Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
request_form_1611306935.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\request_form_1611306935.xlsm.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:42
2020, mtime=Fri Jan 22 18:46:43 2021, atime=Fri Jan 22 18:46:42 2021, length=16999, window=hide
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$request_form_1611306935.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\39636F9C-B5B5-4FAD-89B6-83FE7D2DF2A0
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\211C0159.png
|
PNG image data, 30 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\980348B8.png
|
PNG image data, 30 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A3196997.png
|
PNG image data, 30 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B81B86AC.png
|
PNG image data, 30 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\84910000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 16:19:49 2019, mtime=Fri Jan 22 18:46:43 2021, atime=Fri Jan 22 18:46:43 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\Desktop\75910000
|
data
|
dropped
|
|
|
|
C:\msdownld.tmp\AS01997C.tmp\babmboa.php
|
empty
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\8F9A760B.png
|
PNG image data, 30 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\CF3045B2.png
|
PNG image data, 30 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\B1FE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\request_form_1611306935.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:16
2020, mtime=Fri Jan 22 18:41:47 2021, atime=Fri Jan 22 18:41:47 2021, length=17094, window=hide
|
dropped
|
|
|
|
C:\Users\user\Desktop\1B6F0000
|
data
|
modified
|
|
|
|
C:\Users\user\Desktop\72FE0000
|
data
|
dropped
|
|
There are 9 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://wus2-000.contentsync.
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://wus2-000.pagecontentsync.
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
http://jvdattorney.com/stager/babmboa.php
|
162.241.225.18
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://ncus-000.contentsync.
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://contentstorage.omex.office.net/addinclassifier/officeentities
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
jvdattorney.com
|
162.241.225.18
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
unknown
|
|
|
|
162.241.225.18
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
tl!
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ul!
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
18E71
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
192E5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
194BA
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
19595
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
z!
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
18'
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
25412
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2551C
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 21
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
25412
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ChangeId
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ChangeId
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
<26
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EEE07
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF0F4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF21C
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF2C8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
';6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F6B41
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
There are 176 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
46812FE000
|
unkown
|
page read and write
|
|
|
|
14694A19000
|
unkown
|
page read and write
|
|
|
|
7FF5A30D0000
|
unkown
|
page readonly
|
|
|
|
21D62455000
|
unkown
|
page read and write
|
|
|
|
17DA4200000
|
unkown
|
page read and write
|
|
|
|
1D9C83F0000
|
unkown
|
page read and write
|
|
|
|
7FF5499BC000
|
unkown
|
page readonly
|
|
|
|
17DA44F0000
|
unkown
|
page read and write
|
|
|
|
7FF5A34FE000
|
unkown
|
page readonly
|
|
|
|
1D9C6A13000
|
unkown
|
page read and write
|
|
|
|
7FF57102F000
|
unkown
|
page readonly
|
|
|
|
7FF5D2247000
|
unkown
|
page readonly
|
|
|
|
14695613000
|
unkown
|
page read and write
|
|
|
|
146928F1000
|
unkown
|
page read and write
|
|
|
|
177D8502000
|
unkown
|
page read and write
|
|
|
|
14694A40000
|
unkown
|
page read and write
|
|
|
|
237A1BB0000
|
unkown
|
page read and write
|
|
|
|
14D53340000
|
unkown
|
page write copy
|
|
|
|
B628079000
|
unkown
|
page read and write
|
|
|
|
7FF508AC0000
|
unkown
|
page readonly
|
|
|
|
1D15E876000
|
unkown
|
page read and write
|
|
|
|
7FF508CE7000
|
unkown
|
page readonly
|
|
|
|
177D8260000
|
heap default
|
page read and write
|
|
|
|
14692961000
|
unkown
|
page read and write
|
|
|
|
BD929FD000
|
unkown
|
page read and write
|
|
|
|
7FF5E5AA9000
|
unkown
|
page readonly
|
|
|
|
17D9EDD1000
|
unkown
|
page read and write
|
|
|
|
14D52813000
|
unkown
|
page read and write
|
|
|
|
14694E00000
|
unkown
|
page readonly
|
|
|
|
14694A40000
|
unkown
|
page read and write
|
|
|
|
7FF549ACC000
|
unkown
|
page readonly
|
|
|
|
177D8500000
|
unkown
|
page read and write
|
|
|
|
7FF53C5D3000
|
unkown
|
page readonly
|
|
|
|
7FF57B325000
|
unkown
|
page readonly
|
|
|
|
17DA43B4000
|
unkown
|
page read and write
|
|
|
|
7FF536487000
|
unkown
|
page readonly
|
|
|
|
7FF549AB1000
|
unkown
|
page readonly
|
|
|
|
7FF5A3567000
|
unkown
|
page readonly
|
|
|
|
7FF536438000
|
unkown
|
page readonly
|
|
|
|
237A1C48000
|
unkown
|
page read and write
|
|
|
|
17D9F5B0000
|
unkown
|
page readonly
|
|
|
|
7FF5A33B8000
|
unkown
|
page readonly
|
|
|
|
17209010000
|
unkown
|
page read and write
|
|
|
|
1D15E85A000
|
unkown
|
page read and write
|
|
|
|
237A1C00000
|
unkown
|
page read and write
|
|
|
|
17DA4240000
|
unkown
|
page readonly
|
|
|
|
177D8270000
|
unkown
|
page readonly
|
|
|
|
7FF54BF3C000
|
unkown
|
page readonly
|
|
|
|
14694760000
|
unkown
|
page readonly
|
|
|
|
7FF570FCC000
|
unkown
|
page readonly
|
|
|
|
14695010000
|
unkown
|
page read and write
|
|
|
|
17DA463A000
|
unkown
|
page read and write
|
|
|
|
7FF570766000
|
unkown
|
page readonly
|
|
|
|
7FF5D2243000
|
unkown
|
page readonly
|
|
|
|
7FF5C05D6000
|
unkown
|
page readonly
|
|
|
|
7FF5676B7000
|
unkown
|
page readonly
|
|
|
|
21FF38F0000
|
unkown
|
page readonly
|
|
|
|
17D9F0D0000
|
unkown
|
page readonly
|
|
|
|
7FF53C937000
|
unkown
|
page readonly
|
|
|
|
7FF54BE08000
|
unkown
|
page readonly
|
|
|
|
14694A86000
|
unkown
|
page read and write
|
|
|
|
7FF5A1B45000
|
unkown
|
page readonly
|
|
|
|
7FF54C019000
|
unkown
|
page readonly
|
|
|
|
237A1C76000
|
unkown
|
page read and write
|
|
|
|
72308AB000
|
unkown
|
page read and write
|
|
|
|
15412255000
|
unkown
|
page read and write
|
|
|
|
7FF5A1C21000
|
unkown
|
page readonly
|
|
|
|
BF777B000
|
unkown
|
page read and write
|
|
|
|
15EEDF9000
|
unkown
|
page read and write
|
|
|
|
7FF5D2340000
|
unkown
|
page readonly
|
|
|
|
15412270000
|
unkown
|
page read and write
|
|
|
|
206CBB13000
|
unkown
|
page read and write
|
|
|
|
15EECF7000
|
unkown
|
page read and write
|
|
|
|
237A1C47000
|
unkown
|
page read and write
|
|
|
|
206CC070000
|
unkown
|
page readonly
|
|
|
|
7FF5BE396000
|
unkown
|
page readonly
|
|
|
|
7FF5C059E000
|
unkown
|
page readonly
|
|
|
|
7FF5BE15C000
|
unkown
|
page readonly
|
|
|
|
14694927000
|
unkown
|
page read and write
|
|
|
|
7FF571087000
|
unkown
|
page readonly
|
|
|
|
15EF0FB000
|
unkown
|
page read and write
|
|
|
|
177D8451000
|
unkown
|
page read and write
|
|
|
|
7FF57B387000
|
unkown
|
page readonly
|
|
|
|
7FF549A8F000
|
unkown
|
page readonly
|
|
|
|
14694B43000
|
unkown
|
page read and write
|
|
|
|
7FF53663E000
|
unkown
|
page readonly
|
|
|
|
206CC150000
|
unkown
|
page read and write
|
|
|
|
7FF5E59BA000
|
unkown
|
page readonly
|
|
|
|
7FF54BED7000
|
unkown
|
page readonly
|
|
|
|
1D9C84F0000
|
unkown
|
page readonly
|
|
|
|
7FF57B150000
|
unkown
|
page readonly
|
|
|
|
7FF53C9D5000
|
unkown
|
page readonly
|
|
|
|
7FF5A3555000
|
unkown
|
page readonly
|
|
|
|
7FF5365AD000
|
unkown
|
page readonly
|
|
|
|
7FF5A352D000
|
unkown
|
page readonly
|
|
|
|
7FF5A350F000
|
unkown
|
page readonly
|
|
|
|
7FF57B01A000
|
unkown
|
page readonly
|
|
|
|
7FF54BBFD000
|
unkown
|
page readonly
|
|
|
|
7FF5BE3C0000
|
unkown
|
page readonly
|
|
|
|
14694932000
|
unkown
|
page read and write
|
|
|
|
7FF5497FE000
|
unkown
|
page readonly
|
|
|
|
1057B7E000
|
unkown
|
page read and write
|
|
|
|
15412F40000
|
unkown
|
page readonly
|
|
|
|
146949F1000
|
unkown
|
page read and write
|
|
|
|
14D52720000
|
unkown
|
page readonly
|
|
|
|
7FF5BE307000
|
unkown
|
page readonly
|
|
|
|
F7A6DAE000
|
unkown
|
page read and write
|
|
|
|
14694B86000
|
unkown
|
page read and write
|
|
|
|
7FF508CF0000
|
unkown
|
page readonly
|
|
|
|
1D9C6A00000
|
unkown
|
page read and write
|
|
|
|
7FF5672D0000
|
unkown
|
page readonly
|
|
|
|
17DA46A5000
|
unkown
|
page read and write
|
|
|
|
7FF571066000
|
unkown
|
page readonly
|
|
|
|
14694958000
|
unkown
|
page read and write
|
|
|
|
7FF5A1B2C000
|
unkown
|
page readonly
|
|
|
|
F7A737F000
|
unkown
|
page read and write
|
|
|
|
A311DFF000
|
unkown
|
page read and write
|
|
|
|
468137A000
|
unkown
|
page read and write
|
|
|
|
237A1C2E000
|
unkown
|
page read and write
|
|
|
|
14694923000
|
unkown
|
page read and write
|
|
|
|
7FF53C9A8000
|
unkown
|
page readonly
|
|
|
|
21FF39D0000
|
unkown
|
page readonly
|
|
|
|
1D160800000
|
unkown
|
page read and write
|
|
|
|
7FF5491E7000
|
unkown
|
page readonly
|
|
|
|
BF757D000
|
unkown
|
page read and write
|
|
|
|
62DF67E000
|
unkown
|
page read and write
|
|
|
|
7FF5E58B3000
|
unkown
|
page readonly
|
|
|
|
7FF5BE093000
|
unkown
|
page readonly
|
|
|
|
146949E4000
|
unkown
|
page read and write
|
|
|
|
14695410000
|
unkown
|
page read and write
|
|
|
|
7FF549A17000
|
unkown
|
page readonly
|
|
|
|
237A1C69000
|
unkown
|
page read and write
|
|
|
|
7FF53641A000
|
unkown
|
page readonly
|
|
|
|
7FF5C05A5000
|
unkown
|
page readonly
|
|
|
|
17DA0200000
|
unkown
|
page read and write
|
|
|
|
237A1AC0000
|
unkown
|
page readonly
|
|
|
|
7230CF9000
|
unkown
|
page read and write
|
|
|
|
21A6AA00000
|
unkown
|
page read and write
|
|
|
|
17DA4550000
|
unkown
|
page readonly
|
|
|
|
17DA44F0000
|
unkown
|
page read and write
|
|
|
|
7FF570DA5000
|
unkown
|
page readonly
|
|
|
|
15412302000
|
unkown
|
page read and write
|
|
|
|
7FF549AAD000
|
unkown
|
page readonly
|
|
|
|
7FF5C058A000
|
unkown
|
page readonly
|
|
|
|
7FF5E5770000
|
unkown
|
page readonly
|
|
|
|
7FF5BE303000
|
unkown
|
page readonly
|
|
|
|
7FF5A1A3F000
|
unkown
|
page readonly
|
|
|
|
7FF549718000
|
unkown
|
page readonly
|
|
|
|
17DA468C000
|
unkown
|
page read and write
|
|
|
|
7FF508C0A000
|
unkown
|
page readonly
|
|
|
|
17D9ED70000
|
unkown
|
page read and write
|
|
|
|
1541222A000
|
unkown
|
page read and write
|
|
|
|
7FF570FF8000
|
unkown
|
page readonly
|
|
|
|
7FF57B32F000
|
unkown
|
page readonly
|
|
|
|
7FF5A1BC8000
|
unkown
|
page readonly
|
|
|
|
7FF5BE3C7000
|
unkown
|
page readonly
|
|
|
|
7FF5E57FA000
|
unkown
|
page readonly
|
|
|
|
7FF5E59E5000
|
unkown
|
page readonly
|
|
|
|
17208502000
|
unkown
|
page read and write
|
|
|
|
7FF5D2295000
|
unkown
|
page readonly
|
|
|
|
7FF53C6CE000
|
unkown
|
page readonly
|
|
|
|
7FF5D2567000
|
unkown
|
page readonly
|
|
|
|
7FF549A2C000
|
unkown
|
page readonly
|
|
|
|
1A2F2263000
|
unkown
|
page read and write
|
|
|
|
17DA44D0000
|
unkown
|
page read and write
|
|
|
|
206CBA70000
|
unkown
|
page read and write
|
|
|
|
7FF54BE2E000
|
unkown
|
page readonly
|
|
|
|
17206480000
|
heap default
|
page read and write
|
|
|
|
17208650000
|
unkown
|
page read and write
|
|
|
|
7FF566D83000
|
unkown
|
page readonly
|
|
|
|
14695613000
|
unkown
|
page read and write
|
|
|
|
7FF57B2E2000
|
unkown
|
page readonly
|
|
|
|
14695210000
|
unkown
|
page read and write
|
|
|
|
7FF57AA5C000
|
unkown
|
page readonly
|
|
|
|
7FF5D1C66000
|
unkown
|
page readonly
|
|
|
|
14695310000
|
unkown
|
page read and write
|
|
|
|
7FF5A34EA000
|
unkown
|
page readonly
|
|
|
|
146929B5000
|
unkown
|
page read and write
|
|
|
|
7FF5710DE000
|
unkown
|
page readonly
|
|
|
|
7FF5A1CB0000
|
unkown
|
page readonly
|
|
|
|
14695610000
|
unkown
|
page read and write
|
|
|
|
7FF5BE3C4000
|
unkown
|
page readonly
|
|
|
|
7FF570FD8000
|
unkown
|
page readonly
|
|
|
|
7FF570CB8000
|
unkown
|
page readonly
|
|
|
|
14694A84000
|
unkown
|
page read and write
|
|
|
|
3D668FF000
|
unkown
|
page read and write
|
|
|
|
177D8402000
|
unkown
|
page read and write
|
|
|
|
7FF5BE332000
|
unkown
|
page readonly
|
|
|
|
1D9C6C00000
|
unkown
|
page write copy
|
|
|
|
7FF5A1BB0000
|
unkown
|
page readonly
|
|
|
|
21D623E0000
|
unkown
|
page readonly
|
|
|
|
17D9F901000
|
unkown
|
page read and write
|
|
|
|
17D9EE13000
|
unkown
|
page read and write
|
|
|
|
17D9F600000
|
unkown
|
page read and write
|
|
|
|
7FF53CA37000
|
unkown
|
page readonly
|
|
|
|
7FF57AF21000
|
unkown
|
page readonly
|
|
|
|
BD92EFF000
|
unkown
|
page read and write
|
|
|
|
17D9F5E0000
|
unkown
|
page readonly
|
|
|
|
BF7A7A000
|
unkown
|
page read and write
|
|
|
|
3D66DFE000
|
unkown
|
page read and write
|
|
|
|
1057BFA000
|
unkown
|
page read and write
|
|
|
|
7FF57B1AA000
|
unkown
|
page readonly
|
|
|
|
7FF5D23E3000
|
unkown
|
page readonly
|
|
|
|
21FF3A24000
|
unkown
|
page read and write
|
|
|
|
1D15EA00000
|
unkown
|
page readonly
|
|
|
|
7FF57B2F2000
|
unkown
|
page readonly
|
|
|
|
7FF570EA8000
|
unkown
|
page readonly
|
|
|
|
7FF567711000
|
unkown
|
page readonly
|
|
|
|
7FF57106C000
|
unkown
|
page readonly
|
|
|
|
7FF5BE35E000
|
unkown
|
page readonly
|
|
|
|
14694380000
|
unkown
|
page readonly
|
|
|
|
7230D7F000
|
unkown
|
page read and write
|
|
|
|
14D525E0000
|
heap private
|
page read and write
|
|
|
|
14692AD0000
|
unkown
|
page readonly
|
|
|
|
14694B43000
|
unkown
|
page read and write
|
|
|
|
7FF5A188F000
|
unkown
|
page readonly
|
|
|
|
17D9EE56000
|
unkown
|
page read and write
|
|
|
|
14692962000
|
unkown
|
page read and write
|
|
|
|
7FF549A38000
|
unkown
|
page readonly
|
|
|
|
237A1C45000
|
unkown
|
page read and write
|
|
|
|
7FF549AE4000
|
unkown
|
page readonly
|
|
|
|
7FF5499E1000
|
unkown
|
page readonly
|
|
|
|
1D9C6890000
|
heap private
|
page read and write
|
|
|
|
1D9C6900000
|
unkown
|
page readonly
|
|
|
|
7FF5BDF5D000
|
unkown
|
page readonly
|
|
|
|
17DA4460000
|
unkown
|
page write copy
|
|
|
|
7FF5BE41E000
|
unkown
|
page readonly
|
|
|
|
7FF53645D000
|
unkown
|
page readonly
|
|
|
|
7FF5BFCD6000
|
unkown
|
page readonly
|
|
|
|
7FF571025000
|
unkown
|
page readonly
|
|
|
|
3D666FB000
|
unkown
|
page read and write
|
|
|
|
15412250000
|
unkown
|
page read and write
|
|
|
|
7FF5083E2000
|
unkown
|
page readonly
|
|
|
|
146928D9000
|
unkown
|
page read and write
|
|
|
|
14D52DA0000
|
unkown
|
page read and write
|
|
|
|
14694A00000
|
unkown
|
page read and write
|
|
|
|
7FF53C97C000
|
unkown
|
page readonly
|
|
|
|
7FF53CA99000
|
unkown
|
page readonly
|
|
|
|
7FF54C04C000
|
unkown
|
page readonly
|
|
|
|
7FF57B3DE000
|
unkown
|
page readonly
|
|
|
|
146949E2000
|
unkown
|
page read and write
|
|
|
|
7FF5E5A16000
|
unkown
|
page readonly
|
|
|
|
1057F7C000
|
unkown
|
page read and write
|
|
|
|
1720663F000
|
unkown
|
page read and write
|
|
|
|
7FF5A1C2C000
|
unkown
|
page readonly
|
|
|
|
7FF536481000
|
unkown
|
page readonly
|
|
|
|
15EF57F000
|
unkown
|
page read and write
|
|
|
|
7FF57B34D000
|
unkown
|
page readonly
|
|
|
|
237A1C7C000
|
unkown
|
page read and write
|
|
|
|
7FF53C86A000
|
unkown
|
page readonly
|
|
|
|
2CB62F5000
|
unkown
|
page read and write
|
|
|
|
7FF508CC6000
|
unkown
|
page readonly
|
|
|
|
2CB66FD000
|
unkown
|
page read and write
|
|
|
|
14D52800000
|
unkown
|
page read and write
|
|
|
|
1D160800000
|
unkown
|
page read and write
|
|
|
|
7FF5A339A000
|
unkown
|
page readonly
|
|
|
|
14695110000
|
unkown
|
page read and write
|
|
|
|
7FF549A01000
|
unkown
|
page readonly
|
|
|
|
7FF5C038A000
|
unkown
|
page readonly
|
|
|
|
3D669FF000
|
unkown
|
page read and write
|
|
|
|
1A2F2060000
|
heap private
|
page read and write
|
|
|
|
14694B00000
|
unkown
|
page read and write
|
|
|
|
21D62402000
|
unkown
|
page read and write
|
|
|
|
7FF567669000
|
unkown
|
page readonly
|
|
|
|
7FF5D232A000
|
unkown
|
page readonly
|
|
|
|
7FF5A338E000
|
unkown
|
page readonly
|
|
|
|
7FF53656A000
|
unkown
|
page readonly
|
|
|
|
177D844F000
|
unkown
|
page read and write
|
|
|
|
7FF57105C000
|
unkown
|
page readonly
|
|
|
|
7FF508C9F000
|
unkown
|
page readonly
|
|
|
|
7FF5A1BA8000
|
unkown
|
page readonly
|
|
|
|
7FF53C9DF000
|
unkown
|
page readonly
|
|
|
|
1D9C68F0000
|
heap default
|
page read and write
|
|
|
|
146949E2000
|
unkown
|
page read and write
|
|
|
|
1D15E913000
|
unkown
|
page read and write
|
|
|
|
7FF56770E000
|
unkown
|
page readonly
|
|
|
|
7FF549908000
|
unkown
|
page readonly
|
|
|
|
7FF5083E6000
|
unkown
|
page readonly
|
|
|
|
1541224B000
|
unkown
|
page read and write
|
|
|
|
177D8200000
|
heap private
|
page read and write
|
|
|
|
7FF54C031000
|
unkown
|
page readonly
|
|
|
|
14694280000
|
unkown
|
page read and write
|
|
|
|
7230DFF000
|
unkown
|
page read and write
|
|
|
|
7FF549A56000
|
unkown
|
page readonly
|
|
|
|
7FF5496D7000
|
unkown
|
page readonly
|
|
|
|
17208402000
|
unkown
|
page read and write
|
|
|
|
172066BD000
|
unkown
|
page read and write
|
|
|
|
7FF570E6F000
|
unkown
|
page readonly
|
|
|
|
3D66CFD000
|
unkown
|
page read and write
|
|
|
|
7FF5E5898000
|
unkown
|
page readonly
|
|
|
|
7FF5A3519000
|
unkown
|
page readonly
|
|
|
|
7FF54BE30000
|
unkown
|
page readonly
|
|
|
|
17D9EE78000
|
unkown
|
page read and write
|
|
|
|
BD92DFF000
|
unkown
|
page read and write
|
|
|
|
17D9F000000
|
unkown
|
page readonly
|
|
|
|
206CC140000
|
unkown
|
page readonly
|
|
|
|
237A1A50000
|
heap private
|
page read and write
|
|
|
|
7FF5D24E2000
|
unkown
|
page readonly
|
|
|
|
17D9EDF3000
|
unkown
|
page read and write
|
|
|
|
BF76FA000
|
unkown
|
page read and write
|
|
|
|
14D52E02000
|
unkown
|
page read and write
|
|
|
|
7FF570F75000
|
unkown
|
page readonly
|
|
|
|
7FF5A1BDA000
|
unkown
|
page readonly
|
|
|
|
E22477000
|
unkown
|
page read and write
|
|
|
|
1A2F2279000
|
unkown
|
page read and write
|
|
|
|
7FF5A1B37000
|
unkown
|
page readonly
|
|
|
|
17D9F615000
|
unkown
|
page read and write
|
|
|
|
7FF56769C000
|
unkown
|
page readonly
|
|
|
|
62DEEFB000
|
unkown
|
page read and write
|
|
|
|
146949AC000
|
unkown
|
page read and write
|
|
|
|
7FF5E5957000
|
unkown
|
page readonly
|
|
|
|
14D52887000
|
unkown
|
page read and write
|
|
|
|
146928DF000
|
unkown
|
page read and write
|
|
|
|
2CB65FE000
|
unkown
|
page read and write
|
|
|
|
21FF3A13000
|
unkown
|
page read and write
|
|
|
|
7FF5BE18E000
|
unkown
|
page readonly
|
|
|
|
21FF3900000
|
unkown
|
page readonly
|
|
|
|
7FF53C9E9000
|
unkown
|
page readonly
|
|
|
|
14694C02000
|
unkown
|
page read and write
|
|
|
|
14D5286E000
|
unkown
|
page read and write
|
|
|
|
7FF5E5765000
|
unkown
|
page readonly
|
|
|
|
7FF508D59000
|
unkown
|
page readonly
|
|
|
|
7FF5A2D63000
|
unkown
|
page readonly
|
|
|
|
146949F1000
|
unkown
|
page read and write
|
|
|
|
206CBA00000
|
unkown
|
page read and write
|
|
|
|
1D15E864000
|
unkown
|
page read and write
|
|
|
|
7FF53636A000
|
unkown
|
page readonly
|
|
|
|
146929A6000
|
unkown
|
page read and write
|
|
|
|
177D8400000
|
unkown
|
page read and write
|
|
|
|
6911E7B000
|
unkown
|
page read and write
|
|
|
|
17D9EF02000
|
unkown
|
page read and write
|
|
|
|
7FF549A40000
|
unkown
|
page readonly
|
|
|
|
7FF5A1C50000
|
unkown
|
page readonly
|
|
|
|
14694760000
|
unkown
|
page read and write
|
|
|
|
7FF549888000
|
unkown
|
page readonly
|
|
|
|
7FF536552000
|
unkown
|
page readonly
|
|
|
|
7FF53C668000
|
unkown
|
page readonly
|
|
|
|
7FF5675DB000
|
unkown
|
page readonly
|
|
|
|
21D62429000
|
unkown
|
page read and write
|
|
|
|
1D160810000
|
unkown
|
page readonly
|
|
|
|
7FF5A34C0000
|
unkown
|
page readonly
|
|
|
|
7FF57B384000
|
unkown
|
page readonly
|
|
|
|
7FF54C057000
|
unkown
|
page readonly
|
|
|
|
7FF57B2E0000
|
unkown
|
page readonly
|
|
|
|
1A2F2224000
|
unkown
|
page read and write
|
|
|
|
17D9F702000
|
unkown
|
page read and write
|
|
|
|
723092F000
|
unkown
|
page read and write
|
|
|
|
7FF53CA16000
|
unkown
|
page readonly
|
|
|
|
17DA46B6000
|
unkown
|
page read and write
|
|
|
|
172065B0000
|
unkown
|
page readonly
|
|
|
|
14695110000
|
unkown
|
page read and write
|
|
|
|
7FF57B3E9000
|
unkown
|
page readonly
|
|
|
|
7FF536558000
|
unkown
|
page readonly
|
|
|
|
177D8E00000
|
unkown
|
page readonly
|
|
|
|
7FF54BF35000
|
unkown
|
page readonly
|
|
|
|
14D52640000
|
heap default
|
page read and write
|
|
|
|
17DA4270000
|
unkown
|
page read and write
|
|
|
|
BF7EFD000
|
unkown
|
page read and write
|
|
|
|
15EF47F000
|
unkown
|
page read and write
|
|
|
|
3D6628B000
|
unkown
|
page read and write
|
|
|
|
17DA4280000
|
unkown
|
page read and write
|
|
|
|
7FF53CA8E000
|
unkown
|
page readonly
|
|
|
|
7FF570E4E000
|
unkown
|
page readonly
|
|
|
|
7FF53C9A2000
|
unkown
|
page readonly
|
|
|
|
A311B7E000
|
unkown
|
page read and write
|
|
|
|
1A2F21A0000
|
unkown
|
page readonly
|
|
|
|
7FF5A334F000
|
unkown
|
page readonly
|
|
|
|
14692896000
|
unkown
|
page read and write
|
|
|
|
14694926000
|
unkown
|
page read and write
|
|
|
|
7FF508B67000
|
unkown
|
page readonly
|
|
|
|
7FF5E595A000
|
unkown
|
page readonly
|
|
|
|
17208680000
|
unkown
|
page readonly
|
|
|
|
1D1601A0000
|
unkown
|
page readonly
|
|
|
|
237A1C4B000
|
unkown
|
page read and write
|
|
|
|
7FF57B04D000
|
unkown
|
page readonly
|
|
|
|
7FF5BE218000
|
unkown
|
page readonly
|
|
|
|
237A1E00000
|
unkown
|
page readonly
|
|
|
|
7FF570FF6000
|
unkown
|
page readonly
|
|
|
|
237A1C3B000
|
unkown
|
page read and write
|
|
|
|
14692943000
|
unkown
|
page read and write
|
|
|
|
1D15E6B0000
|
heap private
|
page read and write
|
|
|
|
237A1C4A000
|
unkown
|
page read and write
|
|
|
|
14694957000
|
unkown
|
page read and write
|
|
|
|
7FF54BF77000
|
unkown
|
page readonly
|
|
|
|
17D9ECD0000
|
heap private
|
page read and write
|
|
|
|
237A1C40000
|
unkown
|
page read and write
|
|
|
|
7FF5BE421000
|
unkown
|
page readonly
|
|
|
|
7FF5D24FA000
|
unkown
|
page readonly
|
|
|
|
17206702000
|
unkown
|
page read and write
|
|
|
|
7FF56768C000
|
unkown
|
page readonly
|
|
|
|
7FF5A35C9000
|
unkown
|
page readonly
|
|
|
|
17DA4494000
|
unkown
|
page write copy
|
|
|
|
1A2F2254000
|
unkown
|
page read and write
|
|
|
|
B627D3E000
|
unkown
|
page read and write
|
|
|
|
7FF54C02D000
|
unkown
|
page readonly
|
|
|
|
14695010000
|
unkown
|
page read and write
|
|
|
|
21A6C470000
|
unkown
|
page read and write
|
|
|
|
237A1C84000
|
unkown
|
page read and write
|
|
|
|
7FF5A1C1D000
|
unkown
|
page readonly
|
|
|
|
1D160820000
|
unkown
|
page readonly
|
|
|
|
7FF53C9A6000
|
unkown
|
page readonly
|
|
|
|
7FF508B63000
|
unkown
|
page readonly
|
|
|
|
7FF53C5D1000
|
unkown
|
page readonly
|
|
|
|
7FF54B756000
|
unkown
|
page readonly
|
|
|
|
7FF54BFB8000
|
unkown
|
page readonly
|
|
|
|
3D66EFC000
|
unkown
|
page read and write
|
|
|
|
17D9ED30000
|
heap default
|
page read and write
|
|
|
|
62DFA7C000
|
unkown
|
page read and write
|
|
|
|
7FF57B382000
|
unkown
|
page readonly
|
|
|
|
1D15E802000
|
unkown
|
page read and write
|
|
|
|
154124D0000
|
unkown
|
page readonly
|
|
|
|
7FF54B752000
|
unkown
|
page readonly
|
|
|
|
21A6A8F0000
|
heap private
|
page read and write
|
|
|
|
14D52730000
|
unkown
|
page readonly
|
|
|
|
7230C7F000
|
unkown
|
page read and write
|
|
|
|
7FF54BD4C000
|
unkown
|
page readonly
|
|
|
|
21FF3A59000
|
unkown
|
page read and write
|
|
|
|
1D15E710000
|
heap default
|
page read and write
|
|
|
|
7FF5D2570000
|
unkown
|
page readonly
|
|
|
|
7FF5D24EA000
|
unkown
|
page readonly
|
|
|
|
17D9EE89000
|
unkown
|
page read and write
|
|
|
|
14695310000
|
unkown
|
page read and write
|
|
|
|
14695610000
|
unkown
|
page read and write
|
|
|
|
7FF508C07000
|
unkown
|
page readonly
|
|
|
|
17DA4460000
|
unkown
|
page read and write
|
|
|
|
15412213000
|
unkown
|
page read and write
|
|
|
|
7FF549AE0000
|
unkown
|
page readonly
|
|
|
|
1D15E918000
|
unkown
|
page read and write
|
|
|
|
206CBA72000
|
unkown
|
page read and write
|
|
|
|
7FF508C11000
|
unkown
|
page readonly
|
|
|
|
17DA43C0000
|
unkown
|
page read and write
|
|
|
|
14694964000
|
unkown
|
page read and write
|
|
|
|
7FF567696000
|
unkown
|
page readonly
|
|
|
|
7FF54BFD2000
|
unkown
|
page readonly
|
|
|
|
146928F3000
|
unkown
|
page read and write
|
|
|
|
7FF5A1BB2000
|
unkown
|
page readonly
|
|
|
|
7FF57B0B0000
|
unkown
|
page readonly
|
|
|
|
15412940000
|
unkown
|
page readonly
|
|
|
|
7FF5A1892000
|
unkown
|
page readonly
|
|
|
|
1057D7A000
|
unkown
|
page read and write
|
|
|
|
14D52883000
|
unkown
|
page read and write
|
|
|
|
17DA4484000
|
unkown
|
page readonly
|
|
|
|
17DA4390000
|
unkown
|
page read and write
|
|
|
|
72309AA000
|
unkown
|
page read and write
|
|
|
|
7FF5710E9000
|
unkown
|
page readonly
|
|
|
|
7FF571075000
|
unkown
|
page readonly
|
|
|
|
7FF5BE3AC000
|
unkown
|
page readonly
|
|
|
|
7FF54BD85000
|
unkown
|
page readonly
|
|
|
|
7FF5C0600000
|
unkown
|
page readonly
|
|
|
|
7FF5498CF000
|
unkown
|
page readonly
|
|
|
|
7FF5A353C000
|
unkown
|
page readonly
|
|
|
|
17DA46AE000
|
unkown
|
page read and write
|
|
|
|
177D8A60000
|
unkown
|
page readonly
|
|
|
|
15EF1FE000
|
unkown
|
page read and write
|
|
|
|
146928DE000
|
unkown
|
page read and write
|
|
|
|
7FF549901000
|
unkown
|
page readonly
|
|
|
|
7FF5BFCD9000
|
unkown
|
page readonly
|
|
|
|
7FF5BDBAC000
|
unkown
|
page readonly
|
|
|
|
17DA46B9000
|
unkown
|
page read and write
|
|
|
|
7FF567681000
|
unkown
|
page readonly
|
|
|
|
14D52829000
|
unkown
|
page read and write
|
|
|
|
7FF53C94A000
|
unkown
|
page readonly
|
|
|
|
146949F0000
|
unkown
|
page read and write
|
|
|
|
7FF53C988000
|
unkown
|
page readonly
|
|
|
|
7FF5D24AA000
|
unkown
|
page readonly
|
|
|
|
7FF53C800000
|
unkown
|
page readonly
|
|
|
|
237A1C49000
|
unkown
|
page read and write
|
|
|
|
7FF5D24E8000
|
unkown
|
page readonly
|
|
|
|
172080A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C0576000
|
unkown
|
page readonly
|
|
|
|
21A6C570000
|
unkown
|
page readonly
|
|
|
|
14695210000
|
unkown
|
page read and write
|
|
|
|
1D9C6A3F000
|
unkown
|
page read and write
|
|
|
|
7FF5E59DE000
|
unkown
|
page readonly
|
|
|
|
17DA4464000
|
unkown
|
page readonly
|
|
|
|
17206420000
|
heap private
|
page read and write
|
|
|
|
A311D7D000
|
unkown
|
page read and write
|
|
|
|
7FF57B2D8000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2DA000
|
unkown
|
page readonly
|
|
|
|
17DA462C000
|
unkown
|
page read and write
|
|
|
|
7FF5BE318000
|
unkown
|
page readonly
|
|
|
|
1541223C000
|
unkown
|
page read and write
|
|
|
|
14D5283E000
|
unkown
|
page read and write
|
|
|
|
7FF549B40000
|
unkown
|
page readonly
|
|
|
|
7FF508C6A000
|
unkown
|
page readonly
|
|
|
|
E2257E000
|
unkown
|
page read and write
|
|
|
|
154126D0000
|
unkown
|
page readonly
|
|
|
|
7FF5675E7000
|
unkown
|
page readonly
|
|
|
|
7FF57076B000
|
unkown
|
page readonly
|
|
|
|
7FF54BEB8000
|
unkown
|
page readonly
|
|
|
|
7FF549810000
|
unkown
|
page readonly
|
|
|
|
21A6AA22000
|
unkown
|
page read and write
|
|
|
|
7FF549910000
|
unkown
|
page readonly
|
|
|
|
7FF549B49000
|
unkown
|
page readonly
|
|
|
|
7FF5365E0000
|
unkown
|
page readonly
|
|
|
|
7FF570D9E000
|
unkown
|
page readonly
|
|
|
|
7FF5BE097000
|
unkown
|
page readonly
|
|
|
|
7FF54BF6A000
|
unkown
|
page readonly
|
|
|
|
7FF5E59CA000
|
unkown
|
page readonly
|
|
|
|
7FF549AB6000
|
unkown
|
page readonly
|
|
|
|
14692790000
|
heap default
|
page read and write
|
|
|
|
7FF571080000
|
unkown
|
page readonly
|
|
|
|
177D848A000
|
unkown
|
page read and write
|
|
|
|
21FF3A02000
|
unkown
|
page read and write
|
|
|
|
7FF5E58B7000
|
unkown
|
page readonly
|
|
|
|
21A6A9B0000
|
unkown
|
page readonly
|
|
|
|
7FF54C064000
|
unkown
|
page readonly
|
|
|
|
177D8465000
|
unkown
|
page read and write
|
|
|
|
7FF570EB9000
|
unkown
|
page readonly
|
|
|
|
14695613000
|
unkown
|
page read and write
|
|
|
|
7FF57B275000
|
unkown
|
page readonly
|
|
|
|
17206800000
|
unkown
|
page readonly
|
|
|
|
17206657000
|
unkown
|
page read and write
|
|
|
|
7FF5A34C2000
|
unkown
|
page readonly
|
|
|
|
1057E7D000
|
unkown
|
page read and write
|
|
|
|
14694A26000
|
unkown
|
page read and write
|
|
|
|
21A6AB02000
|
unkown
|
page read and write
|
|
|
|
7FF57B1F7000
|
unkown
|
page readonly
|
|
|
|
BF7CFC000
|
unkown
|
page read and write
|
|
|
|
17D9F5F0000
|
unkown
|
page read and write
|
|
|
|
BF7E7D000
|
unkown
|
page read and write
|
|
|
|
177D846F000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2CA000
|
unkown
|
page readonly
|
|
|
|
14694934000
|
unkown
|
page read and write
|
|
|
|
17DA4290000
|
unkown
|
page read and write
|
|
|
|
17DA44C0000
|
unkown
|
page read and write
|
|
|
|
17DA43D4000
|
unkown
|
page read and write
|
|
|
|
17D9ED50000
|
unkown
|
page readonly
|
|
|
|
7FF571039000
|
unkown
|
page readonly
|
|
|
|
BD92BFE000
|
unkown
|
page read and write
|
|
|
|
E220FE000
|
unkown
|
page read and write
|
|
|
|
177D8449000
|
unkown
|
page read and write
|
|
|
|
BF7D7C000
|
unkown
|
page read and write
|
|
|
|
7FF5A1C09000
|
unkown
|
page readonly
|
|
|
|
14694998000
|
unkown
|
page read and write
|
|
|
|
7FF5365D5000
|
unkown
|
page readonly
|
|
|
|
21FF3A2A000
|
unkown
|
page read and write
|
|
|
|
7FF5A32EA000
|
unkown
|
page readonly
|
|
|
|
7FF54C055000
|
unkown
|
page readonly
|
|
|
|
14695610000
|
unkown
|
page read and write
|
|
|
|
62DF77C000
|
unkown
|
page read and write
|
|
|
|
146949F0000
|
unkown
|
page read and write
|
|
|
|
7FF5A1906000
|
unkown
|
page readonly
|
|
|
|
1469497D000
|
unkown
|
page read and write
|
|
|
|
17D9F713000
|
unkown
|
page read and write
|
|
|
|
7FF5A1BC2000
|
unkown
|
page readonly
|
|
|
|
7FF5A1CB9000
|
unkown
|
page readonly
|
|
|
|
691197B000
|
unkown
|
page read and write
|
|
|
|
7FF567610000
|
unkown
|
page readonly
|
|
|
|
7FF5A35C1000
|
unkown
|
page readonly
|
|
|
|
7FF570FE2000
|
unkown
|
page readonly
|
|
|
|
7FF5D2487000
|
unkown
|
page readonly
|
|
|
|
7FF5BE429000
|
unkown
|
page readonly
|
|
|
|
7FF5A1AC7000
|
unkown
|
page readonly
|
|
|
|
F7A6D2E000
|
unkown
|
page read and write
|
|
|
|
14694A84000
|
unkown
|
page read and write
|
|
|
|
14D528BA000
|
unkown
|
page read and write
|
|
|
|
15412200000
|
unkown
|
page read and write
|
|
|
|
7FF5BE0E5000
|
unkown
|
page readonly
|
|
|
|
14692829000
|
unkown
|
page read and write
|
|
|
|
237A1C3E000
|
unkown
|
page read and write
|
|
|
|
BF747A000
|
unkown
|
page read and write
|
|
|
|
1A2F2202000
|
unkown
|
page read and write
|
|
|
|
15412A02000
|
unkown
|
page read and write
|
|
|
|
BF72FA000
|
unkown
|
page read and write
|
|
|
|
17D9EDF0000
|
unkown
|
page read and write
|
|
|
|
7FF5C05E6000
|
unkown
|
page readonly
|
|
|
|
7FF5D251F000
|
unkown
|
page readonly
|
|
|
|
1A2F227F000
|
unkown
|
page read and write
|
|
|
|
7FF5E59B2000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A0D000
|
unkown
|
page readonly
|
|
|
|
7FF5491E1000
|
unkown
|
page readonly
|
|
|
|
17208515000
|
unkown
|
page read and write
|
|
|
|
7FF5E5AA1000
|
unkown
|
page readonly
|
|
|
|
7FF5365BC000
|
unkown
|
page readonly
|
|
|
|
7FF508C95000
|
unkown
|
page readonly
|
|
|
|
7FF536649000
|
unkown
|
page readonly
|
|
|
|
7FF508A20000
|
unkown
|
page readonly
|
|
|
|
7FF549A7E000
|
unkown
|
page readonly
|
|
|
|
7FF5C05EC000
|
unkown
|
page readonly
|
|
|
|
1057EFC000
|
unkown
|
page read and write
|
|
|
|
7FF54BF9A000
|
unkown
|
page readonly
|
|
|
|
17208500000
|
unkown
|
page read and write
|
|
|
|
7FF5365E7000
|
unkown
|
page readonly
|
|
|
|
7FF508C2A000
|
unkown
|
page readonly
|
|
|
|
14695210000
|
unkown
|
page read and write
|
|
|
|
E2207E000
|
unkown
|
page read and write
|
|
|
|
17D9EE3D000
|
unkown
|
page read and write
|
|
|
|
237A1C41000
|
unkown
|
page read and write
|
|
|
|
15412950000
|
unkown
|
page read and write
|
|
|
|
1A2F20D0000
|
unkown
|
page readonly
|
|
|
|
7FF549756000
|
unkown
|
page readonly
|
|
|
|
17D9EE90000
|
unkown
|
page read and write
|
|
|
|
17DA4530000
|
unkown
|
page readonly
|
|
|
|
7FF549B3E000
|
unkown
|
page readonly
|
|
|
|
7FF5497CC000
|
unkown
|
page readonly
|
|
|
|
21D62413000
|
unkown
|
page read and write
|
|
|
|
7FF5BE30C000
|
unkown
|
page readonly
|
|
|
|
237A1D02000
|
unkown
|
page read and write
|
|
|
|
7FF54C067000
|
unkown
|
page readonly
|
|
|
|
2CB5EFB000
|
unkown
|
page read and write
|
|
|
|
1A2F2300000
|
unkown
|
page read and write
|
|
|
|
15EF27E000
|
unkown
|
page read and write
|
|
|
|
BD928FF000
|
unkown
|
page read and write
|
|
|
|
146949C5000
|
unkown
|
page read and write
|
|
|
|
7FF5A1C36000
|
unkown
|
page readonly
|
|
|
|
21FF3C00000
|
unkown
|
page readonly
|
|
|
|
14692730000
|
heap private
|
page read and write
|
|
|
|
7FF5499F7000
|
unkown
|
page readonly
|
|
|
|
7FF53CA01000
|
unkown
|
page readonly
|
|
|
|
14694760000
|
unkown
|
page read and write
|
|
|
|
206CBA66000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF33000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2FA000
|
unkown
|
page readonly
|
|
|
|
7FF54BFD8000
|
unkown
|
page readonly
|
|
|
|
A3119FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C05F5000
|
unkown
|
page readonly
|
|
|
|
177D8447000
|
unkown
|
page read and write
|
|
|
|
21FF3A3D000
|
unkown
|
page read and write
|
|
|
|
1A2F2247000
|
unkown
|
page read and write
|
|
|
|
7FF5A18EE000
|
unkown
|
page readonly
|
|
|
|
7FF549385000
|
unkown
|
page readonly
|
|
|
|
7FF536542000
|
unkown
|
page readonly
|
|
|
|
14694A73000
|
unkown
|
page read and write
|
|
|
|
BF6F4B000
|
unkown
|
page read and write
|
|
|
|
17208546000
|
unkown
|
page read and write
|
|
|
|
7FF5A33DD000
|
unkown
|
page readonly
|
|
|
|
7FF5E59EF000
|
unkown
|
page readonly
|
|
|
|
BD926FC000
|
unkown
|
page read and write
|
|
|
|
14694A43000
|
unkown
|
page read and write
|
|
|
|
7FF5D1C62000
|
unkown
|
page readonly
|
|
|
|
7FF5C0661000
|
unkown
|
page readonly
|
|
|
|
7FF508D59000
|
unkown
|
page readonly
|
|
|
|
7FF53CA99000
|
unkown
|
page readonly
|
|
|
|
206CBCD0000
|
unkown
|
page readonly
|
|
|
|
7FF5A34D6000
|
unkown
|
page readonly
|
|
|
|
7FF549A23000
|
unkown
|
page readonly
|
|
|
|
7FF57AAB8000
|
unkown
|
page readonly
|
|
|
|
7FF549A85000
|
unkown
|
page readonly
|
|
|
|
7FF53C951000
|
unkown
|
page readonly
|
|
|
|
7FF54BBD3000
|
unkown
|
page readonly
|
|
|
|
7FF5A33D3000
|
unkown
|
page readonly
|
|
|
|
7FF57AA5E000
|
unkown
|
page readonly
|
|
|
|
206CB9F0000
|
heap default
|
page read and write
|
|
|
|
237A1C13000
|
unkown
|
page read and write
|
|
|
|
7FF54BDFC000
|
unkown
|
page readonly
|
|
|
|
17208586000
|
unkown
|
page read and write
|
|
|
|
14692943000
|
unkown
|
page read and write
|
|
|
|
1D15E900000
|
unkown
|
page read and write
|
|
|
|
17D9EE8B000
|
unkown
|
page read and write
|
|
|
|
7FF5672D7000
|
unkown
|
page readonly
|
|
|
|
7FF549A0B000
|
unkown
|
page readonly
|
|
|
|
BF7C7D000
|
unkown
|
page read and write
|
|
|
|
7FF549A52000
|
unkown
|
page readonly
|
|
|
|
14692A00000
|
unkown
|
page readonly
|
|
|
|
7FF53658F000
|
unkown
|
page readonly
|
|
|
|
BD927FF000
|
unkown
|
page read and write
|
|
|
|
1D9C6B00000
|
unkown
|
page read and write
|
|
|
|
7FF57B2D4000
|
unkown
|
page readonly
|
|
|
|
1A2F223C000
|
unkown
|
page read and write
|
|
|
|
7FF57B2F8000
|
unkown
|
page readonly
|
|
|
|
1D160400000
|
unkown
|
page read and write
|
|
|
|
177D8340000
|
unkown
|
page readonly
|
|
|
|
7FF54C0BE000
|
unkown
|
page readonly
|
|
|
|
B627DBF000
|
unkown
|
page read and write
|
|
|
|
206CBC00000
|
unkown
|
page readonly
|
|
|
|
15EF5FF000
|
unkown
|
page read and write
|
|
|
|
7FF549A58000
|
unkown
|
page readonly
|
|
|
|
146949F3000
|
unkown
|
page read and write
|
|
|
|
E2237F000
|
unkown
|
page read and write
|
|
|
|
7FF5363CF000
|
unkown
|
page readonly
|
|
|
|
17DA44A0000
|
unkown
|
page read and write
|
|
|
|
21D622A0000
|
heap private
|
page read and write
|
|
|
|
BF6FCF000
|
unkown
|
page read and write
|
|
|
|
14695210000
|
unkown
|
page read and write
|
|
|
|
7FF5365E4000
|
unkown
|
page readonly
|
|
|
|
14692855000
|
unkown
|
page read and write
|
|
|
|
BF73FF000
|
unkown
|
page read and write
|
|
|
|
172066B3000
|
unkown
|
page read and write
|
|
|
|
7FF5C0578000
|
unkown
|
page readonly
|
|
|
|
7FF5D255C000
|
unkown
|
page readonly
|
|
|
|
7FF5365CC000
|
unkown
|
page readonly
|
|
|
|
17208640000
|
unkown
|
page readonly
|
|
|
|
177D8600000
|
unkown
|
page readonly
|
|
|
|
146949E9000
|
unkown
|
page read and write
|
|
|
|
7FF5497F7000
|
unkown
|
page readonly
|
|
|
|
7FF508AAA000
|
unkown
|
page readonly
|
|
|
|
1A2F2302000
|
unkown
|
page read and write
|
|
|
|
14D52F00000
|
unkown
|
page read and write
|
|
|
|
1D9C6A29000
|
unkown
|
page read and write
|
|
|
|
7FF508C8E000
|
unkown
|
page readonly
|
|
|
|
17DA4612000
|
unkown
|
page read and write
|
|
|
|
7FF54974D000
|
unkown
|
page readonly
|
|
|
|
1A2F2790000
|
unkown
|
page readonly
|
|
|
|
14694959000
|
unkown
|
page read and write
|
|
|
|
7FF5089C3000
|
unkown
|
page readonly
|
|
|
|
F7A727E000
|
unkown
|
page read and write
|
|
|
|
BF767A000
|
unkown
|
page read and write
|
|
|
|
17208650000
|
unkown
|
page read and write
|
|
|
|
14D52650000
|
unkown
|
page readonly
|
|
|
|
14D52A00000
|
unkown
|
page readonly
|
|
|
|
237A1C63000
|
unkown
|
page read and write
|
|
|
|
7FF5D25D9000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A44000
|
unkown
|
page readonly
|
|
|
|
7FF5D2491000
|
unkown
|
page readonly
|
|
|
|
7FF5A1C45000
|
unkown
|
page readonly
|
|
|
|
7FF549ABC000
|
unkown
|
page readonly
|
|
|
|
237A1C46000
|
unkown
|
page read and write
|
|
|
|
7FF549685000
|
unkown
|
page readonly
|
|
|
|
146928C5000
|
unkown
|
page read and write
|
|
|
|
7FF53613A000
|
unkown
|
page readonly
|
|
|
|
7FF5BE365000
|
unkown
|
page readonly
|
|
|
|
7FF5BE0F0000
|
unkown
|
page readonly
|
|
|
|
7FF570FBA000
|
unkown
|
page readonly
|
|
|
|
7FF57104D000
|
unkown
|
page readonly
|
|
|
|
7FF549A6A000
|
unkown
|
page readonly
|
|
|
|
B627CBB000
|
unkown
|
page read and write
|
|
|
|
15EF17F000
|
unkown
|
page read and write
|
|
|
|
14694A40000
|
unkown
|
page read and write
|
|
|
|
17D9F759000
|
unkown
|
page read and write
|
|
|
|
146949C1000
|
unkown
|
page read and write
|
|
|
|
1057CFF000
|
unkown
|
page read and write
|
|
|
|
1D15E84A000
|
unkown
|
page read and write
|
|
|
|
7FF5E5AA9000
|
unkown
|
page readonly
|
|
|
|
7FF5D22A0000
|
unkown
|
page readonly
|
|
|
|
7FF5D23C8000
|
unkown
|
page readonly
|
|
|
|
177D844D000
|
unkown
|
page read and write
|
|
|
|
17DA461E000
|
unkown
|
page read and write
|
|
|
|
237A1C75000
|
unkown
|
page read and write
|
|
|
|
7FF571084000
|
unkown
|
page readonly
|
|
|
|
7FF5A1BF5000
|
unkown
|
page readonly
|
|
|
|
1D1604C0000
|
unkown
|
page readonly
|
|
|
|
7FF54BFEA000
|
unkown
|
page readonly
|
|
|
|
7FF5496DE000
|
unkown
|
page readonly
|
|
|
|
177D8C02000
|
unkown
|
page read and write
|
|
|
|
7FF5BE3B7000
|
unkown
|
page readonly
|
|
|
|
21FF39E0000
|
unkown
|
page read and write
|
|
|
|
7FF536599000
|
unkown
|
page readonly
|
|
|
|
7FF5C05AF000
|
unkown
|
page readonly
|
|
|
|
7FF5A1822000
|
unkown
|
page readonly
|
|
|
|
A311FFD000
|
unkown
|
page read and write
|
|
|
|
7FF570E88000
|
unkown
|
page readonly
|
|
|
|
21FF3FA0000
|
unkown
|
page read and write
|
|
|
|
7FF5676B4000
|
unkown
|
page readonly
|
|
|
|
15412400000
|
unkown
|
page readonly
|
|
|
|
7FF5E522C000
|
unkown
|
page readonly
|
|
|
|
7FF5A1C57000
|
unkown
|
page readonly
|
|
|
|
21FF3820000
|
unkown
|
page readonly
|
|
|
|
14694780000
|
unkown
|
page readonly
|
|
|
|
14692930000
|
unkown
|
page read and write
|
|
|
|
1D15E845000
|
unkown
|
page read and write
|
|
|
|
17D9FDE0000
|
unkown
|
page read and write
|
|
|
|
17D9F590000
|
unkown
|
page readonly
|
|
|
|
146949F1000
|
unkown
|
page read and write
|
|
|
|
17DA43B0000
|
unkown
|
page read and write
|
|
|
|
146929A2000
|
unkown
|
page read and write
|
|
|
|
7FF54C00F000
|
unkown
|
page readonly
|
|
|
|
BD9257B000
|
unkown
|
page read and write
|
|
|
|
1469492C000
|
unkown
|
page read and write
|
|
|
|
14694924000
|
unkown
|
page read and write
|
|
|
|
7FF5D2556000
|
unkown
|
page readonly
|
|
|
|
A311C7E000
|
unkown
|
page read and write
|
|
|
|
17DA4684000
|
unkown
|
page read and write
|
|
|
|
1A2F2200000
|
unkown
|
page read and write
|
|
|
|
15EEFFE000
|
unkown
|
page read and write
|
|
|
|
21D63DF0000
|
unkown
|
page read and write
|
|
|
|
237A1C64000
|
unkown
|
page read and write
|
|
|
|
15EF6FC000
|
unkown
|
page read and write
|
|
|
|
7FF5089C7000
|
unkown
|
page readonly
|
|
|
|
17D9F5D0000
|
unkown
|
page readonly
|
|
|
|
7FF57B35C000
|
unkown
|
page readonly
|
|
|
|
17DA4689000
|
unkown
|
page read and write
|
|
|
|
62DF57E000
|
unkown
|
page read and write
|
|
|
|
7FF5A19E4000
|
unkown
|
page readonly
|
|
|
|
1541228D000
|
unkown
|
page read and write
|
|
|
|
17DA43D0000
|
unkown
|
page read and write
|
|
|
|
14692950000
|
unkown
|
page read and write
|
|
|
|
1D160800000
|
unkown
|
page read and write
|
|
|
|
BF77FB000
|
unkown
|
page read and write
|
|
|
|
17206560000
|
unkown
|
page write copy
|
|
|
|
7FF54BFA3000
|
unkown
|
page readonly
|
|
|
|
7FF5C065E000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A9E000
|
unkown
|
page readonly
|
|
|
|
14695110000
|
unkown
|
page read and write
|
|
|
|
7FF57AF25000
|
unkown
|
page readonly
|
|
|
|
7FF5D2234000
|
unkown
|
page readonly
|
|
|
|
7FF5499C7000
|
unkown
|
page readonly
|
|
|
|
7FF5491D6000
|
unkown
|
page readonly
|
|
|
|
237A1C4D000
|
unkown
|
page read and write
|
|
|
|
7FF536453000
|
unkown
|
page readonly
|
|
|
|
14695410000
|
unkown
|
page read and write
|
|
|
|
7FF5C05CD000
|
unkown
|
page readonly
|
|
|
|
172083E0000
|
unkown
|
page read and write
|
|
|
|
BF737B000
|
unkown
|
page read and write
|
|
|
|
3D66A7C000
|
unkown
|
page read and write
|
|
|
|
6911F7B000
|
unkown
|
page read and write
|
|
|
|
7FF57AF8D000
|
unkown
|
page readonly
|
|
|
|
7FF5BE39C000
|
unkown
|
page readonly
|
|
|
|
237A1C44000
|
unkown
|
page read and write
|
|
|
|
7FF5498FC000
|
unkown
|
page readonly
|
|
|
|
7FF54C036000
|
unkown
|
page readonly
|
|
|
|
177D8513000
|
unkown
|
page read and write
|
|
|
|
7FF508CCC000
|
unkown
|
page readonly
|
|
|
|
7FF53657E000
|
unkown
|
page readonly
|
|
|
|
14695510000
|
unkown
|
page read and write
|
|
|
|
21FF4200000
|
unkown
|
page read and write
|
|
|
|
7FF549AE7000
|
unkown
|
page readonly
|
|
|
|
7FF53CA90000
|
unkown
|
page readonly
|
|
|
|
7FF54BD77000
|
unkown
|
page readonly
|
|
|
|
7FF5BE168000
|
unkown
|
page readonly
|
|
|
|
7FF5672D3000
|
unkown
|
page readonly
|
|
|
|
7FF549919000
|
unkown
|
page readonly
|
|
|
|
17208660000
|
unkown
|
page readonly
|
|
|
|
BD92AFE000
|
unkown
|
page read and write
|
|
|
|
7FF570FE0000
|
unkown
|
page readonly
|
|
|
|
7FF5D25D9000
|
unkown
|
page readonly
|
|
|
|
7FF5A1B9C000
|
unkown
|
page readonly
|
|
|
|
146927F0000
|
unkown
|
page readonly
|
|
|
|
17D9EF13000
|
unkown
|
page read and write
|
|
|
|
7FF5499B5000
|
unkown
|
page readonly
|
|
|
|
7FF5D2546000
|
unkown
|
page readonly
|
|
|
|
7FF53C5D5000
|
unkown
|
page readonly
|
|
|
|
7FF5A3407000
|
unkown
|
page readonly
|
|
|
|
17DA4800000
|
unkown
|
page readonly
|
|
|
|
7FF5BE3A6000
|
unkown
|
page readonly
|
|
|
|
7FF536556000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A2C000
|
unkown
|
page readonly
|
|
|
|
BF787B000
|
unkown
|
page read and write
|
|
|
|
7FF5A18A1000
|
unkown
|
page readonly
|
|
|
|
146949E1000
|
unkown
|
page read and write
|
|
|
|
7FF5D23E7000
|
unkown
|
page readonly
|
|
|
|
7FF536150000
|
unkown
|
page readonly
|
|
|
|
7FF57B0A5000
|
unkown
|
page readonly
|
|
|
|
7FF5D254C000
|
unkown
|
page readonly
|
|
|
|
7FF5D2515000
|
unkown
|
page readonly
|
|
|
|
7FF5A1C54000
|
unkown
|
page readonly
|
|
|
|
7FF54BFD6000
|
unkown
|
page readonly
|
|
|
|
468147A000
|
unkown
|
page read and write
|
|
|
|
172065F0000
|
unkown
|
page readonly
|
|
|
|
1A2F2400000
|
unkown
|
page readonly
|
|
|
|
206CBA02000
|
unkown
|
page read and write
|
|
|
|
2CB5FFE000
|
unkown
|
page read and write
|
|
|
|
7FF54BD7E000
|
unkown
|
page readonly
|
|
|
|
17DA4398000
|
unkown
|
page read and write
|
|
|
|
14694C00000
|
unkown
|
page read and write
|
|
|
|
21D62300000
|
heap default
|
page read and write
|
|
|
|
14694C02000
|
unkown
|
page read and write
|
|
|
|
7FF5BE336000
|
unkown
|
page readonly
|
|
|
|
14692950000
|
unkown
|
page read and write
|
|
|
|
1D160830000
|
unkown
|
page write copy
|
|
|
|
E222FB000
|
unkown
|
page read and write
|
|
|
|
7FF5BE233000
|
unkown
|
page readonly
|
|
|
|
7FF56764E000
|
unkown
|
page readonly
|
|
|
|
17D9F718000
|
unkown
|
page read and write
|
|
|
|
1A2F20C0000
|
heap default
|
page read and write
|
|
|
|
21D62600000
|
unkown
|
page write copy
|
|
|
|
7FF54975C000
|
unkown
|
page readonly
|
|
|
|
7FF5BE190000
|
unkown
|
page readonly
|
|
|
|
2CB64F7000
|
unkown
|
page read and write
|
|
|
|
1D15E85B000
|
unkown
|
page read and write
|
|
|
|
7FF5C0560000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2C1000
|
unkown
|
page readonly
|
|
|
|
7FF535DE3000
|
unkown
|
page readonly
|
|
|
|
7FF5A30BA000
|
unkown
|
page readonly
|
|
|
|
1469490A000
|
unkown
|
page read and write
|
|
|
|
7FF57AC25000
|
unkown
|
page readonly
|
|
|
|
14694700000
|
heap private
|
page read and write
|
|
|
|
3D66B7C000
|
unkown
|
page read and write
|
|
|
|
17DA4647000
|
unkown
|
page read and write
|
|
|
|
7FF57B3E9000
|
unkown
|
page readonly
|
|
|
|
14694750000
|
unkown
|
page readonly
|
|
|
|
17D9EE2A000
|
unkown
|
page read and write
|
|
|
|
17DA44F0000
|
unkown
|
page readonly
|
|
|
|
14692920000
|
unkown
|
page read and write
|
|
|
|
17D9F700000
|
unkown
|
page read and write
|
|
|
|
BF75FB000
|
unkown
|
page read and write
|
|
|
|
17D9FD00000
|
unkown
|
page read and write
|
|
|
|
146929A5000
|
unkown
|
page read and write
|
|
|
|
17D9ED60000
|
unkown
|
page read and write
|
|
|
|
21A6ACD0000
|
unkown
|
page readonly
|
|
|
|
7FF5E5961000
|
unkown
|
page readonly
|
|
|
|
7FF536641000
|
unkown
|
page readonly
|
|
|
|
206CC170000
|
unkown
|
page readonly
|
|
|
|
7FF549218000
|
unkown
|
page readonly
|
|
|
|
1D15E84C000
|
unkown
|
page read and write
|
|
|
|
7FF57B114000
|
unkown
|
page readonly
|
|
|
|
7FF5BE34A000
|
unkown
|
page readonly
|
|
|
|
14694A84000
|
unkown
|
page read and write
|
|
|
|
1A2F21B0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE14B000
|
unkown
|
page readonly
|
|
|
|
17D9EF25000
|
unkown
|
page read and write
|
|
|
|
A31187B000
|
unkown
|
page read and write
|
|
|
|
237A1C6B000
|
unkown
|
page read and write
|
|
|
|
7FF57B1B9000
|
unkown
|
page readonly
|
|
|
|
21D6243F000
|
unkown
|
page read and write
|
|
|
|
14D52913000
|
unkown
|
page read and write
|
|
|
|
177D8424000
|
unkown
|
page read and write
|
|
|
|
7FF57B2F6000
|
unkown
|
page readonly
|
|
|
|
21FF3FA0000
|
unkown
|
page read and write
|
|
|
|
1057FFF000
|
unkown
|
page read and write
|
|
|
|
2CB63FB000
|
unkown
|
page read and write
|
|
|
|
B6281F9000
|
unkown
|
page read and write
|
|
|
|
21D62650000
|
unkown
|
page readonly
|
|
|
|
172066BF000
|
unkown
|
page read and write
|
|
|
|
7FF5365B6000
|
unkown
|
page readonly
|
|
|
|
7FF5BE295000
|
unkown
|
page readonly
|
|
|
|
BF7DFD000
|
unkown
|
page read and write
|
|
|
|
7FF508CA9000
|
unkown
|
page readonly
|
|
|
|
7FF5E5717000
|
unkown
|
page readonly
|
|
|
|
237A1C65000
|
unkown
|
page read and write
|
|
|
|
7FF567335000
|
unkown
|
page readonly
|
|
|
|
237A1AB0000
|
heap default
|
page read and write
|
|
|
|
14D528CB000
|
unkown
|
page read and write
|
|
|
|
691217F000
|
unkown
|
page read and write
|
|
|
|
14695010000
|
unkown
|
page read and write
|
|
|
|
1D9C6A57000
|
unkown
|
page read and write
|
|
|
|
206CBA13000
|
unkown
|
page read and write
|
|
|
|
14692940000
|
unkown
|
page read and write
|
|
|
|
21D62502000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2E1000
|
unkown
|
page readonly
|
|
|
|
17208650000
|
unkown
|
page read and write
|
|
|
|
1A2F21C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E5A37000
|
unkown
|
page readonly
|
|
|
|
237A1C2F000
|
unkown
|
page read and write
|
|
|
|
7FF5BE322000
|
unkown
|
page readonly
|
|
|
|
7FF54C046000
|
unkown
|
page readonly
|
|
|
|
7FF54BDEB000
|
unkown
|
page readonly
|
|
|
|
146946F0000
|
unkown
|
page read and write
|
|
|
|
14692841000
|
unkown
|
page read and write
|
|
|
|
7FF53C9FD000
|
unkown
|
page readonly
|
|
|
|
14694A40000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2FC000
|
unkown
|
page readonly
|
|
|
|
7FF5D253D000
|
unkown
|
page readonly
|
|
|
|
7FF54BD33000
|
unkown
|
page readonly
|
|
|
|
F7A747F000
|
unkown
|
page read and write
|
|
|
|
146928E2000
|
unkown
|
page read and write
|
|
|
|
17206629000
|
unkown
|
page read and write
|
|
|
|
1057DF9000
|
unkown
|
page read and write
|
|
|
|
17DA4540000
|
unkown
|
page readonly
|
|
|
|
7FF5A1BFF000
|
unkown
|
page readonly
|
|
|
|
46814FE000
|
unkown
|
page read and write
|
|
|
|
177D844B000
|
unkown
|
page read and write
|
|
|
|
7FF508CD6000
|
unkown
|
page readonly
|
|
|
|
14694760000
|
unkown
|
page read and write
|
|
|
|
E2267D000
|
unkown
|
page read and write
|
|
|
|
172083F0000
|
heap private
|
page read and write
|
|
|
|
237A1C78000
|
unkown
|
page read and write
|
|
|
|
7FF5A1BC6000
|
unkown
|
page readonly
|
|
|
|
146928E0000
|
unkown
|
page read and write
|
|
|
|
1469493A000
|
unkown
|
page read and write
|
|
|
|
1D160440000
|
unkown
|
page read and write
|
|
|
|
7FF5A1B8A000
|
unkown
|
page readonly
|
|
|
|
7FF5BE0D7000
|
unkown
|
page readonly
|
|
|
|
17D9ED40000
|
unkown
|
page readonly
|
|
|
|
15EE8CC000
|
unkown
|
page read and write
|
|
|
|
237A1C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5BE17A000
|
unkown
|
page readonly
|
|
|
|
7FF5BE429000
|
unkown
|
page readonly
|
|
|
|
17DA43B1000
|
unkown
|
page read and write
|
|
|
|
7FF57B16F000
|
unkown
|
page readonly
|
|
|
|
17DA44F0000
|
unkown
|
page read and write
|
|
|
|
15EF8FE000
|
unkown
|
page read and write
|
|
|
|
7FF54BF74000
|
unkown
|
page readonly
|
|
|
|
7FF536140000
|
unkown
|
page readonly
|
|
|
|
7FF5E5810000
|
unkown
|
page readonly
|
|
|
|
7FF5A354C000
|
unkown
|
page readonly
|
|
|
|
7FF57101E000
|
unkown
|
page readonly
|
|
|
|
7FF567612000
|
unkown
|
page readonly
|
|
|
|
7FF549A99000
|
unkown
|
page readonly
|
|
|
|
177D8360000
|
unkown
|
page read and write
|
|
|
|
7FF54C0C9000
|
unkown
|
page readonly
|
|
|
|
237A1C31000
|
unkown
|
page read and write
|
|
|
|
46813FE000
|
unkown
|
page read and write
|
|
|
|
17D9F5C0000
|
unkown
|
page readonly
|
|
|
|
7FF508CF4000
|
unkown
|
page readonly
|
|
|
|
146949F3000
|
unkown
|
page read and write
|
|
|
|
468127B000
|
unkown
|
page read and write
|
|
|
|
7FF5672E4000
|
unkown
|
page readonly
|
|
|
|
7FF54BED3000
|
unkown
|
page readonly
|
|
|
|
7FF5E5713000
|
unkown
|
page readonly
|
|
|
|
7FF54C0C1000
|
unkown
|
page readonly
|
|
|
|
1D9C8840000
|
unkown
|
page read and write
|
|
|
|
7FF508C68000
|
unkown
|
page readonly
|
|
|
|
7FF536540000
|
unkown
|
page readonly
|
|
|
|
3D66BFB000
|
unkown
|
page read and write
|
|
|
|
1469495B000
|
unkown
|
page read and write
|
|
|
|
2CB5F7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C05B9000
|
unkown
|
page readonly
|
|
|
|
177D8413000
|
unkown
|
page read and write
|
|
|
|
17DA43C0000
|
unkown
|
page read and write
|
|
|
|
146949F0000
|
unkown
|
page read and write
|
|
|
|
7FF57B188000
|
unkown
|
page readonly
|
|
|
|
7FF53CA25000
|
unkown
|
page readonly
|
|
|
|
7FF57B36C000
|
unkown
|
page readonly
|
|
|
|
7FF508CBD000
|
unkown
|
page readonly
|
|
|
|
206CBA41000
|
unkown
|
page read and write
|
|
|
|
17208690000
|
unkown
|
page readonly
|
|
|
|
14694C42000
|
unkown
|
page read and write
|
|
|
|
1057AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5BE1AF000
|
unkown
|
page readonly
|
|
|
|
BF7BFE000
|
unkown
|
page read and write
|
|
|
|
14692950000
|
unkown
|
page read and write
|
|
|
|
21FF3810000
|
heap default
|
page read and write
|
|
|
|
7FF54C060000
|
unkown
|
page readonly
|
|
|
|
7FF53C990000
|
unkown
|
page readonly
|
|
|
|
146928F4000
|
unkown
|
page read and write
|
|
|
|
14694A77000
|
unkown
|
page read and write
|
|
|
|
7FF57B375000
|
unkown
|
page readonly
|
|
|
|
177D8465000
|
unkown
|
page read and write
|
|
|
|
17DA465E000
|
unkown
|
page read and write
|
|
|
|
14694900000
|
unkown
|
page read and write
|
|
|
|
BF727E000
|
unkown
|
page read and write
|
|
|
|
14695410000
|
unkown
|
page read and write
|
|
|
|
14695210000
|
unkown
|
page read and write
|
|
|
|
17D9EE6E000
|
unkown
|
page read and write
|
|
|
|
17206715000
|
unkown
|
page read and write
|
|
|
|
1D15E85C000
|
unkown
|
page read and write
|
|
|
|
7FF5A3560000
|
unkown
|
page readonly
|
|
|
|
146928FC000
|
unkown
|
page read and write
|
|
|
|
146949F1000
|
unkown
|
page read and write
|
|
|
|
7FF5A1CB9000
|
unkown
|
page readonly
|
|
|
|
14D53000000
|
unkown
|
page readonly
|
|
|
|
14694A37000
|
unkown
|
page read and write
|
|
|
|
17208650000
|
unkown
|
page read and write
|
|
|
|
7FF54BE1A000
|
unkown
|
page readonly
|
|
|
|
7FF5E59B6000
|
unkown
|
page readonly
|
|
|
|
7FF5C0669000
|
unkown
|
page readonly
|
|
|
|
1D9C6B02000
|
unkown
|
page read and write
|
|
|
|
7FF5D25D1000
|
unkown
|
page readonly
|
|
|
|
7FF5BE237000
|
unkown
|
page readonly
|
|
|
|
21D63EF0000
|
unkown
|
page readonly
|
|
|
|
7FF5C05DC000
|
unkown
|
page readonly
|
|
|
|
7FF5BE3B5000
|
unkown
|
page readonly
|
|
|
|
7FF5E5704000
|
unkown
|
page readonly
|
|
|
|
146928DA000
|
unkown
|
page read and write
|
|
|
|
7FF5E59F9000
|
unkown
|
page readonly
|
|
|
|
7FF5BE379000
|
unkown
|
page readonly
|
|
|
|
237A1C50000
|
unkown
|
page read and write
|
|
|
|
7FF5BE0DE000
|
unkown
|
page readonly
|
|
|
|
BD921EF000
|
unkown
|
page read and write
|
|
|
|
7FF536649000
|
unkown
|
page readonly
|
|
|
|
1A2F2313000
|
unkown
|
page read and write
|
|
|
|
146927A0000
|
unkown
|
page write copy
|
|
|
|
21A6AC00000
|
unkown
|
page readonly
|
|
|
|
17D9EE9B000
|
unkown
|
page read and write
|
|
|
|
7FF5D2574000
|
unkown
|
page readonly
|
|
|
|
7FF508C66000
|
unkown
|
page readonly
|
|
|
|
146928E9000
|
unkown
|
page read and write
|
|
|
|
7FF549681000
|
unkown
|
page readonly
|
|
|
|
21A6A960000
|
unkown
|
page write copy
|
|
|
|
237A1C42000
|
unkown
|
page read and write
|
|
|
|
206CBA2A000
|
unkown
|
page read and write
|
|
|
|
14D53390000
|
unkown
|
page readonly
|
|
|
|
1541224E000
|
unkown
|
page read and write
|
|
|
|
14D528C1000
|
unkown
|
page read and write
|
|
|
|
21FF3FA0000
|
unkown
|
page read and write
|
|
|
|
21A6AA41000
|
unkown
|
page read and write
|
|
|
|
7FF5BE36F000
|
unkown
|
page readonly
|
|
|
|
BF74F9000
|
unkown
|
page read and write
|
|
|
|
7FF5A34D8000
|
unkown
|
page readonly
|
|
|
|
21A6AA55000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2D4000
|
unkown
|
page readonly
|
|
|
|
62DF87D000
|
unkown
|
page read and write
|
|
|
|
7FF54BFFE000
|
unkown
|
page readonly
|
|
|
|
21FF4002000
|
unkown
|
page read and write
|
|
|
|
21A6AA29000
|
unkown
|
page read and write
|
|
|
|
7FF5A1CAE000
|
unkown
|
page readonly
|
|
|
|
7FF508B48000
|
unkown
|
page readonly
|
|
|
|
7FF549A42000
|
unkown
|
page readonly
|
|
|
|
7FF567686000
|
unkown
|
page readonly
|
|
|
|
7FF54BF81000
|
unkown
|
page readonly
|
|
|
|
14694B86000
|
unkown
|
page read and write
|
|
|
|
B6280FE000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2D7000
|
unkown
|
page readonly
|
|
|
|
7FF5BE29C000
|
unkown
|
page readonly
|
|
|
|
BF78FB000
|
unkown
|
page read and write
|
|
|
|
146949F1000
|
unkown
|
page read and write
|
|
|
|
7FF508C62000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A26000
|
unkown
|
page readonly
|
|
|
|
206CC400000
|
unkown
|
page readonly
|
|
|
|
14692971000
|
unkown
|
page read and write
|
|
|
|
172066F2000
|
unkown
|
page read and write
|
|
|
|
146928A3000
|
unkown
|
page read and write
|
|
|
|
7FF57AA6B000
|
unkown
|
page readonly
|
|
|
|
15412288000
|
unkown
|
page read and write
|
|
|
|
14692921000
|
unkown
|
page read and write
|
|
|
|
14D52902000
|
unkown
|
page read and write
|
|
|
|
17207FA0000
|
unkown
|
page read and write
|
|
|
|
7FF5A1AD0000
|
unkown
|
page readonly
|
|
|
|
21D62400000
|
unkown
|
page read and write
|
|
|
|
17D9F602000
|
unkown
|
page read and write
|
|
|
|
7FF5364BC000
|
unkown
|
page readonly
|
|
|
|
7FF5C0607000
|
unkown
|
page readonly
|
|
|
|
E21DFB000
|
unkown
|
page read and write
|
|
|
|
7FF567719000
|
unkown
|
page readonly
|
|
|
|
7FF5A35C9000
|
unkown
|
page readonly
|
|
|
|
14692813000
|
unkown
|
page read and write
|
|
|
|
14692800000
|
unkown
|
page read and write
|
|
|
|
237A1C68000
|
unkown
|
page read and write
|
|
|
|
7FF54BFC2000
|
unkown
|
page readonly
|
|
|
|
468157E000
|
unkown
|
page read and write
|
|
|
|
17206683000
|
unkown
|
page read and write
|
|
|
|
7FF570C23000
|
unkown
|
page readonly
|
|
|
|
14D52D90000
|
unkown
|
page readonly
|
|
|
|
7FF508C7A000
|
unkown
|
page readonly
|
|
|
|
17DA44E0000
|
unkown
|
page read and write
|
|
|
|
7FF5A35BE000
|
unkown
|
page readonly
|
|
|
|
7FF5A1C26000
|
unkown
|
page readonly
|
|
|
|
177D8350000
|
unkown
|
page readonly
|
|
|
|
7FF5BE320000
|
unkown
|
page readonly
|
|
|
|
7FF5A3536000
|
unkown
|
page readonly
|
|
|
|
7FF54BD37000
|
unkown
|
page readonly
|
|
|
|
146949F1000
|
unkown
|
page read and write
|
|
|
|
146949F2000
|
unkown
|
page read and write
|
|
|
|
7FF549683000
|
unkown
|
page readonly
|
|
|
|
17D9F759000
|
unkown
|
page read and write
|
|
|
|
206CBED0000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A40000
|
unkown
|
page readonly
|
|
|
|
1D15ED90000
|
unkown
|
page readonly
|
|
|
|
A311AFE000
|
unkown
|
page read and write
|
|
|
|
17D9EEAC000
|
unkown
|
page read and write
|
|
|
|
17206600000
|
unkown
|
page read and write
|
|
|
|
1057A7B000
|
unkown
|
page read and write
|
|
|
|
7FF5E597C000
|
unkown
|
page readonly
|
|
|
|
3D66FFF000
|
unkown
|
page read and write
|
|
|
|
7FF56749F000
|
unkown
|
page readonly
|
|
|
|
7FF5A3564000
|
unkown
|
page readonly
|
|
|
|
7FF567628000
|
unkown
|
page readonly
|
|
|
|
1D15E813000
|
unkown
|
page read and write
|
|
|
|
21FF3A00000
|
unkown
|
page read and write
|
|
|
|
7FF54BE4F000
|
unkown
|
page readonly
|
|
|
|
17206490000
|
unkown
|
page readonly
|
|
|
|
BF79FB000
|
unkown
|
page read and write
|
|
|
|
17DA44F0000
|
unkown
|
page read and write
|
|
|
|
14694A40000
|
unkown
|
page read and write
|
|
|
|
7FF54986B000
|
unkown
|
page readonly
|
|
|
|
7FF5D2577000
|
unkown
|
page readonly
|
|
|
|
7FF57B31E000
|
unkown
|
page readonly
|
|
|
|
17D9F718000
|
unkown
|
page read and write
|
|
|
|
7FF5A181E000
|
unkown
|
page readonly
|
|
|
|
7FF508D51000
|
unkown
|
page readonly
|
|
|
|
146946E0000
|
unkown
|
page readonly
|
|
|
|
154121F0000
|
heap default
|
page read and write
|
|
|
|
7FF5710E9000
|
unkown
|
page readonly
|
|
|
|
7FF567719000
|
unkown
|
page readonly
|
|
|
|
BF7B7A000
|
unkown
|
page read and write
|
|
|
|
206CC202000
|
unkown
|
page read and write
|
|
|
|
7FF5C0669000
|
unkown
|
page readonly
|
|
|
|
237A1BA0000
|
unkown
|
page readonly
|
|
|
|
146949F1000
|
unkown
|
page read and write
|
|
|
|
237A1C7E000
|
unkown
|
page read and write
|
|
|
|
17DA4487000
|
unkown
|
page readonly
|
|
|
|
7FF53CA0C000
|
unkown
|
page readonly
|
|
|
|
17D9F460000
|
unkown
|
page readonly
|
|
|
|
15EF2FF000
|
unkown
|
page read and write
|
|
|
|
7FF5676A5000
|
unkown
|
page readonly
|
|
|
|
7FF508D4E000
|
unkown
|
page readonly
|
|
|
|
172066A2000
|
unkown
|
page read and write
|
|
|
|
17D9EE00000
|
unkown
|
page read and write
|
|
|
|
7FF5A3401000
|
unkown
|
page readonly
|
|
|
|
17DA4390000
|
unkown
|
page read and write
|
|
|
|
7FF570D97000
|
unkown
|
page readonly
|
|
|
|
17208586000
|
unkown
|
page read and write
|
|
|
|
7FF54BD90000
|
unkown
|
page readonly
|
|
|
|
1D9C6B13000
|
unkown
|
page read and write
|
|
|
|
7FF5710E1000
|
unkown
|
page readonly
|
|
|
|
7FF56767D000
|
unkown
|
page readonly
|
|
|
|
1D1601D0000
|
unkown
|
page read and write
|
|
|
|
1A2F2A02000
|
unkown
|
page read and write
|
|
|
|
7FF54BFAC000
|
unkown
|
page readonly
|
|
|
|
7FF57B366000
|
unkown
|
page readonly
|
|
|
|
7FF5A1C3C000
|
unkown
|
page readonly
|
|
|
|
7FF54BF7A000
|
unkown
|
page readonly
|
|
|
|
15412C00000
|
unkown
|
page readonly
|
|
|
|
7FF5D25CE000
|
unkown
|
page readonly
|
|
|
|
17DA45D0000
|
unkown
|
page readonly
|
|
|
|
7FF53C992000
|
unkown
|
page readonly
|
|
|
|
14694B83000
|
unkown
|
page read and write
|
|
|
|
7FF5D250E000
|
unkown
|
page readonly
|
|
|
|
7FF5A30C0000
|
unkown
|
page readonly
|
|
|
|
15412313000
|
unkown
|
page read and write
|
|
|
|
21D62310000
|
unkown
|
page readonly
|
|
|
|
206CBA76000
|
unkown
|
page read and write
|
|
|
|
7FF56765F000
|
unkown
|
page readonly
|
|
|
|
7FF549B49000
|
unkown
|
page readonly
|
|
|
|
7FF5D248A000
|
unkown
|
page readonly
|
|
|
|
BF797B000
|
unkown
|
page read and write
|
|
|
|
177D8508000
|
unkown
|
page read and write
|
|
|
|
237A1C2A000
|
unkown
|
page read and write
|
|
|
|
7FF54BFA7000
|
unkown
|
page readonly
|
|
|
|
1D15E84B000
|
unkown
|
page read and write
|
|
|
|
15EEEFB000
|
unkown
|
page read and write
|
|
|
|
7FF508CDC000
|
unkown
|
page readonly
|
|
|
|
14D52DD0000
|
unkown
|
page readonly
|
|
|
|
172066EE000
|
unkown
|
page read and write
|
|
|
|
14694924000
|
unkown
|
page read and write
|
|
|
|
17D9F5A0000
|
unkown
|
page readonly
|
|
|
|
7FF5365C6000
|
unkown
|
page readonly
|
|
|
|
172066D9000
|
unkown
|
page read and write
|
|
|
|
BD9216C000
|
unkown
|
page read and write
|
|
|
|
7FF5A1ADC000
|
unkown
|
page readonly
|
|
|
|
14695310000
|
unkown
|
page read and write
|
|
|
|
1D15E867000
|
unkown
|
page read and write
|
|
|
|
7FF567655000
|
unkown
|
page readonly
|
|
|
|
14694A40000
|
unkown
|
page read and write
|
|
|
|
7FF54C0C9000
|
unkown
|
page readonly
|
|
|
|
21FF37B0000
|
heap private
|
page read and write
|
|
|
|
7FF5E5A47000
|
unkown
|
page readonly
|
|
|
|
237A1C51000
|
unkown
|
page read and write
|
|
|
|
1469291F000
|
unkown
|
page read and write
|
|
|
|
7FF57100A000
|
unkown
|
page readonly
|
|
|
|
1D9C6C50000
|
unkown
|
page readonly
|
|
|
|
7FF5BE0AC000
|
unkown
|
page readonly
|
|
|
|
7FF5E59B8000
|
unkown
|
page readonly
|
|
|
|
7FF5A3546000
|
unkown
|
page readonly
|
|
|
|
21FF3B02000
|
unkown
|
page read and write
|
|
|
|
17DA44B0000
|
unkown
|
page read and write
|
|
|
|
1A2F2213000
|
unkown
|
page read and write
|
|
|
|
7FF549AC6000
|
unkown
|
page readonly
|
|
|
|
7FF53CA1C000
|
unkown
|
page readonly
|
|
|
|
7FF5D2529000
|
unkown
|
page readonly
|
|
|
|
237A1C66000
|
unkown
|
page read and write
|
|
|
|
146949A1000
|
unkown
|
page read and write
|
|
|
|
F7A717F000
|
unkown
|
page read and write
|
|
|
|
62DF97E000
|
unkown
|
page read and write
|
|
|
|
1A2F2C00000
|
unkown
|
page readonly
|
|
|
|
17DA4600000
|
unkown
|
page read and write
|
|
|
|
177D843C000
|
unkown
|
page read and write
|
|
|
|
7FF53C7C7000
|
unkown
|
page readonly
|
|
|
|
7FF549A27000
|
unkown
|
page readonly
|
|
|
|
7FF53CA06000
|
unkown
|
page readonly
|
|
|
|
1D9C6A02000
|
unkown
|
page read and write
|
|
|
|
1D15E902000
|
unkown
|
page read and write
|
|
|
|
1D15E82A000
|
unkown
|
page read and write
|
|
|
|
B62817F000
|
unkown
|
page read and write
|
|
|
|
14694B43000
|
unkown
|
page read and write
|
|
|
|
237A1C3A000
|
unkown
|
page read and write
|
|
|
|
17DA45F0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE338000
|
unkown
|
page readonly
|
|
|
|
7FF5D24AC000
|
unkown
|
page readonly
|
|
|
|
206CBB02000
|
unkown
|
page read and write
|
|
|
|
15412300000
|
unkown
|
page read and write
|
|
|
|
691207E000
|
unkown
|
page read and write
|
|
|
|
14695510000
|
unkown
|
page read and write
|
|
|
|
206CBA5A000
|
unkown
|
page read and write
|
|
|
|
7FF508CF7000
|
unkown
|
page readonly
|
|
|
|
7FF5BE391000
|
unkown
|
page readonly
|
|
|
|
17D9FEC0000
|
unkown
|
page readonly
|
|
|
|
7FF5A1BBD000
|
unkown
|
page readonly
|
|
|
|
14692892000
|
unkown
|
page read and write
|
|
|
|
17206613000
|
unkown
|
page read and write
|
|
|
|
7FF5089B4000
|
unkown
|
page readonly
|
|
|
|
7FF5BE084000
|
unkown
|
page readonly
|
|
|
|
7FF5A1A1E000
|
unkown
|
page readonly
|
|
|
|
1D1601B0000
|
unkown
|
page read and write
|
|
|
|
7FF5A3505000
|
unkown
|
page readonly
|
|
|
|
7FF5A343C000
|
unkown
|
page readonly
|
|
|
|
14694924000
|
unkown
|
page read and write
|
|
|
|
7FF5BE38D000
|
unkown
|
page readonly
|
|
|
|
206CB990000
|
heap private
|
page read and write
|
|
|
|
146928FC000
|
unkown
|
page read and write
|
|
|
|
21A6AA13000
|
unkown
|
page read and write
|
|
|
|
7FF5C03EF000
|
unkown
|
page readonly
|
|
|
|
1D160202000
|
unkown
|
page read and write
|
|
|
|
7FF549805000
|
unkown
|
page readonly
|
|
|
|
14694923000
|
unkown
|
page read and write
|
|
|
|
7FF54BD24000
|
unkown
|
page readonly
|
|
|
|
7FF54987C000
|
unkown
|
page readonly
|
|
|
|
237A2402000
|
unkown
|
page read and write
|
|
|
|
7FF53C947000
|
unkown
|
page readonly
|
|
|
|
7FF5498EE000
|
unkown
|
page readonly
|
|
|
|
1D15E7F0000
|
unkown
|
page readonly
|
|
|
|
1D15E800000
|
unkown
|
page read and write
|
|
|
|
BD92CFF000
|
unkown
|
page read and write
|
|
|
|
F7A6CAB000
|
unkown
|
page read and write
|
|
|
|
146928C7000
|
unkown
|
page read and write
|
|
|
|
7FF508C2C000
|
unkown
|
page readonly
|
|
|
|
7FF5498AE000
|
unkown
|
page readonly
|
|
|
|
21A6AA02000
|
unkown
|
page read and write
|
|
|
|
7FF54C03C000
|
unkown
|
page readonly
|
|
|
|
146949F1000
|
unkown
|
page read and write
|
|
|
|
14695510000
|
unkown
|
page read and write
|
|
|
|
17D9EE54000
|
unkown
|
page read and write
|
|
|
|
7FF5E597A000
|
unkown
|
page readonly
|
|
|
|
17DA439E000
|
unkown
|
page read and write
|
|
|
|
146949F4000
|
unkown
|
page read and write
|
|
|
|
7FF5A1A58000
|
unkown
|
page readonly
|
|
|
|
14692913000
|
unkown
|
page read and write
|
|
|
|
7FF57B339000
|
unkown
|
page readonly
|
|
|
|
17208546000
|
unkown
|
page read and write
|
|
|
|
7FF549AD5000
|
unkown
|
page readonly
|
|
|
|
7FF567622000
|
unkown
|
page readonly
|
|
|
|
17206675000
|
unkown
|
page read and write
|
|
|
|
1A2F2277000
|
unkown
|
page read and write
|
|
|
|
17D9EE73000
|
unkown
|
page read and write
|
|
|
|
17DA4497000
|
unkown
|
page write copy
|
|
|
|
1D15E720000
|
unkown
|
page readonly
|
|
|
|
7FF570FF2000
|
unkown
|
page readonly
|
|
|
|
14694802000
|
unkown
|
page read and write
|
|
|
|
7FF53640E000
|
unkown
|
page readonly
|
|
|
|
15EF3FA000
|
unkown
|
page read and write
|
|
|
|
14695410000
|
unkown
|
page read and write
|
|
|
|
BF7AFC000
|
unkown
|
page read and write
|
|
|
|
15412190000
|
heap private
|
page read and write
|
|
|
|
7FF54BFC0000
|
unkown
|
page readonly
|
|
|
|
7FF5A1A7B000
|
unkown
|
page readonly
|
|
|
|
7FF508A15000
|
unkown
|
page readonly
|
|
|
|
15412308000
|
unkown
|
page read and write
|
|
|
|
17DA46B0000
|
unkown
|
page read and write
|
|
|
|
7FF5A1BEE000
|
unkown
|
page readonly
|
|
|
|
14694B43000
|
unkown
|
page read and write
|
|
|
|
237A1B90000
|
unkown
|
page readonly
|
|
|
|
7FF571056000
|
unkown
|
page readonly
|
|
|
|
7FF5A34D2000
|
unkown
|
page readonly
|
|
|
|
14694912000
|
unkown
|
page read and write
|
|
|
|
62DF47F000
|
unkown
|
page read and write
|
|
|
|
15EE94E000
|
unkown
|
page read and write
|
|
|
|
7FF57B356000
|
unkown
|
page readonly
|
|
|
|
7FF53CA34000
|
unkown
|
page readonly
|
|
|
|
7FF54BF9C000
|
unkown
|
page readonly
|
|
|
|
1D9C69D0000
|
unkown
|
page readonly
|
|
|
|
7FF5E5A1C000
|
unkown
|
page readonly
|
|
|
|
7FF5C0604000
|
unkown
|
page readonly
|
|
|
|
14692943000
|
unkown
|
page read and write
|
|
|
|
17D9EE76000
|
unkown
|
page read and write
|
|
|
|
7FF536585000
|
unkown
|
page readonly
|
|
|
|
7FF5496C0000
|
unkown
|
page readonly
|
|
|
|
7FF54977A000
|
unkown
|
page readonly
|
|
|
|
17206714000
|
unkown
|
page read and write
|
|
|
|
7FF54BF61000
|
unkown
|
page readonly
|
|
|
|
7FF54975F000
|
unkown
|
page readonly
|
|
|
|
7FF53C9CE000
|
unkown
|
page readonly
|
|
|
|
7FF570DB0000
|
unkown
|
page readonly
|
|
|
|
A311EFD000
|
unkown
|
page read and write
|
|
|
|
7FF57B3E1000
|
unkown
|
page readonly
|
|
|
|
14695000000
|
unkown
|
page read and write
|
|
|
|
1057C79000
|
unkown
|
page read and write
|
|
|
|
21A6A950000
|
heap default
|
page read and write
|
|
|
|
7FF54C005000
|
unkown
|
page readonly
|
|
|
|
17D9EEFA000
|
unkown
|
page read and write
|
|
|
|
7FF5D24E6000
|
unkown
|
page readonly
|
|
There are 1331 hidden memdumps, click here to show them.