Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Complaint-447781983-02182021.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Last Saved By: Friner, Name
of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Thu Feb 18 13:42:21
2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\30D802E0E248FEE17AAF4A62594CC75A
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\30D802E0E248FEE17AAF4A62594CC75A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\4C99B3FD-0FAA-455B-8960-C99FC42FE1C8
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\A8A40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Complaint-447781983-02182021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:50
2020, mtime=Tue Feb 23 12:25:52 2021, atime=Tue Feb 23 12:25:52 2021, length=60928, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Tue Feb 23 12:25:52 2021, atime=Tue Feb 23 12:25:52 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\59A40000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 59134 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0968A1E3A40D2582E7FD463BAEB59CD
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0968A1E3A40D2582E7FD463BAEB59CD
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabDC6B.tmp
|
Microsoft Cabinet archive data, 59134 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\F2CE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarDC6C.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\A3CE0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
There are 8 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\JDFR.hdfgr,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\JDFR.hdfgr1,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\JDFR.hdfgr2,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\JDFR.hdfgr3,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\JDFR.hdfgr4,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\JDFR.hdfgr,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\JDFR.hdfgr1,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\JDFR.hdfgr2,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\JDFR.hdfgr3,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\JDFR.hdfgr4,DllRegisterServer
|
|
There are 2 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://pathinanchilearthmovers.com/eznwcdhx/44250601302777800000.dat
|
162.241.80.6
|
|
|
|
http://pathinanchilearthmovers.com/eznwcdhx/44250596245254600000.dat
|
162.241.80.6
|
|
|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://wus2-000.contentsync.
|
unknown
|
|
|
|
http://rzminc.com/fdzgprclatqo/44250601302777800000.dat
|
72.52.227.180
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://wus2-000.pagecontentsync.
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
http://jugueterialatorre.com.ar/xjzpfwc/44250601302777800000.dat
|
138.36.237.100
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://ncus-000.contentsync.
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
|
91.199.212.52
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
http://rzminc.com/xklyulyijvn/44250601302777800000.dat
|
72.52.227.180
|
|
|
|
http://biblicalisraeltours.com/otmchxmxeg/44250596245254600000.dat
|
68.66.216.42
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://jugueterialatorre.com.ar/xjzpfwc/44250596245254600000.dat
|
138.36.237.100
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://rzminc.com/fdzgprclatqo/44250596245254600000.dat
|
72.52.227.180
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://rzminc.com/xklyulyijvn/44250596245254600000.dat
|
72.52.227.180
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
There are 103 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
pathinanchilearthmovers.com
|
162.241.80.6
|
|
|
|
rzminc.com
|
72.52.227.180
|
|
|
|
crt.sectigo.com
|
91.199.212.52
|
|
|
|
jugueterialatorre.com.ar
|
138.36.237.100
|
|
|
|
biblicalisraeltours.com
|
68.66.216.42
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
162.241.80.6
|
unknown
|
United States
|
unknown
|
|
|
|
138.36.237.100
|
unknown
|
Argentina
|
unknown
|
|
|
|
91.199.212.52
|
unknown
|
United Kingdom
|
unknown
|
|
|
|
72.52.227.180
|
unknown
|
United States
|
unknown
|
|
|
|
68.66.216.42
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
-}
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
.}
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A12F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A5D2
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A7D6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A8FF
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A9BA
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
$n
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5B137
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5B34B
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{45
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EBF97
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC1C9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC284
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC34F
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC40A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
6<5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F8630
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F87F5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 173 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
79D000
|
unkown
|
page read and write
|
|
|
|
7FF595C2B000
|
unkown
|
page readonly
|
|
|
|
33B85FD000
|
unkown
|
page read and write
|
|
|
|
30E8000
|
unkown
|
page readonly
|
|
|
|
67D0000
|
unkown
|
page read and write
|
|
|
|
2ED2000
|
unkown
|
page readonly
|
|
|
|
89D90F8000
|
unkown
|
page read and write
|
|
|
|
217AA313000
|
unkown
|
page read and write
|
|
|
|
7FF50015C000
|
unkown
|
page readonly
|
|
|
|
2A0AEAFB000
|
unkown
|
page read and write
|
|
|
|
7FF50289E000
|
unkown
|
page readonly
|
|
|
|
7FF5D1366000
|
unkown
|
page readonly
|
|
|
|
ED0000
|
unkown
|
page readonly
|
|
|
|
2A0AEB1E000
|
unkown
|
page read and write
|
|
|
|
1089000
|
unkown
|
page read and write
|
|
|
|
2184FF86000
|
unkown
|
page read and write
|
|
|
|
2184FCA0000
|
unkown
|
page write copy
|
|
|
|
7FF4FA815000
|
unkown
|
page readonly
|
|
|
|
11BD000
|
unkown
|
page read and write
|
|
|
|
7FF5025FB000
|
unkown
|
page readonly
|
|
|
|
24FD6E02000
|
unkown
|
page read and write
|
|
|
|
30F3000
|
unkown
|
page readonly
|
|
|
|
30E2000
|
unkown
|
page readonly
|
|
|
|
799000
|
unkown
|
page read and write
|
|
|
|
7FF5D148E000
|
unkown
|
page readonly
|
|
|
|
7FF51565C000
|
unkown
|
page readonly
|
|
|
|
2184FF57000
|
unkown
|
page read and write
|
|
|
|
34E0000
|
unkown
|
page readonly
|
|
|
|
11D2000
|
unkown
|
page read and write
|
|
|
|
2184FF4E000
|
unkown
|
page read and write
|
|
|
|
2A0AEAE9000
|
unkown
|
page read and write
|
|
|
|
7FF5958DC000
|
unkown
|
page readonly
|
|
|
|
217AA252000
|
unkown
|
page read and write
|
|
|
|
19B3BBE0000
|
unkown
|
page readonly
|
|
|
|
2184FF4E000
|
unkown
|
page read and write
|
|
|
|
1021000
|
unkown
|
page read and write
|
|
|
|
217AA27C000
|
unkown
|
page read and write
|
|
|
|
7FF5D150A000
|
unkown
|
page readonly
|
|
|
|
123D000
|
unkown
|
page read and write
|
|
|
|
2A0B0B65000
|
unkown
|
page read and write
|
|
|
|
7FF502924000
|
unkown
|
page readonly
|
|
|
|
2A0B1610000
|
unkown
|
page read and write
|
|
|
|
2184F65F000
|
unkown
|
page read and write
|
|
|
|
F20000
|
unkown
|
page read and write
|
|
|
|
7FF515481000
|
unkown
|
page readonly
|
|
|
|
2184FF88000
|
unkown
|
page read and write
|
|
|
|
217AA213000
|
unkown
|
page read and write
|
|
|
|
304F000
|
unkown
|
page readonly
|
|
|
|
2184FF9A000
|
unkown
|
page read and write
|
|
|
|
64D000
|
unkown
|
page read and write
|
|
|
|
7FF4FA495000
|
unkown
|
page readonly
|
|
|
|
7FF5D30AD000
|
unkown
|
page readonly
|
|
|
|
7A2BE7F000
|
unkown
|
page read and write
|
|
|
|
24FD6E6B000
|
unkown
|
page read and write
|
|
|
|
2184F62C000
|
unkown
|
page read and write
|
|
|
|
7FF581CFC000
|
unkown
|
page readonly
|
|
|
|
7FF515583000
|
unkown
|
page readonly
|
|
|
|
11F0000
|
unkown
|
page readonly
|
|
|
|
7FF51561C000
|
unkown
|
page readonly
|
|
|
|
2184FF5E000
|
unkown
|
page read and write
|
|
|
|
7FF581DB4000
|
unkown
|
page readonly
|
|
|
|
300D000
|
unkown
|
page readonly
|
|
|
|
2184FF5E000
|
unkown
|
page read and write
|
|
|
|
7FF4FABEC000
|
unkown
|
page readonly
|
|
|
|
2184FF6E000
|
unkown
|
page read and write
|
|
|
|
2A0AEACC000
|
unkown
|
page read and write
|
|
|
|
2184FFAD000
|
unkown
|
page read and write
|
|
|
|
7FF50292A000
|
unkown
|
page readonly
|
|
|
|
60C636E000
|
unkown
|
page read and write
|
|
|
|
7FF4FA772000
|
unkown
|
page readonly
|
|
|
|
7FF4FAAFE000
|
unkown
|
page readonly
|
|
|
|
2184FFAF000
|
unkown
|
page read and write
|
|
|
|
2FF3000
|
unkown
|
page readonly
|
|
|
|
7FF5D131B000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA51000
|
unkown
|
page readonly
|
|
|
|
2184FF7D000
|
unkown
|
page read and write
|
|
|
|
2A0B0F02000
|
unkown
|
page read and write
|
|
|
|
7FF5CE2D5000
|
unkown
|
page readonly
|
|
|
|
1060000
|
unkown
|
page read and write
|
|
|
|
7FF5D1271000
|
unkown
|
page readonly
|
|
|
|
2184FF57000
|
unkown
|
page read and write
|
|
|
|
60C62EB000
|
unkown
|
page read and write
|
|
|
|
2A0B0920000
|
unkown
|
page readonly
|
|
|
|
7FF50025E000
|
unkown
|
page readonly
|
|
|
|
2A0AEBA0000
|
unkown
|
page read and write
|
|
|
|
7FF5D3251000
|
unkown
|
page readonly
|
|
|
|
3072000
|
unkown
|
page readonly
|
|
|
|
2A0B0B81000
|
unkown
|
page read and write
|
|
|
|
2184FF13000
|
unkown
|
page read and write
|
|
|
|
2A0B09A0000
|
unkown
|
page read and write
|
|
|
|
7FF5CE504000
|
unkown
|
page readonly
|
|
|
|
75E000
|
stack
|
page read and write
|
|
|
|
2184FF57000
|
unkown
|
page read and write
|
|
|
|
21850600000
|
unkown
|
page readonly
|
|
|
|
7FF4FA3EA000
|
unkown
|
page readonly
|
|
|
|
2A0AE9D0000
|
heap default
|
page read and write
|
|
|
|
2184FD30000
|
unkown
|
page readonly
|
|
|
|
2A0AEA68000
|
unkown
|
page read and write
|
|
|
|
2184FF77000
|
unkown
|
page read and write
|
|
|
|
7FF514D0D000
|
unkown
|
page readonly
|
|
|
|
11BD000
|
unkown
|
page read and write
|
|
|
|
7FF500154000
|
unkown
|
page readonly
|
|
|
|
7D702FF000
|
unkown
|
page read and write
|
|
|
|
7FF5000EB000
|
unkown
|
page readonly
|
|
|
|
7FF51562A000
|
unkown
|
page readonly
|
|
|
|
3045000
|
unkown
|
page readonly
|
|
|
|
2184FF7F000
|
unkown
|
page read and write
|
|
|
|
2184FF64000
|
unkown
|
page read and write
|
|
|
|
2A0B1010000
|
unkown
|
page read and write
|
|
|
|
7FF4FF8C7000
|
unkown
|
page readonly
|
|
|
|
2184FF66000
|
unkown
|
page read and write
|
|
|
|
1A297E00000
|
unkown
|
page readonly
|
|
|
|
870000
|
unkown
|
page readonly
|
|
|
|
3330000
|
unkown
|
page readonly
|
|
|
|
217AA257000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB6C000
|
unkown
|
page readonly
|
|
|
|
14C3000
|
unkown
|
page readonly
|
|
|
|
7FF5156A9000
|
unkown
|
page readonly
|
|
|
|
7FF5001EA000
|
unkown
|
page readonly
|
|
|
|
7FF595D12000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA41000
|
unkown
|
page readonly
|
|
|
|
7FF5CE4C7000
|
unkown
|
page readonly
|
|
|
|
2184FF90000
|
unkown
|
page read and write
|
|
|
|
FD7000
|
heap private
|
page read and write
|
|
|
|
5AD0000
|
heap private
|
page read and write
|
|
|
|
7FF5D140C000
|
unkown
|
page readonly
|
|
|
|
9EB000
|
unkown
|
page read and write
|
|
|
|
18971710000
|
heap default
|
page read and write
|
|
|
|
2A0AEAB9000
|
unkown
|
page read and write
|
|
|
|
2F20000
|
unkown
|
page readonly
|
|
|
|
1032000
|
unkown
|
page read and write
|
|
|
|
4AF747F000
|
unkown
|
page read and write
|
|
|
|
305F000
|
unkown
|
page readonly
|
|
|
|
7FF595C8E000
|
unkown
|
page readonly
|
|
|
|
7FF502845000
|
unkown
|
page readonly
|
|
|
|
1130000
|
unkown
|
page read and write
|
|
|
|
3061000
|
unkown
|
page readonly
|
|
|
|
7FF581D3E000
|
unkown
|
page readonly
|
|
|
|
7FF51565F000
|
unkown
|
page readonly
|
|
|
|
1259000
|
unkown
|
page read and write
|
|
|
|
11F0000
|
unkown
|
page readonly
|
|
|
|
1D820802000
|
unkown
|
page read and write
|
|
|
|
10F0000
|
unkown
|
page readonly
|
|
|
|
7FF5D142B000
|
unkown
|
page readonly
|
|
|
|
7A2BF79000
|
unkown
|
page read and write
|
|
|
|
24FD6F00000
|
unkown
|
page read and write
|
|
|
|
2184F5D0000
|
unkown
|
page readonly
|
|
|
|
7FF51562E000
|
unkown
|
page readonly
|
|
|
|
7FF5D31D6000
|
unkown
|
page readonly
|
|
|
|
66C98FE000
|
unkown
|
page read and write
|
|
|
|
217AA4D0000
|
unkown
|
page readonly
|
|
|
|
66C9A7E000
|
unkown
|
page read and write
|
|
|
|
1069000
|
unkown
|
page read and write
|
|
|
|
7FF5959DB000
|
unkown
|
page readonly
|
|
|
|
89D91F8000
|
unkown
|
page read and write
|
|
|
|
7FF5D3244000
|
unkown
|
page readonly
|
|
|
|
1EC5D26B000
|
unkown
|
page read and write
|
|
|
|
DC387FC000
|
unkown
|
page read and write
|
|
|
|
2184FF1A000
|
unkown
|
page read and write
|
|
|
|
2A0AEA5B000
|
unkown
|
page read and write
|
|
|
|
FB0000
|
unkown
|
page read and write
|
|
|
|
1020000
|
unkown
|
page readonly
|
|
|
|
7FF4FA29B000
|
unkown
|
page readonly
|
|
|
|
301C000
|
unkown
|
page readonly
|
|
|
|
2D63000
|
unkown
|
page readonly
|
|
|
|
2184FFD3000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC68000
|
unkown
|
page readonly
|
|
|
|
2A0B0990000
|
unkown
|
page readonly
|
|
|
|
2184F6C3000
|
unkown
|
page read and write
|
|
|
|
12ED000
|
unkown
|
page read and write
|
|
|
|
2184FF1A000
|
unkown
|
page read and write
|
|
|
|
2A0B1310000
|
unkown
|
page read and write
|
|
|
|
7FF581627000
|
unkown
|
page readonly
|
|
|
|
2FF3000
|
unkown
|
page readonly
|
|
|
|
2184FF4F000
|
unkown
|
page read and write
|
|
|
|
79A000
|
unkown
|
page read and write
|
|
|
|
FD0000
|
heap private
|
page read and write
|
|
|
|
DC37F7E000
|
unkown
|
page read and write
|
|
|
|
7FF4FA8D9000
|
unkown
|
page readonly
|
|
|
|
7FF5D324A000
|
unkown
|
page readonly
|
|
|
|
2FE9000
|
unkown
|
page readonly
|
|
|
|
2184FF4E000
|
unkown
|
page read and write
|
|
|
|
2A0AEAAD000
|
unkown
|
page read and write
|
|
|
|
2A0B1010000
|
unkown
|
page read and write
|
|
|
|
7FF5CE391000
|
unkown
|
page readonly
|
|
|
|
787AE9B000
|
unkown
|
page read and write
|
|
|
|
106E000
|
unkown
|
page read and write
|
|
|
|
217AA150000
|
unkown
|
page readonly
|
|
|
|
30D4000
|
unkown
|
page readonly
|
|
|
|
189732F0000
|
unkown
|
page readonly
|
|
|
|
7FF5151F0000
|
unkown
|
page readonly
|
|
|
|
7FF5D1474000
|
unkown
|
page readonly
|
|
|
|
1A297C50000
|
unkown
|
page read and write
|
|
|
|
3072000
|
unkown
|
page readonly
|
|
|
|
2184FF7F000
|
unkown
|
page read and write
|
|
|
|
304F000
|
unkown
|
page readonly
|
|
|
|
21850402000
|
unkown
|
page read and write
|
|
|
|
1EC5D23F000
|
unkown
|
page read and write
|
|
|
|
7FF595D04000
|
unkown
|
page readonly
|
|
|
|
7FF4FA3A5000
|
unkown
|
page readonly
|
|
|
|
7FF5D1499000
|
unkown
|
page readonly
|
|
|
|
7FF4FFDB6000
|
unkown
|
page readonly
|
|
|
|
7FF4FAB08000
|
unkown
|
page readonly
|
|
|
|
66C997A000
|
unkown
|
page read and write
|
|
|
|
7FF50021F000
|
unkown
|
page readonly
|
|
|
|
30C5000
|
unkown
|
page readonly
|
|
|
|
2A0B09A0000
|
unkown
|
page read and write
|
|
|
|
7D7027F000
|
unkown
|
page read and write
|
|
|
|
7FF4FA9C6000
|
unkown
|
page readonly
|
|
|
|
4AF75F9000
|
unkown
|
page read and write
|
|
|
|
1A297C90000
|
unkown
|
page read and write
|
|
|
|
1497000
|
unkown
|
page readonly
|
|
|
|
2184FF21000
|
unkown
|
page read and write
|
|
|
|
2A0B2042000
|
unkown
|
page read and write
|
|
|
|
7FF50250F000
|
unkown
|
page readonly
|
|
|
|
217AA24F000
|
unkown
|
page read and write
|
|
|
|
21850402000
|
unkown
|
page read and write
|
|
|
|
7FF5D1279000
|
unkown
|
page readonly
|
|
|
|
C00000
|
unkown
|
page readonly
|
|
|
|
2FFA000
|
unkown
|
page readonly
|
|
|
|
64A0000
|
unkown
|
page readonly
|
|
|
|
1EC5D26B000
|
unkown
|
page read and write
|
|
|
|
24079510000
|
unkown
|
page readonly
|
|
|
|
2184FF61000
|
unkown
|
page read and write
|
|
|
|
2A0B2042000
|
unkown
|
page read and write
|
|
|
|
7FF502878000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC2F000
|
unkown
|
page readonly
|
|
|
|
4AF71EB000
|
unkown
|
page read and write
|
|
|
|
24FD6C10000
|
heap default
|
page read and write
|
|
|
|
7FF5D1457000
|
unkown
|
page readonly
|
|
|
|
3061000
|
unkown
|
page readonly
|
|
|
|
217AA26F000
|
unkown
|
page read and write
|
|
|
|
2184FF59000
|
unkown
|
page read and write
|
|
|
|
2184FF36000
|
unkown
|
page read and write
|
|
|
|
7FF595A79000
|
unkown
|
page readonly
|
|
|
|
11B5000
|
unkown
|
page read and write
|
|
|
|
217AAA02000
|
unkown
|
page read and write
|
|
|
|
217AA254000
|
unkown
|
page read and write
|
|
|
|
7FF4FAA00000
|
unkown
|
page readonly
|
|
|
|
C3B000
|
stack
|
page read and write
|
|
|
|
11B9000
|
unkown
|
page read and write
|
|
|
|
D70000
|
unkown
|
page read and write
|
|
|
|
7FF5D147E000
|
unkown
|
page readonly
|
|
|
|
11BE000
|
unkown
|
page read and write
|
|
|
|
3053000
|
unkown
|
page readonly
|
|
|
|
7FF4FABD4000
|
unkown
|
page readonly
|
|
|
|
301C000
|
unkown
|
page readonly
|
|
|
|
1EC5D060000
|
heap default
|
page read and write
|
|
|
|
89D8A7E000
|
unkown
|
page read and write
|
|
|
|
101E000
|
unkown
|
page read and write
|
|
|
|
2A0B1410000
|
unkown
|
page read and write
|
|
|
|
2184FD20000
|
unkown
|
page read and write
|
|
|
|
302C000
|
unkown
|
page readonly
|
|
|
|
3330000
|
unkown
|
page readonly
|
|
|
|
6340000
|
unkown
|
page read and write
|
|
|
|
7FF5958EA000
|
unkown
|
page readonly
|
|
|
|
7FF5D30B3000
|
unkown
|
page readonly
|
|
|
|
1A297C4D000
|
unkown
|
page read and write
|
|
|
|
217AA400000
|
unkown
|
page readonly
|
|
|
|
1EC5D000000
|
heap private
|
page read and write
|
|
|
|
7FF50024F000
|
unkown
|
page readonly
|
|
|
|
307B000
|
unkown
|
page readonly
|
|
|
|
7FF5D1261000
|
unkown
|
page readonly
|
|
|
|
2184FF84000
|
unkown
|
page read and write
|
|
|
|
7FF5D316B000
|
unkown
|
page readonly
|
|
|
|
2A0B1510000
|
unkown
|
page read and write
|
|
|
|
DC385FB000
|
unkown
|
page read and write
|
|
|
|
60C687E000
|
unkown
|
page read and write
|
|
|
|
7FF4FABFE000
|
unkown
|
page readonly
|
|
|
|
7FF4FFECA000
|
unkown
|
page readonly
|
|
|
|
2184FF68000
|
unkown
|
page read and write
|
|
|
|
345A000
|
heap private
|
page read and write
|
|
|
|
7FF5D2D26000
|
unkown
|
page readonly
|
|
|
|
123A000
|
unkown
|
page read and write
|
|
|
|
305F000
|
unkown
|
page readonly
|
|
|
|
1A297C29000
|
unkown
|
page read and write
|
|
|
|
7FF5D31D9000
|
unkown
|
page readonly
|
|
|
|
24079440000
|
unkown
|
page readonly
|
|
|
|
7FF5D1437000
|
unkown
|
page readonly
|
|
|
|
7FF5D31C8000
|
unkown
|
page readonly
|
|
|
|
7FF5D3041000
|
unkown
|
page readonly
|
|
|
|
7FF5D3003000
|
unkown
|
page readonly
|
|
|
|
24079708000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB03000
|
unkown
|
page readonly
|
|
|
|
2ED2000
|
unkown
|
page readonly
|
|
|
|
DDE000
|
unkown
|
page read and write
|
|
|
|
787B577000
|
unkown
|
page read and write
|
|
|
|
3039000
|
unkown
|
page readonly
|
|
|
|
7D705F7000
|
unkown
|
page read and write
|
|
|
|
217AA302000
|
unkown
|
page read and write
|
|
|
|
2A0B1110000
|
unkown
|
page read and write
|
|
|
|
18971834000
|
unkown
|
page read and write
|
|
|
|
7FF4FA762000
|
unkown
|
page readonly
|
|
|
|
24FD6D40000
|
unkown
|
page readonly
|
|
|
|
217AA258000
|
unkown
|
page read and write
|
|
|
|
7FF5153A7000
|
unkown
|
page readonly
|
|
|
|
7FF5CE4B0000
|
unkown
|
page readonly
|
|
|
|
3053000
|
unkown
|
page readonly
|
|
|
|
7FF595BC2000
|
unkown
|
page readonly
|
|
|
|
7FF4FA077000
|
unkown
|
page readonly
|
|
|
|
1D8206D0000
|
unkown
|
page readonly
|
|
|
|
2184F5E0000
|
unkown
|
page readonly
|
|
|
|
1040000
|
heap default
|
page read and write
|
|
|
|
7FF4FA39A000
|
unkown
|
page readonly
|
|
|
|
7FF5D31DD000
|
unkown
|
page readonly
|
|
|
|
106A000
|
unkown
|
page read and write
|
|
|
|
6490000
|
unkown
|
page readonly
|
|
|
|
2184FF56000
|
unkown
|
page read and write
|
|
|
|
2A0B0BAE000
|
unkown
|
page read and write
|
|
|
|
6090000
|
unkown
|
page readonly
|
|
|
|
7FF5CE4F4000
|
unkown
|
page readonly
|
|
|
|
7FF5958F7000
|
unkown
|
page readonly
|
|
|
|
217AA308000
|
unkown
|
page read and write
|
|
|
|
7FF4FA416000
|
unkown
|
page readonly
|
|
|
|
7FF4FABFA000
|
unkown
|
page readonly
|
|
|
|
11B9000
|
unkown
|
page read and write
|
|
|
|
7FF51569E000
|
unkown
|
page readonly
|
|
|
|
11A0000
|
heap private
|
page read and write
|
|
|
|
2A0AEAFB000
|
unkown
|
page read and write
|
|
|
|
217AA259000
|
unkown
|
page read and write
|
|
|
|
7FF5D318F000
|
unkown
|
page readonly
|
|
|
|
63E0000
|
heap private
|
page read and write
|
|
|
|
7FF5D1420000
|
unkown
|
page readonly
|
|
|
|
7FF5D13F4000
|
unkown
|
page readonly
|
|
|
|
1069000
|
unkown
|
page read and write
|
|
|
|
3420000
|
unkown
|
page read and write
|
|
|
|
24079800000
|
unkown
|
page readonly
|
|
|
|
3030000
|
unkown
|
page readonly
|
|
|
|
2A0B2102000
|
unkown
|
page read and write
|
|
|
|
2A0AEABA000
|
unkown
|
page read and write
|
|
|
|
305F000
|
unkown
|
page readonly
|
|
|
|
2184FF77000
|
unkown
|
page read and write
|
|
|
|
2FFA000
|
unkown
|
page readonly
|
|
|
|
2184FF1A000
|
unkown
|
page read and write
|
|
|
|
7FF5002E2000
|
unkown
|
page readonly
|
|
|
|
19B3B9CE000
|
unkown
|
page read and write
|
|
|
|
787B2F5000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC79000
|
unkown
|
page readonly
|
|
|
|
1065000
|
unkown
|
page read and write
|
|
|
|
7FF50286C000
|
unkown
|
page readonly
|
|
|
|
7FF4FAAFB000
|
unkown
|
page readonly
|
|
|
|
2184FFA4000
|
unkown
|
page read and write
|
|
|
|
10AE000
|
unkown
|
page read and write
|
|
|
|
217AA130000
|
heap default
|
page read and write
|
|
|
|
7FF4FA553000
|
unkown
|
page readonly
|
|
|
|
24FD6E13000
|
unkown
|
page read and write
|
|
|
|
7FF595C20000
|
unkown
|
page readonly
|
|
|
|
7FF581DC2000
|
unkown
|
page readonly
|
|
|
|
11B5000
|
unkown
|
page read and write
|
|
|
|
2FE9000
|
unkown
|
page readonly
|
|
|
|
79CB0FF000
|
unkown
|
page read and write
|
|
|
|
2184FF62000
|
unkown
|
page read and write
|
|
|
|
6510000
|
unkown
|
page read and write
|
|
|
|
30F3000
|
unkown
|
page readonly
|
|
|
|
24FD6CF0000
|
unkown
|
page write copy
|
|
|
|
1259000
|
unkown
|
page read and write
|
|
|
|
24079679000
|
unkown
|
page read and write
|
|
|
|
2184FF7A000
|
unkown
|
page read and write
|
|
|
|
7FF5D1496000
|
unkown
|
page readonly
|
|
|
|
2A0B09B0000
|
unkown
|
page read and write
|
|
|
|
BCF000
|
unkown
|
page read and write
|
|
|
|
7FF5151F6000
|
unkown
|
page readonly
|
|
|
|
E50000
|
unkown
|
page readonly
|
|
|
|
302C000
|
unkown
|
page readonly
|
|
|
|
7FF5CE5A1000
|
unkown
|
page readonly
|
|
|
|
7FF4FABCF000
|
unkown
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
3030000
|
unkown
|
page readonly
|
|
|
|
FA0000
|
unkown
|
page readonly
|
|
|
|
7FF5D13C0000
|
unkown
|
page readonly
|
|
|
|
7FF500207000
|
unkown
|
page readonly
|
|
|
|
7FF4FA06F000
|
unkown
|
page readonly
|
|
|
|
1252000
|
unkown
|
page read and write
|
|
|
|
1D820900000
|
unkown
|
page read and write
|
|
|
|
7FF515205000
|
unkown
|
page readonly
|
|
|
|
2FE9000
|
unkown
|
page readonly
|
|
|
|
2A0AED20000
|
unkown
|
page readonly
|
|
|
|
2184FF7F000
|
unkown
|
page read and write
|
|
|
|
2A0AEA5F000
|
unkown
|
page read and write
|
|
|
|
1EC5EBA0000
|
unkown
|
page read and write
|
|
|
|
66C9AF9000
|
unkown
|
page read and write
|
|
|
|
1210000
|
heap default
|
page read and write
|
|
|
|
7FF5CE51E000
|
unkown
|
page readonly
|
|
|
|
19B3BAA0000
|
unkown
|
page readonly
|
|
|
|
11AA000
|
heap private
|
page read and write
|
|
|
|
302C000
|
unkown
|
page readonly
|
|
|
|
7D704FB000
|
unkown
|
page read and write
|
|
|
|
7FF4FA3CF000
|
unkown
|
page readonly
|
|
|
|
7FF595A45000
|
unkown
|
page readonly
|
|
|
|
7FF5D146A000
|
unkown
|
page readonly
|
|
|
|
2FF3000
|
unkown
|
page readonly
|
|
|
|
1D820A00000
|
unkown
|
page readonly
|
|
|
|
7FF50209D000
|
unkown
|
page readonly
|
|
|
|
2EDE000
|
unkown
|
page readonly
|
|
|
|
2184FF60000
|
unkown
|
page read and write
|
|
|
|
7FF595A41000
|
unkown
|
page readonly
|
|
|
|
7FF5D1464000
|
unkown
|
page readonly
|
|
|
|
66C99F9000
|
unkown
|
page read and write
|
|
|
|
2A0B1110000
|
unkown
|
page read and write
|
|
|
|
2CEE000
|
unkown
|
page readonly
|
|
|
|
2FE9000
|
unkown
|
page readonly
|
|
|
|
68E000
|
stack
|
page read and write
|
|
|
|
217AA245000
|
unkown
|
page read and write
|
|
|
|
2D63000
|
unkown
|
page readonly
|
|
|
|
633E000
|
stack
|
page read and write
|
|
|
|
7FF581623000
|
unkown
|
page readonly
|
|
|
|
FB0000
|
unkown
|
page read and write
|
|
|
|
1EC5D26B000
|
unkown
|
page read and write
|
|
|
|
30C5000
|
unkown
|
page readonly
|
|
|
|
2A0AEB5F000
|
unkown
|
page read and write
|
|
|
|
24FD88A0000
|
unkown
|
page readonly
|
|
|
|
3039000
|
unkown
|
page readonly
|
|
|
|
7FF515698000
|
unkown
|
page readonly
|
|
|
|
106D000
|
unkown
|
page read and write
|
|
|
|
2A0AEABA000
|
unkown
|
page read and write
|
|
|
|
79CB2FF000
|
unkown
|
page read and write
|
|
|
|
7FF4FF8CD000
|
unkown
|
page readonly
|
|
|
|
34D0000
|
heap private
|
page read and write
|
|
|
|
7FF581DBA000
|
unkown
|
page readonly
|
|
|
|
11C0000
|
unkown
|
page readonly
|
|
|
|
2184FF4D000
|
unkown
|
page read and write
|
|
|
|
2184FF36000
|
unkown
|
page read and write
|
|
|
|
2A0B0BE0000
|
unkown
|
page read and write
|
|
|
|
7FF4FA817000
|
unkown
|
page readonly
|
|
|
|
2407963C000
|
unkown
|
page read and write
|
|
|
|
7FF595C9D000
|
unkown
|
page readonly
|
|
|
|
19B3B9CE000
|
unkown
|
page read and write
|
|
|
|
24079B90000
|
unkown
|
page read and write
|
|
|
|
7FF4FA2A8000
|
unkown
|
page readonly
|
|
|
|
2EDE000
|
unkown
|
page readonly
|
|
|
|
2184FF57000
|
unkown
|
page read and write
|
|
|
|
101E000
|
unkown
|
page read and write
|
|
|
|
7B9000
|
unkown
|
page read and write
|
|
|
|
7FF5D1488000
|
unkown
|
page readonly
|
|
|
|
7FF500266000
|
unkown
|
page readonly
|
|
|
|
7FF5028BD000
|
unkown
|
page readonly
|
|
|
|
7D6FFBB000
|
unkown
|
page read and write
|
|
|
|
7FF4FACEA000
|
unkown
|
page readonly
|
|
|
|
304F000
|
unkown
|
page readonly
|
|
|
|
119A000
|
heap default
|
page read and write
|
|
|
|
7FF595B1B000
|
unkown
|
page readonly
|
|
|
|
7FF5D3197000
|
unkown
|
page readonly
|
|
|
|
2A0B0B91000
|
unkown
|
page read and write
|
|
|
|
2184FF75000
|
unkown
|
page read and write
|
|
|
|
5E20000
|
unkown
|
page read and write
|
|
|
|
3045000
|
unkown
|
page readonly
|
|
|
|
7FF4FABDF000
|
unkown
|
page readonly
|
|
|
|
7FF581D38000
|
unkown
|
page readonly
|
|
|
|
21850400000
|
unkown
|
page read and write
|
|
|
|
2184FF53000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown
|
page readonly
|
|
|
|
2407A140000
|
unkown
|
page readonly
|
|
|
|
2184FF5E000
|
unkown
|
page read and write
|
|
|
|
7FF5D2D35000
|
unkown
|
page readonly
|
|
|
|
2A0B0B72000
|
unkown
|
page read and write
|
|
|
|
7FF5D141A000
|
unkown
|
page readonly
|
|
|
|
3045000
|
unkown
|
page readonly
|
|
|
|
2184F702000
|
unkown
|
page read and write
|
|
|
|
2184FD00000
|
unkown
|
page readonly
|
|
|
|
FAE000
|
unkown
|
page read and write
|
|
|
|
2D63000
|
unkown
|
page readonly
|
|
|
|
7FF5D1511000
|
unkown
|
page readonly
|
|
|
|
D80000
|
unkown
|
page readonly
|
|
|
|
7FF4FACE4000
|
unkown
|
page readonly
|
|
|
|
7FF5156A6000
|
unkown
|
page readonly
|
|
|
|
2A0B0B13000
|
unkown
|
page read and write
|
|
|
|
2184FF68000
|
unkown
|
page read and write
|
|
|
|
30D4000
|
unkown
|
page readonly
|
|
|
|
18971902000
|
unkown
|
page read and write
|
|
|
|
787AF1E000
|
unkown
|
page read and write
|
|
|
|
301C000
|
unkown
|
page readonly
|
|
|
|
30D4000
|
unkown
|
page readonly
|
|
|
|
1110000
|
unkown
|
page readonly
|
|
|
|
7FF502857000
|
unkown
|
page readonly
|
|
|
|
189717F0000
|
unkown
|
page readonly
|
|
|
|
3076000
|
unkown
|
page readonly
|
|
|
|
7FF4FA3CC000
|
unkown
|
page readonly
|
|
|
|
1D820902000
|
unkown
|
page read and write
|
|
|
|
DC3897F000
|
unkown
|
page read and write
|
|
|
|
118E000
|
unkown
|
page read and write
|
|
|
|
2184FF56000
|
unkown
|
page read and write
|
|
|
|
2184FFD7000
|
unkown
|
page read and write
|
|
|
|
302C000
|
unkown
|
page readonly
|
|
|
|
3047000
|
unkown
|
page readonly
|
|
|
|
7FF502661000
|
unkown
|
page readonly
|
|
|
|
1039000
|
unkown
|
page read and write
|
|
|
|
DC37EFE000
|
unkown
|
page read and write
|
|
|
|
2A0AEAFB000
|
unkown
|
page read and write
|
|
|
|
1D820913000
|
unkown
|
page read and write
|
|
|
|
1A297D00000
|
unkown
|
page read and write
|
|
|
|
3015000
|
unkown
|
page readonly
|
|
|
|
2A0B0F82000
|
unkown
|
page read and write
|
|
|
|
24079685000
|
unkown
|
page read and write
|
|
|
|
121A000
|
heap default
|
page read and write
|
|
|
|
79CB17E000
|
unkown
|
page read and write
|
|
|
|
7FF514D07000
|
unkown
|
page readonly
|
|
|
|
7FF4FA41D000
|
unkown
|
page readonly
|
|
|
|
79D000
|
unkown
|
page read and write
|
|
|
|
79E000
|
unkown
|
page read and write
|
|
|
|
2184FF7D000
|
unkown
|
page read and write
|
|
|
|
7FF515714000
|
unkown
|
page readonly
|
|
|
|
2FF3000
|
unkown
|
page readonly
|
|
|
|
648E000
|
stack
|
page read and write
|
|
|
|
2184FF96000
|
unkown
|
page read and write
|
|
|
|
7FF5D318C000
|
unkown
|
page readonly
|
|
|
|
4AF757A000
|
unkown
|
page read and write
|
|
|
|
1D820829000
|
unkown
|
page read and write
|
|
|
|
6150000
|
unkown
|
page readonly
|
|
|
|
7FF5002D4000
|
unkown
|
page readonly
|
|
|
|
11D9000
|
unkown
|
page read and write
|
|
|
|
6770000
|
unkown
|
page read and write
|
|
|
|
F9E000
|
stack
|
page read and write
|
|
|
|
2A0AEABA000
|
unkown
|
page read and write
|
|
|
|
7FF4FA9BB000
|
unkown
|
page readonly
|
|
|
|
5990000
|
unkown
|
page read and write
|
|
|
|
7FF51557D000
|
unkown
|
page readonly
|
|
|
|
7FF5D3177000
|
unkown
|
page readonly
|
|
|
|
24FD6E6B000
|
unkown
|
page read and write
|
|
|
|
7FF4FA281000
|
unkown
|
page readonly
|
|
|
|
1015000
|
unkown
|
page read and write
|
|
|
|
EBC000
|
unkown
|
page read and write
|
|
|
|
30F3000
|
unkown
|
page readonly
|
|
|
|
7FF5CDD0D000
|
unkown
|
page readonly
|
|
|
|
30C5000
|
unkown
|
page readonly
|
|
|
|
7FF5D3165000
|
unkown
|
page readonly
|
|
|
|
3023000
|
unkown
|
page readonly
|
|
|
|
D90000
|
unkown
|
page readonly
|
|
|
|
1D8207A0000
|
unkown
|
page write copy
|
|
|
|
24079650000
|
unkown
|
page read and write
|
|
|
|
787B77F000
|
unkown
|
page read and write
|
|
|
|
301C000
|
unkown
|
page readonly
|
|
|
|
7FF595C1E000
|
unkown
|
page readonly
|
|
|
|
2F20000
|
unkown
|
page readonly
|
|
|
|
2A0B0B58000
|
unkown
|
page read and write
|
|
|
|
307B000
|
unkown
|
page readonly
|
|
|
|
2184FF64000
|
unkown
|
page read and write
|
|
|
|
63F0000
|
unkown
|
page readonly
|
|
|
|
2184FF45000
|
unkown
|
page read and write
|
|
|
|
11D9000
|
unkown
|
page read and write
|
|
|
|
2184F662000
|
unkown
|
page read and write
|
|
|
|
7FF515594000
|
unkown
|
page readonly
|
|
|
|
7FF50283E000
|
unkown
|
page readonly
|
|
|
|
89D8E7E000
|
unkown
|
page read and write
|
|
|
|
1D820854000
|
unkown
|
page read and write
|
|
|
|
11EE000
|
stack
|
page read and write
|
|
|
|
2A0AEA55000
|
unkown
|
page read and write
|
|
|
|
7FF5D31AA000
|
unkown
|
page readonly
|
|
|
|
1A298600000
|
unkown
|
page readonly
|
|
|
|
DC384FA000
|
unkown
|
page read and write
|
|
|
|
304D000
|
unkown
|
page readonly
|
|
|
|
7FF5D315E000
|
unkown
|
page readonly
|
|
|
|
7FF5001F5000
|
unkown
|
page readonly
|
|
|
|
24079700000
|
unkown
|
page read and write
|
|
|
|
2184FF86000
|
unkown
|
page read and write
|
|
|
|
7FF5D1256000
|
unkown
|
page readonly
|
|
|
|
60C6B7F000
|
unkown
|
page read and write
|
|
|
|
7FF50250A000
|
unkown
|
page readonly
|
|
|
|
3047000
|
unkown
|
page readonly
|
|
|
|
2A0AEADE000
|
unkown
|
page read and write
|
|
|
|
7FF51568F000
|
unkown
|
page readonly
|
|
|
|
2184FF54000
|
unkown
|
page read and write
|
|
|
|
89D8C78000
|
unkown
|
page read and write
|
|
|
|
6860000
|
unkown
|
page read and write
|
|
|
|
7FF4FA419000
|
unkown
|
page readonly
|
|
|
|
30F3000
|
unkown
|
page readonly
|
|
|
|
6D0000
|
unkown
|
page read and write
|
|
|
|
7FF5CE4FA000
|
unkown
|
page readonly
|
|
|
|
DC3867A000
|
unkown
|
page read and write
|
|
|
|
19B3BBD5000
|
heap private
|
page read and write
|
|
|
|
2CEE000
|
unkown
|
page readonly
|
|
|
|
7FF581D4D000
|
unkown
|
page readonly
|
|
|
|
787AF9E000
|
unkown
|
page read and write
|
|
|
|
2184FF5E000
|
unkown
|
page read and write
|
|
|
|
304D000
|
unkown
|
page readonly
|
|
|
|
3053000
|
unkown
|
page readonly
|
|
|
|
7FF581D14000
|
unkown
|
page readonly
|
|
|
|
305F000
|
unkown
|
page readonly
|
|
|
|
DC380FF000
|
unkown
|
page read and write
|
|
|
|
3076000
|
unkown
|
page readonly
|
|
|
|
7FF581D08000
|
unkown
|
page readonly
|
|
|
|
DC3807A000
|
unkown
|
page read and write
|
|
|
|
7FF5CE4AA000
|
unkown
|
page readonly
|
|
|
|
2A0AECD0000
|
unkown
|
page write copy
|
|
|
|
2A0B1310000
|
unkown
|
page read and write
|
|
|
|
101D000
|
unkown
|
page read and write
|
|
|
|
1235000
|
unkown
|
page read and write
|
|
|
|
7FF5D31CE000
|
unkown
|
page readonly
|
|
|
|
DC382FA000
|
unkown
|
page read and write
|
|
|
|
2A0B0B00000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
heap default
|
page read and write
|
|
|
|
D0B000
|
stack
|
page read and write
|
|
|
|
2184FF5E000
|
unkown
|
page read and write
|
|
|
|
24FD6F02000
|
unkown
|
page read and write
|
|
|
|
1019000
|
unkown
|
page read and write
|
|
|
|
79D000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAA3000
|
unkown
|
page readonly
|
|
|
|
24FD6E6B000
|
unkown
|
page read and write
|
|
|
|
60C67FB000
|
unkown
|
page read and write
|
|
|
|
2A0AEABA000
|
unkown
|
page read and write
|
|
|
|
2184FF4E000
|
unkown
|
page read and write
|
|
|
|
217AA28D000
|
unkown
|
page read and write
|
|
|
|
33B8479000
|
unkown
|
page read and write
|
|
|
|
4AD0000
|
unkown
|
page readonly
|
|
|
|
7FF4FA3FE000
|
unkown
|
page readonly
|
|
|
|
79D000
|
unkown
|
page read and write
|
|
|
|
7FF581D2E000
|
unkown
|
page readonly
|
|
|
|
33B81FE000
|
unkown
|
page read and write
|
|
|
|
217AA288000
|
unkown
|
page read and write
|
|
|
|
1200000
|
unkown
|
page read and write
|
|
|
|
19B3BBD0000
|
heap private
|
page read and write
|
|
|
|
1A297C3C000
|
unkown
|
page read and write
|
|
|
|
3457000
|
heap private
|
page read and write
|
|
|
|
DC37FFA000
|
unkown
|
page read and write
|
|
|
|
2F20000
|
unkown
|
page readonly
|
|
|
|
7FF4FA340000
|
unkown
|
page readonly
|
|
|
|
2184FF4E000
|
unkown
|
page read and write
|
|
|
|
DC3827A000
|
unkown
|
page read and write
|
|
|
|
11BD000
|
unkown
|
page read and write
|
|
|
|
7FF500093000
|
unkown
|
page readonly
|
|
|
|
7FF515630000
|
unkown
|
page readonly
|
|
|
|
1D8207F0000
|
unkown
|
page readonly
|
|
|
|
79E000
|
unkown
|
page read and write
|
|
|
|
7FF5CE59A000
|
unkown
|
page readonly
|
|
|
|
24FD6E6B000
|
unkown
|
page read and write
|
|
|
|
33B817E000
|
unkown
|
page read and write
|
|
|
|
7FF5CE4E8000
|
unkown
|
page readonly
|
|
|
|
3061000
|
unkown
|
page readonly
|
|
|
|
7FF581D24000
|
unkown
|
page readonly
|
|
|
|
24FD6E6B000
|
unkown
|
page read and write
|
|
|
|
217AA160000
|
unkown
|
page read and write
|
|
|
|
2184FF34000
|
unkown
|
page read and write
|
|
|
|
7FF595BE3000
|
unkown
|
page readonly
|
|
|
|
7D703F5000
|
unkown
|
page read and write
|
|
|
|
7FF4FA1F9000
|
unkown
|
page readonly
|
|
|
|
2F20000
|
unkown
|
page readonly
|
|
|
|
217AAF40000
|
unkown
|
page readonly
|
|
|
|
7A2BEFF000
|
unkown
|
page read and write
|
|
|
|
1EC5D253000
|
unkown
|
page read and write
|
|
|
|
1089000
|
unkown
|
page read and write
|
|
|
|
7FF5D1254000
|
unkown
|
page readonly
|
|
|
|
2184F4F0000
|
heap default
|
page read and write
|
|
|
|
2A0B0BA2000
|
unkown
|
page read and write
|
|
|
|
30E2000
|
unkown
|
page readonly
|
|
|
|
7FF4FA3F4000
|
unkown
|
page readonly
|
|
|
|
24FD6E6B000
|
unkown
|
page read and write
|
|
|
|
7FF515674000
|
unkown
|
page readonly
|
|
|
|
7FF500258000
|
unkown
|
page readonly
|
|
|
|
2184FF37000
|
unkown
|
page read and write
|
|
|
|
7FF5D0C7D000
|
unkown
|
page readonly
|
|
|
|
EC0000
|
unkown
|
page readonly
|
|
|
|
7FF4FA2A3000
|
unkown
|
page readonly
|
|
|
|
1A298280000
|
unkown
|
page read and write
|
|
|
|
6444000
|
heap private
|
page read and write
|
|
|
|
2A0B0F42000
|
unkown
|
page read and write
|
|
|
|
2184F6A6000
|
unkown
|
page read and write
|
|
|
|
7FF5D1328000
|
unkown
|
page readonly
|
|
|
|
1239000
|
unkown
|
page read and write
|
|
|
|
1071000
|
unkown
|
page read and write
|
|
|
|
7FF5CE4B5000
|
unkown
|
page readonly
|
|
|
|
2A0B1510000
|
unkown
|
page read and write
|
|
|
|
123E000
|
unkown
|
page read and write
|
|
|
|
795000
|
unkown
|
page read and write
|
|
|
|
1239000
|
unkown
|
page read and write
|
|
|
|
1D820660000
|
heap private
|
page read and write
|
|
|
|
305A000
|
unkown
|
page readonly
|
|
|
|
2184FF9A000
|
unkown
|
page read and write
|
|
|
|
12CE000
|
stack
|
page read and write
|
|
|
|
1A297B30000
|
unkown
|
page readonly
|
|
|
|
103E000
|
stack
|
page read and write
|
|
|
|
2A0B0E32000
|
unkown
|
page read and write
|
|
|
|
DC381FA000
|
unkown
|
page read and write
|
|
|
|
1D8221B0000
|
unkown
|
page read and write
|
|
|
|
7FF581565000
|
unkown
|
page readonly
|
|
|
|
3039000
|
unkown
|
page readonly
|
|
|
|
89D87EE000
|
unkown
|
page read and write
|
|
|
|
2A0B0C00000
|
unkown
|
page readonly
|
|
|
|
7FF4FA491000
|
unkown
|
page readonly
|
|
|
|
2184F665000
|
unkown
|
page read and write
|
|
|
|
DEE000
|
unkown
|
page read and write
|
|
|
|
24FD6F13000
|
unkown
|
page read and write
|
|
|
|
7FF595C4C000
|
unkown
|
page readonly
|
|
|
|
77A000
|
heap default
|
page read and write
|
|
|
|
30E8000
|
unkown
|
page readonly
|
|
|
|
2184FF66000
|
unkown
|
page read and write
|
|
|
|
24FD6E6B000
|
unkown
|
page read and write
|
|
|
|
2A0B09D0000
|
unkown
|
page read and write
|
|
|
|
7FF5CE2D1000
|
unkown
|
page readonly
|
|
|
|
7FF5D10EF000
|
unkown
|
page readonly
|
|
|
|
FDA000
|
heap private
|
page read and write
|
|
|
|
7FF4FA3A0000
|
unkown
|
page readonly
|
|
|
|
2A0B0B28000
|
unkown
|
page read and write
|
|
|
|
2A0AEA57000
|
unkown
|
page read and write
|
|
|
|
2A0B0E43000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAAA000
|
unkown
|
page readonly
|
|
|
|
7FF4FA492000
|
unkown
|
page readonly
|
|
|
|
21850402000
|
unkown
|
page read and write
|
|
|
|
7FF5CE4AE000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC4A000
|
unkown
|
page readonly
|
|
|
|
DAC000
|
unkown
|
page read and write
|
|
|
|
7FF595C99000
|
unkown
|
page readonly
|
|
|
|
2D63000
|
unkown
|
page readonly
|
|
|
|
7FF4FFDC5000
|
unkown
|
page readonly
|
|
|
|
2184FF90000
|
unkown
|
page read and write
|
|
|
|
11BD000
|
unkown
|
page read and write
|
|
|
|
7FF4FA3B7000
|
unkown
|
page readonly
|
|
|
|
7FF51530A000
|
unkown
|
page readonly
|
|
|
|
7FF4FA501000
|
unkown
|
page readonly
|
|
|
|
2A0B1610000
|
unkown
|
page read and write
|
|
|
|
7FF51571A000
|
unkown
|
page readonly
|
|
|
|
33B857F000
|
unkown
|
page read and write
|
|
|
|
2A0AEACC000
|
unkown
|
page read and write
|
|
|
|
6CA000
|
heap private
|
page read and write
|
|
|
|
3047000
|
unkown
|
page readonly
|
|
|
|
6C0000
|
heap private
|
page read and write
|
|
|
|
2184FF84000
|
unkown
|
page read and write
|
|
|
|
7FF5CE529000
|
unkown
|
page readonly
|
|
|
|
2184FF5C000
|
unkown
|
page read and write
|
|
|
|
2A0B0BBB000
|
unkown
|
page read and write
|
|
|
|
1EC5D26B000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDB0000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC17000
|
unkown
|
page readonly
|
|
|
|
7FF5D283D000
|
unkown
|
page readonly
|
|
|
|
2A0AE970000
|
heap private
|
page read and write
|
|
|
|
30D4000
|
unkown
|
page readonly
|
|
|
|
2A0AEB14000
|
unkown
|
page read and write
|
|
|
|
7FF581CDB000
|
unkown
|
page readonly
|
|
|
|
2A0AEA00000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB4D000
|
unkown
|
page readonly
|
|
|
|
217AAC00000
|
unkown
|
page readonly
|
|
|
|
7FF502894000
|
unkown
|
page readonly
|
|
|
|
1EC5D070000
|
unkown
|
page readonly
|
|
|
|
3330000
|
unkown
|
page readonly
|
|
|
|
1082000
|
unkown
|
page read and write
|
|
|
|
7FF5000EE000
|
unkown
|
page readonly
|
|
|
|
3061000
|
unkown
|
page readonly
|
|
|
|
123D000
|
unkown
|
page read and write
|
|
|
|
7FF5D30CC000
|
unkown
|
page readonly
|
|
|
|
F40000
|
unkown
|
page readonly
|
|
|
|
7FF581CFF000
|
unkown
|
page readonly
|
|
|
|
1EC5D140000
|
unkown
|
page write copy
|
|
|
|
2A0AEB60000
|
unkown
|
page read and write
|
|
|
|
2184FF5E000
|
unkown
|
page read and write
|
|
|
|
101A000
|
unkown
|
page read and write
|
|
|
|
7FF595C74000
|
unkown
|
page readonly
|
|
|
|
2184FF57000
|
unkown
|
page read and write
|
|
|
|
2184F629000
|
unkown
|
page read and write
|
|
|
|
7FF595B23000
|
unkown
|
page readonly
|
|
|
|
305A000
|
unkown
|
page readonly
|
|
|
|
7FF595C88000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC54000
|
unkown
|
page readonly
|
|
|
|
63D3000
|
heap private
|
page read and write
|
|
|
|
7FF581D1A000
|
unkown
|
page readonly
|
|
|
|
2FFA000
|
unkown
|
page readonly
|
|
|
|
7FF5D3160000
|
unkown
|
page readonly
|
|
|
|
2A0AEAF6000
|
unkown
|
page read and write
|
|
|
|
217AA272000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB64000
|
unkown
|
page readonly
|
|
|
|
2A0B0E12000
|
unkown
|
page read and write
|
|
|
|
304D000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC76000
|
unkown
|
page readonly
|
|
|
|
3015000
|
unkown
|
page readonly
|
|
|
|
1069000
|
unkown
|
page read and write
|
|
|
|
2EDE000
|
unkown
|
page readonly
|
|
|
|
7FF5CE4DF000
|
unkown
|
page readonly
|
|
|
|
7FF4FA484000
|
unkown
|
page readonly
|
|
|
|
2FFA000
|
unkown
|
page readonly
|
|
|
|
2184FFC0000
|
unkown
|
page read and write
|
|
|
|
7FF4FA363000
|
unkown
|
page readonly
|
|
|
|
1039000
|
unkown
|
page read and write
|
|
|
|
1A297B20000
|
heap default
|
page read and write
|
|
|
|
5AD4000
|
heap private
|
page read and write
|
|
|
|
7FF5028A8000
|
unkown
|
page readonly
|
|
|
|
1A297D13000
|
unkown
|
page read and write
|
|
|
|
2A0AEACD000
|
unkown
|
page read and write
|
|
|
|
24FD6E3F000
|
unkown
|
page read and write
|
|
|
|
2184FF56000
|
unkown
|
page read and write
|
|
|
|
7FF581D49000
|
unkown
|
page readonly
|
|
|
|
FFA000
|
heap default
|
page read and write
|
|
|
|
1A297C13000
|
unkown
|
page read and write
|
|
|
|
30E2000
|
unkown
|
page readonly
|
|
|
|
240793D0000
|
heap private
|
page read and write
|
|
|
|
7FF5D11F8000
|
unkown
|
page readonly
|
|
|
|
217AA255000
|
unkown
|
page read and write
|
|
|
|
2184FD10000
|
unkown
|
page read and write
|
|
|
|
7FF5001FB000
|
unkown
|
page readonly
|
|
|
|
7FF50023A000
|
unkown
|
page readonly
|
|
|
|
7FF502699000
|
unkown
|
page readonly
|
|
|
|
1EC5ECA0000
|
unkown
|
page readonly
|
|
|
|
7FF4FA3AB000
|
unkown
|
page readonly
|
|
|
|
7FF5D13B2000
|
unkown
|
page readonly
|
|
|
|
7FF5028B9000
|
unkown
|
page readonly
|
|
|
|
123D000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC44000
|
unkown
|
page readonly
|
|
|
|
2184FF57000
|
unkown
|
page read and write
|
|
|
|
7FF51552E000
|
unkown
|
page readonly
|
|
|
|
24FD6E6B000
|
unkown
|
page read and write
|
|
|
|
104A000
|
heap default
|
page read and write
|
|
|
|
2A0AEB6F000
|
unkown
|
page read and write
|
|
|
|
2A0AEAD7000
|
unkown
|
page read and write
|
|
|
|
7FF4FA06A000
|
unkown
|
page readonly
|
|
|
|
2A0B0BE1000
|
unkown
|
page read and write
|
|
|
|
30F3000
|
unkown
|
page readonly
|
|
|
|
3039000
|
unkown
|
page readonly
|
|
|
|
1D8222B0000
|
unkown
|
page readonly
|
|
|
|
7FF5D1323000
|
unkown
|
page readonly
|
|
|
|
37B000
|
unkown
|
page read and write
|
|
|
|
89D876C000
|
unkown
|
page read and write
|
|
|
|
7FF5CE309000
|
unkown
|
page readonly
|
|
|
|
7B9000
|
unkown
|
page read and write
|
|
|
|
3072000
|
unkown
|
page readonly
|
|
|
|
7FF5D10F7000
|
unkown
|
page readonly
|
|
|
|
2A0AEA63000
|
unkown
|
page read and write
|
|
|
|
DC3887C000
|
unkown
|
page read and write
|
|
|
|
24079713000
|
unkown
|
page read and write
|
|
|
|
7FF5D31A4000
|
unkown
|
page readonly
|
|
|
|
189731F0000
|
unkown
|
page read and write
|
|
|
|
E20000
|
unkown
|
page read and write
|
|
|
|
2184FF4F000
|
unkown
|
page read and write
|
|
|
|
2A0AEAB9000
|
unkown
|
page read and write
|
|
|
|
18971829000
|
unkown
|
page read and write
|
|
|
|
7FF5D11FF000
|
unkown
|
page readonly
|
|
|
|
2184FFD3000
|
unkown
|
page read and write
|
|
|
|
7FF5000D1000
|
unkown
|
page readonly
|
|
|
|
123D000
|
unkown
|
page read and write
|
|
|
|
7FF5CE3AB000
|
unkown
|
page readonly
|
|
|
|
30C1000
|
unkown
|
page readonly
|
|
|
|
2A0AEABA000
|
unkown
|
page read and write
|
|
|
|
2184FF64000
|
unkown
|
page read and write
|
|
|
|
7FF5D1512000
|
unkown
|
page readonly
|
|
|
|
2A0B2100000
|
unkown
|
page read and write
|
|
|
|
24079E00000
|
unkown
|
page readonly
|
|
|
|
7FF515635000
|
unkown
|
page readonly
|
|
|
|
7FF595BC0000
|
unkown
|
page readonly
|
|
|
|
7A2BBBA000
|
unkown
|
page read and write
|
|
|
|
1241000
|
unkown
|
page read and write
|
|
|
|
7FF595C64000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D20000
|
unkown
|
page readonly
|
|
|
|
7FF4FA166000
|
unkown
|
page readonly
|
|
|
|
305A000
|
unkown
|
page readonly
|
|
|
|
24079C02000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC00000
|
unkown
|
page readonly
|
|
|
|
130E000
|
unkown
|
page read and write
|
|
|
|
1A297C61000
|
unkown
|
page read and write
|
|
|
|
2A0B0E3B000
|
unkown
|
page read and write
|
|
|
|
7FF4FA977000
|
unkown
|
page readonly
|
|
|
|
2407966F000
|
unkown
|
page read and write
|
|
|
|
D7A000
|
unkown
|
page read and write
|
|
|
|
7FF4FA3D8000
|
unkown
|
page readonly
|
|
|
|
7FF502606000
|
unkown
|
page readonly
|
|
|
|
2184FF7D000
|
unkown
|
page read and write
|
|
|
|
3076000
|
unkown
|
page readonly
|
|
|
|
F50000
|
heap default
|
page read and write
|
|
|
|
66C958B000
|
unkown
|
page read and write
|
|
|
|
2184FD10000
|
unkown
|
page readonly
|
|
|
|
1EC5D400000
|
unkown
|
page readonly
|
|
|
|
14C3000
|
unkown
|
page readonly
|
|
|
|
7FF4FA2DD000
|
unkown
|
page readonly
|
|
|
|
217AA250000
|
unkown
|
page read and write
|
|
|
|
66C987F000
|
unkown
|
page read and write
|
|
|
|
1D820813000
|
unkown
|
page read and write
|
|
|
|
2184FF4E000
|
unkown
|
page read and write
|
|
|
|
2A0B0E77000
|
unkown
|
page read and write
|
|
|
|
2A0AEACD000
|
unkown
|
page read and write
|
|
|
|
30C5000
|
unkown
|
page readonly
|
|
|
|
7FF5D1504000
|
unkown
|
page readonly
|
|
|
|
21850402000
|
unkown
|
page read and write
|
|
|
|
7FF5D0FF9000
|
unkown
|
page readonly
|
|
|
|
799000
|
unkown
|
page read and write
|
|
|
|
2184F6A6000
|
unkown
|
page read and write
|
|
|
|
1015000
|
unkown
|
page read and write
|
|
|
|
7FF595D11000
|
unkown
|
page readonly
|
|
|
|
4AF76FC000
|
unkown
|
page read and write
|
|
|
|
7FF4FA7C0000
|
unkown
|
page readonly
|
|
|
|
7FF4FABEA000
|
unkown
|
page readonly
|
|
|
|
7FF5D10DC000
|
unkown
|
page readonly
|
|
|
|
7FF5D0C81000
|
unkown
|
page readonly
|
|
|
|
2A0AEA29000
|
unkown
|
page read and write
|
|
|
|
2A0B2182000
|
unkown
|
page read and write
|
|
|
|
1EC5D190000
|
unkown
|
page readonly
|
|
|
|
BD3000
|
unkown
|
page read and write
|
|
|
|
1D8206C0000
|
heap default
|
page read and write
|
|
|
|
2A0B1000000
|
unkown
|
page read and write
|
|
|
|
3030000
|
unkown
|
page readonly
|
|
|
|
24FD6E56000
|
unkown
|
page read and write
|
|
|
|
7FF4FA3E4000
|
unkown
|
page readonly
|
|
|
|
7FF5028B1000
|
unkown
|
page readonly
|
|
|
|
30C1000
|
unkown
|
page readonly
|
|
|
|
24FD6E6F000
|
unkown
|
page read and write
|
|
|
|
2184FF60000
|
unkown
|
page read and write
|
|
|
|
2184F682000
|
unkown
|
page read and write
|
|
|
|
101D000
|
unkown
|
page read and write
|
|
|
|
7FF5D144F000
|
unkown
|
page readonly
|
|
|
|
7FF5CE5A2000
|
unkown
|
page readonly
|
|
|
|
2184F500000
|
unkown
|
page readonly
|
|
|
|
1A297D08000
|
unkown
|
page read and write
|
|
|
|
7FF581CD0000
|
unkown
|
page readonly
|
|
|
|
5AE0000
|
unkown
|
page readonly
|
|
|
|
7FF5D2ED7000
|
unkown
|
page readonly
|
|
|
|
799000
|
unkown
|
page read and write
|
|
|
|
7FF5D13BC000
|
unkown
|
page readonly
|
|
|
|
30C1000
|
unkown
|
page readonly
|
|
|
|
DC383F9000
|
unkown
|
page read and write
|
|
|
|
DC388FB000
|
unkown
|
page read and write
|
|
|
|
2A0B09A0000
|
unkown
|
page read and write
|
|
|
|
7FF50288A000
|
unkown
|
page readonly
|
|
|
|
2184FF9B000
|
unkown
|
page read and write
|
|
|
|
18971866000
|
unkown
|
page read and write
|
|
|
|
7FF5D29F5000
|
unkown
|
page readonly
|
|
|
|
7A2BFFF000
|
unkown
|
page read and write
|
|
|
|
7FF5D141E000
|
unkown
|
page readonly
|
|
|
|
30F3000
|
unkown
|
page readonly
|
|
|
|
33B80FB000
|
unkown
|
page read and write
|
|
|
|
1239000
|
unkown
|
page read and write
|
|
|
|
7FF500234000
|
unkown
|
page readonly
|
|
|
|
2A0B0C10000
|
unkown
|
page readonly
|
|
|
|
EA0000
|
unkown
|
page read and write
|
|
|
|
2184FF20000
|
unkown
|
page read and write
|
|
|
|
60C6977000
|
unkown
|
page read and write
|
|
|
|
11C1000
|
unkown
|
page read and write
|
|
|
|
3072000
|
unkown
|
page readonly
|
|
|
|
307B000
|
unkown
|
page readonly
|
|
|
|
30C5000
|
unkown
|
page readonly
|
|
|
|
2A0B2002000
|
unkown
|
page read and write
|
|
|
|
304D000
|
unkown
|
page readonly
|
|
|
|
24FD6E00000
|
unkown
|
page read and write
|
|
|
|
3039000
|
unkown
|
page readonly
|
|
|
|
101E000
|
stack
|
page read and write
|
|
|
|
14C1000
|
unkown
|
page readonly
|
|
|
|
2A0B0E63000
|
unkown
|
page read and write
|
|
|
|
4AF74FE000
|
unkown
|
page read and write
|
|
|
|
3072000
|
unkown
|
page readonly
|
|
|
|
7FF502517000
|
unkown
|
page readonly
|
|
|
|
217AA24C000
|
unkown
|
page read and write
|
|
|
|
7FF4FA408000
|
unkown
|
page readonly
|
|
|
|
2A0AEA40000
|
unkown
|
page read and write
|
|
|
|
7FF502840000
|
unkown
|
page readonly
|
|
|
|
7FF5D0F82000
|
unkown
|
page readonly
|
|
|
|
60C63EE000
|
unkown
|
page read and write
|
|
|
|
2A0B0BB2000
|
unkown
|
page read and write
|
|
|
|
7FF4F9BFD000
|
unkown
|
page readonly
|
|
|
|
7FF4FA76E000
|
unkown
|
page readonly
|
|
|
|
7FF5CE17A000
|
unkown
|
page readonly
|
|
|
|
30D4000
|
unkown
|
page readonly
|
|
|
|
1A297C55000
|
unkown
|
page read and write
|
|
|
|
2184FF7F000
|
unkown
|
page read and write
|
|
|
|
217AA200000
|
unkown
|
page read and write
|
|
|
|
1EC5D26B000
|
unkown
|
page read and write
|
|
|
|
7FF5002E1000
|
unkown
|
page readonly
|
|
|
|
7FF4FA40E000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC05000
|
unkown
|
page readonly
|
|
|
|
7FF502803000
|
unkown
|
page readonly
|
|
|
|
7FF5027E2000
|
unkown
|
page readonly
|
|
|
|
CCA000
|
unkown
|
page read and write
|
|
|
|
7FF5D3252000
|
unkown
|
page readonly
|
|
|
|
7FF50283A000
|
unkown
|
page readonly
|
|
|
|
2A0AEBA2000
|
unkown
|
page read and write
|
|
|
|
7FF50286F000
|
unkown
|
page readonly
|
|
|
|
19B3B940000
|
unkown
|
page read and write
|
|
|
|
7FF5001F0000
|
unkown
|
page readonly
|
|
|
|
2184FF60000
|
unkown
|
page read and write
|
|
|
|
2184FF72000
|
unkown
|
page read and write
|
|
|
|
7FF5958EF000
|
unkown
|
page readonly
|
|
|
|
DBB000
|
stack
|
page read and write
|
|
|
|
2184FF4B000
|
unkown
|
page read and write
|
|
|
|
2A0B0A02000
|
unkown
|
page read and write
|
|
|
|
2184FF64000
|
unkown
|
page read and write
|
|
|
|
7D706FF000
|
unkown
|
page read and write
|
|
|
|
2A0AE9E0000
|
unkown
|
page readonly
|
|
|
|
1A297C4A000
|
unkown
|
page read and write
|
|
|
|
2184F6F5000
|
unkown
|
page read and write
|
|
|
|
2A0B0B47000
|
unkown
|
page read and write
|
|
|
|
2A0B0E00000
|
unkown
|
page read and write
|
|
|
|
79CB37F000
|
unkown
|
page read and write
|
|
|
|
2184FF1E000
|
unkown
|
page read and write
|
|
|
|
30F3000
|
unkown
|
page readonly
|
|
|
|
2FFA000
|
unkown
|
page readonly
|
|
|
|
1065000
|
unkown
|
page read and write
|
|
|
|
7FF51567A000
|
unkown
|
page readonly
|
|
|
|
19B3B9B6000
|
heap default
|
page read and write
|
|
|
|
79CB1FA000
|
unkown
|
page read and write
|
|
|
|
7FF51552B000
|
unkown
|
page readonly
|
|
|
|
DA0000
|
unkown
|
page readonly
|
|
|
|
7FF4FA15B000
|
unkown
|
page readonly
|
|
|
|
300D000
|
unkown
|
page readonly
|
|
|
|
7FF502931000
|
unkown
|
page readonly
|
|
|
|
7FF50273B000
|
unkown
|
page readonly
|
|
|
|
E40000
|
heap default
|
page read and write
|
|
|
|
11A7000
|
heap private
|
page read and write
|
|
|
|
6890000
|
unkown
|
page read and write
|
|
|
|
11BE000
|
unkown
|
page read and write
|
|
|
|
71D000
|
unkown
|
page read and write
|
|
|
|
2A0B0F00000
|
unkown
|
page read and write
|
|
|
|
7FF4FACF1000
|
unkown
|
page readonly
|
|
|
|
7FF5CE16C000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA34000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC6E000
|
unkown
|
page readonly
|
|
|
|
24079600000
|
unkown
|
page read and write
|
|
|
|
2184FF77000
|
unkown
|
page read and write
|
|
|
|
1235000
|
unkown
|
page read and write
|
|
|
|
7FF5002DA000
|
unkown
|
page readonly
|
|
|
|
3047000
|
unkown
|
page readonly
|
|
|
|
1140000
|
heap default
|
page read and write
|
|
|
|
1EC5D229000
|
unkown
|
page read and write
|
|
|
|
2FF3000
|
unkown
|
page readonly
|
|
|
|
2A0AEC00000
|
unkown
|
page readonly
|
|
|
|
2184FF51000
|
unkown
|
page read and write
|
|
|
|
2A0B0940000
|
unkown
|
page read and write
|
|
|
|
2184F613000
|
unkown
|
page read and write
|
|
|
|
1EC5D26B000
|
unkown
|
page read and write
|
|
|
|
7FF51563B000
|
unkown
|
page readonly
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
7FF595C25000
|
unkown
|
page readonly
|
|
|
|
2A0B04C0000
|
unkown
|
page read and write
|
|
|
|
7FF5CE4DC000
|
unkown
|
page readonly
|
|
|
|
30E8000
|
unkown
|
page readonly
|
|
|
|
1A298940000
|
unkown
|
page readonly
|
|
|
|
10F0000
|
unkown
|
page read and write
|
|
|
|
2184F63C000
|
unkown
|
page read and write
|
|
|
|
2A0AEAFB000
|
unkown
|
page read and write
|
|
|
|
24FD6BB0000
|
heap private
|
page read and write
|
|
|
|
2A0B1210000
|
unkown
|
page read and write
|
|
|
|
7FF5D13C2000
|
unkown
|
page readonly
|
|
|
|
34DA000
|
heap private
|
page read and write
|
|
|
|
217AA24D000
|
unkown
|
page read and write
|
|
|
|
11BA000
|
unkown
|
page read and write
|
|
|
|
21850454000
|
unkown
|
page read and write
|
|
|
|
E35000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page readonly
|
|
|
|
106D000
|
unkown
|
page read and write
|
|
|
|
2CEE000
|
unkown
|
page readonly
|
|
|
|
2184FF63000
|
unkown
|
page read and write
|
|
|
|
2A0B0B62000
|
unkown
|
page read and write
|
|
|
|
305A000
|
unkown
|
page readonly
|
|
|
|
6410000
|
unkown
|
page read and write
|
|
|
|
DB0000
|
unkown
|
page read and write
|
|
|
|
2184FF5F000
|
unkown
|
page read and write
|
|
|
|
30F3000
|
unkown
|
page readonly
|
|
|
|
1120000
|
unkown
|
page readonly
|
|
|
|
30E8000
|
unkown
|
page readonly
|
|
|
|
305F000
|
unkown
|
page readonly
|
|
|
|
2184F708000
|
unkown
|
page read and write
|
|
|
|
18971802000
|
unkown
|
page read and write
|
|
|
|
7FF5D136D000
|
unkown
|
page readonly
|
|
|
|
2FE9000
|
unkown
|
page readonly
|
|
|
|
7FF5156AD000
|
unkown
|
page readonly
|
|
|
|
1EC5D302000
|
unkown
|
page read and write
|
|
|
|
7FF5D305E000
|
unkown
|
page readonly
|
|
|
|
1050000
|
unkown
|
page readonly
|
|
|
|
7FF5D1425000
|
unkown
|
page readonly
|
|
|
|
2184F716000
|
unkown
|
page read and write
|
|
|
|
7FF595C4F000
|
unkown
|
page readonly
|
|
|
|
304D000
|
unkown
|
page readonly
|
|
|
|
63E0000
|
unkown
|
page readonly
|
|
|
|
7FF5D140A000
|
unkown
|
page readonly
|
|
|
|
3076000
|
unkown
|
page readonly
|
|
|
|
2184F490000
|
heap private
|
page read and write
|
|
|
|
217AA300000
|
unkown
|
page read and write
|
|
|
|
21850461000
|
unkown
|
page read and write
|
|
|
|
2A0B1410000
|
unkown
|
page read and write
|
|
|
|
2A0B2000000
|
unkown
|
page read and write
|
|
|
|
60C6A7F000
|
unkown
|
page read and write
|
|
|
|
7FF5D13EF000
|
unkown
|
page readonly
|
|
|
|
7FF500244000
|
unkown
|
page readonly
|
|
|
|
307B000
|
unkown
|
page readonly
|
|
|
|
2184F713000
|
unkown
|
page read and write
|
|
|
|
7FF50021C000
|
unkown
|
page readonly
|
|
|
|
7FF4FA1C1000
|
unkown
|
page readonly
|
|
|
|
2184FF79000
|
unkown
|
page read and write
|
|
|
|
7FF4FA7D5000
|
unkown
|
page readonly
|
|
|
|
2A0B0B0A000
|
unkown
|
page read and write
|
|
|
|
2184F5F0000
|
unkown
|
page read and write
|
|
|
|
3045000
|
unkown
|
page readonly
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
7FF515511000
|
unkown
|
page readonly
|
|
|
|
1A297C70000
|
unkown
|
page read and write
|
|
|
|
7FF5CE3B3000
|
unkown
|
page readonly
|
|
|
|
7FF5D0D21000
|
unkown
|
page readonly
|
|
|
|
787B47F000
|
unkown
|
page read and write
|
|
|
|
2184FF5C000
|
unkown
|
page read and write
|
|
|
|
DC3837A000
|
unkown
|
page read and write
|
|
|
|
F64000
|
heap private
|
page read and write
|
|
|
|
2A0B0BC3000
|
unkown
|
page read and write
|
|
|
|
63D0000
|
heap private
|
page read and write
|
|
|
|
FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5959E6000
|
unkown
|
page readonly
|
|
|
|
7FF5CE3B8000
|
unkown
|
page readonly
|
|
|
|
3045000
|
unkown
|
page readonly
|
|
|
|
1D82083F000
|
unkown
|
page read and write
|
|
|
|
1A297C00000
|
unkown
|
page read and write
|
|
|
|
1D822610000
|
unkown
|
page read and write
|
|
|
|
2184F6B0000
|
unkown
|
page read and write
|
|
|
|
1EC5D314000
|
unkown
|
page read and write
|
|
|
|
3023000
|
unkown
|
page readonly
|
|
|
|
301C000
|
unkown
|
page readonly
|
|
|
|
2A0B0930000
|
heap private
|
page read and write
|
|
|
|
1019000
|
unkown
|
page read and write
|
|
|
|
DC386FD000
|
unkown
|
page read and write
|
|
|
|
787B67F000
|
unkown
|
page read and write
|
|
|
|
2407964A000
|
unkown
|
page read and write
|
|
|
|
49B000
|
stack
|
page read and write
|
|
|
|
F60000
|
heap private
|
page read and write
|
|
|
|
2A0B1510000
|
unkown
|
page read and write
|
|
|
|
2184FF4D000
|
unkown
|
page read and write
|
|
|
|
7FF4FA05C000
|
unkown
|
page readonly
|
|
|
|
7FF5D13FF000
|
unkown
|
page readonly
|
|
|
|
2A0B2102000
|
unkown
|
page read and write
|
|
|
|
7FF51561A000
|
unkown
|
page readonly
|
|
|
|
7FF5CE521000
|
unkown
|
page readonly
|
|
|
|
2A0B0B68000
|
unkown
|
page read and write
|
|
|
|
1EC5D200000
|
unkown
|
page read and write
|
|
|
|
2A0AEAE1000
|
unkown
|
page read and write
|
|
|
|
DC3847B000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC5F000
|
unkown
|
page readonly
|
|
|
|
24079629000
|
unkown
|
page read and write
|
|
|
|
7FF5D314C000
|
unkown
|
page readonly
|
|
|
|
3047000
|
unkown
|
page readonly
|
|
|
|
7FF595B28000
|
unkown
|
page readonly
|
|
|
|
7FF502932000
|
unkown
|
page readonly
|
|
|
|
2A0B05C0000
|
unkown
|
page readonly
|
|
|
|
1A297C61000
|
unkown
|
page read and write
|
|
|
|
2F20000
|
unkown
|
page readonly
|
|
|
|
2184FFBE000
|
unkown
|
page read and write
|
|
|
|
2184FCF0000
|
unkown
|
page readonly
|
|
|
|
217AA246000
|
unkown
|
page read and write
|
|
|
|
2A0AEABA000
|
unkown
|
page read and write
|
|
|
|
18971813000
|
unkown
|
page read and write
|
|
|
|
DF0000
|
unkown
|
page read and write
|
|
|
|
2A0AEADD000
|
unkown
|
page read and write
|
|
|
|
7FF5CE4BB000
|
unkown
|
page readonly
|
|
|
|
3015000
|
unkown
|
page readonly
|
|
|
|
7FF5001DA000
|
unkown
|
page readonly
|
|
|
|
7FF515722000
|
unkown
|
page readonly
|
|
|
|
1A297C87000
|
unkown
|
page read and write
|
|
|
|
2184FD10000
|
unkown
|
page read and write
|
|
|
|
7FF595C37000
|
unkown
|
page readonly
|
|
|
|
4AF767E000
|
unkown
|
page read and write
|
|
|
|
2A0B1410000
|
unkown
|
page read and write
|
|
|
|
240795F0000
|
unkown
|
page readonly
|
|
|
|
7FF500269000
|
unkown
|
page readonly
|
|
|
|
2184F6BC000
|
unkown
|
page read and write
|
|
|
|
33B84FA000
|
unkown
|
page read and write
|
|
|
|
2184FC70000
|
unkown
|
page readonly
|
|
|
|
7FF5CDD11000
|
unkown
|
page readonly
|
|
|
|
2184FF60000
|
unkown
|
page read and write
|
|
|
|
3015000
|
unkown
|
page readonly
|
|
|
|
3015000
|
unkown
|
page readonly
|
|
|
|
7FF5D305B000
|
unkown
|
page readonly
|
|
|
|
7FF5154D3000
|
unkown
|
page readonly
|
|
|
|
24FD7000000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC37000
|
unkown
|
page readonly
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
189716B0000
|
heap private
|
page read and write
|
|
|
|
30C1000
|
unkown
|
page readonly
|
|
|
|
7FF50026D000
|
unkown
|
page readonly
|
|
|
|
19B3B9B6000
|
unkown
|
page read and write
|
|
|
|
19B3B990000
|
unkown
|
page readonly
|
|
|
|
2184FF9A000
|
unkown
|
page read and write
|
|
|
|
2184FF77000
|
unkown
|
page read and write
|
|
|
|
1EC5D26B000
|
unkown
|
page read and write
|
|
|
|
E1E000
|
stack
|
page read and write
|
|
|
|
3030000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA36000
|
unkown
|
page readonly
|
|
|
|
DC3857B000
|
unkown
|
page read and write
|
|
|
|
640E000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB53000
|
unkown
|
page readonly
|
|
|
|
304F000
|
unkown
|
page readonly
|
|
|
|
2ED2000
|
unkown
|
page readonly
|
|
|
|
2407964D000
|
unkown
|
page read and write
|
|
|
|
7FF5024FC000
|
unkown
|
page readonly
|
|
|
|
7FF595C6A000
|
unkown
|
page readonly
|
|
|
|
7FF4FACF2000
|
unkown
|
page readonly
|
|
|
|
2184F6EB000
|
unkown
|
page read and write
|
|
|
|
2A0B0BC6000
|
unkown
|
page read and write
|
|
|
|
7FF515721000
|
unkown
|
page readonly
|
|
|
|
1A297AC0000
|
heap private
|
page read and write
|
|
|
|
2184F6D6000
|
unkown
|
page read and write
|
|
|
|
2184FF53000
|
unkown
|
page read and write
|
|
|
|
EC0000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown
|
page readonly
|
|
|
|
7FF5028B6000
|
unkown
|
page readonly
|
|
|
|
7FF502665000
|
unkown
|
page readonly
|
|
|
|
2A0AEABB000
|
unkown
|
page read and write
|
|
|
|
217AA247000
|
unkown
|
page read and write
|
|
|
|
18971720000
|
unkown
|
page readonly
|
|
|
|
2184FF29000
|
unkown
|
page read and write
|
|
|
|
7A2C07F000
|
unkown
|
page read and write
|
|
|
|
7FF4FFF67000
|
unkown
|
page readonly
|
|
|
|
3450000
|
heap private
|
page read and write
|
|
|
|
63E4000
|
heap private
|
page read and write
|
|
|
|
7A1000
|
unkown
|
page read and write
|
|
|
|
7FF500227000
|
unkown
|
page readonly
|
|
|
|
7FF581DC1000
|
unkown
|
page readonly
|
|
|
|
30E2000
|
unkown
|
page readonly
|
|
|
|
7FF5CE594000
|
unkown
|
page readonly
|
|
|
|
7FF5D11DB000
|
unkown
|
page readonly
|
|
|
|
7FF5D31BF000
|
unkown
|
page readonly
|
|
|
|
45B000
|
unkown
|
page read and write
|
|
|
|
7FF5001DC000
|
unkown
|
page readonly
|
|
|
|
7FF595C96000
|
unkown
|
page readonly
|
|
|
|
1897183F000
|
unkown
|
page read and write
|
|
|
|
2D63000
|
unkown
|
page readonly
|
|
|
|
7FF4FA7C6000
|
unkown
|
page readonly
|
|
|
|
2A0B0B03000
|
unkown
|
page read and write
|
|
|
|
7FF515684000
|
unkown
|
page readonly
|
|
|
|
11B9000
|
unkown
|
page read and write
|
|
|
|
2CEE000
|
unkown
|
page readonly
|
|
|
|
7FF5D314A000
|
unkown
|
page readonly
|
|
|
|
7FF502884000
|
unkown
|
page readonly
|
|
|
|
307B000
|
unkown
|
page readonly
|
|
|
|
FF0000
|
heap default
|
page read and write
|
|
|
|
2184FF67000
|
unkown
|
page read and write
|
|
|
|
2A0B0E94000
|
unkown
|
page read and write
|
|
|
|
18971A50000
|
unkown
|
page readonly
|
|
|
|
67E0000
|
unkown
|
page read and write
|
|
|
|
2A0B1210000
|
unkown
|
page read and write
|
|
|
|
1A297D02000
|
unkown
|
page read and write
|
|
|
|
3023000
|
unkown
|
page readonly
|
|
|
|
E3B000
|
stack
|
page read and write
|
|
|
|
2A0B0E36000
|
unkown
|
page read and write
|
|
|
|
2184FF56000
|
unkown
|
page read and write
|
|
|
|
19B3B960000
|
unkown
|
page read and write
|
|
|
|
7FF5D2FB1000
|
unkown
|
page readonly
|
|
|
|
2184F6EC000
|
unkown
|
page read and write
|
|
|
|
7FF5CE187000
|
unkown
|
page readonly
|
|
|
|
19B3B9DE000
|
unkown
|
page read and write
|
|
|
|
106E000
|
unkown
|
page read and write
|
|
|
|
7FF5CE518000
|
unkown
|
page readonly
|
|
|
|
7FF595481000
|
unkown
|
page readonly
|
|
|
|
2184FE02000
|
unkown
|
page read and write
|
|
|
|
101D000
|
unkown
|
page read and write
|
|
|
|
7FF595C1A000
|
unkown
|
page readonly
|
|
|
|
30F3000
|
unkown
|
page readonly
|
|
|
|
1190000
|
heap default
|
page read and write
|
|
|
|
7FF4FA557000
|
unkown
|
page readonly
|
|
|
|
7FF50284B000
|
unkown
|
page readonly
|
|
|
|
217AA0D0000
|
heap private
|
page read and write
|
|
|
|
C90000
|
unkown
|
page readonly
|
|
|
|
1019000
|
unkown
|
page read and write
|
|
|
|
3023000
|
unkown
|
page readonly
|
|
|
|
6310000
|
unkown
|
page readonly
|
|
|
|
10B0000
|
heap default
|
page read and write
|
|
|
|
3053000
|
unkown
|
page readonly
|
|
|
|
7FF5D1241000
|
unkown
|
page readonly
|
|
|
|
7FF5CE526000
|
unkown
|
page readonly
|
|
|
|
6C7000
|
heap private
|
page read and write
|
|
|
|
7FF502748000
|
unkown
|
page readonly
|
|
|
|
6440000
|
heap private
|
page read and write
|
|
|
|
19B3BB70000
|
unkown
|
page readonly
|
|
|
|
101D000
|
unkown
|
page read and write
|
|
|
|
7FF5D31B4000
|
unkown
|
page readonly
|
|
|
|
24079430000
|
heap default
|
page read and write
|
|
|
|
2A0B0B6E000
|
unkown
|
page read and write
|
|
|
|
2184F800000
|
unkown
|
page readonly
|
|
|
|
2184FF4D000
|
unkown
|
page read and write
|
|
|
|
7B2000
|
unkown
|
page read and write
|
|
|
|
7D707FF000
|
unkown
|
page read and write
|
|
|
|
24FD6C20000
|
unkown
|
page readonly
|
|
|
|
7FF50013D000
|
unkown
|
page readonly
|
|
|
|
6490000
|
unkown
|
page read and write
|
|
|
|
2A0B0B4C000
|
unkown
|
page read and write
|
|
|
|
7FF5CE473000
|
unkown
|
page readonly
|
|
|
|
7FF515667000
|
unkown
|
page readonly
|
|
|
|
2184FF98000
|
unkown
|
page read and write
|
|
|
|
2A0AEA91000
|
unkown
|
page read and write
|
|
|
|
2A0AEAFB000
|
unkown
|
page read and write
|
|
|
|
7FF5D315A000
|
unkown
|
page readonly
|
|
|
|
2A0B0B0A000
|
unkown
|
page read and write
|
|
|
|
2ED2000
|
unkown
|
page readonly
|
|
|
|
BFA000
|
unkown
|
page read and write
|
|
|
|
7FF581CD5000
|
unkown
|
page readonly
|
|
|
|
2184F600000
|
unkown
|
page read and write
|
|
|
|
7FF4FA48A000
|
unkown
|
page readonly
|
|
|
|
6B0000
|
unkown
|
page readonly
|
|
|
|
2184FF6E000
|
unkown
|
page read and write
|
|
|
|
34D7000
|
heap private
|
page read and write
|
|
|
|
2A0B09E0000
|
unkown
|
page readonly
|
|
|
|
7FF4FA342000
|
unkown
|
page readonly
|
|
|
|
7FF4FA411000
|
unkown
|
page readonly
|
|
|
|
7FF595C58000
|
unkown
|
page readonly
|
|
|
|
2184FF5E000
|
unkown
|
page read and write
|
|
|
|
7FF5D30C4000
|
unkown
|
page readonly
|
|
|
|
1A298000000
|
unkown
|
page readonly
|
|
|
|
2184F6DF000
|
unkown
|
page read and write
|
|
|
|
2EDE000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC0B000
|
unkown
|
page readonly
|
|
|
|
7FF595C7E000
|
unkown
|
page readonly
|
|
|
|
2A0AEAD6000
|
unkown
|
page read and write
|
|
|
|
3061000
|
unkown
|
page readonly
|
|
|
|
7FF4FA2D7000
|
unkown
|
page readonly
|
|
|
|
1A298270000
|
unkown
|
page readonly
|
|
|
|
7FF515647000
|
unkown
|
page readonly
|
|
|
|
5F0000
|
unkown
|
page readonly
|
|
|
|
2A0B09C0000
|
unkown
|
page read and write
|
|
|
|
7FF595C91000
|
unkown
|
page readonly
|
|
|
|
3030000
|
unkown
|
page readonly
|
|
|
|
7FF595B01000
|
unkown
|
page readonly
|
|
|
|
7FF59547D000
|
unkown
|
page readonly
|
|
|
|
7A2C0FD000
|
unkown
|
page read and write
|
|
|
|
21850402000
|
unkown
|
page read and write
|
|
|
|
7FF4FA6DE000
|
unkown
|
page readonly
|
|
|
|
24079655000
|
unkown
|
page read and write
|
|
|
|
18971800000
|
unkown
|
page read and write
|
|
|
|
D90000
|
unkown
|
page readonly
|
|
|
|
7FF5D1245000
|
unkown
|
page readonly
|
|
|
|
3023000
|
unkown
|
page readonly
|
|
|
|
7FF4FABA0000
|
unkown
|
page readonly
|
|
|
|
DC3877B000
|
unkown
|
page read and write
|
|
|
|
7FF5028AE000
|
unkown
|
page readonly
|
|
|
|
7FF5CE452000
|
unkown
|
page readonly
|
|
|
|
7FF5CE26B000
|
unkown
|
page readonly
|
|
|
|
7FF5020A1000
|
unkown
|
page readonly
|
|
|
|
7FF5CE450000
|
unkown
|
page readonly
|
|
|
|
1EC5D26B000
|
unkown
|
page read and write
|
|
|
|
217AA24B000
|
unkown
|
page read and write
|
|
|
|
2184FF65000
|
unkown
|
page read and write
|
|
|
|
7FF5D13EB000
|
unkown
|
page readonly
|
|
|
|
2184FF20000
|
unkown
|
page read and write
|
|
|
|
1D820800000
|
unkown
|
page read and write
|
|
|
|
2184FF58000
|
unkown
|
page read and write
|
|
|
|
7FF5D1301000
|
unkown
|
page readonly
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
2A0AEAFB000
|
unkown
|
page read and write
|
|
|
|
300D000
|
unkown
|
page readonly
|
|
|
|
2CEE000
|
unkown
|
page readonly
|
|
|
|
1A298402000
|
unkown
|
page read and write
|
|
|
|
24FD87A0000
|
unkown
|
page read and write
|
|
|
|
2184FF57000
|
unkown
|
page read and write
|
|
|
|
18971A00000
|
unkown
|
page write copy
|
|
|
|
217AA229000
|
unkown
|
page read and write
|
|
|
|
217AA140000
|
unkown
|
page readonly
|
|
|
|
2A0AEB2F000
|
unkown
|
page read and write
|
|
|
|
300D000
|
unkown
|
page readonly
|
|
|
|
7FF500143000
|
unkown
|
page readonly
|
|
|
|
3053000
|
unkown
|
page readonly
|
|
|
|
7FF595D0A000
|
unkown
|
page readonly
|
|
|
|
217AA23C000
|
unkown
|
page read and write
|
|
|
|
2A0B09A0000
|
unkown
|
page read and write
|
|
|
|
2ED2000
|
unkown
|
page readonly
|
|
|
|
F50000
|
unkown
|
page read and write
|
|
|
|
305A000
|
unkown
|
page readonly
|
|
|
|
F1E000
|
unkown
|
page read and write
|
|
|
|
2184F653000
|
unkown
|
page read and write
|
|
|
|
7FF5D10EA000
|
unkown
|
page readonly
|
|
|
|
2184FF9A000
|
unkown
|
page read and write
|
|
|
|
304F000
|
unkown
|
page readonly
|
|
|
|
2184FF5A000
|
unkown
|
page read and write
|
|
|
|
7FF5D13E3000
|
unkown
|
page readonly
|
|
|
|
377000
|
unkown
|
page read and write
|
|
|
|
19B3B9C6000
|
unkown
|
page read and write
|
|
|
|
302C000
|
unkown
|
page readonly
|
|
|
|
2A0AEABB000
|
unkown
|
page read and write
|
|
|
|
7FF5CE17F000
|
unkown
|
page readonly
|
|
|
|
300D000
|
unkown
|
page readonly
|
|
|
|
89D8F77000
|
unkown
|
page read and write
|
|
|
|
1EC5D213000
|
unkown
|
page read and write
|
|
|
|
30F3000
|
unkown
|
page readonly
|
|
|
|
DC3817A000
|
unkown
|
page read and write
|
|
|
|
7FF502721000
|
unkown
|
page readonly
|
|
|
|
7FF5CE50E000
|
unkown
|
page readonly
|
|
|
|
30C1000
|
unkown
|
page readonly
|
|
|
|
2184FF4D000
|
unkown
|
page read and write
|
|
|
|
7FF4FABCB000
|
unkown
|
page readonly
|
|
|
|
10C0000
|
unkown
|
page readonly
|
|
|
|
106D000
|
unkown
|
page read and write
|
|
|
|
7FF5D11E6000
|
unkown
|
page readonly
|
|
|
|
3076000
|
unkown
|
page readonly
|
|
|
|
123E000
|
unkown
|
page read and write
|
|
|
|
19B3B9CE000
|
unkown
|
page read and write
|
|
|
|
DC37E7B000
|
unkown
|
page read and write
|
|
|
|
770000
|
heap default
|
page read and write
|
|
|
|
7FF5D1491000
|
unkown
|
page readonly
|
|
|
|
7FF5001EE000
|
unkown
|
page readonly
|
|
|
|
2EDE000
|
unkown
|
page readonly
|
|
|
|
30E8000
|
unkown
|
page readonly
|
|
|
|
2184FF5E000
|
unkown
|
page read and write
|
|
|
|
19B3B9B1000
|
unkown
|
page read and write
|
|
|
|
7FF502743000
|
unkown
|
page readonly
|
|
|
|
1EC5D202000
|
unkown
|
page read and write
|
|
|
|
2184FF34000
|
unkown
|
page read and write
|
|
|
|
2A0AEAF3000
|
unkown
|
page read and write
|
|
|
|
2A0AEA13000
|
unkown
|
page read and write
|
|
|
|
24079613000
|
unkown
|
page read and write
|
|
|
|
89D8FFE000
|
unkown
|
page read and write
|
|
|
|
24079702000
|
unkown
|
page read and write
|
|
|
|
795000
|
unkown
|
page read and write
|
|
|
|
7FF5CE276000
|
unkown
|
page readonly
|
|
|
|
2184FD10000
|
unkown
|
page read and write
|
|
|
|
3460000
|
unkown
|
page readonly
|
|
|
|
787B3FB000
|
unkown
|
page read and write
|
|
|
|
106D000
|
unkown
|
page read and write
|
|
|
|
7FF4F9C01000
|
unkown
|
page readonly
|
|
|
|
7FF51559C000
|
unkown
|
page readonly
|
|
|
|
30E2000
|
unkown
|
page readonly
|
|
|
|
2184FFA4000
|
unkown
|
page read and write
|
|
|
|
7FF4FABA2000
|
unkown
|
page readonly
|
|
|
|
19B3B9A0000
|
heap default
|
page read and write
|
|
|
|
7FF5D144C000
|
unkown
|
page readonly
|
|
|
|
7FF4FA39E000
|
unkown
|
page readonly
|
|
|
|
79CB27A000
|
unkown
|
page read and write
|
|
|
|
2184FF00000
|
unkown
|
page read and write
|
|
|
|
7FF5CE52D000
|
unkown
|
page readonly
|
|
|
|
89D8D77000
|
unkown
|
page read and write
|
|
|
|
24FD6E29000
|
unkown
|
page read and write
|
|
|
|
7FF500041000
|
unkown
|
page readonly
|
|
|
|
7FF5027E0000
|
unkown
|
page readonly
|
|
|
|
638E000
|
stack
|
page read and write
|
|
|
|
6240000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC2C000
|
unkown
|
page readonly
|
|
|
|
21850000000
|
unkown
|
page readonly
|
|
|
|
1EC5D300000
|
unkown
|
page read and write
|
|
|
|
2184FF63000
|
unkown
|
page read and write
|
|
|
|
60C66F5000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAE1000
|
unkown
|
page readonly
|
|
|
|
2A0B1310000
|
unkown
|
page read and write
|
|
|
|
19B3B9C5000
|
unkown
|
page read and write
|
|
|
|
79CB07B000
|
unkown
|
page read and write
|
|
|
|
2A0AEB3F000
|
unkown
|
page read and write
|
|
|
|
2184FF5E000
|
unkown
|
page read and write
|
|
|
|
7FF4FA1C5000
|
unkown
|
page readonly
|
|
There are 1409 hidden memdumps, click here to show them.