Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
plan-870783614.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$plan-870783614.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\ABEE3621-D8E4-4A15-84D9-852382602615
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\DD87128.png
|
PNG image data, 1133 x 589, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\88A40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\gihi1.dll
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\gihi2.dll
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://gruasphenbogota.com/C74hwGGxi/ka.html
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://carpascapital.com/gBPg8MtsGbv/ka.html%
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
carpascapital.com
|
50.116.92.246
|
|
|
|
gruasphenbogota.com
|
50.116.92.246
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
50.116.92.246
|
carpascapital.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
:$?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
;$?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A390
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A797
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A8E0
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
:1?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
There are 49 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF519958000
|
unkown
|
page readonly
|
|
|
|
7FF5C926A000
|
unkown
|
page readonly
|
|
|
|
7FF54C22F000
|
unkown
|
page readonly
|
|
|
|
2938000
|
unkown
|
page readonly
|
|
|
|
20CA6936000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C5B000
|
unkown
|
page readonly
|
|
|
|
20B28C57000
|
unkown
|
page read and write
|
|
|
|
7FF5BB488000
|
unkown
|
page readonly
|
|
|
|
7FF5D9BB4000
|
unkown
|
page readonly
|
|
|
|
2839000
|
unkown
|
page readonly
|
|
|
|
1DA50C00000
|
unkown
|
page readonly
|
|
|
|
1FF11590000
|
unkown
|
page readonly
|
|
|
|
7FF5C9304000
|
unkown
|
page readonly
|
|
|
|
7FF5E5F0C000
|
unkown
|
page readonly
|
|
|
|
2915000
|
unkown
|
page readonly
|
|
|
|
7FF501568000
|
unkown
|
page readonly
|
|
|
|
1229345D000
|
unkown
|
page read and write
|
|
|
|
20B2AD28000
|
unkown
|
page read and write
|
|
|
|
1FF11700000
|
unkown
|
page read and write
|
|
|
|
1DA50D20000
|
unkown
|
page readonly
|
|
|
|
640000
|
unkown
|
page readonly
|
|
|
|
22C87254000
|
unkown
|
page read and write
|
|
|
|
7FF5015E1000
|
unkown
|
page readonly
|
|
|
|
2943000
|
unkown
|
page readonly
|
|
|
|
12293513000
|
unkown
|
page read and write
|
|
|
|
90AEAFE000
|
unkown
|
page read and write
|
|
|
|
1D369760000
|
unkown
|
page read and write
|
|
|
|
12293402000
|
unkown
|
page read and write
|
|
|
|
7FF5015C6000
|
unkown
|
page readonly
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
1FF11686000
|
unkown
|
page read and write
|
|
|
|
28AF000
|
unkown
|
page readonly
|
|
|
|
7FF5D9D34000
|
unkown
|
page readonly
|
|
|
|
7FF54C224000
|
unkown
|
page readonly
|
|
|
|
20CA6740000
|
unkown
|
page read and write
|
|
|
|
20B28CC4000
|
unkown
|
page read and write
|
|
|
|
20B28CE1000
|
unkown
|
page read and write
|
|
|
|
20B28C70000
|
unkown
|
page read and write
|
|
|
|
359397F000
|
unkown
|
page read and write
|
|
|
|
20CA698A000
|
unkown
|
page read and write
|
|
|
|
77B2279000
|
unkown
|
page read and write
|
|
|
|
20CA6946000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page readonly
|
|
|
|
7FF54C091000
|
unkown
|
page readonly
|
|
|
|
7FF51991F000
|
unkown
|
page readonly
|
|
|
|
289D000
|
unkown
|
page readonly
|
|
|
|
7FF50178A000
|
unkown
|
page readonly
|
|
|
|
7FF5015E9000
|
unkown
|
page readonly
|
|
|
|
7FF5197D1000
|
unkown
|
page readonly
|
|
|
|
77B207B000
|
unkown
|
page read and write
|
|
|
|
20CA6670000
|
unkown
|
page readonly
|
|
|
|
1C443500000
|
unkown
|
page read and write
|
|
|
|
7FF5195AC000
|
unkown
|
page readonly
|
|
|
|
7FF5196B6000
|
unkown
|
page readonly
|
|
|
|
90AE8F7000
|
unkown
|
page read and write
|
|
|
|
20B28BC0000
|
heap default
|
page read and write
|
|
|
|
1D369560000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B9D000
|
unkown
|
page readonly
|
|
|
|
1C443455000
|
unkown
|
page read and write
|
|
|
|
20CA6981000
|
unkown
|
page read and write
|
|
|
|
7FF5199D4000
|
unkown
|
page readonly
|
|
|
|
7FF5E5EDE000
|
unkown
|
page readonly
|
|
|
|
D2F5979000
|
unkown
|
page read and write
|
|
|
|
7FF5198EE000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
1FF11600000
|
unkown
|
page read and write
|
|
|
|
7FF5BB31E000
|
unkown
|
page readonly
|
|
|
|
20CA6991000
|
unkown
|
page read and write
|
|
|
|
7FF5197EB000
|
unkown
|
page readonly
|
|
|
|
630000
|
unkown
|
page readonly
|
|
|
|
20B2ADCA000
|
unkown
|
page read and write
|
|
|
|
7FF54C131000
|
unkown
|
page readonly
|
|
|
|
7FF50187A000
|
unkown
|
page readonly
|
|
|
|
30A4000
|
heap private
|
page read and write
|
|
|
|
7FF54BB52000
|
unkown
|
page readonly
|
|
|
|
20CA6108000
|
unkown
|
page read and write
|
|
|
|
1C443502000
|
unkown
|
page read and write
|
|
|
|
20B2B110000
|
unkown
|
page read and write
|
|
|
|
122933C0000
|
unkown
|
page read and write
|
|
|
|
2EE7000
|
heap private
|
page read and write
|
|
|
|
1C44346E000
|
unkown
|
page read and write
|
|
|
|
20B2B210000
|
unkown
|
page read and write
|
|
|
|
1D3695C0000
|
unkown
|
page read and write
|
|
|
|
B53A0FB000
|
unkown
|
page read and write
|
|
|
|
289F000
|
unkown
|
page readonly
|
|
|
|
7FF5D9AF3000
|
unkown
|
page readonly
|
|
|
|
2C9E000
|
unkown
|
page read and write
|
|
|
|
7FF5E5FCA000
|
unkown
|
page readonly
|
|
|
|
7FF5C924C000
|
unkown
|
page readonly
|
|
|
|
20CA6931000
|
unkown
|
page read and write
|
|
|
|
D70000
|
unkown
|
page readonly
|
|
|
|
30B0000
|
unkown
|
page read and write
|
|
|
|
7FF54C2C9000
|
unkown
|
page readonly
|
|
|
|
20B28C3F000
|
unkown
|
page read and write
|
|
|
|
20CA60C5000
|
unkown
|
page read and write
|
|
|
|
12293460000
|
unkown
|
page read and write
|
|
|
|
2E00000
|
unkown
|
page readonly
|
|
|
|
1459D77000
|
unkown
|
page read and write
|
|
|
|
7FF5BB271000
|
unkown
|
page readonly
|
|
|
|
7FF5E5DE8000
|
unkown
|
page readonly
|
|
|
|
7FF54C14E000
|
unkown
|
page readonly
|
|
|
|
7FF50175B000
|
unkown
|
page readonly
|
|
|
|
30F8000
|
unkown
|
page read and write
|
|
|
|
20CA6740000
|
unkown
|
page read and write
|
|
|
|
7FF5BB41E000
|
unkown
|
page readonly
|
|
|
|
7FF54C24E000
|
unkown
|
page readonly
|
|
|
|
2F50000
|
heap default
|
page read and write
|
|
|
|
20B28C54000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C3A000
|
unkown
|
page readonly
|
|
|
|
2865000
|
unkown
|
page readonly
|
|
|
|
20B28D2A000
|
unkown
|
page read and write
|
|
|
|
20CA60EC000
|
unkown
|
page read and write
|
|
|
|
7FF54774E000
|
unkown
|
page readonly
|
|
|
|
20CA6102000
|
unkown
|
page read and write
|
|
|
|
20CA7000000
|
unkown
|
page readonly
|
|
|
|
22C874D0000
|
unkown
|
page readonly
|
|
|
|
7FF5BB511000
|
unkown
|
page readonly
|
|
|
|
20B2AE78000
|
unkown
|
page read and write
|
|
|
|
20B2AB90000
|
unkown
|
page read and write
|
|
|
|
20B2AED3000
|
unkown
|
page read and write
|
|
|
|
7FF5E5CA6000
|
unkown
|
page readonly
|
|
|
|
7FF54BBA3000
|
unkown
|
page readonly
|
|
|
|
20CA6029000
|
unkown
|
page read and write
|
|
|
|
2915000
|
unkown
|
page readonly
|
|
|
|
7FF5D9D42000
|
unkown
|
page readonly
|
|
|
|
572000
|
unkown
|
page read and write
|
|
|
|
7FF54776D000
|
unkown
|
page readonly
|
|
|
|
20B2B510000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CCD000
|
unkown
|
page readonly
|
|
|
|
7FF5C921E000
|
unkown
|
page readonly
|
|
|
|
20CA6991000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C55000
|
unkown
|
page readonly
|
|
|
|
20B28D2A000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
7FF5C8DF5000
|
unkown
|
page readonly
|
|
|
|
7BDE000
|
unkown
|
page read and write
|
|
|
|
1D3695B8000
|
unkown
|
page read and write
|
|
|
|
20B2AD72000
|
unkown
|
page read and write
|
|
|
|
7FF54C21F000
|
unkown
|
page readonly
|
|
|
|
20CA60EA000
|
unkown
|
page read and write
|
|
|
|
1C44344D000
|
unkown
|
page read and write
|
|
|
|
B539D79000
|
unkown
|
page read and write
|
|
|
|
7FF5E5DE3000
|
unkown
|
page readonly
|
|
|
|
20B28CB1000
|
unkown
|
page read and write
|
|
|
|
7FF5196AB000
|
unkown
|
page readonly
|
|
|
|
20CA69B2000
|
unkown
|
page read and write
|
|
|
|
3108000
|
unkown
|
page read and write
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
7FF54C016000
|
unkown
|
page readonly
|
|
|
|
20CA60AB000
|
unkown
|
page read and write
|
|
|
|
A2671A000
|
unkown
|
page read and write
|
|
|
|
12293413000
|
unkown
|
page read and write
|
|
|
|
2924000
|
unkown
|
page readonly
|
|
|
|
20CA697C000
|
unkown
|
page read and write
|
|
|
|
20B2AC02000
|
unkown
|
page read and write
|
|
|
|
B53A37B000
|
unkown
|
page read and write
|
|
|
|
B53A17C000
|
unkown
|
page read and write
|
|
|
|
20CA5EC0000
|
heap private
|
page read and write
|
|
|
|
7FF5BB36D000
|
unkown
|
page readonly
|
|
|
|
20CA6931000
|
unkown
|
page read and write
|
|
|
|
20CA6A00000
|
unkown
|
page readonly
|
|
|
|
7FF5015B5000
|
unkown
|
page readonly
|
|
|
|
20B2AD8D000
|
unkown
|
page read and write
|
|
|
|
7FF501790000
|
unkown
|
page readonly
|
|
|
|
7FF519907000
|
unkown
|
page readonly
|
|
|
|
20CA6924000
|
unkown
|
page read and write
|
|
|
|
3101000
|
unkown
|
page read and write
|
|
|
|
970000
|
heap private
|
page read and write
|
|
|
|
55C000
|
unkown
|
page read and write
|
|
|
|
561000
|
unkown
|
page read and write
|
|
|
|
20CA698E000
|
unkown
|
page read and write
|
|
|
|
20B28D39000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
20B2B110000
|
unkown
|
page read and write
|
|
|
|
20CA6680000
|
unkown
|
page read and write
|
|
|
|
20B28D13000
|
unkown
|
page read and write
|
|
|
|
22C87150000
|
unkown
|
page write copy
|
|
|
|
60C0000
|
unkown
|
page readonly
|
|
|
|
286C000
|
unkown
|
page readonly
|
|
|
|
285D000
|
unkown
|
page readonly
|
|
|
|
7FF5D9C9A000
|
unkown
|
page readonly
|
|
|
|
20B2B210000
|
unkown
|
page read and write
|
|
|
|
7FF5BB38C000
|
unkown
|
page readonly
|
|
|
|
7FF5BB496000
|
unkown
|
page readonly
|
|
|
|
20B2AE63000
|
unkown
|
page read and write
|
|
|
|
1459F7F000
|
unkown
|
page read and write
|
|
|
|
20B28BD0000
|
unkown
|
page readonly
|
|
|
|
308E000
|
unkown
|
page read and write
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
7FF501467000
|
unkown
|
page readonly
|
|
|
|
20CA6802000
|
unkown
|
page read and write
|
|
|
|
6EE000
|
unkown
|
page read and write
|
|
|
|
77B22FE000
|
unkown
|
page read and write
|
|
|
|
7FF5BB44C000
|
unkown
|
page readonly
|
|
|
|
272E000
|
unkown
|
page readonly
|
|
|
|
7FF519928000
|
unkown
|
page readonly
|
|
|
|
7FF5E5EEB000
|
unkown
|
page readonly
|
|
|
|
12293260000
|
heap private
|
page read and write
|
|
|
|
B53987E000
|
unkown
|
page read and write
|
|
|
|
20B2AB20000
|
unkown
|
page readonly
|
|
|
|
7FF5BB47F000
|
unkown
|
page readonly
|
|
|
|
7FF519944000
|
unkown
|
page readonly
|
|
|
|
1FF11708000
|
unkown
|
page read and write
|
|
|
|
20B28CC2000
|
unkown
|
page read and write
|
|
|
|
7FF519151000
|
unkown
|
page readonly
|
|
|
|
1D369780000
|
unkown
|
page readonly
|
|
|
|
1DA50B13000
|
unkown
|
page read and write
|
|
|
|
7FF54C24A000
|
unkown
|
page readonly
|
|
|
|
7FF547769000
|
unkown
|
page readonly
|
|
|
|
7FF50145F000
|
unkown
|
page readonly
|
|
|
|
20CA60A6000
|
unkown
|
page read and write
|
|
|
|
97A000
|
heap private
|
page read and write
|
|
|
|
20B2AD0A000
|
unkown
|
page read and write
|
|
|
|
1FF11613000
|
unkown
|
page read and write
|
|
|
|
7FF5C8DE0000
|
unkown
|
page readonly
|
|
|
|
28CB000
|
unkown
|
page readonly
|
|
|
|
20B2B410000
|
unkown
|
page read and write
|
|
|
|
20CA6E00000
|
unkown
|
page read and write
|
|
|
|
275F000
|
unkown
|
page readonly
|
|
|
|
7FF5BB48E000
|
unkown
|
page readonly
|
|
|
|
20B2AE46000
|
unkown
|
page read and write
|
|
|
|
20B2B110000
|
unkown
|
page read and write
|
|
|
|
20B2AE94000
|
unkown
|
page read and write
|
|
|
|
20CA6917000
|
unkown
|
page read and write
|
|
|
|
7FF5C8AB5000
|
unkown
|
page readonly
|
|
|
|
22C87400000
|
unkown
|
page readonly
|
|
|
|
30F3000
|
heap default
|
page read and write
|
|
|
|
7FF5E5F3E000
|
unkown
|
page readonly
|
|
|
|
B53A6FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C4A000
|
unkown
|
page readonly
|
|
|
|
1FF11C60000
|
unkown
|
page readonly
|
|
|
|
7FF50177C000
|
unkown
|
page readonly
|
|
|
|
7FF5477E1000
|
unkown
|
page readonly
|
|
|
|
1DA50A02000
|
unkown
|
page read and write
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
20B28D29000
|
unkown
|
page read and write
|
|
|
|
7FF54C23A000
|
unkown
|
page readonly
|
|
|
|
2932000
|
unkown
|
page readonly
|
|
|
|
20B2ADB2000
|
unkown
|
page read and write
|
|
|
|
7FF5C911E000
|
unkown
|
page readonly
|
|
|
|
7FF54C1F2000
|
unkown
|
page readonly
|
|
|
|
20CA6932000
|
unkown
|
page read and write
|
|
|
|
7FF54771F000
|
unkown
|
page readonly
|
|
|
|
22C87229000
|
unkown
|
page read and write
|
|
|
|
20B28CD4000
|
unkown
|
page read and write
|
|
|
|
20B2B000000
|
unkown
|
page read and write
|
|
|
|
20B28D7A000
|
unkown
|
page read and write
|
|
|
|
1FF11713000
|
unkown
|
page read and write
|
|
|
|
960000
|
unkown
|
page readonly
|
|
|
|
20B2C002000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F24000
|
unkown
|
page readonly
|
|
|
|
20CA6730000
|
unkown
|
page readonly
|
|
|
|
7FF5D9C87000
|
unkown
|
page readonly
|
|
|
|
980000
|
unkown
|
page readonly
|
|
|
|
30A0000
|
heap private
|
page read and write
|
|
|
|
359377B000
|
unkown
|
page read and write
|
|
|
|
1C443450000
|
unkown
|
page read and write
|
|
|
|
20B28C29000
|
unkown
|
page read and write
|
|
|
|
286C000
|
unkown
|
page readonly
|
|
|
|
20CA5F20000
|
heap default
|
page read and write
|
|
|
|
7FF519966000
|
unkown
|
page readonly
|
|
|
|
20CA6982000
|
unkown
|
page read and write
|
|
|
|
20CA604A000
|
unkown
|
page read and write
|
|
|
|
90AE9FD000
|
unkown
|
page read and write
|
|
|
|
1FF11450000
|
heap private
|
page read and write
|
|
|
|
122932D0000
|
unkown
|
page readonly
|
|
|
|
20B28CC8000
|
unkown
|
page read and write
|
|
|
|
7FF5C9274000
|
unkown
|
page readonly
|
|
|
|
20CA698E000
|
unkown
|
page read and write
|
|
|
|
28A3000
|
unkown
|
page readonly
|
|
|
|
20CA604B000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F18000
|
unkown
|
page readonly
|
|
|
|
46A000
|
unkown
|
page read and write
|
|
|
|
14597FE000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
7FF5016D6000
|
unkown
|
page readonly
|
|
|
|
20B2AE79000
|
unkown
|
page read and write
|
|
|
|
284A000
|
unkown
|
page readonly
|
|
|
|
122932C0000
|
heap default
|
page read and write
|
|
|
|
1D3695C0000
|
unkown
|
page read and write
|
|
|
|
B539C7A000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown
|
page readonly
|
|
|
|
7FF5477DA000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
20CA69A6000
|
unkown
|
page read and write
|
|
|
|
20B28D1B000
|
unkown
|
page read and write
|
|
|
|
7FF5BB425000
|
unkown
|
page readonly
|
|
|
|
20CA698B000
|
unkown
|
page read and write
|
|
|
|
7FF501881000
|
unkown
|
page readonly
|
|
|
|
2770000
|
unkown
|
page readonly
|
|
|
|
7FF501764000
|
unkown
|
page readonly
|
|
|
|
20B28D29000
|
unkown
|
page read and write
|
|
|
|
20CA60E1000
|
unkown
|
page read and write
|
|
|
|
7FF50145A000
|
unkown
|
page readonly
|
|
|
|
1DA509E0000
|
heap default
|
page read and write
|
|
|
|
7FF5C9312000
|
unkown
|
page readonly
|
|
|
|
7FF5195BF000
|
unkown
|
page readonly
|
|
|
|
7FF54BBA7000
|
unkown
|
page readonly
|
|
|
|
20B2AD70000
|
unkown
|
page read and write
|
|
|
|
20B2AECA000
|
unkown
|
page read and write
|
|
|
|
7FF54773A000
|
unkown
|
page readonly
|
|
|
|
D2F587E000
|
unkown
|
page read and write
|
|
|
|
20B2AB80000
|
unkown
|
page readonly
|
|
|
|
7FF54BA55000
|
unkown
|
page readonly
|
|
|
|
7FF51994E000
|
unkown
|
page readonly
|
|
|
|
1D3698B0000
|
unkown
|
page readonly
|
|
|
|
2895000
|
unkown
|
page readonly
|
|
|
|
7FF5E5EF7000
|
unkown
|
page readonly
|
|
|
|
7FF5D9810000
|
unkown
|
page readonly
|
|
|
|
2F60000
|
unkown
|
page readonly
|
|
|
|
CAF7C7C000
|
unkown
|
page read and write
|
|
|
|
1D3698A5000
|
heap private
|
page read and write
|
|
|
|
1C4433A0000
|
unkown
|
page read and write
|
|
|
|
CAF732B000
|
unkown
|
page read and write
|
|
|
|
20B2AED1000
|
unkown
|
page read and write
|
|
|
|
2873000
|
unkown
|
page readonly
|
|
|
|
20B2AD21000
|
unkown
|
page read and write
|
|
|
|
7FF5C928E000
|
unkown
|
page readonly
|
|
|
|
7FF5D9359000
|
unkown
|
page readonly
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
7FF5BB420000
|
unkown
|
page readonly
|
|
|
|
20B2AB90000
|
unkown
|
page read and write
|
|
|
|
22C87302000
|
unkown
|
page read and write
|
|
|
|
20B2ADA9000
|
unkown
|
page read and write
|
|
|
|
B5399FF000
|
unkown
|
page read and write
|
|
|
|
20B28D4C000
|
unkown
|
page read and write
|
|
|
|
20CA6933000
|
unkown
|
page read and write
|
|
|
|
7FF5BAFE6000
|
unkown
|
page readonly
|
|
|
|
7FF54BDC2000
|
unkown
|
page readonly
|
|
|
|
20B2ADF3000
|
unkown
|
page read and write
|
|
|
|
7FF54BFC7000
|
unkown
|
page readonly
|
|
|
|
572000
|
unkown
|
page read and write
|
|
|
|
7FF5C929D000
|
unkown
|
page readonly
|
|
|
|
7FF501722000
|
unkown
|
page readonly
|
|
|
|
20B2AD83000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F2A000
|
unkown
|
page readonly
|
|
|
|
7FF5E5FC4000
|
unkown
|
page readonly
|
|
|
|
7FF54771C000
|
unkown
|
page readonly
|
|
|
|
1D3695C0000
|
unkown
|
page read and write
|
|
|
|
7FF5BB504000
|
unkown
|
page readonly
|
|
|
|
B53951B000
|
unkown
|
page read and write
|
|
|
|
20B2AE32000
|
unkown
|
page read and write
|
|
|
|
7FF5BB41A000
|
unkown
|
page readonly
|
|
|
|
1DA50B02000
|
unkown
|
page read and write
|
|
|
|
7FF5012F2000
|
unkown
|
page readonly
|
|
|
|
20B2AD45000
|
unkown
|
page read and write
|
|
|
|
7FF5197F3000
|
unkown
|
page readonly
|
|
|
|
1DA50A29000
|
unkown
|
page read and write
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
7FF54C342000
|
unkown
|
page readonly
|
|
|
|
7FF501882000
|
unkown
|
page readonly
|
|
|
|
12293A70000
|
unkown
|
page readonly
|
|
|
|
20CA6740000
|
unkown
|
page readonly
|
|
|
|
2911000
|
unkown
|
page readonly
|
|
|
|
7FF54C27F000
|
unkown
|
page readonly
|
|
|
|
7FF50176F000
|
unkown
|
page readonly
|
|
|
|
20CA6400000
|
unkown
|
page readonly
|
|
|
|
3115000
|
unkown
|
page read and write
|
|
|
|
7FF5E5EE5000
|
unkown
|
page readonly
|
|
|
|
20CA6991000
|
unkown
|
page read and write
|
|
|
|
28B1000
|
unkown
|
page readonly
|
|
|
|
7FF5C9288000
|
unkown
|
page readonly
|
|
|
|
20CA69D2000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F48000
|
unkown
|
page readonly
|
|
|
|
1D369590000
|
heap default
|
page read and write
|
|
|
|
7FF50179B000
|
unkown
|
page readonly
|
|
|
|
7FF5C9225000
|
unkown
|
page readonly
|
|
|
|
20CA6976000
|
unkown
|
page read and write
|
|
|
|
20B2AD24000
|
unkown
|
page read and write
|
|
|
|
7FF5E5741000
|
unkown
|
page readonly
|
|
|
|
1DA50A3F000
|
unkown
|
page read and write
|
|
|
|
7FF5BB2C3000
|
unkown
|
page readonly
|
|
|
|
1459E7F000
|
unkown
|
page read and write
|
|
|
|
287C000
|
unkown
|
page readonly
|
|
|
|
20B2AD43000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
20B28D4C000
|
unkown
|
page read and write
|
|
|
|
20CA6740000
|
unkown
|
page read and write
|
|
|
|
20B2AD24000
|
unkown
|
page read and write
|
|
|
|
20B28E00000
|
unkown
|
page readonly
|
|
|
|
7FF5195BA000
|
unkown
|
page readonly
|
|
|
|
35934FE000
|
unkown
|
page read and write
|
|
|
|
20CA6982000
|
unkown
|
page read and write
|
|
|
|
7FF5D9816000
|
unkown
|
page readonly
|
|
|
|
7FF501369000
|
unkown
|
page readonly
|
|
|
|
2889000
|
unkown
|
page readonly
|
|
|
|
20B2B010000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F56000
|
unkown
|
page readonly
|
|
|
|
7FF501753000
|
unkown
|
page readonly
|
|
|
|
20CA6E02000
|
unkown
|
page read and write
|
|
|
|
20B28CCA000
|
unkown
|
page read and write
|
|
|
|
20CA6E02000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
1229343C000
|
unkown
|
page read and write
|
|
|
|
20B2AF00000
|
unkown
|
page read and write
|
|
|
|
285D000
|
unkown
|
page readonly
|
|
|
|
1DA50A56000
|
unkown
|
page read and write
|
|
|
|
2722000
|
unkown
|
page readonly
|
|
|
|
4AB000
|
unkown
|
page read and write
|
|
|
|
7FF5BAC2B000
|
unkown
|
page readonly
|
|
|
|
7FF5477D4000
|
unkown
|
page readonly
|
|
|
|
1DA509F0000
|
unkown
|
page readonly
|
|
|
|
7FF5E5E80000
|
unkown
|
page readonly
|
|
|
|
7FF5BB197000
|
unkown
|
page readonly
|
|
|
|
7FF5BB49D000
|
unkown
|
page readonly
|
|
|
|
1C443390000
|
unkown
|
page readonly
|
|
|
|
20CA6070000
|
unkown
|
page read and write
|
|
|
|
7FF54BDBE000
|
unkown
|
page readonly
|
|
|
|
12293467000
|
unkown
|
page read and write
|
|
|
|
7FF5C9071000
|
unkown
|
page readonly
|
|
|
|
559000
|
unkown
|
page read and write
|
|
|
|
B53A679000
|
unkown
|
page read and write
|
|
|
|
20B2B610000
|
unkown
|
page read and write
|
|
|
|
35935F5000
|
unkown
|
page read and write
|
|
|
|
7FF54C19D000
|
unkown
|
page readonly
|
|
|
|
2722000
|
unkown
|
page readonly
|
|
|
|
20B2AB90000
|
unkown
|
page read and write
|
|
|
|
7FF5017E4000
|
unkown
|
page readonly
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
575000
|
unkown
|
page read and write
|
|
|
|
7FF5198B3000
|
unkown
|
page readonly
|
|
|
|
7FF519961000
|
unkown
|
page readonly
|
|
|
|
1DA50A13000
|
unkown
|
page read and write
|
|
|
|
20CA6922000
|
unkown
|
page read and write
|
|
|
|
30F8000
|
unkown
|
page read and write
|
|
|
|
22C87313000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B4E000
|
unkown
|
page readonly
|
|
|
|
2CA2000
|
unkown
|
page read and write
|
|
|
|
20CA69A6000
|
unkown
|
page read and write
|
|
|
|
7FF5C8DE6000
|
unkown
|
page readonly
|
|
|
|
1DA50980000
|
heap private
|
page read and write
|
|
|
|
22C8723F000
|
unkown
|
page read and write
|
|
|
|
7FF5E5EA3000
|
unkown
|
page readonly
|
|
|
|
1C443508000
|
unkown
|
page read and write
|
|
|
|
20CA6991000
|
unkown
|
page read and write
|
|
|
|
90AE28B000
|
unkown
|
page read and write
|
|
|
|
272E000
|
unkown
|
page readonly
|
|
|
|
A26B7A000
|
unkown
|
page read and write
|
|
|
|
7FF5D99C7000
|
unkown
|
page readonly
|
|
|
|
7FF5E5B9C000
|
unkown
|
page readonly
|
|
|
|
7FF54C084000
|
unkown
|
page readonly
|
|
|
|
20CA6082000
|
unkown
|
page read and write
|
|
|
|
7FF5E5DDB000
|
unkown
|
page readonly
|
|
|
|
1C443C02000
|
unkown
|
page read and write
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
28A3000
|
unkown
|
page readonly
|
|
|
|
B53A4FB000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
1FF1163C000
|
unkown
|
page read and write
|
|
|
|
12293462000
|
unkown
|
page read and write
|
|
|
|
D2F58F9000
|
unkown
|
page read and write
|
|
|
|
7FF547734000
|
unkown
|
page readonly
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
7FF501732000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
20B28C63000
|
unkown
|
page read and write
|
|
|
|
20B28CBD000
|
unkown
|
page read and write
|
|
|
|
1C443240000
|
heap private
|
page read and write
|
|
|
|
CAF797A000
|
unkown
|
page read and write
|
|
|
|
7FF54C086000
|
unkown
|
page readonly
|
|
|
|
20CA6991000
|
unkown
|
page read and write
|
|
|
|
B53A27B000
|
unkown
|
page read and write
|
|
|
|
7FF5C927F000
|
unkown
|
page readonly
|
|
|
|
7FF54C00B000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
7FF5C930A000
|
unkown
|
page readonly
|
|
|
|
20CA6982000
|
unkown
|
page read and write
|
|
|
|
14596FB000
|
unkown
|
page read and write
|
|
|
|
20CA6750000
|
unkown
|
page read and write
|
|
|
|
7FF5E5FD2000
|
unkown
|
page readonly
|
|
|
|
28AA000
|
unkown
|
page readonly
|
|
|
|
20B28C6E000
|
unkown
|
page read and write
|
|
|
|
7FF5199E2000
|
unkown
|
page readonly
|
|
|
|
31D0000
|
unkown
|
page readonly
|
|
|
|
1229347A000
|
unkown
|
page read and write
|
|
|
|
122933B0000
|
unkown
|
page readonly
|
|
|
|
28B1000
|
unkown
|
page readonly
|
|
|
|
1C443513000
|
unkown
|
page read and write
|
|
|
|
7FF5D9D41000
|
unkown
|
page readonly
|
|
|
|
6180000
|
unkown
|
page readonly
|
|
|
|
20CA6113000
|
unkown
|
page read and write
|
|
|
|
20B2AEC8000
|
unkown
|
page read and write
|
|
|
|
7FF5477E2000
|
unkown
|
page readonly
|
|
|
|
7FF5BB301000
|
unkown
|
page readonly
|
|
|
|
359347D000
|
unkown
|
page read and write
|
|
|
|
20B2AD1A000
|
unkown
|
page read and write
|
|
|
|
7FF54C1A3000
|
unkown
|
page readonly
|
|
|
|
20B2ADDB000
|
unkown
|
page read and write
|
|
|
|
1D3695A6000
|
heap default
|
page read and write
|
|
|
|
7FF5E5BAF000
|
unkown
|
page readonly
|
|
|
|
7FF5476F0000
|
unkown
|
page readonly
|
|
|
|
287C000
|
unkown
|
page readonly
|
|
|
|
2EE0000
|
heap private
|
page read and write
|
|
|
|
28C6000
|
unkown
|
page readonly
|
|
|
|
20B2AD30000
|
unkown
|
page read and write
|
|
|
|
7FF54BDB2000
|
unkown
|
page readonly
|
|
|
|
1C443483000
|
unkown
|
page read and write
|
|
|
|
1D3695B9000
|
unkown
|
page read and write
|
|
|
|
72FE000
|
unkown
|
page read and write
|
|
|
|
20CA603A000
|
unkown
|
page read and write
|
|
|
|
20CA6991000
|
unkown
|
page read and write
|
|
|
|
20B2ADF5000
|
unkown
|
page read and write
|
|
|
|
20B28CC8000
|
unkown
|
page read and write
|
|
|
|
1DA525C0000
|
unkown
|
page readonly
|
|
|
|
7FF51995E000
|
unkown
|
page readonly
|
|
|
|
20B28ED0000
|
unkown
|
page write copy
|
|
|
|
2897000
|
unkown
|
page readonly
|
|
|
|
7350000
|
unkown
|
page read and write
|
|
|
|
B539A7A000
|
unkown
|
page read and write
|
|
|
|
B539B79000
|
unkown
|
page read and write
|
|
|
|
2932000
|
unkown
|
page readonly
|
|
|
|
20CA6720000
|
unkown
|
page readonly
|
|
|
|
7FF54C0FA000
|
unkown
|
page readonly
|
|
|
|
3593877000
|
unkown
|
page read and write
|
|
|
|
7FF54BA5B000
|
unkown
|
page readonly
|
|
|
|
20B28CA0000
|
unkown
|
page read and write
|
|
|
|
7FF51993A000
|
unkown
|
page readonly
|
|
|
|
20B2AF02000
|
unkown
|
page read and write
|
|
|
|
558000
|
unkown
|
page read and write
|
|
|
|
D2F552B000
|
unkown
|
page read and write
|
|
|
|
7FF547744000
|
unkown
|
page readonly
|
|
|
|
7FF5E5F59000
|
unkown
|
page readonly
|
|
|
|
7FF5BB31B000
|
unkown
|
page readonly
|
|
|
|
B1B000
|
unkown
|
page read and write
|
|
|
|
7FF54C2AF000
|
unkown
|
page readonly
|
|
|
|
2943000
|
unkown
|
page readonly
|
|
|
|
7B9E000
|
unkown
|
page read and write
|
|
|
|
20B28D6B000
|
unkown
|
page read and write
|
|
|
|
2873000
|
unkown
|
page readonly
|
|
|
|
7FF54C2A4000
|
unkown
|
page readonly
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
20CA6086000
|
unkown
|
page read and write
|
|
|
|
1C443477000
|
unkown
|
page read and write
|
|
|
|
1FF11800000
|
unkown
|
page readonly
|
|
|
|
7FF54C2B8000
|
unkown
|
page readonly
|
|
|
|
20CA60E7000
|
unkown
|
page read and write
|
|
|
|
20CA6760000
|
unkown
|
page readonly
|
|
|
|
977000
|
heap private
|
page read and write
|
|
|
|
20CA6013000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
20B28CF2000
|
unkown
|
page read and write
|
|
|
|
30F8000
|
unkown
|
page read and write
|
|
|
|
2F4E000
|
unkown
|
page read and write
|
|
|
|
20CA604C000
|
unkown
|
page read and write
|
|
|
|
7FF5017EE000
|
unkown
|
page readonly
|
|
|
|
7FF5C9264000
|
unkown
|
page readonly
|
|
|
|
20B2AECF000
|
unkown
|
page read and write
|
|
|
|
7FF5C90C3000
|
unkown
|
page readonly
|
|
|
|
7FF5D9AA1000
|
unkown
|
page readonly
|
|
|
|
2542000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
7FF519715000
|
unkown
|
page readonly
|
|
|
|
77B217E000
|
unkown
|
page read and write
|
|
|
|
7FF5C922B000
|
unkown
|
page readonly
|
|
|
|
23A000
|
unkown
|
page read and write
|
|
|
|
7FF54C287000
|
unkown
|
page readonly
|
|
|
|
7FF5BB50A000
|
unkown
|
page readonly
|
|
|
|
7FF54C050000
|
unkown
|
page readonly
|
|
|
|
20CA5F30000
|
unkown
|
page readonly
|
|
|
|
20CA66B0000
|
unkown
|
page readonly
|
|
|
|
20B28C6F000
|
unkown
|
page read and write
|
|
|
|
572000
|
unkown
|
page read and write
|
|
|
|
7440000
|
unkown
|
page read and write
|
|
|
|
B53A47A000
|
unkown
|
page read and write
|
|
|
|
7FF5198EA000
|
unkown
|
page readonly
|
|
|
|
7FF5E5F34000
|
unkown
|
page readonly
|
|
|
|
20B2AD11000
|
unkown
|
page read and write
|
|
|
|
20CA6E02000
|
unkown
|
page read and write
|
|
|
|
7FF5BB46A000
|
unkown
|
page readonly
|
|
|
|
1C443380000
|
unkown
|
page readonly
|
|
|
|
6F0000
|
heap default
|
page read and write
|
|
|
|
7FF5D9825000
|
unkown
|
page readonly
|
|
|
|
58E0000
|
unkown
|
page readonly
|
|
|
|
7FF5D9CC6000
|
unkown
|
page readonly
|
|
|
|
7FF5BB373000
|
unkown
|
page readonly
|
|
|
|
7FF54C1BC000
|
unkown
|
page readonly
|
|
|
|
A26C7C000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
1DA50CD0000
|
unkown
|
page write copy
|
|
|
|
7FF50154B000
|
unkown
|
page readonly
|
|
|
|
7FF54C294000
|
unkown
|
page readonly
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
1FF11670000
|
unkown
|
page read and write
|
|
|
|
7FF5199E1000
|
unkown
|
page readonly
|
|
|
|
20CA698F000
|
unkown
|
page read and write
|
|
|
|
7FF54C29A000
|
unkown
|
page readonly
|
|
|
|
20B2AD4E000
|
unkown
|
page read and write
|
|
|
|
25B3000
|
unkown
|
page readonly
|
|
|
|
1C443A60000
|
unkown
|
page readonly
|
|
|
|
7FF5E5D39000
|
unkown
|
page readonly
|
|
|
|
7FF5D9CBE000
|
unkown
|
page readonly
|
|
|
|
7FF5C920C000
|
unkown
|
page readonly
|
|
|
|
20CA66D0000
|
unkown
|
page write copy
|
|
|
|
12293482000
|
unkown
|
page read and write
|
|
|
|
7FF5C9220000
|
unkown
|
page readonly
|
|
|
|
20CA6E02000
|
unkown
|
page read and write
|
|
|
|
7FF50177A000
|
unkown
|
page readonly
|
|
|
|
20B2AD22000
|
unkown
|
page read and write
|
|
|
|
7FF5017BF000
|
unkown
|
page readonly
|
|
|
|
22C871E0000
|
unkown
|
page read and write
|
|
|
|
1C443400000
|
unkown
|
page read and write
|
|
|
|
22C870E0000
|
heap private
|
page read and write
|
|
|
|
7FF50175F000
|
unkown
|
page readonly
|
|
|
|
7FF51914D000
|
unkown
|
page readonly
|
|
|
|
1FF1164E000
|
unkown
|
page read and write
|
|
|
|
7FF54BE65000
|
unkown
|
page readonly
|
|
|
|
1FF11629000
|
unkown
|
page read and write
|
|
|
|
2B80000
|
unkown
|
page readonly
|
|
|
|
7FF51996D000
|
unkown
|
page readonly
|
|
|
|
7FF54BF29000
|
unkown
|
page readonly
|
|
|
|
7FF5C9296000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC25000
|
unkown
|
page readonly
|
|
|
|
30F0000
|
unkown
|
page read and write
|
|
|
|
20B28C63000
|
unkown
|
page read and write
|
|
|
|
7FF54BE16000
|
unkown
|
page readonly
|
|
|
|
1C443429000
|
unkown
|
page read and write
|
|
|
|
22C87140000
|
heap default
|
page read and write
|
|
|
|
B539CFA000
|
unkown
|
page read and write
|
|
|
|
20B2B113000
|
unkown
|
page read and write
|
|
|
|
7FF5E5D05000
|
unkown
|
page readonly
|
|
|
|
7FF5BB40C000
|
unkown
|
page readonly
|
|
|
|
20CA6931000
|
unkown
|
page read and write
|
|
|
|
7FF50156F000
|
unkown
|
page readonly
|
|
|
|
7FF54C334000
|
unkown
|
page readonly
|
|
|
|
2843000
|
unkown
|
page readonly
|
|
|
|
7FF5BB44F000
|
unkown
|
page readonly
|
|
|
|
7FF5BB42B000
|
unkown
|
page readonly
|
|
|
|
12293508000
|
unkown
|
page read and write
|
|
|
|
2EEA000
|
heap private
|
page read and write
|
|
|
|
7FF54C267000
|
unkown
|
page readonly
|
|
|
|
1229345B000
|
unkown
|
page read and write
|
|
|
|
20B2AD00000
|
unkown
|
page read and write
|
|
|
|
1C44343C000
|
unkown
|
page read and write
|
|
|
|
1C44344B000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page readonly
|
|
|
|
D2F59FF000
|
unkown
|
page read and write
|
|
|
|
1459C7E000
|
unkown
|
page read and write
|
|
|
|
20CA698E000
|
unkown
|
page read and write
|
|
|
|
CAF767E000
|
unkown
|
page read and write
|
|
|
|
1FF115B0000
|
unkown
|
page read and write
|
|
|
|
7FF5C916D000
|
unkown
|
page readonly
|
|
|
|
20CA6962000
|
unkown
|
page read and write
|
|
|
|
20CA6E61000
|
unkown
|
page read and write
|
|
|
|
7FF5BB40A000
|
unkown
|
page readonly
|
|
|
|
20B28B60000
|
heap private
|
page read and write
|
|
|
|
20CA6948000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
20B2B110000
|
unkown
|
page read and write
|
|
|
|
B539DFB000
|
unkown
|
page read and write
|
|
|
|
B53A1FD000
|
unkown
|
page read and write
|
|
|
|
7FF54C27C000
|
unkown
|
page readonly
|
|
|
|
7FF5017D4000
|
unkown
|
page readonly
|
|
|
|
20CA6983000
|
unkown
|
page read and write
|
|
|
|
7FF51991C000
|
unkown
|
page readonly
|
|
|
|
7FF5BAFE0000
|
unkown
|
page readonly
|
|
|
|
7FF5E5F5D000
|
unkown
|
page readonly
|
|
|
|
7FF5C921A000
|
unkown
|
page readonly
|
|
|
|
2889000
|
unkown
|
page readonly
|
|
|
|
7FF5C9299000
|
unkown
|
page readonly
|
|
|
|
2542000
|
unkown
|
page readonly
|
|
|
|
2ED0000
|
unkown
|
page readonly
|
|
|
|
20B2AD13000
|
unkown
|
page read and write
|
|
|
|
20B28C6E000
|
unkown
|
page read and write
|
|
|
|
20CA609F000
|
unkown
|
page read and write
|
|
|
|
7FF50168B000
|
unkown
|
page readonly
|
|
|
|
1D3695A1000
|
unkown
|
page read and write
|
|
|
|
7FF5C8F97000
|
unkown
|
page readonly
|
|
|
|
20B2ADD3000
|
unkown
|
page read and write
|
|
|
|
A2679E000
|
unkown
|
page read and write
|
|
|
|
28CB000
|
unkown
|
page readonly
|
|
|
|
20CA6946000
|
unkown
|
page read and write
|
|
|
|
7FF519892000
|
unkown
|
page readonly
|
|
|
|
7FF547758000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
B539FFA000
|
unkown
|
page read and write
|
|
|
|
20B2B610000
|
unkown
|
page read and write
|
|
|
|
12293502000
|
unkown
|
page read and write
|
|
|
|
7FF501801000
|
unkown
|
page readonly
|
|
|
|
7FF5476FB000
|
unkown
|
page readonly
|
|
|
|
7FF5E573D000
|
unkown
|
page readonly
|
|
|
|
2897000
|
unkown
|
page readonly
|
|
|
|
CAF73AE000
|
unkown
|
page read and write
|
|
|
|
7FF5BB0FA000
|
unkown
|
page readonly
|
|
|
|
22C88D70000
|
unkown
|
page readonly
|
|
|
|
1C4432B0000
|
unkown
|
page readonly
|
|
|
|
7FF501730000
|
unkown
|
page readonly
|
|
|
|
145977E000
|
unkown
|
page read and write
|
|
|
|
28AA000
|
unkown
|
page readonly
|
|
|
|
1FF1164A000
|
unkown
|
page read and write
|
|
|
|
1FF115A0000
|
unkown
|
page readonly
|
|
|
|
90AE7FB000
|
unkown
|
page read and write
|
|
|
|
20B2AE3D000
|
unkown
|
page read and write
|
|
|
|
7FF54C2BE000
|
unkown
|
page readonly
|
|
|
|
7FF54C14B000
|
unkown
|
page readonly
|
|
|
|
530000
|
heap default
|
page read and write
|
|
|
|
7FF54BE10000
|
unkown
|
page readonly
|
|
|
|
555000
|
unkown
|
page read and write
|
|
|
|
1FF11674000
|
unkown
|
page read and write
|
|
|
|
28C2000
|
unkown
|
page readonly
|
|
|
|
7FF500FED000
|
unkown
|
page readonly
|
|
|
|
7FF5017A7000
|
unkown
|
page readonly
|
|
|
|
7FF54C1F0000
|
unkown
|
page readonly
|
|
|
|
510000
|
unkown
|
page read and write
|
|
|
|
20B2C042000
|
unkown
|
page read and write
|
|
|
|
20B2B110000
|
unkown
|
page read and write
|
|
|
|
1459AF5000
|
unkown
|
page read and write
|
|
|
|
7FF501806000
|
unkown
|
page readonly
|
|
|
|
2843000
|
unkown
|
page readonly
|
|
|
|
20CA60BF000
|
unkown
|
page read and write
|
|
|
|
20B2AF42000
|
unkown
|
page read and write
|
|
|
|
7FF501795000
|
unkown
|
page readonly
|
|
|
|
20B2ABF0000
|
unkown
|
page readonly
|
|
|
|
7FF5D9C4E000
|
unkown
|
page readonly
|
|
|
|
7FF5D9B31000
|
unkown
|
page readonly
|
|
|
|
12293E00000
|
unkown
|
page readonly
|
|
|
|
7FF5015C4000
|
unkown
|
page readonly
|
|
|
|
20B2B310000
|
unkown
|
page read and write
|
|
|
|
7FF519711000
|
unkown
|
page readonly
|
|
|
|
20B28C8B000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CC9000
|
unkown
|
page readonly
|
|
|
|
CAF7B7F000
|
unkown
|
page read and write
|
|
|
|
3090000
|
unkown
|
page readonly
|
|
|
|
7FF5E5BAA000
|
unkown
|
page readonly
|
|
|
|
7FF54C0A1000
|
unkown
|
page readonly
|
|
|
|
3593A7F000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
20CA696A000
|
unkown
|
page read and write
|
|
|
|
1D369690000
|
unkown
|
page readonly
|
|
|
|
7FF5D9CB8000
|
unkown
|
page readonly
|
|
|
|
D2F55AE000
|
unkown
|
page read and write
|
|
|
|
20CA698A000
|
unkown
|
page read and write
|
|
|
|
20B28D26000
|
unkown
|
page read and write
|
|
|
|
2938000
|
unkown
|
page readonly
|
|
|
|
20B28F20000
|
unkown
|
page readonly
|
|
|
|
7FF5E5EE0000
|
unkown
|
page readonly
|
|
|
|
20B2A7C0000
|
unkown
|
page readonly
|
|
|
|
7FF5D9BBC000
|
unkown
|
page readonly
|
|
|
|
7FF5C9311000
|
unkown
|
page readonly
|
|
|
|
20CA6942000
|
unkown
|
page read and write
|
|
|
|
7FF5017BC000
|
unkown
|
page readonly
|
|
|
|
22C87202000
|
unkown
|
page read and write
|
|
|
|
20CA6E02000
|
unkown
|
page read and write
|
|
|
|
2943000
|
unkown
|
page readonly
|
|
|
|
20CA6931000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page readonly
|
|
|
|
7340000
|
unkown
|
page read and write
|
|
|
|
7FF54BE67000
|
unkown
|
page readonly
|
|
|
|
28AF000
|
unkown
|
page readonly
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
2EF0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C50000
|
unkown
|
page readonly
|
|
|
|
20B28D6A000
|
unkown
|
page read and write
|
|
|
|
20B2AED1000
|
unkown
|
page read and write
|
|
|
|
7FF5D9BA3000
|
unkown
|
page readonly
|
|
|
|
20B28CC3000
|
unkown
|
page read and write
|
|
|
|
35931CC000
|
unkown
|
page read and write
|
|
|
|
30F5000
|
unkown
|
page read and write
|
|
|
|
20B2AB10000
|
unkown
|
page read and write
|
|
|
|
2839000
|
unkown
|
page readonly
|
|
|
|
7FF5C920A000
|
unkown
|
page readonly
|
|
|
|
20B2ABA0000
|
unkown
|
page read and write
|
|
|
|
20B28CCC000
|
unkown
|
page read and write
|
|
|
|
A26AF9000
|
unkown
|
page read and write
|
|
|
|
7FF5C9237000
|
unkown
|
page readonly
|
|
|
|
7FF5015B1000
|
unkown
|
page readonly
|
|
|
|
30FC000
|
unkown
|
page read and write
|
|
|
|
20CA6116000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F0F000
|
unkown
|
page readonly
|
|
|
|
20B2ABC0000
|
unkown
|
page read and write
|
|
|
|
2911000
|
unkown
|
page readonly
|
|
|
|
D2F5A7E000
|
unkown
|
page read and write
|
|
|
|
77B21FA000
|
unkown
|
page read and write
|
|
|
|
1FF1164C000
|
unkown
|
page read and write
|
|
|
|
7FF501671000
|
unkown
|
page readonly
|
|
|
|
20CA6991000
|
unkown
|
page read and write
|
|
|
|
20CA6941000
|
unkown
|
page read and write
|
|
|
|
7FF5C924F000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
20B28D39000
|
unkown
|
page read and write
|
|
|
|
20CA69A5000
|
unkown
|
page read and write
|
|
|
|
7FF5476F5000
|
unkown
|
page readonly
|
|
|
|
1C443413000
|
unkown
|
page read and write
|
|
|
|
90AE6F5000
|
unkown
|
page read and write
|
|
|
|
7FF501698000
|
unkown
|
page readonly
|
|
|
|
7FF5E5DC1000
|
unkown
|
page readonly
|
|
|
|
D4E000
|
unkown
|
page readonly
|
|
|
|
7FF5016DD000
|
unkown
|
page readonly
|
|
|
|
B53A3FC000
|
unkown
|
page read and write
|
|
|
|
20CA60FA000
|
unkown
|
page read and write
|
|
|
|
B539AFA000
|
unkown
|
page read and write
|
|
|
|
550000
|
unkown
|
page read and write
|
|
|
|
7FF501693000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
7FF500FF1000
|
unkown
|
page readonly
|
|
|
|
20B2AF82000
|
unkown
|
page read and write
|
|
|
|
20CA6969000
|
unkown
|
page read and write
|
|
|
|
20B2AE00000
|
unkown
|
page read and write
|
|
|
|
22C87213000
|
unkown
|
page read and write
|
|
|
|
20B2AD7D000
|
unkown
|
page read and write
|
|
|
|
20CA69C3000
|
unkown
|
page read and write
|
|
|
|
7FF5E5FD1000
|
unkown
|
page readonly
|
|
|
|
7FF5C918C000
|
unkown
|
page readonly
|
|
|
|
25B3000
|
unkown
|
page readonly
|
|
|
|
2895000
|
unkown
|
page readonly
|
|
|
|
CAF7D78000
|
unkown
|
page read and write
|
|
|
|
7FF54C158000
|
unkown
|
page readonly
|
|
|
|
20B2AEC5000
|
unkown
|
page read and write
|
|
|
|
1459BFB000
|
unkown
|
page read and write
|
|
|
|
20B28C13000
|
unkown
|
page read and write
|
|
|
|
7FF50172C000
|
unkown
|
page readonly
|
|
|
|
B539BFA000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C67000
|
unkown
|
page readonly
|
|
|
|
7FF5BB384000
|
unkown
|
page readonly
|
|
|
|
7FF5E5F4E000
|
unkown
|
page readonly
|
|
|
|
7FF5D94BB000
|
unkown
|
page readonly
|
|
|
|
20B28CF0000
|
unkown
|
page read and write
|
|
|
|
7FF5017C7000
|
unkown
|
page readonly
|
|
|
|
20CA6900000
|
unkown
|
page read and write
|
|
|
|
20B28D19000
|
unkown
|
page read and write
|
|
|
|
1DA524C0000
|
unkown
|
page read and write
|
|
|
|
20B2AD80000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A2B000
|
unkown
|
page readonly
|
|
|
|
20CA604E000
|
unkown
|
page read and write
|
|
|
|
7FF5C9101000
|
unkown
|
page readonly
|
|
|
|
B53997A000
|
unkown
|
page read and write
|
|
|
|
6AD000
|
unkown
|
page read and write
|
|
|
|
7FF54BD2E000
|
unkown
|
page readonly
|
|
|
|
1D369597000
|
heap default
|
page read and write
|
|
|
|
7FF50144C000
|
unkown
|
page readonly
|
|
|
|
1D3698A0000
|
heap private
|
page read and write
|
|
|
|
20CA6941000
|
unkown
|
page read and write
|
|
|
|
275F000
|
unkown
|
page readonly
|
|
|
|
30D0000
|
heap default
|
page read and write
|
|
|
|
7FF5198F0000
|
unkown
|
page readonly
|
|
|
|
7FF519934000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
20B2C082000
|
unkown
|
page read and write
|
|
|
|
20CA6049000
|
unkown
|
page read and write
|
|
|
|
7FF54C250000
|
unkown
|
page readonly
|
|
|
|
7FF5D9B4B000
|
unkown
|
page readonly
|
|
|
|
7FF54C25B000
|
unkown
|
page readonly
|
|
|
|
20B2B010000
|
unkown
|
page read and write
|
|
|
|
1C443E00000
|
unkown
|
page readonly
|
|
|
|
20B2AD1B000
|
unkown
|
page read and write
|
|
|
|
7FF5BB474000
|
unkown
|
page readonly
|
|
|
|
7FF5C9173000
|
unkown
|
page readonly
|
|
|
|
20CA6E02000
|
unkown
|
page read and write
|
|
|
|
2865000
|
unkown
|
page readonly
|
|
|
|
7FF5D9C7C000
|
unkown
|
page readonly
|
|
|
|
7FF5D9D3A000
|
unkown
|
page readonly
|
|
|
|
53A000
|
heap default
|
page read and write
|
|
|
|
2BF0000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
359367E000
|
unkown
|
page read and write
|
|
|
|
B53A2FB000
|
unkown
|
page read and write
|
|
|
|
7FF519890000
|
unkown
|
page readonly
|
|
|
|
1FF11702000
|
unkown
|
page read and write
|
|
|
|
7FF519969000
|
unkown
|
page readonly
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
20CA603C000
|
unkown
|
page read and write
|
|
|
|
20CA6989000
|
unkown
|
page read and write
|
|
|
|
7FF5C911B000
|
unkown
|
page readonly
|
|
|
|
20B28C70000
|
unkown
|
page read and write
|
|
|
|
7BE0000
|
unkown
|
page read and write
|
|
|
|
20CA69CF000
|
unkown
|
page read and write
|
|
|
|
7FF5E5D01000
|
unkown
|
page readonly
|
|
|
|
7FF54C255000
|
unkown
|
page readonly
|
|
|
|
B539E7C000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
20B28C00000
|
unkown
|
page read and write
|
|
|
|
7FF5BB464000
|
unkown
|
page readonly
|
|
|
|
7FF50178E000
|
unkown
|
page readonly
|
|
|
|
CAF787B000
|
unkown
|
page read and write
|
|
|
|
1DA52930000
|
unkown
|
page read and write
|
|
|
|
7BF0000
|
unkown
|
page read and write
|
|
|
|
289D000
|
unkown
|
page readonly
|
|
|
|
7FF547043000
|
unkown
|
page readonly
|
|
|
|
7FF501874000
|
unkown
|
page readonly
|
|
|
|
20B2B010000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CAF000
|
unkown
|
page readonly
|
|
|
|
20B28CC9000
|
unkown
|
page read and write
|
|
|
|
77B20FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F51000
|
unkown
|
page readonly
|
|
|
|
7FF5BAFF5000
|
unkown
|
page readonly
|
|
|
|
7FF5C9257000
|
unkown
|
page readonly
|
|
|
|
1229347A000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C94000
|
unkown
|
page readonly
|
|
|
|
1FF12000000
|
unkown
|
page readonly
|
|
|
|
20B2B310000
|
unkown
|
page read and write
|
|
|
|
20B28CCA000
|
unkown
|
page read and write
|
|
|
|
20B28CC6000
|
unkown
|
page read and write
|
|
|
|
20CA6051000
|
unkown
|
page read and write
|
|
|
|
20CA6993000
|
unkown
|
page read and write
|
|
|
|
90AE38F000
|
unkown
|
page read and write
|
|
|
|
20B28CC5000
|
unkown
|
page read and write
|
|
|
|
7FF501556000
|
unkown
|
page readonly
|
|
|
|
7FF5197F8000
|
unkown
|
page readonly
|
|
|
|
7FF5017DA000
|
unkown
|
page readonly
|
|
|
|
B539F7B000
|
unkown
|
page read and write
|
|
|
|
122933A0000
|
unkown
|
page readonly
|
|
|
|
20CA6965000
|
unkown
|
page read and write
|
|
|
|
20B2A6C0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CA4000
|
unkown
|
page readonly
|
|
|
|
7FF54C2C6000
|
unkown
|
page readonly
|
|
|
|
553000
|
heap default
|
page read and write
|
|
|
|
7FF5199DA000
|
unkown
|
page readonly
|
|
|
|
20B2AB30000
|
heap private
|
page read and write
|
|
|
|
28C6000
|
unkown
|
page readonly
|
|
|
|
B5398FA000
|
unkown
|
page read and write
|
|
|
|
7FF54C33A000
|
unkown
|
page readonly
|
|
|
|
20CA60D4000
|
unkown
|
page read and write
|
|
|
|
2924000
|
unkown
|
page readonly
|
|
|
|
1D369790000
|
unkown
|
page readonly
|
|
|
|
12293500000
|
unkown
|
page read and write
|
|
|
|
20CA60B0000
|
unkown
|
page read and write
|
|
|
|
20B2ADC6000
|
unkown
|
page read and write
|
|
|
|
CAF7A77000
|
unkown
|
page read and write
|
|
|
|
20B28CC8000
|
unkown
|
page read and write
|
|
|
|
7FF5198FB000
|
unkown
|
page readonly
|
|
|
|
7FF5C9184000
|
unkown
|
page readonly
|
|
|
|
7FF5BB512000
|
unkown
|
page readonly
|
|
|
|
7FF54C23C000
|
unkown
|
page readonly
|
|
|
|
7FF5D9C7F000
|
unkown
|
page readonly
|
|
|
|
20B2AF02000
|
unkown
|
page read and write
|
|
|
|
20B2B210000
|
unkown
|
page read and write
|
|
|
|
22C87200000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page readonly
|
|
|
|
22C88C70000
|
unkown
|
page read and write
|
|
|
|
20B2B510000
|
unkown
|
page read and write
|
|
|
|
7FF54C341000
|
unkown
|
page readonly
|
|
|
|
12293600000
|
unkown
|
page readonly
|
|
|
|
B539EFB000
|
unkown
|
page read and write
|
|
|
|
7FF5BB457000
|
unkown
|
page readonly
|
|
|
|
289F000
|
unkown
|
page readonly
|
|
|
|
20B2C002000
|
unkown
|
page read and write
|
|
|
|
7FF54775E000
|
unkown
|
page readonly
|
|
|
|
20CA6932000
|
unkown
|
page read and write
|
|
|
|
20CA698A000
|
unkown
|
page read and write
|
|
|
|
7FF547728000
|
unkown
|
page readonly
|
|
|
|
7FF54C1B4000
|
unkown
|
page readonly
|
|
|
|
1C4432A0000
|
heap default
|
page read and write
|
|
|
|
650000
|
unkown
|
page read and write
|
|
|
|
7FF5E5E82000
|
unkown
|
page readonly
|
|
|
|
90AE30E000
|
unkown
|
page read and write
|
|
|
|
7FF5198F5000
|
unkown
|
page readonly
|
|
|
|
7FF5015D1000
|
unkown
|
page readonly
|
|
|
|
20B2C000000
|
unkown
|
page read and write
|
|
|
|
12293400000
|
unkown
|
page read and write
|
|
|
|
20CA6000000
|
unkown
|
page read and write
|
|
|
|
B53A07B000
|
unkown
|
page read and write
|
|
|
|
20B2AF02000
|
unkown
|
page read and write
|
|
|
|
20B28C5B000
|
unkown
|
page read and write
|
|
|
|
20B28C90000
|
unkown
|
page read and write
|
|
|
|
7FF5BB499000
|
unkown
|
page readonly
|
|
|
|
20B2B610000
|
unkown
|
page read and write
|
|
|
|
1C443449000
|
unkown
|
page read and write
|
|
|
|
7FF54C153000
|
unkown
|
page readonly
|
|
|
|
7FF5E5C9B000
|
unkown
|
page readonly
|
|
|
|
733F000
|
unkown
|
page read and write
|
|
|
|
20B2C200000
|
unkown
|
page readonly
|
|
|
|
20CA698E000
|
unkown
|
page read and write
|
|
|
|
20B28CC4000
|
unkown
|
page read and write
|
|
|
|
20B2AB90000
|
unkown
|
page read and write
|
|
|
|
20B2C005000
|
unkown
|
page read and write
|
|
|
|
20CA698A000
|
unkown
|
page read and write
|
|
|
|
20CA6959000
|
unkown
|
page read and write
|
|
|
|
A84000
|
heap private
|
page read and write
|
|
|
|
20CA6922000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C3C000
|
unkown
|
page readonly
|
|
|
|
20B2AE43000
|
unkown
|
page read and write
|
|
|
|
7FF5BB437000
|
unkown
|
page readonly
|
|
|
|
7FF54C0F3000
|
unkown
|
page readonly
|
|
|
|
7FF54BE25000
|
unkown
|
page readonly
|
|
|
|
7FF5195C7000
|
unkown
|
page readonly
|
|
|
|
7FF501092000
|
unkown
|
page readonly
|
|
|
|
20CA6200000
|
unkown
|
page readonly
|
|
|
|
CAF7EF8000
|
unkown
|
page read and write
|
|
|
|
1DA50A00000
|
unkown
|
page read and write
|
|
|
|
20CA6991000
|
unkown
|
page read and write
|
|
|
|
CAF7DFE000
|
unkown
|
page read and write
|
|
|
|
22C871A0000
|
unkown
|
page readonly
|
|
|
|
20B28D02000
|
unkown
|
page read and write
|
|
|
|
1C443600000
|
unkown
|
page readonly
|
|
|
|
284A000
|
unkown
|
page readonly
|
|
|
|
20B28CC3000
|
unkown
|
page read and write
|
|
|
|
20CA6E54000
|
unkown
|
page read and write
|
|
|
|
1FF114C0000
|
unkown
|
page readonly
|
|
|
|
7FF519749000
|
unkown
|
page readonly
|
|
|
|
7FF547047000
|
unkown
|
page readonly
|
|
|
|
1FF11E02000
|
unkown
|
page read and write
|
|
|
|
B53959E000
|
unkown
|
page read and write
|
|
|
|
1229342A000
|
unkown
|
page read and write
|
|
|
|
20CA698A000
|
unkown
|
page read and write
|
|
|
|
B5B000
|
unkown
|
page read and write
|
|
|
|
7FF501809000
|
unkown
|
page readonly
|
|
|
|
20CA6039000
|
unkown
|
page read and write
|
|
|
|
30DA000
|
heap default
|
page read and write
|
|
|
|
28C2000
|
unkown
|
page readonly
|
|
|
|
20B28CC7000
|
unkown
|
page read and write
|
|
|
|
7FF54C21B000
|
unkown
|
page readonly
|
|
|
|
A80000
|
heap private
|
page read and write
|
|
|
|
1FF1164B000
|
unkown
|
page read and write
|
|
|
|
2943000
|
unkown
|
page readonly
|
|
|
|
20B2ABB0000
|
unkown
|
page read and write
|
|
|
|
A26BFE000
|
unkown
|
page read and write
|
|
|
|
20CA604F000
|
unkown
|
page read and write
|
|
|
|
7FF5E5BB7000
|
unkown
|
page readonly
|
|
|
|
23E000
|
unkown
|
page read and write
|
|
|
|
2BD0000
|
unkown
|
page read and write
|
|
|
|
7FF5017F8000
|
unkown
|
page readonly
|
|
|
|
7FF5017FE000
|
unkown
|
page readonly
|
|
|
|
12293C02000
|
unkown
|
page read and write
|
|
|
|
B53A5FB000
|
unkown
|
page read and write
|
|
|
|
1FF114B0000
|
heap default
|
page read and write
|
|
|
|
7CE0000
|
unkown
|
page read and write
|
|
|
|
B53A57A000
|
unkown
|
page read and write
|
|
|
|
20B2B410000
|
unkown
|
page read and write
|
|
|
|
7FF5E5EDA000
|
unkown
|
page readonly
|
|
|
|
20B2B110000
|
unkown
|
page read and write
|
|
|
|
20B2ABD0000
|
unkown
|
page readonly
|
|
|
|
A26A7E000
|
unkown
|
page read and write
|
|
|
|
2770000
|
unkown
|
page readonly
|
|
|
|
7FF5C8A25000
|
unkown
|
page readonly
|
|
There are 1013 hidden memdumps, click here to show them.