Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
subscription-673890410.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
||
C:\ProgramData\xkNURUQaCiKQrGY.rtf
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Desktop\~$subscription-673890410.xlsb
|
data
|
dropped
|
||
C:\ProgramData\dDVVHyrpueA.txt
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\92CD3603-5ED7-4DD8-A9A4-90905E37531F
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\41A5AE62.png
|
PNG image data, 238 x 337, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4B5088A5.png
|
PNG image data, 295 x 52, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\6076E6FB.tmp
|
Microsoft Excel 2007+
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Q2W5VWUFL5VCMQ7JQPETG3CCTYX72Z4R25PDG[1].txt
|
ASCII text, with no line terminators
|
dropped
|
||
\Device\ConDrv
|
ASCII text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\Q2W5VWUFL5VCMQ7JQPETG3CCTYX72Z4R25PDG[1].txt
|
ASCII text, with no line terminators
|
downloaded
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\6F135607.png
|
PNG image data, 295 x 52, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\BEF1285C.png
|
PNG image data, 238 x 337, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\5042.tmp
|
Microsoft Excel 2007+
|
dropped
|
There are 4 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
|
||
C:\Windows\SysWOW64\wbem\WMIC.exe
|
wmic process call create "mshta C:\ProgramData\xkNURUQaCiKQrGY.rtf"
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
||
C:\Windows\System32\wbem\WMIC.exe
|
wmic process call create "mshta C:\ProgramData\xkNURUQaCiKQrGY.rtf"
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\mshta.exe
|
mshta C:\ProgramData\xkNURUQaCiKQrGY.rtf
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://roaming.edog.
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
|
unknown
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://api.aadrm.com
|
unknown
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://api.addins.store.officeppe.com/addinstemplate
|
unknown
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://ncus.contentsync.
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
http://132.148.135.183:8080/Q2W5VWUFL5VCMQ7JQPETG3CCTYX72Z4R25PDG
|
132.148.135.183
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://outlook.office365.com
|
unknown
|
||
https://wus2.contentsync.
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://substrate.office.com/search/api/v2/init
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
||
https://management.azure.com/
|
unknown
|
||
https://login.windows.net/common/oauth2/authorize
|
unknown
|
||
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://graph.windows.net/
|
unknown
|
||
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
||
https://devnull.onenote.com
|
unknown
|
||
https://ncus.pagecontentsync.
|
unknown
|
||
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
||
https://messaging.office.com/
|
unknown
|
||
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://augloop.office.com/v2
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
https://skyapi.live.net/Activity/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
||
https://dataservice.o365filtering.com
|
unknown
|
||
https://api.cortana.ai
|
unknown
|
||
https://onedrive.live.com
|
unknown
|
||
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
||
http://www.windows.com/pctv.
|
unknown
|
||
http://investor.msn.com
|
unknown
|
||
http://www.msnbc.com/news/ticker.txt
|
unknown
|
||
http://www.%s.comPA
|
unknown
|
||
http://www.icra.org/vocabulary/.
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
||
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
||
http://www.hotmail.com/oe
|
unknown
|
||
http://servername/isapibackend.dll
|
unknown
|
||
http://investor.msn.com/
|
unknown
|
There are 101 hidden URLs, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
132.148.135.183
|
unknown
|
United States
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
)/0
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
*/0
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
RemoteClearDate
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
|
Last
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
|
ReviewToken
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
FilePath
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
StartDate
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
EndDate
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Properties
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Url
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
LastClean
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableWinHttpCertAuth
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableIsOwnerRegex
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableSessionAwareHttpClose
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALForExtendedApps
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALSetSilentAuth
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableGuestCredProvider
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableOstringReplace
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\216DA
|
216DA
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
VBAFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSForms
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSComctlLib
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
*a0
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
|
OriginalAttachmentPath
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
|
TemporaryAttachmentName
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109A10090400000000000F01FEC\Usage
|
OutlookMAPI2Intl_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
EXCELFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTime
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTime
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
?c$
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2EB0A
|
2EB0A
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
%l$
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
OriginalAttachmentPath
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
TemporaryAttachmentName
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109A10090400100000000F01FEC\Usage
|
OutlookMAPI2Intl_1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
There are 45 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
292B000
|
unkown image
|
page readonly
|
||
1ADB6388000
|
unkown
|
page read and write
|
||
B8248FE000
|
stack
|
page read and write
|
||
1ADB63D7000
|
unkown
|
page read and write
|
||
1C1ACA8F000
|
unkown
|
page read and write
|
||
7FF50C0F1000
|
unkown image
|
page readonly
|
||
1EC10C94000
|
unkown
|
page read and write
|
||
7FF4FAE9A000
|
unkown image
|
page readonly
|
||
7FF5C8CD1000
|
unkown image
|
page readonly
|
||
3143000
|
heap private
|
page read and write
|
||
1ADB5BD0000
|
unkown
|
page read and write
|
||
35D0000
|
unkown image
|
page readonly
|
||
1C1ACA50000
|
heap default
|
page read and write
|
||
7DF5093C0000
|
unkown image
|
page readonly
|
||
90D000
|
unkown
|
page read and write
|
||
7FF5AB7FB000
|
unkown image
|
page readonly
|
||
4A2F000
|
stack
|
page read and write
|
||
24DED513000
|
unkown
|
page read and write
|
||
1FAFAC13000
|
unkown
|
page read and write
|
||
7FF5F16FE000
|
unkown image
|
page readonly
|
||
3156000
|
unkown
|
page read and write
|
||
1ADB639D000
|
unkown
|
page read and write
|
||
7FF5C8A4C000
|
unkown image
|
page readonly
|
||
28804630000
|
unkown
|
page read and write
|
||
1ADB6300000
|
unkown
|
page read and write
|
||
1FAFAC5B000
|
unkown
|
page read and write
|
||
1ADB59D0000
|
unkown image
|
page readonly
|
||
1FAFB402000
|
unkown
|
page read and write
|
||
7FF5F172E000
|
unkown image
|
page readonly
|
||
1FAFAC3C000
|
unkown
|
page read and write
|
||
1ADB6398000
|
unkown
|
page read and write
|
||
7FF50BE76000
|
unkown image
|
page readonly
|
||
B82487F000
|
stack
|
page read and write
|
||
7FF4FB3D2000
|
unkown image
|
page readonly
|
||
1FAFAB00000
|
unkown image
|
page readonly
|
||
7FF4FB647000
|
unkown image
|
page readonly
|
||
480FB7E000
|
stack
|
page read and write
|
||
480FD7B000
|
stack
|
page read and write
|
||
7FF5F0FDD000
|
unkown image
|
page readonly
|
||
7DF4FD300000
|
unkown image
|
page readonly
|
||
1E40EDDC000
|
unkown
|
page read and write
|
||
1ADB639B000
|
unkown
|
page read and write
|
||
90C000
|
unkown
|
page read and write
|
||
1FAFAD02000
|
unkown
|
page read and write
|
||
2530E4F000
|
stack
|
page read and write
|
||
295C000
|
unkown image
|
page readonly
|
||
7DF55DB80000
|
unkown image
|
page readonly
|
||
1DBFFAE0000
|
unkown image
|
page readonly
|
||
4C436FB000
|
stack
|
page read and write
|
||
2861000
|
unkown image
|
page readonly
|
||
1EC117C7000
|
unkown
|
page read and write
|
||
7FF58649D000
|
unkown image
|
page readonly
|
||
7FF5724A1000
|
unkown image
|
page readonly
|
||
1FAFAAE0000
|
unkown image
|
page readonly
|
||
1ADB59B0000
|
unkown image
|
page readonly
|
||
7DF5941F0000
|
unkown image
|
page readonly
|
||
1EC10C3C000
|
unkown
|
page read and write
|
||
1E40ED59000
|
heap default
|
page read and write
|
||
1ADB638C000
|
unkown
|
page read and write
|
||
1ADB6800000
|
unkown
|
page read and write
|
||
B824979000
|
stack
|
page read and write
|
||
7FF5F171B000
|
unkown image
|
page readonly
|
||
2CAE000
|
stack
|
page read and write
|
||
1ADB69C4000
|
unkown
|
page read and write
|
||
1EC10EE0000
|
heap private
|
page read and write
|
||
1FAFAED0000
|
unkown image
|
page readonly
|
||
1ADB5C54000
|
unkown
|
page read and write
|
||
1ADB636B000
|
unkown
|
page read and write
|
||
7FF54FE5B000
|
unkown image
|
page readonly
|
||
7DF5941F2000
|
unkown image
|
page readonly
|
||
7FF5F16DF000
|
unkown image
|
page readonly
|
||
7FF5C87BB000
|
unkown image
|
page readonly
|
||
7FF5C8C1D000
|
unkown image
|
page readonly
|
||
7FF4FB73A000
|
unkown image
|
page readonly
|
||
1ADB5BF0000
|
unkown image
|
page readonly
|
||
3147000
|
heap private
|
page read and write
|
||
90CA93E000
|
stack
|
page read and write
|
||
7F4C0000
|
unkown image
|
page readonly
|
||
909000
|
unkown
|
page read and write
|
||
1ADB5CA8000
|
unkown
|
page read and write
|
||
1FAFAC02000
|
unkown
|
page read and write
|
||
7DF5B9602000
|
unkown image
|
page readonly
|
||
921000
|
unkown
|
page read and write
|
||
1E410724000
|
unkown
|
page read and write
|
||
1ADB686A000
|
unkown
|
page read and write
|
||
921000
|
unkown
|
page read and write
|
||
7FF5AB76D000
|
unkown image
|
page readonly
|
||
7DF55DB72000
|
unkown image
|
page readonly
|
||
1DBFFD08000
|
unkown
|
page read and write
|
||
1FAFAC54000
|
unkown
|
page read and write
|
||
1ADB5C3C000
|
unkown
|
page read and write
|
||
7FF50BEFF000
|
unkown image
|
page readonly
|
||
8A0000
|
unkown
|
page read and write
|
||
28804665000
|
heap private
|
page read and write
|
||
1FAFAB60000
|
unkown
|
page read and write
|
||
1E40EE3C000
|
heap default
|
page read and write
|
||
7FF50C043000
|
unkown image
|
page readonly
|
||
7DF45BA40000
|
unkown image
|
page readonly
|
||
7DF5D6AC0000
|
unkown image
|
page readonly
|
||
1E40ED00000
|
unkown
|
page read and write
|
||
1E4108AD000
|
heap private
|
page read and write
|
||
6777DFB000
|
stack
|
page read and write
|
||
7FF50BF4B000
|
unkown image
|
page readonly
|
||
1EC11772000
|
unkown
|
page read and write
|
||
28804420000
|
heap default
|
page read and write
|
||
1ADB6317000
|
unkown
|
page read and write
|
||
7F4C0000
|
unkown image
|
page readonly
|
||
24DED1B0000
|
unkown image
|
page readonly
|
||
24DED2E0000
|
unkown image
|
page readonly
|
||
4C431DB000
|
unkown
|
page read and write
|
||
1EC10C70000
|
unkown
|
page read and write
|
||
288A000
|
unkown image
|
page readonly
|
||
7DF5B9610000
|
unkown image
|
page readonly
|
||
7FF5C8CD5000
|
unkown image
|
page readonly
|
||
8FF000
|
unkown
|
page read and write
|
||
1ADB639A000
|
unkown
|
page read and write
|
||
1E40EE16000
|
heap default
|
page read and write
|
||
7DF5D6AC2000
|
unkown image
|
page readonly
|
||
7FF5C8D59000
|
unkown image
|
page readonly
|
||
1ADB6802000
|
unkown
|
page read and write
|
||
7FF4FB53C000
|
unkown image
|
page readonly
|
||
4B2E000
|
stack
|
page read and write
|
||
8EF000
|
unkown
|
page read and write
|
||
4C4397E000
|
stack
|
page read and write
|
||
1E40EE29000
|
heap default
|
page read and write
|
||
7FF54FF11000
|
unkown image
|
page readonly
|
||
70B096E000
|
stack
|
page read and write
|
||
1E4108A4000
|
heap private
|
page read and write
|
||
7FF585E1E000
|
unkown image
|
page readonly
|
||
7FF5C84DE000
|
unkown image
|
page readonly
|
||
70B0FFE000
|
stack
|
page read and write
|
||
2BCC000
|
stack
|
page read and write
|
||
7FF5AB897000
|
unkown image
|
page readonly
|
||
7FF4FB677000
|
unkown image
|
page readonly
|
||
28A5000
|
unkown image
|
page readonly
|
||
24DED500000
|
unkown
|
page read and write
|
||
1ADB686A000
|
unkown
|
page read and write
|
||
7DF519D50000
|
unkown image
|
page readonly
|
||
7F4E0000
|
unkown image
|
page readonly
|
||
90CAC79000
|
stack
|
page read and write
|
||
7FF5C8D01000
|
unkown image
|
page readonly
|
||
7FF4FB673000
|
unkown image
|
page readonly
|
||
7DF5093C2000
|
unkown image
|
page readonly
|
||
7FF5AB726000
|
unkown image
|
page readonly
|
||
7DF5093B2000
|
unkown image
|
page readonly
|
||
1EC10C4C000
|
unkown
|
page read and write
|
||
7FF5C8C62000
|
unkown image
|
page readonly
|
||
7FF4FB659000
|
unkown image
|
page readonly
|
||
2847000
|
unkown image
|
page readonly
|
||
2530F4F000
|
stack
|
page read and write
|
||
7FF5C8C5F000
|
unkown image
|
page readonly
|
||
7FF5AB8D7000
|
unkown image
|
page readonly
|
||
929000
|
unkown
|
page read and write
|
||
70B0EF7000
|
stack
|
page read and write
|
||
7FF50C0DA000
|
unkown image
|
page readonly
|
||
932000
|
unkown
|
page read and write
|
||
7DF5093B2000
|
unkown image
|
page readonly
|
||
1EC10C1C000
|
unkown
|
page read and write
|
||
2530D4F000
|
stack
|
page read and write
|
||
1ADB6396000
|
unkown
|
page read and write
|
||
24DED600000
|
unkown image
|
page readonly
|
||
1EC11791000
|
unkown
|
page read and write
|
||
7FF4FB5D1000
|
unkown image
|
page readonly
|
||
1E40ECB0000
|
unkown image
|
page readonly
|
||
28804429000
|
heap default
|
page read and write
|
||
6777B7E000
|
stack
|
page read and write
|
||
7FF5F17BA000
|
unkown image
|
page readonly
|
||
7FF50BEC0000
|
unkown image
|
page readonly
|
||
24DED480000
|
unkown
|
page read and write
|
||
1EC11970000
|
heap private
|
page read and write
|
||
1EC1197A000
|
heap private
|
page read and write
|
||
7FF5C8931000
|
unkown image
|
page readonly
|
||
7FF5AB8A9000
|
unkown image
|
page readonly
|
||
B8249FF000
|
stack
|
page read and write
|
||
480FAFD000
|
stack
|
page read and write
|
||
7FF4FB1F1000
|
unkown image
|
page readonly
|
||
7FF50BEBD000
|
unkown image
|
page readonly
|
||
1ADB6364000
|
unkown
|
page read and write
|
||
7FF54FE07000
|
unkown image
|
page readonly
|
||
1C1AC820000
|
unkown image
|
page read and write
|
||
1EC1175A000
|
unkown
|
page read and write
|
||
1EC10C8C000
|
unkown
|
page read and write
|
||
7DFCB981B000
|
unkown image
|
page readonly
|
||
7FF5C8D47000
|
unkown image
|
page readonly
|
||
7FF5AB80C000
|
unkown image
|
page readonly
|
||
7FF5864E2000
|
unkown image
|
page readonly
|
||
2956000
|
unkown image
|
page readonly
|
||
7FF5C8CA5000
|
unkown image
|
page readonly
|
||
1ADB63BB000
|
unkown
|
page read and write
|
||
1ADB6770000
|
unkown image
|
page read and write
|
||
4C435FB000
|
stack
|
page read and write
|
||
7FF5AB481000
|
unkown image
|
page readonly
|
||
1ADB6372000
|
unkown
|
page read and write
|
||
1ADB6963000
|
unkown
|
page read and write
|
||
1ADB6358000
|
unkown
|
page read and write
|
||
1DBFFC4E000
|
unkown
|
page read and write
|
||
4C4377E000
|
stack
|
page read and write
|
||
1ADB6760000
|
unkown
|
page read and write
|
||
8EE000
|
unkown
|
page read and write
|
||
7FF586581000
|
unkown image
|
page readonly
|
||
7DF55DB90000
|
unkown image
|
page readonly
|
||
7FF5864B3000
|
unkown image
|
page readonly
|
||
7FF5AB7F5000
|
unkown image
|
page readonly
|
||
7FF586496000
|
unkown image
|
page readonly
|
||
90CAD7E000
|
stack
|
page read and write
|
||
24DED44B000
|
unkown
|
page read and write
|
||
7FF4FB656000
|
unkown image
|
page readonly
|
||
1ADB6760000
|
unkown
|
page read and write
|
||
1ADB6902000
|
unkown
|
page read and write
|
||
28804A80000
|
unkown image
|
page readonly
|
||
7FF5AB78B000
|
unkown image
|
page readonly
|
||
7FF5864A6000
|
unkown image
|
page readonly
|
||
3149000
|
heap private
|
page read and write
|
||
1EC11791000
|
unkown
|
page read and write
|
||
7FF5C89B7000
|
unkown image
|
page readonly
|
||
7FF4FB213000
|
unkown image
|
page readonly
|
||
7FF4FB417000
|
unkown image
|
page readonly
|
||
7FF5AB9A1000
|
unkown image
|
page readonly
|
||
1ADB638A000
|
unkown
|
page read and write
|
||
1C1AC950000
|
unkown
|
page read and write
|
||
7FF50C06D000
|
unkown image
|
page readonly
|
||
1EC116F0000
|
unkown image
|
page write copy
|
||
7DF5093C0000
|
unkown image
|
page readonly
|
||
7FF4FB5A5000
|
unkown image
|
page readonly
|
||
1DBFFA00000
|
heap default
|
page read and write
|
||
7FF5AB98A000
|
unkown image
|
page readonly
|
||
1EC11740000
|
unkown
|
page read and write
|
||
3150000
|
unkown
|
page read and write
|
||
3142000
|
heap private
|
page read and write
|
||
7FF5F17A9000
|
unkown image
|
page readonly
|
||
7FF5AB9A1000
|
unkown image
|
page readonly
|
||
90C000
|
unkown
|
page read and write
|
||
7FF5C8BB5000
|
unkown image
|
page readonly
|
||
1EC11772000
|
unkown
|
page read and write
|
||
7FF5AB8CE000
|
unkown image
|
page readonly
|
||
7DF417C20000
|
unkown image
|
page readonly
|
||
1E40F0B0000
|
unkown
|
page read and write
|
||
7F4D2000
|
unkown image
|
page readonly
|
||
1EC117C9000
|
unkown
|
page read and write
|
||
83B000
|
unkown
|
page read and write
|
||
1ADB634E000
|
unkown
|
page read and write
|
||
1E41073A000
|
unkown
|
page read and write
|
||
1DBFF9E0000
|
unkown image
|
page readonly
|
||
7FF5C8D63000
|
unkown image
|
page readonly
|
||
1E40EDF8000
|
unkown
|
page read and write
|
||
1EC10CAC000
|
unkown
|
page read and write
|
||
7FF586591000
|
unkown image
|
page readonly
|
||
7FF4FB729000
|
unkown image
|
page readonly
|
||
6777EF7000
|
stack
|
page read and write
|
||
1E40EE3E000
|
heap default
|
page read and write
|
||
480FA7C000
|
unkown
|
page read and write
|
||
1EC10C38000
|
unkown
|
page read and write
|
||
1EC10C18000
|
unkown
|
page read and write
|
||
7FF585DC7000
|
unkown image
|
page readonly
|
||
1ADB639B000
|
unkown
|
page read and write
|
||
1ADB69C5000
|
unkown
|
page read and write
|
||
7FF5C8B5B000
|
unkown image
|
page readonly
|
||
1EC10C74000
|
unkown
|
page read and write
|
||
7FF5AB991000
|
unkown image
|
page readonly
|
||
28804669000
|
heap private
|
page read and write
|
||
7FF5AB8F3000
|
unkown image
|
page readonly
|
||
1FAFAB10000
|
unkown image
|
page readonly
|
||
1EC11772000
|
unkown
|
page read and write
|
||
90CA8BB000
|
unkown
|
page read and write
|
||
7FF54FF0A000
|
unkown image
|
page readonly
|
||
1E40ED8C000
|
unkown
|
page read and write
|
||
1ADB5D16000
|
unkown
|
page read and write
|
||
1EC10CA8000
|
unkown
|
page read and write
|
||
24DED48A000
|
unkown
|
page read and write
|
||
7FF4FB447000
|
unkown image
|
page readonly
|
||
7FF54FCE0000
|
unkown image
|
page readonly
|
||
292F000
|
unkown image
|
page readonly
|
||
7FF4FB34C000
|
unkown image
|
page readonly
|
||
1ADB5CA6000
|
unkown
|
page read and write
|
||
28804380000
|
unkown image
|
page readonly
|
||
7FF585D34000
|
unkown image
|
page readonly
|
||
922000
|
unkown
|
page read and write
|
||
7DF5B9620000
|
unkown image
|
page readonly
|
||
2968000
|
unkown image
|
page readonly
|
||
7FF5F174A000
|
unkown image
|
page readonly
|
||
7FF4FB5C4000
|
unkown image
|
page readonly
|
||
7FF5AB99A000
|
unkown image
|
page readonly
|
||
28804465000
|
unkown
|
page read and write
|
||
7DF519D52000
|
unkown image
|
page readonly
|
||
1C1ACA90000
|
unkown
|
page read and write
|
||
2770000
|
unkown image
|
page readonly
|
||
7FF50BFFD000
|
unkown image
|
page readonly
|
||
1ADB6900000
|
unkown
|
page read and write
|
||
1ADB63AB000
|
unkown
|
page read and write
|
||
7DF594200000
|
unkown image
|
page readonly
|
||
1ADB59A0000
|
heap private
|
page read and write
|
||
7FF585C9F000
|
unkown image
|
page readonly
|
||
1E40EE37000
|
heap default
|
page read and write
|
||
1FAFAC8A000
|
unkown
|
page read and write
|
||
288043F0000
|
unkown
|
page read and write
|
||
1C1ACD50000
|
unkown image
|
page readonly
|
||
1E40EDF0000
|
unkown
|
page read and write
|
||
7FF4FAF16000
|
unkown image
|
page readonly
|
||
7FF4FB5FB000
|
unkown image
|
page readonly
|
||
1ADB6362000
|
unkown
|
page read and write
|
||
28804650000
|
unkown
|
page read and write
|
||
28805070000
|
unkown
|
page read and write
|
||
28804C10000
|
unkown image
|
page readonly
|
||
24DED200000
|
heap default
|
page read and write
|
||
850000
|
unkown image
|
page readonly
|
||
70B10F9000
|
stack
|
page read and write
|
||
1C1ACA79000
|
unkown
|
page read and write
|
||
1ADB6802000
|
unkown
|
page read and write
|
||
2899000
|
unkown image
|
page readonly
|
||
1ADB5990000
|
unkown image
|
page read and write
|
||
7DF5FF432000
|
unkown image
|
page readonly
|
||
1EC11BC5000
|
unkown
|
page read and write
|
||
1E40EE4A000
|
heap default
|
page read and write
|
||
7DF594210000
|
unkown image
|
page readonly
|
||
1EC10C00000
|
unkown
|
page read and write
|
||
3159000
|
unkown
|
page read and write
|
||
1DBFFC2E000
|
unkown
|
page read and write
|
||
7DF5FF440000
|
unkown image
|
page readonly
|
||
1ADB6394000
|
unkown
|
page read and write
|
||
7FF585C97000
|
unkown image
|
page readonly
|
||
1EC10C30000
|
unkown
|
page read and write
|
||
1E40EC90000
|
unkown image
|
page readonly
|
||
1C1ACA81000
|
unkown
|
page read and write
|
||
7FF4FB614000
|
unkown image
|
page readonly
|
||
480FEF7000
|
stack
|
page read and write
|
||
7DF5D6AD0000
|
unkown image
|
page readonly
|
||
7FF54FD7C000
|
unkown image
|
page readonly
|
||
7FF585D36000
|
unkown image
|
page readonly
|
||
7FF4FB663000
|
unkown image
|
page readonly
|
||
7FF5F0F97000
|
unkown image
|
page readonly
|
||
7FF50C0E1000
|
unkown image
|
page readonly
|
||
1EC10C40000
|
unkown
|
page read and write
|
||
7DF594202000
|
unkown image
|
page readonly
|
||
1ADB5C8A000
|
unkown
|
page read and write
|
||
1DBFFC29000
|
unkown
|
page read and write
|
||
1EC117AB000
|
unkown
|
page read and write
|
||
7FF54FE6E000
|
unkown image
|
page readonly
|
||
1E40EE40000
|
heap default
|
page read and write
|
||
1FAFAC61000
|
unkown
|
page read and write
|
||
24DED450000
|
unkown
|
page read and write
|
||
1C1ACB50000
|
unkown image
|
page readonly
|
||
7FF54FE37000
|
unkown image
|
page readonly
|
||
7FF5C8937000
|
unkown image
|
page readonly
|
||
7FF5AB821000
|
unkown image
|
page readonly
|
||
921000
|
unkown
|
page read and write
|
||
7DF5941F2000
|
unkown image
|
page readonly
|
||
1E40EE42000
|
heap default
|
page read and write
|
||
1C1AC840000
|
unkown image
|
page readonly
|
||
924000
|
unkown
|
page read and write
|
||
1DBFFC87000
|
unkown
|
page read and write
|
||
1ADB5C50000
|
unkown
|
page read and write
|
||
7DF594210000
|
unkown image
|
page readonly
|
||
1EC117C7000
|
unkown
|
page read and write
|
||
7FF4FB434000
|
unkown image
|
page readonly
|
||
7DF4B74D0000
|
unkown image
|
page readonly
|
||
7DF519D62000
|
unkown image
|
page readonly
|
||
315A000
|
unkown
|
page read and write
|
||
1EC10C98000
|
unkown
|
page read and write
|
||
24DED1E0000
|
unkown image
|
page readonly
|
||
8D1000
|
heap default
|
page read and write
|
||
7FF54FB95000
|
unkown image
|
page readonly
|
||
909000
|
unkown
|
page read and write
|
||
7FF54FC96000
|
unkown image
|
page readonly
|
||
3450000
|
unkown image
|
page readonly
|
||
901000
|
unkown
|
page read and write
|
||
7FF4FB55A000
|
unkown image
|
page readonly
|
||
1ADB639A000
|
unkown
|
page read and write
|
||
1ADB6363000
|
unkown
|
page read and write
|
||
7FF5C8B94000
|
unkown image
|
page readonly
|
||
1ADB6358000
|
unkown
|
page read and write
|
||
7FF50C03B000
|
unkown image
|
page readonly
|
||
7DF5FF440000
|
unkown image
|
page readonly
|
||
749000
|
unkown
|
page read and write
|
||
1DBFFC6D000
|
unkown
|
page read and write
|
||
1EC10C7C000
|
unkown
|
page read and write
|
||
7FF4FB722000
|
unkown image
|
page readonly
|
||
7FF50BEA1000
|
unkown image
|
page readonly
|
||
1E40EDDC000
|
heap default
|
page read and write
|
||
C41000
|
unkown image
|
page readonly
|
||
1FAFAD00000
|
unkown
|
page read and write
|
||
1EC11772000
|
unkown
|
page read and write
|
||
24DED800000
|
unkown image
|
page readonly
|
||
1ADB5CE0000
|
unkown
|
page read and write
|
||
315B000
|
unkown
|
page read and write
|
||
1EC1175D000
|
unkown
|
page read and write
|
||
24DED980000
|
unkown image
|
page readonly
|
||
1EC11782000
|
unkown
|
page read and write
|
||
7FF54FE33000
|
unkown image
|
page readonly
|
||
7FF54FD91000
|
unkown image
|
page readonly
|
||
7FF5C8DCA000
|
unkown image
|
page readonly
|
||
1FAFAC5E000
|
unkown
|
page read and write
|
||
1ADB6396000
|
unkown
|
page read and write
|
||
7FF5AB02E000
|
unkown image
|
page readonly
|
||
1E40EC70000
|
unkown image
|
page read and write
|
||
480FC7C000
|
stack
|
page read and write
|
||
7DF5FF442000
|
unkown image
|
page readonly
|
||
7DF5D6AC2000
|
unkown image
|
page readonly
|
||
1C1ACED0000
|
unkown image
|
page readonly
|
||
5FC000
|
unkown
|
page read and write
|
||
7FF5AB8C3000
|
unkown image
|
page readonly
|
||
1ADB63C4000
|
unkown
|
page read and write
|
||
7FF54FD65000
|
unkown image
|
page readonly
|
||
1EC10EF0000
|
unkown
|
page read and write
|
||
7DF5B9620000
|
unkown image
|
page readonly
|
||
7FF5864DB000
|
unkown image
|
page readonly
|
||
7DF5093D0000
|
unkown image
|
page readonly
|
||
7FF4FB012000
|
unkown image
|
page readonly
|
||
7FF5C8B22000
|
unkown image
|
page readonly
|
||
7FF54FF01000
|
unkown image
|
page readonly
|
||
70B0DFB000
|
stack
|
page read and write
|
||
1EC117AB000
|
unkown
|
page read and write
|
||
288052E0000
|
unkown
|
page read and write
|
||
7FF54F9F7000
|
unkown image
|
page readonly
|
||
1C1ACA5E000
|
heap default
|
page read and write
|
||
7FF4FB382000
|
unkown image
|
page readonly
|
||
7DF5D6AB2000
|
unkown image
|
page readonly
|
||
288043D0000
|
unkown
|
page read and write
|
||
1C1AC9C0000
|
unkown image
|
page readonly
|
||
7FF5C8A24000
|
unkown image
|
page readonly
|
||
7DF5D6AB0000
|
unkown image
|
page readonly
|
||
1ADB639A000
|
unkown
|
page read and write
|
||
7DF55DB82000
|
unkown image
|
page readonly
|
||
1FAFAB30000
|
heap default
|
page read and write
|
||
900000
|
unkown
|
page read and write
|
||
7FF5C8DA3000
|
unkown image
|
page readonly
|
||
840000
|
unkown image
|
page readonly
|
||
7FF4FB38A000
|
unkown image
|
page readonly
|
||
7FF5C87B7000
|
unkown image
|
page readonly
|
||
7FF5863A2000
|
unkown image
|
page readonly
|
||
7FF5C8C3B000
|
unkown image
|
page readonly
|
||
1EC11749000
|
unkown
|
page read and write
|
||
7DF5B9600000
|
unkown image
|
page readonly
|
||
7FF5C8E51000
|
unkown image
|
page readonly
|
||
1ADB5C57000
|
unkown
|
page read and write
|
||
7FF54FE1D000
|
unkown image
|
page readonly
|
||
1FAFB0D0000
|
unkown image
|
page readonly
|
||
1E40EE23000
|
heap default
|
page read and write
|
||
7FF4FB621000
|
unkown image
|
page readonly
|
||
1ADB59E0000
|
unkown image
|
page readonly
|
||
90D000
|
unkown
|
page read and write
|
||
7FF54FE8D000
|
unkown image
|
page readonly
|
||
7FF4FB6AE000
|
unkown image
|
page readonly
|
||
1ADB6180000
|
unkown image
|
page readonly
|
||
90E000
|
unkown
|
page read and write
|
||
1ADB639A000
|
unkown
|
page read and write
|
||
7FF54FD95000
|
unkown image
|
page readonly
|
||
2880448E000
|
heap default
|
page read and write
|
||
1EC1175E000
|
unkown
|
page read and write
|
||
1DBFFC13000
|
unkown
|
page read and write
|
||
74D000
|
unkown
|
page read and write
|
||
7DF55DB70000
|
unkown image
|
page readonly
|
||
8C0000
|
heap default
|
page read and write
|
||
1E40ED50000
|
heap default
|
page read and write
|
||
8EC000
|
unkown
|
page read and write
|
||
7FF586574000
|
unkown image
|
page readonly
|
||
7FF585E19000
|
unkown image
|
page readonly
|
||
1FAFAC00000
|
unkown
|
page read and write
|
||
1C1AC9A0000
|
heap private
|
page read and write
|
||
1EC11791000
|
unkown
|
page read and write
|
||
7F4E0000
|
unkown image
|
page readonly
|
||
7FF5C8D9B000
|
unkown image
|
page readonly
|
||
28804380000
|
unkown image
|
page readonly
|
||
3120000
|
unkown
|
page read and write
|
||
7FF4FB5BC000
|
unkown image
|
page readonly
|
||
1ADB6396000
|
unkown
|
page read and write
|
||
7FF54FE30000
|
unkown image
|
page readonly
|
||
1ADB639A000
|
unkown
|
page read and write
|
||
1E40ED84000
|
heap default
|
page read and write
|
||
7FF4FAEFB000
|
unkown image
|
page readonly
|
||
1EC11BC0000
|
unkown
|
page read and write
|
||
28804370000
|
unkown
|
page read and write
|
||
1E40EF20000
|
unkown image
|
page readonly
|
||
7FF4FB741000
|
unkown image
|
page readonly
|
||
67780FF000
|
stack
|
page read and write
|
||
7FF4FB74A000
|
unkown image
|
page readonly
|
||
1EC11972000
|
heap private
|
page read and write
|
||
7DF55DB72000
|
unkown image
|
page readonly
|
||
7FF5C8E3A000
|
unkown image
|
page readonly
|
||
1EC117AB000
|
unkown
|
page read and write
|
||
7FF5C8E41000
|
unkown image
|
page readonly
|
||
8FD000
|
unkown
|
page read and write
|
||
7FF5AB917000
|
unkown image
|
page readonly
|
||
90CA9BD000
|
stack
|
page read and write
|
||
7FF5F16F0000
|
unkown image
|
page readonly
|
||
7FF50C06A000
|
unkown image
|
page readonly
|
||
1ADB5AE0000
|
unkown image
|
page readonly
|
||
7FF54FEFA000
|
unkown image
|
page readonly
|
||
1DB80000000
|
unkown image
|
page readonly
|
||
1ADB635A000
|
unkown
|
page read and write
|
||
28804670000
|
unkown
|
page read and write
|
||
7FF4FB751000
|
unkown image
|
page readonly
|
||
7DF407280000
|
unkown image
|
page readonly
|
||
7FF4FB2FF000
|
unkown image
|
page readonly
|
||
6777AFE000
|
stack
|
page read and write
|
||
1ADB5C13000
|
unkown
|
page read and write
|
||
7FF50C017000
|
unkown image
|
page readonly
|
||
7FF4FB687000
|
unkown image
|
page readonly
|
||
7FF5AB8AF000
|
unkown image
|
page readonly
|
||
7DF5941F0000
|
unkown image
|
page readonly
|
||
1ADB5CE9000
|
unkown
|
page read and write
|
||
7FF5C8D2E000
|
unkown image
|
page readonly
|
||
1C1ACA73000
|
unkown
|
page read and write
|
||
24DED502000
|
unkown
|
page read and write
|
||
8EE000
|
unkown
|
page read and write
|
||
1ADB5D08000
|
unkown
|
page read and write
|
||
1C1AC9B0000
|
unkown image
|
page readonly
|
||
7FF58632A000
|
unkown image
|
page readonly
|
||
7FF5AB825000
|
unkown image
|
page readonly
|
||
7FF5C8D73000
|
unkown image
|
page readonly
|
||
1E40EC80000
|
unkown image
|
page readonly
|
||
7FF5864A3000
|
unkown image
|
page readonly
|
||
2883000
|
unkown image
|
page readonly
|
||
7FF5C8D5F000
|
unkown image
|
page readonly
|
||
1E40EDF0000
|
unkown
|
page read and write
|
||
7FF5C8A27000
|
unkown image
|
page readonly
|
||
1ADB6362000
|
unkown
|
page read and write
|
||
2880446C000
|
unkown
|
page read and write
|
||
1EC10C08000
|
unkown
|
page read and write
|
||
1E40EDE8000
|
unkown
|
page read and write
|
||
1EC117C9000
|
unkown
|
page read and write
|
||
7DF519D70000
|
unkown image
|
page readonly
|
||
3154000
|
unkown
|
page read and write
|
||
7FF4FB546000
|
unkown image
|
page readonly
|
||
7FF5F17CA000
|
unkown image
|
page readonly
|
||
7FF5C8C01000
|
unkown image
|
page readonly
|
||
7F3C0000
|
unkown image
|
page readonly
|
||
7F4C2000
|
unkown image
|
page readonly
|
||
1ADB63BD000
|
unkown
|
page read and write
|
||
7DF55DB90000
|
unkown image
|
page readonly
|
||
2880446C000
|
unkown
|
page read and write
|
||
1ADB61B0000
|
unkown image
|
page write copy
|
||
1EC117CF000
|
unkown
|
page read and write
|
||
1C1ACA57000
|
heap default
|
page read and write
|
||
7FF4FB567000
|
unkown image
|
page readonly
|
||
7FF4FB335000
|
unkown image
|
page readonly
|
||
1E4108A0000
|
heap private
|
page read and write
|
||
7FF4FB6CD000
|
unkown image
|
page readonly
|
||
7FF5C8DAE000
|
unkown image
|
page readonly
|
||
7FF4FB6A2000
|
unkown image
|
page readonly
|
||
1FAFAD08000
|
unkown
|
page read and write
|
||
1ADB6388000
|
unkown
|
page read and write
|
||
7FF50C0C2000
|
unkown image
|
page readonly
|
||
7FF5C89B9000
|
unkown image
|
page readonly
|
||
7DF4920C0000
|
unkown image
|
page readonly
|
||
7FF5AB8FE000
|
unkown image
|
page readonly
|
||
1E40EDED000
|
unkown
|
page read and write
|
||
7DF55DB70000
|
unkown image
|
page readonly
|
||
1EC10C0C000
|
unkown
|
page read and write
|
||
1ADB6389000
|
unkown
|
page read and write
|
||
7FF54FE3E000
|
unkown image
|
page readonly
|
||
1ADB6377000
|
unkown
|
page read and write
|
||
7FF50BFF9000
|
unkown image
|
page readonly
|
||
1EC10C90000
|
unkown
|
page read and write
|
||
1DBFF9B0000
|
unkown image
|
page readonly
|
||
1ADB635A000
|
unkown
|
page read and write
|
||
8EE000
|
unkown
|
page read and write
|
||
7FF5F17C5000
|
unkown image
|
page readonly
|
||
1C1AC9A5000
|
heap private
|
page read and write
|
||
2896000
|
unkown image
|
page readonly
|
||
1E40F0C0000
|
unkown image
|
page readonly
|
||
1EC10C51000
|
unkown
|
page read and write
|
||
7DF5093D0000
|
unkown image
|
page readonly
|
||
1C1ACA81000
|
unkown
|
page read and write
|
||
B824A7E000
|
stack
|
page read and write
|
||
1DBFFD02000
|
unkown
|
page read and write
|
||
1ADB639C000
|
unkown
|
page read and write
|
||
3140000
|
heap private
|
page read and write
|
||
7FF586591000
|
unkown image
|
page readonly
|
||
1EC10C10000
|
unkown
|
page read and write
|
||
1ADB6372000
|
unkown
|
page read and write
|
||
28DC000
|
unkown image
|
page readonly
|
||
1ADB6363000
|
unkown
|
page read and write
|
||
1EC10BFC000
|
unkown
|
page read and write
|
||
7FF4FB542000
|
unkown image
|
page readonly
|
||
1ADB6388000
|
unkown
|
page read and write
|
||
929000
|
unkown
|
page read and write
|
||
2C4E000
|
stack
|
page read and write
|
||
1ADB5CD3000
|
unkown
|
page read and write
|
||
1ADB5CE6000
|
unkown
|
page read and write
|
||
1ADB5A00000
|
heap default
|
page read and write
|
||
7FF5C8C20000
|
unkown image
|
page readonly
|
||
1DBFF990000
|
unkown image
|
page read and write
|
||
1ADB6000000
|
unkown image
|
page readonly
|
||
1E40EDF1000
|
unkown
|
page read and write
|
||
7DF5B9602000
|
unkown image
|
page readonly
|
||
1EC10CF0000
|
unkown image
|
page readonly
|
||
7FF5AB8B3000
|
unkown image
|
page readonly
|
||
1EC10DB0000
|
heap private
|
page read and write
|
||
1ADB635A000
|
unkown
|
page read and write
|
||
288052B0000
|
unkown
|
page read and write
|
||
2CE8000
|
heap private
|
page read and write
|
||
590000
|
unkown image
|
page read and write
|
||
70B11F7000
|
stack
|
page read and write
|
||
7FF5AB972000
|
unkown image
|
page readonly
|
||
5A0000
|
unkown image
|
page readonly
|
||
1ADB6802000
|
unkown
|
page read and write
|
||
1FAFAC81000
|
unkown
|
page read and write
|
||
7F4D2000
|
unkown image
|
page readonly
|
||
756000
|
unkown
|
page read and write
|
||
1C1AC970000
|
unkown
|
page read and write
|
||
7FF4FB6D1000
|
unkown image
|
page readonly
|
||
1E40ECC0000
|
unkown image
|
page readonly
|
||
7FF5C8E50000
|
unkown image
|
page readonly
|
||
288052D0000
|
unkown
|
page read and write
|
||
7FF5F1723000
|
unkown image
|
page readonly
|
||
1E40F105000
|
heap private
|
page read and write
|
||
7FF5C8C09000
|
unkown image
|
page readonly
|
||
1DBFFBD0000
|
unkown
|
page read and write
|
||
1ADB6396000
|
unkown
|
page read and write
|
||
7FF4FB5AB000
|
unkown image
|
page readonly
|
||
7FF50C0D4000
|
unkown image
|
page readonly
|
||
7FF50C0EA000
|
unkown image
|
page readonly
|
||
9F0000
|
heap default
|
page read and write
|
||
1E40EE1E000
|
unkown
|
page read and write
|
||
24DED449000
|
unkown
|
page read and write
|
||
1E40F0A0000
|
unkown image
|
page readonly
|
||
7DF5D6AB2000
|
unkown image
|
page readonly
|
||
1EC10C60000
|
unkown
|
page read and write
|
||
1E410720000
|
unkown
|
page read and write
|
||
1E40ECE0000
|
unkown
|
page read and write
|
||
1EC10C44000
|
unkown
|
page read and write
|
||
1EC10C48000
|
unkown
|
page read and write
|
||
1E40EE2C000
|
heap default
|
page read and write
|
||
1EC10C9C000
|
unkown
|
page read and write
|
||
1DBFFC54000
|
unkown
|
page read and write
|
||
7FF5C8CBC000
|
unkown image
|
page readonly
|
||
7FF4FB4F5000
|
unkown image
|
page readonly
|
||
7FF50BEDB000
|
unkown image
|
page readonly
|
||
90CADF9000
|
stack
|
page read and write
|
||
24DED413000
|
unkown
|
page read and write
|
||
7FF5C8BD6000
|
unkown image
|
page readonly
|
||
7FF50BF45000
|
unkown image
|
page readonly
|
||
1EC10EE4000
|
heap private
|
page read and write
|
||
28C6000
|
unkown image
|
page readonly
|
||
7FF5C8DCD000
|
unkown image
|
page readonly
|
||
7FF586569000
|
unkown image
|
page readonly
|
||
24DED1B0000
|
unkown image
|
page readonly
|
||
28BD000
|
unkown image
|
page readonly
|
||
1E40F0E0000
|
unkown
|
page read and write
|
||
7FF50C003000
|
unkown image
|
page readonly
|
||
1DBFFD00000
|
unkown
|
page read and write
|
||
7FF50C013000
|
unkown image
|
page readonly
|
||
1ADB6322000
|
unkown
|
page read and write
|
||
7FF5C8C05000
|
unkown image
|
page readonly
|
||
253094E000
|
stack
|
page read and write
|
||
7DF5B9612000
|
unkown image
|
page readonly
|
||
1ADB63BA000
|
unkown
|
page read and write
|
||
1EC117CE000
|
unkown
|
page read and write
|
||
7FF50C067000
|
unkown image
|
page readonly
|
||
7DF5FF442000
|
unkown image
|
page readonly
|
||
1E40EC90000
|
unkown image
|
page readonly
|
||
7FF5C8D2A000
|
unkown image
|
page readonly
|
||
7FF5AB984000
|
unkown image
|
page readonly
|
||
1ADB639A000
|
unkown
|
page read and write
|
||
8EE000
|
unkown
|
page read and write
|
||
1FAFAC66000
|
unkown
|
page read and write
|
||
7FF4FB67E000
|
unkown image
|
page readonly
|
||
1E40F310000
|
unkown image
|
page readonly
|
||
1ADB5C29000
|
unkown
|
page read and write
|
||
28804360000
|
unkown image
|
page read and write
|
||
1E40F10E000
|
heap private
|
page read and write
|
||
4AAF000
|
stack
|
page read and write
|
||
2798000
|
unkown image
|
page readonly
|
||
7FF4FB65F000
|
unkown image
|
page readonly
|
||
7FF5C8E22000
|
unkown image
|
page readonly
|
||
1ADB5C00000
|
unkown
|
page read and write
|
||
7DF5D6AB0000
|
unkown image
|
page readonly
|
||
1ADB5CBC000
|
unkown
|
page read and write
|
||
1ADB639A000
|
unkown
|
page read and write
|
||
7FF5AB487000
|
unkown image
|
page readonly
|
||
7FF4FB670000
|
unkown image
|
page readonly
|
||
7FF5C8E29000
|
unkown image
|
page readonly
|
||
7DF519D60000
|
unkown image
|
page readonly
|
||
480FDFE000
|
stack
|
page read and write
|
||
9D0000
|
unkown
|
page read and write
|
||
1EC11950000
|
unkown image
|
page readonly
|
||
1E40EDC2000
|
heap default
|
page read and write
|
||
7FF5AB91A000
|
unkown image
|
page readonly
|
||
7FF5C8617000
|
unkown image
|
page readonly
|
||
7DF5093B0000
|
unkown image
|
page readonly
|
||
7FF5F16E3000
|
unkown image
|
page readonly
|
||
1ADB6802000
|
unkown
|
page read and write
|
||
7FF58650A000
|
unkown image
|
page readonly
|
||
7FF5AB91D000
|
unkown image
|
page readonly
|
||
4AE0000
|
heap private
|
page read and write
|
||
7FF5C8D7E000
|
unkown image
|
page readonly
|
||
1ADB63BD000
|
unkown
|
page read and write
|
||
1ADB5CC3000
|
unkown
|
page read and write
|
||
315D000
|
unkown
|
page read and write
|
||
7FF5C8E4A000
|
unkown image
|
page readonly
|
||
2C0E000
|
stack
|
page read and write
|
||
90B000
|
unkown
|
page read and write
|
||
7FF5C8C67000
|
unkown image
|
page readonly
|
||
7FF5F16F7000
|
unkown image
|
page readonly
|
||
1E40F0D0000
|
unkown
|
page read and write
|
||
7DF519D60000
|
unkown image
|
page readonly
|
||
1E40EDF0000
|
heap default
|
page read and write
|
||
7FF5C8D77000
|
unkown image
|
page readonly
|
||
932000
|
unkown
|
page read and write
|
||
7FF5AB59C000
|
unkown image
|
page readonly
|
||
1EC117B6000
|
unkown
|
page read and write
|
||
7FF4FAEA6000
|
unkown image
|
page readonly
|
||
7FF4FB422000
|
unkown image
|
page readonly
|
||
7FF54F9F1000
|
unkown image
|
page readonly
|
||
70B127F000
|
stack
|
page read and write
|
||
1ADB6802000
|
unkown
|
page read and write
|
||
1E40EDE8000
|
heap default
|
page read and write
|
||
7FF5F17A2000
|
unkown image
|
page readonly
|
||
921000
|
unkown
|
page read and write
|
||
1ADB639A000
|
unkown
|
page read and write
|
||
7FF5863FC000
|
unkown image
|
page readonly
|
||
1FAFAAD0000
|
heap private
|
page read and write
|
||
B824AFC000
|
stack
|
page read and write
|
||
1ADB5E00000
|
unkown image
|
page readonly
|
||
4C43877000
|
stack
|
page read and write
|
||
1EC10C24000
|
unkown
|
page read and write
|
||
288052C0000
|
unkown
|
page readonly
|
||
1E40EE1B000
|
unkown
|
page read and write
|
||
7FF54FD1F000
|
unkown image
|
page readonly
|
||
7FF50C01E000
|
unkown image
|
page readonly
|
||
1ADB5C70000
|
unkown
|
page read and write
|
||
1ADB6396000
|
unkown
|
page read and write
|
||
1ADB5D02000
|
unkown
|
page read and write
|
||
7FF5AB8C7000
|
unkown image
|
page readonly
|
||
7FF50BFE7000
|
unkown image
|
page readonly
|
||
1EC11791000
|
unkown
|
page read and write
|
||
1ADB5C4D000
|
unkown
|
page read and write
|
||
1C1ACA81000
|
unkown
|
page read and write
|
||
28AF000
|
unkown image
|
page readonly
|
||
7DF55DB82000
|
unkown image
|
page readonly
|
||
7DF519D50000
|
unkown image
|
page readonly
|
||
5A0000
|
unkown image
|
page readonly
|
||
24DED190000
|
unkown image
|
page read and write
|
||
7FF50C0C9000
|
unkown image
|
page readonly
|
||
1C1ACA7B000
|
unkown
|
page read and write
|
||
1DBFF9D0000
|
unkown image
|
page readonly
|
||
1EC10C80000
|
unkown
|
page read and write
|
||
1E410870000
|
unkown image
|
page readonly
|
||
1ADB63CC000
|
unkown
|
page read and write
|
||
1ADB6398000
|
unkown
|
page read and write
|
||
7F4C2000
|
unkown image
|
page readonly
|
||
1EC118D0000
|
unkown
|
page read and write
|
||
2761000
|
unkown image
|
page readonly
|
||
1C1ACA67000
|
heap default
|
page read and write
|
||
1ADB63C4000
|
unkown
|
page read and write
|
||
946000
|
unkown
|
page read and write
|
||
7FF5864EE000
|
unkown image
|
page readonly
|
||
7FF4FB751000
|
unkown image
|
page readonly
|
||
28AB000
|
unkown image
|
page readonly
|
||
7DF5D6AC0000
|
unkown image
|
page readonly
|
||
1EC11BD7000
|
unkown
|
page read and write
|
||
7FF5F17D1000
|
unkown image
|
page readonly
|
||
70B08EB000
|
unkown
|
page read and write
|
||
7FF4FB5F1000
|
unkown image
|
page readonly
|
||
1ADB6360000
|
unkown
|
page read and write
|
||
1ADB5D13000
|
unkown
|
page read and write
|
||
28804660000
|
heap private
|
page read and write
|
||
7FF5AB979000
|
unkown image
|
page readonly
|
||
90CACFF000
|
stack
|
page read and write
|
||
7FF5AB770000
|
unkown image
|
page readonly
|
||
1EC10BF8000
|
unkown
|
page read and write
|
||
7DF4D4980000
|
unkown image
|
page readonly
|
||
24DED429000
|
unkown
|
page read and write
|
||
7FF5C8B17000
|
unkown image
|
page readonly
|
||
294B000
|
unkown image
|
page readonly
|
||
6777FFE000
|
stack
|
page read and write
|
||
1E40EDC6000
|
unkown
|
page read and write
|
||
7FF4FB551000
|
unkown image
|
page readonly
|
||
1EC117C9000
|
unkown
|
page read and write
|
||
1ADB6202000
|
unkown
|
page read and write
|
||
1ADB5CEA000
|
unkown
|
page read and write
|
||
7FF4FB54A000
|
unkown image
|
page readonly
|
||
7FF54FEE9000
|
unkown image
|
page readonly
|
||
7FF50C027000
|
unkown image
|
page readonly
|
||
7FF5C8E34000
|
unkown image
|
page readonly
|
||
1ADB6902000
|
unkown
|
page read and write
|
||
B10000
|
unkown
|
page read and write
|
||
284E000
|
unkown image
|
page readonly
|
||
1E40F110000
|
unkown image
|
page readonly
|
||
1FAFAB40000
|
unkown image
|
page readonly
|
||
2880446D000
|
unkown
|
page read and write
|
||
1EC11772000
|
unkown
|
page read and write
|
||
1EC11782000
|
unkown
|
page read and write
|
||
24DED400000
|
unkown
|
page read and write
|
||
1EC11759000
|
unkown
|
page read and write
|
||
1EC11791000
|
unkown
|
page read and write
|
||
7DF55DB80000
|
unkown image
|
page readonly
|
||
7FF54FE19000
|
unkown image
|
page readonly
|
||
7FF5C8D70000
|
unkown image
|
page readonly
|
||
7F4D0000
|
unkown image
|
page readonly
|
||
7FF54FE1F000
|
unkown image
|
page readonly
|
||
28804C00000
|
unkown image
|
page readonly
|
||
1ADB5C4B000
|
unkown
|
page read and write
|
||
7FF5AB8C0000
|
unkown image
|
page readonly
|
||
7FF54FF11000
|
unkown image
|
page readonly
|
||
7FF58649F000
|
unkown image
|
page readonly
|
||
1EC117AB000
|
unkown
|
page read and write
|
||
7FF4FB1EB000
|
unkown image
|
page readonly
|
||
2934000
|
unkown image
|
page readonly
|
||
7FF4FB69B000
|
unkown image
|
page readonly
|
||
7DF5FF430000
|
unkown image
|
page readonly
|
||
1ADB6760000
|
unkown
|
page read and write
|
||
7DF519D62000
|
unkown image
|
page readonly
|
||
1C1AC860000
|
unkown image
|
page readonly
|
||
7FF54FCFB000
|
unkown image
|
page readonly
|
||
3147000
|
heap private
|
page read and write
|
||
7FF5C87CC000
|
unkown image
|
page readonly
|
||
7FF50BCEC000
|
unkown image
|
page readonly
|
||
1EC11974000
|
heap private
|
page read and write
|
||
7FF5AB8AD000
|
unkown image
|
page readonly
|
||
90F000
|
unkown
|
page read and write
|
||
7FF54FCC1000
|
unkown image
|
page readonly
|
||
7FF54FE87000
|
unkown image
|
page readonly
|
||
7FF54FE63000
|
unkown image
|
page readonly
|
||
1E40EDC6000
|
heap default
|
page read and write
|
||
7FF4FB6D7000
|
unkown image
|
page readonly
|
||
1E40F100000
|
heap private
|
page read and write
|
||
7DF5FF450000
|
unkown image
|
page readonly
|
||
2530C4E000
|
stack
|
page read and write
|
||
7FF58657A000
|
unkown image
|
page readonly
|
||
7FF5F17B4000
|
unkown image
|
page readonly
|
||
1EC117CE000
|
unkown
|
page read and write
|
||
24DEDA02000
|
unkown
|
page read and write
|
||
7DF519D70000
|
unkown image
|
page readonly
|
||
7FF50C04E000
|
unkown image
|
page readonly
|
||
1DBFFC3C000
|
unkown
|
page read and write
|
||
7DF5093B0000
|
unkown image
|
page readonly
|
||
1ADB638A000
|
unkown
|
page read and write
|
||
70B09EE000
|
stack
|
page read and write
|
||
7FF50BF5C000
|
unkown image
|
page readonly
|
||
1FAFAAE0000
|
unkown image
|
page readonly
|
||
1EC10C68000
|
unkown
|
page read and write
|
||
1EC10C2C000
|
unkown
|
page read and write
|
||
1DC00002000
|
unkown
|
page read and write
|
||
1E40EE34000
|
heap default
|
page read and write
|
||
1FAFAAC0000
|
unkown image
|
page read and write
|
||
24DED455000
|
unkown
|
page read and write
|
||
7FF4FB5D5000
|
unkown image
|
page readonly
|
||
1EC10DE0000
|
unkown
|
page read and write
|
||
3250000
|
unkown image
|
page readonly
|
||
48100FA000
|
stack
|
page read and write
|
||
314A000
|
heap private
|
page read and write
|
||
7DF5FF430000
|
unkown image
|
page readonly
|
||
7FF4FAEFF000
|
unkown image
|
page readonly
|
||
7FF586585000
|
unkown image
|
page readonly
|
||
2CE0000
|
heap private
|
page read and write
|
||
1E40EDF4000
|
heap default
|
page read and write
|
||
2530B4D000
|
stack
|
page read and write
|
||
1FAFAD13000
|
unkown
|
page read and write
|
||
7FF50C0F1000
|
unkown image
|
page readonly
|
||
7FF586562000
|
unkown image
|
page readonly
|
||
24DED508000
|
unkown
|
page read and write
|
||
946000
|
unkown
|
page read and write
|
||
1ADB637C000
|
unkown
|
page read and write
|
||
480FFFE000
|
stack
|
page read and write
|
||
7FF54FEF4000
|
unkown image
|
page readonly
|
||
24DED1A0000
|
heap private
|
page read and write
|
||
1EC16112000
|
unkown
|
page read and write
|
||
7FF5C8D3E000
|
unkown image
|
page readonly
|
||
1E40ED63000
|
heap default
|
page read and write
|
||
1DBFF9A0000
|
heap private
|
page read and write
|
||
28804410000
|
unkown image
|
page readonly
|
||
7FF585D3B000
|
unkown image
|
page readonly
|
||
1EC117CE000
|
unkown
|
page read and write
|
||
7FF5724A1000
|
unkown image
|
page readonly
|
||
7FF5C8D87000
|
unkown image
|
page readonly
|
||
7FF5AB8EB000
|
unkown image
|
page readonly
|
||
7FF585D86000
|
unkown image
|
page readonly
|
||
288043A0000
|
unkown image
|
page readonly
|
||
7FF5AB7AF000
|
unkown image
|
page readonly
|
||
1EC11759000
|
unkown
|
page read and write
|
||
1ADB5CF9000
|
unkown
|
page read and write
|
||
1DBFFC7C000
|
unkown
|
page read and write
|
||
90B000
|
unkown
|
page read and write
|
||
1ADB59B0000
|
unkown image
|
page readonly
|
||
1E40EE27000
|
heap default
|
page read and write
|
||
7FF4FAE7A000
|
unkown image
|
page readonly
|
||
1EC117C9000
|
unkown
|
page read and write
|
||
1EC11977000
|
heap private
|
page read and write
|
||
7DF5B9612000
|
unkown image
|
page readonly
|
||
1E40EDF4000
|
unkown
|
page read and write
|
||
1ADB63AD000
|
unkown
|
page read and write
|
||
7FF4FAE70000
|
unkown image
|
page readonly
|
||
1EC11782000
|
unkown
|
page read and write
|
||
1ADB63BA000
|
unkown
|
page read and write
|
||
2941000
|
unkown image
|
page readonly
|
||
7FF5F17D1000
|
unkown image
|
page readonly
|
||
1EC11782000
|
unkown
|
page read and write
|
||
1ADB5C52000
|
unkown
|
page read and write
|
||
1EC117C7000
|
unkown
|
page read and write
|
||
288043B0000
|
unkown image
|
page readonly
|
||
1ADB6358000
|
unkown
|
page read and write
|
||
28804880000
|
unkown image
|
page readonly
|
||
8F0000
|
unkown
|
page read and write
|
||
7DF5093C2000
|
unkown image
|
page readonly
|
||
7DF5D6AD0000
|
unkown image
|
page readonly
|
||
7DF594202000
|
unkown image
|
page readonly
|
||
2C50000
|
unkown image
|
page readonly
|
||
1C1ACA72000
|
unkown
|
page read and write
|
||
8C8000
|
heap default
|
page read and write
|
||
276D000
|
unkown image
|
page readonly
|
||
1EC1175E000
|
unkown
|
page read and write
|
||
24DED1D0000
|
unkown image
|
page readonly
|
||
6777C7C000
|
stack
|
page read and write
|
||
7DF5FF450000
|
unkown image
|
page readonly
|
||
7FF50BF75000
|
unkown image
|
page readonly
|
||
7FF5C8D5D000
|
unkown image
|
page readonly
|
||
7FF58650D000
|
unkown image
|
page readonly
|
||
7F4D0000
|
unkown image
|
page readonly
|
||
1DBFFC00000
|
unkown
|
page read and write
|
||
1EC117C7000
|
unkown
|
page read and write
|
||
1E410850000
|
unkown
|
page read and write
|
||
7FF4FB5FF000
|
unkown image
|
page readonly
|
||
1C1AC840000
|
unkown image
|
page readonly
|
||
28CB000
|
unkown image
|
page readonly
|
||
1EC10C28000
|
unkown
|
page read and write
|
||
1DBFFE00000
|
unkown image
|
page readonly
|
||
7FF5C8CFF000
|
unkown image
|
page readonly
|
||
7FF4FB54E000
|
unkown image
|
page readonly
|
||
7FF54FE23000
|
unkown image
|
page readonly
|
||
7FF54FE47000
|
unkown image
|
page readonly
|
||
24DED3D0000
|
unkown
|
page read and write
|
||
7FF54FCDD000
|
unkown image
|
page readonly
|
||
2888000
|
unkown image
|
page readonly
|
||
7FF5AB625000
|
unkown image
|
page readonly
|
||
1FAFAC29000
|
unkown
|
page read and write
|
||
1ADB639A000
|
unkown
|
page read and write
|
||
7FF58658A000
|
unkown image
|
page readonly
|
||
1DB80180000
|
unkown image
|
page readonly
|
||
7FF5C8D12000
|
unkown image
|
page readonly
|
||
7FF50BD75000
|
unkown image
|
page readonly
|
||
8CF000
|
unkown
|
page read and write
|
||
4C43A7F000
|
stack
|
page read and write
|
||
7FF54FE8A000
|
unkown image
|
page readonly
|
||
293B000
|
unkown image
|
page readonly
|
||
7DF5B9610000
|
unkown image
|
page readonly
|
||
7DF594200000
|
unkown image
|
page readonly
|
||
1EC11782000
|
unkown
|
page read and write
|
||
2962000
|
unkown image
|
page readonly
|
||
7FF5863A7000
|
unkown image
|
page readonly
|
||
24DED44D000
|
unkown
|
page read and write
|
||
7FF54FD6B000
|
unkown image
|
page readonly
|
||
1EC11AC0000
|
unkown
|
page read and write
|
||
7FF5F16E6000
|
unkown image
|
page readonly
|
||
4A6E000
|
stack
|
page read and write
|
||
7FF4FB562000
|
unkown image
|
page readonly
|
||
4C4347E000
|
stack
|
page read and write
|
||
7FF50B77E000
|
unkown image
|
page readonly
|
||
6777CFF000
|
stack
|
page read and write
|
||
2968000
|
unkown image
|
page readonly
|
||
7FF5F174D000
|
unkown image
|
page readonly
|
||
1EC10C20000
|
unkown
|
page read and write
|
||
916000
|
unkown
|
page read and write
|
||
B0E000
|
stack
|
page read and write
|
||
7FF5864B0000
|
unkown image
|
page readonly
|
||
7DF519D52000
|
unkown image
|
page readonly
|
||
2871000
|
unkown image
|
page readonly
|
||
1ADB6362000
|
unkown
|
page read and write
|
||
1EC118A0000
|
unkown image
|
page read and write
|
||
7FF5C8BAF000
|
unkown image
|
page readonly
|
||
7FF5C8BA1000
|
unkown image
|
page readonly
|
||
4B6F000
|
stack
|
page read and write
|
||
7FF4FB37E000
|
unkown image
|
page readonly
|
||
7FF4FB65D000
|
unkown image
|
page readonly
|
||
4C434FE000
|
stack
|
page read and write
|
||
8EA000
|
unkown
|
page read and write
|
||
7DF5B9600000
|
unkown image
|
page readonly
|
||
7FF5C8DC7000
|
unkown image
|
page readonly
|
||
24DED43C000
|
unkown
|
page read and write
|
||
7FF5AB751000
|
unkown image
|
page readonly
|
||
7FF4FB599000
|
unkown image
|
page readonly
|
||
1EC10C14000
|
unkown
|
page read and write
|
||
7DF5FF432000
|
unkown image
|
page readonly
|
||
7FF4FB6C7000
|
unkown image
|
page readonly
|
||
7FF5C8B96000
|
unkown image
|
page readonly
|
||
B8245CA000
|
unkown
|
page read and write
|
||
1EC11751000
|
unkown
|
page read and write
|
||
1E40EE3A000
|
heap default
|
page read and write
|
||
7FF50BBD7000
|
unkown image
|
page readonly
|
||
7FF5F17C1000
|
unkown image
|
page readonly
|
||
1E41073C000
|
unkown
|
page read and write
|
||
25303D7000
|
unkown
|
page read and write
|
||
7FF50C010000
|
unkown image
|
page readonly
|
||
24DED470000
|
unkown
|
page read and write
|
||
6777A7B000
|
unkown
|
page read and write
|
||
947000
|
unkown
|
page read and write
|
||
1E410860000
|
unkown image
|
page readonly
|
||
9F5000
|
heap default
|
page read and write
|
||
7FF4FB734000
|
unkown image
|
page readonly
|
||
7FF50BFFF000
|
unkown image
|
page readonly
|
||
1FAFB250000
|
unkown image
|
page readonly
|
||
1ADB5CB0000
|
unkown
|
page read and write
|
||
1EC117AB000
|
unkown
|
page read and write
|
||
7FF5F16F3000
|
unkown image
|
page readonly
|
||
7FF50BBD1000
|
unkown image
|
page readonly
|
||
7FF5F16DD000
|
unkown image
|
page readonly
|
||
7FF5C8D33000
|
unkown image
|
page readonly
|
||
1E40EDC2000
|
unkown
|
page read and write
|
||
7FF4FB6CA000
|
unkown image
|
page readonly
|
||
7FF54FEE2000
|
unkown image
|
page readonly
|
||
1DBFFD13000
|
unkown
|
page read and write
|
||
7FF5C8AD5000
|
unkown image
|
page readonly
|
||
2530A4E000
|
stack
|
page read and write
|
||
1DBFF9B0000
|
unkown image
|
page readonly
|
||
7FF50BF71000
|
unkown image
|
page readonly
|
||
7FF5C8CAB000
|
unkown image
|
page readonly
|
||
7FF5C8B49000
|
unkown image
|
page readonly
|
||
253084F000
|
stack
|
page read and write
|
||
1C1ACA62000
|
unkown
|
page read and write
|
There are 999 hidden memdumps, click here to show them.