Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
INDIV_PAYM_633854-506518488.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$INDIV_PAYM_633854-506518488.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\4B1D4E11-6555-417E-8757-1FD44D44B005
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\561637EF.png
|
PNG image data, 168 x 72, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\6496A6D2.png
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\862636D5.png
|
PNG image data, 178 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\AFC11124.png
|
PNG image data, 264 x 113, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F692DA26.png
|
PNG image data, 288 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\70D40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\jbeiwmje.dll
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://loki.delve.office.com/api/v1/configuration/officewin32/
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
185.180.199.125
|
unknown
|
Netherlands
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
,p?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
-p?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C948
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CF53
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4D0AB
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
$a?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 51 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1BA2E100000
|
unkown
|
page read and write
|
|
|
|
1BA2F410000
|
unkown
|
page read and write
|
|
|
|
7FF5C3BB0000
|
unkown
|
page readonly
|
|
|
|
284C000
|
unkown
|
page readonly
|
|
|
|
7FF585CA4000
|
unkown
|
page readonly
|
|
|
|
1BA2E183000
|
unkown
|
page read and write
|
|
|
|
1F14A553000
|
unkown
|
page read and write
|
|
|
|
7FF535D94000
|
unkown
|
page readonly
|
|
|
|
7FF5C3BC7000
|
unkown
|
page readonly
|
|
|
|
B6CC17E000
|
unkown
|
page read and write
|
|
|
|
28A6000
|
unkown
|
page readonly
|
|
|
|
51C000
|
unkown
|
page read and write
|
|
|
|
3E6157B000
|
unkown
|
page read and write
|
|
|
|
1950C080000
|
heap private
|
page read and write
|
|
|
|
2ADCE602000
|
unkown
|
page read and write
|
|
|
|
CDEFC78000
|
unkown
|
page read and write
|
|
|
|
1950C313000
|
unkown
|
page read and write
|
|
|
|
7FF5AB140000
|
unkown
|
page readonly
|
|
|
|
7FF5A0C9D000
|
unkown
|
page readonly
|
|
|
|
1BA2E183000
|
unkown
|
page read and write
|
|
|
|
1BA2BED5000
|
unkown
|
page read and write
|
|
|
|
7FF5A1531000
|
unkown
|
page readonly
|
|
|
|
1BA2DD10000
|
unkown
|
page read and write
|
|
|
|
7FF5BEC75000
|
unkown
|
page readonly
|
|
|
|
287F000
|
unkown
|
page readonly
|
|
|
|
1DC3A630000
|
unkown
|
page readonly
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
1F149C54000
|
unkown
|
page read and write
|
|
|
|
7FF5A1403000
|
unkown
|
page readonly
|
|
|
|
3E6167A000
|
unkown
|
page read and write
|
|
|
|
1BA2DF27000
|
unkown
|
page read and write
|
|
|
|
7FF5C3AB3000
|
unkown
|
page readonly
|
|
|
|
3E6137B000
|
unkown
|
page read and write
|
|
|
|
1BA2E282000
|
unkown
|
page read and write
|
|
|
|
7FF5A1206000
|
unkown
|
page readonly
|
|
|
|
54D4BF9000
|
unkown
|
page read and write
|
|
|
|
1BA2BF82000
|
unkown
|
page read and write
|
|
|
|
7FF53FE97000
|
unkown
|
page readonly
|
|
|
|
7FF5842E0000
|
unkown
|
page readonly
|
|
|
|
7FF5AB4D3000
|
unkown
|
page readonly
|
|
|
|
7FF5A14AE000
|
unkown
|
page readonly
|
|
|
|
2918000
|
unkown
|
page readonly
|
|
|
|
7FF535D5B000
|
unkown
|
page readonly
|
|
|
|
1950C200000
|
unkown
|
page read and write
|
|
|
|
7FF5A1478000
|
unkown
|
page readonly
|
|
|
|
1BA2BF2E000
|
unkown
|
page read and write
|
|
|
|
1F14A560000
|
unkown
|
page read and write
|
|
|
|
1F149CB0000
|
unkown
|
page read and write
|
|
|
|
1F14A58E000
|
unkown
|
page read and write
|
|
|
|
1BA2BEEC000
|
unkown
|
page read and write
|
|
|
|
7FF5AB47E000
|
unkown
|
page readonly
|
|
|
|
1F149CA6000
|
unkown
|
page read and write
|
|
|
|
7FF5C3C04000
|
unkown
|
page readonly
|
|
|
|
2ADCDE88000
|
unkown
|
page read and write
|
|
|
|
7FF5A10FC000
|
unkown
|
page readonly
|
|
|
|
2ADCDE51000
|
unkown
|
page read and write
|
|
|
|
1E5FDE00000
|
unkown
|
page readonly
|
|
|
|
34246DA000
|
unkown
|
page read and write
|
|
|
|
7FF585BEF000
|
unkown
|
page readonly
|
|
|
|
7FF5C3CA2000
|
unkown
|
page readonly
|
|
|
|
CDEFD78000
|
unkown
|
page read and write
|
|
|
|
1F149C29000
|
unkown
|
page read and write
|
|
|
|
218A7E00000
|
unkown
|
page readonly
|
|
|
|
2877000
|
unkown
|
page readonly
|
|
|
|
7FF5A1265000
|
unkown
|
page readonly
|
|
|
|
1F14A541000
|
unkown
|
page read and write
|
|
|
|
1AA43E60000
|
unkown
|
page readonly
|
|
|
|
1F14A330000
|
unkown
|
page write copy
|
|
|
|
1BA2E143000
|
unkown
|
page read and write
|
|
|
|
1BA2BF71000
|
unkown
|
page read and write
|
|
|
|
7FF583C33000
|
unkown
|
page readonly
|
|
|
|
2ADCDE49000
|
unkown
|
page read and write
|
|
|
|
1F149C65000
|
unkown
|
page read and write
|
|
|
|
285C000
|
unkown
|
page readonly
|
|
|
|
1F14A5B1000
|
unkown
|
page read and write
|
|
|
|
1BA2BE29000
|
unkown
|
page read and write
|
|
|
|
1BA2F310000
|
unkown
|
page read and write
|
|
|
|
1AA43F80000
|
unkown
|
page readonly
|
|
|
|
24F26900000
|
unkown
|
page read and write
|
|
|
|
1F149C63000
|
unkown
|
page read and write
|
|
|
|
7FF5A829E000
|
unkown
|
page readonly
|
|
|
|
7FF5843D2000
|
unkown
|
page readonly
|
|
|
|
7FF54018B000
|
unkown
|
page readonly
|
|
|
|
7FF5A7F60000
|
unkown
|
page readonly
|
|
|
|
7FF5A83D7000
|
unkown
|
page readonly
|
|
|
|
3E619FE000
|
unkown
|
page read and write
|
|
|
|
7FF5BE7A9000
|
unkown
|
page readonly
|
|
|
|
1BA2E143000
|
unkown
|
page read and write
|
|
|
|
1DC3A900000
|
unkown
|
page read and write
|
|
|
|
7FF5A81F1000
|
unkown
|
page readonly
|
|
|
|
1950C202000
|
unkown
|
page read and write
|
|
|
|
1F14A592000
|
unkown
|
page read and write
|
|
|
|
7FF585897000
|
unkown
|
page readonly
|
|
|
|
7FF5C3AAB000
|
unkown
|
page readonly
|
|
|
|
1E5FDC29000
|
unkown
|
page read and write
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
2747000
|
unkown
|
page readonly
|
|
|
|
D649F7F000
|
unkown
|
page read and write
|
|
|
|
1F14A582000
|
unkown
|
page read and write
|
|
|
|
1BA2DD20000
|
heap private
|
page read and write
|
|
|
|
1F149C13000
|
unkown
|
page read and write
|
|
|
|
7FF5C3A09000
|
unkown
|
page readonly
|
|
|
|
7FF5BEA36000
|
unkown
|
page readonly
|
|
|
|
1BA2F510000
|
unkown
|
page read and write
|
|
|
|
7FF5AB300000
|
unkown
|
page readonly
|
|
|
|
9B0000
|
heap default
|
page read and write
|
|
|
|
7FF5400C3000
|
unkown
|
page readonly
|
|
|
|
1BA2F610000
|
unkown
|
page read and write
|
|
|
|
7FF5C3C94000
|
unkown
|
page readonly
|
|
|
|
3E6127A000
|
unkown
|
page read and write
|
|
|
|
1F14A594000
|
unkown
|
page read and write
|
|
|
|
283B000
|
unkown
|
page readonly
|
|
|
|
7FF535D3A000
|
unkown
|
page readonly
|
|
|
|
1BA2DF36000
|
unkown
|
page read and write
|
|
|
|
7FF535DCD000
|
unkown
|
page readonly
|
|
|
|
2912000
|
unkown
|
page readonly
|
|
|
|
7FF585C31000
|
unkown
|
page readonly
|
|
|
|
7FF5AB5C4000
|
unkown
|
page readonly
|
|
|
|
1BA2DF52000
|
unkown
|
page read and write
|
|
|
|
7FF5401C5000
|
unkown
|
page readonly
|
|
|
|
1F14A5AE000
|
unkown
|
page read and write
|
|
|
|
8A1000
|
heap default
|
page read and write
|
|
|
|
1F149B70000
|
heap default
|
page read and write
|
|
|
|
1AA43E50000
|
heap default
|
page read and write
|
|
|
|
C13C92E000
|
unkown
|
page read and write
|
|
|
|
1AA45AA0000
|
unkown
|
page readonly
|
|
|
|
7FF535C31000
|
unkown
|
page readonly
|
|
|
|
1BA2F310000
|
unkown
|
page read and write
|
|
|
|
7FF58588A000
|
unkown
|
page readonly
|
|
|
|
1BA2DF29000
|
unkown
|
page read and write
|
|
|
|
1BA2DF2F000
|
unkown
|
page read and write
|
|
|
|
2ADCDF02000
|
unkown
|
page read and write
|
|
|
|
1E5FDC02000
|
unkown
|
page read and write
|
|
|
|
7FF5C3BDC000
|
unkown
|
page readonly
|
|
|
|
218A8600000
|
unkown
|
page readonly
|
|
|
|
CF0B7FF000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5F9000
|
unkown
|
page readonly
|
|
|
|
7FF58597B000
|
unkown
|
page readonly
|
|
|
|
2ADCE800000
|
unkown
|
page readonly
|
|
|
|
7FF5BE78F000
|
unkown
|
page readonly
|
|
|
|
D649E77000
|
unkown
|
page read and write
|
|
|
|
7FF5AB57A000
|
unkown
|
page readonly
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
20311AD5000
|
heap private
|
page read and write
|
|
|
|
1F14A592000
|
unkown
|
page read and write
|
|
|
|
1F14A592000
|
unkown
|
page read and write
|
|
|
|
1BA2DF52000
|
unkown
|
page read and write
|
|
|
|
1BA2DF2F000
|
unkown
|
page read and write
|
|
|
|
1F14A3B0000
|
unkown
|
page readonly
|
|
|
|
1DC3A5C0000
|
heap private
|
page read and write
|
|
|
|
7FF5BEC9F000
|
unkown
|
page readonly
|
|
|
|
B6CC07B000
|
unkown
|
page read and write
|
|
|
|
20311940000
|
unkown
|
page read and write
|
|
|
|
7FF54020A000
|
unkown
|
page readonly
|
|
|
|
7FF535BF3000
|
unkown
|
page readonly
|
|
|
|
7FF5C3B50000
|
unkown
|
page readonly
|
|
|
|
1950C0F0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2F6000
|
unkown
|
page readonly
|
|
|
|
4400000
|
heap private
|
page read and write
|
|
|
|
7FF5A152A000
|
unkown
|
page readonly
|
|
|
|
24F26790000
|
unkown
|
page readonly
|
|
|
|
D649AFE000
|
unkown
|
page read and write
|
|
|
|
2ADCDE13000
|
unkown
|
page read and write
|
|
|
|
1F14A564000
|
unkown
|
page read and write
|
|
|
|
7FF5BE92C000
|
unkown
|
page readonly
|
|
|
|
468AEFF000
|
unkown
|
page read and write
|
|
|
|
1BA2DF52000
|
unkown
|
page read and write
|
|
|
|
1F14A563000
|
unkown
|
page read and write
|
|
|
|
1F14A5B3000
|
unkown
|
page read and write
|
|
|
|
7FF5BE4B0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE694000
|
unkown
|
page readonly
|
|
|
|
7FF5BE4A7000
|
unkown
|
page readonly
|
|
|
|
7FF5A1494000
|
unkown
|
page readonly
|
|
|
|
1BA2BEE3000
|
unkown
|
page read and write
|
|
|
|
7FF5BE683000
|
unkown
|
page readonly
|
|
|
|
1BA2BE7D000
|
unkown
|
page read and write
|
|
|
|
24F26889000
|
unkown
|
page read and write
|
|
|
|
7FF584348000
|
unkown
|
page readonly
|
|
|
|
1950C26A000
|
unkown
|
page read and write
|
|
|
|
7FF5C3BFA000
|
unkown
|
page readonly
|
|
|
|
1DC3AA00000
|
unkown
|
page readonly
|
|
|
|
7FF5A83A0000
|
unkown
|
page readonly
|
|
|
|
3E60F7F000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5B7000
|
unkown
|
page readonly
|
|
|
|
7FF58588F000
|
unkown
|
page readonly
|
|
|
|
9C0000
|
unkown
|
page readonly
|
|
|
|
20311940000
|
unkown
|
page read and write
|
|
|
|
24F26813000
|
unkown
|
page read and write
|
|
|
|
1F14AA02000
|
unkown
|
page read and write
|
|
|
|
7FF5BE774000
|
unkown
|
page readonly
|
|
|
|
7FF5BE62E000
|
unkown
|
page readonly
|
|
|
|
1F14A580000
|
unkown
|
page read and write
|
|
|
|
1E5FDA20000
|
heap private
|
page read and write
|
|
|
|
7646B7F000
|
unkown
|
page read and write
|
|
|
|
1F14A58D000
|
unkown
|
page read and write
|
|
|
|
1BA2BE7B000
|
unkown
|
page read and write
|
|
|
|
24F267B0000
|
unkown
|
page read and write
|
|
|
|
1E5FDC56000
|
unkown
|
page read and write
|
|
|
|
1BA2E202000
|
unkown
|
page read and write
|
|
|
|
7FF5401EF000
|
unkown
|
page readonly
|
|
|
|
7FF535DB8000
|
unkown
|
page readonly
|
|
|
|
7FF540214000
|
unkown
|
page readonly
|
|
|
|
1E5FDC13000
|
unkown
|
page read and write
|
|
|
|
1F14A390000
|
unkown
|
page read and write
|
|
|
|
1F14A5B5000
|
unkown
|
page read and write
|
|
|
|
7FF53FF98000
|
unkown
|
page readonly
|
|
|
|
7FF53FD99000
|
unkown
|
page readonly
|
|
|
|
7FF5BEC6E000
|
unkown
|
page readonly
|
|
|
|
2ADCDE47000
|
unkown
|
page read and write
|
|
|
|
1BA2DF72000
|
unkown
|
page read and write
|
|
|
|
7646AFF000
|
unkown
|
page read and write
|
|
|
|
2883000
|
unkown
|
page readonly
|
|
|
|
3E60E7A000
|
unkown
|
page read and write
|
|
|
|
1F14AA54000
|
unkown
|
page read and write
|
|
|
|
1AA43F30000
|
unkown
|
page write copy
|
|
|
|
1E5FDD02000
|
unkown
|
page read and write
|
|
|
|
1F14A58D000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page readonly
|
|
|
|
1F14A53F000
|
unkown
|
page read and write
|
|
|
|
1F14AA02000
|
unkown
|
page read and write
|
|
|
|
7FF5A8304000
|
unkown
|
page readonly
|
|
|
|
1BA2E402000
|
unkown
|
page read and write
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
24F2684B000
|
unkown
|
page read and write
|
|
|
|
7FF585C04000
|
unkown
|
page readonly
|
|
|
|
24F26902000
|
unkown
|
page read and write
|
|
|
|
218A7B70000
|
unkown
|
page readonly
|
|
|
|
1F14A57B000
|
unkown
|
page read and write
|
|
|
|
1BA2BE70000
|
unkown
|
page read and write
|
|
|
|
7FF5BE4EB000
|
unkown
|
page readonly
|
|
|
|
1BA2DF34000
|
unkown
|
page read and write
|
|
|
|
7FF53FFE5000
|
unkown
|
page readonly
|
|
|
|
252C000
|
unkown
|
page readonly
|
|
|
|
7FF5BE6FB000
|
unkown
|
page readonly
|
|
|
|
7FF5A7F75000
|
unkown
|
page readonly
|
|
|
|
7FF5BE798000
|
unkown
|
page readonly
|
|
|
|
7FF5BED62000
|
unkown
|
page readonly
|
|
|
|
7FF5BE821000
|
unkown
|
page readonly
|
|
|
|
7FF5C3C29000
|
unkown
|
page readonly
|
|
|
|
7646A79000
|
unkown
|
page read and write
|
|
|
|
1F149C61000
|
unkown
|
page read and write
|
|
|
|
1BA2DF52000
|
unkown
|
page read and write
|
|
|
|
1BA2DDB0000
|
unkown
|
page read and write
|
|
|
|
1BA2DDA0000
|
unkown
|
page read and write
|
|
|
|
7FF5BECD8000
|
unkown
|
page readonly
|
|
|
|
7FF5C3C0E000
|
unkown
|
page readonly
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
2845000
|
unkown
|
page readonly
|
|
|
|
7FF5AB585000
|
unkown
|
page readonly
|
|
|
|
1AA4403F000
|
unkown
|
page read and write
|
|
|
|
1BA2F010000
|
unkown
|
page read and write
|
|
|
|
1F14A594000
|
unkown
|
page read and write
|
|
|
|
20311916000
|
unkown
|
page read and write
|
|
|
|
1BA2C000000
|
unkown
|
page readonly
|
|
|
|
2D00000
|
unkown
|
page readonly
|
|
|
|
1AA44029000
|
unkown
|
page read and write
|
|
|
|
7FF5C396B000
|
unkown
|
page readonly
|
|
|
|
7FF58433E000
|
unkown
|
page readonly
|
|
|
|
1BA2DFA4000
|
unkown
|
page read and write
|
|
|
|
1BA2BF30000
|
unkown
|
page read and write
|
|
|
|
1950C234000
|
unkown
|
page read and write
|
|
|
|
1950C26A000
|
unkown
|
page read and write
|
|
|
|
1F14A580000
|
unkown
|
page read and write
|
|
|
|
1950C300000
|
unkown
|
page read and write
|
|
|
|
B6CC2FF000
|
unkown
|
page read and write
|
|
|
|
7FF540236000
|
unkown
|
page readonly
|
|
|
|
20311800000
|
unkown
|
page readonly
|
|
|
|
28AB000
|
unkown
|
page readonly
|
|
|
|
2ADCEB40000
|
unkown
|
page readonly
|
|
|
|
1AA459A0000
|
unkown
|
page read and write
|
|
|
|
CDEF47E000
|
unkown
|
page read and write
|
|
|
|
1BA2BE99000
|
unkown
|
page read and write
|
|
|
|
7FF535AC7000
|
unkown
|
page readonly
|
|
|
|
24F27540000
|
unkown
|
page readonly
|
|
|
|
3E613FA000
|
unkown
|
page read and write
|
|
|
|
7FF5401BA000
|
unkown
|
page readonly
|
|
|
|
7FF5AB597000
|
unkown
|
page readonly
|
|
|
|
1950C23F000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5D4000
|
unkown
|
page readonly
|
|
|
|
1E5FDA80000
|
heap default
|
page read and write
|
|
|
|
1BA2DF50000
|
unkown
|
page read and write
|
|
|
|
2923000
|
unkown
|
page readonly
|
|
|
|
1BA2BE67000
|
unkown
|
page read and write
|
|
|
|
1E5FDC71000
|
unkown
|
page read and write
|
|
|
|
CDEF7F7000
|
unkown
|
page read and write
|
|
|
|
7FF5A838C000
|
unkown
|
page readonly
|
|
|
|
1F149CD5000
|
unkown
|
page read and write
|
|
|
|
1E5FDD14000
|
unkown
|
page read and write
|
|
|
|
1F14A541000
|
unkown
|
page read and write
|
|
|
|
1950C0E0000
|
heap default
|
page read and write
|
|
|
|
3E614FB000
|
unkown
|
page read and write
|
|
|
|
218A7B60000
|
unkown
|
page readonly
|
|
|
|
7FF5A143E000
|
unkown
|
page readonly
|
|
|
|
1BA2DFF0000
|
unkown
|
page read and write
|
|
|
|
7FF5A838A000
|
unkown
|
page readonly
|
|
|
|
7FF5BE81A000
|
unkown
|
page readonly
|
|
|
|
7FF5A1445000
|
unkown
|
page readonly
|
|
|
|
54D4A7E000
|
unkown
|
page read and write
|
|
|
|
28A2000
|
unkown
|
page readonly
|
|
|
|
3E60AEB000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5DF000
|
unkown
|
page readonly
|
|
|
|
1DC3A700000
|
unkown
|
page write copy
|
|
|
|
1F149ED0000
|
unkown
|
page readonly
|
|
|
|
7FF5BEC7B000
|
unkown
|
page readonly
|
|
|
|
7FF5A839E000
|
unkown
|
page readonly
|
|
|
|
7FF5BE581000
|
unkown
|
page readonly
|
|
|
|
1F14A58D000
|
unkown
|
page read and write
|
|
|
|
1E5FDC71000
|
unkown
|
page read and write
|
|
|
|
7FF53FF9F000
|
unkown
|
page readonly
|
|
|
|
1F14A380000
|
unkown
|
page readonly
|
|
|
|
1BA2BE56000
|
unkown
|
page read and write
|
|
|
|
20311A00000
|
unkown
|
page read and write
|
|
|
|
7FF584359000
|
unkown
|
page readonly
|
|
|
|
1BA2E302000
|
unkown
|
page read and write
|
|
|
|
7FF53FF7B000
|
unkown
|
page readonly
|
|
|
|
2ADCDDD0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE611000
|
unkown
|
page readonly
|
|
|
|
2891000
|
unkown
|
page readonly
|
|
|
|
1BA2BDA0000
|
heap default
|
page read and write
|
|
|
|
218A7C13000
|
unkown
|
page read and write
|
|
|
|
1BA2BDB0000
|
unkown
|
page write copy
|
|
|
|
1BA2E382000
|
unkown
|
page read and write
|
|
|
|
7FF5BECED000
|
unkown
|
page readonly
|
|
|
|
1BA2F410000
|
unkown
|
page read and write
|
|
|
|
1DC3A790000
|
unkown
|
page read and write
|
|
|
|
1F14A592000
|
unkown
|
page read and write
|
|
|
|
24F26780000
|
heap default
|
page read and write
|
|
|
|
218A7A80000
|
heap default
|
page read and write
|
|
|
|
1BA2DFB8000
|
unkown
|
page read and write
|
|
|
|
7FF585CAA000
|
unkown
|
page readonly
|
|
|
|
7FF5BE4F6000
|
unkown
|
page readonly
|
|
|
|
1E5FDC6B000
|
unkown
|
page read and write
|
|
|
|
7FF5BECC4000
|
unkown
|
page readonly
|
|
|
|
1F14A580000
|
unkown
|
page read and write
|
|
|
|
7FF5BE571000
|
unkown
|
page readonly
|
|
|
|
1F14AA61000
|
unkown
|
page read and write
|
|
|
|
7FF5A82F3000
|
unkown
|
page readonly
|
|
|
|
7FF5A8416000
|
unkown
|
page readonly
|
|
|
|
1F14A5A8000
|
unkown
|
page read and write
|
|
|
|
7FF5BEC10000
|
unkown
|
page readonly
|
|
|
|
7FF540239000
|
unkown
|
page readonly
|
|
|
|
CDEFA7F000
|
unkown
|
page read and write
|
|
|
|
7FF5BEB73000
|
unkown
|
page readonly
|
|
|
|
7FF5BE4CD000
|
unkown
|
page readonly
|
|
|
|
7FF540204000
|
unkown
|
page readonly
|
|
|
|
1F14A557000
|
unkown
|
page read and write
|
|
|
|
1F14A592000
|
unkown
|
page read and write
|
|
|
|
3E6197B000
|
unkown
|
page read and write
|
|
|
|
1BA2F210000
|
unkown
|
page read and write
|
|
|
|
CF0B2FE000
|
unkown
|
page read and write
|
|
|
|
C13C8AC000
|
unkown
|
page read and write
|
|
|
|
1F14A594000
|
unkown
|
page read and write
|
|
|
|
2832000
|
unkown
|
page readonly
|
|
|
|
1DC3A874000
|
unkown
|
page read and write
|
|
|
|
24F26AD0000
|
unkown
|
page readonly
|
|
|
|
7FF535D67000
|
unkown
|
page readonly
|
|
|
|
7FF5C387F000
|
unkown
|
page readonly
|
|
|
|
7FF5A14B9000
|
unkown
|
page readonly
|
|
|
|
7FF5BE29E000
|
unkown
|
page readonly
|
|
|
|
1AA43DF0000
|
heap private
|
page read and write
|
|
|
|
1F14A520000
|
unkown
|
page read and write
|
|
|
|
1F14A592000
|
unkown
|
page read and write
|
|
|
|
1F14A515000
|
unkown
|
page read and write
|
|
|
|
1F149C00000
|
unkown
|
page read and write
|
|
|
|
7FF5C3CA1000
|
unkown
|
page readonly
|
|
|
|
1BA2BF02000
|
unkown
|
page read and write
|
|
|
|
1F14A557000
|
unkown
|
page read and write
|
|
|
|
CF0B5FF000
|
unkown
|
page read and write
|
|
|
|
3E6107A000
|
unkown
|
page read and write
|
|
|
|
1BA2BE97000
|
unkown
|
page read and write
|
|
|
|
7FF5BECE6000
|
unkown
|
page readonly
|
|
|
|
7FF5401C0000
|
unkown
|
page readonly
|
|
|
|
20311AD0000
|
heap private
|
page read and write
|
|
|
|
1F14A548000
|
unkown
|
page read and write
|
|
|
|
7FF5BE5D3000
|
unkown
|
page readonly
|
|
|
|
7FF5BED5A000
|
unkown
|
page readonly
|
|
|
|
1BA2DF50000
|
unkown
|
page read and write
|
|
|
|
7FF540160000
|
unkown
|
page readonly
|
|
|
|
1BA2DFB8000
|
unkown
|
page read and write
|
|
|
|
7FF54015C000
|
unkown
|
page readonly
|
|
|
|
1E5FDC00000
|
unkown
|
page read and write
|
|
|
|
7FF58430F000
|
unkown
|
page readonly
|
|
|
|
3E61A7E000
|
unkown
|
page read and write
|
|
|
|
7FF535D50000
|
unkown
|
page readonly
|
|
|
|
7FF5A8408000
|
unkown
|
page readonly
|
|
|
|
1BA2F310000
|
unkown
|
page read and write
|
|
|
|
7FF5BEB6B000
|
unkown
|
page readonly
|
|
|
|
7FF540011000
|
unkown
|
page readonly
|
|
|
|
7FF585C39000
|
unkown
|
page readonly
|
|
|
|
7FF53FE7C000
|
unkown
|
page readonly
|
|
|
|
1BA2BF40000
|
unkown
|
page read and write
|
|
|
|
7FF535CB4000
|
unkown
|
page readonly
|
|
|
|
B6CC0FE000
|
unkown
|
page read and write
|
|
|
|
7FF5AB580000
|
unkown
|
page readonly
|
|
|
|
7FF585C36000
|
unkown
|
page readonly
|
|
|
|
7FF5BEAC9000
|
unkown
|
page readonly
|
|
|
|
1950C26A000
|
unkown
|
page read and write
|
|
|
|
7FF5AACA0000
|
unkown
|
page readonly
|
|
|
|
7FF5AB5EE000
|
unkown
|
page readonly
|
|
|
|
7FF5A8484000
|
unkown
|
page readonly
|
|
|
|
1BA2DFEF000
|
unkown
|
page read and write
|
|
|
|
1F14A390000
|
unkown
|
page read and write
|
|
|
|
468AE7E000
|
unkown
|
page read and write
|
|
|
|
7FF5A83AB000
|
unkown
|
page readonly
|
|
|
|
1F149B90000
|
unkown
|
page readonly
|
|
|
|
1950C229000
|
unkown
|
page read and write
|
|
|
|
1BA2BD40000
|
heap private
|
page read and write
|
|
|
|
1950C1C0000
|
unkown
|
page readonly
|
|
|
|
7FF5BEB51000
|
unkown
|
page readonly
|
|
|
|
7FF535D4A000
|
unkown
|
page readonly
|
|
|
|
1AA44013000
|
unkown
|
page read and write
|
|
|
|
7FF5BEA2B000
|
unkown
|
page readonly
|
|
|
|
1BA2DFFD000
|
unkown
|
page read and write
|
|
|
|
7FF54018F000
|
unkown
|
page readonly
|
|
|
|
1BA2E300000
|
unkown
|
page read and write
|
|
|
|
218A7C87000
|
unkown
|
page read and write
|
|
|
|
28F1000
|
unkown
|
page readonly
|
|
|
|
218A8402000
|
unkown
|
page read and write
|
|
|
|
1BA2DCF0000
|
unkown
|
page readonly
|
|
|
|
7FF5C386C000
|
unkown
|
page readonly
|
|
|
|
7FF5C39D1000
|
unkown
|
page readonly
|
|
|
|
7FF58587C000
|
unkown
|
page readonly
|
|
|
|
2031192F000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5AC000
|
unkown
|
page readonly
|
|
|
|
54D4AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5C340D000
|
unkown
|
page readonly
|
|
|
|
7FF5BEC6A000
|
unkown
|
page readonly
|
|
|
|
1F14A580000
|
unkown
|
page read and write
|
|
|
|
7FF53FA1D000
|
unkown
|
page readonly
|
|
|
|
7FF5AB4CD000
|
unkown
|
page readonly
|
|
|
|
1BA2BECF000
|
unkown
|
page read and write
|
|
|
|
7FF5A83CC000
|
unkown
|
page readonly
|
|
|
|
342475E000
|
unkown
|
page read and write
|
|
|
|
2031193F000
|
unkown
|
page read and write
|
|
|
|
1BA2DD80000
|
unkown
|
page read and write
|
|
|
|
7FF535E3A000
|
unkown
|
page readonly
|
|
|
|
54D4B7A000
|
unkown
|
page read and write
|
|
|
|
7FF5BE6FF000
|
unkown
|
page readonly
|
|
|
|
7FF5A148A000
|
unkown
|
page readonly
|
|
|
|
2ADCDDE0000
|
unkown
|
page readonly
|
|
|
|
24F26720000
|
heap private
|
page read and write
|
|
|
|
1F14A583000
|
unkown
|
page read and write
|
|
|
|
7FF5A13E0000
|
unkown
|
page readonly
|
|
|
|
1BA2DF00000
|
unkown
|
page read and write
|
|
|
|
1F149CA6000
|
unkown
|
page read and write
|
|
|
|
1BA2E342000
|
unkown
|
page read and write
|
|
|
|
1F149C5F000
|
unkown
|
page read and write
|
|
|
|
1BA2E012000
|
unkown
|
page read and write
|
|
|
|
7FF5A1440000
|
unkown
|
page readonly
|
|
|
|
C13D07F000
|
unkown
|
page read and write
|
|
|
|
C13CE7E000
|
unkown
|
page read and write
|
|
|
|
1E5FDC71000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5F6000
|
unkown
|
page readonly
|
|
|
|
218A7D02000
|
unkown
|
page read and write
|
|
|
|
7FF5BE345000
|
unkown
|
page readonly
|
|
|
|
1F149CE5000
|
unkown
|
page read and write
|
|
|
|
7FF5843CA000
|
unkown
|
page readonly
|
|
|
|
7FF5A14B1000
|
unkown
|
page readonly
|
|
|
|
7FF5A82ED000
|
unkown
|
page readonly
|
|
|
|
1F149BC0000
|
unkown
|
page readonly
|
|
|
|
20311900000
|
heap default
|
page read and write
|
|
|
|
7FF5AB56C000
|
unkown
|
page readonly
|
|
|
|
7FF5AB155000
|
unkown
|
page readonly
|
|
|
|
1F149C89000
|
unkown
|
page read and write
|
|
|
|
2ADCDF13000
|
unkown
|
page read and write
|
|
|
|
1BA2DF50000
|
unkown
|
page read and write
|
|
|
|
7FF585C3D000
|
unkown
|
page readonly
|
|
|
|
218A7C3C000
|
unkown
|
page read and write
|
|
|
|
20311908000
|
heap default
|
page read and write
|
|
|
|
7FF5BE347000
|
unkown
|
page readonly
|
|
|
|
7FF5A110F000
|
unkown
|
page readonly
|
|
|
|
CDEF9F9000
|
unkown
|
page read and write
|
|
|
|
218A7C63000
|
unkown
|
page read and write
|
|
|
|
1BA2F610000
|
unkown
|
page read and write
|
|
|
|
2869000
|
unkown
|
page readonly
|
|
|
|
C13C9AE000
|
unkown
|
page read and write
|
|
|
|
7FF585AC3000
|
unkown
|
page readonly
|
|
|
|
7FF535D9A000
|
unkown
|
page readonly
|
|
|
|
7FF535CBC000
|
unkown
|
page readonly
|
|
|
|
7FF5AB2F7000
|
unkown
|
page readonly
|
|
|
|
1F14AA02000
|
unkown
|
page read and write
|
|
|
|
7FF5BE70F000
|
unkown
|
page readonly
|
|
|
|
1BA2DF52000
|
unkown
|
page read and write
|
|
|
|
1BA2DFF1000
|
unkown
|
page read and write
|
|
|
|
7FF5C3C26000
|
unkown
|
page readonly
|
|
|
|
7FF5A11FB000
|
unkown
|
page readonly
|
|
|
|
1F14A58D000
|
unkown
|
page read and write
|
|
|
|
7FF585C2E000
|
unkown
|
page readonly
|
|
|
|
218A7C63000
|
unkown
|
page read and write
|
|
|
|
7FF5AB47B000
|
unkown
|
page readonly
|
|
|
|
7FF5BE69C000
|
unkown
|
page readonly
|
|
|
|
7FF5AB672000
|
unkown
|
page readonly
|
|
|
|
7FF5BECBA000
|
unkown
|
page readonly
|
|
|
|
CDEF4FE000
|
unkown
|
page read and write
|
|
|
|
7FF5BE031000
|
unkown
|
page readonly
|
|
|
|
7FF5A149E000
|
unkown
|
page readonly
|
|
|
|
D64A07F000
|
unkown
|
page read and write
|
|
|
|
1BA2DF99000
|
unkown
|
page read and write
|
|
|
|
7FF5AB461000
|
unkown
|
page readonly
|
|
|
|
3E617F9000
|
unkown
|
page read and write
|
|
|
|
1F149C3C000
|
unkown
|
page read and write
|
|
|
|
1F14AA02000
|
unkown
|
page read and write
|
|
|
|
7FF5842EB000
|
unkown
|
page readonly
|
|
|
|
7FF54019F000
|
unkown
|
page readonly
|
|
|
|
1BA2E600000
|
unkown
|
page readonly
|
|
|
|
7FF583C37000
|
unkown
|
page readonly
|
|
|
|
7FF5A841D000
|
unkown
|
page readonly
|
|
|
|
1F14AA00000
|
unkown
|
page read and write
|
|
|
|
7FF5BE050000
|
unkown
|
page readonly
|
|
|
|
7FF5859E5000
|
unkown
|
page readonly
|
|
|
|
7FF5BEC70000
|
unkown
|
page readonly
|
|
|
|
218A7C56000
|
unkown
|
page read and write
|
|
|
|
1BA2DDC0000
|
unkown
|
page readonly
|
|
|
|
1F149E00000
|
unkown
|
page readonly
|
|
|
|
1F14AA02000
|
unkown
|
page read and write
|
|
|
|
7FF5C3B52000
|
unkown
|
page readonly
|
|
|
|
7FF535DC9000
|
unkown
|
page readonly
|
|
|
|
1DC3A914000
|
unkown
|
page read and write
|
|
|
|
B6CC27A000
|
unkown
|
page read and write
|
|
|
|
24F26870000
|
unkown
|
page read and write
|
|
|
|
20311A20000
|
unkown
|
page readonly
|
|
|
|
1950C26A000
|
unkown
|
page read and write
|
|
|
|
CDEF8FE000
|
unkown
|
page read and write
|
|
|
|
1BA2BE97000
|
unkown
|
page read and write
|
|
|
|
1F14AA02000
|
unkown
|
page read and write
|
|
|
|
1F149BF0000
|
unkown
|
page readonly
|
|
|
|
CF0B8FF000
|
unkown
|
page read and write
|
|
|
|
7FF5BE638000
|
unkown
|
page readonly
|
|
|
|
1F14A565000
|
unkown
|
page read and write
|
|
|
|
1F149D16000
|
unkown
|
page read and write
|
|
|
|
24F26908000
|
unkown
|
page read and write
|
|
|
|
24F2683C000
|
unkown
|
page read and write
|
|
|
|
1BA2E143000
|
unkown
|
page read and write
|
|
|
|
7FF5401F7000
|
unkown
|
page readonly
|
|
|
|
1DC3A829000
|
unkown
|
page read and write
|
|
|
|
7FF5A83FF000
|
unkown
|
page readonly
|
|
|
|
7FF540228000
|
unkown
|
page readonly
|
|
|
|
7FF5A1348000
|
unkown
|
page readonly
|
|
|
|
1F149CA2000
|
unkown
|
page read and write
|
|
|
|
7FF5402B1000
|
unkown
|
page readonly
|
|
|
|
1F14A5C1000
|
unkown
|
page read and write
|
|
|
|
7FF5BE4D1000
|
unkown
|
page readonly
|
|
|
|
7FF5BDE56000
|
unkown
|
page readonly
|
|
|
|
7FF5AB4E4000
|
unkown
|
page readonly
|
|
|
|
2ADCDE2A000
|
unkown
|
page read and write
|
|
|
|
1BA2DF52000
|
unkown
|
page read and write
|
|
|
|
7FF5BEA91000
|
unkown
|
page readonly
|
|
|
|
1950C26A000
|
unkown
|
page read and write
|
|
|
|
CF0B6F7000
|
unkown
|
page read and write
|
|
|
|
1BA2DF5D000
|
unkown
|
page read and write
|
|
|
|
24F26A00000
|
unkown
|
page readonly
|
|
|
|
218A7C2A000
|
unkown
|
page read and write
|
|
|
|
20311934000
|
unkown
|
page read and write
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
1DC3A86E000
|
unkown
|
page read and write
|
|
|
|
7FF5A1343000
|
unkown
|
page readonly
|
|
|
|
7FF535476000
|
unkown
|
page readonly
|
|
|
|
1BA2DD60000
|
unkown
|
page readonly
|
|
|
|
7FF5A0CA1000
|
unkown
|
page readonly
|
|
|
|
7FF5A1321000
|
unkown
|
page readonly
|
|
|
|
764687B000
|
unkown
|
page read and write
|
|
|
|
7FF5A7F66000
|
unkown
|
page readonly
|
|
|
|
24F26800000
|
unkown
|
page read and write
|
|
|
|
7FF5A144B000
|
unkown
|
page readonly
|
|
|
|
218A7D13000
|
unkown
|
page read and write
|
|
|
|
7FF54010D000
|
unkown
|
page readonly
|
|
|
|
7FF5AB4EC000
|
unkown
|
page readonly
|
|
|
|
1BA2DF50000
|
unkown
|
page read and write
|
|
|
|
1950C26A000
|
unkown
|
page read and write
|
|
|
|
1F14A57C000
|
unkown
|
page read and write
|
|
|
|
7FF5AB664000
|
unkown
|
page readonly
|
|
|
|
7FF5A8117000
|
unkown
|
page readonly
|
|
|
|
2904000
|
unkown
|
page readonly
|
|
|
|
7FF58430C000
|
unkown
|
page readonly
|
|
|
|
7FF5BE62B000
|
unkown
|
page readonly
|
|
|
|
20311926000
|
unkown
|
page read and write
|
|
|
|
7FF535C4E000
|
unkown
|
page readonly
|
|
|
|
24F26829000
|
unkown
|
page read and write
|
|
|
|
1F149CE2000
|
unkown
|
page read and write
|
|
|
|
1BA2DF66000
|
unkown
|
page read and write
|
|
|
|
7FF5BECE1000
|
unkown
|
page readonly
|
|
|
|
7FF53FFE1000
|
unkown
|
page readonly
|
|
|
|
7FF5C3C9A000
|
unkown
|
page readonly
|
|
|
|
1BA2E084000
|
unkown
|
page read and write
|
|
|
|
7FF535910000
|
unkown
|
page readonly
|
|
|
|
1F149C5E000
|
unkown
|
page read and write
|
|
|
|
1F14A500000
|
unkown
|
page read and write
|
|
|
|
7FF5BE767000
|
unkown
|
page readonly
|
|
|
|
1950DCF0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE730000
|
unkown
|
page readonly
|
|
|
|
1BA2DF50000
|
unkown
|
page read and write
|
|
|
|
28F5000
|
unkown
|
page readonly
|
|
|
|
7FF5A133B000
|
unkown
|
page readonly
|
|
|
|
1F14A594000
|
unkown
|
page read and write
|
|
|
|
7FF5BE566000
|
unkown
|
page readonly
|
|
|
|
7FF5A8491000
|
unkown
|
page readonly
|
|
|
|
7FF58434E000
|
unkown
|
page readonly
|
|
|
|
7FF5A7AC6000
|
unkown
|
page readonly
|
|
|
|
1BA2E053000
|
unkown
|
page read and write
|
|
|
|
764697F000
|
unkown
|
page read and write
|
|
|
|
1E5FDC71000
|
unkown
|
page read and write
|
|
|
|
218A7A90000
|
unkown
|
page readonly
|
|
|
|
7FF5C387A000
|
unkown
|
page readonly
|
|
|
|
7FF5A14A8000
|
unkown
|
page readonly
|
|
|
|
1BA2DFB8000
|
unkown
|
page read and write
|
|
|
|
2923000
|
unkown
|
page readonly
|
|
|
|
7FF5BED61000
|
unkown
|
page readonly
|
|
|
|
1DC3A620000
|
heap default
|
page read and write
|
|
|
|
7FF5BE72A000
|
unkown
|
page readonly
|
|
|
|
7FF5BE93A000
|
unkown
|
page readonly
|
|
|
|
1BA2DF90000
|
unkown
|
page read and write
|
|
|
|
7FF535DBE000
|
unkown
|
page readonly
|
|
|
|
468AFF9000
|
unkown
|
page read and write
|
|
|
|
7FF585BBA000
|
unkown
|
page readonly
|
|
|
|
1BA2DFD2000
|
unkown
|
page read and write
|
|
|
|
1950C213000
|
unkown
|
page read and write
|
|
|
|
1F14A402000
|
unkown
|
page read and write
|
|
|
|
7FF5400C8000
|
unkown
|
page readonly
|
|
|
|
218A8260000
|
unkown
|
page readonly
|
|
|
|
7FF5BE20E000
|
unkown
|
page readonly
|
|
|
|
1BA2BF14000
|
unkown
|
page read and write
|
|
|
|
7FF53FE8F000
|
unkown
|
page readonly
|
|
|
|
7FF53FFF4000
|
unkown
|
page readonly
|
|
|
|
7FF5C3BBB000
|
unkown
|
page readonly
|
|
|
|
7FF5842E5000
|
unkown
|
page readonly
|
|
|
|
1F149CE9000
|
unkown
|
page read and write
|
|
|
|
D649CFB000
|
unkown
|
page read and write
|
|
|
|
1E5FDC6B000
|
unkown
|
page read and write
|
|
|
|
1BA2F110000
|
unkown
|
page read and write
|
|
|
|
7FF540001000
|
unkown
|
page readonly
|
|
|
|
7FF5A839A000
|
unkown
|
page readonly
|
|
|
|
2ADCDE4F000
|
unkown
|
page read and write
|
|
|
|
76468FE000
|
unkown
|
page read and write
|
|
|
|
7FF54022E000
|
unkown
|
page readonly
|
|
|
|
24F27002000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5E8000
|
unkown
|
page readonly
|
|
|
|
3E618FC000
|
unkown
|
page read and write
|
|
|
|
7FF585BCB000
|
unkown
|
page readonly
|
|
|
|
7FF5BE75C000
|
unkown
|
page readonly
|
|
|
|
7FF540162000
|
unkown
|
page readonly
|
|
|
|
7FF5BED54000
|
unkown
|
page readonly
|
|
|
|
1F149CC2000
|
unkown
|
page read and write
|
|
|
|
7FF58432A000
|
unkown
|
page readonly
|
|
|
|
1BA2BEB1000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page readonly
|
|
|
|
1F149B80000
|
unkown
|
page readonly
|
|
|
|
7FF5C3BE8000
|
unkown
|
page readonly
|
|
|
|
7FF5A83E4000
|
unkown
|
page readonly
|
|
|
|
1F14A58D000
|
unkown
|
page read and write
|
|
|
|
7FF5C3C21000
|
unkown
|
page readonly
|
|
|
|
7FF5BE79E000
|
unkown
|
page readonly
|
|
|
|
218A7C47000
|
unkown
|
page read and write
|
|
|
|
7FF5C3AB8000
|
unkown
|
page readonly
|
|
|
|
1E5FDC71000
|
unkown
|
page read and write
|
|
|
|
24F27200000
|
unkown
|
page readonly
|
|
|
|
1BA2DF2F000
|
unkown
|
page read and write
|
|
|
|
1BA2BE00000
|
unkown
|
page read and write
|
|
|
|
1F149C5D000
|
unkown
|
page read and write
|
|
|
|
1BA2DF50000
|
unkown
|
page read and write
|
|
|
|
1AA44054000
|
unkown
|
page read and write
|
|
|
|
CDEF6F7000
|
unkown
|
page read and write
|
|
|
|
1BA2F110000
|
unkown
|
page read and write
|
|
|
|
1BA2F510000
|
unkown
|
page read and write
|
|
|
|
7FF535AD0000
|
unkown
|
page readonly
|
|
|
|
7FF540194000
|
unkown
|
page readonly
|
|
|
|
2ADCDDC0000
|
heap default
|
page read and write
|
|
|
|
1F14A557000
|
unkown
|
page read and write
|
|
|
|
7FF5401BE000
|
unkown
|
page readonly
|
|
|
|
7FF5BE947000
|
unkown
|
page readonly
|
|
|
|
7FF5A146F000
|
unkown
|
page readonly
|
|
|
|
1F149BA0000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5AF000
|
unkown
|
page readonly
|
|
|
|
7FF53FAC1000
|
unkown
|
page readonly
|
|
|
|
1F14A390000
|
unkown
|
page readonly
|
|
|
|
7FF5A8243000
|
unkown
|
page readonly
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
7FF5859E1000
|
unkown
|
page readonly
|
|
|
|
6B5000
|
unkown
|
page read and write
|
|
|
|
3E6187C000
|
unkown
|
page read and write
|
|
|
|
218A7B80000
|
unkown
|
page read and write
|
|
|
|
1F14A596000
|
unkown
|
page read and write
|
|
|
|
1DC3C2A0000
|
unkown
|
page readonly
|
|
|
|
7FF585BC5000
|
unkown
|
page readonly
|
|
|
|
1F149B10000
|
heap private
|
page read and write
|
|
|
|
7FF585A19000
|
unkown
|
page readonly
|
|
|
|
1F14A566000
|
unkown
|
page read and write
|
|
|
|
218A7C00000
|
unkown
|
page read and write
|
|
|
|
7FF5A1484000
|
unkown
|
page readonly
|
|
|
|
1E5FDC3F000
|
unkown
|
page read and write
|
|
|
|
7FF535916000
|
unkown
|
page readonly
|
|
|
|
7FF5A14BD000
|
unkown
|
page readonly
|
|
|
|
3E6177B000
|
unkown
|
page read and write
|
|
|
|
7FF5A83B7000
|
unkown
|
page readonly
|
|
|
|
1DC3A83F000
|
unkown
|
page read and write
|
|
|
|
1BA2DF2B000
|
unkown
|
page read and write
|
|
|
|
2ADCDDF0000
|
unkown
|
page read and write
|
|
|
|
288A000
|
unkown
|
page readonly
|
|
|
|
D649A7E000
|
unkown
|
page read and write
|
|
|
|
1BA2E400000
|
unkown
|
page read and write
|
|
|
|
7FF5BE67D000
|
unkown
|
page readonly
|
|
|
|
7FF5BE704000
|
unkown
|
page readonly
|
|
|
|
20311925000
|
unkown
|
page read and write
|
|
|
|
7FF585BBE000
|
unkown
|
page readonly
|
|
|
|
2765000
|
unkown
|
page readonly
|
|
|
|
7FF5A13E2000
|
unkown
|
page readonly
|
|
|
|
7FF585C28000
|
unkown
|
page readonly
|
|
|
|
468ABEB000
|
unkown
|
page read and write
|
|
|
|
7FF5C3C18000
|
unkown
|
page readonly
|
|
|
|
7FF5401AC000
|
unkown
|
page readonly
|
|
|
|
1BA2C0D0000
|
unkown
|
page readonly
|
|
|
|
7FF5A848A000
|
unkown
|
page readonly
|
|
|
|
218A7C70000
|
unkown
|
page read and write
|
|
|
|
7FF5A1261000
|
unkown
|
page readonly
|
|
|
|
7FF5402A4000
|
unkown
|
page readonly
|
|
|
|
7FF5A83EA000
|
unkown
|
page readonly
|
|
|
|
282C000
|
unkown
|
page readonly
|
|
|
|
7FF535DC6000
|
unkown
|
page readonly
|
|
|
|
7FF5A1524000
|
unkown
|
page readonly
|
|
|
|
2ADCE0D0000
|
unkown
|
page readonly
|
|
|
|
7FF5A8281000
|
unkown
|
page readonly
|
|
|
|
54D47AB000
|
unkown
|
page read and write
|
|
|
|
CF0B475000
|
unkown
|
page read and write
|
|
|
|
2031192F000
|
unkown
|
page read and write
|
|
|
|
1F14A59F000
|
unkown
|
page read and write
|
|
|
|
7FF5A1457000
|
unkown
|
page readonly
|
|
|
|
7FF5BE6D2000
|
unkown
|
page readonly
|
|
|
|
7FF5BECCE000
|
unkown
|
page readonly
|
|
|
|
1BA2F210000
|
unkown
|
page read and write
|
|
|
|
2ADCDE8C000
|
unkown
|
page read and write
|
|
|
|
24F267A0000
|
unkown
|
page readonly
|
|
|
|
1BA2BE67000
|
unkown
|
page read and write
|
|
|
|
7FF540152000
|
unkown
|
page readonly
|
|
|
|
7FF585CB1000
|
unkown
|
page readonly
|
|
|
|
24F26913000
|
unkown
|
page read and write
|
|
|
|
7FF53FF86000
|
unkown
|
page readonly
|
|
|
|
7FF585BF8000
|
unkown
|
page readonly
|
|
|
|
1950C302000
|
unkown
|
page read and write
|
|
|
|
7FF584324000
|
unkown
|
page readonly
|
|
|
|
CDEFB78000
|
unkown
|
page read and write
|
|
|
|
2ADCDF08000
|
unkown
|
page read and write
|
|
|
|
1BA2D890000
|
unkown
|
page read and write
|
|
|
|
7FF5BE305000
|
unkown
|
page readonly
|
|
|
|
24F26850000
|
unkown
|
page read and write
|
|
|
|
7FF5C3B73000
|
unkown
|
page readonly
|
|
|
|
7FF5AB423000
|
unkown
|
page readonly
|
|
|
|
7FF5C3C2D000
|
unkown
|
page readonly
|
|
|
|
1F149CF8000
|
unkown
|
page read and write
|
|
|
|
7FF5A8492000
|
unkown
|
page readonly
|
|
|
|
7FF535D7C000
|
unkown
|
page readonly
|
|
|
|
7FF5BE564000
|
unkown
|
page readonly
|
|
|
|
7FF585CB2000
|
unkown
|
page readonly
|
|
|
|
7FF5843D1000
|
unkown
|
page readonly
|
|
|
|
7FF5BE93F000
|
unkown
|
page readonly
|
|
|
|
2819000
|
unkown
|
page readonly
|
|
|
|
7FF5C3BB5000
|
unkown
|
page readonly
|
|
|
|
1F14A600000
|
unkown
|
page readonly
|
|
|
|
1F14A548000
|
unkown
|
page read and write
|
|
|
|
4310000
|
unkown
|
page readonly
|
|
|
|
1F14A58D000
|
unkown
|
page read and write
|
|
|
|
1BA2F510000
|
unkown
|
page read and write
|
|
|
|
7FF5C3411000
|
unkown
|
page readonly
|
|
|
|
7FF53FFF6000
|
unkown
|
page readonly
|
|
|
|
1950C26A000
|
unkown
|
page read and write
|
|
|
|
7FF5A830C000
|
unkown
|
page readonly
|
|
|
|
7FF5C3976000
|
unkown
|
page readonly
|
|
|
|
7FF5A83CF000
|
unkown
|
page readonly
|
|
|
|
7FF585ABB000
|
unkown
|
page readonly
|
|
|
|
B6CC1F9000
|
unkown
|
page read and write
|
|
|
|
7FF585BEC000
|
unkown
|
page readonly
|
|
|
|
7FF58541D000
|
unkown
|
page readonly
|
|
|
|
1BA2DF50000
|
unkown
|
page read and write
|
|
|
|
1BA2DF52000
|
unkown
|
page read and write
|
|
|
|
1E5FDB60000
|
unkown
|
page write copy
|
|
|
|
1950C400000
|
unkown
|
page write copy
|
|
|
|
1DC3A813000
|
unkown
|
page read and write
|
|
|
|
1E5FDBB0000
|
unkown
|
page readonly
|
|
|
|
7FF535C4B000
|
unkown
|
page readonly
|
|
|
|
7FF535E34000
|
unkown
|
page readonly
|
|
|
|
C13CDFB000
|
unkown
|
page read and write
|
|
|
|
1F149CE8000
|
unkown
|
page read and write
|
|
|
|
1BA2DF52000
|
unkown
|
page read and write
|
|
|
|
1F14A58D000
|
unkown
|
page read and write
|
|
|
|
1BA2DD70000
|
unkown
|
page readonly
|
|
|
|
7FF535C9D000
|
unkown
|
page readonly
|
|
|
|
7FF5BE735000
|
unkown
|
page readonly
|
|
|
|
7FF5AB146000
|
unkown
|
page readonly
|
|
|
|
7FF5A83A5000
|
unkown
|
page readonly
|
|
|
|
7FF5BECDE000
|
unkown
|
page readonly
|
|
|
|
CDEF19B000
|
unkown
|
page read and write
|
|
|
|
1BA2F410000
|
unkown
|
page read and write
|
|
|
|
7FF5BEC12000
|
unkown
|
page readonly
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
1F14A581000
|
unkown
|
page read and write
|
|
|
|
7FF5BE530000
|
unkown
|
page readonly
|
|
|
|
3E611FB000
|
unkown
|
page read and write
|
|
|
|
1BA2BE5F000
|
unkown
|
page read and write
|
|
|
|
7FF5BE083000
|
unkown
|
page readonly
|
|
|
|
1BA2F410000
|
unkown
|
page read and write
|
|
|
|
218A7D08000
|
unkown
|
page read and write
|
|
|
|
287D000
|
unkown
|
page readonly
|
|
|
|
3E60EFA000
|
unkown
|
page read and write
|
|
|
|
1F14A557000
|
unkown
|
page read and write
|
|
|
|
1F14A580000
|
unkown
|
page read and write
|
|
|
|
7FF584334000
|
unkown
|
page readonly
|
|
|
|
1DC3A800000
|
unkown
|
page read and write
|
|
|
|
1DC3A802000
|
unkown
|
page read and write
|
|
|
|
880000
|
heap default
|
page read and write
|
|
|
|
20311AE0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE784000
|
unkown
|
page readonly
|
|
|
|
1F14A548000
|
unkown
|
page read and write
|
|
|
|
3E612FB000
|
unkown
|
page read and write
|
|
|
|
7FF5A840E000
|
unkown
|
page readonly
|
|
|
|
7FF5C3BAA000
|
unkown
|
page readonly
|
|
|
|
1BA2F610000
|
unkown
|
page read and write
|
|
|
|
218A7C50000
|
unkown
|
page read and write
|
|
|
|
7FF5BE814000
|
unkown
|
page readonly
|
|
|
|
7FF5BE633000
|
unkown
|
page readonly
|
|
|
|
7FF540106000
|
unkown
|
page readonly
|
|
|
|
1BA2F210000
|
unkown
|
page read and write
|
|
|
|
7FF5AB56A000
|
unkown
|
page readonly
|
|
|
|
7FF5AB671000
|
unkown
|
page readonly
|
|
|
|
1BA2E000000
|
unkown
|
page read and write
|
|
|
|
54D4C7F000
|
unkown
|
page read and write
|
|
|
|
1AA44200000
|
unkown
|
page readonly
|
|
|
|
288F000
|
unkown
|
page readonly
|
|
|
|
7FF585AA1000
|
unkown
|
page readonly
|
|
|
|
7FF5BE75F000
|
unkown
|
page readonly
|
|
|
|
7FF540019000
|
unkown
|
page readonly
|
|
|
|
CF0B57B000
|
unkown
|
page read and write
|
|
|
|
7FF535DA4000
|
unkown
|
page readonly
|
|
|
|
1DC3C1A0000
|
unkown
|
page read and write
|
|
|
|
1BA2DFB8000
|
unkown
|
page read and write
|
|
|
|
1BA2BE40000
|
unkown
|
page read and write
|
|
|
|
1BA2DF50000
|
unkown
|
page read and write
|
|
|
|
7FF5A143A000
|
unkown
|
page readonly
|
|
|
|
1E5FDD00000
|
unkown
|
page read and write
|
|
|
|
7FF5A83F4000
|
unkown
|
page readonly
|
|
|
|
1DC3A902000
|
unkown
|
page read and write
|
|
|
|
1BA2BF51000
|
unkown
|
page read and write
|
|
|
|
1E5FF5A0000
|
unkown
|
page read and write
|
|
|
|
C13CCF5000
|
unkown
|
page read and write
|
|
|
|
2ADCDE4B000
|
unkown
|
page read and write
|
|
|
|
1BA2BF31000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2F0000
|
unkown
|
page readonly
|
|
|
|
7FF5C3BDF000
|
unkown
|
page readonly
|
|
|
|
1BA2BE81000
|
unkown
|
page read and write
|
|
|
|
1F149D02000
|
unkown
|
page read and write
|
|
|
|
2ADCDE4D000
|
unkown
|
page read and write
|
|
|
|
1BA2DF50000
|
unkown
|
page read and write
|
|
|
|
7FF5402B2000
|
unkown
|
page readonly
|
|
|
|
20311911000
|
unkown
|
page read and write
|
|
|
|
1BA2F000000
|
unkown
|
page read and write
|
|
|
|
CDEFE79000
|
unkown
|
page read and write
|
|
|
|
7FF5401AA000
|
unkown
|
page readonly
|
|
|
|
1BA2BF30000
|
unkown
|
page read and write
|
|
|
|
1BA2DF33000
|
unkown
|
page read and write
|
|
|
|
1F14A553000
|
unkown
|
page read and write
|
|
|
|
1E5FDA90000
|
unkown
|
page readonly
|
|
|
|
1F149D13000
|
unkown
|
page read and write
|
|
|
|
3E615FD000
|
unkown
|
page read and write
|
|
|
|
1F14A582000
|
unkown
|
page read and write
|
|
|
|
7FF5C3C1E000
|
unkown
|
page readonly
|
|
|
|
1F14AC00000
|
unkown
|
page readonly
|
|
|
|
7FF5BE72E000
|
unkown
|
page readonly
|
|
|
|
1BA2F510000
|
unkown
|
page read and write
|
|
|
|
CF0B27B000
|
unkown
|
page read and write
|
|
|
|
88A000
|
heap default
|
page read and write
|
|
|
|
7FF535D55000
|
unkown
|
page readonly
|
|
|
|
7FF5A1117000
|
unkown
|
page readonly
|
|
|
|
1BA2E0A4000
|
unkown
|
page read and write
|
|
|
|
1950C450000
|
unkown
|
page readonly
|
|
|
|
7FF585B60000
|
unkown
|
page readonly
|
|
|
|
1BA2C2D0000
|
unkown
|
page readonly
|
|
|
|
7FF5BECA8000
|
unkown
|
page readonly
|
|
|
|
7FF585B83000
|
unkown
|
page readonly
|
|
|
|
7FF5BEC9C000
|
unkown
|
page readonly
|
|
|
|
275C000
|
unkown
|
page readonly
|
|
|
|
1BA2DF52000
|
unkown
|
page read and write
|
|
|
|
2ADCDF00000
|
unkown
|
page read and write
|
|
|
|
1BA2D990000
|
unkown
|
page readonly
|
|
|
|
1DC3A870000
|
unkown
|
page read and write
|
|
|
|
1F14A58E000
|
unkown
|
page read and write
|
|
|
|
3E610FB000
|
unkown
|
page read and write
|
|
|
|
7FF5402AA000
|
unkown
|
page readonly
|
|
|
|
7FF585C1E000
|
unkown
|
page readonly
|
|
|
|
7FF535D3C000
|
unkown
|
page readonly
|
|
|
|
7FF5BE087000
|
unkown
|
page readonly
|
|
|
|
1BA2DF77000
|
unkown
|
page read and write
|
|
|
|
1F14A584000
|
unkown
|
page read and write
|
|
|
|
7FF53FA21000
|
unkown
|
page readonly
|
|
|
|
1F14A594000
|
unkown
|
page read and write
|
|
|
|
218A7A20000
|
heap private
|
page read and write
|
|
|
|
C13CF77000
|
unkown
|
page read and write
|
|
|
|
7FF58435D000
|
unkown
|
page readonly
|
|
|
|
7FF53FE8A000
|
unkown
|
page readonly
|
|
|
|
2CF0000
|
heap private
|
page read and write
|
|
|
|
7FF535E41000
|
unkown
|
page readonly
|
|
|
|
1E5FDC71000
|
unkown
|
page read and write
|
|
|
|
2875000
|
unkown
|
page readonly
|
|
|
|
1BA2DF52000
|
unkown
|
page read and write
|
|
|
|
468B07E000
|
unkown
|
page read and write
|
|
|
|
7FF535D7F000
|
unkown
|
page readonly
|
|
|
|
1BA2DFBD000
|
unkown
|
page read and write
|
|
|
|
7FF5A8419000
|
unkown
|
page readonly
|
|
|
|
1BA2F110000
|
unkown
|
page read and write
|
|
|
|
1AA44102000
|
unkown
|
page read and write
|
|
|
|
1DC3A856000
|
unkown
|
page read and write
|
|
|
|
1F14A586000
|
unkown
|
page read and write
|
|
|
|
7FF5BE5DA000
|
unkown
|
page readonly
|
|
|
|
2ADCDE3C000
|
unkown
|
page read and write
|
|
|
|
1BA2F610000
|
unkown
|
page read and write
|
|
|
|
1BA2DE02000
|
unkown
|
page read and write
|
|
|
|
7FF5A14B6000
|
unkown
|
page readonly
|
|
|
|
1F149D08000
|
unkown
|
page read and write
|
|
|
|
2031190D000
|
heap default
|
page read and write
|
|
|
|
7FF5400A1000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2A2000
|
unkown
|
page readonly
|
|
|
|
3424A79000
|
unkown
|
page read and write
|
|
|
|
7FF5C3887000
|
unkown
|
page readonly
|
|
|
|
7FF5BE7A6000
|
unkown
|
page readonly
|
|
|
|
203118D0000
|
unkown
|
page read and write
|
|
|
|
7FF5BEC33000
|
unkown
|
page readonly
|
|
|
|
1950DBF0000
|
unkown
|
page read and write
|
|
|
|
2031192F000
|
unkown
|
page read and write
|
|
|
|
1BA2DFFD000
|
unkown
|
page read and write
|
|
|
|
7FF5BE73B000
|
unkown
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
20311916000
|
heap default
|
page read and write
|
|
|
|
D64979B000
|
unkown
|
page read and write
|
|
|
|
7FF535DAF000
|
unkown
|
page readonly
|
|
|
|
2ADCDD60000
|
heap private
|
page read and write
|
|
|
|
24F26855000
|
unkown
|
page read and write
|
|
|
|
1F149CBB000
|
unkown
|
page read and write
|
|
|
|
7FF5BEC87000
|
unkown
|
page readonly
|
|
|
|
3E6147A000
|
unkown
|
page read and write
|
|
|
|
1950C26A000
|
unkown
|
page read and write
|
|
|
|
1BA2BE13000
|
unkown
|
page read and write
|
|
|
|
7FF583C00000
|
unkown
|
page readonly
|
|
|
|
7FF54021E000
|
unkown
|
page readonly
|
|
|
|
24F2684D000
|
unkown
|
page read and write
|
|
|
|
7FF5BECE9000
|
unkown
|
page readonly
|
|
|
|
3E60FFB000
|
unkown
|
page read and write
|
|
|
|
218A7D00000
|
unkown
|
page read and write
|
|
|
|
1BA2DD90000
|
unkown
|
page read and write
|
|
|
|
7FF5C3A91000
|
unkown
|
page readonly
|
|
|
|
7FF5A110A000
|
unkown
|
page readonly
|
|
|
|
1BA2BE6D000
|
unkown
|
page read and write
|
|
|
|
7FF5A1532000
|
unkown
|
page readonly
|
|
|
|
2860000
|
unkown
|
page readonly
|
|
|
|
6B1000
|
unkown
|
page read and write
|
|
|
|
7FF5AB3D1000
|
unkown
|
page readonly
|
|
|
|
3E61179000
|
unkown
|
page read and write
|
|
|
|
7FF5BEB78000
|
unkown
|
page readonly
|
|
|
|
7FF585C14000
|
unkown
|
page readonly
|
|
|
|
7FF5BE71C000
|
unkown
|
page readonly
|
|
|
|
1F14A58D000
|
unkown
|
page read and write
|
|
|
|
7FF5BE6D0000
|
unkown
|
page readonly
|
|
|
|
7FF540231000
|
unkown
|
page readonly
|
|
|
|
7FF535D87000
|
unkown
|
page readonly
|
|
|
|
7FF535E42000
|
unkown
|
page readonly
|
|
|
|
1BA2DFB8000
|
unkown
|
page read and write
|
|
|
|
7FF5AB66A000
|
unkown
|
page readonly
|
|
|
|
1F14AA03000
|
unkown
|
page read and write
|
|
|
|
7FF5C3BF4000
|
unkown
|
page readonly
|
|
|
|
7FF5401EC000
|
unkown
|
page readonly
|
|
|
|
1E5FDC6F000
|
unkown
|
page read and write
|
|
|
|
7FF5AB58B000
|
unkown
|
page readonly
|
|
|
|
7FF53FD22000
|
unkown
|
page readonly
|
|
|
|
7FF5BECB4000
|
unkown
|
page readonly
|
|
|
|
7FF585B62000
|
unkown
|
page readonly
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
54D4CFC000
|
unkown
|
page read and write
|
|
|
|
7FF5BEA95000
|
unkown
|
page readonly
|
|
|
|
1BA2DF23000
|
unkown
|
page read and write
|
|
|
|
2ADCDE6C000
|
unkown
|
page read and write
|
|
|
|
7FF585BD7000
|
unkown
|
page readonly
|
|
|
|
7FF5A829B000
|
unkown
|
page readonly
|
|
|
|
CF0B37D000
|
unkown
|
page read and write
|
|
|
|
7FF535925000
|
unkown
|
page readonly
|
|
|
|
7FF535CA3000
|
unkown
|
page readonly
|
|
|
|
7FF585BC0000
|
unkown
|
page readonly
|
|
|
|
1F14A548000
|
unkown
|
page read and write
|
|
|
|
7FF5BE77A000
|
unkown
|
page readonly
|
|
|
|
3E60B6F000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5FD000
|
unkown
|
page readonly
|
|
|
|
7FF5AB57E000
|
unkown
|
page readonly
|
|
|
|
7FF5C3BAE000
|
unkown
|
page readonly
|
|
|
|
7FF5BE292000
|
unkown
|
page readonly
|
|
|
|
7FF584318000
|
unkown
|
page readonly
|
|
|
|
1BA2DF50000
|
unkown
|
page read and write
|
|
|
|
1BA2E200000
|
unkown
|
page read and write
|
|
|
|
1BA2F610000
|
unkown
|
page read and write
|
|
|
|
1950C254000
|
unkown
|
page read and write
|
|
|
|
1DC3A872000
|
unkown
|
page read and write
|
|
|
|
1BA2BE63000
|
unkown
|
page read and write
|
|
|
|
76469FA000
|
unkown
|
page read and write
|
|
|
|
7FF5843C4000
|
unkown
|
page readonly
|
|
|
|
7FF585986000
|
unkown
|
page readonly
|
|
|
|
1F14A58E000
|
unkown
|
page read and write
|
|
|
|
1BA2F310000
|
unkown
|
page read and write
|
|
|
|
1F14A53F000
|
unkown
|
page read and write
|
|
|
|
1DC3A750000
|
unkown
|
page readonly
|
|
|
|
1F14A3A0000
|
unkown
|
page read and write
|
|
|
|
7FF585C0A000
|
unkown
|
page readonly
|
|
|
|
20311935000
|
unkown
|
page read and write
|
|
|
|
1F14A5B5000
|
unkown
|
page read and write
|
|
|
|
7FF585AC8000
|
unkown
|
page readonly
|
|
|
|
3E60BEE000
|
unkown
|
page read and write
|
|
|
|
55B000
|
unkown
|
page read and write
|
|
|
|
7FF5BE71A000
|
unkown
|
page readonly
|
|
|
|
1F14A590000
|
unkown
|
page read and write
|
|
|
|
1BA2DD70000
|
unkown
|
page read and write
|
|
|
|
1BA2DFB1000
|
unkown
|
page read and write
|
|
|
|
7FF540183000
|
unkown
|
page readonly
|
|
|
|
7FF535D4E000
|
unkown
|
page readonly
|
|
|
|
7FF5BE822000
|
unkown
|
page readonly
|
|
|
|
1BA2DD70000
|
unkown
|
page read and write
|
|
|
|
1AA44000000
|
unkown
|
page read and write
|
|
|
|
1BA2BE6A000
|
unkown
|
page read and write
|
|
|
|
1BA2BE97000
|
unkown
|
page read and write
|
|
|
|
1BA2F010000
|
unkown
|
page read and write
|
|
|
|
7FF5A1299000
|
unkown
|
page readonly
|
|
|
|
1BA2DFFE000
|
unkown
|
page read and write
|
|
|
|
7FF5401CB000
|
unkown
|
page readonly
|
|
|
|
D649D7F000
|
unkown
|
page read and write
|
|
|
|
2ADCE000000
|
unkown
|
page readonly
|
|
|
|
7FF5A8120000
|
unkown
|
page readonly
|
|
|
|
20311A30000
|
unkown
|
page readonly
|
|
|
|
1E5FF6A0000
|
unkown
|
page readonly
|
|
|
|
1BA2DF5A000
|
unkown
|
page read and write
|
|
|
|
3424B7E000
|
unkown
|
page read and write
|
|
|
|
1F14A584000
|
unkown
|
page read and write
|
|
|
|
7FF585421000
|
unkown
|
page readonly
|
|
|
|
1BA2F110000
|
unkown
|
page read and write
|
|
|
|
7FF5401D7000
|
unkown
|
page readonly
|
|
|
|
7FF5BE747000
|
unkown
|
page readonly
|
|
|
|
7FF5C39D5000
|
unkown
|
page readonly
|
|
|
|
7FF5A7AC0000
|
unkown
|
page readonly
|
|
|
|
2ADCDE00000
|
unkown
|
page read and write
|
|
|
|
1F149C5C000
|
unkown
|
page read and write
|
|
|
|
C13D17F000
|
unkown
|
page read and write
|
|
|
|
2853000
|
unkown
|
page readonly
|
|
|
|
468AF7A000
|
unkown
|
page read and write
|
|
|
|
3424BFF000
|
unkown
|
page read and write
|
|
|
|
7FF5BDE50000
|
unkown
|
page readonly
|
|
|
|
3E616FC000
|
unkown
|
page read and write
|
|
|
|
1F14A390000
|
unkown
|
page read and write
|
|
|
|
3424AFA000
|
unkown
|
page read and write
|
|
|
|
1AA44002000
|
unkown
|
page read and write
|
|
|
|
7FF535BA1000
|
unkown
|
page readonly
|
|
|
|
1BA2DD70000
|
unkown
|
page read and write
|
|
|
|
34247DF000
|
unkown
|
page read and write
|
|
|
|
7FF5AACA6000
|
unkown
|
page readonly
|
|
|
|
7FF5A146C000
|
unkown
|
page readonly
|
|
|
|
1BA2F510000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5CA000
|
unkown
|
page readonly
|
|
|
|
7FF5400BB000
|
unkown
|
page readonly
|
|
There are 1048 hidden memdumps, click here to show them.