Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
o515508.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\o515508.xlsm.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:40
2020, mtime=Fri Apr 9 04:38:21 2021, atime=Fri Apr 9 04:38:21 2021, length=23898, window=hide
|
modified
|
|
|
|
C:\Users\user\Desktop\~$o515508.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\D6799D8B-8A33-40A1-AE50-B4A8EF3D3D7F
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\1B710000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 16:19:49 2019, mtime=Fri Apr 9 04:38:21 2021, atime=Fri Apr 9 04:38:21 2021, length=12288, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\FB710000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\97DE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\o515508.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:15
2020, mtime=Fri Apr 9 04:33:40 2021, atime=Fri Apr 9 04:33:40 2021, length=24476, window=hide
|
modified
|
|
|
|
C:\Users\user\Desktop\78DE0000
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
There are 90 hidden URLs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
*$8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
+$8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
17607
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
179B0
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
17B66
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
17C11
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
<08
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
r!2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED4AD
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED73C
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED817
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED8C2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
})2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
There are 127 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
24BD8F1C000
|
heap default
|
page read and write
|
|
|
|
26E3E220000
|
unkown
|
page readonly
|
|
|
|
1E689090000
|
unkown
|
page readonly
|
|
|
|
7FF53477D000
|
unkown
|
page readonly
|
|
|
|
7FF58BCC5000
|
unkown
|
page readonly
|
|
|
|
1E683760000
|
unkown
|
page readonly
|
|
|
|
27661310000
|
unkown
|
page readonly
|
|
|
|
7FF5AB3F2000
|
unkown
|
page readonly
|
|
|
|
15586C60000
|
unkown
|
page read and write
|
|
|
|
1E68389F000
|
unkown
|
page read and write
|
|
|
|
7FF5A0082000
|
unkown
|
page readonly
|
|
|
|
7FF5D3407000
|
unkown
|
page readonly
|
|
|
|
1782D285000
|
unkown
|
page read and write
|
|
|
|
7FF58BCD9000
|
unkown
|
page readonly
|
|
|
|
7FF5186AD000
|
unkown
|
page readonly
|
|
|
|
1EBA1700000
|
heap default
|
page read and write
|
|
|
|
24BD90F0000
|
unkown
|
page readonly
|
|
|
|
1FBE939C000
|
unkown
|
page read and write
|
|
|
|
196FB790000
|
unkown
|
page readonly
|
|
|
|
7FF58BC41000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA7E000
|
unkown
|
page readonly
|
|
|
|
7FF5154C7000
|
unkown
|
page readonly
|
|
|
|
1782D248000
|
unkown
|
page read and write
|
|
|
|
1AF95FB0000
|
unkown
|
page readonly
|
|
|
|
7FF564401000
|
unkown
|
page readonly
|
|
|
|
1AF9814B000
|
unkown
|
page read and write
|
|
|
|
7FF5D23B1000
|
unkown
|
page readonly
|
|
|
|
7FF58BC2A000
|
unkown
|
page readonly
|
|
|
|
1782D258000
|
unkown
|
page read and write
|
|
|
|
26E401E0000
|
unkown
|
page read and write
|
|
|
|
CEAFF7A000
|
unkown
|
page read and write
|
|
|
|
1A800A13000
|
unkown
|
page read and write
|
|
|
|
2252F102000
|
unkown
|
page read and write
|
|
|
|
7FF5344C7000
|
unkown
|
page readonly
|
|
|
|
2765FA50000
|
unkown
|
page readonly
|
|
|
|
274529A0000
|
heap private
|
page read and write
|
|
|
|
7FF5B7B51000
|
unkown
|
page readonly
|
|
|
|
1AF981FC000
|
unkown
|
page read and write
|
|
|
|
7FF58BA8A000
|
unkown
|
page readonly
|
|
|
|
1E68387B000
|
unkown
|
page read and write
|
|
|
|
2252F200000
|
unkown
|
page readonly
|
|
|
|
7FF534685000
|
unkown
|
page readonly
|
|
|
|
CEB067E000
|
unkown
|
page read and write
|
|
|
|
7FF59F925000
|
unkown
|
page readonly
|
|
|
|
15586BE0000
|
unkown
|
page read and write
|
|
|
|
7FF5D2383000
|
unkown
|
page readonly
|
|
|
|
67B919C000
|
unkown
|
page read and write
|
|
|
|
7FF58BC96000
|
unkown
|
page readonly
|
|
|
|
1E684700000
|
unkown
|
page read and write
|
|
|
|
32245FB000
|
unkown
|
page read and write
|
|
|
|
7FF58BCED000
|
unkown
|
page readonly
|
|
|
|
1E688E00000
|
unkown
|
page read and write
|
|
|
|
7FF56437E000
|
unkown
|
page readonly
|
|
|
|
7FF5D3799000
|
unkown
|
page readonly
|
|
|
|
81A61FF000
|
unkown
|
page read and write
|
|
|
|
7FF58BB69000
|
unkown
|
page readonly
|
|
|
|
7FF58BB61000
|
unkown
|
page readonly
|
|
|
|
7FF5B7983000
|
unkown
|
page readonly
|
|
|
|
7FF564D35000
|
unkown
|
page readonly
|
|
|
|
1782D318000
|
unkown
|
page read and write
|
|
|
|
7FF56A763000
|
unkown
|
page readonly
|
|
|
|
1AF98156000
|
unkown
|
page read and write
|
|
|
|
7FF51C0DE000
|
unkown
|
page readonly
|
|
|
|
7FF58BC5A000
|
unkown
|
page readonly
|
|
|
|
1AF960D4000
|
unkown
|
page read and write
|
|
|
|
1EBA31F0000
|
unkown
|
page read and write
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
2765F854000
|
unkown
|
page read and write
|
|
|
|
24BD8EE0000
|
heap default
|
page read and write
|
|
|
|
7FF5345E0000
|
unkown
|
page readonly
|
|
|
|
26E3E3A0000
|
heap private
|
page read and write
|
|
|
|
1B703E02000
|
unkown
|
page read and write
|
|
|
|
1E688E22000
|
unkown
|
page read and write
|
|
|
|
1AF9812C000
|
unkown
|
page read and write
|
|
|
|
26E3E429000
|
unkown
|
page read and write
|
|
|
|
E5D43EC000
|
unkown
|
page read and write
|
|
|
|
7FF5D36FD000
|
unkown
|
page readonly
|
|
|
|
191EB600000
|
unkown
|
page readonly
|
|
|
|
1E689094000
|
unkown
|
page readonly
|
|
|
|
7FF56A89F000
|
unkown
|
page readonly
|
|
|
|
15586C77000
|
unkown
|
page read and write
|
|
|
|
7FF56A807000
|
unkown
|
page readonly
|
|
|
|
7FF56A8A9000
|
unkown
|
page readonly
|
|
|
|
7FF4FABC6000
|
unkown
|
page readonly
|
|
|
|
1AF98117000
|
unkown
|
page read and write
|
|
|
|
7FF5D2571000
|
unkown
|
page readonly
|
|
|
|
7FF566770000
|
unkown
|
page readonly
|
|
|
|
15586C58000
|
unkown
|
page read and write
|
|
|
|
1782ED40000
|
unkown
|
page write copy
|
|
|
|
7FF56663E000
|
unkown
|
page readonly
|
|
|
|
1FF86E02000
|
unkown
|
page read and write
|
|
|
|
15586A20000
|
unkown
|
page readonly
|
|
|
|
7FF5D3791000
|
unkown
|
page readonly
|
|
|
|
7FF58BCF1000
|
unkown
|
page readonly
|
|
|
|
1AF9606E000
|
unkown
|
page read and write
|
|
|
|
1AF98542000
|
unkown
|
page read and write
|
|
|
|
7FF53444A000
|
unkown
|
page readonly
|
|
|
|
24BD90B0000
|
unkown
|
page read and write
|
|
|
|
24BDA9D0000
|
unkown
|
page readonly
|
|
|
|
1E6848C0000
|
unkown
|
page readonly
|
|
|
|
7FF56A748000
|
unkown
|
page readonly
|
|
|
|
7FF58BABC000
|
unkown
|
page readonly
|
|
|
|
7FF5D238D000
|
unkown
|
page readonly
|
|
|
|
7FF51C140000
|
unkown
|
page readonly
|
|
|
|
7FF5646A5000
|
unkown
|
page readonly
|
|
|
|
1782D22A000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B66000
|
unkown
|
page readonly
|
|
|
|
7FF5AB3F4000
|
unkown
|
page readonly
|
|
|
|
1E683877000
|
unkown
|
page read and write
|
|
|
|
BBDA1FF000
|
unkown
|
page read and write
|
|
|
|
1EBA1A00000
|
unkown
|
page write copy
|
|
|
|
27452AE0000
|
unkown
|
page readonly
|
|
|
|
CEB007B000
|
unkown
|
page read and write
|
|
|
|
7FF58B9DC000
|
unkown
|
page readonly
|
|
|
|
15586C7B000
|
unkown
|
page read and write
|
|
|
|
7FF58B8BD000
|
unkown
|
page readonly
|
|
|
|
24BD9490000
|
unkown
|
page readonly
|
|
|
|
FA722FF000
|
unkown
|
page read and write
|
|
|
|
BBD9FF7000
|
unkown
|
page read and write
|
|
|
|
21FDA653000
|
unkown
|
page read and write
|
|
|
|
1E68388D000
|
unkown
|
page read and write
|
|
|
|
1782D860000
|
unkown
|
page readonly
|
|
|
|
7FF5347A5000
|
unkown
|
page readonly
|
|
|
|
76EC0FF000
|
unkown
|
page read and write
|
|
|
|
1AF9611B000
|
unkown
|
page read and write
|
|
|
|
1F1D4453000
|
unkown
|
page read and write
|
|
|
|
27452C5A000
|
unkown
|
page read and write
|
|
|
|
7FF4FABDA000
|
unkown
|
page readonly
|
|
|
|
36597FA000
|
unkown
|
page read and write
|
|
|
|
7FF564DA1000
|
unkown
|
page readonly
|
|
|
|
7FF58BAF0000
|
unkown
|
page readonly
|
|
|
|
7FF5D24FC000
|
unkown
|
page readonly
|
|
|
|
24BDA970000
|
unkown
|
page readonly
|
|
|
|
7FF518741000
|
unkown
|
page readonly
|
|
|
|
76EBFFA000
|
unkown
|
page read and write
|
|
|
|
7FF5B73E6000
|
unkown
|
page readonly
|
|
|
|
7FF564810000
|
unkown
|
page readonly
|
|
|
|
1AF960BF000
|
unkown
|
page read and write
|
|
|
|
7FF5347B4000
|
unkown
|
page readonly
|
|
|
|
1E689150000
|
unkown
|
page readonly
|
|
|
|
1AF97AC0000
|
unkown
|
page readonly
|
|
|
|
7FF5D36A2000
|
unkown
|
page readonly
|
|
|
|
7FF53478C000
|
unkown
|
page readonly
|
|
|
|
2252F066000
|
unkown
|
page read and write
|
|
|
|
705B17C000
|
unkown
|
page read and write
|
|
|
|
705B4FF000
|
unkown
|
page read and write
|
|
|
|
1E684159000
|
unkown
|
page read and write
|
|
|
|
21FDA713000
|
unkown
|
page read and write
|
|
|
|
7FF5A00DE000
|
unkown
|
page readonly
|
|
|
|
7FF56A6C0000
|
unkown
|
page readonly
|
|
|
|
7FF58BAA5000
|
unkown
|
page readonly
|
|
|
|
1AF96013000
|
unkown
|
page read and write
|
|
|
|
7FF58B7C4000
|
unkown
|
page readonly
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
81A6079000
|
unkown
|
page read and write
|
|
|
|
7FF5B7A8E000
|
unkown
|
page readonly
|
|
|
|
7FF5D2070000
|
unkown
|
page readonly
|
|
|
|
27452C86000
|
unkown
|
page read and write
|
|
|
|
1AF981FC000
|
unkown
|
page read and write
|
|
|
|
1B703CF0000
|
heap private
|
page read and write
|
|
|
|
1E688CA0000
|
unkown
|
page read and write
|
|
|
|
1FBE932E000
|
unkown
|
page read and write
|
|
|
|
7FF58BC67000
|
unkown
|
page readonly
|
|
|
|
7FF53468C000
|
unkown
|
page readonly
|
|
|
|
7FF502554000
|
unkown
|
page readonly
|
|
|
|
7FF5D24B5000
|
unkown
|
page readonly
|
|
|
|
7FF5ABB1F000
|
unkown
|
page readonly
|
|
|
|
1E683FB0000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC26000
|
unkown
|
page readonly
|
|
|
|
7FF58BD20000
|
unkown
|
page readonly
|
|
|
|
7FF51C0A0000
|
unkown
|
page readonly
|
|
|
|
7FF5186E0000
|
unkown
|
page readonly
|
|
|
|
7FF56696D000
|
unkown
|
page readonly
|
|
|
|
26E3E3F0000
|
unkown
|
page readonly
|
|
|
|
7FF564D9E000
|
unkown
|
page readonly
|
|
|
|
7FF502320000
|
unkown
|
page readonly
|
|
|
|
7FF5ABCD5000
|
unkown
|
page readonly
|
|
|
|
1782D100000
|
heap private
|
page read and write
|
|
|
|
1A801202000
|
unkown
|
page read and write
|
|
|
|
1B7040D0000
|
unkown
|
page readonly
|
|
|
|
191EAC3E000
|
unkown
|
page read and write
|
|
|
|
7FF51BF2F000
|
unkown
|
page readonly
|
|
|
|
7FF56475F000
|
unkown
|
page readonly
|
|
|
|
7FF58B8BA000
|
unkown
|
page readonly
|
|
|
|
1FBE9E50000
|
unkown
|
page read and write
|
|
|
|
233117C000
|
unkown
|
page read and write
|
|
|
|
7FF51835C000
|
unkown
|
page readonly
|
|
|
|
7FF564597000
|
unkown
|
page readonly
|
|
|
|
7FF564781000
|
unkown
|
page readonly
|
|
|
|
1E688DC0000
|
unkown
|
page read and write
|
|
|
|
BBDA0FE000
|
unkown
|
page read and write
|
|
|
|
7FF5154C3000
|
unkown
|
page readonly
|
|
|
|
191EAC6B000
|
unkown
|
page read and write
|
|
|
|
1AF9816F000
|
unkown
|
page read and write
|
|
|
|
7FF5D3716000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC57000
|
unkown
|
page readonly
|
|
|
|
2765F720000
|
heap default
|
page read and write
|
|
|
|
322411F000
|
unkown
|
page read and write
|
|
|
|
36592FA000
|
unkown
|
page read and write
|
|
|
|
76EC1F9000
|
unkown
|
page read and write
|
|
|
|
7FF58BC5C000
|
unkown
|
page readonly
|
|
|
|
FA71D75000
|
unkown
|
page read and write
|
|
|
|
27452BD0000
|
unkown
|
page read and write
|
|
|
|
21FDB000000
|
unkown
|
page readonly
|
|
|
|
7FF5A0039000
|
unkown
|
page readonly
|
|
|
|
1E688EB6000
|
unkown
|
page read and write
|
|
|
|
7FF59FD1A000
|
unkown
|
page readonly
|
|
|
|
1E683FF0000
|
unkown
|
page read and write
|
|
|
|
7FF50246A000
|
unkown
|
page readonly
|
|
|
|
7FF5D22FF000
|
unkown
|
page readonly
|
|
|
|
7FF5D23EC000
|
unkown
|
page readonly
|
|
|
|
7FF5A69CA000
|
unkown
|
page readonly
|
|
|
|
7FF564708000
|
unkown
|
page readonly
|
|
|
|
7FF5D2080000
|
unkown
|
page readonly
|
|
|
|
7FF515802000
|
unkown
|
page readonly
|
|
|
|
7FF58BAB9000
|
unkown
|
page readonly
|
|
|
|
1E689000000
|
unkown
|
page read and write
|
|
|
|
15586C3D000
|
unkown
|
page read and write
|
|
|
|
1782D313000
|
unkown
|
page read and write
|
|
|
|
1AF981FC000
|
unkown
|
page read and write
|
|
|
|
CEB05FF000
|
unkown
|
page read and write
|
|
|
|
1AF961A1000
|
unkown
|
page read and write
|
|
|
|
36594FA000
|
unkown
|
page read and write
|
|
|
|
7FF59FEB9000
|
unkown
|
page readonly
|
|
|
|
7FF58BA3A000
|
unkown
|
page readonly
|
|
|
|
1B703E00000
|
unkown
|
page read and write
|
|
|
|
7FF501DC5000
|
unkown
|
page readonly
|
|
|
|
7FF58BB04000
|
unkown
|
page readonly
|
|
|
|
7FF5643EF000
|
unkown
|
page readonly
|
|
|
|
7FF534708000
|
unkown
|
page readonly
|
|
|
|
1AF99010000
|
unkown
|
page read and write
|
|
|
|
67B98FE000
|
unkown
|
page read and write
|
|
|
|
1B703E40000
|
unkown
|
page read and write
|
|
|
|
27453400000
|
unkown
|
page readonly
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
1AF98156000
|
unkown
|
page read and write
|
|
|
|
1FBE92D0000
|
unkown
|
page readonly
|
|
|
|
7FF518749000
|
unkown
|
page readonly
|
|
|
|
1E689110000
|
unkown
|
page read and write
|
|
|
|
1E688E3F000
|
unkown
|
page read and write
|
|
|
|
1E683E60000
|
unkown
|
page readonly
|
|
|
|
15586C62000
|
unkown
|
page read and write
|
|
|
|
36599FC000
|
unkown
|
page read and write
|
|
|
|
7FF5647A5000
|
unkown
|
page readonly
|
|
|
|
7FF56A8CC000
|
unkown
|
page readonly
|
|
|
|
7FF5346F3000
|
unkown
|
page readonly
|
|
|
|
26E3E557000
|
unkown
|
page read and write
|
|
|
|
1FBE9DE0000
|
unkown
|
page read and write
|
|
|
|
26E3E513000
|
unkown
|
page read and write
|
|
|
|
1AF981FD000
|
unkown
|
page read and write
|
|
|
|
7FF515845000
|
unkown
|
page readonly
|
|
|
|
2252F08D000
|
unkown
|
page read and write
|
|
|
|
1E689210000
|
unkown
|
page readonly
|
|
|
|
1E683FD0000
|
unkown
|
page readonly
|
|
|
|
26E3FDA0000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B6C000
|
unkown
|
page readonly
|
|
|
|
2252F113000
|
unkown
|
page read and write
|
|
|
|
7FF5185F4000
|
unkown
|
page readonly
|
|
|
|
7FF566A09000
|
unkown
|
page readonly
|
|
|
|
FA71C7E000
|
unkown
|
page read and write
|
|
|
|
7FF56473A000
|
unkown
|
page readonly
|
|
|
|
1E688C60000
|
unkown
|
page readonly
|
|
|
|
7FF56480E000
|
unkown
|
page readonly
|
|
|
|
7FF59F767000
|
unkown
|
page readonly
|
|
|
|
1AF98343000
|
unkown
|
page read and write
|
|
|
|
1AF9606A000
|
unkown
|
page read and write
|
|
|
|
26E3E516000
|
unkown
|
page read and write
|
|
|
|
7FF5A006C000
|
unkown
|
page readonly
|
|
|
|
7FF5647B4000
|
unkown
|
page readonly
|
|
|
|
15586BD0000
|
unkown
|
page readonly
|
|
|
|
2765FC50000
|
unkown
|
page readonly
|
|
|
|
7FF534810000
|
unkown
|
page readonly
|
|
|
|
7D6F0FF000
|
unkown
|
page read and write
|
|
|
|
2252EFE0000
|
unkown
|
page readonly
|
|
|
|
FA71E7B000
|
unkown
|
page read and write
|
|
|
|
1AF98383000
|
unkown
|
page read and write
|
|
|
|
7FF51C19E000
|
unkown
|
page readonly
|
|
|
|
7FF534558000
|
unkown
|
page readonly
|
|
|
|
7FF5D234A000
|
unkown
|
page readonly
|
|
|
|
1E688DB0000
|
unkown
|
page read and write
|
|
|
|
7FF502275000
|
unkown
|
page readonly
|
|
|
|
1EBA1913000
|
unkown
|
page read and write
|
|
|
|
705B2FE000
|
unkown
|
page read and write
|
|
|
|
26E4031C000
|
unkown
|
page read and write
|
|
|
|
7FF51C11C000
|
unkown
|
page readonly
|
|
|
|
1AF960FB000
|
unkown
|
page read and write
|
|
|
|
7FF5A6A0D000
|
unkown
|
page readonly
|
|
|
|
7FF50230A000
|
unkown
|
page readonly
|
|
|
|
7FF59FEF7000
|
unkown
|
page readonly
|
|
|
|
1FBE95A5000
|
heap private
|
page read and write
|
|
|
|
7FF564382000
|
unkown
|
page readonly
|
|
|
|
3659BFF000
|
unkown
|
page read and write
|
|
|
|
7FF59FFE0000
|
unkown
|
page readonly
|
|
|
|
76EC17D000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B49000
|
unkown
|
page readonly
|
|
|
|
191EACC3000
|
unkown
|
page read and write
|
|
|
|
2252FD40000
|
unkown
|
page readonly
|
|
|
|
89F1BAE000
|
unkown
|
page read and write
|
|
|
|
1782D4D0000
|
unkown
|
page readonly
|
|
|
|
1E6836F0000
|
heap private
|
page read and write
|
|
|
|
7FF5A6B02000
|
unkown
|
page readonly
|
|
|
|
1FF86800000
|
unkown
|
page readonly
|
|
|
|
7FF564D2C000
|
unkown
|
page readonly
|
|
|
|
79B277E000
|
unkown
|
page read and write
|
|
|
|
7FF5D2517000
|
unkown
|
page readonly
|
|
|
|
26E3E210000
|
heap default
|
page read and write
|
|
|
|
1FBE9E40000
|
unkown
|
page read and write
|
|
|
|
1F1D4A90000
|
unkown
|
page read and write
|
|
|
|
1AF9608D000
|
unkown
|
page read and write
|
|
|
|
1F1D4A90000
|
unkown
|
page read and write
|
|
|
|
1E688DE0000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAC3000
|
unkown
|
page readonly
|
|
|
|
7FF564712000
|
unkown
|
page readonly
|
|
|
|
15586C59000
|
unkown
|
page read and write
|
|
|
|
1E683F90000
|
unkown
|
page readonly
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
7FF515901000
|
unkown
|
page readonly
|
|
|
|
1AF9616E000
|
unkown
|
page read and write
|
|
|
|
7D6EFFF000
|
unkown
|
page read and write
|
|
|
|
1AF981FC000
|
unkown
|
page read and write
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
1782D258000
|
unkown
|
page read and write
|
|
|
|
27661210000
|
unkown
|
page read and write
|
|
|
|
1AF97E50000
|
unkown
|
page read and write
|
|
|
|
7FF5D1D17000
|
unkown
|
page readonly
|
|
|
|
21FDA66E000
|
unkown
|
page read and write
|
|
|
|
27453202000
|
unkown
|
page read and write
|
|
|
|
7FF5A6AF2000
|
unkown
|
page readonly
|
|
|
|
7FF566971000
|
unkown
|
page readonly
|
|
|
|
7FF56A94E000
|
unkown
|
page readonly
|
|
|
|
7FF5154D4000
|
unkown
|
page readonly
|
|
|
|
1AF960BF000
|
unkown
|
page read and write
|
|
|
|
1E688DF0000
|
unkown
|
page read and write
|
|
|
|
1AF9812C000
|
unkown
|
page read and write
|
|
|
|
1AF98502000
|
unkown
|
page read and write
|
|
|
|
1B703D60000
|
unkown
|
page write copy
|
|
|
|
2252EF70000
|
heap private
|
page read and write
|
|
|
|
7FF53457E000
|
unkown
|
page readonly
|
|
|
|
1A800890000
|
unkown
|
page readonly
|
|
|
|
FA721FF000
|
unkown
|
page read and write
|
|
|
|
7FF58B973000
|
unkown
|
page readonly
|
|
|
|
42E1E7C000
|
unkown
|
page read and write
|
|
|
|
1E683FC0000
|
unkown
|
page readonly
|
|
|
|
42E1EFE000
|
unkown
|
page read and write
|
|
|
|
7FF4FAACD000
|
unkown
|
page readonly
|
|
|
|
7FF5158A7000
|
unkown
|
page readonly
|
|
|
|
2765F6C0000
|
heap private
|
page read and write
|
|
|
|
1AF9607B000
|
unkown
|
page read and write
|
|
|
|
7FF564697000
|
unkown
|
page readonly
|
|
|
|
7FF534697000
|
unkown
|
page readonly
|
|
|
|
7FF5346B1000
|
unkown
|
page readonly
|
|
|
|
15586C7E000
|
unkown
|
page read and write
|
|
|
|
1B703D50000
|
heap default
|
page read and write
|
|
|
|
7FF533E8C000
|
unkown
|
page readonly
|
|
|
|
1FBE9150000
|
unkown
|
page read and write
|
|
|
|
1AF98222000
|
unkown
|
page read and write
|
|
|
|
7FF51568F000
|
unkown
|
page readonly
|
|
|
|
7FF5B7B59000
|
unkown
|
page readonly
|
|
|
|
CEAF9CB000
|
unkown
|
page read and write
|
|
|
|
32246F7000
|
unkown
|
page read and write
|
|
|
|
7FF5023C3000
|
unkown
|
page readonly
|
|
|
|
1E6890F0000
|
unkown
|
page read and write
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
7FF51587C000
|
unkown
|
page readonly
|
|
|
|
1E684002000
|
unkown
|
page read and write
|
|
|
|
7FF59FFF6000
|
unkown
|
page readonly
|
|
|
|
21FDA5C0000
|
unkown
|
page readonly
|
|
|
|
7D6EF7F000
|
unkown
|
page read and write
|
|
|
|
1E6890BC000
|
unkown
|
page readonly
|
|
|
|
1AF96063000
|
unkown
|
page read and write
|
|
|
|
7FF502280000
|
unkown
|
page readonly
|
|
|
|
7FF515895000
|
unkown
|
page readonly
|
|
|
|
1AF9818A000
|
unkown
|
page read and write
|
|
|
|
15586C29000
|
unkown
|
page read and write
|
|
|
|
7FF534726000
|
unkown
|
page readonly
|
|
|
|
7FF51BE57000
|
unkown
|
page readonly
|
|
|
|
21FDA68B000
|
unkown
|
page read and write
|
|
|
|
1FBEA0B0000
|
unkown
|
page read and write
|
|
|
|
CEB0279000
|
unkown
|
page read and write
|
|
|
|
1AF9608B000
|
unkown
|
page read and write
|
|
|
|
1A800B00000
|
unkown
|
page read and write
|
|
|
|
1AF9812C000
|
unkown
|
page read and write
|
|
|
|
1AF99110000
|
unkown
|
page read and write
|
|
|
|
7FF5157D7000
|
unkown
|
page readonly
|
|
|
|
2765F813000
|
unkown
|
page read and write
|
|
|
|
89F1FFF000
|
unkown
|
page read and write
|
|
|
|
7FF5346C7000
|
unkown
|
page readonly
|
|
|
|
1AF9611D000
|
unkown
|
page read and write
|
|
|
|
1782D247000
|
unkown
|
page read and write
|
|
|
|
1AF98189000
|
unkown
|
page read and write
|
|
|
|
1E6838BC000
|
unkown
|
page read and write
|
|
|
|
1FBE92E0000
|
heap default
|
page read and write
|
|
|
|
7FF5346FC000
|
unkown
|
page readonly
|
|
|
|
1E689110000
|
unkown
|
page read and write
|
|
|
|
1F1D4C02000
|
unkown
|
page read and write
|
|
|
|
7FF564722000
|
unkown
|
page readonly
|
|
|
|
7FF56A959000
|
unkown
|
page readonly
|
|
|
|
1782D1B0000
|
unkown
|
page read and write
|
|
|
|
76EBEFA000
|
unkown
|
page read and write
|
|
|
|
7FF56A8F4000
|
unkown
|
page readonly
|
|
|
|
7FF4FAB2C000
|
unkown
|
page readonly
|
|
|
|
1FBE9337000
|
unkown
|
page read and write
|
|
|
|
7FF51BD78000
|
unkown
|
page readonly
|
|
|
|
7FF5ABCBA000
|
unkown
|
page readonly
|
|
|
|
7FF5158A4000
|
unkown
|
page readonly
|
|
|
|
1E684C20000
|
unkown
|
page read and write
|
|
|
|
1E683894000
|
unkown
|
page read and write
|
|
|
|
7FF58BC34000
|
unkown
|
page readonly
|
|
|
|
7FF518658000
|
unkown
|
page readonly
|
|
|
|
7FF5A005C000
|
unkown
|
page readonly
|
|
|
|
7FF5A0075000
|
unkown
|
page readonly
|
|
|
|
7FF5D366C000
|
unkown
|
page readonly
|
|
|
|
1E689170000
|
unkown
|
page readonly
|
|
|
|
1E683FA0000
|
unkown
|
page readonly
|
|
|
|
67B97FE000
|
unkown
|
page read and write
|
|
|
|
89F1F79000
|
unkown
|
page read and write
|
|
|
|
7FF566976000
|
unkown
|
page readonly
|
|
|
|
7FF56479C000
|
unkown
|
page readonly
|
|
|
|
BBD99EB000
|
unkown
|
page read and write
|
|
|
|
1AF96056000
|
unkown
|
page read and write
|
|
|
|
1A800980000
|
unkown
|
page read and write
|
|
|
|
7FF58BAEC000
|
unkown
|
page readonly
|
|
|
|
15586C84000
|
unkown
|
page read and write
|
|
|
|
1EBA1900000
|
unkown
|
page read and write
|
|
|
|
1782D1F0000
|
unkown
|
page readonly
|
|
|
|
7FF564710000
|
unkown
|
page readonly
|
|
|
|
1F1D4400000
|
unkown
|
page read and write
|
|
|
|
1FBE9376000
|
unkown
|
page read and write
|
|
|
|
27452C88000
|
unkown
|
page read and write
|
|
|
|
7FF58BA14000
|
unkown
|
page readonly
|
|
|
|
15586C48000
|
unkown
|
page read and write
|
|
|
|
1FBE932E000
|
unkown
|
page read and write
|
|
|
|
7FF5344CE000
|
unkown
|
page readonly
|
|
|
|
7FF56A8BD000
|
unkown
|
page readonly
|
|
|
|
1AF9818B000
|
unkown
|
page read and write
|
|
|
|
1F1D4310000
|
unkown
|
page readonly
|
|
|
|
7FF5647B7000
|
unkown
|
page readonly
|
|
|
|
7FF5B7309000
|
unkown
|
page readonly
|
|
|
|
7FF5D36DF000
|
unkown
|
page readonly
|
|
|
|
1782EE02000
|
unkown
|
page read and write
|
|
|
|
7FF5A6BF9000
|
unkown
|
page readonly
|
|
|
|
7FF5ABD06000
|
unkown
|
page readonly
|
|
|
|
7FF5ABCE9000
|
unkown
|
page readonly
|
|
|
|
1FBE93AD000
|
unkown
|
page read and write
|
|
|
|
3659B7C000
|
unkown
|
page read and write
|
|
|
|
76EBE79000
|
unkown
|
page read and write
|
|
|
|
1EBA1A50000
|
unkown
|
page readonly
|
|
|
|
7FF56A620000
|
unkown
|
page readonly
|
|
|
|
7FF56A80A000
|
unkown
|
page readonly
|
|
|
|
7FF5D2472000
|
unkown
|
page readonly
|
|
|
|
36595FB000
|
unkown
|
page read and write
|
|
|
|
1AF96040000
|
unkown
|
page read and write
|
|
|
|
7FF56A87A000
|
unkown
|
page readonly
|
|
|
|
1AF99310000
|
unkown
|
page read and write
|
|
|
|
7FF5ABD99000
|
unkown
|
page readonly
|
|
|
|
1AF9608D000
|
unkown
|
page read and write
|
|
|
|
1E689080000
|
unkown
|
page write copy
|
|
|
|
1AF99310000
|
unkown
|
page read and write
|
|
|
|
2765F802000
|
unkown
|
page read and write
|
|
|
|
27452A00000
|
heap default
|
page read and write
|
|
|
|
7FF502471000
|
unkown
|
page readonly
|
|
|
|
7FF564786000
|
unkown
|
page readonly
|
|
|
|
7FF5A6A31000
|
unkown
|
page readonly
|
|
|
|
1E689021000
|
unkown
|
page read and write
|
|
|
|
7FF51C10D000
|
unkown
|
page readonly
|
|
|
|
36596FB000
|
unkown
|
page read and write
|
|
|
|
26E40400000
|
unkown
|
page readonly
|
|
|
|
26E3E390000
|
unkown
|
page readonly
|
|
|
|
CEB047F000
|
unkown
|
page read and write
|
|
|
|
365957A000
|
unkown
|
page read and write
|
|
|
|
24BD92F0000
|
unkown
|
page readonly
|
|
|
|
7D6F07F000
|
unkown
|
page read and write
|
|
|
|
1F1D4A60000
|
unkown
|
page read and write
|
|
|
|
1AF99410000
|
unkown
|
page read and write
|
|
|
|
7FF5A6397000
|
unkown
|
page readonly
|
|
|
|
191EACCC000
|
unkown
|
page read and write
|
|
|
|
1E6890C0000
|
unkown
|
page read and write
|
|
|
|
1AF98500000
|
unkown
|
page read and write
|
|
|
|
1E689230000
|
unkown
|
page readonly
|
|
|
|
1E6837F3000
|
unkown
|
page read and write
|
|
|
|
7FF58BA4C000
|
unkown
|
page readonly
|
|
|
|
1AF982A4000
|
unkown
|
page read and write
|
|
|
|
7FF58BB93000
|
unkown
|
page readonly
|
|
|
|
7FF5025B9000
|
unkown
|
page readonly
|
|
|
|
7FF564728000
|
unkown
|
page readonly
|
|
|
|
36590FE000
|
unkown
|
page read and write
|
|
|
|
1AF99410000
|
unkown
|
page read and write
|
|
|
|
7FF5B730B000
|
unkown
|
page readonly
|
|
|
|
1AF9815A000
|
unkown
|
page read and write
|
|
|
|
7FF5024C8000
|
unkown
|
page readonly
|
|
|
|
7FF564CE5000
|
unkown
|
page readonly
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
7FF502223000
|
unkown
|
page readonly
|
|
|
|
E5D4C7D000
|
unkown
|
page read and write
|
|
|
|
7FF5D3455000
|
unkown
|
page readonly
|
|
|
|
196FB895000
|
heap private
|
page read and write
|
|
|
|
7FF58BD27000
|
unkown
|
page readonly
|
|
|
|
7FF5A826C000
|
unkown
|
page readonly
|
|
|
|
7FF59FC8D000
|
unkown
|
page readonly
|
|
|
|
21FDA650000
|
unkown
|
page read and write
|
|
|
|
1AF98383000
|
unkown
|
page read and write
|
|
|
|
42E22FE000
|
unkown
|
page read and write
|
|
|
|
5B2ED79000
|
unkown
|
page read and write
|
|
|
|
1AF99510000
|
unkown
|
page read and write
|
|
|
|
7FF502526000
|
unkown
|
page readonly
|
|
|
|
1EBA1802000
|
unkown
|
page read and write
|
|
|
|
1AF97E40000
|
unkown
|
page readonly
|
|
|
|
1AF98002000
|
unkown
|
page read and write
|
|
|
|
7FF5345E9000
|
unkown
|
page readonly
|
|
|
|
1E6847E0000
|
unkown
|
page read and write
|
|
|
|
7FF5346DB000
|
unkown
|
page readonly
|
|
|
|
1AF95F60000
|
unkown
|
page write copy
|
|
|
|
191EAC65000
|
unkown
|
page read and write
|
|
|
|
1AF96089000
|
unkown
|
page read and write
|
|
|
|
7FF58BA3E000
|
unkown
|
page readonly
|
|
|
|
1AF979C0000
|
unkown
|
page read and write
|
|
|
|
7FF51C0F9000
|
unkown
|
page readonly
|
|
|
|
E5D4F7F000
|
unkown
|
page read and write
|
|
|
|
7FF56697C000
|
unkown
|
page readonly
|
|
|
|
1FBE9DD0000
|
unkown
|
page read and write
|
|
|
|
27452BF0000
|
unkown
|
page readonly
|
|
|
|
7FF566541000
|
unkown
|
page readonly
|
|
|
|
BBD9EFB000
|
unkown
|
page read and write
|
|
|
|
7FF58BC21000
|
unkown
|
page readonly
|
|
|
|
1FBEA080000
|
unkown
|
page read and write
|
|
|
|
24BD90D0000
|
unkown
|
page read and write
|
|
|
|
26E401E0000
|
unkown
|
page read and write
|
|
|
|
1E688DC0000
|
unkown
|
page read and write
|
|
|
|
1AF99010000
|
unkown
|
page read and write
|
|
|
|
76EBBEF000
|
unkown
|
page read and write
|
|
|
|
1F1D43E0000
|
unkown
|
page readonly
|
|
|
|
233157D000
|
unkown
|
page read and write
|
|
|
|
32244F5000
|
unkown
|
page read and write
|
|
|
|
7FF58BC92000
|
unkown
|
page readonly
|
|
|
|
7FF5A00E9000
|
unkown
|
page readonly
|
|
|
|
191EABC0000
|
unkown
|
page readonly
|
|
|
|
1AF960A2000
|
unkown
|
page read and write
|
|
|
|
7FF58BB78000
|
unkown
|
page readonly
|
|
|
|
7FF5D24F6000
|
unkown
|
page readonly
|
|
|
|
1E688E9F000
|
unkown
|
page read and write
|
|
|
|
1A800A3C000
|
unkown
|
page read and write
|
|
|
|
1AF960B5000
|
unkown
|
page read and write
|
|
|
|
42E21FE000
|
unkown
|
page read and write
|
|
|
|
7FF5B7ADC000
|
unkown
|
page readonly
|
|
|
|
7FF5D233E000
|
unkown
|
page readonly
|
|
|
|
1FF87000000
|
unkown
|
page readonly
|
|
|
|
7FF59FE6F000
|
unkown
|
page readonly
|
|
|
|
7FF51583E000
|
unkown
|
page readonly
|
|
|
|
7FF58BA78000
|
unkown
|
page readonly
|
|
|
|
1FF865A0000
|
unkown
|
page readonly
|
|
|
|
7FF501DC9000
|
unkown
|
page readonly
|
|
|
|
1AF960E4000
|
unkown
|
page read and write
|
|
|
|
7FF56A6AA000
|
unkown
|
page readonly
|
|
|
|
1AF960BF000
|
unkown
|
page read and write
|
|
|
|
365967B000
|
unkown
|
page read and write
|
|
|
|
15586C6A000
|
unkown
|
page read and write
|
|
|
|
7FF5D3727000
|
unkown
|
page readonly
|
|
|
|
1E684000000
|
unkown
|
page read and write
|
|
|
|
7FF51BE5E000
|
unkown
|
page readonly
|
|
|
|
7FF5ABCA6000
|
unkown
|
page readonly
|
|
|
|
1AF981FC000
|
unkown
|
page read and write
|
|
|
|
365947A000
|
unkown
|
page read and write
|
|
|
|
7FF59FFD4000
|
unkown
|
page readonly
|
|
|
|
7FF51C12C000
|
unkown
|
page readonly
|
|
|
|
1EBA17E0000
|
unkown
|
page readonly
|
|
|
|
1FBE9326000
|
unkown
|
page read and write
|
|
|
|
365997B000
|
unkown
|
page read and write
|
|
|
|
2765FA00000
|
unkown
|
page write copy
|
|
|
|
1AF960EA000
|
unkown
|
page read and write
|
|
|
|
7FF5B7A66000
|
unkown
|
page readonly
|
|
|
|
365907E000
|
unkown
|
page read and write
|
|
|
|
7FF58BD0C000
|
unkown
|
page readonly
|
|
|
|
79B297F000
|
unkown
|
page read and write
|
|
|
|
7FF518685000
|
unkown
|
page readonly
|
|
|
|
7FF5ABCA8000
|
unkown
|
page readonly
|
|
|
|
7FF51C126000
|
unkown
|
page readonly
|
|
|
|
1FF865B0000
|
unkown
|
page read and write
|
|
|
|
1E6838A1000
|
unkown
|
page read and write
|
|
|
|
365987D000
|
unkown
|
page read and write
|
|
|
|
7FF566912000
|
unkown
|
page readonly
|
|
|
|
1A800A00000
|
unkown
|
page read and write
|
|
|
|
1E684118000
|
unkown
|
page read and write
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
7FF5A6A03000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC45000
|
unkown
|
page readonly
|
|
|
|
7FF51BF68000
|
unkown
|
page readonly
|
|
|
|
1E683856000
|
unkown
|
page read and write
|
|
|
|
7FF53475F000
|
unkown
|
page readonly
|
|
|
|
1E684118000
|
unkown
|
page read and write
|
|
|
|
7FF58BD15000
|
unkown
|
page readonly
|
|
|
|
7FF58BC82000
|
unkown
|
page readonly
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
7FF56468C000
|
unkown
|
page readonly
|
|
|
|
1782D289000
|
unkown
|
page read and write
|
|
|
|
1F1D442A000
|
unkown
|
page read and write
|
|
|
|
26E3E479000
|
unkown
|
page read and write
|
|
|
|
7FF502214000
|
unkown
|
page readonly
|
|
|
|
7FF56A866000
|
unkown
|
page readonly
|
|
|
|
E5D497C000
|
unkown
|
page read and write
|
|
|
|
7FF5023C7000
|
unkown
|
page readonly
|
|
|
|
7FF5A6B7C000
|
unkown
|
page readonly
|
|
|
|
1782D263000
|
unkown
|
page read and write
|
|
|
|
1AF9810D000
|
unkown
|
page read and write
|
|
|
|
7FF5D256E000
|
unkown
|
page readonly
|
|
|
|
7FF5647B0000
|
unkown
|
page readonly
|
|
|
|
7FF58BBF5000
|
unkown
|
page readonly
|
|
|
|
1A800A58000
|
unkown
|
page read and write
|
|
|
|
7FF5D2368000
|
unkown
|
page readonly
|
|
|
|
191EAE00000
|
unkown
|
page readonly
|
|
|
|
7FF564466000
|
unkown
|
page readonly
|
|
|
|
76EC27F000
|
unkown
|
page read and write
|
|
|
|
1AF99310000
|
unkown
|
page read and write
|
|
|
|
7FF5025AE000
|
unkown
|
page readonly
|
|
|
|
89F1B2B000
|
unkown
|
page read and write
|
|
|
|
BB036FE000
|
unkown
|
page read and write
|
|
|
|
1EBA1829000
|
unkown
|
page read and write
|
|
|
|
196FB6B8000
|
heap default
|
page read and write
|
|
|
|
1FBE97C0000
|
unkown
|
page readonly
|
|
|
|
1AF98200000
|
unkown
|
page read and write
|
|
|
|
1A801400000
|
unkown
|
page readonly
|
|
|
|
7FF58BAC8000
|
unkown
|
page readonly
|
|
|
|
24BDAB00000
|
heap private
|
page read and write
|
|
|
|
7FF5186E4000
|
unkown
|
page readonly
|
|
|
|
27452D02000
|
unkown
|
page read and write
|
|
|
|
BB037FC000
|
unkown
|
page read and write
|
|
|
|
7FF5A6BF9000
|
unkown
|
page readonly
|
|
|
|
7FF58BA21000
|
unkown
|
page readonly
|
|
|
|
1FBE92F0000
|
heap default
|
page read and write
|
|
|
|
7FF56444E000
|
unkown
|
page readonly
|
|
|
|
7FF566995000
|
unkown
|
page readonly
|
|
|
|
1E6890D0000
|
unkown
|
page read and write
|
|
|
|
1AF960F6000
|
unkown
|
page read and write
|
|
|
|
1782D1E0000
|
unkown
|
page read and write
|
|
|
|
7FF53453B000
|
unkown
|
page readonly
|
|
|
|
7FF5D2488000
|
unkown
|
page readonly
|
|
|
|
2252F100000
|
unkown
|
page read and write
|
|
|
|
89F207A000
|
unkown
|
page read and write
|
|
|
|
7FF4FA7B0000
|
unkown
|
page readonly
|
|
|
|
7FF59FD4D000
|
unkown
|
page readonly
|
|
|
|
7FF50253C000
|
unkown
|
page readonly
|
|
|
|
7FF5A69BE000
|
unkown
|
page readonly
|
|
|
|
7FF5D36BA000
|
unkown
|
page readonly
|
|
|
|
7FF564796000
|
unkown
|
page readonly
|
|
|
|
1A800B02000
|
unkown
|
page read and write
|
|
|
|
7FF50248C000
|
unkown
|
page readonly
|
|
|
|
1FBE9A90000
|
unkown
|
page readonly
|
|
|
|
32248FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D3799000
|
unkown
|
page readonly
|
|
|
|
2252F05F000
|
unkown
|
page read and write
|
|
|
|
7FF5B7AA9000
|
unkown
|
page readonly
|
|
|
|
1AF96066000
|
unkown
|
page read and write
|
|
|
|
FA71EFE000
|
unkown
|
page read and write
|
|
|
|
26E3E440000
|
unkown
|
page read and write
|
|
|
|
705B3FE000
|
unkown
|
page read and write
|
|
|
|
1AF982C6000
|
unkown
|
page read and write
|
|
|
|
21FDA708000
|
unkown
|
page read and write
|
|
|
|
27452C8C000
|
unkown
|
page read and write
|
|
|
|
7FF5646EA000
|
unkown
|
page readonly
|
|
|
|
1EBA1856000
|
unkown
|
page read and write
|
|
|
|
7FF5345CC000
|
unkown
|
page readonly
|
|
|
|
76EC07A000
|
unkown
|
page read and write
|
|
|
|
1782D272000
|
unkown
|
page read and write
|
|
|
|
7FF5645B8000
|
unkown
|
page readonly
|
|
|
|
BBD9DF5000
|
unkown
|
page read and write
|
|
|
|
26E40300000
|
unkown
|
page read and write
|
|
|
|
1FBEA100000
|
unkown
|
page read and write
|
|
|
|
1782D1E0000
|
unkown
|
page read and write
|
|
|
|
1A800C00000
|
unkown
|
page readonly
|
|
|
|
1FBE95B0000
|
unkown
|
page read and write
|
|
|
|
1AF98600000
|
unkown
|
page read and write
|
|
|
|
7FF56698C000
|
unkown
|
page readonly
|
|
|
|
7FF5A691A000
|
unkown
|
page readonly
|
|
|
|
CEB077C000
|
unkown
|
page read and write
|
|
|
|
7FF564755000
|
unkown
|
page readonly
|
|
|
|
42E23FE000
|
unkown
|
page read and write
|
|
|
|
7FF4FABC2000
|
unkown
|
page readonly
|
|
|
|
1E688DE0000
|
unkown
|
page read and write
|
|
|
|
2252F000000
|
unkown
|
page read and write
|
|
|
|
1AF960BF000
|
unkown
|
page read and write
|
|
|
|
7FF58B388000
|
unkown
|
page readonly
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
1AF98343000
|
unkown
|
page read and write
|
|
|
|
26E3E502000
|
unkown
|
page read and write
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
27452C00000
|
unkown
|
page read and write
|
|
|
|
1E689084000
|
unkown
|
page readonly
|
|
|
|
7FF58BA17000
|
unkown
|
page readonly
|
|
|
|
1E683913000
|
unkown
|
page read and write
|
|
|
|
15586C42000
|
unkown
|
page read and write
|
|
|
|
7FF58BAAF000
|
unkown
|
page readonly
|
|
|
|
15586C5C000
|
unkown
|
page read and write
|
|
|
|
1A800A64000
|
unkown
|
page read and write
|
|
|
|
1E6838FE000
|
unkown
|
page read and write
|
|
|
|
1AF9615D000
|
unkown
|
page read and write
|
|
|
|
1FBE92E8000
|
heap default
|
page read and write
|
|
|
|
7FF5025B1000
|
unkown
|
page readonly
|
|
|
|
7FF51865A000
|
unkown
|
page readonly
|
|
|
|
7FF59FC21000
|
unkown
|
page readonly
|
|
|
|
1FBE9280000
|
unkown
|
page read and write
|
|
|
|
1782D170000
|
unkown
|
page readonly
|
|
|
|
7FF53479C000
|
unkown
|
page readonly
|
|
|
|
7FF5B7AD6000
|
unkown
|
page readonly
|
|
|
|
7FF533EFF000
|
unkown
|
page readonly
|
|
|
|
7FF5345D8000
|
unkown
|
page readonly
|
|
|
|
7FF5B79C5000
|
unkown
|
page readonly
|
|
|
|
1B703DB0000
|
unkown
|
page readonly
|
|
|
|
1E683902000
|
unkown
|
page read and write
|
|
|
|
3658DFB000
|
unkown
|
page read and write
|
|
|
|
1E683A00000
|
unkown
|
page readonly
|
|
|
|
26E401E0000
|
unkown
|
page read and write
|
|
|
|
1AF97E50000
|
unkown
|
page readonly
|
|
|
|
7FF5A697F000
|
unkown
|
page readonly
|
|
|
|
7FF5D3737000
|
unkown
|
page readonly
|
|
|
|
24BDAA80000
|
heap private
|
page read and write
|
|
|
|
21FDA700000
|
unkown
|
page read and write
|
|
|
|
7FF56A615000
|
unkown
|
page readonly
|
|
|
|
7FF56A5C7000
|
unkown
|
page readonly
|
|
|
|
7FF50252C000
|
unkown
|
page readonly
|
|
|
|
7FF5186E7000
|
unkown
|
page readonly
|
|
|
|
7FF5B7ABD000
|
unkown
|
page readonly
|
|
|
|
365927F000
|
unkown
|
page read and write
|
|
|
|
24BDA9B0000
|
unkown
|
page readonly
|
|
|
|
26E3E500000
|
unkown
|
page read and write
|
|
|
|
7FF5D36A6000
|
unkown
|
page readonly
|
|
|
|
1E689110000
|
unkown
|
page read and write
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
1E6890B8000
|
unkown
|
page write copy
|
|
|
|
7FF51BCE3000
|
unkown
|
page readonly
|
|
|
|
7FF533E97000
|
unkown
|
page readonly
|
|
|
|
1AF9812C000
|
unkown
|
page read and write
|
|
|
|
7FF5ABD91000
|
unkown
|
page readonly
|
|
|
|
1782ECB0000
|
unkown
|
page read and write
|
|
|
|
7FF58BCF6000
|
unkown
|
page readonly
|
|
|
|
7FF515859000
|
unkown
|
page readonly
|
|
|
|
42E1F7E000
|
unkown
|
page read and write
|
|
|
|
7FF58B384000
|
unkown
|
page readonly
|
|
|
|
7FF5668A7000
|
unkown
|
page readonly
|
|
|
|
7FF56A5C3000
|
unkown
|
page readonly
|
|
|
|
1EBA16A0000
|
heap private
|
page read and write
|
|
|
|
1E688CB0000
|
unkown
|
page read and write
|
|
|
|
7FF58BC98000
|
unkown
|
page readonly
|
|
|
|
196FB69E000
|
heap default
|
page read and write
|
|
|
|
1EBA183F000
|
unkown
|
page read and write
|
|
|
|
7FF566543000
|
unkown
|
page readonly
|
|
|
|
1B705870000
|
unkown
|
page read and write
|
|
|
|
26E40333000
|
unkown
|
page read and write
|
|
|
|
7FF5B7967000
|
unkown
|
page readonly
|
|
|
|
1EBA1902000
|
unkown
|
page read and write
|
|
|
|
7FF534712000
|
unkown
|
page readonly
|
|
|
|
1FBE932E000
|
unkown
|
page read and write
|
|
|
|
7FF56457E000
|
unkown
|
page readonly
|
|
|
|
7FF5A826C000
|
unkown
|
page readonly
|
|
|
|
7FF5646FC000
|
unkown
|
page readonly
|
|
|
|
7FF58BA60000
|
unkown
|
page readonly
|
|
|
|
7FF518642000
|
unkown
|
page readonly
|
|
|
|
24BD8E80000
|
heap private
|
page read and write
|
|
|
|
1FBE99C0000
|
unkown
|
page readonly
|
|
|
|
1AF98129000
|
unkown
|
page read and write
|
|
|
|
1EBA3650000
|
unkown
|
page read and write
|
|
|
|
36593FA000
|
unkown
|
page read and write
|
|
|
|
15586C46000
|
unkown
|
page read and write
|
|
|
|
EB332FC000
|
unkown
|
page read and write
|
|
|
|
1AF981FB000
|
unkown
|
page read and write
|
|
|
|
1A800880000
|
heap default
|
page read and write
|
|
|
|
1AF9812C000
|
unkown
|
page read and write
|
|
|
|
1782EC70000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC3C000
|
unkown
|
page readonly
|
|
|
|
1E688DF4000
|
unkown
|
page read and write
|
|
|
|
7FF5B79CC000
|
unkown
|
page readonly
|
|
|
|
7FF51C098000
|
unkown
|
page readonly
|
|
|
|
1B705970000
|
unkown
|
page readonly
|
|
|
|
191EAC2A000
|
unkown
|
page read and write
|
|
|
|
2252F802000
|
unkown
|
page read and write
|
|
|
|
81A5D7F000
|
unkown
|
page read and write
|
|
|
|
7FF534710000
|
unkown
|
page readonly
|
|
|
|
7FF5183CC000
|
unkown
|
page readonly
|
|
|
|
7FF5A6B85000
|
unkown
|
page readonly
|
|
|
|
7FF5D3588000
|
unkown
|
page readonly
|
|
|
|
7FF5A0087000
|
unkown
|
page readonly
|
|
|
|
2765F829000
|
unkown
|
page read and write
|
|
|
|
21FDA8D0000
|
unkown
|
page readonly
|
|
|
|
2252F108000
|
unkown
|
page read and write
|
|
|
|
7FF4FABF5000
|
unkown
|
page readonly
|
|
|
|
26E3E2F0000
|
unkown
|
page write copy
|
|
|
|
1FBE93AD000
|
unkown
|
page read and write
|
|
|
|
1AF97E70000
|
unkown
|
page readonly
|
|
|
|
7FF51C0A2000
|
unkown
|
page readonly
|
|
|
|
5B2EE7E000
|
unkown
|
page read and write
|
|
|
|
2252F05C000
|
unkown
|
page read and write
|
|
|
|
1E684102000
|
unkown
|
page read and write
|
|
|
|
7FF58BD81000
|
unkown
|
page readonly
|
|
|
|
7FF5344E0000
|
unkown
|
page readonly
|
|
|
|
7D6EEFE000
|
unkown
|
page read and write
|
|
|
|
1AF95E80000
|
heap default
|
page read and write
|
|
|
|
1E684159000
|
unkown
|
page read and write
|
|
|
|
27452D13000
|
unkown
|
page read and write
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
7FF5A00E9000
|
unkown
|
page readonly
|
|
|
|
7FF5D3734000
|
unkown
|
page readonly
|
|
|
|
7FF564DA9000
|
unkown
|
page readonly
|
|
|
|
7FF4FA7C0000
|
unkown
|
page readonly
|
|
|
|
7FF58BB97000
|
unkown
|
page readonly
|
|
|
|
7FF566A09000
|
unkown
|
page readonly
|
|
|
|
7FF564D26000
|
unkown
|
page readonly
|
|
|
|
7FF518640000
|
unkown
|
page readonly
|
|
|
|
1782D202000
|
unkown
|
page read and write
|
|
|
|
7FF5D1C56000
|
unkown
|
page readonly
|
|
|
|
2252F002000
|
unkown
|
page read and write
|
|
|
|
7FF53473A000
|
unkown
|
page readonly
|
|
|
|
7FF564630000
|
unkown
|
page readonly
|
|
|
|
1AF9611C000
|
unkown
|
page read and write
|
|
|
|
7FF5186CC000
|
unkown
|
page readonly
|
|
|
|
3659A7B000
|
unkown
|
page read and write
|
|
|
|
7FF5669FE000
|
unkown
|
page readonly
|
|
|
|
7FF58BD24000
|
unkown
|
page readonly
|
|
|
|
2252F054000
|
unkown
|
page read and write
|
|
|
|
21FDA540000
|
heap private
|
page read and write
|
|
|
|
7FF5D2486000
|
unkown
|
page readonly
|
|
|
|
7FF53449C000
|
unkown
|
page readonly
|
|
|
|
1E683750000
|
heap default
|
page read and write
|
|
|
|
7FF56A811000
|
unkown
|
page readonly
|
|
|
|
E5D4D7E000
|
unkown
|
page read and write
|
|
|
|
1FF86660000
|
unkown
|
page read and write
|
|
|
|
7FF5D34EA000
|
unkown
|
page readonly
|
|
|
|
FA71FF7000
|
unkown
|
page read and write
|
|
|
|
79B287E000
|
unkown
|
page read and write
|
|
|
|
1AF96062000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B3F000
|
unkown
|
page readonly
|
|
|
|
27452C67000
|
unkown
|
page read and write
|
|
|
|
1E68388F000
|
unkown
|
page read and write
|
|
|
|
7FF58BA3C000
|
unkown
|
page readonly
|
|
|
|
7FF5A002F000
|
unkown
|
page readonly
|
|
|
|
7FF5A00E1000
|
unkown
|
page readonly
|
|
|
|
1AF98284000
|
unkown
|
page read and write
|
|
|
|
7FF5A0084000
|
unkown
|
page readonly
|
|
|
|
7FF515871000
|
unkown
|
page readonly
|
|
|
|
1AF98157000
|
unkown
|
page read and write
|
|
|
|
67B99FF000
|
unkown
|
page read and write
|
|
|
|
7FF56A895000
|
unkown
|
page readonly
|
|
|
|
7FF5D3730000
|
unkown
|
page readonly
|
|
|
|
7FF59FFE2000
|
unkown
|
page readonly
|
|
|
|
7FF5ABD16000
|
unkown
|
page readonly
|
|
|
|
26E3E600000
|
unkown
|
page readonly
|
|
|
|
23315FB000
|
unkown
|
page read and write
|
|
|
|
1AF98212000
|
unkown
|
page read and write
|
|
|
|
7FF5345D1000
|
unkown
|
page readonly
|
|
|
|
7FF5668C1000
|
unkown
|
page readonly
|
|
|
|
1A800970000
|
unkown
|
page readonly
|
|
|
|
1F1D42A0000
|
heap private
|
page read and write
|
|
|
|
2252FA00000
|
unkown
|
page readonly
|
|
|
|
1A800960000
|
unkown
|
page readonly
|
|
|
|
7FF58B69D000
|
unkown
|
page readonly
|
|
|
|
1782D300000
|
unkown
|
page read and write
|
|
|
|
7FF5668F8000
|
unkown
|
page readonly
|
|
|
|
1E6890E0000
|
unkown
|
page read and write
|
|
|
|
7FF5D24E6000
|
unkown
|
page readonly
|
|
|
|
7FF58B7D3000
|
unkown
|
page readonly
|
|
|
|
26E41010000
|
unkown
|
page read and write
|
|
|
|
7FF5D249A000
|
unkown
|
page readonly
|
|
|
|
24BD8EEB000
|
heap default
|
page read and write
|
|
|
|
1AF98131000
|
unkown
|
page read and write
|
|
|
|
21FDA613000
|
unkown
|
page read and write
|
|
|
|
7FF58B825000
|
unkown
|
page readonly
|
|
|
|
1AF95FF0000
|
unkown
|
page readonly
|
|
|
|
1782D213000
|
unkown
|
page read and write
|
|
|
|
1E688EB5000
|
unkown
|
page read and write
|
|
|
|
26E40420000
|
unkown
|
page readonly
|
|
|
|
7FF5A6A6C000
|
unkown
|
page readonly
|
|
|
|
1782D23F000
|
unkown
|
page read and write
|
|
|
|
7FF59FF75000
|
unkown
|
page readonly
|
|
|
|
7FF59FE88000
|
unkown
|
page readonly
|
|
|
|
1AF97E50000
|
unkown
|
page read and write
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
7FF564C35000
|
unkown
|
page readonly
|
|
|
|
7FF4FABEE000
|
unkown
|
page readonly
|
|
|
|
7FF58BA0A000
|
unkown
|
page readonly
|
|
|
|
1AF981AD000
|
unkown
|
page read and write
|
|
|
|
27452C29000
|
unkown
|
page read and write
|
|
|
|
233147C000
|
unkown
|
page read and write
|
|
|
|
E5D507F000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B5D000
|
unkown
|
page readonly
|
|
|
|
7FF5D1C50000
|
unkown
|
page readonly
|
|
|
|
7FF566918000
|
unkown
|
page readonly
|
|
|
|
23312FF000
|
unkown
|
page read and write
|
|
|
|
7FF5ABD0C000
|
unkown
|
page readonly
|
|
|
|
365977B000
|
unkown
|
page read and write
|
|
|
|
7FF56A951000
|
unkown
|
page readonly
|
|
|
|
7FF534755000
|
unkown
|
page readonly
|
|
|
|
7FF5186C6000
|
unkown
|
page readonly
|
|
|
|
365937A000
|
unkown
|
page read and write
|
|
|
|
7FF5669A4000
|
unkown
|
page readonly
|
|
|
|
1FF8663C000
|
unkown
|
page read and write
|
|
|
|
5B2EC7A000
|
unkown
|
page read and write
|
|
|
|
1AF9812C000
|
unkown
|
page read and write
|
|
|
|
1FBEA090000
|
unkown
|
page readonly
|
|
|
|
1AF979A0000
|
heap private
|
page read and write
|
|
|
|
7FF56459F000
|
unkown
|
page readonly
|
|
|
|
7FF4FA396000
|
unkown
|
page readonly
|
|
|
|
7FF5B73E1000
|
unkown
|
page readonly
|
|
|
|
1AF981FC000
|
unkown
|
page read and write
|
|
|
|
1EBA1710000
|
unkown
|
page readonly
|
|
|
|
15586C61000
|
unkown
|
page read and write
|
|
|
|
705B8FE000
|
unkown
|
page read and write
|
|
|
|
7FF5ABC90000
|
unkown
|
page readonly
|
|
|
|
2252F03C000
|
unkown
|
page read and write
|
|
|
|
7FF56A8F7000
|
unkown
|
page readonly
|
|
|
|
1AF99610000
|
unkown
|
page read and write
|
|
|
|
7FF5A62D0000
|
unkown
|
page readonly
|
|
|
|
7FF58BCFC000
|
unkown
|
page readonly
|
|
|
|
7FF58BA43000
|
unkown
|
page readonly
|
|
|
|
5B2E9AF000
|
unkown
|
page read and write
|
|
|
|
1E684C01000
|
unkown
|
page read and write
|
|
|
|
1B704000000
|
unkown
|
page readonly
|
|
|
|
7FF5ABD37000
|
unkown
|
page readonly
|
|
|
|
7FF5D2470000
|
unkown
|
page readonly
|
|
|
|
7FF53480E000
|
unkown
|
page readonly
|
|
|
|
7FF515800000
|
unkown
|
page readonly
|
|
|
|
196FB860000
|
unkown
|
page read and write
|
|
|
|
21FDA651000
|
unkown
|
page read and write
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
7FF51873E000
|
unkown
|
page readonly
|
|
|
|
7FF5D36D5000
|
unkown
|
page readonly
|
|
|
|
7FF5B7A95000
|
unkown
|
page readonly
|
|
|
|
15586C6B000
|
unkown
|
page read and write
|
|
|
|
1A800B13000
|
unkown
|
page read and write
|
|
|
|
7FF58BADA000
|
unkown
|
page readonly
|
|
|
|
15586C32000
|
unkown
|
page read and write
|
|
|
|
1FF86450000
|
heap private
|
page read and write
|
|
|
|
89F1E7F000
|
unkown
|
page read and write
|
|
|
|
7FF534426000
|
unkown
|
page readonly
|
|
|
|
21FDAE02000
|
unkown
|
page read and write
|
|
|
|
7FF5645DB000
|
unkown
|
page readonly
|
|
|
|
1F1D4600000
|
unkown
|
page readonly
|
|
|
|
7FF5A6700000
|
unkown
|
page readonly
|
|
|
|
7FF5667DA000
|
unkown
|
page readonly
|
|
|
|
7FF59FE14000
|
unkown
|
page readonly
|
|
|
|
15586C13000
|
unkown
|
page read and write
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
27452BC0000
|
unkown
|
page readonly
|
|
|
|
1B703F02000
|
unkown
|
page read and write
|
|
|
|
7FF5D3403000
|
unkown
|
page readonly
|
|
|
|
E5D4B7F000
|
unkown
|
page read and write
|
|
|
|
15586C7A000
|
unkown
|
page read and write
|
|
|
|
7FF566900000
|
unkown
|
page readonly
|
|
|
|
1FBE9360000
|
unkown
|
page read and write
|
|
|
|
1AF98383000
|
unkown
|
page read and write
|
|
|
|
7FF5ABCFD000
|
unkown
|
page readonly
|
|
|
|
7FF566945000
|
unkown
|
page readonly
|
|
|
|
89F1EFA000
|
unkown
|
page read and write
|
|
|
|
7FF5D378E000
|
unkown
|
page readonly
|
|
|
|
1FBEA0A0000
|
unkown
|
page read and write
|
|
|
|
15586C40000
|
unkown
|
page read and write
|
|
|
|
1E689110000
|
unkown
|
page readonly
|
|
|
|
81A5CFB000
|
unkown
|
page read and write
|
|
|
|
7FF5D36CE000
|
unkown
|
page readonly
|
|
|
|
1AF982C9000
|
unkown
|
page read and write
|
|
|
|
7FF534769000
|
unkown
|
page readonly
|
|
|
|
BB035FB000
|
unkown
|
page read and write
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
1AF98400000
|
unkown
|
page read and write
|
|
|
|
1AF9605E000
|
unkown
|
page read and write
|
|
|
|
15586C75000
|
unkown
|
page read and write
|
|
|
|
23319FE000
|
unkown
|
page read and write
|
|
|
|
7FF58BA37000
|
unkown
|
page readonly
|
|
|
|
7FF5D3500000
|
unkown
|
page readonly
|
|
|
|
1E688C20000
|
unkown
|
page read and write
|
|
|
|
7FF564CB8000
|
unkown
|
page readonly
|
|
|
|
1FF86C60000
|
unkown
|
page readonly
|
|
|
|
1782D400000
|
unkown
|
page readonly
|
|
|
|
7FF4FABB0000
|
unkown
|
page readonly
|
|
|
|
1FBE95AA000
|
heap private
|
page read and write
|
|
|
|
191EAB90000
|
unkown
|
page read and write
|
|
|
|
7FF5D24EC000
|
unkown
|
page readonly
|
|
|
|
21FDA629000
|
unkown
|
page read and write
|
|
|
|
7FF5185EA000
|
unkown
|
page readonly
|
|
|
|
23313FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A66EA000
|
unkown
|
page readonly
|
|
|
|
7FF58BA0C000
|
unkown
|
page readonly
|
|
|
|
7FF566986000
|
unkown
|
page readonly
|
|
|
|
7FF566916000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC54000
|
unkown
|
page readonly
|
|
|
|
7FF58BAEE000
|
unkown
|
page readonly
|
|
|
|
1782D248000
|
unkown
|
page read and write
|
|
|
|
7FF56471D000
|
unkown
|
page readonly
|
|
|
|
1AF98402000
|
unkown
|
page read and write
|
|
|
|
1E684113000
|
unkown
|
page read and write
|
|
|
|
21FDA5D0000
|
unkown
|
page read and write
|
|
|
|
1E688EA2000
|
unkown
|
page read and write
|
|
|
|
26E3E380000
|
unkown
|
page read and write
|
|
|
|
7FF51C035000
|
unkown
|
page readonly
|
|
|
|
7FF5B78F3000
|
unkown
|
page readonly
|
|
|
|
7FF58BA76000
|
unkown
|
page readonly
|
|
|
|
7FF5D3460000
|
unkown
|
page readonly
|
|
|
|
7FF502509000
|
unkown
|
page readonly
|
|
|
|
7FF51C1A9000
|
unkown
|
page readonly
|
|
|
|
1E683AD0000
|
unkown
|
page readonly
|
|
|
|
7FF4FAAF7000
|
unkown
|
page readonly
|
|
|
|
7FF51BE70000
|
unkown
|
page readonly
|
|
|
|
7FF58BA58000
|
unkown
|
page readonly
|
|
|
|
7FF58BAD1000
|
unkown
|
page readonly
|
|
|
|
7FF5D364A000
|
unkown
|
page readonly
|
|
|
|
2252EFD0000
|
heap default
|
page read and write
|
|
|
|
7FF50248A000
|
unkown
|
page readonly
|
|
|
|
21FDA600000
|
unkown
|
page read and write
|
|
|
|
1FF86602000
|
unkown
|
page read and write
|
|
|
|
7FF5D23B7000
|
unkown
|
page readonly
|
|
|
|
191EAC13000
|
unkown
|
page read and write
|
|
|
|
1A800A7A000
|
unkown
|
page read and write
|
|
|
|
7FF515909000
|
unkown
|
page readonly
|
|
|
|
26E401E0000
|
unkown
|
page read and write
|
|
|
|
7FF58BA45000
|
unkown
|
page readonly
|
|
|
|
196FB690000
|
heap default
|
page read and write
|
|
|
|
705B5FC000
|
unkown
|
page read and write
|
|
|
|
7FF5183C3000
|
unkown
|
page readonly
|
|
|
|
7FF56463C000
|
unkown
|
page readonly
|
|
|
|
7FF58BD17000
|
unkown
|
page readonly
|
|
|
|
7FF566737000
|
unkown
|
page readonly
|
|
|
|
7FF5ABCDF000
|
unkown
|
page readonly
|
|
|
|
191EAB70000
|
unkown
|
page readonly
|
|
|
|
21FDA64E000
|
unkown
|
page read and write
|
|
|
|
7FF4FA9DA000
|
unkown
|
page readonly
|
|
|
|
7FF5A0066000
|
unkown
|
page readonly
|
|
|
|
7FF5D3706000
|
unkown
|
page readonly
|
|
|
|
1AF99010000
|
unkown
|
page read and write
|
|
|
|
26E3E413000
|
unkown
|
page read and write
|
|
|
|
1AF9613D000
|
unkown
|
page read and write
|
|
|
|
7FF58B9F7000
|
unkown
|
page readonly
|
|
|
|
1A800A28000
|
unkown
|
page read and write
|
|
|
|
24BD8E85000
|
heap private
|
page read and write
|
|
|
|
21FDA702000
|
unkown
|
page read and write
|
|
|
|
7FF5345BE000
|
unkown
|
page readonly
|
|
|
|
7FF58BA47000
|
unkown
|
page readonly
|
|
|
|
1B703E56000
|
unkown
|
page read and write
|
|
|
|
26E3E400000
|
unkown
|
page read and write
|
|
|
|
7FF51C1A9000
|
unkown
|
page readonly
|
|
|
|
1AF98442000
|
unkown
|
page read and write
|
|
|
|
7FF51C0EF000
|
unkown
|
page readonly
|
|
|
|
7FF56A0F2000
|
unkown
|
page readonly
|
|
|
|
EB32DFC000
|
unkown
|
page read and write
|
|
|
|
7FF5025B9000
|
unkown
|
page readonly
|
|
|
|
1E689080000
|
unkown
|
page read and write
|
|
|
|
7FF56694F000
|
unkown
|
page readonly
|
|
|
|
1AF98300000
|
unkown
|
page read and write
|
|
|
|
BB03679000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B90000
|
unkown
|
page readonly
|
|
|
|
7FF58BA50000
|
unkown
|
page readonly
|
|
|
|
7FF58BA1A000
|
unkown
|
page readonly
|
|
|
|
1E688EA4000
|
unkown
|
page read and write
|
|
|
|
26E3FEA0000
|
unkown
|
page readonly
|
|
|
|
191EB402000
|
unkown
|
page read and write
|
|
|
|
7FF58BA01000
|
unkown
|
page readonly
|
|
|
|
7FF58BC78000
|
unkown
|
page readonly
|
|
|
|
79B26FE000
|
unkown
|
page read and write
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
1E688E2F000
|
unkown
|
page read and write
|
|
|
|
27452C13000
|
unkown
|
page read and write
|
|
|
|
1AF98100000
|
unkown
|
page read and write
|
|
|
|
1FF86655000
|
unkown
|
page read and write
|
|
|
|
1AF96200000
|
unkown
|
page readonly
|
|
|
|
7FF5D370C000
|
unkown
|
page readonly
|
|
|
|
7FF5D36E9000
|
unkown
|
page readonly
|
|
|
|
7FF517EF4000
|
unkown
|
page readonly
|
|
|
|
7FF51586D000
|
unkown
|
page readonly
|
|
|
|
1782D257000
|
unkown
|
page read and write
|
|
|
|
76EBF7F000
|
unkown
|
page read and write
|
|
|
|
1AF95E90000
|
unkown
|
page readonly
|
|
|
|
1A800A69000
|
unkown
|
page read and write
|
|
|
|
1FBE93C9000
|
unkown
|
page read and write
|
|
|
|
1AF97E80000
|
unkown
|
page readonly
|
|
|
|
7FF5D2514000
|
unkown
|
page readonly
|
|
|
|
1E683800000
|
unkown
|
page read and write
|
|
|
|
7FF502557000
|
unkown
|
page readonly
|
|
|
|
1AF95E20000
|
heap private
|
page read and write
|
|
|
|
1FF86702000
|
unkown
|
page read and write
|
|
|
|
FA719BE000
|
unkown
|
page read and write
|
|
|
|
7FF4FA7AA000
|
unkown
|
page readonly
|
|
|
|
36591F9000
|
unkown
|
page read and write
|
|
|
|
1E684100000
|
unkown
|
page read and write
|
|
|
|
BBD9C7E000
|
unkown
|
page read and write
|
|
|
|
7FF51C0E5000
|
unkown
|
page readonly
|
|
|
|
7FF5B7A6A000
|
unkown
|
page readonly
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
7FF51C0B8000
|
unkown
|
page readonly
|
|
|
|
26E40364000
|
unkown
|
page read and write
|
|
|
|
7FF58BC37000
|
unkown
|
page readonly
|
|
|
|
7FF56A86A000
|
unkown
|
page readonly
|
|
|
|
2252F029000
|
unkown
|
page read and write
|
|
|
|
1AF981D7000
|
unkown
|
page read and write
|
|
|
|
1AF9818A000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC2C000
|
unkown
|
page readonly
|
|
|
|
26E40323000
|
unkown
|
page read and write
|
|
|
|
1AF96000000
|
unkown
|
page read and write
|
|
|
|
7FF534351000
|
unkown
|
page readonly
|
|
|
|
1AF981C6000
|
unkown
|
page read and write
|
|
|
|
FA7193B000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B06000
|
unkown
|
page readonly
|
|
|
|
2252F08A000
|
unkown
|
page read and write
|
|
|
|
7FF564D1C000
|
unkown
|
page readonly
|
|
|
|
1FF86590000
|
unkown
|
page readonly
|
|
|
|
1AF9812C000
|
unkown
|
page read and write
|
|
|
|
1AF9812C000
|
unkown
|
page read and write
|
|
|
|
7FF5ABCCE000
|
unkown
|
page readonly
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
7FF56A767000
|
unkown
|
page readonly
|
|
|
|
7FF4FABFF000
|
unkown
|
page readonly
|
|
|
|
81A617F000
|
unkown
|
page read and write
|
|
|
|
7FF59FDB0000
|
unkown
|
page readonly
|
|
|
|
76EBAEB000
|
unkown
|
page read and write
|
|
|
|
1FBE93AD000
|
unkown
|
page read and write
|
|
|
|
196FB8A0000
|
unkown
|
page read and write
|
|
|
|
1B703E29000
|
unkown
|
page read and write
|
|
|
|
7FF566902000
|
unkown
|
page readonly
|
|
|
|
26E3E4A3000
|
unkown
|
page read and write
|
|
|
|
7FF566A00000
|
unkown
|
page readonly
|
|
|
|
7FF4FACB9000
|
unkown
|
page readonly
|
|
|
|
CEB097E000
|
unkown
|
page read and write
|
|
|
|
7FF5A66F0000
|
unkown
|
page readonly
|
|
|
|
26E3E4C3000
|
unkown
|
page read and write
|
|
|
|
196FB890000
|
heap private
|
page read and write
|
|
|
|
7FF56478C000
|
unkown
|
page readonly
|
|
|
|
1FF86700000
|
unkown
|
page read and write
|
|
|
|
7FF59FC25000
|
unkown
|
page readonly
|
|
|
|
7FF5ABD30000
|
unkown
|
page readonly
|
|
|
|
7FF51C116000
|
unkown
|
page readonly
|
|
|
|
7FF5186ED000
|
unkown
|
page readonly
|
|
|
|
7FF58BD7E000
|
unkown
|
page readonly
|
|
|
|
1E68900E000
|
unkown
|
page read and write
|
|
|
|
7FF566545000
|
unkown
|
page readonly
|
|
|
|
7FF5186BC000
|
unkown
|
page readonly
|
|
|
|
1FBE91B0000
|
unkown
|
page readonly
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
1E689160000
|
unkown
|
page readonly
|
|
|
|
CEB037B000
|
unkown
|
page read and write
|
|
|
|
155869B0000
|
heap private
|
page read and write
|
|
|
|
15586C5F000
|
unkown
|
page read and write
|
|
|
|
7FF5A6BF1000
|
unkown
|
page readonly
|
|
|
|
1E683790000
|
unkown
|
page read and write
|
|
|
|
7FF56A82A000
|
unkown
|
page readonly
|
|
|
|
1E683770000
|
unkown
|
page readonly
|
|
|
|
1AF98253000
|
unkown
|
page read and write
|
|
|
|
E5D4E7E000
|
unkown
|
page read and write
|
|
|
|
7FF56A8E7000
|
unkown
|
page readonly
|
|
|
|
1AF99410000
|
unkown
|
page read and write
|
|
|
|
26E40202000
|
unkown
|
page read and write
|
|
|
|
191EB532000
|
unkown
|
page read and write
|
|
|
|
7FF58BA62000
|
unkown
|
page readonly
|
|
|
|
2252F061000
|
unkown
|
page read and write
|
|
|
|
2765F800000
|
unkown
|
page read and write
|
|
|
|
42E20FE000
|
unkown
|
page read and write
|
|
|
|
1FF864C0000
|
unkown
|
page readonly
|
|
|
|
7FF564D0E000
|
unkown
|
page readonly
|
|
|
|
36598FE000
|
unkown
|
page read and write
|
|
|
|
1AF9818C000
|
unkown
|
page read and write
|
|
|
|
67B96FB000
|
unkown
|
page read and write
|
|
|
|
7FF56693E000
|
unkown
|
page readonly
|
|
|
|
7FF5A001E000
|
unkown
|
page readonly
|
|
|
|
1FBE92A0000
|
unkown
|
page read and write
|
|
|
|
7FF5ABD8E000
|
unkown
|
page readonly
|
|
|
|
2765F902000
|
unkown
|
page read and write
|
|
|
|
E5D47FA000
|
unkown
|
page read and write
|
|
|
|
7FF51C08C000
|
unkown
|
page readonly
|
|
|
|
1AF96076000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B35000
|
unkown
|
page readonly
|
|
|
|
1E6891F0000
|
unkown
|
page readonly
|
|
|
|
1AF97E10000
|
unkown
|
page read and write
|
|
|
|
191EAC87000
|
unkown
|
page read and write
|
|
|
|
1AF960E8000
|
unkown
|
page read and write
|
|
|
|
7FF5D24C9000
|
unkown
|
page readonly
|
|
|
|
7FF5023A8000
|
unkown
|
page readonly
|
|
|
|
1E68388B000
|
unkown
|
page read and write
|
|
|
|
7FF5B7ACC000
|
unkown
|
page readonly
|
|
|
|
1782F000000
|
unkown
|
page readonly
|
|
|
|
7FF518699000
|
unkown
|
page readonly
|
|
|
|
1FBE934B000
|
unkown
|
page read and write
|
|
|
|
1EBA1813000
|
unkown
|
page read and write
|
|
|
|
1AF960A7000
|
unkown
|
page read and write
|
|
|
|
7FF5A6BEE000
|
unkown
|
page readonly
|
|
|
|
1FF86629000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAA8000
|
unkown
|
page readonly
|
|
|
|
7FF566959000
|
unkown
|
page readonly
|
|
|
|
EB3317D000
|
unkown
|
page read and write
|
|
|
|
1E688E4C000
|
unkown
|
page read and write
|
|
|
|
1AF99000000
|
unkown
|
page read and write
|
|
|
|
1782ED30000
|
unkown
|
page readonly
|
|
|
|
1AF99110000
|
unkown
|
page read and write
|
|
|
|
7FF58BAAB000
|
unkown
|
page readonly
|
|
|
|
7FF58B817000
|
unkown
|
page readonly
|
|
|
|
1B703E59000
|
unkown
|
page read and write
|
|
|
|
23317FE000
|
unkown
|
page read and write
|
|
|
|
1F1D4AA0000
|
unkown
|
page read and write
|
|
|
|
7FF51C147000
|
unkown
|
page readonly
|
|
|
|
1E68382A000
|
unkown
|
page read and write
|
|
|
|
21FDB340000
|
unkown
|
page readonly
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
7FF564CBA000
|
unkown
|
page readonly
|
|
|
|
2330D2B000
|
unkown
|
page read and write
|
|
|
|
81A60FA000
|
unkown
|
page read and write
|
|
|
|
7FF58B893000
|
unkown
|
page readonly
|
|
|
|
7FF56A88E000
|
unkown
|
page readonly
|
|
|
|
191EACBB000
|
unkown
|
page read and write
|
|
|
|
1AF960D4000
|
unkown
|
page read and write
|
|
|
|
7FF51C0B2000
|
unkown
|
page readonly
|
|
|
|
7FF58B977000
|
unkown
|
page readonly
|
|
|
|
7FF5D206A000
|
unkown
|
page readonly
|
|
|
|
7FF5A6A37000
|
unkown
|
page readonly
|
|
|
|
7FF58BB0F000
|
unkown
|
page readonly
|
|
|
|
191EAB00000
|
heap private
|
page read and write
|
|
|
|
1EBA1800000
|
unkown
|
page read and write
|
|
|
|
7FF50251D000
|
unkown
|
page readonly
|
|
|
|
7FF51866A000
|
unkown
|
page readonly
|
|
|
|
15586AF0000
|
unkown
|
page readonly
|
|
|
|
1E68383D000
|
unkown
|
page read and write
|
|
|
|
15586C3B000
|
unkown
|
page read and write
|
|
|
|
7FF5186B6000
|
unkown
|
page readonly
|
|
|
|
21FDA671000
|
unkown
|
page read and write
|
|
|
|
7FF5D2579000
|
unkown
|
page readonly
|
|
|
|
7FF51584F000
|
unkown
|
page readonly
|
|
|
|
7FF5024F5000
|
unkown
|
page readonly
|
|
|
|
1782D160000
|
heap default
|
page read and write
|
|
|
|
7FF5A0025000
|
unkown
|
page readonly
|
|
|
|
15586C67000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B76000
|
unkown
|
page readonly
|
|
|
|
7FF58B830000
|
unkown
|
page readonly
|
|
|
|
7FF53459F000
|
unkown
|
page readonly
|
|
|
|
7FF5D229A000
|
unkown
|
page readonly
|
|
|
|
1F1D4502000
|
unkown
|
page read and write
|
|
|
|
1AF960BF000
|
unkown
|
page read and write
|
|
|
|
191EB500000
|
unkown
|
page read and write
|
|
|
|
7FF56A868000
|
unkown
|
page readonly
|
|
|
|
1E688DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5B7AC6000
|
unkown
|
page readonly
|
|
|
|
7FF58BB00000
|
unkown
|
page readonly
|
|
|
|
1E688E10000
|
unkown
|
page read and write
|
|
|
|
21FDA5A0000
|
heap default
|
page read and write
|
|
|
|
23318FD000
|
unkown
|
page read and write
|
|
|
|
191EB330000
|
unkown
|
page write copy
|
|
|
|
7FF58BC63000
|
unkown
|
page readonly
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
CEB04FE000
|
unkown
|
page read and write
|
|
|
|
7FF534355000
|
unkown
|
page readonly
|
|
|
|
7FF5024C6000
|
unkown
|
page readonly
|
|
|
|
1AF981FC000
|
unkown
|
page read and write
|
|
|
|
15586C41000
|
unkown
|
page read and write
|
|
|
|
7FF5668EC000
|
unkown
|
page readonly
|
|
|
|
7FF5D366A000
|
unkown
|
page readonly
|
|
|
|
7FF564726000
|
unkown
|
page readonly
|
|
|
|
7FF515812000
|
unkown
|
page readonly
|
|
|
|
7FF5A004D000
|
unkown
|
page readonly
|
|
|
|
5B2EDFF000
|
unkown
|
page read and write
|
|
|
|
24BDABFF000
|
heap private
|
page read and write
|
|
|
|
7FF5643F2000
|
unkown
|
page readonly
|
|
|
|
27452E00000
|
unkown
|
page readonly
|
|
|
|
1EBA32F0000
|
unkown
|
page readonly
|
|
|
|
1AF9814B000
|
unkown
|
page read and write
|
|
|
|
1F1D4459000
|
unkown
|
page read and write
|
|
|
|
7FF56A5B4000
|
unkown
|
page readonly
|
|
|
|
89F20FC000
|
unkown
|
page read and write
|
|
|
|
7FF58BAF7000
|
unkown
|
page readonly
|
|
|
|
24BDA8A0000
|
unkown
|
page readonly
|
|
|
|
1AF960BF000
|
unkown
|
page read and write
|
|
|
|
7FF56474E000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC09000
|
unkown
|
page readonly
|
|
|
|
7FF515818000
|
unkown
|
page readonly
|
|
|
|
24BDAA40000
|
heap private
|
page read and write
|
|
|
|
5B2E92B000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B1A000
|
unkown
|
page readonly
|
|
|
|
2252F013000
|
unkown
|
page read and write
|
|
|
|
7FF5347B7000
|
unkown
|
page readonly
|
|
|
|
7FF58BCBE000
|
unkown
|
page readonly
|
|
|
|
1FF864B0000
|
heap default
|
page read and write
|
|
|
|
7FF5668BA000
|
unkown
|
page readonly
|
|
|
|
7FF4FACB9000
|
unkown
|
page readonly
|
|
|
|
7FF5A6B97000
|
unkown
|
page readonly
|
|
|
|
7FF58BADC000
|
unkown
|
page readonly
|
|
|
|
7FF53442F000
|
unkown
|
page readonly
|
|
|
|
1A800F90000
|
unkown
|
page readonly
|
|
|
|
7FF58BD06000
|
unkown
|
page readonly
|
|
|
|
7FF51C135000
|
unkown
|
page readonly
|
|
|
|
7FF59F758000
|
unkown
|
page readonly
|
|
|
|
7FF58BCAA000
|
unkown
|
page readonly
|
|
|
|
1E683813000
|
unkown
|
page read and write
|
|
|
|
7FF5D33F4000
|
unkown
|
page readonly
|
|
|
|
1FBE9DF9000
|
unkown
|
page read and write
|
|
|
|
1F1D43F0000
|
unkown
|
page readonly
|
|
|
|
7FF514F5D000
|
unkown
|
page readonly
|
|
|
|
7FF59F750000
|
unkown
|
page readonly
|
|
|
|
1AF981E7000
|
unkown
|
page read and write
|
|
|
|
7FF5A62D6000
|
unkown
|
page readonly
|
|
|
|
1AF9812C000
|
unkown
|
page read and write
|
|
|
|
7FF5024CA000
|
unkown
|
page readonly
|
|
|
|
3659AFC000
|
unkown
|
page read and write
|
|
|
|
7FF5D24BF000
|
unkown
|
page readonly
|
|
|
|
1782D190000
|
unkown
|
page read and write
|
|
|
|
1AF981EF000
|
unkown
|
page read and write
|
|
|
|
7FF5347B0000
|
unkown
|
page readonly
|
|
|
|
1FF86613000
|
unkown
|
page read and write
|
|
|
|
7FF56A8DC000
|
unkown
|
page readonly
|
|
|
|
7FF564CF9000
|
unkown
|
page readonly
|
|
|
|
7FF534819000
|
unkown
|
page readonly
|
|
|
|
7FF58B9F3000
|
unkown
|
page readonly
|
|
|
|
CEB017F000
|
unkown
|
page read and write
|
|
|
|
BB0347B000
|
unkown
|
page read and write
|
|
|
|
27452AF0000
|
unkown
|
page readonly
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
EB3327E000
|
unkown
|
page read and write
|
|
|
|
E5D517E000
|
unkown
|
page read and write
|
|
|
|
79B2AFE000
|
unkown
|
page read and write
|
|
|
|
196FB698000
|
heap default
|
page read and write
|
|
|
|
24BDA8B0000
|
unkown
|
page readonly
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
7D6EE7B000
|
unkown
|
page read and write
|
|
|
|
7FF5D2482000
|
unkown
|
page readonly
|
|
|
|
7FF5343AE000
|
unkown
|
page readonly
|
|
|
|
24BD8FE0000
|
unkown
|
page readonly
|
|
|
|
7FF5024EE000
|
unkown
|
page readonly
|
|
|
|
7FF5186D5000
|
unkown
|
page readonly
|
|
|
|
7FF5B7306000
|
unkown
|
page readonly
|
|
|
|
7FF4FABC8000
|
unkown
|
page readonly
|
|
|
|
7FF5B71FF000
|
unkown
|
page readonly
|
|
|
|
1E688E63000
|
unkown
|
page read and write
|
|
|
|
191EB940000
|
unkown
|
page readonly
|
|
|
|
1A800820000
|
heap private
|
page read and write
|
|
|
|
7FF58BD89000
|
unkown
|
page readonly
|
|
|
|
1F1D4990000
|
unkown
|
page readonly
|
|
|
|
7FF58BC6C000
|
unkown
|
page readonly
|
|
|
|
24BDA9C0000
|
unkown
|
page readonly
|
|
|
|
1F1D4413000
|
unkown
|
page read and write
|
|
|
|
1AF96060000
|
unkown
|
page read and write
|
|
|
|
2252F2D0000
|
unkown
|
page readonly
|
|
|
|
7FF502547000
|
unkown
|
page readonly
|
|
|
|
7FF51867E000
|
unkown
|
page readonly
|
|
|
|
322419F000
|
unkown
|
page read and write
|
|
|
|
7FF5D36A8000
|
unkown
|
page readonly
|
|
|
|
7FF58B81E000
|
unkown
|
page readonly
|
|
|
|
1A800A02000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC50000
|
unkown
|
page readonly
|
|
|
|
7FF5ABD1C000
|
unkown
|
page readonly
|
|
|
|
7FF58BC80000
|
unkown
|
page readonly
|
|
|
|
7FF515876000
|
unkown
|
page readonly
|
|
|
|
1AF960F5000
|
unkown
|
page read and write
|
|
|
|
15586C6D000
|
unkown
|
page read and write
|
|
|
|
1AF99410000
|
unkown
|
page read and write
|
|
|
|
CEB03FF000
|
unkown
|
page read and write
|
|
|
|
191EAD13000
|
unkown
|
page read and write
|
|
|
|
1AF96065000
|
unkown
|
page read and write
|
|
|
|
21FDA66E000
|
unkown
|
page read and write
|
|
|
|
7FF51C1A1000
|
unkown
|
page readonly
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
1AF9812C000
|
unkown
|
page read and write
|
|
|
|
24BDAD10000
|
heap private
|
page read and write
|
|
|
|
21FDA5B0000
|
unkown
|
page readonly
|
|
|
|
7FF58BCCF000
|
unkown
|
page readonly
|
|
|
|
26E3E482000
|
unkown
|
page read and write
|
|
|
|
7FF5D24AE000
|
unkown
|
page readonly
|
|
|
|
2765F730000
|
unkown
|
page readonly
|
|
|
|
7FF51C144000
|
unkown
|
page readonly
|
|
|
|
1E683FE0000
|
unkown
|
page readonly
|
|
|
|
7FF58B958000
|
unkown
|
page readonly
|
|
|
|
7FF5024C2000
|
unkown
|
page readonly
|
|
|
|
705AD2C000
|
unkown
|
page read and write
|
|
|
|
7FF58B8A8000
|
unkown
|
page readonly
|
|
|
|
79B2A7E000
|
unkown
|
page read and write
|
|
|
|
365917A000
|
unkown
|
page read and write
|
|
|
|
7FF5D2505000
|
unkown
|
page readonly
|
|
|
|
7FF502467000
|
unkown
|
page readonly
|
|
|
|
26E3E340000
|
unkown
|
page readonly
|
|
|
|
15586C44000
|
unkown
|
page read and write
|
|
|
|
1AF96029000
|
unkown
|
page read and write
|
|
|
|
7FF5344D5000
|
unkown
|
page readonly
|
|
|
|
7FF58B7EC000
|
unkown
|
page readonly
|
|
|
|
7FF515525000
|
unkown
|
page readonly
|
|
|
|
7FF58B8CE000
|
unkown
|
page readonly
|
|
|
|
15587202000
|
unkown
|
page read and write
|
|
|
|
1AF99210000
|
unkown
|
page read and write
|
|
|
|
7FF564627000
|
unkown
|
page readonly
|
|
|
|
7FF5669A7000
|
unkown
|
page readonly
|
|
|
|
7FF56A8D6000
|
unkown
|
page readonly
|
|
|
|
1AF98119000
|
unkown
|
page read and write
|
|
|
|
2252F730000
|
unkown
|
page read and write
|
|
|
|
27452C40000
|
unkown
|
page read and write
|
|
|
|
7FF5343E8000
|
unkown
|
page readonly
|
|
|
|
7FF4FACB1000
|
unkown
|
page readonly
|
|
|
|
7FF51BF48000
|
unkown
|
page readonly
|
|
|
|
7FF59FFF8000
|
unkown
|
page readonly
|
|
|
|
7FF5ABD34000
|
unkown
|
page readonly
|
|
|
|
32249FF000
|
unkown
|
page read and write
|
|
|
|
7FF534796000
|
unkown
|
page readonly
|
|
|
|
1782D1E0000
|
unkown
|
page read and write
|
|
|
|
1AF99610000
|
unkown
|
page read and write
|
|
|
|
26E3E1B0000
|
heap private
|
page read and write
|
|
|
|
7FF517EF6000
|
unkown
|
page readonly
|
|
|
|
1AF98110000
|
unkown
|
page read and write
|
|
|
|
191EAC24000
|
unkown
|
page read and write
|
|
|
|
1AF960FC000
|
unkown
|
page read and write
|
|
|
|
7FF564544000
|
unkown
|
page readonly
|
|
|
|
2765F81F000
|
unkown
|
page read and write
|
|
|
|
79B2CFD000
|
unkown
|
page read and write
|
|
|
|
7FF5B71F7000
|
unkown
|
page readonly
|
|
|
|
7FF564819000
|
unkown
|
page readonly
|
|
|
|
7FF5343A7000
|
unkown
|
page readonly
|
|
|
|
7FF58BACD000
|
unkown
|
page readonly
|
|
|
|
21FDA64C000
|
unkown
|
page read and write
|
|
|
|
7FF51BF0E000
|
unkown
|
page readonly
|
|
|
|
7FF5180E2000
|
unkown
|
page readonly
|
|
|
|
7FF4FACAE000
|
unkown
|
page readonly
|
|
|
|
7FF5154C0000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA3F000
|
unkown
|
page readonly
|
|
|
|
7FF5665D8000
|
unkown
|
page readonly
|
|
|
|
15586C00000
|
unkown
|
page read and write
|
|
|
|
1E6837F0000
|
unkown
|
page read and write
|
|
|
|
EB331FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D371C000
|
unkown
|
page readonly
|
|
|
|
7FF5ABABA000
|
unkown
|
page readonly
|
|
|
|
15586C5A000
|
unkown
|
page read and write
|
|
|
|
23316FE000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC36000
|
unkown
|
page readonly
|
|
|
|
7FF564819000
|
unkown
|
page readonly
|
|
|
|
15586C74000
|
unkown
|
page read and write
|
|
|
|
15586C4E000
|
unkown
|
page read and write
|
|
|
|
7FF534353000
|
unkown
|
page readonly
|
|
|
|
7FF51BF79000
|
unkown
|
page readonly
|
|
|
|
21FDA63C000
|
unkown
|
page read and write
|
|
|
|
7FF53441D000
|
unkown
|
page readonly
|
|
|
|
7FF5ABD99000
|
unkown
|
page readonly
|
|
|
|
1AF9816A000
|
unkown
|
page read and write
|
|
|
|
1FBE92C0000
|
unkown
|
page readonly
|
|
|
|
7FF58B522000
|
unkown
|
page readonly
|
|
|
|
7FF59FE50000
|
unkown
|
page readonly
|
|
|
|
7FF56A862000
|
unkown
|
page readonly
|
|
|
|
322409B000
|
unkown
|
page read and write
|
|
|
|
7FF564DA9000
|
unkown
|
page readonly
|
|
|
|
26E401F0000
|
unkown
|
page readonly
|
|
|
|
7FF518656000
|
unkown
|
page readonly
|
|
|
|
1AF97E50000
|
unkown
|
page read and write
|
|
|
|
26E40302000
|
unkown
|
page read and write
|
|
|
|
191EAB80000
|
unkown
|
page readonly
|
|
|
|
7FF5A6B08000
|
unkown
|
page readonly
|
|
|
|
21FDA800000
|
unkown
|
page readonly
|
|
|
|
7FF5024FF000
|
unkown
|
page readonly
|
|
|
|
7FF51C0CA000
|
unkown
|
page readonly
|
|
|
|
7FF59F746000
|
unkown
|
page readonly
|
|
|
|
7FF5A6AF0000
|
unkown
|
page readonly
|
|
|
|
1782D180000
|
unkown
|
page readonly
|
|
|
|
1AF96085000
|
unkown
|
page read and write
|
|
|
|
7FF5024DA000
|
unkown
|
page readonly
|
|
|
|
7FF5186B1000
|
unkown
|
page readonly
|
|
|
|
7FF58BAF5000
|
unkown
|
page readonly
|
|
|
|
26E4030A000
|
unkown
|
page read and write
|
|
|
|
1E683780000
|
unkown
|
page read and write
|
|
|
|
1AF960BF000
|
unkown
|
page read and write
|
|
|
|
1AF99210000
|
unkown
|
page read and write
|
|
|
|
1FF86600000
|
unkown
|
page read and write
|
|
|
|
1AF96089000
|
unkown
|
page read and write
|
|
|
|
7FF58B7D7000
|
unkown
|
page readonly
|
|
|
|
26E3E455000
|
unkown
|
page read and write
|
|
|
|
7FF51BE65000
|
unkown
|
page readonly
|
|
|
|
191EAD02000
|
unkown
|
page read and write
|
|
|
|
1AF96072000
|
unkown
|
page read and write
|
|
|
|
79B2BFD000
|
unkown
|
page read and write
|
|
|
|
7FF4FAAF1000
|
unkown
|
page readonly
|
|
|
|
7FF56A82C000
|
unkown
|
page readonly
|
|
|
|
7FF56477D000
|
unkown
|
page readonly
|
|
|
|
7FF58B8EF000
|
unkown
|
page readonly
|
|
|
|
1782D302000
|
unkown
|
page read and write
|
|
|
|
CEAFDF7000
|
unkown
|
page read and write
|
|
|
|
7FF564769000
|
unkown
|
page readonly
|
|
|
|
1FF86713000
|
unkown
|
page read and write
|
|
|
|
1AF981EB000
|
unkown
|
page read and write
|
|
|
|
1AF98602000
|
unkown
|
page read and write
|
|
|
|
5B2ECFF000
|
unkown
|
page read and write
|
|
|
|
1E689008000
|
unkown
|
page read and write
|
|
|
|
7FF502550000
|
unkown
|
page readonly
|
|
|
|
1AF99210000
|
unkown
|
page read and write
|
|
|
|
1AF98113000
|
unkown
|
page read and write
|
|
|
|
7FF5158FE000
|
unkown
|
page readonly
|
|
|
|
7FF51B818000
|
unkown
|
page readonly
|
|
|
|
E5D4A7F000
|
unkown
|
page read and write
|
|
|
|
1FBE938B000
|
unkown
|
page read and write
|
|
|
|
1AF96113000
|
unkown
|
page read and write
|
|
|
|
2252EFF0000
|
unkown
|
page readonly
|
|
|
|
15586D02000
|
unkown
|
page read and write
|
|
|
|
7FF58BBFC000
|
unkown
|
page readonly
|
|
|
|
7FF51C07A000
|
unkown
|
page readonly
|
|
|
|
7FF534786000
|
unkown
|
page readonly
|
|
|
|
7FF534390000
|
unkown
|
page readonly
|
|
|
|
7FF58B89C000
|
unkown
|
page readonly
|
|
|
|
7FF5D3651000
|
unkown
|
page readonly
|
|
|
|
7FF56A8C6000
|
unkown
|
page readonly
|
|
|
|
7FF5D36AA000
|
unkown
|
page readonly
|
|
|
|
7FF58BB07000
|
unkown
|
page readonly
|
|
|
|
7FF5B7B59000
|
unkown
|
page readonly
|
|
|
|
7FF5B7B4E000
|
unkown
|
page readonly
|
|
|
|
1FBE938D000
|
unkown
|
page read and write
|
|
|
|
27452A10000
|
unkown
|
page readonly
|
|
|
|
7FF51C0B6000
|
unkown
|
page readonly
|
|
|
|
7FF58BB5E000
|
unkown
|
page readonly
|
|
|
|
1B703E13000
|
unkown
|
page read and write
|
|
|
|
1E688C90000
|
unkown
|
page read and write
|
|
|
|
1E689024000
|
unkown
|
page read and write
|
|
|
|
7FF515909000
|
unkown
|
page readonly
|
|
|
|
1FF86666000
|
unkown
|
page read and write
|
|
|
|
7FF58BAD6000
|
unkown
|
page readonly
|
|
|
|
1F1D4402000
|
unkown
|
page read and write
|
|
|
|
15586C45000
|
unkown
|
page read and write
|
|
|
|
1E684015000
|
unkown
|
page read and write
|
|
|
|
7FF5D35A3000
|
unkown
|
page readonly
|
|
|
|
1AF960EA000
|
unkown
|
page read and write
|
|
|
|
BBD9CFE000
|
unkown
|
page read and write
|
|
|
|
1AF981B6000
|
unkown
|
page read and write
|
|
|
|
7FF58BC3A000
|
unkown
|
page readonly
|
|
|
|
1F1D4300000
|
heap default
|
page read and write
|
|
|
|
7FF502536000
|
unkown
|
page readonly
|
|
|
|
2765F840000
|
unkown
|
page read and write
|
|
|
|
1F1D4440000
|
unkown
|
page read and write
|
|
|
|
1FBE95A0000
|
heap private
|
page read and write
|
|
|
|
1AF9619E000
|
unkown
|
page read and write
|
|
|
|
7FF534055000
|
unkown
|
page readonly
|
|
|
|
7FF5ABD25000
|
unkown
|
page readonly
|
|
|
|
15586E00000
|
unkown
|
page readonly
|
|
|
|
7FF5A69E8000
|
unkown
|
page readonly
|
|
|
|
705B7FE000
|
unkown
|
page read and write
|
|
|
|
7FF58B673000
|
unkown
|
page readonly
|
|
|
|
26E3E487000
|
unkown
|
page read and write
|
|
|
|
7FF56A959000
|
unkown
|
page readonly
|
|
|
|
FA720FD000
|
unkown
|
page read and write
|
|
|
|
7FF502227000
|
unkown
|
page readonly
|
|
|
|
1AF981FC000
|
unkown
|
page read and write
|
|
|
|
191EAED0000
|
unkown
|
page readonly
|
|
|
|
7FF5A0056000
|
unkown
|
page readonly
|
|
|
|
191EB260000
|
unkown
|
page readonly
|
|
|
|
7FF515886000
|
unkown
|
page readonly
|
|
|
|
7FF4FAA8A000
|
unkown
|
page readonly
|
|
|
|
191EAC00000
|
unkown
|
page read and write
|
|
|
|
7FF5185EE000
|
unkown
|
page readonly
|
|
|
|
7FF5668B7000
|
unkown
|
page readonly
|
|
|
|
7FF5D24DD000
|
unkown
|
page readonly
|
|
|
|
7FF5186F2000
|
unkown
|
page readonly
|
|
|
|
7FF58BD89000
|
unkown
|
page readonly
|
|
|
|
1AF982CA000
|
unkown
|
page read and write
|
|
|
|
7FF5D2510000
|
unkown
|
page readonly
|
|
|
|
7FF58B88B000
|
unkown
|
page readonly
|
|
|
|
7FF4FABB2000
|
unkown
|
page readonly
|
|
|
|
7FF5346E7000
|
unkown
|
page readonly
|
|
|
|
76EBB6E000
|
unkown
|
page read and write
|
|
|
|
7FF53454C000
|
unkown
|
page readonly
|
|
|
|
1FF86708000
|
unkown
|
page read and write
|
|
|
|
7FF518749000
|
unkown
|
page readonly
|
|
|
|
7FF5B7AE5000
|
unkown
|
page readonly
|
|
|
|
7FF59FEAA000
|
unkown
|
page readonly
|
|
|
|
7FF5B7A68000
|
unkown
|
page readonly
|
|
|
|
15586C25000
|
unkown
|
page read and write
|
|
|
|
7FF58BAE6000
|
unkown
|
page readonly
|
|
|
|
7FF534781000
|
unkown
|
page readonly
|
|
|
|
1AF960C1000
|
unkown
|
page read and write
|
|
|
|
7FF534819000
|
unkown
|
page readonly
|
|
|
|
7FF56A8F0000
|
unkown
|
page readonly
|
|
|
|
1AF9612C000
|
unkown
|
page read and write
|
|
|
|
CEB057F000
|
unkown
|
page read and write
|
|
|
|
7FF58BA72000
|
unkown
|
page readonly
|
|
|
|
7FF5A6B2E000
|
unkown
|
page readonly
|
|
|
|
1E683871000
|
unkown
|
page read and write
|
|
|
|
1AF960C0000
|
unkown
|
page read and write
|
|
|
|
BB0377D000
|
unkown
|
page read and write
|
|
|
|
7FF5346F7000
|
unkown
|
page readonly
|
|
|
|
7FF5D2F32000
|
unkown
|
page readonly
|
|
|
|
191EAB60000
|
heap default
|
page read and write
|
|
|
|
705B6FC000
|
unkown
|
page read and write
|
|
|
|
7FF5D2579000
|
unkown
|
page readonly
|
|
|
|
7FF59FFD8000
|
unkown
|
page readonly
|
|
|
|
7FF534728000
|
unkown
|
page readonly
|
|
|
|
7FF5346D1000
|
unkown
|
page readonly
|
|
|
|
7FF5A6B94000
|
unkown
|
page readonly
|
|
|
|
7FF51588C000
|
unkown
|
page readonly
|
|
|
|
1F1D4A90000
|
unkown
|
page read and write
|
|
|
|
7FF58B9D5000
|
unkown
|
page readonly
|
|
|
|
26E3E4C0000
|
unkown
|
page read and write
|
|
|
|
1AF98383000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC1D000
|
unkown
|
page readonly
|
|
|
|
7FF5157CB000
|
unkown
|
page readonly
|
|
|
|
7FF53474E000
|
unkown
|
page readonly
|
|
|
|
1AF981FB000
|
unkown
|
page read and write
|
|
|
|
7FF58B8D0000
|
unkown
|
page readonly
|
|
|
|
7FF534722000
|
unkown
|
page readonly
|
|
|
|
1FF8668C000
|
unkown
|
page read and write
|
|
|
|
79B27FF000
|
unkown
|
page read and write
|
|
|
|
1AF98482000
|
unkown
|
page read and write
|
|
|
|
1AF98191000
|
unkown
|
page read and write
|
|
|
|
81A5DFF000
|
unkown
|
page read and write
|
|
|
|
7FF58BB69000
|
unkown
|
page readonly
|
|
|
|
1AF99310000
|
unkown
|
page read and write
|
|
|
|
15586A10000
|
heap default
|
page read and write
|
|
|
|
21FDA621000
|
unkown
|
page read and write
|
|
|
|
32247FD000
|
unkown
|
page read and write
|
|
|
|
7FF59FDA5000
|
unkown
|
page readonly
|
|
|
|
27452C75000
|
unkown
|
page read and write
|
|
|
|
7FF59FFF2000
|
unkown
|
page readonly
|
|
|
|
7FF58BA9E000
|
unkown
|
page readonly
|
|
|
|
7FF5D3647000
|
unkown
|
page readonly
|
|
|
|
7FF58B9E4000
|
unkown
|
page readonly
|
|
|
|
7FF53442C000
|
unkown
|
page readonly
|
|
|
|
7FF51B812000
|
unkown
|
page readonly
|
|
|
|
15586C57000
|
unkown
|
page read and write
|
|
|
|
7FF5D35A7000
|
unkown
|
page readonly
|
|
|
|
1782D200000
|
unkown
|
page read and write
|
|
|
|
79B232B000
|
unkown
|
page read and write
|
|
There are 1595 hidden memdumps, click here to show them.