Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
bDemJQO51z.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\upl[1].txt
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\tru.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{643AD4E1-DF56-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{643AD4E3-DF56-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\E3EB9BFB-9A3C-4BB8-990C-FB40D6108524
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\51A62567.png
|
PNG image data, 8 x 10, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\FF65F03C.png
|
PNG image data, 922 x 684, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\background_gradient[1]
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\ErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\bullet[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\http_404[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\info_48[1]
|
PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF5838B134AEB34B2C.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFF1BA8F1D432A84A7.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$bDemJQO51z.xlsb
|
data
|
dropped
|
|
There are 19 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -silent ..\tru.dll
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6756 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -silent ..\tru.dll
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://bussipod.xyz/index.htm
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://bussipod.xyz/index.htmRoot
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://bussipod.xyz/index.htmndex.htm
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
http://%s=%s&file://&os=%u.%u_%u_%u_x%uindex.html;
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://bussipod.xyz
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bussipod.xyz
|
45.153.230.139
|
|
|
|
promocioninmobiliaria.cl
|
184.175.93.196
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
45.153.230.139
|
bussipod.xyz
|
Russian Federation
|
|
|
|
184.175.93.196
|
promocioninmobiliaria.cl
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
-/>
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
./>
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CB6B
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
{9>
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{643AD4E1-DF56-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
There are 37 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
61C0000
|
heap private
|
page read and write
|
|
|
|
19E2F448000
|
unkown
|
page read and write
|
|
|
|
7FF5E29C1000
|
unkown
|
page readonly
|
|
|
|
7FF5E4CBA000
|
unkown
|
page readonly
|
|
|
|
2499EBE0000
|
unkown
|
page read and write
|
|
|
|
2499EDF3000
|
unkown
|
page read and write
|
|
|
|
7FF5E8ACC000
|
unkown
|
page readonly
|
|
|
|
7FF51EDDB000
|
unkown
|
page readonly
|
|
|
|
7FF5961AC000
|
unkown
|
page readonly
|
|
|
|
2499ED2C000
|
unkown
|
page read and write
|
|
|
|
2722F440000
|
unkown
|
page readonly
|
|
|
|
7FF5E3114000
|
unkown
|
page readonly
|
|
|
|
67720000
|
unkown image
|
page readonly
|
|
|
|
7FF5E2EF6000
|
unkown
|
page readonly
|
|
|
|
7FF51F08E000
|
unkown
|
page readonly
|
|
|
|
12151190000
|
unkown
|
page read and write
|
|
|
|
2499ED60000
|
unkown
|
page read and write
|
|
|
|
2722F0EB000
|
heap default
|
page read and write
|
|
|
|
7FF4F30B6000
|
unkown
|
page readonly
|
|
|
|
A92D07B000
|
unkown
|
page read and write
|
|
|
|
12150D55000
|
unkown
|
page read and write
|
|
|
|
2499ED66000
|
unkown
|
page read and write
|
|
|
|
1A550870000
|
unkown
|
page read and write
|
|
|
|
2499CE13000
|
unkown
|
page read and write
|
|
|
|
7FF55BA0A000
|
unkown
|
page readonly
|
|
|
|
7FF509112000
|
unkown
|
page readonly
|
|
|
|
7FF5E2F01000
|
unkown
|
page readonly
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5E30C5000
|
unkown
|
page readonly
|
|
|
|
7FF508E61000
|
unkown
|
page readonly
|
|
|
|
7FF4F3084000
|
unkown
|
page readonly
|
|
|
|
7FF5E8BB4000
|
unkown
|
page readonly
|
|
|
|
7FF5E89B1000
|
unkown
|
page readonly
|
|
|
|
3267000
|
unkown
|
page read and write
|
|
|
|
15AEF100000
|
unkown
|
page read and write
|
|
|
|
2722F11C000
|
unkown
|
page read and write
|
|
|
|
1A550640000
|
heap private
|
page read and write
|
|
|
|
12150D3A000
|
unkown
|
page read and write
|
|
|
|
15AEEE70000
|
heap default
|
page read and write
|
|
|
|
2499F102000
|
unkown
|
page read and write
|
|
|
|
2499F032000
|
unkown
|
page read and write
|
|
|
|
7FF5C962D000
|
unkown
|
page readonly
|
|
|
|
7FF50900C000
|
unkown
|
page readonly
|
|
|
|
63D15FF000
|
unkown
|
page read and write
|
|
|
|
2499CF2F000
|
unkown
|
page read and write
|
|
|
|
1A550780000
|
unkown
|
page readonly
|
|
|
|
19E2FA80000
|
unkown
|
page readonly
|
|
|
|
19E2F451000
|
unkown
|
page read and write
|
|
|
|
7FF4F3094000
|
unkown
|
page readonly
|
|
|
|
2499EDB1000
|
unkown
|
page read and write
|
|
|
|
2499F202000
|
unkown
|
page read and write
|
|
|
|
7FF596197000
|
unkown
|
page readonly
|
|
|
|
2499CEA5000
|
unkown
|
page read and write
|
|
|
|
7FF5E4886000
|
unkown
|
page readonly
|
|
|
|
7FF5E30EC000
|
unkown
|
page readonly
|
|
|
|
7FF5960CD000
|
unkown
|
page readonly
|
|
|
|
3298000
|
unkown
|
page read and write
|
|
|
|
7FF5C9621000
|
unkown
|
page readonly
|
|
|
|
1A550866000
|
unkown
|
page read and write
|
|
|
|
7FF5E2E7B000
|
unkown
|
page readonly
|
|
|
|
54265FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C9376000
|
unkown
|
page readonly
|
|
|
|
121503C0000
|
heap private
|
page read and write
|
|
|
|
A5F8CFE000
|
unkown
|
page read and write
|
|
|
|
2499CC10000
|
heap default
|
page read and write
|
|
|
|
7FF5E8B5A000
|
unkown
|
page readonly
|
|
|
|
7FF59626A000
|
unkown
|
page readonly
|
|
|
|
7FF509111000
|
unkown
|
page readonly
|
|
|
|
7FF4F2FE2000
|
unkown
|
page readonly
|
|
|
|
2722F10E000
|
unkown
|
page read and write
|
|
|
|
2499CC20000
|
unkown
|
page readonly
|
|
|
|
2499CFF4000
|
unkown
|
page read and write
|
|
|
|
7FF5E4D3D000
|
unkown
|
page readonly
|
|
|
|
2722F0E0000
|
heap default
|
page read and write
|
|
|
|
12150629000
|
unkown
|
page read and write
|
|
|
|
7FF51F064000
|
unkown
|
page readonly
|
|
|
|
7FF508FF4000
|
unkown
|
page readonly
|
|
|
|
7FF5E2C22000
|
unkown
|
page readonly
|
|
|
|
121506A7000
|
unkown
|
page read and write
|
|
|
|
1E68CC59000
|
unkown
|
page read and write
|
|
|
|
A92D27B000
|
unkown
|
page read and write
|
|
|
|
7FF5C9604000
|
unkown
|
page readonly
|
|
|
|
7FF596180000
|
unkown
|
page readonly
|
|
|
|
1A550E60000
|
unkown
|
page readonly
|
|
|
|
12150D1D000
|
unkown
|
page read and write
|
|
|
|
7FF5E31AA000
|
unkown
|
page readonly
|
|
|
|
54260FE000
|
unkown
|
page read and write
|
|
|
|
7FF509088000
|
unkown
|
page readonly
|
|
|
|
12150716000
|
unkown
|
page read and write
|
|
|
|
7FF5C9287000
|
unkown
|
page readonly
|
|
|
|
2499CBB0000
|
heap private
|
page read and write
|
|
|
|
7FF5E4CEC000
|
unkown
|
page readonly
|
|
|
|
5FC4000
|
heap private
|
page read and write
|
|
|
|
A5F89FF000
|
unkown
|
page read and write
|
|
|
|
E2CFA7F000
|
unkown
|
page read and write
|
|
|
|
12150708000
|
unkown
|
page read and write
|
|
|
|
7FF508F28000
|
unkown
|
page readonly
|
|
|
|
7FF5E310A000
|
unkown
|
page readonly
|
|
|
|
2499ED13000
|
unkown
|
page read and write
|
|
|
|
2499CD40000
|
unkown
|
page readonly
|
|
|
|
7FF508B8E000
|
unkown
|
page readonly
|
|
|
|
7FF508921000
|
unkown
|
page readonly
|
|
|
|
7FF4F2CFC000
|
unkown
|
page readonly
|
|
|
|
7FF5961EE000
|
unkown
|
page readonly
|
|
|
|
7FF51F10A000
|
unkown
|
page readonly
|
|
|
|
7FF5E2C99000
|
unkown
|
page readonly
|
|
|
|
2499EE40000
|
unkown
|
page readonly
|
|
|
|
1140000
|
unkown
|
page execute and read and write
|
|
|
|
7FF5E88D7000
|
unkown
|
page readonly
|
|
|
|
7FF55B9CB000
|
unkown
|
page readonly
|
|
|
|
7FF5E8BC8000
|
unkown
|
page readonly
|
|
|
|
1E68CBD0000
|
unkown
|
page readonly
|
|
|
|
2499EDA2000
|
unkown
|
page read and write
|
|
|
|
A92D3FB000
|
unkown
|
page read and write
|
|
|
|
12150D00000
|
unkown
|
page read and write
|
|
|
|
7FF5E4CD7000
|
unkown
|
page readonly
|
|
|
|
2CEDE202000
|
unkown
|
page read and write
|
|
|
|
2722F435000
|
heap private
|
page read and write
|
|
|
|
7FF5E8B6B000
|
unkown
|
page readonly
|
|
|
|
15AEF070000
|
unkown
|
page read and write
|
|
|
|
7FF5C9618000
|
unkown
|
page readonly
|
|
|
|
7FF5E2D97000
|
unkown
|
page readonly
|
|
|
|
2722F11E000
|
unkown
|
page read and write
|
|
|
|
2499CE81000
|
unkown
|
page read and write
|
|
|
|
7FF4F309E000
|
unkown
|
page readonly
|
|
|
|
1E68CC6A000
|
unkown
|
page read and write
|
|
|
|
2649726B000
|
unkown
|
page read and write
|
|
|
|
26497110000
|
heap default
|
page read and write
|
|
|
|
7FF5E309F000
|
unkown
|
page readonly
|
|
|
|
1E68CC40000
|
unkown
|
page read and write
|
|
|
|
7FF5E2E86000
|
unkown
|
page readonly
|
|
|
|
26497200000
|
unkown
|
page read and write
|
|
|
|
2499CE57000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B65000
|
unkown
|
page readonly
|
|
|
|
2499F03B000
|
unkown
|
page read and write
|
|
|
|
7FF596023000
|
unkown
|
page readonly
|
|
|
|
249A0613000
|
unkown
|
page read and write
|
|
|
|
A92C9FF000
|
unkown
|
page read and write
|
|
|
|
12150D3F000
|
unkown
|
page read and write
|
|
|
|
2499F06A000
|
unkown
|
page read and write
|
|
|
|
12150D5E000
|
unkown
|
page read and write
|
|
|
|
2499CE3F000
|
unkown
|
page read and write
|
|
|
|
CA587B000
|
unkown
|
page read and write
|
|
|
|
32AC000
|
unkown
|
page read and write
|
|
|
|
2722F11B000
|
unkown
|
page read and write
|
|
|
|
2499CFB4000
|
unkown
|
page read and write
|
|
|
|
7FF5E83AE000
|
unkown
|
page readonly
|
|
|
|
CA5F7A000
|
unkown
|
page read and write
|
|
|
|
249A0810000
|
unkown
|
page read and write
|
|
|
|
1A5506A0000
|
heap default
|
page read and write
|
|
|
|
A92D37E000
|
unkown
|
page read and write
|
|
|
|
7FF5E2FC8000
|
unkown
|
page readonly
|
|
|
|
12150649000
|
unkown
|
page read and write
|
|
|
|
12150655000
|
unkown
|
page read and write
|
|
|
|
7FF5E4DA4000
|
unkown
|
page readonly
|
|
|
|
15AEF002000
|
unkown
|
page read and write
|
|
|
|
2CEDE070000
|
heap default
|
page read and write
|
|
|
|
7FF55B63A000
|
unkown
|
page readonly
|
|
|
|
7FF5C95AA000
|
unkown
|
page readonly
|
|
|
|
7FF5E4D39000
|
unkown
|
page readonly
|
|
|
|
2499CDA0000
|
heap private
|
page read and write
|
|
|
|
2499F084000
|
unkown
|
page read and write
|
|
|
|
249A0810000
|
unkown
|
page read and write
|
|
|
|
121506B1000
|
unkown
|
page read and write
|
|
|
|
7FF5E2EE5000
|
unkown
|
page readonly
|
|
|
|
2722F0F6000
|
heap default
|
page read and write
|
|
|
|
7FF5961F9000
|
unkown
|
page readonly
|
|
|
|
121506A8000
|
unkown
|
page read and write
|
|
|
|
249A0810000
|
unkown
|
page read and write
|
|
|
|
2722F080000
|
unkown
|
page read and write
|
|
|
|
61C0FE000
|
unkown
|
page read and write
|
|
|
|
7FF51F037000
|
unkown
|
page readonly
|
|
|
|
1215068E000
|
unkown
|
page read and write
|
|
|
|
12150D8A000
|
unkown
|
page read and write
|
|
|
|
1E68CB70000
|
heap default
|
page read and write
|
|
|
|
15AEF660000
|
unkown
|
page readonly
|
|
|
|
19E2F44B000
|
unkown
|
page read and write
|
|
|
|
D5BE8FE000
|
unkown
|
page read and write
|
|
|
|
1E68CC6A000
|
unkown
|
page read and write
|
|
|
|
7FF50904F000
|
unkown
|
page readonly
|
|
|
|
7FF508DDB000
|
unkown
|
page readonly
|
|
|
|
54264F7000
|
unkown
|
page read and write
|
|
|
|
12150D2D000
|
unkown
|
page read and write
|
|
|
|
A92D47D000
|
unkown
|
page read and write
|
|
|
|
A92CEFB000
|
unkown
|
page read and write
|
|
|
|
E2CF8FE000
|
unkown
|
page read and write
|
|
|
|
26497319000
|
unkown
|
page read and write
|
|
|
|
26497300000
|
unkown
|
page read and write
|
|
|
|
249A0010000
|
unkown
|
page read and write
|
|
|
|
7FF50886E000
|
unkown
|
page readonly
|
|
|
|
249A0510000
|
unkown
|
page read and write
|
|
|
|
249A0310000
|
unkown
|
page read and write
|
|
|
|
2499D000000
|
unkown
|
page readonly
|
|
|
|
7FF5E8BD9000
|
unkown
|
page readonly
|
|
|
|
7FF4F312A000
|
unkown
|
page readonly
|
|
|
|
7FF508C35000
|
unkown
|
page readonly
|
|
|
|
249A0410000
|
unkown
|
page read and write
|
|
|
|
7FF5C8E11000
|
unkown
|
page readonly
|
|
|
|
CA5B7B000
|
unkown
|
page read and write
|
|
|
|
249A0000000
|
unkown
|
page read and write
|
|
|
|
249A0110000
|
unkown
|
page read and write
|
|
|
|
2499CF3F000
|
unkown
|
page read and write
|
|
|
|
12150D6F000
|
unkown
|
page read and write
|
|
|
|
2499F242000
|
unkown
|
page read and write
|
|
|
|
12150420000
|
heap default
|
page read and write
|
|
|
|
2CEDE1A0000
|
unkown
|
page readonly
|
|
|
|
12150D23000
|
unkown
|
page read and write
|
|
|
|
7FF5E4CEF000
|
unkown
|
page readonly
|
|
|
|
7FF5E83A8000
|
unkown
|
page readonly
|
|
|
|
7FF55BAB2000
|
unkown
|
page readonly
|
|
|
|
2CEDE200000
|
unkown
|
page read and write
|
|
|
|
D5BE77E000
|
unkown
|
page read and write
|
|
|
|
1E68CC6A000
|
unkown
|
page read and write
|
|
|
|
7FF5E30EF000
|
unkown
|
page readonly
|
|
|
|
7FF50907F000
|
unkown
|
page readonly
|
|
|
|
7FF5E312E000
|
unkown
|
page readonly
|
|
|
|
E2CF53B000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B97000
|
unkown
|
page readonly
|
|
|
|
2499EC02000
|
unkown
|
page read and write
|
|
|
|
A5F897A000
|
unkown
|
page read and write
|
|
|
|
A92C8F9000
|
unkown
|
page read and write
|
|
|
|
7FF5E4DB2000
|
unkown
|
page readonly
|
|
|
|
7FF595D46000
|
unkown
|
page readonly
|
|
|
|
7FF5E4B11000
|
unkown
|
page readonly
|
|
|
|
12150D56000
|
unkown
|
page read and write
|
|
|
|
3286000
|
unkown
|
page read and write
|
|
|
|
2499F07B000
|
unkown
|
page read and write
|
|
|
|
2649723F000
|
unkown
|
page read and write
|
|
|
|
7FF51F01A000
|
unkown
|
page readonly
|
|
|
|
7FF5E308F000
|
unkown
|
page readonly
|
|
|
|
2499F183000
|
unkown
|
page read and write
|
|
|
|
15AEF055000
|
unkown
|
page read and write
|
|
|
|
A5F8DFF000
|
unkown
|
page read and write
|
|
|
|
15AEEF50000
|
unkown
|
page readonly
|
|
|
|
7FF5960E4000
|
unkown
|
page readonly
|
|
|
|
7FF4F2E99000
|
unkown
|
page readonly
|
|
|
|
7FF5E4D0A000
|
unkown
|
page readonly
|
|
|
|
7FF5E4A37000
|
unkown
|
page readonly
|
|
|
|
12150D6F000
|
unkown
|
page read and write
|
|
|
|
2499ED99000
|
unkown
|
page read and write
|
|
|
|
7FF509037000
|
unkown
|
page readonly
|
|
|
|
19E2FE00000
|
unkown
|
page readonly
|
|
|
|
12150D5F000
|
unkown
|
page read and write
|
|
|
|
12150D2E000
|
unkown
|
page read and write
|
|
|
|
7FF5E4D2E000
|
unkown
|
page readonly
|
|
|
|
2499ED17000
|
unkown
|
page read and write
|
|
|
|
A92D4FD000
|
unkown
|
page read and write
|
|
|
|
12150651000
|
unkown
|
page read and write
|
|
|
|
A92D1FA000
|
unkown
|
page read and write
|
|
|
|
61C07B000
|
unkown
|
page read and write
|
|
|
|
32A5000
|
unkown
|
page read and write
|
|
|
|
19E2F48E000
|
unkown
|
page read and write
|
|
|
|
1B27B5B000
|
unkown
|
page read and write
|
|
|
|
7FF509096000
|
unkown
|
page readonly
|
|
|
|
7FF4F306C000
|
unkown
|
page readonly
|
|
|
|
12150D5B000
|
unkown
|
page read and write
|
|
|
|
12150DE7000
|
unkown
|
page read and write
|
|
|
|
12150D6F000
|
unkown
|
page read and write
|
|
|
|
7FF5E2E9F000
|
unkown
|
page readonly
|
|
|
|
2499ED00000
|
unkown
|
page read and write
|
|
|
|
2499EDA6000
|
unkown
|
page read and write
|
|
|
|
7FF509025000
|
unkown
|
page readonly
|
|
|
|
2499CF71000
|
unkown
|
page read and write
|
|
|
|
7FF508E71000
|
unkown
|
page readonly
|
|
|
|
7FF5961CA000
|
unkown
|
page readonly
|
|
|
|
2499CEE3000
|
unkown
|
page read and write
|
|
|
|
2499EBF0000
|
unkown
|
page read and write
|
|
|
|
7FF51ECEF000
|
unkown
|
page readonly
|
|
|
|
E2CF9FA000
|
unkown
|
page read and write
|
|
|
|
7FF55B9EF000
|
unkown
|
page readonly
|
|
|
|
2722F060000
|
unkown
|
page read and write
|
|
|
|
7FF508973000
|
unkown
|
page readonly
|
|
|
|
12150D36000
|
unkown
|
page read and write
|
|
|
|
329F000
|
unkown
|
page read and write
|
|
|
|
2499CED8000
|
unkown
|
page read and write
|
|
|
|
7FF5E2F11000
|
unkown
|
page readonly
|
|
|
|
7FF5C960E000
|
unkown
|
page readonly
|
|
|
|
2499CF83000
|
unkown
|
page read and write
|
|
|
|
7FF508F6D000
|
unkown
|
page readonly
|
|
|
|
CA58FF000
|
unkown
|
page read and write
|
|
|
|
121506E9000
|
unkown
|
page read and write
|
|
|
|
7FF5961AF000
|
unkown
|
page readonly
|
|
|
|
7FF5E8726000
|
unkown
|
page readonly
|
|
|
|
12150D7F000
|
unkown
|
page read and write
|
|
|
|
7FF4F304B000
|
unkown
|
page readonly
|
|
|
|
32ED000
|
unkown
|
page read and write
|
|
|
|
D5BE3DB000
|
unkown
|
page read and write
|
|
|
|
2722F0C0000
|
unkown
|
page readonly
|
|
|
|
7FF5E4C24000
|
unkown
|
page readonly
|
|
|
|
1E68CC00000
|
unkown
|
page read and write
|
|
|
|
7FF5E2EE1000
|
unkown
|
page readonly
|
|
|
|
7FF59607B000
|
unkown
|
page readonly
|
|
|
|
12150613000
|
unkown
|
page read and write
|
|
|
|
12150D70000
|
unkown
|
page read and write
|
|
|
|
15AEF04A000
|
unkown
|
page read and write
|
|
|
|
7FF59616C000
|
unkown
|
page readonly
|
|
|
|
63D167A000
|
unkown
|
page read and write
|
|
|
|
15AEF000000
|
unkown
|
page read and write
|
|
|
|
7FF5E311E000
|
unkown
|
page readonly
|
|
|
|
12150D3A000
|
unkown
|
page read and write
|
|
|
|
12150D54000
|
unkown
|
page read and write
|
|
|
|
7FF50901E000
|
unkown
|
page readonly
|
|
|
|
7FF5C95DF000
|
unkown
|
page readonly
|
|
|
|
2499CEF6000
|
unkown
|
page read and write
|
|
|
|
A92CBFB000
|
unkown
|
page read and write
|
|
|
|
12150D53000
|
unkown
|
page read and write
|
|
|
|
249A0210000
|
unkown
|
page read and write
|
|
|
|
7FF5C936B000
|
unkown
|
page readonly
|
|
|
|
A92CD7A000
|
unkown
|
page read and write
|
|
|
|
2F53000
|
unkown
|
page readonly
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5E4D36000
|
unkown
|
page readonly
|
|
|
|
26498D00000
|
unkown
|
page readonly
|
|
|
|
7FF55B317000
|
unkown
|
page readonly
|
|
|
|
121505F0000
|
unkown
|
page read and write
|
|
|
|
E2CF5BE000
|
unkown
|
page read and write
|
|
|
|
26498C00000
|
unkown
|
page read and write
|
|
|
|
1B280FB000
|
unkown
|
page read and write
|
|
|
|
7FF50908E000
|
unkown
|
page readonly
|
|
|
|
7FF508F23000
|
unkown
|
page readonly
|
|
|
|
7FF5E4CCB000
|
unkown
|
page readonly
|
|
|
|
7FF5E3139000
|
unkown
|
page readonly
|
|
|
|
542607C000
|
unkown
|
page read and write
|
|
|
|
7FF51F04F000
|
unkown
|
page readonly
|
|
|
|
19E2F2E0000
|
unkown
|
page readonly
|
|
|
|
7FF4F2DFB000
|
unkown
|
page readonly
|
|
|
|
7FF5959CE000
|
unkown
|
page readonly
|
|
|
|
2CEDE213000
|
unkown
|
page read and write
|
|
|
|
7FF509074000
|
unkown
|
page readonly
|
|
|
|
7FF4F30BD000
|
unkown
|
page readonly
|
|
|
|
19E2F44E000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
12150D39000
|
unkown
|
page read and write
|
|
|
|
7FF508C37000
|
unkown
|
page readonly
|
|
|
|
1A550902000
|
unkown
|
page read and write
|
|
|
|
2499CF2D000
|
unkown
|
page read and write
|
|
|
|
12150D39000
|
unkown
|
page read and write
|
|
|
|
7FF5E305C000
|
unkown
|
page readonly
|
|
|
|
249A0110000
|
unkown
|
page read and write
|
|
|
|
7FF508C9A000
|
unkown
|
page readonly
|
|
|
|
7FF4F303E000
|
unkown
|
page readonly
|
|
|
|
7FF51ECF7000
|
unkown
|
page readonly
|
|
|
|
7FF5E8A03000
|
unkown
|
page readonly
|
|
|
|
2499EBE0000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B4A000
|
unkown
|
page readonly
|
|
|
|
7FF51EF28000
|
unkown
|
page readonly
|
|
|
|
2499F043000
|
unkown
|
page read and write
|
|
|
|
249A0410000
|
unkown
|
page read and write
|
|
|
|
7FF4F2FE0000
|
unkown
|
page readonly
|
|
|
|
2499CF70000
|
unkown
|
page read and write
|
|
|
|
2722F105000
|
unkown
|
page read and write
|
|
|
|
7FF508F73000
|
unkown
|
page readonly
|
|
|
|
2499CED7000
|
unkown
|
page read and write
|
|
|
|
12151254000
|
unkown
|
page read and write
|
|
|
|
E2CFAFF000
|
unkown
|
page read and write
|
|
|
|
12150713000
|
unkown
|
page read and write
|
|
|
|
7FF5E30BE000
|
unkown
|
page readonly
|
|
|
|
2722F11F000
|
unkown
|
page read and write
|
|
|
|
12150BF0000
|
unkown
|
page read and write
|
|
|
|
7FF5E308B000
|
unkown
|
page readonly
|
|
|
|
2499ED1B000
|
unkown
|
page read and write
|
|
|
|
7FF5E8BBF000
|
unkown
|
page readonly
|
|
|
|
12150D3C000
|
unkown
|
page read and write
|
|
|
|
1A551200000
|
unkown
|
page readonly
|
|
|
|
2722F430000
|
heap private
|
page read and write
|
|
|
|
7FF5E8A5E000
|
unkown
|
page readonly
|
|
|
|
19E2F502000
|
unkown
|
page read and write
|
|
|
|
7FF5E8BDD000
|
unkown
|
page readonly
|
|
|
|
19E2F429000
|
unkown
|
page read and write
|
|
|
|
2499ED41000
|
unkown
|
page read and write
|
|
|
|
7FF508868000
|
unkown
|
page readonly
|
|
|
|
7FF5C95E8000
|
unkown
|
page readonly
|
|
|
|
19E2F3C0000
|
unkown
|
page readonly
|
|
|
|
1E68CC13000
|
unkown
|
page read and write
|
|
|
|
2499F063000
|
unkown
|
page read and write
|
|
|
|
7FF508F8C000
|
unkown
|
page readonly
|
|
|
|
7FF51EFE3000
|
unkown
|
page readonly
|
|
|
|
7FF5E4880000
|
unkown
|
page readonly
|
|
|
|
7FF5E2D7C000
|
unkown
|
page readonly
|
|
|
|
2722F11E000
|
unkown
|
page read and write
|
|
|
|
7FF5E4CF7000
|
unkown
|
page readonly
|
|
|
|
7FF5C95C7000
|
unkown
|
page readonly
|
|
|
|
7FF5E4BA1000
|
unkown
|
page readonly
|
|
|
|
12150D7F000
|
unkown
|
page read and write
|
|
|
|
12150BA0000
|
unkown
|
page readonly
|
|
|
|
2CEDE400000
|
unkown
|
page readonly
|
|
|
|
7FF4F2F48000
|
unkown
|
page readonly
|
|
|
|
2499F102000
|
unkown
|
page read and write
|
|
|
|
19E2F500000
|
unkown
|
page read and write
|
|
|
|
7FF509020000
|
unkown
|
page readonly
|
|
|
|
1A55089A000
|
unkown
|
page read and write
|
|
|
|
19E2F2D0000
|
heap default
|
page read and write
|
|
|
|
7FF4F2E61000
|
unkown
|
page readonly
|
|
|
|
1E68CC6A000
|
unkown
|
page read and write
|
|
|
|
7FF4F2F21000
|
unkown
|
page readonly
|
|
|
|
2499CFB1000
|
unkown
|
page read and write
|
|
|
|
7FF5E4C2C000
|
unkown
|
page readonly
|
|
|
|
7FF5C9626000
|
unkown
|
page readonly
|
|
|
|
7FF5E4CAA000
|
unkown
|
page readonly
|
|
|
|
249A0710000
|
unkown
|
page read and write
|
|
|
|
7FF5C926C000
|
unkown
|
page readonly
|
|
|
|
1E68CC6A000
|
unkown
|
page read and write
|
|
|
|
7FF50900A000
|
unkown
|
page readonly
|
|
|
|
1B283FF000
|
unkown
|
page read and write
|
|
|
|
7FF55B9F8000
|
unkown
|
page readonly
|
|
|
|
7FF51EFC0000
|
unkown
|
page readonly
|
|
|
|
12150D4B000
|
unkown
|
page read and write
|
|
|
|
249A0310000
|
unkown
|
page read and write
|
|
|
|
7FF5E2EF4000
|
unkown
|
page readonly
|
|
|
|
15AEF08A000
|
unkown
|
page read and write
|
|
|
|
CA5C7E000
|
unkown
|
page read and write
|
|
|
|
12150D70000
|
unkown
|
page read and write
|
|
|
|
249A0810000
|
unkown
|
page read and write
|
|
|
|
7FF59617A000
|
unkown
|
page readonly
|
|
|
|
32BD000
|
unkown
|
page read and write
|
|
|
|
249A0510000
|
unkown
|
page read and write
|
|
|
|
7FF5961E8000
|
unkown
|
page readonly
|
|
|
|
249A0510000
|
unkown
|
page read and write
|
|
|
|
2499CFB3000
|
unkown
|
page read and write
|
|
|
|
7FF4F30AE000
|
unkown
|
page readonly
|
|
|
|
7FF51F01E000
|
unkown
|
page readonly
|
|
|
|
7FF51F020000
|
unkown
|
page readonly
|
|
|
|
121505E0000
|
unkown
|
page readonly
|
|
|
|
2499F000000
|
unkown
|
page read and write
|
|
|
|
7FF5E3128000
|
unkown
|
page readonly
|
|
|
|
2722F10E000
|
unkown
|
page read and write
|
|
|
|
7FF5961FD000
|
unkown
|
page readonly
|
|
|
|
7FF4F2F43000
|
unkown
|
page readonly
|
|
|
|
12151140000
|
unkown
|
page write copy
|
|
|
|
7FF5E4DB1000
|
unkown
|
page readonly
|
|
|
|
2499E8A0000
|
unkown
|
page readonly
|
|
|
|
26497213000
|
unkown
|
page read and write
|
|
|
|
2499CFC3000
|
unkown
|
page read and write
|
|
|
|
7FF509099000
|
unkown
|
page readonly
|
|
|
|
7FF4F3045000
|
unkown
|
page readonly
|
|
|
|
7FF5E30CB000
|
unkown
|
page readonly
|
|
|
|
63D1579000
|
unkown
|
page read and write
|
|
|
|
7FF4F3132000
|
unkown
|
page readonly
|
|
|
|
7FF508EC3000
|
unkown
|
page readonly
|
|
|
|
7FF51F04C000
|
unkown
|
page readonly
|
|
|
|
15AEF802000
|
unkown
|
page read and write
|
|
|
|
2499ED97000
|
unkown
|
page read and write
|
|
|
|
7FF4F2D0F000
|
unkown
|
page readonly
|
|
|
|
7FF4F3040000
|
unkown
|
page readonly
|
|
|
|
61C67E000
|
unkown
|
page read and write
|
|
|
|
12150D61000
|
unkown
|
page read and write
|
|
|
|
7FF51F06A000
|
unkown
|
page readonly
|
|
|
|
1B27F75000
|
unkown
|
page read and write
|
|
|
|
7FF5E4BBB000
|
unkown
|
page readonly
|
|
|
|
7FF595FD1000
|
unkown
|
page readonly
|
|
|
|
63D147B000
|
unkown
|
page read and write
|
|
|
|
7FF5E3136000
|
unkown
|
page readonly
|
|
|
|
2499CDB0000
|
unkown
|
page readonly
|
|
|
|
7FF5E2D8F000
|
unkown
|
page readonly
|
|
|
|
63D177E000
|
unkown
|
page read and write
|
|
|
|
12150D1D000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
2722F0F1000
|
unkown
|
page read and write
|
|
|
|
7FF4F28A1000
|
unkown
|
page readonly
|
|
|
|
1150000
|
unkown
|
page execute and read and write
|
|
|
|
19E2F488000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B60000
|
unkown
|
page readonly
|
|
|
|
7FF508BE0000
|
unkown
|
page readonly
|
|
|
|
7FF5E883A000
|
unkown
|
page readonly
|
|
|
|
7FF51F096000
|
unkown
|
page readonly
|
|
|
|
12150D51000
|
unkown
|
page read and write
|
|
|
|
7FF5E3094000
|
unkown
|
page readonly
|
|
|
|
3297000
|
unkown
|
page read and write
|
|
|
|
2CEDE300000
|
unkown
|
page read and write
|
|
|
|
61C378000
|
unkown
|
page read and write
|
|
|
|
7FF5E8C51000
|
unkown
|
page readonly
|
|
|
|
7FF55BA28000
|
unkown
|
page readonly
|
|
|
|
7FF5E8735000
|
unkown
|
page readonly
|
|
|
|
12150BF0000
|
unkown
|
page readonly
|
|
|
|
249A0613000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
2649726B000
|
unkown
|
page read and write
|
|
|
|
7FF508BE6000
|
unkown
|
page readonly
|
|
|
|
1A550A00000
|
unkown
|
page readonly
|
|
|
|
1A550813000
|
unkown
|
page read and write
|
|
|
|
1B282FF000
|
unkown
|
page read and write
|
|
|
|
2CEDFCA0000
|
unkown
|
page readonly
|
|
|
|
7FF5E3060000
|
unkown
|
page readonly
|
|
|
|
A92CDFB000
|
unkown
|
page read and write
|
|
|
|
5EC6000
|
heap private
|
page read and write
|
|
|
|
2F53000
|
unkown
|
page readonly
|
|
|
|
7FF596272000
|
unkown
|
page readonly
|
|
|
|
7FF59616A000
|
unkown
|
page readonly
|
|
|
|
15AEF050000
|
unkown
|
page read and write
|
|
|
|
19E2F3B0000
|
unkown
|
page readonly
|
|
|
|
19E2F508000
|
unkown
|
page read and write
|
|
|
|
121506A4000
|
unkown
|
page read and write
|
|
|
|
7FF508ECA000
|
unkown
|
page readonly
|
|
|
|
7FF5E4CC0000
|
unkown
|
page readonly
|
|
|
|
7FF5961D4000
|
unkown
|
page readonly
|
|
|
|
7FF4F303A000
|
unkown
|
page readonly
|
|
|
|
61C8FC000
|
unkown
|
page read and write
|
|
|
|
12150D39000
|
unkown
|
page read and write
|
|
|
|
67720000
|
unkown image
|
page readonly
|
|
|
|
7FF5E4C13000
|
unkown
|
page readonly
|
|
|
|
7FF508E56000
|
unkown
|
page readonly
|
|
|
|
2649726B000
|
unkown
|
page read and write
|
|
|
|
2499F285000
|
unkown
|
page read and write
|
|
|
|
7FF5E8BCE000
|
unkown
|
page readonly
|
|
|
|
7FF508BF5000
|
unkown
|
page readonly
|
|
|
|
7FF5E8B5E000
|
unkown
|
page readonly
|
|
|
|
7FF5E3104000
|
unkown
|
page readonly
|
|
|
|
26497120000
|
unkown
|
page readonly
|
|
|
|
7FF5E4C0D000
|
unkown
|
page readonly
|
|
|
|
2499CFB2000
|
unkown
|
page read and write
|
|
|
|
7FF51EE41000
|
unkown
|
page readonly
|
|
|
|
7FF5C95F4000
|
unkown
|
page readonly
|
|
|
|
7FF4F2E65000
|
unkown
|
page readonly
|
|
|
|
15AEEF60000
|
unkown
|
page readonly
|
|
|
|
7FF508F1B000
|
unkown
|
page readonly
|
|
|
|
12151202000
|
unkown
|
page read and write
|
|
|
|
2499F03F000
|
unkown
|
page read and write
|
|
|
|
32A4000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
12150DA1000
|
unkown
|
page read and write
|
|
|
|
12150D1E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3131000
|
unkown
|
page readonly
|
|
|
|
12150D6F000
|
unkown
|
page read and write
|
|
|
|
61C17E000
|
unkown
|
page read and write
|
|
|
|
19E2F3D0000
|
unkown
|
page read and write
|
|
|
|
2499CD90000
|
unkown
|
page readonly
|
|
|
|
7FF59618B000
|
unkown
|
page readonly
|
|
|
|
12150D5F000
|
unkown
|
page read and write
|
|
|
|
2499EBE0000
|
unkown
|
page read and write
|
|
|
|
2CEDE150000
|
unkown
|
page write copy
|
|
|
|
249A0610000
|
unkown
|
page read and write
|
|
|
|
7FF5E291D000
|
unkown
|
page readonly
|
|
|
|
7FF5E8B77000
|
unkown
|
page readonly
|
|
|
|
7FF51F088000
|
unkown
|
page readonly
|
|
|
|
19E2F454000
|
unkown
|
page read and write
|
|
|
|
12150D3A000
|
unkown
|
page read and write
|
|
|
|
26497302000
|
unkown
|
page read and write
|
|
|
|
7FF5C93D1000
|
unkown
|
page readonly
|
|
|
|
7FF5E4BBE000
|
unkown
|
page readonly
|
|
|
|
CA597F000
|
unkown
|
page read and write
|
|
|
|
7FF51F091000
|
unkown
|
page readonly
|
|
|
|
15AEF013000
|
unkown
|
page read and write
|
|
|
|
12150E00000
|
unkown
|
page readonly
|
|
|
|
7FF51EE79000
|
unkown
|
page readonly
|
|
|
|
7FF508B92000
|
unkown
|
page readonly
|
|
|
|
7FF5E31B2000
|
unkown
|
page readonly
|
|
|
|
2649726B000
|
unkown
|
page read and write
|
|
|
|
7FF508AFE000
|
unkown
|
page readonly
|
|
|
|
A92CCFC000
|
unkown
|
page read and write
|
|
|
|
1E68CB80000
|
unkown
|
page write copy
|
|
|
|
121506E5000
|
unkown
|
page read and write
|
|
|
|
A92CAFA000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
7FF51EF1B000
|
unkown
|
page readonly
|
|
|
|
15AEF04E000
|
unkown
|
page read and write
|
|
|
|
7FF4F2D17000
|
unkown
|
page readonly
|
|
|
|
7FF5C9491000
|
unkown
|
page readonly
|
|
|
|
7FF5E4DAA000
|
unkown
|
page readonly
|
|
|
|
12151261000
|
unkown
|
page read and write
|
|
|
|
7FF595EF7000
|
unkown
|
page readonly
|
|
|
|
7FF5C96A2000
|
unkown
|
page readonly
|
|
|
|
7FF508977000
|
unkown
|
page readonly
|
|
|
|
7FF5E4CAC000
|
unkown
|
page readonly
|
|
|
|
1E68CC6A000
|
unkown
|
page read and write
|
|
|
|
2649726B000
|
unkown
|
page read and write
|
|
|
|
12150D53000
|
unkown
|
page read and write
|
|
|
|
249A0210000
|
unkown
|
page read and write
|
|
|
|
1E68CC02000
|
unkown
|
page read and write
|
|
|
|
2499ED66000
|
unkown
|
page read and write
|
|
|
|
1A550829000
|
unkown
|
page read and write
|
|
|
|
12150D1E000
|
unkown
|
page read and write
|
|
|
|
12150695000
|
unkown
|
page read and write
|
|
|
|
12150670000
|
unkown
|
page read and write
|
|
|
|
2499EDBF000
|
unkown
|
page read and write
|
|
|
|
1E68E770000
|
unkown
|
page readonly
|
|
|
|
2499F100000
|
unkown
|
page read and write
|
|
|
|
15AEF108000
|
unkown
|
page read and write
|
|
|
|
12150D70000
|
unkown
|
page read and write
|
|
|
|
12150D5F000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B4C000
|
unkown
|
page readonly
|
|
|
|
7FF508FFF000
|
unkown
|
page readonly
|
|
|
|
61C477000
|
unkown
|
page read and write
|
|
|
|
51A8000
|
heap private
|
page read and write
|
|
|
|
19E2F513000
|
unkown
|
page read and write
|
|
|
|
7FF5C927F000
|
unkown
|
page readonly
|
|
|
|
12151202000
|
unkown
|
page read and write
|
|
|
|
12150D81000
|
unkown
|
page read and write
|
|
|
|
7FF5E30BA000
|
unkown
|
page readonly
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5E4D04000
|
unkown
|
page readonly
|
|
|
|
2722F11E000
|
unkown
|
page read and write
|
|
|
|
2499CF13000
|
unkown
|
page read and write
|
|
|
|
12150D6F000
|
unkown
|
page read and write
|
|
|
|
4DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5C9694000
|
unkown
|
page readonly
|
|
|
|
7FF4F30A8000
|
unkown
|
page readonly
|
|
|
|
2CEDE302000
|
unkown
|
page read and write
|
|
|
|
7FF509064000
|
unkown
|
page readonly
|
|
|
|
7FF55BA04000
|
unkown
|
page readonly
|
|
|
|
7FF5E30C0000
|
unkown
|
page readonly
|
|
|
|
7FF5E4B63000
|
unkown
|
page readonly
|
|
|
|
7FF5E4D28000
|
unkown
|
page readonly
|
|
|
|
7FF4F30B1000
|
unkown
|
page readonly
|
|
|
|
1E68CED0000
|
unkown
|
page readonly
|
|
|
|
1A550800000
|
unkown
|
page read and write
|
|
|
|
12150D6F000
|
unkown
|
page read and write
|
|
|
|
26497229000
|
unkown
|
page read and write
|
|
|
|
7FF5961DF000
|
unkown
|
page readonly
|
|
|
|
7FF5E8BAA000
|
unkown
|
page readonly
|
|
|
|
7FF596185000
|
unkown
|
page readonly
|
|
|
|
12150D25000
|
unkown
|
page read and write
|
|
|
|
7FF5C95B0000
|
unkown
|
page readonly
|
|
|
|
2499ED9A000
|
unkown
|
page read and write
|
|
|
|
7FF55B313000
|
unkown
|
page readonly
|
|
|
|
7FF5C9552000
|
unkown
|
page readonly
|
|
|
|
7FF5E2FC3000
|
unkown
|
page readonly
|
|
|
|
2CEDE080000
|
unkown
|
page readonly
|
|
|
|
7FF5E8C4A000
|
unkown
|
page readonly
|
|
|
|
12150800000
|
unkown
|
page readonly
|
|
|
|
12150BF0000
|
unkown
|
page read and write
|
|
|
|
2499F084000
|
unkown
|
page read and write
|
|
|
|
7FF5E31B1000
|
unkown
|
page readonly
|
|
|
|
1A550855000
|
unkown
|
page read and write
|
|
|
|
7FF4F308A000
|
unkown
|
page readonly
|
|
|
|
7FF508F1E000
|
unkown
|
page readonly
|
|
|
|
2499F102000
|
unkown
|
page read and write
|
|
|
|
1E68E670000
|
unkown
|
page read and write
|
|
|
|
2499CEDA000
|
unkown
|
page read and write
|
|
|
|
1E68CC29000
|
unkown
|
page read and write
|
|
|
|
2499ED66000
|
unkown
|
page read and write
|
|
|
|
12150D5F000
|
unkown
|
page read and write
|
|
|
|
12150D6F000
|
unkown
|
page read and write
|
|
|
|
12150D3A000
|
unkown
|
page read and write
|
|
|
|
1A550885000
|
unkown
|
page read and write
|
|
|
|
1B27FFE000
|
unkown
|
page read and write
|
|
|
|
D5BE67E000
|
unkown
|
page read and write
|
|
|
|
7FF4F2D0A000
|
unkown
|
page readonly
|
|
|
|
1215063C000
|
unkown
|
page read and write
|
|
|
|
7FF51EE45000
|
unkown
|
page readonly
|
|
|
|
249A0710000
|
unkown
|
page read and write
|
|
|
|
12150D5F000
|
unkown
|
page read and write
|
|
|
|
7FF4F3057000
|
unkown
|
page readonly
|
|
|
|
15AEF08D000
|
unkown
|
page read and write
|
|
|
|
15AEEF70000
|
unkown
|
page read and write
|
|
|
|
12150D71000
|
unkown
|
page read and write
|
|
|
|
12150D46000
|
unkown
|
page read and write
|
|
|
|
7FF5E4CBE000
|
unkown
|
page readonly
|
|
|
|
7FF595D40000
|
unkown
|
page readonly
|
|
|
|
7FF5E300D000
|
unkown
|
page readonly
|
|
|
|
1E68CD00000
|
unkown
|
page read and write
|
|
|
|
2499EE30000
|
unkown
|
page readonly
|
|
|
|
7FF55BAA4000
|
unkown
|
page readonly
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
1215064D000
|
unkown
|
page read and write
|
|
|
|
A5F8E7C000
|
unkown
|
page read and write
|
|
|
|
2499ED86000
|
unkown
|
page read and write
|
|
|
|
12150500000
|
unkown
|
page readonly
|
|
|
|
2499EE10000
|
unkown
|
page readonly
|
|
|
|
7FF59607E000
|
unkown
|
page readonly
|
|
|
|
12150D38000
|
unkown
|
page read and write
|
|
|
|
32AE000
|
unkown
|
page read and write
|
|
|
|
7FF4F306F000
|
unkown
|
page readonly
|
|
|
|
249A0010000
|
unkown
|
page read and write
|
|
|
|
7FF508E20000
|
unkown
|
page readonly
|
|
|
|
7FF5E8C52000
|
unkown
|
page readonly
|
|
|
|
12150D10000
|
unkown
|
page read and write
|
|
|
|
12150600000
|
unkown
|
page read and write
|
|
|
|
542637B000
|
unkown
|
page read and write
|
|
|
|
12150DC4000
|
unkown
|
page read and write
|
|
|
|
2499CEAE000
|
unkown
|
page read and write
|
|
|
|
264971F0000
|
unkown
|
page readonly
|
|
|
|
121506C4000
|
unkown
|
page read and write
|
|
|
|
7FF51F025000
|
unkown
|
page readonly
|
|
|
|
12150D5F000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B8F000
|
unkown
|
page readonly
|
|
|
|
249A0613000
|
unkown
|
page read and write
|
|
|
|
7FF508FC2000
|
unkown
|
page readonly
|
|
|
|
2CEDE26F000
|
unkown
|
page read and write
|
|
|
|
4DA0000
|
unkown
|
page read and write
|
|
|
|
15AEF047000
|
unkown
|
page read and write
|
|
|
|
249A0610000
|
unkown
|
page read and write
|
|
|
|
19E2F600000
|
unkown
|
page readonly
|
|
|
|
121511A0000
|
unkown
|
page readonly
|
|
|
|
328C000
|
unkown
|
page read and write
|
|
|
|
12150D39000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B8C000
|
unkown
|
page readonly
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
32BB000
|
unkown
|
page read and write
|
|
|
|
2499EDF3000
|
unkown
|
page read and write
|
|
|
|
A92D2FC000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
7FF51ECEA000
|
unkown
|
page readonly
|
|
|
|
1A550913000
|
unkown
|
page read and write
|
|
|
|
7FF508F01000
|
unkown
|
page readonly
|
|
|
|
7FF509057000
|
unkown
|
page readonly
|
|
|
|
3298000
|
unkown
|
page read and write
|
|
|
|
A92CF7B000
|
unkown
|
page read and write
|
|
|
|
7FF55BA39000
|
unkown
|
page readonly
|
|
|
|
2499EBE0000
|
unkown
|
page read and write
|
|
|
|
2CEDE010000
|
heap private
|
page read and write
|
|
|
|
A5F8C7E000
|
unkown
|
page read and write
|
|
|
|
19E2F413000
|
unkown
|
page read and write
|
|
|
|
7FF5C8E0D000
|
unkown
|
page readonly
|
|
|
|
A92CFFA000
|
unkown
|
page read and write
|
|
|
|
264970B0000
|
heap private
|
page read and write
|
|
|
|
12150D3A000
|
unkown
|
page read and write
|
|
|
|
1B27E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5E8BA4000
|
unkown
|
page readonly
|
|
|
|
7FF51F07E000
|
unkown
|
page readonly
|
|
|
|
7FF5E2921000
|
unkown
|
page readonly
|
|
|
|
2499CEC6000
|
unkown
|
page read and write
|
|
|
|
249A0410000
|
unkown
|
page read and write
|
|
|
|
7FF55B9EC000
|
unkown
|
page readonly
|
|
|
|
7FF5E2E98000
|
unkown
|
page readonly
|
|
|
|
19E2F470000
|
unkown
|
page read and write
|
|
|
|
7FF5E8A5B000
|
unkown
|
page readonly
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
12150D7F000
|
unkown
|
page read and write
|
|
|
|
2499CF83000
|
unkown
|
page read and write
|
|
|
|
1A5507A0000
|
unkown
|
page read and write
|
|
|
|
2722F10E000
|
unkown
|
page read and write
|
|
|
|
12150D3D000
|
unkown
|
page read and write
|
|
|
|
12150D3A000
|
unkown
|
page read and write
|
|
|
|
542617E000
|
unkown
|
page read and write
|
|
|
|
A5F8D79000
|
unkown
|
page read and write
|
|
|
|
7FF50901A000
|
unkown
|
page readonly
|
|
|
|
7FF5E4CC5000
|
unkown
|
page readonly
|
|
|
|
7FF5E4D1F000
|
unkown
|
page readonly
|
|
|
|
2722F1E0000
|
unkown
|
page readonly
|
|
|
|
32AC000
|
unkown
|
page read and write
|
|
|
|
12150BD0000
|
unkown
|
page readonly
|
|
|
|
1E68CC6E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3052000
|
unkown
|
page readonly
|
|
|
|
1A550900000
|
unkown
|
page read and write
|
|
|
|
7FF5E8AC4000
|
unkown
|
page readonly
|
|
|
|
1E68CB10000
|
heap private
|
page read and write
|
|
|
|
7FF5E4895000
|
unkown
|
page readonly
|
|
|
|
19E2F490000
|
unkown
|
page read and write
|
|
|
|
1E68CC6A000
|
unkown
|
page read and write
|
|
|
|
2499CEE2000
|
unkown
|
page read and write
|
|
|
|
7FF5961F6000
|
unkown
|
page readonly
|
|
|
|
2499F084000
|
unkown
|
page read and write
|
|
|
|
2CEDE254000
|
unkown
|
page read and write
|
|
|
|
7FF5E2D8A000
|
unkown
|
page readonly
|
|
|
|
61C7FF000
|
unkown
|
page read and write
|
|
|
|
CA5E7F000
|
unkown
|
page read and write
|
|
|
|
7FF5E8720000
|
unkown
|
page readonly
|
|
|
|
26497400000
|
unkown
|
page write copy
|
|
|
|
1B27BDE000
|
unkown
|
page read and write
|
|
|
|
15AEF102000
|
unkown
|
page read and write
|
|
|
|
7FF4F2E06000
|
unkown
|
page readonly
|
|
|
|
19E2F270000
|
heap private
|
page read and write
|
|
|
|
7FF5961B7000
|
unkown
|
page readonly
|
|
|
|
60C2000
|
heap private
|
page read and write
|
|
|
|
1A5506B0000
|
unkown
|
page readonly
|
|
|
|
A92C979000
|
unkown
|
page read and write
|
|
|
|
7FF51EF23000
|
unkown
|
page readonly
|
|
|
|
12151200000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
12150D23000
|
unkown
|
page read and write
|
|
|
|
15AEF03C000
|
unkown
|
page read and write
|
|
|
|
7FF4F3131000
|
unkown
|
page readonly
|
|
|
|
7FF50910A000
|
unkown
|
page readonly
|
|
|
|
7FF5C95FA000
|
unkown
|
page readonly
|
|
|
|
7FF51EFC2000
|
unkown
|
page readonly
|
|
|
|
1A550790000
|
unkown
|
page readonly
|
|
|
|
1A55084F000
|
unkown
|
page read and write
|
|
|
|
249A0110000
|
unkown
|
page read and write
|
|
|
|
7FF5960EC000
|
unkown
|
page readonly
|
|
|
|
2499EDD8000
|
unkown
|
page read and write
|
|
|
|
12150BE0000
|
unkown
|
page readonly
|
|
|
|
7FF4F289D000
|
unkown
|
page readonly
|
|
|
|
7FF5E3006000
|
unkown
|
page readonly
|
|
|
|
7FF508FEF000
|
unkown
|
page readonly
|
|
|
|
2499ED63000
|
unkown
|
page read and write
|
|
|
|
7FF595E5A000
|
unkown
|
page readonly
|
|
|
|
2499CCF0000
|
unkown
|
page write copy
|
|
|
|
7FF5C94B8000
|
unkown
|
page readonly
|
|
|
|
7FF508F84000
|
unkown
|
page readonly
|
|
|
|
15AEEE10000
|
heap private
|
page read and write
|
|
|
|
12150430000
|
unkown
|
page readonly
|
|
|
|
7FF55B9C0000
|
unkown
|
page readonly
|
|
|
|
7FF5C961E000
|
unkown
|
page readonly
|
|
|
|
A92D17C000
|
unkown
|
page read and write
|
|
|
|
7FF5961C4000
|
unkown
|
page readonly
|
|
|
|
7FF508DE6000
|
unkown
|
page readonly
|
|
|
|
D5BE6FA000
|
unkown
|
page read and write
|
|
|
|
2499CE4D000
|
unkown
|
page read and write
|
|
|
|
2499ED45000
|
unkown
|
page read and write
|
|
|
|
121506E8000
|
unkown
|
page read and write
|
|
|
|
12150BF0000
|
unkown
|
page read and write
|
|
|
|
2CEDE26D000
|
unkown
|
page read and write
|
|
|
|
7FF5E3062000
|
unkown
|
page readonly
|
|
|
|
2499EE00000
|
unkown
|
page read and write
|
|
|
|
1B281F7000
|
unkown
|
page read and write
|
|
|
|
7FF55BAB1000
|
unkown
|
page readonly
|
|
|
|
1A55089F000
|
unkown
|
page read and write
|
|
|
|
7FF55BAAA000
|
unkown
|
page readonly
|
|
|
|
7FF5E31A4000
|
unkown
|
page readonly
|
|
|
|
249A0010000
|
unkown
|
page read and write
|
|
|
|
19E2F400000
|
unkown
|
page read and write
|
|
|
|
15AEF200000
|
unkown
|
page readonly
|
|
|
|
249A0710000
|
unkown
|
page read and write
|
|
|
|
D5BE7FA000
|
unkown
|
page read and write
|
|
|
|
2499CF30000
|
unkown
|
page read and write
|
|
|
|
12150DEF000
|
unkown
|
page read and write
|
|
|
|
12150D28000
|
unkown
|
page read and write
|
|
|
|
12150D2E000
|
unkown
|
page read and write
|
|
|
|
15AEFA00000
|
unkown
|
page readonly
|
|
|
|
7FF5C9629000
|
unkown
|
page readonly
|
|
|
|
12150D5F000
|
unkown
|
page read and write
|
|
|
|
7FF596061000
|
unkown
|
page readonly
|
|
|
|
2649726B000
|
unkown
|
page read and write
|
|
|
|
7FF59617E000
|
unkown
|
page readonly
|
|
|
|
7FF5E30F7000
|
unkown
|
page readonly
|
|
|
|
2499ED09000
|
unkown
|
page read and write
|
|
|
|
19E2FC02000
|
unkown
|
page read and write
|
|
|
|
12150D5F000
|
unkown
|
page read and write
|
|
|
|
7FF5C96A1000
|
unkown
|
page readonly
|
|
|
|
7FF5C94B3000
|
unkown
|
page readonly
|
|
|
|
2499CF50000
|
unkown
|
page read and write
|
|
|
|
7FF51E87D000
|
unkown
|
page readonly
|
|
|
|
2CEDE313000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
7FF51F09D000
|
unkown
|
page readonly
|
|
|
|
12150C02000
|
unkown
|
page read and write
|
|
|
|
12150D21000
|
unkown
|
page read and write
|
|
|
|
7FF5E2FA1000
|
unkown
|
page readonly
|
|
|
|
7FF508D97000
|
unkown
|
page readonly
|
|
|
|
E2CF979000
|
unkown
|
page read and write
|
|
|
|
7FF51F111000
|
unkown
|
page readonly
|
|
|
|
7FF4F2F3B000
|
unkown
|
page readonly
|
|
|
|
7FF50906A000
|
unkown
|
page readonly
|
|
|
|
12150D48000
|
unkown
|
page read and write
|
|
|
|
2649726B000
|
unkown
|
page read and write
|
|
|
|
12150D8B000
|
unkown
|
page read and write
|
|
|
|
7FF4F3124000
|
unkown
|
page readonly
|
|
|
|
7FF509104000
|
unkown
|
page readonly
|
|
|
|
249A0310000
|
unkown
|
page read and write
|
|
|
|
7FF5E8AB3000
|
unkown
|
page readonly
|
|
|
|
7FF51EDE6000
|
unkown
|
page readonly
|
|
|
|
61C777000
|
unkown
|
page read and write
|
|
|
|
A92CE7B000
|
unkown
|
page read and write
|
|
|
|
121506F8000
|
unkown
|
page read and write
|
|
|
|
7FF508FC0000
|
unkown
|
page readonly
|
|
|
|
19E2F43C000
|
unkown
|
page read and write
|
|
|
|
61C579000
|
unkown
|
page read and write
|
|
|
|
12150DC4000
|
unkown
|
page read and write
|
|
|
|
2499F102000
|
unkown
|
page read and write
|
|
|
|
7FF5C927A000
|
unkown
|
page readonly
|
|
|
|
26497255000
|
unkown
|
page read and write
|
|
|
|
32BB000
|
unkown
|
page read and write
|
|
|
|
7FF5960D3000
|
unkown
|
page readonly
|
|
|
|
1E68CC6A000
|
unkown
|
page read and write
|
|
|
|
12150D5F000
|
unkown
|
page read and write
|
|
|
|
12150D5F000
|
unkown
|
page read and write
|
|
|
|
A92D0FB000
|
unkown
|
page read and write
|
|
|
|
2CEDFBA0000
|
unkown
|
page read and write
|
|
|
|
7FF5C9550000
|
unkown
|
page readonly
|
|
|
|
7FF5C94AB000
|
unkown
|
page readonly
|
|
|
|
2499EDD0000
|
unkown
|
page read and write
|
|
|
|
2499CE00000
|
unkown
|
page read and write
|
|
|
|
7FF5E8AAD000
|
unkown
|
page readonly
|
|
|
|
2499CF80000
|
unkown
|
page read and write
|
|
|
|
7FF55BA14000
|
unkown
|
page readonly
|
|
|
|
12151202000
|
unkown
|
page read and write
|
|
|
|
7FF5E3083000
|
unkown
|
page readonly
|
|
|
|
7FF508FEB000
|
unkown
|
page readonly
|
|
|
|
2499ED5D000
|
unkown
|
page read and write
|
|
|
|
12150D37000
|
unkown
|
page read and write
|
|
|
|
63D14FF000
|
unkown
|
page read and write
|
|
|
|
7FF51EF01000
|
unkown
|
page readonly
|
|
|
|
12150D28000
|
unkown
|
page read and write
|
|
|
|
7FF51F074000
|
unkown
|
page readonly
|
|
|
|
CA5D77000
|
unkown
|
page read and write
|
|
|
|
1E68CD13000
|
unkown
|
page read and write
|
|
|
|
A92CC7D000
|
unkown
|
page read and write
|
|
|
|
7FF4F3003000
|
unkown
|
page readonly
|
|
|
|
26497450000
|
unkown
|
page readonly
|
|
|
|
12150D28000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
A92CA7A000
|
unkown
|
page read and write
|
|
|
|
12150DBB000
|
unkown
|
page read and write
|
|
|
|
26497313000
|
unkown
|
page read and write
|
|
|
|
7FF508E54000
|
unkown
|
page readonly
|
|
|
|
A92C58E000
|
unkown
|
page read and write
|
|
|
|
2499ED76000
|
unkown
|
page read and write
|
|
|
|
7FF5C95DC000
|
unkown
|
page readonly
|
|
|
|
1A55083C000
|
unkown
|
page read and write
|
|
|
|
12150D3A000
|
unkown
|
page read and write
|
|
|
|
7FF596264000
|
unkown
|
page readonly
|
|
|
|
7FF5E8C44000
|
unkown
|
page readonly
|
|
|
|
12150D6F000
|
unkown
|
page read and write
|
|
|
|
7FF51F104000
|
unkown
|
page readonly
|
|
|
|
7FF51F058000
|
unkown
|
page readonly
|
|
|
|
121506BD000
|
unkown
|
page read and write
|
|
|
|
7FF5C9409000
|
unkown
|
page readonly
|
|
|
|
1A551002000
|
unkown
|
page read and write
|
|
|
|
7FF4F30B9000
|
unkown
|
page readonly
|
|
|
|
7FF5E2F19000
|
unkown
|
page readonly
|
|
|
|
7FF508B82000
|
unkown
|
page readonly
|
|
|
|
249A0610000
|
unkown
|
page read and write
|
|
|
|
2722F106000
|
unkown
|
page read and write
|
|
|
|
12150DE1000
|
unkown
|
page read and write
|
|
|
|
7FF5E8BD6000
|
unkown
|
page readonly
|
|
|
|
7FF5C95AE000
|
unkown
|
page readonly
|
|
|
|
A92CB7A000
|
unkown
|
page read and write
|
|
|
|
2499F102000
|
unkown
|
page read and write
|
|
|
|
7FF5C95BB000
|
unkown
|
page readonly
|
|
|
|
7FF50904C000
|
unkown
|
page readonly
|
|
|
|
19E2F447000
|
unkown
|
page read and write
|
|
|
|
2722F0F6000
|
unkown
|
page read and write
|
|
|
|
E2CF87F000
|
unkown
|
page read and write
|
|
|
|
2CEDE240000
|
unkown
|
page read and write
|
|
|
|
2499CE29000
|
unkown
|
page read and write
|
|
|
|
7FF51F02B000
|
unkown
|
page readonly
|
|
|
|
7FF50902B000
|
unkown
|
page readonly
|
|
|
|
121506DF000
|
unkown
|
page read and write
|
|
|
|
1A550908000
|
unkown
|
page read and write
|
|
|
|
54263FE000
|
unkown
|
page read and write
|
|
|
|
12150D7F000
|
unkown
|
page read and write
|
|
|
|
12151202000
|
unkown
|
page read and write
|
|
|
|
2499E7A0000
|
unkown
|
page read and write
|
|
|
|
12150D3D000
|
unkown
|
page read and write
|
|
|
|
2649726B000
|
unkown
|
page read and write
|
|
|
|
12150D72000
|
unkown
|
page read and write
|
|
|
|
7FF51F099000
|
unkown
|
page readonly
|
|
|
|
2499F07F000
|
unkown
|
page read and write
|
|
|
|
12151202000
|
unkown
|
page read and write
|
|
|
|
7FF5E4D14000
|
unkown
|
page readonly
|
|
|
|
7FF51F112000
|
unkown
|
page readonly
|
|
|
|
7FF5E30AC000
|
unkown
|
page readonly
|
|
|
|
2722F0B0000
|
unkown
|
page readonly
|
|
|
|
12150D39000
|
unkown
|
page read and write
|
|
|
|
7FF5959C8000
|
unkown
|
page readonly
|
|
|
|
12150D16000
|
unkown
|
page read and write
|
|
|
|
12150DA0000
|
unkown
|
page read and write
|
|
|
|
26497202000
|
unkown
|
page read and write
|
|
|
|
1E68CD02000
|
unkown
|
page read and write
|
|
|
|
15AEF024000
|
unkown
|
page read and write
|
|
|
|
12151202000
|
unkown
|
page read and write
|
|
|
|
7FF51E881000
|
unkown
|
page readonly
|
|
|
|
2499CEE5000
|
unkown
|
page read and write
|
|
|
|
4DA0000
|
unkown
|
page read and write
|
|
|
|
2499CF1B000
|
unkown
|
page read and write
|
|
|
|
2499CEBF000
|
unkown
|
page read and write
|
|
|
|
A92C50B000
|
unkown
|
page read and write
|
|
|
|
A92C87F000
|
unkown
|
page read and write
|
|
|
|
121506D2000
|
unkown
|
page read and write
|
|
|
|
12150702000
|
unkown
|
page read and write
|
|
|
|
15AEF113000
|
unkown
|
page read and write
|
|
|
|
7FF596271000
|
unkown
|
page readonly
|
|
|
|
7FF55B9C5000
|
unkown
|
page readonly
|
|
|
|
7FF508CF9000
|
unkown
|
page readonly
|
|
|
|
7FF4F3078000
|
unkown
|
page readonly
|
|
|
|
7FF5C93D5000
|
unkown
|
page readonly
|
|
|
|
7FF55BA1E000
|
unkown
|
page readonly
|
|
|
|
7FF5C969A000
|
unkown
|
page readonly
|
|
|
|
12151400000
|
unkown
|
page readonly
|
|
|
|
2499F200000
|
unkown
|
page read and write
|
|
|
|
12150D32000
|
unkown
|
page read and write
|
|
|
|
7FF5E8A41000
|
unkown
|
page readonly
|
|
|
|
1A550866000
|
unkown
|
page read and write
|
|
|
|
54266FF000
|
unkown
|
page read and write
|
|
|
|
26497271000
|
unkown
|
page read and write
|
|
|
|
2CEDE229000
|
unkown
|
page read and write
|
|
|
|
15AEEE80000
|
unkown
|
page readonly
|
|
|
|
7FF5C95B5000
|
unkown
|
page readonly
|
|
|
|
7FF5C9573000
|
unkown
|
page readonly
|
|
|
|
12150D3A000
|
unkown
|
page read and write
|
|
|
|
7FF51ECDC000
|
unkown
|
page readonly
|
|
|
|
7FF5E30D7000
|
unkown
|
page readonly
|
|
|
|
7FF5E4A40000
|
unkown
|
page readonly
|
|
|
|
7FF5E30AA000
|
unkown
|
page readonly
|
|
|
|
7FF5E2FBB000
|
unkown
|
page readonly
|
|
|
|
1E68CE00000
|
unkown
|
page readonly
|
|
|
|
7FF595D55000
|
unkown
|
page readonly
|
|
|
|
7FF55BA2E000
|
unkown
|
page readonly
|
|
|
|
2CEDE1E0000
|
unkown
|
page read and write
|
|
|
|
7FF55BA3D000
|
unkown
|
page readonly
|
|
|
|
2499CD80000
|
unkown
|
page read and write
|
|
|
|
63D16FF000
|
unkown
|
page read and write
|
|
|
|
D5BE87F000
|
unkown
|
page read and write
|
|
There are 1006 hidden memdumps, click here to show them.