Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
oBfsC4t10n2.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: 0xdf, Last Saved By:
0xdf, Name of Creating Application: Microsoft Excel, Create Time/Date: Mon Mar 23 14:19:10 2020, Last Saved Time/Date: Sat
Apr 25 19:43:56 2020, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\195046CE-9287-469C-A5E7-2198D7A19F57
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://roaming.edog.
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://outlook.office365.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
http://0b.htb/s.dll
|
unknown
|
|
There are 91 hidden URLs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
*:;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
+:;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1D27E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
0;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
;`-
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
30435
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
.e-
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
There are 38 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
561C07F000
|
unkown
|
page read and write
|
|
|
|
7FF50322C000
|
unkown image
|
page readonly
|
|
|
|
7FF552081000
|
unkown image
|
page readonly
|
|
|
|
7FF568E35000
|
unkown image
|
page readonly
|
|
|
|
193E7A8E000
|
unkown
|
page read and write
|
|
|
|
20363C02000
|
unkown
|
page read and write
|
|
|
|
561C2FF000
|
unkown
|
page read and write
|
|
|
|
1361BAE000
|
unkown
|
page read and write
|
|
|
|
7FF532583000
|
unkown image
|
page readonly
|
|
|
|
7FF568A35000
|
unkown image
|
page readonly
|
|
|
|
199F1130000
|
unkown
|
page read and write
|
|
|
|
203636E3000
|
unkown
|
page read and write
|
|
|
|
7DF442B90000
|
unkown image
|
page readonly
|
|
|
|
7FF568DD3000
|
unkown image
|
page readonly
|
|
|
|
7FF568EF0000
|
unkown image
|
page readonly
|
|
|
|
7FF551EFC000
|
unkown image
|
page readonly
|
|
|
|
15810602000
|
unkown
|
page read and write
|
|
|
|
1F56C302000
|
unkown
|
page read and write
|
|
|
|
20363800000
|
unkown image
|
page readonly
|
|
|
|
7FF532EB9000
|
unkown image
|
page readonly
|
|
|
|
199ECB70000
|
unkown image
|
page readonly
|
|
|
|
199EC359000
|
unkown
|
page read and write
|
|
|
|
193E7A00000
|
unkown
|
page read and write
|
|
|
|
153B8450000
|
unkown
|
page read and write
|
|
|
|
7FF568751000
|
unkown image
|
page readonly
|
|
|
|
199EC318000
|
unkown
|
page read and write
|
|
|
|
1581065C000
|
unkown
|
page read and write
|
|
|
|
199F1230000
|
unkown
|
page read and write
|
|
|
|
7FF53334F000
|
unkown image
|
page readonly
|
|
|
|
7FF53C9A4000
|
unkown image
|
page readonly
|
|
|
|
7FF568E85000
|
unkown image
|
page readonly
|
|
|
|
163557B000
|
unkown
|
page read and write
|
|
|
|
22BB3720000
|
unkown image
|
page read and write
|
|
|
|
7FF528B11000
|
unkown image
|
page readonly
|
|
|
|
B08137E000
|
unkown
|
page read and write
|
|
|
|
193E7B02000
|
unkown
|
page read and write
|
|
|
|
276B707E000
|
unkown
|
page read and write
|
|
|
|
15810530000
|
unkown image
|
page readonly
|
|
|
|
7FF568B0F000
|
unkown image
|
page readonly
|
|
|
|
7FF53C72A000
|
unkown image
|
page readonly
|
|
|
|
7FF50323C000
|
unkown image
|
page readonly
|
|
|
|
22BB3879000
|
unkown
|
page read and write
|
|
|
|
7FF5328D8000
|
unkown image
|
page readonly
|
|
|
|
199ECA40000
|
unkown
|
page read and write
|
|
|
|
193E7A27000
|
unkown
|
page read and write
|
|
|
|
199EBCA1000
|
unkown
|
page read and write
|
|
|
|
B0813FE000
|
unkown
|
page read and write
|
|
|
|
7FF5334D8000
|
unkown image
|
page readonly
|
|
|
|
7FF551F82000
|
unkown image
|
page readonly
|
|
|
|
2036366D000
|
unkown
|
page read and write
|
|
|
|
7FF533560000
|
unkown image
|
page readonly
|
|
|
|
22BB3831000
|
unkown
|
page read and write
|
|
|
|
7FF533399000
|
unkown image
|
page readonly
|
|
|
|
7FF528C74000
|
unkown image
|
page readonly
|
|
|
|
A0034CC000
|
unkown
|
page read and write
|
|
|
|
199EC501000
|
unkown
|
page read and write
|
|
|
|
7FF5334FE000
|
unkown image
|
page readonly
|
|
|
|
199F1302000
|
unkown
|
page read and write
|
|
|
|
7FF568BA7000
|
unkown image
|
page readonly
|
|
|
|
7DF57B1F0000
|
unkown image
|
page readonly
|
|
|
|
7DF462250000
|
unkown image
|
page readonly
|
|
|
|
199EBD02000
|
unkown
|
page read and write
|
|
|
|
7DF544CE0000
|
unkown image
|
page readonly
|
|
|
|
7C9EAFE000
|
unkown
|
page read and write
|
|
|
|
276B704E000
|
unkown
|
page read and write
|
|
|
|
276B6F70000
|
unkown image
|
page readonly
|
|
|
|
15810520000
|
unkown image
|
page readonly
|
|
|
|
193E7A55000
|
unkown
|
page read and write
|
|
|
|
276B7049000
|
unkown
|
page read and write
|
|
|
|
199F11C0000
|
unkown
|
page read and write
|
|
|
|
203633B0000
|
heap private
|
page read and write
|
|
|
|
561C17A000
|
unkown
|
page read and write
|
|
|
|
7FF532D6A000
|
unkown image
|
page readonly
|
|
|
|
16359FD000
|
unkown
|
page read and write
|
|
|
|
7DF53AFE0000
|
unkown image
|
page readonly
|
|
|
|
7FF568761000
|
unkown image
|
page readonly
|
|
|
|
199F0ED0000
|
unkown
|
page read and write
|
|
|
|
7FF5B5838000
|
unkown image
|
page readonly
|
|
|
|
7FF53C916000
|
unkown image
|
page readonly
|
|
|
|
7DF564382000
|
unkown image
|
page readonly
|
|
|
|
7FF568E97000
|
unkown image
|
page readonly
|
|
|
|
22BB3874000
|
unkown
|
page read and write
|
|
|
|
199EC960000
|
unkown image
|
page read and write
|
|
|
|
561B95B000
|
unkown
|
page read and write
|
|
|
|
7FF551FC5000
|
unkown image
|
page readonly
|
|
|
|
22BB385E000
|
unkown
|
page read and write
|
|
|
|
7FF568E7C000
|
unkown image
|
page readonly
|
|
|
|
7FF568B0C000
|
unkown image
|
page readonly
|
|
|
|
7FF552089000
|
unkown image
|
page readonly
|
|
|
|
7FF53292D000
|
unkown image
|
page readonly
|
|
|
|
7FF551F98000
|
unkown image
|
page readonly
|
|
|
|
7FF503236000
|
unkown image
|
page readonly
|
|
|
|
7FF568A70000
|
unkown image
|
page readonly
|
|
|
|
136227F000
|
unkown
|
page read and write
|
|
|
|
7FF5B5511000
|
unkown image
|
page readonly
|
|
|
|
7FF568BAE000
|
unkown image
|
page readonly
|
|
|
|
7FF568EF9000
|
unkown image
|
page readonly
|
|
|
|
7FF532F00000
|
unkown image
|
page readonly
|
|
|
|
193E8050000
|
unkown image
|
page readonly
|
|
|
|
7DF54ED20000
|
unkown image
|
page readonly
|
|
|
|
7FF53332E000
|
unkown image
|
page readonly
|
|
|
|
199F11C0000
|
unkown
|
page read and write
|
|
|
|
7FF53C912000
|
unkown image
|
page readonly
|
|
|
|
7DF5458D2000
|
unkown image
|
page readonly
|
|
|
|
C423CBB000
|
unkown
|
page read and write
|
|
|
|
193E7920000
|
unkown image
|
page readonly
|
|
|
|
193E7900000
|
unkown image
|
page readonly
|
|
|
|
199F0F50000
|
unkown
|
page read and write
|
|
|
|
7FF5289FA000
|
unkown image
|
page readonly
|
|
|
|
7FF568DA7000
|
unkown image
|
page readonly
|
|
|
|
7FF5B586F000
|
unkown image
|
page readonly
|
|
|
|
7DF443130000
|
unkown image
|
page readonly
|
|
|
|
C42447F000
|
unkown
|
page read and write
|
|
|
|
7FF5031CA000
|
unkown image
|
page readonly
|
|
|
|
7DF5155B0000
|
unkown image
|
page readonly
|
|
|
|
7FF528488000
|
unkown image
|
page readonly
|
|
|
|
7FF551FD9000
|
unkown image
|
page readonly
|
|
|
|
7DF5458D0000
|
unkown image
|
page readonly
|
|
|
|
7FF528C3D000
|
unkown image
|
page readonly
|
|
|
|
199EBD13000
|
unkown
|
page read and write
|
|
|
|
7FF568E2E000
|
unkown image
|
page readonly
|
|
|
|
22BB3884000
|
unkown
|
page read and write
|
|
|
|
22BB382F000
|
unkown
|
page read and write
|
|
|
|
A00397E000
|
unkown
|
page read and write
|
|
|
|
1635C7E000
|
unkown
|
page read and write
|
|
|
|
7FF5287CA000
|
unkown image
|
page readonly
|
|
|
|
1F56CA02000
|
unkown
|
page read and write
|
|
|
|
561C37F000
|
unkown
|
page read and write
|
|
|
|
7FF5686B3000
|
unkown image
|
page readonly
|
|
|
|
20363641000
|
unkown
|
page read and write
|
|
|
|
7FF5287D0000
|
unkown image
|
page readonly
|
|
|
|
7FF568A31000
|
unkown image
|
page readonly
|
|
|
|
7FF5B58C4000
|
unkown image
|
page readonly
|
|
|
|
7FF5B5492000
|
unkown image
|
page readonly
|
|
|
|
7FF528A9E000
|
unkown image
|
page readonly
|
|
|
|
7DF545260000
|
unkown image
|
page readonly
|
|
|
|
7FF5329BE000
|
unkown image
|
page readonly
|
|
|
|
7FF5B56C8000
|
unkown image
|
page readonly
|
|
|
|
1F56C1D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5458E0000
|
unkown image
|
page readonly
|
|
|
|
199F11C0000
|
unkown
|
page read and write
|
|
|
|
7FF5334C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B57B5000
|
unkown image
|
page readonly
|
|
|
|
7FF53C945000
|
unkown image
|
page readonly
|
|
|
|
7FF551E9D000
|
unkown image
|
page readonly
|
|
|
|
22BB383D000
|
unkown
|
page read and write
|
|
|
|
7FF5B568E000
|
unkown image
|
page readonly
|
|
|
|
7FF5329C9000
|
unkown image
|
page readonly
|
|
|
|
7FF53CA09000
|
unkown image
|
page readonly
|
|
|
|
7FF532931000
|
unkown image
|
page readonly
|
|
|
|
193E7960000
|
unkown image
|
page readonly
|
|
|
|
7FF533505000
|
unkown image
|
page readonly
|
|
|
|
22BB3842000
|
unkown
|
page read and write
|
|
|
|
22BB3847000
|
unkown
|
page read and write
|
|
|
|
22BB3730000
|
heap private
|
page read and write
|
|
|
|
1F56C600000
|
unkown image
|
page readonly
|
|
|
|
7FF5334D6000
|
unkown image
|
page readonly
|
|
|
|
7FF503145000
|
unkown image
|
page readonly
|
|
|
|
199F0F40000
|
unkown
|
page read and write
|
|
|
|
7FF568CC9000
|
unkown image
|
page readonly
|
|
|
|
7FF568CC0000
|
unkown image
|
page readonly
|
|
|
|
199EBC91000
|
unkown
|
page read and write
|
|
|
|
203636E0000
|
unkown
|
page read and write
|
|
|
|
7DF544CC0000
|
unkown image
|
page readonly
|
|
|
|
199EB9B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5328C0000
|
unkown image
|
page readonly
|
|
|
|
199EBAF0000
|
unkown image
|
page readonly
|
|
|
|
7FF528C56000
|
unkown image
|
page readonly
|
|
|
|
7FF53C7CE000
|
unkown image
|
page readonly
|
|
|
|
20363410000
|
heap default
|
page read and write
|
|
|
|
7FF5B580C000
|
unkown image
|
page readonly
|
|
|
|
7FF568E5D000
|
unkown image
|
page readonly
|
|
|
|
7FF532964000
|
unkown image
|
page readonly
|
|
|
|
153B8508000
|
unkown
|
page read and write
|
|
|
|
203635E0000
|
unkown
|
page read and write
|
|
|
|
7FF568CB8000
|
unkown image
|
page readonly
|
|
|
|
7FF568B34000
|
unkown image
|
page readonly
|
|
|
|
199F11C0000
|
unkown
|
page read and write
|
|
|
|
7FF53C87C000
|
unkown image
|
page readonly
|
|
|
|
C42467D000
|
unkown
|
page read and write
|
|
|
|
276B6FA0000
|
unkown image
|
page readonly
|
|
|
|
7FF568E94000
|
unkown image
|
page readonly
|
|
|
|
7FF53C7F8000
|
unkown image
|
page readonly
|
|
|
|
153B8390000
|
heap default
|
page read and write
|
|
|
|
7FF552089000
|
unkown image
|
page readonly
|
|
|
|
7DF5155D0000
|
unkown image
|
page readonly
|
|
|
|
193E7CD0000
|
unkown image
|
page readonly
|
|
|
|
C42477E000
|
unkown
|
page read and write
|
|
|
|
199EC180000
|
unkown image
|
page readonly
|
|
|
|
7FF55207E000
|
unkown image
|
page readonly
|
|
|
|
193E7A02000
|
unkown
|
page read and write
|
|
|
|
7DF545260000
|
unkown image
|
page readonly
|
|
|
|
7FF568C9A000
|
unkown image
|
page readonly
|
|
|
|
7FF5334D2000
|
unkown image
|
page readonly
|
|
|
|
7FF568D65000
|
unkown image
|
page readonly
|
|
|
|
193E78F0000
|
heap private
|
page read and write
|
|
|
|
7DF5458D0000
|
unkown image
|
page readonly
|
|
|
|
22BB3AD0000
|
unkown image
|
page readonly
|
|
|
|
7FF53C510000
|
unkown image
|
page readonly
|
|
|
|
1B4E3350000
|
unkown image
|
page readonly
|
|
|
|
7FF5032AE000
|
unkown image
|
page readonly
|
|
|
|
7DF54ED10000
|
unkown image
|
page readonly
|
|
|
|
1F56C25A000
|
unkown
|
page read and write
|
|
|
|
199ECB20000
|
unkown image
|
page readonly
|
|
|
|
22BB3868000
|
unkown
|
page read and write
|
|
|
|
7DF438EA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B555E000
|
unkown image
|
page readonly
|
|
|
|
22BB385A000
|
unkown
|
page read and write
|
|
|
|
199EC215000
|
unkown
|
page read and write
|
|
|
|
193E7A29000
|
unkown
|
page read and write
|
|
|
|
7FF528BE8000
|
unkown image
|
page readonly
|
|
|
|
7FF568C5E000
|
unkown image
|
page readonly
|
|
|
|
7FF55200C000
|
unkown image
|
page readonly
|
|
|
|
20363B80000
|
unkown image
|
page readonly
|
|
|
|
199EC300000
|
unkown
|
page read and write
|
|
|
|
163515B000
|
unkown
|
page read and write
|
|
|
|
199F12FB000
|
unkown
|
page read and write
|
|
|
|
7DF545262000
|
unkown image
|
page readonly
|
|
|
|
7FF5B5891000
|
unkown image
|
page readonly
|
|
|
|
1F56C080000
|
unkown image
|
page read and write
|
|
|
|
7FF528B17000
|
unkown image
|
page readonly
|
|
|
|
7DF564380000
|
unkown image
|
page readonly
|
|
|
|
7FF532E60000
|
unkown image
|
page readonly
|
|
|
|
276B703C000
|
unkown
|
page read and write
|
|
|
|
199EB9D0000
|
unkown image
|
page readonly
|
|
|
|
7C9F07F000
|
unkown
|
page read and write
|
|
|
|
22BB3770000
|
unkown image
|
page readonly
|
|
|
|
C4240FB000
|
unkown
|
page read and write
|
|
|
|
7FF5B56EB000
|
unkown image
|
page readonly
|
|
|
|
A003A7F000
|
unkown
|
page read and write
|
|
|
|
7FF5335C9000
|
unkown image
|
page readonly
|
|
|
|
7FF532EA5000
|
unkown image
|
page readonly
|
|
|
|
7FF552015000
|
unkown image
|
page readonly
|
|
|
|
7FF532F04000
|
unkown image
|
page readonly
|
|
|
|
199EBC40000
|
unkown
|
page read and write
|
|
|
|
203633A0000
|
unkown image
|
page read and write
|
|
|
|
1635A7B000
|
unkown
|
page read and write
|
|
|
|
1F56C090000
|
heap private
|
page read and write
|
|
|
|
7FF533555000
|
unkown image
|
page readonly
|
|
|
|
199EBBE0000
|
unkown image
|
page read and write
|
|
|
|
7FF5B58C0000
|
unkown image
|
page readonly
|
|
|
|
7FF53C986000
|
unkown image
|
page readonly
|
|
|
|
153B8502000
|
unkown
|
page read and write
|
|
|
|
22BB3860000
|
unkown
|
page read and write
|
|
|
|
7FF532A70000
|
unkown image
|
page readonly
|
|
|
|
15810C50000
|
unkown image
|
page readonly
|
|
|
|
7FF5686AF000
|
unkown image
|
page readonly
|
|
|
|
7FF528CD9000
|
unkown image
|
page readonly
|
|
|
|
7FF551FF6000
|
unkown image
|
page readonly
|
|
|
|
7FF551FAA000
|
unkown image
|
page readonly
|
|
|
|
1361FFB000
|
unkown
|
page read and write
|
|
|
|
A00354E000
|
unkown
|
page read and write
|
|
|
|
7DF5155D0000
|
unkown image
|
page readonly
|
|
|
|
22BB386A000
|
unkown
|
page read and write
|
|
|
|
1F56C213000
|
unkown
|
page read and write
|
|
|
|
1F56C200000
|
unkown
|
page read and write
|
|
|
|
199F10A4000
|
unkown
|
page read and write
|
|
|
|
276B7070000
|
unkown
|
page read and write
|
|
|
|
389387B000
|
unkown
|
page read and write
|
|
|
|
276B7013000
|
unkown
|
page read and write
|
|
|
|
7DF5458C2000
|
unkown image
|
page readonly
|
|
|
|
7FF551B90000
|
unkown image
|
page readonly
|
|
|
|
7FF532E76000
|
unkown image
|
page readonly
|
|
|
|
C42497E000
|
unkown
|
page read and write
|
|
|
|
203634F0000
|
unkown image
|
page readonly
|
|
|
|
199F1190000
|
unkown
|
page read and write
|
|
|
|
7DF564382000
|
unkown image
|
page readonly
|
|
|
|
153B8C02000
|
unkown
|
page read and write
|
|
|
|
7FF5B5818000
|
unkown image
|
page readonly
|
|
|
|
7DF53AFD0000
|
unkown image
|
page readonly
|
|
|
|
7DF53AFE2000
|
unkown image
|
page readonly
|
|
|
|
7DF54ED10000
|
unkown image
|
page readonly
|
|
|
|
561BE7B000
|
unkown
|
page read and write
|
|
|
|
1B4E3460000
|
unkown
|
page read and write
|
|
|
|
199F1305000
|
unkown
|
page read and write
|
|
|
|
1F56C276000
|
unkown
|
page read and write
|
|
|
|
153B8482000
|
unkown
|
page read and write
|
|
|
|
7FF568DDC000
|
unkown image
|
page readonly
|
|
|
|
22BB3841000
|
unkown
|
page read and write
|
|
|
|
7FF5B5865000
|
unkown image
|
page readonly
|
|
|
|
199F1302000
|
unkown
|
page read and write
|
|
|
|
7FF5B5576000
|
unkown image
|
page readonly
|
|
|
|
153B843C000
|
unkown
|
page read and write
|
|
|
|
22BB3740000
|
unkown image
|
page readonly
|
|
|
|
7FF5335BE000
|
unkown image
|
page readonly
|
|
|
|
7DF53AFD0000
|
unkown image
|
page readonly
|
|
|
|
7DF4790C0000
|
unkown image
|
page readonly
|
|
|
|
7FF503245000
|
unkown image
|
page readonly
|
|
|
|
7DF443790000
|
unkown image
|
page readonly
|
|
|
|
7DF544CD2000
|
unkown image
|
page readonly
|
|
|
|
7DF5458C2000
|
unkown image
|
page readonly
|
|
|
|
7FF568C2C000
|
unkown image
|
page readonly
|
|
|
|
7FF533455000
|
unkown image
|
page readonly
|
|
|
|
7FF5B584A000
|
unkown image
|
page readonly
|
|
|
|
7DF54ED02000
|
unkown image
|
page readonly
|
|
|
|
1B4E3330000
|
unkown image
|
page read and write
|
|
|
|
7FF568E49000
|
unkown image
|
page readonly
|
|
|
|
276B7047000
|
unkown
|
page read and write
|
|
|
|
199EBC72000
|
unkown
|
page read and write
|
|
|
|
7FF53CA01000
|
unkown image
|
page readonly
|
|
|
|
7FF528AC8000
|
unkown image
|
page readonly
|
|
|
|
22BB3862000
|
unkown
|
page read and write
|
|
|
|
199F1180000
|
unkown
|
page read and write
|
|
|
|
7FF551DAA000
|
unkown image
|
page readonly
|
|
|
|
199EBCFF000
|
unkown
|
page read and write
|
|
|
|
7FF533290000
|
unkown image
|
page readonly
|
|
|
|
22BB3844000
|
unkown
|
page read and write
|
|
|
|
22BB3800000
|
unkown
|
page read and write
|
|
|
|
7FF568AFD000
|
unkown image
|
page readonly
|
|
|
|
7FF568BC0000
|
unkown image
|
page readonly
|
|
|
|
22BB382D000
|
unkown
|
page read and write
|
|
|
|
276B7108000
|
unkown
|
page read and write
|
|
|
|
1F56C400000
|
unkown image
|
page readonly
|
|
|
|
7FF53C78F000
|
unkown image
|
page readonly
|
|
|
|
276B6F20000
|
unkown image
|
page read and write
|
|
|
|
7DF57B1F2000
|
unkown image
|
page readonly
|
|
|
|
7FF53C9A7000
|
unkown image
|
page readonly
|
|
|
|
20363A00000
|
unkown image
|
page readonly
|
|
|
|
7FF53354C000
|
unkown image
|
page readonly
|
|
|
|
22BB385B000
|
unkown
|
page read and write
|
|
|
|
7FF5032B9000
|
unkown image
|
page readonly
|
|
|
|
199F1060000
|
unkown
|
page read and write
|
|
|
|
7DF5C7C20000
|
unkown image
|
page readonly
|
|
|
|
7FF5032B1000
|
unkown image
|
page readonly
|
|
|
|
158104E0000
|
unkown image
|
page read and write
|
|
|
|
20363500000
|
unkown image
|
page readonly
|
|
|
|
22BB3845000
|
unkown
|
page read and write
|
|
|
|
16358FC000
|
unkown
|
page read and write
|
|
|
|
199F1090000
|
unkown
|
page read and write
|
|
|
|
7DF5643A0000
|
unkown image
|
page readonly
|
|
|
|
A0035CE000
|
unkown
|
page read and write
|
|
|
|
7DF54ED00000
|
unkown image
|
page readonly
|
|
|
|
7FF5B579C000
|
unkown image
|
page readonly
|
|
|
|
1F56C0C0000
|
unkown image
|
page readonly
|
|
|
|
193E7ED0000
|
unkown image
|
page readonly
|
|
|
|
7DF5458E0000
|
unkown image
|
page readonly
|
|
|
|
20363713000
|
unkown
|
page read and write
|
|
|
|
7FF53C1B2000
|
unkown image
|
page readonly
|
|
|
|
199ECB40000
|
unkown image
|
page readonly
|
|
|
|
22BB385C000
|
unkown
|
page read and write
|
|
|
|
7FF568DD7000
|
unkown image
|
page readonly
|
|
|
|
22BB387E000
|
unkown
|
page read and write
|
|
|
|
7DF5C7C20000
|
unkown image
|
page readonly
|
|
|
|
7DF4C5AF0000
|
unkown image
|
page readonly
|
|
|
|
7FF528C0E000
|
unkown image
|
page readonly
|
|
|
|
7FF533564000
|
unkown image
|
page readonly
|
|
|
|
276B7650000
|
unkown image
|
page readonly
|
|
|
|
3715CFB000
|
unkown
|
page read and write
|
|
|
|
1F56C266000
|
unkown
|
page read and write
|
|
|
|
22BB382A000
|
unkown
|
page read and write
|
|
|
|
7C9EE77000
|
unkown
|
page read and write
|
|
|
|
15810702000
|
unkown
|
page read and write
|
|
|
|
7FF5B5656000
|
unkown image
|
page readonly
|
|
|
|
1635D7C000
|
unkown
|
page read and write
|
|
|
|
7FF53C98C000
|
unkown image
|
page readonly
|
|
|
|
7FF5B5836000
|
unkown image
|
page readonly
|
|
|
|
199F1080000
|
unkown
|
page read and write
|
|
|
|
1B4E3580000
|
heap default
|
page read and write
|
|
|
|
22BB386B000
|
unkown
|
page read and write
|
|
|
|
7FF5B589C000
|
unkown image
|
page readonly
|
|
|
|
7FF533277000
|
unkown image
|
page readonly
|
|
|
|
7FF5287E0000
|
unkown image
|
page readonly
|
|
|
|
158104F0000
|
heap private
|
page read and write
|
|
|
|
193E7950000
|
heap default
|
page read and write
|
|
|
|
22BB3813000
|
unkown
|
page read and write
|
|
|
|
B0814FE000
|
unkown
|
page read and write
|
|
|
|
7C9EBFB000
|
unkown
|
page read and write
|
|
|
|
7FF532905000
|
unkown image
|
page readonly
|
|
|
|
199EBBD0000
|
unkown
|
page read and write
|
|
|
|
7FF5B5502000
|
unkown image
|
page readonly
|
|
|
|
199ECB60000
|
unkown image
|
page readonly
|
|
|
|
7DF545270000
|
unkown image
|
page readonly
|
|
|
|
7FF551B80000
|
unkown image
|
page readonly
|
|
|
|
7FF532EAF000
|
unkown image
|
page readonly
|
|
|
|
7FF56875C000
|
unkown image
|
page readonly
|
|
|
|
1F56C313000
|
unkown
|
page read and write
|
|
|
|
7DF544CE0000
|
unkown image
|
page readonly
|
|
|
|
7FF532C8A000
|
unkown image
|
page readonly
|
|
|
|
158105B0000
|
unkown
|
page read and write
|
|
|
|
3715DFB000
|
unkown
|
page read and write
|
|
|
|
7FF533285000
|
unkown image
|
page readonly
|
|
|
|
7FF532946000
|
unkown image
|
page readonly
|
|
|
|
7FF53327E000
|
unkown image
|
page readonly
|
|
|
|
199F12DC000
|
unkown
|
page read and write
|
|
|
|
153B83C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B548E000
|
unkown image
|
page readonly
|
|
|
|
199F12F3000
|
unkown
|
page read and write
|
|
|
|
7FF533388000
|
unkown image
|
page readonly
|
|
|
|
199EBC77000
|
unkown
|
page read and write
|
|
|
|
7FF568C38000
|
unkown image
|
page readonly
|
|
|
|
3893D7D000
|
unkown
|
page read and write
|
|
|
|
7FF568DE8000
|
unkown image
|
page readonly
|
|
|
|
7FF53349A000
|
unkown image
|
page readonly
|
|
|
|
7FF528912000
|
unkown image
|
page readonly
|
|
|
|
199F128E000
|
unkown
|
page read and write
|
|
|
|
7DF5C7C40000
|
unkown image
|
page readonly
|
|
|
|
15810E02000
|
unkown
|
page read and write
|
|
|
|
199EC359000
|
unkown
|
page read and write
|
|
|
|
7FF5B5832000
|
unkown image
|
page readonly
|
|
|
|
193E7A80000
|
unkown
|
page read and write
|
|
|
|
7FF53C959000
|
unkown image
|
page readonly
|
|
|
|
276B6F90000
|
heap default
|
page read and write
|
|
|
|
193E7A13000
|
unkown
|
page read and write
|
|
|
|
7FF551E4E000
|
unkown image
|
page readonly
|
|
|
|
22BB4002000
|
unkown
|
page read and write
|
|
|
|
C424A7E000
|
unkown
|
page read and write
|
|
|
|
199EB990000
|
unkown image
|
page read and write
|
|
|
|
1F56C780000
|
unkown image
|
page readonly
|
|
|
|
7FF551F80000
|
unkown image
|
page readonly
|
|
|
|
7FF5B591E000
|
unkown image
|
page readonly
|
|
|
|
7FF528C70000
|
unkown image
|
page readonly
|
|
|
|
193E8202000
|
unkown
|
page read and write
|
|
|
|
7FF528BD0000
|
unkown image
|
page readonly
|
|
|
|
7FF53274F000
|
unkown image
|
page readonly
|
|
|
|
7FF568EF9000
|
unkown image
|
page readonly
|
|
|
|
7FF568BB5000
|
unkown image
|
page readonly
|
|
|
|
7FF5334AC000
|
unkown image
|
page readonly
|
|
|
|
7FF528AED000
|
unkown image
|
page readonly
|
|
|
|
7FF53CA09000
|
unkown image
|
page readonly
|
|
|
|
7FF5B5879000
|
unkown image
|
page readonly
|
|
|
|
7FF568CB1000
|
unkown image
|
page readonly
|
|
|
|
1361AAB000
|
unkown
|
page read and write
|
|
|
|
276B7102000
|
unkown
|
page read and write
|
|
|
|
7FF568DC7000
|
unkown image
|
page readonly
|
|
|
|
22BB3873000
|
unkown
|
page read and write
|
|
|
|
3893DFF000
|
unkown
|
page read and write
|
|
|
|
163577F000
|
unkown
|
page read and write
|
|
|
|
199F1090000
|
unkown
|
page read and write
|
|
|
|
15810AD0000
|
unkown image
|
page readonly
|
|
|
|
7DF54ED00000
|
unkown image
|
page readonly
|
|
|
|
7FF568D77000
|
unkown image
|
page readonly
|
|
|
|
7DF545280000
|
unkown image
|
page readonly
|
|
|
|
199EBE00000
|
unkown image
|
page readonly
|
|
|
|
153B8449000
|
unkown
|
page read and write
|
|
|
|
22BB3E50000
|
unkown image
|
page readonly
|
|
|
|
561C57E000
|
unkown
|
page read and write
|
|
|
|
199F12AD000
|
unkown
|
page read and write
|
|
|
|
7FF568D91000
|
unkown image
|
page readonly
|
|
|
|
199EBC00000
|
unkown
|
page read and write
|
|
|
|
1F56C253000
|
unkown
|
page read and write
|
|
|
|
7FF532ECD000
|
unkown image
|
page readonly
|
|
|
|
7FF5B5820000
|
unkown image
|
page readonly
|
|
|
|
15810C60000
|
unkown image
|
page readonly
|
|
|
|
1B4E3870000
|
heap private
|
page read and write
|
|
|
|
199ECB30000
|
unkown image
|
page readonly
|
|
|
|
276B7000000
|
unkown
|
page read and write
|
|
|
|
136207E000
|
unkown
|
page read and write
|
|
|
|
561BD77000
|
unkown
|
page read and write
|
|
|
|
7FF528BE2000
|
unkown image
|
page readonly
|
|
|
|
15810500000
|
unkown image
|
page readonly
|
|
|
|
7FF551B7A000
|
unkown image
|
page readonly
|
|
|
|
7FF528C1F000
|
unkown image
|
page readonly
|
|
|
|
7DF5C7C32000
|
unkown image
|
page readonly
|
|
|
|
3893B7E000
|
unkown
|
page read and write
|
|
|
|
22BB3846000
|
unkown
|
page read and write
|
|
|
|
7C9EC7E000
|
unkown
|
page read and write
|
|
|
|
7DF413480000
|
unkown image
|
page readonly
|
|
|
|
199F1261000
|
unkown
|
page read and write
|
|
|
|
1361EFC000
|
unkown
|
page read and write
|
|
|
|
22BB3875000
|
unkown
|
page read and write
|
|
|
|
3715F77000
|
unkown
|
page read and write
|
|
|
|
193E7A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5325E5000
|
unkown image
|
page readonly
|
|
|
|
7DF5155C0000
|
unkown image
|
page readonly
|
|
|
|
7DF5C7C30000
|
unkown image
|
page readonly
|
|
|
|
199EC313000
|
unkown
|
page read and write
|
|
|
|
7FF5B582D000
|
unkown image
|
page readonly
|
|
|
|
7FF53C841000
|
unkown image
|
page readonly
|
|
|
|
7FF5328C2000
|
unkown image
|
page readonly
|
|
|
|
7DF5155C2000
|
unkown image
|
page readonly
|
|
|
|
199EC1F3000
|
unkown
|
page read and write
|
|
|
|
7FF568E66000
|
unkown image
|
page readonly
|
|
|
|
561BF7B000
|
unkown
|
page read and write
|
|
|
|
3893FFD000
|
unkown
|
page read and write
|
|
|
|
1B4E3480000
|
unkown
|
page read and write
|
|
|
|
7FF53C995000
|
unkown image
|
page readonly
|
|
|
|
7FF528C46000
|
unkown image
|
page readonly
|
|
|
|
7FF532EE6000
|
unkown image
|
page readonly
|
|
|
|
199F129C000
|
unkown
|
page read and write
|
|
|
|
153B8330000
|
heap private
|
page read and write
|
|
|
|
7FF5B58A6000
|
unkown image
|
page readonly
|
|
|
|
22BB387A000
|
unkown
|
page read and write
|
|
|
|
7DF5C7C22000
|
unkown image
|
page readonly
|
|
|
|
C424B7F000
|
unkown
|
page read and write
|
|
|
|
22BB3864000
|
unkown
|
page read and write
|
|
|
|
7FF53C918000
|
unkown image
|
page readonly
|
|
|
|
22BB3857000
|
unkown
|
page read and write
|
|
|
|
7DF57B200000
|
unkown image
|
page readonly
|
|
|
|
199F1081000
|
unkown
|
page read and write
|
|
|
|
7DF545272000
|
unkown image
|
page readonly
|
|
|
|
C42427C000
|
unkown
|
page read and write
|
|
|
|
7FF53C9FE000
|
unkown image
|
page readonly
|
|
|
|
7FF568DF2000
|
unkown image
|
page readonly
|
|
|
|
7DF5155B2000
|
unkown image
|
page readonly
|
|
|
|
199ECB50000
|
unkown image
|
page readonly
|
|
|
|
7C9E7EB000
|
unkown
|
page read and write
|
|
|
|
7DF545262000
|
unkown image
|
page readonly
|
|
|
|
7DF564380000
|
unkown image
|
page readonly
|
|
|
|
199F12E8000
|
unkown
|
page read and write
|
|
|
|
193E7980000
|
unkown
|
page read and write
|
|
|
|
199ECEC0000
|
unkown
|
page read and write
|
|
|
|
7FF5B58B5000
|
unkown image
|
page readonly
|
|
|
|
276B704A000
|
unkown
|
page read and write
|
|
|
|
7FF532897000
|
unkown image
|
page readonly
|
|
|
|
199F0EC0000
|
unkown
|
page read and write
|
|
|
|
7FF5334B8000
|
unkown image
|
page readonly
|
|
|
|
7DF57B1F0000
|
unkown image
|
page readonly
|
|
|
|
193E7B13000
|
unkown
|
page read and write
|
|
|
|
1F56C26C000
|
unkown
|
page read and write
|
|
|
|
7FF552006000
|
unkown image
|
page readonly
|
|
|
|
22BB383B000
|
unkown
|
page read and write
|
|
|
|
22BB384E000
|
unkown
|
page read and write
|
|
|
|
20363613000
|
unkown
|
page read and write
|
|
|
|
7DF53AFD2000
|
unkown image
|
page readonly
|
|
|
|
7DF5C7C32000
|
unkown image
|
page readonly
|
|
|
|
7FF532F5E000
|
unkown image
|
page readonly
|
|
|
|
1635E7F000
|
unkown
|
page read and write
|
|
|
|
561C87E000
|
unkown
|
page read and write
|
|
|
|
199EBC29000
|
unkown
|
page read and write
|
|
|
|
7C9EF7F000
|
unkown
|
page read and write
|
|
|
|
7DF544CC2000
|
unkown image
|
page readonly
|
|
|
|
7FF528CD9000
|
unkown image
|
page readonly
|
|
|
|
7FF568E1A000
|
unkown image
|
page readonly
|
|
|
|
203636B9000
|
unkown
|
page read and write
|
|
|
|
7FF528C5C000
|
unkown image
|
page readonly
|
|
|
|
199EC1D1000
|
unkown
|
page read and write
|
|
|
|
7FF533368000
|
unkown image
|
page readonly
|
|
|
|
153B842A000
|
unkown
|
page read and write
|
|
|
|
7FF568E6C000
|
unkown image
|
page readonly
|
|
|
|
153B8513000
|
unkown
|
page read and write
|
|
|
|
7FF532F69000
|
unkown image
|
page readonly
|
|
|
|
199EBC13000
|
unkown
|
page read and write
|
|
|
|
7FF551E78000
|
unkown image
|
page readonly
|
|
|
|
7FF568E76000
|
unkown image
|
page readonly
|
|
|
|
7FF568DF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B5896000
|
unkown image
|
page readonly
|
|
|
|
199F1254000
|
unkown
|
page read and write
|
|
|
|
199F11A0000
|
unkown
|
page read and write
|
|
|
|
7FF568A87000
|
unkown image
|
page readonly
|
|
|
|
193E7B08000
|
unkown
|
page read and write
|
|
|
|
371617F000
|
unkown
|
page read and write
|
|
|
|
7FF551F92000
|
unkown image
|
page readonly
|
|
|
|
199F1060000
|
unkown
|
page read and write
|
|
|
|
7FF53C92A000
|
unkown image
|
page readonly
|
|
|
|
199F1300000
|
unkown
|
page read and write
|
|
|
|
7DF57B210000
|
unkown image
|
page readonly
|
|
|
|
276B7100000
|
unkown
|
page read and write
|
|
|
|
B0812FE000
|
unkown
|
page read and write
|
|
|
|
7DF53AFE2000
|
unkown image
|
page readonly
|
|
|
|
7FF568DB1000
|
unkown image
|
page readonly
|
|
|
|
7DF53AFD2000
|
unkown image
|
page readonly
|
|
|
|
153B8470000
|
unkown
|
page read and write
|
|
|
|
B08147F000
|
unkown
|
page read and write
|
|
|
|
199EBC8D000
|
unkown
|
page read and write
|
|
|
|
1F56C22A000
|
unkown
|
page read and write
|
|
|
|
7FF532594000
|
unkown image
|
page readonly
|
|
|
|
20363D00000
|
unkown
|
page read and write
|
|
|
|
276B7113000
|
unkown
|
page read and write
|
|
|
|
158105B0000
|
unkown
|
page read and write
|
|
|
|
2036367D000
|
unkown
|
page read and write
|
|
|
|
276B6F60000
|
unkown image
|
page readonly
|
|
|
|
561C4FF000
|
unkown
|
page read and write
|
|
|
|
7DF564390000
|
unkown image
|
page readonly
|
|
|
|
7FF528C29000
|
unkown image
|
page readonly
|
|
|
|
7FF53C902000
|
unkown image
|
page readonly
|
|
|
|
22BB386D000
|
unkown
|
page read and write
|
|
|
|
7FF5031F5000
|
unkown image
|
page readonly
|
|
|
|
7FF5B58AC000
|
unkown image
|
page readonly
|
|
|
|
276B6FC0000
|
unkown
|
page read and write
|
|
|
|
1F56C266000
|
unkown
|
page read and write
|
|
|
|
153B8413000
|
unkown
|
page read and write
|
|
|
|
7FF5B574C000
|
unkown image
|
page readonly
|
|
|
|
7FF551CC2000
|
unkown image
|
page readonly
|
|
|
|
7DF544CC2000
|
unkown image
|
page readonly
|
|
|
|
7FF532EDC000
|
unkown image
|
page readonly
|
|
|
|
7FF5B588D000
|
unkown image
|
page readonly
|
|
|
|
7FF5328FE000
|
unkown image
|
page readonly
|
|
|
|
199EB9B0000
|
unkown image
|
page readonly
|
|
|
|
22BB387B000
|
unkown
|
page read and write
|
|
|
|
7DF5458D2000
|
unkown image
|
page readonly
|
|
|
|
7DF5643A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5155C0000
|
unkown image
|
page readonly
|
|
|
|
7FF532162000
|
unkown image
|
page readonly
|
|
|
|
7FF5B5920000
|
unkown image
|
page readonly
|
|
|
|
22BB3740000
|
unkown image
|
page readonly
|
|
|
|
7FF568EEE000
|
unkown image
|
page readonly
|
|
|
|
7FF528AE3000
|
unkown image
|
page readonly
|
|
|
|
371591E000
|
unkown
|
page read and write
|
|
|
|
7FF53C9A0000
|
unkown image
|
page readonly
|
|
|
|
7C9ED7B000
|
unkown
|
page read and write
|
|
|
|
561C3FF000
|
unkown
|
page read and write
|
|
|
|
15810560000
|
unkown image
|
page readonly
|
|
|
|
276B72D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5031C8000
|
unkown image
|
page readonly
|
|
|
|
7FF568CAC000
|
unkown image
|
page readonly
|
|
|
|
15810550000
|
heap default
|
page read and write
|
|
|
|
22BB37C0000
|
unkown
|
page read and write
|
|
|
|
199F12FE000
|
unkown
|
page read and write
|
|
|
|
7FF568B06000
|
unkown image
|
page readonly
|
|
|
|
22BB3902000
|
unkown
|
page read and write
|
|
|
|
7FF50321E000
|
unkown image
|
page readonly
|
|
|
|
7FF568B7C000
|
unkown image
|
page readonly
|
|
|
|
7FF568C9E000
|
unkown image
|
page readonly
|
|
|
|
199F1200000
|
unkown
|
page read and write
|
|
|
|
199F1224000
|
unkown
|
page read and write
|
|
|
|
22BB3865000
|
unkown
|
page read and write
|
|
|
|
C42437F000
|
unkown
|
page read and write
|
|
|
|
7FF533567000
|
unkown image
|
page readonly
|
|
|
|
203633E0000
|
unkown image
|
page readonly
|
|
|
|
7FF53352D000
|
unkown image
|
page readonly
|
|
|
|
1362177000
|
unkown
|
page read and write
|
|
|
|
276B6F40000
|
unkown image
|
page readonly
|
|
|
|
3893AFE000
|
unkown
|
page read and write
|
|
|
|
7FF568C1B000
|
unkown image
|
page readonly
|
|
|
|
7DF57B200000
|
unkown image
|
page readonly
|
|
|
|
7DF545280000
|
unkown image
|
page readonly
|
|
|
|
193E7A50000
|
unkown
|
page read and write
|
|
|
|
20363600000
|
unkown
|
page read and write
|
|
|
|
203633C0000
|
unkown image
|
page readonly
|
|
|
|
7FF528AA9000
|
unkown image
|
page readonly
|
|
|
|
153B88D0000
|
unkown image
|
page readonly
|
|
|
|
199F10A0000
|
unkown
|
page read and write
|
|
|
|
7DF544CD2000
|
unkown image
|
page readonly
|
|
|
|
38939FF000
|
unkown
|
page read and write
|
|
|
|
7C9EA7E000
|
unkown
|
page read and write
|
|
|
|
203633F0000
|
unkown image
|
page readonly
|
|
|
|
20363D32000
|
unkown
|
page read and write
|
|
|
|
7FF53C642000
|
unkown image
|
page readonly
|
|
|
|
15810629000
|
unkown
|
page read and write
|
|
|
|
7DF53AFF0000
|
unkown image
|
page readonly
|
|
|
|
199F12FD000
|
unkown
|
page read and write
|
|
|
|
7FF551FFC000
|
unkown image
|
page readonly
|
|
|
|
7FF5335C9000
|
unkown image
|
page readonly
|
|
|
|
7FF53288B000
|
unkown image
|
page readonly
|
|
|
|
7DF53AFE0000
|
unkown image
|
page readonly
|
|
|
|
7FF568E61000
|
unkown image
|
page readonly
|
|
|
|
199F12EC000
|
unkown
|
page read and write
|
|
|
|
22BB3760000
|
unkown image
|
page readonly
|
|
|
|
158108D0000
|
unkown image
|
page readonly
|
|
|
|
7FF532EEC000
|
unkown image
|
page readonly
|
|
|
|
7DF544CC0000
|
unkown image
|
page readonly
|
|
|
|
193E7B00000
|
unkown
|
page read and write
|
|
|
|
7DF57B1F2000
|
unkown image
|
page readonly
|
|
|
|
276B702A000
|
unkown
|
page read and write
|
|
|
|
22BB383A000
|
unkown
|
page read and write
|
|
|
|
7FF532708000
|
unkown image
|
page readonly
|
|
|
|
7FF53C93E000
|
unkown image
|
page readonly
|
|
|
|
7DF5155B2000
|
unkown image
|
page readonly
|
|
|
|
1F56C23F000
|
unkown
|
page read and write
|
|
|
|
22BB383E000
|
unkown
|
page read and write
|
|
|
|
7FF551FED000
|
unkown image
|
page readonly
|
|
|
|
7FF552020000
|
unkown image
|
page readonly
|
|
|
|
7FF503209000
|
unkown image
|
page readonly
|
|
|
|
7FF5334C2000
|
unkown image
|
page readonly
|
|
|
|
7FF528CD1000
|
unkown image
|
page readonly
|
|
|
|
7FF53C500000
|
unkown image
|
page readonly
|
|
|
|
7FF53C900000
|
unkown image
|
page readonly
|
|
|
|
22BB3858000
|
unkown
|
page read and write
|
|
|
|
199F1084000
|
unkown
|
page read and write
|
|
|
|
7FF552024000
|
unkown image
|
page readonly
|
|
|
|
561C47F000
|
unkown
|
page read and write
|
|
|
|
199EBAE0000
|
unkown image
|
page readonly
|
|
|
|
7FF532E78000
|
unkown image
|
page readonly
|
|
|
|
7DF5155C2000
|
unkown image
|
page readonly
|
|
|
|
7FF533536000
|
unkown image
|
page readonly
|
|
|
|
193E7A6F000
|
unkown
|
page read and write
|
|
|
|
7FF532587000
|
unkown image
|
page readonly
|
|
|
|
153B8491000
|
unkown
|
page read and write
|
|
|
|
22BB3861000
|
unkown
|
page read and write
|
|
|
|
7FF5335C1000
|
unkown image
|
page readonly
|
|
|
|
7FF53350F000
|
unkown image
|
page readonly
|
|
|
|
7DF54ED12000
|
unkown image
|
page readonly
|
|
|
|
7DF57B202000
|
unkown image
|
page readonly
|
|
|
|
7FF53293C000
|
unkown image
|
page readonly
|
|
|
|
7FF5329C9000
|
unkown image
|
page readonly
|
|
|
|
15810500000
|
unkown image
|
page readonly
|
|
|
|
7FF551E59000
|
unkown image
|
page readonly
|
|
|
|
1F56C0A0000
|
unkown image
|
page readonly
|
|
|
|
158105B0000
|
unkown
|
page read and write
|
|
|
|
371589C000
|
unkown
|
page read and write
|
|
|
|
7DF57B202000
|
unkown image
|
page readonly
|
|
|
|
7FF528C4C000
|
unkown image
|
page readonly
|
|
|
|
1F56C202000
|
unkown
|
page read and write
|
|
|
|
199F1068000
|
unkown
|
page read and write
|
|
|
|
7DF545270000
|
unkown image
|
page readonly
|
|
|
|
7FF552027000
|
unkown image
|
page readonly
|
|
|
|
1F56C790000
|
unkown image
|
page readonly
|
|
|
|
20363702000
|
unkown
|
page read and write
|
|
|
|
1B4E3875000
|
heap private
|
page read and write
|
|
|
|
7FF551E93000
|
unkown image
|
page readonly
|
|
|
|
276B7802000
|
unkown
|
page read and write
|
|
|
|
193E78E0000
|
unkown image
|
page read and write
|
|
|
|
199F124B000
|
unkown
|
page read and write
|
|
|
|
7FF5329C1000
|
unkown image
|
page readonly
|
|
|
|
199EC318000
|
unkown
|
page read and write
|
|
|
|
7FF532E8A000
|
unkown image
|
page readonly
|
|
|
|
7DF44CBD0000
|
unkown image
|
page readonly
|
|
|
|
153B8320000
|
unkown image
|
page read and write
|
|
|
|
1F56C0D0000
|
unkown image
|
page readonly
|
|
|
|
3715E7E000
|
unkown
|
page read and write
|
|
|
|
7FF551F96000
|
unkown image
|
page readonly
|
|
|
|
7FF53353C000
|
unkown image
|
page readonly
|
|
|
|
7DF564392000
|
unkown image
|
page readonly
|
|
|
|
7FF53C96D000
|
unkown image
|
page readonly
|
|
|
|
199F106E000
|
unkown
|
page read and write
|
|
|
|
7DF57B210000
|
unkown image
|
page readonly
|
|
|
|
7DF564390000
|
unkown image
|
page readonly
|
|
|
|
153B8340000
|
unkown image
|
page readonly
|
|
|
|
153B844D000
|
unkown
|
page read and write
|
|
|
|
7FF5B585E000
|
unkown image
|
page readonly
|
|
|
|
7FF568E08000
|
unkown image
|
page readonly
|
|
|
|
B08127B000
|
unkown
|
page read and write
|
|
|
|
7FF532E9E000
|
unkown image
|
page readonly
|
|
|
|
7FF53C976000
|
unkown image
|
page readonly
|
|
|
|
199EC000000
|
unkown image
|
page readonly
|
|
|
|
7FF532580000
|
unkown image
|
page readonly
|
|
|
|
1B4E3588000
|
heap default
|
page read and write
|
|
|
|
7FF5B54FF000
|
unkown image
|
page readonly
|
|
|
|
193E7A8A000
|
unkown
|
page read and write
|
|
|
|
7FF528BD2000
|
unkown image
|
page readonly
|
|
|
|
7FF5B57A7000
|
unkown image
|
page readonly
|
|
|
|
7DF54ED20000
|
unkown image
|
page readonly
|
|
|
|
7FF568DBB000
|
unkown image
|
page readonly
|
|
|
|
199F123E000
|
unkown
|
page read and write
|
|
|
|
193E7A3C000
|
unkown
|
page read and write
|
|
|
|
7FF528CCE000
|
unkown image
|
page readonly
|
|
|
|
7FF532919000
|
unkown image
|
page readonly
|
|
|
|
20363687000
|
unkown
|
page read and write
|
|
|
|
22BB37A0000
|
unkown image
|
page readonly
|
|
|
|
C42457F000
|
unkown
|
page read and write
|
|
|
|
199EB9A0000
|
heap private
|
page read and write
|
|
|
|
22BB3863000
|
unkown
|
page read and write
|
|
|
|
203633C0000
|
unkown image
|
page readonly
|
|
|
|
7FF53C94F000
|
unkown image
|
page readonly
|
|
|
|
7FF502EEA000
|
unkown image
|
page readonly
|
|
|
|
7DFDD553E000
|
unkown image
|
page readonly
|
|
|
|
7FF53C847000
|
unkown image
|
page readonly
|
|
|
|
199F0F60000
|
unkown
|
page read and write
|
|
|
|
7FF528BFA000
|
unkown image
|
page readonly
|
|
|
|
199EBC7B000
|
unkown
|
page read and write
|
|
|
|
7DF545272000
|
unkown image
|
page readonly
|
|
|
|
561C27B000
|
unkown
|
page read and write
|
|
|
|
199EC1F0000
|
unkown
|
page read and write
|
|
|
|
7FF551EC7000
|
unkown image
|
page readonly
|
|
|
|
7FF551E0F000
|
unkown image
|
page readonly
|
|
|
|
7FF568A8E000
|
unkown image
|
page readonly
|
|
|
|
7FF568AC8000
|
unkown image
|
page readonly
|
|
|
|
7FF551FBE000
|
unkown image
|
page readonly
|
|
|
|
7FF5334EA000
|
unkown image
|
page readonly
|
|
|
|
7FF568E06000
|
unkown image
|
page readonly
|
|
|
|
15810613000
|
unkown
|
page read and write
|
|
|
|
20363BB0000
|
unkown image
|
page write copy
|
|
|
|
199EBA00000
|
heap default
|
page read and write
|
|
|
|
7FF5B56AF000
|
unkown image
|
page readonly
|
|
|
|
7FF532F61000
|
unkown image
|
page readonly
|
|
|
|
7DF544CD0000
|
unkown image
|
page readonly
|
|
|
|
1581063D000
|
unkown
|
page read and write
|
|
|
|
7DF54ED12000
|
unkown image
|
page readonly
|
|
|
|
203636CA000
|
unkown
|
page read and write
|
|
|
|
199EC302000
|
unkown
|
page read and write
|
|
|
|
7FF532955000
|
unkown image
|
page readonly
|
|
|
|
1B4E3350000
|
unkown image
|
page readonly
|
|
|
|
193E7900000
|
unkown image
|
page readonly
|
|
|
|
7FF5B5929000
|
unkown image
|
page readonly
|
|
|
|
7FF5B57FA000
|
unkown image
|
page readonly
|
|
|
|
153B8400000
|
unkown
|
page read and write
|
|
|
|
22BB3790000
|
heap default
|
page read and write
|
|
|
|
1F56C1F0000
|
unkown
|
page read and write
|
|
|
|
22BB3872000
|
unkown
|
page read and write
|
|
|
|
199F1302000
|
unkown
|
page read and write
|
|
|
|
163587F000
|
unkown
|
page read and write
|
|
|
|
7FF532F69000
|
unkown image
|
page readonly
|
|
|
|
199EBCB1000
|
unkown
|
page read and write
|
|
|
|
153B8A50000
|
unkown image
|
page readonly
|
|
|
|
7DF53AFF0000
|
unkown image
|
page readonly
|
|
|
|
153B8500000
|
unkown
|
page read and write
|
|
|
|
7FF53C81D000
|
unkown image
|
page readonly
|
|
|
|
7DF5C7C40000
|
unkown image
|
page readonly
|
|
|
|
7FF528BE6000
|
unkown image
|
page readonly
|
|
|
|
193E7930000
|
unkown image
|
page readonly
|
|
|
|
7FF53C7D9000
|
unkown image
|
page readonly
|
|
|
|
7DF5458C0000
|
unkown image
|
page readonly
|
|
|
|
7FF568E90000
|
unkown image
|
page readonly
|
|
|
|
20363629000
|
unkown
|
page read and write
|
|
|
|
136237F000
|
unkown
|
page read and write
|
|
|
|
7FF568D6C000
|
unkown image
|
page readonly
|
|
|
|
153B8455000
|
unkown
|
page read and write
|
|
|
|
7FF533198000
|
unkown image
|
page readonly
|
|
|
|
7FF551EC1000
|
unkown image
|
page readonly
|
|
|
|
A003C7F000
|
unkown
|
page read and write
|
|
|
|
15811000000
|
unkown
|
page read and write
|
|
|
|
22BB385F000
|
unkown
|
page read and write
|
|
|
|
276B7089000
|
unkown
|
page read and write
|
|
|
|
15810600000
|
unkown
|
page read and write
|
|
|
|
3893C7E000
|
unkown
|
page read and write
|
|
|
|
1F56C0A0000
|
unkown image
|
page readonly
|
|
|
|
7FF568E02000
|
unkown image
|
page readonly
|
|
|
|
153B8370000
|
unkown image
|
page readonly
|
|
|
|
7DF5C7C22000
|
unkown image
|
page readonly
|
|
|
|
1361B2E000
|
unkown
|
page read and write
|
|
|
|
7FF532967000
|
unkown image
|
page readonly
|
|
|
|
7FF528A5F000
|
unkown image
|
page readonly
|
|
|
|
7FF532F07000
|
unkown image
|
page readonly
|
|
|
|
199EC200000
|
unkown
|
page read and write
|
|
|
|
276B74D0000
|
unkown image
|
page readonly
|
|
|
|
7FF532ED6000
|
unkown image
|
page readonly
|
|
|
|
7FF53C4FA000
|
unkown image
|
page readonly
|
|
|
|
7FF528482000
|
unkown image
|
page readonly
|
|
|
|
7FF532936000
|
unkown image
|
page readonly
|
|
|
|
199EB9E0000
|
unkown image
|
page readonly
|
|
|
|
7FF532BA5000
|
unkown image
|
page readonly
|
|
|
|
7FF568E3F000
|
unkown image
|
page readonly
|
|
|
|
7FF53C813000
|
unkown image
|
page readonly
|
|
|
|
7FF5B58C7000
|
unkown image
|
page readonly
|
|
|
|
199EBC58000
|
unkown
|
page read and write
|
|
|
|
7FF53294C000
|
unkown image
|
page readonly
|
|
|
|
199F1170000
|
unkown
|
page read and write
|
|
|
|
199EC202000
|
unkown
|
page read and write
|
|
|
|
371607E000
|
unkown
|
page read and write
|
|
|
|
7FF53290F000
|
unkown image
|
page readonly
|
|
|
|
C42487F000
|
unkown
|
page read and write
|
|
|
|
A003B7E000
|
unkown
|
page read and write
|
|
|
|
153B8360000
|
unkown image
|
page readonly
|
|
|
|
199F1245000
|
unkown
|
page read and write
|
|
|
|
7FF5B5737000
|
unkown image
|
page readonly
|
|
|
|
276B6F30000
|
heap private
|
page read and write
|
|
|
|
153B86D0000
|
unkown image
|
page readonly
|
|
|
|
7FF551FCF000
|
unkown image
|
page readonly
|
|
|
|
7FF528C15000
|
unkown image
|
page readonly
|
|
|
|
7FF528B4C000
|
unkown image
|
page readonly
|
|
|
|
371599E000
|
unkown
|
page read and write
|
|
|
|
153B83A0000
|
unkown image
|
page readonly
|
|
|
|
276B704C000
|
unkown
|
page read and write
|
|
|
|
153B8340000
|
unkown image
|
page readonly
|
|
|
|
199EBC96000
|
unkown
|
page read and write
|
|
|
|
7FF5032B9000
|
unkown image
|
page readonly
|
|
|
|
1635B7E000
|
unkown
|
page read and write
|
|
|
|
193E7A4D000
|
unkown
|
page read and write
|
|
|
|
7FF5B5740000
|
unkown image
|
page readonly
|
|
|
|
1F56C0F0000
|
heap default
|
page read and write
|
|
|
|
7DF544CD0000
|
unkown image
|
page readonly
|
|
|
|
7FF533546000
|
unkown image
|
page readonly
|
|
|
|
1B4E3370000
|
unkown image
|
page readonly
|
|
|
|
7DF5458C0000
|
unkown image
|
page readonly
|
|
|
|
7FF532CEF000
|
unkown image
|
page readonly
|
|
|
|
199F12F9000
|
unkown
|
page read and write
|
|
|
|
276B7051000
|
unkown
|
page read and write
|
|
|
|
7FF528C77000
|
unkown image
|
page readonly
|
|
|
|
276B6F40000
|
unkown image
|
page readonly
|
|
|
|
7FF5B5929000
|
unkown image
|
page readonly
|
|
|
|
193E7A4A000
|
unkown
|
page read and write
|
|
|
|
7DF54ED02000
|
unkown image
|
page readonly
|
|
|
|
7FF53C97C000
|
unkown image
|
page readonly
|
|
|
|
7FF568C7F000
|
unkown image
|
page readonly
|
|
|
|
7FF5328D2000
|
unkown image
|
page readonly
|
|
|
|
7FF528C65000
|
unkown image
|
page readonly
|
|
|
|
15810580000
|
unkown
|
page read and write
|
|
|
|
561C67B000
|
unkown
|
page read and write
|
|
|
|
7FF532EF5000
|
unkown image
|
page readonly
|
|
|
|
276B7056000
|
unkown
|
page read and write
|
|
|
|
199F11B0000
|
unkown
|
page read and write
|
|
|
|
22BB3877000
|
unkown
|
page read and write
|
|
|
|
7FF53C1B8000
|
unkown image
|
page readonly
|
|
|
|
22BB3CD0000
|
unkown image
|
page readonly
|
|
|
|
7DF5C7C30000
|
unkown image
|
page readonly
|
|
|
|
7DF5155B0000
|
unkown image
|
page readonly
|
|
|
|
3893EFD000
|
unkown
|
page read and write
|
|
|
|
7FF533519000
|
unkown image
|
page readonly
|
|
|
|
7DF564392000
|
unkown image
|
page readonly
|
|
|
|
7FF5B5822000
|
unkown image
|
page readonly
|
|
There are 860 hidden memdumps, click here to show them.