Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
research-1234799369.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$research-1234799369.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\342A5005-7391-419E-8552-26772D1EF86E
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\38331A17.png
|
PNG image data, 934 x 29, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5B10D861.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\725781E0.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\778AA2EE.png
|
PNG image data, 246 x 108, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C33C7D2C.png
|
PNG image data, 490 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F71B989B.png
|
PNG image data, 521 x 246, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\82910000
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\covi1.dll
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\covi2.dll
|
|
|
|
C:\Windows\splwow64.exe
|
C:\Windows\splwow64.exe 12288
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://loki.delve.office.com/api/v1/configuration/officewin32/
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
tisindia.com
|
67.227.192.75
|
|
|
|
eimathsuae.com
|
52.220.160.98
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
52.220.160.98
|
eimathsuae.com
|
United States
|
|
|
|
67.227.192.75
|
tisindia.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
<60
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
=60
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
18A1B
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
19055
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
19120
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
191EB
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
19314
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
//0
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 46 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5E07D3000
|
unkown
|
page readonly
|
|
|
|
7FF59EE76000
|
unkown
|
page readonly
|
|
|
|
7FF5DF740000
|
unkown
|
page readonly
|
|
|
|
B5513FF000
|
unkown
|
page read and write
|
|
|
|
7FF4EEB3B000
|
unkown
|
page readonly
|
|
|
|
7FF5E57E3000
|
unkown
|
page readonly
|
|
|
|
11865C42000
|
unkown
|
page read and write
|
|
|
|
7FF5E0BDF000
|
unkown
|
page readonly
|
|
|
|
14C5D7F000
|
unkown
|
page read and write
|
|
|
|
2D9D282A000
|
unkown
|
page read and write
|
|
|
|
118638BC000
|
unkown
|
page read and write
|
|
|
|
23F2078E000
|
unkown
|
page read and write
|
|
|
|
2C25A800000
|
unkown
|
page readonly
|
|
|
|
7FF5C39CD000
|
unkown
|
page readonly
|
|
|
|
7FF4FC26C000
|
unkown
|
page readonly
|
|
|
|
29F91013000
|
unkown
|
page read and write
|
|
|
|
14C5CFC000
|
unkown
|
page read and write
|
|
|
|
23F20ABC000
|
unkown
|
page read and write
|
|
|
|
7FF53F49E000
|
unkown
|
page readonly
|
|
|
|
100BFF000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page readonly
|
|
|
|
7FF5E0A38000
|
unkown
|
page readonly
|
|
|
|
7FF4EF166000
|
unkown
|
page readonly
|
|
|
|
7FF5E0BA6000
|
unkown
|
page readonly
|
|
|
|
7FF4FC271000
|
unkown
|
page readonly
|
|
|
|
23F208E0000
|
unkown
|
page readonly
|
|
|
|
118659EF000
|
unkown
|
page read and write
|
|
|
|
7FF5C8C7C000
|
unkown
|
page readonly
|
|
|
|
7FF5DE9C3000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C1C000
|
unkown
|
page readonly
|
|
|
|
7FF5DEF98000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C99000
|
unkown
|
page readonly
|
|
|
|
7FF4EF197000
|
unkown
|
page readonly
|
|
|
|
421000
|
unkown
|
page read and write
|
|
|
|
7FF4FC42C000
|
unkown
|
page readonly
|
|
|
|
7FF53F3A1000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7B6000
|
unkown
|
page readonly
|
|
|
|
7FF59EC27000
|
unkown
|
page readonly
|
|
|
|
7FF5C6BB9000
|
unkown
|
page readonly
|
|
|
|
7FF5323B5000
|
unkown
|
page readonly
|
|
|
|
7FF5DF00C000
|
unkown
|
page readonly
|
|
|
|
7FF5C6AEE000
|
unkown
|
page readonly
|
|
|
|
1CA6C713000
|
unkown
|
page read and write
|
|
|
|
7FF59EEF9000
|
unkown
|
page readonly
|
|
|
|
11866110000
|
unkown
|
page read and write
|
|
|
|
30CD000
|
unkown
|
page readonly
|
|
|
|
7FF5B0BFD000
|
unkown
|
page readonly
|
|
|
|
23F20930000
|
unkown
|
page readonly
|
|
|
|
118659B8000
|
unkown
|
page read and write
|
|
|
|
7FF5323F6000
|
unkown
|
page readonly
|
|
|
|
1D449330000
|
unkown
|
page readonly
|
|
|
|
7FF53F4CD000
|
unkown
|
page readonly
|
|
|
|
7FF5C69A8000
|
unkown
|
page readonly
|
|
|
|
7FF5DEC54000
|
unkown
|
page readonly
|
|
|
|
23F20670000
|
unkown
|
page read and write
|
|
|
|
140080CB000
|
unkown
|
page read and write
|
|
|
|
2B281473000
|
unkown
|
page read and write
|
|
|
|
23F1B400000
|
unkown
|
page readonly
|
|
|
|
1CA6C613000
|
unkown
|
page read and write
|
|
|
|
7FF5320E3000
|
unkown
|
page readonly
|
|
|
|
1F1E5BF000
|
unkown
|
page read and write
|
|
|
|
DB326FE000
|
unkown
|
page read and write
|
|
|
|
29F91100000
|
unkown
|
page read and write
|
|
|
|
7FF59EE35000
|
unkown
|
page readonly
|
|
|
|
7FF5B0C25000
|
unkown
|
page readonly
|
|
|
|
23F20660000
|
unkown
|
page read and write
|
|
|
|
252FEC9F000
|
heap private
|
page read and write
|
|
|
|
7FF5C8C86000
|
unkown
|
page readonly
|
|
|
|
B550D7D000
|
unkown
|
page read and write
|
|
|
|
7FF5C88AD000
|
unkown
|
page readonly
|
|
|
|
7FF5C8CA2000
|
unkown
|
page readonly
|
|
|
|
30D6000
|
unkown
|
page readonly
|
|
|
|
1BA48A85000
|
unkown
|
page read and write
|
|
|
|
1D447902000
|
unkown
|
page read and write
|
|
|
|
1400806F000
|
unkown
|
page read and write
|
|
|
|
118638BB000
|
unkown
|
page read and write
|
|
|
|
7FF5C69C7000
|
unkown
|
page readonly
|
|
|
|
23F20854000
|
unkown
|
page readonly
|
|
|
|
252FD0B0000
|
unkown
|
page readonly
|
|
|
|
2B281402000
|
unkown
|
page read and write
|
|
|
|
7FF5E5A70000
|
unkown
|
page readonly
|
|
|
|
7FF5C8C59000
|
unkown
|
page readonly
|
|
|
|
313A000
|
unkown
|
page readonly
|
|
|
|
2C259F08000
|
unkown
|
page read and write
|
|
|
|
252FCEE0000
|
heap default
|
page read and write
|
|
|
|
3135000
|
unkown
|
page readonly
|
|
|
|
7FF5C3A00000
|
unkown
|
page readonly
|
|
|
|
2D9D2E70000
|
unkown
|
page readonly
|
|
|
|
14008013000
|
unkown
|
page read and write
|
|
|
|
11866210000
|
unkown
|
page read and write
|
|
|
|
1D449600000
|
unkown
|
page readonly
|
|
|
|
7FF5C8964000
|
unkown
|
page readonly
|
|
|
|
82B769B000
|
unkown
|
page read and write
|
|
|
|
3125000
|
unkown
|
page readonly
|
|
|
|
12149A2A000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C91000
|
unkown
|
page readonly
|
|
|
|
11866510000
|
unkown
|
page read and write
|
|
|
|
271917E000
|
unkown
|
page read and write
|
|
|
|
7FF5C6B57000
|
unkown
|
page readonly
|
|
|
|
7FF5C8C6D000
|
unkown
|
page readonly
|
|
|
|
BE2D6FD000
|
unkown
|
page read and write
|
|
|
|
7FF4FC180000
|
unkown
|
page readonly
|
|
|
|
7FF5E5ADD000
|
unkown
|
page readonly
|
|
|
|
7FF5C394C000
|
unkown
|
page readonly
|
|
|
|
2B281C02000
|
unkown
|
page read and write
|
|
|
|
1FEF7813000
|
unkown
|
page read and write
|
|
|
|
7FF5E57D7000
|
unkown
|
page readonly
|
|
|
|
11866310000
|
unkown
|
page read and write
|
|
|
|
29F91102000
|
unkown
|
page read and write
|
|
|
|
7FF5C69C3000
|
unkown
|
page readonly
|
|
|
|
29F90EC0000
|
heap default
|
page read and write
|
|
|
|
2C259F02000
|
unkown
|
page read and write
|
|
|
|
7FF5A5F2A000
|
unkown
|
page readonly
|
|
|
|
11865981000
|
unkown
|
page read and write
|
|
|
|
7FF53F462000
|
unkown
|
page readonly
|
|
|
|
11866310000
|
unkown
|
page read and write
|
|
|
|
14C55F9000
|
unkown
|
page read and write
|
|
|
|
7FF59EE61000
|
unkown
|
page readonly
|
|
|
|
30CD000
|
unkown
|
page readonly
|
|
|
|
7FF4FC4B9000
|
unkown
|
page readonly
|
|
|
|
7FF4FC454000
|
unkown
|
page readonly
|
|
|
|
7FF5A61A4000
|
unkown
|
page readonly
|
|
|
|
7FF5E58DE000
|
unkown
|
page readonly
|
|
|
|
7FF5C3A69000
|
unkown
|
page readonly
|
|
|
|
7FF5C398A000
|
unkown
|
page readonly
|
|
|
|
23F20A00000
|
unkown
|
page read and write
|
|
|
|
B55107F000
|
unkown
|
page read and write
|
|
|
|
2C259D80000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C30000
|
unkown
|
page readonly
|
|
|
|
7FF5B0C16000
|
unkown
|
page readonly
|
|
|
|
23F209E0000
|
unkown
|
page readonly
|
|
|
|
7FF5B0C3D000
|
unkown
|
page readonly
|
|
|
|
7FF5C3A07000
|
unkown
|
page readonly
|
|
|
|
B5517FE000
|
unkown
|
page read and write
|
|
|
|
89A000
|
heap default
|
page read and write
|
|
|
|
14C000
|
unkown
|
page read and write
|
|
|
|
1FEF787E000
|
unkown
|
page read and write
|
|
|
|
7FF5C8D09000
|
unkown
|
page readonly
|
|
|
|
1214A400000
|
unkown
|
page readonly
|
|
|
|
7FF5E0A58000
|
unkown
|
page readonly
|
|
|
|
7FF4FC39C000
|
unkown
|
page readonly
|
|
|
|
7FF5C39D6000
|
unkown
|
page readonly
|
|
|
|
7FF5C39E6000
|
unkown
|
page readonly
|
|
|
|
7FF5C3880000
|
unkown
|
page readonly
|
|
|
|
7FF53F460000
|
unkown
|
page readonly
|
|
|
|
FE2C2FE000
|
unkown
|
page read and write
|
|
|
|
12149A13000
|
unkown
|
page read and write
|
|
|
|
1319AD80000
|
heap private
|
page read and write
|
|
|
|
7FF5323FC000
|
unkown
|
page readonly
|
|
|
|
7FF5C38F5000
|
unkown
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page readonly
|
|
|
|
7FF59EC60000
|
unkown
|
page readonly
|
|
|
|
23F20850000
|
unkown
|
page write copy
|
|
|
|
82B7B7E000
|
unkown
|
page read and write
|
|
|
|
23F1B870000
|
unkown
|
page readonly
|
|
|
|
7FF5C39DC000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B92000
|
unkown
|
page readonly
|
|
|
|
7FF4EF1F9000
|
unkown
|
page readonly
|
|
|
|
1F1E8FA000
|
unkown
|
page read and write
|
|
|
|
7FF59EDB1000
|
unkown
|
page readonly
|
|
|
|
1319AE13000
|
unkown
|
page read and write
|
|
|
|
7FF5A6013000
|
unkown
|
page readonly
|
|
|
|
12149A66000
|
unkown
|
page read and write
|
|
|
|
14007F50000
|
unkown
|
page readonly
|
|
|
|
7FF532479000
|
unkown
|
page readonly
|
|
|
|
11863859000
|
unkown
|
page read and write
|
|
|
|
7FF5DF350000
|
unkown
|
page readonly
|
|
|
|
14008024000
|
unkown
|
page read and write
|
|
|
|
7FF59EE49000
|
unkown
|
page readonly
|
|
|
|
30E6000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A53000
|
unkown
|
page readonly
|
|
|
|
11863913000
|
unkown
|
page read and write
|
|
|
|
7FF4EF106000
|
unkown
|
page readonly
|
|
|
|
7FF5A6209000
|
unkown
|
page readonly
|
|
|
|
7FF5B0C91000
|
unkown
|
page readonly
|
|
|
|
7FF59EE02000
|
unkown
|
page readonly
|
|
|
|
30CA000
|
unkown
|
page readonly
|
|
|
|
14C4FDE000
|
unkown
|
page read and write
|
|
|
|
30E4000
|
unkown
|
page readonly
|
|
|
|
1CA6C500000
|
unkown
|
page readonly
|
|
|
|
23F20864000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C06000
|
unkown
|
page readonly
|
|
|
|
118638BF000
|
unkown
|
page read and write
|
|
|
|
14C597A000
|
unkown
|
page read and write
|
|
|
|
11863876000
|
unkown
|
page read and write
|
|
|
|
30F2000
|
unkown
|
page readonly
|
|
|
|
7FF53F28A000
|
unkown
|
page readonly
|
|
|
|
7FF5A5E5D000
|
unkown
|
page readonly
|
|
|
|
30E0000
|
unkown
|
page readonly
|
|
|
|
2C259E13000
|
unkown
|
page read and write
|
|
|
|
23F208C0000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
heap default
|
page read and write
|
|
|
|
7FF5E59E5000
|
unkown
|
page readonly
|
|
|
|
1D4477B0000
|
unkown
|
page read and write
|
|
|
|
1186393F000
|
unkown
|
page read and write
|
|
|
|
7FF5E0BA8000
|
unkown
|
page readonly
|
|
|
|
1D4477F0000
|
unkown
|
page readonly
|
|
|
|
2B28145A000
|
unkown
|
page read and write
|
|
|
|
7FF59EA31000
|
unkown
|
page readonly
|
|
|
|
7FF4FC3FF000
|
unkown
|
page readonly
|
|
|
|
6BB000
|
unkown
|
page read and write
|
|
|
|
11865975000
|
unkown
|
page read and write
|
|
|
|
2B281446000
|
unkown
|
page read and write
|
|
|
|
1CA6C850000
|
unkown
|
page readonly
|
|
|
|
121499D0000
|
unkown
|
page readonly
|
|
|
|
DB328FF000
|
unkown
|
page read and write
|
|
|
|
7FF59EAC8000
|
unkown
|
page readonly
|
|
|
|
118657C0000
|
unkown
|
page readonly
|
|
|
|
11866310000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A70000
|
unkown
|
page readonly
|
|
|
|
840000
|
unkown
|
page readonly
|
|
|
|
23F1B29E000
|
unkown
|
page read and write
|
|
|
|
7FF5A5F8F000
|
unkown
|
page readonly
|
|
|
|
1186391D000
|
unkown
|
page read and write
|
|
|
|
29F90ED0000
|
unkown
|
page readonly
|
|
|
|
F49807E000
|
unkown
|
page read and write
|
|
|
|
7FF5E5AF6000
|
unkown
|
page readonly
|
|
|
|
1FEF7802000
|
unkown
|
page read and write
|
|
|
|
23F1B313000
|
unkown
|
page read and write
|
|
|
|
1319AE3F000
|
unkown
|
page read and write
|
|
|
|
7FF532135000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFBE000
|
unkown
|
page readonly
|
|
|
|
7FF5C388C000
|
unkown
|
page readonly
|
|
|
|
11866410000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C34000
|
unkown
|
page readonly
|
|
|
|
2C259E29000
|
unkown
|
page read and write
|
|
|
|
252FE850000
|
unkown
|
page readonly
|
|
|
|
7FF5C6AC2000
|
unkown
|
page readonly
|
|
|
|
11865700000
|
unkown
|
page read and write
|
|
|
|
1186387D000
|
unkown
|
page read and write
|
|
|
|
23F20C00000
|
unkown
|
page readonly
|
|
|
|
2D9D2EB0000
|
unkown
|
page read and write
|
|
|
|
1D447813000
|
unkown
|
page read and write
|
|
|
|
7FF5DF799000
|
unkown
|
page readonly
|
|
|
|
11866310000
|
unkown
|
page read and write
|
|
|
|
23F1B275000
|
unkown
|
page read and write
|
|
|
|
BE326FE000
|
unkown
|
page read and write
|
|
|
|
7FF53F561000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C0C000
|
unkown
|
page readonly
|
|
|
|
B550B77000
|
unkown
|
page read and write
|
|
|
|
14C58FB000
|
unkown
|
page read and write
|
|
|
|
11866510000
|
unkown
|
page read and write
|
|
|
|
11865968000
|
unkown
|
page read and write
|
|
|
|
11863829000
|
unkown
|
page read and write
|
|
|
|
7FF5320D7000
|
unkown
|
page readonly
|
|
|
|
1FEF7620000
|
heap private
|
page read and write
|
|
|
|
11866010000
|
unkown
|
page read and write
|
|
|
|
23F1C080000
|
unkown
|
page read and write
|
|
|
|
2D9D2C00000
|
unkown
|
page readonly
|
|
|
|
23F1C061000
|
unkown
|
page read and write
|
|
|
|
7FF5E5AFC000
|
unkown
|
page readonly
|
|
|
|
2B281413000
|
unkown
|
page read and write
|
|
|
|
2B281429000
|
unkown
|
page read and write
|
|
|
|
23F20A11000
|
unkown
|
page read and write
|
|
|
|
7FF4FBE15000
|
unkown
|
page readonly
|
|
|
|
6F0F4FF000
|
unkown
|
page read and write
|
|
|
|
1D44784E000
|
unkown
|
page read and write
|
|
|
|
100DFE000
|
unkown
|
page read and write
|
|
|
|
7FF4FC41D000
|
unkown
|
page readonly
|
|
|
|
1006FD000
|
unkown
|
page read and write
|
|
|
|
118638BB000
|
unkown
|
page read and write
|
|
|
|
7FF5DF77E000
|
unkown
|
page readonly
|
|
|
|
23F1C2A0000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFC5000
|
unkown
|
page readonly
|
|
|
|
6F0EF7E000
|
unkown
|
page read and write
|
|
|
|
7FF5DF015000
|
unkown
|
page readonly
|
|
|
|
14C537E000
|
unkown
|
page read and write
|
|
|
|
14008089000
|
unkown
|
page read and write
|
|
|
|
2718AFC000
|
unkown
|
page read and write
|
|
|
|
7FF4EF149000
|
unkown
|
page readonly
|
|
|
|
7FF5323EC000
|
unkown
|
page readonly
|
|
|
|
1CA6E440000
|
unkown
|
page read and write
|
|
|
|
1FEF7690000
|
unkown
|
page readonly
|
|
|
|
118638BB000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page readonly
|
|
|
|
1BA48A6E000
|
unkown
|
page read and write
|
|
|
|
7FF5E0A1F000
|
unkown
|
page readonly
|
|
|
|
7FF53234C000
|
unkown
|
page readonly
|
|
|
|
7FF5C6B3C000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFED000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B6A000
|
unkown
|
page readonly
|
|
|
|
1004FB000
|
unkown
|
page read and write
|
|
|
|
7FF5A6116000
|
unkown
|
page readonly
|
|
|
|
1CA6DFF0000
|
unkown
|
page read and write
|
|
|
|
7FF5E58E0000
|
unkown
|
page readonly
|
|
|
|
118657B0000
|
unkown
|
page read and write
|
|
|
|
7FF53F2EF000
|
unkown
|
page readonly
|
|
|
|
3113000
|
unkown
|
page readonly
|
|
|
|
1D447877000
|
unkown
|
page read and write
|
|
|
|
7FF5E5B17000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A72000
|
unkown
|
page readonly
|
|
|
|
7FF5C8BF4000
|
unkown
|
page readonly
|
|
|
|
11863750000
|
heap private
|
page read and write
|
|
|
|
1007FF000
|
unkown
|
page read and write
|
|
|
|
11865B02000
|
unkown
|
page read and write
|
|
|
|
7FF5C396D000
|
unkown
|
page readonly
|
|
|
|
14C5BFB000
|
unkown
|
page read and write
|
|
|
|
FE2BEFE000
|
unkown
|
page read and write
|
|
|
|
23F1C090000
|
unkown
|
page read and write
|
|
|
|
18B000
|
unkown
|
page read and write
|
|
|
|
7FF531E21000
|
unkown
|
page readonly
|
|
|
|
1D447A00000
|
unkown
|
page readonly
|
|
|
|
7FF4EF16C000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7D5000
|
unkown
|
page readonly
|
|
|
|
1BA49202000
|
unkown
|
page read and write
|
|
|
|
7FF532331000
|
unkown
|
page readonly
|
|
|
|
FE2BFFB000
|
unkown
|
page read and write
|
|
|
|
23F208E0000
|
unkown
|
page read and write
|
|
|
|
7FF5C6809000
|
unkown
|
page readonly
|
|
|
|
7FF4FC3DA000
|
unkown
|
page readonly
|
|
|
|
7FF5DEF80000
|
unkown
|
page readonly
|
|
|
|
7FF5A6145000
|
unkown
|
page readonly
|
|
|
|
29F91802000
|
unkown
|
page read and write
|
|
|
|
7FF59ECCA000
|
unkown
|
page readonly
|
|
|
|
7FF5C8886000
|
unkown
|
page readonly
|
|
|
|
118638B9000
|
unkown
|
page read and write
|
|
|
|
11866110000
|
unkown
|
page read and write
|
|
|
|
7FF5E5683000
|
unkown
|
page readonly
|
|
|
|
7FF4EF185000
|
unkown
|
page readonly
|
|
|
|
7FF5DF024000
|
unkown
|
page readonly
|
|
|
|
2C259D70000
|
unkown
|
page readonly
|
|
|
|
7FF5C8BF8000
|
unkown
|
page readonly
|
|
|
|
2B28143D000
|
unkown
|
page read and write
|
|
|
|
7FF5A607C000
|
unkown
|
page readonly
|
|
|
|
1319B000000
|
unkown
|
page readonly
|
|
|
|
1004FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C8C3E000
|
unkown
|
page readonly
|
|
|
|
7FF5C39D1000
|
unkown
|
page readonly
|
|
|
|
12149C00000
|
unkown
|
page readonly
|
|
|
|
F497B0C000
|
unkown
|
page read and write
|
|
|
|
7FF5A5FCE000
|
unkown
|
page readonly
|
|
|
|
7FF5320E7000
|
unkown
|
page readonly
|
|
|
|
23F1B302000
|
unkown
|
page read and write
|
|
|
|
1BA48A13000
|
unkown
|
page read and write
|
|
|
|
7FF5E09FE000
|
unkown
|
page readonly
|
|
|
|
7FF59EE85000
|
unkown
|
page readonly
|
|
|
|
7FF4FC3EE000
|
unkown
|
page readonly
|
|
|
|
820000
|
unkown
|
page readonly
|
|
|
|
7FF5C6A67000
|
unkown
|
page readonly
|
|
|
|
1008FC000
|
unkown
|
page read and write
|
|
|
|
1F1EA7A000
|
unkown
|
page read and write
|
|
|
|
7FF5DF07E000
|
unkown
|
page readonly
|
|
|
|
FE2BC7B000
|
unkown
|
page read and write
|
|
|
|
11863800000
|
unkown
|
page read and write
|
|
|
|
118652C0000
|
unkown
|
page read and write
|
|
|
|
7FF5DF687000
|
unkown
|
page readonly
|
|
|
|
118659E4000
|
unkown
|
page read and write
|
|
|
|
11866410000
|
unkown
|
page read and write
|
|
|
|
14C59FB000
|
unkown
|
page read and write
|
|
|
|
2D8E000
|
unkown
|
page readonly
|
|
|
|
118638D6000
|
unkown
|
page read and write
|
|
|
|
7FF5C8D01000
|
unkown
|
page readonly
|
|
|
|
11863860000
|
unkown
|
page read and write
|
|
|
|
7FF5DF61A000
|
unkown
|
page readonly
|
|
|
|
11865C02000
|
unkown
|
page read and write
|
|
|
|
7FF5C6B2C000
|
unkown
|
page readonly
|
|
|
|
1F1E87F000
|
unkown
|
page read and write
|
|
|
|
7FF5DF56A000
|
unkown
|
page readonly
|
|
|
|
2FD5000
|
unkown
|
page readonly
|
|
|
|
23F1B229000
|
unkown
|
page read and write
|
|
|
|
23F209C0000
|
unkown
|
page readonly
|
|
|
|
7FF5C8D09000
|
unkown
|
page readonly
|
|
|
|
7FF5A6176000
|
unkown
|
page readonly
|
|
|
|
7FF59EB2E000
|
unkown
|
page readonly
|
|
|
|
7FF5E57CD000
|
unkown
|
page readonly
|
|
|
|
7FF5A5FF8000
|
unkown
|
page readonly
|
|
|
|
7FF5C3877000
|
unkown
|
page readonly
|
|
|
|
1D44784D000
|
unkown
|
page read and write
|
|
|
|
B55072B000
|
unkown
|
page read and write
|
|
|
|
7FF5C865F000
|
unkown
|
page readonly
|
|
|
|
7FF5DF081000
|
unkown
|
page readonly
|
|
|
|
2D9D3002000
|
unkown
|
page read and write
|
|
|
|
2C25A460000
|
unkown
|
page readonly
|
|
|
|
23F208E0000
|
unkown
|
page read and write
|
|
|
|
7FF5C3794000
|
unkown
|
page readonly
|
|
|
|
7FF5C8AA8000
|
unkown
|
page readonly
|
|
|
|
7FF5C8545000
|
unkown
|
page readonly
|
|
|
|
29F90E60000
|
heap private
|
page read and write
|
|
|
|
1009FF000
|
unkown
|
page read and write
|
|
|
|
7FF59EE5D000
|
unkown
|
page readonly
|
|
|
|
7FF59EDAA000
|
unkown
|
page readonly
|
|
|
|
7FF5C6AF5000
|
unkown
|
page readonly
|
|
|
|
2D9D2802000
|
unkown
|
page read and write
|
|
|
|
7FF53F358000
|
unkown
|
page readonly
|
|
|
|
7FF5E0960000
|
unkown
|
page readonly
|
|
|
|
23F1B292000
|
unkown
|
page read and write
|
|
|
|
7FF5DF681000
|
unkown
|
page readonly
|
|
|
|
7FF532471000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B25000
|
unkown
|
page readonly
|
|
|
|
7FF4EF1EE000
|
unkown
|
page readonly
|
|
|
|
7FF53238A000
|
unkown
|
page readonly
|
|
|
|
2B281464000
|
unkown
|
page read and write
|
|
|
|
23F20860000
|
unkown
|
page readonly
|
|
|
|
14C54FA000
|
unkown
|
page read and write
|
|
|
|
14008102000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C1C000
|
unkown
|
page readonly
|
|
|
|
7FF59EDF0000
|
unkown
|
page readonly
|
|
|
|
7FF5B0BBA000
|
unkown
|
page readonly
|
|
|
|
31A0000
|
unkown
|
page readonly
|
|
|
|
10007B000
|
unkown
|
page read and write
|
|
|
|
11866210000
|
unkown
|
page read and write
|
|
|
|
2D9D2824000
|
unkown
|
page read and write
|
|
|
|
82B7C7B000
|
unkown
|
page read and write
|
|
|
|
3100000
|
unkown
|
page readonly
|
|
|
|
14007F60000
|
unkown
|
page readonly
|
|
|
|
11865E00000
|
unkown
|
page readonly
|
|
|
|
7FF5E5B79000
|
unkown
|
page readonly
|
|
|
|
11863A00000
|
unkown
|
page readonly
|
|
|
|
7FF5E5AAE000
|
unkown
|
page readonly
|
|
|
|
29F90FA0000
|
unkown
|
page readonly
|
|
|
|
7FF5C369E000
|
unkown
|
page readonly
|
|
|
|
7FF5C690A000
|
unkown
|
page readonly
|
|
|
|
7FF5A601D000
|
unkown
|
page readonly
|
|
|
|
1186385D000
|
unkown
|
page read and write
|
|
|
|
2D9D26C0000
|
heap private
|
page read and write
|
|
|
|
7FF4FC445000
|
unkown
|
page readonly
|
|
|
|
1D44785E000
|
unkown
|
page read and write
|
|
|
|
7FF4FC3C8000
|
unkown
|
page readonly
|
|
|
|
7FF5DF006000
|
unkown
|
page readonly
|
|
|
|
1186395F000
|
unkown
|
page read and write
|
|
|
|
23F1B2B3000
|
unkown
|
page read and write
|
|
|
|
1BA49740000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
118638BB000
|
unkown
|
page read and write
|
|
|
|
2718C7F000
|
unkown
|
page read and write
|
|
|
|
7FF5C8664000
|
unkown
|
page readonly
|
|
|
|
7FF53F507000
|
unkown
|
page readonly
|
|
|
|
7FF4FBFF5000
|
unkown
|
page readonly
|
|
|
|
2B28145F000
|
unkown
|
page read and write
|
|
|
|
29F90FB0000
|
unkown
|
page readonly
|
|
|
|
11863865000
|
unkown
|
page read and write
|
|
|
|
7FF53F37D000
|
unkown
|
page readonly
|
|
|
|
7FF5C3978000
|
unkown
|
page readonly
|
|
|
|
7FF5C3A69000
|
unkown
|
page readonly
|
|
|
|
252FE8E0000
|
unkown
|
page readonly
|
|
|
|
2B281350000
|
unkown
|
page readonly
|
|
|
|
7FF5C6B09000
|
unkown
|
page readonly
|
|
|
|
11865710000
|
unkown
|
page readonly
|
|
|
|
7FF4FC13C000
|
unkown
|
page readonly
|
|
|
|
7FF53F05A000
|
unkown
|
page readonly
|
|
|
|
BE32779000
|
unkown
|
page read and write
|
|
|
|
1D447800000
|
unkown
|
page read and write
|
|
|
|
7FF4FC1EC000
|
unkown
|
page readonly
|
|
|
|
7FF5E57FC000
|
unkown
|
page readonly
|
|
|
|
12149A5A000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page readonly
|
|
|
|
1D4477E0000
|
unkown
|
page read and write
|
|
|
|
7FF5DF089000
|
unkown
|
page readonly
|
|
|
|
271868B000
|
unkown
|
page read and write
|
|
|
|
313A000
|
unkown
|
page readonly
|
|
|
|
1D44784E000
|
unkown
|
page read and write
|
|
|
|
7FF59ED97000
|
unkown
|
page readonly
|
|
|
|
118638A0000
|
unkown
|
page read and write
|
|
|
|
7FF5DEF92000
|
unkown
|
page readonly
|
|
|
|
F497FFE000
|
unkown
|
page read and write
|
|
|
|
7FF4FC457000
|
unkown
|
page readonly
|
|
|
|
7FF5DF49D000
|
unkown
|
page readonly
|
|
|
|
FE2BD7E000
|
unkown
|
page read and write
|
|
|
|
7FF5E5AB5000
|
unkown
|
page readonly
|
|
|
|
23F1C5F0000
|
unkown
|
page read and write
|
|
|
|
2C259C90000
|
heap default
|
page read and write
|
|
|
|
118653C0000
|
unkown
|
page readonly
|
|
|
|
7FF4FC088000
|
unkown
|
page readonly
|
|
|
|
7FF5321CA000
|
unkown
|
page readonly
|
|
|
|
7FF4EEB35000
|
unkown
|
page readonly
|
|
|
|
23F20A8D000
|
unkown
|
page read and write
|
|
|
|
7FF5C8C8C000
|
unkown
|
page readonly
|
|
|
|
2B28146C000
|
unkown
|
page read and write
|
|
|
|
100CFE000
|
unkown
|
page read and write
|
|
|
|
23F1B9F3000
|
unkown
|
page read and write
|
|
|
|
DB3247E000
|
unkown
|
page read and write
|
|
|
|
11863902000
|
unkown
|
page read and write
|
|
|
|
2D9D2813000
|
unkown
|
page read and write
|
|
|
|
1319AF02000
|
unkown
|
page read and write
|
|
|
|
2B281442000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C99000
|
unkown
|
page readonly
|
|
|
|
7FF5E5B79000
|
unkown
|
page readonly
|
|
|
|
2D9D2A00000
|
unkown
|
page readonly
|
|
|
|
AF0000
|
unkown
|
page readonly
|
|
|
|
7FF4FBCF5000
|
unkown
|
page readonly
|
|
|
|
740000
|
heap default
|
page read and write
|
|
|
|
7FF5A6102000
|
unkown
|
page readonly
|
|
|
|
1D4477E0000
|
unkown
|
page read and write
|
|
|
|
2B28142D000
|
unkown
|
page read and write
|
|
|
|
7FF53F569000
|
unkown
|
page readonly
|
|
|
|
7FF5E05E4000
|
unkown
|
page readonly
|
|
|
|
30E4000
|
unkown
|
page readonly
|
|
|
|
7FF5C39A5000
|
unkown
|
page readonly
|
|
|
|
1BA48990000
|
heap private
|
page read and write
|
|
|
|
BE3287E000
|
unkown
|
page read and write
|
|
|
|
7FF5DF78F000
|
unkown
|
page readonly
|
|
|
|
7FF5C8C76000
|
unkown
|
page readonly
|
|
|
|
118659BC000
|
unkown
|
page read and write
|
|
|
|
1CA6C800000
|
unkown
|
page write copy
|
|
|
|
7FF5DF76A000
|
unkown
|
page readonly
|
|
|
|
318B000
|
unkown
|
page readonly
|
|
|
|
7FF5C38DC000
|
unkown
|
page readonly
|
|
|
|
B5511FF000
|
unkown
|
page read and write
|
|
|
|
FE2BCFE000
|
unkown
|
page read and write
|
|
|
|
11865B42000
|
unkown
|
page read and write
|
|
|
|
118638BB000
|
unkown
|
page read and write
|
|
|
|
7FF53F504000
|
unkown
|
page readonly
|
|
|
|
7FF5E5968000
|
unkown
|
page readonly
|
|
|
|
7FF4FC436000
|
unkown
|
page readonly
|
|
|
|
2B281270000
|
heap default
|
page read and write
|
|
|
|
7FF59EE06000
|
unkown
|
page readonly
|
|
|
|
2C259C30000
|
heap private
|
page read and write
|
|
|
|
11865B42000
|
unkown
|
page read and write
|
|
|
|
7FF4FC04E000
|
unkown
|
page readonly
|
|
|
|
DB327FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C680D000
|
unkown
|
page readonly
|
|
|
|
1BA48B08000
|
unkown
|
page read and write
|
|
|
|
7FF53F569000
|
unkown
|
page readonly
|
|
|
|
7FF4FC4AE000
|
unkown
|
page readonly
|
|
|
|
252FE8A0000
|
unkown
|
page readonly
|
|
|
|
B571A7E000
|
unkown
|
page read and write
|
|
|
|
23F1B23F000
|
unkown
|
page read and write
|
|
|
|
23F1B28E000
|
unkown
|
page read and write
|
|
|
|
7FF4FC32C000
|
unkown
|
page readonly
|
|
|
|
11866410000
|
unkown
|
page read and write
|
|
|
|
7FF5E58CA000
|
unkown
|
page readonly
|
|
|
|
7FF4EF12E000
|
unkown
|
page readonly
|
|
|
|
7FF53232A000
|
unkown
|
page readonly
|
|
|
|
7FF5C6823000
|
unkown
|
page readonly
|
|
|
|
1CA6C700000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C99000
|
unkown
|
page readonly
|
|
|
|
F49827D000
|
unkown
|
page read and write
|
|
|
|
11865B82000
|
unkown
|
page read and write
|
|
|
|
2C259E00000
|
unkown
|
page read and write
|
|
|
|
252FE8D0000
|
heap private
|
page read and write
|
|
|
|
1FEF7902000
|
unkown
|
page read and write
|
|
|
|
7FF53F33A000
|
unkown
|
page readonly
|
|
|
|
7FF5B091C000
|
unkown
|
page readonly
|
|
|
|
7FF532479000
|
unkown
|
page readonly
|
|
|
|
7FF5C896D000
|
unkown
|
page readonly
|
|
|
|
7FF4EF108000
|
unkown
|
page readonly
|
|
|
|
1FEF784E000
|
unkown
|
page read and write
|
|
|
|
7FF5B0913000
|
unkown
|
page readonly
|
|
|
|
1FEF7908000
|
unkown
|
page read and write
|
|
|
|
14C52FA000
|
unkown
|
page read and write
|
|
|
|
7FF4FC0BD000
|
unkown
|
page readonly
|
|
|
|
3194000
|
unkown
|
page readonly
|
|
|
|
7FF5C8B17000
|
unkown
|
page readonly
|
|
|
|
7FF4EEE30000
|
unkown
|
page readonly
|
|
|
|
14008937000
|
unkown
|
page read and write
|
|
|
|
118637C0000
|
unkown
|
page readonly
|
|
|
|
7FF4EF194000
|
unkown
|
page readonly
|
|
|
|
7FF5B0B3A000
|
unkown
|
page readonly
|
|
|
|
6F0F1FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E5A27000
|
unkown
|
page readonly
|
|
|
|
7FF5C3A5E000
|
unkown
|
page readonly
|
|
|
|
12149A76000
|
unkown
|
page read and write
|
|
|
|
14007FA0000
|
unkown
|
page readonly
|
|
|
|
7FF4FC047000
|
unkown
|
page readonly
|
|
|
|
23F20788000
|
unkown
|
page read and write
|
|
|
|
252FEA90000
|
heap private
|
page read and write
|
|
|
|
23F1BB58000
|
unkown
|
page read and write
|
|
|
|
2B28145C000
|
unkown
|
page read and write
|
|
|
|
1BA48A02000
|
unkown
|
page read and write
|
|
|
|
11865931000
|
unkown
|
page read and write
|
|
|
|
2718EFD000
|
unkown
|
page read and write
|
|
|
|
118638D6000
|
unkown
|
page read and write
|
|
|
|
23F1B27A000
|
unkown
|
page read and write
|
|
|
|
7FF5C6A8A000
|
unkown
|
page readonly
|
|
|
|
11865953000
|
unkown
|
page read and write
|
|
|
|
B57197F000
|
unkown
|
page read and write
|
|
|
|
29F91200000
|
unkown
|
page readonly
|
|
|
|
23F1B990000
|
unkown
|
page read and write
|
|
|
|
7FF5B08F5000
|
unkown
|
page readonly
|
|
|
|
11865C00000
|
unkown
|
page read and write
|
|
|
|
29F91000000
|
unkown
|
page read and write
|
|
|
|
7FF5DF4A4000
|
unkown
|
page readonly
|
|
|
|
2B28142F000
|
unkown
|
page read and write
|
|
|
|
7FF4FC1F8000
|
unkown
|
page readonly
|
|
|
|
118659EC000
|
unkown
|
page read and write
|
|
|
|
1FEF7760000
|
unkown
|
page readonly
|
|
|
|
1D44783F000
|
unkown
|
page read and write
|
|
|
|
7FF5C399E000
|
unkown
|
page readonly
|
|
|
|
7FF53F4D6000
|
unkown
|
page readonly
|
|
|
|
2B281502000
|
unkown
|
page read and write
|
|
|
|
23F20A2B000
|
unkown
|
page read and write
|
|
|
|
7FF5DF7C6000
|
unkown
|
page readonly
|
|
|
|
7FF4FC387000
|
unkown
|
page readonly
|
|
|
|
29F9103D000
|
unkown
|
page read and write
|
|
|
|
7FF532417000
|
unkown
|
page readonly
|
|
|
|
7FF5C363F000
|
unkown
|
page readonly
|
|
|
|
23F1C280000
|
unkown
|
page readonly
|
|
|
|
1BA48A3C000
|
unkown
|
page read and write
|
|
|
|
7FF5B08AC000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7BC000
|
unkown
|
page readonly
|
|
|
|
2B28147A000
|
unkown
|
page read and write
|
|
|
|
7FF5E58AC000
|
unkown
|
page readonly
|
|
|
|
7FF5B0B90000
|
unkown
|
page readonly
|
|
|
|
23F1BB59000
|
unkown
|
page read and write
|
|
|
|
7FF5C8CFE000
|
unkown
|
page readonly
|
|
|
|
7FF5B0C0C000
|
unkown
|
page readonly
|
|
|
|
121498E0000
|
heap default
|
page read and write
|
|
|
|
7FF5A6118000
|
unkown
|
page readonly
|
|
|
|
30E6000
|
unkown
|
page readonly
|
|
|
|
30E0000
|
unkown
|
page readonly
|
|
|
|
14008200000
|
unkown
|
page readonly
|
|
|
|
7FF5C39AF000
|
unkown
|
page readonly
|
|
|
|
1186387B000
|
unkown
|
page read and write
|
|
|
|
1FEF7780000
|
unkown
|
page read and write
|
|
|
|
118638B9000
|
unkown
|
page read and write
|
|
|
|
810000
|
unkown
|
page readonly
|
|
|
|
11865A63000
|
unkown
|
page read and write
|
|
|
|
7FF5C6B1D000
|
unkown
|
page readonly
|
|
|
|
3102000
|
unkown
|
page readonly
|
|
|
|
14C5B7B000
|
unkown
|
page read and write
|
|
|
|
7FF59EEEE000
|
unkown
|
page readonly
|
|
|
|
7FF5DEC40000
|
unkown
|
page readonly
|
|
|
|
7FF4FC37B000
|
unkown
|
page readonly
|
|
|
|
23F1BA02000
|
unkown
|
page read and write
|
|
|
|
1CA6C63F000
|
unkown
|
page read and write
|
|
|
|
7FF5E5ABF000
|
unkown
|
page readonly
|
|
|
|
7FF5A617C000
|
unkown
|
page readonly
|
|
|
|
1CA6C702000
|
unkown
|
page read and write
|
|
|
|
1007FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E5AE6000
|
unkown
|
page readonly
|
|
|
|
2B28146E000
|
unkown
|
page read and write
|
|
|
|
12149880000
|
heap private
|
page read and write
|
|
|
|
7FF4FC3C6000
|
unkown
|
page readonly
|
|
|
|
11865770000
|
unkown
|
page readonly
|
|
|
|
121498F0000
|
unkown
|
page readonly
|
|
|
|
1186391D000
|
unkown
|
page read and write
|
|
|
|
7FF5DF752000
|
unkown
|
page readonly
|
|
|
|
7FF5E56AD000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A86000
|
unkown
|
page readonly
|
|
|
|
23F1B9F0000
|
unkown
|
page read and write
|
|
|
|
2B281370000
|
unkown
|
page read and write
|
|
|
|
1CA6C600000
|
unkown
|
page read and write
|
|
|
|
7FF5C8845000
|
unkown
|
page readonly
|
|
|
|
1186599A000
|
unkown
|
page read and write
|
|
|
|
7FF5C8CA4000
|
unkown
|
page readonly
|
|
|
|
7FF5E0A69000
|
unkown
|
page readonly
|
|
|
|
F4984FD000
|
unkown
|
page read and write
|
|
|
|
7FF5E5B6E000
|
unkown
|
page readonly
|
|
|
|
2C259E4D000
|
unkown
|
page read and write
|
|
|
|
29F91590000
|
unkown
|
page readonly
|
|
|
|
30F7000
|
unkown
|
page readonly
|
|
|
|
7FF4FC16E000
|
unkown
|
page readonly
|
|
|
|
1186395F000
|
unkown
|
page read and write
|
|
|
|
7FF5E0955000
|
unkown
|
page readonly
|
|
|
|
1FEF8200000
|
unkown
|
page readonly
|
|
|
|
11865D00000
|
unkown
|
page read and write
|
|
|
|
1005FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C8C12000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A2A000
|
unkown
|
page readonly
|
|
|
|
2B281441000
|
unkown
|
page read and write
|
|
|
|
7FF59EDDC000
|
unkown
|
page readonly
|
|
|
|
12149B02000
|
unkown
|
page read and write
|
|
|
|
7FF59EA35000
|
unkown
|
page readonly
|
|
|
|
7FF5DF65D000
|
unkown
|
page readonly
|
|
|
|
1319C9D0000
|
unkown
|
page readonly
|
|
|
|
7FF5DEE0F000
|
unkown
|
page readonly
|
|
|
|
7FF5E094E000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A31000
|
unkown
|
page readonly
|
|
|
|
118638F7000
|
unkown
|
page read and write
|
|
|
|
B550F7B000
|
unkown
|
page read and write
|
|
|
|
252FEE00000
|
heap private
|
page read and write
|
|
|
|
2FD5000
|
unkown
|
page readonly
|
|
|
|
2718DFC000
|
unkown
|
page read and write
|
|
|
|
1D44782A000
|
unkown
|
page read and write
|
|
|
|
11865B02000
|
unkown
|
page read and write
|
|
|
|
7FF531E1D000
|
unkown
|
page readonly
|
|
|
|
7FF5C6AC6000
|
unkown
|
page readonly
|
|
|
|
7FF4FC23F000
|
unkown
|
page readonly
|
|
|
|
A30000
|
heap private
|
page read and write
|
|
|
|
1400802A000
|
unkown
|
page read and write
|
|
|
|
7FF5E5A5C000
|
unkown
|
page readonly
|
|
|
|
118659AC000
|
unkown
|
page read and write
|
|
|
|
2D9D2800000
|
unkown
|
page read and write
|
|
|
|
7FF5DF60E000
|
unkown
|
page readonly
|
|
|
|
23F1C2B0000
|
unkown
|
page readonly
|
|
|
|
7FF5C8C4F000
|
unkown
|
page readonly
|
|
|
|
23F1BB00000
|
unkown
|
page read and write
|
|
|
|
1D447AD0000
|
unkown
|
page readonly
|
|
|
|
BE2D77F000
|
unkown
|
page read and write
|
|
|
|
29F90FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5323DD000
|
unkown
|
page readonly
|
|
|
|
7FF53F060000
|
unkown
|
page readonly
|
|
|
|
30DB000
|
unkown
|
page readonly
|
|
|
|
14C5779000
|
unkown
|
page read and write
|
|
|
|
7FF5C89C5000
|
unkown
|
page readonly
|
|
|
|
7FF5E5B05000
|
unkown
|
page readonly
|
|
|
|
7FF4EEF1A000
|
unkown
|
page readonly
|
|
|
|
23F1B2A0000
|
unkown
|
page read and write
|
|
|
|
2D9D2902000
|
unkown
|
page read and write
|
|
|
|
23F20A91000
|
unkown
|
page read and write
|
|
|
|
23F20A3F000
|
unkown
|
page read and write
|
|
|
|
3186000
|
unkown
|
page readonly
|
|
|
|
118638BB000
|
unkown
|
page read and write
|
|
|
|
7FF53F3DC000
|
unkown
|
page readonly
|
|
|
|
14C527E000
|
unkown
|
page read and write
|
|
|
|
7FF4FC110000
|
unkown
|
page readonly
|
|
|
|
7FF5A614F000
|
unkown
|
page readonly
|
|
|
|
7FF4FC337000
|
unkown
|
page readonly
|
|
|
|
23F20A94000
|
unkown
|
page read and write
|
|
|
|
7FF4FC393000
|
unkown
|
page readonly
|
|
|
|
14C57FA000
|
unkown
|
page read and write
|
|
|
|
7FF5E0BFD000
|
unkown
|
page readonly
|
|
|
|
1CA6C657000
|
unkown
|
page read and write
|
|
|
|
7FF5C37EF000
|
unkown
|
page readonly
|
|
|
|
23F207A0000
|
unkown
|
page read and write
|
|
|
|
23F208A0000
|
unkown
|
page read and write
|
|
|
|
B5514FD000
|
unkown
|
page read and write
|
|
|
|
1BA48B13000
|
unkown
|
page read and write
|
|
|
|
14C56FA000
|
unkown
|
page read and write
|
|
|
|
1FEF7680000
|
heap default
|
page read and write
|
|
|
|
1CA6C490000
|
heap private
|
page read and write
|
|
|
|
14007E80000
|
unkown
|
page readonly
|
|
|
|
14008590000
|
unkown
|
page readonly
|
|
|
|
11866210000
|
unkown
|
page read and write
|
|
|
|
1319B120000
|
unkown
|
page readonly
|
|
|
|
23F1BB02000
|
unkown
|
page read and write
|
|
|
|
1005FB000
|
unkown
|
page read and write
|
|
|
|
23F20A4C000
|
unkown
|
page read and write
|
|
|
|
1214A060000
|
unkown
|
page readonly
|
|
|
|
7FF5B0C42000
|
unkown
|
page readonly
|
|
|
|
11863813000
|
unkown
|
page read and write
|
|
|
|
1D449402000
|
unkown
|
page read and write
|
|
|
|
761000
|
heap default
|
page read and write
|
|
|
|
14007E70000
|
heap default
|
page read and write
|
|
|
|
1FEF7850000
|
unkown
|
page read and write
|
|
|
|
118657A0000
|
unkown
|
page read and write
|
|
|
|
1D447889000
|
unkown
|
page read and write
|
|
|
|
2B281474000
|
unkown
|
page read and write
|
|
|
|
1FEF7A00000
|
unkown
|
page readonly
|
|
|
|
2B281432000
|
unkown
|
page read and write
|
|
|
|
14C5A7B000
|
unkown
|
page read and write
|
|
|
|
11866010000
|
unkown
|
page read and write
|
|
|
|
118659F3000
|
unkown
|
page read and write
|
|
|
|
7FF5C38E7000
|
unkown
|
page readonly
|
|
|
|
7FF5C35D2000
|
unkown
|
page readonly
|
|
|
|
7FF4EF1F9000
|
unkown
|
page readonly
|
|
|
|
7FF59EE2E000
|
unkown
|
page readonly
|
|
|
|
14C547F000
|
unkown
|
page read and write
|
|
|
|
7FF5C6B47000
|
unkown
|
page readonly
|
|
|
|
1BA48ED0000
|
unkown
|
page readonly
|
|
|
|
23F20888000
|
unkown
|
page write copy
|
|
|
|
7FF5C3972000
|
unkown
|
page readonly
|
|
|
|
7FF5C6BB1000
|
unkown
|
page readonly
|
|
|
|
7FF5B0B92000
|
unkown
|
page readonly
|
|
|
|
244000
|
unkown
|
page read and write
|
|
|
|
7FF53F478000
|
unkown
|
page readonly
|
|
|
|
F4982FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DF785000
|
unkown
|
page readonly
|
|
|
|
7FF5C8C95000
|
unkown
|
page readonly
|
|
|
|
1BA48A4D000
|
unkown
|
page read and write
|
|
|
|
BE323EB000
|
unkown
|
page read and write
|
|
|
|
7FF4FC43C000
|
unkown
|
page readonly
|
|
|
|
252FCE35000
|
heap private
|
page read and write
|
|
|
|
252FCFE0000
|
unkown
|
page readonly
|
|
|
|
7FF5DEF4B000
|
unkown
|
page readonly
|
|
|
|
2B28146A000
|
unkown
|
page read and write
|
|
|
|
7FF5A5D10000
|
unkown
|
page readonly
|
|
|
|
7FF5A6201000
|
unkown
|
page readonly
|
|
|
|
2B28145E000
|
unkown
|
page read and write
|
|
|
|
7FF5DF83E000
|
unkown
|
page readonly
|
|
|
|
7FF5E5AEC000
|
unkown
|
page readonly
|
|
|
|
7FF5C8C02000
|
unkown
|
page readonly
|
|
|
|
2B281458000
|
unkown
|
page read and write
|
|
|
|
7FF53234A000
|
unkown
|
page readonly
|
|
|
|
7FF5E0BBA000
|
unkown
|
page readonly
|
|
|
|
23F1B256000
|
unkown
|
page read and write
|
|
|
|
7FF59EDA7000
|
unkown
|
page readonly
|
|
|
|
7FF4EEF7F000
|
unkown
|
page readonly
|
|
|
|
7FF5DF849000
|
unkown
|
page readonly
|
|
|
|
7FF5C6827000
|
unkown
|
page readonly
|
|
|
|
7FF5B0B44000
|
unkown
|
page readonly
|
|
|
|
1FEF8002000
|
unkown
|
page read and write
|
|
|
|
7FF5C3976000
|
unkown
|
page readonly
|
|
|
|
121499E0000
|
unkown
|
page read and write
|
|
|
|
7FF4FC0C6000
|
unkown
|
page readonly
|
|
|
|
3194000
|
unkown
|
page readonly
|
|
|
|
2718F7B000
|
unkown
|
page read and write
|
|
|
|
7FF532140000
|
unkown
|
page readonly
|
|
|
|
7FF532414000
|
unkown
|
page readonly
|
|
|
|
B5512FA000
|
unkown
|
page read and write
|
|
|
|
1D447790000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C8E000
|
unkown
|
page readonly
|
|
|
|
7FF5B0BCE000
|
unkown
|
page readonly
|
|
|
|
7FF5E5987000
|
unkown
|
page readonly
|
|
|
|
7FF5A6112000
|
unkown
|
page readonly
|
|
|
|
7FF5C6ADA000
|
unkown
|
page readonly
|
|
|
|
11865780000
|
unkown
|
page read and write
|
|
|
|
7FF53F472000
|
unkown
|
page readonly
|
|
|
|
118638BB000
|
unkown
|
page read and write
|
|
|
|
7FF53F070000
|
unkown
|
page readonly
|
|
|
|
7FF5C6BB9000
|
unkown
|
page readonly
|
|
|
|
11865900000
|
unkown
|
page read and write
|
|
|
|
7FF53F4EC000
|
unkown
|
page readonly
|
|
|
|
7FF5B0BAA000
|
unkown
|
page readonly
|
|
|
|
6F0F2F7000
|
unkown
|
page read and write
|
|
|
|
7FF5C393A000
|
unkown
|
page readonly
|
|
|
|
1FEF7770000
|
unkown
|
page readonly
|
|
|
|
309E000
|
unkown
|
page readonly
|
|
|
|
23F1C250000
|
unkown
|
page readonly
|
|
|
|
1D447780000
|
unkown
|
page readonly
|
|
|
|
7FF5B0BA6000
|
unkown
|
page readonly
|
|
|
|
252FCE30000
|
heap private
|
page read and write
|
|
|
|
7FF5C36B6000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7E0000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A4A000
|
unkown
|
page readonly
|
|
|
|
3120000
|
unkown
|
page readonly
|
|
|
|
7FF5E589B000
|
unkown
|
page readonly
|
|
|
|
7FF5DEC43000
|
unkown
|
page readonly
|
|
|
|
7FF5B0BE9000
|
unkown
|
page readonly
|
|
|
|
14C557A000
|
unkown
|
page read and write
|
|
|
|
7FF532410000
|
unkown
|
page readonly
|
|
|
|
2D9D2DA0000
|
unkown
|
page readonly
|
|
|
|
7FF5DF497000
|
unkown
|
page readonly
|
|
|
|
7FF5C6817000
|
unkown
|
page readonly
|
|
|
|
1BA48A50000
|
unkown
|
page read and write
|
|
|
|
11865A36000
|
unkown
|
page read and write
|
|
|
|
7FF5C6B54000
|
unkown
|
page readonly
|
|
|
|
BE2D87C000
|
unkown
|
page read and write
|
|
|
|
7FF5B0BA8000
|
unkown
|
page readonly
|
|
|
|
23F20780000
|
unkown
|
page read and write
|
|
|
|
11866510000
|
unkown
|
page read and write
|
|
|
|
7FF5C6920000
|
unkown
|
page readonly
|
|
|
|
A40000
|
unkown
|
page readonly
|
|
|
|
23F1B600000
|
unkown
|
page readonly
|
|
|
|
1D4477E0000
|
unkown
|
page read and write
|
|
|
|
7FF5E5AE1000
|
unkown
|
page readonly
|
|
|
|
7FF5C6A8C000
|
unkown
|
page readonly
|
|
|
|
82B7F7F000
|
unkown
|
page read and write
|
|
|
|
7FF5E5A24000
|
unkown
|
page readonly
|
|
|
|
870000
|
heap private
|
page read and write
|
|
|
|
2B281445000
|
unkown
|
page read and write
|
|
|
|
67C000
|
unkown
|
page read and write
|
|
|
|
7FF5DEFF1000
|
unkown
|
page readonly
|
|
|
|
23F207C0000
|
unkown
|
page read and write
|
|
|
|
2B28143B000
|
unkown
|
page read and write
|
|
|
|
1FEF786E000
|
unkown
|
page read and write
|
|
|
|
7FF5E5A68000
|
unkown
|
page readonly
|
|
|
|
82B779D000
|
unkown
|
page read and write
|
|
|
|
271927F000
|
unkown
|
page read and write
|
|
|
|
100AFF000
|
unkown
|
page read and write
|
|
|
|
7FF5C6AC8000
|
unkown
|
page readonly
|
|
|
|
2C259F00000
|
unkown
|
page read and write
|
|
|
|
118638C0000
|
unkown
|
page read and write
|
|
|
|
11865A00000
|
unkown
|
page read and write
|
|
|
|
7FF59EEF9000
|
unkown
|
page readonly
|
|
|
|
2B28144E000
|
unkown
|
page read and write
|
|
|
|
7FF5C3A60000
|
unkown
|
page readonly
|
|
|
|
7FF59EDE8000
|
unkown
|
page readonly
|
|
|
|
7FF5C6A71000
|
unkown
|
page readonly
|
|
|
|
7FF5E5835000
|
unkown
|
page readonly
|
|
|
|
23F1BB13000
|
unkown
|
page read and write
|
|
|
|
7FF5E0B90000
|
unkown
|
page readonly
|
|
|
|
2D9D2EB0000
|
unkown
|
page read and write
|
|
|
|
7FF5B0B3E000
|
unkown
|
page readonly
|
|
|
|
14C5AFD000
|
unkown
|
page read and write
|
|
|
|
7FF5E0947000
|
unkown
|
page readonly
|
|
|
|
7FF4FC1DB000
|
unkown
|
page readonly
|
|
|
|
7FF5C8654000
|
unkown
|
page readonly
|
|
|
|
2B281360000
|
unkown
|
page readonly
|
|
|
|
7FF4EF15D000
|
unkown
|
page readonly
|
|
|
|
7FF5C8941000
|
unkown
|
page readonly
|
|
|
|
7FF4EF17C000
|
unkown
|
page readonly
|
|
|
|
6F0EE7C000
|
unkown
|
page read and write
|
|
|
|
23F1B28C000
|
unkown
|
page read and write
|
|
|
|
7FF5C39EC000
|
unkown
|
page readonly
|
|
|
|
7FF5C86E5000
|
unkown
|
page readonly
|
|
|
|
1D447770000
|
unkown
|
page readonly
|
|
|
|
23F20AB6000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C37000
|
unkown
|
page readonly
|
|
|
|
7FF5A5E57000
|
unkown
|
page readonly
|
|
|
|
11866010000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C37000
|
unkown
|
page readonly
|
|
|
|
7FF5A61A0000
|
unkown
|
page readonly
|
|
|
|
7FF4FC325000
|
unkown
|
page readonly
|
|
|
|
7FF5DF638000
|
unkown
|
page readonly
|
|
|
|
23F1BB18000
|
unkown
|
page read and write
|
|
|
|
11865919000
|
unkown
|
page read and write
|
|
|
|
2C259E80000
|
unkown
|
page read and write
|
|
|
|
2C259E50000
|
unkown
|
page read and write
|
|
|
|
1D449340000
|
unkown
|
page write copy
|
|
|
|
7FF5A6159000
|
unkown
|
page readonly
|
|
|
|
29F91068000
|
unkown
|
page read and write
|
|
|
|
7FF59EA33000
|
unkown
|
page readonly
|
|
|
|
7FF5C39B9000
|
unkown
|
page readonly
|
|
|
|
23F208B0000
|
unkown
|
page read and write
|
|
|
|
2D9D2720000
|
heap default
|
page read and write
|
|
|
|
7FF5C3642000
|
unkown
|
page readonly
|
|
|
|
12149A6F000
|
unkown
|
page read and write
|
|
|
|
1214A202000
|
unkown
|
page read and write
|
|
|
|
23F1B120000
|
heap default
|
page read and write
|
|
|
|
7FF5DF7AD000
|
unkown
|
page readonly
|
|
|
|
23F20940000
|
unkown
|
page readonly
|
|
|
|
840000
|
heap default
|
page read and write
|
|
|
|
7FF4FC278000
|
unkown
|
page readonly
|
|
|
|
1D44788F000
|
unkown
|
page read and write
|
|
|
|
14008912000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C30000
|
unkown
|
page readonly
|
|
|
|
7FF5E5840000
|
unkown
|
page readonly
|
|
|
|
23F20920000
|
unkown
|
page readonly
|
|
|
|
7FF5A6195000
|
unkown
|
page readonly
|
|
|
|
7FF4EF176000
|
unkown
|
page readonly
|
|
|
|
7FF5A612A000
|
unkown
|
page readonly
|
|
|
|
7FF4EF190000
|
unkown
|
page readonly
|
|
|
|
DB324FE000
|
unkown
|
page read and write
|
|
|
|
118638BB000
|
unkown
|
page read and write
|
|
|
|
7FF5323AE000
|
unkown
|
page readonly
|
|
|
|
7FF5321E0000
|
unkown
|
page readonly
|
|
|
|
29F91A00000
|
unkown
|
page readonly
|
|
|
|
23F20A61000
|
unkown
|
page read and write
|
|
|
|
1BA48A00000
|
unkown
|
page read and write
|
|
|
|
7FF5C8ACA000
|
unkown
|
page readonly
|
|
|
|
12149A55000
|
unkown
|
page read and write
|
|
|
|
23F20680000
|
unkown
|
page read and write
|
|
|
|
1F1E9FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E58FF000
|
unkown
|
page readonly
|
|
|
|
1008FD000
|
unkown
|
page read and write
|
|
|
|
7FF5C8C00000
|
unkown
|
page readonly
|
|
|
|
7FF5DF340000
|
unkown
|
page readonly
|
|
|
|
3135000
|
unkown
|
page readonly
|
|
|
|
7FF5A61A7000
|
unkown
|
page readonly
|
|
|
|
2B281462000
|
unkown
|
page read and write
|
|
|
|
7FF4FC4B0000
|
unkown
|
page readonly
|
|
|
|
30A1000
|
unkown
|
page readonly
|
|
|
|
7FF5A6209000
|
unkown
|
page readonly
|
|
|
|
14007E10000
|
heap private
|
page read and write
|
|
|
|
B550E7F000
|
unkown
|
page read and write
|
|
|
|
11863840000
|
unkown
|
page read and write
|
|
|
|
23F1C270000
|
unkown
|
page readonly
|
|
|
|
7FF5A6100000
|
unkown
|
page readonly
|
|
|
|
140080C6000
|
unkown
|
page read and write
|
|
|
|
1319C8D0000
|
unkown
|
page read and write
|
|
|
|
14C5679000
|
unkown
|
page read and write
|
|
|
|
7FF4FC397000
|
unkown
|
page readonly
|
|
|
|
30A1000
|
unkown
|
page readonly
|
|
|
|
318B000
|
unkown
|
page readonly
|
|
|
|
1BA49400000
|
unkown
|
page readonly
|
|
|
|
23F1C290000
|
unkown
|
page readonly
|
|
|
|
7FF4FC3A8000
|
unkown
|
page readonly
|
|
|
|
11865C82000
|
unkown
|
page read and write
|
|
|
|
7FF5A6047000
|
unkown
|
page readonly
|
|
|
|
8B1000
|
heap default
|
page read and write
|
|
|
|
23F1B0C0000
|
heap private
|
page read and write
|
|
|
|
11865A94000
|
unkown
|
page read and write
|
|
|
|
1319ADF0000
|
unkown
|
page readonly
|
|
|
|
2D9D2730000
|
unkown
|
page readonly
|
|
|
|
271907C000
|
unkown
|
page read and write
|
|
|
|
3113000
|
unkown
|
page readonly
|
|
|
|
6F0F3FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C3A04000
|
unkown
|
page readonly
|
|
|
|
1FEF783C000
|
unkown
|
page read and write
|
|
|
|
7FF5DF841000
|
unkown
|
page readonly
|
|
|
|
252FCF1B000
|
heap default
|
page read and write
|
|
|
|
7FF4FC371000
|
unkown
|
page readonly
|
|
|
|
7FF4FC0CF000
|
unkown
|
page readonly
|
|
|
|
23F207B0000
|
unkown
|
page read and write
|
|
|
|
14008900000
|
unkown
|
page read and write
|
|
|
|
118659C5000
|
unkown
|
page read and write
|
|
|
|
7FF5DF7E7000
|
unkown
|
page readonly
|
|
|
|
11865AC5000
|
unkown
|
page read and write
|
|
|
|
82B771E000
|
unkown
|
page read and write
|
|
|
|
1D4492B0000
|
unkown
|
page read and write
|
|
|
|
11866410000
|
unkown
|
page read and write
|
|
|
|
BE328FE000
|
unkown
|
page read and write
|
|
|
|
1BA48CD0000
|
unkown
|
page readonly
|
|
|
|
23F20A8F000
|
unkown
|
page read and write
|
|
|
|
7FF532268000
|
unkown
|
page readonly
|
|
|
|
7FF5A6186000
|
unkown
|
page readonly
|
|
|
|
7FF5C8841000
|
unkown
|
page readonly
|
|
|
|
7FF59EE7C000
|
unkown
|
page readonly
|
|
|
|
3125000
|
unkown
|
page readonly
|
|
|
|
7FF4FC3C2000
|
unkown
|
page readonly
|
|
|
|
7FF59EEF0000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFFC000
|
unkown
|
page readonly
|
|
|
|
7FF53F55E000
|
unkown
|
page readonly
|
|
|
|
1F1E53B000
|
unkown
|
page read and write
|
|
|
|
11865AC9000
|
unkown
|
page read and write
|
|
|
|
7FF5DEFD9000
|
unkown
|
page readonly
|
|
|
|
2D9D2EC0000
|
unkown
|
page read and write
|
|
|
|
7FF4EF1F1000
|
unkown
|
page readonly
|
|
|
|
23F207B0000
|
unkown
|
page read and write
|
|
|
|
2C259E8E000
|
unkown
|
page read and write
|
|
|
|
1D447760000
|
heap default
|
page read and write
|
|
|
|
11865A43000
|
unkown
|
page read and write
|
|
|
|
2B281483000
|
unkown
|
page read and write
|
|
|
|
7FF5E5A11000
|
unkown
|
page readonly
|
|
|
|
1CA6C602000
|
unkown
|
page read and write
|
|
|
|
7FF5DEF82000
|
unkown
|
page readonly
|
|
|
|
7FF4FC280000
|
unkown
|
page readonly
|
|
|
|
7FF5C8A8F000
|
unkown
|
page readonly
|
|
|
|
1400803E000
|
unkown
|
page read and write
|
|
|
|
7FF4FBFF1000
|
unkown
|
page readonly
|
|
|
|
7FF4FC167000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C8E000
|
unkown
|
page readonly
|
|
|
|
1D44785E000
|
unkown
|
page read and write
|
|
|
|
11865720000
|
heap private
|
page read and write
|
|
|
|
23F205F0000
|
unkown
|
page read and write
|
|
|
|
1FEF7800000
|
unkown
|
page read and write
|
|
|
|
B57128B000
|
unkown
|
page read and write
|
|
|
|
121499C0000
|
unkown
|
page readonly
|
|
|
|
2B281460000
|
unkown
|
page read and write
|
|
|
|
1BA48B02000
|
unkown
|
page read and write
|
|
|
|
11866410000
|
unkown
|
page read and write
|
|
|
|
7FF59EE6C000
|
unkown
|
page readonly
|
|
|
|
F49857E000
|
unkown
|
page read and write
|
|
|
|
30A8000
|
unkown
|
page readonly
|
|
|
|
7FF5DF6BC000
|
unkown
|
page readonly
|
|
|
|
1BA49140000
|
unkown
|
page readonly
|
|
|
|
7FF5A61FE000
|
unkown
|
page readonly
|
|
|
|
7FF4EF135000
|
unkown
|
page readonly
|
|
|
|
7FF5A5D00000
|
unkown
|
page readonly
|
|
|
|
7FF5B0C99000
|
unkown
|
page readonly
|
|
|
|
7FF5E0BCE000
|
unkown
|
page readonly
|
|
|
|
309E000
|
unkown
|
page readonly
|
|
|
|
7FF5E57C9000
|
unkown
|
page readonly
|
|
|
|
2B281440000
|
unkown
|
page read and write
|
|
|
|
2B28144A000
|
unkown
|
page read and write
|
|
|
|
12149B13000
|
unkown
|
page read and write
|
|
|
|
7FF5E0868000
|
unkown
|
page readonly
|
|
|
|
7FF5C8CA7000
|
unkown
|
page readonly
|
|
|
|
11865780000
|
unkown
|
page read and write
|
|
|
|
7FF5DEC47000
|
unkown
|
page readonly
|
|
|
|
7FF5E5B71000
|
unkown
|
page readonly
|
|
|
|
7FF5A6041000
|
unkown
|
page readonly
|
|
|
|
23F20AB2000
|
unkown
|
page read and write
|
|
|
|
23F1BA15000
|
unkown
|
page read and write
|
|
|
|
118659FF000
|
unkown
|
page read and write
|
|
|
|
82B7D77000
|
unkown
|
page read and write
|
|
|
|
2C259E3C000
|
unkown
|
page read and write
|
|
|
|
2718D7F000
|
unkown
|
page read and write
|
|
|
|
12149F90000
|
unkown
|
page readonly
|
|
|
|
7FF5C8A33000
|
unkown
|
page readonly
|
|
|
|
B55117F000
|
unkown
|
page read and write
|
|
|
|
2D9D2EB0000
|
unkown
|
page read and write
|
|
|
|
7FF4FBFF3000
|
unkown
|
page readonly
|
|
|
|
11865780000
|
unkown
|
page read and write
|
|
|
|
7FF53F4AF000
|
unkown
|
page readonly
|
|
|
|
1319AE29000
|
unkown
|
page read and write
|
|
|
|
7FF5C3808000
|
unkown
|
page readonly
|
|
|
|
2B281444000
|
unkown
|
page read and write
|
|
|
|
31A8000
|
unkown
|
page readonly
|
|
|
|
7FF5C6B26000
|
unkown
|
page readonly
|
|
|
|
118638BB000
|
unkown
|
page read and write
|
|
|
|
1D447913000
|
unkown
|
page read and write
|
|
|
|
1F1EAFD000
|
unkown
|
page read and write
|
|
|
|
B550C7A000
|
unkown
|
page read and write
|
|
|
|
1FEF7900000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown
|
page read and write
|
|
|
|
1BA48A55000
|
unkown
|
page read and write
|
|
|
|
7FF5E5A1A000
|
unkown
|
page readonly
|
|
|
|
2D8E000
|
unkown
|
page readonly
|
|
|
|
1D447900000
|
unkown
|
page read and write
|
|
|
|
1BA48B00000
|
unkown
|
page read and write
|
|
|
|
7FF5C6875000
|
unkown
|
page readonly
|
|
|
|
23F207A4000
|
unkown
|
page read and write
|
|
|
|
2B281600000
|
unkown
|
page readonly
|
|
|
|
7FF5A616D000
|
unkown
|
page readonly
|
|
|
|
11865959000
|
unkown
|
page read and write
|
|
|
|
252FCEB0000
|
unkown
|
page read and write
|
|
|
|
2B281210000
|
heap private
|
page read and write
|
|
|
|
1319AE00000
|
unkown
|
page read and write
|
|
|
|
11863970000
|
unkown
|
page read and write
|
|
|
|
2C259D90000
|
unkown
|
page read and write
|
|
|
|
7FF4FC0CC000
|
unkown
|
page readonly
|
|
|
|
7FF5323E6000
|
unkown
|
page readonly
|
|
|
|
7FF53F500000
|
unkown
|
page readonly
|
|
|
|
30F7000
|
unkown
|
page readonly
|
|
|
|
7FF53F373000
|
unkown
|
page readonly
|
|
|
|
23F207A1000
|
unkown
|
page read and write
|
|
|
|
7FF53F3A7000
|
unkown
|
page readonly
|
|
|
|
7FF532327000
|
unkown
|
page readonly
|
|
|
|
2C259E55000
|
unkown
|
page read and write
|
|
|
|
1D449270000
|
unkown
|
page read and write
|
|
|
|
2C25A000000
|
unkown
|
page readonly
|
|
|
|
7FF5323BF000
|
unkown
|
page readonly
|
|
|
|
1186386A000
|
unkown
|
page read and write
|
|
|
|
7FF5E5983000
|
unkown
|
page readonly
|
|
|
|
7FF5DF849000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A4C000
|
unkown
|
page readonly
|
|
|
|
7FF5E05DF000
|
unkown
|
page readonly
|
|
|
|
82B7E7E000
|
unkown
|
page read and write
|
|
|
|
2B28147C000
|
unkown
|
page read and write
|
|
|
|
7FF5E0C16000
|
unkown
|
page readonly
|
|
|
|
11865780000
|
unkown
|
page read and write
|
|
|
|
23F2088C000
|
unkown
|
page readonly
|
|
|
|
140080BA000
|
unkown
|
page read and write
|
|
|
|
11865966000
|
unkown
|
page read and write
|
|
|
|
1006FF000
|
unkown
|
page read and write
|
|
|
|
11865790000
|
unkown
|
page read and write
|
|
|
|
30CA000
|
unkown
|
page readonly
|
|
|
|
11865802000
|
unkown
|
page read and write
|
|
|
|
2D9D2E80000
|
unkown
|
page read and write
|
|
|
|
1D447802000
|
unkown
|
page read and write
|
|
|
|
BE2D31C000
|
unkown
|
page read and write
|
|
|
|
1D447700000
|
heap private
|
page read and write
|
|
|
|
23F20780000
|
unkown
|
page read and write
|
|
|
|
30D6000
|
unkown
|
page readonly
|
|
|
|
7FF5C3960000
|
unkown
|
page readonly
|
|
|
|
7FF5E58B8000
|
unkown
|
page readonly
|
|
|
|
7FF532382000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7CC000
|
unkown
|
page readonly
|
|
|
|
7FF5E0C25000
|
unkown
|
page readonly
|
|
|
|
2B28147D000
|
unkown
|
page read and write
|
|
|
|
7FF5E582E000
|
unkown
|
page readonly
|
|
|
|
7FF532388000
|
unkown
|
page readonly
|
|
|
|
252FCE90000
|
unkown
|
page read and write
|
|
|
|
7FF532287000
|
unkown
|
page readonly
|
|
|
|
BE3267E000
|
unkown
|
page read and write
|
|
|
|
1319ADE0000
|
heap default
|
page read and write
|
|
|
|
3180000
|
unkown
|
page readonly
|
|
|
|
6F0F17B000
|
unkown
|
page read and write
|
|
|
|
12149A02000
|
unkown
|
page read and write
|
|
|
|
7FF4EF0F0000
|
unkown
|
page readonly
|
|
|
|
2B281457000
|
unkown
|
page read and write
|
|
|
|
1BA48A4A000
|
unkown
|
page read and write
|
|
|
|
23F207C4000
|
unkown
|
page read and write
|
|
|
|
1CA6E0F0000
|
unkown
|
page readonly
|
|
|
|
7FF5E59EC000
|
unkown
|
page readonly
|
|
|
|
F49817E000
|
unkown
|
page read and write
|
|
|
|
3120000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A82000
|
unkown
|
page readonly
|
|
|
|
23F1C260000
|
unkown
|
page readonly
|
|
|
|
7FF5E5B10000
|
unkown
|
page readonly
|
|
|
|
1BA48C00000
|
unkown
|
page readonly
|
|
|
|
7FF4FC367000
|
unkown
|
page readonly
|
|
|
|
FE2C1FE000
|
unkown
|
page read and write
|
|
|
|
1FEF7855000
|
unkown
|
page read and write
|
|
|
|
F4983FD000
|
unkown
|
page read and write
|
|
|
|
7FF53F4B9000
|
unkown
|
page readonly
|
|
|
|
7FF5DF756000
|
unkown
|
page readonly
|
|
|
|
B55137F000
|
unkown
|
page read and write
|
|
|
|
30F2000
|
unkown
|
page readonly
|
|
|
|
252FE8C0000
|
unkown
|
page readonly
|
|
|
|
BE2D7FE000
|
unkown
|
page read and write
|
|
|
|
82B7AF5000
|
unkown
|
page read and write
|
|
|
|
23F1BA00000
|
unkown
|
page read and write
|
|
|
|
23F208D0000
|
unkown
|
page read and write
|
|
|
|
7FF53239A000
|
unkown
|
page readonly
|
|
|
|
7FF4FC21E000
|
unkown
|
page readonly
|
|
|
|
1CA6C5D0000
|
unkown
|
page readonly
|
|
|
|
B57187B000
|
unkown
|
page read and write
|
|
|
|
7FF4EF13F000
|
unkown
|
page readonly
|
|
|
|
7FF59EE3F000
|
unkown
|
page readonly
|
|
|
|
11863855000
|
unkown
|
page read and write
|
|
|
|
7FF5A5FDA000
|
unkown
|
page readonly
|
|
|
|
14008000000
|
unkown
|
page read and write
|
|
|
|
23F1BB18000
|
unkown
|
page read and write
|
|
|
|
7FF59EE66000
|
unkown
|
page readonly
|
|
|
|
7FF5C35CE000
|
unkown
|
page readonly
|
|
|
|
7FF53F4DC000
|
unkown
|
page readonly
|
|
|
|
1BA489F0000
|
heap default
|
page read and write
|
|
|
|
AE0000
|
heap private
|
page read and write
|
|
|
|
11865AC5000
|
unkown
|
page read and write
|
|
|
|
B5515FC000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C06000
|
unkown
|
page readonly
|
|
|
|
252FCED0000
|
unkown
|
page readonly
|
|
|
|
FE2C0F7000
|
unkown
|
page read and write
|
|
|
|
7FF5E5B14000
|
unkown
|
page readonly
|
|
|
|
23F208E0000
|
unkown
|
page read and write
|
|
|
|
7FF5C6BAE000
|
unkown
|
page readonly
|
|
|
|
3102000
|
unkown
|
page readonly
|
|
|
|
7FF53F476000
|
unkown
|
page readonly
|
|
|
|
2C259E6F000
|
unkown
|
page read and write
|
|
|
|
7FF5E5A9A000
|
unkown
|
page readonly
|
|
|
|
31A8000
|
unkown
|
page readonly
|
|
|
|
29F91113000
|
unkown
|
page read and write
|
|
|
|
2C259CA0000
|
unkown
|
page readonly
|
|
|
|
23F20AAB000
|
unkown
|
page read and write
|
|
|
|
1319AE02000
|
unkown
|
page read and write
|
|
|
|
7FF5C8AD9000
|
unkown
|
page readonly
|
|
|
|
118637B0000
|
heap default
|
page read and write
|
|
|
|
7FF5E5A88000
|
unkown
|
page readonly
|
|
|
|
1FEF7829000
|
unkown
|
page read and write
|
|
|
|
7FF5DECA5000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7E4000
|
unkown
|
page readonly
|
|
|
|
23F1B130000
|
unkown
|
page readonly
|
|
|
|
23F20890000
|
unkown
|
page read and write
|
|
|
|
7FF4FC3B0000
|
unkown
|
page readonly
|
|
|
|
7FF4FC426000
|
unkown
|
page readonly
|
|
|
|
14008670000
|
unkown
|
page readonly
|
|
|
|
7FF4FC409000
|
unkown
|
page readonly
|
|
|
|
7FF5E5827000
|
unkown
|
page readonly
|
|
|
|
6F0EEFE000
|
unkown
|
page read and write
|
|
|
|
252FD440000
|
unkown
|
page readonly
|
|
|
|
118659A3000
|
unkown
|
page read and write
|
|
|
|
2B281461000
|
unkown
|
page read and write
|
|
|
|
7FF4FBE20000
|
unkown
|
page readonly
|
|
|
|
11863AD0000
|
unkown
|
page write copy
|
|
|
|
7FF532283000
|
unkown
|
page readonly
|
|
|
|
11866000000
|
unkown
|
page read and write
|
|
|
|
30AF000
|
unkown
|
page readonly
|
|
|
|
23F1B200000
|
unkown
|
page read and write
|
|
|
|
1D44786B000
|
unkown
|
page read and write
|
|
|
|
7FF5E0BD5000
|
unkown
|
page readonly
|
|
|
|
BE327FA000
|
unkown
|
page read and write
|
|
|
|
7FF4FC421000
|
unkown
|
page readonly
|
|
|
|
7FF4FC0F2000
|
unkown
|
page readonly
|
|
|
|
23F1C170000
|
unkown
|
page read and write
|
|
|
|
7FF5DF027000
|
unkown
|
page readonly
|
|
|
|
29F91002000
|
unkown
|
page read and write
|
|
|
|
7FF59EE94000
|
unkown
|
page readonly
|
|
|
|
12149A00000
|
unkown
|
page read and write
|
|
|
|
7FF5DEFCF000
|
unkown
|
page readonly
|
|
|
|
7FF5C39F5000
|
unkown
|
page readonly
|
|
|
|
FE2BE75000
|
unkown
|
page read and write
|
|
|
|
7FF5C3962000
|
unkown
|
page readonly
|
|
|
|
2B281280000
|
unkown
|
page readonly
|
|
|
|
7FF5C3651000
|
unkown
|
page readonly
|
|
|
|
2C25A602000
|
unkown
|
page read and write
|
|
|
|
11865B00000
|
unkown
|
page read and write
|
|
|
|
7FF5E0BA2000
|
unkown
|
page readonly
|
|
|
|
7FF5E5AC9000
|
unkown
|
page readonly
|
|
|
|
7FF5C37CE000
|
unkown
|
page readonly
|
|
|
|
7FF5C8C45000
|
unkown
|
page readonly
|
|
|
|
1BA48A2A000
|
unkown
|
page read and write
|
|
|
|
14008113000
|
unkown
|
page read and write
|
|
|
|
252FEBA0000
|
heap private
|
page read and write
|
|
|
|
DB321CB000
|
unkown
|
page read and write
|
|
|
|
14C4F5B000
|
unkown
|
page read and write
|
|
|
|
7FF5A613E000
|
unkown
|
page readonly
|
|
|
|
7FF5DF653000
|
unkown
|
page readonly
|
|
|
|
23F20A1E000
|
unkown
|
page read and write
|
|
|
|
7FF53F32E000
|
unkown
|
page readonly
|
|
|
|
3186000
|
unkown
|
page readonly
|
|
|
|
890000
|
heap default
|
page read and write
|
|
|
|
7FF5323C9000
|
unkown
|
page readonly
|
|
|
|
7FF4FC3F5000
|
unkown
|
page readonly
|
|
|
|
7FF5C89D0000
|
unkown
|
page readonly
|
|
|
|
7FF59EE97000
|
unkown
|
page readonly
|
|
|
|
7FF5E5B07000
|
unkown
|
page readonly
|
|
|
|
1009FC000
|
unkown
|
page read and write
|
|
|
|
23F1B2A5000
|
unkown
|
page read and write
|
|
|
|
7FF5DF5CF000
|
unkown
|
page readonly
|
|
|
|
2B281463000
|
unkown
|
page read and write
|
|
|
|
1186391B000
|
unkown
|
page read and write
|
|
|
|
11865A77000
|
unkown
|
page read and write
|
|
|
|
118638BC000
|
unkown
|
page read and write
|
|
|
|
23F1B7A0000
|
unkown
|
page readonly
|
|
|
|
2B281469000
|
unkown
|
page read and write
|
|
|
|
2D9D2859000
|
unkown
|
page read and write
|
|
|
|
B5510FF000
|
unkown
|
page read and write
|
|
|
|
7FF53F48A000
|
unkown
|
page readonly
|
|
|
|
7FF5C8B95000
|
unkown
|
page readonly
|
|
|
|
1BA49150000
|
unkown
|
page read and write
|
|
|
|
14007F70000
|
unkown
|
page read and write
|
|
|
|
2B281467000
|
unkown
|
page read and write
|
|
|
|
14008802000
|
unkown
|
page read and write
|
|
|
|
7FF5C3958000
|
unkown
|
page readonly
|
|
|
|
7FF532386000
|
unkown
|
page readonly
|
|
|
|
7FF4FC030000
|
unkown
|
page readonly
|
|
|
|
23F208E0000
|
unkown
|
page read and write
|
|
|
|
30A8000
|
unkown
|
page readonly
|
|
|
|
23F20850000
|
unkown
|
page read and write
|
|
|
|
1CA6C629000
|
unkown
|
page read and write
|
|
|
|
12149A40000
|
unkown
|
page read and write
|
|
|
|
7FF4FC351000
|
unkown
|
page readonly
|
|
|
|
100AFE000
|
unkown
|
page read and write
|
|
|
|
1D447E60000
|
unkown
|
page readonly
|
|
|
|
7FF5DEF57000
|
unkown
|
page readonly
|
|
|
|
41D000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C01000
|
unkown
|
page readonly
|
|
|
|
2B281459000
|
unkown
|
page read and write
|
|
|
|
14008A00000
|
unkown
|
page readonly
|
|
|
|
1F1E979000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C34000
|
unkown
|
page readonly
|
|
|
|
1186391F000
|
unkown
|
page read and write
|
|
|
|
23F20A94000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page readonly
|
|
|
|
1319AE55000
|
unkown
|
page read and write
|
|
|
|
1FEF784A000
|
unkown
|
page read and write
|
|
|
|
29F91059000
|
unkown
|
page read and write
|
|
|
|
1319B0D0000
|
unkown
|
page write copy
|
|
|
|
7FF5E5A57000
|
unkown
|
page readonly
|
|
|
|
7FF59EDF2000
|
unkown
|
page readonly
|
|
|
|
2C259E26000
|
unkown
|
page read and write
|
|
|
|
7FF5C382B000
|
unkown
|
page readonly
|
|
|
|
1CA6C4F0000
|
heap default
|
page read and write
|
|
|
|
7FF5C6B36000
|
unkown
|
page readonly
|
|
|
|
7FF4FC3B2000
|
unkown
|
page readonly
|
|
|
|
2B281400000
|
unkown
|
page read and write
|
|
|
|
7FF5B0BD5000
|
unkown
|
page readonly
|
|
|
|
118657E0000
|
unkown
|
page readonly
|
|
|
|
7FF4FC1D7000
|
unkown
|
page readonly
|
|
|
|
7FF53246E000
|
unkown
|
page readonly
|
|
|
|
30AF000
|
unkown
|
page readonly
|
|
|
|
7FF5C6ACA000
|
unkown
|
page readonly
|
|
|
|
31A8000
|
unkown
|
page readonly
|
|
|
|
1D447929000
|
unkown
|
page read and write
|
|
|
|
252FE860000
|
unkown
|
page readonly
|
|
|
|
7FF532407000
|
unkown
|
page readonly
|
|
|
|
7FF53F4E6000
|
unkown
|
page readonly
|
|
|
|
11863B20000
|
unkown
|
page readonly
|
|
|
|
23F1B270000
|
unkown
|
page read and write
|
|
|
|
23F20630000
|
unkown
|
page readonly
|
|
|
|
7FF5A5CFA000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B88000
|
unkown
|
page readonly
|
|
|
|
2D9D283D000
|
unkown
|
page read and write
|
|
|
|
74A000
|
heap default
|
page read and write
|
|
|
|
7FF4FC175000
|
unkown
|
page readonly
|
|
|
|
7FF4FC25E000
|
unkown
|
page readonly
|
|
|
|
11865D02000
|
unkown
|
page read and write
|
|
|
|
1186392E000
|
unkown
|
page read and write
|
|
|
|
23F1B213000
|
unkown
|
page read and write
|
|
|
|
1FEF7E60000
|
unkown
|
page readonly
|
|
|
|
23F1B278000
|
unkown
|
page read and write
|
|
|
|
7FF53F4F5000
|
unkown
|
page readonly
|
|
|
|
118659ED000
|
unkown
|
page read and write
|
|
|
|
970000
|
heap private
|
page read and write
|
|
|
|
29F91028000
|
unkown
|
page read and write
|
|
|
|
11865B42000
|
unkown
|
page read and write
|
|
|
|
7FF5C6880000
|
unkown
|
page readonly
|
|
|
|
14C53FA000
|
unkown
|
page read and write
|
|
|
|
7FF5C8C16000
|
unkown
|
page readonly
|
|
|
|
7FF5DF758000
|
unkown
|
page readonly
|
|
|
|
1D44785D000
|
unkown
|
page read and write
|
|
|
|
23F1B2FC000
|
unkown
|
page read and write
|
|
|
|
3180000
|
unkown
|
page readonly
|
|
|
|
10007C000
|
unkown
|
page read and write
|
|
|
|
2C259E4A000
|
unkown
|
page read and write
|
|
|
|
7FF5DF742000
|
unkown
|
page readonly
|
|
|
|
7FF53F4A5000
|
unkown
|
page readonly
|
|
|
|
23F20ABA000
|
unkown
|
page read and write
|
|
|
|
14C587B000
|
unkown
|
page read and write
|
|
|
|
7FF5DF33A000
|
unkown
|
page readonly
|
|
|
|
14007FB0000
|
unkown
|
page write copy
|
|
|
|
7FF5E0BE9000
|
unkown
|
page readonly
|
|
|
|
7FF5C6B50000
|
unkown
|
page readonly
|
|
|
|
7FF4FC289000
|
unkown
|
page readonly
|
|
|
|
7FF5E0B7C000
|
unkown
|
page readonly
|
|
|
|
1FEF788A000
|
unkown
|
page read and write
|
|
|
|
7FF5DF089000
|
unkown
|
page readonly
|
|
|
|
2C259F13000
|
unkown
|
page read and write
|
|
|
|
990000
|
unkown
|
page readonly
|
|
|
|
31A8000
|
unkown
|
page readonly
|
|
|
|
252FE8B0000
|
unkown
|
page readonly
|
|
|
|
7FF5C865B000
|
unkown
|
page readonly
|
|
|
|
7FF4FC4B9000
|
unkown
|
page readonly
|
|
|
|
7FF5A5B36000
|
unkown
|
page readonly
|
|
|
|
7FF4FC450000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFF6000
|
unkown
|
page readonly
|
|
|
|
23F1B880000
|
unkown
|
page read and write
|
|
|
|
29F91064000
|
unkown
|
page read and write
|
|
|
|
7FF4EF11A000
|
unkown
|
page readonly
|
|
|
|
118638BB000
|
unkown
|
page read and write
|
|
|
|
3100000
|
unkown
|
page readonly
|
|
|
|
7FF5C8C18000
|
unkown
|
page readonly
|
|
|
|
14C5C7C000
|
unkown
|
page read and write
|
|
|
|
1FEF7913000
|
unkown
|
page read and write
|
|
|
|
252FCEEB000
|
heap default
|
page read and write
|
|
|
|
7FF5E57E7000
|
unkown
|
page readonly
|
|
|
|
100BFC000
|
unkown
|
page read and write
|
|
|
|
7FF5A618C000
|
unkown
|
page readonly
|
|
|
|
7FF59EE08000
|
unkown
|
page readonly
|
|
|
|
30DB000
|
unkown
|
page readonly
|
|
|
|
7FF5C6AFF000
|
unkown
|
page readonly
|
|
|
|
7FF5C6A6A000
|
unkown
|
page readonly
|
|
|
|
23F20AB8000
|
unkown
|
page read and write
|
|
|
|
29F91079000
|
unkown
|
page read and write
|
|
There are 1347 hidden memdumps, click here to show them.