Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
document-550193913.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Mon Feb 22 11:59:11 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\72A41860-C1A7-4BDE-8AFA-23221FF1D9E1
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\6A720000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 18:52:18 2019, mtime=Tue Feb 23 03:42:11 2021, atime=Tue Feb 23 03:42:11 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\document-550193913.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:27:01
2020, mtime=Tue Feb 23 03:42:11 2021, atime=Tue Feb 23 03:42:11 2021, length=93696, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\8B720000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 59134 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CBDE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabE5AF.tmp
|
Microsoft Cabinet archive data, 59134 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarE5B0.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\ACDE0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
There are 5 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\rieuro.vnt,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\rieuro.vnt,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://wus2-000.contentsync.
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://helendunnosteopathy.co.uk/ds/2202.gif
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://wus2-000.pagecontentsync.
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://ncus-000.contentsync.
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 98 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
helendunnosteopathy.co.uk
|
208.91.199.118
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
unknown
|
|
|
|
208.91.199.118
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
$8<
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
%8<
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2719D
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27825
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27AC5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27BDE
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
8l<
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
3540E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
35594
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
9a7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED865
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDAF4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDC4B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDD06
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ai7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F7BE4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F7DC7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 166 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1C7EDDF1000
|
unkown
|
page read and write
|
|
|
|
7FF56E86F000
|
unkown
|
page readonly
|
|
|
|
117DC0E2000
|
unkown
|
page read and write
|
|
|
|
18240C47000
|
unkown
|
page read and write
|
|
|
|
7FF5BD982000
|
unkown
|
page readonly
|
|
|
|
2AA6000
|
unkown
|
page readonly
|
|
|
|
1F105269000
|
unkown
|
page read and write
|
|
|
|
117DC0CD000
|
unkown
|
page read and write
|
|
|
|
7FF50835F000
|
unkown
|
page readonly
|
|
|
|
133B5257000
|
unkown
|
page read and write
|
|
|
|
25409D60000
|
unkown
|
page read and write
|
|
|
|
F25000
|
unkown
|
page read and write
|
|
|
|
18240C4B000
|
unkown
|
page read and write
|
|
|
|
7FF5BDC92000
|
unkown
|
page readonly
|
|
|
|
7FF5F10BB000
|
unkown
|
page readonly
|
|
|
|
25409D1E000
|
unkown
|
page read and write
|
|
|
|
25409D3B000
|
unkown
|
page read and write
|
|
|
|
7FF50840D000
|
unkown
|
page readonly
|
|
|
|
2DF8000
|
unkown
|
page readonly
|
|
|
|
F49000
|
unkown
|
page read and write
|
|
|
|
7FF5A5A5A000
|
unkown
|
page readonly
|
|
|
|
7FF59230E000
|
unkown
|
page readonly
|
|
|
|
117DF410000
|
unkown
|
page read and write
|
|
|
|
19A75C02000
|
unkown
|
page read and write
|
|
|
|
F0A000
|
heap default
|
page read and write
|
|
|
|
C735EFE000
|
unkown
|
page read and write
|
|
|
|
7FF591AD1000
|
unkown
|
page readonly
|
|
|
|
7FF591BB9000
|
unkown
|
page readonly
|
|
|
|
117DC0D1000
|
unkown
|
page read and write
|
|
|
|
7FF591C24000
|
unkown
|
page readonly
|
|
|
|
117DE085000
|
unkown
|
page read and write
|
|
|
|
7FF5BDA0F000
|
unkown
|
page readonly
|
|
|
|
81E1EFC000
|
unkown
|
page read and write
|
|
|
|
117DF113000
|
unkown
|
page read and write
|
|
|
|
7FF568C18000
|
unkown
|
page readonly
|
|
|
|
133B5313000
|
unkown
|
page read and write
|
|
|
|
1C7EDD93000
|
unkown
|
page read and write
|
|
|
|
7FF568DD7000
|
unkown
|
page readonly
|
|
|
|
2540A202000
|
unkown
|
page read and write
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
18240AC0000
|
heap private
|
page read and write
|
|
|
|
7FF5BC1E3000
|
unkown
|
page readonly
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
117DE582000
|
unkown
|
page read and write
|
|
|
|
1F20C10F000
|
unkown
|
page read and write
|
|
|
|
7FF5A2DD7000
|
unkown
|
page readonly
|
|
|
|
7FF5BD858000
|
unkown
|
page readonly
|
|
|
|
7FF555C38000
|
unkown
|
page readonly
|
|
|
|
1C55675000
|
unkown
|
page read and write
|
|
|
|
1C7EDD5F000
|
unkown
|
page read and write
|
|
|
|
1E4734C0000
|
heap private
|
page read and write
|
|
|
|
7FF5F1004000
|
unkown
|
page readonly
|
|
|
|
7FF507F07000
|
unkown
|
page readonly
|
|
|
|
1F20C0D0000
|
heap default
|
page read and write
|
|
|
|
25409DD2000
|
unkown
|
page read and write
|
|
|
|
25409D4F000
|
unkown
|
page read and write
|
|
|
|
2E38000
|
unkown
|
page readonly
|
|
|
|
1C7EDF10000
|
unkown
|
page readonly
|
|
|
|
117DE0D8000
|
unkown
|
page read and write
|
|
|
|
117DE08E000
|
unkown
|
page read and write
|
|
|
|
25409D52000
|
unkown
|
page read and write
|
|
|
|
2E0F000
|
unkown
|
page readonly
|
|
|
|
7FF568DC6000
|
unkown
|
page readonly
|
|
|
|
1F105080000
|
unkown
|
page readonly
|
|
|
|
1F20C040000
|
unkown
|
page read and write
|
|
|
|
117DE200000
|
unkown
|
page read and write
|
|
|
|
CA585FB000
|
unkown
|
page read and write
|
|
|
|
1E4749E0000
|
unkown
|
page read and write
|
|
|
|
117DDE80000
|
unkown
|
page read and write
|
|
|
|
7FF5A59E5000
|
unkown
|
page readonly
|
|
|
|
25409D92000
|
unkown
|
page read and write
|
|
|
|
7FF5A5A3F000
|
unkown
|
page readonly
|
|
|
|
1F20C0E2000
|
unkown
|
page read and write
|
|
|
|
7FF5BBE61000
|
unkown
|
page readonly
|
|
|
|
19A75D00000
|
unkown
|
page read and write
|
|
|
|
1B086F13000
|
unkown
|
page read and write
|
|
|
|
5BBD0F9000
|
unkown
|
page read and write
|
|
|
|
1C7EEC40000
|
unkown
|
page read and write
|
|
|
|
7FF5BDB70000
|
unkown
|
page readonly
|
|
|
|
117DC0E1000
|
unkown
|
page read and write
|
|
|
|
7FF508396000
|
unkown
|
page readonly
|
|
|
|
117DC06A000
|
unkown
|
page read and write
|
|
|
|
1B086D20000
|
unkown
|
page readonly
|
|
|
|
25409D54000
|
unkown
|
page read and write
|
|
|
|
8EF83CB000
|
unkown
|
page read and write
|
|
|
|
1F105302000
|
unkown
|
page read and write
|
|
|
|
7FF592349000
|
unkown
|
page readonly
|
|
|
|
1F20C0DB000
|
heap default
|
page read and write
|
|
|
|
1C5557E000
|
unkown
|
page read and write
|
|
|
|
7FF56E713000
|
unkown
|
page readonly
|
|
|
|
1E478BB0000
|
unkown
|
page read and write
|
|
|
|
7FF508246000
|
unkown
|
page readonly
|
|
|
|
E053FF000
|
unkown
|
page read and write
|
|
|
|
1E478A70000
|
unkown
|
page read and write
|
|
|
|
1B086E13000
|
unkown
|
page read and write
|
|
|
|
7FF5923A1000
|
unkown
|
page readonly
|
|
|
|
7FF568D97000
|
unkown
|
page readonly
|
|
|
|
7FF56496B000
|
unkown
|
page readonly
|
|
|
|
7FF5BDBAD000
|
unkown
|
page readonly
|
|
|
|
1C7EEC50000
|
unkown
|
page read and write
|
|
|
|
25409502000
|
unkown
|
page read and write
|
|
|
|
254093B0000
|
heap default
|
page read and write
|
|
|
|
1E478CC0000
|
unkown
|
page read and write
|
|
|
|
1B086E3F000
|
unkown
|
page read and write
|
|
|
|
7FF568D84000
|
unkown
|
page readonly
|
|
|
|
1F105300000
|
unkown
|
page read and write
|
|
|
|
117DE248000
|
unkown
|
page read and write
|
|
|
|
117DE582000
|
unkown
|
page read and write
|
|
|
|
1C7EEBE0000
|
unkown
|
page read and write
|
|
|
|
7FF50836D000
|
unkown
|
page readonly
|
|
|
|
25409C02000
|
unkown
|
page read and write
|
|
|
|
25409D72000
|
unkown
|
page read and write
|
|
|
|
1E473D90000
|
unkown
|
page read and write
|
|
|
|
81E1D79000
|
unkown
|
page read and write
|
|
|
|
7FF568DD2000
|
unkown
|
page readonly
|
|
|
|
1F20C10E000
|
unkown
|
page read and write
|
|
|
|
25409D34000
|
unkown
|
page read and write
|
|
|
|
1E4736B1000
|
unkown
|
page read and write
|
|
|
|
1E478B8E000
|
unkown
|
page read and write
|
|
|
|
1E474670000
|
unkown
|
page readonly
|
|
|
|
133B5271000
|
unkown
|
page read and write
|
|
|
|
7FF5A29FA000
|
unkown
|
page readonly
|
|
|
|
7FF591396000
|
unkown
|
page readonly
|
|
|
|
18241940000
|
unkown
|
page readonly
|
|
|
|
19A75AB0000
|
heap default
|
page read and write
|
|
|
|
1E478C78000
|
unkown
|
page write copy
|
|
|
|
7FF56E778000
|
unkown
|
page readonly
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
25409D6C000
|
unkown
|
page read and write
|
|
|
|
7FF59199E000
|
unkown
|
page readonly
|
|
|
|
7FF5A5B0A000
|
unkown
|
page readonly
|
|
|
|
7FF56E63F000
|
unkown
|
page readonly
|
|
|
|
1C7EDD5F000
|
unkown
|
page read and write
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
7FF508260000
|
unkown
|
page readonly
|
|
|
|
7FF5F10A7000
|
unkown
|
page readonly
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5A2DD4000
|
unkown
|
page readonly
|
|
|
|
117DE080000
|
unkown
|
page read and write
|
|
|
|
7FF555D45000
|
unkown
|
page readonly
|
|
|
|
7FF5A5A43000
|
unkown
|
page readonly
|
|
|
|
7FF5D5F9B000
|
unkown
|
page readonly
|
|
|
|
25409D4C000
|
unkown
|
page read and write
|
|
|
|
7FF56E861000
|
unkown
|
page readonly
|
|
|
|
7FF568BC6000
|
unkown
|
page readonly
|
|
|
|
7FF556077000
|
unkown
|
page readonly
|
|
|
|
26935002000
|
unkown
|
page read and write
|
|
|
|
7FF508298000
|
unkown
|
page readonly
|
|
|
|
7FF555FA2000
|
unkown
|
page readonly
|
|
|
|
117DF000000
|
unkown
|
page read and write
|
|
|
|
1E478E00000
|
unkown
|
page read and write
|
|
|
|
7FF5BBE65000
|
unkown
|
page readonly
|
|
|
|
7FF555F27000
|
unkown
|
page readonly
|
|
|
|
1C7EDD18000
|
heap default
|
page read and write
|
|
|
|
7FF5A580F000
|
unkown
|
page readonly
|
|
|
|
F31000
|
unkown
|
page read and write
|
|
|
|
7FF56E927000
|
unkown
|
page readonly
|
|
|
|
25409D4B000
|
unkown
|
page read and write
|
|
|
|
7FF56E8B9000
|
unkown
|
page readonly
|
|
|
|
7FF5BBCA1000
|
unkown
|
page readonly
|
|
|
|
7FF508446000
|
unkown
|
page readonly
|
|
|
|
7FF5A2617000
|
unkown
|
page readonly
|
|
|
|
1E478EB4000
|
unkown
|
page read and write
|
|
|
|
133B5213000
|
unkown
|
page read and write
|
|
|
|
7FF5F0F38000
|
unkown
|
page readonly
|
|
|
|
7FF5923B4000
|
unkown
|
page readonly
|
|
|
|
7FF5A5AE4000
|
unkown
|
page readonly
|
|
|
|
19A75C29000
|
unkown
|
page read and write
|
|
|
|
25409D56000
|
unkown
|
page read and write
|
|
|
|
117DE2E6000
|
unkown
|
page read and write
|
|
|
|
1E478E49000
|
unkown
|
page read and write
|
|
|
|
7FF5F0C9E000
|
unkown
|
page readonly
|
|
|
|
117DE0BB000
|
unkown
|
page read and write
|
|
|
|
7FF5BC136000
|
unkown
|
page readonly
|
|
|
|
1E474640000
|
unkown
|
page readonly
|
|
|
|
1C7EDD71000
|
unkown
|
page read and write
|
|
|
|
1B088C60000
|
unkown
|
page read and write
|
|
|
|
7FF5A5A7D000
|
unkown
|
page readonly
|
|
|
|
117DF210000
|
unkown
|
page read and write
|
|
|
|
7FF5BC008000
|
unkown
|
page readonly
|
|
|
|
1E478CE0000
|
unkown
|
page read and write
|
|
|
|
1C7EEBF0000
|
unkown
|
page read and write
|
|
|
|
7FF5F10AD000
|
unkown
|
page readonly
|
|
|
|
8EF88F9000
|
unkown
|
page read and write
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
1E478D20000
|
unkown
|
page readonly
|
|
|
|
81E1CFE000
|
unkown
|
page read and write
|
|
|
|
1E478C90000
|
unkown
|
page read and write
|
|
|
|
18241280000
|
unkown
|
page read and write
|
|
|
|
18240D13000
|
unkown
|
page read and write
|
|
|
|
7FF56497A000
|
unkown
|
page readonly
|
|
|
|
7FF556024000
|
unkown
|
page readonly
|
|
|
|
1B086E02000
|
unkown
|
page read and write
|
|
|
|
7FF508414000
|
unkown
|
page readonly
|
|
|
|
E04D0E000
|
unkown
|
page read and write
|
|
|
|
D0E000
|
unkown
|
page read and write
|
|
|
|
7FF5BB95B000
|
unkown
|
page readonly
|
|
|
|
7FF5A2CD7000
|
unkown
|
page readonly
|
|
|
|
1E4746A0000
|
unkown
|
page readonly
|
|
|
|
117DC03F000
|
unkown
|
page read and write
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
19A776A0000
|
unkown
|
page readonly
|
|
|
|
1E478B88000
|
unkown
|
page read and write
|
|
|
|
7FF56E967000
|
unkown
|
page readonly
|
|
|
|
117DDE90000
|
unkown
|
page read and write
|
|
|
|
7FF568D87000
|
unkown
|
page readonly
|
|
|
|
7FF591970000
|
unkown
|
page readonly
|
|
|
|
E97000
|
heap private
|
page read and write
|
|
|
|
D90000
|
heap default
|
page read and write
|
|
|
|
7FF5F0971000
|
unkown
|
page readonly
|
|
|
|
95B000
|
stack
|
page read and write
|
|
|
|
25409BD0000
|
unkown
|
page read and write
|
|
|
|
7FF568B97000
|
unkown
|
page readonly
|
|
|
|
7FF5648F7000
|
unkown
|
page readonly
|
|
|
|
D70000
|
unkown
|
page readonly
|
|
|
|
7FF56E953000
|
unkown
|
page readonly
|
|
|
|
19A75C71000
|
unkown
|
page read and write
|
|
|
|
117DE0A1000
|
unkown
|
page read and write
|
|
|
|
7FF5BC1B4000
|
unkown
|
page readonly
|
|
|
|
7FF568C55000
|
unkown
|
page readonly
|
|
|
|
1E478B80000
|
unkown
|
page read and write
|
|
|
|
7FF568541000
|
unkown
|
page readonly
|
|
|
|
7FF56E849000
|
unkown
|
page readonly
|
|
|
|
25409D9D000
|
unkown
|
page read and write
|
|
|
|
47E5B2E000
|
unkown
|
page read and write
|
|
|
|
1F105269000
|
unkown
|
page read and write
|
|
|
|
117DF110000
|
unkown
|
page read and write
|
|
|
|
7FF568D1D000
|
unkown
|
page readonly
|
|
|
|
7FF555F7F000
|
unkown
|
page readonly
|
|
|
|
F2D000
|
unkown
|
page read and write
|
|
|
|
7FF591A0F000
|
unkown
|
page readonly
|
|
|
|
6130000
|
unkown
|
page readonly
|
|
|
|
25409D96000
|
unkown
|
page read and write
|
|
|
|
1C7EDF60000
|
unkown
|
page read and write
|
|
|
|
F34000
|
unkown
|
page read and write
|
|
|
|
7FF591952000
|
unkown
|
page readonly
|
|
|
|
47E62FE000
|
unkown
|
page read and write
|
|
|
|
12DE27B000
|
unkown
|
page read and write
|
|
|
|
7FF5A2D46000
|
unkown
|
page readonly
|
|
|
|
7FF59161F000
|
unkown
|
page readonly
|
|
|
|
7FF5923AD000
|
unkown
|
page readonly
|
|
|
|
D80000
|
unkown
|
page readonly
|
|
|
|
1C7EE530000
|
unkown
|
page readonly
|
|
|
|
1E478C64000
|
unkown
|
page readonly
|
|
|
|
7FF50839D000
|
unkown
|
page readonly
|
|
|
|
8EF887E000
|
unkown
|
page read and write
|
|
|
|
7FF591BBE000
|
unkown
|
page readonly
|
|
|
|
25409B60000
|
unkown
|
page write copy
|
|
|
|
7FF568CFA000
|
unkown
|
page readonly
|
|
|
|
19A75A50000
|
heap private
|
page read and write
|
|
|
|
117DF510000
|
unkown
|
page read and write
|
|
|
|
7FF5A5AF7000
|
unkown
|
page readonly
|
|
|
|
1E478EA0000
|
unkown
|
page read and write
|
|
|
|
25409DA1000
|
unkown
|
page read and write
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
7FF592316000
|
unkown
|
page readonly
|
|
|
|
7FF5BDAD8000
|
unkown
|
page readonly
|
|
|
|
CA5897F000
|
unkown
|
page read and write
|
|
|
|
25409D35000
|
unkown
|
page read and write
|
|
|
|
1C7EDE10000
|
unkown
|
page readonly
|
|
|
|
25409D78000
|
unkown
|
page read and write
|
|
|
|
117DDE80000
|
unkown
|
page read and write
|
|
|
|
7FF5BBFE6000
|
unkown
|
page readonly
|
|
|
|
7FF592347000
|
unkown
|
page readonly
|
|
|
|
1F105213000
|
unkown
|
page read and write
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
117DC200000
|
unkown
|
page readonly
|
|
|
|
7FF5BC0EF000
|
unkown
|
page readonly
|
|
|
|
7FF5BD9F4000
|
unkown
|
page readonly
|
|
|
|
7FF56E6FA000
|
unkown
|
page readonly
|
|
|
|
1C7EDDC0000
|
unkown
|
page read and write
|
|
|
|
1F105202000
|
unkown
|
page read and write
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
1E47366E000
|
unkown
|
page read and write
|
|
|
|
26934E40000
|
heap private
|
page read and write
|
|
|
|
117DF210000
|
unkown
|
page read and write
|
|
|
|
25409E00000
|
unkown
|
page readonly
|
|
|
|
117DE07D000
|
unkown
|
page read and write
|
|
|
|
7FF568887000
|
unkown
|
page readonly
|
|
|
|
19A75C71000
|
unkown
|
page read and write
|
|
|
|
117DE0BC000
|
unkown
|
page read and write
|
|
|
|
117DF010000
|
unkown
|
page read and write
|
|
|
|
7FF5F10B4000
|
unkown
|
page readonly
|
|
|
|
E04D8E000
|
unkown
|
page read and write
|
|
|
|
117DBE50000
|
heap private
|
page read and write
|
|
|
|
7FF591935000
|
unkown
|
page readonly
|
|
|
|
117DE0BC000
|
unkown
|
page read and write
|
|
|
|
7FF56E70D000
|
unkown
|
page readonly
|
|
|
|
1E473E02000
|
unkown
|
page read and write
|
|
|
|
117DE402000
|
unkown
|
page read and write
|
|
|
|
25409D99000
|
unkown
|
page read and write
|
|
|
|
7FF5A5A07000
|
unkown
|
page readonly
|
|
|
|
20C55D00000
|
unkown
|
page read and write
|
|
|
|
117DC0CC000
|
unkown
|
page read and write
|
|
|
|
7FF591C11000
|
unkown
|
page readonly
|
|
|
|
12DD6FA000
|
unkown
|
page read and write
|
|
|
|
20C55D08000
|
unkown
|
page read and write
|
|
|
|
117DC009000
|
unkown
|
page read and write
|
|
|
|
117DE03D000
|
unkown
|
page read and write
|
|
|
|
CA5867F000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCA7000
|
unkown
|
page readonly
|
|
|
|
60AE000
|
stack
|
page read and write
|
|
|
|
1E478E15000
|
unkown
|
page read and write
|
|
|
|
1E478CE0000
|
unkown
|
page readonly
|
|
|
|
1E478E3C000
|
unkown
|
page read and write
|
|
|
|
7FF5646CB000
|
unkown
|
page readonly
|
|
|
|
254096D0000
|
unkown
|
page readonly
|
|
|
|
CA583F9000
|
unkown
|
page read and write
|
|
|
|
133B5250000
|
unkown
|
page read and write
|
|
|
|
7FF5F10CA000
|
unkown
|
page readonly
|
|
|
|
117DC0D0000
|
unkown
|
page read and write
|
|
|
|
11C6000
|
unkown
|
page readonly
|
|
|
|
7FF5BC0F1000
|
unkown
|
page readonly
|
|
|
|
7FF5BDB41000
|
unkown
|
page readonly
|
|
|
|
254094E0000
|
unkown
|
page read and write
|
|
|
|
7FF56E962000
|
unkown
|
page readonly
|
|
|
|
25409D53000
|
unkown
|
page read and write
|
|
|
|
117DC000000
|
unkown
|
page read and write
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
7FF59142D000
|
unkown
|
page readonly
|
|
|
|
2540945D000
|
unkown
|
page read and write
|
|
|
|
7FF508351000
|
unkown
|
page readonly
|
|
|
|
1C7EDD6A000
|
unkown
|
page read and write
|
|
|
|
25409D58000
|
unkown
|
page read and write
|
|
|
|
2DC5000
|
unkown
|
page readonly
|
|
|
|
18240C4D000
|
unkown
|
page read and write
|
|
|
|
1B088800000
|
unkown
|
page read and write
|
|
|
|
7FF591A13000
|
unkown
|
page readonly
|
|
|
|
7FF5A2D4A000
|
unkown
|
page readonly
|
|
|
|
1F1051A0000
|
unkown
|
page readonly
|
|
|
|
25409D90000
|
unkown
|
page read and write
|
|
|
|
7FF5A2DE7000
|
unkown
|
page readonly
|
|
|
|
7FF568D02000
|
unkown
|
page readonly
|
|
|
|
7FF56E91D000
|
unkown
|
page readonly
|
|
|
|
117DC0B1000
|
unkown
|
page read and write
|
|
|
|
7FF56E6C4000
|
unkown
|
page readonly
|
|
|
|
25409D6D000
|
unkown
|
page read and write
|
|
|
|
20C55C02000
|
unkown
|
page read and write
|
|
|
|
117DC0D7000
|
unkown
|
page read and write
|
|
|
|
7FF591619000
|
unkown
|
page readonly
|
|
|
|
18241000000
|
unkown
|
page readonly
|
|
|
|
2DFE000
|
unkown
|
page readonly
|
|
|
|
12DDCFB000
|
unkown
|
page read and write
|
|
|
|
133B5202000
|
unkown
|
page read and write
|
|
|
|
117DDE10000
|
unkown
|
page readonly
|
|
|
|
12DE17C000
|
unkown
|
page read and write
|
|
|
|
117DF310000
|
unkown
|
page read and write
|
|
|
|
117DC0E2000
|
unkown
|
page read and write
|
|
|
|
7FF5083A9000
|
unkown
|
page readonly
|
|
|
|
7FF56E817000
|
unkown
|
page readonly
|
|
|
|
133B5010000
|
unkown
|
page readonly
|
|
|
|
1C7EDDE0000
|
unkown
|
page read and write
|
|
|
|
7FF568CF6000
|
unkown
|
page readonly
|
|
|
|
20C55D13000
|
unkown
|
page read and write
|
|
|
|
254093E0000
|
unkown
|
page read and write
|
|
|
|
20C55ED0000
|
unkown
|
page readonly
|
|
|
|
25409D47000
|
unkown
|
page read and write
|
|
|
|
117DC055000
|
unkown
|
page read and write
|
|
|
|
7FF5648ED000
|
unkown
|
page readonly
|
|
|
|
1B088900000
|
unkown
|
page readonly
|
|
|
|
CA587FF000
|
unkown
|
page read and write
|
|
|
|
1E47368B000
|
unkown
|
page read and write
|
|
|
|
7FF5BDC57000
|
unkown
|
page readonly
|
|
|
|
7FF555E88000
|
unkown
|
page readonly
|
|
|
|
F2E000
|
unkown
|
page read and write
|
|
|
|
7FF5A2DDD000
|
unkown
|
page readonly
|
|
|
|
CA5877F000
|
unkown
|
page read and write
|
|
|
|
20C56600000
|
unkown
|
page readonly
|
|
|
|
7FF5A2D79000
|
unkown
|
page readonly
|
|
|
|
19A75C6D000
|
unkown
|
page read and write
|
|
|
|
1E473F00000
|
unkown
|
page read and write
|
|
|
|
7FF5A585B000
|
unkown
|
page readonly
|
|
|
|
254093C0000
|
unkown
|
page readonly
|
|
|
|
7FF5646CF000
|
unkown
|
page readonly
|
|
|
|
26935102000
|
unkown
|
page read and write
|
|
|
|
25409D00000
|
unkown
|
page read and write
|
|
|
|
7FF56E5D5000
|
unkown
|
page readonly
|
|
|
|
7FF59144F000
|
unkown
|
page readonly
|
|
|
|
B83000
|
unkown
|
page read and write
|
|
|
|
7FF5F1047000
|
unkown
|
page readonly
|
|
|
|
7FF591928000
|
unkown
|
page readonly
|
|
|
|
1C7EDD7E000
|
unkown
|
page read and write
|
|
|
|
1E47A000000
|
unkown
|
page read and write
|
|
|
|
7FF5BDBD6000
|
unkown
|
page readonly
|
|
|
|
7FF591B7D000
|
unkown
|
page readonly
|
|
|
|
7FF5A2DE4000
|
unkown
|
page readonly
|
|
|
|
7FF5A2CF7000
|
unkown
|
page readonly
|
|
|
|
25409BD0000
|
unkown
|
page read and write
|
|
|
|
12DE47B000
|
unkown
|
page read and write
|
|
|
|
1B087000000
|
unkown
|
page write copy
|
|
|
|
7FF564957000
|
unkown
|
page readonly
|
|
|
|
C735DF9000
|
unkown
|
page read and write
|
|
|
|
117DDE00000
|
unkown
|
page read and write
|
|
|
|
7FF56E854000
|
unkown
|
page readonly
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
117DC0E1000
|
unkown
|
page read and write
|
|
|
|
7FF5080C5000
|
unkown
|
page readonly
|
|
|
|
7FF5F1036000
|
unkown
|
page readonly
|
|
|
|
117DE2D9000
|
unkown
|
page read and write
|
|
|
|
7FF5919AB000
|
unkown
|
page readonly
|
|
|
|
7FF568D8D000
|
unkown
|
page readonly
|
|
|
|
25409DAD000
|
unkown
|
page read and write
|
|
|
|
133B5D40000
|
unkown
|
page readonly
|
|
|
|
117DC0D3000
|
unkown
|
page read and write
|
|
|
|
18240C00000
|
unkown
|
page read and write
|
|
|
|
7FF5917C2000
|
unkown
|
page readonly
|
|
|
|
2540945F000
|
unkown
|
page read and write
|
|
|
|
D4E000
|
stack
|
page read and write
|
|
|
|
7FF5BD70E000
|
unkown
|
page readonly
|
|
|
|
1F20C10B000
|
unkown
|
page read and write
|
|
|
|
7FF564993000
|
unkown
|
page readonly
|
|
|
|
7FF5A2D33000
|
unkown
|
page readonly
|
|
|
|
7FF5BD9D0000
|
unkown
|
page readonly
|
|
|
|
1E473F18000
|
unkown
|
page read and write
|
|
|
|
18240C6E000
|
unkown
|
page read and write
|
|
|
|
7FF5082D5000
|
unkown
|
page readonly
|
|
|
|
7FF56457A000
|
unkown
|
page readonly
|
|
|
|
5BBD17A000
|
unkown
|
page read and write
|
|
|
|
7FF564197000
|
unkown
|
page readonly
|
|
|
|
7FF5BDB91000
|
unkown
|
page readonly
|
|
|
|
47E61FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A5B26000
|
unkown
|
page readonly
|
|
|
|
25409D78000
|
unkown
|
page read and write
|
|
|
|
117DE07D000
|
unkown
|
page read and write
|
|
|
|
25409D36000
|
unkown
|
page read and write
|
|
|
|
1C7EE1A0000
|
unkown
|
page readonly
|
|
|
|
7FF568B6A000
|
unkown
|
page readonly
|
|
|
|
25409D65000
|
unkown
|
page read and write
|
|
|
|
7FF50842A000
|
unkown
|
page readonly
|
|
|
|
25409D58000
|
unkown
|
page read and write
|
|
|
|
1C7EDD10000
|
heap default
|
page read and write
|
|
|
|
2E14000
|
unkown
|
page readonly
|
|
|
|
E054FF000
|
unkown
|
page read and write
|
|
|
|
18240C4A000
|
unkown
|
page read and write
|
|
|
|
602E000
|
stack
|
page read and write
|
|
|
|
25409D6D000
|
unkown
|
page read and write
|
|
|
|
7FF591B8A000
|
unkown
|
page readonly
|
|
|
|
254094B2000
|
unkown
|
page read and write
|
|
|
|
69B0DFF000
|
unkown
|
page read and write
|
|
|
|
12DE5FF000
|
unkown
|
page read and write
|
|
|
|
12DDEFA000
|
unkown
|
page read and write
|
|
|
|
1F105229000
|
unkown
|
page read and write
|
|
|
|
2540A202000
|
unkown
|
page read and write
|
|
|
|
7FF5BC0FF000
|
unkown
|
page readonly
|
|
|
|
7FF5A2B4B000
|
unkown
|
page readonly
|
|
|
|
7FF55603B000
|
unkown
|
page readonly
|
|
|
|
7FF56E815000
|
unkown
|
page readonly
|
|
|
|
20C55C3C000
|
unkown
|
page read and write
|
|
|
|
9F0000
|
unkown
|
page readonly
|
|
|
|
12DD0AB000
|
unkown
|
page read and write
|
|
|
|
C735D7E000
|
unkown
|
page read and write
|
|
|
|
1B086F00000
|
unkown
|
page read and write
|
|
|
|
117DC0EA000
|
unkown
|
page read and write
|
|
|
|
7FF5A5805000
|
unkown
|
page readonly
|
|
|
|
25409D92000
|
unkown
|
page read and write
|
|
|
|
CA58DFF000
|
unkown
|
page read and write
|
|
|
|
7FF56E87D000
|
unkown
|
page readonly
|
|
|
|
12DD5FA000
|
unkown
|
page read and write
|
|
|
|
7FF5BC1A1000
|
unkown
|
page readonly
|
|
|
|
1C7EDDA8000
|
unkown
|
page read and write
|
|
|
|
7FF556077000
|
unkown
|
page readonly
|
|
|
|
1F20C2B0000
|
unkown
|
page readonly
|
|
|
|
117DC0E4000
|
unkown
|
page read and write
|
|
|
|
1E478C50000
|
unkown
|
page read and write
|
|
|
|
1E47363F000
|
unkown
|
page read and write
|
|
|
|
7FF5919A0000
|
unkown
|
page readonly
|
|
|
|
25409D67000
|
unkown
|
page read and write
|
|
|
|
CA582FD000
|
unkown
|
page read and write
|
|
|
|
7FF5BDA2A000
|
unkown
|
page readonly
|
|
|
|
2D52000
|
unkown
|
page readonly
|
|
|
|
E9A000
|
heap private
|
page read and write
|
|
|
|
1F20C0B0000
|
unkown
|
page read and write
|
|
|
|
7FF5F1049000
|
unkown
|
page readonly
|
|
|
|
117DC0E5000
|
unkown
|
page read and write
|
|
|
|
7FF5A2D3E000
|
unkown
|
page readonly
|
|
|
|
117DF210000
|
unkown
|
page read and write
|
|
|
|
7FF5BC10D000
|
unkown
|
page readonly
|
|
|
|
7FF591913000
|
unkown
|
page readonly
|
|
|
|
117DE224000
|
unkown
|
page read and write
|
|
|
|
1E4789F0000
|
unkown
|
page read and write
|
|
|
|
2540A200000
|
unkown
|
page read and write
|
|
|
|
EF0000
|
unkown
|
page read and write
|
|
|
|
18241270000
|
unkown
|
page readonly
|
|
|
|
7FF5A5AED000
|
unkown
|
page readonly
|
|
|
|
117DC0F3000
|
unkown
|
page read and write
|
|
|
|
7FF5A2C16000
|
unkown
|
page readonly
|
|
|
|
1F20C2A5000
|
heap private
|
page read and write
|
|
|
|
117DF510000
|
unkown
|
page read and write
|
|
|
|
117DE0BC000
|
unkown
|
page read and write
|
|
|
|
EEE000
|
unkown
|
page read and write
|
|
|
|
7FF591825000
|
unkown
|
page readonly
|
|
|
|
117DDEE0000
|
unkown
|
page readonly
|
|
|
|
5BBCDCE000
|
unkown
|
page read and write
|
|
|
|
FB63AFB000
|
unkown
|
page read and write
|
|
|
|
7FF56E914000
|
unkown
|
page readonly
|
|
|
|
117DE20C000
|
unkown
|
page read and write
|
|
|
|
7FF5923E3000
|
unkown
|
page readonly
|
|
|
|
1C7EDDE0000
|
unkown
|
page read and write
|
|
|
|
1E478E8C000
|
unkown
|
page read and write
|
|
|
|
81E1E7E000
|
unkown
|
page read and write
|
|
|
|
FB6447E000
|
unkown
|
page read and write
|
|
|
|
12DE2FB000
|
unkown
|
page read and write
|
|
|
|
7FF5BD86A000
|
unkown
|
page readonly
|
|
|
|
25409D4B000
|
unkown
|
page read and write
|
|
|
|
7FF5A2DEB000
|
unkown
|
page readonly
|
|
|
|
7FF555C46000
|
unkown
|
page readonly
|
|
|
|
1F20C0F6000
|
unkown
|
page read and write
|
|
|
|
25409D46000
|
unkown
|
page read and write
|
|
|
|
12DD12E000
|
unkown
|
page read and write
|
|
|
|
7FF508404000
|
unkown
|
page readonly
|
|
|
|
7FF5BC075000
|
unkown
|
page readonly
|
|
|
|
117DC122000
|
unkown
|
page read and write
|
|
|
|
25409D53000
|
unkown
|
page read and write
|
|
|
|
12DDDFA000
|
unkown
|
page read and write
|
|
|
|
117DDE80000
|
unkown
|
page read and write
|
|
|
|
25409D3F000
|
unkown
|
page read and write
|
|
|
|
7FF555F8E000
|
unkown
|
page readonly
|
|
|
|
7FF591AA8000
|
unkown
|
page readonly
|
|
|
|
26935000000
|
unkown
|
page read and write
|
|
|
|
7FF568D94000
|
unkown
|
page readonly
|
|
|
|
1E473BA0000
|
unkown
|
page readonly
|
|
|
|
2C65000
|
unkown
|
page readonly
|
|
|
|
7FF5923A4000
|
unkown
|
page readonly
|
|
|
|
2540945A000
|
unkown
|
page read and write
|
|
|
|
117DE026000
|
unkown
|
page read and write
|
|
|
|
7FF5648D2000
|
unkown
|
page readonly
|
|
|
|
7FF56E670000
|
unkown
|
page readonly
|
|
|
|
7FF591C67000
|
unkown
|
page readonly
|
|
|
|
7FF5BDC6A000
|
unkown
|
page readonly
|
|
|
|
25409D52000
|
unkown
|
page read and write
|
|
|
|
7FF56E1F5000
|
unkown
|
page readonly
|
|
|
|
117DE07B000
|
unkown
|
page read and write
|
|
|
|
2DF3000
|
unkown
|
page readonly
|
|
|
|
1E478DC0000
|
unkown
|
page readonly
|
|
|
|
1E478D40000
|
unkown
|
page readonly
|
|
|
|
7FF5A2D52000
|
unkown
|
page readonly
|
|
|
|
117DC1B8000
|
unkown
|
page read and write
|
|
|
|
2540A261000
|
unkown
|
page read and write
|
|
|
|
7FF5F10A4000
|
unkown
|
page readonly
|
|
|
|
1C7EDDE0000
|
unkown
|
page read and write
|
|
|
|
7FF5BC149000
|
unkown
|
page readonly
|
|
|
|
25409D63000
|
unkown
|
page read and write
|
|
|
|
1E473F02000
|
unkown
|
page read and write
|
|
|
|
19A75D02000
|
unkown
|
page read and write
|
|
|
|
117DE343000
|
unkown
|
page read and write
|
|
|
|
117DF010000
|
unkown
|
page read and write
|
|
|
|
1C7EDDF1000
|
unkown
|
page read and write
|
|
|
|
7FF555867000
|
unkown
|
page readonly
|
|
|
|
7FF568BE0000
|
unkown
|
page readonly
|
|
|
|
25409BD0000
|
unkown
|
page readonly
|
|
|
|
117DC0D2000
|
unkown
|
page read and write
|
|
|
|
7FF5647B8000
|
unkown
|
page readonly
|
|
|
|
DA0000
|
unkown
|
page readonly
|
|
|
|
1C7EDF8A000
|
heap private
|
page read and write
|
|
|
|
1E473702000
|
unkown
|
page read and write
|
|
|
|
7FF56E129000
|
unkown
|
page readonly
|
|
|
|
7FF5BDB67000
|
unkown
|
page readonly
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
CA589FF000
|
unkown
|
page read and write
|
|
|
|
254094A8000
|
unkown
|
page read and write
|
|
|
|
1F105269000
|
unkown
|
page read and write
|
|
|
|
7FF5BC147000
|
unkown
|
page readonly
|
|
|
|
3DF7AF9000
|
unkown
|
page read and write
|
|
|
|
7FF5BB961000
|
unkown
|
page readonly
|
|
|
|
7FF5F10E6000
|
unkown
|
page readonly
|
|
|
|
19A75C71000
|
unkown
|
page read and write
|
|
|
|
2540A254000
|
unkown
|
page read and write
|
|
|
|
7FF508376000
|
unkown
|
page readonly
|
|
|
|
7FF591C3A000
|
unkown
|
page readonly
|
|
|
|
7FF56E911000
|
unkown
|
page readonly
|
|
|
|
7FF5BC1F7000
|
unkown
|
page readonly
|
|
|
|
7FF591C27000
|
unkown
|
page readonly
|
|
|
|
19A75C71000
|
unkown
|
page read and write
|
|
|
|
7FF591B73000
|
unkown
|
page readonly
|
|
|
|
1B086F02000
|
unkown
|
page read and write
|
|
|
|
7FF591C14000
|
unkown
|
page readonly
|
|
|
|
2DE6000
|
unkown
|
page readonly
|
|
|
|
7FF591B28000
|
unkown
|
page readonly
|
|
|
|
7FF568DAA000
|
unkown
|
page readonly
|
|
|
|
7FF59233D000
|
unkown
|
page readonly
|
|
|
|
7FF591B34000
|
unkown
|
page readonly
|
|
|
|
117DE085000
|
unkown
|
page read and write
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
117DF210000
|
unkown
|
page read and write
|
|
|
|
81E19CA000
|
unkown
|
page read and write
|
|
|
|
7FF568BE5000
|
unkown
|
page readonly
|
|
|
|
7FF5BC1A4000
|
unkown
|
page readonly
|
|
|
|
18240D00000
|
unkown
|
page read and write
|
|
|
|
117DDEB0000
|
unkown
|
page read and write
|
|
|
|
7FF5BC116000
|
unkown
|
page readonly
|
|
|
|
25409413000
|
unkown
|
page read and write
|
|
|
|
7FF555D9F000
|
unkown
|
page readonly
|
|
|
|
7FF5BBF8A000
|
unkown
|
page readonly
|
|
|
|
1C7EDD5F000
|
unkown
|
page read and write
|
|
|
|
25409454000
|
unkown
|
page read and write
|
|
|
|
7FF5BC1AD000
|
unkown
|
page readonly
|
|
|
|
20C55C00000
|
unkown
|
page read and write
|
|
|
|
1E473E15000
|
unkown
|
page read and write
|
|
|
|
18241600000
|
unkown
|
page readonly
|
|
|
|
117DE2DF000
|
unkown
|
page read and write
|
|
|
|
1C558F7000
|
unkown
|
page read and write
|
|
|
|
7FF592303000
|
unkown
|
page readonly
|
|
|
|
254094EE000
|
unkown
|
page read and write
|
|
|
|
25409D54000
|
unkown
|
page read and write
|
|
|
|
7FF5BD989000
|
unkown
|
page readonly
|
|
|
|
7FF564855000
|
unkown
|
page readonly
|
|
|
|
7FF5BDB9F000
|
unkown
|
page readonly
|
|
|
|
7FF5BC1CA000
|
unkown
|
page readonly
|
|
|
|
7FF5BDBA3000
|
unkown
|
page readonly
|
|
|
|
117DE011000
|
unkown
|
page read and write
|
|
|
|
25409D52000
|
unkown
|
page read and write
|
|
|
|
7FF5F10A1000
|
unkown
|
page readonly
|
|
|
|
8EF8779000
|
unkown
|
page read and write
|
|
|
|
117DE102000
|
unkown
|
page read and write
|
|
|
|
7FF508268000
|
unkown
|
page readonly
|
|
|
|
12DDF7B000
|
unkown
|
page read and write
|
|
|
|
133B50E0000
|
unkown
|
page readonly
|
|
|
|
117DC176000
|
unkown
|
page read and write
|
|
|
|
26935009000
|
unkown
|
page read and write
|
|
|
|
1E474650000
|
unkown
|
page readonly
|
|
|
|
7FF56E756000
|
unkown
|
page readonly
|
|
|
|
7FF56E1F9000
|
unkown
|
page readonly
|
|
|
|
12DDB7A000
|
unkown
|
page read and write
|
|
|
|
25409D4B000
|
unkown
|
page read and write
|
|
|
|
7FF5A56F8000
|
unkown
|
page readonly
|
|
|
|
7FF5F0F21000
|
unkown
|
page readonly
|
|
|
|
2C17000
|
unkown
|
page readonly
|
|
|
|
7FF5F10E3000
|
unkown
|
page readonly
|
|
|
|
7FF5A2E27000
|
unkown
|
page readonly
|
|
|
|
7FF56E8AD000
|
unkown
|
page readonly
|
|
|
|
1E478BA4000
|
unkown
|
page read and write
|
|
|
|
69B099E000
|
unkown
|
page read and write
|
|
|
|
117DC0EA000
|
unkown
|
page read and write
|
|
|
|
7FF5A2D66000
|
unkown
|
page readonly
|
|
|
|
1E478EA0000
|
unkown
|
page read and write
|
|
|
|
1E479000000
|
unkown
|
page readonly
|
|
|
|
25409D67000
|
unkown
|
page read and write
|
|
|
|
7FF591C53000
|
unkown
|
page readonly
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
1E473657000
|
unkown
|
page read and write
|
|
|
|
25409D51000
|
unkown
|
page read and write
|
|
|
|
7FF5F0E7C000
|
unkown
|
page readonly
|
|
|
|
117DC059000
|
unkown
|
page read and write
|
|
|
|
7FF564568000
|
unkown
|
page readonly
|
|
|
|
117DC0CC000
|
unkown
|
page read and write
|
|
|
|
117DC0CF000
|
unkown
|
page read and write
|
|
|
|
1E478BB0000
|
unkown
|
page read and write
|
|
|
|
12DD9FB000
|
unkown
|
page read and write
|
|
|
|
7FF591B40000
|
unkown
|
page readonly
|
|
|
|
7FF56E775000
|
unkown
|
page readonly
|
|
|
|
3DF774E000
|
unkown
|
page read and write
|
|
|
|
7FF56E7E5000
|
unkown
|
page readonly
|
|
|
|
18240C85000
|
unkown
|
page read and write
|
|
|
|
FB640F7000
|
unkown
|
page read and write
|
|
|
|
7FF56E844000
|
unkown
|
page readonly
|
|
|
|
7FF555D4F000
|
unkown
|
page readonly
|
|
|
|
117DE300000
|
unkown
|
page read and write
|
|
|
|
7FF5A5B37000
|
unkown
|
page readonly
|
|
|
|
6120000
|
heap private
|
page read and write
|
|
|
|
7FF56E924000
|
unkown
|
page readonly
|
|
|
|
1E473F13000
|
unkown
|
page read and write
|
|
|
|
1C559FF000
|
unkown
|
page read and write
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
7FF56E88A000
|
unkown
|
page readonly
|
|
|
|
7FF5BDC97000
|
unkown
|
page readonly
|
|
|
|
117DE0B3000
|
unkown
|
page read and write
|
|
|
|
7FF5BC1F2000
|
unkown
|
page readonly
|
|
|
|
117DE2E2000
|
unkown
|
page read and write
|
|
|
|
7FF591C1D000
|
unkown
|
page readonly
|
|
|
|
1E474660000
|
unkown
|
page readonly
|
|
|
|
7FF591B86000
|
unkown
|
page readonly
|
|
|
|
20C55C8A000
|
unkown
|
page read and write
|
|
|
|
117DC133000
|
unkown
|
page read and write
|
|
|
|
1E478E53000
|
unkown
|
page read and write
|
|
|
|
7FF591AE5000
|
unkown
|
page readonly
|
|
|
|
1E473800000
|
unkown
|
page readonly
|
|
|
|
7FF56E956000
|
unkown
|
page readonly
|
|
|
|
19A75C13000
|
unkown
|
page read and write
|
|
|
|
7FF556027000
|
unkown
|
page readonly
|
|
|
|
7FF5083A7000
|
unkown
|
page readonly
|
|
|
|
117DE600000
|
unkown
|
page readonly
|
|
|
|
7FF5A2E16000
|
unkown
|
page readonly
|
|
|
|
7FF56467F000
|
unkown
|
page readonly
|
|
|
|
2DB1000
|
unkown
|
page readonly
|
|
|
|
1E478E1F000
|
unkown
|
page read and write
|
|
|
|
20C55B40000
|
unkown
|
page readonly
|
|
|
|
7FF5A5327000
|
unkown
|
page readonly
|
|
|
|
117DC013000
|
unkown
|
page read and write
|
|
|
|
12DE0FB000
|
unkown
|
page read and write
|
|
|
|
7FF5BDC86000
|
unkown
|
page readonly
|
|
|
|
20C55B30000
|
heap default
|
page read and write
|
|
|
|
F49000
|
unkown
|
page read and write
|
|
|
|
7FF507BC1000
|
unkown
|
page readonly
|
|
|
|
7FF5BDC44000
|
unkown
|
page readonly
|
|
|
|
117DF610000
|
unkown
|
page read and write
|
|
|
|
7FF555FC9000
|
unkown
|
page readonly
|
|
|
|
117DC0D7000
|
unkown
|
page read and write
|
|
|
|
7FF556037000
|
unkown
|
page readonly
|
|
|
|
1E474001000
|
unkown
|
page read and write
|
|
|
|
254094D7000
|
unkown
|
page read and write
|
|
|
|
12DD7FA000
|
unkown
|
page read and write
|
|
|
|
7FF5BBFB7000
|
unkown
|
page readonly
|
|
|
|
18241402000
|
unkown
|
page read and write
|
|
|
|
7FF56E967000
|
unkown
|
page readonly
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
1C7EDDCF000
|
unkown
|
page read and write
|
|
|
|
7FF568CD1000
|
unkown
|
page readonly
|
|
|
|
7FF5648AF000
|
unkown
|
page readonly
|
|
|
|
7FF555E66000
|
unkown
|
page readonly
|
|
|
|
12DE1FB000
|
unkown
|
page read and write
|
|
|
|
1F20C2A0000
|
heap private
|
page read and write
|
|
|
|
25409350000
|
heap private
|
page read and write
|
|
|
|
7FF556034000
|
unkown
|
page readonly
|
|
|
|
7FF5F1016000
|
unkown
|
page readonly
|
|
|
|
7FF56E69E000
|
unkown
|
page readonly
|
|
|
|
7FF5BC005000
|
unkown
|
page readonly
|
|
|
|
1E474690000
|
unkown
|
page readonly
|
|
|
|
25409D36000
|
unkown
|
page read and write
|
|
|
|
7FF5BDBC2000
|
unkown
|
page readonly
|
|
|
|
7FF5BDA86000
|
unkown
|
page readonly
|
|
|
|
1E474461000
|
unkown
|
page read and write
|
|
|
|
1C7EDF00000
|
unkown
|
page readonly
|
|
|
|
1E473691000
|
unkown
|
page read and write
|
|
|
|
7FF5A29E8000
|
unkown
|
page readonly
|
|
|
|
1E478A60000
|
unkown
|
page read and write
|
|
|
|
117DC178000
|
unkown
|
page read and write
|
|
|
|
1F20C10B000
|
unkown
|
page read and write
|
|
|
|
117DC187000
|
unkown
|
page read and write
|
|
|
|
7FF568D9B000
|
unkown
|
page readonly
|
|
|
|
7FF5BDBE9000
|
unkown
|
page readonly
|
|
|
|
1E478C50000
|
unkown
|
page write copy
|
|
|
|
117DBFE0000
|
unkown
|
page readonly
|
|
|
|
25409D56000
|
unkown
|
page read and write
|
|
|
|
1F20C0FE000
|
unkown
|
page read and write
|
|
|
|
7FF591B49000
|
unkown
|
page readonly
|
|
|
|
117DF110000
|
unkown
|
page read and write
|
|
|
|
2DEE000
|
unkown
|
page readonly
|
|
|
|
1C7EEBC0000
|
unkown
|
page read and write
|
|
|
|
117DE2B8000
|
unkown
|
page read and write
|
|
|
|
7FF555FB6000
|
unkown
|
page readonly
|
|
|
|
7FF5A2D6D000
|
unkown
|
page readonly
|
|
|
|
7FF568DC3000
|
unkown
|
page readonly
|
|
|
|
1F10526F000
|
unkown
|
page read and write
|
|
|
|
133B5802000
|
unkown
|
page read and write
|
|
|
|
1E478C7C000
|
unkown
|
page readonly
|
|
|
|
254094D7000
|
unkown
|
page read and write
|
|
|
|
7FF56471F000
|
unkown
|
page readonly
|
|
|
|
FB6457E000
|
unkown
|
page read and write
|
|
|
|
2540A202000
|
unkown
|
page read and write
|
|
|
|
1E473E00000
|
unkown
|
page read and write
|
|
|
|
1E478BA1000
|
unkown
|
page read and write
|
|
|
|
25409D70000
|
unkown
|
page read and write
|
|
|
|
1C7EDC90000
|
unkown
|
page read and write
|
|
|
|
F2A000
|
unkown
|
page read and write
|
|
|
|
25409D63000
|
unkown
|
page read and write
|
|
|
|
20C55C4F000
|
unkown
|
page read and write
|
|
|
|
CA58BFA000
|
unkown
|
page read and write
|
|
|
|
12DE379000
|
unkown
|
page read and write
|
|
|
|
7FF50834F000
|
unkown
|
page readonly
|
|
|
|
2D2E000
|
unkown
|
page readonly
|
|
|
|
1F105269000
|
unkown
|
page read and write
|
|
|
|
117DE000000
|
unkown
|
page read and write
|
|
|
|
7FF591BB7000
|
unkown
|
page readonly
|
|
|
|
12DE57D000
|
unkown
|
page read and write
|
|
|
|
1C7EDF50000
|
unkown
|
page read and write
|
|
|
|
20C55C13000
|
unkown
|
page read and write
|
|
|
|
1C7EDDF9000
|
unkown
|
page read and write
|
|
|
|
7FF5A59E7000
|
unkown
|
page readonly
|
|
|
|
26934FD0000
|
unkown
|
page readonly
|
|
|
|
E04C8B000
|
unkown
|
page read and write
|
|
|
|
1E478CD0000
|
unkown
|
page read and write
|
|
|
|
25409D13000
|
unkown
|
page read and write
|
|
|
|
7FF5A5706000
|
unkown
|
page readonly
|
|
|
|
1F20BF70000
|
unkown
|
page readonly
|
|
|
|
18240B20000
|
heap default
|
page read and write
|
|
|
|
9E0000
|
unkown
|
page readonly
|
|
|
|
12DD87B000
|
unkown
|
page read and write
|
|
|
|
1B086D10000
|
heap default
|
page read and write
|
|
|
|
7FF56E8A6000
|
unkown
|
page readonly
|
|
|
|
7FF56E4C2000
|
unkown
|
page readonly
|
|
|
|
7FF56E727000
|
unkown
|
page readonly
|
|
|
|
7FF5A5B37000
|
unkown
|
page readonly
|
|
|
|
7FF56E411000
|
unkown
|
page readonly
|
|
|
|
7FF5A2C38000
|
unkown
|
page readonly
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
25409D4F000
|
unkown
|
page read and write
|
|
|
|
25409DBC000
|
unkown
|
page read and write
|
|
|
|
8EF897A000
|
unkown
|
page read and write
|
|
|
|
1F106CA0000
|
unkown
|
page readonly
|
|
|
|
25409D56000
|
unkown
|
page read and write
|
|
|
|
1C7EDDF1000
|
unkown
|
page read and write
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
117DF210000
|
unkown
|
page read and write
|
|
|
|
117DDAB0000
|
unkown
|
page readonly
|
|
|
|
18240D02000
|
unkown
|
page read and write
|
|
|
|
117DF310000
|
unkown
|
page read and write
|
|
|
|
26935200000
|
unkown
|
page readonly
|
|
|
|
26934EA0000
|
heap default
|
page read and write
|
|
|
|
7FF5A2B9F000
|
unkown
|
page readonly
|
|
|
|
1F20C0FE000
|
unkown
|
page read and write
|
|
|
|
25409BF0000
|
unkown
|
page readonly
|
|
|
|
20C55E00000
|
unkown
|
page readonly
|
|
|
|
7FF5BD487000
|
unkown
|
page readonly
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
7FF5BC038000
|
unkown
|
page readonly
|
|
|
|
F2D000
|
unkown
|
page read and write
|
|
|
|
117DC029000
|
unkown
|
page read and write
|
|
|
|
133B528C000
|
unkown
|
page read and write
|
|
|
|
1C5547B000
|
unkown
|
page read and write
|
|
|
|
19A75B90000
|
unkown
|
page write copy
|
|
|
|
117DC0D0000
|
unkown
|
page read and write
|
|
|
|
7FF55604A000
|
unkown
|
page readonly
|
|
|
|
25409D79000
|
unkown
|
page read and write
|
|
|
|
133B523C000
|
unkown
|
page read and write
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
1E47368D000
|
unkown
|
page read and write
|
|
|
|
2540945B000
|
unkown
|
page read and write
|
|
|
|
117DE2E1000
|
unkown
|
page read and write
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
117DC0E4000
|
unkown
|
page read and write
|
|
|
|
20C55AD0000
|
heap private
|
page read and write
|
|
|
|
117DE08A000
|
unkown
|
page read and write
|
|
|
|
1E478E2D000
|
unkown
|
page read and write
|
|
|
|
7FF564964000
|
unkown
|
page readonly
|
|
|
|
2C23000
|
unkown
|
page readonly
|
|
|
|
7FF56E0CB000
|
unkown
|
page readonly
|
|
|
|
20C55C29000
|
unkown
|
page read and write
|
|
|
|
117DC0C7000
|
unkown
|
page read and write
|
|
|
|
1F105010000
|
heap private
|
page read and write
|
|
|
|
19A75AC0000
|
unkown
|
page readonly
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
7FF5A5940000
|
unkown
|
page readonly
|
|
|
|
7FF5BDB37000
|
unkown
|
page readonly
|
|
|
|
7FF591C62000
|
unkown
|
page readonly
|
|
|
|
7FF5BD965000
|
unkown
|
page readonly
|
|
|
|
CA584FE000
|
unkown
|
page read and write
|
|
|
|
7FF5BC000000
|
unkown
|
page readonly
|
|
|
|
69B0C7A000
|
unkown
|
page read and write
|
|
|
|
7FF507BBB000
|
unkown
|
page readonly
|
|
|
|
7FF56E635000
|
unkown
|
page readonly
|
|
|
|
117DC082000
|
unkown
|
page read and write
|
|
|
|
117DC133000
|
unkown
|
page read and write
|
|
|
|
18240C13000
|
unkown
|
page read and write
|
|
|
|
7FF5A2AF5000
|
unkown
|
page readonly
|
|
|
|
117DE0BC000
|
unkown
|
page read and write
|
|
|
|
7FF5BDBE7000
|
unkown
|
page readonly
|
|
|
|
1E473625000
|
unkown
|
page read and write
|
|
|
|
26934EB0000
|
unkown
|
page readonly
|
|
|
|
7FF5F0F31000
|
unkown
|
page readonly
|
|
|
|
12DD4F9000
|
unkown
|
page read and write
|
|
|
|
25409D56000
|
unkown
|
page read and write
|
|
|
|
1C7EDDF1000
|
unkown
|
page read and write
|
|
|
|
117DC187000
|
unkown
|
page read and write
|
|
|
|
12DDFFC000
|
unkown
|
page read and write
|
|
|
|
1F105070000
|
heap default
|
page read and write
|
|
|
|
7FF568881000
|
unkown
|
page readonly
|
|
|
|
117DE0BC000
|
unkown
|
page read and write
|
|
|
|
25409BD0000
|
unkown
|
page read and write
|
|
|
|
7FF5923BB000
|
unkown
|
page readonly
|
|
|
|
117DE502000
|
unkown
|
page read and write
|
|
|
|
7FF555C4A000
|
unkown
|
page readonly
|
|
|
|
1C7EDDF1000
|
unkown
|
page read and write
|
|
|
|
133B5308000
|
unkown
|
page read and write
|
|
|
|
7FF56E3E3000
|
unkown
|
page readonly
|
|
|
|
7FF56E5D1000
|
unkown
|
page readonly
|
|
|
|
3040000
|
unkown
|
page readonly
|
|
|
|
117DE343000
|
unkown
|
page read and write
|
|
|
|
117DC148000
|
unkown
|
page read and write
|
|
|
|
C735C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5A5A87000
|
unkown
|
page readonly
|
|
|
|
117DDE80000
|
unkown
|
page read and write
|
|
|
|
7FF556063000
|
unkown
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page readonly
|
|
|
|
7FF5081EA000
|
unkown
|
page readonly
|
|
|
|
7FF5F0938000
|
unkown
|
page readonly
|
|
|
|
12DDE7B000
|
unkown
|
page read and write
|
|
|
|
7FF591BA6000
|
unkown
|
page readonly
|
|
|
|
C735E7A000
|
unkown
|
page read and write
|
|
|
|
7FF564954000
|
unkown
|
page readonly
|
|
|
|
1E47369D000
|
unkown
|
page read and write
|
|
|
|
25409D41000
|
unkown
|
page read and write
|
|
|
|
25409508000
|
unkown
|
page read and write
|
|
|
|
133B4FA0000
|
heap private
|
page read and write
|
|
|
|
25409DBC000
|
unkown
|
page read and write
|
|
|
|
1F105256000
|
unkown
|
page read and write
|
|
|
|
7FF5649A7000
|
unkown
|
page readonly
|
|
|
|
7FF508457000
|
unkown
|
page readonly
|
|
|
|
2D65000
|
unkown
|
page readonly
|
|
|
|
25409D24000
|
unkown
|
page read and write
|
|
|
|
7FF564796000
|
unkown
|
page readonly
|
|
|
|
7FF5917DC000
|
unkown
|
page readonly
|
|
|
|
69B091E000
|
unkown
|
page read and write
|
|
|
|
7FF59193F000
|
unkown
|
page readonly
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
117DF110000
|
unkown
|
page read and write
|
|
|
|
81E1DFA000
|
unkown
|
page read and write
|
|
|
|
1E473673000
|
unkown
|
page read and write
|
|
|
|
26936AA0000
|
unkown
|
page readonly
|
|
|
|
117DDE70000
|
unkown
|
page readonly
|
|
|
|
117DC113000
|
unkown
|
page read and write
|
|
|
|
25409D56000
|
unkown
|
page read and write
|
|
|
|
7FF508265000
|
unkown
|
page readonly
|
|
|
|
1C7EDDE0000
|
unkown
|
page read and write
|
|
|
|
117DE343000
|
unkown
|
page read and write
|
|
|
|
25409B40000
|
unkown
|
page readonly
|
|
|
|
117DBEC0000
|
unkown
|
page readonly
|
|
|
|
1C7EDEE0000
|
unkown
|
page read and write
|
|
|
|
7FF56E917000
|
unkown
|
page readonly
|
|
|
|
1F106BA0000
|
unkown
|
page read and write
|
|
|
|
1F20C090000
|
unkown
|
page readonly
|
|
|
|
25409D51000
|
unkown
|
page read and write
|
|
|
|
117DC05D000
|
unkown
|
page read and write
|
|
|
|
7FF56E3E6000
|
unkown
|
page readonly
|
|
|
|
1E473C70000
|
unkown
|
page readonly
|
|
|
|
25409D62000
|
unkown
|
page read and write
|
|
|
|
117DC177000
|
unkown
|
page read and write
|
|
|
|
7FF5BDC47000
|
unkown
|
page readonly
|
|
|
|
19A75C71000
|
unkown
|
page read and write
|
|
|
|
2540943C000
|
unkown
|
page read and write
|
|
|
|
19A75C52000
|
unkown
|
page read and write
|
|
|
|
2E1D000
|
unkown
|
page readonly
|
|
|
|
7FF555F25000
|
unkown
|
page readonly
|
|
|
|
7FF564967000
|
unkown
|
page readonly
|
|
|
|
25409D52000
|
unkown
|
page read and write
|
|
|
|
1B086E00000
|
unkown
|
page read and write
|
|
|
|
25409D3E000
|
unkown
|
page read and write
|
|
|
|
25409DAE000
|
unkown
|
page read and write
|
|
|
|
7FF5BDB79000
|
unkown
|
page readonly
|
|
|
|
19A75D13000
|
unkown
|
page read and write
|
|
|
|
F2D000
|
unkown
|
page read and write
|
|
|
|
7FF5923F7000
|
unkown
|
page readonly
|
|
|
|
D50000
|
unkown
|
page read and write
|
|
|
|
117DE442000
|
unkown
|
page read and write
|
|
|
|
F21000
|
unkown
|
page read and write
|
|
|
|
7FF508407000
|
unkown
|
page readonly
|
|
|
|
117DC0C4000
|
unkown
|
page read and write
|
|
|
|
7FF568CCF000
|
unkown
|
page readonly
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
1F105269000
|
unkown
|
page read and write
|
|
|
|
117DE255000
|
unkown
|
page read and write
|
|
|
|
47E5EF5000
|
unkown
|
page read and write
|
|
|
|
1E473520000
|
heap default
|
page read and write
|
|
|
|
25409BE0000
|
unkown
|
page read and write
|
|
|
|
7FF568A41000
|
unkown
|
page readonly
|
|
|
|
12DE3FC000
|
unkown
|
page read and write
|
|
|
|
7FF5F0F08000
|
unkown
|
page readonly
|
|
|
|
1E473530000
|
unkown
|
page readonly
|
|
|
|
25409600000
|
unkown
|
page readonly
|
|
|
|
7FF5BD9BF000
|
unkown
|
page readonly
|
|
|
|
25409D52000
|
unkown
|
page read and write
|
|
|
|
7FF5A5AFB000
|
unkown
|
page readonly
|
|
|
|
7FF5D5F9B000
|
unkown
|
page readonly
|
|
|
|
7FF555F47000
|
unkown
|
page readonly
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
7FF56E70F000
|
unkown
|
page readonly
|
|
|
|
7FF5923B7000
|
unkown
|
page readonly
|
|
|
|
7FF591C56000
|
unkown
|
page readonly
|
|
|
|
7FF591BAD000
|
unkown
|
page readonly
|
|
|
|
7FF591B44000
|
unkown
|
page readonly
|
|
|
|
1C7EE990000
|
unkown
|
page read and write
|
|
|
|
7FF5A29F6000
|
unkown
|
page readonly
|
|
|
|
117DC0F3000
|
unkown
|
page read and write
|
|
|
|
7FF5BDC97000
|
unkown
|
page readonly
|
|
|
|
7FF591C17000
|
unkown
|
page readonly
|
|
|
|
117DC0CD000
|
unkown
|
page read and write
|
|
|
|
1F105150000
|
unkown
|
page write copy
|
|
|
|
7FF5A2D77000
|
unkown
|
page readonly
|
|
|
|
133B5A00000
|
unkown
|
page readonly
|
|
|
|
7FF508401000
|
unkown
|
page readonly
|
|
|
|
C00000
|
unkown
|
page readonly
|
|
|
|
117DC0D1000
|
unkown
|
page read and write
|
|
|
|
1E478C54000
|
unkown
|
page readonly
|
|
|
|
12DE07C000
|
unkown
|
page read and write
|
|
|
|
FB642FF000
|
unkown
|
page read and write
|
|
|
|
7FF5A2B4F000
|
unkown
|
page readonly
|
|
|
|
7FF591959000
|
unkown
|
page readonly
|
|
|
|
25409D1E000
|
unkown
|
page read and write
|
|
|
|
117DC177000
|
unkown
|
page read and write
|
|
|
|
2D37000
|
unkown
|
page readonly
|
|
|
|
47E60F7000
|
unkown
|
page read and write
|
|
|
|
133B5000000
|
heap default
|
page read and write
|
|
|
|
117DC07B000
|
unkown
|
page read and write
|
|
|
|
1E473613000
|
unkown
|
page read and write
|
|
|
|
18240B30000
|
unkown
|
page readonly
|
|
|
|
133B5302000
|
unkown
|
page read and write
|
|
|
|
1C7EDDE6000
|
unkown
|
page read and write
|
|
|
|
7FF5BC122000
|
unkown
|
page readonly
|
|
|
|
7FF56E6AB000
|
unkown
|
page readonly
|
|
|
|
25409400000
|
unkown
|
page read and write
|
|
|
|
1B086CB0000
|
heap private
|
page read and write
|
|
|
|
7FF56E840000
|
unkown
|
page readonly
|
|
|
|
117DE267000
|
unkown
|
page read and write
|
|
|
|
FB63B7E000
|
unkown
|
page read and write
|
|
|
|
FB643F7000
|
unkown
|
page read and write
|
|
|
|
EA0000
|
unkown
|
page read and write
|
|
|
|
1E473C80000
|
unkown
|
page read and write
|
|
|
|
1E478E9D000
|
unkown
|
page read and write
|
|
|
|
7FF56E892000
|
unkown
|
page readonly
|
|
|
|
7FF555E80000
|
unkown
|
page readonly
|
|
|
|
6124000
|
heap private
|
page read and write
|
|
|
|
7FF5A5948000
|
unkown
|
page readonly
|
|
|
|
1F105313000
|
unkown
|
page read and write
|
|
|
|
20C56402000
|
unkown
|
page read and write
|
|
|
|
254094D0000
|
unkown
|
page read and write
|
|
|
|
7FF591964000
|
unkown
|
page readonly
|
|
|
|
7FF555FC7000
|
unkown
|
page readonly
|
|
|
|
7FF555F96000
|
unkown
|
page readonly
|
|
|
|
7FF591B15000
|
unkown
|
page readonly
|
|
|
|
7FF555F83000
|
unkown
|
page readonly
|
|
|
|
7FF59196A000
|
unkown
|
page readonly
|
|
|
|
1C7EDDF6000
|
unkown
|
page read and write
|
|
|
|
7FF5A5B23000
|
unkown
|
page readonly
|
|
|
|
7FF5BDB74000
|
unkown
|
page readonly
|
|
|
|
25409D9A000
|
unkown
|
page read and write
|
|
|
|
7FF56E6A0000
|
unkown
|
page readonly
|
|
|
|
7FF568D27000
|
unkown
|
page readonly
|
|
|
|
7FF5A5A89000
|
unkown
|
page readonly
|
|
|
|
12DD67B000
|
unkown
|
page read and write
|
|
|
|
1C554FE000
|
unkown
|
page read and write
|
|
|
|
117DE01A000
|
unkown
|
page read and write
|
|
|
|
FB63FF9000
|
unkown
|
page read and write
|
|
|
|
25409D4B000
|
unkown
|
page read and write
|
|
|
|
7FF5BC1BB000
|
unkown
|
page readonly
|
|
|
|
7FF5A5926000
|
unkown
|
page readonly
|
|
|
|
1E478BC4000
|
unkown
|
page read and write
|
|
|
|
7FF5917E9000
|
unkown
|
page readonly
|
|
|
|
117DE038000
|
unkown
|
page read and write
|
|
|
|
1C7EDF80000
|
heap private
|
page read and write
|
|
|
|
7FF5648E6000
|
unkown
|
page readonly
|
|
|
|
20C55C70000
|
unkown
|
page read and write
|
|
|
|
1C7EEBD0000
|
unkown
|
page readonly
|
|
|
|
12DDD7B000
|
unkown
|
page read and write
|
|
|
|
133B51D0000
|
unkown
|
page read and write
|
|
|
|
20C55D02000
|
unkown
|
page read and write
|
|
|
|
25409D6C000
|
unkown
|
page read and write
|
|
|
|
117DF110000
|
unkown
|
page read and write
|
|
|
|
12DD97E000
|
unkown
|
page read and write
|
|
|
|
117DBEB0000
|
heap default
|
page read and write
|
|
|
|
25409D51000
|
unkown
|
page read and write
|
|
|
|
7FF568D29000
|
unkown
|
page readonly
|
|
|
|
117DC0F0000
|
unkown
|
page read and write
|
|
|
|
7FF508217000
|
unkown
|
page readonly
|
|
|
|
1E4789E0000
|
unkown
|
page read and write
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
25409D51000
|
unkown
|
page read and write
|
|
|
|
7FF5BDC83000
|
unkown
|
page readonly
|
|
|
|
7FF59190D000
|
unkown
|
page readonly
|
|
|
|
117DC0D8000
|
unkown
|
page read and write
|
|
|
|
7FF592336000
|
unkown
|
page readonly
|
|
|
|
7FF56E873000
|
unkown
|
page readonly
|
|
|
|
2DDB000
|
unkown
|
page readonly
|
|
|
|
1E474480000
|
unkown
|
page read and write
|
|
|
|
133B5300000
|
unkown
|
page read and write
|
|
|
|
117DC0E5000
|
unkown
|
page read and write
|
|
|
|
47E5FFB000
|
unkown
|
page read and write
|
|
|
|
1E4736FC000
|
unkown
|
page read and write
|
|
|
|
7FF592305000
|
unkown
|
page readonly
|
|
|
|
117DDE20000
|
heap private
|
page read and write
|
|
|
|
117DC074000
|
unkown
|
page read and write
|
|
|
|
5BBD07E000
|
unkown
|
page read and write
|
|
|
|
1E478A80000
|
unkown
|
page read and write
|
|
|
|
12DDC7C000
|
unkown
|
page read and write
|
|
|
|
7FF5648CA000
|
unkown
|
page readonly
|
|
|
|
7FF5923F7000
|
unkown
|
page readonly
|
|
|
|
7FF56E12D000
|
unkown
|
page readonly
|
|
|
|
1E478EB3000
|
unkown
|
page read and write
|
|
|
|
7FF5A585F000
|
unkown
|
page readonly
|
|
|
|
25409D52000
|
unkown
|
page read and write
|
|
|
|
25409D69000
|
unkown
|
page read and write
|
|
|
|
2540945C000
|
unkown
|
page read and write
|
|
|
|
7FF5BC11A000
|
unkown
|
page readonly
|
|
|
|
1E473DF0000
|
unkown
|
page read and write
|
|
|
|
117DC0C0000
|
unkown
|
page read and write
|
|
|
|
3DF76CB000
|
unkown
|
page read and write
|
|
|
|
7FF508382000
|
unkown
|
page readonly
|
|
|
|
117DE500000
|
unkown
|
page read and write
|
|
|
|
1E478E87000
|
unkown
|
page read and write
|
|
|
|
7FF591A37000
|
unkown
|
page readonly
|
|
|
|
1F105269000
|
unkown
|
page read and write
|
|
|
|
254093D0000
|
unkown
|
page readonly
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
1C7EE600000
|
unkown
|
page readonly
|
|
|
|
25409429000
|
unkown
|
page read and write
|
|
|
|
25409D66000
|
unkown
|
page read and write
|
|
|
|
19A75C00000
|
unkown
|
page read and write
|
|
|
|
1F20C0F5000
|
unkown
|
page read and write
|
|
|
|
117DC0F0000
|
unkown
|
page read and write
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
133B5400000
|
unkown
|
page readonly
|
|
|
|
47E5AAB000
|
unkown
|
page read and write
|
|
|
|
1F105269000
|
unkown
|
page read and write
|
|
|
|
1F20C10B000
|
unkown
|
page read and write
|
|
|
|
7FF5BD866000
|
unkown
|
page readonly
|
|
|
|
3DF7BFD000
|
unkown
|
page read and write
|
|
|
|
26935044000
|
unkown
|
page read and write
|
|
|
|
7FF5BDC54000
|
unkown
|
page readonly
|
|
|
|
1E478CE0000
|
unkown
|
page read and write
|
|
|
|
117DE400000
|
unkown
|
page read and write
|
|
|
|
1E478CE0000
|
unkown
|
page read and write
|
|
|
|
117DE383000
|
unkown
|
page read and write
|
|
|
|
7FF5BD9DB000
|
unkown
|
page readonly
|
|
|
|
117DBF90000
|
unkown
|
page write copy
|
|
|
|
117DE542000
|
unkown
|
page read and write
|
|
|
|
7FF508457000
|
unkown
|
page readonly
|
|
|
|
7FF564675000
|
unkown
|
page readonly
|
|
|
|
B87000
|
unkown
|
page read and write
|
|
|
|
269369A0000
|
unkown
|
page read and write
|
|
|
|
7FF5A2E13000
|
unkown
|
page readonly
|
|
|
|
7FF508443000
|
unkown
|
page readonly
|
|
|
|
25409D6C000
|
unkown
|
page read and write
|
|
|
|
8EF87FA000
|
unkown
|
page read and write
|
|
|
|
19A75C6F000
|
unkown
|
page read and write
|
|
|
|
1C7EDCF0000
|
unkown
|
page read and write
|
|
|
|
7FF5A2E27000
|
unkown
|
page readonly
|
|
|
|
1E478BA0000
|
unkown
|
page read and write
|
|
|
|
C735F7F000
|
unkown
|
page read and write
|
|
|
|
7FF591B54000
|
unkown
|
page readonly
|
|
|
|
1C55AFD000
|
unkown
|
page read and write
|
|
|
|
117DC059000
|
unkown
|
page read and write
|
|
|
|
1C7EDF70000
|
unkown
|
page read and write
|
|
|
|
E052F7000
|
unkown
|
page read and write
|
|
|
|
1B087050000
|
unkown
|
page readonly
|
|
|
|
7FF5080C1000
|
unkown
|
page readonly
|
|
|
|
133B5229000
|
unkown
|
page read and write
|
|
|
|
7FF5A2DFA000
|
unkown
|
page readonly
|
|
|
|
117DE0F9000
|
unkown
|
page read and write
|
|
|
|
7FF5BDB84000
|
unkown
|
page readonly
|
|
|
|
1E473F18000
|
unkown
|
page read and write
|
|
|
|
117DC0E2000
|
unkown
|
page read and write
|
|
|
|
64F0000
|
unkown
|
page read and write
|
|
|
|
6470000
|
unkown
|
page read and write
|
|
|
|
25409D62000
|
unkown
|
page read and write
|
|
|
|
C735CFE000
|
unkown
|
page read and write
|
|
|
|
7FF591B5F000
|
unkown
|
page readonly
|
|
|
|
FB63BFF000
|
unkown
|
page read and write
|
|
|
|
7FF591A23000
|
unkown
|
page readonly
|
|
|
|
7FF5F092D000
|
unkown
|
page readonly
|
|
|
|
25409D4F000
|
unkown
|
page read and write
|
|
|
|
12DD47A000
|
unkown
|
page read and write
|
|
|
|
1C7EDDE0000
|
heap default
|
page read and write
|
|
|
|
7FF508417000
|
unkown
|
page readonly
|
|
|
|
1E478CA0000
|
unkown
|
page read and write
|
|
|
|
1E473600000
|
unkown
|
page read and write
|
|
|
|
1E473A00000
|
unkown
|
page readonly
|
|
|
|
7FF568BE8000
|
unkown
|
page readonly
|
|
|
|
2D6B000
|
unkown
|
page readonly
|
|
|
|
7FF5A5A76000
|
unkown
|
page readonly
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
7FF56E85F000
|
unkown
|
page readonly
|
|
|
|
7FF5A570A000
|
unkown
|
page readonly
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
1E478BC0000
|
unkown
|
page read and write
|
|
|
|
12DE4FC000
|
unkown
|
page read and write
|
|
|
|
7FF5F103D000
|
unkown
|
page readonly
|
|
|
|
5BBCD4B000
|
unkown
|
page read and write
|
|
|
|
117DE08A000
|
unkown
|
page read and write
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
C735FFE000
|
unkown
|
page read and write
|
|
|
|
133B524C000
|
unkown
|
page read and write
|
|
|
|
7FF5649A2000
|
unkown
|
page readonly
|
|
|
|
CA58AFE000
|
unkown
|
page read and write
|
|
|
|
117DC0D1000
|
unkown
|
page read and write
|
|
|
|
7FF5BDBEE000
|
unkown
|
page readonly
|
|
|
|
12DDA7B000
|
unkown
|
page read and write
|
|
|
|
1E478CB0000
|
unkown
|
page read and write
|
|
|
|
7FF5919FA000
|
unkown
|
page readonly
|
|
|
|
7FF555D9B000
|
unkown
|
page readonly
|
|
|
|
7FF5BC1F7000
|
unkown
|
page readonly
|
|
|
|
20C56940000
|
unkown
|
page readonly
|
|
|
|
117DD9A0000
|
unkown
|
page read and write
|
|
|
|
7FF5919C4000
|
unkown
|
page readonly
|
|
|
|
5BBD1FE000
|
unkown
|
page read and write
|
|
|
|
1F20C060000
|
unkown
|
page read and write
|
|
|
|
26935013000
|
unkown
|
page read and write
|
|
|
|
117DE482000
|
unkown
|
page read and write
|
|
|
|
7FF591792000
|
unkown
|
page readonly
|
|
|
|
254094BF000
|
unkown
|
page read and write
|
|
|
|
1C7EDF85000
|
heap private
|
page read and write
|
|
|
|
7FF50841B000
|
unkown
|
page readonly
|
|
|
|
117DE2E1000
|
unkown
|
page read and write
|
|
|
|
E90000
|
heap private
|
page read and write
|
|
|
|
7FF5A5B32000
|
unkown
|
page readonly
|
|
|
|
117DE010000
|
unkown
|
page read and write
|
|
|
|
7FF5A5AF4000
|
unkown
|
page readonly
|
|
|
|
CA580FE000
|
unkown
|
page read and write
|
|
|
|
1E474560000
|
unkown
|
page read and write
|
|
|
|
69B0CFE000
|
unkown
|
page read and write
|
|
|
|
26934F80000
|
unkown
|
page write copy
|
|
|
|
7FF56E93A000
|
unkown
|
page readonly
|
|
|
|
81E1C7E000
|
unkown
|
page read and write
|
|
|
|
7FF5BDBB6000
|
unkown
|
page readonly
|
|
|
|
7FF568D16000
|
unkown
|
page readonly
|
|
|
|
7FF55602D000
|
unkown
|
page readonly
|
|
|
|
7FF5648BE000
|
unkown
|
page readonly
|
|
|
|
7FF5923CA000
|
unkown
|
page readonly
|
|
|
|
25409D52000
|
unkown
|
page read and write
|
|
|
|
25409D54000
|
unkown
|
page read and write
|
|
|
|
7FF591B37000
|
unkown
|
page readonly
|
|
|
|
606E000
|
unkown
|
page read and write
|
|
|
|
1E47369F000
|
unkown
|
page read and write
|
|
|
|
7FF5BD9CE000
|
unkown
|
page readonly
|
|
|
|
25409D68000
|
unkown
|
page read and write
|
|
|
|
7FF5BD9BB000
|
unkown
|
page readonly
|
|
|
|
117DC155000
|
unkown
|
page read and write
|
|
|
|
1E473713000
|
unkown
|
page read and write
|
|
|
|
254094C6000
|
unkown
|
page read and write
|
|
|
|
69B089B000
|
unkown
|
page read and write
|
|
|
|
CA588FA000
|
unkown
|
page read and write
|
|
|
|
7FF555FBD000
|
unkown
|
page readonly
|
|
|
|
117DC07D000
|
unkown
|
page read and write
|
|
|
|
25409D52000
|
unkown
|
page read and write
|
|
|
|
117DDEA0000
|
unkown
|
page read and write
|
|
|
|
69B0E7F000
|
unkown
|
page read and write
|
|
|
|
12DDAFB000
|
unkown
|
page read and write
|
|
|
|
7FF5BDC4D000
|
unkown
|
page readonly
|
|
|
|
2D61000
|
unkown
|
page readonly
|
|
|
|
1C7EDD57000
|
unkown
|
page read and write
|
|
|
|
25409BC0000
|
unkown
|
page readonly
|
|
|
|
7FF56E0D1000
|
unkown
|
page readonly
|
|
|
|
1E478E60000
|
unkown
|
page read and write
|
|
|
|
117DC0D1000
|
unkown
|
page read and write
|
|
|
|
12DD57F000
|
unkown
|
page read and write
|
|
|
|
7FF56495D000
|
unkown
|
page readonly
|
|
|
|
1C7EDF90000
|
unkown
|
page read and write
|
|
|
|
25409488000
|
unkown
|
page read and write
|
|
|
|
25409513000
|
unkown
|
page read and write
|
|
|
|
12DD8FB000
|
unkown
|
page read and write
|
|
|
|
7FF591B92000
|
unkown
|
page readonly
|
|
|
|
25409D52000
|
unkown
|
page read and write
|
|
|
|
117DC0D0000
|
unkown
|
page read and write
|
|
|
|
1C7EDF60000
|
unkown
|
page read and write
|
|
|
|
117DC0D7000
|
unkown
|
page read and write
|
|
|
|
25409DC4000
|
unkown
|
page read and write
|
|
|
|
7FF5A58AF000
|
unkown
|
page readonly
|
|
|
|
254094A7000
|
unkown
|
page read and write
|
|
|
|
254094F8000
|
unkown
|
page read and write
|
|
|
|
117DC0CF000
|
unkown
|
page read and write
|
|
|
|
25409D56000
|
unkown
|
page read and write
|
|
|
|
7FF568CE3000
|
unkown
|
page readonly
|
|
|
|
7FF56E8B7000
|
unkown
|
page readonly
|
|
|
|
18240C4E000
|
unkown
|
page read and write
|
|
|
|
133B51C0000
|
unkown
|
page readonly
|
|
|
|
CA57DFB000
|
unkown
|
page read and write
|
|
|
|
F28000
|
unkown
|
page read and write
|
|
|
|
117DE0BC000
|
unkown
|
page read and write
|
|
|
|
117DC05C000
|
unkown
|
page read and write
|
|
|
|
7FF5BDAD1000
|
unkown
|
page readonly
|
|
|
|
1E473678000
|
unkown
|
page read and write
|
|
|
|
7FF555DEF000
|
unkown
|
page readonly
|
|
|
|
19A75C6D000
|
unkown
|
page read and write
|
|
|
|
117DC0F3000
|
unkown
|
page read and write
|
|
|
|
12DD1AE000
|
unkown
|
page read and write
|
|
|
|
25409D70000
|
unkown
|
page read and write
|
|
|
|
117DE07E000
|
unkown
|
page read and write
|
|
|
|
1E478C60000
|
unkown
|
page readonly
|
|
|
|
117DC08B000
|
unkown
|
page read and write
|
|
|
|
117DE482000
|
unkown
|
page read and write
|
|
|
|
20C55B60000
|
unkown
|
page read and write
|
|
|
|
117DC09C000
|
unkown
|
page read and write
|
|
|
|
117DF110000
|
unkown
|
page read and write
|
|
|
|
25409D5F000
|
unkown
|
page read and write
|
|
|
|
7FF5A5A56000
|
unkown
|
page readonly
|
|
|
|
7FF5923A7000
|
unkown
|
page readonly
|
|
|
|
FB641F8000
|
unkown
|
page read and write
|
|
|
|
2DC8000
|
unkown
|
page readonly
|
|
|
|
19A75E00000
|
unkown
|
page readonly
|
|
|
|
117DF610000
|
unkown
|
page read and write
|
|
|
|
18240C27000
|
unkown
|
page read and write
|
|
|
|
7FF564857000
|
unkown
|
page readonly
|
|
|
|
117DC087000
|
unkown
|
page read and write
|
|
|
|
7FF50837A000
|
unkown
|
page readonly
|
|
|
|
7FF591A07000
|
unkown
|
page readonly
|
|
|
|
1B086DF0000
|
unkown
|
page readonly
|
|
|
|
7FF5BC103000
|
unkown
|
page readonly
|
|
|
|
25409D34000
|
unkown
|
page read and write
|
|
|
|
1E473629000
|
unkown
|
page read and write
|
|
|
|
7FF5A5AE7000
|
unkown
|
page readonly
|
|
|
|
7FF5BDBBA000
|
unkown
|
page readonly
|
|
|
|
25409D5F000
|
unkown
|
page read and write
|
|
|
|
7FF556066000
|
unkown
|
page readonly
|
|
|
|
69B0D7A000
|
unkown
|
page read and write
|
|
|
|
12DDBFA000
|
unkown
|
page read and write
|
|
|
|
7FF591966000
|
unkown
|
page readonly
|
|
|
|
2A33000
|
unkown
|
page readonly
|
|
|
|
91B000
|
unkown
|
page read and write
|
|
|
|
1F20C0A0000
|
unkown
|
page readonly
|
|
|
|
117DE298000
|
unkown
|
page read and write
|
|
|
|
F2D000
|
unkown
|
page read and write
|
|
|
|
9C0000
|
unkown
|
page read and write
|
|
|
|
117DE0C4000
|
unkown
|
page read and write
|
|
|
|
7FF591BB9000
|
unkown
|
page readonly
|
|
|
|
26935029000
|
unkown
|
page read and write
|
|
|
|
7FF508452000
|
unkown
|
page readonly
|
|
|
|
19A75C3F000
|
unkown
|
page read and write
|
|
|
|
117DF110000
|
unkown
|
page read and write
|
|
|
|
2D5A000
|
unkown
|
page readonly
|
|
|
|
1B086E55000
|
unkown
|
page read and write
|
|
|
|
20C55C55000
|
unkown
|
page read and write
|
|
|
|
7FF591827000
|
unkown
|
page readonly
|
|
|
|
2540A400000
|
unkown
|
page readonly
|
|
|
|
25409D24000
|
unkown
|
page read and write
|
|
|
|
7FF5A2C30000
|
unkown
|
page readonly
|
|
|
|
117DC0A4000
|
unkown
|
page read and write
|
|
|
|
25409DD2000
|
unkown
|
page read and write
|
|
|
|
7FF508363000
|
unkown
|
page readonly
|
|
|
|
7FF591A0D000
|
unkown
|
page readonly
|
|
|
|
25409DB3000
|
unkown
|
page read and write
|
|
|
|
19A775A0000
|
unkown
|
page read and write
|
|
|
|
7FF5BC1E6000
|
unkown
|
page readonly
|
|
|
|
18240C29000
|
unkown
|
page read and write
|
|
|
|
1F10523F000
|
unkown
|
page read and write
|
|
|
|
CA586FE000
|
unkown
|
page read and write
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
25409D51000
|
unkown
|
page read and write
|
|
|
|
25409460000
|
unkown
|
page read and write
|
|
|
|
1F105269000
|
unkown
|
page read and write
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
47E5BAE000
|
unkown
|
page read and write
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
2DDD000
|
unkown
|
page readonly
|
|
|
|
7FF5A2E22000
|
unkown
|
page readonly
|
|
|
|
7FF5BC13D000
|
unkown
|
page readonly
|
|
|
|
7FF56E770000
|
unkown
|
page readonly
|
|
|
|
1C7EDDFB000
|
heap default
|
page read and write
|
|
|
|
FB63EF5000
|
unkown
|
page read and write
|
|
|
|
7FF5BDB8F000
|
unkown
|
page readonly
|
|
|
|
1E474680000
|
unkown
|
page readonly
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
7FF56E417000
|
unkown
|
page readonly
|
|
|
|
7FF591AA1000
|
unkown
|
page readonly
|
|
|
|
3DF77CA000
|
unkown
|
page read and write
|
|
|
|
7FF5F10F7000
|
unkown
|
page readonly
|
|
|
|
7FF564877000
|
unkown
|
page readonly
|
|
|
|
5F30000
|
unkown
|
page readonly
|
|
|
|
7FF5923E6000
|
unkown
|
page readonly
|
|
|
|
117DC0D1000
|
unkown
|
page read and write
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
1E478D30000
|
unkown
|
page readonly
|
|
|
|
18240D08000
|
unkown
|
page read and write
|
|
|
|
7FF5BDAA8000
|
unkown
|
page readonly
|
|
|
|
26935057000
|
unkown
|
page read and write
|
|
|
|
25409D9D000
|
unkown
|
page read and write
|
|
|
|
CA5807E000
|
unkown
|
page read and write
|
|
|
|
F37000
|
unkown
|
page read and write
|
|
|
|
7FF591B61000
|
unkown
|
page readonly
|
|
|
|
1E473DF3000
|
unkown
|
page read and write
|
|
|
|
7FF5649A7000
|
unkown
|
page readonly
|
|
|
|
7FF5647B0000
|
unkown
|
page readonly
|
|
|
|
117DC156000
|
unkown
|
page read and write
|
|
|
|
1F20C0E7000
|
heap default
|
page read and write
|
|
|
|
117DE004000
|
unkown
|
page read and write
|
|
|
|
1F20C0FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A2CD5000
|
unkown
|
page readonly
|
|
|
|
7FF5BDBDD000
|
unkown
|
page readonly
|
|
|
|
7FF5BD96F000
|
unkown
|
page readonly
|
|
|
|
25409D2C000
|
unkown
|
page read and write
|
|
|
|
2D5D000
|
unkown
|
page readonly
|
|
|
|
7FF5F10B7000
|
unkown
|
page readonly
|
|
|
|
1C7EDD71000
|
unkown
|
page read and write
|
|
|
|
117DDEC0000
|
unkown
|
page readonly
|
|
|
|
2E38000
|
unkown
|
page readonly
|
|
|
|
1E478B80000
|
unkown
|
page read and write
|
|
|
|
133B5252000
|
unkown
|
page read and write
|
|
|
|
133B5200000
|
unkown
|
page read and write
|
|
|
|
1C7EDDBE000
|
unkown
|
page read and write
|
|
|
|
117DE402000
|
unkown
|
page read and write
|
|
|
|
7FF564996000
|
unkown
|
page readonly
|
|
|
|
25409DA0000
|
unkown
|
page read and write
|
|
|
|
1E473675000
|
unkown
|
page read and write
|
|
|
|
7FF507F01000
|
unkown
|
page readonly
|
|
|
|
CA58EFB000
|
unkown
|
page read and write
|
|
|
|
12DD77A000
|
unkown
|
page read and write
|
|
|
|
7FF568DD7000
|
unkown
|
page readonly
|
|
|
|
7FF5BC1A7000
|
unkown
|
page readonly
|
|
|
|
7FF5BDB47000
|
unkown
|
page readonly
|
|
|
|
3DF7A7E000
|
unkown
|
page read and write
|
|
|
|
7FF568CED000
|
unkown
|
page readonly
|
|
|
|
117DC05B000
|
unkown
|
page read and write
|
|
|
|
7FF5BDB45000
|
unkown
|
page readonly
|
|
|
|
117DC0E1000
|
unkown
|
page read and write
|
|
|
|
1F105400000
|
unkown
|
page readonly
|
|
|
|
117DE0CD000
|
unkown
|
page read and write
|
|
|
|
7FF5648C6000
|
unkown
|
page readonly
|
|
|
|
117DC0D0000
|
unkown
|
page read and write
|
|
|
|
117DC0D2000
|
unkown
|
page read and write
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
1C557FE000
|
unkown
|
page read and write
|
|
|
|
117DC0F2000
|
unkown
|
page read and write
|
|
|
|
7FF556072000
|
unkown
|
page readonly
|
|
|
|
2E02000
|
unkown
|
page readonly
|
|
|
|
25409D96000
|
unkown
|
page read and write
|
|
|
|
F25000
|
unkown
|
page read and write
|
|
|
|
CA581F7000
|
unkown
|
page read and write
|
|
|
|
7FF5BD776000
|
unkown
|
page readonly
|
|
|
|
7FF591B6F000
|
unkown
|
page readonly
|
|
|
|
7FF568CDF000
|
unkown
|
page readonly
|
|
|
|
7FF5A5A62000
|
unkown
|
page readonly
|
|
|
|
117DC178000
|
unkown
|
page read and write
|
|
|
|
2D41000
|
unkown
|
page readonly
|
|
|
|
3DF7B7F000
|
unkown
|
page read and write
|
|
|
|
117DF410000
|
unkown
|
page read and write
|
|
|
|
117DE013000
|
unkown
|
page read and write
|
|
|
|
1E478CE0000
|
unkown
|
page read and write
|
|
|
|
1C7EDD21000
|
heap default
|
page read and write
|
|
|
|
18240E00000
|
unkown
|
page readonly
|
|
|
|
7FF56E886000
|
unkown
|
page readonly
|
|
|
|
7FF591BBD000
|
unkown
|
page readonly
|
|
|
|
7FF5BDAA0000
|
unkown
|
page readonly
|
|
|
|
E051FB000
|
unkown
|
page read and write
|
|
|
|
7FF5BC1B7000
|
unkown
|
page readonly
|
|
|
|
7FF5A5A4E000
|
unkown
|
page readonly
|
|
|
|
7FF56E7A8000
|
unkown
|
page readonly
|
|
|
|
20C55B50000
|
unkown
|
page readonly
|
|
|
|
25409D96000
|
unkown
|
page read and write
|
|
|
|
7FF555F9A000
|
unkown
|
page readonly
|
|
|
|
18240C3C000
|
unkown
|
page read and write
|
|
|
|
7FF568D81000
|
unkown
|
page readonly
|
|
|
|
7FF5F10F7000
|
unkown
|
page readonly
|
|
|
|
1E478DE0000
|
unkown
|
page readonly
|
|
|
|
1C5577B000
|
unkown
|
page read and write
|
|
|
|
1F105200000
|
unkown
|
page read and write
|
|
|
|
25409D9E000
|
unkown
|
page read and write
|
|
|
|
7FF564576000
|
unkown
|
page readonly
|
|
|
|
25409BB0000
|
unkown
|
page readonly
|
|
|
|
7FF5A2D2F000
|
unkown
|
page readonly
|
|
|
|
7FF5F0FEF000
|
unkown
|
page readonly
|
|
|
|
25409D40000
|
unkown
|
page read and write
|
|
|
|
1B086E29000
|
unkown
|
page read and write
|
|
|
|
117DC0C4000
|
unkown
|
page read and write
|
|
|
|
F34000
|
unkown
|
page read and write
|
|
|
|
1E478A30000
|
unkown
|
page readonly
|
|
|
|
2D3E000
|
unkown
|
page readonly
|
|
|
|
19A75BE0000
|
unkown
|
page readonly
|
|
|
|
7FF5648B3000
|
unkown
|
page readonly
|
|
|
|
F00000
|
heap default
|
page read and write
|
|
|
|
7FF5A2AFF000
|
unkown
|
page readonly
|
|
|
|
7FF5648F9000
|
unkown
|
page readonly
|
|
There are 1427 hidden memdumps, click here to show them.