|
|
|
|
7FF5627AC000
|
unkown
|
page readonly
|
|
|
|
7FF5767CB000
|
unkown
|
page readonly
|
|
|
|
7FF57B2F2000
|
unkown
|
page readonly
|
|
|
|
7FF58E5C3000
|
unkown
|
page readonly
|
|
|
|
1D19DE2A000
|
unkown
|
page read and write
|
|
|
|
28F9000
|
unkown
|
page readonly
|
|
|
|
7FF56AF0F000
|
unkown
|
page readonly
|
|
|
|
250C106D000
|
unkown
|
page read and write
|
|
|
|
240B6F60000
|
unkown
|
page readonly
|
|
|
|
7FF5673A3000
|
unkown
|
page readonly
|
|
|
|
7FF5675FC000
|
unkown
|
page readonly
|
|
|
|
240B2402000
|
unkown
|
page read and write
|
|
|
|
128947E000
|
unkown
|
page read and write
|
|
|
|
7FF50E73C000
|
unkown
|
page readonly
|
|
|
|
7FF578B22000
|
unkown
|
page readonly
|
|
|
|
1C1F7A30000
|
unkown
|
page read and write
|
|
|
|
7FF50E537000
|
unkown
|
page readonly
|
|
|
|
200EE0E0000
|
unkown
|
page readonly
|
|
|
|
7FF57B649000
|
unkown
|
page readonly
|
|
|
|
7FF578BC5000
|
unkown
|
page readonly
|
|
|
|
269D0C6A000
|
unkown
|
page read and write
|
|
|
|
7FF59C05A000
|
unkown
|
page readonly
|
|
|
|
7FF57B5E4000
|
unkown
|
page readonly
|
|
|
|
291D000
|
unkown
|
page readonly
|
|
|
|
7FF53E706000
|
unkown
|
page readonly
|
|
|
|
7FF5766C3000
|
unkown
|
page readonly
|
|
|
|
7FF5B29D3000
|
unkown
|
page readonly
|
|
|
|
1C1F79E0000
|
unkown
|
page readonly
|
|
|
|
3F8D2FE000
|
unkown
|
page read and write
|
|
|
|
E156B7F000
|
unkown
|
page read and write
|
|
|
|
7FF57E87A000
|
unkown
|
page readonly
|
|
|
|
7FF57B6C8000
|
unkown
|
page readonly
|
|
|
|
28A1000
|
unkown
|
page readonly
|
|
|
|
1C27D0C2000
|
unkown
|
page read and write
|
|
|
|
7FF576709000
|
unkown
|
page readonly
|
|
|
|
7FF57E98D000
|
unkown
|
page readonly
|
|
|
|
7FF5B2A0F000
|
unkown
|
page readonly
|
|
|
|
7FF5B2AC7000
|
unkown
|
page readonly
|
|
|
|
889027F000
|
unkown
|
page read and write
|
|
|
|
7FF5B429F000
|
unkown
|
page readonly
|
|
|
|
7FF5676EF000
|
unkown
|
page readonly
|
|
|
|
23DA6330000
|
heap default
|
page read and write
|
|
|
|
240B71E0000
|
unkown
|
page read and write
|
|
|
|
1A24C713000
|
unkown
|
page read and write
|
|
|
|
7FF57B63D000
|
unkown
|
page readonly
|
|
|
|
240B71C0000
|
unkown
|
page read and write
|
|
|
|
23DA65D0000
|
unkown
|
page readonly
|
|
|
|
7FF562858000
|
unkown
|
page readonly
|
|
|
|
1C27D142000
|
unkown
|
page read and write
|
|
|
|
7FF578C8D000
|
unkown
|
page readonly
|
|
|
|
7FF578C8F000
|
unkown
|
page readonly
|
|
|
|
7FF56592D000
|
unkown
|
page readonly
|
|
|
|
1C27E110000
|
unkown
|
page read and write
|
|
|
|
2D062A67000
|
unkown
|
page read and write
|
|
|
|
1C279E3F000
|
unkown
|
page read and write
|
|
|
|
7FF555FEC000
|
unkown
|
page readonly
|
|
|
|
7FF59C0F4000
|
unkown
|
page readonly
|
|
|
|
7FF565885000
|
unkown
|
page readonly
|
|
|
|
28DA000
|
unkown
|
page readonly
|
|
|
|
23DA6290000
|
unkown
|
page read and write
|
|
|
|
7FF57E90D000
|
unkown
|
page readonly
|
|
|
|
7FF562884000
|
unkown
|
page readonly
|
|
|
|
16C36AD0000
|
unkown
|
page readonly
|
|
|
|
7FF56594F000
|
unkown
|
page readonly
|
|
|
|
7FF58E765000
|
unkown
|
page readonly
|
|
|
|
1A24C700000
|
unkown
|
page read and write
|
|
|
|
23DA6820000
|
unkown
|
page readonly
|
|
|
|
7FF56CC44000
|
unkown
|
page readonly
|
|
|
|
7FF5B2AB7000
|
unkown
|
page readonly
|
|
|
|
7FF556043000
|
unkown
|
page readonly
|
|
|
|
7FF56CBAA000
|
unkown
|
page readonly
|
|
|
|
1C27D0EB000
|
unkown
|
page read and write
|
|
|
|
7FF578983000
|
unkown
|
page readonly
|
|
|
|
274EA488000
|
unkown
|
page read and write
|
|
|
|
2912C500000
|
unkown
|
page read and write
|
|
|
|
889047F000
|
unkown
|
page read and write
|
|
|
|
DE9ADFE000
|
unkown
|
page read and write
|
|
|
|
269D0C02000
|
unkown
|
page read and write
|
|
|
|
7FF57679B000
|
unkown
|
page readonly
|
|
|
|
2D062A74000
|
unkown
|
page read and write
|
|
|
|
2D062970000
|
unkown
|
page readonly
|
|
|
|
7FF578B7C000
|
unkown
|
page readonly
|
|
|
|
7FF55654E000
|
unkown
|
page readonly
|
|
|
|
2D062990000
|
unkown
|
page read and write
|
|
|
|
7FF5B2B03000
|
unkown
|
page readonly
|
|
|
|
1C279F51000
|
unkown
|
page read and write
|
|
|
|
7FF57EC8F000
|
unkown
|
page readonly
|
|
|
|
240B2513000
|
unkown
|
page read and write
|
|
|
|
16C367D0000
|
unkown
|
page readonly
|
|
|
|
7FF50E704000
|
unkown
|
page readonly
|
|
|
|
7FF576142000
|
unkown
|
page readonly
|
|
|
|
7FF56AE53000
|
unkown
|
page readonly
|
|
|
|
1C27D0D2000
|
unkown
|
page read and write
|
|
|
|
1A24C6AA000
|
unkown
|
page read and write
|
|
|
|
1C27D000000
|
unkown
|
page read and write
|
|
|
|
1C279EA9000
|
unkown
|
page read and write
|
|
|
|
7FF59BA34000
|
unkown
|
page readonly
|
|
|
|
7FF59BEFE000
|
unkown
|
page readonly
|
|
|
|
240B744A000
|
unkown
|
page read and write
|
|
|
|
7FF57E5DB000
|
unkown
|
page readonly
|
|
|
|
7FF5627E3000
|
unkown
|
page readonly
|
|
|
|
2D062A3D000
|
unkown
|
page read and write
|
|
|
|
254257B000
|
unkown
|
page read and write
|
|
|
|
2D062A5E000
|
unkown
|
page read and write
|
|
|
|
7FF567629000
|
unkown
|
page readonly
|
|
|
|
240B1C56000
|
unkown
|
page read and write
|
|
|
|
2541CFA000
|
unkown
|
page read and write
|
|
|
|
23DA7DE0000
|
heap private
|
page read and write
|
|
|
|
7FF5766DC000
|
unkown
|
page readonly
|
|
|
|
7FF56ACA2000
|
unkown
|
page readonly
|
|
|
|
240B2559000
|
unkown
|
page read and write
|
|
|
|
7FF57EC74000
|
unkown
|
page readonly
|
|
|
|
7FF56A9BF000
|
unkown
|
page readonly
|
|
|
|
7FF59BE01000
|
unkown
|
page readonly
|
|
|
|
916557E000
|
unkown
|
page read and write
|
|
|
|
240B71D0000
|
unkown
|
page read and write
|
|
|
|
2541F7A000
|
unkown
|
page read and write
|
|
|
|
7FF58E155000
|
unkown
|
page readonly
|
|
|
|
7FF56AD8E000
|
unkown
|
page readonly
|
|
|
|
1A24CCB0000
|
unkown
|
page readonly
|
|
|
|
7FF50E61E000
|
unkown
|
page readonly
|
|
|
|
7FF58E7EB000
|
unkown
|
page readonly
|
|
|
|
2924000
|
unkown
|
page readonly
|
|
|
|
7FF57EC5B000
|
unkown
|
page readonly
|
|
|
|
7FF59C007000
|
unkown
|
page readonly
|
|
|
|
DD665CB000
|
unkown
|
page read and write
|
|
|
|
1C27C110000
|
unkown
|
page read and write
|
|
|
|
250C106C000
|
unkown
|
page read and write
|
|
|
|
2D062A73000
|
unkown
|
page read and write
|
|
|
|
240B2BF0000
|
unkown
|
page readonly
|
|
|
|
2912C400000
|
unkown
|
page read and write
|
|
|
|
2909000
|
unkown
|
page readonly
|
|
|
|
7FF50E773000
|
unkown
|
page readonly
|
|
|
|
1A24C6F8000
|
unkown
|
page read and write
|
|
|
|
290D000
|
unkown
|
page readonly
|
|
|
|
7FF5B2B0A000
|
unkown
|
page readonly
|
|
|
|
7FF56AE28000
|
unkown
|
page readonly
|
|
|
|
7FF57EB72000
|
unkown
|
page readonly
|
|
|
|
7FF576713000
|
unkown
|
page readonly
|
|
|
|
2D062A02000
|
unkown
|
page read and write
|
|
|
|
74E677B000
|
unkown
|
page read and write
|
|
|
|
7FF562805000
|
unkown
|
page readonly
|
|
|
|
7FF5B42CE000
|
unkown
|
page readonly
|
|
|
|
DD66A7E000
|
unkown
|
page read and write
|
|
|
|
6D644FB000
|
unkown
|
page read and write
|
|
|
|
DD66C7F000
|
unkown
|
page read and write
|
|
|
|
1A24C670000
|
unkown
|
page read and write
|
|
|
|
240B6FB0000
|
unkown
|
page read and write
|
|
|
|
7FF59BFE8000
|
unkown
|
page readonly
|
|
|
|
240B1D13000
|
unkown
|
page read and write
|
|
|
|
DE9A87B000
|
unkown
|
page read and write
|
|
|
|
200EE1D0000
|
unkown
|
page read and write
|
|
|
|
1C1F774E000
|
heap default
|
page read and write
|
|
|
|
250C0FD0000
|
unkown
|
page readonly
|
|
|
|
7FF59C003000
|
unkown
|
page readonly
|
|
|
|
6EB13FF000
|
unkown
|
page read and write
|
|
|
|
A35635B000
|
unkown
|
page read and write
|
|
|
|
16C36E60000
|
unkown
|
page readonly
|
|
|
|
7FF53E66D000
|
unkown
|
page readonly
|
|
|
|
2D062B02000
|
unkown
|
page read and write
|
|
|
|
274EA340000
|
unkown
|
page readonly
|
|
|
|
7FF555CD6000
|
unkown
|
page readonly
|
|
|
|
7FF5626D7000
|
unkown
|
page readonly
|
|
|
|
7FF5B4C6C000
|
unkown
|
page readonly
|
|
|
|
1C27D042000
|
unkown
|
page read and write
|
|
|
|
7FF5767CD000
|
unkown
|
page readonly
|
|
|
|
1C27D0C2000
|
unkown
|
page read and write
|
|
|
|
7FF578B04000
|
unkown
|
page readonly
|
|
|
|
7FF56763A000
|
unkown
|
page readonly
|
|
|
|
250C1320000
|
unkown
|
page readonly
|
|
|
|
7FF56753F000
|
unkown
|
page readonly
|
|
|
|
7FF53E73F000
|
unkown
|
page readonly
|
|
|
|
1C27D0CE000
|
unkown
|
page read and write
|
|
|
|
770000
|
unkown
|
page readonly
|
|
|
|
7FF5B4C78000
|
unkown
|
page readonly
|
|
|
|
7FF5676AF000
|
unkown
|
page readonly
|
|
|
|
25422FB000
|
unkown
|
page read and write
|
|
|
|
16C37540000
|
unkown
|
page readonly
|
|
|
|
7FF59C0C8000
|
unkown
|
page readonly
|
|
|
|
7FF57EB3A000
|
unkown
|
page readonly
|
|
|
|
7FF57EB3D000
|
unkown
|
page readonly
|
|
|
|
1C1F7753000
|
heap default
|
page read and write
|
|
|
|
240B74AF000
|
unkown
|
page read and write
|
|
|
|
7FF5626C9000
|
unkown
|
page readonly
|
|
|
|
7FF5676EF000
|
unkown
|
page readonly
|
|
|
|
1C279F21000
|
unkown
|
page read and write
|
|
|
|
250C106C000
|
unkown
|
page read and write
|
|
|
|
1C1F7C80000
|
unkown
|
page readonly
|
|
|
|
1A24D000000
|
unkown
|
page readonly
|
|
|
|
916519E000
|
unkown
|
page read and write
|
|
|
|
7FF50E82F000
|
unkown
|
page readonly
|
|
|
|
7FF562220000
|
unkown
|
page readonly
|
|
|
|
240B740F000
|
unkown
|
page read and write
|
|
|
|
7FF59C01C000
|
unkown
|
page readonly
|
|
|
|
240B2BC0000
|
unkown
|
page readonly
|
|
|
|
61BB8FF000
|
unkown
|
page read and write
|
|
|
|
190000
|
heap private
|
page read and write
|
|
|
|
7FF56289F000
|
unkown
|
page readonly
|
|
|
|
7FF565893000
|
unkown
|
page readonly
|
|
|
|
7FF57EC8D000
|
unkown
|
page readonly
|
|
|
|
7FF5B2BAB000
|
unkown
|
page readonly
|
|
|
|
7FF58E2C3000
|
unkown
|
page readonly
|
|
|
|
274EA360000
|
unkown
|
page read and write
|
|
|
|
1C27BF10000
|
unkown
|
page read and write
|
|
|
|
7FF5671C8000
|
unkown
|
page readonly
|
|
|
|
7FF56ABD6000
|
unkown
|
page readonly
|
|
|
|
91654FC000
|
unkown
|
page read and write
|
|
|
|
1A24C702000
|
unkown
|
page read and write
|
|
|
|
2639F8A0000
|
heap private
|
page read and write
|
|
|
|
200EE200000
|
unkown
|
page read and write
|
|
|
|
7FF59BE03000
|
unkown
|
page readonly
|
|
|
|
23DA6320000
|
unkown
|
page readonly
|
|
|
|
7FF59BBD3000
|
unkown
|
page readonly
|
|
|
|
7FF578BC9000
|
unkown
|
page readonly
|
|
|
|
1C1F7810000
|
unkown
|
page readonly
|
|
|
|
7FF57EB47000
|
unkown
|
page readonly
|
|
|
|
7FF53E679000
|
unkown
|
page readonly
|
|
|
|
200EE213000
|
unkown
|
page read and write
|
|
|
|
7FF50E6E7000
|
unkown
|
page readonly
|
|
|
|
7FF562870000
|
unkown
|
page readonly
|
|
|
|
7FF578BBD000
|
unkown
|
page readonly
|
|
|
|
7FF50E77A000
|
unkown
|
page readonly
|
|
|
|
7FF56590F000
|
unkown
|
page readonly
|
|
|
|
7FF57E872000
|
unkown
|
page readonly
|
|
|
|
7FF56AE03000
|
unkown
|
page readonly
|
|
|
|
240B7310000
|
unkown
|
page readonly
|
|
|
|
1C27C310000
|
unkown
|
page read and write
|
|
|
|
1C1F8010000
|
unkown
|
page readonly
|
|
|
|
25421FB000
|
unkown
|
page read and write
|
|
|
|
7FF59BEC3000
|
unkown
|
page readonly
|
|
|
|
240B7416000
|
unkown
|
page read and write
|
|
|
|
7FF56594F000
|
unkown
|
page readonly
|
|
|
|
7FF567050000
|
unkown
|
page readonly
|
|
|
|
2D062A62000
|
unkown
|
page read and write
|
|
|
|
1A24CCC0000
|
unkown
|
page readonly
|
|
|
|
7FF5B41ED000
|
unkown
|
page readonly
|
|
|
|
7FF56ADFC000
|
unkown
|
page readonly
|
|
|
|
7FF58E6F3000
|
unkown
|
page readonly
|
|
|
|
23DA6620000
|
unkown
|
page readonly
|
|
|
|
7FF5674B3000
|
unkown
|
page readonly
|
|
|
|
292D000
|
unkown
|
page readonly
|
|
|
|
7FF59BA8E000
|
unkown
|
page readonly
|
|
|
|
144CD454000
|
unkown
|
page read and write
|
|
|
|
7FF57B05B000
|
unkown
|
page readonly
|
|
|
|
1C279EE4000
|
unkown
|
page read and write
|
|
|
|
12898FE000
|
unkown
|
page read and write
|
|
|
|
1C27BC90000
|
unkown
|
page read and write
|
|
|
|
7FF57880A000
|
unkown
|
page readonly
|
|
|
|
7FF5B4A5D000
|
unkown
|
page readonly
|
|
|
|
7FF5766FD000
|
unkown
|
page readonly
|
|
|
|
269D0BC0000
|
unkown
|
page readonly
|
|
|
|
A356779000
|
unkown
|
page read and write
|
|
|
|
DD668FE000
|
unkown
|
page read and write
|
|
|
|
7FF57891A000
|
unkown
|
page readonly
|
|
|
|
61BBBFD000
|
unkown
|
page read and write
|
|
|
|
144CDE00000
|
unkown
|
page readonly
|
|
|
|
1F5E4A24000
|
unkown
|
page read and write
|
|
|
|
2D062A78000
|
unkown
|
page read and write
|
|
|
|
269D0BB0000
|
heap default
|
page read and write
|
|
|
|
7FF5B49DD000
|
unkown
|
page readonly
|
|
|
|
9FE0FFB000
|
unkown
|
page read and write
|
|
|
|
9FE11FF000
|
unkown
|
page read and write
|
|
|
|
9FE0EFA000
|
unkown
|
page read and write
|
|
|
|
1C27BF13000
|
unkown
|
page read and write
|
|
|
|
7FF5B4B4E000
|
unkown
|
page readonly
|
|
|
|
7FF50E7FB000
|
unkown
|
page readonly
|
|
|
|
6EB1379000
|
unkown
|
page read and write
|
|
|
|
7FF57EB83000
|
unkown
|
page readonly
|
|
|
|
7FF57873F000
|
unkown
|
page readonly
|
|
|
|
144CD508000
|
unkown
|
page read and write
|
|
|
|
7FF5764D7000
|
unkown
|
page readonly
|
|
|
|
7FF56585D000
|
unkown
|
page readonly
|
|
|
|
7FF555DC3000
|
unkown
|
page readonly
|
|
|
|
144CD48A000
|
unkown
|
page read and write
|
|
|
|
1F5E5202000
|
unkown
|
page read and write
|
|
|
|
2D062A00000
|
unkown
|
page read and write
|
|
|
|
7FF5B42DF000
|
unkown
|
page readonly
|
|
|
|
274EA429000
|
unkown
|
page read and write
|
|
|
|
AF59BFD000
|
unkown
|
page read and write
|
|
|
|
7FF59BD94000
|
unkown
|
page readonly
|
|
|
|
7FF50E748000
|
unkown
|
page readonly
|
|
|
|
7FF50E6E0000
|
unkown
|
page readonly
|
|
|
|
1C27C510000
|
unkown
|
page read and write
|
|
|
|
240B2518000
|
unkown
|
page read and write
|
|
|
|
7FF562225000
|
unkown
|
page readonly
|
|
|
|
240B7180000
|
unkown
|
page readonly
|
|
|
|
2912C488000
|
unkown
|
page read and write
|
|
|
|
1D19DE00000
|
unkown
|
page read and write
|
|
|
|
16C368C9000
|
unkown
|
page read and write
|
|
|
|
25420FA000
|
unkown
|
page read and write
|
|
|
|
1D19E460000
|
unkown
|
page readonly
|
|
|
|
1C279ED6000
|
unkown
|
page read and write
|
|
|
|
31C987D000
|
unkown
|
page read and write
|
|
|
|
7FF57671A000
|
unkown
|
page readonly
|
|
|
|
7FF56CBA3000
|
unkown
|
page readonly
|
|
|
|
6EB127E000
|
unkown
|
page read and write
|
|
|
|
1D19E000000
|
unkown
|
page readonly
|
|
|
|
7FF565820000
|
unkown
|
page readonly
|
|
|
|
7FF56C710000
|
unkown
|
page readonly
|
|
|
|
250C2AC0000
|
unkown
|
page read and write
|
|
|
|
2D062A58000
|
unkown
|
page read and write
|
|
|
|
7FF58E743000
|
unkown
|
page readonly
|
|
|
|
7FF5B494A000
|
unkown
|
page readonly
|
|
|
|
2541E7A000
|
unkown
|
page read and write
|
|
|
|
240B2502000
|
unkown
|
page read and write
|
|
|
|
1A24CE02000
|
unkown
|
page read and write
|
|
|
|
7FF578B72000
|
unkown
|
page readonly
|
|
|
|
144CD370000
|
unkown
|
page read and write
|
|
|
|
7FF555CCD000
|
unkown
|
page readonly
|
|
|
|
7FF59BFC0000
|
unkown
|
page readonly
|
|
|
|
7FF555F83000
|
unkown
|
page readonly
|
|
|
|
1C1F7710000
|
heap default
|
page read and write
|
|
|
|
AF598FC000
|
unkown
|
page read and write
|
|
|
|
23DA62B0000
|
unkown
|
page read and write
|
|
|
|
240B2BD0000
|
unkown
|
page readonly
|
|
|
|
274EA466000
|
unkown
|
page read and write
|
|
|
|
7FF56CB95000
|
unkown
|
page readonly
|
|
|
|
2D062890000
|
heap default
|
page read and write
|
|
|
|
2D063202000
|
unkown
|
page read and write
|
|
|
|
1C27D200000
|
unkown
|
page readonly
|
|
|
|
240B2500000
|
unkown
|
page read and write
|
|
|
|
2912C513000
|
unkown
|
page read and write
|
|
|
|
274EA400000
|
unkown
|
page read and write
|
|
|
|
7FF5B4D5B000
|
unkown
|
page readonly
|
|
|
|
144CD413000
|
unkown
|
page read and write
|
|
|
|
7FF5789B3000
|
unkown
|
page readonly
|
|
|
|
7FF56C5C8000
|
unkown
|
page readonly
|
|
|
|
7FF53E73D000
|
unkown
|
page readonly
|
|
|
|
67A000
|
heap default
|
page read and write
|
|
|
|
2D062A42000
|
unkown
|
page read and write
|
|
|
|
7FF5B2B9D000
|
unkown
|
page readonly
|
|
|
|
240B1A60000
|
unkown
|
page readonly
|
|
|
|
274EA477000
|
unkown
|
page read and write
|
|
|
|
E156BFE000
|
unkown
|
page read and write
|
|
|
|
240B1C93000
|
unkown
|
page read and write
|
|
|
|
D04647C000
|
unkown
|
page read and write
|
|
|
|
7FF56CBC5000
|
unkown
|
page readonly
|
|
|
|
7FF53E62C000
|
unkown
|
page readonly
|
|
|
|
7FF565889000
|
unkown
|
page readonly
|
|
|
|
31C9E7F000
|
unkown
|
page read and write
|
|
|
|
7FF59BEC8000
|
unkown
|
page readonly
|
|
|
|
7FF57B417000
|
unkown
|
page readonly
|
|
|
|
9FE13FB000
|
unkown
|
page read and write
|
|
|
|
7FF53E72B000
|
unkown
|
page readonly
|
|
|
|
269D0C54000
|
unkown
|
page read and write
|
|
|
|
7FF59C017000
|
unkown
|
page readonly
|
|
|
|
2639FC00000
|
unkown
|
page write copy
|
|
|
|
7FF5767BB000
|
unkown
|
page readonly
|
|
|
|
1A24C629000
|
unkown
|
page read and write
|
|
|
|
7FF59BEAD000
|
unkown
|
page readonly
|
|
|
|
2541D7A000
|
unkown
|
page read and write
|
|
|
|
7FF578A24000
|
unkown
|
page readonly
|
|
|
|
7FF5560DF000
|
unkown
|
page readonly
|
|
|
|
22F08220000
|
heap private
|
page read and write
|
|
|
|
7FF59C0D6000
|
unkown
|
page readonly
|
|
|
|
1F5E5080000
|
unkown
|
page read and write
|
|
|
|
3F8D27E000
|
unkown
|
page read and write
|
|
|
|
7FF5B4942000
|
unkown
|
page readonly
|
|
|
|
2639FA5A000
|
unkown
|
page read and write
|
|
|
|
1A24C5F0000
|
unkown
|
page readonly
|
|
|
|
9FE117F000
|
unkown
|
page read and write
|
|
|
|
7FF5B2BBF000
|
unkown
|
page readonly
|
|
|
|
7FF5627A4000
|
unkown
|
page readonly
|
|
|
|
7FF567564000
|
unkown
|
page readonly
|
|
|
|
144CDC02000
|
unkown
|
page read and write
|
|
|
|
7FF5B4C10000
|
unkown
|
page readonly
|
|
|
|
1C279F13000
|
unkown
|
page read and write
|
|
|
|
3F8CFDA000
|
unkown
|
page read and write
|
|
|
|
7FF57E9B1000
|
unkown
|
page readonly
|
|
|
|
240B1C65000
|
unkown
|
page read and write
|
|
|
|
22F07F00000
|
unkown
|
page read and write
|
|
|
|
7FF58E64F000
|
unkown
|
page readonly
|
|
|
|
7FF59BE33000
|
unkown
|
page readonly
|
|
|
|
7FF59BA3A000
|
unkown
|
page readonly
|
|
|
|
2D062A46000
|
unkown
|
page read and write
|
|
|
|
2D062A6C000
|
unkown
|
page read and write
|
|
|
|
1A24CB90000
|
unkown
|
page readonly
|
|
|
|
200EE202000
|
unkown
|
page read and write
|
|
|
|
6EB0F7B000
|
unkown
|
page read and write
|
|
|
|
7FF57EB97000
|
unkown
|
page readonly
|
|
|
|
7FF56286B000
|
unkown
|
page readonly
|
|
|
|
7FF56AEDB000
|
unkown
|
page readonly
|
|
|
|
240B2A00000
|
unkown
|
page read and write
|
|
|
|
7FF56288E000
|
unkown
|
page readonly
|
|
|
|
7FF56CC4B000
|
unkown
|
page readonly
|
|
|
|
1C27C010000
|
unkown
|
page read and write
|
|
|
|
269D0C6A000
|
unkown
|
page read and write
|
|
|
|
23DA6610000
|
heap private
|
page read and write
|
|
|
|
240B1BE3000
|
unkown
|
page read and write
|
|
|
|
7FF59C10B000
|
unkown
|
page readonly
|
|
|
|
7FF59C10F000
|
unkown
|
page readonly
|
|
|
|
1A24C5C0000
|
unkown
|
page readonly
|
|
|
|
240B2601000
|
unkown
|
page read and write
|
|
|
|
7FF5B4C99000
|
unkown
|
page readonly
|
|
|
|
2981000
|
unkown
|
page readonly
|
|
|
|
DE9AEFD000
|
unkown
|
page read and write
|
|
|
|
7FF56AA6A000
|
unkown
|
page readonly
|
|
|
|
240B1BE0000
|
unkown
|
page read and write
|
|
|
|
240B74B2000
|
unkown
|
page read and write
|
|
|
|
2D062A7D000
|
unkown
|
page read and write
|
|
|
|
144CD40B000
|
unkown
|
page read and write
|
|
|
|
1C27BF32000
|
unkown
|
page read and write
|
|
|
|
7FF5B3A78000
|
unkown
|
page readonly
|
|
|
|
7FF578BD3000
|
unkown
|
page readonly
|
|
|
|
7FF57B65A000
|
unkown
|
page readonly
|
|
|
|
1C27D002000
|
unkown
|
page read and write
|
|
|
|
7FF57881F000
|
unkown
|
page readonly
|
|
|
|
916597F000
|
unkown
|
page read and write
|
|
|
|
7FF50E82B000
|
unkown
|
page readonly
|
|
|
|
2D062A49000
|
unkown
|
page read and write
|
|
|
|
2912C44C000
|
unkown
|
page read and write
|
|
|
|
2912CA80000
|
unkown
|
page readonly
|
|
|
|
1A24CCC0000
|
unkown
|
page read and write
|
|
|
|
1C279E6F000
|
unkown
|
page read and write
|
|
|
|
1C27BF07000
|
unkown
|
page read and write
|
|
|
|
9FE0BF9000
|
unkown
|
page read and write
|
|
|
|
2639FA13000
|
unkown
|
page read and write
|
|
|
|
1A24C6A5000
|
unkown
|
page read and write
|
|
|
|
7FF578C4F000
|
unkown
|
page readonly
|
|
|
|
7FF56593E000
|
unkown
|
page readonly
|
|
|
|
7FF57B51D000
|
unkown
|
page readonly
|
|
|
|
2D062A64000
|
unkown
|
page read and write
|
|
|
|
28F5000
|
unkown
|
page readonly
|
|
|
|
7FF5B2AED000
|
unkown
|
page readonly
|
|
|
|
AF5947B000
|
unkown
|
page read and write
|
|
|
|
240B1A50000
|
heap default
|
page read and write
|
|
|
|
1C27C210000
|
unkown
|
page read and write
|
|
|
|
3F8D47F000
|
unkown
|
page read and write
|
|
|
|
200EE400000
|
unkown
|
page readonly
|
|
|
|
7FF59BC41000
|
unkown
|
page readonly
|
|
|
|
9FE12FE000
|
unkown
|
page read and write
|
|
|
|
7FF50E765000
|
unkown
|
page readonly
|
|
|
|
2541FFD000
|
unkown
|
page read and write
|
|
|
|
1F5E4A13000
|
unkown
|
page read and write
|
|
|
|
1D19E4C0000
|
unkown
|
page readonly
|
|
|
|
D04637F000
|
unkown
|
page read and write
|
|
|
|
23DA633B000
|
heap default
|
page read and write
|
|
|
|
7FF57EC8F000
|
unkown
|
page readonly
|
|
|
|
88905FF000
|
unkown
|
page read and write
|
|
|
|
250C106C000
|
unkown
|
page read and write
|
|
|
|
1C27D002000
|
unkown
|
page read and write
|
|
|
|
7FF5B4D4E000
|
unkown
|
page readonly
|
|
|
|
2912C3B0000
|
unkown
|
page readonly
|
|
|
|
7FF5674BE000
|
unkown
|
page readonly
|
|
|
|
9FE107F000
|
unkown
|
page read and write
|
|
|
|
22F07F20000
|
unkown
|
page read and write
|
|
|
|
7FF562139000
|
unkown
|
page readonly
|
|
|
|
7FF59B8A4000
|
unkown
|
page readonly
|
|
|
|
7FF555FF0000
|
unkown
|
page readonly
|
|
|
|
1A24C600000
|
unkown
|
page read and write
|
|
|
|
7FF578932000
|
unkown
|
page readonly
|
|
|
|
263A14F0000
|
unkown
|
page readonly
|
|
|
|
7FF57678F000
|
unkown
|
page readonly
|
|
|
|
7FF50E81B000
|
unkown
|
page readonly
|
|
|
|
7FF55654E000
|
unkown
|
page readonly
|
|
|
|
1D19DE3C000
|
unkown
|
page read and write
|
|
|
|
240B1C8A000
|
unkown
|
page read and write
|
|
|
|
7FF5676BB000
|
unkown
|
page readonly
|
|
|
|
240B7200000
|
unkown
|
page read and write
|
|
|
|
7FF57E5DF000
|
unkown
|
page readonly
|
|
|
|
269D0C13000
|
unkown
|
page read and write
|
|
|
|
28EB000
|
unkown
|
page readonly
|
|
|
|
1C279E93000
|
unkown
|
page read and write
|
|
|
|
2985000
|
unkown
|
page readonly
|
|
|
|
240B7460000
|
unkown
|
page read and write
|
|
|
|
7FF59BE23000
|
unkown
|
page readonly
|
|
There are 1466 hidden memdumps, click here to show them.