Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
plan-515372324.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$plan-515372324.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\66988849-8D57-437E-97F2-4EBE1CC53C33
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\31DD4392.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4A6A9A6B.png
|
PNG image data, 246 x 108, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\55637970.png
|
PNG image data, 934 x 29, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\6B5ED695.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D33DFFE4.png
|
PNG image data, 521 x 246, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D45FCAB1.png
|
PNG image data, 490 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\17B40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\palpy1.dll
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\palpy2.dll
|
|
|
|
C:\Windows\splwow64.exe
|
C:\Windows\splwow64.exe 12288
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
khangland.pro
|
103.28.39.29
|
|
|
|
jaipurbynite.com
|
104.244.121.13
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
104.244.121.13
|
jaipurbynite.com
|
United States
|
|
|
|
103.28.39.29
|
khangland.pro
|
Viet Nam
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
37=
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
47=
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4ADC2
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B4B7
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B5A1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B65D
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B776
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
04=
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 52 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5AB0C0000
|
unkown
|
page readonly
|
|
|
|
1DBC7FE0000
|
heap private
|
page read and write
|
|
|
|
7FF5E3CEF000
|
unkown
|
page readonly
|
|
|
|
1DBC89C5000
|
unkown
|
page read and write
|
|
|
|
7FF5640FE000
|
unkown
|
page readonly
|
|
|
|
7FF5AB57D000
|
unkown
|
page readonly
|
|
|
|
1DBC895A000
|
unkown
|
page read and write
|
|
|
|
7FF58465A000
|
unkown
|
page readonly
|
|
|
|
683BFFA000
|
unkown
|
page read and write
|
|
|
|
31B1000
|
unkown
|
page read and write
|
|
|
|
183FD900000
|
unkown
|
page read and write
|
|
|
|
27A3000
|
unkown
|
page readonly
|
|
|
|
2ABB000
|
unkown
|
page readonly
|
|
|
|
7FF5E3B63000
|
unkown
|
page readonly
|
|
|
|
3180000
|
heap default
|
page read and write
|
|
|
|
174D3813000
|
unkown
|
page read and write
|
|
|
|
2B33000
|
unkown
|
page readonly
|
|
|
|
183FD740000
|
unkown
|
page read and write
|
|
|
|
7FF500A17000
|
unkown
|
page readonly
|
|
|
|
21DD1F02000
|
unkown
|
page read and write
|
|
|
|
1DBC892E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3BBB000
|
unkown
|
page readonly
|
|
|
|
1DBC8E8E000
|
unkown
|
page read and write
|
|
|
|
183FB965000
|
unkown
|
page read and write
|
|
|
|
7FF5E71E1000
|
unkown
|
page readonly
|
|
|
|
1DBC8957000
|
unkown
|
page read and write
|
|
|
|
183FDB83000
|
unkown
|
page read and write
|
|
|
|
1DBC896B000
|
unkown
|
page read and write
|
|
|
|
1DBC8924000
|
unkown
|
page read and write
|
|
|
|
A24D7FA000
|
unkown
|
page read and write
|
|
|
|
1FED4CF0000
|
unkown
|
page readonly
|
|
|
|
2B33000
|
unkown
|
page readonly
|
|
|
|
183FE000000
|
unkown
|
page read and write
|
|
|
|
1FED4F00000
|
unkown
|
page read and write
|
|
|
|
7FF5AB500000
|
unkown
|
page readonly
|
|
|
|
21DD1D90000
|
unkown
|
page readonly
|
|
|
|
7D20000
|
unkown
|
page read and write
|
|
|
|
1DBC82E2000
|
unkown
|
page read and write
|
|
|
|
312E000
|
unkown
|
page read and write
|
|
|
|
7FF54EED9000
|
unkown
|
page readonly
|
|
|
|
183FDA29000
|
unkown
|
page read and write
|
|
|
|
7FF563D4C000
|
unkown
|
page readonly
|
|
|
|
2A93000
|
unkown
|
page readonly
|
|
|
|
683BBFB000
|
unkown
|
page read and write
|
|
|
|
7FF54EE4A000
|
unkown
|
page readonly
|
|
|
|
20DBE7FB000
|
heap default
|
page read and write
|
|
|
|
2F78000
|
unkown
|
page read and write
|
|
|
|
683B7FA000
|
unkown
|
page read and write
|
|
|
|
7FF563F8B000
|
unkown
|
page readonly
|
|
|
|
1DBC89A0000
|
unkown
|
page read and write
|
|
|
|
7FF54EE5E000
|
unkown
|
page readonly
|
|
|
|
2F7C000
|
unkown
|
page read and write
|
|
|
|
2F92000
|
unkown
|
page read and write
|
|
|
|
7FF54EE65000
|
unkown
|
page readonly
|
|
|
|
E75FBFF000
|
unkown
|
page read and write
|
|
|
|
7FF53C802000
|
unkown
|
page readonly
|
|
|
|
294E000
|
unkown
|
page readonly
|
|
|
|
7FF564053000
|
unkown
|
page readonly
|
|
|
|
7FF5E71E2000
|
unkown
|
page readonly
|
|
|
|
7FF54EB2A000
|
unkown
|
page readonly
|
|
|
|
247E6340000
|
unkown
|
page readonly
|
|
|
|
7FF5E3DB2000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D39000
|
unkown
|
page readonly
|
|
|
|
1DBC8947000
|
unkown
|
page read and write
|
|
|
|
1DBC8967000
|
unkown
|
page read and write
|
|
|
|
183FB8D4000
|
unkown
|
page read and write
|
|
|
|
2199BC3F000
|
unkown
|
page read and write
|
|
|
|
2B22000
|
unkown
|
page readonly
|
|
|
|
1DBC8950000
|
unkown
|
page read and write
|
|
|
|
2B01000
|
unkown
|
page readonly
|
|
|
|
1DBC8A00000
|
unkown
|
page readonly
|
|
|
|
1DBC891D000
|
unkown
|
page read and write
|
|
|
|
7FF54EECE000
|
unkown
|
page readonly
|
|
|
|
1DBC89C4000
|
unkown
|
page read and write
|
|
|
|
1DBC8961000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC1C000
|
unkown
|
page readonly
|
|
|
|
4C05C77000
|
unkown
|
page read and write
|
|
|
|
183FB8DC000
|
unkown
|
page read and write
|
|
|
|
1FED4E29000
|
unkown
|
page read and write
|
|
|
|
2E60000
|
unkown
|
page read and write
|
|
|
|
7FF53CB33000
|
unkown
|
page readonly
|
|
|
|
1DBC8952000
|
unkown
|
page read and write
|
|
|
|
1DBC8931000
|
unkown
|
page read and write
|
|
|
|
47F0000
|
unkown
|
page readonly
|
|
|
|
1DBC8965000
|
unkown
|
page read and write
|
|
|
|
683BAFB000
|
unkown
|
page read and write
|
|
|
|
7FF5E3C0D000
|
unkown
|
page readonly
|
|
|
|
247E55C0000
|
unkown
|
page readonly
|
|
|
|
247E55D0000
|
unkown
|
page read and write
|
|
|
|
7FF5E71DA000
|
unkown
|
page readonly
|
|
|
|
7FF563F93000
|
unkown
|
page readonly
|
|
|
|
7FF500DBD000
|
unkown
|
page readonly
|
|
|
|
2F81000
|
unkown
|
page read and write
|
|
|
|
1FED5490000
|
unkown
|
page readonly
|
|
|
|
183FE110000
|
unkown
|
page read and write
|
|
|
|
1DBC8930000
|
unkown
|
page read and write
|
|
|
|
7FF5640E4000
|
unkown
|
page readonly
|
|
|
|
7FF563EE9000
|
unkown
|
page readonly
|
|
|
|
4C05EFF000
|
unkown
|
page read and write
|
|
|
|
2199BA80000
|
heap private
|
page read and write
|
|
|
|
174D386F000
|
unkown
|
page read and write
|
|
|
|
2B14000
|
unkown
|
page readonly
|
|
|
|
2A9F000
|
unkown
|
page readonly
|
|
|
|
7FF54EA39000
|
unkown
|
page readonly
|
|
|
|
683C17B000
|
unkown
|
page read and write
|
|
|
|
7FF53C850000
|
unkown
|
page readonly
|
|
|
|
20DBE830000
|
unkown
|
page read and write
|
|
|
|
7FF53C7F2000
|
unkown
|
page readonly
|
|
|
|
7FF500B06000
|
unkown
|
page readonly
|
|
|
|
2A79000
|
unkown
|
page readonly
|
|
|
|
183FB7E0000
|
unkown
|
page read and write
|
|
|
|
2F73000
|
unkown
|
page read and write
|
|
|
|
7FF54EEBE000
|
unkown
|
page readonly
|
|
|
|
1DBC8F3C000
|
unkown
|
page read and write
|
|
|
|
7FF5638F1000
|
unkown
|
page readonly
|
|
|
|
1DBC896F000
|
unkown
|
page read and write
|
|
|
|
2199BAF0000
|
unkown
|
page readonly
|
|
|
|
183FE110000
|
unkown
|
page read and write
|
|
|
|
1DBC893B000
|
unkown
|
page read and write
|
|
|
|
1DBC8967000
|
unkown
|
page read and write
|
|
|
|
683B9FA000
|
unkown
|
page read and write
|
|
|
|
7FF563EB1000
|
unkown
|
page readonly
|
|
|
|
4C061F8000
|
unkown
|
page read and write
|
|
|
|
7FF500CE2000
|
unkown
|
page readonly
|
|
|
|
1DBC87A0000
|
unkown
|
page read and write
|
|
|
|
1DBC89C4000
|
unkown
|
page read and write
|
|
|
|
7FF53CC5F000
|
unkown
|
page readonly
|
|
|
|
7FF5E3B11000
|
unkown
|
page readonly
|
|
|
|
A24D87A000
|
unkown
|
page read and write
|
|
|
|
247E55B0000
|
unkown
|
page readonly
|
|
|
|
7FF54EE8C000
|
unkown
|
page readonly
|
|
|
|
7FF54E9C2000
|
unkown
|
page readonly
|
|
|
|
7FF53CC7C000
|
unkown
|
page readonly
|
|
|
|
1FED4E56000
|
unkown
|
page read and write
|
|
|
|
1DBC89B4000
|
unkown
|
page read and write
|
|
|
|
7FF5E3C13000
|
unkown
|
page readonly
|
|
|
|
21DD1D40000
|
unkown
|
page write copy
|
|
|
|
E75FAF9000
|
unkown
|
page read and write
|
|
|
|
7FF5AB46C000
|
unkown
|
page readonly
|
|
|
|
7FF5E70F5000
|
unkown
|
page readonly
|
|
|
|
1DBC8948000
|
unkown
|
page read and write
|
|
|
|
1DBC895F000
|
unkown
|
page read and write
|
|
|
|
1DBC8F9B000
|
unkown
|
page read and write
|
|
|
|
7FF5640F8000
|
unkown
|
page readonly
|
|
|
|
183FDA00000
|
unkown
|
page read and write
|
|
|
|
2A4D000
|
unkown
|
page readonly
|
|
|
|
2B05000
|
unkown
|
page readonly
|
|
|
|
7FF54EE60000
|
unkown
|
page readonly
|
|
|
|
31A8000
|
unkown
|
page read and write
|
|
|
|
7FF58456A000
|
unkown
|
page readonly
|
|
|
|
20DBEAE5000
|
heap private
|
page read and write
|
|
|
|
7FF53CAD1000
|
unkown
|
page readonly
|
|
|
|
7FF5AB4EA000
|
unkown
|
page readonly
|
|
|
|
A24D9FE000
|
unkown
|
page read and write
|
|
|
|
1FED5000000
|
unkown
|
page readonly
|
|
|
|
1FED4E02000
|
unkown
|
page read and write
|
|
|
|
7AB0000
|
unkown
|
page read and write
|
|
|
|
7FF53CCDA000
|
unkown
|
page readonly
|
|
|
|
AB8000
|
unkown
|
page read and write
|
|
|
|
7FF500DAE000
|
unkown
|
page readonly
|
|
|
|
7FF5009FC000
|
unkown
|
page readonly
|
|
|
|
174D3802000
|
unkown
|
page read and write
|
|
|
|
183FE210000
|
unkown
|
page read and write
|
|
|
|
1FED4F02000
|
unkown
|
page read and write
|
|
|
|
7FF500D40000
|
unkown
|
page readonly
|
|
|
|
1DBC8255000
|
unkown
|
page read and write
|
|
|
|
CF0000
|
unkown
|
page readonly
|
|
|
|
1DBC8F02000
|
unkown
|
page read and write
|
|
|
|
4DB5379000
|
unkown
|
page read and write
|
|
|
|
183FDC00000
|
unkown
|
page read and write
|
|
|
|
1DBC8936000
|
unkown
|
page read and write
|
|
|
|
2322575000
|
unkown
|
page read and write
|
|
|
|
1DBC8970000
|
unkown
|
page read and write
|
|
|
|
1DBC8938000
|
unkown
|
page read and write
|
|
|
|
21DD1E02000
|
unkown
|
page read and write
|
|
|
|
1DBC8944000
|
unkown
|
page read and write
|
|
|
|
4FD1F7B000
|
unkown
|
page read and write
|
|
|
|
7FF584570000
|
unkown
|
page readonly
|
|
|
|
1DBC8971000
|
unkown
|
page read and write
|
|
|
|
7FF53CD09000
|
unkown
|
page readonly
|
|
|
|
7FF5E70FB000
|
unkown
|
page readonly
|
|
|
|
1DBC89B4000
|
unkown
|
page read and write
|
|
|
|
2E4F000
|
unkown
|
page read and write
|
|
|
|
1DBC8978000
|
unkown
|
page read and write
|
|
|
|
4C05E79000
|
unkown
|
page read and write
|
|
|
|
7FF5845A7000
|
unkown
|
page readonly
|
|
|
|
183FB8B1000
|
unkown
|
page read and write
|
|
|
|
183FDB83000
|
unkown
|
page read and write
|
|
|
|
7FF53CC30000
|
unkown
|
page readonly
|
|
|
|
1DBC89B5000
|
unkown
|
page read and write
|
|
|
|
7FF5845DE000
|
unkown
|
page readonly
|
|
|
|
1DBC89B5000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CBA000
|
unkown
|
page readonly
|
|
|
|
7FF53CD81000
|
unkown
|
page readonly
|
|
|
|
7FF5E3555000
|
unkown
|
page readonly
|
|
|
|
7FF54EE34000
|
unkown
|
page readonly
|
|
|
|
7FF5AB537000
|
unkown
|
page readonly
|
|
|
|
247E5688000
|
unkown
|
page read and write
|
|
|
|
21DD2000000
|
unkown
|
page readonly
|
|
|
|
CC0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6A47000
|
unkown
|
page readonly
|
|
|
|
4C0587D000
|
unkown
|
page read and write
|
|
|
|
1DBC8938000
|
unkown
|
page read and write
|
|
|
|
183FDB83000
|
unkown
|
page read and write
|
|
|
|
1DBC8270000
|
unkown
|
page read and write
|
|
|
|
183FD700000
|
unkown
|
page readonly
|
|
|
|
1DBC8915000
|
unkown
|
page read and write
|
|
|
|
7FF5AB554000
|
unkown
|
page readonly
|
|
|
|
2B28000
|
unkown
|
page readonly
|
|
|
|
1DBC8400000
|
unkown
|
page readonly
|
|
|
|
21DD1D30000
|
heap default
|
page read and write
|
|
|
|
B4A000
|
unkown
|
page read and write
|
|
|
|
1DBC891D000
|
unkown
|
page read and write
|
|
|
|
1FED4E67000
|
unkown
|
page read and write
|
|
|
|
174D3824000
|
unkown
|
page read and write
|
|
|
|
1DBC8957000
|
unkown
|
page read and write
|
|
|
|
7FF500D45000
|
unkown
|
page readonly
|
|
|
|
1DBC8931000
|
unkown
|
page read and write
|
|
|
|
20DBE801000
|
unkown
|
page read and write
|
|
|
|
7FF54EE5A000
|
unkown
|
page readonly
|
|
|
|
183FE010000
|
unkown
|
page read and write
|
|
|
|
183FDE00000
|
unkown
|
page readonly
|
|
|
|
4C05D7F000
|
unkown
|
page read and write
|
|
|
|
7FF500D57000
|
unkown
|
page readonly
|
|
|
|
183FD370000
|
unkown
|
page readonly
|
|
|
|
492E000
|
unkown
|
page read and write
|
|
|
|
20DBE816000
|
unkown
|
page read and write
|
|
|
|
1DBC87C0000
|
unkown
|
page readonly
|
|
|
|
7FF53CC64000
|
unkown
|
page readonly
|
|
|
|
21DD1F00000
|
unkown
|
page read and write
|
|
|
|
7FF53CC6F000
|
unkown
|
page readonly
|
|
|
|
7FF5845C4000
|
unkown
|
page readonly
|
|
|
|
183FD802000
|
unkown
|
page read and write
|
|
|
|
183FB740000
|
heap default
|
page read and write
|
|
|
|
1DBC895D000
|
unkown
|
page read and write
|
|
|
|
1DBC82E0000
|
unkown
|
page read and write
|
|
|
|
7FF563E4B000
|
unkown
|
page readonly
|
|
|
|
683BD7B000
|
unkown
|
page read and write
|
|
|
|
7FF5AB3FB000
|
unkown
|
page readonly
|
|
|
|
683BB7B000
|
unkown
|
page read and write
|
|
|
|
4DB547F000
|
unkown
|
page read and write
|
|
|
|
4C060FD000
|
unkown
|
page read and write
|
|
|
|
7FF5005A1000
|
unkown
|
page readonly
|
|
|
|
CD0000
|
heap default
|
page read and write
|
|
|
|
7FF54ECA1000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CAA000
|
unkown
|
page readonly
|
|
|
|
2199BBC0000
|
unkown
|
page readonly
|
|
|
|
183FB813000
|
unkown
|
page read and write
|
|
|
|
7FF500E24000
|
unkown
|
page readonly
|
|
|
|
183FE310000
|
unkown
|
page read and write
|
|
|
|
7FF5AB505000
|
unkown
|
page readonly
|
|
|
|
183FD9BF000
|
unkown
|
page read and write
|
|
|
|
7FF5640DA000
|
unkown
|
page readonly
|
|
|
|
174D3913000
|
unkown
|
page read and write
|
|
|
|
7FF53CC32000
|
unkown
|
page readonly
|
|
|
|
4FD217F000
|
unkown
|
page read and write
|
|
|
|
1DBC8960000
|
unkown
|
page read and write
|
|
|
|
183FD999000
|
unkown
|
page read and write
|
|
|
|
4DB527E000
|
unkown
|
page read and write
|
|
|
|
7FF5E71D4000
|
unkown
|
page readonly
|
|
|
|
21DD3970000
|
unkown
|
page readonly
|
|
|
|
1DBC8DC0000
|
unkown
|
page readonly
|
|
|
|
1DBC895F000
|
unkown
|
page read and write
|
|
|
|
E75F76A000
|
unkown
|
page read and write
|
|
|
|
1DBC89A2000
|
unkown
|
page read and write
|
|
|
|
2A8F000
|
unkown
|
page readonly
|
|
|
|
1DBC8931000
|
unkown
|
page read and write
|
|
|
|
7FF53C969000
|
unkown
|
page readonly
|
|
|
|
1DBC892D000
|
unkown
|
page read and write
|
|
|
|
7FF583DF7000
|
unkown
|
page readonly
|
|
|
|
183FE310000
|
unkown
|
page read and write
|
|
|
|
7FF5AB579000
|
unkown
|
page readonly
|
|
|
|
316E000
|
unkown
|
page read and write
|
|
|
|
247E564A000
|
unkown
|
page read and write
|
|
|
|
20DBE730000
|
unkown
|
page read and write
|
|
|
|
2DB7000
|
heap private
|
page read and write
|
|
|
|
1DBC8302000
|
unkown
|
page read and write
|
|
|
|
683C0FB000
|
unkown
|
page read and write
|
|
|
|
7BA0000
|
unkown
|
page read and write
|
|
|
|
7FF500CE0000
|
unkown
|
page readonly
|
|
|
|
1DBC8F9B000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CAC000
|
unkown
|
page readonly
|
|
|
|
E75FA7E000
|
unkown
|
page read and write
|
|
|
|
7FF58446B000
|
unkown
|
page readonly
|
|
|
|
174D388E000
|
unkown
|
page read and write
|
|
|
|
1DBC8D40000
|
unkown
|
page write copy
|
|
|
|
183FE410000
|
unkown
|
page read and write
|
|
|
|
1DBC898A000
|
unkown
|
page read and write
|
|
|
|
1DBC892A000
|
unkown
|
page read and write
|
|
|
|
7FF564090000
|
unkown
|
page readonly
|
|
|
|
1DBC8924000
|
unkown
|
page read and write
|
|
|
|
1FED4F13000
|
unkown
|
page read and write
|
|
|
|
2A79000
|
unkown
|
page readonly
|
|
|
|
1DBC8802000
|
unkown
|
page read and write
|
|
|
|
20DBE81E000
|
unkown
|
page read and write
|
|
|
|
1DBC8957000
|
unkown
|
page read and write
|
|
|
|
7FF54EE00000
|
unkown
|
page readonly
|
|
|
|
7FF5AB568000
|
unkown
|
page readonly
|
|
|
|
7FF54EE77000
|
unkown
|
page readonly
|
|
|
|
7FF53CC5B000
|
unkown
|
page readonly
|
|
|
|
1DBC89A4000
|
unkown
|
page read and write
|
|
|
|
7FF5AB50B000
|
unkown
|
page readonly
|
|
|
|
183FD9D3000
|
unkown
|
page read and write
|
|
|
|
183FBA00000
|
unkown
|
page readonly
|
|
|
|
20DBE82F000
|
unkown
|
page read and write
|
|
|
|
1DBC89A4000
|
unkown
|
page read and write
|
|
|
|
7FF54E762000
|
unkown
|
page readonly
|
|
|
|
BF0000
|
unkown
|
page readonly
|
|
|
|
1DBC82FB000
|
unkown
|
page read and write
|
|
|
|
183FB922000
|
unkown
|
page read and write
|
|
|
|
1DBC895F000
|
unkown
|
page read and write
|
|
|
|
183FE210000
|
unkown
|
page read and write
|
|
|
|
247E5629000
|
unkown
|
page read and write
|
|
|
|
183FD9E0000
|
unkown
|
page read and write
|
|
|
|
7A9E000
|
unkown
|
page read and write
|
|
|
|
683BA7B000
|
unkown
|
page read and write
|
|
|
|
1DBC8970000
|
unkown
|
page read and write
|
|
|
|
7FF53CCEF000
|
unkown
|
page readonly
|
|
|
|
1DBC891D000
|
unkown
|
page read and write
|
|
|
|
1DBC8DA0000
|
unkown
|
page read and write
|
|
|
|
174D3670000
|
unkown
|
page readonly
|
|
|
|
8BEE975000
|
unkown
|
page read and write
|
|
|
|
4DB53F9000
|
unkown
|
page read and write
|
|
|
|
7FF54ED63000
|
unkown
|
page readonly
|
|
|
|
7FF53C5E3000
|
unkown
|
page readonly
|
|
|
|
3280000
|
unkown
|
page readonly
|
|
|
|
7FF53CAE1000
|
unkown
|
page readonly
|
|
|
|
7FF54EB37000
|
unkown
|
page readonly
|
|
|
|
1DBC895D000
|
unkown
|
page read and write
|
|
|
|
2199BC13000
|
unkown
|
page read and write
|
|
|
|
2A6C000
|
unkown
|
page readonly
|
|
|
|
7FF53CD82000
|
unkown
|
page readonly
|
|
|
|
7FF5AB3A3000
|
unkown
|
page readonly
|
|
|
|
2B22000
|
unkown
|
page readonly
|
|
|
|
7FF5844BD000
|
unkown
|
page readonly
|
|
|
|
183FB944000
|
unkown
|
page read and write
|
|
|
|
20DBEAE0000
|
heap private
|
page read and write
|
|
|
|
183FB934000
|
unkown
|
page read and write
|
|
|
|
683B67B000
|
unkown
|
page read and write
|
|
|
|
7FF500E31000
|
unkown
|
page readonly
|
|
|
|
1DBC8924000
|
unkown
|
page read and write
|
|
|
|
1DBC89B5000
|
unkown
|
page read and write
|
|
|
|
1DBC824A000
|
unkown
|
page read and write
|
|
|
|
4DB52FF000
|
unkown
|
page read and write
|
|
|
|
1DBC8DA0000
|
unkown
|
page read and write
|
|
|
|
7FF53CCE4000
|
unkown
|
page readonly
|
|
|
|
174D3740000
|
unkown
|
page readonly
|
|
|
|
7FF564174000
|
unkown
|
page readonly
|
|
|
|
7FF564181000
|
unkown
|
page readonly
|
|
|
|
9DA000
|
unkown
|
page read and write
|
|
|
|
183FD730000
|
unkown
|
page read and write
|
|
|
|
7FF5845CF000
|
unkown
|
page readonly
|
|
|
|
7FF5E3A37000
|
unkown
|
page readonly
|
|
|
|
2960000
|
unkown
|
page readonly
|
|
|
|
7FF500B65000
|
unkown
|
page readonly
|
|
|
|
7FF5AB0D5000
|
unkown
|
page readonly
|
|
|
|
7FF5AB5F1000
|
unkown
|
page readonly
|
|
|
|
D57000
|
heap private
|
page read and write
|
|
|
|
7FF54EF44000
|
unkown
|
page readonly
|
|
|
|
2AB2000
|
unkown
|
page readonly
|
|
|
|
7FF54EEAA000
|
unkown
|
page readonly
|
|
|
|
7FF54EE4C000
|
unkown
|
page readonly
|
|
|
|
1FED4E00000
|
unkown
|
page read and write
|
|
|
|
7FF5E7169000
|
unkown
|
page readonly
|
|
|
|
7FF5E3DA4000
|
unkown
|
page readonly
|
|
|
|
1DBC895A000
|
unkown
|
page read and write
|
|
|
|
20DBE81E000
|
unkown
|
page read and write
|
|
|
|
7FF5AB52C000
|
unkown
|
page readonly
|
|
|
|
183FD913000
|
unkown
|
page read and write
|
|
|
|
2AA1000
|
unkown
|
page readonly
|
|
|
|
183FB8DE000
|
unkown
|
page read and write
|
|
|
|
1DBC82B1000
|
unkown
|
page read and write
|
|
|
|
7FF53CBE3000
|
unkown
|
page readonly
|
|
|
|
7FF53CB8B000
|
unkown
|
page readonly
|
|
|
|
7FF500A0A000
|
unkown
|
page readonly
|
|
|
|
4934000
|
heap private
|
page read and write
|
|
|
|
7FF5E3CEC000
|
unkown
|
page readonly
|
|
|
|
21DD3870000
|
unkown
|
page read and write
|
|
|
|
1DBC8938000
|
unkown
|
page read and write
|
|
|
|
7FF5AAD95000
|
unkown
|
page readonly
|
|
|
|
183FB829000
|
unkown
|
page read and write
|
|
|
|
7FF563F98000
|
unkown
|
page readonly
|
|
|
|
183FD966000
|
unkown
|
page read and write
|
|
|
|
D5A000
|
heap private
|
page read and write
|
|
|
|
7FF53CCBC000
|
unkown
|
page readonly
|
|
|
|
31C5000
|
unkown
|
page read and write
|
|
|
|
1DBC891D000
|
unkown
|
page read and write
|
|
|
|
291E000
|
unkown
|
page readonly
|
|
|
|
1DBC8924000
|
unkown
|
page read and write
|
|
|
|
247E564C000
|
unkown
|
page read and write
|
|
|
|
1FED4DD0000
|
unkown
|
page readonly
|
|
|
|
232214C000
|
unkown
|
page read and write
|
|
|
|
2AB2000
|
unkown
|
page readonly
|
|
|
|
1DBC824B000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D3D000
|
unkown
|
page readonly
|
|
|
|
174D3908000
|
unkown
|
page read and write
|
|
|
|
2DE4000
|
heap private
|
page read and write
|
|
|
|
7FF500D78000
|
unkown
|
page readonly
|
|
|
|
2A9F000
|
unkown
|
page readonly
|
|
|
|
7C3E000
|
unkown
|
page read and write
|
|
|
|
683BC7B000
|
unkown
|
page read and write
|
|
|
|
7FF58455C000
|
unkown
|
page readonly
|
|
|
|
232267B000
|
unkown
|
page read and write
|
|
|
|
1DBC8978000
|
unkown
|
page read and write
|
|
|
|
2199BC00000
|
unkown
|
page read and write
|
|
|
|
183FDD00000
|
unkown
|
page read and write
|
|
|
|
A24D77F000
|
unkown
|
page read and write
|
|
|
|
7FF584130000
|
unkown
|
page readonly
|
|
|
|
8BEED7F000
|
unkown
|
page read and write
|
|
|
|
7FF5AB576000
|
unkown
|
page readonly
|
|
|
|
183FDA8B000
|
unkown
|
page read and write
|
|
|
|
7FF53CD7A000
|
unkown
|
page readonly
|
|
|
|
174D3900000
|
unkown
|
page read and write
|
|
|
|
1DBC89C3000
|
unkown
|
page read and write
|
|
|
|
1FED4E4F000
|
unkown
|
page read and write
|
|
|
|
7FF54EF52000
|
unkown
|
page readonly
|
|
|
|
1DBC8E02000
|
unkown
|
page read and write
|
|
|
|
183FDC42000
|
unkown
|
page read and write
|
|
|
|
2B05000
|
unkown
|
page readonly
|
|
|
|
7FF5AB4EC000
|
unkown
|
page readonly
|
|
|
|
183FB925000
|
unkown
|
page read and write
|
|
|
|
683C2FC000
|
unkown
|
page read and write
|
|
|
|
2A3A000
|
unkown
|
page readonly
|
|
|
|
1DBC8969000
|
unkown
|
page read and write
|
|
|
|
4FD227D000
|
unkown
|
page read and write
|
|
|
|
7FF5845ED000
|
unkown
|
page readonly
|
|
|
|
1DBC895F000
|
unkown
|
page read and write
|
|
|
|
7FF500DB6000
|
unkown
|
page readonly
|
|
|
|
183FE010000
|
unkown
|
page read and write
|
|
|
|
2AA1000
|
unkown
|
page readonly
|
|
|
|
183FD98D000
|
unkown
|
page read and write
|
|
|
|
1DBC895A000
|
unkown
|
page read and write
|
|
|
|
1DBC8960000
|
unkown
|
page read and write
|
|
|
|
7FF54EF4A000
|
unkown
|
page readonly
|
|
|
|
23221CE000
|
unkown
|
page read and write
|
|
|
|
1DBC8F02000
|
unkown
|
page read and write
|
|
|
|
7FF53CCD4000
|
unkown
|
page readonly
|
|
|
|
7FF5640BC000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D14000
|
unkown
|
page readonly
|
|
|
|
1DBC8E02000
|
unkown
|
page read and write
|
|
|
|
1DBC89B4000
|
unkown
|
page read and write
|
|
|
|
C80000
|
unkown
|
page readonly
|
|
|
|
7FF5842E7000
|
unkown
|
page readonly
|
|
|
|
7FF54E6C1000
|
unkown
|
page readonly
|
|
|
|
1DBC8937000
|
unkown
|
page read and write
|
|
|
|
7FF54EE02000
|
unkown
|
page readonly
|
|
|
|
7FF53CA4B000
|
unkown
|
page readonly
|
|
|
|
7FF5E7158000
|
unkown
|
page readonly
|
|
|
|
A24D8FF000
|
unkown
|
page read and write
|
|
|
|
1DBC8936000
|
unkown
|
page read and write
|
|
|
|
683B8FE000
|
unkown
|
page read and write
|
|
|
|
7FF500D03000
|
unkown
|
page readonly
|
|
|
|
1FED4DC0000
|
unkown
|
page readonly
|
|
|
|
183FE110000
|
unkown
|
page read and write
|
|
|
|
683BF7B000
|
unkown
|
page read and write
|
|
|
|
247E564F000
|
unkown
|
page read and write
|
|
|
|
7FF5E3886000
|
unkown
|
page readonly
|
|
|
|
2A55000
|
unkown
|
page readonly
|
|
|
|
1DBC8967000
|
unkown
|
page read and write
|
|
|
|
7FF53CC8E000
|
unkown
|
page readonly
|
|
|
|
1DBC893B000
|
unkown
|
page read and write
|
|
|
|
2A63000
|
unkown
|
page readonly
|
|
|
|
183FD710000
|
unkown
|
page read and write
|
|
|
|
1DBC8947000
|
unkown
|
page read and write
|
|
|
|
1DBC895D000
|
unkown
|
page read and write
|
|
|
|
D50000
|
heap private
|
page read and write
|
|
|
|
7FF5E3D04000
|
unkown
|
page readonly
|
|
|
|
183FB882000
|
unkown
|
page read and write
|
|
|
|
7FF500D6C000
|
unkown
|
page readonly
|
|
|
|
247E5E02000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CF7000
|
unkown
|
page readonly
|
|
|
|
7FF584661000
|
unkown
|
page readonly
|
|
|
|
247E5670000
|
unkown
|
page read and write
|
|
|
|
2960000
|
unkown
|
page readonly
|
|
|
|
7FF53CBFC000
|
unkown
|
page readonly
|
|
|
|
1DBC8F02000
|
unkown
|
page read and write
|
|
|
|
B8B000
|
unkown
|
page read and write
|
|
|
|
7FF53CCBF000
|
unkown
|
page readonly
|
|
|
|
183FD720000
|
unkown
|
page read and write
|
|
|
|
7FF54EB2F000
|
unkown
|
page readonly
|
|
|
|
683C3FC000
|
unkown
|
page read and write
|
|
|
|
1DBC893B000
|
unkown
|
page read and write
|
|
|
|
1DBC8934000
|
unkown
|
page read and write
|
|
|
|
7FF5E3DAA000
|
unkown
|
page readonly
|
|
|
|
7FF500D3A000
|
unkown
|
page readonly
|
|
|
|
174D383C000
|
unkown
|
page read and write
|
|
|
|
7FF500D4B000
|
unkown
|
page readonly
|
|
|
|
2A85000
|
unkown
|
page readonly
|
|
|
|
1FED4F08000
|
unkown
|
page read and write
|
|
|
|
232297F000
|
unkown
|
page read and write
|
|
|
|
7FF5AB56E000
|
unkown
|
page readonly
|
|
|
|
7FF54ED68000
|
unkown
|
page readonly
|
|
|
|
7FF5AAC16000
|
unkown
|
page readonly
|
|
|
|
7FF5844D4000
|
unkown
|
page readonly
|
|
|
|
1DBC8963000
|
unkown
|
page read and write
|
|
|
|
20DBE8F0000
|
unkown
|
page readonly
|
|
|
|
1DBC89B5000
|
unkown
|
page read and write
|
|
|
|
2A9A000
|
unkown
|
page readonly
|
|
|
|
1DBC891D000
|
unkown
|
page read and write
|
|
|
|
7FF5AB3E1000
|
unkown
|
page readonly
|
|
|
|
1FED4DE0000
|
unkown
|
page read and write
|
|
|
|
2199BAE0000
|
heap default
|
page read and write
|
|
|
|
183FB884000
|
unkown
|
page read and write
|
|
|
|
1DBC895F000
|
unkown
|
page read and write
|
|
|
|
183FE410000
|
unkown
|
page read and write
|
|
|
|
174D3849000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5F2000
|
unkown
|
page readonly
|
|
|
|
183FDAAC000
|
unkown
|
page read and write
|
|
|
|
2B28000
|
unkown
|
page readonly
|
|
|
|
7FF584654000
|
unkown
|
page readonly
|
|
|
|
2A70000
|
unkown
|
page readonly
|
|
|
|
1DBC89CF000
|
unkown
|
page read and write
|
|
|
|
1DBC8957000
|
unkown
|
page read and write
|
|
|
|
183FB8E4000
|
unkown
|
page read and write
|
|
|
|
2F92000
|
unkown
|
page read and write
|
|
|
|
7FF54EEA4000
|
unkown
|
page readonly
|
|
|
|
183FE210000
|
unkown
|
page read and write
|
|
|
|
7FF584587000
|
unkown
|
page readonly
|
|
|
|
1DBC8938000
|
unkown
|
page read and write
|
|
|
|
183FE410000
|
unkown
|
page read and write
|
|
|
|
183FD944000
|
unkown
|
page read and write
|
|
|
|
1DBC891D000
|
unkown
|
page read and write
|
|
|
|
2D90000
|
unkown
|
page readonly
|
|
|
|
1DBC89B4000
|
unkown
|
page read and write
|
|
|
|
4DB4FBB000
|
unkown
|
page read and write
|
|
|
|
2322777000
|
unkown
|
page read and write
|
|
|
|
2199BC6A000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D36000
|
unkown
|
page readonly
|
|
|
|
7FF54ED41000
|
unkown
|
page readonly
|
|
|
|
7FF5844C3000
|
unkown
|
page readonly
|
|
|
|
174D3660000
|
heap default
|
page read and write
|
|
|
|
1DBC8932000
|
unkown
|
page read and write
|
|
|
|
2A93000
|
unkown
|
page readonly
|
|
|
|
7FF53C592000
|
unkown
|
page readonly
|
|
|
|
183FE410000
|
unkown
|
page read and write
|
|
|
|
D30000
|
unkown
|
page readonly
|
|
|
|
1DBC89B4000
|
unkown
|
page read and write
|
|
|
|
7FF53C8A5000
|
unkown
|
page readonly
|
|
|
|
7FF584145000
|
unkown
|
page readonly
|
|
|
|
7FF58455A000
|
unkown
|
page readonly
|
|
|
|
2199D5F0000
|
unkown
|
page read and write
|
|
|
|
1DBC89A4000
|
unkown
|
page read and write
|
|
|
|
683C4FF000
|
unkown
|
page read and write
|
|
|
|
7FF500D3E000
|
unkown
|
page readonly
|
|
|
|
20DBE810000
|
heap default
|
page read and write
|
|
|
|
1DBC8948000
|
unkown
|
page read and write
|
|
|
|
7FF53CBF4000
|
unkown
|
page readonly
|
|
|
|
183FDACD000
|
unkown
|
page read and write
|
|
|
|
2A5C000
|
unkown
|
page readonly
|
|
|
|
1DBC823C000
|
unkown
|
page read and write
|
|
|
|
1DBC8E02000
|
unkown
|
page read and write
|
|
|
|
247E567C000
|
unkown
|
page read and write
|
|
|
|
7FF53CCC7000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CD7000
|
unkown
|
page readonly
|
|
|
|
683BE7B000
|
unkown
|
page read and write
|
|
|
|
2F6F000
|
unkown
|
page read and write
|
|
|
|
7FF5E3BA1000
|
unkown
|
page readonly
|
|
|
|
183FD9F8000
|
unkown
|
page read and write
|
|
|
|
7FF500A0F000
|
unkown
|
page readonly
|
|
|
|
2A55000
|
unkown
|
page readonly
|
|
|
|
3050000
|
unkown
|
page readonly
|
|
|
|
1DBC89A0000
|
unkown
|
page read and write
|
|
|
|
2A8F000
|
unkown
|
page readonly
|
|
|
|
1DBC891D000
|
unkown
|
page read and write
|
|
|
|
1DBC8928000
|
unkown
|
page read and write
|
|
|
|
1DBC8930000
|
unkown
|
page read and write
|
|
|
|
1DBC8960000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5EA000
|
unkown
|
page readonly
|
|
|
|
7FF54EE6B000
|
unkown
|
page readonly
|
|
|
|
2A63000
|
unkown
|
page readonly
|
|
|
|
7FF5E3BBE000
|
unkown
|
page readonly
|
|
|
|
247E5645000
|
unkown
|
page read and write
|
|
|
|
183FB854000
|
unkown
|
page read and write
|
|
|
|
683B77E000
|
unkown
|
page read and write
|
|
|
|
7FF54EDAD000
|
unkown
|
page readonly
|
|
|
|
7FF54EC1B000
|
unkown
|
page readonly
|
|
|
|
7FF500B99000
|
unkown
|
page readonly
|
|
|
|
232247E000
|
unkown
|
page read and write
|
|
|
|
1DBC89A4000
|
unkown
|
page read and write
|
|
|
|
7FF53CB71000
|
unkown
|
page readonly
|
|
|
|
4C055EB000
|
unkown
|
page read and write
|
|
|
|
7FF584136000
|
unkown
|
page readonly
|
|
|
|
7FF5AB5E4000
|
unkown
|
page readonly
|
|
|
|
7FF53CC9B000
|
unkown
|
page readonly
|
|
|
|
1DBC8960000
|
unkown
|
page read and write
|
|
|
|
20DBE810000
|
unkown
|
page read and write
|
|
|
|
318A000
|
heap default
|
page read and write
|
|
|
|
7FF500DA8000
|
unkown
|
page readonly
|
|
|
|
1DBC89A0000
|
unkown
|
page read and write
|
|
|
|
7FF54EEC8000
|
unkown
|
page readonly
|
|
|
|
1DBC8961000
|
unkown
|
page read and write
|
|
|
|
21DD1F13000
|
unkown
|
page read and write
|
|
|
|
1DBC8E26000
|
unkown
|
page read and write
|
|
|
|
1DBC8980000
|
unkown
|
page read and write
|
|
|
|
183FBAD0000
|
unkown
|
page readonly
|
|
|
|
4FD1CFE000
|
unkown
|
page read and write
|
|
|
|
7FF53CC95000
|
unkown
|
page readonly
|
|
|
|
1DBC8934000
|
unkown
|
page read and write
|
|
|
|
183FE110000
|
unkown
|
page read and write
|
|
|
|
2199BC02000
|
unkown
|
page read and write
|
|
|
|
183FE310000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
heap private
|
page read and write
|
|
|
|
8BEEB77000
|
unkown
|
page read and write
|
|
|
|
183FB924000
|
unkown
|
page read and write
|
|
|
|
7FF54EDF2000
|
unkown
|
page readonly
|
|
|
|
7FF500E2A000
|
unkown
|
page readonly
|
|
|
|
7FF500AFB000
|
unkown
|
page readonly
|
|
|
|
247E5540000
|
heap private
|
page read and write
|
|
|
|
2199BC57000
|
unkown
|
page read and write
|
|
|
|
7FF5E7144000
|
unkown
|
page readonly
|
|
|
|
2A3A000
|
unkown
|
page readonly
|
|
|
|
4930000
|
heap private
|
page read and write
|
|
|
|
1DBC89CF000
|
unkown
|
page read and write
|
|
|
|
1DBC8964000
|
unkown
|
page read and write
|
|
|
|
D10000
|
unkown
|
page read and write
|
|
|
|
1DBC8964000
|
unkown
|
page read and write
|
|
|
|
2199BD13000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D0A000
|
unkown
|
page readonly
|
|
|
|
1DBC89E6000
|
unkown
|
page read and write
|
|
|
|
7FF5845BA000
|
unkown
|
page readonly
|
|
|
|
7FF500E32000
|
unkown
|
page readonly
|
|
|
|
247E58D0000
|
unkown
|
page readonly
|
|
|
|
7FF500D6F000
|
unkown
|
page readonly
|
|
|
|
1FED5602000
|
unkown
|
page read and write
|
|
|
|
7FF564109000
|
unkown
|
page readonly
|
|
|
|
183FB800000
|
unkown
|
page read and write
|
|
|
|
7FF56410D000
|
unkown
|
page readonly
|
|
|
|
1DBC898D000
|
unkown
|
page read and write
|
|
|
|
1FED5800000
|
unkown
|
page readonly
|
|
|
|
2F75000
|
unkown
|
page read and write
|
|
|
|
1DBC89A4000
|
unkown
|
page read and write
|
|
|
|
1DBC8E02000
|
unkown
|
page read and write
|
|
|
|
294E000
|
unkown
|
page readonly
|
|
|
|
7FF54ECB9000
|
unkown
|
page readonly
|
|
|
|
7FF584662000
|
unkown
|
page readonly
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
1DBC8E8E000
|
unkown
|
page read and write
|
|
|
|
2DAE000
|
unkown
|
page read and write
|
|
|
|
20DBE817000
|
unkown
|
page read and write
|
|
|
|
7FF58456E000
|
unkown
|
page readonly
|
|
|
|
247E5600000
|
unkown
|
page read and write
|
|
|
|
1DBC8229000
|
unkown
|
page read and write
|
|
|
|
1DBC891E000
|
unkown
|
page read and write
|
|
|
|
1DBC8F3C000
|
unkown
|
page read and write
|
|
|
|
7FF563E56000
|
unkown
|
page readonly
|
|
|
|
20DBE81E000
|
unkown
|
page read and write
|
|
|
|
2B33000
|
unkown
|
page readonly
|
|
|
|
1DBC8957000
|
unkown
|
page read and write
|
|
|
|
183FE010000
|
unkown
|
page read and write
|
|
|
|
1DBC8934000
|
unkown
|
page read and write
|
|
|
|
183FDB43000
|
unkown
|
page read and write
|
|
|
|
1DBC8924000
|
unkown
|
page read and write
|
|
|
|
1DBC8934000
|
unkown
|
page read and write
|
|
|
|
183FE210000
|
unkown
|
page read and write
|
|
|
|
8BEEA7B000
|
unkown
|
page read and write
|
|
|
|
1DBC8924000
|
unkown
|
page read and write
|
|
|
|
4FD1C7C000
|
unkown
|
page read and write
|
|
|
|
2F92000
|
unkown
|
page read and write
|
|
|
|
183FD770000
|
unkown
|
page readonly
|
|
|
|
1DBC8E3C000
|
unkown
|
page read and write
|
|
|
|
1DBC8951000
|
unkown
|
page read and write
|
|
|
|
4C05B7B000
|
unkown
|
page read and write
|
|
|
|
1DBC8E02000
|
unkown
|
page read and write
|
|
|
|
2912000
|
unkown
|
page readonly
|
|
|
|
1DBC9000000
|
unkown
|
page readonly
|
|
|
|
7FF5E711F000
|
unkown
|
page readonly
|
|
|
|
1DBC82C4000
|
unkown
|
page read and write
|
|
|
|
E75F7EF000
|
unkown
|
page read and write
|
|
|
|
1DBC8937000
|
unkown
|
page read and write
|
|
|
|
2719000
|
unkown
|
page readonly
|
|
|
|
683B97A000
|
unkown
|
page read and write
|
|
|
|
7FF5E715E000
|
unkown
|
page readonly
|
|
|
|
183FDAD4000
|
unkown
|
page read and write
|
|
|
|
7FF53C865000
|
unkown
|
page readonly
|
|
|
|
183FB9A9000
|
unkown
|
page read and write
|
|
|
|
183FDB43000
|
unkown
|
page read and write
|
|
|
|
183FB976000
|
unkown
|
page read and write
|
|
|
|
174D3855000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CCB000
|
unkown
|
page readonly
|
|
|
|
183FE310000
|
unkown
|
page read and write
|
|
|
|
C3B000
|
unkown
|
page read and write
|
|
|
|
1FED4CE0000
|
heap default
|
page read and write
|
|
|
|
183FDA5A000
|
unkown
|
page read and write
|
|
|
|
183FB7A0000
|
unkown
|
page readonly
|
|
|
|
1DBC8960000
|
unkown
|
page read and write
|
|
|
|
2A6C000
|
unkown
|
page readonly
|
|
|
|
7FF5AB0C6000
|
unkown
|
page readonly
|
|
|
|
683C27D000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CC5000
|
unkown
|
page readonly
|
|
|
|
20DBEAF0000
|
unkown
|
page readonly
|
|
|
|
7FF53CCF8000
|
unkown
|
page readonly
|
|
|
|
21DD20D0000
|
unkown
|
page readonly
|
|
|
|
1DBC8964000
|
unkown
|
page read and write
|
|
|
|
20DBE7F0000
|
heap default
|
page read and write
|
|
|
|
183FE310000
|
unkown
|
page read and write
|
|
|
|
1DBC8972000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D2E000
|
unkown
|
page readonly
|
|
|
|
7FF5AB54A000
|
unkown
|
page readonly
|
|
|
|
1DBC8924000
|
unkown
|
page read and write
|
|
|
|
1DBC89A4000
|
unkown
|
page read and write
|
|
|
|
2AB6000
|
unkown
|
page readonly
|
|
|
|
7FF500C21000
|
unkown
|
page readonly
|
|
|
|
2199BC29000
|
unkown
|
page read and write
|
|
|
|
1DBC82C1000
|
unkown
|
page read and write
|
|
|
|
174D3600000
|
heap private
|
page read and write
|
|
|
|
7FF58459C000
|
unkown
|
page readonly
|
|
|
|
1DBC8963000
|
unkown
|
page read and write
|
|
|
|
183FB88F000
|
unkown
|
page read and write
|
|
|
|
7FF54EC94000
|
unkown
|
page readonly
|
|
|
|
174D4200000
|
unkown
|
page readonly
|
|
|
|
1DBC87F0000
|
unkown
|
page readonly
|
|
|
|
7FF564101000
|
unkown
|
page readonly
|
|
|
|
683BCFA000
|
unkown
|
page read and write
|
|
|
|
7FF54EDA6000
|
unkown
|
page readonly
|
|
|
|
21DD1CD0000
|
heap private
|
page read and write
|
|
|
|
1DBC8923000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D1F000
|
unkown
|
page readonly
|
|
|
|
1FED4E70000
|
unkown
|
page read and write
|
|
|
|
683B87A000
|
unkown
|
page read and write
|
|
|
|
7FF54EEB4000
|
unkown
|
page readonly
|
|
|
|
2A33000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF58459F000
|
unkown
|
page readonly
|
|
|
|
7AA0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6A43000
|
unkown
|
page readonly
|
|
|
|
1DBC895C000
|
unkown
|
page read and write
|
|
|
|
7FF5845D8000
|
unkown
|
page readonly
|
|
|
|
1DBC8249000
|
unkown
|
page read and write
|
|
|
|
183FDB83000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
heap default
|
page read and write
|
|
|
|
1DBC8934000
|
unkown
|
page read and write
|
|
|
|
7FF500D8A000
|
unkown
|
page readonly
|
|
|
|
7FF5AB4FA000
|
unkown
|
page readonly
|
|
|
|
7FF5E3C24000
|
unkown
|
page readonly
|
|
|
|
183FD94C000
|
unkown
|
page read and write
|
|
|
|
1DBC8D90000
|
unkown
|
page readonly
|
|
|
|
7FF54EC81000
|
unkown
|
page readonly
|
|
|
|
1DBC894D000
|
unkown
|
page read and write
|
|
|
|
174D3902000
|
unkown
|
page read and write
|
|
|
|
7FF5640BF000
|
unkown
|
page readonly
|
|
|
|
1DBC891D000
|
unkown
|
page read and write
|
|
|
|
1DBC8944000
|
unkown
|
page read and write
|
|
|
|
20DBE806000
|
heap default
|
page read and write
|
|
|
|
27A3000
|
unkown
|
page readonly
|
|
|
|
7FF5E7134000
|
unkown
|
page readonly
|
|
|
|
7FF500DB1000
|
unkown
|
page readonly
|
|
|
|
2DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5AB4FE000
|
unkown
|
page readonly
|
|
|
|
683BEFB000
|
unkown
|
page read and write
|
|
|
|
7FF54EC3F000
|
unkown
|
page readonly
|
|
|
|
183FDB00000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
heap private
|
page read and write
|
|
|
|
7FF54EED1000
|
unkown
|
page readonly
|
|
|
|
7FF500D94000
|
unkown
|
page readonly
|
|
|
|
7FF54EC26000
|
unkown
|
page readonly
|
|
|
|
1DBC8921000
|
unkown
|
page read and write
|
|
|
|
2199BE50000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CC0000
|
unkown
|
page readonly
|
|
|
|
683BDFB000
|
unkown
|
page read and write
|
|
|
|
183FD9DE000
|
unkown
|
page read and write
|
|
|
|
A24D979000
|
unkown
|
page read and write
|
|
|
|
1DBC89C3000
|
unkown
|
page read and write
|
|
|
|
1DBC8934000
|
unkown
|
page read and write
|
|
|
|
4FD1D7E000
|
unkown
|
page read and write
|
|
|
|
1DBC824E000
|
unkown
|
page read and write
|
|
|
|
183FB898000
|
unkown
|
page read and write
|
|
|
|
1DBC896F000
|
unkown
|
page read and write
|
|
|
|
7FF54EE2F000
|
unkown
|
page readonly
|
|
|
|
7FF5AB52F000
|
unkown
|
page readonly
|
|
|
|
183FB883000
|
unkown
|
page read and write
|
|
|
|
E75FC7E000
|
unkown
|
page read and write
|
|
|
|
1DBC8316000
|
unkown
|
page read and write
|
|
|
|
683C37C000
|
unkown
|
page read and write
|
|
|
|
E75FB7A000
|
unkown
|
page read and write
|
|
|
|
7FF5845E6000
|
unkown
|
page readonly
|
|
|
|
7FF5AB351000
|
unkown
|
page readonly
|
|
|
|
7FF53C3A6000
|
unkown
|
page readonly
|
|
|
|
7FF5E3DB1000
|
unkown
|
page readonly
|
|
|
|
2B14000
|
unkown
|
page readonly
|
|
|
|
7FF53C7FE000
|
unkown
|
page readonly
|
|
|
|
1DBC8937000
|
unkown
|
page read and write
|
|
|
|
4C059F5000
|
unkown
|
page read and write
|
|
|
|
7FF53CD06000
|
unkown
|
page readonly
|
|
|
|
183FB913000
|
unkown
|
page read and write
|
|
|
|
7FF56417A000
|
unkown
|
page readonly
|
|
|
|
7FF53CBDD000
|
unkown
|
page readonly
|
|
|
|
183FE310000
|
unkown
|
page read and write
|
|
|
|
1DBC8120000
|
unkown
|
page readonly
|
|
|
|
7FF53CC7A000
|
unkown
|
page readonly
|
|
|
|
1DBC8950000
|
unkown
|
page read and write
|
|
|
|
7FF5AB453000
|
unkown
|
page readonly
|
|
|
|
1DBC8213000
|
unkown
|
page read and write
|
|
|
|
7FF53CCFE000
|
unkown
|
page readonly
|
|
|
|
7FF563F71000
|
unkown
|
page readonly
|
|
|
|
7FF53CB93000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CBE000
|
unkown
|
page readonly
|
|
|
|
247E6000000
|
unkown
|
page readonly
|
|
|
|
7FF500D84000
|
unkown
|
page readonly
|
|
|
|
7FF50059D000
|
unkown
|
page readonly
|
|
|
|
7FF500D9E000
|
unkown
|
page readonly
|
|
|
|
7FF53CA56000
|
unkown
|
page readonly
|
|
|
|
7FF54EF51000
|
unkown
|
page readonly
|
|
|
|
7FF5640EE000
|
unkown
|
page readonly
|
|
|
|
1DBC8981000
|
unkown
|
page read and write
|
|
|
|
1DBC895F000
|
unkown
|
page read and write
|
|
|
|
7FF53CB98000
|
unkown
|
page readonly
|
|
|
|
7FF5E3895000
|
unkown
|
page readonly
|
|
|
|
7FF500C3B000
|
unkown
|
page readonly
|
|
|
|
1DBC89A5000
|
unkown
|
page read and write
|
|
|
|
7FF5AB44D000
|
unkown
|
page readonly
|
|
|
|
7FF5843C1000
|
unkown
|
page readonly
|
|
|
|
683C47C000
|
unkown
|
page read and write
|
|
|
|
7FF54ED5B000
|
unkown
|
page readonly
|
|
|
|
2A85000
|
unkown
|
page readonly
|
|
|
|
D50000
|
unkown
|
page read and write
|
|
|
|
1DBC8965000
|
unkown
|
page read and write
|
|
|
|
2B01000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D28000
|
unkown
|
page readonly
|
|
|
|
232287E000
|
unkown
|
page read and write
|
|
|
|
1DBC8DB0000
|
unkown
|
page read and write
|
|
|
|
2A29000
|
unkown
|
page readonly
|
|
|
|
183FB893000
|
unkown
|
page read and write
|
|
|
|
1DBC82AB000
|
unkown
|
page read and write
|
|
|
|
1DBC8929000
|
unkown
|
page read and write
|
|
|
|
2AB6000
|
unkown
|
page readonly
|
|
|
|
1DBC89BF000
|
unkown
|
page read and write
|
|
|
|
183FB887000
|
unkown
|
page read and write
|
|
|
|
2A33000
|
unkown
|
page readonly
|
|
|
|
7FF5E711C000
|
unkown
|
page readonly
|
|
|
|
2A87000
|
unkown
|
page readonly
|
|
|
|
7FF5E33DC000
|
unkown
|
page readonly
|
|
|
|
7FF53CA07000
|
unkown
|
page readonly
|
|
|
|
2E0E000
|
unkown
|
page read and write
|
|
|
|
2A70000
|
unkown
|
page readonly
|
|
|
|
7FF5640D4000
|
unkown
|
page readonly
|
|
|
|
1DBC8E3C000
|
unkown
|
page read and write
|
|
|
|
183FE410000
|
unkown
|
page read and write
|
|
|
|
2F73000
|
heap default
|
page read and write
|
|
|
|
31A8000
|
unkown
|
page read and write
|
|
|
|
7FF564106000
|
unkown
|
page readonly
|
|
|
|
183FD9B6000
|
unkown
|
page read and write
|
|
|
|
1FED4E13000
|
unkown
|
page read and write
|
|
|
|
1DBC8936000
|
unkown
|
page read and write
|
|
|
|
7FF584575000
|
unkown
|
page readonly
|
|
|
|
1DBC8F00000
|
unkown
|
page read and write
|
|
|
|
1DBC8924000
|
unkown
|
page read and write
|
|
|
|
174D3760000
|
unkown
|
page read and write
|
|
|
|
1DBC89C4000
|
unkown
|
page read and write
|
|
|
|
247E5702000
|
unkown
|
page read and write
|
|
|
|
6170000
|
unkown
|
page readonly
|
|
|
|
1DBC89C2000
|
unkown
|
page read and write
|
|
|
|
7FF5640A7000
|
unkown
|
page readonly
|
|
|
|
183FE410000
|
unkown
|
page read and write
|
|
|
|
8BEE57B000
|
unkown
|
page read and write
|
|
|
|
7FF5E714E000
|
unkown
|
page readonly
|
|
|
|
21DD1E3F000
|
unkown
|
page read and write
|
|
|
|
7FF56408A000
|
unkown
|
page readonly
|
|
|
|
7FF58457B000
|
unkown
|
page readonly
|
|
|
|
2D80000
|
unkown
|
page readonly
|
|
|
|
1DBC895D000
|
unkown
|
page read and write
|
|
|
|
1FED4E49000
|
unkown
|
page read and write
|
|
|
|
1DBC8960000
|
unkown
|
page read and write
|
|
|
|
7FF54EE8F000
|
unkown
|
page readonly
|
|
|
|
1FED4E8C000
|
unkown
|
page read and write
|
|
|
|
1DBC8972000
|
unkown
|
page read and write
|
|
|
|
1DBC8960000
|
unkown
|
page read and write
|
|
|
|
183FD9EC000
|
unkown
|
page read and write
|
|
|
|
174D384F000
|
unkown
|
page read and write
|
|
|
|
2A5C000
|
unkown
|
page readonly
|
|
|
|
20DBE790000
|
unkown
|
page readonly
|
|
|
|
21DD1E55000
|
unkown
|
page read and write
|
|
|
|
1DBC89E5000
|
unkown
|
page read and write
|
|
|
|
183FB8A9000
|
unkown
|
page read and write
|
|
|
|
7FF53CC8A000
|
unkown
|
page readonly
|
|
|
|
7FF5844DC000
|
unkown
|
page readonly
|
|
|
|
7C40000
|
unkown
|
page read and write
|
|
|
|
174D3A00000
|
unkown
|
page readonly
|
|
|
|
1FED4E50000
|
unkown
|
page read and write
|
|
|
|
183FE210000
|
unkown
|
page read and write
|
|
|
|
1DBC895B000
|
unkown
|
page read and write
|
|
|
|
1DBC89A4000
|
unkown
|
page read and write
|
|
|
|
1DBC8900000
|
unkown
|
page read and write
|
|
|
|
183FB840000
|
unkown
|
page read and write
|
|
|
|
7FF5AB277000
|
unkown
|
page readonly
|
|
|
|
1DBC828A000
|
unkown
|
page read and write
|
|
|
|
7FF564095000
|
unkown
|
page readonly
|
|
|
|
2199BE00000
|
unkown
|
page write copy
|
|
|
|
2199BD02000
|
unkown
|
page read and write
|
|
|
|
7FF54EC38000
|
unkown
|
page readonly
|
|
|
|
7FF563D5A000
|
unkown
|
page readonly
|
|
|
|
7FF5E3880000
|
unkown
|
page readonly
|
|
|
|
1DBC8E00000
|
unkown
|
page read and write
|
|
|
|
1DBC8E02000
|
unkown
|
page read and write
|
|
|
|
7FF54EE3F000
|
unkown
|
page readonly
|
|
|
|
7FF53CC90000
|
unkown
|
page readonly
|
|
|
|
8BEEC7F000
|
unkown
|
page read and write
|
|
|
|
7FF54EDFC000
|
unkown
|
page readonly
|
|
|
|
7FF5E70F0000
|
unkown
|
page readonly
|
|
|
|
7FF53C8A7000
|
unkown
|
page readonly
|
|
|
|
1DBC829E000
|
unkown
|
page read and write
|
|
|
|
1DBC8938000
|
unkown
|
page read and write
|
|
|
|
174D3800000
|
unkown
|
page read and write
|
|
|
|
1DBC892E000
|
unkown
|
page read and write
|
|
|
|
183FB935000
|
unkown
|
page read and write
|
|
|
|
1DBC8250000
|
unkown
|
page read and write
|
|
|
|
7FF54E6BD000
|
unkown
|
page readonly
|
|
|
|
7FF54ECB1000
|
unkown
|
page readonly
|
|
|
|
7FF5AB55F000
|
unkown
|
page readonly
|
|
|
|
183FD270000
|
unkown
|
page read and write
|
|
|
|
20DBE780000
|
unkown
|
page readonly
|
|
|
|
683B6FE000
|
unkown
|
page read and write
|
|
|
|
247E5713000
|
unkown
|
page read and write
|
|
|
|
2E50000
|
unkown
|
page readonly
|
|
|
|
7FF5AB464000
|
unkown
|
page readonly
|
|
|
|
183FD710000
|
unkown
|
page read and write
|
|
|
|
8BEE5FE000
|
unkown
|
page read and write
|
|
|
|
7FF54EE2B000
|
unkown
|
page readonly
|
|
|
|
2A87000
|
unkown
|
page readonly
|
|
|
|
7FF563D5F000
|
unkown
|
page readonly
|
|
|
|
7FF5845B4000
|
unkown
|
page readonly
|
|
|
|
7FF500B61000
|
unkown
|
page readonly
|
|
|
|
2A9A000
|
unkown
|
page readonly
|
|
|
|
7FF5638ED000
|
unkown
|
page readonly
|
|
|
|
D00000
|
unkown
|
page readonly
|
|
|
|
2E90000
|
unkown
|
page readonly
|
|
|
|
7FF5E716D000
|
unkown
|
page readonly
|
|
|
|
AB4000
|
unkown
|
page read and write
|
|
|
|
183FB8E8000
|
unkown
|
page read and write
|
|
|
|
247E5708000
|
unkown
|
page read and write
|
|
|
|
7FF54EE23000
|
unkown
|
page readonly
|
|
|
|
1DBC8957000
|
unkown
|
page read and write
|
|
|
|
4C058FE000
|
unkown
|
page read and write
|
|
|
|
247E563C000
|
unkown
|
page read and write
|
|
|
|
7FF53C5E7000
|
unkown
|
page readonly
|
|
|
|
8BEE87F000
|
unkown
|
page read and write
|
|
|
|
6090000
|
unkown
|
page readonly
|
|
|
|
2B33000
|
unkown
|
page readonly
|
|
|
|
247E5651000
|
unkown
|
page read and write
|
|
|
|
7FF584413000
|
unkown
|
page readonly
|
|
|
|
1DBC8050000
|
unkown
|
page readonly
|
|
|
|
183FD750000
|
unkown
|
page readonly
|
|
|
|
2199D6F0000
|
unkown
|
page readonly
|
|
|
|
1DBC8964000
|
unkown
|
page read and write
|
|
|
|
1DBC89B4000
|
unkown
|
page read and write
|
|
|
|
174D4002000
|
unkown
|
page read and write
|
|
|
|
7FF5AB3FE000
|
unkown
|
page readonly
|
|
|
|
247E5800000
|
unkown
|
page readonly
|
|
|
|
7FF564032000
|
unkown
|
page readonly
|
|
|
|
31A3000
|
heap default
|
page read and write
|
|
|
|
1DBC89E5000
|
unkown
|
page read and write
|
|
|
|
183FB750000
|
unkown
|
page write copy
|
|
|
|
7FF564182000
|
unkown
|
page readonly
|
|
|
|
1DBC8958000
|
unkown
|
page read and write
|
|
|
|
1DBC891D000
|
unkown
|
page read and write
|
|
|
|
7FF5AB544000
|
unkown
|
page readonly
|
|
|
|
A24D67B000
|
unkown
|
page read and write
|
|
|
|
3000000
|
unkown
|
page readonly
|
|
|
|
7FF5640C8000
|
unkown
|
page readonly
|
|
|
|
1DBC8200000
|
unkown
|
page read and write
|
|
|
|
2F50000
|
heap default
|
page read and write
|
|
|
|
2DBA000
|
heap private
|
page read and write
|
|
|
|
183FD6B0000
|
heap private
|
page read and write
|
|
|
|
7FF54EC85000
|
unkown
|
page readonly
|
|
|
|
183FDC02000
|
unkown
|
page read and write
|
|
|
|
1DBC8790000
|
unkown
|
page readonly
|
|
|
|
21DD1E29000
|
unkown
|
page read and write
|
|
|
|
247E55A0000
|
heap default
|
page read and write
|
|
|
|
7FF54EB1C000
|
unkown
|
page readonly
|
|
|
|
183FD710000
|
unkown
|
page read and write
|
|
|
|
1DBC895D000
|
unkown
|
page read and write
|
|
|
|
247E5613000
|
unkown
|
page read and write
|
|
|
|
683C1FB000
|
unkown
|
page read and write
|
|
|
|
183FB9A6000
|
unkown
|
page read and write
|
|
|
|
4C05A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5AB517000
|
unkown
|
page readonly
|
|
|
|
A24D6FE000
|
unkown
|
page read and write
|
|
|
|
183FDC82000
|
unkown
|
page read and write
|
|
|
|
2F95000
|
unkown
|
page read and write
|
|
|
|
1DBC8253000
|
unkown
|
page read and write
|
|
|
|
7FF584451000
|
unkown
|
page readonly
|
|
|
|
2719000
|
unkown
|
page readonly
|
|
|
|
1DBC8930000
|
unkown
|
page read and write
|
|
|
|
7FF54EE97000
|
unkown
|
page readonly
|
|
|
|
183FE010000
|
unkown
|
page read and write
|
|
|
|
1DBC897F000
|
unkown
|
page read and write
|
|
|
|
31A5000
|
unkown
|
page read and write
|
|
|
|
1DBC8313000
|
unkown
|
page read and write
|
|
|
|
7FF53CA90000
|
unkown
|
page readonly
|
|
|
|
D40000
|
unkown
|
page readonly
|
|
|
|
7FF54EED6000
|
unkown
|
page readonly
|
|
|
|
7FF5E3C2C000
|
unkown
|
page readonly
|
|
|
|
7FF564030000
|
unkown
|
page readonly
|
|
|
|
7FF5845E9000
|
unkown
|
page readonly
|
|
|
|
1DBC8DA0000
|
unkown
|
page read and write
|
|
|
|
1DBC8957000
|
unkown
|
page read and write
|
|
|
|
1FED4E67000
|
unkown
|
page read and write
|
|
|
|
7FF5E7128000
|
unkown
|
page readonly
|
|
|
|
7FF53C856000
|
unkown
|
page readonly
|
|
|
|
2A8D000
|
unkown
|
page readonly
|
|
|
|
1DBC8040000
|
heap default
|
page read and write
|
|
|
|
291E000
|
unkown
|
page readonly
|
|
|
|
7FF500C48000
|
unkown
|
page readonly
|
|
|
|
1DBC8938000
|
unkown
|
page read and write
|
|
|
|
7FF58446E000
|
unkown
|
page readonly
|
|
|
|
1DBC82A5000
|
unkown
|
page read and write
|
|
|
|
1FED4E3C000
|
unkown
|
page read and write
|
|
|
|
7FF56409B000
|
unkown
|
page readonly
|
|
|
|
1DBC8DA0000
|
unkown
|
page readonly
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
2A29000
|
unkown
|
page readonly
|
|
|
|
183FD95E000
|
unkown
|
page read and write
|
|
|
|
1DBC8308000
|
unkown
|
page read and write
|
|
|
|
7FF53C76E000
|
unkown
|
page readonly
|
|
|
|
1DBC89A4000
|
unkown
|
page read and write
|
|
|
|
2DF0000
|
unkown
|
page read and write
|
|
|
|
1DBC8930000
|
unkown
|
page read and write
|
|
|
|
7FF54EC96000
|
unkown
|
page readonly
|
|
|
|
7FF5E33D6000
|
unkown
|
page readonly
|
|
|
|
183FDD02000
|
unkown
|
page read and write
|
|
|
|
7FF53CCA7000
|
unkown
|
page readonly
|
|
|
|
1DBC8E02000
|
unkown
|
page read and write
|
|
|
|
7FF56408E000
|
unkown
|
page readonly
|
|
|
|
7FF563EB5000
|
unkown
|
page readonly
|
|
|
|
1DBC8E02000
|
unkown
|
page read and write
|
|
|
|
31AC000
|
unkown
|
page read and write
|
|
|
|
20DBE750000
|
unkown
|
page read and write
|
|
|
|
183FB6E0000
|
heap private
|
page read and write
|
|
|
|
1FED4C80000
|
heap private
|
page read and write
|
|
|
|
2ABB000
|
unkown
|
page readonly
|
|
|
|
2A4D000
|
unkown
|
page readonly
|
|
|
|
683C07B000
|
unkown
|
page read and write
|
|
|
|
247E5700000
|
unkown
|
page read and write
|
|
|
|
174D3750000
|
unkown
|
page readonly
|
|
|
|
F5B000
|
unkown
|
page readonly
|
|
|
|
7FF5E713A000
|
unkown
|
page readonly
|
|
|
|
1DBC896F000
|
unkown
|
page read and write
|
|
|
|
183FD9F8000
|
unkown
|
page read and write
|
|
|
|
2F5A000
|
heap default
|
page read and write
|
|
|
|
7FF53CB8E000
|
unkown
|
page readonly
|
|
|
|
183FDAD2000
|
unkown
|
page read and write
|
|
|
|
1DBC824D000
|
unkown
|
page read and write
|
|
|
|
183FB7F0000
|
unkown
|
page readonly
|
|
|
|
6230000
|
unkown
|
page readonly
|
|
|
|
2A8D000
|
unkown
|
page readonly
|
|
|
|
2912000
|
unkown
|
page readonly
|
|
|
|
7FF563D67000
|
unkown
|
page readonly
|
|
|
|
1DBC8936000
|
unkown
|
page read and write
|
|
|
|
7FF53CAC6000
|
unkown
|
page readonly
|
|
|
|
4C05FFC000
|
unkown
|
page read and write
|
|
|
|
21DD1E13000
|
unkown
|
page read and write
|
|
|
|
183FD710000
|
unkown
|
page read and write
|
|
|
|
21DD1E00000
|
unkown
|
page read and write
|
|
|
|
2F78000
|
unkown
|
page read and write
|
|
|
|
174D3E60000
|
unkown
|
page readonly
|
|
|
|
4FD2077000
|
unkown
|
page read and write
|
|
|
|
7FF500DB9000
|
unkown
|
page readonly
|
|
|
|
7FF500C43000
|
unkown
|
page readonly
|
|
|
|
7FF53CAC4000
|
unkown
|
page readonly
|
|
|
|
7FF53CD74000
|
unkown
|
page readonly
|
|
|
|
183FDA19000
|
unkown
|
page read and write
|
|
|
|
1DBC8964000
|
unkown
|
page read and write
|
|
|
|
7FF53CB3A000
|
unkown
|
page readonly
|
|
There are 1052 hidden memdumps, click here to show them.