Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
statistic-2069354685.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$statistic-2069354685.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\FF93F185-DDDE-40CB-B93D-25B41D52007D
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\31381FA9.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8E121C48.png
|
PNG image data, 485 x 185, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BDC82AA3.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F3F7F196.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\suspendedpage[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\7EB40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Tue May 4 10:51:42 2021, atime=Tue May 4 10:51:42 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\statistic-2069354685.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:52
2020, mtime=Tue May 4 10:51:42 2021, atime=Tue May 4 10:51:42 2021, length=107618, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\CFB40000
|
data
|
dropped
|
|
|
|
C:\Users\user\jordji.nbvt11
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\suspendedpage[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\216A9434.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\7417EC62.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\82F80CFB.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A28A3EA5.png
|
PNG image data, 485 x 185, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\0CDE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabE725.tmp
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarE726.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\0DDE0000
|
data
|
dropped
|
|
There are 18 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\jordji.nbvt1,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\jordji.nbvt11,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\jordji.nbvt1,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\jordji.nbvt11,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
http://fwdssp.com/?dn=referer_detect&pid=5POL4F2O4
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 98 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
anaheimdermatologists.com
|
192.185.5.2
|
|
|
|
industrialarttextile.com
|
192.254.233.89
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.5.2
|
anaheimdermatologists.com
|
United States
|
|
|
|
192.254.233.89
|
industrialarttextile.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
bz
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
cz
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B2A4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BA83
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BC39
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BD71
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BF07
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C040
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
l0
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5EAD5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5F390
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{&6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED662
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDA29
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDB04
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDBAF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDCB8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDD93
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
.26
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
103727
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
104470
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 177 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
16CCD200000
|
unkown
|
page readonly
|
|
|
|
32C0000
|
unkown
|
page readonly
|
|
|
|
7FF584E16000
|
unkown
|
page readonly
|
|
|
|
2730E7B0000
|
unkown
|
page read and write
|
|
|
|
19E0BF50000
|
unkown
|
page write copy
|
|
|
|
7FF514841000
|
unkown
|
page readonly
|
|
|
|
1AB97F88000
|
unkown
|
page read and write
|
|
|
|
16CCCB90000
|
unkown
|
page read and write
|
|
|
|
7FF543461000
|
unkown
|
page readonly
|
|
|
|
1AB974A0000
|
unkown
|
page readonly
|
|
|
|
1A012FB000
|
unkown
|
page read and write
|
|
|
|
3109000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC56000
|
unkown
|
page readonly
|
|
|
|
1EBF3F02000
|
unkown
|
page read and write
|
|
|
|
16CCE410000
|
unkown
|
page read and write
|
|
|
|
7FF53EF34000
|
unkown
|
page readonly
|
|
|
|
1AB9764E000
|
unkown
|
page read and write
|
|
|
|
885477A000
|
unkown
|
page read and write
|
|
|
|
7FF59F6E0000
|
unkown
|
page readonly
|
|
|
|
7FF552C79000
|
unkown
|
page readonly
|
|
|
|
1AB97580000
|
unkown
|
page readonly
|
|
|
|
7FF553285000
|
unkown
|
page readonly
|
|
|
|
7FF58A0FE000
|
unkown
|
page readonly
|
|
|
|
27B3000
|
unkown
|
page readonly
|
|
|
|
7FF59AD65000
|
unkown
|
page readonly
|
|
|
|
7FF53ED31000
|
unkown
|
page readonly
|
|
|
|
28A64D02000
|
unkown
|
page read and write
|
|
|
|
3C58FF000
|
unkown
|
page read and write
|
|
|
|
1AB97F19000
|
unkown
|
page read and write
|
|
|
|
7FF59F82A000
|
unkown
|
page readonly
|
|
|
|
28BD000
|
unkown
|
page readonly
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
7FF584EAF000
|
unkown
|
page readonly
|
|
|
|
28AA000
|
unkown
|
page readonly
|
|
|
|
1EBF3CD0000
|
heap private
|
page read and write
|
|
|
|
16CCAC61000
|
unkown
|
page read and write
|
|
|
|
2391CA6B000
|
unkown
|
page read and write
|
|
|
|
7FF54323C000
|
unkown
|
page readonly
|
|
|
|
28E32C86000
|
heap default
|
page read and write
|
|
|
|
9A9ECF9000
|
unkown
|
page read and write
|
|
|
|
624F000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC59000
|
unkown
|
page readonly
|
|
|
|
7FF59F745000
|
unkown
|
page readonly
|
|
|
|
16CCD042000
|
unkown
|
page read and write
|
|
|
|
7FF59F824000
|
unkown
|
page readonly
|
|
|
|
164EAA80000
|
unkown
|
page readonly
|
|
|
|
E1C2EFE000
|
unkown
|
page read and write
|
|
|
|
1AB97F4A000
|
unkown
|
page read and write
|
|
|
|
7FF5AF43D000
|
unkown
|
page readonly
|
|
|
|
16CCCD7A000
|
unkown
|
page read and write
|
|
|
|
1AB976FD000
|
unkown
|
page read and write
|
|
|
|
16CCACC6000
|
unkown
|
page read and write
|
|
|
|
7FF59AA1C000
|
unkown
|
page readonly
|
|
|
|
7FF5528D9000
|
unkown
|
page readonly
|
|
|
|
7FF584D29000
|
unkown
|
page readonly
|
|
|
|
2391CA6B000
|
unkown
|
page read and write
|
|
|
|
7FF552448000
|
unkown
|
page readonly
|
|
|
|
26AC000
|
unkown
|
page readonly
|
|
|
|
7FF542DDD000
|
unkown
|
page readonly
|
|
|
|
1AB97F28000
|
unkown
|
page read and write
|
|
|
|
27AC000
|
unkown
|
page readonly
|
|
|
|
164E8AD0000
|
unkown
|
page readonly
|
|
|
|
2264C088000
|
unkown
|
page read and write
|
|
|
|
1AB976B4000
|
unkown
|
page read and write
|
|
|
|
9C416F5000
|
unkown
|
page read and write
|
|
|
|
1AB976EF000
|
unkown
|
page read and write
|
|
|
|
28A64C6F000
|
unkown
|
page read and write
|
|
|
|
7FF58A27D000
|
unkown
|
page readonly
|
|
|
|
28A64C83000
|
unkown
|
page read and write
|
|
|
|
2264C200000
|
unkown
|
page readonly
|
|
|
|
2903000
|
unkown
|
page readonly
|
|
|
|
7FF589A95000
|
unkown
|
page readonly
|
|
|
|
3035000
|
unkown
|
page read and write
|
|
|
|
7FF584F46000
|
unkown
|
page readonly
|
|
|
|
1AB98402000
|
unkown
|
page read and write
|
|
|
|
7FF5534D6000
|
unkown
|
page readonly
|
|
|
|
1AB97F56000
|
unkown
|
page read and write
|
|
|
|
19E0BFA0000
|
unkown
|
page readonly
|
|
|
|
7FF589A1E000
|
unkown
|
page readonly
|
|
|
|
F7CFB6B000
|
unkown
|
page read and write
|
|
|
|
7FF553477000
|
unkown
|
page readonly
|
|
|
|
7FF59F63B000
|
unkown
|
page readonly
|
|
|
|
1F00FAD0000
|
heap default
|
page read and write
|
|
|
|
7FF553460000
|
unkown
|
page readonly
|
|
|
|
7FF584E9F000
|
unkown
|
page readonly
|
|
|
|
7FF541D49000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page readonly
|
|
|
|
7FF5AFBE5000
|
unkown
|
page readonly
|
|
|
|
4F1F000
|
unkown
|
page read and write
|
|
|
|
2F10000
|
unkown
|
page read and write
|
|
|
|
1EBF3E52000
|
unkown
|
page read and write
|
|
|
|
1F00FBB0000
|
unkown
|
page write copy
|
|
|
|
88546FE000
|
unkown
|
page read and write
|
|
|
|
7FF58A22F000
|
unkown
|
page readonly
|
|
|
|
302D000
|
unkown
|
page read and write
|
|
|
|
7FF5AFAE8000
|
unkown
|
page readonly
|
|
|
|
28E32CA5000
|
unkown
|
page read and write
|
|
|
|
7FF599330000
|
unkown
|
page readonly
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
2391CA6B000
|
unkown
|
page read and write
|
|
|
|
2783000
|
unkown
|
page readonly
|
|
|
|
7FF584D04000
|
unkown
|
page readonly
|
|
|
|
1AB97F47000
|
unkown
|
page read and write
|
|
|
|
16CCAC54000
|
unkown
|
page read and write
|
|
|
|
7FF59F4FB000
|
unkown
|
page readonly
|
|
|
|
7FF54355F000
|
unkown
|
page readonly
|
|
|
|
7FF59ADD1000
|
unkown
|
page readonly
|
|
|
|
7FF53E843000
|
unkown
|
page readonly
|
|
|
|
1AB97702000
|
unkown
|
page read and write
|
|
|
|
16CCCE53000
|
unkown
|
page read and write
|
|
|
|
27CC000
|
unkown
|
page readonly
|
|
|
|
7FF541BC7000
|
unkown
|
page readonly
|
|
|
|
1AB97F64000
|
unkown
|
page read and write
|
|
|
|
7FF58A1EA000
|
unkown
|
page readonly
|
|
|
|
2DDC000
|
unkown
|
page read and write
|
|
|
|
2391CA69000
|
unkown
|
page read and write
|
|
|
|
7FF55345E000
|
unkown
|
page readonly
|
|
|
|
7FF541CAB000
|
unkown
|
page readonly
|
|
|
|
7FF58A2F1000
|
unkown
|
page readonly
|
|
|
|
7FF53EAB6000
|
unkown
|
page readonly
|
|
|
|
7FF599398000
|
unkown
|
page readonly
|
|
|
|
7FF59F7A8000
|
unkown
|
page readonly
|
|
|
|
7FF59F831000
|
unkown
|
page readonly
|
|
|
|
7FF552C68000
|
unkown
|
page readonly
|
|
|
|
1AB97F2D000
|
unkown
|
page read and write
|
|
|
|
28E32C96000
|
unkown
|
page read and write
|
|
|
|
19E0C013000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCD1000
|
unkown
|
page readonly
|
|
|
|
7FF51494A000
|
unkown
|
page readonly
|
|
|
|
2264C113000
|
unkown
|
page read and write
|
|
|
|
28A64A10000
|
heap default
|
page read and write
|
|
|
|
1EBF3E55000
|
unkown
|
page read and write
|
|
|
|
7FF541F3A000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC4E000
|
unkown
|
page readonly
|
|
|
|
7FF54358B000
|
unkown
|
page readonly
|
|
|
|
164E8C70000
|
unkown
|
page read and write
|
|
|
|
7FF5AF99B000
|
unkown
|
page readonly
|
|
|
|
7FF59AD23000
|
unkown
|
page readonly
|
|
|
|
1AB97F43000
|
unkown
|
page read and write
|
|
|
|
7FF541F69000
|
unkown
|
page readonly
|
|
|
|
7FF5AFBE0000
|
unkown
|
page readonly
|
|
|
|
7FF552C7D000
|
unkown
|
page readonly
|
|
|
|
1AB97F47000
|
unkown
|
page read and write
|
|
|
|
2802000
|
unkown
|
page readonly
|
|
|
|
7FF584E93000
|
unkown
|
page readonly
|
|
|
|
7FF552C2F000
|
unkown
|
page readonly
|
|
|
|
7FF584BA7000
|
unkown
|
page readonly
|
|
|
|
1AB97F5E000
|
unkown
|
page read and write
|
|
|
|
7FF541D11000
|
unkown
|
page readonly
|
|
|
|
F7CFFF9000
|
unkown
|
page read and write
|
|
|
|
1AB97F46000
|
unkown
|
page read and write
|
|
|
|
1EBF4000000
|
unkown
|
page readonly
|
|
|
|
3122000
|
unkown
|
page read and write
|
|
|
|
1F010000000
|
unkown
|
page readonly
|
|
|
|
7FF584E6C000
|
unkown
|
page readonly
|
|
|
|
16CCAC81000
|
unkown
|
page read and write
|
|
|
|
3C51AC000
|
unkown
|
page read and write
|
|
|
|
7FF5AF9A6000
|
unkown
|
page readonly
|
|
|
|
16CCCD63000
|
unkown
|
page read and write
|
|
|
|
164E8C6C000
|
unkown
|
page read and write
|
|
|
|
7FF5AFA01000
|
unkown
|
page readonly
|
|
|
|
644FC79000
|
unkown
|
page read and write
|
|
|
|
16CCCF43000
|
unkown
|
page read and write
|
|
|
|
7FF543585000
|
unkown
|
page readonly
|
|
|
|
19E0BE10000
|
heap private
|
page read and write
|
|
|
|
28A64C55000
|
unkown
|
page read and write
|
|
|
|
7FF58A237000
|
unkown
|
page readonly
|
|
|
|
16CCE210000
|
unkown
|
page read and write
|
|
|
|
2EF0000
|
unkown
|
page readonly
|
|
|
|
1AB97FA4000
|
unkown
|
page read and write
|
|
|
|
306E000
|
unkown
|
page read and write
|
|
|
|
1AB97F64000
|
unkown
|
page read and write
|
|
|
|
16CCCD4F000
|
unkown
|
page read and write
|
|
|
|
1AB97E02000
|
unkown
|
page read and write
|
|
|
|
1AB97CB0000
|
unkown
|
page read and write
|
|
|
|
7FF5534CE000
|
unkown
|
page readonly
|
|
|
|
28A65202000
|
unkown
|
page read and write
|
|
|
|
7FF54333B000
|
unkown
|
page readonly
|
|
|
|
7FF5AFCC4000
|
unkown
|
page readonly
|
|
|
|
16CCE110000
|
unkown
|
page read and write
|
|
|
|
E1C307A000
|
unkown
|
page read and write
|
|
|
|
1AB97FA4000
|
unkown
|
page read and write
|
|
|
|
644FA75000
|
unkown
|
page read and write
|
|
|
|
7FF59933B000
|
unkown
|
page readonly
|
|
|
|
164E8D14000
|
unkown
|
page read and write
|
|
|
|
1AB97F5B000
|
unkown
|
page read and write
|
|
|
|
F45947F000
|
unkown
|
page read and write
|
|
|
|
1EBF3E88000
|
unkown
|
page read and write
|
|
|
|
28E32EA0000
|
unkown
|
page readonly
|
|
|
|
32BA000
|
heap private
|
page read and write
|
|
|
|
164EAE00000
|
unkown
|
page readonly
|
|
|
|
7FF5435DE000
|
unkown
|
page readonly
|
|
|
|
7FF59F794000
|
unkown
|
page readonly
|
|
|
|
164E8D1A000
|
unkown
|
page read and write
|
|
|
|
7FF584DCB000
|
unkown
|
page readonly
|
|
|
|
7FF541F66000
|
unkown
|
page readonly
|
|
|
|
7FF51485B000
|
unkown
|
page readonly
|
|
|
|
30D0000
|
unkown
|
page readonly
|
|
|
|
7FF59F565000
|
unkown
|
page readonly
|
|
|
|
7FF553402000
|
unkown
|
page readonly
|
|
|
|
1A0097F000
|
unkown
|
page read and write
|
|
|
|
7FF59F784000
|
unkown
|
page readonly
|
|
|
|
7FF59ABB9000
|
unkown
|
page readonly
|
|
|
|
1AB97F37000
|
unkown
|
page read and write
|
|
|
|
1AB97F94000
|
unkown
|
page read and write
|
|
|
|
7FF59ADA4000
|
unkown
|
page readonly
|
|
|
|
7FF543597000
|
unkown
|
page readonly
|
|
|
|
1AB97F56000
|
unkown
|
page read and write
|
|
|
|
1AB97F4C000
|
unkown
|
page read and write
|
|
|
|
7FF59ADCE000
|
unkown
|
page readonly
|
|
|
|
1AB976E5000
|
unkown
|
page read and write
|
|
|
|
28E32E40000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC51000
|
unkown
|
page readonly
|
|
|
|
7FF541F07000
|
unkown
|
page readonly
|
|
|
|
2264C2D0000
|
unkown
|
page readonly
|
|
|
|
1AB97F48000
|
unkown
|
page read and write
|
|
|
|
16CCCB90000
|
unkown
|
page read and write
|
|
|
|
16CCE110000
|
unkown
|
page read and write
|
|
|
|
7FF59AD5A000
|
unkown
|
page readonly
|
|
|
|
16CCE510000
|
unkown
|
page read and write
|
|
|
|
2730D000000
|
unkown
|
page readonly
|
|
|
|
7FF543488000
|
unkown
|
page readonly
|
|
|
|
1AB97CB0000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
1AB97F5D000
|
unkown
|
page read and write
|
|
|
|
7FF541EF0000
|
unkown
|
page readonly
|
|
|
|
7FF59941A000
|
unkown
|
page readonly
|
|
|
|
2F60000
|
unkown
|
page readonly
|
|
|
|
7FF589DC0000
|
unkown
|
page readonly
|
|
|
|
28A64C46000
|
unkown
|
page read and write
|
|
|
|
1AB97490000
|
heap default
|
page read and write
|
|
|
|
16CCAD21000
|
unkown
|
page read and write
|
|
|
|
7FF553465000
|
unkown
|
page readonly
|
|
|
|
7FF553281000
|
unkown
|
page readonly
|
|
|
|
7FF543358000
|
unkown
|
page readonly
|
|
|
|
7FF53ECB6000
|
unkown
|
page readonly
|
|
|
|
16CCCD95000
|
unkown
|
page read and write
|
|
|
|
F458CDB000
|
unkown
|
page read and write
|
|
|
|
2264C04C000
|
unkown
|
page read and write
|
|
|
|
1AB97F56000
|
unkown
|
page read and write
|
|
|
|
1A0107B000
|
unkown
|
page read and write
|
|
|
|
7FF55244E000
|
unkown
|
page readonly
|
|
|
|
88544FE000
|
unkown
|
page read and write
|
|
|
|
1AB97F54000
|
unkown
|
page read and write
|
|
|
|
2264C03C000
|
unkown
|
page read and write
|
|
|
|
1F00FC3F000
|
unkown
|
page read and write
|
|
|
|
30AF000
|
unkown
|
page read and write
|
|
|
|
7FF541DF8000
|
unkown
|
page readonly
|
|
|
|
16CCCB90000
|
unkown
|
page readonly
|
|
|
|
1A00D7B000
|
unkown
|
page read and write
|
|
|
|
7FF58A1EC000
|
unkown
|
page readonly
|
|
|
|
7FF59F3FC000
|
unkown
|
page readonly
|
|
|
|
1A010FB000
|
unkown
|
page read and write
|
|
|
|
7FF53EDEB000
|
unkown
|
page readonly
|
|
|
|
1AB97FB5000
|
unkown
|
page read and write
|
|
|
|
28A64C52000
|
unkown
|
page read and write
|
|
|
|
7FF59F643000
|
unkown
|
page readonly
|
|
|
|
28E330A0000
|
unkown
|
page readonly
|
|
|
|
310D000
|
unkown
|
page read and write
|
|
|
|
28A64A20000
|
unkown
|
page readonly
|
|
|
|
16CCAED0000
|
unkown
|
page write copy
|
|
|
|
16CCCD58000
|
unkown
|
page read and write
|
|
|
|
6384000
|
heap private
|
page read and write
|
|
|
|
1AB97F47000
|
unkown
|
page read and write
|
|
|
|
1AB976E4000
|
unkown
|
page read and write
|
|
|
|
2851000
|
unkown
|
page readonly
|
|
|
|
F7CFBEE000
|
unkown
|
page read and write
|
|
|
|
28E32E70000
|
heap private
|
page read and write
|
|
|
|
1F00FA70000
|
heap private
|
page read and write
|
|
|
|
16CCE510000
|
unkown
|
page read and write
|
|
|
|
26D1FF40000
|
heap private
|
page read and write
|
|
|
|
16CCCF00000
|
unkown
|
page read and write
|
|
|
|
2391CCD0000
|
unkown
|
page write copy
|
|
|
|
27D5000
|
unkown
|
page readonly
|
|
|
|
2391CB13000
|
unkown
|
page read and write
|
|
|
|
164E8BF0000
|
unkown
|
page readonly
|
|
|
|
7FF543159000
|
unkown
|
page readonly
|
|
|
|
1AB97F88000
|
unkown
|
page read and write
|
|
|
|
1EBF3E49000
|
unkown
|
page read and write
|
|
|
|
27EA000
|
unkown
|
page readonly
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
2922000
|
unkown
|
page readonly
|
|
|
|
7FF5435CA000
|
unkown
|
page readonly
|
|
|
|
7FF58A0FB000
|
unkown
|
page readonly
|
|
|
|
7FF541DF3000
|
unkown
|
page readonly
|
|
|
|
7FF584E70000
|
unkown
|
page readonly
|
|
|
|
9C41B7F000
|
unkown
|
page read and write
|
|
|
|
1AB97F64000
|
unkown
|
page read and write
|
|
|
|
19E0C100000
|
unkown
|
page read and write
|
|
|
|
1AB98402000
|
unkown
|
page read and write
|
|
|
|
2F50000
|
heap default
|
page read and write
|
|
|
|
7FF53EF1F000
|
unkown
|
page readonly
|
|
|
|
1AB97F4B000
|
unkown
|
page read and write
|
|
|
|
2391CA6B000
|
unkown
|
page read and write
|
|
|
|
7FF59F6E2000
|
unkown
|
page readonly
|
|
|
|
2264BFA0000
|
unkown
|
page readonly
|
|
|
|
32C0000
|
unkown
|
page readonly
|
|
|
|
16CCAC00000
|
unkown
|
page read and write
|
|
|
|
7FF55311C000
|
unkown
|
page readonly
|
|
|
|
164E8CC1000
|
unkown
|
page read and write
|
|
|
|
1AB97F88000
|
unkown
|
page read and write
|
|
|
|
7FF59AA2A000
|
unkown
|
page readonly
|
|
|
|
7FF584DD3000
|
unkown
|
page readonly
|
|
|
|
2391CA6B000
|
unkown
|
page read and write
|
|
|
|
7FF5434C6000
|
unkown
|
page readonly
|
|
|
|
1AB97F53000
|
unkown
|
page read and write
|
|
|
|
7FF54324A000
|
unkown
|
page readonly
|
|
|
|
24F3000
|
unkown
|
page readonly
|
|
|
|
35F4A7F000
|
unkown
|
page read and write
|
|
|
|
29A3000
|
unkown
|
page readonly
|
|
|
|
1AB976AA000
|
unkown
|
page read and write
|
|
|
|
1A0087A000
|
unkown
|
page read and write
|
|
|
|
1A0137D000
|
unkown
|
page read and write
|
|
|
|
1AB97F42000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
unkown
|
page read and write
|
|
|
|
16CCE310000
|
unkown
|
page read and write
|
|
|
|
F458D5E000
|
unkown
|
page read and write
|
|
|
|
28A64C3C000
|
unkown
|
page read and write
|
|
|
|
7FF53ED93000
|
unkown
|
page readonly
|
|
|
|
164E8BA0000
|
unkown
|
page write copy
|
|
|
|
16CCE010000
|
unkown
|
page read and write
|
|
|
|
26D1FFA0000
|
heap default
|
page read and write
|
|
|
|
16CCAC7B000
|
unkown
|
page read and write
|
|
|
|
16CCCEC5000
|
unkown
|
page read and write
|
|
|
|
16CCCDD0000
|
unkown
|
page read and write
|
|
|
|
1AB98461000
|
unkown
|
page read and write
|
|
|
|
2264CD40000
|
unkown
|
page readonly
|
|
|
|
7FF552B4D000
|
unkown
|
page readonly
|
|
|
|
6380000
|
heap private
|
page read and write
|
|
|
|
2984000
|
unkown
|
page readonly
|
|
|
|
7FF59AC41000
|
unkown
|
page readonly
|
|
|
|
28F5000
|
unkown
|
page readonly
|
|
|
|
1A00B7B000
|
unkown
|
page read and write
|
|
|
|
2391CA6B000
|
unkown
|
page read and write
|
|
|
|
7FF514526000
|
unkown
|
page readonly
|
|
|
|
7FF584EBA000
|
unkown
|
page readonly
|
|
|
|
7FF5534C8000
|
unkown
|
page readonly
|
|
|
|
E1C2FFA000
|
unkown
|
page read and write
|
|
|
|
7FF58A268000
|
unkown
|
page readonly
|
|
|
|
1AB976EF000
|
unkown
|
page read and write
|
|
|
|
164EAD48000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC48000
|
unkown
|
page readonly
|
|
|
|
7FF53EECF000
|
unkown
|
page readonly
|
|
|
|
F7CFEFA000
|
unkown
|
page read and write
|
|
|
|
2264C108000
|
unkown
|
page read and write
|
|
|
|
7FF5534D1000
|
unkown
|
page readonly
|
|
|
|
7FF514997000
|
unkown
|
page readonly
|
|
|
|
2EAB000
|
unkown
|
page read and write
|
|
|
|
7FF53EF44000
|
unkown
|
page readonly
|
|
|
|
310D000
|
unkown
|
page read and write
|
|
|
|
3C57F7000
|
unkown
|
page read and write
|
|
|
|
2391C9D0000
|
unkown
|
page readonly
|
|
|
|
7FF5149BF000
|
unkown
|
page readonly
|
|
|
|
164E8CEE000
|
unkown
|
page read and write
|
|
|
|
164E8C00000
|
unkown
|
page read and write
|
|
|
|
7FF59AD8C000
|
unkown
|
page readonly
|
|
|
|
16CCCDAE000
|
unkown
|
page read and write
|
|
|
|
1EBF3E8F000
|
unkown
|
page read and write
|
|
|
|
1AB97F86000
|
unkown
|
page read and write
|
|
|
|
1AB97F00000
|
unkown
|
page read and write
|
|
|
|
7FF5534AA000
|
unkown
|
page readonly
|
|
|
|
2730CCC0000
|
heap default
|
page read and write
|
|
|
|
7FF54366A000
|
unkown
|
page readonly
|
|
|
|
1AB97F49000
|
unkown
|
page read and write
|
|
|
|
1AB97F42000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8AA000
|
unkown
|
page readonly
|
|
|
|
1A005BE000
|
unkown
|
page read and write
|
|
|
|
16CCAD2F000
|
unkown
|
page read and write
|
|
|
|
3C59FC000
|
unkown
|
page read and write
|
|
|
|
28E32CA4000
|
unkown
|
page read and write
|
|
|
|
28A64C02000
|
unkown
|
page read and write
|
|
|
|
310D000
|
unkown
|
page read and write
|
|
|
|
2971000
|
unkown
|
page readonly
|
|
|
|
28A64BE0000
|
unkown
|
page read and write
|
|
|
|
7FF53EEF0000
|
unkown
|
page readonly
|
|
|
|
16CCCB30000
|
heap private
|
page read and write
|
|
|
|
1AB97F47000
|
unkown
|
page read and write
|
|
|
|
9A9E9BA000
|
unkown
|
page read and write
|
|
|
|
16CCCE73000
|
unkown
|
page read and write
|
|
|
|
28A64C00000
|
unkown
|
page read and write
|
|
|
|
1AB97F56000
|
unkown
|
page read and write
|
|
|
|
7FF58A24A000
|
unkown
|
page readonly
|
|
|
|
2883000
|
unkown
|
page readonly
|
|
|
|
62A0000
|
unkown
|
page read and write
|
|
|
|
247E000
|
unkown
|
page readonly
|
|
|
|
1AB97F47000
|
unkown
|
page read and write
|
|
|
|
644F8FB000
|
unkown
|
page read and write
|
|
|
|
35F46FA000
|
unkown
|
page read and write
|
|
|
|
7FF514A44000
|
unkown
|
page readonly
|
|
|
|
279D000
|
unkown
|
page readonly
|
|
|
|
3025000
|
unkown
|
page read and write
|
|
|
|
7FF5AFBF7000
|
unkown
|
page readonly
|
|
|
|
164EAA90000
|
unkown
|
page read and write
|
|
|
|
32B0000
|
heap private
|
page read and write
|
|
|
|
7FF5527D5000
|
unkown
|
page readonly
|
|
|
|
9C41A7F000
|
unkown
|
page read and write
|
|
|
|
2264BF80000
|
heap default
|
page read and write
|
|
|
|
7FF542E81000
|
unkown
|
page readonly
|
|
|
|
3042000
|
unkown
|
page read and write
|
|
|
|
16CCCB80000
|
unkown
|
page readonly
|
|
|
|
7FF543483000
|
unkown
|
page readonly
|
|
|
|
1AB97F74000
|
unkown
|
page read and write
|
|
|
|
7FF53E73E000
|
unkown
|
page readonly
|
|
|
|
7FF552C37000
|
unkown
|
page readonly
|
|
|
|
7FF5534DD000
|
unkown
|
page readonly
|
|
|
|
2DDB000
|
unkown
|
page read and write
|
|
|
|
7FF552AFB000
|
unkown
|
page readonly
|
|
|
|
7FF584DB1000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC18000
|
unkown
|
page readonly
|
|
|
|
7FF58A14D000
|
unkown
|
page readonly
|
|
|
|
1AB97CB0000
|
unkown
|
page readonly
|
|
|
|
7F6E67F000
|
unkown
|
page read and write
|
|
|
|
1AB97F46000
|
unkown
|
page read and write
|
|
|
|
7FF51496B000
|
unkown
|
page readonly
|
|
|
|
27F1000
|
unkown
|
page readonly
|
|
|
|
7FF59F703000
|
unkown
|
page readonly
|
|
|
|
7FF543580000
|
unkown
|
page readonly
|
|
|
|
28C5000
|
unkown
|
page readonly
|
|
|
|
7FF59AA2F000
|
unkown
|
page readonly
|
|
|
|
1AB97F89000
|
unkown
|
page read and write
|
|
|
|
1AB98400000
|
unkown
|
page read and write
|
|
|
|
2391E4C0000
|
unkown
|
page read and write
|
|
|
|
16CCACC6000
|
unkown
|
page read and write
|
|
|
|
7FF59AD00000
|
unkown
|
page readonly
|
|
|
|
1AB97F43000
|
unkown
|
page read and write
|
|
|
|
35F48FA000
|
unkown
|
page read and write
|
|
|
|
7FF5149A4000
|
unkown
|
page readonly
|
|
|
|
1AB97F47000
|
unkown
|
page read and write
|
|
|
|
7FF58A0A3000
|
unkown
|
page readonly
|
|
|
|
7FF598C83000
|
unkown
|
page readonly
|
|
|
|
7FF53E847000
|
unkown
|
page readonly
|
|
|
|
7FF53EFE2000
|
unkown
|
page readonly
|
|
|
|
F45937F000
|
unkown
|
page read and write
|
|
|
|
7FF5149B4000
|
unkown
|
page readonly
|
|
|
|
1F0115C0000
|
unkown
|
page read and write
|
|
|
|
7FF5430E2000
|
unkown
|
page readonly
|
|
|
|
28E32C70000
|
heap default
|
page read and write
|
|
|
|
9C412BC000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC24000
|
unkown
|
page readonly
|
|
|
|
7FF5435E8000
|
unkown
|
page readonly
|
|
|
|
7F6E11B000
|
unkown
|
page read and write
|
|
|
|
1A008FA000
|
unkown
|
page read and write
|
|
|
|
7FF5148CC000
|
unkown
|
page readonly
|
|
|
|
F7D017D000
|
unkown
|
page read and write
|
|
|
|
7FF59F7B1000
|
unkown
|
page readonly
|
|
|
|
1AB97F43000
|
unkown
|
page read and write
|
|
|
|
30B0000
|
unkown
|
page read and write
|
|
|
|
7FF55348C000
|
unkown
|
page readonly
|
|
|
|
28DC000
|
unkown
|
page readonly
|
|
|
|
164EAD00000
|
unkown
|
page read and write
|
|
|
|
7FF59AD8F000
|
unkown
|
page readonly
|
|
|
|
1A004BB000
|
unkown
|
page read and write
|
|
|
|
7FF552C2C000
|
unkown
|
page readonly
|
|
|
|
1AB97F64000
|
unkown
|
page read and write
|
|
|
|
7FF584D06000
|
unkown
|
page readonly
|
|
|
|
7FF552C05000
|
unkown
|
page readonly
|
|
|
|
2779000
|
unkown
|
page readonly
|
|
|
|
2264C100000
|
unkown
|
page read and write
|
|
|
|
7FF55348F000
|
unkown
|
page readonly
|
|
|
|
1AB97F6D000
|
unkown
|
page read and write
|
|
|
|
2730CDA0000
|
unkown
|
page write copy
|
|
|
|
3049000
|
unkown
|
page read and write
|
|
|
|
644FD7F000
|
unkown
|
page read and write
|
|
|
|
7FF53EEBB000
|
unkown
|
page readonly
|
|
|
|
2F60000
|
heap default
|
page read and write
|
|
|
|
16CCD082000
|
unkown
|
page read and write
|
|
|
|
16CCAE00000
|
unkown
|
page readonly
|
|
|
|
1EBF4602000
|
unkown
|
page read and write
|
|
|
|
1AB97F43000
|
unkown
|
page read and write
|
|
|
|
16CCAC62000
|
unkown
|
page read and write
|
|
|
|
1AB97F5A000
|
unkown
|
page read and write
|
|
|
|
1EBF3E13000
|
unkown
|
page read and write
|
|
|
|
1F00FC00000
|
unkown
|
page read and write
|
|
|
|
7FF53EDF3000
|
unkown
|
page readonly
|
|
|
|
7FF59F40A000
|
unkown
|
page readonly
|
|
|
|
7FF53ECAB000
|
unkown
|
page readonly
|
|
|
|
2391CD20000
|
unkown
|
page readonly
|
|
|
|
7FF58A254000
|
unkown
|
page readonly
|
|
|
|
7FF59AD77000
|
unkown
|
page readonly
|
|
|
|
7FF584D11000
|
unkown
|
page readonly
|
|
|
|
7FF552C4A000
|
unkown
|
page readonly
|
|
|
|
16CCACB1000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC5D000
|
unkown
|
page readonly
|
|
|
|
1AB97F89000
|
unkown
|
page read and write
|
|
|
|
7FF541CB6000
|
unkown
|
page readonly
|
|
|
|
7FF552C6E000
|
unkown
|
page readonly
|
|
|
|
7FF584DD8000
|
unkown
|
page readonly
|
|
|
|
7FF54357E000
|
unkown
|
page readonly
|
|
|
|
7FF584ED0000
|
unkown
|
page readonly
|
|
|
|
164E8CF3000
|
unkown
|
page read and write
|
|
|
|
1F00FC13000
|
unkown
|
page read and write
|
|
|
|
1AB97648000
|
unkown
|
page read and write
|
|
|
|
1EBF40D0000
|
unkown
|
page readonly
|
|
|
|
2391CA5A000
|
unkown
|
page read and write
|
|
|
|
E1C317E000
|
unkown
|
page read and write
|
|
|
|
2730CDF0000
|
unkown
|
page readonly
|
|
|
|
2391CA6E000
|
unkown
|
page read and write
|
|
|
|
7FF53EAC5000
|
unkown
|
page readonly
|
|
|
|
7FF58A217000
|
unkown
|
page readonly
|
|
|
|
7FF541F1C000
|
unkown
|
page readonly
|
|
|
|
7FF543671000
|
unkown
|
page readonly
|
|
|
|
1EBF3D40000
|
unkown
|
page readonly
|
|
|
|
7FF58A276000
|
unkown
|
page readonly
|
|
|
|
7FF514977000
|
unkown
|
page readonly
|
|
|
|
7FF598C87000
|
unkown
|
page readonly
|
|
|
|
1AB97F65000
|
unkown
|
page read and write
|
|
|
|
3C5675000
|
unkown
|
page read and write
|
|
|
|
1A0127D000
|
unkown
|
page read and write
|
|
|
|
7FF59ADC8000
|
unkown
|
page readonly
|
|
|
|
C4B000
|
unkown
|
page readonly
|
|
|
|
7FF59AC63000
|
unkown
|
page readonly
|
|
|
|
7FF553498000
|
unkown
|
page readonly
|
|
|
|
2264C000000
|
unkown
|
page read and write
|
|
|
|
2264C802000
|
unkown
|
page read and write
|
|
|
|
7FF53EEBF000
|
unkown
|
page readonly
|
|
|
|
7FF553552000
|
unkown
|
page readonly
|
|
|
|
7FF53EF07000
|
unkown
|
page readonly
|
|
|
|
28E32C9F000
|
unkown
|
page read and write
|
|
|
|
7FF59F648000
|
unkown
|
page readonly
|
|
|
|
2730CE58000
|
unkown
|
page read and write
|
|
|
|
7FF58A16C000
|
unkown
|
page readonly
|
|
|
|
7FF53E9CE000
|
unkown
|
page readonly
|
|
|
|
7FF59EF9D000
|
unkown
|
page readonly
|
|
|
|
2264C102000
|
unkown
|
page read and write
|
|
|
|
3129000
|
unkown
|
page read and write
|
|
|
|
7FF59ADBE000
|
unkown
|
page readonly
|
|
|
|
7FF543543000
|
unkown
|
page readonly
|
|
|
|
16CCCD9C000
|
unkown
|
page read and write
|
|
|
|
16CCADA1000
|
unkown
|
page read and write
|
|
|
|
7FF584B9F000
|
unkown
|
page readonly
|
|
|
|
2DD7000
|
unkown
|
page read and write
|
|
|
|
28A64D00000
|
unkown
|
page read and write
|
|
|
|
19E0D9A0000
|
unkown
|
page read and write
|
|
|
|
16CCCD51000
|
unkown
|
page read and write
|
|
|
|
2F30000
|
unkown
|
page readonly
|
|
|
|
28E9000
|
unkown
|
page readonly
|
|
|
|
7FF552C0B000
|
unkown
|
page readonly
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
2391CA6B000
|
unkown
|
page read and write
|
|
|
|
1AB9764A000
|
unkown
|
page read and write
|
|
|
|
27D7000
|
unkown
|
page readonly
|
|
|
|
F45907B000
|
unkown
|
page read and write
|
|
|
|
7FF584D21000
|
unkown
|
page readonly
|
|
|
|
7FF53EB07000
|
unkown
|
page readonly
|
|
|
|
7FF59F79E000
|
unkown
|
page readonly
|
|
|
|
16CCCB20000
|
unkown
|
page read and write
|
|
|
|
16CCE210000
|
unkown
|
page read and write
|
|
|
|
1AB9764B000
|
unkown
|
page read and write
|
|
|
|
1AB97F64000
|
unkown
|
page read and write
|
|
|
|
1A00FFB000
|
unkown
|
page read and write
|
|
|
|
1AB97649000
|
unkown
|
page read and write
|
|
|
|
16CCCEA4000
|
unkown
|
page read and write
|
|
|
|
16CCCDBF000
|
unkown
|
page read and write
|
|
|
|
16CCACC6000
|
unkown
|
page read and write
|
|
|
|
1AB97FC6000
|
unkown
|
page read and write
|
|
|
|
7FF5AF441000
|
unkown
|
page readonly
|
|
|
|
7FF54324F000
|
unkown
|
page readonly
|
|
|
|
30EA000
|
heap default
|
page read and write
|
|
|
|
7FF51495A000
|
unkown
|
page readonly
|
|
|
|
7FF541E92000
|
unkown
|
page readonly
|
|
|
|
16CCCF43000
|
unkown
|
page read and write
|
|
|
|
7FF514803000
|
unkown
|
page readonly
|
|
|
|
7FF53ED24000
|
unkown
|
page readonly
|
|
|
|
16CCE310000
|
unkown
|
page read and write
|
|
|
|
16CCAC13000
|
unkown
|
page read and write
|
|
|
|
16CCCD8D000
|
unkown
|
page read and write
|
|
|
|
7FF5AFBDA000
|
unkown
|
page readonly
|
|
|
|
48D0000
|
unkown
|
page readonly
|
|
|
|
1AB976EF000
|
unkown
|
page read and write
|
|
|
|
1AB97F38000
|
unkown
|
page read and write
|
|
|
|
7FF58A2EA000
|
unkown
|
page readonly
|
|
|
|
164E8AC0000
|
heap default
|
page read and write
|
|
|
|
28FF000
|
unkown
|
page readonly
|
|
|
|
16CCACF6000
|
unkown
|
page read and write
|
|
|
|
26D20000000
|
unkown
|
page read and write
|
|
|
|
7FF58A051000
|
unkown
|
page readonly
|
|
|
|
7FF53EEEE000
|
unkown
|
page readonly
|
|
|
|
7FF584B9A000
|
unkown
|
page readonly
|
|
|
|
1AB97600000
|
unkown
|
page read and write
|
|
|
|
7FF58472D000
|
unkown
|
page readonly
|
|
|
|
7FF584F07000
|
unkown
|
page readonly
|
|
|
|
7F6E5FF000
|
unkown
|
page read and write
|
|
|
|
1AB97F47000
|
unkown
|
page read and write
|
|
|
|
7FF584F14000
|
unkown
|
page readonly
|
|
|
|
7FF59939E000
|
unkown
|
page readonly
|
|
|
|
7FF5435C4000
|
unkown
|
page readonly
|
|
|
|
9A9EE7E000
|
unkown
|
page read and write
|
|
|
|
7FF599368000
|
unkown
|
page readonly
|
|
|
|
3111000
|
unkown
|
page read and write
|
|
|
|
2FD0000
|
unkown
|
page read and write
|
|
|
|
7FF53EF3A000
|
unkown
|
page readonly
|
|
|
|
7FF5435F9000
|
unkown
|
page readonly
|
|
|
|
2391CA00000
|
unkown
|
page read and write
|
|
|
|
644FE78000
|
unkown
|
page read and write
|
|
|
|
7FF552CBD000
|
unkown
|
page readonly
|
|
|
|
7FF5534B4000
|
unkown
|
page readonly
|
|
|
|
7FF552C5F000
|
unkown
|
page readonly
|
|
|
|
16CCE210000
|
unkown
|
page read and write
|
|
|
|
60781AB000
|
unkown
|
page read and write
|
|
|
|
32BA000
|
heap private
|
page read and write
|
|
|
|
1AB97613000
|
unkown
|
page read and write
|
|
|
|
16CCD082000
|
unkown
|
page read and write
|
|
|
|
27EF000
|
unkown
|
page readonly
|
|
|
|
7FF541751000
|
unkown
|
page readonly
|
|
|
|
28A64C49000
|
unkown
|
page read and write
|
|
|
|
1AB975C0000
|
unkown
|
page readonly
|
|
|
|
3C557B000
|
unkown
|
page read and write
|
|
|
|
7FF55321B000
|
unkown
|
page readonly
|
|
|
|
1AB97F49000
|
unkown
|
page read and write
|
|
|
|
1A00AFA000
|
unkown
|
page read and write
|
|
|
|
1AB98000000
|
unkown
|
page readonly
|
|
|
|
1AB97F5C000
|
unkown
|
page read and write
|
|
|
|
7FF584CAF000
|
unkown
|
page readonly
|
|
|
|
1AB97F71000
|
unkown
|
page read and write
|
|
|
|
7FF58A200000
|
unkown
|
page readonly
|
|
|
|
35F47FF000
|
unkown
|
page read and write
|
|
|
|
1AB98402000
|
unkown
|
page read and write
|
|
|
|
16CCCDE1000
|
unkown
|
page read and write
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
644FB77000
|
unkown
|
page read and write
|
|
|
|
1F00FAE0000
|
unkown
|
page readonly
|
|
|
|
1AB97CD0000
|
unkown
|
page readonly
|
|
|
|
7FF542DE1000
|
unkown
|
page readonly
|
|
|
|
1AB97686000
|
unkown
|
page read and write
|
|
|
|
2391CA69000
|
unkown
|
page read and write
|
|
|
|
7FF58A279000
|
unkown
|
page readonly
|
|
|
|
7FF552CF1000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC0F000
|
unkown
|
page readonly
|
|
|
|
7FF541F34000
|
unkown
|
page readonly
|
|
|
|
7FF59AD60000
|
unkown
|
page readonly
|
|
|
|
7FF584E62000
|
unkown
|
page readonly
|
|
|
|
7FF541F28000
|
unkown
|
page readonly
|
|
|
|
7FF584FC1000
|
unkown
|
page readonly
|
|
|
|
278E000
|
unkown
|
page readonly
|
|
|
|
27BC000
|
unkown
|
page readonly
|
|
|
|
2911000
|
unkown
|
page readonly
|
|
|
|
7FF51498F000
|
unkown
|
page readonly
|
|
|
|
16CCACEF000
|
unkown
|
page read and write
|
|
|
|
28A3000
|
unkown
|
page readonly
|
|
|
|
2264C070000
|
unkown
|
page read and write
|
|
|
|
7FF53EF1C000
|
unkown
|
page readonly
|
|
|
|
7FF599414000
|
unkown
|
page readonly
|
|
|
|
19E0C000000
|
unkown
|
page read and write
|
|
|
|
7FF541FE1000
|
unkown
|
page readonly
|
|
|
|
2855000
|
unkown
|
page readonly
|
|
|
|
7FF5AFBA3000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC34000
|
unkown
|
page readonly
|
|
|
|
16CCCE84000
|
unkown
|
page read and write
|
|
|
|
7FF59AB1B000
|
unkown
|
page readonly
|
|
|
|
7FF514A51000
|
unkown
|
page readonly
|
|
|
|
F7D00F9000
|
unkown
|
page read and write
|
|
|
|
7FF541DD1000
|
unkown
|
page readonly
|
|
|
|
16CCAC6A000
|
unkown
|
page read and write
|
|
|
|
7FF58A244000
|
unkown
|
page readonly
|
|
|
|
26D20029000
|
unkown
|
page read and write
|
|
|
|
7F6E47A000
|
unkown
|
page read and write
|
|
|
|
1AB97F6D000
|
unkown
|
page read and write
|
|
|
|
164EB010000
|
unkown
|
page read and write
|
|
|
|
7FF541EB3000
|
unkown
|
page readonly
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
88545FA000
|
unkown
|
page read and write
|
|
|
|
1EBF3E3C000
|
unkown
|
page read and write
|
|
|
|
7FF552B53000
|
unkown
|
page readonly
|
|
|
|
7FF514520000
|
unkown
|
page readonly
|
|
|
|
7FF54174D000
|
unkown
|
page readonly
|
|
|
|
7FF5847D1000
|
unkown
|
page readonly
|
|
|
|
1A00F7B000
|
unkown
|
page read and write
|
|
|
|
16CCCD86000
|
unkown
|
page read and write
|
|
|
|
1A00E7A000
|
unkown
|
page read and write
|
|
|
|
16CCCD13000
|
unkown
|
page read and write
|
|
|
|
7FF5149CE000
|
unkown
|
page readonly
|
|
|
|
7FF59F740000
|
unkown
|
page readonly
|
|
|
|
2730E8B0000
|
unkown
|
page readonly
|
|
|
|
16CCAD02000
|
unkown
|
page read and write
|
|
|
|
1A011FB000
|
unkown
|
page read and write
|
|
|
|
7FF599422000
|
unkown
|
page readonly
|
|
|
|
164E8CB9000
|
unkown
|
page read and write
|
|
|
|
16CCE010000
|
unkown
|
page read and write
|
|
|
|
28FD000
|
unkown
|
page readonly
|
|
|
|
2730EC10000
|
unkown
|
page read and write
|
|
|
|
1AB97F6C000
|
unkown
|
page read and write
|
|
|
|
7FF584B8C000
|
unkown
|
page readonly
|
|
|
|
16CCCE41000
|
unkown
|
page read and write
|
|
|
|
7FF553423000
|
unkown
|
page readonly
|
|
|
|
19E0DAA0000
|
unkown
|
page readonly
|
|
|
|
1AB97F44000
|
unkown
|
page read and write
|
|
|
|
7FF59EFA1000
|
unkown
|
page readonly
|
|
|
|
2613000
|
unkown
|
page readonly
|
|
|
|
7FF53ED41000
|
unkown
|
page readonly
|
|
|
|
27C9000
|
unkown
|
page readonly
|
|
|
|
28A64AF0000
|
unkown
|
page readonly
|
|
|
|
28A64BD0000
|
unkown
|
page readonly
|
|
|
|
1A013FE000
|
unkown
|
page read and write
|
|
|
|
7FF53EE5C000
|
unkown
|
page readonly
|
|
|
|
7FF552C76000
|
unkown
|
page readonly
|
|
|
|
9A9EDFA000
|
unkown
|
page read and write
|
|
|
|
7FF53EB05000
|
unkown
|
page readonly
|
|
|
|
7FF5AFBDE000
|
unkown
|
page readonly
|
|
|
|
7FF59F7B9000
|
unkown
|
page readonly
|
|
|
|
7FF5433C1000
|
unkown
|
page readonly
|
|
|
|
164E8C13000
|
unkown
|
page read and write
|
|
|
|
7FF53EA5E000
|
unkown
|
page readonly
|
|
|
|
7FF59ADDD000
|
unkown
|
page readonly
|
|
|
|
7FF541D15000
|
unkown
|
page readonly
|
|
|
|
16CCAD13000
|
unkown
|
page read and write
|
|
|
|
2F40000
|
unkown
|
page readonly
|
|
|
|
7FF59F73E000
|
unkown
|
page readonly
|
|
|
|
7FF58A2E4000
|
unkown
|
page readonly
|
|
|
|
7FF55345A000
|
unkown
|
page readonly
|
|
|
|
6390000
|
unkown
|
page read and write
|
|
|
|
7FF552CF2000
|
unkown
|
page readonly
|
|
|
|
1AB97F67000
|
unkown
|
page read and write
|
|
|
|
7FF584EFC000
|
unkown
|
page readonly
|
|
|
|
7F6E4FE000
|
unkown
|
page read and write
|
|
|
|
7FF543664000
|
unkown
|
page readonly
|
|
|
|
E1C2F7E000
|
unkown
|
page read and write
|
|
|
|
1AB97F53000
|
unkown
|
page read and write
|
|
|
|
7FF5433D9000
|
unkown
|
page readonly
|
|
|
|
7FF584EFF000
|
unkown
|
page readonly
|
|
|
|
292B000
|
unkown
|
page readonly
|
|
|
|
19E0C002000
|
unkown
|
page read and write
|
|
|
|
7FF584CF1000
|
unkown
|
page readonly
|
|
|
|
28A64C29000
|
unkown
|
page read and write
|
|
|
|
2264BF20000
|
heap private
|
page read and write
|
|
|
|
2264C013000
|
unkown
|
page read and write
|
|
|
|
27A5000
|
unkown
|
page readonly
|
|
|
|
7FF58A25F000
|
unkown
|
page readonly
|
|
|
|
16CCCD7C000
|
unkown
|
page read and write
|
|
|
|
7FF53EF27000
|
unkown
|
page readonly
|
|
|
|
26D204D0000
|
unkown
|
page readonly
|
|
|
|
1AB9764D000
|
unkown
|
page read and write
|
|
|
|
7FF5AFA05000
|
unkown
|
page readonly
|
|
|
|
2391CA6E000
|
unkown
|
page read and write
|
|
|
|
7FF599421000
|
unkown
|
page readonly
|
|
|
|
7FF59938E000
|
unkown
|
page readonly
|
|
|
|
2E00000
|
unkown
|
page readonly
|
|
|
|
19E0C057000
|
unkown
|
page read and write
|
|
|
|
32B7000
|
heap private
|
page read and write
|
|
|
|
28CC000
|
unkown
|
page readonly
|
|
|
|
7FF552BFA000
|
unkown
|
page readonly
|
|
|
|
7FF59AE52000
|
unkown
|
page readonly
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
1AB97C60000
|
unkown
|
page write copy
|
|
|
|
7FF5149C8000
|
unkown
|
page readonly
|
|
|
|
16CCCE12000
|
unkown
|
page read and write
|
|
|
|
7FF54354B000
|
unkown
|
page readonly
|
|
|
|
7FF58A26E000
|
unkown
|
page readonly
|
|
|
|
1AB97F70000
|
unkown
|
page read and write
|
|
|
|
2883000
|
unkown
|
page readonly
|
|
|
|
1AB97713000
|
unkown
|
page read and write
|
|
|
|
6110000
|
unkown
|
page readonly
|
|
|
|
1AB97FD9000
|
unkown
|
page read and write
|
|
|
|
7FF59F73A000
|
unkown
|
page readonly
|
|
|
|
1AB97F40000
|
unkown
|
page read and write
|
|
|
|
7FF552BEC000
|
unkown
|
page readonly
|
|
|
|
7FF59F778000
|
unkown
|
page readonly
|
|
|
|
7FF53EA62000
|
unkown
|
page readonly
|
|
|
|
2F3E000
|
unkown
|
page read and write
|
|
|
|
16CCABC0000
|
heap default
|
page read and write
|
|
|
|
28E32D70000
|
unkown
|
page readonly
|
|
|
|
7FF53EEF5000
|
unkown
|
page readonly
|
|
|
|
16CCE410000
|
unkown
|
page read and write
|
|
|
|
2B4A000
|
unkown
|
page read and write
|
|
|
|
164EAA10000
|
unkown
|
page read and write
|
|
|
|
26D20002000
|
unkown
|
page read and write
|
|
|
|
64500F8000
|
unkown
|
page read and write
|
|
|
|
1AB976C8000
|
unkown
|
page read and write
|
|
|
|
1AB97F40000
|
unkown
|
page read and write
|
|
|
|
2264C04B000
|
unkown
|
page read and write
|
|
|
|
1A0053F000
|
unkown
|
page read and write
|
|
|
|
2730CC60000
|
heap private
|
page read and write
|
|
|
|
7FF584F1A000
|
unkown
|
page readonly
|
|
|
|
310E000
|
unkown
|
page read and write
|
|
|
|
1A0117A000
|
unkown
|
page read and write
|
|
|
|
7FF53EF5E000
|
unkown
|
page readonly
|
|
|
|
7FF552BFE000
|
unkown
|
page readonly
|
|
|
|
7FF5433A1000
|
unkown
|
page readonly
|
|
|
|
7FF59AB26000
|
unkown
|
page readonly
|
|
|
|
2730CE00000
|
unkown
|
page read and write
|
|
|
|
16CCCF43000
|
unkown
|
page read and write
|
|
|
|
1AB976B0000
|
unkown
|
page read and write
|
|
|
|
16CCCDE5000
|
unkown
|
page read and write
|
|
|
|
16CCAD71000
|
unkown
|
page read and write
|
|
|
|
26D1FFB0000
|
unkown
|
page write copy
|
|
|
|
3035000
|
unkown
|
page read and write
|
|
|
|
7FF584C8B000
|
unkown
|
page readonly
|
|
|
|
1AB97F43000
|
unkown
|
page read and write
|
|
|
|
1EBF3E6E000
|
unkown
|
page read and write
|
|
|
|
7FF584AA9000
|
unkown
|
page readonly
|
|
|
|
7FF53EDEE000
|
unkown
|
page readonly
|
|
|
|
7FF59ADD6000
|
unkown
|
page readonly
|
|
|
|
1EBF3E4D000
|
unkown
|
page read and write
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
7FF584F24000
|
unkown
|
page readonly
|
|
|
|
1AB97F54000
|
unkown
|
page read and write
|
|
|
|
1AB97F47000
|
unkown
|
page read and write
|
|
|
|
1F00FC56000
|
unkown
|
page read and write
|
|
|
|
2264CA00000
|
unkown
|
page readonly
|
|
|
|
7F6E19F000
|
unkown
|
page read and write
|
|
|
|
19E0BE80000
|
unkown
|
page readonly
|
|
|
|
2662000
|
unkown
|
page readonly
|
|
|
|
7FF584FC2000
|
unkown
|
page readonly
|
|
|
|
7FF584FBA000
|
unkown
|
page readonly
|
|
|
|
2806000
|
unkown
|
page readonly
|
|
|
|
7FF59AD5E000
|
unkown
|
page readonly
|
|
|
|
2878000
|
unkown
|
page readonly
|
|
|
|
7FF53EE92000
|
unkown
|
page readonly
|
|
|
|
7FF59AD98000
|
unkown
|
page readonly
|
|
|
|
19E0BE70000
|
heap default
|
page read and write
|
|
|
|
7FF59AD02000
|
unkown
|
page readonly
|
|
|
|
1F0116C0000
|
unkown
|
page readonly
|
|
|
|
164E8C55000
|
unkown
|
page read and write
|
|
|
|
16CCE510000
|
unkown
|
page read and write
|
|
|
|
7FF5AFAE3000
|
unkown
|
page readonly
|
|
|
|
164E8C3F000
|
unkown
|
page read and write
|
|
|
|
7FF541F58000
|
unkown
|
page readonly
|
|
|
|
7FF53EF4F000
|
unkown
|
page readonly
|
|
|
|
1F00FC29000
|
unkown
|
page read and write
|
|
|
|
9C4187E000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC0C000
|
unkown
|
page readonly
|
|
|
|
7FF5435D4000
|
unkown
|
page readonly
|
|
|
|
280B000
|
unkown
|
page readonly
|
|
|
|
7FF53EEDC000
|
unkown
|
page readonly
|
|
|
|
1AB97430000
|
heap private
|
page read and write
|
|
|
|
26D20013000
|
unkown
|
page read and write
|
|
|
|
1AB976C2000
|
unkown
|
page read and write
|
|
|
|
7FF541E90000
|
unkown
|
page readonly
|
|
|
|
28A64C4D000
|
unkown
|
page read and write
|
|
|
|
7FF552C00000
|
unkown
|
page readonly
|
|
|
|
1AB97F5A000
|
unkown
|
page read and write
|
|
|
|
7FF54354F000
|
unkown
|
page readonly
|
|
|
|
7FF59F757000
|
unkown
|
page readonly
|
|
|
|
7FF5993AD000
|
unkown
|
page readonly
|
|
|
|
16CCCD4D000
|
unkown
|
page read and write
|
|
|
|
16CCAC29000
|
unkown
|
page read and write
|
|
|
|
2264BF90000
|
unkown
|
page readonly
|
|
|
|
7FF589DD5000
|
unkown
|
page readonly
|
|
|
|
164E8CDA000
|
unkown
|
page read and write
|
|
|
|
2391CA6D000
|
unkown
|
page read and write
|
|
|
|
164E8E00000
|
unkown
|
page readonly
|
|
|
|
7FF552CE4000
|
unkown
|
page readonly
|
|
|
|
16CCE510000
|
unkown
|
page read and write
|
|
|
|
2730CF02000
|
unkown
|
page read and write
|
|
|
|
16CCAD40000
|
unkown
|
page read and write
|
|
|
|
644FFFE000
|
unkown
|
page read and write
|
|
|
|
16CCCD95000
|
unkown
|
page read and write
|
|
|
|
620E000
|
unkown
|
page read and write
|
|
|
|
30E0000
|
heap default
|
page read and write
|
|
|
|
7FF58A1FE000
|
unkown
|
page readonly
|
|
|
|
28E32C81000
|
unkown
|
page read and write
|
|
|
|
1AB97F7B000
|
unkown
|
page read and write
|
|
|
|
1AB97F53000
|
unkown
|
page read and write
|
|
|
|
2391E5C0000
|
unkown
|
page readonly
|
|
|
|
2391C960000
|
heap private
|
page read and write
|
|
|
|
607847E000
|
unkown
|
page read and write
|
|
|
|
310A000
|
unkown
|
page read and write
|
|
|
|
7FF53EFE1000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8B7000
|
unkown
|
page readonly
|
|
|
|
16CCE110000
|
unkown
|
page read and write
|
|
|
|
7FF552A51000
|
unkown
|
page readonly
|
|
|
|
F459277000
|
unkown
|
page read and write
|
|
|
|
1AB976E5000
|
unkown
|
page read and write
|
|
|
|
1AB97F47000
|
unkown
|
page read and write
|
|
|
|
7FF53EE90000
|
unkown
|
page readonly
|
|
|
|
1AB97FC9000
|
unkown
|
page read and write
|
|
|
|
7FF5433D1000
|
unkown
|
page readonly
|
|
|
|
302E000
|
unkown
|
page read and write
|
|
|
|
28F7000
|
unkown
|
page readonly
|
|
|
|
1AB97F47000
|
unkown
|
page read and write
|
|
|
|
2264BFB0000
|
unkown
|
page read and write
|
|
|
|
164EAA90000
|
unkown
|
page read and write
|
|
|
|
164EA6B0000
|
unkown
|
page readonly
|
|
|
|
1AB976EF000
|
unkown
|
page read and write
|
|
|
|
16CCCB90000
|
unkown
|
page read and write
|
|
|
|
1AB97F98000
|
unkown
|
page read and write
|
|
|
|
65C0000
|
unkown
|
page read and write
|
|
|
|
2391CA02000
|
unkown
|
page read and write
|
|
|
|
1EBF3D30000
|
heap default
|
page read and write
|
|
|
|
7FF59F621000
|
unkown
|
page readonly
|
|
|
|
7FF53EA52000
|
unkown
|
page readonly
|
|
|
|
28A64D13000
|
unkown
|
page read and write
|
|
|
|
7FF584CF5000
|
unkown
|
page readonly
|
|
|
|
28E32C86000
|
unkown
|
page read and write
|
|
|
|
16CCCC02000
|
unkown
|
page read and write
|
|
|
|
2926000
|
unkown
|
page readonly
|
|
|
|
1AB97F42000
|
unkown
|
page read and write
|
|
|
|
32B7000
|
heap private
|
page read and write
|
|
|
|
3C547E000
|
unkown
|
page read and write
|
|
|
|
7FF59F78A000
|
unkown
|
page readonly
|
|
|
|
7FF5148AD000
|
unkown
|
page readonly
|
|
|
|
7FF543257000
|
unkown
|
page readonly
|
|
|
|
7FF59935F000
|
unkown
|
page readonly
|
|
|
|
7FF5433B6000
|
unkown
|
page readonly
|
|
|
|
164EAA20000
|
unkown
|
page readonly
|
|
|
|
7FF599384000
|
unkown
|
page readonly
|
|
|
|
7FF5AFCCA000
|
unkown
|
page readonly
|
|
|
|
7FF59A5C1000
|
unkown
|
page readonly
|
|
|
|
1EBF3F13000
|
unkown
|
page read and write
|
|
|
|
2730CE41000
|
unkown
|
page read and write
|
|
|
|
6274000
|
heap private
|
page read and write
|
|
|
|
7FF552BEA000
|
unkown
|
page readonly
|
|
|
|
35F49FD000
|
unkown
|
page read and write
|
|
|
|
7FF541F44000
|
unkown
|
page readonly
|
|
|
|
7FF59AA37000
|
unkown
|
page readonly
|
|
|
|
28E0000
|
unkown
|
page readonly
|
|
|
|
16CCCDF3000
|
unkown
|
page read and write
|
|
|
|
1AB97F5A000
|
unkown
|
page read and write
|
|
|
|
7FF514535000
|
unkown
|
page readonly
|
|
|
|
300A000
|
heap default
|
page read and write
|
|
|
|
2391CA6B000
|
unkown
|
page read and write
|
|
|
|
9C413BE000
|
unkown
|
page read and write
|
|
|
|
2998000
|
unkown
|
page readonly
|
|
|
|
7FF552C17000
|
unkown
|
page readonly
|
|
|
|
7FF543512000
|
unkown
|
page readonly
|
|
|
|
7FF58A2F2000
|
unkown
|
page readonly
|
|
|
|
1F00FE00000
|
unkown
|
page readonly
|
|
|
|
3000000
|
heap default
|
page read and write
|
|
|
|
7FF59F7AE000
|
unkown
|
page readonly
|
|
|
|
2FAE000
|
unkown
|
page read and write
|
|
|
|
28A65740000
|
unkown
|
page readonly
|
|
|
|
27DD000
|
unkown
|
page readonly
|
|
|
|
7FF53EC67000
|
unkown
|
page readonly
|
|
|
|
7FF552977000
|
unkown
|
page readonly
|
|
|
|
1AB97F67000
|
unkown
|
page read and write
|
|
|
|
2264C090000
|
unkown
|
page read and write
|
|
|
|
2EE0000
|
unkown
|
page readonly
|
|
|
|
7FF5527C6000
|
unkown
|
page readonly
|
|
|
|
16CCE000000
|
unkown
|
page read and write
|
|
|
|
7FF541F4E000
|
unkown
|
page readonly
|
|
|
|
7FF59F76C000
|
unkown
|
page readonly
|
|
|
|
16CCAC64000
|
unkown
|
page read and write
|
|
|
|
1EBF3E4F000
|
unkown
|
page read and write
|
|
|
|
290F000
|
unkown
|
page readonly
|
|
|
|
1AB97FC6000
|
unkown
|
page read and write
|
|
|
|
26D2003F000
|
unkown
|
page read and write
|
|
|
|
7FF59F7BD000
|
unkown
|
page readonly
|
|
|
|
1AB97F42000
|
unkown
|
page read and write
|
|
|
|
2872000
|
unkown
|
page readonly
|
|
|
|
7FF552AE1000
|
unkown
|
page readonly
|
|
|
|
1A00EFC000
|
unkown
|
page read and write
|
|
|
|
16CCE410000
|
unkown
|
page read and write
|
|
|
|
1AB97F46000
|
unkown
|
page read and write
|
|
|
|
7FF59AE4A000
|
unkown
|
page readonly
|
|
|
|
7FF59F76F000
|
unkown
|
page readonly
|
|
|
|
7FF53EF66000
|
unkown
|
page readonly
|
|
|
|
1AB98402000
|
unkown
|
page read and write
|
|
|
|
1AB9763C000
|
unkown
|
page read and write
|
|
|
|
35F487A000
|
unkown
|
page read and write
|
|
|
|
35F43AE000
|
unkown
|
page read and write
|
|
|
|
7FF5435B7000
|
unkown
|
page readonly
|
|
|
|
1A009FA000
|
unkown
|
page read and write
|
|
|
|
7FF55312A000
|
unkown
|
page readonly
|
|
|
|
2391CC00000
|
unkown
|
page readonly
|
|
|
|
1EBF3E00000
|
unkown
|
page read and write
|
|
|
|
7FF5149D9000
|
unkown
|
page readonly
|
|
|
|
2391CA6B000
|
unkown
|
page read and write
|
|
|
|
60785FE000
|
unkown
|
page read and write
|
|
|
|
1AB97708000
|
unkown
|
page read and write
|
|
|
|
7FF584FB4000
|
unkown
|
page readonly
|
|
|
|
7FF552C44000
|
unkown
|
page readonly
|
|
|
|
1AB976EC000
|
unkown
|
page read and write
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
3029000
|
unkown
|
page read and write
|
|
|
|
7FF543522000
|
unkown
|
page readonly
|
|
|
|
28E32C9F000
|
unkown
|
page read and write
|
|
|
|
1AB975F0000
|
unkown
|
page readonly
|
|
|
|
7FF59AC5B000
|
unkown
|
page readonly
|
|
|
|
7FF58A153000
|
unkown
|
page readonly
|
|
|
|
2264C052000
|
unkown
|
page read and write
|
|
|
|
28A64C13000
|
unkown
|
page read and write
|
|
|
|
7FF59ADAA000
|
unkown
|
page readonly
|
|
|
|
7FF5149D6000
|
unkown
|
page readonly
|
|
|
|
F7D007E000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC2A000
|
unkown
|
page readonly
|
|
|
|
16CCD002000
|
unkown
|
page read and write
|
|
|
|
7FF5146D7000
|
unkown
|
page readonly
|
|
|
|
7FF589F77000
|
unkown
|
page readonly
|
|
|
|
644F97F000
|
unkown
|
page read and write
|
|
|
|
7FF5148B3000
|
unkown
|
page readonly
|
|
|
|
6270000
|
heap private
|
page read and write
|
|
|
|
7FF5AFB82000
|
unkown
|
page readonly
|
|
|
|
7FF5141A8000
|
unkown
|
page readonly
|
|
|
|
1AB97FD9000
|
unkown
|
page read and write
|
|
|
|
28A64C4F000
|
unkown
|
page read and write
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
27DF000
|
unkown
|
page readonly
|
|
|
|
16CCCE00000
|
unkown
|
page read and write
|
|
|
|
16CCCD4E000
|
unkown
|
page read and write
|
|
|
|
7FF584CA8000
|
unkown
|
page readonly
|
|
|
|
7FF55354A000
|
unkown
|
page readonly
|
|
|
|
1AB97CC0000
|
unkown
|
page read and write
|
|
|
|
7FF541F6D000
|
unkown
|
page readonly
|
|
|
|
4B60000
|
unkown
|
page readonly
|
|
|
|
7FF584E9B000
|
unkown
|
page readonly
|
|
|
|
7FF541FD4000
|
unkown
|
page readonly
|
|
|
|
1AB97F43000
|
unkown
|
page read and write
|
|
|
|
7FF53EEC4000
|
unkown
|
page readonly
|
|
|
|
7FF59AB85000
|
unkown
|
page readonly
|
|
|
|
7FF584EE7000
|
unkown
|
page readonly
|
|
|
|
1AB97F53000
|
unkown
|
page read and write
|
|
|
|
19E0C200000
|
unkown
|
page readonly
|
|
|
|
27C0000
|
unkown
|
page readonly
|
|
|
|
7FF5AFBEB000
|
unkown
|
page readonly
|
|
|
|
2899000
|
unkown
|
page readonly
|
|
|
|
7FF584EA4000
|
unkown
|
page readonly
|
|
|
|
26D202D0000
|
unkown
|
page readonly
|
|
|
|
1AB97F64000
|
unkown
|
page read and write
|
|
|
|
16CCAD20000
|
unkown
|
page read and write
|
|
|
|
19E0C029000
|
unkown
|
page read and write
|
|
|
|
164EAA30000
|
heap private
|
page read and write
|
|
|
|
7FF5433A5000
|
unkown
|
page readonly
|
|
|
|
7FF55312F000
|
unkown
|
page readonly
|
|
|
|
7FF5434CD000
|
unkown
|
page readonly
|
|
|
|
7FF541FE2000
|
unkown
|
page readonly
|
|
|
|
164E8C81000
|
unkown
|
page read and write
|
|
|
|
F459175000
|
unkown
|
page read and write
|
|
|
|
164EAD88000
|
unkown
|
page read and write
|
|
|
|
7FF58A205000
|
unkown
|
page readonly
|
|
|
|
16CCC7C0000
|
unkown
|
page readonly
|
|
|
|
7FF5993A9000
|
unkown
|
page readonly
|
|
|
|
3C56FE000
|
unkown
|
page read and write
|
|
|
|
2264C029000
|
unkown
|
page read and write
|
|
|
|
7FF5435EE000
|
unkown
|
page readonly
|
|
|
|
1EBF3D60000
|
unkown
|
page read and write
|
|
|
|
1AB976D7000
|
unkown
|
page read and write
|
|
|
|
3129000
|
unkown
|
page read and write
|
|
|
|
3025000
|
unkown
|
page read and write
|
|
|
|
E1C30FF000
|
unkown
|
page read and write
|
|
|
|
7FF58A0E1000
|
unkown
|
page readonly
|
|
|
|
1EBF3F08000
|
unkown
|
page read and write
|
|
|
|
2391C9C0000
|
heap default
|
page read and write
|
|
|
|
2391CA29000
|
unkown
|
page read and write
|
|
|
|
7FF5AF89C000
|
unkown
|
page readonly
|
|
|
|
16CCAB60000
|
heap private
|
page read and write
|
|
|
|
7FF59F561000
|
unkown
|
page readonly
|
|
|
|
164EAD02000
|
unkown
|
page read and write
|
|
|
|
7FF59F74B000
|
unkown
|
page readonly
|
|
|
|
26D20200000
|
unkown
|
page readonly
|
|
|
|
1AB97F24000
|
unkown
|
page read and write
|
|
|
|
7FF552B64000
|
unkown
|
page readonly
|
|
|
|
6280000
|
unkown
|
page readonly
|
|
|
|
290A000
|
unkown
|
page readonly
|
|
|
|
7FF584F3E000
|
unkown
|
page readonly
|
|
|
|
2F50000
|
unkown
|
page read and write
|
|
|
|
29A3000
|
unkown
|
page readonly
|
|
|
|
1AB97647000
|
unkown
|
page read and write
|
|
|
|
1AB97670000
|
unkown
|
page read and write
|
|
|
|
7FF59F506000
|
unkown
|
page readonly
|
|
|
|
7FF58A20B000
|
unkown
|
page readonly
|
|
|
|
2864000
|
unkown
|
page readonly
|
|
|
|
1AB97F3A000
|
unkown
|
page read and write
|
|
|
|
7FF514965000
|
unkown
|
page readonly
|
|
|
|
3109000
|
unkown
|
page read and write
|
|
|
|
7FF541BBF000
|
unkown
|
page readonly
|
|
|
|
35F432B000
|
unkown
|
page read and write
|
|
|
|
1AB976AC000
|
unkown
|
page read and write
|
|
|
|
7FF5141AE000
|
unkown
|
page readonly
|
|
|
|
3049000
|
unkown
|
page read and write
|
|
|
|
F7CFE7E000
|
unkown
|
page read and write
|
|
|
|
7FF584F41000
|
unkown
|
page readonly
|
|
|
|
2391CA6F000
|
unkown
|
page read and write
|
|
|
|
28A64E00000
|
unkown
|
page readonly
|
|
|
|
16CCAF20000
|
unkown
|
page readonly
|
|
|
|
9C4133E000
|
unkown
|
page read and write
|
|
|
|
1AB97F74000
|
unkown
|
page read and write
|
|
|
|
16CCCDE8000
|
unkown
|
page read and write
|
|
|
|
7FF54347B000
|
unkown
|
page readonly
|
|
|
|
302D000
|
unkown
|
page read and write
|
|
|
|
7FF599374000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8AF000
|
unkown
|
page readonly
|
|
|
|
16CCCD6B000
|
unkown
|
page read and write
|
|
|
|
26D21A90000
|
unkown
|
page read and write
|
|
|
|
7FF59AB81000
|
unkown
|
page readonly
|
|
|
|
26D20102000
|
unkown
|
page read and write
|
|
|
|
164EAD17000
|
unkown
|
page read and write
|
|
|
|
2264C050000
|
unkown
|
page read and write
|
|
|
|
1AB97CB0000
|
unkown
|
page read and write
|
|
|
|
7FF584F2E000
|
unkown
|
page readonly
|
|
|
|
7FF53ECF0000
|
unkown
|
page readonly
|
|
|
|
16CCE110000
|
unkown
|
page read and write
|
|
|
|
7FF55346B000
|
unkown
|
page readonly
|
|
|
|
7FF51485E000
|
unkown
|
page readonly
|
|
|
|
31E0000
|
unkown
|
page readonly
|
|
|
|
7FF59AE44000
|
unkown
|
page readonly
|
|
|
|
2B8B000
|
unkown
|
page read and write
|
|
|
|
1AB97800000
|
unkown
|
page readonly
|
|
|
|
32B0000
|
heap private
|
page read and write
|
|
|
|
7FF543520000
|
unkown
|
page readonly
|
|
|
|
28E32E80000
|
unkown
|
page read and write
|
|
|
|
7FF53ED9A000
|
unkown
|
page readonly
|
|
|
|
7FF553368000
|
unkown
|
page readonly
|
|
|
|
1AB98600000
|
unkown
|
page readonly
|
|
|
|
7FF584ECE000
|
unkown
|
page readonly
|
|
|
|
164E8A60000
|
heap private
|
page read and write
|
|
|
|
7FF59ADD9000
|
unkown
|
page readonly
|
|
|
|
164E8C29000
|
unkown
|
page read and write
|
|
|
|
7FF543346000
|
unkown
|
page readonly
|
|
|
|
26D20054000
|
unkown
|
page read and write
|
|
|
|
7FF584731000
|
unkown
|
page readonly
|
|
|
|
35F467E000
|
unkown
|
page read and write
|
|
|
|
7FF59F417000
|
unkown
|
page readonly
|
|
|
|
7FF514A4A000
|
unkown
|
page readonly
|
|
|
|
7FF5435F6000
|
unkown
|
page readonly
|
|
|
|
3C54FE000
|
unkown
|
page read and write
|
|
|
|
1F00FC02000
|
unkown
|
page read and write
|
|
|
|
F7CFF7E000
|
unkown
|
page read and write
|
|
|
|
16CCACD4000
|
unkown
|
page read and write
|
|
|
|
7FF53EE3D000
|
unkown
|
page readonly
|
|
|
|
7FF541F1F000
|
unkown
|
page readonly
|
|
|
|
164E8C73000
|
unkown
|
page read and write
|
|
|
|
3109000
|
unkown
|
page read and write
|
|
|
|
28E32E75000
|
heap private
|
page read and write
|
|
|
|
1AB976A3000
|
unkown
|
page read and write
|
|
|
|
7FF53EF69000
|
unkown
|
page readonly
|
|
|
|
164E8CC7000
|
unkown
|
page read and write
|
|
|
|
7FF541F61000
|
unkown
|
page readonly
|
|
|
|
7FF5435AC000
|
unkown
|
page readonly
|
|
|
|
7FF51494C000
|
unkown
|
page readonly
|
|
|
|
16CCCB10000
|
unkown
|
page readonly
|
|
|
|
2730CE02000
|
unkown
|
page read and write
|
|
|
|
2391CB02000
|
unkown
|
page read and write
|
|
|
|
16CCD002000
|
unkown
|
page read and write
|
|
|
|
16CCD042000
|
unkown
|
page read and write
|
|
|
|
164EAAA0000
|
unkown
|
page readonly
|
|
|
|
7FF59937A000
|
unkown
|
page readonly
|
|
|
|
310E000
|
unkown
|
page read and write
|
|
|
|
278A000
|
unkown
|
page readonly
|
|
|
|
35F477A000
|
unkown
|
page read and write
|
|
|
|
1A00BFB000
|
unkown
|
page read and write
|
|
|
|
4B50000
|
unkown
|
page read and write
|
|
|
|
885447B000
|
unkown
|
page read and write
|
|
|
|
7FF589DC6000
|
unkown
|
page readonly
|
|
|
|
9C41977000
|
unkown
|
page read and write
|
|
|
|
16CCAC3F000
|
unkown
|
page read and write
|
|
|
|
7FF5147B1000
|
unkown
|
page readonly
|
|
|
|
7FF5AFB80000
|
unkown
|
page readonly
|
|
|
|
164EAD88000
|
unkown
|
page read and write
|
|
|
|
7FF54335F000
|
unkown
|
page readonly
|
|
|
|
60784FE000
|
unkown
|
page read and write
|
|
|
|
164EAAC0000
|
unkown
|
page readonly
|
|
|
|
7FF584ECA000
|
unkown
|
page readonly
|
|
|
|
7FF5AFAC1000
|
unkown
|
page readonly
|
|
|
|
7FF553226000
|
unkown
|
page readonly
|
|
|
|
28A649B0000
|
heap private
|
page read and write
|
|
|
|
7FF541BBA000
|
unkown
|
page readonly
|
|
|
|
7FF552CC1000
|
unkown
|
page readonly
|
|
|
|
7FF552AFE000
|
unkown
|
page readonly
|
|
|
|
7FF58A1FA000
|
unkown
|
page readonly
|
|
|
|
2FC0000
|
unkown
|
page readonly
|
|
|
|
2782000
|
unkown
|
page readonly
|
|
|
|
1AB97590000
|
unkown
|
page read and write
|
|
|
|
7FF584ED5000
|
unkown
|
page readonly
|
|
|
|
7FF553363000
|
unkown
|
page readonly
|
|
|
|
885457F000
|
unkown
|
page read and write
|
|
|
|
6680000
|
unkown
|
page read and write
|
|
|
|
28E32E60000
|
unkown
|
page readonly
|
|
|
|
16CCABD0000
|
unkown
|
page readonly
|
|
|
|
1AB97F53000
|
unkown
|
page read and write
|
|
|
|
2730CCD0000
|
unkown
|
page readonly
|
|
|
|
16CCD000000
|
unkown
|
page read and write
|
|
|
|
644FF79000
|
unkown
|
page read and write
|
|
|
|
16CCE410000
|
unkown
|
page read and write
|
|
|
|
7FF5433B4000
|
unkown
|
page readonly
|
|
|
|
7FF53EEDA000
|
unkown
|
page readonly
|
|
|
|
28E32C9F000
|
unkown
|
page read and write
|
|
|
|
16CCC6C0000
|
unkown
|
page read and write
|
|
|
|
164EAD48000
|
unkown
|
page read and write
|
|
|
|
19E0C03F000
|
unkown
|
page read and write
|
|
|
|
7FF553137000
|
unkown
|
page readonly
|
|
|
|
2264C04F000
|
unkown
|
page read and write
|
|
|
|
1AB97570000
|
unkown
|
page readonly
|
|
|
|
16CCAD1E000
|
unkown
|
page read and write
|
|
|
|
302A000
|
unkown
|
page read and write
|
|
|
|
1EBF4B40000
|
unkown
|
page readonly
|
|
|
|
7FF584F49000
|
unkown
|
page readonly
|
|
|
|
7FF53EEFB000
|
unkown
|
page readonly
|
|
|
|
7FF53EF58000
|
unkown
|
page readonly
|
|
|
|
1AB97F40000
|
unkown
|
page read and write
|
|
|
|
164EA5B0000
|
unkown
|
page read and write
|
|
|
|
7FF552C54000
|
unkown
|
page readonly
|
|
|
|
7FF53EDF8000
|
unkown
|
page readonly
|
|
|
|
1A00CF9000
|
unkown
|
page read and write
|
|
|
|
7FF552CEA000
|
unkown
|
page readonly
|
|
|
|
7FF59935C000
|
unkown
|
page readonly
|
|
|
|
16CCAD1F000
|
unkown
|
page read and write
|
|
|
|
7FF541EEE000
|
unkown
|
page readonly
|
|
|
|
60786FF000
|
unkown
|
page read and write
|
|
|
|
7FF552B6C000
|
unkown
|
page readonly
|
|
|
|
7FF59AD6B000
|
unkown
|
page readonly
|
|
|
|
7FF5149DD000
|
unkown
|
page readonly
|
|
|
|
7FF584EDB000
|
unkown
|
page readonly
|
|
|
|
1EBF4800000
|
unkown
|
page readonly
|
|
|
|
16CCD082000
|
unkown
|
page read and write
|
|
|
|
7FF53EBC9000
|
unkown
|
page readonly
|
|
|
|
7FF53EAB0000
|
unkown
|
page readonly
|
|
|
|
644F5DB000
|
unkown
|
page read and write
|
|
|
|
7FF552AA3000
|
unkown
|
page readonly
|
|
|
|
7FF59F832000
|
unkown
|
page readonly
|
|
|
|
7FF59F40F000
|
unkown
|
page readonly
|
|
|
|
9A9EC7F000
|
unkown
|
page read and write
|
|
|
|
2E6A000
|
unkown
|
page read and write
|
|
|
|
6078579000
|
unkown
|
page read and write
|
|
|
|
2391CA6F000
|
unkown
|
page read and write
|
|
|
|
302D000
|
unkown
|
page read and write
|
|
|
|
1AB97F85000
|
unkown
|
page read and write
|
|
|
|
1AB97F4D000
|
unkown
|
page read and write
|
|
|
|
7FF53E7F1000
|
unkown
|
page readonly
|
|
|
|
19E0C113000
|
unkown
|
page read and write
|
|
|
|
7FF53EEEA000
|
unkown
|
page readonly
|
|
|
|
2391CA6B000
|
unkown
|
page read and write
|
|
|
|
310D000
|
unkown
|
page read and write
|
|
|
|
1AB97F3F000
|
unkown
|
page read and write
|
|
|
|
2391CA13000
|
unkown
|
page read and write
|
|
|
|
16CCACC4000
|
unkown
|
page read and write
|
|
|
|
28A64C4B000
|
unkown
|
page read and write
|
|
|
|
885467B000
|
unkown
|
page read and write
|
|
|
|
7FF5534BE000
|
unkown
|
page readonly
|
|
|
|
1AB97F58000
|
unkown
|
page read and write
|
|
|
|
28A64D08000
|
unkown
|
page read and write
|
|
|
|
7FF54357A000
|
unkown
|
page readonly
|
|
|
|
2FE0000
|
unkown
|
page read and write
|
|
|
|
7FF584E1D000
|
unkown
|
page readonly
|
|
|
|
4A60000
|
unkown
|
page readonly
|
|
|
|
6078679000
|
unkown
|
page read and write
|
|
|
|
7FF59AE51000
|
unkown
|
page readonly
|
|
|
|
7FF541EEA000
|
unkown
|
page readonly
|
|
|
|
7FF59F7B6000
|
unkown
|
page readonly
|
|
|
|
164E8CA3000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown
|
page read and write
|
|
|
|
7FF53EE43000
|
unkown
|
page readonly
|
|
|
|
1EBF3E29000
|
unkown
|
page read and write
|
|
|
|
19E0C102000
|
unkown
|
page read and write
|
|
|
|
7FF5149AA000
|
unkown
|
page readonly
|
|
|
|
1A00DFA000
|
unkown
|
page read and write
|
|
|
|
7FF5AFA39000
|
unkown
|
page readonly
|
|
|
|
9C417FB000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCD2000
|
unkown
|
page readonly
|
|
|
|
7FF541BAC000
|
unkown
|
page readonly
|
|
|
|
1AB97F51000
|
unkown
|
page read and write
|
|
|
|
1EBF3D50000
|
unkown
|
page readonly
|
|
|
|
28E32C97000
|
unkown
|
page read and write
|
|
|
|
F458DDF000
|
unkown
|
page read and write
|
|
|
|
16CCE310000
|
unkown
|
page read and write
|
|
|
|
3105000
|
unkown
|
page read and write
|
|
|
|
2264C046000
|
unkown
|
page read and write
|
|
|
|
7FF514960000
|
unkown
|
page readonly
|
|
|
|
7FF599335000
|
unkown
|
page readonly
|
|
|
|
7FF553341000
|
unkown
|
page readonly
|
|
|
|
16CCAC59000
|
unkown
|
page read and write
|
|
|
|
7FF5435AF000
|
unkown
|
page readonly
|
|
|
|
7FF53ED26000
|
unkown
|
page readonly
|
|
|
|
16CCAD60000
|
unkown
|
page read and write
|
|
|
|
1AB975E0000
|
unkown
|
page readonly
|
|
|
|
7FF54351C000
|
unkown
|
page readonly
|
|
|
|
3037000
|
unkown
|
page read and write
|
|
|
|
7FF58A22C000
|
unkown
|
page readonly
|
|
|
|
7FF53EFD4000
|
unkown
|
page readonly
|
|
|
|
7FF54356C000
|
unkown
|
page readonly
|
|
|
|
302D000
|
unkown
|
page read and write
|
|
|
|
7FF5532B9000
|
unkown
|
page readonly
|
|
|
|
16CCCF83000
|
unkown
|
page read and write
|
|
|
|
4EDE000
|
unkown
|
page read and write
|
|
|
|
607877F000
|
unkown
|
page read and write
|
|
|
|
7FF541FDA000
|
unkown
|
page readonly
|
|
|
|
7FF584EBC000
|
unkown
|
page readonly
|
|
|
|
2391CB00000
|
unkown
|
page read and write
|
|
|
|
7FF59AC68000
|
unkown
|
page readonly
|
|
|
|
7FF53EE54000
|
unkown
|
page readonly
|
|
|
|
7F6E579000
|
unkown
|
page read and write
|
|
|
|
1AB97F53000
|
unkown
|
page read and write
|
|
|
|
7FF553544000
|
unkown
|
page readonly
|
|
|
|
266E000
|
unkown
|
page readonly
|
|
|
|
2264C04D000
|
unkown
|
page read and write
|
|
|
|
7FF5534D9000
|
unkown
|
page readonly
|
|
|
|
7FF584A32000
|
unkown
|
page readonly
|
|
|
|
7FF59ADB4000
|
unkown
|
page readonly
|
|
|
|
28A65400000
|
unkown
|
page readonly
|
|
|
|
1EBF3E4B000
|
unkown
|
page read and write
|
|
|
|
2730CE29000
|
unkown
|
page read and write
|
|
|
|
1AB97F56000
|
unkown
|
page read and write
|
|
|
|
1AB97F5A000
|
unkown
|
page read and write
|
|
|
|
1F00FD02000
|
unkown
|
page read and write
|
|
|
|
1A00C7A000
|
unkown
|
page read and write
|
|
|
|
1AB97F43000
|
unkown
|
page read and write
|
|
|
|
2264C02C000
|
unkown
|
page read and write
|
|
|
|
7FF543672000
|
unkown
|
page readonly
|
|
|
|
7FF5534A4000
|
unkown
|
page readonly
|
|
|
|
9A9ED7F000
|
unkown
|
page read and write
|
|
|
|
1AB97F94000
|
unkown
|
page read and write
|
|
|
|
16CCCF43000
|
unkown
|
page read and write
|
|
|
|
16CCE110000
|
unkown
|
page read and write
|
|
|
|
7FF5148C4000
|
unkown
|
page readonly
|
|
|
|
7FF541EF5000
|
unkown
|
page readonly
|
|
|
|
35F497C000
|
unkown
|
page read and write
|
|
|
|
27E3000
|
unkown
|
page readonly
|
|
|
|
16CCACC6000
|
unkown
|
page read and write
|
|
|
|
7FF53E738000
|
unkown
|
page readonly
|
|
|
|
16CCAC5D000
|
unkown
|
page read and write
|
|
|
|
644F87F000
|
unkown
|
page read and write
|
|
|
|
2730CE13000
|
unkown
|
page read and write
|
|
|
|
7FF51498C000
|
unkown
|
page readonly
|
|
|
|
7FF59A5BD000
|
unkown
|
page readonly
|
|
|
|
16CCCBB0000
|
unkown
|
page readonly
|
|
|
|
7FF53EDD1000
|
unkown
|
page readonly
|
|
|
|
2975000
|
unkown
|
page readonly
|
|
|
|
2391CA6F000
|
unkown
|
page read and write
|
|
|
|
16CCE410000
|
unkown
|
page read and write
|
|
|
|
1AB97F88000
|
unkown
|
page read and write
|
|
|
|
7FF541F5E000
|
unkown
|
page readonly
|
|
|
|
7FF51495E000
|
unkown
|
page readonly
|
|
|
|
164EAA90000
|
unkown
|
page read and write
|
|
|
|
1AB97FBC000
|
unkown
|
page read and write
|
|
|
|
7FF553551000
|
unkown
|
page readonly
|
|
|
|
16CCCD3E000
|
unkown
|
page read and write
|
|
|
|
164EAA90000
|
unkown
|
page read and write
|
|
|
|
164E8D02000
|
unkown
|
page read and write
|
|
|
|
7FF5527C0000
|
unkown
|
page readonly
|
|
|
|
28D3000
|
unkown
|
page readonly
|
|
|
|
7FF58A164000
|
unkown
|
page readonly
|
|
|
|
7FF541DEB000
|
unkown
|
page readonly
|
|
|
|
26D21B90000
|
unkown
|
page readonly
|
|
|
|
1A0147D000
|
unkown
|
page read and write
|
|
|
|
2992000
|
unkown
|
page readonly
|
|
|
|
1AB97629000
|
unkown
|
page read and write
|
|
|
|
7FF5435F1000
|
unkown
|
page readonly
|
|
|
|
7FF543554000
|
unkown
|
page readonly
|
|
|
|
1AB97F5D000
|
unkown
|
page read and write
|
|
|
|
7FF59F599000
|
unkown
|
page readonly
|
|
|
|
1AB97F6C000
|
unkown
|
page read and write
|
|
|
|
2391CA40000
|
unkown
|
page read and write
|
|
|
|
7FF584E72000
|
unkown
|
page readonly
|
|
|
|
7FF541EFB000
|
unkown
|
page readonly
|
|
|
|
2391CA6E000
|
unkown
|
page read and write
|
|
|
|
16CCCEC7000
|
unkown
|
page read and write
|
|
|
|
2F40000
|
unkown
|
page readonly
|
|
|
|
164EAC02000
|
unkown
|
page read and write
|
|
|
|
7FF55335B000
|
unkown
|
page readonly
|
|
|
|
259E000
|
unkown
|
page readonly
|
|
|
|
7FF53EFDA000
|
unkown
|
page readonly
|
|
|
|
1EBF3F00000
|
unkown
|
page read and write
|
|
|
|
7FF54356A000
|
unkown
|
page readonly
|
|
|
|
16CCD042000
|
unkown
|
page read and write
|
|
|
|
9A9EEFE000
|
unkown
|
page read and write
|
|
|
|
E1C2E7B000
|
unkown
|
page read and write
|
|
|
|
3105000
|
unkown
|
page read and write
|
|
|
|
7FF514A52000
|
unkown
|
page readonly
|
|
|
|
7FF5AFADB000
|
unkown
|
page readonly
|
|
|
|
7FF584F38000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC3E000
|
unkown
|
page readonly
|
|
|
|
7FF584C96000
|
unkown
|
page readonly
|
|
|
|
1AB98454000
|
unkown
|
page read and write
|
|
|
|
1A00A7A000
|
unkown
|
page read and write
|
|
|
|
16CCCD00000
|
unkown
|
page read and write
|
|
|
|
1AB97680000
|
unkown
|
page read and write
|
|
|
|
1AB97F43000
|
unkown
|
page read and write
|
|
|
|
7FF553400000
|
unkown
|
page readonly
|
|
|
|
7FF514639000
|
unkown
|
page readonly
|
|
There are 1347 hidden memdumps, click here to show them.