Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
documents-351331057.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\0604[1].gif
|
PE32+ executable (DLL) (native) x86-64, for MS Windows
|
downloaded
|
|
|
|
C:\Users\user\Desktop\~$documents-351331057.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\ghnrope2.dll
|
PE32+ executable (DLL) (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\0604[1].gif
|
PE32+ executable (DLL) (native) x86-64, for MS Windows
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\9E06A6E6-90D2-41D3-A4CC-ADC48F853023
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\42C71EAC.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\55656197.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B92116BD.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CE32759A.png
|
PNG image data, 364 x 139, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4BA10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:34:24 2019, mtime=Fri Apr 9 22:50:30 2021, atime=Fri Apr 9 22:50:30 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\documents-351331057.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 13:47:05
2020, mtime=Fri Apr 9 22:50:30 2021, atime=Fri Apr 9 22:50:30 2021, length=97555, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\1CA10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4E29F9DF.png
|
PNG image data, 364 x 139, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\52523888.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\75FB0EE9.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\7A7197D6.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\4CCE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabDA59.tmp
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarDA5A.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\1DCE0000
|
data
|
dropped
|
|
There are 18 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\ghnrope
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s ..\ghnrope
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s
|
|
There are 2 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
http://runolfsson-jayde07s.ru.com/ind.html
|
8.211.4.209
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
http://cremin-ian07u.ru.com/ind.html
|
8.211.4.209
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
There are 91 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
runolfsson-jayde07s.ru.com
|
8.211.4.209
|
|
|
|
cremin-ian07u.ru.com
|
8.211.4.209
|
|
|
|
cesiroinsurance.com
|
67.222.38.97
|
|
|
|
shalombaptistchapel.com
|
162.251.80.27
|
|
|
|
innermetransformation.com
|
173.201.252.173
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
162.251.80.27
|
shalombaptistchapel.com
|
United States
|
|
|
|
67.222.38.97
|
cesiroinsurance.com
|
United States
|
|
|
|
173.201.252.173
|
innermetransformation.com
|
United States
|
|
|
|
8.211.4.209
|
runolfsson-jayde07s.ru.com
|
Singapore
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
&6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
!&6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1A38F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1A96B
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1AAB3
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1ABBD
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1AC68
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
d46
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2C76E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2CD3A
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
) 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC784
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECA9F
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECBF6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECCD1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECD8C
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
7*4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F6CC7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F7F6D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 174 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
279B000
|
unkown
|
page readonly
|
|
|
|
38417FB000
|
unkown
|
page read and write
|
|
|
|
1F4AD210000
|
unkown
|
page read and write
|
|
|
|
7FF50B9ED000
|
unkown
|
page readonly
|
|
|
|
1F4AAC68000
|
unkown
|
page read and write
|
|
|
|
2900000
|
heap default
|
page read and write
|
|
|
|
28485A56000
|
unkown
|
page read and write
|
|
|
|
7FF591B32000
|
unkown
|
page readonly
|
|
|
|
43603FB000
|
unkown
|
page read and write
|
|
|
|
2343F86A000
|
unkown
|
page read and write
|
|
|
|
7FF5BC053000
|
unkown
|
page readonly
|
|
|
|
7FF5A08B3000
|
unkown
|
page readonly
|
|
|
|
7FF51C17A000
|
unkown
|
page readonly
|
|
|
|
7FF5A094F000
|
unkown
|
page readonly
|
|
|
|
7FF538C5F000
|
unkown
|
page readonly
|
|
|
|
7FF51C13C000
|
unkown
|
page readonly
|
|
|
|
2171000
|
unkown
|
page readonly
|
|
|
|
7FF5C65B0000
|
unkown
|
page readonly
|
|
|
|
3841C7F000
|
unkown
|
page read and write
|
|
|
|
2A88000
|
unkown
|
page readonly
|
|
|
|
2770000
|
unkown
|
page readonly
|
|
|
|
7FF503523000
|
unkown
|
page readonly
|
|
|
|
1BB1FC02000
|
unkown
|
page read and write
|
|
|
|
7FF50BC0F000
|
unkown
|
page readonly
|
|
|
|
7FF5C6496000
|
unkown
|
page readonly
|
|
|
|
7FF53B3E0000
|
unkown
|
page readonly
|
|
|
|
1F4AAA10000
|
heap default
|
page read and write
|
|
|
|
7FF5C6DA6000
|
unkown
|
page readonly
|
|
|
|
17418710000
|
unkown
|
page readonly
|
|
|
|
7FF591BB5000
|
unkown
|
page readonly
|
|
|
|
7FF591C0F000
|
unkown
|
page readonly
|
|
|
|
7FF5C1750000
|
unkown
|
page readonly
|
|
|
|
7FF505EB7000
|
unkown
|
page readonly
|
|
|
|
7FF5C6AE7000
|
unkown
|
page readonly
|
|
|
|
1B1B2260000
|
unkown
|
page readonly
|
|
|
|
DA4CBAF000
|
unkown
|
page read and write
|
|
|
|
7FF5389C5000
|
unkown
|
page readonly
|
|
|
|
3040000
|
heap default
|
page read and write
|
|
|
|
3140000
|
unkown
|
page readonly
|
|
|
|
21258813000
|
unkown
|
page read and write
|
|
|
|
2459000
|
unkown
|
page readonly
|
|
|
|
27CD000
|
unkown
|
page readonly
|
|
|
|
21EF2C13000
|
unkown
|
page read and write
|
|
|
|
24C4000
|
unkown
|
page readonly
|
|
|
|
1BB1F661000
|
unkown
|
page read and write
|
|
|
|
1F4ACBE8000
|
unkown
|
page read and write
|
|
|
|
7FF50FF50000
|
unkown
|
page readonly
|
|
|
|
17418490000
|
heap default
|
page read and write
|
|
|
|
249C000
|
unkown
|
page read and write
|
|
|
|
7FF505844000
|
unkown
|
page readonly
|
|
|
|
2343F859000
|
unkown
|
page read and write
|
|
|
|
7FF50BB24000
|
unkown
|
page readonly
|
|
|
|
2159000
|
unkown
|
page readonly
|
|
|
|
1B1B1A60000
|
unkown
|
page readonly
|
|
|
|
2D5A000
|
unkown
|
page read and write
|
|
|
|
7FF53B3CF000
|
unkown
|
page readonly
|
|
|
|
7FF5D64F3000
|
unkown
|
page readonly
|
|
|
|
1F4AD410000
|
unkown
|
page read and write
|
|
|
|
7FF5BC0ED000
|
unkown
|
page readonly
|
|
|
|
25F25480000
|
unkown
|
page read and write
|
|
|
|
7FF53B3FE000
|
unkown
|
page readonly
|
|
|
|
7FF50BB93000
|
unkown
|
page readonly
|
|
|
|
23833450000
|
unkown
|
page readonly
|
|
|
|
1F4ACB39000
|
unkown
|
page read and write
|
|
|
|
7FF5D6637000
|
unkown
|
page readonly
|
|
|
|
25E0CA57000
|
unkown
|
page read and write
|
|
|
|
2383365F000
|
unkown
|
page read and write
|
|
|
|
7FF505A83000
|
unkown
|
page readonly
|
|
|
|
2471B03F000
|
unkown
|
page read and write
|
|
|
|
1B1B1C67000
|
unkown
|
page read and write
|
|
|
|
25F236FC000
|
unkown
|
page read and write
|
|
|
|
7FF50FF83000
|
unkown
|
page readonly
|
|
|
|
7FF591B93000
|
unkown
|
page readonly
|
|
|
|
7FF50361C000
|
unkown
|
page readonly
|
|
|
|
25F2367B000
|
unkown
|
page read and write
|
|
|
|
7FF591C1E000
|
unkown
|
page readonly
|
|
|
|
25F25480000
|
unkown
|
page read and write
|
|
|
|
284857A0000
|
unkown
|
page read and write
|
|
|
|
7FF5034DE000
|
unkown
|
page readonly
|
|
|
|
7FF505D8E000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE10000
|
unkown
|
page readonly
|
|
|
|
7FF538840000
|
unkown
|
page readonly
|
|
|
|
1C8EF455000
|
unkown
|
page read and write
|
|
|
|
7FF5A092D000
|
unkown
|
page readonly
|
|
|
|
2343F86C000
|
unkown
|
page read and write
|
|
|
|
3841B7E000
|
unkown
|
page read and write
|
|
|
|
7FF4FF6BC000
|
unkown
|
page readonly
|
|
|
|
21EF2C02000
|
unkown
|
page read and write
|
|
|
|
7FF50FEED000
|
unkown
|
page readonly
|
|
|
|
1F4ACC00000
|
unkown
|
page readonly
|
|
|
|
2BE0000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE3B000
|
unkown
|
page readonly
|
|
|
|
28485920000
|
unkown
|
page readonly
|
|
|
|
7FF538BAC000
|
unkown
|
page readonly
|
|
|
|
3260000
|
heap private
|
page read and write
|
|
|
|
7FF5266AA000
|
unkown
|
page readonly
|
|
|
|
DC6F07E000
|
unkown
|
page read and write
|
|
|
|
21258913000
|
unkown
|
page read and write
|
|
|
|
1F4ACB09000
|
unkown
|
page read and write
|
|
|
|
7FF505C73000
|
unkown
|
page readonly
|
|
|
|
B303E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5E2F66000
|
unkown
|
page readonly
|
|
|
|
7FF591B47000
|
unkown
|
page readonly
|
|
|
|
28485790000
|
unkown
|
page read and write
|
|
|
|
2471B029000
|
unkown
|
page read and write
|
|
|
|
7FF505F7F000
|
unkown
|
page readonly
|
|
|
|
25E0CA02000
|
unkown
|
page read and write
|
|
|
|
27AC000
|
unkown
|
page readonly
|
|
|
|
1C8EF413000
|
unkown
|
page read and write
|
|
|
|
2847000
|
unkown
|
page readonly
|
|
|
|
21258F40000
|
unkown
|
page readonly
|
|
|
|
2BC0000
|
unkown
|
page readonly
|
|
|
|
2301FCD0000
|
heap default
|
page read and write
|
|
|
|
2471B068000
|
unkown
|
page read and write
|
|
|
|
2AA0000
|
unkown
|
page readonly
|
|
|
|
7FF5BBE13000
|
unkown
|
page readonly
|
|
|
|
284802AE000
|
unkown
|
page read and write
|
|
|
|
2471B000000
|
unkown
|
page read and write
|
|
|
|
28481270000
|
unkown
|
page readonly
|
|
|
|
28480400000
|
unkown
|
page readonly
|
|
|
|
7FF538BE3000
|
unkown
|
page readonly
|
|
|
|
7FF5D66EF000
|
unkown
|
page readonly
|
|
|
|
1F4AAC88000
|
unkown
|
page read and write
|
|
|
|
1F4AACB9000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDFF000
|
unkown
|
page readonly
|
|
|
|
DC6EFFF000
|
unkown
|
page read and write
|
|
|
|
174183F0000
|
unkown
|
page readonly
|
|
|
|
7FF505EF9000
|
unkown
|
page readonly
|
|
|
|
21258F50000
|
unkown
|
page read and write
|
|
|
|
B303B7E000
|
unkown
|
page read and write
|
|
|
|
7FF565C55000
|
unkown
|
page readonly
|
|
|
|
B01CBFE000
|
unkown
|
page read and write
|
|
|
|
7FF5C146F000
|
unkown
|
page readonly
|
|
|
|
7FF4FFDF8000
|
unkown
|
page readonly
|
|
|
|
7FF5D6695000
|
unkown
|
page readonly
|
|
|
|
7FF5A0885000
|
unkown
|
page readonly
|
|
|
|
FA887FD000
|
unkown
|
page read and write
|
|
|
|
7AD5BFE000
|
unkown
|
page read and write
|
|
|
|
1F4ACE84000
|
unkown
|
page read and write
|
|
|
|
2540000
|
unkown
|
page read and write
|
|
|
|
FA885FE000
|
unkown
|
page read and write
|
|
|
|
A39DCFC000
|
unkown
|
page read and write
|
|
|
|
435FFFA000
|
unkown
|
page read and write
|
|
|
|
2343F710000
|
unkown
|
page readonly
|
|
|
|
7FF565A6A000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD4C000
|
unkown
|
page readonly
|
|
|
|
7FF5036E0000
|
unkown
|
page readonly
|
|
|
|
28485A8F000
|
unkown
|
page read and write
|
|
|
|
2343F86E000
|
unkown
|
page read and write
|
|
|
|
7FF503649000
|
unkown
|
page readonly
|
|
|
|
A39DA7A000
|
unkown
|
page read and write
|
|
|
|
7FF5C6CB8000
|
unkown
|
page readonly
|
|
|
|
DA4CE7A000
|
unkown
|
page read and write
|
|
|
|
2544A780000
|
unkown
|
page readonly
|
|
|
|
1F4AC9E0000
|
unkown
|
page read and write
|
|
|
|
B3035BB000
|
unkown
|
page read and write
|
|
|
|
7AD5AFF000
|
unkown
|
page read and write
|
|
|
|
23833662000
|
unkown
|
page read and write
|
|
|
|
7FF5BBFF7000
|
unkown
|
page readonly
|
|
|
|
329A000
|
heap default
|
page read and write
|
|
|
|
7FF53B40F000
|
unkown
|
page readonly
|
|
|
|
25F25745000
|
unkown
|
page read and write
|
|
|
|
1F4ACB3A000
|
unkown
|
page read and write
|
|
|
|
1BB1F702000
|
unkown
|
page read and write
|
|
|
|
284857B0000
|
unkown
|
page read and write
|
|
|
|
28481280000
|
unkown
|
page readonly
|
|
|
|
2800000
|
unkown
|
page readonly
|
|
|
|
28485840000
|
unkown
|
page write copy
|
|
|
|
28485AB2000
|
unkown
|
page read and write
|
|
|
|
7FF5034D3000
|
unkown
|
page readonly
|
|
|
|
243D000
|
unkown
|
page readonly
|
|
|
|
1F4AAB90000
|
heap private
|
page read and write
|
|
|
|
1F4ACB3B000
|
unkown
|
page read and write
|
|
|
|
28485620000
|
unkown
|
page readonly
|
|
|
|
28480A00000
|
unkown
|
page read and write
|
|
|
|
FA88A7D000
|
unkown
|
page read and write
|
|
|
|
20279B08000
|
unkown
|
page read and write
|
|
|
|
2471B013000
|
unkown
|
page read and write
|
|
|
|
1F4AAC59000
|
unkown
|
page read and write
|
|
|
|
7FF4FFA0F000
|
unkown
|
page readonly
|
|
|
|
2175000
|
unkown
|
page readonly
|
|
|
|
436017B000
|
unkown
|
page read and write
|
|
|
|
DC6E5DB000
|
unkown
|
page read and write
|
|
|
|
7FF505ECC000
|
unkown
|
page readonly
|
|
|
|
7FF50FF75000
|
unkown
|
page readonly
|
|
|
|
DC6ECFE000
|
unkown
|
page read and write
|
|
|
|
7FF505FBF000
|
unkown
|
page readonly
|
|
|
|
2343FA00000
|
unkown
|
page write copy
|
|
|
|
7FF5D64FE000
|
unkown
|
page readonly
|
|
|
|
28481070000
|
unkown
|
page read and write
|
|
|
|
284812A0000
|
unkown
|
page readonly
|
|
|
|
21259002000
|
unkown
|
page read and write
|
|
|
|
9350CFA000
|
unkown
|
page read and write
|
|
|
|
2471B068000
|
unkown
|
page read and write
|
|
|
|
2140000
|
unkown
|
page readonly
|
|
|
|
7FF565D1B000
|
unkown
|
page readonly
|
|
|
|
1F4AACC7000
|
unkown
|
page read and write
|
|
|
|
7FF50BC3E000
|
unkown
|
page readonly
|
|
|
|
1F4AAC00000
|
unkown
|
page read and write
|
|
|
|
2471AFC0000
|
unkown
|
page readonly
|
|
|
|
1B1B2500000
|
unkown
|
page read and write
|
|
|
|
7FF5A0908000
|
unkown
|
page readonly
|
|
|
|
435FB7A000
|
unkown
|
page read and write
|
|
|
|
7FF5C168E000
|
unkown
|
page readonly
|
|
|
|
7FF503584000
|
unkown
|
page readonly
|
|
|
|
1B1B1CC8000
|
unkown
|
page read and write
|
|
|
|
23833702000
|
unkown
|
page read and write
|
|
|
|
23833645000
|
unkown
|
page read and write
|
|
|
|
284802FD000
|
unkown
|
page read and write
|
|
|
|
7FF5C6B01000
|
unkown
|
page readonly
|
|
|
|
DC6EEFB000
|
unkown
|
page read and write
|
|
|
|
21EF2C66000
|
unkown
|
page read and write
|
|
|
|
28485794000
|
unkown
|
page read and write
|
|
|
|
2A84000
|
unkown
|
page readonly
|
|
|
|
7FF5657CF000
|
unkown
|
page readonly
|
|
|
|
284858D0000
|
unkown
|
page read and write
|
|
|
|
7FF53B307000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB47000
|
unkown
|
page readonly
|
|
|
|
BBAD5FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C6C2F000
|
unkown
|
page readonly
|
|
|
|
7FF50BC4B000
|
unkown
|
page readonly
|
|
|
|
20279B00000
|
unkown
|
page read and write
|
|
|
|
25F23450000
|
heap private
|
page read and write
|
|
|
|
7FF5C6D15000
|
unkown
|
page readonly
|
|
|
|
B01CFFF000
|
unkown
|
page read and write
|
|
|
|
1F4ACB63000
|
unkown
|
page read and write
|
|
|
|
7FF5A093B000
|
unkown
|
page readonly
|
|
|
|
30A0000
|
unkown
|
page readonly
|
|
|
|
7AD5C79000
|
unkown
|
page read and write
|
|
|
|
7FF525FD6000
|
unkown
|
page readonly
|
|
|
|
7FF591C4F000
|
unkown
|
page readonly
|
|
|
|
7FF565C13000
|
unkown
|
page readonly
|
|
|
|
1B1B1CB9000
|
unkown
|
page read and write
|
|
|
|
7FF5C17B0000
|
unkown
|
page readonly
|
|
|
|
7FF5BC008000
|
unkown
|
page readonly
|
|
|
|
7FF52675D000
|
unkown
|
page readonly
|
|
|
|
7FF5BBE67000
|
unkown
|
page readonly
|
|
|
|
7FF538B97000
|
unkown
|
page readonly
|
|
|
|
284802A1000
|
unkown
|
page read and write
|
|
|
|
7FF50FD65000
|
unkown
|
page readonly
|
|
|
|
7FF51C173000
|
unkown
|
page readonly
|
|
|
|
202798C0000
|
heap default
|
page read and write
|
|
|
|
28485A8D000
|
unkown
|
page read and write
|
|
|
|
25F254C0000
|
unkown
|
page readonly
|
|
|
|
DC6E9F7000
|
unkown
|
page read and write
|
|
|
|
7FF5C6960000
|
unkown
|
page readonly
|
|
|
|
7FF5C6C90000
|
unkown
|
page readonly
|
|
|
|
1F4AABA0000
|
unkown
|
page read and write
|
|
|
|
7FF5E2F84000
|
unkown
|
page readonly
|
|
|
|
1F4ACF00000
|
unkown
|
page read and write
|
|
|
|
214B000
|
unkown
|
page readonly
|
|
|
|
7FF5BC03A000
|
unkown
|
page readonly
|
|
|
|
25F25470000
|
unkown
|
page readonly
|
|
|
|
7FF505DAE000
|
unkown
|
page readonly
|
|
|
|
B01CAFC000
|
unkown
|
page read and write
|
|
|
|
1F4AD510000
|
unkown
|
page read and write
|
|
|
|
2125883D000
|
unkown
|
page read and write
|
|
|
|
7FF591B89000
|
unkown
|
page readonly
|
|
|
|
2151000
|
unkown
|
page readonly
|
|
|
|
2848027B000
|
unkown
|
page read and write
|
|
|
|
7FF51BDE0000
|
unkown
|
page readonly
|
|
|
|
2544A6A0000
|
unkown
|
page readonly
|
|
|
|
73A0AFE000
|
unkown
|
page read and write
|
|
|
|
284815F0000
|
unkown
|
page read and write
|
|
|
|
1F4AD410000
|
unkown
|
page read and write
|
|
|
|
2027A400000
|
unkown
|
page readonly
|
|
|
|
2301FF13000
|
unkown
|
page read and write
|
|
|
|
7FF5E2CC5000
|
unkown
|
page readonly
|
|
|
|
1F4ACB35000
|
unkown
|
page read and write
|
|
|
|
B01CDFD000
|
unkown
|
page read and write
|
|
|
|
7FF5C6DC4000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD79000
|
unkown
|
page readonly
|
|
|
|
B182A79000
|
unkown
|
page read and write
|
|
|
|
7FF5389C3000
|
unkown
|
page readonly
|
|
|
|
283C000
|
unkown
|
page readonly
|
|
|
|
A77D58B000
|
unkown
|
page read and write
|
|
|
|
1F4AD510000
|
unkown
|
page read and write
|
|
|
|
7FF50FFFF000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD50000
|
unkown
|
page readonly
|
|
|
|
DC6EDFA000
|
unkown
|
page read and write
|
|
|
|
1F4ACB9D000
|
unkown
|
page read and write
|
|
|
|
7FF50BC20000
|
unkown
|
page readonly
|
|
|
|
2AA3A2A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C188B000
|
unkown
|
page readonly
|
|
|
|
1F4AACBA000
|
unkown
|
page read and write
|
|
|
|
7FF5C1757000
|
unkown
|
page readonly
|
|
|
|
DC6EAF9000
|
unkown
|
page read and write
|
|
|
|
82871CE000
|
unkown
|
page read and write
|
|
|
|
7FF51C200000
|
unkown
|
page readonly
|
|
|
|
2AE4000
|
unkown
|
page readonly
|
|
|
|
7FF5BBF9D000
|
unkown
|
page readonly
|
|
|
|
21EF2A90000
|
heap private
|
page read and write
|
|
|
|
7FF538844000
|
unkown
|
page readonly
|
|
|
|
2301FDC0000
|
unkown
|
page readonly
|
|
|
|
7FF5C6B98000
|
unkown
|
page readonly
|
|
|
|
1BB1F5E0000
|
unkown
|
page readonly
|
|
|
|
7FF5BC0C0000
|
unkown
|
page readonly
|
|
|
|
28481170000
|
unkown
|
page read and write
|
|
|
|
7FF5036CF000
|
unkown
|
page readonly
|
|
|
|
7FF5036FE000
|
unkown
|
page readonly
|
|
|
|
2301FF02000
|
unkown
|
page read and write
|
|
|
|
7FF5C185F000
|
unkown
|
page readonly
|
|
|
|
7FF505EB3000
|
unkown
|
page readonly
|
|
|
|
DC6F37F000
|
unkown
|
page read and write
|
|
|
|
25F236A4000
|
unkown
|
page read and write
|
|
|
|
2AA5000
|
unkown
|
page readonly
|
|
|
|
7FF53B40B000
|
unkown
|
page readonly
|
|
|
|
2024000
|
unkown
|
page readonly
|
|
|
|
2343F86E000
|
unkown
|
page read and write
|
|
|
|
7FF5D6585000
|
unkown
|
page readonly
|
|
|
|
284858D0000
|
unkown
|
page read and write
|
|
|
|
7FF565D1F000
|
unkown
|
page readonly
|
|
|
|
2470000
|
unkown
|
page readonly
|
|
|
|
7FF5C189F000
|
unkown
|
page readonly
|
|
|
|
25F23629000
|
unkown
|
page read and write
|
|
|
|
2464000
|
unkown
|
page readonly
|
|
|
|
7FF5C6CA0000
|
unkown
|
page readonly
|
|
|
|
2343F86E000
|
unkown
|
page read and write
|
|
|
|
7FF5C6B03000
|
unkown
|
page readonly
|
|
|
|
174184B7000
|
heap default
|
page read and write
|
|
|
|
7FF5BC029000
|
unkown
|
page readonly
|
|
|
|
7FF5E2ED5000
|
unkown
|
page readonly
|
|
|
|
1F4AAC66000
|
unkown
|
page read and write
|
|
|
|
24DB000
|
stack
|
page read and write
|
|
|
|
2301FE3C000
|
unkown
|
page read and write
|
|
|
|
284858D0000
|
unkown
|
page readonly
|
|
|
|
25F23717000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD6D000
|
unkown
|
page readonly
|
|
|
|
7FF5C6C17000
|
unkown
|
page readonly
|
|
|
|
7FF50B805000
|
unkown
|
page readonly
|
|
|
|
435FD79000
|
unkown
|
page read and write
|
|
|
|
2343F86A000
|
unkown
|
page read and write
|
|
|
|
7FF50B80B000
|
unkown
|
page readonly
|
|
|
|
7FF591781000
|
unkown
|
page readonly
|
|
|
|
2C20000
|
heap default
|
page read and write
|
|
|
|
25F25702000
|
unkown
|
page read and write
|
|
|
|
7FF5D6623000
|
unkown
|
page readonly
|
|
|
|
1F4AACB9000
|
unkown
|
page read and write
|
|
|
|
1F4ACF83000
|
unkown
|
page read and write
|
|
|
|
2044000
|
unkown
|
page readonly
|
|
|
|
25F254B0000
|
unkown
|
page readonly
|
|
|
|
2343F86A000
|
unkown
|
page read and write
|
|
|
|
7FF591C3E000
|
unkown
|
page readonly
|
|
|
|
23833669000
|
unkown
|
page read and write
|
|
|
|
7FF5A085C000
|
unkown
|
page readonly
|
|
|
|
28480313000
|
unkown
|
page read and write
|
|
|
|
216B000
|
unkown
|
page readonly
|
|
|
|
2C00000
|
unkown
|
page readonly
|
|
|
|
1F4AD110000
|
unkown
|
page read and write
|
|
|
|
7FF5C6CEC000
|
unkown
|
page readonly
|
|
|
|
24A5000
|
unkown
|
page readonly
|
|
|
|
7FF5D667A000
|
unkown
|
page readonly
|
|
|
|
7FF51001D000
|
unkown
|
page readonly
|
|
|
|
1C8EF600000
|
unkown
|
page readonly
|
|
|
|
28485660000
|
unkown
|
page read and write
|
|
|
|
1F4AC9E0000
|
unkown
|
page readonly
|
|
|
|
21258900000
|
unkown
|
page read and write
|
|
|
|
2383366C000
|
unkown
|
page read and write
|
|
|
|
2364000
|
unkown
|
page readonly
|
|
|
|
7FF5C189B000
|
unkown
|
page readonly
|
|
|
|
28480790000
|
unkown
|
page readonly
|
|
|
|
7FF5D6714000
|
unkown
|
page readonly
|
|
|
|
7FF5A073E000
|
unkown
|
page readonly
|
|
|
|
2027A202000
|
unkown
|
page read and write
|
|
|
|
7FF505ED8000
|
unkown
|
page readonly
|
|
|
|
7FF565CE6000
|
unkown
|
page readonly
|
|
|
|
7FF50BC2D000
|
unkown
|
page readonly
|
|
|
|
7FF51C22B000
|
unkown
|
page readonly
|
|
|
|
7FF5C6C97000
|
unkown
|
page readonly
|
|
|
|
1F4AD110000
|
unkown
|
page read and write
|
|
|
|
A77DE7F000
|
unkown
|
page read and write
|
|
|
|
7FF52675F000
|
unkown
|
page readonly
|
|
|
|
7FF591B85000
|
unkown
|
page readonly
|
|
|
|
2150000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE2B000
|
unkown
|
page readonly
|
|
|
|
1F4AE002000
|
unkown
|
page read and write
|
|
|
|
213A000
|
unkown
|
page readonly
|
|
|
|
7FF53B33D000
|
unkown
|
page readonly
|
|
|
|
2132000
|
unkown
|
page readonly
|
|
|
|
7FF538C70000
|
unkown
|
page readonly
|
|
|
|
3290000
|
heap default
|
page read and write
|
|
|
|
7FF5C17B8000
|
unkown
|
page readonly
|
|
|
|
7FF526699000
|
unkown
|
page readonly
|
|
|
|
25E0C8E0000
|
heap default
|
page read and write
|
|
|
|
1F4AACBA000
|
unkown
|
page read and write
|
|
|
|
20279C00000
|
unkown
|
page readonly
|
|
|
|
1F4AACEC000
|
unkown
|
page read and write
|
|
|
|
1F4AC9E0000
|
unkown
|
page read and write
|
|
|
|
25E0E4F0000
|
unkown
|
page readonly
|
|
|
|
7FF50FE2E000
|
unkown
|
page readonly
|
|
|
|
21259200000
|
unkown
|
page readonly
|
|
|
|
25E0C9C0000
|
unkown
|
page readonly
|
|
|
|
9350E7F000
|
unkown
|
page read and write
|
|
|
|
7FF5C6D9F000
|
unkown
|
page readonly
|
|
|
|
A39D87B000
|
unkown
|
page read and write
|
|
|
|
7FF565564000
|
unkown
|
page readonly
|
|
|
|
284800B0000
|
heap private
|
page read and write
|
|
|
|
7FF526408000
|
unkown
|
page readonly
|
|
|
|
7FF565D0B000
|
unkown
|
page readonly
|
|
|
|
20279A5C000
|
unkown
|
page read and write
|
|
|
|
7FF5A090F000
|
unkown
|
page readonly
|
|
|
|
7FF526620000
|
unkown
|
page readonly
|
|
|
|
28485910000
|
unkown
|
page readonly
|
|
|
|
1BB1F681000
|
unkown
|
page read and write
|
|
|
|
7FF50FFF8000
|
unkown
|
page readonly
|
|
|
|
2471B002000
|
unkown
|
page read and write
|
|
|
|
3314AFE000
|
unkown
|
page read and write
|
|
|
|
21EF3402000
|
unkown
|
page read and write
|
|
|
|
7FF4FFA2A000
|
unkown
|
page readonly
|
|
|
|
FA8897D000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE1D000
|
unkown
|
page readonly
|
|
|
|
43602FB000
|
unkown
|
page read and write
|
|
|
|
1F4AAA20000
|
unkown
|
page readonly
|
|
|
|
DC6F67F000
|
unkown
|
page read and write
|
|
|
|
1F4AAC55000
|
unkown
|
page read and write
|
|
|
|
2383364E000
|
unkown
|
page read and write
|
|
|
|
DC6F17E000
|
unkown
|
page read and write
|
|
|
|
2471B068000
|
unkown
|
page read and write
|
|
|
|
1F4AD210000
|
unkown
|
page read and write
|
|
|
|
A39DD7E000
|
unkown
|
page read and write
|
|
|
|
2471B06D000
|
unkown
|
page read and write
|
|
|
|
7FF526730000
|
unkown
|
page readonly
|
|
|
|
5DAF2FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C17EA000
|
unkown
|
page readonly
|
|
|
|
174183D0000
|
unkown
|
page read and write
|
|
|
|
1F4AAC66000
|
unkown
|
page read and write
|
|
|
|
2301FE13000
|
unkown
|
page read and write
|
|
|
|
1B1B1B40000
|
unkown
|
page readonly
|
|
|
|
7FF505DD3000
|
unkown
|
page readonly
|
|
|
|
1B1B1B90000
|
unkown
|
page write copy
|
|
|
|
7FF538A3D000
|
unkown
|
page readonly
|
|
|
|
25F25410000
|
unkown
|
page readonly
|
|
|
|
7FF5C6DBD000
|
unkown
|
page readonly
|
|
|
|
7FF5036F4000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE0B000
|
unkown
|
page readonly
|
|
|
|
7FF50BC3B000
|
unkown
|
page readonly
|
|
|
|
25F25713000
|
unkown
|
page read and write
|
|
|
|
7FF5C6ADD000
|
unkown
|
page readonly
|
|
|
|
7FF5C17E3000
|
unkown
|
page readonly
|
|
|
|
1F4AAD6D000
|
unkown
|
page read and write
|
|
|
|
1741A29F000
|
heap private
|
page read and write
|
|
|
|
28480293000
|
unkown
|
page read and write
|
|
|
|
7FF51002E000
|
unkown
|
page readonly
|
|
|
|
7FF505EC7000
|
unkown
|
page readonly
|
|
|
|
21258902000
|
unkown
|
page read and write
|
|
|
|
25E0CA13000
|
unkown
|
page read and write
|
|
|
|
2471B068000
|
unkown
|
page read and write
|
|
|
|
7FF4FFA22000
|
unkown
|
page readonly
|
|
|
|
2343F6A0000
|
heap private
|
page read and write
|
|
|
|
7FF5D64CD000
|
unkown
|
page readonly
|
|
|
|
28480110000
|
heap default
|
page read and write
|
|
|
|
2544AE60000
|
unkown
|
page read and write
|
|
|
|
7FF5919C7000
|
unkown
|
page readonly
|
|
|
|
7FF50B8DA000
|
unkown
|
page readonly
|
|
|
|
20279A4F000
|
unkown
|
page read and write
|
|
|
|
7FF5A0889000
|
unkown
|
page readonly
|
|
|
|
7FF5D663C000
|
unkown
|
page readonly
|
|
|
|
1F4AACBA000
|
unkown
|
page read and write
|
|
|
|
7FF591C16000
|
unkown
|
page readonly
|
|
|
|
FA8887F000
|
unkown
|
page read and write
|
|
|
|
21EF2C3D000
|
unkown
|
page read and write
|
|
|
|
2544A630000
|
heap private
|
page read and write
|
|
|
|
282B000
|
unkown
|
page readonly
|
|
|
|
7FF53899D000
|
unkown
|
page readonly
|
|
|
|
2AC5000
|
unkown
|
page readonly
|
|
|
|
23833646000
|
unkown
|
page read and write
|
|
|
|
2D56000
|
unkown
|
page read and write
|
|
|
|
7FF53B375000
|
unkown
|
page readonly
|
|
|
|
7FF53851C000
|
unkown
|
page readonly
|
|
|
|
7FF5C6DAB000
|
unkown
|
page readonly
|
|
|
|
216D000
|
unkown
|
page readonly
|
|
|
|
7FF5C15C5000
|
unkown
|
page readonly
|
|
|
|
7FF5C6ACA000
|
unkown
|
page readonly
|
|
|
|
7FF538C58000
|
unkown
|
page readonly
|
|
|
|
1F4ACBD4000
|
unkown
|
page read and write
|
|
|
|
1B1B1D02000
|
unkown
|
page read and write
|
|
|
|
7FF591B07000
|
unkown
|
page readonly
|
|
|
|
234412F0000
|
unkown
|
page readonly
|
|
|
|
7FF50B420000
|
unkown
|
page readonly
|
|
|
|
A77D8FE000
|
unkown
|
page read and write
|
|
|
|
7FF5BC0EF000
|
unkown
|
page readonly
|
|
|
|
7FF50FC22000
|
unkown
|
page readonly
|
|
|
|
20279A00000
|
unkown
|
page read and write
|
|
|
|
25F23702000
|
unkown
|
page read and write
|
|
|
|
2491000
|
unkown
|
page readonly
|
|
|
|
2301FE47000
|
unkown
|
page read and write
|
|
|
|
B303C77000
|
unkown
|
page read and write
|
|
|
|
7FF591756000
|
unkown
|
page readonly
|
|
|
|
7FF5D6543000
|
unkown
|
page readonly
|
|
|
|
28485A9F000
|
unkown
|
page read and write
|
|
|
|
1F4AE102000
|
unkown
|
page read and write
|
|
|
|
7FF538B3F000
|
unkown
|
page readonly
|
|
|
|
7FF5A0657000
|
unkown
|
page readonly
|
|
|
|
2343F900000
|
unkown
|
page read and write
|
|
|
|
7FF5D6648000
|
unkown
|
page readonly
|
|
|
|
7FF52668D000
|
unkown
|
page readonly
|
|
|
|
1F4ACB12000
|
unkown
|
page read and write
|
|
|
|
1F4AACC6000
|
unkown
|
page read and write
|
|
|
|
21258800000
|
unkown
|
page read and write
|
|
|
|
7FF4FFB65000
|
unkown
|
page readonly
|
|
|
|
1F4AACBA000
|
unkown
|
page read and write
|
|
|
|
2471B102000
|
unkown
|
page read and write
|
|
|
|
2499000
|
unkown
|
page readonly
|
|
|
|
7FF5D672F000
|
unkown
|
page readonly
|
|
|
|
7FF565CEE000
|
unkown
|
page readonly
|
|
|
|
25E0CB13000
|
unkown
|
page read and write
|
|
|
|
23020602000
|
unkown
|
page read and write
|
|
|
|
2590000
|
unkown
|
page readonly
|
|
|
|
7FF5E2ED9000
|
unkown
|
page readonly
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
284858D0000
|
unkown
|
page read and write
|
|
|
|
2AA38802000
|
unkown
|
page read and write
|
|
|
|
284857B4000
|
unkown
|
page read and write
|
|
|
|
2BB0000
|
unkown
|
page readonly
|
|
|
|
7FF5BC0BB000
|
unkown
|
page readonly
|
|
|
|
DA4CEFF000
|
unkown
|
page read and write
|
|
|
|
7FF538B4A000
|
unkown
|
page readonly
|
|
|
|
7FF5D6669000
|
unkown
|
page readonly
|
|
|
|
73A08FE000
|
unkown
|
page read and write
|
|
|
|
7FF50BBB5000
|
unkown
|
page readonly
|
|
|
|
2AB9000
|
unkown
|
page readonly
|
|
|
|
20279A29000
|
unkown
|
page read and write
|
|
|
|
7FF591B57000
|
unkown
|
page readonly
|
|
|
|
25F234B0000
|
heap default
|
page read and write
|
|
|
|
7FF565B9E000
|
unkown
|
page readonly
|
|
|
|
1F4AACEC000
|
unkown
|
page read and write
|
|
|
|
2169000
|
unkown
|
page readonly
|
|
|
|
1F4AAD02000
|
unkown
|
page read and write
|
|
|
|
27DC000
|
unkown
|
page read and write
|
|
|
|
7FF565D1F000
|
unkown
|
page readonly
|
|
|
|
21FB000
|
unkown
|
page readonly
|
|
|
|
7FF53B2B3000
|
unkown
|
page readonly
|
|
|
|
2544A790000
|
unkown
|
page read and write
|
|
|
|
7FF5266A3000
|
unkown
|
page readonly
|
|
|
|
25F25744000
|
unkown
|
page read and write
|
|
|
|
1F4AAC65000
|
unkown
|
page read and write
|
|
|
|
2471B06A000
|
unkown
|
page read and write
|
|
|
|
1F4AACBA000
|
unkown
|
page read and write
|
|
|
|
7FF5C6911000
|
unkown
|
page readonly
|
|
|
|
1F4ACBE6000
|
unkown
|
page read and write
|
|
|
|
17418670000
|
heap private
|
page read and write
|
|
|
|
7FF5C68E6000
|
unkown
|
page readonly
|
|
|
|
2544A813000
|
unkown
|
page read and write
|
|
|
|
2AB1000
|
unkown
|
page readonly
|
|
|
|
43601FB000
|
unkown
|
page read and write
|
|
|
|
7FF565C0C000
|
unkown
|
page readonly
|
|
|
|
2471B068000
|
unkown
|
page read and write
|
|
|
|
7FF565C85000
|
unkown
|
page readonly
|
|
|
|
7FF5A0860000
|
unkown
|
page readonly
|
|
|
|
1F4AD310000
|
unkown
|
page read and write
|
|
|
|
7FF50BC4F000
|
unkown
|
page readonly
|
|
|
|
2544A690000
|
heap default
|
page read and write
|
|
|
|
7FF5D6208000
|
unkown
|
page readonly
|
|
|
|
7FF591AFD000
|
unkown
|
page readonly
|
|
|
|
211D000
|
unkown
|
page readonly
|
|
|
|
2471B06D000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
828714B000
|
unkown
|
page read and write
|
|
|
|
43600FB000
|
unkown
|
page read and write
|
|
|
|
25F25480000
|
unkown
|
page read and write
|
|
|
|
7FF526416000
|
unkown
|
page readonly
|
|
|
|
7FF505EED000
|
unkown
|
page readonly
|
|
|
|
1C8EF502000
|
unkown
|
page read and write
|
|
|
|
7FF5C187D000
|
unkown
|
page readonly
|
|
|
|
219D000
|
unkown
|
page readonly
|
|
|
|
7FF526744000
|
unkown
|
page readonly
|
|
|
|
25E0C8F0000
|
unkown
|
page readonly
|
|
|
|
7FF5BBEFD000
|
unkown
|
page readonly
|
|
|
|
202799B0000
|
unkown
|
page readonly
|
|
|
|
7FF505D5D000
|
unkown
|
page readonly
|
|
|
|
1F4AACDB000
|
unkown
|
page read and write
|
|
|
|
24BC000
|
unkown
|
page read and write
|
|
|
|
27A9000
|
unkown
|
page read and write
|
|
|
|
7FF5C6BAC000
|
unkown
|
page readonly
|
|
|
|
25F23713000
|
unkown
|
page read and write
|
|
|
|
7FF526667000
|
unkown
|
page readonly
|
|
|
|
73A087E000
|
unkown
|
page read and write
|
|
|
|
7FF5BBFA7000
|
unkown
|
page readonly
|
|
|
|
1F4AE142000
|
unkown
|
page read and write
|
|
|
|
7FF51BEE3000
|
unkown
|
page readonly
|
|
|
|
7FF565C2C000
|
unkown
|
page readonly
|
|
|
|
7FF5BBF27000
|
unkown
|
page readonly
|
|
|
|
1B1B2190000
|
unkown
|
page readonly
|
|
|
|
2544A802000
|
unkown
|
page read and write
|
|
|
|
1F4AE082000
|
unkown
|
page read and write
|
|
|
|
7FF51003B000
|
unkown
|
page readonly
|
|
|
|
17418440000
|
unkown
|
page readonly
|
|
|
|
1F4AD010000
|
unkown
|
page read and write
|
|
|
|
7FF50BC08000
|
unkown
|
page readonly
|
|
|
|
B01CEFF000
|
unkown
|
page read and write
|
|
|
|
B18273E000
|
unkown
|
page read and write
|
|
|
|
2343F86C000
|
unkown
|
page read and write
|
|
|
|
25F23640000
|
unkown
|
page read and write
|
|
|
|
1BB1F661000
|
unkown
|
page read and write
|
|
|
|
2343F86D000
|
unkown
|
page read and write
|
|
|
|
1F4AC6A0000
|
unkown
|
page readonly
|
|
|
|
7FF5389A7000
|
unkown
|
page readonly
|
|
|
|
7FF5BBFC4000
|
unkown
|
page readonly
|
|
|
|
2AA38A00000
|
unkown
|
page readonly
|
|
|
|
7FF591B5C000
|
unkown
|
page readonly
|
|
|
|
2544A770000
|
unkown
|
page readonly
|
|
|
|
7FF5E2F03000
|
unkown
|
page readonly
|
|
|
|
7FF505F90000
|
unkown
|
page readonly
|
|
|
|
7FF5C1870000
|
unkown
|
page readonly
|
|
|
|
21EF2C79000
|
unkown
|
page read and write
|
|
|
|
7FF565B94000
|
unkown
|
page readonly
|
|
|
|
7FF5D6665000
|
unkown
|
page readonly
|
|
|
|
1F4AACE0000
|
unkown
|
page read and write
|
|
|
|
218D000
|
unkown
|
page readonly
|
|
|
|
2AB5000
|
unkown
|
page readonly
|
|
|
|
A39DBFA000
|
unkown
|
page read and write
|
|
|
|
28480241000
|
unkown
|
page read and write
|
|
|
|
3520000
|
unkown
|
page readonly
|
|
|
|
23833440000
|
heap default
|
page read and write
|
|
|
|
28485A00000
|
unkown
|
page read and write
|
|
|
|
7FF5BC0DE000
|
unkown
|
page readonly
|
|
|
|
2E70000
|
heap private
|
page read and write
|
|
|
|
B01C51B000
|
unkown
|
page read and write
|
|
|
|
B1826BB000
|
unkown
|
page read and write
|
|
|
|
2752000
|
unkown
|
page readonly
|
|
|
|
23833B90000
|
unkown
|
page readonly
|
|
|
|
7FF5C695A000
|
unkown
|
page readonly
|
|
|
|
7FF5E2F9B000
|
unkown
|
page readonly
|
|
|
|
7FF538AAD000
|
unkown
|
page readonly
|
|
|
|
2AA38849000
|
unkown
|
page read and write
|
|
|
|
304A000
|
heap default
|
page read and write
|
|
|
|
2383362A000
|
unkown
|
page read and write
|
|
|
|
7FF52672B000
|
unkown
|
page readonly
|
|
|
|
7FF5BC0A8000
|
unkown
|
page readonly
|
|
|
|
1F4ACB39000
|
unkown
|
page read and write
|
|
|
|
7FF50FBEE000
|
unkown
|
page readonly
|
|
|
|
1F4AAD5D000
|
unkown
|
page read and write
|
|
|
|
28480B13000
|
unkown
|
page read and write
|
|
|
|
2205000
|
unkown
|
page readonly
|
|
|
|
7FF5C186B000
|
unkown
|
page readonly
|
|
|
|
2343F86E000
|
unkown
|
page read and write
|
|
|
|
7FF5659F8000
|
unkown
|
page readonly
|
|
|
|
2165000
|
unkown
|
page readonly
|
|
|
|
21EF3270000
|
unkown
|
page readonly
|
|
|
|
7FF505FAE000
|
unkown
|
page readonly
|
|
|
|
5DAF87E000
|
unkown
|
page read and write
|
|
|
|
1F4AACBA000
|
unkown
|
page read and write
|
|
|
|
7FF50FF79000
|
unkown
|
page readonly
|
|
|
|
7FF5E2F58000
|
unkown
|
page readonly
|
|
|
|
7FF4FFCF7000
|
unkown
|
page readonly
|
|
|
|
7FF5A0800000
|
unkown
|
page readonly
|
|
|
|
28480B02000
|
unkown
|
page read and write
|
|
|
|
1F4ACB37000
|
unkown
|
page read and write
|
|
|
|
2544A800000
|
unkown
|
page read and write
|
|
|
|
2301FF08000
|
unkown
|
page read and write
|
|
|
|
1F4ACF43000
|
unkown
|
page read and write
|
|
|
|
1B1B1E00000
|
unkown
|
page readonly
|
|
|
|
2471B068000
|
unkown
|
page read and write
|
|
|
|
7FF50B957000
|
unkown
|
page readonly
|
|
|
|
2537000
|
unkown
|
page readonly
|
|
|
|
2145000
|
unkown
|
page readonly
|
|
|
|
7FF5BBCD2000
|
unkown
|
page readonly
|
|
|
|
7AD5B7A000
|
unkown
|
page read and write
|
|
|
|
1F4AACCC000
|
unkown
|
page read and write
|
|
|
|
7FF5C6D2A000
|
unkown
|
page readonly
|
|
|
|
2122000
|
unkown
|
page readonly
|
|
|
|
7FF51C169000
|
unkown
|
page readonly
|
|
|
|
21258CD0000
|
unkown
|
page readonly
|
|
|
|
7FF5031D3000
|
unkown
|
page readonly
|
|
|
|
7FF526458000
|
unkown
|
page readonly
|
|
|
|
2468000
|
unkown
|
page readonly
|
|
|
|
7FF5BBEDE000
|
unkown
|
page readonly
|
|
|
|
7FF5C6B74000
|
unkown
|
page readonly
|
|
|
|
23833676000
|
unkown
|
page read and write
|
|
|
|
17418705000
|
heap private
|
page read and write
|
|
|
|
2AC9000
|
unkown
|
page readonly
|
|
|
|
1B1B1B50000
|
unkown
|
page read and write
|
|
|
|
7FF5659E6000
|
unkown
|
page readonly
|
|
|
|
27A5000
|
unkown
|
page read and write
|
|
|
|
2AED000
|
unkown
|
page readonly
|
|
|
|
23833658000
|
unkown
|
page read and write
|
|
|
|
284801F0000
|
unkown
|
page readonly
|
|
|
|
21EC000
|
unkown
|
page readonly
|
|
|
|
7FF5C696F000
|
unkown
|
page readonly
|
|
|
|
23833679000
|
unkown
|
page read and write
|
|
|
|
28480271000
|
unkown
|
page read and write
|
|
|
|
7FF5BBFFC000
|
unkown
|
page readonly
|
|
|
|
2751000
|
unkown
|
page readonly
|
|
|
|
7FF5BBF9A000
|
unkown
|
page readonly
|
|
|
|
1F4AAC5D000
|
unkown
|
page read and write
|
|
|
|
7FF591C4D000
|
unkown
|
page readonly
|
|
|
|
1F4AAB80000
|
unkown
|
page readonly
|
|
|
|
7FF591B9A000
|
unkown
|
page readonly
|
|
|
|
2AA38650000
|
heap private
|
page read and write
|
|
|
|
3841D7E000
|
unkown
|
page read and write
|
|
|
|
DC6F2FF000
|
unkown
|
page read and write
|
|
|
|
25E0E830000
|
unkown
|
page read and write
|
|
|
|
7FF53B2AF000
|
unkown
|
page readonly
|
|
|
|
2A3B000
|
stack
|
page read and write
|
|
|
|
7FF5C6D0D000
|
unkown
|
page readonly
|
|
|
|
1F4ACE53000
|
unkown
|
page read and write
|
|
|
|
25F25700000
|
unkown
|
page read and write
|
|
|
|
2301FCE0000
|
unkown
|
page readonly
|
|
|
|
7FF5E2B7D000
|
unkown
|
page readonly
|
|
|
|
1F4ACF83000
|
unkown
|
page read and write
|
|
|
|
28485877000
|
unkown
|
page write copy
|
|
|
|
7FF50B9E2000
|
unkown
|
page readonly
|
|
|
|
384197B000
|
unkown
|
page read and write
|
|
|
|
9350DFF000
|
unkown
|
page read and write
|
|
|
|
9350D79000
|
unkown
|
page read and write
|
|
|
|
28480B00000
|
unkown
|
page read and write
|
|
|
|
33145CC000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBB7000
|
unkown
|
page readonly
|
|
|
|
7FF5BBDED000
|
unkown
|
page readonly
|
|
|
|
1B1B1C13000
|
unkown
|
page read and write
|
|
|
|
7FF52675F000
|
unkown
|
page readonly
|
|
|
|
7FF5D657F000
|
unkown
|
page readonly
|
|
|
|
7FF565D0E000
|
unkown
|
page readonly
|
|
|
|
26CC000
|
unkown
|
page read and write
|
|
|
|
7FF53B0F3000
|
unkown
|
page readonly
|
|
|
|
7FF53B3D6000
|
unkown
|
page readonly
|
|
|
|
249C000
|
unkown
|
page readonly
|
|
|
|
7FF5E281C000
|
unkown
|
page readonly
|
|
|
|
7FF50FC2A000
|
unkown
|
page readonly
|
|
|
|
23833602000
|
unkown
|
page read and write
|
|
|
|
7FF565CDF000
|
unkown
|
page readonly
|
|
|
|
2116000
|
unkown
|
page readonly
|
|
|
|
28480279000
|
unkown
|
page read and write
|
|
|
|
17418460000
|
unkown
|
page readonly
|
|
|
|
1F4AD210000
|
unkown
|
page read and write
|
|
|
|
1F4AD310000
|
unkown
|
page read and write
|
|
|
|
7FF538C9D000
|
unkown
|
page readonly
|
|
|
|
2301FE55000
|
unkown
|
page read and write
|
|
|
|
7FF5BC0EB000
|
unkown
|
page readonly
|
|
|
|
7FF5C1803000
|
unkown
|
page readonly
|
|
|
|
28D8000
|
unkown
|
page read and write
|
|
|
|
7FF56587E000
|
unkown
|
page readonly
|
|
|
|
7FF5E2F7D000
|
unkown
|
page readonly
|
|
|
|
7FF53B373000
|
unkown
|
page readonly
|
|
|
|
2343F870000
|
unkown
|
page read and write
|
|
|
|
1BB1F420000
|
heap default
|
page read and write
|
|
|
|
1F4ACE12000
|
unkown
|
page read and write
|
|
|
|
7FF5D61F9000
|
unkown
|
page readonly
|
|
|
|
2027A070000
|
unkown
|
page readonly
|
|
|
|
B303AFB000
|
unkown
|
page read and write
|
|
|
|
7FF5C15A7000
|
unkown
|
page readonly
|
|
|
|
7FF565C38000
|
unkown
|
page readonly
|
|
|
|
7FF5C6B7D000
|
unkown
|
page readonly
|
|
|
|
7FF5D5FAE000
|
unkown
|
page readonly
|
|
|
|
1C8F0EE0000
|
unkown
|
page read and write
|
|
|
|
2383365A000
|
unkown
|
page read and write
|
|
|
|
1F4ACE00000
|
unkown
|
page read and write
|
|
|
|
7FF53B349000
|
unkown
|
page readonly
|
|
|
|
436047F000
|
unkown
|
page read and write
|
|
|
|
25E0CA00000
|
unkown
|
page read and write
|
|
|
|
27D4000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D45000
|
unkown
|
page readonly
|
|
|
|
7FF50FE4D000
|
unkown
|
page readonly
|
|
|
|
2456000
|
unkown
|
page readonly
|
|
|
|
7FF50FF4C000
|
unkown
|
page readonly
|
|
|
|
A39DC7D000
|
unkown
|
page read and write
|
|
|
|
7FF5C6DDD000
|
unkown
|
page readonly
|
|
|
|
7FF510006000
|
unkown
|
page readonly
|
|
|
|
1F4AACBC000
|
unkown
|
page read and write
|
|
|
|
1F4AACE5000
|
unkown
|
page read and write
|
|
|
|
7FF50FF58000
|
unkown
|
page readonly
|
|
|
|
25E0CB00000
|
unkown
|
page read and write
|
|
|
|
17418280000
|
unkown
|
page readonly
|
|
|
|
1F4ACF43000
|
unkown
|
page read and write
|
|
|
|
7FF5A00ED000
|
unkown
|
page readonly
|
|
|
|
2795000
|
unkown
|
page readonly
|
|
|
|
7FF565C15000
|
unkown
|
page readonly
|
|
|
|
202799C0000
|
unkown
|
page read and write
|
|
|
|
1F4AAC63000
|
unkown
|
page read and write
|
|
|
|
234411F0000
|
unkown
|
page read and write
|
|
|
|
21DB000
|
unkown
|
page readonly
|
|
|
|
7FF50BC4D000
|
unkown
|
page readonly
|
|
|
|
7FF5C1482000
|
unkown
|
page readonly
|
|
|
|
2B57000
|
unkown
|
page readonly
|
|
|
|
2B57000
|
unkown
|
page readonly
|
|
|
|
174184CD000
|
heap default
|
page read and write
|
|
|
|
2E80000
|
unkown
|
page readonly
|
|
|
|
7FF565AB2000
|
unkown
|
page readonly
|
|
|
|
7FF538A8E000
|
unkown
|
page readonly
|
|
|
|
7FF5C6CC2000
|
unkown
|
page readonly
|
|
|
|
1F4AACA1000
|
unkown
|
page read and write
|
|
|
|
7FF505A89000
|
unkown
|
page readonly
|
|
|
|
7FF5E2818000
|
unkown
|
page readonly
|
|
|
|
7FF5C6A9F000
|
unkown
|
page readonly
|
|
|
|
7FF5C6DDB000
|
unkown
|
page readonly
|
|
|
|
1B1B2600000
|
unkown
|
page readonly
|
|
|
|
1BB1F713000
|
unkown
|
page read and write
|
|
|
|
1F4ACB0D000
|
unkown
|
page read and write
|
|
|
|
A77D87E000
|
unkown
|
page read and write
|
|
|
|
2800000
|
unkown
|
page readonly
|
|
|
|
828747E000
|
unkown
|
page read and write
|
|
|
|
2A76000
|
unkown
|
page readonly
|
|
|
|
28485778000
|
unkown
|
page read and write
|
|
|
|
1F4AACC8000
|
unkown
|
page read and write
|
|
|
|
1F4AACDD000
|
unkown
|
page read and write
|
|
|
|
5DAF57B000
|
unkown
|
page read and write
|
|
|
|
7FF50BA0C000
|
unkown
|
page readonly
|
|
|
|
2119000
|
unkown
|
page readonly
|
|
|
|
1F4ACB7D000
|
unkown
|
page read and write
|
|
|
|
1F4AE042000
|
unkown
|
page read and write
|
|
|
|
7FF591B00000
|
unkown
|
page readonly
|
|
|
|
1F4ACB05000
|
unkown
|
page read and write
|
|
|
|
435FCFA000
|
unkown
|
page read and write
|
|
|
|
1B1B2402000
|
unkown
|
page read and write
|
|
|
|
7FF5C6AD3000
|
unkown
|
page readonly
|
|
|
|
1F4AAC79000
|
unkown
|
page read and write
|
|
|
|
2343FA50000
|
unkown
|
page readonly
|
|
|
|
1F4AACBA000
|
unkown
|
page read and write
|
|
|
|
2343F86A000
|
unkown
|
page read and write
|
|
|
|
1B1B1CC0000
|
unkown
|
page read and write
|
|
|
|
1F4AAD1E000
|
unkown
|
page read and write
|
|
|
|
1C8F0FE0000
|
unkown
|
page readonly
|
|
|
|
28480860000
|
unkown
|
page readonly
|
|
|
|
7FF52671F000
|
unkown
|
page readonly
|
|
|
|
7FF52674B000
|
unkown
|
page readonly
|
|
|
|
21EF3600000
|
unkown
|
page readonly
|
|
|
|
7FF5BC01D000
|
unkown
|
page readonly
|
|
|
|
21258A00000
|
unkown
|
page readonly
|
|
|
|
435FEFA000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCDA000
|
unkown
|
page readonly
|
|
|
|
27A1000
|
unkown
|
page readonly
|
|
|
|
7FF53B3ED000
|
unkown
|
page readonly
|
|
|
|
20279A63000
|
unkown
|
page read and write
|
|
|
|
24AD000
|
unkown
|
page readonly
|
|
|
|
17419F40000
|
heap private
|
page read and write
|
|
|
|
73A0BFE000
|
unkown
|
page read and write
|
|
|
|
7FF5E2E50000
|
unkown
|
page readonly
|
|
|
|
7FF591C2D000
|
unkown
|
page readonly
|
|
|
|
2AD0000
|
heap default
|
page read and write
|
|
|
|
28485844000
|
unkown
|
page readonly
|
|
|
|
1F4AAD2C000
|
unkown
|
page read and write
|
|
|
|
252C000
|
unkown
|
page readonly
|
|
|
|
2AA38856000
|
unkown
|
page read and write
|
|
|
|
7FF5C6DAE000
|
unkown
|
page readonly
|
|
|
|
7FF50BB58000
|
unkown
|
page readonly
|
|
|
|
28485840000
|
unkown
|
page read and write
|
|
|
|
7FF5E2E57000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD8A000
|
unkown
|
page readonly
|
|
|
|
7FF5E2C9D000
|
unkown
|
page readonly
|
|
|
|
7FF4FF6B8000
|
unkown
|
page readonly
|
|
|
|
7FF51C22F000
|
unkown
|
page readonly
|
|
|
|
7FF5C6980000
|
unkown
|
page readonly
|
|
|
|
2343F86A000
|
unkown
|
page read and write
|
|
|
|
435FF7A000
|
unkown
|
page read and write
|
|
|
|
7FF4FFCED000
|
unkown
|
page readonly
|
|
|
|
1F4AE100000
|
unkown
|
page read and write
|
|
|
|
7FF5D665D000
|
unkown
|
page readonly
|
|
|
|
3510000
|
heap private
|
page read and write
|
|
|
|
21EF2C2A000
|
unkown
|
page read and write
|
|
|
|
1BB1F64C000
|
unkown
|
page read and write
|
|
|
|
21EF2B00000
|
unkown
|
page readonly
|
|
|
|
9350C7F000
|
unkown
|
page read and write
|
|
|
|
1F4AAC5B000
|
unkown
|
page read and write
|
|
|
|
2217000
|
unkown
|
page readonly
|
|
|
|
1BB1F5F0000
|
unkown
|
page read and write
|
|
|
|
A39D8FE000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD58000
|
unkown
|
page readonly
|
|
|
|
25E0CA1F000
|
unkown
|
page read and write
|
|
|
|
28481260000
|
unkown
|
page readonly
|
|
|
|
2471AEF0000
|
unkown
|
page readonly
|
|
|
|
435FA7E000
|
unkown
|
page read and write
|
|
|
|
7FF5D63E3000
|
unkown
|
page readonly
|
|
|
|
1741A060000
|
heap private
|
page read and write
|
|
|
|
2AA38846000
|
unkown
|
page read and write
|
|
|
|
21E5000
|
unkown
|
page readonly
|
|
|
|
1F4AE082000
|
unkown
|
page read and write
|
|
|
|
2570000
|
unkown
|
page readonly
|
|
|
|
2ABC000
|
unkown
|
page readonly
|
|
|
|
7FF565CFD000
|
unkown
|
page readonly
|
|
|
|
29B0000
|
heap default
|
page read and write
|
|
|
|
FA88AFE000
|
unkown
|
page read and write
|
|
|
|
21EF2C76000
|
unkown
|
page read and write
|
|
|
|
2471AEE0000
|
heap default
|
page read and write
|
|
|
|
7FF503653000
|
unkown
|
page readonly
|
|
|
|
7FF50FC1D000
|
unkown
|
page readonly
|
|
|
|
7FF5C6440000
|
unkown
|
page readonly
|
|
|
|
7FF5BBC90000
|
unkown
|
page readonly
|
|
|
|
2125886D000
|
unkown
|
page read and write
|
|
|
|
28485874000
|
unkown
|
page write copy
|
|
|
|
25F236B6000
|
unkown
|
page read and write
|
|
|
|
21EF2E00000
|
unkown
|
page readonly
|
|
|
|
28480B59000
|
unkown
|
page read and write
|
|
|
|
1F4ACBE6000
|
unkown
|
page read and write
|
|
|
|
25F25490000
|
unkown
|
page readonly
|
|
|
|
2343F84F000
|
unkown
|
page read and write
|
|
|
|
7FF505F9D000
|
unkown
|
page readonly
|
|
|
|
2BD0000
|
heap private
|
page read and write
|
|
|
|
3314B7C000
|
unkown
|
page read and write
|
|
|
|
5DAF37F000
|
unkown
|
page read and write
|
|
|
|
1F4ACB7E000
|
unkown
|
page read and write
|
|
|
|
7FF565D04000
|
unkown
|
page readonly
|
|
|
|
7FF503675000
|
unkown
|
page readonly
|
|
|
|
DC6EBFB000
|
unkown
|
page read and write
|
|
|
|
7FF538C8B000
|
unkown
|
page readonly
|
|
|
|
1C8EF920000
|
unkown
|
page readonly
|
|
|
|
7FF5C6983000
|
unkown
|
page readonly
|
|
|
|
1F4AAC90000
|
unkown
|
page read and write
|
|
|
|
B303D7E000
|
unkown
|
page read and write
|
|
|
|
7FF5D66FB000
|
unkown
|
page readonly
|
|
|
|
2343F83F000
|
unkown
|
page read and write
|
|
|
|
2E00000
|
unkown
|
page readonly
|
|
|
|
7FF5BBFD2000
|
unkown
|
page readonly
|
|
|
|
2471B200000
|
unkown
|
page write copy
|
|
|
|
20279A87000
|
unkown
|
page read and write
|
|
|
|
7FF538B82000
|
unkown
|
page readonly
|
|
|
|
2AEC000
|
unkown
|
page read and write
|
|
|
|
28480A15000
|
unkown
|
page read and write
|
|
|
|
1F4ACB38000
|
unkown
|
page read and write
|
|
|
|
28485867000
|
unkown
|
page readonly
|
|
|
|
2AB0000
|
unkown
|
page readonly
|
|
|
|
7FF5C147D000
|
unkown
|
page readonly
|
|
|
|
7FF538C9F000
|
unkown
|
page readonly
|
|
|
|
7FF538C8E000
|
unkown
|
page readonly
|
|
|
|
21EF3190000
|
unkown
|
page readonly
|
|
|
|
1F4ACBE7000
|
unkown
|
page read and write
|
|
|
|
7FF5C1774000
|
unkown
|
page readonly
|
|
|
|
7FF5BC025000
|
unkown
|
page readonly
|
|
|
|
2343F86C000
|
unkown
|
page read and write
|
|
|
|
7FF5E2B6F000
|
unkown
|
page readonly
|
|
|
|
1BB1F430000
|
unkown
|
page readonly
|
|
|
|
7FF5BBC94000
|
unkown
|
page readonly
|
|
|
|
7FF538C9F000
|
unkown
|
page readonly
|
|
|
|
2AA38800000
|
unkown
|
page read and write
|
|
|
|
1F4AACE0000
|
unkown
|
page read and write
|
|
|
|
1B1B1B80000
|
unkown
|
page readonly
|
|
|
|
23833683000
|
unkown
|
page read and write
|
|
|
|
7FF4FFDA3000
|
unkown
|
page readonly
|
|
|
|
7FF5BBE11000
|
unkown
|
page readonly
|
|
|
|
7FF50FD3D000
|
unkown
|
page readonly
|
|
|
|
2343F902000
|
unkown
|
page read and write
|
|
|
|
7FF5D672B000
|
unkown
|
page readonly
|
|
|
|
7FF538B8C000
|
unkown
|
page readonly
|
|
|
|
1F4AAB40000
|
unkown
|
page readonly
|
|
|
|
7FF5A053A000
|
unkown
|
page readonly
|
|
|
|
7FF538A17000
|
unkown
|
page readonly
|
|
|
|
B182AFB000
|
unkown
|
page read and write
|
|
|
|
1F4AD210000
|
unkown
|
page read and write
|
|
|
|
23833BA0000
|
unkown
|
page read and write
|
|
|
|
7FF5C6C8D000
|
unkown
|
page readonly
|
|
|
|
28485880000
|
unkown
|
page read and write
|
|
|
|
7FF5BBC9E000
|
unkown
|
page readonly
|
|
|
|
7FF5C6CB0000
|
unkown
|
page readonly
|
|
|
|
7FF538B78000
|
unkown
|
page readonly
|
|
|
|
7FF53AFFD000
|
unkown
|
page readonly
|
|
|
|
7FF5C6554000
|
unkown
|
page readonly
|
|
|
|
7FF50583D000
|
unkown
|
page readonly
|
|
|
|
1C8EF6D0000
|
unkown
|
page write copy
|
|
|
|
7FF5BBBD5000
|
unkown
|
page readonly
|
|
|
|
7FF50BC4F000
|
unkown
|
page readonly
|
|
|
|
7FF5E2F9F000
|
unkown
|
page readonly
|
|
|
|
284857A0000
|
unkown
|
page read and write
|
|
|
|
25F236E7000
|
unkown
|
page read and write
|
|
|
|
82875FF000
|
unkown
|
page read and write
|
|
|
|
7FF50BB9A000
|
unkown
|
page readonly
|
|
|
|
2544AA00000
|
unkown
|
page readonly
|
|
|
|
2130000
|
unkown
|
page readonly
|
|
|
|
7FF538B93000
|
unkown
|
page readonly
|
|
|
|
7FF4FFC4D000
|
unkown
|
page readonly
|
|
|
|
28480229000
|
unkown
|
page read and write
|
|
|
|
2128000
|
unkown
|
page readonly
|
|
|
|
2471B068000
|
unkown
|
page read and write
|
|
|
|
1F4ACB3A000
|
unkown
|
page read and write
|
|
|
|
284858C0000
|
unkown
|
page read and write
|
|
|
|
1C8EF402000
|
unkown
|
page read and write
|
|
|
|
7FF51C15D000
|
unkown
|
page readonly
|
|
|
|
2471B06D000
|
unkown
|
page read and write
|
|
|
|
1F4AD110000
|
unkown
|
page read and write
|
|
|
|
7FF5E2F5F000
|
unkown
|
page readonly
|
|
|
|
20279B02000
|
unkown
|
page read and write
|
|
|
|
284859B0000
|
unkown
|
page readonly
|
|
|
|
7FF5266C5000
|
unkown
|
page readonly
|
|
|
|
2AA386C0000
|
unkown
|
page readonly
|
|
|
|
1F4AACBA000
|
unkown
|
page read and write
|
|
|
|
1F4ACB7B000
|
unkown
|
page read and write
|
|
|
|
7FF5E2EA7000
|
unkown
|
page readonly
|
|
|
|
1BB1F500000
|
unkown
|
page readonly
|
|
|
|
DA4D07F000
|
unkown
|
page read and write
|
|
|
|
7FF5C6CB4000
|
unkown
|
page readonly
|
|
|
|
7FF5C6B30000
|
unkown
|
page readonly
|
|
|
|
1F4AC9E0000
|
unkown
|
page read and write
|
|
|
|
7FF5BBB9F000
|
unkown
|
page readonly
|
|
|
|
1F4AA9B0000
|
heap private
|
page read and write
|
|
|
|
7FF51C22F000
|
unkown
|
page readonly
|
|
|
|
2B2B000
|
stack
|
page read and write
|
|
|
|
DA4CFFF000
|
unkown
|
page read and write
|
|
|
|
215A000
|
unkown
|
page readonly
|
|
|
|
7FF538C7D000
|
unkown
|
page readonly
|
|
|
|
28485930000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE06000
|
unkown
|
page readonly
|
|
|
|
7FF51003F000
|
unkown
|
page readonly
|
|
|
|
7FF5A0920000
|
unkown
|
page readonly
|
|
|
|
7FF50FF14000
|
unkown
|
page readonly
|
|
|
|
7FF538C03000
|
unkown
|
page readonly
|
|
|
|
38414FC000
|
unkown
|
page read and write
|
|
|
|
284859F0000
|
unkown
|
page readonly
|
|
|
|
2ADD000
|
unkown
|
page readonly
|
|
|
|
7FF5BBE15000
|
unkown
|
page readonly
|
|
|
|
2343F866000
|
unkown
|
page read and write
|
|
|
|
2343F86E000
|
unkown
|
page read and write
|
|
|
|
A39DAFF000
|
unkown
|
page read and write
|
|
|
|
7FF5C6DDF000
|
unkown
|
page readonly
|
|
|
|
7FF565C02000
|
unkown
|
page readonly
|
|
|
|
7FF5C6DDF000
|
unkown
|
page readonly
|
|
|
|
2343F86A000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCBF000
|
unkown
|
page readonly
|
|
|
|
7FF50FEF7000
|
unkown
|
page readonly
|
|
|
|
7FF50370F000
|
unkown
|
page readonly
|
|
|
|
274D000
|
unkown
|
page readonly
|
|
|
|
28480B58000
|
unkown
|
page read and write
|
|
|
|
2AA38843000
|
unkown
|
page read and write
|
|
|
|
2343F800000
|
unkown
|
page read and write
|
|
|
|
7FF5C688F000
|
unkown
|
page readonly
|
|
|
|
7FF50FD47000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD14000
|
unkown
|
page readonly
|
|
|
|
7FF5D6700000
|
unkown
|
page readonly
|
|
|
|
7FF5C6494000
|
unkown
|
page readonly
|
|
|
|
21258E70000
|
unkown
|
page readonly
|
|
|
|
1DF2000
|
unkown
|
page readonly
|
|
|
|
7FF5A094F000
|
unkown
|
page readonly
|
|
|
|
7FF5C188E000
|
unkown
|
page readonly
|
|
|
|
7FF505FA4000
|
unkown
|
page readonly
|
|
|
|
435FE7A000
|
unkown
|
page read and write
|
|
|
|
25E0CC50000
|
unkown
|
page readonly
|
|
|
|
1F4AACBA000
|
unkown
|
page read and write
|
|
|
|
2A80000
|
heap private
|
page read and write
|
|
|
|
7FF5E2EB8000
|
unkown
|
page readonly
|
|
|
|
7FF50BB43000
|
unkown
|
page readonly
|
|
|
|
1F4ACEA4000
|
unkown
|
page read and write
|
|
|
|
73A058C000
|
unkown
|
page read and write
|
|
|
|
7FF5C17D9000
|
unkown
|
page readonly
|
|
|
|
7FF5E2ECD000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D23000
|
unkown
|
page readonly
|
|
|
|
28485770000
|
unkown
|
page read and write
|
|
|
|
23833613000
|
unkown
|
page read and write
|
|
|
|
217D000
|
unkown
|
page readonly
|
|
|
|
1F4AACB9000
|
unkown
|
page read and write
|
|
|
|
2383366A000
|
unkown
|
page read and write
|
|
|
|
7FF538C66000
|
unkown
|
page readonly
|
|
|
|
2383363D000
|
unkown
|
page read and write
|
|
|
|
7FF51BFCD000
|
unkown
|
page readonly
|
|
|
|
7FF5D6627000
|
unkown
|
page readonly
|
|
|
|
7FF565CD8000
|
unkown
|
page readonly
|
|
|
|
1F4ACB03000
|
unkown
|
page read and write
|
|
|
|
7FF5E2E4D000
|
unkown
|
page readonly
|
|
|
|
DC6F27D000
|
unkown
|
page read and write
|
|
|
|
7FF565C59000
|
unkown
|
page readonly
|
|
|
|
21AD000
|
unkown
|
page readonly
|
|
|
|
7FF526630000
|
unkown
|
page readonly
|
|
|
|
1F4ACB36000
|
unkown
|
page read and write
|
|
|
|
7FF5C17CD000
|
unkown
|
page readonly
|
|
|
|
7FF5A089A000
|
unkown
|
page readonly
|
|
|
|
7FF5D651E000
|
unkown
|
page readonly
|
|
|
|
A39DB7A000
|
unkown
|
page read and write
|
|
|
|
2B3B000
|
unkown
|
page readonly
|
|
|
|
1F4AAC5D000
|
unkown
|
page read and write
|
|
|
|
7FF505F25000
|
unkown
|
page readonly
|
|
|
|
1F4AD310000
|
unkown
|
page read and write
|
|
|
|
2120000
|
unkown
|
page readonly
|
|
|
|
7FF5C1858000
|
unkown
|
page readonly
|
|
|
|
7FF591A1E000
|
unkown
|
page readonly
|
|
|
|
1F4AE000000
|
unkown
|
page read and write
|
|
|
|
7FF53888A000
|
unkown
|
page readonly
|
|
|
|
1F4ACBE6000
|
unkown
|
page read and write
|
|
|
|
2537000
|
unkown
|
page readonly
|
|
|
|
25E0CB02000
|
unkown
|
page read and write
|
|
|
|
1F4AD010000
|
unkown
|
page read and write
|
|
|
|
7FF51C127000
|
unkown
|
page readonly
|
|
|
|
7FF5A094B000
|
unkown
|
page readonly
|
|
|
|
2471B113000
|
unkown
|
page read and write
|
|
|
|
2560000
|
unkown
|
page read and write
|
|
|
|
436007B000
|
unkown
|
page read and write
|
|
|
|
7FF5BBE8D000
|
unkown
|
page readonly
|
|
|
|
7FF5C17A7000
|
unkown
|
page readonly
|
|
|
|
25F236B8000
|
unkown
|
page read and write
|
|
|
|
7FF53B37D000
|
unkown
|
page readonly
|
|
|
|
7FF5D61F3000
|
unkown
|
page readonly
|
|
|
|
2217000
|
unkown
|
page readonly
|
|
|
|
28481060000
|
unkown
|
page read and write
|
|
|
|
21EF2AF0000
|
heap default
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page readonly
|
|
|
|
7FF538BD5000
|
unkown
|
page readonly
|
|
|
|
2AA387E0000
|
unkown
|
page readonly
|
|
|
|
7FF50BB3C000
|
unkown
|
page readonly
|
|
|
|
7FF50BB68000
|
unkown
|
page readonly
|
|
|
|
17418AA0000
|
unkown
|
page readonly
|
|
|
|
7FF5BC0DB000
|
unkown
|
page readonly
|
|
|
|
7FF565B36000
|
unkown
|
page readonly
|
|
|
|
23833520000
|
unkown
|
page readonly
|
|
|
|
28481290000
|
unkown
|
page readonly
|
|
|
|
7FF538C9B000
|
unkown
|
page readonly
|
|
|
|
7FF51002B000
|
unkown
|
page readonly
|
|
|
|
1F4AACDC000
|
unkown
|
page read and write
|
|
|
|
7FF538B74000
|
unkown
|
page readonly
|
|
|
|
2544A7C0000
|
unkown
|
page read and write
|
|
|
|
7FF510024000
|
unkown
|
page readonly
|
|
|
|
7FF591C34000
|
unkown
|
page readonly
|
|
|
|
23833600000
|
unkown
|
page read and write
|
|
|
|
25F25480000
|
unkown
|
page read and write
|
|
|
|
1C8EF429000
|
unkown
|
page read and write
|
|
|
|
2EFA000
|
unkown
|
page read and write
|
|
|
|
A39D97E000
|
unkown
|
page read and write
|
|
|
|
7FF5A093E000
|
unkown
|
page readonly
|
|
|
|
7FF50FDB7000
|
unkown
|
page readonly
|
|
|
|
7FF5034FE000
|
unkown
|
page readonly
|
|
|
|
1B1B253A000
|
unkown
|
page read and write
|
|
|
|
2139000
|
unkown
|
page readonly
|
|
|
|
2148000
|
unkown
|
page readonly
|
|
|
|
7FF51C165000
|
unkown
|
page readonly
|
|
|
|
7FF5BBDF7000
|
unkown
|
page readonly
|
|
|
|
1F4ACB60000
|
unkown
|
page read and write
|
|
|
|
7FF5BC0AF000
|
unkown
|
page readonly
|
|
|
|
38418FC000
|
unkown
|
page read and write
|
|
|
|
1F4AD410000
|
unkown
|
page read and write
|
|
|
|
7FF53B3C8000
|
unkown
|
page readonly
|
|
|
|
21EF2BD0000
|
unkown
|
page readonly
|
|
|
|
7FF51C195000
|
unkown
|
page readonly
|
|
|
|
28481063000
|
unkown
|
page read and write
|
|
|
|
247A000
|
unkown
|
page readonly
|
|
|
|
21EF2C5A000
|
unkown
|
page read and write
|
|
|
|
1F4AACF0000
|
unkown
|
page read and write
|
|
|
|
7FF53B31C000
|
unkown
|
page readonly
|
|
|
|
7FF50BC16000
|
unkown
|
page readonly
|
|
|
|
273D000
|
unkown
|
page readonly
|
|
|
|
BBAD3FB000
|
unkown
|
page read and write
|
|
|
|
21258828000
|
unkown
|
page read and write
|
|
|
|
2544A840000
|
unkown
|
page read and write
|
|
|
|
28485A88000
|
unkown
|
page read and write
|
|
|
|
284859D0000
|
unkown
|
page readonly
|
|
|
|
1C8EF720000
|
unkown
|
page readonly
|
|
|
|
7FF565B2D000
|
unkown
|
page readonly
|
|
|
|
1F4AAC66000
|
unkown
|
page read and write
|
|
|
|
7FF538B57000
|
unkown
|
page readonly
|
|
|
|
B01CCFF000
|
unkown
|
page read and write
|
|
|
|
1F4AD410000
|
unkown
|
page read and write
|
|
|
|
28480258000
|
unkown
|
page read and write
|
|
|
|
1F4AAD1D000
|
unkown
|
page read and write
|
|
|
|
1BB1F600000
|
unkown
|
page read and write
|
|
|
|
23020480000
|
unkown
|
page readonly
|
|
|
|
25F23590000
|
unkown
|
page write copy
|
|
|
|
28481250000
|
unkown
|
page readonly
|
|
|
|
2442000
|
unkown
|
page readonly
|
|
|
|
384167F000
|
unkown
|
page read and write
|
|
|
|
7FF591AED000
|
unkown
|
page readonly
|
|
|
|
2179000
|
unkown
|
page readonly
|
|
|
|
1F4ACA02000
|
unkown
|
page read and write
|
|
|
|
2B41000
|
unkown
|
page readonly
|
|
|
|
2580000
|
unkown
|
page readonly
|
|
|
|
7FF5036C8000
|
unkown
|
page readonly
|
|
|
|
1F4AACDC000
|
unkown
|
page read and write
|
|
|
|
2ADA000
|
heap default
|
page read and write
|
|
|
|
2495000
|
unkown
|
page readonly
|
|
|
|
7FF565D1D000
|
unkown
|
page readonly
|
|
|
|
220C000
|
unkown
|
page readonly
|
|
|
|
7FF53886F000
|
unkown
|
page readonly
|
|
|
|
1F4AAD18000
|
unkown
|
page read and write
|
|
|
|
7FF5BBF8F000
|
unkown
|
page readonly
|
|
|
|
28480870000
|
unkown
|
page read and write
|
|
|
|
7FF5C6CD7000
|
unkown
|
page readonly
|
|
|
|
284858A0000
|
unkown
|
page read and write
|
|
|
|
82874F9000
|
unkown
|
page read and write
|
|
|
|
2343F829000
|
unkown
|
page read and write
|
|
|
|
A39D9F9000
|
unkown
|
page read and write
|
|
|
|
28480A02000
|
unkown
|
page read and write
|
|
|
|
435FBFE000
|
unkown
|
page read and write
|
|
|
|
28485650000
|
unkown
|
page read and write
|
|
|
|
7FF505F86000
|
unkown
|
page readonly
|
|
|
|
2485000
|
unkown
|
page readonly
|
|
|
|
B30387E000
|
unkown
|
page read and write
|
|
|
|
2301FDD0000
|
unkown
|
page read and write
|
|
|
|
7FF5BBFE7000
|
unkown
|
page readonly
|
|
|
|
2780000
|
unkown
|
page readonly
|
|
|
|
7FF538BEA000
|
unkown
|
page readonly
|
|
|
|
28480213000
|
unkown
|
page read and write
|
|
|
|
7DFD9D239000
|
unkown
|
page readonly
|
|
|
|
1B1B2513000
|
unkown
|
page read and write
|
|
|
|
251B000
|
unkown
|
page readonly
|
|
|
|
7FF50BC34000
|
unkown
|
page readonly
|
|
|
|
2848029F000
|
unkown
|
page read and write
|
|
|
|
23833664000
|
unkown
|
page read and write
|
|
|
|
7FF50FF6D000
|
unkown
|
page readonly
|
|
|
|
2774000
|
unkown
|
page readonly
|
|
|
|
7FF5C148A000
|
unkown
|
page readonly
|
|
|
|
7FF50BB32000
|
unkown
|
page readonly
|
|
|
|
23020000000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE3F000
|
unkown
|
page readonly
|
|
|
|
2165000
|
unkown
|
page readonly
|
|
|
|
28485791000
|
unkown
|
page read and write
|
|
|
|
7FF5A0675000
|
unkown
|
page readonly
|
|
|
|
1F4AAE00000
|
unkown
|
page readonly
|
|
|
|
7FF53B353000
|
unkown
|
page readonly
|
|
|
|
7FF51C214000
|
unkown
|
page readonly
|
|
|
|
7FF53B006000
|
unkown
|
page readonly
|
|
|
|
284812B0000
|
unkown
|
page readonly
|
|
|
|
1F4AD010000
|
unkown
|
page read and write
|
|
|
|
7FF50B94D000
|
unkown
|
page readonly
|
|
|
|
A39DDFF000
|
unkown
|
page read and write
|
|
|
|
2383365E000
|
unkown
|
page read and write
|
|
|
|
7FF53B3FB000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page readonly
|
|
|
|
7FF5C6DCE000
|
unkown
|
page readonly
|
|
|
|
23833642000
|
unkown
|
page read and write
|
|
|
|
1BB1F800000
|
unkown
|
page readonly
|
|
|
|
7FF503628000
|
unkown
|
page readonly
|
|
|
|
1BB1F670000
|
unkown
|
page read and write
|
|
|
|
7FF505FBB000
|
unkown
|
page readonly
|
|
|
|
21E1000
|
unkown
|
page readonly
|
|
|
|
A77DD7E000
|
unkown
|
page read and write
|
|
|
|
1C8EF390000
|
heap private
|
page read and write
|
|
|
|
7FF5A0934000
|
unkown
|
page readonly
|
|
|
|
7FF5A075D000
|
unkown
|
page readonly
|
|
|
|
7FF4FFC2E000
|
unkown
|
page readonly
|
|
|
|
435FC7E000
|
unkown
|
page read and write
|
|
|
|
5DAF27C000
|
unkown
|
page read and write
|
|
|
|
7FF5BC0D4000
|
unkown
|
page readonly
|
|
|
|
25F25400000
|
unkown
|
page read and write
|
|
|
|
1B1B1A50000
|
heap default
|
page read and write
|
|
|
|
248B000
|
unkown
|
page readonly
|
|
|
|
23833C02000
|
unkown
|
page read and write
|
|
|
|
21F7000
|
unkown
|
page readonly
|
|
|
|
1E12000
|
unkown
|
page readonly
|
|
|
|
7FF505E34000
|
unkown
|
page readonly
|
|
|
|
1F4AABF0000
|
unkown
|
page readonly
|
|
|
|
7FF526718000
|
unkown
|
page readonly
|
|
|
|
2B00000
|
heap default
|
page read and write
|
|
|
|
7FF538785000
|
unkown
|
page readonly
|
|
|
|
38410EB000
|
unkown
|
page read and write
|
|
|
|
28480302000
|
unkown
|
page read and write
|
|
|
|
25F236C1000
|
unkown
|
page read and write
|
|
|
|
7FF52674E000
|
unkown
|
page readonly
|
|
|
|
1F4AAD5E000
|
unkown
|
page read and write
|
|
|
|
7FF591966000
|
unkown
|
page readonly
|
|
|
|
7FF5E2F8B000
|
unkown
|
page readonly
|
|
|
|
FA880AB000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD83000
|
unkown
|
page readonly
|
|
|
|
1F4AC5A0000
|
unkown
|
page read and write
|
|
|
|
7FF5C159D000
|
unkown
|
page readonly
|
|
|
|
436027D000
|
unkown
|
page read and write
|
|
|
|
28485A63000
|
unkown
|
page read and write
|
|
|
|
1BB1F700000
|
unkown
|
page read and write
|
|
|
|
7FF5D6673000
|
unkown
|
page readonly
|
|
|
|
7FF5D66E8000
|
unkown
|
page readonly
|
|
|
|
7FF50BB7D000
|
unkown
|
page readonly
|
|
|
|
238333E0000
|
heap private
|
page read and write
|
|
|
|
2B45000
|
unkown
|
page readonly
|
|
|
|
1F4AD310000
|
unkown
|
page read and write
|
|
|
|
7FF5C17D5000
|
unkown
|
page readonly
|
|
|
|
7FF51C148000
|
unkown
|
page readonly
|
|
|
|
7FF5C6CF8000
|
unkown
|
page readonly
|
|
|
|
2301FE4F000
|
unkown
|
page read and write
|
|
|
|
7FF5A07FD000
|
unkown
|
page readonly
|
|
|
|
DA4CB2B000
|
unkown
|
page read and write
|
|
|
|
20279A6D000
|
unkown
|
page read and write
|
|
|
|
7FF538BCD000
|
unkown
|
page readonly
|
|
|
|
2189000
|
unkown
|
page readonly
|
|
|
|
2EFE000
|
unkown
|
page read and write
|
|
|
|
2544A85C000
|
unkown
|
page read and write
|
|
|
|
7FF526695000
|
unkown
|
page readonly
|
|
|
|
2471C9F0000
|
unkown
|
page read and write
|
|
|
|
28480B18000
|
unkown
|
page read and write
|
|
|
|
DC6F0FF000
|
unkown
|
page read and write
|
|
|
|
20ED000
|
unkown
|
page readonly
|
|
|
|
20279A13000
|
unkown
|
page read and write
|
|
|
|
25E0E3F0000
|
unkown
|
page read and write
|
|
|
|
7FF5E2E74000
|
unkown
|
page readonly
|
|
|
|
7FF5BC0CD000
|
unkown
|
page readonly
|
|
|
|
28485A14000
|
unkown
|
page read and write
|
|
|
|
2AA3A1A0000
|
unkown
|
page read and write
|
|
|
|
1F4ACB00000
|
unkown
|
page read and write
|
|
|
|
1741849B000
|
heap default
|
page read and write
|
|
|
|
7FF5A064D000
|
unkown
|
page readonly
|
|
|
|
2471CAF0000
|
unkown
|
page readonly
|
|
|
|
7FF5E2CA7000
|
unkown
|
page readonly
|
|
|
|
7AD5CFF000
|
unkown
|
page read and write
|
|
|
|
7FF5264FD000
|
unkown
|
page readonly
|
|
|
|
28485AB8000
|
unkown
|
page read and write
|
|
|
|
935093B000
|
unkown
|
page read and write
|
|
|
|
1BB1F708000
|
unkown
|
page read and write
|
|
|
|
435FAFA000
|
unkown
|
page read and write
|
|
|
|
7FF538AD7000
|
unkown
|
page readonly
|
|
|
|
7FF53B328000
|
unkown
|
page readonly
|
|
|
|
20279A54000
|
unkown
|
page read and write
|
|
|
|
7FF5C6CD3000
|
unkown
|
page readonly
|
|
|
|
7FF5A06C7000
|
unkown
|
page readonly
|
|
|
|
7FF5BBE40000
|
unkown
|
page readonly
|
|
|
|
29BA000
|
heap default
|
page read and write
|
|
|
|
1BB1F613000
|
unkown
|
page read and write
|
|
|
|
7FF50BA16000
|
unkown
|
page readonly
|
|
|
|
20FD000
|
unkown
|
page readonly
|
|
|
|
2343F86A000
|
unkown
|
page read and write
|
|
|
|
284858B0000
|
unkown
|
page read and write
|
|
|
|
7FF5E2F70000
|
unkown
|
page readonly
|
|
|
|
7FF591C08000
|
unkown
|
page readonly
|
|
|
|
7FF5C6DCB000
|
unkown
|
page readonly
|
|
|
|
1C8EF400000
|
unkown
|
page read and write
|
|
|
|
7FF538C6B000
|
unkown
|
page readonly
|
|
|
|
1B1B1C88000
|
unkown
|
page read and write
|
|
|
|
B01C97A000
|
unkown
|
page read and write
|
|
|
|
1F4ACB7E000
|
unkown
|
page read and write
|
|
|
|
25E0C880000
|
heap private
|
page read and write
|
|
|
|
215C000
|
unkown
|
page readonly
|
|
|
|
435F79F000
|
unkown
|
page read and write
|
|
|
|
7FF5C189F000
|
unkown
|
page readonly
|
|
|
|
25F23800000
|
unkown
|
page readonly
|
|
|
|
2A5D000
|
unkown
|
page readonly
|
|
|
|
1F4AACE7000
|
unkown
|
page read and write
|
|
|
|
2544A7C0000
|
unkown
|
page read and write
|
|
|
|
1C8EF3F0000
|
heap default
|
page read and write
|
|
|
|
7FF5E2F9F000
|
unkown
|
page readonly
|
|
|
|
1F4ACBC3000
|
unkown
|
page read and write
|
|
|
|
2155000
|
unkown
|
page readonly
|
|
|
|
B182B7F000
|
unkown
|
page read and write
|
|
|
|
23833666000
|
unkown
|
page read and write
|
|
|
|
3061000
|
heap default
|
page read and write
|
|
|
|
7FF5C6A6A000
|
unkown
|
page readonly
|
|
|
|
7FF5D670D000
|
unkown
|
page readonly
|
|
|
|
24FB000
|
stack
|
page read and write
|
|
|
|
7FF565C63000
|
unkown
|
page readonly
|
|
|
|
2A80000
|
unkown
|
page read and write
|
|
|
|
7FF5A052D000
|
unkown
|
page readonly
|
|
|
|
2301FE87000
|
unkown
|
page read and write
|
|
|
|
7FF591B54000
|
unkown
|
page readonly
|
|
|
|
2383363A000
|
unkown
|
page read and write
|
|
|
|
7FF565C6A000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D98000
|
unkown
|
page readonly
|
|
|
|
2301FF00000
|
unkown
|
page read and write
|
|
|
|
23833800000
|
unkown
|
page readonly
|
|
|
|
7FF50FF47000
|
unkown
|
page readonly
|
|
|
|
25F25748000
|
unkown
|
page read and write
|
|
|
|
7FF4FFA1D000
|
unkown
|
page readonly
|
|
|
|
7FF565C17000
|
unkown
|
page readonly
|
|
|
|
303B000
|
stack
|
page read and write
|
|
|
|
7FF50FF8A000
|
unkown
|
page readonly
|
|
|
|
7FF51003F000
|
unkown
|
page readonly
|
|
|
|
7FF5C17AC000
|
unkown
|
page readonly
|
|
|
|
7FF50355F000
|
unkown
|
page readonly
|
|
|
|
2471B06D000
|
unkown
|
page read and write
|
|
|
|
1B1B1D13000
|
unkown
|
page read and write
|
|
|
|
25E0CA3F000
|
unkown
|
page read and write
|
|
|
|
7FF5C6ACC000
|
unkown
|
page readonly
|
|
|
|
1B1B1C29000
|
unkown
|
page read and write
|
|
|
|
210D000
|
unkown
|
page readonly
|
|
|
|
2C30000
|
unkown
|
page readonly
|
|
|
|
2343F813000
|
unkown
|
page read and write
|
|
|
|
7FF5A0857000
|
unkown
|
page readonly
|
|
|
|
7FF591B7D000
|
unkown
|
page readonly
|
|
|
|
7FF53B2BA000
|
unkown
|
page readonly
|
|
|
|
7FF591C3B000
|
unkown
|
page readonly
|
|
|
|
A77DC77000
|
unkown
|
page read and write
|
|
|
|
7FF5BBFDC000
|
unkown
|
page readonly
|
|
|
|
7FF505F03000
|
unkown
|
page readonly
|
|
|
|
7FF5C6AD1000
|
unkown
|
page readonly
|
|
|
|
1F4ACB19000
|
unkown
|
page read and write
|
|
|
|
7FF5C1866000
|
unkown
|
page readonly
|
|
|
|
2343F802000
|
unkown
|
page read and write
|
|
|
|
2144000
|
unkown
|
page readonly
|
|
|
|
A77DB7B000
|
unkown
|
page read and write
|
|
|
|
202798D0000
|
unkown
|
page readonly
|
|
|
|
5DAF475000
|
unkown
|
page read and write
|
|
|
|
28485770000
|
unkown
|
page read and write
|
|
|
|
1F4AD410000
|
unkown
|
page read and write
|
|
|
|
7FF4FFE2E000
|
unkown
|
page readonly
|
|
|
|
1F4ACC10000
|
unkown
|
page readonly
|
|
|
|
2848028F000
|
unkown
|
page read and write
|
|
|
|
1B1B1C00000
|
unkown
|
page read and write
|
|
|
|
1F4AD310000
|
unkown
|
page read and write
|
|
|
|
28480980000
|
unkown
|
page read and write
|
|
|
|
7FF5E2B82000
|
unkown
|
page readonly
|
|
|
|
7FF50BC1B000
|
unkown
|
page readonly
|
|
|
|
7FF5034AD000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE24000
|
unkown
|
page readonly
|
|
|
|
7FF505F78000
|
unkown
|
page readonly
|
|
|
|
7FF565BB2000
|
unkown
|
page readonly
|
|
|
|
7FF5BBFA0000
|
unkown
|
page readonly
|
|
|
|
1F4AACC8000
|
unkown
|
page read and write
|
|
|
|
1F4AAC65000
|
unkown
|
page read and write
|
|
|
|
174183B0000
|
unkown
|
page read and write
|
|
|
|
21258AD0000
|
unkown
|
page readonly
|
|
|
|
7FF5033C3000
|
unkown
|
page readonly
|
|
|
|
2525000
|
unkown
|
page readonly
|
|
|
|
27A9000
|
unkown
|
page readonly
|
|
|
|
7FF5031D9000
|
unkown
|
page readonly
|
|
|
|
7FF5C1617000
|
unkown
|
page readonly
|
|
|
|
23833631000
|
unkown
|
page read and write
|
|
|
|
1F4AACEE000
|
unkown
|
page read and write
|
|
|
|
7FF51C1EF000
|
unkown
|
page readonly
|
|
|
|
25F23613000
|
unkown
|
page read and write
|
|
|
|
26C8000
|
unkown
|
page read and write
|
|
|
|
2301FE6C000
|
unkown
|
page read and write
|
|
|
|
2301FDB0000
|
unkown
|
page readonly
|
|
|
|
3314A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C6C54000
|
unkown
|
page readonly
|
|
|
|
21EF2D13000
|
unkown
|
page read and write
|
|
|
|
2301FC70000
|
heap private
|
page read and write
|
|
|
|
7FF5E2D8E000
|
unkown
|
page readonly
|
|
|
|
7FF5E2EAC000
|
unkown
|
page readonly
|
|
|
|
7FF5E2EEA000
|
unkown
|
page readonly
|
|
|
|
2471B055000
|
unkown
|
page read and write
|
|
|
|
1C8EF440000
|
unkown
|
page read and write
|
|
|
|
2343F86A000
|
unkown
|
page read and write
|
|
|
|
27B5000
|
unkown
|
page readonly
|
|
|
|
7FF5E2EE3000
|
unkown
|
page readonly
|
|
|
|
20279A3C000
|
unkown
|
page read and write
|
|
|
|
28485864000
|
unkown
|
page readonly
|
|
|
|
278A000
|
unkown
|
page readonly
|
|
|
|
7FF50FFA3000
|
unkown
|
page readonly
|
|
|
|
1BB1F64D000
|
unkown
|
page read and write
|
|
|
|
2984000
|
unkown
|
page readonly
|
|
|
|
7FF5D5FB4000
|
unkown
|
page readonly
|
|
|
|
7FF565CEB000
|
unkown
|
page readonly
|
|
|
|
7FF565ABD000
|
unkown
|
page readonly
|
|
|
|
1F4AAD13000
|
unkown
|
page read and write
|
|
|
|
7AD5D7D000
|
unkown
|
page read and write
|
|
|
|
1BB1F629000
|
unkown
|
page read and write
|
|
|
|
7FF52666D000
|
unkown
|
page readonly
|
|
|
|
7FF53B320000
|
unkown
|
page readonly
|
|
|
|
28485A4C000
|
unkown
|
page read and write
|
|
|
|
25F23600000
|
unkown
|
page read and write
|
|
|
|
1F4ACB80000
|
unkown
|
page read and write
|
|
|
|
2A79000
|
unkown
|
page readonly
|
|
|
|
1F4AACC8000
|
unkown
|
page read and write
|
|
|
|
7FF5D671E000
|
unkown
|
page readonly
|
|
|
|
25F23700000
|
unkown
|
page read and write
|
|
|
|
7FF50BA1F000
|
unkown
|
page readonly
|
|
|
|
7FF565B42000
|
unkown
|
page readonly
|
|
|
|
7FF591B3C000
|
unkown
|
page readonly
|
|
|
|
2AA38813000
|
unkown
|
page read and write
|
|
|
|
2343F700000
|
heap default
|
page read and write
|
|
|
|
3270000
|
unkown
|
page readonly
|
|
|
|
24CD000
|
unkown
|
page readonly
|
|
|
|
7FF5D66F6000
|
unkown
|
page readonly
|
|
|
|
1F4AE042000
|
unkown
|
page read and write
|
|
|
|
7FF51C1E8000
|
unkown
|
page readonly
|
|
|
|
7FF5C1884000
|
unkown
|
page readonly
|
|
|
|
7FF51BDDD000
|
unkown
|
page readonly
|
|
|
|
25F2368A000
|
unkown
|
page read and write
|
|
|
|
1BB1FE00000
|
unkown
|
page readonly
|
|
|
|
B01D0FF000
|
unkown
|
page read and write
|
|
|
|
2471AE80000
|
heap private
|
page read and write
|
|
|
|
21EF2D02000
|
unkown
|
page read and write
|
|
|
|
7FF50BB89000
|
unkown
|
page readonly
|
|
|
|
4BC0000
|
heap private
|
page read and write
|
|
|
|
7FF53887D000
|
unkown
|
page readonly
|
|
|
|
7FF5A0893000
|
unkown
|
page readonly
|
|
|
|
7FF5036D6000
|
unkown
|
page readonly
|
|
|
|
7FF5A051F000
|
unkown
|
page readonly
|
|
|
|
21EF2BF0000
|
unkown
|
page read and write
|
|
|
|
20279A5A000
|
unkown
|
page read and write
|
|
|
|
2343F7E0000
|
unkown
|
page readonly
|
|
|
|
27A5000
|
unkown
|
page readonly
|
|
|
|
7FF5D62E1000
|
unkown
|
page readonly
|
|
|
|
7FF505D83000
|
unkown
|
page readonly
|
|
|
|
2DFD000
|
unkown
|
page read and write
|
|
|
|
2343F86A000
|
unkown
|
page read and write
|
|
|
|
7FF5E2DAD000
|
unkown
|
page readonly
|
|
|
|
7FF510010000
|
unkown
|
page readonly
|
|
|
|
23833661000
|
unkown
|
page read and write
|
|
|
|
1F4AD000000
|
unkown
|
page read and write
|
|
|
|
7FF503617000
|
unkown
|
page readonly
|
|
|
|
7FF5D65A4000
|
unkown
|
page readonly
|
|
|
|
7FF538882000
|
unkown
|
page readonly
|
|
|
|
93509BF000
|
unkown
|
page read and write
|
|
|
|
1B1B1CCA000
|
unkown
|
page read and write
|
|
|
|
2674000
|
unkown
|
page readonly
|
|
|
|
2383365C000
|
unkown
|
page read and write
|
|
|
|
7FF538BB8000
|
unkown
|
page readonly
|
|
|
|
7FF5A087D000
|
unkown
|
page readonly
|
|
|
|
7FF4FFCF0000
|
unkown
|
page readonly
|
|
|
|
2A80000
|
unkown
|
page readonly
|
|
|
|
242D000
|
unkown
|
page readonly
|
|
|
|
23020800000
|
unkown
|
page readonly
|
|
|
|
28480B18000
|
unkown
|
page read and write
|
|
|
|
23833626000
|
unkown
|
page read and write
|
|
|
|
B1827BE000
|
unkown
|
page read and write
|
|
|
|
21258802000
|
unkown
|
page read and write
|
|
|
|
7FF51000B000
|
unkown
|
page readonly
|
|
|
|
7FF50BB85000
|
unkown
|
page readonly
|
|
|
|
1F4AAC29000
|
unkown
|
page read and write
|
|
|
|
BBACE9B000
|
unkown
|
page read and write
|
|
|
|
828767A000
|
unkown
|
page read and write
|
|
|
|
27BD000
|
unkown
|
page readonly
|
|
|
|
2B0A000
|
heap default
|
page read and write
|
|
|
|
7FF538B4D000
|
unkown
|
page readonly
|
|
|
|
7FF526726000
|
unkown
|
page readonly
|
|
|
|
7FF565C27000
|
unkown
|
page readonly
|
|
|
|
25F250A0000
|
unkown
|
page readonly
|
|
|
|
7FF5E2D17000
|
unkown
|
page readonly
|
|
|
|
2343F86C000
|
unkown
|
page read and write
|
|
|
|
7FF526643000
|
unkown
|
page readonly
|
|
|
|
7FF5BBFE3000
|
unkown
|
page readonly
|
|
|
|
24BD000
|
unkown
|
page readonly
|
|
|
|
7FF591C1B000
|
unkown
|
page readonly
|
|
|
|
1F4ACB41000
|
unkown
|
page read and write
|
|
|
|
2A9A000
|
unkown
|
page readonly
|
|
|
|
2442000
|
unkown
|
page readonly
|
|
|
|
1F4AD410000
|
unkown
|
page read and write
|
|
|
|
17418590000
|
unkown
|
page readonly
|
|
|
|
B182BFA000
|
unkown
|
page read and write
|
|
|
|
2766000
|
unkown
|
page readonly
|
|
|
|
7FF5913EC000
|
unkown
|
page readonly
|
|
|
|
25F25602000
|
unkown
|
page read and write
|
|
|
|
2AAB000
|
unkown
|
page readonly
|
|
|
|
25F234C0000
|
unkown
|
page readonly
|
|
|
|
1BB1F3C0000
|
heap private
|
page read and write
|
|
|
|
7FF51C21B000
|
unkown
|
page readonly
|
|
|
|
7FF5E2EB0000
|
unkown
|
page readonly
|
|
|
|
43604FD000
|
unkown
|
page read and write
|
|
|
|
1B1B1C3E000
|
unkown
|
page read and write
|
|
|
|
7FF565C4D000
|
unkown
|
page readonly
|
|
|
|
7FF5036FB000
|
unkown
|
page readonly
|
|
|
|
28485A2E000
|
unkown
|
page read and write
|
|
|
|
7FF52673D000
|
unkown
|
page readonly
|
|
|
|
7FF50FC0F000
|
unkown
|
page readonly
|
|
|
|
25E0CC00000
|
unkown
|
page write copy
|
|
|
|
2831000
|
unkown
|
page readonly
|
|
|
|
202799A0000
|
unkown
|
page readonly
|
|
|
|
FA8857E000
|
unkown
|
page read and write
|
|
|
|
7FF50FEF0000
|
unkown
|
page readonly
|
|
|
|
20279A63000
|
unkown
|
page read and write
|
|
|
|
2301FE00000
|
unkown
|
page read and write
|
|
|
|
7FF5BBCCD000
|
unkown
|
page readonly
|
|
|
|
2AA38902000
|
unkown
|
page read and write
|
|
|
|
3841A7D000
|
unkown
|
page read and write
|
|
|
|
7FF5C6D19000
|
unkown
|
page readonly
|
|
|
|
20279B13000
|
unkown
|
page read and write
|
|
|
|
1F4AACBA000
|
unkown
|
page read and write
|
|
|
|
7FF503603000
|
unkown
|
page readonly
|
|
|
|
27B9000
|
unkown
|
page readonly
|
|
|
|
7FF50BACE000
|
unkown
|
page readonly
|
|
|
|
2343F84D000
|
unkown
|
page read and write
|
|
|
|
7FF5A0824000
|
unkown
|
page readonly
|
|
|
|
28480276000
|
unkown
|
page read and write
|
|
|
|
7FF51C1F6000
|
unkown
|
page readonly
|
|
|
|
2343F86E000
|
unkown
|
page read and write
|
|
|
|
B182C7D000
|
unkown
|
page read and write
|
|
|
|
1F4AAC57000
|
unkown
|
page read and write
|
|
|
|
7FF51C21E000
|
unkown
|
page readonly
|
|
|
|
2B4C000
|
unkown
|
page readonly
|
|
|
|
24A9000
|
unkown
|
page readonly
|
|
|
|
7FF50365A000
|
unkown
|
page readonly
|
|
|
|
7FF5D672F000
|
unkown
|
page readonly
|
|
|
|
28485890000
|
unkown
|
page read and write
|
|
|
|
28485AB7000
|
unkown
|
page read and write
|
|
|
|
7FF5BBFC8000
|
unkown
|
page readonly
|
|
|
|
7FF538BA7000
|
unkown
|
page readonly
|
|
|
|
25F26010000
|
unkown
|
page read and write
|
|
|
|
7FF53B3DB000
|
unkown
|
page readonly
|
|
|
|
7FF538BD9000
|
unkown
|
page readonly
|
|
|
|
21F7000
|
unkown
|
page readonly
|
|
|
|
21EF2C00000
|
unkown
|
page read and write
|
|
|
|
28485AB7000
|
unkown
|
page read and write
|
|
|
|
2AA38829000
|
unkown
|
page read and write
|
|
|
|
DA4CF7A000
|
unkown
|
page read and write
|
|
|
|
7FF591420000
|
unkown
|
page readonly
|
|
|
|
7FF5C6B93000
|
unkown
|
page readonly
|
|
|
|
7FF591494000
|
unkown
|
page readonly
|
|
|
|
28D4000
|
unkown
|
page read and write
|
|
|
|
7FF50370B000
|
unkown
|
page readonly
|
|
|
|
7FF5BC0B6000
|
unkown
|
page readonly
|
|
|
|
25F235E0000
|
unkown
|
page readonly
|
|
|
|
7FF5389F0000
|
unkown
|
page readonly
|
|
|
|
7FF5BC033000
|
unkown
|
page readonly
|
|
|
|
7FF4FFD75000
|
unkown
|
page readonly
|
|
|
|
7FF5A0532000
|
unkown
|
page readonly
|
|
|
|
7FF5C103D000
|
unkown
|
page readonly
|
|
|
|
7FF505E0F000
|
unkown
|
page readonly
|
|
|
|
7FF5E2B8A000
|
unkown
|
page readonly
|
|
|
|
2847000
|
unkown
|
page readonly
|
|
|
|
B01D2FF000
|
unkown
|
page read and write
|
|
|
|
20279A63000
|
unkown
|
page read and write
|
|
|
|
7FF505FAB000
|
unkown
|
page readonly
|
|
|
|
2343F86E000
|
unkown
|
page read and write
|
|
|
|
7FF5C174D000
|
unkown
|
page readonly
|
|
|
|
2F70000
|
heap default
|
page read and write
|
|
|
|
7FF538518000
|
unkown
|
page readonly
|
|
|
|
1BB1F64F000
|
unkown
|
page read and write
|
|
|
|
21258857000
|
unkown
|
page read and write
|
|
|
|
28485A3F000
|
unkown
|
page read and write
|
|
|
|
2A62000
|
unkown
|
page readonly
|
|
|
|
7FF505F8B000
|
unkown
|
page readonly
|
|
|
|
1B1B19F0000
|
heap private
|
page read and write
|
|
|
|
7FF50BB5C000
|
unkown
|
page readonly
|
|
|
|
25F25420000
|
heap private
|
page read and write
|
|
|
|
A77DA7E000
|
unkown
|
page read and write
|
|
|
|
B01D1FE000
|
unkown
|
page read and write
|
|
|
|
7FF53B40F000
|
unkown
|
page readonly
|
|
|
|
1F4ACBC7000
|
unkown
|
page read and write
|
|
|
|
FA886FE000
|
unkown
|
page read and write
|
|
|
|
28485670000
|
unkown
|
page read and write
|
|
|
|
2A4D000
|
unkown
|
page readonly
|
|
|
|
2769000
|
unkown
|
page readonly
|
|
|
|
1F4AAC13000
|
unkown
|
page read and write
|
|
|
|
2544A82A000
|
unkown
|
page read and write
|
|
|
|
284858D0000
|
unkown
|
page read and write
|
|
|
|
2343F86C000
|
unkown
|
page read and write
|
|
|
|
2136000
|
unkown
|
page readonly
|
|
|
|
27DD000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB3D000
|
unkown
|
page readonly
|
|
|
|
284809E1000
|
unkown
|
page read and write
|
|
|
|
23833648000
|
unkown
|
page read and write
|
|
|
|
7FF50370F000
|
unkown
|
page readonly
|
|
|
|
7FF50363D000
|
unkown
|
page readonly
|
|
|
|
17418400000
|
unkown
|
page readonly
|
|
|
|
435F71B000
|
unkown
|
page read and write
|
|
|
|
384177F000
|
unkown
|
page read and write
|
|
|
|
2544A7C0000
|
unkown
|
page read and write
|
|
|
|
2301FE29000
|
unkown
|
page read and write
|
|
|
|
33149FD000
|
unkown
|
page read and write
|
|
|
|
73A0CFF000
|
unkown
|
page read and write
|
|
|
|
25E0CA34000
|
unkown
|
page read and write
|
|
|
|
2185000
|
unkown
|
page readonly
|
|
|
|
2848028D000
|
unkown
|
page read and write
|
|
|
|
7FF5036DB000
|
unkown
|
page readonly
|
|
|
|
2102000
|
unkown
|
page readonly
|
|
|
|
2471B250000
|
unkown
|
page readonly
|
|
|
|
1F4AACEF000
|
unkown
|
page read and write
|
|
|
|
7FF505F0A000
|
unkown
|
page readonly
|
|
|
|
7AD5A7B000
|
unkown
|
page read and write
|
|
|
|
7FF5E2F6B000
|
unkown
|
page readonly
|
|
|
|
7FF505FBF000
|
unkown
|
page readonly
|
|
|
|
7FF505EF5000
|
unkown
|
page readonly
|
|
|
|
2343F913000
|
unkown
|
page read and write
|
|
|
|
2AA386B0000
|
heap default
|
page read and write
|
|
|
|
217C000
|
unkown
|
page readonly
|
|
|
|
23833640000
|
unkown
|
page read and write
|
|
|
|
7FF503607000
|
unkown
|
page readonly
|
|
|
|
1F4AACBC000
|
unkown
|
page read and write
|
|
|
|
5DAF777000
|
unkown
|
page read and write
|
|
|
|
7FF56587A000
|
unkown
|
page readonly
|
|
|
|
2930000
|
heap default
|
page read and write
|
|
|
|
7FF50BB47000
|
unkown
|
page readonly
|
|
|
|
31B0000
|
unkown
|
page readonly
|
|
|
|
23833657000
|
unkown
|
page read and write
|
|
|
|
17418700000
|
heap private
|
page read and write
|
|
|
|
2544B002000
|
unkown
|
page read and write
|
|
|
|
174182E0000
|
unkown
|
page readonly
|
|
|
|
7FF53874F000
|
unkown
|
page readonly
|
|
|
|
7FF538B50000
|
unkown
|
page readonly
|
|
|
|
1F4AAAF0000
|
unkown
|
page write copy
|
|
|
|
2471B100000
|
unkown
|
page read and write
|
|
|
|
2343F86A000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
heap default
|
page read and write
|
|
|
|
7FF5BC0EF000
|
unkown
|
page readonly
|
|
|
|
7FF503645000
|
unkown
|
page readonly
|
|
|
|
2835000
|
unkown
|
page readonly
|
|
|
|
2544AD90000
|
unkown
|
page readonly
|
|
|
|
1BB20140000
|
unkown
|
page readonly
|
|
|
|
5DAF67E000
|
unkown
|
page read and write
|
|
|
|
7FF5E2F8E000
|
unkown
|
page readonly
|
|
|
|
7FF5C6CCC000
|
unkown
|
page readonly
|
|
|
|
7FF591C4F000
|
unkown
|
page readonly
|
|
|
|
21A4000
|
unkown
|
page readonly
|
|
|
|
BBAD4FB000
|
unkown
|
page read and write
|
|
|
|
21EF2BE0000
|
unkown
|
page readonly
|
|
|
|
1BB1F63C000
|
unkown
|
page read and write
|
|
|
|
7FF5A0807000
|
unkown
|
page readonly
|
|
|
|
2521000
|
unkown
|
page readonly
|
|
|
|
7FF53B3F4000
|
unkown
|
page readonly
|
|
|
|
7FF505A98000
|
unkown
|
page readonly
|
|
|
|
1B1B1C6D000
|
unkown
|
page read and write
|
|
|
|
28485A21000
|
unkown
|
page read and write
|
|
|
|
435FDFA000
|
unkown
|
page read and write
|
|
|
|
7FF505E15000
|
unkown
|
page readonly
|
|
|
|
1741A1A0000
|
heap private
|
page read and write
|
|
|
|
1F4AACF2000
|
unkown
|
page read and write
|
|
|
|
25F23654000
|
unkown
|
page read and write
|
|
|
|
2124000
|
unkown
|
page readonly
|
|
|
|
1F4AD010000
|
unkown
|
page read and write
|
|
|
|
1F4ACBE5000
|
unkown
|
page read and write
|
|
|
|
1F4AAC58000
|
unkown
|
page read and write
|
|
|
|
28481090000
|
unkown
|
page read and write
|
|
|
|
2ACD000
|
unkown
|
page readonly
|
|
|
|
2184000
|
unkown
|
page readonly
|
|
|
|
212587F0000
|
heap default
|
page read and write
|
|
|
|
7FF538C84000
|
unkown
|
page readonly
|
|
|
|
7FF5C16AD000
|
unkown
|
page readonly
|
|
|
|
2383367A000
|
unkown
|
page read and write
|
|
|
|
7FF5C6CE7000
|
unkown
|
page readonly
|
|
|
|
21258879000
|
unkown
|
page read and write
|
|
|
|
25F24FA0000
|
unkown
|
page read and write
|
|
|
|
7FF5389C1000
|
unkown
|
page readonly
|
|
|
|
1F4AAC3F000
|
unkown
|
page read and write
|
|
|
|
218D000
|
unkown
|
page readonly
|
|
|
|
DC6F47D000
|
unkown
|
page read and write
|
|
|
|
20279860000
|
heap private
|
page read and write
|
|
|
|
7FF5D671B000
|
unkown
|
page readonly
|
|
|
|
7FF5031E8000
|
unkown
|
page readonly
|
|
|
|
28481080000
|
unkown
|
page read and write
|
|
|
|
1F4ACBE5000
|
unkown
|
page read and write
|
|
|
|
1F4ACE36000
|
unkown
|
page read and write
|
|
|
|
1F4ACBAE000
|
unkown
|
page read and write
|
|
|
|
28480200000
|
unkown
|
page read and write
|
|
|
|
2544A902000
|
unkown
|
page read and write
|
|
|
|
B3038FE000
|
unkown
|
page read and write
|
|
|
|
7FF503565000
|
unkown
|
page readonly
|
|
|
|
7FF4FFE3F000
|
unkown
|
page readonly
|
|
|
|
2201000
|
unkown
|
page readonly
|
|
|
|
2383367D000
|
unkown
|
page read and write
|
|
|
|
7FF502DBD000
|
unkown
|
page readonly
|
|
|
|
7FF5A0868000
|
unkown
|
page readonly
|
|
|
|
828757F000
|
unkown
|
page read and write
|
|
|
|
7FF5036ED000
|
unkown
|
page readonly
|
|
|
|
2560000
|
unkown
|
page readonly
|
|
|
|
7FF5A0916000
|
unkown
|
page readonly
|
|
|
|
21EF2C71000
|
unkown
|
page read and write
|
|
|
|
7FF4FFD47000
|
unkown
|
page readonly
|
|
|
|
1F4AAD3C000
|
unkown
|
page read and write
|
|
|
|
7FF565BF4000
|
unkown
|
page readonly
|
|
|
|
7FF526657000
|
unkown
|
page readonly
|
|
|
|
7FF5C6954000
|
unkown
|
page readonly
|
|
|
|
BBAD6FE000
|
unkown
|
page read and write
|
|
|
|
20279A2F000
|
unkown
|
page read and write
|
|
|
|
436037D000
|
unkown
|
page read and write
|
|
|
|
28480120000
|
unkown
|
page readonly
|
|
|
|
7FF51C1FB000
|
unkown
|
page readonly
|
|
|
|
1B1B1B30000
|
unkown
|
page readonly
|
|
|
|
7FF5A091B000
|
unkown
|
page readonly
|
|
|
|
2460000
|
unkown
|
page readonly
|
|
|
|
20279A8E000
|
unkown
|
page read and write
|
|
|
|
25F236CC000
|
unkown
|
page read and write
|
|
|
|
21258790000
|
heap private
|
page read and write
|
|
|
|
17418450000
|
unkown
|
page readonly
|
|
|
|
1F4AAD1C000
|
unkown
|
page read and write
|
|
|
|
25E0CA29000
|
unkown
|
page read and write
|
|
|
|
2AA38790000
|
unkown
|
page write copy
|
|
|
|
7FF53B345000
|
unkown
|
page readonly
|
|
|
|
7FF5918DA000
|
unkown
|
page readonly
|
|
|
|
2848577E000
|
unkown
|
page read and write
|
|
There are 1717 hidden memdumps, click here to show them.