Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
documents-1819557117.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\0604[1].gif
|
PE32+ executable (DLL) (native) x86-64, for MS Windows
|
downloaded
|
|
|
|
C:\Users\user\Desktop\~$documents-1819557117.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\ghnrope2.dll
|
PE32+ executable (DLL) (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\0604[1].gif
|
PE32+ executable (DLL) (native) x86-64, for MS Windows
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\7F71DD77-C2D9-4F65-ACF1-025D1C4A7561
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C31A19FB.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CD3F03A5.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D83053C0.png
|
PNG image data, 364 x 139, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E2C3ED62.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\F5A10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:34:24 2019, mtime=Fri Apr 9 22:32:48 2021, atime=Fri Apr 9 22:32:48 2021, length=16384, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\documents-1819557117.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 13:47:03
2020, mtime=Fri Apr 9 22:32:48 2021, atime=Fri Apr 9 22:32:48 2021, length=97555, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\C6A10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3318F1C.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\BD5EEF8A.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D5BD2603.png
|
PNG image data, 364 x 139, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E2456C6D.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\98CE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabD911.tmp
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarD912.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\69CE0000
|
data
|
dropped
|
|
There are 18 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\ghnrope
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s ..\ghnrope
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s
|
|
There are 2 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
http://runolfsson-jayde07s.ru.com/ind.html
|
8.211.4.209
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
http://cremin-ian07u.ru.com/ind.html
|
8.211.4.209
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
There are 91 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
runolfsson-jayde07s.ru.com
|
8.211.4.209
|
|
|
|
cremin-ian07u.ru.com
|
8.211.4.209
|
|
|
|
api.globalsign.cloud
|
104.18.25.243
|
|
|
|
cesiroinsurance.com
|
67.222.38.97
|
|
|
|
shalombaptistchapel.com
|
162.251.80.27
|
|
|
|
innermetransformation.com
|
173.201.252.173
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
162.251.80.27
|
shalombaptistchapel.com
|
United States
|
|
|
|
67.222.38.97
|
cesiroinsurance.com
|
United States
|
|
|
|
173.201.252.173
|
innermetransformation.com
|
United States
|
|
|
|
8.211.4.209
|
runolfsson-jayde07s.ru.com
|
Singapore
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
b86
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
c86
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
19E20
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1A3ED
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1A564
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1A66D
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1A729
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4g6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2CDC7
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2D44E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxTelemetrySent
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
n87
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC41A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC707
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC84E
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC929
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC9D4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
p'7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F6E3D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F7F2E
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 175 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5E794F000
|
unkown
|
page readonly
|
|
|
|
7FF4EC99B000
|
unkown
|
page readonly
|
|
|
|
7FF4FBAAF000
|
unkown
|
page readonly
|
|
|
|
DF0000
|
unkown
|
page readonly
|
|
|
|
25D93C00000
|
unkown
|
page read and write
|
|
|
|
7FF5E4EE3000
|
unkown
|
page readonly
|
|
|
|
8F1E13C000
|
unkown
|
page read and write
|
|
|
|
7FF5827A5000
|
unkown
|
page readonly
|
|
|
|
7FF562A6D000
|
unkown
|
page readonly
|
|
|
|
7FF5A82D3000
|
unkown
|
page readonly
|
|
|
|
36E0000
|
heap private
|
page read and write
|
|
|
|
7FF4EC817000
|
unkown
|
page readonly
|
|
|
|
262E9302000
|
unkown
|
page read and write
|
|
|
|
1C83B170000
|
heap private
|
page read and write
|
|
|
|
A3B000
|
stack
|
page read and write
|
|
|
|
9DA89F9000
|
unkown
|
page read and write
|
|
|
|
225DDD80000
|
unkown
|
page read and write
|
|
|
|
9DA907C000
|
unkown
|
page read and write
|
|
|
|
1F53FA000
|
unkown
|
page read and write
|
|
|
|
7FF52EDB6000
|
unkown
|
page readonly
|
|
|
|
7FF562D6F000
|
unkown
|
page readonly
|
|
|
|
225DDD70000
|
unkown
|
page readonly
|
|
|
|
D1D39FD000
|
unkown
|
page read and write
|
|
|
|
1C83B267000
|
unkown
|
page read and write
|
|
|
|
7FF5586EB000
|
unkown
|
page readonly
|
|
|
|
7FF4F7BAC000
|
unkown
|
page readonly
|
|
|
|
2221A7B0000
|
unkown
|
page read and write
|
|
|
|
7FF51459D000
|
unkown
|
page readonly
|
|
|
|
3055000
|
unkown
|
page readonly
|
|
|
|
25D93C49000
|
unkown
|
page read and write
|
|
|
|
7FF52EE6E000
|
unkown
|
page readonly
|
|
|
|
1DE8FF00000
|
unkown
|
page read and write
|
|
|
|
206D4F18000
|
unkown
|
page read and write
|
|
|
|
302A000
|
unkown
|
page readonly
|
|
|
|
DD0000
|
unkown
|
page read and write
|
|
|
|
7FF514467000
|
unkown
|
page readonly
|
|
|
|
D2C000
|
unkown
|
page read and write
|
|
|
|
1EC8CB00000
|
unkown
|
page read and write
|
|
|
|
24F000
|
unkown
|
page read and write
|
|
|
|
1CD21FF000
|
unkown
|
page read and write
|
|
|
|
2D6AF000000
|
unkown
|
page readonly
|
|
|
|
23DB9BF0000
|
unkown
|
page readonly
|
|
|
|
D1D36FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DE357000
|
unkown
|
page readonly
|
|
|
|
7FF4FB69A000
|
unkown
|
page readonly
|
|
|
|
7FF4F7BE3000
|
unkown
|
page readonly
|
|
|
|
7FF57AE3A000
|
unkown
|
page readonly
|
|
|
|
302A000
|
unkown
|
page readonly
|
|
|
|
2642BDD7000
|
unkown
|
page read and write
|
|
|
|
206D6CD0000
|
unkown
|
page readonly
|
|
|
|
2642C610000
|
unkown
|
page read and write
|
|
|
|
9DA86FF000
|
unkown
|
page read and write
|
|
|
|
2FED000
|
unkown
|
page readonly
|
|
|
|
7FF4EC8A7000
|
unkown
|
page readonly
|
|
|
|
1EC8BB60000
|
heap default
|
page read and write
|
|
|
|
3074000
|
unkown
|
page readonly
|
|
|
|
26429C73000
|
unkown
|
page read and write
|
|
|
|
E52F275000
|
unkown
|
page read and write
|
|
|
|
7FF4F8333000
|
unkown
|
page readonly
|
|
|
|
56802FB000
|
unkown
|
page read and write
|
|
|
|
7FF5DE213000
|
unkown
|
page readonly
|
|
|
|
ED5337E000
|
unkown
|
page read and write
|
|
|
|
3059000
|
unkown
|
page readonly
|
|
|
|
7FF5DE20A000
|
unkown
|
page readonly
|
|
|
|
30DC000
|
unkown
|
page readonly
|
|
|
|
38F990C000
|
unkown
|
page read and write
|
|
|
|
113A000
|
heap default
|
page read and write
|
|
|
|
30E7000
|
unkown
|
page readonly
|
|
|
|
7FF4F7C9F000
|
unkown
|
page readonly
|
|
|
|
7FF562AC0000
|
unkown
|
page readonly
|
|
|
|
7FF4F7C8B000
|
unkown
|
page readonly
|
|
|
|
D1D3CFE000
|
unkown
|
page read and write
|
|
|
|
9E9C7FF000
|
unkown
|
page read and write
|
|
|
|
7FF580008000
|
unkown
|
page readonly
|
|
|
|
7FF5146DE000
|
unkown
|
page readonly
|
|
|
|
1CD1B7B000
|
unkown
|
page read and write
|
|
|
|
7FF5B8947000
|
unkown
|
page readonly
|
|
|
|
2642BE00000
|
unkown
|
page read and write
|
|
|
|
7FF5DDB95000
|
unkown
|
page readonly
|
|
|
|
1DE8FE78000
|
unkown
|
page read and write
|
|
|
|
E52F5FE000
|
unkown
|
page read and write
|
|
|
|
1EC8CBE0000
|
unkown
|
page read and write
|
|
|
|
7FF52F07D000
|
unkown
|
page readonly
|
|
|
|
3049000
|
unkown
|
page readonly
|
|
|
|
9DA8BFB000
|
unkown
|
page read and write
|
|
|
|
B40000
|
heap private
|
page read and write
|
|
|
|
1CD1EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5A3FC7000
|
unkown
|
page readonly
|
|
|
|
225DDE00000
|
unkown
|
page read and write
|
|
|
|
1DE8FE40000
|
unkown
|
page read and write
|
|
|
|
3035000
|
unkown
|
page readonly
|
|
|
|
1C83B400000
|
unkown
|
page readonly
|
|
|
|
7FF562D6F000
|
unkown
|
page readonly
|
|
|
|
2D6AEE02000
|
unkown
|
page read and write
|
|
|
|
7FF57ADA7000
|
unkown
|
page readonly
|
|
|
|
1DB4A46A000
|
unkown
|
page read and write
|
|
|
|
305D000
|
unkown
|
page readonly
|
|
|
|
7FF5B883E000
|
unkown
|
page readonly
|
|
|
|
7FF5827BA000
|
unkown
|
page readonly
|
|
|
|
225DDE8B000
|
unkown
|
page read and write
|
|
|
|
206D6C50000
|
unkown
|
page readonly
|
|
|
|
22F17241000
|
unkown
|
page read and write
|
|
|
|
7FF52F08E000
|
unkown
|
page readonly
|
|
|
|
7FF57FC3A000
|
unkown
|
page readonly
|
|
|
|
1CD1D7D000
|
unkown
|
page read and write
|
|
|
|
2A2E8400000
|
unkown
|
page readonly
|
|
|
|
2642BD0A000
|
unkown
|
page read and write
|
|
|
|
7FF5DE2D3000
|
unkown
|
page readonly
|
|
|
|
2FF2000
|
unkown
|
page readonly
|
|
|
|
22F1725C000
|
unkown
|
page read and write
|
|
|
|
1C903C13000
|
unkown
|
page read and write
|
|
|
|
1EC8BC3D000
|
unkown
|
page read and write
|
|
|
|
7FF4F79C5000
|
unkown
|
page readonly
|
|
|
|
D3847FB000
|
unkown
|
page read and write
|
|
|
|
2CE2000
|
unkown
|
page readonly
|
|
|
|
2D6AE430000
|
heap private
|
page read and write
|
|
|
|
7FF52F06B000
|
unkown
|
page readonly
|
|
|
|
107B000
|
stack
|
page read and write
|
|
|
|
30CB000
|
unkown
|
page readonly
|
|
|
|
7FF4F7B57000
|
unkown
|
page readonly
|
|
|
|
1C903C02000
|
unkown
|
page read and write
|
|
|
|
7FF5DDB8A000
|
unkown
|
page readonly
|
|
|
|
22F17248000
|
unkown
|
page read and write
|
|
|
|
1EC91422000
|
unkown
|
page read and write
|
|
|
|
8F1E777000
|
unkown
|
page read and write
|
|
|
|
C4657FF000
|
unkown
|
page read and write
|
|
|
|
7FF558629000
|
unkown
|
page readonly
|
|
|
|
206D5050000
|
unkown
|
page readonly
|
|
|
|
7FF4F7BA7000
|
unkown
|
page readonly
|
|
|
|
7FF4EC8E9000
|
unkown
|
page readonly
|
|
|
|
1EC8C415000
|
unkown
|
page read and write
|
|
|
|
7FF4F83A8000
|
unkown
|
page readonly
|
|
|
|
2A2E8255000
|
unkown
|
page read and write
|
|
|
|
7FF4F7C6B000
|
unkown
|
page readonly
|
|
|
|
23DB9C55000
|
unkown
|
page read and write
|
|
|
|
206D4EBC000
|
unkown
|
page read and write
|
|
|
|
2221A7A0000
|
unkown
|
page readonly
|
|
|
|
25D93C4F000
|
unkown
|
page read and write
|
|
|
|
23DBA600000
|
unkown
|
page readonly
|
|
|
|
7FF4FB234000
|
unkown
|
page readonly
|
|
|
|
7FF55863A000
|
unkown
|
page readonly
|
|
|
|
7FF5E5200000
|
unkown
|
page readonly
|
|
|
|
7FF58000F000
|
unkown
|
page readonly
|
|
|
|
7FF52EFEA000
|
unkown
|
page readonly
|
|
|
|
7FF562CA5000
|
unkown
|
page readonly
|
|
|
|
2D6AE62A000
|
unkown
|
page read and write
|
|
|
|
9DA8A7A000
|
unkown
|
page read and write
|
|
|
|
7FF57AC67000
|
unkown
|
page readonly
|
|
|
|
1C905670000
|
unkown
|
page read and write
|
|
|
|
1EC914BD000
|
unkown
|
page read and write
|
|
|
|
D1D357B000
|
unkown
|
page read and write
|
|
|
|
1EC911E4000
|
unkown
|
page read and write
|
|
|
|
7FF4EC8BC000
|
unkown
|
page readonly
|
|
|
|
1ADD7E65000
|
heap private
|
page read and write
|
|
|
|
7FF5A82CF000
|
unkown
|
page readonly
|
|
|
|
7FF5DE46A000
|
unkown
|
page readonly
|
|
|
|
1DE90800000
|
unkown
|
page readonly
|
|
|
|
1000000
|
unkown
|
page readonly
|
|
|
|
1EC91600000
|
unkown
|
page readonly
|
|
|
|
38FA2FD000
|
unkown
|
page read and write
|
|
|
|
7FF4EC7FF000
|
unkown
|
page readonly
|
|
|
|
7FF5DE20C000
|
unkown
|
page readonly
|
|
|
|
7FF5827D5000
|
unkown
|
page readonly
|
|
|
|
26429D13000
|
unkown
|
page read and write
|
|
|
|
46F6C7B000
|
unkown
|
page read and write
|
|
|
|
8F0000
|
heap private
|
page read and write
|
|
|
|
7FF4FBA94000
|
unkown
|
page readonly
|
|
|
|
2642D002000
|
unkown
|
page read and write
|
|
|
|
26429C13000
|
unkown
|
page read and write
|
|
|
|
7FF5145F7000
|
unkown
|
page readonly
|
|
|
|
7FF4EC980000
|
unkown
|
page readonly
|
|
|
|
7FF56293F000
|
unkown
|
page readonly
|
|
|
|
7FF4F7C66000
|
unkown
|
page readonly
|
|
|
|
206D67F0000
|
unkown
|
page read and write
|
|
|
|
7FF52EF8C000
|
unkown
|
page readonly
|
|
|
|
2642C000000
|
unkown
|
page read and write
|
|
|
|
7FF5DE51F000
|
unkown
|
page readonly
|
|
|
|
56803FB000
|
unkown
|
page read and write
|
|
|
|
2642C010000
|
unkown
|
page read and write
|
|
|
|
7FF5B8A20000
|
unkown
|
page readonly
|
|
|
|
7FF4F82E7000
|
unkown
|
page readonly
|
|
|
|
1DB4A502000
|
unkown
|
page read and write
|
|
|
|
7FF57AEDB000
|
unkown
|
page readonly
|
|
|
|
7FF52EF3D000
|
unkown
|
page readonly
|
|
|
|
7FF558633000
|
unkown
|
page readonly
|
|
|
|
7FF57FC05000
|
unkown
|
page readonly
|
|
|
|
7FF5B8993000
|
unkown
|
page readonly
|
|
|
|
7FF4FBA6F000
|
unkown
|
page readonly
|
|
|
|
7FF5DE427000
|
unkown
|
page readonly
|
|
|
|
17A58190000
|
unkown
|
page read and write
|
|
|
|
7FF57ACFD000
|
unkown
|
page readonly
|
|
|
|
7FF5146EF000
|
unkown
|
page readonly
|
|
|
|
2642BAA0000
|
unkown
|
page readonly
|
|
|
|
7FF5E5123000
|
unkown
|
page readonly
|
|
|
|
7FF5826EE000
|
unkown
|
page readonly
|
|
|
|
7FF562B5E000
|
unkown
|
page readonly
|
|
|
|
7FF5E5169000
|
unkown
|
page readonly
|
|
|
|
7FF5DE3E0000
|
unkown
|
page readonly
|
|
|
|
2642C510000
|
unkown
|
page read and write
|
|
|
|
17A58240000
|
unkown
|
page read and write
|
|
|
|
7FF57FF9A000
|
unkown
|
page readonly
|
|
|
|
7FF573C95000
|
unkown
|
page readonly
|
|
|
|
1ADD7E60000
|
heap private
|
page read and write
|
|
|
|
1EC8BB90000
|
unkown
|
page read and write
|
|
|
|
7FF582636000
|
unkown
|
page readonly
|
|
|
|
7FF5A8327000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A34000
|
unkown
|
page readonly
|
|
|
|
17A58100000
|
heap private
|
page read and write
|
|
|
|
8F1E87F000
|
unkown
|
page read and write
|
|
|
|
306D000
|
unkown
|
page readonly
|
|
|
|
7FF5A4009000
|
unkown
|
page readonly
|
|
|
|
1DB4A469000
|
unkown
|
page read and write
|
|
|
|
225DEB40000
|
unkown
|
page readonly
|
|
|
|
17A58860000
|
unkown
|
page readonly
|
|
|
|
7FF52EFD9000
|
unkown
|
page readonly
|
|
|
|
7FF5E51E8000
|
unkown
|
page readonly
|
|
|
|
9E9C39E000
|
unkown
|
page read and write
|
|
|
|
2642BA60000
|
unkown
|
page readonly
|
|
|
|
206D68F0000
|
unkown
|
page readonly
|
|
|
|
1EC8BCA3000
|
unkown
|
page read and write
|
|
|
|
1EC8C3B0000
|
unkown
|
page readonly
|
|
|
|
7FF57FE3E000
|
unkown
|
page readonly
|
|
|
|
7FF57FF85000
|
unkown
|
page readonly
|
|
|
|
7FF57AE33000
|
unkown
|
page readonly
|
|
|
|
861000
|
unkown
|
page read and write
|
|
|
|
22F1727D000
|
unkown
|
page read and write
|
|
|
|
2642BD2D000
|
unkown
|
page read and write
|
|
|
|
206D6CC0000
|
unkown
|
page read and write
|
|
|
|
1CD1C7F000
|
unkown
|
page read and write
|
|
|
|
25D93C4B000
|
unkown
|
page read and write
|
|
|
|
7FF5B88C4000
|
unkown
|
page readonly
|
|
|
|
7FF5739E3000
|
unkown
|
page readonly
|
|
|
|
22F17400000
|
unkown
|
page readonly
|
|
|
|
9DA8FFB000
|
unkown
|
page read and write
|
|
|
|
7FF5B8A0F000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A3E000
|
unkown
|
page readonly
|
|
|
|
17A58180000
|
unkown
|
page readonly
|
|
|
|
7FF5E7509000
|
unkown
|
page readonly
|
|
|
|
7FF4FBA76000
|
unkown
|
page readonly
|
|
|
|
1EC91449000
|
unkown
|
page read and write
|
|
|
|
1CD1E7B000
|
unkown
|
page read and write
|
|
|
|
2642BDDC000
|
unkown
|
page read and write
|
|
|
|
1EC91310000
|
unkown
|
page read and write
|
|
|
|
307D000
|
unkown
|
page readonly
|
|
|
|
2642BD00000
|
unkown
|
page read and write
|
|
|
|
1EC8C400000
|
unkown
|
page read and write
|
|
|
|
E45C8FF000
|
unkown
|
page read and write
|
|
|
|
900000
|
unkown
|
page readonly
|
|
|
|
26429C61000
|
unkown
|
page read and write
|
|
|
|
2FDD000
|
unkown
|
page readonly
|
|
|
|
7FF5A4096000
|
unkown
|
page readonly
|
|
|
|
2642BDCD000
|
unkown
|
page read and write
|
|
|
|
7FF582836000
|
unkown
|
page readonly
|
|
|
|
206D4E3F000
|
unkown
|
page read and write
|
|
|
|
1ADD992F000
|
heap private
|
page read and write
|
|
|
|
1ADD7C9C000
|
heap default
|
page read and write
|
|
|
|
3055000
|
unkown
|
page readonly
|
|
|
|
9DA8F7B000
|
unkown
|
page read and write
|
|
|
|
7FF4F8329000
|
unkown
|
page readonly
|
|
|
|
26429C7C000
|
unkown
|
page read and write
|
|
|
|
7FF573ACD000
|
unkown
|
page readonly
|
|
|
|
1DE90460000
|
unkown
|
page readonly
|
|
|
|
7FF5A4035000
|
unkown
|
page readonly
|
|
|
|
262E9060000
|
heap default
|
page read and write
|
|
|
|
225DE460000
|
unkown
|
page readonly
|
|
|
|
7FF5A4005000
|
unkown
|
page readonly
|
|
|
|
7FF58275C000
|
unkown
|
page readonly
|
|
|
|
1EC91290000
|
unkown
|
page write copy
|
|
|
|
206D6CC0000
|
unkown
|
page read and write
|
|
|
|
7FF57AEAF000
|
unkown
|
page readonly
|
|
|
|
7FF582602000
|
unkown
|
page readonly
|
|
|
|
7FF4FB9FA000
|
unkown
|
page readonly
|
|
|
|
7FF562BA7000
|
unkown
|
page readonly
|
|
|
|
1C905770000
|
unkown
|
page readonly
|
|
|
|
7FF4F8098000
|
unkown
|
page readonly
|
|
|
|
25D93B90000
|
unkown
|
page readonly
|
|
|
|
7FF5E522B000
|
unkown
|
page readonly
|
|
|
|
25D93C88000
|
unkown
|
page read and write
|
|
|
|
2D6AE613000
|
unkown
|
page read and write
|
|
|
|
25D93D00000
|
unkown
|
page read and write
|
|
|
|
22F17259000
|
unkown
|
page read and write
|
|
|
|
25D93BA0000
|
unkown
|
page read and write
|
|
|
|
1C83B267000
|
unkown
|
page read and write
|
|
|
|
7FF4EC8FA000
|
unkown
|
page readonly
|
|
|
|
7FF5B881E000
|
unkown
|
page readonly
|
|
|
|
ED537FF000
|
unkown
|
page read and write
|
|
|
|
1EC911E1000
|
unkown
|
page read and write
|
|
|
|
1EC911E0000
|
unkown
|
page read and write
|
|
|
|
1ADD7E50000
|
heap private
|
page read and write
|
|
|
|
7FF5A3C2E000
|
unkown
|
page readonly
|
|
|
|
7FF573C7A000
|
unkown
|
page readonly
|
|
|
|
7FF562C77000
|
unkown
|
page readonly
|
|
|
|
7FF52EF97000
|
unkown
|
page readonly
|
|
|
|
1CD207F000
|
unkown
|
page read and write
|
|
|
|
1C83B520000
|
unkown
|
page readonly
|
|
|
|
7FF4FB9C8000
|
unkown
|
page readonly
|
|
|
|
7FF5B8519000
|
unkown
|
page readonly
|
|
|
|
1DB4A310000
|
heap default
|
page read and write
|
|
|
|
26429C61000
|
unkown
|
page read and write
|
|
|
|
7FF5E7787000
|
unkown
|
page readonly
|
|
|
|
7FF5A83FB000
|
unkown
|
page readonly
|
|
|
|
7FF57FFB3000
|
unkown
|
page readonly
|
|
|
|
2642C110000
|
unkown
|
page read and write
|
|
|
|
2C402040000
|
unkown
|
page read and write
|
|
|
|
7FF5A8393000
|
unkown
|
page readonly
|
|
|
|
7FF4F80E8000
|
unkown
|
page readonly
|
|
|
|
7FF5146AF000
|
unkown
|
page readonly
|
|
|
|
7FF5E78B3000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A4F000
|
unkown
|
page readonly
|
|
|
|
7FF5DE438000
|
unkown
|
page readonly
|
|
|
|
7FF5B897D000
|
unkown
|
page readonly
|
|
|
|
17A58237000
|
unkown
|
page read and write
|
|
|
|
7FF5A3E62000
|
unkown
|
page readonly
|
|
|
|
225DE602000
|
unkown
|
page read and write
|
|
|
|
1EC8BCAF000
|
unkown
|
page read and write
|
|
|
|
2642BECD000
|
unkown
|
page read and write
|
|
|
|
3018000
|
unkown
|
page readonly
|
|
|
|
7FF4F7FA9000
|
unkown
|
page readonly
|
|
|
|
7FF5DE4EE000
|
unkown
|
page readonly
|
|
|
|
7FF5A835D000
|
unkown
|
page readonly
|
|
|
|
2A2E8200000
|
unkown
|
page read and write
|
|
|
|
17A58160000
|
heap default
|
page read and write
|
|
|
|
7FF4EC9AF000
|
unkown
|
page readonly
|
|
|
|
7FF5586DB000
|
unkown
|
page readonly
|
|
|
|
7FF5144FD000
|
unkown
|
page readonly
|
|
|
|
1ADD7D80000
|
unkown
|
page readonly
|
|
|
|
7FF573AFE000
|
unkown
|
page readonly
|
|
|
|
1F4FAA000
|
unkown
|
page read and write
|
|
|
|
26429CDC000
|
unkown
|
page read and write
|
|
|
|
7FF5DDCED000
|
unkown
|
page readonly
|
|
|
|
7FF5586BB000
|
unkown
|
page readonly
|
|
|
|
7FF4EC805000
|
unkown
|
page readonly
|
|
|
|
7FF5A82DA000
|
unkown
|
page readonly
|
|
|
|
7FF55861D000
|
unkown
|
page readonly
|
|
|
|
7FF5E751F000
|
unkown
|
page readonly
|
|
|
|
1DE8FF13000
|
unkown
|
page read and write
|
|
|
|
307D000
|
unkown
|
page readonly
|
|
|
|
2642BEC5000
|
unkown
|
page read and write
|
|
|
|
262E9160000
|
unkown
|
page read and write
|
|
|
|
262E9200000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
unkown
|
page readonly
|
|
|
|
1C83B26C000
|
unkown
|
page read and write
|
|
|
|
302A000
|
unkown
|
page readonly
|
|
|
|
7FF5DE3F4000
|
unkown
|
page readonly
|
|
|
|
2D6AE708000
|
unkown
|
page read and write
|
|
|
|
7FF562929000
|
unkown
|
page readonly
|
|
|
|
206D4E71000
|
unkown
|
page read and write
|
|
|
|
7FF5E7847000
|
unkown
|
page readonly
|
|
|
|
1EC91204000
|
unkown
|
page read and write
|
|
|
|
10C0000
|
unkown
|
page read and write
|
|
|
|
7FF4EC79E000
|
unkown
|
page readonly
|
|
|
|
2221A6C0000
|
unkown
|
page readonly
|
|
|
|
7FF57ABF7000
|
unkown
|
page readonly
|
|
|
|
7FF5E7807000
|
unkown
|
page readonly
|
|
|
|
22F17232000
|
unkown
|
page read and write
|
|
|
|
3074000
|
unkown
|
page readonly
|
|
|
|
7FF5586B6000
|
unkown
|
page readonly
|
|
|
|
D384AFE000
|
unkown
|
page read and write
|
|
|
|
B10000
|
unkown
|
page readonly
|
|
|
|
7FF5A8395000
|
unkown
|
page readonly
|
|
|
|
1ADD7B10000
|
unkown
|
page readonly
|
|
|
|
7FF582788000
|
unkown
|
page readonly
|
|
|
|
1CD247A000
|
unkown
|
page read and write
|
|
|
|
304C000
|
unkown
|
page readonly
|
|
|
|
7FF562D6D000
|
unkown
|
page readonly
|
|
|
|
262E9249000
|
unkown
|
page read and write
|
|
|
|
7FF573C5D000
|
unkown
|
page readonly
|
|
|
|
7FF57AED4000
|
unkown
|
page readonly
|
|
|
|
3006000
|
unkown
|
page readonly
|
|
|
|
7FF5E5195000
|
unkown
|
page readonly
|
|
|
|
2642BDA3000
|
unkown
|
page read and write
|
|
|
|
206D4EA3000
|
unkown
|
page read and write
|
|
|
|
7FF5E522F000
|
unkown
|
page readonly
|
|
|
|
46F6F7F000
|
unkown
|
page read and write
|
|
|
|
1DB4A457000
|
unkown
|
page read and write
|
|
|
|
7FF5145A7000
|
unkown
|
page readonly
|
|
|
|
7FF5A8365000
|
unkown
|
page readonly
|
|
|
|
D1D317B000
|
unkown
|
page read and write
|
|
|
|
3450000
|
heap default
|
page read and write
|
|
|
|
1ADD9AC0000
|
heap private
|
page read and write
|
|
|
|
22F17A02000
|
unkown
|
page read and write
|
|
|
|
56804FF000
|
unkown
|
page read and write
|
|
|
|
1EC914A5000
|
unkown
|
page read and write
|
|
|
|
7FF58279D000
|
unkown
|
page readonly
|
|
|
|
FE4000
|
unkown
|
page read and write
|
|
|
|
17A581C0000
|
unkown
|
page read and write
|
|
|
|
1EC8BD02000
|
unkown
|
page read and write
|
|
|
|
E45C6FE000
|
unkown
|
page read and write
|
|
|
|
1EC91030000
|
unkown
|
page read and write
|
|
|
|
2642B6A0000
|
unkown
|
page readonly
|
|
|
|
3540000
|
unkown
|
page readonly
|
|
|
|
7FF5DE0AF000
|
unkown
|
page readonly
|
|
|
|
2C402002000
|
unkown
|
page read and write
|
|
|
|
E45C3DB000
|
unkown
|
page read and write
|
|
|
|
1C903AD0000
|
heap private
|
page read and write
|
|
|
|
7FF573C65000
|
unkown
|
page readonly
|
|
|
|
2642C110000
|
unkown
|
page read and write
|
|
|
|
7FF5145FC000
|
unkown
|
page readonly
|
|
|
|
206D4E7F000
|
unkown
|
page read and write
|
|
|
|
7FF5A408F000
|
unkown
|
page readonly
|
|
|
|
2642BD74000
|
unkown
|
page read and write
|
|
|
|
7FF4F83CD000
|
unkown
|
page readonly
|
|
|
|
7FF58263F000
|
unkown
|
page readonly
|
|
|
|
D1D37FC000
|
unkown
|
page read and write
|
|
|
|
7FF4EC99E000
|
unkown
|
page readonly
|
|
|
|
2A2E9BA0000
|
unkown
|
page read and write
|
|
|
|
9E9C31E000
|
unkown
|
page read and write
|
|
|
|
7FF5A3B7F000
|
unkown
|
page readonly
|
|
|
|
2F14000
|
unkown
|
page readonly
|
|
|
|
7FF562925000
|
unkown
|
page readonly
|
|
|
|
26429C42000
|
unkown
|
page read and write
|
|
|
|
1EC8BC6F000
|
unkown
|
page read and write
|
|
|
|
7FF5E7824000
|
unkown
|
page readonly
|
|
|
|
750000
|
unkown
|
page read and write
|
|
|
|
7FF4F7B50000
|
unkown
|
page readonly
|
|
|
|
D1D3DFF000
|
unkown
|
page read and write
|
|
|
|
17A58302000
|
unkown
|
page read and write
|
|
|
|
2F14000
|
unkown
|
page readonly
|
|
|
|
302FAFD000
|
unkown
|
page read and write
|
|
|
|
1EC8C3F0000
|
unkown
|
page read and write
|
|
|
|
7FF514608000
|
unkown
|
page readonly
|
|
|
|
7FF4EC473000
|
unkown
|
page readonly
|
|
|
|
2C403E60000
|
unkown
|
page read and write
|
|
|
|
7FF57FE5D000
|
unkown
|
page readonly
|
|
|
|
7FF5E4FFE000
|
unkown
|
page readonly
|
|
|
|
D3844FF000
|
unkown
|
page read and write
|
|
|
|
7FF57AE00000
|
unkown
|
page readonly
|
|
|
|
1F547F000
|
unkown
|
page read and write
|
|
|
|
E52F3F7000
|
unkown
|
page read and write
|
|
|
|
7FF57FC2D000
|
unkown
|
page readonly
|
|
|
|
2221AD90000
|
unkown
|
page readonly
|
|
|
|
2D6AE600000
|
unkown
|
page read and write
|
|
|
|
7FF562C67000
|
unkown
|
page readonly
|
|
|
|
206D4EDF000
|
unkown
|
page read and write
|
|
|
|
23DBA340000
|
unkown
|
page read and write
|
|
|
|
7FF5E753A000
|
unkown
|
page readonly
|
|
|
|
7FF52EFA4000
|
unkown
|
page readonly
|
|
|
|
7FF52EFAC000
|
unkown
|
page readonly
|
|
|
|
3010000
|
unkown
|
page readonly
|
|
|
|
1DB4A400000
|
unkown
|
page read and write
|
|
|
|
262E9400000
|
unkown
|
page readonly
|
|
|
|
7FF4FBAAB000
|
unkown
|
page readonly
|
|
|
|
1DE90602000
|
unkown
|
page read and write
|
|
|
|
8F1E5F5000
|
unkown
|
page read and write
|
|
|
|
7FF573CF6000
|
unkown
|
page readonly
|
|
|
|
26429C9E000
|
unkown
|
page read and write
|
|
|
|
56801FB000
|
unkown
|
page read and write
|
|
|
|
7FF58286F000
|
unkown
|
page readonly
|
|
|
|
30E7000
|
unkown
|
page readonly
|
|
|
|
22F1724E000
|
unkown
|
page read and write
|
|
|
|
7FF5E4CF9000
|
unkown
|
page readonly
|
|
|
|
206D4F00000
|
unkown
|
page read and write
|
|
|
|
3006000
|
unkown
|
page readonly
|
|
|
|
1EC8C3D0000
|
unkown
|
page readonly
|
|
|
|
1DE8FF02000
|
unkown
|
page read and write
|
|
|
|
2CE2000
|
unkown
|
page readonly
|
|
|
|
22F17244000
|
unkown
|
page read and write
|
|
|
|
7FF558608000
|
unkown
|
page readonly
|
|
|
|
E45C7F9000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
7FF4F818D000
|
unkown
|
page readonly
|
|
|
|
1EC8D020000
|
unkown
|
page read and write
|
|
|
|
3041000
|
unkown
|
page readonly
|
|
|
|
2221A86B000
|
unkown
|
page read and write
|
|
|
|
1C83B300000
|
unkown
|
page read and write
|
|
|
|
1F4EAB000
|
unkown
|
page read and write
|
|
|
|
2C402102000
|
unkown
|
page read and write
|
|
|
|
E52F2FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E764D000
|
unkown
|
page readonly
|
|
|
|
7FF5E5097000
|
unkown
|
page readonly
|
|
|
|
7FF5E7671000
|
unkown
|
page readonly
|
|
|
|
A10000
|
heap default
|
page read and write
|
|
|
|
1C83B26C000
|
unkown
|
page read and write
|
|
|
|
1ADD7E70000
|
unkown
|
page readonly
|
|
|
|
3018000
|
unkown
|
page readonly
|
|
|
|
306D000
|
unkown
|
page readonly
|
|
|
|
7FF5A40CB000
|
unkown
|
page readonly
|
|
|
|
304C000
|
unkown
|
page readonly
|
|
|
|
1C83B26C000
|
unkown
|
page read and write
|
|
|
|
26429C29000
|
unkown
|
page read and write
|
|
|
|
2C402000000
|
unkown
|
page read and write
|
|
|
|
E52F0FB000
|
unkown
|
page read and write
|
|
|
|
C70000
|
heap default
|
page read and write
|
|
|
|
7FF5DE50B000
|
unkown
|
page readonly
|
|
|
|
7FF5824FA000
|
unkown
|
page readonly
|
|
|
|
22F17240000
|
unkown
|
page read and write
|
|
|
|
2A2E8202000
|
unkown
|
page read and write
|
|
|
|
7FF57AEEB000
|
unkown
|
page readonly
|
|
|
|
3045000
|
unkown
|
page readonly
|
|
|
|
7FF4FBA9E000
|
unkown
|
page readonly
|
|
|
|
225DE000000
|
unkown
|
page readonly
|
|
|
|
7FF58277C000
|
unkown
|
page readonly
|
|
|
|
25D93B80000
|
unkown
|
page readonly
|
|
|
|
7FF5DDB9A000
|
unkown
|
page readonly
|
|
|
|
2FED000
|
unkown
|
page readonly
|
|
|
|
7FF562914000
|
unkown
|
page readonly
|
|
|
|
7FF5E76C7000
|
unkown
|
page readonly
|
|
|
|
2A2E8090000
|
heap default
|
page read and write
|
|
|
|
7FF5E73FF000
|
unkown
|
page readonly
|
|
|
|
1EC914BC000
|
unkown
|
page read and write
|
|
|
|
7FF52EE17000
|
unkown
|
page readonly
|
|
|
|
7FF4FBA8D000
|
unkown
|
page readonly
|
|
|
|
D50000
|
unkown
|
page readonly
|
|
|
|
262E9250000
|
unkown
|
page read and write
|
|
|
|
7FF4EC915000
|
unkown
|
page readonly
|
|
|
|
3045000
|
unkown
|
page readonly
|
|
|
|
7FF57FD75000
|
unkown
|
page readonly
|
|
|
|
7FF5A3FA4000
|
unkown
|
page readonly
|
|
|
|
26429C57000
|
unkown
|
page read and write
|
|
|
|
1C83B229000
|
unkown
|
page read and write
|
|
|
|
ED532FE000
|
unkown
|
page read and write
|
|
|
|
3006000
|
unkown
|
page readonly
|
|
|
|
7FF4F83D4000
|
unkown
|
page readonly
|
|
|
|
1EC8C3A0000
|
unkown
|
page readonly
|
|
|
|
ED533FA000
|
unkown
|
page read and write
|
|
|
|
1EC9143C000
|
unkown
|
page read and write
|
|
|
|
23DB9D13000
|
unkown
|
page read and write
|
|
|
|
225DE800000
|
unkown
|
page readonly
|
|
|
|
7FF52E705000
|
unkown
|
page readonly
|
|
|
|
3014000
|
unkown
|
page readonly
|
|
|
|
1ADD7C40000
|
unkown
|
page read and write
|
|
|
|
3041000
|
unkown
|
page readonly
|
|
|
|
7FF5A8348000
|
unkown
|
page readonly
|
|
|
|
7FF573CEF000
|
unkown
|
page readonly
|
|
|
|
780000
|
unkown
|
page readonly
|
|
|
|
7FF5B8703000
|
unkown
|
page readonly
|
|
|
|
7FF5E7435000
|
unkown
|
page readonly
|
|
|
|
10A0000
|
heap default
|
page read and write
|
|
|
|
1ADD9610000
|
unkown
|
page readonly
|
|
|
|
7FF562A95000
|
unkown
|
page readonly
|
|
|
|
1DB4A2B0000
|
heap private
|
page read and write
|
|
|
|
7FF5A3D96000
|
unkown
|
page readonly
|
|
|
|
1DE8FE02000
|
unkown
|
page read and write
|
|
|
|
23DB9BE0000
|
heap default
|
page read and write
|
|
|
|
2D6AE700000
|
unkown
|
page read and write
|
|
|
|
1ADD97B0000
|
heap private
|
page read and write
|
|
|
|
22F171E0000
|
unkown
|
page readonly
|
|
|
|
7FF5E7920000
|
unkown
|
page readonly
|
|
|
|
1EC8BB70000
|
unkown
|
page readonly
|
|
|
|
38FA07D000
|
unkown
|
page read and write
|
|
|
|
1CD267F000
|
unkown
|
page read and write
|
|
|
|
22F17100000
|
heap default
|
page read and write
|
|
|
|
26429CDE000
|
unkown
|
page read and write
|
|
|
|
7FF5E4FF3000
|
unkown
|
page readonly
|
|
|
|
1EC8CCC0000
|
unkown
|
page readonly
|
|
|
|
7FF5DE21D000
|
unkown
|
page readonly
|
|
|
|
22F1725E000
|
unkown
|
page read and write
|
|
|
|
262E9000000
|
heap private
|
page read and write
|
|
|
|
3041000
|
unkown
|
page readonly
|
|
|
|
1DB4A469000
|
unkown
|
page read and write
|
|
|
|
7FF4FB67F000
|
unkown
|
page readonly
|
|
|
|
3010000
|
unkown
|
page readonly
|
|
|
|
225DDCF0000
|
heap private
|
page read and write
|
|
|
|
7FF4F83C0000
|
unkown
|
page readonly
|
|
|
|
3009000
|
unkown
|
page readonly
|
|
|
|
302FC7C000
|
unkown
|
page read and write
|
|
|
|
2642D202000
|
unkown
|
page read and write
|
|
|
|
7FF58004F000
|
unkown
|
page readonly
|
|
|
|
2221A865000
|
unkown
|
page read and write
|
|
|
|
1EC8C402000
|
unkown
|
page read and write
|
|
|
|
3009000
|
unkown
|
page readonly
|
|
|
|
7FF5E783C000
|
unkown
|
page readonly
|
|
|
|
7FF582778000
|
unkown
|
page readonly
|
|
|
|
7FF57AECD000
|
unkown
|
page readonly
|
|
|
|
2A2E823F000
|
unkown
|
page read and write
|
|
|
|
7FF514625000
|
unkown
|
page readonly
|
|
|
|
7FF4F788A000
|
unkown
|
page readonly
|
|
|
|
ED5327B000
|
unkown
|
page read and write
|
|
|
|
2642BDFE000
|
unkown
|
page read and write
|
|
|
|
1EC912A4000
|
unkown
|
page readonly
|
|
|
|
7FF57AAD2000
|
unkown
|
page readonly
|
|
|
|
46F6E7A000
|
unkown
|
page read and write
|
|
|
|
206D7010000
|
unkown
|
page read and write
|
|
|
|
225DDD60000
|
unkown
|
page readonly
|
|
|
|
2A2E8234000
|
unkown
|
page read and write
|
|
|
|
22F1725F000
|
unkown
|
page read and write
|
|
|
|
26429C77000
|
unkown
|
page read and write
|
|
|
|
38FA0FE000
|
unkown
|
page read and write
|
|
|
|
7FF4EC479000
|
unkown
|
page readonly
|
|
|
|
3049000
|
unkown
|
page readonly
|
|
|
|
7FF56294D000
|
unkown
|
page readonly
|
|
|
|
30D1000
|
unkown
|
page readonly
|
|
|
|
7FF51461D000
|
unkown
|
page readonly
|
|
|
|
7FF562C5C000
|
unkown
|
page readonly
|
|
|
|
26429A40000
|
heap private
|
page read and write
|
|
|
|
2221A790000
|
unkown
|
page readonly
|
|
|
|
17A58229000
|
unkown
|
page read and write
|
|
|
|
7FF58003B000
|
unkown
|
page readonly
|
|
|
|
7FF562C52000
|
unkown
|
page readonly
|
|
|
|
7FF582828000
|
unkown
|
page readonly
|
|
|
|
7FF5A840D000
|
unkown
|
page readonly
|
|
|
|
2221A913000
|
unkown
|
page read and write
|
|
|
|
7FF57ACDE000
|
unkown
|
page readonly
|
|
|
|
C4650EB000
|
unkown
|
page read and write
|
|
|
|
305D000
|
unkown
|
page readonly
|
|
|
|
7FF5A3FD7000
|
unkown
|
page readonly
|
|
|
|
7FF5145A0000
|
unkown
|
page readonly
|
|
|
|
7FF4F7C03000
|
unkown
|
page readonly
|
|
|
|
1EC912F0000
|
unkown
|
page read and write
|
|
|
|
7FF5A40B4000
|
unkown
|
page readonly
|
|
|
|
7FF5737F9000
|
unkown
|
page readonly
|
|
|
|
303B000
|
unkown
|
page readonly
|
|
|
|
23DBA940000
|
unkown
|
page readonly
|
|
|
|
1DB4A46A000
|
unkown
|
page read and write
|
|
|
|
7FF5E7893000
|
unkown
|
page readonly
|
|
|
|
7FF4EC7C3000
|
unkown
|
page readonly
|
|
|
|
2D6AE570000
|
unkown
|
page readonly
|
|
|
|
E52F17E000
|
unkown
|
page read and write
|
|
|
|
26429D2D000
|
unkown
|
page read and write
|
|
|
|
2D6AE655000
|
unkown
|
page read and write
|
|
|
|
206D6F64000
|
unkown
|
page read and write
|
|
|
|
2F14000
|
unkown
|
page readonly
|
|
|
|
7FF562AE7000
|
unkown
|
page readonly
|
|
|
|
2642C210000
|
unkown
|
page read and write
|
|
|
|
7FF5A3FC5000
|
unkown
|
page readonly
|
|
|
|
7FF5A40CF000
|
unkown
|
page readonly
|
|
|
|
7FF5827A9000
|
unkown
|
page readonly
|
|
|
|
7FF5E7857000
|
unkown
|
page readonly
|
|
|
|
2642BDA7000
|
unkown
|
page read and write
|
|
|
|
7FF5B8A16000
|
unkown
|
page readonly
|
|
|
|
7FF5DE4D8000
|
unkown
|
page readonly
|
|
|
|
3010000
|
unkown
|
page readonly
|
|
|
|
25D93E00000
|
unkown
|
page readonly
|
|
|
|
7FF5A409E000
|
unkown
|
page readonly
|
|
|
|
1C83B267000
|
unkown
|
page read and write
|
|
|
|
7FF5DE455000
|
unkown
|
page readonly
|
|
|
|
1F537E000
|
unkown
|
page read and write
|
|
|
|
73E037E000
|
unkown
|
page read and write
|
|
|
|
7FF5E773E000
|
unkown
|
page readonly
|
|
|
|
7FF5A3FBC000
|
unkown
|
page readonly
|
|
|
|
7FF5DE4E6000
|
unkown
|
page readonly
|
|
|
|
7FF5E791B000
|
unkown
|
page readonly
|
|
|
|
7FF5E7908000
|
unkown
|
page readonly
|
|
|
|
46F6EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5E4D08000
|
unkown
|
page readonly
|
|
|
|
7FF5DE3CD000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A3B000
|
unkown
|
page readonly
|
|
|
|
262E9A02000
|
unkown
|
page read and write
|
|
|
|
B81C87E000
|
unkown
|
page read and write
|
|
|
|
1EC911C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E77FA000
|
unkown
|
page readonly
|
|
|
|
22F17279000
|
unkown
|
page read and write
|
|
|
|
FE0000
|
unkown
|
page read and write
|
|
|
|
7FF4F7BCD000
|
unkown
|
page readonly
|
|
|
|
12A0000
|
heap default
|
page read and write
|
|
|
|
2642C610000
|
unkown
|
page read and write
|
|
|
|
7FF5A3DA8000
|
unkown
|
page readonly
|
|
|
|
46F6CFF000
|
unkown
|
page read and write
|
|
|
|
7FF5DE026000
|
unkown
|
page readonly
|
|
|
|
1ADD7D90000
|
unkown
|
page readonly
|
|
|
|
1EC914BC000
|
unkown
|
page read and write
|
|
|
|
10B0000
|
unkown
|
page readonly
|
|
|
|
7FF5B8989000
|
unkown
|
page readonly
|
|
|
|
1ADD8200000
|
unkown
|
page readonly
|
|
|
|
22F1726C000
|
unkown
|
page read and write
|
|
|
|
25D93ED0000
|
unkown
|
page readonly
|
|
|
|
3010000
|
unkown
|
page readonly
|
|
|
|
2642BD83000
|
unkown
|
page read and write
|
|
|
|
2642BE84000
|
unkown
|
page read and write
|
|
|
|
7FF5E76ED000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page readonly
|
|
|
|
1C83B26E000
|
unkown
|
page read and write
|
|
|
|
7FF562952000
|
unkown
|
page readonly
|
|
|
|
7FF4EC201000
|
unkown
|
page readonly
|
|
|
|
7FF4F83DB000
|
unkown
|
page readonly
|
|
|
|
17A581C0000
|
unkown
|
page read and write
|
|
|
|
225DDE13000
|
unkown
|
page read and write
|
|
|
|
22F17276000
|
unkown
|
page read and write
|
|
|
|
7FF57FEFD000
|
unkown
|
page readonly
|
|
|
|
7FF5A83F6000
|
unkown
|
page readonly
|
|
|
|
7FF5E7885000
|
unkown
|
page readonly
|
|
|
|
7FF5E522F000
|
unkown
|
page readonly
|
|
|
|
23DB9D08000
|
unkown
|
page read and write
|
|
|
|
2C403B00000
|
unkown
|
page readonly
|
|
|
|
1DE8FE28000
|
unkown
|
page read and write
|
|
|
|
7FF5E76A0000
|
unkown
|
page readonly
|
|
|
|
7FF5146DB000
|
unkown
|
page readonly
|
|
|
|
206D6F00000
|
unkown
|
page read and write
|
|
|
|
2642C510000
|
unkown
|
page read and write
|
|
|
|
7FF5DE241000
|
unkown
|
page readonly
|
|
|
|
D1D3AFF000
|
unkown
|
page read and write
|
|
|
|
23DB9B80000
|
heap private
|
page read and write
|
|
|
|
26429B80000
|
unkown
|
page write copy
|
|
|
|
7FF5DE2EC000
|
unkown
|
page readonly
|
|
|
|
7FF4EC96F000
|
unkown
|
page readonly
|
|
|
|
7FF562C1A000
|
unkown
|
page readonly
|
|
|
|
345A000
|
heap default
|
page read and write
|
|
|
|
7FF4FB89E000
|
unkown
|
page readonly
|
|
|
|
30D1000
|
unkown
|
page readonly
|
|
|
|
7FF557F6E000
|
unkown
|
page readonly
|
|
|
|
304C000
|
unkown
|
page readonly
|
|
|
|
7FF5143ED000
|
unkown
|
page readonly
|
|
|
|
1EC91461000
|
unkown
|
page read and write
|
|
|
|
23DB9C13000
|
unkown
|
page read and write
|
|
|
|
7FF5E77FD000
|
unkown
|
page readonly
|
|
|
|
7FF4F7C7D000
|
unkown
|
page readonly
|
|
|
|
7FF5DE2D8000
|
unkown
|
page readonly
|
|
|
|
7FF573C23000
|
unkown
|
page readonly
|
|
|
|
7FF5E7889000
|
unkown
|
page readonly
|
|
|
|
1CD1977000
|
unkown
|
page read and write
|
|
|
|
7FF57AC15000
|
unkown
|
page readonly
|
|
|
|
7FF4F7B74000
|
unkown
|
page readonly
|
|
|
|
7FF582744000
|
unkown
|
page readonly
|
|
|
|
7FF4FB8BD000
|
unkown
|
page readonly
|
|
|
|
7FF4F7AAD000
|
unkown
|
page readonly
|
|
|
|
7FF5A40AD000
|
unkown
|
page readonly
|
|
|
|
C4651EE000
|
unkown
|
page read and write
|
|
|
|
2FF2000
|
unkown
|
page readonly
|
|
|
|
7FF562D3B000
|
unkown
|
page readonly
|
|
|
|
225DE700000
|
unkown
|
page read and write
|
|
|
|
22F17264000
|
unkown
|
page read and write
|
|
|
|
38F9DFE000
|
unkown
|
page read and write
|
|
|
|
3035000
|
unkown
|
page readonly
|
|
|
|
1C903E00000
|
unkown
|
page readonly
|
|
|
|
22F1723B000
|
unkown
|
page read and write
|
|
|
|
103D000
|
unkown
|
page read and write
|
|
|
|
7FF5DE51F000
|
unkown
|
page readonly
|
|
|
|
25D93C3C000
|
unkown
|
page read and write
|
|
|
|
206D4C90000
|
heap private
|
page read and write
|
|
|
|
2642D100000
|
unkown
|
page read and write
|
|
|
|
1ADD9830000
|
heap private
|
page read and write
|
|
|
|
2642C510000
|
unkown
|
page read and write
|
|
|
|
262E9C00000
|
unkown
|
page readonly
|
|
|
|
7FF5DE51D000
|
unkown
|
page readonly
|
|
|
|
7FF4EC98D000
|
unkown
|
page readonly
|
|
|
|
36F0000
|
unkown
|
page readonly
|
|
|
|
2642BA00000
|
unkown
|
page readonly
|
|
|
|
7FF52EF4D000
|
unkown
|
page readonly
|
|
|
|
303B000
|
unkown
|
page readonly
|
|
|
|
3010000
|
unkown
|
page readonly
|
|
|
|
1DB4BDF0000
|
unkown
|
page read and write
|
|
|
|
7FF5DE485000
|
unkown
|
page readonly
|
|
|
|
30E7000
|
unkown
|
page readonly
|
|
|
|
225DE530000
|
unkown
|
page write copy
|
|
|
|
7FF5E74F4000
|
unkown
|
page readonly
|
|
|
|
22F17245000
|
unkown
|
page read and write
|
|
|
|
7FF5E752D000
|
unkown
|
page readonly
|
|
|
|
7FF5A4088000
|
unkown
|
page readonly
|
|
|
|
1EC8BC56000
|
unkown
|
page read and write
|
|
|
|
7FF580016000
|
unkown
|
page readonly
|
|
|
|
2F14000
|
unkown
|
page readonly
|
|
|
|
7FF5A8113000
|
unkown
|
page readonly
|
|
|
|
262E9229000
|
unkown
|
page read and write
|
|
|
|
206D4E29000
|
unkown
|
page read and write
|
|
|
|
17A58255000
|
unkown
|
page read and write
|
|
|
|
1ADD9660000
|
unkown
|
page readonly
|
|
|
|
7FF5142A5000
|
unkown
|
page readonly
|
|
|
|
7FF5142BF000
|
unkown
|
page readonly
|
|
|
|
7FF573D00000
|
unkown
|
page readonly
|
|
|
|
23DBA330000
|
unkown
|
page readonly
|
|
|
|
7FF5DE1AA000
|
unkown
|
page readonly
|
|
|
|
800000
|
unkown
|
page readonly
|
|
|
|
7FF57AEEF000
|
unkown
|
page readonly
|
|
|
|
7FF573808000
|
unkown
|
page readonly
|
|
|
|
1EC8BD13000
|
unkown
|
page read and write
|
|
|
|
7FF57ABED000
|
unkown
|
page readonly
|
|
|
|
262E9150000
|
unkown
|
page readonly
|
|
|
|
7FF5A841B000
|
unkown
|
page readonly
|
|
|
|
7FF5E790F000
|
unkown
|
page readonly
|
|
|
|
1EC8C3C0000
|
unkown
|
page readonly
|
|
|
|
23DB9D00000
|
unkown
|
page read and write
|
|
|
|
2642BF43000
|
unkown
|
page read and write
|
|
|
|
1C903C54000
|
unkown
|
page read and write
|
|
|
|
38F9E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5E792D000
|
unkown
|
page readonly
|
|
|
|
2A2E8213000
|
unkown
|
page read and write
|
|
|
|
1EC8C500000
|
unkown
|
page read and write
|
|
|
|
3049000
|
unkown
|
page readonly
|
|
|
|
7FF58285B000
|
unkown
|
page readonly
|
|
|
|
7FF57AE29000
|
unkown
|
page readonly
|
|
|
|
1130000
|
heap default
|
page read and write
|
|
|
|
3014000
|
unkown
|
page readonly
|
|
|
|
17A58200000
|
unkown
|
page read and write
|
|
|
|
7FF573D0D000
|
unkown
|
page readonly
|
|
|
|
1EC91294000
|
unkown
|
page readonly
|
|
|
|
7FF4F7C84000
|
unkown
|
page readonly
|
|
|
|
7FF5E775D000
|
unkown
|
page readonly
|
|
|
|
1EC8C3F3000
|
unkown
|
page read and write
|
|
|
|
25D94402000
|
unkown
|
page read and write
|
|
|
|
7FF4EC663000
|
unkown
|
page readonly
|
|
|
|
25D93C57000
|
unkown
|
page read and write
|
|
|
|
1EC91370000
|
unkown
|
page readonly
|
|
|
|
2FF2000
|
unkown
|
page readonly
|
|
|
|
B81C9F9000
|
unkown
|
page read and write
|
|
|
|
206D4F13000
|
unkown
|
page read and write
|
|
|
|
7FF5586C0000
|
unkown
|
page readonly
|
|
|
|
7FF5A3FC3000
|
unkown
|
page readonly
|
|
|
|
7FF5E5173000
|
unkown
|
page readonly
|
|
|
|
E3C9EFB000
|
unkown
|
page read and write
|
|
|
|
2D6AE702000
|
unkown
|
page read and write
|
|
|
|
22F171F0000
|
unkown
|
page readonly
|
|
|
|
B81CB7C000
|
unkown
|
page read and write
|
|
|
|
7FF573CFB000
|
unkown
|
page readonly
|
|
|
|
1EC912C8000
|
unkown
|
page write copy
|
|
|
|
1C903B40000
|
unkown
|
page write copy
|
|
|
|
7FF58004B000
|
unkown
|
page readonly
|
|
|
|
7FF5145C4000
|
unkown
|
page readonly
|
|
|
|
7FF562C0F000
|
unkown
|
page readonly
|
|
|
|
7FF5A3F62000
|
unkown
|
page readonly
|
|
|
|
7FF57FF57000
|
unkown
|
page readonly
|
|
|
|
7FF5A839D000
|
unkown
|
page readonly
|
|
|
|
9DA867E000
|
unkown
|
page read and write
|
|
|
|
7FF573D2B000
|
unkown
|
page readonly
|
|
|
|
7FF52F06E000
|
unkown
|
page readonly
|
|
|
|
7FF4FBA80000
|
unkown
|
page readonly
|
|
|
|
7FF57AD9D000
|
unkown
|
page readonly
|
|
|
|
7FF52EF50000
|
unkown
|
page readonly
|
|
|
|
C4656F7000
|
unkown
|
page read and write
|
|
|
|
2221A83F000
|
unkown
|
page read and write
|
|
|
|
7FF4EC488000
|
unkown
|
page readonly
|
|
|
|
7FF52E8E4000
|
unkown
|
page readonly
|
|
|
|
7FF5DDCE9000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A4F000
|
unkown
|
page readonly
|
|
|
|
C80000
|
unkown
|
page readonly
|
|
|
|
7FF5DE094000
|
unkown
|
page readonly
|
|
|
|
1EC8C260000
|
unkown
|
page readonly
|
|
|
|
1ADD9650000
|
unkown
|
page readonly
|
|
|
|
206D4CF0000
|
heap default
|
page read and write
|
|
|
|
7FF5586DE000
|
unkown
|
page readonly
|
|
|
|
7FF5A40CD000
|
unkown
|
page readonly
|
|
|
|
D3842FC000
|
unkown
|
page read and write
|
|
|
|
1EC8C390000
|
unkown
|
page readonly
|
|
|
|
1EC8BCFC000
|
unkown
|
page read and write
|
|
|
|
7FF562D5B000
|
unkown
|
page readonly
|
|
|
|
1DE8FD00000
|
heap private
|
page read and write
|
|
|
|
9E9C8FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A801D000
|
unkown
|
page readonly
|
|
|
|
26429C61000
|
unkown
|
page read and write
|
|
|
|
30D5000
|
unkown
|
page readonly
|
|
|
|
2642BD66000
|
unkown
|
page read and write
|
|
|
|
7FF573D1B000
|
unkown
|
page readonly
|
|
|
|
2221A902000
|
unkown
|
page read and write
|
|
|
|
1C903D02000
|
unkown
|
page read and write
|
|
|
|
1DB4A500000
|
unkown
|
page read and write
|
|
|
|
7FF58285E000
|
unkown
|
page readonly
|
|
|
|
1DB4A402000
|
unkown
|
page read and write
|
|
|
|
38FA37F000
|
unkown
|
page read and write
|
|
|
|
7FF5A3F4E000
|
unkown
|
page readonly
|
|
|
|
7FF562C88000
|
unkown
|
page readonly
|
|
|
|
6AC000
|
unkown
|
page read and write
|
|
|
|
262E9140000
|
unkown
|
page readonly
|
|
|
|
7FF52EF82000
|
unkown
|
page readonly
|
|
|
|
22F17200000
|
unkown
|
page read and write
|
|
|
|
7FF573B43000
|
unkown
|
page readonly
|
|
|
|
2642BDE5000
|
unkown
|
page read and write
|
|
|
|
30D5000
|
unkown
|
page readonly
|
|
|
|
307D000
|
unkown
|
page readonly
|
|
|
|
1EC8BC8A000
|
unkown
|
page read and write
|
|
|
|
17A58A02000
|
unkown
|
page read and write
|
|
|
|
302F75C000
|
unkown
|
page read and write
|
|
|
|
C4658FD000
|
unkown
|
page read and write
|
|
|
|
7FF52F08B000
|
unkown
|
page readonly
|
|
|
|
7FF582763000
|
unkown
|
page readonly
|
|
|
|
7FF5143F7000
|
unkown
|
page readonly
|
|
|
|
47B000
|
stack
|
page read and write
|
|
|
|
7FF562D40000
|
unkown
|
page readonly
|
|
|
|
7FF562CB3000
|
unkown
|
page readonly
|
|
|
|
2C402058000
|
unkown
|
page read and write
|
|
|
|
3018000
|
unkown
|
page readonly
|
|
|
|
225DE0D0000
|
unkown
|
page readonly
|
|
|
|
30E7000
|
unkown
|
page readonly
|
|
|
|
8F1E67E000
|
unkown
|
page read and write
|
|
|
|
7FF5DE227000
|
unkown
|
page readonly
|
|
|
|
9DA83EB000
|
unkown
|
page read and write
|
|
|
|
D38467C000
|
unkown
|
page read and write
|
|
|
|
2A2E8302000
|
unkown
|
page read and write
|
|
|
|
3055000
|
unkown
|
page readonly
|
|
|
|
1DB4A46A000
|
unkown
|
page read and write
|
|
|
|
7FF5DDFCF000
|
unkown
|
page readonly
|
|
|
|
D3849FE000
|
unkown
|
page read and write
|
|
|
|
7FF5146EB000
|
unkown
|
page readonly
|
|
|
|
3074000
|
unkown
|
page readonly
|
|
|
|
25D93C4A000
|
unkown
|
page read and write
|
|
|
|
7FF5DE3D0000
|
unkown
|
page readonly
|
|
|
|
DF0000
|
heap private
|
page read and write
|
|
|
|
7FF5827B3000
|
unkown
|
page readonly
|
|
|
|
1EC8BE00000
|
unkown
|
page readonly
|
|
|
|
22F17283000
|
unkown
|
page read and write
|
|
|
|
7FF5B8943000
|
unkown
|
page readonly
|
|
|
|
1C903ED0000
|
unkown
|
page readonly
|
|
|
|
2221B200000
|
unkown
|
page readonly
|
|
|
|
2CE2000
|
unkown
|
page readonly
|
|
|
|
1EC8BB80000
|
unkown
|
page readonly
|
|
|
|
7FF5A401A000
|
unkown
|
page readonly
|
|
|
|
225DDE73000
|
unkown
|
page read and write
|
|
|
|
22F1723D000
|
unkown
|
page read and write
|
|
|
|
23DB9C7A000
|
unkown
|
page read and write
|
|
|
|
7FF52EBD1000
|
unkown
|
page readonly
|
|
|
|
7FF5E7532000
|
unkown
|
page readonly
|
|
|
|
7FF52EFCD000
|
unkown
|
page readonly
|
|
|
|
7FF5E794F000
|
unkown
|
page readonly
|
|
|
|
262E924D000
|
unkown
|
page read and write
|
|
|
|
262E9300000
|
unkown
|
page read and write
|
|
|
|
3035000
|
unkown
|
page readonly
|
|
|
|
2C401FF0000
|
unkown
|
page readonly
|
|
|
|
206D6CF0000
|
unkown
|
page readonly
|
|
|
|
ED534FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E51EF000
|
unkown
|
page readonly
|
|
|
|
7FF562D36000
|
unkown
|
page readonly
|
|
|
|
2C401F20000
|
unkown
|
page readonly
|
|
|
|
7FF5E7868000
|
unkown
|
page readonly
|
|
|
|
7FF4EC9AF000
|
unkown
|
page readonly
|
|
|
|
1EC91360000
|
unkown
|
page readonly
|
|
|
|
2642BDD5000
|
unkown
|
page read and write
|
|
|
|
225DDDB0000
|
unkown
|
page readonly
|
|
|
|
7FF4FBA13000
|
unkown
|
page readonly
|
|
|
|
7FF58286F000
|
unkown
|
page readonly
|
|
|
|
7FF4FB230000
|
unkown
|
page readonly
|
|
|
|
7FF5A409B000
|
unkown
|
page readonly
|
|
|
|
1EC8C518000
|
unkown
|
page read and write
|
|
|
|
7FF5A40BB000
|
unkown
|
page readonly
|
|
|
|
7FF4EC8F3000
|
unkown
|
page readonly
|
|
|
|
7FF5A842B000
|
unkown
|
page readonly
|
|
|
|
2642BA70000
|
unkown
|
page readonly
|
|
|
|
7FF4F7BB8000
|
unkown
|
page readonly
|
|
|
|
1CD152C000
|
unkown
|
page read and write
|
|
|
|
7FF52F058000
|
unkown
|
page readonly
|
|
|
|
3049000
|
unkown
|
page readonly
|
|
|
|
7FF4FB984000
|
unkown
|
page readonly
|
|
|
|
7FF562B7D000
|
unkown
|
page readonly
|
|
|
|
7FF5A3EDD000
|
unkown
|
page readonly
|
|
|
|
D1D38FF000
|
unkown
|
page read and write
|
|
|
|
22F1727A000
|
unkown
|
page read and write
|
|
|
|
7FF562A77000
|
unkown
|
page readonly
|
|
|
|
46F6DFF000
|
unkown
|
page read and write
|
|
|
|
25D93C4C000
|
unkown
|
page read and write
|
|
|
|
1DB4A650000
|
unkown
|
page readonly
|
|
|
|
7FF582577000
|
unkown
|
page readonly
|
|
|
|
7FF5E7843000
|
unkown
|
page readonly
|
|
|
|
7FF5DE0C0000
|
unkown
|
page readonly
|
|
|
|
26429C89000
|
unkown
|
page read and write
|
|
|
|
303B000
|
unkown
|
page readonly
|
|
|
|
38F9F7E000
|
unkown
|
page read and write
|
|
|
|
1C83CDC0000
|
unkown
|
page readonly
|
|
|
|
225DDEC3000
|
unkown
|
page read and write
|
|
|
|
1EC91320000
|
unkown
|
page read and write
|
|
|
|
2FED000
|
unkown
|
page readonly
|
|
|
|
7FF5DE270000
|
unkown
|
page readonly
|
|
|
|
500000
|
unkown
|
page readonly
|
|
|
|
1EC8BCA6000
|
unkown
|
page read and write
|
|
|
|
206D6CC0000
|
unkown
|
page read and write
|
|
|
|
7FF5E4CF3000
|
unkown
|
page readonly
|
|
|
|
7FF5E51FB000
|
unkown
|
page readonly
|
|
|
|
2642D182000
|
unkown
|
page read and write
|
|
|
|
26429D1D000
|
unkown
|
page read and write
|
|
|
|
206D6CC0000
|
unkown
|
page read and write
|
|
|
|
7FF57FF68000
|
unkown
|
page readonly
|
|
|
|
7FF4EC976000
|
unkown
|
page readonly
|
|
|
|
25D94600000
|
unkown
|
page readonly
|
|
|
|
25D93D08000
|
unkown
|
page read and write
|
|
|
|
30DC000
|
unkown
|
page readonly
|
|
|
|
22F170A0000
|
heap private
|
page read and write
|
|
|
|
3006000
|
unkown
|
page readonly
|
|
|
|
25D94940000
|
unkown
|
page readonly
|
|
|
|
7FF57AAA9000
|
unkown
|
page readonly
|
|
|
|
2642BDE8000
|
unkown
|
page read and write
|
|
|
|
1ADD7C60000
|
heap default
|
page read and write
|
|
|
|
7FF5E517A000
|
unkown
|
page readonly
|
|
|
|
FD0000
|
unkown
|
page read and write
|
|
|
|
1EC8BC00000
|
unkown
|
page read and write
|
|
|
|
206D6E02000
|
unkown
|
page read and write
|
|
|
|
225DDF13000
|
unkown
|
page read and write
|
|
|
|
7FF4F7C5F000
|
unkown
|
page readonly
|
|
|
|
7FF52F066000
|
unkown
|
page readonly
|
|
|
|
9DA897A000
|
unkown
|
page read and write
|
|
|
|
7FF57FC09000
|
unkown
|
page readonly
|
|
|
|
9E9C9FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E794B000
|
unkown
|
page readonly
|
|
|
|
23DB9C6F000
|
unkown
|
page read and write
|
|
|
|
7FF5A8414000
|
unkown
|
page readonly
|
|
|
|
7FF5A842F000
|
unkown
|
page readonly
|
|
|
|
23DB9ED0000
|
unkown
|
page readonly
|
|
|
|
1DB4A469000
|
unkown
|
page read and write
|
|
|
|
7FF4FB692000
|
unkown
|
page readonly
|
|
|
|
2A2E81C0000
|
unkown
|
page readonly
|
|
|
|
1DB4A3F0000
|
unkown
|
page readonly
|
|
|
|
7FF5DE2B4000
|
unkown
|
page readonly
|
|
|
|
7FF5A8369000
|
unkown
|
page readonly
|
|
|
|
7FF5B8863000
|
unkown
|
page readonly
|
|
|
|
7FF514415000
|
unkown
|
page readonly
|
|
|
|
9DA87FA000
|
unkown
|
page read and write
|
|
|
|
7FF4F83EF000
|
unkown
|
page readonly
|
|
|
|
26429C61000
|
unkown
|
page read and write
|
|
|
|
26429AA0000
|
heap default
|
page read and write
|
|
|
|
7FF4F7C9B000
|
unkown
|
page readonly
|
|
|
|
2642BF00000
|
unkown
|
page read and write
|
|
|
|
23DB9C00000
|
unkown
|
page read and write
|
|
|
|
3041000
|
unkown
|
page readonly
|
|
|
|
7FF580034000
|
unkown
|
page readonly
|
|
|
|
262E928A000
|
unkown
|
page read and write
|
|
|
|
7FF57FD4D000
|
unkown
|
page readonly
|
|
|
|
302A000
|
unkown
|
page readonly
|
|
|
|
7FF4EC8C8000
|
unkown
|
page readonly
|
|
|
|
2642BF43000
|
unkown
|
page read and write
|
|
|
|
7FF4EC77E000
|
unkown
|
page readonly
|
|
|
|
7FF5B8528000
|
unkown
|
page readonly
|
|
|
|
7FF5A3FE8000
|
unkown
|
page readonly
|
|
|
|
E3CA1FF000
|
unkown
|
page read and write
|
|
|
|
7FF5585FC000
|
unkown
|
page readonly
|
|
|
|
7FF562A91000
|
unkown
|
page readonly
|
|
|
|
56FFE7B000
|
unkown
|
page read and write
|
|
|
|
7FF5B8A08000
|
unkown
|
page readonly
|
|
|
|
7FF4FB68D000
|
unkown
|
page readonly
|
|
|
|
7FF4F7B4D000
|
unkown
|
page readonly
|
|
|
|
7FF5B88A5000
|
unkown
|
page readonly
|
|
|
|
7FF4EC773000
|
unkown
|
page readonly
|
|
|
|
7FF4F83B6000
|
unkown
|
page readonly
|
|
|
|
1EC9148B000
|
unkown
|
page read and write
|
|
|
|
262E9860000
|
unkown
|
page readonly
|
|
|
|
3300000
|
unkown
|
page readonly
|
|
|
|
7FF4EC968000
|
unkown
|
page readonly
|
|
|
|
7FF5DE3F0000
|
unkown
|
page readonly
|
|
|
|
7FF5DE051000
|
unkown
|
page readonly
|
|
|
|
1C83B213000
|
unkown
|
page read and write
|
|
|
|
7FF5E7934000
|
unkown
|
page readonly
|
|
|
|
1C903C29000
|
unkown
|
page read and write
|
|
|
|
206D5000000
|
unkown
|
page write copy
|
|
|
|
7FF57ADC4000
|
unkown
|
page readonly
|
|
|
|
1EC910A0000
|
unkown
|
page read and write
|
|
|
|
7FF52EFE3000
|
unkown
|
page readonly
|
|
|
|
1C83B202000
|
unkown
|
page read and write
|
|
|
|
26429C75000
|
unkown
|
page read and write
|
|
|
|
7FF55848D000
|
unkown
|
page readonly
|
|
|
|
26429D1E000
|
unkown
|
page read and write
|
|
|
|
6EB000
|
stack
|
page read and write
|
|
|
|
17A5825C000
|
unkown
|
page read and write
|
|
|
|
22F17269000
|
unkown
|
page read and write
|
|
|
|
1EC914B7000
|
unkown
|
page read and write
|
|
|
|
7FF5A8373000
|
unkown
|
page readonly
|
|
|
|
1C83B1D0000
|
heap default
|
page read and write
|
|
|
|
7FF5DE211000
|
unkown
|
page readonly
|
|
|
|
7FF5E4FCD000
|
unkown
|
page readonly
|
|
|
|
26429BD0000
|
unkown
|
page readonly
|
|
|
|
7FF58004F000
|
unkown
|
page readonly
|
|
|
|
2642BA70000
|
unkown
|
page read and write
|
|
|
|
7FF5146C0000
|
unkown
|
page readonly
|
|
|
|
7FF5DE243000
|
unkown
|
page readonly
|
|
|
|
1DB4BEF0000
|
unkown
|
page readonly
|
|
|
|
3045000
|
unkown
|
page readonly
|
|
|
|
7FF5820EE000
|
unkown
|
page readonly
|
|
|
|
7FF4F82FD000
|
unkown
|
page readonly
|
|
|
|
E52EDCB000
|
unkown
|
page read and write
|
|
|
|
3530000
|
heap private
|
page read and write
|
|
|
|
7FF5E501E000
|
unkown
|
page readonly
|
|
|
|
7FF573C37000
|
unkown
|
page readonly
|
|
|
|
1EC91320000
|
unkown
|
page readonly
|
|
|
|
4E0000
|
unkown
|
page read and write
|
|
|
|
1DE8FE00000
|
unkown
|
page read and write
|
|
|
|
1DB4A429000
|
unkown
|
page read and write
|
|
|
|
25D93C8E000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page readonly
|
|
|
|
7FF562B0D000
|
unkown
|
page readonly
|
|
|
|
7FF5E5127000
|
unkown
|
page readonly
|
|
|
|
206D4D00000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page readonly
|
|
|
|
17A58400000
|
unkown
|
page readonly
|
|
|
|
E3C9DFE000
|
unkown
|
page read and write
|
|
|
|
206D6F02000
|
unkown
|
page read and write
|
|
|
|
7FF5E51F6000
|
unkown
|
page readonly
|
|
|
|
1DB4A468000
|
unkown
|
page read and write
|
|
|
|
C80000
|
unkown
|
page readonly
|
|
|
|
2642BC02000
|
unkown
|
page read and write
|
|
|
|
1F4F2E000
|
unkown
|
page read and write
|
|
|
|
1EC912D0000
|
unkown
|
page read and write
|
|
|
|
1EC8BBA0000
|
unkown
|
page read and write
|
|
|
|
7FF57AEEF000
|
unkown
|
page readonly
|
|
|
|
7FF573D2F000
|
unkown
|
page readonly
|
|
|
|
7FF573B85000
|
unkown
|
page readonly
|
|
|
|
7FF4EC824000
|
unkown
|
page readonly
|
|
|
|
7FF5DDBCC000
|
unkown
|
page readonly
|
|
|
|
30CB000
|
unkown
|
page readonly
|
|
|
|
700000
|
heap default
|
page read and write
|
|
|
|
7FF573BA4000
|
unkown
|
page readonly
|
|
|
|
7FF57AEA8000
|
unkown
|
page readonly
|
|
|
|
1EC91200000
|
unkown
|
page read and write
|
|
|
|
206D4F02000
|
unkown
|
page read and write
|
|
|
|
225DDF02000
|
unkown
|
page read and write
|
|
|
|
7FF4EC994000
|
unkown
|
page readonly
|
|
|
|
7FF5DE402000
|
unkown
|
page readonly
|
|
|
|
206D4DD0000
|
unkown
|
page readonly
|
|
|
|
7FF5144DE000
|
unkown
|
page readonly
|
|
|
|
7FF558655000
|
unkown
|
page readonly
|
|
|
|
22F17262000
|
unkown
|
page read and write
|
|
|
|
B50000
|
heap default
|
page read and write
|
|
|
|
E3C99CE000
|
unkown
|
page read and write
|
|
|
|
E3C9FF7000
|
unkown
|
page read and write
|
|
|
|
25D93C53000
|
unkown
|
page read and write
|
|
|
|
7FF5E7505000
|
unkown
|
page readonly
|
|
|
|
7FF4FB7B7000
|
unkown
|
page readonly
|
|
|
|
1EC91300000
|
unkown
|
page read and write
|
|
|
|
7FF5A3F44000
|
unkown
|
page readonly
|
|
|
|
7FF5A3E6D000
|
unkown
|
page readonly
|
|
|
|
7FF4EC74D000
|
unkown
|
page readonly
|
|
|
|
22F17263000
|
unkown
|
page read and write
|
|
|
|
7FF58284D000
|
unkown
|
page readonly
|
|
|
|
1CD1FFF000
|
unkown
|
page read and write
|
|
|
|
26429D1C000
|
unkown
|
page read and write
|
|
|
|
30DC000
|
unkown
|
page readonly
|
|
|
|
26429D3E000
|
unkown
|
page read and write
|
|
|
|
7FF52ED2A000
|
unkown
|
page readonly
|
|
|
|
C46516F000
|
unkown
|
page read and write
|
|
|
|
7FF52F09D000
|
unkown
|
page readonly
|
|
|
|
7FF5DE36F000
|
unkown
|
page readonly
|
|
|
|
7FF4FB7D5000
|
unkown
|
page readonly
|
|
|
|
302A000
|
unkown
|
page readonly
|
|
|
|
7FF5146A8000
|
unkown
|
page readonly
|
|
|
|
7FF5586D4000
|
unkown
|
page readonly
|
|
|
|
7FF4F83BB000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A2D000
|
unkown
|
page readonly
|
|
|
|
1CD237A000
|
unkown
|
page read and write
|
|
|
|
7FF56281F000
|
unkown
|
page readonly
|
|
|
|
1EC8C513000
|
unkown
|
page read and write
|
|
|
|
1EC8BC93000
|
unkown
|
page read and write
|
|
|
|
7FF58286D000
|
unkown
|
page readonly
|
|
|
|
73E00FF000
|
unkown
|
page read and write
|
|
|
|
7FF57FF93000
|
unkown
|
page readonly
|
|
|
|
E3CA0FF000
|
unkown
|
page read and write
|
|
|
|
17A58C00000
|
unkown
|
page read and write
|
|
|
|
1EC8C559000
|
unkown
|
page read and write
|
|
|
|
22F17202000
|
unkown
|
page read and write
|
|
|
|
303B000
|
unkown
|
page readonly
|
|
|
|
7FF5586A8000
|
unkown
|
page readonly
|
|
|
|
7FF573AF3000
|
unkown
|
page readonly
|
|
|
|
1EC910B0000
|
unkown
|
page read and write
|
|
|
|
7FF4FBA68000
|
unkown
|
page readonly
|
|
|
|
26429AB0000
|
unkown
|
page readonly
|
|
|
|
1C83B26C000
|
unkown
|
page read and write
|
|
|
|
7FF57FF07000
|
unkown
|
page readonly
|
|
|
|
30E7000
|
unkown
|
page readonly
|
|
|
|
1EC912CC000
|
unkown
|
page readonly
|
|
|
|
2642B9F0000
|
unkown
|
page read and write
|
|
|
|
2D6AE63C000
|
unkown
|
page read and write
|
|
|
|
1C903C3F000
|
unkown
|
page read and write
|
|
|
|
7FF4EC8E5000
|
unkown
|
page readonly
|
|
|
|
23DB9C29000
|
unkown
|
page read and write
|
|
|
|
10E0000
|
unkown
|
page readonly
|
|
|
|
7FF4FB9E9000
|
unkown
|
page readonly
|
|
|
|
7FF5142D2000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page readonly
|
|
|
|
7FF5739D1000
|
unkown
|
page readonly
|
|
|
|
B81CAFF000
|
unkown
|
page read and write
|
|
|
|
1DE8FE13000
|
unkown
|
page read and write
|
|
|
|
3049000
|
unkown
|
page readonly
|
|
|
|
C46547B000
|
unkown
|
page read and write
|
|
|
|
2221A875000
|
unkown
|
page read and write
|
|
|
|
30E7000
|
unkown
|
page readonly
|
|
|
|
C70000
|
heap private
|
page read and write
|
|
|
|
7FF57ADA0000
|
unkown
|
page readonly
|
|
|
|
1DB4A469000
|
unkown
|
page read and write
|
|
|
|
7FF5E515D000
|
unkown
|
page readonly
|
|
|
|
7FF4FB827000
|
unkown
|
page readonly
|
|
|
|
22F17260000
|
unkown
|
page read and write
|
|
|
|
9DA88FB000
|
unkown
|
page read and write
|
|
|
|
7FF5DE417000
|
unkown
|
page readonly
|
|
|
|
7FF57AADA000
|
unkown
|
page readonly
|
|
|
|
22F17229000
|
unkown
|
page read and write
|
|
|
|
7FF5E4A81000
|
unkown
|
page readonly
|
|
|
|
7FF4F83AF000
|
unkown
|
page readonly
|
|
|
|
1CD227F000
|
unkown
|
page read and write
|
|
|
|
25D93C4E000
|
unkown
|
page read and write
|
|
|
|
7FF582854000
|
unkown
|
page readonly
|
|
|
|
7FF5E5085000
|
unkown
|
page readonly
|
|
|
|
7FF5A833C000
|
unkown
|
page readonly
|
|
|
|
7FF5E74F0000
|
unkown
|
page readonly
|
|
|
|
7FF562D6B000
|
unkown
|
page readonly
|
|
|
|
26429C61000
|
unkown
|
page read and write
|
|
|
|
70A000
|
heap default
|
page read and write
|
|
|
|
E45C67F000
|
unkown
|
page read and write
|
|
|
|
3035000
|
unkown
|
page readonly
|
|
|
|
2642BE12000
|
unkown
|
page read and write
|
|
|
|
7FF57AE53000
|
unkown
|
page readonly
|
|
|
|
7FF52F005000
|
unkown
|
page readonly
|
|
|
|
7FF5A4013000
|
unkown
|
page readonly
|
|
|
|
7FF580020000
|
unkown
|
page readonly
|
|
|
|
7FF4FB7AD000
|
unkown
|
page readonly
|
|
|
|
7FF5E7657000
|
unkown
|
page readonly
|
|
|
|
22F17235000
|
unkown
|
page read and write
|
|
|
|
46F6D79000
|
unkown
|
page read and write
|
|
|
|
ED5367F000
|
unkown
|
page read and write
|
|
|
|
7FF5A8026000
|
unkown
|
page readonly
|
|
|
|
2A2E8170000
|
unkown
|
page write copy
|
|
|
|
225DDD50000
|
heap default
|
page read and write
|
|
|
|
7FF562CD3000
|
unkown
|
page readonly
|
|
|
|
7FF58001B000
|
unkown
|
page readonly
|
|
|
|
2F14000
|
unkown
|
page readonly
|
|
|
|
7FF4FBA7B000
|
unkown
|
page readonly
|
|
|
|
1DE8FD90000
|
unkown
|
page read and write
|
|
|
|
7FF57AE1D000
|
unkown
|
page readonly
|
|
|
|
7FF5A3C2A000
|
unkown
|
page readonly
|
|
|
|
1EC911C0000
|
unkown
|
page read and write
|
|
|
|
7FF57AEB6000
|
unkown
|
page readonly
|
|
|
|
7FF5DE3F8000
|
unkown
|
page readonly
|
|
|
|
206D4E13000
|
unkown
|
page read and write
|
|
|
|
ED536FC000
|
unkown
|
page read and write
|
|
|
|
305D000
|
unkown
|
page readonly
|
|
|
|
3014000
|
unkown
|
page readonly
|
|
|
|
2FED000
|
unkown
|
page readonly
|
|
|
|
7FF562855000
|
unkown
|
page readonly
|
|
|
|
7FF52F09F000
|
unkown
|
page readonly
|
|
|
|
2221A650000
|
heap private
|
page read and write
|
|
|
|
26429C61000
|
unkown
|
page read and write
|
|
|
|
2221A7D0000
|
unkown
|
page readonly
|
|
|
|
7FF514600000
|
unkown
|
page readonly
|
|
|
|
7FF5DE4FD000
|
unkown
|
page readonly
|
|
|
|
7FF58286B000
|
unkown
|
page readonly
|
|
|
|
7FF5B8513000
|
unkown
|
page readonly
|
|
|
|
25D93B70000
|
heap default
|
page read and write
|
|
|
|
7FF4F7A17000
|
unkown
|
page readonly
|
|
|
|
7FF5585E7000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page readonly
|
|
|
|
3035000
|
unkown
|
page readonly
|
|
|
|
1C83B4D0000
|
unkown
|
page write copy
|
|
|
|
7FF5A3EF2000
|
unkown
|
page readonly
|
|
|
|
1EC91400000
|
unkown
|
page read and write
|
|
|
|
225DDEBD000
|
unkown
|
page read and write
|
|
|
|
D1D3BFF000
|
unkown
|
page read and write
|
|
|
|
85D000
|
unkown
|
page read and write
|
|
|
|
7FF52F05F000
|
unkown
|
page readonly
|
|
|
|
2D6AE645000
|
unkown
|
page read and write
|
|
|
|
7FF4FB9B7000
|
unkown
|
page readonly
|
|
|
|
26429C61000
|
unkown
|
page read and write
|
|
|
|
1ADD7B70000
|
unkown
|
page readonly
|
|
|
|
7FF4F7BD9000
|
unkown
|
page readonly
|
|
|
|
7FF4F787D000
|
unkown
|
page readonly
|
|
|
|
26429C6F000
|
unkown
|
page read and write
|
|
|
|
E45C97F000
|
unkown
|
page read and write
|
|
|
|
1DB4A413000
|
unkown
|
page read and write
|
|
|
|
2642D182000
|
unkown
|
page read and write
|
|
|
|
306D000
|
unkown
|
page readonly
|
|
|
|
1C83B26B000
|
unkown
|
page read and write
|
|
|
|
7FF562D28000
|
unkown
|
page readonly
|
|
|
|
1EC911F0000
|
unkown
|
page read and write
|
|
|
|
1C83B200000
|
unkown
|
page read and write
|
|
|
|
2D6AE800000
|
unkown
|
page readonly
|
|
|
|
1C83B302000
|
unkown
|
page read and write
|
|
|
|
7FF562A93000
|
unkown
|
page readonly
|
|
|
|
7FF5DE504000
|
unkown
|
page readonly
|
|
|
|
7FF514633000
|
unkown
|
page readonly
|
|
|
|
30E7000
|
unkown
|
page readonly
|
|
|
|
2221B002000
|
unkown
|
page read and write
|
|
|
|
2221AA00000
|
unkown
|
page readonly
|
|
|
|
B5A000
|
heap default
|
page read and write
|
|
|
|
7FF5DE0C3000
|
unkown
|
page readonly
|
|
|
|
1DB4A440000
|
unkown
|
page read and write
|
|
|
|
305D000
|
unkown
|
page readonly
|
|
|
|
22F17267000
|
unkown
|
page read and write
|
|
|
|
7FF562C1D000
|
unkown
|
page readonly
|
|
|
|
7FF5142A9000
|
unkown
|
page readonly
|
|
|
|
2642BD55000
|
unkown
|
page read and write
|
|
|
|
7FF5A40CF000
|
unkown
|
page readonly
|
|
|
|
2642BF83000
|
unkown
|
page read and write
|
|
|
|
30CB000
|
unkown
|
page readonly
|
|
|
|
2642BF83000
|
unkown
|
page read and write
|
|
|
|
7FF573B1E000
|
unkown
|
page readonly
|
|
|
|
D38477D000
|
unkown
|
page read and write
|
|
|
|
1EC910C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E785C000
|
unkown
|
page readonly
|
|
|
|
23DB9C85000
|
unkown
|
page read and write
|
|
|
|
73E007B000
|
unkown
|
page read and write
|
|
|
|
1EC8BC9E000
|
unkown
|
page read and write
|
|
|
|
2642D200000
|
unkown
|
page read and write
|
|
|
|
23DB9C4E000
|
unkown
|
page read and write
|
|
|
|
22F17257000
|
unkown
|
page read and write
|
|
|
|
7FF5146B6000
|
unkown
|
page readonly
|
|
|
|
7FF5DE0A0000
|
unkown
|
page readonly
|
|
|
|
2A2E8229000
|
unkown
|
page read and write
|
|
|
|
25D93C8B000
|
unkown
|
page read and write
|
|
|
|
9DA8EFB000
|
unkown
|
page read and write
|
|
|
|
1EC8BC13000
|
unkown
|
page read and write
|
|
|
|
7FF4F7BD5000
|
unkown
|
page readonly
|
|
|
|
2D6AE4A0000
|
unkown
|
page readonly
|
|
|
|
2A2E80A0000
|
unkown
|
page readonly
|
|
|
|
7FF4F786F000
|
unkown
|
page readonly
|
|
|
|
7FF582767000
|
unkown
|
page readonly
|
|
|
|
73E02FF000
|
unkown
|
page read and write
|
|
|
|
2C402013000
|
unkown
|
page read and write
|
|
|
|
7FF4FB960000
|
unkown
|
page readonly
|
|
|
|
7FF5A8400000
|
unkown
|
page readonly
|
|
|
|
22F17213000
|
unkown
|
page read and write
|
|
|
|
7FF5E7675000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page readonly
|
|
|
|
7FF58282F000
|
unkown
|
page readonly
|
|
|
|
2642BA70000
|
unkown
|
page read and write
|
|
|
|
206D6C60000
|
heap private
|
page read and write
|
|
|
|
262E9270000
|
unkown
|
page read and write
|
|
|
|
262E9313000
|
unkown
|
page read and write
|
|
|
|
2D6AE713000
|
unkown
|
page read and write
|
|
|
|
7FF5A8340000
|
unkown
|
page readonly
|
|
|
|
7FF4FB9BC000
|
unkown
|
page readonly
|
|
|
|
9DA8D7B000
|
unkown
|
page read and write
|
|
|
|
930000
|
unkown
|
page read and write
|
|
|
|
7FF4F7C9F000
|
unkown
|
page readonly
|
|
|
|
73E017A000
|
unkown
|
page read and write
|
|
|
|
7FF4FB967000
|
unkown
|
page readonly
|
|
|
|
7FF582840000
|
unkown
|
page readonly
|
|
|
|
2D6AEC60000
|
unkown
|
page readonly
|
|
|
|
7FF5E50A4000
|
unkown
|
page readonly
|
|
|
|
7FF573C27000
|
unkown
|
page readonly
|
|
|
|
7FF5A40BE000
|
unkown
|
page readonly
|
|
|
|
7FF57FC32000
|
unkown
|
page readonly
|
|
|
|
7FF52EBA6000
|
unkown
|
page readonly
|
|
|
|
1EC911F0000
|
unkown
|
page read and write
|
|
|
|
22F1726A000
|
unkown
|
page read and write
|
|
|
|
B81C8FF000
|
unkown
|
page read and write
|
|
|
|
2C403A00000
|
unkown
|
page read and write
|
|
|
|
305D000
|
unkown
|
page readonly
|
|
|
|
7FF57FD57000
|
unkown
|
page readonly
|
|
|
|
1EC8D001000
|
unkown
|
page read and write
|
|
|
|
25D93C63000
|
unkown
|
page read and write
|
|
|
|
306D000
|
unkown
|
page readonly
|
|
|
|
B81C979000
|
unkown
|
page read and write
|
|
|
|
7FF5586AF000
|
unkown
|
page readonly
|
|
|
|
25D93C29000
|
unkown
|
page read and write
|
|
|
|
7FF5E7800000
|
unkown
|
page readonly
|
|
|
|
206D4E6C000
|
unkown
|
page read and write
|
|
|
|
7FF558625000
|
unkown
|
page readonly
|
|
|
|
7FF562C63000
|
unkown
|
page readonly
|
|
|
|
26429C61000
|
unkown
|
page read and write
|
|
|
|
3009000
|
unkown
|
page readonly
|
|
|
|
22F17258000
|
unkown
|
page read and write
|
|
|
|
2221A6B0000
|
heap default
|
page read and write
|
|
|
|
2D6AE670000
|
unkown
|
page read and write
|
|
|
|
7FF5E7828000
|
unkown
|
page readonly
|
|
|
|
7FF4EC8A3000
|
unkown
|
page readonly
|
|
|
|
2FDD000
|
unkown
|
page readonly
|
|
|
|
1C903B30000
|
heap default
|
page read and write
|
|
|
|
1EC91415000
|
unkown
|
page read and write
|
|
|
|
206D4E6F000
|
unkown
|
page read and write
|
|
|
|
22F17110000
|
unkown
|
page readonly
|
|
|
|
9DA90FF000
|
unkown
|
page read and write
|
|
|
|
306D000
|
unkown
|
page readonly
|
|
|
|
1EC8C518000
|
unkown
|
page read and write
|
|
|
|
22F1725A000
|
unkown
|
page read and write
|
|
|
|
7FF57FDC7000
|
unkown
|
page readonly
|
|
|
|
2642BEC9000
|
unkown
|
page read and write
|
|
|
|
2642C310000
|
unkown
|
page read and write
|
|
|
|
3014000
|
unkown
|
page readonly
|
|
|
|
3009000
|
unkown
|
page readonly
|
|
|
|
7FF5A3FFD000
|
unkown
|
page readonly
|
|
|
|
7FF562D5E000
|
unkown
|
page readonly
|
|
|
|
1ADD7D60000
|
unkown
|
page read and write
|
|
|
|
2FDD000
|
unkown
|
page readonly
|
|
|
|
7FF4EC97B000
|
unkown
|
page readonly
|
|
|
|
7FF573C48000
|
unkown
|
page readonly
|
|
|
|
2642C310000
|
unkown
|
page read and write
|
|
|
|
1EC8BC78000
|
unkown
|
page read and write
|
|
|
|
7FF5E513C000
|
unkown
|
page readonly
|
|
|
|
7FF5A3E1A000
|
unkown
|
page readonly
|
|
|
|
9DA917B000
|
unkown
|
page read and write
|
|
|
|
7FF5E794D000
|
unkown
|
page readonly
|
|
|
|
206D8000000
|
unkown
|
page readonly
|
|
|
|
2642C410000
|
unkown
|
page read and write
|
|
|
|
2221A829000
|
unkown
|
page read and write
|
|
|
|
262E9255000
|
unkown
|
page read and write
|
|
|
|
7FF52EFD5000
|
unkown
|
page readonly
|
|
|
|
2642D102000
|
unkown
|
page read and write
|
|
|
|
17A58213000
|
unkown
|
page read and write
|
|
|
|
7FF57AABF000
|
unkown
|
page readonly
|
|
|
|
3045000
|
unkown
|
page readonly
|
|
|
|
1EC91320000
|
unkown
|
page read and write
|
|
|
|
7FF5E5148000
|
unkown
|
page readonly
|
|
|
|
1DB4A513000
|
unkown
|
page read and write
|
|
|
|
7FF5DE4DF000
|
unkown
|
page readonly
|
|
|
|
7FF562C48000
|
unkown
|
page readonly
|
|
|
|
7FF4F7420000
|
unkown
|
page readonly
|
|
|
|
7FF4FB95D000
|
unkown
|
page readonly
|
|
|
|
2D6AE68E000
|
unkown
|
page read and write
|
|
|
|
7FF57ADF7000
|
unkown
|
page readonly
|
|
|
|
2642C310000
|
unkown
|
page read and write
|
|
|
|
2FDD000
|
unkown
|
page readonly
|
|
|
|
3009000
|
unkown
|
page readonly
|
|
|
|
304C000
|
unkown
|
page readonly
|
|
|
|
206D6F0A000
|
unkown
|
page read and write
|
|
|
|
2C401EB0000
|
heap private
|
page read and write
|
|
|
|
7FF57ADFC000
|
unkown
|
page readonly
|
|
|
|
7FD000
|
unkown
|
page read and write
|
|
|
|
1EC91020000
|
unkown
|
page read and write
|
|
|
|
770000
|
unkown
|
page readonly
|
|
|
|
7FF5E793E000
|
unkown
|
page readonly
|
|
|
|
7FF5DE51B000
|
unkown
|
page readonly
|
|
|
|
1EC8C559000
|
unkown
|
page read and write
|
|
|
|
7FF5B87ED000
|
unkown
|
page readonly
|
|
|
|
7FF4F833A000
|
unkown
|
page readonly
|
|
|
|
7FF4EC9AB000
|
unkown
|
page readonly
|
|
|
|
7FF5A3FDC000
|
unkown
|
page readonly
|
|
|
|
1EC912A0000
|
unkown
|
page readonly
|
|
|
|
E3C9C7E000
|
unkown
|
page read and write
|
|
|
|
302FB7E000
|
unkown
|
page read and write
|
|
|
|
1DE8FD80000
|
unkown
|
page readonly
|
|
|
|
2221A802000
|
unkown
|
page read and write
|
|
|
|
7FF52EF57000
|
unkown
|
page readonly
|
|
|
|
7FF5DE42C000
|
unkown
|
page readonly
|
|
|
|
7FF57AEC0000
|
unkown
|
page readonly
|
|
|
|
7FF5DE09A000
|
unkown
|
page readonly
|
|
|
|
7FF5DE44D000
|
unkown
|
page readonly
|
|
|
|
7A0000
|
heap default
|
page read and write
|
|
|
|
7FF4F7C8E000
|
unkown
|
page readonly
|
|
|
|
3059000
|
unkown
|
page readonly
|
|
|
|
7FF5B8957000
|
unkown
|
page readonly
|
|
|
|
2FDD000
|
unkown
|
page readonly
|
|
|
|
7FF58283B000
|
unkown
|
page readonly
|
|
|
|
510000
|
unkown
|
page readonly
|
|
|
|
7FF5E521E000
|
unkown
|
page readonly
|
|
|
|
206D4E53000
|
unkown
|
page read and write
|
|
|
|
26429C77000
|
unkown
|
page read and write
|
|
|
|
1EC91640000
|
unkown
|
page readonly
|
|
|
|
262E9202000
|
unkown
|
page read and write
|
|
|
|
7FF573B7F000
|
unkown
|
page readonly
|
|
|
|
30D1000
|
unkown
|
page readonly
|
|
|
|
9DA8C7B000
|
unkown
|
page read and write
|
|
|
|
9DA887F000
|
unkown
|
page read and write
|
|
|
|
1EC91491000
|
unkown
|
page read and write
|
|
|
|
7FF57AEDE000
|
unkown
|
page readonly
|
|
|
|
7FF52F09F000
|
unkown
|
page readonly
|
|
|
|
3006000
|
unkown
|
page readonly
|
|
|
|
7FF57AE25000
|
unkown
|
page readonly
|
|
|
|
1EC8BC74000
|
unkown
|
page read and write
|
|
|
|
1C903C00000
|
unkown
|
page read and write
|
|
|
|
206D6F1C000
|
unkown
|
page read and write
|
|
|
|
3074000
|
unkown
|
page readonly
|
|
|
|
7FF573581000
|
unkown
|
page readonly
|
|
|
|
206D4EC4000
|
unkown
|
page read and write
|
|
|
|
2642BA10000
|
heap private
|
page read and write
|
|
|
|
7FF5E5214000
|
unkown
|
page readonly
|
|
|
|
7FF5B895C000
|
unkown
|
page readonly
|
|
|
|
2C401F10000
|
heap default
|
page read and write
|
|
|
|
AC0000
|
unkown
|
page readonly
|
|
|
|
206D6F23000
|
unkown
|
page read and write
|
|
|
|
9DA8AFB000
|
unkown
|
page read and write
|
|
|
|
9DA8E7D000
|
unkown
|
page read and write
|
|
|
|
7FF5B8968000
|
unkown
|
page readonly
|
|
|
|
7FF5DE463000
|
unkown
|
page readonly
|
|
|
|
1EC8BC29000
|
unkown
|
page read and write
|
|
|
|
2642BA90000
|
unkown
|
page readonly
|
|
|
|
3074000
|
unkown
|
page readonly
|
|
|
|
30CB000
|
unkown
|
page readonly
|
|
|
|
262E9213000
|
unkown
|
page read and write
|
|
|
|
7FF4F82F7000
|
unkown
|
page readonly
|
|
|
|
302FBFE000
|
unkown
|
page read and write
|
|
|
|
225DDE29000
|
unkown
|
page read and write
|
|
|
|
ED5357A000
|
unkown
|
page read and write
|
|
|
|
26429C62000
|
unkown
|
page read and write
|
|
|
|
7FF5B89B5000
|
unkown
|
page readonly
|
|
|
|
E3C994B000
|
unkown
|
page read and write
|
|
|
|
7FF5B889F000
|
unkown
|
page readonly
|
|
|
|
7FF5A3914000
|
unkown
|
page readonly
|
|
|
|
7FF562C27000
|
unkown
|
page readonly
|
|
|
|
1DB4A600000
|
unkown
|
page write copy
|
|
|
|
1EC91320000
|
unkown
|
page read and write
|
|
|
|
7FF5142DA000
|
unkown
|
page readonly
|
|
|
|
1DE90000000
|
unkown
|
page readonly
|
|
|
|
7FF57AEBB000
|
unkown
|
page readonly
|
|
|
|
7FF58256D000
|
unkown
|
page readonly
|
|
|
|
7FF57FF24000
|
unkown
|
page readonly
|
|
|
|
7FF5737F3000
|
unkown
|
page readonly
|
|
|
|
2642BE53000
|
unkown
|
page read and write
|
|
|
|
E3C9D75000
|
unkown
|
page read and write
|
|
|
|
1F527F000
|
unkown
|
page read and write
|
|
|
|
7FF5DDC9D000
|
unkown
|
page readonly
|
|
|
|
206D6C40000
|
unkown
|
page read and write
|
|
|
|
1ADD7C6B000
|
heap default
|
page read and write
|
|
|
|
7FF5A3EE6000
|
unkown
|
page readonly
|
|
|
|
7FF5B899A000
|
unkown
|
page readonly
|
|
|
|
25D93C13000
|
unkown
|
page read and write
|
|
|
|
A1A000
|
heap default
|
page read and write
|
|
|
|
7FF5B8A4B000
|
unkown
|
page readonly
|
|
|
|
26429D5E000
|
unkown
|
page read and write
|
|
|
|
7FF4F82B0000
|
unkown
|
page readonly
|
|
|
|
2642D082000
|
unkown
|
page read and write
|
|
|
|
23DB9C46000
|
unkown
|
page read and write
|
|
|
|
9DA8CFB000
|
unkown
|
page read and write
|
|
|
|
7FF4F7C58000
|
unkown
|
page readonly
|
|
|
|
2642D000000
|
unkown
|
page read and write
|
|
|
|
7FF573D2F000
|
unkown
|
page readonly
|
|
|
|
2FF2000
|
unkown
|
page readonly
|
|
|
|
26429C00000
|
unkown
|
page read and write
|
|
|
|
2642C010000
|
unkown
|
page read and write
|
|
|
|
30DC000
|
unkown
|
page readonly
|
|
|
|
550000
|
heap default
|
page read and write
|
|
|
|
7FF57FF5C000
|
unkown
|
page readonly
|
|
|
|
7FF5E789A000
|
unkown
|
page readonly
|
|
|
|
7FF5146CD000
|
unkown
|
page readonly
|
|
|
|
7FF4F8325000
|
unkown
|
page readonly
|
|
|
|
C4655FF000
|
unkown
|
page read and write
|
|
|
|
3055000
|
unkown
|
page readonly
|
|
|
|
1C83B26C000
|
unkown
|
page read and write
|
|
|
|
1EC8BB00000
|
heap private
|
page read and write
|
|
|
|
7FF5E77EF000
|
unkown
|
page readonly
|
|
|
|
30DC000
|
unkown
|
page readonly
|
|
|
|
1EC91290000
|
unkown
|
page read and write
|
|
|
|
7FF514653000
|
unkown
|
page readonly
|
|
|
|
1EC8C3E0000
|
unkown
|
page readonly
|
|
|
|
2A2E9CA0000
|
unkown
|
page readonly
|
|
|
|
262E9070000
|
unkown
|
page readonly
|
|
|
|
7FF573C69000
|
unkown
|
page readonly
|
|
|
|
2642D142000
|
unkown
|
page read and write
|
|
|
|
30D1000
|
unkown
|
page readonly
|
|
|
|
7FF5E521B000
|
unkown
|
page readonly
|
|
|
|
2C402250000
|
unkown
|
page readonly
|
|
|
|
2D6AE688000
|
unkown
|
page read and write
|
|
|
|
D1D3EFF000
|
unkown
|
page read and write
|
|
|
|
22F17261000
|
unkown
|
page read and write
|
|
|
|
7FF562CA9000
|
unkown
|
page readonly
|
|
|
|
1EC9142F000
|
unkown
|
page read and write
|
|
|
|
7FF4FBA9B000
|
unkown
|
page readonly
|
|
|
|
2D6AE67C000
|
unkown
|
page read and write
|
|
|
|
7FF562C9D000
|
unkown
|
page readonly
|
|
|
|
23DBA402000
|
unkown
|
page read and write
|
|
|
|
2642BDBC000
|
unkown
|
page read and write
|
|
|
|
225DDECE000
|
unkown
|
page read and write
|
|
|
|
7FF56295A000
|
unkown
|
page readonly
|
|
|
|
1DE900D0000
|
unkown
|
page readonly
|
|
|
|
2D6AE580000
|
unkown
|
page readonly
|
|
|
|
7FF5E7832000
|
unkown
|
page readonly
|
|
|
|
1EC8BED0000
|
unkown
|
page readonly
|
|
|
|
7FF573CE8000
|
unkown
|
page readonly
|
|
|
|
1EC911C8000
|
unkown
|
page read and write
|
|
|
|
2D6AE64F000
|
unkown
|
page read and write
|
|
|
|
7FF562910000
|
unkown
|
page readonly
|
|
|
|
1CD1A7B000
|
unkown
|
page read and write
|
|
|
|
8F1E47E000
|
unkown
|
page read and write
|
|
|
|
7FF4F80A6000
|
unkown
|
page readonly
|
|
|
|
7FF5DE3D7000
|
unkown
|
page readonly
|
|
|
|
1ADD9670000
|
unkown
|
page readonly
|
|
|
|
7FF562C20000
|
unkown
|
page readonly
|
|
|
|
7FF5146BB000
|
unkown
|
page readonly
|
|
|
|
1C83B1E0000
|
unkown
|
page readonly
|
|
|
|
B81CA7F000
|
unkown
|
page read and write
|
|
|
|
25D93C70000
|
unkown
|
page read and write
|
|
|
|
7FF5B86F1000
|
unkown
|
page readonly
|
|
|
|
7FF4FB9C0000
|
unkown
|
page readonly
|
|
|
|
7FF5A842F000
|
unkown
|
page readonly
|
|
|
|
2642C610000
|
unkown
|
page read and write
|
|
|
|
7FF5A83E8000
|
unkown
|
page readonly
|
|
|
|
206D6F33000
|
unkown
|
page read and write
|
|
|
|
3059000
|
unkown
|
page readonly
|
|
|
|
7FF582752000
|
unkown
|
page readonly
|
|
|
|
9DA8DFB000
|
unkown
|
page read and write
|
|
|
|
7FF5E7673000
|
unkown
|
page readonly
|
|
|
|
30D5000
|
unkown
|
page readonly
|
|
|
|
23DB9E00000
|
unkown
|
page readonly
|
|
|
|
1EC8BC8E000
|
unkown
|
page read and write
|
|
|
|
7FF5E520D000
|
unkown
|
page readonly
|
|
|
|
7FF4EC8DD000
|
unkown
|
page readonly
|
|
|
|
26429D70000
|
unkown
|
page read and write
|
|
|
|
7FF4FB9F3000
|
unkown
|
page readonly
|
|
|
|
2FED000
|
unkown
|
page readonly
|
|
|
|
1EC91380000
|
unkown
|
page readonly
|
|
|
|
22F17246000
|
unkown
|
page read and write
|
|
|
|
2642C210000
|
unkown
|
page read and write
|
|
|
|
7FF4FB9E5000
|
unkown
|
page readonly
|
|
|
|
934000
|
unkown
|
page read and write
|
|
|
|
2D6AE490000
|
heap default
|
page read and write
|
|
|
|
30D5000
|
unkown
|
page readonly
|
|
|
|
2642BDAC000
|
unkown
|
page read and write
|
|
|
|
7FF5E5043000
|
unkown
|
page readonly
|
|
|
|
ED53779000
|
unkown
|
page read and write
|
|
|
|
303B000
|
unkown
|
page readonly
|
|
|
|
7FF58262C000
|
unkown
|
page readonly
|
|
|
|
26429D02000
|
unkown
|
page read and write
|
|
|
|
D3845FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DE413000
|
unkown
|
page readonly
|
|
|
|
22F17302000
|
unkown
|
page read and write
|
|
|
|
22F17242000
|
unkown
|
page read and write
|
|
|
|
7FF562D2F000
|
unkown
|
page readonly
|
|
|
|
1C83B313000
|
unkown
|
page read and write
|
|
|
|
30E7000
|
unkown
|
page readonly
|
|
|
|
7FF5146EF000
|
unkown
|
page readonly
|
|
|
|
262E923C000
|
unkown
|
page read and write
|
|
|
|
7FF5A83EF000
|
unkown
|
page readonly
|
|
|
|
30E7000
|
unkown
|
page readonly
|
|
|
|
7FF55829F000
|
unkown
|
page readonly
|
|
|
|
1DB4A468000
|
unkown
|
page read and write
|
|
|
|
2642D142000
|
unkown
|
page read and write
|
|
|
|
7FF5E507F000
|
unkown
|
page readonly
|
|
|
|
FD4000
|
unkown
|
page read and write
|
|
|
|
7FF573D14000
|
unkown
|
page readonly
|
|
|
|
17A58202000
|
unkown
|
page read and write
|
|
|
|
7FF573D1E000
|
unkown
|
page readonly
|
|
|
|
2C40202A000
|
unkown
|
page read and write
|
|
|
|
7FF4F8355000
|
unkown
|
page readonly
|
|
|
|
7FF5146D4000
|
unkown
|
page readonly
|
|
|
|
2642BEA4000
|
unkown
|
page read and write
|
|
|
|
7FF5DE40C000
|
unkown
|
page readonly
|
|
|
|
7FF562D4D000
|
unkown
|
page readonly
|
|
|
|
30E7000
|
unkown
|
page readonly
|
|
|
|
7FF4F831D000
|
unkown
|
page readonly
|
|
|
|
7FF52F084000
|
unkown
|
page readonly
|
|
|
|
2221A800000
|
unkown
|
page read and write
|
|
|
|
C4659FF000
|
unkown
|
page read and write
|
|
|
|
25D93B10000
|
heap private
|
page read and write
|
|
|
|
7FF5586EF000
|
unkown
|
page readonly
|
|
|
|
3055000
|
unkown
|
page readonly
|
|
|
|
8F1E4FB000
|
unkown
|
page read and write
|
|
|
|
7FF4F7BB0000
|
unkown
|
page readonly
|
|
|
|
2CE2000
|
unkown
|
page readonly
|
|
|
|
1DB4A320000
|
unkown
|
page readonly
|
|
|
|
9DA877A000
|
unkown
|
page read and write
|
|
|
|
2642BA70000
|
unkown
|
page read and write
|
|
|
|
26429CC6000
|
unkown
|
page read and write
|
|
|
|
7FF4FBAAF000
|
unkown
|
page readonly
|
|
|
|
23DB9D02000
|
unkown
|
page read and write
|
|
|
|
1EC91320000
|
unkown
|
page read and write
|
|
|
|
25D93C47000
|
unkown
|
page read and write
|
|
|
|
7FF5A841E000
|
unkown
|
page readonly
|
|
|
|
262E9308000
|
unkown
|
page read and write
|
|
|
|
3018000
|
unkown
|
page readonly
|
|
|
|
9DA8B79000
|
unkown
|
page read and write
|
|
|
|
17A584D0000
|
unkown
|
page readonly
|
|
|
|
D383EBC000
|
unkown
|
page read and write
|
|
|
|
9E9C29B000
|
unkown
|
page read and write
|
|
|
|
7FF573C73000
|
unkown
|
page readonly
|
|
|
|
7FF562C44000
|
unkown
|
page readonly
|
|
|
|
7FF4F82D3000
|
unkown
|
page readonly
|
|
|
|
1EC914B8000
|
unkown
|
page read and write
|
|
|
|
7FF562C7C000
|
unkown
|
page readonly
|
|
|
|
D6B000
|
stack
|
page read and write
|
|
|
|
7FF5DE50E000
|
unkown
|
page readonly
|
|
|
|
7FF5DE394000
|
unkown
|
page readonly
|
|
|
|
E45C779000
|
unkown
|
page read and write
|
|
|
|
7FF57AACD000
|
unkown
|
page readonly
|
|
|
|
7FF4F79A7000
|
unkown
|
page readonly
|
|
|
|
7FF5142CD000
|
unkown
|
page readonly
|
|
|
|
206D6CB0000
|
unkown
|
page readonly
|
|
|
|
1DB4A468000
|
unkown
|
page read and write
|
|
|
|
1DE8FE56000
|
unkown
|
page read and write
|
|
|
|
7FF4F83DE000
|
unkown
|
page readonly
|
|
|
|
30D5000
|
unkown
|
page readonly
|
|
|
|
7FF4F82C0000
|
unkown
|
page readonly
|
|
|
|
7FF58260D000
|
unkown
|
page readonly
|
|
|
|
8F1E97D000
|
unkown
|
page read and write
|
|
|
|
73E0279000
|
unkown
|
page read and write
|
|
|
|
1EC91070000
|
unkown
|
page readonly
|
|
|
|
7FF52EFA7000
|
unkown
|
page readonly
|
|
|
|
7FF562CBA000
|
unkown
|
page readonly
|
|
|
|
2642C410000
|
unkown
|
page read and write
|
|
|
|
7FF5E7916000
|
unkown
|
page readonly
|
|
|
|
2CE2000
|
unkown
|
page readonly
|
|
|
|
3059000
|
unkown
|
page readonly
|
|
|
|
10F0000
|
unkown
|
page readonly
|
|
|
|
3014000
|
unkown
|
page readonly
|
|
|
|
1DE8FE7A000
|
unkown
|
page read and write
|
|
|
|
7FF4F7424000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A1B000
|
unkown
|
page readonly
|
|
|
|
7FF57FF7D000
|
unkown
|
page readonly
|
|
|
|
7FF5E5165000
|
unkown
|
page readonly
|
|
|
|
1EC91620000
|
unkown
|
page readonly
|
|
|
|
E52F07E000
|
unkown
|
page read and write
|
|
|
|
30CB000
|
unkown
|
page readonly
|
|
|
|
3041000
|
unkown
|
page readonly
|
|
|
|
7FF5E787D000
|
unkown
|
page readonly
|
|
|
|
7FF5B8813000
|
unkown
|
page readonly
|
|
|
|
7FF5E793B000
|
unkown
|
page readonly
|
|
|
|
7FF57AAA5000
|
unkown
|
page readonly
|
|
|
|
7FF5DE1DF000
|
unkown
|
page readonly
|
|
|
|
1C903B90000
|
unkown
|
page readonly
|
|
|
|
7FF5DE459000
|
unkown
|
page readonly
|
|
|
|
7FF5583A3000
|
unkown
|
page readonly
|
|
|
|
2FF1000
|
unkown
|
page readonly
|
|
|
|
7FF51463A000
|
unkown
|
page readonly
|
|
|
|
7FF5B8985000
|
unkown
|
page readonly
|
|
|
|
17A58170000
|
unkown
|
page readonly
|
|
|
|
7FF4F7882000
|
unkown
|
page readonly
|
|
|
|
2642C210000
|
unkown
|
page read and write
|
|
|
|
3059000
|
unkown
|
page readonly
|
|
|
|
307D000
|
unkown
|
page readonly
|
|
|
|
7FF57FF60000
|
unkown
|
page readonly
|
|
|
|
1EC911CE000
|
unkown
|
page read and write
|
|
|
|
2642C310000
|
unkown
|
page read and write
|
|
|
|
7FF5DE2BD000
|
unkown
|
page readonly
|
|
|
|
7FF4F7BEA000
|
unkown
|
page readonly
|
|
|
|
1DE8FD60000
|
heap default
|
page read and write
|
|
|
|
23DB9C3C000
|
unkown
|
page read and write
|
|
|
|
7FF57FF00000
|
unkown
|
page readonly
|
|
|
|
1C83B254000
|
unkown
|
page read and write
|
|
|
|
2221A85B000
|
unkown
|
page read and write
|
|
|
|
2A2E8030000
|
heap private
|
page read and write
|
|
|
|
7FF57FC1F000
|
unkown
|
page readonly
|
|
|
|
26429CF1000
|
unkown
|
page read and write
|
|
|
|
38FA1FD000
|
unkown
|
page read and write
|
|
|
|
25D93D13000
|
unkown
|
page read and write
|
|
|
|
7FF4F7C70000
|
unkown
|
page readonly
|
|
|
|
7FF57AE08000
|
unkown
|
page readonly
|
|
|
|
43C000
|
unkown
|
page read and write
|
|
|
|
206D4E00000
|
unkown
|
page read and write
|
|
|
|
1F52FD000
|
unkown
|
page read and write
|
|
|
|
206D4E6F000
|
unkown
|
page read and write
|
|
|
|
1C83B267000
|
unkown
|
page read and write
|
|
|
|
7FF514629000
|
unkown
|
page readonly
|
|
|
|
7FF5DE4EB000
|
unkown
|
page readonly
|
|
|
|
1CD1F7E000
|
unkown
|
page read and write
|
|
|
|
25D93C63000
|
unkown
|
page read and write
|
|
|
|
3045000
|
unkown
|
page readonly
|
|
|
|
7FF562D54000
|
unkown
|
page readonly
|
|
|
|
ED535FA000
|
unkown
|
page read and write
|
|
|
|
B81C5CB000
|
unkown
|
page read and write
|
|
|
|
7FF57FF89000
|
unkown
|
page readonly
|
|
|
|
7FF4F7A8E000
|
unkown
|
page readonly
|
|
|
|
E45C87E000
|
unkown
|
page read and write
|
|
|
|
17A581C0000
|
unkown
|
page read and write
|
|
|
|
2642B5A0000
|
unkown
|
page read and write
|
|
|
|
1EC8C502000
|
unkown
|
page read and write
|
|
|
|
7FF5E5137000
|
unkown
|
page readonly
|
|
|
|
7FF5586EF000
|
unkown
|
page readonly
|
|
|
|
8F1E1BE000
|
unkown
|
page read and write
|
|
|
|
1C83CCC0000
|
unkown
|
page read and write
|
|
|
|
1C83B23F000
|
unkown
|
page read and write
|
|
|
|
22F17860000
|
unkown
|
page read and write
|
|
|
|
7FF4F799D000
|
unkown
|
page readonly
|
|
|
|
7FF573C3C000
|
unkown
|
page readonly
|
|
|
|
73E01FF000
|
unkown
|
page read and write
|
|
|
|
7FF58002D000
|
unkown
|
page readonly
|
|
|
|
2D6AE590000
|
unkown
|
page read and write
|
|
|
|
30D1000
|
unkown
|
page readonly
|
|
|
|
1DE8FD70000
|
unkown
|
page readonly
|
|
|
|
7FF5A3FB2000
|
unkown
|
page readonly
|
|
|
|
7FF4EC8B7000
|
unkown
|
page readonly
|
|
|
|
7FF4F83EF000
|
unkown
|
page readonly
|
|
|
|
7FF4F83ED000
|
unkown
|
page readonly
|
|
|
|
7FF4FB9DD000
|
unkown
|
page readonly
|
|
|
|
2221A813000
|
unkown
|
page read and write
|
|
|
|
7FF5B8609000
|
unkown
|
page readonly
|
|
|
|
25D93D02000
|
unkown
|
page read and write
|
|
|
|
262E924B000
|
unkown
|
page read and write
|
|
|
|
225DDE44000
|
unkown
|
page read and write
|
|
|
|
304C000
|
unkown
|
page readonly
|
|
|
|
D3848FD000
|
unkown
|
page read and write
|
|
|
|
7FF58003E000
|
unkown
|
page readonly
|
|
|
|
26429D5F000
|
unkown
|
page read and write
|
|
|
|
ED5347A000
|
unkown
|
page read and write
|
|
|
|
E52F4FF000
|
unkown
|
page read and write
|
|
|
|
26429E00000
|
unkown
|
page readonly
|
|
|
|
2C402200000
|
unkown
|
page write copy
|
|
|
|
1EC912E0000
|
unkown
|
page read and write
|
|
|
|
2642BD19000
|
unkown
|
page read and write
|
|
|
|
1CD2179000
|
unkown
|
page read and write
|
|
|
|
307D000
|
unkown
|
page readonly
|
|
|
|
721000
|
heap default
|
page read and write
|
|
There are 1728 hidden memdumps, click here to show them.