Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
audit-528010081.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$audit-528010081.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\86CA0570-570E-45EB-89AD-3E5582F24DA2
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\15B60C59.png
|
PNG image data, 521 x 246, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\165B7932.png
|
PNG image data, 490 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\33236C84.png
|
PNG image data, 246 x 108, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4EED1AB5.png
|
PNG image data, 934 x 29, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\742F88CF.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D7DB1686.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\0CB40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\covi1.dll
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\covi2.dll
|
|
|
|
C:\Windows\splwow64.exe
|
C:\Windows\splwow64.exe 12288
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://loki.delve.office.com/api/v1/configuration/officewin32/
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
treasurechestcaribbean.com
|
192.185.33.154
|
|
|
|
shadiinfo.com
|
43.225.55.182
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
43.225.55.182
|
shadiinfo.com
|
United Arab Emirates
|
|
|
|
192.185.33.154
|
treasurechestcaribbean.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1$?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2$?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B2D2
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B851
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B94B
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BA45
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BC96
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
aa?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 52 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF55BD81000
|
unkown
|
page readonly
|
|
|
|
29B4857E000
|
unkown
|
page read and write
|
|
|
|
2B38000
|
unkown
|
page readonly
|
|
|
|
28647EA0000
|
unkown
|
page readonly
|
|
|
|
2E432246000
|
unkown
|
page read and write
|
|
|
|
7FF55F5E9000
|
unkown
|
page readonly
|
|
|
|
2B11000
|
unkown
|
page readonly
|
|
|
|
7FF58DC87000
|
unkown
|
page readonly
|
|
|
|
2533F700000
|
heap private
|
page read and write
|
|
|
|
3390000
|
heap private
|
page read and write
|
|
|
|
7FF57C499000
|
unkown
|
page readonly
|
|
|
|
7FF57C8F7000
|
unkown
|
page readonly
|
|
|
|
29B485B0000
|
unkown
|
page read and write
|
|
|
|
29B48548000
|
unkown
|
page read and write
|
|
|
|
2166B96F000
|
unkown
|
page read and write
|
|
|
|
28646402000
|
unkown
|
page read and write
|
|
|
|
2533F7C0000
|
unkown
|
page readonly
|
|
|
|
29B48548000
|
unkown
|
page read and write
|
|
|
|
7FF55BF08000
|
unkown
|
page readonly
|
|
|
|
29B48522000
|
unkown
|
page read and write
|
|
|
|
2166BB10000
|
unkown
|
page read and write
|
|
|
|
2A6C000
|
unkown
|
page readonly
|
|
|
|
29B485A7000
|
unkown
|
page read and write
|
|
|
|
29B4857F000
|
unkown
|
page read and write
|
|
|
|
7FF55BA60000
|
unkown
|
page readonly
|
|
|
|
29B485C3000
|
unkown
|
page read and write
|
|
|
|
7FF58DAC1000
|
unkown
|
page readonly
|
|
|
|
29B48555000
|
unkown
|
page read and write
|
|
|
|
AD29CFC000
|
unkown
|
page read and write
|
|
|
|
29B48587000
|
unkown
|
page read and write
|
|
|
|
D5B1CFB000
|
unkown
|
page read and write
|
|
|
|
29B48565000
|
unkown
|
page read and write
|
|
|
|
7FF54AD54000
|
unkown
|
page readonly
|
|
|
|
29B485B0000
|
unkown
|
page read and write
|
|
|
|
7FF58DCED000
|
unkown
|
page readonly
|
|
|
|
7FF58DD54000
|
unkown
|
page readonly
|
|
|
|
E5ED87F000
|
unkown
|
page read and write
|
|
|
|
A10DBFF000
|
unkown
|
page read and write
|
|
|
|
29E88F08000
|
unkown
|
page read and write
|
|
|
|
25342310000
|
unkown
|
page read and write
|
|
|
|
29B48560000
|
unkown
|
page read and write
|
|
|
|
7FF58DD62000
|
unkown
|
page readonly
|
|
|
|
5B0000
|
heap default
|
page read and write
|
|
|
|
29B48585000
|
unkown
|
page read and write
|
|
|
|
7FF55F5C4000
|
unkown
|
page readonly
|
|
|
|
28646456000
|
unkown
|
page read and write
|
|
|
|
A10DCFD000
|
unkown
|
page read and write
|
|
|
|
2533F91B000
|
unkown
|
page read and write
|
|
|
|
7FF54ADEA000
|
unkown
|
page readonly
|
|
|
|
2E432213000
|
unkown
|
page read and write
|
|
|
|
7FF57C7BB000
|
unkown
|
page readonly
|
|
|
|
29B48B00000
|
unkown
|
page read and write
|
|
|
|
D5B18F9000
|
unkown
|
page read and write
|
|
|
|
253419C4000
|
unkown
|
page read and write
|
|
|
|
D5B1D7C000
|
unkown
|
page read and write
|
|
|
|
7FF57C860000
|
unkown
|
page readonly
|
|
|
|
29E89000000
|
unkown
|
page readonly
|
|
|
|
7FF55F5BA000
|
unkown
|
page readonly
|
|
|
|
29B4857C000
|
unkown
|
page read and write
|
|
|
|
2E432200000
|
unkown
|
page read and write
|
|
|
|
7FF58DC5C000
|
unkown
|
page readonly
|
|
|
|
2166BCF0000
|
heap private
|
page read and write
|
|
|
|
2534190E000
|
unkown
|
page read and write
|
|
|
|
25341A53000
|
unkown
|
page read and write
|
|
|
|
29B4856B000
|
unkown
|
page read and write
|
|
|
|
2166B96F000
|
unkown
|
page read and write
|
|
|
|
29B4855C000
|
unkown
|
page read and write
|
|
|
|
7FF57C92E000
|
unkown
|
page readonly
|
|
|
|
2E432252000
|
unkown
|
page read and write
|
|
|
|
29E88E00000
|
unkown
|
page read and write
|
|
|
|
7FF57C8BE000
|
unkown
|
page readonly
|
|
|
|
29B47CE9000
|
unkown
|
page read and write
|
|
|
|
29B4859A000
|
unkown
|
page read and write
|
|
|
|
2B15000
|
unkown
|
page readonly
|
|
|
|
29B485A8000
|
unkown
|
page read and write
|
|
|
|
2166B940000
|
heap default
|
page read and write
|
|
|
|
2A43000
|
unkown
|
page readonly
|
|
|
|
2864646A000
|
unkown
|
page read and write
|
|
|
|
29B47C58000
|
unkown
|
page read and write
|
|
|
|
7FF54ACD4000
|
unkown
|
page readonly
|
|
|
|
7FF58DBC3000
|
unkown
|
page readonly
|
|
|
|
30B0000
|
unkown
|
page read and write
|
|
|
|
29E88DE0000
|
unkown
|
page read and write
|
|
|
|
2E432302000
|
unkown
|
page read and write
|
|
|
|
7FF58DCC4000
|
unkown
|
page readonly
|
|
|
|
25341730000
|
unkown
|
page read and write
|
|
|
|
7FF55BD9E000
|
unkown
|
page readonly
|
|
|
|
7FF54AB41000
|
unkown
|
page readonly
|
|
|
|
29B47B90000
|
unkown
|
page readonly
|
|
|
|
2AAF000
|
unkown
|
page readonly
|
|
|
|
29B48558000
|
unkown
|
page read and write
|
|
|
|
25341D02000
|
unkown
|
page read and write
|
|
|
|
7FF54AD44000
|
unkown
|
page readonly
|
|
|
|
25341370000
|
unkown
|
page readonly
|
|
|
|
25341B02000
|
unkown
|
page read and write
|
|
|
|
D5B1E7A000
|
unkown
|
page read and write
|
|
|
|
7FF55BC20000
|
unkown
|
page readonly
|
|
|
|
29B4856D000
|
unkown
|
page read and write
|
|
|
|
29B48563000
|
unkown
|
page read and write
|
|
|
|
2B38000
|
unkown
|
page readonly
|
|
|
|
29B47C55000
|
unkown
|
page read and write
|
|
|
|
2533F813000
|
unkown
|
page read and write
|
|
|
|
7FF58D830000
|
unkown
|
page readonly
|
|
|
|
7FF58DCCF000
|
unkown
|
page readonly
|
|
|
|
29B48A61000
|
unkown
|
page read and write
|
|
|
|
29B485A6000
|
unkown
|
page read and write
|
|
|
|
33A0000
|
unkown
|
page readonly
|
|
|
|
29B485A7000
|
unkown
|
page read and write
|
|
|
|
29B485A7000
|
unkown
|
page read and write
|
|
|
|
30D0000
|
unkown
|
page readonly
|
|
|
|
7FF55BECF000
|
unkown
|
page readonly
|
|
|
|
2B32000
|
unkown
|
page readonly
|
|
|
|
2E43224D000
|
unkown
|
page read and write
|
|
|
|
7FF54AB51000
|
unkown
|
page readonly
|
|
|
|
29B485A1000
|
unkown
|
page read and write
|
|
|
|
D5B1FFA000
|
unkown
|
page read and write
|
|
|
|
7FF4F6EAA000
|
unkown
|
page readonly
|
|
|
|
29B4853C000
|
unkown
|
page read and write
|
|
|
|
2AAA000
|
unkown
|
page readonly
|
|
|
|
7FF55BF91000
|
unkown
|
page readonly
|
|
|
|
29B48A61000
|
unkown
|
page read and write
|
|
|
|
D5B1AFB000
|
unkown
|
page read and write
|
|
|
|
7FF54AC08000
|
unkown
|
page readonly
|
|
|
|
29B48A02000
|
unkown
|
page read and write
|
|
|
|
29B48A02000
|
unkown
|
page read and write
|
|
|
|
29B48548000
|
unkown
|
page read and write
|
|
|
|
D5B15DE000
|
unkown
|
page read and write
|
|
|
|
7FF58DB13000
|
unkown
|
page readonly
|
|
|
|
7FF57C719000
|
unkown
|
page readonly
|
|
|
|
29B48598000
|
unkown
|
page read and write
|
|
|
|
7FF55F23A000
|
unkown
|
page readonly
|
|
|
|
2A9D000
|
unkown
|
page readonly
|
|
|
|
2534196A000
|
unkown
|
page read and write
|
|
|
|
2A97000
|
unkown
|
page readonly
|
|
|
|
2AC2000
|
unkown
|
page readonly
|
|
|
|
7FF57C6E5000
|
unkown
|
page readonly
|
|
|
|
7FF55F451000
|
unkown
|
page readonly
|
|
|
|
29B4852F000
|
unkown
|
page read and write
|
|
|
|
25341A73000
|
unkown
|
page read and write
|
|
|
|
E5B316B000
|
unkown
|
page read and write
|
|
|
|
2533F886000
|
unkown
|
page read and write
|
|
|
|
A10DB7A000
|
unkown
|
page read and write
|
|
|
|
29E88E3C000
|
unkown
|
page read and write
|
|
|
|
7FF55BD9B000
|
unkown
|
page readonly
|
|
|
|
7FF54AD05000
|
unkown
|
page readonly
|
|
|
|
672E27F000
|
unkown
|
page read and write
|
|
|
|
2E432300000
|
unkown
|
page read and write
|
|
|
|
7FF58D4B9000
|
unkown
|
page readonly
|
|
|
|
7FF4F6E28000
|
unkown
|
page readonly
|
|
|
|
7FF57C862000
|
unkown
|
page readonly
|
|
|
|
2533F88E000
|
unkown
|
page read and write
|
|
|
|
2AB1000
|
unkown
|
page readonly
|
|
|
|
7FF54ACA0000
|
unkown
|
page readonly
|
|
|
|
2534196D000
|
unkown
|
page read and write
|
|
|
|
25341802000
|
unkown
|
page read and write
|
|
|
|
29B485A7000
|
unkown
|
page read and write
|
|
|
|
2166B951000
|
unkown
|
page read and write
|
|
|
|
7FF55F587000
|
unkown
|
page readonly
|
|
|
|
7FF57C58F000
|
unkown
|
page readonly
|
|
|
|
29B48547000
|
unkown
|
page read and write
|
|
|
|
29B4852E000
|
unkown
|
page read and write
|
|
|
|
25341A84000
|
unkown
|
page read and write
|
|
|
|
29B48600000
|
unkown
|
page readonly
|
|
|
|
25341913000
|
unkown
|
page read and write
|
|
|
|
2A73000
|
unkown
|
page readonly
|
|
|
|
29B47C13000
|
unkown
|
page read and write
|
|
|
|
7FF54A86E000
|
unkown
|
page readonly
|
|
|
|
2A80000
|
unkown
|
page readonly
|
|
|
|
7FF55BEE4000
|
unkown
|
page readonly
|
|
|
|
29E88E13000
|
unkown
|
page read and write
|
|
|
|
29B47C4D000
|
unkown
|
page read and write
|
|
|
|
7FF57C806000
|
unkown
|
page readonly
|
|
|
|
7FF58DC6A000
|
unkown
|
page readonly
|
|
|
|
2A95000
|
unkown
|
page readonly
|
|
|
|
2533F95C000
|
unkown
|
page read and write
|
|
|
|
29E88F00000
|
unkown
|
page read and write
|
|
|
|
7FF55F46B000
|
unkown
|
page readonly
|
|
|
|
29B48561000
|
unkown
|
page read and write
|
|
|
|
29B485C5000
|
unkown
|
page read and write
|
|
|
|
29B4857E000
|
unkown
|
page read and write
|
|
|
|
7FF55F5D8000
|
unkown
|
page readonly
|
|
|
|
29B4855B000
|
unkown
|
page read and write
|
|
|
|
29B47C29000
|
unkown
|
page read and write
|
|
|
|
29B48591000
|
unkown
|
page read and write
|
|
|
|
E5EDA7F000
|
unkown
|
page read and write
|
|
|
|
7FF54A417000
|
unkown
|
page readonly
|
|
|
|
2A39000
|
unkown
|
page readonly
|
|
|
|
7FF4F6E04000
|
unkown
|
page readonly
|
|
|
|
7FF54ACFE000
|
unkown
|
page readonly
|
|
|
|
2E432400000
|
unkown
|
page readonly
|
|
|
|
310A000
|
heap default
|
page read and write
|
|
|
|
7FF55F473000
|
unkown
|
page readonly
|
|
|
|
E5ED27C000
|
unkown
|
page read and write
|
|
|
|
7FF55F662000
|
unkown
|
page readonly
|
|
|
|
29B485A8000
|
unkown
|
page read and write
|
|
|
|
7FF4F6E1E000
|
unkown
|
page readonly
|
|
|
|
29B4855B000
|
unkown
|
page read and write
|
|
|
|
7FF4F6DEC000
|
unkown
|
page readonly
|
|
|
|
7FF4F6EA4000
|
unkown
|
page readonly
|
|
|
|
AD298F5000
|
unkown
|
page read and write
|
|
|
|
28646210000
|
heap private
|
page read and write
|
|
|
|
E5B31ED000
|
unkown
|
page read and write
|
|
|
|
29B48A02000
|
unkown
|
page read and write
|
|
|
|
25341750000
|
unkown
|
page read and write
|
|
|
|
7FF54ACDF000
|
unkown
|
page readonly
|
|
|
|
29E88E6F000
|
unkown
|
page read and write
|
|
|
|
29B47CDF000
|
unkown
|
page read and write
|
|
|
|
7FF55BEF4000
|
unkown
|
page readonly
|
|
|
|
7FF57C6F6000
|
unkown
|
page readonly
|
|
|
|
29B47CC2000
|
unkown
|
page read and write
|
|
|
|
7FF54A411000
|
unkown
|
page readonly
|
|
|
|
7FF54A917000
|
unkown
|
page readonly
|
|
|
|
7FF54AD00000
|
unkown
|
page readonly
|
|
|
|
25342110000
|
unkown
|
page read and write
|
|
|
|
7FF54ACCF000
|
unkown
|
page readonly
|
|
|
|
29B47C70000
|
unkown
|
page read and write
|
|
|
|
29B4853C000
|
unkown
|
page read and write
|
|
|
|
7FF55F533000
|
unkown
|
page readonly
|
|
|
|
7FF57C89F000
|
unkown
|
page readonly
|
|
|
|
7FF55F510000
|
unkown
|
page readonly
|
|
|
|
25341780000
|
unkown
|
page readonly
|
|
|
|
29B47AD0000
|
heap private
|
page read and write
|
|
|
|
29B48350000
|
unkown
|
page read and write
|
|
|
|
2AAA000
|
unkown
|
page readonly
|
|
|
|
7FF54A601000
|
unkown
|
page readonly
|
|
|
|
29B48598000
|
unkown
|
page read and write
|
|
|
|
29B4854B000
|
unkown
|
page read and write
|
|
|
|
29B4855B000
|
unkown
|
page read and write
|
|
|
|
2B43000
|
unkown
|
page readonly
|
|
|
|
2533F913000
|
unkown
|
page read and write
|
|
|
|
25341740000
|
unkown
|
page read and write
|
|
|
|
25341720000
|
unkown
|
page readonly
|
|
|
|
7FF4F6DF8000
|
unkown
|
page readonly
|
|
|
|
29B48548000
|
unkown
|
page read and write
|
|
|
|
7FF57C69F000
|
unkown
|
page readonly
|
|
|
|
28646280000
|
unkown
|
page readonly
|
|
|
|
2533F91C000
|
unkown
|
page read and write
|
|
|
|
25341B00000
|
unkown
|
page read and write
|
|
|
|
28647DA0000
|
unkown
|
page read and write
|
|
|
|
2B11000
|
unkown
|
page readonly
|
|
|
|
7FF54AAC6000
|
unkown
|
page readonly
|
|
|
|
7FF57C11D000
|
unkown
|
page readonly
|
|
|
|
28646350000
|
unkown
|
page write copy
|
|
|
|
D5B23FF000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown
|
page read and write
|
|
|
|
25341E00000
|
unkown
|
page readonly
|
|
|
|
7FF54A7DE000
|
unkown
|
page readonly
|
|
|
|
7FF54ABE1000
|
unkown
|
page readonly
|
|
|
|
25341270000
|
unkown
|
page read and write
|
|
|
|
7FF57C936000
|
unkown
|
page readonly
|
|
|
|
7FF55F57B000
|
unkown
|
page readonly
|
|
|
|
29B48340000
|
unkown
|
page readonly
|
|
|
|
E5ED9FE000
|
unkown
|
page read and write
|
|
|
|
2166BB30000
|
unkown
|
page read and write
|
|
|
|
7FF54ACEA000
|
unkown
|
page readonly
|
|
|
|
7FF4F6DEF000
|
unkown
|
page readonly
|
|
|
|
7FF57C8BA000
|
unkown
|
page readonly
|
|
|
|
29E88E4D000
|
unkown
|
page read and write
|
|
|
|
7FF55BF92000
|
unkown
|
page readonly
|
|
|
|
29B47C8B000
|
unkown
|
page read and write
|
|
|
|
2E4321A0000
|
unkown
|
page readonly
|
|
|
|
29B48576000
|
unkown
|
page read and write
|
|
|
|
29B47CBB000
|
unkown
|
page read and write
|
|
|
|
29B48561000
|
unkown
|
page read and write
|
|
|
|
29B4854F000
|
unkown
|
page read and write
|
|
|
|
25342010000
|
unkown
|
page read and write
|
|
|
|
7FF57C9AA000
|
unkown
|
page readonly
|
|
|
|
2A80000
|
unkown
|
page readonly
|
|
|
|
29B48548000
|
unkown
|
page read and write
|
|
|
|
A10D79F000
|
unkown
|
page read and write
|
|
|
|
29B47C53000
|
unkown
|
page read and write
|
|
|
|
7FF4F6E2E000
|
unkown
|
page readonly
|
|
|
|
E5B36FE000
|
unkown
|
page read and write
|
|
|
|
2E432283000
|
unkown
|
page read and write
|
|
|
|
7FF4F6E0A000
|
unkown
|
page readonly
|
|
|
|
2A3C000
|
unkown
|
page readonly
|
|
|
|
2AC6000
|
unkown
|
page readonly
|
|
|
|
7FF54AD4A000
|
unkown
|
page readonly
|
|
|
|
29B47C50000
|
unkown
|
page read and write
|
|
|
|
29B48565000
|
unkown
|
page read and write
|
|
|
|
25341730000
|
unkown
|
page read and write
|
|
|
|
7FF57C931000
|
unkown
|
page readonly
|
|
|
|
7FF4F6717000
|
unkown
|
page readonly
|
|
|
|
7FF55BE0C000
|
unkown
|
page readonly
|
|
|
|
7FF58DC75000
|
unkown
|
page readonly
|
|
|
|
7FF54AC53000
|
unkown
|
page readonly
|
|
|
|
7FF4F6713000
|
unkown
|
page readonly
|
|
|
|
25342310000
|
unkown
|
page read and write
|
|
|
|
7FF4F6E14000
|
unkown
|
page readonly
|
|
|
|
7FF54ADF2000
|
unkown
|
page readonly
|
|
|
|
29B48A02000
|
unkown
|
page read and write
|
|
|
|
7FF55BEA0000
|
unkown
|
page readonly
|
|
|
|
29B48561000
|
unkown
|
page read and write
|
|
|
|
29B48529000
|
unkown
|
page read and write
|
|
|
|
2B15000
|
unkown
|
page readonly
|
|
|
|
29E88E4F000
|
unkown
|
page read and write
|
|
|
|
2E43223C000
|
unkown
|
page read and write
|
|
|
|
2B32000
|
unkown
|
page readonly
|
|
|
|
7FF58D836000
|
unkown
|
page readonly
|
|
|
|
D5B197E000
|
unkown
|
page read and write
|
|
|
|
25341B82000
|
unkown
|
page read and write
|
|
|
|
2533F869000
|
unkown
|
page read and write
|
|
|
|
7FF55BF19000
|
unkown
|
page readonly
|
|
|
|
29B485AD000
|
unkown
|
page read and write
|
|
|
|
28646600000
|
unkown
|
page readonly
|
|
|
|
29B48A54000
|
unkown
|
page read and write
|
|
|
|
7FF55BF1D000
|
unkown
|
page readonly
|
|
|
|
7FF54AD6E000
|
unkown
|
page readonly
|
|
|
|
25342000000
|
unkown
|
page read and write
|
|
|
|
7FF54A9DA000
|
unkown
|
page readonly
|
|
|
|
7FF54A8C0000
|
unkown
|
page readonly
|
|
|
|
D5B237C000
|
unkown
|
page read and write
|
|
|
|
7FF54AC6C000
|
unkown
|
page readonly
|
|
|
|
7FF4F6DC5000
|
unkown
|
page readonly
|
|
|
|
D5B1C7B000
|
unkown
|
page read and write
|
|
|
|
29B4856C000
|
unkown
|
page read and write
|
|
|
|
29B4851E000
|
unkown
|
page read and write
|
|
|
|
2E432190000
|
heap default
|
page read and write
|
|
|
|
7FF54AD79000
|
unkown
|
page readonly
|
|
|
|
2A9D000
|
unkown
|
page readonly
|
|
|
|
672E47E000
|
unkown
|
page read and write
|
|
|
|
29B4853C000
|
unkown
|
page read and write
|
|
|
|
25341934000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page readonly
|
|
|
|
29B47B40000
|
unkown
|
page readonly
|
|
|
|
7FF4F6EB1000
|
unkown
|
page readonly
|
|
|
|
29B48566000
|
unkown
|
page read and write
|
|
|
|
7FF55BA75000
|
unkown
|
page readonly
|
|
|
|
2A73000
|
unkown
|
page readonly
|
|
|
|
7FF57C9A4000
|
unkown
|
page readonly
|
|
|
|
7FF55BE04000
|
unkown
|
page readonly
|
|
|
|
7FF55BF8A000
|
unkown
|
page readonly
|
|
|
|
7FF55BDED000
|
unkown
|
page readonly
|
|
|
|
2166BD00000
|
unkown
|
page readonly
|
|
|
|
7FF57C939000
|
unkown
|
page readonly
|
|
|
|
7FF57C1C1000
|
unkown
|
page readonly
|
|
|
|
7FF58D9E7000
|
unkown
|
page readonly
|
|
|
|
7FF57C883000
|
unkown
|
page readonly
|
|
|
|
7FF58DC6E000
|
unkown
|
page readonly
|
|
|
|
29B48544000
|
unkown
|
page read and write
|
|
|
|
29B48548000
|
unkown
|
page read and write
|
|
|
|
D5B1B7B000
|
unkown
|
page read and write
|
|
|
|
7FF57C9B1000
|
unkown
|
page readonly
|
|
|
|
7FF57C8C0000
|
unkown
|
page readonly
|
|
|
|
7FF57C88F000
|
unkown
|
page readonly
|
|
|
|
2E432313000
|
unkown
|
page read and write
|
|
|
|
7FF55EDD1000
|
unkown
|
page readonly
|
|
|
|
278000
|
unkown
|
page read and write
|
|
|
|
29B48558000
|
unkown
|
page read and write
|
|
|
|
E5ED777000
|
unkown
|
page read and write
|
|
|
|
29B48B02000
|
unkown
|
page read and write
|
|
|
|
29E88E4B000
|
unkown
|
page read and write
|
|
|
|
E5B39FF000
|
unkown
|
page read and write
|
|
|
|
29B48566000
|
unkown
|
page read and write
|
|
|
|
7FF55BEFF000
|
unkown
|
page readonly
|
|
|
|
29B48370000
|
unkown
|
page readonly
|
|
|
|
2533F770000
|
unkown
|
page write copy
|
|
|
|
7FF58DC7B000
|
unkown
|
page readonly
|
|
|
|
29B4857F000
|
unkown
|
page read and write
|
|
|
|
D5B1DFB000
|
unkown
|
page read and write
|
|
|
|
190000
|
unkown
|
page readonly
|
|
|
|
29B47D13000
|
unkown
|
page read and write
|
|
|
|
2A65000
|
unkown
|
page readonly
|
|
|
|
29B485AE000
|
unkown
|
page read and write
|
|
|
|
2A39000
|
unkown
|
page readonly
|
|
|
|
E5EDC7F000
|
unkown
|
page read and write
|
|
|
|
7FF58DB6E000
|
unkown
|
page readonly
|
|
|
|
29B48559000
|
unkown
|
page read and write
|
|
|
|
7FF58DBBD000
|
unkown
|
page readonly
|
|
|
|
7FF57C90A000
|
unkown
|
page readonly
|
|
|
|
7FF58DCE6000
|
unkown
|
page readonly
|
|
|
|
29B48569000
|
unkown
|
page read and write
|
|
|
|
29B4854F000
|
unkown
|
page read and write
|
|
|
|
7FF57C85C000
|
unkown
|
page readonly
|
|
|
|
7FF55B5B7000
|
unkown
|
page readonly
|
|
|
|
2E43224B000
|
unkown
|
page read and write
|
|
|
|
7FF57C8AA000
|
unkown
|
page readonly
|
|
|
|
7FF54AB36000
|
unkown
|
page readonly
|
|
|
|
7FF4F6E39000
|
unkown
|
page readonly
|
|
|
|
E5B38FE000
|
unkown
|
page read and write
|
|
|
|
2533F93C000
|
unkown
|
page read and write
|
|
|
|
2B43000
|
unkown
|
page readonly
|
|
|
|
3230000
|
unkown
|
page readonly
|
|
|
|
672E379000
|
unkown
|
page read and write
|
|
|
|
29B47D02000
|
unkown
|
page read and write
|
|
|
|
7FF57C7C8000
|
unkown
|
page readonly
|
|
|
|
2533F92B000
|
unkown
|
page read and write
|
|
|
|
29B48541000
|
unkown
|
page read and write
|
|
|
|
29B48526000
|
unkown
|
page read and write
|
|
|
|
29E88DC0000
|
unkown
|
page readonly
|
|
|
|
7FF55F661000
|
unkown
|
page readonly
|
|
|
|
25341A41000
|
unkown
|
page read and write
|
|
|
|
A10DA7F000
|
unkown
|
page read and write
|
|
|
|
7FF55BE8A000
|
unkown
|
page readonly
|
|
|
|
7FF55F395000
|
unkown
|
page readonly
|
|
|
|
29B47B50000
|
unkown
|
page readonly
|
|
|
|
7FF54AC03000
|
unkown
|
page readonly
|
|
|
|
2A7C000
|
unkown
|
page readonly
|
|
|
|
29B48513000
|
unkown
|
page read and write
|
|
|
|
29B4856C000
|
unkown
|
page read and write
|
|
|
|
29B485AD000
|
unkown
|
page read and write
|
|
|
|
D5B207B000
|
unkown
|
page read and write
|
|
|
|
25341760000
|
unkown
|
page readonly
|
|
|
|
7FF57C686000
|
unkown
|
page readonly
|
|
|
|
29B48C00000
|
unkown
|
page readonly
|
|
|
|
28646270000
|
heap default
|
page read and write
|
|
|
|
29B48561000
|
unkown
|
page read and write
|
|
|
|
A10DAFA000
|
unkown
|
page read and write
|
|
|
|
25342210000
|
unkown
|
page read and write
|
|
|
|
7FF4F6A9A000
|
unkown
|
page readonly
|
|
|
|
7FF58DC70000
|
unkown
|
page readonly
|
|
|
|
7FF58DCB4000
|
unkown
|
page readonly
|
|
|
|
7FF54AD2C000
|
unkown
|
page readonly
|
|
|
|
2533F902000
|
unkown
|
page read and write
|
|
|
|
29B4858C000
|
unkown
|
page read and write
|
|
|
|
7FF55BF0E000
|
unkown
|
page readonly
|
|
|
|
29B4853B000
|
unkown
|
page read and write
|
|
|
|
29B48330000
|
unkown
|
page readonly
|
|
|
|
D5B187E000
|
unkown
|
page read and write
|
|
|
|
7FF55F5E6000
|
unkown
|
page readonly
|
|
|
|
2A4A000
|
unkown
|
page readonly
|
|
|
|
7FF57C711000
|
unkown
|
page readonly
|
|
|
|
29B4857D000
|
unkown
|
page read and write
|
|
|
|
E5B3575000
|
unkown
|
page read and write
|
|
|
|
7FF55F570000
|
unkown
|
page readonly
|
|
|
|
2E43224F000
|
unkown
|
page read and write
|
|
|
|
29B48565000
|
unkown
|
page read and write
|
|
|
|
2A97000
|
unkown
|
page readonly
|
|
|
|
7FF57C8C5000
|
unkown
|
page readonly
|
|
|
|
25342310000
|
unkown
|
page read and write
|
|
|
|
29B48A02000
|
unkown
|
page read and write
|
|
|
|
29B4856F000
|
unkown
|
page read and write
|
|
|
|
25341A22000
|
unkown
|
page read and write
|
|
|
|
D5B227C000
|
unkown
|
page read and write
|
|
|
|
7FF54AD68000
|
unkown
|
page readonly
|
|
|
|
2B43000
|
unkown
|
page readonly
|
|
|
|
29B48569000
|
unkown
|
page read and write
|
|
|
|
2533F882000
|
unkown
|
page read and write
|
|
|
|
7FF58D572000
|
unkown
|
page readonly
|
|
|
|
2533FA00000
|
unkown
|
page readonly
|
|
|
|
2E432255000
|
unkown
|
page read and write
|
|
|
|
7FF55F5A8000
|
unkown
|
page readonly
|
|
|
|
29E88F02000
|
unkown
|
page read and write
|
|
|
|
672E4FD000
|
unkown
|
page read and write
|
|
|
|
D5B217D000
|
unkown
|
page read and write
|
|
|
|
7FF55BECC000
|
unkown
|
page readonly
|
|
|
|
7FF58DB51000
|
unkown
|
page readonly
|
|
|
|
7FF4F6DC0000
|
unkown
|
page readonly
|
|
|
|
29B4856A000
|
unkown
|
page read and write
|
|
|
|
29B48350000
|
unkown
|
page read and write
|
|
|
|
7FF54A8D5000
|
unkown
|
page readonly
|
|
|
|
25341A12000
|
unkown
|
page read and write
|
|
|
|
29B485A9000
|
unkown
|
page read and write
|
|
|
|
7FF55BEA5000
|
unkown
|
page readonly
|
|
|
|
2166B96F000
|
unkown
|
page read and write
|
|
|
|
29B4854F000
|
unkown
|
page read and write
|
|
|
|
29B4854F000
|
unkown
|
page read and write
|
|
|
|
7FF57C894000
|
unkown
|
page readonly
|
|
|
|
29B47B60000
|
unkown
|
page read and write
|
|
|
|
29B47C49000
|
unkown
|
page read and write
|
|
|
|
D5B1A7F000
|
unkown
|
page read and write
|
|
|
|
2533F8AE000
|
unkown
|
page read and write
|
|
|
|
3121000
|
heap default
|
page read and write
|
|
|
|
29E88CE0000
|
heap default
|
page read and write
|
|
|
|
25341B42000
|
unkown
|
page read and write
|
|
|
|
7FF58DCE9000
|
unkown
|
page readonly
|
|
|
|
29B48A02000
|
unkown
|
page read and write
|
|
|
|
7FF55BDF3000
|
unkown
|
page readonly
|
|
|
|
7D0000
|
heap private
|
page read and write
|
|
|
|
29B485A7000
|
unkown
|
page read and write
|
|
|
|
29B48360000
|
unkown
|
page read and write
|
|
|
|
7FF55F22C000
|
unkown
|
page readonly
|
|
|
|
47A000
|
heap default
|
page read and write
|
|
|
|
7FF55F478000
|
unkown
|
page readonly
|
|
|
|
7FF55BE9E000
|
unkown
|
page readonly
|
|
|
|
7FF54AA80000
|
unkown
|
page readonly
|
|
|
|
29E88E55000
|
unkown
|
page read and write
|
|
|
|
7FF57C7A1000
|
unkown
|
page readonly
|
|
|
|
29E88E52000
|
unkown
|
page read and write
|
|
|
|
29B48555000
|
unkown
|
page read and write
|
|
|
|
D5B19FA000
|
unkown
|
page read and write
|
|
|
|
3220000
|
heap default
|
page read and write
|
|
|
|
303C000
|
unkown
|
page read and write
|
|
|
|
29B48590000
|
unkown
|
page read and write
|
|
|
|
AD29AF7000
|
unkown
|
page read and write
|
|
|
|
2E432130000
|
heap private
|
page read and write
|
|
|
|
7FF55F3C9000
|
unkown
|
page readonly
|
|
|
|
29B48402000
|
unkown
|
page read and write
|
|
|
|
7FF54A872000
|
unkown
|
page readonly
|
|
|
|
7FF54AD37000
|
unkown
|
page readonly
|
|
|
|
2166B967000
|
unkown
|
page read and write
|
|
|
|
7FF55F336000
|
unkown
|
page readonly
|
|
|
|
29B48580000
|
unkown
|
page read and write
|
|
|
|
29E89602000
|
unkown
|
page read and write
|
|
|
|
29B48581000
|
unkown
|
page read and write
|
|
|
|
E5ED2FE000
|
unkown
|
page read and write
|
|
|
|
E5ED37E000
|
unkown
|
page read and write
|
|
|
|
2AB1000
|
unkown
|
page readonly
|
|
|
|
29B4852F000
|
unkown
|
page read and write
|
|
|
|
29B485A7000
|
unkown
|
page read and write
|
|
|
|
D5B155B000
|
unkown
|
page read and write
|
|
|
|
7FF57C422000
|
unkown
|
page readonly
|
|
|
|
30E0000
|
unkown
|
page readonly
|
|
|
|
29B4854B000
|
unkown
|
page read and write
|
|
|
|
2533F8CC000
|
unkown
|
page read and write
|
|
|
|
7FF55F5B4000
|
unkown
|
page readonly
|
|
|
|
29E88DD0000
|
unkown
|
page readonly
|
|
|
|
29B47ED0000
|
unkown
|
page readonly
|
|
|
|
7FF58DCBA000
|
unkown
|
page readonly
|
|
|
|
7FF57C8CB000
|
unkown
|
page readonly
|
|
|
|
253419AF000
|
unkown
|
page read and write
|
|
|
|
E5B37F7000
|
unkown
|
page read and write
|
|
|
|
7FF57C80D000
|
unkown
|
page readonly
|
|
|
|
2970000
|
unkown
|
page readonly
|
|
|
|
D5B1BFB000
|
unkown
|
page read and write
|
|
|
|
7FF55F56E000
|
unkown
|
page readonly
|
|
|
|
7FF54ABFE000
|
unkown
|
page readonly
|
|
|
|
29B47E00000
|
unkown
|
page readonly
|
|
|
|
29E88CF0000
|
unkown
|
page readonly
|
|
|
|
7FF54AABB000
|
unkown
|
page readonly
|
|
|
|
25341996000
|
unkown
|
page read and write
|
|
|
|
2B24000
|
unkown
|
page readonly
|
|
|
|
25342410000
|
unkown
|
page read and write
|
|
|
|
2746000
|
unkown
|
page readonly
|
|
|
|
25341C82000
|
unkown
|
page read and write
|
|
|
|
29B485A1000
|
unkown
|
page read and write
|
|
|
|
2533F800000
|
unkown
|
page read and write
|
|
|
|
29B48350000
|
unkown
|
page readonly
|
|
|
|
29B4857D000
|
unkown
|
page read and write
|
|
|
|
7FF55BCF1000
|
unkown
|
page readonly
|
|
|
|
29B4856D000
|
unkown
|
page read and write
|
|
|
|
29B47CAD000
|
unkown
|
page read and write
|
|
|
|
25342210000
|
unkown
|
page read and write
|
|
|
|
470000
|
heap default
|
page read and write
|
|
|
|
286463A0000
|
unkown
|
page readonly
|
|
|
|
25341985000
|
unkown
|
page read and write
|
|
|
|
7FF57C8D7000
|
unkown
|
page readonly
|
|
|
|
7FF55EDCD000
|
unkown
|
page readonly
|
|
|
|
7FF55BF16000
|
unkown
|
page readonly
|
|
|
|
29B4855B000
|
unkown
|
page read and write
|
|
|
|
2746000
|
unkown
|
page readonly
|
|
|
|
7FF57C6E1000
|
unkown
|
page readonly
|
|
|
|
7FF54ACFA000
|
unkown
|
page readonly
|
|
|
|
2E43222A000
|
unkown
|
page read and write
|
|
|
|
7FF55BD43000
|
unkown
|
page readonly
|
|
|
|
7FF54AD17000
|
unkown
|
page readonly
|
|
|
|
2B24000
|
unkown
|
page readonly
|
|
|
|
7FF54A653000
|
unkown
|
page readonly
|
|
|
|
7FF4F6E3D000
|
unkown
|
page readonly
|
|
|
|
7FF57C928000
|
unkown
|
page readonly
|
|
|
|
7FF54ABAA000
|
unkown
|
page readonly
|
|
|
|
2166B966000
|
unkown
|
page read and write
|
|
|
|
25341911000
|
unkown
|
page read and write
|
|
|
|
2AAF000
|
unkown
|
page readonly
|
|
|
|
7FF57C852000
|
unkown
|
page readonly
|
|
|
|
29E88F13000
|
unkown
|
page read and write
|
|
|
|
29E88E49000
|
unkown
|
page read and write
|
|
|
|
29B47C00000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page readonly
|
|
|
|
2A6C000
|
unkown
|
page readonly
|
|
|
|
7FF57C67B000
|
unkown
|
page readonly
|
|
|
|
2E4321C0000
|
unkown
|
page read and write
|
|
|
|
29B48578000
|
unkown
|
page read and write
|
|
|
|
29B48570000
|
unkown
|
page read and write
|
|
|
|
29B4857F000
|
unkown
|
page read and write
|
|
|
|
29B48537000
|
unkown
|
page read and write
|
|
|
|
29B485AD000
|
unkown
|
page read and write
|
|
|
|
7FF55F575000
|
unkown
|
page readonly
|
|
|
|
28646440000
|
unkown
|
page read and write
|
|
|
|
7FF57C58A000
|
unkown
|
page readonly
|
|
|
|
7FF55BEEA000
|
unkown
|
page readonly
|
|
|
|
29B48585000
|
unkown
|
page read and write
|
|
|
|
2533F893000
|
unkown
|
page read and write
|
|
|
|
2ACB000
|
unkown
|
page readonly
|
|
|
|
7FF55BEB7000
|
unkown
|
page readonly
|
|
|
|
25341A36000
|
unkown
|
page read and write
|
|
|
|
29B485A1000
|
unkown
|
page read and write
|
|
|
|
2533F829000
|
unkown
|
page read and write
|
|
|
|
2A95000
|
unkown
|
page readonly
|
|
|
|
D5B21FB000
|
unkown
|
page read and write
|
|
|
|
7FF57C8EF000
|
unkown
|
page readonly
|
|
|
|
29B485AD000
|
unkown
|
page read and write
|
|
|
|
29B4855D000
|
unkown
|
page read and write
|
|
|
|
7FF57C904000
|
unkown
|
page readonly
|
|
|
|
28646502000
|
unkown
|
page read and write
|
|
|
|
4B40000
|
unkown
|
page readonly
|
|
|
|
7FF58DCD8000
|
unkown
|
page readonly
|
|
|
|
7FF57C8AC000
|
unkown
|
page readonly
|
|
|
|
29B48577000
|
unkown
|
page read and write
|
|
|
|
29B47D08000
|
unkown
|
page read and write
|
|
|
|
7FF55F56A000
|
unkown
|
page readonly
|
|
|
|
7FF55B5B1000
|
unkown
|
page readonly
|
|
|
|
29B48598000
|
unkown
|
page read and write
|
|
|
|
672DF8A000
|
unkown
|
page read and write
|
|
|
|
7FF55F32B000
|
unkown
|
page readonly
|
|
|
|
7FF55F59F000
|
unkown
|
page readonly
|
|
|
|
7FF58DD61000
|
unkown
|
page readonly
|
|
|
|
AD299FB000
|
unkown
|
page read and write
|
|
|
|
820000
|
unkown
|
page readonly
|
|
|
|
29B48548000
|
unkown
|
page read and write
|
|
|
|
2A7C000
|
unkown
|
page readonly
|
|
|
|
253419B7000
|
unkown
|
page read and write
|
|
|
|
25341730000
|
unkown
|
page read and write
|
|
|
|
25341C42000
|
unkown
|
page read and write
|
|
|
|
2AC6000
|
unkown
|
page readonly
|
|
|
|
7FF57C88B000
|
unkown
|
page readonly
|
|
|
|
25341730000
|
unkown
|
page read and write
|
|
|
|
25342110000
|
unkown
|
page read and write
|
|
|
|
25342410000
|
unkown
|
page read and write
|
|
|
|
29B4856D000
|
unkown
|
page read and write
|
|
|
|
29B4855B000
|
unkown
|
page read and write
|
|
|
|
29B4853B000
|
unkown
|
page read and write
|
|
|
|
FB000
|
unkown
|
page read and write
|
|
|
|
7FF58DD5A000
|
unkown
|
page readonly
|
|
|
|
28646429000
|
unkown
|
page read and write
|
|
|
|
29B48590000
|
unkown
|
page read and write
|
|
|
|
25341C02000
|
unkown
|
page read and write
|
|
|
|
7FF54ACCB000
|
unkown
|
page readonly
|
|
|
|
29E88C80000
|
heap private
|
page read and write
|
|
|
|
2AA3000
|
unkown
|
page readonly
|
|
|
|
7FF55F5DE000
|
unkown
|
page readonly
|
|
|
|
7FF58DC9C000
|
unkown
|
page readonly
|
|
|
|
29B4855D000
|
unkown
|
page read and write
|
|
|
|
7FF54AD0B000
|
unkown
|
page readonly
|
|
|
|
7FF54ABA3000
|
unkown
|
page readonly
|
|
|
|
2534199A000
|
unkown
|
page read and write
|
|
|
|
7FF55BF84000
|
unkown
|
page readonly
|
|
|
|
7FF58DC5A000
|
unkown
|
page readonly
|
|
|
|
2EF8000
|
unkown
|
page read and write
|
|
|
|
2E432308000
|
unkown
|
page read and write
|
|
|
|
7FF55F23F000
|
unkown
|
page readonly
|
|
|
|
491000
|
heap default
|
page read and write
|
|
|
|
7FF54AD2F000
|
unkown
|
page readonly
|
|
|
|
2166BA40000
|
unkown
|
page readonly
|
|
|
|
29B47CA3000
|
unkown
|
page read and write
|
|
|
|
2533F7F0000
|
unkown
|
page readonly
|
|
|
|
A10DC7A000
|
unkown
|
page read and write
|
|
|
|
29B48578000
|
unkown
|
page read and write
|
|
|
|
D5B1F7B000
|
unkown
|
page read and write
|
|
|
|
2E4321B0000
|
unkown
|
page readonly
|
|
|
|
25341D00000
|
unkown
|
page read and write
|
|
|
|
2166BCF5000
|
heap private
|
page read and write
|
|
|
|
25341C00000
|
unkown
|
page read and write
|
|
|
|
2AC2000
|
unkown
|
page readonly
|
|
|
|
E5B347E000
|
unkown
|
page read and write
|
|
|
|
253416D0000
|
heap private
|
page read and write
|
|
|
|
307B000
|
unkown
|
page read and write
|
|
|
|
253419B8000
|
unkown
|
page read and write
|
|
|
|
2A43000
|
unkown
|
page readonly
|
|
|
|
7FF57C7C3000
|
unkown
|
page readonly
|
|
|
|
25341A3A000
|
unkown
|
page read and write
|
|
|
|
25341A00000
|
unkown
|
page read and write
|
|
|
|
A10D71B000
|
unkown
|
page read and write
|
|
|
|
2A89000
|
unkown
|
page readonly
|
|
|
|
7FF55BED7000
|
unkown
|
page readonly
|
|
|
|
2533F760000
|
heap default
|
page read and write
|
|
|
|
2E4324D0000
|
unkown
|
page readonly
|
|
|
|
253419CB000
|
unkown
|
page read and write
|
|
|
|
2533F856000
|
unkown
|
page read and write
|
|
|
|
7FF57C698000
|
unkown
|
page readonly
|
|
|
|
29E89800000
|
unkown
|
page readonly
|
|
|
|
29B48350000
|
unkown
|
page read and write
|
|
|
|
7FF55F5ED000
|
unkown
|
page readonly
|
|
|
|
2EFC000
|
unkown
|
page read and write
|
|
|
|
29E88E8D000
|
unkown
|
page read and write
|
|
|
|
2AA3000
|
unkown
|
page readonly
|
|
|
|
7FF54AD5F000
|
unkown
|
page readonly
|
|
|
|
AD2950E000
|
unkown
|
page read and write
|
|
|
|
29B48585000
|
unkown
|
page read and write
|
|
|
|
2970000
|
unkown
|
page readonly
|
|
|
|
29B47C9F000
|
unkown
|
page read and write
|
|
|
|
29B4857E000
|
unkown
|
page read and write
|
|
|
|
29B47C27000
|
unkown
|
page read and write
|
|
|
|
7FF58DCA7000
|
unkown
|
page readonly
|
|
|
|
7FF55BA66000
|
unkown
|
page readonly
|
|
|
|
2A9F000
|
unkown
|
page readonly
|
|
|
|
7FF54ACA2000
|
unkown
|
page readonly
|
|
|
|
28646413000
|
unkown
|
page read and write
|
|
|
|
7FF4F6DCB000
|
unkown
|
page readonly
|
|
|
|
2166BB50000
|
unkown
|
page readonly
|
|
|
|
7FF57C91E000
|
unkown
|
page readonly
|
|
|
|
29B47C56000
|
unkown
|
page read and write
|
|
|
|
7FF54ABFB000
|
unkown
|
page readonly
|
|
|
|
7FF57C6F4000
|
unkown
|
page readonly
|
|
|
|
29B48569000
|
unkown
|
page read and write
|
|
|
|
29B48560000
|
unkown
|
page read and write
|
|
|
|
7FF55BEAB000
|
unkown
|
page readonly
|
|
|
|
2166B956000
|
heap default
|
page read and write
|
|
|
|
7FF57C701000
|
unkown
|
page readonly
|
|
|
|
2166B980000
|
unkown
|
page read and write
|
|
|
|
7FF57C9B2000
|
unkown
|
page readonly
|
|
|
|
29B47C3C000
|
unkown
|
page read and write
|
|
|
|
7FF57C914000
|
unkown
|
page readonly
|
|
|
|
672E3FA000
|
unkown
|
page read and write
|
|
|
|
7FF54A862000
|
unkown
|
page readonly
|
|
|
|
7FF55BE8C000
|
unkown
|
page readonly
|
|
|
|
2533F92B000
|
unkown
|
page read and write
|
|
|
|
7FF54AC64000
|
unkown
|
page readonly
|
|
|
|
E5EDB78000
|
unkown
|
page read and write
|
|
|
|
29B4853E000
|
unkown
|
page read and write
|
|
|
|
2E432F40000
|
unkown
|
page readonly
|
|
|
|
253419BC000
|
unkown
|
page read and write
|
|
|
|
2E432249000
|
unkown
|
page read and write
|
|
|
|
7FF55F65A000
|
unkown
|
page readonly
|
|
|
|
7FF54ADF1000
|
unkown
|
page readonly
|
|
|
|
7FF55BC17000
|
unkown
|
page readonly
|
|
|
|
29B47BB0000
|
unkown
|
page write copy
|
|
|
|
7FF54AA77000
|
unkown
|
page readonly
|
|
|
|
3100000
|
heap default
|
page read and write
|
|
|
|
7FF57C597000
|
unkown
|
page readonly
|
|
|
|
7FF55F391000
|
unkown
|
page readonly
|
|
|
|
29B47CA3000
|
unkown
|
page read and write
|
|
|
|
29B48543000
|
unkown
|
page read and write
|
|
|
|
2A89000
|
unkown
|
page readonly
|
|
|
|
7FF54ADE4000
|
unkown
|
page readonly
|
|
|
|
7FF54AB00000
|
unkown
|
page readonly
|
|
|
|
7FF58DCDE000
|
unkown
|
page readonly
|
|
|
|
29B48576000
|
unkown
|
page read and write
|
|
|
|
7FF54A8C6000
|
unkown
|
page readonly
|
|
|
|
7FF57C8EC000
|
unkown
|
page readonly
|
|
|
|
7FF58DB6B000
|
unkown
|
page readonly
|
|
|
|
29B48571000
|
unkown
|
page read and write
|
|
|
|
2166BB60000
|
unkown
|
page readonly
|
|
|
|
AD2948B000
|
unkown
|
page read and write
|
|
|
|
BC000
|
unkown
|
page read and write
|
|
|
|
E5B367B000
|
unkown
|
page read and write
|
|
|
|
2534190B000
|
unkown
|
page read and write
|
|
|
|
2E43228D000
|
unkown
|
page read and write
|
|
|
|
7FF55BE9A000
|
unkown
|
page readonly
|
|
|
|
7FF55F512000
|
unkown
|
page readonly
|
|
|
|
29B485A7000
|
unkown
|
page read and write
|
|
|
|
810000
|
heap private
|
page read and write
|
|
|
|
AD2958E000
|
unkown
|
page read and write
|
|
|
|
2ACB000
|
unkown
|
page readonly
|
|
|
|
7FF57C57C000
|
unkown
|
page readonly
|
|
|
|
3340000
|
heap private
|
page read and write
|
|
|
|
29B4857F000
|
unkown
|
page read and write
|
|
|
|
2B43000
|
unkown
|
page readonly
|
|
|
|
2A4A000
|
unkown
|
page readonly
|
|
|
|
2533F8F9000
|
unkown
|
page read and write
|
|
|
|
29B485A8000
|
unkown
|
page read and write
|
|
|
|
29B48543000
|
unkown
|
page read and write
|
|
|
|
7FF55F247000
|
unkown
|
page readonly
|
|
|
|
7FF54ACEC000
|
unkown
|
page readonly
|
|
|
|
29B48A00000
|
unkown
|
page read and write
|
|
|
|
29B48543000
|
unkown
|
page read and write
|
|
|
|
7FF57C121000
|
unkown
|
page readonly
|
|
|
|
29B48575000
|
unkown
|
page read and write
|
|
|
|
29B4858F000
|
unkown
|
page read and write
|
|
|
|
2A3C000
|
unkown
|
page readonly
|
|
|
|
7FF58DBD4000
|
unkown
|
page readonly
|
|
|
|
2533F86E000
|
unkown
|
page read and write
|
|
|
|
29B485A8000
|
unkown
|
page read and write
|
|
|
|
7FF54A657000
|
unkown
|
page readonly
|
|
|
|
2533F83F000
|
unkown
|
page read and write
|
|
|
|
7FF58D845000
|
unkown
|
page readonly
|
|
|
|
7FF4F6EB2000
|
unkown
|
page readonly
|
|
|
|
7FF55F654000
|
unkown
|
page readonly
|
|
|
|
29B47B30000
|
heap default
|
page read and write
|
|
|
|
29B485A1000
|
unkown
|
page read and write
|
|
|
|
7FF58DC9F000
|
unkown
|
page readonly
|
|
|
|
2166B981000
|
unkown
|
page read and write
|
|
|
|
E5ED97C000
|
unkown
|
page read and write
|
|
|
|
25341900000
|
unkown
|
page read and write
|
|
|
|
29B48575000
|
unkown
|
page read and write
|
|
|
|
2A65000
|
unkown
|
page readonly
|
|
|
|
29B4855F000
|
unkown
|
page read and write
|
|
|
|
29E89490000
|
unkown
|
page readonly
|
|
|
|
D5B1EFC000
|
unkown
|
page read and write
|
|
|
|
AD29BFF000
|
unkown
|
page read and write
|
|
|
|
7FF54AB34000
|
unkown
|
page readonly
|
|
|
|
29B48500000
|
unkown
|
page read and write
|
|
|
|
29B47C4B000
|
unkown
|
page read and write
|
|
|
|
29E88E29000
|
unkown
|
page read and write
|
|
|
|
25341B42000
|
unkown
|
page read and write
|
|
|
|
7FF58DBDC000
|
unkown
|
page readonly
|
|
|
|
7FF55F5CE000
|
unkown
|
page readonly
|
|
|
|
2E432270000
|
unkown
|
page read and write
|
|
|
|
7FF54AC4D000
|
unkown
|
page readonly
|
|
|
|
29B47CF8000
|
unkown
|
page read and write
|
|
|
|
7FF54AD76000
|
unkown
|
page readonly
|
|
|
|
2533FAD0000
|
unkown
|
page readonly
|
|
|
|
29B485CC000
|
unkown
|
page read and write
|
|
|
|
D5B20FB000
|
unkown
|
page read and write
|
|
|
|
29E88E88000
|
unkown
|
page read and write
|
|
|
|
29B4858D000
|
unkown
|
page read and write
|
|
|
|
29B48548000
|
unkown
|
page read and write
|
|
|
|
E5ED67A000
|
unkown
|
page read and write
|
|
|
|
2E432C00000
|
unkown
|
page readonly
|
|
|
|
28646400000
|
unkown
|
page read and write
|
|
|
|
7FF55F5E1000
|
unkown
|
page readonly
|
|
|
|
29B4855F000
|
unkown
|
page read and write
|
|
|
|
7FF54A915000
|
unkown
|
page readonly
|
|
|
|
29B485A8000
|
unkown
|
page read and write
|
|
|
|
2A9F000
|
unkown
|
page readonly
|
|
|
|
E5ED577000
|
unkown
|
page read and write
|
|
|
|
29B48533000
|
unkown
|
page read and write
|
|
|
|
D5B22F9000
|
unkown
|
page read and write
|
|
|
|
2533F7E0000
|
unkown
|
page read and write
|
|
|
|
29B4857F000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page readonly
|
|
|
|
672E2FF000
|
unkown
|
page read and write
|
|
|
|
7FF55F59C000
|
unkown
|
page readonly
|
|
|
|
29B48565000
|
unkown
|
page read and write
|
|
|
|
2E432A02000
|
unkown
|
page read and write
|
|
There are 795 hidden memdumps, click here to show them.