Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
91476525608-04012021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$91476525608-04012021.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\170F9197-F193-4F05-B2F8-6C4BDA897C38
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\457FCD63.gif
|
GIF image data, version 89a, 1600 x 1600
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\C1C10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\91476525608-04012021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 13:47:09
2020, mtime=Fri Apr 2 03:39:11 2021, atime=Fri Apr 2 03:39:11 2021, length=180235, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:34:24 2019, mtime=Fri Apr 2 03:39:11 2021, atime=Fri Apr 2 03:39:11 2021, length=12288, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\72C10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\FB206F33.gif
|
GIF image data, version 89a, 1600 x 1600
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\98DE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\59DE0000
|
data
|
dropped
|
|
There are 3 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\Hodas.vyur,PluginInit
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\Hodas.vyur1,PluginInit
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\Hodas.vyur2,PluginInit
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\Hodas.vyur,PluginInit
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\Hodas.vyur1,PluginInit
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\Hodas.vyur2,PluginInit
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://195.123.210.186/44285,5327891204.dat
|
195.123.210.186
|
|
|
|
http://91.211.89.28/44285,5327891204.dat
|
91.211.89.28
|
|
|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
http://45.150.67.243/44285,5327891204.dat
|
45.150.67.243
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 98 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
195.123.210.186
|
unknown
|
Bulgaria
|
|
|
|
45.150.67.243
|
unknown
|
Montenegro
|
|
|
|
91.211.89.28
|
unknown
|
Ukraine
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
cb6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
rb6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1B90B
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1BF25
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C03F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C148
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C204
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C2B0
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
;s6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2A530
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2A6F5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
r23
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED29B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED672
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED75C
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED826
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED920
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED9AC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
w>3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F581F
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F5A8F
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
There are 160 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF51000E000
|
unkown
|
page readonly
|
|
|
|
1DDAEB00000
|
unkown
|
page read and write
|
|
|
|
25F0443F000
|
unkown
|
page read and write
|
|
|
|
275DBE6D000
|
unkown
|
page read and write
|
|
|
|
7FF5C4BCF000
|
unkown
|
page readonly
|
|
|
|
6989DFD000
|
unkown
|
page read and write
|
|
|
|
3D2DEFF000
|
unkown
|
page read and write
|
|
|
|
7FF54F0DB000
|
unkown
|
page readonly
|
|
|
|
7FF5C4A7D000
|
unkown
|
page readonly
|
|
|
|
14504302000
|
unkown
|
page read and write
|
|
|
|
7FF5A5784000
|
unkown
|
page readonly
|
|
|
|
7FF5076B5000
|
unkown
|
page readonly
|
|
|
|
1865EFDE000
|
unkown
|
page read and write
|
|
|
|
2B84000
|
unkown
|
page readonly
|
|
|
|
13D6FFF000
|
unkown
|
page read and write
|
|
|
|
2AED9D40000
|
heap private
|
page read and write
|
|
|
|
145092C4000
|
unkown
|
page write copy
|
|
|
|
2E2E8D42000
|
unkown
|
page read and write
|
|
|
|
2E2E6813000
|
unkown
|
page read and write
|
|
|
|
7FF50FFD8000
|
unkown
|
page readonly
|
|
|
|
15C8CFE0000
|
unkown
|
page readonly
|
|
|
|
7FF5A5097000
|
unkown
|
page readonly
|
|
|
|
7FF4FF4FE000
|
unkown
|
page readonly
|
|
|
|
1FB0B5A0000
|
unkown
|
page read and write
|
|
|
|
7FF507457000
|
unkown
|
page readonly
|
|
|
|
7FF51F105000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB93000
|
unkown
|
page readonly
|
|
|
|
1865F1E0000
|
unkown
|
page read and write
|
|
|
|
7FF52F9F7000
|
unkown
|
page readonly
|
|
|
|
1D06A280000
|
heap private
|
page read and write
|
|
|
|
7FF5C4BCF000
|
unkown
|
page readonly
|
|
|
|
7FF5AF34F000
|
unkown
|
page readonly
|
|
|
|
7FF51001F000
|
unkown
|
page readonly
|
|
|
|
35BF000
|
unkown
|
page read and write
|
|
|
|
7FF58DB9D000
|
unkown
|
page readonly
|
|
|
|
167F4E68000
|
unkown
|
page read and write
|
|
|
|
145090B7000
|
unkown
|
page read and write
|
|
|
|
1E70A670000
|
unkown
|
page readonly
|
|
|
|
7FF507720000
|
unkown
|
page readonly
|
|
|
|
262D000
|
unkown
|
page read and write
|
|
|
|
6989B7E000
|
unkown
|
page read and write
|
|
|
|
1F8D000
|
unkown
|
page readonly
|
|
|
|
951127D000
|
unkown
|
page read and write
|
|
|
|
20196D40000
|
heap private
|
page read and write
|
|
|
|
275DBE71000
|
unkown
|
page read and write
|
|
|
|
7FF52FCB6000
|
unkown
|
page readonly
|
|
|
|
1DDAEA56000
|
unkown
|
page read and write
|
|
|
|
2E2E68ED000
|
unkown
|
page read and write
|
|
|
|
1FB0B613000
|
unkown
|
page read and write
|
|
|
|
14504AC0000
|
unkown
|
page readonly
|
|
|
|
14509224000
|
unkown
|
page read and write
|
|
|
|
A54D97B000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBE7000
|
unkown
|
page readonly
|
|
|
|
1FD319D0000
|
unkown
|
page readonly
|
|
|
|
7FF50FFE6000
|
unkown
|
page readonly
|
|
|
|
1E70888A000
|
unkown
|
page read and write
|
|
|
|
7FF5C4AE8000
|
unkown
|
page readonly
|
|
|
|
7FF50774F000
|
unkown
|
page readonly
|
|
|
|
7FF507708000
|
unkown
|
page readonly
|
|
|
|
14503A00000
|
unkown
|
page read and write
|
|
|
|
1FD31890000
|
heap private
|
page read and write
|
|
|
|
FADF37F000
|
unkown
|
page read and write
|
|
|
|
7FF58DAA2000
|
unkown
|
page readonly
|
|
|
|
2E2E6966000
|
unkown
|
page read and write
|
|
|
|
1FD31A69000
|
unkown
|
page read and write
|
|
|
|
7FF5D1F0D000
|
unkown
|
page readonly
|
|
|
|
20196F13000
|
unkown
|
page read and write
|
|
|
|
1FD31A5E000
|
unkown
|
page read and write
|
|
|
|
341D000
|
unkown
|
page read and write
|
|
|
|
7FF51F18F000
|
unkown
|
page readonly
|
|
|
|
7FF5C4B33000
|
unkown
|
page readonly
|
|
|
|
5534AB000
|
unkown
|
page read and write
|
|
|
|
7FF565E9B000
|
unkown
|
page readonly
|
|
|
|
2E2E8A7C000
|
unkown
|
page read and write
|
|
|
|
232F9A4D000
|
unkown
|
page read and write
|
|
|
|
2E2E6790000
|
unkown
|
page write copy
|
|
|
|
232F9A86000
|
unkown
|
page read and write
|
|
|
|
7FF51C5F0000
|
unkown
|
page readonly
|
|
|
|
7FF565E94000
|
unkown
|
page readonly
|
|
|
|
7FF5AEF72000
|
unkown
|
page readonly
|
|
|
|
7FF5A58F7000
|
unkown
|
page readonly
|
|
|
|
7D5B077000
|
unkown
|
page read and write
|
|
|
|
2E2E895D000
|
unkown
|
page read and write
|
|
|
|
1865EF7D000
|
unkown
|
page read and write
|
|
|
|
14509294000
|
unkown
|
page readonly
|
|
|
|
2E2E9310000
|
unkown
|
page read and write
|
|
|
|
7FF5A57BC000
|
unkown
|
page readonly
|
|
|
|
1DDAEA50000
|
unkown
|
page read and write
|
|
|
|
55397F000
|
unkown
|
page read and write
|
|
|
|
7FF507647000
|
unkown
|
page readonly
|
|
|
|
7FF58DA6D000
|
unkown
|
page readonly
|
|
|
|
EB276FB000
|
unkown
|
page read and write
|
|
|
|
25F0446C000
|
unkown
|
page read and write
|
|
|
|
2E2E6829000
|
unkown
|
page read and write
|
|
|
|
3427000
|
unkown
|
page read and write
|
|
|
|
7FF5AF29C000
|
unkown
|
page readonly
|
|
|
|
25F05EE0000
|
unkown
|
page read and write
|
|
|
|
7FF51F025000
|
unkown
|
page readonly
|
|
|
|
1FB0BE02000
|
unkown
|
page read and write
|
|
|
|
1FD31A62000
|
unkown
|
page read and write
|
|
|
|
1865FB1B000
|
unkown
|
page read and write
|
|
|
|
1DDAEA00000
|
unkown
|
page read and write
|
|
|
|
CECAAB000
|
unkown
|
page read and write
|
|
|
|
7FF5A5593000
|
unkown
|
page readonly
|
|
|
|
7FF510455000
|
unkown
|
page readonly
|
|
|
|
1865EFDF000
|
unkown
|
page read and write
|
|
|
|
2E2E68E6000
|
unkown
|
page read and write
|
|
|
|
2AEDA000000
|
unkown
|
page readonly
|
|
|
|
7FF510004000
|
unkown
|
page readonly
|
|
|
|
1DDAEA3C000
|
unkown
|
page read and write
|
|
|
|
2E2E9110000
|
unkown
|
page read and write
|
|
|
|
1FB0B4A0000
|
heap default
|
page read and write
|
|
|
|
1F7D000
|
unkown
|
page readonly
|
|
|
|
15C8D220000
|
unkown
|
page read and write
|
|
|
|
DEF69F9000
|
unkown
|
page read and write
|
|
|
|
7FF5261DA000
|
unkown
|
page readonly
|
|
|
|
14509000000
|
unkown
|
page read and write
|
|
|
|
1865EFDD000
|
unkown
|
page read and write
|
|
|
|
7FF5DC953000
|
unkown
|
page readonly
|
|
|
|
2E2E9510000
|
unkown
|
page read and write
|
|
|
|
7FF5D1833000
|
unkown
|
page readonly
|
|
|
|
B2555FC000
|
unkown
|
page read and write
|
|
|
|
1E70A710000
|
unkown
|
page readonly
|
|
|
|
6989CFF000
|
unkown
|
page read and write
|
|
|
|
1FD31A34000
|
unkown
|
page read and write
|
|
|
|
1E70886E000
|
unkown
|
page read and write
|
|
|
|
EB2707B000
|
unkown
|
page read and write
|
|
|
|
1FD31A55000
|
unkown
|
page read and write
|
|
|
|
7FF51F19B000
|
unkown
|
page readonly
|
|
|
|
7FF51F1CF000
|
unkown
|
page readonly
|
|
|
|
275DBC70000
|
heap default
|
page read and write
|
|
|
|
20196F02000
|
unkown
|
page read and write
|
|
|
|
5990000
|
heap private
|
page read and write
|
|
|
|
2AED9DD0000
|
unkown
|
page read and write
|
|
|
|
7FF4FFB6E000
|
unkown
|
page readonly
|
|
|
|
7FF50FFEB000
|
unkown
|
page readonly
|
|
|
|
DEF677E000
|
unkown
|
page read and write
|
|
|
|
7FF5DCA0F000
|
unkown
|
page readonly
|
|
|
|
7FF5C479F000
|
unkown
|
page readonly
|
|
|
|
7FF507716000
|
unkown
|
page readonly
|
|
|
|
7FF58DA70000
|
unkown
|
page readonly
|
|
|
|
1865EFDF000
|
unkown
|
page read and write
|
|
|
|
7FF4FFA33000
|
unkown
|
page readonly
|
|
|
|
7FF5AEAE1000
|
unkown
|
page readonly
|
|
|
|
1E70B010000
|
unkown
|
page read and write
|
|
|
|
3530000
|
unkown
|
page readonly
|
|
|
|
EB272FC000
|
unkown
|
page read and write
|
|
|
|
7FF565E76000
|
unkown
|
page readonly
|
|
|
|
2E2E69A7000
|
unkown
|
page read and write
|
|
|
|
1865EFDD000
|
unkown
|
page read and write
|
|
|
|
7FF5A51B9000
|
unkown
|
page readonly
|
|
|
|
275DBE00000
|
unkown
|
page read and write
|
|
|
|
2E2E8D42000
|
unkown
|
page read and write
|
|
|
|
7FF58DB90000
|
unkown
|
page readonly
|
|
|
|
1FD31A41000
|
unkown
|
page read and write
|
|
|
|
13D707E000
|
unkown
|
page read and write
|
|
|
|
2AEDA540000
|
unkown
|
page write copy
|
|
|
|
14508FD0000
|
unkown
|
page read and write
|
|
|
|
167F4DE0000
|
unkown
|
page readonly
|
|
|
|
EB2737B000
|
unkown
|
page read and write
|
|
|
|
7FF5A59DE000
|
unkown
|
page readonly
|
|
|
|
1FD31900000
|
unkown
|
page readonly
|
|
|
|
7FF52FC25000
|
unkown
|
page readonly
|
|
|
|
7FF5D1EE4000
|
unkown
|
page readonly
|
|
|
|
7FF5D1F98000
|
unkown
|
page readonly
|
|
|
|
7D5B17F000
|
unkown
|
page read and write
|
|
|
|
7FF5DC9DB000
|
unkown
|
page readonly
|
|
|
|
21394A55000
|
unkown
|
page read and write
|
|
|
|
145092B4000
|
unkown
|
page readonly
|
|
|
|
2E2E8928000
|
unkown
|
page read and write
|
|
|
|
1865FE00000
|
unkown
|
page read and write
|
|
|
|
7FF5D1879000
|
unkown
|
page readonly
|
|
|
|
14503960000
|
heap default
|
page read and write
|
|
|
|
785F37B000
|
unkown
|
page read and write
|
|
|
|
1D06A44F000
|
unkown
|
page read and write
|
|
|
|
7FF50FCC9000
|
unkown
|
page readonly
|
|
|
|
7FF52648F000
|
unkown
|
page readonly
|
|
|
|
B25547F000
|
unkown
|
page read and write
|
|
|
|
DEF6BFF000
|
unkown
|
page read and write
|
|
|
|
2B25000
|
unkown
|
page readonly
|
|
|
|
275DBE6E000
|
unkown
|
page read and write
|
|
|
|
2E2E68E6000
|
unkown
|
page read and write
|
|
|
|
7FF58D9CD000
|
unkown
|
page readonly
|
|
|
|
20197800000
|
unkown
|
page readonly
|
|
|
|
275DBF02000
|
unkown
|
page read and write
|
|
|
|
7FF565E15000
|
unkown
|
page readonly
|
|
|
|
7FF5103DC000
|
unkown
|
page readonly
|
|
|
|
7FF5A58DC000
|
unkown
|
page readonly
|
|
|
|
7FF5D182E000
|
unkown
|
page readonly
|
|
|
|
7FF5A557F000
|
unkown
|
page readonly
|
|
|
|
2E2E8D02000
|
unkown
|
page read and write
|
|
|
|
20196DC0000
|
unkown
|
page readonly
|
|
|
|
7FF5A523C000
|
unkown
|
page readonly
|
|
|
|
7FF5A567A000
|
unkown
|
page readonly
|
|
|
|
A54D9FE000
|
unkown
|
page read and write
|
|
|
|
275DBE6F000
|
unkown
|
page read and write
|
|
|
|
145092C7000
|
unkown
|
page write copy
|
|
|
|
7FF5A56E1000
|
unkown
|
page readonly
|
|
|
|
232F9A50000
|
unkown
|
page read and write
|
|
|
|
7FF51C5EB000
|
unkown
|
page readonly
|
|
|
|
275DD7A0000
|
unkown
|
page read and write
|
|
|
|
7FF5DC9C8000
|
unkown
|
page readonly
|
|
|
|
14508FC0000
|
unkown
|
page read and write
|
|
|
|
1FB0B63D000
|
unkown
|
page read and write
|
|
|
|
2ABD000
|
unkown
|
page readonly
|
|
|
|
1FB0B4B0000
|
unkown
|
page readonly
|
|
|
|
1D06A470000
|
unkown
|
page read and write
|
|
|
|
B25507B000
|
unkown
|
page read and write
|
|
|
|
EB26AFF000
|
unkown
|
page read and write
|
|
|
|
1DDAE980000
|
heap private
|
page read and write
|
|
|
|
7FF5C49DD000
|
unkown
|
page readonly
|
|
|
|
7FF58DBBF000
|
unkown
|
page readonly
|
|
|
|
14503A8E000
|
unkown
|
page read and write
|
|
|
|
7FF51F1A0000
|
unkown
|
page readonly
|
|
|
|
7FF58D7AA000
|
unkown
|
page readonly
|
|
|
|
1DDAF140000
|
unkown
|
page read and write
|
|
|
|
1FD31A40000
|
unkown
|
page read and write
|
|
|
|
2E2E8973000
|
unkown
|
page read and write
|
|
|
|
2E2E86B0000
|
unkown
|
page readonly
|
|
|
|
7FF526533000
|
unkown
|
page readonly
|
|
|
|
EB2767D000
|
unkown
|
page read and write
|
|
|
|
1865F200000
|
unkown
|
page read and write
|
|
|
|
7FF5104BE000
|
unkown
|
page readonly
|
|
|
|
DEF697B000
|
unkown
|
page read and write
|
|
|
|
7FF52F9ED000
|
unkown
|
page readonly
|
|
|
|
7FF5C4B8F000
|
unkown
|
page readonly
|
|
|
|
7FF52FCEF000
|
unkown
|
page readonly
|
|
|
|
1865EF7D000
|
unkown
|
page read and write
|
|
|
|
167F4E6C000
|
unkown
|
page read and write
|
|
|
|
7FF50FD18000
|
unkown
|
page readonly
|
|
|
|
1E7088D7000
|
unkown
|
page read and write
|
|
|
|
29F0000
|
unkown
|
page readonly
|
|
|
|
1D06A400000
|
unkown
|
page read and write
|
|
|
|
CED57E000
|
unkown
|
page read and write
|
|
|
|
25F04429000
|
unkown
|
page read and write
|
|
|
|
7FF5DC9E0000
|
unkown
|
page readonly
|
|
|
|
7FF5DC9FE000
|
unkown
|
page readonly
|
|
|
|
7FF5DC8E4000
|
unkown
|
page readonly
|
|
|
|
4E621F5000
|
unkown
|
page read and write
|
|
|
|
7FF565EAB000
|
unkown
|
page readonly
|
|
|
|
2E2E9210000
|
unkown
|
page read and write
|
|
|
|
275DC000000
|
unkown
|
page readonly
|
|
|
|
1865EFF7000
|
unkown
|
page read and write
|
|
|
|
9B64B7F000
|
unkown
|
page read and write
|
|
|
|
7FF5265C0000
|
unkown
|
page readonly
|
|
|
|
69896DB000
|
unkown
|
page read and write
|
|
|
|
24E3000
|
unkown
|
page read and write
|
|
|
|
7FF54F0FB000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD50000
|
unkown
|
page readonly
|
|
|
|
1865FB19000
|
unkown
|
page read and write
|
|
|
|
7FF50FF4D000
|
unkown
|
page readonly
|
|
|
|
2E2E685B000
|
unkown
|
page read and write
|
|
|
|
1FA6000
|
unkown
|
page readonly
|
|
|
|
7FF507689000
|
unkown
|
page readonly
|
|
|
|
7FF54E79C000
|
unkown
|
page readonly
|
|
|
|
7FF56562E000
|
unkown
|
page readonly
|
|
|
|
15C8D680000
|
unkown
|
page readonly
|
|
|
|
7FF58DB0A000
|
unkown
|
page readonly
|
|
|
|
1865FD90000
|
unkown
|
page readonly
|
|
|
|
7FF5DC973000
|
unkown
|
page readonly
|
|
|
|
2E2E8926000
|
unkown
|
page read and write
|
|
|
|
2E2E68C7000
|
unkown
|
page read and write
|
|
|
|
2634000
|
unkown
|
page read and write
|
|
|
|
2637000
|
unkown
|
page read and write
|
|
|
|
1865EED0000
|
unkown
|
page read and write
|
|
|
|
1D06A513000
|
unkown
|
page read and write
|
|
|
|
35B4000
|
unkown
|
page read and write
|
|
|
|
3D2DCFE000
|
unkown
|
page read and write
|
|
|
|
7FF5DC787000
|
unkown
|
page readonly
|
|
|
|
1FD32202000
|
unkown
|
page read and write
|
|
|
|
7FF51F0FD000
|
unkown
|
page readonly
|
|
|
|
3410000
|
heap default
|
page read and write
|
|
|
|
2AFA000
|
unkown
|
page readonly
|
|
|
|
7FF58DA98000
|
unkown
|
page readonly
|
|
|
|
7FF58DA6A000
|
unkown
|
page readonly
|
|
|
|
1FB0B602000
|
unkown
|
page read and write
|
|
|
|
2B3D000
|
unkown
|
page readonly
|
|
|
|
14504900000
|
unkown
|
page read and write
|
|
|
|
167F4E68000
|
unkown
|
page read and write
|
|
|
|
7FF58DB8B000
|
unkown
|
page readonly
|
|
|
|
14503AA3000
|
unkown
|
page read and write
|
|
|
|
167F4E68000
|
unkown
|
page read and write
|
|
|
|
7FF51004A000
|
unkown
|
page readonly
|
|
|
|
14504190000
|
unkown
|
page readonly
|
|
|
|
14508FC0000
|
unkown
|
page read and write
|
|
|
|
EB270FC000
|
unkown
|
page read and write
|
|
|
|
2C9A000
|
unkown
|
page readonly
|
|
|
|
7FF5DC735000
|
unkown
|
page readonly
|
|
|
|
7FF51EF6D000
|
unkown
|
page readonly
|
|
|
|
7FF526311000
|
unkown
|
page readonly
|
|
|
|
7FF510408000
|
unkown
|
page readonly
|
|
|
|
1FB0000
|
unkown
|
page readonly
|
|
|
|
7FF52FBF7000
|
unkown
|
page readonly
|
|
|
|
2634000
|
unkown
|
page read and write
|
|
|
|
7FF54E8A4000
|
unkown
|
page readonly
|
|
|
|
7FF50744D000
|
unkown
|
page readonly
|
|
|
|
2C76000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page readonly
|
|
|
|
15C8D057000
|
heap default
|
page read and write
|
|
|
|
167F4D70000
|
heap private
|
page read and write
|
|
|
|
7FF5A59D4000
|
unkown
|
page readonly
|
|
|
|
1FD319E0000
|
unkown
|
page readonly
|
|
|
|
675F000
|
stack
|
page read and write
|
|
|
|
7FF51C555000
|
unkown
|
page readonly
|
|
|
|
2071000
|
unkown
|
page readonly
|
|
|
|
14509290000
|
unkown
|
page read and write
|
|
|
|
7FF51F109000
|
unkown
|
page readonly
|
|
|
|
2E2E68AE000
|
unkown
|
page read and write
|
|
|
|
B25557F000
|
unkown
|
page read and write
|
|
|
|
7FF5C48D7000
|
unkown
|
page readonly
|
|
|
|
14509204000
|
unkown
|
page read and write
|
|
|
|
7FF5A58A7000
|
unkown
|
page readonly
|
|
|
|
EB26A7B000
|
unkown
|
page read and write
|
|
|
|
2E2E8C00000
|
unkown
|
page read and write
|
|
|
|
7FF51EF9E000
|
unkown
|
page readonly
|
|
|
|
2600000
|
heap default
|
page read and write
|
|
|
|
A54DC7E000
|
unkown
|
page read and write
|
|
|
|
167F5000000
|
unkown
|
page readonly
|
|
|
|
1FD31A7A000
|
unkown
|
page read and write
|
|
|
|
7FF5265EF000
|
unkown
|
page readonly
|
|
|
|
7FF5AF35B000
|
unkown
|
page readonly
|
|
|
|
232F9CD0000
|
unkown
|
page readonly
|
|
|
|
2E2E9310000
|
unkown
|
page read and write
|
|
|
|
EB274FA000
|
unkown
|
page read and write
|
|
|
|
A54DE7F000
|
unkown
|
page read and write
|
|
|
|
2642000
|
unkown
|
page read and write
|
|
|
|
DEF687A000
|
unkown
|
page read and write
|
|
|
|
2C61000
|
unkown
|
page readonly
|
|
|
|
7FF565D05000
|
unkown
|
page readonly
|
|
|
|
1E70A660000
|
unkown
|
page read and write
|
|
|
|
14503A98000
|
unkown
|
page read and write
|
|
|
|
2E2E68DF000
|
unkown
|
page read and write
|
|
|
|
275DBE6E000
|
unkown
|
page read and write
|
|
|
|
2E2E68DF000
|
unkown
|
page read and write
|
|
|
|
7FF510425000
|
unkown
|
page readonly
|
|
|
|
23D0000
|
unkown
|
page read and write
|
|
|
|
2CA5000
|
unkown
|
page readonly
|
|
|
|
7FF52FC08000
|
unkown
|
page readonly
|
|
|
|
7FF58D764000
|
unkown
|
page readonly
|
|
|
|
7FF5DC9ED000
|
unkown
|
page readonly
|
|
|
|
14508E20000
|
unkown
|
page read and write
|
|
|
|
7FF54F028000
|
unkown
|
page readonly
|
|
|
|
7FF5C48CD000
|
unkown
|
page readonly
|
|
|
|
951117A000
|
unkown
|
page read and write
|
|
|
|
29C9000
|
unkown
|
page readonly
|
|
|
|
2770000
|
unkown
|
page readonly
|
|
|
|
7FF58D79D000
|
unkown
|
page readonly
|
|
|
|
95112FC000
|
unkown
|
page read and write
|
|
|
|
3421000
|
unkown
|
page read and write
|
|
|
|
2790000
|
unkown
|
page readonly
|
|
|
|
2AED9F13000
|
unkown
|
page read and write
|
|
|
|
2E2E89FE000
|
unkown
|
page read and write
|
|
|
|
14509320000
|
unkown
|
page read and write
|
|
|
|
7FF5A578D000
|
unkown
|
page readonly
|
|
|
|
2AEDA0D0000
|
unkown
|
page readonly
|
|
|
|
1865EE50000
|
unkown
|
page read and write
|
|
|
|
232F9A29000
|
unkown
|
page read and write
|
|
|
|
232F9A3C000
|
unkown
|
page read and write
|
|
|
|
345E000
|
stack
|
page read and write
|
|
|
|
7FF5C47BA000
|
unkown
|
page readonly
|
|
|
|
1865EF92000
|
unkown
|
page read and write
|
|
|
|
6989A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5AF2A0000
|
unkown
|
page readonly
|
|
|
|
7FF50FFDF000
|
unkown
|
page readonly
|
|
|
|
7FF565C73000
|
unkown
|
page readonly
|
|
|
|
1FD31A6A000
|
unkown
|
page read and write
|
|
|
|
7FF5AF2F3000
|
unkown
|
page readonly
|
|
|
|
7FF51F0DC000
|
unkown
|
page readonly
|
|
|
|
2E2E9110000
|
unkown
|
page read and write
|
|
|
|
7FF5A583F000
|
unkown
|
page readonly
|
|
|
|
7FF565E80000
|
unkown
|
page readonly
|
|
|
|
1865EEF0000
|
unkown
|
page readonly
|
|
|
|
7FF5104AF000
|
unkown
|
page readonly
|
|
|
|
3D2DE7B000
|
unkown
|
page read and write
|
|
|
|
7FF51F135000
|
unkown
|
page readonly
|
|
|
|
1FB0B580000
|
unkown
|
page readonly
|
|
|
|
2AED9DA0000
|
heap default
|
page read and write
|
|
|
|
167F4F00000
|
unkown
|
page read and write
|
|
|
|
7FF5A593A000
|
unkown
|
page readonly
|
|
|
|
5A60000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD5D000
|
unkown
|
page readonly
|
|
|
|
7FF5AF08D000
|
unkown
|
page readonly
|
|
|
|
7FF507516000
|
unkown
|
page readonly
|
|
|
|
FADF0FF000
|
unkown
|
page read and write
|
|
|
|
14503970000
|
unkown
|
page readonly
|
|
|
|
35AD000
|
unkown
|
page read and write
|
|
|
|
7D5B27E000
|
unkown
|
page read and write
|
|
|
|
1E70886C000
|
unkown
|
page read and write
|
|
|
|
14508EA0000
|
unkown
|
page read and write
|
|
|
|
2D3B000
|
unkown
|
page readonly
|
|
|
|
2E2E9410000
|
unkown
|
page read and write
|
|
|
|
7FF5261D2000
|
unkown
|
page readonly
|
|
|
|
785FDFE000
|
unkown
|
page read and write
|
|
|
|
232F9A2E000
|
unkown
|
page read and write
|
|
|
|
1FCA000
|
unkown
|
page readonly
|
|
|
|
7FF5AEF5F000
|
unkown
|
page readonly
|
|
|
|
7FF4FFC77000
|
unkown
|
page readonly
|
|
|
|
1D06AC02000
|
unkown
|
page read and write
|
|
|
|
FADF2FA000
|
unkown
|
page read and write
|
|
|
|
275DBC10000
|
heap private
|
page read and write
|
|
|
|
9B647EE000
|
unkown
|
page read and write
|
|
|
|
7FF565DFA000
|
unkown
|
page readonly
|
|
|
|
5E20000
|
unkown
|
page read and write
|
|
|
|
2E2E8A3E000
|
unkown
|
page read and write
|
|
|
|
3439000
|
unkown
|
page read and write
|
|
|
|
7FF5102FD000
|
unkown
|
page readonly
|
|
|
|
1FD31A5F000
|
unkown
|
page read and write
|
|
|
|
7FF5C4B88000
|
unkown
|
page readonly
|
|
|
|
25F04400000
|
unkown
|
page read and write
|
|
|
|
2E2E8A42000
|
unkown
|
page read and write
|
|
|
|
7FF5D1F15000
|
unkown
|
page readonly
|
|
|
|
7FF526427000
|
unkown
|
page readonly
|
|
|
|
CEDB7F000
|
unkown
|
page read and write
|
|
|
|
1865EFF7000
|
unkown
|
page read and write
|
|
|
|
7FF565EAF000
|
unkown
|
page readonly
|
|
|
|
14509400000
|
unkown
|
page readonly
|
|
|
|
232F98E0000
|
heap private
|
page read and write
|
|
|
|
D76CDFD000
|
unkown
|
page read and write
|
|
|
|
2AEDAB40000
|
unkown
|
page readonly
|
|
|
|
6790000
|
heap private
|
page read and write
|
|
|
|
2B11000
|
unkown
|
page readonly
|
|
|
|
14508FF0000
|
unkown
|
page read and write
|
|
|
|
7FF565E68000
|
unkown
|
page readonly
|
|
|
|
275DBE6D000
|
unkown
|
page read and write
|
|
|
|
7FF5A59EB000
|
unkown
|
page readonly
|
|
|
|
7FF526553000
|
unkown
|
page readonly
|
|
|
|
7FF565D24000
|
unkown
|
page readonly
|
|
|
|
29E7000
|
heap private
|
page read and write
|
|
|
|
7FF52F8D2000
|
unkown
|
page readonly
|
|
|
|
167F4E6E000
|
unkown
|
page read and write
|
|
|
|
14509014000
|
unkown
|
page read and write
|
|
|
|
1FD31A4E000
|
unkown
|
page read and write
|
|
|
|
7FF54F01C000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD7F000
|
unkown
|
page readonly
|
|
|
|
7FF5103F7000
|
unkown
|
page readonly
|
|
|
|
2E2E68E5000
|
unkown
|
page read and write
|
|
|
|
1D06A502000
|
unkown
|
page read and write
|
|
|
|
14503A58000
|
unkown
|
page read and write
|
|
|
|
2E2E89B8000
|
unkown
|
page read and write
|
|
|
|
7FF51F044000
|
unkown
|
page readonly
|
|
|
|
15C8F210000
|
heap private
|
page read and write
|
|
|
|
1FB0BB90000
|
unkown
|
page readonly
|
|
|
|
EB275FA000
|
unkown
|
page read and write
|
|
|
|
14503A73000
|
unkown
|
page read and write
|
|
|
|
7FF50772D000
|
unkown
|
page readonly
|
|
|
|
1E70886D000
|
unkown
|
page read and write
|
|
|
|
14503B00000
|
unkown
|
page read and write
|
|
|
|
7FF5A58B0000
|
unkown
|
page readonly
|
|
|
|
EB26EFB000
|
unkown
|
page read and write
|
|
|
|
7FF51EC93000
|
unkown
|
page readonly
|
|
|
|
7FF5264E3000
|
unkown
|
page readonly
|
|
|
|
DEF67FA000
|
unkown
|
page read and write
|
|
|
|
7FF5AF2D3000
|
unkown
|
page readonly
|
|
|
|
7FF58DA94000
|
unkown
|
page readonly
|
|
|
|
7FF58D771000
|
unkown
|
page readonly
|
|
|
|
7FF50FDBD000
|
unkown
|
page readonly
|
|
|
|
2E2E8948000
|
unkown
|
page read and write
|
|
|
|
1FB0B65E000
|
unkown
|
page read and write
|
|
|
|
2E2E8750000
|
unkown
|
page read and write
|
|
|
|
7FF58DA77000
|
unkown
|
page readonly
|
|
|
|
275DBE13000
|
unkown
|
page read and write
|
|
|
|
3415000
|
unkown
|
page read and write
|
|
|
|
2AE0000
|
unkown
|
page readonly
|
|
|
|
7FF5104EF000
|
unkown
|
page readonly
|
|
|
|
2AEDA800000
|
unkown
|
page readonly
|
|
|
|
7FF5A59ED000
|
unkown
|
page readonly
|
|
|
|
7FF5264FC000
|
unkown
|
page readonly
|
|
|
|
7FF50763C000
|
unkown
|
page readonly
|
|
|
|
275DBE2B000
|
unkown
|
page read and write
|
|
|
|
2AD1000
|
unkown
|
page readonly
|
|
|
|
7FF5AF37E000
|
unkown
|
page readonly
|
|
|
|
7FF5103E7000
|
unkown
|
page readonly
|
|
|
|
29E4000
|
unkown
|
page readonly
|
|
|
|
7FF5261BF000
|
unkown
|
page readonly
|
|
|
|
2E2E9010000
|
unkown
|
page read and write
|
|
|
|
2D57000
|
unkown
|
page readonly
|
|
|
|
7FF58D910000
|
unkown
|
page readonly
|
|
|
|
7FF51F11A000
|
unkown
|
page readonly
|
|
|
|
7FF565E6F000
|
unkown
|
page readonly
|
|
|
|
3439000
|
unkown
|
page read and write
|
|
|
|
7FF4FF504000
|
unkown
|
page readonly
|
|
|
|
7FF5265BB000
|
unkown
|
page readonly
|
|
|
|
14508E70000
|
unkown
|
page readonly
|
|
|
|
7FF52FCEB000
|
unkown
|
page readonly
|
|
|
|
1D06A43C000
|
unkown
|
page read and write
|
|
|
|
7FF5AF264000
|
unkown
|
page readonly
|
|
|
|
2E2E689E000
|
unkown
|
page read and write
|
|
|
|
7FF5C4B9B000
|
unkown
|
page readonly
|
|
|
|
2FFA000
|
unkown
|
page read and write
|
|
|
|
1E708899000
|
unkown
|
page read and write
|
|
|
|
1FE1000
|
unkown
|
page readonly
|
|
|
|
3419000
|
unkown
|
page read and write
|
|
|
|
1FD31A31000
|
unkown
|
page read and write
|
|
|
|
3D2DC7B000
|
unkown
|
page read and write
|
|
|
|
232F9B13000
|
unkown
|
page read and write
|
|
|
|
1E708800000
|
unkown
|
page read and write
|
|
|
|
2E2E9310000
|
unkown
|
page read and write
|
|
|
|
7FF51C583000
|
unkown
|
page readonly
|
|
|
|
14503900000
|
heap private
|
page read and write
|
|
|
|
1865EFDF000
|
unkown
|
page read and write
|
|
|
|
6AE0000
|
unkown
|
page read and write
|
|
|
|
4E6247F000
|
unkown
|
page read and write
|
|
|
|
275DBD50000
|
unkown
|
page write copy
|
|
|
|
2E2E86E0000
|
unkown
|
page read and write
|
|
|
|
25F05FE0000
|
unkown
|
page readonly
|
|
|
|
1E708A00000
|
unkown
|
page write copy
|
|
|
|
7FF5C4AA4000
|
unkown
|
page readonly
|
|
|
|
1865EFCD000
|
unkown
|
page read and write
|
|
|
|
7FF5A59A8000
|
unkown
|
page readonly
|
|
|
|
7FF58DBAB000
|
unkown
|
page readonly
|
|
|
|
7FF5A59AF000
|
unkown
|
page readonly
|
|
|
|
7FF58D78F000
|
unkown
|
page readonly
|
|
|
|
7FF5101C8000
|
unkown
|
page readonly
|
|
|
|
7FF51C61F000
|
unkown
|
page readonly
|
|
|
|
1FD31A27000
|
unkown
|
page read and write
|
|
|
|
20196DF0000
|
unkown
|
page readonly
|
|
|
|
7FF52653A000
|
unkown
|
page readonly
|
|
|
|
31F0000
|
unkown
|
page readonly
|
|
|
|
7FF5DC5FA000
|
unkown
|
page readonly
|
|
|
|
2E2E9110000
|
unkown
|
page read and write
|
|
|
|
7FF51036E000
|
unkown
|
page readonly
|
|
|
|
7FF5A58C8000
|
unkown
|
page readonly
|
|
|
|
7FF51C58D000
|
unkown
|
page readonly
|
|
|
|
7FF565988000
|
unkown
|
page readonly
|
|
|
|
7FF58DB78000
|
unkown
|
page readonly
|
|
|
|
7FF50FF2D000
|
unkown
|
page readonly
|
|
|
|
1E67000
|
unkown
|
page readonly
|
|
|
|
232F9A6F000
|
unkown
|
page read and write
|
|
|
|
1E708869000
|
unkown
|
page read and write
|
|
|
|
1E7088BE000
|
unkown
|
page read and write
|
|
|
|
7FF507685000
|
unkown
|
page readonly
|
|
|
|
2D45000
|
unkown
|
page readonly
|
|
|
|
7FF58D760000
|
unkown
|
page readonly
|
|
|
|
145092E0000
|
unkown
|
page read and write
|
|
|
|
7D5AADB000
|
unkown
|
page read and write
|
|
|
|
95111FF000
|
unkown
|
page read and write
|
|
|
|
3415000
|
unkown
|
page read and write
|
|
|
|
7FF5262F7000
|
unkown
|
page readonly
|
|
|
|
7FF526529000
|
unkown
|
page readonly
|
|
|
|
35A9000
|
unkown
|
page read and write
|
|
|
|
7FF50769A000
|
unkown
|
page readonly
|
|
|
|
7FF54F10F000
|
unkown
|
page readonly
|
|
|
|
7FF5DC9CF000
|
unkown
|
page readonly
|
|
|
|
21394A13000
|
unkown
|
page read and write
|
|
|
|
25F046D0000
|
unkown
|
page write copy
|
|
|
|
145041A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C4BAD000
|
unkown
|
page readonly
|
|
|
|
7FF5264C4000
|
unkown
|
page readonly
|
|
|
|
1E70A944000
|
unkown
|
page read and write
|
|
|
|
35A9000
|
unkown
|
page read and write
|
|
|
|
7FF5DC8C0000
|
unkown
|
page readonly
|
|
|
|
7D5AB5D000
|
unkown
|
page read and write
|
|
|
|
20196E75000
|
unkown
|
page read and write
|
|
|
|
7FF51EFBE000
|
unkown
|
page readonly
|
|
|
|
275DBC80000
|
unkown
|
page readonly
|
|
|
|
1DDAF740000
|
unkown
|
page readonly
|
|
|
|
32E0000
|
heap default
|
page read and write
|
|
|
|
7FF5AF107000
|
unkown
|
page readonly
|
|
|
|
651F000
|
stack
|
page read and write
|
|
|
|
2E2E8802000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBCF000
|
unkown
|
page readonly
|
|
|
|
1FD31A73000
|
unkown
|
page read and write
|
|
|
|
3390000
|
unkown
|
page readonly
|
|
|
|
7FF5265DE000
|
unkown
|
page readonly
|
|
|
|
1FD31C00000
|
unkown
|
page readonly
|
|
|
|
7FF52FC3A000
|
unkown
|
page readonly
|
|
|
|
2B44000
|
unkown
|
page readonly
|
|
|
|
15C8D072000
|
heap default
|
page read and write
|
|
|
|
21394B02000
|
unkown
|
page read and write
|
|
|
|
20197602000
|
unkown
|
page read and write
|
|
|
|
1D06A413000
|
unkown
|
page read and write
|
|
|
|
7FF51F1B4000
|
unkown
|
page readonly
|
|
|
|
1865FDB0000
|
unkown
|
page read and write
|
|
|
|
1450904F000
|
unkown
|
page read and write
|
|
|
|
7FF50774D000
|
unkown
|
page readonly
|
|
|
|
EB279FC000
|
unkown
|
page read and write
|
|
|
|
D76CAFB000
|
unkown
|
page read and write
|
|
|
|
341D000
|
unkown
|
page read and write
|
|
|
|
31C6000
|
unkown
|
page read and write
|
|
|
|
7FF51C60E000
|
unkown
|
page readonly
|
|
|
|
7FF5C4B13000
|
unkown
|
page readonly
|
|
|
|
14503B13000
|
unkown
|
page read and write
|
|
|
|
2E2E8B82000
|
unkown
|
page read and write
|
|
|
|
232F9A4C000
|
unkown
|
page read and write
|
|
|
|
7FF506F76000
|
unkown
|
page readonly
|
|
|
|
7FF5DC928000
|
unkown
|
page readonly
|
|
|
|
1865FB60000
|
unkown
|
page read and write
|
|
|
|
785FBFF000
|
unkown
|
page read and write
|
|
|
|
20196DD0000
|
unkown
|
page read and write
|
|
|
|
1C80000
|
unkown
|
page readonly
|
|
|
|
CED17B000
|
unkown
|
page read and write
|
|
|
|
1E708913000
|
unkown
|
page read and write
|
|
|
|
2D41000
|
unkown
|
page readonly
|
|
|
|
7FF52609F000
|
unkown
|
page readonly
|
|
|
|
2E2E8948000
|
unkown
|
page read and write
|
|
|
|
167F4E29000
|
unkown
|
page read and write
|
|
|
|
67A0000
|
unkown
|
page readonly
|
|
|
|
66DF000
|
stack
|
page read and write
|
|
|
|
7FF50770F000
|
unkown
|
page readonly
|
|
|
|
232F9A4F000
|
unkown
|
page read and write
|
|
|
|
3424000
|
unkown
|
page read and write
|
|
|
|
7FF4FFB43000
|
unkown
|
page readonly
|
|
|
|
2E2E6924000
|
unkown
|
page read and write
|
|
|
|
7FF51F196000
|
unkown
|
page readonly
|
|
|
|
2E2E9610000
|
unkown
|
page read and write
|
|
|
|
1865F225000
|
heap private
|
page read and write
|
|
|
|
7FF565E8D000
|
unkown
|
page readonly
|
|
|
|
275DBE56000
|
unkown
|
page read and write
|
|
|
|
2E2E68EC000
|
unkown
|
page read and write
|
|
|
|
201D000
|
unkown
|
page readonly
|
|
|
|
1FB0B62A000
|
unkown
|
page read and write
|
|
|
|
1FD31A56000
|
unkown
|
page read and write
|
|
|
|
CED47B000
|
unkown
|
page read and write
|
|
|
|
25F04513000
|
unkown
|
page read and write
|
|
|
|
7FF5DC8BD000
|
unkown
|
page readonly
|
|
|
|
1E70886A000
|
unkown
|
page read and write
|
|
|
|
7FF5104ED000
|
unkown
|
page readonly
|
|
|
|
6520000
|
unkown
|
page read and write
|
|
|
|
CED5FF000
|
unkown
|
page read and write
|
|
|
|
7FF52638D000
|
unkown
|
page readonly
|
|
|
|
14503980000
|
unkown
|
page readonly
|
|
|
|
1FD31B02000
|
unkown
|
page read and write
|
|
|
|
14503B02000
|
unkown
|
page read and write
|
|
|
|
7FF5C4AFD000
|
unkown
|
page readonly
|
|
|
|
D76C55C000
|
unkown
|
page read and write
|
|
|
|
2BB7000
|
unkown
|
page readonly
|
|
|
|
167F4E40000
|
unkown
|
page read and write
|
|
|
|
2AED9E3E000
|
unkown
|
page read and write
|
|
|
|
2AD9000
|
unkown
|
page readonly
|
|
|
|
7FF4FFCC3000
|
unkown
|
page readonly
|
|
|
|
2E2E8962000
|
unkown
|
page read and write
|
|
|
|
236B000
|
stack
|
page read and write
|
|
|
|
2E2E8370000
|
unkown
|
page readonly
|
|
|
|
7FF5265CD000
|
unkown
|
page readonly
|
|
|
|
7FF51043A000
|
unkown
|
page readonly
|
|
|
|
7FF58DBAE000
|
unkown
|
page readonly
|
|
|
|
1FFD000
|
unkown
|
page readonly
|
|
|
|
7FF58DAD8000
|
unkown
|
page readonly
|
|
|
|
7FF5C4BA0000
|
unkown
|
page readonly
|
|
|
|
7FF54F053000
|
unkown
|
page readonly
|
|
|
|
35AD000
|
unkown
|
page read and write
|
|
|
|
1E708918000
|
unkown
|
page read and write
|
|
|
|
7FF510312000
|
unkown
|
page readonly
|
|
|
|
1E70A913000
|
unkown
|
page read and write
|
|
|
|
1865FDA0000
|
unkown
|
page read and write
|
|
|
|
262D000
|
unkown
|
page read and write
|
|
|
|
7FF5D1F45000
|
unkown
|
page readonly
|
|
|
|
167F4E67000
|
unkown
|
page read and write
|
|
|
|
2BA1000
|
unkown
|
page readonly
|
|
|
|
232FA740000
|
unkown
|
page readonly
|
|
|
|
25F04920000
|
unkown
|
page readonly
|
|
|
|
591E000
|
stack
|
page read and write
|
|
|
|
2E2E8750000
|
unkown
|
page readonly
|
|
|
|
698A07D000
|
unkown
|
page read and write
|
|
|
|
275DBE68000
|
unkown
|
page read and write
|
|
|
|
7FF51F113000
|
unkown
|
page readonly
|
|
|
|
20196DA0000
|
heap default
|
page read and write
|
|
|
|
232F9970000
|
unkown
|
page read and write
|
|
|
|
7FF565DE9000
|
unkown
|
page readonly
|
|
|
|
7FF5DC717000
|
unkown
|
page readonly
|
|
|
|
2B1C000
|
unkown
|
page readonly
|
|
|
|
2E2E6800000
|
unkown
|
page read and write
|
|
|
|
14509290000
|
unkown
|
page write copy
|
|
|
|
2E2E9210000
|
unkown
|
page read and write
|
|
|
|
7FF5264D2000
|
unkown
|
page readonly
|
|
|
|
D76C9FE000
|
unkown
|
page read and write
|
|
|
|
1DDAE9E0000
|
heap default
|
page read and write
|
|
|
|
1865EFCE000
|
unkown
|
page read and write
|
|
|
|
14504359000
|
unkown
|
page read and write
|
|
|
|
2B42000
|
unkown
|
page readonly
|
|
|
|
14504200000
|
unkown
|
page read and write
|
|
|
|
213964A0000
|
unkown
|
page readonly
|
|
|
|
CED27E000
|
unkown
|
page read and write
|
|
|
|
7FF565DDD000
|
unkown
|
page readonly
|
|
|
|
7FF52FBFC000
|
unkown
|
page readonly
|
|
|
|
14509062000
|
unkown
|
page read and write
|
|
|
|
1D06A2E0000
|
heap default
|
page read and write
|
|
|
|
1FD31A00000
|
unkown
|
page read and write
|
|
|
|
7FF5AF2A8000
|
unkown
|
page readonly
|
|
|
|
7FF5DC5ED000
|
unkown
|
page readonly
|
|
|
|
1DDAEA02000
|
unkown
|
page read and write
|
|
|
|
15C8D2F0000
|
unkown
|
page readonly
|
|
|
|
2E2E6922000
|
unkown
|
page read and write
|
|
|
|
7FF51F0C7000
|
unkown
|
page readonly
|
|
|
|
25F04500000
|
unkown
|
page read and write
|
|
|
|
2990000
|
unkown
|
page read and write
|
|
|
|
3460000
|
unkown
|
page readonly
|
|
|
|
2E2E8270000
|
unkown
|
page read and write
|
|
|
|
7FF50FF9F000
|
unkown
|
page readonly
|
|
|
|
9B64AFA000
|
unkown
|
page read and write
|
|
|
|
EB26B7E000
|
unkown
|
page read and write
|
|
|
|
7FF50771B000
|
unkown
|
page readonly
|
|
|
|
1D06A600000
|
unkown
|
page readonly
|
|
|
|
7FF58D937000
|
unkown
|
page readonly
|
|
|
|
1865EFA7000
|
unkown
|
page read and write
|
|
|
|
2CB5000
|
unkown
|
page readonly
|
|
|
|
B25527C000
|
unkown
|
page read and write
|
|
|
|
2E2E8B82000
|
unkown
|
page read and write
|
|
|
|
1D06A44C000
|
unkown
|
page read and write
|
|
|
|
7FF5104DE000
|
unkown
|
page readonly
|
|
|
|
20197460000
|
unkown
|
page readonly
|
|
|
|
14508E30000
|
unkown
|
page read and write
|
|
|
|
7FF565979000
|
unkown
|
page readonly
|
|
|
|
33A0000
|
unkown
|
page readonly
|
|
|
|
7FF5A58FC000
|
unkown
|
page readonly
|
|
|
|
33FA000
|
heap default
|
page read and write
|
|
|
|
7FF5D1F23000
|
unkown
|
page readonly
|
|
|
|
145041C0000
|
unkown
|
page readonly
|
|
|
|
1FD319F0000
|
unkown
|
page read and write
|
|
|
|
14509320000
|
unkown
|
page readonly
|
|
|
|
1865EEB0000
|
unkown
|
page read and write
|
|
|
|
20197000000
|
unkown
|
page readonly
|
|
|
|
2AED9DB0000
|
unkown
|
page readonly
|
|
|
|
2014000
|
unkown
|
page readonly
|
|
|
|
2E2E8A00000
|
unkown
|
page read and write
|
|
|
|
EB26F79000
|
unkown
|
page read and write
|
|
|
|
295A000
|
unkown
|
page readonly
|
|
|
|
34F0000
|
unkown
|
page readonly
|
|
|
|
7FF58DAC7000
|
unkown
|
page readonly
|
|
|
|
2AED9F02000
|
unkown
|
page read and write
|
|
|
|
7FF507632000
|
unkown
|
page readonly
|
|
|
|
7FF52FCBB000
|
unkown
|
page readonly
|
|
|
|
7FF5AF2C5000
|
unkown
|
page readonly
|
|
|
|
28A0000
|
unkown
|
page readonly
|
|
|
|
262A000
|
unkown
|
page read and write
|
|
|
|
1865EF5F000
|
unkown
|
page read and write
|
|
|
|
785F9FF000
|
unkown
|
page read and write
|
|
|
|
7FF5AF247000
|
unkown
|
page readonly
|
|
|
|
2AED9EC1000
|
unkown
|
page read and write
|
|
|
|
275DBF13000
|
unkown
|
page read and write
|
|
|
|
7FF51EC99000
|
unkown
|
page readonly
|
|
|
|
1E708720000
|
unkown
|
page readonly
|
|
|
|
1E708857000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCAD000
|
unkown
|
page readonly
|
|
|
|
2E2E9310000
|
unkown
|
page read and write
|
|
|
|
275DBE3F000
|
unkown
|
page read and write
|
|
|
|
7FF58DBBB000
|
unkown
|
page readonly
|
|
|
|
2E2E68DE000
|
unkown
|
page read and write
|
|
|
|
4E6227F000
|
unkown
|
page read and write
|
|
|
|
1865F1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5C4BBB000
|
unkown
|
page readonly
|
|
|
|
2E2E8A99000
|
unkown
|
page read and write
|
|
|
|
7FF507624000
|
unkown
|
page readonly
|
|
|
|
7FF51C303000
|
unkown
|
page readonly
|
|
|
|
7FF50FCC8000
|
unkown
|
page readonly
|
|
|
|
2CCD000
|
unkown
|
page readonly
|
|
|
|
63E0000
|
unkown
|
page readonly
|
|
|
|
7FF5265EB000
|
unkown
|
page readonly
|
|
|
|
1FB4000
|
unkown
|
page readonly
|
|
|
|
7FF5AEF6D000
|
unkown
|
page readonly
|
|
|
|
1DDAF202000
|
unkown
|
page read and write
|
|
|
|
25F04413000
|
unkown
|
page read and write
|
|
|
|
2AEDA700000
|
unkown
|
page read and write
|
|
|
|
2E2E9000000
|
unkown
|
page read and write
|
|
|
|
EB26BFA000
|
unkown
|
page read and write
|
|
|
|
7FF51C5D8000
|
unkown
|
page readonly
|
|
|
|
7FF4FF858000
|
unkown
|
page readonly
|
|
|
|
9510D4B000
|
unkown
|
page read and write
|
|
|
|
2997000
|
unkown
|
page readonly
|
|
|
|
EB2717B000
|
unkown
|
page read and write
|
|
|
|
2CDD000
|
unkown
|
page readonly
|
|
|
|
232F9B02000
|
unkown
|
page read and write
|
|
|
|
7FF5104DB000
|
unkown
|
page readonly
|
|
|
|
14509420000
|
unkown
|
page readonly
|
|
|
|
32CA000
|
heap private
|
page read and write
|
|
|
|
1865EF92000
|
unkown
|
page read and write
|
|
|
|
7FF54F0CF000
|
unkown
|
page readonly
|
|
|
|
2E2E68A8000
|
unkown
|
page read and write
|
|
|
|
7FF510364000
|
unkown
|
page readonly
|
|
|
|
7FF4FFCB5000
|
unkown
|
page readonly
|
|
|
|
1E70A6F0000
|
unkown
|
page readonly
|
|
|
|
1D06A452000
|
unkown
|
page read and write
|
|
|
|
1FD31A5C000
|
unkown
|
page read and write
|
|
|
|
B2556FC000
|
unkown
|
page read and write
|
|
|
|
1FD31A60000
|
unkown
|
page read and write
|
|
|
|
2E2E6925000
|
unkown
|
page read and write
|
|
|
|
167F4E68000
|
unkown
|
page read and write
|
|
|
|
2E2E8750000
|
unkown
|
page read and write
|
|
|
|
1865EFBF000
|
unkown
|
page read and write
|
|
|
|
CECEF7000
|
unkown
|
page read and write
|
|
|
|
7FF5AF37B000
|
unkown
|
page readonly
|
|
|
|
14509380000
|
unkown
|
page readonly
|
|
|
|
B25597E000
|
unkown
|
page read and write
|
|
|
|
7FF50FF03000
|
unkown
|
page readonly
|
|
|
|
CED4FE000
|
unkown
|
page read and write
|
|
|
|
2E2E8E00000
|
unkown
|
page readonly
|
|
|
|
2E2E6898000
|
unkown
|
page read and write
|
|
|
|
7FF5073DA000
|
unkown
|
page readonly
|
|
|
|
1DDAE9F0000
|
unkown
|
page readonly
|
|
|
|
14509200000
|
unkown
|
page read and write
|
|
|
|
15C8D050000
|
heap default
|
page read and write
|
|
|
|
1E708813000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCB9000
|
unkown
|
page readonly
|
|
|
|
275DBE6D000
|
unkown
|
page read and write
|
|
|
|
FADF1FE000
|
unkown
|
page read and write
|
|
|
|
14504202000
|
unkown
|
page read and write
|
|
|
|
232A000
|
unkown
|
page read and write
|
|
|
|
7FF5D1FCE000
|
unkown
|
page readonly
|
|
|
|
5539FE000
|
unkown
|
page read and write
|
|
|
|
7FF50FFFD000
|
unkown
|
page readonly
|
|
|
|
7FF510282000
|
unkown
|
page readonly
|
|
|
|
1865EF61000
|
unkown
|
page read and write
|
|
|
|
7FF54F0C8000
|
unkown
|
page readonly
|
|
|
|
7FF4FFCE5000
|
unkown
|
page readonly
|
|
|
|
7FF5103C4000
|
unkown
|
page readonly
|
|
|
|
CED97C000
|
unkown
|
page read and write
|
|
|
|
2E2E68F8000
|
unkown
|
page read and write
|
|
|
|
D76C5DE000
|
unkown
|
page read and write
|
|
|
|
2AC1000
|
unkown
|
page readonly
|
|
|
|
207C000
|
unkown
|
page readonly
|
|
|
|
1D06AA90000
|
unkown
|
page readonly
|
|
|
|
2E2E8A45000
|
unkown
|
page read and write
|
|
|
|
1DDAEA70000
|
unkown
|
page read and write
|
|
|
|
2E2E8A48000
|
unkown
|
page read and write
|
|
|
|
785EF3B000
|
unkown
|
page read and write
|
|
|
|
7FF51C563000
|
unkown
|
page readonly
|
|
|
|
1E708874000
|
unkown
|
page read and write
|
|
|
|
7FF5104BB000
|
unkown
|
page readonly
|
|
|
|
2E2E8D02000
|
unkown
|
page read and write
|
|
|
|
5920000
|
unkown
|
page read and write
|
|
|
|
29A2000
|
unkown
|
page readonly
|
|
|
|
15C8D2E5000
|
heap private
|
page read and write
|
|
|
|
7FF5A58C4000
|
unkown
|
page readonly
|
|
|
|
3D2DDFF000
|
unkown
|
page read and write
|
|
|
|
EB277FC000
|
unkown
|
page read and write
|
|
|
|
7FF5AF19D000
|
unkown
|
page readonly
|
|
|
|
65A4000
|
heap private
|
page read and write
|
|
|
|
15C8D08E000
|
heap default
|
page read and write
|
|
|
|
167F4DD0000
|
heap default
|
page read and write
|
|
|
|
2E2E68DE000
|
unkown
|
page read and write
|
|
|
|
14503A7C000
|
unkown
|
page read and write
|
|
|
|
7FF5DC70D000
|
unkown
|
page readonly
|
|
|
|
15C8D05A000
|
heap default
|
page read and write
|
|
|
|
7FF51F1AD000
|
unkown
|
page readonly
|
|
|
|
7FF51C4BF000
|
unkown
|
page readonly
|
|
|
|
7FF5AF2C9000
|
unkown
|
page readonly
|
|
|
|
35A5000
|
unkown
|
page read and write
|
|
|
|
D76CCFF000
|
unkown
|
page read and write
|
|
|
|
7FF5A58A0000
|
unkown
|
page readonly
|
|
|
|
7FF5DCA0B000
|
unkown
|
page readonly
|
|
|
|
1865FD80000
|
unkown
|
page read and write
|
|
|
|
7FF5DC5DF000
|
unkown
|
page readonly
|
|
|
|
7FF51EF93000
|
unkown
|
page readonly
|
|
|
|
2E2E686A000
|
unkown
|
page read and write
|
|
|
|
20196DB0000
|
unkown
|
page readonly
|
|
|
|
7FF5AF38F000
|
unkown
|
page readonly
|
|
|
|
7FF51001F000
|
unkown
|
page readonly
|
|
|
|
35AA000
|
unkown
|
page read and write
|
|
|
|
7FF5A59DB000
|
unkown
|
page readonly
|
|
|
|
15C8D2C0000
|
unkown
|
page readonly
|
|
|
|
145090B2000
|
unkown
|
page read and write
|
|
|
|
1DDAEA8E000
|
unkown
|
page read and write
|
|
|
|
7FF5A56E3000
|
unkown
|
page readonly
|
|
|
|
7FF4FFC8C000
|
unkown
|
page readonly
|
|
|
|
7FF52F8CD000
|
unkown
|
page readonly
|
|
|
|
145092F0000
|
unkown
|
page read and write
|
|
|
|
7FF565CFF000
|
unkown
|
page readonly
|
|
|
|
2AED9EB9000
|
unkown
|
page read and write
|
|
|
|
1865EF92000
|
unkown
|
page read and write
|
|
|
|
1E708871000
|
unkown
|
page read and write
|
|
|
|
20196E5A000
|
unkown
|
page read and write
|
|
|
|
3540000
|
unkown
|
page readonly
|
|
|
|
7FF5A5713000
|
unkown
|
page readonly
|
|
|
|
29DE000
|
unkown
|
page read and write
|
|
|
|
2E2E68E5000
|
unkown
|
page read and write
|
|
|
|
3560000
|
unkown
|
page read and write
|
|
|
|
7FF5074E2000
|
unkown
|
page readonly
|
|
|
|
2E2E893B000
|
unkown
|
page read and write
|
|
|
|
7FF5AEF7A000
|
unkown
|
page readonly
|
|
|
|
262D000
|
unkown
|
page read and write
|
|
|
|
145090B4000
|
unkown
|
page read and write
|
|
|
|
1865F1F0000
|
unkown
|
page read and write
|
|
|
|
2E2E8912000
|
unkown
|
page read and write
|
|
|
|
7FF5104EB000
|
unkown
|
page readonly
|
|
|
|
EB2787D000
|
unkown
|
page read and write
|
|
|
|
7FF58DA5F000
|
unkown
|
page readonly
|
|
|
|
7FF5AF356000
|
unkown
|
page readonly
|
|
|
|
2E2E68EB000
|
unkown
|
page read and write
|
|
|
|
7FF52651D000
|
unkown
|
page readonly
|
|
|
|
9B646EB000
|
unkown
|
page read and write
|
|
|
|
2E2E8B00000
|
unkown
|
page read and write
|
|
|
|
275DBE69000
|
unkown
|
page read and write
|
|
|
|
2AED9E6F000
|
unkown
|
page read and write
|
|
|
|
33F0000
|
heap default
|
page read and write
|
|
|
|
21394C00000
|
unkown
|
page readonly
|
|
|
|
2CC5000
|
unkown
|
page readonly
|
|
|
|
2E2E6945000
|
unkown
|
page read and write
|
|
|
|
7FF5A59CD000
|
unkown
|
page readonly
|
|
|
|
2780000
|
heap default
|
page read and write
|
|
|
|
3520000
|
heap private
|
page read and write
|
|
|
|
145041E0000
|
unkown
|
page readonly
|
|
|
|
7FF5A57A8000
|
unkown
|
page readonly
|
|
|
|
785F5FF000
|
unkown
|
page read and write
|
|
|
|
EB2727B000
|
unkown
|
page read and write
|
|
|
|
7FF565DF3000
|
unkown
|
page readonly
|
|
|
|
7FF5074ED000
|
unkown
|
page readonly
|
|
|
|
167F69C0000
|
unkown
|
page readonly
|
|
|
|
CED67F000
|
unkown
|
page read and write
|
|
|
|
1E70A6E0000
|
unkown
|
page read and write
|
|
|
|
7FF52649D000
|
unkown
|
page readonly
|
|
|
|
35AD000
|
unkown
|
page read and write
|
|
|
|
3432000
|
unkown
|
page read and write
|
|
|
|
1FB0B5D0000
|
unkown
|
page read and write
|
|
|
|
7FF58D8E5000
|
unkown
|
page readonly
|
|
|
|
2E2E6780000
|
heap default
|
page read and write
|
|
|
|
1865F010000
|
unkown
|
page readonly
|
|
|
|
7FF5AF23D000
|
unkown
|
page readonly
|
|
|
|
EB27A7F000
|
unkown
|
page read and write
|
|
|
|
7FF51C530000
|
unkown
|
page readonly
|
|
|
|
15C8D040000
|
unkown
|
page readonly
|
|
|
|
14503A29000
|
unkown
|
page read and write
|
|
|
|
1FB0B800000
|
unkown
|
page readonly
|
|
|
|
7FF51C5E6000
|
unkown
|
page readonly
|
|
|
|
1865F230000
|
unkown
|
page read and write
|
|
|
|
7FF5265D4000
|
unkown
|
page readonly
|
|
|
|
7FF5DCA0F000
|
unkown
|
page readonly
|
|
|
|
7FF5C4A80000
|
unkown
|
page readonly
|
|
|
|
167F4E6C000
|
unkown
|
page read and write
|
|
|
|
3419000
|
unkown
|
page read and write
|
|
|
|
2AED9E13000
|
unkown
|
page read and write
|
|
|
|
21394940000
|
unkown
|
page readonly
|
|
|
|
2B29000
|
unkown
|
page readonly
|
|
|
|
260A000
|
heap default
|
page read and write
|
|
|
|
2E2E89DC000
|
unkown
|
page read and write
|
|
|
|
27BA000
|
unkown
|
page readonly
|
|
|
|
7FF52FAFD000
|
unkown
|
page readonly
|
|
|
|
13D6BBC000
|
unkown
|
page read and write
|
|
|
|
7FF51F1BB000
|
unkown
|
page readonly
|
|
|
|
7FF52FC00000
|
unkown
|
page readonly
|
|
|
|
14508FD0000
|
unkown
|
page read and write
|
|
|
|
7FF5C4B09000
|
unkown
|
page readonly
|
|
|
|
7FF51C604000
|
unkown
|
page readonly
|
|
|
|
2E2E6966000
|
unkown
|
page read and write
|
|
|
|
25F06340000
|
unkown
|
page read and write
|
|
|
|
21394810000
|
heap default
|
page read and write
|
|
|
|
7FF51023A000
|
unkown
|
page readonly
|
|
|
|
14503AA5000
|
unkown
|
page read and write
|
|
|
|
2E2E894E000
|
unkown
|
page read and write
|
|
|
|
213948F0000
|
unkown
|
page write copy
|
|
|
|
341D000
|
unkown
|
page read and write
|
|
|
|
7FF5A5827000
|
unkown
|
page readonly
|
|
|
|
1FD31A02000
|
unkown
|
page read and write
|
|
|
|
1D06A3C0000
|
unkown
|
page readonly
|
|
|
|
145041F3000
|
unkown
|
page read and write
|
|
|
|
2750000
|
unkown
|
page read and write
|
|
|
|
1D06A508000
|
unkown
|
page read and write
|
|
|
|
14504501000
|
unkown
|
page read and write
|
|
|
|
7FF5D1FDF000
|
unkown
|
page readonly
|
|
|
|
2E2E8740000
|
unkown
|
page readonly
|
|
|
|
3680000
|
unkown
|
page readonly
|
|
|
|
7FF5265ED000
|
unkown
|
page readonly
|
|
|
|
1865EFA7000
|
unkown
|
page read and write
|
|
|
|
1FD31A6C000
|
unkown
|
page read and write
|
|
|
|
7FF58DB7F000
|
unkown
|
page readonly
|
|
|
|
1E708873000
|
unkown
|
page read and write
|
|
|
|
1FD31A7D000
|
unkown
|
page read and write
|
|
|
|
1865F0E0000
|
unkown
|
page readonly
|
|
|
|
7D5AE7B000
|
unkown
|
page read and write
|
|
|
|
200D000
|
unkown
|
page readonly
|
|
|
|
145090B8000
|
unkown
|
page read and write
|
|
|
|
29E0000
|
heap private
|
page read and write
|
|
|
|
167F4F13000
|
unkown
|
page read and write
|
|
|
|
785F6FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DC5F2000
|
unkown
|
page readonly
|
|
|
|
65A0000
|
heap private
|
page read and write
|
|
|
|
7FF5D182C000
|
unkown
|
page readonly
|
|
|
|
7FF5A549F000
|
unkown
|
page readonly
|
|
|
|
7FF5A5564000
|
unkown
|
page readonly
|
|
|
|
1E70AA00000
|
unkown
|
page readonly
|
|
|
|
32C7000
|
heap private
|
page read and write
|
|
|
|
1EB4000
|
unkown
|
page readonly
|
|
|
|
25F04600000
|
unkown
|
page readonly
|
|
|
|
7FF58D8E3000
|
unkown
|
page readonly
|
|
|
|
167F4E6D000
|
unkown
|
page read and write
|
|
|
|
7FF50750C000
|
unkown
|
page readonly
|
|
|
|
1865EF5F000
|
unkown
|
page read and write
|
|
|
|
7FF5DC8C7000
|
unkown
|
page readonly
|
|
|
|
7FF50FD34000
|
unkown
|
page readonly
|
|
|
|
7FF5AF374000
|
unkown
|
page readonly
|
|
|
|
1865EF7D000
|
unkown
|
page read and write
|
|
|
|
2E2E6859000
|
unkown
|
page read and write
|
|
|
|
2CB9000
|
unkown
|
page readonly
|
|
|
|
7FF52FC53000
|
unkown
|
page readonly
|
|
|
|
35AD000
|
unkown
|
page read and write
|
|
|
|
358A000
|
heap default
|
page read and write
|
|
|
|
EB26D7F000
|
unkown
|
page read and write
|
|
|
|
7FF5A5908000
|
unkown
|
page readonly
|
|
|
|
1FD31A58000
|
unkown
|
page read and write
|
|
|
|
7FF51F1BE000
|
unkown
|
page readonly
|
|
|
|
7FF5A591D000
|
unkown
|
page readonly
|
|
|
|
671D000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD4B000
|
unkown
|
page readonly
|
|
|
|
7FF58D9AE000
|
unkown
|
page readonly
|
|
|
|
7FF526190000
|
unkown
|
page readonly
|
|
|
|
7FF52FCCD000
|
unkown
|
page readonly
|
|
|
|
1CF9000
|
unkown
|
page readonly
|
|
|
|
1E708902000
|
unkown
|
page read and write
|
|
|
|
262D000
|
unkown
|
page read and write
|
|
|
|
7FF50FEE0000
|
unkown
|
page readonly
|
|
|
|
2E2E8C02000
|
unkown
|
page read and write
|
|
|
|
7FF565DC8000
|
unkown
|
page readonly
|
|
|
|
DEF6B7A000
|
unkown
|
page read and write
|
|
|
|
14509088000
|
unkown
|
page read and write
|
|
|
|
7FF50751F000
|
unkown
|
page readonly
|
|
|
|
2AAD000
|
unkown
|
page readonly
|
|
|
|
7FF525D41000
|
unkown
|
page readonly
|
|
|
|
35C9000
|
unkown
|
page read and write
|
|
|
|
1E70A6E0000
|
unkown
|
page read and write
|
|
|
|
21394A00000
|
unkown
|
page read and write
|
|
|
|
1FD31A5A000
|
unkown
|
page read and write
|
|
|
|
7FF5A59BE000
|
unkown
|
page readonly
|
|
|
|
27B0000
|
unkown
|
page readonly
|
|
|
|
14504215000
|
unkown
|
page read and write
|
|
|
|
7FF5AF360000
|
unkown
|
page readonly
|
|
|
|
1865EFDD000
|
unkown
|
page read and write
|
|
|
|
FADF27E000
|
unkown
|
page read and write
|
|
|
|
7FF5AF17E000
|
unkown
|
page readonly
|
|
|
|
7FF526194000
|
unkown
|
page readonly
|
|
|
|
1E7087F0000
|
unkown
|
page readonly
|
|
|
|
14504300000
|
unkown
|
page read and write
|
|
|
|
25F0446E000
|
unkown
|
page read and write
|
|
|
|
1865F229000
|
heap private
|
page read and write
|
|
|
|
7FF51041D000
|
unkown
|
page readonly
|
|
|
|
EB2747B000
|
unkown
|
page read and write
|
|
|
|
1FD318F0000
|
heap default
|
page read and write
|
|
|
|
2E2E68D8000
|
unkown
|
page read and write
|
|
|
|
275DBE6D000
|
unkown
|
page read and write
|
|
|
|
7FF50FF6A000
|
unkown
|
page readonly
|
|
|
|
309B000
|
stack
|
page read and write
|
|
|
|
323B000
|
stack
|
page read and write
|
|
|
|
1E70A802000
|
unkown
|
page read and write
|
|
|
|
CED77E000
|
unkown
|
page read and write
|
|
|
|
7FF5D1FAB000
|
unkown
|
page readonly
|
|
|
|
7FF5AF38B000
|
unkown
|
page readonly
|
|
|
|
1D06A2F0000
|
unkown
|
page readonly
|
|
|
|
1D06AE00000
|
unkown
|
page readonly
|
|
|
|
7FF51C559000
|
unkown
|
page readonly
|
|
|
|
7FF58D8C7000
|
unkown
|
page readonly
|
|
|
|
7FF565D17000
|
unkown
|
page readonly
|
|
|
|
14503C00000
|
unkown
|
page readonly
|
|
|
|
2C79000
|
unkown
|
page readonly
|
|
|
|
1865EF68000
|
unkown
|
page read and write
|
|
|
|
14503A79000
|
unkown
|
page read and write
|
|
|
|
14503A93000
|
unkown
|
page read and write
|
|
|
|
275DBE68000
|
unkown
|
page read and write
|
|
|
|
7FF51C4CA000
|
unkown
|
page readonly
|
|
|
|
1450901C000
|
unkown
|
page read and write
|
|
|
|
7FF50FF63000
|
unkown
|
page readonly
|
|
|
|
7FF565C7E000
|
unkown
|
page readonly
|
|
|
|
7FF5C49BE000
|
unkown
|
page readonly
|
|
|
|
274D000
|
unkown
|
page read and write
|
|
|
|
14503AB4000
|
unkown
|
page read and write
|
|
|
|
7FF5D1F19000
|
unkown
|
page readonly
|
|
|
|
3370000
|
unkown
|
page read and write
|
|
|
|
7FF5C4AD7000
|
unkown
|
page readonly
|
|
|
|
7FF5A58D2000
|
unkown
|
page readonly
|
|
|
|
2E2E89D3000
|
unkown
|
page read and write
|
|
|
|
7FF5C4781000
|
unkown
|
page readonly
|
|
|
|
14503A13000
|
unkown
|
page read and write
|
|
|
|
14504E20000
|
unkown
|
page read and write
|
|
|
|
25F043F0000
|
heap default
|
page read and write
|
|
|
|
7FF526313000
|
unkown
|
page readonly
|
|
|
|
2E2E69A8000
|
unkown
|
page read and write
|
|
|
|
2950000
|
unkown
|
page readonly
|
|
|
|
1E70A946000
|
unkown
|
page read and write
|
|
|
|
7FF5C4ADC000
|
unkown
|
page readonly
|
|
|
|
7FF52F8A1000
|
unkown
|
page readonly
|
|
|
|
20196E00000
|
unkown
|
page read and write
|
|
|
|
2625000
|
unkown
|
page read and write
|
|
|
|
7FF58D66F000
|
unkown
|
page readonly
|
|
|
|
7FF51F188000
|
unkown
|
page readonly
|
|
|
|
15C8D150000
|
unkown
|
page readonly
|
|
|
|
1FD31A67000
|
unkown
|
page read and write
|
|
|
|
1FDB000
|
unkown
|
page readonly
|
|
|
|
232F9A53000
|
unkown
|
page read and write
|
|
|
|
1FD31A76000
|
unkown
|
page read and write
|
|
|
|
7FF526315000
|
unkown
|
page readonly
|
|
|
|
EB2757A000
|
unkown
|
page read and write
|
|
|
|
2E2E9010000
|
unkown
|
page read and write
|
|
|
|
7FF5D1E17000
|
unkown
|
page readonly
|
|
|
|
7FF58D8E1000
|
unkown
|
page readonly
|
|
|
|
7FF5075CE000
|
unkown
|
page readonly
|
|
|
|
6989BFE000
|
unkown
|
page read and write
|
|
|
|
785F8FD000
|
unkown
|
page read and write
|
|
|
|
167F4E67000
|
unkown
|
page read and write
|
|
|
|
1865EFDE000
|
unkown
|
page read and write
|
|
|
|
7FF51F0D7000
|
unkown
|
page readonly
|
|
|
|
7FF5C4A87000
|
unkown
|
page readonly
|
|
|
|
7FF5104A8000
|
unkown
|
page readonly
|
|
|
|
232F9A4B000
|
unkown
|
page read and write
|
|
|
|
31CA000
|
unkown
|
page read and write
|
|
|
|
1E7088C6000
|
unkown
|
page read and write
|
|
|
|
1E708867000
|
unkown
|
page read and write
|
|
|
|
1E708868000
|
unkown
|
page read and write
|
|
|
|
7FF5D1B98000
|
unkown
|
page readonly
|
|
|
|
7FF5A55A6000
|
unkown
|
page readonly
|
|
|
|
1FE9000
|
unkown
|
page readonly
|
|
|
|
7FF5A59EF000
|
unkown
|
page readonly
|
|
|
|
2E2E8911000
|
unkown
|
page read and write
|
|
|
|
B255B7F000
|
unkown
|
page read and write
|
|
|
|
EB26DFB000
|
unkown
|
page read and write
|
|
|
|
32D0000
|
unkown
|
page read and write
|
|
|
|
262E000
|
unkown
|
page read and write
|
|
|
|
145041F0000
|
unkown
|
page read and write
|
|
|
|
2BAC000
|
unkown
|
page readonly
|
|
|
|
1E708873000
|
unkown
|
page read and write
|
|
|
|
1865EF5F000
|
unkown
|
page read and write
|
|
|
|
7FF5D1FB0000
|
unkown
|
page readonly
|
|
|
|
EB26FF9000
|
unkown
|
page read and write
|
|
|
|
9B64BFF000
|
unkown
|
page read and write
|
|
|
|
2B05000
|
unkown
|
page readonly
|
|
|
|
7FF51F01F000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD64000
|
unkown
|
page readonly
|
|
|
|
14508FF0000
|
unkown
|
page read and write
|
|
|
|
9510DCE000
|
unkown
|
page read and write
|
|
|
|
4E62377000
|
unkown
|
page read and write
|
|
|
|
7FF5C47B2000
|
unkown
|
page readonly
|
|
|
|
7FF5A556A000
|
unkown
|
page readonly
|
|
|
|
7FF51EFE3000
|
unkown
|
page readonly
|
|
|
|
7FF5C48F5000
|
unkown
|
page readonly
|
|
|
|
167F4E13000
|
unkown
|
page read and write
|
|
|
|
6930000
|
unkown
|
page read and write
|
|
|
|
2E2E8933000
|
unkown
|
page read and write
|
|
|
|
7FF5A56DC000
|
unkown
|
page readonly
|
|
|
|
7FF52FADE000
|
unkown
|
page readonly
|
|
|
|
7FF58DBBF000
|
unkown
|
page readonly
|
|
|
|
25F04502000
|
unkown
|
page read and write
|
|
|
|
7FF54F0FE000
|
unkown
|
page readonly
|
|
|
|
7FF5DC91C000
|
unkown
|
page readonly
|
|
|
|
3100000
|
unkown
|
page readonly
|
|
|
|
1FB0BC60000
|
unkown
|
page read and write
|
|
|
|
20196E13000
|
unkown
|
page read and write
|
|
|
|
7FF52649A000
|
unkown
|
page readonly
|
|
|
|
7FF54F05A000
|
unkown
|
page readonly
|
|
|
|
2E2E8B02000
|
unkown
|
page read and write
|
|
|
|
1FF9000
|
unkown
|
page readonly
|
|
|
|
1DDAF400000
|
unkown
|
page readonly
|
|
|
|
3200000
|
unkown
|
page readonly
|
|
|
|
7FF5A5929000
|
unkown
|
page readonly
|
|
|
|
7FF5D1E09000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD38000
|
unkown
|
page readonly
|
|
|
|
2C4D000
|
unkown
|
page readonly
|
|
|
|
1DDAEA13000
|
unkown
|
page read and write
|
|
|
|
1FD5000
|
unkown
|
page readonly
|
|
|
|
2D57000
|
unkown
|
page readonly
|
|
|
|
7FF51C585000
|
unkown
|
page readonly
|
|
|
|
1865EFF7000
|
unkown
|
page read and write
|
|
|
|
DEF6A7F000
|
unkown
|
page read and write
|
|
|
|
15C8D240000
|
unkown
|
page read and write
|
|
|
|
7FF5DC93D000
|
unkown
|
page readonly
|
|
|
|
1C8A000
|
unkown
|
page readonly
|
|
|
|
14509208000
|
unkown
|
page read and write
|
|
|
|
2E2E8C42000
|
unkown
|
page read and write
|
|
|
|
7FF5265B6000
|
unkown
|
page readonly
|
|
|
|
7FF50FF59000
|
unkown
|
page readonly
|
|
|
|
2E2E898B000
|
unkown
|
page read and write
|
|
|
|
1D06A3D0000
|
unkown
|
page readonly
|
|
|
|
1FD31A47000
|
unkown
|
page read and write
|
|
|
|
3290000
|
unkown
|
page read and write
|
|
|
|
2E2E68DF000
|
unkown
|
page read and write
|
|
|
|
15C8EA90000
|
unkown
|
page readonly
|
|
|
|
2C90000
|
unkown
|
page readonly
|
|
|
|
7FF58DB23000
|
unkown
|
page readonly
|
|
|
|
7FF510433000
|
unkown
|
page readonly
|
|
|
|
7FF5265EF000
|
unkown
|
page readonly
|
|
|
|
2AEDA460000
|
unkown
|
page readonly
|
|
|
|
2AED9E24000
|
unkown
|
page read and write
|
|
|
|
1D06A47C000
|
unkown
|
page read and write
|
|
|
|
2E2E8995000
|
unkown
|
page read and write
|
|
|
|
7FF50767D000
|
unkown
|
page readonly
|
|
|
|
7FF5A5570000
|
unkown
|
page readonly
|
|
|
|
7FF526340000
|
unkown
|
page readonly
|
|
|
|
7FF50774F000
|
unkown
|
page readonly
|
|
|
|
1865EF17000
|
heap default
|
page read and write
|
|
|
|
2E2E8A07000
|
unkown
|
page read and write
|
|
|
|
2AED9DC0000
|
unkown
|
page readonly
|
|
|
|
7FF50FFF0000
|
unkown
|
page readonly
|
|
|
|
5538F9000
|
unkown
|
page read and write
|
|
|
|
1D06A500000
|
unkown
|
page read and write
|
|
|
|
7FF5265AF000
|
unkown
|
page readonly
|
|
|
|
7FF4FFC98000
|
unkown
|
page readonly
|
|
|
|
7FF5A58E7000
|
unkown
|
page readonly
|
|
|
|
1E708710000
|
heap default
|
page read and write
|
|
|
|
232F9A52000
|
unkown
|
page read and write
|
|
|
|
7FF51C61F000
|
unkown
|
page readonly
|
|
|
|
7FF5C4B1A000
|
unkown
|
page readonly
|
|
|
|
7FF54F0D6000
|
unkown
|
page readonly
|
|
|
|
14508EB0000
|
unkown
|
page read and write
|
|
|
|
7FF52FCDE000
|
unkown
|
page readonly
|
|
|
|
1865EF60000
|
unkown
|
page read and write
|
|
|
|
1E7086B0000
|
heap private
|
page read and write
|
|
|
|
2631000
|
unkown
|
page read and write
|
|
|
|
14509320000
|
unkown
|
page read and write
|
|
|
|
201970D0000
|
unkown
|
page readonly
|
|
|
|
7FF50774B000
|
unkown
|
page readonly
|
|
|
|
7FF52FC1D000
|
unkown
|
page readonly
|
|
|
|
7FF5DC95A000
|
unkown
|
page readonly
|
|
|
|
232F9C00000
|
unkown
|
page readonly
|
|
|
|
7FF50FF27000
|
unkown
|
page readonly
|
|
|
|
2E2E8995000
|
unkown
|
page read and write
|
|
|
|
1E708871000
|
unkown
|
page read and write
|
|
|
|
1865EF00000
|
unkown
|
page readonly
|
|
|
|
CED07A000
|
unkown
|
page read and write
|
|
|
|
13D6F7D000
|
unkown
|
page read and write
|
|
|
|
7FF5264A0000
|
unkown
|
page readonly
|
|
|
|
7FF5263FD000
|
unkown
|
page readonly
|
|
|
|
232F9A67000
|
unkown
|
page read and write
|
|
|
|
2E2E683F000
|
unkown
|
page read and write
|
|
|
|
145090B7000
|
unkown
|
page read and write
|
|
|
|
7FF50F6AA000
|
unkown
|
page readonly
|
|
|
|
15C8D2A0000
|
unkown
|
page readonly
|
|
|
|
1E708A50000
|
unkown
|
page readonly
|
|
|
|
324E000
|
unkown
|
page read and write
|
|
|
|
7FF5C4BBE000
|
unkown
|
page readonly
|
|
|
|
2E2E8910000
|
unkown
|
page read and write
|
|
|
|
7FF565CC3000
|
unkown
|
page readonly
|
|
|
|
2629000
|
unkown
|
page read and write
|
|
|
|
1FB0B624000
|
unkown
|
page read and write
|
|
|
|
7FF5101B6000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD3F000
|
unkown
|
page readonly
|
|
|
|
7FF5A5711000
|
unkown
|
page readonly
|
|
|
|
1FE5000
|
unkown
|
page readonly
|
|
|
|
7FF54F045000
|
unkown
|
page readonly
|
|
|
|
25F04720000
|
unkown
|
page readonly
|
|
|
|
1E70886F000
|
unkown
|
page read and write
|
|
|
|
1865EF68000
|
unkown
|
page read and write
|
|
|
|
3D2DD7A000
|
unkown
|
page read and write
|
|
|
|
20196E65000
|
unkown
|
page read and write
|
|
|
|
1FB0B5D0000
|
unkown
|
page read and write
|
|
|
|
1FF5000
|
unkown
|
page readonly
|
|
|
|
3580000
|
heap default
|
page read and write
|
|
|
|
1865EFA7000
|
unkown
|
page read and write
|
|
|
|
2E2E9410000
|
unkown
|
page read and write
|
|
|
|
7FF5DC945000
|
unkown
|
page readonly
|
|
|
|
7FF565DE5000
|
unkown
|
page readonly
|
|
|
|
A54DF7E000
|
unkown
|
page read and write
|
|
|
|
DEF667B000
|
unkown
|
page read and write
|
|
|
|
145041B0000
|
unkown
|
page readonly
|
|
|
|
64DE000
|
unkown
|
page read and write
|
|
|
|
14503CD0000
|
unkown
|
page readonly
|
|
|
|
7FF5261CD000
|
unkown
|
page readonly
|
|
|
|
7FF52FCC0000
|
unkown
|
page readonly
|
|
|
|
7FF5DC9F4000
|
unkown
|
page readonly
|
|
|
|
2B15000
|
unkown
|
page readonly
|
|
|
|
2E2E6913000
|
unkown
|
page read and write
|
|
|
|
7FF58DB03000
|
unkown
|
page readonly
|
|
|
|
232F9A00000
|
unkown
|
page read and write
|
|
|
|
2E2E893A000
|
unkown
|
page read and write
|
|
|
|
9B64A79000
|
unkown
|
page read and write
|
|
|
|
2B9B000
|
unkown
|
page readonly
|
|
|
|
7FF51C54D000
|
unkown
|
page readonly
|
|
|
|
1FB0B702000
|
unkown
|
page read and write
|
|
|
|
7FF5DC7FE000
|
unkown
|
page readonly
|
|
|
|
7FF565C9E000
|
unkown
|
page readonly
|
|
|
|
7FF5D1EEC000
|
unkown
|
page readonly
|
|
|
|
7FF5A58E3000
|
unkown
|
page readonly
|
|
|
|
7FF58DBA4000
|
unkown
|
page readonly
|
|
|
|
21394820000
|
unkown
|
page readonly
|
|
|
|
59A0000
|
unkown
|
page readonly
|
|
|
|
7FF58DAB3000
|
unkown
|
page readonly
|
|
|
|
7FF565B63000
|
unkown
|
page readonly
|
|
|
|
1DDAEA49000
|
unkown
|
page read and write
|
|
|
|
B25587C000
|
unkown
|
page read and write
|
|
|
|
2BA5000
|
unkown
|
page readonly
|
|
|
|
2B4D000
|
unkown
|
page readonly
|
|
|
|
14503990000
|
unkown
|
page read and write
|
|
|
|
1865F7D0000
|
unkown
|
page readonly
|
|
|
|
2E2E68E9000
|
unkown
|
page read and write
|
|
|
|
7FF526525000
|
unkown
|
page readonly
|
|
|
|
2E2E9010000
|
unkown
|
page read and write
|
|
|
|
6989F7D000
|
unkown
|
page read and write
|
|
|
|
1FB0B600000
|
unkown
|
page read and write
|
|
|
|
1865EFCD000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBF4000
|
unkown
|
page readonly
|
|
|
|
2AEDA602000
|
unkown
|
page read and write
|
|
|
|
7FF5DC920000
|
unkown
|
page readonly
|
|
|
|
7FF51F1CB000
|
unkown
|
page readonly
|
|
|
|
20196E3F000
|
unkown
|
page read and write
|
|
|
|
167F4F02000
|
unkown
|
page read and write
|
|
|
|
213947B0000
|
heap private
|
page read and write
|
|
|
|
7FF5A51BD000
|
unkown
|
page readonly
|
|
|
|
7FF507643000
|
unkown
|
page readonly
|
|
|
|
2E2E68E9000
|
unkown
|
page read and write
|
|
|
|
2E2E68E5000
|
unkown
|
page read and write
|
|
|
|
7FF5D1FDF000
|
unkown
|
page readonly
|
|
|
|
1E708869000
|
unkown
|
page read and write
|
|
|
|
167F5120000
|
unkown
|
page readonly
|
|
|
|
2E2E86F0000
|
heap private
|
page read and write
|
|
|
|
2625000
|
unkown
|
page read and write
|
|
|
|
FADF179000
|
unkown
|
page read and write
|
|
|
|
1FD31A74000
|
unkown
|
page read and write
|
|
|
|
7FF5A5933000
|
unkown
|
page readonly
|
|
|
|
7FF5D177A000
|
unkown
|
page readonly
|
|
|
|
2087000
|
unkown
|
page readonly
|
|
|
|
1FD31A59000
|
unkown
|
page read and write
|
|
|
|
785FCFE000
|
unkown
|
page read and write
|
|
|
|
1FD31A79000
|
unkown
|
page read and write
|
|
|
|
2CE4000
|
unkown
|
page readonly
|
|
|
|
7FF5AF240000
|
unkown
|
page readonly
|
|
|
|
232F9B00000
|
unkown
|
page read and write
|
|
|
|
2AF0000
|
unkown
|
page readonly
|
|
|
|
232F9A54000
|
unkown
|
page read and write
|
|
|
|
7FF5D1F9F000
|
unkown
|
page readonly
|
|
|
|
167F68C0000
|
unkown
|
page read and write
|
|
|
|
7FF510306000
|
unkown
|
page readonly
|
|
|
|
7FF58D6A5000
|
unkown
|
page readonly
|
|
|
|
145039A0000
|
unkown
|
page read and write
|
|
|
|
7FF5AF36D000
|
unkown
|
page readonly
|
|
|
|
3424000
|
unkown
|
page read and write
|
|
|
|
553A79000
|
unkown
|
page read and write
|
|
|
|
7FF5AF38F000
|
unkown
|
page readonly
|
|
|
|
1865FB16000
|
unkown
|
page read and write
|
|
|
|
7FF51C60B000
|
unkown
|
page readonly
|
|
|
|
7FF5A56ED000
|
unkown
|
page readonly
|
|
|
|
1DDAEA4E000
|
unkown
|
page read and write
|
|
|
|
21394A40000
|
unkown
|
page read and write
|
|
|
|
2629000
|
unkown
|
page read and write
|
|
|
|
1E7088EA000
|
unkown
|
page read and write
|
|
|
|
7FF5103E5000
|
unkown
|
page readonly
|
|
|
|
7FF54F0F4000
|
unkown
|
page readonly
|
|
|
|
1FC0000
|
unkown
|
page readonly
|
|
|
|
7FF5C4B05000
|
unkown
|
page readonly
|
|
|
|
7FF58DAB7000
|
unkown
|
page readonly
|
|
|
|
6989E7F000
|
unkown
|
page read and write
|
|
|
|
7FF5A59B6000
|
unkown
|
page readonly
|
|
|
|
2CBC000
|
unkown
|
page readonly
|
|
|
|
7FF51C2C2000
|
unkown
|
page readonly
|
|
|
|
145090B2000
|
unkown
|
page read and write
|
|
|
|
15C8EC50000
|
heap private
|
page read and write
|
|
|
|
14509440000
|
unkown
|
page readonly
|
|
|
|
EB26E79000
|
unkown
|
page read and write
|
|
|
|
1FA1000
|
unkown
|
page readonly
|
|
|
|
7FF507693000
|
unkown
|
page readonly
|
|
|
|
2EC7000
|
unkown
|
page read and write
|
|
|
|
2E2E6934000
|
unkown
|
page read and write
|
|
|
|
167F4E30000
|
unkown
|
page read and write
|
|
|
|
14504060000
|
unkown
|
page readonly
|
|
|
|
7FF565C4D000
|
unkown
|
page readonly
|
|
|
|
35BF000
|
unkown
|
page read and write
|
|
|
|
7FF565634000
|
unkown
|
page readonly
|
|
|
|
2629000
|
unkown
|
page read and write
|
|
|
|
1E7088AA000
|
unkown
|
page read and write
|
|
|
|
2649000
|
unkown
|
page read and write
|
|
|
|
3527000
|
heap private
|
page read and write
|
|
|
|
7FF4FF843000
|
unkown
|
page readonly
|
|
|
|
7FF5104D4000
|
unkown
|
page readonly
|
|
|
|
7FF52FBA0000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB1D000
|
unkown
|
page readonly
|
|
|
|
1DDAEC00000
|
unkown
|
page readonly
|
|
|
|
289E000
|
stack
|
page read and write
|
|
|
|
7FF5DC917000
|
unkown
|
page readonly
|
|
|
|
1DDAECD0000
|
unkown
|
page readonly
|
|
|
|
4E20000
|
unkown
|
page readonly
|
|
|
|
5994000
|
heap private
|
page read and write
|
|
|
|
14509200000
|
unkown
|
page read and write
|
|
|
|
DEF66FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A56DA000
|
unkown
|
page readonly
|
|
|
|
F68000
|
unkown
|
page readonly
|
|
|
|
EB2777D000
|
unkown
|
page read and write
|
|
|
|
1865F220000
|
heap private
|
page read and write
|
|
|
|
13D70FC000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD6E000
|
unkown
|
page readonly
|
|
|
|
2AED9E00000
|
unkown
|
page read and write
|
|
|
|
7FF54F075000
|
unkown
|
page readonly
|
|
|
|
32C0000
|
heap private
|
page read and write
|
|
|
|
7FF5A5590000
|
unkown
|
page readonly
|
|
|
|
7FF5265A8000
|
unkown
|
page readonly
|
|
|
|
7FF526508000
|
unkown
|
page readonly
|
|
|
|
DEF68FF000
|
unkown
|
page read and write
|
|
|
|
14509320000
|
unkown
|
page read and write
|
|
|
|
7FF54E942000
|
unkown
|
page readonly
|
|
|
|
7FF507734000
|
unkown
|
page readonly
|
|
|
|
3419000
|
unkown
|
page read and write
|
|
|
|
1865FB14000
|
unkown
|
page read and write
|
|
|
|
5DA0000
|
unkown
|
page read and write
|
|
|
|
14509042000
|
unkown
|
page read and write
|
|
|
|
7FF54F007000
|
unkown
|
page readonly
|
|
|
|
20196E6C000
|
unkown
|
page read and write
|
|
|
|
275DBF00000
|
unkown
|
page read and write
|
|
|
|
33ED000
|
unkown
|
page read and write
|
|
|
|
1FD31A63000
|
unkown
|
page read and write
|
|
|
|
1D06A487000
|
unkown
|
page read and write
|
|
|
|
7FF5A5236000
|
unkown
|
page readonly
|
|
|
|
7FF52FCDB000
|
unkown
|
page readonly
|
|
|
|
1FD31A13000
|
unkown
|
page read and write
|
|
|
|
7FF5A5925000
|
unkown
|
page readonly
|
|
|
|
7FF5DC9FB000
|
unkown
|
page readonly
|
|
|
|
15C8F09F000
|
heap private
|
page read and write
|
|
|
|
1E70A900000
|
unkown
|
page read and write
|
|
|
|
167F4E67000
|
unkown
|
page read and write
|
|
|
|
7FF51C5DF000
|
unkown
|
page readonly
|
|
|
|
D76CBF7000
|
unkown
|
page read and write
|
|
|
|
7FF5264E7000
|
unkown
|
page readonly
|
|
|
|
7FF565DA7000
|
unkown
|
page readonly
|
|
|
|
7FF54F10F000
|
unkown
|
page readonly
|
|
|
|
7FF5AF2BD000
|
unkown
|
page readonly
|
|
|
|
7D5ABDE000
|
unkown
|
page read and write
|
|
|
|
2E2E89F5000
|
unkown
|
page read and write
|
|
|
|
167F4E67000
|
unkown
|
page read and write
|
|
|
|
7FF54F10B000
|
unkown
|
page readonly
|
|
|
|
7FF58DAAC000
|
unkown
|
page readonly
|
|
|
|
167F4E67000
|
unkown
|
page read and write
|
|
|
|
14509024000
|
unkown
|
page read and write
|
|
|
|
1FB0B440000
|
heap private
|
page read and write
|
|
|
|
7FF5AF348000
|
unkown
|
page readonly
|
|
|
|
EB273FB000
|
unkown
|
page read and write
|
|
|
|
951107F000
|
unkown
|
page read and write
|
|
|
|
167F4E00000
|
unkown
|
page read and write
|
|
|
|
4E6207E000
|
unkown
|
page read and write
|
|
|
|
232F9A67000
|
unkown
|
page read and write
|
|
|
|
7FF58D7A2000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD7B000
|
unkown
|
page readonly
|
|
|
|
7FF51EE83000
|
unkown
|
page readonly
|
|
|
|
1DDAEA29000
|
unkown
|
page read and write
|
|
|
|
1865F1F0000
|
unkown
|
page read and write
|
|
|
|
14504359000
|
unkown
|
page read and write
|
|
|
|
167F4E02000
|
unkown
|
page read and write
|
|
|
|
33F0000
|
unkown
|
page read and write
|
|
|
|
35C9000
|
unkown
|
page read and write
|
|
|
|
2E2E8A68000
|
unkown
|
page read and write
|
|
|
|
2CED000
|
unkown
|
page readonly
|
|
|
|
2B0B000
|
unkown
|
page readonly
|
|
|
|
7FF52F8DA000
|
unkown
|
page readonly
|
|
|
|
7FF5265DB000
|
unkown
|
page readonly
|
|
|
|
7FF54ECBD000
|
unkown
|
page readonly
|
|
|
|
7FF51C61B000
|
unkown
|
page readonly
|
|
|
|
2075000
|
unkown
|
page readonly
|
|
|
|
7FF5C4947000
|
unkown
|
page readonly
|
|
|
|
2E2E68EA000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD7F000
|
unkown
|
page readonly
|
|
|
|
2C5D000
|
unkown
|
page readonly
|
|
|
|
232F9A13000
|
unkown
|
page read and write
|
|
|
|
7FF51C20D000
|
unkown
|
page readonly
|
|
|
|
1E70A6D0000
|
unkown
|
page readonly
|
|
|
|
4E61D0B000
|
unkown
|
page read and write
|
|
|
|
2649000
|
unkown
|
page read and write
|
|
|
|
2E2E6A00000
|
unkown
|
page readonly
|
|
|
|
2E2E899A000
|
unkown
|
page read and write
|
|
|
|
7FF52FC33000
|
unkown
|
page readonly
|
|
|
|
2AED9E87000
|
unkown
|
page read and write
|
|
|
|
FADF07B000
|
unkown
|
page read and write
|
|
|
|
2E2E8770000
|
unkown
|
page readonly
|
|
|
|
7FF51C538000
|
unkown
|
page readonly
|
|
|
|
7FF5104B6000
|
unkown
|
page readonly
|
|
|
|
14509221000
|
unkown
|
page read and write
|
|
|
|
2B37000
|
unkown
|
page readonly
|
|
|
|
7FF4FF849000
|
unkown
|
page readonly
|
|
|
|
7FF51C216000
|
unkown
|
page readonly
|
|
|
|
1D06A402000
|
unkown
|
page read and write
|
|
|
|
7FF5C4BCB000
|
unkown
|
page readonly
|
|
|
|
7FF50773B000
|
unkown
|
page readonly
|
|
|
|
7FF5D1FCB000
|
unkown
|
page readonly
|
|
|
|
206B000
|
unkown
|
page readonly
|
|
|
|
1450920E000
|
unkown
|
page read and write
|
|
|
|
7FF52FCEF000
|
unkown
|
page readonly
|
|
|
|
2B2D000
|
unkown
|
page readonly
|
|
|
|
7FF52FCD4000
|
unkown
|
page readonly
|
|
|
|
167F50D0000
|
unkown
|
page write copy
|
|
|
|
CED7FF000
|
unkown
|
page read and write
|
|
|
|
4E6257F000
|
unkown
|
page read and write
|
|
|
|
275DBDA0000
|
unkown
|
page readonly
|
|
|
|
24DF000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD6B000
|
unkown
|
page readonly
|
|
|
|
7FF526367000
|
unkown
|
page readonly
|
|
|
|
232F9950000
|
unkown
|
page readonly
|
|
|
|
33E0000
|
unkown
|
page read and write
|
|
|
|
6793000
|
heap private
|
page read and write
|
|
|
|
4E620FB000
|
unkown
|
page read and write
|
|
|
|
7FF54F049000
|
unkown
|
page readonly
|
|
|
|
232F9960000
|
unkown
|
page readonly
|
|
|
|
7FF54F0E0000
|
unkown
|
page readonly
|
|
|
|
2829000
|
unkown
|
page readonly
|
|
|
|
2E2E6720000
|
heap private
|
page read and write
|
|
|
|
7FF51000B000
|
unkown
|
page readonly
|
|
|
|
1DDAF130000
|
unkown
|
page readonly
|
|
|
|
35BF000
|
unkown
|
page read and write
|
|
|
|
7FF5104CD000
|
unkown
|
page readonly
|
|
|
|
DEF6AFD000
|
unkown
|
page read and write
|
|
|
|
25F04402000
|
unkown
|
page read and write
|
|
|
|
7FF5103D2000
|
unkown
|
page readonly
|
|
|
|
275DBE6F000
|
unkown
|
page read and write
|
|
|
|
1FD31A29000
|
unkown
|
page read and write
|
|
|
|
1FD31A83000
|
unkown
|
page read and write
|
|
|
|
7FF58DACC000
|
unkown
|
page readonly
|
|
|
|
2E2E89A1000
|
unkown
|
page read and write
|
|
|
|
2B19000
|
unkown
|
page readonly
|
|
|
|
1865FB12000
|
unkown
|
page read and write
|
|
|
|
15C8EFA0000
|
heap private
|
page read and write
|
|
|
|
7FF5D1FBD000
|
unkown
|
page readonly
|
|
|
|
167F4E67000
|
unkown
|
page read and write
|
|
|
|
7FF52F8BF000
|
unkown
|
page readonly
|
|
|
|
352A000
|
heap private
|
page read and write
|
|
|
|
341D000
|
unkown
|
page read and write
|
|
|
|
2E2E67E0000
|
unkown
|
page readonly
|
|
|
|
40A000
|
unkown
|
page readonly
|
|
|
|
1865EFBE000
|
unkown
|
page read and write
|
|
|
|
2E2E8750000
|
unkown
|
page read and write
|
|
|
|
7FF5103E3000
|
unkown
|
page readonly
|
|
|
|
167F4E6B000
|
unkown
|
page read and write
|
|
|
|
2E2E9410000
|
unkown
|
page read and write
|
|
|
|
2E2E8923000
|
unkown
|
page read and write
|
|
|
|
1E70A6E0000
|
unkown
|
page read and write
|
|
|
|
1FB0B590000
|
unkown
|
page readonly
|
|
|
|
14503A91000
|
unkown
|
page read and write
|
|
|
|
7FF51C517000
|
unkown
|
page readonly
|
|
|
|
232FA202000
|
unkown
|
page read and write
|
|
|
|
7FF565973000
|
unkown
|
page readonly
|
|
|
|
EB26C7E000
|
unkown
|
page read and write
|
|
|
|
1865EF68000
|
unkown
|
page read and write
|
|
|
|
7FF565EAF000
|
unkown
|
page readonly
|
|
|
|
7FF565DBC000
|
unkown
|
page readonly
|
|
|
|
EB271FA000
|
unkown
|
page read and write
|
|
|
|
7FF5A59EF000
|
unkown
|
page readonly
|
|
|
|
7FF5A5955000
|
unkown
|
page readonly
|
|
|
|
7FF52FC29000
|
unkown
|
page readonly
|
|
|
|
2E2E6856000
|
unkown
|
page read and write
|
|
|
|
1E72000
|
unkown
|
page readonly
|
|
|
|
7FF5DC9D6000
|
unkown
|
page readonly
|
|
|
|
32F0000
|
unkown
|
page readonly
|
|
|
|
7FF5DC81D000
|
unkown
|
page readonly
|
|
|
|
1865EFDD000
|
unkown
|
page read and write
|
|
|
|
7FF51001D000
|
unkown
|
page readonly
|
|
|
|
2E2E8D00000
|
unkown
|
page read and write
|
|
|
|
14504313000
|
unkown
|
page read and write
|
|
|
|
7FF5C4AE0000
|
unkown
|
page readonly
|
|
|
|
7FF507668000
|
unkown
|
page readonly
|
|
|
|
7FF50765C000
|
unkown
|
page readonly
|
|
|
|
3D2DF7A000
|
unkown
|
page read and write
|
|
|
|
1DDAEB13000
|
unkown
|
page read and write
|
|
|
|
305A000
|
unkown
|
page read and write
|
|
|
|
1450909E000
|
unkown
|
page read and write
|
|
|
|
1FD31A61000
|
unkown
|
page read and write
|
|
|
|
7FF510429000
|
unkown
|
page readonly
|
|
|
|
7FF5DC5C1000
|
unkown
|
page readonly
|
|
|
|
7FF5C47AD000
|
unkown
|
page readonly
|
|
|
|
35B1000
|
unkown
|
page read and write
|
|
|
|
1FA9000
|
unkown
|
page readonly
|
|
|
|
2CB1000
|
unkown
|
page readonly
|
|
|
|
1FD31A3C000
|
unkown
|
page read and write
|
|
|
|
23F0000
|
unkown
|
page readonly
|
|
|
|
7FF5AF097000
|
unkown
|
page readonly
|
|
|
|
1FB0B5D0000
|
unkown
|
page read and write
|
|
|
|
7FF565DB7000
|
unkown
|
page readonly
|
|
|
|
1DDAEB02000
|
unkown
|
page read and write
|
|
|
|
7FF4FFC87000
|
unkown
|
page readonly
|
|
|
|
7FF52FBA7000
|
unkown
|
page readonly
|
|
|
|
35A9000
|
unkown
|
page read and write
|
|
|
|
785FAFF000
|
unkown
|
page read and write
|
|
|
|
35B4000
|
unkown
|
page read and write
|
|
|
|
2E2E89B2000
|
unkown
|
page read and write
|
|
|
|
328E000
|
stack
|
page read and write
|
|
|
|
7FF5A5521000
|
unkown
|
page readonly
|
|
|
|
7FF5104EF000
|
unkown
|
page readonly
|
|
|
|
7FF5D1FA6000
|
unkown
|
page readonly
|
|
|
|
2AE4000
|
unkown
|
page readonly
|
|
|
|
1865FB10000
|
unkown
|
page read and write
|
|
|
|
275DBE02000
|
unkown
|
page read and write
|
|
|
|
7FF50FF55000
|
unkown
|
page readonly
|
|
|
|
95110F9000
|
unkown
|
page read and write
|
|
|
|
785F7FF000
|
unkown
|
page read and write
|
|
|
|
2C80000
|
unkown
|
page readonly
|
|
|
|
14503A41000
|
unkown
|
page read and write
|
|
|
|
14509370000
|
unkown
|
page readonly
|
|
|
|
7FF54EEAD000
|
unkown
|
page readonly
|
|
|
|
7FF5C4BB4000
|
unkown
|
page readonly
|
|
|
|
2E2E8924000
|
unkown
|
page read and write
|
|
|
|
EB26CFA000
|
unkown
|
page read and write
|
|
|
|
2EC3000
|
unkown
|
page read and write
|
|
|
|
2C84000
|
unkown
|
page readonly
|
|
|
|
65B0000
|
unkown
|
page readonly
|
|
|
|
1E70A902000
|
unkown
|
page read and write
|
|
|
|
1865EFBE000
|
unkown
|
page read and write
|
|
|
|
7FF5D1FC4000
|
unkown
|
page readonly
|
|
|
|
2AED9E2A000
|
unkown
|
page read and write
|
|
|
|
15C8EDB0000
|
heap private
|
page read and write
|
|
|
|
7FF5C5C8E000
|
unkown
|
page readonly
|
|
|
|
15C8D260000
|
unkown
|
page readonly
|
|
|
|
7FF51F0C3000
|
unkown
|
page readonly
|
|
|
|
1FEC000
|
unkown
|
page readonly
|
|
|
|
1FD31A64000
|
unkown
|
page read and write
|
|
|
|
7FF58DB86000
|
unkown
|
page readonly
|
|
|
|
CED379000
|
unkown
|
page read and write
|
|
|
|
145049E0000
|
unkown
|
page read and write
|
|
|
|
7FF52FA15000
|
unkown
|
page readonly
|
|
|
|
31D0000
|
unkown
|
page read and write
|
|
|
|
14504E01000
|
unkown
|
page read and write
|
|
|
|
7FF5A56AF000
|
unkown
|
page readonly
|
|
|
|
A54E07F000
|
unkown
|
page read and write
|
|
|
|
32B0000
|
unkown
|
page readonly
|
|
|
|
2E2E8ACA000
|
unkown
|
page read and write
|
|
|
|
B25577B000
|
unkown
|
page read and write
|
|
|
|
7FF507658000
|
unkown
|
page readonly
|
|
|
|
7FF5A59BB000
|
unkown
|
page readonly
|
|
|
|
35B7000
|
unkown
|
page read and write
|
|
|
|
2700000
|
unkown
|
page readonly
|
|
|
|
7FF52FB9D000
|
unkown
|
page readonly
|
|
|
|
2E2E9210000
|
unkown
|
page read and write
|
|
|
|
FADF3FF000
|
unkown
|
page read and write
|
|
|
|
1F91000
|
unkown
|
page readonly
|
|
|
|
1865FE00000
|
unkown
|
page read and write
|
|
|
|
275DBE69000
|
unkown
|
page read and write
|
|
|
|
4E61D8E000
|
unkown
|
page read and write
|
|
|
|
2087000
|
unkown
|
page readonly
|
|
|
|
7FF5264DC000
|
unkown
|
page readonly
|
|
|
|
7FF5AF0B5000
|
unkown
|
page readonly
|
|
|
|
7FF51F1CF000
|
unkown
|
page readonly
|
|
|
|
7FF5262ED000
|
unkown
|
page readonly
|
|
|
|
1DDAEA8A000
|
unkown
|
page read and write
|
|
|
|
1E7088F0000
|
unkown
|
page read and write
|
|
|
|
2E2E8900000
|
unkown
|
page read and write
|
|
|
|
145092B7000
|
unkown
|
page readonly
|
|
|
|
7FF5263DE000
|
unkown
|
page readonly
|
|
|
|
20196E02000
|
unkown
|
page read and write
|
|
|
|
2C71000
|
unkown
|
page readonly
|
|
|
|
7FF58D8BD000
|
unkown
|
page readonly
|
|
|
|
2E2E8A37000
|
unkown
|
page read and write
|
|
|
|
7FF58DAED000
|
unkown
|
page readonly
|
|
|
|
7FF5DC949000
|
unkown
|
page readonly
|
|
|
|
7FF5A5740000
|
unkown
|
page readonly
|
|
|
|
7FF54F03D000
|
unkown
|
page readonly
|
|
|
|
CED87E000
|
unkown
|
page read and write
|
|
|
|
2AED9ECA000
|
unkown
|
page read and write
|
|
|
|
7FF52FCAF000
|
unkown
|
page readonly
|
|
|
|
14509031000
|
unkown
|
page read and write
|
|
|
|
21394A29000
|
unkown
|
page read and write
|
|
|
|
29EA000
|
heap private
|
page read and write
|
|
|
|
7FF58D95D000
|
unkown
|
page readonly
|
|
|
|
B255A7D000
|
unkown
|
page read and write
|
|
|
|
7FF5A589D000
|
unkown
|
page readonly
|
|
|
|
7FF565DA3000
|
unkown
|
page readonly
|
|
|
|
341E000
|
unkown
|
page read and write
|
|
|
|
EB278FD000
|
unkown
|
page read and write
|
|
|
|
785F4FC000
|
unkown
|
page read and write
|
|
|
|
7FF5264A7000
|
unkown
|
page readonly
|
|
|
|
7FF565E9E000
|
unkown
|
page readonly
|
|
|
|
7FF52FA67000
|
unkown
|
page readonly
|
|
|
|
7FF51C52C000
|
unkown
|
page readonly
|
|
|
|
232F9B08000
|
unkown
|
page read and write
|
|
|
|
232FA400000
|
unkown
|
page readonly
|
|
|
|
2E2E89AA000
|
unkown
|
page read and write
|
|
|
|
7FF5D1D6A000
|
unkown
|
page readonly
|
|
|
|
1E70A944000
|
unkown
|
page read and write
|
|
|
|
7FF51028D000
|
unkown
|
page readonly
|
|
|
|
7FF5264C8000
|
unkown
|
page readonly
|
|
|
|
7FF5264F7000
|
unkown
|
page readonly
|
|
|
|
2CC9000
|
unkown
|
page readonly
|
|
|
|
21394A02000
|
unkown
|
page read and write
|
|
|
|
7FF58DAF5000
|
unkown
|
page readonly
|
|
|
|
7FF5A54F6000
|
unkown
|
page readonly
|
|
|
|
232F9A8C000
|
unkown
|
page read and write
|
|
|
|
1865FE00000
|
unkown
|
page read and write
|
|
|
|
7FF50FF85000
|
unkown
|
page readonly
|
|
|
|
145092D0000
|
unkown
|
page read and write
|
|
|
|
15C8D2B0000
|
unkown
|
page readonly
|
|
|
|
25F0445A000
|
unkown
|
page read and write
|
|
|
|
1E70886D000
|
unkown
|
page read and write
|
|
|
|
1E70A1F0000
|
unkown
|
page read and write
|
|
|
|
14509300000
|
unkown
|
page read and write
|
|
|
|
1D06A3E0000
|
unkown
|
page read and write
|
|
|
|
213963A0000
|
unkown
|
page read and write
|
|
|
|
2D4C000
|
unkown
|
page readonly
|
|
|
|
7FF50773E000
|
unkown
|
page readonly
|
|
|
|
7FF4FFCCA000
|
unkown
|
page readonly
|
|
|
|
1865F440000
|
unkown
|
page readonly
|
|
|
|
35A5000
|
unkown
|
page read and write
|
|
|
|
14504318000
|
unkown
|
page read and write
|
|
|
|
7FF50FCD6000
|
unkown
|
page readonly
|
|
|
|
1865EF57000
|
unkown
|
page read and write
|
|
|
|
7FF51C5FD000
|
unkown
|
page readonly
|
|
|
|
1DDAEB08000
|
unkown
|
page read and write
|
|
|
|
7FF5C4B96000
|
unkown
|
page readonly
|
|
|
|
7FF4FFBD5000
|
unkown
|
page readonly
|
|
|
|
7FF5A58C0000
|
unkown
|
page readonly
|
|
|
|
7FF51C4C3000
|
unkown
|
page readonly
|
|
|
|
15C8D2E0000
|
heap private
|
page read and write
|
|
|
|
2E2E891B000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD46000
|
unkown
|
page readonly
|
|
|
|
1865EFBC000
|
unkown
|
page read and write
|
|
|
|
1E708829000
|
unkown
|
page read and write
|
|
|
|
7FF5A5864000
|
unkown
|
page readonly
|
|
|
|
145041D0000
|
unkown
|
page readonly
|
|
|
|
669E000
|
unkown
|
page read and write
|
|
|
|
14504318000
|
unkown
|
page read and write
|
|
|
|
232F9940000
|
heap default
|
page read and write
|
|
|
|
2E2E6AD0000
|
unkown
|
page readonly
|
|
|
|
2CAB000
|
unkown
|
page readonly
|
|
|
|
7FF50FF17000
|
unkown
|
page readonly
|
|
|
|
7FF50FEF0000
|
unkown
|
page readonly
|
|
|
|
2AEDA530000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB4E000
|
unkown
|
page readonly
|
|
|
|
1D06A429000
|
unkown
|
page read and write
|
|
|
|
7FF4FFC73000
|
unkown
|
page readonly
|
|
|
|
7FF58DAF9000
|
unkown
|
page readonly
|
|
|
|
1E70A6E0000
|
unkown
|
page read and write
|
|
|
|
7FF5260D5000
|
unkown
|
page readonly
|
|
|
|
7FF51004E000
|
unkown
|
page readonly
|
|
|
|
275DD8A0000
|
unkown
|
page readonly
|
|
|
|
1865EF10000
|
heap default
|
page read and write
|
|
|
|
1450909F000
|
unkown
|
page read and write
|
|
|
|
3550000
|
unkown
|
page read and write
|
|
|
|
2E2E6977000
|
unkown
|
page read and write
|
|
|
|
7FF5C5C8E000
|
unkown
|
page readonly
|
|
|
|
7FF5103FC000
|
unkown
|
page readonly
|
|
|
|
2E2E685D000
|
unkown
|
page read and write
|
|
|
|
7FF54EDC3000
|
unkown
|
page readonly
|
|
|
|
14508EC0000
|
unkown
|
page read and write
|
|
|
|
20196E29000
|
unkown
|
page read and write
|
|
|
|
341A000
|
unkown
|
page read and write
|
|
|
|
7FF58DBBD000
|
unkown
|
page readonly
|
|
|
|
7FF52FBC4000
|
unkown
|
page readonly
|
|
|
|
7FF5D1DED000
|
unkown
|
page readonly
|
|
|
|
6BA0000
|
unkown
|
page read and write
|
|
|
|
EB2797C000
|
unkown
|
page read and write
|
|
|
|
7FF5A56F7000
|
unkown
|
page readonly
|
|
|
|
2BB7000
|
unkown
|
page readonly
|
|
|
|
1FD31A42000
|
unkown
|
page read and write
|
|
|
|
2AD6000
|
unkown
|
page readonly
|
|
|
|
275DBE6F000
|
unkown
|
page read and write
|
|
|
|
D76C87E000
|
unkown
|
page read and write
|
|
|
|
1FD31A45000
|
unkown
|
page read and write
|
|
|
|
7FF565E7B000
|
unkown
|
page readonly
|
|
|
|
14509360000
|
unkown
|
page readonly
|
|
|
|
35AE000
|
unkown
|
page read and write
|
|
|
|
1E70883F000
|
unkown
|
page read and write
|
|
|
|
1FD31A4D000
|
unkown
|
page read and write
|
|
|
|
7FF5A57A3000
|
unkown
|
page readonly
|
|
|
|
25F04390000
|
heap private
|
page read and write
|
|
|
|
7FF5AF2DA000
|
unkown
|
page readonly
|
|
|
|
9B6476F000
|
unkown
|
page read and write
|
|
|
|
1E70A2F0000
|
unkown
|
page readonly
|
|
|
|
7FF58D9F7000
|
unkown
|
page readonly
|
|
|
|
7FF5AF297000
|
unkown
|
page readonly
|
|
|
|
7FF51F0E8000
|
unkown
|
page readonly
|
|
|
|
1E70A680000
|
heap private
|
page read and write
|
|
|
|
1FD31A57000
|
unkown
|
page read and write
|
|
|
|
7FF51ECA8000
|
unkown
|
page readonly
|
|
|
|
7FF52FCA8000
|
unkown
|
page readonly
|
|
|
|
167F4E54000
|
unkown
|
page read and write
|
|
There are 1728 hidden memdumps, click here to show them.