Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
audit-866445981.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$audit-866445981.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\EB5EB814-F278-44A1-A618-8F2C364FB0C1
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\266B3397.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\617A426E.png
|
PNG image data, 521 x 246, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\92C9AF9A.png
|
PNG image data, 934 x 29, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B3BEC8AC.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BD70B8BD.png
|
PNG image data, 246 x 108, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F63F46D3.png
|
PNG image data, 490 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\16E40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\covi1.dll
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\covi2.dll
|
|
|
|
C:\Windows\splwow64.exe
|
C:\Windows\splwow64.exe 12288
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://loki.delve.office.com/api/v1/configuration/officewin32/
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
8o?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
9o?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CCE2
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4D7DF
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4DCC1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4E3F5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4E6B4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
~'
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 52 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF4FA96B000
|
unkown
|
page readonly
|
|
|
|
2D6D000
|
unkown
|
page readonly
|
|
|
|
1D7EAA02000
|
unkown
|
page read and write
|
|
|
|
7FF4EC82A000
|
unkown
|
page readonly
|
|
|
|
1E4E8C81000
|
unkown
|
page read and write
|
|
|
|
1D7EAC00000
|
unkown
|
page readonly
|
|
|
|
12B8BB30000
|
unkown
|
page readonly
|
|
|
|
850CBFB000
|
unkown
|
page read and write
|
|
|
|
1E4E8BB0000
|
heap private
|
page read and write
|
|
|
|
1E4EC102000
|
unkown
|
page read and write
|
|
|
|
1E4E8C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5D5F54000
|
unkown
|
page readonly
|
|
|
|
1E4E8CF8000
|
unkown
|
page read and write
|
|
|
|
7FF4FF610000
|
unkown
|
page readonly
|
|
|
|
2D92000
|
unkown
|
page readonly
|
|
|
|
7FF5CD726000
|
unkown
|
page readonly
|
|
|
|
7FF5AEF18000
|
unkown
|
page readonly
|
|
|
|
7FF500653000
|
unkown
|
page readonly
|
|
|
|
1E4EAB6C000
|
unkown
|
page read and write
|
|
|
|
19181C69000
|
unkown
|
page read and write
|
|
|
|
7FF57568A000
|
unkown
|
page readonly
|
|
|
|
1AF9433E000
|
unkown
|
page read and write
|
|
|
|
850C35F000
|
unkown
|
page read and write
|
|
|
|
7FF5756A8000
|
unkown
|
page readonly
|
|
|
|
850CD7A000
|
unkown
|
page read and write
|
|
|
|
1AF94352000
|
unkown
|
page read and write
|
|
|
|
1E4EA9F0000
|
unkown
|
page read and write
|
|
|
|
1AF94352000
|
unkown
|
page read and write
|
|
|
|
1AF93A4E000
|
unkown
|
page read and write
|
|
|
|
1A578395000
|
heap private
|
page read and write
|
|
|
|
7FF5CDA5B000
|
unkown
|
page readonly
|
|
|
|
9171D7B000
|
unkown
|
page read and write
|
|
|
|
1AF94355000
|
unkown
|
page read and write
|
|
|
|
1AF93C00000
|
unkown
|
page readonly
|
|
|
|
1AF93B02000
|
unkown
|
page read and write
|
|
|
|
1AF9431E000
|
unkown
|
page read and write
|
|
|
|
7FF5D5FEE000
|
unkown
|
page readonly
|
|
|
|
7FF4EC616000
|
unkown
|
page readonly
|
|
|
|
7FF5AEFA1000
|
unkown
|
page readonly
|
|
|
|
7FF4EC614000
|
unkown
|
page readonly
|
|
|
|
1AF94394000
|
unkown
|
page read and write
|
|
|
|
2D65000
|
unkown
|
page readonly
|
|
|
|
1A5781E5000
|
unkown
|
page read and write
|
|
|
|
7FF5D5FFB000
|
unkown
|
page readonly
|
|
|
|
1AF9432B000
|
unkown
|
page read and write
|
|
|
|
2C9B5B20000
|
heap private
|
page read and write
|
|
|
|
7FF5AEEF4000
|
unkown
|
page readonly
|
|
|
|
1AF93AE6000
|
unkown
|
page read and write
|
|
|
|
1AF93A84000
|
unkown
|
page read and write
|
|
|
|
7FF4EC8D1000
|
unkown
|
page readonly
|
|
|
|
7FF4FF551000
|
unkown
|
page readonly
|
|
|
|
18296210000
|
unkown
|
page readonly
|
|
|
|
19181C68000
|
unkown
|
page read and write
|
|
|
|
7FF4FF75A000
|
unkown
|
page readonly
|
|
|
|
18296600000
|
unkown
|
page readonly
|
|
|
|
1E4E8D14000
|
unkown
|
page read and write
|
|
|
|
1AF943D8000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB62000
|
unkown
|
page readonly
|
|
|
|
1AF94355000
|
unkown
|
page read and write
|
|
|
|
2C9B5C6A000
|
unkown
|
page read and write
|
|
|
|
19181C6A000
|
unkown
|
page read and write
|
|
|
|
19181C6D000
|
unkown
|
page read and write
|
|
|
|
3050000
|
unkown
|
page readonly
|
|
|
|
7FF4FAB61000
|
unkown
|
page readonly
|
|
|
|
850CCFA000
|
unkown
|
page read and write
|
|
|
|
2C9B5C70000
|
unkown
|
page read and write
|
|
|
|
7FF5D6069000
|
unkown
|
page readonly
|
|
|
|
19181C68000
|
unkown
|
page read and write
|
|
|
|
1E4E8DA0000
|
unkown
|
page read and write
|
|
|
|
1AF94358000
|
unkown
|
page read and write
|
|
|
|
2D09000
|
unkown
|
page readonly
|
|
|
|
7B0000
|
unkown
|
page readonly
|
|
|
|
1E4EAB1A000
|
unkown
|
page read and write
|
|
|
|
28795229000
|
unkown
|
page read and write
|
|
|
|
7FF500834000
|
unkown
|
page readonly
|
|
|
|
2E13000
|
unkown
|
page readonly
|
|
|
|
7FF543A44000
|
unkown
|
page readonly
|
|
|
|
2CA026D0000
|
unkown
|
page readonly
|
|
|
|
7FF503F64000
|
unkown
|
page readonly
|
|
|
|
7FF4FEED1000
|
unkown
|
page readonly
|
|
|
|
1AF94060000
|
unkown
|
page readonly
|
|
|
|
9171BF5000
|
unkown
|
page read and write
|
|
|
|
1AF93A3C000
|
unkown
|
page read and write
|
|
|
|
1AF94080000
|
unkown
|
page read and write
|
|
|
|
7FF5007A4000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7CA000
|
unkown
|
page readonly
|
|
|
|
7FF575215000
|
unkown
|
page readonly
|
|
|
|
7FF4EC5B8000
|
unkown
|
page readonly
|
|
|
|
7FF50064B000
|
unkown
|
page readonly
|
|
|
|
1E4EB113000
|
unkown
|
page read and write
|
|
|
|
28795249000
|
unkown
|
page read and write
|
|
|
|
7FF500767000
|
unkown
|
page readonly
|
|
|
|
1E4E8C83000
|
unkown
|
page read and write
|
|
|
|
7FF5D5FF5000
|
unkown
|
page readonly
|
|
|
|
18296F40000
|
unkown
|
page readonly
|
|
|
|
2D92000
|
unkown
|
page readonly
|
|
|
|
7FF4EC848000
|
unkown
|
page readonly
|
|
|
|
28795313000
|
unkown
|
page read and write
|
|
|
|
7FF50083A000
|
unkown
|
page readonly
|
|
|
|
7FF500427000
|
unkown
|
page readonly
|
|
|
|
DCA757A000
|
unkown
|
page read and write
|
|
|
|
D10000
|
heap default
|
page read and write
|
|
|
|
7FF5D5EEB000
|
unkown
|
page readonly
|
|
|
|
1E4EABED000
|
unkown
|
page read and write
|
|
|
|
7FF543868000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6D8000
|
unkown
|
page readonly
|
|
|
|
1AF94341000
|
unkown
|
page read and write
|
|
|
|
1829646E000
|
unkown
|
page read and write
|
|
|
|
1E4EABC5000
|
unkown
|
page read and write
|
|
|
|
2E08000
|
unkown
|
page readonly
|
|
|
|
7FF4EC80C000
|
unkown
|
page readonly
|
|
|
|
28795300000
|
unkown
|
page read and write
|
|
|
|
7FF5AEEBB000
|
unkown
|
page readonly
|
|
|
|
1E4E8C29000
|
unkown
|
page read and write
|
|
|
|
1A5782D0000
|
unkown
|
page readonly
|
|
|
|
1D7EA9A0000
|
unkown
|
page write copy
|
|
|
|
7FF4EC041000
|
unkown
|
page readonly
|
|
|
|
1E4E8B50000
|
unkown
|
page readonly
|
|
|
|
7FF4FAABA000
|
unkown
|
page readonly
|
|
|
|
7FF57560F000
|
unkown
|
page readonly
|
|
|
|
7FF4FF69C000
|
unkown
|
page readonly
|
|
|
|
7FF503F71000
|
unkown
|
page readonly
|
|
|
|
28795090000
|
heap default
|
page read and write
|
|
|
|
7FF4FF6A8000
|
unkown
|
page readonly
|
|
|
|
19E1B7B000
|
unkown
|
page read and write
|
|
|
|
7FF5D60E2000
|
unkown
|
page readonly
|
|
|
|
7FF5753B7000
|
unkown
|
page readonly
|
|
|
|
19181C02000
|
unkown
|
page read and write
|
|
|
|
BA0000
|
unkown
|
page read and write
|
|
|
|
1E4EB410000
|
unkown
|
page read and write
|
|
|
|
1E4EAC50000
|
unkown
|
page readonly
|
|
|
|
7FF5CDA5E000
|
unkown
|
page readonly
|
|
|
|
1AF94316000
|
unkown
|
page read and write
|
|
|
|
7FF503EEE000
|
unkown
|
page readonly
|
|
|
|
850C3DF000
|
unkown
|
page read and write
|
|
|
|
7FF4FF754000
|
unkown
|
page readonly
|
|
|
|
7FF4FF761000
|
unkown
|
page readonly
|
|
|
|
1AF94332000
|
unkown
|
page read and write
|
|
|
|
7ED7FFF000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAD8000
|
unkown
|
page readonly
|
|
|
|
1E4E8C96000
|
unkown
|
page read and write
|
|
|
|
2C9B5ED0000
|
unkown
|
page readonly
|
|
|
|
7FF5D60DA000
|
unkown
|
page readonly
|
|
|
|
18296200000
|
heap default
|
page read and write
|
|
|
|
A0338FA000
|
unkown
|
page read and write
|
|
|
|
2C9B5C13000
|
unkown
|
page read and write
|
|
|
|
2C9B5B80000
|
heap default
|
page read and write
|
|
|
|
1E4E8D5F000
|
unkown
|
page read and write
|
|
|
|
7FF5439AA000
|
unkown
|
page readonly
|
|
|
|
7FF4FF32C000
|
unkown
|
page readonly
|
|
|
|
1AF93AC2000
|
unkown
|
page read and write
|
|
|
|
1D7EAB13000
|
unkown
|
page read and write
|
|
|
|
7FF500755000
|
unkown
|
page readonly
|
|
|
|
1AF94358000
|
unkown
|
page read and write
|
|
|
|
7FF575255000
|
unkown
|
page readonly
|
|
|
|
7FF5755E0000
|
unkown
|
page readonly
|
|
|
|
19181C6D000
|
unkown
|
page read and write
|
|
|
|
2C40000
|
unkown
|
page readonly
|
|
|
|
1E4E8C96000
|
unkown
|
page read and write
|
|
|
|
7FF50077F000
|
unkown
|
page readonly
|
|
|
|
7FF57511E000
|
unkown
|
page readonly
|
|
|
|
19181A20000
|
unkown
|
page readonly
|
|
|
|
1AF9438D000
|
unkown
|
page read and write
|
|
|
|
2D9B000
|
unkown
|
page readonly
|
|
|
|
67B000
|
unkown
|
page read and write
|
|
|
|
1E4E8C6E000
|
unkown
|
page read and write
|
|
|
|
2CA02400000
|
unkown
|
page read and write
|
|
|
|
7FF575614000
|
unkown
|
page readonly
|
|
|
|
18296452000
|
unkown
|
page read and write
|
|
|
|
1AF93A9E000
|
unkown
|
page read and write
|
|
|
|
7FF4EC6E8000
|
unkown
|
page readonly
|
|
|
|
1AF9438A000
|
unkown
|
page read and write
|
|
|
|
1E4EB410000
|
unkown
|
page read and write
|
|
|
|
7FF57553E000
|
unkown
|
page readonly
|
|
|
|
2CA02402000
|
unkown
|
page read and write
|
|
|
|
19181C6B000
|
unkown
|
page read and write
|
|
|
|
7FF4FAACF000
|
unkown
|
page readonly
|
|
|
|
7FF5CD9B1000
|
unkown
|
page readonly
|
|
|
|
7FF503E97000
|
unkown
|
page readonly
|
|
|
|
1E4E8C54000
|
unkown
|
page read and write
|
|
|
|
2D50000
|
unkown
|
page readonly
|
|
|
|
7FF4FAAC4000
|
unkown
|
page readonly
|
|
|
|
19E1EFF000
|
unkown
|
page read and write
|
|
|
|
23CD7F000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
7FF503B3C000
|
unkown
|
page readonly
|
|
|
|
7FF4FA636000
|
unkown
|
page readonly
|
|
|
|
7ED7BFE000
|
unkown
|
page read and write
|
|
|
|
2E02000
|
unkown
|
page readonly
|
|
|
|
7FF575474000
|
unkown
|
page readonly
|
|
|
|
18296489000
|
unkown
|
page read and write
|
|
|
|
7FF503F6A000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC51000
|
unkown
|
page readonly
|
|
|
|
1829644C000
|
unkown
|
page read and write
|
|
|
|
1E4E8CAA000
|
unkown
|
page read and write
|
|
|
|
7FF5756AE000
|
unkown
|
page readonly
|
|
|
|
1E4E8C86000
|
unkown
|
page read and write
|
|
|
|
12B8BC29000
|
unkown
|
page read and write
|
|
|
|
7FF5CD735000
|
unkown
|
page readonly
|
|
|
|
1AF94355000
|
unkown
|
page read and write
|
|
|
|
2C9B5C59000
|
unkown
|
page read and write
|
|
|
|
7ED7AFB000
|
unkown
|
page read and write
|
|
|
|
7FF5439C8000
|
unkown
|
page readonly
|
|
|
|
7FF5754EA000
|
unkown
|
page readonly
|
|
|
|
7FF5431BD000
|
unkown
|
page readonly
|
|
|
|
1AF94383000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB54000
|
unkown
|
page readonly
|
|
|
|
2D13000
|
unkown
|
page readonly
|
|
|
|
7F8FBF5000
|
unkown
|
page read and write
|
|
|
|
1E4E8C3F000
|
unkown
|
page read and write
|
|
|
|
19181C57000
|
unkown
|
page read and write
|
|
|
|
7FF503D7B000
|
unkown
|
page readonly
|
|
|
|
1E4E8C94000
|
unkown
|
page read and write
|
|
|
|
7FF4FF6E6000
|
unkown
|
page readonly
|
|
|
|
1E4E8CD7000
|
unkown
|
page read and write
|
|
|
|
7ED7E7A000
|
unkown
|
page read and write
|
|
|
|
7FF503EDE000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC52000
|
unkown
|
page readonly
|
|
|
|
18296502000
|
unkown
|
page read and write
|
|
|
|
23CEFD000
|
unkown
|
page read and write
|
|
|
|
1AF93A4B000
|
unkown
|
page read and write
|
|
|
|
850CF7C000
|
unkown
|
page read and write
|
|
|
|
28795860000
|
unkown
|
page readonly
|
|
|
|
7FF574F93000
|
unkown
|
page readonly
|
|
|
|
1AF94352000
|
unkown
|
page read and write
|
|
|
|
1AF93B08000
|
unkown
|
page read and write
|
|
|
|
7FF5D601F000
|
unkown
|
page readonly
|
|
|
|
1E4EB310000
|
unkown
|
page read and write
|
|
|
|
1AF94327000
|
unkown
|
page read and write
|
|
|
|
7FF4FF67B000
|
unkown
|
page readonly
|
|
|
|
7FF5CD839000
|
unkown
|
page readonly
|
|
|
|
1AF93A80000
|
unkown
|
page read and write
|
|
|
|
7FF5006F2000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA87000
|
unkown
|
page readonly
|
|
|
|
7FF503B57000
|
unkown
|
page readonly
|
|
|
|
2D7F000
|
unkown
|
page readonly
|
|
|
|
7FF50079A000
|
unkown
|
page readonly
|
|
|
|
1E4EAB35000
|
unkown
|
page read and write
|
|
|
|
7FF4FF69F000
|
unkown
|
page readonly
|
|
|
|
1AF94387000
|
unkown
|
page read and write
|
|
|
|
7FF543998000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7B4000
|
unkown
|
page readonly
|
|
|
|
19181B40000
|
unkown
|
page readonly
|
|
|
|
2D7F000
|
unkown
|
page readonly
|
|
|
|
7FF4EC3B9000
|
unkown
|
page readonly
|
|
|
|
12B8BC02000
|
unkown
|
page read and write
|
|
|
|
2E02000
|
unkown
|
page readonly
|
|
|
|
1AF94397000
|
unkown
|
page read and write
|
|
|
|
7FF50075B000
|
unkown
|
page readonly
|
|
|
|
1AF93A55000
|
unkown
|
page read and write
|
|
|
|
9171F7F000
|
unkown
|
page read and write
|
|
|
|
7FF5CDA41000
|
unkown
|
page readonly
|
|
|
|
7FF4FF670000
|
unkown
|
page readonly
|
|
|
|
19E18FE000
|
unkown
|
page read and write
|
|
|
|
850C87A000
|
unkown
|
page read and write
|
|
|
|
7FF5CD720000
|
unkown
|
page readonly
|
|
|
|
850CC7B000
|
unkown
|
page read and write
|
|
|
|
7FF4EC342000
|
unkown
|
page readonly
|
|
|
|
E10000
|
unkown
|
page readonly
|
|
|
|
BD0000
|
unkown
|
page readonly
|
|
|
|
1AF94355000
|
unkown
|
page read and write
|
|
|
|
1AF94382000
|
unkown
|
page read and write
|
|
|
|
7FF4EC83E000
|
unkown
|
page readonly
|
|
|
|
7FF4EC824000
|
unkown
|
page readonly
|
|
|
|
1E4E8C5D000
|
unkown
|
page read and write
|
|
|
|
1A5781D1000
|
unkown
|
page read and write
|
|
|
|
7FF5AE807000
|
unkown
|
page readonly
|
|
|
|
1AF94351000
|
unkown
|
page read and write
|
|
|
|
7FF50050B000
|
unkown
|
page readonly
|
|
|
|
1AF94327000
|
unkown
|
page read and write
|
|
|
|
2C9B5C6C000
|
unkown
|
page read and write
|
|
|
|
2C9B5C6A000
|
unkown
|
page read and write
|
|
|
|
7FF503CA1000
|
unkown
|
page readonly
|
|
|
|
1AF93AF7000
|
unkown
|
page read and write
|
|
|
|
7FF54361C000
|
unkown
|
page readonly
|
|
|
|
1AF94351000
|
unkown
|
page read and write
|
|
|
|
4C1000
|
unkown
|
page read and write
|
|
|
|
1AF943CE000
|
unkown
|
page read and write
|
|
|
|
287950A0000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6DE000
|
unkown
|
page readonly
|
|
|
|
2C9B5C3F000
|
unkown
|
page read and write
|
|
|
|
1E4EAB00000
|
unkown
|
page read and write
|
|
|
|
7FF5CDBC8000
|
unkown
|
page readonly
|
|
|
|
2C9B5C6A000
|
unkown
|
page read and write
|
|
|
|
7FF57572A000
|
unkown
|
page readonly
|
|
|
|
1D7EC810000
|
unkown
|
page read and write
|
|
|
|
1E4EC042000
|
unkown
|
page read and write
|
|
|
|
7FF4EC639000
|
unkown
|
page readonly
|
|
|
|
7FF500842000
|
unkown
|
page readonly
|
|
|
|
2879524B000
|
unkown
|
page read and write
|
|
|
|
28AB7E000
|
unkown
|
page read and write
|
|
|
|
1AF93A4F000
|
unkown
|
page read and write
|
|
|
|
1E4E8C81000
|
unkown
|
page read and write
|
|
|
|
28A31E000
|
unkown
|
page read and write
|
|
|
|
7FF5753FB000
|
unkown
|
page readonly
|
|
|
|
7FF54371B000
|
unkown
|
page readonly
|
|
|
|
1AF9438D000
|
unkown
|
page read and write
|
|
|
|
28795400000
|
unkown
|
page readonly
|
|
|
|
2D0C000
|
unkown
|
page readonly
|
|
|
|
1E4EABEF000
|
unkown
|
page read and write
|
|
|
|
1AF94355000
|
unkown
|
page read and write
|
|
|
|
7FF5D60E1000
|
unkown
|
page readonly
|
|
|
|
7FF5AEEB0000
|
unkown
|
page readonly
|
|
|
|
C10000
|
unkown
|
page readonly
|
|
|
|
1E4E8A30000
|
unkown
|
page readonly
|
|
|
|
7FF4FA96E000
|
unkown
|
page readonly
|
|
|
|
1AF94332000
|
unkown
|
page read and write
|
|
|
|
7FF575732000
|
unkown
|
page readonly
|
|
|
|
12B8C270000
|
unkown
|
page readonly
|
|
|
|
28795A02000
|
unkown
|
page read and write
|
|
|
|
7FF4FF33F000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6B4000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7DA000
|
unkown
|
page readonly
|
|
|
|
90F000
|
unkown
|
page read and write
|
|
|
|
7FF543A51000
|
unkown
|
page readonly
|
|
|
|
1AF94070000
|
unkown
|
page readonly
|
|
|
|
7FF5D5D67000
|
unkown
|
page readonly
|
|
|
|
7F8FCFA000
|
unkown
|
page read and write
|
|
|
|
1AF94856000
|
unkown
|
page read and write
|
|
|
|
DCA71CF000
|
unkown
|
page read and write
|
|
|
|
7FF5CDB65000
|
unkown
|
page readonly
|
|
|
|
7FF4EC601000
|
unkown
|
page readonly
|
|
|
|
8A0000
|
heap default
|
page read and write
|
|
|
|
7FF57558D000
|
unkown
|
page readonly
|
|
|
|
12B8BC55000
|
unkown
|
page read and write
|
|
|
|
7FF503ED4000
|
unkown
|
page readonly
|
|
|
|
12B8BE00000
|
unkown
|
page readonly
|
|
|
|
7FF5036E1000
|
unkown
|
page readonly
|
|
|
|
7FF575645000
|
unkown
|
page readonly
|
|
|
|
1A5781C0000
|
heap default
|
page read and write
|
|
|
|
7FF4FF633000
|
unkown
|
page readonly
|
|
|
|
1AF94389000
|
unkown
|
page read and write
|
|
|
|
7FF5CDBD6000
|
unkown
|
page readonly
|
|
|
|
7FF5AEF94000
|
unkown
|
page readonly
|
|
|
|
7FF500516000
|
unkown
|
page readonly
|
|
|
|
7FF503EAF000
|
unkown
|
page readonly
|
|
|
|
1E4EAC20000
|
unkown
|
page read and write
|
|
|
|
1AF94361000
|
unkown
|
page read and write
|
|
|
|
7FF543781000
|
unkown
|
page readonly
|
|
|
|
A0335EB000
|
unkown
|
page read and write
|
|
|
|
28795180000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6E9000
|
unkown
|
page readonly
|
|
|
|
12B8BC70000
|
unkown
|
page read and write
|
|
|
|
12B8BAC0000
|
heap private
|
page read and write
|
|
|
|
7FF5751AE000
|
unkown
|
page readonly
|
|
|
|
7FF4EC772000
|
unkown
|
page readonly
|
|
|
|
7FF4EC834000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB60000
|
unkown
|
page readonly
|
|
|
|
2CA03E70000
|
unkown
|
page read and write
|
|
|
|
7FF4FA913000
|
unkown
|
page readonly
|
|
|
|
7FF4FA9C3000
|
unkown
|
page readonly
|
|
|
|
12B8BC4D000
|
unkown
|
page read and write
|
|
|
|
7FF5756B9000
|
unkown
|
page readonly
|
|
|
|
7FF5CDBCE000
|
unkown
|
page readonly
|
|
|
|
28795030000
|
heap private
|
page read and write
|
|
|
|
850CFFA000
|
unkown
|
page read and write
|
|
|
|
2C9B5C6E000
|
unkown
|
page read and write
|
|
|
|
2C9B5C6C000
|
unkown
|
page read and write
|
|
|
|
1A5780B0000
|
unkown
|
page readonly
|
|
|
|
1AF94361000
|
unkown
|
page read and write
|
|
|
|
1AF94804000
|
unkown
|
page read and write
|
|
|
|
1AF94313000
|
unkown
|
page read and write
|
|
|
|
850C67A000
|
unkown
|
page read and write
|
|
|
|
7FF4FF762000
|
unkown
|
page readonly
|
|
|
|
850CB7B000
|
unkown
|
page read and write
|
|
|
|
1D7EAA13000
|
unkown
|
page read and write
|
|
|
|
1AF94380000
|
unkown
|
page read and write
|
|
|
|
12B8BC49000
|
unkown
|
page read and write
|
|
|
|
7FF5D5E41000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA70000
|
unkown
|
page readonly
|
|
|
|
2DF4000
|
unkown
|
page readonly
|
|
|
|
1E4EAE43000
|
unkown
|
page read and write
|
|
|
|
7FF4FEECD000
|
unkown
|
page readonly
|
|
|
|
FC818FA000
|
unkown
|
page read and write
|
|
|
|
1AF9439A000
|
unkown
|
page read and write
|
|
|
|
8C1000
|
heap default
|
page read and write
|
|
|
|
7FF503CA5000
|
unkown
|
page readonly
|
|
|
|
1E4E8C13000
|
unkown
|
page read and write
|
|
|
|
19181D02000
|
unkown
|
page read and write
|
|
|
|
1829644E000
|
unkown
|
page read and write
|
|
|
|
7FF4EC77C000
|
unkown
|
page readonly
|
|
|
|
19181AF0000
|
unkown
|
page write copy
|
|
|
|
1AF93A13000
|
unkown
|
page read and write
|
|
|
|
2CA023E0000
|
unkown
|
page readonly
|
|
|
|
23CC7F000
|
unkown
|
page read and write
|
|
|
|
1AF94372000
|
unkown
|
page read and write
|
|
|
|
1AF9438F000
|
unkown
|
page read and write
|
|
|
|
7FF500658000
|
unkown
|
page readonly
|
|
|
|
7F902F8000
|
unkown
|
page read and write
|
|
|
|
850D0FC000
|
unkown
|
page read and write
|
|
|
|
2D59000
|
unkown
|
page readonly
|
|
|
|
7FF5007B8000
|
unkown
|
page readonly
|
|
|
|
28795252000
|
unkown
|
page read and write
|
|
|
|
2DE1000
|
unkown
|
page readonly
|
|
|
|
7FF503B4A000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA5A000
|
unkown
|
page readonly
|
|
|
|
DCA714B000
|
unkown
|
page read and write
|
|
|
|
19181C6B000
|
unkown
|
page read and write
|
|
|
|
12B8BD08000
|
unkown
|
page read and write
|
|
|
|
7FF5CDB97000
|
unkown
|
page readonly
|
|
|
|
7FF575521000
|
unkown
|
page readonly
|
|
|
|
1AF94341000
|
unkown
|
page read and write
|
|
|
|
182963C0000
|
unkown
|
page readonly
|
|
|
|
2C9B5D13000
|
unkown
|
page read and write
|
|
|
|
2E13000
|
unkown
|
page readonly
|
|
|
|
1E4EAF82000
|
unkown
|
page read and write
|
|
|
|
7FF4FF495000
|
unkown
|
page readonly
|
|
|
|
7FF4EC4AA000
|
unkown
|
page readonly
|
|
|
|
7FF574F41000
|
unkown
|
page readonly
|
|
|
|
7FF500788000
|
unkown
|
page readonly
|
|
|
|
19181C6A000
|
unkown
|
page read and write
|
|
|
|
1E4EABE5000
|
unkown
|
page read and write
|
|
|
|
12B8BC8C000
|
unkown
|
page read and write
|
|
|
|
1E4E8B00000
|
unkown
|
page write copy
|
|
|
|
28A6F5000
|
unkown
|
page read and write
|
|
|
|
1AF94351000
|
unkown
|
page read and write
|
|
|
|
63C000
|
unkown
|
page read and write
|
|
|
|
1AF94300000
|
unkown
|
page read and write
|
|
|
|
7FF5439B4000
|
unkown
|
page readonly
|
|
|
|
7FF5D5BB6000
|
unkown
|
page readonly
|
|
|
|
1E4EA9E0000
|
unkown
|
page readonly
|
|
|
|
7FF57562C000
|
unkown
|
page readonly
|
|
|
|
7FF503E20000
|
unkown
|
page readonly
|
|
|
|
1E4E8CC6000
|
unkown
|
page read and write
|
|
|
|
7FF503EF1000
|
unkown
|
page readonly
|
|
|
|
1AF94361000
|
unkown
|
page read and write
|
|
|
|
23CE7F000
|
unkown
|
page read and write
|
|
|
|
7F901FF000
|
unkown
|
page read and write
|
|
|
|
1AF94374000
|
unkown
|
page read and write
|
|
|
|
191819B0000
|
heap private
|
page read and write
|
|
|
|
7F9007F000
|
unkown
|
page read and write
|
|
|
|
1AF93B13000
|
unkown
|
page read and write
|
|
|
|
1AF940A0000
|
unkown
|
page readonly
|
|
|
|
28A39E000
|
unkown
|
page read and write
|
|
|
|
1AF94396000
|
unkown
|
page read and write
|
|
|
|
7FF503EC4000
|
unkown
|
page readonly
|
|
|
|
1E4EAF02000
|
unkown
|
page read and write
|
|
|
|
7FF575257000
|
unkown
|
page readonly
|
|
|
|
2C40000
|
unkown
|
page readonly
|
|
|
|
7FF503EE8000
|
unkown
|
page readonly
|
|
|
|
2D67000
|
unkown
|
page readonly
|
|
|
|
1A5781EF000
|
unkown
|
page read and write
|
|
|
|
8AA000
|
heap default
|
page read and write
|
|
|
|
1D7EAA29000
|
unkown
|
page read and write
|
|
|
|
2D6F000
|
unkown
|
page readonly
|
|
|
|
18296413000
|
unkown
|
page read and write
|
|
|
|
7FF5D5BC5000
|
unkown
|
page readonly
|
|
|
|
7FF543863000
|
unkown
|
page readonly
|
|
|
|
7FF5007BE000
|
unkown
|
page readonly
|
|
|
|
7D0000
|
heap default
|
page read and write
|
|
|
|
7FF5CD8D7000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6ED000
|
unkown
|
page readonly
|
|
|
|
850C77E000
|
unkown
|
page read and write
|
|
|
|
1E4EB110000
|
unkown
|
page read and write
|
|
|
|
18296C00000
|
unkown
|
page readonly
|
|
|
|
2C9B5BE0000
|
unkown
|
page readonly
|
|
|
|
7FF5AEEDF000
|
unkown
|
page readonly
|
|
|
|
1E4EC142000
|
unkown
|
page read and write
|
|
|
|
1AF94080000
|
unkown
|
page read and write
|
|
|
|
1D7EAB02000
|
unkown
|
page read and write
|
|
|
|
7FF4EC726000
|
unkown
|
page readonly
|
|
|
|
7FF5D5FEA000
|
unkown
|
page readonly
|
|
|
|
19181C6C000
|
unkown
|
page read and write
|
|
|
|
7FF543637000
|
unkown
|
page readonly
|
|
|
|
19181C68000
|
unkown
|
page read and write
|
|
|
|
FC8154B000
|
unkown
|
page read and write
|
|
|
|
7FF5D604F000
|
unkown
|
page readonly
|
|
|
|
1AF94804000
|
unkown
|
page read and write
|
|
|
|
7FF543900000
|
unkown
|
page readonly
|
|
|
|
1E4E8CD3000
|
unkown
|
page read and write
|
|
|
|
1AF94385000
|
unkown
|
page read and write
|
|
|
|
7FF4FAADE000
|
unkown
|
page readonly
|
|
|
|
1AF94399000
|
unkown
|
page read and write
|
|
|
|
7F8FF77000
|
unkown
|
page read and write
|
|
|
|
1AF94400000
|
unkown
|
page readonly
|
|
|
|
A03387E000
|
unkown
|
page read and write
|
|
|
|
7FF5D6034000
|
unkown
|
page readonly
|
|
|
|
7FF5D5F3D000
|
unkown
|
page readonly
|
|
|
|
1AF93800000
|
heap private
|
page read and write
|
|
|
|
1AF94361000
|
unkown
|
page read and write
|
|
|
|
12B8BC3C000
|
unkown
|
page read and write
|
|
|
|
1AF94397000
|
unkown
|
page read and write
|
|
|
|
7FF54362A000
|
unkown
|
page readonly
|
|
|
|
7FF543902000
|
unkown
|
page readonly
|
|
|
|
7FF4EC859000
|
unkown
|
page readonly
|
|
|
|
7FF5D5FF0000
|
unkown
|
page readonly
|
|
|
|
850D17E000
|
unkown
|
page read and write
|
|
|
|
2CA02502000
|
unkown
|
page read and write
|
|
|
|
7FF575724000
|
unkown
|
page readonly
|
|
|
|
F90000
|
heap private
|
page read and write
|
|
|
|
2C9B5C00000
|
unkown
|
page read and write
|
|
|
|
7FF5439DD000
|
unkown
|
page readonly
|
|
|
|
1AF94397000
|
unkown
|
page read and write
|
|
|
|
1AF94380000
|
unkown
|
page read and write
|
|
|
|
1E4EAF82000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown
|
page readonly
|
|
|
|
7FF575548000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA9C000
|
unkown
|
page readonly
|
|
|
|
1E4EABD6000
|
unkown
|
page read and write
|
|
|
|
1A5782E0000
|
unkown
|
page readonly
|
|
|
|
2CA02413000
|
unkown
|
page read and write
|
|
|
|
7FF4EC6E3000
|
unkown
|
page readonly
|
|
|
|
1E4E8D1E000
|
unkown
|
page read and write
|
|
|
|
7FF4FAA75000
|
unkown
|
page readonly
|
|
|
|
18296400000
|
unkown
|
page read and write
|
|
|
|
7FF4FA9BD000
|
unkown
|
page readonly
|
|
|
|
7FF543A4A000
|
unkown
|
page readonly
|
|
|
|
1AF94389000
|
unkown
|
page read and write
|
|
|
|
7FF5AEEFA000
|
unkown
|
page readonly
|
|
|
|
1AF94380000
|
unkown
|
page read and write
|
|
|
|
1AF94399000
|
unkown
|
page read and write
|
|
|
|
1E4E8D3E000
|
unkown
|
page read and write
|
|
|
|
7FF500750000
|
unkown
|
page readonly
|
|
|
|
2D96000
|
unkown
|
page readonly
|
|
|
|
7FF5437B9000
|
unkown
|
page readonly
|
|
|
|
FC81979000
|
unkown
|
page read and write
|
|
|
|
7FF57560B000
|
unkown
|
page readonly
|
|
|
|
1AF94352000
|
unkown
|
page read and write
|
|
|
|
1AF9433B000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAE6000
|
unkown
|
page readonly
|
|
|
|
7FF503F72000
|
unkown
|
page readonly
|
|
|
|
7FF4FA7E7000
|
unkown
|
page readonly
|
|
|
|
7FF503EFD000
|
unkown
|
page readonly
|
|
|
|
2D9B000
|
unkown
|
page readonly
|
|
|
|
7F8F7EB000
|
unkown
|
page read and write
|
|
|
|
7FF503E8B000
|
unkown
|
page readonly
|
|
|
|
1E4E8C7E000
|
unkown
|
page read and write
|
|
|
|
7FF5D5E93000
|
unkown
|
page readonly
|
|
|
|
19181A10000
|
heap default
|
page read and write
|
|
|
|
7FF4FF42B000
|
unkown
|
page readonly
|
|
|
|
1D7EC3B0000
|
unkown
|
page read and write
|
|
|
|
850D07D000
|
unkown
|
page read and write
|
|
|
|
7FF4EC5A6000
|
unkown
|
page readonly
|
|
|
|
28795213000
|
unkown
|
page read and write
|
|
|
|
182963D0000
|
unkown
|
page read and write
|
|
|
|
850C6FA000
|
unkown
|
page read and write
|
|
|
|
2D1A000
|
unkown
|
page readonly
|
|
|
|
1AF93A00000
|
unkown
|
page read and write
|
|
|
|
1829643C000
|
unkown
|
page read and write
|
|
|
|
19181C68000
|
unkown
|
page read and write
|
|
|
|
DCA747E000
|
unkown
|
page read and write
|
|
|
|
1D7EC4B0000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6E1000
|
unkown
|
page readonly
|
|
|
|
2C9B5D00000
|
unkown
|
page read and write
|
|
|
|
12B8BD02000
|
unkown
|
page read and write
|
|
|
|
7FF575491000
|
unkown
|
page readonly
|
|
|
|
7FF4FA9D4000
|
unkown
|
page readonly
|
|
|
|
1D7EA8C0000
|
heap default
|
page read and write
|
|
|
|
19181C68000
|
unkown
|
page read and write
|
|
|
|
19181C00000
|
unkown
|
page read and write
|
|
|
|
1E4E8CF7000
|
unkown
|
page read and write
|
|
|
|
1AF93AA5000
|
unkown
|
page read and write
|
|
|
|
A033AFE000
|
unkown
|
page read and write
|
|
|
|
1829646E000
|
unkown
|
page read and write
|
|
|
|
DCA74F9000
|
unkown
|
page read and write
|
|
|
|
7FF50077C000
|
unkown
|
page readonly
|
|
|
|
FC819FF000
|
unkown
|
page read and write
|
|
|
|
1AF94332000
|
unkown
|
page read and write
|
|
|
|
7FF57562A000
|
unkown
|
page readonly
|
|
|
|
1AF94863000
|
unkown
|
page read and write
|
|
|
|
7FF5CDB5E000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7E0000
|
unkown
|
page readonly
|
|
|
|
7FF575694000
|
unkown
|
page readonly
|
|
|
|
19E197E000
|
unkown
|
page read and write
|
|
|
|
1AF94355000
|
unkown
|
page read and write
|
|
|
|
1E4EAA02000
|
unkown
|
page read and write
|
|
|
|
2D67000
|
unkown
|
page readonly
|
|
|
|
1829644A000
|
unkown
|
page read and write
|
|
|
|
1E4E8B90000
|
unkown
|
page read and write
|
|
|
|
1AF94341000
|
unkown
|
page read and write
|
|
|
|
7FF543977000
|
unkown
|
page readonly
|
|
|
|
2D7A000
|
unkown
|
page readonly
|
|
|
|
7FF575476000
|
unkown
|
page readonly
|
|
|
|
7FF54398C000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA7B000
|
unkown
|
page readonly
|
|
|
|
1E4EC002000
|
unkown
|
page read and write
|
|
|
|
1E4E8CA1000
|
unkown
|
page read and write
|
|
|
|
1AF93960000
|
unkown
|
page read and write
|
|
|
|
1AF94375000
|
unkown
|
page read and write
|
|
|
|
7FF57561F000
|
unkown
|
page readonly
|
|
|
|
28A29C000
|
unkown
|
page read and write
|
|
|
|
1E4EB210000
|
unkown
|
page read and write
|
|
|
|
1A5781EF000
|
unkown
|
page read and write
|
|
|
|
1AF93ADF000
|
unkown
|
page read and write
|
|
|
|
A3C000
|
unkown
|
page read and write
|
|
|
|
7FF5D6066000
|
unkown
|
page readonly
|
|
|
|
2A13000
|
unkown
|
page readonly
|
|
|
|
7FF57563A000
|
unkown
|
page readonly
|
|
|
|
1AF93AE9000
|
unkown
|
page read and write
|
|
|
|
7FF4EC631000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7A3000
|
unkown
|
page readonly
|
|
|
|
2D6F000
|
unkown
|
page readonly
|
|
|
|
2C9B5C29000
|
unkown
|
page read and write
|
|
|
|
7FF54362F000
|
unkown
|
page readonly
|
|
|
|
2D4C000
|
unkown
|
page readonly
|
|
|
|
182961A0000
|
heap private
|
page read and write
|
|
|
|
1E4EAB26000
|
unkown
|
page read and write
|
|
|
|
1E4EAE00000
|
unkown
|
page read and write
|
|
|
|
7FF4FAA6E000
|
unkown
|
page readonly
|
|
|
|
7FF503D83000
|
unkown
|
page readonly
|
|
|
|
7FF4EC03D000
|
unkown
|
page readonly
|
|
|
|
7FF4EC0E1000
|
unkown
|
page readonly
|
|
|
|
7FF4EC782000
|
unkown
|
page readonly
|
|
|
|
7FF500571000
|
unkown
|
page readonly
|
|
|
|
7FF503ECA000
|
unkown
|
page readonly
|
|
|
|
1AF9438D000
|
unkown
|
page read and write
|
|
|
|
7FF5D6044000
|
unkown
|
page readonly
|
|
|
|
1AF94355000
|
unkown
|
page read and write
|
|
|
|
7FF5439BE000
|
unkown
|
page readonly
|
|
|
|
12B8C402000
|
unkown
|
page read and write
|
|
|
|
28795170000
|
unkown
|
page readonly
|
|
|
|
2D4C000
|
unkown
|
page readonly
|
|
|
|
850C2DB000
|
unkown
|
page read and write
|
|
|
|
2D96000
|
unkown
|
page readonly
|
|
|
|
1AF9438C000
|
unkown
|
page read and write
|
|
|
|
2D13000
|
unkown
|
page readonly
|
|
|
|
28A87F000
|
unkown
|
page read and write
|
|
|
|
1AF94316000
|
unkown
|
page read and write
|
|
|
|
7FF5AEF9A000
|
unkown
|
page readonly
|
|
|
|
12B8BD00000
|
unkown
|
page read and write
|
|
|
|
C00000
|
heap private
|
page read and write
|
|
|
|
1A5781E6000
|
unkown
|
page read and write
|
|
|
|
7FF5007AE000
|
unkown
|
page readonly
|
|
|
|
28795263000
|
unkown
|
page read and write
|
|
|
|
1E4E8C00000
|
unkown
|
page read and write
|
|
|
|
19181C3F000
|
unkown
|
page read and write
|
|
|
|
7FF4EC7F7000
|
unkown
|
page readonly
|
|
|
|
7FF543A52000
|
unkown
|
page readonly
|
|
|
|
1AF93ABC000
|
unkown
|
page read and write
|
|
|
|
7FF5CD37F000
|
unkown
|
page readonly
|
|
|
|
7FF4EC780000
|
unkown
|
page readonly
|
|
|
|
2D81000
|
unkown
|
page readonly
|
|
|
|
D31000
|
heap default
|
page read and write
|
|
|
|
7FF4FAA9F000
|
unkown
|
page readonly
|
|
|
|
7FF4EC4B7000
|
unkown
|
page readonly
|
|
|
|
1E4E8A20000
|
heap default
|
page read and write
|
|
|
|
18296508000
|
unkown
|
page read and write
|
|
|
|
18296427000
|
unkown
|
page read and write
|
|
|
|
1E4E8C61000
|
unkown
|
page read and write
|
|
|
|
1AF93AAF000
|
unkown
|
page read and write
|
|
|
|
7FF4FF578000
|
unkown
|
page readonly
|
|
|
|
7FF503EF6000
|
unkown
|
page readonly
|
|
|
|
2CA02429000
|
unkown
|
page read and write
|
|
|
|
2C9B5C6E000
|
unkown
|
page read and write
|
|
|
|
1AF94A00000
|
unkown
|
page readonly
|
|
|
|
7FF5439D1000
|
unkown
|
page readonly
|
|
|
|
1AF943C1000
|
unkown
|
page read and write
|
|
|
|
7FF4EC59B000
|
unkown
|
page readonly
|
|
|
|
7FF503E7E000
|
unkown
|
page readonly
|
|
|
|
1AF94341000
|
unkown
|
page read and write
|
|
|
|
7FF54396B000
|
unkown
|
page readonly
|
|
|
|
7F905FE000
|
unkown
|
page read and write
|
|
|
|
2DF4000
|
unkown
|
page readonly
|
|
|
|
9171AFE000
|
unkown
|
page read and write
|
|
|
|
2CA02320000
|
heap private
|
page read and write
|
|
|
|
7FF5D580F000
|
unkown
|
page readonly
|
|
|
|
2DE1000
|
unkown
|
page readonly
|
|
|
|
7FF503E43000
|
unkown
|
page readonly
|
|
|
|
1E4EABA0000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAA7000
|
unkown
|
page readonly
|
|
|
|
850CEFD000
|
unkown
|
page read and write
|
|
|
|
7FF4FA645000
|
unkown
|
page readonly
|
|
|
|
FC8187E000
|
unkown
|
page read and write
|
|
|
|
1D7EA860000
|
heap private
|
page read and write
|
|
|
|
1AF9437C000
|
unkown
|
page read and write
|
|
|
|
7F8FA7E000
|
unkown
|
page read and write
|
|
|
|
7FF4EC7E5000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7EB000
|
unkown
|
page readonly
|
|
|
|
1AF94362000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
unkown
|
page readonly
|
|
|
|
19181C29000
|
unkown
|
page read and write
|
|
|
|
1AF94391000
|
unkown
|
page read and write
|
|
|
|
7FF574F97000
|
unkown
|
page readonly
|
|
|
|
7FF543726000
|
unkown
|
page readonly
|
|
|
|
1AF94386000
|
unkown
|
page read and write
|
|
|
|
12B8BC00000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFAD000
|
unkown
|
page readonly
|
|
|
|
7F904FE000
|
unkown
|
page read and write
|
|
|
|
7FF4EC84E000
|
unkown
|
page readonly
|
|
|
|
BE0000
|
unkown
|
page readonly
|
|
|
|
1E4EAC10000
|
unkown
|
page read and write
|
|
|
|
1E4EB410000
|
unkown
|
page read and write
|
|
|
|
7ED7EFA000
|
unkown
|
page read and write
|
|
|
|
1D7EAA00000
|
unkown
|
page read and write
|
|
|
|
2D65000
|
unkown
|
page readonly
|
|
|
|
2CA042D0000
|
unkown
|
page read and write
|
|
|
|
1AF94362000
|
unkown
|
page read and write
|
|
|
|
23CDF9000
|
unkown
|
page read and write
|
|
|
|
7FF57564B000
|
unkown
|
page readonly
|
|
|
|
7FF4EC817000
|
unkown
|
page readonly
|
|
|
|
7FF500631000
|
unkown
|
page readonly
|
|
|
|
1E4E8BA0000
|
unkown
|
page readonly
|
|
|
|
1AF94361000
|
unkown
|
page read and write
|
|
|
|
1AF93950000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC44000
|
unkown
|
page readonly
|
|
|
|
DCA767E000
|
unkown
|
page read and write
|
|
|
|
7FF5CDA03000
|
unkown
|
page readonly
|
|
|
|
2D73000
|
unkown
|
page readonly
|
|
|
|
1AF94804000
|
unkown
|
page read and write
|
|
|
|
2C9B5E00000
|
unkown
|
page readonly
|
|
|
|
2D59000
|
unkown
|
page readonly
|
|
|
|
19E1DFF000
|
unkown
|
page read and write
|
|
|
|
7FF4FA9DC000
|
unkown
|
page readonly
|
|
|
|
1A5781EF000
|
unkown
|
page read and write
|
|
|
|
1E4EAF00000
|
unkown
|
page read and write
|
|
|
|
1AF943A4000
|
unkown
|
page read and write
|
|
|
|
FC815CE000
|
unkown
|
page read and write
|
|
|
|
7FF503CD9000
|
unkown
|
page readonly
|
|
|
|
1AF94332000
|
unkown
|
page read and write
|
|
|
|
7FF4EC80F000
|
unkown
|
page readonly
|
|
|
|
7FF5AEF2D000
|
unkown
|
page readonly
|
|
|
|
7FF4EC5BF000
|
unkown
|
page readonly
|
|
|
|
1A5781D6000
|
heap default
|
page read and write
|
|
|
|
19E1BFF000
|
unkown
|
page read and write
|
|
|
|
12B8BB20000
|
heap default
|
page read and write
|
|
|
|
2879524F000
|
unkown
|
page read and write
|
|
|
|
1E4EC100000
|
unkown
|
page read and write
|
|
|
|
7FF500713000
|
unkown
|
page readonly
|
|
|
|
A80000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC4A000
|
unkown
|
page readonly
|
|
|
|
7F8FE77000
|
unkown
|
page read and write
|
|
|
|
1AF93990000
|
unkown
|
page readonly
|
|
|
|
917207D000
|
unkown
|
page read and write
|
|
|
|
1E4E8D70000
|
unkown
|
page read and write
|
|
|
|
7FF503EAC000
|
unkown
|
page readonly
|
|
|
|
2CA03F70000
|
unkown
|
page readonly
|
|
|
|
7FF4FF4C9000
|
unkown
|
page readonly
|
|
|
|
850CA7A000
|
unkown
|
page read and write
|
|
|
|
191835A0000
|
unkown
|
page read and write
|
|
|
|
7FF5751B2000
|
unkown
|
page readonly
|
|
|
|
7FF575640000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7AB000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6C4000
|
unkown
|
page readonly
|
|
|
|
1E4E8C92000
|
unkown
|
page read and write
|
|
|
|
12B8BC50000
|
unkown
|
page read and write
|
|
|
|
7FF57566F000
|
unkown
|
page readonly
|
|
|
|
19E187B000
|
unkown
|
page read and write
|
|
|
|
7FF500575000
|
unkown
|
page readonly
|
|
|
|
7ED7F7F000
|
unkown
|
page read and write
|
|
|
|
7FF50074A000
|
unkown
|
page readonly
|
|
|
|
18296450000
|
unkown
|
page read and write
|
|
|
|
7FF5CDB5A000
|
unkown
|
page readonly
|
|
|
|
28795302000
|
unkown
|
page read and write
|
|
|
|
19181C69000
|
unkown
|
page read and write
|
|
|
|
7F903FA000
|
unkown
|
page read and write
|
|
|
|
1E4EAB02000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB5A000
|
unkown
|
page readonly
|
|
|
|
19181C68000
|
unkown
|
page read and write
|
|
|
|
7FF5755E2000
|
unkown
|
page readonly
|
|
|
|
7FF5439D9000
|
unkown
|
page readonly
|
|
|
|
7FF5D5F5C000
|
unkown
|
page readonly
|
|
|
|
1E4EAB8A000
|
unkown
|
page read and write
|
|
|
|
1E4EABB6000
|
unkown
|
page read and write
|
|
|
|
7FF5D5EEE000
|
unkown
|
page readonly
|
|
|
|
1E4EAB60000
|
unkown
|
page read and write
|
|
|
|
1E4E8D31000
|
unkown
|
page read and write
|
|
|
|
7FF54385B000
|
unkown
|
page readonly
|
|
|
|
7FF4FF612000
|
unkown
|
page readonly
|
|
|
|
850C97D000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAE9000
|
unkown
|
page readonly
|
|
|
|
7FF57569F000
|
unkown
|
page readonly
|
|
|
|
2CA02457000
|
unkown
|
page read and write
|
|
|
|
1E4E8C65000
|
unkown
|
page read and write
|
|
|
|
2C9B7770000
|
unkown
|
page readonly
|
|
|
|
D1A000
|
heap default
|
page read and write
|
|
|
|
2D3C000
|
unkown
|
page readonly
|
|
|
|
7FF503D61000
|
unkown
|
page readonly
|
|
|
|
7FF57553B000
|
unkown
|
page readonly
|
|
|
|
7FF4EC605000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB4A000
|
unkown
|
page readonly
|
|
|
|
7FF5D601C000
|
unkown
|
page readonly
|
|
|
|
1AF94397000
|
unkown
|
page read and write
|
|
|
|
28795C00000
|
unkown
|
page readonly
|
|
|
|
7FF503B4F000
|
unkown
|
page readonly
|
|
|
|
7FF4EC856000
|
unkown
|
page readonly
|
|
|
|
7FF50041A000
|
unkown
|
page readonly
|
|
|
|
28795200000
|
unkown
|
page read and write
|
|
|
|
7FF4FF687000
|
unkown
|
page readonly
|
|
|
|
18296500000
|
unkown
|
page read and write
|
|
|
|
7FF575677000
|
unkown
|
page readonly
|
|
|
|
1AF94332000
|
unkown
|
page read and write
|
|
|
|
1E4EAC00000
|
unkown
|
page read and write
|
|
|
|
7FF5AEF0E000
|
unkown
|
page readonly
|
|
|
|
1E4EA5A0000
|
unkown
|
page read and write
|
|
|
|
2D50000
|
unkown
|
page readonly
|
|
|
|
1AF939B0000
|
unkown
|
page write copy
|
|
|
|
1E4EA9F0000
|
unkown
|
page read and write
|
|
|
|
7FF543923000
|
unkown
|
page readonly
|
|
|
|
2879523C000
|
unkown
|
page read and write
|
|
|
|
1D7EA9F0000
|
unkown
|
page readonly
|
|
|
|
7FF5007C1000
|
unkown
|
page readonly
|
|
|
|
2CA0243F000
|
unkown
|
page read and write
|
|
|
|
7FF574E5F000
|
unkown
|
page readonly
|
|
|
|
1E4EC082000
|
unkown
|
page read and write
|
|
|
|
1E4E8C7F000
|
unkown
|
page read and write
|
|
|
|
1E4EAE3A000
|
unkown
|
page read and write
|
|
|
|
7FF5754E3000
|
unkown
|
page readonly
|
|
|
|
1E4E8D1C000
|
unkown
|
page read and write
|
|
|
|
19181D13000
|
unkown
|
page read and write
|
|
|
|
7FF5AEFA2000
|
unkown
|
page readonly
|
|
|
|
2D43000
|
unkown
|
page readonly
|
|
|
|
7FF4EC8CA000
|
unkown
|
page readonly
|
|
|
|
7FF575481000
|
unkown
|
page readonly
|
|
|
|
7F90178000
|
unkown
|
page read and write
|
|
|
|
7FF50040C000
|
unkown
|
page readonly
|
|
|
|
2D7A000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB77000
|
unkown
|
page readonly
|
|
|
|
1E4EA6A0000
|
unkown
|
page readonly
|
|
|
|
2C9B5B90000
|
unkown
|
page write copy
|
|
|
|
12B8BC13000
|
unkown
|
page read and write
|
|
|
|
7FF503C3B000
|
unkown
|
page readonly
|
|
|
|
917178B000
|
unkown
|
page read and write
|
|
|
|
2C9B5C6C000
|
unkown
|
page read and write
|
|
|
|
191836A0000
|
unkown
|
page readonly
|
|
|
|
2D3C000
|
unkown
|
page readonly
|
|
|
|
7FF5439D6000
|
unkown
|
page readonly
|
|
|
|
1AF94355000
|
unkown
|
page read and write
|
|
|
|
2CA02600000
|
unkown
|
page readonly
|
|
|
|
1AF93A70000
|
unkown
|
page read and write
|
|
|
|
7FF5CDACC000
|
unkown
|
page readonly
|
|
|
|
7FF4FF33A000
|
unkown
|
page readonly
|
|
|
|
2D35000
|
unkown
|
page readonly
|
|
|
|
1E4EAE94000
|
unkown
|
page read and write
|
|
|
|
7FF4EC6C1000
|
unkown
|
page readonly
|
|
|
|
7FF503E7A000
|
unkown
|
page readonly
|
|
|
|
913000
|
unkown
|
page read and write
|
|
|
|
2D6D000
|
unkown
|
page readonly
|
|
|
|
1E4EA9F0000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAED000
|
unkown
|
page readonly
|
|
|
|
7FF5AEF04000
|
unkown
|
page readonly
|
|
|
|
1E4EAB14000
|
unkown
|
page read and write
|
|
|
|
7FF4FAA6A000
|
unkown
|
page readonly
|
|
|
|
7FF5CDBA4000
|
unkown
|
page readonly
|
|
|
|
7FF5AE803000
|
unkown
|
page readonly
|
|
|
|
7FF575657000
|
unkown
|
page readonly
|
|
|
|
1AF94361000
|
unkown
|
page read and write
|
|
|
|
28795284000
|
unkown
|
page read and write
|
|
|
|
23CCFF000
|
unkown
|
page read and write
|
|
|
|
7FF5CDB8C000
|
unkown
|
page readonly
|
|
|
|
1E4EAE63000
|
unkown
|
page read and write
|
|
|
|
7FF4FF347000
|
unkown
|
page readonly
|
|
|
|
19181D00000
|
unkown
|
page read and write
|
|
|
|
19181C68000
|
unkown
|
page read and write
|
|
|
|
12B8BC47000
|
unkown
|
page read and write
|
|
|
|
12B8C280000
|
unkown
|
page read and write
|
|
|
|
1AF94391000
|
unkown
|
page read and write
|
|
|
|
7FF4FF6BA000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7AF000
|
unkown
|
page readonly
|
|
|
|
1E4E8CCD000
|
unkown
|
page read and write
|
|
|
|
1AF94800000
|
unkown
|
page read and write
|
|
|
|
2C9B5C02000
|
unkown
|
page read and write
|
|
|
|
1AF9438D000
|
unkown
|
page read and write
|
|
|
|
7FF5AEF1E000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7DE000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB6B000
|
unkown
|
page readonly
|
|
|
|
7FF4EC49C000
|
unkown
|
page readonly
|
|
|
|
1AF94391000
|
unkown
|
page read and write
|
|
|
|
7FF5005A9000
|
unkown
|
page readonly
|
|
|
|
7FF503E22000
|
unkown
|
page readonly
|
|
|
|
7FF4FF436000
|
unkown
|
page readonly
|
|
|
|
1A578180000
|
unkown
|
page read and write
|
|
|
|
18296402000
|
unkown
|
page read and write
|
|
|
|
7FF5007CD000
|
unkown
|
page readonly
|
|
|
|
19181C68000
|
unkown
|
page read and write
|
|
|
|
2DE5000
|
unkown
|
page readonly
|
|
|
|
7FF5431C1000
|
unkown
|
page readonly
|
|
|
|
7FF5CDAB3000
|
unkown
|
page readonly
|
|
|
|
7F8FAFE000
|
unkown
|
page read and write
|
|
|
|
19E1A75000
|
unkown
|
page read and write
|
|
|
|
7FF4EC851000
|
unkown
|
page readonly
|
|
|
|
1E4EABDE000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
unkown
|
page readonly
|
|
|
|
7FF5D6007000
|
unkown
|
page readonly
|
|
|
|
19181E00000
|
unkown
|
page readonly
|
|
|
|
1E4EAC30000
|
unkown
|
page readonly
|
|
|
|
2879524D000
|
unkown
|
page read and write
|
|
|
|
7FF5D5F43000
|
unkown
|
page readonly
|
|
|
|
1E4EAE46000
|
unkown
|
page read and write
|
|
|
|
2D73000
|
unkown
|
page readonly
|
|
|
|
7FF5007C6000
|
unkown
|
page readonly
|
|
|
|
2D1A000
|
unkown
|
page readonly
|
|
|
|
7FF5755AC000
|
unkown
|
page readonly
|
|
|
|
7FF5D6058000
|
unkown
|
page readonly
|
|
|
|
7FF503EB8000
|
unkown
|
page readonly
|
|
|
|
1E4EB310000
|
unkown
|
page read and write
|
|
|
|
1E4EB000000
|
unkown
|
page read and write
|
|
|
|
19181C69000
|
unkown
|
page read and write
|
|
|
|
18296470000
|
unkown
|
page read and write
|
|
|
|
A7B000
|
unkown
|
page read and write
|
|
|
|
1AF93940000
|
unkown
|
page readonly
|
|
|
|
2C9B5C6A000
|
unkown
|
page read and write
|
|
|
|
7FF4FAA5C000
|
unkown
|
page readonly
|
|
|
|
18296429000
|
unkown
|
page read and write
|
|
|
|
1E4EB310000
|
unkown
|
page read and write
|
|
|
|
1AF93AAA000
|
unkown
|
page read and write
|
|
|
|
7FF4FF675000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7BF000
|
unkown
|
page readonly
|
|
|
|
2E13000
|
unkown
|
page readonly
|
|
|
|
7FF5CDBB4000
|
unkown
|
page readonly
|
|
|
|
7FF500794000
|
unkown
|
page readonly
|
|
|
|
18296A02000
|
unkown
|
page read and write
|
|
|
|
2C9B5D02000
|
unkown
|
page read and write
|
|
|
|
1AF93AEA000
|
unkown
|
page read and write
|
|
|
|
7FF5D60D4000
|
unkown
|
page readonly
|
|
|
|
28795308000
|
unkown
|
page read and write
|
|
|
|
7FF5CDAAD000
|
unkown
|
page readonly
|
|
|
|
2C9B5C35000
|
unkown
|
page read and write
|
|
|
|
1AF9439A000
|
unkown
|
page read and write
|
|
|
|
7FF575543000
|
unkown
|
page readonly
|
|
|
|
850C8FA000
|
unkown
|
page read and write
|
|
|
|
12B8BD13000
|
unkown
|
page read and write
|
|
|
|
1AF94396000
|
unkown
|
page read and write
|
|
|
|
1A5783A0000
|
unkown
|
page readonly
|
|
|
|
7FF5036DD000
|
unkown
|
page readonly
|
|
|
|
7FF4FF66A000
|
unkown
|
page readonly
|
|
|
|
7FF575731000
|
unkown
|
page readonly
|
|
|
|
7FF5CDBDD000
|
unkown
|
page readonly
|
|
|
|
7FF57563E000
|
unkown
|
page readonly
|
|
|
|
1E4EC142000
|
unkown
|
page read and write
|
|
|
|
7FF543785000
|
unkown
|
page readonly
|
|
|
|
2D81000
|
unkown
|
page readonly
|
|
|
|
A0339F9000
|
unkown
|
page read and write
|
|
|
|
7FF5006F0000
|
unkown
|
page readonly
|
|
|
|
7FF543960000
|
unkown
|
page readonly
|
|
|
|
2A13000
|
unkown
|
page readonly
|
|
|
|
7FF5D5CC9000
|
unkown
|
page readonly
|
|
|
|
2E13000
|
unkown
|
page readonly
|
|
|
|
2D0C000
|
unkown
|
page readonly
|
|
|
|
850C7FA000
|
unkown
|
page read and write
|
|
|
|
850CDFB000
|
unkown
|
page read and write
|
|
|
|
7FF5AEEB5000
|
unkown
|
page readonly
|
|
|
|
1E4E8C7D000
|
unkown
|
page read and write
|
|
|
|
850CAFB000
|
unkown
|
page read and write
|
|
|
|
2D09000
|
unkown
|
page readonly
|
|
|
|
1E4EAE32000
|
unkown
|
page read and write
|
|
|
|
1AF93AF9000
|
unkown
|
page read and write
|
|
|
|
1E4E8C47000
|
unkown
|
page read and write
|
|
|
|
28795190000
|
unkown
|
page read and write
|
|
|
|
1AF94202000
|
unkown
|
page read and write
|
|
|
|
1AF9438D000
|
unkown
|
page read and write
|
|
|
|
12B8C600000
|
unkown
|
page readonly
|
|
|
|
7FF5D5FDA000
|
unkown
|
page readonly
|
|
|
|
850C9FB000
|
unkown
|
page read and write
|
|
|
|
7FF4EC7CC000
|
unkown
|
page readonly
|
|
|
|
1AF94351000
|
unkown
|
page read and write
|
|
|
|
1E4E89C0000
|
heap private
|
page read and write
|
|
|
|
1AF94391000
|
unkown
|
page read and write
|
|
|
|
7FF5D6027000
|
unkown
|
page readonly
|
|
|
|
7FF5CDBBF000
|
unkown
|
page readonly
|
|
|
|
2C9B5C6A000
|
unkown
|
page read and write
|
|
|
|
7FF4FA951000
|
unkown
|
page readonly
|
|
|
|
7FF54395A000
|
unkown
|
page readonly
|
|
|
|
2CA02380000
|
heap default
|
page read and write
|
|
|
|
1A5781A0000
|
unkown
|
page read and write
|
|
|
|
7FF57566C000
|
unkown
|
page readonly
|
|
|
|
7FF543965000
|
unkown
|
page readonly
|
|
|
|
1AF94361000
|
unkown
|
page read and write
|
|
|
|
A033A7E000
|
unkown
|
page read and write
|
|
|
|
7FF50041F000
|
unkown
|
page readonly
|
|
|
|
1AF93A52000
|
unkown
|
page read and write
|
|
|
|
7FF5CDAC4000
|
unkown
|
page readonly
|
|
|
|
1E4EAF42000
|
unkown
|
page read and write
|
|
|
|
1E4E8C7A000
|
unkown
|
page read and write
|
|
|
|
9171A7E000
|
unkown
|
page read and write
|
|
|
|
18296449000
|
unkown
|
page read and write
|
|
|
|
7FF5756B6000
|
unkown
|
page readonly
|
|
|
|
7FF5CDB4C000
|
unkown
|
page readonly
|
|
|
|
1D7EAA55000
|
unkown
|
page read and write
|
|
|
|
2D35000
|
unkown
|
page readonly
|
|
|
|
7FF575206000
|
unkown
|
page readonly
|
|
|
|
7FF575406000
|
unkown
|
page readonly
|
|
|
|
18296513000
|
unkown
|
page read and write
|
|
|
|
7FF543841000
|
unkown
|
page readonly
|
|
|
|
7FF575593000
|
unkown
|
page readonly
|
|
|
|
182962E0000
|
unkown
|
page readonly
|
|
|
|
7FF575200000
|
unkown
|
page readonly
|
|
|
|
7FF54395E000
|
unkown
|
page readonly
|
|
|
|
7FF500841000
|
unkown
|
page readonly
|
|
|
|
12B8C940000
|
unkown
|
page readonly
|
|
|
|
1AF94080000
|
unkown
|
page readonly
|
|
|
|
1E4EAB71000
|
unkown
|
page read and write
|
|
|
|
1E4EA9F0000
|
unkown
|
page read and write
|
|
|
|
1AF943D2000
|
unkown
|
page read and write
|
|
|
|
7FF575684000
|
unkown
|
page readonly
|
|
|
|
1E4EB010000
|
unkown
|
page read and write
|
|
|
|
19181C13000
|
unkown
|
page read and write
|
|
|
|
2D43000
|
unkown
|
page readonly
|
|
|
|
7FF4FF56B000
|
unkown
|
page readonly
|
|
|
|
1E4EAB02000
|
unkown
|
page read and write
|
|
|
|
A03397F000
|
unkown
|
page read and write
|
|
|
|
1E4EC000000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAB4000
|
unkown
|
page readonly
|
|
|
|
2C9B7670000
|
unkown
|
page read and write
|
|
|
|
7FF4FF66E000
|
unkown
|
page readonly
|
|
|
|
1E4E8C80000
|
unkown
|
page read and write
|
|
|
|
7FF4EC4AF000
|
unkown
|
page readonly
|
|
|
|
7FF4EC6DB000
|
unkown
|
page readonly
|
|
|
|
1AF94391000
|
unkown
|
page read and write
|
|
|
|
7FF5AEF29000
|
unkown
|
page readonly
|
|
|
|
9171E77000
|
unkown
|
page read and write
|
|
|
|
2E08000
|
unkown
|
page readonly
|
|
|
|
850CE79000
|
unkown
|
page read and write
|
|
|
|
7FF5D606D000
|
unkown
|
page readonly
|
|
|
|
7FF5439CE000
|
unkown
|
page readonly
|
|
|
|
1AF94080000
|
unkown
|
page read and write
|
|
|
|
7FF503E80000
|
unkown
|
page readonly
|
|
|
|
1AF94352000
|
unkown
|
page read and write
|
|
|
|
7FF4FF573000
|
unkown
|
page readonly
|
|
|
|
1E4E8CDC000
|
unkown
|
page read and write
|
|
|
|
7FF5D603A000
|
unkown
|
page readonly
|
|
|
|
19181C6A000
|
unkown
|
page read and write
|
|
|
|
1AF94090000
|
unkown
|
page read and write
|
|
|
|
1E4EAC60000
|
unkown
|
page readonly
|
|
|
|
7FF5D5BB0000
|
unkown
|
page readonly
|
|
|
|
1D7EAA3F000
|
unkown
|
page read and write
|
|
|
|
7FF5439A4000
|
unkown
|
page readonly
|
|
|
|
BC0000
|
heap default
|
page read and write
|
|
|
|
7FF575440000
|
unkown
|
page readonly
|
|
|
|
7FF503E85000
|
unkown
|
page readonly
|
|
|
|
7FF4EC72D000
|
unkown
|
page readonly
|
|
|
|
1E4E8C80000
|
unkown
|
page read and write
|
|
|
|
7FF4FA74A000
|
unkown
|
page readonly
|
|
|
|
DCA75FF000
|
unkown
|
page read and write
|
|
|
|
2C9B5C6D000
|
unkown
|
page read and write
|
|
|
|
7FF5AEEDC000
|
unkown
|
page readonly
|
|
|
|
7FF5AEEE8000
|
unkown
|
page readonly
|
|
|
|
7FF4FA630000
|
unkown
|
page readonly
|
|
|
|
1AF94389000
|
unkown
|
page read and write
|
|
|
|
2CA02390000
|
unkown
|
page write copy
|
|
|
|
1AF94804000
|
unkown
|
page read and write
|
|
|
|
28A7FB000
|
unkown
|
page read and write
|
|
|
|
1AF9437B000
|
unkown
|
page read and write
|
|
|
|
9171C7E000
|
unkown
|
page read and write
|
|
|
|
7FF5D5ED1000
|
unkown
|
page readonly
|
|
|
|
28A977000
|
unkown
|
page read and write
|
|
|
|
1AF94380000
|
unkown
|
page read and write
|
|
|
|
28AA7E000
|
unkown
|
page read and write
|
|
|
|
23C9AA000
|
unkown
|
page read and write
|
|
|
|
7FF5D605E000
|
unkown
|
page readonly
|
|
|
|
1E4E8D3E000
|
unkown
|
page read and write
|
|
|
|
7FF575319000
|
unkown
|
page readonly
|
|
|
|
19E1CF7000
|
unkown
|
page read and write
|
|
|
|
7FF4EC8D2000
|
unkown
|
page readonly
|
|
|
|
1D7EA8D0000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6CE000
|
unkown
|
page readonly
|
|
|
|
7FF503D88000
|
unkown
|
page readonly
|
|
|
|
1E4E8D1F000
|
unkown
|
page read and write
|
|
|
|
7FF5007C9000
|
unkown
|
page readonly
|
|
|
|
7FF50074E000
|
unkown
|
page readonly
|
|
|
|
7FF503EF9000
|
unkown
|
page readonly
|
|
|
|
1AF94351000
|
unkown
|
page read and write
|
|
|
|
7FF503C46000
|
unkown
|
page readonly
|
|
|
|
7FF4FA8C1000
|
unkown
|
page readonly
|
|
|
|
1AF93A29000
|
unkown
|
page read and write
|
|
|
|
7FF4FF491000
|
unkown
|
page readonly
|
|
|
|
A70000
|
heap private
|
page read and write
|
|
|
|
7FF5D5FDC000
|
unkown
|
page readonly
|
|
|
|
12B8C000000
|
unkown
|
page readonly
|
|
|
|
7FF5CDBAA000
|
unkown
|
page readonly
|
|
|
|
1E4E8E00000
|
unkown
|
page readonly
|
|
|
|
7FF5751A2000
|
unkown
|
page readonly
|
|
|
|
7FF5755A4000
|
unkown
|
page readonly
|
|
|
|
7FF4EC8C4000
|
unkown
|
page readonly
|
|
|
|
1E4EB210000
|
unkown
|
page read and write
|
|
|
|
7FF5CDB8F000
|
unkown
|
page readonly
|
|
|
|
7F8FD7E000
|
unkown
|
page read and write
|
|
|
|
7FF54398F000
|
unkown
|
page readonly
|
|
|
|
1A578390000
|
heap private
|
page read and write
|
|
|
|
1829648D000
|
unkown
|
page read and write
|
|
|
|
1AF93860000
|
heap default
|
page read and write
|
|
|
|
2DE5000
|
unkown
|
page readonly
|
|
|
|
FB0000
|
heap private
|
page read and write
|
|
|
|
7ED7B7F000
|
unkown
|
page read and write
|
|
|
|
7FF5CDBD9000
|
unkown
|
page readonly
|
|
|
|
7FF4EC621000
|
unkown
|
page readonly
|
|
|
|
1AF93870000
|
unkown
|
page readonly
|
|
There are 1066 hidden memdumps, click here to show them.