Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
transfer_summ_188108012.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$transfer_summ_188108012.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\169CBBD9-A660-4E29-98C8-43AC6B26ED38
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\11F179D3.png
|
PNG image data, 264 x 113, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3B72A659.png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\425633BD.png
|
PNG image data, 288 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\56841B8.png
|
PNG image data, 178 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C472EE9A.png
|
PNG image data, 168 x 72, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\95C40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\jbeiwmje.dll
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://loki.delve.office.com/api/v1/configuration/officewin32/
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
185.180.199.125
|
unknown
|
Netherlands
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4c?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5c?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BEC9
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C4D4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C5CE
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
8r?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 51 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
1A600F34000
|
unkown
|
page read and write
|
|
|
|
2140B800000
|
unkown
|
page read and write
|
|
|
|
214096B6000
|
unkown
|
page read and write
|
|
|
|
7FF592AE6000
|
unkown
|
page readonly
|
|
|
|
2140B812000
|
unkown
|
page read and write
|
|
|
|
7FF522B46000
|
unkown
|
page readonly
|
|
|
|
21055213000
|
unkown
|
page read and write
|
|
|
|
7FF516E9A000
|
unkown
|
page readonly
|
|
|
|
7FF5C3F92000
|
unkown
|
page readonly
|
|
|
|
2140BA00000
|
unkown
|
page read and write
|
|
|
|
7FF5C406D000
|
unkown
|
page readonly
|
|
|
|
1B3E979000
|
unkown
|
page read and write
|
|
|
|
13C94669000
|
unkown
|
page read and write
|
|
|
|
7FF522F85000
|
unkown
|
page readonly
|
|
|
|
156FEFA000
|
unkown
|
page read and write
|
|
|
|
1A600F52000
|
unkown
|
page read and write
|
|
|
|
2C5D000
|
unkown
|
page readonly
|
|
|
|
2140B700000
|
unkown
|
page read and write
|
|
|
|
2140B902000
|
unkown
|
page read and write
|
|
|
|
1EFE2C29000
|
unkown
|
page read and write
|
|
|
|
7FF582970000
|
unkown
|
page readonly
|
|
|
|
7FF54EAF3000
|
unkown
|
page readonly
|
|
|
|
7FF51A2D2000
|
unkown
|
page readonly
|
|
|
|
7FF592B54000
|
unkown
|
page readonly
|
|
|
|
4EEB7FE000
|
unkown
|
page read and write
|
|
|
|
13C9466C000
|
unkown
|
page read and write
|
|
|
|
1A600697000
|
unkown
|
page read and write
|
|
|
|
7FF51A7F5000
|
unkown
|
page readonly
|
|
|
|
1A6006E4000
|
unkown
|
page read and write
|
|
|
|
2105526D000
|
unkown
|
page read and write
|
|
|
|
7FF50212C000
|
unkown
|
page readonly
|
|
|
|
24B71B10000
|
unkown
|
page read and write
|
|
|
|
7FF51AABA000
|
unkown
|
page readonly
|
|
|
|
7FF51A8D3000
|
unkown
|
page readonly
|
|
|
|
1A6005C0000
|
unkown
|
page readonly
|
|
|
|
2C8B000
|
unkown
|
page readonly
|
|
|
|
7FF5B2E4F000
|
unkown
|
page readonly
|
|
|
|
7FF58269A000
|
unkown
|
page readonly
|
|
|
|
1A600FA1000
|
unkown
|
page read and write
|
|
|
|
1A601402000
|
unkown
|
page read and write
|
|
|
|
87BFE7F000
|
unkown
|
page read and write
|
|
|
|
7FF54EBA3000
|
unkown
|
page readonly
|
|
|
|
7FF54E72E000
|
unkown
|
page readonly
|
|
|
|
189B6A3C000
|
unkown
|
page read and write
|
|
|
|
7FF502117000
|
unkown
|
page readonly
|
|
|
|
1EFE2C00000
|
unkown
|
page read and write
|
|
|
|
8F0000
|
heap private
|
page read and write
|
|
|
|
7FF54E825000
|
unkown
|
page readonly
|
|
|
|
7FF54E5A3000
|
unkown
|
page readonly
|
|
|
|
7FF5021EA000
|
unkown
|
page readonly
|
|
|
|
25C95881000
|
unkown
|
page read and write
|
|
|
|
7FF58269F000
|
unkown
|
page readonly
|
|
|
|
7FF51AAB4000
|
unkown
|
page readonly
|
|
|
|
1A601000000
|
unkown
|
page readonly
|
|
|
|
21EE7E4A000
|
unkown
|
page read and write
|
|
|
|
7FF51A6A7000
|
unkown
|
page readonly
|
|
|
|
2140B590000
|
unkown
|
page read and write
|
|
|
|
2140C510000
|
unkown
|
page read and write
|
|
|
|
192617A1000
|
unkown
|
page read and write
|
|
|
|
EB48D7F000
|
unkown
|
page read and write
|
|
|
|
1A60148E000
|
unkown
|
page read and write
|
|
|
|
210554D0000
|
unkown
|
page write copy
|
|
|
|
1A600FB1000
|
unkown
|
page read and write
|
|
|
|
13C9466C000
|
unkown
|
page read and write
|
|
|
|
25C95908000
|
unkown
|
page read and write
|
|
|
|
7FF51A96C000
|
unkown
|
page readonly
|
|
|
|
2140C110000
|
unkown
|
page read and write
|
|
|
|
21EE7DF0000
|
heap default
|
page read and write
|
|
|
|
643000
|
unkown
|
page read and write
|
|
|
|
7FF522B40000
|
unkown
|
page readonly
|
|
|
|
1A600F5F000
|
unkown
|
page read and write
|
|
|
|
7FF516BD1000
|
unkown
|
page readonly
|
|
|
|
214097B4000
|
unkown
|
page read and write
|
|
|
|
156FF7C000
|
unkown
|
page read and write
|
|
|
|
87BFCFE000
|
unkown
|
page read and write
|
|
|
|
7FF50204D000
|
unkown
|
page readonly
|
|
|
|
7FF5B2E0C000
|
unkown
|
page readonly
|
|
|
|
7FF592A33000
|
unkown
|
page readonly
|
|
|
|
7FF51A9BA000
|
unkown
|
page readonly
|
|
|
|
2C5F000
|
unkown
|
page readonly
|
|
|
|
7FF51A69F000
|
unkown
|
page readonly
|
|
|
|
2140966B000
|
unkown
|
page read and write
|
|
|
|
2D03000
|
unkown
|
page readonly
|
|
|
|
857977F000
|
unkown
|
page read and write
|
|
|
|
7FF50214A000
|
unkown
|
page readonly
|
|
|
|
1A600FB1000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E4C000
|
unkown
|
page readonly
|
|
|
|
4EEC27C000
|
unkown
|
page read and write
|
|
|
|
7FF582A41000
|
unkown
|
page readonly
|
|
|
|
24B6FC55000
|
unkown
|
page read and write
|
|
|
|
2140B0C0000
|
unkown
|
page read and write
|
|
|
|
7FF522E23000
|
unkown
|
page readonly
|
|
|
|
1A601600000
|
unkown
|
page readonly
|
|
|
|
4EEC37C000
|
unkown
|
page read and write
|
|
|
|
7FF54EA0B000
|
unkown
|
page readonly
|
|
|
|
2CF8000
|
unkown
|
page readonly
|
|
|
|
7FF5C404E000
|
unkown
|
page readonly
|
|
|
|
7FF5C3FEA000
|
unkown
|
page readonly
|
|
|
|
2140B836000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E20000
|
unkown
|
page readonly
|
|
|
|
13C94669000
|
unkown
|
page read and write
|
|
|
|
21EE8550000
|
unkown
|
page read and write
|
|
|
|
1A6006F5000
|
unkown
|
page read and write
|
|
|
|
2140C610000
|
unkown
|
page read and write
|
|
|
|
7FF5C3ED1000
|
unkown
|
page readonly
|
|
|
|
25C9584B000
|
unkown
|
page read and write
|
|
|
|
5B51F0E000
|
unkown
|
page read and write
|
|
|
|
214095C0000
|
heap default
|
page read and write
|
|
|
|
7FF592A9C000
|
unkown
|
page readonly
|
|
|
|
189B6A00000
|
unkown
|
page read and write
|
|
|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F12000
|
unkown
|
page readonly
|
|
|
|
24B6FC29000
|
unkown
|
page read and write
|
|
|
|
7FF54E9D0000
|
unkown
|
page readonly
|
|
|
|
7FF582AC1000
|
unkown
|
page readonly
|
|
|
|
7FF50217D000
|
unkown
|
page readonly
|
|
|
|
7FF516E26000
|
unkown
|
page readonly
|
|
|
|
7FF592AED000
|
unkown
|
page readonly
|
|
|
|
156FE7E000
|
unkown
|
page read and write
|
|
|
|
7FF51A99B000
|
unkown
|
page readonly
|
|
|
|
2140BA42000
|
unkown
|
page read and write
|
|
|
|
7FF5B29E6000
|
unkown
|
page readonly
|
|
|
|
7FF516D73000
|
unkown
|
page readonly
|
|
|
|
81262DB000
|
unkown
|
page read and write
|
|
|
|
7FF5C4044000
|
unkown
|
page readonly
|
|
|
|
7FF54EC7C000
|
unkown
|
page readonly
|
|
|
|
7FF582A08000
|
unkown
|
page readonly
|
|
|
|
7FF5829D5000
|
unkown
|
page readonly
|
|
|
|
1A60153C000
|
unkown
|
page read and write
|
|
|
|
857987A000
|
unkown
|
page read and write
|
|
|
|
7FF5826A7000
|
unkown
|
page readonly
|
|
|
|
21EE8B40000
|
unkown
|
page readonly
|
|
|
|
7FF51A231000
|
unkown
|
page readonly
|
|
|
|
7FF5C4066000
|
unkown
|
page readonly
|
|
|
|
7FF5B2D01000
|
unkown
|
page readonly
|
|
|
|
23ADF3B000
|
unkown
|
page read and write
|
|
|
|
7FF516E04000
|
unkown
|
page readonly
|
|
|
|
21EE7E70000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E74000
|
unkown
|
page readonly
|
|
|
|
21409753000
|
unkown
|
page read and write
|
|
|
|
189B7202000
|
unkown
|
page read and write
|
|
|
|
7FF522F6C000
|
unkown
|
page readonly
|
|
|
|
7FF5DB684000
|
unkown
|
page readonly
|
|
|
|
1A601402000
|
unkown
|
page read and write
|
|
|
|
4EEB6FA000
|
unkown
|
page read and write
|
|
|
|
1A600671000
|
unkown
|
page read and write
|
|
|
|
7FF51A5A9000
|
unkown
|
page readonly
|
|
|
|
7FF5B2E7F000
|
unkown
|
page readonly
|
|
|
|
7FF51A9FF000
|
unkown
|
page readonly
|
|
|
|
2140B7BF000
|
unkown
|
page read and write
|
|
|
|
2CD5000
|
unkown
|
page readonly
|
|
|
|
7FF51AAC2000
|
unkown
|
page readonly
|
|
|
|
7FF50206C000
|
unkown
|
page readonly
|
|
|
|
24B6FE00000
|
unkown
|
page readonly
|
|
|
|
19261A00000
|
unkown
|
page readonly
|
|
|
|
7FF5DB5CF000
|
unkown
|
page readonly
|
|
|
|
7FF5DB5D8000
|
unkown
|
page readonly
|
|
|
|
13C94667000
|
unkown
|
page read and write
|
|
|
|
7FF58222D000
|
unkown
|
page readonly
|
|
|
|
7FF501FFB000
|
unkown
|
page readonly
|
|
|
|
2140C013000
|
unkown
|
page read and write
|
|
|
|
7FF502053000
|
unkown
|
page readonly
|
|
|
|
1926178F000
|
unkown
|
page read and write
|
|
|
|
25C96200000
|
unkown
|
page readonly
|
|
|
|
EB48E7A000
|
unkown
|
page read and write
|
|
|
|
4350000
|
unkown
|
page readonly
|
|
|
|
156FC7E000
|
unkown
|
page read and write
|
|
|
|
1A601403000
|
unkown
|
page read and write
|
|
|
|
13C944D0000
|
unkown
|
page readonly
|
|
|
|
7FF5828CB000
|
unkown
|
page readonly
|
|
|
|
214096AF000
|
unkown
|
page read and write
|
|
|
|
7FF5C3E11000
|
unkown
|
page readonly
|
|
|
|
2105526D000
|
unkown
|
page read and write
|
|
|
|
7FF54EC1F000
|
unkown
|
page readonly
|
|
|
|
24B6FED0000
|
unkown
|
page write copy
|
|
|
|
7FF5B2E64000
|
unkown
|
page readonly
|
|
|
|
7FF5B2D1E000
|
unkown
|
page readonly
|
|
|
|
189B6A50000
|
unkown
|
page read and write
|
|
|
|
7FF54EC94000
|
unkown
|
page readonly
|
|
|
|
7FF592B5A000
|
unkown
|
page readonly
|
|
|
|
7FF5B2E88000
|
unkown
|
page readonly
|
|
|
|
214096B8000
|
unkown
|
page read and write
|
|
|
|
13C9466A000
|
unkown
|
page read and write
|
|
|
|
5CC000
|
unkown
|
page read and write
|
|
|
|
1A600F52000
|
unkown
|
page read and write
|
|
|
|
7FF502176000
|
unkown
|
page readonly
|
|
|
|
7FF5B2E1A000
|
unkown
|
page readonly
|
|
|
|
4EEBEFC000
|
unkown
|
page read and write
|
|
|
|
19261860000
|
unkown
|
page readonly
|
|
|
|
1926176B000
|
heap default
|
page read and write
|
|
|
|
7FF5B2C71000
|
unkown
|
page readonly
|
|
|
|
7FF592747000
|
unkown
|
page readonly
|
|
|
|
13C94668000
|
unkown
|
page read and write
|
|
|
|
2140B5A0000
|
unkown
|
page read and write
|
|
|
|
1A60064E000
|
unkown
|
page read and write
|
|
|
|
7FF516DB5000
|
unkown
|
page readonly
|
|
|
|
1A600F55000
|
unkown
|
page read and write
|
|
|
|
7FF5B29E0000
|
unkown
|
page readonly
|
|
|
|
2140966C000
|
unkown
|
page read and write
|
|
|
|
21EE8602000
|
unkown
|
page read and write
|
|
|
|
2140C110000
|
unkown
|
page read and write
|
|
|
|
7FF5C3CC7000
|
unkown
|
page readonly
|
|
|
|
2140B873000
|
unkown
|
page read and write
|
|
|
|
189B6A4D000
|
unkown
|
page read and write
|
|
|
|
13C94668000
|
unkown
|
page read and write
|
|
|
|
1B3E87E000
|
unkown
|
page read and write
|
|
|
|
19261730000
|
unkown
|
page read and write
|
|
|
|
21409733000
|
unkown
|
page read and write
|
|
|
|
8B0000
|
unkown
|
page readonly
|
|
|
|
23AE877000
|
unkown
|
page read and write
|
|
|
|
7FF5C3FB3000
|
unkown
|
page readonly
|
|
|
|
13C9466E000
|
unkown
|
page read and write
|
|
|
|
2140C310000
|
unkown
|
page read and write
|
|
|
|
21409629000
|
unkown
|
page read and write
|
|
|
|
7FF592ACE000
|
unkown
|
page readonly
|
|
|
|
7FF51A9D5000
|
unkown
|
page readonly
|
|
|
|
7FF5B2F11000
|
unkown
|
page readonly
|
|
|
|
7FF522D00000
|
unkown
|
page readonly
|
|
|
|
2140B884000
|
unkown
|
page read and write
|
|
|
|
2140966C000
|
unkown
|
page read and write
|
|
|
|
7FF582AB4000
|
unkown
|
page readonly
|
|
|
|
23AE77F000
|
unkown
|
page read and write
|
|
|
|
7FF516DBB000
|
unkown
|
page readonly
|
|
|
|
7FF5C4007000
|
unkown
|
page readonly
|
|
|
|
7FF501F51000
|
unkown
|
page readonly
|
|
|
|
1EFE2BE0000
|
unkown
|
page readonly
|
|
|
|
7FF54EC55000
|
unkown
|
page readonly
|
|
|
|
21EE7F00000
|
unkown
|
page read and write
|
|
|
|
7FF51A9DB000
|
unkown
|
page readonly
|
|
|
|
7FF5DB608000
|
unkown
|
page readonly
|
|
|
|
24B6FD02000
|
unkown
|
page read and write
|
|
|
|
13C945F0000
|
unkown
|
page readonly
|
|
|
|
857967B000
|
unkown
|
page read and write
|
|
|
|
7FF50215F000
|
unkown
|
page readonly
|
|
|
|
7FF592AB4000
|
unkown
|
page readonly
|
|
|
|
156FD7A000
|
unkown
|
page read and write
|
|
|
|
19261760000
|
heap default
|
page read and write
|
|
|
|
7FF592AD8000
|
unkown
|
page readonly
|
|
|
|
7FF5C40D4000
|
unkown
|
page readonly
|
|
|
|
7FF5928C9000
|
unkown
|
page readonly
|
|
|
|
7FF5829FF000
|
unkown
|
page readonly
|
|
|
|
7FF52268E000
|
unkown
|
page readonly
|
|
|
|
1A600F4B000
|
unkown
|
page read and write
|
|
|
|
711687F000
|
unkown
|
page read and write
|
|
|
|
7FF51A806000
|
unkown
|
page readonly
|
|
|
|
1A60068B000
|
unkown
|
page read and write
|
|
|
|
1A600F63000
|
unkown
|
page read and write
|
|
|
|
2140C410000
|
unkown
|
page read and write
|
|
|
|
7FF54E810000
|
unkown
|
page readonly
|
|
|
|
21055229000
|
unkown
|
page read and write
|
|
|
|
1A600570000
|
unkown
|
page read and write
|
|
|
|
21055150000
|
heap private
|
page read and write
|
|
|
|
63F000
|
unkown
|
page read and write
|
|
|
|
1A600FBC000
|
unkown
|
page read and write
|
|
|
|
7FF5B29F5000
|
unkown
|
page readonly
|
|
|
|
1A600708000
|
unkown
|
page read and write
|
|
|
|
7FF51A7AF000
|
unkown
|
page readonly
|
|
|
|
7FF592836000
|
unkown
|
page readonly
|
|
|
|
25C95730000
|
unkown
|
page readonly
|
|
|
|
1A600FD2000
|
unkown
|
page read and write
|
|
|
|
7FF516DAA000
|
unkown
|
page readonly
|
|
|
|
7FF51A9CA000
|
unkown
|
page readonly
|
|
|
|
2C6F000
|
unkown
|
page readonly
|
|
|
|
21056CC0000
|
unkown
|
page read and write
|
|
|
|
7FF522FF6000
|
unkown
|
page readonly
|
|
|
|
21055255000
|
unkown
|
page read and write
|
|
|
|
5B51F8E000
|
unkown
|
page read and write
|
|
|
|
4EEB8FB000
|
unkown
|
page read and write
|
|
|
|
1B3E5EB000
|
unkown
|
page read and write
|
|
|
|
1A600629000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E99000
|
unkown
|
page readonly
|
|
|
|
7FF54E5A7000
|
unkown
|
page readonly
|
|
|
|
2105523F000
|
unkown
|
page read and write
|
|
|
|
7FF516A6C000
|
unkown
|
page readonly
|
|
|
|
7FF51A91D000
|
unkown
|
page readonly
|
|
|
|
2140B756000
|
unkown
|
page read and write
|
|
|
|
7FF592AE9000
|
unkown
|
page readonly
|
|
|
|
21EE7E13000
|
unkown
|
page read and write
|
|
|
|
1926178F000
|
unkown
|
page read and write
|
|
|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
7FF582796000
|
unkown
|
page readonly
|
|
|
|
7FF522F7E000
|
unkown
|
page readonly
|
|
|
|
2140966E000
|
unkown
|
page read and write
|
|
|
|
189B6820000
|
heap private
|
page read and write
|
|
|
|
21EE7E67000
|
unkown
|
page read and write
|
|
|
|
87BFF7F000
|
unkown
|
page read and write
|
|
|
|
2140C010000
|
unkown
|
page read and write
|
|
|
|
2140C110000
|
unkown
|
page read and write
|
|
|
|
7FF5DB68A000
|
unkown
|
page readonly
|
|
|
|
2140C110000
|
unkown
|
page read and write
|
|
|
|
214096C9000
|
unkown
|
page read and write
|
|
|
|
7FF516A7A000
|
unkown
|
page readonly
|
|
|
|
7FF516DB0000
|
unkown
|
page readonly
|
|
|
|
7FF522FFD000
|
unkown
|
page readonly
|
|
|
|
7FF51AAC1000
|
unkown
|
page readonly
|
|
|
|
7FF5020FA000
|
unkown
|
page readonly
|
|
|
|
7FF5C3DAB000
|
unkown
|
page readonly
|
|
|
|
7FF5C3EF3000
|
unkown
|
page readonly
|
|
|
|
4EEBCFB000
|
unkown
|
page read and write
|
|
|
|
1A601402000
|
unkown
|
page read and write
|
|
|
|
7FF54EC7F000
|
unkown
|
page readonly
|
|
|
|
13C960A0000
|
unkown
|
page readonly
|
|
|
|
7FF516D50000
|
unkown
|
page readonly
|
|
|
|
1A600F5B000
|
unkown
|
page read and write
|
|
|
|
7FF582A4D000
|
unkown
|
page readonly
|
|
|
|
2140972E000
|
unkown
|
page read and write
|
|
|
|
1A600F59000
|
unkown
|
page read and write
|
|
|
|
21EE8000000
|
unkown
|
page readonly
|
|
|
|
2140C210000
|
unkown
|
page read and write
|
|
|
|
5B51E8B000
|
unkown
|
page read and write
|
|
|
|
1A600FD2000
|
unkown
|
page read and write
|
|
|
|
7FF51AA07000
|
unkown
|
page readonly
|
|
|
|
7FF522CF7000
|
unkown
|
page readonly
|
|
|
|
7FF582A46000
|
unkown
|
page readonly
|
|
|
|
2C86000
|
unkown
|
page readonly
|
|
|
|
210551B0000
|
heap default
|
page read and write
|
|
|
|
7FF5828B1000
|
unkown
|
page readonly
|
|
|
|
5B5277E000
|
unkown
|
page read and write
|
|
|
|
7FF592B62000
|
unkown
|
page readonly
|
|
|
|
812635E000
|
unkown
|
page read and write
|
|
|
|
1A600F8E000
|
unkown
|
page read and write
|
|
|
|
13C94700000
|
unkown
|
page read and write
|
|
|
|
7FF54EC3A000
|
unkown
|
page readonly
|
|
|
|
21409613000
|
unkown
|
page read and write
|
|
|
|
25C96002000
|
unkown
|
page read and write
|
|
|
|
24B6FC3F000
|
unkown
|
page read and write
|
|
|
|
21409784000
|
unkown
|
page read and write
|
|
|
|
156F9AB000
|
unkown
|
page read and write
|
|
|
|
7FF5021E4000
|
unkown
|
page readonly
|
|
|
|
7FF5829D0000
|
unkown
|
page readonly
|
|
|
|
EB48B7E000
|
unkown
|
page read and write
|
|
|
|
7FF582A3E000
|
unkown
|
page readonly
|
|
|
|
2140B78F000
|
unkown
|
page read and write
|
|
|
|
21055200000
|
unkown
|
page read and write
|
|
|
|
7FF5B2D8C000
|
unkown
|
page readonly
|
|
|
|
81263DE000
|
unkown
|
page read and write
|
|
|
|
7FF502154000
|
unkown
|
page readonly
|
|
|
|
85796FE000
|
unkown
|
page read and write
|
|
|
|
1A6005E0000
|
unkown
|
page read and write
|
|
|
|
13C94668000
|
unkown
|
page read and write
|
|
|
|
7FF502168000
|
unkown
|
page readonly
|
|
|
|
7FF522ED3000
|
unkown
|
page readonly
|
|
|
|
21409560000
|
heap private
|
page read and write
|
|
|
|
7FF51A9A4000
|
unkown
|
page readonly
|
|
|
|
7FF516DDC000
|
unkown
|
page readonly
|
|
|
|
7FF5DB692000
|
unkown
|
page readonly
|
|
|
|
7FF51A811000
|
unkown
|
page readonly
|
|
|
|
7FF516CB8000
|
unkown
|
page readonly
|
|
|
|
21EE7E8A000
|
unkown
|
page read and write
|
|
|
|
1A60143C000
|
unkown
|
page read and write
|
|
|
|
1A600FA2000
|
unkown
|
page read and write
|
|
|
|
189B6B00000
|
unkown
|
page read and write
|
|
|
|
7FF51A532000
|
unkown
|
page readonly
|
|
|
|
214096C2000
|
unkown
|
page read and write
|
|
|
|
1A601402000
|
unkown
|
page read and write
|
|
|
|
1A601500000
|
unkown
|
page read and write
|
|
|
|
192617A0000
|
unkown
|
page read and write
|
|
|
|
7FF592973000
|
unkown
|
page readonly
|
|
|
|
7FF54ECC6000
|
unkown
|
page readonly
|
|
|
|
192619F5000
|
heap private
|
page read and write
|
|
|
|
1A6006A8000
|
unkown
|
page read and write
|
|
|
|
7FF54E570000
|
unkown
|
page readonly
|
|
|
|
25C95C00000
|
unkown
|
page readonly
|
|
|
|
21409743000
|
unkown
|
page read and write
|
|
|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
189B6980000
|
unkown
|
page read and write
|
|
|
|
7FF54EBB4000
|
unkown
|
page readonly
|
|
|
|
19261776000
|
heap default
|
page read and write
|
|
|
|
7FF5B2F04000
|
unkown
|
page readonly
|
|
|
|
5B5247E000
|
unkown
|
page read and write
|
|
|
|
189B6880000
|
heap default
|
page read and write
|
|
|
|
4EEB97B000
|
unkown
|
page read and write
|
|
|
|
2140B982000
|
unkown
|
page read and write
|
|
|
|
7FF502137000
|
unkown
|
page readonly
|
|
|
|
A10000
|
unkown
|
page readonly
|
|
|
|
7FF582ABA000
|
unkown
|
page readonly
|
|
|
|
7FF522FE8000
|
unkown
|
page readonly
|
|
|
|
2140B7A9000
|
unkown
|
page read and write
|
|
|
|
7FF5C40E1000
|
unkown
|
page readonly
|
|
|
|
7FF5020EA000
|
unkown
|
page readonly
|
|
|
|
7FF54ED3A000
|
unkown
|
page readonly
|
|
|
|
1A601402000
|
unkown
|
page read and write
|
|
|
|
25C95800000
|
unkown
|
page read and write
|
|
|
|
19261786000
|
unkown
|
page read and write
|
|
|
|
81267F9000
|
unkown
|
page read and write
|
|
|
|
1A60159B000
|
unkown
|
page read and write
|
|
|
|
7FF51A962000
|
unkown
|
page readonly
|
|
|
|
7FF522F97000
|
unkown
|
page readonly
|
|
|
|
2140B530000
|
heap private
|
page read and write
|
|
|
|
2C25000
|
unkown
|
page readonly
|
|
|
|
192617A0000
|
unkown
|
page read and write
|
|
|
|
7FF54EC24000
|
unkown
|
page readonly
|
|
|
|
7FF58278B000
|
unkown
|
page readonly
|
|
|
|
1EFE2B70000
|
heap private
|
page read and write
|
|
|
|
7FF5B2BA0000
|
unkown
|
page readonly
|
|
|
|
214096F3000
|
unkown
|
page read and write
|
|
|
|
21409732000
|
unkown
|
page read and write
|
|
|
|
1A600FBC000
|
unkown
|
page read and write
|
|
|
|
24B6FC02000
|
unkown
|
page read and write
|
|
|
|
7FF516B76000
|
unkown
|
page readonly
|
|
|
|
13C94702000
|
unkown
|
page read and write
|
|
|
|
7FF51AA49000
|
unkown
|
page readonly
|
|
|
|
2140966B000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E37000
|
unkown
|
page readonly
|
|
|
|
192619F0000
|
heap private
|
page read and write
|
|
|
|
7FF54ECB8000
|
unkown
|
page readonly
|
|
|
|
2140963F000
|
unkown
|
page read and write
|
|
|
|
880000
|
unkown
|
page read and write
|
|
|
|
7FF5922CD000
|
unkown
|
page readonly
|
|
|
|
1A600FBD000
|
unkown
|
page read and write
|
|
|
|
2140B87F000
|
unkown
|
page read and write
|
|
|
|
7FF516DF4000
|
unkown
|
page readonly
|
|
|
|
21EE8540000
|
unkown
|
page readonly
|
|
|
|
189B6890000
|
unkown
|
page readonly
|
|
|
|
21EE8800000
|
unkown
|
page readonly
|
|
|
|
71166F5000
|
unkown
|
page read and write
|
|
|
|
214096D3000
|
unkown
|
page read and write
|
|
|
|
1A600716000
|
unkown
|
page read and write
|
|
|
|
2140C210000
|
unkown
|
page read and write
|
|
|
|
25C95902000
|
unkown
|
page read and write
|
|
|
|
7FF5DB5EA000
|
unkown
|
page readonly
|
|
|
|
1A600FA1000
|
unkown
|
page read and write
|
|
|
|
189B6A22000
|
unkown
|
page read and write
|
|
|
|
2140C000000
|
unkown
|
page read and write
|
|
|
|
7FF5DB61D000
|
unkown
|
page readonly
|
|
|
|
7FF5827F5000
|
unkown
|
page readonly
|
|
|
|
21EE7E55000
|
unkown
|
page read and write
|
|
|
|
1A601502000
|
unkown
|
page read and write
|
|
|
|
7FF51A69A000
|
unkown
|
page readonly
|
|
|
|
7FF50180E000
|
unkown
|
page readonly
|
|
|
|
7FF51A7F1000
|
unkown
|
page readonly
|
|
|
|
2140B5B0000
|
unkown
|
page readonly
|
|
|
|
7FF501FA3000
|
unkown
|
page readonly
|
|
|
|
13C9466C000
|
unkown
|
page read and write
|
|
|
|
1EFE2D02000
|
unkown
|
page read and write
|
|
|
|
21409656000
|
unkown
|
page read and write
|
|
|
|
7FF59273F000
|
unkown
|
page readonly
|
|
|
|
1A6006BD000
|
unkown
|
page read and write
|
|
|
|
1A600F25000
|
unkown
|
page read and write
|
|
|
|
7FF5DB619000
|
unkown
|
page readonly
|
|
|
|
1A600CB0000
|
unkown
|
page readonly
|
|
|
|
2C0A000
|
unkown
|
page readonly
|
|
|
|
8579979000
|
unkown
|
page read and write
|
|
|
|
7FF51A9FC000
|
unkown
|
page readonly
|
|
|
|
7FF51A68C000
|
unkown
|
page readonly
|
|
|
|
189B6A2A000
|
unkown
|
page read and write
|
|
|
|
2C6A000
|
unkown
|
page readonly
|
|
|
|
1A600C60000
|
unkown
|
page write copy
|
|
|
|
2140B520000
|
unkown
|
page readonly
|
|
|
|
214096B9000
|
unkown
|
page read and write
|
|
|
|
7FF54EAA1000
|
unkown
|
page readonly
|
|
|
|
7FF582A38000
|
unkown
|
page readonly
|
|
|
|
7FF59296B000
|
unkown
|
page readonly
|
|
|
|
7FF54EB53000
|
unkown
|
page readonly
|
|
|
|
7FF582231000
|
unkown
|
page readonly
|
|
|
|
7FF5C40DA000
|
unkown
|
page readonly
|
|
|
|
7FF54EBF0000
|
unkown
|
page readonly
|
|
|
|
1A600702000
|
unkown
|
page read and write
|
|
|
|
1A600F5B000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E6A000
|
unkown
|
page readonly
|
|
|
|
7FF51AA41000
|
unkown
|
page readonly
|
|
|
|
7FF5828D3000
|
unkown
|
page readonly
|
|
|
|
25C9583C000
|
unkown
|
page read and write
|
|
|
|
2140B902000
|
unkown
|
page read and write
|
|
|
|
2C55000
|
unkown
|
page readonly
|
|
|
|
4EEC3FC000
|
unkown
|
page read and write
|
|
|
|
7FF5020FE000
|
unkown
|
page readonly
|
|
|
|
24B6FD00000
|
unkown
|
page read and write
|
|
|
|
1A600F4F000
|
unkown
|
page read and write
|
|
|
|
24B6FBD0000
|
unkown
|
page readonly
|
|
|
|
7FF51A22D000
|
unkown
|
page readonly
|
|
|
|
7FF5C4069000
|
unkown
|
page readonly
|
|
|
|
7FF54EB9D000
|
unkown
|
page readonly
|
|
|
|
7FF516C91000
|
unkown
|
page readonly
|
|
|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E8E000
|
unkown
|
page readonly
|
|
|
|
7FF516B6B000
|
unkown
|
page readonly
|
|
|
|
2140B982000
|
unkown
|
page read and write
|
|
|
|
13C94613000
|
unkown
|
page read and write
|
|
|
|
7FF502179000
|
unkown
|
page readonly
|
|
|
|
1EFE2F20000
|
unkown
|
page readonly
|
|
|
|
5B5267F000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E0A000
|
unkown
|
page readonly
|
|
|
|
7FF592A9F000
|
unkown
|
page readonly
|
|
|
|
7FF5828D8000
|
unkown
|
page readonly
|
|
|
|
711630E000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E25000
|
unkown
|
page readonly
|
|
|
|
21409773000
|
unkown
|
page read and write
|
|
|
|
7FF5C3DB6000
|
unkown
|
page readonly
|
|
|
|
7FF5B2D84000
|
unkown
|
page readonly
|
|
|
|
7FF592B61000
|
unkown
|
page readonly
|
|
|
|
7FF54E7B2000
|
unkown
|
page readonly
|
|
|
|
7FF51AA38000
|
unkown
|
page readonly
|
|
|
|
7FF51AA14000
|
unkown
|
page readonly
|
|
|
|
7FF51AA46000
|
unkown
|
page readonly
|
|
|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
21055520000
|
unkown
|
page readonly
|
|
|
|
7FF592AA8000
|
unkown
|
page readonly
|
|
|
|
13C94667000
|
unkown
|
page read and write
|
|
|
|
7FF5829DB000
|
unkown
|
page readonly
|
|
|
|
7FF522FB7000
|
unkown
|
page readonly
|
|
|
|
4EEC0FC000
|
unkown
|
page read and write
|
|
|
|
2C2C000
|
unkown
|
page readonly
|
|
|
|
189B6A02000
|
unkown
|
page read and write
|
|
|
|
13C94600000
|
unkown
|
page read and write
|
|
|
|
7FF50212F000
|
unkown
|
page readonly
|
|
|
|
2BE2000
|
unkown
|
page readonly
|
|
|
|
7FF523071000
|
unkown
|
page readonly
|
|
|
|
1A600F51000
|
unkown
|
page read and write
|
|
|
|
1A601402000
|
unkown
|
page read and write
|
|
|
|
24B716C0000
|
unkown
|
page read and write
|
|
|
|
13C94655000
|
unkown
|
page read and write
|
|
|
|
7FF516E21000
|
unkown
|
page readonly
|
|
|
|
7FF592978000
|
unkown
|
page readonly
|
|
|
|
7FF5C3FEE000
|
unkown
|
page readonly
|
|
|
|
2140B510000
|
unkown
|
page read and write
|
|
|
|
7FF516DFA000
|
unkown
|
page readonly
|
|
|
|
7FF502064000
|
unkown
|
page readonly
|
|
|
|
7FF516E94000
|
unkown
|
page readonly
|
|
|
|
7FF516CAB000
|
unkown
|
page readonly
|
|
|
|
7FF51A916000
|
unkown
|
page readonly
|
|
|
|
21EE7E29000
|
unkown
|
page read and write
|
|
|
|
2CE4000
|
unkown
|
page readonly
|
|
|
|
7FF522ECD000
|
unkown
|
page readonly
|
|
|
|
21EE7E00000
|
unkown
|
page read and write
|
|
|
|
7FF51A8CB000
|
unkown
|
page readonly
|
|
|
|
7FF516DDF000
|
unkown
|
page readonly
|
|
|
|
7FF5C4028000
|
unkown
|
page readonly
|
|
|
|
1A600FA2000
|
unkown
|
page read and write
|
|
|
|
7FF58268C000
|
unkown
|
page readonly
|
|
|
|
812677F000
|
unkown
|
page read and write
|
|
|
|
7FF582A24000
|
unkown
|
page readonly
|
|
|
|
91A000
|
heap default
|
page read and write
|
|
|
|
2140B590000
|
unkown
|
page read and write
|
|
|
|
7FF501CC0000
|
unkown
|
page readonly
|
|
|
|
4EEB3FF000
|
unkown
|
page read and write
|
|
|
|
7FF54EA50000
|
unkown
|
page readonly
|
|
|
|
7FF502144000
|
unkown
|
page readonly
|
|
|
|
1EFE2C02000
|
unkown
|
page read and write
|
|
|
|
1A60141D000
|
unkown
|
page read and write
|
|
|
|
21409742000
|
unkown
|
page read and write
|
|
|
|
87BFEF9000
|
unkown
|
page read and write
|
|
|
|
2C71000
|
unkown
|
page readonly
|
|
|
|
7FF516C09000
|
unkown
|
page readonly
|
|
|
|
1B3E8FF000
|
unkown
|
page read and write
|
|
|
|
156FCFE000
|
unkown
|
page read and write
|
|
|
|
7FF5C3FF0000
|
unkown
|
page readonly
|
|
|
|
2140B788000
|
unkown
|
page read and write
|
|
|
|
7FF5C401F000
|
unkown
|
page readonly
|
|
|
|
1B3EA7E000
|
unkown
|
page read and write
|
|
|
|
1EFE2C54000
|
unkown
|
page read and write
|
|
|
|
7FF522EE4000
|
unkown
|
page readonly
|
|
|
|
1A6005D0000
|
unkown
|
page readonly
|
|
|
|
19261640000
|
unkown
|
page readonly
|
|
|
|
7FF592891000
|
unkown
|
page readonly
|
|
|
|
13C945A0000
|
unkown
|
page write copy
|
|
|
|
EB488FE000
|
unkown
|
page read and write
|
|
|
|
7FF5DB5A5000
|
unkown
|
page readonly
|
|
|
|
87BFC7A000
|
unkown
|
page read and write
|
|
|
|
189B6960000
|
unkown
|
page readonly
|
|
|
|
1A60064C000
|
unkown
|
page read and write
|
|
|
|
7FF592AE1000
|
unkown
|
page readonly
|
|
|
|
2140BA02000
|
unkown
|
page read and write
|
|
|
|
2140B590000
|
unkown
|
page read and write
|
|
|
|
189B7400000
|
unkown
|
page readonly
|
|
|
|
7FF522B55000
|
unkown
|
page readonly
|
|
|
|
7FF5DAEF7000
|
unkown
|
page readonly
|
|
|
|
1A600F75000
|
unkown
|
page read and write
|
|
|
|
7FF5829CE000
|
unkown
|
page readonly
|
|
|
|
2140BA82000
|
unkown
|
page read and write
|
|
|
|
1A600FA1000
|
unkown
|
page read and write
|
|
|
|
2140B713000
|
unkown
|
page read and write
|
|
|
|
7FF54ED34000
|
unkown
|
page readonly
|
|
|
|
7FF592A70000
|
unkown
|
page readonly
|
|
|
|
7FF5827F1000
|
unkown
|
page readonly
|
|
|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
7FF59272C000
|
unkown
|
page readonly
|
|
|
|
1A600654000
|
unkown
|
page read and write
|
|
|
|
7FF5829FC000
|
unkown
|
page readonly
|
|
|
|
21055313000
|
unkown
|
page read and write
|
|
|
|
189B6C00000
|
unkown
|
page readonly
|
|
|
|
1A600FD2000
|
unkown
|
page read and write
|
|
|
|
2140BC00000
|
unkown
|
page readonly
|
|
|
|
214096E1000
|
unkown
|
page read and write
|
|
|
|
7FF51AA2E000
|
unkown
|
page readonly
|
|
|
|
7FF51A9AF000
|
unkown
|
page readonly
|
|
|
|
4EEB77A000
|
unkown
|
page read and write
|
|
|
|
7FF5C3F90000
|
unkown
|
page readonly
|
|
|
|
85797FA000
|
unkown
|
page read and write
|
|
|
|
189B6A8A000
|
unkown
|
page read and write
|
|
|
|
7FF51A804000
|
unkown
|
page readonly
|
|
|
|
7FF54ECA4000
|
unkown
|
page readonly
|
|
|
|
7116A7F000
|
unkown
|
page read and write
|
|
|
|
7FF5C384D000
|
unkown
|
page readonly
|
|
|
|
7FF50210B000
|
unkown
|
page readonly
|
|
|
|
13C94713000
|
unkown
|
page read and write
|
|
|
|
7FF582AC2000
|
unkown
|
page readonly
|
|
|
|
1A600FA2000
|
unkown
|
page read and write
|
|
|
|
7FF5B2B97000
|
unkown
|
page readonly
|
|
|
|
7FF582A14000
|
unkown
|
page readonly
|
|
|
|
83B000
|
unkown
|
page read and write
|
|
|
|
2140B775000
|
unkown
|
page read and write
|
|
|
|
7FF592895000
|
unkown
|
page readonly
|
|
|
|
7FF592AC4000
|
unkown
|
page readonly
|
|
|
|
1A600FB1000
|
unkown
|
page read and write
|
|
|
|
1B3EAFF000
|
unkown
|
page read and write
|
|
|
|
189B6A70000
|
unkown
|
page read and write
|
|
|
|
1A6005F0000
|
unkown
|
page read and write
|
|
|
|
812687D000
|
unkown
|
page read and write
|
|
|
|
214096B6000
|
unkown
|
page read and write
|
|
|
|
7FF5C4034000
|
unkown
|
page readonly
|
|
|
|
2140B7FB000
|
unkown
|
page read and write
|
|
|
|
7FF5829E7000
|
unkown
|
page readonly
|
|
|
|
1A6005A0000
|
unkown
|
page readonly
|
|
|
|
7FF54EC67000
|
unkown
|
page readonly
|
|
|
|
1EFE2BD0000
|
heap default
|
page read and write
|
|
|
|
1A600410000
|
heap private
|
page read and write
|
|
|
|
7FF502105000
|
unkown
|
page readonly
|
|
|
|
2140C010000
|
unkown
|
page read and write
|
|
|
|
2140BB02000
|
unkown
|
page read and write
|
|
|
|
2105526B000
|
unkown
|
page read and write
|
|
|
|
25C95913000
|
unkown
|
page read and write
|
|
|
|
1A600FB1000
|
unkown
|
page read and write
|
|
|
|
7FF51A7A8000
|
unkown
|
page readonly
|
|
|
|
7FF54E816000
|
unkown
|
page readonly
|
|
|
|
7FF5DB5AB000
|
unkown
|
page readonly
|
|
|
|
7FF5C403A000
|
unkown
|
page readonly
|
|
|
|
1A600FA2000
|
unkown
|
page read and write
|
|
|
|
2CD1000
|
unkown
|
page readonly
|
|
|
|
1A6006EC000
|
unkown
|
page read and write
|
|
|
|
1A60069E000
|
unkown
|
page read and write
|
|
|
|
4EEB9FD000
|
unkown
|
page read and write
|
|
|
|
5B523FB000
|
unkown
|
page read and write
|
|
|
|
7FF522E61000
|
unkown
|
page readonly
|
|
|
|
AE0000
|
unkown
|
page readonly
|
|
|
|
7FF54E552000
|
unkown
|
page readonly
|
|
|
|
214096B4000
|
unkown
|
page read and write
|
|
|
|
2140BB00000
|
unkown
|
page read and write
|
|
|
|
2C33000
|
unkown
|
page readonly
|
|
|
|
1EFE2C13000
|
unkown
|
page read and write
|
|
|
|
7FF54EC87000
|
unkown
|
page readonly
|
|
|
|
2140C210000
|
unkown
|
page read and write
|
|
|
|
7FF582972000
|
unkown
|
page readonly
|
|
|
|
13C94460000
|
heap private
|
page read and write
|
|
|
|
7FF5C3FFB000
|
unkown
|
page readonly
|
|
|
|
7FF54EA16000
|
unkown
|
page readonly
|
|
|
|
21409600000
|
unkown
|
page read and write
|
|
|
|
1A600F5D000
|
unkown
|
page read and write
|
|
|
|
1A600FBC000
|
unkown
|
page read and write
|
|
|
|
2140967B000
|
unkown
|
page read and write
|
|
|
|
7FF516E29000
|
unkown
|
page readonly
|
|
|
|
25C95E80000
|
unkown
|
page read and write
|
|
|
|
87BFDFF000
|
unkown
|
page read and write
|
|
|
|
1A60148E000
|
unkown
|
page read and write
|
|
|
|
7FF51A970000
|
unkown
|
page readonly
|
|
|
|
7FF5C3851000
|
unkown
|
page readonly
|
|
|
|
7FF592A75000
|
unkown
|
page readonly
|
|
|
|
4EEBD7A000
|
unkown
|
page read and write
|
|
|
|
7FF54EBBC000
|
unkown
|
page readonly
|
|
|
|
7FF5DB5F4000
|
unkown
|
page readonly
|
|
|
|
19261771000
|
unkown
|
page read and write
|
|
|
|
1A600FA1000
|
unkown
|
page read and write
|
|
|
|
1A600713000
|
unkown
|
page read and write
|
|
|
|
4EEBB7B000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E96000
|
unkown
|
page readonly
|
|
|
|
1A600F90000
|
unkown
|
page read and write
|
|
|
|
1EFE2C3F000
|
unkown
|
page read and write
|
|
|
|
7FF51A972000
|
unkown
|
page readonly
|
|
|
|
812667A000
|
unkown
|
page read and write
|
|
|
|
2140B83D000
|
unkown
|
page read and write
|
|
|
|
2C82000
|
unkown
|
page readonly
|
|
|
|
7FF51A8D8000
|
unkown
|
page readonly
|
|
|
|
1A600651000
|
unkown
|
page read and write
|
|
|
|
25C95720000
|
heap default
|
page read and write
|
|
|
|
21056DC0000
|
unkown
|
page readonly
|
|
|
|
4EEBE7B000
|
unkown
|
page read and write
|
|
|
|
7FF592A87000
|
unkown
|
page readonly
|
|
|
|
7FF516DAE000
|
unkown
|
page readonly
|
|
|
|
7FF501CD5000
|
unkown
|
page readonly
|
|
|
|
189B6A13000
|
unkown
|
page read and write
|
|
|
|
2140B70D000
|
unkown
|
page read and write
|
|
|
|
7FF5C401C000
|
unkown
|
page readonly
|
|
|
|
2105526D000
|
unkown
|
page read and write
|
|
|
|
21EE7D90000
|
heap private
|
page read and write
|
|
|
|
21EE7E67000
|
unkown
|
page read and write
|
|
|
|
7FF516BD5000
|
unkown
|
page readonly
|
|
|
|
1A600560000
|
unkown
|
page readonly
|
|
|
|
189B6A55000
|
unkown
|
page read and write
|
|
|
|
1A600FA1000
|
unkown
|
page read and write
|
|
|
|
7FF522F7A000
|
unkown
|
page readonly
|
|
|
|
2CF2000
|
unkown
|
page readonly
|
|
|
|
2D03000
|
unkown
|
page readonly
|
|
|
|
EB48C77000
|
unkown
|
page read and write
|
|
|
|
7FF501FE1000
|
unkown
|
page readonly
|
|
|
|
7FF51A8B1000
|
unkown
|
page readonly
|
|
|
|
7FF54E7C2000
|
unkown
|
page readonly
|
|
|
|
7FF522FAF000
|
unkown
|
page readonly
|
|
|
|
13C9466C000
|
unkown
|
page read and write
|
|
|
|
7FF54EB31000
|
unkown
|
page readonly
|
|
|
|
85798FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E1E000
|
unkown
|
page readonly
|
|
|
|
13C9466C000
|
unkown
|
page read and write
|
|
|
|
21409690000
|
unkown
|
page read and write
|
|
|
|
25C95A00000
|
unkown
|
page readonly
|
|
|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
7FF5C4058000
|
unkown
|
page readonly
|
|
|
|
24B717C0000
|
unkown
|
page readonly
|
|
|
|
7FF582829000
|
unkown
|
page readonly
|
|
|
|
189B6A4A000
|
unkown
|
page read and write
|
|
|
|
210551C0000
|
unkown
|
page readonly
|
|
|
|
1A600FA2000
|
unkown
|
page read and write
|
|
|
|
2C63000
|
unkown
|
page readonly
|
|
|
|
24B6FB60000
|
heap private
|
page read and write
|
|
|
|
2140B982000
|
unkown
|
page read and write
|
|
|
|
4EEC17F000
|
unkown
|
page read and write
|
|
|
|
7FF5C405E000
|
unkown
|
page readonly
|
|
|
|
2C57000
|
unkown
|
page readonly
|
|
|
|
1A601502000
|
unkown
|
page read and write
|
|
|
|
2BFC000
|
unkown
|
page readonly
|
|
|
|
7FF5DB5A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C4061000
|
unkown
|
page readonly
|
|
|
|
214098D0000
|
unkown
|
page write copy
|
|
|
|
21EE7E50000
|
unkown
|
page read and write
|
|
|
|
4EEBFFC000
|
unkown
|
page read and write
|
|
|
|
4EEBF7A000
|
unkown
|
page read and write
|
|
|
|
1A600F8E000
|
unkown
|
page read and write
|
|
|
|
13C94800000
|
unkown
|
page readonly
|
|
|
|
25C95E70000
|
unkown
|
page readonly
|
|
|
|
7FF54EB58000
|
unkown
|
page readonly
|
|
|
|
7FF516E2D000
|
unkown
|
page readonly
|
|
|
|
23AE27E000
|
unkown
|
page read and write
|
|
|
|
25C95813000
|
unkown
|
page read and write
|
|
|
|
1A6006C3000
|
unkown
|
page read and write
|
|
|
|
24B6FF20000
|
unkown
|
page readonly
|
|
|
|
21409742000
|
unkown
|
page read and write
|
|
|
|
7FF523064000
|
unkown
|
page readonly
|
|
|
|
7FF5021F2000
|
unkown
|
page readonly
|
|
|
|
4EEB87A000
|
unkown
|
page read and write
|
|
|
|
1A6005E0000
|
unkown
|
page read and write
|
|
|
|
21409732000
|
unkown
|
page read and write
|
|
|
|
EB485BC000
|
unkown
|
page read and write
|
|
|
|
7FF516E1E000
|
unkown
|
page readonly
|
|
|
|
7FF5B2D1B000
|
unkown
|
page readonly
|
|
|
|
1EFE2E00000
|
unkown
|
page readonly
|
|
|
|
7FF54EA91000
|
unkown
|
page readonly
|
|
|
|
7FF5DB5E4000
|
unkown
|
page readonly
|
|
|
|
931000
|
heap default
|
page read and write
|
|
|
|
7FF5DAEF3000
|
unkown
|
page readonly
|
|
|
|
2C49000
|
unkown
|
page readonly
|
|
|
|
87BFFFC000
|
unkown
|
page read and write
|
|
|
|
7FF54E865000
|
unkown
|
page readonly
|
|
|
|
1A601400000
|
unkown
|
page read and write
|
|
|
|
214096A5000
|
unkown
|
page read and write
|
|
|
|
7FF516CB3000
|
unkown
|
page readonly
|
|
|
|
1A600FA1000
|
unkown
|
page read and write
|
|
|
|
7FF5021F1000
|
unkown
|
page readonly
|
|
|
|
1A600F5B000
|
unkown
|
page read and write
|
|
|
|
7FF522FEE000
|
unkown
|
page readonly
|
|
|
|
21EE7E4D000
|
unkown
|
page read and write
|
|
|
|
7FF54E35E000
|
unkown
|
page readonly
|
|
|
|
1A600F13000
|
unkown
|
page read and write
|
|
|
|
21409800000
|
unkown
|
page readonly
|
|
|
|
21EE7F08000
|
unkown
|
page read and write
|
|
|
|
7FF516A7F000
|
unkown
|
page readonly
|
|
|
|
1A600FA1000
|
unkown
|
page read and write
|
|
|
|
7FF5C3EF8000
|
unkown
|
page readonly
|
|
|
|
1EFE47C0000
|
unkown
|
page readonly
|
|
|
|
7FF54EBF2000
|
unkown
|
page readonly
|
|
|
|
7FF592A6E000
|
unkown
|
page readonly
|
|
|
|
23ADFBF000
|
unkown
|
page read and write
|
|
|
|
189B6B08000
|
unkown
|
page read and write
|
|
|
|
7FF59273A000
|
unkown
|
page readonly
|
|
|
|
7FF582A1A000
|
unkown
|
page readonly
|
|
|
|
21055400000
|
unkown
|
page readonly
|
|
|
|
1A601502000
|
unkown
|
page read and write
|
|
|
|
1B3E9FA000
|
unkown
|
page read and write
|
|
|
|
214096B1000
|
unkown
|
page read and write
|
|
|
|
7FF5C3FF5000
|
unkown
|
page readonly
|
|
|
|
4EEBAFF000
|
unkown
|
page read and write
|
|
|
|
24B6FC13000
|
unkown
|
page read and write
|
|
|
|
910000
|
heap default
|
page read and write
|
|
|
|
1A600F5C000
|
unkown
|
page read and write
|
|
|
|
2140BB02000
|
unkown
|
page read and write
|
|
|
|
21409920000
|
unkown
|
page readonly
|
|
|
|
2105526B000
|
unkown
|
page read and write
|
|
|
|
7FF54EC1B000
|
unkown
|
page readonly
|
|
|
|
4EEC2FC000
|
unkown
|
page read and write
|
|
|
|
7FF516D52000
|
unkown
|
page readonly
|
|
|
|
21EE80D0000
|
unkown
|
page readonly
|
|
|
|
7FF5829CA000
|
unkown
|
page readonly
|
|
|
|
5B52577000
|
unkown
|
page read and write
|
|
|
|
7FF516A87000
|
unkown
|
page readonly
|
|
|
|
5B522F5000
|
unkown
|
page read and write
|
|
|
|
2140B795000
|
unkown
|
page read and write
|
|
|
|
7FF5B2D73000
|
unkown
|
page readonly
|
|
|
|
7FF54EB4B000
|
unkown
|
page readonly
|
|
|
|
7FF5DB5FE000
|
unkown
|
page readonly
|
|
|
|
7FF522FCA000
|
unkown
|
page readonly
|
|
|
|
1A600F00000
|
unkown
|
page read and write
|
|
|
|
7FF5DB60E000
|
unkown
|
page readonly
|
|
|
|
7FF5B2E2B000
|
unkown
|
page readonly
|
|
|
|
21EE7E8F000
|
unkown
|
page read and write
|
|
|
|
7FF54EC4E000
|
unkown
|
page readonly
|
|
|
|
189B6B02000
|
unkown
|
page read and write
|
|
|
|
1A600F2D000
|
unkown
|
page read and write
|
|
|
|
13C9466C000
|
unkown
|
page read and write
|
|
|
|
2140B7E8000
|
unkown
|
page read and write
|
|
|
|
2140B942000
|
unkown
|
page read and write
|
|
|
|
21EE7E3C000
|
unkown
|
page read and write
|
|
|
|
1926178F000
|
unkown
|
page read and write
|
|
|
|
1A600480000
|
unkown
|
page readonly
|
|
|
|
1A60063C000
|
unkown
|
page read and write
|
|
|
|
7FF522E7E000
|
unkown
|
page readonly
|
|
|
|
2140B540000
|
unkown
|
page readonly
|
|
|
|
7FF522694000
|
unkown
|
page readonly
|
|
|
|
7FF502100000
|
unkown
|
page readonly
|
|
|
|
7FF54EAFA000
|
unkown
|
page readonly
|
|
|
|
19261776000
|
unkown
|
page read and write
|
|
|
|
7FF592ABA000
|
unkown
|
page readonly
|
|
|
|
189B6970000
|
unkown
|
page readonly
|
|
|
|
EB4887E000
|
unkown
|
page read and write
|
|
|
|
87BFD7E000
|
unkown
|
page read and write
|
|
|
|
2140C310000
|
unkown
|
page read and write
|
|
|
|
2105526D000
|
unkown
|
page read and write
|
|
|
|
1A600550000
|
unkown
|
page readonly
|
|
|
|
4EEC1FB000
|
unkown
|
page read and write
|
|
|
|
EB48AFB000
|
unkown
|
page read and write
|
|
|
|
2140B745000
|
unkown
|
page read and write
|
|
|
|
7FF522F8B000
|
unkown
|
page readonly
|
|
|
|
7FF51A9E7000
|
unkown
|
page readonly
|
|
|
|
7FF592ADE000
|
unkown
|
page readonly
|
|
|
|
7FF5B2E9D000
|
unkown
|
page readonly
|
|
|
|
7FF51A9CE000
|
unkown
|
page readonly
|
|
|
|
7FF592A12000
|
unkown
|
page readonly
|
|
|
|
1A60063A000
|
unkown
|
page read and write
|
|
|
|
1A600E02000
|
unkown
|
page read and write
|
|
|
|
13C9463F000
|
unkown
|
page read and write
|
|
|
|
71167FB000
|
unkown
|
page read and write
|
|
|
|
25C95870000
|
unkown
|
page read and write
|
|
|
|
7FF54EC4A000
|
unkown
|
page readonly
|
|
|
|
7FF522EEC000
|
unkown
|
page readonly
|
|
|
|
870000
|
heap default
|
page read and write
|
|
|
|
2140B1C0000
|
unkown
|
page readonly
|
|
|
|
7FF5C3E15000
|
unkown
|
page readonly
|
|
|
|
1A600800000
|
unkown
|
page readonly
|
|
|
|
7FF516611000
|
unkown
|
page readonly
|
|
|
|
2105526D000
|
unkown
|
page read and write
|
|
|
|
23AE9FC000
|
unkown
|
page read and write
|
|
|
|
7FF516DE8000
|
unkown
|
page readonly
|
|
|
|
7FF54ED41000
|
unkown
|
page readonly
|
|
|
|
7FF522FDF000
|
unkown
|
page readonly
|
|
|
|
4EEBBFB000
|
unkown
|
page read and write
|
|
|
|
7FF5DAEC0000
|
unkown
|
page readonly
|
|
|
|
7FF5DB691000
|
unkown
|
page readonly
|
|
|
|
189B6B13000
|
unkown
|
page read and write
|
|
|
|
7FF5C3E49000
|
unkown
|
page readonly
|
|
|
|
21409773000
|
unkown
|
page read and write
|
|
|
|
2140B7FB000
|
unkown
|
page read and write
|
|
|
|
2140C310000
|
unkown
|
page read and write
|
|
|
|
2C03000
|
unkown
|
page readonly
|
|
|
|
192617A3000
|
unkown
|
page read and write
|
|
|
|
2105526D000
|
unkown
|
page read and write
|
|
|
|
2140B590000
|
unkown
|
page read and write
|
|
|
|
1A600FB4000
|
unkown
|
page read and write
|
|
|
|
1EFE2ED0000
|
unkown
|
page write copy
|
|
|
|
7FF59282B000
|
unkown
|
page readonly
|
|
|
|
4EEB37B000
|
unkown
|
page read and write
|
|
|
|
7FF5020EC000
|
unkown
|
page readonly
|
|
|
|
7FF51A78B000
|
unkown
|
page readonly
|
|
|
|
25C9584D000
|
unkown
|
page read and write
|
|
|
|
7FF54EA86000
|
unkown
|
page readonly
|
|
|
|
192617A0000
|
unkown
|
page read and write
|
|
|
|
19261788000
|
unkown
|
page read and write
|
|
|
|
7FF51A821000
|
unkown
|
page readonly
|
|
|
|
21409713000
|
unkown
|
page read and write
|
|
|
|
1A600600000
|
unkown
|
page read and write
|
|
|
|
7FF582A49000
|
unkown
|
page readonly
|
|
|
|
7FF522F6A000
|
unkown
|
page readonly
|
|
|
|
189B6A7E000
|
unkown
|
page read and write
|
|
|
|
1A6006DC000
|
unkown
|
page read and write
|
|
|
|
7FF582993000
|
unkown
|
page readonly
|
|
|
|
7FF51AA3E000
|
unkown
|
page readonly
|
|
|
|
1A6005E0000
|
unkown
|
page readonly
|
|
|
|
7FF592A7B000
|
unkown
|
page readonly
|
|
|
|
21EE82D0000
|
unkown
|
page readonly
|
|
|
|
23AE67B000
|
unkown
|
page read and write
|
|
|
|
24B6FC00000
|
unkown
|
page read and write
|
|
|
|
7FF516E18000
|
unkown
|
page readonly
|
|
|
|
2140B5D0000
|
unkown
|
page readonly
|
|
|
|
2C3C000
|
unkown
|
page readonly
|
|
|
|
1A60153C000
|
unkown
|
page read and write
|
|
|
|
214096AF000
|
unkown
|
page read and write
|
|
|
|
19261870000
|
unkown
|
page readonly
|
|
|
|
2140C410000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F0A000
|
unkown
|
page readonly
|
|
|
|
7FF54E7BE000
|
unkown
|
page readonly
|
|
|
|
2140B72A000
|
unkown
|
page read and write
|
|
|
|
4EEBDFB000
|
unkown
|
page read and write
|
|
|
|
2140C310000
|
unkown
|
page read and write
|
|
|
|
189B7060000
|
unkown
|
page readonly
|
|
|
|
214095D0000
|
unkown
|
page readonly
|
|
|
|
25C95829000
|
unkown
|
page read and write
|
|
|
|
7FF54ECC9000
|
unkown
|
page readonly
|
|
|
|
7FF54EC50000
|
unkown
|
page readonly
|
|
|
|
1A601402000
|
unkown
|
page read and write
|
|
|
|
156FDFA000
|
unkown
|
page read and write
|
|
|
|
214096C7000
|
unkown
|
page read and write
|
|
|
|
7FF523072000
|
unkown
|
page readonly
|
|
|
|
1EFE46C0000
|
unkown
|
page read and write
|
|
|
|
7FF51A829000
|
unkown
|
page readonly
|
|
|
|
1A600F6F000
|
unkown
|
page read and write
|
|
|
|
7FF5C3CBF000
|
unkown
|
page readonly
|
|
|
|
7FF51A993000
|
unkown
|
page readonly
|
|
|
|
7FF54ECAF000
|
unkown
|
page readonly
|
|
|
|
19261710000
|
unkown
|
page read and write
|
|
|
|
21055300000
|
unkown
|
page read and write
|
|
|
|
21409683000
|
unkown
|
page read and write
|
|
|
|
1A601402000
|
unkown
|
page read and write
|
|
|
|
214096B9000
|
unkown
|
page read and write
|
|
|
|
7FF51A9BC000
|
unkown
|
page readonly
|
|
|
|
13C95FA0000
|
unkown
|
page read and write
|
|
|
|
13C94667000
|
unkown
|
page read and write
|
|
|
|
7FF54ECBE000
|
unkown
|
page readonly
|
|
|
|
25C96540000
|
unkown
|
page readonly
|
|
|
|
24B6FD14000
|
unkown
|
page read and write
|
|
|
|
25C95849000
|
unkown
|
page read and write
|
|
|
|
7FF501CC6000
|
unkown
|
page readonly
|
|
|
|
4EEB67E000
|
unkown
|
page read and write
|
|
|
|
2140C110000
|
unkown
|
page read and write
|
|
|
|
2140B602000
|
unkown
|
page read and write
|
|
|
|
7FF52306A000
|
unkown
|
page readonly
|
|
|
|
8A0000
|
unkown
|
page readonly
|
|
|
|
2140B70D000
|
unkown
|
page read and write
|
|
|
|
290C000
|
unkown
|
page readonly
|
|
|
|
2140C010000
|
unkown
|
page read and write
|
|
|
|
21055235000
|
unkown
|
page read and write
|
|
|
|
2140B843000
|
unkown
|
page read and write
|
|
|
|
7FF501E77000
|
unkown
|
page readonly
|
|
|
|
21409730000
|
unkown
|
page read and write
|
|
|
|
7116B7F000
|
unkown
|
page read and write
|
|
|
|
7FF54EA84000
|
unkown
|
page readonly
|
|
|
|
1A6005E0000
|
unkown
|
page read and write
|
|
|
|
2BF9000
|
unkown
|
page readonly
|
|
|
|
8E0000
|
heap private
|
page read and write
|
|
|
|
7FF54ED42000
|
unkown
|
page readonly
|
|
|
|
7FF5C3EEB000
|
unkown
|
page readonly
|
|
|
|
7FF51A9D0000
|
unkown
|
page readonly
|
|
|
|
7116977000
|
unkown
|
page read and write
|
|
|
|
7FF5C40E2000
|
unkown
|
page readonly
|
|
|
|
24B6FBC0000
|
heap default
|
page read and write
|
|
|
|
7FF5C3CBA000
|
unkown
|
page readonly
|
|
|
|
7FF5DB5CC000
|
unkown
|
page readonly
|
|
|
|
2140C610000
|
unkown
|
page read and write
|
|
|
|
214096E2000
|
unkown
|
page read and write
|
|
|
|
7FF501E80000
|
unkown
|
page readonly
|
|
|
|
7FF5C3CAC000
|
unkown
|
page readonly
|
|
|
|
7FF51660D000
|
unkown
|
page readonly
|
|
|
|
711638E000
|
unkown
|
page read and write
|
|
|
|
7FF54E867000
|
unkown
|
page readonly
|
|
|
|
7FF592A10000
|
unkown
|
page readonly
|
|
|
|
21055202000
|
unkown
|
page read and write
|
|
|
|
7FF522FD4000
|
unkown
|
page readonly
|
|
|
|
7FF522FF9000
|
unkown
|
page readonly
|
|
|
|
13C94667000
|
unkown
|
page read and write
|
|
|
|
1A600657000
|
unkown
|
page read and write
|
|
|
|
4EEBA7A000
|
unkown
|
page read and write
|
|
|
|
7FF54EC2F000
|
unkown
|
page readonly
|
|
|
|
7FF54EC3C000
|
unkown
|
page readonly
|
|
|
|
7FF582A2E000
|
unkown
|
page readonly
|
|
|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
711628B000
|
unkown
|
page read and write
|
|
|
|
21055302000
|
unkown
|
page read and write
|
|
|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
21EE7F13000
|
unkown
|
page read and write
|
|
|
|
7FF5922D1000
|
unkown
|
page readonly
|
|
|
|
81266F9000
|
unkown
|
page read and write
|
|
|
|
23AE375000
|
unkown
|
page read and write
|
|
|
|
7FF522FC4000
|
unkown
|
page readonly
|
|
|
|
7FF54EC5B000
|
unkown
|
page readonly
|
|
|
|
4EEBC7B000
|
unkown
|
page read and write
|
|
|
|
7FF51AA1A000
|
unkown
|
page readonly
|
|
|
|
2140B942000
|
unkown
|
page read and write
|
|
|
|
4EEC07C000
|
unkown
|
page read and write
|
|
|
|
7FF522E7B000
|
unkown
|
page readonly
|
|
|
|
7FF54EB4E000
|
unkown
|
page readonly
|
|
|
|
214096D4000
|
unkown
|
page read and write
|
|
|
|
1A6006A4000
|
unkown
|
page read and write
|
|
|
|
7FF51A796000
|
unkown
|
page readonly
|
|
|
|
7FF522FAC000
|
unkown
|
page readonly
|
|
|
|
7FF5B2D6D000
|
unkown
|
page readonly
|
|
|
|
25C956C0000
|
heap private
|
page read and write
|
|
|
|
2C40000
|
unkown
|
page readonly
|
|
|
|
7FF516E0E000
|
unkown
|
page readonly
|
|
|
|
7FF54EC9A000
|
unkown
|
page readonly
|
|
|
|
1A600F5F000
|
unkown
|
page read and write
|
|
|
|
1A60159B000
|
unkown
|
page read and write
|
|
|
|
1A600FA1000
|
unkown
|
page read and write
|
|
|
|
23AE478000
|
unkown
|
page read and write
|
|
|
|
7FF501FFE000
|
unkown
|
page readonly
|
|
|
|
7FF522DD1000
|
unkown
|
page readonly
|
|
|
|
21EE7F02000
|
unkown
|
page read and write
|
|
|
|
1A600613000
|
unkown
|
page read and write
|
|
|
|
1A600F44000
|
unkown
|
page read and write
|
|
|
|
7FF522F80000
|
unkown
|
page readonly
|
|
|
|
7FF592951000
|
unkown
|
page readonly
|
|
|
|
7FF592A6A000
|
unkown
|
page readonly
|
|
|
|
189B6A8E000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E57000
|
unkown
|
page readonly
|
|
|
|
1A600470000
|
heap default
|
page read and write
|
|
|
|
1A600655000
|
unkown
|
page read and write
|
|
|
|
23AE577000
|
unkown
|
page read and write
|
|
|
|
7FF516EA1000
|
unkown
|
page readonly
|
|
|
|
7FF54E9C7000
|
unkown
|
page readonly
|
|
|
|
1A60143C000
|
unkown
|
page read and write
|
|
|
|
1A600F91000
|
unkown
|
page read and write
|
|
|
|
7FF516DC7000
|
unkown
|
page readonly
|
|
|
|
13C944C0000
|
heap default
|
page read and write
|
|
|
|
23AE8FF000
|
unkown
|
page read and write
|
|
|
|
25C95900000
|
unkown
|
page read and write
|
|
|
|
7FF51AA24000
|
unkown
|
page readonly
|
|
|
|
7FF516EA2000
|
unkown
|
page readonly
|
|
|
|
7FF51A99F000
|
unkown
|
page readonly
|
|
|
|
13C94629000
|
unkown
|
page read and write
|
|
|
|
21409735000
|
unkown
|
page read and write
|
|
|
|
7FF50216E000
|
unkown
|
page readonly
|
|
|
|
13C9466A000
|
unkown
|
page read and write
|
|
|
|
2140966C000
|
unkown
|
page read and write
|
|
|
|
13C94602000
|
unkown
|
page read and write
|
|
|
|
214096B7000
|
unkown
|
page read and write
|
|
|
|
2140B900000
|
unkown
|
page read and write
|
|
|
|
7FF5B2CC3000
|
unkown
|
page readonly
|
|
There are 1022 hidden memdumps, click here to show them.