Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
document-1429954472.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Mon Feb 8 08:28:15 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\document-1429954472.xls.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:45
2020, mtime=Sat Apr 10 04:15:39 2021, atime=Sat Apr 10 04:15:39 2021, length=323072, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\A22CCA86-2F39-4600-BB5A-EA92F07BD5C2
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\4B910000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 16:19:49 2019, mtime=Sat Apr 10 04:15:39 2021, atime=Sat Apr 10 04:15:39 2021, length=12288, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\Desktop\5C910000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\DEDE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\document-1429954472.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:17
2020, mtime=Sat Apr 10 04:09:42 2021, atime=Sat Apr 10 04:09:43 2021, length=323072, window=hide
|
dropped
|
|
|
|
C:\Users\user\Desktop\F0EE0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\iojhsfgv.dvers,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\iojhsfgv.dvers,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
http://fastswitch.org/ds/0702.gif
|
47.244.191.15
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 98 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
fastswitch.org
|
47.244.191.15
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
47.244.191.15
|
fastswitch.org
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'm8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
(m8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
192F5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
19A29
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
19BAF
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
19CA9
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
) 8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
l!9
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
261ED
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
262D8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 21
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
261ED
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ChangeId
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ChangeId
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
h77
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDB13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDE6D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE080
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE1A8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
b7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F4C6B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F4D17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 21
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F4C6B
|
|
There are 179 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5437ED000
|
unkown
|
page readonly
|
|
|
|
7FF5CB6DD000
|
unkown
|
page readonly
|
|
|
|
23A20A6A000
|
unkown
|
page read and write
|
|
|
|
5B6811B000
|
unkown
|
page read and write
|
|
|
|
1362C600000
|
unkown
|
page readonly
|
|
|
|
146D0F9000
|
unkown
|
page read and write
|
|
|
|
25B11A50000
|
unkown
|
page read and write
|
|
|
|
23A20AD2000
|
unkown
|
page read and write
|
|
|
|
7FF5CB6E6000
|
unkown
|
page readonly
|
|
|
|
25B11900000
|
unkown
|
page read and write
|
|
|
|
7FF543737000
|
unkown
|
page readonly
|
|
|
|
7FF57E057000
|
unkown
|
page readonly
|
|
|
|
25B11A50000
|
unkown
|
page read and write
|
|
|
|
7FF543F80000
|
unkown
|
page readonly
|
|
|
|
1362CD00000
|
unkown
|
page read and write
|
|
|
|
1F52DCA0000
|
unkown
|
page readonly
|
|
|
|
23A20AAC000
|
unkown
|
page read and write
|
|
|
|
7FF5DF006000
|
unkown
|
page readonly
|
|
|
|
7FF5DECD6000
|
unkown
|
page readonly
|
|
|
|
7FF5DF089000
|
unkown
|
page readonly
|
|
|
|
23A20AAB000
|
unkown
|
page read and write
|
|
|
|
7FF5DB140000
|
unkown
|
page readonly
|
|
|
|
1E462E00000
|
unkown
|
page read and write
|
|
|
|
23A22C77000
|
unkown
|
page read and write
|
|
|
|
683AFFA000
|
unkown
|
page read and write
|
|
|
|
7FF576A86000
|
unkown
|
page readonly
|
|
|
|
1F52DC45000
|
heap private
|
page read and write
|
|
|
|
7FF55BB68000
|
unkown
|
page readonly
|
|
|
|
23A22910000
|
unkown
|
page read and write
|
|
|
|
7FF5CB440000
|
unkown
|
page readonly
|
|
|
|
C17E6FA000
|
unkown
|
page read and write
|
|
|
|
7FF5DEEAC000
|
unkown
|
page readonly
|
|
|
|
186A8108000
|
unkown
|
page read and write
|
|
|
|
7FF55BC59000
|
unkown
|
page readonly
|
|
|
|
7FF576A76000
|
unkown
|
page readonly
|
|
|
|
1362C488000
|
unkown
|
page read and write
|
|
|
|
7FF543827000
|
unkown
|
page readonly
|
|
|
|
2968000
|
unkown
|
page readonly
|
|
|
|
14F41302000
|
unkown
|
page read and write
|
|
|
|
9DCF47F000
|
unkown
|
page read and write
|
|
|
|
2882444A000
|
unkown
|
page read and write
|
|
|
|
7FF5DEF15000
|
unkown
|
page readonly
|
|
|
|
7FF54DFD0000
|
unkown
|
page readonly
|
|
|
|
63D0000
|
unkown
|
page readonly
|
|
|
|
87950F9000
|
unkown
|
page read and write
|
|
|
|
7FF57B66C000
|
unkown
|
page readonly
|
|
|
|
1F52DCC0000
|
heap default
|
page read and write
|
|
|
|
7FF57B4C0000
|
unkown
|
page readonly
|
|
|
|
7FF52FCBF000
|
unkown
|
page readonly
|
|
|
|
7FF51097C000
|
unkown
|
page readonly
|
|
|
|
198D7C50000
|
heap default
|
page read and write
|
|
|
|
7FF54DEDE000
|
unkown
|
page readonly
|
|
|
|
20C31D13000
|
unkown
|
page read and write
|
|
|
|
1870EA6D000
|
unkown
|
page read and write
|
|
|
|
23A20AAC000
|
unkown
|
page read and write
|
|
|
|
12B59C54000
|
unkown
|
page read and write
|
|
|
|
4F6A27E000
|
unkown
|
page read and write
|
|
|
|
1F8A6A00000
|
unkown
|
page read and write
|
|
|
|
87957FB000
|
unkown
|
page read and write
|
|
|
|
1D171000000
|
unkown
|
page read and write
|
|
|
|
198D7E44000
|
unkown
|
page read and write
|
|
|
|
14F41229000
|
unkown
|
page read and write
|
|
|
|
7FF5CB6AE000
|
unkown
|
page readonly
|
|
|
|
7FF57E045000
|
unkown
|
page readonly
|
|
|
|
25B0FB02000
|
unkown
|
page read and write
|
|
|
|
23A22910000
|
unkown
|
page read and write
|
|
|
|
7FF534677000
|
unkown
|
page readonly
|
|
|
|
1E462E70000
|
unkown
|
page read and write
|
|
|
|
7FF57B776000
|
unkown
|
page readonly
|
|
|
|
1D171013000
|
unkown
|
page read and write
|
|
|
|
288242A0000
|
heap default
|
page read and write
|
|
|
|
23A20AEA000
|
unkown
|
page read and write
|
|
|
|
7FF57B6CA000
|
unkown
|
page readonly
|
|
|
|
1F52DC50000
|
unkown
|
page readonly
|
|
|
|
7FF543796000
|
unkown
|
page readonly
|
|
|
|
23A23010000
|
unkown
|
page read and write
|
|
|
|
1E463559000
|
unkown
|
page read and write
|
|
|
|
1870EB02000
|
unkown
|
page read and write
|
|
|
|
16A8F310000
|
unkown
|
page read and write
|
|
|
|
7FF5AAB0A000
|
unkown
|
page readonly
|
|
|
|
7FF5DEE97000
|
unkown
|
page readonly
|
|
|
|
1F8A4F20000
|
unkown
|
page readonly
|
|
|
|
DFB427C000
|
unkown
|
page read and write
|
|
|
|
7FF543545000
|
unkown
|
page readonly
|
|
|
|
7FF55BB62000
|
unkown
|
page readonly
|
|
|
|
7FF534A1D000
|
unkown
|
page readonly
|
|
|
|
20C31C3C000
|
unkown
|
page read and write
|
|
|
|
7FF5944BF000
|
unkown
|
page readonly
|
|
|
|
1870EA6C000
|
unkown
|
page read and write
|
|
|
|
7FF534A09000
|
unkown
|
page readonly
|
|
|
|
23A20A70000
|
unkown
|
page read and write
|
|
|
|
28824600000
|
unkown
|
page readonly
|
|
|
|
1E462E8C000
|
unkown
|
page read and write
|
|
|
|
7FF543B9F000
|
unkown
|
page readonly
|
|
|
|
23A23A10000
|
unkown
|
page read and write
|
|
|
|
14F41269000
|
unkown
|
page read and write
|
|
|
|
23A23310000
|
unkown
|
page read and write
|
|
|
|
7FF52FD09000
|
unkown
|
page readonly
|
|
|
|
23A23510000
|
unkown
|
page read and write
|
|
|
|
1D023DF000
|
unkown
|
page read and write
|
|
|
|
7FF5AAB77000
|
unkown
|
page readonly
|
|
|
|
20C31C50000
|
unkown
|
page read and write
|
|
|
|
7FF504977000
|
unkown
|
page readonly
|
|
|
|
7FF5DEF98000
|
unkown
|
page readonly
|
|
|
|
21347DF000
|
unkown
|
page read and write
|
|
|
|
12B59BF0000
|
unkown
|
page readonly
|
|
|
|
1E462E76000
|
unkown
|
page read and write
|
|
|
|
20C31C55000
|
unkown
|
page read and write
|
|
|
|
19EBA102000
|
unkown
|
page read and write
|
|
|
|
1D171670000
|
unkown
|
page readonly
|
|
|
|
1E468260000
|
unkown
|
page read and write
|
|
|
|
1F8A5029000
|
unkown
|
page read and write
|
|
|
|
28A0000
|
unkown
|
page readonly
|
|
|
|
1870EA68000
|
unkown
|
page read and write
|
|
|
|
14F4126B000
|
unkown
|
page read and write
|
|
|
|
7FF5349B2000
|
unkown
|
page readonly
|
|
|
|
7FF57DEC3000
|
unkown
|
page readonly
|
|
|
|
1E468284000
|
unkown
|
page read and write
|
|
|
|
7FF594510000
|
unkown
|
page readonly
|
|
|
|
7FF57E01D000
|
unkown
|
page readonly
|
|
|
|
7FF57DFFF000
|
unkown
|
page readonly
|
|
|
|
12B59BA0000
|
unkown
|
page write copy
|
|
|
|
97DD4FF000
|
unkown
|
page read and write
|
|
|
|
2795000
|
unkown
|
page readonly
|
|
|
|
7FF55BB2C000
|
unkown
|
page readonly
|
|
|
|
7FF5AACD0000
|
unkown
|
page readonly
|
|
|
|
6710000
|
unkown
|
page read and write
|
|
|
|
186A8680000
|
unkown
|
page readonly
|
|
|
|
198D7E32000
|
unkown
|
page read and write
|
|
|
|
7FF52FED7000
|
unkown
|
page readonly
|
|
|
|
7FF576A8C000
|
unkown
|
page readonly
|
|
|
|
7FF534670000
|
unkown
|
page readonly
|
|
|
|
1F8A4F10000
|
heap default
|
page read and write
|
|
|
|
7FF52FE46000
|
unkown
|
page readonly
|
|
|
|
23A22A9D000
|
unkown
|
page read and write
|
|
|
|
7FF5437AA000
|
unkown
|
page readonly
|
|
|
|
7FF5CB583000
|
unkown
|
page readonly
|
|
|
|
B21E7FF000
|
unkown
|
page read and write
|
|
|
|
14F4126F000
|
unkown
|
page read and write
|
|
|
|
7FF543F7E000
|
unkown
|
page readonly
|
|
|
|
28B7000
|
unkown
|
page readonly
|
|
|
|
186A8013000
|
unkown
|
page read and write
|
|
|
|
B21E39C000
|
unkown
|
page read and write
|
|
|
|
7FF510976000
|
unkown
|
page readonly
|
|
|
|
7FF5DB057000
|
unkown
|
page readonly
|
|
|
|
7FF57B51B000
|
unkown
|
page readonly
|
|
|
|
23A22AF6000
|
unkown
|
page read and write
|
|
|
|
7FF5AA552000
|
unkown
|
page readonly
|
|
|
|
1E463B70000
|
unkown
|
page read and write
|
|
|
|
12B5B770000
|
unkown
|
page readonly
|
|
|
|
186A7FC0000
|
unkown
|
page readonly
|
|
|
|
7FF5437C9000
|
unkown
|
page readonly
|
|
|
|
7FF5437CF000
|
unkown
|
page readonly
|
|
|
|
7FF5DB147000
|
unkown
|
page readonly
|
|
|
|
19EB9EF0000
|
heap default
|
page read and write
|
|
|
|
23A22AFA000
|
unkown
|
page read and write
|
|
|
|
7FF5DEEFC000
|
unkown
|
page readonly
|
|
|
|
6380000
|
heap private
|
page read and write
|
|
|
|
C17E47F000
|
unkown
|
page read and write
|
|
|
|
28824380000
|
unkown
|
page readonly
|
|
|
|
7FF57D83A000
|
unkown
|
page readonly
|
|
|
|
7FF5DF027000
|
unkown
|
page readonly
|
|
|
|
1E464100000
|
unkown
|
page read and write
|
|
|
|
23A23510000
|
unkown
|
page read and write
|
|
|
|
14F41258000
|
unkown
|
page read and write
|
|
|
|
7FF5CB771000
|
unkown
|
page readonly
|
|
|
|
97DD87D000
|
unkown
|
page read and write
|
|
|
|
7FF5AACD7000
|
unkown
|
page readonly
|
|
|
|
7FF543E07000
|
unkown
|
page readonly
|
|
|
|
20C32600000
|
unkown
|
page readonly
|
|
|
|
1D0277A000
|
unkown
|
page read and write
|
|
|
|
7FF543E37000
|
unkown
|
page readonly
|
|
|
|
7FF57E0B1000
|
unkown
|
page readonly
|
|
|
|
DFB3DF5000
|
unkown
|
page read and write
|
|
|
|
7FF51071A000
|
unkown
|
page readonly
|
|
|
|
7FF55BBDC000
|
unkown
|
page readonly
|
|
|
|
7FF52FA73000
|
unkown
|
page readonly
|
|
|
|
12B59ED0000
|
unkown
|
page readonly
|
|
|
|
7FF534A2C000
|
unkown
|
page readonly
|
|
|
|
5B685FE000
|
unkown
|
page read and write
|
|
|
|
25B0F820000
|
heap private
|
page read and write
|
|
|
|
7FF54DF5A000
|
unkown
|
page readonly
|
|
|
|
7FF52FEC5000
|
unkown
|
page readonly
|
|
|
|
7FF543AC5000
|
unkown
|
page readonly
|
|
|
|
1D171102000
|
unkown
|
page read and write
|
|
|
|
7FF54E031000
|
unkown
|
page readonly
|
|
|
|
5B688FF000
|
unkown
|
page read and write
|
|
|
|
1E463D70000
|
unkown
|
page readonly
|
|
|
|
25B11A50000
|
unkown
|
page read and write
|
|
|
|
1362C6D0000
|
unkown
|
page readonly
|
|
|
|
198D7D30000
|
unkown
|
page readonly
|
|
|
|
A3862BB000
|
unkown
|
page read and write
|
|
|
|
7FF594579000
|
unkown
|
page readonly
|
|
|
|
7FF594240000
|
unkown
|
page readonly
|
|
|
|
879567F000
|
unkown
|
page read and write
|
|
|
|
1E468610000
|
unkown
|
page readonly
|
|
|
|
1D1716A0000
|
unkown
|
page readonly
|
|
|
|
7FF59456E000
|
unkown
|
page readonly
|
|
|
|
23A20AAD000
|
unkown
|
page read and write
|
|
|
|
7FF504974000
|
unkown
|
page readonly
|
|
|
|
7FF5CB4E0000
|
unkown
|
page readonly
|
|
|
|
7FF543CAB000
|
unkown
|
page readonly
|
|
|
|
7FF57B32D000
|
unkown
|
page readonly
|
|
|
|
1E462E92000
|
unkown
|
page read and write
|
|
|
|
20C31A70000
|
heap default
|
page read and write
|
|
|
|
7FF54D81E000
|
unkown
|
page readonly
|
|
|
|
7FF54DC73000
|
unkown
|
page readonly
|
|
|
|
146D1F9000
|
unkown
|
page read and write
|
|
|
|
7FF5DAEE8000
|
unkown
|
page readonly
|
|
|
|
23A20BB7000
|
unkown
|
page read and write
|
|
|
|
7FF534A26000
|
unkown
|
page readonly
|
|
|
|
7FF55BA67000
|
unkown
|
page readonly
|
|
|
|
7FF594517000
|
unkown
|
page readonly
|
|
|
|
1F52DC40000
|
heap private
|
page read and write
|
|
|
|
7FF5DF089000
|
unkown
|
page readonly
|
|
|
|
20C32260000
|
unkown
|
page readonly
|
|
|
|
186A804B000
|
unkown
|
page read and write
|
|
|
|
7FF5941D4000
|
unkown
|
page readonly
|
|
|
|
7FF5CB6FC000
|
unkown
|
page readonly
|
|
|
|
7FF5DAEDC000
|
unkown
|
page readonly
|
|
|
|
1D171002000
|
unkown
|
page read and write
|
|
|
|
87953FB000
|
unkown
|
page read and write
|
|
|
|
2747000
|
unkown
|
page readonly
|
|
|
|
7FF543ED9000
|
unkown
|
page readonly
|
|
|
|
20C31C00000
|
unkown
|
page read and write
|
|
|
|
1E4633F3000
|
unkown
|
page read and write
|
|
|
|
19EB9FE0000
|
unkown
|
page readonly
|
|
|
|
7FF543D3C000
|
unkown
|
page readonly
|
|
|
|
7FF5DB0B2000
|
unkown
|
page readonly
|
|
|
|
7FF5DB05A000
|
unkown
|
page readonly
|
|
|
|
7FF51092E000
|
unkown
|
page readonly
|
|
|
|
198D7E7E000
|
unkown
|
page read and write
|
|
|
|
23A23610000
|
unkown
|
page read and write
|
|
|
|
198D7D40000
|
unkown
|
page readonly
|
|
|
|
7FF52FE30000
|
unkown
|
page readonly
|
|
|
|
1362C502000
|
unkown
|
page read and write
|
|
|
|
7FF57B790000
|
unkown
|
page readonly
|
|
|
|
25B0FABD000
|
unkown
|
page read and write
|
|
|
|
1E468416000
|
unkown
|
page read and write
|
|
|
|
25B114A0000
|
unkown
|
page readonly
|
|
|
|
23A22AF4000
|
unkown
|
page read and write
|
|
|
|
23A22C12000
|
unkown
|
page read and write
|
|
|
|
7FF510990000
|
unkown
|
page readonly
|
|
|
|
7FF55BC59000
|
unkown
|
page readonly
|
|
|
|
7FF52FEB6000
|
unkown
|
page readonly
|
|
|
|
28E5000
|
unkown
|
page readonly
|
|
|
|
7FF57B665000
|
unkown
|
page readonly
|
|
|
|
1E463400000
|
unkown
|
page read and write
|
|
|
|
1E4683C0000
|
unkown
|
page read and write
|
|
|
|
288D000
|
unkown
|
page readonly
|
|
|
|
7FF53422B000
|
unkown
|
page readonly
|
|
|
|
186A808D000
|
unkown
|
page read and write
|
|
|
|
23A20AA1000
|
unkown
|
page read and write
|
|
|
|
1870EA40000
|
unkown
|
page read and write
|
|
|
|
7FF594571000
|
unkown
|
page readonly
|
|
|
|
1E4686A0000
|
unkown
|
page readonly
|
|
|
|
1E4633D1000
|
unkown
|
page read and write
|
|
|
|
23A23110000
|
unkown
|
page read and write
|
|
|
|
198D7E59000
|
unkown
|
page read and write
|
|
|
|
1362C4C3000
|
unkown
|
page read and write
|
|
|
|
7FF5DB015000
|
unkown
|
page readonly
|
|
|
|
25B11802000
|
unkown
|
page read and write
|
|
|
|
23A20A13000
|
unkown
|
page read and write
|
|
|
|
1E463513000
|
unkown
|
page read and write
|
|
|
|
2571000
|
unkown
|
page readonly
|
|
|
|
7FF54DFAC000
|
unkown
|
page readonly
|
|
|
|
A38633E000
|
unkown
|
page read and write
|
|
|
|
7FF5DF020000
|
unkown
|
page readonly
|
|
|
|
23A20AAC000
|
unkown
|
page read and write
|
|
|
|
1E4684B4000
|
unkown
|
page read and write
|
|
|
|
7FF534AB9000
|
unkown
|
page readonly
|
|
|
|
23A20A7B000
|
unkown
|
page read and write
|
|
|
|
7FF5DB087000
|
unkown
|
page readonly
|
|
|
|
7FF55BB0A000
|
unkown
|
page readonly
|
|
|
|
7FF55BBF4000
|
unkown
|
page readonly
|
|
|
|
7FF543798000
|
unkown
|
page readonly
|
|
|
|
1118BFF000
|
unkown
|
page read and write
|
|
|
|
1D171075000
|
unkown
|
page read and write
|
|
|
|
14F4126B000
|
unkown
|
page read and write
|
|
|
|
7FF57B69A000
|
unkown
|
page readonly
|
|
|
|
7FF57B4AE000
|
unkown
|
page readonly
|
|
|
|
7FF57B7F9000
|
unkown
|
page readonly
|
|
|
|
7FF5048E8000
|
unkown
|
page readonly
|
|
|
|
11191FF000
|
unkown
|
page read and write
|
|
|
|
7FF54DEDA000
|
unkown
|
page readonly
|
|
|
|
7FF5434F3000
|
unkown
|
page readonly
|
|
|
|
16A8F120000
|
unkown
|
page read and write
|
|
|
|
7FF5437C5000
|
unkown
|
page readonly
|
|
|
|
8794FFD000
|
unkown
|
page read and write
|
|
|
|
1E468400000
|
unkown
|
page read and write
|
|
|
|
1E4686E0000
|
unkown
|
page readonly
|
|
|
|
7FF5437C5000
|
unkown
|
page readonly
|
|
|
|
23A22B02000
|
unkown
|
page read and write
|
|
|
|
DFB4077000
|
unkown
|
page read and write
|
|
|
|
C17E4FA000
|
unkown
|
page read and write
|
|
|
|
16A8F19E000
|
unkown
|
page read and write
|
|
|
|
7FF5CB6F6000
|
unkown
|
page readonly
|
|
|
|
7FF57DBAA000
|
unkown
|
page readonly
|
|
|
|
16A8F1BF000
|
unkown
|
page read and write
|
|
|
|
7FF576A3E000
|
unkown
|
page readonly
|
|
|
|
2134B75000
|
unkown
|
page read and write
|
|
|
|
7FF57DECD000
|
unkown
|
page readonly
|
|
|
|
7FF5DB19E000
|
unkown
|
page readonly
|
|
|
|
7FF5CB587000
|
unkown
|
page readonly
|
|
|
|
C17EB7B000
|
unkown
|
page read and write
|
|
|
|
7FF55BB07000
|
unkown
|
page readonly
|
|
|
|
28824400000
|
unkown
|
page read and write
|
|
|
|
7FF5CB568000
|
unkown
|
page readonly
|
|
|
|
7FF57B54A000
|
unkown
|
page readonly
|
|
|
|
25B11A50000
|
unkown
|
page read and write
|
|
|
|
1362C370000
|
unkown
|
page read and write
|
|
|
|
14F4123F000
|
unkown
|
page read and write
|
|
|
|
7FF543E67000
|
unkown
|
page readonly
|
|
|
|
19EBA013000
|
unkown
|
page read and write
|
|
|
|
7FF5DAE65000
|
unkown
|
page readonly
|
|
|
|
16A8F1BF000
|
unkown
|
page read and write
|
|
|
|
25B11A80000
|
unkown
|
page readonly
|
|
|
|
7FF57B761000
|
unkown
|
page readonly
|
|
|
|
1870EA13000
|
unkown
|
page read and write
|
|
|
|
21350FF000
|
unkown
|
page read and write
|
|
|
|
7FF504965000
|
unkown
|
page readonly
|
|
|
|
23A23110000
|
unkown
|
page read and write
|
|
|
|
7FF5CB686000
|
unkown
|
page readonly
|
|
|
|
7FF543B17000
|
unkown
|
page readonly
|
|
|
|
19EBA680000
|
unkown
|
page read and write
|
|
|
|
7FF5049D9000
|
unkown
|
page readonly
|
|
|
|
7FF59448A000
|
unkown
|
page readonly
|
|
|
|
2882444B000
|
unkown
|
page read and write
|
|
|
|
1E46844F000
|
unkown
|
page read and write
|
|
|
|
23A20A72000
|
unkown
|
page read and write
|
|
|
|
8CF4F77000
|
unkown
|
page read and write
|
|
|
|
1E468390000
|
unkown
|
page read and write
|
|
|
|
7FF5DAE17000
|
unkown
|
page readonly
|
|
|
|
7FF543B00000
|
unkown
|
page readonly
|
|
|
|
198D7F02000
|
unkown
|
page read and write
|
|
|
|
7FF52FBEE000
|
unkown
|
page readonly
|
|
|
|
7FF5DAF10000
|
unkown
|
page readonly
|
|
|
|
186A7EE0000
|
unkown
|
page readonly
|
|
|
|
7FF57B560000
|
unkown
|
page readonly
|
|
|
|
7FF57634F000
|
unkown
|
page readonly
|
|
|
|
7FF54379A000
|
unkown
|
page readonly
|
|
|
|
198D7D50000
|
unkown
|
page read and write
|
|
|
|
1E468160000
|
unkown
|
page read and write
|
|
|
|
1E462EA0000
|
unkown
|
page read and write
|
|
|
|
7FF57B5E8000
|
unkown
|
page readonly
|
|
|
|
14F41050000
|
heap default
|
page read and write
|
|
|
|
DFB3F7E000
|
unkown
|
page read and write
|
|
|
|
198D7E13000
|
unkown
|
page read and write
|
|
|
|
1870EA6A000
|
unkown
|
page read and write
|
|
|
|
14F4126B000
|
unkown
|
page read and write
|
|
|
|
DFB3EFB000
|
unkown
|
page read and write
|
|
|
|
28D3000
|
unkown
|
page readonly
|
|
|
|
7FF5DB1A9000
|
unkown
|
page readonly
|
|
|
|
3011000
|
unkown
|
page read and write
|
|
|
|
1E468354000
|
unkown
|
page readonly
|
|
|
|
7FF5349C8000
|
unkown
|
page readonly
|
|
|
|
7FF57B467000
|
unkown
|
page readonly
|
|
|
|
1362C340000
|
heap default
|
page read and write
|
|
|
|
28824C02000
|
unkown
|
page read and write
|
|
|
|
1362C429000
|
unkown
|
page read and write
|
|
|
|
7FF5434F7000
|
unkown
|
page readonly
|
|
|
|
7FF52FB08000
|
unkown
|
page readonly
|
|
|
|
7FF54DFD4000
|
unkown
|
page readonly
|
|
|
|
7FF5DB08C000
|
unkown
|
page readonly
|
|
|
|
25B0FC00000
|
unkown
|
page readonly
|
|
|
|
7FF57E009000
|
unkown
|
page readonly
|
|
|
|
1118D7C000
|
unkown
|
page read and write
|
|
|
|
23A20AAD000
|
unkown
|
page read and write
|
|
|
|
7FF57B52C000
|
unkown
|
page readonly
|
|
|
|
7FF5437FC000
|
unkown
|
page readonly
|
|
|
|
7FF5AAB71000
|
unkown
|
page readonly
|
|
|
|
7FF5DB083000
|
unkown
|
page readonly
|
|
|
|
1D171680000
|
unkown
|
page read and write
|
|
|
|
7FF5349F5000
|
unkown
|
page readonly
|
|
|
|
7FF56721C000
|
unkown
|
page readonly
|
|
|
|
2E3B000
|
stack
|
page read and write
|
|
|
|
1D170F20000
|
heap default
|
page read and write
|
|
|
|
7FF5DB04A000
|
unkown
|
page readonly
|
|
|
|
301D000
|
unkown
|
page read and write
|
|
|
|
14F41400000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFF6000
|
unkown
|
page readonly
|
|
|
|
19EBA029000
|
unkown
|
page read and write
|
|
|
|
1F52F620000
|
unkown
|
page readonly
|
|
|
|
7FF543D50000
|
unkown
|
page readonly
|
|
|
|
23A22A55000
|
unkown
|
page read and write
|
|
|
|
7FF5CB64A000
|
unkown
|
page readonly
|
|
|
|
7FF543BC0000
|
unkown
|
page readonly
|
|
|
|
67D0000
|
unkown
|
page read and write
|
|
|
|
7FF576A59000
|
unkown
|
page readonly
|
|
|
|
1F8A5035000
|
unkown
|
page read and write
|
|
|
|
7FF55BA63000
|
unkown
|
page readonly
|
|
|
|
1F52DB30000
|
unkown
|
page readonly
|
|
|
|
23A20B1C000
|
unkown
|
page read and write
|
|
|
|
7FF510083000
|
unkown
|
page readonly
|
|
|
|
23A20B33000
|
unkown
|
page read and write
|
|
|
|
11190FE000
|
unkown
|
page read and write
|
|
|
|
7FF594427000
|
unkown
|
page readonly
|
|
|
|
7FF543B96000
|
unkown
|
page readonly
|
|
|
|
14F41269000
|
unkown
|
page read and write
|
|
|
|
32AA000
|
heap private
|
page read and write
|
|
|
|
7FF57B6A7000
|
unkown
|
page readonly
|
|
|
|
14F4126F000
|
unkown
|
page read and write
|
|
|
|
7FF55BB8E000
|
unkown
|
page readonly
|
|
|
|
7FF57E0AE000
|
unkown
|
page readonly
|
|
|
|
7FF52FDC5000
|
unkown
|
page readonly
|
|
|
|
14F41130000
|
unkown
|
page write copy
|
|
|
|
7FF5047AA000
|
unkown
|
page readonly
|
|
|
|
7FF5DAE57000
|
unkown
|
page readonly
|
|
|
|
198D7E6B000
|
unkown
|
page read and write
|
|
|
|
19EB9FD0000
|
unkown
|
page readonly
|
|
|
|
1E462BA0000
|
heap private
|
page read and write
|
|
|
|
25B11933000
|
unkown
|
page read and write
|
|
|
|
7FF54DFA1000
|
unkown
|
page readonly
|
|
|
|
7FF5DAFB3000
|
unkown
|
page readonly
|
|
|
|
7FF52FEA6000
|
unkown
|
page readonly
|
|
|
|
7FF52FE28000
|
unkown
|
page readonly
|
|
|
|
7FF543F0C000
|
unkown
|
page readonly
|
|
|
|
7FF55B8A7000
|
unkown
|
page readonly
|
|
|
|
1E468330000
|
unkown
|
page read and write
|
|
|
|
7FF504817000
|
unkown
|
page readonly
|
|
|
|
C17EF7A000
|
unkown
|
page read and write
|
|
|
|
7FF54DF48000
|
unkown
|
page readonly
|
|
|
|
28824455000
|
unkown
|
page read and write
|
|
|
|
C17EFFC000
|
unkown
|
page read and write
|
|
|
|
7FF55BB7A000
|
unkown
|
page readonly
|
|
|
|
23A23410000
|
unkown
|
page read and write
|
|
|
|
1E463502000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC89000
|
unkown
|
page readonly
|
|
|
|
1F52F6B0000
|
heap private
|
page read and write
|
|
|
|
16A8F37A000
|
heap private
|
page read and write
|
|
|
|
7FF55BBA9000
|
unkown
|
page readonly
|
|
|
|
2ED0000
|
unkown
|
page readonly
|
|
|
|
7FF52FF31000
|
unkown
|
page readonly
|
|
|
|
7FF57B463000
|
unkown
|
page readonly
|
|
|
|
2F40000
|
heap default
|
page read and write
|
|
|
|
198D7E64000
|
unkown
|
page read and write
|
|
|
|
23A22570000
|
unkown
|
page readonly
|
|
|
|
1D0287A000
|
unkown
|
page read and write
|
|
|
|
8CF4C75000
|
unkown
|
page read and write
|
|
|
|
1E468488000
|
unkown
|
page read and write
|
|
|
|
186A8102000
|
unkown
|
page read and write
|
|
|
|
7FF57DFC8000
|
unkown
|
page readonly
|
|
|
|
7FF5049D1000
|
unkown
|
page readonly
|
|
|
|
7FF543735000
|
unkown
|
page readonly
|
|
|
|
12B59C02000
|
unkown
|
page read and write
|
|
|
|
8CF4D7B000
|
unkown
|
page read and write
|
|
|
|
23A209F0000
|
unkown
|
page readonly
|
|
|
|
20C31C13000
|
unkown
|
page read and write
|
|
|
|
1D0235B000
|
unkown
|
page read and write
|
|
|
|
7FF57B735000
|
unkown
|
page readonly
|
|
|
|
198D7E5F000
|
unkown
|
page read and write
|
|
|
|
7FF594235000
|
unkown
|
page readonly
|
|
|
|
32A7000
|
heap private
|
page read and write
|
|
|
|
23A22D82000
|
unkown
|
page read and write
|
|
|
|
9DCEBFB000
|
unkown
|
page read and write
|
|
|
|
7FF5AA558000
|
unkown
|
page readonly
|
|
|
|
7FF57B6AA000
|
unkown
|
page readonly
|
|
|
|
23A20B76000
|
unkown
|
page read and write
|
|
|
|
1E4684B4000
|
unkown
|
page read and write
|
|
|
|
7FF5DF024000
|
unkown
|
page readonly
|
|
|
|
7FF5DB0A0000
|
unkown
|
page readonly
|
|
|
|
25B1191D000
|
unkown
|
page read and write
|
|
|
|
7FF57B303000
|
unkown
|
page readonly
|
|
|
|
7FF5044D0000
|
unkown
|
page readonly
|
|
|
|
1870EA6D000
|
unkown
|
page read and write
|
|
|
|
16A8F19E000
|
unkown
|
page read and write
|
|
|
|
7FF5CB682000
|
unkown
|
page readonly
|
|
|
|
2134EFC000
|
unkown
|
page read and write
|
|
|
|
7FF543B8D000
|
unkown
|
page readonly
|
|
|
|
7FF5435F0000
|
unkown
|
page readonly
|
|
|
|
7FF5AAC75000
|
unkown
|
page readonly
|
|
|
|
7FF50493D000
|
unkown
|
page readonly
|
|
|
|
7FF55BBF7000
|
unkown
|
page readonly
|
|
|
|
7FF5AAC46000
|
unkown
|
page readonly
|
|
|
|
5B689FD000
|
unkown
|
page read and write
|
|
|
|
7FF5944EC000
|
unkown
|
page readonly
|
|
|
|
7FF54E02E000
|
unkown
|
page readonly
|
|
|
|
7FF5DAE5E000
|
unkown
|
page readonly
|
|
|
|
7FF543EF6000
|
unkown
|
page readonly
|
|
|
|
16A8F370000
|
heap private
|
page read and write
|
|
|
|
7FF5AAB43000
|
unkown
|
page readonly
|
|
|
|
1E468268000
|
unkown
|
page read and write
|
|
|
|
14F41300000
|
unkown
|
page read and write
|
|
|
|
1E462CE0000
|
unkown
|
page readonly
|
|
|
|
1E468380000
|
unkown
|
page read and write
|
|
|
|
7FF5AACC5000
|
unkown
|
page readonly
|
|
|
|
37C8AFE000
|
unkown
|
page read and write
|
|
|
|
28C0000
|
unkown
|
page readonly
|
|
|
|
97DD579000
|
unkown
|
page read and write
|
|
|
|
7FF54DFD7000
|
unkown
|
page readonly
|
|
|
|
23A23610000
|
unkown
|
page read and write
|
|
|
|
1362C4BA000
|
unkown
|
page read and write
|
|
|
|
1E46842F000
|
unkown
|
page read and write
|
|
|
|
23A22E00000
|
unkown
|
page read and write
|
|
|
|
23A20AE0000
|
unkown
|
page read and write
|
|
|
|
1F52DC00000
|
unkown
|
page read and write
|
|
|
|
1F52DC20000
|
unkown
|
page read and write
|
|
|
|
1E468260000
|
unkown
|
page read and write
|
|
|
|
23A20CD0000
|
unkown
|
page readonly
|
|
|
|
23A22C53000
|
unkown
|
page read and write
|
|
|
|
7FF57E026000
|
unkown
|
page readonly
|
|
|
|
1E463000000
|
unkown
|
page readonly
|
|
|
|
4F6A17F000
|
unkown
|
page read and write
|
|
|
|
186A8100000
|
unkown
|
page read and write
|
|
|
|
1E468367000
|
unkown
|
page write copy
|
|
|
|
C17ECFA000
|
unkown
|
page read and write
|
|
|
|
2882000
|
unkown
|
page readonly
|
|
|
|
9DCF37E000
|
unkown
|
page read and write
|
|
|
|
7FF5DB12C000
|
unkown
|
page readonly
|
|
|
|
23A20AB8000
|
unkown
|
page read and write
|
|
|
|
198D7E40000
|
unkown
|
page read and write
|
|
|
|
19EBA590000
|
unkown
|
page readonly
|
|
|
|
7FF576B09000
|
unkown
|
page readonly
|
|
|
|
2891000
|
unkown
|
page readonly
|
|
|
|
683B07B000
|
unkown
|
page read and write
|
|
|
|
23A23610000
|
unkown
|
page read and write
|
|
|
|
12B59B30000
|
heap private
|
page read and write
|
|
|
|
146CDFB000
|
unkown
|
page read and write
|
|
|
|
16A8EF80000
|
unkown
|
page read and write
|
|
|
|
5B6887D000
|
unkown
|
page read and write
|
|
|
|
16A8F128000
|
unkown
|
page read and write
|
|
|
|
19EBA000000
|
unkown
|
page read and write
|
|
|
|
7FF57E050000
|
unkown
|
page readonly
|
|
|
|
7FF5046FA000
|
unkown
|
page readonly
|
|
|
|
213475B000
|
unkown
|
page read and write
|
|
|
|
186A8113000
|
unkown
|
page read and write
|
|
|
|
7FF52FE89000
|
unkown
|
page readonly
|
|
|
|
7FF504970000
|
unkown
|
page readonly
|
|
|
|
7FF57E0B9000
|
unkown
|
page readonly
|
|
|
|
7FF57B72E000
|
unkown
|
page readonly
|
|
|
|
7FF57DEF1000
|
unkown
|
page readonly
|
|
|
|
7FF55BBBD000
|
unkown
|
page readonly
|
|
|
|
14F41269000
|
unkown
|
page read and write
|
|
|
|
7FF55B8B4000
|
unkown
|
page readonly
|
|
|
|
7FF55B920000
|
unkown
|
page readonly
|
|
|
|
186A803C000
|
unkown
|
page read and write
|
|
|
|
20C31C6F000
|
unkown
|
page read and write
|
|
|
|
14F41200000
|
unkown
|
page read and write
|
|
|
|
7FF5CB62A000
|
unkown
|
page readonly
|
|
|
|
7FF5049CE000
|
unkown
|
page readonly
|
|
|
|
20C31B60000
|
unkown
|
page readonly
|
|
|
|
7FF543F20000
|
unkown
|
page readonly
|
|
|
|
97DD7FF000
|
unkown
|
page read and write
|
|
|
|
25B0FA8A000
|
unkown
|
page read and write
|
|
|
|
25B11A90000
|
unkown
|
page readonly
|
|
|
|
3027000
|
unkown
|
page read and write
|
|
|
|
1F8A6B00000
|
unkown
|
page readonly
|
|
|
|
1362CC02000
|
unkown
|
page read and write
|
|
|
|
12B59C00000
|
unkown
|
page read and write
|
|
|
|
23A22A00000
|
unkown
|
page read and write
|
|
|
|
23A20AEA000
|
unkown
|
page read and write
|
|
|
|
23A20AAA000
|
unkown
|
page read and write
|
|
|
|
288A000
|
unkown
|
page readonly
|
|
|
|
7FF543E4B000
|
unkown
|
page readonly
|
|
|
|
23A20B34000
|
unkown
|
page read and write
|
|
|
|
7FF5DB0F9000
|
unkown
|
page readonly
|
|
|
|
7FF543B58000
|
unkown
|
page readonly
|
|
|
|
23A20B35000
|
unkown
|
page read and write
|
|
|
|
7FF5048D2000
|
unkown
|
page readonly
|
|
|
|
1870EA00000
|
unkown
|
page read and write
|
|
|
|
7FF5DB1A1000
|
unkown
|
page readonly
|
|
|
|
198D7E46000
|
unkown
|
page read and write
|
|
|
|
7FF5DB041000
|
unkown
|
page readonly
|
|
|
|
1E468280000
|
unkown
|
page read and write
|
|
|
|
23A20AAB000
|
unkown
|
page read and write
|
|
|
|
7FF55B9AA000
|
unkown
|
page readonly
|
|
|
|
23A22A6B000
|
unkown
|
page read and write
|
|
|
|
23A20BB6000
|
unkown
|
page read and write
|
|
|
|
23A22A3B000
|
unkown
|
page read and write
|
|
|
|
1E468290000
|
unkown
|
page read and write
|
|
|
|
7FF55BB9F000
|
unkown
|
page readonly
|
|
|
|
7FF55B9C0000
|
unkown
|
page readonly
|
|
|
|
28A6000
|
unkown
|
page readonly
|
|
|
|
1E468281000
|
unkown
|
page read and write
|
|
|
|
7FF504811000
|
unkown
|
page readonly
|
|
|
|
7FF55BBCC000
|
unkown
|
page readonly
|
|
|
|
37C8DFE000
|
unkown
|
page read and write
|
|
|
|
7FF5DEEA0000
|
unkown
|
page readonly
|
|
|
|
23A20AAB000
|
unkown
|
page read and write
|
|
|
|
7FF576A7C000
|
unkown
|
page readonly
|
|
|
|
7FF5AAD2E000
|
unkown
|
page readonly
|
|
|
|
7FF543CC8000
|
unkown
|
page readonly
|
|
|
|
294B000
|
unkown
|
page readonly
|
|
|
|
1870EA68000
|
unkown
|
page read and write
|
|
|
|
1F8A5002000
|
unkown
|
page read and write
|
|
|
|
7FF5CB3E3000
|
unkown
|
page readonly
|
|
|
|
2FF0000
|
heap default
|
page read and write
|
|
|
|
1362C46F000
|
unkown
|
page read and write
|
|
|
|
1D17106B000
|
unkown
|
page read and write
|
|
|
|
7FF5CB6C9000
|
unkown
|
page readonly
|
|
|
|
7FF5AAD31000
|
unkown
|
page readonly
|
|
|
|
7FF55B8C7000
|
unkown
|
page readonly
|
|
|
|
7FF57B7EE000
|
unkown
|
page readonly
|
|
|
|
12B5B670000
|
unkown
|
page read and write
|
|
|
|
1E468150000
|
unkown
|
page read and write
|
|
|
|
7FF534AAE000
|
unkown
|
page readonly
|
|
|
|
1362C350000
|
unkown
|
page readonly
|
|
|
|
25B0FA3F000
|
unkown
|
page read and write
|
|
|
|
7FF576933000
|
unkown
|
page readonly
|
|
|
|
C17F17D000
|
unkown
|
page read and write
|
|
|
|
16A8F13C000
|
unkown
|
page read and write
|
|
|
|
1E462C10000
|
unkown
|
page readonly
|
|
|
|
20C31D02000
|
unkown
|
page read and write
|
|
|
|
7FF55BB6A000
|
unkown
|
page readonly
|
|
|
|
1F52DCC8000
|
heap default
|
page read and write
|
|
|
|
7FF534A45000
|
unkown
|
page readonly
|
|
|
|
14F41269000
|
unkown
|
page read and write
|
|
|
|
19EBA680000
|
unkown
|
page read and write
|
|
|
|
1E4682A0000
|
unkown
|
page read and write
|
|
|
|
2968000
|
unkown
|
page readonly
|
|
|
|
7FF50495C000
|
unkown
|
page readonly
|
|
|
|
7FF52FE32000
|
unkown
|
page readonly
|
|
|
|
7FF57B603000
|
unkown
|
page readonly
|
|
|
|
8794E77000
|
unkown
|
page read and write
|
|
|
|
7FF510172000
|
unkown
|
page readonly
|
|
|
|
7FF57DEF7000
|
unkown
|
page readonly
|
|
|
|
7FF543CBC000
|
unkown
|
page readonly
|
|
|
|
1870EA69000
|
unkown
|
page read and write
|
|
|
|
23A22A5D000
|
unkown
|
page read and write
|
|
|
|
1E4684AE000
|
unkown
|
page read and write
|
|
|
|
23A20A7B000
|
unkown
|
page read and write
|
|
|
|
23A23A10000
|
unkown
|
page read and write
|
|
|
|
2FFA000
|
heap default
|
page read and write
|
|
|
|
7FF5CB6B5000
|
unkown
|
page readonly
|
|
|
|
28824413000
|
unkown
|
page read and write
|
|
|
|
23A23110000
|
unkown
|
page read and write
|
|
|
|
7FF543F89000
|
unkown
|
page readonly
|
|
|
|
7FF57DBB0000
|
unkown
|
page readonly
|
|
|
|
2753000
|
unkown
|
page readonly
|
|
|
|
7FF5DB135000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFCF000
|
unkown
|
page readonly
|
|
|
|
1E468334000
|
unkown
|
page readonly
|
|
|
|
198D7E75000
|
unkown
|
page read and write
|
|
|
|
7FF52FE1C000
|
unkown
|
page readonly
|
|
|
|
7FF510081000
|
unkown
|
page readonly
|
|
|
|
2C52000
|
unkown
|
page read and write
|
|
|
|
23A20ADF000
|
unkown
|
page read and write
|
|
|
|
7FF594579000
|
unkown
|
page readonly
|
|
|
|
1D171113000
|
unkown
|
page read and write
|
|
|
|
28824240000
|
heap private
|
page read and write
|
|
|
|
7FF576917000
|
unkown
|
page readonly
|
|
|
|
7FF59449A000
|
unkown
|
page readonly
|
|
|
|
7FF543CEE000
|
unkown
|
page readonly
|
|
|
|
1E4633F0000
|
unkown
|
page read and write
|
|
|
|
7FF576AFE000
|
unkown
|
page readonly
|
|
|
|
683B179000
|
unkown
|
page read and write
|
|
|
|
7FF57B6F2000
|
unkown
|
page readonly
|
|
|
|
23A20AAB000
|
unkown
|
page read and write
|
|
|
|
7FF5DEF6C000
|
unkown
|
page readonly
|
|
|
|
7FF5DEF92000
|
unkown
|
page readonly
|
|
|
|
7FF5DB061000
|
unkown
|
page readonly
|
|
|
|
23A20AEB000
|
unkown
|
page read and write
|
|
|
|
7FF5109EE000
|
unkown
|
page readonly
|
|
|
|
1E4686C0000
|
unkown
|
page readonly
|
|
|
|
7FF52FC00000
|
unkown
|
page readonly
|
|
|
|
9DCF17D000
|
unkown
|
page read and write
|
|
|
|
C17E3FB000
|
unkown
|
page read and write
|
|
|
|
7FF543E96000
|
unkown
|
page readonly
|
|
|
|
7FF576396000
|
unkown
|
page readonly
|
|
|
|
23A20AEA000
|
unkown
|
page read and write
|
|
|
|
7FF57697C000
|
unkown
|
page readonly
|
|
|
|
16A8F19E000
|
heap default
|
page read and write
|
|
|
|
7FF543E41000
|
unkown
|
page readonly
|
|
|
|
198D7E4E000
|
unkown
|
page read and write
|
|
|
|
7FF576A45000
|
unkown
|
page readonly
|
|
|
|
7FF5942E0000
|
unkown
|
page readonly
|
|
|
|
7FF52FF2E000
|
unkown
|
page readonly
|
|
|
|
7FF5349EE000
|
unkown
|
page readonly
|
|
|
|
2940000
|
unkown
|
page readonly
|
|
|
|
1362C3A0000
|
unkown
|
page readonly
|
|
|
|
16A8FEC0000
|
unkown
|
page readonly
|
|
|
|
7FF54DF32000
|
unkown
|
page readonly
|
|
|
|
7FF534A3C000
|
unkown
|
page readonly
|
|
|
|
4A50000
|
unkown
|
page readonly
|
|
|
|
7FF54DFA6000
|
unkown
|
page readonly
|
|
|
|
1D17103F000
|
unkown
|
page read and write
|
|
|
|
7FF5DAF0E000
|
unkown
|
page readonly
|
|
|
|
7FF543E63000
|
unkown
|
page readonly
|
|
|
|
7FF52FCF8000
|
unkown
|
page readonly
|
|
|
|
186A7FD0000
|
unkown
|
page read and write
|
|
|
|
198D7E6A000
|
unkown
|
page read and write
|
|
|
|
7FF510935000
|
unkown
|
page readonly
|
|
|
|
63CF000
|
stack
|
page read and write
|
|
|
|
23A22ADB000
|
unkown
|
page read and write
|
|
|
|
7FF50479E000
|
unkown
|
page readonly
|
|
|
|
1F52DAD0000
|
unkown
|
page readonly
|
|
|
|
7FF543D2E000
|
unkown
|
page readonly
|
|
|
|
C17E67B000
|
unkown
|
page read and write
|
|
|
|
7FF5349B0000
|
unkown
|
page readonly
|
|
|
|
198D7E65000
|
unkown
|
page read and write
|
|
|
|
8CF4E7F000
|
unkown
|
page read and write
|
|
|
|
7FF52FE48000
|
unkown
|
page readonly
|
|
|
|
7FF5DB0E5000
|
unkown
|
page readonly
|
|
|
|
198D7E57000
|
unkown
|
page read and write
|
|
|
|
198D7C60000
|
unkown
|
page readonly
|
|
|
|
7FF57DDDA000
|
unkown
|
page readonly
|
|
|
|
7FF57DFEE000
|
unkown
|
page readonly
|
|
|
|
14F41268000
|
unkown
|
page read and write
|
|
|
|
1E4684B0000
|
unkown
|
page read and write
|
|
|
|
25B11902000
|
unkown
|
page read and write
|
|
|
|
1E463B60000
|
unkown
|
page read and write
|
|
|
|
198D7E74000
|
unkown
|
page read and write
|
|
|
|
7FF5762BC000
|
unkown
|
page readonly
|
|
|
|
9DCF57F000
|
unkown
|
page read and write
|
|
|
|
87956FF000
|
unkown
|
page read and write
|
|
|
|
7FF52FE5A000
|
unkown
|
page readonly
|
|
|
|
1E462E3D000
|
unkown
|
page read and write
|
|
|
|
16A8FF30000
|
unkown
|
page read and write
|
|
|
|
198D7E7B000
|
unkown
|
page read and write
|
|
|
|
186A8071000
|
unkown
|
page read and write
|
|
|
|
186A8802000
|
unkown
|
page read and write
|
|
|
|
186A8057000
|
unkown
|
page read and write
|
|
|
|
37C8A7B000
|
unkown
|
page read and write
|
|
|
|
7FF57E036000
|
unkown
|
page readonly
|
|
|
|
23A23110000
|
unkown
|
page read and write
|
|
|
|
1E4683C0000
|
unkown
|
page read and write
|
|
|
|
25B0F9F0000
|
unkown
|
page read and write
|
|
|
|
187103A0000
|
unkown
|
page read and write
|
|
|
|
23A20B13000
|
unkown
|
page read and write
|
|
|
|
C17EDFB000
|
unkown
|
page read and write
|
|
|
|
23A20A3F000
|
unkown
|
page read and write
|
|
|
|
3018000
|
unkown
|
page read and write
|
|
|
|
14F41180000
|
unkown
|
page readonly
|
|
|
|
23A20AE2000
|
unkown
|
page read and write
|
|
|
|
7FF55BB66000
|
unkown
|
page readonly
|
|
|
|
C17EC7B000
|
unkown
|
page read and write
|
|
|
|
23A20B85000
|
unkown
|
page read and write
|
|
|
|
198D7E58000
|
unkown
|
page read and write
|
|
|
|
7FF534987000
|
unkown
|
page readonly
|
|
|
|
5B68AFD000
|
unkown
|
page read and write
|
|
|
|
25B11923000
|
unkown
|
page read and write
|
|
|
|
19EBA690000
|
unkown
|
page read and write
|
|
|
|
7FF56721C000
|
unkown
|
page readonly
|
|
|
|
186A7ED0000
|
heap default
|
page read and write
|
|
|
|
7FF5AAB4D000
|
unkown
|
page readonly
|
|
|
|
198D7E41000
|
unkown
|
page read and write
|
|
|
|
16A8F0E1000
|
heap default
|
page read and write
|
|
|
|
7FF52FCD8000
|
unkown
|
page readonly
|
|
|
|
7FF5048E6000
|
unkown
|
page readonly
|
|
|
|
20C31C4D000
|
unkown
|
page read and write
|
|
|
|
7FF57B6CC000
|
unkown
|
page readonly
|
|
|
|
1E463518000
|
unkown
|
page read and write
|
|
|
|
19EBA002000
|
unkown
|
page read and write
|
|
|
|
7FF59444A000
|
unkown
|
page readonly
|
|
|
|
7FF54E039000
|
unkown
|
page readonly
|
|
|
|
7FF57B6D3000
|
unkown
|
page readonly
|
|
|
|
7FF57D865000
|
unkown
|
page readonly
|
|
|
|
23A22D02000
|
unkown
|
page read and write
|
|
|
|
7FF543E6C000
|
unkown
|
page readonly
|
|
|
|
1E468442000
|
unkown
|
page read and write
|
|
|
|
23A23410000
|
unkown
|
page read and write
|
|
|
|
7FF543693000
|
unkown
|
page readonly
|
|
|
|
14F42BA0000
|
unkown
|
page read and write
|
|
|
|
23A20AAC000
|
unkown
|
page read and write
|
|
|
|
7FF57B57F000
|
unkown
|
page readonly
|
|
|
|
1362C360000
|
unkown
|
page readonly
|
|
|
|
23A23210000
|
unkown
|
page read and write
|
|
|
|
186A8002000
|
unkown
|
page read and write
|
|
|
|
198D7E60000
|
unkown
|
page read and write
|
|
|
|
1870EA68000
|
unkown
|
page read and write
|
|
|
|
7FF543E98000
|
unkown
|
page readonly
|
|
|
|
7FF5DB0EF000
|
unkown
|
page readonly
|
|
|
|
7FF5CB69A000
|
unkown
|
page readonly
|
|
|
|
7FF5AABD1000
|
unkown
|
page readonly
|
|
|
|
1870EA6D000
|
unkown
|
page read and write
|
|
|
|
1E468140000
|
unkown
|
page read and write
|
|
|
|
C17F0FC000
|
unkown
|
page read and write
|
|
|
|
7FF543817000
|
unkown
|
page readonly
|
|
|
|
1E462E8E000
|
unkown
|
page read and write
|
|
|
|
C17E8FB000
|
unkown
|
page read and write
|
|
|
|
25B12010000
|
unkown
|
page read and write
|
|
|
|
7FF5944FC000
|
unkown
|
page readonly
|
|
|
|
1E463518000
|
unkown
|
page read and write
|
|
|
|
16A8F17E000
|
unkown
|
page read and write
|
|
|
|
1870EA6E000
|
unkown
|
page read and write
|
|
|
|
2882443C000
|
unkown
|
page read and write
|
|
|
|
7FF5CB3D4000
|
unkown
|
page readonly
|
|
|
|
25B0FAC9000
|
unkown
|
page read and write
|
|
|
|
11192FF000
|
unkown
|
page read and write
|
|
|
|
25B0F960000
|
unkown
|
page write copy
|
|
|
|
23A22C02000
|
unkown
|
page read and write
|
|
|
|
7FF5CB76E000
|
unkown
|
page readonly
|
|
|
|
25B0FB18000
|
unkown
|
page read and write
|
|
|
|
2896000
|
unkown
|
page readonly
|
|
|
|
C17ED7B000
|
unkown
|
page read and write
|
|
|
|
1D170EC0000
|
heap private
|
page read and write
|
|
|
|
23A20A7C000
|
unkown
|
page read and write
|
|
|
|
C17EA7A000
|
unkown
|
page read and write
|
|
|
|
7FF5437D9000
|
unkown
|
page readonly
|
|
|
|
7FF5AACBC000
|
unkown
|
page readonly
|
|
|
|
28824456000
|
unkown
|
page read and write
|
|
|
|
7FF594486000
|
unkown
|
page readonly
|
|
|
|
7FF543EAA000
|
unkown
|
page readonly
|
|
|
|
198D7E29000
|
unkown
|
page read and write
|
|
|
|
7FF5CB688000
|
unkown
|
page readonly
|
|
|
|
C17E379000
|
unkown
|
page read and write
|
|
|
|
23A20A00000
|
unkown
|
page read and write
|
|
|
|
285E000
|
unkown
|
page readonly
|
|
|
|
7FF52FEAC000
|
unkown
|
page readonly
|
|
|
|
23A20A6A000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page readonly
|
|
|
|
25B0F890000
|
unkown
|
page readonly
|
|
|
|
7FF57B797000
|
unkown
|
page readonly
|
|
|
|
19EBA03D000
|
unkown
|
page read and write
|
|
|
|
1E4684B1000
|
unkown
|
page read and write
|
|
|
|
7FF5DB144000
|
unkown
|
page readonly
|
|
|
|
198D7E45000
|
unkown
|
page read and write
|
|
|
|
25B11964000
|
unkown
|
page read and write
|
|
|
|
7FF54380C000
|
unkown
|
page readonly
|
|
|
|
1870EA6E000
|
unkown
|
page read and write
|
|
|
|
198D7E3B000
|
unkown
|
page read and write
|
|
|
|
7FF54DF75000
|
unkown
|
page readonly
|
|
|
|
7FF57E03C000
|
unkown
|
page readonly
|
|
|
|
1E462F13000
|
unkown
|
page read and write
|
|
|
|
7FF5041F2000
|
unkown
|
page readonly
|
|
|
|
4F6A0F9000
|
unkown
|
page read and write
|
|
|
|
28824390000
|
unkown
|
page readonly
|
|
|
|
1E4682A4000
|
unkown
|
page read and write
|
|
|
|
23A20AEA000
|
unkown
|
page read and write
|
|
|
|
7FF57B454000
|
unkown
|
page readonly
|
|
|
|
1E468330000
|
unkown
|
page write copy
|
|
|
|
1E463701000
|
unkown
|
page read and write
|
|
|
|
7FF543AC3000
|
unkown
|
page readonly
|
|
|
|
20C31C83000
|
unkown
|
page read and write
|
|
|
|
7FF594368000
|
unkown
|
page readonly
|
|
|
|
7FF52F5C9000
|
unkown
|
page readonly
|
|
|
|
7FF54DFB6000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFAA000
|
unkown
|
page readonly
|
|
|
|
7FF5941C7000
|
unkown
|
page readonly
|
|
|
|
186A804D000
|
unkown
|
page read and write
|
|
|
|
7FF5944F6000
|
unkown
|
page readonly
|
|
|
|
7FF50490E000
|
unkown
|
page readonly
|
|
|
|
14F41268000
|
unkown
|
page read and write
|
|
|
|
7FF5DAFB7000
|
unkown
|
page readonly
|
|
|
|
23A209A0000
|
unkown
|
page readonly
|
|
|
|
7FF52FE75000
|
unkown
|
page readonly
|
|
|
|
1D0267F000
|
unkown
|
page read and write
|
|
|
|
23A20C00000
|
unkown
|
page readonly
|
|
|
|
5B6867E000
|
unkown
|
page read and write
|
|
|
|
7FF52FF39000
|
unkown
|
page readonly
|
|
|
|
1870E9A0000
|
unkown
|
page readonly
|
|
|
|
7FF5AAA5A000
|
unkown
|
page readonly
|
|
|
|
7FF54DF46000
|
unkown
|
page readonly
|
|
|
|
20C31C29000
|
unkown
|
page read and write
|
|
|
|
7FF5944C9000
|
unkown
|
page readonly
|
|
|
|
2F20000
|
unkown
|
page read and write
|
|
|
|
198D7E5C000
|
unkown
|
page read and write
|
|
|
|
1E4683A0000
|
unkown
|
page read and write
|
|
|
|
7FF54DCB3000
|
unkown
|
page readonly
|
|
|
|
7FF534AB9000
|
unkown
|
page readonly
|
|
|
|
7FF5346D5000
|
unkown
|
page readonly
|
|
|
|
7FF57B447000
|
unkown
|
page readonly
|
|
|
|
7FF5944B5000
|
unkown
|
page readonly
|
|
|
|
23A23510000
|
unkown
|
page read and write
|
|
|
|
1D17105A000
|
unkown
|
page read and write
|
|
|
|
C17E2FE000
|
unkown
|
page read and write
|
|
|
|
186A7E70000
|
heap private
|
page read and write
|
|
|
|
7FF5CB779000
|
unkown
|
page readonly
|
|
|
|
7FF57E02C000
|
unkown
|
page readonly
|
|
|
|
19EB9F00000
|
unkown
|
page readonly
|
|
|
|
7FF59442A000
|
unkown
|
page readonly
|
|
|
|
7FF50491F000
|
unkown
|
page readonly
|
|
|
|
25B11A40000
|
unkown
|
page readonly
|
|
|
|
2FC0000
|
unkown
|
page read and write
|
|
|
|
37C8B7E000
|
unkown
|
page read and write
|
|
|
|
7FF504946000
|
unkown
|
page readonly
|
|
|
|
7FF543550000
|
unkown
|
page readonly
|
|
|
|
23A22A44000
|
unkown
|
page read and write
|
|
|
|
7FF543E92000
|
unkown
|
page readonly
|
|
|
|
146D27F000
|
unkown
|
page read and write
|
|
|
|
7FF5DB116000
|
unkown
|
page readonly
|
|
|
|
7FF5434D7000
|
unkown
|
page readonly
|
|
|
|
7FF5DB098000
|
unkown
|
page readonly
|
|
|
|
1118FFC000
|
unkown
|
page read and write
|
|
|
|
7FF5DACB3000
|
unkown
|
page readonly
|
|
|
|
87951FE000
|
unkown
|
page read and write
|
|
|
|
7FF54E039000
|
unkown
|
page readonly
|
|
|
|
28824502000
|
unkown
|
page read and write
|
|
|
|
7FF504915000
|
unkown
|
page readonly
|
|
|
|
23A22A62000
|
unkown
|
page read and write
|
|
|
|
7FF55BB95000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFC5000
|
unkown
|
page readonly
|
|
|
|
16A8F117000
|
unkown
|
page read and write
|
|
|
|
7FF543EC5000
|
unkown
|
page readonly
|
|
|
|
7FF57B75D000
|
unkown
|
page readonly
|
|
|
|
1870EA69000
|
unkown
|
page read and write
|
|
|
|
23A22470000
|
unkown
|
page read and write
|
|
|
|
1E462E9E000
|
unkown
|
page read and write
|
|
|
|
198D7BF0000
|
heap private
|
page read and write
|
|
|
|
C17DFDB000
|
unkown
|
page read and write
|
|
|
|
7FF594507000
|
unkown
|
page readonly
|
|
|
|
9DCF07F000
|
unkown
|
page read and write
|
|
|
|
7FF5DB11C000
|
unkown
|
page readonly
|
|
|
|
7FF57B749000
|
unkown
|
page readonly
|
|
|
|
25B1190A000
|
unkown
|
page read and write
|
|
|
|
7FF57B71A000
|
unkown
|
page readonly
|
|
|
|
7FF543F27000
|
unkown
|
page readonly
|
|
|
|
1F52F8B0000
|
heap private
|
page read and write
|
|
|
|
4F6A07F000
|
unkown
|
page read and write
|
|
|
|
7FF5DAE70000
|
unkown
|
page readonly
|
|
|
|
A3867FE000
|
unkown
|
page read and write
|
|
|
|
2882447C000
|
unkown
|
page read and write
|
|
|
|
7FF57B702000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFFC000
|
unkown
|
page readonly
|
|
|
|
23A23510000
|
unkown
|
page read and write
|
|
|
|
7FF57B47C000
|
unkown
|
page readonly
|
|
|
|
7FF5109F9000
|
unkown
|
page readonly
|
|
|
|
23A22AF4000
|
unkown
|
page read and write
|
|
|
|
C17F07E000
|
unkown
|
page read and write
|
|
|
|
28824491000
|
unkown
|
page read and write
|
|
|
|
7FF5434E4000
|
unkown
|
page readonly
|
|
|
|
23A22D00000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC42000
|
unkown
|
page readonly
|
|
|
|
7FF5DF00C000
|
unkown
|
page readonly
|
|
|
|
7FF5942CA000
|
unkown
|
page readonly
|
|
|
|
7FF55BBE7000
|
unkown
|
page readonly
|
|
|
|
5B684FE000
|
unkown
|
page read and write
|
|
|
|
7FF543B9C000
|
unkown
|
page readonly
|
|
|
|
2EA0000
|
unkown
|
page read and write
|
|
|
|
23A22C84000
|
unkown
|
page read and write
|
|
|
|
1F8A5000000
|
unkown
|
page read and write
|
|
|
|
14F41060000
|
unkown
|
page readonly
|
|
|
|
7FF5DEE4B000
|
unkown
|
page readonly
|
|
|
|
28C2000
|
unkown
|
page readonly
|
|
|
|
97DD6F9000
|
unkown
|
page read and write
|
|
|
|
16A8F17C000
|
unkown
|
page read and write
|
|
|
|
7FF5349FF000
|
unkown
|
page readonly
|
|
|
|
23A22AF1000
|
unkown
|
page read and write
|
|
|
|
3024000
|
unkown
|
page read and write
|
|
|
|
9DCF27F000
|
unkown
|
page read and write
|
|
|
|
2F1E000
|
unkown
|
page read and write
|
|
|
|
7FF54DFE2000
|
unkown
|
page readonly
|
|
|
|
1362C400000
|
unkown
|
page read and write
|
|
|
|
1F52F6F0000
|
heap private
|
page read and write
|
|
|
|
7FF57B6B1000
|
unkown
|
page readonly
|
|
|
|
23A20AEB000
|
unkown
|
page read and write
|
|
|
|
23A22930000
|
unkown
|
page readonly
|
|
|
|
7FF54DF30000
|
unkown
|
page readonly
|
|
|
|
7FF543AC1000
|
unkown
|
page readonly
|
|
|
|
146D17F000
|
unkown
|
page read and write
|
|
|
|
23A23A10000
|
unkown
|
page read and write
|
|
|
|
186A8029000
|
unkown
|
page read and write
|
|
|
|
7FF57DE7E000
|
unkown
|
page readonly
|
|
|
|
7FF5AACAC000
|
unkown
|
page readonly
|
|
|
|
7FF52FE0A000
|
unkown
|
page readonly
|
|
|
|
28E0000
|
unkown
|
page readonly
|
|
|
|
7FF5CB631000
|
unkown
|
page readonly
|
|
|
|
1F8A503F000
|
unkown
|
page read and write
|
|
|
|
7FF534A21000
|
unkown
|
page readonly
|
|
|
|
1F8A5055000
|
unkown
|
page read and write
|
|
|
|
28824453000
|
unkown
|
page read and write
|
|
|
|
7FF55BA48000
|
unkown
|
page readonly
|
|
|
|
23A20AEA000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC5A000
|
unkown
|
page readonly
|
|
|
|
7FF543F15000
|
unkown
|
page readonly
|
|
|
|
7FF5DAF2F000
|
unkown
|
page readonly
|
|
|
|
7FF52FBF5000
|
unkown
|
page readonly
|
|
|
|
C17E879000
|
unkown
|
page read and write
|
|
|
|
23A20ACA000
|
unkown
|
page read and write
|
|
|
|
DFB417F000
|
unkown
|
page read and write
|
|
|
|
7FF5944AE000
|
unkown
|
page readonly
|
|
|
|
2FB0000
|
unkown
|
page read and write
|
|
|
|
7FF51077F000
|
unkown
|
page readonly
|
|
|
|
8CF4A7B000
|
unkown
|
page read and write
|
|
|
|
7FF55BC51000
|
unkown
|
page readonly
|
|
|
|
C17EEFC000
|
unkown
|
page read and write
|
|
|
|
7FF52FC9E000
|
unkown
|
page readonly
|
|
|
|
1362CE00000
|
unkown
|
page readonly
|
|
|
|
198D7E6D000
|
unkown
|
page read and write
|
|
|
|
62CE000
|
unkown
|
page read and write
|
|
|
|
7FF57DF2C000
|
unkown
|
page readonly
|
|
|
|
186A804C000
|
unkown
|
page read and write
|
|
|
|
12B59C55000
|
unkown
|
page read and write
|
|
|
|
20C31D08000
|
unkown
|
page read and write
|
|
|
|
301D000
|
unkown
|
page read and write
|
|
|
|
28824470000
|
unkown
|
page read and write
|
|
|
|
7FF50494C000
|
unkown
|
page readonly
|
|
|
|
1E463402000
|
unkown
|
page read and write
|
|
|
|
7FF5DEDB6000
|
unkown
|
page readonly
|
|
|
|
9DCED7F000
|
unkown
|
page read and write
|
|
|
|
7FF5048FA000
|
unkown
|
page readonly
|
|
|
|
25B117F0000
|
heap private
|
page read and write
|
|
|
|
7FF543F06000
|
unkown
|
page readonly
|
|
|
|
7FF5DAF98000
|
unkown
|
page readonly
|
|
|
|
7FF543619000
|
unkown
|
page readonly
|
|
|
|
1870EA6A000
|
unkown
|
page read and write
|
|
|
|
7FF57B6E8000
|
unkown
|
page readonly
|
|
|
|
2F90000
|
unkown
|
page readonly
|
|
|
|
1E468461000
|
unkown
|
page read and write
|
|
|
|
7FF5AACD4000
|
unkown
|
page readonly
|
|
|
|
7FF5041F8000
|
unkown
|
page readonly
|
|
|
|
7FF5DF015000
|
unkown
|
page readonly
|
|
|
|
187104A0000
|
unkown
|
page readonly
|
|
|
|
28824513000
|
unkown
|
page read and write
|
|
|
|
16A8F18D000
|
unkown
|
page read and write
|
|
|
|
7FF53497B000
|
unkown
|
page readonly
|
|
|
|
8CF507F000
|
unkown
|
page read and write
|
|
|
|
7FF57B6F0000
|
unkown
|
page readonly
|
|
|
|
23A20AAC000
|
unkown
|
page read and write
|
|
|
|
16A8F920000
|
unkown
|
page readonly
|
|
|
|
C17E7FB000
|
unkown
|
page read and write
|
|
|
|
7FF5DEF82000
|
unkown
|
page readonly
|
|
|
|
7FF55BC4E000
|
unkown
|
page readonly
|
|
|
|
7FF5DF080000
|
unkown
|
page readonly
|
|
|
|
7FF57DFDA000
|
unkown
|
page readonly
|
|
|
|
23A23210000
|
unkown
|
page read and write
|
|
|
|
97DD97F000
|
unkown
|
page read and write
|
|
|
|
7FF510949000
|
unkown
|
page readonly
|
|
|
|
198D7E6F000
|
unkown
|
page read and write
|
|
|
|
7FF5DB0B8000
|
unkown
|
page readonly
|
|
|
|
7FF543D59000
|
unkown
|
page readonly
|
|
|
|
19EBA680000
|
unkown
|
page read and write
|
|
|
|
1E4684AA000
|
unkown
|
page read and write
|
|
|
|
7FF594514000
|
unkown
|
page readonly
|
|
|
|
7FF5DB07A000
|
unkown
|
page readonly
|
|
|
|
23A20AB5000
|
unkown
|
page read and write
|
|
|
|
1F52F7EF000
|
heap private
|
page read and write
|
|
|
|
20C31C4B000
|
unkown
|
page read and write
|
|
|
|
7FF57DFC6000
|
unkown
|
page readonly
|
|
|
|
19EB9E90000
|
heap private
|
page read and write
|
|
|
|
1362C4CB000
|
unkown
|
page read and write
|
|
|
|
7FF576A16000
|
unkown
|
page readonly
|
|
|
|
14F41268000
|
unkown
|
page read and write
|
|
|
|
7FF543ECF000
|
unkown
|
page readonly
|
|
|
|
7FF55BBC6000
|
unkown
|
page readonly
|
|
|
|
7FF54375A000
|
unkown
|
page readonly
|
|
|
|
25B117E0000
|
unkown
|
page readonly
|
|
|
|
16A8F11E000
|
unkown
|
page read and write
|
|
|
|
7FF5CB68A000
|
unkown
|
page readonly
|
|
|
|
14F42CA0000
|
unkown
|
page readonly
|
|
|
|
7FF5DAECB000
|
unkown
|
page readonly
|
|
|
|
28B2000
|
unkown
|
page readonly
|
|
|
|
1870EA57000
|
unkown
|
page read and write
|
|
|
|
2FA0000
|
unkown
|
page readonly
|
|
|
|
23A20AAC000
|
unkown
|
page read and write
|
|
|
|
1F8A5200000
|
unkown
|
page write copy
|
|
|
|
1118CFF000
|
unkown
|
page read and write
|
|
|
|
7FF54373A000
|
unkown
|
page readonly
|
|
|
|
1870EC00000
|
unkown
|
page readonly
|
|
|
|
14F4126B000
|
unkown
|
page read and write
|
|
|
|
7FF54DF89000
|
unkown
|
page readonly
|
|
|
|
B21E87E000
|
unkown
|
page read and write
|
|
|
|
23A20AE2000
|
unkown
|
page read and write
|
|
|
|
7FF576A1A000
|
unkown
|
page readonly
|
|
|
|
1F8A5250000
|
unkown
|
page readonly
|
|
|
|
7FF5AABAC000
|
unkown
|
page readonly
|
|
|
|
1E468620000
|
unkown
|
page readonly
|
|
|
|
25B0FB13000
|
unkown
|
page read and write
|
|
|
|
19EB9FF0000
|
unkown
|
page read and write
|
|
|
|
7FF576743000
|
unkown
|
page readonly
|
|
|
|
7FF52FE7F000
|
unkown
|
page readonly
|
|
|
|
7FF55BBD6000
|
unkown
|
page readonly
|
|
|
|
7FF543E82000
|
unkown
|
page readonly
|
|
|
|
1362C3B0000
|
unkown
|
page write copy
|
|
|
|
25B0FAA4000
|
unkown
|
page read and write
|
|
|
|
7FF5CB3E7000
|
unkown
|
page readonly
|
|
|
|
1F52E150000
|
unkown
|
page readonly
|
|
|
|
2BFA000
|
unkown
|
page read and write
|
|
|
|
7FF5DEBF2000
|
unkown
|
page readonly
|
|
|
|
23A22A66000
|
unkown
|
page read and write
|
|
|
|
1E4683C0000
|
unkown
|
page read and write
|
|
|
|
7FF5048D0000
|
unkown
|
page readonly
|
|
|
|
16A8F167000
|
unkown
|
page read and write
|
|
|
|
1D171A00000
|
unkown
|
page readonly
|
|
|
|
1870EA68000
|
unkown
|
page read and write
|
|
|
|
B21E8FC000
|
unkown
|
page read and write
|
|
|
|
7FF52F5C3000
|
unkown
|
page readonly
|
|
|
|
7FF594488000
|
unkown
|
page readonly
|
|
|
|
7FF57DBC0000
|
unkown
|
page readonly
|
|
|
|
7FF5DEBEE000
|
unkown
|
page readonly
|
|
|
|
1E4684B4000
|
unkown
|
page read and write
|
|
|
|
7FF576391000
|
unkown
|
page readonly
|
|
|
|
25B0FB00000
|
unkown
|
page read and write
|
|
|
|
14F41202000
|
unkown
|
page read and write
|
|
|
|
7FF57B55E000
|
unkown
|
page readonly
|
|
|
|
1118E7C000
|
unkown
|
page read and write
|
|
|
|
97DD8FD000
|
unkown
|
page read and write
|
|
|
|
7FF5DB0DE000
|
unkown
|
page readonly
|
|
|
|
23A20A55000
|
unkown
|
page read and write
|
|
|
|
7FF594387000
|
unkown
|
page readonly
|
|
|
|
1E463DC0000
|
unkown
|
page readonly
|
|
|
|
301D000
|
unkown
|
page read and write
|
|
|
|
1870EA69000
|
unkown
|
page read and write
|
|
|
|
7FF52FE9D000
|
unkown
|
page readonly
|
|
|
|
7FF5AAD39000
|
unkown
|
page readonly
|
|
|
|
7FF5DACDD000
|
unkown
|
page readonly
|
|
|
|
7FF543DFC000
|
unkown
|
page readonly
|
|
|
|
7FF594431000
|
unkown
|
page readonly
|
|
|
|
12B59C53000
|
unkown
|
page read and write
|
|
|
|
198D7E00000
|
unkown
|
page read and write
|
|
|
|
1362C4E2000
|
unkown
|
page read and write
|
|
|
|
23A22A78000
|
unkown
|
page read and write
|
|
|
|
7FF5AA840000
|
unkown
|
page readonly
|
|
|
|
23A23000000
|
unkown
|
page read and write
|
|
|
|
7FF52FED4000
|
unkown
|
page readonly
|
|
|
|
7FF54DF4A000
|
unkown
|
page readonly
|
|
|
|
23A22A8E000
|
unkown
|
page read and write
|
|
|
|
25D8000
|
unkown
|
page readonly
|
|
|
|
25B0FA54000
|
unkown
|
page read and write
|
|
|
|
7FF5DB137000
|
unkown
|
page readonly
|
|
|
|
1E468357000
|
unkown
|
page readonly
|
|
|
|
1870E880000
|
unkown
|
page readonly
|
|
|
|
1E463415000
|
unkown
|
page read and write
|
|
|
|
23A22D02000
|
unkown
|
page read and write
|
|
|
|
7FF594482000
|
unkown
|
page readonly
|
|
|
|
1E463D60000
|
unkown
|
page readonly
|
|
|
|
C17EAFA000
|
unkown
|
page read and write
|
|
|
|
97DD19B000
|
unkown
|
page read and write
|
|
|
|
7FF543C45000
|
unkown
|
page readonly
|
|
|
|
9DCE7EB000
|
unkown
|
page read and write
|
|
|
|
A3863BE000
|
unkown
|
page read and write
|
|
|
|
23A22AEC000
|
unkown
|
page read and write
|
|
|
|
12B59C3F000
|
unkown
|
page read and write
|
|
|
|
7FF5CB3C7000
|
unkown
|
page readonly
|
|
|
|
186A8052000
|
unkown
|
page read and write
|
|
|
|
9DCF67F000
|
unkown
|
page read and write
|
|
|
|
7FF55B8C3000
|
unkown
|
page readonly
|
|
|
|
186A7FB0000
|
unkown
|
page readonly
|
|
|
|
7FF5CB714000
|
unkown
|
page readonly
|
|
|
|
7FF510966000
|
unkown
|
page readonly
|
|
|
|
1F52DC60000
|
unkown
|
page readonly
|
|
|
|
7FF5944E6000
|
unkown
|
page readonly
|
|
|
|
7FF5DADF7000
|
unkown
|
page readonly
|
|
|
|
7FF5349C2000
|
unkown
|
page readonly
|
|
|
|
7FF5049D9000
|
unkown
|
page readonly
|
|
|
|
7FF5047ED000
|
unkown
|
page readonly
|
|
|
|
3015000
|
unkown
|
page read and write
|
|
|
|
23A22A14000
|
unkown
|
page read and write
|
|
|
|
19EBA200000
|
unkown
|
page readonly
|
|
|
|
87959FF000
|
unkown
|
page read and write
|
|
|
|
7FF543EFC000
|
unkown
|
page readonly
|
|
|
|
28FA000
|
unkown
|
page readonly
|
|
|
|
7FF5AAC9D000
|
unkown
|
page readonly
|
|
|
|
97DD5FA000
|
unkown
|
page read and write
|
|
|
|
1F8A4FF0000
|
unkown
|
page readonly
|
|
|
|
23A23610000
|
unkown
|
page read and write
|
|
|
|
198D7E68000
|
unkown
|
page read and write
|
|
|
|
7FF5DB0A2000
|
unkown
|
page readonly
|
|
|
|
198D7E84000
|
unkown
|
page read and write
|
|
|
|
198D7E48000
|
unkown
|
page read and write
|
|
|
|
198D7E7D000
|
unkown
|
page read and write
|
|
|
|
1362CA60000
|
unkown
|
page readonly
|
|
|
|
23A20AAE000
|
unkown
|
page read and write
|
|
|
|
28824E00000
|
unkown
|
page readonly
|
|
|
|
198D7E63000
|
unkown
|
page read and write
|
|
|
|
198D8602000
|
unkown
|
page read and write
|
|
|
|
7FF5DAE04000
|
unkown
|
page readonly
|
|
|
|
7FF576A6D000
|
unkown
|
page readonly
|
|
|
|
16A8F200000
|
unkown
|
page readonly
|
|
|
|
23A20A7B000
|
unkown
|
page read and write
|
|
|
|
7FF54387E000
|
unkown
|
page readonly
|
|
|
|
7FF52FEBC000
|
unkown
|
page readonly
|
|
|
|
23A20950000
|
unkown
|
page write copy
|
|
|
|
32A0000
|
heap private
|
page read and write
|
|
|
|
7FF51091A000
|
unkown
|
page readonly
|
|
|
|
7FF57B6D7000
|
unkown
|
page readonly
|
|
|
|
7FF5DB111000
|
unkown
|
page readonly
|
|
|
|
1F52DCFD000
|
heap default
|
page read and write
|
|
|
|
7FF543D41000
|
unkown
|
page readonly
|
|
|
|
C17EE7C000
|
unkown
|
page read and write
|
|
|
|
198D7E5A000
|
unkown
|
page read and write
|
|
|
|
7FF5AAB28000
|
unkown
|
page readonly
|
|
|
|
23A20AAF000
|
unkown
|
page read and write
|
|
|
|
2567000
|
unkown
|
page readonly
|
|
|
|
7FF52FBE7000
|
unkown
|
page readonly
|
|
|
|
1E468600000
|
unkown
|
page readonly
|
|
|
|
25B0FA00000
|
unkown
|
page read and write
|
|
|
|
1E462E13000
|
unkown
|
page read and write
|
|
|
|
23A23410000
|
unkown
|
page read and write
|
|
|
|
7FF5DEE0F000
|
unkown
|
page readonly
|
|
|
|
A386679000
|
unkown
|
page read and write
|
|
|
|
28824508000
|
unkown
|
page read and write
|
|
|
|
7FF57B538000
|
unkown
|
page readonly
|
|
|
|
1D171065000
|
unkown
|
page read and write
|
|
|
|
1D171D40000
|
unkown
|
page readonly
|
|
|
|
6384000
|
heap private
|
page read and write
|
|
|
|
1E462E29000
|
unkown
|
page read and write
|
|
|
|
23A22AEE000
|
unkown
|
page read and write
|
|
|
|
87954FE000
|
unkown
|
page read and write
|
|
|
|
7FF57B4B5000
|
unkown
|
page readonly
|
|
|
|
1E468422000
|
unkown
|
page read and write
|
|
|
|
7FF543678000
|
unkown
|
page readonly
|
|
|
|
7FF57DE3F000
|
unkown
|
page readonly
|
|
|
|
7FF57DFB0000
|
unkown
|
page readonly
|
|
|
|
1870EA6D000
|
unkown
|
page read and write
|
|
|
|
25B0FA29000
|
unkown
|
page read and write
|
|
|
|
16A8FCB0000
|
unkown
|
page read and write
|
|
|
|
28824A60000
|
unkown
|
page readonly
|
|
|
|
23A22E02000
|
unkown
|
page read and write
|
|
|
|
7FF57B766000
|
unkown
|
page readonly
|
|
|
|
1F8A4EB0000
|
heap private
|
page read and write
|
|
|
|
7FF54DF6E000
|
unkown
|
page readonly
|
|
|
|
14F41268000
|
unkown
|
page read and write
|
|
|
|
7FF57B4A7000
|
unkown
|
page readonly
|
|
|
|
16A8F590000
|
unkown
|
page readonly
|
|
|
|
7FF543889000
|
unkown
|
page readonly
|
|
|
|
7FF5DEC71000
|
unkown
|
page readonly
|
|
|
|
7FF57B706000
|
unkown
|
page readonly
|
|
|
|
16A8F360000
|
unkown
|
page read and write
|
|
|
|
7FF5DB1A9000
|
unkown
|
page readonly
|
|
|
|
1F8A5013000
|
unkown
|
page read and write
|
|
|
|
1D027FE000
|
unkown
|
page read and write
|
|
|
|
23A22A48000
|
unkown
|
page read and write
|
|
|
|
23A20AEA000
|
unkown
|
page read and write
|
|
|
|
32B0000
|
unkown
|
page readonly
|
|
|
|
7FF57B73F000
|
unkown
|
page readonly
|
|
|
|
7FF54DC4C000
|
unkown
|
page readonly
|
|
|
|
7FF5437F6000
|
unkown
|
page readonly
|
|
|
|
23A23310000
|
unkown
|
page read and write
|
|
|
|
7FF5DEFF1000
|
unkown
|
page readonly
|
|
|
|
37C8EFE000
|
unkown
|
page read and write
|
|
|
|
9DCEE7C000
|
unkown
|
page read and write
|
|
|
|
1362D140000
|
unkown
|
page readonly
|
|
|
|
1E4683B0000
|
unkown
|
page read and write
|
|
|
|
23A20AAB000
|
unkown
|
page read and write
|
|
|
|
7FF594383000
|
unkown
|
page readonly
|
|
|
|
7FF543792000
|
unkown
|
page readonly
|
|
|
|
23A20A6E000
|
unkown
|
page read and write
|
|
|
|
23A20AAC000
|
unkown
|
page read and write
|
|
|
|
7FF543D0F000
|
unkown
|
page readonly
|
|
|
|
4F6A1FA000
|
unkown
|
page read and write
|
|
|
|
20C31C47000
|
unkown
|
page read and write
|
|
|
|
301E000
|
unkown
|
page read and write
|
|
|
|
7FF57DFB2000
|
unkown
|
page readonly
|
|
|
|
7FF504929000
|
unkown
|
page readonly
|
|
|
|
7FF57B7F9000
|
unkown
|
page readonly
|
|
|
|
37C8CFE000
|
unkown
|
page read and write
|
|
|
|
7FF504956000
|
unkown
|
page readonly
|
|
|
|
7FF54375C000
|
unkown
|
page readonly
|
|
|
|
7FF5047C8000
|
unkown
|
page readonly
|
|
|
|
7FF510997000
|
unkown
|
page readonly
|
|
|
|
1E468290000
|
unkown
|
page read and write
|
|
|
|
7FF5109F1000
|
unkown
|
page readonly
|
|
|
|
2F8E000
|
stack
|
page read and write
|
|
|
|
7FF510994000
|
unkown
|
page readonly
|
|
|
|
23A22A91000
|
unkown
|
page read and write
|
|
|
|
7FF57B607000
|
unkown
|
page readonly
|
|
|
|
23A20ACA000
|
unkown
|
page read and write
|
|
|
|
1870EA6D000
|
unkown
|
page read and write
|
|
|
|
2C4E000
|
unkown
|
page read and write
|
|
|
|
1E4684B5000
|
unkown
|
page read and write
|
|
|
|
7FF576351000
|
unkown
|
page readonly
|
|
|
|
7FF50475F000
|
unkown
|
page readonly
|
|
|
|
7FF543E57000
|
unkown
|
page readonly
|
|
|
|
2134CFB000
|
unkown
|
page read and write
|
|
|
|
8794C7C000
|
unkown
|
page read and write
|
|
|
|
7FF5437BE000
|
unkown
|
page readonly
|
|
|
|
23A22D02000
|
unkown
|
page read and write
|
|
|
|
23A22E82000
|
unkown
|
page read and write
|
|
|
|
30F0000
|
unkown
|
page readonly
|
|
|
|
7FF543C37000
|
unkown
|
page readonly
|
|
|
|
7FF5DB01C000
|
unkown
|
page readonly
|
|
|
|
14F4126B000
|
unkown
|
page read and write
|
|
|
|
1E463DA0000
|
unkown
|
page readonly
|
|
|
|
23A228B0000
|
heap private
|
page read and write
|
|
|
|
A3866F9000
|
unkown
|
page read and write
|
|
|
|
1870E950000
|
unkown
|
page write copy
|
|
|
|
198D7E3D000
|
unkown
|
page read and write
|
|
|
|
C17E97E000
|
unkown
|
page read and write
|
|
|
|
16A8F11E000
|
unkown
|
page read and write
|
|
|
|
7FF55BBF0000
|
unkown
|
page readonly
|
|
|
|
7FF55BB2A000
|
unkown
|
page readonly
|
|
|
|
16A8F0B0000
|
unkown
|
page read and write
|
|
|
|
7FF5047E3000
|
unkown
|
page readonly
|
|
|
|
7FF543EBE000
|
unkown
|
page readonly
|
|
|
|
7FF5CB710000
|
unkown
|
page readonly
|
|
|
|
1E462DC0000
|
unkown
|
page readonly
|
|
|
|
7FF5DB07C000
|
unkown
|
page readonly
|
|
|
|
7FF57DFC2000
|
unkown
|
page readonly
|
|
|
|
1E462DD0000
|
unkown
|
page read and write
|
|
|
|
19EBA05C000
|
unkown
|
page read and write
|
|
|
|
23A23A10000
|
unkown
|
page read and write
|
|
|
|
2134BFF000
|
unkown
|
page read and write
|
|
|
|
879547F000
|
unkown
|
page read and write
|
|
|
|
2882444E000
|
unkown
|
page read and write
|
|
|
|
7FF543824000
|
unkown
|
page readonly
|
|
|
|
23A209E0000
|
unkown
|
page read and write
|
|
|
|
7FF57E054000
|
unkown
|
page readonly
|
|
|
|
7FF543F24000
|
unkown
|
page readonly
|
|
|
|
23A20AAA000
|
unkown
|
page read and write
|
|
|
|
1F52F560000
|
unkown
|
page readonly
|
|
|
|
A38677F000
|
unkown
|
page read and write
|
|
|
|
7FF534A54000
|
unkown
|
page readonly
|
|
|
|
1362C513000
|
unkown
|
page read and write
|
|
|
|
1E463DB0000
|
unkown
|
page readonly
|
|
|
|
DFB39AB000
|
unkown
|
page read and write
|
|
|
|
1E468364000
|
unkown
|
page write copy
|
|
|
|
186A8000000
|
unkown
|
page read and write
|
|
|
|
1E463559000
|
unkown
|
page read and write
|
|
|
|
7FF5DB054000
|
unkown
|
page readonly
|
|
|
|
2134DF7000
|
unkown
|
page read and write
|
|
|
|
12B59E00000
|
unkown
|
page readonly
|
|
|
|
7FF5CB64C000
|
unkown
|
page readonly
|
|
|
|
C17E27E000
|
unkown
|
page read and write
|
|
|
|
97DD47F000
|
unkown
|
page read and write
|
|
|
|
7FF5AAD39000
|
unkown
|
page readonly
|
|
|
|
1E462EAF000
|
unkown
|
page read and write
|
|
|
|
7FF5DB10D000
|
unkown
|
page readonly
|
|
|
|
28824447000
|
unkown
|
page read and write
|
|
|
|
1870EA68000
|
unkown
|
page read and write
|
|
|
|
20C31A10000
|
heap private
|
page read and write
|
|
|
|
7FF59444C000
|
unkown
|
page readonly
|
|
|
|
1118A7C000
|
unkown
|
page read and write
|
|
|
|
23A24000000
|
unkown
|
page readonly
|
|
|
|
1E46826E000
|
unkown
|
page read and write
|
|
|
|
7FF534A36000
|
unkown
|
page readonly
|
|
|
|
23A208E0000
|
heap private
|
page read and write
|
|
|
|
23A22E02000
|
unkown
|
page read and write
|
|
|
|
7FF57DE8A000
|
unkown
|
page readonly
|
|
|
|
2EC0000
|
unkown
|
page readonly
|
|
|
|
16A8F0D9000
|
heap default
|
page read and write
|
|
|
|
7FF534A57000
|
unkown
|
page readonly
|
|
|
|
16A8FEE0000
|
unkown
|
page read and write
|
|
|
|
23A23610000
|
unkown
|
page read and write
|
|
|
|
16A8F1F0000
|
unkown
|
page readonly
|
|
|
|
111887B000
|
unkown
|
page read and write
|
|
|
|
288243A0000
|
unkown
|
page read and write
|
|
|
|
7FF54DFC5000
|
unkown
|
page readonly
|
|
|
|
1E4683C0000
|
unkown
|
page read and write
|
|
|
|
7FF510908000
|
unkown
|
page readonly
|
|
|
|
1870EA6D000
|
unkown
|
page read and write
|
|
|
|
25B113A0000
|
unkown
|
page read and write
|
|
|
|
7FF55BB11000
|
unkown
|
page readonly
|
|
|
|
7FF576A18000
|
unkown
|
page readonly
|
|
|
|
1E468110000
|
unkown
|
page readonly
|
|
|
|
7FF5DB0B6000
|
unkown
|
page readonly
|
|
|
|
23A22A80000
|
unkown
|
page read and write
|
|
|
|
9DCEF7F000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC7F000
|
unkown
|
page readonly
|
|
|
|
7FF5DB0CA000
|
unkown
|
page readonly
|
|
|
|
7FF543EED000
|
unkown
|
page readonly
|
|
|
|
C17E5FB000
|
unkown
|
page read and write
|
|
|
|
7FF5CB6BF000
|
unkown
|
page readonly
|
|
|
|
7FF5DEF96000
|
unkown
|
page readonly
|
|
|
|
7FF5DB126000
|
unkown
|
page readonly
|
|
|
|
7FF5DEE28000
|
unkown
|
page readonly
|
|
|
|
23A20A8C000
|
unkown
|
page read and write
|
|
|
|
C17EBFB000
|
unkown
|
page read and write
|
|
|
|
23A20AAC000
|
unkown
|
page read and write
|
|
|
|
23A20A7B000
|
unkown
|
page read and write
|
|
|
|
7FF5DF07E000
|
unkown
|
page readonly
|
|
|
|
7FF5AACB6000
|
unkown
|
page readonly
|
|
|
|
1E468484000
|
unkown
|
page read and write
|
|
|
|
2954000
|
unkown
|
page readonly
|
|
|
|
7FF55B915000
|
unkown
|
page readonly
|
|
|
|
7FF543DF5000
|
unkown
|
page readonly
|
|
|
|
1362C442000
|
unkown
|
page read and write
|
|
|
|
7FF576356000
|
unkown
|
page readonly
|
|
|
|
1870EB13000
|
unkown
|
page read and write
|
|
|
|
23A23A10000
|
unkown
|
page read and write
|
|
|
|
7FF5DECBE000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFED000
|
unkown
|
page readonly
|
|
|
|
7FF5DEDEE000
|
unkown
|
page readonly
|
|
|
|
198D7E62000
|
unkown
|
page read and write
|
|
|
|
12B59D02000
|
unkown
|
page read and write
|
|
|
|
16A8F330000
|
unkown
|
page read and write
|
|
|
|
25B0FAEA000
|
unkown
|
page read and write
|
|
|
|
23A22AA8000
|
unkown
|
page read and write
|
|
|
|
19EBA802000
|
unkown
|
page read and write
|
|
|
|
12B59C29000
|
unkown
|
page read and write
|
|
|
|
23A22A99000
|
unkown
|
page read and write
|
|
|
|
23A20A7B000
|
unkown
|
page read and write
|
|
|
|
1D1715A0000
|
unkown
|
page readonly
|
|
|
|
28824451000
|
unkown
|
page read and write
|
|
|
|
7FF57B708000
|
unkown
|
page readonly
|
|
|
|
28824448000
|
unkown
|
page read and write
|
|
|
|
20C31B50000
|
unkown
|
page readonly
|
|
|
|
7FF5DEF8D000
|
unkown
|
page readonly
|
|
|
|
16A8F380000
|
unkown
|
page read and write
|
|
|
|
23A20B55000
|
unkown
|
page read and write
|
|
|
|
7FF576A95000
|
unkown
|
page readonly
|
|
|
|
25B0FA13000
|
unkown
|
page read and write
|
|
|
|
23A23010000
|
unkown
|
page read and write
|
|
|
|
301D000
|
unkown
|
page read and write
|
|
|
|
3015000
|
unkown
|
page read and write
|
|
|
|
16A8F1BF000
|
unkown
|
page read and write
|
|
|
|
1E462DE0000
|
unkown
|
page read and write
|
|
|
|
186A804A000
|
unkown
|
page read and write
|
|
|
|
8CF4B7E000
|
unkown
|
page read and write
|
|
|
|
7FF5DEFBE000
|
unkown
|
page readonly
|
|
|
|
7FF54DEE4000
|
unkown
|
page readonly
|
|
|
|
23A22C00000
|
unkown
|
page read and write
|
|
|
|
7FF5CB707000
|
unkown
|
page readonly
|
|
|
|
14F41213000
|
unkown
|
page read and write
|
|
|
|
7FF543B1E000
|
unkown
|
page readonly
|
|
|
|
7FF53483F000
|
unkown
|
page readonly
|
|
|
|
7FF5DAE2C000
|
unkown
|
page readonly
|
|
|
|
87955FF000
|
unkown
|
page read and write
|
|
|
|
1E463D80000
|
unkown
|
page readonly
|
|
|
|
16A8F11E000
|
unkown
|
page read and write
|
|
|
|
1D171802000
|
unkown
|
page read and write
|
|
|
|
14F40FF0000
|
heap private
|
page read and write
|
|
|
|
7FF57B6DC000
|
unkown
|
page readonly
|
|
|
|
7FF52FF39000
|
unkown
|
page readonly
|
|
|
|
2134A7E000
|
unkown
|
page read and write
|
|
|
|
7FF543697000
|
unkown
|
page readonly
|
|
|
|
7FF57B6A4000
|
unkown
|
page readonly
|
|
|
|
7FF57B77C000
|
unkown
|
page readonly
|
|
|
|
1870EA6F000
|
unkown
|
page read and write
|
|
|
|
12B59B90000
|
heap default
|
page read and write
|
|
|
|
7FF510985000
|
unkown
|
page readonly
|
|
|
|
1F52F9D0000
|
heap private
|
page read and write
|
|
|
|
7FF57B7F1000
|
unkown
|
page readonly
|
|
|
|
97DD77A000
|
unkown
|
page read and write
|
|
|
|
7FF543820000
|
unkown
|
page readonly
|
|
|
|
1118EFB000
|
unkown
|
page read and write
|
|
|
|
1870EA6D000
|
unkown
|
page read and write
|
|
|
|
16A8F2D0000
|
unkown
|
page readonly
|
|
|
|
198D7E42000
|
unkown
|
page read and write
|
|
|
|
25B0F880000
|
heap default
|
page read and write
|
|
|
|
14F41269000
|
unkown
|
page read and write
|
|
|
|
7FF5CB627000
|
unkown
|
page readonly
|
|
|
|
16A8FED0000
|
unkown
|
page read and write
|
|
|
|
7FF54DCBC000
|
unkown
|
page readonly
|
|
|
|
23A22A75000
|
unkown
|
page read and write
|
|
|
|
286F000
|
unkown
|
page readonly
|
|
|
|
97DD67E000
|
unkown
|
page read and write
|
|
|
|
301A000
|
unkown
|
page read and write
|
|
|
|
1362C2E0000
|
heap private
|
page read and write
|
|
|
|
7FF5AAAFE000
|
unkown
|
page readonly
|
|
|
|
7FF57B794000
|
unkown
|
page readonly
|
|
|
|
7FF5DEFD9000
|
unkown
|
page readonly
|
|
|
|
7FF5944DD000
|
unkown
|
page readonly
|
|
|
|
1D170F30000
|
unkown
|
page readonly
|
|
|
|
683B1FC000
|
unkown
|
page read and write
|
|
|
|
630F000
|
stack
|
page read and write
|
|
|
|
23A20940000
|
heap default
|
page read and write
|
|
|
|
146D07F000
|
unkown
|
page read and write
|
|
|
|
7FF510906000
|
unkown
|
page readonly
|
|
|
|
14F41268000
|
unkown
|
page read and write
|
|
|
|
7FF534684000
|
unkown
|
page readonly
|
|
|
|
1E4684A0000
|
unkown
|
page read and write
|
|
|
|
7FF5044CA000
|
unkown
|
page readonly
|
|
|
|
7FF51093F000
|
unkown
|
page readonly
|
|
|
|
7FF5AAABF000
|
unkown
|
page readonly
|
|
|
|
23A20A7D000
|
unkown
|
page read and write
|
|
|
|
20C32402000
|
unkown
|
page read and write
|
|
|
|
1E462E78000
|
unkown
|
page read and write
|
|
|
|
7FF576B09000
|
unkown
|
page readonly
|
|
|
|
28F5000
|
unkown
|
page readonly
|
|
|
|
7FF5048E2000
|
unkown
|
page readonly
|
|
|
|
198D8000000
|
unkown
|
page readonly
|
|
|
|
7FF543EF1000
|
unkown
|
page readonly
|
|
|
|
23A22910000
|
unkown
|
page readonly
|
|
|
|
7FF5AACA6000
|
unkown
|
page readonly
|
|
|
|
1870EA29000
|
unkown
|
page read and write
|
|
|
|
DFB3CFE000
|
unkown
|
page read and write
|
|
|
|
23A22900000
|
unkown
|
page readonly
|
|
|
|
23A22AF4000
|
unkown
|
page read and write
|
|
|
|
7FF57E0B9000
|
unkown
|
page readonly
|
|
|
|
C17E9FB000
|
unkown
|
page read and write
|
|
|
|
1362C413000
|
unkown
|
page read and write
|
|
|
|
7FF5108F0000
|
unkown
|
page readonly
|
|
|
|
7FF534673000
|
unkown
|
page readonly
|
|
|
|
1E462F02000
|
unkown
|
page read and write
|
|
|
|
7FF5DEC5F000
|
unkown
|
page readonly
|
|
|
|
1F52DCB0000
|
unkown
|
page readonly
|
|
|
|
25B0F9B0000
|
unkown
|
page readonly
|
|
|
|
2946000
|
unkown
|
page readonly
|
|
|
|
7FF52FE42000
|
unkown
|
page readonly
|
|
|
|
8CF4AFE000
|
unkown
|
page read and write
|
|
|
|
7FF543F89000
|
unkown
|
page readonly
|
|
|
|
289B000
|
unkown
|
page readonly
|
|
|
|
16A8F0D0000
|
heap default
|
page read and write
|
|
|
|
1E463BA0000
|
unkown
|
page read and write
|
|
|
|
7FF5941E3000
|
unkown
|
page readonly
|
|
|
|
7FF543881000
|
unkown
|
page readonly
|
|
|
|
1870E870000
|
heap default
|
page read and write
|
|
|
|
7FF504871000
|
unkown
|
page readonly
|
|
|
|
16A8F1D0000
|
unkown
|
page read and write
|
|
|
|
23A20AAC000
|
unkown
|
page read and write
|
|
|
|
1870EB00000
|
unkown
|
page read and write
|
|
|
|
20C31D00000
|
unkown
|
page read and write
|
|
|
|
7FF5DEF78000
|
unkown
|
page readonly
|
|
|
|
7FF50484C000
|
unkown
|
page readonly
|
|
|
|
28824500000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC48000
|
unkown
|
page readonly
|
|
|
|
23A22ABA000
|
unkown
|
page read and write
|
|
|
|
1E462EFC000
|
unkown
|
page read and write
|
|
|
|
25B0FA7B000
|
unkown
|
page read and write
|
|
|
|
2134FFF000
|
unkown
|
page read and write
|
|
|
|
23A20AAB000
|
unkown
|
page read and write
|
|
|
|
23A20A29000
|
unkown
|
page read and write
|
|
|
|
7FF57B691000
|
unkown
|
page readonly
|
|
|
|
4F69DEB000
|
unkown
|
page read and write
|
|
|
|
7FF51096C000
|
unkown
|
page readonly
|
|
|
|
23A23210000
|
unkown
|
page read and write
|
|
|
|
7FF5DEF80000
|
unkown
|
page readonly
|
|
|
|
3021000
|
unkown
|
page read and write
|
|
|
|
7FF543741000
|
unkown
|
page readonly
|
|
|
|
23A20AEC000
|
unkown
|
page read and write
|
|
|
|
1E463500000
|
unkown
|
page read and write
|
|
|
|
1D028F9000
|
unkown
|
page read and write
|
|
|
|
37C8FFF000
|
unkown
|
page read and write
|
|
|
|
7FF5044E0000
|
unkown
|
page readonly
|
|
|
|
23A20AF5000
|
unkown
|
page read and write
|
|
|
|
7FF5CB717000
|
unkown
|
page readonly
|
|
|
|
4F6A2FF000
|
unkown
|
page read and write
|
|
|
|
12B59C13000
|
unkown
|
page read and write
|
|
|
|
28824449000
|
unkown
|
page read and write
|
|
|
|
186A8A00000
|
unkown
|
page readonly
|
|
|
|
1870EA6F000
|
unkown
|
page read and write
|
|
|
|
1E462E57000
|
unkown
|
page read and write
|
|
|
|
23A20AAE000
|
unkown
|
page read and write
|
|
|
|
1E468370000
|
unkown
|
page read and write
|
|
|
|
16A8F375000
|
heap private
|
page read and write
|
|
|
|
23A23410000
|
unkown
|
page read and write
|
|
|
|
186A8200000
|
unkown
|
page readonly
|
|
|
|
7FF5DEF07000
|
unkown
|
page readonly
|
|
|
|
7FF54DFBC000
|
unkown
|
page readonly
|
|
|
|
B21E77D000
|
unkown
|
page read and write
|
|
|
|
2960000
|
unkown
|
page readonly
|
|
|
|
25B11A60000
|
unkown
|
page readonly
|
|
|
|
12B59C52000
|
unkown
|
page read and write
|
|
|
|
7FF57B785000
|
unkown
|
page readonly
|
|
|
|
23A22C73000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC30000
|
unkown
|
page readonly
|
|
|
|
198D7E61000
|
unkown
|
page read and write
|
|
|
|
1870EA68000
|
unkown
|
page read and write
|
|
|
|
1D026FE000
|
unkown
|
page read and write
|
|
|
|
20C31B70000
|
unkown
|
page read and write
|
|
|
|
7FF5CB4CA000
|
unkown
|
page readonly
|
|
|
|
23A22A3E000
|
unkown
|
page read and write
|
|
|
|
23A22C3F000
|
unkown
|
page read and write
|
|
|
|
23A20AAC000
|
unkown
|
page read and write
|
|
|
|
7FF5CB435000
|
unkown
|
page readonly
|
|
|
|
1F8A5102000
|
unkown
|
page read and write
|
|
|
|
7FF57B76C000
|
unkown
|
page readonly
|
|
|
|
1E462CF0000
|
unkown
|
page readonly
|
|
|
|
1E463D90000
|
unkown
|
page readonly
|
|
|
|
23A20AAB000
|
unkown
|
page read and write
|
|
|
|
7FF5DEF5A000
|
unkown
|
page readonly
|
|
|
|
23A20B2E000
|
unkown
|
page read and write
|
|
|
|
20C31E00000
|
unkown
|
page readonly
|
|
|
|
7FF534AB1000
|
unkown
|
page readonly
|
|
|
|
7FF54DFDD000
|
unkown
|
page readonly
|
|
|
|
7FF543889000
|
unkown
|
page readonly
|
|
|
|
7FF543E80000
|
unkown
|
page readonly
|
|
|
|
28824429000
|
unkown
|
page read and write
|
|
|
|
7FF52FED0000
|
unkown
|
page readonly
|
|
|
|
1E4683C0000
|
unkown
|
page readonly
|
|
|
|
20C31A80000
|
unkown
|
page readonly
|
|
|
|
C17E77A000
|
unkown
|
page read and write
|
|
|
|
23A20AA6000
|
unkown
|
page read and write
|
|
|
|
7FF5AA82A000
|
unkown
|
page readonly
|
|
|
|
23A20B44000
|
unkown
|
page read and write
|
|
|
|
7FF5768A3000
|
unkown
|
page readonly
|
|
|
|
7FF5DEC62000
|
unkown
|
page readonly
|
|
|
|
7FF5AAC6E000
|
unkown
|
page readonly
|
|
|
|
1D171029000
|
unkown
|
page read and write
|
|
|
|
7FF5941E7000
|
unkown
|
page readonly
|
|
|
|
5B6877F000
|
unkown
|
page read and write
|
|
|
|
7FF543C3E000
|
unkown
|
page readonly
|
|
|
|
7FF5DAEFA000
|
unkown
|
page readonly
|
|
|
|
7FF5CB6EC000
|
unkown
|
page readonly
|
|
|
|
7FF51016B000
|
unkown
|
page readonly
|
|
|
|
634E000
|
unkown
|
page read and write
|
|
|
|
23A22910000
|
unkown
|
page read and write
|
|
|
|
1870EA68000
|
unkown
|
page read and write
|
|
|
|
7FF543C0C000
|
unkown
|
page readonly
|
|
|
|
7FF54DF9D000
|
unkown
|
page readonly
|
|
|
|
3024000
|
unkown
|
page read and write
|
|
|
|
1870EA02000
|
unkown
|
page read and write
|
|
|
|
7FF57B787000
|
unkown
|
page readonly
|
|
|
|
16A8F320000
|
unkown
|
page read and write
|
|
|
|
DFB3C7E000
|
unkown
|
page read and write
|
|
|
|
7FF51095D000
|
unkown
|
page readonly
|
|
|
|
7FF52FE6E000
|
unkown
|
page readonly
|
|
|
|
28824450000
|
unkown
|
page read and write
|
|
|
|
1E462C00000
|
heap default
|
page read and write
|
|
|
|
1D171200000
|
unkown
|
page readonly
|
|
|
|
7FF53413E000
|
unkown
|
page readonly
|
|
|
|
683B0FE000
|
unkown
|
page read and write
|
|
|
|
23A20AE2000
|
unkown
|
page read and write
|
|
|
|
7FF5AA830000
|
unkown
|
page readonly
|
|
|
|
683AE7B000
|
unkown
|
page read and write
|
|
|
|
7FF543E78000
|
unkown
|
page readonly
|
|
|
|
2882444D000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC32000
|
unkown
|
page readonly
|
|
|
|
14F4126F000
|
unkown
|
page read and write
|
|
|
|
7FF576975000
|
unkown
|
page readonly
|
|
|
|
87952FA000
|
unkown
|
page read and write
|
|
|
|
7FF5109F9000
|
unkown
|
page readonly
|
|
|
|
1E463C80000
|
unkown
|
page read and write
|
|
|
|
C17E57A000
|
unkown
|
page read and write
|
|
|
|
14F41313000
|
unkown
|
page read and write
|
|
|
|
288242B0000
|
unkown
|
page readonly
|
|
|
|
16A8F1BF000
|
heap default
|
page read and write
|
|
|
|
7FF5CB779000
|
unkown
|
page readonly
|
|
|
|
7FF576B01000
|
unkown
|
page readonly
|
|
|
|
2867000
|
unkown
|
page readonly
|
|
|
|
879557F000
|
unkown
|
page read and write
|
|
|
|
16A8F151000
|
unkown
|
page read and write
|
|
|
|
7FF543806000
|
unkown
|
page readonly
|
|
|
|
7FF543D48000
|
unkown
|
page readonly
|
|
|
|
7FF543C50000
|
unkown
|
page readonly
|
|
|
|
1F52DDC0000
|
unkown
|
page readonly
|
|
|
|
1D171400000
|
unkown
|
page readonly
|
|
|
|
23A23010000
|
unkown
|
page read and write
|
|
|
|
28824488000
|
unkown
|
page read and write
|
|
|
|
7FF5435DA000
|
unkown
|
page readonly
|
|
|
|
28A4000
|
unkown
|
page readonly
|
|
|
|
1870EA68000
|
unkown
|
page read and write
|
|
|
|
23A20B75000
|
unkown
|
page read and write
|
|
|
|
16A8EFE0000
|
unkown
|
page readonly
|
|
|
|
7FF5DAE13000
|
unkown
|
page readonly
|
|
|
|
7FF57DEA8000
|
unkown
|
page readonly
|
|
|
|
1E462E7A000
|
unkown
|
page read and write
|
|
|
|
1870E810000
|
heap private
|
page read and write
|
|
|
|
7FF57DFF5000
|
unkown
|
page readonly
|
|
There are 1600 hidden memdumps, click here to show them.