Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Calculation-1776198036-01262021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Calculation-1776198036-01262021.xlsm.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:45
2020, mtime=Wed Jan 27 05:02:58 2021, atime=Wed Jan 27 05:02:58 2021, length=26179, window=hide
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$Calculation-1776198036-01262021.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\085A25F3-EE20-427C-93CA-526F3EE34AFA
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\2D5C492F.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\386F7164.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4D6C2066.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\A4B10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 16:19:49 2019, mtime=Wed Jan 27 05:02:58 2021, atime=Wed Jan 27 05:02:58 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\95B10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\93E893EC.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9FCB8AFD.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C96BDCDA.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\86EE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Calculation-1776198036-01262021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:14
2020, mtime=Wed Jan 27 04:51:44 2021, atime=Wed Jan 27 04:51:44 2021, length=26318, window=hide
|
dropped
|
|
|
|
C:\Users\user\Desktop\47EE0000
|
data
|
dropped
|
|
There are 7 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\Flopers.GGRRDDFF,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://test.limulustest.ru/invzovg/5319402.jpg
|
188.225.73.5
|
|
|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://wus2-000.contentsync.
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://wus2-000.pagecontentsync.
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://ncus-000.contentsync.
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://contentstorage.omex.office.net/addinclassifier/officeentities
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
test.limulustest.ru
|
188.225.73.5
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
188.225.73.5
|
unknown
|
Russian Federation
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
yj4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
zj4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1ADC0
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1B36D
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1B504
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1B5BF
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
kz4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
28A07
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
28B3F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
p$8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE35D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE5FC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE6D6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE782
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
n+8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F622D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F6393
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
There are 153 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
8A78DFB000
|
unkown
|
page read and write
|
|
|
|
7FF53B8BD000
|
unkown
|
page readonly
|
|
|
|
7FF568063000
|
unkown
|
page readonly
|
|
|
|
1AEEBE4E000
|
unkown
|
page read and write
|
|
|
|
7FF524988000
|
unkown
|
page readonly
|
|
|
|
22EF6A73000
|
unkown
|
page read and write
|
|
|
|
2466BF10000
|
heap private
|
page read and write
|
|
|
|
25EB8D97000
|
unkown
|
page read and write
|
|
|
|
2F2B543C000
|
unkown
|
page read and write
|
|
|
|
7FF5C9300000
|
unkown
|
page readonly
|
|
|
|
7FF5456D5000
|
unkown
|
page readonly
|
|
|
|
833777F000
|
unkown
|
page read and write
|
|
|
|
27E555F0000
|
unkown
|
page readonly
|
|
|
|
2376000
|
unkown
|
page readonly
|
|
|
|
744837E000
|
unkown
|
page read and write
|
|
|
|
2257000
|
unkown
|
page readonly
|
|
|
|
7FF53B827000
|
unkown
|
page readonly
|
|
|
|
25EB9310000
|
unkown
|
page read and write
|
|
|
|
7FF5C0541000
|
unkown
|
page readonly
|
|
|
|
833787C000
|
unkown
|
page read and write
|
|
|
|
1C481029000
|
unkown
|
page read and write
|
|
|
|
7FF521BE3000
|
unkown
|
page readonly
|
|
|
|
7DFD51691000
|
unkown
|
page readonly
|
|
|
|
259B64A0000
|
unkown
|
page read and write
|
|
|
|
7FF583C4D000
|
unkown
|
page readonly
|
|
|
|
1FE65570000
|
unkown
|
page read and write
|
|
|
|
25EB8D23000
|
unkown
|
page read and write
|
|
|
|
1AEEBD50000
|
unkown
|
page readonly
|
|
|
|
7FF568175000
|
unkown
|
page readonly
|
|
|
|
22EF6A7A000
|
unkown
|
page read and write
|
|
|
|
7FF521ED6000
|
unkown
|
page readonly
|
|
|
|
22EF6A41000
|
unkown
|
page read and write
|
|
|
|
7FF5430B3000
|
unkown
|
page readonly
|
|
|
|
7FF5C97F1000
|
unkown
|
page readonly
|
|
|
|
7FF521E14000
|
unkown
|
page readonly
|
|
|
|
25EBA100000
|
unkown
|
page read and write
|
|
|
|
25EB6BB0000
|
unkown
|
page readonly
|
|
|
|
554E9FF000
|
unkown
|
page read and write
|
|
|
|
25EBA182000
|
unkown
|
page read and write
|
|
|
|
7FF572930000
|
unkown
|
page readonly
|
|
|
|
7FF5B9FFE000
|
unkown
|
page readonly
|
|
|
|
234F000
|
unkown
|
page readonly
|
|
|
|
1FE63B02000
|
unkown
|
page read and write
|
|
|
|
7FF5C02FB000
|
unkown
|
page readonly
|
|
|
|
2FD34FC000
|
unkown
|
page read and write
|
|
|
|
2EF8BEB000
|
unkown
|
page read and write
|
|
|
|
7FF5C96F2000
|
unkown
|
page readonly
|
|
|
|
1C482060000
|
unkown
|
page readonly
|
|
|
|
7FF543154000
|
unkown
|
page readonly
|
|
|
|
27E555E0000
|
heap default
|
page read and write
|
|
|
|
2C84000
|
unkown
|
page read and write
|
|
|
|
C5E88F9000
|
unkown
|
page read and write
|
|
|
|
1C4866C0000
|
unkown
|
page read and write
|
|
|
|
259B59D0000
|
unkown
|
page read and write
|
|
|
|
25EB8E0A000
|
unkown
|
page read and write
|
|
|
|
7FF5C05D9000
|
unkown
|
page readonly
|
|
|
|
1C486813000
|
unkown
|
page read and write
|
|
|
|
2F2B544F000
|
unkown
|
page read and write
|
|
|
|
7FF5C0111000
|
unkown
|
page readonly
|
|
|
|
7FF5C01EC000
|
unkown
|
page readonly
|
|
|
|
E2A567D000
|
unkown
|
page read and write
|
|
|
|
7FF4EEA6A000
|
unkown
|
page readonly
|
|
|
|
25EBA082000
|
unkown
|
page read and write
|
|
|
|
7FF5BFF0D000
|
unkown
|
page readonly
|
|
|
|
1C4865A0000
|
unkown
|
page read and write
|
|
|
|
259B56C0000
|
unkown
|
page readonly
|
|
|
|
7FF53B8D6000
|
unkown
|
page readonly
|
|
|
|
2F2B5600000
|
unkown
|
page readonly
|
|
|
|
7FF54321C000
|
unkown
|
page readonly
|
|
|
|
1C4868B4000
|
unkown
|
page read and write
|
|
|
|
7FF5C04E8000
|
unkown
|
page readonly
|
|
|
|
7FF545904000
|
unkown
|
page readonly
|
|
|
|
7FF578F21000
|
unkown
|
page readonly
|
|
|
|
7FF524A0C000
|
unkown
|
page readonly
|
|
|
|
7FF4EEA66000
|
unkown
|
page readonly
|
|
|
|
7FF4EE7C3000
|
unkown
|
page readonly
|
|
|
|
7FF5C05CE000
|
unkown
|
page readonly
|
|
|
|
7FF4EEAF7000
|
unkown
|
page readonly
|
|
|
|
7FF53AFA5000
|
unkown
|
page readonly
|
|
|
|
25C29870000
|
unkown
|
page read and write
|
|
|
|
7FF578CD7000
|
unkown
|
page readonly
|
|
|
|
2466BFD0000
|
unkown
|
page readonly
|
|
|
|
7FF54300E000
|
unkown
|
page readonly
|
|
|
|
7FF5BA188000
|
unkown
|
page readonly
|
|
|
|
7FF4FF7B7000
|
unkown
|
page readonly
|
|
|
|
7FF583C39000
|
unkown
|
page readonly
|
|
|
|
339977E000
|
unkown
|
page read and write
|
|
|
|
7FF5C975D000
|
unkown
|
page readonly
|
|
|
|
7FF53B524000
|
unkown
|
page readonly
|
|
|
|
7FF521E0E000
|
unkown
|
page readonly
|
|
|
|
1AEEBC70000
|
heap default
|
page read and write
|
|
|
|
7FF572B19000
|
unkown
|
page readonly
|
|
|
|
7FF578F78000
|
unkown
|
page readonly
|
|
|
|
7FF4FF937000
|
unkown
|
page readonly
|
|
|
|
25EB8F00000
|
unkown
|
page read and write
|
|
|
|
22EF6CD0000
|
unkown
|
page readonly
|
|
|
|
7FF4EEA0A000
|
unkown
|
page readonly
|
|
|
|
7FF5BFD68000
|
unkown
|
page readonly
|
|
|
|
2466BF70000
|
heap default
|
page read and write
|
|
|
|
7FF542FFA000
|
unkown
|
page readonly
|
|
|
|
23A2000
|
unkown
|
page readonly
|
|
|
|
7FF583BF6000
|
unkown
|
page readonly
|
|
|
|
7FF5455BD000
|
unkown
|
page readonly
|
|
|
|
7FF521F61000
|
unkown
|
page readonly
|
|
|
|
25EB6CB9000
|
unkown
|
page read and write
|
|
|
|
259B5BE0000
|
unkown
|
page readonly
|
|
|
|
259B57A1000
|
unkown
|
page read and write
|
|
|
|
25EB8E74000
|
unkown
|
page read and write
|
|
|
|
7FF5BA299000
|
unkown
|
page readonly
|
|
|
|
7FF53B8DC000
|
unkown
|
page readonly
|
|
|
|
5E00000
|
unkown
|
page readonly
|
|
|
|
25EB6E00000
|
unkown
|
page readonly
|
|
|
|
7FF5B9E02000
|
unkown
|
page readonly
|
|
|
|
1C486800000
|
unkown
|
page read and write
|
|
|
|
25EB6C29000
|
unkown
|
page read and write
|
|
|
|
7FF5BA20C000
|
unkown
|
page readonly
|
|
|
|
554E3FA000
|
unkown
|
page read and write
|
|
|
|
7FF578F3A000
|
unkown
|
page readonly
|
|
|
|
7FF524A92000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6CB000
|
unkown
|
page readonly
|
|
|
|
7FF5BF610000
|
unkown
|
page readonly
|
|
|
|
7FF5BFD79000
|
unkown
|
page readonly
|
|
|
|
7FF5C025C000
|
unkown
|
page readonly
|
|
|
|
1C481F70000
|
unkown
|
page read and write
|
|
|
|
74480FF000
|
unkown
|
page read and write
|
|
|
|
2F2B53A0000
|
unkown
|
page readonly
|
|
|
|
7FF5BFF44000
|
unkown
|
page readonly
|
|
|
|
25C2986C000
|
unkown
|
page read and write
|
|
|
|
7FF4FF87A000
|
unkown
|
page readonly
|
|
|
|
7FF578FF7000
|
unkown
|
page readonly
|
|
|
|
7FF5681B6000
|
unkown
|
page readonly
|
|
|
|
7FF5431CA000
|
unkown
|
page readonly
|
|
|
|
7FF5BA038000
|
unkown
|
page readonly
|
|
|
|
2C91000
|
unkown
|
page read and write
|
|
|
|
7FF5C030C000
|
unkown
|
page readonly
|
|
|
|
7D56F7F000
|
unkown
|
page read and write
|
|
|
|
2634583D000
|
unkown
|
page read and write
|
|
|
|
FD4ECF7000
|
unkown
|
page read and write
|
|
|
|
1C5DE0CC000
|
heap default
|
page read and write
|
|
|
|
7FF5C97EE000
|
unkown
|
page readonly
|
|
|
|
22EF6A3D000
|
unkown
|
page read and write
|
|
|
|
7FF5C0546000
|
unkown
|
page readonly
|
|
|
|
27E56000000
|
unkown
|
page readonly
|
|
|
|
25EB6D45000
|
unkown
|
page read and write
|
|
|
|
282E000
|
unkown
|
page read and write
|
|
|
|
FD4E8FE000
|
unkown
|
page read and write
|
|
|
|
2233000
|
unkown
|
page readonly
|
|
|
|
7FF524B34000
|
unkown
|
page readonly
|
|
|
|
259B5DE0000
|
unkown
|
page readonly
|
|
|
|
7FF5C95BE000
|
unkown
|
page readonly
|
|
|
|
1C481815000
|
unkown
|
page read and write
|
|
|
|
7FF5C0529000
|
unkown
|
page readonly
|
|
|
|
7FF5BFC70000
|
unkown
|
page readonly
|
|
|
|
7FF5BA01F000
|
unkown
|
page readonly
|
|
|
|
1A5FBD00000
|
heap default
|
page read and write
|
|
|
|
1C481013000
|
unkown
|
page read and write
|
|
|
|
7FF5458A5000
|
unkown
|
page readonly
|
|
|
|
263457B0000
|
heap default
|
page read and write
|
|
|
|
2F2B5E00000
|
unkown
|
page readonly
|
|
|
|
263457C0000
|
unkown
|
page readonly
|
|
|
|
7FF543187000
|
unkown
|
page readonly
|
|
|
|
1C481902000
|
unkown
|
page read and write
|
|
|
|
7FF5BA0B0000
|
unkown
|
page readonly
|
|
|
|
25C29A00000
|
unkown
|
page readonly
|
|
|
|
7FF545922000
|
unkown
|
page readonly
|
|
|
|
2F2B52D0000
|
unkown
|
page readonly
|
|
|
|
25EB6CB5000
|
unkown
|
page read and write
|
|
|
|
25EB9410000
|
unkown
|
page read and write
|
|
|
|
744817F000
|
unkown
|
page read and write
|
|
|
|
1C5DF950000
|
unkown
|
page readonly
|
|
|
|
2F2B5463000
|
unkown
|
page read and write
|
|
|
|
25EBA202000
|
unkown
|
page read and write
|
|
|
|
2F2B5500000
|
unkown
|
page read and write
|
|
|
|
25C296E0000
|
heap private
|
page read and write
|
|
|
|
225D4C29000
|
unkown
|
page read and write
|
|
|
|
25C2985A000
|
unkown
|
page read and write
|
|
|
|
7FF572B57000
|
unkown
|
page readonly
|
|
|
|
1C48103F000
|
unkown
|
page read and write
|
|
|
|
40D2A7E000
|
unkown
|
page read and write
|
|
|
|
25C2A200000
|
unkown
|
page readonly
|
|
|
|
1C481087000
|
unkown
|
page read and write
|
|
|
|
7FF524B91000
|
unkown
|
page readonly
|
|
|
|
25EB8D54000
|
unkown
|
page read and write
|
|
|
|
7FF5680AC000
|
unkown
|
page readonly
|
|
|
|
7FF4EEAE7000
|
unkown
|
page readonly
|
|
|
|
7FF5B9ECE000
|
unkown
|
page readonly
|
|
|
|
259B5710000
|
unkown
|
page read and write
|
|
|
|
E2A58FE000
|
unkown
|
page read and write
|
|
|
|
2C60000
|
heap default
|
page read and write
|
|
|
|
7D56E7D000
|
unkown
|
page read and write
|
|
|
|
74482FE000
|
unkown
|
page read and write
|
|
|
|
25EB6C54000
|
unkown
|
page read and write
|
|
|
|
25EBA182000
|
unkown
|
page read and write
|
|
|
|
554E8FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C95CA000
|
unkown
|
page readonly
|
|
|
|
25EB9010000
|
unkown
|
page read and write
|
|
|
|
225D4C02000
|
unkown
|
page read and write
|
|
|
|
27E55800000
|
unkown
|
page readonly
|
|
|
|
7FF5531D7000
|
unkown
|
page readonly
|
|
|
|
25C29813000
|
unkown
|
page read and write
|
|
|
|
7FF5679EE000
|
unkown
|
page readonly
|
|
|
|
7FF5246A0000
|
unkown
|
page readonly
|
|
|
|
7FF578FE6000
|
unkown
|
page readonly
|
|
|
|
7FF5248BA000
|
unkown
|
page readonly
|
|
|
|
7FF5532B6000
|
unkown
|
page readonly
|
|
|
|
7FF5532A1000
|
unkown
|
page readonly
|
|
|
|
7FF579061000
|
unkown
|
page readonly
|
|
|
|
7FF521EF5000
|
unkown
|
page readonly
|
|
|
|
22EF6A13000
|
unkown
|
page read and write
|
|
|
|
2F2B5429000
|
unkown
|
page read and write
|
|
|
|
25EBA142000
|
unkown
|
page read and write
|
|
|
|
7FF5C04B3000
|
unkown
|
page readonly
|
|
|
|
7FF545115000
|
unkown
|
page readonly
|
|
|
|
554E7FF000
|
unkown
|
page read and write
|
|
|
|
744807B000
|
unkown
|
page read and write
|
|
|
|
259B57E2000
|
unkown
|
page read and write
|
|
|
|
7FF543237000
|
unkown
|
page readonly
|
|
|
|
1C4810F8000
|
unkown
|
page read and write
|
|
|
|
7FF4FF670000
|
unkown
|
page readonly
|
|
|
|
1C4867A0000
|
unkown
|
page readonly
|
|
|
|
7FF5BA230000
|
unkown
|
page readonly
|
|
|
|
1A5FC000000
|
unkown
|
page write copy
|
|
|
|
7FF572824000
|
unkown
|
page readonly
|
|
|
|
1C481660000
|
unkown
|
page read and write
|
|
|
|
25EB6CA1000
|
unkown
|
page read and write
|
|
|
|
F7B03FD000
|
unkown
|
page read and write
|
|
|
|
1C486664000
|
unkown
|
page write copy
|
|
|
|
24B7B800000
|
unkown
|
page read and write
|
|
|
|
7FF578E73000
|
unkown
|
page readonly
|
|
|
|
27E556BA000
|
unkown
|
page read and write
|
|
|
|
1C486590000
|
unkown
|
page read and write
|
|
|
|
7FF4FF91C000
|
unkown
|
page readonly
|
|
|
|
22EF6A4B000
|
unkown
|
page read and write
|
|
|
|
7FF5C02A0000
|
unkown
|
page readonly
|
|
|
|
259B57F2000
|
unkown
|
page read and write
|
|
|
|
7FF5BFC65000
|
unkown
|
page readonly
|
|
|
|
7FF4EEB4E000
|
unkown
|
page readonly
|
|
|
|
7FF4EEABD000
|
unkown
|
page readonly
|
|
|
|
259B577C000
|
unkown
|
page read and write
|
|
|
|
7FF583BF8000
|
unkown
|
page readonly
|
|
|
|
236A000
|
unkown
|
page readonly
|
|
|
|
24B7D7B0000
|
unkown
|
page read and write
|
|
|
|
25EB6D25000
|
unkown
|
page read and write
|
|
|
|
1C5DE09B000
|
heap default
|
page read and write
|
|
|
|
7FF4FF84A000
|
unkown
|
page readonly
|
|
|
|
7FF5BA201000
|
unkown
|
page readonly
|
|
|
|
7FF524208000
|
unkown
|
page readonly
|
|
|
|
25C29E60000
|
unkown
|
page readonly
|
|
|
|
7FF521E9E000
|
unkown
|
page readonly
|
|
|
|
7FF54302F000
|
unkown
|
page readonly
|
|
|
|
7FF5C92F0000
|
unkown
|
page readonly
|
|
|
|
7FF5431A2000
|
unkown
|
page readonly
|
|
|
|
7FF5C960D000
|
unkown
|
page readonly
|
|
|
|
25EB8D17000
|
unkown
|
page read and write
|
|
|
|
25EB6C59000
|
unkown
|
page read and write
|
|
|
|
2327000
|
unkown
|
page readonly
|
|
|
|
7FF4FF87C000
|
unkown
|
page readonly
|
|
|
|
225D4C56000
|
unkown
|
page read and write
|
|
|
|
1C86ADB0000
|
unkown
|
page readonly
|
|
|
|
7FF5BFCE1000
|
unkown
|
page readonly
|
|
|
|
2049000
|
unkown
|
page readonly
|
|
|
|
7FF4FF81C000
|
unkown
|
page readonly
|
|
|
|
C5E897A000
|
unkown
|
page read and write
|
|
|
|
7FF4EE963000
|
unkown
|
page readonly
|
|
|
|
1A5FBE1F000
|
unkown
|
page read and write
|
|
|
|
2466C053000
|
unkown
|
page read and write
|
|
|
|
7FF5531E7000
|
unkown
|
page readonly
|
|
|
|
1A5FBF02000
|
unkown
|
page read and write
|
|
|
|
339967E000
|
unkown
|
page read and write
|
|
|
|
1AEEBE13000
|
unkown
|
page read and write
|
|
|
|
25C29740000
|
heap default
|
page read and write
|
|
|
|
25C29800000
|
unkown
|
page read and write
|
|
|
|
7FF5430B7000
|
unkown
|
page readonly
|
|
|
|
1C5DE320000
|
heap private
|
page read and write
|
|
|
|
25EB6CD2000
|
unkown
|
page read and write
|
|
|
|
2426000
|
unkown
|
page readonly
|
|
|
|
25C29864000
|
unkown
|
page read and write
|
|
|
|
7FF583C87000
|
unkown
|
page readonly
|
|
|
|
242B000
|
unkown
|
page readonly
|
|
|
|
25EB9110000
|
unkown
|
page read and write
|
|
|
|
7FF5C0556000
|
unkown
|
page readonly
|
|
|
|
23B3000
|
unkown
|
page readonly
|
|
|
|
7FF53B959000
|
unkown
|
page readonly
|
|
|
|
7FF578FEC000
|
unkown
|
page readonly
|
|
|
|
1C481802000
|
unkown
|
page read and write
|
|
|
|
744827A000
|
unkown
|
page read and write
|
|
|
|
7FF5431F9000
|
unkown
|
page readonly
|
|
|
|
25EB9210000
|
unkown
|
page read and write
|
|
|
|
7FF543247000
|
unkown
|
page readonly
|
|
|
|
259B6240000
|
unkown
|
page read and write
|
|
|
|
2466C029000
|
unkown
|
page read and write
|
|
|
|
2F2B53B0000
|
unkown
|
page readonly
|
|
|
|
7FF5BFF47000
|
unkown
|
page readonly
|
|
|
|
25EB6D02000
|
unkown
|
page read and write
|
|
|
|
2C84000
|
unkown
|
page read and write
|
|
|
|
1C5DE530000
|
unkown
|
page readonly
|
|
|
|
7FF521E8A000
|
unkown
|
page readonly
|
|
|
|
1FE63A4A000
|
unkown
|
page read and write
|
|
|
|
25C29856000
|
unkown
|
page read and write
|
|
|
|
1C4820A0000
|
unkown
|
page readonly
|
|
|
|
1AEEBE8C000
|
unkown
|
page read and write
|
|
|
|
1C5DFC30000
|
heap private
|
page read and write
|
|
|
|
259B57E2000
|
unkown
|
page read and write
|
|
|
|
1C4817D1000
|
unkown
|
page read and write
|
|
|
|
7FF542A3E000
|
unkown
|
page readonly
|
|
|
|
7FF5C0577000
|
unkown
|
page readonly
|
|
|
|
22EF6A42000
|
unkown
|
page read and write
|
|
|
|
7FF583CE9000
|
unkown
|
page readonly
|
|
|
|
7FF4FF947000
|
unkown
|
page readonly
|
|
|
|
7D56D7F000
|
unkown
|
page read and write
|
|
|
|
7FF52169F000
|
unkown
|
page readonly
|
|
|
|
7FF5BFF1C000
|
unkown
|
page readonly
|
|
|
|
25EB6ED0000
|
unkown
|
page readonly
|
|
|
|
7FF4FF90D000
|
unkown
|
page readonly
|
|
|
|
F7B057C000
|
unkown
|
page read and write
|
|
|
|
2FD387D000
|
unkown
|
page read and write
|
|
|
|
259B56D0000
|
unkown
|
page readonly
|
|
|
|
1C480F10000
|
unkown
|
page readonly
|
|
|
|
7FF545078000
|
unkown
|
page readonly
|
|
|
|
7FF568189000
|
unkown
|
page readonly
|
|
|
|
7FF545928000
|
unkown
|
page readonly
|
|
|
|
7FF4FF935000
|
unkown
|
page readonly
|
|
|
|
7FF5C04BC000
|
unkown
|
page readonly
|
|
|
|
1C5DF9A0000
|
heap private
|
page read and write
|
|
|
|
688E077000
|
unkown
|
page read and write
|
|
|
|
7FF524B37000
|
unkown
|
page readonly
|
|
|
|
259B57CB000
|
unkown
|
page read and write
|
|
|
|
27E55F32000
|
unkown
|
page read and write
|
|
|
|
F7B027B000
|
unkown
|
page read and write
|
|
|
|
7FF4EE967000
|
unkown
|
page readonly
|
|
|
|
2F2B5487000
|
unkown
|
page read and write
|
|
|
|
24B7B902000
|
unkown
|
page read and write
|
|
|
|
7FF53B510000
|
unkown
|
page readonly
|
|
|
|
25EBA242000
|
unkown
|
page read and write
|
|
|
|
7FF4EEACC000
|
unkown
|
page readonly
|
|
|
|
F7B017A000
|
unkown
|
page read and write
|
|
|
|
24B7D945000
|
unkown
|
page read and write
|
|
|
|
2BC0000
|
unkown
|
page read and write
|
|
|
|
1FE63A02000
|
unkown
|
page read and write
|
|
|
|
1C5DE050000
|
unkown
|
page readonly
|
|
|
|
7FF5C0295000
|
unkown
|
page readonly
|
|
|
|
7FF5728F8000
|
unkown
|
page readonly
|
|
|
|
1C4810AA000
|
unkown
|
page read and write
|
|
|
|
26345802000
|
unkown
|
page read and write
|
|
|
|
1FE65480000
|
unkown
|
page read and write
|
|
|
|
7FF4EE820000
|
unkown
|
page readonly
|
|
|
|
25EBA042000
|
unkown
|
page read and write
|
|
|
|
7FF54329E000
|
unkown
|
page readonly
|
|
|
|
25EB8E00000
|
unkown
|
page read and write
|
|
|
|
1C486670000
|
unkown
|
page read and write
|
|
|
|
7FF5BF60B000
|
unkown
|
page readonly
|
|
|
|
7FF4EEA9F000
|
unkown
|
page readonly
|
|
|
|
25EB8E11000
|
unkown
|
page read and write
|
|
|
|
7FF5BA1BA000
|
unkown
|
page readonly
|
|
|
|
22EF6A5C000
|
unkown
|
page read and write
|
|
|
|
2C91000
|
unkown
|
page read and write
|
|
|
|
7FF521E62000
|
unkown
|
page readonly
|
|
|
|
554E77F000
|
unkown
|
page read and write
|
|
|
|
1FE65602000
|
unkown
|
page read and write
|
|
|
|
22EF6950000
|
unkown
|
page readonly
|
|
|
|
7FF5BA1D5000
|
unkown
|
page readonly
|
|
|
|
7FF5BFFA9000
|
unkown
|
page readonly
|
|
|
|
7FF568047000
|
unkown
|
page readonly
|
|
|
|
7FF5C04E2000
|
unkown
|
page readonly
|
|
|
|
1C48689C000
|
unkown
|
page read and write
|
|
|
|
7FF5459B7000
|
unkown
|
page readonly
|
|
|
|
7FF583CE9000
|
unkown
|
page readonly
|
|
|
|
27E556C3000
|
unkown
|
page read and write
|
|
|
|
7FF578F9E000
|
unkown
|
page readonly
|
|
|
|
7FF5B9E6F000
|
unkown
|
page readonly
|
|
|
|
7FF55329D000
|
unkown
|
page readonly
|
|
|
|
1C4817F0000
|
unkown
|
page read and write
|
|
|
|
1C481102000
|
unkown
|
page read and write
|
|
|
|
7FF5C01DD000
|
unkown
|
page readonly
|
|
|
|
25EB8B10000
|
unkown
|
page readonly
|
|
|
|
1C482070000
|
unkown
|
page readonly
|
|
|
|
259B6480000
|
unkown
|
page read and write
|
|
|
|
7FF5BA216000
|
unkown
|
page readonly
|
|
|
|
7FF583CE1000
|
unkown
|
page readonly
|
|
|
|
1C4820B0000
|
unkown
|
page readonly
|
|
|
|
7FF572B4C000
|
unkown
|
page readonly
|
|
|
|
7FF5C033E000
|
unkown
|
page readonly
|
|
|
|
25C29829000
|
unkown
|
page read and write
|
|
|
|
7FF5C97F9000
|
unkown
|
page readonly
|
|
|
|
1FE63A13000
|
unkown
|
page read and write
|
|
|
|
1C481770000
|
unkown
|
page read and write
|
|
|
|
25EB9010000
|
unkown
|
page read and write
|
|
|
|
24B7D2D0000
|
unkown
|
page read and write
|
|
|
|
7FF5BFF26000
|
unkown
|
page readonly
|
|
|
|
1C4867C0000
|
unkown
|
page readonly
|
|
|
|
27E55600000
|
unkown
|
page read and write
|
|
|
|
833797C000
|
unkown
|
page read and write
|
|
|
|
1C86AE13000
|
unkown
|
page read and write
|
|
|
|
7FF579069000
|
unkown
|
page readonly
|
|
|
|
7FF5BA0BC000
|
unkown
|
page readonly
|
|
|
|
7FF553248000
|
unkown
|
page readonly
|
|
|
|
1C486460000
|
unkown
|
page read and write
|
|
|
|
1FE63B18000
|
unkown
|
page read and write
|
|
|
|
25EB8D84000
|
unkown
|
page read and write
|
|
|
|
7FF552E71000
|
unkown
|
page readonly
|
|
|
|
237B000
|
unkown
|
page readonly
|
|
|
|
1AEEBF08000
|
unkown
|
page read and write
|
|
|
|
27E55D80000
|
unkown
|
page write copy
|
|
|
|
2397000
|
unkown
|
page readonly
|
|
|
|
25EB6C6A000
|
unkown
|
page read and write
|
|
|
|
1AEEBF13000
|
unkown
|
page read and write
|
|
|
|
7FF5C951A000
|
unkown
|
page readonly
|
|
|
|
7FF567FD3000
|
unkown
|
page readonly
|
|
|
|
24B7B872000
|
unkown
|
page read and write
|
|
|
|
7FF4FF8CA000
|
unkown
|
page readonly
|
|
|
|
7FF4EE884000
|
unkown
|
page readonly
|
|
|
|
7FF5BFCA5000
|
unkown
|
page readonly
|
|
|
|
1AEEBD70000
|
unkown
|
page read and write
|
|
|
|
7FF583C66000
|
unkown
|
page readonly
|
|
|
|
7D5767F000
|
unkown
|
page read and write
|
|
|
|
25C29770000
|
unkown
|
page read and write
|
|
|
|
7FF5432A1000
|
unkown
|
page readonly
|
|
|
|
259B5550000
|
unkown
|
page read and write
|
|
|
|
7FF55327F000
|
unkown
|
page readonly
|
|
|
|
7FF545955000
|
unkown
|
page readonly
|
|
|
|
7FF521EE6000
|
unkown
|
page readonly
|
|
|
|
7FF545080000
|
unkown
|
page readonly
|
|
|
|
7FF5C9603000
|
unkown
|
page readonly
|
|
|
|
339914B000
|
unkown
|
page read and write
|
|
|
|
7FF5C92EA000
|
unkown
|
page readonly
|
|
|
|
33991CE000
|
unkown
|
page read and write
|
|
|
|
7FF4FF6E8000
|
unkown
|
page readonly
|
|
|
|
7FF5680A5000
|
unkown
|
page readonly
|
|
|
|
7FF53B8A9000
|
unkown
|
page readonly
|
|
|
|
554E07B000
|
unkown
|
page read and write
|
|
|
|
22EF6960000
|
unkown
|
page read and write
|
|
|
|
7FF542FE8000
|
unkown
|
page readonly
|
|
|
|
25C29802000
|
unkown
|
page read and write
|
|
|
|
225D4A80000
|
unkown
|
page readonly
|
|
|
|
7FF5BA192000
|
unkown
|
page readonly
|
|
|
|
1AEEBE4A000
|
unkown
|
page read and write
|
|
|
|
24B7B7F0000
|
unkown
|
page readonly
|
|
|
|
339947E000
|
unkown
|
page read and write
|
|
|
|
7FF53B959000
|
unkown
|
page readonly
|
|
|
|
7FF4FF7B3000
|
unkown
|
page readonly
|
|
|
|
22EF6A40000
|
unkown
|
page read and write
|
|
|
|
22EF6A63000
|
unkown
|
page read and write
|
|
|
|
25EB8B20000
|
unkown
|
page read and write
|
|
|
|
7FF578FA5000
|
unkown
|
page readonly
|
|
|
|
1C481E70000
|
unkown
|
page read and write
|
|
|
|
1FE63A59000
|
unkown
|
page read and write
|
|
|
|
7FF543244000
|
unkown
|
page readonly
|
|
|
|
1FE63B13000
|
unkown
|
page read and write
|
|
|
|
7FF54317C000
|
unkown
|
page readonly
|
|
|
|
25EB8E16000
|
unkown
|
page read and write
|
|
|
|
7D5757F000
|
unkown
|
page read and write
|
|
|
|
7FF579007000
|
unkown
|
page readonly
|
|
|
|
7FF54598C000
|
unkown
|
page readonly
|
|
|
|
1FE64060000
|
unkown
|
page readonly
|
|
|
|
24B7D7A0000
|
unkown
|
page readonly
|
|
|
|
7FF4FF916000
|
unkown
|
page readonly
|
|
|
|
7FF4FF944000
|
unkown
|
page readonly
|
|
|
|
1AEEBE6F000
|
unkown
|
page read and write
|
|
|
|
259B55B0000
|
unkown
|
page readonly
|
|
|
|
7FF4EEAC6000
|
unkown
|
page readonly
|
|
|
|
25EB8DA7000
|
unkown
|
page read and write
|
|
|
|
225D4A10000
|
heap private
|
page read and write
|
|
|
|
7FF4FF887000
|
unkown
|
page readonly
|
|
|
|
FD4EDFF000
|
unkown
|
page read and write
|
|
|
|
7FF521ECD000
|
unkown
|
page readonly
|
|
|
|
7FF572A9A000
|
unkown
|
page readonly
|
|
|
|
688DCFE000
|
unkown
|
page read and write
|
|
|
|
2C8D000
|
unkown
|
page read and write
|
|
|
|
2CA2000
|
unkown
|
page read and write
|
|
|
|
7FF4FF857000
|
unkown
|
page readonly
|
|
|
|
25EB6C00000
|
unkown
|
page read and write
|
|
|
|
25EBA400000
|
unkown
|
page readonly
|
|
|
|
7FF5B9904000
|
unkown
|
page readonly
|
|
|
|
1AEEBE50000
|
unkown
|
page read and write
|
|
|
|
1C482050000
|
unkown
|
page readonly
|
|
|
|
1C48683E000
|
unkown
|
page read and write
|
|
|
|
7FF572B2D000
|
unkown
|
page readonly
|
|
|
|
7FF545A19000
|
unkown
|
page readonly
|
|
|
|
1C86AE2A000
|
unkown
|
page read and write
|
|
|
|
236D000
|
unkown
|
page readonly
|
|
|
|
7FF54506E000
|
unkown
|
page readonly
|
|
|
|
259B6250000
|
unkown
|
page read and write
|
|
|
|
833757E000
|
unkown
|
page read and write
|
|
|
|
7FF4FF665000
|
unkown
|
page readonly
|
|
|
|
7FF5BFC57000
|
unkown
|
page readonly
|
|
|
|
E2A57FD000
|
unkown
|
page read and write
|
|
|
|
7FF4EE815000
|
unkown
|
page readonly
|
|
|
|
25EB8DFC000
|
unkown
|
page read and write
|
|
|
|
7FF55894C000
|
unkown
|
page readonly
|
|
|
|
7D5707F000
|
unkown
|
page read and write
|
|
|
|
E2A53FF000
|
unkown
|
page read and write
|
|
|
|
1C86AE27000
|
unkown
|
page read and write
|
|
|
|
7FF53B8CC000
|
unkown
|
page readonly
|
|
|
|
26345900000
|
unkown
|
page read and write
|
|
|
|
26346200000
|
unkown
|
page readonly
|
|
|
|
7FF5C95E8000
|
unkown
|
page readonly
|
|
|
|
7FF567970000
|
unkown
|
page readonly
|
|
|
|
C5E856B000
|
unkown
|
page read and write
|
|
|
|
1C86ACD0000
|
unkown
|
page readonly
|
|
|
|
1C486590000
|
unkown
|
page read and write
|
|
|
|
1C5DDF40000
|
unkown
|
page readonly
|
|
|
|
7DFD516A0000
|
unkown
|
page readonly
|
|
|
|
7FF5B9DFE000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6DC000
|
unkown
|
page readonly
|
|
|
|
7FF5BA290000
|
unkown
|
page readonly
|
|
|
|
1C486580000
|
unkown
|
page read and write
|
|
|
|
7FF542FCB000
|
unkown
|
page readonly
|
|
|
|
7FF553275000
|
unkown
|
page readonly
|
|
|
|
24B7B7E0000
|
heap default
|
page read and write
|
|
|
|
1C486450000
|
unkown
|
page read and write
|
|
|
|
24B7D902000
|
unkown
|
page read and write
|
|
|
|
259B57E0000
|
unkown
|
page read and write
|
|
|
|
27E558D0000
|
unkown
|
page readonly
|
|
|
|
1C486700000
|
unkown
|
page readonly
|
|
|
|
24B7B813000
|
unkown
|
page read and write
|
|
|
|
7FF4FF4B3000
|
unkown
|
page readonly
|
|
|
|
2D60000
|
unkown
|
page readonly
|
|
|
|
7FF5457DA000
|
unkown
|
page readonly
|
|
|
|
7FF552F6E000
|
unkown
|
page readonly
|
|
|
|
1A5FBE13000
|
unkown
|
page read and write
|
|
|
|
7FF5457B8000
|
unkown
|
page readonly
|
|
|
|
7FF5432A9000
|
unkown
|
page readonly
|
|
|
|
7FF543198000
|
unkown
|
page readonly
|
|
|
|
7FF56814A000
|
unkown
|
page readonly
|
|
|
|
7FF542DB3000
|
unkown
|
page readonly
|
|
|
|
25C29913000
|
unkown
|
page read and write
|
|
|
|
688E17F000
|
unkown
|
page read and write
|
|
|
|
24B7BB20000
|
unkown
|
page readonly
|
|
|
|
7FF5C957F000
|
unkown
|
page readonly
|
|
|
|
7FF5532AC000
|
unkown
|
page readonly
|
|
|
|
7FF53B868000
|
unkown
|
page readonly
|
|
|
|
1A5FBE02000
|
unkown
|
page read and write
|
|
|
|
7FF4FF4DD000
|
unkown
|
page readonly
|
|
|
|
1C481073000
|
unkown
|
page read and write
|
|
|
|
7FF5BFD89000
|
unkown
|
page readonly
|
|
|
|
259B57E3000
|
unkown
|
page read and write
|
|
|
|
83373FC000
|
unkown
|
page read and write
|
|
|
|
1FE63A5A000
|
unkown
|
page read and write
|
|
|
|
1C482080000
|
unkown
|
page readonly
|
|
|
|
7FF5729D7000
|
unkown
|
page readonly
|
|
|
|
1A5FDC50000
|
unkown
|
page read and write
|
|
|
|
2FD39FC000
|
unkown
|
page read and write
|
|
|
|
7FF52468A000
|
unkown
|
page readonly
|
|
|
|
1C486440000
|
unkown
|
page read and write
|
|
|
|
27E55D70000
|
unkown
|
page readonly
|
|
|
|
2FD397E000
|
unkown
|
page read and write
|
|
|
|
1C48108E000
|
unkown
|
page read and write
|
|
|
|
7FF4EEAF0000
|
unkown
|
page readonly
|
|
|
|
7FF545780000
|
unkown
|
page readonly
|
|
|
|
1FE63A2A000
|
unkown
|
page read and write
|
|
|
|
259B5784000
|
unkown
|
page read and write
|
|
|
|
7FF552E75000
|
unkown
|
page readonly
|
|
|
|
259B5720000
|
unkown
|
page read and write
|
|
|
|
23DA000
|
unkown
|
page readonly
|
|
|
|
2434000
|
unkown
|
page readonly
|
|
|
|
1AEEC460000
|
unkown
|
page readonly
|
|
|
|
1FE63A49000
|
unkown
|
page read and write
|
|
|
|
7FF583C2F000
|
unkown
|
page readonly
|
|
|
|
7FF5BA1DF000
|
unkown
|
page readonly
|
|
|
|
1C86AE00000
|
unkown
|
page read and write
|
|
|
|
7FF521EB9000
|
unkown
|
page readonly
|
|
|
|
7FF5C054C000
|
unkown
|
page readonly
|
|
|
|
7FF524ABA000
|
unkown
|
page readonly
|
|
|
|
7FF572A9C000
|
unkown
|
page readonly
|
|
|
|
2F2B5260000
|
heap private
|
page read and write
|
|
|
|
4500000
|
unkown
|
page readonly
|
|
|
|
7FF54579F000
|
unkown
|
page readonly
|
|
|
|
7FF583C75000
|
unkown
|
page readonly
|
|
|
|
7FF572BC9000
|
unkown
|
page readonly
|
|
|
|
1C486410000
|
unkown
|
page readonly
|
|
|
|
7FF53B6DF000
|
unkown
|
page readonly
|
|
|
|
225D4E00000
|
unkown
|
page readonly
|
|
|
|
259B57E2000
|
unkown
|
page read and write
|
|
|
|
7FF4FF898000
|
unkown
|
page readonly
|
|
|
|
7FF568239000
|
unkown
|
page readonly
|
|
|
|
25EB8DF9000
|
unkown
|
page read and write
|
|
|
|
7FF5681A6000
|
unkown
|
page readonly
|
|
|
|
7FF524B30000
|
unkown
|
page readonly
|
|
|
|
7FF545986000
|
unkown
|
page readonly
|
|
|
|
C5E887E000
|
unkown
|
page read and write
|
|
|
|
7FF583C84000
|
unkown
|
page readonly
|
|
|
|
24B7D3D0000
|
unkown
|
page readonly
|
|
|
|
7FF578CC4000
|
unkown
|
page readonly
|
|
|
|
2EF8FFA000
|
unkown
|
page read and write
|
|
|
|
7FF5C044C000
|
unkown
|
page readonly
|
|
|
|
7FF578E58000
|
unkown
|
page readonly
|
|
|
|
7FF4EE888000
|
unkown
|
page readonly
|
|
|
|
1C480EA0000
|
heap private
|
page read and write
|
|
|
|
7FF521E78000
|
unkown
|
page readonly
|
|
|
|
1C86ADA0000
|
unkown
|
page readonly
|
|
|
|
7FF5BFEB6000
|
unkown
|
page readonly
|
|
|
|
7FF55332E000
|
unkown
|
page readonly
|
|
|
|
7FF5C0570000
|
unkown
|
page readonly
|
|
|
|
C5E8C7F000
|
unkown
|
page read and write
|
|
|
|
2F2B5C02000
|
unkown
|
page read and write
|
|
|
|
7FF5BFAE3000
|
unkown
|
page readonly
|
|
|
|
24B7D987000
|
unkown
|
page read and write
|
|
|
|
27E56340000
|
unkown
|
page readonly
|
|
|
|
40D2E7D000
|
unkown
|
page read and write
|
|
|
|
7FF5531EA000
|
unkown
|
page readonly
|
|
|
|
7FF5C05D0000
|
unkown
|
page readonly
|
|
|
|
1FE63A3D000
|
unkown
|
page read and write
|
|
|
|
7FF578E77000
|
unkown
|
page readonly
|
|
|
|
25EB9000000
|
unkown
|
page read and write
|
|
|
|
22EF6A49000
|
unkown
|
page read and write
|
|
|
|
7FF5C9735000
|
unkown
|
page readonly
|
|
|
|
7FF5C9776000
|
unkown
|
page readonly
|
|
|
|
1C86AE02000
|
unkown
|
page read and write
|
|
|
|
7FF5C0115000
|
unkown
|
page readonly
|
|
|
|
23D5000
|
unkown
|
page readonly
|
|
|
|
259B5783000
|
unkown
|
page read and write
|
|
|
|
2384000
|
unkown
|
page readonly
|
|
|
|
2B50000
|
unkown
|
page readonly
|
|
|
|
7FF543161000
|
unkown
|
page readonly
|
|
|
|
7FF5BFF40000
|
unkown
|
page readonly
|
|
|
|
7FF5C0113000
|
unkown
|
page readonly
|
|
|
|
27E55580000
|
heap private
|
page read and write
|
|
|
|
7FF5BA10C000
|
unkown
|
page readonly
|
|
|
|
7D5727F000
|
unkown
|
page read and write
|
|
|
|
7FF5BFF16000
|
unkown
|
page readonly
|
|
|
|
7FF543157000
|
unkown
|
page readonly
|
|
|
|
2F2B5413000
|
unkown
|
page read and write
|
|
|
|
7FF4FF841000
|
unkown
|
page readonly
|
|
|
|
26345A00000
|
unkown
|
page readonly
|
|
|
|
7FF5247CB000
|
unkown
|
page readonly
|
|
|
|
7FF572BC9000
|
unkown
|
page readonly
|
|
|
|
25EB8E5F000
|
unkown
|
page read and write
|
|
|
|
554E5FF000
|
unkown
|
page read and write
|
|
|
|
7FF5BA1FD000
|
unkown
|
page readonly
|
|
|
|
1C86AF02000
|
unkown
|
page read and write
|
|
|
|
7FF572ADA000
|
unkown
|
page readonly
|
|
|
|
7FF583CDE000
|
unkown
|
page readonly
|
|
|
|
7FF583C80000
|
unkown
|
page readonly
|
|
|
|
2466C102000
|
unkown
|
page read and write
|
|
|
|
1AEEBF00000
|
unkown
|
page read and write
|
|
|
|
7FF521F12000
|
unkown
|
page readonly
|
|
|
|
7FF4EEB59000
|
unkown
|
page readonly
|
|
|
|
7FF4FF85A000
|
unkown
|
page readonly
|
|
|
|
7FF572AEA000
|
unkown
|
page readonly
|
|
|
|
1FE639D0000
|
unkown
|
page readonly
|
|
|
|
25EBA000000
|
unkown
|
page read and write
|
|
|
|
7FF552F08000
|
unkown
|
page readonly
|
|
|
|
7FF578D25000
|
unkown
|
page readonly
|
|
|
|
7FF578F17000
|
unkown
|
page readonly
|
|
|
|
27E55627000
|
unkown
|
page read and write
|
|
|
|
1C4866C0000
|
unkown
|
page read and write
|
|
|
|
40D25DB000
|
unkown
|
page read and write
|
|
|
|
7FF5532D7000
|
unkown
|
page readonly
|
|
|
|
7FF5C97F9000
|
unkown
|
page readonly
|
|
|
|
27E55F00000
|
unkown
|
page read and write
|
|
|
|
22EF6A76000
|
unkown
|
page read and write
|
|
|
|
1C486654000
|
unkown
|
page readonly
|
|
|
|
24B7D750000
|
heap private
|
page read and write
|
|
|
|
27E55D40000
|
unkown
|
page read and write
|
|
|
|
7FF4EEA2A000
|
unkown
|
page readonly
|
|
|
|
D3FD37B000
|
unkown
|
page read and write
|
|
|
|
688DC7E000
|
unkown
|
page read and write
|
|
|
|
1A5FBE00000
|
unkown
|
page read and write
|
|
|
|
7FF5BA190000
|
unkown
|
page readonly
|
|
|
|
1C5DE330000
|
unkown
|
page readonly
|
|
|
|
DFDA87F000
|
unkown
|
page read and write
|
|
|
|
7FF54597D000
|
unkown
|
page readonly
|
|
|
|
24B7D7B0000
|
unkown
|
page read and write
|
|
|
|
7FF5450FB000
|
unkown
|
page readonly
|
|
|
|
7FF5431EF000
|
unkown
|
page readonly
|
|
|
|
25EB8F83000
|
unkown
|
page read and write
|
|
|
|
259B6500000
|
unkown
|
page read and write
|
|
|
|
7FF568148000
|
unkown
|
page readonly
|
|
|
|
7FF4FF8EF000
|
unkown
|
page readonly
|
|
|
|
225D4C13000
|
unkown
|
page read and write
|
|
|
|
259B5EB0000
|
unkown
|
page readonly
|
|
|
|
259B5802000
|
unkown
|
page read and write
|
|
|
|
25EB8F83000
|
unkown
|
page read and write
|
|
|
|
7FF4FF65E000
|
unkown
|
page readonly
|
|
|
|
40D2AFE000
|
unkown
|
page read and write
|
|
|
|
27B0000
|
unkown
|
page readonly
|
|
|
|
259B577D000
|
unkown
|
page read and write
|
|
|
|
22EF6A7D000
|
unkown
|
page read and write
|
|
|
|
25EB8B20000
|
unkown
|
page readonly
|
|
|
|
7D56BFB000
|
unkown
|
page read and write
|
|
|
|
7FF572AFE000
|
unkown
|
page readonly
|
|
|
|
1A5FD7F0000
|
unkown
|
page read and write
|
|
|
|
24B7D900000
|
unkown
|
page read and write
|
|
|
|
7FF578D98000
|
unkown
|
page readonly
|
|
|
|
7FF54311C000
|
unkown
|
page readonly
|
|
|
|
554E87F000
|
unkown
|
page read and write
|
|
|
|
7FF4FF940000
|
unkown
|
page readonly
|
|
|
|
7FF5BFE35000
|
unkown
|
page readonly
|
|
|
|
25EB6CFA000
|
unkown
|
page read and write
|
|
|
|
2C6A000
|
heap default
|
page read and write
|
|
|
|
7FF5532BC000
|
unkown
|
page readonly
|
|
|
|
225D4BA0000
|
unkown
|
page readonly
|
|
|
|
7FF5C973F000
|
unkown
|
page readonly
|
|
|
|
7FF5C972E000
|
unkown
|
page readonly
|
|
|
|
27E55713000
|
unkown
|
page read and write
|
|
|
|
7FF5681C5000
|
unkown
|
page readonly
|
|
|
|
22EF6A61000
|
unkown
|
page read and write
|
|
|
|
25EB6C9F000
|
unkown
|
page read and write
|
|
|
|
D3FD57F000
|
unkown
|
page read and write
|
|
|
|
7FF5C028E000
|
unkown
|
page readonly
|
|
|
|
25EBA082000
|
unkown
|
page read and write
|
|
|
|
2CA8000
|
unkown
|
page read and write
|
|
|
|
259B5802000
|
unkown
|
page read and write
|
|
|
|
24B7D7E0000
|
unkown
|
page readonly
|
|
|
|
7FF5C96F0000
|
unkown
|
page readonly
|
|
|
|
8A79179000
|
unkown
|
page read and write
|
|
|
|
25EB9310000
|
unkown
|
page read and write
|
|
|
|
7FF5BFEDE000
|
unkown
|
page readonly
|
|
|
|
1C86B000000
|
unkown
|
page readonly
|
|
|
|
C5E85EE000
|
unkown
|
page read and write
|
|
|
|
2CB0000
|
unkown
|
page read and write
|
|
|
|
FD4EBFF000
|
unkown
|
page read and write
|
|
|
|
7FF5C0445000
|
unkown
|
page readonly
|
|
|
|
1C481056000
|
unkown
|
page read and write
|
|
|
|
7FF53B88E000
|
unkown
|
page readonly
|
|
|
|
1C4866C0000
|
unkown
|
page read and write
|
|
|
|
F7B00FA000
|
unkown
|
page read and write
|
|
|
|
22EF6A44000
|
unkown
|
page read and write
|
|
|
|
26345750000
|
heap private
|
page read and write
|
|
|
|
7FF524690000
|
unkown
|
page readonly
|
|
|
|
259B59C0000
|
heap private
|
page read and write
|
|
|
|
7FF524A90000
|
unkown
|
page readonly
|
|
|
|
20BD000
|
unkown
|
page readonly
|
|
|
|
27E556CB000
|
unkown
|
page read and write
|
|
|
|
1C86ADF0000
|
unkown
|
page read and write
|
|
|
|
7FF521E60000
|
unkown
|
page readonly
|
|
|
|
7FF545912000
|
unkown
|
page readonly
|
|
|
|
7FF545A11000
|
unkown
|
page readonly
|
|
|
|
1C86ADF0000
|
unkown
|
page read and write
|
|
|
|
2466DA70000
|
unkown
|
page read and write
|
|
|
|
259B56A0000
|
unkown
|
page read and write
|
|
|
|
7FF4FF8B8000
|
unkown
|
page readonly
|
|
|
|
7FF572BBE000
|
unkown
|
page readonly
|
|
|
|
7FF5459B4000
|
unkown
|
page readonly
|
|
|
|
1FE63A5A000
|
unkown
|
page read and write
|
|
|
|
1FE63C00000
|
unkown
|
page readonly
|
|
|
|
7FF54595F000
|
unkown
|
page readonly
|
|
|
|
7FF543226000
|
unkown
|
page readonly
|
|
|
|
7FF521E7A000
|
unkown
|
page readonly
|
|
|
|
2EF8E7F000
|
unkown
|
page read and write
|
|
|
|
F7B0AFC000
|
unkown
|
page read and write
|
|
|
|
7FF5BFB78000
|
unkown
|
page readonly
|
|
|
|
1C5DF970000
|
unkown
|
page readonly
|
|
|
|
7FF52420E000
|
unkown
|
page readonly
|
|
|
|
24B7B840000
|
unkown
|
page read and write
|
|
|
|
C5E89FF000
|
unkown
|
page read and write
|
|
|
|
7FF521EDC000
|
unkown
|
page readonly
|
|
|
|
1C486888000
|
unkown
|
page read and write
|
|
|
|
7FF54594E000
|
unkown
|
page readonly
|
|
|
|
7FF5431A0000
|
unkown
|
page readonly
|
|
|
|
1AEEBD60000
|
unkown
|
page readonly
|
|
|
|
1C86AC60000
|
heap private
|
page read and write
|
|
|
|
7FF5BFEEF000
|
unkown
|
page readonly
|
|
|
|
7FF5BA117000
|
unkown
|
page readonly
|
|
|
|
25EB8DCC000
|
unkown
|
page read and write
|
|
|
|
24B7B8DA000
|
unkown
|
page read and write
|
|
|
|
7FF578D94000
|
unkown
|
page readonly
|
|
|
|
25C29790000
|
unkown
|
page readonly
|
|
|
|
7FF53B513000
|
unkown
|
page readonly
|
|
|
|
1C486657000
|
unkown
|
page readonly
|
|
|
|
271B000
|
stack
|
page read and write
|
|
|
|
25EB8D00000
|
unkown
|
page read and write
|
|
|
|
7FF553339000
|
unkown
|
page readonly
|
|
|
|
1AEEBF02000
|
unkown
|
page read and write
|
|
|
|
7FF5C01EF000
|
unkown
|
page readonly
|
|
|
|
7FF545551000
|
unkown
|
page readonly
|
|
|
|
25EB8AB0000
|
unkown
|
page readonly
|
|
|
|
1FE654F0000
|
unkown
|
page read and write
|
|
|
|
7FF5C971A000
|
unkown
|
page readonly
|
|
|
|
7FF5BFFA9000
|
unkown
|
page readonly
|
|
|
|
40D2BFE000
|
unkown
|
page read and write
|
|
|
|
1AEEBE00000
|
unkown
|
page read and write
|
|
|
|
7FF578F3C000
|
unkown
|
page readonly
|
|
|
|
24B7B854000
|
unkown
|
page read and write
|
|
|
|
2466C200000
|
unkown
|
page readonly
|
|
|
|
8A792F9000
|
unkown
|
page read and write
|
|
|
|
7FF5BFEB8000
|
unkown
|
page readonly
|
|
|
|
554EDFE000
|
unkown
|
page read and write
|
|
|
|
554E6FB000
|
unkown
|
page read and write
|
|
|
|
2BFA000
|
heap private
|
page read and write
|
|
|
|
554E4FA000
|
unkown
|
page read and write
|
|
|
|
7FF524B16000
|
unkown
|
page readonly
|
|
|
|
1C5DF9B0000
|
unkown
|
page readonly
|
|
|
|
8337A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5BFD2F000
|
unkown
|
page readonly
|
|
|
|
7FF5530A0000
|
unkown
|
page readonly
|
|
|
|
7FF553289000
|
unkown
|
page readonly
|
|
|
|
7FF4EE8AA000
|
unkown
|
page readonly
|
|
|
|
1A5FBF13000
|
unkown
|
page read and write
|
|
|
|
1FE63A8B000
|
unkown
|
page read and write
|
|
|
|
27E55688000
|
unkown
|
page read and write
|
|
|
|
7FF5BFF2C000
|
unkown
|
page readonly
|
|
|
|
7FF4FF657000
|
unkown
|
page readonly
|
|
|
|
1C86ADC0000
|
unkown
|
page read and write
|
|
|
|
7FF5B9EE6000
|
unkown
|
page readonly
|
|
|
|
26345902000
|
unkown
|
page read and write
|
|
|
|
25EB8D7E000
|
unkown
|
page read and write
|
|
|
|
833767E000
|
unkown
|
page read and write
|
|
|
|
7FF4EEA95000
|
unkown
|
page readonly
|
|
|
|
24B7B8F7000
|
unkown
|
page read and write
|
|
|
|
1C86AE5C000
|
unkown
|
page read and write
|
|
|
|
22EF6A46000
|
unkown
|
page read and write
|
|
|
|
7FF54322C000
|
unkown
|
page readonly
|
|
|
|
7FF55321C000
|
unkown
|
page readonly
|
|
|
|
7FF5C0565000
|
unkown
|
page readonly
|
|
|
|
25EB8D1D000
|
unkown
|
page read and write
|
|
|
|
25EBA142000
|
unkown
|
page read and write
|
|
|
|
25EB6D36000
|
unkown
|
page read and write
|
|
|
|
7FF553339000
|
unkown
|
page readonly
|
|
|
|
7FF5C0471000
|
unkown
|
page readonly
|
|
|
|
25EB8670000
|
unkown
|
page read and write
|
|
|
|
2EF8EFE000
|
unkown
|
page read and write
|
|
|
|
2C81000
|
unkown
|
page read and write
|
|
|
|
7D5717D000
|
unkown
|
page read and write
|
|
|
|
26345857000
|
unkown
|
page read and write
|
|
|
|
7FF55326E000
|
unkown
|
page readonly
|
|
|
|
7FF5BA1A6000
|
unkown
|
page readonly
|
|
|
|
40D2F7D000
|
unkown
|
page read and write
|
|
|
|
1A5FD8F0000
|
unkown
|
page readonly
|
|
|
|
25EB6C9F000
|
unkown
|
page read and write
|
|
|
|
7FF5C038C000
|
unkown
|
page readonly
|
|
|
|
7FF4FF70E000
|
unkown
|
page readonly
|
|
|
|
7FF4FF883000
|
unkown
|
page readonly
|
|
|
|
27E5566B000
|
unkown
|
page read and write
|
|
|
|
7FF5C0515000
|
unkown
|
page readonly
|
|
|
|
25EB6C82000
|
unkown
|
page read and write
|
|
|
|
2F2B5502000
|
unkown
|
page read and write
|
|
|
|
1C481900000
|
unkown
|
page read and write
|
|
|
|
24B7B8C2000
|
unkown
|
page read and write
|
|
|
|
1A5FBD10000
|
unkown
|
page readonly
|
|
|
|
D3FCDAB000
|
unkown
|
page read and write
|
|
|
|
7FF54320D000
|
unkown
|
page readonly
|
|
|
|
7FF4FF617000
|
unkown
|
page readonly
|
|
|
|
1C48656E000
|
unkown
|
page read and write
|
|
|
|
225D4C3F000
|
unkown
|
page read and write
|
|
|
|
7FF5C0574000
|
unkown
|
page readonly
|
|
|
|
1C481E60000
|
unkown
|
page read and write
|
|
|
|
259B5819000
|
unkown
|
page read and write
|
|
|
|
1C481076000
|
unkown
|
page read and write
|
|
|
|
27E55C60000
|
unkown
|
page readonly
|
|
|
|
1A5FBE34000
|
unkown
|
page read and write
|
|
|
|
7FF5C8ED7000
|
unkown
|
page readonly
|
|
|
|
7FF524B99000
|
unkown
|
page readonly
|
|
|
|
F7B02FA000
|
unkown
|
page read and write
|
|
|
|
F7AFE7E000
|
unkown
|
page read and write
|
|
|
|
7FF524AA8000
|
unkown
|
page readonly
|
|
|
|
1C481913000
|
unkown
|
page read and write
|
|
|
|
7FF553246000
|
unkown
|
page readonly
|
|
|
|
7FF57291A000
|
unkown
|
page readonly
|
|
|
|
7FF5C055C000
|
unkown
|
page readonly
|
|
|
|
7FF53B862000
|
unkown
|
page readonly
|
|
|
|
25EB6C59000
|
unkown
|
page read and write
|
|
|
|
7FF4EEA7A000
|
unkown
|
page readonly
|
|
|
|
7FF54599C000
|
unkown
|
page readonly
|
|
|
|
E2A56FB000
|
unkown
|
page read and write
|
|
|
|
339987E000
|
unkown
|
page read and write
|
|
|
|
7FF545827000
|
unkown
|
page readonly
|
|
|
|
2362000
|
unkown
|
page readonly
|
|
|
|
1C481590000
|
unkown
|
page readonly
|
|
|
|
1C482090000
|
unkown
|
page readonly
|
|
|
|
2C3F000
|
stack
|
page read and write
|
|
|
|
2448000
|
unkown
|
page readonly
|
|
|
|
7FF5249D1000
|
unkown
|
page readonly
|
|
|
|
7FF572B36000
|
unkown
|
page readonly
|
|
|
|
7FF4FF8B2000
|
unkown
|
page readonly
|
|
|
|
7FF543211000
|
unkown
|
page readonly
|
|
|
|
E2A54FF000
|
unkown
|
page read and write
|
|
|
|
7FF5BFEA0000
|
unkown
|
page readonly
|
|
|
|
24B7B8F3000
|
unkown
|
page read and write
|
|
|
|
7FF578F76000
|
unkown
|
page readonly
|
|
|
|
24B7D740000
|
unkown
|
page readonly
|
|
|
|
1FE65570000
|
unkown
|
page read and write
|
|
|
|
1C486584000
|
unkown
|
page read and write
|
|
|
|
7FF53B951000
|
unkown
|
page readonly
|
|
|
|
27FE000
|
unkown
|
page read and write
|
|
|
|
7FF543183000
|
unkown
|
page readonly
|
|
|
|
F7AFB5B000
|
unkown
|
page read and write
|
|
|
|
1AEEBE55000
|
unkown
|
page read and write
|
|
|
|
DFDA6FF000
|
unkown
|
page read and write
|
|
|
|
23A0000
|
unkown
|
page readonly
|
|
|
|
7FF583C1E000
|
unkown
|
page readonly
|
|
|
|
7FF5BFD0E000
|
unkown
|
page readonly
|
|
|
|
2780000
|
unkown
|
page read and write
|
|
|
|
24B7D947000
|
unkown
|
page read and write
|
|
|
|
2EF907F000
|
unkown
|
page read and write
|
|
|
|
7FF5BFE98000
|
unkown
|
page readonly
|
|
|
|
1C48682A000
|
unkown
|
page read and write
|
|
|
|
1C5DE030000
|
unkown
|
page read and write
|
|
|
|
22EF6A29000
|
unkown
|
page read and write
|
|
|
|
7FF5C050E000
|
unkown
|
page readonly
|
|
|
|
7D5679B000
|
unkown
|
page read and write
|
|
|
|
7FF5431E5000
|
unkown
|
page readonly
|
|
|
|
7FF521BEC000
|
unkown
|
page readonly
|
|
|
|
7FF5729B8000
|
unkown
|
page readonly
|
|
|
|
27E55D30000
|
unkown
|
page readonly
|
|
|
|
7FF5BFECA000
|
unkown
|
page readonly
|
|
|
|
1C5DE060000
|
unkown
|
page readonly
|
|
|
|
2BF0000
|
heap private
|
page read and write
|
|
|
|
7DFF42D4D000
|
unkown
|
page readonly
|
|
|
|
24B7D7B0000
|
unkown
|
page read and write
|
|
|
|
7FF4FF92C000
|
unkown
|
page readonly
|
|
|
|
7FF524B1C000
|
unkown
|
page readonly
|
|
|
|
1C486667000
|
unkown
|
page write copy
|
|
|
|
7FF5C9785000
|
unkown
|
page readonly
|
|
|
|
F7B0A7D000
|
unkown
|
page read and write
|
|
|
|
25EBA102000
|
unkown
|
page read and write
|
|
|
|
25EB6C40000
|
unkown
|
page read and write
|
|
|
|
7FF52496A000
|
unkown
|
page readonly
|
|
|
|
1A5FBE29000
|
unkown
|
page read and write
|
|
|
|
7FF5BFCD5000
|
unkown
|
page readonly
|
|
|
|
7FF572885000
|
unkown
|
page readonly
|
|
|
|
1C486680000
|
unkown
|
page read and write
|
|
|
|
7FF572B60000
|
unkown
|
page readonly
|
|
|
|
7FF553228000
|
unkown
|
page readonly
|
|
|
|
7FF54318C000
|
unkown
|
page readonly
|
|
|
|
554E277000
|
unkown
|
page read and write
|
|
|
|
1FE639C0000
|
heap default
|
page read and write
|
|
|
|
7FF578DD0000
|
unkown
|
page readonly
|
|
|
|
2634586C000
|
unkown
|
page read and write
|
|
|
|
1C5DFB30000
|
heap private
|
page read and write
|
|
|
|
7D5737E000
|
unkown
|
page read and write
|
|
|
|
1C4868A4000
|
unkown
|
page read and write
|
|
|
|
7FF521B7C000
|
unkown
|
page readonly
|
|
|
|
7FF5C037E000
|
unkown
|
page readonly
|
|
|
|
7FF4FF9A9000
|
unkown
|
page readonly
|
|
|
|
7FF5C0167000
|
unkown
|
page readonly
|
|
|
|
7FF583BE0000
|
unkown
|
page readonly
|
|
|
|
1C487000000
|
unkown
|
page read and write
|
|
|
|
D3FD67E000
|
unkown
|
page read and write
|
|
|
|
1FE63CD0000
|
unkown
|
page readonly
|
|
|
|
7FF572B64000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6FA000
|
unkown
|
page readonly
|
|
|
|
22EF6930000
|
heap default
|
page read and write
|
|
|
|
7FF56816E000
|
unkown
|
page readonly
|
|
|
|
DFDA979000
|
unkown
|
page read and write
|
|
|
|
26DA000
|
unkown
|
page read and write
|
|
|
|
1FE65590000
|
unkown
|
page readonly
|
|
|
|
2B60000
|
heap private
|
page read and write
|
|
|
|
1C486720000
|
unkown
|
page readonly
|
|
|
|
7FF5C051F000
|
unkown
|
page readonly
|
|
|
|
7FF5431DE000
|
unkown
|
page readonly
|
|
|
|
24B7B8CB000
|
unkown
|
page read and write
|
|
|
|
263457E0000
|
unkown
|
page read and write
|
|
|
|
7FF572A81000
|
unkown
|
page readonly
|
|
|
|
7FF5BFEE5000
|
unkown
|
page readonly
|
|
|
|
C5E8CFF000
|
unkown
|
page read and write
|
|
|
|
7FF52495E000
|
unkown
|
page readonly
|
|
|
|
7FF5C966C000
|
unkown
|
page readonly
|
|
|
|
1A5FC050000
|
unkown
|
page readonly
|
|
|
|
25EB9310000
|
unkown
|
page read and write
|
|
|
|
7FF5431B2000
|
unkown
|
page readonly
|
|
|
|
7FF572A7A000
|
unkown
|
page readonly
|
|
|
|
7FF5BFE8C000
|
unkown
|
page readonly
|
|
|
|
24B7B914000
|
unkown
|
page read and write
|
|
|
|
7FF543010000
|
unkown
|
page readonly
|
|
|
|
C5E8BFD000
|
unkown
|
page read and write
|
|
|
|
F7B01FA000
|
unkown
|
page read and write
|
|
|
|
1FE63B00000
|
unkown
|
page read and write
|
|
|
|
7FF5C04C8000
|
unkown
|
page readonly
|
|
|
|
25EB8B20000
|
unkown
|
page read and write
|
|
|
|
2371000
|
unkown
|
page readonly
|
|
|
|
25EBA002000
|
unkown
|
page read and write
|
|
|
|
7FF5BA0A7000
|
unkown
|
page readonly
|
|
|
|
25EB8EA5000
|
unkown
|
page read and write
|
|
|
|
F7AFBDE000
|
unkown
|
page read and write
|
|
|
|
DFDA67E000
|
unkown
|
page read and write
|
|
|
|
7FF578FAF000
|
unkown
|
page readonly
|
|
|
|
7FF5BFF35000
|
unkown
|
page readonly
|
|
|
|
7FF579069000
|
unkown
|
page readonly
|
|
|
|
22EF6A47000
|
unkown
|
page read and write
|
|
|
|
2F2B52C0000
|
heap default
|
page read and write
|
|
|
|
7FF5C976C000
|
unkown
|
page readonly
|
|
|
|
7FF5C04D0000
|
unkown
|
page readonly
|
|
|
|
7FF553230000
|
unkown
|
page readonly
|
|
|
|
7FF521F04000
|
unkown
|
page readonly
|
|
|
|
7FF5BA237000
|
unkown
|
page readonly
|
|
|
|
7FF543235000
|
unkown
|
page readonly
|
|
|
|
7FF578CD3000
|
unkown
|
page readonly
|
|
|
|
7FF5BA1A2000
|
unkown
|
page readonly
|
|
|
|
7FF545996000
|
unkown
|
page readonly
|
|
|
|
24B7B916000
|
unkown
|
page read and write
|
|
|
|
F7B037A000
|
unkown
|
page read and write
|
|
|
|
7FF578F72000
|
unkown
|
page readonly
|
|
|
|
7FF4FF8F9000
|
unkown
|
page readonly
|
|
|
|
7FF5BA225000
|
unkown
|
page readonly
|
|
|
|
259B57E2000
|
unkown
|
page read and write
|
|
|
|
E2A59FD000
|
unkown
|
page read and write
|
|
|
|
1C5DE010000
|
unkown
|
page read and write
|
|
|
|
7FF5C9794000
|
unkown
|
page readonly
|
|
|
|
7FF5532C5000
|
unkown
|
page readonly
|
|
|
|
1C48109B000
|
unkown
|
page read and write
|
|
|
|
7FF524AFD000
|
unkown
|
page readonly
|
|
|
|
26346002000
|
unkown
|
page read and write
|
|
|
|
259B578C000
|
unkown
|
page read and write
|
|
|
|
7FF579004000
|
unkown
|
page readonly
|
|
|
|
7FF4EEA11000
|
unkown
|
page readonly
|
|
|
|
7FF542F13000
|
unkown
|
page readonly
|
|
|
|
25C29760000
|
unkown
|
page readonly
|
|
|
|
1C48684B000
|
unkown
|
page read and write
|
|
|
|
F7B08FA000
|
unkown
|
page read and write
|
|
|
|
7FF5BA125000
|
unkown
|
page readonly
|
|
|
|
2EF8F7A000
|
unkown
|
page read and write
|
|
|
|
7FF5BFCB7000
|
unkown
|
page readonly
|
|
|
|
7FF521E76000
|
unkown
|
page readonly
|
|
|
|
7FF4FF798000
|
unkown
|
page readonly
|
|
|
|
7FF5729D3000
|
unkown
|
page readonly
|
|
|
|
25C29AD0000
|
unkown
|
page readonly
|
|
|
|
7FF5532A6000
|
unkown
|
page readonly
|
|
|
|
25EB6D24000
|
unkown
|
page read and write
|
|
|
|
FD4EA75000
|
unkown
|
page read and write
|
|
|
|
1AEEBE3C000
|
unkown
|
page read and write
|
|
|
|
1C486710000
|
unkown
|
page readonly
|
|
|
|
2466DB70000
|
unkown
|
page readonly
|
|
|
|
1C486861000
|
unkown
|
page read and write
|
|
|
|
259B5802000
|
unkown
|
page read and write
|
|
|
|
F7B0B7D000
|
unkown
|
page read and write
|
|
|
|
22EF6C00000
|
unkown
|
page readonly
|
|
|
|
7FF4FF62C000
|
unkown
|
page readonly
|
|
|
|
F7AFF7A000
|
unkown
|
page read and write
|
|
|
|
1C480F00000
|
heap default
|
page read and write
|
|
|
|
22EF6A5E000
|
unkown
|
page read and write
|
|
|
|
7FF58333D000
|
unkown
|
page readonly
|
|
|
|
1AEEBE29000
|
unkown
|
page read and write
|
|
|
|
DFDA8FC000
|
unkown
|
page read and write
|
|
|
|
7FF521634000
|
unkown
|
page readonly
|
|
|
|
7FF4FF8A2000
|
unkown
|
page readonly
|
|
|
|
6200000
|
unkown
|
page read and write
|
|
|
|
7FF5459B2000
|
unkown
|
page readonly
|
|
|
|
2FD38FF000
|
unkown
|
page read and write
|
|
|
|
1C481054000
|
unkown
|
page read and write
|
|
|
|
7FF5681BC000
|
unkown
|
page readonly
|
|
|
|
24B7DA00000
|
unkown
|
page readonly
|
|
|
|
7FF521F0D000
|
unkown
|
page readonly
|
|
|
|
7FF521F69000
|
unkown
|
page readonly
|
|
|
|
7FF53B94E000
|
unkown
|
page readonly
|
|
|
|
22EF6A83000
|
unkown
|
page read and write
|
|
|
|
7FF4FF8A0000
|
unkown
|
page readonly
|
|
|
|
1FE65580000
|
unkown
|
page readonly
|
|
|
|
5D40000
|
unkown
|
page readonly
|
|
|
|
7FF5C9790000
|
unkown
|
page readonly
|
|
|
|
7FF572837000
|
unkown
|
page readonly
|
|
|
|
25EB6B50000
|
heap default
|
page read and write
|
|
|
|
25EB6D13000
|
unkown
|
page read and write
|
|
|
|
27E55E02000
|
unkown
|
page read and write
|
|
|
|
1AEEC602000
|
unkown
|
page read and write
|
|
|
|
24B7B829000
|
unkown
|
page read and write
|
|
|
|
7FF5C053D000
|
unkown
|
page readonly
|
|
|
|
7FF4EEAD6000
|
unkown
|
page readonly
|
|
|
|
1C4867E0000
|
unkown
|
page readonly
|
|
|
|
26345879000
|
unkown
|
page read and write
|
|
|
|
225D4C00000
|
unkown
|
page read and write
|
|
|
|
7FF524AA2000
|
unkown
|
page readonly
|
|
|
|
7FF578F1A000
|
unkown
|
page readonly
|
|
|
|
7FF578F8A000
|
unkown
|
page readonly
|
|
|
|
1FE639E0000
|
unkown
|
page readonly
|
|
|
|
1C486634000
|
unkown
|
page readonly
|
|
|
|
22EF6A6C000
|
unkown
|
page read and write
|
|
|
|
7FF521EA5000
|
unkown
|
page readonly
|
|
|
|
25EB6CD8000
|
unkown
|
page read and write
|
|
|
|
E2A527B000
|
unkown
|
page read and write
|
|
|
|
2F2B5508000
|
unkown
|
page read and write
|
|
|
|
7FF53B8C1000
|
unkown
|
page readonly
|
|
|
|
F7B0C7F000
|
unkown
|
page read and write
|
|
|
|
7FF5C0487000
|
unkown
|
page readonly
|
|
|
|
7FF5BFEA2000
|
unkown
|
page readonly
|
|
|
|
1C86B390000
|
unkown
|
page readonly
|
|
|
|
24B7D7C0000
|
unkown
|
page readonly
|
|
|
|
25EB6B60000
|
unkown
|
page write copy
|
|
|
|
22EF6A74000
|
unkown
|
page read and write
|
|
|
|
7FF545969000
|
unkown
|
page readonly
|
|
|
|
22EF6A02000
|
unkown
|
page read and write
|
|
|
|
1C480FF0000
|
unkown
|
page readonly
|
|
|
|
7FF5BA16A000
|
unkown
|
page readonly
|
|
|
|
7FF545A19000
|
unkown
|
page readonly
|
|
|
|
D3FD47E000
|
unkown
|
page read and write
|
|
|
|
22EF6B02000
|
unkown
|
page read and write
|
|
|
|
7FF5BFC68000
|
unkown
|
page readonly
|
|
|
|
1C48106C000
|
unkown
|
page read and write
|
|
|
|
2BF7000
|
heap private
|
page read and write
|
|
|
|
E2A507C000
|
unkown
|
page read and write
|
|
|
|
7FF4FF861000
|
unkown
|
page readonly
|
|
|
|
2448000
|
unkown
|
page readonly
|
|
|
|
7FF5C8E68000
|
unkown
|
page readonly
|
|
|
|
2F2B546C000
|
unkown
|
page read and write
|
|
|
|
C5E8AFB000
|
unkown
|
page read and write
|
|
|
|
7FF524B8E000
|
unkown
|
page readonly
|
|
|
|
1C486560000
|
unkown
|
page read and write
|
|
|
|
24B7B881000
|
unkown
|
page read and write
|
|
|
|
2227000
|
unkown
|
page readonly
|
|
|
|
7FF5457E9000
|
unkown
|
page readonly
|
|
|
|
24B7B780000
|
heap private
|
page read and write
|
|
|
|
225D4B50000
|
unkown
|
page write copy
|
|
|
|
7FF568146000
|
unkown
|
page readonly
|
|
|
|
7FF5BA28E000
|
unkown
|
page readonly
|
|
|
|
40D2CFD000
|
unkown
|
page read and write
|
|
|
|
7FF4FF926000
|
unkown
|
page readonly
|
|
|
|
1A5FBF00000
|
unkown
|
page read and write
|
|
|
|
7FF5C049B000
|
unkown
|
page readonly
|
|
|
|
22EF6A45000
|
unkown
|
page read and write
|
|
|
|
7FF4FF8E5000
|
unkown
|
page readonly
|
|
|
|
25EB6AF0000
|
heap private
|
page read and write
|
|
|
|
23C0000
|
unkown
|
page readonly
|
|
|
|
26345813000
|
unkown
|
page read and write
|
|
|
|
7FF583C0A000
|
unkown
|
page readonly
|
|
|
|
225D66A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C9637000
|
unkown
|
page readonly
|
|
|
|
1C481099000
|
unkown
|
page read and write
|
|
|
|
2C95000
|
unkown
|
page read and write
|
|
|
|
7D5747F000
|
unkown
|
page read and write
|
|
|
|
25EB8B40000
|
unkown
|
page readonly
|
|
|
|
1C5DE325000
|
heap private
|
page read and write
|
|
|
|
7FF4EEA8E000
|
unkown
|
page readonly
|
|
|
|
25EB6C1F000
|
unkown
|
page read and write
|
|
|
|
40D2D7F000
|
unkown
|
page read and write
|
|
|
|
7FF5C0318000
|
unkown
|
page readonly
|
|
|
|
25EB8F43000
|
unkown
|
page read and write
|
|
|
|
7FF5431B6000
|
unkown
|
page readonly
|
|
|
|
7FF572B67000
|
unkown
|
page readonly
|
|
|
|
7FF545A0E000
|
unkown
|
page readonly
|
|
|
|
1C4865A4000
|
unkown
|
page read and write
|
|
|
|
7FF5BA21C000
|
unkown
|
page readonly
|
|
|
|
7FF4EEAA9000
|
unkown
|
page readonly
|
|
|
|
1C4866B0000
|
unkown
|
page read and write
|
|
|
|
2F2B5A70000
|
unkown
|
page readonly
|
|
|
|
7FF5679E9000
|
unkown
|
page readonly
|
|
|
|
25EB8B20000
|
unkown
|
page read and write
|
|
|
|
7FF5BA17C000
|
unkown
|
page readonly
|
|
|
|
22EF6A4E000
|
unkown
|
page read and write
|
|
|
|
F7B05FA000
|
unkown
|
page read and write
|
|
|
|
F7B067B000
|
unkown
|
page read and write
|
|
|
|
25EB8D2D000
|
unkown
|
page read and write
|
|
|
|
25C2987A000
|
unkown
|
page read and write
|
|
|
|
259B5737000
|
heap default
|
page read and write
|
|
|
|
7FF54514E000
|
unkown
|
page readonly
|
|
|
|
7FF52491F000
|
unkown
|
page readonly
|
|
|
|
1FE65800000
|
unkown
|
page readonly
|
|
|
|
7FF5531F1000
|
unkown
|
page readonly
|
|
|
|
1C86ADF0000
|
unkown
|
page read and write
|
|
|
|
22EF6A69000
|
unkown
|
page read and write
|
|
|
|
7FF524AA6000
|
unkown
|
page readonly
|
|
|
|
2466C013000
|
unkown
|
page read and write
|
|
|
|
1C86B460000
|
unkown
|
page read and write
|
|
|
|
1C481000000
|
unkown
|
page read and write
|
|
|
|
1C86B602000
|
unkown
|
page read and write
|
|
|
|
7FF5432A9000
|
unkown
|
page readonly
|
|
|
|
25EB8DBD000
|
unkown
|
page read and write
|
|
|
|
7FF524B99000
|
unkown
|
page readonly
|
|
|
|
7FF5BFC5E000
|
unkown
|
page readonly
|
|
|
|
2440000
|
unkown
|
page readonly
|
|
|
|
7FF521EEC000
|
unkown
|
page readonly
|
|
|
|
F7B047B000
|
unkown
|
page read and write
|
|
|
|
1C5DDEE0000
|
unkown
|
page readonly
|
|
|
|
22EF6A00000
|
unkown
|
page read and write
|
|
|
|
FD4EB7B000
|
unkown
|
page read and write
|
|
|
|
7FF5C9766000
|
unkown
|
page readonly
|
|
|
|
7FF53B8C6000
|
unkown
|
page readonly
|
|
|
|
8336FEB000
|
unkown
|
page read and write
|
|
|
|
7FF4EEA62000
|
unkown
|
page readonly
|
|
|
|
25EB8D8E000
|
unkown
|
page read and write
|
|
|
|
7FF5249A3000
|
unkown
|
page readonly
|
|
|
|
2B70000
|
unkown
|
page read and write
|
|
|
|
7FF53B517000
|
unkown
|
page readonly
|
|
|
|
7FF572890000
|
unkown
|
page readonly
|
|
|
|
7FF5C0491000
|
unkown
|
page readonly
|
|
|
|
225D4A70000
|
heap default
|
page read and write
|
|
|
|
7FF56819D000
|
unkown
|
page readonly
|
|
|
|
24B7D987000
|
unkown
|
page read and write
|
|
|
|
DFDA779000
|
unkown
|
page read and write
|
|
|
|
7FF4FF815000
|
unkown
|
page readonly
|
|
|
|
1C86AE24000
|
unkown
|
page read and write
|
|
|
|
25C29840000
|
unkown
|
page read and write
|
|
|
|
225D4D02000
|
unkown
|
page read and write
|
|
|
|
24B7BA00000
|
unkown
|
page readonly
|
|
|
|
259B64B0000
|
unkown
|
page read and write
|
|
|
|
2F2B5455000
|
unkown
|
page read and write
|
|
|
|
1C86AE3D000
|
unkown
|
page read and write
|
|
|
|
1C5DFD30000
|
heap private
|
page read and write
|
|
|
|
7FF572AD2000
|
unkown
|
page readonly
|
|
|
|
1C481918000
|
unkown
|
page read and write
|
|
|
|
7FF4FF9A1000
|
unkown
|
page readonly
|
|
|
|
1A5FBE3F000
|
unkown
|
page read and write
|
|
|
|
7FF583C5C000
|
unkown
|
page readonly
|
|
|
|
7FF521F07000
|
unkown
|
page readonly
|
|
|
|
C5E8B7B000
|
unkown
|
page read and write
|
|
|
|
7FF5B9E72000
|
unkown
|
page readonly
|
|
|
|
7FF5249AD000
|
unkown
|
page readonly
|
|
|
|
2C88000
|
unkown
|
page read and write
|
|
|
|
688E27E000
|
unkown
|
page read and write
|
|
|
|
259B59C5000
|
heap private
|
page read and write
|
|
|
|
7FF5C035F000
|
unkown
|
page readonly
|
|
|
|
25EB8AC0000
|
heap private
|
page read and write
|
|
|
|
7FF4EE7C7000
|
unkown
|
page readonly
|
|
|
|
22EF7202000
|
unkown
|
page read and write
|
|
|
|
2466C002000
|
unkown
|
page read and write
|
|
|
|
7FF5728F4000
|
unkown
|
page readonly
|
|
|
|
2420000
|
unkown
|
page readonly
|
|
|
|
1C481200000
|
unkown
|
page readonly
|
|
|
|
7FF5C0398000
|
unkown
|
page readonly
|
|
|
|
7FF4EEA07000
|
unkown
|
page readonly
|
|
|
|
7FF583C25000
|
unkown
|
page readonly
|
|
|
|
F7B097E000
|
unkown
|
page read and write
|
|
|
|
259B6490000
|
unkown
|
page readonly
|
|
|
|
7FF553232000
|
unkown
|
page readonly
|
|
|
|
25EB6C35000
|
unkown
|
page read and write
|
|
|
|
7FF5BA05B000
|
unkown
|
page readonly
|
|
|
|
25EB8F43000
|
unkown
|
page read and write
|
|
|
|
FD4E97E000
|
unkown
|
page read and write
|
|
|
|
2C8D000
|
unkown
|
page read and write
|
|
|
|
7FF521E0A000
|
unkown
|
page readonly
|
|
|
|
25EB8DE9000
|
unkown
|
page read and write
|
|
|
|
7FF521F00000
|
unkown
|
page readonly
|
|
|
|
259B57E2000
|
unkown
|
page read and write
|
|
|
|
7FF53B8F7000
|
unkown
|
page readonly
|
|
|
|
74481FA000
|
unkown
|
page read and write
|
|
|
|
25EB8DDC000
|
unkown
|
page read and write
|
|
|
|
7FF578FDC000
|
unkown
|
page readonly
|
|
|
|
7FF5C016E000
|
unkown
|
page readonly
|
|
|
|
7FF572A77000
|
unkown
|
page readonly
|
|
|
|
7FF5C9706000
|
unkown
|
page readonly
|
|
|
|
2BBE000
|
unkown
|
page read and write
|
|
|
|
7FF542F57000
|
unkown
|
page readonly
|
|
|
|
26345800000
|
unkown
|
page read and write
|
|
|
|
25EB8EC5000
|
unkown
|
page read and write
|
|
|
|
7FF5C04D2000
|
unkown
|
page readonly
|
|
|
|
1C4866C0000
|
unkown
|
page read and write
|
|
|
|
24B7BAD0000
|
unkown
|
page write copy
|
|
|
|
259B57B6000
|
unkown
|
page read and write
|
|
|
|
7FF5BFD48000
|
unkown
|
page readonly
|
|
|
|
25EBA200000
|
unkown
|
page read and write
|
|
|
|
2AD0000
|
unkown
|
page read and write
|
|
|
|
25EB6C13000
|
unkown
|
page read and write
|
|
|
|
27E55613000
|
unkown
|
page read and write
|
|
|
|
22EF6A52000
|
unkown
|
page read and write
|
|
|
|
7FF4EEA68000
|
unkown
|
page readonly
|
|
|
|
7FF58333A000
|
unkown
|
page readonly
|
|
|
|
7FF553242000
|
unkown
|
page readonly
|
|
|
|
7FF5C977C000
|
unkown
|
page readonly
|
|
|
|
7FF5BA1CE000
|
unkown
|
page readonly
|
|
|
|
7FF4FF99E000
|
unkown
|
page readonly
|
|
|
|
233E000
|
unkown
|
page readonly
|
|
|
|
7FF4FF72F000
|
unkown
|
page readonly
|
|
|
|
7FF524AD5000
|
unkown
|
page readonly
|
|
|
|
2C8E000
|
unkown
|
page read and write
|
|
|
|
7FF5C03A9000
|
unkown
|
page readonly
|
|
|
|
7FF572833000
|
unkown
|
page readonly
|
|
|
|
F7B077B000
|
unkown
|
page read and write
|
|
|
|
C5E8A7A000
|
unkown
|
page read and write
|
|
|
|
2466C2D0000
|
unkown
|
page readonly
|
|
|
|
24B7D7B0000
|
unkown
|
page read and write
|
|
|
|
7FF5C0391000
|
unkown
|
page readonly
|
|
|
|
7FF572B05000
|
unkown
|
page readonly
|
|
|
|
F7B0BFB000
|
unkown
|
page read and write
|
|
|
|
2F2B5400000
|
unkown
|
page read and write
|
|
|
|
7FF5681AC000
|
unkown
|
page readonly
|
|
|
|
25EB8E33000
|
unkown
|
page read and write
|
|
|
|
7FF583A0A000
|
unkown
|
page readonly
|
|
|
|
7FF542F5E000
|
unkown
|
page readonly
|
|
|
|
7FF572B0F000
|
unkown
|
page readonly
|
|
|
|
7FF55894C000
|
unkown
|
page readonly
|
|
|
|
25EB9410000
|
unkown
|
page read and write
|
|
|
|
7FF5459A5000
|
unkown
|
page readonly
|
|
|
|
7FF5C04E6000
|
unkown
|
page readonly
|
|
|
|
1C481089000
|
unkown
|
page read and write
|
|
|
|
7FF583C6C000
|
unkown
|
page readonly
|
|
|
|
7FF5BFF9E000
|
unkown
|
page readonly
|
|
|
|
F7B007A000
|
unkown
|
page read and write
|
|
|
|
7FF5C01E6000
|
unkown
|
page readonly
|
|
|
|
7FF552E73000
|
unkown
|
page readonly
|
|
|
|
26345AD0000
|
unkown
|
page readonly
|
|
|
|
554EAFA000
|
unkown
|
page read and write
|
|
|
|
1AEEBC10000
|
heap private
|
page read and write
|
|
|
|
1A5FBCA0000
|
heap private
|
page read and write
|
|
|
|
7FF583A6F000
|
unkown
|
page readonly
|
|
|
|
22EF6A6A000
|
unkown
|
page read and write
|
|
|
|
F7AFEFA000
|
unkown
|
page read and write
|
|
|
|
7FF568239000
|
unkown
|
page readonly
|
|
|
|
F7B07FB000
|
unkown
|
page read and write
|
|
|
|
7FF5C9797000
|
unkown
|
page readonly
|
|
|
|
24B7D802000
|
unkown
|
page read and write
|
|
|
|
7FF4FF911000
|
unkown
|
page readonly
|
|
|
|
225D65A0000
|
unkown
|
page read and write
|
|
|
|
2380000
|
unkown
|
page readonly
|
|
|
|
7FF53B852000
|
unkown
|
page readonly
|
|
|
|
22EF6A31000
|
unkown
|
page read and write
|
|
|
|
7FF578FCD000
|
unkown
|
page readonly
|
|
|
|
7FF578FB9000
|
unkown
|
page readonly
|
|
|
|
7FF5B9E81000
|
unkown
|
page readonly
|
|
|
|
25EB8DE5000
|
unkown
|
page read and write
|
|
|
|
7FF545926000
|
unkown
|
page readonly
|
|
|
|
7FF579000000
|
unkown
|
page readonly
|
|
|
|
7FF5BA19D000
|
unkown
|
page readonly
|
|
|
|
DFDA7FA000
|
unkown
|
page read and write
|
|
|
|
7FF524AE9000
|
unkown
|
page readonly
|
|
|
|
7FF5431B8000
|
unkown
|
page readonly
|
|
|
|
27A0000
|
unkown
|
page readonly
|
|
|
|
259B5680000
|
unkown
|
page read and write
|
|
|
|
7FF567AC1000
|
unkown
|
page readonly
|
|
|
|
7FF5C9631000
|
unkown
|
page readonly
|
|
|
|
7FF572B3C000
|
unkown
|
page readonly
|
|
|
|
25EB9410000
|
unkown
|
page read and write
|
|
|
|
554E97F000
|
unkown
|
page read and write
|
|
|
|
24B7D730000
|
unkown
|
page read and write
|
|
|
|
1A5FBDE0000
|
unkown
|
page readonly
|
|
|
|
7FF4EEA2C000
|
unkown
|
page readonly
|
|
|
|
25EB8DF8000
|
unkown
|
page read and write
|
|
|
|
1AEEBC80000
|
unkown
|
page readonly
|
|
|
|
7FF5BFFA1000
|
unkown
|
page readonly
|
|
|
|
FD4EEFE000
|
unkown
|
page read and write
|
|
|
|
7FF521F5E000
|
unkown
|
page readonly
|
|
|
|
F7B087B000
|
unkown
|
page read and write
|
|
|
|
2B2E000
|
stack
|
page read and write
|
|
|
|
7FF5C04FA000
|
unkown
|
page readonly
|
|
|
|
7FF5C0457000
|
unkown
|
page readonly
|
|
|
|
7FF553330000
|
unkown
|
page readonly
|
|
|
|
7FF572BC1000
|
unkown
|
page readonly
|
|
|
|
1C480FE0000
|
unkown
|
page readonly
|
|
|
|
263457D0000
|
unkown
|
page readonly
|
|
|
|
1C481800000
|
unkown
|
page read and write
|
|
|
|
7FF4EE7B4000
|
unkown
|
page readonly
|
|
|
|
7FF543240000
|
unkown
|
page readonly
|
|
|
|
7FF542F17000
|
unkown
|
page readonly
|
|
|
|
2466C03F000
|
unkown
|
page read and write
|
|
|
|
2392000
|
unkown
|
page readonly
|
|
|
|
27E55702000
|
unkown
|
page read and write
|
|
|
|
25C29902000
|
unkown
|
page read and write
|
|
|
|
6140000
|
unkown
|
page read and write
|
|
|
|
22EF6A48000
|
unkown
|
page read and write
|
|
|
|
25EB6D25000
|
unkown
|
page read and write
|
|
|
|
7FF543141000
|
unkown
|
page readonly
|
|
|
|
2B64000
|
heap private
|
page read and write
|
|
|
|
7FF521F69000
|
unkown
|
page readonly
|
|
|
|
7FF57905E000
|
unkown
|
page readonly
|
|
|
|
F7B09FC000
|
unkown
|
page read and write
|
|
|
|
F7B04FB000
|
unkown
|
page read and write
|
|
|
|
22EF68D0000
|
heap private
|
page read and write
|
|
|
|
7FF5C9708000
|
unkown
|
page readonly
|
|
|
|
27E55640000
|
unkown
|
page read and write
|
|
|
|
2F2B5402000
|
unkown
|
page read and write
|
|
|
|
26345E60000
|
unkown
|
page readonly
|
|
|
|
259B5783000
|
unkown
|
page read and write
|
|
|
|
7FF4FF8B6000
|
unkown
|
page readonly
|
|
|
|
7FF568231000
|
unkown
|
page readonly
|
|
|
|
7FF5BA234000
|
unkown
|
page readonly
|
|
|
|
688DEFB000
|
unkown
|
page read and write
|
|
|
|
7FF53B850000
|
unkown
|
page readonly
|
|
|
|
7FF543115000
|
unkown
|
page readonly
|
|
|
|
7FF53B8F4000
|
unkown
|
page readonly
|
|
|
|
7FF5BFD0E000
|
unkown
|
page readonly
|
|
|
|
1C486568000
|
unkown
|
page read and write
|
|
|
|
554EBFD000
|
unkown
|
page read and write
|
|
|
|
7FF53B8E5000
|
unkown
|
page readonly
|
|
|
|
2348000
|
unkown
|
page readonly
|
|
|
|
7FF5C03A0000
|
unkown
|
page readonly
|
|
|
|
7FF545910000
|
unkown
|
page readonly
|
|
|
|
1C481071000
|
unkown
|
page read and write
|
|
|
|
22EF6A62000
|
unkown
|
page read and write
|
|
|
|
26345828000
|
unkown
|
page read and write
|
|
|
|
259B59C9000
|
heap private
|
page read and write
|
|
|
|
7FF542F2C000
|
unkown
|
page readonly
|
|
|
|
688D9EB000
|
unkown
|
page read and write
|
|
|
|
7FF5C04A7000
|
unkown
|
page readonly
|
|
|
|
1C481918000
|
unkown
|
page read and write
|
|
|
|
7FF5C0150000
|
unkown
|
page readonly
|
|
|
|
1C4866C0000
|
unkown
|
page readonly
|
|
|
|
7FF583C56000
|
unkown
|
page readonly
|
|
|
|
22EF6A60000
|
unkown
|
page read and write
|
|
|
|
688DDF5000
|
unkown
|
page read and write
|
|
|
|
7FF4EEADC000
|
unkown
|
page readonly
|
|
|
|
7FF524ACE000
|
unkown
|
page readonly
|
|
|
|
25EB8E23000
|
unkown
|
page read and write
|
|
|
|
7FF567AC6000
|
unkown
|
page readonly
|
|
|
|
7FF5BA1E9000
|
unkown
|
page readonly
|
|
|
|
1FE65570000
|
unkown
|
page read and write
|
|
|
|
1C5DF960000
|
unkown
|
page readonly
|
|
|
|
2F2B53C0000
|
unkown
|
page read and write
|
|
|
|
8A7927E000
|
unkown
|
page read and write
|
|
|
|
25EB9210000
|
unkown
|
page read and write
|
|
|
|
7FF5BA299000
|
unkown
|
page readonly
|
|
|
|
1C86ACC0000
|
heap default
|
page read and write
|
|
|
|
2F2B5513000
|
unkown
|
page read and write
|
|
|
|
FD4E87C000
|
unkown
|
page read and write
|
|
|
|
7FF56822E000
|
unkown
|
page readonly
|
|
|
|
7FF521902000
|
unkown
|
page readonly
|
|
|
|
7FF572B46000
|
unkown
|
page readonly
|
|
|
|
7FF543216000
|
unkown
|
page readonly
|
|
|
|
1FE655A0000
|
unkown
|
page write copy
|
|
|
|
1AEEC800000
|
unkown
|
page readonly
|
|
|
|
7FF4FF613000
|
unkown
|
page readonly
|
|
|
|
7FF524ADF000
|
unkown
|
page readonly
|
|
|
|
7FF5450E4000
|
unkown
|
page readonly
|
|
|
|
1C486630000
|
unkown
|
page read and write
|
|
|
|
1C486630000
|
unkown
|
page write copy
|
|
|
|
7FF4FF710000
|
unkown
|
page readonly
|
|
|
|
8A791FE000
|
unkown
|
page read and write
|
|
|
|
1FE63A66000
|
unkown
|
page read and write
|
|
|
|
1AEEBE02000
|
unkown
|
page read and write
|
|
|
|
7FF521ED1000
|
unkown
|
page readonly
|
|
|
|
F7AFFFE000
|
unkown
|
page read and write
|
|
|
|
7FF542DDD000
|
unkown
|
page readonly
|
|
|
|
7FF578DBA000
|
unkown
|
page readonly
|
|
|
|
7FF542F70000
|
unkown
|
page readonly
|
|
|
|
7FF5532D4000
|
unkown
|
page readonly
|
|
|
|
7FF4FF8DE000
|
unkown
|
page readonly
|
|
|
|
1C4868B2000
|
unkown
|
page read and write
|
|
|
|
25EB8D7A000
|
unkown
|
page read and write
|
|
|
|
688DF7F000
|
unkown
|
page read and write
|
|
|
|
7FF524B06000
|
unkown
|
page readonly
|
|
|
|
2F2B5463000
|
unkown
|
page read and write
|
|
|
|
7FF5C9702000
|
unkown
|
page readonly
|
|
|
|
7FF54314A000
|
unkown
|
page readonly
|
|
|
|
7FF4EEB59000
|
unkown
|
page readonly
|
|
|
|
7FF5BFE7A000
|
unkown
|
page readonly
|
|
|
|
7FF4EEB51000
|
unkown
|
page readonly
|
|
|
|
1C486690000
|
unkown
|
page read and write
|
|
|
|
7FF4FF6D4000
|
unkown
|
page readonly
|
|
|
|
25EB8F83000
|
unkown
|
page read and write
|
|
|
|
24B7B8A4000
|
unkown
|
page read and write
|
|
|
|
7FF545908000
|
unkown
|
page readonly
|
|
|
|
2A00000
|
unkown
|
page readonly
|
|
|
|
7FF545121000
|
unkown
|
page readonly
|
|
|
|
7FF53B89F000
|
unkown
|
page readonly
|
|
|
|
24B7E010000
|
unkown
|
page read and write
|
|
|
|
1C481113000
|
unkown
|
page read and write
|
|
|
|
7FF543098000
|
unkown
|
page readonly
|
|
|
|
7FF5BFEB2000
|
unkown
|
page readonly
|
|
|
|
22EF6A64000
|
unkown
|
page read and write
|
|
|
|
F7B06FB000
|
unkown
|
page read and write
|
|
|
|
7FF5C8E6E000
|
unkown
|
page readonly
|
|
|
|
E2A557C000
|
unkown
|
page read and write
|
|
|
|
2466BF80000
|
unkown
|
page write copy
|
|
|
|
E2A5AFF000
|
unkown
|
page read and write
|
|
|
|
1FE639F0000
|
unkown
|
page read and write
|
|
|
|
1FE63A4A000
|
unkown
|
page read and write
|
|
|
|
7FF5C01A8000
|
unkown
|
page readonly
|
|
|
|
25EB6D66000
|
unkown
|
page read and write
|
|
|
|
7FF5BFEF9000
|
unkown
|
page readonly
|
|
|
|
1FE63960000
|
heap private
|
page read and write
|
|
|
|
2466C000000
|
unkown
|
page read and write
|
|
|
|
1FE63A00000
|
unkown
|
page read and write
|
|
|
|
22EF6940000
|
unkown
|
page readonly
|
|
|
|
DFDA39B000
|
unkown
|
page read and write
|
|
|
|
7FF578F7A000
|
unkown
|
page readonly
|
|
|
|
22EF6A5F000
|
unkown
|
page read and write
|
|
|
|
7FF4FF9A9000
|
unkown
|
page readonly
|
|
|
|
7FF53B895000
|
unkown
|
page readonly
|
|
|
|
7FF4FF854000
|
unkown
|
page readonly
|
|
|
|
22EF6A67000
|
unkown
|
page read and write
|
|
|
|
7FF5BA206000
|
unkown
|
page readonly
|
|
|
|
7FF5249D7000
|
unkown
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page readonly
|
|
|
|
1C486560000
|
unkown
|
page read and write
|
|
|
|
25C29750000
|
unkown
|
page readonly
|
|
|
|
7FF54317A000
|
unkown
|
page readonly
|
|
|
|
25C2A002000
|
unkown
|
page read and write
|
|
|
|
7FF55310A000
|
unkown
|
page readonly
|
|
|
|
25EB8770000
|
unkown
|
page readonly
|
|
|
|
7FF524B0C000
|
unkown
|
page readonly
|
|
|
|
22EF6A79000
|
unkown
|
page read and write
|
|
|
|
25EB6D77000
|
unkown
|
page read and write
|
|
|
|
7FF4EEAF4000
|
unkown
|
page readonly
|
|
|
|
2AE0000
|
heap default
|
page read and write
|
|
|
|
7FF578D30000
|
unkown
|
page readonly
|
|
|
|
25EB8E57000
|
unkown
|
page read and write
|
|
|
|
7FF54567D000
|
unkown
|
page readonly
|
|
|
|
7FF572AD6000
|
unkown
|
page readonly
|
|
|
|
7FF53B81B000
|
unkown
|
page readonly
|
|
|
|
7FF4FF88C000
|
unkown
|
page readonly
|
|
|
|
24B7D914000
|
unkown
|
page read and write
|
|
|
|
7FF524B25000
|
unkown
|
page readonly
|
|
|
|
7FF572AD8000
|
unkown
|
page readonly
|
|
|
|
7FF5BA1A8000
|
unkown
|
page readonly
|
|
|
|
1AEEC000000
|
unkown
|
page readonly
|
|
|
|
24B7B8EB000
|
unkown
|
page read and write
|
|
|
|
7FF578FD6000
|
unkown
|
page readonly
|
|
|
|
1C486581000
|
unkown
|
page read and write
|
|
|
|
7FF545555000
|
unkown
|
page readonly
|
|
|
|
7FF54315A000
|
unkown
|
page readonly
|
|
|
|
7FF4EE8C0000
|
unkown
|
page readonly
|
|
|
|
7FF5456E0000
|
unkown
|
page readonly
|
|
|
|
7FF5C04B7000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6D8000
|
unkown
|
page readonly
|
|
|
|
2832000
|
unkown
|
page read and write
|
|
|
|
25EB8E5B000
|
unkown
|
page read and write
|
|
|
|
1C5DFE2F000
|
heap private
|
page read and write
|
|
|
|
7FF53B575000
|
unkown
|
page readonly
|
|
|
|
23C5000
|
unkown
|
page readonly
|
|
|
|
7FF542F65000
|
unkown
|
page readonly
|
|
|
|
25EB8C02000
|
unkown
|
page read and write
|
|
|
|
22EF6A3A000
|
unkown
|
page read and write
|
|
|
|
1C4868AF000
|
unkown
|
page read and write
|
|
|
|
7FF542FDC000
|
unkown
|
page readonly
|
|
|
|
7FF5C9749000
|
unkown
|
page readonly
|
|
|
|
1C4823F0000
|
unkown
|
page read and write
|
|
|
|
1FE654B0000
|
unkown
|
page read and write
|
|
|
|
1A5FBE54000
|
unkown
|
page read and write
|
|
|
|
1C4817F3000
|
unkown
|
page read and write
|
|
|
|
25EBA242000
|
unkown
|
page read and write
|
|
|
|
7FF4FF604000
|
unkown
|
page readonly
|
|
|
|
1C48681C000
|
unkown
|
page read and write
|
|
|
|
259B5730000
|
heap default
|
page read and write
|
|
|
|
1C5DE090000
|
heap default
|
page read and write
|
|
|
|
7FF5C0287000
|
unkown
|
page readonly
|
|
|
|
1C481E90000
|
unkown
|
page read and write
|
|
|
|
26345913000
|
unkown
|
page read and write
|
|
|
|
1C4866A0000
|
unkown
|
page read and write
|
|
|
|
7FF5C05D9000
|
unkown
|
page readonly
|
|
|
|
7FF4EE948000
|
unkown
|
page readonly
|
|
|
|
25EB6BF0000
|
unkown
|
page read and write
|
|
|
|
2386000
|
unkown
|
page readonly
|
|
|
|
7FF542F04000
|
unkown
|
page readonly
|
|
There are 1500 hidden memdumps, click here to show them.