Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
catalog-1521295750.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$catalog-1521295750.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\4BDFB115-4685-4F97-99A9-00A0FF14FF48
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5EDD1F14.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9A38BE96.png
|
PNG image data, 485 x 185, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C78DE0A9.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D77719F.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\suspendedpage[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\36720000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 18:52:18 2019, mtime=Tue May 4 11:34:31 2021, atime=Tue May 4 11:34:31 2021, length=12288, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\catalog-1521295750.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:26:59
2020, mtime=Tue May 4 11:34:31 2021, atime=Tue May 4 11:34:31 2021, length=107587, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\37720000
|
data
|
dropped
|
|
|
|
C:\Users\user\jordji.nbvt11
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\suspendedpage[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3E3BA770.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\7318CC95.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\896006B.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\B452C192.png
|
PNG image data, 485 x 185, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabE199.tmp
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\D9DE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarE19A.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\9ADE0000
|
data
|
dropped
|
|
There are 17 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\jordji.nbvt1,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\jordji.nbvt11,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\jordji.nbvt1,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\jordji.nbvt11,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
http://fwdssp.com/?dn=referer_detect&pid=5POL4F2O4
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 98 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
dentistelmhurstny.com
|
192.185.5.2
|
|
|
|
legalopspr.com
|
192.185.20.98
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.5.2
|
dentistelmhurstny.com
|
United States
|
|
|
|
192.185.20.98
|
legalopspr.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
g:;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
h:;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
26BF0
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27258
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2743D
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27566
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
276AE
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
277A8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
$p;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
3A29B
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
3A8E4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
f`4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED4BD
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED817
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED8D2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED97E
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDA68
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDB13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
k4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
103331
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
104403
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 177 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF550E04000
|
unkown
|
page readonly
|
|
|
|
7FF54A1AA000
|
unkown
|
page readonly
|
|
|
|
13B2F58C000
|
unkown
|
page read and write
|
|
|
|
7FF599EED000
|
unkown
|
page readonly
|
|
|
|
13B2F538000
|
unkown
|
page read and write
|
|
|
|
7FF599F54000
|
unkown
|
page readonly
|
|
|
|
2AC5000
|
unkown
|
page read and write
|
|
|
|
23388602000
|
unkown
|
page read and write
|
|
|
|
7FF55D97E000
|
unkown
|
page readonly
|
|
|
|
7FF5D9687000
|
unkown
|
page readonly
|
|
|
|
7FF5510A2000
|
unkown
|
page readonly
|
|
|
|
2AA0000
|
heap default
|
page read and write
|
|
|
|
7FF52165C000
|
unkown
|
page readonly
|
|
|
|
7FF550F47000
|
unkown
|
page readonly
|
|
|
|
28C0000
|
heap default
|
page read and write
|
|
|
|
545BB3B000
|
unkown
|
page read and write
|
|
|
|
21FF7EF000
|
unkown
|
page read and write
|
|
|
|
7FF5F4655000
|
unkown
|
page readonly
|
|
|
|
29CC5629000
|
unkown
|
page read and write
|
|
|
|
7FF54A0F6000
|
unkown
|
page readonly
|
|
|
|
7FF510F05000
|
unkown
|
page readonly
|
|
|
|
13B2F585000
|
unkown
|
page read and write
|
|
|
|
224B000
|
unkown
|
page readonly
|
|
|
|
7FF550C7A000
|
unkown
|
page readonly
|
|
|
|
29CC70C0000
|
unkown
|
page read and write
|
|
|
|
22E9D1F5000
|
unkown
|
page read and write
|
|
|
|
4641BFA000
|
unkown
|
page read and write
|
|
|
|
22E9D200000
|
unkown
|
page readonly
|
|
|
|
22E9D187000
|
unkown
|
page read and write
|
|
|
|
2BC83070000
|
unkown
|
page read and write
|
|
|
|
16B4B2D7000
|
heap default
|
page read and write
|
|
|
|
1A6EDC9A000
|
unkown
|
page read and write
|
|
|
|
7FF550FFE000
|
unkown
|
page readonly
|
|
|
|
229E1813000
|
unkown
|
page read and write
|
|
|
|
147047C000
|
unkown
|
page read and write
|
|
|
|
29E4000
|
unkown
|
page read and write
|
|
|
|
7FF599EF9000
|
unkown
|
page readonly
|
|
|
|
13B2F564000
|
unkown
|
page read and write
|
|
|
|
1A6F3040000
|
unkown
|
page read and write
|
|
|
|
21BCB459000
|
unkown
|
page read and write
|
|
|
|
7FF521A7D000
|
unkown
|
page readonly
|
|
|
|
23389FA0000
|
unkown
|
page read and write
|
|
|
|
5CC0000
|
unkown
|
page read and write
|
|
|
|
285BF290000
|
heap private
|
page read and write
|
|
|
|
250FDA6C000
|
unkown
|
page read and write
|
|
|
|
7FF5D8A93000
|
unkown
|
page readonly
|
|
|
|
22BB000
|
unkown
|
page readonly
|
|
|
|
141A4A6F000
|
unkown
|
page read and write
|
|
|
|
7FF54A18D000
|
unkown
|
page readonly
|
|
|
|
5D00000
|
heap private
|
page read and write
|
|
|
|
7FF5D947D000
|
unkown
|
page readonly
|
|
|
|
7FF599835000
|
unkown
|
page readonly
|
|
|
|
22E9E010000
|
unkown
|
page read and write
|
|
|
|
21BCB3B6000
|
unkown
|
page read and write
|
|
|
|
22E9D187000
|
unkown
|
page read and write
|
|
|
|
29D8000
|
unkown
|
page read and write
|
|
|
|
7FF599F67000
|
unkown
|
page readonly
|
|
|
|
29DD000
|
unkown
|
page read and write
|
|
|
|
16B4B300000
|
unkown
|
page read and write
|
|
|
|
13B2F538000
|
unkown
|
page read and write
|
|
|
|
29F9000
|
unkown
|
page read and write
|
|
|
|
21BCB360000
|
unkown
|
page read and write
|
|
|
|
1A6F3380000
|
unkown
|
page readonly
|
|
|
|
7FF5C5315000
|
unkown
|
page readonly
|
|
|
|
F62393E000
|
unkown
|
page read and write
|
|
|
|
21BCB3BD000
|
unkown
|
page read and write
|
|
|
|
1A6F30C0000
|
unkown
|
page read and write
|
|
|
|
1A6EDC88000
|
unkown
|
page read and write
|
|
|
|
21BCB43D000
|
unkown
|
page read and write
|
|
|
|
7FF549FE0000
|
unkown
|
page readonly
|
|
|
|
13B2F578000
|
unkown
|
page read and write
|
|
|
|
2A6E000
|
unkown
|
page read and write
|
|
|
|
7FF5D279A000
|
unkown
|
page readonly
|
|
|
|
1A6F348B000
|
unkown
|
page read and write
|
|
|
|
23388600000
|
unkown
|
page read and write
|
|
|
|
7FF55DB4F000
|
unkown
|
page readonly
|
|
|
|
7FF5B3126000
|
unkown
|
page readonly
|
|
|
|
7FF5C5392000
|
unkown
|
page readonly
|
|
|
|
1A6EDB90000
|
unkown
|
page readonly
|
|
|
|
25EB000
|
unkown
|
page read and write
|
|
|
|
13B2FA02000
|
unkown
|
page read and write
|
|
|
|
141A4A8D000
|
unkown
|
page read and write
|
|
|
|
2ACA000
|
unkown
|
page read and write
|
|
|
|
22E9B0C7000
|
unkown
|
page read and write
|
|
|
|
7FF521A87000
|
unkown
|
page readonly
|
|
|
|
7FF5D2F78000
|
unkown
|
page readonly
|
|
|
|
7FF5DFE5D000
|
unkown
|
page readonly
|
|
|
|
7FF5DFDAF000
|
unkown
|
page readonly
|
|
|
|
16B4B2E7000
|
unkown
|
page read and write
|
|
|
|
7FF5D8297000
|
unkown
|
page readonly
|
|
|
|
7FF521A8B000
|
unkown
|
page readonly
|
|
|
|
1A6EE518000
|
unkown
|
page read and write
|
|
|
|
7FF5D2F48000
|
unkown
|
page readonly
|
|
|
|
7FF511007000
|
unkown
|
page readonly
|
|
|
|
13B2F5D3000
|
unkown
|
page read and write
|
|
|
|
218017B000
|
unkown
|
page read and write
|
|
|
|
2AE9000
|
unkown
|
page read and write
|
|
|
|
7FF57206B000
|
unkown
|
page readonly
|
|
|
|
21BCBF0D000
|
unkown
|
page read and write
|
|
|
|
7FF54A11D000
|
unkown
|
page readonly
|
|
|
|
13B2ECDA000
|
unkown
|
page read and write
|
|
|
|
7FF549F97000
|
unkown
|
page readonly
|
|
|
|
7FF55D6BE000
|
unkown
|
page readonly
|
|
|
|
7FF5D9629000
|
unkown
|
page readonly
|
|
|
|
21BCB459000
|
unkown
|
page read and write
|
|
|
|
7FF5D2F71000
|
unkown
|
page readonly
|
|
|
|
545C3FB000
|
unkown
|
page read and write
|
|
|
|
21BCB43D000
|
unkown
|
page read and write
|
|
|
|
7FF599DB5000
|
unkown
|
page readonly
|
|
|
|
7FF5D9398000
|
unkown
|
page readonly
|
|
|
|
21BCBF00000
|
unkown
|
page read and write
|
|
|
|
F6238BB000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA7A000
|
unkown
|
page readonly
|
|
|
|
6090000
|
unkown
|
page read and write
|
|
|
|
250FDA3F000
|
unkown
|
page read and write
|
|
|
|
21BCB43D000
|
unkown
|
page read and write
|
|
|
|
13B2ED02000
|
unkown
|
page read and write
|
|
|
|
229E1670000
|
heap default
|
page read and write
|
|
|
|
13B2EC8B000
|
unkown
|
page read and write
|
|
|
|
21BCBF02000
|
unkown
|
page read and write
|
|
|
|
7FF5F47C6000
|
unkown
|
page readonly
|
|
|
|
29F2000
|
unkown
|
page read and write
|
|
|
|
7FF521A9A000
|
unkown
|
page readonly
|
|
|
|
823A7F000
|
unkown
|
page read and write
|
|
|
|
6AEF879000
|
unkown
|
page read and write
|
|
|
|
22E9D187000
|
unkown
|
page read and write
|
|
|
|
7FF5F47AA000
|
unkown
|
page readonly
|
|
|
|
7FF5D93AF000
|
unkown
|
page readonly
|
|
|
|
21BCBF09000
|
unkown
|
page read and write
|
|
|
|
7FF5B3123000
|
unkown
|
page readonly
|
|
|
|
7FF5D8A54000
|
unkown
|
page readonly
|
|
|
|
21BCB8F0000
|
unkown
|
page readonly
|
|
|
|
22E9E110000
|
unkown
|
page read and write
|
|
|
|
7FF521887000
|
unkown
|
page readonly
|
|
|
|
2306000
|
unkown
|
page readonly
|
|
|
|
21BCB2D0000
|
unkown
|
page read and write
|
|
|
|
21FFFFA000
|
unkown
|
page read and write
|
|
|
|
2BC83170000
|
unkown
|
page readonly
|
|
|
|
7FF5D95B0000
|
unkown
|
page readonly
|
|
|
|
7FF5DFBCB000
|
unkown
|
page readonly
|
|
|
|
141A4990000
|
unkown
|
page read and write
|
|
|
|
29CC5600000
|
unkown
|
page read and write
|
|
|
|
7FF5F4729000
|
unkown
|
page readonly
|
|
|
|
285BF3E0000
|
unkown
|
page readonly
|
|
|
|
21BCB350000
|
unkown
|
page read and write
|
|
|
|
7FF510F76000
|
unkown
|
page readonly
|
|
|
|
6AEF979000
|
unkown
|
page read and write
|
|
|
|
2313000
|
unkown
|
page readonly
|
|
|
|
24278C68000
|
unkown
|
page read and write
|
|
|
|
7FF5D89F7000
|
unkown
|
page readonly
|
|
|
|
7FF5D93C2000
|
unkown
|
page readonly
|
|
|
|
7FF571C3B000
|
unkown
|
page readonly
|
|
|
|
1A6F32C0000
|
unkown
|
page read and write
|
|
|
|
21BCB44F000
|
unkown
|
page read and write
|
|
|
|
7FF550EE8000
|
unkown
|
page readonly
|
|
|
|
29DE000
|
unkown
|
page read and write
|
|
|
|
7FF5D8A57000
|
unkown
|
page readonly
|
|
|
|
1A6EDBA0000
|
unkown
|
page read and write
|
|
|
|
7FF599A26000
|
unkown
|
page readonly
|
|
|
|
7FF5DFDCA000
|
unkown
|
page readonly
|
|
|
|
5D43000
|
heap private
|
page read and write
|
|
|
|
16B4B4A0000
|
unkown
|
page readonly
|
|
|
|
7FF510D7F000
|
unkown
|
page readonly
|
|
|
|
13B2F548000
|
unkown
|
page read and write
|
|
|
|
229E2200000
|
unkown
|
page readonly
|
|
|
|
7FF511017000
|
unkown
|
page readonly
|
|
|
|
1A6EDCF9000
|
unkown
|
page read and write
|
|
|
|
29CC5800000
|
unkown
|
page readonly
|
|
|
|
7FF550E1F000
|
unkown
|
page readonly
|
|
|
|
22A5000
|
unkown
|
page readonly
|
|
|
|
1A36F1F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D8EF5000
|
unkown
|
page readonly
|
|
|
|
7FF5D2941000
|
unkown
|
page readonly
|
|
|
|
7FF550FB3000
|
unkown
|
page readonly
|
|
|
|
7FF571FF9000
|
unkown
|
page readonly
|
|
|
|
7FF5D8A7A000
|
unkown
|
page readonly
|
|
|
|
13B2FA61000
|
unkown
|
page read and write
|
|
|
|
29CC58D0000
|
unkown
|
page write copy
|
|
|
|
7FF5D9518000
|
unkown
|
page readonly
|
|
|
|
285BF48A000
|
unkown
|
page read and write
|
|
|
|
285BF502000
|
unkown
|
page read and write
|
|
|
|
24278C59000
|
unkown
|
page read and write
|
|
|
|
229E184B000
|
unkown
|
page read and write
|
|
|
|
228B000
|
unkown
|
page readonly
|
|
|
|
7FF550FE6000
|
unkown
|
page readonly
|
|
|
|
13B2F51F000
|
unkown
|
page read and write
|
|
|
|
2427A6B0000
|
unkown
|
page readonly
|
|
|
|
7FF511057000
|
unkown
|
page readonly
|
|
|
|
233D000
|
unkown
|
page readonly
|
|
|
|
7FF599CDE000
|
unkown
|
page readonly
|
|
|
|
2AE9000
|
unkown
|
page read and write
|
|
|
|
22E9B000000
|
unkown
|
page read and write
|
|
|
|
1A6EE504000
|
unkown
|
page read and write
|
|
|
|
227A000
|
unkown
|
page readonly
|
|
|
|
7FF550F89000
|
unkown
|
page readonly
|
|
|
|
7FF5D9598000
|
unkown
|
page readonly
|
|
|
|
29CC56B3000
|
unkown
|
page read and write
|
|
|
|
7FF54A184000
|
unkown
|
page readonly
|
|
|
|
7FF551064000
|
unkown
|
page readonly
|
|
|
|
7FF5DFDED000
|
unkown
|
page readonly
|
|
|
|
1A6EDD02000
|
unkown
|
page read and write
|
|
|
|
13B2F593000
|
unkown
|
page read and write
|
|
|
|
545C0FB000
|
unkown
|
page read and write
|
|
|
|
22E9E110000
|
unkown
|
page read and write
|
|
|
|
7FF5F47D2000
|
unkown
|
page readonly
|
|
|
|
22E9D1D3000
|
unkown
|
page read and write
|
|
|
|
14708F7000
|
unkown
|
page read and write
|
|
|
|
7FF599B3B000
|
unkown
|
page readonly
|
|
|
|
7FF572093000
|
unkown
|
page readonly
|
|
|
|
8984C7A000
|
unkown
|
page read and write
|
|
|
|
223A000
|
unkown
|
page readonly
|
|
|
|
29CC56A3000
|
unkown
|
page read and write
|
|
|
|
7FF5D2F61000
|
unkown
|
page readonly
|
|
|
|
544387E000
|
unkown
|
page read and write
|
|
|
|
7FF549E41000
|
unkown
|
page readonly
|
|
|
|
13B2F55B000
|
unkown
|
page read and write
|
|
|
|
7FF5C5424000
|
unkown
|
page readonly
|
|
|
|
7FF55DB5D000
|
unkown
|
page readonly
|
|
|
|
7FF5D9511000
|
unkown
|
page readonly
|
|
|
|
7FF5C5417000
|
unkown
|
page readonly
|
|
|
|
7FF5219C1000
|
unkown
|
page readonly
|
|
|
|
7FF5D95FA000
|
unkown
|
page readonly
|
|
|
|
7FF5DFE93000
|
unkown
|
page readonly
|
|
|
|
285BF43C000
|
unkown
|
page read and write
|
|
|
|
7FF599EC6000
|
unkown
|
page readonly
|
|
|
|
24278C42000
|
unkown
|
page read and write
|
|
|
|
285BF466000
|
unkown
|
page read and write
|
|
|
|
21BCBF57000
|
unkown
|
page read and write
|
|
|
|
13B2F567000
|
unkown
|
page read and write
|
|
|
|
250FDA29000
|
unkown
|
page read and write
|
|
|
|
2BC81700000
|
unkown
|
page read and write
|
|
|
|
22E9D15F000
|
unkown
|
page read and write
|
|
|
|
23388656000
|
unkown
|
page read and write
|
|
|
|
8984AFE000
|
unkown
|
page read and write
|
|
|
|
13B2F57B000
|
unkown
|
page read and write
|
|
|
|
14709FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D87CF000
|
unkown
|
page readonly
|
|
|
|
7FF571FB3000
|
unkown
|
page readonly
|
|
|
|
7FF5D279C000
|
unkown
|
page readonly
|
|
|
|
2B80000
|
unkown
|
page readonly
|
|
|
|
7FF5510A7000
|
unkown
|
page readonly
|
|
|
|
21BCB43B000
|
unkown
|
page read and write
|
|
|
|
21BCB449000
|
unkown
|
page read and write
|
|
|
|
7FF5D937D000
|
unkown
|
page readonly
|
|
|
|
7FF5F4597000
|
unkown
|
page readonly
|
|
|
|
1A6F31F4000
|
unkown
|
page read and write
|
|
|
|
16B4B1F0000
|
unkown
|
page readonly
|
|
|
|
7FF510E46000
|
unkown
|
page readonly
|
|
|
|
141A4A50000
|
unkown
|
page read and write
|
|
|
|
7FF5F4716000
|
unkown
|
page readonly
|
|
|
|
13B2F569000
|
unkown
|
page read and write
|
|
|
|
1A6F344A000
|
unkown
|
page read and write
|
|
|
|
7FF55D808000
|
unkown
|
page readonly
|
|
|
|
7FF5D941B000
|
unkown
|
page readonly
|
|
|
|
7FF5F46D1000
|
unkown
|
page readonly
|
|
|
|
1A6F343D000
|
unkown
|
page read and write
|
|
|
|
7FF5D95E3000
|
unkown
|
page readonly
|
|
|
|
13B2EBE0000
|
unkown
|
page read and write
|
|
|
|
545C67A000
|
unkown
|
page read and write
|
|
|
|
7FF572064000
|
unkown
|
page readonly
|
|
|
|
F623CFA000
|
unkown
|
page read and write
|
|
|
|
229E183C000
|
unkown
|
page read and write
|
|
|
|
29DD000
|
unkown
|
page read and write
|
|
|
|
141A4A29000
|
unkown
|
page read and write
|
|
|
|
2A1F000
|
unkown
|
page read and write
|
|
|
|
7FF5218D0000
|
unkown
|
page readonly
|
|
|
|
21BCB41C000
|
unkown
|
page read and write
|
|
|
|
2272000
|
unkown
|
page readonly
|
|
|
|
565297A000
|
unkown
|
page read and write
|
|
|
|
13B2F53C000
|
unkown
|
page read and write
|
|
|
|
1A6EDCB7000
|
unkown
|
page read and write
|
|
|
|
7FF5D3137000
|
unkown
|
page readonly
|
|
|
|
7FF5C5270000
|
unkown
|
page readonly
|
|
|
|
22E9D149000
|
unkown
|
page read and write
|
|
|
|
7FF5C537E000
|
unkown
|
page readonly
|
|
|
|
7FF5DFDF9000
|
unkown
|
page readonly
|
|
|
|
285BF447000
|
unkown
|
page read and write
|
|
|
|
C969CFF000
|
unkown
|
page read and write
|
|
|
|
21BCB42D000
|
unkown
|
page read and write
|
|
|
|
16B4B410000
|
unkown
|
page readonly
|
|
|
|
1A6F3630000
|
unkown
|
page readonly
|
|
|
|
7FF5D8A67000
|
unkown
|
page readonly
|
|
|
|
2245000
|
unkown
|
page readonly
|
|
|
|
5CAF000
|
unkown
|
page read and write
|
|
|
|
7FF55D98B000
|
unkown
|
page readonly
|
|
|
|
13B2F57A000
|
unkown
|
page read and write
|
|
|
|
7FF55D816000
|
unkown
|
page readonly
|
|
|
|
7FF55DC04000
|
unkown
|
page readonly
|
|
|
|
22E9B0FA000
|
unkown
|
page read and write
|
|
|
|
7FF5D9259000
|
unkown
|
page readonly
|
|
|
|
285BF600000
|
unkown
|
page readonly
|
|
|
|
7FF5C513F000
|
unkown
|
page readonly
|
|
|
|
7FF5D3056000
|
unkown
|
page readonly
|
|
|
|
4641A7B000
|
unkown
|
page read and write
|
|
|
|
7FF550DEB000
|
unkown
|
page readonly
|
|
|
|
22E9D143000
|
unkown
|
page read and write
|
|
|
|
7FF5DFB7F000
|
unkown
|
page readonly
|
|
|
|
13B2F574000
|
unkown
|
page read and write
|
|
|
|
22E9D146000
|
unkown
|
page read and write
|
|
|
|
7FF5F46E3000
|
unkown
|
page readonly
|
|
|
|
2A9A000
|
heap private
|
page read and write
|
|
|
|
7FF599601000
|
unkown
|
page readonly
|
|
|
|
13B2F562000
|
unkown
|
page read and write
|
|
|
|
8239F9000
|
unkown
|
page read and write
|
|
|
|
22E9CF00000
|
heap private
|
page read and write
|
|
|
|
21BCB42B000
|
unkown
|
page read and write
|
|
|
|
7FF55D726000
|
unkown
|
page readonly
|
|
|
|
13B2F587000
|
unkown
|
page read and write
|
|
|
|
7FF5D96AA000
|
unkown
|
page readonly
|
|
|
|
545CA7C000
|
unkown
|
page read and write
|
|
|
|
13B2F5A4000
|
unkown
|
page read and write
|
|
|
|
2ACD000
|
unkown
|
page read and write
|
|
|
|
2BC81600000
|
unkown
|
page read and write
|
|
|
|
28D0000
|
unkown
|
page readonly
|
|
|
|
7FF5B30F7000
|
unkown
|
page readonly
|
|
|
|
7FF5D89AF000
|
unkown
|
page readonly
|
|
|
|
21BCB41D000
|
unkown
|
page read and write
|
|
|
|
13B2F542000
|
unkown
|
page read and write
|
|
|
|
7FF599EF7000
|
unkown
|
page readonly
|
|
|
|
60D0000
|
unkown
|
page read and write
|
|
|
|
13B2EC27000
|
unkown
|
page read and write
|
|
|
|
2BC81655000
|
unkown
|
page read and write
|
|
|
|
7FF55DB99000
|
unkown
|
page readonly
|
|
|
|
13B2F59B000
|
unkown
|
page read and write
|
|
|
|
21BCBAF0000
|
unkown
|
page readonly
|
|
|
|
7FF5DFE57000
|
unkown
|
page readonly
|
|
|
|
229E186C000
|
unkown
|
page read and write
|
|
|
|
7FF510F27000
|
unkown
|
page readonly
|
|
|
|
1FC6000
|
unkown
|
page readonly
|
|
|
|
7FF5D9434000
|
unkown
|
page readonly
|
|
|
|
22F4000
|
unkown
|
page readonly
|
|
|
|
141A5202000
|
unkown
|
page read and write
|
|
|
|
1A6EDD14000
|
unkown
|
page read and write
|
|
|
|
7FF55D980000
|
unkown
|
page readonly
|
|
|
|
2145000
|
unkown
|
page readonly
|
|
|
|
545C97B000
|
unkown
|
page read and write
|
|
|
|
4641AFF000
|
unkown
|
page read and write
|
|
|
|
13B2F522000
|
unkown
|
page read and write
|
|
|
|
7FF510E68000
|
unkown
|
page readonly
|
|
|
|
22E9B15B000
|
unkown
|
page read and write
|
|
|
|
232F000
|
unkown
|
page readonly
|
|
|
|
7FF550FA1000
|
unkown
|
page readonly
|
|
|
|
7FF5D29B1000
|
unkown
|
page readonly
|
|
|
|
24278D00000
|
unkown
|
page read and write
|
|
|
|
22E9CF50000
|
unkown
|
page readonly
|
|
|
|
54438FE000
|
unkown
|
page read and write
|
|
|
|
7FF55DA58000
|
unkown
|
page readonly
|
|
|
|
7FF550B86000
|
unkown
|
page readonly
|
|
|
|
2358000
|
unkown
|
page readonly
|
|
|
|
7FF55DB97000
|
unkown
|
page readonly
|
|
|
|
F1665FB000
|
unkown
|
page read and write
|
|
|
|
29CC7590000
|
unkown
|
page read and write
|
|
|
|
13B2EC29000
|
unkown
|
page read and write
|
|
|
|
21BCB41E000
|
unkown
|
page read and write
|
|
|
|
141A5060000
|
unkown
|
page readonly
|
|
|
|
22E9B125000
|
unkown
|
page read and write
|
|
|
|
7FF5D96D7000
|
unkown
|
page readonly
|
|
|
|
F166A7F000
|
unkown
|
page read and write
|
|
|
|
7FF550D7F000
|
unkown
|
page readonly
|
|
|
|
13B2F57C000
|
unkown
|
page read and write
|
|
|
|
7FF5F45E8000
|
unkown
|
page readonly
|
|
|
|
7FF5F4702000
|
unkown
|
page readonly
|
|
|
|
22E9D187000
|
unkown
|
page read and write
|
|
|
|
7FF599CB0000
|
unkown
|
page readonly
|
|
|
|
7FF55D9BF000
|
unkown
|
page readonly
|
|
|
|
7FF571FE6000
|
unkown
|
page readonly
|
|
|
|
24278C13000
|
unkown
|
page read and write
|
|
|
|
7FF510FA9000
|
unkown
|
page readonly
|
|
|
|
7FF5DFCB8000
|
unkown
|
page readonly
|
|
|
|
13B2F3D0000
|
unkown
|
page read and write
|
|
|
|
7FF55105D000
|
unkown
|
page readonly
|
|
|
|
22E8000
|
unkown
|
page readonly
|
|
|
|
7FF599F5D000
|
unkown
|
page readonly
|
|
|
|
285BF3D0000
|
unkown
|
page readonly
|
|
|
|
13B2F578000
|
unkown
|
page read and write
|
|
|
|
22E9D1F0000
|
unkown
|
page read and write
|
|
|
|
21BCB250000
|
unkown
|
page read and write
|
|
|
|
545BBBE000
|
unkown
|
page read and write
|
|
|
|
29CC56B9000
|
unkown
|
page read and write
|
|
|
|
7FF5DFDBE000
|
unkown
|
page readonly
|
|
|
|
2BC81800000
|
unkown
|
page readonly
|
|
|
|
2ACE000
|
unkown
|
page read and write
|
|
|
|
13B2F57A000
|
unkown
|
page read and write
|
|
|
|
13B2F52A000
|
unkown
|
page read and write
|
|
|
|
7FF5F4618000
|
unkown
|
page readonly
|
|
|
|
7FF54A197000
|
unkown
|
page readonly
|
|
|
|
16B4B3E0000
|
unkown
|
page read and write
|
|
|
|
7FF510C26000
|
unkown
|
page readonly
|
|
|
|
2318000
|
unkown
|
page readonly
|
|
|
|
4641B7F000
|
unkown
|
page read and write
|
|
|
|
7FF5DFDE6000
|
unkown
|
page readonly
|
|
|
|
1A6EE500000
|
unkown
|
page read and write
|
|
|
|
7FF5DFE7A000
|
unkown
|
page readonly
|
|
|
|
21BCB378000
|
heap default
|
page read and write
|
|
|
|
2334000
|
unkown
|
page readonly
|
|
|
|
229E189B000
|
unkown
|
page read and write
|
|
|
|
7FF5C5135000
|
unkown
|
page readonly
|
|
|
|
5C6E000
|
unkown
|
page read and write
|
|
|
|
29CC56C0000
|
unkown
|
page read and write
|
|
|
|
22E9D1D3000
|
unkown
|
page read and write
|
|
|
|
7FF599C75000
|
unkown
|
page readonly
|
|
|
|
22A8000
|
unkown
|
page readonly
|
|
|
|
5ED057A000
|
unkown
|
page read and write
|
|
|
|
7FF5F45C6000
|
unkown
|
page readonly
|
|
|
|
229E1770000
|
unkown
|
page read and write
|
|
|
|
28A0000
|
unkown
|
page read and write
|
|
|
|
1A6F32A0000
|
unkown
|
page read and write
|
|
|
|
7FF510F96000
|
unkown
|
page readonly
|
|
|
|
7FF55DB24000
|
unkown
|
page readonly
|
|
|
|
22E9CF60000
|
unkown
|
page readonly
|
|
|
|
250FDA6F000
|
unkown
|
page read and write
|
|
|
|
7FF5DFE67000
|
unkown
|
page readonly
|
|
|
|
21BCB449000
|
unkown
|
page read and write
|
|
|
|
29CC7590000
|
unkown
|
page read and write
|
|
|
|
7FF571FC6000
|
unkown
|
page readonly
|
|
|
|
250FDA6C000
|
unkown
|
page read and write
|
|
|
|
16B4B300000
|
unkown
|
page read and write
|
|
|
|
1A6EEBE0000
|
unkown
|
page read and write
|
|
|
|
13B2F585000
|
unkown
|
page read and write
|
|
|
|
7FF550D75000
|
unkown
|
page readonly
|
|
|
|
21BCB43D000
|
unkown
|
page read and write
|
|
|
|
16B4B420000
|
unkown
|
page readonly
|
|
|
|
279A000
|
unkown
|
page read and write
|
|
|
|
22E9AF30000
|
heap private
|
page read and write
|
|
|
|
1A36F2F0000
|
unkown
|
page readonly
|
|
|
|
13B2F5C8000
|
unkown
|
page read and write
|
|
|
|
7FF550FD2000
|
unkown
|
page readonly
|
|
|
|
2ACD000
|
unkown
|
page read and write
|
|
|
|
1A6EE400000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F26000
|
unkown
|
page readonly
|
|
|
|
4340000
|
unkown
|
page readonly
|
|
|
|
F623EFD000
|
unkown
|
page read and write
|
|
|
|
565287E000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page readonly
|
|
|
|
7FF5D2793000
|
unkown
|
page readonly
|
|
|
|
1A6F31F0000
|
unkown
|
page read and write
|
|
|
|
21BCB453000
|
unkown
|
page read and write
|
|
|
|
2318000
|
unkown
|
page readonly
|
|
|
|
7FF5D89D2000
|
unkown
|
page readonly
|
|
|
|
7FF5D96C6000
|
unkown
|
page readonly
|
|
|
|
2BC81702000
|
unkown
|
page read and write
|
|
|
|
22E9B102000
|
unkown
|
page read and write
|
|
|
|
229E1A00000
|
unkown
|
page readonly
|
|
|
|
22E9D400000
|
unkown
|
page read and write
|
|
|
|
7FF51102A000
|
unkown
|
page readonly
|
|
|
|
24278C02000
|
unkown
|
page read and write
|
|
|
|
7FF5D867A000
|
unkown
|
page readonly
|
|
|
|
7FF5D95CF000
|
unkown
|
page readonly
|
|
|
|
21BCB340000
|
unkown
|
page read and write
|
|
|
|
1F53000
|
unkown
|
page readonly
|
|
|
|
1A6EE415000
|
unkown
|
page read and write
|
|
|
|
13B2F3B0000
|
unkown
|
page readonly
|
|
|
|
2232000
|
unkown
|
page readonly
|
|
|
|
7FF5D8AA7000
|
unkown
|
page readonly
|
|
|
|
7FF5D9602000
|
unkown
|
page readonly
|
|
|
|
7FF5C5386000
|
unkown
|
page readonly
|
|
|
|
22E9E110000
|
unkown
|
page read and write
|
|
|
|
7FF5F4787000
|
unkown
|
page readonly
|
|
|
|
7FF599F51000
|
unkown
|
page readonly
|
|
|
|
7FF5D93E0000
|
unkown
|
page readonly
|
|
|
|
7FF5F45E0000
|
unkown
|
page readonly
|
|
|
|
21BCB449000
|
unkown
|
page read and write
|
|
|
|
13B2F59A000
|
unkown
|
page read and write
|
|
|
|
229E1900000
|
unkown
|
page read and write
|
|
|
|
7FF5DFD57000
|
unkown
|
page readonly
|
|
|
|
22E9D1F4000
|
unkown
|
page read and write
|
|
|
|
13B2F59C000
|
unkown
|
page read and write
|
|
|
|
7FF510F07000
|
unkown
|
page readonly
|
|
|
|
2BC81713000
|
unkown
|
page read and write
|
|
|
|
22E9B157000
|
unkown
|
page read and write
|
|
|
|
23388613000
|
unkown
|
page read and write
|
|
|
|
23388450000
|
heap private
|
page read and write
|
|
|
|
21BCB3BC000
|
unkown
|
page read and write
|
|
|
|
22E9B125000
|
unkown
|
page read and write
|
|
|
|
29CC5702000
|
unkown
|
page read and write
|
|
|
|
285BF500000
|
unkown
|
page read and write
|
|
|
|
2103000
|
unkown
|
page readonly
|
|
|
|
7FF55DB41000
|
unkown
|
page readonly
|
|
|
|
7FF5510A7000
|
unkown
|
page readonly
|
|
|
|
24278C6E000
|
unkown
|
page read and write
|
|
|
|
22EF000
|
unkown
|
page readonly
|
|
|
|
C969F7E000
|
unkown
|
page read and write
|
|
|
|
141A4970000
|
unkown
|
page readonly
|
|
|
|
1A6F3214000
|
unkown
|
page read and write
|
|
|
|
43F0000
|
unkown
|
page readonly
|
|
|
|
231E000
|
unkown
|
page readonly
|
|
|
|
1A6F3330000
|
unkown
|
page readonly
|
|
|
|
21BCB41D000
|
unkown
|
page read and write
|
|
|
|
1A6F32A0000
|
unkown
|
page read and write
|
|
|
|
2185000
|
unkown
|
page readonly
|
|
|
|
2A80000
|
unkown
|
page read and write
|
|
|
|
7FF5D9585000
|
unkown
|
page readonly
|
|
|
|
82397F000
|
unkown
|
page read and write
|
|
|
|
7FF5F4784000
|
unkown
|
page readonly
|
|
|
|
7FF5D95F6000
|
unkown
|
page readonly
|
|
|
|
22E9B03F000
|
unkown
|
page read and write
|
|
|
|
7FF510C18000
|
unkown
|
page readonly
|
|
|
|
1A6EDCF9000
|
unkown
|
page read and write
|
|
|
|
2C40000
|
heap private
|
page read and write
|
|
|
|
22E9B1A0000
|
unkown
|
page read and write
|
|
|
|
7FF5C5337000
|
unkown
|
page readonly
|
|
|
|
7FF5D93D6000
|
unkown
|
page readonly
|
|
|
|
7FF5D8977000
|
unkown
|
page readonly
|
|
|
|
1A6F3620000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E05000
|
unkown
|
page readonly
|
|
|
|
7FF54A1D7000
|
unkown
|
page readonly
|
|
|
|
21BCB3BF000
|
unkown
|
page read and write
|
|
|
|
7FF55DC42000
|
unkown
|
page readonly
|
|
|
|
22E9E010000
|
unkown
|
page read and write
|
|
|
|
13B2F57B000
|
unkown
|
page read and write
|
|
|
|
7FF550DDE000
|
unkown
|
page readonly
|
|
|
|
22FB000
|
unkown
|
page readonly
|
|
|
|
141A4830000
|
heap private
|
page read and write
|
|
|
|
7FF5C4C57000
|
unkown
|
page readonly
|
|
|
|
7FF5DFE96000
|
unkown
|
page readonly
|
|
|
|
7FF55D465000
|
unkown
|
page readonly
|
|
|
|
7FF549D6C000
|
unkown
|
page readonly
|
|
|
|
29D1000
|
unkown
|
page read and write
|
|
|
|
233884C0000
|
unkown
|
page readonly
|
|
|
|
22E9D002000
|
unkown
|
page read and write
|
|
|
|
1A6F3400000
|
unkown
|
page read and write
|
|
|
|
7FF599CE0000
|
unkown
|
page readonly
|
|
|
|
7FF5218B6000
|
unkown
|
page readonly
|
|
|
|
7FF550E96000
|
unkown
|
page readonly
|
|
|
|
2285000
|
unkown
|
page readonly
|
|
|
|
141A4B00000
|
unkown
|
page read and write
|
|
|
|
1A6F3210000
|
unkown
|
page read and write
|
|
|
|
22E9B009000
|
unkown
|
page read and write
|
|
|
|
13B2F500000
|
unkown
|
page read and write
|
|
|
|
7FF55D96B000
|
unkown
|
page readonly
|
|
|
|
7FF5C542B000
|
unkown
|
page readonly
|
|
|
|
1A6EDCA5000
|
unkown
|
page read and write
|
|
|
|
233884B0000
|
heap default
|
page read and write
|
|
|
|
1A36D710000
|
unkown
|
page readonly
|
|
|
|
7FF5F47C3000
|
unkown
|
page readonly
|
|
|
|
22C6000
|
unkown
|
page readonly
|
|
|
|
21BCB449000
|
unkown
|
page read and write
|
|
|
|
13B2F5BD000
|
unkown
|
page read and write
|
|
|
|
16B4B2CB000
|
heap default
|
page read and write
|
|
|
|
21BCB459000
|
unkown
|
page read and write
|
|
|
|
F16614E000
|
unkown
|
page read and write
|
|
|
|
22E9AFF0000
|
unkown
|
page readonly
|
|
|
|
7FF599FA7000
|
unkown
|
page readonly
|
|
|
|
5ED017E000
|
unkown
|
page read and write
|
|
|
|
7FF5F4281000
|
unkown
|
page readonly
|
|
|
|
29DA000
|
unkown
|
page read and write
|
|
|
|
7FF5DFEA7000
|
unkown
|
page readonly
|
|
|
|
7FF5F4797000
|
unkown
|
page readonly
|
|
|
|
1A36D902000
|
unkown
|
page read and write
|
|
|
|
22E9B0E2000
|
unkown
|
page read and write
|
|
|
|
7FF5D89E6000
|
unkown
|
page readonly
|
|
|
|
7FF599D67000
|
unkown
|
page readonly
|
|
|
|
28C0000
|
unkown
|
page readonly
|
|
|
|
13B2F553000
|
unkown
|
page read and write
|
|
|
|
21FFCF7000
|
unkown
|
page read and write
|
|
|
|
13B2F55A000
|
unkown
|
page read and write
|
|
|
|
545C4FB000
|
unkown
|
page read and write
|
|
|
|
7FF5DFCB0000
|
unkown
|
page readonly
|
|
|
|
7FF5D95C4000
|
unkown
|
page readonly
|
|
|
|
7FF51101B000
|
unkown
|
page readonly
|
|
|
|
22E9B0C0000
|
unkown
|
page read and write
|
|
|
|
13B2F560000
|
unkown
|
page read and write
|
|
|
|
21BCB3BE000
|
unkown
|
page read and write
|
|
|
|
229E1829000
|
unkown
|
page read and write
|
|
|
|
29A0000
|
unkown
|
page read and write
|
|
|
|
7FF521AC7000
|
unkown
|
page readonly
|
|
|
|
7FF599E80000
|
unkown
|
page readonly
|
|
|
|
7FF549F6A000
|
unkown
|
page readonly
|
|
|
|
13B2F579000
|
unkown
|
page read and write
|
|
|
|
7FF5C53A6000
|
unkown
|
page readonly
|
|
|
|
7FF5D2EBC000
|
unkown
|
page readonly
|
|
|
|
16B4B2FD000
|
unkown
|
page read and write
|
|
|
|
13B2F599000
|
unkown
|
page read and write
|
|
|
|
7FF599EB3000
|
unkown
|
page readonly
|
|
|
|
22E9E110000
|
unkown
|
page read and write
|
|
|
|
1A36D6A0000
|
heap private
|
page read and write
|
|
|
|
E2BB67E000
|
unkown
|
page read and write
|
|
|
|
7FF599E55000
|
unkown
|
page readonly
|
|
|
|
250FDA6A000
|
unkown
|
page read and write
|
|
|
|
21BCB41D000
|
unkown
|
page read and write
|
|
|
|
7FF521AB6000
|
unkown
|
page readonly
|
|
|
|
7FF550F80000
|
unkown
|
page readonly
|
|
|
|
13B2F56D000
|
unkown
|
page read and write
|
|
|
|
13B2ECBE000
|
unkown
|
page read and write
|
|
|
|
7FF5720A7000
|
unkown
|
page readonly
|
|
|
|
7FF54A129000
|
unkown
|
page readonly
|
|
|
|
7FF5F479B000
|
unkown
|
page readonly
|
|
|
|
7FF55DC47000
|
unkown
|
page readonly
|
|
|
|
21BCB3BD000
|
unkown
|
page read and write
|
|
|
|
8984B7F000
|
unkown
|
page read and write
|
|
|
|
229E1908000
|
unkown
|
page read and write
|
|
|
|
7FF5D9088000
|
unkown
|
page readonly
|
|
|
|
7FF599D04000
|
unkown
|
page readonly
|
|
|
|
21BCB43B000
|
unkown
|
page read and write
|
|
|
|
7FF599D53000
|
unkown
|
page readonly
|
|
|
|
7FF572051000
|
unkown
|
page readonly
|
|
|
|
13B2F538000
|
unkown
|
page read and write
|
|
|
|
13B2F538000
|
unkown
|
page read and write
|
|
|
|
1A6F3320000
|
unkown
|
page read and write
|
|
|
|
29CC774C000
|
unkown
|
page read and write
|
|
|
|
1A6F3414000
|
unkown
|
page read and write
|
|
|
|
7FF511046000
|
unkown
|
page readonly
|
|
|
|
29CC5688000
|
unkown
|
page read and write
|
|
|
|
7FF5D929A000
|
unkown
|
page readonly
|
|
|
|
250FDB00000
|
unkown
|
page read and write
|
|
|
|
1A6EDCA9000
|
unkown
|
page read and write
|
|
|
|
2C50000
|
unkown
|
page readonly
|
|
|
|
229E1680000
|
unkown
|
page readonly
|
|
|
|
22E9B135000
|
unkown
|
page read and write
|
|
|
|
7FF55DAE7000
|
unkown
|
page readonly
|
|
|
|
7FF5B307D000
|
unkown
|
page readonly
|
|
|
|
21BCC190000
|
unkown
|
page readonly
|
|
|
|
7FF571FB5000
|
unkown
|
page readonly
|
|
|
|
13B2F563000
|
unkown
|
page read and write
|
|
|
|
7FF5B3089000
|
unkown
|
page readonly
|
|
|
|
7FF551096000
|
unkown
|
page readonly
|
|
|
|
13B2F599000
|
unkown
|
page read and write
|
|
|
|
7FF5D95DF000
|
unkown
|
page readonly
|
|
|
|
7FF5D95B9000
|
unkown
|
page readonly
|
|
|
|
21BCB470000
|
unkown
|
page readonly
|
|
|
|
13B2EBC0000
|
unkown
|
page readonly
|
|
|
|
22E9D423000
|
unkown
|
page read and write
|
|
|
|
29CC5613000
|
unkown
|
page read and write
|
|
|
|
7FF599F7A000
|
unkown
|
page readonly
|
|
|
|
7FF5D95A4000
|
unkown
|
page readonly
|
|
|
|
C969DF9000
|
unkown
|
page read and write
|
|
|
|
1A6F31D0000
|
unkown
|
page read and write
|
|
|
|
2BC8166C000
|
unkown
|
page read and write
|
|
|
|
22E9D1C7000
|
unkown
|
page read and write
|
|
|
|
7FF511014000
|
unkown
|
page readonly
|
|
|
|
7FF55DB3F000
|
unkown
|
page readonly
|
|
|
|
7FF5D89ED000
|
unkown
|
page readonly
|
|
|
|
7FF55DB86000
|
unkown
|
page readonly
|
|
|
|
16B4B300000
|
unkown
|
page read and write
|
|
|
|
7FF5B3137000
|
unkown
|
page readonly
|
|
|
|
24278C68000
|
unkown
|
page read and write
|
|
|
|
22E5000
|
unkown
|
page readonly
|
|
|
|
2291000
|
unkown
|
page readonly
|
|
|
|
7FF511052000
|
unkown
|
page readonly
|
|
|
|
250FDA6C000
|
unkown
|
page read and write
|
|
|
|
7FF5D87CB000
|
unkown
|
page readonly
|
|
|
|
E2BB8FB000
|
unkown
|
page read and write
|
|
|
|
2AB0000
|
unkown
|
page readonly
|
|
|
|
1A6F31DE000
|
unkown
|
page read and write
|
|
|
|
1A6EDB80000
|
unkown
|
page readonly
|
|
|
|
21BCB459000
|
unkown
|
page read and write
|
|
|
|
7FF599EBD000
|
unkown
|
page readonly
|
|
|
|
7FF54A0CF000
|
unkown
|
page readonly
|
|
|
|
7FF599E89000
|
unkown
|
page readonly
|
|
|
|
22D8000
|
unkown
|
page readonly
|
|
|
|
2350000
|
unkown
|
page readonly
|
|
|
|
24278AC0000
|
heap default
|
page read and write
|
|
|
|
7FF550E3A000
|
unkown
|
page readonly
|
|
|
|
23388713000
|
unkown
|
page read and write
|
|
|
|
E2BBC7E000
|
unkown
|
page read and write
|
|
|
|
7FF5D8896000
|
unkown
|
page readonly
|
|
|
|
13B2EC13000
|
unkown
|
page read and write
|
|
|
|
1A6F34B1000
|
unkown
|
page read and write
|
|
|
|
141A4980000
|
unkown
|
page readonly
|
|
|
|
7FF5995FB000
|
unkown
|
page readonly
|
|
|
|
13B2ECB3000
|
unkown
|
page read and write
|
|
|
|
7FF599D4F000
|
unkown
|
page readonly
|
|
|
|
7FF599C7F000
|
unkown
|
page readonly
|
|
|
|
7FF5DFA76000
|
unkown
|
page readonly
|
|
|
|
7FF5C5278000
|
unkown
|
page readonly
|
|
|
|
7FF55D932000
|
unkown
|
page readonly
|
|
|
|
22E9D402000
|
unkown
|
page read and write
|
|
|
|
7FF54A1C3000
|
unkown
|
page readonly
|
|
|
|
2890000
|
unkown
|
page readonly
|
|
|
|
13B2F563000
|
unkown
|
page read and write
|
|
|
|
2180278000
|
unkown
|
page read and write
|
|
|
|
1A6EDB10000
|
heap private
|
page read and write
|
|
|
|
F6239BE000
|
unkown
|
page read and write
|
|
|
|
218007E000
|
unkown
|
page read and write
|
|
|
|
21BCB3C7000
|
unkown
|
page read and write
|
|
|
|
22E9B118000
|
unkown
|
page read and write
|
|
|
|
225F000
|
unkown
|
page readonly
|
|
|
|
1A6F34B3000
|
unkown
|
page read and write
|
|
|
|
285BF454000
|
unkown
|
page read and write
|
|
|
|
7FF54A19B000
|
unkown
|
page readonly
|
|
|
|
7FF5DF697000
|
unkown
|
page readonly
|
|
|
|
7FF5D9681000
|
unkown
|
page readonly
|
|
|
|
545C47B000
|
unkown
|
page read and write
|
|
|
|
7FF55D81A000
|
unkown
|
page readonly
|
|
|
|
7FF5F436C000
|
unkown
|
page readonly
|
|
|
|
7FF54A1D7000
|
unkown
|
page readonly
|
|
|
|
13B2FA02000
|
unkown
|
page read and write
|
|
|
|
1A6EECC0000
|
unkown
|
page readonly
|
|
|
|
7FF571FBE000
|
unkown
|
page readonly
|
|
|
|
7FF5218D8000
|
unkown
|
page readonly
|
|
|
|
13B2F5BC000
|
unkown
|
page read and write
|
|
|
|
22E9B029000
|
unkown
|
page read and write
|
|
|
|
24278BA0000
|
unkown
|
page write copy
|
|
|
|
13B2F55A000
|
unkown
|
page read and write
|
|
|
|
13B2F553000
|
unkown
|
page read and write
|
|
|
|
13B2EC00000
|
unkown
|
page read and write
|
|
|
|
7FF5D89F9000
|
unkown
|
page readonly
|
|
|
|
229E1750000
|
unkown
|
page readonly
|
|
|
|
23388590000
|
unkown
|
page write copy
|
|
|
|
7FF5720A7000
|
unkown
|
page readonly
|
|
|
|
141A4C00000
|
unkown
|
page readonly
|
|
|
|
7FF57185F000
|
unkown
|
page readonly
|
|
|
|
7FF5D8AA7000
|
unkown
|
page readonly
|
|
|
|
22E9D187000
|
unkown
|
page read and write
|
|
|
|
7FF55D939000
|
unkown
|
page readonly
|
|
|
|
545C8FA000
|
unkown
|
page read and write
|
|
|
|
7FF54A0D1000
|
unkown
|
page readonly
|
|
|
|
7FF599ECA000
|
unkown
|
page readonly
|
|
|
|
7FF5F456A000
|
unkown
|
page readonly
|
|
|
|
7FF5D93DA000
|
unkown
|
page readonly
|
|
|
|
7FF5B2927000
|
unkown
|
page readonly
|
|
|
|
7FF5D961D000
|
unkown
|
page readonly
|
|
|
|
13B2EED0000
|
unkown
|
page readonly
|
|
|
|
22E9B170000
|
unkown
|
page read and write
|
|
|
|
7FF599839000
|
unkown
|
page readonly
|
|
|
|
7FF5DFA68000
|
unkown
|
page readonly
|
|
|
|
7FF54A018000
|
unkown
|
page readonly
|
|
|
|
22E9D187000
|
unkown
|
page read and write
|
|
|
|
7FF5219BF000
|
unkown
|
page readonly
|
|
|
|
7FF5D3076000
|
unkown
|
page readonly
|
|
|
|
7FF5DFD55000
|
unkown
|
page readonly
|
|
|
|
250FDCD0000
|
unkown
|
page write copy
|
|
|
|
29E1000
|
unkown
|
page read and write
|
|
|
|
21BCB456000
|
unkown
|
page read and write
|
|
|
|
1A6F3330000
|
unkown
|
page read and write
|
|
|
|
29CC5713000
|
unkown
|
page read and write
|
|
|
|
7FF549FE5000
|
unkown
|
page readonly
|
|
|
|
7FF5D8676000
|
unkown
|
page readonly
|
|
|
|
1A6F34B5000
|
unkown
|
page read and write
|
|
|
|
285BF2F0000
|
heap default
|
page read and write
|
|
|
|
7FF521571000
|
unkown
|
page readonly
|
|
|
|
7FF521908000
|
unkown
|
page readonly
|
|
|
|
21BCB6D0000
|
heap private
|
page read and write
|
|
|
|
141A48A0000
|
unkown
|
page readonly
|
|
|
|
22E9AF90000
|
heap default
|
page read and write
|
|
|
|
7FF54A102000
|
unkown
|
page readonly
|
|
|
|
13B2F57B000
|
unkown
|
page read and write
|
|
|
|
7FF55DB53000
|
unkown
|
page readonly
|
|
|
|
7FF550FED000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E7B000
|
unkown
|
page readonly
|
|
|
|
7FF550F51000
|
unkown
|
page readonly
|
|
|
|
7FF5D8A64000
|
unkown
|
page readonly
|
|
|
|
2ACD000
|
unkown
|
page read and write
|
|
|
|
C969C7E000
|
unkown
|
page read and write
|
|
|
|
2241000
|
unkown
|
page readonly
|
|
|
|
220E000
|
unkown
|
page readonly
|
|
|
|
7FF5D8E71000
|
unkown
|
page readonly
|
|
|
|
1A6EDC29000
|
unkown
|
page read and write
|
|
|
|
F623F7A000
|
unkown
|
page read and write
|
|
|
|
7FF5508C5000
|
unkown
|
page readonly
|
|
|
|
22E9D1CC000
|
unkown
|
page read and write
|
|
|
|
1A6F34A4000
|
unkown
|
page read and write
|
|
|
|
7FF55DAF7000
|
unkown
|
page readonly
|
|
|
|
5ED087D000
|
unkown
|
page read and write
|
|
|
|
7FF55DA88000
|
unkown
|
page readonly
|
|
|
|
7FF5D94A7000
|
unkown
|
page readonly
|
|
|
|
13B2FA02000
|
unkown
|
page read and write
|
|
|
|
7FF5C5456000
|
unkown
|
page readonly
|
|
|
|
7FF5D310A000
|
unkown
|
page readonly
|
|
|
|
7FF5D95ED000
|
unkown
|
page readonly
|
|
|
|
1A6EF030000
|
unkown
|
page read and write
|
|
|
|
7FF5D9697000
|
unkown
|
page readonly
|
|
|
|
545C279000
|
unkown
|
page read and write
|
|
|
|
22DE000
|
unkown
|
page readonly
|
|
|
|
7FF5D962E000
|
unkown
|
page readonly
|
|
|
|
7FF5D877F000
|
unkown
|
page readonly
|
|
|
|
7FF5D8A96000
|
unkown
|
page readonly
|
|
|
|
16B4B2EF000
|
unkown
|
page read and write
|
|
|
|
22E9D402000
|
unkown
|
page read and write
|
|
|
|
7FF5B310A000
|
unkown
|
page readonly
|
|
|
|
7FF5B30E7000
|
unkown
|
page readonly
|
|
|
|
14707FF000
|
unkown
|
page read and write
|
|
|
|
7FF55D96F000
|
unkown
|
page readonly
|
|
|
|
7FF5B3137000
|
unkown
|
page readonly
|
|
|
|
7FF5C518B000
|
unkown
|
page readonly
|
|
|
|
13B2F57B000
|
unkown
|
page read and write
|
|
|
|
7FF5B305A000
|
unkown
|
page readonly
|
|
|
|
233885E0000
|
unkown
|
page readonly
|
|
|
|
1A6EF020000
|
unkown
|
page read and write
|
|
|
|
7FF5C543A000
|
unkown
|
page readonly
|
|
|
|
1A6EDC6C000
|
unkown
|
page read and write
|
|
|
|
29E7000
|
unkown
|
page read and write
|
|
|
|
227D000
|
unkown
|
page readonly
|
|
|
|
82387A000
|
unkown
|
page read and write
|
|
|
|
7FF5B3043000
|
unkown
|
page readonly
|
|
|
|
7FF55DC47000
|
unkown
|
page readonly
|
|
|
|
22E9E110000
|
unkown
|
page read and write
|
|
|
|
24278BF0000
|
unkown
|
page readonly
|
|
|
|
22E9D1FA000
|
unkown
|
page read and write
|
|
|
|
2ACD000
|
unkown
|
page read and write
|
|
|
|
2BC8162A000
|
unkown
|
page read and write
|
|
|
|
223D000
|
unkown
|
page readonly
|
|
|
|
7FF5D8AA2000
|
unkown
|
page readonly
|
|
|
|
7FF59975F000
|
unkown
|
page readonly
|
|
|
|
22E9E110000
|
unkown
|
page read and write
|
|
|
|
7FF5B2D0A000
|
unkown
|
page readonly
|
|
|
|
7FF5218D5000
|
unkown
|
page readonly
|
|
|
|
141A4B02000
|
unkown
|
page read and write
|
|
|
|
7FF599B02000
|
unkown
|
page readonly
|
|
|
|
21BCB3F1000
|
unkown
|
page read and write
|
|
|
|
7FF521AC2000
|
unkown
|
page readonly
|
|
|
|
7FF55D437000
|
unkown
|
page readonly
|
|
|
|
22E9B020000
|
unkown
|
page read and write
|
|
|
|
4641DFF000
|
unkown
|
page read and write
|
|
|
|
7FF5D3089000
|
unkown
|
page readonly
|
|
|
|
7FF5F46CF000
|
unkown
|
page readonly
|
|
|
|
29CC55D0000
|
unkown
|
page readonly
|
|
|
|
8984BFA000
|
unkown
|
page read and write
|
|
|
|
7FF55DB17000
|
unkown
|
page readonly
|
|
|
|
7FF5C53AD000
|
unkown
|
page readonly
|
|
|
|
2BC8166C000
|
unkown
|
page read and write
|
|
|
|
7FF54A127000
|
unkown
|
page readonly
|
|
|
|
285BF300000
|
unkown
|
page readonly
|
|
|
|
16B4B300000
|
unkown
|
page read and write
|
|
|
|
7FF5B2FE5000
|
unkown
|
page readonly
|
|
|
|
7FF5D95A7000
|
unkown
|
page readonly
|
|
|
|
29DD000
|
unkown
|
page read and write
|
|
|
|
22E9E010000
|
unkown
|
page read and write
|
|
|
|
7FF54A116000
|
unkown
|
page readonly
|
|
|
|
13B2ECE6000
|
unkown
|
page read and write
|
|
|
|
1F86000
|
unkown
|
page readonly
|
|
|
|
7FF5D9232000
|
unkown
|
page readonly
|
|
|
|
250FDB02000
|
unkown
|
page read and write
|
|
|
|
7FF510D25000
|
unkown
|
page readonly
|
|
|
|
250FDA6B000
|
unkown
|
page read and write
|
|
|
|
22E9CB80000
|
unkown
|
page readonly
|
|
|
|
7FF521121000
|
unkown
|
page readonly
|
|
|
|
7FF5219DD000
|
unkown
|
page readonly
|
|
|
|
7FF55DA36000
|
unkown
|
page readonly
|
|
|
|
5D40000
|
heap private
|
page read and write
|
|
|
|
13B2F59A000
|
unkown
|
page read and write
|
|
|
|
7FF5D8A5D000
|
unkown
|
page readonly
|
|
|
|
7FF55107A000
|
unkown
|
page readonly
|
|
|
|
13B2F559000
|
unkown
|
page read and write
|
|
|
|
7FF5F46F6000
|
unkown
|
page readonly
|
|
|
|
1A6F30B0000
|
unkown
|
page read and write
|
|
|
|
21BCB447000
|
unkown
|
page read and write
|
|
|
|
22E9B113000
|
unkown
|
page read and write
|
|
|
|
22E9B156000
|
unkown
|
page read and write
|
|
|
|
823B7C000
|
unkown
|
page read and write
|
|
|
|
5ED007A000
|
unkown
|
page read and write
|
|
|
|
13B2F51F000
|
unkown
|
page read and write
|
|
|
|
8984CFF000
|
unkown
|
page read and write
|
|
|
|
545C9FD000
|
unkown
|
page read and write
|
|
|
|
7FF599F64000
|
unkown
|
page readonly
|
|
|
|
21BCB2B0000
|
unkown
|
page read and write
|
|
|
|
22E9D187000
|
unkown
|
page read and write
|
|
|
|
7FF5C5453000
|
unkown
|
page readonly
|
|
|
|
545C2FF000
|
unkown
|
page read and write
|
|
|
|
22E9E110000
|
unkown
|
page read and write
|
|
|
|
22E9D413000
|
unkown
|
page read and write
|
|
|
|
7FF510F82000
|
unkown
|
page readonly
|
|
|
|
29CC5920000
|
unkown
|
page readonly
|
|
|
|
544397A000
|
unkown
|
page read and write
|
|
|
|
7FF5B30E4000
|
unkown
|
page readonly
|
|
|
|
7FF5D88B0000
|
unkown
|
page readonly
|
|
|
|
7FF550F84000
|
unkown
|
page readonly
|
|
|
|
21BCB452000
|
unkown
|
page read and write
|
|
|
|
E2BBA77000
|
unkown
|
page read and write
|
|
|
|
7FF5219E6000
|
unkown
|
page readonly
|
|
|
|
22E9D1F4000
|
unkown
|
page read and write
|
|
|
|
13B2F553000
|
unkown
|
page read and write
|
|
|
|
7FF5B304E000
|
unkown
|
page readonly
|
|
|
|
7FF550D99000
|
unkown
|
page readonly
|
|
|
|
13B2EC3C000
|
unkown
|
page read and write
|
|
|
|
7FF55DAF1000
|
unkown
|
page readonly
|
|
|
|
2AD5000
|
unkown
|
page read and write
|
|
|
|
7FF550DCF000
|
unkown
|
page readonly
|
|
|
|
1A6F3300000
|
unkown
|
page read and write
|
|
|
|
14704FE000
|
unkown
|
page read and write
|
|
|
|
1A6EDC8E000
|
unkown
|
page read and write
|
|
|
|
7FF572096000
|
unkown
|
page readonly
|
|
|
|
22E9D1F2000
|
unkown
|
page read and write
|
|
|
|
F1661CE000
|
unkown
|
page read and write
|
|
|
|
28B0000
|
unkown
|
page readonly
|
|
|
|
22E9E110000
|
unkown
|
page read and write
|
|
|
|
22E9B0BE000
|
unkown
|
page read and write
|
|
|
|
1A6EDC3C000
|
unkown
|
page read and write
|
|
|
|
23388640000
|
unkown
|
page read and write
|
|
|
|
7FF510D2F000
|
unkown
|
page readonly
|
|
|
|
7FF5D9684000
|
unkown
|
page readonly
|
|
|
|
545BEFA000
|
unkown
|
page read and write
|
|
|
|
16B4B2FE000
|
unkown
|
page read and write
|
|
|
|
7FF54A187000
|
unkown
|
page readonly
|
|
|
|
1A6F32E0000
|
unkown
|
page read and write
|
|
|
|
2BC81613000
|
unkown
|
page read and write
|
|
|
|
E2BBB7F000
|
unkown
|
page read and write
|
|
|
|
250FDA6C000
|
unkown
|
page read and write
|
|
|
|
1A6F3330000
|
unkown
|
page read and write
|
|
|
|
7FF599F96000
|
unkown
|
page readonly
|
|
|
|
F1660CB000
|
unkown
|
page read and write
|
|
|
|
7FF521AB3000
|
unkown
|
page readonly
|
|
|
|
1A6F3660000
|
unkown
|
page read and write
|
|
|
|
7FF55DC07000
|
unkown
|
page readonly
|
|
|
|
7FF5C5317000
|
unkown
|
page readonly
|
|
|
|
1A6F3610000
|
unkown
|
page readonly
|
|
|
|
29CC5716000
|
unkown
|
page read and write
|
|
|
|
7FF510847000
|
unkown
|
page readonly
|
|
|
|
21BCB459000
|
unkown
|
page read and write
|
|
|
|
21BCC180000
|
unkown
|
page read and write
|
|
|
|
5B80000
|
unkown
|
page readonly
|
|
|
|
21BCB449000
|
unkown
|
page read and write
|
|
|
|
16B4B2FD000
|
unkown
|
page read and write
|
|
|
|
7FF550DCB000
|
unkown
|
page readonly
|
|
|
|
29CC7510000
|
unkown
|
page read and write
|
|
|
|
7FF510D7B000
|
unkown
|
page readonly
|
|
|
|
7FF5B3076000
|
unkown
|
page readonly
|
|
|
|
221F000
|
unkown
|
page readonly
|
|
|
|
13B2ECA9000
|
unkown
|
page read and write
|
|
|
|
7FF55D91F000
|
unkown
|
page readonly
|
|
|
|
21FF6EB000
|
unkown
|
page read and write
|
|
|
|
21BCB3DB000
|
unkown
|
page read and write
|
|
|
|
2318000
|
unkown
|
page readonly
|
|
|
|
16B4B2EF000
|
unkown
|
page read and write
|
|
|
|
545C37B000
|
unkown
|
page read and write
|
|
|
|
7FF5F4441000
|
unkown
|
page readonly
|
|
|
|
1A6F31F1000
|
unkown
|
page read and write
|
|
|
|
2BC8166C000
|
unkown
|
page read and write
|
|
|
|
2AAA000
|
heap default
|
page read and write
|
|
|
|
7FF599C11000
|
unkown
|
page readonly
|
|
|
|
21BCB3BB000
|
unkown
|
page read and write
|
|
|
|
13B2F587000
|
unkown
|
page read and write
|
|
|
|
7FF5D947F000
|
unkown
|
page readonly
|
|
|
|
13B2F57B000
|
unkown
|
page read and write
|
|
|
|
5ECFDFD000
|
unkown
|
page read and write
|
|
|
|
29D5000
|
unkown
|
page read and write
|
|
|
|
545BF79000
|
unkown
|
page read and write
|
|
|
|
1A6F3462000
|
unkown
|
page read and write
|
|
|
|
21BCB3BB000
|
unkown
|
page read and write
|
|
|
|
2322000
|
unkown
|
page readonly
|
|
|
|
E2BB6FE000
|
unkown
|
page read and write
|
|
|
|
7FF599ED2000
|
unkown
|
page readonly
|
|
|
|
7FF52185A000
|
unkown
|
page readonly
|
|
|
|
7FF550FAF000
|
unkown
|
page readonly
|
|
|
|
2A97000
|
heap private
|
page read and write
|
|
|
|
7FF55DB8D000
|
unkown
|
page readonly
|
|
|
|
1A6F3200000
|
unkown
|
page read and write
|
|
|
|
250FDA6D000
|
unkown
|
page read and write
|
|
|
|
5CB0000
|
unkown
|
page read and write
|
|
|
|
7FF5D307D000
|
unkown
|
page readonly
|
|
|
|
7FF5DFE64000
|
unkown
|
page readonly
|
|
|
|
5443AFF000
|
unkown
|
page read and write
|
|
|
|
13B2EB50000
|
heap private
|
page read and write
|
|
|
|
250FDA6C000
|
unkown
|
page read and write
|
|
|
|
22E9B15A000
|
unkown
|
page read and write
|
|
|
|
13B2EE00000
|
unkown
|
page readonly
|
|
|
|
13B2ECEB000
|
unkown
|
page read and write
|
|
|
|
22E9D187000
|
unkown
|
page read and write
|
|
|
|
7FF5D9493000
|
unkown
|
page readonly
|
|
|
|
7FF599CEB000
|
unkown
|
page readonly
|
|
|
|
7FF5B2FE7000
|
unkown
|
page readonly
|
|
|
|
7FF5C5462000
|
unkown
|
page readonly
|
|
|
|
1A6EDC88000
|
unkown
|
page read and write
|
|
|
|
1A6F32A0000
|
unkown
|
page read and write
|
|
|
|
7FF521A71000
|
unkown
|
page readonly
|
|
|
|
21BCB43B000
|
unkown
|
page read and write
|
|
|
|
21BCC1B0000
|
unkown
|
page read and write
|
|
|
|
229E1610000
|
heap private
|
page read and write
|
|
|
|
7FF510F9D000
|
unkown
|
page readonly
|
|
|
|
250FDA6A000
|
unkown
|
page read and write
|
|
|
|
1A6F3370000
|
unkown
|
page readonly
|
|
|
|
7FF550D92000
|
unkown
|
page readonly
|
|
|
|
13B2F592000
|
unkown
|
page read and write
|
|
|
|
7FF55DC33000
|
unkown
|
page readonly
|
|
|
|
7FF5D8A6B000
|
unkown
|
page readonly
|
|
|
|
7FF5DFEA7000
|
unkown
|
page readonly
|
|
|
|
4641D7F000
|
unkown
|
page read and write
|
|
|
|
56528FE000
|
unkown
|
page read and write
|
|
|
|
24278C6C000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E5F000
|
unkown
|
page readonly
|
|
|
|
7FF51100D000
|
unkown
|
page readonly
|
|
|
|
7FF599EE6000
|
unkown
|
page readonly
|
|
|
|
250FD9F0000
|
unkown
|
page readonly
|
|
|
|
22E9E010000
|
unkown
|
page read and write
|
|
|
|
7FF5D96D2000
|
unkown
|
page readonly
|
|
|
|
29CC5560000
|
heap private
|
page read and write
|
|
|
|
13B2F5BC000
|
unkown
|
page read and write
|
|
|
|
7FF550EE1000
|
unkown
|
page readonly
|
|
|
|
1A6F34B1000
|
unkown
|
page read and write
|
|
|
|
229E1760000
|
unkown
|
page readonly
|
|
|
|
7FF5B2EAF000
|
unkown
|
page readonly
|
|
|
|
F166777000
|
unkown
|
page read and write
|
|
|
|
1A6EDC56000
|
unkown
|
page read and write
|
|
|
|
823AFF000
|
unkown
|
page read and write
|
|
|
|
5652A7F000
|
unkown
|
page read and write
|
|
|
|
54439FA000
|
unkown
|
page read and write
|
|
|
|
1A6F34B9000
|
unkown
|
page read and write
|
|
|
|
7FF5D30F7000
|
unkown
|
page readonly
|
|
|
|
25EA000
|
unkown
|
page read and write
|
|
|
|
7FF510FA7000
|
unkown
|
page readonly
|
|
|
|
7FF510F6E000
|
unkown
|
page readonly
|
|
|
|
22E9D1C7000
|
unkown
|
page read and write
|
|
|
|
1A36D841000
|
unkown
|
page read and write
|
|
|
|
29E4000
|
unkown
|
page read and write
|
|
|
|
13B2EBD0000
|
unkown
|
page readonly
|
|
|
|
7FF55DB66000
|
unkown
|
page readonly
|
|
|
|
13B2F568000
|
unkown
|
page read and write
|
|
|
|
7FF54A181000
|
unkown
|
page readonly
|
|
|
|
250FDA6B000
|
unkown
|
page read and write
|
|
|
|
7FF55DB20000
|
unkown
|
page readonly
|
|
|
|
22E9CEE0000
|
unkown
|
page readonly
|
|
|
|
545C5FB000
|
unkown
|
page read and write
|
|
|
|
27B5000
|
unkown
|
page read and write
|
|
|
|
5ED027B000
|
unkown
|
page read and write
|
|
|
|
21BCB449000
|
unkown
|
page read and write
|
|
|
|
29CC75A0000
|
unkown
|
page readonly
|
|
|
|
13B2FA02000
|
unkown
|
page read and write
|
|
|
|
7FF549C81000
|
unkown
|
page readonly
|
|
|
|
29CC7702000
|
unkown
|
page read and write
|
|
|
|
29CC7800000
|
unkown
|
page readonly
|
|
|
|
13B2ECA2000
|
unkown
|
page read and write
|
|
|
|
21BCBF0B000
|
unkown
|
page read and write
|
|
|
|
7FF550FC6000
|
unkown
|
page readonly
|
|
|
|
141A4B08000
|
unkown
|
page read and write
|
|
|
|
7FF5B3007000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
heap private
|
page read and write
|
|
|
|
13B2EC4E000
|
unkown
|
page read and write
|
|
|
|
7FF5F47D7000
|
unkown
|
page readonly
|
|
|
|
7FF5C503A000
|
unkown
|
page readonly
|
|
|
|
7FF550DE0000
|
unkown
|
page readonly
|
|
|
|
1A6EDC76000
|
unkown
|
page read and write
|
|
|
|
7FF5D93C9000
|
unkown
|
page readonly
|
|
|
|
7FF599E84000
|
unkown
|
page readonly
|
|
|
|
21BCB41D000
|
unkown
|
page read and write
|
|
|
|
13B2F565000
|
unkown
|
page read and write
|
|
|
|
7FF5D9694000
|
unkown
|
page readonly
|
|
|
|
7FF5DFD77000
|
unkown
|
page readonly
|
|
|
|
1A6EE559000
|
unkown
|
page read and write
|
|
|
|
250FF4D0000
|
unkown
|
page read and write
|
|
|
|
7FF5B30FB000
|
unkown
|
page readonly
|
|
|
|
21BCB3C7000
|
unkown
|
page read and write
|
|
|
|
13B2ECAA000
|
unkown
|
page read and write
|
|
|
|
7FF511043000
|
unkown
|
page readonly
|
|
|
|
7FF572067000
|
unkown
|
page readonly
|
|
|
|
13B2F583000
|
unkown
|
page read and write
|
|
|
|
29CC5655000
|
unkown
|
page read and write
|
|
|
|
2BC8163F000
|
unkown
|
page read and write
|
|
|
|
24278E00000
|
unkown
|
page readonly
|
|
|
|
13B2F55A000
|
unkown
|
page read and write
|
|
|
|
7FF5D30FB000
|
unkown
|
page readonly
|
|
|
|
13B2F546000
|
unkown
|
page read and write
|
|
|
|
21BCB3F1000
|
unkown
|
page read and write
|
|
|
|
7FF510C2A000
|
unkown
|
page readonly
|
|
|
|
22BD000
|
unkown
|
page readonly
|
|
|
|
224E000
|
unkown
|
page readonly
|
|
|
|
7FF5DFDD2000
|
unkown
|
page readonly
|
|
|
|
21BCB449000
|
unkown
|
page read and write
|
|
|
|
2BC8166C000
|
unkown
|
page read and write
|
|
|
|
54435DB000
|
unkown
|
page read and write
|
|
|
|
29CC55C0000
|
heap default
|
page read and write
|
|
|
|
7FF571FED000
|
unkown
|
page readonly
|
|
|
|
24278C69000
|
unkown
|
page read and write
|
|
|
|
7FF5D30ED000
|
unkown
|
page readonly
|
|
|
|
13B2ECEE000
|
unkown
|
page read and write
|
|
|
|
21BCB459000
|
unkown
|
page read and write
|
|
|
|
21BCB459000
|
unkown
|
page read and write
|
|
|
|
13B2F360000
|
unkown
|
page write copy
|
|
|
|
7FF52111B000
|
unkown
|
page readonly
|
|
|
|
C9699DB000
|
unkown
|
page read and write
|
|
|
|
7FF5B7FDB000
|
unkown
|
page readonly
|
|
|
|
13B2ECFA000
|
unkown
|
page read and write
|
|
|
|
1470AFE000
|
unkown
|
page read and write
|
|
|
|
21FFAF5000
|
unkown
|
page read and write
|
|
|
|
7FF599DB0000
|
unkown
|
page readonly
|
|
|
|
5D04000
|
heap private
|
page read and write
|
|
|
|
7FF599D96000
|
unkown
|
page readonly
|
|
|
|
1A6F3200000
|
unkown
|
page read and write
|
|
|
|
20F7000
|
unkown
|
page readonly
|
|
|
|
7FF5D3044000
|
unkown
|
page readonly
|
|
|
|
22E9B17F000
|
unkown
|
page read and write
|
|
|
|
1A6EDC72000
|
unkown
|
page read and write
|
|
|
|
7FF5D8775000
|
unkown
|
page readonly
|
|
|
|
16B4B3C0000
|
unkown
|
page read and write
|
|
|
|
29DD000
|
unkown
|
page read and write
|
|
|
|
22E9D187000
|
unkown
|
page read and write
|
|
|
|
29CC7590000
|
unkown
|
page read and write
|
|
|
|
7FF5C53B9000
|
unkown
|
page readonly
|
|
|
|
2BC8166C000
|
unkown
|
page read and write
|
|
|
|
21FFBFB000
|
unkown
|
page read and write
|
|
|
|
24278D13000
|
unkown
|
page read and write
|
|
|
|
7FF572054000
|
unkown
|
page readonly
|
|
|
|
7FF54A0DF000
|
unkown
|
page readonly
|
|
|
|
7FF54A055000
|
unkown
|
page readonly
|
|
|
|
7FF5B3132000
|
unkown
|
page readonly
|
|
|
|
7FF5F3E2B000
|
unkown
|
page readonly
|
|
|
|
1A6EDC00000
|
unkown
|
page read and write
|
|
|
|
7FF5D9202000
|
unkown
|
page readonly
|
|
|
|
7FF5219D3000
|
unkown
|
page readonly
|
|
|
|
5D10000
|
unkown
|
page readonly
|
|
|
|
1A6F3310000
|
unkown
|
page read and write
|
|
|
|
7FF5D30E1000
|
unkown
|
page readonly
|
|
|
|
2900000
|
heap default
|
page read and write
|
|
|
|
285BF48E000
|
unkown
|
page read and write
|
|
|
|
7FF599DB8000
|
unkown
|
page readonly
|
|
|
|
22E9CF60000
|
unkown
|
page read and write
|
|
|
|
7FF55D915000
|
unkown
|
page readonly
|
|
|
|
7FF5F4781000
|
unkown
|
page readonly
|
|
|
|
22E9B15F000
|
unkown
|
page read and write
|
|
|
|
285BFAA0000
|
unkown
|
page readonly
|
|
|
|
1A6EE502000
|
unkown
|
page read and write
|
|
|
|
1A6EDD02000
|
unkown
|
page read and write
|
|
|
|
7FF550B1E000
|
unkown
|
page readonly
|
|
|
|
7FF5F47D7000
|
unkown
|
page readonly
|
|
|
|
22E9CF60000
|
unkown
|
page read and write
|
|
|
|
1A6EDB70000
|
heap default
|
page read and write
|
|
|
|
7FF5D3123000
|
unkown
|
page readonly
|
|
|
|
285BF3F0000
|
unkown
|
page read and write
|
|
|
|
22D3000
|
unkown
|
page readonly
|
|
|
|
24278C69000
|
unkown
|
page read and write
|
|
|
|
7FF5D968D000
|
unkown
|
page readonly
|
|
|
|
6AEF67B000
|
unkown
|
page read and write
|
|
|
|
29CC5693000
|
unkown
|
page read and write
|
|
|
|
5ED0A7F000
|
unkown
|
page read and write
|
|
|
|
1A36D800000
|
unkown
|
page read and write
|
|
|
|
7FF5997C5000
|
unkown
|
page readonly
|
|
|
|
2143000
|
unkown
|
page readonly
|
|
|
|
13B2F600000
|
unkown
|
page readonly
|
|
|
|
7FF551054000
|
unkown
|
page readonly
|
|
|
|
13B2EC70000
|
unkown
|
page read and write
|
|
|
|
7FF550C68000
|
unkown
|
page readonly
|
|
|
|
6AEF8FE000
|
unkown
|
page read and write
|
|
|
|
229E189E000
|
unkown
|
page read and write
|
|
|
|
29CC7580000
|
unkown
|
page readonly
|
|
|
|
7FF57205D000
|
unkown
|
page readonly
|
|
|
|
141A5400000
|
unkown
|
page readonly
|
|
|
|
2427AA10000
|
unkown
|
page read and write
|
|
|
|
13B2F3D0000
|
unkown
|
page read and write
|
|
|
|
21BCB449000
|
unkown
|
page read and write
|
|
|
|
7FF5B7FDB000
|
unkown
|
page readonly
|
|
|
|
22FD000
|
unkown
|
page readonly
|
|
|
|
C969EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5C541D000
|
unkown
|
page readonly
|
|
|
|
2AC9000
|
unkown
|
page read and write
|
|
|
|
1A6EDCAF000
|
unkown
|
page read and write
|
|
|
|
545BFFE000
|
unkown
|
page read and write
|
|
|
|
16B4B2FD000
|
unkown
|
page read and write
|
|
|
|
13B2EC4D000
|
unkown
|
page read and write
|
|
|
|
7FF5B3087000
|
unkown
|
page readonly
|
|
|
|
1A6EE513000
|
unkown
|
page read and write
|
|
|
|
7FF550F57000
|
unkown
|
page readonly
|
|
|
|
285BF508000
|
unkown
|
page read and write
|
|
|
|
7FF5219CF000
|
unkown
|
page readonly
|
|
|
|
7FF5D9483000
|
unkown
|
page readonly
|
|
|
|
F623DFB000
|
unkown
|
page read and write
|
|
|
|
29CC7520000
|
unkown
|
page readonly
|
|
|
|
7FF599E25000
|
unkown
|
page readonly
|
|
|
|
229E1902000
|
unkown
|
page read and write
|
|
|
|
229E1E60000
|
unkown
|
page readonly
|
|
|
|
29B0000
|
heap default
|
page read and write
|
|
|
|
7FF550EB0000
|
unkown
|
page readonly
|
|
|
|
21BCBF50000
|
unkown
|
page read and write
|
|
|
|
2AE2000
|
unkown
|
page read and write
|
|
|
|
1A36D855000
|
unkown
|
page read and write
|
|
|
|
7FF5DFDC6000
|
unkown
|
page readonly
|
|
|
|
21BCB41B000
|
unkown
|
page read and write
|
|
|
|
21FFDFF000
|
unkown
|
page read and write
|
|
|
|
2137000
|
unkown
|
page readonly
|
|
|
|
7FF571FF7000
|
unkown
|
page readonly
|
|
|
|
1A6F342D000
|
unkown
|
page read and write
|
|
|
|
5C7F000
|
unkown
|
page read and write
|
|
|
|
2AD5000
|
unkown
|
page read and write
|
|
|
|
13B2F5BC000
|
unkown
|
page read and write
|
|
|
|
22CE000
|
unkown
|
page readonly
|
|
|
|
13B2FA54000
|
unkown
|
page read and write
|
|
|
|
250FD980000
|
heap private
|
page read and write
|
|
|
|
7FF5D30E4000
|
unkown
|
page readonly
|
|
|
|
29BA000
|
heap default
|
page read and write
|
|
|
|
141A4A4B000
|
unkown
|
page read and write
|
|
|
|
29F9000
|
unkown
|
page read and write
|
|
|
|
7FF5D302F000
|
unkown
|
page readonly
|
|
|
|
7FF5F46ED000
|
unkown
|
page readonly
|
|
|
|
13B2EC4C000
|
unkown
|
page read and write
|
|
|
|
285BF513000
|
unkown
|
page read and write
|
|
|
|
7FF5D95D1000
|
unkown
|
page readonly
|
|
|
|
29CC7602000
|
unkown
|
page read and write
|
|
|
|
21BCB3BD000
|
unkown
|
page read and write
|
|
|
|
1A6F32F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D946A000
|
unkown
|
page readonly
|
|
|
|
21BCB41D000
|
unkown
|
page read and write
|
|
|
|
7FF5219EA000
|
unkown
|
page readonly
|
|
|
|
7FF549FC6000
|
unkown
|
page readonly
|
|
|
|
2BC814F0000
|
heap private
|
page read and write
|
|
|
|
21BCC210000
|
unkown
|
page read and write
|
|
|
|
7FF521A84000
|
unkown
|
page readonly
|
|
|
|
2BC81550000
|
heap default
|
page read and write
|
|
|
|
13B2F330000
|
unkown
|
page readonly
|
|
|
|
22E9E010000
|
unkown
|
page read and write
|
|
|
|
7FF599DE8000
|
unkown
|
page readonly
|
|
|
|
7FF550F55000
|
unkown
|
page readonly
|
|
|
|
29CC71C0000
|
unkown
|
page readonly
|
|
|
|
7FF55DC36000
|
unkown
|
page readonly
|
|
|
|
F16667F000
|
unkown
|
page read and write
|
|
|
|
22E9CA80000
|
unkown
|
page read and write
|
|
|
|
7FF5C5467000
|
unkown
|
page readonly
|
|
|
|
250FD9E0000
|
heap default
|
page read and write
|
|
|
|
7FF5B30ED000
|
unkown
|
page readonly
|
|
|
|
13B2F571000
|
unkown
|
page read and write
|
|
|
|
7FF5D2956000
|
unkown
|
page readonly
|
|
|
|
1A6EF023000
|
unkown
|
page read and write
|
|
|
|
8984A7B000
|
unkown
|
page read and write
|
|
|
|
22E9D186000
|
unkown
|
page read and write
|
|
|
|
229E1846000
|
unkown
|
page read and write
|
|
|
|
21BCB350000
|
unkown
|
page read and write
|
|
|
|
13B2EBB0000
|
heap default
|
page read and write
|
|
|
|
2BC81560000
|
unkown
|
page write copy
|
|
|
|
7FF5C5373000
|
unkown
|
page readonly
|
|
|
|
1A6F3030000
|
unkown
|
page read and write
|
|
|
|
1A6F3650000
|
unkown
|
page readonly
|
|
|
|
1A36D802000
|
unkown
|
page read and write
|
|
|
|
294D000
|
unkown
|
page read and write
|
|
|
|
7FF599D3A000
|
unkown
|
page readonly
|
|
|
|
1A6EE559000
|
unkown
|
page read and write
|
|
|
|
13B2F567000
|
unkown
|
page read and write
|
|
|
|
13B2FA00000
|
unkown
|
page read and write
|
|
|
|
230E000
|
unkown
|
page readonly
|
|
|
|
13B2F560000
|
unkown
|
page read and write
|
|
|
|
545C079000
|
unkown
|
page read and write
|
|
|
|
2358000
|
unkown
|
page readonly
|
|
|
|
13B2ED08000
|
unkown
|
page read and write
|
|
|
|
7FF5D3137000
|
unkown
|
page readonly
|
|
|
|
2BC8166C000
|
unkown
|
page read and write
|
|
|
|
13B2F402000
|
unkown
|
page read and write
|
|
|
|
22E9D164000
|
unkown
|
page read and write
|
|
|
|
2BC8166C000
|
unkown
|
page read and write
|
|
|
|
16B4B2D2000
|
unkown
|
page read and write
|
|
|
|
7FF5C518F000
|
unkown
|
page readonly
|
|
|
|
22E9B085000
|
unkown
|
page read and write
|
|
|
|
7FF550F77000
|
unkown
|
page readonly
|
|
|
|
22E9B200000
|
unkown
|
page readonly
|
|
|
|
1A6EDC8E000
|
unkown
|
page read and write
|
|
|
|
7FF510F63000
|
unkown
|
page readonly
|
|
|
|
13B2F561000
|
unkown
|
page read and write
|
|
|
|
7FF5F4287000
|
unkown
|
page readonly
|
|
|
|
27B9000
|
unkown
|
page read and write
|
|
|
|
7FF5D3087000
|
unkown
|
page readonly
|
|
|
|
7FF5D89BE000
|
unkown
|
page readonly
|
|
|
|
2427A5B0000
|
unkown
|
page read and write
|
|
|
|
7FF5DFDB3000
|
unkown
|
page readonly
|
|
|
|
2257000
|
unkown
|
page readonly
|
|
|
|
21BCB406000
|
unkown
|
page read and write
|
|
|
|
283B000
|
unkown
|
page read and write
|
|
|
|
1A36DA00000
|
unkown
|
page write copy
|
|
|
|
28F0000
|
unkown
|
page readonly
|
|
|
|
250FDA53000
|
unkown
|
page read and write
|
|
|
|
7FF599F57000
|
unkown
|
page readonly
|
|
|
|
21BCB380000
|
heap default
|
page read and write
|
|
|
|
545C57A000
|
unkown
|
page read and write
|
|
|
|
250FDA09000
|
unkown
|
page read and write
|
|
|
|
8238FF000
|
unkown
|
page read and write
|
|
|
|
1A6EE518000
|
unkown
|
page read and write
|
|
|
|
7FF55DB9E000
|
unkown
|
page readonly
|
|
|
|
7FF510F7A000
|
unkown
|
page readonly
|
|
|
|
7FF5F46DF000
|
unkown
|
page readonly
|
|
|
|
7FF549831000
|
unkown
|
page readonly
|
|
|
|
16B4B430000
|
unkown
|
page read and write
|
|
|
|
7FF599A57000
|
unkown
|
page readonly
|
|
|
|
1A6F3330000
|
unkown
|
page read and write
|
|
|
|
13B2F567000
|
unkown
|
page read and write
|
|
|
|
29CC56AF000
|
unkown
|
page read and write
|
|
|
|
1A6F3330000
|
unkown
|
page read and write
|
|
|
|
2A20000
|
unkown
|
page readonly
|
|
|
|
13B2F515000
|
unkown
|
page read and write
|
|
|
|
7FF5D9298000
|
unkown
|
page readonly
|
|
|
|
13B2F5C8000
|
unkown
|
page read and write
|
|
|
|
7FF55DB34000
|
unkown
|
page readonly
|
|
|
|
2BA0000
|
unkown
|
page readonly
|
|
|
|
1A6F31D8000
|
unkown
|
page read and write
|
|
|
|
7FF5D8EA0000
|
unkown
|
page readonly
|
|
|
|
7FF5D9555000
|
unkown
|
page readonly
|
|
|
|
7FF550EB8000
|
unkown
|
page readonly
|
|
|
|
16B4B2E6000
|
unkown
|
page read and write
|
|
|
|
23388702000
|
unkown
|
page read and write
|
|
|
|
22E9B013000
|
unkown
|
page read and write
|
|
|
|
7FF5D89C6000
|
unkown
|
page readonly
|
|
|
|
7FF5B30F4000
|
unkown
|
page readonly
|
|
|
|
7FF521A77000
|
unkown
|
page readonly
|
|
|
|
2BC81602000
|
unkown
|
page read and write
|
|
|
|
147057E000
|
unkown
|
page read and write
|
|
|
|
2A70000
|
unkown
|
page read and write
|
|
|
|
13B2ECC8000
|
unkown
|
page read and write
|
|
|
|
545C87A000
|
unkown
|
page read and write
|
|
|
|
13B2F55C000
|
unkown
|
page read and write
|
|
|
|
285BFC02000
|
unkown
|
page read and write
|
|
|
|
7FF5C536F000
|
unkown
|
page readonly
|
|
|
|
7FF521AC7000
|
unkown
|
page readonly
|
|
|
|
141A4B13000
|
unkown
|
page read and write
|
|
|
|
7FF572057000
|
unkown
|
page readonly
|
|
|
|
F16687F000
|
unkown
|
page read and write
|
|
|
|
545C77B000
|
unkown
|
page read and write
|
|
|
|
7FF599A51000
|
unkown
|
page readonly
|
|
|
|
13B2F593000
|
unkown
|
page read and write
|
|
|
|
7FF5F3E31000
|
unkown
|
page readonly
|
|
|
|
7FF550FCA000
|
unkown
|
page readonly
|
|
|
|
7FF55DA50000
|
unkown
|
page readonly
|
|
|
|
7FF599F93000
|
unkown
|
page readonly
|
|
|
|
7FF5D9616000
|
unkown
|
page readonly
|
|
|
|
250FDA00000
|
unkown
|
page read and write
|
|
|
|
7FF55D9A4000
|
unkown
|
page readonly
|
|
|
|
7FF599FA2000
|
unkown
|
page readonly
|
|
|
|
250FDB13000
|
unkown
|
page read and write
|
|
|
|
7FF5C5427000
|
unkown
|
page readonly
|
|
|
|
7FF521945000
|
unkown
|
page readonly
|
|
|
|
29DE000
|
unkown
|
page read and write
|
|
|
|
24278C69000
|
unkown
|
page read and write
|
|
|
|
7FF5F478D000
|
unkown
|
page readonly
|
|
|
|
29CC7700000
|
unkown
|
page read and write
|
|
|
|
29CC75C0000
|
unkown
|
page readonly
|
|
|
|
1A6EDE00000
|
unkown
|
page readonly
|
|
|
|
5ED06FE000
|
unkown
|
page read and write
|
|
|
|
22E9CF60000
|
unkown
|
page read and write
|
|
|
|
21BCBF06000
|
unkown
|
page read and write
|
|
|
|
22E9E110000
|
unkown
|
page read and write
|
|
|
|
7FF599FA7000
|
unkown
|
page readonly
|
|
|
|
E2BB97E000
|
unkown
|
page read and write
|
|
|
|
5C80000
|
unkown
|
page read and write
|
|
|
|
22E9B0A1000
|
unkown
|
page read and write
|
|
|
|
2AD7000
|
unkown
|
page read and write
|
|
|
|
7FF521A74000
|
unkown
|
page readonly
|
|
|
|
7FF5B2CF8000
|
unkown
|
page readonly
|
|
|
|
21BCB300000
|
unkown
|
page readonly
|
|
|
|
22E9CEF0000
|
unkown
|
page read and write
|
|
|
|
2310000
|
unkown
|
page readonly
|
|
|
|
24278AD0000
|
unkown
|
page readonly
|
|
|
|
23388800000
|
unkown
|
page readonly
|
|
|
|
24278D02000
|
unkown
|
page read and write
|
|
|
|
285BF413000
|
unkown
|
page read and write
|
|
|
|
7FF5D881F000
|
unkown
|
page readonly
|
|
|
|
7FF5D8F5A000
|
unkown
|
page readonly
|
|
|
|
7FF5B303F000
|
unkown
|
page readonly
|
|
|
|
24278C00000
|
unkown
|
page read and write
|
|
|
|
7FF599D4D000
|
unkown
|
page readonly
|
|
|
|
21BCBF04000
|
unkown
|
page read and write
|
|
|
|
4641C7A000
|
unkown
|
page read and write
|
|
|
|
285BFE00000
|
unkown
|
page readonly
|
|
|
|
22E9E010000
|
unkown
|
page read and write
|
|
|
|
7FF5B3062000
|
unkown
|
page readonly
|
|
|
|
1A6EE402000
|
unkown
|
page read and write
|
|
|
|
13B2F3D0000
|
unkown
|
page readonly
|
|
|
|
5ECFEF7000
|
unkown
|
page read and write
|
|
|
|
7FF5D3126000
|
unkown
|
page readonly
|
|
|
|
2796000
|
unkown
|
page read and write
|
|
|
|
7FF55DB6A000
|
unkown
|
page readonly
|
|
|
|
29CC7789000
|
unkown
|
page read and write
|
|
|
|
7FF5D30F4000
|
unkown
|
page readonly
|
|
|
|
13B2F539000
|
unkown
|
page read and write
|
|
|
|
13B2F53E000
|
unkown
|
page read and write
|
|
|
|
285BF400000
|
unkown
|
page read and write
|
|
|
|
22E9D1F0000
|
unkown
|
page read and write
|
|
|
|
13B2F5AE000
|
unkown
|
page read and write
|
|
|
|
7FF521A0D000
|
unkown
|
page readonly
|
|
|
|
7FF5D9383000
|
unkown
|
page readonly
|
|
|
|
7FF5219F2000
|
unkown
|
page readonly
|
|
|
|
7FF5D95B4000
|
unkown
|
page readonly
|
|
|
|
F16697F000
|
unkown
|
page read and write
|
|
|
|
2AC5000
|
unkown
|
page read and write
|
|
|
|
147077B000
|
unkown
|
page read and write
|
|
|
|
1A36D7E0000
|
unkown
|
page readonly
|
|
|
|
21BCC200000
|
unkown
|
page read and write
|
|
|
|
7FF511057000
|
unkown
|
page readonly
|
|
|
|
7FF5D9627000
|
unkown
|
page readonly
|
|
|
|
7FF5B3056000
|
unkown
|
page readonly
|
|
|
|
22E9CF80000
|
unkown
|
page readonly
|
|
|
|
1A6EDCA9000
|
unkown
|
page read and write
|
|
|
|
7FF5F471D000
|
unkown
|
page readonly
|
|
|
|
141A4A8A000
|
unkown
|
page read and write
|
|
|
|
13B2F3C0000
|
unkown
|
page readonly
|
|
|
|
7FF54A0FA000
|
unkown
|
page readonly
|
|
|
|
2BC818D0000
|
unkown
|
page readonly
|
|
|
|
285BF429000
|
unkown
|
page read and write
|
|
|
|
22E9D1F8000
|
unkown
|
page read and write
|
|
|
|
141A4A13000
|
unkown
|
page read and write
|
|
|
|
7FF5DFEA2000
|
unkown
|
page readonly
|
|
|
|
7FF5B2D06000
|
unkown
|
page readonly
|
|
|
|
7FF5D8957000
|
unkown
|
page readonly
|
|
|
|
7FF5C538A000
|
unkown
|
page readonly
|
|
|
|
1A6F31D0000
|
unkown
|
page read and write
|
|
|
|
1A6F30D0000
|
unkown
|
page read and write
|
|
|
|
5652AFF000
|
unkown
|
page read and write
|
|
|
|
22E9D162000
|
unkown
|
page read and write
|
|
|
|
22E9D113000
|
unkown
|
page read and write
|
|
|
|
2890000
|
unkown
|
page read and write
|
|
|
|
F623E7B000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F40000
|
unkown
|
page readonly
|
|
|
|
7FF5D9410000
|
unkown
|
page readonly
|
|
|
|
2BC815B0000
|
unkown
|
page readonly
|
|
|
|
7FF5DFE54000
|
unkown
|
page readonly
|
|
|
|
7FF5B2E0F000
|
unkown
|
page readonly
|
|
|
|
22E9D127000
|
unkown
|
page read and write
|
|
|
|
29CC7749000
|
unkown
|
page read and write
|
|
|
|
7FF55DC1A000
|
unkown
|
page readonly
|
|
|
|
7FF5DFE6B000
|
unkown
|
page readonly
|
|
|
|
7FF5F4727000
|
unkown
|
page readonly
|
|
|
|
7FF54A194000
|
unkown
|
page readonly
|
|
|
|
7FF549C87000
|
unkown
|
page readonly
|
|
|
|
229E1913000
|
unkown
|
page read and write
|
|
|
|
13B2F567000
|
unkown
|
page read and write
|
|
|
|
21BCB350000
|
unkown
|
page read and write
|
|
|
|
5443A7F000
|
unkown
|
page read and write
|
|
|
|
21BCC200000
|
unkown
|
page read and write
|
|
|
|
F623D7F000
|
unkown
|
page read and write
|
|
|
|
1A6EDC13000
|
unkown
|
page read and write
|
|
|
|
7FF5D96C3000
|
unkown
|
page readonly
|
|
|
|
7FF55DAF5000
|
unkown
|
page readonly
|
|
|
|
7FF510DCF000
|
unkown
|
page readonly
|
|
|
|
28D0000
|
unkown
|
page read and write
|
|
|
|
7FF5C5256000
|
unkown
|
page readonly
|
|
|
|
250FF5D0000
|
unkown
|
page readonly
|
|
|
|
29CC56F3000
|
unkown
|
page read and write
|
|
|
|
13B2F57B000
|
unkown
|
page read and write
|
|
|
|
141A4A55000
|
unkown
|
page read and write
|
|
|
|
7FF55DBFD000
|
unkown
|
page readonly
|
|
|
|
7FF5F45E5000
|
unkown
|
page readonly
|
|
|
|
7FF54A0E3000
|
unkown
|
page readonly
|
|
|
|
29CC56DA000
|
unkown
|
page read and write
|
|
|
|
22E9D1F0000
|
unkown
|
page read and write
|
|
|
|
13B2F58E000
|
unkown
|
page read and write
|
|
|
|
13B2F3E0000
|
unkown
|
page read and write
|
|
|
|
7FF551093000
|
unkown
|
page readonly
|
|
|
|
229E1800000
|
unkown
|
page read and write
|
|
|
|
1A6EDC9A000
|
unkown
|
page read and write
|
|
|
|
21BCB2F0000
|
unkown
|
page readonly
|
|
|
|
21BCB6D5000
|
heap private
|
page read and write
|
|
|
|
7FF599E9F000
|
unkown
|
page readonly
|
|
|
|
23388629000
|
unkown
|
page read and write
|
|
|
|
13B2F572000
|
unkown
|
page read and write
|
|
|
|
141A4890000
|
heap default
|
page read and write
|
|
|
|
22E9AFA0000
|
unkown
|
page write copy
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
7FF5D9541000
|
unkown
|
page readonly
|
|
|
|
7FF5D30E7000
|
unkown
|
page readonly
|
|
|
|
7FF54A1C6000
|
unkown
|
page readonly
|
|
|
|
13B2F567000
|
unkown
|
page read and write
|
|
|
|
22E9B115000
|
unkown
|
page read and write
|
|
|
|
22FD000
|
unkown
|
page readonly
|
|
|
|
2C47000
|
heap private
|
page read and write
|
|
|
|
250FDA13000
|
unkown
|
page read and write
|
|
|
|
13B2F3D0000
|
unkown
|
page read and write
|
|
|
|
141A4A00000
|
unkown
|
page read and write
|
|
|
|
22E9D187000
|
unkown
|
page read and write
|
|
|
|
545C6FC000
|
unkown
|
page read and write
|
|
|
|
21BCB406000
|
unkown
|
page read and write
|
|
|
|
24278A60000
|
heap private
|
page read and write
|
|
|
|
545C17D000
|
unkown
|
page read and write
|
|
|
|
7FF55DA81000
|
unkown
|
page readonly
|
|
|
|
229E2002000
|
unkown
|
page read and write
|
|
|
|
E2BB3BB000
|
unkown
|
page read and write
|
|
|
|
21BCB370000
|
heap default
|
page read and write
|
|
|
|
16B4B495000
|
heap private
|
page read and write
|
|
|
|
229E184D000
|
unkown
|
page read and write
|
|
|
|
545C7FB000
|
unkown
|
page read and write
|
|
|
|
5ECFC7C000
|
unkown
|
page read and write
|
|
|
|
7FF5F46FA000
|
unkown
|
page readonly
|
|
|
|
1A6EDC74000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E5B000
|
unkown
|
page readonly
|
|
|
|
7FF550FF7000
|
unkown
|
page readonly
|
|
|
|
7FF599E94000
|
unkown
|
page readonly
|
|
|
|
7FF5D8EC6000
|
unkown
|
page readonly
|
|
|
|
13B2F58E000
|
unkown
|
page read and write
|
|
|
|
7FF521A19000
|
unkown
|
page readonly
|
|
|
|
7FF510E60000
|
unkown
|
page readonly
|
|
|
|
F623FFF000
|
unkown
|
page read and write
|
|
|
|
13B2F568000
|
unkown
|
page read and write
|
|
|
|
229E1880000
|
unkown
|
page read and write
|
|
|
|
C969E7F000
|
unkown
|
page read and write
|
|
|
|
250FDA6D000
|
unkown
|
page read and write
|
|
|
|
7FF5D926A000
|
unkown
|
page readonly
|
|
|
|
7FF55DBF4000
|
unkown
|
page readonly
|
|
|
|
1A36D829000
|
unkown
|
page read and write
|
|
|
|
29CC7789000
|
unkown
|
page read and write
|
|
|
|
29CC7718000
|
unkown
|
page read and write
|
|
|
|
22E9D1D8000
|
unkown
|
page read and write
|
|
|
|
7FF599E57000
|
unkown
|
page readonly
|
|
|
|
13B2F539000
|
unkown
|
page read and write
|
|
|
|
1A36D813000
|
unkown
|
page read and write
|
|
|
|
6AEF7F9000
|
unkown
|
page read and write
|
|
|
|
22E9D100000
|
unkown
|
page read and write
|
|
|
|
229E1855000
|
unkown
|
page read and write
|
|
|
|
7FF5D9477000
|
unkown
|
page readonly
|
|
|
|
7FF599EA1000
|
unkown
|
page readonly
|
|
|
|
7FF55DB29000
|
unkown
|
page readonly
|
|
|
|
1A36D700000
|
heap default
|
page read and write
|
|
|
|
2870000
|
unkown
|
page readonly
|
|
|
|
7FF5DFDF7000
|
unkown
|
page readonly
|
|
|
|
22E9D112000
|
unkown
|
page read and write
|
|
|
|
56529F9000
|
unkown
|
page read and write
|
|
|
|
7FF5D8955000
|
unkown
|
page readonly
|
|
|
|
22E9D11C000
|
unkown
|
page read and write
|
|
|
|
2BC8166C000
|
unkown
|
page read and write
|
|
|
|
16B4B490000
|
heap private
|
page read and write
|
|
|
|
13B2F59B000
|
unkown
|
page read and write
|
|
|
|
2338A0A0000
|
unkown
|
page readonly
|
|
|
|
7FF55D9DA000
|
unkown
|
page readonly
|
|
|
|
13B2F55F000
|
unkown
|
page read and write
|
|
|
|
22E9B2D0000
|
unkown
|
page readonly
|
|
|
|
7FF550C76000
|
unkown
|
page readonly
|
|
|
|
7FF5C5467000
|
unkown
|
page readonly
|
|
|
|
7FF54A0ED000
|
unkown
|
page readonly
|
|
|
|
C969D79000
|
unkown
|
page read and write
|
|
|
|
7FF57207A000
|
unkown
|
page readonly
|
|
|
|
7FF54A1D2000
|
unkown
|
page readonly
|
|
|
|
7FF55DBF7000
|
unkown
|
page readonly
|
|
|
|
22E9D183000
|
unkown
|
page read and write
|
|
|
|
13B2F5D7000
|
unkown
|
page read and write
|
|
|
|
13B2F3F0000
|
unkown
|
page readonly
|
|
|
|
1F13000
|
unkown
|
page readonly
|
|
|
|
229E1850000
|
unkown
|
page read and write
|
|
|
|
7FF55DB72000
|
unkown
|
page readonly
|
|
|
|
16B4B2EF000
|
unkown
|
page read and write
|
|
|
|
7FF550897000
|
unkown
|
page readonly
|
|
|
|
E2BB7F5000
|
unkown
|
page read and write
|
|
|
|
7FF5D8668000
|
unkown
|
page readonly
|
|
|
|
7FF5C5414000
|
unkown
|
page readonly
|
|
|
|
7FF551067000
|
unkown
|
page readonly
|
|
|
|
7FF511004000
|
unkown
|
page readonly
|
|
|
|
250FDD20000
|
unkown
|
page readonly
|
|
|
|
13B2ED13000
|
unkown
|
page read and write
|
|
|
|
141A4A3C000
|
unkown
|
page read and write
|
|
|
|
21BCBBC0000
|
unkown
|
page readonly
|
|
|
|
7FF550FBD000
|
unkown
|
page readonly
|
|
|
|
13B2F538000
|
unkown
|
page read and write
|
|
|
|
1A6F341F000
|
unkown
|
page read and write
|
|
|
|
7FF521577000
|
unkown
|
page readonly
|
|
|
|
21FF76F000
|
unkown
|
page read and write
|
|
|
|
250FDA02000
|
unkown
|
page read and write
|
|
|
|
7FF5D89B3000
|
unkown
|
page readonly
|
|
|
|
7FF5D93D4000
|
unkown
|
page readonly
|
|
|
|
7FF5D88B8000
|
unkown
|
page readonly
|
|
|
|
29CC7590000
|
unkown
|
page read and write
|
|
|
|
22E9E010000
|
unkown
|
page read and write
|
|
|
|
7FF549FE8000
|
unkown
|
page readonly
|
|
|
|
13B2F563000
|
unkown
|
page read and write
|
|
|
|
250FDA6E000
|
unkown
|
page read and write
|
|
|
|
7FF5C53B7000
|
unkown
|
page readonly
|
|
|
|
13B2F52D000
|
unkown
|
page read and write
|
|
|
|
250FDA67000
|
unkown
|
page read and write
|
|
|
|
2C4A000
|
heap private
|
page read and write
|
|
|
|
7FF5DFC1F000
|
unkown
|
page readonly
|
|
|
|
1A36DA50000
|
unkown
|
page readonly
|
|
|
|
7FF599A23000
|
unkown
|
page readonly
|
|
|
|
7FF5C5028000
|
unkown
|
page readonly
|
|
|
|
7FF5F4794000
|
unkown
|
page readonly
|
|
|
|
22D1000
|
unkown
|
page readonly
|
|
|
|
7FF5C51DF000
|
unkown
|
page readonly
|
|
|
|
285BF45F000
|
unkown
|
page read and write
|
|
|
|
7FF550FF9000
|
unkown
|
page readonly
|
|
|
|
13B2FC00000
|
unkown
|
page readonly
|
|
|
|
7FF510F5F000
|
unkown
|
page readonly
|
|
|
|
1470675000
|
unkown
|
page read and write
|
|
|
|
29CC8010000
|
unkown
|
page read and write
|
|
|
|
1A6EDED0000
|
unkown
|
page readonly
|
|
|
|
7FF5D89CA000
|
unkown
|
page readonly
|
|
|
|
5D50000
|
unkown
|
page readonly
|
|
|
|
7FF5DFC96000
|
unkown
|
page readonly
|
|
|
|
24278C29000
|
unkown
|
page read and write
|
|
|
|
21BCB43D000
|
unkown
|
page read and write
|
|
|
|
7FF599EAF000
|
unkown
|
page readonly
|
|
|
|
7FF550F9F000
|
unkown
|
page readonly
|
|
|
|
21BCB6D9000
|
heap private
|
page read and write
|
|
|
|
21BCB6E0000
|
unkown
|
page read and write
|
|
|
|
7FF5DFBCF000
|
unkown
|
page readonly
|
|
|
|
F1664F5000
|
unkown
|
page read and write
|
|
|
|
21BCC1A0000
|
unkown
|
page read and write
|
|
|
|
22E2000
|
unkown
|
page readonly
|
|
|
|
13B2F57B000
|
unkown
|
page read and write
|
|
|
|
F623C7A000
|
unkown
|
page read and write
|
|
|
|
22E9E013000
|
unkown
|
page read and write
|
|
|
|
7FF521A06000
|
unkown
|
page readonly
|
|
|
|
298E000
|
unkown
|
page read and write
|
|
|
|
56525CB000
|
unkown
|
page read and write
|
|
|
|
7FF550F94000
|
unkown
|
page readonly
|
|
|
|
7FF5D940E000
|
unkown
|
page readonly
|
|
|
|
7FF5D924C000
|
unkown
|
page readonly
|
|
|
|
2281000
|
unkown
|
page readonly
|
|
|
|
7FF5D908F000
|
unkown
|
page readonly
|
|
|
|
7FF521731000
|
unkown
|
page readonly
|
|
|
|
13B2F55C000
|
unkown
|
page read and write
|
|
|
|
21FFEF8000
|
unkown
|
page read and write
|
|
|
|
16B4B2C0000
|
heap default
|
page read and write
|
|
|
|
7FF5D93A5000
|
unkown
|
page readonly
|
|
|
|
29CC563F000
|
unkown
|
page read and write
|
|
|
|
13B2EC50000
|
unkown
|
page read and write
|
|
|
|
2217000
|
unkown
|
page readonly
|
|
|
|
29D5000
|
unkown
|
page read and write
|
|
|
|
13B2ECED000
|
unkown
|
page read and write
|
|
|
|
2990000
|
unkown
|
page readonly
|
|
|
|
29CC7749000
|
unkown
|
page read and write
|
|
|
|
250FDA6C000
|
unkown
|
page read and write
|
|
|
|
7FF5C5036000
|
unkown
|
page readonly
|
|
|
|
21BCB3DB000
|
unkown
|
page read and write
|
|
|
|
1A6F3455000
|
unkown
|
page read and write
|
|
|
|
29CC7530000
|
heap private
|
page read and write
|
|
|
|
7FF5B2F48000
|
unkown
|
page readonly
|
|
|
|
7FF551057000
|
unkown
|
page readonly
|
|
|
|
545BE7F000
|
unkown
|
page read and write
|
|
|
|
545C1FB000
|
unkown
|
page read and write
|
|
|
|
7FF521A17000
|
unkown
|
page readonly
|
|
|
|
22E9B056000
|
unkown
|
page read and write
|
|
|
|
4641CFF000
|
unkown
|
page read and write
|
|
|
|
1A6EDD07000
|
unkown
|
page read and write
|
|
|
|
25AA000
|
unkown
|
page read and write
|
|
|
|
141A4A4D000
|
unkown
|
page read and write
|
|
|
|
250FDC00000
|
unkown
|
page readonly
|
|
|
|
7FF5DFB75000
|
unkown
|
page readonly
|
|
There are 1593 hidden memdumps, click here to show them.